premiere-pro-mcp 1.18.2 → 1.18.3

package/CHANGELOG.md

@@ -6,6 +6,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.3] - 2026-09-28
+
+### Security
+
+- UXP path arguments are now checked in the MCP server process before a command is sent. Any absolute path that goes through a symbolic link or directory junction is refused with `UXP_PATH_SYMLINK_REFUSED`. Premiere 26.5 UXP reports a link's own path and cannot `lstat`, so the panel's workspace check could be bypassed through a link inside the approved folder. (#640)
+
+### Fixed
+
+- `get_work_area` now reads work-area points as seconds, as live Premiere 25.2 and 26.5.1 hosts return them. It had divided them by ticks-per-second and reported values near zero. `set_work_area` writes seconds and reads the result back; it fails honestly when a build ignores the write. (#642)
+- `export_sequence` now fails when Premiere rejects the render or writes no file. (#647)
+- UXP source-media timing reads Premiere 26.5's documented synchronous `Media.getStart()` / `getDuration()` before the deprecated Promise-returning `start` / `duration` properties, so `manage_source_media_timing_uxp` can set a start time on 26.5 hosts instead of reporting the command unavailable.
+
+### Verification scope
+
+- Automated checks validate package behavior. The UXP media timing change and the server-side symlink guard have not been verified on a licensed Premiere host.
+
 ## [1.18.2] - 2026-09-26
 
 ### Added

package/README.md

@@ -110,10 +110,10 @@ The current source exposes 384 core tools for supported workflow steps spanning
 
 <a id="latest-release"></a>
 
-### Latest release: 1.18.1
+### Latest release: 1.18.2
 
-The published v1.18.1 npm artifact contains **384 core tools**, 382 in its default profile,
-and 477 with a compatible UXP connection. The development catalog above can include
+The published v1.18.2 npm artifact contains **384 core tools**, 382 in its default profile,
+and 478 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
 ### Try a bounded workflow
@@ -162,7 +162,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.18.1 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.1)
+See the [v1.18.2 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.2)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -210,7 +210,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.18.1
+> npm i -g premiere-pro-mcp@1.18.2
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -218,7 +218,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.18.1` |
+> | Version | `1.18.2` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -231,9 +231,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.1/premiere-pro-mcp-1.18.1.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.2/premiere-pro-mcp-1.18.2.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.1/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.2/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -533,11 +533,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.18.1 --install-cep
+npx -y premiere-pro-mcp@1.18.2 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.18.1` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.18.2` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -575,7 +575,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.18.1 --install-cep
+npx -y premiere-pro-mcp@1.18.2 --install-cep
 ```
 
 The Claude Code package lives in

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.2" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.3" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.2"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.3"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.2" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.3" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.2"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.2"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.3"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.3"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.18.2</strong>
+        <strong id="updateTitle">Version 1.18.3</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.18.2";
+  var CURRENT_VERSION = "1.18.3";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/bridge/script-builder.js

@@ -43,6 +43,14 @@ function __ticksToSeconds(ticks) {
   return parseFloat(ticks) / TICKS_PER_SECOND;
 }
 
+// Sequence work-area getters return seconds (often as a string) on live 25.x
+// and 26.x hosts. Values above 1e6 can only be ticks, so convert those.
+function __workAreaSeconds(value) {
+  var number = parseFloat(value);
+  if (!isFinite(number) || number <= -399999) return null;
+  return number > 1000000 ? number / TICKS_PER_SECOND : number;
+}
+
 function __secondsToTicks(seconds) {
   return Math.round(parseFloat(seconds) * TICKS_PER_SECOND);
 }

package/dist/bridge/uxp-websocket-bridge.js

@@ -2,6 +2,7 @@ import { randomUUID, timingSafeEqual } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { createServer } from "node:http";
 import { WebSocket, WebSocketServer } from "ws";
+import { assertNoSymlinkedPaths, SymlinkPathError } from "../security/path-guard.js";
 const LOOPBACK_HOST = "127.0.0.1";
 const SUPPORTED_PROTOCOLS = new Set([1, 2]);
 export class UxpBridgeError extends Error {
@@ -125,6 +126,16 @@ export class UxpWebSocketBridge extends EventEmitter {
         if (hello.commands[command]?.supported !== true) {
             throw new UxpBridgeError("UXP_COMMAND_UNSUPPORTED", `Connected Premiere host does not support UXP command '${command}'`);
         }
+        // The panel cannot see through links on Premiere 26.5 UXP (#640), so refuse
+        // symlinked path segments here, before anything reaches the host.
+        try {
+            assertNoSymlinkedPaths(args);
+        }
+        catch (error) {
+            if (error instanceof SymlinkPathError)
+                throw new UxpBridgeError(error.code, error.message);
+            throw error;
+        }
         const minimumTimeoutMs = requestOptions.minimumTimeoutMs ?? 0;
         if (!Number.isInteger(minimumTimeoutMs) || minimumTimeoutMs < 0) {
             throw new Error("UXP minimum request timeout must be a non-negative integer");

package/dist/security/path-guard.d.ts

@@ -0,0 +1,10 @@
+export declare class SymlinkPathError extends Error {
+    readonly argumentPath: string;
+    readonly code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath: string);
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export declare function findSymlinkedSegment(value: string): string | null;
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export declare function assertNoSymlinkedPaths(args: unknown): void;
+//# sourceMappingURL=path-guard.d.ts.map

package/dist/security/path-guard.js

@@ -0,0 +1,106 @@
+import { lstatSync, readlinkSync } from "node:fs";
+import { posix, win32 } from "node:path";
+/**
+ * Server-side symlink confinement for UXP path arguments (issue #640).
+ *
+ * The UXP panel checks lexical containment inside the approved workspace, but
+ * Premiere 26.5 UXP cannot see through links: `Entry.nativePath` reports the
+ * link's own path and `lstat` is unimplemented. The MCP server runs on the same
+ * machine as Premiere, so it walks every absolute path argument with Node's
+ * real filesystem before a command is sent and refuses any symlinked or
+ * junctioned segment. Segments that do not exist yet (new output files) end
+ * the walk; they cannot redirect anything.
+ */
+const MAX_DEPTH = 8;
+const MAX_STRINGS = 512;
+/** macOS calibration links that always point into /private. */
+const SYSTEM_LINK_TARGETS = {
+    "/tmp": ["private/tmp", "/private/tmp"],
+    "/var": ["private/var", "/private/var"],
+    "/etc": ["private/etc", "/private/etc"],
+};
+export class SymlinkPathError extends Error {
+    argumentPath;
+    code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath) {
+        super(`${argumentPath} goes through a symbolic link or junction. Use the real folder inside the approved workspace. No command was sent to Premiere.`);
+        this.argumentPath = argumentPath;
+        this.name = "SymlinkPathError";
+    }
+}
+function absoluteFlavor(value) {
+    if (/^[A-Za-z]:[\\/]/.test(value) || /^\\\\[^\\]/.test(value))
+        return win32;
+    if (value.startsWith("/") && !value.startsWith("//"))
+        return posix;
+    return null;
+}
+function isSystemLink(segment) {
+    const targets = SYSTEM_LINK_TARGETS[segment];
+    if (!targets || process.platform !== "darwin")
+        return false;
+    try {
+        return targets.includes(readlinkSync(segment));
+    }
+    catch {
+        return false;
+    }
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export function findSymlinkedSegment(value) {
+    const flavor = absoluteFlavor(value);
+    if (!flavor || value.includes("\0"))
+        return null;
+    const normalized = flavor.normalize(value);
+    const root = flavor.parse(normalized).root;
+    const parts = normalized.slice(root.length).split(flavor.sep).filter(Boolean);
+    let current = root;
+    for (const part of parts) {
+        current = flavor.join(current, part);
+        let stats;
+        try {
+            stats = lstatSync(current);
+        }
+        catch {
+            return null;
+        }
+        if (stats.isSymbolicLink()) {
+            if (!isSystemLink(current))
+                return current;
+            // Keep walking below /tmp, /var and /etc: lstat of later segments
+            // resolves through the calibration link and still sees user links.
+            continue;
+        }
+        if (!stats.isDirectory())
+            return null;
+    }
+    return null;
+}
+function collectStrings(value, path, out, depth) {
+    if (out.length >= MAX_STRINGS || depth > MAX_DEPTH)
+        return;
+    if (typeof value === "string") {
+        if (absoluteFlavor(value))
+            out.push([path, value]);
+        return;
+    }
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => collectStrings(entry, `${path}[${index}]`, out, depth + 1));
+        return;
+    }
+    if (value && typeof value === "object") {
+        for (const [key, entry] of Object.entries(value)) {
+            collectStrings(entry, path ? `${path}.${key}` : key, out, depth + 1);
+        }
+    }
+}
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export function assertNoSymlinkedPaths(args) {
+    const candidates = [];
+    collectStrings(args, "", candidates, 0);
+    for (const [argumentPath, value] of candidates) {
+        if (findSymlinkedSegment(value))
+            throw new SymlinkPathError(argumentPath || "path");
+    }
+}
+//# sourceMappingURL=path-guard.js.map

package/dist/tools/export.js

@@ -647,8 +647,13 @@ export function getExportTools(bridgeOptions) {
             presetPath,
             ${args.work_area_only ? "app.encoder.ENCODE_WORKAREA" : "app.encoder.ENCODE_ENTIRE"}
           );
+          // Premiere documents a boolean; false means the render was rejected.
+          // Some hosts throw instead; buildToolScript already maps that to __error.
+          if (exportResult === false) return __error("Premiere rejected the sequence export.");
+          var outputFile = new File(outputPath);
+          if (!outputFile.exists) return __error("Premiere did not write the requested export file.");
 
-          return __result({ exported: true, outputPath: outputPath, presetUsed: presetPath });
+          return __result({ exported: true, verified: true, outputPath: outputPath, presetUsed: presetPath });
         `);
                 return sendCommand(script, { ...bridgeOptions, timeoutMs: 120000 }); // 2 min timeout for exports
             },

package/dist/tools/playhead.js

@@ -65,10 +65,21 @@ export function getPlayheadTools(bridgeOptions) {
           var seq = app.project.activeSequence;
           if (!seq) return __error("No active sequence");
           
-          seq.setWorkAreaInPoint(__secondsToTicks(${args.in_seconds}).toString());
-          seq.setWorkAreaOutPoint(__secondsToTicks(${args.out_seconds}).toString());
-          
-          return __result({ workAreaIn: ${args.in_seconds}, workAreaOut: ${args.out_seconds} });
+          // Live hosts (25.2, 26.5.1) read and write work-area points in seconds,
+          // not ticks. Write seconds, then read back: some builds ignore the write.
+          var requestedIn = ${Number(args.in_seconds)};
+          var requestedOut = ${Number(args.out_seconds)};
+          if (!(requestedOut > requestedIn)) return __error("out_seconds must be greater than in_seconds.");
+          seq.setWorkAreaInPoint(requestedIn);
+          seq.setWorkAreaOutPoint(requestedOut);
+          var observedIn = __workAreaSeconds(seq.getWorkAreaInPoint());
+          var observedOut = __workAreaSeconds(seq.getWorkAreaOutPoint());
+          var frameSeconds = seq.timebase ? __ticksToSeconds(seq.timebase) : 1 / 24;
+          if (observedIn === null || observedOut === null ||
+              Math.abs(observedIn - requestedIn) > frameSeconds || Math.abs(observedOut - requestedOut) > frameSeconds) {
+            return __error("Premiere did not apply the work area (read back " + observedIn + " to " + observedOut + " s). Use set_sequence_in_out_points to mark an export range instead.");
+          }
+          return __result({ workAreaIn: observedIn, workAreaOut: observedOut, verified: true });
         `);
                 return sendCommand(script, bridgeOptions);
             },
@@ -83,8 +94,10 @@ export function getPlayheadTools(bridgeOptions) {
           var inPoint = seq.getWorkAreaInPoint();
           var outPoint = seq.getWorkAreaOutPoint();
           return __result({
-            inSeconds: __ticksToSeconds(inPoint),
-            outSeconds: __ticksToSeconds(outPoint)
+            inSeconds: __workAreaSeconds(inPoint),
+            outSeconds: __workAreaSeconds(outPoint),
+            rawIn: String(inPoint),
+            rawOut: String(outPoint)
           });
         `);
                 return sendCommand(script, bridgeOptions);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "premiere-pro-mcp",
   "mcpName": "io.github.leancoderkavy/premiere-pro",
-  "version": "1.18.2",
+  "version": "1.18.3",
   "description": "MCP server for Adobe Premiere Pro with 384 core AI video editing tools, a guarded After Effects MOGRT studio, and a capability-aware UXP bridge for supported Premiere workflows.",
   "main": "dist/index.js",
   "types": "./dist/index.d.ts",

package/public-product-manifest.json

@@ -10,7 +10,7 @@
     "name": "MCP for Adobe Premiere Pro",
     "mcpName": "io.github.leancoderkavy/premiere-pro",
     "npmPackage": "premiere-pro-mcp",
-    "version": "1.18.2",
+    "version": "1.18.3",
     "repository": "https://github.com/leancoderkavy/premiere-pro-mcp",
     "homepage": "https://premiere-pro-mcp.com/",
     "license": "MIT",

package/uxp-plugin/manifest.json

@@ -2,7 +2,7 @@
   "manifestVersion": 5,
   "id": "com.ppmcp.premiere.uxp",
   "name": "MCP for Adobe Premiere Pro",
-  "version": "1.18.2",
+  "version": "1.18.3",
   "main": "index.html",
   "host": { "app": "premierepro", "minVersion": "25.6.0" },
   "entrypoints": [

package/uxp-plugin/next-workflows.cjs

@@ -1196,9 +1196,17 @@
       return { projectItemId, startSeconds: start, durationSeconds: duration };
     }
 
+    // Premiere 26.5 documents synchronous Media.getStart()/getDuration() and
+    // deprecates the start/duration properties, which return Promise<TickTime>.
+    function mediaTimingGetter(media, propertyName) {
+      const getterName = propertyName === "start" ? "getStart" : "getDuration";
+      return media && typeof media[getterName] === "function" ? getterName : null;
+    }
+
     function synchronousMediaTimingValue(media, propertyName) {
       try {
-        const value = media[propertyName];
+        const getterName = mediaTimingGetter(media, propertyName);
+        const value = getterName ? media[getterName]() : media[propertyName];
         if (value && typeof value.then === "function") return null;
         return boundedMediaTimingSeconds(value);
       } catch (_) { return null; }
@@ -1332,6 +1340,13 @@
     }
 
     async function mediaTimingValue(media, propertyName) {
+      const getterName = mediaTimingGetter(media, propertyName);
+      if (getterName) {
+        try {
+          const seconds = boundedMediaTimingSeconds(await media[getterName]());
+          if (seconds != null) return { accessor: getterName + "()", seconds };
+        } catch (_) { /* fall back to the deprecated property */ }
+      }
       try {
         return { accessor: propertyName, seconds: boundedMediaTimingSeconds(await media[propertyName]) };
       } catch (_) {