# OpenAI + HeyGen Local Studio

This project uses a browser interface plus a small local Node.js server.

## Why the server exists

Never put API keys in HTML, browser JavaScript, localStorage, or a public webpage.
This project keeps both keys in a private `.env` file and binds the app only to
`127.0.0.1`.

## Windows setup

1. Install Node.js 20 or newer.
2. Extract the ZIP.
3. Open PowerShell in the project folder.
4. Run:

```powershell
Copy-Item .env.example .env
notepad .env
npm install
npm start
```

5. Paste the keys into `.env`.
6. Open `http://127.0.0.1:8787`.

## Security

- Never upload `.env`.
- Never commit `.env` to Git.
- Rotate any key exposed in a screenshot or public file.
- Do not publish this server without authentication, HTTPS, validation,
  rate limiting, and proper secret storage.

## Included flows

- OpenAI Responses API via the official JavaScript SDK.
- HeyGen Video Agent creation.
- HeyGen session polling.
- HeyGen final video polling and playback.