[devfive-relay-c70423]

Follow-up to #119. Implements the remaining MCP-scope Prime feedback items (002, 006, 007, 008, 011, 014, 016, 032) plus today's axe-core 4.14 lesson. The audit is in reports/prime-feedback-2026-11.md → "Follow-up (2026-11-10)".

Changes per item

016 Korean wrapping (user decision: keep word boundaries, avoid large trailing gaps)

• Korean text keeps wordBreak="keep-all" + overflowWrap="break-word" and now also emits textWrap="pretty".
• Text with whiteSpace pre/nowrap gets no textWrap: CSS text-wrap is a shorthand that resets text-wrap-mode to wrap, so it would turn soft wrapping back on. An explicit local or theme textWrap is kept.
• The textWrap evidence cites characters/textAutoResize/maxLines/width instead of a full copy of styledTextSegments. This keeps the real wquw-118 inline response under the 1 MiB limit.
• delivery-quality.md reverses fix: preserve Prime layout contracts and require Figma-backed completion #119's "Do not apply keep-all solely because text is Korean". A diff caused only by Figma's mid-word Korean break is now a documented policy difference, and the native Figma reference is never overwritten to make it pass. The korean-word-boundary validate rule's next action now matches this.

002 Heading margins: semantic h1–h6 emits my="0px" unless the node already has m/my/mt/mb. It comes with a verified semantic-stage property derivation.

006 Asset placeholder collisions

• Extra fills were {stem}-{index}, so fill 2 of hero and a second hero asset (deduped to hero-2) were both hero-2.png. They are now {stem}--fill-{index}, with the 0-based index from {nodeId}:fills:{index}. Stems are kebab-case with collapsed hyphens, so -- can't appear in any other asset's stem.
• The "one placeholder identifies different pictures" refusal now lists the conflicting assetId/nodeId/imageHash/canonicalPath. It recommends assetNamesPerNode:true only when the image hashes differ. Shared-hash naming is deliberate and unchanged (that flag can't split those names), so in that case the error points to separate exports or binding each element's src through sourceMap nodeId/assetId.
• Behavior change: extra-fill file names change from x-1.png to x--fill-1.png. Existing collision guards and the shared-hash naming test are unchanged.

007 missing-only theme: every devupJson response now carries devupJsonScope (complete-theme / used-tokens / additions-only). Missing-only also adds devupJsonMerge (target, deep-merge strategy, instruction). A missing-only devupJson outputPath named devup.json is refused before any Figma call, because writing the fragment there would replace the theme.

008 Hidden masters: componentSetVariants reports per-variant visible and allVariantsHidden. When every variant of a COMPONENT_SET or master export is hidden, the response adds a DEVUP_HIDDEN_MASTER_EXPORT warning. It lists the hidden variant ids and any visible instances in the snapshot, and says to export the visible page INSTANCE instead.

011 Asset per-outputPath state

• Rows now carry fileFacts (exists/bytes/sha256 read from disk) and outputPathRedirected.
• Every not-written row has a fileStateReason: blocked or rolled-back write, different bytes kept by the collision guard, quarantine, failed transaction, not acquired, or duplicate. These rows also carry requestedPathFacts.
• Grayscale reuse of a colour original is reported as written and redirected, not as not-written. A test covers this.

014 / 032 / axe-core 4.14 (guidance only, delivery-quality.md; manifest bytes/sha updated)

• 014: validation messages must not collapse the input's width. E2E asserts input bounds, visibility, focus and the message in the error state.
• 032: report CI failures by the stage that failed, with the original message. Local pass, remote CI pass, push rejection and transient HTTP errors are separate evidence. When a push is rejected, finish independent work and leave a patch.
• axe-core 4.14: label-content-name-mismatch is now in wcag21a. Drop redundant aria-labels, make labels contain the visible text verbatim, use sr-only text for hints, and never disable the rule.

Test evidence

• cargo fmt --all -- --check: pass.
• cargo clippy --locked --workspace --all-targets --all-features -- -D warnings: pass.
• cargo insta test --workspace --all-features --check: 2260 passed / 1 failed / 2 ignored locally on Windows. The failure is r3_cancelled_client_recovers_retained_asset_job, which uses virtual time and is load-dependent. It also failed in the full run before any asset_jobs change in this branch, and it passed 4/4 when its own test binary ran alone. It was left unchanged.
• Snapshots: 13 wquw_151 snapshots add only textWrap="pretty" lines and their property evidence. Seven pinned plugin goldens add exactly 15 textWrap="pretty" lines (applied with DEVUP_FIXTURE_UPDATE); their checksums are synced and the change is recorded in the fixtures README.
• node --test crates/devup-mcp-figma/tests/explore_script_behavior.mjs plugin/tests/withdraw.test.mjs harness/runtime-audit/test/checks.test.mjs: 83 tests, 82 pass, 0 fail.
• Harness browser suite (harness/runtime-audit, npm test): 96 tests, 95 pass, 1 skipped (CI-only gate), 0 fail.
  • New check: generated code compiles with the installed Devup UI.
  • Computed styles: word-break: keep-all, text-wrap-style: pretty, text-wrap-mode: nowrap for intrinsic-width pre text, and every line break on a word boundary.
  • With no reset stylesheet, the generated h2 has 0px top and bottom margins.

Out of scope (unchanged)

• 005: blend/backdrop compositor.
• 009: Devup UI compiler transform of polymorphic Link.
• 013: Vite watcher/HMR.
• 029: the application's own destructive postprocessor.

Note: pushing to devfive-relay-c70423/prime-feedback-followups was declined by the pre-receive hook. The branch was pushed under the repository's usual devfive/<id>/… prefix instead.

🤖 Generated with Claude Code

---

Submitted via Devfive hub. Employee: ; device: 3099154426bffbeef8b62999b80bb038