V3 deterministic media-inspection capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local ffprobe CLI ingredient exposes bounded read-only media metadata operations for readiness, full stream/container JSON, compact summary JSON, and duration extraction. The operations inspect one trusted local media path and return stdout metadata; they do not transcode, decode frames to files, write outputs, materialize file_ref input into value output, recurse directories, scan devices, list sources, show packets, dump payload data, generate reports, expose arbitrary ffprobe flags, or use shell wrappers. Inputs are pinned to the file/pipe protocol whitelist and the editable path rejects scheme-like prefixes so URL inputs cannot trigger remote fetches. Requires ffprobe on PATH. Local and no-egress.