vibe-coding-master 0.0.12 → 0.0.14

package/dist/backend/templates/harness/coder-agent.js

@@ -7,5 +7,10 @@ export function renderCoderHarnessRules() {
 - Maintain implementation-log.md and validation-log.md under the current task handoff directory.
 - Do not change module boundaries, public contracts, dependency direction, or test strategy without project-manager/architect replan.
 - Stop and reply to project-manager when blocked, unclear, or when the plan no longer matches reality.
+- Reply to project-manager once per received VCM message when complete, blocked, or unclear; do not send fragmented progress updates unless project-manager explicitly requested them.
+- If you need to send a VCM message, send at most one message to any single target role in the current Claude Code turn, then end the turn.
+- After a successful vcmctl reply or vcmctl result, end the turn immediately. Do not run vcmctl inbox, poll, loop, or keep working while waiting for project-manager to answer.
+- Do not wait in a loop for another role to answer. VCM will deliver later replies in a new turn.
+- Do not use Claude Code Task/Subagent for VCM role delegation; communicate through vcmctl only.
 `;
 }

package/dist/backend/templates/harness/gitignore.js

@@ -1,6 +1,7 @@
 export function renderGitignoreHarnessRules() {
     return [
         "# VCM local app state, task metadata, session records, and task worktrees.",
-        ".ai/vcm/"
+        ".ai/vcm/",
+        ".claude/worktrees/"
     ].join("\n");
 }

package/dist/backend/templates/harness/project-manager-agent.js

@@ -5,6 +5,13 @@ export function renderProjectManagerHarnessRules() {
 - Clarify the user's request, classify task risk, and choose the role route.
 - Use vcmctl send to assign work to architect, coder, or reviewer.
 - Send role work as durable instructions with artifact refs when possible.
+- Enforce per-role turn-taking: keep at most one in-flight message per target role.
+- Before sending another task, question, revise, or review-request to the same role, wait for that role's vcmctl reply or vcmctl result.
+- In one Claude Code turn, send at most one VCM message to any single target role.
+- After a successful vcmctl send, end the turn immediately. Do not send another VCM message, run vcmctl inbox, poll for the target role's response, or keep the conversation open waiting for another agent.
+- Continue orchestration only in a later turn after VCM delivers that role's vcmctl reply or vcmctl result.
+- Do not use Claude Code Task/Subagent for VCM role delegation; VCM manages the four role sessions.
+- Use cancel only for urgent supersession; include what is superseded.
 - Track the workflow gates: architecture plan, implementation/validation, review, docs sync, final acceptance.
 - Request architect post-review docs sync after reviewer completes.
 - Prepare final acceptance, commit, and PR only after reviewer and docs-sync gates pass or an explicit exception is approved.

package/dist/backend/templates/harness/reviewer-agent.js

@@ -9,5 +9,10 @@ export function renderReviewerHarnessRules() {
 - Escalate larger implementation issues to project-manager for coder follow-up.
 - Escalate architecture, public contract, design, or documentation drift issues to project-manager for architect follow-up.
 - Do not take over broad implementation and do not weaken tests to pass validation.
+- Reply to project-manager once per received VCM message when complete, blocked, or unclear; do not send fragmented progress updates unless project-manager explicitly requested them.
+- If you need to send a VCM message, send at most one message to any single target role in the current Claude Code turn, then end the turn.
+- After a successful vcmctl reply or vcmctl result, end the turn immediately. Do not run vcmctl inbox, poll, loop, or keep working while waiting for project-manager to answer.
+- Do not wait in a loop for another role to answer. VCM will deliver later replies in a new turn.
+- Do not use Claude Code Task/Subagent for VCM role delegation; communicate through vcmctl only.
 `;
 }

package/dist/backend/templates/message-envelope.js

@@ -17,7 +17,9 @@ ${artifactRefs}
 
 Instructions:
 - Read the message and execute only within this VCM task.
-- Reply to project-manager with vcmctl reply when complete, blocked, or unclear.
+- Reply to project-manager with vcmctl result when complete, or vcmctl reply when blocked or unclear.
+- After a successful vcmctl reply or vcmctl result, end this Claude Code turn immediately.
+- Do not run vcmctl inbox, poll, loop, or wait for project-manager in this turn. VCM will deliver later replies in a new turn.
 [/VCM MESSAGE]
 `;
 }

package/dist/backend/ws/terminal-ws.js

@@ -41,7 +41,9 @@ function bindTerminalSocket(ws, sessionId, runtime) {
                 runtime.write(sessionId, message.data);
             }
             else if (message.type === "resize") {
-                runtime.resize(sessionId, message.cols, message.rows);
+                if (isSafeTerminalResize(message.cols, message.rows)) {
+                    runtime.resize(sessionId, message.cols, message.rows);
+                }
             }
         }
         catch (error) {
@@ -53,6 +55,18 @@ function bindTerminalSocket(ws, sessionId, runtime) {
         unsubscribe();
     });
 }
+export function isSafeTerminalResize(cols, rows) {
+    return (Number.isInteger(cols) &&
+        Number.isInteger(rows) &&
+        cols >= MIN_TERMINAL_COLS &&
+        rows >= MIN_TERMINAL_ROWS &&
+        cols <= MAX_TERMINAL_COLS &&
+        rows <= MAX_TERMINAL_ROWS);
+}
+const MIN_TERMINAL_COLS = 20;
+const MIN_TERMINAL_ROWS = 5;
+const MAX_TERMINAL_COLS = 1000;
+const MAX_TERMINAL_ROWS = 200;
 function send(ws, message) {
     if (ws.readyState === ws.OPEN) {
         ws.send(JSON.stringify(message));

package/dist/cli/vcmctl.js

@@ -33,6 +33,10 @@ async function main(argv = process.argv.slice(2)) {
         console.log(JSON.stringify(response, null, 2));
         return;
     }
+    if (command === "hook-event") {
+        await sendHookEvent(await readStdinJson());
+        return;
+    }
     if (command === "ready") {
         console.log("ready: VCM readiness signaling is planned for a later phase.");
         return;
@@ -49,6 +53,31 @@ async function sendMessage(input) {
     });
     console.log(JSON.stringify(result, null, 2));
 }
+async function sendHookEvent(event) {
+    const input = {
+        taskSlug: getTaskSlug(),
+        role: getEnvRole(),
+        event
+    };
+    await fetchJson(`${getApiUrl()}/api/hooks/claude-code`, {
+        method: "POST",
+        body: JSON.stringify(input),
+        headers: {
+            "content-type": "application/json"
+        }
+    });
+}
+async function readStdinJson() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    const raw = Buffer.concat(chunks).toString("utf8").trim();
+    if (!raw) {
+        return {};
+    }
+    return JSON.parse(raw);
+}
 function parseOptions(args) {
     const options = {
         artifactRefs: []
@@ -133,6 +162,7 @@ Usage:
   vcmctl reply --type blocked --body "Need clarification."
   vcmctl result --body-file /tmp/result.md --artifact .ai/vcm/handoffs/implementation-log.md
   vcmctl inbox
+  vcmctl hook-event < hook-payload.json
 `);
 }
 main().catch((error) => {

package/dist/shared/types/claude-hook.js

@@ -0,0 +1 @@
+export {};

package/dist/shared/types/round.js

@@ -0,0 +1 @@
+export {};