vibe-coding-master 0.3.27 → 0.3.29

package/README.md

@@ -11,7 +11,7 @@ VCM is designed for long-running coding work where one Claude Code conversation
 
 Each role runs as a real Claude Code process inside an embedded terminal. The GUI lets the user start, stop, resume, restart, switch, observe, and manually intervene in those sessions without juggling separate terminal windows.
 
-When Gate Review Gates are enabled for a task, or when a Gate Reviewer session already exists, the workspace can also show a fifth `Gate Reviewer` terminal role. It runs Claude Code as a project-scoped long-lived review session, receives short gate prompts that include the current task and worktree path, writes reports under the task worktree, and stays outside normal PM role routing.
+When Gate Review Gates are enabled for a task, or when a Gate Reviewer session already exists, the workspace can also show a fifth `Gate Reviewer` terminal role. It is an optional VCM flow role powered by Claude Code. Its session is project-scoped and reusable across tasks, but each gate turn is bound to the current task/worktree, writes reports under the task worktree, and stays outside normal PM route-file dispatch.
 
 ## Current Capabilities
 
@@ -21,7 +21,7 @@ When Gate Review Gates are enabled for a task, or when a Gate Reviewer session a
 - Connected repository status for the base repo, including branch, upstream status, commit hash, dirty state, and fast-forward-only pull.
 - Embedded Claude Code terminals powered by `node-pty` and `xterm.js`.
 - One Claude Code session per role, with role tabs in the task header.
-- Optional Gate Reviewer terminal role when any Gate Review Gate is enabled.
+- Optional Gate Reviewer VCM flow role when any Gate Review Gate is enabled.
 - Role session recovery through persisted Claude session ids and `claude --resume`.
 - Permission mode selection before start, resume, or restart:
   - `default`
@@ -33,7 +33,7 @@ When Gate Review Gates are enabled for a task, or when a Gate Reviewer session a
 - Rust generated context for module indexing and crate-external public surface indexing.
 - Translation panel powered by the long-lived Codex Translator session.
 - Mobile Gateway through Tencent iLink Bot API / Weixin DM, for talking to PM and managing tasks from Weixin.
-- Durable task state, session state, raw terminal logs, handoff artifacts, and message history.
+- Durable task state, role session state, handoff artifacts, and message history.
 
 ## Requirements
 
@@ -193,14 +193,12 @@ In this terminology, `Session` is a VCM statistics term. It is different from a
 
 ## Task Worktree Management
 
-VCM uses task-level worktree management by default:
+VCM uses task-level worktree management for every task:
 
 ```text
 one task = one branch + one git worktree + one handoff directory + one role-session set
 ```
 
-The `Create worktree and branch` option is selected by default when creating a task:
-
 - task name: `<task>`
 - branch: `feature/<task>`
 - worktree path: `.claude/worktrees/<task>` inside the connected base repository
@@ -208,13 +206,11 @@ The `Create worktree and branch` option is selected by default when creating a t
 
 VCM will not create worktrees per role. `project-manager`, `architect`, `coder`, and `reviewer` for the same task share the same task worktree.
 
-The user can turn this option off. In that mode, VCM creates app-local task metadata, creates the handoff structure in the connected repository, records the current branch, and starts role sessions from the connected repository path.
-
 VCM will not offer a separate `Create task worktree` button after a task exists, and a task should not be switched to another branch/worktree mode after creation.
 
 Because worktrees live under `.claude/worktrees/`, the connected repository must ignore both `.ai/vcm/` and `.claude/worktrees/`. Apply the VCM Harness before creating tasks so `.gitignore` contains the managed ignore block. The base repository must also be clean because the task branch/worktree is created from the connected repo's current `HEAD`.
 
-When a task is complete, VCM provides a red `Close Task` action. Closing a task shows a destructive confirmation, stops VCM-managed running role sessions for that task, then deletes the task worktree, deletes the task branch by default, removes the app-local task record, and removes task runtime metadata. VCM does not preflight running sessions or uncommitted changes before closing. Tasks created without a worktree only remove VCM metadata because they do not own a separate branch/worktree.
+When a task is complete, VCM provides a red `Close Task` action. Closing a task shows a destructive confirmation, stops VCM-managed running role sessions for that task, then deletes the task worktree, deletes the task branch by default, removes the app-local task record, and removes task runtime metadata. VCM does not preflight running sessions or uncommitted changes before closing. Project-scoped Gate Reviewer and Codex Translator sessions are not task-owned and are not stopped by Close Task.
 
 ## Sidebar UI
 
@@ -223,6 +219,8 @@ The left sidebar is intentionally compact and collapsible:
 - `Repository Path`: path input on one row; `Recent` and `Connect` on the next row.
 - `Connected Repository`: connected base repo path, branch, upstream/ahead-behind status, commit hash, working tree state, and a `Pull` button.
 - `Settings`: `Theme`, `Flow pause alert`, `Try alert`, `Messages`, and `Events`.
+- `Translation`: global conversation translation, auto-send, target language, output scope, file translation, bootstrap, memory update, session status, and Codex Translator session access.
+- `Gate Review Gates`: global gate switches for architecture plan, validation adequacy, and final diff.
 - `Gateway`: Weixin iLink binding, Gateway on/off, Gateway translation, and QR login.
 - `VCM Harness`: fixed-install status, bootstrap completion checks, and the bootstrap terminal when one is running.
 - `New Task`: one `task name` input.
@@ -233,9 +231,8 @@ All sidebar sections are collapsed by default. When no task is selected, `Reposi
 Opening `Connected Repository` refreshes the base repo status through the
 backend. VCM does not poll it continuously. The `Pull` button runs
 `git pull --ff-only` against the connected base repo only. It is disabled when
-the base repo has uncommitted changes, when the current branch has no upstream,
-or when the active task is an inline task using the base repo directly. It does
-not stash, merge, or mutate task worktrees.
+the base repo has uncommitted changes or when the current branch has no
+upstream. It does not stash, merge, or mutate task worktrees.
 
 When VCM is connected to an active task, the bottom of the sidebar shows a task status dock. It stays outside the collapsible groups and shows the active VCM Session title, task status, start time, total elapsed time, total Round count, and role active runtime. The dock also shows the Current Round while it is running, or the Last Round after a flow pause, including start time, total elapsed time, role active runtime, Turn count, and Round status.
 
@@ -353,14 +350,14 @@ Typical mobile flow:
 - `/pull-current`: runs the same fast-forward-only connected repository pull as the desktop `Pull` button.
 - `/tasks`: lists tasks for the selected project.
 - `/use-task <index-or-task-slug>`: selects the Gateway's current task context.
-- `/create-task <task-slug> [title]`: creates a worktree-backed task and starts the four role sessions using the saved launch template.
+- `/create-task <task-slug> [title]`: creates a worktree-backed task and starts the four core role sessions using the saved launch template. If any Gate Review Gate is enabled, Gateway also resumes or starts Gate Reviewer from the saved template.
 - `/close-task`: starts a destructive close confirmation for the current task.
 - `/close-task confirm <task-slug>`: closes the task through VCM cleanup after exact slug confirmation.
 - `/translate on` and `/translate off`: changes Gateway translation for mobile messages.
 
 `/pull-current` only pulls the connected base repository. It does not pull task worktrees, stash local changes, merge divergent branches, or run arbitrary shell commands.
 
-`/create-task` uses the saved launch template from the desktop settings. The template controls permission mode, model, effort, auto orchestration, and translation defaults for the four role sessions.
+`/create-task` uses the saved launch template from the desktop settings. The template controls permission mode, model, effort, and auto orchestration for the four core role sessions plus the optional Gate Reviewer. Gateway translation uses the global Gateway translation setting, not the launch template.
 
 `/close-task` is destructive. It stops VCM-managed role sessions and removes task-owned worktree/branch state according to the same cleanup behavior as the desktop `Close Task` action.
 
@@ -378,7 +375,7 @@ Typical mobile flow:
 
 ## Translation
 
-The task header has a global `Translate` button next to `Close Task`. It opens a translation panel beside the embedded terminal for the role consoles and keeps the same on/off setting while switching roles. The terminal and translation panel split the available width evenly.
+Translation is controlled from the sidebar `Translation` group. When conversation translation is enabled, each running core VCM role console shows a translation panel beside the embedded terminal. The terminal and translation panel split the available width evenly.
 
 The task header does not include a manual `Refresh` button. Task status, role status, messages, orchestration state, and flow pause state refresh automatically. The remaining `Refresh` button lives only in the sidebar `VCM Harness` section and is for rechecking harness files.
 
@@ -401,7 +398,7 @@ When Gateway is on, `Flow pause alert` is forced off because mobile notification
 Translation behavior:
 
 - Conversation translation is routed through the Codex Translator session and result files.
-- Global translation controls live in the sidebar Translation section: enablement, auto-send, target language, bootstrap, memory update, and file translation.
+- Global translation controls live in the sidebar Translation section: enablement, auto-send, target language, output scope, bootstrap, memory update, file translation, session status, and `Open Session`.
 - File and conversation translation share `<baseRepoRoot>/.ai/vcm/translations/`; conversation result files are temporary runtime artifacts.
 - Claude Code output translation reads semantic Claude transcript JSONL files under `~/.claude/projects`, not raw PTY output.
 - Claude Code prose output waits 10 seconds before dispatch so adjacent output can be translated in one Codex batch.
@@ -415,10 +412,10 @@ Translation behavior:
 - Assistant prose renders Markdown in the panel, including headings, lists, code fences, tables, and links.
 - Tool calls and tool results are preserved as dim one-line rows such as `● Bash({"command":"npm test"})`.
 - User input uses one textarea. Press `Enter` to translate or send the current English draft; press `Shift+Enter` for a newline.
-- After user input is translated, the translated draft is appended after the original text in the same textarea.
+- After user input is translated, the English draft is appended after the original source text in the same textarea.
 - `Send English` writes the current English draft to the active embedded terminal and submits it.
 - Automatic terminal submission uses bracketed paste first, then sends Enter separately for Claude Code TUI reliability.
-- The translation panel `Auto-send` toggle sends the translated draft automatically when translation succeeds without warnings.
+- The sidebar `Auto-send` toggle sends the translated draft automatically when translation succeeds without warnings.
 
 ## Project Harness
 
@@ -438,7 +435,13 @@ CLAUDE.md
 .claude/skills/vcm-final-acceptance/SKILL.md
 .claude/skills/vcm-long-running-validation/SKILL.md
 .claude/skills/vcm-harness-bootstrap/SKILL.md
-.ai/vcm-harness-manifest.json
+.claude/skills/vcm-gate-review/SKILL.md
+.claude/agents/gate-reviewer.md
+.ai/codex-translator/AGENTS.md
+.ai/codex-translator/config.toml
+.ai/codex-translator/.codex/config.toml
+.ai/codex-translator/.codex/hooks.json
+.ai/tools/request-gate-review
 .ai/tools/generate-module-index
 .ai/tools/generate-public-surface
 .ai/tools/run-long-check
@@ -536,7 +539,6 @@ Runtime message and handoff files:
 .ai/vcm/messages/<task>.jsonl                 # under the task runtime repo
 .ai/vcm/orchestration/<task>.json             # under the task runtime repo
 .ai/vcm/handoffs/messages/<from-role>-<to-role>.md
-.ai/vcm/handoffs/logs/
 ```
 
 Each directed role route has exactly one message file. Route messages are the only dynamic task-dispatch files. If a role changes its mind during one turn, it edits the same route file instead of creating another message. A blank file means no pending message; a non-empty file means pending work for VCM to submit.
@@ -572,7 +574,7 @@ When it is on, VCM is in auto mode:
 - When the target role later reaches `Stop`, VCM scans again and may deliver the next pending route file.
 - If auto orchestration gets stuck after a manual copy/paste recovery, `Mark All Done` clears pending route files. It does not mutate message history.
 
-VCM Harness injects Claude Code `UserPromptSubmit` and `Stop` hooks into `.claude/settings.json`. Role tabs become `running` when Claude Code accepts a prompt and `idle` after `Stop`; VCM also marks a role `running` immediately after it writes a message to that embedded terminal. Gate Reviewer is a Claude Code role, but VCM triggers and settles gate turns directly around the gate prompt and report callback. The terminal process status is still tracked separately. Claude role rules require a role to end its turn after writing or updating a message route file, rather than polling, looping, or waiting for another role inside the same Claude Code turn.
+VCM Harness injects Claude Code `UserPromptSubmit` and `Stop` hooks into `.claude/settings.json`. Role tabs become `running` when Claude Code accepts a prompt and `idle` after `Stop`; VCM also marks a role `running` immediately after it writes a message to that embedded terminal. Gate Reviewer uses the same Claude hook/Round/translation path as other VCM flow roles, while VCM still owns gate report polling and the PM callback. The terminal process status is tracked separately. Claude role rules require a role to end its turn after writing or updating a message route file, rather than polling, looping, or waiting for another role inside the same Claude Code turn.
 
 The implementation keeps only the active manual/auto orchestration mode. It does not expose pause/resume, stage/approve/reject, or a separate agent-facing message CLI.
 
@@ -603,7 +605,7 @@ Session buttons behave as follows:
 - `Restart`: stops the current process if needed, creates a new UUID, and starts a fresh Claude session.
 - `Stop`: stops the embedded terminal process and leaves the persisted Claude session id resumable.
 
-Embedded terminal output is still written to raw role log files under `.ai/vcm/handoffs/logs/`. When a browser reconnects to a running terminal, VCM replays only the tail of that log, capped at 2 MB, rather than streaming the entire historical log back into xterm. This keeps long sessions responsive while preserving full logs on disk until task cleanup.
+Ordinary VCM role sessions do not persist raw terminal logs under handoff state. Claude Code transcript JSONL files under `~/.claude/projects/` are the semantic record used for output translation and recovery.
 
 ## Local Project Files
 
@@ -622,7 +624,9 @@ For a connected repository, VCM uses:
 <taskRepoRoot>/.ai/vcm/handoffs/review-report.md
 <taskRepoRoot>/.ai/vcm/handoffs/docs-sync-report.md
 <taskRepoRoot>/.ai/vcm/handoffs/messages/<from-role>-<to-role>.md
-<taskRepoRoot>/.ai/vcm/handoffs/logs/{project-manager,architect,coder,reviewer}.log
+<taskRepoRoot>/.ai/vcm/gate-reviews/
+<baseRepoRoot>/.ai/vcm/gate-reviewer/session.json
+<baseRepoRoot>/.ai/vcm/translations/
 ```
 
 The project config is stored under `vcmDataDir` so it is durable local app state. `vcmDataDir` is `VCM_DATA_DIR` when set, otherwise `~/.vcm`. For Dev Containers, prefer:
@@ -635,9 +639,7 @@ The project config is stored under `vcmDataDir` so it is durable local app state
 }
 ```
 
-For worktree-backed tasks, `taskRepoRoot` is `<baseRepoRoot>/.claude/worktrees/<task>`; for inline tasks, `taskRepoRoot` is the connected base repo.
-
-Because handoffs are scoped to `taskRepoRoot` without an extra task-name directory, VCM allows only one active inline task per connected repository. Use the default worktree mode for parallel tasks.
+For every task, `taskRepoRoot` is `<baseRepoRoot>/.claude/worktrees/<task>`.
 
 ## Packaging
 
@@ -680,4 +682,6 @@ See also:
 - `docs/v0.2-implementation-plan.md`
 - `docs/vcm-cc-best-practices.md`
 - `docs/full-harness-baseline.md`
+- `docs/gate-review-gates.md`
+- `docs/codex-translation-plan.md`
 - `docs/cc-best-practices.md` is archived and no longer maintained.

package/dist/backend/api/task-routes.js

@@ -1,4 +1,4 @@
-import { DISPATCHABLE_ROLES, isVcmRoleName } from "../../shared/constants.js";
+import { CORE_VCM_ROLE_NAMES, DISPATCHABLE_ROLES } from "../../shared/constants.js";
 import { isOpenFileLimitError, VcmError } from "../errors.js";
 import { getTaskRuntimeRepoRoot } from "../services/task-service.js";
 export function registerTaskRoutes(app, deps) {
@@ -40,7 +40,7 @@ export function registerTaskRoutes(app, deps) {
 async function stopRunningRoleSessions(deps, repoRoot, taskSlug) {
     const sessions = await deps.sessionService.listRoleSessions(repoRoot, taskSlug);
     for (const session of sessions) {
-        if (session.status === "running" && isVcmRoleName(session.role)) {
+        if (session.status === "running" && CORE_VCM_ROLE_NAMES.some((role) => role === session.role)) {
             await deps.sessionService.stopRoleSession(repoRoot, taskSlug, session.role);
         }
     }

package/dist/backend/gateway/gateway-service.js

@@ -1,5 +1,5 @@
 import { readFile } from "node:fs/promises";
-import { VCM_ROLE_DEFINITIONS } from "../../shared/constants.js";
+import { CORE_VCM_ROLE_DEFINITIONS, CORE_VCM_ROLE_NAMES, GATE_REVIEWER_ROLE_DEFINITION } from "../../shared/constants.js";
 import { VcmError } from "../errors.js";
 import { submitTerminalInput } from "../runtime/terminal-submit.js";
 import { getTaskRuntimeRepoRoot } from "../services/task-service.js";
@@ -407,17 +407,36 @@ export function createGatewayService(deps) {
             taskSlug: task.taskSlug,
             mode: template.autoOrchestration ? "auto" : "manual"
         });
+        const gateReviewSettings = await deps.appSettings.getGateReviewSettings(project.repoRoot, task.taskSlug);
+        const roleDefinitions = [
+            ...CORE_VCM_ROLE_DEFINITIONS,
+            ...(gateReviewSettings.enabled ? [GATE_REVIEWER_ROLE_DEFINITION] : [])
+        ];
         const startedRoles = [];
-        for (const definition of VCM_ROLE_DEFINITIONS) {
+        for (const definition of roleDefinitions) {
             const roleTemplate = template.roles[definition.name];
             try {
-                await deps.sessionService.startRoleSession(project.repoRoot, task.taskSlug, definition.name, {
+                const sessionInput = {
                     cols: 100,
                     rows: 28,
                     permissionMode: roleTemplate.permissionMode,
                     model: roleTemplate.model,
                     effort: roleTemplate.effort
-                });
+                };
+                const existing = await deps.sessionService.getRoleSession(project.repoRoot, task.taskSlug, definition.name);
+                if (existing?.status === "running") {
+                    if (definition.name === "gate-reviewer") {
+                        await deps.sessionService.resumeRoleSession(project.repoRoot, task.taskSlug, definition.name, sessionInput);
+                    }
+                    startedRoles.push(definition.name);
+                    continue;
+                }
+                if (existing?.claudeSessionId) {
+                    await deps.sessionService.resumeRoleSession(project.repoRoot, task.taskSlug, definition.name, sessionInput);
+                }
+                else {
+                    await deps.sessionService.startRoleSession(project.repoRoot, task.taskSlug, definition.name, sessionInput);
+                }
                 startedRoles.push(definition.name);
             }
             catch (error) {
@@ -536,7 +555,7 @@ export function createGatewayService(deps) {
     async function stopRunningRoleSessions(repoRoot, taskSlug) {
         const sessions = await deps.sessionService.listRoleSessions(repoRoot, taskSlug);
         for (const session of sessions) {
-            if (session.status === "running") {
+            if (session.status === "running" && CORE_VCM_ROLE_NAMES.some((role) => role === session.role)) {
                 await deps.sessionService.stopRoleSession(repoRoot, taskSlug, session.role);
             }
         }

package/dist/backend/services/claude-hook-service.js

@@ -1,4 +1,4 @@
-import { isVcmRoleName } from "../../shared/constants.js";
+import { isGateReviewerRoleName, isVcmRoleName } from "../../shared/constants.js";
 import { VcmError } from "../errors.js";
 import { submitTerminalInput } from "../runtime/terminal-submit.js";
 import { getTaskRuntimeRepoRoot } from "./task-service.js";
@@ -22,15 +22,32 @@ export function createClaudeHookService(deps) {
             });
         }
         const config = await deps.projectService.loadConfig(project.repoRoot);
-        const task = await deps.taskService.loadTask(project.repoRoot, input.taskSlug);
+        const taskSlug = await resolveHookTaskSlug(project.repoRoot, input);
+        const task = await deps.taskService.loadTask(project.repoRoot, taskSlug);
         const taskRepoRoot = getTaskRuntimeRepoRoot(task);
         return {
             project,
             config,
             task,
+            taskSlug,
             taskRepoRoot
         };
     }
+    async function resolveHookTaskSlug(repoRoot, input) {
+        if (!isGateReviewerRoleName(input.role)) {
+            return input.taskSlug;
+        }
+        const session = await deps.sessionService.getProjectGateReviewerSession(repoRoot);
+        if (session?.activeTaskSlug) {
+            return session.activeTaskSlug;
+        }
+        throw new VcmError({
+            code: "GATE_REVIEWER_TASK_UNBOUND",
+            message: "Gate Reviewer hook arrived without an active task binding.",
+            statusCode: 409,
+            hint: "Start or resume Gate Reviewer from the current task before submitting work."
+        });
+    }
     async function handleUserPromptSubmitHook(input) {
         const eventName = parseHookEvent(input.event.hook_event_name);
         if (eventName !== "UserPromptSubmit") {
@@ -39,11 +56,11 @@ export function createClaudeHookService(deps) {
         const context = await getHookContext(input);
         deps.jobGuard?.notePromptSubmitted({
             repoRoot: context.project.repoRoot,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role
         });
         const session = await deps.sessionService.recordClaudeHookEvent(context.project.repoRoot, {
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             eventName,
             claudeSessionId: stringOrUndefined(input.event.session_id),
@@ -54,7 +71,7 @@ export function createClaudeHookService(deps) {
             repoRoot: context.project.repoRoot,
             stateRepoRoot: context.taskRepoRoot,
             stateRoot: context.config.stateRoot,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             eventName
         });
@@ -62,7 +79,7 @@ export function createClaudeHookService(deps) {
             await deps.translationService.recordConversationBoundary({
                 repoRoot: context.project.repoRoot,
                 taskRepoRoot: context.taskRepoRoot,
-                taskSlug: input.taskSlug,
+                taskSlug: context.taskSlug,
                 role: input.role,
                 sessionId: session.id,
                 boundaryKind: "start",
@@ -75,14 +92,14 @@ export function createClaudeHookService(deps) {
             stateRepoRoot: context.taskRepoRoot,
             stateRoot: context.config.stateRoot,
             handoffDir: context.task.handoffDir,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             prompt: stringOrUndefined(input.event.prompt)
         });
         return {
             ok: true,
             eventName,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             sessionUpdated: Boolean(session),
             dispatchedCount: 0,
@@ -95,11 +112,11 @@ export function createClaudeHookService(deps) {
             throwUnsupportedEvent(eventName);
         }
         const context = await getHookContext(input);
-        clearStopFailureRecovery(context.project.repoRoot, input.taskSlug, input.role);
+        clearStopFailureRecovery(context.project.repoRoot, context.taskSlug, input.role);
         if (options.allowBlock && deps.jobGuard) {
             const verdict = await deps.jobGuard.evaluateStop({
                 repoRoot: context.project.repoRoot,
-                taskSlug: input.taskSlug,
+                taskSlug: context.taskSlug,
                 role: input.role,
                 taskRepoRoot: context.taskRepoRoot
             });
@@ -109,7 +126,7 @@ export function createClaudeHookService(deps) {
                 return {
                     ok: true,
                     eventName,
-                    taskSlug: input.taskSlug,
+                    taskSlug: context.taskSlug,
                     role: input.role,
                     sessionUpdated: false,
                     dispatchedCount: 0,
@@ -118,7 +135,7 @@ export function createClaudeHookService(deps) {
             }
         }
         return recordTurnEnd(input, context, eventName, {
-            dispatchRouteFiles: true,
+            dispatchRouteFiles: !isGateReviewerRoleName(input.role),
             notifyGateway: true,
             settleGuard: true
         });
@@ -133,9 +150,9 @@ export function createClaudeHookService(deps) {
         const pending = await deps.messageService.listPendingRouteFiles(routeDispatchInput);
         const hasCompletionEvidence = pending.some((routeFile) => routeFile.fromRole === input.role);
         if (hasCompletionEvidence) {
-            clearStopFailureRecovery(context.project.repoRoot, input.taskSlug, input.role);
+            clearStopFailureRecovery(context.project.repoRoot, context.taskSlug, input.role);
             return recordTurnEnd(input, context, eventName, {
-                dispatchRouteFiles: true,
+                dispatchRouteFiles: !isGateReviewerRoleName(input.role),
                 notifyGateway: false,
                 settleGuard: true
             });
@@ -145,7 +162,7 @@ export function createClaudeHookService(deps) {
             return {
                 ok: true,
                 eventName,
-                taskSlug: input.taskSlug,
+                taskSlug: context.taskSlug,
                 role: input.role,
                 sessionUpdated: true,
                 dispatchedCount: 0
@@ -164,7 +181,7 @@ export function createClaudeHookService(deps) {
         }
         const context = await getHookContext(input);
         const session = await deps.sessionService.recordClaudeHookEvent(context.project.repoRoot, {
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             eventName,
             claudeSessionId: stringOrUndefined(input.event.session_id),
@@ -174,7 +191,7 @@ export function createClaudeHookService(deps) {
         return {
             ok: true,
             eventName,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             sessionUpdated: Boolean(session),
             dispatchedCount: 0
@@ -184,7 +201,7 @@ export function createClaudeHookService(deps) {
         const scopedRouteDispatchInput = createRouteDispatchInput(input, context, input.role);
         const settleRouteDispatchInput = createRouteDispatchInput(input, context);
         const session = await deps.sessionService.recordClaudeHookEvent(context.project.repoRoot, {
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             eventName,
             claudeSessionId: stringOrUndefined(input.event.session_id),
@@ -195,7 +212,7 @@ export function createClaudeHookService(deps) {
             repoRoot: context.project.repoRoot,
             stateRepoRoot: context.taskRepoRoot,
             stateRoot: context.config.stateRoot,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             eventName,
             ...(options.settleGuard
@@ -217,7 +234,7 @@ export function createClaudeHookService(deps) {
             await deps.translationService.recordConversationBoundary({
                 repoRoot: context.project.repoRoot,
                 taskRepoRoot: context.taskRepoRoot,
-                taskSlug: input.taskSlug,
+                taskSlug: context.taskSlug,
                 role: input.role,
                 sessionId: session.id,
                 boundaryKind: "end",
@@ -227,7 +244,7 @@ export function createClaudeHookService(deps) {
         if (options.notifyGateway && session && input.role === "project-manager") {
             void deps.gatewayService?.handlePmStop({
                 repoRoot: context.project.repoRoot,
-                taskSlug: input.taskSlug,
+                taskSlug: context.taskSlug,
                 session
             }).catch(() => undefined);
         }
@@ -237,7 +254,7 @@ export function createClaudeHookService(deps) {
         return {
             ok: true,
             eventName,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             role: input.role,
             sessionUpdated: Boolean(session),
             dispatchedCount: dispatched.filter((result) => result.delivered).length
@@ -250,7 +267,7 @@ export function createClaudeHookService(deps) {
             stateRepoRoot: context.taskRepoRoot,
             stateRoot: context.config.stateRoot,
             handoffDir: context.task.handoffDir,
-            taskSlug: input.taskSlug,
+            taskSlug: context.taskSlug,
             ...(stoppedRole ? { stoppedRole } : {})
         };
     }
@@ -258,18 +275,18 @@ export function createClaudeHookService(deps) {
         if (!deps.runtime) {
             return false;
         }
-        const key = stopFailureRecoveryKey(context.project.repoRoot, input.taskSlug, input.role);
+        const key = stopFailureRecoveryKey(context.project.repoRoot, context.taskSlug, input.role);
         const attempt = (stopFailureRecoveryAttempts.get(key) ?? 0) + 1;
         if (attempt > MAX_STOP_FAILURE_RECOVERY_ATTEMPTS) {
             return false;
         }
-        const session = await deps.sessionService.getRoleSession(context.project.repoRoot, input.taskSlug, input.role);
+        const session = await deps.sessionService.getRoleSession(context.project.repoRoot, context.taskSlug, input.role);
         if (!session || session.status !== "running") {
             return false;
         }
         stopFailureRecoveryAttempts.set(key, attempt);
         await submitTerminalInput(deps.runtime, session.id, renderStopFailureRecoveryPrompt(attempt));
-        await deps.sessionService.markRoleActivityRunning(context.project.repoRoot, input.taskSlug, input.role);
+        await deps.sessionService.markRoleActivityRunning(context.project.repoRoot, context.taskSlug, input.role);
         return true;
     }
     function clearStopFailureRecovery(repoRoot, taskSlug, role) {

package/dist/backend/services/message-service.js

@@ -1,6 +1,6 @@
 import path from "node:path";
 import { randomUUID } from "node:crypto";
-import { VCM_ROLE_NAMES, isVcmRoleName } from "../../shared/constants.js";
+import { CORE_VCM_ROLE_NAMES } from "../../shared/constants.js";
 import { VcmError } from "../errors.js";
 import { resolveRepoPath } from "../adapters/filesystem.js";
 import { submitTerminalInput } from "../runtime/terminal-submit.js";
@@ -282,8 +282,8 @@ async function listRouteFiles(fs, input) {
     return routeFiles;
 }
 function parseRouteFileName(fileName) {
-    for (const fromRole of VCM_ROLE_NAMES) {
-        for (const toRole of VCM_ROLE_NAMES) {
+    for (const fromRole of CORE_VCM_ROLE_NAMES) {
+        for (const toRole of CORE_VCM_ROLE_NAMES) {
             if (fromRole === toRole) {
                 continue;
             }
@@ -371,14 +371,14 @@ function selectDispatchCandidates(routeFiles, stoppedRole) {
     });
 }
 function validateMessagePolicy(fromRole, toRole, type) {
-    if (!VCM_ROLE_NAMES.includes(toRole)) {
+    if (!CORE_VCM_ROLE_NAMES.some((role) => role === toRole)) {
         throw new VcmError({
             code: "MESSAGE_TARGET_UNKNOWN",
             message: `Unknown target role: ${toRole}`,
             statusCode: 400
         });
     }
-    if (!isVcmRoleName(String(fromRole))) {
+    if (!CORE_VCM_ROLE_NAMES.some((role) => role === fromRole)) {
         throw new VcmError({
             code: "MESSAGE_SENDER_UNKNOWN",
             message: `Unknown sender role: ${fromRole}`,
@@ -425,7 +425,7 @@ function getMessageDeliveryTime(message) {
 }
 async function clearRouteFileIfStillMatchesMessage(fs, input, message) {
     const fromRole = message.fromRole;
-    if (!message.routePath || !isVcmRoleName(fromRole)) {
+    if (!message.routePath || !isCoreRouteRole(fromRole) || !isCoreRouteRole(message.toRole)) {
         return;
     }
     const absolutePath = resolveRepoPath(input.taskRepoRoot ?? input.repoRoot, message.routePath);
@@ -440,6 +440,9 @@ async function clearRouteFileIfStillMatchesMessage(fs, input, message) {
         await fs.writeText(absolutePath, "");
     }
 }
+function isCoreRouteRole(role) {
+    return CORE_VCM_ROLE_NAMES.some((candidate) => candidate === role);
+}
 function arraysEqual(left, right) {
     if (left.length !== right.length) {
         return false;

package/dist/backend/services/project-service.js

@@ -1,5 +1,5 @@
 import path from "node:path";
-import { VCM_ROLE_NAMES } from "../../shared/constants.js";
+import { CORE_VCM_ROLE_NAMES } from "../../shared/constants.js";
 import { VcmError } from "../errors.js";
 const DEFAULT_HANDOFF_ROOT = ".ai/vcm/handoffs";
 const DEFAULT_STATE_ROOT = ".ai/vcm";
@@ -179,7 +179,7 @@ export function buildDefaultProjectConfig(repoRoot) {
     return {
         version: 1,
         repoRoot,
-        defaultRoles: [...VCM_ROLE_NAMES],
+        defaultRoles: [...CORE_VCM_ROLE_NAMES],
         handoffRoot: DEFAULT_HANDOFF_ROOT,
         stateRoot: DEFAULT_STATE_ROOT,
         terminalBackend: "node-pty",