premiere-pro-mcp 1.16.3 → 1.17.0

package/CHANGELOG.md

@@ -6,6 +6,79 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.17.0] - 2026-09-21
+
+### Added
+
+- `paste_clip_attributes` copies a source clip's effect stack, values, and
+  keyframes onto a target clip with per-property readback. Masks and a differing
+  Blend Mode are reported as not copied because no documented scripting surface
+  exposes them. (#595)
+- `compute_mask_fit_motion` computes Motion Scale/Position that place a still's
+  subject inside an existing Rounded Crop, Crop, or similar mask. Inspect only.
+  (#594)
+- `set_clip_duration` sets a placed timeline clip's duration or absolute end by
+  moving only `TrackItem.end`, so still images can be extended past their import
+  length. It refuses overlaps with the next clip, guards effect keyframes when
+  shortening, reads start/end back, and restores the original end when Premiere
+  clamps the write. (#592)
+
+### Changed
+
+- Clip speed messaging is consistent across `speed_change`, `set_clip_speed_qe`,
+  `set_clip_properties`, agent instructions, docs, and skills: documented
+  ExtendScript and UXP (through 26.3) expose only speed getters, the QE setter
+  stays unused, and `set_clip_duration` is the supported timing alternative. (#593)
+
+### Fixed
+
+- `set_target_track` targets exclusively by default (`exclusive: false` keeps
+  other tracks targeted) and reads every track back; `get_target_tracks` lists
+  every targeted track and unreadable tracks. (#587)
+- `create_bars_and_tone` returns the created item's name, node ID, and tree path.
+  (#588)
+- `get_bin_contents` resolves nested bins by node ID with guarded child access and
+  clean errors instead of a raw TypeError. (#589)
+- `manage_timeline_source_label_uxp` accepts `sequence_id` and resolves it by GUID,
+  failing closed instead of targeting the active sequence. (#590)
+- `create_bin` honors `parent_bin_id` and reads back the new bin's parent. (#591)
+- Windows bridge-directory ACL checks ignore capability and app-container SIDs
+  (`S-1-15-*`), so the default location under `%LOCALAPPDATA%` no longer fails at
+  startup; the ancestry error names each offending path and SID. (#581)
+
+## [1.16.4] - 2026-09-20
+
+### Added
+
+- Claude Fable 5.1 client workflow guidance for Cursor and other compatible MCP
+  clients, covering model selection, data-retention opt-in, tool discovery, and
+  serialized Premiere verification. (#576)
+- Named Premiere metadata field inspect and update through existing CEP and UXP
+  tools, with field readback instead of requiring complete packet dumps. (#577)
+
+### Changed
+
+- Shared `AGENTS.md` as the canonical repo map for IDE and coding-agent stubs,
+  and pin client CEP install commands to the published package. (#582)
+
+### Fixed
+
+- `set_item_in_out` and `set_source_in_out` pass seconds, not ticks, to
+  `ProjectItem.setInPoint`/`setOutPoint` and verify tick readback. A Source
+  Monitor readback mismatch restores original marks when possible and otherwise
+  reports a partial state. The ExtendScript reference documents those setter
+  arguments as seconds. (#579)
+- CEP `create_subsequence` verifies the new sequence without ES5
+  `Array.indexOf`, which ExtendScript does not provide. (#579)
+- `ripple_delete` now fails closed when QE sync-lock state cannot be read,
+  instead of omitting neighbours and reporting a verified ripple. (#578)
+- Still-image `capture_frame` / `export_frame` AME fallback restores sequence
+  in/out only after those marks can be read, so a failed restore cannot leave
+  the sequence pinned to one frame. (#580)
+
+Automated checks do not establish licensed Premiere or After Effects playback or
+rendered-output verification.
+
 ## [1.16.3] - 2026-09-18
 
 ### Changed

package/README.md

@@ -12,7 +12,7 @@ Free, MIT licensed, local-first, and published to npm as [`premiere-pro-mcp`](ht
 
 [Website](https://premiere-pro-mcp.com/) · [Recorded demo](https://premiere-pro-mcp.com/demo/) · [Compare servers](https://premiere-pro-mcp.com/compare/) · [Setup guides](https://premiere-pro-mcp.com/blog/how-to-set-up-premiere-pro-mcp/) · [Search tools](https://premiere-pro-mcp.com/tools/) · [Troubleshooting](https://premiere-pro-mcp.com/docs/troubleshooting/) · [Release facts](https://premiere-pro-mcp.com/facts/)
 
-Development source: 381 core tools across 56 modules, 4 resources, and 18 guided workflows. A connected UXP host adds 95 capability-gated tools.
+Development source: 384 core tools across 57 modules, 4 resources, and 19 guided workflows. A connected UXP host adds 95 capability-gated tools.
 
 The [completed AE render handoff](docs/after-effects-render-handoff.md) previews and confirms importing one finished render into an existing Premiere bin, with host and file rechecks and an import receipt.
 
@@ -50,7 +50,7 @@ The [completed AE render handoff](docs/after-effects-render-handoff.md) previews
   - [Configure your MCP client](#3-configure-your-mcp-client)
   - [Verify the bridge in Premiere Pro](#4-verify-the-bridge-in-premiere-pro)
 - [Clients and capability coverage](#codex-plugin)
-  - [Codex plugin](#codex-plugin) · [Claude](#claude) · [GPT-6 Astra tool discovery](#gpt-6-astra-and-agent-tool-discovery)
+  - [Codex plugin](#codex-plugin) · [Claude](#claude) · [GPT-6 Astra tool discovery](#gpt-6-astra-and-agent-tool-discovery) · [Claude Fable 5.1](#claude-fable-51)
   - [Windows and macOS capability coverage](#windows-and-macos-capability-coverage)
   - [After Effects MOGRT studio](#after-effects-mogrt-studio)
   - [Collaboration and AI feature boundaries](#collaboration-and-ai-feature-boundaries)
@@ -104,13 +104,13 @@ and repository before configuring a client. The new
 VS Code, or Codex settings that point directly to this installation. It is a
 feature included in v1.15.1 and later.
 
-The current source exposes 381 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 95 documented, capability-gated tools without replacing the production CEP bridge.
+The current source exposes 384 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 95 documented, capability-gated tools without replacing the production CEP bridge.
 
 <a id="latest-release"></a>
 
-### Latest release: 1.16.3
+### Latest release: 1.17.0
 
-The published v1.16.2 npm artifact contains **381 core tools**, 379 in its default profile,
+The published v1.16.4 npm artifact contains **381 core tools**, 379 in its default profile,
 and 474 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
@@ -160,7 +160,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.16.3 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.16.3)
+See the [v1.17.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.17.0)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -208,7 +208,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.16.3
+> npm i -g premiere-pro-mcp@1.17.0
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -216,7 +216,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.16.3` |
+> | Version | `1.17.0` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -229,9 +229,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.16.3/premiere-pro-mcp-1.16.3.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.17.0/premiere-pro-mcp-1.17.0.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.16.3/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.17.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -488,6 +488,9 @@ Add to `.cursor/mcp.json` in your project or global config:
 }
 ```
 
+After the server is enabled, select Claude Fable 5.1 in Cursor when you want a
+longer-horizon session. See [Claude Fable 5.1 workflows](docs/claude-fable-5-1.md).
+
 </details>
 
 <details>
@@ -528,11 +531,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.15.1 --install-cep
+npx -y premiere-pro-mcp@1.16.4 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.15.1` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.16.4` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -563,7 +566,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.15.1 --install-cep
+npx -y premiere-pro-mcp@1.16.4 --install-cep
 ```
 
 The Claude Code package lives in
@@ -581,6 +584,26 @@ Install the resulting file from `artifacts/` through **Settings > Extensions >
 Advanced settings > Install Extension**. The Premiere CEP bridge must still be
 installed separately.
 
+### Claude Fable 5.1
+
+Use Cursor, Claude Desktop, or Claude Code with Claude Fable 5.1
+(`claude-fable-5-1`) when your account has access. Model selection belongs to the
+client; this server does not run an Anthropic model. Fable 5.1 is optional:
+other Claude models can call the same MCP tools. If Cursor Privacy Mode or an
+Enterprise plan is enabled, an admin must approve Anthropic's Fable data-retention
+policy before the model is available.
+
+The server supplies session-aware workflow instructions and bounded tool discovery:
+call `get_capabilities` with `{"tool_query":"transcript","tool_limit":10}` to
+find relevant operations, their descriptions, and backend requirements. Keep
+Premiere mutations serialized even in a long Fable 5.1 session. Image review of
+returned frames is not playback or delivery proof.
+
+See [Claude Fable 5.1 workflows](docs/claude-fable-5-1.md) for connection order,
+privacy boundaries, evidence retrieval, Cursor's Opus fallback, and the division
+between MCP and client capabilities. The public walkthrough is
+[How to Use Claude Fable 5.1 with MCP for Adobe Premiere Pro](https://premiere-pro-mcp.com/blog/claude-fable-5-1-premiere-pro-mcp/).
+
 ### Windows and macOS capability coverage
 
 | Surface | Windows | macOS | Verification boundary |
@@ -859,7 +882,7 @@ reports revision-bound notes, VFX state, change impact and turnover exceptions.
 It performs local inspection; host edits and exports use separate guarded tools.
 See [usage, example and remaining execution adapters](docs/film-editorial-workflows.md).
 
-## Tools (381 core total; 379 under the default profile; 474 with a connected UXP bridge)
+## Tools (384 core total; 382 under the default profile; 477 with a connected UXP bridge)
 
 The [complete supported-actions catalog](docs/supported-actions.md) lists every
 registered core tool, the two tools restricted behind explicit `unsafe-script`
@@ -899,7 +922,7 @@ the tables below are a shorter workflow-oriented overview.
 | `set_scratch_disk_path` | Configure scratch disks |
 | `consolidate_and_transfer` | Project Manager consolidation |
 
-### Timeline & Editing (10 + 27 advanced)
+### Timeline & Editing (11 + 27 advanced)
 
 | Tool | Description |
 | :--- | :---------- |
@@ -907,8 +930,9 @@ the tables below are a shorter workflow-oriented overview.
 | `ripple_delete` | Remove clip and close gap (QE) |
 | `roll_edit` / `slide_edit` / `slip_edit` | Professional trim modes (QE) |
 | `move_clip_to_track` | Move between tracks (QE) |
-| `reverse_clip` / `speed_change` / `set_clip_speed_qe` | Unavailable: Premiere has no supported scripting API for changing a timeline clip's speed or direction |
+| `reverse_clip` / `speed_change` / `set_clip_speed_qe` | Unavailable: Premiere's documented ExtendScript and UXP APIs have no setter for a timeline clip's speed or direction; use `set_clip_duration` for timeline length |
 | `split_clip` / `trim_clip` / `move_clip` | Basic edits; trim verifies source points and visible timeline edges |
+| `set_clip_duration` | Set a clip's timeline duration or absolute end (extends still images); refuses next-clip overlaps and restores the original end if Premiere clamps |
 | `set_clip_properties` | Opacity, scale, rotation, position (speed requests fail before mutation) |
 | `link_selection` / `unlink_selection` | Link/unlink A/V |
 
@@ -923,9 +947,10 @@ the tables below are a shorter workflow-oriented overview.
 
 > **Speed, caption, and visual-keyframe boundaries:** Premiere Pro 26.3 may reflect legacy QE
 > speed/direction methods, but exposes no supported scripting setter or Time Remapping component
-> for timeline-clip speed or direction. `reverse_clip`,
+> for timeline-clip speed or direction (documented UXP through 26.3 has only `getSpeed` /
+> `isSpeedReversed`). `reverse_clip`,
 > `speed_change`, `set_clip_speed_qe`, and `set_clip_properties` with `speed` now stop before host mutation;
-> use the Speed/Duration UI or pre-render retimed media. `add_text_overlay` likewise stops
+> use `set_clip_duration` to change timeline length, or the Speed/Duration UI or pre-rendered media to retime. `add_text_overlay` likewise stops
 > before mutation because a raw-text-to-caption API is not exposed; import an `.srt`/`.vtt`
 > and use `create_caption_track`, or use a MOGRT/PNG overlay. Keyframe and caption-track
 > responses can prove parameter/structure readback only—not rendered pixels—so verify playback
@@ -950,6 +975,15 @@ cut boundaries. Its QE path cannot prove effect-keyframe redistribution, so a su
 labels those semantics `unverified`. These are CEP contract checks, not validation in a licensed
 Premiere Pro 26.x host.
 
+`set_clip_duration` changes a placed clip's timeline length without touching source in/out
+directly: pass exactly one of `duration_seconds` (from the current start) or `end_seconds`
+(absolute timeline end). It writes the documented `TrackItem.end` as a tick-based `Time`, refuses
+an end that would overlap the next clip on the same track, applies the same `keyframe_policy`
+guard as `trim_clip` when shortening, and reads start/end back. If Premiere clamps the end (for
+example, video media with no remaining handle, or a still whose project item has in/out points),
+the original end is restored and the tool returns an error. Linked audio/video partners are not
+adjusted. This is a CEP contract check, not validation in a licensed Premiere Pro host.
+
 ### Effects & Color (8)
 
 | Tool | Description |
@@ -1013,12 +1047,13 @@ presenting UI-only operations as available tools.
 | `play_timeline` / `stop_playback` | Playback control (QE) |
 | `play_source_monitor` | Play in source monitor |
 
-### Selection & Clipboard (7 + 6)
+### Selection & Clipboard (7 + 7)
 
 | Tool | Description |
 | :--- | :---------- |
 | `select_clips_by_name` / `select_clips_in_range` | Smart selection |
 | `copy_effects_between_clips` | Copy effects via QE |
+| `paste_clip_attributes` | Paste Attributes: effect stack, values, and keyframes with per-property readback; masks and differing Blend Mode are reported, not copied |
 | `batch_apply_effect` | Apply effect to multiple clips |
 | `set_blend_mode` | 27 blend modes |
 
@@ -1087,6 +1122,12 @@ evidence behind these tools and their verification boundaries.
 | `plan_speaker_checkerboard` | Per-speaker segments, split points, and track assignments for checkerboarded dialogue |
 | `plan_active_speaker_reframe` | Active-speaker vertical reframe keyframes, or static stacked / side-by-side two-speaker layouts |
 
+### Mask Fit (1)
+
+| Tool | Description |
+| :--- | :---------- |
+| `compute_mask_fit_motion` | Inspect only: Motion Scale and Position that place a still's subject box (source-image fractions) inside an existing Rounded Crop, Crop, or similar mask, with the math inputs and warnings. Apply with `set_clip_scale` / `set_clip_position`, then check with `capture_frame`. No image analysis. |
+
 ### Rhythm Plans (2)
 
 | Tool | Description |
@@ -1147,13 +1188,13 @@ Track targeting, batch operations, markers, audio levels, motion/transform, meta
 
 ## MCP Resources
 
-The server exposes fourteen LLM context resources and eleven workflow prompts:
+The server exposes fourteen LLM context resources and nineteen workflow prompts:
 
 | Resource URI | Description |
 | :----------- | :---------- |
-| `config://premiere-instructions` | Best practices: workflow order, timeline rules, effect tips, error handling |
+| `config://premiere-instructions` | Best practices: workflow order, metadata layers, timeline rules, error handling |
 | `config://extendscript-reference` | Complete ExtendScript API reference for writing custom scripts |
-| `config://premiere-workflows` | Machine-readable catalog for rough cuts, dialogue cleanup, captions, and delivery |
+| `config://premiere-workflows` | Machine-readable catalog for rough cuts, metadata review, dialogue cleanup, captions, and delivery |
 | `config://premiere-project-context` | Revisioned local project-context indexing and retrieval workflow |
 | `premiere://project/info` | Fresh, path-redacted current-project and active-sequence summary |
 | `premiere://project/sequences` | Bounded sequence inventory with stable Premiere IDs |
@@ -1164,7 +1205,7 @@ The server exposes fourteen LLM context resources and eleven workflow prompts:
 | `premiere://effects/applied` | Bounded active-timeline component inventory |
 | `premiere://transitions/available` | Bounded video/audio transition catalog for planning |
 | `premiere://export/presets` | Bounded export-preset names and formats, without native paths |
-| `premiere://project/metadata` | Read-only project and active-timeline summary, without paths or timestamps |
+| `premiere://project/metadata` | Path-redacted project and active-timeline summary — not XMP or Project Metadata XML |
 
 The ten `premiere://` snapshots are read-only CEP bridge requests. They include a
 revision token for stale-state detection and omit native media, project-tree, preset,
@@ -1327,7 +1368,7 @@ premiere-pro-mcp/
 ├── src/
 │   ├── index.ts                 # Entry point — stdio transport setup
 │   ├── http-server.ts           # Entry point — HTTP/SSE transport (Fly.io / remote)
-│   ├── server.ts                # MCP server — registers 381 tools, filtered by authority profile
+│   ├── server.ts                # MCP server — registers 384 tools, filtered by authority profile
 │   ├── bridge/
 │   │   ├── file-bridge.ts       # File-based IPC (write .jsx, poll .json)
 │   │   └── script-builder.ts    # ExtendScript generator with ES3 helpers
@@ -1377,6 +1418,7 @@ premiere-pro-mcp/
 ├── Dockerfile                   # Multi-stage Docker build for Fly.io
 ├── fly.toml                     # Fly.io deployment config
 ├── RESEARCH.md                  # API research and implementation status
+├── AGENTS.md                    # IDE / coding-agent map
 ├── CONTRIBUTING.md              # Contribution guidelines
 ├── CHANGELOG.md                 # Version history
 └── LICENSE                      # MIT License
@@ -1433,7 +1475,9 @@ by default. Enable them only by setting
   directories writable by group/other users are refused by both the server and panels;
   tightening permissions alone cannot make previously staged commands trustworthy.
   On Windows, only the current user, SYSTEM and Administrators may have write access,
-  including inherited grants. ACL inspection failures also stop startup. Ancestors must
+  including inherited grants. Windows capability and app-container SIDs (`S-1-15-*`)
+  are ignored: they are not logon principals and appear as inherited FullControl on
+  stock `%LOCALAPPDATA%` paths. ACL inspection failures also stop startup. Ancestors must
   also prevent other users from replacing the bridge path; a private child inside a
   broadly writable parent is insufficient (POSIX sticky temp directories are supported).
   Choose a new directory under a private user-owned location if the connector rejects
@@ -1471,6 +1515,8 @@ Premiere Pro; its npm package is `premiere-pro-mcp`.
 Install the [Claude Desktop bundle](#easiest-supported-path-claude-desktop), install
 the separate signed Premiere connector, restart Premiere, then ask Claude to run
 `verify_premiere_connection` with no changes. That first prompt is read-only.
+Claude Fable 5.1 is an optional client model for Cursor, Claude Desktop, or Claude
+Code; see [Claude Fable 5.1 workflows](docs/claude-fable-5-1.md).
 
 **Where is the GitHub repository?**
 <https://github.com/leancoderkavy/premiere-pro-mcp>. Releases, the signed `.zxp`
@@ -1596,6 +1642,7 @@ buy prioritized support, roadmap influence, or any claim about unverified host b
 ## Contributing
 
 Contributions are welcome! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
+AI agents and IDE assistants should read [AGENTS.md](AGENTS.md).
 
 The evidence-backed [next improvement pull-request roadmap](docs/next-improvement-pr-roadmap.md)
 breaks the proposed feature, protocol, reliability, and performance work into ten

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.16.3" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.17.0" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.16.3"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.17.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/after-effects-cep-plugin/bridge-directory-security.cjs

@@ -23,12 +23,12 @@
     '  $ancestorOwner = $ancestorAcl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value',
     '  if ($ancestorOwner -notin $trustedAncestors) { $unsafeAncestors += [pscustomobject]@{ sid = $ancestorOwner; path = $ancestor.FullName; reason = "owner" } }',
     '  $unsafeAncestors += @($ancestorAcl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
-    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors',
+    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors -and $_.IdentityReference.Value -notlike "S-1-15-*"',
     '  } | ForEach-Object { [pscustomobject]@{ sid = $_.IdentityReference.Value; path = $ancestor.FullName; reason = "replacement_rights" } })',
     '  $ancestor = $ancestor.Parent',
     '}',
     'if ($initialize) {',
-    '  if ($unsafeAncestors.Count -ne 0) { throw "Bridge directory ancestry is unsafe" }',
+    '  if ($unsafeAncestors.Count -ne 0) { throw ("Bridge directory ancestry is unsafe: " + (($unsafeAncestors | ForEach-Object { "{0} ({1}: {2})" -f $_.path, $_.reason, $_.sid }) -join "; ")) }',
     '  $acl.SetAccessRuleProtection($true, $false)',
     '  $inheritance = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit',
     '  $propagation = [System.Security.AccessControl.PropagationFlags]::None',
@@ -46,11 +46,17 @@
     '$unsafe = @($acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
     '  $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.FileSystemRights -band $mutating) -ne 0)',
     '} | ForEach-Object {',
-    '  if ($_.IdentityReference.Value -notin $trusted) { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
+    '  if ($_.IdentityReference.Value -notin $trusted -and $_.IdentityReference.Value -notlike "S-1-15-*") { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
     '})',
     '[pscustomobject]@{ ownerSid = $owner; currentUserSid = $current; unsafeWriteAces = $unsafe; unsafeAncestorEntries = $unsafeAncestors } | ConvertTo-Json -Compress',
   ].join("\n");
 
+  // Capability (S-1-15-3-*) and app-container package (S-1-15-2-*) SIDs are not
+  // logon principals; stock profiles inherit one with FullControl on AppData (#581).
+  function isWindowsCapabilitySid(sid) {
+    return typeof sid === "string" && sid.toUpperCase().indexOf("S-1-15-") === 0;
+  }
+
   function createBridgeDirectorySecurity(runtime) {
     if (!runtime || !runtime.fs || !runtime.path) {
       throw new Error("Bridge directory security requires filesystem and path runtimes");
@@ -170,26 +176,29 @@
         if (!acl || !acl.ownerSid || !acl.currentUserSid || acl.ownerSid !== acl.currentUserSid) {
           throw new Error("Bridge directory is not owned by the current Windows user: " + resolved);
         }
-        var unsafe = Array.isArray(acl.unsafeWriteAces)
+        var unsafe = (Array.isArray(acl.unsafeWriteAces)
           ? acl.unsafeWriteAces
           : acl.unsafeWriteAces
             ? [acl.unsafeWriteAces]
-            : [];
+            : []).filter(function (ace) { return !isWindowsCapabilitySid(ace && ace.sid); });
         if (unsafe.length > 0) {
           var unsafeSids = unsafe.map(function (ace) { return ace && ace.sid ? ace.sid : "unknown"; });
           throw new Error(
             "Bridge directory grants write access to untrusted identities (" + unsafeSids.join(", ") + "): " + resolved
           );
         }
-        var unsafeAncestors = Array.isArray(acl.unsafeAncestorEntries)
+        var unsafeAncestors = (Array.isArray(acl.unsafeAncestorEntries)
           ? acl.unsafeAncestorEntries
           : acl.unsafeAncestorEntries
             ? [acl.unsafeAncestorEntries]
-            : [];
+            : []).filter(function (entry) {
+          return !entry || entry.reason !== "replacement_rights" || !isWindowsCapabilitySid(entry.sid);
+        });
         if (unsafeAncestors.length > 0) {
           throw new Error(
-            "Bridge path has a replaceable ancestor " + unsafeAncestors[0].path +
-            " (" + unsafeAncestors[0].sid + ")"
+            "Bridge path has a replaceable ancestor " + unsafeAncestors.map(function (entry) {
+              return (entry && entry.path) + " (" + (entry && entry.reason) + ": " + (entry && entry.sid ? entry.sid : "none") + ")";
+            }).join("; ")
           );
         }
         if (newlyCreated && fs.readdirSync(resolved).length > 0) {

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.16.3" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.17.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.16.3"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.16.3"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.17.0"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.17.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/bridge-directory-security.cjs

@@ -23,12 +23,12 @@
     '  $ancestorOwner = $ancestorAcl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value',
     '  if ($ancestorOwner -notin $trustedAncestors) { $unsafeAncestors += [pscustomobject]@{ sid = $ancestorOwner; path = $ancestor.FullName; reason = "owner" } }',
     '  $unsafeAncestors += @($ancestorAcl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
-    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors',
+    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors -and $_.IdentityReference.Value -notlike "S-1-15-*"',
     '  } | ForEach-Object { [pscustomobject]@{ sid = $_.IdentityReference.Value; path = $ancestor.FullName; reason = "replacement_rights" } })',
     '  $ancestor = $ancestor.Parent',
     '}',
     'if ($initialize) {',
-    '  if ($unsafeAncestors.Count -ne 0) { throw "Bridge directory ancestry is unsafe" }',
+    '  if ($unsafeAncestors.Count -ne 0) { throw ("Bridge directory ancestry is unsafe: " + (($unsafeAncestors | ForEach-Object { "{0} ({1}: {2})" -f $_.path, $_.reason, $_.sid }) -join "; ")) }',
     '  $acl.SetAccessRuleProtection($true, $false)',
     '  $inheritance = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit',
     '  $propagation = [System.Security.AccessControl.PropagationFlags]::None',
@@ -46,11 +46,17 @@
     '$unsafe = @($acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
     '  $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.FileSystemRights -band $mutating) -ne 0)',
     '} | ForEach-Object {',
-    '  if ($_.IdentityReference.Value -notin $trusted) { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
+    '  if ($_.IdentityReference.Value -notin $trusted -and $_.IdentityReference.Value -notlike "S-1-15-*") { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
     '})',
     '[pscustomobject]@{ ownerSid = $owner; currentUserSid = $current; unsafeWriteAces = $unsafe; unsafeAncestorEntries = $unsafeAncestors } | ConvertTo-Json -Compress',
   ].join("\n");
 
+  // Capability (S-1-15-3-*) and app-container package (S-1-15-2-*) SIDs are not
+  // logon principals; stock profiles inherit one with FullControl on AppData (#581).
+  function isWindowsCapabilitySid(sid) {
+    return typeof sid === "string" && sid.toUpperCase().indexOf("S-1-15-") === 0;
+  }
+
   function createBridgeDirectorySecurity(runtime) {
     if (!runtime || !runtime.fs || !runtime.path) {
       throw new Error("Bridge directory security requires filesystem and path runtimes");
@@ -170,26 +176,29 @@
         if (!acl || !acl.ownerSid || !acl.currentUserSid || acl.ownerSid !== acl.currentUserSid) {
           throw new Error("Bridge directory is not owned by the current Windows user: " + resolved);
         }
-        var unsafe = Array.isArray(acl.unsafeWriteAces)
+        var unsafe = (Array.isArray(acl.unsafeWriteAces)
           ? acl.unsafeWriteAces
           : acl.unsafeWriteAces
             ? [acl.unsafeWriteAces]
-            : [];
+            : []).filter(function (ace) { return !isWindowsCapabilitySid(ace && ace.sid); });
         if (unsafe.length > 0) {
           var unsafeSids = unsafe.map(function (ace) { return ace && ace.sid ? ace.sid : "unknown"; });
           throw new Error(
             "Bridge directory grants write access to untrusted identities (" + unsafeSids.join(", ") + "): " + resolved
           );
         }
-        var unsafeAncestors = Array.isArray(acl.unsafeAncestorEntries)
+        var unsafeAncestors = (Array.isArray(acl.unsafeAncestorEntries)
           ? acl.unsafeAncestorEntries
           : acl.unsafeAncestorEntries
             ? [acl.unsafeAncestorEntries]
-            : [];
+            : []).filter(function (entry) {
+          return !entry || entry.reason !== "replacement_rights" || !isWindowsCapabilitySid(entry.sid);
+        });
         if (unsafeAncestors.length > 0) {
           throw new Error(
-            "Bridge path has a replaceable ancestor " + unsafeAncestors[0].path +
-            " (" + unsafeAncestors[0].sid + ")"
+            "Bridge path has a replaceable ancestor " + unsafeAncestors.map(function (entry) {
+              return (entry && entry.path) + " (" + (entry && entry.reason) + ": " + (entry && entry.sid ? entry.sid : "none") + ")";
+            }).join("; ")
           );
         }
         if (newlyCreated && fs.readdirSync(resolved).length > 0) {

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.16.3</strong>
+        <strong id="updateTitle">Version 1.17.0</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.16.3";
+  var CURRENT_VERSION = "1.17.0";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =