Connect the device that does the work.

Enrollment controls what a client can observe and report. Provider execution and sign-in stay with the selected PC or worker.

Owner-provisioned enrollment

1. Select the participant and destination device. Approve the exact working-folder roots and providers.
2. Install the matched client build and owner-private device config/token file. A reporting credential is scoped to its device; it is separate from owner access.
3. Sign in to the native provider on that device through its supported flow. Resolve its installed executable and version.
4. Run one discovery pass, then check the accepted server receipt and coverage before enabling watch.

There is no supported public devices enroll wizard in the released preview. Enrollment is currently an owner setup step. Do not reuse the owner API credential as a device token.

Central discovery commands

These commands require a central-client build and an existing private enrollment config. Replace ABSOLUTE_PRIVATE_CONFIG_PATH with that config’s path; use the exact installed executable.

delegator discover once --config ABSOLUTE_PRIVATE_CONFIG_PATH
delegator discover watch --config ABSOLUTE_PRIVATE_CONFIG_PATH

Stop a foreground watch with Ctrl+C in its owning terminal. Only one collector can hold the same config. Watch uses bounded passes and backoff; it makes no model call per pass. A discovered session is metadata, not an adopted execution channel.

Windows native companion

delegator-native-ui.exe native-ui --config ABSOLUTE_PRIVATE_CONFIG_PATH

Where the matching companion is installed, default launch waits for Start watching. Stop cancels this window’s work; Retry once runs one bounded pass; Refresh redraws local state. Open Workspace opens the private site without putting a credential in its URL. Exit stops the window’s own collector. If another watcher owns the config, use that watcher’s controls.

On the existing managed worker, the owner’s installed same-user helper provides status, start and stop. That helper is an installation-specific operator control, not a universal service or an automatic startup promise.

Inspect without uploading

The original preview supports an explicit, bounded local inventory:

delegator sessions list --provider codex --executable ABSOLUTE_CODEX_PATH --limit 20
delegator sessions list --provider claude --executable ABSOLUTE_CLAUDE_PATH --limit 20

This returns local whitelisted metadata to the caller; it does not register or upload those rows. Provider/version coverage differs. Read scope and partial warnings. Central enrolled discovery has a separate, broader scoped catalog path.

Understand the connection indicators

• Accepted recently: the server received a report. It does not prove a model is working.
• Partial coverage: only a bounded or supported portion was observed. A missing row is not proof a session ended.
• Unknown model or activity: the native source did not supply reliable evidence.
• Reporting revoked: later uploads are blocked. Revocation does not stop a running local process.

Editor support

Current scoped adapters and experiments cover Codex and Claude Code. Features depend on the actual installed native version. Antigravity and broader editor connections are product intentions; no accepted installed integration is claimed here.