[harrisonoconnorhover]

What changed

• add generated-contract hosted project and graph list/create/open/save/delete flows
• preserve opaque ETag conflicts, canonical content identity, detached drafts, import/export, and local loopback behavior
• retain create/delete idempotency keys across ambiguous retries without provider-specific browser logic
• complete static OIDC callbacks in-place so memory-only access survives the callback transition
• hide the legacy localhost operations surface in hosted mode until the next focused roadmap slices

Why

DRUFF-26 requires provider-neutral remote graph management over Dander's authenticated Control API while keeping offline/local authoring intact. The existing persistence controller remains the single state seam.

The completion review also found a slow Create could overwrite newer canvas edits. Create now attaches the accepted remote address/revision/baseline while retaining any in-flight local edits as dirty.

User impact

Hosted operators can browse projects and paginated graphs, create/open/save/reload/delete graphs safely, and see portable graph identity separately from the opaque concurrency token. Local mode is unchanged.

Checks

• pnpm contracts:check
• pnpm typecheck
• pnpm lint
• pnpm format:check
• pnpm exec vitest run --maxWorkers=2 — 63 files, 643 tests
• pnpm test:e2e — fresh static build and 11 Playwright journeys
• staged diff/secret/artifact review
• two-pass independent adversarial review; final create-in-flight finding corrected

No cloud resources or paid services were used.