premiere-pro-mcp 1.18.2 → 1.18.4

package/CHANGELOG.md

@@ -6,6 +6,36 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.4] - 2026-09-28
+
+### Fixed
+
+- `import_transcript_uxp` refuses to import over an existing transcript (`UXP_TRANSCRIPT_OVERWRITE_REFUSED`). On Premiere 26.5.1 a failed import cleared an existing transcript that could not be restored. (#642)
+- UXP commands larger than the panel's 64 KiB frame limit are refused by the server with `UXP_COMMAND_TOO_LARGE` instead of timing out after 30 seconds. (#642)
+- `manage_metadata_uxp` update and field update fail with `UXP_METADATA_NOT_APPLIED` when Premiere commits the transaction but the metadata reads back unchanged, instead of reporting `updated: true`. (#642)
+- UXP project Save As, create, and branch copies ask for `confirmOverwrite` only when the destination file exists. Premiere 26.5.1's `Project.isProject` reports true for any `.prproj` path. (#642)
+- CEP tools that act on a timeline clip through the QE DOM no longer pass the DOM clip index to `qeTrack.getItemAt()`. QE counts gaps as track items, so on a track with a leading or intermediate gap these tools renamed, re-effected, or retimed the wrong clip. `rename_clip`, `remove_all_effects`, `set_frame_blend`, `set_time_interpolation`, `apply_effect`, `apply_audio_effect`, `color_correct`, `apply_lut`, `stabilize_clip`, `copy_effects_between_clips`, `batch_rename_clips`, and `get_qe_clip_info` now match the QE clip by timeline start and fail before any change when no clip matches. `copy_effects_between_clips` reports each effect as verified, committed_unverified, or failed from a readback of the target's components instead of silently dropping errors. `apply_effect` and `apply_audio_effect` also no longer emit a malformed error string that stopped the generated script from parsing. (#642)
+
+### Verification scope
+
+- Automated checks validate package behavior. These changes follow live reports from Premiere 26.5.1 but have not been re-verified on a licensed Premiere host. The QE clip lookup change has not been verified on a licensed Premiere host either.
+
+## [1.18.3] - 2026-09-28
+
+### Security
+
+- UXP path arguments are now checked in the MCP server process before a command is sent. Any absolute path that goes through a symbolic link or directory junction is refused with `UXP_PATH_SYMLINK_REFUSED`. Premiere 26.5 UXP reports a link's own path and cannot `lstat`, so the panel's workspace check could be bypassed through a link inside the approved folder. (#640)
+
+### Fixed
+
+- `get_work_area` now reads work-area points as seconds, as live Premiere 25.2 and 26.5.1 hosts return them. It had divided them by ticks-per-second and reported values near zero. `set_work_area` writes seconds and reads the result back; it fails honestly when a build ignores the write. (#642)
+- `export_sequence` now fails when Premiere rejects the render or writes no file. (#647)
+- UXP source-media timing reads Premiere 26.5's documented synchronous `Media.getStart()` / `getDuration()` before the deprecated Promise-returning `start` / `duration` properties, so `manage_source_media_timing_uxp` can set a start time on 26.5 hosts instead of reporting the command unavailable.
+
+### Verification scope
+
+- Automated checks validate package behavior. The UXP media timing change and the server-side symlink guard have not been verified on a licensed Premiere host.
+
 ## [1.18.2] - 2026-09-26
 
 ### Added

package/README.md

@@ -110,10 +110,10 @@ The current source exposes 384 core tools for supported workflow steps spanning
 
 <a id="latest-release"></a>
 
-### Latest release: 1.18.1
+### Latest release: 1.18.3
 
-The published v1.18.1 npm artifact contains **384 core tools**, 382 in its default profile,
-and 477 with a compatible UXP connection. The development catalog above can include
+The published v1.18.3 npm artifact contains **384 core tools**, 382 in its default profile,
+and 478 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
 ### Try a bounded workflow
@@ -162,7 +162,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.18.1 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.1)
+See the [v1.18.3 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.3)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -210,7 +210,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.18.1
+> npm i -g premiere-pro-mcp@1.18.3
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -218,7 +218,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.18.1` |
+> | Version | `1.18.3` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -231,9 +231,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.1/premiere-pro-mcp-1.18.1.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.3/premiere-pro-mcp-1.18.3.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.1/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.3/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -533,11 +533,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.18.1 --install-cep
+npx -y premiere-pro-mcp@1.18.3 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.18.1` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.18.3` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -575,7 +575,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.18.1 --install-cep
+npx -y premiere-pro-mcp@1.18.3 --install-cep
 ```
 
 The Claude Code package lives in

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.2" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.4" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.2"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.4"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.2" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.4" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.2"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.2"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.4"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.4"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.18.2</strong>
+        <strong id="updateTitle">Version 1.18.4</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.18.2";
+  var CURRENT_VERSION = "1.18.4";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/bridge/script-builder.js

@@ -43,6 +43,14 @@ function __ticksToSeconds(ticks) {
   return parseFloat(ticks) / TICKS_PER_SECOND;
 }
 
+// Sequence work-area getters return seconds (often as a string) on live 25.x
+// and 26.x hosts. Values above 1e6 can only be ticks, so convert those.
+function __workAreaSeconds(value) {
+  var number = parseFloat(value);
+  if (!isFinite(number) || number <= -399999) return null;
+  return number > 1000000 ? number / TICKS_PER_SECOND : number;
+}
+
 function __secondsToTicks(seconds) {
   return Math.round(parseFloat(seconds) * TICKS_PER_SECOND);
 }

package/dist/bridge/uxp-websocket-bridge.d.ts

@@ -1,4 +1,6 @@
 import { EventEmitter } from "node:events";
+/** Must match MAX_COMMAND_BYTES in uxp-plugin/protocol.cjs. */
+export declare const MAX_UXP_COMMAND_BYTES: number;
 export interface UxpBridgeOptions {
     token: string;
     port?: number;

package/dist/bridge/uxp-websocket-bridge.js

@@ -2,8 +2,11 @@ import { randomUUID, timingSafeEqual } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { createServer } from "node:http";
 import { WebSocket, WebSocketServer } from "ws";
+import { assertNoSymlinkedPaths, SymlinkPathError } from "../security/path-guard.js";
 const LOOPBACK_HOST = "127.0.0.1";
 const SUPPORTED_PROTOCOLS = new Set([1, 2]);
+/** Must match MAX_COMMAND_BYTES in uxp-plugin/protocol.cjs. */
+export const MAX_UXP_COMMAND_BYTES = 64 * 1024;
 export class UxpBridgeError extends Error {
     code;
     constructor(code, message) {
@@ -125,25 +128,41 @@ export class UxpWebSocketBridge extends EventEmitter {
         if (hello.commands[command]?.supported !== true) {
             throw new UxpBridgeError("UXP_COMMAND_UNSUPPORTED", `Connected Premiere host does not support UXP command '${command}'`);
         }
+        // The panel cannot see through links on Premiere 26.5 UXP (#640), so refuse
+        // symlinked path segments here, before anything reaches the host.
+        try {
+            assertNoSymlinkedPaths(args);
+        }
+        catch (error) {
+            if (error instanceof SymlinkPathError)
+                throw new UxpBridgeError(error.code, error.message);
+            throw error;
+        }
         const minimumTimeoutMs = requestOptions.minimumTimeoutMs ?? 0;
         if (!Number.isInteger(minimumTimeoutMs) || minimumTimeoutMs < 0) {
             throw new Error("UXP minimum request timeout must be a non-negative integer");
         }
         const requestTimeoutMs = Math.max(this.options.requestTimeoutMs, minimumTimeoutMs);
         const requestId = randomUUID();
+        const frame = JSON.stringify({
+            protocolVersion: hello.protocolVersion,
+            type: "command",
+            requestId,
+            command,
+            args,
+        });
+        // The panel drops frames over 64 KiB before it can read the requestId, so an
+        // oversized command would only surface as a timeout. Refuse it here instead.
+        if (Buffer.byteLength(frame, "utf8") > MAX_UXP_COMMAND_BYTES) {
+            throw new UxpBridgeError("UXP_COMMAND_TOO_LARGE", `UXP command '${command}' is larger than the panel's 64 KiB limit. Send less data (for example a narrower metadata update). No command was sent to Premiere.`);
+        }
         return new Promise((resolve, reject) => {
             const timer = setTimeout(() => {
                 this.pending.delete(requestId);
                 reject(new UxpBridgeError("UXP_TIMEOUT", `UXP command '${command}' timed out`));
             }, requestTimeoutMs);
             this.pending.set(requestId, { command, resolve, reject, timer });
-            socket.send(JSON.stringify({
-                protocolVersion: hello.protocolVersion,
-                type: "command",
-                requestId,
-                command,
-                args,
-            }), (error) => {
+            socket.send(frame, (error) => {
                 if (!error)
                     return;
                 const pending = this.pending.get(requestId);

package/dist/security/path-guard.d.ts

@@ -0,0 +1,10 @@
+export declare class SymlinkPathError extends Error {
+    readonly argumentPath: string;
+    readonly code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath: string);
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export declare function findSymlinkedSegment(value: string): string | null;
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export declare function assertNoSymlinkedPaths(args: unknown): void;
+//# sourceMappingURL=path-guard.d.ts.map

package/dist/security/path-guard.js

@@ -0,0 +1,106 @@
+import { lstatSync, readlinkSync } from "node:fs";
+import { posix, win32 } from "node:path";
+/**
+ * Server-side symlink confinement for UXP path arguments (issue #640).
+ *
+ * The UXP panel checks lexical containment inside the approved workspace, but
+ * Premiere 26.5 UXP cannot see through links: `Entry.nativePath` reports the
+ * link's own path and `lstat` is unimplemented. The MCP server runs on the same
+ * machine as Premiere, so it walks every absolute path argument with Node's
+ * real filesystem before a command is sent and refuses any symlinked or
+ * junctioned segment. Segments that do not exist yet (new output files) end
+ * the walk; they cannot redirect anything.
+ */
+const MAX_DEPTH = 8;
+const MAX_STRINGS = 512;
+/** macOS calibration links that always point into /private. */
+const SYSTEM_LINK_TARGETS = {
+    "/tmp": ["private/tmp", "/private/tmp"],
+    "/var": ["private/var", "/private/var"],
+    "/etc": ["private/etc", "/private/etc"],
+};
+export class SymlinkPathError extends Error {
+    argumentPath;
+    code = "UXP_PATH_SYMLINK_REFUSED";
+    constructor(argumentPath) {
+        super(`${argumentPath} goes through a symbolic link or junction. Use the real folder inside the approved workspace. No command was sent to Premiere.`);
+        this.argumentPath = argumentPath;
+        this.name = "SymlinkPathError";
+    }
+}
+function absoluteFlavor(value) {
+    if (/^[A-Za-z]:[\\/]/.test(value) || /^\\\\[^\\]/.test(value))
+        return win32;
+    if (value.startsWith("/") && !value.startsWith("//"))
+        return posix;
+    return null;
+}
+function isSystemLink(segment) {
+    const targets = SYSTEM_LINK_TARGETS[segment];
+    if (!targets || process.platform !== "darwin")
+        return false;
+    try {
+        return targets.includes(readlinkSync(segment));
+    }
+    catch {
+        return false;
+    }
+}
+/** Returns the first symlinked segment of an absolute path, or null. */
+export function findSymlinkedSegment(value) {
+    const flavor = absoluteFlavor(value);
+    if (!flavor || value.includes("\0"))
+        return null;
+    const normalized = flavor.normalize(value);
+    const root = flavor.parse(normalized).root;
+    const parts = normalized.slice(root.length).split(flavor.sep).filter(Boolean);
+    let current = root;
+    for (const part of parts) {
+        current = flavor.join(current, part);
+        let stats;
+        try {
+            stats = lstatSync(current);
+        }
+        catch {
+            return null;
+        }
+        if (stats.isSymbolicLink()) {
+            if (!isSystemLink(current))
+                return current;
+            // Keep walking below /tmp, /var and /etc: lstat of later segments
+            // resolves through the calibration link and still sees user links.
+            continue;
+        }
+        if (!stats.isDirectory())
+            return null;
+    }
+    return null;
+}
+function collectStrings(value, path, out, depth) {
+    if (out.length >= MAX_STRINGS || depth > MAX_DEPTH)
+        return;
+    if (typeof value === "string") {
+        if (absoluteFlavor(value))
+            out.push([path, value]);
+        return;
+    }
+    if (Array.isArray(value)) {
+        value.forEach((entry, index) => collectStrings(entry, `${path}[${index}]`, out, depth + 1));
+        return;
+    }
+    if (value && typeof value === "object") {
+        for (const [key, entry] of Object.entries(value)) {
+            collectStrings(entry, path ? `${path}.${key}` : key, out, depth + 1);
+        }
+    }
+}
+/** Throws SymlinkPathError when any absolute path argument crosses a link. */
+export function assertNoSymlinkedPaths(args) {
+    const candidates = [];
+    collectStrings(args, "", candidates, 0);
+    for (const [argumentPath, value] of candidates) {
+        if (findSymlinkedSegment(value))
+            throw new SymlinkPathError(argumentPath || "path");
+    }
+}
+//# sourceMappingURL=path-guard.js.map

package/dist/tools/advanced.js

@@ -649,9 +649,11 @@ export function getAdvancedTools(bridgeOptions) {
           var qeTrack = result.trackType === "video"
             ? qeSeq.getVideoTrackAt(result.trackIndex)
             : qeSeq.getAudioTrackAt(result.trackIndex);
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+          if (!qeTrack) return __error("QE track not found; nothing was changed.");
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           qeClip.removeEffects();
           return __result({ removed: true, clipName: result.clip.name });
         `);
@@ -738,9 +740,11 @@ export function getAdvancedTools(bridgeOptions) {
           var qeTrack = result.trackType === "video"
             ? qeSeq.getVideoTrackAt(result.trackIndex)
             : qeSeq.getAudioTrackAt(result.trackIndex);
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+          if (!qeTrack) return __error("QE track not found; nothing was changed.");
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           qeClip.setFrameBlend(${args.enabled});
           return __result({ frameBlend: ${args.enabled}, clipName: result.clip.name });
         `);
@@ -775,9 +779,11 @@ export function getAdvancedTools(bridgeOptions) {
           var qeTrack = result.trackType === "video"
             ? qeSeq.getVideoTrackAt(result.trackIndex)
             : qeSeq.getAudioTrackAt(result.trackIndex);
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+          if (!qeTrack) return __error("QE track not found; nothing was changed.");
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           qeClip.setTimeInterpolationType(${args.interpolation_type});
           var typeNames = ["Frame Sampling", "Frame Blending", "Optical Flow"];
           return __result({
@@ -817,9 +823,11 @@ export function getAdvancedTools(bridgeOptions) {
           var qeTrack = result.trackType === "video"
             ? qeSeq.getVideoTrackAt(result.trackIndex)
             : qeSeq.getAudioTrackAt(result.trackIndex);
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+          if (!qeTrack) return __error("QE track not found; nothing was changed.");
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           var oldName = result.clip.name;
           qeClip.setName("${escapeForExtendScript(args.new_name)}");
           return __result({ renamed: true, oldName: oldName, newName: "${escapeForExtendScript(args.new_name)}" });

package/dist/tools/clipboard.js

@@ -469,17 +469,39 @@ export function getClipboardTools(bridgeOptions) {
 
           var src = srcResult.clip;
           var tgt = tgtResult.clip;
-          var copied = 0;
+          var copied = [];
+          var unverified = [];
+          var failed = [];
           var effectFilter = ${args.effect_name ? `"${escapeForExtendScript(args.effect_name)}"` : "null"};
           var intrinsic = ["Motion", "Opacity", "Time Remapping", "Volume", "Channel Volume", "Panner"];
 
           // Use QE to copy effects by name
           var qeSeq = qe.project.getActiveSequence();
+          if (!qeSeq) return __error("No active sequence (QE); nothing was changed.");
           var tgtTrackType = tgtResult.trackType;
-          var tgtTrack = tgtTrackType === "video" 
-            ? qeSeq.getVideoTrackAt(tgtResult.trackIndex) 
+          var tgtTrack = tgtTrackType === "video"
+            ? qeSeq.getVideoTrackAt(tgtResult.trackIndex)
             : qeSeq.getAudioTrackAt(tgtResult.trackIndex);
-          var qeTgtClip = tgtTrack.getItemAt(tgtResult.clipIndex);
+          if (!tgtTrack) return __error("QE target track not found; nothing was changed.");
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeTgtClip = __findQeClipByDomClip(tgtTrack, tgt);
+          if (!qeTgtClip) return __error("Could not match the QE clip for target " + tgt.name + " by timeline start; nothing was changed.");
+
+          function countTargetComponents(wanted) {
+            var n = 0;
+            for (var ci = 0; ci < tgt.components.numItems; ci++) {
+              if (tgt.components[ci].displayName === wanted) n++;
+            }
+            return n;
+          }
+
+          function listNames(entries) {
+            var out = [];
+            for (var li = 0; li < entries.length; li++) {
+              out.push(typeof entries[li] === "string" ? entries[li] : entries[li].effect + " (" + entries[li].reason + ")");
+            }
+            return out.join(", ");
+          }
 
           for (var i = 0; i < src.components.numItems; i++) {
             var comp = src.components[i];
@@ -494,23 +516,61 @@ export function getClipboardTools(bridgeOptions) {
               if (skip) continue;
             }
 
-            // Apply effect via QE
+            // Apply effect via QE, then read the target component list back.
+            var beforeCount = null;
+            try { beforeCount = countTargetComponents(name); } catch (beforeErr) {}
+            var qeEffect = null;
             try {
-              var qeEffect = tgtTrackType === "video"
+              qeEffect = tgtTrackType === "video"
                 ? qe.project.getVideoEffectByName(name)
                 : qe.project.getAudioEffectByName(name);
-              if (qeEffect) {
-                if (tgtTrackType === "video") {
-                  qeTgtClip.addVideoEffect(qeEffect);
-                } else {
-                  qeTgtClip.addAudioEffect(qeEffect);
-                }
-                copied++;
+            } catch (lookupErr) {
+              failed.push({ effect: name, reason: "QE effect lookup failed: " + lookupErr.toString() });
+              continue;
+            }
+            if (!qeEffect) {
+              failed.push({ effect: name, reason: "QE did not resolve a " + tgtTrackType + " effect with this name" });
+              continue;
+            }
+            try {
+              if (tgtTrackType === "video") {
+                qeTgtClip.addVideoEffect(qeEffect);
+              } else {
+                qeTgtClip.addAudioEffect(qeEffect);
               }
-            } catch(e) {}
+            } catch (addErr) {
+              failed.push({ effect: name, reason: "Premiere rejected the effect: " + addErr.toString() });
+              continue;
+            }
+            var afterCount = null;
+            try { afterCount = countTargetComponents(name); } catch (afterErr) {}
+            if (beforeCount !== null && afterCount !== null && afterCount > beforeCount) {
+              copied.push(name);
+            } else {
+              unverified.push({ effect: name, reason: "Premiere accepted the call but the target component list did not show a new " + name + " component" });
+            }
+          }
+
+          if (failed.length > 0) {
+            var partial = copied.length + unverified.length > 0;
+            return __error((partial ? "copy_effects_between_clips was only partially applied" : "No effects were copied") +
+              " to " + tgt.name + ". Verified: [" + listNames(copied) + "]; committed_unverified: [" + listNames(unverified) +
+              "]; failed: [" + listNames(failed) + "]. Check Effect Controls before retrying.");
           }
 
-          return __result({ copiedEffects: copied, source: src.name, target: tgt.name });
+          var status = copied.length + unverified.length === 0
+            ? "unchanged"
+            : (unverified.length > 0 ? "committed_unverified" : "verified");
+          return __result({
+            status: status,
+            verified: status === "verified",
+            copiedEffects: copied.length,
+            copied: copied,
+            committedUnverified: unverified,
+            failed: failed,
+            source: src.name,
+            target: tgt.name
+          });
         `);
                 return sendCommand(script, bridgeOptions);
             },

package/dist/tools/effects.js

@@ -34,10 +34,11 @@ export function getEffectsTools(bridgeOptions) {
             : qeSeq.getAudioTrackAt(result.trackIndex);
           
           if (!qeTrack) return __error("QE track not found");
-          
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           // Premiere 26 can expose direct by-name lookup while returning an
           // empty QE catalog. Probe the requested name before consulting the
           // catalog so a known installed effect remains usable.
@@ -46,7 +47,7 @@ export function getEffectsTools(bridgeOptions) {
           var lookupSource = qeEffect ? "qe.byName" : "qe.catalog";
           if (!qeEffect) {
             var effectCatalog = __getQeEffectCatalog("video");
-            if (!effectCatalog.ok) return __error(effectCatalog.error + " Direct QE lookup for \"" + effectName + "\" also did not resolve an effect.");
+            if (!effectCatalog.ok) return __error(effectCatalog.error + " Direct QE lookup for \\"" + effectName + "\\" also did not resolve an effect.");
             var effects = effectCatalog.effects;
             for (var i = 0; i < effects.numItems; i++) {
               if (effects[i].name === effectName) {
@@ -90,16 +91,17 @@ export function getEffectsTools(bridgeOptions) {
           var effectName = "${escapeForExtendScript(args.effect_name)}";
           var qeTrack = qeSeq.getAudioTrackAt(result.trackIndex);
           if (!qeTrack) return __error("QE audio track not found");
-          
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
+
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
           
           var qeEffect = null;
           try { qeEffect = qe.project.getAudioEffectByName(effectName); } catch (byNameError) {}
           var lookupSource = qeEffect ? "qe.byName" : "qe.catalog";
           if (!qeEffect) {
             var effectCatalog = __getQeEffectCatalog("audio");
-            if (!effectCatalog.ok) return __error(effectCatalog.error + " Direct QE lookup for \"" + effectName + "\" also did not resolve an effect.");
+            if (!effectCatalog.ok) return __error(effectCatalog.error + " Direct QE lookup for \\"" + effectName + "\\" also did not resolve an effect.");
             var effects = effectCatalog.effects;
             for (var i = 0; i < effects.numItems; i++) {
               if (effects[i].name === effectName) {
@@ -306,7 +308,9 @@ export function getEffectsTools(bridgeOptions) {
           
           if (!hasLumetri) {
             var qeTrack = qeSeq.getVideoTrackAt(result.trackIndex);
-            var qeClip = qeTrack.getItemAt(result.clipIndex);
+            // QE track items include gaps, so the DOM clip index is not a QE index.
+            var qeClip = __findQeClipByDomClip(qeTrack, clip);
+            if (!qeClip) return __error("Could not match the QE clip for " + clip.name + " by timeline start; nothing was changed.");
             var effectCatalog = __getQeEffectCatalog("video");
             if (!effectCatalog.ok) return __error(effectCatalog.error);
             var effects = effectCatalog.effects;
@@ -317,7 +321,7 @@ export function getEffectsTools(bridgeOptions) {
               }
             }
           }
-          
+
           // A single unsettable property must not abort the script with "Invalid
           // parameter" and lose every other change, so each write is guarded.
           // The taken map is a separate set of flags rather than a truthiness check on
@@ -379,8 +383,11 @@ export function getEffectsTools(bridgeOptions) {
           
           if (!lumetriComp) {
             var qeSeq = qe.project.getActiveSequence();
+            if (!qeSeq) return __error("No active sequence (QE); nothing was changed.");
             var qeTrack = qeSeq.getVideoTrackAt(result.trackIndex);
-            var qeClip = qeTrack.getItemAt(result.clipIndex);
+            // QE track items include gaps, so the DOM clip index is not a QE index.
+            var qeClip = __findQeClipByDomClip(qeTrack, clip);
+            if (!qeClip) return __error("Could not match the QE clip for " + clip.name + " by timeline start; nothing was changed.");
             var effectCatalog = __getQeEffectCatalog("video");
             if (!effectCatalog.ok) return __error(effectCatalog.error);
             var effects = effectCatalog.effects;
@@ -535,9 +542,10 @@ export function getEffectsTools(bridgeOptions) {
             : null;
           if (!qeTrack) return __error("Warp Stabilizer can only be applied to video clips");
           
-          var qeClip = qeTrack.getItemAt(result.clipIndex);
-          if (!qeClip) return __error("QE clip not found");
-          
+          // QE track items include gaps, so the DOM clip index is not a QE index.
+          var qeClip = __findQeClipByDomClip(qeTrack, result.clip);
+          if (!qeClip) return __error("Could not match the QE clip for " + result.clip.name + " by timeline start; nothing was changed.");
+
           // Find and apply Warp Stabilizer
           var effectCatalog = __getQeEffectCatalog("video");
           if (!effectCatalog.ok) return __error(effectCatalog.error);

package/dist/tools/export.js

@@ -647,8 +647,13 @@ export function getExportTools(bridgeOptions) {
             presetPath,
             ${args.work_area_only ? "app.encoder.ENCODE_WORKAREA" : "app.encoder.ENCODE_ENTIRE"}
           );
+          // Premiere documents a boolean; false means the render was rejected.
+          // Some hosts throw instead; buildToolScript already maps that to __error.
+          if (exportResult === false) return __error("Premiere rejected the sequence export.");
+          var outputFile = new File(outputPath);
+          if (!outputFile.exists) return __error("Premiere did not write the requested export file.");
 
-          return __result({ exported: true, outputPath: outputPath, presetUsed: presetPath });
+          return __result({ exported: true, verified: true, outputPath: outputPath, presetUsed: presetPath });
         `);
                 return sendCommand(script, { ...bridgeOptions, timeoutMs: 120000 }); // 2 min timeout for exports
             },

package/dist/tools/playhead.js

@@ -65,10 +65,21 @@ export function getPlayheadTools(bridgeOptions) {
           var seq = app.project.activeSequence;
           if (!seq) return __error("No active sequence");
           
-          seq.setWorkAreaInPoint(__secondsToTicks(${args.in_seconds}).toString());
-          seq.setWorkAreaOutPoint(__secondsToTicks(${args.out_seconds}).toString());
-          
-          return __result({ workAreaIn: ${args.in_seconds}, workAreaOut: ${args.out_seconds} });
+          // Live hosts (25.2, 26.5.1) read and write work-area points in seconds,
+          // not ticks. Write seconds, then read back: some builds ignore the write.
+          var requestedIn = ${Number(args.in_seconds)};
+          var requestedOut = ${Number(args.out_seconds)};
+          if (!(requestedOut > requestedIn)) return __error("out_seconds must be greater than in_seconds.");
+          seq.setWorkAreaInPoint(requestedIn);
+          seq.setWorkAreaOutPoint(requestedOut);
+          var observedIn = __workAreaSeconds(seq.getWorkAreaInPoint());
+          var observedOut = __workAreaSeconds(seq.getWorkAreaOutPoint());
+          var frameSeconds = seq.timebase ? __ticksToSeconds(seq.timebase) : 1 / 24;
+          if (observedIn === null || observedOut === null ||
+              Math.abs(observedIn - requestedIn) > frameSeconds || Math.abs(observedOut - requestedOut) > frameSeconds) {
+            return __error("Premiere did not apply the work area (read back " + observedIn + " to " + observedOut + " s). Use set_sequence_in_out_points to mark an export range instead.");
+          }
+          return __result({ workAreaIn: observedIn, workAreaOut: observedOut, verified: true });
         `);
                 return sendCommand(script, bridgeOptions);
             },
@@ -83,8 +94,10 @@ export function getPlayheadTools(bridgeOptions) {
           var inPoint = seq.getWorkAreaInPoint();
           var outPoint = seq.getWorkAreaOutPoint();
           return __result({
-            inSeconds: __ticksToSeconds(inPoint),
-            outSeconds: __ticksToSeconds(outPoint)
+            inSeconds: __workAreaSeconds(inPoint),
+            outSeconds: __workAreaSeconds(outPoint),
+            rawIn: String(inPoint),
+            rawOut: String(outPoint)
           });
         `);
                 return sendCommand(script, bridgeOptions);

package/dist/tools/track-targeting.js

@@ -1129,16 +1129,27 @@ export function getTrackTargetingTools(bridgeOptions) {
           var num = ${startNum};
           var pattern = "${escapeForExtendScript(args.pattern)}";
 
+          // QE track items include gaps, so the DOM clip index is not a QE
+          // index. Match every target by timeline start before renaming any.
+          if (!qeTrack) return __error("QE track not found; nothing was changed.");
+          var targets = [];
           for (var c = 0; c < track.clips.numItems; c++) {
             var clip = track.clips[c];
             ${args.selected_only ? `if (!clip.isSelected()) continue;` : ""}
+            var matchedQeClip = __findQeClipByDomClip(qeTrack, clip);
+            if (!matchedQeClip) return __error("Could not match the QE clip for " + clip.name + " by timeline start; nothing was changed.");
+            targets.push({ clip: clip, qeClip: matchedQeClip });
+          }
+
+          for (var t = 0; t < targets.length; t++) {
+            var clip = targets[t].clip;
 
             var sequenceNumber = "" + num;
             var paddedSequenceNumber = sequenceNumber;
             while (paddedSequenceNumber.length < 2) paddedSequenceNumber = "0" + paddedSequenceNumber;
             var newName = pattern.split("{n}").join(sequenceNumber).split("##").join(paddedSequenceNumber).split("{name}").join(clip.name);
             try {
-              var qeClip = qeTrack.getItemAt(c);
+              var qeClip = targets[t].qeClip;
               qeClip.setName(newName);
               renamed++;
             } catch(e) {}
@@ -1363,8 +1374,16 @@ export function getTrackTargetingTools(bridgeOptions) {
                     : `qeSeq.getAudioTrackAt(${args.track_index})`};
           if (!qeTrack) return __error("Track not found");
 
-          var qeClip = qeTrack.getItemAt(${args.clip_index});
-          if (!qeClip) return __error("Clip not found at index ${args.clip_index}");
+          // clip_index addresses the DOM clip list; QE track items also include
+          // gaps, so resolve the DOM clip and match its QE item by start time.
+          var seq = app.project.activeSequence;
+          if (!seq) return __error("No active sequence");
+          var domTracks = ${args.track_type === "video" ? "seq.videoTracks" : "seq.audioTracks"};
+          if (${args.track_index} >= domTracks.numTracks) return __error("Track not found");
+          var domClips = domTracks[${args.track_index}].clips;
+          if (${args.clip_index} >= domClips.numItems) return __error("Clip not found at index ${args.clip_index}");
+          var qeClip = __findQeClipByDomClip(qeTrack, domClips[${args.clip_index}]);
+          if (!qeClip) return __error("Could not match the QE clip for clip index ${args.clip_index} by timeline start");
 
           var info = { trackType: "${args.track_type}", trackIndex: ${args.track_index}, clipIndex: ${args.clip_index} };
 

package/dist/tools/uxp.js

@@ -570,7 +570,7 @@ export function getUxpTools(bridge) {
             },
         },
         import_transcript_uxp: {
-            description: "Replace one source media clip's native transcript JSON through documented Premiere 26.3+ UXP APIs. Use project_guid and transcript_revision returned by get_clip_transcript_uxp, or omit expected_transcript_revision (or pass null) from has_transcript_uxp for an untranscribed clip. This destructive import requires explicit confirmation and an operation_id, serializes competing imports for the same project item, runs one undoable transaction, and reports exact bounded export SHA-256 readback rather than claiming a licensed-host result.",
+            description: "Import native transcript JSON onto one untranscribed source media clip through documented Premiere 26.3+ UXP APIs. Check has_transcript_uxp first and omit expected_transcript_revision (or pass null). Importing over an existing transcript is refused (UXP_TRANSCRIPT_OVERWRITE_REFUSED): on Premiere 26.5.1 a failed import cleared an existing transcript that could not be restored. This destructive import requires explicit confirmation and an operation_id, serializes competing imports for the same project item, runs one undoable transaction, and reports exact bounded export SHA-256 readback rather than claiming a licensed-host result.",
             parameters: {
                 type: "object",
                 additionalProperties: false,

package/docs/supported-actions.md

@@ -458,7 +458,7 @@ authenticated and the connected host advertises the required command capabilitie
 | `get_uxp_workspace_access` | Connected UXP | Single operation | Report whether the Premiere panel has an operator-approved persistent workspace folder. The native path and persistent token are never returned. |
 | `has_transcript_uxp` | Connected UXP | Single operation | Check whether a source media clip has a transcript, preferring Premiere 26.3's documented native API when available. |
 | `import_project_media_uxp` | Connected UXP | `files`, `sequences`, `ae_comps`, `all_ae_comps` | Import workspace-contained media files, sequences, or After Effects compositions through documented Project APIs with post-state evidence. |
-| `import_transcript_uxp` | Connected UXP | Single operation | Replace one source media clip's native transcript JSON through documented Premiere 26.3+ UXP APIs. Use project_guid and transcript_revision returned by get_clip_transcript_uxp, or omit expected_transcript_revision (or pass null) from has_transcript_uxp for an untranscribed clip. This destructive import requires explicit confirmation and an operation_id, serializes competing imports for the same project item, runs one undoable transaction, and reports exact bounded export SHA-256 readback rather than claiming a licensed-host result. |
+| `import_transcript_uxp` | Connected UXP | Single operation | Import native transcript JSON onto one untranscribed source media clip through documented Premiere 26.3+ UXP APIs. Check has_transcript_uxp first and omit expected_transcript_revision (or pass null). Importing over an existing transcript is refused (UXP_TRANSCRIPT_OVERWRITE_REFUSED): on Premiere 26.5.1 a failed import cleared an existing transcript that could not be restored. This destructive import requires explicit confirmation and an operation_id, serializes competing imports for the same project item, runs one undoable transaction, and reports exact bounded export SHA-256 readback rather than claiming a licensed-host result. |
 | `inspect_caption_tracks_uxp` | Connected UXP | Single operation | Inventory native caption tracks on the active sequence through documented Premiere UXP APIs. Returns track identity, name, mute state, and item count only; it does not inspect cue text, timing, rendered appearance, or caption correctness. |
 | `inspect_effect_parameter_catalog_uxp` | Connected UXP | `media_type`: `video`, `audio` | Inspect the bounded native descriptor catalog for one effect component on one active-sequence audio or video clip. The returned parameter index and display name can be used with existing parameter automation. It returns only animation capability/state, never raw parameter values (including Color or PointF), media paths, rendered pixels, or playback results. The bridge reads the complete catalog twice and rejects a changed project, active sequence, component identity, or parameter descriptor set. |
 | `inspect_frame_alignment_uxp` | Connected UXP | `align`, `frame` | Use Premiere's documented native TickTime and FrameRate APIs to either align one bounded requested time down or to the nearest frame boundary, or construct the exact TickTime for one frame count. This is read-only, uses only caller-owned inputs, and returns native seconds and tick-string readback; it does not inspect a sequence, infer its frame rate, change Premiere, or prove a licensed host. |

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "premiere-pro-mcp",
   "mcpName": "io.github.leancoderkavy/premiere-pro",
-  "version": "1.18.2",
+  "version": "1.18.4",
   "description": "MCP server for Adobe Premiere Pro with 384 core AI video editing tools, a guarded After Effects MOGRT studio, and a capability-aware UXP bridge for supported Premiere workflows.",
   "main": "dist/index.js",
   "types": "./dist/index.d.ts",

package/public-product-manifest.json

@@ -10,7 +10,7 @@
     "name": "MCP for Adobe Premiere Pro",
     "mcpName": "io.github.leancoderkavy/premiere-pro",
     "npmPackage": "premiere-pro-mcp",
-    "version": "1.18.2",
+    "version": "1.18.4",
     "repository": "https://github.com/leancoderkavy/premiere-pro-mcp",
     "homepage": "https://premiere-pro-mcp.com/",
     "license": "MIT",

package/uxp-plugin/manifest.json

@@ -2,7 +2,7 @@
   "manifestVersion": 5,
   "id": "com.ppmcp.premiere.uxp",
   "name": "MCP for Adobe Premiere Pro",
-  "version": "1.18.2",
+  "version": "1.18.4",
   "main": "index.html",
   "host": { "app": "premierepro", "minVersion": "25.6.0" },
   "entrypoints": [

package/uxp-plugin/next-workflows.cjs

@@ -489,7 +489,7 @@
       assertOnlyKeys(args, ["path", "confirmExternalWrite", "confirmOverwrite", "operationId"]);
       requireConfirmation(args.confirmExternalWrite, "confirmExternalWrite", "Creating a project writes a new file");
       const path = await allowedWorkspacePath(args.path, "path");
-      rejectExistingProject(path, args.confirmOverwrite);
+      await rejectExistingProject(path, args.confirmOverwrite);
       const project = await ppro.Project.createProject(path);
       assertProjectPath(project, path, "created project");
       return projectMutationReceipt("created", project, path);
@@ -520,7 +520,7 @@
       const project = await targetProject(args.projectId);
       if (args.expectedPath != null) assertProjectPath(project, requiredPath(args.expectedPath, "expectedPath"), "target project");
       const path = await allowedWorkspacePath(args.path, "path");
-      rejectExistingProject(path, args.confirmOverwrite);
+      await rejectExistingProject(path, args.confirmOverwrite);
       if (typeof project.saveAs !== "function" || !await project.saveAs(path)) {
         throw commandError("UXP_VERIFICATION_FAILED", "Premiere did not confirm Save As");
       }
@@ -543,7 +543,7 @@
         if (samePath(path, sourcePath) || paths.some(function (item) { return samePath(item, path); })) {
           throw commandError("UXP_INVALID_ARGUMENT", "Branch paths must be distinct from the source and each other");
         }
-        rejectExistingProject(path, args.confirmOverwrite);
+        await rejectExistingProject(path, args.confirmOverwrite);
         paths.push(path);
       }
       const branches = [];
@@ -1196,9 +1196,17 @@
       return { projectItemId, startSeconds: start, durationSeconds: duration };
     }
 
+    // Premiere 26.5 documents synchronous Media.getStart()/getDuration() and
+    // deprecates the start/duration properties, which return Promise<TickTime>.
+    function mediaTimingGetter(media, propertyName) {
+      const getterName = propertyName === "start" ? "getStart" : "getDuration";
+      return media && typeof media[getterName] === "function" ? getterName : null;
+    }
+
     function synchronousMediaTimingValue(media, propertyName) {
       try {
-        const value = media[propertyName];
+        const getterName = mediaTimingGetter(media, propertyName);
+        const value = getterName ? media[getterName]() : media[propertyName];
         if (value && typeof value.then === "function") return null;
         return boundedMediaTimingSeconds(value);
       } catch (_) { return null; }
@@ -1332,6 +1340,13 @@
     }
 
     async function mediaTimingValue(media, propertyName) {
+      const getterName = mediaTimingGetter(media, propertyName);
+      if (getterName) {
+        try {
+          const seconds = boundedMediaTimingSeconds(await media[getterName]());
+          if (seconds != null) return { accessor: getterName + "()", seconds };
+        } catch (_) { /* fall back to the deprecated property */ }
+      }
       try {
         return { accessor: propertyName, seconds: boundedMediaTimingSeconds(await media[propertyName]) };
       } catch (_) {
@@ -1719,9 +1734,32 @@
       return deps.workspace.assertPathAllowed(path, { label, kind: "file" });
     }
 
-    function rejectExistingProject(path, confirmation) {
-      if (ppro.Project.isProject(path) && confirmation !== true) {
-        throw commandError("UXP_CONFIRMATION_REQUIRED", "confirmOverwrite is required when the destination is already a Premiere project");
+    // Premiere 26.5.1's Project.isProject(path) is true for any *.prproj path,
+    // even a missing one (#642), so check the file itself when UXP storage can.
+    async function destinationFileExists(path) {
+      if (typeof deps.fileExists === "function") return !!(await deps.fileExists(path));
+      let fs = null;
+      try {
+        const uxp = require("uxp");
+        fs = uxp && uxp.storage && uxp.storage.localFileSystem;
+      } catch (_) { return null; }
+      if (!fs || typeof fs.getEntryWithUrl !== "function") return null;
+      const normalized = String(path).replace(/\\/g, "/");
+      const url = /^[A-Za-z]:\//.test(normalized) ? "file:/" + normalized : "file:" + normalized;
+      try {
+        const entry = await fs.getEntryWithUrl(url);
+        return !!entry;
+      } catch (_) {
+        return false;
+      }
+    }
+
+    async function rejectExistingProject(path, confirmation) {
+      if (confirmation === true) return;
+      const exists = await destinationFileExists(path);
+      const existing = exists === null ? ppro.Project.isProject(path) : exists;
+      if (existing) {
+        throw commandError("UXP_CONFIRMATION_REQUIRED", "confirmOverwrite is required when the destination file already exists");
       }
     }
 

package/uxp-plugin/transcript-import.cjs

@@ -185,6 +185,12 @@
       return serialize(input.expectedProjectGuid + ":" + input.projectItemId, async function () {
         const beforeTarget = await resolveTarget(input), before = await transcriptSnapshot(beforeTarget.clip);
         requireExpectedSnapshot(before, input.expectedTranscriptRevision);
+        // Overwriting cannot be undone reliably: on Premiere 26.5.1 a live import
+        // cleared an existing transcript and it could not be restored (#642).
+        // Only import onto clips with no transcript until a verified restore exists.
+        if (before.hasTranscript) {
+          throw commandError("UXP_TRANSCRIPT_OVERWRITE_REFUSED", "This clip already has a transcript. Importing over it is disabled because a failed import can clear the existing transcript with no restore. Nothing was changed.");
+        }
 
         // Resolve and snapshot a second time immediately before action creation.
         // The per-owner queue prevents a different operation ID in this panel

package/uxp-plugin/workflows.cjs

@@ -1232,6 +1232,11 @@
       assertCommitted(committed, "metadata update");
       const after = await metadataSnapshot(clip);
       const verified = (!hasProject || after.projectMetadata === projectMetadata) && (!hasXmp || after.xmpMetadata === xmpMetadata);
+      // Premiere 26.5.1 can commit the transaction yet leave the packet untouched
+      // (#642). A readback identical to the snapshot is a failure, not success.
+      if (!verified && after.projectMetadata === before.projectMetadata && after.xmpMetadata === before.xmpMetadata) {
+        throw commandError("UXP_METADATA_NOT_APPLIED", "Premiere committed the metadata transaction but the metadata read back unchanged. The update was not applied.");
+      }
       return mutationResult(verified, { updated: true, updatedFields, metadata: after }, "metadata_readback", "Update clip metadata");
     }
 
@@ -1464,6 +1469,9 @@
       let readback = "";
       try { readback = propertyString(new xmp.XMPMeta(afterXml || "").getProperty(namespace, name)); } catch (_) {}
       const verified = readback === value;
+      if (!verified && readback === current) {
+        throw commandError("UXP_METADATA_NOT_APPLIED", "Premiere committed the metadata field transaction but " + name + " still reads back its previous value. The update was not applied.");
+      }
       return mutationResult(verified, {
         updated: true, packet, namespace, name, value: readback, requestedValue: value
       }, "metadata_field_readback", "Update clip metadata field");