samuelgursky/davinci-resolve-mcp

v2.33.6 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

blackmagic blackmagic-design blackmagicdesign davinci-resolve davinciresolve mcp

+1 more

mcp-server

Summary

AI summary

Added unified contract validator and safe subprocess wrappers for parameter validation and hygiene.

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds centralized parameter-contract validator in src/utils/contracts.py Adds centralized parameter-contract validator in src/utils/contracts.py Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Routes export_frame_as_still and set_mark_in_out through contracts validator Routes export_frame_as_still and set_mark_in_out through contracts validator Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Adds subprocess wrappers safe_run and safe_popen in src/utils/proc.py Adds subprocess wrappers safe_run and safe_popen in src/utils/proc.py Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Defaults subprocess stdin to DEVNULL preventing MCP stdio consumption Defaults subprocess stdin to DEVNULL preventing MCP stdio consumption Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Routes inline Python execution through safe_run wrapper Routes inline Python execution through safe_run wrapper Source: llm_adapter@2026-06-06 Confidence: high	—
Refactor	Low	Replaces scattered hand-written validation with contracts.validate Replaces scattered hand-written validation with contracts.validate Source: llm_adapter@2026-06-06 Confidence: high	—

Full changelog

Internal consolidation: a declarative parameter-contract validator and centralized subprocess hygiene.

Added src/utils/contracts.py validate(params, rules, invariants) — one validator for required/type/enum/min/max/non-empty/parent-dir-exists plus custom invariants, returning consistent agent-friendly errors with coercion + defaults applied. Replaces scattered hand-written validation.
Changed export_frame_as_still and set_mark_in_out (clip + timeline) validate through contracts. Behavior preserved (same rejections); mark_in/mark_out coerced to int.
Added src/utils/proc.py safe_run/safe_popen — subprocess wrappers defaulting stdin to DEVNULL so a child can't consume the MCP stdio protocol stream. Inline Python execution routes through safe_run.

Live-validated on DaVinci Resolve Studio 21.0.0.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track samuelgursky/davinci-resolve-mcp

Get notified when new releases ship.

About samuelgursky/davinci-resolve-mcp

MCP server integration for DaVinci Resolve