@giveitsmaller/contracts 0.70.0 → 0.72.0

package/README.md

@@ -5,8 +5,8 @@
 
 | | |
 |---|---|
-| Package version | `0.70.0` |
-| Generated from spec | **`v2.201.0`** |
+| Package version | `0.72.0` |
+| Generated from spec | **`v2.203.0`** |
 
 ## Two version lines, and they are not comparable
 

package/accepted-options/accepted-options.json

@@ -1214,5 +1214,5 @@
       }
     }
   },
-  "schema_version": "2.201.0"
+  "schema_version": "2.203.0"
 }

package/accepted-options/image-output-routes.json

@@ -246,5 +246,5 @@
       "source_op": "compress"
     }
   },
-  "schema_version": "2.201.0"
+  "schema_version": "2.203.0"
 }

package/asyncapi/events.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.0.0
 info:
   title: GISL Compression Events
-  version: 3.28.0
+  version: 3.29.0
   description: |
     Asynchronous event contracts for the GISL (Give It Smaller) compression service.
 
@@ -21,13 +21,23 @@ info:
       video_watermark, video_text_watermark, split). Filter attribute:
       `operation_type`. Subscriptions: one queue per operation type,
       plus four thumbnail sub-type queues during the migration window.
-      `custom_luma`, `audio_overlay`, `audio_watermark`, and
-      `video_text_watermark` are `availability: planned`
-      (per [I29](https://trello.com/c/EPUE5Vs1) +
+      `custom_luma`, `audio_overlay` and `audio_watermark` are
+      `availability: planned` (per [I29](https://trello.com/c/EPUE5Vs1) +
       [I19](https://trello.com/c/Xr3Z4GBF) +
-      [I20](https://trello.com/c/omiCq7Vn) +
-      [`4NrRPCgh`](https://trello.com/c/4NrRPCgh)) — their queues are
-      declared but receive no traffic until Lambda ships. `split` is
+      [I20](https://trello.com/c/omiCq7Vn)) — their queues are declared
+      but receive no traffic UNTIL LAMBDA SHIPS.
+
+      ⚠️ `audio_to_video`, `video_watermark` and `video_text_watermark` are
+      ALSO `availability: planned` but for the OPPOSITE REASON, and they are
+      listed separately so the two are not confused: their Lambdas SHIPPED
+      and run. They were WITHDRAWN 2026-09-15 because none can finish the
+      ceiling this contract advertised inside its own encode cap. Grouping
+      them with the not-yet-built operations would tell a reader to wait for
+      a worker that already exists. Workflow-create returns 422
+      `feature_not_available`, so NO NEW traffic is published for them; an
+      already-accepted workflow is not cancelled — availability is checked at
+      create — so these queues can still receive in-flight work, which fails
+      only if it exceeds the cap. `split` is
       `availability: beta` for its `audio` and `video` mime_groups
       (workers live on staging — [`vKI0CFDu`](https://trello.com/c/vKI0CFDu);
       video activates BOTH classes — `long_form` / `split-video-fargate`
@@ -36,9 +46,6 @@ info:
       incomplete, 4GB+ speed-up unmeasured, fan-out flag-gated dark);
       its `image_gif` and `document_pdf` mime_groups stay
       `availability: planned`.
-      `audio_to_video` and `video_watermark` are `availability: beta`
-      (Wave A activation [`c3uthIP4`](https://trello.com/c/c3uthIP4) —
-      backends live; the API accepts + publishes, traffic flows).
       `audio_watermark` additionally requires `enterprise` tier.
 
     **Publisher branching rule** (implemented in `compression_api`'s
@@ -204,18 +211,22 @@ channels:
         [I19](https://trello.com/c/Xr3Z4GBF) — same `feature_not_
         available` 422 gating)
       - `operation_type = audio_to_video` -> `ops-audio-to-video` queue
-        (`availability: beta` — Wave A activated per
-        [`SlluxMBN`](https://trello.com/c/SlluxMBN) +
-        [`c3uthIP4`](https://trello.com/c/c3uthIP4); backend live, traffic
-        flows)
+        (`availability: planned` — WITHDRAWN 2026-09-15; the backend is
+        live but cannot serve the advertised ceiling, so workflow-create
+        422s and NO NEW traffic is routed here. In-flight work accepted
+        before the withdrawal still arrives, per
+        [`SlluxMBN`](https://trello.com/c/SlluxMBN))
       - `operation_type = video_watermark` -> `ops-video-watermark`
-        queue (`availability: beta` — Wave A activated per
-        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) +
-        [`c3uthIP4`](https://trello.com/c/c3uthIP4); backend live)
+        queue (`availability: planned` — WITHDRAWN 2026-09-15; the backend
+        is live but cannot serve the advertised ceiling, so workflow-create
+        422s and NO NEW traffic is routed here. In-flight work accepted
+        before the withdrawal still arrives, per
+        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh))
       - `operation_type = video_text_watermark` ->
-        `ops-video-text-watermark` queue (gated by
-        `availability: planned` until Lambda ships per
-        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) — same gating)
+        `ops-video-text-watermark` queue (`availability: planned` —
+        WITHDRAWN 2026-09-15. ⚠️ NOT "until Lambda ships": the Lambda
+        SHIPPED and runs; it is the advertised ceiling it cannot serve, per
+        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh))
       - `operation_type = split` -> `ops-split` queue (the `audio` and
         `video` mime_groups are `availability: beta` — audio + short-form
         video split traffic reaches this queue; `image_gif` /
@@ -924,13 +935,16 @@ channels:
       (Path B with `role: base` video + `role: overlay` image,
       exactly one of each per `per_role_cardinality`).
 
-      `availability: beta` per the operation schema (Wave A activated,
-      [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API accepts +
-      publishes, so traffic flows to this queue (MUST NOT 422). The
-      `short_form` processing class is beta; `long_form` stays planned
-      (no live Fargate worker). Backed by the `operation-video-watermark`
-      Lambda (live; lambdas pre-launch epic Wave A, ticket
-      [DbpJpVtm](https://trello.com/c/DbpJpVtm)).
+      `availability: planned` per the operation schema — WITHDRAWN
+      2026-09-15. Workflow-create returns `feature_not_available` (422), so
+      NO NEW traffic reaches this queue. ⚠️ Work accepted BEFORE the
+      withdrawal still arrives here — availability gates at create, not
+      retroactively — and fails only if it exceeds the worker's 600 s
+      encode cap; work far enough inside it still completes. Both
+      `short_form` and `long_form` are `planned`. Backed by the
+      `operation-video-watermark` Lambda, which is LIVE and runs: what it
+      cannot do is finish the advertised ceiling inside its own 600 s cap
+      ([DbpJpVtm](https://trello.com/c/DbpJpVtm)).
 
       Distinct from `image_watermark` (pure-Rust image-only) — see
       ADR-0013 for the split rationale. Audio stream-copy passthrough.
@@ -961,12 +975,15 @@ channels:
       `operation_type = video_text_watermark`. Single-input — text
       and styling come from options.
 
-      `availability: planned` per the operation schema; the API
-      rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this queue
-      today. Backed by the `operation-video-text-watermark` Lambda
-      (cross-repo follow-up — lambdas pre-launch epic Wave A,
-      ticket [mQdunjv6](https://trello.com/c/mQdunjv6)).
+      `availability: planned` per the operation schema — WITHDRAWN
+      2026-09-15. ⚠️ NOT "until the Lambda ships": the Lambda SHIPPED and
+      runs. It was withdrawn because it cannot finish the advertised
+      ceiling inside its own 600 s encode cap. Workflow-create returns
+      `feature_not_available` (422) for consumers vendoring >= 2.203.0, so
+      no NEW traffic is routed here — but work accepted BEFORE the
+      withdrawal still arrives, because availability gates at create and
+      not retroactively. Backed by the `operation-video-text-watermark`
+      Lambda (live; ticket [mQdunjv6](https://trello.com/c/mQdunjv6)).
 
       Distinct from `text_watermark` (pure-Rust image drawtext) —
       see ADR-0013. Audio stream-copy passthrough.
@@ -1230,8 +1247,10 @@ channels:
       DLQ for failed audio_to_video operations (per ticket
       [`SlluxMBN`](https://trello.com/c/SlluxMBN) / ADR-0015).
       Messages land here after 5 failed processing attempts.
-      audio_to_video is `availability: beta` (Wave A activated) so
-      this queue now receives real failures.
+      audio_to_video is `availability: planned` (WITHDRAWN 2026-09-15), so
+      workflow-create publishes nothing new here. ⚠️ This queue can still
+      receive failures from work accepted BEFORE the withdrawal — availability
+      gates at create, not retroactively.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1244,8 +1263,10 @@ channels:
       DLQ for failed video_watermark operations (per ticket
       [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) / ADR-0013).
       Messages land here after 5 failed processing attempts.
-      video_watermark is `availability: beta` (Wave A activated) so
-      this queue now receives real failures.
+      video_watermark is `availability: planned` (WITHDRAWN 2026-09-15), so
+      workflow-create publishes nothing new here. ⚠️ This queue can still
+      receive failures from work accepted BEFORE the withdrawal — availability
+      gates at create, not retroactively.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1257,9 +1278,19 @@ channels:
     description: |
       DLQ for failed video_text_watermark operations (per ticket
       [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) / ADR-0013).
-      Messages land here after 5 failed processing attempts. No
-      traffic reaches this queue while video_text_watermark is
-      `availability: planned`.
+      Messages land here after 5 failed processing attempts.
+      video_text_watermark is `availability: planned` (WITHDRAWN
+      2026-09-15), so workflow-create publishes nothing NEW. ⚠️ This queue
+      can still receive failures from work accepted BEFORE the withdrawal
+      — availability gates at create, not retroactively. ⛔ Do NOT read a
+      message here as proof of the cap: this queue takes ANY message that
+      failed 5 processing attempts, so corrupt input, invalid options and
+      storage errors land here exactly as a cap timeout does. Nor does
+      pre-withdrawal work fail as a class — work far enough inside the
+      600 s cap still completes, and nothing measured says where that
+      boundary is. A DLQ description reading "no
+      traffic reaches this queue" is wrong in the direction that gets an
+      alarm ignored.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -2092,10 +2123,14 @@ operations:
       video_watermark requests routed by
       `operation_type=video_watermark`. Multi-input role-based with
       `role: base` video + `role: overlay` image (exactly one of
-      each per `per_role_cardinality`). `availability: beta` (Wave A
-      activated, [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API
-      accepts + publishes (MUST NOT 422), so traffic flows to this
-      channel. `short_form` is beta; `long_form` stays planned.
+      each per `per_role_cardinality`). `availability: planned` — WITHDRAWN 2026-09-15.
+      Workflow-create 422s with `feature_not_available`, so NO NEW traffic
+      reaches this channel. ⚠️ Work accepted BEFORE the withdrawal still
+      arrives here — availability gates at create, not retroactively — and
+      it is NOT thereby doomed: the withdrawal rests on ONE measured point
+      (the same source plus a PNG overlay, KILLED at 606 s, no output, on
+      3008 MB) and work far enough inside the 600 s cap still completes.
+      `short_form` and `long_form` are both `planned`.
       Per ADR-0004 + ADR-0013
       ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
     messages:
@@ -2114,13 +2149,20 @@ operations:
     summary: Process video_text_watermark operation
     description: |
       The `operation-video-text-watermark` Lambda (cross-repo
-      follow-up — lambdas pre-launch epic Wave A, not yet shipped)
-      consumes video_text_watermark requests routed by
+      follow-up — lambdas pre-launch epic Wave A, live) consumes
+      video_text_watermark requests routed by
       `operation_type=video_text_watermark`. Single-input — text
       and styling come from options (no `role` field on the source
-      entry). `availability: planned`; the API rejects workflow-
-      create with `feature_not_available` (422) until the Lambda
-      ships, so traffic does not reach this channel today.
+      entry). `availability: planned` — WITHDRAWN 2026-09-15.
+      Workflow-create 422s with `feature_not_available`, so NO NEW traffic
+      reaches this channel. ⚠️ Work accepted BEFORE the withdrawal still
+      arrives here — availability gates at create, not retroactively — and
+      it is NOT thereby doomed: the withdrawal rests on ONE measured point
+      (435 MB / 300 s real 1080p, KILLED at 604 s, no output) and work far
+      enough inside the 600 s cap still completes. Nothing measured says
+      where the boundary is.
+      ⚠️ NOT "until the Lambda ships": the Lambda SHIPPED and runs — it is
+      the advertised ceiling it cannot serve.
       Per ADR-0004 + ADR-0013
       ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
     messages:
@@ -2144,9 +2186,18 @@ operations:
       `operation_type=audio_to_video`. Multi-input role-based with
       role asymmetry (Path B with `role: base` audio REQUIRED +
       `role: overlay` image OPTIONAL per `per_role_cardinality`).
-      `availability: beta` (Wave A activated,
-      [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API accepts +
-      publishes (MUST NOT 422), so traffic flows to this channel.
+      `availability: planned` — WITHDRAWN 2026-09-15.
+      Workflow-create 422s with `feature_not_available`, so NO NEW traffic
+      reaches this channel. ⚠️ Work accepted BEFORE the withdrawal still
+      arrives here — availability gates at create, not retroactively — and
+      it is NOT thereby doomed: unlike its two siblings this withdrawal is
+      ARITHMETIC ON COMPLETED CELLS — 60 s and 120 s both finished with
+      output — so accepted work fails only when its OUTPUT DURATION exceeds
+      ~1976 s ON THE INPUT THE RATE WAS MEASURED WITH (a real photographic
+      1080p still plus looped real audio), where 0.300 s/s plus a 7 s fixed
+      cost reaches the 600 s cap. ⛔ The driver is the STILL'S RESOLUTION: a
+      4K still is roughly 4x the rate (UNMEASURED), and nothing constrains
+      the overlay's resolution.
       Per ADR-0004 + ADR-0015
       ([`SlluxMBN`](https://trello.com/c/SlluxMBN)).
     messages:
@@ -2609,8 +2660,10 @@ components:
           minimum `sources` count (1 for audio_to_video; 2 for all
           other role-based ops today). custom_luma and audio_overlay
           are `availability: planned` so workflow-create rejects with
-          422 today (audio_to_video and video_watermark are now `beta` —
-          Wave A activated).
+          422 today — and audio_to_video and video_watermark REJOINED
+          that set on 2026-09-15 when they were withdrawn on measured
+          evidence. (`video_text_watermark` was withdrawn in the same cut
+          but is SINGLE-input, so it is not part of this role-based set.)
 
         **Migration window note.** During the thumbnail sub-type
         migration, both `operation_type=thumbnail` (legacy) and
@@ -3635,8 +3688,10 @@ components:
         entries may include per-input overrides (e.g. transition type).
         Merge also requires `output_type`. custom_luma and audio_overlay
         are `availability: planned` so workflow-create rejects with 422
-        today (audio_to_video + video_watermark are now `beta` — Wave A
-        activated, backends live); the wire shape is contract-defined.
+        today — and audio_to_video + video_watermark REJOINED that set on
+        2026-09-15, withdrawn on measured evidence; the wire shape is
+        contract-defined. (`video_text_watermark` was withdrawn in the same
+        cut; it is SINGLE-input and is listed as such above.)
 
         Note: `media_group` is **not** a field in this payload. It exists
         only as an SNS MessageAttribute on the non-compression branch; on
@@ -5274,10 +5329,12 @@ components:
           the first OPTIONAL role on the contract — `role: base`
           audio required, `role: overlay` image 0..1 per
           `per_role_cardinality`). When overlay is omitted, the video
-          uses a solid background colour. `availability: beta` (Wave A,
-          [`c3uthIP4`](https://trello.com/c/c3uthIP4)) — the Lambda
-          backend is live, so the API accepts + publishes (MUST NOT 422);
-          traffic flows to SNS. `media_group` is derived
+          uses a solid background colour. `availability: planned` —
+          WITHDRAWN 2026-09-15: the Lambda is live but cannot serve the
+          advertised ceiling, so workflow-create 422s and NO NEW traffic
+          reaches SNS. ⚠️ Work accepted BEFORE the withdrawal still flows —
+          availability gates at create, not retroactively.
+          `media_group` is derived
           from the `base` role input MIME prefix per ADR-0015 (always
           `audio` for audio_to_video). Routes via
           `operation_type=audio_to_video` to `ops-audio-to-video`.
@@ -5288,9 +5345,10 @@ components:
           of each per `per_role_cardinality { base: 1/1, overlay:
           1/1 }`). Re-encode required; audio stream-copy passthrough.
           Distinct from `image_watermark` (pure-Rust/image-only —
-          see ADR-0013). `availability: beta` (Wave A, `c3uthIP4` —
-          Lambda backend live; `short_form` beta, `long_form` stays
-          `planned`); routes via
+          see ADR-0013). `availability: planned` — WITHDRAWN 2026-09-15:
+          the Lambda is live but cannot serve the advertised ceiling, so
+          workflow-create 422s and no new traffic reaches SNS. Both
+          `short_form` and `long_form` are `planned`; routes via
           `operation_type=video_watermark` to `ops-video-watermark`.
           Per ADR-0004 + ADR-0013
           ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
@@ -5300,7 +5358,9 @@ components:
           tiled) + `anchor` + `margin` vocab as `text_watermark`.
           Re-encode required; audio stream-copy passthrough.
           Distinct from `text_watermark` (image-only drawtext path
-          — see ADR-0013). `availability: planned`; routes via
+          — see ADR-0013). `availability: planned` — WITHDRAWN
+          2026-09-15; the Lambda SHIPPED and runs, and it is the advertised
+          ceiling it cannot serve. Routes via
           `operation_type=video_text_watermark` to
           `ops-video-text-watermark`. Per ADR-0004 + ADR-0013.
         - `split`: Fan one input file into N outputs across GIF /

package/availability/availability.json

@@ -1,6 +1,6 @@
 {
   "capabilities_profile": "baseline",
-  "capabilities_version": 185,
+  "capabilities_version": 187,
   "endpoints": {
     "DELETE /api/auth/account": {
       "auth": "required",
@@ -718,9 +718,9 @@
       "sole_op": true
     },
     "audio_to_video": {
-      "availability": "stable",
+      "availability": "planned",
       "default": false,
-      "description": "Produce a video from an audio input plus an OPTIONAL still image\noverlay. Use cases: podcast \u2192 YouTube uploads, audio-only tracks\nthat need a video container for platforms requiring it, branded\naudio releases with a static cover image.\n\n**Role asymmetry.** First role-based operation on the contract\nwith an OPTIONAL role \u2014 REQUIRED `base` (audio source) +\nOPTIONAL `overlay` (still image, 0..1). When `overlay` is\nomitted, the video uses a solid `background_color`. The\nmachine-readable cardinality lives in `per_role_cardinality`\non this schema.\n\n**Input vs output asymmetry.** The single `mime_groups.audio`\nblock keys the INPUT MIME family (the `base` role input is\naudio). The OUTPUT is always video \u2014 `output_format` controls\nthe container; `mime_groups` is NOT the output type. Mirrors\nthe `audio_overlay.video` group pattern (input-keyed).\n\nRe-encode required (audio \u2192 video composition always re-encodes).\nA lower framerate plus still-image tuning keeps file size tiny\nwhen the overlay is a still image (the common case).\n\nActivated to `availability: beta`: the backend is live (API\naccepts + publishes), so this is shape-stable + opt-in for callers\nand MUST NOT return `feature_not_available` \u2014 it may still change\nwith notice while beta.\n",
+      "description": "Produce a video from an audio input plus an OPTIONAL still image\noverlay. Use cases: podcast \u2192 YouTube uploads, audio-only tracks\nthat need a video container for platforms requiring it, branded\naudio releases with a static cover image.\n\n**Role asymmetry.** First role-based operation on the contract\nwith an OPTIONAL role \u2014 REQUIRED `base` (audio source) +\nOPTIONAL `overlay` (still image, 0..1). When `overlay` is\nomitted, the video uses a solid `background_color`. The\nmachine-readable cardinality lives in `per_role_cardinality`\non this schema.\n\n**Input vs output asymmetry.** The single `mime_groups.audio`\nblock keys the INPUT MIME family (the `base` role input is\naudio). The OUTPUT is always video \u2014 `output_format` controls\nthe container; `mime_groups` is NOT the output type. Mirrors\nthe `audio_overlay.video` group pattern (input-keyed).\n\nRe-encode required (audio \u2192 video composition always re-encodes).\nA lower framerate plus still-image tuning keeps file size tiny\nwhen the overlay is a still image (the common case).\n\n`availability: planned` \u2014 withdrawn 2026-09-15. Measured encode cost is\n0.300 s per second of output PLUS A 7 s FIXED COST, so the advertised PT2H\nneeds 2167 s against a 900 s platform maximum. \u26a0\ufe0f The 7 s is not a rounding\ndetail: 0.300 x 7200 alone is 2160, and a consumer dividing 600 by 0.300\nderives a 2000 s in-flight boundary where the real one is ~1976 s. Workflow-create returns `feature_not_available` (422).\n\n\u26a0\ufe0f An already-accepted workflow is NOT cancelled \u2014 availability is checked at\ncreate \u2014 and it is NOT thereby doomed. \u26d4 DO NOT READ THIS AS \"in-flight work\nfails\": the 60 s and 120 s cells behind this withdrawal both COMPLETED WITH\nOUTPUT, which is precisely why the evidence is arithmetic rather than a kill.\nWhat fails is an accepted workflow whose OUTPUT DURATION exceeds ~1976 s\n\u26a0\ufe0f ON THE INPUT THE RATE WAS MEASURED WITH \u2014 a real photographic 1080p STILL\nplus looped real audio \u2014 the point at which 0.300 s/s plus the 7 s fixed cost\nreaches the 600 s cap. \u26d4 THE DRIVER IS THE STILL'S RESOLUTION, NOT THE\nDURATION ALONE: a 4K still is roughly 4x the rate (recorded as UNMEASURED),\nwhich would put the boundary near a quarter of that figure, and this schema\nplaces NO constraint on the overlay's resolution. Other still resolutions and\nother output settings are likewise unmeasured, and the contract does not\nclaim which direction they move \u2014\nand what the caller then sees is NOT SETTLED \u2014 see the CHANGELOG entry for\n2.203.0; this contract does not pin a worker's error classification. Measured figures and the conditions for re-listing are in the\nCHANGELOG entry for 2.203.0 \u2014 the only one of the two records that is\nPUBLISHED (`schemas/manifest-divergence-register.yaml` is working material\nfor the drift gate and is not in the npm tarball).\n",
       "input_model": "multi",
       "max_inputs": 2,
       "mime_groups": {
@@ -4982,7 +4982,7 @@
     "video_text_watermark": {
       "availability": "planned",
       "default": false,
-      "description": "Render a text overlay onto a base video using bundled Liberation\nSans (SIL OFL). Single-input \u2014 the text and its styling come from\noptions, not from a file input.\n\n**Dedicated operation, not an extension of `text_watermark`.**\n`text_watermark` renders onto images (single-pass); per-frame video\ntext rendering requires a re-encode (overlay = pixel modification,\nno stream-copy escape). Different runtime.\n\n**Audio passthrough.** The base video's audio stream is preserved\nunchanged (stream-copied) \u2014 the watermark applies to the visual\ntrack only.\n\nTwo rendering modes (mirrors `text_watermark`):\n- `single`: one label rendered at the anchor + margin position.\n- `tiled`: text tiled across the source frames at the rotation\n  angle.\n\n`availability: planned` until the cross-repo backend support ships;\ndispatch returns `feature_not_available` (422) until then.\n",
+      "description": "Render a text overlay onto a base video using bundled Liberation\nSans (SIL OFL). Single-input \u2014 the text and its styling come from\noptions, not from a file input.\n\n**Dedicated operation, not an extension of `text_watermark`.**\n`text_watermark` renders onto images (single-pass); per-frame video\ntext rendering requires a re-encode (overlay = pixel modification,\nno stream-copy escape). Different runtime.\n\n**Audio passthrough.** The base video's audio stream is preserved\nunchanged (stream-copied) \u2014 the watermark applies to the visual\ntrack only.\n\nTwo rendering modes (mirrors `text_watermark`):\n- `single`: one label rendered at the anchor + margin position.\n- `tiled`: text tiled across the source frames at the rotation\n  angle.\n\n`availability: planned` \u2014 withdrawn 2026-09-15. A real 1080p source at the\nadvertised PT5M could not finish inside the worker's 600 s encode cap.\nWorkflow-create returns `feature_not_available` (422).\n\n\u26a0\ufe0f An already-accepted workflow is NOT cancelled \u2014 availability is checked at\ncreate \u2014 and it is NOT thereby doomed. \u26d4 The withdrawal rests on ONE measured\npoint: a 435 MB / 300 s real 1080p source KILLED at 604 s with no output.\nWork far enough inside the 600 s cap still completes, and NOTHING MEASURED\nSAYS WHERE THE BOUNDARY IS. What a caller sees when a job crosses it is NOT\nSETTLED \u2014 see the CHANGELOG entry for 2.203.0; this contract does not pin\na worker's error classification. Measured figures and the conditions for re-listing are in the\nCHANGELOG entry for 2.203.0 \u2014 the only one of the two records that is\nPUBLISHED (`schemas/manifest-divergence-register.yaml` is working material\nfor the drift gate and is not in the npm tarball).\n",
       "input_model": "single",
       "mime_groups": {
         "video": {
@@ -5112,9 +5112,9 @@
       "sole_op": true
     },
     "video_watermark": {
-      "availability": "stable",
+      "availability": "planned",
       "default": false,
-      "description": "Apply an image overlay onto a base video\nasset. Multi-input role-based:\nexactly one input with `role: base` (the source video) + exactly\none with `role: overlay` (the watermark image). Each input is a\na multi-input source \u2014 an external_import handle, a vault connection,\nor an upstream `job_output` (uploads are NOT referenced directly\ninside inputs[]). To use an uploaded base or overlay, feed it through\na `passthrough` source job and reference it via `{ type: job_output,\nfrom: <id> }` (per ticket 4som89Uh).\n\n**Dedicated operation, not an extension of `image_watermark`.**\n`image_watermark` handles image-on-image overlay only.\n`video_watermark` requires an overlay + re-encode (no stream-copy escape \u2014 overlay = pixel modification).\n\n**Audio passthrough.** The base video's audio stream is preserved\nunchanged (stream-copied) \u2014 the watermark applies to the visual\ntrack only.\n\nActivated to `availability: beta` (Wave A, ticket\n[`c3uthIP4`](https://trello.com/c/c3uthIP4)): the cross-repo backend\nis live (API accepts + publishes via the operations SNS\ntopic), so the operation and its `short_form` processing class are\nshape-stable + opt-in and MUST NOT return `feature_not_available`.\n`long_form` stays `planned` (its long-form path is not yet\nprovisioned) and the `multi_overlay_stack` feature stays `planned`\n(backend support unconfirmed); requesting those planned sub-features\nDOES still return `feature_not_available` until they are separately\nactivated.\n",
+      "description": "Apply an image overlay onto a base video\nasset. Multi-input role-based:\nexactly one input with `role: base` (the source video) + exactly\none with `role: overlay` (the watermark image). Each input is a\na multi-input source \u2014 an external_import handle, a vault connection,\nor an upstream `job_output` (uploads are NOT referenced directly\ninside inputs[]). To use an uploaded base or overlay, feed it through\na `passthrough` source job and reference it via `{ type: job_output,\nfrom: <id> }` (per ticket 4som89Uh).\n\n**Dedicated operation, not an extension of `image_watermark`.**\n`image_watermark` handles image-on-image overlay only.\n`video_watermark` requires an overlay + re-encode (no stream-copy escape \u2014 overlay = pixel modification).\n\n**Audio passthrough.** The base video's audio stream is preserved\nunchanged (stream-copied) \u2014 the watermark applies to the visual\ntrack only.\n\n`availability: planned` \u2014 withdrawn 2026-09-15. A real 1080p source at the\nadvertised PT5M / 500 MB could not finish inside the worker's 600 s encode\ncap. Workflow-create returns `feature_not_available` (422).\n\n\u26a0\ufe0f An already-accepted workflow is NOT cancelled \u2014 availability is checked at\ncreate \u2014 and it is NOT thereby doomed. \u26d4 The withdrawal rests on ONE measured\npoint: the same source plus a PNG overlay, KILLED at 606 s with no output, on\n3008 MB \u2014 47% more memory than `video_text_watermark` and dead at the same\nsecond, which is what rules out resizing the function as the remedy. Work far\nenough inside the 600 s cap still completes, and NOTHING MEASURED SAYS WHERE\nTHE BOUNDARY IS. What a caller sees when a job crosses it is NOT\nSETTLED \u2014 see the CHANGELOG entry for 2.203.0; this contract does not pin\na worker's error classification. Measured figures and the conditions for re-listing are in the\nCHANGELOG entry for 2.203.0 \u2014 the only one of the two records that is\nPUBLISHED (`schemas/manifest-divergence-register.yaml` is working material\nfor the drift gate and is not in the npm tarball).\n",
       "features": {
         "multi_overlay_stack": {
           "availability": "planned",
@@ -5192,7 +5192,7 @@
               "required_tier": "pro"
             },
             "short_form": {
-              "availability": "stable",
+              "availability": "planned",
               "constraints": {
                 "max_input_duration": "PT5M",
                 "max_input_size_bytes": 524288000,
@@ -5216,7 +5216,7 @@
       "sole_op": true
     }
   },
-  "schema_version": "2.201.0",
+  "schema_version": "2.203.0",
   "source_commit": null,
   "user_tier": null,
   "workflow_features": {

package/code-builder/code-builder-metadata.json

@@ -722,7 +722,7 @@
       "accepts": [
         "audio"
       ],
-      "availability": "stable",
+      "availability": "planned",
       "input": {
         "max": 2,
         "min": 1,
@@ -753,7 +753,7 @@
               "default": "#000000",
               "description": "Hex `#RRGGBB` solid background colour. Used only when\n`overlay` is omitted (no image input). When an `overlay`\nimage is provided, the background colour is invisible\nbehind the image (subject to `image_fit`).\n",
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "backgroundColor",
               "type": "string"
             },
@@ -763,7 +763,7 @@
               "max": 60,
               "min": 1,
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "framerate",
               "type": "integer"
             },
@@ -771,13 +771,13 @@
               "default": "contain",
               "description": "How to fit the overlay image into the output frame.\n`contain` = letterbox (preserve aspect ratio, may show\nbackground); `cover` = crop (fill the frame, may crop\nthe image); `stretch` = distort to fit (preserves no\naspect ratio). Default `contain` preserves the image\naesthetic.\n",
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "imageFit",
               "type": "enum",
               "value_exposure": {
-                "contain": "expose",
-                "cover": "expose",
-                "stretch": "expose"
+                "contain": "coming_soon",
+                "cover": "coming_soon",
+                "stretch": "coming_soon"
               },
               "values": [
                 "contain",
@@ -789,11 +789,11 @@
               "default": "mp4",
               "description": "Output container format. V1 supports `mp4` only; webm and mov\nare planned additions.\n",
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "outputFormat",
               "type": "enum",
               "value_exposure": {
-                "mp4": "expose"
+                "mp4": "coming_soon"
               },
               "values": [
                 "mp4"
@@ -803,13 +803,13 @@
               "default": "hd_720p",
               "description": "Output video resolution. `hd_720p` = 1280\u00d7720 (default),\n`fhd_1080p` = 1920\u00d71080, `sd_480p` = 854\u00d7480. Choose\nlower for small file size; higher when the overlay image\nquality warrants it.\n",
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "outputResolution",
               "type": "enum",
               "value_exposure": {
-                "fhd_1080p": "expose",
-                "hd_720p": "expose",
-                "sd_480p": "expose"
+                "fhd_1080p": "coming_soon",
+                "hd_720p": "coming_soon",
+                "sd_480p": "coming_soon"
               },
               "values": [
                 "hd_720p",
@@ -7167,7 +7167,7 @@
       "accepts": [
         "video"
       ],
-      "availability": "stable",
+      "availability": "planned",
       "features": {
         "multi_overlay_stack": {
           "availability": "planned",
@@ -7196,19 +7196,19 @@
               "default": "bottom_right",
               "description": "9-grid anchor position on each video frame. Same vocabulary\nas `image_watermark.image` and `text_watermark.image`.\n",
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "anchor",
               "type": "enum",
               "value_exposure": {
-                "bottom_center": "expose",
-                "bottom_left": "expose",
-                "bottom_right": "expose",
-                "center": "expose",
-                "center_left": "expose",
-                "center_right": "expose",
-                "top_center": "expose",
-                "top_left": "expose",
-                "top_right": "expose"
+                "bottom_center": "coming_soon",
+                "bottom_left": "coming_soon",
+                "bottom_right": "coming_soon",
+                "center": "coming_soon",
+                "center_left": "coming_soon",
+                "center_right": "coming_soon",
+                "top_center": "coming_soon",
+                "top_left": "coming_soon",
+                "top_right": "coming_soon"
               },
               "values": [
                 "top_left",
@@ -7227,7 +7227,7 @@
               "description": "Horizontal offset from the anchor as pixels (e.g. \"40px\")\nor percentage of video frame width (e.g. \"5%\"). Direction\nis anchor-relative \u2014 positive moves toward the frame\ncentre.\n\n**`anchor: center` exception.** When the anchor is `center`\nthe centre is the centre \u2014 there is no anchor-relative\ndirection. Non-zero `margin_x` combined with\n`anchor: center` is rejected by the API at workflow-create\ntime as `invalid_options` (HTTP 422). Same rule as the\nother watermark operations.\n",
               "origin": "contract",
               "pattern": "^\\d+(\\.\\d+)?(px|%)$",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "marginX",
               "type": "string"
             },
@@ -7236,7 +7236,7 @@
               "description": "Vertical offset from the anchor as pixels or percentage of\nvideo frame height. Anchor-relative; positive moves toward\nthe frame centre.\n\n**`anchor: center` exception.** Same rejection rule as\n`margin_x`.\n",
               "origin": "contract",
               "pattern": "^\\d+(\\.\\d+)?(px|%)$",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "marginY",
               "type": "string"
             },
@@ -7246,7 +7246,7 @@
               "max": 1.0,
               "min": 0.0,
               "origin": "contract",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "opacity",
               "type": "float"
             },
@@ -7254,7 +7254,7 @@
               "description": "Optional overlay width as pixels or percentage of video\nframe width. Aspect ratio preserved. Omit to use the\noriginal overlay size.\n",
               "origin": "contract",
               "pattern": "^\\d+(\\.\\d+)?(px|%)$",
-              "sdk_exposure": "expose",
+              "sdk_exposure": "coming_soon",
               "surface_key": "overlayWidth",
               "type": "string"
             }
@@ -7280,7 +7280,7 @@
               "required_tier": "pro"
             },
             "short_form": {
-              "availability": "stable",
+              "availability": "planned",
               "constraints": {
                 "max_input_duration": "PT5M",
                 "max_input_size_bytes": 524288000,
@@ -7297,7 +7297,7 @@
     }
   },
   "preset_config_hash": "sha256:354814f7906f85be6a6ca5ede6c0722c83cdc058fd658a9bb2b0996520466c6d",
-  "schema_version": "2.201.0",
+  "schema_version": "2.203.0",
   "sdk_spec_version": "2.3.0",
-  "source_hash": "sha256:5528ef236b607b83e79ab0f63171e186e21ad557f06d7be30b4c3879b940a250"
+  "source_hash": "sha256:7123426cdc40dc649a48968e2589d90eb7ff7da5a3fe32f55bc19a4d6d9f2eaa"
 }

package/dist/openapi/models/AccountLimitEntry.d.ts

@@ -2,7 +2,7 @@
  * GISL Compression API
  * REST API for the GISL (Give It Smaller) file compression and processing service.  **Architecture:** - Upload files to get a `file_id` - Create workflows referencing uploaded files with operations (compress, thumbnail, image_watermark, text_watermark, merge, archive, convert, custom_luma, audio_overlay, audio_watermark) - Poll status, stream SSE events, or receive webhook callbacks - Download results per operation output  **Response envelope:** All mutation and query endpoints return `{ success: true, data: {...} }` on success and `{ success: false, error: \"...\", details: [...] }` on failure. Exceptions: `GET /api/operations/schema` returns raw JSON (per-tier private caching with ETag revalidation per ADR-0002 + I3), health probes return flat objects, and `POST /api/contact` returns 204 with no body.  **Availability metadata.** This spec uses the `x-availability` vendor extension as **decorative documentation only**. Per [ADR-0001](../docs/decisions/0001-contract-first-availability.md) §1.5, the runtime endpoint `GET /api/operations/schema` (ticket I3) is the authoritative source; the sidecar `availability.json` (ticket I3b) is the authoritative companion (generated, never hand-edited; CI cross-checks runtime ⇄ sidecar). SDKs MUST NOT depend on `x-availability` reaching generated code — code-generators that surface vendor extensions may emit it as documentation, but consumers read availability from the runtime endpoint, not from the generated bindings.  The 5-value vocabulary (`stable | beta | experimental | planned | deprecated`) is defined in the `AvailabilityValue` schema. See `schemas/FORMAT.md` §Availability Taxonomy for the operational rules (parser obligation: absent = stable; per-enum-value granularity is the `per_value_availability` primitive landed via ticket I17).  **Localisation (per ticket [I26](https://trello.com/c/rcnqwgI4)).**  Error responses + paused/blocked workflow statuses carry a localised human-readable `message` alongside a stable, never-localised `message_key`. Machine-readable fields (`error`, enum values, status codes) stay canonical English.  - **Currently committed locales:** `en-GB` only (per ticket   [`4GKyuYo6`](https://trello.com/c/4GKyuYo6)). The I26 carrier   shape (`Accept-Language` + `Content-Language` + `Vary` headers +   `locale` envelope field + `message_key` + `message_params`) is   stable and exercised; the **catalog** of translated `message`   strings is en-GB-only at runtime today. Additional locales (e.g.   `pt-PT`) will be advertised by name when their catalogs ship —   the request/response carrier shape does NOT change when a new   locale lands. Treat unrequested locales as \"machine-code +   `message_key` path is committed; localised `message` prose is   not\" until this prose enumerates them by name. - **Request:** `Accept-Language` header per RFC 9110 §12.5.4 (q-value   negotiation supported). The server selects the best-match locale   from its supported list; falls back to `en-GB` when no match —   which, until additional catalogs land, is every non-`en-GB`   `Accept-Language`. - **Response:** `Content-Language: <locale>` echo on every localised   response; `Vary: Accept-Language` on every response (CDN/cache   correctness — different `Accept-Language` requests produce   different responses). `Vary` is emitted unconditionally so the   header contract does not flip when a second locale ships. - **Fallback locale:** `en-GB` (also the canonical locale for   `message_key` translations and English `message` prose). - **SDK guidance:** switch on `error` (machine code) for typed   error branches; surface `message_key` to client-side i18n   catalogs (SDK companion work tracked at X19, cross-repo);   display `message` for end-user UI; **never parse `message` for   control flow** — it changes per locale.  Carrier shape lives on `ErrorEnvelope` (envelope-level optional `message_key` + `message` + `locale` + `message_params`) and `ValidationErrorEnvelope` (also per-`details[]` entry). Existing 402 / 403 / 422 envelopes (`BalanceExhaustedResponse`, `FeatureNotAvailableResponse`, `FeatureTierRestrictedResponse`, `WorkflowPausedDetail`) inherit the convention.  **Upload thresholds (per tickets [u0ar7Yye](https://trello.com/c/u0ar7Yye) + [58nBQLWQ](https://trello.com/c/58nBQLWQ)).** Canonical upload constants (single-shot cap, multipart chunk size, multipart concurrency default, multipart first-chunk size) live on the `UploadThresholds` schema with `const:`-pinned values. SDK generators emit these as typed binding constants so frontend / API / SDKs reference one source of truth instead of hardcoding magic numbers. A runtime `GET /api/uploads/limits` endpoint for dynamic discovery (per-tier / per-environment overrides) is a deferred follow-up.
  *
- * The version of the OpenAPI document: 2.201.0
+ * The version of the OpenAPI document: 2.203.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/openapi/models/AccountLimitEntry.js

@@ -4,7 +4,7 @@
  * GISL Compression API
  * REST API for the GISL (Give It Smaller) file compression and processing service.  **Architecture:** - Upload files to get a `file_id` - Create workflows referencing uploaded files with operations (compress, thumbnail, image_watermark, text_watermark, merge, archive, convert, custom_luma, audio_overlay, audio_watermark) - Poll status, stream SSE events, or receive webhook callbacks - Download results per operation output  **Response envelope:** All mutation and query endpoints return `{ success: true, data: {...} }` on success and `{ success: false, error: \"...\", details: [...] }` on failure. Exceptions: `GET /api/operations/schema` returns raw JSON (per-tier private caching with ETag revalidation per ADR-0002 + I3), health probes return flat objects, and `POST /api/contact` returns 204 with no body.  **Availability metadata.** This spec uses the `x-availability` vendor extension as **decorative documentation only**. Per [ADR-0001](../docs/decisions/0001-contract-first-availability.md) §1.5, the runtime endpoint `GET /api/operations/schema` (ticket I3) is the authoritative source; the sidecar `availability.json` (ticket I3b) is the authoritative companion (generated, never hand-edited; CI cross-checks runtime ⇄ sidecar). SDKs MUST NOT depend on `x-availability` reaching generated code — code-generators that surface vendor extensions may emit it as documentation, but consumers read availability from the runtime endpoint, not from the generated bindings.  The 5-value vocabulary (`stable | beta | experimental | planned | deprecated`) is defined in the `AvailabilityValue` schema. See `schemas/FORMAT.md` §Availability Taxonomy for the operational rules (parser obligation: absent = stable; per-enum-value granularity is the `per_value_availability` primitive landed via ticket I17).  **Localisation (per ticket [I26](https://trello.com/c/rcnqwgI4)).**  Error responses + paused/blocked workflow statuses carry a localised human-readable `message` alongside a stable, never-localised `message_key`. Machine-readable fields (`error`, enum values, status codes) stay canonical English.  - **Currently committed locales:** `en-GB` only (per ticket   [`4GKyuYo6`](https://trello.com/c/4GKyuYo6)). The I26 carrier   shape (`Accept-Language` + `Content-Language` + `Vary` headers +   `locale` envelope field + `message_key` + `message_params`) is   stable and exercised; the **catalog** of translated `message`   strings is en-GB-only at runtime today. Additional locales (e.g.   `pt-PT`) will be advertised by name when their catalogs ship —   the request/response carrier shape does NOT change when a new   locale lands. Treat unrequested locales as \"machine-code +   `message_key` path is committed; localised `message` prose is   not\" until this prose enumerates them by name. - **Request:** `Accept-Language` header per RFC 9110 §12.5.4 (q-value   negotiation supported). The server selects the best-match locale   from its supported list; falls back to `en-GB` when no match —   which, until additional catalogs land, is every non-`en-GB`   `Accept-Language`. - **Response:** `Content-Language: <locale>` echo on every localised   response; `Vary: Accept-Language` on every response (CDN/cache   correctness — different `Accept-Language` requests produce   different responses). `Vary` is emitted unconditionally so the   header contract does not flip when a second locale ships. - **Fallback locale:** `en-GB` (also the canonical locale for   `message_key` translations and English `message` prose). - **SDK guidance:** switch on `error` (machine code) for typed   error branches; surface `message_key` to client-side i18n   catalogs (SDK companion work tracked at X19, cross-repo);   display `message` for end-user UI; **never parse `message` for   control flow** — it changes per locale.  Carrier shape lives on `ErrorEnvelope` (envelope-level optional `message_key` + `message` + `locale` + `message_params`) and `ValidationErrorEnvelope` (also per-`details[]` entry). Existing 402 / 403 / 422 envelopes (`BalanceExhaustedResponse`, `FeatureNotAvailableResponse`, `FeatureTierRestrictedResponse`, `WorkflowPausedDetail`) inherit the convention.  **Upload thresholds (per tickets [u0ar7Yye](https://trello.com/c/u0ar7Yye) + [58nBQLWQ](https://trello.com/c/58nBQLWQ)).** Canonical upload constants (single-shot cap, multipart chunk size, multipart concurrency default, multipart first-chunk size) live on the `UploadThresholds` schema with `const:`-pinned values. SDK generators emit these as typed binding constants so frontend / API / SDKs reference one source of truth instead of hardcoding magic numbers. A runtime `GET /api/uploads/limits` endpoint for dynamic discovery (per-tier / per-environment overrides) is a deferred follow-up.
  *
- * The version of the OpenAPI document: 2.201.0
+ * The version of the OpenAPI document: 2.203.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).