openplanr 2.2639.4 → 2.2640.0

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/runtime/packages/design/templates/studio/studio.js

@@ -1885,6 +1885,7 @@ ${fence}`;
         if (saving || !available()) return;
         saving = true;
         try {
+          await studio.flush();
           for (const [pinId, category] of Object.entries(outbox)) {
             const body = {
               action: "category",

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",

package/lib/host-packages/cursor/openplanr/rules/planr-sync/scripts/sync.mjs

@@ -7,7 +7,6 @@ import { fileURLToPath } from 'node:url';
 import { promisify } from 'node:util';
 
 const execFileAsync = promisify(execFile);
-const LINEAR_ENDPOINT = 'https://api.linear.app/graphql';
 const LINEAR_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
 const LINEAR_IDENTIFIER = /^[A-Z][A-Z0-9]+-\d+$/u;
 
@@ -102,100 +101,6 @@ export async function executeGitHubOperations(
   return { provider: 'github', applied: true, results };
 }
 
-async function linearRequest(query, variables, token, fetchImpl = fetch) {
-  if (!token)
-    throw new IntegrationError('E_LINEAR_CREDENTIAL', 'Linear credentials are unavailable.');
-  let response;
-  let payload;
-  try {
-    response = await fetchImpl(LINEAR_ENDPOINT, {
-      method: 'POST',
-      headers: { authorization: token, 'content-type': 'application/json' },
-      body: JSON.stringify({ query, variables }),
-    });
-    payload = await response.json();
-  } catch (error) {
-    throw new IntegrationError('E_LINEAR_API', 'Linear synchronization transport failed.', {
-      cause: String(error?.message ?? error),
-    });
-  }
-  if (!response.ok || !payload || typeof payload !== 'object' || payload.errors?.length) {
-    throw new IntegrationError('E_LINEAR_API', 'Linear rejected the synchronization request.', {
-      status: response.status,
-      errors: payload?.errors,
-    });
-  }
-  return payload.data;
-}
-
-function requireLinearMutationResult(data, field) {
-  const result = data?.[field];
-  const issue = result?.issue;
-  if (
-    result?.success !== true ||
-    !issue ||
-    typeof issue.id !== 'string' ||
-    typeof issue.identifier !== 'string' ||
-    typeof issue.url !== 'string'
-  ) {
-    throw new IntegrationError(
-      'E_LINEAR_API',
-      `Linear ${field} did not confirm a successful issue mutation.`,
-      {
-        field,
-        success: result?.success ?? null,
-      },
-    );
-  }
-  return issue;
-}
-
-export async function inspectLinear({ token = process.env.PLANR_LINEAR_TOKEN } = {}) {
-  const data = await linearRequest('query OpenPlanrViewer { viewer { id name email } }', {}, token);
-  return { provider: 'linear', viewer: data.viewer };
-}
-
-export async function executeLinearOperations(
-  operations,
-  { token = process.env.PLANR_LINEAR_TOKEN, apply = false } = {},
-) {
-  if (!Array.isArray(operations))
-    throw new IntegrationError('E_SYNC_INPUT', 'Linear operations must be an array.');
-  if (!apply) return { provider: 'linear', applied: false, operations };
-  const results = [];
-  for (const operation of operations) {
-    if (operation.action === 'create' && operation.teamId) {
-      const data = await linearRequest(
-        'mutation OpenPlanrCreate($input: IssueCreateInput!) { issueCreate(input: $input) { success issue { id identifier url } } }',
-        {
-          input: { teamId: operation.teamId, title: operation.title, description: operation.body },
-        },
-        token,
-      );
-      results.push({ action: 'create', ...requireLinearMutationResult(data, 'issueCreate') });
-      continue;
-    }
-    if (operation.action === 'update' && isLikelyLinearIssueId(operation.id)) {
-      const data = await linearRequest(
-        'mutation OpenPlanrUpdate($id: String!, $input: IssueUpdateInput!) { issueUpdate(id: $id, input: $input) { success issue { id identifier url } } }',
-        {
-          id: operation.id,
-          input: { title: operation.title, description: operation.body, stateId: operation.state },
-        },
-        token,
-      );
-      results.push({ action: 'update', ...requireLinearMutationResult(data, 'issueUpdate') });
-      continue;
-    }
-    throw new IntegrationError(
-      'E_SYNC_OPERATION',
-      'Unsupported Linear synchronization operation.',
-      { operation },
-    );
-  }
-  return { provider: 'linear', applied: true, results };
-}
-
 async function readJsonInput(value, stdin) {
   if (value) return JSON.parse(await readFile(resolve(value), 'utf8'));
   let bytes = '';
@@ -226,7 +131,7 @@ function parseArgs(argv) {
 
 export async function runPortableSync(
   argv = process.argv.slice(2),
-  { cwd = process.cwd(), env = process.env, stdin = process.stdin, stdout = process.stdout } = {},
+  { cwd = process.cwd(), stdin = process.stdin, stdout = process.stdout } = {},
 ) {
   const args = parseArgs(argv);
   let result;
@@ -238,17 +143,15 @@ export async function runPortableSync(
       cwd,
       apply: args.apply,
     });
-  } else if (args.provider === 'linear' && args.action === 'inspect') {
-    result = await inspectLinear({ token: env.PLANR_LINEAR_TOKEN });
-  } else if (args.provider === 'linear' && args.action === 'sync') {
-    result = await executeLinearOperations(await readJsonInput(args.input, stdin), {
-      token: env.PLANR_LINEAR_TOKEN,
-      apply: args.apply,
-    });
+  } else if (args.provider === 'linear') {
+    throw new IntegrationError(
+      'E_SYNC_USAGE',
+      'Linear synchronization runs through a Linear connector or the planr CLI (planr linear push, planr linear sync).',
+    );
   } else {
     throw new IntegrationError(
       'E_SYNC_USAGE',
-      'Usage: sync.mjs <local|github|linear> <inspect|sync> [--input path] [--apply]',
+      'Usage: sync.mjs <local|github> <inspect|sync> [--input path] [--apply]',
     );
   }
   stdout.write(`${JSON.stringify(result, null, 2)}\n`);

package/lib/host-packages/cursor/openplanr/rules/planr-sync.mdc

@@ -6,16 +6,27 @@ alwaysApply: false
 # Planr Sync
 
 Reconcile local planning artifacts and, when requested, GitHub or Linear state.
-Reason about conflicts in this active session; deterministic mapping and transport
-may use a host connector or the packaged [sync helper](scripts/sync.mjs). The optional
-OpenPlanr CLI is never required by the skill.
+Reason about conflicts in this active session; deterministic mapping and GitHub
+transport may use a host connector or the packaged [sync helper](scripts/sync.mjs).
+Local and GitHub work never require the OpenPlanr CLI.
 
 Resolution order:
 
 1. use a host-native GitHub or Linear connector when available;
-2. otherwise use the packaged deterministic helper;
-3. optionally use the equivalent `planr github`, `planr linear`, or `planr sync`
-   terminal utility when the user has installed it.
+2. otherwise, for GitHub, use the packaged deterministic helper;
+3. otherwise, for Linear, use the `planr linear` terminal utility when the user has
+   installed it; `planr github` and `planr sync` are optional equivalents for the rest.
+
+Linear through the CLI:
+
+- the user runs `planr linear init` in a terminal once; it prompts for a personal
+  access token, which the CLI stores;
+- audit with `planr linear sync --dry-run`, which reads Linear without writing;
+- before a real `planr linear sync`, ask how conflicts should resolve and pass
+  `--on-conflict local` or `--on-conflict linear`; without a prompt it favors Linear;
+- `planr linear push <artifact-id>` creates or updates Linear issues; preview with
+  `--dry-run`. Quick tasks and backlog items need `linear.standaloneProjectId` in the
+  project config when no terminal prompt is available.
 
 Audit is read-only by default. Apply local changes only when the request asks for
 reconciliation, and push remote changes only when the request asks for external

package/lib/host-packages/openai/.claude-plugin/marketplace.json

@@ -4,14 +4,14 @@
     "name": "AsemDevs"
   },
   "metadata": {
-    "version": "2.2639.4",
+    "version": "2.2640.0",
     "description": "Generated local OpenPlanr package."
   },
   "plugins": [
     {
       "name": "planr",
       "source": "./openplanr",
-      "version": "2.2639.4",
+      "version": "2.2640.0",
       "description": "Host-native OpenPlanr skills for OpenAI coding agents.",
       "strict": true
     }

package/lib/host-packages/openai/openplanr/.codex-plugin/plugin.json

@@ -1,9 +1,10 @@
 {
   "name": "planr",
-  "version": "2.2639.4",
+  "version": "2.2640.0",
   "description": "Host-native OpenPlanr planning, delivery, review, design, and operating skills.",
   "author": {
-    "name": "AsemDevs"
+    "name": "OpenPlanr",
+    "url": "https://openplanr.dev"
   },
   "license": "MIT",
   "skills": "./skills/"

package/lib/host-packages/openai/openplanr/.openplanr-content.json

@@ -8,7 +8,7 @@
   "files": [
     {
       "path": ".codex-plugin/plugin.json",
-      "digest": "sha256:6ecef12fab9d2d2a90d4ce82c7527a1ee2f6a372bc39ba7f1bcc7d76fcf906f8"
+      "digest": "sha256:6fe8da9843f3efb493c6d47ec6b58835ce09c913025008fa4bb0e8eb8f64117f"
     },
     {
       "path": "skills/artifact/agents/openai.yaml",
@@ -72,7 +72,7 @@
     },
     {
       "path": "skills/ceo-review/SKILL.md",
-      "digest": "sha256:fa0e64563962c9c5232b78693fdb330e87f5474815721427cfdafb11a6fef265"
+      "digest": "sha256:9c51ceb66d20f49ca417da1213441d4824cba8206d88f33b2481ed6eea51a399"
     },
     {
       "path": "skills/chair-review/agents/openai.yaml",
@@ -100,7 +100,7 @@
     },
     {
       "path": "skills/chair-review/SKILL.md",
-      "digest": "sha256:3336fb4b44874e421d57ce42ef49620873289b2ede6fdf7b4431f787c61c3be7"
+      "digest": "sha256:fcc1f07dff8de8bd104a0176a4265fb71e380a9a3dbbcbc0c21e4a113f38acfd"
     },
     {
       "path": "skills/challenger-review/agents/openai.yaml",
@@ -128,7 +128,7 @@
     },
     {
       "path": "skills/challenger-review/SKILL.md",
-      "digest": "sha256:9e2f5356100826c7e526bd57c3a09deca1f303cbd0a31591fd2ab1bfa5a5378b"
+      "digest": "sha256:7eb97bc94201cd9aff3751430437ea116b15a8d1347269ce3b0cbbd9cbf0d8c7"
     },
     {
       "path": "skills/cmo-review/agents/openai.yaml",
@@ -160,7 +160,7 @@
     },
     {
       "path": "skills/cmo-review/SKILL.md",
-      "digest": "sha256:425c71f6fec8a60db7a25017237fa136808a4b66d2f6e19ae259fe943b8467eb"
+      "digest": "sha256:31112e8deae357bbde9d51d9707400f63e16563bf08f4774acb52e2f5ccdfa2a"
     },
     {
       "path": "skills/coo-review/agents/openai.yaml",
@@ -192,7 +192,7 @@
     },
     {
       "path": "skills/coo-review/SKILL.md",
-      "digest": "sha256:48c80085871d3a19825120ba18828587347a8877b16b016ca65cea7cc1a87736"
+      "digest": "sha256:8d6b132b39e41d249961602e002035f4748f1ad4299984952f00d6b16485a678"
     },
     {
       "path": "skills/cpo-review/agents/openai.yaml",
@@ -224,7 +224,7 @@
     },
     {
       "path": "skills/cpo-review/SKILL.md",
-      "digest": "sha256:bf26e686965921029fed599fa7d597686dc42ce44f8000e0a2b36a6d5f5174de"
+      "digest": "sha256:77d2f464f9102515ab842fc5afe76feae7a12c9ecde150c2392a599b50186cf4"
     },
     {
       "path": "skills/cto-review/agents/openai.yaml",
@@ -256,7 +256,7 @@
     },
     {
       "path": "skills/cto-review/SKILL.md",
-      "digest": "sha256:978cb42db8fa3e23a9ca7717806cd5e73cb7df74e4ac56b3d6352602f999f44f"
+      "digest": "sha256:7addd0afdd7a17032f24c54c11dfc80beef516f0d7d90dfa11392a9556245b1e"
     },
     {
       "path": "skills/dashboard/agents/openai.yaml",
@@ -276,7 +276,7 @@
     },
     {
       "path": "skills/design-loop/openplanr.skill.json",
-      "digest": "sha256:56dc09a795ee2a2cfb98b4a2f023f8fe83d044a7e5a4778d906c78116ba78bd5"
+      "digest": "sha256:4dc9b54a53a6a1e591f5e31bf68088caaccfbac18d45061e4af2940fcdfbb8e4"
     },
     {
       "path": "skills/design-loop/references/craft.md",
@@ -326,9 +326,41 @@
       "path": "skills/design-loop/schemas/design-review-handoff.schema.json",
       "digest": "sha256:402b25238f93f8269b98697bf77fa11dda1fd284f44e41d73cdb813f5244a4e0"
     },
+    {
+      "path": "skills/design-loop/scripts/design-artifact-shell.mjs",
+      "digest": "sha256:9245a86f8e3f20f6ec4c705d1364d2d6d3e639b34a7d41162769a0f490dd39df"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-document.mjs",
+      "digest": "sha256:7e15b9f9e9afd29be2a2558fad9e57b5df85e494a586180d5afe23015cdbcfb7"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-entities.mjs",
+      "digest": "sha256:376ec35d0f184deac31b639f2c0918e6b0f165e19984ed1c89ba2cfad6af9b80"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-parse5-parser.mjs",
+      "digest": "sha256:a9bfeecae4d31155a6935455c82ea8348da25f8585216b531d00c6599b8196e4"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-parse5-tokenizer.mjs",
+      "digest": "sha256:f655474fb8d0bed732f01ace5b67102f849b73cb40831a57f1fb7b61180fbde9"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-review-handoff.mjs",
+      "digest": "sha256:1d04e0d821738f3934fb3fbd314b161fb557f4459cf2da2d1921c99d27d7d861"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-sandbox-guards.mjs",
+      "digest": "sha256:dcc7aa1971da47018a198bfe7520c05e3e5ba21fe2d9c8fffcaad882ded5bbbb"
+    },
+    {
+      "path": "skills/design-loop/scripts/design-share.mjs",
+      "digest": "sha256:b10d7ce9cdb3eb48b9aca803e4d2ecc4f8e477e91f4a0c6a3ae17a1f7985aa06"
+    },
     {
       "path": "skills/design-loop/scripts/design.mjs",
-      "digest": "sha256:1fd130d914dd6b84992007fcf300b6083e04ee3983beaf1718cd1866a26b4d7a"
+      "digest": "sha256:ab33412cab749120e07359983f85bcb64038026844c06ff9f464c4f371d6d6ca"
     },
     {
       "path": "skills/design-loop/scripts/runtime/notices/entities.txt",
@@ -364,11 +396,11 @@
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/design/templates/studio/studio.js",
-      "digest": "sha256:8e0ae7d5ddbb058f4b3f7a0876ce8259dd247358c40ce666763e9001b3bc5338"
+      "digest": "sha256:85f8b084457aaa172025fb878b64059782cb976f72451b207c7bc40e8c982bb8"
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:344e2118724b905e310c4919e9515ff326641f84819202921af871388bd7ea53"
+      "digest": "sha256:931a50e413656f4dcd95db2451b5fc63c985b13494b4b01b492d8292529f4fcb"
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/registries/artifact-theme.json",
@@ -460,7 +492,7 @@
     },
     {
       "path": "skills/design-review/openplanr.skill.json",
-      "digest": "sha256:2dbcbfe72ca6092a1eb3adc5782d314b04211f64ac64833aa2191265267d319f"
+      "digest": "sha256:5abf56388a0cae2fc5c2135ce01538e46b7131e9c82a1eae479852b92435ea92"
     },
     {
       "path": "skills/design-review/references/craft.md",
@@ -510,9 +542,41 @@
       "path": "skills/design-review/schemas/design-review-handoff.schema.json",
       "digest": "sha256:402b25238f93f8269b98697bf77fa11dda1fd284f44e41d73cdb813f5244a4e0"
     },
+    {
+      "path": "skills/design-review/scripts/design-artifact-shell.mjs",
+      "digest": "sha256:9245a86f8e3f20f6ec4c705d1364d2d6d3e639b34a7d41162769a0f490dd39df"
+    },
+    {
+      "path": "skills/design-review/scripts/design-document.mjs",
+      "digest": "sha256:7e15b9f9e9afd29be2a2558fad9e57b5df85e494a586180d5afe23015cdbcfb7"
+    },
+    {
+      "path": "skills/design-review/scripts/design-entities.mjs",
+      "digest": "sha256:376ec35d0f184deac31b639f2c0918e6b0f165e19984ed1c89ba2cfad6af9b80"
+    },
+    {
+      "path": "skills/design-review/scripts/design-parse5-parser.mjs",
+      "digest": "sha256:a9bfeecae4d31155a6935455c82ea8348da25f8585216b531d00c6599b8196e4"
+    },
+    {
+      "path": "skills/design-review/scripts/design-parse5-tokenizer.mjs",
+      "digest": "sha256:f655474fb8d0bed732f01ace5b67102f849b73cb40831a57f1fb7b61180fbde9"
+    },
+    {
+      "path": "skills/design-review/scripts/design-review-handoff.mjs",
+      "digest": "sha256:1d04e0d821738f3934fb3fbd314b161fb557f4459cf2da2d1921c99d27d7d861"
+    },
+    {
+      "path": "skills/design-review/scripts/design-sandbox-guards.mjs",
+      "digest": "sha256:dcc7aa1971da47018a198bfe7520c05e3e5ba21fe2d9c8fffcaad882ded5bbbb"
+    },
+    {
+      "path": "skills/design-review/scripts/design-share.mjs",
+      "digest": "sha256:b10d7ce9cdb3eb48b9aca803e4d2ecc4f8e477e91f4a0c6a3ae17a1f7985aa06"
+    },
     {
       "path": "skills/design-review/scripts/design.mjs",
-      "digest": "sha256:1fd130d914dd6b84992007fcf300b6083e04ee3983beaf1718cd1866a26b4d7a"
+      "digest": "sha256:ab33412cab749120e07359983f85bcb64038026844c06ff9f464c4f371d6d6ca"
     },
     {
       "path": "skills/design-review/scripts/runtime/notices/entities.txt",
@@ -548,11 +612,11 @@
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/design/templates/studio/studio.js",
-      "digest": "sha256:8e0ae7d5ddbb058f4b3f7a0876ce8259dd247358c40ce666763e9001b3bc5338"
+      "digest": "sha256:85f8b084457aaa172025fb878b64059782cb976f72451b207c7bc40e8c982bb8"
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:344e2118724b905e310c4919e9515ff326641f84819202921af871388bd7ea53"
+      "digest": "sha256:931a50e413656f4dcd95db2451b5fc63c985b13494b4b01b492d8292529f4fcb"
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/registries/artifact-theme.json",
@@ -644,7 +708,7 @@
     },
     {
       "path": "skills/design/openplanr.skill.json",
-      "digest": "sha256:36772da092a70a0e83f331723926d9dd58fa82d3b81d112179dfb3d7ab60bc1f"
+      "digest": "sha256:d44c329b3754caa65cd0209f39fa31327f6ff68257f0de8c6f3ab26c3be9cc6c"
     },
     {
       "path": "skills/design/references/craft.md",
@@ -694,9 +758,41 @@
       "path": "skills/design/schemas/design-review-handoff.schema.json",
       "digest": "sha256:402b25238f93f8269b98697bf77fa11dda1fd284f44e41d73cdb813f5244a4e0"
     },
+    {
+      "path": "skills/design/scripts/design-artifact-shell.mjs",
+      "digest": "sha256:9245a86f8e3f20f6ec4c705d1364d2d6d3e639b34a7d41162769a0f490dd39df"
+    },
+    {
+      "path": "skills/design/scripts/design-document.mjs",
+      "digest": "sha256:7e15b9f9e9afd29be2a2558fad9e57b5df85e494a586180d5afe23015cdbcfb7"
+    },
+    {
+      "path": "skills/design/scripts/design-entities.mjs",
+      "digest": "sha256:376ec35d0f184deac31b639f2c0918e6b0f165e19984ed1c89ba2cfad6af9b80"
+    },
+    {
+      "path": "skills/design/scripts/design-parse5-parser.mjs",
+      "digest": "sha256:a9bfeecae4d31155a6935455c82ea8348da25f8585216b531d00c6599b8196e4"
+    },
+    {
+      "path": "skills/design/scripts/design-parse5-tokenizer.mjs",
+      "digest": "sha256:f655474fb8d0bed732f01ace5b67102f849b73cb40831a57f1fb7b61180fbde9"
+    },
+    {
+      "path": "skills/design/scripts/design-review-handoff.mjs",
+      "digest": "sha256:1d04e0d821738f3934fb3fbd314b161fb557f4459cf2da2d1921c99d27d7d861"
+    },
+    {
+      "path": "skills/design/scripts/design-sandbox-guards.mjs",
+      "digest": "sha256:dcc7aa1971da47018a198bfe7520c05e3e5ba21fe2d9c8fffcaad882ded5bbbb"
+    },
+    {
+      "path": "skills/design/scripts/design-share.mjs",
+      "digest": "sha256:b10d7ce9cdb3eb48b9aca803e4d2ecc4f8e477e91f4a0c6a3ae17a1f7985aa06"
+    },
     {
       "path": "skills/design/scripts/design.mjs",
-      "digest": "sha256:1fd130d914dd6b84992007fcf300b6083e04ee3983beaf1718cd1866a26b4d7a"
+      "digest": "sha256:ab33412cab749120e07359983f85bcb64038026844c06ff9f464c4f371d6d6ca"
     },
     {
       "path": "skills/design/scripts/runtime/notices/entities.txt",
@@ -732,11 +828,11 @@
     },
     {
       "path": "skills/design/scripts/runtime/packages/design/templates/studio/studio.js",
-      "digest": "sha256:8e0ae7d5ddbb058f4b3f7a0876ce8259dd247358c40ce666763e9001b3bc5338"
+      "digest": "sha256:85f8b084457aaa172025fb878b64059782cb976f72451b207c7bc40e8c982bb8"
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:344e2118724b905e310c4919e9515ff326641f84819202921af871388bd7ea53"
+      "digest": "sha256:931a50e413656f4dcd95db2451b5fc63c985b13494b4b01b492d8292529f4fcb"
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/registries/artifact-theme.json",
@@ -944,7 +1040,7 @@
     },
     {
       "path": "skills/plan/openplanr.skill.json",
-      "digest": "sha256:1f83ec18d867ab0e02d687a1b83398c2a527585b9f369fee1c3dc86f16731f05"
+      "digest": "sha256:1feb1a6f4b5e57226f067f4be7f5bb427bbe99c52ef3b192885e07a0afc3f558"
     },
     {
       "path": "skills/plan/references/artifact-contract.md",
@@ -966,9 +1062,41 @@
       "path": "skills/plan/schemas/design-review-handoff.schema.json",
       "digest": "sha256:402b25238f93f8269b98697bf77fa11dda1fd284f44e41d73cdb813f5244a4e0"
     },
+    {
+      "path": "skills/plan/scripts/design-artifact-shell.mjs",
+      "digest": "sha256:9245a86f8e3f20f6ec4c705d1364d2d6d3e639b34a7d41162769a0f490dd39df"
+    },
+    {
+      "path": "skills/plan/scripts/design-document.mjs",
+      "digest": "sha256:7e15b9f9e9afd29be2a2558fad9e57b5df85e494a586180d5afe23015cdbcfb7"
+    },
+    {
+      "path": "skills/plan/scripts/design-entities.mjs",
+      "digest": "sha256:376ec35d0f184deac31b639f2c0918e6b0f165e19984ed1c89ba2cfad6af9b80"
+    },
+    {
+      "path": "skills/plan/scripts/design-parse5-parser.mjs",
+      "digest": "sha256:a9bfeecae4d31155a6935455c82ea8348da25f8585216b531d00c6599b8196e4"
+    },
+    {
+      "path": "skills/plan/scripts/design-parse5-tokenizer.mjs",
+      "digest": "sha256:f655474fb8d0bed732f01ace5b67102f849b73cb40831a57f1fb7b61180fbde9"
+    },
+    {
+      "path": "skills/plan/scripts/design-review-handoff.mjs",
+      "digest": "sha256:1d04e0d821738f3934fb3fbd314b161fb557f4459cf2da2d1921c99d27d7d861"
+    },
+    {
+      "path": "skills/plan/scripts/design-sandbox-guards.mjs",
+      "digest": "sha256:dcc7aa1971da47018a198bfe7520c05e3e5ba21fe2d9c8fffcaad882ded5bbbb"
+    },
+    {
+      "path": "skills/plan/scripts/design-share.mjs",
+      "digest": "sha256:b10d7ce9cdb3eb48b9aca803e4d2ecc4f8e477e91f4a0c6a3ae17a1f7985aa06"
+    },
     {
       "path": "skills/plan/scripts/design.mjs",
-      "digest": "sha256:1fd130d914dd6b84992007fcf300b6083e04ee3983beaf1718cd1866a26b4d7a"
+      "digest": "sha256:ab33412cab749120e07359983f85bcb64038026844c06ff9f464c4f371d6d6ca"
     },
     {
       "path": "skills/plan/scripts/planning-ids.mjs",
@@ -1008,11 +1136,11 @@
     },
     {
       "path": "skills/plan/scripts/runtime/packages/design/templates/studio/studio.js",
-      "digest": "sha256:8e0ae7d5ddbb058f4b3f7a0876ce8259dd247358c40ce666763e9001b3bc5338"
+      "digest": "sha256:85f8b084457aaa172025fb878b64059782cb976f72451b207c7bc40e8c982bb8"
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:344e2118724b905e310c4919e9515ff326641f84819202921af871388bd7ea53"
+      "digest": "sha256:931a50e413656f4dcd95db2451b5fc63c985b13494b4b01b492d8292529f4fcb"
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/registries/artifact-theme.json",
@@ -1220,12 +1348,12 @@
     },
     {
       "path": "skills/sync/scripts/sync.mjs",
-      "digest": "sha256:42fb430add6e96c73a8d1c5ea5df7a6ce0bdffc20b9c375eff9333c6c741b308"
+      "digest": "sha256:005397d703d8df70f346a789d15c665a44329449418b39e807bb0dff927153da"
     },
     {
       "path": "skills/sync/SKILL.md",
-      "digest": "sha256:53698324b62f43b672ce8fe1654c526c96fb202e313442f09c6fc1e72268677e"
+      "digest": "sha256:06048f24128098919931db60272e0e14fe51bcbeba4b499db587e3b89d7bb3b9"
     }
   ],
-  "contentDigest": "sha256:7fd789cc7582e283022486cbae677023b5dd084e9b07ff67f54b81e65861e2e6"
+  "contentDigest": "sha256:1b8598ef168ceec3a700cd18ac4ab067fecfb45828b9ffd3d338e1b8d35a94fc"
 }

package/lib/host-packages/openai/openplanr/skills/ceo-review/SKILL.md

@@ -2,7 +2,7 @@
 name: ceo-review
 description: "Produce a grounded strategy and finance review for an Operate cycle. Use when direction, runway, margin, investment, or cost of delay needs a CEO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # CEO review (`strategy-finance`)

package/lib/host-packages/openai/openplanr/skills/chair-review/SKILL.md

@@ -2,7 +2,7 @@
 name: chair-review
 description: "Synthesize an Operate cycle into a prioritized decision queue and action plan. Use after specialist reviews when leadership needs one coherent brief."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Write"
+allowed-tools: "Read, Grep, Glob, Edit(./.planr/operate/**)"
 ---
 
 # Chair synthesis (`chair`)

package/lib/host-packages/openai/openplanr/skills/challenger-review/SKILL.md

@@ -2,7 +2,7 @@
 name: challenger-review
 description: "Challenge an Operate cycle's claims, alternatives, downside, and confidence. Use when assumptions or executive consensus need an independent stress test."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # Challenger review (`independent-challenge`)

package/lib/host-packages/openai/openplanr/skills/cmo-review/SKILL.md

@@ -2,7 +2,7 @@
 name: cmo-review
 description: "Produce a grounded market and growth review for an Operate cycle. Use when acquisition, positioning, demand, retention, or missing measurement needs a CMO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # CMO review (`growth-market`)

package/lib/host-packages/openai/openplanr/skills/coo-review/SKILL.md

@@ -2,7 +2,7 @@
 name: coo-review
 description: "Produce a grounded operations and customer-health review for an Operate cycle. Use when readiness, service delivery, capacity, or customer health needs a COO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # COO review (`operations-customer`)

package/lib/host-packages/openai/openplanr/skills/cpo-review/SKILL.md

@@ -2,7 +2,7 @@
 name: cpo-review
 description: "Produce a grounded product and activation review for an Operate cycle. Use when customer value, activation, prioritization, or adoption needs a CPO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # CPO review (`product-activation`)

package/lib/host-packages/openai/openplanr/skills/cto-review/SKILL.md

@@ -2,7 +2,7 @@
 name: cto-review
 description: "Produce a grounded technology and delivery-risk review for an Operate cycle. Use when architecture, reliability, security, or execution risk needs a CTO lens."
 license: MIT
-allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Write"
+allowed-tools: "Read, Grep, Glob, Bash(git log:*), Bash(git show:*), Bash(git diff:*), Edit(./.planr/operate/**)"
 ---
 
 # CTO review (`technology-risk`)