vibe-coding-master 0.7.45 → 0.7.47

package/README.md

@@ -284,7 +284,9 @@ from the native child process.
 Codex Bridge child processes use a hard context limit and auto-compaction window of
 `258400` tokens. VCM sets Claude Code's proactive compaction threshold to `90%`
 (about `232560` tokens), leaving headroom before the Codex API limit. Native
-Claude sessions receive no VCM-owned context override.
+Claude sessions receive no VCM-owned context override. Bridge-backed subagents
+inherit the selected GPT model. Native Architect evidence, scaffold, and
+validation workers use `opus` with `xhigh` effort.
 
 Resume keeps the provider recorded by the existing Session. Use Restart when
 switching between native Claude and Codex Bridge. If the Bridge is disabled,

package/dist/backend/cli/install-vcm-harness.js

@@ -8,7 +8,9 @@ import { renderArchitectHarnessRules } from "../templates/harness/architect-agen
 import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
+import { renderArchitectEvidenceWorkerHarnessRules } from "../templates/harness/architect-evidence-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
+import { renderArchitectValidationWorkerHarnessRules } from "../templates/harness/architect-validation-worker-agent.js";
 import { renderReviewerAgentRules, renderRequestGateReviewTool, renderTranslatorAgentRules, renderVcmGateReviewSkillRules } from "../templates/harness/gate-review.js";
 import { renderHarnessEngineerHarnessRules } from "../templates/harness/harness-engineer-agent.js";
 import { renderRootClaudeHarnessRules } from "../templates/harness/claude-root.js";
@@ -53,11 +55,13 @@ const VCM_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM
 const VCM_STOP_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 1 --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code/stop" -H "content-type: application/json" --data-binary @- || true'`;
 const VCM_PERMISSION_REQUEST_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --max-time 5 -X POST "\${VCM_API_URL}/api/hooks/claude-code/permission-request" -H "content-type: application/json" --data-binary @- || true'`;
 const VCM_BASH_GUARD_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ]; then exit 0; fi; guard=""; repo="$(git rev-parse --show-toplevel 2>/dev/null || true)"; if [ -n "$repo" ] && [ -f "$repo/.ai/tools/vcm-bash-guard" ]; then guard="$repo/.ai/tools/vcm-bash-guard"; else cwd="$(pwd -P 2>/dev/null || pwd)"; dir="$cwd"; while [ -n "$dir" ] && [ "$dir" != "/" ]; do if [ -f "$dir/.ai/tools/vcm-bash-guard" ]; then guard="$dir/.ai/tools/vcm-bash-guard"; break; fi; dir="$(dirname "$dir")"; done; if [ -z "$guard" ] && [ -n "\${CLAUDE_PROJECT_DIR:-}" ] && [ -f "\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard" ]; then guard="\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard"; fi; fi; [ -n "$guard" ] || exit 0; python3 "$guard" || exit 0'`;
+const VCM_SUBAGENT_GUARD_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ]; then exit 0; fi; guard=""; repo="$(git rev-parse --show-toplevel 2>/dev/null || true)"; if [ -n "$repo" ] && [ -f "$repo/.ai/tools/vcm-subagent-guard" ]; then guard="$repo/.ai/tools/vcm-subagent-guard"; else cwd="$(pwd -P 2>/dev/null || pwd)"; dir="$cwd"; while [ -n "$dir" ] && [ "$dir" != "/" ]; do if [ -f "$dir/.ai/tools/vcm-subagent-guard" ]; then guard="$dir/.ai/tools/vcm-subagent-guard"; break; fi; dir="$(dirname "$dir")"; done; if [ -z "$guard" ] && [ -n "\${CLAUDE_PROJECT_DIR:-}" ] && [ -f "\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-subagent-guard" ]; then guard="\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-subagent-guard"; fi; fi; [ -n "$guard" ] || { printf "%s\\n" "{\\"hookSpecificOutput\\":{\\"hookEventName\\":\\"PreToolUse\\",\\"permissionDecision\\":\\"deny\\",\\"permissionDecisionReason\\":\\"VCM subagent policy is unavailable. Refresh the VCM Harness before invoking subagents.\\"}}"; exit 0; }; python3 "$guard"'`;
 const VCM_BASH_DEFAULT_TIMEOUT_MS = "600000";
 const VCM_AUTO_MEMORY_ENABLED = false;
 const VCM_HOOK_DEFINITIONS = [
     { eventName: "PreToolUse", matcher: "Bash", command: VCM_BASH_GUARD_HOOK_COMMAND, timeout: 10 },
     { eventName: "PreToolUse", matcher: "Write|Edit", command: VCM_BASH_GUARD_HOOK_COMMAND, timeout: 10 },
+    { eventName: "PreToolUse", matcher: "Agent", command: VCM_SUBAGENT_GUARD_HOOK_COMMAND, timeout: 10 },
     { eventName: "UserPromptSubmit", command: VCM_HOOK_COMMAND, timeout: 5 },
     { eventName: "PreToolUse", command: VCM_HOOK_COMMAND, timeout: 5 },
     { eventName: "PostToolUse", command: VCM_HOOK_COMMAND, timeout: 5 },
@@ -104,10 +108,22 @@ const AGENT_FRONTMATTER = {
         description: "Bounded VCM implementation worker for assigned modules, files, and VCM:CODE markers from Coder.",
         model: "inherit"
     },
+    "vcm-architect-evidence-worker": {
+        description: "Foreground Architect worker for bounded project evidence collection.",
+        tools: "Read, Grep, Glob, Write",
+        model: "opus",
+        effort: "xhigh"
+    },
     "vcm-architect-scaffold-worker": {
         description: "Foreground Architect worker for exact scaffold execution and scaffold validation.",
         model: "opus",
         effort: "xhigh"
+    },
+    "vcm-architect-validation-worker": {
+        description: "Foreground Architect worker for exact assigned command execution and evidence capture.",
+        tools: "Read, Grep, Glob, Bash, Write",
+        model: "opus",
+        effort: "xhigh"
     }
 };
 const REQUIRED_AGENT_DISALLOWED_TOOLS = {
@@ -240,6 +256,14 @@ const MANAGED_FILES = [
         category: "agent-coder-worker",
         content: renderCoderWorkerHarnessRules()
     },
+    {
+        path: ".claude/agents/vcm-architect-evidence-worker.md",
+        title: "VCM Architect Evidence Worker Agent",
+        agentName: "vcm-architect-evidence-worker",
+        commentStyle: "html",
+        category: "agent-architect-evidence-worker",
+        content: renderArchitectEvidenceWorkerHarnessRules()
+    },
     {
         path: ".claude/agents/vcm-architect-scaffold-worker.md",
         title: "VCM Architect Scaffold Worker Agent",
@@ -247,6 +271,14 @@ const MANAGED_FILES = [
         commentStyle: "html",
         category: "agent-architect-scaffold-worker",
         content: renderArchitectScaffoldWorkerHarnessRules()
+    },
+    {
+        path: ".claude/agents/vcm-architect-validation-worker.md",
+        title: "VCM Architect Validation Worker Agent",
+        agentName: "vcm-architect-validation-worker",
+        commentStyle: "html",
+        category: "agent-architect-validation-worker",
+        content: renderArchitectValidationWorkerHarnessRules()
     }
 ];
 const DURABLE_DOC_TEMPLATES = [
@@ -416,6 +448,12 @@ const WHOLE_FILES = [
         mode: 0o755,
         templatePath: "scripts/harness-tools/vcm-bash-guard"
     },
+    {
+        path: ".ai/tools/vcm-subagent-guard",
+        category: "runtime-tool",
+        mode: 0o755,
+        templatePath: "scripts/harness-tools/vcm-subagent-guard"
+    },
     {
         path: ".ai/tools/vcm-artifact",
         category: "runtime-tool",

package/dist/backend/services/codex-bridge-integration-service.js

@@ -166,6 +166,7 @@ export function createCodexBridgeIntegrationService(deps) {
                 CODEX_BRIDGE_CLAUDE_MODEL: modelId,
                 ANTHROPIC_SMALL_FAST_MODEL: modelId,
                 CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY: "1",
+                CLAUDE_CODE_SUBAGENT_MODEL: modelId,
                 CLAUDE_CODE_MAX_CONTEXT_TOKENS: String(CODEX_BRIDGE_EFFECTIVE_CONTEXT_TOKENS),
                 CLAUDE_CODE_AUTO_COMPACT_WINDOW: String(CODEX_BRIDGE_AUTO_COMPACT_WINDOW_TOKENS),
                 CLAUDE_AUTOCOMPACT_PCT_OVERRIDE: String(CODEX_BRIDGE_AUTO_COMPACT_PERCENT),
@@ -191,7 +192,8 @@ const BRIDGE_BASE_URL_KEYS = [
 ];
 const BRIDGE_MODEL_KEYS = [
     "ANTHROPIC_MODEL",
-    "ANTHROPIC_SMALL_FAST_MODEL"
+    "ANTHROPIC_SMALL_FAST_MODEL",
+    "CLAUDE_CODE_SUBAGENT_MODEL"
 ];
 const BRIDGE_ONLY_ENV_KEYS = [
     "CODEX_BRIDGE_CLAUDE_MODEL",

package/dist/backend/services/harness-service.js

@@ -5,7 +5,9 @@ import { renderArchitectHarnessRules } from "../templates/harness/architect-agen
 import { CODE_ROLE_DISALLOWED_TOOLS, REVIEWER_DISALLOWED_TOOLS } from "../role-tool-policy.js";
 import { renderCoderHarnessRules } from "../templates/harness/coder-agent.js";
 import { renderCoderWorkerHarnessRules } from "../templates/harness/coder-worker-agent.js";
+import { renderArchitectEvidenceWorkerHarnessRules } from "../templates/harness/architect-evidence-worker-agent.js";
 import { renderArchitectScaffoldWorkerHarnessRules } from "../templates/harness/architect-scaffold-worker-agent.js";
+import { renderArchitectValidationWorkerHarnessRules } from "../templates/harness/architect-validation-worker-agent.js";
 import { renderReviewerAgentRules, renderRequestGateReviewTool, renderTranslatorAgentRules, renderVcmGateReviewSkillRules } from "../templates/harness/gate-review.js";
 import { renderHarnessEngineerHarnessRules } from "../templates/harness/harness-engineer-agent.js";
 import { renderRootClaudeHarnessRules } from "../templates/harness/claude-root.js";
@@ -53,11 +55,13 @@ const VCM_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM
 const VCM_STOP_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 1 --max-time 2 -X POST "\${VCM_API_URL}/api/hooks/claude-code/stop" -H "content-type: application/json" --data-binary @- || true'`;
 const VCM_PERMISSION_REQUEST_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ] || [ -z "\${VCM_API_URL:-}" ]; then exit 0; fi; node -e '"'"'let s="";process.stdin.setEncoding("utf8");process.stdin.on("data",d=>s+=d);process.stdin.on("end",()=>{let event={};try{event=s.trim()?JSON.parse(s):{};}catch{event={raw:s};}process.stdout.write(JSON.stringify({taskSlug:process.env.VCM_TASK_SLUG,role:process.env.VCM_ROLE,runtimeSessionToken:process.env.VCM_RUNTIME_SESSION_TOKEN,event}));});'"'"' | curl -fsS --max-time 5 -X POST "\${VCM_API_URL}/api/hooks/claude-code/permission-request" -H "content-type: application/json" --data-binary @- || true'`;
 const VCM_BASH_GUARD_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ]; then exit 0; fi; guard=""; repo="$(git rev-parse --show-toplevel 2>/dev/null || true)"; if [ -n "$repo" ] && [ -f "$repo/.ai/tools/vcm-bash-guard" ]; then guard="$repo/.ai/tools/vcm-bash-guard"; else cwd="$(pwd -P 2>/dev/null || pwd)"; dir="$cwd"; while [ -n "$dir" ] && [ "$dir" != "/" ]; do if [ -f "$dir/.ai/tools/vcm-bash-guard" ]; then guard="$dir/.ai/tools/vcm-bash-guard"; break; fi; dir="$(dirname "$dir")"; done; if [ -z "$guard" ] && [ -n "\${CLAUDE_PROJECT_DIR:-}" ] && [ -f "\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard" ]; then guard="\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-bash-guard"; fi; fi; [ -n "$guard" ] || exit 0; python3 "$guard" || exit 0'`;
+const VCM_SUBAGENT_GUARD_HOOK_COMMAND = `sh -c 'if [ -z "\${VCM_TASK_SLUG:-}" ] || [ -z "\${VCM_ROLE:-}" ]; then exit 0; fi; guard=""; repo="$(git rev-parse --show-toplevel 2>/dev/null || true)"; if [ -n "$repo" ] && [ -f "$repo/.ai/tools/vcm-subagent-guard" ]; then guard="$repo/.ai/tools/vcm-subagent-guard"; else cwd="$(pwd -P 2>/dev/null || pwd)"; dir="$cwd"; while [ -n "$dir" ] && [ "$dir" != "/" ]; do if [ -f "$dir/.ai/tools/vcm-subagent-guard" ]; then guard="$dir/.ai/tools/vcm-subagent-guard"; break; fi; dir="$(dirname "$dir")"; done; if [ -z "$guard" ] && [ -n "\${CLAUDE_PROJECT_DIR:-}" ] && [ -f "\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-subagent-guard" ]; then guard="\${CLAUDE_PROJECT_DIR}/.ai/tools/vcm-subagent-guard"; fi; fi; [ -n "$guard" ] || { printf "%s\\n" "{\\"hookSpecificOutput\\":{\\"hookEventName\\":\\"PreToolUse\\",\\"permissionDecision\\":\\"deny\\",\\"permissionDecisionReason\\":\\"VCM subagent policy is unavailable. Refresh the VCM Harness before invoking subagents.\\"}}"; exit 0; }; python3 "$guard"'`;
 const VCM_BASH_DEFAULT_TIMEOUT_MS = "600000";
 const VCM_AUTO_MEMORY_ENABLED = false;
 const VCM_HOOK_DEFINITIONS = [
     { eventName: "PreToolUse", matcher: "Bash", command: VCM_BASH_GUARD_HOOK_COMMAND, timeout: 10 },
     { eventName: "PreToolUse", matcher: "Write|Edit", command: VCM_BASH_GUARD_HOOK_COMMAND, timeout: 10 },
+    { eventName: "PreToolUse", matcher: "Agent", command: VCM_SUBAGENT_GUARD_HOOK_COMMAND, timeout: 10 },
     { eventName: "UserPromptSubmit", command: VCM_HOOK_COMMAND, timeout: 5 },
     { eventName: "PreToolUse", command: VCM_HOOK_COMMAND, timeout: 5 },
     { eventName: "PostToolUse", command: VCM_HOOK_COMMAND, timeout: 5 },
@@ -253,6 +257,13 @@ const HARNESS_FILES = [
         frontmatter: renderAgentFrontmatter("vcm-coder-worker", "Bounded VCM implementation worker for assigned modules, files, and VCM:CODE markers from Coder.", { model: "inherit" }),
         renderRules: renderCoderWorkerHarnessRules
     },
+    {
+        kind: "agent-architect-evidence-worker",
+        path: ".claude/agents/vcm-architect-evidence-worker.md",
+        title: "VCM Architect Evidence Worker Agent",
+        frontmatter: renderAgentFrontmatter("vcm-architect-evidence-worker", "Foreground Architect worker for bounded project evidence collection.", { tools: "Read, Grep, Glob, Write", model: "opus", effort: "xhigh" }),
+        renderRules: renderArchitectEvidenceWorkerHarnessRules
+    },
     {
         kind: "agent-architect-scaffold-worker",
         path: ".claude/agents/vcm-architect-scaffold-worker.md",
@@ -260,6 +271,13 @@ const HARNESS_FILES = [
         frontmatter: renderAgentFrontmatter("vcm-architect-scaffold-worker", "Foreground Architect worker for exact scaffold execution and scaffold validation.", { model: "opus", effort: "xhigh" }),
         renderRules: renderArchitectScaffoldWorkerHarnessRules
     },
+    {
+        kind: "agent-architect-validation-worker",
+        path: ".claude/agents/vcm-architect-validation-worker.md",
+        title: "VCM Architect Validation Worker Agent",
+        frontmatter: renderAgentFrontmatter("vcm-architect-validation-worker", "Foreground Architect worker for exact assigned command execution and evidence capture.", { tools: "Read, Grep, Glob, Bash, Write", model: "opus", effort: "xhigh" }),
+        renderRules: renderArchitectValidationWorkerHarnessRules
+    },
     {
         kind: "tool-request-gate-review",
         path: ".ai/tools/request-gate-review",

package/dist/backend/templates/harness/architect-agent.js

@@ -38,6 +38,21 @@ ${renderRoleMemoryRules("architect")}
 - Before ending any turn, ensure all information required to continue the current Architect work is present in the current artifacts.
 - Keep artifacts current and self-contained. Replace superseded content instead of appending conversation history or investigation logs.
 
+### Architect Worker Delegation
+
+- Architect may invoke only \`vcm-architect-evidence-worker\`, \`vcm-architect-scaffold-worker\`, and \`vcm-architect-validation-worker\`.
+- Every worker must run in the foreground and return before the current Architect turn continues. Do not run workers in the background or end the turn while a worker is active.
+- Give each worker an exact bounded assignment, repo-relative paths, questions or commands, and one report path. Pass paths instead of copying full source, documents, or plans into the worker prompt.
+- Worker output is evidence or execution output, never an architecture decision. Architect owns every conclusion, plan, change boundary, validation interpretation, and final claim.
+- Use \`vcm-architect-evidence-worker\` for bounded bulk reading when relevant evidence spans multiple files or modules. Evidence workers may run in parallel only when their read scopes are disjoint.
+- Evidence workers write reports under \`.ai/vcm/architect-workers/evidence/\`. Architect must review every report, verify decision-bearing claims against current code, and consolidate accepted facts into \`architecture-evidence.md\`.
+- In Planning Code Reading, supporting non-decision-bearing read requirements may be satisfied by an accepted evidence-worker report; requirements that say Architect must personally read or verify may not.
+- Use \`vcm-architect-scaffold-worker\` after the plan and Scaffold Manifest are complete for exact scaffold execution and mechanical text or configuration changes already fixed by the plan.
+- Use \`vcm-architect-validation-worker\` for exact non-interactive commands already selected by Architect. The worker does not select validation scope, modify tests or code, diagnose failures, or decide whether validation is sufficient.
+- Do not rerun a green command already reported by another Architect worker merely to execute it in the main Architect context.
+- Validation workers write reports under \`.ai/vcm/architect-workers/validation/\`. Architect must interpret the raw results and copy required evidence into the owning Architect artifact.
+- Remove \`.ai/vcm/architect-workers/\` after its accepted facts and command results have been consolidated into Architect-owned artifacts.
+
 ### Architecture Interview
 
 - Before the first Architecture Planning step of Code-Change Flow, use \`vcm-architecture-interview\` and complete \`.ai/vcm/handoffs/architecture-brief.md\` and \`.ai/vcm/handoffs/architecture-evidence.md\`.
@@ -57,10 +72,11 @@ ${renderRoleMemoryRules("architect")}
 ### Planning Code Reading
 
 - Do not plan from session memory, architecture docs, generated context, or code comments alone. Re-read current-worktree source and verify actual behavior from implementation.
-- Use \`vcm-code-navigation\` for symbol definitions, implementations, references, call hierarchies, and bounded behavior paths. Start from generated indexes, use LSP semantic navigation, then read every resolved callable unit in full.
+- Use \`vcm-code-navigation\` for symbol definitions, implementations, references, call hierarchies, and bounded behavior paths. Start from generated indexes, use LSP semantic navigation, then personally read every decision-bearing callable unit in full.
+- Delegate bounded supporting implementation and document reading to \`vcm-architect-evidence-worker\` when it would otherwise add substantial raw context. Worker reports do not replace Architect's LSP verification of decision-bearing symbols, relationships, public surfaces, ownership, lifecycle, failure paths, contradictions, or unresolved evidence.
 - If LSP cannot resolve a required project-owned relationship, record the limitation in \`architecture-evidence.md\` and leave it unresolved.
 - Define the planning boundary as the affected feature or module and identify every existing or intended observable entry point for the behavior being changed.
-- Read the complete implementation of each relevant existing entry point.
+- Personally read the complete implementation of each decision-bearing existing entry point. Supporting entry points may be covered by accepted evidence-worker reports when their facts do not determine the architecture decision.
 - Follow every project-owned call path the plan will change through cross-module calls, state reads and writes, persistence, side effects, completion and failure signals, and consumers.
 - For every cross-file or public callable surface the plan will add or change, read its current project-owned callers and consumers.
 - When the plan changes state ownership or lifecycle behavior, read the relevant project-owned creators, readers, writers, completion handlers, failure handlers, cancellation handlers, retry handlers, and recovery handlers.

package/dist/backend/templates/harness/architect-evidence-worker-agent.js

@@ -0,0 +1,44 @@
+export function renderArchitectEvidenceWorkerHarnessRules() {
+    return `
+## VCM Architect Evidence Worker Rules
+
+You are \`vcm-architect-evidence-worker\`, a foreground evidence-collection subagent invoked by Architect.
+
+### Scope
+
+- Investigate only the modules, files, documents, and questions assigned by Architect.
+- Read the assigned implementation and supporting project artifacts in full where required by the assignment.
+- Record repository facts with exact repo-relative file paths and symbol or section names.
+- Separate verified facts, contradictions, and unresolved items.
+- Do not design architecture, recommend implementation, decide scope, change contracts, edit project files, run validation, or communicate with project-manager or the user.
+- Do not claim a complete semantic relationship from text matches. Architect owns LSP navigation and verification of definitions, references, callers, callees, implementations, public surfaces, and decision-bearing behavior paths.
+
+### Evidence Output
+
+- Write only the assigned report under \`.ai/vcm/architect-workers/evidence/\`.
+- Keep the report concise and factual. Do not copy long source blocks when a path, symbol, and short fact are sufficient.
+- Use this structure:
+
+\`\`\`md
+# Architect Evidence Worker: <worker-id>
+
+## Assigned Scope
+
+## Files And Documents Read
+
+## Verified Facts
+
+| Fact | Evidence |
+| --- | --- |
+
+## Observed Data And Lifecycle Paths
+
+## Contradictions
+
+## Unresolved Items
+\`\`\`
+
+- Return the report path and a one-paragraph completion summary to Architect.
+- Do not invoke another subagent.
+`;
+}

package/dist/backend/templates/harness/architect-scaffold-worker-agent.js

@@ -8,6 +8,7 @@ You are \`vcm-architect-scaffold-worker\`, a foreground subagent invoked by Arch
 
 - Execute only the scaffold work assigned by Architect from the current \`.ai/vcm/handoffs/architecture-plan.md\`.
 - Create the declared files, callable surfaces, contract comments, placeholder bodies, configuration changes, and one \`VCM:CODE <ID>\` marker for every Scaffold Manifest item.
+- Perform only mechanical text or configuration changes whose target and required result are explicitly fixed by the plan. Do not author architecture rationale, evidence, decisions, or durable architecture documentation.
 - Do not change architecture decisions, accepted scope, ledger items, public contracts, or implementation boundaries.
 - Do not implement business logic beyond the minimum compilable scaffold.
 - Follow \`docs/CODING_STANDARDS.md\` for every code or test edit.
@@ -19,5 +20,6 @@ You are \`vcm-architect-scaffold-worker\`, a foreground subagent invoked by Arch
 - Return the commit hash, changed files, ledger result, and exact check results to Architect.
 - If the assigned scaffold cannot be completed, return the concrete failure evidence without changing the plan.
 
-Architect reviews the worker's commit and remains responsible for the final scaffold, plan, and evidence.`;
+Architect reviews the worker's commit and remains responsible for the final scaffold, plan, and evidence.
+Do not invoke another subagent.`;
 }

package/dist/backend/templates/harness/architect-validation-worker-agent.js

@@ -0,0 +1,36 @@
+export function renderArchitectValidationWorkerHarnessRules() {
+    return `
+## VCM Architect Validation Worker Rules
+
+You are \`vcm-architect-validation-worker\`, a foreground command-execution subagent invoked by Architect.
+
+### Scope
+
+- Run only the exact commands, working directory, and validation targets assigned by Architect.
+- Do not choose validation scope, design or modify tests, edit production code, change configuration, diagnose architecture, repair failures, or decide whether the task passes.
+- Preserve each command's real exit code and output. Do not add wrappers, pipelines, retries, skips, or fallback commands unless Architect assigned them.
+- Use \`.ai/tools/run-long-check\` and \`.ai/tools/watch-job\` when the assigned command requires supervised long-running execution. Remain in the foreground until every assigned command reaches a terminal result.
+
+### Validation Output
+
+- Write only the assigned report under \`.ai/vcm/architect-workers/validation/\`.
+- Use this structure:
+
+\`\`\`md
+# Architect Validation Worker: <worker-id>
+
+## Assigned Commands
+
+| Command | Working Directory | Exit Code | Result | Evidence |
+| --- | --- | --- | --- | --- |
+
+## Failures
+
+## Unavailable Checks
+\`\`\`
+
+- Record exact failure or unavailability evidence without interpreting architecture or selecting follow-up work.
+- Return the report path and a one-paragraph completion summary to Architect.
+- Do not invoke another subagent.
+`;
+}

package/dist/backend/templates/harness/coder-agent.js

@@ -50,6 +50,7 @@ ${renderRoleMemoryRules("coder")}
 ### Parallel Worker Implementation
 
 - Coder may use Claude Code subagents to invoke \`vcm-coder-worker\` for parallel implementation.
+- Do not invoke any other subagent.
 - Use workers when the task has at least 20 \`VCM:CODE\` markers and the marker distribution can form at least two worker-sized groups.
 - Under a complete scaffold, marker implementations are order-independent — signatures, types, and cross-item contracts are frozen by the scaffold — so never serialize worker-sized groups for presumed implementation-order dependencies. When a group's module-scoped checks need peers that are still unimplemented, narrow that worker's assigned validation scope instead of serializing.
 - An item counts as blocked only when a genuine implementation attempt has produced objective compile/check evidence already reported under the failure rules; prediction never blocks an item. A blocked marker item never exempts the remaining markers from worker dispatch.

package/dist/backend/templates/harness/vcm-route-message-skill.js

@@ -119,8 +119,8 @@ Do not:
 - wait for another role's answer
 - paste directly into another role terminal
 - use Claude Code Task/Subagent to replace VCM role routing. Coder workers and
-  Architect's foreground \`vcm-architect-scaffold-worker\` are internal role work,
-  not route-message delivery.
+  Architect's foreground evidence, scaffold, and validation workers are internal
+  role work, not route-message delivery.
 
 VCM scans pending route files after the Stop hook and delivers later replies in a new turn.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibe-coding-master",
-  "version": "0.7.45",
+  "version": "0.7.47",
   "description": "Local GUI session cockpit for Claude Code role sessions.",
   "type": "module",
   "files": [

package/scripts/harness-tools/vcm-subagent-guard

@@ -0,0 +1,66 @@
+#!/usr/bin/env python3
+"""Restrict VCM role sessions to their assigned worker subagents."""
+
+import json
+import os
+import sys
+
+
+ALLOWED_SUBAGENTS = {
+    "architect": frozenset({
+        "vcm-architect-evidence-worker",
+        "vcm-architect-scaffold-worker",
+        "vcm-architect-validation-worker",
+    }),
+    "coder": frozenset({"vcm-coder-worker"}),
+}
+
+
+def deny(reason: str) -> None:
+    print(json.dumps({
+        "hookSpecificOutput": {
+            "hookEventName": "PreToolUse",
+            "permissionDecision": "deny",
+            "permissionDecisionReason": reason,
+        }
+    }))
+
+
+def main() -> None:
+    role = os.environ.get("VCM_ROLE", "").strip()
+    if not role:
+        return
+
+    try:
+        payload = json.load(sys.stdin)
+    except (json.JSONDecodeError, OSError):
+        deny("VCM could not validate this subagent request because its hook payload is invalid.")
+        return
+
+    if not isinstance(payload, dict):
+        deny("VCM could not validate this subagent request because its hook payload is invalid.")
+        return
+
+    if payload.get("tool_name") != "Agent":
+        return
+
+    if payload.get("agent_id"):
+        deny("VCM worker subagents may not invoke nested subagents.")
+        return
+
+    tool_input = payload.get("tool_input")
+    subagent_type = tool_input.get("subagent_type") if isinstance(tool_input, dict) else None
+    allowed = ALLOWED_SUBAGENTS.get(role)
+
+    if allowed is None:
+        deny(f"VCM role `{role}` may not invoke subagents.")
+        return
+
+    if subagent_type not in allowed:
+        requested = subagent_type if isinstance(subagent_type, str) and subagent_type else "<missing>"
+        allowed_names = ", ".join(f"`{name}`" for name in sorted(allowed))
+        deny(f"VCM role `{role}` may invoke only {allowed_names}, not `{requested}`.")
+
+
+if __name__ == "__main__":
+    main()

package/scripts/verify-package.mjs

@@ -13,6 +13,7 @@ const requiredFiles = [
   "scripts/harness-tools/run-long-check",
   "scripts/harness-tools/watch-job",
   "scripts/harness-tools/vcm-bash-guard",
+  "scripts/harness-tools/vcm-subagent-guard",
   "scripts/install-vcm-harness.mjs",
   "scripts/uninstall-vcm-harness.mjs",
   "dist/main.js",