fix: batch 28 second-pass audit — 35 issues fixed across 12 files

Rate limit acquired flag: 8 more sites converted (audio.py 5,
video_editing.py 1, captions.py 1, system.py 2 double-release).
Total rate limit sites now consistently use acquired flag pattern.

Bare ffmpeg: speed_ramp.py had 4 remaining bare "ffmpeg" strings
missed in batch 27 sweep. Replaced with get_ffmpeg_path().

Queue allowlist: 18 async routes added to _ALLOWED_QUEUE_ENDPOINTS
(captions, transcript, full, whisperx, emotion-highlights, speed,
lut, particles, color, face operations).

Info disclosure: safe_error() detail truncated to 200 chars,
file_not_found() uses basename only, RuntimeError handler truncated.

social_post.py: TikTok upload chunked (was reading entire file),
OAuth token access guarded, 8 urlopen wrapped in context managers.

animated_captions.py: dict access on Whisper segments uses .get()
with defaults. video_ai.py: info["fps"] uses .get() fallback.

CSS: added 4 missing rules (cap-hint, badge, btn-xs, result-stats),
fixed duplicate .result-area border-radius inconsistency.

Author: SysAdminDoc

extension/com.opencut.panel/client/style.css

@@ -7789,7 +7789,7 @@ textarea:hover,
 .result-area {
     margin-top: 14px;
     padding: 14px 16px;
-    border-radius: 18px;
+    border-radius: var(--r-md);
     border: 1px solid rgba(236, 230, 218, 0.08);
     background:
         linear-gradient(180deg, rgba(16, 23, 33, 0.96), rgba(12, 17, 25, 0.92));
@@ -8497,6 +8497,31 @@ body.has-clip .media-sidecar-empty {
     }
 }
 
+.cap-hint {
+    font-size: 11px;
+    color: var(--text-dim);
+    margin: 4px 0 8px;
+    line-height: 1.4;
+}
+.badge {
+    display: inline-block;
+    padding: 2px 8px;
+    font-size: 10px;
+    border-radius: 10px;
+    background: var(--green);
+    color: var(--bg);
+    font-weight: 600;
+}
+.btn-xs {
+    padding: 4px 8px;
+    font-size: 10px;
+}
+.result-stats {
+    font-size: 11px;
+    color: var(--text-dim);
+    margin-top: 8px;
+}
+
 @media (max-width: 380px) {
     .sidebar {
         width: 44px;

opencut/core/animated_captions.py

@@ -138,7 +138,8 @@ def render_animated_captions(
 
     preset = ANIMATION_PRESETS.get(animation, ANIMATION_PRESETS["pop"])
     info = get_video_info(video_path)
-    w, h = info["width"], info["height"]
+    w = int(info.get("width", 1920))
+    h = int(info.get("height", 1080))
     fps = float(info.get("fps", 30))
 
     if on_progress:
@@ -206,16 +207,16 @@ def render_animated_captions(
                 word_widths = []
                 space_w = draw.textlength(" ", font=font) if hasattr(draw, 'textlength') else font_size * 0.3
                 for wd in words:
-                    tw = draw.textlength(wd["word"], font=font) if hasattr(draw, 'textlength') else len(wd["word"]) * font_size * 0.6
+                    tw = draw.textlength(wd.get("word", ""), font=font) if hasattr(draw, 'textlength') else len(wd.get("word", "")) * font_size * 0.6
                     word_widths.append(tw)
                 total_w = sum(word_widths) + space_w * (len(words) - 1)
                 x_start = (w - total_w) / 2
                 y_pos = int(h * position_y)
 
                 x = x_start
                 for i, wd in enumerate(words):
-                    is_active = float(wd["start"]) <= current_time <= float(wd["end"])
-                    is_past = current_time > float(wd["end"])
+                    is_active = float(wd.get("start", 0)) <= current_time <= float(wd.get("end", 0))
+                    is_past = current_time > float(wd.get("end", 0))
 
                     if is_active:
                         color = highlight_color + (int(preset["active_opacity"] * 255),)
@@ -230,7 +231,7 @@ def render_animated_captions(
                         for dx in range(-stroke_width, stroke_width + 1):
                             for dy in range(-stroke_width, stroke_width + 1):
                                 if dx * dx + dy * dy <= stroke_width * stroke_width:
-                                    draw.text((x + dx, y_pos + dy), wd["word"], font=font, fill=sc)
+                                    draw.text((x + dx, y_pos + dy), wd.get("word", ""), font=font, fill=sc)
 
                     # Draw highlight box for that preset
                     if animation == "highlight_box" and is_active:
@@ -240,7 +241,7 @@ def render_animated_captions(
                                         x + word_widths[i] + pad, y_pos + font_size + pad],
                                        fill=bx_color)
 
-                    draw.text((x, y_pos), wd["word"], font=font, fill=color)
+                    draw.text((x, y_pos), wd.get("word", ""), font=font, fill=color)
                     x += word_widths[i] + space_w
 
                 # Composite

opencut/core/social_post.py

@@ -266,9 +266,8 @@ def _upload_youtube(
             },
             method="POST",
         )
-        resp = urllib.request.urlopen(req, timeout=30)
-        upload_url = resp.headers.get("Location")
-        resp.close()
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            upload_url = resp.headers.get("Location")
 
         if not upload_url:
             return UploadResult(platform="youtube", success=False, error="Failed to get upload URL")
@@ -296,9 +295,8 @@ def _upload_youtube(
                 }
                 req = urllib.request.Request(upload_url, data=chunk, headers=headers, method="PUT")
                 try:
-                    resp = urllib.request.urlopen(req, timeout=300)
-                    body = resp.read()
-                    resp.close()
+                    with urllib.request.urlopen(req, timeout=300) as resp:
+                        body = resp.read()
                 except urllib.error.HTTPError as e:
                     if e.code == 308:
                         # Resume incomplete — read and discard response
@@ -364,11 +362,14 @@ def _refresh_youtube_token(auth: PlatformAuth) -> Optional[PlatformAuth]:
             data=data,
             headers={"Content-Type": "application/x-www-form-urlencoded"},
         )
-        resp = urllib.request.urlopen(req, timeout=10)
-        result = json.loads(resp.read())
-        resp.close()
+        with urllib.request.urlopen(req, timeout=10) as resp:
+            result = json.loads(resp.read())
 
-        auth.access_token = result["access_token"]
+        new_token = result.get("access_token")
+        if not new_token:
+            logger.error("YouTube token refresh response missing access_token")
+            return None
+        auth.access_token = new_token
         auth.expires_at = time.time() + result.get("expires_in", 3600)
 
         creds = _load_credentials()
@@ -439,9 +440,8 @@ def _upload_tiktok(
                 "Content-Type": "application/json; charset=UTF-8",
             },
         )
-        resp = urllib.request.urlopen(req, timeout=30)
-        init_result = json.loads(resp.read())
-        resp.close()
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            init_result = json.loads(resp.read())
 
         publish_id = init_result.get("data", {}).get("publish_id", "")
         upload_url = init_result.get("data", {}).get("upload_url", "")
@@ -452,22 +452,33 @@ def _upload_tiktok(
         if on_progress:
             on_progress(15, "Uploading to TikTok...")
 
-        # Step 2: Upload file
+        # Step 2: Upload file in 10MB chunks
+        chunk_size = 10 * 1024 * 1024
+        uploaded = 0
+
         with open(filepath, "rb") as f:
-            video_data = f.read()
+            while uploaded < file_size:
+                chunk = f.read(chunk_size)
+                if not chunk:
+                    break
+                end = min(uploaded + len(chunk), file_size)
+                req = urllib.request.Request(
+                    upload_url,
+                    data=chunk,
+                    headers={
+                        "Content-Type": "video/mp4",
+                        "Content-Length": str(len(chunk)),
+                        "Content-Range": f"bytes {uploaded}-{end - 1}/{file_size}",
+                    },
+                    method="PUT",
+                )
+                with urllib.request.urlopen(req, timeout=300) as resp:
+                    resp.read()
 
-        req = urllib.request.Request(
-            upload_url,
-            data=video_data,
-            headers={
-                "Content-Type": "video/mp4",
-                "Content-Length": str(len(video_data)),
-                "Content-Range": f"bytes 0-{len(video_data) - 1}/{len(video_data)}",
-            },
-            method="PUT",
-        )
-        resp = urllib.request.urlopen(req, timeout=600)
-        resp.close()
+                uploaded += len(chunk)
+                if on_progress:
+                    pct = 15 + int(uploaded / file_size * 70)
+                    on_progress(pct, f"Uploading... {uploaded / (1024*1024):.0f}MB / {file_size / (1024*1024):.0f}MB")
 
         if on_progress:
             on_progress(90, "Finalizing...")
@@ -482,9 +493,8 @@ def _upload_tiktok(
                 "Content-Type": "application/json",
             },
         )
-        resp = urllib.request.urlopen(req, timeout=30)
-        resp.read()  # Consume response body
-        resp.close()
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            resp.read()  # Consume response body
 
         if on_progress:
             on_progress(100, "Upload complete!")
@@ -561,9 +571,8 @@ def _upload_instagram(
                 "Content-Type": "application/json",
             },
         )
-        resp = urllib.request.urlopen(req, timeout=30)
-        create_result = json.loads(resp.read())
-        resp.close()
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            create_result = json.loads(resp.read())
 
         container_id = create_result.get("id", "")
         if not container_id:
@@ -580,9 +589,8 @@ def _upload_instagram(
                 f"https://graph.facebook.com/v19.0/{container_id}?fields=status_code",
                 headers={"Authorization": f"Bearer {auth.access_token}"},
             )
-            resp = urllib.request.urlopen(req, timeout=10)
-            status = json.loads(resp.read())
-            resp.close()
+            with urllib.request.urlopen(req, timeout=10) as resp:
+                status = json.loads(resp.read())
 
             code = status.get("status_code", "")
             if code == "FINISHED":
@@ -610,9 +618,8 @@ def _upload_instagram(
                 "Content-Type": "application/json",
             },
         )
-        resp = urllib.request.urlopen(req, timeout=30)
-        pub_result = json.loads(resp.read())
-        resp.close()
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            pub_result = json.loads(resp.read())
 
         media_id = pub_result.get("id", "")
 

opencut/core/speed_ramp.py

@@ -17,7 +17,7 @@
 import tempfile
 from typing import Callable, Dict, List, Optional
 
-from opencut.helpers import get_video_info, run_ffmpeg
+from opencut.helpers import get_ffmpeg_path, get_video_info, run_ffmpeg
 
 logger = logging.getLogger("opencut")
 
@@ -88,7 +88,7 @@ def change_speed(
     # Audio: atempo filter (chained for extreme values)
     af_parts = _build_atempo_chain(speed, maintain_pitch)
 
-    cmd = ["ffmpeg", "-hide_banner", "-loglevel", "error", "-y", "-i", input_path]
+    cmd = [get_ffmpeg_path(), "-hide_banner", "-loglevel", "error", "-y", "-i", input_path]
     cmd += ["-vf", vf]
     if af_parts:
         cmd += ["-af", af_parts]
@@ -147,7 +147,7 @@ def reverse_video(
         on_progress(10, "Reversing video...")
 
     cmd = [
-        "ffmpeg", "-hide_banner", "-loglevel", "error", "-y",
+        get_ffmpeg_path(), "-hide_banner", "-loglevel", "error", "-y",
         "-i", input_path,
         "-vf", "reverse",
     ]
@@ -237,7 +237,7 @@ def speed_ramp(
             af = _build_atempo_chain(avg_speed)
 
             cmd = [
-                "ffmpeg", "-hide_banner", "-loglevel", "error", "-y",
+                get_ffmpeg_path(), "-hide_banner", "-loglevel", "error", "-y",
                 "-ss", str(start_time), "-to", str(end_time),
                 "-i", input_path,
                 "-vf", vf,
@@ -265,7 +265,7 @@ def speed_ramp(
                 f.write(f"file '{seg}'\n")
 
         run_ffmpeg([
-            "ffmpeg", "-hide_banner", "-loglevel", "error", "-y",
+            get_ffmpeg_path(), "-hide_banner", "-loglevel", "error", "-y",
             "-f", "concat", "-safe", "0", "-i", list_file,
             "-c", "copy",
             output_path,

opencut/core/video_ai.py

@@ -614,7 +614,7 @@ def frame_interpolate(
         output_path = _output_path(input_path, f"interp_{multiplier}x", output_dir)
 
     info = get_video_info(input_path)
-    target_fps = info["fps"] * multiplier
+    target_fps = info.get("fps", 30) * multiplier
 
     if on_progress:
         on_progress(10, f"Interpolating {info['fps']:.0f}fps -> {target_fps:.0f}fps...")

opencut/errors.py

@@ -12,6 +12,7 @@
 """
 
 import logging
+import os
 
 from flask import jsonify
 
@@ -128,7 +129,7 @@ def safe_error(exc, context=""):
     logger.exception("Error [%s]%s: %s", code, log_ctx, exc)
 
     return error_response(code, user_msg, status=status,
-                          suggestion=suggestion, detail=msg)
+                          suggestion=suggestion, detail=msg[:200] if msg else None)
 
 
 # ---------------------------------------------------------------------------
@@ -148,7 +149,7 @@ def missing_dependency(name: str) -> OpenCutError:
 def file_not_found(path: str) -> OpenCutError:
     return OpenCutError(
         code="FILE_NOT_FOUND",
-        message=f"File not found: {path}",
+        message=f"File not found: {os.path.basename(path) if path else 'unknown'}",
         suggestion="Check that the file has not been moved or deleted.",
         status=404,
     )