premiere-pro-mcp 1.3.1 → 1.5.0

package/CHANGELOG.md

@@ -6,6 +6,47 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.5.0] - 2026-07-30
+
+### Added
+
+- Added `detect_silence` for finding dead air in local source media with FFmpeg, including
+  Docker support and clear local-install guidance.
+- Added anonymous, opt-out PostHog usage telemetry with prompt flushing for low-volume servers.
+- Added an immersive editorial landing-page experience, product demo video, changelog page, and
+  a 30-day launch plan.
+
+### Changed
+
+- Expanded the MCP surface to 279 tools and limited advertised tools to those allowed by the
+  active capability profile.
+- Documented capability-filtered discovery, remote media-path constraints, and the difference
+  between the 279 registered tools and the 277 tools available to the default profile.
+
+### Fixed
+
+- Structural timeline tools now verify razor, ripple-delete, transition, and track-targeting
+  mutations instead of reporting success when Premiere applied only part or none of an edit.
+- Server metadata now reports the package version rather than a stale hard-coded value.
+- Resolved CodeQL findings in HTTP authentication and filesystem-path handling.
+
+## [1.4.0] - 2026-07-26
+
+### Added
+
+- Added in-panel connector update discovery and trusted downloads from GitHub Releases.
+- Added authenticated MCP-to-UXP WebSocket transport, transcript and caption inspection, event-driven
+  state reporting, operation semantics, and supported video-transition workflows.
+- Added recovery diagnostics, export verification, AV inspection, capability reporting, and
+  collaboration/AI feature eligibility discovery.
+- Added installable Codex, Claude Code, and Claude Desktop distributions.
+
+### Changed
+
+- Expanded the MCP surface to 278 tools and aligned documentation, plugin metadata, and distribution
+  manifests with the new release.
+- Added automated signed CEP connector assets and Claude Desktop bundles to GitHub releases.
+
 ## [1.3.1] - 2026-07-25
 
 ### Fixed

package/README.md

@@ -2,9 +2,11 @@
 
 # Premiere Pro MCP Server
 
+[![MCP Toplist](https://mcptoplist.com/badge/glama%2Fleancoderkavy%2Fpremiere-pro-mcp.svg)](https://mcptoplist.com/server/glama%2Fleancoderkavy%2Fpremiere-pro-mcp)
+
 **Give AI full control over Adobe Premiere Pro.**
 
-269 tools across 29 modules, 3 resources, and 4 guided workflows.
+279 tools across 31 modules, 3 resources, and 4 guided workflows.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/Node.js-20.19%2B-green.svg)](https://nodejs.org)
@@ -25,7 +27,7 @@ An [MCP (Model Context Protocol)](https://modelcontextprotocol.io) server that l
 "Add the B-roll clips to V2, apply a cross dissolve between each, color correct them to match the A-roll, and export a 1080p ProRes."
 ```
 
-The AI handles the entire workflow through 269 tools spanning the supported ExtendScript, QE DOM, and safe edit-planning surfaces.
+The AI handles the entire workflow through 279 tools spanning the supported ExtendScript, QE DOM, local media analysis, and safe edit-planning surfaces.
 
 ### What's new in 1.3.1
 
@@ -43,12 +45,20 @@ The AI handles the entire workflow through 269 tools spanning the supported Exte
 - **Safe edit plans:** preview compound insert/remove operations, bind approval to a SHA-256 plan token, then apply the validated plan in one bridge command.
 - **Capability profiles:** unsafe scripting is disabled by default and requires explicit `unsafe-script` authority.
 - **Modern MCP responses:** tools expose safety annotations and structured results; four workflow prompts and a machine-readable workflow resource guide common edits.
-- **UXP bridge preview:** a packaged Premiere 25.6+ panel adds capability discovery, state events, reconnecting WebSocket transport, and supported frame export with file verification. Live host verification is still required.
+- **UXP bridge preview:** a packaged Premiere 25.6+ panel adds capability discovery, event-driven state notifications with a deduplicated polling fallback, correlated operation lifecycle events, reconnecting WebSocket transport, and supported frame export with file verification. Cancellation is cooperative before non-cancellable host calls; no atomic rollback is claimed. Live host verification is still required.
 
 ---
 
 ## Quick Start
 
+### Before you begin
+
+- Node.js **20.19 or newer** on Windows or macOS.
+- Adobe Premiere Pro **2020–2026**. Keep Premiere, the CEP bridge, and your MCP client on the same computer for the recommended local setup.
+- Optional: [ffmpeg](https://ffmpeg.org/download.html) on `PATH` for `detect_silence`
+  (`brew install ffmpeg` on macOS or `winget install Gyan.FFmpeg` on Windows).
+  The production Docker image already includes it.
+
 ### 1. Install
 
 **Option A — npm (recommended):**
@@ -138,6 +148,20 @@ done
 
 ### 3. Configure your MCP client
 
+If you installed from npm, configure the client to run the global command:
+
+```json
+{
+  "mcpServers": {
+    "premiere-pro": {
+      "command": "premiere-pro-mcp"
+    }
+  }
+}
+```
+
+If you cloned the repository instead, use the source-build configuration shown below for your client.
+
 <details>
 <summary><strong>Claude Desktop</strong></summary>
 
@@ -213,10 +237,63 @@ Add to your VS Code MCP server configuration:
 1. Open (or restart) Premiere Pro
 2. The bridge starts automatically using the default temp directory (or its previously saved setting)
 3. Optionally go to **Window > Extensions > MCP Bridge** to confirm the green "Running" status or change the **Temp Directory** to match your MCP client config
-4. Ask your AI assistant: *"What's my current Premiere Pro project?"*
+4. Ask your AI assistant to run `get_capabilities`, then `ping`, with Premiere open.
+5. For a safe first request, ask: *"What is my current Premiere Pro project and active sequence? Do not make changes."*
 
 The default bridge directory is derived from the operating system on both sides, so most local setups should not set `PREMIERE_TEMP_DIR`. If you override it, use the same absolute path in the MCP server and CEP panel; Windows and macOS paths are not interchangeable.
 
+### Codex plugin
+
+This repository includes an installable Codex plugin that bundles the local MCP
+server with a safety-oriented Premiere editing skill.
+
+From a clone of this repository:
+
+```bash
+codex plugin marketplace add .
+codex plugin add premiere-pro@premiere-pro-mcp
+npx -y premiere-pro-mcp@1.3.1 --install-cep
+```
+
+Restart Premiere Pro and start a new Codex session after installation. The plugin
+launches `premiere-pro-mcp@1.3.1` through `npx`; the separate CEP installation is
+required because the MCP server communicates with the running Premiere host through
+the local bridge.
+
+The plugin source lives in [`plugins/premiere-pro`](plugins/premiere-pro), and the
+repository marketplace manifest lives in
+[`.agents/plugins/marketplace.json`](.agents/plugins/marketplace.json).
+
+### Claude
+
+For Claude Code, add this repository as a marketplace and install the plugin:
+
+```text
+/plugin marketplace add leancoderkavy/premiere-pro-mcp
+/plugin install premiere-pro@premiere-pro-mcp
+```
+
+Then install the Premiere bridge and start a new Claude Code session:
+
+```bash
+npx -y premiere-pro-mcp@1.3.1 --install-cep
+```
+
+The Claude Code package lives in
+[`claude-plugins/premiere-pro`](claude-plugins/premiere-pro), with its marketplace
+at [`.claude-plugin/marketplace.json`](.claude-plugin/marketplace.json).
+
+Claude Desktop uses the self-contained MCP Bundle format, formerly called Desktop
+Extensions. Build both the current `.mcpb` artifact and a legacy `.dxt` copy with:
+
+```bash
+npm run build:claude
+```
+
+Install the resulting file from `artifacts/` through **Settings > Extensions >
+Advanced settings > Install Extension**. The Premiere CEP bridge must still be
+installed separately.
+
 ### Windows and macOS capability coverage
 
 | Surface | Windows | macOS | Verification boundary |
@@ -224,9 +301,72 @@ The default bridge directory is derived from the operating system on both sides,
 | CEP production bridge | Premiere Pro 2020–2026 | Premiere Pro 2020–2026 | Run `get_capabilities`, then `ping` with Premiere open |
 | UXP preview bridge | Premiere Pro 25.6+ | Premiere Pro 25.6+ | Live loopback WebSocket and host API verification required |
 | npm CEP installer | Copies plugin and verifies `REG_SZ` debug keys | Copies plugin and verifies the installed manifest/debug settings | Restart Premiere after installation |
-| CI build and unit tests | Node 18 and 22 | Node 18 and 22 | GitHub-hosted OS runners; no Adobe host is available in CI |
+| CI build and unit tests | Node 20, 22, and 24 | Node 20, 22, and 24 | GitHub-hosted OS runners; no Adobe host is available in CI |
+
+`get_capabilities` reports the current operating system, temp directory, CEP/UXP coverage, enabled authority profile, and any live-host verification still required. It also includes the full `tools` catalog generated from the tools registered by the server, including tools disabled by the active profile. Every entry identifies:
+
+- the execution backend (`local`, CEP/ExtendScript, QE, or orchestrator);
+- static support status (`supported`, `limited`, `experimental`, or `unsupported`);
+- the minimum Premiere version known to the server;
+- the required authority and whether the current profile enables it;
+- the verification boundary and whether a live Premiere host is required; and
+- relevant operational notes.
+
+QE-backed tools are reported as `experimental` because QE is undocumented and can vary between Premiere builds. Authority availability is reported separately from implementation support, so disabling `edit`, for example, does not incorrectly label editing tools as unsupported. Static metadata never claims that a Premiere operation succeeded; use `ping` and inspect each tool result for runtime evidence.
+
+MCP `tools/list` is filtered to the active authority profile. The default
+`inspect,edit,export,filesystem` profile advertises 277 of the 279 registered
+tools and omits `execute_extendscript` and `evaluate_expression`, which require
+explicit `unsafe-script` authority. `ping` and `get_capabilities` remain visible
+under every profile so a restricted or misconfigured server can still explain
+its state. The call-time capability guard remains authoritative even if listing
+metadata is wrong.
+
+The MCP handshake reads `serverInfo.version` from the installed `package.json`,
+so clients receive the package version that is actually running rather than a
+separately maintained literal.
+
+Tools with mixed execution boundaries can provide explicit operational metadata at registration. This is used for local file verification, static feature-support reports, and hybrid local-plus-Premiere validation so the capability catalog does not infer a host dependency from naming alone.
+
+### Collaboration and AI feature boundaries
+
+`get_advanced_feature_support` returns a machine-readable matrix for Productions,
+Team Projects, Frame.io, Media Intelligence, Generative Extend, Object Mask,
+caption translation, Speech-to-Text, Enhance Speech, and Remix. Pass an optional
+Premiere version, intended backend, confirmed entitlements, and network state to
+evaluate prerequisites without conflating them with API availability. It
+distinguishes documented APIs from entitlements, network prerequisites, separate
+service APIs, and user-assisted operations without using menu automation or
+private APIs.
+
+The report tool itself is local: it does not contact Premiere and is callable
+through the current MCP server. Each feature entry separately reports whether
+its operations are callable through the production CEP transport. Productions
+reports only static backend/version eligibility until a UXP host performs live
+capability negotiation.
+
+- Productions exposes documented read-only state through UXP, but the production
+  MCP transport is still CEP.
+- Frame.io needs a separately authenticated Frame.io API integration; an account
+  entitlement alone does not make it callable through Premiere's DOM.
+- Transcript JSON import/export is documented in UXP. Starting Speech-to-Text is not.
+- The remaining AI operations are user-assisted or unsupported by documented
+  public APIs. The tool explains what can be inspected after a user completes
+  the operation and where artifact provenance cannot be established safely.
+- The server never uses menu automation, private APIs, clip-name heuristics, or
+  duration changes as proof that an AI operation occurred.
+
+### Authenticated UXP connection
+
+The MCP server can accept a local UXP panel connection and invoke the UXP commands that are currently implemented:
+
+```bash
+PREMIERE_UXP_TOKEN="replace-with-a-long-random-secret" premiere-pro-mcp
+```
+
+Enter the same token in the UXP panel. The listener binds only to `127.0.0.1:7777`, authenticates the WebSocket upgrade, requires a versioned capability handshake, correlates concurrent requests, and fails pending work on timeout or disconnect. Set `PREMIERE_UXP_PORT` to use another loopback port.
 
-`get_capabilities` reports the current operating system, temp directory, CEP/UXP coverage, enabled authority profile, and any live-host verification still required. It does not claim a Premiere operation succeeded; use `ping` and inspect each tool result for runtime evidence.
+When enabled, MCP discovery includes `get_uxp_capabilities`, `get_uxp_state`, and `export_frame_uxp`. A failed UXP command is never silently retried through CEP because the first operation may have partially succeeded.
 
 ---
 
@@ -270,7 +410,7 @@ The file-based IPC bridge is simple, reliable, and works across macOS and Window
 
 ---
 
-## Tools (269)
+## Tools (279 total; 277 under the default profile)
 
 ### Discovery & Inspection (10 + 10)
 
@@ -286,6 +426,7 @@ The file-based IPC bridge is simple, reliable, and works across macOS and Window
 | `search_project_items` | Filter by name, extension, offline status, color label |
 | `get_premiere_state` | Full snapshot: project, sequence, playhead, selection |
 | `inspect_dom_object` | Explore any Premiere Pro DOM object interactively |
+| `get_advanced_feature_support` | Collaboration/AI API support, prerequisites, entitlements, and user-assisted boundaries |
 
 ### Project Management (26)
 
@@ -341,16 +482,23 @@ The file-based IPC bridge is simple, reliable, and works across macOS and Window
 | `get_value_at_time` | Query interpolated value at any time |
 | `set_color_value` | Set color properties on effects |
 
-### Export & Encoding (14)
+### Export & Encoding (16)
 
 | Tool | Description |
 | :--- | :---------- |
 | `export_sequence` | Export via Adobe Media Encoder |
+| `validate_export_preset` | Validate an `.epr` file and resolve its output extension in Premiere |
+| `verify_delivery_file` | Verify output size and calculate SHA-256/SHA-512 checksums |
 | `capture_frame` | Export frame as PNG, return as base64 image |
 | `export_as_fcp_xml` / `export_aaf` / `export_omf` | Interchange formats |
 | `encode_project_item` / `encode_file` | Direct encoding |
 | `start_batch_encode` | Start render queue |
 
+Premiere's documented automation surfaces do not currently expose OTIO or EDL
+interchange, Render and Replace, cloud publishing, or Content Credentials export
+configuration. `get_capabilities` reports these delivery gaps explicitly rather
+than presenting UI-only operations as available tools.
+
 ### Source Monitor & Playback (7 + 4)
 
 | Tool | Description |
@@ -396,13 +544,12 @@ The file-based IPC bridge is simple, reliable, and works across macOS and Window
 | `get_workspaces` / `set_workspace` | Switch workspace layouts |
 | `create_caption_track` | Create caption/subtitle tracks |
 
-### Scripting (6)
+### Scripting (2)
 
 | Tool | Description |
 | :--- | :----------- |
-| `execute_extendscript` | Run arbitrary ExtendScript (ES3) |
-| `evaluate_expression` | Quick one-line eval |
-| `send_raw_script` | Bypass security validation (advanced) |
+| `execute_extendscript` | Run arbitrary ExtendScript (ES3); requires explicit `unsafe-script` authority |
+| `evaluate_expression` | Evaluate a one-line expression; requires explicit `unsafe-script` authority |
 
 ### ...and 100+ more
 
@@ -470,6 +617,7 @@ Then connect with:
 ```
 
 > **Note:** The file bridge still requires the CEP plugin to share the same `PREMIERE_TEMP_DIR`. For cloud deployments this means running a sync agent or using `fly proxy` / WireGuard to reach your local machine.
+> `detect_silence` can analyze only media paths available inside the server filesystem; a desktop-only path is not automatically available to a remote Fly machine.
 
 ---
 
@@ -485,6 +633,16 @@ Then connect with:
 | `PORT` | HTTP port (HTTP/SSE transport only) | `3000` |
 | `MCP_AUTH_TOKEN` | Bearer token required by the HTTP transport | unset |
 | `ALLOW_UNAUTHENTICATED` | Set to `1` to run HTTP without auth (unsafe; throwaway instances only) | unset |
+| `POSTHOG_API_KEY` | PostHog project token; enables privacy-safe MCP usage telemetry | unset |
+| `POSTHOG_HOST` | PostHog ingestion host | `https://us.i.posthog.com` |
+| `POSTHOG_ENVIRONMENT` | Environment property attached to telemetry events | `production` |
+| `POSTHOG_DISTINCT_ID` | Optional stable anonymous server identifier | Fly machine ID or random boot ID |
+
+When PostHog is enabled, the server records `mcp_connection_attempt`,
+`mcp_request`, and `mcp_tool_call`. Events contain operational fields such as
+method, tool name, outcome, status code, and duration. Authentication tokens,
+IP addresses, MCP arguments, project paths, media names, and tool results are
+never sent. Person profiles are disabled for these events.
 
 ---
 
@@ -495,19 +653,21 @@ premiere-pro-mcp/
 ├── src/
 │   ├── index.ts                 # Entry point — stdio transport setup
 │   ├── http-server.ts           # Entry point — HTTP/SSE transport (Fly.io / remote)
-│   ├── server.ts                # MCP server — registers 269 tools + 3 resources + 4 prompts
+│   ├── server.ts                # MCP server — registers 279 tools, filtered by authority profile
 │   ├── bridge/
 │   │   ├── file-bridge.ts       # File-based IPC (write .jsx, poll .json)
 │   │   └── script-builder.ts    # ExtendScript generator with ES3 helpers
-│   ├── tools/                   # 29 tool modules
+│   ├── tools/                   # 31 tool modules
 │   │   ├── discovery.ts         # Project discovery and queries
+│   │   ├── recovery.ts          # Read-only autosave discovery and private bridge telemetry
 │   │   ├── project.ts           # Project management and import
 │   │   ├── media.ts             # Media and proxy management
 │   │   ├── sequence.ts          # Sequence creation and settings
 │   │   ├── timeline.ts          # Timeline clip operations
 │   │   ├── effects.ts           # Effect application and color correction
 │   │   ├── transitions.ts       # Transition management (QE DOM)
-│   │   ├── audio.ts             # Audio levels and keyframes
+│   │   ├── audio.ts             # Audio levels, keyframes, and ffmpeg silence analysis
+│   │   ├── av-settings.ts       # Documented AV inspection, mapping, and capability boundaries
 │   │   ├── text.ts              # Text overlays and MOGRTs
 │   │   ├── markers.ts           # Sequence and clip markers
 │   │   ├── tracks.ts            # Track add/delete/lock/visibility
@@ -562,8 +722,9 @@ All generated scripts use **ES3 syntax** (`var`, manual `for` loops, no arrow fu
 ### Security
 
 Understand the trust model before deploying this: **any client that can reach the MCP
-server can control Premiere Pro.** `execute_extendscript` and `send_raw_script` are
-arbitrary-code-execution tools by design and are disabled by default. Enable them only by setting
+server can control Premiere Pro.** `execute_extendscript` and `evaluate_expression` are
+arbitrary-code-execution tools by design and are omitted from discovery and denied at call time
+by default. Enable them only by setting
 `PREMIERE_MCP_CAPABILITIES=inspect,edit,export,filesystem,unsafe-script`.
 
 - **Run it locally over stdio** unless you have a specific reason not to. That's the safe default.

package/cep-plugin/CSXS/manifest.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.3.1" ExtensionBundleName="MCP Bridge">
+<ExtensionManifest Version="7.0" ExtensionBundleId="com.mcp.premiere.bridge" ExtensionBundleVersion="1.5.0" ExtensionBundleName="MCP Bridge">
   <ExtensionList>
-    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.3.1"/>
-    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.3.1"/>
+    <Extension Id="com.mcp.premiere.bridge.panel" Version="1.5.0"/>
+    <Extension Id="com.mcp.premiere.bridge.headless" Version="1.5.0"/>
   </ExtensionList>
   <ExecutionEnvironment>
     <HostList>

package/cep-plugin/index.html

@@ -17,7 +17,7 @@
       <div class="auto-start"><span></span>Auto-start</div>
     </header>
 
-    <section class="status-panel" aria-live="polite">
+    <section class="status-panel" role="status" aria-live="polite" aria-atomic="true">
       <div class="status-indicator" aria-hidden="true">
         <div class="status-ring"><div class="status-dot connected" id="statusDot"></div></div>
       </div>
@@ -46,22 +46,33 @@
       <label class="sr-only" for="tempDir">Temporary bridge directory</label>
       <div class="path-field">
         <svg viewBox="0 0 20 20" aria-hidden="true"><path d="M2.5 5.5h5l1.5 2h8.5v8h-15v-10Z"/></svg>
-        <input type="text" id="tempDir" value="" spellcheck="false">
+        <input type="text" id="tempDir" value="" spellcheck="false" autocomplete="off" aria-describedby="tempDirHelp">
       </div>
-      <p class="field-help">Commands and responses are exchanged through this local folder.</p>
+      <p class="field-help" id="tempDirHelp">Commands and responses are exchanged through this local folder.</p>
     </section>
 
     <div class="action-row">
-      <button id="btnStart" class="button button-primary" onclick="startBridge()" type="button">
+      <button id="btnStart" class="button button-primary" onclick="startBridge()" type="button" aria-controls="log">
         <svg viewBox="0 0 20 20" aria-hidden="true"><path class="fill-icon" d="m7 5 8 5-8 5V5Z"/></svg>
         Start Bridge
       </button>
-      <button id="btnStop" class="button button-stop" onclick="stopBridge()" type="button" disabled>
+      <button id="btnStop" class="button button-stop" onclick="stopBridge()" type="button" aria-controls="log" disabled>
         <svg viewBox="0 0 20 20" aria-hidden="true"><rect class="fill-icon" x="6" y="6" width="8" height="8" rx="1"/></svg>
         Stop
       </button>
     </div>
 
+    <section class="update-section" aria-live="polite">
+      <div class="update-copy">
+        <span class="section-label">Connector updates</span>
+        <strong id="updateTitle">Version 1.5.0</strong>
+        <span id="updateDetail">Checking for updates…</span>
+      </div>
+      <button id="btnUpdate" class="button button-update" onclick="handleUpdateClick()" type="button" disabled>
+        Check again
+      </button>
+    </section>
+
     <section class="activity-section">
       <div class="section-heading activity-heading">
         <div>
@@ -70,11 +81,12 @@
         </div>
         <span class="activity-state"><span></span>Listening</span>
       </div>
-      <div id="log" role="log" aria-live="polite"></div>
+      <div id="log" role="log" aria-live="polite" aria-relevant="additions" tabindex="0" aria-label="Bridge activity log"></div>
     </section>
   </main>
 
   <script src="CSInterface.js"></script>
+  <script src="updater.cjs"></script>
   <script src="main.js"></script>
 </body>
 </html>

package/cep-plugin/main.js

@@ -26,7 +26,9 @@ function log(msg, cls) {
 function setStatus(state, text) {
   var dot = document.getElementById("statusDot");
   dot.className = "status-dot " + state;
-  document.getElementById("statusText").textContent = text;
+  var statusText = document.getElementById("statusText");
+  statusText.textContent = text;
+  statusText.setAttribute("data-state", state || "stopped");
   var detail = document.getElementById("statusDetail");
   if (detail) {
     if (state === "connected") detail.textContent = "Premiere Pro link is active";
@@ -55,7 +57,9 @@ function nodeRequire(moduleName) {
 var fs = nodeRequire("fs");
 var path = nodeRequire("path");
 var os = nodeRequire("os");
+var https = nodeRequire("https");
 tempDir = path.join(os.tmpdir(), "premiere-mcp-bridge");
+var latestUpdate = null;
 
 function ensureDir(dir) {
   try {
@@ -204,6 +208,7 @@ function startBridge() {
   tempDir = document.getElementById("tempDir").value.trim();
   if (!tempDir) {
     log("Please set a temp directory", "err");
+    document.getElementById("tempDir").focus();
     return;
   }
 
@@ -250,6 +255,124 @@ function saveTempDir() {
   } catch (e) {}
 }
 
+// ---- Connector Updates ----
+function setUpdateUI(title, detail, buttonText, disabled) {
+  document.getElementById("updateTitle").textContent = title;
+  document.getElementById("updateDetail").textContent = detail;
+  var button = document.getElementById("btnUpdate");
+  button.textContent = buttonText;
+  button.disabled = !!disabled;
+}
+
+function checkForUpdates() {
+  latestUpdate = null;
+  setUpdateUI(
+    "Version " + MCPBridgeUpdater.CURRENT_VERSION,
+    "Checking for updates…",
+    "Checking…",
+    true
+  );
+
+  var request = https.get(
+    MCPBridgeUpdater.LATEST_RELEASE_API,
+    {
+      headers: {
+        Accept: "application/vnd.github+json",
+        "User-Agent": "premiere-pro-mcp-connector/" + MCPBridgeUpdater.CURRENT_VERSION,
+      },
+    },
+    function (response) {
+      var body = "";
+      response.setEncoding("utf8");
+      response.on("data", function (chunk) {
+        if (body.length < 1024 * 1024) body += chunk;
+      });
+      response.on("end", function () {
+        if (response.statusCode !== 200) {
+          showUpdateCheckError("Could not check GitHub (HTTP " + response.statusCode + ").");
+          return;
+        }
+        try {
+          var release = JSON.parse(body);
+          var latestVersion = MCPBridgeUpdater.normalizeVersion(
+            release.tag_name || release.name
+          );
+          if (!latestVersion) throw new Error("Release has no version");
+
+          if (
+            MCPBridgeUpdater.compareVersions(
+              latestVersion,
+              MCPBridgeUpdater.CURRENT_VERSION
+            ) > 0
+          ) {
+            latestUpdate = {
+              version: latestVersion,
+              url: MCPBridgeUpdater.chooseDownloadUrl(release),
+            };
+            setUpdateUI(
+              "Version " + latestVersion + " is available",
+              "Download it, then close Premiere and run the installer.",
+              "Download update",
+              false
+            );
+          } else {
+            setUpdateUI(
+              "Version " + MCPBridgeUpdater.CURRENT_VERSION,
+              "You have the latest connector.",
+              "Check again",
+              false
+            );
+          }
+        } catch (e) {
+          showUpdateCheckError("GitHub returned an unreadable release.");
+        }
+      });
+    }
+  );
+  request.setTimeout(10000, function () {
+    request.destroy(new Error("Update check timed out"));
+  });
+  request.on("error", function () {
+    showUpdateCheckError("Unable to check while offline.");
+  });
+}
+
+function showUpdateCheckError(message) {
+  setUpdateUI(
+    "Version " + MCPBridgeUpdater.CURRENT_VERSION,
+    message,
+    "Check again",
+    false
+  );
+}
+
+function handleUpdateClick() {
+  if (!latestUpdate) {
+    checkForUpdates();
+    return;
+  }
+  if (!MCPBridgeUpdater.isTrustedDownloadUrl(latestUpdate.url)) {
+    showUpdateCheckError("The update link was not trusted.");
+    return;
+  }
+  try {
+    var childProcess = nodeRequire("child_process");
+    var command =
+      os.platform() === "win32"
+        ? ["cmd.exe", ["/d", "/s", "/c", "start", "", latestUpdate.url]]
+        : ["open", [latestUpdate.url]];
+    var child = childProcess.spawn(command[0], command[1], {
+      detached: true,
+      stdio: "ignore",
+    });
+    child.unref();
+    document.getElementById("updateDetail").textContent =
+      "Download opened. Close Premiere before installing.";
+  } catch (e) {
+    showUpdateCheckError("Could not open the download. Try again.");
+  }
+}
+
 // ---- Init ----
 (function init() {
   // Set the default temp dir in the input field
@@ -273,4 +396,5 @@ function saveTempDir() {
   ensureDir(tempDir);
   log("Auto-starting bridge...");
   setTimeout(startBridge, 500);
+  setTimeout(checkForUpdates, 1200);
 })();

package/cep-plugin/styles.css

@@ -117,6 +117,10 @@ button { -webkit-appearance: none; }
 .section-label { display: block; margin-bottom: 4px; color: var(--text-muted); font-size: 9px; font-weight: 650; letter-spacing: .09em; text-transform: uppercase; }
 .status-copy { min-width: 0; }
 .status-copy strong { display: block; overflow: hidden; color: var(--text); font-size: 14px; font-weight: 650; line-height: 1.3; text-overflow: ellipsis; white-space: nowrap; }
+.status-copy strong::before { content: "■ "; color: var(--text-muted); }
+.status-copy strong[data-state="connected"]::before { content: "✓ "; color: var(--green); }
+.status-copy strong[data-state="waiting"]::before { content: "… "; color: var(--amber); }
+.status-copy strong[data-state="error"]::before { content: "! "; color: var(--red); }
 .status-copy #statusDetail { display: block; overflow: hidden; margin-top: 3px; color: var(--text-secondary); font-size: 10px; text-overflow: ellipsis; white-space: nowrap; }
 
 .command-stat { padding-left: 14px; text-align: right; }
@@ -183,6 +187,32 @@ button { -webkit-appearance: none; }
 .button-stop:hover { border-color: var(--red); background: rgba(255, 101, 101, .08); }
 .button:disabled { border-color: var(--border); background: var(--surface); color: #5f5e65; cursor: default; }
 
+.update-section {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  margin-bottom: 14px;
+  padding: 11px 12px;
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  background: var(--surface);
+}
+.update-copy { min-width: 0; flex: 1; }
+.update-copy strong, .update-copy > span:last-child { display: block; }
+.update-copy strong { font-size: 11px; font-weight: 600; }
+.update-copy > span:last-child { margin-top: 3px; color: var(--text-muted); font-size: 9px; line-height: 1.4; }
+.button-update {
+  width: auto;
+  min-width: 92px;
+  height: 30px;
+  padding: 0 10px;
+  border-color: var(--border-strong);
+  background: var(--surface-raised);
+  color: var(--violet-hover);
+  white-space: nowrap;
+}
+.button-update:hover { border-color: var(--violet); background: var(--violet-soft); }
+
 .activity-section { display: flex; flex: 1; min-height: 120px; flex-direction: column; }
 .activity-heading { align-items: center; margin: 2px 0 8px; }
 .activity-state { display: flex; align-items: center; gap: 6px; color: var(--text-muted); font-size: 9px; }
@@ -211,7 +241,7 @@ button { -webkit-appearance: none; }
 
 .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; border: 0; }
 
-button:focus-visible { outline: 1px solid var(--violet); outline-offset: 2px; }
+button:focus-visible, input:focus-visible, #log:focus-visible { outline: 2px solid var(--violet-hover); outline-offset: 2px; }
 
 @media (max-width: 330px) {
   .panel-shell { padding-right: 10px; padding-left: 10px; }
@@ -225,3 +255,9 @@ button:focus-visible { outline: 1px solid var(--violet); outline-offset: 2px; }
 @media (prefers-reduced-motion: reduce) {
   *, *::before, *::after { animation-duration: .01ms !important; animation-iteration-count: 1 !important; }
 }
+
+@media (forced-colors: active) {
+  .status-dot, .auto-start > span, .activity-state > span { forced-color-adjust: none; border: 1px solid CanvasText; }
+  .button, .path-field input, #log, .status-panel { border-color: CanvasText; }
+  .status-copy strong::before { color: CanvasText !important; }
+}