twotalesanimation feb1c7b3e9 feat(render-pipeline): validation, QC and delivery builder
Completes RenderPipeline2 phases 3-5. Additive throughout: with
validation.enabled=false the pipeline behaves exactly as before.

Validation (§8) runs on the worker straight after a render, while it
still holds the job and the files are local. Everything is read from the
EXR header — one 64 KB read per sampled frame, no pixel decode — so the
engine needs no oiiotool. The render job deliberately stays open through
the stage, so a worker that dies there is reaped and retried instead of
stranding the export in VALIDATING.

Timecode is the primary check and is anchored on the plate, never the
API: measured on the live show, Shot.timecodeStart is the editorial
in-point and sits one handle-length (8f) ahead of the plate, so checking
against it would pass the defective exports and fail the correct ones.
Reference precedence is manifest timing plate -> plate found on disk ->
API value, and the API rank is WARN-only. The panel now resolves plate
provenance by walking the comp's own footage layers, so the worker never
guesses which element carries the comp's timing.

Verified against real studio renders via the new --validate mode: it
catches both defect classes seen in shipped work — the +8 handle offset
and frame-derived timecode (00:00:41:17 = frame 1001 at 24fps).

QC (§10) is one service behind two front doors, API-key for the panel
and session for the web. PASS means ready to upload and nothing else;
FAIL sets the comp task to CHANGES. The panel gains a QC section that
imports the real EXR sequence at full res rather than the H.264.

Delivery (§11) rides the existing queue as a DELIVERY_BUILD job: hard
links with a copy fallback, verification by re-hashing delivered bytes
against the validation-time digest, manifest.json and the CSV report.
fsutil hardlink list is unavailable over SMB, so link identity is never
queried — reading the bytes back covers links and copies alike.

Also fixes ApiClient.ProgressAsync throwing on transport failure, which
would have aborted work in flight during a brief server outage; progress
reporting is best-effort by contract.

Removes the stale RenderWorker/ rule from the root .gitignore. The
worker's source is tracked like the rest of the repo and its own
.gitignore already covers bin/, obj/ and publish/; the rule silently
excluded new files while the existing 20 stayed tracked.

Not yet applied: migration 20260813000000 was hand-written because the
dev database was unavailable — run prisma migrate deploy and verify
before relying on it. None of this has run against a live server.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-13 13:49:51 +02:00
2026-07-08 14:17:03 +02:00
2026-06-11 12:39:01 +02:00
2026-08-07 07:34:10 +02:00
2026-08-07 07:34:10 +02:00
2026-07-08 16:28:18 +02:00
2026-05-19 22:20:29 +02:00
2026-05-19 22:20:29 +02:00
2026-08-07 07:34:10 +02:00
2026-05-19 22:20:29 +02:00
2026-05-19 22:20:29 +02:00
2026-05-20 13:06:04 +02:00
2026-06-11 12:59:39 +02:00
2026-06-11 13:07:59 +02:00
2026-05-29 10:40:28 +02:00
2026-07-08 19:54:24 +02:00
2026-05-19 22:20:29 +02:00
2026-06-11 12:30:28 +02:00
2026-06-11 12:30:28 +02:00
2026-05-19 22:20:29 +02:00
2026-05-19 22:20:29 +02:00
2026-06-11 15:19:12 +02:00
2026-05-19 22:20:29 +02:00
2026-05-19 22:20:29 +02:00
2026-05-19 22:20:29 +02:00
2026-07-22 10:37:13 +02:00
2026-07-11 15:06:12 +02:00
2026-06-11 12:30:28 +02:00

FeedBack — VFX Review & Approval Platform

Frame-accurate video review, annotation drawing, and approval tracking for boutique VFX and animation studios.


Features

  • Dead-simple video upload — drag & drop MP4/MOV, up to 2 GB, version-tracked
  • Frame-accurate scrubbing — canvas-based timeline ruler with click-and-drag seek
  • Timestamp comments — comments anchored to exact frame numbers, threaded replies, resolve/unresolve
  • Annotation drawing — freehand, arrow, rectangle, circle tools with color + stroke width picker
  • Approval workflow — Approve / Reject / Needs Changes with notes, full history
  • Client review links — shareable token-based review URLs for external clients (no login required)
  • Role-based access — Admin / Producer / Supervisor / Artist / Client roles
  • Slack notifications — webhook alerts for uploads and approvals
  • Self-hostable — Docker Compose with PostgreSQL + MinIO (S3-compatible) included

Tech Stack

Layer Technology
Framework Next.js 15 App Router (Turbopack)
Language TypeScript 5 strict
Styling TailwindCSS 3 + shadcn/ui (zinc, dark-only)
Auth NextAuth.js v5 (Credentials + JWT)
Database PostgreSQL 16 via Prisma 6
File Storage UploadThing / S3 / R2 / B2 / MinIO / local
State Zustand 5 (player) + TanStack Query 5 (server)
Annotations HTML5 Canvas API (normalized coordinates)
Video Playback HTML5 <video> with custom controls
Container Docker multi-stage build

Quick Start (Docker)

# 1. Clone and configure
cp .env.example .env
# Edit .env — set AUTH_SECRET, DATABASE_URL, storage provider

# 2. Start services (PostgreSQL + MinIO + App)
docker compose up -d

# 3. Run migrations and seed
docker compose exec app npx prisma migrate deploy
docker compose exec app npx tsx prisma/seed.ts

# 4. Open http://localhost:3000

Demo accounts (after seed):

Email Password Role
admin@vfxreview.local admin123 Admin
producer@vfxreview.local producer123 Producer
supervisor@vfxreview.local supervisor123 Supervisor
artist@vfxreview.local artist123 Artist
client@studio.com client123 Client

Local Development

# Install dependencies
npm install

# Set up database (Postgres must be running)
npx prisma migrate dev
npx tsx prisma/seed.ts

# Start dev server
npm run dev

Open http://localhost:3000.


Environment Variables

See .env.example for full reference. Key variables:

# Required
DATABASE_URL="postgresql://..."
AUTH_SECRET="your-32-char-secret"
NEXTAUTH_URL="http://localhost:3000"

# Storage (choose one)
STORAGE_PROVIDER="local"          # local | uploadthing | s3 | r2 | b2 | minio

# UploadThing (if STORAGE_PROVIDER=uploadthing)
UPLOADTHING_SECRET="sk_live_..."
UPLOADTHING_APP_ID="..."

# AWS S3 / R2 / B2 compatible
S3_ACCESS_KEY_ID=""
S3_SECRET_ACCESS_KEY=""
S3_BUCKET_NAME=""
S3_REGION=""
S3_ENDPOINT=""            # for R2/B2/MinIO

# Slack (optional)
SLACK_BOT_TOKEN=""

# Email (optional, nodemailer)
SMTP_HOST=""
SMTP_PORT="587"
SMTP_USER=""
SMTP_PASS=""

Project Structure

app/
  (auth)/login/          — Sign-in page
  (dashboard)/           — Protected dashboard layout
    dashboard/           — Home stats + shot queue
    projects/            — Project list + detail pages
    settings/            — User profile
  review/[versionId]/    — Full-screen review player
  client/[token]/        — Unauthenticated client review link
  api/
    auth/[...nextauth]/  — NextAuth route handler
    uploadthing/         — UploadThing route handler
    notifications/       — Notification CRUD
    projects/            — Projects REST endpoint

components/
  player/                — ReviewPlayer, FrameTimeline, PlaybackControls
  annotations/           — AnnotationCanvas, AnnotationTools
  comments/              — CommentPanel (threads + replies)
  versions/              — VersionUpload, VersionList
  shots/                 — ShotCard, NewShotDialog
  projects/              — ProjectCard, NewProjectDialog
  dashboard/             — StatsCards, ShotQueue, RecentActivity
  layout/                — Sidebar, Header, NotificationBell, Providers
  ui/                    — shadcn/ui base components

actions/                 — Server Actions (projects, shots, versions, comments, annotations, approvals)
lib/                     — db, auth, utils, frame-utils, storage, slack, notifications, uploadthing
hooks/                   — use-review-player (Zustand), use-annotations, use-frame-comments
prisma/                  — schema.prisma, seed.ts

Review Player Keyboard Shortcuts

Key Action
Space / K Play / Pause
J Reverse playback
L Forward playback
← / → Step one frame
F Toggle fullscreen

License

MIT

S
Description
No description provided
Readme 490 MiB
Languages
TypeScript 78.7%
C# 10.5%
JavaScript 7.5%
Python 2.2%
PowerShell 0.5%
Other 0.5%