profiles: ship an extended set of default profiles

profiles/spike-protection.toml

@@ -0,0 +1,44 @@
+name = "spike-protection"
+description = "Minimal processing until a high threshold. Untouched audio, hard guard against sudden blasts."
+
+# No loudness leveling at all — this profile does not try to make
+# anything louder or more consistent. It only catches sudden, jarring
+# level jumps (autoplay ads, notification stingers, a video mastered
+# 12 dB hotter than the last).
+[agc]
+enabled = false
+
+# A fast, high-threshold peak "catch". Below -6 dBFS the signal passes
+# 1:1 (untouched); only genuine spikes above the threshold get clamped,
+# and hard (10:1). makeup_db is pinned to 0 — we never raise the floor,
+# so quiet/normal material is bit-for-bit what it was.
+[compressor]
+enabled = true
+detector = "peak"
+threshold_db = -6.0
+ratio = 10.0
+knee_db = 2.0
+attack_ms = 1.0
+release_ms = 120.0
+makeup_db = 0.0
+
+# Brickwall safety net a hair below 0 dBTP. No [limiter.soft]: we do
+# not reshape musical transients, only stop a true over.
+[limiter]
+ceiling_dbtp = -0.5
+lookahead_ms = 2.0
+release_ms = 80.0
+hold_ms = 5.0
+oversample = 4
+link = "stereo"
+
+[meters]
+publish_hz = 20.0
+
+# Production/creative tools route around the processor regardless.
+[[rules]]
+match = { process_binary = ["ardour", "reaper", "qpwgraph", "carla", "bitwig-studio"] }
+route = "bypass"
+
+[default_route]
+route = "processed"