premiere-pro-mcp 1.18.5 → 1.18.6

package/CHANGELOG.md

@@ -6,6 +6,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.18.6] - 2026-09-29
+
+### Fixed
+
+- `set_scale_width_height` never set the height. It wrote to a "Scale Height" property that Premiere's Motion effect does not have, then reported success. With Uniform Scale off, Premiere keeps the height in Motion > Scale. The tool now writes the width to Scale Width and the height to Scale, reads all three values back, fails when any does not match, and rejects values outside 0-10000 before building a script. (#642)
+
+### Changed
+
+- The website moved to its own repository, [leancoderkavy/premiere-pro-mcp-site](https://github.com/leancoderkavy/premiere-pro-mcp-site), and is served at `https://premiere-pro-mcp.com`. It reads versions and tool counts from the published npm package and syncs them on its own, so releases here no longer update website files.
+- The HTTP transport no longer serves website pages, the homepage experiment, or `/api/landing-events`. It answers `/mcp`, `/health`, and OAuth protected-resource metadata only. Other `GET` and `HEAD` paths on `premiere-pro-mcp.fly.dev` or a `*.premiere-pro-mcp.com` host redirect (`308`) to the same path on `https://premiere-pro-mcp.com`; any other host gets a JSON `404`. Its Content Security Policy is now deny-all, `/health` reports the running package `version`, and the `MCP_MAX_CONCURRENT_LANDING_DOCUMENTS`, `MCP_LANDING_MAX_HTML_BYTES`, and `MCP_LANDING_HTML_CACHE_BYTES` settings are gone. The Docker image no longer builds the site.
+
+### Verification scope
+
+- Automated checks validate package behavior. The `set_scale_width_height` fix follows a live report from Premiere 26.5.1 but has not been re-verified on a licensed Premiere host. The website move was verified live: premiere-pro-mcp.com serves from Vercel, and the Fly deployment answers `/health` and redirects other paths to the website.
+
 ## [1.18.5] - 2026-09-28
 
 ### Fixed

package/README.md

@@ -22,7 +22,7 @@ The [completed AE render handoff](docs/after-effects-render-handoff.md) previews
 [![Node.js](https://img.shields.io/badge/Node.js-20.19%2B-green.svg)](https://nodejs.org)
 [![MCP](https://img.shields.io/badge/MCP-2026--07--28-purple.svg)](https://modelcontextprotocol.io/specification/2026-07-28)
 [![npm](https://img.shields.io/npm/v/premiere-pro-mcp.svg)](https://www.npmjs.com/package/premiere-pro-mcp)
-[![Fly.io](https://img.shields.io/badge/Fly.io-deployed-7C3AED.svg)](https://premiere-pro-mcp.fly.dev)
+[![Website](https://img.shields.io/badge/website-premiere--pro--mcp.com-7C3AED.svg)](https://premiere-pro-mcp.com/)
 [![Premiere Pro](https://img.shields.io/badge/Premiere%20Pro-2020--2026-9999FF.svg)](https://www.adobe.com/products/premiere.html)
 
 [![npm downloads](https://img.shields.io/npm/dm/premiere-pro-mcp.svg?label=npm%20downloads)](https://www.npmjs.com/package/premiere-pro-mcp)
@@ -36,7 +36,7 @@ The [completed AE render handoff](docs/after-effects-render-handoff.md) previews
 
 ---
 
-![MCP for Adobe Premiere Pro turns a structured AI request into an organized local editing workflow](landing/public/marketing/premiere-pro-mcp-campaign-hero-v1.png)
+![MCP for Adobe Premiere Pro turns a structured AI request into an organized local editing workflow](https://premiere-pro-mcp.com/marketing/premiere-pro-mcp-campaign-hero-v1.png)
 
 <details>
 <summary><strong>Table of contents</strong></summary>
@@ -110,9 +110,9 @@ The current source exposes 384 core tools for supported workflow steps spanning
 
 <a id="latest-release"></a>
 
-### Latest release: 1.18.4
+### Latest release: 1.18.5
 
-The published v1.18.4 npm artifact contains **384 core tools**, 382 in its default profile,
+The published v1.18.5 npm artifact contains **384 core tools**, 382 in its default profile,
 and 478 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
@@ -154,7 +154,7 @@ if the connection is unavailable.
   manifest, and proof runbook make workflow and verification boundaries
   inspectable without claiming a licensed-host walkthrough occurred.
 - **Faster, clearer delivery:** immutable MCP registration work is reused
-  safely across stateless requests, and the landing now has a lighter,
+  safely across stateless requests, and the website gained a lighter,
   mobile-first workflow view plus current machine-readable facts and crawl
   guidance for its public pages.
 - **Explicit boundary:** the hosted endpoint remains an operator-managed MCP
@@ -162,7 +162,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.18.4 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.4)
+See the [v1.18.5 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.18.5)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -210,7 +210,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.18.4
+> npm i -g premiere-pro-mcp@1.18.5
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -218,7 +218,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.18.4` |
+> | Version | `1.18.5` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -231,9 +231,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.4/premiere-pro-mcp-1.18.4.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.5/premiere-pro-mcp-1.18.5.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.4/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.18.5/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -241,7 +241,7 @@ The Claude bundle contains the local MCP server, so this route does not require
 
 ### First proof, before the first edit
 
-![Illustrated local Premiere MCP workflow](landing/public/premiere-pro-mcp-demo-poster.png)
+![Illustrated local Premiere MCP workflow](https://premiere-pro-mcp.com/premiere-pro-mcp-demo-poster.png)
 
 *This is an illustrated workflow, not a Premiere panel screenshot or licensed-host proof.*
 
@@ -533,11 +533,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.18.4 --install-cep
+npx -y premiere-pro-mcp@1.18.5 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.18.4` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.18.5` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -575,7 +575,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.18.4 --install-cep
+npx -y premiere-pro-mcp@1.18.5 --install-cep
 ```
 
 The Claude Code package lives in
@@ -843,7 +843,7 @@ argument, undo, confirmation, and live-host boundaries.
 
 ## Architecture
 
-![Local-first MCP for Adobe Premiere Pro workflow from AI assistant through the MCP bridge to a verified Premiere result](landing/public/marketing/premiere-pro-mcp-workflow-v1.png)
+![Local-first MCP for Adobe Premiere Pro workflow from AI assistant through the MCP bridge to a verified Premiere result](https://premiere-pro-mcp.com/marketing/premiere-pro-mcp-workflow-v1.png)
 
 **Local (stdio):**
 
@@ -1235,8 +1235,10 @@ feature coverage, playback, rendering, or editorial correctness.
 
 The server includes an HTTP/SSE transport (`src/http-server.ts`) for remote access via [mcp-remote](https://github.com/geelen/mcp-remote) or any MCP client that supports Streamable HTTP.
 
-A live operator-managed instance is running at **https://premiere-pro-mcp.fly.dev**.
-It is not a public desktop relay: it cannot connect an authenticated user to
+An operator-managed MCP endpoint runs at **https://premiere-pro-mcp.fly.dev/mcp**
+(health check: `/health`). The website is **https://premiere-pro-mcp.com**, served
+from a separate repository; other paths on the Fly host redirect there.
+The endpoint is not a public desktop relay: it cannot connect an authenticated user to
 Premiere on that user's computer. Public users should use the local stdio setup
 until the separate device-pairing relay is available.
 
@@ -1349,9 +1351,6 @@ user/device authorization are implemented.
 | `MCP_MAX_REQUESTS_PER_SOCKET` | Requests permitted on one keep-alive socket | `100` |
 | `MCP_MAX_CONCURRENT_REQUESTS` | In-flight authenticated MCP request ceiling | `8` |
 | `MCP_MAX_CONCURRENT_STREAMS` | Open authenticated SSE stream ceiling; isolated from operation capacity | `32` |
-| `MCP_MAX_CONCURRENT_LANDING_DOCUMENTS` | Concurrent HTML reads, nonce injection and asynchronous compression; excess work returns `503` | `4` |
-| `MCP_LANDING_MAX_HTML_BYTES` | Maximum source HTML document bytes | `4194304` (4 MiB) |
-| `MCP_LANDING_HTML_CACHE_BYTES` | Source HTML cache memory budget; must be at least the document byte limit | `16777216` (16 MiB) |
 | `PREMIERE_MCP_PROJECT_BACKUP_MAX_BYTES` | Positive integer byte budget for one project backup | `2147483648` (2 GiB) |
 | `MCP_RATE_LIMIT_PER_MINUTE` | Per-credential token-bucket refill rate | `120` |
 | `MCP_RATE_LIMIT_BURST` | Per-credential short burst allowance | `30` |
@@ -1469,10 +1468,10 @@ by default. Enable them only by setting
   body/socket/request limits, and applies a bounded in-process per-credential rate and concurrency limit before
   MCP request parsing or Premiere bridge work begins. It returns `413`, `429`, or `503` on containment failures. Configure an
   upstream rate limit and request-size limit too; process-local counters do not protect a multi-machine deployment.
-- **The landing CSP uses a per-response nonce for scripts**, and its static assets use explicit cache policies.
-  Keep the server in front of the exported landing so those controls are not bypassed by a separate static host.
-  Source HTML is cached as immutable build output; restart the HTTP process after replacing
-  an export. Each response still gets a fresh nonce. HEAD requests skip body rendering.
+- **The HTTP transport serves no web pages.** It answers only `/mcp`, `/health`, and OAuth
+  protected-resource metadata under a deny-all Content Security Policy. Other `GET`/`HEAD` paths on
+  `premiere-pro-mcp.fly.dev` or a `*.premiere-pro-mcp.com` host redirect (`308`) to
+  `https://premiere-pro-mcp.com`; every other host receives a JSON `404`.
 - **Media scans yield between asynchronous filesystem operations** and bound total traversal:
   25,000 entries, 5,000 matching files, 2,000 directories, depth 32, a 1,000-directory
   pending queue, and a cooperative five-second budget. A stalled OS call can exceed that

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.5" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.18.6" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.5"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.18.6"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.5" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.18.6" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.5"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.5"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.18.6"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.18.6"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.18.5</strong>
+        <strong id="updateTitle">Version 1.18.6</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.18.5";
+  var CURRENT_VERSION = "1.18.6";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/http-security.d.ts

@@ -1,8 +1,9 @@
 import type http from "node:http";
-export interface HttpSecurityHeaderOptions {
-    scriptNonce?: string;
-}
-export declare function buildContentSecurityPolicy(options?: HttpSecurityHeaderOptions): string;
+/**
+ * The HTTP transport serves JSON, redirects, and MCP streams only. It never
+ * returns an HTML document, so the policy denies every fetch, frame, and form.
+ */
+export declare function buildContentSecurityPolicy(): string;
 export declare const HTTP_SECURITY_HEADERS: Readonly<{
     "Content-Security-Policy": string;
     "Strict-Transport-Security": "max-age=31536000; includeSubDomains";
@@ -12,5 +13,5 @@ export declare const HTTP_SECURITY_HEADERS: Readonly<{
     "Permissions-Policy": "camera=(), microphone=(), geolocation=()";
     "Cross-Origin-Opener-Policy": "same-origin";
 }>;
-export declare function applyHttpSecurityHeaders(res: http.ServerResponse, options?: HttpSecurityHeaderOptions): void;
+export declare function applyHttpSecurityHeaders(res: http.ServerResponse): void;
 //# sourceMappingURL=http-security.d.ts.map

package/dist/http-security.js

@@ -1,24 +1,13 @@
-export function buildContentSecurityPolicy(options = {}) {
-    const scriptSource = [
-        "'self'",
-        ...(options.scriptNonce ? [`'nonce-${options.scriptNonce}'`] : []),
-        "https://www.googletagmanager.com",
-        "https://us-assets.i.posthog.com",
-        "https://eu-assets.i.posthog.com",
-    ].join(" ");
+/**
+ * The HTTP transport serves JSON, redirects, and MCP streams only. It never
+ * returns an HTML document, so the policy denies every fetch, frame, and form.
+ */
+export function buildContentSecurityPolicy() {
     return [
-        "default-src 'self'",
-        "base-uri 'self'",
+        "default-src 'none'",
+        "base-uri 'none'",
         "frame-ancestors 'none'",
-        "object-src 'none'",
-        "form-action 'self'",
-        "img-src 'self' data: https:",
-        "media-src 'self'",
-        "font-src 'self'",
-        "style-src 'self' 'unsafe-inline'",
-        `script-src ${scriptSource}`,
-        "connect-src 'self' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://us.i.posthog.com https://eu.i.posthog.com https://*.posthog.com",
-        "upgrade-insecure-requests",
+        "form-action 'none'",
     ].join("; ");
 }
 export const HTTP_SECURITY_HEADERS = Object.freeze({
@@ -30,12 +19,8 @@ export const HTTP_SECURITY_HEADERS = Object.freeze({
     "Permissions-Policy": "camera=(), microphone=(), geolocation=()",
     "Cross-Origin-Opener-Policy": "same-origin",
 });
-export function applyHttpSecurityHeaders(res, options = {}) {
-    const headers = {
-        ...HTTP_SECURITY_HEADERS,
-        "Content-Security-Policy": buildContentSecurityPolicy(options),
-    };
-    for (const [name, value] of Object.entries(headers)) {
+export function applyHttpSecurityHeaders(res) {
+    for (const [name, value] of Object.entries(HTTP_SECURITY_HEADERS)) {
         res.setHeader(name, value);
     }
 }

package/dist/http-server.js

@@ -26,253 +26,43 @@
  *   HTTP resource use. See README.
  */
 import http from "node:http";
-import fs from "node:fs";
-import path from "node:path";
-import { randomBytes } from "node:crypto";
-import { createGzip } from "node:zlib";
-import { fileURLToPath } from "node:url";
 import { toNodeHandler } from "@modelcontextprotocol/node";
 import { createMcpHandler } from "@modelcontextprotocol/server";
-import { createServer } from "./server.js";
+import { createServer, SERVER_VERSION } from "./server.js";
 import { cleanupTempDir, getTempDir } from "./bridge/file-bridge.js";
 import { getTelemetry, telemetryErrorType } from "./telemetry.js";
-import { createHomepageExperiment, injectFirstPaintExposure } from "./homepage-experiment.js";
-import { shouldGzipLanding } from "./landing-compression.js";
-import { LandingDocumentRenderer, assertLandingDocumentSize, readBoundedUtf8, readLandingDocumentSettings, } from "./landing-documents.js";
 import { applyHttpSecurityHeaders } from "./http-security.js";
 import { OAuthResourceServer } from "./oauth-resource-server.js";
 import { ProjectContextRepository } from "./context/project-context-store.js";
 import { MediaWatchRegistry } from "./tools/media-watch.js";
 import { HttpAdmissionController, MCP_HTTP_METHODS, exceedsRequestBodyLimit, getRequestPathname, isAuthorizedBearer, isSupportedMcpMethod, readBoundedRequestBody, rateLimitIdentity, readHttpAdmissionSettings, readHttpAuthConfiguration, RequestBodyTooLargeError, } from "./http-admission.js";
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const LANDING_DIR = path.resolve(__dirname, "../landing-dist");
-const MIME = {
-    ".html": "text/html; charset=utf-8",
-    ".js": "application/javascript; charset=utf-8",
-    ".css": "text/css; charset=utf-8",
-    ".json": "application/json",
-    ".png": "image/png",
-    ".webp": "image/webp",
-    ".mp4": "video/mp4",
-    ".svg": "image/svg+xml",
-    ".ico": "image/x-icon",
-    ".woff2": "font/woff2",
-    ".woff": "font/woff",
-    ".ttf": "font/ttf",
-    ".txt": "text/plain",
-    ".xml": "application/xml",
-};
-function cacheControlForLandingAsset(urlPath, contentType) {
-    if (contentType.startsWith("text/html"))
-        return "no-cache, must-revalidate";
-    if (urlPath.startsWith("/_next/static/"))
-        return "public, max-age=31536000, immutable";
-    return "public, max-age=86400, stale-while-revalidate=604800";
-}
-function injectScriptNonce(document, nonce) {
-    return document.replace(/<script(?=\s|>)/gi, `<script nonce="${nonce}"`);
-}
-async function serveLanding(req, res, scriptNonce, homepageVariant) {
-    if (req.method !== "GET" && req.method !== "HEAD")
-        return false;
-    if (!fs.existsSync(LANDING_DIR))
-        return false;
-    let urlPath;
-    try {
-        urlPath = decodeURIComponent(req.url?.split("?")[0] ?? "/");
-    }
-    catch {
-        return false;
-    }
-    const requestedSegments = urlPath.split("/").filter(Boolean);
-    const safeSegments = requestedSegments.map((segment) => path.basename(segment));
-    if (safeSegments.some((segment, index) => (segment !== requestedSegments[index] ||
-        segment === "." ||
-        segment === ".." ||
-        segment.includes("\\") ||
-        segment.includes("\0"))))
-        return false;
-    // Next.js trailingSlash exports /about/ as /about/index.html.
-    if (urlPath.endsWith("/") || safeSegments.length === 0)
-        safeSegments.push("index.html");
-    let filePath = path.join(LANDING_DIR, ...safeSegments);
-    // Security: ensure we stay within LANDING_DIR
-    const relativePath = path.relative(LANDING_DIR, filePath);
-    if (relativePath === ".." ||
-        relativePath.startsWith(`..${path.sep}`) ||
-        path.isAbsolute(relativePath))
-        return false;
-    if (!fs.existsSync(filePath)) {
-        // Next static exports store dynamic-route Flight payloads in nested folders
-        // (for example, __next.blog/$d$slug/__PAGE__.txt), while the client asks
-        // for a flattened filename (__next.blog.$d$slug.__PAGE__.txt). Map only
-        // that generated shape after every original URL segment has passed the
-        // containment check above. Without this, guide-to-guide navigation falls
-        // back to a full-document load and emits avoidable 404s.
-        const requestedFlightFile = safeSegments.at(-1);
-        const flightParts = requestedFlightFile?.split(".") ?? [];
-        const isNestedFlightPayload = flightParts.length >= 4 &&
-            flightParts[0] === "__next" &&
-            flightParts.at(-1) === "txt";
-        if (!isNestedFlightPayload)
-            return false;
-        const remappedFlightPath = path.join(LANDING_DIR, ...safeSegments.slice(0, -1), `${flightParts[0]}.${flightParts[1]}`, ...flightParts.slice(2, -2), `${flightParts.at(-2)}.txt`);
-        if (!fs.existsSync(remappedFlightPath))
-            return false;
-        filePath = remappedFlightPath;
-    }
-    let fileStats;
-    try {
-        fileStats = fs.statSync(filePath);
-        // Accept extensionless Next.js routes such as /changelog without trying to
-        // stream the directory itself. Streaming a directory emits an unhandled
-        // EISDIR error on Linux and previously restarted the production process.
-        if (fileStats.isDirectory()) {
-            filePath = path.join(filePath, "index.html");
-            if (!fs.existsSync(filePath))
-                return false;
-            fileStats = fs.statSync(filePath);
-        }
-    }
-    catch {
-        return false;
-    }
-    if (!fileStats.isFile())
+/**
+ * The product website lives in its own repository and is served from
+ * https://premiere-pro-mcp.com. This process only serves MCP, health, and
+ * OAuth discovery. Browser traffic that reaches a known public alias of the
+ * hosted deployment is sent to the website; every other host gets a plain 404.
+ */
+const PUBLIC_SITE_ORIGIN = "https://premiere-pro-mcp.com";
+function isPublicSiteAlias(hostHeader) {
+    // Only the Host header is consulted; forwarded host headers are never trusted.
+    const hostname = hostHeader?.trim().toLowerCase().replace(/:\d+$/, "");
+    if (!hostname)
         return false;
-    // Consolidate only real exported pages, after containment and file checks.
-    // Keep assets, missing routes, MCP, health and OAuth discovery untouched.
-    if (path.basename(filePath) === "index.html") {
-        const pageDirectory = path.relative(LANDING_DIR, path.dirname(filePath));
-        const canonicalPath = pageDirectory
-            ? `/${pageDirectory.split(path.sep).map(encodeURIComponent).join("/")}/`
-            : "/";
-        const rawPath = req.url.split("?")[0];
-        const queryIndex = req.url.indexOf("?");
-        const query = queryIndex >= 0 ? req.url.slice(queryIndex) : "";
-        const hostname = req.headers.host?.toLowerCase();
-        const publicAlias = hostname === "www.premiere-pro-mcp.com" || hostname === "premiere-pro-mcp.fly.dev";
-        if (publicAlias || rawPath !== canonicalPath) {
-            // Never derive a redirect origin from Host or forwarded headers. Local and
-            // self-hosted installs retain their origin; known public aliases use HTTPS.
-            const origin = publicAlias ? "https://premiere-pro-mcp.com" : "";
-            res.writeHead(308, {
-                "Location": `${origin}${canonicalPath}${query}`,
-                "Cache-Control": "public, max-age=3600",
-            });
-            res.end();
-            return true;
-        }
-    }
-    // Both variants are complete static documents. Select before sending HTML so
-    // the control cannot flash, shift layout, or hydrate over the treatment.
-    if (urlPath === "/" && homepageVariant === "test") {
-        const treatmentPath = path.join(LANDING_DIR, "design-preview", "index.html");
-        if (!fs.existsSync(treatmentPath))
-            return false;
-        filePath = treatmentPath;
-        try {
-            fileStats = fs.statSync(filePath);
-        }
-        catch {
-            return false;
-        }
-    }
-    const preview = new URL(req.url ?? "/", "http://localhost").searchParams.has("design") || urlPath.startsWith("/design-preview/");
-    if (preview)
-        res.setHeader("X-Robots-Tag", "noindex, follow");
-    res.setHeader("Vary", urlPath === "/" ? "Cookie, DNT, Sec-GPC, Accept-Encoding" : "Accept-Encoding");
-    const ext = path.extname(filePath);
-    const contentType = MIME[ext] ?? "application/octet-stream";
-    const compress = shouldGzipLanding(req.headers["accept-encoding"], contentType);
-    const headers = {
-        "Content-Type": contentType,
-        "Cache-Control": urlPath === "/" || preview ? "private, no-store" : cacheControlForLandingAsset(urlPath, contentType),
-    };
-    if (contentType.startsWith("text/html")) {
-        try {
-            assertLandingDocumentSize(Number.isFinite(fileStats.size) ? fileStats.size : undefined, landingDocumentSettings.maxDocumentBytes);
-        }
-        catch (error) {
-            console.error("[premiere-pro-mcp] Landing document read failed:", error);
-            res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store" });
-            res.end(req.method === "HEAD" ? undefined : "Internal server error");
-            return true;
-        }
-    }
-    // HEAD validates the same trusted path and returns the same representation
-    // headers, but never reads, injects, or compresses the response body.
-    if (req.method === "HEAD") {
-        if (compress)
-            headers["Content-Encoding"] = "gzip";
-        res.writeHead(200, headers);
-        res.end();
-        return true;
-    }
-    // A static export cannot generate per-request nonces itself. Add the nonce
-    // at the trusted server boundary so Next bootstrap and JSON-LD scripts remain
-    // executable without retaining script-src 'unsafe-inline'.
-    if (contentType.startsWith("text/html")) {
-        try {
-            const rendered = await landingDocuments.render(filePath, Number.isFinite(fileStats.size) ? fileStats.size : undefined, (source) => injectFirstPaintExposure(injectScriptNonce(source, scriptNonce), scriptNonce, urlPath === "/" ? homepageVariant : undefined, preview), compress);
-            if (!rendered.accepted) {
-                res.writeHead(503, {
-                    "Content-Type": "text/plain; charset=utf-8",
-                    "Cache-Control": "no-store",
-                    "Retry-After": "1",
-                });
-                res.end("Service busy");
-                return true;
-            }
-            if (res.destroyed || res.writableEnded)
-                return true;
-            if (compress)
-                headers["Content-Encoding"] = "gzip";
-            res.writeHead(200, headers);
-            res.end(rendered.body);
-            return true;
-        }
-        catch (error) {
-            console.error("[premiere-pro-mcp] Landing document read failed:", error);
-            if (res.destroyed || res.writableEnded)
-                return true;
-            res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store" });
-            res.end("Internal server error");
-            return true;
-        }
-    }
-    if (compress)
-        headers["Content-Encoding"] = "gzip";
-    const stream = fs.createReadStream(filePath);
-    res.once("close", () => stream.destroy());
-    stream.once("error", (error) => {
-        console.error("[premiere-pro-mcp] Landing asset read failed:", error);
-        if (!res.headersSent) {
-            res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8" });
-            res.end("Internal server error");
-            return;
-        }
-        res.destroy();
-    });
-    res.writeHead(200, headers);
-    if (compress) {
-        const gzip = createGzip({ level: 6 });
-        res.once("close", () => gzip.destroy());
-        gzip.once("error", () => res.destroy());
-        stream.pipe(gzip).pipe(res);
-    }
-    else
-        stream.pipe(res);
-    return true;
+    return hostname === "premiere-pro-mcp.fly.dev" || hostname.endsWith(".premiere-pro-mcp.com");
+}
+function publicSiteLocation(rawUrl) {
+    // Parse against a fixed base so absolute-form and protocol-relative request
+    // targets can never change the redirect origin.
+    const url = new URL(rawUrl, "http://localhost");
+    return `${PUBLIC_SITE_ORIGIN}${url.pathname}${url.search}`;
 }
 const PORT = parseInt(process.env.PORT ?? "3000", 10);
 const HTTP_HOST = process.env.MCP_HTTP_HOST || "0.0.0.0";
 let httpAuth;
 let admissionSettings;
-let landingDocumentSettings;
 try {
     httpAuth = readHttpAuthConfiguration(process.env);
     admissionSettings = readHttpAdmissionSettings(process.env);
-    landingDocumentSettings = readLandingDocumentSettings(process.env);
 }
 catch (error) {
     console.error("[premiere-pro-mcp] Refusing to start:", error instanceof Error ? error.message : error);
@@ -289,7 +79,6 @@ process.env.PREMIERE_MCP_TRANSPORT = "http";
 const telemetry = getTelemetry();
 const admission = new HttpAdmissionController(admissionSettings);
 const preAuthAdmission = new HttpAdmissionController(admissionSettings);
-const landingDocuments = new LandingDocumentRenderer(landingDocumentSettings, readBoundedUtf8);
 const oauthResourceServer = httpAuth.oauth ? new OAuthResourceServer(httpAuth.oauth) : undefined;
 // Streamable HTTP creates an McpServer for every request. Sharing the repository
 // keeps memory-backed context durable across those request-scoped servers and
@@ -306,25 +95,19 @@ const tempDir = getTempDir(bridgeOptions);
 console.error(`[premiere-pro-mcp] Starting HTTP server on port ${PORT}...`);
 console.error(`[premiere-pro-mcp] Temp directory: ${tempDir}`);
 cleanupTempDir(bridgeOptions);
-const homepageExperiment = createHomepageExperiment();
 // Each request gets its own transport+server instance (stateless per-request model)
 const httpServer = http.createServer(async (req, res) => {
-    const scriptNonce = randomBytes(18).toString("base64");
-    applyHttpSecurityHeaders(res, { scriptNonce });
+    applyHttpSecurityHeaders(res);
     const pathname = getRequestPathname(req.url);
     if (!pathname) {
         res.writeHead(400, { "Content-Type": "application/json", "Cache-Control": "no-store" });
         res.end(JSON.stringify({ error: "Malformed request URL" }));
         return;
     }
-    if (pathname === "/api/landing-events") {
-        await homepageExperiment.handleEvent(req, res);
-        return;
-    }
     // Health check
     if (req.method === "GET" && pathname === "/health") {
         res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
-        res.end(JSON.stringify({ status: "ok", service: "premiere-pro-mcp" }));
+        res.end(JSON.stringify({ status: "ok", service: "premiere-pro-mcp", version: SERVER_VERSION }));
         return;
     }
     if (req.method === "GET" &&
@@ -338,20 +121,19 @@ const httpServer = http.createServer(async (req, res) => {
         res.end(JSON.stringify(oauthResourceServer.metadata()));
         return;
     }
-    // Only handle /mcp endpoint; everything else goes to the landing page
+    // Only /mcp reaches the MCP transport. Website paths on a public alias go to
+    // the website; everything else is a small 404.
     if (pathname !== "/mcp") {
-        let variant;
-        if (pathname === "/" && req.method === "GET") {
-            const preview = new URL(req.url ?? "/", "http://localhost").searchParams;
-            if (preview.has("design"))
-                variant = preview.get("design") === "test" ? "test" : "control";
-            else if (fs.existsSync(path.join(LANDING_DIR, "design-preview", "index.html")))
-                variant = await homepageExperiment.assign(req, res);
-        }
-        if (await serveLanding(req, res, scriptNonce, variant))
+        if ((req.method === "GET" || req.method === "HEAD") && isPublicSiteAlias(req.headers.host)) {
+            res.writeHead(308, {
+                "Location": publicSiteLocation(req.url),
+                "Cache-Control": "public, max-age=3600",
+            });
+            res.end();
             return;
-        res.writeHead(404);
-        res.end("Not found");
+        }
+        res.writeHead(404, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+        res.end(req.method === "HEAD" ? undefined : JSON.stringify({ error: "Not found" }));
         return;
     }
     if (!isSupportedMcpMethod(req.method)) {
@@ -514,7 +296,6 @@ async function shutdown(signal) {
     await mcpHandler.close();
     await projectContextRepository.close();
     await telemetry.shutdown();
-    await homepageExperiment.shutdown();
     process.exit(0);
 }
 process.on("SIGTERM", () => void shutdown("SIGTERM"));