openplanr 2.6.0 → 2.6.2

package/lib/host-packages/cursor/openplanr/rules/planr-design-review/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,41 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15236,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15286,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/cursor/openplanr/rules/planr-design-review/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,41 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15236,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15286,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/openai/.claude-plugin/marketplace.json

@@ -4,14 +4,14 @@
     "name": "AsemDevs"
   },
   "metadata": {
-    "version": "2.6.0",
+    "version": "2.6.2",
     "description": "Generated local OpenPlanr package."
   },
   "plugins": [
     {
       "name": "planr",
       "source": "./openplanr",
-      "version": "2.6.0",
+      "version": "2.6.2",
       "description": "Host-native OpenPlanr skills for OpenAI coding agents.",
       "strict": true
     }

package/lib/host-packages/openai/openplanr/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "planr",
-  "version": "2.6.0",
+  "version": "2.6.2",
   "description": "Host-native OpenPlanr planning, delivery, review, design, and operating skills.",
   "author": {
     "name": "AsemDevs"

package/lib/host-packages/openai/openplanr/.openplanr-content.json

@@ -8,7 +8,7 @@
   "files": [
     {
       "path": ".codex-plugin/plugin.json",
-      "digest": "sha256:86914866190aef3f24b1ec71289d84363ad4d20d9d08266bc526e1971542c4b7"
+      "digest": "sha256:848eeaeef1f239d5938a57121755a287736ed9361df9c697ebf1999b9f1a374c"
     },
     {
       "path": "skills/artifact/agents/openai.yaml",
@@ -328,7 +328,7 @@
     },
     {
       "path": "skills/design-loop/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:e368470cc9863cd20f5d5815c1d1df30a0f8432cbc09160f5b445fdb5420d4be"
     },
     {
       "path": "skills/design-loop/scripts/runtime/notices/entities.txt",
@@ -376,7 +376,7 @@
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -520,7 +520,7 @@
     },
     {
       "path": "skills/design-review/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:e368470cc9863cd20f5d5815c1d1df30a0f8432cbc09160f5b445fdb5420d4be"
     },
     {
       "path": "skills/design-review/scripts/runtime/notices/entities.txt",
@@ -568,7 +568,7 @@
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -712,7 +712,7 @@
     },
     {
       "path": "skills/design/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:e368470cc9863cd20f5d5815c1d1df30a0f8432cbc09160f5b445fdb5420d4be"
     },
     {
       "path": "skills/design/scripts/runtime/notices/entities.txt",
@@ -760,7 +760,7 @@
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -992,7 +992,7 @@
     },
     {
       "path": "skills/plan/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:e368470cc9863cd20f5d5815c1d1df30a0f8432cbc09160f5b445fdb5420d4be"
     },
     {
       "path": "skills/plan/scripts/planning-ids.mjs",
@@ -1044,7 +1044,7 @@
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -1259,5 +1259,5 @@
       "digest": "sha256:53698324b62f43b672ce8fe1654c526c96fb202e313442f09c6fc1e72268677e"
     }
   ],
-  "contentDigest": "sha256:43d99dd0fba75e793114c9a0d31f741cfd7e9e96ce00c63eb3b44ef41314c0fe"
+  "contentDigest": "sha256:6cf50c5f87816e7e85e6c3a622c784199abfa4f4371d9bbef9f22b3b72bfd98b"
 }

package/lib/host-packages/openai/openplanr/skills/design/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,41 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15236,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15286,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/openai/openplanr/skills/design/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/openai/openplanr/skills/design-loop/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,41 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15236,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15286,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/openai/openplanr/skills/design-loop/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [