@giveitsmaller/contracts 0.76.0 → 0.78.0

package/README.md

@@ -5,8 +5,8 @@
 
 | | |
 |---|---|
-| Package version | `0.76.0` |
-| Generated from spec | **`v2.211.0`** |
+| Package version | `0.78.0` |
+| Generated from spec | **`v2.213.0`** |
 
 ## Two version lines, and they are not comparable
 

package/accepted-options/accepted-options.json

@@ -1214,5 +1214,5 @@
       }
     }
   },
-  "schema_version": "2.211.0"
+  "schema_version": "2.213.0"
 }

package/accepted-options/image-output-routes.json

@@ -15,6 +15,7 @@
             "quality",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -30,6 +31,7 @@
             "output_format",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -47,6 +49,7 @@
             "quality",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -62,6 +65,7 @@
             "output_format",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -77,6 +81,7 @@
             "output_format",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -93,6 +98,7 @@
             "quality",
             "width"
           ],
+          "inert_options": [],
           "max_output_pixels": 16000000,
           "planned_options": [
             "metadata"
@@ -126,6 +132,7 @@
             "target_size_bytes",
             "width"
           ],
+          "inert_options": [],
           "input_mime": "image/avif",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -142,6 +149,7 @@
             "quality",
             "width"
           ],
+          "inert_options": [],
           "input_mime": "image/gif",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -164,6 +172,7 @@
             "target_size_bytes",
             "width"
           ],
+          "inert_options": [],
           "input_mime": "image/jpeg",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -176,11 +185,13 @@
             "fit",
             "height",
             "metadata",
-            "optimization_level",
             "output_format",
             "quality",
             "width"
           ],
+          "inert_options": [
+            "optimization_level"
+          ],
           "input_mime": "image/png",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -191,6 +202,7 @@
             "metadata",
             "output_format"
           ],
+          "inert_options": [],
           "input_mime": "image/svg+xml",
           "planned_options": [],
           "source_op": "compress"
@@ -206,6 +218,7 @@
             "quality",
             "width"
           ],
+          "inert_options": [],
           "input_mime": "image/tiff",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -226,6 +239,7 @@
             "target_size_bytes",
             "width"
           ],
+          "inert_options": [],
           "input_mime": "image/webp",
           "max_output_pixels": 16000000,
           "planned_options": [],
@@ -246,5 +260,5 @@
       "source_op": "compress"
     }
   },
-  "schema_version": "2.211.0"
+  "schema_version": "2.213.0"
 }

package/asyncapi/README.md

@@ -9,7 +9,7 @@
 - **Spec:** `compression_contracts/asyncapi/events.yaml` (AsyncAPI 3.0)
 - **Generator:** [asyncapi/cli](https://www.asyncapi.com/tools/cli) 6.0.0
   (Docker image: `asyncapi/cli:6.0.0`)
-- **Files:** 29
+- **Files:** 30
 
 ## Contents
 

package/asyncapi/events.yaml

@@ -4193,9 +4193,13 @@ components:
         2. **A `completed` never supersedes another `completed`.** Keep the
            first; a second is a duplicate delivery of the same outcome.
         3. **Two `failed` results are NOT ordered by this contract.** Keep the
-           first `error_code` and record that another arrived. See the limit
-           below — this is the case the contract cannot yet decide, and saying
-           so is deliberate.
+           first `error_code` and record that another arrived. `attempt`
+           (below) does NOT order them: it is per SQS message, and a DLQ
+           redrive starts a new message.
+        4. **A consumer MUST surface a second terminal, never drop it
+           silently** — count it, log it or alarm on it. Rules 1–3 decide the
+           STATE; a producer emitting contradictory terminals must still be
+           visible.
 
         ### Supersession replaces the WHOLE result, not just the status
 
@@ -4235,12 +4239,13 @@ components:
         and by nothing else. Using metrics to arbitrate would make the answer
         depend on how long a machine happened to take.
 
-        ### 🔴 THE MISSING FIELD, RECORDED AS A FINDING
+        ### 🔴 THE MISSING ORDERING FIELD, RECORDED AS A FINDING
 
         **There is no producer-stamped ordering field on `OperationResult`
-        today.** No attempt counter, no producer timestamp, no sequence number —
-        `job_id`, `operation_id`, `operation_type`, `status` and the payload, and
-        nothing that says *which invocation produced this*.
+        today.** No durable per-operation counter, no producer timestamp, no
+        sequence number. The optional `attempt` (declared 2026-09-25, below)
+        says which DELIVERY of one SQS message produced a result; it is not
+        durable per `operation_id`, so it is diagnostic and NOT an ordering key.
 
         That absence is why rule 3 exists: **two failures cannot be ordered, and
         the contract does not pretend otherwise.** Telling consumers to fall back
@@ -4248,17 +4253,33 @@ components:
         transport property, and a rule that reads it as producer intent is wrong
         in a way no consumer can detect.
 
-        **The field this needs is an `attempt` counter** — monotonically
-        increasing per `operation_id`, stamped by the producer — because it does
-        not depend on a clock, and two invocations are tens of minutes apart in
-        wall time (27–81 minutes of visibility timeout, measured above) but
-        ADJACENT in attempt number. **Not declared here**: the producer
-        must confirm it can supply it (SQS exposes `ApproximateReceiveCount` to
-        the handler, which is a candidate, not a decision). Specifying a field
-        the producer has not agreed to emit is how a contract acquires a
-        promise nothing keeps.
-
-        Once `attempt` exists, higher wins, and it subsumes rules 1–3.
+        **The field this needs is an `attempt` counter** — per `operation_id`,
+        stamped by the producer — because it does not depend on a clock, and
+        two invocations are tens of minutes apart in wall time (27–81 minutes
+        of visibility timeout, measured above) but ADJACENT in attempt number.
+
+        **`attempt` is DECLARED (2026-09-25, card `HPXNdNqp`), OPTIONAL, and
+        DIAGNOSTIC.** `compression_lambdas` confirmed both paths can emit it:
+        the Lambda path from the SQS record's `ApproximateReceiveCount`
+        (1-based), the Fargate path from `GISL_CL_JOB_ATTEMPT` + 1. It is a
+        HINT for the log line rule 4 requires: two terminals with DIFFERENT
+        values came from different deliveries. EQUAL values prove nothing (a
+        launcher redelivery repeats a value, and the terminal event itself can
+        be delivered twice), so a consumer cannot use it to classify a pair
+        as harmless.
+
+        ⛔ **It is NOT an ordering key, and no rule above reads it.** Its
+        meaning depends on the path, so values from different paths or
+        across a redrive are not comparable:
+        - **Lambda:** the SQS receive count of one message. A DLQ redrive
+          makes a NEW message whose count starts again, so a later
+          invocation can carry a LOWER value.
+        - **Fargate:** a retry counter carried in the message body, so it
+          survives a redrive, but a launcher redelivery of the same message
+          repeats the value. Ordering two faileds needs a counter that is durable
+        per `operation_id` across redrives; none exists, so rule 3 stands.
+        (An earlier draft of this change let `attempt` order faileds; codex
+        review found the redrive reset, and it was withdrawn before merge.)
 
         ### 🔴 THE PARENT IS NOT COVERED BY THIS RULE, AND THAT IS A GAP
 
@@ -4378,6 +4399,17 @@ components:
           $ref: '#/components/schemas/OperationType'
         status:
           $ref: '#/components/schemas/ResultStatus'
+        attempt:
+          type: integer
+          minimum: 1
+          description: |
+            OPTIONAL, DIAGNOSTIC, 1-based. Which attempt produced this result,
+            with path-specific meaning: on Lambda the SQS receive count (it
+            restarts after a DLQ redrive), on Fargate a retry counter carried
+            in the message (it survives a redrive but repeats on a launcher
+            redelivery). MUST NOT be used to order results; see "THE MISSING
+            ORDERING FIELD" above. Card `HPXNdNqp`.
+          example: 1
 
         # Shared success field (both single- and multi-output)
         output_bucket:
@@ -4641,6 +4673,10 @@ components:
             selected pages (`1,2,3,4,5,8`) — gapless ONLY for a full conversion.
             Mutually exclusive with `position`. Normative semantics:
             ADR-0009 §D2.
+            For a `split` of a PDF with `mode: page_groups`, each output holds
+            a GROUP of pages and `page_index` is the group's FIRST source
+            page; the group covers `page_index` .. `page_index + page_groups
+            - 1`, and the last group ends at the document's last page.
           example: 1
         position:
           type: integer
@@ -4735,7 +4771,7 @@ components:
           description: |
             Optional advisory reason. Free-form string; not enumerated.
             Examples: `all jobs completed successfully`,
-            `next reservation exceeded available_credits` (when
+            `no active reservation at a publish boundary` (when
             transitioning to `paused_insufficient_credits`),
             `caller requested cancel`, `paused_insufficient_credits
             past expires_at`, `dispatch timeout`.
@@ -4859,13 +4895,13 @@ components:
           x-string-vocabulary: advisory
           description: |
             Advisory explanation for `re_encode_decision` (e.g.
-            `all_inputs_compatible`, `explicit_always_mode`,
-            `input_codec_mismatch`, `input_framerate_mismatch`).
+            `compatible_inputs`, `always_mode_forces_re_encode`,
+            `input_video_codec_mismatch`, `long_form_stream_copy`).
             Free-form string — not an enum — so the Lambda can emit
             human-readable diagnostics that evolve without contract
             churn (compatibility-probe algorithm stays opaque per
             plan v5 §F8.2). Per ticket I16-CONS.
-          example: input_codec_mismatch
+          example: input_video_codec_mismatch
         # COGS AWS-cost metrics (ticket 2cacyYNE) — the real per-op AWS-cost
         # inputs the API's COGS record consumes (emitted by lambdas yJe65EMa,
         # surfaced by api MWssQbFS), replacing the wall-clock/bytes COGS proxy
@@ -5326,6 +5362,84 @@ components:
             contract on the OpenAPI side; the prober reports the
             page-1 horizontal DPI when the document declares it,
             otherwise omits the field.
+        # STREAM TOPOLOGY + CONCAT ATTRIBUTES (lGeDDi4V, for MjzzPCWt): what the
+        # API needs to refuse a non-concat-uniform long-form merge at create.
+        # Defined with the SAME semantics as compression_lambdas' merge gate
+        # (re_encode.rs TopologyCounts / classify_non_uniform), or the
+        # create-time refusal and the worker gate would disagree. All OPTIONAL:
+        # a prober that has not emitted them yet simply omits them.
+        video_stream_count:
+          type: integer
+          minimum: 0
+          description: Streams whose ffprobe `codec_type` is `video`.
+        audio_stream_count:
+          type: integer
+          minimum: 0
+          description: Streams whose ffprobe `codec_type` is `audio`.
+        other_stream_count:
+          type: integer
+          minimum: 0
+          description: |
+            Every other stream: `codec_type` subtitle, data, attachment,
+            or unknown — the worker gate's `other` bucket.
+        stream_order:
+          type: array
+          items:
+            type: string
+            enum: [video, audio, other]
+          description: |
+            Per stream index, in container order, its kind (`other` as
+            above). Two inputs are order-compatible iff these are equal.
+        r_frame_rate:
+          type: string
+          pattern: '^[0-9]+/[0-9]+$'
+          description: |
+            ffprobe `r_frame_rate` of the video stream, raw (`30000/1001`;
+            ffprobe's `0/0` is carried as-is and means UNUSABLE). NOT the
+            average rate in `fps`, which drifts between concat-uniform
+            clips. **The worker's frame-rate rule, which a create-time
+            comparison must reproduce exactly:** (1) `r_frame_rate` and
+            `avg_frame_rate` must each be present on all inputs or absent
+            on all (else `input_metadata_inconsistent`); (2) if every
+            input has a usable `r_frame_rate`, compare those as parsed
+            rationals; (3) otherwise compare `avg_frame_rate` as parsed
+            rationals. Both comparisons are by VALUE (`60/2` equals `30/1`),
+            never by string.
+        avg_frame_rate:
+          type: string
+          pattern: '^[0-9]+/[0-9]+$'
+          description: |
+            ffprobe `avg_frame_rate` of the video stream, raw rational.
+            Presence-checked always; compared only as the fallback in the
+            `r_frame_rate` rule. `fps` is its lossy numeric form.
+        pix_fmt:
+          type: string
+          x-string-vocabulary: none
+          description: ffprobe `pix_fmt` of the video stream (e.g. `yuv420p`).
+        sar:
+          type: string
+          pattern: '^[0-9]+:[0-9]+$'
+          description: Sample aspect ratio of the video stream (`1:1`).
+        video_time_base:
+          type: string
+          pattern: '^[0-9]+/[0-9]+$'
+          description: ffprobe `time_base` of the video stream (`1/30000`).
+        audio_time_base:
+          type: string
+          pattern: '^[0-9]+/[0-9]+$'
+          description: ffprobe `time_base` of the audio stream (`1/48000`).
+        codec_tag:
+          type: string
+          x-string-vocabulary: none
+          description: ffprobe `codec_tag_string` of the video stream (e.g. `avc1`).
+        profile:
+          type: string
+          x-string-vocabulary: none
+          description: ffprobe `profile` of the video stream (e.g. `High`).
+        sample_fmt:
+          type: string
+          x-string-vocabulary: none
+          description: ffprobe `sample_fmt` of the audio stream (e.g. `fltp`).
         probed_at:
           type: string
           format: date-time
@@ -5641,12 +5755,23 @@ components:
     ReEncodeDecision:
       type: string
       description: |
-        Path chosen for `merge.video` when `re_encode_mode=auto`.
-        Server reports the actual path so callers can see why
-        `auto` took the slow path. Absent for non-`merge.video`
-        operations and for `merge.video` when `re_encode_mode` is
-        `always` or `never` (path was caller-fixed). Per ticket
-        I16-CONS (Trello 7nCZXEru). Workflow-create-time surface
+        Path the worker actually took for a SUCCESSFUL `merge.video`,
+        reported in EVERY `re_encode_mode`: `always` reports `re_encode`;
+        `never` reports `stream_copy`; `auto` reports whichever path it
+        chose. Absent for non-`merge.video` operations and on any failed
+        operation, even one that carries other metrics such as sizes or
+        cost figures (for example a `never`
+        request whose inputs need a re-encode, or a long-form merge the
+        uniformity gate refuses before the path is decided). Per ticket I16-CONS (Trello
+        7nCZXEru).
+
+        ⚠️ An earlier revision said the field was ABSENT under `always` /
+        `never`. The worker never behaved that way (it reports the path
+        in every mode), and the same contract listed an `always`-mode
+        reason as an example, so the text contradicted itself. The
+        worker's behaviour is the canonical one (ruled 2026-09-24 on
+        compression_e2e's report); a consumer MUST NOT assert absence
+        on a successful merge under a caller-fixed mode. Workflow-create-time surface
         on `processing_plan.jobs[]` lands with I15-CONS
         (Trello YZpBKzOM).
 

package/availability/availability.json

@@ -1,6 +1,6 @@
 {
   "capabilities_profile": "baseline",
-  "capabilities_version": 205,
+  "capabilities_version": 216,
   "endpoints": {
     "DELETE /api/auth/account": {
       "auth": "required",
@@ -1228,7 +1228,7 @@
             },
             "quality": {
               "default": 80,
-              "description": "Compression quality (1 = smallest file, 100 = best quality). For animated GIF this is honoured but real-world size reduction is typically small.",
+              "description": "Compression quality (1 = smallest file, 100 = best quality). For animated GIF this is honoured but real-world size reduction is typically small. Ignored when a TIFF stays a TIFF: it is re-encoded losslessly, so this setting has no effect on a TIFF output. It does apply when a TIFF is converted to another format (for example WebP).",
               "honored_on": [
                 "same_format"
               ],
@@ -1691,10 +1691,8 @@
             },
             "optimization_level": {
               "default": 3,
-              "description": "PNG optimization effort (0-6). Higher = smaller file, slower encode. Default 3.",
-              "honored_on": [
-                "same_format"
-              ],
+              "description": "Currently has no effect on PNG output: it is accepted and ignored.",
+              "honored_on": [],
               "max": 6,
               "min": 0,
               "type": "integer"
@@ -1720,7 +1718,7 @@
             },
             "quality": {
               "default": 80,
-              "description": "Compression quality (1-100). For PNG this is the SINGLE lossy/lossless control: `quality` < 100 applies lossy palette quantization (the value is the quantization level), while `quality: 100` keeps the PNG lossless (lossless optimisation only \u2014 tune the lossless effort via `optimization_level`). 1 = smallest file, 100 = best quality / lossless. There is no separate lossy/lossless toggle for PNG \u2014 it is purely quality-driven.",
+              "description": "Compression quality (1-100). PNG compression reduces the image to a palette of at most 256 colours at every quality setting; this is what makes PNGs smaller. 1 = smallest file, 100 = closest to the original. No value is guaranteed lossless, including 100: when an image with more than 256 colours (a photo, a gradient) is made smaller, it loses some colour detail. If compressing would not make the file smaller, the original is returned unchanged.",
               "honored_on": [
                 "same_format"
               ],
@@ -3796,6 +3794,40 @@
                 "max_total_duration": "PT24H",
                 "max_total_input_size_bytes": 5000000000
               },
+              "input_uniformity": {
+                "attributes": {
+                  "audio": [
+                    "codec",
+                    "sample_rate",
+                    "channels",
+                    "channel_layout",
+                    "sample_fmt",
+                    "timebase"
+                  ],
+                  "field_presence": [
+                    "input_metadata_inconsistent"
+                  ],
+                  "video": [
+                    "codec",
+                    "codec_tag",
+                    "framerate",
+                    "pix_fmt",
+                    "profile",
+                    "resolution",
+                    "sar",
+                    "timebase"
+                  ]
+                },
+                "refusal": "INPUTS_NOT_CONCAT_UNIFORM",
+                "structural": [
+                  "input_count_below_minimum",
+                  "input_topology_not_single_video",
+                  "input_topology_multi_audio",
+                  "input_topology_extra_streams",
+                  "input_stream_topology_mismatch",
+                  "input_stream_order_mismatch"
+                ]
+              },
               "per_tier_constraints": {
                 "enterprise": {
                   "max_total_input_size_bytes": 120000000000
@@ -3915,7 +3947,7 @@
     "split": {
       "availability": "beta",
       "default": false,
-      "description": "Fan one input file into N outputs across GIF, PDF, audio, and\nvideo MIME families. Single-input \u2014 one input file per job, fanned\ninto N outputs per the per-mime-group catalog. Mirrors the\n`merge` / `convert` catalog-split-by-mime-group pattern.\n\n**Three shared modes** (audio + video; the mode discriminator\ngates which option applies per the `depends_on` rules in this\nschema):\n- `interval`: split every N numeric-seconds.\n- `count`: split into N equal-duration pieces (integer 2..=200).\n- `cut_points`: explicit cut points in numeric-seconds (strictly\n  increasing, no duplicates, each > 0 and < probed duration).\n\n**Plus an audio-only `silence` mode** (`beta`, gated by the\n`silence_mode_audio` feature): cut at detected silence gaps via\nserver-side silence detection. Video stays three-mode.\n\n**GIF + PDF use range-based selection** instead of three modes:\n- GIF (`image_gif`): `frame_range` REQUIRED + `output_format`\n  enum {png,webp,jpg}.\n- PDF (`document_pdf`): `page_range` OR `page_groups` (mutually\n  exclusive per `depends_on`).\n\n**Wire format**: numeric seconds (floats allowed for sub-second\nprecision). NOT ISO 8601 duration strings. Matches common\nvideo-tooling conventions.\n\n**200-output hard cap** (`OperationResult.outputs[].maxItems:\n200`). Preflight rejects\nrequests exceeding this BEFORE work as `invalid_options` (422).\nCap math by mode:\n- `interval`: `ceil(probed_duration / interval) <= 200`\n- `count`: enforced by the option's `min: 2 max: 200` range\n- `cut_points`: `cut_points.len() + 1 <= 200`\n- `silence` (audio): resolved segment count (detected gaps + 1)\n  `<= 200`; preflight rejects as `invalid_options` (422)\n- PDF: resolved page count after expansion `<= 200`\n  (cross-ref [`WgCqnMRa`](https://trello.com/c/WgCqnMRa))\n- GIF: resolved frame count after expansion `<= 200`\n\n**Output naming (S3 object key)**: the object-key leaf is 3-digit\nzero-padded \u2014 `output-001` .. `output-200` (ADR-0014 \u00a7D9). This binds the\n**S3 object key**, NOT the user-facing download filename \u2014 the API\nsynthesises that separately (see `OperationDownload.filename` in\n`openapi/api.yaml`). Only the **3-digit zero-padding** follows the convert\nPDF\u2192N precedent \u2014 convert keys are `page-NNN.ext`, split keys are\n`output-NNN.ext`.\n\n**Output envelope binding**:\n- `image_gif`: `PositionIndexed` (frame stream-position 0-based\n  ordinal)\n- `document_pdf`: `PageIndexed` (1-based literal source page number).\n  **`mode: page_range` only** \u2014 each output is one page, so `page_index` is\n  that page. For **`mode: page_groups`** an output spans multiple source\n  pages, so a single `page_index` cannot name them all; that grouped-output\n  semantics is NOT specified by this correction and is deferred (do not\n  assume it is the group's first page \u2014 that is unverified).\n- `audio`: `PositionIndexed` (cut stream-position ordinal)\n- `video`: `PositionIndexed` (cut stream-position ordinal)\n\n**`precision` flag** (audio + video only): `fast` (default) =\npacket-boundary approximate cuts; `exact` = re-encode-aligned\nprecise cuts (`planned` \u2014 the API refuses it at create until the\nre-encode path is priced). Mime_group scoping is the gate \u2014 precision does\nNOT apply to GIF or PDF (frame extraction is exact and PDF page\nselection is exact by definition).\n\n**Long-form video** routes to a separate long-form processing\npath (same `split` OperationType; routing via `processing_class`).\nNo schema-side discriminator beyond MIME detection +\n`processing_class`.\n\n`availability: beta` for the `audio` and `video` mime_groups\n(shape-stable + opt-in, MUST NOT 422). Video activates **both\nclasses**: `video.processing_class.short_form` AND `long_form` are\n`beta`. The `image_gif` and `document_pdf` mime_groups stay\n`availability: planned` until their cross-repo backend support ships;\ndispatch returns `feature_not_available` (422) for the still-planned\ngroups/classes until then.\n",
+      "description": "Fan one input file into N outputs across GIF, PDF, audio, and\nvideo MIME families. Single-input \u2014 one input file per job, fanned\ninto N outputs per the per-mime-group catalog. Mirrors the\n`merge` / `convert` catalog-split-by-mime-group pattern.\n\n**Three shared modes** (audio + video; the mode discriminator\ngates which option applies per the `depends_on` rules in this\nschema):\n- `interval`: split every N numeric-seconds.\n- `count`: split into N equal-duration pieces (integer 2..=200).\n- `cut_points`: explicit cut points in numeric-seconds (strictly\n  increasing, no duplicates, each > 0 and < probed duration).\n\n**Plus an audio-only `silence` mode** (`beta`, gated by the\n`silence_mode_audio` feature): cut at detected silence gaps via\nserver-side silence detection. Video stays three-mode.\n\n**GIF + PDF use range-based selection** instead of three modes:\n- GIF (`image_gif`): `frame_range` REQUIRED + `output_format`\n  enum {png,webp,jpg}.\n- PDF (`document_pdf`): `page_range` OR `page_groups` (mutually\n  exclusive per `depends_on`).\n\n**Wire format**: numeric seconds (floats allowed for sub-second\nprecision). NOT ISO 8601 duration strings. Matches common\nvideo-tooling conventions.\n\n**200-output hard cap** (`OperationResult.outputs[].maxItems:\n200`). Preflight rejects\nrequests exceeding this BEFORE work as `invalid_options` (422).\nCap math by mode:\n- `interval`: `ceil(probed_duration / interval) <= 200`\n- `count`: enforced by the option's `min: 2 max: 200` range\n- `cut_points`: `cut_points.len() + 1 <= 200`\n- `silence` (audio): resolved segment count (detected gaps + 1)\n  `<= 200`; preflight rejects as `invalid_options` (422)\n- PDF: resolved page count after expansion `<= 200`\n  (cross-ref [`WgCqnMRa`](https://trello.com/c/WgCqnMRa))\n- GIF: resolved frame count after expansion `<= 200`\n\n**Output naming (S3 object key)**: the object-key leaf is 3-digit\nzero-padded \u2014 `output-001` .. `output-200` (ADR-0014 \u00a7D9). This binds the\n**S3 object key**, NOT the user-facing download filename \u2014 the API\nsynthesises that separately (see `OperationDownload.filename` in\n`openapi/api.yaml`). Only the **3-digit zero-padding** follows the convert\nPDF\u2192N precedent \u2014 convert keys are `page-NNN.ext`, split keys are\n`output-NNN.ext`.\n\n**Output envelope binding**:\n- `image_gif`: `PositionIndexed` (frame stream-position 0-based\n  ordinal)\n- `document_pdf`: `PageIndexed` (1-based literal source page number).\n  With **`mode: page_range`** each output is one page, so `page_index` is\n  that page. With **`mode: page_groups`** each output is a group of\n  consecutive pages and `page_index` is the group's FIRST source page;\n  the group covers `page_index` .. `page_index + page_groups - 1`, and\n  the last group ends at the document's last page (so it may be\n  shorter). Verified in the worker, not assumed: `compression_lambdas`\n  `crates/split/src/processor.rs` passes each range's START page as the\n  index, over ranges from `resolve_page_groups` (`pdf_range.rs`, tests\n  `page_groups_remainder` / `page_groups_size_larger_than_total`).\n  Specified 2026-09-25 (card `jGTLrpzK`); the group stays `planned`\n  until a production record exists.\n- `audio`: `PositionIndexed` (cut stream-position ordinal)\n- `video`: `PositionIndexed` (cut stream-position ordinal)\n\n**`precision` flag** (audio + video only): `fast` (default) =\npacket-boundary approximate cuts; `exact` = re-encode-aligned\nprecise cuts (`planned` \u2014 the API refuses it at create until the\nre-encode path is priced). Mime_group scoping is the gate \u2014 precision does\nNOT apply to GIF or PDF (frame extraction is exact and PDF page\nselection is exact by definition).\n\n**Long-form video** routes to a separate long-form processing\npath (same `split` OperationType; routing via `processing_class`).\nNo schema-side discriminator beyond MIME detection +\n`processing_class`.\n\n`availability: beta` for the `audio` and `video` mime_groups\n(shape-stable + opt-in, MUST NOT 422). Video activates **both\nclasses**: `video.processing_class.short_form` AND `long_form` are\n`beta`. The `image_gif` and `document_pdf` mime_groups stay\n`availability: planned` until their cross-repo backend support ships;\ndispatch returns `feature_not_available` (422) for the still-planned\ngroups/classes until then.\n",
       "features": {
         "silence_mode_audio": {
           "availability": "beta",
@@ -5125,6 +5157,39 @@
                 "max_input_duration": "PT5M",
                 "max_input_size_bytes": 524288000,
                 "max_output_size_bytes": 524288000
+              },
+              "resolution_bands": {
+                "gt_1080p": {
+                  "basis": "not_served"
+                },
+                "le_720p": {
+                  "basis": "measured",
+                  "constraints": {
+                    "max_input_duration": "PT4M35S"
+                  },
+                  "derivation": {
+                    "cap_s": 600,
+                    "intercept_s": 3.0,
+                    "slope_s_per_s": 2.167
+                  }
+                },
+                "p1080": {
+                  "basis": "measured",
+                  "constraints": {
+                    "max_input_duration": "PT2M3S"
+                  },
+                  "derivation": {
+                    "cap_s": 600,
+                    "intercept_s": -3.0,
+                    "slope_s_per_s": 4.867
+                  }
+                },
+                "unknown": {
+                  "basis": "ruled",
+                  "constraints": {
+                    "max_input_duration": "PT4M35S"
+                  }
+                }
               }
             }
           }
@@ -5236,7 +5301,7 @@
       "sole_op": true
     }
   },
-  "schema_version": "2.211.0",
+  "schema_version": "2.213.0",
   "source_commit": null,
   "user_tier": null,
   "workflow_features": {