davinci-resolve-mcp 2.54.5 → 2.55.0

package/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
 
+## What's New in v2.55.0
+
+Governance for catastrophic Media Pool deletes (exhaustive audit EX2/EX3).
+
+**Behavior change:** `media_pool` `delete_clips`, `delete_folders`, and
+`delete_timelines` now require a confirm token, the same two-step handshake
+`timeline.delete_track` already uses — the first call returns
+`status: "confirmation_required"` with a `confirm_token` and a preview (count +
+names); re-call with `params.confirm_token` to execute. Callers that disable
+gating via the `destructive.require_confirm_token=false` preference are
+unaffected.
+
+- **Fixed** the destructive-action registry listed granular function names
+  (`delete_media_pool_clips`, `move_media_pool_folders`, …) that the compound
+  `media_pool` tool never dispatches, so `is_destructive()` returned False and
+  these catastrophic deletes silently skipped version-on-mutate archiving and
+  change logging. The registry now uses the real compound action strings, so the
+  deletes are archived/logged as intended.
+- **Added** confirm-token gating + previews to the three deletes (EX3). The
+  registry fix also re-enables the existing media-pool change log for them.
+- Live-validated against DaVinci Resolve Studio 21.0.0 (non-destructively): the
+  no-token call returns `confirmation_required` and deletes nothing.
+
 ## What's New in v2.54.5
 
 Reliability + security hardening from the exhaustive reliability audit (Wave A).

package/README.md

@@ -1,6 +1,6 @@
 # DaVinci Resolve MCP Server
 
-[![Version](https://img.shields.io/badge/version-2.54.5-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-2.55.0-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-34%20(341%20full)-blue.svg)](#server-modes)

package/install.py

@@ -35,7 +35,7 @@ from src.utils.update_check import (
 
 # ─── Version ──────────────────────────────────────────────────────────────────
 
-VERSION = "2.54.5"
+VERSION = "2.55.0"
 # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
 # Resolve's scripting bridge loads into newer interpreters on recent builds
 # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "davinci-resolve-mcp",
-  "version": "2.54.5",
+  "version": "2.55.0",
   "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
   "license": "MIT",
   "author": "Samuel Gursky <samgursky@gmail.com>",

package/src/granular/common.py

@@ -80,7 +80,7 @@ if not logging.getLogger().handlers:
         handlers=[logging.StreamHandler()],
     )
 
-VERSION = "2.54.5"
+VERSION = "2.55.0"
 logger = logging.getLogger("davinci-resolve-mcp")
 logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
 logger.info(f"Detected platform: {get_platform()}")

package/src/server.py

@@ -11,7 +11,7 @@ Usage:
     python src/server.py --full       # Start the 341-tool granular server instead
 """
 
-VERSION = "2.54.5"
+VERSION = "2.55.0"
 
 import base64
 import os
@@ -784,6 +784,11 @@ _destructive_hook.register_preference_provider(_destructive_preference_provider)
 _TOKEN_GATED_DESTRUCTIVE_ACTIONS = frozenset({
     ("timeline", "delete_track"),
     ("timeline", "apply_cuts"),
+    # Catastrophic media-pool deletes (EX3): irreversibly destroy clips/folders/
+    # timelines. Gated like delete_track; also archive-on-mutate via the registry.
+    ("media_pool", "delete_clips"),
+    ("media_pool", "delete_folders"),
+    ("media_pool", "delete_timelines"),
     # Phase E edit-engine loops: plan → confirm → execute.
     ("edit_engine", "execute_selects"),
     ("edit_engine", "execute_tighten"),
@@ -14935,7 +14940,20 @@ def media_pool(action: str, params: Optional[Dict[str, Any]] = None) -> Dict[str
             for sub in (root.GetSubFolderList() or []):
                 if sub.GetUniqueId() == fid:
                     folders.append(sub)
-        return {"success": bool(mp.DeleteFolders(folders))} if folders else _err("No folders found")
+        if not folders:
+            return _err("No folders found")
+        if "confirm_token" not in p and "confirmToken" not in p and _confirm_token_required():
+            return _issue_confirm_token(
+                action="media_pool.delete_folders", params=p,
+                preview={"operation": "media_pool.delete_folders",
+                         "warning": "Permanently deletes folders AND every clip they contain.",
+                         "folders_lost": len(folders),
+                         "names": [_clip_name(f) for f in folders][:25]},
+            )
+        blocked = _consume_confirm_token(action="media_pool.delete_folders", params=p)
+        if blocked:
+            return blocked
+        return {"success": bool(mp.DeleteFolders(folders))}
     elif action == "move_folders":
         target = _navigate_folder(mp, p["target_path"])
         if not target:
@@ -15028,7 +15046,20 @@ def media_pool(action: str, params: Optional[Dict[str, Any]] = None) -> Dict[str
             tl = proj.GetTimelineByIndex(i)
             if tl and tl.GetUniqueId() in p["timeline_ids"]:
                 timelines.append(tl)
-        return {"success": bool(mp.DeleteTimelines(timelines))} if timelines else _err("No timelines found")
+        if not timelines:
+            return _err("No timelines found")
+        if "confirm_token" not in p and "confirmToken" not in p and _confirm_token_required():
+            return _issue_confirm_token(
+                action="media_pool.delete_timelines", params=p,
+                preview={"operation": "media_pool.delete_timelines",
+                         "warning": "Permanently deletes timelines.",
+                         "timelines_lost": len(timelines),
+                         "names": [t.GetName() for t in timelines][:25]},
+            )
+        blocked = _consume_confirm_token(action="media_pool.delete_timelines", params=p)
+        if blocked:
+            return blocked
+        return {"success": bool(mp.DeleteTimelines(timelines))}
     elif action == "append_to_timeline":
         if p.get("clip_infos") is not None:
             raw = p["clip_infos"]
@@ -15115,7 +15146,20 @@ def media_pool(action: str, params: Optional[Dict[str, Any]] = None) -> Dict[str
     elif action == "delete_clips":
         clips = [_find_clip(root, cid) for cid in p["clip_ids"]]
         clips = [c for c in clips if c]
-        return {"success": bool(mp.DeleteClips(clips))} if clips else _err("No clips found")
+        if not clips:
+            return _err("No clips found")
+        if "confirm_token" not in p and "confirmToken" not in p and _confirm_token_required():
+            return _issue_confirm_token(
+                action="media_pool.delete_clips", params=p,
+                preview={"operation": "media_pool.delete_clips",
+                         "warning": "Permanently deletes Media Pool clips.",
+                         "clips_lost": len(clips),
+                         "names": [_clip_name(c) for c in clips][:25]},
+            )
+        blocked = _consume_confirm_token(action="media_pool.delete_clips", params=p)
+        if blocked:
+            return blocked
+        return {"success": bool(mp.DeleteClips(clips))}
     elif action == "move_clips":
         target = _navigate_folder(mp, p["target_path"])
         if not target:

package/src/utils/destructive_hook.py

@@ -41,18 +41,17 @@ logger = logging.getLogger("resolve-mcp.destructive-hook")
 # default metric.
 
 DESTRUCTIVE_ACTIONS_BY_TOOL: Dict[str, FrozenSet[str]] = {
+    # Real COMPOUND media_pool action strings (the @destructive_op("media_pool")
+    # wrapper queries is_destructive("media_pool", <compound action>)). The prior
+    # entries used granular function names (delete_media_pool_clips, …) and
+    # media_pool_item names that the compound tool never dispatches, so catastrophic
+    # deletes silently bypassed version-on-mutate archiving (EX2). media_pool_item
+    # link/replace actions are governed separately (its own tool is not yet wrapped).
     "media_pool": frozenset({
-        "delete_media_pool_clips",
-        "delete_media_pool_folders",
+        "delete_clips",
+        "delete_folders",
         "move_clips",
-        "move_media_pool_folders",
-        "replace_clip",
-        "replace_clip_preserve_sub_clip",
-        "link_clip_proxy_media",
-        "unlink_clip_proxy_media",
-        "link_proxy_media",
-        "unlink_proxy_media",
-        "link_clip_full_resolution_media",
+        "move_folders",
         "delete_clip_mattes",
         "delete_timelines",
     }),