feat: initial commit - Jhonny Editor

- Adicionado estrutura completa do projeto
- Configurado MCP server para Premiere Pro
- Adicionado documentação e skills
- Configurado Gitignore para o projeto

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,42 @@
+---
+name: Bug Report
+about: Report a bug or unexpected behavior
+title: "[Bug] "
+labels: bug
+assignees: ""
+---
+
+## Description
+
+A clear and concise description of the bug.
+
+## Steps to Reproduce
+
+1. Tool called: `tool_name`
+2. Parameters used: `{ ... }`
+3. What happened:
+4. What you expected:
+
+## Environment
+
+- **OS:** macOS / Windows
+- **Premiere Pro version:**
+- **Node.js version:** (`node --version`)
+- **MCP server version:**
+- **MCP client:** Claude Desktop / Windsurf / Cursor / Other
+
+## CEP Panel Status
+
+- Is the CEP panel open and showing "Running"? Yes / No
+- Temp directory path (if known):
+- Any errors in the CEP panel console?
+
+## Error Output
+
+```
+Paste any error messages, stack traces, or MCP client logs here
+```
+
+## Additional Context
+
+Any other context, screenshots, or `.json` response files from the temp directory.

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/compatibility_report.yml

@@ -0,0 +1,42 @@
+name: Compatibility report
+description: Share a successful or failed sanitized host/client compatibility result.
+title: "[Compatibility]: "
+labels: ["documentation"]
+body:
+  - type: input
+    id: platform
+    attributes:
+      label: OS and architecture
+      placeholder: Windows 11 x64 or macOS 15 Apple Silicon
+    validations:
+      required: true
+  - type: input
+    id: versions
+    attributes:
+      label: Premiere Pro and MCP versions
+      placeholder: Premiere 26.3.0, Premiere Pro MCP 1.12.2
+    validations:
+      required: true
+  - type: input
+    id: client
+    attributes:
+      label: MCP client and version
+    validations:
+      required: true
+  - type: dropdown
+    id: connection
+    attributes:
+      label: Connection verification
+      options:
+        - Passed read-only verification and ping
+        - Installed but not live-verified
+        - Failed connection verification
+    validations:
+      required: true
+  - type: textarea
+    id: result
+    attributes:
+      label: Sanitized result
+      description: Describe what was verified and what remains unverified. Do not include local paths or project content.
+    validations:
+      required: true

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Setup documentation
+    url: https://premiere-pro-mcp.com/docs/
+    about: Follow the supported installation, compatibility, and safe connection-check guidance.
+  - name: Security vulnerability
+    url: https://github.com/leancoderkavy/premiere-pro-mcp/security/policy
+    about: Report vulnerabilities privately through the security policy instead of a public issue.
+  - name: Questions and workflow ideas
+    url: https://github.com/leancoderkavy/premiere-pro-mcp/discussions
+    about: Ask usage questions or share a Premiere workflow with the community.

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/connection_problem.yml

@@ -0,0 +1,77 @@
+name: Connection or setup problem
+description: Report a sanitized installation, connector, or live-connection failure.
+title: "[Connection]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not attach footage, project files, private prompts, tokens, or full local paths. Run `premiere-pro-mcp --doctor` and the read-only `verify_premiere_connection` prompt first.
+  - type: dropdown
+    id: operating-system
+    attributes:
+      label: Operating system
+      options:
+        - Windows
+        - macOS Apple Silicon
+        - macOS Intel
+        - Other or unsupported
+    validations:
+      required: true
+  - type: input
+    id: premiere-version
+    attributes:
+      label: Premiere Pro version
+      placeholder: 26.3.0
+    validations:
+      required: true
+  - type: dropdown
+    id: client
+    attributes:
+      label: AI client
+      options:
+        - Claude Desktop
+        - Claude Code
+        - Codex
+        - Cursor
+        - VS Code / Copilot
+        - Windsurf
+        - Another MCP client
+    validations:
+      required: true
+  - type: dropdown
+    id: route
+    attributes:
+      label: Installation route
+      options:
+        - Claude Desktop bundle plus CEP connector
+        - npm package plus CEP connector
+        - Source build plus CEP connector
+        - UXP preview bridge
+        - Remote HTTP transport
+        - Not sure
+    validations:
+      required: true
+  - type: textarea
+    id: state
+    attributes:
+      label: Sanitized connection state
+      description: Share component status and error codes, but remove usernames, paths, media, project names, prompts, and tokens.
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      placeholder: Describe the shortest clean sequence that reproduces the failure.
+    validations:
+      required: true
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Safety checks
+      options:
+        - label: I removed footage, project files, private prompts, tokens, and full local paths.
+          required: true
+        - label: I restarted Premiere and my AI client, opened a project, and ran the read-only connection check.
+          required: true

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,37 @@
+---
+name: Feature Request
+about: Suggest a new tool or capability
+title: "[Feature] "
+labels: enhancement
+assignees: ""
+---
+
+## Description
+
+What tool or capability would you like to see added?
+
+## Use Case
+
+How would you use this? What AI-driven workflow or editing task does it enable?
+
+## Proposed Tool Name & Module
+
+- **Tool name:** `suggested_tool_name`
+- **Module:** e.g., `timeline.ts`, `effects.ts`, or a new module
+
+## API Reference
+
+If you know the ExtendScript or QE DOM method, include it here:
+
+```javascript
+// e.g., app.project.someMethod()
+// or qe.sequence.someMethod()
+```
+
+## Alternatives
+
+Have you found a workaround using `execute_extendscript` or existing tools? If so, paste your script.
+
+## Priority
+
+How critical is this to your workflow? (Nice to have / Important / Blocking)

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,37 @@
+name: Feature request
+description: Propose a Premiere workflow or product improvement with a clear verification boundary.
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Workflow problem
+      description: What repetitive editing or delivery problem should this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Desired observable outcome
+      description: Describe what the user should be able to verify after the workflow runs.
+    validations:
+      required: true
+  - type: dropdown
+    id: authority
+    attributes:
+      label: Expected authority
+      options:
+        - Inspect only
+        - Edit
+        - Export
+        - Filesystem
+        - Unsafe script
+        - Not sure
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Current workaround
+      description: How is this handled manually or with another supported tool today?

bm/premiere-pro-mcp-main/.github/ISSUE_TEMPLATE/tool_failure.yml

@@ -0,0 +1,62 @@
+name: Tool failure
+description: Report a supported MCP tool that returned an error or an unverified result.
+title: "[Tool]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: Do not include project media, prompt contents, tool arguments containing paths, access tokens, or proprietary project details.
+  - type: input
+    id: tool
+    attributes:
+      label: Tool name
+      placeholder: move_clip
+    validations:
+      required: true
+  - type: input
+    id: package-version
+    attributes:
+      label: Premiere Pro MCP version
+      placeholder: 1.12.2
+    validations:
+      required: true
+  - type: input
+    id: premiere-version
+    attributes:
+      label: Premiere Pro version
+      placeholder: 26.3.0
+    validations:
+      required: true
+  - type: dropdown
+    id: backend
+    attributes:
+      label: Reported backend
+      options:
+        - CEP / ExtendScript
+        - QE DOM
+        - UXP
+        - Local
+        - Orchestrator
+        - Not sure
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected observable result
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual sanitized result or diagnostics
+      description: Include bounded error codes and verification state only.
+    validations:
+      required: true
+  - type: checkboxes
+    id: privacy
+    attributes:
+      label: Privacy check
+      options:
+        - label: I removed prompts, arguments, paths, project/media names, tokens, and proprietary content.
+          required: true

bm/premiere-pro-mcp-main/.github/copilot-instructions.md

@@ -0,0 +1,40 @@
+# GitHub Copilot repository instructions
+
+## Project and architecture
+
+- This repository is the TypeScript MCP server for Adobe Premiere Pro. The production path is a local Node.js server communicating with the CEP bridge through private file-based IPC. The UXP bridge is a capability-aware preview for supported Premiere 25.6+ APIs.
+- `src/server.ts` assembles the MCP surface. Tool modules live in `src/tools/`, bridge code in `src/bridge/`, the production CEP extension in `cep-plugin/`, and the preview backend in `uxp-plugin/`.
+- Treat `README.md`, `SECURITY.md`, `CONTRIBUTING.md`, and `RESEARCH.md` as the canonical product, trust-model, contribution, and compatibility references.
+
+## Development workflow
+
+- Use Node.js 24 for repository work; the supported runtime floor is Node.js 20.19.
+- Install deterministically with `npm ci`.
+- Before requesting review, run `npm run check`. For changes that affect coverage-sensitive behavior, also run `npm run test:coverage`.
+- Keep generated build output, credentials, certificates, Premiere project/media files, and local diagnostics out of commits.
+- Make focused changes. Do not rewrite unrelated files or update dependency lockfiles unless the task requires it.
+
+## Implementation rules
+
+- Generated ExtendScript must remain ECMAScript 3 compatible: use `var`, traditional functions and loops, and no arrow functions, `let`, `const`, template literals, or other modern syntax.
+- Escape every user-controlled string embedded in ExtendScript with the existing escaping helpers. Never interpolate raw paths, names, expressions, or prompts into generated scripts.
+- Preserve capability and authority boundaries. Raw scripting tools stay disabled unless the explicit `unsafe-script` capability is enabled.
+- Prefer documented Premiere APIs. QE DOM behavior is experimental and must be described as such.
+- Mutating tools must verify their postconditions. Do not report success from a host API return value alone, and do not silently retry a failed UXP mutation through CEP or QE.
+- Keep tool schemas, descriptions, registrations, structured results, tests, documentation, and reported counts synchronized.
+- Reuse existing helpers and module patterns before introducing new abstractions or dependencies.
+
+## Testing and review expectations
+
+- Add or update tests for behavior changes, failure paths, escaping, validation, authority enforcement, and tool registration.
+- Automated tests and CI prove package behavior only. Claims about Premiere-side compatibility require a real supported Premiere host with the applicable CEP or UXP bridge running.
+- Clearly distinguish `committed`, `verified`, `committed_unverified`, and failed host mutations in user-visible results and documentation.
+- Do not weaken authentication, private temp-directory ownership checks, script-size limits, telemetry privacy, or secret handling.
+- Telemetry must remain bounded to operational metadata. Never collect prompts, arguments, results, tokens, IP addresses, project paths, media names, or person profiles.
+
+## Pull requests
+
+- Explain the user impact and the compatibility boundary.
+- Link the related issue when one exists.
+- Report the exact checks run and whether live Premiere verification was performed.
+- Never claim a release, registry publication, deployment, or host-side validation unless it was directly verified.

bm/premiere-pro-mcp-main/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      npm-minor-and-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

bm/premiere-pro-mcp-main/.github/pull_request_template.md

@@ -0,0 +1,35 @@
+## What does this PR do?
+
+Brief description of the changes and motivation.
+
+## Related Issue
+
+Closes #
+
+## Type of Change
+
+- [ ] New tool(s)
+- [ ] Bug fix
+- [ ] Documentation
+- [ ] Refactor
+- [ ] Other
+
+## New Tools Added (if any)
+
+| Tool Name | Module | Description |
+|-----------|--------|-------------|
+| | | |
+
+**Total tool count after this PR:** (update `release-metadata.json` when changed)
+
+## Checklist
+
+- [ ] `npm run build` compiles without errors
+- [ ] Tool descriptions are clear and useful for an LLM
+- [ ] All parameters have descriptions
+- [ ] ExtendScript uses ES3 syntax (`var`, no arrow functions, no `let`/`const`)
+- [ ] User-provided strings are escaped with `escapeForExtendScript()`
+- [ ] New module is exported from `getXTools()` and registered in `server.ts`
+- [ ] No duplicate tool names introduced
+- [ ] Tested with Premiere Pro (if possible)
+- [ ] `RESEARCH.md` updated (if adding new tools)

bm/premiere-pro-mcp-main/.github/workflows/cep-release.yml

@@ -0,0 +1,36 @@
+name: Attach Premiere connector
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  attach-connector:
+    runs-on: windows-latest
+    env:
+      GITHUB_TOKEN: ${{ github.token }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event.release.tag_name }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci
+      - run: npm run check
+      - name: Verify release identity
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: node scripts/verify-release-tag.mjs
+      - name: Build and verify signed connector
+        shell: pwsh
+        run: ./scripts/build-signed-cep.ps1
+      - name: Attach connector to release
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release upload "${{ github.event.release.tag_name }}" "artifacts/MCPBridgeCEP.zxp" --clobber

bm/premiere-pro-mcp-main/.github/workflows/claude-desktop-bundle.yml

@@ -0,0 +1,45 @@
+name: Build Claude Desktop MCPB
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  bundle:
+    name: Build standards-current MCPB
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ github.token }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event_name == 'release' && github.event.release.tag_name || github.sha }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 24
+          package-manager-cache: false
+      - run: npm ci
+      - run: npm run check
+      - name: Verify release identity
+        if: ${{ github.event_name == 'release' }}
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: node scripts/verify-release-tag.mjs
+      - run: npm run build:claude
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: premiere-pro-mcp-claude-desktop
+          path: |
+            artifacts/*.mcpb
+          if-no-files-found: error
+      - name: Attach bundles to release
+        if: ${{ github.event_name == 'release' }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: >-
+          gh release upload "${{ github.event.release.tag_name }}"
+          artifacts/*.mcpb --clobber

bm/premiere-pro-mcp-main/.github/workflows/connector-installers.yml

@@ -0,0 +1,95 @@
+name: Connector installers
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+    inputs:
+      require_production_signing:
+        description: Fail unless platform signing identities are configured
+        required: true
+        default: true
+        type: boolean
+
+permissions:
+  contents: read
+
+jobs:
+  connector-package:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - name: Build and verify CEP connector
+        shell: pwsh
+        run: ./scripts/build-signed-cep.ps1
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: connector-package
+          path: artifacts/MCPBridgeCEP.zxp
+          if-no-files-found: error
+
+  windows-installer:
+    needs: connector-package
+    runs-on: windows-latest
+    env:
+      WINDOWS_SIGNING_PFX_BASE64: ${{ secrets.WINDOWS_SIGNING_PFX_BASE64 }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        with:
+          dotnet-version: 8.0.x
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: connector-package
+          path: artifacts
+      - name: Restore Windows signing certificate
+        if: ${{ env.WINDOWS_SIGNING_PFX_BASE64 != '' }}
+        shell: pwsh
+        run: '[IO.File]::WriteAllBytes("$env:RUNNER_TEMP\windows-signing.pfx", [Convert]::FromBase64String($env:WINDOWS_SIGNING_PFX_BASE64))'
+      - name: Build Windows installer
+        shell: pwsh
+        env:
+          SIGNING_PASSWORD: ${{ secrets.WINDOWS_SIGNING_PFX_PASSWORD }}
+        run: |
+          $params = @{}
+          if (Test-Path "$env:RUNNER_TEMP\windows-signing.pfx") {
+            $params.SigningCertificatePath = "$env:RUNNER_TEMP\windows-signing.pfx"
+            $params.SigningCertificatePassword = $env:SIGNING_PASSWORD
+          }
+          if ('${{ inputs.require_production_signing }}' -eq 'true') { $params.RequireSigning = $true }
+          ./scripts/build-connector-installer.ps1 @params
+      - name: Verify embedded connector package without installing it
+        shell: pwsh
+        run: |
+          $installer = Get-ChildItem "artifacts/connector-installers/*.exe" | Select-Object -First 1
+          if (-not $installer) { throw "Windows connector installer artifact was not produced." }
+          $result = Start-Process -FilePath $installer.FullName -ArgumentList "--verify-only" -Wait -PassThru -NoNewWindow
+          if ($result.ExitCode -ne 0) { throw "Windows connector installer verification failed." }
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: connector-installer-windows
+          path: artifacts/connector-installers/*.exe
+          if-no-files-found: error
+
+  macos-installer:
+    needs: connector-package
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: connector-package
+          path: artifacts
+      - name: Build macOS installer preview
+        shell: bash
+        env:
+          REQUIRE_SIGNING: ${{ inputs.require_production_signing || 'false' }}
+        run: ./scripts/build-connector-installer.sh
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: connector-installer-macos
+          path: |
+            artifacts/connector-installers/*.pkg
+            artifacts/connector-installers/*.command
+          if-no-files-found: error

bm/premiere-pro-mcp-main/.github/workflows/copilot-setup-steps.yml

@@ -0,0 +1,33 @@
+name: Copilot Setup Steps
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+  pull_request:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+
+jobs:
+  copilot-setup-steps:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+
+      - name: Set up Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 24
+          cache: npm
+          package-manager-cache: false
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build project
+        run: npm run build

bm/premiere-pro-mcp-main/.github/workflows/cross-platform.yml

@@ -0,0 +1,34 @@
+name: Cross-platform validation
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-test:
+    name: ${{ matrix.os }} / Node ${{ matrix.node }}
+    runs-on: ${{ matrix.os }}
+    env:
+      GITHUB_TOKEN: ${{ github.token }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, macos-latest]
+        node: [20, 22, 24]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: ${{ matrix.node }}
+          cache: npm
+      - run: npm ci
+      - run: npm run check
+      - name: Enforce unit test coverage baseline
+        if: matrix.os == 'windows-latest' && matrix.node == 22
+        run: npm run test:coverage
+      - name: Verify packaged files
+        run: npm run pack:check

bm/premiere-pro-mcp-main/.github/workflows/npm-publish.yml

@@ -0,0 +1,69 @@
+name: Publish npm
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: npm dist-tag to publish
+        required: true
+        default: latest
+      skip_tests:
+        description: Skip tests after build
+        required: true
+        default: "false"
+        type: choice
+        options:
+          - "false"
+          - "true"
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  build-signed-cep:
+    name: Build signed CEP package
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - name: Build and verify signed ZXP
+        shell: pwsh
+        run: ./scripts/build-signed-cep.ps1
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: signed-cep
+          path: artifacts/MCPBridgeCEP.zxp
+          if-no-files-found: error
+
+  publish:
+    name: Publish package
+    needs: build-signed-cep
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: signed-cep
+          path: artifacts
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org/
+          package-manager-cache: false
+      - run: npm install --global npm@latest
+      - run: npm ci
+      - run: npm run premiere:docs-inventory:check
+      - run: npm run build
+      - if: ${{ inputs.skip_tests != 'true' }}
+        run: npm test
+      - run: npm run pack:check
+      - name: Fail if version is already published
+        shell: bash
+        run: |
+          VERSION="$(node -p "require('./package.json').version")"
+          if npm view "premiere-pro-mcp@${VERSION}" version >/dev/null 2>&1; then
+            echo "premiere-pro-mcp@${VERSION} is already published."
+            exit 1
+          fi
+      - name: Publish to npm
+        run: npm publish --provenance --access public --tag "${{ inputs.tag }}"

bm/premiere-pro-mcp-main/.github/workflows/uxp-package.yml

@@ -0,0 +1,60 @@
+name: Build Premiere UXP CCX
+
+on:
+  workflow_dispatch:
+    inputs:
+      distribution_channel:
+        description: Distribution channel for the generated CCX
+        required: true
+        default: direct
+        type: choice
+        options:
+          - direct
+          - marketplace
+      marketplace_plugin_id:
+        description: Adobe Developer Distribution plugin ID (required only for marketplace)
+        required: false
+        type: string
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  package:
+    name: Validate and package UXP CCX
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ github.token }}
+      UXP_DISTRIBUTION_CHANNEL: ${{ inputs.distribution_channel || 'direct' }}
+      UXP_MARKETPLACE_PLUGIN_ID: ${{ inputs.marketplace_plugin_id }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event_name == 'release' && github.event.release.tag_name || github.sha }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 24
+          package-manager-cache: false
+      - run: npm ci
+      - run: npm run check
+      - name: Verify release identity
+        if: ${{ github.event_name == 'release' }}
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: node scripts/verify-release-tag.mjs
+      - run: node scripts/validate-distribution.mjs --uxp
+      - run: node scripts/build-uxp-ccx.mjs
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: premiere-pro-mcp-uxp-${{ inputs.distribution_channel || 'direct' }}
+          path: artifacts/*.ccx
+          if-no-files-found: error
+      - name: Attach direct CCX to release
+        if: ${{ github.event_name == 'release' }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: >-
+          gh release upload "${{ github.event.release.tag_name }}"
+          artifacts/*-direct.ccx --clobber