feat(figma): make the direct Figma OAuth path work end to end

.changepacks/changepack_log_direct_oauth_path.json

@@ -0,0 +1,10 @@
+{
+  "changes": {
+    "crates/devup-mcp/Cargo.toml": "Minor",
+    "crates/devup-mcp-figma/Cargo.toml": "Minor",
+    "crates/devup-mcp-devup-ui/Cargo.toml": "Patch",
+    "crates/devup-mcp-visual/Cargo.toml": "Patch"
+  },
+  "note": "Make the direct Figma OAuth path work end to end, so a URL converts to DevupUI TSX without a host Figma MCP or an agent relay in the loop. Three defects each independently blocked it: Dynamic Client Registration always sent a client_name that Figma's catalog allowlist rejects with a plain-text 403, and the name is now configurable through --figma-client-name / DEVUP_FIGMA_CLIENT_NAME with doctor reporting the active value; the client_secret issued by registration was discarded even though Figma advertises only client_secret_basic/client_secret_post, so the token exchange answered a bare 400 after registration and browser consent had both succeeded, and the secret is now kept beside its client_id for the authorization-code exchange and refresh; and auth_network_error dropped the underlying transport error entirely, so every failure surfaced identically with no details, and it now carries kind/status/url/cause-chain with the URL reduced to scheme, host and path so a query string cannot carry a code or token into a log. Also tolerate a relay that re-serializes upstream results: get_metadata is no longer bare XML because Figma prepends a selected-nodes block and appends an instruction footer, and the fast envelope no longer requires integrity.utf8Bytes to equal the received byte length, since truncation is already caught by JSON parsing plus the node, resource-reference and resource-presence checks that read content rather than its serialized form. Every diagnostic and guidance string is now emitted in English, because these are returned to an LLM agent over MCP where Korean prose costs several times the tokens; Korean Figma fixture data is preserved where tests use it deliberately to exercise CJK handling. Consolidates CI and release into the single workflow the other org projects use, driven by changepacks/action: the action cuts draft releases and reports them through pending_releases, a build matrix compiles devup-mcp and devup-mcp-visual for Linux, Windows and a macOS universal binary and uploads them onto those drafts, and a finalize step publishes the drafts only after the uploads succeed, so a release is never visible without its binaries. A changepack-required gate fails any pull request that edits a crate without leaving a changepack log, since such a change never moves the version and therefore never releases. Also fixes output-root resolution for a root reached through a symlink: the root was canonicalised when the policy opened it while the requested outputPath was not, so a caller passing a path under the spelling it was given was refused with outputPath is outside the allowed root. On macOS that was the normal case rather than an edge case, because /tmp and the system temp directory both resolve through /var to /private/var. Fixes Section targets on the direct path: the fast snapshot script throws DEVUP_TARGET_IS_SECTION and MCP delivers a thrown error as a successful call carrying isError, which the direct path handed to accept and then failed with snapshot data not found, so a Section link had no way to reveal the screens inside it. It is now rejected exactly as the handoff path already did, so the collector switches to the section index and answers with selectable screens. Fixes SVG asset export, which failed for every request while PNG worked: Figma's remote MCP returns a written PNG as an image attachment but does not return a written .svg at all, so the bytes never reached devup-mcp. SVG is now exported as a string and carried inline beside the descriptor under a bounded size, and the payload search steps through the JSON encoding of a text block and accepts a text payload as well as base64. The missing-payload error now reports which content shapes and mime types the response actually carried, so an absent attachment, a wrong mime type and an unread field stay distinguishable. Adds server instructions covering that the generated component name and asset paths are starting points rather than contracts, that a fixed asset must be exported through assetRequests with an outputPath instead of referenced by a path that does not exist, and that resource delivery should be preferred over inlining bytes.",
+  "date": "2026-09-03T17:20:00+09:00"
+}

.changepacks/changepack_log_groundtruth_tools.json

@@ -0,0 +1,8 @@
+{
+  "changes": {
+    "crates/devup-mcp/Cargo.toml": "Minor",
+    "crates/devup-mcp-devup-ui/Cargo.toml": "Minor"
+  },
+  "note": "Add three read-only ground-truth tools so an agent can never fabricate a project identifier it never verified: devup_project_context reads a project's real devup.json theme tokens, openapi.json endpoints/schemas, or Vespertide models/*.json tables/columns/enums fresh on every call (no session cache), returning a shared {found:false,guardrail:{action:'stop-and-report',...}} envelope instead of guessing when the target file is missing; devup_ui_validate parses DevupUI TSX with the existing oxc_parser/oxc_allocator/oxc_span stack via a new oxc_ast_visit-based walker and flags unknown $token references (with edit-distance-suggested existing tokens), hardcoded hex colors/px lengths that match an existing token, unknown props on Box/Flex/Text/Center/Grid/Image (checked against the published devup-ui Style Props API reference, not invented), and non-static values inside css()/globalCss()/keyframes() calls specifically -- verified against devup-ui's own docs and css-utils-literal-only ESLint rule that plain JSX style props (bg={dynamic}) are valid devup-ui and must not be flagged; devup_stack_diff detects drift across vespertide model -> sea-orm entity -> vespera route -> openapi.json -> devup-api client with every finding carrying an explicit low/medium confidence since none of the checks is a real compiler front end. Regression-tested against the exact incident that motivated this work: three agents independently inventing a $gray100 color token, a 16px bubble radius, and a 36px avatar size that did not exist in the real project devup.json.",
+  "date": "2026-09-02T00:00:00+09:00"
+}

.changepacks/config.json

@@ -1,5 +1,5 @@
 {
   "ignore": ["**", "!/crates/*/Cargo.toml"],
   "baseBranch": "main",
-  "latestPackage": null
+  "latestPackage": "crates/devup-mcp/Cargo.toml"
 }

.github/workflows/ci.yml

@@ -1,11 +1,89 @@
 name: CI
 
+# One workflow, matching devup-ui and the other org projects: verification,
+# changepacks version management, binary builds and release publication all
+# live here rather than in a second file that can drift out of step.
+#
+# Release flow (driven by changepacks/action, not by hand):
+#   1. A pull request touching crates/ must carry a changepack. `changepacks`
+#      comments the detected packs; `changepack-required` makes it a gate.
+#   2. On push to main with pending changepacks, the action opens an
+#      "Update Versions" pull request that runs `changepacks update`.
+#   3. Merging that PR leaves no changepacks, so the action cuts tags and
+#      *draft* releases and reports them in `pending_releases`.
+#   4. `build` compiles every MCP binary for all three platforms and uploads
+#      them onto those drafts.
+#   5. `finalize` publishes the drafts, but only once the uploads succeeded —
+#      so a release is never visible without its binaries attached.
+
 on:
-  pull_request:
   push:
     branches: [main]
+  pull_request:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
 
 jobs:
+  # The action comments the changepack status on a pull request but does not
+  # fail it. A crate change that ships without a changepack never moves the
+  # version, so it never releases — this turns that silent outcome into a
+  # red check with the command to fix it.
+  changepack-required:
+    name: changepack required
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - name: Require a changepack for crate changes
+        shell: bash
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          set -euo pipefail
+          base="$(git merge-base "$BASE_SHA" "$HEAD_SHA")"
+          changed="$(git diff --name-only "$base" "$HEAD_SHA")"
+
+          crate_changes="$(printf '%s\n' "$changed" | grep -E '^crates/' || true)"
+          if [ -z "$crate_changes" ]; then
+            echo "No crate sources touched; a changepack is not required."
+            exit 0
+          fi
+
+          log_changes="$(printf '%s\n' "$changed" \
+            | grep -E '^\.changepacks/changepack_log_.*\.json$' || true)"
+          if [ -n "$log_changes" ]; then
+            echo "Changepack present:"
+            printf '  %s\n' $log_changes
+            exit 0
+          fi
+
+          {
+            echo "This pull request changes crate sources but adds no changepack log."
+            echo
+            echo "Without one the workspace version never moves, so the change"
+            echo "ships to main and is never released."
+            echo
+            echo "    cargo install changepacks"
+            echo "    changepacks"
+            echo
+            echo "Pick the affected crates, choose Major/Minor/Patch, and write"
+            echo "the release note, then commit the generated"
+            echo ".changepacks/changepack_log_*.json alongside your change."
+            echo
+            echo "--- crate files changed without a changepack ---"
+            printf '  %s\n' $crate_changes
+          } >&2
+          exit 1
+
   verify:
     strategy:
       matrix:
@@ -27,3 +105,129 @@ jobs:
       - run: cargo clippy --workspace --all-targets --all-features -- -D warnings
       - run: cargo insta test --workspace --all-features --check
       - run: cargo build --workspace --release
+
+  changepacks:
+    name: changepacks
+    needs: verify
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          # changepacks diffs HEAD against the previous release commit; the
+          # default shallow fetch grafts away every parent, so that lookup
+          # fails and the release never publishes.
+          fetch-depth: 0
+          fetch-tags: true
+      - uses: changepacks/action@main
+        id: changepacks
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          create_release: true
+    outputs:
+      changepacks: ${{ steps.changepacks.outputs.changepacks }}
+      release_assets_urls: ${{ steps.changepacks.outputs.release_assets_urls }}
+      pending_releases: ${{ steps.changepacks.outputs.pending_releases }}
+
+  build:
+    name: build (${{ matrix.os }})
+    needs: changepacks
+    # Only when a draft release is actually waiting for assets. On a pull
+    # request, or on a push that merely opened the Update Versions PR, there
+    # is nothing to attach to.
+    if: >-
+      needs.changepacks.outputs.pending_releases != ''
+      && needs.changepacks.outputs.pending_releases != '{}'
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            targets: x86_64-unknown-linux-gnu
+            suffix: linux-x86_64
+            ext: ""
+          - os: windows-latest
+            targets: x86_64-pc-windows-msvc
+            suffix: windows-x86_64
+            ext: ".exe"
+          - os: macos-latest
+            # Fused into one universal binary so a single macOS asset runs on
+            # both Apple Silicon and Intel.
+            targets: aarch64-apple-darwin x86_64-apple-darwin
+            suffix: macos-universal
+            ext: ""
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@1.98.0
+      - uses: Swatinem/rust-cache@v2
+      - name: Build release binaries
+        shell: bash
+        env:
+          TARGETS: ${{ matrix.targets }}
+          SUFFIX: ${{ matrix.suffix }}
+          EXT: ${{ matrix.ext }}
+          OS: ${{ matrix.os }}
+        run: |
+          set -euo pipefail
+          for target in $TARGETS; do
+            rustup target add "$target"
+            cargo build --release --target "$target" -p devup-mcp -p devup-mcp-visual
+          done
+          mkdir -p dist
+          for bin in devup-mcp devup-mcp-visual; do
+            out="dist/${bin}-${SUFFIX}${EXT}"
+            if [ "$OS" = "macos-latest" ]; then
+              lipo -create -output "$out" \
+                "target/aarch64-apple-darwin/release/${bin}" \
+                "target/x86_64-apple-darwin/release/${bin}"
+              file "$out"
+            else
+              set -- $TARGETS
+              cp "target/$1/release/${bin}${EXT}" "$out"
+            fi
+          done
+          ls -l dist
+      - name: Upload binaries onto the draft release
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ASSET_URLS: ${{ needs.changepacks.outputs.release_assets_urls }}
+        run: |
+          set -euo pipefail
+          # release_assets_urls maps project path -> asset upload URL. The
+          # binaries belong to the devup-mcp crate; the library crates get
+          # their own releases with no assets.
+          upload="$(printf '%s' "$ASSET_URLS" \
+            | jq -r '.["crates/devup-mcp/Cargo.toml"] // empty')"
+          if [ -z "$upload" ]; then
+            echo "no asset upload URL for crates/devup-mcp/Cargo.toml" >&2
+            printf '%s\n' "$ASSET_URLS" >&2
+            exit 1
+          fi
+          # Drop the RFC 6570 template suffix, e.g. "{?name,label}".
+          upload="${upload%%\{*}"
+          for file in dist/*; do
+            name="$(basename "$file")"
+            echo "uploading $name"
+            curl --fail-with-body -sS -X POST \
+              -H "Authorization: Bearer $GH_TOKEN" \
+              -H "Content-Type: application/octet-stream" \
+              --data-binary @"$file" \
+              "${upload}?name=${name}" >/dev/null
+          done
+
+  finalize:
+    name: finalize release
+    needs: [changepacks, build]
+    if: >-
+      needs.changepacks.outputs.pending_releases != ''
+      && needs.changepacks.outputs.pending_releases != '{}'
+    runs-on: ubuntu-latest
+    steps:
+      # Finalize-only: the action neither installs changepacks nor touches the
+      # repository here, so no checkout is needed. Running it after `build`
+      # is what guarantees a published release always has its binaries.
+      - uses: changepacks/action@main
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          finalize_releases: ${{ needs.changepacks.outputs.pending_releases }}

.gitignore

@@ -4,3 +4,12 @@
 .env.*
 !.env.example
 
+# Agent session state (oh-my-claudecode / omo), local to a working copy
+.omc/
+.omo/
+
+# Snapshots captured from a live Figma file to iterate on codegen without
+# spending the tool-call allowance. Scratch, not ground truth: the pinned
+# corpus under fixtures/devup-figma-plugin is what decides correctness.
+/fixtures/local-screens/
+

Cargo.toml

@@ -25,6 +25,8 @@ keyring = "4.2"
 insta = { version = "1.48.0", features = ["glob", "json"] }
 image = { version = "=0.25.10", default-features = false, features = ["png"] }
 oxc_allocator = "=0.148.0"
+oxc_ast = "=0.148.0"
+oxc_ast_visit = "=0.148.0"
 oxc_parser = "=0.148.0"
 oxc_span = "=0.148.0"
 rand = "0.10"