davinci-resolve-mcp 4.8.12 → 4.8.14

package/CHANGELOG.md

@@ -2,6 +2,50 @@
 
 Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
 
+## What's New in v4.8.14 — both dependency trees read zero advisories again
+
+### Changed
+
+- **`npm audit` read eight advisories across the two manifests; all eight clear
+  inside the ranges already declared.** Root (6: 3 high, 3 moderate):
+  `@hono/node-server` 1.19.14 -> 2.1.1, `hono` 4.12.26 -> 4.13.8, `adm-zip`
+  0.6.0 -> 0.6.1, `fast-uri` 3.1.2 -> 3.1.8, `ip-address` 10.2.0 -> 10.7.2,
+  `qs` 6.15.2 -> 6.16.0. `resolve-advanced` (2: 1 high, 1 moderate): `adm-zip`
+  and `qs` to the same versions, applied with `--package-lock-only` because
+  that package has no `node_modules` on this machine. Only the lockfiles move;
+  neither `package.json` needed a new range.
+- **The advisories v2.212.4 had to park are among them.** That entry recorded
+  five transitive ones — hono, @hono/node-server, ajv -> fast-uri,
+  express-rate-limit -> ip-address, express -> qs — as clearing "only when the
+  SDK bumps its own dependencies". The SDK has since done so, and the two
+  adm-zip advisories, which are a direct dependency, clear with 0.6.1.
+
+### Validation
+
+- Full offline Python suite under both runners, macOS, Python 3.10:
+  `python -m unittest discover -s tests -t .` and `python -m pytest tests -q`.
+- `npm ci` from the root lockfile, `npm run smoke` (reports 4.8.14) and
+  `npm run pack:check`; `npm audit` reports zero on both manifests afterwards.
+- No runtime code changed, so no live Resolve check was needed. The
+  `resolve-advanced` Node suite was not run: its dependencies are not installed
+  here, and its lockfile change is the same two packages as the root's.
+
+## What's New in v4.8.13 — `include_linked="false"` no longer relinks
+
+### Fixed
+
+- **`_normalize_include_linked` handled the boolean `False` but not the string
+  spellings.** ([#262](https://github.com/samuelgursky/davinci-resolve-mcp/pull/262), @Dev-next-gen)
+  A caller sending `include_linked="false"` (or `"no"`, `"0"`, `"off"`, `"none"`) to a
+  timeline move got a set containing the literal string instead of an empty set;
+  `bool({"false"})` is `True`, so the `relink` flag defaulted to on — the opposite of
+  what was asked. The twin of the `ripple`, `overwrite`, permission-flag,
+  `allow_non_mcp_name` and `allow_partial_item_delete` fixes, in the one normaliser
+  that parses its own strings. The false spellings now return an empty set; `True`,
+  `False`, `"all"`, type lists and real lists are unchanged. Guard test: seven
+  subtests in `tests/test_append_clip_infos_result_handling.py`, all failing on the
+  previous code.
+
 ## What's New in v4.8.12 — the offline suite no longer writes traces, reports or update state into `logs/`
 
 Test-harness fix only. No tool, action, or Resolve behaviour changed.

package/README.md

@@ -2,7 +2,7 @@
 
 English | [简体中文](README.zh-CN.md)
 
-[![Version](https://img.shields.io/badge/version-4.8.12-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.8.14-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#server-modes)

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 简体中文
 
-[![Version](https://img.shields.io/badge/version-4.8.12-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.8.14-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#服务器模式)
@@ -12,7 +12,7 @@
 [![Python](https://img.shields.io/badge/python-3.10+-green.svg)](https://www.python.org/downloads/)
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-> 本翻译对应 v4.8.12 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
+> 本翻译对应 v4.8.14 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
 
 一个 Model Context Protocol (MCP) 服务器，让 AI 助手通过官方脚本 API 控制 DaVinci Resolve Studio（达芬奇）。它提供完整的 API 覆盖，外加带护栏的工作流助手，涵盖剪辑、媒体池整理、渲染设置、审阅标记、调色、Fusion、Fairlight、项目生命周期任务、扩展开发，以及不碰源媒体的媒体分析。
 

package/install.py

@@ -37,7 +37,7 @@ from src.utils.update_check import (
 
 # ─── Version ──────────────────────────────────────────────────────────────────
 
-VERSION = "4.8.12"
+VERSION = "4.8.14"
 # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
 # Resolve's scripting bridge loads into newer interpreters on recent builds
 # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "davinci-resolve-mcp",
-  "version": "4.8.12",
+  "version": "4.8.14",
   "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
   "license": "MIT",
   "author": "Samuel Gursky <samgursky@gmail.com>",

package/src/granular/common.py

@@ -93,7 +93,7 @@ if not logging.getLogger().handlers:
         handlers=[logging.StreamHandler()],
     )
 
-VERSION = "4.8.12"
+VERSION = "4.8.14"
 logger = logging.getLogger("davinci-resolve-mcp")
 logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
 logger.info(f"Detected platform: {get_platform()}")

package/src/server.py

@@ -11,7 +11,7 @@ Usage:
     python src/server.py --full       # Start the 377-tool granular server instead
 """
 
-VERSION = "4.8.12"
+VERSION = "4.8.14"
 
 import base64
 import os
@@ -4705,6 +4705,8 @@ def _normalize_include_linked(raw):
         lowered = raw.strip().lower()
         if lowered in {"all", "true", "yes"}:
             return {"video", "audio"}
+        if lowered in {"false", "no", "0", "off", "none"}:
+            return set()
         return {part.strip().lower() for part in lowered.split(",") if part.strip()}
     if isinstance(raw, list):
         return {str(part).strip().lower() for part in raw if str(part).strip()}