premiere-pro-mcp 1.20.0 → 1.22.0

package/CHANGELOG.md

@@ -6,6 +6,60 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.22.0] - 2026-10-08
+
+### Fixed
+
+- The Windows private-directory ACL check waits up to 30 seconds for `powershell.exe` instead of 5, in the server and in both CEP panels. On a loaded machine (including CI runners with coverage) PowerShell could take longer than 5 seconds to start, which made the check throw and blocked the bridge. A timeout still fails closed: the directory is not used unless the ACL check succeeds.
+- Effect writes, stabilization, smart-bin creation, proxy detachment, folder imports, sequence creation, marker deletion and clip selection now distinguish requested edits from host readback, report ignored writes as failures and unreadable results as `committed_unverified`. Selection counts describe applied states; stabilization does not claim a completed analysis. CEP selected-clip removal refuses ripple requests before deleting because clip absence cannot verify gap closure.
+- `set_sequence_display_format` writes Premiere's display codes (video 100-113, audio 200-201) and maps the older 0-11 / 0-1 inputs onto them. Premiere 26.5.2 stores and reads back any number, so the old values "verified" but did not select the format (2 formatted as non-drop timecode, 102 as drop-frame). `set_sequence_frame_rate` now reports the clips Premiere re-snaps to the new frame grid (`clipsMoved`, `maxShiftSeconds`, `movedClips`) with a warning that changing back does not restore them.
+- `create_subclip` now returns the new subclip's `nodeId` and reads its stored range back. On Premiere 26.5.2 a soft-boundary subclip's `getInPoint`/`getOutPoint` read the whole media, so the range is read from the subclip's project metadata (`VideoInPoint`/`VideoOutPoint` timecode and frame rate). The result reports requested and observed in/out seconds, with `outcome: "verified"` when both are within one media frame of the request and `committed_unverified` otherwise or when the metadata cannot be read.
+- `add_title` reports the start Premiere stored for the placed graphic. Premiere snaps it to the frame grid (a requested 5 s lands at 5.005 s at 29.97 fps), so `startSeconds` and the new `appliedStartSeconds` come from the placed clip, and the request is kept as `requestedStartSeconds`.
+- `update_marker` reports the stored marker start as `timeSeconds` (for example 7.5075 s rather than the requested 7.5 s) and adds `requestedSeconds`.
+- `manage_proxies` with `action: "toggle"` can set a known proxy display state. The action changes Premiere's application-wide proxy display (`app.setEnableProxies`), not the given item, and it only flipped the current state, so on Premiere 26.5.2 an agent could not ask for proxies on or off and two calls undid each other. It now accepts `enabled: true | false`, writes only when the state differs, and verifies by reading `app.getEnableProxies()` back; a host that ignores the write is reported as a failure. Omitting `enabled` still flips the state. Results report `previousEnabled`, `proxiesEnabled`, `changed` and `mode` (`set` or `flip`), and the description now says the action is application-wide.
+- Still-image mark clearing now identifies unreadable still duration explicitly; `set_clip_start_time` shares the verified implementation of `set_start_time` and is documented as its alias. Colour selection states that it uses the source project item label because CEP has no timeline clip-label getter. Baked title-cache cleanup retains the newest 50 matching files and leaves unrelated directory entries untouched.
+
+## [1.21.0] - 2026-10-07
+
+### Fixed
+
+- Effect-property lookup errors now list up to 25 non-empty display names; repeated names include their `property_index`, helping identify controls such as Gaussian Blur's `Amount` without guessing.
+
+- `add_to_render_queue` now asks Media Encoder to render the active sequence's In/Out range instead of the entire sequence.
+- `set_frame_blend` and `set_time_interpolation` report `committed_unverified` because Premiere exposes no readback for those QE writes; thrown writes warn that the mutation outcome is unknown.
+
+- UXP inspect snapshots now include every expected guard needed by their matching apply or update action, including sequence identity, selection, display-format, work-area, playhead, and parameter animation state. Sequence-range inspection treats Premiere's negative In/Out sentinels as unset and returns explicit set flags so an unset range can be reviewed and updated safely.
+
+- CEP `set_work_area` turns on a disabled work-area bar through the public Sequence API before writing, and checks the bar state and stored points afterwards. Premiere 26.5.2 ignores the CEP work-area point setters; when the points read back unchanged, the tool now fails, turns the bar back off if it turned it on, and points to the UXP `set_work_area`. Unreadable or partial writes still report `committed_unverified`. Work-area reads keep an unreadable bar state as unknown instead of treating it as disabled.
+- `slide_edit` accepts source/timeline duration drift up to half a sequence frame or exactly one frame of host rounding, reports the signed drift, and continues to refuse larger or intermediate mismatches. Neighbour source and cut readback checks remain exact.
+
+- `lift_selection` and `extract_selection` no longer cut one extra frame. Premiere 26.5.2 stores sequence marks floored to the 48 kHz sample grid, so at 29.97 an In on a frame was stored just before it: video lost the frame before the range and Extract rippled one frame short. Inexact marks are re-written on their exact frame through QE first (`marksRewritten`), and coverage and ripple checks now allow half a frame instead of a full frame, so a lost frame is reported instead of verified.
+- `set_sequence_in_out_points` writes each mark on the first audio sample at or after its frame start. Premiere 26.5.2 stores sequence marks floored to the 48 kHz sample grid and renders an In/Out export from the frame holding the In to the frame holding the Out, so at 29.97 an export of a marked range started and ended one frame early on four of every five frames.
+
+- `clear_sequence_in_out` now writes Premiere's unset value, so cleared points read back as unset like a new sequence, instead of writing 0 and the sequence end. On 26.5.2 the old method failed its own readback because the Out point is stored rounded to an audio sample. It reports each point after the change and leaves the point it was not asked to clear unchanged.
+
+- `replace_clip` checks, before removing the original clip, that the replacement accepts the source range, and refuses an item that also carries the other media type, because Premiere 26.5.2's `Track.overwriteClip` also places that media on the matching track and overwrites the clips there. A replacement at another frame rate now fills the span: item marks may land up to one media frame early, and the placed end is extended to the original end (`endCorrected`). `unnest_sequence` runs the same source-range check before removing the nested clip.
+
+- `link_selection` and `unlink_selection` read the clip links back instead of always reporting success. On Premiere 26.5.2 `unlinkSelection()` returns false and changes nothing unless every clip of the linked group is selected; `unlink_selection` now refuses such a selection before calling Premiere and names the partner clips to add. An already-unlinked selection is reported as `alreadyUnlinked`, and `link_selection` needs at least two selected clips.
+
+- `set_item_in_out` verifies a mark within one media frame and reports the requested and applied seconds. Premiere 26.5.2 snaps project-item video marks to the media's own frame grid, so 0.5 s on 23.976 media (applied 0.4588 s) used to fail with a partial-state error. `clear_item_in_out` now reads MediaDuration as nominal-rate timecode ("23.98 fps" is 24000/1001, and 29.97 media can use drop-frame `;` timecode), so clearing 23.976 and 29.97 media verifies instead of returning `committed_unverified`. `set_source_in_out` gets the same media-frame tolerance and reports applied seconds.
+
+- `add_transition` snaps `cut_point_seconds` to the sequence frame grid and uses the nearest clip edge within half a frame. It used to require the edge within one tick, so a cut point given to a few decimals (22.5892 s for the cut at 22.5892333 s at 29.97) was refused. The result reports the requested and applied cut seconds.
+
+- `set_zero_point` writes the frame-snapped zero point and reads it back instead of always returning `set: true`. It reports the requested, applied, and previous seconds, and refuses a negative or non-finite `start_seconds` before contacting Premiere.
+
+- Temporary project-item mark writes and failed source-mark updates preserve soft-subclip ranges using private metadata when the DOM reports the whole media. Restore reads support fractional and drop-frame video timecodes and audio sample timecodes; unreadable ranges refuse before a write.
+
+- `duplicate_clip` now copies clips whose media frame rate differs from the sequence's. Premiere floors project-item marks to the media's own frame grid, so on Premiere 26.5.2 a 23.976 fps clip in a 29.97 fps sequence was copied with its source in one sequence frame early (19.9533 s instead of 19.9866 s) and reported `committed_unverified`. The tool now writes each mark a quarter media frame late, slips a copy whose source in is still less than one media frame off back to the original's source in, and accepts a mixed-rate source in within half a media frame. Results add `sourceIn` with the requested and applied seconds, `corrected` and `snappedToMediaFrame`. Same-rate clips are unchanged. Covered by unit tests with a fake host.
+
+- The Claude Desktop extension starts when optional settings are left blank. Desktop can pass an unset `user_config` field through as the literal `${user_config.name}`; `PREMIERE_MCP_PROTOCOL_MODE` and `PREMIERE_UXP_TOKEN` now treat that, and blank values, as unset instead of failing startup with `PREMIERE_MCP_PROTOCOL_MODE must be either auto or legacy` (#828).
+
+- The UXP loopback port binds on the first request other than `server/discover`, so Desktop's disposable discover-only probe copy no longer takes port 7777 and pushes the real server to CEP-only tools. A busy port is retried every 3 seconds instead of abandoned, a non-port UXP startup failure is reported without taking the CEP tools down, and the server exits when the client closes stdin (#828).
+
+- A UXP bridge token with surrounding whitespace or a trailing newline (for example from `pbcopy`) is trimmed in the server and in the UXP panel instead of failing with an unexplained HTTP 401 (#828).
+
+- `--diagnose-cep` repair inside the `.mcpb` bundle, which omits `scripts/`, now says so and points to the signed `MCPBridgeCEP.zxp` or `npx -y premiere-pro-mcp --install-cep` instead of failing on a missing script (#828).
+
 ## [1.20.0] - 2026-10-06
 
 ### Added
@@ -19,6 +73,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ### Fixed
 
+- UXP tools on Premiere 26.5.2, found live on macOS:
+  - **Project-item IDs.** The project root and some folders return no `getId` until cast with `ProjectItem.cast`. `inspect_project_tree_uxp` and `inspect_unique_object_identity_uxp` failed, and bin listings reported empty IDs. The advanced-workflow and unique-identity helpers now cast, as the other helpers already did.
+  - **Slip, slide and split edits.** Premiere 26.5 applies TrackItem start/end and in/out actions like trims, so each edge action also moves its source point.
+    - `slip_track_item_uxp` landed as a move. It now restores the timeline position with a second, measured move (two undo steps).
+    - `slide_track_item_uxp` trimmed both neighbours twice. It now sends only the edge actions and writes source points afterwards only when they did not follow.
+    - `make_split_edit_uxp` extended the audio twice, and it never checked whether the extension was free. An L-cut into the next audio clip left two items over the same range, and Premiere crashed (heap corruption) while drawing them. It now refuses when the extension would overlap another item on the same track, and it applies the source point only when needed.
+  - **`ripple_delete_track_item_uxp`** deleted without rippling when another track had an item over the deleted range, such as a linked audio partner or a spanning adjustment layer. It now refuses before any change and names those items.
+  - **Capabilities.** The bridge re-reads the panel's live capabilities before refusing a command that the connect-time handshake marked unsupported, and `get_uxp_capabilities` reports the live list. A panel that connected before a project was open or a workspace was approved hid 25 of 192 commands for the session.
+  - **Markers.** `manage_markers_uxp` `add` now forwards and applies `color_index` and verifies every requested field. Previously the colour was dropped while the add reported verified.
+  - **Frame export.** `export_frame_uxp` retries with the file extension when Premiere rejects an extension-less name ("File Format is not supported"). It also waits up to 15 s for the PNG, which 26.5.2 writes after the call returns, and it checks for the file by walking the approved workspace folder: a plugin with request-only file access cannot open arbitrary `file:` URLs, so the old check reported a written frame as missing.
+  - **Media health.** `maintain_media_health_uxp` treats a single `project_item_id` as a one-item list for inspect, refresh and set_offline.
+
 - `import_media` no longer reports an error when an `.xml`, `.aaf`, `.edl` or `.prproj` file imports correctly. Interchange files create sequences and bins rather than an item with the file's path, so they now return `outcome: "committed_unverified"` with `interchange: true`, which stops retries from duplicating the sequence (#805).
 
 - `duplicate_clip` no longer places a copy one frame short. Premiere can snap the source out point a frame early, so on Premiere 26.5.2 a 677-frame clip was copied as 676 frames, and the tool still reported `verified` because it allowed two frames of drift. It now trims each placed copy, and its linked partner, back to the original end, reports `endCorrected`, and verifies start, end and source in-point to within half a frame.
@@ -42,6 +108,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - `navigate_playhead` now reports timecode using Premiere's sequence display format, including drop-frame punctuation.
 
+- Guarded UXP inspect results for slip, slide, ripple-delete, duplicate, sequence range, work area, preview frame, source label, marker removal, display formats, static effect values, keyframe times, media timing and overrides, selection, and video transitions now include schema-shaped expected objects accepted unchanged by apply. The converter maps panel camelCase values to the apply schema.
+- UXP playhead, work-area, sequence-range, timeline insert/overwrite, selected-item clone, track-item move, slip/slide, split-edit, sequence and beat markers, MOGRT, and frame-export time inputs snap to the active sequence timebase using exact ticks per frame. Results report requested and applied values, and timeline readback accepts at most half a frame.
+
 - Transition receipts distinguish verified placement from handle-limited duration, mark each deviating placement, and count duration deviations. Premiere-built title copies report their application-support location and are documented as user-managed files that must not be removed while any project references them.
 - Filler-removal guidance explains that hesitation sounds require transcripts that preserve disfluencies; Whisper's default output omits them.
 

package/README.md

@@ -129,13 +129,13 @@ The current source exposes 393 core tools for supported workflow steps spanning
 
 <a id="latest-release"></a>
 
-### Latest release: 1.20.0
+### Latest release: 1.22.0
 
-The published v1.20.0 npm artifact contains **393 core tools**, 391 in its default profile,
+The published v1.22.0 npm artifact contains **393 core tools**, 391 in its default profile,
 and 487 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
-GitHub releases use `v<SemVer>` for both title and tag, such as `v1.20.0`.
+GitHub releases use `v<SemVer>` for both title and tag, such as `v1.22.0`.
 See [release naming and version conventions](docs/release-conventions.md).
 
 ### Try a bounded workflow
@@ -154,6 +154,10 @@ if the connection is unavailable.
 
 ### Release highlights
 
+- **1.22.0 readback receipts:** effect writes, stabilization, smart bins, proxies, folder imports, sequence creation, marker deletion and clip selection report what Premiere applied as `verified`, `committed_unverified` or `failed`; `create_subclip`, `add_title` and `update_marker` report the stored values; `set_sequence_frame_rate` lists clips Premiere re-snapped.
+- **1.22.0 display codes and proxies:** `set_sequence_display_format` writes Premiere's real display codes (video 100-113, audio 200-201) and maps the older 0-11 and 0-1 inputs onto them; `manage_proxies` toggle can set a known proxy display state; the Windows ACL check waits up to 30 seconds for PowerShell.
+- **1.21.0 Claude Desktop startup fix:** the extension starts when optional settings are blank, and Desktop's discover-only probe no longer holds the UXP port, so the real server keeps its UXP tools.
+- **1.21.0 frame-grid verification:** project-item marks, sequence In/Out, work area, link/unlink, zero point, transitions, `replace_clip` and `duplicate_clip` verify against Premiere's own frame and sample grids and fail closed; UXP tools snap times to the sequence frame grid.
 - **1.20.0 verified range removal:** `ripple_remove_timeline_ranges` previews, then applies a multi-range ripple removal with a single-use confirmation token and clip-level readback (QE razor; experimental).
 - **1.20.0 effect safety:** effect colours read and write losslessly, ambiguous property names (for example repeated Lumetri controls) are refused unless `property_index` is given, and `duplicate_clip` copies keep the original length.
 - **1.20.0 import and metadata additions:** `import_fcp_xml` can import into the open project, `import_folder` accepts `target_bin`, `get_encoder_presets` pages with `limit`/`offset`, `set_footage_interpretation` sets `field_type`, and XML/AAF/EDL imports through `import_media` no longer report a false error.
@@ -191,7 +195,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.20.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.20.0)
+See the [v1.22.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.22.0)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -239,7 +243,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.20.0
+> npm i -g premiere-pro-mcp@1.22.0
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -247,7 +251,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.20.0` |
+> | Version | `1.22.0` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -260,9 +264,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.20.0/premiere-pro-mcp-1.20.0.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.22.0/premiere-pro-mcp-1.22.0.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.20.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.22.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -566,11 +570,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.20.0 --install-cep
+npx -y premiere-pro-mcp@1.22.0 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.20.0` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.22.0` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -608,7 +612,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.20.0 --install-cep
+npx -y premiere-pro-mcp@1.22.0 --install-cep
 ```
 
 The Claude Code package lives in

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.20.0" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.22.0" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.20.0"/>
-    <Extension Id="com.mcp.aftereffects.bridge.headless" Version="1.20.0"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.22.0"/>
+    <Extension Id="com.mcp.aftereffects.bridge.headless" Version="1.22.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/after-effects-cep-plugin/bridge-directory-security.cjs

@@ -91,7 +91,7 @@
           encoding: "utf8",
           windowsHide: true,
           stdio: ["ignore", "pipe", "pipe"],
-          timeout: 5000,
+          timeout: 30000,
           maxBuffer: 64 * 1024,
           env: commandEnvironment,
         }

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.20.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.22.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.20.0"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.20.0"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.22.0"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.22.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/bridge-directory-security.cjs

@@ -91,7 +91,7 @@
           encoding: "utf8",
           windowsHide: true,
           stdio: ["ignore", "pipe", "pipe"],
-          timeout: 5000,
+          timeout: 30000,
           maxBuffer: 64 * 1024,
           env: commandEnvironment,
         }

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.20.0</strong>
+        <strong id="updateTitle">Version 1.22.0</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.20.0";
+  var CURRENT_VERSION = "1.22.0";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/bridge/file-bridge.js

@@ -183,6 +183,9 @@ export const WINDOWS_BRIDGE_ACL_SCRIPT = [
     '})',
     '[pscustomobject]@{ ownerSid = $owner; currentUserSid = $current; unsafeWriteAces = $unsafe; unsafeAncestorEntries = $unsafeAncestors } | ConvertTo-Json -Compress',
 ].join("\n");
+// Starting powershell.exe can take several seconds on a loaded Windows machine (CI runners
+// with coverage timed out at 5 s). A timeout still fails closed: the caller throws.
+const WINDOWS_ACL_CHECK_TIMEOUT_MS = 30_000;
 export function inspectWindowsBridgeDirectoryAcl(directory, initialize, privacy = {}) {
     let script = WINDOWS_BRIDGE_ACL_SCRIPT;
     if (privacy.readAccess) {
@@ -198,7 +201,7 @@ export function inspectWindowsBridgeDirectoryAcl(directory, initialize, privacy
         encoding: "utf8",
         windowsHide: true,
         stdio: ["ignore", "pipe", "pipe"],
-        timeout: 5000,
+        timeout: WINDOWS_ACL_CHECK_TIMEOUT_MS,
         maxBuffer: 64 * 1024,
         env: {
             ...process.env,

package/dist/bridge/script-builder.js

@@ -44,6 +44,14 @@ function __ticksToSeconds(ticks) {
   return parseFloat(ticks) / TICKS_PER_SECOND;
 }
 
+function __workAreaEnabled(seq) {
+  try {
+    if (typeof seq.isWorkAreaEnabled !== "function") return null;
+    var enabled = seq.isWorkAreaEnabled();
+    return typeof enabled === "boolean" ? enabled : null;
+  } catch (workAreaStateError) { return null; }
+}
+
 // Sequence work-area getters return seconds (often as a string) on live 25.x
 // and 26.x hosts. Values above 1e6 can only be ticks, so convert those.
 function __workAreaSeconds(value) {
@@ -109,6 +117,96 @@ function __isTrackLocked(track) {
   return false;
 }
 
+// Read the private source range before temporarily changing project-item marks.
+function __itemMarksForRestore(item, mediaType) {
+  function domMarks() {
+    try {
+      var inMark = item.getInPoint(mediaType), outMark = item.getOutPoint(mediaType);
+      if (!inMark || !outMark || inMark.ticks === null || outMark.ticks === null || inMark.ticks === undefined || outMark.ticks === undefined || String(inMark.ticks) === "" || String(outMark.ticks) === "") return null;
+      var left = Number(inMark.ticks), right = Number(outMark.ticks);
+      if (isFinite(left) && isFinite(right) && left >= 0 && right >= left) return { inTicks: String(Math.round(left)), outTicks: String(Math.round(right)), inSeconds: left / TICKS_PER_SECOND, outSeconds: right / TICKS_PER_SECOND };
+    } catch (domMarkError) {}
+    return null;
+  }
+  var dom = domMarks(), xml = "";
+  try { if (typeof item.getProjectMetadata === "function") xml = String(item.getProjectMetadata() || ""); } catch (metadataMarkError) { return null; }
+  if (!xml) return dom;
+  if (xml.length > 1000000) return null;
+  function field(name, text) {
+    var escaped = name.replace(/\\./g, "\\\\.");
+    var pattern = new RegExp("<(?:[A-Za-z_][\\\\w.-]*:)?" + escaped + "\\\\b[^>]*>([\\\\s\\\\S]*?)</(?:[A-Za-z_][\\\\w.-]*:)?" + escaped + "\\\\s*>");
+    var match = pattern.exec(text);
+    return match ? match[1] : null;
+  }
+  function value(text) {
+    if (text === null) return null;
+    var nested = field("value", text);
+    return String(nested === null ? text : nested).replace(/^\\s+|\\s+$/g, "");
+  }
+  var timebase = value(field("Column.Intrinsic.MediaTimebase", xml));
+  function point(block, audio) {
+    if (block === null) return null;
+    var tc = value(block), match = /^(\\d+):(\\d{2}):(\\d{2})([:;])(\\d+)$/.exec(tc);
+    if (!match) return null;
+    var hours = Number(match[1]), minutes = Number(match[2]), seconds = Number(match[3]), last = Number(match[5]);
+    if (minutes > 59 || seconds > 59) return null;
+    var rateText = value(field("frame_rate", block));
+    var hz = audio && timebase && (/Hz/i.test(timebase) || parseFloat(timebase) > 240) ? parseFloat(timebase) : NaN;
+    if (audio && isFinite(hz) && hz > 0) {
+      if (match[4] === ";" || last >= hz || Math.floor(hz) !== hz) return null;
+      return { ticks: Math.round(((hours * 3600 + minutes * 60 + seconds) * hz + last) * TICKS_PER_SECOND / hz), frameTicks: TICKS_PER_SECOND / hz };
+    }
+    var frameTicks = rateText !== null ? Number(rateText) : NaN;
+    if (rateText !== null && (!isFinite(frameTicks) || frameTicks <= 0)) return null;
+    if (!(frameTicks > 0)) {
+      var fps = timebase ? parseFloat(timebase) : NaN;
+      if (!isFinite(fps) || fps <= 0 || fps > 240 || /Hz/i.test(timebase)) {
+        try { fps = Number(item.getFootageInterpretation().frameRate); } catch (footageRateError) { fps = NaN; }
+      }
+      if (!isFinite(fps) || fps <= 0 || fps > 240) return null;
+      if (Math.abs(fps - 23.976) < 0.001) frameTicks = TICKS_PER_SECOND * 1001 / 24000;
+      else if (Math.abs(fps - 29.97) < 0.001) frameTicks = TICKS_PER_SECOND * 1001 / 30000;
+      else if (Math.abs(fps - 59.94) < 0.001) frameTicks = TICKS_PER_SECOND * 1001 / 60000;
+      else frameTicks = TICKS_PER_SECOND / fps;
+    }
+    var actualRate = TICKS_PER_SECOND / frameTicks, nominal = Math.round(actualRate);
+    if (nominal < 1 || nominal > 240 || last >= nominal) return null;
+    var frames = (hours * 3600 + minutes * 60 + seconds) * nominal + last;
+    if (match[4] === ";") {
+      var dropped = 0;
+      if (nominal === 30) dropped = 2;
+      else if (nominal === 60) dropped = 4;
+      if (!dropped || Math.abs(actualRate - nominal * 1000 / 1001) > 0.01 || (minutes % 10 !== 0 && seconds === 0 && last < dropped)) return null;
+      var totalMinutes = hours * 60 + minutes;
+      frames -= dropped * (totalMinutes - Math.floor(totalMinutes / 10));
+    }
+    return { ticks: Math.round(frames * frameTicks), frameTicks: frameTicks };
+  }
+  var kind = mediaType === 2 ? "Audio" : "Video";
+  var inBlock = field("Column.Intrinsic." + kind + "InPoint", xml), outBlock = field("Column.Intrinsic." + kind + "OutPoint", xml);
+  var videoFieldsPresent = xml.indexOf("Column.Intrinsic.VideoInPoint") >= 0 || xml.indexOf("Column.Intrinsic.VideoOutPoint") >= 0;
+  if (mediaType === 4 && inBlock === null && outBlock === null && !videoFieldsPresent) {
+    kind = "Audio";
+    inBlock = field("Column.Intrinsic.AudioInPoint", xml); outBlock = field("Column.Intrinsic.AudioOutPoint", xml);
+  }
+  if (inBlock === null && outBlock === null) {
+    if (xml.indexOf("Column.Intrinsic." + kind + "InPoint") >= 0 || xml.indexOf("Column.Intrinsic." + kind + "OutPoint") >= 0) return null;
+    return dom;
+  }
+  var left = point(inBlock, kind === "Audio"), right = point(outBlock, kind === "Audio");
+  // The private VideoOutPoint names the last frame (inclusive): a subclip made
+  // with an exclusive Out at frame 719 shows 00:00:29:22 (frame 718) on 26.5.2.
+  if (right && kind !== "Audio") right.ticks += right.frameTicks;
+  if (!left || !right || !isFinite(left.ticks) || !isFinite(right.ticks) || left.ticks < 0 || right.ticks > 9007199254740991 || right.ticks <= left.ticks || Math.abs(left.frameTicks - right.frameTicks) > 1) return null;
+  var tolerance = Math.max(left.frameTicks, right.frameTicks);
+  if (dom && Math.abs(Number(dom.inTicks) - left.ticks) <= tolerance && Math.abs(Number(dom.outTicks) - right.ticks) <= tolerance) return dom;
+  // Premiere floors a written mark to the media's frame (or sample) grid, so a
+  // value exactly on the boundary can land one frame early (live 26.5.2: a
+  // restored Out of 00:00:29:22 read back 00:00:29:21). Write a quarter frame
+  // past the boundary; the ticks stay on the boundary for readback checks.
+  return { inTicks: String(left.ticks), outTicks: String(right.ticks), inSeconds: (left.ticks + left.frameTicks / 4) / TICKS_PER_SECOND, outSeconds: (right.ticks + right.frameTicks / 4) / TICKS_PER_SECOND };
+}
+
 // Place exactly [inTicks, outTicks) of a project item on ONE track at
 // startTicks without rippling. Track.overwriteClip places the item's In/Out
 // range, so set those marks first and restore the item's own marks afterwards.
@@ -116,7 +214,64 @@ function __isTrackLocked(track) {
 // empty first; overwrite never shifts neighbours but would replace them.
 // Returns { ok, attempted, marksRestored, error }. attempted=true means the
 // overwrite call ran (or threw), so the timeline may have changed.
-function __overwriteRangeOnTrack(track, item, startTicks, inTicks, outTicks, mediaType) {
+// Set a project item's In/Out marks, ordering the writes so the In never
+// passes the current Out, and report whether both read back within tolerance
+// ticks (default: exact).
+function __setItemMarks(item, wantIn, wantOut, mediaType, tolerance) {
+  var tol = tolerance > __TICK_MATCH_TOL ? tolerance : __TICK_MATCH_TOL;
+  var currentOut = parseFloat(item.getOutPoint(mediaType).ticks);
+  if (parseFloat(wantIn) >= currentOut) {
+    item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
+    item.setInPoint(__ticksToSeconds(wantIn), mediaType);
+  } else {
+    item.setInPoint(__ticksToSeconds(wantIn), mediaType);
+    item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
+  }
+  return Math.abs(parseFloat(item.getInPoint(mediaType).ticks) - parseFloat(wantIn)) <= tol &&
+    Math.abs(parseFloat(item.getOutPoint(mediaType).ticks) - parseFloat(wantOut)) <= tol;
+}
+
+// Live 26.5.2: a project item's video marks are floored to the media's own
+// frame grid (a 23.976 clip in a 29.97 sequence loses up to 1.25 sequence
+// frames) and audio marks to the sample grid. Returns the most a mark can
+// move, in ticks.
+function __itemMarkToleranceTicks(item, seq, mediaType) {
+  var seqFrame = __sequenceFrameTicks(seq);
+  if (!isFinite(seqFrame) || !(seqFrame > 0)) seqFrame = 0;
+  if (mediaType !== 1) return seqFrame / 2;
+  var mediaFrame = 0;
+  try {
+    var fps = parseFloat(item.getFootageInterpretation().frameRate);
+    if (fps > 0) mediaFrame = TICKS_PER_SECOND / fps;
+  } catch (eInterp) {}
+  return Math.max(mediaFrame, seqFrame);
+}
+
+function __readItemMarks(item, mediaType) {
+  if (!item || typeof item.getInPoint !== "function" || typeof item.getOutPoint !== "function" ||
+      typeof item.setInPoint !== "function" || typeof item.setOutPoint !== "function") return null;
+  try {
+    return { inTicks: String(item.getInPoint(mediaType).ticks), outTicks: String(item.getOutPoint(mediaType).ticks) };
+  } catch (eMarks) { return null; }
+}
+
+// Check, before any timeline change, that the item accepts this source range
+// (a still or a too-short clip does not), then put its marks back.
+function __itemAcceptsRange(item, inTicks, outTicks, mediaType, tolerance) {
+  var original = __itemMarksForRestore(item, mediaType);
+  if (!original || typeof item.getInPoint !== "function" || typeof item.setInPoint !== "function") return { ok: false, marksRestored: true, error: "Could not reliably read or set the project item's In/Out marks" };
+  var accepted = false;
+  try { accepted = __setItemMarks(item, inTicks, outTicks, mediaType, tolerance); } catch (eSet) { accepted = false; }
+  var restored = false;
+  try { restored = __setItemMarks(item, original.inTicks, original.outTicks, mediaType); } catch (eRestore) { restored = false; }
+  return {
+    ok: accepted,
+    marksRestored: restored,
+    error: accepted ? "" : "Premiere did not accept a source range of " + __ticksToSeconds(String(parseFloat(outTicks) - parseFloat(inTicks))) + "s from " + __ticksToSeconds(String(inTicks)) + "s on project item " + item.name
+  };
+}
+
+function __overwriteRangeOnTrack(track, item, startTicks, inTicks, outTicks, mediaType, tolerance) {
   if (!track || typeof track.overwriteClip !== "function") {
     return { ok: false, attempted: false, marksRestored: true, error: "Track.overwriteClip is unavailable on this Premiere build" };
   }
@@ -124,31 +279,15 @@ function __overwriteRangeOnTrack(track, item, startTicks, inTicks, outTicks, med
       typeof item.setInPoint !== "function" || typeof item.setOutPoint !== "function") {
     return { ok: false, attempted: false, marksRestored: true, error: "Project item In/Out marks cannot be set on this Premiere build" };
   }
-  var originalIn = null;
-  var originalOut = null;
-  try {
-    originalIn = String(item.getInPoint(mediaType).ticks);
-    originalOut = String(item.getOutPoint(mediaType).ticks);
-  } catch (eMarks) {
-    return { ok: false, attempted: false, marksRestored: true, error: "Could not read the project item's In/Out marks" };
-  }
-  function setMarks(wantIn, wantOut) {
-    var currentOut = parseFloat(item.getOutPoint(mediaType).ticks);
-    if (parseFloat(wantIn) >= currentOut) {
-      item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
-      item.setInPoint(__ticksToSeconds(wantIn), mediaType);
-    } else {
-      item.setInPoint(__ticksToSeconds(wantIn), mediaType);
-      item.setOutPoint(__ticksToSeconds(wantOut), mediaType);
-    }
-    return Math.abs(parseFloat(item.getInPoint(mediaType).ticks) - parseFloat(wantIn)) <= __TICK_MATCH_TOL &&
-      Math.abs(parseFloat(item.getOutPoint(mediaType).ticks) - parseFloat(wantOut)) <= __TICK_MATCH_TOL;
+  var original = __itemMarksForRestore(item, mediaType);
+  if (!original) {
+    return { ok: false, attempted: false, marksRestored: true, error: "Could not reliably read the project item's In/Out marks; nothing was changed" };
   }
   function restore() {
-    try { return setMarks(originalIn, originalOut); } catch (eRestore) { return false; }
+    try { return __setItemMarks(item, original.inTicks, original.outTicks, mediaType); } catch (eRestore) { return false; }
   }
   var applied = false;
-  try { applied = setMarks(inTicks, outTicks); } catch (eSet) { applied = false; }
+  try { applied = __setItemMarks(item, inTicks, outTicks, mediaType, tolerance); } catch (eSet) { applied = false; }
   if (!applied) {
     return { ok: false, attempted: false, marksRestored: restore(), error: "Premiere did not apply the source In/Out range to project item " + item.name };
   }
@@ -327,14 +466,37 @@ function __propertyNameMatches(actual, wanted, component) {
   var aliased = (wanted === "Scale" && actual === "Scale Height") || (wanted === "Scale Height" && actual === "Scale");
   return aliased && __isUniformScale(component);
 }
+function __availablePropertyNames(component) {
+  var names = [];
+  var counts = {};
+  var total = 0;
+  for (var i = 0; i < component.properties.numItems; i++) {
+    var name = "";
+    try { name = String(component.properties[i].displayName || ""); } catch (eName) {}
+    if (!name.replace(/\\s/g, "")) continue;
+    total++;
+    names.push({ name: name, index: i });
+    var key = "$" + name;
+    counts[key] = (counts[key] || 0) + 1;
+  }
+  var shown = [];
+  var limit = Math.min(names.length, 25);
+  for (var n = 0; n < limit; n++) {
+    var entry = names[n];
+    shown.push(counts["$" + entry.name] > 1 ? entry.name + " (property_index " + entry.index + ")" : entry.name);
+  }
+  var summary = shown.length ? shown.join(", ") : "none with a non-empty display name";
+  if (total > limit) summary += " (first " + limit + " of " + total + ")";
+  return summary;
+}
 function __resolveProperty(component, wanted, propertyIndex) {
   var matches = [];
   if (propertyIndex !== null && propertyIndex !== undefined) {
     if (typeof propertyIndex !== "number" || !isFinite(propertyIndex) || Math.floor(propertyIndex) !== propertyIndex || propertyIndex < 0 || propertyIndex >= component.properties.numItems) {
-      return { property: null, index: null, candidates: [], error: "property_index is out of range." };
+      return { property: null, index: null, candidates: [], error: "property_index is out of range. Available properties: " + __availablePropertyNames(component) + "." };
     }
     if (!__propertyNameMatches(component.properties[propertyIndex].displayName, wanted, component)) {
-      return { property: null, index: null, candidates: [], error: "property_index " + propertyIndex + " does not match property name '" + wanted + "'." };
+      return { property: null, index: null, candidates: [], error: "property_index " + propertyIndex + " does not match property name '" + wanted + "'. Available properties: " + __availablePropertyNames(component) + "." };
     }
     return { property: component.properties[propertyIndex], index: propertyIndex, candidates: [propertyIndex], error: null };
   }
@@ -342,9 +504,9 @@ function __resolveProperty(component, wanted, propertyIndex) {
     if (__propertyNameMatches(component.properties[i].displayName, wanted, component)) matches.push(i);
   }
   if (matches.length > 1) {
-    return { property: null, index: null, candidates: matches, error: "Property name '" + wanted + "' is ambiguous at property indices [" + matches.join(", ") + "]; pass property_index." };
+    return { property: null, index: null, candidates: matches, error: "Property name '" + wanted + "' is ambiguous at property indices [" + matches.join(", ") + "]; pass property_index. Available properties: " + __availablePropertyNames(component) + "." };
   }
-  if (!matches.length) return { property: null, index: null, candidates: [], error: null };
+  if (!matches.length) return { property: null, index: null, candidates: [], error: "Property name '" + wanted + "' not found. Available properties: " + __availablePropertyNames(component) + "." };
   return { property: component.properties[matches[0]], index: matches[0], candidates: matches, error: null };
 }
 

package/dist/bridge/uxp-websocket-bridge.js

@@ -42,11 +42,13 @@ export class UxpWebSocketBridge extends EventEmitter {
     pending = new Map();
     constructor(options) {
         super();
-        if (!options.token || options.token.length < 16) {
+        // A token pasted from a clipboard often carries a trailing newline.
+        const token = options.token?.trim();
+        if (!token || token.length < 16) {
             throw new Error("PREMIERE_UXP_TOKEN must contain at least 16 characters");
         }
         this.options = {
-            token: options.token,
+            token,
             port: validPort(options.port ?? 7777),
             path: options.path ?? "/uxp",
             requestTimeoutMs: options.requestTimeoutMs ?? 30_000,

package/dist/diagnostics.js

@@ -1,4 +1,5 @@
 import { existsSync } from "node:fs";
+import { readEnvValue } from "./env-config.js";
 import path from "node:path";
 const PRIVACY_EXCLUSIONS = [
     "prompts",
@@ -61,7 +62,7 @@ export function collectLocalDoctor(options = {}) {
     const exists = options.exists ?? existsSync;
     const manifest = cepManifestPath(platform, environment);
     const connectorInstalled = manifest ? exists(manifest) : false;
-    const uxpConfigured = Boolean(environment.PREMIERE_UXP_TOKEN);
+    const uxpConfigured = Boolean(readEnvValue(environment.PREMIERE_UXP_TOKEN));
     const nodeVersion = options.nodeVersion ?? process.version;
     const now = options.now ?? (() => new Date());
     const components = [

package/dist/doctor-repairs.js

@@ -12,6 +12,11 @@ function connectorDirectory(platform, environment) {
     return undefined;
 }
 function defaultRunInstaller(platform, projectRoot) {
+    const script = path.join(projectRoot, "scripts", platform === "win32" ? "install-cep.ps1" : "install-cep.sh");
+    if ((platform === "win32" || platform === "darwin") && !existsSync(script)) {
+        throw new Error("The connector installer script is not bundled here (the Claude Desktop extension omits scripts/). "
+            + "Install the signed MCPBridgeCEP.zxp from the GitHub release, or run `npx -y premiere-pro-mcp --install-cep`.");
+    }
     if (platform === "win32") {
         execFileSync("powershell.exe", [
             "-NoProfile",

package/dist/env-config.d.ts

@@ -0,0 +1,2 @@
+export declare function readEnvValue(value: string | undefined): string | undefined;
+//# sourceMappingURL=env-config.d.ts.map

package/dist/env-config.js

@@ -0,0 +1,12 @@
+/**
+ * Claude Desktop can pass an optional `user_config` field through unsubstituted
+ * (the literal `${user_config.name}` string). Treat that, and blank values, as unset.
+ */
+const UNSUBSTITUTED_PLACEHOLDER = /^\$\{user_config\.[^}]*\}$/;
+export function readEnvValue(value) {
+    const trimmed = value?.trim();
+    if (!trimmed || UNSUBSTITUTED_PLACEHOLDER.test(trimmed))
+        return undefined;
+    return trimmed;
+}
+//# sourceMappingURL=env-config.js.map