Add ffmpeg example

[gt-codes]

This PR adds a new ffmpeg-processing example that demonstrates how to use Workflow DevKit with an Express app and FFmpeg to compress audio files end‑to‑end.

• New example app (ffmpeg-processing):

  • Uses Nitro (workflow/nitro) with an Express handler wired via nitro.config.ts.
  • Configured TypeScript project (tsconfig.json) and local dependencies (express, workflow, fluent-ffmpeg, ffmpeg-static, multer).
  • Ignores build and workflow artifacts in a scoped .gitignore.

• HTTP API (ffmpeg-processing/src/index.ts):

  • POST /convert accepts multipart/form-data uploads (field file) using multer.memoryStorage().
  • Converts the uploaded audio into a JSON‑safe payload (AudioPayload) and starts the compressAudioWorkflow.
  • Awaits run.returnValue, decodes the base64 result, and returns the compressed audio bytes with appropriate Content-Type and download headers.
  • Adds minimal CORS middleware for local dev.

• Workflow + steps (ffmpeg-processing/workflows/audio-convert.ts, ffmpeg-processing/types.ts):

  • compressAudioWorkflow ("use workflow") orchestrates:
    • normalizeMetadataStep ("use step") – validates MIME type, normalizes filename, logs size.
    • transcodeAndCompressStep ("use step") – dynamically imports Node/FFmpeg modules, writes the input buffer to a unique temp file using crypto.randomUUID(), runs FFmpeg (AAC @ 128kbps, M4A container), reads the output, and returns a base64‑encoded audio/mp4 result.

• Uses JSON‑safe AudioPayload type shared between route and workflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​express@​5.0.6
	@​types/​multer@​2.0.0
	cors@​2.8.5
	@​types/​cors@​2.8.19
	multer@​2.0.2
	express@​5.2.1
	@​vercel/​sandbox@​1.0.4

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[pranaygp]

can we use streams instead of buffered data across the wire?

[gt-codes]

Redid moving to sandboxes as vercel-world can't install ffmpeg

[adriandlam]

nit: maybe we should move this out of "Framework Integrations" since this feels kinda complex.

imo the point of the framework integrations section was to replicate the "Getting Started" sections of the workflow docs so users can use it as reference