davinci-resolve-mcp 4.6.0 → 4.6.2

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
 
+## What's New in v4.6.2 — the granular server's macOS temp-path redirect matches the compound server's
+
+### Fixed
+
+- **`_resolve_safe_dir` had two copies that disagreed on macOS.** ([#235](https://github.com/samuelgursky/davinci-resolve-mcp/pull/235), @Dev-next-gen)
+  The compound server redirects `/tmp`, `/tmp/...`, `/private/tmp` and `/private/tmp/...`
+  to `~/Documents/resolve-stills`, because Resolve's exporters fail silently into them
+  (live-verified 2026-07-03); the granular copy only knew `/var/` and `/private/var/`.
+  Two granular tools reach it with a `/tmp` path: `save_project`'s export fallback
+  stages in `tempfile.gettempdir()`, which is `/tmp` when `TMPDIR` is unset, and
+  `encrypt_dctl` resolves its output folder, so `/tmp` arrives as `/private/tmp`. The
+  granular helper now carries the same Darwin condition, and
+  `tests/test_granular_safe_dir.py` asserts both copies agree on a set of paths. Linux
+  and Windows are untouched.
+
+## What's New in v4.6.1 — copy_grades refuses an all-missing target set before spending a confirmation
+
+### Fixed
+
+- **Raw `timeline_item_color` `copy_grades` could issue a confirmation token for a call
+  that would run `CopyGrades([])`.** ([#234](https://github.com/samuelgursky/davinci-resolve-mcp/pull/234), @Rohitkanithi)
+  When every `target_ids` value failed to resolve on the current timeline, the tool
+  still walked into the confirmation flow, so the caller confirmed a destructive-looking
+  operation that had no valid target and then spent the round trip on a no-op. It now
+  returns a structured `NO_COPY_GRADE_TARGETS` (`invalid_input`) error carrying the
+  missing ids, before any token is issued and without calling Resolve. Mixed sets are
+  unchanged: resolved targets preview, and missing ids are still reported in the
+  preview. The granular `ti_copy_grades` already refused this case through its
+  non-empty and in-range index checks, so the class was confined to the compound
+  server. Guard test in `tests/test_copy_grades_confirmation.py`.
+
 ## What's New in v4.6.0 — a default project archive no longer crashes Resolve 21.1
 
 The archive coverage measured by @legionsound in [#233](https://github.com/samuelgursky/davinci-resolve-mcp/pull/233), plus the offline node-graph relayout work that was sitting unreleased on `main`.

package/README.md

@@ -2,7 +2,7 @@
 
 English | [简体中文](README.zh-CN.md)
 
-[![Version](https://img.shields.io/badge/version-4.6.0-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.6.2-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(387%20full)-blue.svg)](#server-modes)

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 简体中文
 
-[![Version](https://img.shields.io/badge/version-4.6.0-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.6.2-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(387%20full)-blue.svg)](#服务器模式)
@@ -12,7 +12,7 @@
 [![Python](https://img.shields.io/badge/python-3.10+-green.svg)](https://www.python.org/downloads/)
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-> 本翻译对应 v4.6.0 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
+> 本翻译对应 v4.6.2 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
 
 一个 Model Context Protocol (MCP) 服务器，让 AI 助手通过官方脚本 API 控制 DaVinci Resolve Studio（达芬奇）。它提供完整的 API 覆盖，外加带护栏的工作流助手，涵盖剪辑、媒体池整理、渲染设置、审阅标记、调色、Fusion、Fairlight、项目生命周期任务、扩展开发，以及不碰源媒体的媒体分析。
 

package/install.py

@@ -37,7 +37,7 @@ from src.utils.update_check import (
 
 # ─── Version ──────────────────────────────────────────────────────────────────
 
-VERSION = "4.6.0"
+VERSION = "4.6.2"
 # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
 # Resolve's scripting bridge loads into newer interpreters on recent builds
 # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "davinci-resolve-mcp",
-  "version": "4.6.0",
+  "version": "4.6.2",
   "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
   "license": "MIT",
   "author": "Samuel Gursky <samgursky@gmail.com>",

package/src/granular/common.py

@@ -93,7 +93,7 @@ if not logging.getLogger().handlers:
         handlers=[logging.StreamHandler()],
     )
 
-VERSION = "4.6.0"
+VERSION = "4.6.2"
 logger = logging.getLogger("davinci-resolve-mcp")
 logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
 logger.info(f"Detected platform: {get_platform()}")
@@ -342,13 +342,15 @@ class ResolveProxy:
 def _resolve_safe_dir(path):
     """Redirect sandbox/temp paths that Resolve can't access to ~/Desktop/resolve-stills.
 
-    Covers macOS (/var/folders, /private/var), Linux (/tmp, /var/tmp),
-    and Windows (AppData\\Local\\Temp) sandbox temp directories.
+    Covers macOS (/var/folders, /private/var, /tmp, /private/tmp), Linux (/tmp,
+    /var/tmp), and Windows (AppData\\Local\\Temp) sandbox temp directories.
     """
     system_temp = tempfile.gettempdir()
     _is_sandbox = False
     if platform.system() == "Darwin":
-        _is_sandbox = path.startswith("/var/") or path.startswith("/private/var/")
+        # /tmp is a symlink to /private/tmp on macOS; Resolve's exporters fail
+        # silently into both, same as /var/folders (matches src/server.py).
+        _is_sandbox = path.startswith(("/var/", "/private/var/", "/tmp/", "/private/tmp/")) or path in ("/tmp", "/private/tmp")
     elif platform.system() == "Linux":
         _is_sandbox = path.startswith("/tmp") or path.startswith("/var/tmp")
     elif platform.system() == "Windows":

package/src/server.py

@@ -11,7 +11,7 @@ Usage:
     python src/server.py --full       # Start the 377-tool granular server instead
 """
 
-VERSION = "4.6.0"
+VERSION = "4.6.2"
 
 import base64
 import os
@@ -28701,6 +28701,14 @@ def timeline_item_color(action: str, params: Optional[Dict[str, Any]] = None) ->
             targets, missing = _timeline_items_for_grade_copy(tl, target_ids)
         else:
             targets, missing = [], sorted(set(target_ids or []))
+        if not targets:
+            return _err(
+                "copy_grades resolved no target items; nothing would be copied.",
+                code="NO_COPY_GRADE_TARGETS",
+                category="invalid_input",
+                remediation="Pass at least one target_ids value that exists on the current timeline.",
+                state={"target_ids": list(target_ids or []), "missing": missing},
+            )
         if "confirm_token" not in p and "confirmToken" not in p and _confirm_token_required():
             preview = {
                 "operation": "timeline_item_color.copy_grades",