vibe-coding-master 0.7.40 → 0.7.41

package/dist/backend/adapters/claude-adapter.js

@@ -1,3 +1,4 @@
+import { roleRuntimeDisallowedTools, roleUsesLsp } from "../role-tool-policy.js";
 import { isCcrSessionModel } from "../../shared/types/session.js";
 import { VcmError } from "../errors.js";
 export function createClaudeAdapter(runner) {
@@ -20,7 +21,13 @@ export function createClaudeAdapter(runner) {
         },
         buildRoleStartCommand(role, command = "claude", permissionMode = "default", claudeSessionId, resume = false, model = "default", effort = "default", settingsOverride, appendSystemPrompt, pluginDirs = []) {
             const args = pluginDirs.flatMap((pluginDir) => ["--plugin-dir", pluginDir]);
-            args.push("--allowedTools", "Glob,Grep");
+            const lspEnabled = roleUsesLsp(role) && pluginDirs.length > 0;
+            if (lspEnabled) {
+                args.push("--disallowedTools", roleRuntimeDisallowedTools(role).join(","));
+            }
+            else {
+                args.push("--allowedTools", "Glob,Grep");
+            }
             args.push("--agent", role);
             const sessionSettings = { ...settingsOverride };
             if (claudeSessionId) {

package/dist/backend/cli/install-vcm-harness.js

@@ -5,6 +5,7 @@ import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
 import { renderArchitectHarnessRules } from "../templates/harness/architect-agent.js";
+import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
@@ -67,12 +68,12 @@ const AGENT_FRONTMATTER = {
     },
     architect: {
         description: "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.",
-        tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP",
+        disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     coder: {
         description: "VCM implementation role for scoped code changes and focused tests.",
-        tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP",
+        disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     tester: {
@@ -80,7 +81,7 @@ const AGENT_FRONTMATTER = {
     },
     reviewer: {
         description: "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.",
-        tools: "Read, Grep, Glob, Bash, Write, LSP",
+        disallowedTools: REVIEWER_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     translator: {
@@ -99,10 +100,10 @@ const AGENT_FRONTMATTER = {
         effort: "xhigh"
     }
 };
-const REQUIRED_AGENT_TOOLS = {
-    architect: ["Grep", "Agent", "LSP"],
-    coder: ["Grep", "Agent", "LSP"],
-    reviewer: ["Grep", "LSP"]
+const REQUIRED_AGENT_DISALLOWED_TOOLS = {
+    architect: CODE_ROLE_DISALLOWED_TOOLS,
+    coder: CODE_ROLE_DISALLOWED_TOOLS,
+    reviewer: REVIEWER_DISALLOWED_TOOLS
 };
 const REQUIRED_AGENT_SKILLS = {
     architect: ["vcm-code-navigation"],
@@ -692,8 +693,9 @@ async function installManagedFile({ projectRoot, definition, dryRun, operations
     if (definition.memoryBlock) {
         nextContent = ensureVcmMemoryBlock(nextContent);
     }
-    for (const requiredTool of REQUIRED_AGENT_TOOLS[definition.agentName] ?? []) {
-        nextContent = ensureAgentTool(nextContent, requiredTool);
+    const requiredDisallowedTools = REQUIRED_AGENT_DISALLOWED_TOOLS[definition.agentName];
+    if (requiredDisallowedTools) {
+        nextContent = ensureAgentDisallowedTools(nextContent, requiredDisallowedTools);
     }
     for (const requiredSkill of REQUIRED_AGENT_SKILLS[definition.agentName] ?? []) {
         nextContent = ensureAgentSkill(nextContent, requiredSkill);
@@ -737,31 +739,34 @@ function renderNewManagedFile(definition, block) {
     const suffix = definition.contentAfterBlock?.trim();
     if (definition.agentName) {
         const frontmatter = AGENT_FRONTMATTER[definition.agentName];
-        const tools = frontmatter.tools ?? "Read, Grep, Glob, Bash, Edit, Write";
+        const toolPolicy = frontmatter.disallowedTools
+            ? `disallowedTools: ${frontmatter.disallowedTools}`
+            : `tools: ${frontmatter.tools ?? "Read, Grep, Glob, Bash, Edit, Write"}`;
         const model = frontmatter.model ? `\nmodel: ${frontmatter.model}` : "";
         const effort = frontmatter.effort ? `\neffort: ${frontmatter.effort}` : "";
         const skills = frontmatter.skills?.length
             ? `\nskills:\n${frontmatter.skills.map((skill) => `  - ${skill}`).join("\n")}`
             : "";
-        return `---\nname: ${definition.agentName}\ndescription: ${frontmatter.description}\ntools: ${tools}${model}${effort}${skills}\n---\n\n# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
+        return `---\nname: ${definition.agentName}\ndescription: ${frontmatter.description}\n${toolPolicy}${model}${effort}${skills}\n---\n\n# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
     }
     return `# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
 }
-function ensureAgentTool(content, requiredTool) {
+function ensureAgentDisallowedTools(content, requiredTools) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
     if (!frontmatterMatch) {
         return content;
     }
-    const toolsMatch = frontmatterMatch[0].match(/^tools:\s*(.*)$/m);
-    if (!toolsMatch) {
-        return content.replace(/^(---\r?\n[\s\S]*?)(\r?\n---)/, `$1\ntools: ${requiredTool}$2`);
-    }
-    const tools = toolsMatch[1].split(",").map((tool) => tool.trim()).filter(Boolean);
-    if (tools.includes(requiredTool)) {
-        return content;
-    }
-    const nextTools = [...tools, requiredTool].join(", ");
-    return content.replace(frontmatterMatch[0], frontmatterMatch[0].replace(toolsMatch[0], `tools: ${nextTools}`));
+    const withoutAllowedTools = frontmatterMatch[0].replace(/^tools:\s*.*\r?\n?/m, "");
+    const disallowedMatch = withoutAllowedTools.match(/^disallowedTools:\s*(.*)$/m);
+    const existing = disallowedMatch?.[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter(Boolean) ?? [];
+    const disallowedTools = [...new Set([...existing, ...requiredTools])].join(", ");
+    const nextFrontmatter = disallowedMatch
+        ? withoutAllowedTools.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools}`)
+        : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
+    return content.replace(frontmatterMatch[0], nextFrontmatter);
 }
 function ensureAgentSkill(content, requiredSkill) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);

package/dist/backend/role-tool-policy.js

@@ -0,0 +1,60 @@
+const LSP_FRONTMATTER_DISALLOWED_TOOLS = [
+    "NotebookEdit",
+    "WebFetch",
+    "WebSearch"
+];
+const NON_VCM_ROLE_RUNTIME_TOOLS = [
+    "AskUserQuestion",
+    "CronCreate",
+    "CronDelete",
+    "CronList",
+    "DesignSync",
+    "EnterPlanMode",
+    "EnterWorktree",
+    "ExitPlanMode",
+    "ExitWorktree",
+    "KillShell",
+    "Monitor",
+    "NotebookEdit",
+    "PushNotification",
+    "RemoteTrigger",
+    "ReportFindings",
+    "ScheduleWakeup",
+    "SendMessage",
+    "Skill",
+    "TaskCreate",
+    "TaskGet",
+    "TaskList",
+    "TaskOutput",
+    "TaskStop",
+    "TaskUpdate",
+    "TodoWrite",
+    "WebFetch",
+    "WebSearch",
+    "Workflow"
+];
+export const CODE_ROLE_DISALLOWED_TOOLS = [...LSP_FRONTMATTER_DISALLOWED_TOOLS];
+export const REVIEWER_DISALLOWED_TOOLS = [
+    "Agent",
+    "Edit",
+    ...LSP_FRONTMATTER_DISALLOWED_TOOLS
+];
+export const CODE_ROLE_RUNTIME_DISALLOWED_TOOLS = [...NON_VCM_ROLE_RUNTIME_TOOLS];
+export const REVIEWER_RUNTIME_DISALLOWED_TOOLS = [
+    "Agent",
+    "Edit",
+    ...NON_VCM_ROLE_RUNTIME_TOOLS
+];
+const LSP_ROLE_NAMES = new Set(["architect", "coder", "reviewer"]);
+export function roleUsesLsp(role) {
+    return LSP_ROLE_NAMES.has(role);
+}
+export function roleRuntimeDisallowedTools(role) {
+    if (role === "reviewer") {
+        return REVIEWER_RUNTIME_DISALLOWED_TOOLS;
+    }
+    if (role === "architect" || role === "coder") {
+        return CODE_ROLE_RUNTIME_DISALLOWED_TOOLS;
+    }
+    return [];
+}

package/dist/backend/services/harness-service.js

@@ -2,6 +2,7 @@ import { execFile } from "node:child_process";
 import path from "node:path";
 import { promisify } from "node:util";
 import { renderArchitectHarnessRules } from "../templates/harness/architect-agent.js";
+import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
@@ -207,9 +208,9 @@ const HARNESS_FILES = [
         path: ".claude/agents/reviewer.md",
         title: "Reviewer Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "LSP"],
+        requiredDisallowedTools: REVIEWER_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
-        frontmatter: renderAgentFrontmatter("reviewer", "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.", { tools: "Read, Grep, Glob, Bash, Write, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("reviewer", "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.", { disallowedTools: REVIEWER_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderReviewerAgentRules
     },
     {
@@ -282,10 +283,10 @@ const HARNESS_FILES = [
         path: ".claude/agents/architect.md",
         title: "Architect Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "Agent", "LSP"],
+        requiredDisallowedTools: CODE_ROLE_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
         blankLineBeforeEnd: true,
-        frontmatter: renderAgentFrontmatter("architect", "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("architect", "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.", { disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderArchitectHarnessRules
     },
     {
@@ -293,9 +294,9 @@ const HARNESS_FILES = [
         path: ".claude/agents/coder.md",
         title: "Coder Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "Agent", "LSP"],
+        requiredDisallowedTools: CODE_ROLE_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
-        frontmatter: renderAgentFrontmatter("coder", "VCM implementation role for scoped code changes and focused tests.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("coder", "VCM implementation role for scoped code changes and focused tests.", { disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderCoderHarnessRules
     },
     {
@@ -1386,27 +1387,28 @@ function renderNewHarnessFile(definition, block, contentAfterBlock = definition.
     const suffix = contentAfterBlock?.trim();
     return `${frontmatter}# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
 }
-function ensureAgentTool(content, requiredTool) {
-    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
-    if (!frontmatterMatch) {
+function ensureAgentDisallowedTools(content, requiredTools) {
+    if (!requiredTools) {
         return content;
     }
-    const toolsMatch = frontmatterMatch[0].match(/^tools:\s*(.*)$/m);
-    if (!toolsMatch) {
-        return content.replace(/^(---\r?\n[\s\S]*?)(\r?\n---)/, `$1\ntools: ${requiredTool}$2`);
-    }
-    const tools = toolsMatch[1].split(",").map((tool) => tool.trim()).filter(Boolean);
-    if (tools.includes(requiredTool)) {
+    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
+    if (!frontmatterMatch) {
         return content;
     }
-    const nextTools = [...tools, requiredTool].join(", ");
-    return content.replace(frontmatterMatch[0], frontmatterMatch[0].replace(toolsMatch[0], `tools: ${nextTools}`));
-}
-function ensureAgentTools(content, requiredTools) {
-    return (requiredTools ?? []).reduce(ensureAgentTool, content);
+    const withoutAllowedTools = frontmatterMatch[0].replace(/^tools:\s*.*\r?\n?/m, "");
+    const disallowedMatch = withoutAllowedTools.match(/^disallowedTools:\s*(.*)$/m);
+    const existing = disallowedMatch?.[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter(Boolean) ?? [];
+    const disallowedTools = [...new Set([...existing, ...requiredTools])].join(", ");
+    const nextFrontmatter = disallowedMatch
+        ? withoutAllowedTools.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools}`)
+        : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
+    return content.replace(frontmatterMatch[0], nextFrontmatter);
 }
 function normalizeAgentFrontmatter(content, definition) {
-    const toolsUpdated = ensureAgentTools(content, definition.requiredTools);
+    const toolsUpdated = ensureAgentDisallowedTools(content, definition.requiredDisallowedTools);
     return (definition.requiredSkills ?? []).reduce(ensureAgentSkill, toolsUpdated);
 }
 function ensureAgentSkill(content, requiredSkill) {
@@ -1558,13 +1560,15 @@ function isPlainObject(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function renderAgentFrontmatter(name, description, options = {}) {
-    const tools = options.tools ?? "Read, Grep, Glob, Bash, Edit, Write";
+    const toolPolicy = options.disallowedTools
+        ? `disallowedTools: ${options.disallowedTools}`
+        : `tools: ${options.tools ?? "Read, Grep, Glob, Bash, Edit, Write"}`;
     const model = options.model ? `\nmodel: ${options.model}` : "";
     const effort = options.effort ? `\neffort: ${options.effort}` : "";
     const skills = options.skills?.length
         ? `\nskills:\n${options.skills.map((skill) => `  - ${skill}`).join("\n")}`
         : "";
-    return `---\nname: ${name}\ndescription: ${description}\ntools: ${tools}${model}${effort}${skills}\n---`;
+    return `---\nname: ${name}\ndescription: ${description}\n${toolPolicy}${model}${effort}${skills}\n---`;
 }
 function renderSkillFrontmatter(name, description) {
     return `---\nname: ${name}\ndescription: ${description}\n---`;

package/dist/backend/services/lsp-plugin.js

@@ -1,9 +1,6 @@
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+export { roleUsesLsp } from "../role-tool-policy.js";
 export const VCM_LSP_PLUGIN_NAME = "vcm-lsp-bridge";
 export const VCM_LSP_PLUGIN_DIR = fileURLToPath(new URL("../../../scripts/claude-plugins/vcm-lsp-bridge", import.meta.url));
 export const VCM_LSP_PLUGIN_MANIFEST = path.join(VCM_LSP_PLUGIN_DIR, ".claude-plugin", "plugin.json");
-const LSP_ROLES = new Set(["architect", "coder", "reviewer"]);
-export function roleUsesLsp(role) {
-    return LSP_ROLES.has(role);
-}

package/dist/backend/templates/harness/architect-agent.js

@@ -23,6 +23,7 @@ ${renderRoleMemoryRules("architect")}
 
 - Follow the preloaded \`vcm-code-navigation\` skill whenever work requires code definitions, implementations, references, callers, callees, or behavior paths. This applies in every Architect mode and in direct user communication.
 - Use LSP for semantic relationships. Use Glob to locate files, Read to inspect complete code, and generated context, architecture documents, or runtime evidence for boundaries LSP does not model.
+- LSP startup or indexing time is not a reason to replace a required semantic query with text matching. Wait for the role-session LSP and follow the skill's bounded retry procedure.
 - If LSP cannot resolve a required project-owned relationship, record it as unresolved. Do not replace semantic evidence with text matches.
 
 ### Work Persistence

package/dist/backend/templates/harness/vcm-code-navigation-skill.js

@@ -6,9 +6,9 @@ Use this skill when Architect, Coder, or Reviewer must establish symbol definiti
 ## Navigation Order
 
 1. Define the affected feature or module boundary and locate entry symbols with \`.ai/generated/module-index.json\` and \`.ai/generated/public-surface.json\` when available.
-2. Start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness.
+2. If \`LSP\` is not listed initially, call \`ToolSearch\` with query \`select:LSP\` to load the deferred plugin tool. Then start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness.
 3. Use LSP workspace or file symbols, definitions, implementations, references, and incoming or outgoing call hierarchy to resolve project-owned relationships.
-4. If an initial workspace-symbol request is empty or reports indexing, do not conclude that the symbol is absent. After a successful file-symbol request, retry the same bounded workspace query at most two more times. If it still cannot resolve, record the operation and result as unresolved.
+4. If an initial workspace-symbol request is empty or reports indexing, wait and retry; startup or indexing time does not permit replacing a required semantic query with text matching. After a successful file-symbol request, retry the same bounded workspace query at most two more times. If it still cannot resolve, record the operation and result as unresolved.
 5. Read the complete project-owned callable unit at every resolved location.
 6. Expand one project-owned dependency hop at a time until the required behavior path has no unresolved symbol.
 7. Use Glob, generated context, architecture documents, and runtime evidence to locate dynamic registrations, configuration or string edges, macros, documentation, and external boundaries that LSP does not model.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibe-coding-master",
-  "version": "0.7.40",
+  "version": "0.7.41",
   "description": "Local GUI session cockpit for Claude Code role sessions.",
   "type": "module",
   "files": [

package/scripts/claude-plugins/vcm-lsp-bridge/.claude-plugin/plugin.json

@@ -10,7 +10,8 @@
       "command": "rust-analyzer",
       "extensionToLanguage": {
         ".rs": "rust"
-      }
+      },
+      "startupTimeout": 180000
     },
     "typescript": {
       "command": "typescript-language-server",