vibe-coding-master 0.7.40 → 0.7.42

package/dist/backend/adapters/claude-adapter.js

@@ -1,3 +1,4 @@
+import { roleRuntimeDisallowedTools, roleUsesLsp } from "../role-tool-policy.js";
 import { isCcrSessionModel } from "../../shared/types/session.js";
 import { VcmError } from "../errors.js";
 export function createClaudeAdapter(runner) {
@@ -20,7 +21,13 @@ export function createClaudeAdapter(runner) {
         },
         buildRoleStartCommand(role, command = "claude", permissionMode = "default", claudeSessionId, resume = false, model = "default", effort = "default", settingsOverride, appendSystemPrompt, pluginDirs = []) {
             const args = pluginDirs.flatMap((pluginDir) => ["--plugin-dir", pluginDir]);
-            args.push("--allowedTools", "Glob,Grep");
+            const lspEnabled = roleUsesLsp(role) && pluginDirs.length > 0;
+            if (lspEnabled) {
+                args.push("--disallowedTools", roleRuntimeDisallowedTools(role).join(","));
+            }
+            else {
+                args.push("--allowedTools", "Glob,Grep");
+            }
             args.push("--agent", role);
             const sessionSettings = { ...settingsOverride };
             if (claudeSessionId) {

package/dist/backend/cli/install-vcm-harness.js

@@ -5,6 +5,7 @@ import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
 import { renderArchitectHarnessRules } from "../templates/harness/architect-agent.js";
+import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
@@ -63,31 +64,34 @@ const VCM_HOOK_DEFINITIONS = [
 ];
 const AGENT_FRONTMATTER = {
     "project-manager": {
-        description: "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation."
+        description: "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     architect: {
         description: "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.",
-        tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP",
+        disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     coder: {
         description: "VCM implementation role for scoped code changes and focused tests.",
-        tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP",
+        disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     tester: {
-        description: "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings."
+        description: "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     reviewer: {
         description: "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.",
-        tools: "Read, Grep, Glob, Bash, Write, LSP",
+        disallowedTools: REVIEWER_DISALLOWED_TOOLS.join(", "),
         skills: ["vcm-code-navigation"]
     },
     translator: {
         description: "VCM task-scoped translation tool role for conversation translation, file translation, bootstrap, and memory updates."
     },
     "harness-engineer": {
-        description: "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts."
+        description: "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     "vcm-coder-worker": {
         description: "Bounded VCM implementation worker for assigned modules, files, and VCM:CODE markers from Coder.",
@@ -99,10 +103,15 @@ const AGENT_FRONTMATTER = {
         effort: "xhigh"
     }
 };
+const REQUIRED_AGENT_DISALLOWED_TOOLS = {
+    architect: CODE_ROLE_DISALLOWED_TOOLS,
+    coder: CODE_ROLE_DISALLOWED_TOOLS,
+    reviewer: REVIEWER_DISALLOWED_TOOLS
+};
 const REQUIRED_AGENT_TOOLS = {
-    architect: ["Grep", "Agent", "LSP"],
-    coder: ["Grep", "Agent", "LSP"],
-    reviewer: ["Grep", "LSP"]
+    "project-manager": ["Skill"],
+    tester: ["Skill"],
+    "harness-engineer": ["Skill"]
 };
 const REQUIRED_AGENT_SKILLS = {
     architect: ["vcm-code-navigation"],
@@ -693,7 +702,11 @@ async function installManagedFile({ projectRoot, definition, dryRun, operations
         nextContent = ensureVcmMemoryBlock(nextContent);
     }
     for (const requiredTool of REQUIRED_AGENT_TOOLS[definition.agentName] ?? []) {
-        nextContent = ensureAgentTool(nextContent, requiredTool);
+        nextContent = ensureAgentAllowedTool(nextContent, requiredTool);
+    }
+    const requiredDisallowedTools = REQUIRED_AGENT_DISALLOWED_TOOLS[definition.agentName];
+    if (requiredDisallowedTools) {
+        nextContent = ensureAgentDisallowedTools(nextContent, requiredDisallowedTools);
     }
     for (const requiredSkill of REQUIRED_AGENT_SKILLS[definition.agentName] ?? []) {
         nextContent = ensureAgentSkill(nextContent, requiredSkill);
@@ -737,31 +750,64 @@ function renderNewManagedFile(definition, block) {
     const suffix = definition.contentAfterBlock?.trim();
     if (definition.agentName) {
         const frontmatter = AGENT_FRONTMATTER[definition.agentName];
-        const tools = frontmatter.tools ?? "Read, Grep, Glob, Bash, Edit, Write";
+        const toolPolicy = frontmatter.disallowedTools
+            ? `disallowedTools: ${frontmatter.disallowedTools}`
+            : `tools: ${frontmatter.tools ?? "Read, Grep, Glob, Bash, Edit, Write"}`;
         const model = frontmatter.model ? `\nmodel: ${frontmatter.model}` : "";
         const effort = frontmatter.effort ? `\neffort: ${frontmatter.effort}` : "";
         const skills = frontmatter.skills?.length
             ? `\nskills:\n${frontmatter.skills.map((skill) => `  - ${skill}`).join("\n")}`
             : "";
-        return `---\nname: ${definition.agentName}\ndescription: ${frontmatter.description}\ntools: ${tools}${model}${effort}${skills}\n---\n\n# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
+        return `---\nname: ${definition.agentName}\ndescription: ${frontmatter.description}\n${toolPolicy}${model}${effort}${skills}\n---\n\n# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
     }
     return `# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
 }
-function ensureAgentTool(content, requiredTool) {
+function ensureAgentDisallowedTools(content, requiredTools) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
     if (!frontmatterMatch) {
         return content;
     }
-    const toolsMatch = frontmatterMatch[0].match(/^tools:\s*(.*)$/m);
-    if (!toolsMatch) {
-        return content.replace(/^(---\r?\n[\s\S]*?)(\r?\n---)/, `$1\ntools: ${requiredTool}$2`);
+    const withoutAllowedTools = frontmatterMatch[0].replace(/^tools:\s*.*\r?\n?/m, "");
+    const disallowedMatch = withoutAllowedTools.match(/^disallowedTools:\s*(.*)$/m);
+    const existing = disallowedMatch?.[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter(Boolean) ?? [];
+    const disallowedTools = [...new Set([...existing, ...requiredTools])].join(", ");
+    const nextFrontmatter = disallowedMatch
+        ? withoutAllowedTools.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools}`)
+        : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
+    return content.replace(frontmatterMatch[0], nextFrontmatter);
+}
+function ensureAgentAllowedTool(content, requiredTool) {
+    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
+    if (!frontmatterMatch) {
+        return content;
+    }
+    const frontmatter = frontmatterMatch[0];
+    const toolsMatch = frontmatter.match(/^tools:\s*(.*)$/m);
+    if (toolsMatch) {
+        const existing = toolsMatch[1]
+            .split(",")
+            .map((tool) => tool.trim())
+            .filter(Boolean);
+        if (existing.includes(requiredTool)) {
+            return content;
+        }
+        return content.replace(frontmatter, frontmatter.replace(toolsMatch[0], `tools: ${[...existing, requiredTool].join(", ")}`));
     }
-    const tools = toolsMatch[1].split(",").map((tool) => tool.trim()).filter(Boolean);
-    if (tools.includes(requiredTool)) {
+    const disallowedMatch = frontmatter.match(/^disallowedTools:\s*(.*)$/m);
+    if (!disallowedMatch) {
         return content;
     }
-    const nextTools = [...tools, requiredTool].join(", ");
-    return content.replace(frontmatterMatch[0], frontmatterMatch[0].replace(toolsMatch[0], `tools: ${nextTools}`));
+    const disallowedTools = disallowedMatch[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter((tool) => tool && tool !== requiredTool);
+    const nextFrontmatter = disallowedTools.length > 0
+        ? frontmatter.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools.join(", ")}`)
+        : frontmatter.replace(/^disallowedTools:\s*.*\r?\n?/m, "");
+    return content.replace(frontmatter, nextFrontmatter);
 }
 function ensureAgentSkill(content, requiredSkill) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);

package/dist/backend/role-tool-policy.js

@@ -0,0 +1,59 @@
+const LSP_FRONTMATTER_DISALLOWED_TOOLS = [
+    "NotebookEdit",
+    "WebFetch",
+    "WebSearch"
+];
+const NON_VCM_ROLE_RUNTIME_TOOLS = [
+    "AskUserQuestion",
+    "CronCreate",
+    "CronDelete",
+    "CronList",
+    "DesignSync",
+    "EnterPlanMode",
+    "EnterWorktree",
+    "ExitPlanMode",
+    "ExitWorktree",
+    "KillShell",
+    "Monitor",
+    "NotebookEdit",
+    "PushNotification",
+    "RemoteTrigger",
+    "ReportFindings",
+    "ScheduleWakeup",
+    "SendMessage",
+    "TaskCreate",
+    "TaskGet",
+    "TaskList",
+    "TaskOutput",
+    "TaskStop",
+    "TaskUpdate",
+    "TodoWrite",
+    "WebFetch",
+    "WebSearch",
+    "Workflow"
+];
+export const CODE_ROLE_DISALLOWED_TOOLS = [...LSP_FRONTMATTER_DISALLOWED_TOOLS];
+export const REVIEWER_DISALLOWED_TOOLS = [
+    "Agent",
+    "Edit",
+    ...LSP_FRONTMATTER_DISALLOWED_TOOLS
+];
+export const CODE_ROLE_RUNTIME_DISALLOWED_TOOLS = [...NON_VCM_ROLE_RUNTIME_TOOLS];
+export const REVIEWER_RUNTIME_DISALLOWED_TOOLS = [
+    "Agent",
+    "Edit",
+    ...NON_VCM_ROLE_RUNTIME_TOOLS
+];
+const LSP_ROLE_NAMES = new Set(["architect", "coder", "reviewer"]);
+export function roleUsesLsp(role) {
+    return LSP_ROLE_NAMES.has(role);
+}
+export function roleRuntimeDisallowedTools(role) {
+    if (role === "reviewer") {
+        return REVIEWER_RUNTIME_DISALLOWED_TOOLS;
+    }
+    if (role === "architect" || role === "coder") {
+        return CODE_ROLE_RUNTIME_DISALLOWED_TOOLS;
+    }
+    return [];
+}

package/dist/backend/services/harness-service.js

@@ -2,6 +2,7 @@ import { execFile } from "node:child_process";
 import path from "node:path";
 import { promisify } from "node:util";
 import { renderArchitectHarnessRules } from "../templates/harness/architect-agent.js";
+import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
@@ -207,9 +208,9 @@ const HARNESS_FILES = [
         path: ".claude/agents/reviewer.md",
         title: "Reviewer Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "LSP"],
+        requiredDisallowedTools: REVIEWER_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
-        frontmatter: renderAgentFrontmatter("reviewer", "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.", { tools: "Read, Grep, Glob, Bash, Write, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("reviewer", "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.", { disallowedTools: REVIEWER_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderReviewerAgentRules
     },
     {
@@ -224,7 +225,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/harness-engineer.md",
         title: "Harness Engineer Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("harness-engineer", "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("harness-engineer", "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderHarnessEngineerHarnessRules
     },
     {
@@ -274,7 +276,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/project-manager.md",
         title: "Project Manager Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("project-manager", "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("project-manager", "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderProjectManagerHarnessRules
     },
     {
@@ -282,10 +285,10 @@ const HARNESS_FILES = [
         path: ".claude/agents/architect.md",
         title: "Architect Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "Agent", "LSP"],
+        requiredDisallowedTools: CODE_ROLE_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
         blankLineBeforeEnd: true,
-        frontmatter: renderAgentFrontmatter("architect", "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("architect", "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.", { disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderArchitectHarnessRules
     },
     {
@@ -293,9 +296,9 @@ const HARNESS_FILES = [
         path: ".claude/agents/coder.md",
         title: "Coder Agent",
         memoryBlock: true,
-        requiredTools: ["Grep", "Agent", "LSP"],
+        requiredDisallowedTools: CODE_ROLE_DISALLOWED_TOOLS,
         requiredSkills: ["vcm-code-navigation"],
-        frontmatter: renderAgentFrontmatter("coder", "VCM implementation role for scoped code changes and focused tests.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Agent, LSP", skills: ["vcm-code-navigation"] }),
+        frontmatter: renderAgentFrontmatter("coder", "VCM implementation role for scoped code changes and focused tests.", { disallowedTools: CODE_ROLE_DISALLOWED_TOOLS.join(", "), skills: ["vcm-code-navigation"] }),
         renderRules: renderCoderHarnessRules
     },
     {
@@ -303,7 +306,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/tester.md",
         title: "Tester Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("tester", "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("tester", "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderTesterHarnessRules
     }
 ];
@@ -1386,28 +1390,61 @@ function renderNewHarnessFile(definition, block, contentAfterBlock = definition.
     const suffix = contentAfterBlock?.trim();
     return `${frontmatter}# ${definition.title}\n\n${block}${suffix ? `\n\n${suffix}` : ""}\n`;
 }
-function ensureAgentTool(content, requiredTool) {
+function ensureAgentDisallowedTools(content, requiredTools) {
+    if (!requiredTools) {
+        return content;
+    }
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
     if (!frontmatterMatch) {
         return content;
     }
-    const toolsMatch = frontmatterMatch[0].match(/^tools:\s*(.*)$/m);
-    if (!toolsMatch) {
-        return content.replace(/^(---\r?\n[\s\S]*?)(\r?\n---)/, `$1\ntools: ${requiredTool}$2`);
+    const withoutAllowedTools = frontmatterMatch[0].replace(/^tools:\s*.*\r?\n?/m, "");
+    const disallowedMatch = withoutAllowedTools.match(/^disallowedTools:\s*(.*)$/m);
+    const existing = disallowedMatch?.[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter(Boolean) ?? [];
+    const disallowedTools = [...new Set([...existing, ...requiredTools])].join(", ");
+    const nextFrontmatter = disallowedMatch
+        ? withoutAllowedTools.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools}`)
+        : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
+    return content.replace(frontmatterMatch[0], nextFrontmatter);
+}
+function ensureAgentAllowedTool(content, requiredTool) {
+    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
+    if (!frontmatterMatch) {
+        return content;
     }
-    const tools = toolsMatch[1].split(",").map((tool) => tool.trim()).filter(Boolean);
-    if (tools.includes(requiredTool)) {
+    const frontmatter = frontmatterMatch[0];
+    const toolsMatch = frontmatter.match(/^tools:\s*(.*)$/m);
+    if (toolsMatch) {
+        const existing = toolsMatch[1]
+            .split(",")
+            .map((tool) => tool.trim())
+            .filter(Boolean);
+        if (existing.includes(requiredTool)) {
+            return content;
+        }
+        const tools = [...existing, requiredTool].join(", ");
+        return content.replace(frontmatter, frontmatter.replace(toolsMatch[0], `tools: ${tools}`));
+    }
+    const disallowedMatch = frontmatter.match(/^disallowedTools:\s*(.*)$/m);
+    if (!disallowedMatch) {
         return content;
     }
-    const nextTools = [...tools, requiredTool].join(", ");
-    return content.replace(frontmatterMatch[0], frontmatterMatch[0].replace(toolsMatch[0], `tools: ${nextTools}`));
-}
-function ensureAgentTools(content, requiredTools) {
-    return (requiredTools ?? []).reduce(ensureAgentTool, content);
+    const disallowedTools = disallowedMatch[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter((tool) => tool && tool !== requiredTool);
+    const nextFrontmatter = disallowedTools.length > 0
+        ? frontmatter.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools.join(", ")}`)
+        : frontmatter.replace(/^disallowedTools:\s*.*\r?\n?/m, "");
+    return content.replace(frontmatter, nextFrontmatter);
 }
 function normalizeAgentFrontmatter(content, definition) {
-    const toolsUpdated = ensureAgentTools(content, definition.requiredTools);
-    return (definition.requiredSkills ?? []).reduce(ensureAgentSkill, toolsUpdated);
+    const allowedToolsUpdated = (definition.requiredTools ?? []).reduce(ensureAgentAllowedTool, content);
+    const disallowedToolsUpdated = ensureAgentDisallowedTools(allowedToolsUpdated, definition.requiredDisallowedTools);
+    return (definition.requiredSkills ?? []).reduce(ensureAgentSkill, disallowedToolsUpdated);
 }
 function ensureAgentSkill(content, requiredSkill) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
@@ -1558,13 +1595,15 @@ function isPlainObject(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function renderAgentFrontmatter(name, description, options = {}) {
-    const tools = options.tools ?? "Read, Grep, Glob, Bash, Edit, Write";
+    const toolPolicy = options.disallowedTools
+        ? `disallowedTools: ${options.disallowedTools}`
+        : `tools: ${options.tools ?? "Read, Grep, Glob, Bash, Edit, Write"}`;
     const model = options.model ? `\nmodel: ${options.model}` : "";
     const effort = options.effort ? `\neffort: ${options.effort}` : "";
     const skills = options.skills?.length
         ? `\nskills:\n${options.skills.map((skill) => `  - ${skill}`).join("\n")}`
         : "";
-    return `---\nname: ${name}\ndescription: ${description}\ntools: ${tools}${model}${effort}${skills}\n---`;
+    return `---\nname: ${name}\ndescription: ${description}\n${toolPolicy}${model}${effort}${skills}\n---`;
 }
 function renderSkillFrontmatter(name, description) {
     return `---\nname: ${name}\ndescription: ${description}\n---`;

package/dist/backend/services/lsp-plugin.js

@@ -1,9 +1,6 @@
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+export { roleUsesLsp } from "../role-tool-policy.js";
 export const VCM_LSP_PLUGIN_NAME = "vcm-lsp-bridge";
 export const VCM_LSP_PLUGIN_DIR = fileURLToPath(new URL("../../../scripts/claude-plugins/vcm-lsp-bridge", import.meta.url));
 export const VCM_LSP_PLUGIN_MANIFEST = path.join(VCM_LSP_PLUGIN_DIR, ".claude-plugin", "plugin.json");
-const LSP_ROLES = new Set(["architect", "coder", "reviewer"]);
-export function roleUsesLsp(role) {
-    return LSP_ROLES.has(role);
-}

package/dist/backend/services/session-service.js

@@ -104,7 +104,12 @@ export function createSessionService(deps) {
                 VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, {
                 ...buildUsageTelemetryEnvironment(deps.apiUrl, role, model),
-                ...(roleUsesLsp(role) ? { ENABLE_LSP_TOOL: "true" } : {})
+                ...(roleUsesLsp(role)
+                    ? {
+                        ENABLE_LSP_TOOL: "true",
+                        ENABLE_TOOL_SEARCH: "false"
+                    }
+                    : {})
             }),
             cols: input.cols,
             rows: input.rows

package/dist/backend/templates/harness/architect-agent.js

@@ -22,7 +22,11 @@ ${renderRoleMemoryRules("architect")}
 ### Semantic Code Navigation
 
 - Follow the preloaded \`vcm-code-navigation\` skill whenever work requires code definitions, implementations, references, callers, callees, or behavior paths. This applies in every Architect mode and in direct user communication.
-- Use LSP for semantic relationships. Use Glob to locate files, Read to inspect complete code, and generated context, architecture documents, or runtime evidence for boundaries LSP does not model.
+- LSP is mandatory and directly available for navigating project source code. Start source-code navigation with LSP. If it is unavailable, report a VCM LSP configuration failure; do not substitute source text search.
+- Use LSP definitions, implementations, references, document or workspace symbols, and incoming or outgoing calls for all source-code symbol and relationship queries.
+- Do not use the built-in \`Grep\` tool or shell text-search commands such as \`grep\`, \`rg\`, \`git grep\`, \`ag\`, or \`ack\` to search project source code, test code, or executable scripts. This prohibition includes locating or inferring definitions, implementations, references, callers, callees, symbols, and behavior paths.
+- Use Glob to locate files and Read to inspect complete code. Text search is allowed only for non-source artifacts that LSP does not model, such as documentation, configuration or data files, generated context, and logs. To inspect source comments, locate the source through LSP or Glob and use Read.
+- Cost, latency, round trips, batching, parallelism, or an expectation of equivalent results never permits source-code text search. Wait for the role-session LSP and follow the skill's bounded retry procedure.
 - If LSP cannot resolve a required project-owned relationship, record it as unresolved. Do not replace semantic evidence with text matches.
 
 ### Work Persistence

package/dist/backend/templates/harness/vcm-code-navigation-skill.js

@@ -6,9 +6,9 @@ Use this skill when Architect, Coder, or Reviewer must establish symbol definiti
 ## Navigation Order
 
 1. Define the affected feature or module boundary and locate entry symbols with \`.ai/generated/module-index.json\` and \`.ai/generated/public-surface.json\` when available.
-2. Start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness.
+2. Start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness. If \`LSP\` is unavailable, report a VCM LSP configuration failure instead of substituting text search.
 3. Use LSP workspace or file symbols, definitions, implementations, references, and incoming or outgoing call hierarchy to resolve project-owned relationships.
-4. If an initial workspace-symbol request is empty or reports indexing, do not conclude that the symbol is absent. After a successful file-symbol request, retry the same bounded workspace query at most two more times. If it still cannot resolve, record the operation and result as unresolved.
+4. If an initial workspace-symbol request is empty or reports indexing, wait and retry; startup or indexing time does not permit replacing a required semantic query with text matching. After a successful file-symbol request, retry the same bounded workspace query at most two more times. If it still cannot resolve, record the operation and result as unresolved.
 5. Read the complete project-owned callable unit at every resolved location.
 6. Expand one project-owned dependency hop at a time until the required behavior path has no unresolved symbol.
 7. Use Glob, generated context, architecture documents, and runtime evidence to locate dynamic registrations, configuration or string edges, macros, documentation, and external boundaries that LSP does not model.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibe-coding-master",
-  "version": "0.7.40",
+  "version": "0.7.42",
   "description": "Local GUI session cockpit for Claude Code role sessions.",
   "type": "module",
   "files": [

package/scripts/claude-plugins/vcm-lsp-bridge/.claude-plugin/plugin.json

@@ -10,7 +10,8 @@
       "command": "rust-analyzer",
       "extensionToLanguage": {
         ".rs": "rust"
-      }
+      },
+      "startupTimeout": 180000
     },
     "typescript": {
       "command": "typescript-language-server",