@giveitsmaller/contracts 0.80.0 → 0.82.0

package/operations/schemas/merge.yaml

@@ -184,9 +184,24 @@ operation:
         # two-trigger state — corrected here.
         short_form_concat:
           availability: stable
+          # 607(d), owner decision 2026-09-26 ('yes to both'): the served ceiling is
+          # the STREAM-COPY one, 500 MiB / PT5M total, PROVEN by lambdas' corner run
+          # (300 s / 480,884,812 B in 12 s, normalize_audio: false, 720p, git-2166848).
+          # PROVEN on BOTH axes at the exact corner: 2 x 262,144,000 B = 524,288,000 B /
+          # 300.000 s, normalize_audio false, stream copy, 14.0 s billed (lambdas,
+          # staging git-2166848, 2026-09-26). The boundary is safe by code: stream
+          # copy is refused only when the SUM is strictly greater than 500 MiB.
+          # It was 1 GiB, which is NOT servable: above 500 MiB total the worker
+          # re-encodes, and a 300 s 720p re-encode exceeds merge's 720 s cap
+          # (processing_limit_exceeded). So `normalize_audio` now defaults to FALSE
+          # (below), and turning it on lowers the limit (120 s / 193,711,902 B at 720p
+          # measured with it on). lambdas card: make the re-encode path fit the cap.
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_total_input_size_bytes: proven
+            max_total_duration: proven
           constraints:
             max_total_duration: "PT5M"
-            max_total_input_size_bytes: 1073741824   # 1 GiB combined
+            max_total_input_size_bytes: 524288000    # 500 MiB combined (the stream-copy ceiling; was 1 GiB)
         long_form_re_encode:
           # planned -> beta (CON-1, ADR-0011) -> stable (CON-2b, HWNXo1kk):
           # staging-proven 2026-07-07 via long-form-merge.spec.ts Phase 2
@@ -224,6 +239,11 @@ operation:
               # Not a stream kind: a video/audio stream FIELD present on one
               # input and absent on another (lambdas' input_metadata_inconsistent).
               field_presence: [input_metadata_inconsistent]
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_total_input_size_bytes: unproven
+            max_total_duration: unproven
+            per_tier.max.max_total_input_size_bytes: unproven
+            per_tier.enterprise.max_total_input_size_bytes: unproven
           constraints:                              # baseline = every tier without a per_tier_constraints override
             max_total_duration: "PT24H"              # 24h (was PT12H) — binding Enterprise ceiling
             max_total_input_size_bytes: 5000000000   # 5 GB combined (Pro)
@@ -298,7 +318,29 @@ operation:
           description: "Crossfade duration in seconds"
         normalize_audio:
           type: boolean
-          default: true
+          # KNOWN LIMITATION (hub ruling 2026-09-26, lambdas 7sbbABVG). CORRECTED
+          # 2026-09-26 17:32 by lambdas' measurement (local, static FFmpeg 7.1.1,
+          # instrument validated against 0 ms and +100 ms controls): the default
+          # stream-copy concat does NOT accumulate. Each join is offset by a
+          # constant, about +7.5 ms after a clip whose audio is longer than its
+          # video and about -37 ms (audio early) after one whose audio is shorter,
+          # because the concat demuxer drops each later file's AAC priming skip.
+          # The first draft said the offset ACCUMULATED; that was an inference, not
+          # a measurement, and is withdrawn. The normalize_audio=true route did
+          # accumulate (+362 ms by the 8th join); lambdas fixed that in cTk1wbib,
+          # which is NOT yet deployed. The deployed `true` route was measured at
+          # one join only (-44 ms), so the description does not claim
+          # "not cumulative" for `true` (codex #620). Whether to re-encode the default route's audio to
+          # remove the constant is an OWNER decision. Hub ruling 17:33: keep the
+          # description sentence until a REAL source measured on staging shows a
+          # per-join offset above 45 ms (then widen it), or the owner rules.
+          # DEFAULT FALSE since 2026-09-26 (owner decision, 607(d)): with it on,
+          # every video merge re-encodes, and the re-encode does not fit the
+          # short_form ceiling. THE API APPLIES THIS DEFAULT: when a request omits
+          # the option, api writes `normalize_audio: false` into the worker
+          # message (ruled for api, 2026-09-26), so the outcome never depends on
+          # the worker's own absent-default (which lambdas also flip, UceDvESv).
+          default: false
           # 🔴 UNAVAILABLE ON LONG-FORM — and this one needed a RULING, not a
           # mechanical marking. Long-form FORCES loudnorm off, so:
           #   accepting the default `true` is a SILENT NO-OP — the caller asked
@@ -316,9 +358,17 @@ operation:
           per_class_availability:
             long_form_re_encode: { availability: planned }
           description: >-
-            Normalize audio levels across all clips. NOT available on the
-            long-form path, which forces loudness normalisation off — a defaulted
-            value is dropped and reported there rather than silently ignored.
+            Normalize audio levels across all clips. Off by default (the server
+            applies the default when the option is omitted). Known issue:
+            at each join of video clips, audio may lead video by up to about
+            40 ms with the default (`false`); the offset is per join and does
+            not add up across joins. With `true`, an offset of about 45 ms
+            was measured at a single join; merges with more joins are not
+            yet measured on that setting. Turning it
+            on re-encodes every clip, which lowers the limit: about 120 seconds
+            of combined 720p video was measured to fit, instead of 5 minutes.
+            NOT available on the long-form path, which forces loudness
+            normalisation off.
 
         re_encode_mode:
           type: enum

package/operations/schemas/split.yaml

@@ -502,6 +502,9 @@ operation:
       processing_class:
         short_form:
           availability: beta
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
@@ -516,6 +519,11 @@ operation:
           # Routes per ADR-0014 §D10 — same split OperationType, dedicated
           # stream-copy segmenter binary (NOT the long-form compress worker).
           availability: beta
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/thumbnail.yaml

@@ -103,15 +103,28 @@ operation:
         # input file scanning rather than full processing time.
         short_form:
           availability: stable
+          # RAISED 2026-09-26 (owner decision, 607(d)) to what the worker PROVED
+          # (lambdas staging corner run, git-2166848): 30 min passes in ~1 s (FFmpeg
+          # seeks without decoding the footage before it), and size passes to
+          # 995,015,958 B; it FAILS at ~1 GiB because the input is downloaded whole
+          # to a 1 GiB /tmp. 950,000,000 B leaves headroom under that failure.
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: proven
+            max_input_duration: proven
           constraints:
-            max_input_duration: "PT5M"
-            max_input_size_bytes: 524288000
+            max_input_duration: "PT30M"
+            max_input_size_bytes: 950000000
         long_form:
           # Stays planned (CON-1 flips only compress.video.long_form +
           # merge.video.long_form_re_encode). Per-tier caps per ADR-0011 —
           # advertised shape; availability gates execution off (422).
           # No max_output_size_bytes: thumbnail output is a single bounded image.
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)
@@ -265,6 +278,10 @@ operation:
       # literal and the value `compression_lambdas`' manifest has declared since
       # 2026-08-25. Undeclared here until now, which is why a create could be
       # accepted and then refused: see jLxWpQEZ.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 157286400
       # Same 16MP output-area wall as image (width*height <= max_output_pixels).
       # The page is rendered at 150 DPI (render-side ~25MP raster) then resized;
@@ -403,6 +420,10 @@ operation:
       # 2026-07-18 — THIRTY-NINE DAYS before a 128,232,024-byte EPUB was accepted,
       # billed, and refused by it on 2026-08-26. The number was public on their
       # side the whole time; the silence was HERE. jLxWpQEZ.
+      # PROVEN 2026-09-26: lambdas staging corner run (git-2166848), within 1-2% of the ceiling;
+      # one step past is refused by the worker. vm_shared 10_Now/lambdas-corner-doc-results-2026-09-26.md
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: proven
       max_input_size_bytes: 104857600
       max_output_pixels: 16000000
       options:

package/operations/schemas/transform.yaml

@@ -140,12 +140,20 @@ operation:
         # planned until the Fargate re-encode route is real and costed (ADR-0026).
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
             max_output_size_bytes: 524288000
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/video_text_watermark.yaml

@@ -49,6 +49,9 @@ operation:
       processing_class:
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
@@ -109,6 +112,11 @@ operation:
                 max_input_duration: "PT4M35S"     # = le_720p (decision 343)
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/operations/schemas/video_watermark.yaml

@@ -70,12 +70,20 @@ operation:
       processing_class:
         short_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
           constraints:
             max_input_duration: "PT5M"
             max_input_size_bytes: 524288000
             max_output_size_bytes: 524288000
         long_form:
           availability: planned
+          ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+            max_input_size_bytes: unproven
+            max_input_duration: unproven
+            per_tier.max.max_input_size_bytes: unproven
+            per_tier.enterprise.max_input_size_bytes: unproven
           constraints:                            # baseline = every tier without a per_tier_constraints override
             max_input_duration: "PT12H"
             max_input_size_bytes: 5000000000       # 5 GB (Pro)

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@giveitsmaller/contracts",
-  "version": "0.80.0",
-  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.215.0.",
-  "gislContractsSpec": "v2.215.0",
+  "version": "0.82.0",
+  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.217.0.",
+  "gislContractsSpec": "v2.217.0",
   "license": "Apache-2.0",
   "homepage": "https://docs.giveitsmaller.com",
   "bugs": {
@@ -31,6 +31,7 @@
     "./openapi/api.yaml": "./openapi/api.yaml",
     "./asyncapi/events.yaml": "./asyncapi/events.yaml",
     "./resolution-bands.yaml": "./resolution-bands.yaml",
+    "./anonymous-policy.yaml": "./anonymous-policy.yaml",
     "./availability/availability.json": "./availability/availability.json",
     "./accepted-options/accepted-options.json": "./accepted-options/accepted-options.json",
     "./accepted-options/image-output-routes.json": "./accepted-options/image-output-routes.json",
@@ -65,7 +66,8 @@
     "accepted-options/image-output-routes.json",
     "operation-capabilities/operation-capabilities.json",
     "code-builder/code-builder-metadata.json",
-    "resolution-bands.yaml"
+    "resolution-bands.yaml",
+    "anonymous-policy.yaml"
   ],
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('dist', {recursive: true, force: true})\"",