Prepare Diffraction
Use Node.js 24.x, pnpm 11, an authenticated Codex CLI, and GitHub CLI authentication for PR lookup. From the Diffraction checkout:Prepare the workspace
http://localhost:3000. Local dashboard access requires
WorkOS authentication. Contributors need access to the configured staging
workspace and must follow the repository’s local authentication setup.
Credentials go in the ignored web/.env.development.local; public identity
configuration remains in the auth slice’s versioned config.
Review a pull request
Prepare a trusted application checkout containing diffraction.yml. For PR mode, that checkout must be clean and match the pull request’s exact head SHA. In another terminal, replace the example path and PR number:Run a local review
http://localhost:3000/reviews to follow real progress, then inspect target
recordings, screenshots, traces, and findings. Runs are stored under
.diffraction/local-reviews/, which is ignored by Git.
An exit code of 1 can mean a recorded flow failed or findings were found. Inspect
the run evidence and command output before treating it as a tool failure.
Local execution boundaries
Local execution is for trusted checkouts. It runs application commands on your machine and does not provide the production sandbox boundary for hostile PR code. This mode uses Codex planning and deterministic analysis. It does not call OpenRouter, perform Stagehand exploration or multimodal analysis, or publish GitHub results. Local artifact routes are limited to loopback development access. To preview this documentation site separately, runpnpm docs:dev from the
Diffraction root and open http://localhost:3001.