@atelier-ui/create-workspace 0.2.40 → 0.2.42

package/CHANGELOG.md

@@ -1,3 +1,18 @@
+## 0.2.42 (2026-09-10)
+
+This was a version bump only for create-workspace to align it with other projects, there were no code changes.
+
+## 0.2.41 (2026-09-07)
+
+### 🚀 Features
+
+- **create-workspace:** pin figma-console-mcp in the scaffolded .mcp.json ([6b23b2b](https://github.com/DominikPieper/atelier-ui/commit/6b23b2b))
+
+### ❤️ Thank You
+
+- Claude Fable 5.1
+- Dominik Pieper @DominikPieper
+
 ## 0.2.40 (2026-09-07)
 
 This was a version bump only for create-workspace to align it with other projects, there were no code changes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atelier-ui/create-workspace",
-  "version": "0.2.40",
+  "version": "0.2.42",
   "description": "Nx preset for Atelier workshop workspaces",
   "keywords": [
     "nx",

package/src/generators/preset/files/tools/scripts/preflight.mjs

@@ -205,6 +205,31 @@ function loadMcpEndpoints() {
   }
 }
 
+/**
+ * Reads the exact `figma-console-mcp@<version>` pin off the `figma-console`
+ * server's `args` in `.mcp.json` — the same file `loadMcpEndpoints()` reads,
+ * just a different server shape (`command: npx`, not `type: http`). Returns
+ * null when `.mcp.json` is missing, has no `figma-console` entry, or that
+ * entry isn't pinned to an exact version (e.g. `@latest`) — every caller
+ * treats null as "nothing to compare against," not as a failure.
+ */
+function getPinnedFigmaConsoleVersion() {
+  const mcpPath = resolve(ROOT, '.mcp.json');
+  if (!existsSync(mcpPath)) return null;
+  try {
+    const config = JSON.parse(readFileSync(mcpPath, 'utf8'));
+    const args = config.mcpServers?.['figma-console']?.args;
+    if (!Array.isArray(args)) return null;
+    for (const arg of args) {
+      const match = /^figma-console-mcp@(\d+\.\d+\.\d+)$/.exec(arg);
+      if (match) return match[1];
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
 // ── Checks ───────────────────────────────────────────────────────────
 function checkNode() {
   const required = { major: 22, minor: 12, patch: 0 };
@@ -275,16 +300,49 @@ function checkClaudeCli() {
 async function checkFigmaSetup() {
   // 1. Desktop Bridge plugin manifest — the primary channel.
   const manifestPath = join(homedir(), '.figma-console-mcp', 'plugin', 'manifest.json');
+  const pinnedVersion = getPinnedFigmaConsoleVersion();
+  const pinnedSpec = pinnedVersion ? `figma-console-mcp@${pinnedVersion}` : 'figma-console-mcp@latest';
   if (existsSync(manifestPath)) {
     ok('Figma Desktop Bridge plugin', `manifest at ${manifestPath}`);
   } else {
     warn(
       'Figma Desktop Bridge plugin',
       'manifest not found',
-      'Run `npx -y figma-console-mcp@latest --help` once, then Figma → Plugins → Development → Import plugin from manifest…',
+      `Run \`npx -y ${pinnedSpec} --help\` once, then Figma → Plugins → Development → Import plugin from manifest…`,
     );
   }
 
+  // 1b. .version marker vs. the exact version .mcp.json pins. The package
+  // writes this file (setupStablePluginDir(), dist/local.js) specifically so
+  // staleness between "what the npm package installed on disk" and "what
+  // this workspace is pinned to" can be detected — nothing read it back
+  // until now. This is a warning, not a hard failure: a stale on-disk build
+  // does not block the workshop (the Bridge still connects and runs), and
+  // the files self-heal on the next `figma-console-mcp` server start anyway
+  // — treating it as fatal would fail preflight over something that fixes
+  // itself the moment Claude Code (re)starts the MCP.
+  if (existsSync(manifestPath)) {
+    const versionPath = join(homedir(), '.figma-console-mcp', 'plugin', '.version');
+    if (!existsSync(versionPath)) {
+      warn(
+        'Plugin files .version marker',
+        'manifest exists but no .version file next to it',
+        `Run \`npx -y ${pinnedSpec} --help\` once to refresh ~/.figma-console-mcp/plugin/ with a current build`,
+      );
+    } else if (pinnedVersion) {
+      const diskVersion = readFileSync(versionPath, 'utf8').trim();
+      if (diskVersion === pinnedVersion) {
+        ok('Plugin files vs. .mcp.json pin', `both ${diskVersion}`);
+      } else {
+        warn(
+          'Plugin files vs. .mcp.json pin',
+          `on-disk .version is ${diskVersion}, .mcp.json pins ${pinnedVersion}`,
+          `Run \`npx -y ${pinnedSpec} --help\` once to refresh the files, then re-run (or re-import) the plugin in Figma Desktop — see https://atelier.pieper.io/runbook#plugin-update`,
+        );
+      }
+    }
+  }
+
   // 2. Bridge WebSocket port range — at least one port must be usable.
   const bridgePorts = [9223, 9224, 9225, 9226, 9227, 9228, 9229, 9230, 9231, 9232];
   let freeCount = 0;

package/src/generators/preset/preset.js

@@ -238,7 +238,7 @@ file exports). The Desktop Bridge covers creation and inspection without a token
             // optional — only needed for REST-backed reads. See ${SITE_URL}/figma-token.
             mcpServers['figma-console'] = {
                 command: 'npx',
-                args: ['-y', 'figma-console-mcp@latest'],
+                args: ['-y', 'figma-console-mcp@1.40.0'],
                 env: {
                     FIGMA_ACCESS_TOKEN: '${FIGMA_ACCESS_TOKEN:-}',
                     ENABLE_MCP_APPS: 'true',