@kal-elsam/kairo-runtime 0.6.0 → 0.7.0

package/README.md

@@ -301,6 +301,30 @@ Launches `pi --mode json --no-session` (optional `--model`). `read-only` maps to
 to `--approve`). Custom `PI_CODING_AGENT_DIR` blocks config writes in 0.6.0 but does
 not block runtime. Kairo does not install Pi or assert subscription/entitlement.
 
+### Bounded review (Codex / Pi)
+
+Read-only native review against a Git snapshot. Never mutates the repo, never
+auto-fixes, and never persists prompts, diffs, or transcripts. Receipts land under
+`~/.harness/reviews/<reviewId>/receipt.json` (secret-free). Only Codex and Pi are
+`reviewCompatible` in 0.7.0; Cursor / Claude / OpenCode report `false` until audited.
+
+```bash
+kairo review --agent codex
+kairo review --agent pi --base main
+kairo review --agent codex --commit <sha>
+kairo review --agent codex --fail-on high --json
+kairo reviews list [--limit N] [--json]
+kairo reviews show <reviewId> [--json]
+```
+
+`--agent` is always required. Scope is working-tree by default; use `--base` or
+`--commit` (mutually exclusive). Private paths need `--include-private` plus TTY
+confirm or `--yes`/`--confirm`. Exit codes: `0` ok, `1` severity threshold,
+`2` operational/stale/invalid/cancel.
+
+Cockpit: **Runs → Reviews** lists receipts and opens a read-only detail view
+(no launch from Cockpit in v1).
+
 Primary governance flow:
 
 ```txt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kal-elsam/kairo-runtime",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Kairo Runtime — local agent operating system for Codex, Cursor, Claude, Pi, Engram, and Graphify.",
   "type": "module",
   "homepage": "https://github.com/Kal-elSam/harness#readme",

package/scripts/cockpit-smoke.mjs

@@ -26,7 +26,7 @@ const root = join(dirname(fileURLToPath(import.meta.url)), "..");
 const require = createRequire(import.meta.url);
 const pkg = require(join(root, "package.json"));
 
-assert.equal(pkg.version, "0.6.0");
+assert.equal(pkg.version, "0.7.0");
 assert.ok(pkg.dependencies["ansi-escapes"]);
 
 assert.equal(resolveLayoutMode({ columns: 120, rows: 40 }), LAYOUT_MODES.WIDE);

package/src/cli.js

@@ -38,6 +38,7 @@ import { runWorkspaceDetect, runWorkspaceDoctor, runWorkspaceInit, runWorkspaceU
 import { runOrchestratorDiagnostics, runOrchestratorShell } from "./global/orchestrator.js";
 import { runIntelligenceCli } from "./global/intelligence-cli.js";
 import { runGlobalRun, runGlobalRuns } from "./global/runtime/run-cli.js";
+import { runGlobalReview, runGlobalReviews } from "./global/runtime/review/review-cli.js";
 import {
   LEGACY_PACKAGE_NAME,
   PACKAGE_NAME,
@@ -111,6 +112,12 @@ export async function runCli(argv) {
     case "runs":
       await runGlobalRuns(optionsWithPolicy, packageManifest);
       return;
+    case "review":
+      await runGlobalReview(optionsWithPolicy, packageManifest);
+      return;
+    case "reviews":
+      await runGlobalReviews(optionsWithPolicy, packageManifest);
+      return;
     case "intelligence":
       await runIntelligenceCli(optionsWithPolicy, packageManifest);
       return;
@@ -371,6 +378,11 @@ export function parseArgs(argv) {
     intelligencePaths: [],
     runsAction: null,
     runId: null,
+    reviewId: null,
+    reviewsAction: null,
+    base: null,
+    commit: null,
+    failOn: null,
     agent: null,
     task: null,
     model: null,
@@ -401,6 +413,10 @@ export function parseArgs(argv) {
     parseRunsAction(args, options);
   }
 
+  if (command === "reviews") {
+    parseReviewsAction(args, options);
+  }
+
   if (command === "intelligence") {
     parseIntelligenceAction(args, options);
   }
@@ -495,6 +511,15 @@ export function parseArgs(argv) {
     else if (arg.startsWith("--timeout=")) options.timeoutMs = parsePositiveInt(arg.slice("--timeout=".length), "timeout") * 1000;
     else if (arg === "--include-private") options.includePrivate = true;
     else if (arg === "--cloud-consent") options.cloudConsent = true;
+    else if (arg === "--base") options.base = requireFlagValue("--base", args[++index]);
+    else if (arg.startsWith("--base=")) options.base = requireFlagValue("--base", arg.slice("--base=".length));
+    else if (arg === "--commit") options.commit = requireFlagValue("--commit", args[++index]);
+    else if (arg.startsWith("--commit=")) {
+      options.commit = requireFlagValue("--commit", arg.slice("--commit=".length));
+    } else if (arg === "--fail-on") options.failOn = requireFlagValue("--fail-on", args[++index]);
+    else if (arg.startsWith("--fail-on=")) {
+      options.failOn = requireFlagValue("--fail-on", arg.slice("--fail-on=".length));
+    }
     else if (arg === "--help" || arg === "-h") options.help = true;
     else if (arg === "--version" || arg === "-v") options.version = true;
     else throw new Error(`Unknown option "${arg}".`);
@@ -624,6 +649,26 @@ function parseRunsAction(args, options) {
   }
 }
 
+function parseReviewsAction(args, options) {
+  const action = args[0];
+  if (!action || action.startsWith("-")) {
+    options.reviewsAction = "list";
+    return;
+  }
+  if (!new Set(["list", "show"]).has(action)) {
+    throw new Error(`Unknown reviews action "${action}". Use list or show.`);
+  }
+  args.shift();
+  options.reviewsAction = action;
+  if (action === "show") {
+    const reviewId = args[0];
+    if (!reviewId || reviewId.startsWith("-")) {
+      throw new Error(`Missing review id. Use: ${formatCliCommand("reviews show <reviewId>")}`);
+    }
+    options.reviewId = args.shift();
+  }
+}
+
 function parseIntelligenceAction(args, options) {
   const action = args[0];
   if (!action || action.startsWith("-")) {
@@ -657,6 +702,13 @@ function parsePositiveInt(value, label) {
   return parsed;
 }
 
+function requireFlagValue(flag, value) {
+  if (value == null || value === "" || String(value).startsWith("-")) {
+    throw new Error(`Missing value for ${flag}.`);
+  }
+  return value;
+}
+
 function parseScope(value) {
   if (!SCOPES.has(value)) {
     throw new Error(`Invalid scope "${value}". Use agent-global or workspace.`);
@@ -673,6 +725,8 @@ function normalizeCommand(command) {
   if (command === "orchestrator") return "orchestrator";
   if (command === "run") return "run";
   if (command === "runs") return "runs";
+  if (command === "review") return "review";
+  if (command === "reviews") return "reviews";
   if (command === "intelligence" || command === "intel") return "intelligence";
   if (command === "setup") return "setup";
   if (command === "status") return "status";
@@ -747,6 +801,9 @@ Usage:
   ${cli} runs list [--json] [--limit <n>] [--active-only]
   ${cli} runs show <runId> [--json] [--limit <n>] [--follow]
   ${cli} runs stop <runId> [--json]
+  ${cli} review --agent codex|pi [--base <ref>|--commit <sha>] [--model <name>] [--include-private] [--yes|--confirm] [--fail-on high|medium|low] [--json]
+  ${cli} reviews list [--limit <n>] [--json]
+  ${cli} reviews show <reviewId> [--json]
   ${cli} orchestrator [--json]          Read-only agent capability diagnostics
   ${cli} intelligence [status|models|context|route|ask] [--json]
   ${cli} intelligence models --backend opencode-go|opencode-zen|opencode
@@ -795,6 +852,8 @@ Commands:
              Tab switches region only when content is interactive (runs/launch).
   run        Launch a managed agent run with local audit trail.
   runs       List, inspect, or cancel agent runs under ~/.harness/runs/.
+  review     Bounded read-only review via Codex or Pi; receipts under ~/.harness/reviews/.
+  reviews    List or show prior review receipts (secret-free).
   orchestrator  Read-only capability registry diagnostics (--json supported).
   intelligence  Harness Engineering layer: backends, context packs, routing, budgets.
              Local-first (Ollama). Cloud only with --cloud-consent.

package/src/global/ink/cockpit-controller.js

@@ -144,6 +144,16 @@ export function reduceCockpitUi(state, action) {
           returnView: null
         };
       }
+      if (state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+        const back = ORCHESTRATOR_VIEWS.REVIEWS;
+        return {
+          ...state,
+          view: back,
+          listIndex: 0,
+          region: defaultRegionForView(back, state.layoutMode),
+          returnView: null
+        };
+      }
       if (isRunsChildView(state.view)) {
         return goRunsHub(state);
       }

package/src/global/ink/cockpit-focus.js

@@ -18,6 +18,8 @@ const CONTENT_INTERACTIVE_VIEWS = new Set([
   ORCHESTRATOR_VIEWS.ACTIVE_RUNS,
   ORCHESTRATOR_VIEWS.RECENT_RUNS,
   ORCHESTRATOR_VIEWS.RUN_DETAIL,
+  ORCHESTRATOR_VIEWS.REVIEWS,
+  ORCHESTRATOR_VIEWS.REVIEW_DETAIL,
   ORCHESTRATOR_VIEWS.LAUNCH,
   ORCHESTRATOR_VIEWS.ACTIVITY
 ]);
@@ -41,7 +43,11 @@ export function defaultRegionForView(view, layoutMode = LAYOUT_MODES.COMPACT) {
 
 export function interactiveRegionsFor(state) {
   const regions = regionsForLayout(state.layoutMode);
-  if (!isContentInteractiveView(state.view) || state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) {
+  if (
+    !isContentInteractiveView(state.view)
+    || state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+  ) {
     return regions.filter((region) => region === COCKPIT_REGIONS.NAV);
   }
   return regions.filter(
@@ -51,7 +57,12 @@ export function interactiveRegionsFor(state) {
 
 export function canTabBetweenRegions(state) {
   if (!isContentInteractiveView(state.view)) return false;
-  if (state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) return false;
+  if (
+    state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+  ) {
+    return false;
+  }
   return interactiveRegionsFor(state).length >= 2;
 }
 
@@ -70,7 +81,11 @@ export function routeCockpitKey(state, keyAction) {
         return { type: "arrow", direction: keyAction.direction };
       }
       if (state.region === COCKPIT_REGIONS.CONTENT && isContentInteractiveView(state.view)) {
-        if (state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL || state.view === ORCHESTRATOR_VIEWS.LAUNCH) {
+        if (
+          state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+          || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+          || state.view === ORCHESTRATOR_VIEWS.LAUNCH
+        ) {
           return null;
         }
         return {

package/src/global/ink/cockpit-models.js

@@ -250,6 +250,11 @@ export function buildFooterModel({
     return { text: parts.join(` ${glyphs.bullet} `) };
   }
 
+  if (view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+    parts.push("Esc Back");
+    return { text: parts.join(` ${glyphs.bullet} `) };
+  }
+
   if (view === ORCHESTRATOR_VIEWS.CHANGES) {
     return { text: buildChangesFooterParts(changesPhase).join(` ${glyphs.bullet} `) };
   }
@@ -263,6 +268,7 @@ export function buildFooterModel({
   const showTab = view === ORCHESTRATOR_VIEWS.RUNS
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
+    || view === ORCHESTRATOR_VIEWS.REVIEWS
     || view === ORCHESTRATOR_VIEWS.LAUNCH
     || view === ORCHESTRATOR_VIEWS.ACTIVITY;
   if (showTab) {
@@ -280,7 +286,8 @@ export function buildFooterModel({
     || region === COCKPIT_REGIONS.NAV
     || view === ORCHESTRATOR_VIEWS.RUNS
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
-    || view === ORCHESTRATOR_VIEWS.RECENT_RUNS) {
+    || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
+    || view === ORCHESTRATOR_VIEWS.REVIEWS) {
     parts.push("Enter Open");
   }
   if (view !== ORCHESTRATOR_VIEWS.LAUNCH) {

package/src/global/ink/cockpit-reviews.js

@@ -0,0 +1,62 @@
+/** Read-only Cockpit helpers for review receipts under ~/.harness/reviews/. */
+
+export function countFindingsBySeverity(findings = []) {
+  const counts = { high: 0, medium: 0, low: 0 };
+  for (const finding of findings) {
+    const severity = String(finding?.severity ?? "").toLowerCase();
+    if (counts[severity] != null) counts[severity] += 1;
+  }
+  return counts;
+}
+
+export function selectReviewFromList(receipts = [], listIndex = 0) {
+  if (!Array.isArray(receipts) || receipts.length === 0) return null;
+  const index = Math.min(Math.max(0, listIndex), receipts.length - 1);
+  return receipts[index] ?? null;
+}
+
+export function formatReviewListLines(receipts = []) {
+  if (!Array.isArray(receipts) || receipts.length === 0) {
+    return ["No review receipts yet. Run kairo review --agent codex|pi."];
+  }
+  return receipts.map((receipt) => {
+    const counts = countFindingsBySeverity(receipt.findings);
+    const findingTotal = (receipt.findings ?? []).length;
+    const created = String(receipt.createdAt ?? "").slice(0, 19).replace("T", " ");
+    return `${receipt.reviewId}  ${String(receipt.state).padEnd(10)}  ${String(receipt.agentId).padEnd(6)}  ${findingTotal}f (h${counts.high}/m${counts.medium}/l${counts.low})  ${created}`;
+  });
+}
+
+export function formatReviewDetailLines(receipt) {
+  if (!receipt) return ["Review receipt not found."];
+  const counts = countFindingsBySeverity(receipt.findings);
+  const snapshot = receipt.snapshot ?? {};
+  const totals = snapshot.totals ?? {};
+  const lines = [
+    `Id: ${receipt.reviewId}`,
+    `Agent: ${receipt.agentId}${receipt.model ? ` · model ${receipt.model}` : ""}`,
+    `State: ${receipt.state}`,
+    `Created: ${receipt.createdAt ?? "n/a"}`,
+    `Findings: ${(receipt.findings ?? []).length} (high ${counts.high}, medium ${counts.medium}, low ${counts.low})`,
+    `Snapshot: ${snapshot.mode ?? "n/a"} · files ${totals.fileCount ?? 0} · fingerprint ${String(snapshot.fingerprint ?? "").slice(0, 12) || "n/a"}`
+  ];
+  if ((receipt.warnings ?? []).length > 0) {
+    lines.push(`Warnings: ${receipt.warnings.length}`);
+  }
+  const findings = receipt.findings ?? [];
+  if (findings.length === 0) {
+    lines.push("", "No findings recorded.");
+    return lines;
+  }
+  lines.push("", "Findings (read-only):");
+  for (const finding of findings.slice(0, 20)) {
+    const loc = finding.line != null ? `:${finding.line}` : "";
+    lines.push(
+      `  [${String(finding.severity).toUpperCase()}] ${finding.path ?? "?"}${loc} — ${finding.title ?? "untitled"}`
+    );
+  }
+  if (findings.length > 20) {
+    lines.push(`  … ${findings.length - 20} more (use kairo reviews show ${receipt.reviewId})`);
+  }
+  return lines;
+}

package/src/global/ink/cockpit-runs.js

@@ -13,6 +13,12 @@ export const RUNS_HUB_ITEMS = [
     view: ORCHESTRATOR_VIEWS.RECENT_RUNS,
     description: "Review completed and failed run outcomes."
   },
+  {
+    id: "reviews",
+    label: "Reviews",
+    view: ORCHESTRATOR_VIEWS.REVIEWS,
+    description: "Browse secret-free bounded-review receipts (read-only)."
+  },
   {
     id: "launch",
     label: "New run",
@@ -27,13 +33,16 @@ export function isRunsBranchView(view) {
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
     || view === ORCHESTRATOR_VIEWS.LAUNCH
-    || view === ORCHESTRATOR_VIEWS.RUN_DETAIL;
+    || view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || view === ORCHESTRATOR_VIEWS.REVIEWS
+    || view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL;
 }
 
 export function isRunsChildView(view) {
   return view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
-    || view === ORCHESTRATOR_VIEWS.LAUNCH;
+    || view === ORCHESTRATOR_VIEWS.LAUNCH
+    || view === ORCHESTRATOR_VIEWS.REVIEWS;
 }
 
 export function resolveRunsHubItem(listIndex = 0, items = RUNS_HUB_ITEMS) {

package/src/global/ink/cockpit-views.js

@@ -14,6 +14,7 @@ import {
 import { windowLinesForLayout } from "./cockpit-models.js";
 import { LAYOUT_MODES } from "./layout.js";
 import { formatRunsHubLines, RUNS_HUB_ITEMS } from "./cockpit-runs.js";
+import { formatReviewDetailLines, formatReviewListLines } from "./cockpit-reviews.js";
 import { formatChangesActionLines } from "./cockpit-changes.js";
 import { formatRecoveryLines } from "./cockpit-recovery.js";
 
@@ -74,6 +75,8 @@ export function renderCockpitView({
   layoutMode = LAYOUT_MODES.COMPACT,
   selectedRun,
   selectedEvents,
+  reviews = [],
+  selectedReview = null,
   changesAction = null,
   recoveryAction = null,
   colorEnabled = true
@@ -112,7 +115,7 @@ export function renderCockpitView({
         formatRunsHubLines(RUNS_HUB_ITEMS),
         listIndex,
         colorEnabled,
-        "Choose Active runs, History, or New run."
+        "Choose Active runs, History, Reviews, or New run."
       );
     case ORCHESTRATOR_VIEWS.ACTIVE_RUNS:
       return listBlock(
@@ -136,6 +139,14 @@ export function renderCockpitView({
         colorEnabled,
         "Open Runs after governance is healthy."
       );
+    case ORCHESTRATOR_VIEWS.REVIEWS:
+      return listBlock(
+        "Reviews",
+        formatReviewListLines(reviews),
+        listIndex,
+        colorEnabled,
+        "Receipts are read-only. Launch reviews via kairo review --agent codex|pi."
+      );
     case ORCHESTRATOR_VIEWS.LAUNCH:
       if (launchableAgents.length === 0) {
         return React.createElement(CockpitEmptyState, {
@@ -165,6 +176,12 @@ export function renderCockpitView({
         formatRunDetailLines(selectedRun, selectedEvents)
           .map((line) => React.createElement(Text, { key: line }, line))
       );
+    case ORCHESTRATOR_VIEWS.REVIEW_DETAIL:
+      return React.createElement(Box, { flexDirection: "column" },
+        React.createElement(Text, { bold: true }, "Review detail"),
+        formatReviewDetailLines(selectedReview)
+          .map((line) => React.createElement(Text, { key: line }, line))
+      );
     case ORCHESTRATOR_VIEWS.DIAGNOSTICS:
       return governanceList(
         "System health",
@@ -178,7 +195,7 @@ export function renderCockpitView({
         React.createElement(Text, null, "Kairo keeps IDEs and agents aligned with project architecture and workflows."),
         React.createElement(Text, null, "Primary flow: scan → findings → preview → confirm → apply → re-scan."),
         React.createElement(Text, null, "↑↓ navigate · Enter open · Esc back/exit · R refresh/retry · ? help"),
-        React.createElement(Text, null, "Runs are secondary after setup and repairs.")
+        React.createElement(Text, null, "Runs are secondary after setup and repairs. Reviews are read-only receipts.")
       );
     default: {
       const _exhaustive = view;

package/src/global/ink/orchestrator-app.js

@@ -25,6 +25,7 @@ import {
 import { buildControlCenterModel } from "./cockpit-control-center.js";
 import { resolveEnterNavIntent } from "./cockpit-enter.js";
 import { resolveRunsHubItem, RUNS_HUB_ITEMS } from "./cockpit-runs.js";
+import { selectReviewFromList } from "./cockpit-reviews.js";
 import { resolveProjectReadiness } from "../dashboard-guidance.js";
 import { CONTROL_PLANE_HEALTH } from "../control-plane-snapshot.js";
 import { CockpitShell } from "./cockpit/primitives.js";
@@ -142,6 +143,7 @@ export function OrchestratorApp({
         return;
       }
       data.setSelectedRun(null);
+      data.setSelectedReview(null);
       data.resetLaunchWizard();
       dispatch({ type: "escape" });
       return;
@@ -158,9 +160,11 @@ export function OrchestratorApp({
         ? (data.dashboard?.activeRuns ?? []).length
         : ui.view === ORCHESTRATOR_VIEWS.RECENT_RUNS
           ? (data.dashboard?.recentRuns ?? []).length
-          : ui.view === ORCHESTRATOR_VIEWS.ACTIVITY
-            ? listRecoverySnapshots(data.snapshot).length
-            : 0;
+          : ui.view === ORCHESTRATOR_VIEWS.REVIEWS
+            ? (data.reviews ?? []).length
+            : ui.view === ORCHESTRATOR_VIEWS.ACTIVITY
+              ? listRecoverySnapshots(data.snapshot).length
+              : 0;
 
     let routed = null;
     if (key.tab) {
@@ -229,6 +233,9 @@ export function OrchestratorApp({
       if (hubItem.action === "launch") {
         data.resetLaunchWizard();
       }
+      if (hubItem.view === ORCHESTRATOR_VIEWS.REVIEWS) {
+        data.loadReviews().catch(() => {});
+      }
       dispatch({
         type: "set-view",
         view: hubItem.view,
@@ -247,6 +254,13 @@ export function OrchestratorApp({
       return;
     }
 
+    if (ui.region === COCKPIT_REGIONS.CONTENT
+      && ui.view === ORCHESTRATOR_VIEWS.REVIEWS
+      && key.return) {
+      data.openReviewDetail(selectReviewFromList(data.reviews ?? [], ui.listIndex), dispatch);
+      return;
+    }
+
     if (ui.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) {
       if (inputKey.toLowerCase() === "c" && isRunCancellable(data.selectedRun)) {
         data.handleCancelRun();
@@ -304,6 +318,10 @@ export function OrchestratorApp({
     }
 
     if (inputKey.toLowerCase() === "r" && ui.view !== ORCHESTRATOR_VIEWS.LAUNCH) {
+      if (ui.view === ORCHESTRATOR_VIEWS.REVIEWS || ui.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+        data.loadReviews().catch(() => {});
+        return;
+      }
       data.reload().catch(() => {});
     }
   });
@@ -406,6 +424,8 @@ export function OrchestratorApp({
         launchableAgents: data.launchableAgents,
         selectedRun: data.selectedRun,
         selectedEvents: data.selectedEvents,
+        reviews: data.reviews,
+        selectedReview: data.selectedReview,
         changesAction: data.changesAction,
         recoveryAction: data.recoveryAction,
         controlCenter,

package/src/global/ink/orchestrator-state.js

@@ -22,6 +22,8 @@ export const ORCHESTRATOR_VIEWS = {
   ACTIVE_RUNS: "active-runs",
   RECENT_RUNS: "recent-runs",
   RUN_DETAIL: "run-detail",
+  REVIEWS: "reviews",
+  REVIEW_DETAIL: "review-detail",
   PROVIDERS: "providers",
   LAUNCH: "launch",
   DIAGNOSTICS: "diagnostics",

package/src/global/ink/use-orchestrator-data.js

@@ -33,6 +33,8 @@ import {
   listRecoverySnapshots,
   reduceRecoveryAction
 } from "./cockpit-recovery.js";
+import { listReviewReceipts } from "../runtime/review/review-receipts.js";
+import { assertReceiptSecretFree } from "../runtime/review/review-validate.js";
 
 export function useOrchestratorData({
   homeDir,
@@ -50,6 +52,8 @@ export function useOrchestratorData({
   const [snapshot, setSnapshot] = useState(null);
   const [selectedRun, setSelectedRun] = useState(null);
   const [selectedEvents, setSelectedEvents] = useState([]);
+  const [reviews, setReviews] = useState([]);
+  const [selectedReview, setSelectedReview] = useState(null);
   const [statusMessage, setStatusMessage] = useState(null);
   const [launchAgentIndex, setLaunchAgentIndex] = useState(0);
   const [launchStep, setLaunchStep] = useState(LAUNCH_WIZARD_STEPS.AGENT);
@@ -124,6 +128,27 @@ export function useOrchestratorData({
     });
   };
 
+  const loadReviews = async () => {
+    const receipts = (await listReviewReceipts({ homeDir, limit: 50 }))
+      .map((receipt) => assertReceiptSecretFree(receipt));
+    setReviews(receipts);
+    if (selectedReview) {
+      const refreshed = receipts.find((entry) => entry.reviewId === selectedReview.reviewId) ?? null;
+      setSelectedReview(refreshed);
+    }
+    return receipts;
+  };
+
+  const openReviewDetail = (receipt, dispatch) => {
+    if (!receipt) return;
+    setSelectedReview(assertReceiptSecretFree(receipt));
+    dispatch({
+      type: "set-view",
+      view: ORCHESTRATOR_VIEWS.REVIEW_DETAIL,
+      returnView: ORCHESTRATOR_VIEWS.REVIEWS
+    });
+  };
+
   const handleLaunch = async (draft, profile, dispatch) => {
     if (!draft.agentId || !draft.task.trim()) {
       setError("Agent and task are required.");
@@ -353,6 +378,9 @@ export function useOrchestratorData({
     selectedRun,
     setSelectedRun,
     selectedEvents,
+    reviews,
+    selectedReview,
+    setSelectedReview,
     statusMessage,
     launchAgentIndex,
     setLaunchAgentIndex,
@@ -369,6 +397,8 @@ export function useOrchestratorData({
     reload,
     resetLaunchWizard,
     openRunDetail,
+    loadReviews,
+    openReviewDetail,
     handleLaunch,
     handleCancelRun,
     previewChanges,

package/src/global/paths.js

@@ -18,6 +18,7 @@ export function harnessHomePaths(homeDir) {
     profilePath: join(root, "profile.json"),
     historyPath: join(root, "history.jsonl"),
     runsDir: join(root, "runs"),
+    reviewsDir: join(root, "reviews"),
     coreDir: join(root, "core"),
     backupsDir: join(root, "backups")
   };

package/src/global/runtime/execution-adapters/codex.js

@@ -71,7 +71,8 @@ export default createExecutionAdapter({
     tokens: true,
     diff: false,
     cancel: true,
-    transcript: true
+    transcript: true,
+    reviewCompatible: true
   },
   buildLaunch: buildCodexLaunch,
   parseEventLine: parseCodexEventLine

package/src/global/runtime/execution-adapters/create-execution-adapter.js

@@ -20,6 +20,7 @@ export function createExecutionAdapter({
       diff: false,
       cancel: true,
       transcript: false,
+      reviewCompatible: false,
       ...capabilities
     },
 

package/src/global/runtime/execution-adapters/index.js

@@ -26,6 +26,7 @@ export function inspectExecutionAdapters(context = {}) {
     label: adapter.label,
     executable: adapter.executable,
     capabilities: adapter.capabilities,
+    reviewCompatible: Boolean(adapter.capabilities?.reviewCompatible),
     ...adapter.availability(context)
   }));
 }

package/src/global/runtime/execution-adapters/pi.js

@@ -175,7 +175,8 @@ export default createExecutionAdapter({
     tokens: true,
     diff: false,
     cancel: true,
-    transcript: true
+    transcript: true,
+    reviewCompatible: true
   },
   checkAvailability: checkPiAvailability,
   buildLaunch: buildPiLaunch,

package/src/global/runtime/review/index.js

@@ -0,0 +1,37 @@
+export {
+  REVIEW_SCOPE_MODES, REVIEW_SEVERITIES, REVIEW_STATES, REVIEW_EXIT_CODES, REVIEW_AGENTS,
+  REVIEW_LIMITS, REVIEW_SNAPSHOT_ERROR_CODES, ReviewSnapshotError, resolveReviewScopeMode,
+  createFindingId, canonicalFingerprint, isReviewPrivatePath, isBinaryContent,
+  assertReviewPathSafe, assertWithinReviewLimits, requirePrivateConsent
+} from "./review-types.js";
+export {
+  resolveReviewSnapshot, fingerprintReviewSnapshot, detectReviewSnapshotDrift,
+  readReviewRegularFile
+} from "./review-git.js";
+export {
+  REVIEW_PATCH_ERROR_CODES, filterDiffToAdmittedPaths, buildScopedReviewPatch
+} from "./review-patch.js";
+export {
+  REVIEW_VALIDATION_ERROR_CODES, ReviewValidationError,
+  validateReviewOutput, assertReceiptSecretFree
+} from "./review-validate.js";
+export {
+  assertSafeReviewId, createReviewId, reviewPaths,
+  buildReviewReceipt, saveReviewReceipt, loadReviewReceipt, listReviewReceipts
+} from "./review-receipts.js";
+export {
+  REVIEW_EXEC_ERROR_CODES, REVIEW_EXEC_LIMITS, ReviewExecError,
+  runBoundedProcess, assertBoundedProcessOk
+} from "./review-exec.js";
+export {
+  REVIEW_CODEX_ERROR_CODES, buildCodexReviewArgs, buildCodexCliEnv,
+  buildCodexReviewPrompt, parseCodexReviewJsonl, runCodexReview
+} from "./review-codex.js";
+export {
+  REVIEW_PI_ERROR_CODES, buildPiReviewArgs, buildPiCliEnv,
+  buildPiReviewPrompt, buildPiReviewStdin, parsePiReviewJsonl, runPiReview
+} from "./review-pi.js";
+export {
+  REVIEW_RUNNER_ERROR_CODES, ReviewRunnerError,
+  resolveReviewAgent, resolveReviewExitCode, runReview
+} from "./review-runner.js";