@gakim-digital/dexter-bridge 0.13.3 → 0.13.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gakim-digital/dexter-bridge",
-  "version": "0.13.3",
+  "version": "0.13.5",
   "description": "Local bridge for InstaWebAI and Dexter — runs Codex, Claude Code, or OpenCode on your machine.",
   "type": "module",
   "bin": {

package/src/framerRequirementContract.js

@@ -140,6 +140,13 @@ function hasContent(value) {
 // descendant cannot satisfy a claim about its parent. A dotted name such as
 // `link.href` or `hoverEffect.opacity` reads the field inside the property's value.
 function propertyValues(node, property) {
+  // Child layers are named by id, name, type, and text, not their settings.
+  if (property === 'children') {
+    const children = Array.isArray(node.children) ? node.children.filter(isRecord) : [];
+    return children.length
+      ? [children.map((child) => ({ id: child.id, name: child.name ?? null, type: child.type, ...(child.text ? { text: child.text } : {}) }))]
+      : [];
+  }
   const values = keyValues(node, property);
   const [head, ...path] = property.split('.');
   if (values.length > 0 || path.length === 0) return values;
@@ -305,27 +312,31 @@ export function summarizeRequirements(requirements, checkResults) {
 }
 
 // Compares two snapshots of layers that had to stay as they were. A snapshot
-// maps a layer id to { name, rect, props } where props is the serialized
-// layer without children and rect is null when Dexter could not measure the
-// layer, so only its settings are compared. Boxes are compared only when both
-// readings came from the same source (the user's editor or Framer MCP).
-export function unchangedViolations(before, after, tolerance = 1) {
+// maps a layer id to { name, origin, rect, props } where props is the
+// serialized layer without children, origin is the layer a breakpoint or
+// variant copy follows, and rect is null when Dexter could not measure the
+// layer, so only its settings are compared. Sizes are compared only when both
+// readings came from the same source (the user's editor or Framer MCP), and
+// only size counts, not position: a section that grows moves every section
+// below it.
+// A change is edited when the run edited the layer, or the layer it follows;
+// any other change happened without the model touching the layer.
+export function unchangedViolations(before, after, edited = new Set(), tolerance = 1) {
   const changes = [];
   for (const [id, earlier] of Object.entries(before || {})) {
     const later = after?.[id];
     const name = earlier.name || id;
-    if (!later) {
-      changes.push(`${name} was removed`);
-      continue;
-    }
+    const source = edited.has(id) ? 'self' : earlier.origin && edited.has(earlier.origin) ? 'origin' : null;
+    const note = source === 'self' ? ' (you edited it)' : source === 'origin' ? ` (it follows your edit of ${earlier.origin})` : '';
     const a = earlier.rect;
-    const b = later.rect;
+    const b = later?.rect;
     const comparable = a && b && (a.source || null) === (b.source || null);
-    if (comparable && ['x', 'y', 'width', 'height'].some((key) => Math.abs(a[key] - b[key]) > tolerance)) {
-      changes.push(`${name} moved or resized (${a.width}×${a.height} at ${a.x},${a.y} → ${b.width}×${b.height} at ${b.x},${b.y})`);
-    } else if (earlier.props !== later.props) {
-      changes.push(`${name} has different settings`);
-    }
+    let text = null;
+    if (!later) text = `${name} was removed`;
+    else if (comparable && ['width', 'height'].some((key) => Math.abs(a[key] - b[key]) > tolerance)) {
+      text = `${name} changed size (${a.width}×${a.height} → ${b.width}×${b.height})`;
+    } else if (earlier.props !== later.props) text = `${name} has different settings`;
+    if (text) changes.push({ text: `${text}${note}`, edited: Boolean(source) });
     if (changes.length >= 20) break;
   }
   return changes;

package/src/framerTools.js

@@ -18,6 +18,7 @@ export const PROPERTY_ERROR_CHECK = 'Unapplied properties';
 export const CLAIMED_TARGET_CHECK = 'Claimed targets';
 export const VERIFICATION_CHECK = 'Harness-owned final verification';
 export const REQUIREMENTS_CHECK = 'Requirements';
+export const UNCHECKED_REQUIREMENTS_CHECK = 'Requirements not re-checked';
 export const UNCHANGED_CHECK = 'Unchanged layers';
 
 const LITERAL_TOKEN_TYPES = new Set(['StringLiteral', 'NoSubstitutionTemplate', 'TemplateHead', 'TemplateMiddle', 'TemplateTail']);
@@ -54,6 +55,9 @@ const UNCHANGED_LAYER_LIMIT = 600;
 const FONT_KEYS = new Set(['font', 'fontFamily', 'family']);
 const PROJECT_MISMATCH_PATTERN = /permission|forbidden|not found|does not have access|no access|can't open|cannot open/i;
 
+// Inside Codex's exec, a tool's images arrive as text after the JSON and
+// stay unseen unless passed to image(); models were reading them as noise.
+const IMAGE_RESULT_NOTE = 'Screenshots come back as images after the JSON result, and screenshotsAttached says how many. When you call this tool from exec, the result is a string: the JSON on the first line, then one data:image line per screenshot. Pass each data:image line to image() to see it; text() shows it only as unreadable characters.';
 const MEASURE_TOOL_NOTE = 'For exact spacing or sizes, await dexter.measure(ids) returns each layer\'s x, y, width, and height inside its breakpoint frame, and await dexter.gap(a, b) returns the vertical and horizontal space between two layers (negative when they share that range) and whether they overlap. Both measure the rendered layout, including edits made earlier in the same program. Framer lays out only some pages for Dexter; elsewhere a layer comes back with measured: false, and then there are no numbers to act on, so judge it from a screenshot.';
 
 // Item shapes the requirement contract (framerRequirementContract.js) accepts.
@@ -72,7 +76,7 @@ const CHECK_SCHEMA = {
   properties: {
     requirementId: { type: 'string' },
     nodeId: { type: 'string' },
-    property: { type: 'string', description: 'A Framer property to read, such as fill, link.href, or text. Use either property or measure.' },
+    property: { type: 'string', description: 'A Framer property to read, such as fill, link.href, or text; children lists the child layers of the layer by name. Use either property or measure.' },
     contains: { type: 'string', description: 'Text the property value must contain, such as #151515 or /contact.' },
     absent: { type: 'boolean', description: 'True when the requirement is that the property is not set on the layer, such as no appearEffect on a background image.' },
     measure: { type: 'string', enum: MEASURES, description: 'width, height, gap (to otherNodeId), or insideParent (the layer stays inside its parent).' },
@@ -103,7 +107,7 @@ const FRAMER_MEASURE_DEFINITION = {
 const TOOL_DEFINITIONS = [
   {
     name: 'framer_read',
-    description: `Read the open Framer project by running a program. Use api.tree.getNode, getNodes, serialize, and serializeNodes. Stock image search is api.images.search({ query }), one call per query. Fonts are api.fonts.get and api.fonts.list({ query }). There is no framer global. ${MEASURE_TOOL_NOTE} This tool cannot change the project.`,
+    description: `Read the open Framer project by running a program. Use api.tree.getNode, getNodes, serialize, and serializeNodes. Stock image search is api.images.search({ query }), one call per query. Fonts are api.fonts.get and api.fonts.list({ query }). There is no framer global. ${MEASURE_TOOL_NOTE} ${IMAGE_RESULT_NOTE} This tool cannot change the project.`,
     inputSchema: {
       type: 'object',
       properties: {
@@ -115,7 +119,7 @@ const TOOL_DEFINITIONS = [
   },
   {
     name: 'framer_edit',
-    description: `Change the open Framer project by running a program. Use api.tree.insert, patch, remove, move, and replaceText. Place an SVG with tree.insert("SVGNode", id, { svg, intrinsicWidth, intrinsicHeight }). Write code files with api.files.create, write, or applyPatch. Search stock images with api.images.search({ query }). Place an image by setting fill to await api.tree.assetReference(url) with a public image URL. Load fonts with api.fonts. Pass screenshotNodeIds for the nodes you want to see after the edit. Include plan on your first framer_edit. ${MEASURE_TOOL_NOTE}`,
+    description: `Change the open Framer project by running a program. Use api.tree.insert, patch, remove, move, and replaceText. Place an SVG with tree.insert("SVGNode", id, { svg, intrinsicWidth, intrinsicHeight }). Write code files with api.files.create, write, or applyPatch. Search stock images with api.images.search({ query }). Place an image by setting fill to await api.tree.assetReference(url) with a public image URL. Load fonts with api.fonts. Pass screenshotNodeIds for the nodes you want to see after the edit. Include plan on your first framer_edit. ${MEASURE_TOOL_NOTE} ${IMAGE_RESULT_NOTE}`,
     inputSchema: {
       type: 'object',
       properties: {
@@ -153,7 +157,7 @@ const TOOL_DEFINITIONS = [
   },
   {
     name: 'framer_view_image',
-    description: 'Show one or more image URLs to yourself so you can judge them. Use public attachment URLs and image URLs already in the project.',
+    description: `Show one or more image URLs to yourself so you can judge them. Use public attachment URLs and image URLs already in the project. ${IMAGE_RESULT_NOTE}`,
     inputSchema: {
       type: 'object',
       properties: {
@@ -178,7 +182,7 @@ const TOOL_DEFINITIONS = [
   },
   {
     name: 'framer_read_website',
-    description: 'Read one page of a website the user named: exact copy per section, fonts and text styles, colours, image URLs (including CSS backgrounds), and desktop and phone screenshots. Use it before recreating or migrating that page. Only sites the user named can be read.',
+    description: `Read one page of a website the user named: exact copy per section, fonts and text styles, colours, image URLs (including CSS backgrounds), and desktop and phone screenshots. Use it before recreating or migrating that page. Only sites the user named can be read. ${IMAGE_RESULT_NOTE}`,
     inputSchema: {
       type: 'object',
       properties: {
@@ -785,10 +789,15 @@ function helpersUsed(program) {
 
 // Reads what framer_verify needs in one program: the layers whose properties
 // are checked, and each measure in order.
-export function verifyProgram(propertyNodeIds, measures) {
+// Layers whose checks name children are read one level deep so their
+// child layers can be checked.
+export function verifyProgram(propertyNodeIds, measures, childNodeIds = []) {
   return `${MEASURE_PRELUDE}
 const tree = api.tree;
-const nodes = await tree.serializeNodes(${JSON.stringify(propertyNodeIds)}, { depth: 0 });
+const withChildren = new Set(${JSON.stringify(childNodeIds)});
+const flat = await tree.serializeNodes(${JSON.stringify(propertyNodeIds)}.filter((id) => !withChildren.has(id)), { depth: 0 });
+const nested = withChildren.size ? await tree.serializeNodes([...withChildren], { depth: 1 }) : [];
+const nodes = [...(flat || []), ...(nested || [])];
 const measured = [];
 for (const check of ${JSON.stringify(measures)}) {
   try {
@@ -820,16 +829,44 @@ return { nodes, measured };`;
 }
 
 // Records layers the user wants left as they are: each layer's measured box,
-// when Framer has laid it out, and a fingerprint of its settings, for every
-// layer inside them.
-export function snapshotProgram(rootIds) {
+// when Framer has laid it out, a fingerprint of its settings, and the layer a
+// breakpoint or variant copy follows, for every layer inside them. The read
+// after the run passes walk: false to read back exactly the recorded layers.
+// Layers name colour styles only as var(--token-id). Reads carry the style's
+// name and values next to them, so a model can tell a dark page colour from
+// a light surface without guessing from the id.
+const COLOR_TOKEN_PATTERN = /var\(--token-([A-Za-z0-9_-]+)\)/g;
+const COLOR_STYLE_LIMIT = 40;
+
+export function colorTokensIn(value) {
+  const text = JSON.stringify(value) || '';
+  return [...new Set([...text.matchAll(COLOR_TOKEN_PATTERN)].map((match) => match[1]))].slice(0, COLOR_STYLE_LIMIT);
+}
+
+export function colorStylesProgram(ids) {
+  return `const out = {};
+for (const id of ${JSON.stringify(ids)}) {
+  const node = api.tree.get(id);
+  if (node && node.type === 'ColorStyleTokenNode') out[id] = { name: node.name || null, light: node.light || null, dark: node.dark || null };
+}
+return out;`;
+}
+
+export function describeColorStyle(style) {
+  const values = [style?.light && `light ${style.light}`, style?.dark && `dark ${style.dark}`].filter(Boolean).join(', ');
+  return `${style?.name || 'Unnamed colour style'}${values ? ` (${values})` : ''}`;
+}
+
+export function snapshotProgram(rootIds, { walk = true } = {}) {
   return `${LAYOUT_CHECK}
 const tree = api.tree;
 const fingerprint = (text) => { let hash = 2166136261; for (let i = 0; i < text.length; i += 1) { hash ^= text.charCodeAt(i); hash = Math.imul(hash, 16777619); } return (hash >>> 0).toString(36); };
 const ids = new Set();
 for (const root of ${JSON.stringify(rootIds)}) {
+  if (${walk ? 'true' : 'false'} && ids.size >= ${UNCHANGED_LAYER_LIMIT}) break;
   if (!tree.get(root)) continue;
   ids.add(root);
+  if (!${walk ? 'true' : 'false'}) continue;
   for (const node of tree.walk(root)) {
     if (ids.size >= ${UNCHANGED_LAYER_LIMIT}) break;
     if (node && node.id) ids.add(node.id);
@@ -842,7 +879,7 @@ for (const id of ids) {
   const rect = (await __dexterLaidOut(id)) ? await __dexterRect(id) : null;
   let props = '';
   try { const { children, ...rest } = JSON.parse(JSON.stringify(node)); props = fingerprint(JSON.stringify(rest)); } catch {}
-  out[id] = { name: node.name || null, rect: rect ? { x: rect.x, y: rect.y, width: rect.width, height: rect.height } : null, props };
+  out[id] = { name: node.name || null, origin: node.$originalId || null, rect: rect ? { x: rect.x, y: rect.y, width: rect.width, height: rect.height } : null, props };
 }
 return out;`;
 }
@@ -894,6 +931,8 @@ export function createFramerAgentToolRuntime({
   const unchangedBefore = {};
   let unchangedPending = [];
   let unchangedChanges = [];
+  const weighedPropertyErrors = new Set();
+  const colorStyles = new Map();
   let promptContext = {};
   // Set once the panel fails to answer, so a closed panel does not cost a
   // wait on every later measure.
@@ -944,6 +983,10 @@ export function createFramerAgentToolRuntime({
 
   const client = mcpClient || createFramerMcpClient({ getAccessToken: tokenGetter });
 
+  function propertyErrorKey(error) {
+    return `${error.nodeId}.${error.property}`;
+  }
+
   function lingeringPropertyErrors() {
     let open = [];
     for (const receipt of mutationReceipts) {
@@ -1151,8 +1194,8 @@ export function createFramerAgentToolRuntime({
   // Records the layers the plan said to leave as they are. Boxes come from the
   // editor where it measured them, otherwise from Framer MCP where that page is
   // laid out; each records its source so before and after compare like with like.
-  async function snapshotLayers(roots) {
-    const snapshot = outputOf(await client.exec(snapshotProgram(roots))).result;
+  async function snapshotLayers(roots, options) {
+    const snapshot = outputOf(await client.exec(snapshotProgram(roots, options))).result;
     if (!snapshot || typeof snapshot !== 'object') return null;
     for (const entry of Object.values(snapshot)) if (entry?.rect) entry.rect.source = 'mcp';
     const layers = await measureInEditor(Object.keys(snapshot));
@@ -1387,7 +1430,8 @@ export function createFramerAgentToolRuntime({
         const measures = measureChecks(checks);
         const layers = await measureInEditor(measures.flatMap((check) => [check.nodeId, check.otherNodeId]));
         const fromEditor = measures.map((check) => editorMeasurement(check, layers));
-        const result = await client.exec(verifyProgram(checkNodeIds(checks), measures.filter((_, index) => !fromEditor[index])));
+        const childNodeIds = [...new Set(checks.filter((check) => check.property === 'children').map((check) => check.nodeId))];
+        const result = await client.exec(verifyProgram(checkNodeIds(checks), measures.filter((_, index) => !fromEditor[index]), childNodeIds));
         const output = outputOf(result);
         if (output.error) throw toolError('FRAMER_PROGRAM_FAILED', String(output.error).split('\n')[0].slice(0, 300));
         const { nodes, measured: fromMcp } = output.result && typeof output.result === 'object' ? output.result : {};
@@ -1419,6 +1463,10 @@ export function createFramerAgentToolRuntime({
       } else {
         throw toolError('FRAMER_AGENT_TOOL_UNKNOWN', `Unknown Framer tool ${name}.`);
       }
+      if (name === 'framer_edit') colorStyles.clear();
+      if (name === 'framer_read' || name === 'framer_edit' || name === 'framer_verify') {
+        payload = await withColorStyles(payload);
+      }
       recordCall(name, category, 'succeeded', { ...callExtra, durationMs: Date.now() - startedAt });
       noteFramerAnswer(null);
       const nudge = category === 'read' ? firstEditNudge() : null;
@@ -1426,7 +1474,7 @@ export function createFramerAgentToolRuntime({
       if (Array.isArray(payload?.modelImages)) {
         const { modelImages, ...rest } = payload;
         const ready = await modelReadyImages(modelImages);
-        payload = ready.length ? { ...rest, modelImages: ready } : rest;
+        payload = ready.length ? { ...rest, screenshotsAttached: ready.length, modelImages: ready } : rest;
       }
       reportActivity({
         kind: 'tool_active',
@@ -1455,6 +1503,25 @@ export function createFramerAgentToolRuntime({
     }
   }
 
+  async function withColorStyles(payload) {
+    const { modelImages, ...rest } = payload || {};
+    const ids = colorTokensIn(rest);
+    if (!ids.length) return payload;
+    const unknown = ids.filter((id) => !colorStyles.has(id));
+    if (unknown.length) {
+      try {
+        const found = outputOf(await client.exec(colorStylesProgram(unknown))).result || {};
+        for (const id of unknown) colorStyles.set(id, found[id] || null);
+      } catch {
+        return payload;
+      }
+    }
+    const named = Object.fromEntries(ids
+      .filter((id) => colorStyles.get(id))
+      .map((id) => [`var(--token-${id})`, describeColorStyle(colorStyles.get(id))]));
+    return Object.keys(named).length ? { ...payload, colorStyles: named } : payload;
+  }
+
   function invoke(name, args = {}) {
     const operation = serial.then(() => invokeUnsafe(name, args));
     serial = operation.catch(() => undefined);
@@ -1529,16 +1596,28 @@ export function createFramerAgentToolRuntime({
     return { content: guidance.content, inventory: guidance.inventory };
   }
 
+  // Requirements a read after the last change found not met.
   function unmetRequirements() {
     if (!requirements.length || mutationCalls === 0) return [];
     return requirementStatus().requirements
-      .filter((item) => !item.checked || (item.verdict !== 'verified' && item.verdict !== 'unmeasured'))
+      .filter((item) => item.checked && item.verdict !== 'verified' && item.verdict !== 'unmeasured')
       .map((item) => ({
         id: item.requirementId,
         text: item.text,
-        reason: item.contradictions[0]
-          || item.unknowns[0]
-          || (item.uncheckedNodeIds.length ? `not checked on ${item.uncheckedNodeIds.join(', ')}` : 'not checked after the last change'),
+        reason: item.contradictions[0] || item.unknowns[0] || 'not met',
+      }));
+  }
+
+  // Requirements nothing has read since the last change: not known to be
+  // wrong, only not confirmed.
+  function uncheckedRequirements() {
+    if (!requirements.length || mutationCalls === 0) return [];
+    return requirementStatus().requirements
+      .filter((item) => !item.checked)
+      .map((item) => ({
+        id: item.requirementId,
+        text: item.text,
+        nodeIds: item.uncheckedNodeIds,
       }));
   }
 
@@ -1550,6 +1629,7 @@ export function createFramerAgentToolRuntime({
     const missing = verification().missingChecks;
     const propertyErrors = lingeringPropertyErrors();
     const facts = [];
+    for (const error of propertyErrors) weighedPropertyErrors.add(propertyErrorKey(error));
     if (propertyErrors.length) {
       facts.push(`Framer rejected these properties, so they are not set: ${propertyErrors.map((error) => `${error.nodeId}.${error.property}: ${error.message}`).join('; ')}.`);
     }
@@ -1566,8 +1646,12 @@ export function createFramerAgentToolRuntime({
     if (unmet.length) {
       facts.push(`Framer shows these requirements from your plan as not met: ${unmet.map((item) => `${item.text} (${item.reason})`).join('; ')}.`);
     }
+    const unchecked = uncheckedRequirements();
+    if (unchecked.length) {
+      facts.push(`These requirements from your plan have not been checked since your last change, so they are not confirmed either way: ${unchecked.map((item) => item.text).join('; ')}.`);
+    }
     if (unchangedChanges.length) {
-      facts.push(`These layers you planned to leave as they were now read differently: ${unchangedChanges.join('; ')}.`);
+      facts.push(`These layers you planned to leave as they were now read differently: ${unchangedChanges.map((change) => change.text).join('; ')}.`);
     }
     if (!facts.length) return null;
     return [
@@ -1631,8 +1715,8 @@ export function createFramerAgentToolRuntime({
     if (mutationCalls > 0 && Object.keys(unchangedBefore).length) {
       try {
         await ensureProject();
-        const after = await snapshotLayers(Object.keys(unchangedBefore).slice(0, UNCHANGED_LAYER_LIMIT));
-        unchangedChanges = after ? unchangedViolations(unchangedBefore, after) : [];
+        const after = await snapshotLayers(Object.keys(unchangedBefore), { walk: false });
+        unchangedChanges = after ? unchangedViolations(unchangedBefore, after, known) : [];
         readCalls += 1;
       } catch {
         unchangedChanges = [];
@@ -1670,7 +1754,9 @@ export function createFramerAgentToolRuntime({
         output: 'No layer changed for a summary that claimed a change.',
       });
     }
-    const propertyErrors = lingeringPropertyErrors();
+    // A rejected property the model was shown and then finished without is
+    // its judgment, such as reaching the goal another way.
+    const propertyErrors = lingeringPropertyErrors().filter((error) => !weighedPropertyErrors.has(propertyErrorKey(error)));
     if (propertyErrors.length) {
       checks.push({
         command: PROPERTY_ERROR_CHECK,
@@ -1694,11 +1780,25 @@ export function createFramerAgentToolRuntime({
         output: unmet.map((item) => `${item.id}: ${item.reason}`).join('; ').slice(0, 2000),
       });
     }
-    if (unchangedChanges.length) {
+    const unchecked = uncheckedRequirements();
+    if (unchecked.length) {
+      checks.push({
+        command: UNCHECKED_REQUIREMENTS_CHECK,
+        status: 'failed',
+        output: unchecked
+          .map((item) => (item.nodeIds.length ? `${item.id}: not checked on ${item.nodeIds.join(', ')}` : `${item.id}: not checked after the last change`))
+          .join('; ')
+          .slice(0, 2000),
+      });
+    }
+    // A layer the model edited, or one that follows its edit, is a change it
+    // made and weighed; only changes nothing in the run explains fail it.
+    const unexplained = unchangedChanges.filter((change) => !change.edited);
+    if (unexplained.length) {
       checks.push({
         command: UNCHANGED_CHECK,
         status: 'failed',
-        output: unchangedChanges.join('; ').slice(0, 2000),
+        output: unexplained.map((change) => change.text).join('; ').slice(0, 2000),
       });
     }
     // The model's own plan sets the evidence it owes; a run that changed the

package/src/protocol.js

@@ -510,6 +510,7 @@ export function buildFramerOutcomePrompt(outcome = {}, product, promptContext =
     'Set projectChanged to true only when this run applied a change to the Framer project, and list the ids of the layers you changed in changedNodeIds. The summary must describe only changes that were applied. If a requirement is still not met, or you could not find or change something, name it plainly in the summary; never describe it as done.',
     'Some requests need something beyond the layers you may change, such as photos on other pages, a component shared across the site, or site-wide styles. If the user has not decided about it yet, ask one plain question that names it and what changing it affects, and return blocked; when they agree, Dexter gives you that reach in the next run. If they already said no, or told you what to do in that case, do not ask again: do what you can within what you may change, and explain plainly what is in the way, such as which shared setting causes it. Never mention access, scope, permissions, grants, or authorization.',
     'If you changed layers before asking a question, say in your summary what you changed.',
+    'When you return blocked, write the question itself in summary, since summary is what the user reads; blockedReason is a short note for Dexter.',
     'Write in the language the user wrote their request in: the summary, any question, and the sentences Dexter shows while you work. Keep layer names and quoted text as they are.',
     REPAIR_SUMMARY_RULE,
     'When finished, return exactly one JSON object and no markdown.',
@@ -524,7 +525,7 @@ export function buildFramerOutcomePrompt(outcome = {}, product, promptContext =
   const task = [
     ...(selectionFirst
       ? [
-          'This is a selection-first run. Start from the selected nodes and keep every mutation inside the authorized write scope.',
+          'This is a selection-first run. Start from the selected nodes: they show what the user is pointing at. When the user\'s words name other layers on this page, or the setting they asked about sits on a parent of the selection, change that too, within the reach in the assignment.',
           'Use a focused live Framer read of the selected nodes and their descendants before editing when you need current details.',
           'Prefer focused inspection. Expand beyond the selected subtree only when a concrete dependency requires it.',
           'Batch related canvas edits when practical, but make as many repair batches as the verified result genuinely requires.',

package/src/providers/codexAppServer.js

@@ -132,7 +132,7 @@ function codexOutcomeInstructions(product, { platform = null } = {}) {
     return [
       `You are an autonomous Framer harness embedded inside ${name}.`,
       'Work directly in the connected Framer project through Framer MCP. Programs use api.tree. There is no framer global.',
-      'When selected nodes are supplied, start with them, reuse their supplied snapshot, and keep mutations inside the authorized write scope.',
+      'When selected nodes are supplied, start with them and reuse their supplied snapshot. They show what the user is pointing at; the user\'s words decide what to change, within the reach in the assignment.',
       'Prefer focused inspection and batched edits, but use as many reads, repairs, and verification passes as the work genuinely requires.',
       'You own the full Framer loop: inspect, edit, read diagnostics, verify the actual result, repair concrete failures, and decide when the request is complete.',
       'Avoid repeated inspection of unchanged evidence and avoid broad project inspection unless a concrete dependency requires it.',