premiere-pro-mcp 1.18.1 → 1.18.3

package/CHANGELOG.md

@@ -6,6 +6,40 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.3] - 2026-09-28
+
+### Security
+
+- UXP path arguments are now checked in the MCP server process before a command is sent. Any absolute path that goes through a symbolic link or directory junction is refused with `UXP_PATH_SYMLINK_REFUSED`. Premiere 26.5 UXP reports a link's own path and cannot `lstat`, so the panel's workspace check could be bypassed through a link inside the approved folder. (#640)
+
+### Fixed
+
+- `get_work_area` now reads work-area points as seconds, as live Premiere 25.2 and 26.5.1 hosts return them. It had divided them by ticks-per-second and reported values near zero. `set_work_area` writes seconds and reads the result back; it fails honestly when a build ignores the write. (#642)
+- `export_sequence` now fails when Premiere rejects the render or writes no file. (#647)
+- UXP source-media timing reads Premiere 26.5's documented synchronous `Media.getStart()` / `getDuration()` before the deprecated Promise-returning `start` / `duration` properties, so `manage_source_media_timing_uxp` can set a start time on 26.5 hosts instead of reporting the command unavailable.
+
+### Verification scope
+
+- Automated checks validate package behavior. The UXP media timing change and the server-side symlink guard have not been verified on a licensed Premiere host.
+
+## [1.18.2] - 2026-09-26
+
+### Added
+
+- Documented Premiere 26.5 WorkAreaUtils coverage with a capability-gated UXP tool. (#637)
+
+### Fixed
+
+- Prevented inspect tools from evaluating unescaped ExtendScript. (#639)
+
+### Documentation
+
+- Clarified the independent Adobe Premiere Pro MCP search presentation on GitHub and the project site. (#643)
+
+### Verification scope
+
+- Automated checks validate package behavior. The new UXP operation has not been verified on a licensed Premiere host in this release.
+
 ## [1.18.1] - 2026-09-23
 
 ### Fixed

package/README.md

@@ -6,13 +6,15 @@
 
 [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fleancoderkavy%2Fpremiere-pro-mcp.svg)](https://mcptoplist.com/server/glama%2Fleancoderkavy%2Fpremiere-pro-mcp)
 
-**Give compatible AI assistants structured control over supported Adobe Premiere Pro workflows.**
+**Adobe Premiere Pro MCP server for reviewable, local-first workflows with compatible AI assistants.**
+
+Premiere Pro automation for Claude, Cursor, Codex, and other MCP clients: AI-assisted editing, project organization, and export checks through Adobe's documented UXP and CEP/ExtendScript APIs.
 
 Free, MIT licensed, local-first, and published to npm as [`premiere-pro-mcp`](https://www.npmjs.com/package/premiere-pro-mcp) — the only package name that installs this project.
 
 [Website](https://premiere-pro-mcp.com/) · [Recorded demo](https://premiere-pro-mcp.com/demo/) · [Compare servers](https://premiere-pro-mcp.com/compare/) · [Setup guides](https://premiere-pro-mcp.com/blog/how-to-set-up-premiere-pro-mcp/) · [Search tools](https://premiere-pro-mcp.com/tools/) · [Troubleshooting](https://premiere-pro-mcp.com/docs/troubleshooting/) · [Release facts](https://premiere-pro-mcp.com/facts/)
 
-Development source: 384 core tools across 57 modules, 4 resources, and 19 guided workflows. A connected UXP host adds 95 capability-gated tools.
+Development source: 384 core tools across 57 modules, 4 resources, and 19 guided workflows. A connected UXP host adds 96 capability-gated tools.
 
 The [completed AE render handoff](docs/after-effects-render-handoff.md) previews and confirms importing one finished render into an existing Premiere bin, with host and file rechecks and an import receipt.
 
@@ -104,14 +106,14 @@ and repository before configuring a client. The new
 VS Code, or Codex settings that point directly to this installation. It is a
 feature included in v1.15.1 and later.
 
-The current source exposes 384 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 95 documented, capability-gated tools without replacing the production CEP bridge.
+The current source exposes 384 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 96 documented, capability-gated tools without replacing the production CEP bridge.
 
 <a id="latest-release"></a>
 
-### Latest release: 1.18.1
+### Latest release: 1.18.2
 
-The published v1.18.0 npm artifact contains **384 core tools**, 382 in its default profile,
-and 477 with a compatible UXP connection. The development catalog above can include
+The published v1.18.2 npm artifact contains **384 core tools**, 382 in its default profile,
+and 478 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
 ### Try a bounded workflow
@@ -160,7 +162,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.18.1 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.1)
+See the [v1.18.2 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.2)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -208,7 +210,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.18.0
+> npm i -g premiere-pro-mcp@1.18.2
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -216,7 +218,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.18.0` |
+> | Version | `1.18.2` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -229,9 +231,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.0/premiere-pro-mcp-1.18.0.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.2/premiere-pro-mcp-1.18.2.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.2/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -531,11 +533,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.18.0 --install-cep
+npx -y premiere-pro-mcp@1.18.2 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.18.0` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.18.2` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -573,7 +575,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.18.0 --install-cep
+npx -y premiere-pro-mcp@1.18.2 --install-cep
 ```
 
 The Claude Code package lives in
@@ -897,11 +899,11 @@ reports revision-bound notes, VFX state, change impact and turnover exceptions.
 It performs local inspection; host edits and exports use separate guarded tools.
 See [usage, example and remaining execution adapters](docs/film-editorial-workflows.md).
 
-## Tools (384 core total; 382 under the default profile; 477 with a connected UXP bridge)
+## Tools (384 core total; 382 under the default profile; 478 with a connected UXP bridge)
 
 The [complete supported-actions catalog](docs/supported-actions.md) lists every
 registered core tool, the two tools restricted behind explicit `unsafe-script`
-authority, and all 95 authenticated UXP additions with their current action or mode
+authority, and all 96 authenticated UXP additions with their current action or mode
 values. It is generated from the same MCP registration surface returned to clients;
 the tables below are a shorter workflow-oriented overview.
 

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.1" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.3" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.1"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.3"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.1" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.3" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.1"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.1"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.3"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.3"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.18.1</strong>
+        <strong id="updateTitle">Version 1.18.3</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.18.1";
+  var CURRENT_VERSION = "1.18.3";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/bridge/script-builder.js

@@ -43,6 +43,14 @@ function __ticksToSeconds(ticks) {
   return parseFloat(ticks) / TICKS_PER_SECOND;
 }
 
+// Sequence work-area getters return seconds (often as a string) on live 25.x
+// and 26.x hosts. Values above 1e6 can only be ticks, so convert those.
+function __workAreaSeconds(value) {
+  var number = parseFloat(value);
+  if (!isFinite(number) || number <= -399999) return null;
+  return number > 1000000 ? number / TICKS_PER_SECOND : number;
+}
+
 function __secondsToTicks(seconds) {
   return Math.round(parseFloat(seconds) * TICKS_PER_SECOND);
 }

package/dist/bridge/uxp-websocket-bridge.js

@@ -2,6 +2,7 @@ import { randomUUID, timingSafeEqual } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { createServer } from "node:http";
 import { WebSocket, WebSocketServer } from "ws";
+import { assertNoSymlinkedPaths, SymlinkPathError } from "../security/path-guard.js";
 const LOOPBACK_HOST = "127.0.0.1";
 const SUPPORTED_PROTOCOLS = new Set([1, 2]);
 export class UxpBridgeError extends Error {
@@ -125,6 +126,16 @@ export class UxpWebSocketBridge extends EventEmitter {
         if (hello.commands[command]?.supported !== true) {
             throw new UxpBridgeError("UXP_COMMAND_UNSUPPORTED", `Connected Premiere host does not support UXP command '${command}'`);
         }
+        // The panel cannot see through links on Premiere 26.5 UXP (#640), so refuse
+        // symlinked path segments here, before anything reaches the host.
+        try {
+            assertNoSymlinkedPaths(args);
+        }
+        catch (error) {
+            if (error instanceof SymlinkPathError)
+                throw new UxpBridgeError(error.code, error.message);
+            throw error;
+        }
         const minimumTimeoutMs = requestOptions.minimumTimeoutMs ?? 0;
         if (!Number.isInteger(minimumTimeoutMs) || minimumTimeoutMs < 0) {
             throw new Error("UXP minimum request timeout must be a non-negative integer");

package/dist/platform-capabilities.js

@@ -245,6 +245,8 @@ export function buildPlatformCapabilityReport(capabilities, platform = process.p
                     "frame.export",
                     "sequence.playhead.inspect",
                     "sequence.playhead.set",
+                    "workArea.inspect",
+                    "workArea.set",
                     "sequence.timing.inspect",
                     "graphics.mogrtPath.inspect",
                     "timeline.selection.lift",

package/dist/resources/adobe-api-inventory.json

@@ -15,11 +15,14 @@
     "total": 976,
     "mapped": 377,
     "unmapped": 599,
-    "manifestOnly": 5
+    "manifestOnly": 8
   },
   "manifestOnly": [
     "MarkerCollection",
     "VideoClipTrackItem.hasVideoTransition",
+    "WorkAreaUtilsStatic.getWorkAreaInPoint",
+    "WorkAreaUtilsStatic.getWorkAreaOutPoint",
+    "WorkAreaUtilsStatic.setWorkAreaInOutPoints",
     "storage.localFileSystem.createPersistentToken",
     "storage.localFileSystem.getEntryForPersistentToken",
     "storage.localFileSystem.getFolder"

package/dist/resources/adobe-uxp-coverage.json

@@ -223,6 +223,31 @@
       "idempotency": "operation_id",
       "verificationBoundary": "sequence_playhead_readback"
     },
+    {
+      "id": "guarded-work-area-control",
+      "adobeApi": [
+        "WorkAreaUtilsStatic.getWorkAreaInPoint",
+        "WorkAreaUtilsStatic.getWorkAreaOutPoint",
+        "WorkAreaUtilsStatic.setWorkAreaInOutPoints"
+      ],
+      "documentationUrls": [
+        "https://developer.adobe.com/premiere-pro/uxp/changelog/"
+      ],
+      "minimumPremiereVersion": "26.5.0",
+      "backend": "uxp",
+      "uxpCommand": "workArea.set",
+      "mcpTools": [
+        "manage_work_area_uxp"
+      ],
+      "availability": "current",
+      "implementationStatus": "implemented",
+      "verificationStatus": "automated_contract_verified",
+      "liveHostVerificationStatus": "not_run",
+      "mutatesProject": true,
+      "undoable": false,
+      "idempotency": "operation_id",
+      "verificationBoundary": "work_area_readback"
+    },
     {
       "id": "guarded-app-preferences",
       "adobeApi": [

package/dist/security/capabilities.js

@@ -242,6 +242,10 @@ const ACTION_CAPABILITIES = {
         inspect: ["inspect"],
         update: ["edit"],
     },
+    manage_work_area_uxp: {
+        inspect: ["inspect"],
+        set: ["edit"],
+    },
     manage_sequence_playhead_uxp: {
         inspect: ["inspect"],
         set: ["edit"],

package/dist/security/path-guard.d.ts

@@ -0,0 +1,10 @@
+export declare class SymlinkPathError extends Error {
+    readonly argumentPath: string;
+    readonly code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath: string);
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export declare function findSymlinkedSegment(value: string): string | null;
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export declare function assertNoSymlinkedPaths(args: unknown): void;
+//# sourceMappingURL=path-guard.d.ts.map

package/dist/security/path-guard.js

@@ -0,0 +1,106 @@
+import { lstatSync, readlinkSync } from "node:fs";
+import { posix, win32 } from "node:path";
+/**
+ * Server-side symlink confinement for UXP path arguments (issue #640).
+ *
+ * The UXP panel checks lexical containment inside the approved workspace, but
+ * Premiere 26.5 UXP cannot see through links: `Entry.nativePath` reports the
+ * link's own path and `lstat` is unimplemented. The MCP server runs on the same
+ * machine as Premiere, so it walks every absolute path argument with Node's
+ * real filesystem before a command is sent and refuses any symlinked or
+ * junctioned segment. Segments that do not exist yet (new output files) end
+ * the walk; they cannot redirect anything.
+ */
+const MAX_DEPTH = 8;
+const MAX_STRINGS = 512;
+/** macOS calibration links that always point into /private. */
+const SYSTEM_LINK_TARGETS = {
+    "/tmp": ["private/tmp", "/private/tmp"],
+    "/var": ["private/var", "/private/var"],
+    "/etc": ["private/etc", "/private/etc"],
+};
+export class SymlinkPathError extends Error {
+    argumentPath;
+    code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath) {
+        super(`${argumentPath} goes through a symbolic link or junction. Use the real folder inside the approved workspace. No command was sent to Premiere.`);
+        this.argumentPath = argumentPath;
+        this.name = "SymlinkPathError";
+    }
+}
+function absoluteFlavor(value) {
+    if (/^[A-Za-z]:[\\/]/.test(value) || /^\\\\[^\\]/.test(value))
+        return win32;
+    if (value.startsWith("/") && !value.startsWith("//"))
+        return posix;
+    return null;
+}
+function isSystemLink(segment) {
+    const targets = SYSTEM_LINK_TARGETS[segment];
+    if (!targets || process.platform !== "darwin")
+        return false;
+    try {
+        return targets.includes(readlinkSync(segment));
+    }
+    catch {
+        return false;
+    }
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export function findSymlinkedSegment(value) {
+    const flavor = absoluteFlavor(value);
+    if (!flavor || value.includes("\0"))
+        return null;
+    const normalized = flavor.normalize(value);
+    const root = flavor.parse(normalized).root;
+    const parts = normalized.slice(root.length).split(flavor.sep).filter(Boolean);
+    let current = root;
+    for (const part of parts) {
+        current = flavor.join(current, part);
+        let stats;
+        try {
+            stats = lstatSync(current);
+        }
+        catch {
+            return null;
+        }
+        if (stats.isSymbolicLink()) {
+            if (!isSystemLink(current))
+                return current;
+            // Keep walking below /tmp, /var and /etc: lstat of later segments
+            // resolves through the calibration link and still sees user links.
+            continue;
+        }
+        if (!stats.isDirectory())
+            return null;
+    }
+    return null;
+}
+function collectStrings(value, path, out, depth) {
+    if (out.length >= MAX_STRINGS || depth > MAX_DEPTH)
+        return;
+    if (typeof value === "string") {
+        if (absoluteFlavor(value))
+            out.push([path, value]);
+        return;
+    }
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => collectStrings(entry, `${path}[${index}]`, out, depth + 1));
+        return;
+    }
+    if (value && typeof value === "object") {
+        for (const [key, entry] of Object.entries(value)) {
+            collectStrings(entry, path ? `${path}.${key}` : key, out, depth + 1);
+        }
+    }
+}
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export function assertNoSymlinkedPaths(args) {
+    const candidates = [];
+    collectStrings(args, "", candidates, 0);
+    for (const [argumentPath, value] of candidates) {
+        if (findSymlinkedSegment(value))
+            throw new SymlinkPathError(argumentPath || "path");
+    }
+}
+//# sourceMappingURL=path-guard.js.map

package/dist/tools/export.js

@@ -647,8 +647,13 @@ export function getExportTools(bridgeOptions) {
             presetPath,
             ${args.work_area_only ? "app.encoder.ENCODE_WORKAREA" : "app.encoder.ENCODE_ENTIRE"}
           );
+          // Premiere documents a boolean; false means the render was rejected.
+          // Some hosts throw instead; buildToolScript already maps that to __error.
+          if (exportResult === false) return __error("Premiere rejected the sequence export.");
+          var outputFile = new File(outputPath);
+          if (!outputFile.exists) return __error("Premiere did not write the requested export file.");
 
-          return __result({ exported: true, outputPath: outputPath, presetUsed: presetPath });
+          return __result({ exported: true, verified: true, outputPath: outputPath, presetUsed: presetPath });
         `);
                 return sendCommand(script, { ...bridgeOptions, timeoutMs: 120000 }); // 2 min timeout for exports
             },

package/dist/tools/playhead.js

@@ -65,10 +65,21 @@ export function getPlayheadTools(bridgeOptions) {
           var seq = app.project.activeSequence;
           if (!seq) return __error("No active sequence");
           
-          seq.setWorkAreaInPoint(__secondsToTicks(${args.in_seconds}).toString());
-          seq.setWorkAreaOutPoint(__secondsToTicks(${args.out_seconds}).toString());
-          
-          return __result({ workAreaIn: ${args.in_seconds}, workAreaOut: ${args.out_seconds} });
+          // Live hosts (25.2, 26.5.1) read and write work-area points in seconds,
+          // not ticks. Write seconds, then read back: some builds ignore the write.
+          var requestedIn = ${Number(args.in_seconds)};
+          var requestedOut = ${Number(args.out_seconds)};
+          if (!(requestedOut > requestedIn)) return __error("out_seconds must be greater than in_seconds.");
+          seq.setWorkAreaInPoint(requestedIn);
+          seq.setWorkAreaOutPoint(requestedOut);
+          var observedIn = __workAreaSeconds(seq.getWorkAreaInPoint());
+          var observedOut = __workAreaSeconds(seq.getWorkAreaOutPoint());
+          var frameSeconds = seq.timebase ? __ticksToSeconds(seq.timebase) : 1 / 24;
+          if (observedIn === null || observedOut === null ||
+              Math.abs(observedIn - requestedIn) > frameSeconds || Math.abs(observedOut - requestedOut) > frameSeconds) {
+            return __error("Premiere did not apply the work area (read back " + observedIn + " to " + observedOut + " s). Use set_sequence_in_out_points to mark an export range instead.");
+          }
+          return __result({ workAreaIn: observedIn, workAreaOut: observedOut, verified: true });
         `);
                 return sendCommand(script, bridgeOptions);
             },
@@ -83,8 +94,10 @@ export function getPlayheadTools(bridgeOptions) {
           var inPoint = seq.getWorkAreaInPoint();
           var outPoint = seq.getWorkAreaOutPoint();
           return __result({
-            inSeconds: __ticksToSeconds(inPoint),
-            outSeconds: __ticksToSeconds(outPoint)
+            inSeconds: __workAreaSeconds(inPoint),
+            outSeconds: __workAreaSeconds(outPoint),
+            rawIn: String(inPoint),
+            rawOut: String(outPoint)
           });
         `);
                 return sendCommand(script, bridgeOptions);

package/dist/tools/scripting.d.ts

@@ -44,6 +44,8 @@ export declare function getScriptingTools(bridgeOptions: BridgeOptions): {
             properties: {
                 object_path: {
                     type: string;
+                    minLength: number;
+                    maxLength: number;
                     description: string;
                 };
                 max_depth: {
@@ -81,6 +83,8 @@ export declare function getScriptingTools(bridgeOptions: BridgeOptions): {
             properties: {
                 sequence_id: {
                     type: string;
+                    minLength: number;
+                    maxLength: number;
                     description: string;
                 };
             };

package/dist/tools/scripting.js

@@ -1,5 +1,19 @@
 import { buildToolScript, escapeForExtendScript } from "../bridge/script-builder.js";
 import { sendCommand, sendRawCommand } from "../bridge/file-bridge.js";
+/** Property walk only: app/qe, identifiers, and numeric indexes. No calls or statements. */
+const SAFE_DOM_OBJECT_PATH = /^(?:app|qe)(?:\.[A-Za-z_][A-Za-z0-9_]*|\[\d+\])*$/;
+function safeDomObjectPath(objectPath) {
+    if (typeof objectPath !== "string" || objectPath.length === 0 || objectPath.length > 512) {
+        return { ok: false, error: "object_path must be a non-empty Premiere DOM path of at most 512 characters." };
+    }
+    if (!SAFE_DOM_OBJECT_PATH.test(objectPath)) {
+        return {
+            ok: false,
+            error: "object_path must be a property path starting with app or qe (for example app.project.activeSequence.videoTracks[0]). Function calls, operators, and statements are rejected because inspect_dom_object is not an unsafe-script tool.",
+        };
+    }
+    return { ok: true, path: objectPath };
+}
 export function getScriptingTools(bridgeOptions) {
     return {
         execute_extendscript: {
@@ -98,7 +112,7 @@ Examples:
             },
         },
         inspect_dom_object: {
-            description: `Inspect a Premiere Pro DOM object and list its properties, methods, and values. Useful for exploring the API and debugging.
+            description: `Inspect a Premiere Pro DOM object and list its properties, methods, and values. Useful for exploring the API and debugging. object_path must be a property path starting with app or qe (identifiers and numeric indexes only). Function calls, operators, and statements are rejected; use evaluate_expression with unsafe-script for those.
 
 Examples:
 - "app.project" → project properties
@@ -110,7 +124,9 @@ Examples:
                 properties: {
                     object_path: {
                         type: "string",
-                        description: "Dot-path to the DOM object to inspect (e.g., 'app.project.activeSequence')",
+                        minLength: 1,
+                        maxLength: 512,
+                        description: "Property path starting with app or qe (e.g. 'app.project.activeSequence.videoTracks[0]'). Function calls and statements are rejected.",
                     },
                     max_depth: {
                         type: "number",
@@ -120,7 +136,11 @@ Examples:
                 required: ["object_path"],
             },
             handler: async (args) => {
+                const objectPath = safeDomObjectPath(args.object_path);
+                if (!objectPath.ok)
+                    return { success: false, error: objectPath.error };
                 const maxDepth = Math.min(args.max_depth ?? 1, 3);
+                const quotedPath = escapeForExtendScript(objectPath.path);
                 const script = buildToolScript(`
           function inspectObj(obj, depth, maxD) {
             if (depth > maxD) return "<max depth>";
@@ -174,19 +194,19 @@ Examples:
           }
           
           try {
-            var obj = ${args.object_path};
-            if (obj === null || obj === undefined) return __error("Object is null or undefined: ${args.object_path}");
+            var obj = ${objectPath.path};
+            if (obj === null || obj === undefined) return __error("Object is null or undefined: ${quotedPath}");
             var inspection = inspectObj(obj, 0, ${maxDepth});
             return __result({
-              path: "${args.object_path}",
+              path: "${quotedPath}",
               type: typeof obj,
               inspection: inspection
             });
           } catch(e) {
-            return __error("Cannot access: ${args.object_path} — " + e.toString());
+            return __error("Cannot access: ${quotedPath} — " + e.toString());
           }
         `);
-                return sendRawCommand(script, bridgeOptions);
+                return sendCommand(script, bridgeOptions);
             },
         },
         list_clip_effects: {
@@ -252,13 +272,15 @@ Examples:
                 properties: {
                     sequence_id: {
                         type: "string",
+                        minLength: 1,
+                        maxLength: 512,
                         description: "Sequence name or ID. Uses active sequence if omitted.",
                     },
                 },
             },
             handler: async (args) => {
                 const seqLookup = args.sequence_id
-                    ? `var seq = __findSequence("${args.sequence_id}"); if (!seq) return __error("Sequence not found");`
+                    ? `var seq = __findSequence("${escapeForExtendScript(args.sequence_id)}"); if (!seq) return __error("Sequence not found");`
                     : `var seq = app.project.activeSequence; if (!seq) return __error("No active sequence");`;
                 const script = buildToolScript(`
           ${seqLookup}

package/dist/tools/uxp.d.ts

@@ -471,6 +471,91 @@ export declare function getUxpTools(bridge: UxpWebSocketBridge): {
             error: string;
         }>;
     };
+    manage_work_area_uxp: {
+        description: string;
+        parameters: {
+            type: "object";
+            additionalProperties: boolean;
+            properties: {
+                action: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                };
+                expected_sequence_guid: {
+                    type: string;
+                    minLength: number;
+                    maxLength: number;
+                    description: string;
+                };
+                expected_work_area: {
+                    type: string;
+                    additionalProperties: boolean;
+                    properties: {
+                        in_seconds: {
+                            type: string;
+                            minimum: number;
+                            maximum: number;
+                            description: string;
+                        };
+                        out_seconds: {
+                            type: string;
+                            minimum: number;
+                            maximum: number;
+                            description: string;
+                        };
+                    };
+                    required: string[];
+                    description: string;
+                };
+                in_seconds: {
+                    type: string;
+                    minimum: number;
+                    maximum: number;
+                    description: string;
+                };
+                out_seconds: {
+                    type: string;
+                    minimum: number;
+                    maximum: number;
+                    description: string;
+                };
+                operation_id: {
+                    type: "string";
+                    description: string;
+                };
+            };
+            required: string[];
+        };
+        operationalCapability: {
+            backend: "UXP";
+            backends: "uxp"[];
+            minimumPremiereVersion: string;
+            verificationBoundary: "structured_uxp_readback";
+            hostVerificationRequired: boolean;
+            notes: string[];
+        };
+        handler: (args: {
+            action: "inspect" | "set";
+            expected_sequence_guid?: string;
+            expected_work_area?: {
+                in_seconds: number;
+                out_seconds: number;
+            };
+            in_seconds?: number;
+            out_seconds?: number;
+            operation_id?: string;
+        }) => Promise<{
+            success: boolean;
+            data: {
+                backend: string;
+                result: unknown;
+            };
+        } | {
+            success: boolean;
+            error: string;
+        }>;
+    };
     manage_sequence_playhead_uxp: {
         description: string;
         parameters: {

package/dist/tools/uxp.js

@@ -334,6 +334,53 @@ export function getUxpTools(bridge) {
                 });
             },
         },
+        manage_work_area_uxp: {
+            description: "Inspect or set the active sequence work area through Premiere 26.5+ documented UXP WorkAreaUtils. Setting requires the sequence GUID and complete work area returned by inspect, keeps out within the sequence end, serializes competing requests, and verifies native in/out readback. WorkAreaUtils is a direct call, not an undoable transaction; a runtime capability probe remains authoritative and live-host behavior is not yet verified.",
+            parameters: {
+                type: "object",
+                additionalProperties: false,
+                properties: {
+                    action: { type: "string", enum: ["inspect", "set"], description: "Read the active work area or apply a guarded update." },
+                    expected_sequence_guid: { type: "string", minLength: 1, maxLength: 512, description: "Required for set; copy the active sequence GUID returned by inspect." },
+                    expected_work_area: {
+                        type: "object",
+                        additionalProperties: false,
+                        properties: {
+                            in_seconds: { type: "number", minimum: 0, maximum: 86400, description: "Work-area in point returned by inspect." },
+                            out_seconds: { type: "number", minimum: 0, maximum: 86400, description: "Work-area out point returned by inspect." },
+                        },
+                        required: ["in_seconds", "out_seconds"],
+                        description: "Required for set; complete work area returned by inspect. A changed value rejects the request before Premiere is called.",
+                    },
+                    in_seconds: { type: "number", minimum: 0, maximum: 86400, description: "Required for set; new work-area in point in seconds." },
+                    out_seconds: { type: "number", minimum: 0, maximum: 86400, description: "Required for set; new work-area out point in seconds. Must exceed in_seconds and stay within the sequence end." },
+                    operation_id: operationId,
+                },
+                required: ["action"],
+            },
+            operationalCapability: {
+                backend: "UXP",
+                backends: ["uxp"],
+                minimumPremiereVersion: "26.5",
+                verificationBoundary: "structured_uxp_readback",
+                hostVerificationRequired: true,
+                notes: ["Available only through an authenticated UXP bridge whose runtime capability handshake advertises the requested workArea command (Premiere 26.5+ WorkAreaUtils)."],
+            },
+            handler: async (args) => {
+                if (args.action === "inspect")
+                    return invoke(bridge, "workArea.inspect");
+                return invoke(bridge, "workArea.set", {
+                    ...(args.expected_sequence_guid === undefined ? {} : { expectedSequenceGuid: args.expected_sequence_guid }),
+                    ...(args.expected_work_area === undefined ? {} : { expectedWorkArea: {
+                            inSeconds: args.expected_work_area.in_seconds,
+                            outSeconds: args.expected_work_area.out_seconds,
+                        } }),
+                    ...(args.in_seconds === undefined ? {} : { inSeconds: args.in_seconds }),
+                    ...(args.out_seconds === undefined ? {} : { outSeconds: args.out_seconds }),
+                    ...(args.operation_id ? { operationId: args.operation_id } : {}),
+                });
+            },
+        },
         manage_sequence_playhead_uxp: {
             description: "Inspect or set the active sequence player position through documented Premiere UXP APIs. Setting requires the sequence GUID and current position returned by inspect, serializes competing requests for that sequence, and verifies native readback; it changes player state only and makes no project-save or Undo claim.",
             parameters: {

package/docs/adobe-beta-work-area-drift.md

@@ -10,8 +10,12 @@ and the
 
 The generated receipt covers only the beta root binding
 `premierepro.WorkAreaUtils`, the empty `WorkAreaUtils` instance type, and the
-five methods of `WorkAreaUtilsStatic`. It has no MCP action and makes no
-production call to that beta surface.
+five methods of `WorkAreaUtilsStatic`. Adobe has since shipped
+`WorkAreaUtils` in stable Premiere 26.5.0. The capability-gated
+`manage_work_area_uxp` tool calls the get/set-in-out methods only when the
+connected host probes them, and requires Premiere 26.5+; see
+[Adobe UXP 26.5 coverage](adobe-uxp-26.5-coverage.md). This receipt still
+accounts only for the pinned declarations.
 
 The repository's existing `get_work_area` and `set_work_area` tools use
 established legacy host paths. This receipt does not change those paths or

package/docs/supported-actions.md

@@ -13,8 +13,8 @@ source catalog may include unreleased actions.
 | Registered core actions | 384 | CEP/local server catalog; host and authority checks still apply |
 | Default-profile core actions | 382 | Advertised with `inspect,edit,export,filesystem` |
 | Restricted core actions | 2 | Require explicit `unsafe-script` authority |
-| Authenticated UXP additions | 95 | Advertised only while a compatible authenticated UXP panel is connected |
-| Default profile with UXP | 477 | 382 core plus 95 UXP tools |
+| Authenticated UXP additions | 96 | Advertised only while a compatible authenticated UXP panel is connected |
+| Default profile with UXP | 478 | 382 core plus 96 UXP tools |
 
 ## How to read support
 
@@ -221,7 +221,7 @@ operation” when the tool has no enum-based mode.
 | `inspect_after_effects_render_templates` | Default profile | Single operation | Read available render and output-module template names from the first existing After Effects render-queue item. It never queues or renders a composition. |
 | `inspect_after_effects_template_source` | Default profile | Single operation | Inspect a saved After Effects source composition for MOGRT-relevant dimensions, duration, text fonts, layer-source kinds, and Essential Graphics controller names when the host exposes the AE 16.1+ readback API. It never creates a composition or returns asset paths. |
 | `inspect_cmx3600_edl` | Default profile | Single operation | Parse a local CMX 3600 EDL into bounded event, reel, track, transition, and timecode facts without importing it into Premiere. |
-| `inspect_dom_object` | Default profile | Single operation | Inspect a Premiere Pro DOM object and list its properties, methods, and values. Useful for exploring the API and debugging. Examples: - "app.project" → project properties - "app.project.activeSequence" → sequence properties - "app.project.activeSequence.videoTracks[0].clips[0]" → first clip on V1 - "app.project.activeSequence.videoTracks[0].clips[0].components[0]" → first component of a clip |
+| `inspect_dom_object` | Default profile | Single operation | Inspect a Premiere Pro DOM object and list its properties, methods, and values. Useful for exploring the API and debugging. object_path must be a property path starting with app or qe (identifiers and numeric indexes only). Function calls, operators, and statements are rejected; use evaluate_expression with unsafe-script for those. Examples: - "app.project" → project properties - "app.project.activeSequence" → sequence properties - "app.project.activeSequence.videoTracks[0].clips[0]" → first clip on V1 - "app.project.activeSequence.videoTracks[0].clips[0].components[0]" → first component of a clip |
 | `inspect_edit_readiness` | Default profile | Single operation | Audit the active sequence in one read-only bridge request for empty timelines, primary-track gaps, disabled clips, muted tracks, and excessive Motion scale. Structural diagnostics only; it cannot judge story, framing, sound, or final delivery. |
 | `inspect_fcpxml_interchange` | Default profile | Single operation | Inspect a local FCPXML document's root version, sequence/clip counts, bounded asset declarations, and text-only parser warnings before deliberate Premiere import. |
 | `inspect_film_editorial_workflow` | Default profile | Single operation | Validate a revision-bound film editorial manifest against captured source and timeline identities. Build complete declared coverage review groups, independent picture/audio preferences, screening-note exceptions, story dependencies, VFX state, change impact and a department turnover manifest. Local inspection only: no host edits, exports, automatic creative decisions or verified host claims. |
@@ -505,6 +505,7 @@ authenticated and the connected host advertises the required command capabilitie
 | `manage_timeline_selection_uxp` | Connected UXP | `inspect`, `inspect_targets`, `replace`, `add`, `remove`, `clear` | Inspect, replace, add to, remove from, or clear the active sequence's native UXP clip selection with sequence and clip fingerprint stale-state guards. |
 | `manage_timeline_source_label_uxp` | Connected UXP | `inspect`, `update` | Inspect or set the documented source Project-item color label resolved from one audio or video timeline coordinate in the sequence named by sequence_id (inspect falls back to the active sequence only when sequence_id is omitted; update always targets expected_snapshot.sequence_id). Update requires the complete reviewed snapshot, explicit confirmation, and an operation ID; it serializes color-label changes by source item, commits one undoable transaction, then re-reads the coordinate and source label. A source label is project-global: another use of the same source can reflect the change. It does not label a timeline-only instance, change clip timing, prove rendered appearance, playback, persistence, or Undo behavior. |
 | `manage_track_state_uxp` | Connected UXP | `inspect`, `set_mute` | Inspect audio, video, and caption track mute state or set one media type serially with stale-state preflight and per-track readback. Adobe exposes this as direct promises, so no undo transaction is claimed. |
+| `manage_work_area_uxp` | Connected UXP | `inspect`, `set` | Inspect or set the active sequence work area through Premiere 26.5+ documented UXP WorkAreaUtils. Setting requires the sequence GUID and complete work area returned by inspect, keeps out within the sequence end, serializes competing requests, and verifies native in/out readback. WorkAreaUtils is a direct call, not an undoable transaction; a runtime capability probe remains authoritative and live-host behavior is not yet verified. |
 | `manage_workflow_checkpoints_uxp` | Connected UXP | `has`, `get`, `set`, `clear` | Read or transactionally write small, namespaced workflow checkpoints on the active project or a targeted sequence. Persistent values may sync with cloud projects; never store secrets, native paths, transcripts, or media names. |
 | `organize_project_items_uxp` | Connected UXP | `inspect_bin`, `create_bin`, `create_smart_bin`, `rename`, `move`, `set_color`, `remove` | Inspect a bin or transactionally create, rename, move, color-label, and remove project items with stable-ID guards. |
 | `plan_transcript_rough_cut_uxp` | Connected UXP | Single operation | Build a revision-locked, non-mutating rough-cut plan from Premiere's native transcript and verified 1x sequence placements. The plan orders cuts from the end of the timeline, requires a duplicate sequence, and requires re-query after every mutation. |

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "premiere-pro-mcp",
   "mcpName": "io.github.leancoderkavy/premiere-pro",
-  "version": "1.18.1",
+  "version": "1.18.3",
   "description": "MCP server for Adobe Premiere Pro with 384 core AI video editing tools, a guarded After Effects MOGRT studio, and a capability-aware UXP bridge for supported Premiere workflows.",
   "main": "dist/index.js",
   "types": "./dist/index.d.ts",
@@ -203,7 +203,13 @@
     "adobe-premiere-mcp",
     "premiere-mcp",
     "video-editing-mcp",
-    "uxp"
+    "uxp",
+    "adobe-uxp",
+    "premiere-pro-uxp",
+    "premiere-pro-ai",
+    "premiere-pro-automation",
+    "claude-premiere-pro",
+    "premiere-pro-extendscript"
   ],
   "license": "MIT",
   "publishConfig": {
@@ -214,12 +220,12 @@
     "node": ">=20.19.0"
   },
   "dependencies": {
-    "@posthog/core": "1.54.2",
-    "@posthog/types": "1.412.1",
+    "@posthog/core": "1.55.1",
+    "@posthog/types": "1.412.4",
     "@modelcontextprotocol/node": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "jose": "^6.2.10",
-    "posthog-node": "5.52.4",
+    "posthog-node": "5.52.5",
     "ws": "^8.21.1",
     "zod": "^4.4.3"
   },

package/public-product-manifest.json

@@ -10,7 +10,7 @@
     "name": "MCP for Adobe Premiere Pro",
     "mcpName": "io.github.leancoderkavy/premiere-pro",
     "npmPackage": "premiere-pro-mcp",
-    "version": "1.18.1",
+    "version": "1.18.3",
     "repository": "https://github.com/leancoderkavy/premiere-pro-mcp",
     "homepage": "https://premiere-pro-mcp.com/",
     "license": "MIT",
@@ -29,8 +29,8 @@
   "capabilitySurface": {
     "registeredCoreTools": 384,
     "defaultProfileTools": 382,
-    "authenticatedUxpAdditions": 95,
-    "defaultProfileWithUxp": 477,
+    "authenticatedUxpAdditions": 96,
+    "defaultProfileWithUxp": 478,
     "toolModules": 57,
     "guidedWorkflows": 19
   },

package/scripts/validate-adobe-marketplace-branding.mjs

@@ -58,8 +58,12 @@ for (const surface of surfaces) {
       errors.push(`${surface.file} is missing required display name evidence: ${required}`);
     }
   }
+  // The README can use the full search phrase without treating its suffix as a display name.
+  const brandingText = surface.file === "README.md"
+    ? source.replaceAll("Adobe Premiere Pro MCP", "")
+    : source;
   for (const retired of retiredDisplayNames) {
-    if (source.includes(retired)) {
+    if (brandingText.includes(retired)) {
       errors.push(`${surface.file} still exposes retired display name: ${retired}`);
     }
   }

package/uxp-plugin/commands.cjs

@@ -41,6 +41,8 @@
       "sequence.createPreset": { destructive: true, undoable: false, idempotent: true, requiresWorkspace: true, minHostVersion: "26.3.0", probe: canCreatePresetSequence, handler: createPresetSequence },
       "sequence.range.inspect": { readOnly: true, minHostVersion: "25.6.0", probe: canInspectSequenceRange, handler: inspectSequenceRange },
       "sequence.range.update": { destructive: true, undoable: true, idempotent: true, minHostVersion: "25.6.0", probe: canUpdateSequenceRange, handler: updateSequenceRange },
+      "workArea.inspect": { readOnly: true, minHostVersion: "26.5.0", probe: canInspectWorkArea, handler: inspectWorkArea },
+      "workArea.set": { idempotent: true, minHostVersion: "26.5.0", probe: canSetWorkArea, handler: setWorkArea },
       "sequence.playhead.inspect": { readOnly: true, minHostVersion: "25.6.0", probe: canInspectSequencePlayhead, handler: inspectSequencePlayhead },
       "sequence.playhead.set": { idempotent: true, minHostVersion: "25.6.0", probe: canSetSequencePlayhead, handler: setSequencePlayhead },
       "time.frameAlignment.inspect": { readOnly: true, minHostVersion: "25.6.0", probe: canInspectFrameAlignment, handler: inspectFrameAlignment },
@@ -443,6 +445,84 @@
         if (sequenceRangeUpdateTails.get(sequenceGuid) === tail) sequenceRangeUpdateTails.delete(sequenceGuid);
       });
     }
+    async function workAreaSnapshot(sequence) {
+      const sequenceGuid = sequenceGuidRequired(sequence);
+      const utils = ppro.WorkAreaUtils;
+      const [inPoint, outPoint] = await Promise.all([utils.getWorkAreaInPoint(sequence), utils.getWorkAreaOutPoint(sequence)]);
+      const workArea = {
+        inSeconds: tickSecondsRequired(inPoint, "work area in point"),
+        outSeconds: tickSecondsRequired(outPoint, "work area out point")
+      };
+      if (workArea.outSeconds < workArea.inSeconds) {
+        throw commandError("UXP_VERIFICATION_FAILED", "Premiere returned a work area whose out point precedes its in point");
+      }
+      return { sequenceGuid, workArea };
+    }
+    async function inspectWorkArea(args) {
+      assertOnlyKeys(args, []);
+      const context = await activeContext(false);
+      return { ...await workAreaSnapshot(context.sequence), verificationBoundary: "work_area_readback" };
+    }
+    function validateWorkAreaSetArgs(args) {
+      assertObject(args);
+      assertOnlyKeys(args, ["expectedSequenceGuid", "expectedWorkArea", "inSeconds", "outSeconds", "operationId"]);
+      if (typeof args.expectedSequenceGuid !== "string" || !args.expectedSequenceGuid || args.expectedSequenceGuid.length > 512) {
+        throw commandError("UXP_INVALID_ARGUMENT", "expectedSequenceGuid is required and must be at most 512 characters");
+      }
+      assertObject(args.expectedWorkArea);
+      assertOnlyKeys(args.expectedWorkArea, ["inSeconds", "outSeconds"]);
+      const expectedWorkArea = {
+        inSeconds: boundedSeconds(args.expectedWorkArea.inSeconds, "expectedWorkArea.inSeconds"),
+        outSeconds: boundedSeconds(args.expectedWorkArea.outSeconds, "expectedWorkArea.outSeconds")
+      };
+      const inSeconds = boundedSeconds(args.inSeconds, "inSeconds");
+      const outSeconds = boundedSeconds(args.outSeconds, "outSeconds");
+      if (outSeconds <= inSeconds) throw commandError("UXP_INVALID_ARGUMENT", "outSeconds must be greater than inSeconds");
+      return { expectedSequenceGuid: args.expectedSequenceGuid, expectedWorkArea, desired: { inSeconds, outSeconds } };
+    }
+    async function setWorkArea(args) {
+      const input = validateWorkAreaSetArgs(args);
+      const inTick = await tickTime(input.desired.inSeconds, "inSeconds");
+      const outTick = await tickTime(input.desired.outSeconds, "outSeconds");
+      return withSequenceRangeUpdateLock("workArea:" + input.expectedSequenceGuid, async () => {
+        const context = await activeContext(false);
+        const before = await workAreaSnapshot(context.sequence);
+        if (before.sequenceGuid !== input.expectedSequenceGuid) {
+          throw commandError("UXP_STALE_SEQUENCE", "The active sequence changed before the work-area update; inspect and retry");
+        }
+        if (!sameSeconds(before.workArea.inSeconds, input.expectedWorkArea.inSeconds) ||
+          !sameSeconds(before.workArea.outSeconds, input.expectedWorkArea.outSeconds)) {
+          throw commandError("UXP_STALE_RANGE", "The work area changed before the update; inspect the current work area and retry");
+        }
+        const endSeconds = tickSecondsRequired(await context.sequence.getEndTime(), "sequence end point");
+        if (input.desired.outSeconds > endSeconds + 0.000001) {
+          throw commandError("UXP_INVALID_ARGUMENT", "outSeconds must not exceed the sequence end");
+        }
+        const accepted = await ppro.WorkAreaUtils.setWorkAreaInOutPoints(context.sequence, inTick, outTick);
+        if (accepted !== true) throw commandError("UXP_ACTION_REJECTED", "Premiere rejected the work-area update");
+        const after = await workAreaSnapshot(context.sequence);
+        if (after.sequenceGuid !== before.sequenceGuid ||
+          !sameSeconds(after.workArea.inSeconds, input.desired.inSeconds) ||
+          !sameSeconds(after.workArea.outSeconds, input.desired.outSeconds)) {
+          throw commandError("UXP_VERIFICATION_FAILED", "Premiere did not retain the requested work area");
+        }
+        return {
+          updated: true,
+          outcome: "verified",
+          sequenceGuid: after.sequenceGuid,
+          workArea: after.workArea,
+          verified: "work_area_readback",
+          operation: operationSemantics({
+            mutatesProject: true,
+            verificationStatus: "verified",
+            verificationBoundary: "work_area_readback",
+            verificationEvidence: [{ type: "work_area", sequenceGuid: after.sequenceGuid, workArea: after.workArea }],
+            undoSupported: false,
+            cancellationSupported: false
+          })
+        };
+      });
+    }
     async function inspectSequencePlayhead(args) {
       assertOnlyKeys(args, []);
       const context = await activeContext(false);
@@ -1524,6 +1604,14 @@
     function canInspectSequenceRange() {
       return activeSequenceHas(["getInPoint", "getOutPoint", "getZeroPoint", "getEndTime"]);
     }
+    function canInspectWorkArea() {
+      return !!(ppro.WorkAreaUtils && typeof ppro.WorkAreaUtils.getWorkAreaInPoint === "function" &&
+        typeof ppro.WorkAreaUtils.getWorkAreaOutPoint === "function");
+    }
+    async function canSetWorkArea() {
+      return !!(canInspectWorkArea() && typeof ppro.WorkAreaUtils.setWorkAreaInOutPoints === "function" &&
+        ppro.TickTime && typeof ppro.TickTime.createWithSeconds === "function" && await activeSequenceHas(["getEndTime"]));
+    }
     function canInspectSequencePlayhead() {
       return activeSequenceHas(["getPlayerPosition"]);
     }

package/uxp-plugin/manifest.json

@@ -2,7 +2,7 @@
   "manifestVersion": 5,
   "id": "com.ppmcp.premiere.uxp",
   "name": "MCP for Adobe Premiere Pro",
-  "version": "1.18.1",
+  "version": "1.18.3",
   "main": "index.html",
   "host": { "app": "premierepro", "minVersion": "25.6.0" },
   "entrypoints": [

package/uxp-plugin/next-workflows.cjs

@@ -1196,9 +1196,17 @@
       return { projectItemId, startSeconds: start, durationSeconds: duration };
     }
 
+    // Premiere 26.5 documents synchronous Media.getStart()/getDuration() and
+    // deprecates the start/duration properties, which return Promise<TickTime>.
+    function mediaTimingGetter(media, propertyName) {
+      const getterName = propertyName === "start" ? "getStart" : "getDuration";
+      return media && typeof media[getterName] === "function" ? getterName : null;
+    }
+
     function synchronousMediaTimingValue(media, propertyName) {
       try {
-        const value = media[propertyName];
+        const getterName = mediaTimingGetter(media, propertyName);
+        const value = getterName ? media[getterName]() : media[propertyName];
         if (value && typeof value.then === "function") return null;
         return boundedMediaTimingSeconds(value);
       } catch (_) { return null; }
@@ -1332,6 +1340,13 @@
     }
 
     async function mediaTimingValue(media, propertyName) {
+      const getterName = mediaTimingGetter(media, propertyName);
+      if (getterName) {
+        try {
+          const seconds = boundedMediaTimingSeconds(await media[getterName]());
+          if (seconds != null) return { accessor: getterName + "()", seconds };
+        } catch (_) { /* fall back to the deprecated property */ }
+      }
       try {
         return { accessor: propertyName, seconds: boundedMediaTimingSeconds(await media[propertyName]) };
       } catch (_) {