Expose native Auto Review findings in app-server and TUI #57

Current Status

State: PR #80 merged on June 14, 2026. The app-server/TUI visibility slice is now on main: review/summary/read, generated app-server schemas, current/latest summary filtering, grouped status counts, inline TUI background Auto Review status history cells, unchanged-dirty-diff scheduler suppression, and exec harness resumed-turn sandbox propagation.

Validation before merge: all PR #80 checks were green on head 43ee279692 (build-test, Codex exec harness, macOS ARM64 app build, cargo-deny, codespell; CLA skipped). Local validation also covered app-server protocol/server checks, app-server summary/detail tests, core background Auto Review scheduler tests, TUI status snapshot tests, the resumed exec harness sandbox regression test, schema generation, formatting, and git diff --check.

The merged branch also addressed the exec harness cache/rate-limit safety concern: resumed turns now preserve sandbox settings without invalid resume argument ordering, and the scheduler avoids enqueuing redundant background reviews for unchanged dirty diffs. Auto Review ledger diagnostics after merge show no in-flight active-target runs; remaining ledger noise is stale/detached history.

Remaining work for #57: finish the richer TUI detail surface for clean/findings/stale states and decide whether that final display polish closes #57 or should be split into a narrower follow-up issue.

Finish Line

App-server clients and the TUI can show native Auto Review state and findings clearly: running, clean, findings, stale, failed, and detail retrieval, without mixing this feature up with Guardian approval auto-review.

Acceptance Criteria

• Expose latest/current native Auto Review summary through a stable app-server surface with bounded payloads. PR Expose Auto Review summaries in app server and TUI #80 adds review/summary/read with latest/current summaries and grouped counts.
• Expose bounded finding detail retrieval by stable run/finding ID. Landed before this slice in PR Add bounded auto-review finding detail reads #79.
• Keep code Auto Review naming separate from Guardian approval auto-review notifications and UI copy. PR Expose Auto Review summaries in app server and TUI #80 labels the TUI transcript surface as Auto Review and keeps it separate from Guardian approval cells.
• Suppress stale/detached/clean noise by default while leaving recoverable detail for inspection. PR Expose Auto Review summaries in app server and TUI #80 filters current summaries to matching/current targets and suppresses stale findings in default summary content.
• Add TUI status/detail surface with snapshot coverage for running, clean, findings, stale, and failure states. PR Expose Auto Review summaries in app server and TUI #80 covers inline background status and failure snapshots; richer clean/findings/stale/detail display remains.
• Regenerate app-server schema fixtures if protocol shapes change. PR Expose Auto Review summaries in app server and TUI #80 regenerates JSON and TypeScript schema fixtures for the new summary request/response.
• Add targeted tests for protocol, app-server behavior, and TUI rendering. PR Expose Auto Review summaries in app server and TUI #80 adds app-server summary tests, core scheduler regression coverage, TUI status snapshots, and exec harness resume sandbox coverage.

Relationships

Child of #53. Depends on native Auto Review artifact/storage and detached run lifecycle. Related to #54.