@crosshands/cli 0.1.4

package/dist/local-client.js

@@ -0,0 +1,131 @@
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { chmod, lstat, mkdir, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { isAbsolute, join, resolve } from 'node:path';
+import { CONTRACT_VERSIONS, createComputerError } from '@crosshands/contract';
+import { LocalControlClient, brokerEndpoint } from '@crosshands/runtime';
+export function localClientPaths() {
+    const uid = process.getuid?.();
+    const osIdentity = process.env.CROSSHANDS_OS_IDENTITY ??
+        (uid === undefined
+            ? `user:${process.env.USERNAME ?? process.env.USER ?? 'unknown'}`
+            : `uid:${uid}`);
+    const graphicalSessionId = process.env.CROSSHANDS_GRAPHICAL_SESSION_ID ??
+        process.env.XDG_SESSION_ID ??
+        process.env.SECURITYSESSIONID ??
+        process.env.SESSIONNAME ??
+        `interactive:${osIdentity}`;
+    const sessionKey = createHash('sha256').update(graphicalSessionId).digest('hex').slice(0, 12);
+    const runtimeDirectory = process.env.CROSSHANDS_RUNTIME_DIR ?? defaultRuntimeDirectory(sessionKey);
+    const identity = { osIdentity, graphicalSessionId };
+    return {
+        identity,
+        runtimeDirectory,
+        tokenFile: join(runtimeDirectory, 'control.token'),
+        endpoint: brokerEndpoint({
+            platform: process.platform,
+            osIdentity,
+            graphicalSessionId,
+            ...(process.platform === 'win32' ? {} : { runtimeDirectory })
+        })
+    };
+}
+function defaultRuntimeDirectory(sessionKey) {
+    if (process.platform === 'darwin') {
+        return join(homedir(), 'Library', 'Caches', 'CrossHands', 'runtime', sessionKey);
+    }
+    if (process.platform === 'linux') {
+        const xdgRuntimeDirectory = process.env.XDG_RUNTIME_DIR;
+        if (xdgRuntimeDirectory === undefined || xdgRuntimeDirectory.length === 0) {
+            throw createComputerError('session_unavailable', 'XDG_RUNTIME_DIR is required for a protected CrossHands broker endpoint');
+        }
+        return join(xdgRuntimeDirectory, 'crosshands', sessionKey);
+    }
+    const localAppData = process.env.LOCALAPPDATA;
+    if (localAppData === undefined || localAppData.length === 0) {
+        throw createComputerError('session_unavailable', 'LOCALAPPDATA is required for CrossHands runtime state on Windows');
+    }
+    return join(localAppData, 'CrossHands', 'runtime', sessionKey);
+}
+async function prepareRuntimeDirectory(path) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const info = await lstat(path);
+    if (!info.isDirectory() || info.isSymbolicLink())
+        throw createComputerError('provider_unavailable', 'CrossHands runtime path is unsafe');
+    if (process.getuid !== undefined && info.uid !== process.getuid())
+        throw createComputerError('provider_unavailable', 'CrossHands runtime path has another owner');
+    await chmod(path, 0o700);
+}
+async function readSecureToken(path) {
+    const info = await lstat(path);
+    if (!info.isFile() || info.isSymbolicLink() || (info.mode & 0o077) !== 0)
+        throw createComputerError('provider_unavailable', 'CrossHands broker token file is unsafe');
+    if (process.getuid !== undefined && info.uid !== process.getuid())
+        throw createComputerError('provider_unavailable', 'CrossHands broker token has another owner');
+    return (await readFile(path, 'utf8')).trim();
+}
+async function connect(paths) {
+    const token = paths.endpoint.transport === 'unix' ? await readSecureToken(paths.tokenFile) : '';
+    return LocalControlClient.connect({
+        endpoint: paths.endpoint,
+        token,
+        versions: CONTRACT_VERSIONS,
+        identity: paths.identity
+    });
+}
+function defaultSpawnBroker(entrypoint) {
+    const child = spawn(process.execPath, [entrypoint, 'broker'], {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+        env: process.env
+    });
+    child.unref();
+}
+function brokerIsAbsent(cause) {
+    if (cause === null || typeof cause !== 'object')
+        return false;
+    const code = cause.code;
+    return code === 'ENOENT' || code === 'ECONNREFUSED';
+}
+export async function createProductionBrokerClient(options = {}) {
+    const paths = options.paths ?? localClientPaths();
+    await prepareRuntimeDirectory(paths.runtimeDirectory);
+    try {
+        const control = await connect(paths);
+        return controlAdapter(control);
+    }
+    catch (cause) {
+        if (!brokerIsAbsent(cause))
+            throw cause;
+        const rawEntrypoint = options.entrypoint ?? process.argv[1];
+        if (rawEntrypoint === undefined)
+            throw createComputerError('provider_unavailable', 'Cannot locate the installed CrossHands entrypoint');
+        const entrypoint = isAbsolute(rawEntrypoint) ? rawEntrypoint : resolve(rawEntrypoint);
+        await (options.spawnBroker ?? defaultSpawnBroker)(entrypoint);
+    }
+    const deadline = Date.now() + (options.readinessMs ?? 2_500);
+    let lastError;
+    while (Date.now() < deadline) {
+        try {
+            // oxlint-disable-next-line no-await-in-loop -- readiness requires ordered retries.
+            const control = await connect(paths);
+            return controlAdapter(control);
+        }
+        catch (cause) {
+            lastError = cause;
+            // Polling is bounded and does not expose token or request data.
+            // oxlint-disable-next-line no-await-in-loop -- readiness requires ordered retries.
+            await new Promise((resolveDelay) => setTimeout(resolveDelay, 50));
+        }
+    }
+    throw createComputerError('provider_unavailable', 'CrossHands broker did not become ready; run `crosshands computer doctor --json`', { cause: lastError instanceof Error ? lastError.message : 'unknown' });
+}
+function controlAdapter(control) {
+    return {
+        request: async (operation, input) => control.request({ operation, input }, { deadlineMs: 30_000 }),
+        close: () => control.close()
+    };
+}
+//# sourceMappingURL=local-client.js.map

package/dist/local-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-client.js","sourceRoot":"","sources":["../src/local-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAErD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAA6B,MAAM,qBAAqB,CAAA;AAWnG,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,CAAC,GAAG,KAAK,SAAS;YAChB,CAAC,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE;YACjE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACnB,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,+BAA+B;QAC3C,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,eAAe,UAAU,EAAE,CAAA;IAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7F,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAA;IAClG,MAAM,QAAQ,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAA;IACnD,OAAO;QACL,QAAQ;QACR,gBAAgB;QAChB,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC;QAClD,QAAQ,EAAE,cAAc,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU;YACV,kBAAkB;YAClB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;SAC9D,CAAC;KACH,CAAA;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QACvD,IAAI,mBAAmB,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,mBAAmB,CACvB,qBAAqB,EACrB,wEAAwE,CACzE,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC7C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,mBAAmB,CACvB,qBAAqB,EACrB,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAChE,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACjD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAC9C,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAA;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAC/D,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,2CAA2C,CAAC,CAAA;IAChG,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACtE,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAA;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAC/D,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,2CAA2C,CAAC,CAAA;IAChG,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAuB;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/F,OAAO,kBAAkB,CAAC,OAAO,CAAC;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK;QACL,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAA;AACJ,CAAC;AASD,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;QAC5D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAA;IACF,KAAK,CAAC,KAAK,EAAE,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAA;IAC/C,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,EAAE,CAAA;IACjD,MAAM,uBAAuB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,aAAa,KAAK,SAAS;YAC7B,MAAM,mBAAmB,CACvB,sBAAsB,EACtB,mDAAmD,CACpD,CAAA;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACrF,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,UAAU,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,CAAA;IAC5D,IAAI,SAAkB,CAAA;IACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,mFAAmF;YACnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACpC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAA;YACjB,gEAAgE;YAChE,mFAAmF;YACnF,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAA;QACzE,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,CACvB,sBAAsB,EACtB,iFAAiF,EACjF,EAAE,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CACtE,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA2B;IACjD,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAClC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC/D,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;KAC7B,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@crosshands/cli",
+  "version": "0.1.4",
+  "description": "Agent-agnostic local computer-use CLI",
+  "license": "MIT",
+  "bin": {
+    "crosshands": "dist/bin.js"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "development": "./src/index.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@crosshands/contract": "0.1.4",
+    "@crosshands/runtime": "0.1.4"
+  },
+  "devDependencies": {
+    "@types/node": "24.10.1",
+    "typescript": "5.9.3",
+    "vitest": "4.1.5"
+  },
+  "optionalDependencies": {
+    "@crosshands/platform-darwin": "0.1.4",
+    "@crosshands/platform-linux": "0.1.4",
+    "@crosshands/platform-windows": "0.1.4"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run test"
+  }
+}

package/src/bin.ts

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+
+import { stdin, stderr, stdout } from 'node:process'
+import { StringDecoder } from 'node:string_decoder'
+
+import { runBrokerHost } from './broker-host.js'
+import { runCli, type CliIo } from './index.js'
+import { createProductionBrokerClient } from './local-client.js'
+
+async function readStdin(): Promise<string> {
+  const decoder = new StringDecoder('utf8')
+  const maximumLength = 1_000_001
+  let value = ''
+  for await (const chunk of stdin) {
+    const decoded = decoder.write(Buffer.from(chunk))
+    if (value.length < maximumLength) {
+      value += decoded.slice(0, maximumLength - value.length)
+    }
+  }
+  const final = decoder.end()
+  if (value.length < maximumLength) value += final.slice(0, maximumLength - value.length)
+  return value
+}
+
+async function main(): Promise<number> {
+  const argv = process.argv.slice(2)
+  if (argv[0] === 'broker') {
+    await runBrokerHost()
+    return 0
+  }
+  const io: CliIo = {
+    stdin: readStdin,
+    stdout: (value) => stdout.write(value),
+    stderr: (value) => stderr.write(value)
+  }
+  const client = await createProductionBrokerClient()
+  return runCli(argv, io, client)
+}
+
+main()
+  .then((code) => {
+    process.exitCode = code
+  })
+  .catch((cause: unknown) => {
+    stdout.write(
+      `${JSON.stringify({
+        error: {
+          code: 'provider_unavailable',
+          message: cause instanceof Error ? cause.message : 'CrossHands failed to start',
+          retry: false,
+          remediation: 'run_doctor'
+        }
+      })}\n`
+    )
+    process.exitCode = 3
+  })

package/src/broker-host.ts

@@ -0,0 +1,132 @@
+import {
+  CONTRACT_VERSIONS,
+  createComputerError,
+  parseOperationInput,
+  type ComputerOperationName,
+  type ComputerProvider,
+  type ReferenceBindings
+} from '@crosshands/contract'
+import {
+  LocalBroker,
+  LocalControlServer,
+  type BrokerEndpoint,
+  type LocalControlIdentity,
+  type LocalControlRequest,
+  type StableAppIdentity,
+  type TargetInspection
+} from '@crosshands/runtime'
+
+import { localClientPaths } from './local-client.js'
+
+type ProviderModule = {
+  packageVersion: string
+  createProvider(): ComputerProvider
+  createControlServer?: (options: {
+    endpoint: BrokerEndpoint
+    identity: LocalControlIdentity
+    handler: (request: LocalControlRequest) => Promise<unknown>
+  }) => Promise<{ start(): Promise<void>; close(): Promise<void> }>
+  inspectTarget?: (
+    operation: ComputerOperationName,
+    input: unknown
+  ) => Promise<{ bindings: ReferenceBindings; appIdentity: StableAppIdentity } | null>
+}
+
+const PLATFORM_PROVIDER_PACKAGES: Readonly<Partial<Record<NodeJS.Platform, string>>> = {
+  darwin: '@crosshands/platform-darwin',
+  linux: '@crosshands/platform-linux',
+  win32: '@crosshands/platform-windows'
+}
+
+export function platformProviderPackage(platform: NodeJS.Platform = process.platform): string {
+  const packageName = PLATFORM_PROVIDER_PACKAGES[platform]
+  if (packageName === undefined) {
+    throw new Error(
+      `CrossHands has no provider package for ${platform}; run doctor for the supported platform matrix`
+    )
+  }
+  return packageName
+}
+
+export async function loadProviderModule(
+  platform: NodeJS.Platform = process.platform,
+  importer: (specifier: string) => Promise<unknown> = (specifier) => import(specifier)
+): Promise<ProviderModule> {
+  const packageName = platformProviderPackage(platform)
+  let loaded: Partial<ProviderModule>
+  try {
+    loaded = (await importer(packageName)) as Partial<ProviderModule>
+  } catch (cause) {
+    throw new Error(
+      `The matching CrossHands payload ${packageName}@${CONTRACT_VERSIONS.product} is not installed`,
+      { cause }
+    )
+  }
+  if (typeof loaded.createProvider !== 'function')
+    throw new Error('CrossHands provider module does not export createProvider()')
+  if (loaded.packageVersion !== CONTRACT_VERSIONS.product) {
+    throw new Error(
+      `CrossHands payload version mismatch: main package is ${CONTRACT_VERSIONS.product}, ${packageName} is ${loaded.packageVersion ?? 'unknown'}`
+    )
+  }
+  return loaded as ProviderModule
+}
+
+export async function runBrokerHost(): Promise<void> {
+  const providerModule = await loadProviderModule()
+  const paths = localClientPaths()
+  const peer = { ...paths.identity, verified: true, local: true }
+  const broker = new LocalBroker({
+    identity: peer,
+    providerFactory: () => providerModule.createProvider(),
+    ...(providerModule.inspectTarget === undefined
+      ? {}
+      : {
+          inspectTarget: (
+            operation: ComputerOperationName,
+            input: unknown
+          ): Promise<TargetInspection | null> => providerModule.inspectTarget!(operation, input)
+        })
+  })
+  await broker.connect({ peer, versions: CONTRACT_VERSIONS })
+  const handler = async ({ payload, deadlineAt }: LocalControlRequest): Promise<unknown> => {
+    if (payload === null || typeof payload !== 'object') throw new Error('Invalid broker request')
+    const record = payload as Record<string, unknown>
+    if (typeof record.operation !== 'string') throw new Error('Missing operation')
+    const operation = record.operation as ComputerOperationName
+    let input: unknown
+    try {
+      input = parseOperationInput(operation, record.input)
+    } catch (cause) {
+      if (cause instanceof Error && cause.name === 'ZodError') {
+        throw createComputerError('invalid_argument', 'Invalid input for the selected operation')
+      }
+      throw cause
+    }
+    return broker.request({ operation, input, deadlineMs: Math.max(1, deadlineAt - Date.now()) })
+  }
+  const server =
+    paths.endpoint.transport === 'named-pipe'
+      ? await (providerModule.createControlServer?.({
+          endpoint: paths.endpoint,
+          identity: paths.identity,
+          handler
+        }) ??
+          Promise.reject(
+            new Error('The Windows payload has no native DACL and peer-token control relay')
+          ))
+      : new LocalControlServer({
+          endpoint: paths.endpoint,
+          runtimeDirectory: paths.runtimeDirectory,
+          tokenFile: paths.tokenFile,
+          identity: paths.identity,
+          handler
+        })
+  await server.start()
+  await new Promise<void>((resolve) => {
+    const stop = (): void => resolve()
+    process.once('SIGINT', stop)
+    process.once('SIGTERM', stop)
+  })
+  await server.close()
+}