@synthetic-ai/premiere-mcp 2.0.0

package/scripts/install-cep-windows.ps1

@@ -0,0 +1,99 @@
+# Install the MCP Bridge CEP plugin for Premiere Pro on Windows.
+# Run this script as the current user (does NOT require Administrator for user-space registry and %APPDATA%).
+# However, creating a symbolic link requires Developer Mode OR Administrator privileges.
+# Use the -Copy switch to copy the plugin folder instead of symlinking (no admin required).
+#
+# Usage:
+#   .\install-cep-windows.ps1          # symlink (requires Developer Mode or Admin)
+#   .\install-cep-windows.ps1 -Copy    # copy files (no admin required)
+
+param(
+    [switch]$Copy
+)
+
+$ErrorActionPreference = "Stop"
+
+$ScriptDir  = Split-Path -Parent $MyInvocation.MyCommand.Path
+$ProjectDir = Split-Path -Parent $ScriptDir
+$PluginSrc  = Join-Path $ProjectDir "cep-plugin"
+$PluginName = "MCPBridgeCEP"
+$CepDir     = Join-Path $env:APPDATA "Adobe\CEP\extensions"
+$PluginDest = Join-Path $CepDir $PluginName
+
+Write-Host ""
+Write-Host "=== MCP Bridge CEP Plugin Installer (Windows) ===" -ForegroundColor Cyan
+Write-Host ""
+Write-Host "Source:      $PluginSrc"
+Write-Host "Destination: $PluginDest"
+Write-Host ""
+
+# ---- 1. Create CEP extensions directory if needed ----
+if (!(Test-Path $CepDir)) {
+    Write-Host "Creating CEP extensions directory: $CepDir"
+    New-Item -ItemType Directory -Path $CepDir -Force | Out-Null
+}
+
+# ---- 2. Remove existing installation ----
+if (Test-Path $PluginDest) {
+    Write-Host "Removing existing installation at $PluginDest ..."
+    Remove-Item -Recurse -Force $PluginDest
+}
+
+# ---- 3. Install the plugin ----
+if ($Copy) {
+    Write-Host "Copying plugin files (no admin required)..."
+    Copy-Item -Recurse -Path $PluginSrc -Destination $PluginDest
+    Write-Host "Copied successfully." -ForegroundColor Green
+} else {
+    Write-Host "Creating symbolic link (requires Developer Mode or Administrator)..."
+    try {
+        New-Item -ItemType SymbolicLink -Path $PluginDest -Target $PluginSrc | Out-Null
+        Write-Host "Symlink created successfully." -ForegroundColor Green
+    } catch {
+        Write-Warning "Symlink failed: $_"
+        Write-Warning "Falling back to copy. Re-run with -Copy flag to skip this step next time."
+        Copy-Item -Recurse -Path $PluginSrc -Destination $PluginDest
+        Write-Host "Copied successfully." -ForegroundColor Green
+    }
+}
+
+# ---- 4. Set PlayerDebugMode in the registry (allows unsigned CEP extensions) ----
+Write-Host ""
+Write-Host "Setting PlayerDebugMode in registry for CSXS 9.0 - 12.0 ..."
+
+$versions = @("9.0", "10.0", "11.0", "12.0")
+foreach ($v in $versions) {
+    $key = "HKCU:\Software\Adobe\CSXS.$v"
+    if (!(Test-Path $key)) {
+        New-Item -Path $key -Force | Out-Null
+    }
+    Set-ItemProperty -Path $key -Name "PlayerDebugMode" -Value "1" -Type String
+    Write-Host "  Set $key\PlayerDebugMode = 1" -ForegroundColor DarkGray
+}
+
+Write-Host "Registry keys set." -ForegroundColor Green
+
+# ---- 5. Print next steps ----
+Write-Host ""
+Write-Host "Installation complete!" -ForegroundColor Green
+Write-Host ""
+Write-Host "Next steps:"
+Write-Host "  1. Restart Premiere Pro (completely - not just reopen a project)"
+Write-Host "  2. Go to Window > Extensions > Synthetic Premiere MCP"
+Write-Host "  3. Set the Temp Directory field to match PREMIERE_TEMP_DIR in your MCP config"
+Write-Host "     Default: $env:LOCALAPPDATA\Temp\premiere-mcp-bridge"
+Write-Host "  4. Click Start Bridge - you should see a green Running status"
+Write-Host "  5. Configure your MCP client (e.g., Claude Desktop) with:"
+Write-Host ""
+Write-Host '  {' -ForegroundColor Yellow
+Write-Host '    "mcpServers": {' -ForegroundColor Yellow
+Write-Host '      "premiere-pro": {' -ForegroundColor Yellow
+Write-Host "        `"command`": `"node`"," -ForegroundColor Yellow
+Write-Host "        `"args`": [`"$ProjectDir\dist\index.js`"]," -ForegroundColor Yellow
+Write-Host '        "env": {' -ForegroundColor Yellow
+Write-Host "          `"PREMIERE_TEMP_DIR`": `"$env:LOCALAPPDATA\Temp\premiere-mcp-bridge`"" -ForegroundColor Yellow
+Write-Host '        }' -ForegroundColor Yellow
+Write-Host '      }' -ForegroundColor Yellow
+Write-Host '    }' -ForegroundColor Yellow
+Write-Host '  }' -ForegroundColor Yellow
+Write-Host ""

package/scripts/install-cep.sh

@@ -0,0 +1,66 @@
+#!/bin/bash
+# Install the MCP Bridge CEP plugin for Premiere Pro
+# This script creates a symlink from the CEP extensions directory to this project's cep-plugin folder.
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+PLUGIN_SRC="$PROJECT_DIR/cep-plugin"
+PLUGIN_NAME="MCPBridgeCEP"
+
+# Detect OS
+if [[ "$OSTYPE" == "darwin"* ]]; then
+  CEP_DIR="$HOME/Library/Application Support/Adobe/CEP/extensions"
+elif [[ "$OSTYPE" == "msys" || "$OSTYPE" == "win32" ]]; then
+  CEP_DIR="$APPDATA/Adobe/CEP/extensions"
+else
+  echo "Unsupported OS: $OSTYPE"
+  exit 1
+fi
+
+echo "=== MCP Bridge CEP Plugin Installer ==="
+echo ""
+echo "Source:      $PLUGIN_SRC"
+echo "Destination: $CEP_DIR/$PLUGIN_NAME"
+echo ""
+
+# Create CEP extensions directory if needed
+mkdir -p "$CEP_DIR"
+
+# Remove existing installation
+if [ -e "$CEP_DIR/$PLUGIN_NAME" ] || [ -L "$CEP_DIR/$PLUGIN_NAME" ]; then
+  echo "Removing existing installation..."
+  rm -rf "$CEP_DIR/$PLUGIN_NAME"
+fi
+
+# Create symlink (for development) or copy (for production)
+if [ "$1" == "--copy" ]; then
+  echo "Copying plugin files..."
+  cp -r "$PLUGIN_SRC" "$CEP_DIR/$PLUGIN_NAME"
+else
+  echo "Creating symlink (development mode)..."
+  ln -s "$PLUGIN_SRC" "$CEP_DIR/$PLUGIN_NAME"
+fi
+
+echo ""
+
+# Enable CEP debug mode (allows unsigned extensions)
+if [[ "$OSTYPE" == "darwin"* ]]; then
+  echo "Enabling CEP debug mode..."
+  for version in 8 9 10 11 12 13 14; do
+    defaults write com.adobe.CSXS.$version PlayerDebugMode 1 2>/dev/null || true
+  done
+  echo "CEP debug mode enabled for CSXS 8-14"
+fi
+
+echo ""
+echo "✓ Installation complete!"
+echo ""
+echo "Next steps:"
+echo "  1. Restart Premiere Pro"
+echo "  2. Go to Window > Extensions > Synthetic Premiere MCP"
+echo "  3. Set the temp directory and click 'Start Bridge'"
+echo "  4. Configure your MCP client (e.g., Claude Desktop) to use:"
+echo "     node $PROJECT_DIR/dist/index.js"
+echo ""

package/scripts/install-chat-plugin.bat

@@ -0,0 +1,67 @@
+@echo off
+REM Premiere Pro AI Chat — Windows Installer
+REM Copies the plugin to the Adobe CEP extensions folder
+REM and enables unsigned extensions via registry.
+
+setlocal enabledelayedexpansion
+
+echo ========================================
+echo   Premiere Pro AI Chat — Plugin Installer
+echo ========================================
+echo.
+
+REM Resolve paths
+set "SCRIPT_DIR=%~dp0"
+set "PROJECT_ROOT=%SCRIPT_DIR%.."
+set "PLUGIN_SRC=%PROJECT_ROOT%\chat-plugin"
+set "PLUGIN_NAME=com.ppro.ai.chat"
+set "CEP_DIR=%APPDATA%\Adobe\CEP\extensions"
+
+echo Plugin source: %PLUGIN_SRC%
+echo CEP target:    %CEP_DIR%\%PLUGIN_NAME%
+echo.
+
+REM Verify source exists
+if not exist "%PLUGIN_SRC%" (
+    echo [ERROR] Plugin source not found at %PLUGIN_SRC%
+    pause
+    exit /b 1
+)
+
+REM Create CEP extensions directory if needed
+if not exist "%CEP_DIR%" (
+    echo Creating CEP extensions directory...
+    mkdir "%CEP_DIR%"
+)
+
+REM Remove existing installation
+if exist "%CEP_DIR%\%PLUGIN_NAME%" (
+    echo Removing existing installation...
+    rmdir /s /q "%CEP_DIR%\%PLUGIN_NAME%"
+)
+
+REM Copy plugin
+echo Installing plugin...
+xcopy /s /e /i /q "%PLUGIN_SRC%" "%CEP_DIR%\%PLUGIN_NAME%"
+echo [OK] Plugin installed
+
+REM Enable unsigned extensions (CSXS 9-12)
+echo.
+echo Enabling unsigned CEP extensions...
+for %%v in (9 10 11 12) do (
+    reg add "HKCU\SOFTWARE\Adobe\CSXS.%%v" /v PlayerDebugMode /t REG_SZ /d 1 /f >nul 2>&1
+)
+echo [OK] Debug mode enabled (CSXS 9-12)
+
+echo.
+echo ========================================
+echo   [OK] Installation complete!
+echo ========================================
+echo.
+echo Next steps:
+echo   1. Restart Premiere Pro (if running)
+echo   2. Open: Window ^> Extensions ^> AI Chat
+echo   3. Enter your Claude or Gemini API key
+echo   4. Start chatting to control Premiere Pro!
+echo.
+pause

package/scripts/install-chat-plugin.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# Install the Premiere Pro AI Chat CEP plugin
+# Creates a symlink (or copies) from the chat-plugin/ directory
+# into the Adobe CEP extensions folder.
+
+set -e
+
+PLUGIN_NAME="com.ppro.ai.chat"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+PLUGIN_SRC="$PROJECT_ROOT/chat-plugin"
+
+echo "========================================"
+echo "  Premiere Pro AI Chat — Plugin Installer"
+echo "========================================"
+echo ""
+
+# Detect OS
+if [[ "$OSTYPE" == "darwin"* ]]; then
+  CEP_DIR="$HOME/Library/Application Support/Adobe/CEP/extensions"
+elif [[ "$OSTYPE" == "linux-gnu"* ]]; then
+  CEP_DIR="$HOME/.config/Adobe/CEP/extensions"
+else
+  echo "⚠  Windows detected. Please manually copy:"
+  echo "   From: $PLUGIN_SRC"
+  echo "   To:   %APPDATA%\\Adobe\\CEP\\extensions\\$PLUGIN_NAME"
+  echo ""
+  echo "Then set registry key to enable unsigned extensions:"
+  echo '   HKEY_CURRENT_USER\SOFTWARE\Adobe\CSXS.11'
+  echo '   PlayerDebugMode = "1" (String)'
+  exit 0
+fi
+
+echo "Plugin source: $PLUGIN_SRC"
+echo "CEP target:    $CEP_DIR/$PLUGIN_NAME"
+echo ""
+
+# Verify source exists
+if [ ! -d "$PLUGIN_SRC" ]; then
+  echo "✗ Error: Plugin source not found at $PLUGIN_SRC"
+  exit 1
+fi
+
+# Create CEP extensions directory if needed
+if [ ! -d "$CEP_DIR" ]; then
+  echo "Creating CEP extensions directory..."
+  mkdir -p "$CEP_DIR"
+fi
+
+# Remove existing installation
+if [ -L "$CEP_DIR/$PLUGIN_NAME" ] || [ -d "$CEP_DIR/$PLUGIN_NAME" ]; then
+  echo "Removing existing installation..."
+  rm -rf "$CEP_DIR/$PLUGIN_NAME"
+fi
+
+# Create symlink
+echo "Creating symlink..."
+ln -s "$PLUGIN_SRC" "$CEP_DIR/$PLUGIN_NAME"
+echo "✓ Symlink created"
+
+# Enable unsigned extensions (macOS)
+if [[ "$OSTYPE" == "darwin"* ]]; then
+  echo ""
+  echo "Enabling unsigned CEP extensions..."
+  # Support CSXS versions 9-12 for various Premiere Pro versions
+  for ver in 9 10 11 12; do
+    defaults write com.adobe.CSXS.$ver PlayerDebugMode 1 2>/dev/null || true
+  done
+  echo "✓ Debug mode enabled (CSXS 9-12)"
+fi
+
+echo ""
+echo "========================================"
+echo "  ✓ Installation complete!"
+echo "========================================"
+echo ""
+echo "Next steps:"
+echo "  1. Restart Premiere Pro (if running)"
+echo "  2. Open: Window → Extensions → AI Chat"
+echo "  3. Enter your Claude or Gemini API key"
+echo "  4. Start chatting to control Premiere Pro!"
+echo ""
+echo "Note: The AI Chat panel and MCP Bridge panel"
+echo "can run side by side if you have both installed."
+echo ""

package/scripts/install-windows.bat

@@ -0,0 +1,95 @@
+@echo off
+:: MCP Bridge CEP Plugin Installer for Windows
+:: Does NOT require Administrator rights — uses xcopy instead of symlinks.
+:: Sets PlayerDebugMode registry keys for CSXS 9-12 to allow unsigned CEP extensions.
+
+setlocal enabledelayedexpansion
+
+set "SCRIPT_DIR=%~dp0"
+:: Remove trailing backslash from SCRIPT_DIR
+if "%SCRIPT_DIR:~-1%"=="\" set "SCRIPT_DIR=%SCRIPT_DIR:~0,-1%"
+
+set "PROJECT_DIR=%SCRIPT_DIR%\.."
+:: Resolve to absolute path
+pushd "%PROJECT_DIR%"
+set "PROJECT_DIR=%CD%"
+popd
+
+set "PLUGIN_SRC=%PROJECT_DIR%\cep-plugin"
+set "PLUGIN_NAME=MCPBridgeCEP"
+set "CEP_DIR=%APPDATA%\Adobe\CEP\extensions"
+set "PLUGIN_DEST=%CEP_DIR%\%PLUGIN_NAME%"
+
+echo.
+echo === MCP Bridge CEP Plugin Installer for Windows ===
+echo.
+echo Source:      %PLUGIN_SRC%
+echo Destination: %PLUGIN_DEST%
+echo.
+
+:: 1. Create CEP extensions directory if needed
+if not exist "%CEP_DIR%" (
+    echo Creating CEP extensions directory...
+    mkdir "%CEP_DIR%"
+)
+
+:: 2. Remove existing installation
+if exist "%PLUGIN_DEST%" (
+    echo Removing existing installation...
+    rmdir /s /q "%PLUGIN_DEST%"
+)
+
+:: 3. Copy plugin files (xcopy works without admin)
+echo Copying plugin files...
+xcopy /e /i /q "%PLUGIN_SRC%" "%PLUGIN_DEST%"
+if errorlevel 1 (
+    echo ERROR: Failed to copy plugin files.
+    pause
+    exit /b 1
+)
+echo Plugin files copied successfully.
+
+:: 4. Set PlayerDebugMode registry keys for CSXS 9-12
+echo.
+echo Setting PlayerDebugMode in registry...
+
+for %%v in (9.0 10.0 11.0 12.0) do (
+    reg add "HKCU\Software\Adobe\CSXS.%%v" /v PlayerDebugMode /t REG_SZ /d 1 /f >nul 2>&1
+    echo   Set HKCU\Software\Adobe\CSXS.%%v\PlayerDebugMode = 1
+)
+
+echo Registry keys set.
+
+:: 5. Print next steps
+echo.
+echo ============================================================
+echo  Installation complete!
+echo ============================================================
+echo.
+echo Next steps:
+echo   1. Restart Premiere Pro completely (close and reopen)
+echo   2. Go to Window ^> Extensions ^> MCP Bridge
+echo   3. Set the Temp Directory to:
+echo      %LOCALAPPDATA%\Temp\premiere-mcp-bridge
+echo   4. Click "Start Bridge" - you should see a green "Running" status
+echo.
+echo   5. Configure Claude Desktop (%%APPDATA%%\Claude\claude_desktop_config.json):
+echo.
+echo   {
+echo     "mcpServers": {
+echo       "premiere-pro": {
+echo         "command": "node",
+echo         "args": ["%PROJECT_DIR%\dist\index.js"],
+echo         "env": {
+echo           "PREMIERE_TEMP_DIR": "%LOCALAPPDATA%\Temp\premiere-mcp-bridge"
+echo         }
+echo       }
+echo     }
+echo   }
+echo.
+echo   6. Build the MCP server (if not already built):
+echo      cd "%PROJECT_DIR%" ^&^& npm install ^&^& npm run build
+echo.
+
+pause
+endlocal

package/scripts/package.mjs

@@ -0,0 +1,218 @@
+/**
+ * Synthetic Premiere Pro MCP — Build & Package
+ *
+ * Produces a distributable, IP-protected release in ./release :
+ *   release/
+ *     server/index.mjs        bundled + minified (+ obfuscated) MCP server
+ *     server/package.json     minimal ESM marker
+ *     MCPBridgeCEP.zxp        signed CEP plugin (obfuscated premiere.jsx, no .debug)
+ *     install/                install scripts
+ *     README.md  LICENSE
+ *   synthetic-premiere-mcp-v{VERSION}.zip
+ *
+ * Usage: node scripts/package.mjs
+ * Env:   ZXP_SIGN_CMD (path to ZXPSignCmd.exe), ZXP_CERT_PASSWORD (default "synthetic")
+ */
+import {
+  readFileSync, writeFileSync, mkdirSync, copyFileSync, existsSync,
+  rmSync, readdirSync, statSync,
+} from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { execSync, spawnSync } from "child_process";
+import { build as esbuild } from "esbuild";
+import JavaScriptObfuscator from "javascript-obfuscator";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(__dirname, "..");
+const REL = join(ROOT, "release");
+const pkg = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf-8"));
+const V = pkg.version;
+
+console.log(`\n🔨 Packaging Synthetic Premiere MCP v${V}\n`);
+
+// ─── 1. Clean ────────────────────────────────────────────────────────────────
+if (existsSync(REL)) rmSync(REL, { recursive: true, force: true });
+mkdirSync(join(REL, "server"), { recursive: true });
+console.log("✓ Cleaned release/");
+
+// ─── 2. Compile TS, then bundle with esbuild (single minified ESM file) ──────
+console.log("⚙  tsc build...");
+execSync("npm run build", { cwd: ROOT, stdio: "pipe" });
+const serverOut = join(REL, "server", "index.mjs");
+await esbuild({
+  entryPoints: [join(ROOT, "dist", "index.js")],
+  bundle: true,
+  platform: "node",
+  format: "esm",
+  target: "node18",
+  minify: true,
+  legalComments: "none",
+  outfile: serverOut,
+});
+const bundledSize = (statSync(serverOut).size / 1024).toFixed(1);
+console.log(`✓ Bundled server → release/server/index.mjs (${bundledSize} KB)`);
+
+// ─── 3. Obfuscate the bundle (conservative; falls back to minify-only) ───────
+function validateServer(file) {
+  // Start the server; it must print "Registered 437 tools" on stderr then be ready.
+  const r = spawnSync(process.execPath, [file], {
+    input: "",
+    timeout: 8000,
+    encoding: "utf-8",
+    env: { ...process.env },
+  });
+  const out = (r.stderr || "") + (r.stdout || "");
+  const m = out.match(/Registered (\d+) tools/);
+  return m ? parseInt(m[1], 10) : 0;
+}
+
+const minifiedCode = readFileSync(serverOut, "utf-8");
+let serverProtected = "minify-only";
+try {
+  console.log("🔒 Obfuscating server bundle...");
+  // Strip the shebang before obfuscating; re-add after.
+  const noShebang = minifiedCode.replace(/^#![^\n]*\n/, "");
+  const obf = JavaScriptObfuscator.obfuscate(noShebang, {
+    compact: true,
+    target: "node",
+    controlFlowFlattening: false,
+    deadCodeInjection: false,
+    debugProtection: false,
+    disableConsoleOutput: false,
+    identifierNamesGenerator: "hexadecimal",
+    numbersToExpressions: false,
+    renameGlobals: false,
+    selfDefending: false,
+    simplify: true,
+    splitStrings: false,
+    stringArray: true,
+    stringArrayEncoding: ["base64"],
+    stringArrayThreshold: 0.75,
+    unicodeEscapeSequence: false,
+  }).getObfuscatedCode();
+  writeFileSync(serverOut, "#!/usr/bin/env node\n" + obf);
+
+  const n = validateServer(serverOut);
+  if (n >= 400) {
+    serverProtected = "obfuscated";
+    console.log(`✓ Obfuscated server validated (registered ${n} tools)`);
+  } else {
+    throw new Error(`obfuscated server registered ${n} tools (expected 437)`);
+  }
+} catch (e) {
+  console.warn(`  ⚠ Obfuscation rejected (${e.message}). Falling back to minify-only.`);
+  writeFileSync(serverOut, minifiedCode);
+  const n = validateServer(serverOut);
+  if (n < 400) {
+    console.error(`✗ Minified server also failed to register tools (${n}). Aborting.`);
+    process.exit(1);
+  }
+  console.log(`✓ Minified server validated (registered ${n} tools)`);
+}
+writeFileSync(join(REL, "server", "package.json"),
+  JSON.stringify({ name: "synthetic-premiere-mcp", version: V, type: "module", private: true }, null, 2));
+
+// ─── 4. Stage the CEP plugin (obfuscate premiere.jsx + main.js, strip .debug) ─
+const CEP_SRC = join(ROOT, "cep-plugin");
+const CEP_STAGE = join(REL, "_cepstage");
+copyDirSync(CEP_SRC, CEP_STAGE);
+
+// 4a. Strip the dev debug file (opens a CEF debug port — must not ship).
+const dbg = join(CEP_STAGE, ".debug");
+if (existsSync(dbg)) { rmSync(dbg); console.log("✓ Stripped cep .debug"); }
+
+// 4b. Stamp version into the staged manifest.
+const mxPath = join(CEP_STAGE, "CSXS", "manifest.xml");
+let mx = readFileSync(mxPath, "utf-8")
+  .replace(/ExtensionBundleVersion="[^"]*"/, `ExtensionBundleVersion="${V}"`)
+  .replace(/(<Extension Id="[^"]*" Version=")[^"]*(")/, `$1${V}$2`);
+writeFileSync(mxPath, mx);
+
+// 4c. Obfuscate the ExtendScript library + panel logic. ExtendScript-safe settings:
+//     renameGlobals MUST stay false (helper fns are called by name), no control-flow
+//     flattening / selfDefending (incompatible with the ExtendScript engine).
+const ES_SAFE = {
+  compact: true,
+  controlFlowFlattening: false,
+  deadCodeInjection: false,
+  debugProtection: false,
+  disableConsoleOutput: false,
+  identifierNamesGenerator: "hexadecimal",
+  numbersToExpressions: false,
+  renameGlobals: false,
+  selfDefending: false,
+  simplify: true,
+  splitStrings: false,
+  stringArray: true,
+  stringArrayEncoding: ["base64"],
+  stringArrayThreshold: 0.75,
+  unicodeEscapeSequence: false,
+};
+for (const f of ["premiere.jsx", "main.js"]) {
+  const p = join(CEP_STAGE, f);
+  if (!existsSync(p)) continue;
+  const src = readFileSync(p, "utf-8").replace(/^#!.*\n/, "");
+  const obf = JavaScriptObfuscator.obfuscate(src, ES_SAFE).getObfuscatedCode();
+  writeFileSync(p, obf);
+  console.log(`✓ Obfuscated cep/${f} (${(obf.length / 1024).toFixed(1)} KB)`);
+}
+
+// ─── 5. Sign the staged plugin into a .zxp ───────────────────────────────────
+const ZXP = process.env.ZXP_SIGN_CMD ||
+  "C:\\Users\\Artear\\Documents\\CEP-Resources\\ZXPSignCMD\\4.1.3\\x64\\ZXPSignCmd.exe";
+const certPath = process.env.ZXP_CERT_PATH || join(ROOT, ".cert", "self-signed.p12");
+const certPass = process.env.ZXP_CERT_PASSWORD || "synthetic";
+const zxpOut = join(REL, "MCPBridgeCEP.zxp");
+
+if (!existsSync(certPath)) { console.error(`✗ Cert not found: ${certPath}`); process.exit(1); }
+function sign(withTsa) {
+  const tsa = withTsa ? ` -tsa "http://timestamp.digicert.com"` : "";
+  execSync(`"${ZXP}" -sign "${CEP_STAGE}" "${zxpOut}" "${certPath}" "${certPass}"${tsa}`,
+    { cwd: ROOT, stdio: "pipe" });
+}
+console.log("🖊  Signing MCPBridgeCEP.zxp...");
+try {
+  try { sign(true); } catch { if (existsSync(zxpOut)) rmSync(zxpOut); console.warn("  ⚠ TSA failed — signing offline."); sign(false); }
+  console.log(`✓ Signed → release/MCPBridgeCEP.zxp (${(statSync(zxpOut).size / 1024).toFixed(1)} KB)`);
+} catch (e) {
+  console.error("✗ Signing failed:", (e.stderr || e.message || "").toString());
+  process.exit(1);
+}
+rmSync(CEP_STAGE, { recursive: true, force: true });
+
+// ─── 6. Install scripts + docs ───────────────────────────────────────────────
+mkdirSync(join(REL, "install"), { recursive: true });
+for (const s of ["install-cep-windows.ps1", "install-windows.bat", "install-cep.sh"]) {
+  const p = join(ROOT, "scripts", s);
+  if (existsSync(p)) copyFileSync(p, join(REL, "install", s));
+}
+for (const f of ["LICENSE"]) {
+  if (existsSync(join(ROOT, f))) copyFileSync(join(ROOT, f), join(REL, f));
+}
+console.log("✓ Copied install scripts + LICENSE");
+
+// ─── 7. Zip ──────────────────────────────────────────────────────────────────
+const zipName = `synthetic-premiere-mcp-v${V}.zip`;
+const zipPath = join(ROOT, zipName);
+if (existsSync(zipPath)) rmSync(zipPath);
+try {
+  execSync(`powershell -NoProfile -Command "Compress-Archive -Path '${REL}\\*' -DestinationPath '${zipPath}' -Force"`,
+    { stdio: "pipe" });
+  console.log(`✓ Zipped → ${zipName} (${(statSync(zipPath).size / 1024).toFixed(1)} KB)`);
+} catch (e) {
+  console.warn("  ⚠ Zip step skipped:", (e.stderr || e.message || "").toString().slice(0, 120));
+}
+
+console.log(`\n✅ Done. Server protection: ${serverProtected}.`);
+console.log(`   release/  +  ${zipName}\n`);
+
+// ─── helper ──────────────────────────────────────────────────────────────────
+function copyDirSync(src, dest) {
+  mkdirSync(dest, { recursive: true });
+  for (const entry of readdirSync(src)) {
+    const s = join(src, entry), d = join(dest, entry);
+    if (statSync(s).isDirectory()) copyDirSync(s, d);
+    else copyFileSync(s, d);
+  }
+}