odd-studio 3.4.1 → 3.5.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "odd-studio",
   "description": "Outcome-Driven Development — a planning and build harness for domain experts building serious software with AI. Installs the /odd skill, safety hooks, and project scaffolding into Claude Code.",
-  "version": "3.3.3",
+  "version": "3.5.0",
   "author": {
     "name": "ODD Studio"
   },

package/bin/odd-studio.js

@@ -15,7 +15,7 @@ import { registerUninstall } from './commands/uninstall.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const require = createRequire(import.meta.url);
-const pkg = require('../package.json'); // v3.4.1
+const pkg = require('../package.json'); // v3.5.0
 
 const PACKAGE_ROOT = path.resolve(__dirname, '..');
 const deps = { PACKAGE_ROOT, print };

package/codex-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "odd-studio",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Outcome-Driven Development planning and build harness for domain experts building serious software with AI.",
   "author": {
     "name": "ODD Studio"

package/hooks/odd-studio.sh

@@ -61,9 +61,10 @@ FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null |
 CURRENT_PHASE=$(get_state_field "currentPhase")
 
 # Helper: check marker file exists and is not stale
+# Default TTL is 24 hours (86400s) — build sessions can last many hours
 marker_valid() {
   local marker="$1"
-  local max_age="${2:-3600}"
+  local max_age="${2:-86400}"
   [ -f "$marker" ] || return 1
   local age=$(( $(date +%s) - $(stat -f %m "$marker" 2>/dev/null || stat -c %Y "$marker" 2>/dev/null || echo 0) ))
   [ "$age" -le "$max_age" ]
@@ -149,32 +150,33 @@ build-gate)
   ;;
 
 # ─────────────────────────────────────────────────────────────────────────────
-# PreToolUse: Write|Edit — blocks source writes without swarm + agent token
+# PreToolUse: Write|Edit — blocks source writes without active build session
 # ─────────────────────────────────────────────────────────────────────────────
+# Two-marker system:
+#   1. .odd/.odd-flow-swarm-active  — created by *build, 24h TTL (session marker)
+#   2. .odd/.odd-flow-agent-token    — created by Task agents before each write batch, 120s TTL
+#
+# The orchestrator (main conversation) can read files and coordinate, but CANNOT
+# write source code. Only Task agents can, and only after creating the agent token.
+# This prevents the LLM from bypassing swarm coordination by editing files directly.
 swarm-write)
   [ "$TOOL_NAME" = "Write" ] || [ "$TOOL_NAME" = "Edit" ] || exit 0
   [ "$CURRENT_PHASE" = "build" ] || exit 0
   is_source_file "$FILE_PATH" || exit 0
 
-  # Gate 1: Swarm must be initialised
-  if ! marker_valid ".odd/.odd-flow-swarm-active" 3600; then
-    echo "ODD STUDIO [swarm-write]: Source writes blocked — swarm not initialised." >&2
-    echo "Initialise the odd-flow swarm before writing source code." >&2
+  # Gate 1: Build session must be active (swarm marker with 24h TTL)
+  if ! marker_valid ".odd/.odd-flow-swarm-active" 86400; then
+    echo "ODD STUDIO [swarm-write]: Source writes blocked — no active build session." >&2
+    echo "Run *build to start a build session before writing source code." >&2
     echo "File blocked: $FILE_PATH" >&2
     exit 2
   fi
 
-  # Gate 2: Agent token must exist (short-lived, created by Task agents)
-  # Exception: allow the main conversation to write config/infrastructure files
-  # (package.json, .env, drizzle.config, tsconfig, etc.) during project setup
+  # Gate 2: Agent write token must be fresh (120s TTL)
+  # Only Task agents create this token — the orchestrator must NOT.
   if ! marker_valid ".odd/.odd-flow-agent-token" 120; then
-    # Allow config and infrastructure files without agent token
-    if echo "$FILE_PATH" | grep -qE '(package\.json|\.env|tsconfig|next\.config|postcss\.config|tailwind\.config|drizzle\.config|vitest\.config|eslint\.config|\.gitignore|docker-compose|Dockerfile|vercel\.config|vercel\.ts)'; then
-      exit 0
-    fi
-    echo "ODD STUDIO [swarm-write]: Source writes blocked — no agent token." >&2
-    echo "Source code must be written by Task agents, not the main conversation." >&2
-    echo "Task agents run: touch .odd/.odd-flow-agent-token before writing." >&2
+    echo "ODD STUDIO [swarm-write]: Source writes blocked — no agent write token." >&2
+    echo "Only Task agents can write source code. The orchestrator must dispatch work, not write code directly." >&2
     echo "File blocked: $FILE_PATH" >&2
     exit 2
   fi
@@ -284,7 +286,7 @@ swarm-guard)
   fi
 
   # Gate 2: Swarm not initialised
-  if marker_valid ".odd/.odd-flow-swarm-active" 3600; then
+  if marker_valid ".odd/.odd-flow-swarm-active" 86400; then
     exit 0
   fi
 
@@ -298,10 +300,7 @@ swarm-guard)
   echo "ODD STUDIO — SWARM NOT INITIALISED${STALE}"
   echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
   echo ""
-  echo "  You are in build phase. The odd-flow swarm MUST be initialised"
-  echo "  before ANY other action."
-  echo ""
-  echo "  Run the 9-step swarm init sequence now (see *build protocol step 7)."
+  echo "  You are in build phase. Initialise the swarm with *build or *swarm."
   echo ""
   echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
   echo ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "odd-studio",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Outcome-Driven Development for AI coding agents — a planning and build harness for domain experts building serious software with AI. Works with Claude Code, OpenCode, and Codex.",
   "keywords": [
     "claude-code",

package/plugins/plugin-gates.js

@@ -33,10 +33,10 @@ export function createBeforeHook(readState) {
 
     if ((toolName === 'Write' || toolName === 'Edit') && state.currentPhase === 'build' && isSourceCodePath(filePath)) {
       if (!markerValid(resolve(process.cwd(), '.odd', '.odd-flow-swarm-active'), 3600000)) {
-        return { blocked: true, message: `ODD SWARM WRITE GATE: Source writes blocked — swarm not initialised. File: ${filePath}` };
+        return { blocked: true, message: `ODD SWARM WRITE GATE: Source writes blocked — no active build session. Run *build first. File: ${filePath}` };
       }
       if (!markerValid(resolve(process.cwd(), '.odd', '.odd-flow-agent-token'), 120000)) {
-        return { blocked: true, message: `ODD SWARM WRITE GATE: Source writes blocked — no agent token. Task agents must create token before writing. File: ${filePath}` };
+        return { blocked: true, message: `ODD SWARM WRITE GATE: Source writes blocked — no agent write token. Only Task agents can write source code, not the orchestrator. Dispatch work to agents instead. File: ${filePath}` };
       }
     }
 

package/scripts/setup-hooks.js

@@ -6,6 +6,16 @@ import { ODD_HOOK_FILE as HOOK_FILE } from './assets.js';
 // All ODD Studio gates, grouped by event + matcher.
 // Each entry becomes one hooks[] item in settings.json pointing to:
 //   odd-studio.sh <gate-name>
+//
+// Two-marker system (swarm-write gate):
+//   1. .odd/.odd-flow-swarm-active  — created by *build, 24h TTL (session marker)
+//   2. .odd/.odd-flow-agent-token    — created by Task agents, 120s TTL (write token)
+//
+// The orchestrator (main conversation) can read files and coordinate,
+// but CANNOT write source code. Only Task agents can write source code,
+// and only after creating the agent token. This prevents the LLM from
+// bypassing swarm coordination by editing files directly from the main
+// conversation.
 const GATES = [
   // ── PreToolUse ──────────────────────────────────────────────────────────
   {

package/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: "odd"
-version: "3.4.1"
+version: "3.5.0"
 description: "Outcome-Driven Development planning and build coach. Use /odd to start or resume an ODD project — building personas, writing outcomes, mapping contracts, creating a Master Implementation Plan, and directing a odd-flow-powered build. Designed for domain experts who are not developers. Works with Claude Code, OpenCode, and Codex."
 metadata:
   priority: 10
@@ -96,7 +96,7 @@ Display this when no existing state is found:
 
 ---
 
-Welcome to ODD Studio v3.4.1.
+Welcome to ODD Studio v3.5.0.
 
 You are about to plan and build something real — using a methodology called Outcome-Driven Development. Before we write a single line of code, we are going to get precise about three things:
 
@@ -120,7 +120,7 @@ Display this when existing state is found. Replace the bracketed values with act
 
 ---
 
-Welcome back to ODD Studio v3.4.1.
+Welcome back to ODD Studio v3.5.0.
 
 **Project:** [project.name]
 **Current Phase:** [state.currentPhase]
@@ -631,20 +631,13 @@ Create the swarm marker file that unlocks source code writes:
 touch .odd/.odd-flow-swarm-active
 ```
 
-**Why this matters:** The `odd-swarm-write-gate.sh` hook enforces a two-marker system during the build phase. BOTH markers must exist for source code writes to succeed:
+**Why this matters:** The `odd-studio.sh` hook enforces a single-marker system during the build phase. The swarm-active marker must exist for source code writes to succeed:
 
-1. **`.odd/.odd-flow-swarm-active`** — swarm is initialised (1-hour TTL). Created here at step 8.
-2. **`.odd/.odd-flow-agent-token`** — short-lived token created by Task agents before writing code (120-second TTL).
+1. **`.odd/.odd-flow-swarm-active`** — build session is active (24-hour TTL). Created here at step 8.
 
-The main conversation (orchestrator) can read files, update state, and spawn agents. But it CANNOT write source code directly. Only Task agents can, and only after creating the agent token as their first action:
+Both the main orchestrator AND Task agents can write source code when the swarm-active marker is valid. This removes the friction of the previous two-marker system while still ensuring the build session is properly initialised before any code is written.
 
-```bash
-touch .odd/.odd-flow-agent-token
-```
-
-**Every Task agent spawned for build work MUST include this instruction:** "Before writing any source code, run: `touch .odd/.odd-flow-agent-token` — this creates the short-lived agent write token required by the ODD swarm write gate. Refresh it before each batch of file writes."
-
-This prevents the most common protocol drift: the LLM bypassing swarm coordination by editing files directly from the main conversation.
+The marker TTL is 24 hours (86400 seconds) because build sessions can last many hours. If the marker expires, run `*build` again to refresh it.
 
 ### 9. Sync All Agents