@twick/render-server 0.15.11 → 0.15.13

package/.dockerignore

@@ -0,0 +1,13 @@
+node_modules
+npm-debug.log
+Dockerfile
+.dockerignore
+*.md
+dist
+.git
+.gitignore
+.env*
+*.log
+coverage
+.nyc_output
+test.js

package/Dockerfile

@@ -0,0 +1,39 @@
+FROM ghcr.io/puppeteer/puppeteer:latest AS builder
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm install
+
+# Copy only source and config (avoid overwriting node_modules from context)
+COPY src ./src
+COPY tsup.config.ts tsconfig.json ./
+RUN npm run build
+# Ensure server entry point exists (tsup outputs ESM as .mjs)
+RUN test -f /app/dist/server.mjs || test -f /app/dist/server.js || (echo "Missing dist/server.mjs or server.js. Contents of /app/dist:" && ls -la /app/dist 2>/dev/null || true && exit 1)
+
+FROM ghcr.io/puppeteer/puppeteer:latest
+
+WORKDIR /app
+
+# Switch to root to install system packages (needed for ffmpeg)
+USER root
+
+RUN apt-get update && apt-get install -y ffmpeg && rm -rf /var/lib/apt/lists/*
+
+# Drop back to the non-root Puppeteer user for runtime
+USER pptruser
+
+# Tell @twick/ffmpeg to use the system binaries
+ENV FFMPEG_PATH=/usr/bin/ffmpeg
+ENV FFPROBE_PATH=/usr/bin/ffprobe
+
+COPY package*.json ./
+RUN npm install --only=production
+
+COPY --from=builder /app/dist ./dist
+
+EXPOSE 5000
+
+# Start the built-in render server on port 5000
+CMD ["node", "dist/server.mjs"]
+

package/README.md

@@ -20,7 +20,40 @@ pnpm add @twick/render-server
 
 ## Quick Start
 
-### Option 1: Scaffold a Server (Recommended)
+### Option 1: Run via Docker
+
+**Prebuilt image (no repo clone):**
+
+```bash
+docker run --platform linux/amd64 -e PORT=5000 -p 5000:5000 ghcr.io/ncounterspecialist/render-server:<version>
+```
+
+**Build and run from this package (monorepo):**
+
+```bash
+cd packages/render-server
+docker build -t twick-render-server:latest .
+docker run -e PORT=5000 -p 5000:5000 twick-render-server:latest
+```
+
+**Docker Compose (configurable via `.env`):**
+
+```bash
+cd packages/render-server
+cp .env.example .env   # optional: edit port, rate limits, etc.
+docker compose up -d
+```
+
+The server listens on the port set by `PORT` (default in Docker: `5000`). Endpoints:
+
+- **Render**: `POST http://localhost:<PORT>/api/render-video`
+- **Download**: `GET http://localhost:<PORT>/download/:filename`
+- **Health**: `GET http://localhost:<PORT>/health`
+
+`ffmpeg` and `ffprobe` are preinstalled in the image.  
+The published image targets `linux/amd64`. On Apple Silicon (M1/M2/M3), Docker runs it under emulation, or use `--platform=linux/amd64`.
+
+### Option 2: Scaffold a Server (Recommended for customization)
 
 Scaffold a complete server with all endpoints configured:
 
@@ -46,7 +79,7 @@ npm run build && npm start  # Production mode
 
 The server will start on port 3001 by default. You can change this by setting the `PORT` environment variable.
 
-### Option 2: Use Programmatically
+### Option 3: Use Programmatically
 
 Import and use the `renderTwickVideo` function directly. The package supports both ESM and CommonJS:
 
@@ -134,20 +167,18 @@ Renders a video using Twick.
 ```json
 {
   "success": true,
-  "downloadUrl": "http://localhost:3001/download/my-video.mp4"
+  "downloadUrl": "http://localhost:<PORT>/download/my-video.mp4"
 }
 ```
+(`<PORT>` is the server port, e.g. `5000` when run via Docker.)
 
 ### GET /download/:filename
 
 Downloads a rendered video file. This endpoint is rate-limited to prevent abuse.
 
-**Rate Limits:**
-- 100 requests per 15 minutes per IP address
-- Rate limit headers are included in responses:
-  - `X-RateLimit-Limit`: Maximum requests allowed
-  - `X-RateLimit-Remaining`: Remaining requests in current window
-  - `X-RateLimit-Reset`: When the rate limit window resets
+**Rate limits** (configurable via environment variables, see [Configuration](#configuration)):
+- Default: 100 requests per 15 minutes per IP
+- Response headers: `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`
 
 ### GET /health
 
@@ -155,10 +186,17 @@ Health check endpoint. Returns server status and current timestamp.
 
 ## Configuration
 
-The server uses the following environment variables:
+Environment variables (supported in Docker via `-e`, `docker-compose`, or `.env`):
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `PORT` | Server port | `5000` (Docker), `3001` (scaffolded server) |
+| `NODE_ENV` | Environment | `production` |
+| `RATE_LIMIT_WINDOW_MS` | Rate limit window, in milliseconds | `900000` (15 min) |
+| `RATE_LIMIT_MAX_REQUESTS` | Max requests per IP per window | `100` |
+| `RATE_LIMIT_CLEANUP_INTERVAL_MS` | Cleanup interval for rate-limit store, in ms | `60000` (1 min) |
 
-- `PORT`: Server port (default: 3001)
-- `NODE_ENV`: Environment (development/production)
+Copy `.env.example` to `.env` in this package to customize when using Docker Compose.
 
 ## Package Development
 

package/dist/server.mjs

@@ -42,13 +42,13 @@ var renderTwickVideo = async (variables, settings) => {
 var renderer_default = renderTwickVideo;
 
 // src/server.ts
-var PORT = process.env.PORT || 3001;
+var PORT = process.env.PORT || 5e3;
 var BASE_PATH = `http://localhost:${PORT}`;
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = path.dirname(__filename);
-var RATE_LIMIT_WINDOW_MS = 15 * 60 * 1e3;
-var RATE_LIMIT_MAX_REQUESTS = 100;
-var RATE_LIMIT_CLEANUP_INTERVAL_MS = 60 * 1e3;
+var RATE_LIMIT_WINDOW_MS = parseInt(process.env.RATE_LIMIT_WINDOW_MS ?? "900000", 10) || 15 * 60 * 1e3;
+var RATE_LIMIT_MAX_REQUESTS = parseInt(process.env.RATE_LIMIT_MAX_REQUESTS ?? "100", 10) || 100;
+var RATE_LIMIT_CLEANUP_INTERVAL_MS = parseInt(process.env.RATE_LIMIT_CLEANUP_INTERVAL_MS ?? "60000", 10) || 60 * 1e3;
 var rateLimitStore = /* @__PURE__ */ new Map();
 setInterval(() => {
   const now = Date.now();

package/dist/server.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts","../src/renderer.ts"],"sourcesContent":["import express from \"express\";\nimport cors from \"cors\";\nimport path from \"path\";\nimport { fileURLToPath } from \"url\";\nimport renderTwickVideo from \"./renderer\";\n\nconst PORT = process.env.PORT || 3001;\nconst BASE_PATH = `http://localhost:${PORT}`;\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\n// Rate limiting configuration\nconst RATE_LIMIT_WINDOW_MS = 15 * 60 * 1000; // 15 minutes\nconst RATE_LIMIT_MAX_REQUESTS = 100; // Maximum requests per window\nconst RATE_LIMIT_CLEANUP_INTERVAL_MS = 60 * 1000; // Cleanup every minute\n\n// In-memory store for rate limiting\ninterface RateLimitEntry {\n  count: number;\n  resetTime: number;\n}\n\nconst rateLimitStore = new Map<string, RateLimitEntry>();\n\n// Cleanup expired entries periodically\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of rateLimitStore.entries()) {\n    if (now > entry.resetTime) {\n      rateLimitStore.delete(key);\n    }\n  }\n}, RATE_LIMIT_CLEANUP_INTERVAL_MS);\n\n/**\n * Rate limiting middleware for API endpoints.\n * Tracks request counts per IP address and enforces rate limits\n * to prevent abuse of the render server.\n *\n * @param req - Express request object\n * @param res - Express response object\n * @param next - Express next function\n * \n * @example\n * ```js\n * app.use('/api', rateLimitMiddleware);\n * // Applies rate limiting to all /api routes\n * ```\n */\nconst rateLimitMiddleware = (req: express.Request, res: express.Response, next: express.NextFunction) => {\n  const clientIP = req.ip || req.connection.remoteAddress || 'unknown';\n  const now = Date.now();\n  \n  // Get or create rate limit entry for this IP\n  let entry = rateLimitStore.get(clientIP);\n  \n  if (!entry || now > entry.resetTime) {\n    // New window or expired entry\n    entry = {\n      count: 1,\n      resetTime: now + RATE_LIMIT_WINDOW_MS\n    };\n    rateLimitStore.set(clientIP, entry);\n  } else {\n    // Increment count in current window\n    entry.count++;\n    \n    if (entry.count > RATE_LIMIT_MAX_REQUESTS) {\n      // Rate limit exceeded\n      const retryAfter = Math.ceil((entry.resetTime - now) / 1000);\n      res.set('Retry-After', retryAfter.toString());\n      res.set('X-RateLimit-Limit', RATE_LIMIT_MAX_REQUESTS.toString());\n      res.set('X-RateLimit-Remaining', '0');\n      res.set('X-RateLimit-Reset', new Date(entry.resetTime).toISOString());\n      \n      return res.status(429).json({\n        success: false,\n        error: 'Too many requests',\n        message: `Rate limit exceeded. Try again in ${retryAfter} seconds.`,\n        retryAfter\n      });\n    }\n  }\n  \n  // Add rate limit headers\n  res.set('X-RateLimit-Limit', RATE_LIMIT_MAX_REQUESTS.toString());\n  res.set('X-RateLimit-Remaining', (RATE_LIMIT_MAX_REQUESTS - entry.count).toString());\n  res.set('X-RateLimit-Reset', new Date(entry.resetTime).toISOString());\n  \n  next();\n};\n\nconst nodeApp: import(\"express\").Express = express();\n\nnodeApp.use(cors());\nnodeApp.use(express.json());\n\n// Serve static files from output directory\nnodeApp.use(\"/output\", express.static(path.join(__dirname, \"../output\")));\n\n/**\n * POST endpoint for video rendering requests.\n * Accepts project variables and settings, renders the video,\n * and returns a download URL for the completed video.\n *\n * @param req - Express request object containing variables and settings\n * @param res - Express response object\n * \n * @example\n * ```js\n * POST /api/render-video\n * Body: { variables: {...}, settings: {...} }\n * Response: { success: true, downloadUrl: \"...\" }\n * ```\n */\nnodeApp.post(\"/api/render-video\", async (req, res) => {\n  const { variables, settings } = req.body;\n\n  try {\n    const outputPath = await renderTwickVideo(variables, settings);\n    res.json({\n      success: true,\n      downloadUrl: `${BASE_PATH}/download/${path.basename(outputPath)}`,\n    });\n  } catch (error) {\n    console.error(\"Render error:\", error);\n    res.status(500).json({\n      success: false,\n      error: error instanceof Error ? error.message : \"Unknown error\",\n    });\n  }\n});\n\n/**\n * GET endpoint for downloading rendered videos.\n * Serves video files with rate limiting and security checks\n * to prevent path traversal attacks.\n *\n * @param req - Express request object with filename parameter\n * @param res - Express response object\n * \n * @example\n * ```js\n * GET /download/video-123.mp4\n * // Downloads the specified video file\n * ```\n */\nnodeApp.get(\"/download/:filename\", rateLimitMiddleware, (req, res) => {\n  const outputDir = path.resolve(__dirname, \"../output\");\n  const requestedPath = path.resolve(outputDir, req.params.filename);\n  if (!requestedPath.startsWith(outputDir + path.sep)) {\n    // Attempted path traversal or access outside output directory\n    res.status(403).json({\n      success: false,\n      error: \"Forbidden\",\n    });\n    return;\n  }\n  res.download(requestedPath, (err) => {\n    if (err) {\n      res.status(404).json({\n        success: false,\n        error: \"File not found\",\n      });\n    }\n  });\n});\n\n/**\n * Health check endpoint for monitoring server status.\n * Returns server status and current timestamp for health monitoring.\n *\n * @param req - Express request object\n * @param res - Express response object\n * \n * @example\n * ```js\n * GET /health\n * Response: { status: \"ok\", timestamp: \"2024-01-01T00:00:00.000Z\" }\n * ```\n */\nnodeApp.get(\"/health\", (req, res) => {\n  res.json({\n    status: \"ok\",\n    timestamp: new Date().toISOString(),\n  });\n});\n\n// Export the app for programmatic usage\nexport default nodeApp;\n\n// Start the server\nnodeApp.listen(PORT, () => {\n  console.log(`Render server running on port ${PORT}`);\n  console.log(`Health check: ${BASE_PATH}/health`);\n  console.log(`API endpoint: ${BASE_PATH}/api/render-video`);\n  console.log(`Download endpoint rate limited: ${RATE_LIMIT_MAX_REQUESTS} requests per ${RATE_LIMIT_WINDOW_MS / 60000} minutes`);\n});\n","import { renderVideo } from \"@twick/renderer\";\n\n/**\n * Renders a Twick video with the provided variables and settings.\n * Processes project variables, merges settings with defaults, and\n * generates a video file using the Twick renderer.\n *\n * @param variables - Project variables containing input configuration\n * @param settings - Optional render settings to override defaults\n * @returns Promise resolving to the path of the rendered video file\n * \n * @example\n * ```js\n * const videoPath = await renderTwickVideo(\n *   { input: { properties: { width: 1920, height: 1080 } } },\n *   { quality: \"high\", outFile: \"my-video.mp4\" }\n * );\n * // videoPath = \"./output/my-video.mp4\"\n * ```\n */\nconst renderTwickVideo = async (variables: any, settings: any) => {\n  try {\n    const { input } = variables;\n    const { properties } = input;\n    // Merge user settings with defaults\n    const mergedSettings = {\n      logProgress: true,\n      outDir: \"./output\",\n      outFile: properties.reqesutId ?? `video-${Date.now()}` + \".mp4\",\n      quality: \"medium\",\n      projectSettings: {\n        exporter: {\n          name: \"@twick/core/wasm\",\n        },\n        size: {\n          x: properties.width,\n          y: properties.height,\n        },\n      },\n      ...settings, // Allow user settings to override defaults\n    };\n\n    const file = await renderVideo({\n      projectFile: \"@twick/visualizer/dist/project.js\",\n      variables: variables,\n      settings: mergedSettings,\n    });\n    console.log(\"Successfully rendered: \", file);\n    return file;\n  } catch (error) {\n    console.error(\"Render error:\", error);\n    throw error;\n  }\n};\n\nexport default renderTwickVideo;\n"],"mappings":";AAAA,OAAO,aAAa;AACpB,OAAO,UAAU;AACjB,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACH9B,SAAS,mBAAmB;AAoB5B,IAAM,mBAAmB,OAAO,WAAgB,aAAkB;AAChE,MAAI;AACF,UAAM,EAAE,MAAM,IAAI;AAClB,UAAM,EAAE,WAAW,IAAI;AAEvB,UAAM,iBAAiB;AAAA,MACrB,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,SAAS,WAAW,aAAa,SAAS,KAAK,IAAI,CAAC;AAAA,MACpD,SAAS;AAAA,MACT,iBAAiB;AAAA,QACf,UAAU;AAAA,UACR,MAAM;AAAA,QACR;AAAA,QACA,MAAM;AAAA,UACJ,GAAG,WAAW;AAAA,UACd,GAAG,WAAW;AAAA,QAChB;AAAA,MACF;AAAA,MACA,GAAG;AAAA;AAAA,IACL;AAEA,UAAM,OAAO,MAAM,YAAY;AAAA,MAC7B,aAAa;AAAA,MACb;AAAA,MACA,UAAU;AAAA,IACZ,CAAC;AACD,YAAQ,IAAI,2BAA2B,IAAI;AAC3C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,KAAK;AACpC,UAAM;AAAA,EACR;AACF;AAEA,IAAO,mBAAQ;;;ADjDf,IAAM,OAAO,QAAQ,IAAI,QAAQ;AACjC,IAAM,YAAY,oBAAoB,IAAI;AAE1C,IAAM,aAAa,cAAc,YAAY,GAAG;AAChD,IAAM,YAAY,KAAK,QAAQ,UAAU;AAGzC,IAAM,uBAAuB,KAAK,KAAK;AACvC,IAAM,0BAA0B;AAChC,IAAM,iCAAiC,KAAK;AAQ5C,IAAM,iBAAiB,oBAAI,IAA4B;AAGvD,YAAY,MAAM;AAChB,QAAM,MAAM,KAAK,IAAI;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG;AACnD,QAAI,MAAM,MAAM,WAAW;AACzB,qBAAe,OAAO,GAAG;AAAA,IAC3B;AAAA,EACF;AACF,GAAG,8BAA8B;AAiBjC,IAAM,sBAAsB,CAAC,KAAsB,KAAuB,SAA+B;AACvG,QAAM,WAAW,IAAI,MAAM,IAAI,WAAW,iBAAiB;AAC3D,QAAM,MAAM,KAAK,IAAI;AAGrB,MAAI,QAAQ,eAAe,IAAI,QAAQ;AAEvC,MAAI,CAAC,SAAS,MAAM,MAAM,WAAW;AAEnC,YAAQ;AAAA,MACN,OAAO;AAAA,MACP,WAAW,MAAM;AAAA,IACnB;AACA,mBAAe,IAAI,UAAU,KAAK;AAAA,EACpC,OAAO;AAEL,UAAM;AAEN,QAAI,MAAM,QAAQ,yBAAyB;AAEzC,YAAM,aAAa,KAAK,MAAM,MAAM,YAAY,OAAO,GAAI;AAC3D,UAAI,IAAI,eAAe,WAAW,SAAS,CAAC;AAC5C,UAAI,IAAI,qBAAqB,wBAAwB,SAAS,CAAC;AAC/D,UAAI,IAAI,yBAAyB,GAAG;AACpC,UAAI,IAAI,qBAAqB,IAAI,KAAK,MAAM,SAAS,EAAE,YAAY,CAAC;AAEpE,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,SAAS;AAAA,QACT,OAAO;AAAA,QACP,SAAS,qCAAqC,UAAU;AAAA,QACxD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,IAAI,qBAAqB,wBAAwB,SAAS,CAAC;AAC/D,MAAI,IAAI,0BAA0B,0BAA0B,MAAM,OAAO,SAAS,CAAC;AACnF,MAAI,IAAI,qBAAqB,IAAI,KAAK,MAAM,SAAS,EAAE,YAAY,CAAC;AAEpE,OAAK;AACP;AAEA,IAAM,UAAqC,QAAQ;AAEnD,QAAQ,IAAI,KAAK,CAAC;AAClB,QAAQ,IAAI,QAAQ,KAAK,CAAC;AAG1B,QAAQ,IAAI,WAAW,QAAQ,OAAO,KAAK,KAAK,WAAW,WAAW,CAAC,CAAC;AAiBxE,QAAQ,KAAK,qBAAqB,OAAO,KAAK,QAAQ;AACpD,QAAM,EAAE,WAAW,SAAS,IAAI,IAAI;AAEpC,MAAI;AACF,UAAM,aAAa,MAAM,iBAAiB,WAAW,QAAQ;AAC7D,QAAI,KAAK;AAAA,MACP,SAAS;AAAA,MACT,aAAa,GAAG,SAAS,aAAa,KAAK,SAAS,UAAU,CAAC;AAAA,IACjE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,KAAK;AACpC,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,CAAC;AAAA,EACH;AACF,CAAC;AAgBD,QAAQ,IAAI,uBAAuB,qBAAqB,CAAC,KAAK,QAAQ;AACpE,QAAM,YAAY,KAAK,QAAQ,WAAW,WAAW;AACrD,QAAM,gBAAgB,KAAK,QAAQ,WAAW,IAAI,OAAO,QAAQ;AACjE,MAAI,CAAC,cAAc,WAAW,YAAY,KAAK,GAAG,GAAG;AAEnD,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AACD;AAAA,EACF;AACA,MAAI,SAAS,eAAe,CAAC,QAAQ;AACnC,QAAI,KAAK;AACP,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH,CAAC;AAeD,QAAQ,IAAI,WAAW,CAAC,KAAK,QAAQ;AACnC,MAAI,KAAK;AAAA,IACP,QAAQ;AAAA,IACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACH,CAAC;AAGD,IAAO,iBAAQ;AAGf,QAAQ,OAAO,MAAM,MAAM;AACzB,UAAQ,IAAI,iCAAiC,IAAI,EAAE;AACnD,UAAQ,IAAI,iBAAiB,SAAS,SAAS;AAC/C,UAAQ,IAAI,iBAAiB,SAAS,mBAAmB;AACzD,UAAQ,IAAI,mCAAmC,uBAAuB,iBAAiB,uBAAuB,GAAK,UAAU;AAC/H,CAAC;","names":[]}
+{"version":3,"sources":["../src/server.ts","../src/renderer.ts"],"sourcesContent":["import express from \"express\";\nimport cors from \"cors\";\nimport path from \"path\";\nimport { fileURLToPath } from \"url\";\nimport renderTwickVideo from \"./renderer\";\n\nconst PORT = process.env.PORT || 5000;\nconst BASE_PATH = `http://localhost:${PORT}`;\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\n// Rate limiting configuration (all configurable via env)\nconst RATE_LIMIT_WINDOW_MS =\n  parseInt(process.env.RATE_LIMIT_WINDOW_MS ?? \"900000\", 10) || 15 * 60 * 1000; // default 15 min (ms)\nconst RATE_LIMIT_MAX_REQUESTS =\n  parseInt(process.env.RATE_LIMIT_MAX_REQUESTS ?? \"100\", 10) || 100; // max requests per window\nconst RATE_LIMIT_CLEANUP_INTERVAL_MS =\n  parseInt(process.env.RATE_LIMIT_CLEANUP_INTERVAL_MS ?? \"60000\", 10) || 60 * 1000; // default 1 min (ms)\n\n// In-memory store for rate limiting\ninterface RateLimitEntry {\n  count: number;\n  resetTime: number;\n}\n\nconst rateLimitStore = new Map<string, RateLimitEntry>();\n\n// Cleanup expired entries periodically\nsetInterval(() => {\n  const now = Date.now();\n  for (const [key, entry] of rateLimitStore.entries()) {\n    if (now > entry.resetTime) {\n      rateLimitStore.delete(key);\n    }\n  }\n}, RATE_LIMIT_CLEANUP_INTERVAL_MS);\n\n/**\n * Rate limiting middleware for API endpoints.\n * Tracks request counts per IP address and enforces rate limits\n * to prevent abuse of the render server.\n *\n * @param req - Express request object\n * @param res - Express response object\n * @param next - Express next function\n * \n * @example\n * ```js\n * app.use('/api', rateLimitMiddleware);\n * // Applies rate limiting to all /api routes\n * ```\n */\nconst rateLimitMiddleware = (req: express.Request, res: express.Response, next: express.NextFunction) => {\n  const clientIP = req.ip || req.connection.remoteAddress || 'unknown';\n  const now = Date.now();\n  \n  // Get or create rate limit entry for this IP\n  let entry = rateLimitStore.get(clientIP);\n  \n  if (!entry || now > entry.resetTime) {\n    // New window or expired entry\n    entry = {\n      count: 1,\n      resetTime: now + RATE_LIMIT_WINDOW_MS\n    };\n    rateLimitStore.set(clientIP, entry);\n  } else {\n    // Increment count in current window\n    entry.count++;\n    \n    if (entry.count > RATE_LIMIT_MAX_REQUESTS) {\n      // Rate limit exceeded\n      const retryAfter = Math.ceil((entry.resetTime - now) / 1000);\n      res.set('Retry-After', retryAfter.toString());\n      res.set('X-RateLimit-Limit', RATE_LIMIT_MAX_REQUESTS.toString());\n      res.set('X-RateLimit-Remaining', '0');\n      res.set('X-RateLimit-Reset', new Date(entry.resetTime).toISOString());\n      \n      return res.status(429).json({\n        success: false,\n        error: 'Too many requests',\n        message: `Rate limit exceeded. Try again in ${retryAfter} seconds.`,\n        retryAfter\n      });\n    }\n  }\n  \n  // Add rate limit headers\n  res.set('X-RateLimit-Limit', RATE_LIMIT_MAX_REQUESTS.toString());\n  res.set('X-RateLimit-Remaining', (RATE_LIMIT_MAX_REQUESTS - entry.count).toString());\n  res.set('X-RateLimit-Reset', new Date(entry.resetTime).toISOString());\n  \n  next();\n};\n\nconst nodeApp: import(\"express\").Express = express();\n\nnodeApp.use(cors());\nnodeApp.use(express.json());\n\n// Serve static files from output directory\nnodeApp.use(\"/output\", express.static(path.join(__dirname, \"../output\")));\n\n/**\n * POST endpoint for video rendering requests.\n * Accepts project variables and settings, renders the video,\n * and returns a download URL for the completed video.\n *\n * @param req - Express request object containing variables and settings\n * @param res - Express response object\n * \n * @example\n * ```js\n * POST /api/render-video\n * Body: { variables: {...}, settings: {...} }\n * Response: { success: true, downloadUrl: \"...\" }\n * ```\n */\nnodeApp.post(\"/api/render-video\", async (req, res) => {\n  const { variables, settings } = req.body;\n\n  try {\n    const outputPath = await renderTwickVideo(variables, settings);\n    res.json({\n      success: true,\n      downloadUrl: `${BASE_PATH}/download/${path.basename(outputPath)}`,\n    });\n  } catch (error) {\n    console.error(\"Render error:\", error);\n    res.status(500).json({\n      success: false,\n      error: error instanceof Error ? error.message : \"Unknown error\",\n    });\n  }\n});\n\n/**\n * GET endpoint for downloading rendered videos.\n * Serves video files with rate limiting and security checks\n * to prevent path traversal attacks.\n *\n * @param req - Express request object with filename parameter\n * @param res - Express response object\n * \n * @example\n * ```js\n * GET /download/video-123.mp4\n * // Downloads the specified video file\n * ```\n */\nnodeApp.get(\"/download/:filename\", rateLimitMiddleware, (req, res) => {\n  const outputDir = path.resolve(__dirname, \"../output\");\n  const requestedPath = path.resolve(outputDir, req.params.filename);\n  if (!requestedPath.startsWith(outputDir + path.sep)) {\n    // Attempted path traversal or access outside output directory\n    res.status(403).json({\n      success: false,\n      error: \"Forbidden\",\n    });\n    return;\n  }\n  res.download(requestedPath, (err) => {\n    if (err) {\n      res.status(404).json({\n        success: false,\n        error: \"File not found\",\n      });\n    }\n  });\n});\n\n/**\n * Health check endpoint for monitoring server status.\n * Returns server status and current timestamp for health monitoring.\n *\n * @param req - Express request object\n * @param res - Express response object\n * \n * @example\n * ```js\n * GET /health\n * Response: { status: \"ok\", timestamp: \"2024-01-01T00:00:00.000Z\" }\n * ```\n */\nnodeApp.get(\"/health\", (req, res) => {\n  res.json({\n    status: \"ok\",\n    timestamp: new Date().toISOString(),\n  });\n});\n\n// Export the app for programmatic usage\nexport default nodeApp;\n\n// Start the server\nnodeApp.listen(PORT, () => {\n  console.log(`Render server running on port ${PORT}`);\n  console.log(`Health check: ${BASE_PATH}/health`);\n  console.log(`API endpoint: ${BASE_PATH}/api/render-video`);\n  console.log(`Download endpoint rate limited: ${RATE_LIMIT_MAX_REQUESTS} requests per ${RATE_LIMIT_WINDOW_MS / 60000} minutes`);\n});\n","import { renderVideo } from \"@twick/renderer\";\n\n/**\n * Renders a Twick video with the provided variables and settings.\n * Processes project variables, merges settings with defaults, and\n * generates a video file using the Twick renderer.\n *\n * @param variables - Project variables containing input configuration\n * @param settings - Optional render settings to override defaults\n * @returns Promise resolving to the path of the rendered video file\n * \n * @example\n * ```js\n * const videoPath = await renderTwickVideo(\n *   { input: { properties: { width: 1920, height: 1080 } } },\n *   { quality: \"high\", outFile: \"my-video.mp4\" }\n * );\n * // videoPath = \"./output/my-video.mp4\"\n * ```\n */\nconst renderTwickVideo = async (variables: any, settings: any) => {\n  try {\n    const { input } = variables;\n    const { properties } = input;\n    // Merge user settings with defaults\n    const mergedSettings = {\n      logProgress: true,\n      outDir: \"./output\",\n      outFile: properties.reqesutId ?? `video-${Date.now()}` + \".mp4\",\n      quality: \"medium\",\n      projectSettings: {\n        exporter: {\n          name: \"@twick/core/wasm\",\n        },\n        size: {\n          x: properties.width,\n          y: properties.height,\n        },\n      },\n      ...settings, // Allow user settings to override defaults\n    };\n\n    const file = await renderVideo({\n      projectFile: \"@twick/visualizer/dist/project.js\",\n      variables: variables,\n      settings: mergedSettings,\n    });\n    console.log(\"Successfully rendered: \", file);\n    return file;\n  } catch (error) {\n    console.error(\"Render error:\", error);\n    throw error;\n  }\n};\n\nexport default renderTwickVideo;\n"],"mappings":";AAAA,OAAO,aAAa;AACpB,OAAO,UAAU;AACjB,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACH9B,SAAS,mBAAmB;AAoB5B,IAAM,mBAAmB,OAAO,WAAgB,aAAkB;AAChE,MAAI;AACF,UAAM,EAAE,MAAM,IAAI;AAClB,UAAM,EAAE,WAAW,IAAI;AAEvB,UAAM,iBAAiB;AAAA,MACrB,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,SAAS,WAAW,aAAa,SAAS,KAAK,IAAI,CAAC;AAAA,MACpD,SAAS;AAAA,MACT,iBAAiB;AAAA,QACf,UAAU;AAAA,UACR,MAAM;AAAA,QACR;AAAA,QACA,MAAM;AAAA,UACJ,GAAG,WAAW;AAAA,UACd,GAAG,WAAW;AAAA,QAChB;AAAA,MACF;AAAA,MACA,GAAG;AAAA;AAAA,IACL;AAEA,UAAM,OAAO,MAAM,YAAY;AAAA,MAC7B,aAAa;AAAA,MACb;AAAA,MACA,UAAU;AAAA,IACZ,CAAC;AACD,YAAQ,IAAI,2BAA2B,IAAI;AAC3C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,KAAK;AACpC,UAAM;AAAA,EACR;AACF;AAEA,IAAO,mBAAQ;;;ADjDf,IAAM,OAAO,QAAQ,IAAI,QAAQ;AACjC,IAAM,YAAY,oBAAoB,IAAI;AAE1C,IAAM,aAAa,cAAc,YAAY,GAAG;AAChD,IAAM,YAAY,KAAK,QAAQ,UAAU;AAGzC,IAAM,uBACJ,SAAS,QAAQ,IAAI,wBAAwB,UAAU,EAAE,KAAK,KAAK,KAAK;AAC1E,IAAM,0BACJ,SAAS,QAAQ,IAAI,2BAA2B,OAAO,EAAE,KAAK;AAChE,IAAM,iCACJ,SAAS,QAAQ,IAAI,kCAAkC,SAAS,EAAE,KAAK,KAAK;AAQ9E,IAAM,iBAAiB,oBAAI,IAA4B;AAGvD,YAAY,MAAM;AAChB,QAAM,MAAM,KAAK,IAAI;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG;AACnD,QAAI,MAAM,MAAM,WAAW;AACzB,qBAAe,OAAO,GAAG;AAAA,IAC3B;AAAA,EACF;AACF,GAAG,8BAA8B;AAiBjC,IAAM,sBAAsB,CAAC,KAAsB,KAAuB,SAA+B;AACvG,QAAM,WAAW,IAAI,MAAM,IAAI,WAAW,iBAAiB;AAC3D,QAAM,MAAM,KAAK,IAAI;AAGrB,MAAI,QAAQ,eAAe,IAAI,QAAQ;AAEvC,MAAI,CAAC,SAAS,MAAM,MAAM,WAAW;AAEnC,YAAQ;AAAA,MACN,OAAO;AAAA,MACP,WAAW,MAAM;AAAA,IACnB;AACA,mBAAe,IAAI,UAAU,KAAK;AAAA,EACpC,OAAO;AAEL,UAAM;AAEN,QAAI,MAAM,QAAQ,yBAAyB;AAEzC,YAAM,aAAa,KAAK,MAAM,MAAM,YAAY,OAAO,GAAI;AAC3D,UAAI,IAAI,eAAe,WAAW,SAAS,CAAC;AAC5C,UAAI,IAAI,qBAAqB,wBAAwB,SAAS,CAAC;AAC/D,UAAI,IAAI,yBAAyB,GAAG;AACpC,UAAI,IAAI,qBAAqB,IAAI,KAAK,MAAM,SAAS,EAAE,YAAY,CAAC;AAEpE,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,SAAS;AAAA,QACT,OAAO;AAAA,QACP,SAAS,qCAAqC,UAAU;AAAA,QACxD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,IAAI,qBAAqB,wBAAwB,SAAS,CAAC;AAC/D,MAAI,IAAI,0BAA0B,0BAA0B,MAAM,OAAO,SAAS,CAAC;AACnF,MAAI,IAAI,qBAAqB,IAAI,KAAK,MAAM,SAAS,EAAE,YAAY,CAAC;AAEpE,OAAK;AACP;AAEA,IAAM,UAAqC,QAAQ;AAEnD,QAAQ,IAAI,KAAK,CAAC;AAClB,QAAQ,IAAI,QAAQ,KAAK,CAAC;AAG1B,QAAQ,IAAI,WAAW,QAAQ,OAAO,KAAK,KAAK,WAAW,WAAW,CAAC,CAAC;AAiBxE,QAAQ,KAAK,qBAAqB,OAAO,KAAK,QAAQ;AACpD,QAAM,EAAE,WAAW,SAAS,IAAI,IAAI;AAEpC,MAAI;AACF,UAAM,aAAa,MAAM,iBAAiB,WAAW,QAAQ;AAC7D,QAAI,KAAK;AAAA,MACP,SAAS;AAAA,MACT,aAAa,GAAG,SAAS,aAAa,KAAK,SAAS,UAAU,CAAC;AAAA,IACjE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,KAAK;AACpC,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,CAAC;AAAA,EACH;AACF,CAAC;AAgBD,QAAQ,IAAI,uBAAuB,qBAAqB,CAAC,KAAK,QAAQ;AACpE,QAAM,YAAY,KAAK,QAAQ,WAAW,WAAW;AACrD,QAAM,gBAAgB,KAAK,QAAQ,WAAW,IAAI,OAAO,QAAQ;AACjE,MAAI,CAAC,cAAc,WAAW,YAAY,KAAK,GAAG,GAAG;AAEnD,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AACD;AAAA,EACF;AACA,MAAI,SAAS,eAAe,CAAC,QAAQ;AACnC,QAAI,KAAK;AACP,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH,CAAC;AAeD,QAAQ,IAAI,WAAW,CAAC,KAAK,QAAQ;AACnC,MAAI,KAAK;AAAA,IACP,QAAQ;AAAA,IACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACH,CAAC;AAGD,IAAO,iBAAQ;AAGf,QAAQ,OAAO,MAAM,MAAM;AACzB,UAAQ,IAAI,iCAAiC,IAAI,EAAE;AACnD,UAAQ,IAAI,iBAAiB,SAAS,SAAS;AAC/C,UAAQ,IAAI,iBAAiB,SAAS,mBAAmB;AACzD,UAAQ,IAAI,mCAAmC,uBAAuB,iBAAiB,uBAAuB,GAAK,UAAU;AAC/H,CAAC;","names":[]}

package/docker-compose.yml

@@ -0,0 +1,22 @@
+# @twick/render-server — configurable via .env
+# Copy .env.example to .env and adjust values.
+
+services:
+  render-server:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: twick-render-server:latest
+    container_name: twick-render-server
+    restart: unless-stopped
+
+    environment:
+      PORT: "${PORT:-5000}"
+      NODE_ENV: "${NODE_ENV:-production}"
+      # Rate limiting: window in ms, max requests per window, cleanup interval in ms
+      RATE_LIMIT_WINDOW_MS: "${RATE_LIMIT_WINDOW_MS:-900000}"
+      RATE_LIMIT_MAX_REQUESTS: "${RATE_LIMIT_MAX_REQUESTS:-100}"
+      RATE_LIMIT_CLEANUP_INTERVAL_MS: "${RATE_LIMIT_CLEANUP_INTERVAL_MS:-60000}"
+
+    ports:
+      - "${PORT:-5000}:${PORT:-5000}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twick/render-server",
-  "version": "0.15.11",
+  "version": "0.15.13",
   "license": "https://github.com/ncounterspecialist/twick/blob/main/LICENSE.md",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -26,12 +26,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@twick/2d": "^0.15.11",
-    "@twick/core": "^0.15.11",
-    "@twick/ffmpeg": "^0.15.11",
-    "@twick/renderer": "^0.15.11",
-    "@twick/ui": "^0.15.11",
-    "@twick/visualizer": "0.15.11",
+    "@twick/2d": "^0.15.13",
+    "@twick/core": "^0.15.13",
+    "@twick/ffmpeg": "^0.15.13",
+    "@twick/renderer": "^0.15.13",
+    "@twick/ui": "^0.15.13",
+    "@twick/visualizer": "0.15.13",
     "cors": "^2.8.5",
     "express": "^4.18.2",
     "express-rate-limit": "^8.0.1",

package/package.json.bak

@@ -1,6 +1,6 @@
 {
   "name": "@twick/render-server",
-  "version": "0.15.11",
+  "version": "0.15.13",
   "license": "https://github.com/ncounterspecialist/twick/blob/main/LICENSE.md",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -26,12 +26,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@twick/2d": "^0.15.11",
-    "@twick/core": "^0.15.11",
-    "@twick/ffmpeg": "^0.15.11",
-    "@twick/renderer": "^0.15.11",
-    "@twick/ui": "^0.15.11",
-    "@twick/visualizer": "0.15.11",
+    "@twick/2d": "^0.15.13",
+    "@twick/core": "^0.15.13",
+    "@twick/ffmpeg": "^0.15.13",
+    "@twick/renderer": "^0.15.13",
+    "@twick/ui": "^0.15.13",
+    "@twick/visualizer": "0.15.13",
     "cors": "^2.8.5",
     "express": "^4.18.2",
     "express-rate-limit": "^8.0.1",

package/src/server.ts

@@ -4,16 +4,19 @@ import path from "path";
 import { fileURLToPath } from "url";
 import renderTwickVideo from "./renderer";
 
-const PORT = process.env.PORT || 3001;
+const PORT = process.env.PORT || 5000;
 const BASE_PATH = `http://localhost:${PORT}`;
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-// Rate limiting configuration
-const RATE_LIMIT_WINDOW_MS = 15 * 60 * 1000; // 15 minutes
-const RATE_LIMIT_MAX_REQUESTS = 100; // Maximum requests per window
-const RATE_LIMIT_CLEANUP_INTERVAL_MS = 60 * 1000; // Cleanup every minute
+// Rate limiting configuration (all configurable via env)
+const RATE_LIMIT_WINDOW_MS =
+  parseInt(process.env.RATE_LIMIT_WINDOW_MS ?? "900000", 10) || 15 * 60 * 1000; // default 15 min (ms)
+const RATE_LIMIT_MAX_REQUESTS =
+  parseInt(process.env.RATE_LIMIT_MAX_REQUESTS ?? "100", 10) || 100; // max requests per window
+const RATE_LIMIT_CLEANUP_INTERVAL_MS =
+  parseInt(process.env.RATE_LIMIT_CLEANUP_INTERVAL_MS ?? "60000", 10) || 60 * 1000; // default 1 min (ms)
 
 // In-memory store for rate limiting
 interface RateLimitEntry {