vibe-coding-master 0.7.41 → 0.7.42

package/dist/backend/cli/install-vcm-harness.js

@@ -64,7 +64,8 @@ const VCM_HOOK_DEFINITIONS = [
 ];
 const AGENT_FRONTMATTER = {
     "project-manager": {
-        description: "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation."
+        description: "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     architect: {
         description: "VCM architecture role for plans, module boundaries, public contracts, verifiable behavior, and docs sync.",
@@ -77,7 +78,8 @@ const AGENT_FRONTMATTER = {
         skills: ["vcm-code-navigation"]
     },
     tester: {
-        description: "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings."
+        description: "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     reviewer: {
         description: "VCM independent gate review role for architecture plans, validation adequacy, and code diffs.",
@@ -88,7 +90,8 @@ const AGENT_FRONTMATTER = {
         description: "VCM task-scoped translation tool role for conversation translation, file translation, bootstrap, and memory updates."
     },
     "harness-engineer": {
-        description: "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts."
+        description: "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts.",
+        tools: "Read, Grep, Glob, Bash, Edit, Write, Skill"
     },
     "vcm-coder-worker": {
         description: "Bounded VCM implementation worker for assigned modules, files, and VCM:CODE markers from Coder.",
@@ -105,6 +108,11 @@ const REQUIRED_AGENT_DISALLOWED_TOOLS = {
     coder: CODE_ROLE_DISALLOWED_TOOLS,
     reviewer: REVIEWER_DISALLOWED_TOOLS
 };
+const REQUIRED_AGENT_TOOLS = {
+    "project-manager": ["Skill"],
+    tester: ["Skill"],
+    "harness-engineer": ["Skill"]
+};
 const REQUIRED_AGENT_SKILLS = {
     architect: ["vcm-code-navigation"],
     coder: ["vcm-code-navigation"],
@@ -693,6 +701,9 @@ async function installManagedFile({ projectRoot, definition, dryRun, operations
     if (definition.memoryBlock) {
         nextContent = ensureVcmMemoryBlock(nextContent);
     }
+    for (const requiredTool of REQUIRED_AGENT_TOOLS[definition.agentName] ?? []) {
+        nextContent = ensureAgentAllowedTool(nextContent, requiredTool);
+    }
     const requiredDisallowedTools = REQUIRED_AGENT_DISALLOWED_TOOLS[definition.agentName];
     if (requiredDisallowedTools) {
         nextContent = ensureAgentDisallowedTools(nextContent, requiredDisallowedTools);
@@ -768,6 +779,36 @@ function ensureAgentDisallowedTools(content, requiredTools) {
         : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
     return content.replace(frontmatterMatch[0], nextFrontmatter);
 }
+function ensureAgentAllowedTool(content, requiredTool) {
+    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
+    if (!frontmatterMatch) {
+        return content;
+    }
+    const frontmatter = frontmatterMatch[0];
+    const toolsMatch = frontmatter.match(/^tools:\s*(.*)$/m);
+    if (toolsMatch) {
+        const existing = toolsMatch[1]
+            .split(",")
+            .map((tool) => tool.trim())
+            .filter(Boolean);
+        if (existing.includes(requiredTool)) {
+            return content;
+        }
+        return content.replace(frontmatter, frontmatter.replace(toolsMatch[0], `tools: ${[...existing, requiredTool].join(", ")}`));
+    }
+    const disallowedMatch = frontmatter.match(/^disallowedTools:\s*(.*)$/m);
+    if (!disallowedMatch) {
+        return content;
+    }
+    const disallowedTools = disallowedMatch[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter((tool) => tool && tool !== requiredTool);
+    const nextFrontmatter = disallowedTools.length > 0
+        ? frontmatter.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools.join(", ")}`)
+        : frontmatter.replace(/^disallowedTools:\s*.*\r?\n?/m, "");
+    return content.replace(frontmatter, nextFrontmatter);
+}
 function ensureAgentSkill(content, requiredSkill) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
     if (!frontmatterMatch) {

package/dist/backend/role-tool-policy.js

@@ -21,7 +21,6 @@ const NON_VCM_ROLE_RUNTIME_TOOLS = [
     "ReportFindings",
     "ScheduleWakeup",
     "SendMessage",
-    "Skill",
     "TaskCreate",
     "TaskGet",
     "TaskList",

package/dist/backend/services/harness-service.js

@@ -225,7 +225,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/harness-engineer.md",
         title: "Harness Engineer Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("harness-engineer", "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("harness-engineer", "VCM task-scoped harness maintenance role for harness diagnosis, diff proposals, and VCM issue drafts.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderHarnessEngineerHarnessRules
     },
     {
@@ -275,7 +276,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/project-manager.md",
         title: "Project Manager Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("project-manager", "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("project-manager", "User-facing VCM orchestration role for task clarification, role routing, handoffs, acceptance, and PR preparation.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderProjectManagerHarnessRules
     },
     {
@@ -304,7 +306,8 @@ const HARNESS_FILES = [
         path: ".claude/agents/tester.md",
         title: "Tester Agent",
         memoryBlock: true,
-        frontmatter: renderAgentFrontmatter("tester", "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings."),
+        requiredTools: ["Skill"],
+        frontmatter: renderAgentFrontmatter("tester", "VCM testing role for validation, test adequacy, approved-scope validation, and risk findings.", { tools: "Read, Grep, Glob, Bash, Edit, Write, Skill" }),
         renderRules: renderTesterHarnessRules
     }
 ];
@@ -1407,9 +1410,41 @@ function ensureAgentDisallowedTools(content, requiredTools) {
         : withoutAllowedTools.replace(/\r?\n---$/, `\ndisallowedTools: ${disallowedTools}\n---`);
     return content.replace(frontmatterMatch[0], nextFrontmatter);
 }
+function ensureAgentAllowedTool(content, requiredTool) {
+    const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);
+    if (!frontmatterMatch) {
+        return content;
+    }
+    const frontmatter = frontmatterMatch[0];
+    const toolsMatch = frontmatter.match(/^tools:\s*(.*)$/m);
+    if (toolsMatch) {
+        const existing = toolsMatch[1]
+            .split(",")
+            .map((tool) => tool.trim())
+            .filter(Boolean);
+        if (existing.includes(requiredTool)) {
+            return content;
+        }
+        const tools = [...existing, requiredTool].join(", ");
+        return content.replace(frontmatter, frontmatter.replace(toolsMatch[0], `tools: ${tools}`));
+    }
+    const disallowedMatch = frontmatter.match(/^disallowedTools:\s*(.*)$/m);
+    if (!disallowedMatch) {
+        return content;
+    }
+    const disallowedTools = disallowedMatch[1]
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter((tool) => tool && tool !== requiredTool);
+    const nextFrontmatter = disallowedTools.length > 0
+        ? frontmatter.replace(disallowedMatch[0], `disallowedTools: ${disallowedTools.join(", ")}`)
+        : frontmatter.replace(/^disallowedTools:\s*.*\r?\n?/m, "");
+    return content.replace(frontmatter, nextFrontmatter);
+}
 function normalizeAgentFrontmatter(content, definition) {
-    const toolsUpdated = ensureAgentDisallowedTools(content, definition.requiredDisallowedTools);
-    return (definition.requiredSkills ?? []).reduce(ensureAgentSkill, toolsUpdated);
+    const allowedToolsUpdated = (definition.requiredTools ?? []).reduce(ensureAgentAllowedTool, content);
+    const disallowedToolsUpdated = ensureAgentDisallowedTools(allowedToolsUpdated, definition.requiredDisallowedTools);
+    return (definition.requiredSkills ?? []).reduce(ensureAgentSkill, disallowedToolsUpdated);
 }
 function ensureAgentSkill(content, requiredSkill) {
     const frontmatterMatch = content.match(/^---\r?\n[\s\S]*?\r?\n---/);

package/dist/backend/services/session-service.js

@@ -104,7 +104,12 @@ export function createSessionService(deps) {
                 VCM_RUNTIME_SESSION_TOKEN: runtimeSessionToken
             }, modelEnvironment, {
                 ...buildUsageTelemetryEnvironment(deps.apiUrl, role, model),
-                ...(roleUsesLsp(role) ? { ENABLE_LSP_TOOL: "true" } : {})
+                ...(roleUsesLsp(role)
+                    ? {
+                        ENABLE_LSP_TOOL: "true",
+                        ENABLE_TOOL_SEARCH: "false"
+                    }
+                    : {})
             }),
             cols: input.cols,
             rows: input.rows

package/dist/backend/templates/harness/architect-agent.js

@@ -22,8 +22,11 @@ ${renderRoleMemoryRules("architect")}
 ### Semantic Code Navigation
 
 - Follow the preloaded \`vcm-code-navigation\` skill whenever work requires code definitions, implementations, references, callers, callees, or behavior paths. This applies in every Architect mode and in direct user communication.
-- Use LSP for semantic relationships. Use Glob to locate files, Read to inspect complete code, and generated context, architecture documents, or runtime evidence for boundaries LSP does not model.
-- LSP startup or indexing time is not a reason to replace a required semantic query with text matching. Wait for the role-session LSP and follow the skill's bounded retry procedure.
+- LSP is mandatory and directly available for navigating project source code. Start source-code navigation with LSP. If it is unavailable, report a VCM LSP configuration failure; do not substitute source text search.
+- Use LSP definitions, implementations, references, document or workspace symbols, and incoming or outgoing calls for all source-code symbol and relationship queries.
+- Do not use the built-in \`Grep\` tool or shell text-search commands such as \`grep\`, \`rg\`, \`git grep\`, \`ag\`, or \`ack\` to search project source code, test code, or executable scripts. This prohibition includes locating or inferring definitions, implementations, references, callers, callees, symbols, and behavior paths.
+- Use Glob to locate files and Read to inspect complete code. Text search is allowed only for non-source artifacts that LSP does not model, such as documentation, configuration or data files, generated context, and logs. To inspect source comments, locate the source through LSP or Glob and use Read.
+- Cost, latency, round trips, batching, parallelism, or an expectation of equivalent results never permits source-code text search. Wait for the role-session LSP and follow the skill's bounded retry procedure.
 - If LSP cannot resolve a required project-owned relationship, record it as unresolved. Do not replace semantic evidence with text matches.
 
 ### Work Persistence

package/dist/backend/templates/harness/vcm-code-navigation-skill.js

@@ -6,7 +6,7 @@ Use this skill when Architect, Coder, or Reviewer must establish symbol definiti
 ## Navigation Order
 
 1. Define the affected feature or module boundary and locate entry symbols with \`.ai/generated/module-index.json\` and \`.ai/generated/public-surface.json\` when available.
-2. If \`LSP\` is not listed initially, call \`ToolSearch\` with query \`select:LSP\` to load the deferred plugin tool. Then start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness.
+2. Start each navigation run with LSP \`documentSymbol\` on a known affected project source file. This initializes the actual role-session language server and proves that it can parse that file; an executable version probe is not workspace readiness. If \`LSP\` is unavailable, report a VCM LSP configuration failure instead of substituting text search.
 3. Use LSP workspace or file symbols, definitions, implementations, references, and incoming or outgoing call hierarchy to resolve project-owned relationships.
 4. If an initial workspace-symbol request is empty or reports indexing, wait and retry; startup or indexing time does not permit replacing a required semantic query with text matching. After a successful file-symbol request, retry the same bounded workspace query at most two more times. If it still cannot resolve, record the operation and result as unresolved.
 5. Read the complete project-owned callable unit at every resolved location.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibe-coding-master",
-  "version": "0.7.41",
+  "version": "0.7.42",
   "description": "Local GUI session cockpit for Claude Code role sessions.",
   "type": "module",
   "files": [