@kal-elsam/kairo-runtime 0.6.0 → 0.8.0

package/src/cli.js

@@ -38,6 +38,8 @@ import { runWorkspaceDetect, runWorkspaceDoctor, runWorkspaceInit, runWorkspaceU
 import { runOrchestratorDiagnostics, runOrchestratorShell } from "./global/orchestrator.js";
 import { runIntelligenceCli } from "./global/intelligence-cli.js";
 import { runGlobalRun, runGlobalRuns } from "./global/runtime/run-cli.js";
+import { runGlobalReview, runGlobalReviews } from "./global/runtime/review/review-cli.js";
+import { normalizeRunStrategy } from "./global/runtime/run-strategy.js";
 import {
   LEGACY_PACKAGE_NAME,
   PACKAGE_NAME,
@@ -111,6 +113,12 @@ export async function runCli(argv) {
     case "runs":
       await runGlobalRuns(optionsWithPolicy, packageManifest);
       return;
+    case "review":
+      await runGlobalReview(optionsWithPolicy, packageManifest);
+      return;
+    case "reviews":
+      await runGlobalReviews(optionsWithPolicy, packageManifest);
+      return;
     case "intelligence":
       await runIntelligenceCli(optionsWithPolicy, packageManifest);
       return;
@@ -371,9 +379,15 @@ export function parseArgs(argv) {
     intelligencePaths: [],
     runsAction: null,
     runId: null,
+    reviewId: null,
+    reviewsAction: null,
+    base: null,
+    commit: null,
+    failOn: null,
     agent: null,
     task: null,
     model: null,
+    strategy: "direct",
     intelligenceBackend: null,
     permissions: null,
     captureTranscript: false,
@@ -401,6 +415,10 @@ export function parseArgs(argv) {
     parseRunsAction(args, options);
   }
 
+  if (command === "reviews") {
+    parseReviewsAction(args, options);
+  }
+
   if (command === "intelligence") {
     parseIntelligenceAction(args, options);
   }
@@ -483,6 +501,13 @@ export function parseArgs(argv) {
     else if (arg.startsWith("--agent=")) options.agent = arg.slice("--agent=".length);
     else if (arg === "--model") options.model = args[++index];
     else if (arg.startsWith("--model=")) options.model = arg.slice("--model=".length);
+    else if (arg === "--strategy") {
+      options.strategy = normalizeRunStrategy(requireFlagValue("--strategy", args[++index]));
+    } else if (arg.startsWith("--strategy=")) {
+      options.strategy = normalizeRunStrategy(
+        requireFlagValue("--strategy", arg.slice("--strategy=".length))
+      );
+    }
     else if (arg === "--backend") options.intelligenceBackend = args[++index] ?? "";
     else if (arg.startsWith("--backend=")) options.intelligenceBackend = arg.slice("--backend=".length);
     else if (arg === "--permissions") options.permissions = parsePathList(args[++index]);
@@ -495,6 +520,15 @@ export function parseArgs(argv) {
     else if (arg.startsWith("--timeout=")) options.timeoutMs = parsePositiveInt(arg.slice("--timeout=".length), "timeout") * 1000;
     else if (arg === "--include-private") options.includePrivate = true;
     else if (arg === "--cloud-consent") options.cloudConsent = true;
+    else if (arg === "--base") options.base = requireFlagValue("--base", args[++index]);
+    else if (arg.startsWith("--base=")) options.base = requireFlagValue("--base", arg.slice("--base=".length));
+    else if (arg === "--commit") options.commit = requireFlagValue("--commit", args[++index]);
+    else if (arg.startsWith("--commit=")) {
+      options.commit = requireFlagValue("--commit", arg.slice("--commit=".length));
+    } else if (arg === "--fail-on") options.failOn = requireFlagValue("--fail-on", args[++index]);
+    else if (arg.startsWith("--fail-on=")) {
+      options.failOn = requireFlagValue("--fail-on", arg.slice("--fail-on=".length));
+    }
     else if (arg === "--help" || arg === "-h") options.help = true;
     else if (arg === "--version" || arg === "-v") options.version = true;
     else throw new Error(`Unknown option "${arg}".`);
@@ -624,6 +658,26 @@ function parseRunsAction(args, options) {
   }
 }
 
+function parseReviewsAction(args, options) {
+  const action = args[0];
+  if (!action || action.startsWith("-")) {
+    options.reviewsAction = "list";
+    return;
+  }
+  if (!new Set(["list", "show"]).has(action)) {
+    throw new Error(`Unknown reviews action "${action}". Use list or show.`);
+  }
+  args.shift();
+  options.reviewsAction = action;
+  if (action === "show") {
+    const reviewId = args[0];
+    if (!reviewId || reviewId.startsWith("-")) {
+      throw new Error(`Missing review id. Use: ${formatCliCommand("reviews show <reviewId>")}`);
+    }
+    options.reviewId = args.shift();
+  }
+}
+
 function parseIntelligenceAction(args, options) {
   const action = args[0];
   if (!action || action.startsWith("-")) {
@@ -657,6 +711,13 @@ function parsePositiveInt(value, label) {
   return parsed;
 }
 
+function requireFlagValue(flag, value) {
+  if (value == null || value === "" || String(value).startsWith("-")) {
+    throw new Error(`Missing value for ${flag}.`);
+  }
+  return value;
+}
+
 function parseScope(value) {
   if (!SCOPES.has(value)) {
     throw new Error(`Invalid scope "${value}". Use agent-global or workspace.`);
@@ -673,6 +734,8 @@ function normalizeCommand(command) {
   if (command === "orchestrator") return "orchestrator";
   if (command === "run") return "run";
   if (command === "runs") return "runs";
+  if (command === "review") return "review";
+  if (command === "reviews") return "reviews";
   if (command === "intelligence" || command === "intel") return "intelligence";
   if (command === "setup") return "setup";
   if (command === "status") return "status";
@@ -743,10 +806,13 @@ Usage:
   ${cli} --dry-run                      Setup dry-run (scriptable)
   ${cli} --version
   ${cli} shell                          Operations cockpit (TTY)
-  ${cli} run --agent <id> --task "..." [--model <name>] [--cwd <dir>] [--permissions force] [--capture-transcript] [--follow] [--no-wait] [--json]
+  ${cli} run --agent <id> --task "..." [--strategy direct|orchestrated] [--model <name>] [--cwd <dir>] [--permissions force] [--capture-transcript] [--follow] [--no-wait] [--json]
   ${cli} runs list [--json] [--limit <n>] [--active-only]
   ${cli} runs show <runId> [--json] [--limit <n>] [--follow]
   ${cli} runs stop <runId> [--json]
+  ${cli} review --agent codex|pi [--base <ref>|--commit <sha>] [--model <name>] [--include-private] [--yes|--confirm] [--fail-on high|medium|low] [--json]
+  ${cli} reviews list [--limit <n>] [--json]
+  ${cli} reviews show <reviewId> [--json]
   ${cli} orchestrator [--json]          Read-only agent capability diagnostics
   ${cli} intelligence [status|models|context|route|ask] [--json]
   ${cli} intelligence models --backend opencode-go|opencode-zen|opencode
@@ -795,6 +861,8 @@ Commands:
              Tab switches region only when content is interactive (runs/launch).
   run        Launch a managed agent run with local audit trail.
   runs       List, inspect, or cancel agent runs under ~/.harness/runs/.
+  review     Bounded read-only review via Codex or Pi; receipts under ~/.harness/reviews/.
+  reviews    List or show prior review receipts (secret-free).
   orchestrator  Read-only capability registry diagnostics (--json supported).
   intelligence  Harness Engineering layer: backends, context packs, routing, budgets.
              Local-first (Ollama). Cloud only with --cloud-consent.

package/src/global/adapters/pi.js

@@ -7,7 +7,7 @@ export const PI_CODING_AGENT_DIR_ENV = "PI_CODING_AGENT_DIR";
 
 const CUSTOM_DIR_MESSAGE =
   `Pi config writes are unsupported when ${PI_CODING_AGENT_DIR_ENV} points away from `
-  + `~/${PI_DEFAULT_ROOT_DIR} (out of scope for Kairo 0.6.0). `
+  + `~/${PI_DEFAULT_ROOT_DIR} (out of scope for Kairo managed config). `
   + `Unset ${PI_CODING_AGENT_DIR_ENV} to manage the default directory; runtime launches remain available.`;
 
 /** True when PI_CODING_AGENT_DIR is set to a non-default absolute/relative path. */

package/src/global/ink/cockpit-controller.js

@@ -144,6 +144,16 @@ export function reduceCockpitUi(state, action) {
           returnView: null
         };
       }
+      if (state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+        const back = ORCHESTRATOR_VIEWS.REVIEWS;
+        return {
+          ...state,
+          view: back,
+          listIndex: 0,
+          region: defaultRegionForView(back, state.layoutMode),
+          returnView: null
+        };
+      }
       if (isRunsChildView(state.view)) {
         return goRunsHub(state);
       }

package/src/global/ink/cockpit-focus.js

@@ -18,6 +18,8 @@ const CONTENT_INTERACTIVE_VIEWS = new Set([
   ORCHESTRATOR_VIEWS.ACTIVE_RUNS,
   ORCHESTRATOR_VIEWS.RECENT_RUNS,
   ORCHESTRATOR_VIEWS.RUN_DETAIL,
+  ORCHESTRATOR_VIEWS.REVIEWS,
+  ORCHESTRATOR_VIEWS.REVIEW_DETAIL,
   ORCHESTRATOR_VIEWS.LAUNCH,
   ORCHESTRATOR_VIEWS.ACTIVITY
 ]);
@@ -41,7 +43,11 @@ export function defaultRegionForView(view, layoutMode = LAYOUT_MODES.COMPACT) {
 
 export function interactiveRegionsFor(state) {
   const regions = regionsForLayout(state.layoutMode);
-  if (!isContentInteractiveView(state.view) || state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) {
+  if (
+    !isContentInteractiveView(state.view)
+    || state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+  ) {
     return regions.filter((region) => region === COCKPIT_REGIONS.NAV);
   }
   return regions.filter(
@@ -51,7 +57,12 @@ export function interactiveRegionsFor(state) {
 
 export function canTabBetweenRegions(state) {
   if (!isContentInteractiveView(state.view)) return false;
-  if (state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) return false;
+  if (
+    state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+  ) {
+    return false;
+  }
   return interactiveRegionsFor(state).length >= 2;
 }
 
@@ -70,7 +81,11 @@ export function routeCockpitKey(state, keyAction) {
         return { type: "arrow", direction: keyAction.direction };
       }
       if (state.region === COCKPIT_REGIONS.CONTENT && isContentInteractiveView(state.view)) {
-        if (state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL || state.view === ORCHESTRATOR_VIEWS.LAUNCH) {
+        if (
+          state.view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+          || state.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL
+          || state.view === ORCHESTRATOR_VIEWS.LAUNCH
+        ) {
           return null;
         }
         return {

package/src/global/ink/cockpit-models.js

@@ -250,6 +250,11 @@ export function buildFooterModel({
     return { text: parts.join(` ${glyphs.bullet} `) };
   }
 
+  if (view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+    parts.push("Esc Back");
+    return { text: parts.join(` ${glyphs.bullet} `) };
+  }
+
   if (view === ORCHESTRATOR_VIEWS.CHANGES) {
     return { text: buildChangesFooterParts(changesPhase).join(` ${glyphs.bullet} `) };
   }
@@ -263,6 +268,7 @@ export function buildFooterModel({
   const showTab = view === ORCHESTRATOR_VIEWS.RUNS
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
+    || view === ORCHESTRATOR_VIEWS.REVIEWS
     || view === ORCHESTRATOR_VIEWS.LAUNCH
     || view === ORCHESTRATOR_VIEWS.ACTIVITY;
   if (showTab) {
@@ -280,7 +286,8 @@ export function buildFooterModel({
     || region === COCKPIT_REGIONS.NAV
     || view === ORCHESTRATOR_VIEWS.RUNS
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
-    || view === ORCHESTRATOR_VIEWS.RECENT_RUNS) {
+    || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
+    || view === ORCHESTRATOR_VIEWS.REVIEWS) {
     parts.push("Enter Open");
   }
   if (view !== ORCHESTRATOR_VIEWS.LAUNCH) {

package/src/global/ink/cockpit-reviews.js

@@ -0,0 +1,62 @@
+/** Read-only Cockpit helpers for review receipts under ~/.harness/reviews/. */
+
+export function countFindingsBySeverity(findings = []) {
+  const counts = { high: 0, medium: 0, low: 0 };
+  for (const finding of findings) {
+    const severity = String(finding?.severity ?? "").toLowerCase();
+    if (counts[severity] != null) counts[severity] += 1;
+  }
+  return counts;
+}
+
+export function selectReviewFromList(receipts = [], listIndex = 0) {
+  if (!Array.isArray(receipts) || receipts.length === 0) return null;
+  const index = Math.min(Math.max(0, listIndex), receipts.length - 1);
+  return receipts[index] ?? null;
+}
+
+export function formatReviewListLines(receipts = []) {
+  if (!Array.isArray(receipts) || receipts.length === 0) {
+    return ["No review receipts yet. Run kairo review --agent codex|pi."];
+  }
+  return receipts.map((receipt) => {
+    const counts = countFindingsBySeverity(receipt.findings);
+    const findingTotal = (receipt.findings ?? []).length;
+    const created = String(receipt.createdAt ?? "").slice(0, 19).replace("T", " ");
+    return `${receipt.reviewId}  ${String(receipt.state).padEnd(10)}  ${String(receipt.agentId).padEnd(6)}  ${findingTotal}f (h${counts.high}/m${counts.medium}/l${counts.low})  ${created}`;
+  });
+}
+
+export function formatReviewDetailLines(receipt) {
+  if (!receipt) return ["Review receipt not found."];
+  const counts = countFindingsBySeverity(receipt.findings);
+  const snapshot = receipt.snapshot ?? {};
+  const totals = snapshot.totals ?? {};
+  const lines = [
+    `Id: ${receipt.reviewId}`,
+    `Agent: ${receipt.agentId}${receipt.model ? ` · model ${receipt.model}` : ""}`,
+    `State: ${receipt.state}`,
+    `Created: ${receipt.createdAt ?? "n/a"}`,
+    `Findings: ${(receipt.findings ?? []).length} (high ${counts.high}, medium ${counts.medium}, low ${counts.low})`,
+    `Snapshot: ${snapshot.mode ?? "n/a"} · files ${totals.fileCount ?? 0} · fingerprint ${String(snapshot.fingerprint ?? "").slice(0, 12) || "n/a"}`
+  ];
+  if ((receipt.warnings ?? []).length > 0) {
+    lines.push(`Warnings: ${receipt.warnings.length}`);
+  }
+  const findings = receipt.findings ?? [];
+  if (findings.length === 0) {
+    lines.push("", "No findings recorded.");
+    return lines;
+  }
+  lines.push("", "Findings (read-only):");
+  for (const finding of findings.slice(0, 20)) {
+    const loc = finding.line != null ? `:${finding.line}` : "";
+    lines.push(
+      `  [${String(finding.severity).toUpperCase()}] ${finding.path ?? "?"}${loc} — ${finding.title ?? "untitled"}`
+    );
+  }
+  if (findings.length > 20) {
+    lines.push(`  … ${findings.length - 20} more (use kairo reviews show ${receipt.reviewId})`);
+  }
+  return lines;
+}

package/src/global/ink/cockpit-runs.js

@@ -13,6 +13,12 @@ export const RUNS_HUB_ITEMS = [
     view: ORCHESTRATOR_VIEWS.RECENT_RUNS,
     description: "Review completed and failed run outcomes."
   },
+  {
+    id: "reviews",
+    label: "Reviews",
+    view: ORCHESTRATOR_VIEWS.REVIEWS,
+    description: "Browse secret-free bounded-review receipts (read-only)."
+  },
   {
     id: "launch",
     label: "New run",
@@ -27,13 +33,16 @@ export function isRunsBranchView(view) {
     || view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
     || view === ORCHESTRATOR_VIEWS.LAUNCH
-    || view === ORCHESTRATOR_VIEWS.RUN_DETAIL;
+    || view === ORCHESTRATOR_VIEWS.RUN_DETAIL
+    || view === ORCHESTRATOR_VIEWS.REVIEWS
+    || view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL;
 }
 
 export function isRunsChildView(view) {
   return view === ORCHESTRATOR_VIEWS.ACTIVE_RUNS
     || view === ORCHESTRATOR_VIEWS.RECENT_RUNS
-    || view === ORCHESTRATOR_VIEWS.LAUNCH;
+    || view === ORCHESTRATOR_VIEWS.LAUNCH
+    || view === ORCHESTRATOR_VIEWS.REVIEWS;
 }
 
 export function resolveRunsHubItem(listIndex = 0, items = RUNS_HUB_ITEMS) {

package/src/global/ink/cockpit-views.js

@@ -14,6 +14,7 @@ import {
 import { windowLinesForLayout } from "./cockpit-models.js";
 import { LAYOUT_MODES } from "./layout.js";
 import { formatRunsHubLines, RUNS_HUB_ITEMS } from "./cockpit-runs.js";
+import { formatReviewDetailLines, formatReviewListLines } from "./cockpit-reviews.js";
 import { formatChangesActionLines } from "./cockpit-changes.js";
 import { formatRecoveryLines } from "./cockpit-recovery.js";
 
@@ -74,6 +75,8 @@ export function renderCockpitView({
   layoutMode = LAYOUT_MODES.COMPACT,
   selectedRun,
   selectedEvents,
+  reviews = [],
+  selectedReview = null,
   changesAction = null,
   recoveryAction = null,
   colorEnabled = true
@@ -112,7 +115,7 @@ export function renderCockpitView({
         formatRunsHubLines(RUNS_HUB_ITEMS),
         listIndex,
         colorEnabled,
-        "Choose Active runs, History, or New run."
+        "Choose Active runs, History, Reviews, or New run."
       );
     case ORCHESTRATOR_VIEWS.ACTIVE_RUNS:
       return listBlock(
@@ -136,6 +139,14 @@ export function renderCockpitView({
         colorEnabled,
         "Open Runs after governance is healthy."
       );
+    case ORCHESTRATOR_VIEWS.REVIEWS:
+      return listBlock(
+        "Reviews",
+        formatReviewListLines(reviews),
+        listIndex,
+        colorEnabled,
+        "Receipts are read-only. Launch reviews via kairo review --agent codex|pi."
+      );
     case ORCHESTRATOR_VIEWS.LAUNCH:
       if (launchableAgents.length === 0) {
         return React.createElement(CockpitEmptyState, {
@@ -165,6 +176,12 @@ export function renderCockpitView({
         formatRunDetailLines(selectedRun, selectedEvents)
           .map((line) => React.createElement(Text, { key: line }, line))
       );
+    case ORCHESTRATOR_VIEWS.REVIEW_DETAIL:
+      return React.createElement(Box, { flexDirection: "column" },
+        React.createElement(Text, { bold: true }, "Review detail"),
+        formatReviewDetailLines(selectedReview)
+          .map((line) => React.createElement(Text, { key: line }, line))
+      );
     case ORCHESTRATOR_VIEWS.DIAGNOSTICS:
       return governanceList(
         "System health",
@@ -178,7 +195,7 @@ export function renderCockpitView({
         React.createElement(Text, null, "Kairo keeps IDEs and agents aligned with project architecture and workflows."),
         React.createElement(Text, null, "Primary flow: scan → findings → preview → confirm → apply → re-scan."),
         React.createElement(Text, null, "↑↓ navigate · Enter open · Esc back/exit · R refresh/retry · ? help"),
-        React.createElement(Text, null, "Runs are secondary after setup and repairs.")
+        React.createElement(Text, null, "Runs are secondary after setup and repairs. Reviews are read-only receipts.")
       );
     default: {
       const _exhaustive = view;

package/src/global/ink/orchestrator-app.js

@@ -25,6 +25,7 @@ import {
 import { buildControlCenterModel } from "./cockpit-control-center.js";
 import { resolveEnterNavIntent } from "./cockpit-enter.js";
 import { resolveRunsHubItem, RUNS_HUB_ITEMS } from "./cockpit-runs.js";
+import { selectReviewFromList } from "./cockpit-reviews.js";
 import { resolveProjectReadiness } from "../dashboard-guidance.js";
 import { CONTROL_PLANE_HEALTH } from "../control-plane-snapshot.js";
 import { CockpitShell } from "./cockpit/primitives.js";
@@ -142,6 +143,7 @@ export function OrchestratorApp({
         return;
       }
       data.setSelectedRun(null);
+      data.setSelectedReview(null);
       data.resetLaunchWizard();
       dispatch({ type: "escape" });
       return;
@@ -158,9 +160,11 @@ export function OrchestratorApp({
         ? (data.dashboard?.activeRuns ?? []).length
         : ui.view === ORCHESTRATOR_VIEWS.RECENT_RUNS
           ? (data.dashboard?.recentRuns ?? []).length
-          : ui.view === ORCHESTRATOR_VIEWS.ACTIVITY
-            ? listRecoverySnapshots(data.snapshot).length
-            : 0;
+          : ui.view === ORCHESTRATOR_VIEWS.REVIEWS
+            ? (data.reviews ?? []).length
+            : ui.view === ORCHESTRATOR_VIEWS.ACTIVITY
+              ? listRecoverySnapshots(data.snapshot).length
+              : 0;
 
     let routed = null;
     if (key.tab) {
@@ -229,6 +233,9 @@ export function OrchestratorApp({
       if (hubItem.action === "launch") {
         data.resetLaunchWizard();
       }
+      if (hubItem.view === ORCHESTRATOR_VIEWS.REVIEWS) {
+        data.loadReviews().catch(() => {});
+      }
       dispatch({
         type: "set-view",
         view: hubItem.view,
@@ -247,6 +254,13 @@ export function OrchestratorApp({
       return;
     }
 
+    if (ui.region === COCKPIT_REGIONS.CONTENT
+      && ui.view === ORCHESTRATOR_VIEWS.REVIEWS
+      && key.return) {
+      data.openReviewDetail(selectReviewFromList(data.reviews ?? [], ui.listIndex), dispatch);
+      return;
+    }
+
     if (ui.view === ORCHESTRATOR_VIEWS.RUN_DETAIL) {
       if (inputKey.toLowerCase() === "c" && isRunCancellable(data.selectedRun)) {
         data.handleCancelRun();
@@ -304,6 +318,10 @@ export function OrchestratorApp({
     }
 
     if (inputKey.toLowerCase() === "r" && ui.view !== ORCHESTRATOR_VIEWS.LAUNCH) {
+      if (ui.view === ORCHESTRATOR_VIEWS.REVIEWS || ui.view === ORCHESTRATOR_VIEWS.REVIEW_DETAIL) {
+        data.loadReviews().catch(() => {});
+        return;
+      }
       data.reload().catch(() => {});
     }
   });
@@ -406,6 +424,8 @@ export function OrchestratorApp({
         launchableAgents: data.launchableAgents,
         selectedRun: data.selectedRun,
         selectedEvents: data.selectedEvents,
+        reviews: data.reviews,
+        selectedReview: data.selectedReview,
         changesAction: data.changesAction,
         recoveryAction: data.recoveryAction,
         controlCenter,

package/src/global/ink/orchestrator-state.js

@@ -22,6 +22,8 @@ export const ORCHESTRATOR_VIEWS = {
   ACTIVE_RUNS: "active-runs",
   RECENT_RUNS: "recent-runs",
   RUN_DETAIL: "run-detail",
+  REVIEWS: "reviews",
+  REVIEW_DETAIL: "review-detail",
   PROVIDERS: "providers",
   LAUNCH: "launch",
   DIAGNOSTICS: "diagnostics",

package/src/global/ink/use-orchestrator-data.js

@@ -33,6 +33,8 @@ import {
   listRecoverySnapshots,
   reduceRecoveryAction
 } from "./cockpit-recovery.js";
+import { listReviewReceipts } from "../runtime/review/review-receipts.js";
+import { assertReceiptSecretFree } from "../runtime/review/review-validate.js";
 
 export function useOrchestratorData({
   homeDir,
@@ -50,6 +52,8 @@ export function useOrchestratorData({
   const [snapshot, setSnapshot] = useState(null);
   const [selectedRun, setSelectedRun] = useState(null);
   const [selectedEvents, setSelectedEvents] = useState([]);
+  const [reviews, setReviews] = useState([]);
+  const [selectedReview, setSelectedReview] = useState(null);
   const [statusMessage, setStatusMessage] = useState(null);
   const [launchAgentIndex, setLaunchAgentIndex] = useState(0);
   const [launchStep, setLaunchStep] = useState(LAUNCH_WIZARD_STEPS.AGENT);
@@ -124,6 +128,27 @@ export function useOrchestratorData({
     });
   };
 
+  const loadReviews = async () => {
+    const receipts = (await listReviewReceipts({ homeDir, limit: 50 }))
+      .map((receipt) => assertReceiptSecretFree(receipt));
+    setReviews(receipts);
+    if (selectedReview) {
+      const refreshed = receipts.find((entry) => entry.reviewId === selectedReview.reviewId) ?? null;
+      setSelectedReview(refreshed);
+    }
+    return receipts;
+  };
+
+  const openReviewDetail = (receipt, dispatch) => {
+    if (!receipt) return;
+    setSelectedReview(assertReceiptSecretFree(receipt));
+    dispatch({
+      type: "set-view",
+      view: ORCHESTRATOR_VIEWS.REVIEW_DETAIL,
+      returnView: ORCHESTRATOR_VIEWS.REVIEWS
+    });
+  };
+
   const handleLaunch = async (draft, profile, dispatch) => {
     if (!draft.agentId || !draft.task.trim()) {
       setError("Agent and task are required.");
@@ -353,6 +378,9 @@ export function useOrchestratorData({
     selectedRun,
     setSelectedRun,
     selectedEvents,
+    reviews,
+    selectedReview,
+    setSelectedReview,
     statusMessage,
     launchAgentIndex,
     setLaunchAgentIndex,
@@ -369,6 +397,8 @@ export function useOrchestratorData({
     reload,
     resetLaunchWizard,
     openRunDetail,
+    loadReviews,
+    openReviewDetail,
     handleLaunch,
     handleCancelRun,
     previewChanges,

package/src/global/paths.js

@@ -18,6 +18,7 @@ export function harnessHomePaths(homeDir) {
     profilePath: join(root, "profile.json"),
     historyPath: join(root, "history.jsonl"),
     runsDir: join(root, "runs"),
+    reviewsDir: join(root, "reviews"),
     coreDir: join(root, "core"),
     backupsDir: join(root, "backups")
   };

package/src/global/runtime/execution-adapters/codex.js

@@ -71,7 +71,8 @@ export default createExecutionAdapter({
     tokens: true,
     diff: false,
     cancel: true,
-    transcript: true
+    transcript: true,
+    reviewCompatible: true
   },
   buildLaunch: buildCodexLaunch,
   parseEventLine: parseCodexEventLine

package/src/global/runtime/execution-adapters/create-execution-adapter.js

@@ -20,6 +20,7 @@ export function createExecutionAdapter({
       diff: false,
       cancel: true,
       transcript: false,
+      reviewCompatible: false,
       ...capabilities
     },
 

package/src/global/runtime/execution-adapters/index.js

@@ -26,6 +26,7 @@ export function inspectExecutionAdapters(context = {}) {
     label: adapter.label,
     executable: adapter.executable,
     capabilities: adapter.capabilities,
+    reviewCompatible: Boolean(adapter.capabilities?.reviewCompatible),
     ...adapter.availability(context)
   }));
 }

package/src/global/runtime/execution-adapters/pi.js

@@ -30,12 +30,15 @@ export function buildPiPermissionsArgs(permissions = []) {
   }
 
   throw new Error(
-    `Pi permissions only support "read-only" in Kairo 0.6.0 (got: ${permissions.join(", ")}). `
+    `Pi permissions only support "read-only" (got: ${permissions.join(", ")}). `
     + "Other aliases are rejected and are never translated to --approve."
   );
 }
 
-export function buildPiLaunch({ task, cwd, model, permissions = [], env = process.env } = {}) {
+export function buildPiLaunch({
+  task, cwd, model, permissions = [], env = process.env,
+  strategy = "direct", extensionPath = null
+} = {}) {
   const args = [
     "--mode",
     "json",
@@ -47,6 +50,13 @@ export function buildPiLaunch({ task, cwd, model, permissions = [], env = proces
     args.push("--model", model);
   }
 
+  if (strategy === "orchestrated") {
+    if (typeof extensionPath !== "string" || !extensionPath) {
+      throw new Error("Orchestrated Pi requires a managed extension path.");
+    }
+    args.push("--no-extensions", "--extension", extensionPath);
+  }
+
   args.push(task);
 
   return {
@@ -175,7 +185,8 @@ export default createExecutionAdapter({
     tokens: true,
     diff: false,
     cancel: true,
-    transcript: true
+    transcript: true,
+    reviewCompatible: true
   },
   checkAvailability: checkPiAvailability,
   buildLaunch: buildPiLaunch,

package/src/global/runtime/orchestration/index.js

@@ -0,0 +1,23 @@
+import { join } from "node:path";
+import { harnessHomePaths } from "../../paths.js";
+
+export {
+  RUN_STRATEGIES, DAG_NODE_STATES, DAG_TERMINAL_STATES, ORCH_LIMITS, ORCH_ERROR_CODES,
+  OrchContractError, createTaskId, isTerminalDagState, normalizeRunStrategy,
+  createOrchLineage, createBudgetUsage, createDagNode, createMinionBrief,
+  createMinionResult, digestAllowlisted
+} from "./orch-types.js";
+export { assertOrchReceiptSecretFree, FORBIDDEN_KEYS, walkForbiddenKeys } from "./orch-validate.js";
+export {
+  orchPaths, buildOrchReceipt, saveOrchReceipt, loadOrchReceipt,
+  createOrchState, saveOrchState, loadOrchState, terminalizeOrchNodes,
+  updateOrchState, applyMinionDagUpdate, finalizeOrchState, reconcileOrchState
+} from "./orch-receipts.js";
+
+export const KAIRO_MINION_RELATIVE_ASSET =
+  "components/orchestrator/extensions/pi/kairo-minion.js";
+
+/** Materialized extension path under ~/.harness (never Pi global auto-discover). */
+export function resolveKairoMinionExtensionPath(homeDir) {
+  return join(harnessHomePaths(homeDir).root, KAIRO_MINION_RELATIVE_ASSET);
+}