@refore-ai/html-to-figma-mcp 0.2.0 → 0.3.0

package/README.md

@@ -54,9 +54,10 @@ Now ask your agent to import a page.
 
 | Tool                  | Purpose                                                                                                                                                                                                                                                                                                                        |
 | --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| `import_html`         | Preferred import path: import inline HTML or a local `.html` file path. Optional `assets` (local files the HTML references), `viewport`, `target` (insert under / replace an existing node — replace accepts a `nodeId` or a previous import's `taskId`), `wait`                                                                 |
+| `import_html`         | Preferred import path: import inline HTML or a local `.html` file path. File paths take `source`: `user-file` (a local file you handed the agent — imported directly, no browser and no capture guide) or `browser-dump` (a rendered-DOM dump the agent captured in a browser — the guide must be read before its first import); when omitted the origin is guessed from where the file lives. Optional `assets` (local files the HTML references), `viewport`, `target` (insert under / replace an existing node — replace accepts a `nodeId` or a previous import's `taskId`), `wait` |
+| `dev_import_demo`     | **`--dev` only**: import a Refore demo share link (`app.demoway.cn|com/demo/<id>`) through the plugin's capture page — the same path the user takes by opening that demo, so it reproduces what they saw. Optional `selector`, `target`, `wait`. Single-step demos only, and the plugin must be a development build              |
 | `no_browser_fallback` | Fallback for when the agent cannot get the page DOM for any reason: the agent first asks the user to choose between plugin-side URL fetching (public pages, no login state, fetched from the plugin edition's service region) and recording with the Refore browser extension; only calls this tool if the user picks the former |
-| `get_capture_guide`   | Returns the standard DOM-capture playbook: capture script (strip scripts / canvas to img / base injection), strategies for getting a large dump out of browser tooling, and the import-verify-redo loop                                                                                                                         |
+| `get_capture_guide`   | Returns the standard DOM-capture playbook: capture script (strip scripts / canvas to img / base injection), strategies for getting a large dump out of browser tooling, and the import-verify-redo loop. Dump-only — a local file you handed the agent does not need it                                                       |
 | `remove_import`       | Remove the artifact of a previous import task (idempotent; only tasks of this connection)                                                                                                                                                                                                                                      |
 | `wait_task`           | Block until a task settles, then return its final result                                                                                                                                                                                                                                                                       |
 | `get_task_status`     | Non-blocking check of a task's current phase / result                                                                                                                                                                                                                                                                          |

package/index.mjs

@@ -6,20 +6,24 @@ import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path, { dirname, resolve } from "node:path";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
+import os from "node:os";
 import { createServer } from "node:http";
 import { Server } from "socket.io";
-//#region src/platform-meta.ts
+//#region ../../libs/constants/src/mcp.ts
 /**
-* 面向 agent 的平台展示名（用于工具描述、npm README 等）。
+* MCP 相关常量。
 *
-* 与 libs/constants 的 `PLATFORM_NAME`（插件 UI 用，jsdesign 显示「即时设计」）不是一回事。
+* **本文件只放纯数据，且只能用 type import**：两个 MCP 的 tsdown 配置会绕开 barrel 直接引它，
+* 而配置加载阶段不解析 `__PLATFORM__` 这类构建期常量、也不该把运行时依赖拖进 server 产物。
+* 往这里加东西前先确认它满足这两条，否则放别处。
+*/
+/**
+* 面向 agent / 外部读者的平台展示名：MCP 工具描述、npm README、prompt 文案。
 *
-* 本文件同时被 src/platform.ts（打进发布产物）和 tsdown.config.ts（构建时渲染 README）import，
-* 因此这里只放纯数据：不引 runtime 依赖（`PlatformType` / `Region` 这类 enum 会把整个
-* @UseringOfficial/utils 打进 server 包），也不依赖 `__MCP_PLATFORM__` 等构建期注入的常量
-* （否则 tsdown config 加载阶段 import 就会报错）。
+* 与同目录 `platform.ts` 的 `PLATFORM_NAME` 不是一回事 —— 那份给插件 UI 用，jsdesign 显示
+* 「即时设计」，且末尾已按 `__PLATFORM__` 取过值，是单个字符串而非表。
 */
-const PLATFORM_DISPLAY_NAMES = {
+const MCP_PLATFORM_NAMES = {
 	figma: "Figma",
 	mastergo: "MasterGo",
 	jsdesign: "JSDesign",
@@ -30,21 +34,15 @@ const PLATFORM_DISPLAY_NAMES = {
 //#region src/platform.ts
 const MCP_PLATFORM = "figma";
 /** 从源 package.json 的 version 由 tsdown define 注入；测试环境未注入 → 兜底 '0.0.0-dev' */
-const MCP_SERVER_VERSION = "0.2.0";
+const MCP_SERVER_VERSION = "0.3.0";
 /** 面向 agent 的平台展示名（用于工具描述等） */
-const MCP_PLATFORM_NAME = PLATFORM_DISPLAY_NAMES[MCP_PLATFORM];
+const MCP_PLATFORM_NAME = MCP_PLATFORM_NAMES[MCP_PLATFORM];
 /** 本 MCP server 的包名 / 日志前缀基名 */
 const MCP_SERVER_NAME = `html-to-${MCP_PLATFORM}-mcp`;
 /** stdout 归 MCP JSON-RPC 独占，本进程所有日志走 stderr */
 function mcpLog(message) {
 	process.stderr.write(`[${MCP_SERVER_NAME}] ${message}\n`);
 }
-function getPortRange(base, size = 20) {
-	return {
-		start: base,
-		end: base + size - 1
-	};
-}
 //#endregion
 //#region ../../libs/design-inspect/src/mcp/toggle.ts
 const DEFAULT_GROUPS = ["read", "navigate"];
@@ -159,7 +157,7 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 		depth: z.number().optional().describe("Levels below root to search. Omit to search all depths; 1 = direct children only."),
 		name: z.string().optional().describe("Case-insensitive substring match on the node name."),
 		type: z.union([z.string(), z.array(z.string())]).optional().describe("Node type(s), upper-case (FRAME, TEXT, INSTANCE, ...)."),
-		where: z.record(z.unknown()).optional().describe("Platform-native property name → expected value, same names `get_nodes` returns. A node matches only when every entry matches. Colours compare with a small tolerance, so a value read back from `get_nodes` can be pasted straight in."),
+		where: z.record(z.string(), z.unknown()).optional().describe("Platform-native property name → expected value, same names `get_nodes` returns. A node matches only when every entry matches. Colours compare with a small tolerance, so a value read back from `get_nodes` can be pasted straight in."),
 		includeHidden: z.boolean().optional().describe("Include nodes not visible on canvas. Defaults to false."),
 		limit: z.number().optional().describe(`Page size, default 100.`),
 		offset: z.number().optional().describe("Number of matches to skip, default 0.")
@@ -192,7 +190,7 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 	["inspect:set-current-page"]: { pageId: z.string() },
 	["inspect:set-node-properties"]: {
 		nodeIds: z.array(z.string()),
-		props: z.record(z.unknown()).describe("Platform-native property name → value.")
+		props: z.record(z.string(), z.unknown()).describe("Platform-native property name → value.")
 	},
 	["inspect:set-text-style"]: {
 		nodeId: z.string(),
@@ -213,12 +211,12 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 		create: z.array(z.object({
 			type: z.enum(LOCAL_STYLE_TYPES),
 			name: z.string(),
-			props: z.record(z.unknown()).optional().describe("Platform-native style properties, e.g. `paints`.")
+			props: z.record(z.string(), z.unknown()).optional().describe("Platform-native style properties, e.g. `paints`.")
 		})).optional(),
 		update: z.array(z.object({
 			styleId: z.string(),
 			name: z.string().optional(),
-			props: z.record(z.unknown()).optional()
+			props: z.record(z.string(), z.unknown()).optional()
 		})).optional()
 	},
 	["inspect:write-variables"]: {
@@ -232,12 +230,12 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 				"STRING",
 				"BOOLEAN"
 			]),
-			valuesByMode: z.record(z.unknown()).optional().describe("Mode id → value.")
+			valuesByMode: z.record(z.string(), z.unknown()).optional().describe("Mode id → value.")
 		})).optional(),
 		update: z.array(z.object({
 			variableId: z.string(),
 			name: z.string().optional(),
-			valuesByMode: z.record(z.unknown()).optional()
+			valuesByMode: z.record(z.string(), z.unknown()).optional()
 		})).optional()
 	},
 	["inspect:set-node-style-id"]: {
@@ -251,7 +249,7 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 		type: z.enum(CREATABLE_NODE_TYPES),
 		parentId: z.string().optional(),
 		index: z.number().optional().describe("Insertion position; appended to the end when omitted."),
-		props: z.record(z.unknown()).optional()
+		props: z.record(z.string(), z.unknown()).optional()
 	},
 	["inspect:duplicate-nodes"]: { nodeIds: z.array(z.string()) },
 	["inspect:reparent-nodes"]: {
@@ -266,7 +264,9 @@ const DESIGN_INSPECT_INPUT_SCHEMAS = {
 	["inspect:ungroup-node"]: { nodeId: z.string() },
 	["inspect:delete-nodes"]: { nodeIds: z.array(z.string()) },
 	["inspect:dev:eval-script"]: { script: z.string().describe("JavaScript to run in the plugin sandbox. `api` and `Platform` are in scope.") },
-	["inspect:dev:tail-logs"]: { limit: z.number().optional().describe("Return at most this many of the most recent entries.") }
+	["inspect:dev:eval-ui-script"]: { script: z.string().describe("JavaScript to run in the plugin UI (the iframe document). No injected scope.") },
+	["inspect:dev:tail-logs"]: { limit: z.number().optional().describe("Return at most this many of the most recent entries.") },
+	["inspect:dev:reload-ui"]: {}
 };
 //#endregion
 //#region ../../libs/design-inspect/src/mcp/tools.ts
@@ -282,6 +282,20 @@ async function saveExport(target, result) {
 }
 /** 查询类 RPC 的 ack 超时。插件端不响应时不能无限挂着 */
 const QUERY_TIMEOUT_MS = 3e4;
+/** UI 重载的等待参数：先等 socket 断开确认重载真的发生了，再等它自己连回来 */
+const RELOAD_POLL_MS = 200;
+const RELOAD_DROP_TIMEOUT_MS = 1e4;
+const RELOAD_RECONNECT_TIMEOUT_MS = 6e4;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** 轮询到 predicate 为真，返回耗时；超时返回 null */
+async function waitUntil(predicate, timeoutMs) {
+	const startedAt = Date.now();
+	while (Date.now() - startedAt < timeoutMs) {
+		if (predicate()) return Date.now() - startedAt;
+		await sleep(RELOAD_POLL_MS);
+	}
+	return null;
+}
 /** 平台能力一律查 common/capabilities 的统一表，别在这里再写一份平台判断 */
 const SUPPORTS_VARIABLE = (platform) => platformSupports(platform, "readVariables");
 const SUPPORTS_VARIABLE_WRITE = (platform) => platformSupports(platform, "writeVariables");
@@ -403,10 +417,109 @@ function registerInspectTools(server, bridge, options) {
 	tool("group_nodes", "write", "Wrap nodes that share a parent in a new group.", "inspect:group-nodes");
 	tool("ungroup_node", "write", "Ungroup a group — its children move up to its parent and the group itself is removed.", "inspect:ungroup-node");
 	tool("delete_nodes", "write", "**Destructive — ask the user to confirm before calling this.** Deletes nodes from the document. The user can undo in the design tool, but do not rely on that. The response lists the id and name of everything that was deleted so you can report exactly what went. Already-deleted ids come back in `notFound` rather than failing the call.", "inspect:delete-nodes");
-	tool("eval_script", "dev", "DEV ONLY — run JavaScript inside the plugin sandbox. `api` (the host global, e.g. figma / pixso) and `Platform` (the cross-platform adapter) are in scope; top-level await works; return a JSON-serialisable value. Use it to try things the other tools do not cover while developing the plugin itself — not for end-user workflows, and **not as a way around a write tool that rejected your input**: the rejection is the API telling you which tool to use, and hand-written assignment hits platform quirks the write tools already handle (text styling needs `setRange*`, size needs `resize()`, `characters` needs every font on the node loaded first). The code backing this tool ships only in development builds, so it is absent from released plugins.", "inspect:dev:eval-script");
+	tool("eval_script", "dev", "DEV ONLY — run JavaScript inside the plugin sandbox. `api` (the host global, e.g. figma / pixso) and `Platform` (the cross-platform adapter) are in scope; top-level await works; return a JSON-serialisable value. Use it to try things the other tools do not cover while developing the plugin itself — not for end-user workflows, and **not as a way around a write tool that rejected your input**: the rejection is the API telling you which tool to use, and hand-written assignment hits platform quirks the write tools already handle (text styling needs `setRange*`, size needs `resize()`, `characters` needs every font on the node loaded first). **Not for reading the document either** — to inspect nodes use `query_nodes` and `get_nodes`. They normalize the core fields across platforms, while the host API does not: MasterGo has no `getNodeByIdAsync` (only the sync `getNodeById`) and its nodes have no `findOne` / `findAll`, so a traversal written against Figma dies with \"not a function\" on other platforms. Reach for this tool when you need something the read tools genuinely cannot express — probing whether an API exists, or what a platform does at runtime (write-order constraints, values the host rewrites behind your back). Verifying an import result is NOT that: read it back with `query_nodes` / `get_nodes` (note `bounds` there is absolute canvas coordinates, so subtract the parent origin to compare against parent-relative values). The code backing this tool ships only in development builds, so it is absent from released plugins.", "inspect:dev:eval-script");
+	tool("dev_eval_ui_script", "dev", "DEV ONLY — run JavaScript inside the plugin UI (the iframe document), the counterpart to `eval_script` which runs in the core sandbox. Most of the plugin lives on the UI side (the Vue app, its stores and router, the MCP queue wiring), and that state is unreachable from core and does not show up in `get_tail_logs` — this is how you inspect it while developing the plugin. Nothing is injected into scope: reach the app through the container Vue tags on mount, e.g. `document.querySelector('#app').__vue_app__`. Top-level await works; return a JSON-serialisable value. It runs in the live UI, so a script that mutates state or navigates changes what the user is looking at. Not for end-user workflows.", "inspect:dev:eval-ui-script");
+	if (shouldRegister("dev_reload_plugin_ui", "dev")) server.registerTool("dev_reload_plugin_ui", {
+		description: "DEV ONLY — reload the plugin UI so edited UI code is re-fetched from the dev server, then wait for the plugin to reconnect before returning. Call it after changing UI-side code and before any check whose result you will draw conclusions from — dev builds apply some edits through HMR and others not at all, so without a reload a stale module can look exactly like a code bug. **It refreshes the UI bundle only.** The core bundle (core.js) is read by the design tool when the plugin launches and no plugin-side API can reload it, so changes under any `src/core` path need the user to re-run the plugin by hand — this tool cannot do it and does not claim to. The plugin drops its connection while reloading; the reconnect is awaited here, so a successful result means the plugin is ready for the next call.",
+		inputSchema: DESIGN_INSPECT_INPUT_SCHEMAS["inspect:dev:reload-ui"]
+	}, async () => {
+		if (!bridge.connected) return noPlugin();
+		try {
+			await bridge.request("inspect:dev:reload-ui", {}, QUERY_TIMEOUT_MS);
+		} catch (e) {
+			return {
+				content: [{
+					type: "text",
+					text: e.message
+				}],
+				isError: true
+			};
+		}
+		const droppedInMs = await waitUntil(() => !bridge.connected, RELOAD_DROP_TIMEOUT_MS);
+		if (droppedInMs === null) return {
+			content: [{
+				type: "text",
+				text: "Reload was acknowledged but the plugin connection never dropped, so the UI probably did not reload. Treat the running code as unchanged and reload the plugin manually."
+			}],
+			isError: true
+		};
+		const reconnectedInMs = await waitUntil(() => bridge.connected, RELOAD_RECONNECT_TIMEOUT_MS);
+		if (reconnectedInMs === null) return {
+			content: [{
+				type: "text",
+				text: `Plugin UI reloaded but did not reconnect within ${RELOAD_RECONNECT_TIMEOUT_MS}ms. In the design tool, open the plugin's MCP tab, click rescan, and confirm port ${bridge.port} shows as connected.`
+			}],
+			isError: true
+		};
+		return { content: [{
+			type: "text",
+			text: JSON.stringify({
+				reloaded: "ui",
+				droppedInMs,
+				reconnectedInMs,
+				note: "UI bundle only — core.js is unchanged until the plugin is re-run by hand."
+			})
+		}] };
+	});
 	tool("get_tail_logs", "dev", "DEV ONLY — read the plugin-side log buffer. Intended for developing the plugin itself, not for end-user workflows. This tool is outside the read-only guarantees of the other tools: log lines may contain arbitrary internal state. Only available when the MCP server was started with --dev AND the connected plugin is a development build.", "inspect:dev:tail-logs");
 }
 //#endregion
+//#region ../../libs/html-to-figma-mcp-protocol/src/messages.ts
+/**
+* 导入落点：
+* - insert：作为 nodeId 的子节点追加
+* - replace + nodeId：移到该节点的父级/层序/坐标并删除它。可指任意节点（含用户自己画的占位框）
+* - replace + taskId：同上，目标是该任务的导入产物。只认插件任务注册表内、同 connection 的
+*   任务；插件侧会校验形状与可解析性，解析不出时 ack 明确错误
+*/
+const ImportTargetSchema = z.union([z.object({
+	mode: z.enum(["insert", "replace"]),
+	nodeId: z.string()
+}).strict(), z.object({
+	mode: z.literal("replace"),
+	taskId: z.string()
+}).strict()]);
+/**
+* 单次导入对插件侧 MCP 配置的覆盖，未给的字段沿用插件配置。
+*
+* 只收「结构性且不额外扣费」的项：agent 传的是用户在对话里说的话（「这次别开自动布局」），
+* 而扣费项（自动重命名图层走 AI，按次扣额度）一旦可被单次调用打开，就成了 agent 替用户花钱，
+* 因此只能在插件里由用户自己开。字体统一项同理排除——它只是开关，用哪个字体存在插件的另一处
+* 设置里，agent 看不见那个值。
+*/
+const ImportSettingsOverrideSchema = z.object({
+	autoLayout: z.boolean().optional(),
+	localStyleVariable: z.boolean().optional()
+});
+function getPortRange(base, size = 20) {
+	return {
+		start: base,
+		end: base + size - 1
+	};
+}
+//#endregion
+//#region ../../libs/html-to-figma-mcp-protocol/src/port-segments.ts
+/**
+* html-to-figma MCP 在整个 MCP 端口空间里占用 5000–5599 段，平台 base 按整百间隔
+* （5000–5099 空置不用），实际绑定/扫描只用每个 base 起的前 DEFAULT_PORT_SEGMENT_SIZE
+* 个端口（如 figma 为 5500–5519），其余留作扩容余量。
+* 每个新 MCP 产品应选独立的 base（如 6000/7000/...），互不重叠。
+*/
+const PLATFORM_PORT_BASE = {
+	figma: 5500,
+	mastergo: 5100,
+	jsdesign: 5200,
+	"pixso-china": 5300,
+	"pixso-world": 5400
+};
+function getHtmlToFigmaPortRange(platform) {
+	return getPortRange(PLATFORM_PORT_BASE[platform], 20);
+}
+//#endregion
+//#region ../../libs/html-to-figma-mcp-protocol/src/protocol.ts
+/** 产品身份魔术字符串。服务端 hello 校验时，payload.magic 必须与此值相等 */
+const MAGIC = "refore-html-to-design-mcp";
+//#endregion
 //#region src/capture-guide.ts
 /**
 * agent 抓取页面 DOM 的标准作业指南，由 `get_capture_guide` 工具原文返回。
@@ -416,6 +529,15 @@ function registerInspectTools(server, bridge, options) {
 */
 const CAPTURE_GUIDE = `# Capturing a rendered page for import_html
 
+Scope — this guide is for pages that must be RENDERED in a browser before their DOM can be imported
+(a live site, a flow you walk, a page behind login, a state after interaction). It does NOT apply to a
+local HTML file the user handed you directly (their own page, a static prototype, an exported HTML):
+import that as-is with import_html, passing the absolute path and source:"user-file" (plus the files it
+references from the same directory in assets). Opening such a file in a browser and dumping it back out
+only adds a localhost server, a browser round-trip and extension noise — the dump is the same file minus
+its scripts. Capture it only if the file is NOT self-contained: it needs login state, lazy-loads content,
+draws in <canvas>, or its scripts build the main DOM.
+
 Workflow rhythm — capture is part of walking the flow, not a phase after it. When the task spans
 several pages/states, import each one the moment you first reach it: capture, submit with
 wait:false, keep walking while the plugin imports, then wait_task the previous submission
@@ -569,6 +691,62 @@ const DEFAULT_VIEWPORT = {
 	height: 1080
 };
 const MAX_PATH_LEN = 4096;
+/**
+* 路径模式下 HTML 文件的来历：用户直接交给 agent 的源文件（`user-file`），还是 agent 从浏览器
+* 抓下来落盘的 dump（`browser-dump`）。两者走同一个 `html` 路径参数，但适用的工作流完全不同——
+* 只有 dump 才需要先读抓取指南；用户源文件直接导即可。
+*/
+const ImportSourceSchema = z.enum(["user-file", "browser-dump"]);
+/**
+* `import_html` 的来源侧入参形状，**是这组字段的唯一来源**：工具注册直接铺开它，
+* `ImportHtmlArgs` 用 `z.infer` 派生。手写第二份的漂移是静默的——schema 加了字段而接口漏改，
+* handler 照样编译（结构类型允许多字段），字段在这里被悄悄丢掉。
+*/
+const importHtmlSourceShape = {
+	html: z.string(),
+	source: ImportSourceSchema.optional(),
+	assets: z.array(z.object({
+		path: z.string(),
+		as: z.string().optional()
+	})).optional(),
+	width: z.number().optional(),
+	height: z.number().optional(),
+	target: ImportTargetSchema.optional(),
+	settings: ImportSettingsOverrideSchema.optional()
+};
+function defaultPathOriginEnv() {
+	return {
+		tmpdir: os.tmpdir(),
+		home: os.homedir()
+	};
+}
+/** macOS 的 `os.tmpdir()` 给的是 `/var/folders/...`，而工具落盘时常写成 `/private/var/...`——两者是同一处 */
+function stripPrivatePrefix(p) {
+	return p.startsWith("/private/") ? p.slice(8) : p;
+}
+function isInside(target, root) {
+	const rel = path.relative(root, target);
+	return rel !== "" && !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+/** 目录段命中即视为 dump 落点：OS 临时目录之外，agent 工具的 scratchpad 与各种 `/tmp/` 也是常见写盘处 */
+const DUMP_DIR_SEGMENTS = /* @__PURE__ */ new Set(["tmp", "scratchpad"]);
+/**
+* 未标 `source` 时按路径位置猜来历。dump 的落点高度集中（OS 临时目录 / 用户 Downloads / scratchpad /
+* `tmp` 段），其余位置默认是用户自己的文件。这只是缺省，显式 `source` 永远优先——猜错的两个方向都有
+* 出路：用户文件放在 Downloads 被拦 → 报错文案指路标 `user-file` 重试；dump 写进工程目录漏拦 →
+* description 要求 dump 必标 `browser-dump`。
+*/
+function classifyPathOrigin(p, env = defaultPathOriginEnv()) {
+	const abs = stripPrivatePrefix(path.resolve(p));
+	if ([env.tmpdir, path.join(env.home, "Downloads")].map((r) => stripPrivatePrefix(path.resolve(r))).some((root) => isInside(abs, root))) return "dump-like";
+	if (path.dirname(abs).split(path.sep).some((s) => DUMP_DIR_SEGMENTS.has(s))) return "dump-like";
+	return "user-like";
+}
+/** 路径模式下的有效来历：显式 `source` 优先，否则按路径位置猜。content 模式没有来历概念，不要调它 */
+function resolveImportSource(args, env = defaultPathOriginEnv()) {
+	if (args.source) return args.source;
+	return classifyPathOrigin(args.html, env) === "dump-like" ? "browser-dump" : "user-file";
+}
 const defaultIO = { readFile: (p) => readFile(p) };
 /** html 二义消解：绝对路径且不含换行且长度合理 → path，否则 content */
 function resolveHtmlInput(html) {
@@ -578,7 +756,16 @@ function resolveHtmlInput(html) {
 function isEnoent(e) {
 	return typeof e === "object" && e !== null && e.code === "ENOENT";
 }
-async function normalizeHtmlSource(args, io = defaultIO) {
+/**
+* 读不到文件时的指路按来历分流：dump 落盘失败的高频原因是浏览器工具的写盘目录受限，指向 OS
+* 临时目录；用户源文件读不到则多半是路径抄错（空格 / 引号 / `~` 没展开），这时把 agent 引去
+* 临时目录或浏览器抓取都是误导。
+*/
+function enoentMessage(p, source) {
+	if (source === "user-file") return `${p} (ENOENT). The file the user pointed you to does not exist at this path. Re-check the path exactly as the user gave it (spaces, quotes, ~ expansion, escaping) and ask them if it still cannot be found — do not fall back to capturing the page in a browser just because the file was not found.`;
+	return `${p} (ENOENT). If you could not write the dump due to path restrictions, use the OS temp directory (macOS: \$TMPDIR under /var/folders, NOT /tmp; Windows: %TEMP%) or see get_capture_guide for other transfer channels.`;
+}
+async function normalizeHtmlSource(args, io = defaultIO, env) {
 	const input = resolveHtmlInput(args.html);
 	let html;
 	let baseDir;
@@ -586,7 +773,7 @@ async function normalizeHtmlSource(args, io = defaultIO) {
 		try {
 			html = (await io.readFile(args.html)).toString("utf8");
 		} catch (e) {
-			if (isEnoent(e)) throw new Error(`${args.html} (ENOENT). If you could not write the dump due to path restrictions, use the OS temp directory (macOS: \$TMPDIR under /var/folders, NOT /tmp; Windows: %TEMP%) or see get_capture_guide for other transfer channels.`);
+			if (isEnoent(e)) throw new Error(enoentMessage(args.html, resolveImportSource(args, env)));
 			throw e;
 		}
 		baseDir = path.dirname(args.html);
@@ -616,18 +803,20 @@ async function normalizeHtmlSource(args, io = defaultIO) {
 			width: args.width ?? DEFAULT_VIEWPORT.width,
 			height: args.height ?? DEFAULT_VIEWPORT.height
 		},
-		target: args.target
+		target: args.target,
+		settings: args.settings
 	};
 }
 //#endregion
 //#region src/tools.ts
-const targetSchema = z.union([z.object({
-	mode: z.enum(["insert", "replace"]),
-	nodeId: z.string()
-}).strict(), z.object({
-	mode: z.literal("replace"),
-	taskId: z.string()
-}).strict()]).describe("Where the imported root node lands. `{mode:\"insert\", nodeId}` appends it as a child of that node; `{mode:\"replace\", nodeId}` moves it into that node's place (parent / stacking order / coordinates) and deletes it; `{mode:\"replace\", taskId}` does the same against a previous import of this MCP connection — that is the way to redo a bad import in place. Replacing is safe: the target is only deleted after this import succeeds, and if it was already deleted manually the import falls back to the default placement with `targetApplied: false`. Redo discipline: at most 2 replace re-imports on top of the initial import (3 imports total), and only when you changed an input-side variable (different HTML dump, added assets, viewport, params) — identical input reproduces identical output, and every import consumes paid quota. If the result still doesn't match after that, KEEP the closest result (do not remove it) and report the concrete differences to the user — it is likely a parsing-engine limitation; do not attempt node-by-node canvas fixes.").optional();
+/**
+* 重导（`target` 的 taskId 形式）的使用纪律，编码进 schema description 让 agent 遵守：重试只能
+* 修输入侧错误，解析引擎的保真度缺口同输入重导只会确定性复现，且每次导入都真实扣费。
+*/
+const TARGET_DESCRIPTION = "Where the imported root node lands. `{mode:\"insert\", nodeId}` appends it as a child of that node; `{mode:\"replace\", nodeId}` moves it into that node's place (parent / stacking order / coordinates) and deletes it; `{mode:\"replace\", taskId}` does the same against a previous import of this MCP connection — that is the way to redo a bad import in place. Replacing is safe: the target is only deleted after this import succeeds, and if it was already deleted manually the import falls back to the default placement with `targetApplied: false`. Redo discipline: at most 2 replace re-imports on top of the initial import (3 imports total), and only when you changed an input-side variable (different HTML dump, added assets, viewport, params) — identical input reproduces identical output, and every import consumes paid quota. If the result still doesn't match after that, KEEP the closest result (do not remove it) and report the concrete differences to the user — it is likely a parsing-engine limitation; do not attempt node-by-node canvas fixes.";
+const settingsSchema = ImportSettingsOverrideSchema.strict().describe("Per-import overrides of the user's plugin-side import settings; omitted fields keep the plugin setting. Set a field ONLY when the user asked for it in this conversation — these are their preferences, not knobs for you to tune. `autoLayout`: build the imported frames with auto layout, so the result stays editable and reflows, instead of absolutely positioned children. `localStyleVariable`: register the page's colors and text styles as local styles in the file. Every task result echoes back the settings that actually applied — trust that echo over what you sent: a plugin too old to know this parameter ignores it silently and returns no echo.").optional();
+const targetSchema = ImportTargetSchema.describe(TARGET_DESCRIPTION).optional();
+const sourceSchema = importHtmlSourceShape.source.describe("Only meaningful when `html` is a file path. `\"user-file\"`: a local HTML file the user handed you as-is (their own page, a designer export, a static prototype) — imported directly, no capture guide, no browser. `\"browser-dump\"`: a rendered-DOM dump you captured from a browser following get_capture_guide. When omitted, the origin is guessed from where the file lives (OS temp dir, ~/Downloads, a `tmp` or `scratchpad` directory count as dump locations; anywhere else counts as a user file). Always set it explicitly when you know — a user file saved under ~/Downloads is otherwise treated as a dump and gated, and a dump written elsewhere skips the gate.");
 function textResult(obj) {
 	return { content: [{
 		type: "text",
@@ -643,7 +832,7 @@ function errorResult(message) {
 		isError: true
 	};
 }
-function registerTools(server, hub) {
+function registerTools(server, hub, options = {}) {
 	function noPluginError() {
 		return errorResult(`Plugin not connected (NO_PLUGIN). In the design tool, open the plugin's MCP tab, click rescan, and confirm port ${hub.port} (${hub.agent.name}) shows as connected.`);
 	}
@@ -667,20 +856,16 @@ function registerTools(server, hub) {
 	}
 	let captureGuideServed = false;
 	server.registerTool("import_html", {
-		description: `Import a snippet of HTML or an HTML file into ${MCP_PLATFORM_NAME}. If \`html\` is an absolute path it is read as a file, otherwise treated as HTML content. BEFORE opening the first target page, call \`get_capture_guide\` once — importing a dumped file without having read it is rejected, and it fixes the workflow rhythm (import each page the moment you reach it — never walk the whole flow first) plus traps that otherwise waste paid imports (lazy loading, canvas snapshots, where dump files can be written). This is the preferred import path: whenever you can open or render the page yourself (walking a flow, pages behind login, states after interaction), dump the rendered DOM and import it with this tool. When the user only gives you a URL, still default to this tool — a URL is just the target's address, not a method choice. If you cannot get the page DOM into your hands for ANY reason (no browser tooling, return-value truncation, content filters blocking the transfer, ...), do not fetch the page by other means — follow the instructions of the \`no_browser_fallback\` tool instead.`,
+		description: `Import HTML into ${MCP_PLATFORM_NAME}. If \`html\` is an absolute path it is read as a file, otherwise it is treated as HTML content. Three kinds of input, pick by where the HTML comes from: (1) A LOCAL HTML FILE THE USER GAVE YOU (their own page, a static prototype, an exported HTML): pass the absolute path with \`source:"user-file"\` and list the files it references from the same directory in \`assets\` — do NOT open it in a browser and do NOT read get_capture_guide, that path is only for dumps and would only add a localhost server, a browser round-trip and extension noise for nothing. Direct import is right when the file is self-contained: no login state, no lazy-loaded content, no <canvas>, and its scripts do not build the main DOM (a clock or a click handler does not count). If any of those does apply, treat it as kind 2. (2) A PAGE YOU CAN OPEN OR RENDER YOURSELF (walking a flow, pages behind login, states after interaction, or the user only gave you a URL — a URL is the target address, not a method choice): call get_capture_guide BEFORE opening the first page (it fixes the rhythm — import each page the moment you reach it, never walk the whole flow first — and the traps that waste paid imports: lazy loading, canvas snapshots, where dump files can be written), dump the rendered DOM and import the dump with \`source:"browser-dump"\`; a dump imported without having read the guide is rejected. One exception: a Refore demo share link (\`app.demoway.cn|com/demo/<id>\`) belongs to \`dev_import_demo\` when that tool is available — it replays the demo through the plugin itself, whereas capturing such a link in a browser and importing the dump goes through a different resource-rewriting path and can hide or invent differences. (3) A PAGE WHOSE DOM YOU CANNOT GET INTO YOUR HANDS for ANY reason (no browser tooling, return-value truncation, content filters blocking the transfer, ...): do not fetch the page by other means — follow the instructions of the \`no_browser_fallback\` tool instead.`,
 		inputSchema: {
-			html: z.string(),
-			assets: z.array(z.object({
-				path: z.string(),
-				as: z.string().optional()
-			})).optional(),
-			width: z.number().optional(),
-			height: z.number().optional(),
+			...importHtmlSourceShape,
+			source: sourceSchema,
 			target: targetSchema,
+			settings: settingsSchema,
 			wait: z.boolean().optional()
 		}
 	}, async (args) => {
-		if (!captureGuideServed && resolveHtmlInput(args.html).kind === "path") return errorResult("Call get_capture_guide first, then retry this import. It covers capture traps that waste paid imports (lazy-loaded content, canvas snapshots, which directories dump files can be written to). This check fires only once per session.");
+		if (!captureGuideServed && resolveHtmlInput(args.html).kind === "path" && resolveImportSource(args) === "browser-dump") return errorResult(`${args.source === void 0 ? "This file lives in a location where browser dumps are usually written, so it is treated as a dump. If it is actually a file the user handed you directly, retry with `source:\"user-file\"` — no guide needed. If it IS a dump: " : ""}Call get_capture_guide first, then retry this import. It covers capture traps that waste paid imports (lazy-loaded content, canvas snapshots, which directories dump files can be written to). This check fires only once per session.`);
 		let source;
 		try {
 			source = await normalizeHtmlSource(args);
@@ -698,6 +883,7 @@ function registerTools(server, hub) {
 			theme: z.string().optional(),
 			locale: z.string().optional(),
 			target: targetSchema,
+			settings: settingsSchema,
 			wait: z.boolean().optional()
 		}
 	}, async (args) => {
@@ -710,11 +896,37 @@ function registerTools(server, hub) {
 			},
 			theme: args.theme,
 			locale: args.locale,
-			target: args.target
+			target: args.target,
+			settings: args.settings
+		}, { wait: args.wait ?? true });
+	});
+	if (options.dev) server.registerTool("dev_import_demo", {
+		description: `Import a Refore demo share link into ${MCP_PLATFORM_NAME}. Takes a demo URL of the form \`https://app.demoway.cn/demo/<id>\` (Chinese edition) or \`https://app.demoway.com/demo/<id>\` (international edition) — the link a user pastes into a bug report. This runs the same import path the user gets by opening that demo from the plugin home, so it reproduces what they saw; do NOT re-capture the demo page through a browser and feed it to import_html when a demo link is what you have, because a re-captured dump goes through a different resource-rewriting path and can hide or invent differences. Only single-step demos are supported; a multi-step (tour) demo is rejected with an explicit error. Requires a development build of the plugin. Authentication is supplied by the plugin from its own signed-in state — never append tokens to the URL yourself.`,
+		inputSchema: {
+			demoUrl: z.string(),
+			selector: z.string().optional().describe("Import only the subtree matching this CSS selector inside the recorded page."),
+			target: targetSchema,
+			settings: settingsSchema,
+			wait: z.boolean().optional()
+		}
+	}, async (args) => {
+		let parsed;
+		try {
+			parsed = new URL(args.demoUrl);
+		} catch {
+			return errorResult(`Not a valid URL: ${args.demoUrl}`);
+		}
+		if (!/\/demo\/[^/]+/.test(parsed.pathname)) return errorResult(`Not a demo share link: ${args.demoUrl}. Expected https://app.demoway.cn|com/demo/<id>.`);
+		return runTask("demo", {
+			kind: "demo",
+			demoUrl: args.demoUrl,
+			selector: args.selector,
+			target: args.target,
+			settings: args.settings
 		}, { wait: args.wait ?? true });
 	});
 	server.registerTool("get_capture_guide", {
-		description: "Return the standard playbook for capturing a rendered page DOM for import_html: the workflow rhythm (import each page the moment you reach it — never walk the whole flow first and capture afterwards), a ready-to-run capture script (strips <script>, snapshots <canvas> into <img>, injects <base>), strategies for getting a large dump out of browser tooling (file path / gzip+base64 / download), and the import-verify-redo loop. Call it once BEFORE opening the first target page — reading it only at import time is too late to fix the rhythm. Importing a dumped file without having read it is rejected.",
+		description: "Return the standard playbook for capturing a rendered page DOM for import_html: the workflow rhythm (import each page the moment you reach it — never walk the whole flow first and capture afterwards), a ready-to-run capture script (strips <script>, snapshots <canvas> into <img>, injects <base>), strategies for getting a large dump out of browser tooling (file path / gzip+base64 / download), and the import-verify-redo loop. Call it once BEFORE opening the first target page — reading it only at import time is too late to fix the rhythm. Importing a dumped file without having read it is rejected. Not needed for a local HTML file the user handed you directly — import that with `import_html` and `source:\"user-file\"` instead of capturing it.",
 		inputSchema: {}
 	}, async () => {
 		captureGuideServed = true;
@@ -793,14 +1005,14 @@ function registerTools(server, hub) {
 * 前 1000 字节）。因此路由声明必须是第一句、全文不得超过 1000 字节（有测试锁定）；中文
 * 触发词是给 BM25 命中中文 query 用的——其余语料全是英文，纯中文搜索词否则一个都对不上。
 */
-const SERVER_INSTRUCTIONS = `Use this MCP whenever the user asks to import, convert or restore a web page, URL, or HTML into ${MCP_PLATFORM_NAME} (中文指令如「把网页/URL/HTML 导入到 ${MCP_PLATFORM_NAME}」，产品名「网页转设计」). Capturing is part of walking the flow, not a phase after it: call get_capture_guide BEFORE opening the first target page, then capture and import each page/state the moment you first reach it (submit with wait:false, keep walking while the plugin imports, then wait_task the previous submission). Never walk the whole flow to the end and only then start capturing — the second walk doubles the work and interaction states may not be reproducible on re-navigation.`;
-/** 工具面的组装只在这一处：本 MCP 自己的导入工具 + design-inspect 的组 + dev 组 */
+const SERVER_INSTRUCTIONS = `Use this MCP whenever the user asks to import, convert or restore a web page, URL, or HTML into ${MCP_PLATFORM_NAME} (中文指令如「把网页/URL/HTML 导入到 ${MCP_PLATFORM_NAME}」，产品名「网页转设计」). A local HTML file the user hands you goes straight to import_html with source:"user-file" — no browser, no capture guide. For web pages, capturing is part of walking the flow, not a phase after it: call get_capture_guide BEFORE opening the first target page, then capture and import each page/state the moment you first reach it (submit with wait:false, keep walking while the plugin imports, then wait_task the previous submission). Never walk the whole flow to the end and only then start capturing — the second walk doubles the work and interaction states may not be reproducible on re-navigation.`;
+/** 工具面的组装只在这一处：本 MCP 自己的导入工具（含 dev 专属的 demo 导入）+ design-inspect 的组 + dev 组 */
 function createServer$1(hub, options = {}) {
 	const server = new McpServer({
 		name: MCP_SERVER_NAME,
 		version: MCP_SERVER_VERSION
 	}, { instructions: SERVER_INSTRUCTIONS });
-	registerTools(server, hub);
+	registerTools(server, hub, { dev: options.dev });
 	registerInspectTools(server, hub, {
 		platform: MCP_PLATFORM,
 		groups: [
@@ -813,28 +1025,6 @@ function createServer$1(hub, options = {}) {
 	return server;
 }
 //#endregion
-//#region ../../libs/html-to-figma-mcp-protocol/src/port-segments.ts
-/**
-* html-to-figma MCP 在整个 MCP 端口空间里占用 5000–5599 段，平台 base 按整百间隔
-* （5000–5099 空置不用），实际绑定/扫描只用每个 base 起的前 DEFAULT_PORT_SEGMENT_SIZE
-* 个端口（如 figma 为 5500–5519），其余留作扩容余量。
-* 每个新 MCP 产品应选独立的 base（如 6000/7000/...），互不重叠。
-*/
-const PLATFORM_PORT_BASE = {
-	figma: 5500,
-	mastergo: 5100,
-	jsdesign: 5200,
-	"pixso-china": 5300,
-	"pixso-world": 5400
-};
-function getHtmlToFigmaPortRange(platform) {
-	return getPortRange(PLATFORM_PORT_BASE[platform], 20);
-}
-//#endregion
-//#region ../../libs/html-to-figma-mcp-protocol/src/protocol.ts
-/** 产品身份魔术字符串。服务端 hello 校验时，payload.magic 必须与此值相等 */
-const MAGIC = "refore-html-to-design-mcp";
-//#endregion
 //#region ../../libs/mcp-transport/src/mcp/ws-hub-base.ts
 const MAX_HTTP_BUFFER_SIZE = 100 * 1024 * 1024;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@refore-ai/html-to-figma-mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "bin": {
     "html-to-figma-mcp": "index.mjs"
@@ -12,6 +12,6 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "socket.io": "^4.8.3",
-    "zod": "^3.25.76"
+    "zod": "^4.5.4"
   }
 }