Figma AI Code Connect 2.0 vs Kontext CLI

“The primitive here is a token-aware component AST generator that maps Figma design nodes to your existing codebase's component library — not a blank-slate code generator. That distinction matters enormously. The DX bet is that you've already wired up Code Connect mappings for your design system, which means the first 10 minutes are actually spent in config, not in value. Once that setup is done, multi-variant component output with a11y attributes baked in is genuinely useful and not something you replicate with a weekend script. The specific thing that earns the ship: it outputs to *your* tokens, not Figma's magic numbers — which means the diff against your real components is actually reviewable.”

“The credential problem with AI agents is real and underappreciated. When your agent has a GitHub token, Stripe key, and database connection in its environment, a single prompt injection can exfiltrate all of them. Kontext's ephemeral model — short-lived, scoped, auto-expired — is exactly how this should work. MIT license, native Go binary, no Docker required.”

“The direct competitor is Locofy, Anima, and every design-to-code tool that has promised production-ready output for five years and delivered HTML soup. Code Connect 2.0 is meaningfully different in one specific way: it doesn't pretend your design tokens don't exist. The scenario where it breaks is any team that hasn't rigorously maintained Code Connect mappings — which is most teams — in which case the output degrades to the same pixel-value garbage everyone else ships. What kills this in 12 months isn't a competitor, it's that Figma's own IDE plugin ecosystem forces them to keep iterating on this or it becomes shelfware. The moat here is distribution, not technology, and for Figma that's actually enough.”

“The OIDC approach introduces a dependency that has to be up and authenticated for your agent to start at all. The threat model — your agent leaking long-lived keys — is real but theoretical for most solo developers. Prompt injection attacks that exfiltrate .env files are possible but not common in practice yet. For indie builders, you're adding complexity to a problem you probably don't have.”

“The specific interaction that matters here is the handoff moment — and for the first time in Figma's history, that moment doesn't require a developer to squint at a sidebar full of raw values. Accessibility attributes being surfaced in the export is the detail that tells me the team actually uses this product; it's not a checkbox feature, it's a workflow decision that changes what engineers review in the PR. My one gripe: the 'one-click' framing is doing a lot of marketing work — the setup cost of Code Connect mappings is real and happens off-screen. If Figma had designed the mapping setup experience with the same care as the export, this would score higher.”

“The job-to-be-done is unambiguous: eliminate the spec-to-code translation tax that kills velocity between design and engineering. Code Connect 2.0 actually completes that job *if* your design system is mature — which makes this a tool for teams that already have their house in order, not teams trying to get there. The onboarding reality is that you hit configuration before you hit value, and the completeness story depends entirely on whether you can fully retire your old handoff process or still need Zeplin or Storybook alongside it. The specific product decision that earns the ship is opinionated token mapping: the tool has a point of view about how design-to-code should work, and that opinion is correct.”

“As coding agents get more autonomous — running overnight, spawning sub-agents, executing across multiple services — the credential model needs to evolve. Kontext is early infrastructure for what will eventually be mandatory: agent-scoped, time-bounded access. The .env.kontext file being safely committable to the repo is the real unlock for teams sharing configurations without sharing secrets.”

“A developer security tool requiring understanding of OIDC, token exchange, and system keyring storage to use correctly. It's solving a real problem, but not one most creators encounter. The README will feel overwhelming if you're not a security engineer. The payoff is real, but so is the setup cost.”