davinci-resolve-mcp 4.8.26 → 4.8.28

package/CHANGELOG.md

@@ -2,6 +2,77 @@
 
 Release history for the DaVinci Resolve MCP Server. The latest release is summarized in the root README; older entries live here to keep the README focused.
 
+## What's New in v4.8.28 — ffmpeg can no longer hang on the protocol stream; a cancelled call no longer kills the server
+
+### Fixed
+
+- **ffmpeg could hang indefinitely while reading the server's stdin.** Every
+  ffmpeg/ffprobe analysis pass (`edit_engine plan_silence_ripple`, media
+  analysis, sync detection, sound density and the rest) ran through a
+  runner that let the child inherit the server's stdin. Over stdio that is
+  the JSON-RPC stream. ffmpeg polls stdin for keyboard commands; the `c` in
+  `"jsonrpc"` opens its interactive command prompt, which then waits for a
+  newline while consuming the protocol bytes it reads. Measured with ffmpeg
+  9.0.2: a partial frame arriving mid-pass hung a silencedetect run until it
+  was killed, and the same run with `stdin=subprocess.DEVNULL` finished
+  normally. The runner, and all 29 other call sites under `src/` that spawned
+  a child without `stdin=`, now pass `stdin=subprocess.DEVNULL`. Reported on
+  Windows with the free 21.0.2 bridge (#272); the mechanism was reproduced on
+  macOS, and the Windows build was not available to test.
+- **A tool call cancelled by the client could take the whole session down.**
+  Tool bodies run in a worker thread, and the wait for that thread is
+  shielded from cancellation. When the client cancelled (for example after
+  its own timeout) and the body finished later, its result came back as if
+  nothing had happened. The SDK then tried to answer a request it had already
+  answered "cancelled", and its `Request already responded to` assertion
+  closed the connection. The pending cancellation is now raised once the
+  body returns, which the SDK treats as the cancellation it already
+  acknowledged. The body still runs to completion, so Resolve is never left
+  half-mutated; only its result is discarded.
+
+### Tests
+
+- `tests/test_subprocess_stdin_discipline.py` (new) fails the suite on any
+  `subprocess.run/Popen/call/check_call/check_output` under `src/` that does
+  not pass `stdin=` or `input=`, in any import spelling. With the fix
+  reverted it names all 30 sites (the runner plus the 29 others).
+- `tests/test_threaded_tool_dispatch.py` gains an end-to-end case over the
+  real SDK's in-memory transport: it cancels a call mid-body, lets the body
+  finish, and requires the next call to succeed. With the fix reverted, it
+  fails with the reported `AssertionError`.
+
+### Validation
+
+- No Resolve scripting call changed. Both mechanisms were reproduced before
+  the fix and confirmed fixed after it, on macOS with ffmpeg 9.0.2 and
+  mcp 1.30.0. Not tested on Windows.
+
+## What's New in v4.8.27 — Linux exports no longer redirected away from /tmp-named folders
+
+### Fixed
+
+- **On Linux, an output folder whose name merely began with `/tmp` or
+  `/var/tmp` was silently replaced.** `_resolve_safe_dir` tested
+  `path.startswith("/tmp")`, which is also true of `/tmpdata`, `/tmpfiles`,
+  `/tmp-scratch` and `/var/tmpdata`. Each was treated as a temp directory and
+  swapped for `~/Documents/resolve-stills`, and
+  `gallery_stills(grab_and_export)` then reported that folder as if it were the
+  one asked for. The same helper picks the output folder for `encrypt_dctl` and
+  the granular `save_project` export fallback. The Linux branch now compares by
+  path segment, as the macOS branch already did; `/tmp`, `/tmp/…`, `/var/tmp`
+  and `/var/tmp/…` still redirect. Both copies of the helper (`src/server.py`
+  and `src/granular/common.py`) are fixed. Thanks to @Dev-next-gen (#271).
+
+### Tests
+
+- `tests/test_granular_safe_dir.py` gains a Linux class covering both copies:
+  real temp paths still redirect, sibling names are left alone.
+
+### Validation
+
+- Path classification only, decided before any Resolve call; no Resolve
+  behavior changed. Live test not required.
+
 ## What's New in v4.8.26 — two dead layout-preset helpers removed
 
 ### Removed

package/README.md

@@ -2,7 +2,7 @@
 
 English | [简体中文](README.zh-CN.md)
 
-[![Version](https://img.shields.io/badge/version-4.8.26-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.8.28-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#server-modes)

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 简体中文
 
-[![Version](https://img.shields.io/badge/version-4.8.26-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
+[![Version](https://img.shields.io/badge/version-4.8.28-blue.svg)](https://github.com/samuelgursky/davinci-resolve-mcp/releases)
 [![npm](https://img.shields.io/npm/v/davinci-resolve-mcp.svg?label=npm&color=CB3837)](https://www.npmjs.com/package/davinci-resolve-mcp)
 [![API Coverage](https://img.shields.io/badge/API%20Coverage-100%25-brightgreen.svg)](docs/reference/api-coverage.md)
 [![Tools](https://img.shields.io/badge/MCP%20Tools-37%20(389%20full)-blue.svg)](#服务器模式)
@@ -12,7 +12,7 @@
 [![Python](https://img.shields.io/badge/python-3.10+-green.svg)](https://www.python.org/downloads/)
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-> 本翻译对应 v4.8.26 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
+> 本翻译对应 v4.8.28 版 README。如与英文原版有出入，以 [英文原版](README.md) 为准。
 
 一个 Model Context Protocol (MCP) 服务器，让 AI 助手通过官方脚本 API 控制 DaVinci Resolve Studio（达芬奇）。它提供完整的 API 覆盖，外加带护栏的工作流助手，涵盖剪辑、媒体池整理、渲染设置、审阅标记、调色、Fusion、Fairlight、项目生命周期任务、扩展开发，以及不碰源媒体的媒体分析。
 

package/install.py

@@ -37,7 +37,7 @@ from src.utils.update_check import (
 
 # ─── Version ──────────────────────────────────────────────────────────────────
 
-VERSION = "4.8.26"
+VERSION = "4.8.28"
 # Only hard floor: mcp[cli] requires Python 3.10+. There is no upper bound —
 # Resolve's scripting bridge loads into newer interpreters on recent builds
 # (Python 3.14 verified against Resolve Studio 20.3.2). Older Resolve builds

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "davinci-resolve-mcp",
-  "version": "4.8.26",
+  "version": "4.8.28",
   "description": "NPM bootstrapper for the DaVinci Resolve MCP Server.",
   "license": "MIT",
   "author": "Samuel Gursky <samgursky@gmail.com>",

package/src/analysis_dashboard.py

@@ -14738,6 +14738,7 @@ def _launch_claude_code_terminal() -> Dict[str, Any]:
     try:
         check = subprocess.run(
             ["osascript", "-e", 'application "iTerm" is running'],
+            stdin=subprocess.DEVNULL,
             capture_output=True, text=True, encoding="utf-8", errors="replace",
             timeout=8,
         )
@@ -14762,6 +14763,7 @@ def _launch_claude_code_terminal() -> Dict[str, Any]:
     try:
         proc = subprocess.run(
             ["osascript", "-e", script],
+            stdin=subprocess.DEVNULL,
             capture_output=True, text=True, encoding="utf-8", errors="replace",
             timeout=15,
         )
@@ -14794,6 +14796,7 @@ def _native_directory_picker(initial: Optional[str] = None) -> Dict[str, Any]:
             import subprocess
             proc = subprocess.run(
                 ["osascript", "-e", script],
+                stdin=subprocess.DEVNULL,
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
                 timeout=120,
             )

package/src/granular/common.py

@@ -91,7 +91,7 @@ if not logging.getLogger().handlers:
         handlers=[logging.StreamHandler()],
     )
 
-VERSION = "4.8.26"
+VERSION = "4.8.28"
 logger = logging.getLogger("davinci-resolve-mcp")
 logger.info(f"Starting DaVinci Resolve MCP Server v{VERSION}")
 logger.info(f"Detected platform: {get_platform()}")
@@ -377,7 +377,10 @@ def _resolve_safe_dir(path):
         # silently into both, same as /var/folders (matches src/server.py).
         _is_sandbox = path.startswith(("/var/", "/private/var/", "/tmp/", "/private/tmp/")) or path in ("/tmp", "/private/tmp")
     elif platform.system() == "Linux":
-        _is_sandbox = path.startswith("/tmp") or path.startswith("/var/tmp")
+        # By segment, not by character prefix (matches src/server.py): a sibling
+        # of /tmp whose name merely begins with it — /tmpfiles, /tmp-scratch,
+        # /var/tmpdata — cleared `startswith("/tmp")` and was redirected.
+        _is_sandbox = path.startswith(("/tmp/", "/var/tmp/")) or path in ("/tmp", "/var/tmp")
     elif platform.system() == "Windows":
         try:
             _is_sandbox = os.path.commonpath([os.path.abspath(path), os.path.abspath(system_temp)]) == os.path.abspath(system_temp)

package/src/server.py

@@ -11,7 +11,7 @@ Usage:
     python src/server.py --full       # Start the 377-tool granular server instead
 """
 
-VERSION = "4.8.26"
+VERSION = "4.8.28"
 
 import base64
 import os
@@ -1421,7 +1421,13 @@ def _resolve_safe_dir(path):
         # silently fails into both (live-verified 2026-07-03), same as /var/folders.
         _is_sandbox = path.startswith(("/var/", "/private/var/", "/tmp/", "/private/tmp/")) or path in ("/tmp", "/private/tmp")
     elif platform.system() == "Linux":
-        _is_sandbox = path.startswith("/tmp") or path.startswith("/var/tmp")
+        # By segment, not by character prefix: `startswith("/tmp")` also matched a
+        # sibling of /tmp whose name merely begins with it — /tmpfiles,
+        # /tmp-scratch, /var/tmpdata — so an export the caller aimed at one of
+        # those was redirected away from it. The Darwin branch already compares
+        # this way, and `/tmpfiles/out` is one of the paths
+        # tests/test_granular_safe_dir.py asserts is left alone.
+        _is_sandbox = path.startswith(("/tmp/", "/var/tmp/")) or path in ("/tmp", "/var/tmp")
     elif platform.system() == "Windows":
         # Check if path is under the system temp directory (e.g. AppData\Local\Temp)
         try:
@@ -1913,7 +1919,8 @@ def _activate_resolve_window() -> Dict[str, Any]:
             proc = subprocess.run(
                 ["osascript", "-e", 'tell application "DaVinci Resolve" to activate'],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "activated": proc.returncode == 0,
@@ -1927,7 +1934,8 @@ def _activate_resolve_window() -> Dict[str, Any]:
                  "$s = New-Object -ComObject WScript.Shell; "
                  "$null = $s.AppActivate('DaVinci Resolve')"],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "activated": proc.returncode == 0,
@@ -1940,7 +1948,8 @@ def _activate_resolve_window() -> Dict[str, Any]:
             proc = subprocess.run(
                 ["wmctrl", "-a", "DaVinci Resolve"],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "activated": proc.returncode == 0,
@@ -1951,7 +1960,8 @@ def _activate_resolve_window() -> Dict[str, Any]:
             proc = subprocess.run(
                 ["xdotool", "search", "--name", "DaVinci Resolve", "windowactivate"],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "activated": proc.returncode == 0,
@@ -1983,7 +1993,8 @@ def _send_resolve_keystroke_go_to_mark_in() -> Dict[str, Any]:
             proc = subprocess.run(
                 ["osascript", "-e", script],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "sent": proc.returncode == 0,
@@ -1999,7 +2010,8 @@ def _send_resolve_keystroke_go_to_mark_in() -> Dict[str, Any]:
                  "Start-Sleep -Milliseconds 150; "
                  "[System.Windows.Forms.SendKeys]::SendWait('+i')"],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {
                 "sent": proc.returncode == 0,
@@ -2013,7 +2025,8 @@ def _send_resolve_keystroke_go_to_mark_in() -> Dict[str, Any]:
             proc = subprocess.run(
                 ["xdotool", "search", "--name", "DaVinci Resolve", "key", "--window", "%@", "shift+i"],
                 capture_output=True, text=True, encoding="utf-8", errors="replace",
-                timeout=5, stdin=subprocess.DEVNULL,
+                timeout=5,
+                stdin=subprocess.DEVNULL,
             )
             return {"sent": proc.returncode == 0, "platform": "linux", "tool": "xdotool", "shortcut": "Shift+I"}
         return {"sent": False, "platform": sys.platform, "note": "no key-send tool found"}
@@ -13881,7 +13894,8 @@ def _ffprobe_media_summary(path: str) -> Optional[Dict[str, Any]]:
              "format=duration,size:stream=codec_type,codec_name",
              "-of", "json", path],
             capture_output=True, encoding="utf-8", errors="replace",
-            timeout=20, stdin=subprocess.DEVNULL,
+            timeout=20,
+            stdin=subprocess.DEVNULL,
         )
     except Exception:
         return None
@@ -14842,7 +14856,7 @@ def _ffmpeg_scale_to_bytes(src_path: str, max_width: Optional[int], out_format:
             # -2 keeps the height even (required by some encoders) and preserves AR.
             args += ["-vf", f"scale='min({int(max_width)},iw)':-2:flags=lanczos"]
         args += ["-frames:v", "1", tmp_out]
-        proc = subprocess.run(args, capture_output=True, timeout=120)
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, capture_output=True, timeout=120)
         if proc.returncode != 0:
             return None, (proc.stderr.decode("utf-8", "replace").strip() or "ffmpeg failed")[:400]
         with open(tmp_out, "rb") as handle:
@@ -33357,14 +33371,16 @@ def _install_threaded_tool_dispatch(fastmcp) -> int:
     to a worker thread keeps the event loop servicing the transport. Bodies are
     serialized on _bridge_lock so the single-threaded Resolve bridge is never
     entered concurrently. A body that outlives a client cancellation runs to
-    completion (the bridge is never left half-mutated) still holding the lock.
+    completion (the bridge is never left half-mutated) still holding the lock,
+    and its result is then discarded rather than sent.
 
     Couples to mcp SDK private attrs (ToolManager._tools, Tool.fn /
-    Tool.is_async; verified on mcp 1.27). Best-effort: if that shape changes,
-    leave the tools as-is, falling back to the current inline behavior.
+    Tool.is_async; verified on mcp 1.27 and 1.30). Best-effort: if that shape
+    changes, leave the tools as-is, falling back to the current inline behavior.
     """
     import functools
     import anyio
+    from anyio.lowlevel import checkpoint_if_cancelled
 
     manager = getattr(fastmcp, "_tool_manager", None)
     tools = getattr(manager, "_tools", None)
@@ -33377,7 +33393,18 @@ def _install_threaded_tool_dispatch(fastmcp) -> int:
             def call():
                 with _bridge_lock:
                     return fn(**kwargs)
-            return await anyio.to_thread.run_sync(call)
+            try:
+                return await anyio.to_thread.run_sync(call)
+            finally:
+                # run_sync shields its wait, so a client cancellation that lands
+                # while the body runs is not raised there: the result comes back
+                # as if nothing happened, the SDK tries to answer a request it
+                # already answered "cancelled", and its "Request already
+                # responded to" assert takes the whole session down (#272).
+                # Raise the pending cancellation instead — the SDK expects it
+                # and suppresses the duplicate response. Also covers a body
+                # that raised after the cancel.
+                await checkpoint_if_cancelled()
         return run_off_thread
 
     wrapped = 0

package/src/utils/app_control.py

@@ -32,6 +32,7 @@ def _run_app_command(
     try:
         result = subprocess.run(
             cmd,
+            stdin=subprocess.DEVNULL,
             check=False,
             capture_output=True,
             text=True,
@@ -258,11 +259,11 @@ def restart_resolve_app(resolve_obj, wait_seconds: int = 5) -> bool:
         logger.info("Attempting to start Resolve")
         
         if platform.system().lower() == 'darwin':
-            subprocess.Popen(['open', resolve_path])
+            subprocess.Popen(['open', resolve_path], stdin=subprocess.DEVNULL)
         elif platform.system().lower() == 'windows':
-            subprocess.Popen([resolve_path])
+            subprocess.Popen([resolve_path], stdin=subprocess.DEVNULL)
         elif platform.system().lower() == 'linux':
-            subprocess.Popen([resolve_path])
+            subprocess.Popen([resolve_path], stdin=subprocess.DEVNULL)
         
         return True
     except Exception as e:

package/src/utils/audio_fairlight_live_probe.py

@@ -48,7 +48,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True, timeout=120)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True, timeout=120)
 
 
 def _make_synthetic_media(work_dir: Path) -> Dict[str, Path]:

package/src/utils/color_grade_live_probe.py

@@ -91,7 +91,7 @@ def _call_confirmed(tool, action: str, params: Dict[str, Any]) -> Dict[str, Any]
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True)
 
 
 def _make_synthetic_video(work_dir: Path) -> Path:

package/src/utils/embeddings.py

@@ -358,7 +358,7 @@ def _extract_audio_window(file_path: str, start_seconds: float, duration_seconds
         "-f", "f32le", "-",
     ]
     try:
-        proc = subprocess.run(command, capture_output=True, timeout=120, check=False)
+        proc = subprocess.run(command, stdin=subprocess.DEVNULL, capture_output=True, timeout=120, check=False)
     except (OSError, subprocess.TimeoutExpired):
         return None
     if proc.returncode != 0 or not proc.stdout:

package/src/utils/fusion_composition_live_probe.py

@@ -60,7 +60,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True)
 
 
 def _make_synthetic_video(work_dir: Path) -> Path:

package/src/utils/image_qc.py

@@ -170,7 +170,7 @@ def _decode_frame(
         "-f", "rawvideo", "-",
     ]
     try:
-        proc = subprocess.run(args, capture_output=True, timeout=120, check=False)
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, capture_output=True, timeout=120, check=False)
     except (subprocess.TimeoutExpired, OSError) as exc:
         logger.debug("frame decode failed for %s: %s", path, exc)
         return None
@@ -189,7 +189,7 @@ def _probe_color_transfer(path: str) -> Optional[str]:
         "-show_entries", "stream=color_transfer", "-of", "default=nw=1:nk=1", path,
     ]
     try:
-        proc = subprocess.run(args, capture_output=True, text=True, encoding="utf-8",
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, capture_output=True, text=True, encoding="utf-8",
                               errors="replace", timeout=30, check=False)
     except (subprocess.TimeoutExpired, OSError):
         return None

package/src/utils/media_analysis.py

@@ -2489,6 +2489,7 @@ def _kill_process_tree(pid: int) -> None:
         if os.name == "nt":
             subprocess.run(
                 ["taskkill", "/F", "/T", "/PID", str(pid)],
+                stdin=subprocess.DEVNULL,
                 capture_output=True,
                 check=False,
             )
@@ -2535,6 +2536,11 @@ def _run_command(
     try:
         proc = subprocess.Popen(
             args,
+            # Never the server's stdin: under stdio that is the JSON-RPC stream,
+            # and ffmpeg reads it as keyboard commands. The "c" in "jsonrpc"
+            # opens ffmpeg's command prompt, which then blocks waiting for a
+            # newline while eating protocol bytes (#272).
+            stdin=subprocess.DEVNULL,
             stdout=subprocess.PIPE,
             stderr=subprocess.PIPE,
             env=env,
@@ -3473,7 +3479,7 @@ def _raw_frame(path: str, time_seconds: float, width: int = 96, height: int = 54
         "-",
     ]
     try:
-        proc = subprocess.run(args, capture_output=True, timeout=180, check=False)
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, capture_output=True, timeout=180, check=False)
     except (subprocess.TimeoutExpired, OSError):
         return None
     expected = width * height * 3

package/src/utils/media_pool_ingest_live_probe.py

@@ -78,7 +78,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True)
 
 
 def _make_synthetic_assets(work_dir: Path) -> Dict[str, Path]:

package/src/utils/prebalance.py

@@ -208,7 +208,7 @@ def measure_frame_levels(media_path: str, at_seconds: float = 0.0) -> Dict[str,
         "-vf", f"scale={width}:{height}", "-f", "rawvideo", "-pix_fmt", "rgb24", "-",
     ]
     try:
-        proc = subprocess.run(cmd, capture_output=True, timeout=30)
+        proc = subprocess.run(cmd, stdin=subprocess.DEVNULL, capture_output=True, timeout=30)
     except (subprocess.SubprocessError, OSError) as exc:
         return {"success": False, "error": f"frame extraction failed: {exc}"}
     expected = width * height * 3

package/src/utils/private_state.py

@@ -36,6 +36,7 @@ def _restrict_windows_acl(path: str) -> None:
     try:
         subprocess.run(
             ["icacls", path, "/inheritance:r", "/grant:r", f"{user}:F"],
+            stdin=subprocess.DEVNULL,
             capture_output=True, timeout=5, check=False,
         )
     except (OSError, subprocess.TimeoutExpired):

package/src/utils/render_deliver_live_probe.py

@@ -60,7 +60,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True, timeout=120)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True, timeout=120)
 
 
 def _make_synthetic_video(work_dir: Path) -> Path:

package/src/utils/resolve_bridge.py

@@ -219,6 +219,7 @@ def _process_name(pid: int) -> str:
 
         out = subprocess.run(
             ["ps", "-p", str(pid), "-o", "comm="],
+            stdin=subprocess.DEVNULL,
             capture_output=True, text=True, encoding="utf-8", errors="replace",
             timeout=5, check=False,
         )

package/src/utils/resolve_runtime.py

@@ -72,7 +72,7 @@ def _run_ps(columns: str) -> Optional[List[str]]:
     """
     try:
         out = subprocess.run(
-            ["ps", "-Awwo", columns], capture_output=True, text=True,
+            ["ps", "-Awwo", columns], stdin=subprocess.DEVNULL, capture_output=True, text=True,
             encoding="utf-8", errors="replace", timeout=10, check=False,
         )
     except Exception:  # pragma: no cover - defensive; an unknown answer is None
@@ -211,7 +211,7 @@ def _process_table() -> Optional[List[Dict[str, Optional[str]]]]:
         for reader, parse in WINDOWS_PROCESS_READERS:
             try:
                 out = subprocess.run(
-                    reader, capture_output=True, text=True, encoding="utf-8",
+                    reader, stdin=subprocess.DEVNULL, capture_output=True, text=True, encoding="utf-8",
                     errors="replace", timeout=10, check=False,
                 )
             except Exception:

package/src/utils/review_annotation_live_probe.py

@@ -60,7 +60,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True, timeout=120)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True, timeout=120)
 
 
 def _make_synthetic_video(work_dir: Path) -> Path:

package/src/utils/sound_density.py

@@ -221,7 +221,7 @@ def measure_track_levels(
         if duration_seconds:
             cmd[4:4] = ["-t", str(duration_seconds)]
         try:
-            proc = subprocess.run(cmd, capture_output=True, timeout=120)
+            proc = subprocess.run(cmd, stdin=subprocess.DEVNULL, capture_output=True, timeout=120)
         except (subprocess.SubprocessError, OSError) as exc:
             return {"success": False, "error": f"decode failed for {name}: {exc}"}
         if proc.returncode != 0 or not proc.stdout:

package/src/utils/sync_detection.py

@@ -160,7 +160,7 @@ def sync_event_install_guidance(capabilities: Optional[Dict[str, Any]] = None) -
 
 def _run_json(args: List[str], timeout: int) -> Tuple[int, Dict[str, Any], str]:
     try:
-        proc = subprocess.run(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout)
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout)
     except subprocess.TimeoutExpired:
         return 124, {}, f"Command timed out after {timeout}s"
     except OSError as exc:
@@ -397,7 +397,7 @@ def _decode_audio_window(
         "-",
     ])
     try:
-        proc = subprocess.run(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout)
+        proc = subprocess.run(args, stdin=subprocess.DEVNULL, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=timeout)
     except subprocess.TimeoutExpired:
         return None, f"ffmpeg audio decode timed out after {timeout}s"
     except OSError as exc:

package/src/utils/timeline_conform_live_probe.py

@@ -54,7 +54,7 @@ def _record_tool_result(
 
 
 def _run_ffmpeg(args: list[str]) -> None:
-    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], check=True)
+    subprocess.run(["ffmpeg", "-hide_banner", "-loglevel", "error", *args], stdin=subprocess.DEVNULL, check=True)
 
 
 def _make_synthetic_video(work_dir: Path, name: str, source: str, frequency: int) -> Path:

package/src/utils/timeline_kernel_live_probe.py

@@ -164,6 +164,7 @@ def _make_synthetic_media(work_dir: Path) -> Path:
             "-y",
             str(media_path),
         ],
+        stdin=subprocess.DEVNULL,
         check=True,
     )
     return media_path