@giveitsmaller/contracts 0.88.0 → 0.90.0

package/operation-capabilities/operation-capabilities.json

@@ -101,6 +101,55 @@
       ],
       "availability": "stable",
       "excludes": [
+        {
+          "availability": "stable",
+          "constraint_id": "compress.audio.format_facade.knob",
+          "message": "channels, sample_rate, normalize and trim are not available when compress changes the audio format. Use output_format original, or a convert operation.",
+          "when": {
+            "all": [
+              {
+                "equals": "audio",
+                "field": "input_mime_group"
+              },
+              {
+                "field": "output_format",
+                "in": [
+                  "mp3",
+                  "aac",
+                  "ogg",
+                  "opus",
+                  "flac",
+                  "wav"
+                ]
+              },
+              {
+                "any": [
+                  {
+                    "field": "compress.channels",
+                    "isSet": true
+                  },
+                  {
+                    "field": "compress.sample_rate",
+                    "isSet": true
+                  },
+                  {
+                    "field": "compress.normalize",
+                    "isSet": true
+                  },
+                  {
+                    "field": "compress.trim_start",
+                    "isSet": true
+                  },
+                  {
+                    "field": "compress.trim_end",
+                    "isSet": true
+                  }
+                ]
+              }
+            ]
+          },
+          "wire_code": "feature_not_available"
+        },
         {
           "availability": "stable",
           "constraint_id": "compress.video.target_size.container",
@@ -594,7 +643,7 @@
         "image",
         "video"
       ],
-      "availability": "beta",
+      "availability": "stable",
       "input": {
         "model": "single"
       },
@@ -685,36 +734,6 @@
         "video"
       ],
       "availability": "stable",
-      "excludes": [
-        {
-          "availability": "stable",
-          "constraint_id": "thumbnail.requires_chain_predecessor",
-          "message": "thumbnail must follow a compress or convert operation.",
-          "when": {
-            "all": [
-              {
-                "not": {
-                  "any": [
-                    {
-                      "opSelected": "compress"
-                    },
-                    {
-                      "opSelected": "convert"
-                    }
-                  ]
-                }
-              },
-              {
-                "not": {
-                  "equals": "document",
-                  "field": "input_mime_group"
-                }
-              }
-            ]
-          },
-          "wire_code": "INVALID_OPERATION_ORDER"
-        }
-      ],
       "input": {
         "model": "single"
       },
@@ -849,5 +868,5 @@
       "isAnimated": "maybe"
     }
   },
-  "schema_version": "2.224.0"
+  "schema_version": "2.227.0"
 }

package/operations/schemas/audio_to_video.yaml

@@ -41,12 +41,10 @@ operation:
     ⚠️ ON THE INPUT THE RATE WAS MEASURED WITH — a real photographic 1080p STILL
     plus looped real audio — the point at which the measured rate plus the fixed
     cost reaches the SERVED cap (the worker's 600 s times the register's
-    `headroom`, kikOfB6G), not the raw cap. ⛔ THE DRIVER IS THE STILL'S RESOLUTION, NOT THE
-    DURATION ALONE: a 4K still is MEASURED materially slower (2026-10-02), and the
-    short_form ceiling below is set from that worst case; this schema places NO
-    constraint on the overlay's resolution. Stills above 4K are unmeasured —
-    and what the caller then sees is NOT SETTLED — see the CHANGELOG entry for
-    2.203.0; this contract does not pin a worker's error classification. Measured figures and the conditions for re-listing are in the
+    `headroom`, kikOfB6G), not the raw cap. The still's resolution no longer drives
+    the time: since the worker fits the still ONCE (lambdas 5pWDD20e, 2026-10-06), a
+    4K still measures within 2% of a 1080p one, so the short_form ceiling below is
+    set by the slowest OUTPUT resolution measured. Measured figures and the conditions for re-listing are in the
     CHANGELOG entry for 2.203.0 — the only one of the two records that is
     PUBLISHED (`schemas/manifest-divergence-register.yaml` is working material
     for the drift gate and is not in the npm tarball).
@@ -91,14 +89,12 @@ operation:
         # cap on REAL content, measured by lambdas on staging 2026-10-01 (points
         # and fit in this operation's `evidence` block in
         # schemas/manifest-divergence-register.yaml; a test holds the two equal).
-        # Encode time depends on the OUTPUT resolution and on the STILL's
-        # resolution, not on the input, so this is ONE ceiling: the slowest
-        # measured combination, a 3840x2160 still at `fhd_1080p` output (the
-        # worker decodes and scales the still on every frame; lambdas
-        # `5pWDD20e` scales it once, after which this is re-measured and rises).
-        # RESIDUAL, stated: a still ABOVE 4K is unmeasured and the schema caps no
-        # overlay resolution, so such an input can exceed the cap at this
-        # duration; 5pWDD20e removes the still-resolution dependence entirely.
+        # Encode time depends on the OUTPUT resolution, not on the input, so this
+        # is ONE ceiling: the slowest measured combination. Since lambdas
+        # `5pWDD20e` (fit the still ONCE; on prod in git-0a837e4) a 4K still costs
+        # what a 1080p one does (re-measured to 2160 s, zgzSm3Ag), so the
+        # binding series is now an OLDER, pre-fit-once measurement (fhd_1080p,
+        # lambdas 2026-10-01) — conservative: fit-once only made encodes faster.
         # Every offered output was measured (sd_480p, hd_720p, fhd_1080p).
         # Longer inputs route to long_form.
         short_form:
@@ -106,7 +102,7 @@ operation:
           ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
             max_input_duration: unproven
           constraints:
-            max_input_duration: "PT11M35S"   # floor((cap * headroom - intercept) / slope), 4K still at fhd_1080p
+            max_input_duration: "PT29M43S"   # min of the register's derived ceiling_s over offered outputs + the 4K still (fhd_1080p binds)
         # The Fargate route (no invocation ceiling). The duration is the worker's
         # own guard, MAX_AUDIO_DURATION_SECS 7200 (strict >; KzrquIX7). Planned
         # until a policy-79 record from the Fargate path exists.

package/operations/schemas/compress.yaml

@@ -1084,8 +1084,12 @@ operation:
       # fails on the worker. Not declared because a group-level cap is enforced
       # before route selection, and `output_format != original` is served by the
       # convert facade, which is unmeasured — a cap would newly refuse requests
-      # that may work. Gate: test_assets' convert.audio measurement, then one cap
-      # = min over both routes; per-format groups are card yzLzpHAZ.
+      # that may work. convert.audio was then measured too (2026-10-07): WAV output
+      # is DURATION-bound (~1,080 s at 48 kHz stereo), so no single group value fits
+      # either route (decision 709: stay without a cap). Per-format groups: yzLzpHAZ.
+      # LATE FAILURES ARE TYPED (nWtWmdbn): the output cap -> `output_too_large`;
+      # the worker's input+output working storage (2,148,286,464 B) ->
+      # `input_too_large` — never `unknown`.
       options:
         output_format:
           type: enum
@@ -1132,7 +1136,9 @@ operation:
             `depends_on` — the lossy-output condition is an output-value × input-MIME
             cross-axis the option-to-option `depends_on` cannot model without dropping
             `original` and breaking same-format callers. The other knobs
-            (channels/sample_rate/normalize) apply to all formats.
+            (channels, sample_rate, normalize, trim) apply only with `output_format`
+            absent or `original`: with any explicit `output_format` they are refused
+            with `feature_not_available` (constraint compress.audio.format_facade.knob).
         channels:
           type: integer
           min: 1
@@ -1539,6 +1545,45 @@ operation:
     # rather than the generic unsupported-input reject. EPUB/office/ODF compress and
     # PDF thumbnail/split/convert/transform are UNTOUCHED (Ghostscript's other uses,
     # incl. PDF thumbnails, migrate to Poppler on the lambdas side — no contract change).
+    #
+    # RE-DECLARED 2026-10-08 (owner decision 729 item 1; card U5EPPRPc) on a
+    # permissive stack: qpdf + pikepdf + Pillow (spike: vm_shared/compression_project/
+    # 10_Now/2026-10-08-pdf-compress-spike.md). Re-encodes embedded images (JPEG at
+    # `quality`, longest side capped at `max_image_dimension`) plus a lossless
+    # structural pass, behind a never-larger guard (a result that is not smaller
+    # returns the input, `already_optimal`). Spike: 65-90% on image-heavy and
+    # scanned PDFs at SSIM ~0.997, 1-15% on text-only. `planned` until lambdas builds
+    # the worker and api routes it (co-land: contracts -> lambdas -> api -> e2e).
+    # ONLY the options the worker will read are declared.
+    document_pdf:
+      availability: planned
+      mimes:
+        - application/pdf
+      # Input ceiling (lambdas, 2026-10-09: the worker CLI takes it as a REQUIRED
+      # --max-input-bytes and holds no number of its own). 200 MiB, the value every
+      # other compress document group declares. Not measured on the PDF worker
+      # (not built yet), so `unproven` until lambdas' corner run.
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
+      max_input_size_bytes: 209715200   # 200 MiB
+      options:
+        quality:
+          type: integer
+          min: 1
+          max: 100
+          default: 70
+          description: >-
+            JPEG quality for the images inside the PDF (1 = smallest, 100 = best).
+            Text and vector content are not re-encoded.
+        max_image_dimension:
+          type: integer
+          min: 64
+          max: 10000
+          default: 1600
+          description: >-
+            Largest width or height, in pixels, for each image inside the PDF; larger
+            images are scaled down, keeping their shape. Smaller images are left as
+            they are.
 
     document_office:
       mimes:

package/operations/schemas/convert.yaml

@@ -380,6 +380,16 @@ operation:
           type: enum
           values: [mp4, webm, ogg, gif, mov, mkv]
           required: true
+          # GIF LENGTH CAP (hub decision 715 applying owner decision 698(6), card
+          # zfFnNYRY): a GIF's KEPT window (input duration minus trim_start and
+          # trim_end) may not exceed PT10S — at the 12 fps / 480 px defaults that
+          # is ~7 MB (lambdas: ~0.71 MB/s), inside Slack/Discord's ~8 MB. Refused at
+          # create with GIF_TOO_LONG; steer: trim to 10 s, or choose mp4/webm
+          # (animated WebP from video is not offered: card d7KfRjvw). FORMAT.md
+          # §per_value_constraints. The worker backstops the same value.
+          per_value_constraints:
+            gif:
+              max_kept_duration: "PT10S"
           # The video codec is DETERMINED by the target container, NOT a caller
           # choice: the convert-video worker hard-wires it per container
           # (mp4 -> H.264/libx264, webm -> VP9, ogg -> Theora, gif -> palette,
@@ -445,7 +455,9 @@ operation:
         # ffmpeg-native (palettegen/paletteuse), gated `depends_on output_format: gif`.
         # STABLE — lambdas staging-proven (convert #248: custom fps=10/width=320/
         # max_colors=64/loop=2/dither=floyd_steinberg = 31 frames, 320x180, 117KB vs
-        # default 46 frames/640x360/257KB; each lever demonstrably applied). Shapes
+        # default 46 frames/640x360/257KB; each lever demonstrably applied). HISTORICAL:
+        # that "default" run used the OLD defaults (fps 15, width 640); owner decision
+        # 698(5) (card mcWeBGMB, 2026-10-07) moved them to fps 12 / width 480. Shapes
         # pinned with lambdas pre-code (their ffmpeg impl, NOT gifsicle). `lossy` is
         # deliberately NOT here — it needs the gifsicle binary (a fast-follow);
         # lambdas pings when that pass lands.
@@ -453,7 +465,7 @@ operation:
           type: float
           min: 1
           max: 50
-          default: 15
+          default: 12   # was 15; owner decision 698(5), mcWeBGMB
           depends_on: { output_format: gif }
           description: >
             Output frame rate for video → GIF. Lower = fewer frames = smaller file.
@@ -462,7 +474,7 @@ operation:
           type: integer
           min: 1
           max: 4096
-          default: 640
+          default: 480   # was 640; owner decision 698(5), mcWeBGMB
           depends_on: { output_format: gif }
           description: >
             Maximum output width in pixels — a downscale-only CAP (a source narrower
@@ -506,7 +518,14 @@ operation:
           required: true
           # `opus` added 2026-06-20 — the convert-audio worker produces it
           # (audio/ogg container, .opus extension; lambdas-confirmed live).
-          description: "Target format"
+          # WAV DURATION LIMIT (nWtWmdbn, test_assets slice 10, staging 2026-10-07): WAV
+          # output is uncompressed, so it hits the worker's 209,715,200 B output cap at
+          # 192,000 B/s (48 kHz stereo 16-bit): last pass 1,080 s, first fail 1,100 s,
+          # whatever the input codec. Stated in the description; no cap is declared (decisions 708/709).
+          description: >-
+            Target format. WAV is uncompressed, so its length is limited by size: about
+            18 minutes at 48 kHz stereo 16-bit, longer for mono or lower sample rates,
+            shorter for more channels or higher rates. Past that the job fails.
         bitrate:
           type: enum
           value_type: integer

package/operations/schemas/split.yaml

@@ -2,7 +2,7 @@ schema_version: "2.0.0"
 
 operation:
   type: split
-  availability: beta
+  availability: stable   # 2026-10-08 (decision 729): the OPERATION is stable so a stable group can resolve stable; every other group pins its own availability below
   description: |
     Fan one input file into N outputs across GIF, PDF, audio, and
     video MIME families. Single-input — one input file per job, fanned
@@ -85,8 +85,9 @@ operation:
     `availability: beta` for the `audio` and `video` mime_groups
     (shape-stable + opt-in, MUST NOT 422). Video activates **both
     classes**: `video.processing_class.short_form` AND `long_form` are
-    `beta`. The `document_pdf` mime_group is `beta` too (2026-10-01), and
-    `image_gif` is `stable` (GIF to frames, 2026-06-21). A value or class
+    `beta`. The `document_pdf` mime_group is `stable` (owner decision 729,
+    prod-proven 2026-10-08), and `image_gif` is `stable` (GIF to frames,
+    prod-proven 2026-10-08). A value or class
     still tagged `planned` (e.g. `precision: exact`) is refused with
     `feature_not_available` (422).
   default: false
@@ -139,7 +140,7 @@ operation:
 
     # PDF base — page-split via qpdf or pdftk equivalent.
     document_pdf:
-      availability: beta   # jGTLrpzK, 2026-10-01: staging worker-direct proof, both modes
+      availability: stable   # owner decision 729 item 2: PROD proof of both modes (e2e, 2026-10-08); beta since 2026-10-01 (jGTLrpzK)
       mimes:
         - application/pdf
       # Byte bound (lambdas, 2026-10-01): the worker downloads the PDF to /tmp

package/operations/schemas/thumbnail.yaml

@@ -5,9 +5,9 @@ operation:
   description: >-
     Resize an image to specific dimensions, or extract a preview frame/page from a video
     or document. For images this is a full resizer (1-16384px), not just small previews.
-    An image or video thumbnail must follow a compress or convert in the same job; a
-    document thumbnail may stand alone. Image types that compress does not accept (BMP,
-    HEIC) therefore need a convert first.
+    A thumbnail can be the only operation on an image, video or document upload. In a job with other operations
+    it is made from the ORIGINAL file by default, alongside them; set `base:
+    processed_base` to make it from the processed result instead.
   default: false
   input_model: single
 
@@ -33,6 +33,17 @@ operation:
       # is NOT the real limit — e.g. 6000x6000 (36MP) is rejected though each axis
       # is < 16384; 6000x2000 (12MP) is fine. The worker enforces this regardless.
       max_output_pixels: 16000000
+      # INPUT CEILINGS (owner decision 720, 2026-10-08): a thumbnail may now be the
+      # first operation, so it is judged on the ORIGINAL upload at create. Values
+      # mirror compress.image (370 MB / 90 MP, lambdas' 607(d) corner run on the
+      # COMPRESSION worker) — lambdas states they fit thumbnail-image's /tmp and its
+      # 100 MP decode cap, with no worker change. Not measured on THIS worker, so
+      # `unproven`.
+      ceiling_basis:   # 607(d): proven at the declared value, or not yet (FORMAT.md §ceiling_basis)
+        max_input_size_bytes: unproven
+        max_input_pixels: unproven
+      max_input_size_bytes: 370000000
+      max_input_pixels: 90000000
       options:
         # IMAGE input is a full resizer (Lanczos): width/height accept the
         # worker's real 1-16384px range (area-capped above) — this op is the

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@giveitsmaller/contracts",
-  "version": "0.88.0",
-  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.224.0.",
-  "gislContractsSpec": "v2.224.0",
+  "version": "0.90.0",
+  "description": "Generated contract types for GISL (Give It Smaller). Generated from compression_contracts spec v2.227.0.",
+  "gislContractsSpec": "v2.227.0",
   "license": "Apache-2.0",
   "homepage": "https://docs.giveitsmaller.com",
   "bugs": {