premiere-pro-mcp 1.21.0 → 1.23.0

package/CHANGELOG.md

@@ -6,6 +6,44 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.23.0] - 2026-10-11
+
+### Added
+
+- 41 bounded core tools and five guided workflow routes from the [52-item Filmcraft implementation ledger](docs/filmcraft-improvements.md). The source catalog now declares 434 core tools, 432 under default authority and 528 with 96 capability-gated UXP additions.
+- Guarded execution and recovery with a private shared host lease, expected project/sequence targets, structured mutation receipts, cancellation/progress context, durable hashed UXP replay reservations and versioned command/receipt contracts. UXP writes require native cryptographic entropy and compatible durable replay storage; older unversioned panels remain read-only.
+- Exact tick/rate timeline models, typed compound edit previews, sync and stacked-camera planning, transcript/caption/music/scene review, provenance, checkpoints and bounded edit-property fixtures.
+- Bounded OTIO/XML inspection and loss reports, ALE/CSV adapters and audio-post turnover plans. Unsupported native round trips and opaque serializers remain explicit rather than being reported as completed exports.
+- Verified delivery, checksum-pinned review artifacts, local job inspection/cancellation, rendered scopes and actual multi-frame RGB/ROI/PCM evidence tools, plus opt-in analysis caching, performance diagnostics and licensed-host fixture/report helpers.
+
+### Fixed
+
+- Folder imports now verify Premiere project-item readback instead of treating an accepted import call as proof that all requested media was imported. Counts and partial outcomes describe the observed project state.
+- Caption imports validate supported formats before dispatch, preserve mutation readback and reject counts outside the safe integer range.
+
+- Registered tools accept optional request-scoped `expected_project_path`; generated CEP commands refuse a different, missing or unsaved active project before the tool body. UXP and After Effects refuse this CEP-only guard. Omitting the guard preserves existing behavior.
+
+- `unnest_sequence` now refuses, before removing the nested clip, any inner item that also carries the other media type. Premiere 26.5.2's `Track.overwriteClip` places that media on the matching track and overwrites the clips there. Same guard as `replace_clip`. Unnest a nest of video-only or audio-only items, or use Premiere's Unnest command.
+- Shared project-item mark restore after `replace_clip`, `unnest_sequence`, and other `Track.overwriteClip` helpers now writes the quarter-frame-biased seconds from `__itemMarksForRestore`. Writing the exact tick boundary as seconds can floor one media frame early on Premiere 26.5.2 (a soft-subclip Out of `00:00:29:22` stored as `00:00:29:21`), shrinking the source item. `duplicate_clip` and `set_item_in_out` already used those seconds.
+- `export_sequence` without `preset_path` no longer exports at proxy resolution when Media Encoder is not installed. Preset discovery only searched Premiere's `Settings/IngestPresets`, so the default became `IngestPresets/Proxy/00_1024x540 H.264.epr` and a 1080x1920 sequence was exported at 1024x540 while reporting `verified: true` (Premiere 24.0, macOS). Preset discovery now also searches Premiere's own `MediaIO/systempresets` when no Media Encoder presets exist, and the default never comes from `IngestPresets`; if no other H.264 preset is found, the tool asks for `preset_path`.
+
+### Compatibility and evidence
+
+CEP remains the production bridge; failed UXP mutations never fall back to CEP or QE. Recovery preserves unknown and partial outcomes. Native multicam switching, nonlinear/nested retime mapping, DSP music rendering, OCR and accepted-native-job cancellation remain unsupported. Local decoder tests establish artifact behavior, while licensed Premiere playback, Undo/reopen and native round-trip validation remain `not_run`.
+
+## [1.22.0] - 2026-10-08
+
+### Fixed
+
+- The Windows private-directory ACL check waits up to 30 seconds for `powershell.exe` instead of 5, in the server and in both CEP panels. On a loaded machine (including CI runners with coverage) PowerShell could take longer than 5 seconds to start, which made the check throw and blocked the bridge. A timeout still fails closed: the directory is not used unless the ACL check succeeds.
+- Effect writes, stabilization, smart-bin creation, proxy detachment, folder imports, sequence creation, marker deletion and clip selection now distinguish requested edits from host readback, report ignored writes as failures and unreadable results as `committed_unverified`. Selection counts describe applied states; stabilization does not claim a completed analysis. CEP selected-clip removal refuses ripple requests before deleting because clip absence cannot verify gap closure.
+- `set_sequence_display_format` writes Premiere's display codes (video 100-113, audio 200-201) and maps the older 0-11 / 0-1 inputs onto them. Premiere 26.5.2 stores and reads back any number, so the old values "verified" but did not select the format (2 formatted as non-drop timecode, 102 as drop-frame). `set_sequence_frame_rate` now reports the clips Premiere re-snaps to the new frame grid (`clipsMoved`, `maxShiftSeconds`, `movedClips`) with a warning that changing back does not restore them.
+- `create_subclip` now returns the new subclip's `nodeId` and reads its stored range back. On Premiere 26.5.2 a soft-boundary subclip's `getInPoint`/`getOutPoint` read the whole media, so the range is read from the subclip's project metadata (`VideoInPoint`/`VideoOutPoint` timecode and frame rate). The result reports requested and observed in/out seconds, with `outcome: "verified"` when both are within one media frame of the request and `committed_unverified` otherwise or when the metadata cannot be read.
+- `add_title` reports the start Premiere stored for the placed graphic. Premiere snaps it to the frame grid (a requested 5 s lands at 5.005 s at 29.97 fps), so `startSeconds` and the new `appliedStartSeconds` come from the placed clip, and the request is kept as `requestedStartSeconds`.
+- `update_marker` reports the stored marker start as `timeSeconds` (for example 7.5075 s rather than the requested 7.5 s) and adds `requestedSeconds`.
+- `manage_proxies` with `action: "toggle"` can set a known proxy display state. The action changes Premiere's application-wide proxy display (`app.setEnableProxies`), not the given item, and it only flipped the current state, so on Premiere 26.5.2 an agent could not ask for proxies on or off and two calls undid each other. It now accepts `enabled: true | false`, writes only when the state differs, and verifies by reading `app.getEnableProxies()` back; a host that ignores the write is reported as a failure. Omitting `enabled` still flips the state. Results report `previousEnabled`, `proxiesEnabled`, `changed` and `mode` (`set` or `flip`), and the description now says the action is application-wide.
+- Still-image mark clearing now identifies unreadable still duration explicitly; `set_clip_start_time` shares the verified implementation of `set_start_time` and is documented as its alias. Colour selection states that it uses the source project item label because CEP has no timeline clip-label getter. Baked title-cache cleanup retains the newest 50 matching files and leaves unrelated directory entries untouched.
+
 ## [1.21.0] - 2026-10-07
 
 ### Fixed
@@ -71,6 +109,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
   - **Markers.** `manage_markers_uxp` `add` now forwards and applies `color_index` and verifies every requested field. Previously the colour was dropped while the add reported verified.
   - **Frame export.** `export_frame_uxp` retries with the file extension when Premiere rejects an extension-less name ("File Format is not supported"). It also waits up to 15 s for the PNG, which 26.5.2 writes after the call returns, and it checks for the file by walking the approved workspace folder: a plugin with request-only file access cannot open arbitrary `file:` URLs, so the old check reported a written frame as missing.
   - **Media health.** `maintain_media_health_uxp` treats a single `project_item_id` as a one-item list for inspect, refresh and set_offline.
+
 - `import_media` no longer reports an error when an `.xml`, `.aaf`, `.edl` or `.prproj` file imports correctly. Interchange files create sequences and bins rather than an item with the file's path, so they now return `outcome: "committed_unverified"` with `interchange: true`, which stops retries from duplicating the sequence (#805).
 
 - `duplicate_clip` no longer places a copy one frame short. Premiere can snap the source out point a frame early, so on Premiere 26.5.2 a 677-frame clip was copied as 676 frames, and the tool still reported `verified` because it allowed two frames of drift. It now trims each placed copy, and its linked partner, back to the original end, reports `endCorrected`, and verifies start, end and source in-point to within half a frame.

package/README.md

@@ -14,7 +14,7 @@ Free, MIT licensed, local-first, and published to npm as [`premiere-pro-mcp`](ht
 
 [Website](https://premiere-pro-mcp.com/) · [Recorded demo](https://premiere-pro-mcp.com/demo/) · [Compare servers](https://premiere-pro-mcp.com/compare/) · [Setup guides](https://premiere-pro-mcp.com/blog/how-to-set-up-premiere-pro-mcp/) · [Search tools](https://premiere-pro-mcp.com/tools/) · [Troubleshooting](https://premiere-pro-mcp.com/docs/troubleshooting/) · [Release facts](https://premiere-pro-mcp.com/facts/)
 
-Development source: 393 core tools across 60 modules, 4 resources, and 24 guided workflows. A connected UXP host adds 96 capability-gated tools.
+Development source: 434 core tools across 67 modules, 4 resources, and 29 guided workflows. A connected UXP host adds 96 capability-gated tools.
 
 The [completed AE render handoff](docs/after-effects-render-handoff.md) previews and confirms importing one finished render into an existing Premiere bin, with host and file rechecks and an import receipt.
 
@@ -125,17 +125,17 @@ and repository before configuring a client. The new
 VS Code, or Codex settings that point directly to this installation. It is a
 feature included in v1.15.1 and later.
 
-The current source exposes 393 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 96 documented, capability-gated tools without replacing the production CEP bridge.
+The current source exposes 434 core tools for supported workflow steps spanning the supported ExtendScript, QE DOM, local media and interchange analysis, revisioned project-context retrieval, safe edit-planning, project-intake preview, review handoff, connection verification, and guarded After Effects MOGRT authoring, batch, library, render-queue, inspection, and Premiere-handoff workflows. A compatible, authenticated UXP panel adds 96 documented, capability-gated tools without replacing the production CEP bridge.
 
 <a id="latest-release"></a>
 
-### Latest release: 1.21.0
+### Latest release: 1.22.0
 
-The published v1.21.0 npm artifact contains **393 core tools**, 391 in its default profile,
+The published v1.22.0 npm artifact contains **393 core tools**, 391 in its default profile,
 and 487 with a compatible UXP connection. The development catalog above can include
 unreleased work. See the [versioned facts and package provenance](https://premiere-pro-mcp.com/facts/).
 
-GitHub releases use `v<SemVer>` for both title and tag, such as `v1.21.0`.
+GitHub releases use `v<SemVer>` for both title and tag, such as `v1.22.0`.
 See [release naming and version conventions](docs/release-conventions.md).
 
 ### Try a bounded workflow
@@ -154,6 +154,8 @@ if the connection is unavailable.
 
 ### Release highlights
 
+- **1.22.0 readback receipts:** effect writes, stabilization, smart bins, proxies, folder imports, sequence creation, marker deletion and clip selection report what Premiere applied as `verified`, `committed_unverified` or `failed`; `create_subclip`, `add_title` and `update_marker` report the stored values; `set_sequence_frame_rate` lists clips Premiere re-snapped.
+- **1.22.0 display codes and proxies:** `set_sequence_display_format` writes Premiere's real display codes (video 100-113, audio 200-201) and maps the older 0-11 and 0-1 inputs onto them; `manage_proxies` toggle can set a known proxy display state; the Windows ACL check waits up to 30 seconds for PowerShell.
 - **1.21.0 Claude Desktop startup fix:** the extension starts when optional settings are blank, and Desktop's discover-only probe no longer holds the UXP port, so the real server keeps its UXP tools.
 - **1.21.0 frame-grid verification:** project-item marks, sequence In/Out, work area, link/unlink, zero point, transitions, `replace_clip` and `duplicate_clip` verify against Premiere's own frame and sample grids and fail closed; UXP tools snap times to the sequence frame grid.
 - **1.20.0 verified range removal:** `ripple_remove_timeline_ranges` previews, then applies a multi-range ripple removal with a single-use confirmation token and clip-level readback (QE razor; experimental).
@@ -193,7 +195,7 @@ if the connection is unavailable.
   local Premiere processes. See the generated [supported action catalog](docs/supported-actions.md)
   for individual capability and verification contracts.
 
-See the [v1.21.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.21.0)
+See the [v1.22.0 release notes](https://github.com/leancoderkavy/premiere-pro-mcp/releases/tag/v1.22.0)
 for complete details. Live installation in Premiere Pro still requires host verification.
 
 ### Current MCP protocol support
@@ -211,6 +213,16 @@ handshake only; leave it unset (or `auto`) for modern MCP capabilities.
 
 ---
 
+### Guarding multi-project CEP sessions
+
+Every registered tool accepts optional `expected_project_path`, an absolute path to the intended saved Premiere project. Generated CEP scripts compare the active project's host-normalized file path before the tool body; a different, missing or unsaved project refuses without running that body. The guard is scoped to the request and checked for every generated command in a multi-command tool. Omitting it preserves existing behavior.
+
+```json
+{"name":"get_project_info","arguments":{"expected_project_path":"/Projects/Film.prproj"}}
+```
+
+This protects against accidental active-project switches, not deliberate project switching inside unsafe scripts. It does not select a project or prove media identity. Paths remain in request context and are not telemetry. UXP and After Effects commands refuse this CEP-only guard; UXP workflows use their `expected_snapshot` identity contracts. Local-only tools do not inspect Premiere. Filesystem aliases are not resolved as a claim of project identity.
+
 ## For editors evaluating an AI workflow
 
 Before an assistant changes an active project, use the
@@ -241,7 +253,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > ### Install the published package (verify the name)
 >
 > ```bash
-> npm i -g premiere-pro-mcp@1.21.0
+> npm i -g premiere-pro-mcp@1.22.0
 > ```
 >
 > This repository publishes only **`premiere-pro-mcp`**. A differently named package (`adobe-premiere-pro-mcp`) may also declare a `premiere-pro-mcp` executable. Before configuring a client, confirm:
@@ -249,7 +261,7 @@ their bins, media rules, and organization rules before a facility uses one.
 > | Check | Expected |
 > | --- | --- |
 > | Package name | `premiere-pro-mcp` (not `adobe-premiere-pro-mcp`) |
-> | Version | `1.21.0` |
+> | Version | `1.22.0` |
 > | Homepage / repo | https://premiere-pro-mcp.com/ · https://github.com/leancoderkavy/premiere-pro-mcp |
 >
 > ```bash
@@ -262,9 +274,9 @@ their bins, media rules, and organization rules before a facility uses one.
 
 ### Easiest supported path: Claude Desktop
 
-1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.21.0/premiere-pro-mcp-1.21.0.mcpb).
+1. Download the current [Claude Desktop bundle (`.mcpb`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.22.0/premiere-pro-mcp-1.22.0.mcpb).
 2. In Claude Desktop, open **Settings > Extensions > Advanced settings > Install Extension**, select the downloaded bundle, and restart Claude Desktop.
-3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.21.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
+3. Download the separate [signed Premiere connector (`.zxp`)](https://github.com/leancoderkavy/premiere-pro-mcp/releases/download/v1.22.0/MCPBridgeCEP.zxp). Open it with your trusted ZXP installer. If your computer has no ZXP installer, use the npm connector installer in **Advanced setup** below.
 4. Restart Premiere, open a project, then open **Window > Extensions > MCP for Adobe Premiere Pro**.
 5. In Claude, enter: `Safely check my Premiere connection with verify_premiere_connection. Make no changes.`
 
@@ -568,11 +580,11 @@ From a clone of this repository:
 ```bash
 codex plugin marketplace add .
 codex plugin add premiere-pro@premiere-pro-mcp
-npx -y premiere-pro-mcp@1.21.0 --install-cep
+npx -y premiere-pro-mcp@1.22.0 --install-cep
 ```
 
 Restart Premiere Pro and start a new Codex session after installation. The plugin
-launches `premiere-pro-mcp@1.21.0` through `npx`; the separate CEP installation is
+launches `premiere-pro-mcp@1.22.0` through `npx`; the separate CEP installation is
 required because the MCP server communicates with the running Premiere host through
 the local bridge.
 
@@ -610,7 +622,7 @@ For Claude Code, add this repository as a marketplace and install the plugin:
 Then install the Premiere bridge and start a new Claude Code session:
 
 ```bash
-npx -y premiere-pro-mcp@1.21.0 --install-cep
+npx -y premiere-pro-mcp@1.22.0 --install-cep
 ```
 
 The Claude Code package lives in
@@ -827,7 +839,7 @@ PREMIERE_UXP_TOKEN="replace-with-a-long-random-secret" premiere-pro-mcp
 
 Generate that secret yourself and enter the same value in the UXP panel (**Window → UXP Plugins**, not the CEP Connector). CEP-only setups do not use a token. The listener binds only to `127.0.0.1:7777`, authenticates the WebSocket upgrade, requires a versioned capability handshake, correlates concurrent requests, and fails pending work on timeout or disconnect. Set `PREMIERE_UXP_PORT` to use another loopback port.
 
-When enabled, MCP discovery includes 91 capability-gated UXP additions. The first expansion covers effects, deterministic timeline selection, selection batches, scene detection, proxy/ingest, relink, metadata, color conformance, read-only Premiere/After Effects environment inspection, Source Monitor audition, storage, and least-privilege workspace access. The second adds Project-panel selection, marker CRUD, single-transaction undoable beat-grid marker application, bin organization, sequence settings, imports, typed effect parameters/keyframes, track-item transforms, atomic J/L split edits, SequenceEditor timeline edits, sequence lifecycle, and AME encoding. The third wave begins with a redacted event journal, conservative AME terminal receipts, explicit host-readiness gates, safe multi-project sessions, lease-based growing-media control, namespaced workflow checkpoints, bounded media-health maintenance, caption-aware track mute state, transactional source trim/framing, guarded sequence-range updates, guarded source-media start timing, and guarded source-media frame-rate/pixel-aspect overrides documented in [the third-wave workflow matrix](docs/third-wave-uxp-workflows.md). The bounded migration surface also includes a non-ripple selected-item lift, native video-transition listing and guarded transactions, native active and explicit-GUID sequence timing inspection, opt-in installed-MOGRT directory inspection without filesystem enumeration, bounded native timeline structure inspection with opt-in source IDs, classification, and broad content category, guarded sequence display-format updates, a capped native Project-panel tree, a double-read Project-panel insertion-bin snapshot, guarded empty/default sequence creation, bounded native Project-panel schema/item-column metadata inspection, guarded direct Project-panel metadata replacements with exact state/readback guards, guarded typed Project metadata schema-field creation with non-field-level readback, guarded direct updates to three named application preferences, guarded transcript JSON replacement for one exact source clip, direct active-track-item identity readback, guarded source-only slips, guarded contiguous three-item slides, guarded append-only timeline duplicates, guarded contiguous same-track ripple deletes, guarded source-project-item color labels resolved from one timeline coordinate, guarded explicit-sequence preview-frame rectangle updates, explicit opt-in source-media provenance paths with bounded double resolution, bounded source-proxy readiness with an explicit attached-path disclosure, guarded static effect-parameter PointF x/y updates, bounded effect-parameter descriptor catalogs, bounded project/sequence Object Mask audits, native FrameRate/TickTime frame-alignment inspection with caller-owned inputs and tick readback, and native TickTime arithmetic over caller-owned canonical tick strings; it does not claim direct empty-track create/delete, global redo support, playback proof, Object Mask counts or visual validity, an atomic Project-panel metadata compare-and-set, app-preference Undo, installed-template availability or compatibility, imported transcript persistence, override-presence/clear semantics, path existence, source lineage or rights, proxy compatibility, general or keyframed effect-parameter value readback, rendered-frame correctness, linked-item sync, or licensed-host validation. A separate [hybrid benchmark gate](docs/uxp-hybrid-benchmark.md) keeps native acceleration disabled until reproducible cross-platform evidence exists. See also [the first stable workflow matrix](docs/uxp-stable-workflows.md), [the next-ten workflow matrix](docs/uxp-next-ten-workflows.md), [the guarded-slip workflow notes](docs/uxp-slip-workflows.md), [the guarded-slide workflow notes](docs/uxp-slide-workflows.md), [the guarded-duplicate workflow notes](docs/uxp-clone-workflows.md), and [the guarded-ripple-delete workflow notes](docs/uxp-ripple-delete-workflows.md). Commands are advertised only while the authenticated local UXP bridge is connected; the host capability handshake remains the authority for support in the running Premiere build. A failed UXP command is never silently retried through CEP because the first operation may have partially succeeded.
+When enabled, MCP discovery includes 96 capability-gated UXP additions. The first expansion covers effects, deterministic timeline selection, selection batches, scene detection, proxy/ingest, relink, metadata, color conformance, read-only Premiere/After Effects environment inspection, Source Monitor audition, storage, and least-privilege workspace access. The second adds Project-panel selection, marker CRUD, single-transaction undoable beat-grid marker application, bin organization, sequence settings, imports, typed effect parameters/keyframes, track-item transforms, atomic J/L split edits, SequenceEditor timeline edits, sequence lifecycle, and AME encoding. The third wave begins with a redacted event journal, conservative AME terminal receipts, explicit host-readiness gates, safe multi-project sessions, lease-based growing-media control, namespaced workflow checkpoints, bounded media-health maintenance, caption-aware track mute state, transactional source trim/framing, guarded sequence-range updates, guarded source-media start timing, and guarded source-media frame-rate/pixel-aspect overrides documented in [the third-wave workflow matrix](docs/third-wave-uxp-workflows.md). The bounded migration surface also includes a non-ripple selected-item lift, native video-transition listing and guarded transactions, native active and explicit-GUID sequence timing inspection, opt-in installed-MOGRT directory inspection without filesystem enumeration, bounded native timeline structure inspection with opt-in source IDs, classification, and broad content category, guarded sequence display-format updates, a capped native Project-panel tree, a double-read Project-panel insertion-bin snapshot, guarded empty/default sequence creation, bounded native Project-panel schema/item-column metadata inspection, guarded direct Project-panel metadata replacements with exact state/readback guards, guarded typed Project metadata schema-field creation with non-field-level readback, guarded direct updates to three named application preferences, guarded transcript JSON replacement for one exact source clip, direct active-track-item identity readback, guarded source-only slips, guarded contiguous three-item slides, guarded append-only timeline duplicates, guarded contiguous same-track ripple deletes, guarded source-project-item color labels resolved from one timeline coordinate, guarded explicit-sequence preview-frame rectangle updates, explicit opt-in source-media provenance paths with bounded double resolution, bounded source-proxy readiness with an explicit attached-path disclosure, guarded static effect-parameter PointF x/y updates, bounded effect-parameter descriptor catalogs, bounded project/sequence Object Mask audits, native FrameRate/TickTime frame-alignment inspection with caller-owned inputs and tick readback, and native TickTime arithmetic over caller-owned canonical tick strings; it does not claim direct empty-track create/delete, global redo support, playback proof, Object Mask counts or visual validity, an atomic Project-panel metadata compare-and-set, app-preference Undo, installed-template availability or compatibility, imported transcript persistence, override-presence/clear semantics, path existence, source lineage or rights, proxy compatibility, general or keyframed effect-parameter value readback, rendered-frame correctness, linked-item sync, or licensed-host validation. A separate [hybrid benchmark gate](docs/uxp-hybrid-benchmark.md) keeps native acceleration disabled until reproducible cross-platform evidence exists. See also [the first stable workflow matrix](docs/uxp-stable-workflows.md), [the next-ten workflow matrix](docs/uxp-next-ten-workflows.md), [the guarded-slip workflow notes](docs/uxp-slip-workflows.md), [the guarded-slide workflow notes](docs/uxp-slide-workflows.md), [the guarded-duplicate workflow notes](docs/uxp-clone-workflows.md), and [the guarded-ripple-delete workflow notes](docs/uxp-ripple-delete-workflows.md). Commands are advertised only while the authenticated local UXP bridge is connected; the host capability handshake remains the authority for support in the running Premiere build. A failed UXP command is never silently retried through CEP because the first operation may have partially succeeded. UXP edits require a matching command-schema/receipt version, durable panel ledger storage and native cryptographic entropy; older unversioned panels remain read-only until the matching panel is installed.
 
 The bounded UXP migration surface also exposes a read-only animated-PointF endpoint-displacement inspection through `automate_effect_parameters_uxp`. It requires one exact component and parameter target plus a strictly increasing time interval, double-reads native endpoint values and their distance, and refuses static, malformed, or changed parameter state. It does not modify Premiere or prove rendered appearance, playback, persistence, Undo, or licensed-host behavior.
 
@@ -936,7 +948,10 @@ See [usage, example and remaining execution adapters](docs/film-editorial-workfl
 
 Reviewed assistant-editing tools now provide dialogue candidate decisions, quote paper-edit CSV, batch copy previews, sync-evidence triage, and owned-footage B-roll review. These are local evidence reviews, not new host engines. See [review workflow contracts](docs/editorial-review-workflows.md).
 
-## Tools (393 core total; 391 under the default profile; 487 with a connected UXP bridge)
+See [Filmcraft improvement ledger](docs/filmcraft-improvements.md) for exact-time
+planning, recovery, job observation, temporal evidence and facility workflows.
+
+## Tools (434 core total; 432 under the default profile; 528 with a connected UXP bridge)
 
 The [complete supported-actions catalog](docs/supported-actions.md) lists every
 registered core tool, the two tools restricted behind explicit `unsafe-script`
@@ -1088,9 +1103,11 @@ adjusted. This is a CEP contract check, not validation in a licensed Premiere Pr
 | `encode_project_item` / `encode_file` | Direct encoding |
 | `start_batch_encode` | Start render queue |
 
-Premiere's documented automation surfaces do not currently expose OTIO or native
-EDL interchange, Render and Replace, cloud publishing, or Content Credentials
-export configuration. `export_sequence_edl` therefore builds the CMX 3600 list
+Documented Premiere UXP exposes format-specific OTIO import/export through
+runtime-probed `export_interchange_uxp` and `import_interchange_uxp`. CEP has no
+documented native OTIO route. Native EDL, Render and Replace, cloud publishing
+and Content Credentials export configuration remain unavailable through the
+supported automation contracts. `export_sequence_edl` therefore builds the CMX 3600 list
 locally from the clips Premiere reads back and validates it with the same parser
 used by `inspect_cmx3600_edl`; it is not a Premiere-native export.
 `get_capabilities` reports the remaining delivery gaps explicitly rather than
@@ -1425,7 +1442,7 @@ premiere-pro-mcp/
 ├── src/
 │   ├── index.ts                 # Entry point — stdio transport setup
 │   ├── http-server.ts           # Entry point — HTTP/SSE transport (Fly.io / remote)
-│   ├── server.ts                # MCP server — registers 393 tools, filtered by authority profile
+│   ├── server.ts                # MCP server — registers 434 tools, filtered by authority profile
 │   ├── bridge/
 │   │   ├── file-bridge.ts       # File-based IPC (write .jsx, poll .json)
 │   │   └── script-builder.ts    # ExtendScript generator with ES3 helpers

package/after-effects-cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.21.0" ExtensionBundleName="MCP for Adobe After Effects">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.aftereffects.bridge" ExtensionBundleVersion="1.23.0" ExtensionBundleName="MCP for Adobe After Effects">
   <ExtensionList>
-    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.21.0"/>
-    <Extension Id="com.mcp.aftereffects.bridge.headless" Version="1.21.0"/>
+    <Extension Id="com.mcp.aftereffects.bridge.panel" Version="1.23.0"/>
+    <Extension Id="com.mcp.aftereffects.bridge.headless" Version="1.23.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/after-effects-cep-plugin/bridge-directory-security.cjs

@@ -91,7 +91,7 @@
           encoding: "utf8",
           windowsHide: true,
           stdio: ["ignore", "pipe", "pipe"],
-          timeout: 5000,
+          timeout: 30000,
           maxBuffer: 64 * 1024,
           env: commandEnvironment,
         }

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.21.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.23.0" ExtensionBundleName="MCP for Adobe Premiere Pro">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.21.0"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.21.0"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.23.0"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.23.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/bridge-directory-security.cjs

@@ -91,7 +91,7 @@
           encoding: "utf8",
           windowsHide: true,
           stdio: ["ignore", "pipe", "pipe"],
-          timeout: 5000,
+          timeout: 30000,
           maxBuffer: 64 * 1024,
           env: commandEnvironment,
         }

package/cep-plugin/index.html

@@ -81,7 +81,7 @@
     <section class="update-section" aria-live="polite">
       <div class="update-copy">
         <span class="section-label">MCP updates</span>
-        <strong id="updateTitle">Version 1.21.0</strong>
+        <strong id="updateTitle">Version 1.23.0</strong>
         <span id="updateDetail">Checking the global MCP server and connector release…</span>
       </div>
       <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" aria-describedby="updateDetail" disabled>

package/cep-plugin/main.js

@@ -248,6 +248,8 @@ function writeBridgeHeartbeat() {
   try {
     fs.writeFileSync(stagedPath, JSON.stringify({
       protocolVersion: 1,
+      commandSchemaVersion: 1,
+      receiptVersion: 1,
       state: bridgeRunning ? "running" : "waiting"
     }), "utf-8");
     fs.renameSync(stagedPath, heartbeatPath);

package/cep-plugin/updater.cjs

@@ -7,7 +7,7 @@
 })(this, function () {
   "use strict";
 
-  var CURRENT_VERSION = "1.21.0";
+  var CURRENT_VERSION = "1.23.0";
   var PACKAGE_NAME = "premiere-pro-mcp";
   var LATEST_PACKAGE_API = "https://registry.npmjs.org/" + PACKAGE_NAME;
   var LATEST_RELEASE_API =

package/dist/ai/editorial-review.d.ts

@@ -95,7 +95,7 @@ export declare const brollReviewSchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare function reviewDialogue(input: unknown): {
     cards: {
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         context: {
             before: string;
             passage: string;
@@ -155,7 +155,7 @@ export declare function reviewQuotes(input: unknown): {
 export declare function reviewText(input: unknown): {
     cards: {
         changed: boolean;
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         proposed_text: string;
         id: string;
         target_id: string;
@@ -165,7 +165,7 @@ export declare function reviewText(input: unknown): {
     }[];
     approved_changes: {
         changed: boolean;
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         proposed_text: string;
         id: string;
         target_id: string;
@@ -185,7 +185,7 @@ export declare function reviewSync(input: unknown): {
         evidence_status: string;
         offset_spread_seconds: number;
         proposed_offset_seconds: number | null;
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         id: string;
         camera_source_id: string;
         recorder_source_id: string;
@@ -201,7 +201,7 @@ export declare function reviewSync(input: unknown): {
         evidence_status: string;
         offset_spread_seconds: number;
         proposed_offset_seconds: number | null;
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         id: string;
         camera_source_id: string;
         recorder_source_id: string;
@@ -222,7 +222,7 @@ export declare function reviewSync(input: unknown): {
 };
 export declare function reviewBroll(input: unknown): {
     cards: {
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         timeline_end_seconds: number;
         video_only: boolean;
         id: string;
@@ -238,7 +238,7 @@ export declare function reviewBroll(input: unknown): {
         alternative_source_ids: string[];
     }[];
     approved_placements: {
-        decision: "rejected" | "approved" | "pending";
+        decision: "pending" | "rejected" | "approved";
         timeline_end_seconds: number;
         video_only: boolean;
         id: string;

package/dist/ai/editorial-workflows.d.ts

@@ -0,0 +1,197 @@
+import { type ExpectedEdit, type TimelineSnapshot } from "./timeline-contract.js";
+export declare function planAudioSynchronization(reference: number[], candidate: number[], sampleRate: number, maxLag: number): {
+    status: string;
+    reason: string;
+    candidates: never[];
+    host_applied: boolean;
+    confidence?: undefined;
+    ambiguity_margin?: undefined;
+    offset_convention?: undefined;
+    offset_seconds?: undefined;
+    scope?: undefined;
+} | {
+    status: string;
+    confidence: number;
+    ambiguity_margin: number;
+    candidates: {
+        offset_samples: number;
+        correlation: number;
+        overlap_samples: number;
+    }[];
+    offset_convention: string;
+    offset_seconds: number | null;
+    host_applied: boolean;
+    scope: string;
+    reason?: undefined;
+};
+export declare function planAnchorSynchronization(referenceTicks: string[], candidateTicks: string[]): {
+    status: string;
+    offset_ticks: string;
+    confidence: number | null;
+    evidence: string;
+    disagreements: string[];
+    host_applied: boolean;
+};
+export declare function mapWordsToPlacements(wordInput: unknown, snapshotInput: unknown): {
+    transcript_revision: string;
+    snapshot_revision: string;
+    occurrences: {
+        occurrence_id: string;
+        placement_id: string;
+        word_index: number;
+        text: string;
+        source_start_ticks: string;
+        source_end_ticks: string;
+        sequence_start_ticks: string;
+        sequence_end_ticks: string;
+        clipped: boolean;
+    }[];
+    host_applied: boolean;
+};
+export declare function planMusicRemix(input: {
+    beats_ticks: string[];
+    source_duration_ticks: string;
+    target_duration_ticks: string;
+    protected_intro_ticks: string;
+    protected_outro_ticks: string;
+    crossfade_ticks?: string;
+    signal_classification: "music" | "silence" | "noise";
+}): {
+    segments: {
+        source_in_ticks: string;
+        source_out_ticks: string;
+    }[];
+    target_duration_ticks: string;
+    crossfade_ticks: string;
+    review_required: boolean;
+    native_remix_supported: boolean;
+    nearest_beat_error_ticks?: undefined;
+    audible_clicks_verified?: undefined;
+    algorithm?: undefined;
+} | {
+    segments: {
+        source_in_ticks: string;
+        source_out_ticks: string;
+    }[];
+    target_duration_ticks: string;
+    crossfade_ticks: string;
+    nearest_beat_error_ticks: string;
+    review_required: boolean;
+    native_remix_supported: boolean;
+    audible_clicks_verified: boolean;
+    algorithm: string;
+};
+export declare function planSceneSegmentation(input: {
+    source_id: string;
+    source_duration_ticks: string;
+    candidates: Array<{
+        ticks: string;
+        confidence: number;
+        classification: "cut" | "flash" | "pan" | "fade";
+    }>;
+    approved_indices: number[];
+    handle_ticks?: string;
+}): {
+    source_id: string;
+    segments: {
+        index: number;
+        start_ticks: string;
+        end_ticks: string;
+        handle_in_ticks: string;
+        handle_out_ticks: string;
+    }[];
+    approved_candidates: {
+        ticks: string;
+        confidence: number;
+        classification: "cut" | "flash" | "pan" | "fade";
+    }[];
+    rejected_candidates: {
+        ticks: string;
+        confidence: number;
+        classification: "cut" | "flash" | "pan" | "fade";
+    }[];
+    preserve_audio: boolean;
+    apply_routes: string[];
+    host_applied: boolean;
+};
+export declare function verifyCaptionRenderEvidence(input: {
+    artifact_sha256: string;
+    frame_width: number;
+    frame_height: number;
+    safe_margin: number;
+    cues: Array<{
+        text: string;
+        bounds: {
+            x: number;
+            y: number;
+            width: number;
+            height: number;
+        };
+        missing_glyphs: string[];
+        line_breaks_verified: boolean;
+        bidi_verified: boolean;
+        sampled_ticks: string;
+        evidence_method: "manual_render_review" | "pixel_measurement";
+    }>;
+}): {
+    artifact_sha256: string;
+    passed: boolean;
+    issues: {
+        index: number;
+        reason: string;
+    }[];
+    sampled_cues: number;
+    evidence_scope: string;
+};
+export declare function bindProxyProvenance(input: {
+    source_id: string;
+    source_sha256: string | null;
+    proxy_sha256: string | null;
+    original_offline: boolean;
+    proxy_attached: boolean;
+    analysis_provider: "original" | "proxy";
+    snapshot_revision: string;
+    export_provider_verified: boolean;
+}): {
+    analysis_identity: string | null;
+    revision: string;
+    delivery_ready: boolean;
+    limitations: string[];
+    source_id: string;
+    source_sha256: string | null;
+    proxy_sha256: string | null;
+    original_offline: boolean;
+    proxy_attached: boolean;
+    analysis_provider: "original" | "proxy";
+    snapshot_revision: string;
+    export_provider_verified: boolean;
+};
+export declare function planStackedCameraEdit(snapshotInput: unknown, cuts: Array<{
+    start_ticks: string;
+    end_ticks: string;
+    camera_track_id: string;
+}>, cameraTracks: string[], masterAudioTracks: string[]): {
+    snapshot_revision: string;
+    operations: ExpectedEdit[];
+    expected: {
+        snapshot: TimelineSnapshot;
+        changes: Array<{
+            id: string;
+            before: import("./timeline-contract.js").TimelineClip | null;
+            after: import("./timeline-contract.js").TimelineClip | null;
+        }>;
+        participants: string[];
+        host_verified: false;
+    };
+    master_audio: import("./timeline-contract.js").TimelineClip[];
+    duplicate_required: boolean;
+    native_multicam: boolean;
+    limitation: string;
+};
+/** Versioned receipt state is a review aid; loading never executes pending work. */
+export declare function validateWorkflowCheckpoint(input: unknown): {
+    operations: Record<string, unknown>[];
+    automatic_replay: false;
+    recovery_required: boolean;
+};
+//# sourceMappingURL=editorial-workflows.d.ts.map