Merge branch 'worktree-test+suite-overhaul-and-real-fixtures' into chore/consolidate-v2.0.0

# Conflicts:
#	tests/integration/generated/settings-matrix.test.ts
#	tests/integration/platform/api.test.ts
#	tests/integration/platform/concurrent.test.ts
#	tests/integration/platform/factory-multi-input.test.ts
#	tests/integration/security/adversarial-comprehensive.test.ts
#	tests/integration/security/adversarial-coverage-gaps.test.ts
#	tests/integration/security/adversarial-extended.test.ts
#	tests/integration/security/adversarial-final-gaps.test.ts
#	tests/integration/security/adversarial-matrix.test.ts
#	tests/integration/security/adversarial-security.test.ts
#	tests/integration/security/adversarial.test.ts
#	tests/integration/tools/image/color-adjustments.test.ts

tests/integration/tools/video/aspect-pad.test.ts

@@ -0,0 +1,95 @@
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { ffmpegAvailable, probeMedia } from "@snapotter/media-engine";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { canvasFor } from "../../../../apps/api/src/routes/tools/aspect-pad.js";
+import { fixtures, readFixture } from "../../../fixtures/index.js";
+import {
+  buildTestApp,
+  createMultipartPayload,
+  loginAsAdmin,
+  type TestApp,
+} from "../../test-server.js";
+
+const MP4 = readFixture(fixtures.video.tiny("mp4"));
+
+let testApp: TestApp;
+let adminToken: string;
+let sourceW: number;
+let sourceH: number;
+
+beforeAll(async () => {
+  testApp = await buildTestApp();
+  adminToken = await loginAsAdmin(testApp.app);
+
+  const tmpDir = mkdtempSync(join(tmpdir(), "apad-src-"));
+  const srcFile = join(tmpDir, "tiny.mp4");
+  writeFileSync(srcFile, MP4);
+  const info = await probeMedia(srcFile);
+  const v = info.streams.find((s) => s.type === "video");
+  sourceW = v?.width ?? 0;
+  sourceH = v?.height ?? 0;
+}, 30_000);
+
+afterAll(async () => {
+  await testApp.cleanup();
+}, 10_000);
+
+async function runTool(settings: Record<string, unknown>) {
+  const { body, contentType } = createMultipartPayload([
+    { name: "file", filename: "tiny.mp4", contentType: "video/mp4", content: MP4 },
+    { name: "settings", content: JSON.stringify(settings) },
+  ]);
+  return testApp.app.inject({
+    method: "POST",
+    url: "/api/v1/tools/video/aspect-pad",
+    headers: { authorization: `Bearer ${adminToken}`, "content-type": contentType },
+    body,
+  });
+}
+
+describe.skipIf(!ffmpegAvailable())("aspect-pad (requires ffmpeg)", () => {
+  it("pads to 1:1 producing a square output", async () => {
+    const res = await runTool({ target: "1:1" });
+    expect(res.statusCode).toBe(200);
+    const envelope = JSON.parse(res.body);
+    expect(envelope.downloadUrl).toBeDefined();
+
+    const dl = await testApp.app.inject({ method: "GET", url: envelope.downloadUrl });
+    expect(dl.statusCode).toBe(200);
+    expect(dl.rawPayload.length).toBeGreaterThan(100);
+
+    const tmpDir = mkdtempSync(join(tmpdir(), "apad-test-"));
+    const probeFile = join(tmpDir, "padded.mp4");
+    writeFileSync(probeFile, dl.rawPayload);
+    const info = await probeMedia(probeFile);
+    const v = info.streams.find((s) => s.type === "video");
+    expect(v?.width).toBe(v?.height);
+  }, 60_000);
+
+  it("pads to 9:16 with dims matching canvasFor output", async () => {
+    const res = await runTool({ target: "9:16" });
+    expect(res.statusCode).toBe(200);
+    const envelope = JSON.parse(res.body);
+    expect(envelope.downloadUrl).toBeDefined();
+
+    const dl = await testApp.app.inject({ method: "GET", url: envelope.downloadUrl });
+    expect(dl.statusCode).toBe(200);
+
+    const tmpDir = mkdtempSync(join(tmpdir(), "apad-test2-"));
+    const probeFile = join(tmpDir, "padded916.mp4");
+    writeFileSync(probeFile, dl.rawPayload);
+    const info = await probeMedia(probeFile);
+    const v = info.streams.find((s) => s.type === "video");
+
+    const expected = canvasFor(sourceW, sourceH, 9, 16);
+    expect(v?.width).toBe(expected.cw);
+    expect(v?.height).toBe(expected.ch);
+  }, 60_000);
+
+  it("rejects invalid color with 400", async () => {
+    const res = await runTool({ color: "red" });
+    expect(res.statusCode).toBe(400);
+  });
+});