premiere-pro-mcp 1.18.4 → 1.18.6

package/CHANGELOG.md

@@ -6,6 +6,44 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.6] - 2026-09-29
+
+### Fixed
+
+- `set_scale_width_height` never set the height. It wrote to a "Scale Height" property that Premiere's Motion effect does not have, then reported success. With Uniform Scale off, Premiere keeps the height in Motion > Scale. The tool now writes the width to Scale Width and the height to Scale, reads all three values back, fails when any does not match, and rejects values outside 0-10000 before building a script. (#642)
+
+### Changed
+
+- The website moved to its own repository, [leancoderkavy/premiere-pro-mcp-site](https://github.com/leancoderkavy/premiere-pro-mcp-site), and is served at `https://premiere-pro-mcp.com`. It reads versions and tool counts from the published npm package and syncs them on its own, so releases here no longer update website files.
+- The HTTP transport no longer serves website pages, the homepage experiment, or `/api/landing-events`. It answers `/mcp`, `/health`, and OAuth protected-resource metadata only. Other `GET` and `HEAD` paths on `premiere-pro-mcp.fly.dev` or a `*.premiere-pro-mcp.com` host redirect (`308`) to the same path on `https://premiere-pro-mcp.com`; any other host gets a JSON `404`. Its Content Security Policy is now deny-all, `/health` reports the running package `version`, and the `MCP_MAX_CONCURRENT_LANDING_DOCUMENTS`, `MCP_LANDING_MAX_HTML_BYTES`, and `MCP_LANDING_HTML_CACHE_BYTES` settings are gone. The Docker image no longer builds the site.
+
+### Verification scope
+
+- Automated checks validate package behavior. The `set_scale_width_height` fix follows a live report from Premiere 26.5.1 but has not been re-verified on a licensed Premiere host. The website move was verified live: premiere-pro-mcp.com serves from Vercel, and the Fly deployment answers `/health` and redirects other paths to the website.
+
+## [1.18.5] - 2026-09-28
+
+### Fixed
+
+- `unnest_sequence` refuses before any change when the nest is trimmed, speed-changed or reversed, a target track is locked, or the target range already holds a clip. It now overwrites each nested clip's exact source range in place instead of inserting it, which pushed later clips down the track and ignored each clip's in and out. It reads every clip back afterwards and reports "The timeline changed … Use Undo" on any mismatch. Effects, keyframes, and transitions inside the nest are not carried over; the description says so. (#642)
+- `move_clip_to_track` refuses before calling QE when either track is locked or the target range is occupied, finds the moved clip even when its node ID changes, and reports a copy left on the original track or a changed start, length, or in/out. It is now marked EXPERIMENTAL (QE) and rejects non-integer track numbers. (#642)
+- `replace_clip` overwrites exactly the old clip's start and end instead of inserting the new item, which pushed later clips down the track and used the new item's full length. It verifies the span, that the old clip is gone, and that track clip counts are unchanged, and refuses on a locked track. The old clip's linked partner is left in place; the description says so. (#642)
+- `export_frame_uxp` checks that the PNG exists after Premiere's exporter returns. It fails when no file was written, reports the real path when the host names the file differently (with or without the `.png` extension), and reports `committed_unverified` when UXP storage cannot check or the file already existed before the export. The panel's direct frame-export path now uses the same handler. (#642)
+- `encode_media_uxp` results for jobs sent to Adobe Media Encoder carry `ameQueueStarted: "unknown"` and a note. Premiere 26.5.1 accepted UXP encodes into the Media Encoder queue without starting it. The tool does not start the queue through CEP; the note points to Media Encoder or `start_batch_encode`. (#642)
+- `organize_project_items_uxp` remove verifies absence by walking the project tree instead of checking the Project panel selection first, which could still hold the removed item and turned a successful removal into `committed_unverified`. Remove now requires `project_item_id` and never falls back to the selection. (#642)
+- `refresh_media` reads the interpreted frame rate before and after the refresh. When the refresh leaves an implausible rate (reported on stills as 29.97 becoming 2.75e-8), it restores the previous rate, reads it back, and reports `repaired: true`; if the restore does not stick, it fails with the manual fix. A real rate change from the source file is kept. (#642)
+- `edit_timeline_uxp` MOGRT inserts (`insert_mogrt_path`, `insert_mogrt_library`) read the placement back instead of reporting the SequenceEditor return value. The result is `verified` when a returned item starts at the requested time, within one frame, on the requested video track. It fails with `UXP_VERIFICATION_FAILED` when nothing is there, and stays `committed_unverified` when the track cannot be read. Results include `sequenceId`, `requested`, and up to 16 `placements`. (#642)
+- `set_sequence_pixel_aspect_ratio` compares the read-back ratio as a number, so a host that formats it as `1`, `1:1`, or `1.42222` no longer fails a correct update. A real mismatch reports the value Premiere read back. (#642)
+- `play_source_monitor` fails with "No clip is loaded in the Source Monitor" instead of reporting a playback request that does nothing, names the loaded clip, and rejects a `speed` that is zero, not finite, or outside -64 to 64 before building a script. (#642)
+- `create_bars_and_tone` takes an optional `bin_id`. The bin is resolved before anything is created, the new item is moved there, and its location is read back; the result is `committed_unverified` when the move cannot be confirmed. (#642)
+- `get_unused_media` and `get_duplicate_media` page their output with `offset`, `limit` (1-500, default 100), and a case-insensitive `contains` name filter, and return `total`, `returned`, `truncated`, and `nextOffset`. Large projects no longer return unbounded lists. (#642)
+- `get_duplicate_media` no longer groups different After Effects compositions imported from the same `.aep` or `.aepx` as duplicates. The same composition imported twice is still reported. (#642)
+- `get_project_panel_metadata` caps the returned XML at `max_chars` (256-200000, default 20000) and reports `truncated` and `totalChars`. Truncated XML is marked as unsafe to pass back to `set_project_panel_metadata`. (#642)
+
+### Verification scope
+
+- Automated checks validate package behavior. These changes follow live reports from Premiere 26.5.1 but have not been re-verified on a licensed Premiere host. The `unnest_sequence` and `replace_clip` overwrite path (`Track.overwriteClip` with source In/Out marks) has only been exercised against test fakes; its readback reports any host difference as a failure.
+
 ## [1.18.4] - 2026-09-28
 
 ### Fixed

package/README.md

@@ -22,7 +22,7 @@ The [completed AE render handoff](docs/after-effects-render-handoff.md) previews
 [![Node.js](https://img.shields.io/badge/Node.js-20.19%2B-green.svg)](https://nodejs.org)
 [![MCP](https://img.shields.io/badge/MCP-2026--07--28-purple.svg)](https://modelcontextprotocol.io/specification/2026-07-28)
 [![npm](https://img.shields.io/npm/v/premiere-pro-mcp.svg)](https://www.npmjs.com/package/premiere-pro-mcp)
-[![Fly.io](https://img.shields.io/badge/Fly.io-deployed-7C3AED.svg)](https://premiere-pro-mcp.fly.dev)
+[![Website](https://img.shields.io/badge/website-premiere--pro--mcp.com-7C3AED.svg)](https://premiere-pro-mcp.com/)
 [![Premiere Pro](https://img.shields.io/badge/Premiere%20Pro-2020--2026-9999FF.svg)](https://www.adobe.com/products/premiere.html)
 
 [![npm downloads](https://img.shields.io/npm/dm/premiere-pro-mcp.svg?label=npm%20downloads)](https://www.npmjs.com/package/premiere-pro-mcp)
@@ -36,7 +36,7 @@ The [completed AE render handoff](docs/after-effects-render-handoff.md) previews
 
 ---
 
-![MCP for Adobe Premiere Pro turns a structured AI request into an organized local editing workflow](landing/public/marketing/premiere-pro-mcp-campaign-hero-v1.png)
+![MCP for Adobe Premiere Pro turns a structured AI request into an organized local editing workflow](https://premiere-pro-mcp.com/marketing/premiere-pro-mcp-campaign-hero-v1.png)
 
 <details>
 <summary><strong>Table of contents</strong></summary>
@@ -110,9 +110,9 @@ The current source exposes 384 core tools for supported workflow steps spanning
 
 <a id="latest-release"></a>
 
-### Latest release: 1.18.3
+### Latest release: 1.18.5
 
-The published v1.18.3 npm artifact contains **384 core tools**, 382 in its default profile,
+The published v1.18.5 npm artifact contains **384 core tools**, 382 in its default profile,
 and 478 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
@@ -154,7 +154,7 @@ if the connection is unavailable.
   manifest, and proof runbook make workflow and verification boundaries
   inspectable without claiming a licensed-host walkthrough occurred.
 - **Faster, clearer delivery:** immutable MCP registration work is reused
-  safely across stateless requests, and the landing now has a lighter,
+  safely across stateless requests, and the website gained a lighter,
   mobile-first workflow view plus current machine-readable facts and crawl
   guidance for its public pages.
 - **Explicit boundary:** the hosted endpoint remains an operator-managed MCP
@@ -162,7 +162,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.18.3 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.3)
+See the [v1.18.5 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.5)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -210,7 +210,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.18.3
+> npm i -g premiere-pro-mcp@1.18.5
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -218,7 +218,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.18.3` |
+> | Version | `1.18.5` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -231,9 +231,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.3/premiere-pro-mcp-1.18.3.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.5/premiere-pro-mcp-1.18.5.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.3/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.5/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -241,7 +241,7 @@ The Claude bundle contains the local MCP server, so this route does not require
 
 ### First proof, before the first edit
 
-![Illustrated local Premiere MCP workflow](landing/public/premiere-pro-mcp-demo-poster.png)
+![Illustrated local Premiere MCP workflow](https://premiere-pro-mcp.com/premiere-pro-mcp-demo-poster.png)
 
 *This is an illustrated workflow, not a Premiere panel screenshot or licensed-host proof.*
 
@@ -533,11 +533,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.18.3 --install-cep
+npx -y premiere-pro-mcp@1.18.5 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.18.3` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.18.5` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -575,7 +575,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.18.3 --install-cep
+npx -y premiere-pro-mcp@1.18.5 --install-cep
 ```
 
 The Claude Code package lives in
@@ -843,7 +843,7 @@ argument, undo, confirmation, and live-host boundaries.
 
 ## Architecture
 
-![Local-first MCP for Adobe Premiere Pro workflow from AI assistant through the MCP bridge to a verified Premiere result](landing/public/marketing/premiere-pro-mcp-workflow-v1.png)
+![Local-first MCP for Adobe Premiere Pro workflow from AI assistant through the MCP bridge to a verified Premiere result](https://premiere-pro-mcp.com/marketing/premiere-pro-mcp-workflow-v1.png)
 
 **Local (stdio):**
 
@@ -1235,8 +1235,10 @@ feature coverage, playback, rendering, or editorial correctness.
 
 The server includes an HTTP/SSE transport (`src/http-server.ts`) for remote access via [mcp-remote](https://github.com/geelen/mcp-remote) or any MCP client that supports Streamable HTTP.
 
-A live operator-managed instance is running at **https://premiere-pro-mcp.fly.dev**.
-It is not a public desktop relay: it cannot connect an authenticated user to
+An operator-managed MCP endpoint runs at **https://premiere-pro-mcp.fly.dev/mcp**
+(health check: `/health`). The website is **https://premiere-pro-mcp.com**, served
+from a separate repository; other paths on the Fly host redirect there.
+The endpoint is not a public desktop relay: it cannot connect an authenticated user to
 Premiere on that user's computer. Public users should use the local stdio setup
 until the separate device-pairing relay is available.
 
@@ -1349,9 +1351,6 @@ user/device authorization are implemented.
 | `MCP_MAX_REQUESTS_PER_SOCKET` | Requests permitted on one keep-alive socket | `100` |
 | `MCP_MAX_CONCURRENT_REQUESTS` | In-flight authenticated MCP request ceiling | `8` |
 | `MCP_MAX_CONCURRENT_STREAMS` | Open authenticated SSE stream ceiling; isolated from operation capacity | `32` |
-| `MCP_MAX_CONCURRENT_LANDING_DOCUMENTS` | Concurrent HTML reads, nonce injection and asynchronous compression; excess work returns `503` | `4` |
-| `MCP_LANDING_MAX_HTML_BYTES` | Maximum source HTML document bytes | `4194304` (4 MiB) |
-| `MCP_LANDING_HTML_CACHE_BYTES` | Source HTML cache memory budget; must be at least the document byte limit | `16777216` (16 MiB) |
 | `PREMIERE_MCP_PROJECT_BACKUP_MAX_BYTES` | Positive integer byte budget for one project backup | `2147483648` (2 GiB) |
 | `MCP_RATE_LIMIT_PER_MINUTE` | Per-credential token-bucket refill rate | `120` |
 | `MCP_RATE_LIMIT_BURST` | Per-credential short burst allowance | `30` |
@@ -1469,10 +1468,10 @@ by default. Enable them only by setting
   body/socket/request limits, and applies a bounded in-process per-credential rate and concurrency limit before
   MCP request parsing or Premiere bridge work begins. It returns `413`, `429`, or `503` on containment failures. Configure an
   upstream rate limit and request-size limit too; process-local counters do not protect a multi-machine deployment.
-- **The landing CSP uses a per-response nonce for scripts**, and its static assets use explicit cache policies.
-  Keep the server in front of the exported landing so those controls are not bypassed by a separate static host.
-  Source HTML is cached as immutable build output; restart the HTTP process after replacing
-  an export. Each response still gets a fresh nonce. HEAD requests skip body rendering.
+- **The HTTP transport serves no web pages.** It answers only `/mcp`, `/health`, and OAuth
+  protected-resource metadata under a deny-all Content Security Policy. Other `GET`/`HEAD` paths on
+  `premiere-pro-mcp.fly.dev` or a `*.premiere-pro-mcp.com` host redirect (`308`) to
+  `https://premiere-pro-mcp.com`; every other host receives a JSON `404`.
 - **Media scans yield between asynchronous filesystem operations** and bound total traversal:
   25,000 entries, 5,000 matching files, 2,000 directories, depth 32, a 1,000-directory
   pending queue, and a cooperative five-second budget. A stalled OS call can exceed that

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.4" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.6" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.4"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.6"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.4" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.6" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.4"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.4"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.6"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.6"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.18.4</strong>
+        <strong id="updateTitle">Version 1.18.6</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.18.4";
+  var CURRENT_VERSION = "1.18.6";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/bridge/script-builder.js

@@ -72,6 +72,70 @@ function __writeClipSpan(item, startTicks, endTicks) {
   }
 }
 
+// Tick comparisons for values that round-trip through seconds (ProjectItem
+// marks take seconds). Far below one frame at any frame rate.
+var __TICK_MATCH_TOL = 16;
+
+function __isTrackLocked(track) {
+  try {
+    if (track && typeof track.isLocked === "function") return !!track.isLocked();
+  } catch (eLocked) {}
+  return false;
+}
+
+// Place exactly [inTicks, outTicks) of a project item on ONE track at
+// startTicks without rippling. Track.overwriteClip places the item's In/Out
+// range, so set those marks first and restore the item's own marks afterwards.
+// mediaType: 1 = video, 2 = audio. Callers must prove the destination range is
+// empty first; overwrite never shifts neighbours but would replace them.
+// Returns { ok, attempted, marksRestored, error }. attempted=true means the
+// overwrite call ran (or threw), so the timeline may have changed.
+function __overwriteRangeOnTrack(track, item, startTicks, inTicks, outTicks, mediaType) {
+  if (!track || typeof track.overwriteClip !== "function") {
+    return { ok: false, attempted: false, marksRestored: true, error: "Track.overwriteClip is unavailable on this Premiere build" };
+  }
+  if (!item || typeof item.getInPoint !== "function" || typeof item.getOutPoint !== "function" ||
+      typeof item.setInPoint !== "function" || typeof item.setOutPoint !== "function") {
+    return { ok: false, attempted: false, marksRestored: true, error: "Project item In/Out marks cannot be set on this Premiere build" };
+  }
+  var originalIn = null;
+  var originalOut = null;
+  try {
+    originalIn = String(item.getInPoint(mediaType).ticks);
+    originalOut = String(item.getOutPoint(mediaType).ticks);
+  } catch (eMarks) {
+    return { ok: false, attempted: false, marksRestored: true, error: "Could not read the project item's In/Out marks" };
+  }
+  function setMarks(wantIn, wantOut) {
+    var currentOut = parseFloat(item.getOutPoint(mediaType).ticks);
+    if (parseFloat(wantIn) >= currentOut) {
+      item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
+      item.setInPoint(__ticksToSeconds(wantIn), mediaType);
+    } else {
+      item.setInPoint(__ticksToSeconds(wantIn), mediaType);
+      item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
+    }
+    return Math.abs(parseFloat(item.getInPoint(mediaType).ticks) - parseFloat(wantIn)) <= __TICK_MATCH_TOL &&
+      Math.abs(parseFloat(item.getOutPoint(mediaType).ticks) - parseFloat(wantOut)) <= __TICK_MATCH_TOL;
+  }
+  function restore() {
+    try { return setMarks(originalIn, originalOut); } catch (eRestore) { return false; }
+  }
+  var applied = false;
+  try { applied = setMarks(inTicks, outTicks); } catch (eSet) { applied = false; }
+  if (!applied) {
+    return { ok: false, attempted: false, marksRestored: restore(), error: "Premiere did not apply the source In/Out range to project item " + item.name };
+  }
+  var at = new Time();
+  at.ticks = String(startTicks);
+  try {
+    track.overwriteClip(item, at);
+  } catch (eOverwrite) {
+    return { ok: false, attempted: true, marksRestored: restore(), error: "Track.overwriteClip rejected project item " + item.name + ": " + eOverwrite.toString() };
+  }
+  return { ok: true, attempted: true, marksRestored: restore(), error: "" };
+}
+
 function __ticksToTimecode(ticks, fps) {
   var totalSeconds = __ticksToSeconds(ticks);
   var hours = Math.floor(totalSeconds / 3600);

package/dist/http-security.d.ts

@@ -1,8 +1,9 @@
 import type http from "node:http";
-export interface HttpSecurityHeaderOptions {
-    scriptNonce?: string;
-}
-export declare function buildContentSecurityPolicy(options?: HttpSecurityHeaderOptions): string;
+/**
+ * The HTTP transport serves JSON, redirects, and MCP streams only. It never
+ * returns an HTML document, so the policy denies every fetch, frame, and form.
+ */
+export declare function buildContentSecurityPolicy(): string;
 export declare const HTTP_SECURITY_HEADERS: Readonly<{
     "Content-Security-Policy": string;
     "Strict-Transport-Security": "max-age=31536000; includeSubDomains";
@@ -12,5 +13,5 @@ export declare const HTTP_SECURITY_HEADERS: Readonly<{
     "Permissions-Policy": "camera=(), microphone=(), geolocation=()";
     "Cross-Origin-Opener-Policy": "same-origin";
 }>;
-export declare function applyHttpSecurityHeaders(res: http.ServerResponse, options?: HttpSecurityHeaderOptions): void;
+export declare function applyHttpSecurityHeaders(res: http.ServerResponse): void;
 //# sourceMappingURL=http-security.d.ts.map

package/dist/http-security.js

@@ -1,24 +1,13 @@
-export function buildContentSecurityPolicy(options = {}) {
-    const scriptSource = [
-        "'self'",
-        ...(options.scriptNonce ? [`'nonce-${options.scriptNonce}'`] : []),
-        "https://www.googletagmanager.com",
-        "https://us-assets.i.posthog.com",
-        "https://eu-assets.i.posthog.com",
-    ].join(" ");
+/**
+ * The HTTP transport serves JSON, redirects, and MCP streams only. It never
+ * returns an HTML document, so the policy denies every fetch, frame, and form.
+ */
+export function buildContentSecurityPolicy() {
     return [
-        "default-src 'self'",
-        "base-uri 'self'",
+        "default-src 'none'",
+        "base-uri 'none'",
         "frame-ancestors 'none'",
-        "object-src 'none'",
-        "form-action 'self'",
-        "img-src 'self' data: https:",
-        "media-src 'self'",
-        "font-src 'self'",
-        "style-src 'self' 'unsafe-inline'",
-        `script-src ${scriptSource}`,
-        "connect-src 'self' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://us.i.posthog.com https://eu.i.posthog.com https://*.posthog.com",
-        "upgrade-insecure-requests",
+        "form-action 'none'",
     ].join("; ");
 }
 export const HTTP_SECURITY_HEADERS = Object.freeze({
@@ -30,12 +19,8 @@ export const HTTP_SECURITY_HEADERS = Object.freeze({
     "Permissions-Policy": "camera=(), microphone=(), geolocation=()",
     "Cross-Origin-Opener-Policy": "same-origin",
 });
-export function applyHttpSecurityHeaders(res, options = {}) {
-    const headers = {
-        ...HTTP_SECURITY_HEADERS,
-        "Content-Security-Policy": buildContentSecurityPolicy(options),
-    };
-    for (const [name, value] of Object.entries(headers)) {
+export function applyHttpSecurityHeaders(res) {
+    for (const [name, value] of Object.entries(HTTP_SECURITY_HEADERS)) {
         res.setHeader(name, value);
     }
 }