openplanr 2.6.1 → 2.6.3

package/lib/host-packages/cursor/openplanr/rules/planr-design-review/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,55 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        if (segments.length === 3 && !trailingSlash && ["GET", "HEAD"].includes(req.method)) {
+          send(res, 308, "", { location: `/o/${owner.id}/${owner.capability}/` }, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        if (response.kind === "asset") {
+          const mediaTypes = { document: "text/html", runtime: "text/javascript", stylesheet: "text/css" };
+          if (!Object.hasOwn(mediaTypes, response.asset) || typeof response.body !== "string") throw new Error("Invalid owner asset response.");
+          send(res, response.status, response.body, {
+            ...parentHeaders(),
+            "content-type": `${mediaTypes[response.asset]}; charset=utf-8`,
+            "content-security-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; font-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'"
+          }, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15250,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15300,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/cursor/openplanr/rules/planr-design-review/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/cursor/openplanr/rules/planr-diagram/references/diagram-fidelity.md

@@ -4,6 +4,20 @@ Use this reference when the user requests Mermaid or Excalidraw editing, imports
 an existing source, or asks why a projection was omitted.
 
 - Canonical `.planr-diagram.json` is the semantic source and is always editable.
+- For the v1.13 flowchart authoring path, the `.planr-diagram-bundle.json` holds
+  the semantic document, presentation, exact original Mermaid text, and source
+  correspondence. Use `@openplanr/artifact/diagram-authoring`'s
+  `previewMermaidCopy`, `adoptMermaidCopy`, and `exportMermaidCopy` for copy
+  interchange. Preview never saves; adoption requires acknowledgement of that
+  exact preview's fidelity losses. Saving the bundle is a separate owner action.
+- The certified Mermaid copy subset supports explicit flowchart node IDs,
+  rectangle/rounded/decision/cylinder shapes, directed/bidirectional/undirected
+  edges, labels, and nested subgraphs. It does not infer lanes or preserve
+  coordinates, manual routes, annotations, styling, or exact source formatting
+  on export. Keep the complete bundle when these matter. Copy import/export
+  never creates a repository source link or watcher.
+- Legacy sequence diagrams remain readable and renderable; they are not in the
+  editable Mermaid copy certification.
 - Mermaid is emitted only when the selected grammar has a certified projection.
   `editable`, `partial`, and `unsupported` are honest compatibility levels, not
   success or failure labels.

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,55 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        if (segments.length === 3 && !trailingSlash && ["GET", "HEAD"].includes(req.method)) {
+          send(res, 308, "", { location: `/o/${owner.id}/${owner.capability}/` }, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        if (response.kind === "asset") {
+          const mediaTypes = { document: "text/html", runtime: "text/javascript", stylesheet: "text/css" };
+          if (!Object.hasOwn(mediaTypes, response.asset) || typeof response.body !== "string") throw new Error("Invalid owner asset response.");
+          send(res, response.status, response.body, {
+            ...parentHeaders(),
+            "content-type": `${mediaTypes[response.asset]}; charset=utf-8`,
+            "content-security-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; font-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'"
+          }, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15250,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15300,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/cursor/openplanr/rules/planr-plan/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/openai/.claude-plugin/marketplace.json

@@ -4,14 +4,14 @@
     "name": "AsemDevs"
   },
   "metadata": {
-    "version": "2.6.1",
+    "version": "2.6.3",
     "description": "Generated local OpenPlanr package."
   },
   "plugins": [
     {
       "name": "planr",
       "source": "./openplanr",
-      "version": "2.6.1",
+      "version": "2.6.3",
       "description": "Host-native OpenPlanr skills for OpenAI coding agents.",
       "strict": true
     }

package/lib/host-packages/openai/openplanr/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "planr",
-  "version": "2.6.1",
+  "version": "2.6.3",
   "description": "Host-native OpenPlanr planning, delivery, review, design, and operating skills.",
   "author": {
     "name": "AsemDevs"

package/lib/host-packages/openai/openplanr/.openplanr-content.json

@@ -8,7 +8,7 @@
   "files": [
     {
       "path": ".codex-plugin/plugin.json",
-      "digest": "sha256:b8777f1c132d42a4226884e4cadd407f51185d756ef6bad7cce68565bac02ea9"
+      "digest": "sha256:56ba6c4519d4d20524b8a874342e21cadb55f5b87c7b5514540e11a104488965"
     },
     {
       "path": "skills/artifact/agents/openai.yaml",
@@ -328,7 +328,7 @@
     },
     {
       "path": "skills/design-loop/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:7a554ec4a32ea6caa6f3bb9f9e9059d586527afd73e33feb708739b0bb75c627"
     },
     {
       "path": "skills/design-loop/scripts/runtime/notices/entities.txt",
@@ -376,7 +376,7 @@
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design-loop/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -520,7 +520,7 @@
     },
     {
       "path": "skills/design-review/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:7a554ec4a32ea6caa6f3bb9f9e9059d586527afd73e33feb708739b0bb75c627"
     },
     {
       "path": "skills/design-review/scripts/runtime/notices/entities.txt",
@@ -568,7 +568,7 @@
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design-review/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -712,7 +712,7 @@
     },
     {
       "path": "skills/design/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:7a554ec4a32ea6caa6f3bb9f9e9059d586527afd73e33feb708739b0bb75c627"
     },
     {
       "path": "skills/design/scripts/runtime/notices/entities.txt",
@@ -760,7 +760,7 @@
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/design/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -860,7 +860,7 @@
     },
     {
       "path": "skills/diagram/references/diagram-fidelity.md",
-      "digest": "sha256:3eadcce2990f6d74a0eb96e26b78ecd7e493322ae6a8aee3cdcecc66ca3d75bd"
+      "digest": "sha256:25294a35cd4cef3744023d0fcf26bb57585f2fa544f712e54f1dd14d2c773522"
     },
     {
       "path": "skills/diagram/references/diagram-intent-to-ir.md",
@@ -992,7 +992,7 @@
     },
     {
       "path": "skills/plan/scripts/design.mjs",
-      "digest": "sha256:3fec9a1d47bc41c0caf4909a2c4b9d00205da630c015a46f6921caf2a4d7a2d2"
+      "digest": "sha256:7a554ec4a32ea6caa6f3bb9f9e9059d586527afd73e33feb708739b0bb75c627"
     },
     {
       "path": "skills/plan/scripts/planning-ids.mjs",
@@ -1044,7 +1044,7 @@
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:005fd84b459d0673203781da7693ffb28b379ef73096213fd6df5c2606617730"
+      "digest": "sha256:6e51f9d61b978532cd129f442a4e88f9f3900e58a7239427ec264c34a1337ac3"
     },
     {
       "path": "skills/plan/scripts/runtime/packages/protocol/registry/artifact-theme.json",
@@ -1259,5 +1259,5 @@
       "digest": "sha256:53698324b62f43b672ce8fe1654c526c96fb202e313442f09c6fc1e72268677e"
     }
   ],
-  "contentDigest": "sha256:9eef83836e046acc0f58f291da7f3ab9dc8ffe7771c561945976554293b5ad49"
+  "contentDigest": "sha256:f0fccaf05277a2ba6204f6eac657d2ed8274d83d4e390fe52c85da333503f74f"
 }

package/lib/host-packages/openai/openplanr/skills/design/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,55 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        if (segments.length === 3 && !trailingSlash && ["GET", "HEAD"].includes(req.method)) {
+          send(res, 308, "", { location: `/o/${owner.id}/${owner.capability}/` }, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        if (response.kind === "asset") {
+          const mediaTypes = { document: "text/html", runtime: "text/javascript", stylesheet: "text/css" };
+          if (!Object.hasOwn(mediaTypes, response.asset) || typeof response.body !== "string") throw new Error("Invalid owner asset response.");
+          send(res, response.status, response.body, {
+            ...parentHeaders(),
+            "content-type": `${mediaTypes[response.asset]}; charset=utf-8`,
+            "content-security-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; font-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'"
+          }, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15250,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15300,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;

package/lib/host-packages/openai/openplanr/skills/design/scripts/runtime/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openplanr/protocol",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Canonical OpenPlanr schemas, registries, typed errors, and portable contract validation",
   "license": "MIT",
@@ -83,6 +83,10 @@
     "./enterprise-contracts": {
       "types": "./src/enterprise-contracts.d.mts",
       "import": "./src/enterprise-contracts.mjs"
+    },
+    "./diagram-authoring-contracts": {
+      "types": "./src/diagram-authoring-contracts.d.mts",
+      "import": "./src/diagram-authoring-contracts.mjs"
     }
   },
   "files": [

package/lib/host-packages/openai/openplanr/skills/design-loop/scripts/design.mjs

@@ -14910,6 +14910,7 @@ function createArtifactReviewServer({
     throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Artifact review instance id is invalid.");
   }
   const sessions = /* @__PURE__ */ new Map();
+  const ownerSessions = /* @__PURE__ */ new Map();
   let port = null;
   let closePromise = null;
   let pendingRegistrations = 0;
@@ -14917,7 +14918,7 @@ function createArtifactReviewServer({
   let draining = false;
   let emptyTimer = null;
   const stageRuntime = () => readFileSync11(STAGE_RUNTIME_PATH, "utf8");
-  const idle = () => sessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
+  const idle = () => sessions.size === 0 && ownerSessions.size === 0 && pendingRegistrations === 0 && activeRequests === 0;
   const scheduleEmpty = () => {
     if (emptyTimer || draining || typeof onEmpty !== "function") return;
     emptyTimer = setTimeout(async () => {
@@ -15042,6 +15043,55 @@ function createArtifactReviewServer({
         notFound(res, { head });
         return;
       }
+      if (segments[0] === "o") {
+        const owner = safeSessionId(segments[1]) && ownerSessions.get(segments[1]);
+        if (draining || !sessionMatches(owner, segments[2])) {
+          notFound(res, { head });
+          return;
+        }
+        if (segments.length === 3 && !trailingSlash && ["GET", "HEAD"].includes(req.method)) {
+          send(res, 308, "", { location: `/o/${owner.id}/${owner.capability}/` }, { head });
+          return;
+        }
+        const request2 = Promise.resolve().then(() => owner.handleRequest({
+          req,
+          segments: segments.slice(3),
+          head,
+          origin: `http://${LOOPBACK_HOST}:${port}`,
+          recoveryScope: owner.recoveryScope
+        }));
+        owner.pending.add(request2);
+        let response;
+        try {
+          response = await request2;
+        } finally {
+          owner.pending.delete(request2);
+        }
+        if (!response) {
+          notFound(res, { head });
+          return;
+        }
+        if (response.kind === "asset") {
+          const mediaTypes = { document: "text/html", runtime: "text/javascript", stylesheet: "text/css" };
+          if (!Object.hasOwn(mediaTypes, response.asset) || typeof response.body !== "string") throw new Error("Invalid owner asset response.");
+          send(res, response.status, response.body, {
+            ...parentHeaders(),
+            "content-type": `${mediaTypes[response.asset]}; charset=utf-8`,
+            "content-security-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; font-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'"
+          }, { head });
+          return;
+        }
+        send(res, response.status, JSON.stringify(response.body), {
+          // Rejections may precede body consumption (for example Content-Length
+          // above the limit). Do not reuse a socket containing unread body bytes.
+          ...response.status >= 400 ? { connection: "close" } : {},
+          "content-type": "application/json; charset=utf-8",
+          "cross-origin-resource-policy": "same-origin",
+          "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+          "x-frame-options": "DENY"
+        }, { head });
+        return;
+      }
       if (segments.length < 3 || segments[0] !== "r" || !safeSessionId(segments[1])) {
         notFound(res, { head });
         return;
@@ -15200,6 +15250,32 @@ function createArtifactReviewServer({
     controlToken,
     instanceId,
     sessionCount: () => sessions.size,
+    /** Trusted local authority only; this operation has no HTTP control route. */
+    registerOwnerSession({ handleRequest } = {}) {
+      if (draining || closePromise || typeof handleRequest !== "function") {
+        throw artifactError(ARTIFACT_ERROR_CODES.LOOPBACK_STATE, "Local owner session cannot be registered.");
+      }
+      const id4 = mintCapabilityToken({ bytes: SESSION_ID_BYTES });
+      const owner = {
+        id: id4,
+        capability: mintCapabilityToken({ bytes: SESSION_TOKEN_BYTES }),
+        recoveryScope: `diagram-owner_${id4}`,
+        handleRequest,
+        pending: /* @__PURE__ */ new Set()
+      };
+      ownerSessions.set(id4, owner);
+      return Object.freeze({
+        sessionId: id4,
+        capability: owner.capability,
+        recoveryScope: owner.recoveryScope,
+        path: `/o/${id4}/${owner.capability}/`,
+        async close() {
+          ownerSessions.delete(id4);
+          await Promise.allSettled([...owner.pending]);
+          if (idle()) scheduleEmpty();
+        }
+      });
+    },
     isIdle: idle,
     accepting: () => !draining && !closePromise,
     beginCloseIfIdle() {
@@ -15224,6 +15300,9 @@ function createArtifactReviewServer({
       emptyTimer = null;
       closePromise = (async () => {
         sessions.clear();
+        const pendingOwners = [...ownerSessions.values()].flatMap((owner) => [...owner.pending]);
+        ownerSessions.clear();
+        await Promise.allSettled(pendingOwners);
         await closeHttpServer(server);
       })();
       return closePromise;