davinci-resolve-mcp 4.4.0 → 4.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,56 @@
2
2
 
3
3
  Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
4
4
 
5
+ ## What's New in v4.4.1 — the safety ratchet stops scanning only half the project
6
+
7
+ The write-enforcement ratchet read `src/server.py` and nothing else. The granular
8
+ server's 387 tools were covered by no guard at all — not a risk table, not the
9
+ destructive registry, not the ratchet. That is how `ti_copy_grades` reached
10
+ `TimelineItem.CopyGrades`, which replaces a node graph with no recovery version,
11
+ behind nothing. v4.3.0 fixed that one tool by hand; nothing would have caught the
12
+ next one.
13
+
14
+ ### Added
15
+
16
+ - **`tests/test_write_enforcement_ratchet.py` now scans both servers.** They are
17
+ built differently, so the granular tests claim different things and the module
18
+ docstring says which is which:
19
+
20
+ - **Enforcement.** A granular tool that calls a symbol the ledger marks
21
+ `destroys_prior_work` must be gated — `acknowledge_trap` plus a confirm token —
22
+ and must be hinted destructive, so a client that refuses destructive tools never
23
+ reaches the confirmation at all. `TRAP_METHODS` is derived from `API_TRUTH`
24
+ rather than written out, so flagging a new entry extends this guard without
25
+ anyone remembering that this file exists.
26
+ - **Visibility.** The other **131** destructive-hinted granular tools are frozen
27
+ in a backlog that can only shrink. This does **not** make them safe: the
28
+ granular server has no enforcement hook — `@_destructive_op` wraps an
29
+ `(action, params)` signature granular tools do not have — so there is no
30
+ archive, no safe-mode refusal and no audit row behind any of them. The backlog
31
+ makes the number known, and makes the 132nd fail the suite.
32
+
33
+ ### Fixed
34
+
35
+ - **The first draft of the gate detector could be fooled by dead code.** It looked
36
+ for the string `CONFIRM_TOKENS` in the function body, so deleting the token
37
+ *redemption* while leaving the *issuance* behind still read as gated — and issuing
38
+ a token nobody checks is exactly the regression worth catching. Gating is now
39
+ detected as AST call nodes (`issue` **and** `consume` on `CONFIRM_TOKENS`) plus
40
+ the real `acknowledge_trap` and `confirm_token` parameters.
41
+
42
+ ### Validation
43
+
44
+ - Five regressions re-introduced deliberately, each confirming a guard fires rather
45
+ than passing vacuously: delete the redemption, drop `acknowledge_trap`, drop the
46
+ destructive annotation, add a new ungated destructive tool, and gate a tool still
47
+ on the backlog. **Two of the five passed against the first draft** — the dead-code
48
+ hole above, and a probe that silently did nothing because `ast.unparse` drops
49
+ comments. Both the guard and the probes were fixed until all five failed on
50
+ demand and passed on restore.
51
+ - Full offline suite: **3,644 passed, 1 skipped, 0 failed**, 1,269 subtests. All
52
+ release drift guards green.
53
+ - Tests only; no server behaviour changed and no Resolve call was made.
54
+
5
55
  ## What's New in v4.4.0 — 85 granular tools stop lying to clients about what they do
6
56
 
7
57
  Granular tools infer their MCP safety annotation from the leading verb in the tool
package/README.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  English | [简体中文](README.zh-CN.md)
4
4
 
5
- [![Version](https://img.shields.io/badge/version-4.4.0-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
5
+ [![Version](https://img.shields.io/badge/version-4.4.1-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
6
6
  [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
7
7
  [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
8
8
  [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(387%20full)-blue.svg)](#server-modes)
package/README.zh-CN.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  [English](README.md) | 简体中文
4
4
 
5
- [![Version](https://img.shields.io/badge/version-4.4.0-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
5
+ [![Version](https://img.shields.io/badge/version-4.4.1-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
6
6
  [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
7
7
  [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
8
8
  [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(387%20full)-blue.svg)](#服务器模式)
@@ -12,7 +12,7 @@
12
12
  [![Python](https://img.shields.io/badge/python-3.10+-green.svg)](https://www.python.org/downloads/)
13
13
  [![License](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
14
14
 
15
- > 本翻译对应 v4.4.0 版 README。如与英文原版有出入,以 [英文原版](README.md) 为准。
15
+ > 本翻译对应 v4.4.1 版 README。如与英文原版有出入,以 [英文原版](README.md) 为准。
16
16
 
17
17
  一个 Model Context Protocol (MCP) 服务器,让 AI 助手通过官方脚本 API 控制 DaVinci Resolve Studio(达芬奇)。它提供完整的 API 覆盖,外加带护栏的工作流助手,涵盖剪辑、媒体池整理、渲染设置、审阅标记、调色、Fusion、Fairlight、项目生命周期任务、扩展开发,以及不碰源媒体的媒体分析。
18
18
 
package/install.py CHANGED
@@ -37,7 +37,7 @@ from src.utils.update_check import (
37
37
 
38
38
  # ─── Version ──────────────────────────────────────────────────────────────────
39
39
 
40
- VERSION = "4.4.0"
40
+ VERSION = "4.4.1"
41
41
  # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
42
42
  # Resolve's scripting bridge loads into newer interpreters on recent builds
43
43
  # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "davinci-resolve-mcp",
3
- "version": "4.4.0",
3
+ "version": "4.4.1",
4
4
  "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
5
5
  "license": "MIT",
6
6
  "author": "Samuel Gursky <samgursky@gmail.com>",
@@ -92,7 +92,7 @@ if not logging.getLogger().handlers:
92
92
  handlers=[logging.StreamHandler()],
93
93
  )
94
94
 
95
- VERSION = "4.4.0"
95
+ VERSION = "4.4.1"
96
96
  logger = logging.getLogger("davinci-resolve-mcp")
97
97
  logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
98
98
  logger.info(f"Detected platform: {get_platform()}")
package/src/server.py CHANGED
@@ -11,7 +11,7 @@ Usage:
11
11
  python src/server.py --full # Start the 377-tool granular server instead
12
12
  """
13
13
 
14
- VERSION = "4.4.0"
14
+ VERSION = "4.4.1"
15
15
 
16
16
  import base64
17
17
  import os