Sift Conductor

Sift Conductor is the optional local execution plane for Sift. One npm command opens a local browser app for connecting Codex CLI or Claude Code, managing shared work, and observing agent progress and results. Sift remains the canonical source of project, task, run, artifact, and approval state.

Provider credentials and working-directory paths stay on the local machine.

Requirements

• Node.js 20 or newer.
• A Sift workspace and a short-lived computer pairing code.
• Codex CLI 0.100.0 or newer and/or Claude Code 2.1.0 or newer.
• The selected provider already installed or installed through its official setup flow.

Start The Local App

Run the exact version you want to use:

npx -y @sift-wiki/[email protected] start

Conductor opens a loopback-only browser app. Enter the pairing code from Sift, add an agent from Agents, and start the local runtime. Closing the browser does not stop active work; keep the terminal process open and press Ctrl+C to stop Conductor.

See the complete quickstart, provider setup, and troubleshooting guide.

Headless CLI

Persistent headless installation:

npm install --global @sift-wiki/[email protected]
sift-conductor --help

Pair and run without the browser interface:

sift-conductor pair --api https://api.sift.wiki --code SC-... --display-name "My computer"
sift-conductor run --adapters ./agents.json

Example provider configuration:

{
  "adapters": [
    {
      "type": "codex",
      "localKey": "product-codex",
      "displayName": "Product engineer",
      "workspacePath": "/absolute/path/to/project",
      "accessProfile": "workspace",
      "enabled": true
    },
    {
      "type": "claude-code",
      "localKey": "review-claude",
      "displayName": "Code reviewer",
      "workspacePath": "/absolute/path/to/project",
      "accessProfile": "inspect",
      "enabled": true
    }
  ]
}

Use a stable localKey. Do not place API keys, OAuth tokens, or the Sift Conductor credential in this file.

For a supervised migration, do not substitute @latest. Record the exact version, provider readiness, paired workspace/brain, advertised profile hash, and protocol capabilities in a secret-free installation receipt before reading the source system. Packaged desktop installers are not a supported distribution path yet because DMG/EXE signing and notarization remain open release work.

Runtime Contract

For each claimed job Conductor:

1. checks out task-linked work and opens a run-scoped local bridge;
2. renders the Sift wake envelope into a bounded provider prompt;
3. invokes the provider noninteractively in the selected workspace;
4. normalizes allowlisted provider actions into concise progress events;
5. validates one structured done, in_review, or blocked result;
6. settles the Sift task/run/job and closes the run-scoped bridge.

The generic fake, process, and HTTP adapters remain available. Codex and Claude Code do not require a user-authored shell wrapper.

Security

• Conductor never stores Codex or Claude Code credentials.
• The long-lived Sift machine credential is never passed to an agent process.
• Provider processes receive only an expiring run-scoped bridge token.
• Local workspace paths are not advertised to Sift or exposed to browser code.
• Raw prompts, hidden reasoning, full provider streams, and environment dumps are not sent to Sift.
• The initial desktop wizard does not offer dangerous bypass/full-machine permission modes.

License

Apache-2.0. Paperclip-derived behavioral references and notices are recorded in THIRD_PARTY_NOTICES.md.