@giveitsmaller/contracts 0.80.0 → 0.81.0

package/operations/schemas/compress.yaml

@@ -97,6 +97,8 @@ operation:
       # Resize-inside-Output shares the convert resize engine's 16MP output-area
       # wall — the per-axis 16384 cap can't express it (FORMAT.md §max_output_pixels).
       max_output_pixels: 16000000
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 524288000   # 500 MiB compress input ceiling (uKsFzORi)
       options:
         quality:
@@ -277,6 +279,8 @@ operation:
       mimes:
         - image/png
       max_output_pixels: 16000000
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 524288000   # 500 MiB compress input ceiling (uKsFzORi)
       options:
         # PROVENANCE (author-side, NOT user-facing — kept out of the description per
@@ -432,6 +436,8 @@ operation:
       mimes:
         - image/avif
       max_output_pixels: 16000000
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 20971520   # 20 MiB compress input ceiling (uKsFzORi; AVIF decode OOM guard, worker AVIF_MAX_MB)
       options:
         quality:
@@ -600,6 +606,8 @@ operation:
       mimes:
         - image/webp
       max_output_pixels: 16000000
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 524288000   # 500 MiB compress input ceiling (uKsFzORi)
       options:
         quality:
@@ -824,6 +832,8 @@ operation:
       # PRE-EXISTING, not introduced by the 2026-07-21 restore: the same 500 MiB
       # applied while this route was stable before 2026-07-17. Recorded rather
       # than silently carried.
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 524288000   # 500 MiB compress input ceiling (uKsFzORi; image/* default)
       options:
         # No `quality`: compress SVG is SVG->SVG via SVGO (VISUALLY PRESERVING
@@ -885,6 +895,8 @@ operation:
         - image/gif
         - image/tiff
       max_output_pixels: 16000000
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
       max_input_size_bytes: 524288000   # 500 MiB compress input ceiling (uKsFzORi)
       options:
         quality:
@@ -1095,6 +1107,12 @@ operation:
         # server-decided per plan v5 §F8 round 7.
         short_form:
           availability: stable
+          # PROVEN 2026-09-26 (lambdas staging corner run, git-2166848; vm_shared 10_Now/lambdas-corner-video-results-2026-09-26.md):
+          # 300 s / ~480 MB passed at 360p, 720p, 1080p and 4K; at 4K one step past BOTH axes (360 s / 575,743,715 B) passed.
+          # Caveat: 4K ran 446-529 s against the worker's 600 s encode cap on synthetic content; thin margin.
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: proven
+            max_input_duration: proven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000        # 500 MiB
@@ -1119,6 +1137,11 @@ operation:
           # (`limits.max_upload_size_bytes`) still refuses first — that is the
           # quota, and it is a separate, request-level limit.
           availability: stable
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)
@@ -1468,6 +1491,10 @@ operation:
       # MAX_IMAGE_ENTRY_SIZE 50 MB, MAX_ZIP_ENTRIES 10,000,
       # MAX_CUMULATIVE_IMAGE_BYTES 500 MB bound what a document expands INTO;
       # this bounds what we ACCEPT.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 209715200
       # See the document_pdf honesty note: the worker reads ONLY `quality` today;
       # the per-format options are `planned` (advertised-ahead, FE-hidden).
@@ -1519,6 +1546,10 @@ operation:
       # MAX_IMAGE_ENTRY_SIZE 50 MB, MAX_ZIP_ENTRIES 10,000,
       # MAX_CUMULATIVE_IMAGE_BYTES 500 MB bound what a document expands INTO;
       # this bounds what we ACCEPT.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 209715200
       # See the document_pdf honesty note: worker reads ONLY `quality`; the rest `planned`.
       options:
@@ -1563,6 +1594,10 @@ operation:
       # MAX_IMAGE_ENTRY_SIZE 50 MB, MAX_ZIP_ENTRIES 10,000,
       # MAX_CUMULATIVE_IMAGE_BYTES 500 MB bound what a document expands INTO;
       # this bounds what we ACCEPT.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 209715200
       # See the document_pdf honesty note: worker reads ONLY `quality`; the rest `planned`.
       options:

package/operations/schemas/convert.yaml

@@ -298,15 +298,51 @@ operation:
         # F8 long-form video tier (per ticket I15-CONS).
         short_form:
           availability: stable
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
             max_output_size_bytes: 524288000
+          # PROVEN resolution bands (owner decision 607(d), 2026-09-26: advertise
+          # only limits we have proven). Each ceiling is the LONGEST SUCCESSFUL run
+          # lambdas measured at that resolution (9c5mOnq1, staging `$LATEST`,
+          # 2026-09-18, mp4 -> webm real VP9 re-encode, billed seconds from each
+          # invocation's REPORT line). No fitted model: lambdas' two-parameter fit
+          # failed its own prediction, so none is shipped. The class PT5M above is
+          # NOT proven at 720p or 1080p; the bands are what binds. le_720p is sized
+          # for 720p (a 360p run of 295 s also succeeded; a finer band would need
+          # a new band in schemas/resolution-bands.yaml). Every 4K attempt
+          # exceeded the cap, so gt_1080p is not served. `unknown` is ruled =
+          # le_720p (decision 343 precedent).
+          resolution_bands:
+            le_720p:
+              basis: proven
+              source: 9c5mOnq1-720p-145s   # availability/staging-corner-measurements.yaml
+              constraints:
+                max_input_duration: "PT2M25S"
+            p1080:
+              basis: proven
+              source: 9c5mOnq1-1080p-80s   # availability/staging-corner-measurements.yaml
+              constraints:
+                max_input_duration: "PT1M20S"
+            gt_1080p:
+              basis: not_served
+            unknown:
+              basis: ruled
+              constraints:
+                max_input_duration: "PT2M25S"
         long_form:
           # Stays planned (CON-1 flips only compress.video.long_form +
           # merge.video.long_form_re_encode). Per-tier caps per ADR-0011 —
           # advertised shape; availability gates execution off (422).
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/custom_luma.yaml

@@ -58,6 +58,9 @@ operation:
         # ships.
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
@@ -67,6 +70,11 @@ operation:
           # merge.video.long_form_re_encode). Per-tier caps per ADR-0011 —
           # advertised shape; availability gates execution off (422).
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/merge.yaml

@@ -184,9 +184,24 @@ operation:
         # two-trigger state — corrected here.
         short_form_concat:
           availability: stable
+          # 607(d), owner decision 2026-09-26 ('yes to both'): the served ceiling is
+          # the STREAM-COPY one, 500 MiB / PT5M total, PROVEN by lambdas' corner run
+          # (300 s / 480,884,812 B in 12 s, normalize_audio: false, 720p, git-2166848).
+          # PROVEN on BOTH axes at the exact corner: 2 x 262,144,000 B = 524,288,000 B /
+          # 300.000 s, normalize_audio false, stream copy, 14.0 s billed (lambdas,
+          # staging git-2166848, 2026-09-26). The boundary is safe by code: stream
+          # copy is refused only when the SUM is strictly greater than 500 MiB.
+          # It was 1 GiB, which is NOT servable: above 500 MiB total the worker
+          # re-encodes, and a 300 s 720p re-encode exceeds merge's 720 s cap
+          # (processing_limit_exceeded). So `normalize_audio` now defaults to FALSE
+          # (below), and turning it on lowers the limit (120 s / 193,711,902 B at 720p
+          # measured with it on). lambdas card: make the re-encode path fit the cap.
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_total_input_size_bytes: proven
+            max_total_duration: proven
           constraints:
             max_total_duration: "PT5M"
-            max_total_input_size_bytes: 1073741824   # 1 GiB combined
+            max_total_input_size_bytes: 524288000    # 500 MiB combined (the stream-copy ceiling; was 1 GiB)
         long_form_re_encode:
           # planned -> beta (CON-1, ADR-0011) -> stable (CON-2b, HWNXo1kk):
           # staging-proven 2026-07-07 via long-form-merge.spec.ts Phase 2
@@ -224,6 +239,11 @@ operation:
               # Not a stream kind: a video/audio stream FIELD present on one
               # input and absent on another (lambdas' input_metadata_inconsistent).
               field_presence: [input_metadata_inconsistent]
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_total_input_size_bytes: unproven
+            max_total_duration: unproven
+            per_tier.max.max_total_input_size_bytes: unproven
+            per_tier.enterprise.max_total_input_size_bytes: unproven
           constraints:                              # baseline = every tier without a per_tier_constraints override
             max_total_duration: "PT24H"              # 24h (was PT12H) — binding Enterprise ceiling
             max_total_input_size_bytes: 5000000000   # 5 GB combined (Pro)
@@ -298,7 +318,13 @@ operation:
           description: "Crossfade duration in seconds"
         normalize_audio:
           type: boolean
-          default: true
+          # DEFAULT FALSE since 2026-09-26 (owner decision, 607(d)): with it on,
+          # every video merge re-encodes, and the re-encode does not fit the
+          # short_form ceiling. THE API APPLIES THIS DEFAULT: when a request omits
+          # the option, api writes `normalize_audio: false` into the worker
+          # message (ruled for api, 2026-09-26), so the outcome never depends on
+          # the worker's own absent-default (which lambdas also flip, UceDvESv).
+          default: false
           # 🔴 UNAVAILABLE ON LONG-FORM — and this one needed a RULING, not a
           # mechanical marking. Long-form FORCES loudnorm off, so:
           #   accepting the default `true` is a SILENT NO-OP — the caller asked
@@ -316,9 +342,12 @@ operation:
           per_class_availability:
             long_form_re_encode: { availability: planned }
           description: >-
-            Normalize audio levels across all clips. NOT available on the
-            long-form path, which forces loudness normalisation off — a defaulted
-            value is dropped and reported there rather than silently ignored.
+            Normalize audio levels across all clips. Off by default (the server
+            applies the default when the option is omitted). Turning it
+            on re-encodes every clip, which lowers the limit: about 120 seconds
+            of combined 720p video was measured to fit, instead of 5 minutes.
+            NOT available on the long-form path, which forces loudness
+            normalisation off.
 
         re_encode_mode:
           type: enum

package/operations/schemas/split.yaml

@@ -502,6 +502,9 @@ operation:
       processing_class:
         short_form:
           availability: beta
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
@@ -516,6 +519,11 @@ operation:
           # Routes per ADR-0014 §D10 — same split OperationType, dedicated
           # stream-copy segmenter binary (NOT the long-form compress worker).
           availability: beta
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/thumbnail.yaml

@@ -103,15 +103,28 @@ operation:
         # input file scanning rather than full processing time.
         short_form:
           availability: stable
+          # RAISED 2026-09-26 (owner decision, 607(d)) to what the worker PROVED
+          # (lambdas staging corner run, git-2166848): 30 min passes in ~1 s (FFmpeg
+          # seeks without decoding the footage before it), and size passes to
+          # 995,015,958 B; it FAILS at ~1 GiB because the input is downloaded whole
+          # to a 1 GiB /tmp. 950,000,000 B leaves headroom under that failure.
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: proven
+            max_input_duration: proven
           constraints:
-            max_input_duration: "PT5M"
-            max_input_size_bytes: 524288000
+            max_input_duration: "PT30M"
+            max_input_size_bytes: 950000000
         long_form:
           # Stays planned (CON-1 flips only compress.video.long_form +
           # merge.video.long_form_re_encode). Per-tier caps per ADR-0011 —
           # advertised shape; availability gates execution off (422).
           # No max_output_size_bytes: thumbnail output is a single bounded image.
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)
@@ -265,6 +278,10 @@ operation:
       # literal and the value `compression_lambdas`' manifest has declared since
       # 2026-08-25. Undeclared here until now, which is why a create could be
       # accepted and then refused: see jLxWpQEZ.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 157286400
       # Same 16MP output-area wall as image (width*height <= max_output_pixels).
       # The page is rendered at 150 DPI (render-side ~25MP raster) then resized;
@@ -403,6 +420,10 @@ operation:
       # 2026-07-18 — THIRTY-NINE DAYS before a 128,232,024-byte EPUB was accepted,
       # billed, and refused by it on 2026-08-26. The number was public on their
       # side the whole time; the silence was HERE. jLxWpQEZ.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 104857600
       max_output_pixels: 16000000
       options:

package/operations/schemas/transform.yaml

@@ -140,12 +140,20 @@ operation:
         # planned until the Fargate re-encode route is real and costed (ADR-0026).
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
             max_output_size_bytes: 524288000
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/video_text_watermark.yaml

@@ -49,6 +49,9 @@ operation:
       processing_class:
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
@@ -109,6 +112,11 @@ operation:
                 max_input_duration: "PT4M35S"     # = le_720p (decision 343)
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/video_watermark.yaml

@@ -70,12 +70,20 @@ operation:
       processing_class:
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
             max_output_size_bytes: 524288000
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@giveitsmaller/contracts",
-  "version": "0.80.0",
-  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.215.0.",
-  "gislContractsSpec": "v2.215.0",
+  "version": "0.81.0",
+  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.216.0.",
+  "gislContractsSpec": "v2.216.0",
   "license": "Apache-2.0",
   "homepage": "https://docs.giveitsmaller.com",
   "bugs": {