vibe-coding-master 0.7.17 → 0.7.19

package/dist/backend/services/gate-review-service.js

@@ -38,6 +38,7 @@ const VALIDATION_ANALYSIS_FIELDS = [
     "Public Contract Coverage",
     "Test Integrity",
     "Skips And Gaps",
+    "User Approval And Gap Disposition",
     "Validation Readiness"
 ];
 const CODE_DIFF_ANALYSIS_FIELDS = [
@@ -61,6 +62,8 @@ const SOURCE_ARTIFACTS = {
     ],
     "validation-adequacy": [
         ".ai/vcm/handoffs/architecture-plan.md",
+        ".ai/vcm/handoffs/architect-debug.md",
+        ".ai/vcm/handoffs/architecture-diagnosis.md",
         ".ai/vcm/handoffs/test-report.md",
         "docs/TESTING.md"
     ],
@@ -278,6 +281,32 @@ export function createGateReviewService(deps) {
                 message: `${coreInput.path} is ${coreInput.status}.`
             };
         }
+        if (gate === "validation-adequacy") {
+            const validationReportError = await readValidationReportError(deps.fs, context.taskRepoRoot);
+            if (validationReportError) {
+                index = applyGateState(index, gate, {
+                    status: "failed",
+                    decision: undefined,
+                    error: validationReportError,
+                    exceptionReason: undefined,
+                    requestId: undefined,
+                    requestPath: undefined,
+                    inputHash: undefined,
+                    requestedAt: undefined,
+                    startedAt: undefined,
+                    completedAt: now(),
+                    callbackStatus: "not_sent",
+                    callbackError: undefined
+                }, now(), true);
+                await saveIndex(deps.fs, context.taskRepoRoot, index);
+                return {
+                    status: "failed_to_start",
+                    gate,
+                    record: index.gates[gate],
+                    message: validationReportError
+                };
+            }
+        }
         const codeDiffInput = gate === "code-diff"
             ? await resolveCodeDiffInput(deps, context, record)
             : undefined;
@@ -393,7 +422,6 @@ export function createGateReviewService(deps) {
             return;
         }
         activeRuns.add(runKey);
-        let gateTurnStarted = false;
         try {
             const timestamp = now();
             await updateGateRecord(context, gate, {
@@ -418,7 +446,7 @@ export function createGateReviewService(deps) {
             }
             const session = await ensureGateReviewerSession(context);
             await submitTerminalInput(deps.runtime, session.id, prompt);
-            await deps.sessionService.markRoleActivityRunning(context.repoRoot, context.taskSlug, GATE_REVIEWER_ROLE);
+            await deps.sessionService.markRoleActivityRunning(context.repoRoot, context.taskSlug, GATE_REVIEWER_ROLE, session.id);
             await deps.roundService.recordRoleTurnEvent({
                 repoRoot: context.repoRoot,
                 stateRepoRoot: context.taskRepoRoot,
@@ -427,14 +455,11 @@ export function createGateReviewService(deps) {
                 role: GATE_REVIEWER_ROLE,
                 eventName: "UserPromptSubmit"
             });
-            gateTurnStarted = true;
             const parsed = await waitForGateReport(deps.fs, context.taskRepoRoot, gate, requestId, now(), {
                 intervalMs: reportPollIntervalMs,
                 timeoutMs: reportTimeoutMs
             });
             const completedAt = now();
-            await recordGateReviewerTurnStop(context, gateTurnStarted);
-            gateTurnStarted = false;
             await updateRequestStatus(deps.fs, context, requestId, "completed", {
                 completedAt,
                 decision: parsed.decision,
@@ -457,8 +482,6 @@ export function createGateReviewService(deps) {
         catch (error) {
             const timestamp = now();
             const message = errorMessage(error);
-            await recordGateReviewerTurnStop(context, gateTurnStarted);
-            gateTurnStarted = false;
             await updateRequestStatus(deps.fs, context, requestId, "failed", {
                 completedAt: timestamp,
                 error: message
@@ -478,20 +501,6 @@ export function createGateReviewService(deps) {
             activeRuns.delete(runKey);
         }
     }
-    async function recordGateReviewerTurnStop(context, shouldRecord) {
-        if (!shouldRecord) {
-            return;
-        }
-        await deps.sessionService.markRoleActivityIdle(context.repoRoot, context.taskSlug, GATE_REVIEWER_ROLE);
-        await deps.roundService.recordRoleTurnEvent({
-            repoRoot: context.repoRoot,
-            stateRepoRoot: context.taskRepoRoot,
-            stateRoot: context.stateRoot,
-            taskSlug: context.taskSlug,
-            role: GATE_REVIEWER_ROLE,
-            eventName: "Stop"
-        });
-    }
     async function ensureGateReviewerSession(context) {
         const existing = await deps.sessionService.getRoleSession(context.repoRoot, context.taskSlug, GATE_REVIEWER_ROLE);
         if (existing?.status === "running" && deps.runtime.getSession(existing.id)) {
@@ -541,7 +550,7 @@ export function createGateReviewService(deps) {
         });
         try {
             await submitTerminalInput(deps.runtime, session.id, prompt);
-            await deps.sessionService.markRoleActivityRunning(context.repoRoot, context.taskSlug, "project-manager");
+            await deps.sessionService.markRoleActivityRunning(context.repoRoot, context.taskSlug, "project-manager", session.id);
             await deps.roundService.recordRoleTurnEvent({
                 repoRoot: context.repoRoot,
                 stateRepoRoot: context.taskRepoRoot,
@@ -986,6 +995,24 @@ async function readArchitectureBriefError(fs, taskRepoRoot) {
     }
     return undefined;
 }
+async function readValidationReportError(fs, taskRepoRoot) {
+    const relativePath = CORE_INPUT_ARTIFACTS["validation-adequacy"];
+    if (!relativePath) {
+        return undefined;
+    }
+    const absolutePath = resolveRepoPath(taskRepoRoot, relativePath);
+    const content = await fs.pathExists(absolutePath) ? await fs.readText(absolutePath) : null;
+    const check = checkMarkdownArtifact("test-report", relativePath, content);
+    if (check.status === "ok") {
+        return undefined;
+    }
+    const details = [
+        check.missingHeadings.length > 0 ? `missing headings: ${check.missingHeadings.join(", ")}` : "",
+        check.invalidFields.length > 0 ? check.invalidFields.join(" ") : "",
+        check.hasPlaceholder ? "contains placeholders" : ""
+    ].filter(Boolean).join("; ");
+    return `${relativePath} is incomplete and cannot start validation-adequacy review.${details ? ` ${details}` : ""}`;
+}
 async function readArchitectureEvidenceError(fs, taskRepoRoot) {
     const relativePath = ".ai/vcm/handoffs/architecture-evidence.md";
     const absolutePath = resolveRepoPath(taskRepoRoot, relativePath);
@@ -1214,16 +1241,14 @@ async function validateValidationApprovalInput(fs, taskRepoRoot) {
     const absolutePath = resolveRepoPath(taskRepoRoot, relativePath);
     const content = await fs.pathExists(absolutePath) ? await fs.readText(absolutePath) : null;
     const check = checkMarkdownArtifact("test-report", relativePath, content);
-    const testResult = content ? matchField(content, "Test Result")?.toLowerCase() : undefined;
-    if (check.status === "ok" && testResult === "pass") {
+    if (check.status === "ok") {
         return;
     }
     const details = [
-        check.status !== "ok" ? `status=${check.status}` : "",
+        `status=${check.status}`,
         check.missingHeadings.length > 0 ? `missing headings: ${check.missingHeadings.join(", ")}` : "",
         check.invalidFields.length > 0 ? check.invalidFields.join(" ") : "",
-        check.hasPlaceholder ? "contains placeholders" : "",
-        testResult !== "pass" ? "Test Result must be pass before approval." : ""
+        check.hasPlaceholder ? "contains placeholders" : ""
     ].filter(Boolean).join("; ");
     throw new VcmError({
         code: "GATE_REVIEW_VALIDATION_INPUT_INCOMPLETE",

package/dist/backend/services/harness-service.js

@@ -43,9 +43,9 @@ const LEGACY_CODEX_HARNESS_PATHS = [
     ".claude/skills/vcm-codex-review-gate",
     ".ai/tools/request-codex-review"
 ];
-const VCM_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,event}));});'"'"' | curl -fsS --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code" -H "content-type: application/json" --data-binary @- >/dev/null || true'`;
-const VCM_STOP_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,event}));});'"'"' | curl -fsS --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 1 --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code/stop" -H "content-type: application/json" --data-binary @- || true'`;
-const VCM_PERMISSION_REQUEST_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,event}));});'"'"' | curl -fsS --max-time 5 -X POST "\${VCM_API_URL}/api/hooks/claude-code/permission-request" -H "content-type: application/json" --data-binary @- || true'`;
+const VCM_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code" -H "content-type: application/json" --data-binary @- >/dev/null || true'`;
+const VCM_STOP_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 1 --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code/stop" -H "content-type: application/json" --data-binary @- || true'`;
+const VCM_PERMISSION_REQUEST_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --max-time 5 -X POST "\${VCM_API_URL}/api/hooks/claude-code/permission-request" -H "content-type: application/json" --data-binary @- || true'`;
 const VCM_BASH_GUARD_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ]; then exit 0; fi; guard=""; repo="$(git rev-parse --show-toplevel 2>/dev/null || true)"; if [ -n "$repo" ] && [ -f "$repo/.ai/tools/vcm-bash-guard" ]; then guard="$repo/.ai/tools/vcm-bash-guard"; else cwd="$(pwd -P 2>/dev/null || pwd)"; dir="$cwd"; while [ -n "$dir" ] && [ "$dir" != "/" ]; do if [ -f "$dir/.ai/tools/vcm-bash-guard" ]; then guard="$dir/.ai/tools/vcm-bash-guard"; break; fi; dir="$(dirname "$dir")"; done; if [ -z "$guard" ] && [ -n "\${CLAUDE_PROJECT_DIR:-}" ] && [ -f "\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard" ]; then guard="\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard"; fi; fi; [ -n "$guard" ] || exit 0; python3 "$guard" || exit 0'`;
 const VCM_BASH_DEFAULT_TIMEOUT_MS = "600000";
 const VCM_AUTO_MEMORY_ENABLED = false;

package/dist/backend/services/message-service.js

@@ -118,7 +118,7 @@ export function createMessageService(deps) {
         await submitTerminalInput(deps.runtime, session.id, renderMessageEnvelope(delivered), {
             enterDelayMs: autoDispatchEnterDelayMs
         });
-        await deps.sessionService.markRoleActivityRunning(input.repoRoot, input.taskSlug, routeFile.toRole);
+        await deps.sessionService.markRoleActivityRunning(input.repoRoot, input.taskSlug, routeFile.toRole, session.id);
         if (routeFile.fromRole === PM_ROLE) {
             await deps.taskWorkflowService?.recordPmDispatch({
                 taskRepoRoot: input.taskRepoRoot ?? input.repoRoot,

package/dist/backend/services/runtime-coordinator-service.js

@@ -51,8 +51,8 @@ export function createRuntimeCoordinatorService(deps) {
                 .then((status) => status.initialized)
                 .catch(() => false);
             await Promise.all([
-                reconcileHarnessEngineer(repoRoot, activeTask),
-                reconcileTranslator(repoRoot, activeTask, preferences.translationEnabled && harnessInitialized)
+                reconcileHarnessEngineer(repoRoot, activeTask, preferences.toolSessionDefaults["harness-engineer"]),
+                reconcileTranslator(repoRoot, activeTask, preferences.translationEnabled && harnessInitialized, preferences.toolSessionDefaults.translator)
             ]);
             if (preferences.translationEnabled && harnessInitialized) {
                 await startConversationTranslationListeners(repoRoot, activeTask);
@@ -105,18 +105,18 @@ export function createRuntimeCoordinatorService(deps) {
         }
         return activeTasks[0] ?? null;
     }
-    async function reconcileHarnessEngineer(repoRoot, task) {
+    async function reconcileHarnessEngineer(repoRoot, task, launchOptions) {
         const existing = await deps.sessionService.getRoleSession(repoRoot, task.taskSlug, "harness-engineer");
         if (!shouldAutoEnsureTaskToolSession(existing)) {
             return;
         }
         await ensureTaskToolRoleSession(repoRoot, task.taskSlug, "harness-engineer", {
-            permissionMode: existing?.permissionMode,
-            model: existing?.model,
-            effort: existing?.effort
+            permissionMode: existing?.permissionMode ?? launchOptions.permissionMode,
+            model: existing?.model ?? launchOptions.model,
+            effort: existing?.effort ?? launchOptions.effort
         });
     }
-    async function reconcileTranslator(repoRoot, task, enabled) {
+    async function reconcileTranslator(repoRoot, task, enabled, launchOptions) {
         if (!enabled) {
             return;
         }
@@ -125,9 +125,9 @@ export function createRuntimeCoordinatorService(deps) {
             return;
         }
         await ensureTaskToolRoleSession(repoRoot, task.taskSlug, "translator", {
-            permissionMode: existing?.permissionMode,
-            model: existing?.model,
-            effort: existing?.effort
+            permissionMode: existing?.permissionMode ?? launchOptions.permissionMode,
+            model: existing?.model ?? launchOptions.model,
+            effort: existing?.effort ?? launchOptions.effort
         });
     }
     function shouldAutoEnsureTaskToolSession(session) {

package/dist/backend/services/session-service.js

@@ -18,6 +18,7 @@ const PROJECT_TRANSLATOR_SCOPE = "__project__";
 const PROJECT_HARNESS_ENGINEER_SCOPE = "__project_harness_engineer__";
 const PROJECT_TOOL_CD_ENTER_DELAY_MS = 500;
 const CLAUDE_CODE_DISABLE_AUTO_MEMORY = "1";
+const CLAUDE_CODE_DISABLE_BACKGROUND_TASKS = "1";
 // Project tool sessions launch a Claude Code TUI inside a PTY. The PTY reports
 // "running" the instant it is spawned, which is earlier than the moment the TUI
 // can actually accept pasted input. These bounds drive a quiescence-based
@@ -84,6 +85,7 @@ export function createSessionService(deps) {
             ...deps.claude.buildRoleStartCommand(role, config.claudeCommand, permissionMode, resumeClaudeSessionId, launchMode === "resume", model, effort, modelSettingsOverride, input.appendSystemPrompt),
             cwd: taskRepoRoot
         };
+        const runtimeSessionToken = randomUUID();
         const runtimeSession = await deps.runtime.createSession({
             repoRoot,
             taskSlug,
@@ -97,7 +99,8 @@ export function createSessionService(deps) {
                 VCM_TASK_REPO_ROOT: taskRepoRoot,
                 VCM_TASK_SLUG: taskSlug,
                 VCM_ROLE: role,
-                VCM_SESSION_ID: claudeSessionId || undefined
+                VCM_SESSION_ID: claudeSessionId || undefined,
+                VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, buildUsageTelemetryEnvironment(deps.apiUrl, role, model)),
             cols: input.cols,
             rows: input.rows
@@ -106,6 +109,7 @@ export function createSessionService(deps) {
         const harnessRevision = await readCurrentHarnessRevision(repoRoot);
         const record = {
             id: runtimeSession.id,
+            runtimeSessionToken,
             claudeSessionId,
             transcriptPath,
             taskSlug,
@@ -208,6 +212,7 @@ export function createSessionService(deps) {
             ...deps.claude.buildRoleStartCommand(TRANSLATOR_ROLE, config.claudeCommand, permissionMode, resumeClaudeSessionId, launchMode === "resume", model, effort, modelSettingsOverride),
             cwd: launchCwd
         };
+        const runtimeSessionToken = randomUUID();
         const runtimeSession = await deps.runtime.createSession({
             repoRoot,
             taskSlug: PROJECT_TRANSLATOR_SCOPE,
@@ -224,7 +229,8 @@ export function createSessionService(deps) {
                 // active task; VCM_TASK_REPO_ROOT remains the active worktree.
                 VCM_TASK_SLUG: PROJECT_TRANSLATOR_SCOPE,
                 VCM_ROLE: TRANSLATOR_ROLE,
-                VCM_SESSION_ID: claudeSessionId || undefined
+                VCM_SESSION_ID: claudeSessionId || undefined,
+                VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, buildUsageTelemetryEnvironment(deps.apiUrl, TRANSLATOR_ROLE, model)),
             cols: input.cols,
             rows: input.rows
@@ -233,6 +239,7 @@ export function createSessionService(deps) {
         const harnessRevision = await readCurrentHarnessRevision(repoRoot);
         const record = {
             id: runtimeSession.id,
+            runtimeSessionToken,
             claudeSessionId,
             transcriptPath,
             taskSlug: PROJECT_TRANSLATOR_SCOPE,
@@ -321,6 +328,7 @@ export function createSessionService(deps) {
             ...deps.claude.buildRoleStartCommand(HARNESS_ENGINEER_ROLE, config.claudeCommand, permissionMode, resumeClaudeSessionId, launchMode === "resume", model, effort, modelSettingsOverride),
             cwd: launchCwd
         };
+        const runtimeSessionToken = randomUUID();
         const runtimeSession = await deps.runtime.createSession({
             repoRoot,
             taskSlug: PROJECT_HARNESS_ENGINEER_SCOPE,
@@ -337,7 +345,8 @@ export function createSessionService(deps) {
                 // active task; VCM_TASK_REPO_ROOT remains the active worktree.
                 VCM_TASK_SLUG: PROJECT_HARNESS_ENGINEER_SCOPE,
                 VCM_ROLE: HARNESS_ENGINEER_ROLE,
-                VCM_SESSION_ID: claudeSessionId || undefined
+                VCM_SESSION_ID: claudeSessionId || undefined,
+                VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, buildUsageTelemetryEnvironment(deps.apiUrl, HARNESS_ENGINEER_ROLE, model)),
             cols: input.cols,
             rows: input.rows
@@ -346,6 +355,7 @@ export function createSessionService(deps) {
         const harnessRevision = await readCurrentHarnessRevision(repoRoot);
         const record = {
             id: runtimeSession.id,
+            runtimeSessionToken,
             claudeSessionId,
             transcriptPath,
             taskSlug: PROJECT_HARNESS_ENGINEER_SCOPE,
@@ -516,6 +526,7 @@ export function createSessionService(deps) {
             ...deps.claude.buildRoleStartCommand(session.role, config.claudeCommand, permissionMode, session.claudeSessionId, true, model, effort, modelSettingsOverride),
             cwd: launchCwd
         };
+        const runtimeSessionToken = randomUUID();
         const runtimeSession = await deps.runtime.createSession({
             repoRoot,
             taskSlug: normalizeProjectScopedRecordForPersistence(session).taskSlug,
@@ -529,7 +540,8 @@ export function createSessionService(deps) {
                 VCM_TASK_REPO_ROOT: targetCwd,
                 VCM_TASK_SLUG: normalizeProjectScopedRecordForPersistence(session).taskSlug,
                 VCM_ROLE: session.role,
-                VCM_SESSION_ID: session.claudeSessionId
+                VCM_SESSION_ID: session.claudeSessionId,
+                VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, buildUsageTelemetryEnvironment(deps.apiUrl, session.role, model))
         });
         if ((await waitForSessionInputReady(runtimeSession.id)) === "exited") {
@@ -537,6 +549,7 @@ export function createSessionService(deps) {
             return markProjectToolRuntimeUnavailable(repoRoot, {
                 ...session,
                 id: runtimeSession.id,
+                runtimeSessionToken,
                 status: "crashed",
                 activityStatus: "idle",
                 command: startCommand.display,
@@ -554,6 +567,7 @@ export function createSessionService(deps) {
         const resumed = {
             ...session,
             id: runtimeSession.id,
+            runtimeSessionToken,
             status: runtimeSession.status,
             activityStatus: "idle",
             command: startCommand.display,
@@ -680,9 +694,9 @@ export function createSessionService(deps) {
         const view = toRoleSessionRecordView(record, deps.runtime);
         return view ? withHarnessRevisionView(repoRoot, view) : undefined;
     }
-    async function markTaskRoleActivityIdle(repoRoot, taskSlug, role) {
+    async function markTaskRoleActivityIdle(repoRoot, taskSlug, role, expectedSessionId) {
         const current = await getTaskRoleSessionView(repoRoot, taskSlug, role);
-        if (!current) {
+        if (!current || (expectedSessionId && current.id !== expectedSessionId)) {
             return undefined;
         }
         const timestamp = now();
@@ -795,7 +809,7 @@ export function createSessionService(deps) {
         },
         async recordProjectTranslatorHookEvent(repoRoot, input) {
             const current = await this.getProjectTranslatorSession(repoRoot);
-            if (!current) {
+            if (!current || !matchesRoleHookSession(current, input)) {
                 return undefined;
             }
             const timestamp = now();
@@ -921,7 +935,7 @@ export function createSessionService(deps) {
         },
         async recordProjectHarnessEngineerHookEvent(repoRoot, input) {
             const current = await this.getProjectHarnessEngineerSession(repoRoot);
-            if (!current) {
+            if (!current || !matchesRoleHookSession(current, input)) {
                 return undefined;
             }
             const timestamp = now();
@@ -1040,7 +1054,7 @@ export function createSessionService(deps) {
         },
         async recordRoleHookEvent(repoRoot, input) {
             const current = await this.getRoleSession(repoRoot, input.taskSlug, input.role);
-            if (!current || (!input.allowSessionMismatch && !matchesRoleHookSession(current, input))) {
+            if (!current || !matchesRoleHookSession(current, input)) {
                 return undefined;
             }
             const timestamp = now();
@@ -1072,7 +1086,9 @@ export function createSessionService(deps) {
                 eventName: input.eventName,
                 sessionId: input.claudeSessionId,
                 transcriptPath: input.transcriptPath,
-                cwd: input.cwd
+                cwd: input.cwd,
+                runtimeSessionId: input.runtimeSessionId,
+                runtimeSessionToken: input.runtimeSessionToken
             });
         },
         async markTerminalSessionActivityIdle(repoRoot, sessionId) {
@@ -1095,11 +1111,11 @@ export function createSessionService(deps) {
                     ? markProjectToolActivityIdle(repoRoot, current, persistHarnessEngineerSession)
                     : undefined;
             }
-            return markTaskRoleActivityIdle(repoRoot, taskSlug, role);
+            return markTaskRoleActivityIdle(repoRoot, taskSlug, role, sessionId);
         },
-        async markRoleActivityRunning(repoRoot, taskSlug, role) {
+        async markRoleActivityRunning(repoRoot, taskSlug, role, expectedSessionId) {
             const current = await this.getRoleSession(repoRoot, taskSlug, role);
-            if (!current) {
+            if (!current || (expectedSessionId && current.id !== expectedSessionId)) {
                 return undefined;
             }
             const timestamp = now();
@@ -1155,7 +1171,18 @@ function toRoleSessionRecordView(record, runtime) {
         exitCode: runtimeSession.exitCode
     };
 }
-function matchesRoleHookSession(record, input) {
+export function matchesRoleHookSession(record, input) {
+    if (!record.claudeSessionId
+        && !record.transcriptPath
+        && input.eventName !== "UserPromptSubmit") {
+        return false;
+    }
+    if (input.runtimeSessionId) {
+        return record.id === input.runtimeSessionId;
+    }
+    if (record.runtimeSessionToken) {
+        return record.runtimeSessionToken === input.runtimeSessionToken;
+    }
     if (!record.claudeSessionId && !record.transcriptPath) {
         return input.eventName === "UserPromptSubmit";
     }
@@ -1165,9 +1192,6 @@ function matchesRoleHookSession(record, input) {
     if (input.transcriptPath && record.transcriptPath === input.transcriptPath) {
         return true;
     }
-    if (!input.sessionId && !input.transcriptPath) {
-        return true;
-    }
     return false;
 }
 function nextHookSessionIdentity(current, input) {
@@ -1209,7 +1233,7 @@ function isSessionMissingError(error) {
         error.code === "SESSION_MISSING";
 }
 function withoutRuntimeOnlySessionFields(session) {
-    const { pid: _pid, ...persisted } = session;
+    const { pid: _pid, runtimeSessionToken: _runtimeSessionToken, ...persisted } = session;
     return persisted;
 }
 function defaultIsProcessAlive(pid) {
@@ -1542,7 +1566,8 @@ function withClaudeCodeRuntimeEnv(env, modelEnvironment = {}, telemetryEnvironme
         ...env,
         ...modelEnvironment,
         ...telemetryEnvironment,
-        CLAUDE_CODE_DISABLE_AUTO_MEMORY
+        CLAUDE_CODE_DISABLE_AUTO_MEMORY,
+        CLAUDE_CODE_DISABLE_BACKGROUND_TASKS
     };
 }
 function buildUsageTelemetryEnvironment(apiUrl, role, model) {

package/dist/backend/services/terminal-interrupt-service.js

@@ -11,7 +11,10 @@ export function createTerminalInterruptService(deps) {
             if (!repoRoot) {
                 return;
             }
-            await deps.sessionService.markTerminalSessionActivityIdle(repoRoot, sessionId);
+            const session = await deps.sessionService.markTerminalSessionActivityIdle(repoRoot, sessionId);
+            if (!session) {
+                return;
+            }
             if (!isVcmRoleName(terminalSession.role)) {
                 return;
             }

package/dist/backend/services/turn-reconciler-service.js

@@ -96,6 +96,7 @@ function buildReconciledHook(taskSlug, role, session, eventName, evidence) {
             ...(session?.claudeSessionId ? { session_id: session.claudeSessionId } : {}),
             ...(session?.transcriptPath ? { transcript_path: session.transcriptPath } : {}),
             ...(session?.cwd ? { cwd: session.cwd } : {}),
+            ...(session?.id ? { vcm_runtime_session_id: session.id } : {}),
             vcm_reconciled: true,
             ...evidence
         }

package/dist/backend/templates/handoff.js

@@ -183,6 +183,10 @@ TBD
 
 ## Blocking Validation Issues
 
+TBD
+
+## User Approval Evidence
+
 TBD
 `;
 }

package/dist/backend/templates/harness/gate-review.js

@@ -110,6 +110,8 @@ production entry points needed to verify what those tests exercise. Read the
 relevant architect/coder definitions and \`.ai/vcm/handoffs/architecture-plan.md\`
 when the active flow produced an architecture plan. Read
 \`.ai/generated/public-surface.json\` when public contracts changed.
+When the report contains an approved Coverage Gap, also read the relevant
+Architect Debug and Architecture Diagnosis evidence.
 
 Reconstruct the accepted validation target, observable behavior, and risks
 from the active flow evidence and current implementation. Treat Tester
@@ -138,7 +140,20 @@ actual tests, validation level does not match risk, an important behavior has
 no concrete coverage mapping, a required check was skipped, required coverage
 is unavailable, or a current-task coverage gap remains. A concrete risk-based
 reason may show that integration or E2E coverage is unnecessary; unavailable
-required coverage is not an approval reason.
+required coverage without exact user approval is not an approval reason.
+
+Treat every unresolved required-coverage item as gate-blocking unless
+\`test-report.md\` contains the user's exact approval routed by project-manager.
+Verify that Architect Debug and Architecture Diagnosis were completed before
+user acceptance was requested, the approved gap exactly matches the final
+Tester evidence, the affected behavior and remaining risk are stated
+completely, and any new or changed \`Known Testing Gaps\` entry matches the
+approved durable limitation. Project-manager, Architect, or Tester judgment is
+not user authorization.
+
+An approved gap keeps \`Test Result: fail\`. Gate approval means the validation
+evidence and exact user exception are complete and consistent; it does not
+convert the result to \`pass\` or independently accept the risk.
 
 ## Code Diff Gate
 
@@ -246,6 +261,7 @@ Use this findings structure:
 - Public Contract Coverage:
 - Test Integrity:
 - Skips And Gaps:
+- User Approval And Gap Disposition:
 - Validation Readiness:
 
 <!-- Include Code Diff Analysis only for code-diff gate. -->
@@ -306,6 +322,7 @@ If there are no findings, write:
 - Public Contract Coverage:
 - Test Integrity:
 - Skips And Gaps:
+- User Approval And Gap Disposition:
 - Validation Readiness:
 
 <!-- Include Code Diff Analysis only for code-diff gate. -->

package/dist/backend/templates/harness/project-manager-agent.js

@@ -180,7 +180,7 @@ Architecture Diagnosis Mode must run before another Debug Mode fix or Coder disp
 #### Allowed Branches
 
 - **Code-Diff Revision:** If the code-diff Gate returns \`request_changes\`, route the report to Architecture Diagnosis Mode and rerun \`code-diff --source architect-diagnosis\` after correction.
-- **Tester Failure:** If Tester returns \`Test Result: fail\` for the Diagnosis implementation, pause and report to the user.
+- **Tester Failure:** If Tester returns \`Test Result: fail\` for the Diagnosis implementation, pause and report to the user. If required validation remains unavailable, ask whether the user explicitly approves retaining that exact Coverage Gap.
 
 #### Successful Exit
 
@@ -195,6 +195,14 @@ After Tester Failure, PM should summarize:
 - what the Architect diagnosed
 - what Tester still found wrong
 
+If the user approves the exact gap, record the approval verbatim and route
+Tester to add the approved \`Coverage Gaps\` entry and, when applicable, the
+durable \`Known Testing Gaps\` entry. Then run the validation-adequacy Gate and
+continue using the recorded user-approved exception.
+
+Without explicit user approval, the gap remains blocking and the workflow
+stays paused.
+
 ### Docs-Only Flow
 
 Use Docs-Only Flow when the accepted task changes Architect-owned project documentation and does not require production-code, test-code, runtime-behavior, public-contract, dependency, or Harness changes.