v0.2.0: JavaScript evaluation and full CDP
Pre-release
v0.2.0 adds arbitrary JavaScript evaluation and arbitrary Chrome DevTools Protocol commands over MCP and JSON HTTP.
The new tools are figma.evaluate, figma.cdp, figma.cdp_events and figma.cdp_close. Connections keep enabled domains, remote objects and bounded event queues across calls. Raw requests run concurrently, so paused evaluation can receive resume commands and event reads.
This interface is for trusted local agents. Acquiring a managed handle requires authentication and an owned writer lease. Browser commands can affect other agents and bypass file locks; raw-created targets require caller cleanup. Raw authority persists for the worker generation. Protocol completion is not a saved-design or destructive-effect guarantee. Chromium sandboxing remains enabled; launch still blocks service workers and initially disables downloads.
The qualified runtime passed twelve independent Chromium/MCP/HTTP fixtures and seventeen installed native Linux checks, including ordinary reopening after raw access, Ctrl+C cleanup and authenticated-profile restart. Source evidence includes earlier154-test Node22/24 baselines and focused checks for subsequent changes; the final signal and CLI files passed together25/25 on each node. Fresh production installation and installed CLI/MCP/HTTP smoke passed. These results do not claim new v0.2 native macOS/Windows qualification or cloud durability.
Install from the GitHub tarball after publication. v0.1.0 remains unchanged. See qualification.json and SHA256SUMS for artifact and scope details.