…ame-dir for atomic replace

- Move `tempfile.mkstemp` + `os.close` inside `try` block so OSError (disk full,
  unwritable dir) is caught by the existing `except Exception` handler instead of
  propagating to the caller, preserving the warn-and-degrade contract
- Pass `dir=os.path.dirname(os.path.abspath(video_path))` so the temp file is on
  the same filesystem as the output, restoring `os.rename` semantics in `shutil.move`
- Initialise `tmp_path = None` before `try`; guard `finally` with
  `tmp_path is not None` to satisfy mypy and avoid referencing an unbound name

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…r (report: .reports/review/2026-05-19T10-05-17Z/review-report.md): add timeout=300 to subprocess.run

Without a timeout, ffmpeg can hang indefinitely on malformed containers or
stalled filesystems, silently freezing the caller's program. The existing
`except Exception` block already catches `subprocess.TimeoutExpired`, so
adding `timeout=300` is the minimal fix — it logs a warning and returns.

300 s is a conservative cap sufficient for typical video remux workloads.

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…ream mapping -map 1:a:0?

With `-map 1:a:0` (no `?`), ffmpeg exits non-zero when source_path has no
audio stream, triggering a spurious failure warning even though silence is a
valid input. The `?` suffix makes the mapping optional: ffmpeg continues
without audio instead of failing, so preserve_audio=True is a no-op on
video-only sources rather than a false failure.

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…ess output and log stderr on failure

- Add `-loglevel error -nostats` so ffmpeg only writes actual errors to stderr
  (eliminates progress/stats spam that would buffer in PIPE indefinitely)
- Decode `result.stderr` and include it in the warning when ffmpeg exits
  non-zero, so failure messages surface diagnostically instead of being discarded

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…be (report: .reports/review/2026-05-19T10-05-17Z/review-report.md): fix docstring example in process_video

- Change bare `process_video(...)` call to `sv.process_video(...)` so the
  example matches the public API pattern and does not raise NameError for users
  copying the snippet
- Remove unused `import cv2` which was never referenced in the example body

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…be (report: .reports/review/2026-05-19T10-05-17Z/review-report.md): document silent-degrade contract for preserve_audio

- Clarify that missing/failing ffmpeg warns and continues rather than raising
- Add install hint for ffmpeg (apt/brew)
- Note that audio is truncated to match the processed video duration (-shortest)

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…alist (report: .reports/review/2026-05-19T10-05-17Z/review-report.md): use module-qualified patch targets

Change `patch("shutil.which", ...)` → `patch("supervision.utils.video.shutil.which", ...)`
and `patch("subprocess.run", ...)` → `patch("supervision.utils.video.subprocess.run", ...)`
to follow project convention and be robust to future `from shutil import which` refactors.

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…alist (report: .reports/review/2026-05-19T10-05-17Z/review-report.md): add _mux_audio happy-path and exception-branch tests

- test_mux_audio_moves_file_on_success: mock subprocess.run returncode=0;
  assert shutil.move is called once with video_path as destination — catches
  any regression that drops the move call after a successful ffmpeg run
- test_mux_audio_swallows_subprocess_exception: mock subprocess.run raising
  OSError; assert no exception escapes _mux_audio and original file is intact
- Fix failed_result.stderr = b"" in test_mux_audio_warns_on_ffmpeg_failure
  to match the updated _mux_audio which now decodes result.stderr

---
Co-authored-by: Claude Code <noreply@anthropic.com>

…ce test

- Skip _mux_audio when writer_worker.is_alive() after join timeout to avoid
  muxing an incomplete output file
- Fix test_mux_audio_moves_file_on_success: patch os.replace (not shutil.move)
  to match implementation changed in 2027938

---
Co-authored-by: Claude Code <noreply@anthropic.com>

- Move four test_mux_audio_* free functions into TestMuxAudio class
- Strip mux_audio_ prefix from method names; class carries the unit
- Condense multi-line docstrings to single-line per testing rules

---
Co-authored-by: Claude Code <noreply@anthropic.com>

- Collapse test_warns_when_ffmpeg_missing, test_warns_on_ffmpeg_failure,
  test_swallows_subprocess_exception into one parametrized
  test_file_unchanged_on_failure[ffmpeg_missing|ffmpeg_fails|subprocess_raises]

---
Co-authored-by: Claude Code <noreply@anthropic.com>

- Promote two class methods back to module-level functions
- Collapse nested with-patch statements into single with a, b: form

---
Co-authored-by: Claude Code <noreply@anthropic.com>