premiere-pro-mcp 1.16.4 → 1.18.0

package/CHANGELOG.md

@@ -6,6 +6,89 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.0] - 2026-09-23
+
+### Added
+
+- MOGRT text recipes default to `text_controls: "full"`: each text layer exposes
+  Font Size, Stroke Width, Fill Color, and Stroke Color controls plus named
+  Position, Scale, Rotation, Anchor Point, and Opacity Essential Graphics
+  controls. The create result reads back source-comp controller names.
+  `text_only` keeps the previous behavior. Font-family editing is not scriptable
+  and is reported as a known gap. (#618)
+- `media_placeholder` MOGRT recipe imports a workspace-contained PNG, JPEG, MOV,
+  or MP4, requests a replaceable Essential Graphics media slot, and exposes its
+  transform controls. Not verified on a live After Effects or Premiere host.
+  (#619)
+- `import_mogrt` accepts `text_values`, writes each named text control after
+  insertion (replacing only the text value so styling is kept), and reports
+  `verified`, `mismatch`, `missing_property`, or `committed_unverified` per
+  field. `get_mogrt_component` returns `textValue` for every parameter and an
+  optional `expected_values` audit that flags stale Headline text. (#617)
+
+### Fixed
+
+- `encode_file` and `encode_project_item` pass natively typed arguments (String
+  paths, Boolean removal flag, Time in/out), fixing "Illegal Parameter type";
+  `encode_file` fails early when the preset file is missing. (#615)
+- `set_xmp_metadata` passes numeric `XMPConst` options to
+  `XMPUtils.appendProperties`, fixing "Bad argument list". (#611)
+- `manage_proxies` auto-discovery skips "Same as Project" proxy presets whose
+  output never reached `output_path`, and asks for `preset_path` when no safe
+  preset exists. (#610)
+- `manage_metadata_uxp` and `create_subclip_uxp` find items inside nested bins.
+  (#612, #613)
+- `set_scale_to_frame_size` accepts timeline clip IDs and reports `verified` or
+  `committed_unverified`. (#614)
+
+### Known limitations
+
+- The Essential Graphics panel can display a stale Headline after a MOGRT text
+  write. The tools read stored values and cannot refresh the host panel (#616
+  remains open).
+- These fixes are covered by mocked automated tests only; they are not verified
+  on a licensed Premiere or After Effects host.
+
+## [1.17.0] - 2026-09-21
+
+### Added
+
+- `paste_clip_attributes` copies a source clip's effect stack, values, and
+  keyframes onto a target clip with per-property readback. Masks and a differing
+  Blend Mode are reported as not copied because no documented scripting surface
+  exposes them. (#595)
+- `compute_mask_fit_motion` computes Motion Scale/Position that place a still's
+  subject inside an existing Rounded Crop, Crop, or similar mask. Inspect only.
+  (#594)
+- `set_clip_duration` sets a placed timeline clip's duration or absolute end by
+  moving only `TrackItem.end`, so still images can be extended past their import
+  length. It refuses overlaps with the next clip, guards effect keyframes when
+  shortening, reads start/end back, and restores the original end when Premiere
+  clamps the write. (#592)
+
+### Changed
+
+- Clip speed messaging is consistent across `speed_change`, `set_clip_speed_qe`,
+  `set_clip_properties`, agent instructions, docs, and skills: documented
+  ExtendScript and UXP (through 26.3) expose only speed getters, the QE setter
+  stays unused, and `set_clip_duration` is the supported timing alternative. (#593)
+
+### Fixed
+
+- `set_target_track` targets exclusively by default (`exclusive: false` keeps
+  other tracks targeted) and reads every track back; `get_target_tracks` lists
+  every targeted track and unreadable tracks. (#587)
+- `create_bars_and_tone` returns the created item's name, node ID, and tree path.
+  (#588)
+- `get_bin_contents` resolves nested bins by node ID with guarded child access and
+  clean errors instead of a raw TypeError. (#589)
+- `manage_timeline_source_label_uxp` accepts `sequence_id` and resolves it by GUID,
+  failing closed instead of targeting the active sequence. (#590)
+- `create_bin` honors `parent_bin_id` and reads back the new bin's parent. (#591)
+- Windows bridge-directory ACL checks ignore capability and app-container SIDs
+  (`S-1-15-*`), so the default location under `%LOCALAPPDATA%` no longer fails at
+  startup; the ancestry error names each offending path and SID. (#581)
+
 ## [1.16.4] - 2026-09-20
 
 ### Added

package/README.md

@@ -12,7 +12,7 @@ Free, MIT licensed, local-first, and published to npm as [`premiere-pro-mcp`](ht
 
 [Website](https://premiere-pro-mcp.com/) · [Recorded demo](https://premiere-pro-mcp.com/demo/) · [Compare servers](https://premiere-pro-mcp.com/compare/) · [Setup guides](https://premiere-pro-mcp.com/blog/how-to-set-up-premiere-pro-mcp/) · [Search tools](https://premiere-pro-mcp.com/tools/) · [Troubleshooting](https://premiere-pro-mcp.com/docs/troubleshooting/) · [Release facts](https://premiere-pro-mcp.com/facts/)
 
-Development source: 381 core tools across 56 modules, 4 resources, and 19 guided workflows. A connected UXP host adds 95 capability-gated tools.
+Development source: 384 core tools across 57 modules, 4 resources, and 19 guided workflows. A connected UXP host adds 95 capability-gated tools.
 
 The [completed AE render handoff](docs/after-effects-render-handoff.md) previews and confirms importing one finished render into an existing Premiere bin, with host and file rechecks and an import receipt.
 
@@ -104,14 +104,14 @@ and repository before configuring a client. The new
 VS Code, or Codex settings that point directly to this installation. It is a
 feature included in v1.15.1 and later.
 
-The current source exposes 381 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 95 documented, capability-gated tools without replacing the production CEP bridge.
+The current source exposes 384 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 95 documented, capability-gated tools without replacing the production CEP bridge.
 
 <a id="latest-release"></a>
 
-### Latest release: 1.16.4
+### Latest release: 1.18.0
 
-The published v1.16.3 npm artifact contains **381 core tools**, 379 in its default profile,
-and 474 with a compatible UXP connection. The development catalog above can include
+The published v1.17.0 npm artifact contains **384 core tools**, 382 in its default profile,
+and 477 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
 ### Try a bounded workflow
@@ -160,7 +160,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.16.4 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.16.4)
+See the [v1.18.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.0)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -208,7 +208,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.16.4
+> npm i -g premiere-pro-mcp@1.18.0
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -216,7 +216,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.16.4` |
+> | Version | `1.18.0` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -229,9 +229,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.16.4/premiere-pro-mcp-1.16.4.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.0/premiere-pro-mcp-1.18.0.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.16.4/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -531,11 +531,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.16.3 --install-cep
+npx -y premiere-pro-mcp@1.17.0 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.16.3` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.17.0` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -566,7 +566,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.16.3 --install-cep
+npx -y premiere-pro-mcp@1.17.0 --install-cep
 ```
 
 The Claude Code package lives in
@@ -882,7 +882,7 @@ reports revision-bound notes, VFX state, change impact and turnover exceptions.
 It performs local inspection; host edits and exports use separate guarded tools.
 See [usage, example and remaining execution adapters](docs/film-editorial-workflows.md).
 
-## Tools (381 core total; 379 under the default profile; 474 with a connected UXP bridge)
+## Tools (384 core total; 382 under the default profile; 477 with a connected UXP bridge)
 
 The [complete supported-actions catalog](docs/supported-actions.md) lists every
 registered core tool, the two tools restricted behind explicit `unsafe-script`
@@ -922,7 +922,7 @@ the tables below are a shorter workflow-oriented overview.
 | `set_scratch_disk_path` | Configure scratch disks |
 | `consolidate_and_transfer` | Project Manager consolidation |
 
-### Timeline & Editing (10 + 27 advanced)
+### Timeline & Editing (11 + 27 advanced)
 
 | Tool | Description |
 | :--- | :---------- |
@@ -930,8 +930,9 @@ the tables below are a shorter workflow-oriented overview.
 | `ripple_delete` | Remove clip and close gap (QE) |
 | `roll_edit` / `slide_edit` / `slip_edit` | Professional trim modes (QE) |
 | `move_clip_to_track` | Move between tracks (QE) |
-| `reverse_clip` / `speed_change` / `set_clip_speed_qe` | Unavailable: Premiere has no supported scripting API for changing a timeline clip's speed or direction |
+| `reverse_clip` / `speed_change` / `set_clip_speed_qe` | Unavailable: Premiere's documented ExtendScript and UXP APIs have no setter for a timeline clip's speed or direction; use `set_clip_duration` for timeline length |
 | `split_clip` / `trim_clip` / `move_clip` | Basic edits; trim verifies source points and visible timeline edges |
+| `set_clip_duration` | Set a clip's timeline duration or absolute end (extends still images); refuses next-clip overlaps and restores the original end if Premiere clamps |
 | `set_clip_properties` | Opacity, scale, rotation, position (speed requests fail before mutation) |
 | `link_selection` / `unlink_selection` | Link/unlink A/V |
 
@@ -946,9 +947,10 @@ the tables below are a shorter workflow-oriented overview.
 
 > **Speed, caption, and visual-keyframe boundaries:** Premiere Pro 26.3 may reflect legacy QE
 > speed/direction methods, but exposes no supported scripting setter or Time Remapping component
-> for timeline-clip speed or direction. `reverse_clip`,
+> for timeline-clip speed or direction (documented UXP through 26.3 has only `getSpeed` /
+> `isSpeedReversed`). `reverse_clip`,
 > `speed_change`, `set_clip_speed_qe`, and `set_clip_properties` with `speed` now stop before host mutation;
-> use the Speed/Duration UI or pre-render retimed media. `add_text_overlay` likewise stops
+> use `set_clip_duration` to change timeline length, or the Speed/Duration UI or pre-rendered media to retime. `add_text_overlay` likewise stops
 > before mutation because a raw-text-to-caption API is not exposed; import an `.srt`/`.vtt`
 > and use `create_caption_track`, or use a MOGRT/PNG overlay. Keyframe and caption-track
 > responses can prove parameter/structure readback only—not rendered pixels—so verify playback
@@ -973,6 +975,15 @@ cut boundaries. Its QE path cannot prove effect-keyframe redistribution, so a su
 labels those semantics `unverified`. These are CEP contract checks, not validation in a licensed
 Premiere Pro 26.x host.
 
+`set_clip_duration` changes a placed clip's timeline length without touching source in/out
+directly: pass exactly one of `duration_seconds` (from the current start) or `end_seconds`
+(absolute timeline end). It writes the documented `TrackItem.end` as a tick-based `Time`, refuses
+an end that would overlap the next clip on the same track, applies the same `keyframe_policy`
+guard as `trim_clip` when shortening, and reads start/end back. If Premiere clamps the end (for
+example, video media with no remaining handle, or a still whose project item has in/out points),
+the original end is restored and the tool returns an error. Linked audio/video partners are not
+adjusted. This is a CEP contract check, not validation in a licensed Premiere Pro host.
+
 ### Effects & Color (8)
 
 | Tool | Description |
@@ -1036,12 +1047,13 @@ presenting UI-only operations as available tools.
 | `play_timeline` / `stop_playback` | Playback control (QE) |
 | `play_source_monitor` | Play in source monitor |
 
-### Selection & Clipboard (7 + 6)
+### Selection & Clipboard (7 + 7)
 
 | Tool | Description |
 | :--- | :---------- |
 | `select_clips_by_name` / `select_clips_in_range` | Smart selection |
 | `copy_effects_between_clips` | Copy effects via QE |
+| `paste_clip_attributes` | Paste Attributes: effect stack, values, and keyframes with per-property readback; masks and differing Blend Mode are reported, not copied |
 | `batch_apply_effect` | Apply effect to multiple clips |
 | `set_blend_mode` | 27 blend modes |
 
@@ -1110,6 +1122,12 @@ evidence behind these tools and their verification boundaries.
 | `plan_speaker_checkerboard` | Per-speaker segments, split points, and track assignments for checkerboarded dialogue |
 | `plan_active_speaker_reframe` | Active-speaker vertical reframe keyframes, or static stacked / side-by-side two-speaker layouts |
 
+### Mask Fit (1)
+
+| Tool | Description |
+| :--- | :---------- |
+| `compute_mask_fit_motion` | Inspect only: Motion Scale and Position that place a still's subject box (source-image fractions) inside an existing Rounded Crop, Crop, or similar mask, with the math inputs and warnings. Apply with `set_clip_scale` / `set_clip_position`, then check with `capture_frame`. No image analysis. |
+
 ### Rhythm Plans (2)
 
 | Tool | Description |
@@ -1350,7 +1368,7 @@ premiere-pro-mcp/
 ├── src/
 │   ├── index.ts                 # Entry point — stdio transport setup
 │   ├── http-server.ts           # Entry point — HTTP/SSE transport (Fly.io / remote)
-│   ├── server.ts                # MCP server — registers 381 tools, filtered by authority profile
+│   ├── server.ts                # MCP server — registers 384 tools, filtered by authority profile
 │   ├── bridge/
 │   │   ├── file-bridge.ts       # File-based IPC (write .jsx, poll .json)
 │   │   └── script-builder.ts    # ExtendScript generator with ES3 helpers

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.16.4" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.0" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.16.4"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/after-effects-cep-plugin/bridge-directory-security.cjs

@@ -23,12 +23,12 @@
     '  $ancestorOwner = $ancestorAcl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value',
     '  if ($ancestorOwner -notin $trustedAncestors) { $unsafeAncestors += [pscustomobject]@{ sid = $ancestorOwner; path = $ancestor.FullName; reason = "owner" } }',
     '  $unsafeAncestors += @($ancestorAcl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
-    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors',
+    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors -and $_.IdentityReference.Value -notlike "S-1-15-*"',
     '  } | ForEach-Object { [pscustomobject]@{ sid = $_.IdentityReference.Value; path = $ancestor.FullName; reason = "replacement_rights" } })',
     '  $ancestor = $ancestor.Parent',
     '}',
     'if ($initialize) {',
-    '  if ($unsafeAncestors.Count -ne 0) { throw "Bridge directory ancestry is unsafe" }',
+    '  if ($unsafeAncestors.Count -ne 0) { throw ("Bridge directory ancestry is unsafe: " + (($unsafeAncestors | ForEach-Object { "{0} ({1}: {2})" -f $_.path, $_.reason, $_.sid }) -join "; ")) }',
     '  $acl.SetAccessRuleProtection($true, $false)',
     '  $inheritance = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit',
     '  $propagation = [System.Security.AccessControl.PropagationFlags]::None',
@@ -46,11 +46,17 @@
     '$unsafe = @($acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
     '  $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.FileSystemRights -band $mutating) -ne 0)',
     '} | ForEach-Object {',
-    '  if ($_.IdentityReference.Value -notin $trusted) { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
+    '  if ($_.IdentityReference.Value -notin $trusted -and $_.IdentityReference.Value -notlike "S-1-15-*") { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
     '})',
     '[pscustomobject]@{ ownerSid = $owner; currentUserSid = $current; unsafeWriteAces = $unsafe; unsafeAncestorEntries = $unsafeAncestors } | ConvertTo-Json -Compress',
   ].join("\n");
 
+  // Capability (S-1-15-3-*) and app-container package (S-1-15-2-*) SIDs are not
+  // logon principals; stock profiles inherit one with FullControl on AppData (#581).
+  function isWindowsCapabilitySid(sid) {
+    return typeof sid === "string" && sid.toUpperCase().indexOf("S-1-15-") === 0;
+  }
+
   function createBridgeDirectorySecurity(runtime) {
     if (!runtime || !runtime.fs || !runtime.path) {
       throw new Error("Bridge directory security requires filesystem and path runtimes");
@@ -170,26 +176,29 @@
         if (!acl || !acl.ownerSid || !acl.currentUserSid || acl.ownerSid !== acl.currentUserSid) {
           throw new Error("Bridge directory is not owned by the current Windows user: " + resolved);
         }
-        var unsafe = Array.isArray(acl.unsafeWriteAces)
+        var unsafe = (Array.isArray(acl.unsafeWriteAces)
           ? acl.unsafeWriteAces
           : acl.unsafeWriteAces
             ? [acl.unsafeWriteAces]
-            : [];
+            : []).filter(function (ace) { return !isWindowsCapabilitySid(ace && ace.sid); });
         if (unsafe.length > 0) {
           var unsafeSids = unsafe.map(function (ace) { return ace && ace.sid ? ace.sid : "unknown"; });
           throw new Error(
             "Bridge directory grants write access to untrusted identities (" + unsafeSids.join(", ") + "): " + resolved
           );
         }
-        var unsafeAncestors = Array.isArray(acl.unsafeAncestorEntries)
+        var unsafeAncestors = (Array.isArray(acl.unsafeAncestorEntries)
           ? acl.unsafeAncestorEntries
           : acl.unsafeAncestorEntries
             ? [acl.unsafeAncestorEntries]
-            : [];
+            : []).filter(function (entry) {
+          return !entry || entry.reason !== "replacement_rights" || !isWindowsCapabilitySid(entry.sid);
+        });
         if (unsafeAncestors.length > 0) {
           throw new Error(
-            "Bridge path has a replaceable ancestor " + unsafeAncestors[0].path +
-            " (" + unsafeAncestors[0].sid + ")"
+            "Bridge path has a replaceable ancestor " + unsafeAncestors.map(function (entry) {
+              return (entry && entry.path) + " (" + (entry && entry.reason) + ": " + (entry && entry.sid ? entry.sid : "none") + ")";
+            }).join("; ")
           );
         }
         if (newlyCreated && fs.readdirSync(resolved).length > 0) {

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.16.4" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.16.4"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.16.4"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.0"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/bridge-directory-security.cjs

@@ -23,12 +23,12 @@
     '  $ancestorOwner = $ancestorAcl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value',
     '  if ($ancestorOwner -notin $trustedAncestors) { $unsafeAncestors += [pscustomobject]@{ sid = $ancestorOwner; path = $ancestor.FullName; reason = "owner" } }',
     '  $unsafeAncestors += @($ancestorAcl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
-    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors',
+    '    $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0) -and (($_.FileSystemRights -band $replacement) -ne 0) -and $_.IdentityReference.Value -notin $trustedAncestors -and $_.IdentityReference.Value -notlike "S-1-15-*"',
     '  } | ForEach-Object { [pscustomobject]@{ sid = $_.IdentityReference.Value; path = $ancestor.FullName; reason = "replacement_rights" } })',
     '  $ancestor = $ancestor.Parent',
     '}',
     'if ($initialize) {',
-    '  if ($unsafeAncestors.Count -ne 0) { throw "Bridge directory ancestry is unsafe" }',
+    '  if ($unsafeAncestors.Count -ne 0) { throw ("Bridge directory ancestry is unsafe: " + (($unsafeAncestors | ForEach-Object { "{0} ({1}: {2})" -f $_.path, $_.reason, $_.sid }) -join "; ")) }',
     '  $acl.SetAccessRuleProtection($true, $false)',
     '  $inheritance = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit',
     '  $propagation = [System.Security.AccessControl.PropagationFlags]::None',
@@ -46,11 +46,17 @@
     '$unsafe = @($acl.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]) | Where-Object {',
     '  $_.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and (($_.FileSystemRights -band $mutating) -ne 0)',
     '} | ForEach-Object {',
-    '  if ($_.IdentityReference.Value -notin $trusted) { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
+    '  if ($_.IdentityReference.Value -notin $trusted -and $_.IdentityReference.Value -notlike "S-1-15-*") { [pscustomobject]@{ sid = $_.IdentityReference.Value; isInherited = [bool]$_.IsInherited } }',
     '})',
     '[pscustomobject]@{ ownerSid = $owner; currentUserSid = $current; unsafeWriteAces = $unsafe; unsafeAncestorEntries = $unsafeAncestors } | ConvertTo-Json -Compress',
   ].join("\n");
 
+  // Capability (S-1-15-3-*) and app-container package (S-1-15-2-*) SIDs are not
+  // logon principals; stock profiles inherit one with FullControl on AppData (#581).
+  function isWindowsCapabilitySid(sid) {
+    return typeof sid === "string" && sid.toUpperCase().indexOf("S-1-15-") === 0;
+  }
+
   function createBridgeDirectorySecurity(runtime) {
     if (!runtime || !runtime.fs || !runtime.path) {
       throw new Error("Bridge directory security requires filesystem and path runtimes");
@@ -170,26 +176,29 @@
         if (!acl || !acl.ownerSid || !acl.currentUserSid || acl.ownerSid !== acl.currentUserSid) {
           throw new Error("Bridge directory is not owned by the current Windows user: " + resolved);
         }
-        var unsafe = Array.isArray(acl.unsafeWriteAces)
+        var unsafe = (Array.isArray(acl.unsafeWriteAces)
           ? acl.unsafeWriteAces
           : acl.unsafeWriteAces
             ? [acl.unsafeWriteAces]
-            : [];
+            : []).filter(function (ace) { return !isWindowsCapabilitySid(ace && ace.sid); });
         if (unsafe.length > 0) {
           var unsafeSids = unsafe.map(function (ace) { return ace && ace.sid ? ace.sid : "unknown"; });
           throw new Error(
             "Bridge directory grants write access to untrusted identities (" + unsafeSids.join(", ") + "): " + resolved
           );
         }
-        var unsafeAncestors = Array.isArray(acl.unsafeAncestorEntries)
+        var unsafeAncestors = (Array.isArray(acl.unsafeAncestorEntries)
           ? acl.unsafeAncestorEntries
           : acl.unsafeAncestorEntries
             ? [acl.unsafeAncestorEntries]
-            : [];
+            : []).filter(function (entry) {
+          return !entry || entry.reason !== "replacement_rights" || !isWindowsCapabilitySid(entry.sid);
+        });
         if (unsafeAncestors.length > 0) {
           throw new Error(
-            "Bridge path has a replaceable ancestor " + unsafeAncestors[0].path +
-            " (" + unsafeAncestors[0].sid + ")"
+            "Bridge path has a replaceable ancestor " + unsafeAncestors.map(function (entry) {
+              return (entry && entry.path) + " (" + (entry && entry.reason) + ": " + (entry && entry.sid ? entry.sid : "none") + ")";
+            }).join("; ")
           );
         }
         if (newlyCreated && fs.readdirSync(resolved).length > 0) {

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.16.4</strong>
+        <strong id="updateTitle">Version 1.18.0</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.16.4";
+  var CURRENT_VERSION = "1.18.0";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/ai/mask-fit.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Deterministic geometry for fitting a still image's subject inside an
+ * existing crop/mask region by changing only Motion Scale and Position.
+ *
+ * No image analysis happens here. The caller supplies the subject box as
+ * fractions of the source frame, and the mask region comes either from the
+ * mask effect's own parameters or from an explicit override.
+ *
+ * Motion model (rotation 0, uniform scale), with the source measured in
+ * display pixels (width x pixel aspect ratio):
+ *
+ *   sequence_x = position_x + (u - anchor_u) * displayWidth  * scale * prescale
+ *   sequence_y = position_y + (v - anchor_v) * displayHeight * scale * prescale
+ *
+ * where (u, v) and (anchor_u, anchor_v) are fractions of the source frame.
+ */
+export interface FrameSize {
+    width: number;
+    height: number;
+}
+/** Axis-aligned box as fractions (0..1) of a frame. */
+export interface NormalizedBox {
+    left: number;
+    top: number;
+    right: number;
+    bottom: number;
+}
+export interface MaskPlacement {
+    /** Subject top edge as a fraction of the mask height (0 = mask top). */
+    top: number;
+    /** Subject bottom edge as a fraction of the mask height (1 = mask bottom). */
+    bottom: number;
+    /** Subject left edge as a fraction of the mask width (width fit only). */
+    left: number;
+    /** Subject right edge as a fraction of the mask width (width fit only). */
+    right: number;
+    /** Subject horizontal center as a fraction of the mask width (height fit only). */
+    center_x: number;
+    /** Subject vertical center as a fraction of the mask height (width fit only). */
+    center_y: number;
+}
+export type FitAxis = "height" | "width";
+export interface MaskFitInput {
+    sequence: FrameSize;
+    source: FrameSize & {
+        pixelAspectRatio?: number;
+    };
+    /** Mask region as fractions of the sequence frame. */
+    mask: NormalizedBox;
+    /** Subject box as fractions of the source frame. */
+    subject: NormalizedBox;
+    placement?: Partial<MaskPlacement>;
+    fitAxis?: FitAxis;
+    /** Motion Anchor Point as fractions of the source frame; defaults to the center. */
+    anchor?: {
+        x: number;
+        y: number;
+    };
+    /**
+     * Extra scale Premiere applies before Motion (for example "Scale to Frame
+     * Size"). Defaults to 1. Motion Scale is reported net of this factor.
+     */
+    sourcePrescale?: number;
+}
+export interface MaskFitResult {
+    scale_percent: number;
+    position_pixels: {
+        x: number;
+        y: number;
+    };
+    position_normalized: {
+        x: number;
+        y: number;
+    };
+    placement: MaskPlacement;
+    fit_axis: FitAxis;
+    mask_pixels: {
+        left: number;
+        top: number;
+        right: number;
+        bottom: number;
+        width: number;
+        height: number;
+    };
+    subject_pixels: {
+        left: number;
+        top: number;
+        right: number;
+        bottom: number;
+        width: number;
+        height: number;
+    };
+    image_pixels: {
+        left: number;
+        top: number;
+        right: number;
+        bottom: number;
+    };
+    warnings: string[];
+}
+export declare const DEFAULT_MASK_PLACEMENT: MaskPlacement;
+export declare function validateNormalizedBox(box: NormalizedBox, label: string, allowOutside?: boolean): void;
+export declare function resolvePlacement(placement: Partial<MaskPlacement> | undefined): MaskPlacement;
+/** Compute the Motion Scale and Position that map the subject box onto the target region of the mask. */
+export declare function computeMaskFitMotion(input: MaskFitInput): MaskFitResult;
+/** One effect parameter as read from Premiere. */
+export interface RawEffectProperty {
+    name: string;
+    value: unknown;
+}
+export interface MaskInterpretation {
+    box: NormalizedBox;
+    method: "edges" | "center_size";
+    used_properties: string[];
+    assumptions: string[];
+}
+export declare function looksNormalizedPoint(point: readonly number[]): boolean;
+/**
+ * Turn a mask effect's parameters into a box in sequence-frame fractions.
+ * Supports edge insets (Crop-style Left/Top/Right/Bottom percentages) and
+ * center plus size (Center/Position with Width/Height, Size, or Radius).
+ * Returns undefined when neither shape is recognizable.
+ */
+export declare function interpretMaskProperties(properties: readonly RawEffectProperty[], sequence: FrameSize): MaskInterpretation | undefined;
+//# sourceMappingURL=mask-fit.d.ts.map