davinci-resolve-mcp 4.7.4 → 4.7.5

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
 
+## What's New in v4.7.5 — the control panel serves on the `::1` loopback it accepts
+
+### Fixed
+
+- **`open_control_panel(host="::1")` was accepted by both loopback guards and could
+  never start.** ([#242](https://github.com/samuelgursky/davinci-resolve-mcp/pull/242), @Dev-next-gen)
+  The panel's `ThreadingHTTPServer` is AF_INET, so binding `("::1", port)` raised
+  `socket.gaierror` and the tool reported "Control panel child exited (rc=1) before
+  serving" — while the panel's own `--host` refusal message listed `::1` as allowed.
+  Behind it, the launch URL, the pidfile URL and the `/api/boot` probe URL were all
+  written `http://::1:<port>/`, which neither a browser nor urllib parses.
+  `make_panel_server()` now uses an AF_INET6 subclass for an IPv6 literal, and the
+  three URLs bracket the host. The Host/Origin gate already accepted `[::1]`; IPv4
+  and `localhost` take the same paths as before. Guard test:
+  `tests/test_control_panel_ipv6_loopback.py` launches the real panel on `::1`
+  through `_open_control_panel`, GETs `/` over IPv6, parses the issued URL, and probes
+  `/api/boot` with the issued token; it skips on a host with no IPv6 loopback and ran
+  (did not skip) on the macOS landing machine.
+
 ## What's New in v4.7.4 — the networked transport can serve a client on another machine
 
 ### Fixed

package/README.md

@@ -2,7 +2,7 @@
 
 English | [简体中文](README.zh-CN.md)
 
-[![Version](https://img.shields.io/badge/version-4.7.4-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.7.5-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#server-modes)

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 简体中文
 
-[![Version](https://img.shields.io/badge/version-4.7.4-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.7.5-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#服务器模式)
@@ -12,7 +12,7 @@
 [![Python](https://img.shields.io/badge/python-3.10+-green.svg)](https://www.python.org/downloads/)
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-> 本翻译对应 v4.7.4 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
+> 本翻译对应 v4.7.5 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
 
 一个 Model Context Protocol (MCP) 服务器，让 AI 助手通过官方脚本 API 控制 DaVinci Resolve Studio（达芬奇）。它提供完整的 API 覆盖，外加带护栏的工作流助手，涵盖剪辑、媒体池整理、渲染设置、审阅标记、调色、Fusion、Fairlight、项目生命周期任务、扩展开发，以及不碰源媒体的媒体分析。
 

package/install.py

@@ -37,7 +37,7 @@ from src.utils.update_check import (
 
 # ─── Version ──────────────────────────────────────────────────────────────────
 
-VERSION = "4.7.4"
+VERSION = "4.7.5"
 # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
 # Resolve's scripting bridge loads into newer interpreters on recent builds
 # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "davinci-resolve-mcp",
-  "version": "4.7.4",
+  "version": "4.7.5",
   "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
   "license": "MIT",
   "author": "Samuel Gursky <samgursky@gmail.com>",

package/src/analysis_dashboard.py

@@ -10,6 +10,7 @@ import json
 import os
 import re
 import secrets
+import socket
 import sqlite3
 import sys
 import threading
@@ -16289,6 +16290,23 @@ def _loopback_host(value: str) -> str:
     return value
 
 
+class _IPv6ThreadingHTTPServer(ThreadingHTTPServer):
+    address_family = socket.AF_INET6
+
+
+def make_panel_server(host: str, port: int, handler: type) -> ThreadingHTTPServer:
+    """Bind the panel. ThreadingHTTPServer is AF_INET, so `::1` needs the v6 class."""
+    bind = host.strip("[]")
+    server_cls = _IPv6ThreadingHTTPServer if ":" in bind else ThreadingHTTPServer
+    return server_cls((bind, port), handler)
+
+
+def panel_url_host(host: str) -> str:
+    """Host as it goes in a URL: an IPv6 literal must be bracketed."""
+    bind = host.strip("[]")
+    return f"[{bind}]" if ":" in bind else bind
+
+
 def parse_args() -> argparse.Namespace:
     parser = argparse.ArgumentParser(description="Run the local Resolve MCP control panel.")
     parser.add_argument("--host", default="127.0.0.1", type=_loopback_host)
@@ -16325,10 +16343,10 @@ def main() -> None:
     state = DashboardState(args.project_name, args.project_id, args.analysis_root)
     Handler.state = state
     Handler.token = resolve_panel_token()
-    server = ThreadingHTTPServer((args.host, args.port), Handler)
+    server = make_panel_server(args.host, args.port, Handler)
     # The token rides in the URL fragment: browsers keep fragments client-side,
     # so it never appears in a request line, proxy log, or Referer.
-    url = f"http://{args.host}:{args.port}/#token={Handler.token}"
+    url = f"http://{panel_url_host(args.host)}:{args.port}/#token={Handler.token}"
     # flush: under --no-open the URL (with its token) is the only handle the
     # operator gets, and a piped/redirected stdout would otherwise hold it back.
     print(f"DaVinci Resolve MCP: {url}", flush=True)

package/src/granular/common.py

@@ -93,7 +93,7 @@ if not logging.getLogger().handlers:
         handlers=[logging.StreamHandler()],
     )
 
-VERSION = "4.7.4"
+VERSION = "4.7.5"
 logger = logging.getLogger("davinci-resolve-mcp")
 logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
 logger.info(f"Detected platform: {get_platform()}")

package/src/server.py

@@ -11,7 +11,7 @@ Usage:
     python src/server.py --full       # Start the 377-tool granular server instead
 """
 
-VERSION = "4.7.4"
+VERSION = "4.7.5"
 
 import base64
 import os
@@ -17491,6 +17491,11 @@ def _control_panel_read_token() -> Optional[str]:
 _CONTROL_PANEL_LOOPBACK_HOSTS = frozenset({"127.0.0.1", "localhost", "::1"})
 
 
+def _control_panel_url_host(host: str) -> str:
+    """Host as it goes in a URL: `::1` must be written `[::1]`."""
+    return f"[{host}]" if ":" in host else host
+
+
 def _control_panel_pid_alive(pid: int) -> bool:
     """Check whether a PID is alive on this OS without killing it."""
     if not pid or pid <= 0:
@@ -17578,7 +17583,7 @@ def _control_panel_probe(host: str, port: int, timeout: float = 1.5,
     """
     import urllib.error
     import urllib.request
-    url = f"http://{host}:{port}/api/boot"
+    url = f"http://{_control_panel_url_host(host)}:{port}/api/boot"
     headers = {"Authorization": f"Bearer {token}"} if token else {}
     try:
         req = urllib.request.Request(url, headers=headers)
@@ -17838,7 +17843,7 @@ def _open_control_panel(p: Dict[str, Any]) -> Dict[str, Any]:
     # Write the pidfile so subsequent calls find it. The token travels in the
     # URL fragment — browsers never send fragments, so it stays out of every
     # request line and log.
-    url = f"http://{host}:{port}/#token={panel_token}"
+    url = f"http://{_control_panel_url_host(host)}:{port}/#token={panel_token}"
     state = {
         "pid": proc.pid,
         "port": port,