cozyclay 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 1.6.0
+
+The official npm package now records anonymous product usage so downloads can
+be distinguished from real launches and returning use.
+
+- `npx cozyclay`, `bunx cozyclay`, and global `cclay` launches get a
+  signed-package-verified anonymous installation ID.
+- The existing scene, edit, motion, export, and activation funnel is available
+  for npm sessions with `distribution: npm` and `app_version` properties.
+- Source checkouts, forks, CI, tests, malformed or unsigned packages, and
+  opted-out launches remain untracked.
+- `cclay telemetry status|on|off` controls the package-wide setting; the
+  in-app toggle stays synchronized with it.
+- URL/referrer/campaign-derived values are scrubbed before any event leaves the
+  browser, and corrupted telemetry state fails closed.
+
 ## 1.5.0
 
 The release where the camera can climb a shaped path, recordings leave the studio as

package/README.md

@@ -55,7 +55,7 @@ https://github.com/user-attachments/assets/1d0113e5-6922-443d-affc-1bdabc666247
 - Node.js 22 or newer
 - npm, or bun
 - A Chromium-based browser
-- *Optional:* an SSH-accessible NVIDIA machine running ARDY, for motion generation
+- *Optional:* an SSH-accessible NVIDIA machine running ARDY, for motion generation — first-time setup downloads a ~16.4 GB text-encoder stack onto that machine; see [`tools/ardy/README.md`](tools/ardy/README.md)
 
 ## Quick start
 
@@ -179,6 +179,52 @@ Found something broken, or want a feature? [Open an issue](https://github.com/No
 
 All runtime libraries intentionally live in `devDependencies` because the published npm package ships the prebuilt `dist/`, so `npx cozyclay` must not install the studio's dependency tree.
 
+## Analytics & privacy
+
+The hosted site at [cozyclay.org](https://cozyclay.org/) collects anonymous usage analytics via [PostHog](https://posthog.com/) (US Cloud). There are no cookies and no session recording, and Do-Not-Track is respected. A random pseudonymous identifier is kept in your browser's localStorage so that returning visits and retention can be counted; it is never linked to an account or project content and is removed by clearing site data or using the opt-out toggle.
+
+Events collected:
+
+| Event | Purpose |
+| --- | --- |
+| `install:first_launch` | First run of the official npm package |
+| `app:session_started` | Start of an official npm package session |
+| `$pageview` | Funnel and drop-off analysis |
+| `scene:created` | Funnel and drop-off analysis |
+| `scene:loaded` | Funnel and drop-off analysis |
+| `craft:first_action` | Funnel and drop-off analysis |
+| `motion:job_started` | Motion reliability |
+| `motion:job_succeeded` | Motion reliability |
+| `motion:job_failed` | Motion reliability |
+| `export:blocking_frame_succeeded` | Funnel and drop-off analysis |
+| `activation:completed` | Funnel and drop-off analysis |
+
+Geo data comes from ingest-time GeoIP country lookup only — no precise location is collected. Prompt text, asset names, file names, project content, local paths, and any user-entered text are never collected.
+
+The official npm package also measures anonymous first launches, sessions, and
+the same in-app funnel on its `127.0.0.1` studio. It stores one random
+installation identifier in `~/.config/cozyclay/state.json` so returning use can
+be counted across ports and browser storage resets. Source checkouts, forks,
+development servers, CI, and tests do not send analytics. Official npm
+artifacts carry a signature checked by the launcher, so copying or repackaging
+the source does not enable telemetry.
+
+The npm package prints this disclosure once on first launch. Control it at any
+time:
+
+```bash
+cclay telemetry status
+cclay telemetry off
+cclay telemetry on
+```
+
+`COZYCLAY_TELEMETRY=0` and `DO_NOT_TRACK=1` disable collection for a launch.
+The in-app topbar toggle changes the same npm-package setting and removes its
+anonymous installation identifier. Hosted-site visitors can opt out with that
+toggle, browser Do-Not-Track, or a content blocker.
+
+PostHog's free plan retains events for 1 year.
+
 ## License & credits
 
 GNU Affero General Public License v3.0 or later — see [`LICENSE`](LICENSE) and the transition details in [`LICENSING.md`](LICENSING.md). Modified network services must offer their users the corresponding source. Third-party projects retain their own licenses and copyright; see [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md).

package/THIRD_PARTY_NOTICES.md

@@ -101,6 +101,14 @@ as third-party content that this licence does not cover.
 - `x-bot-tpose.fbx`, `y-bot-tpose.fbx` — Adobe Mixamo
 - Terms: https://www.adobe.com/legal/terms.html
 
+## posthog-js
+
+The hosted site at cozyclay.org uses [posthog-js](https://posthog.com/docs/libraries/js) for anonymous usage analytics.
+
+- Copyright PostHog Inc.
+- License: Apache-2.0 AND MIT
+- Source: https://github.com/PostHog/posthog-js
+
 ## CozyClay license scope
 
 The CozyClay combined work in this repository is distributed under AGPL-3.0-or-later, subject to the transition details in `LICENSING.md`. That license does not replace or relicense Three.js, ARDY, ARDY model checkpoints, the bundled fonts, the character rigs, or any other third-party component.

package/bin/cozyclay.mjs

@@ -16,7 +16,7 @@
  */
 import { spawn } from "node:child_process";
 import { startBridge, terminateOwned } from "../tools/process-supervisor.mjs";
-import { createReadStream, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { createReadStream, existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { createServer, request as httpRequest } from "node:http";
 import { homedir } from "node:os";
 import { extname, join, normalize, resolve } from "node:path";
@@ -25,10 +25,31 @@ import { fileURLToPath } from "node:url";
 import { runMcp } from "./mcp-runtime.mjs";
 import { openBrowser } from "./open-browser.mjs";
 import { checkForUpdate, runUpdate } from "./update-check.mjs";
+import { verifyPackageMarker } from "./package-signature.mjs";
+import {
+	markTelemetryNoticeShown,
+	markTelemetryFirstLaunch,
+	effectiveTelemetryEnabled,
+	readTelemetryState,
+	setTelemetryEnabled,
+	takeRuntimeTelemetryConfig,
+	TELEMETRY_NOTICE_VERSION,
+} from "./telemetry-state.mjs";
 
 const PKG_ROOT = resolve(fileURLToPath(new URL("..", import.meta.url)));
+let packageMetadata = {};
+try {
+	packageMetadata = JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf8"));
+} catch {
+	// An unreadable package is handled by the existing missing-build checks.
+}
 const DIST = join(PKG_ROOT, "dist");
 const BRIDGE = join(PKG_ROOT, "tools", "ardy", "bridge.mjs");
+const OFFICIAL_PACKAGE = (
+	packageMetadata.name === "cozyclay"
+	&& !existsSync(join(PKG_ROOT, ".git"))
+	&& verifyPackageMarker(join(DIST, "cozyclay-package.json"), PKG_ROOT, packageMetadata)
+);
 let bridgePort = 5181;
 
 const TYPES = {
@@ -99,6 +120,9 @@ const HELP = `cozyclay - browser-based 3D staging studio
   npx cozyclay --no-star    never ask about starring the repo
   npx cozyclay --no-update-check
                             do not look for a newer release
+  cclay telemetry status   show anonymous telemetry status
+  cclay telemetry off      disable anonymous telemetry
+  cclay telemetry on       enable anonymous telemetry
 
 cclay is the same command, shorter: a global install gives you both.
 
@@ -148,7 +172,9 @@ function readState() {
 function writeState(patch) {
 	try {
 		mkdirSync(STATE_DIR, { recursive: true });
-		writeFileSync(STATE_FILE, JSON.stringify({ ...readState(), ...patch }, null, "\t"));
+		const temporary = `${STATE_FILE}.${process.pid}.tmp`;
+		writeFileSync(temporary, JSON.stringify({ ...readState(), ...patch }, null, "\t"), { mode: 0o600 });
+		renameSync(temporary, STATE_FILE);
 	} catch {
 		/* a read-only home is not a reason to fail a local dev server */
 	}
@@ -200,11 +226,7 @@ async function maybeAskForStar(startedAt, opts) {
 // Read on every launch now, so it must not be able to take the launcher down:
 // the version is cosmetic here, and "0.0.0" just suppresses a bogus notice.
 function readVersion() {
-	try {
-		return JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf8")).version ?? "0.0.0";
-	} catch {
-		return "0.0.0";
-	}
+	return typeof packageMetadata.version === "string" ? packageMetadata.version : "0.0.0";
 }
 
 const argv = process.argv.slice(2);
@@ -218,6 +240,23 @@ if (argv[0] === "mcp") {
 		process.exit(1);
 	}
 	runUpdate();
+} else if (argv[0] === "telemetry") {
+	const action = argv[1] ?? "status";
+	if (argv.length > 2 || !["status", "on", "off"].includes(action)) {
+		console.error("cozyclay: telemetry accepts status, on, or off");
+		process.exit(1);
+	}
+	if (action === "on") setTelemetryEnabled(STATE_FILE, true);
+	if (action === "off") setTelemetryEnabled(STATE_FILE, false);
+	const state = readTelemetryState(STATE_FILE);
+	const effective = OFFICIAL_PACKAGE && effectiveTelemetryEnabled(state);
+	const reason = !OFFICIAL_PACKAGE
+		? " (source checkout)"
+		: state.telemetryEnabled && !effective
+			? " (environment override)"
+			: "";
+	console.log(`Telemetry: ${effective ? "on" : "off"}${reason}`);
+	if (action !== "status") console.log("Reload any open CozyClay studio tab to apply this setting.");
 } else {
 
 const opts = parseArgs(argv);
@@ -230,6 +269,21 @@ if (opts.version) {
 	console.log(version);
 	process.exit(0);
 }
+let runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+	appVersion: version,
+	officialPackage: OFFICIAL_PACKAGE,
+});
+const telemetryState = readTelemetryState(STATE_FILE);
+if (
+	runtimeTelemetry.telemetryEnabled
+	&& telemetryState.noticeVersion < TELEMETRY_NOTICE_VERSION
+) {
+	console.log(
+		"Anonymous usage metrics are on (no prompts, project content, filenames, or account information).\n" +
+			"Disable anytime: cclay telemetry off",
+	);
+	markTelemetryNoticeShown(STATE_FILE);
+}
 // Fired before anything blocking and never awaited on the launch path: the
 // notice is worth a line of output, never a second of startup.
 const updatePending = opts.updateCheck && !process.env.CI && !process.env.COZYCLAY_NO_UPDATE_CHECK ? checkForUpdate(version, STATE_DIR) : null;
@@ -296,6 +350,46 @@ if (opts.ardy && ardyHost && existsSync(BRIDGE)) {
 
 server = createServer((req, res) => {
 	const url = new URL(req.url ?? "/", "http://localhost");
+	if (url.pathname === "/__cozyclay/telemetry") {
+		if (req.method === "POST") {
+			const origin = req.headers.origin;
+			const expectedOrigin = `http://127.0.0.1:${opts.port}`;
+			if (origin !== expectedOrigin) {
+				res.writeHead(403, { "content-type": "application/json; charset=utf-8" });
+				res.end(JSON.stringify({ error: "forbidden origin" }));
+				return;
+			}
+			let body = "";
+			req.setEncoding("utf8");
+			req.on("data", (chunk) => {
+				body += chunk;
+				if (body.length > 1024) req.destroy();
+			});
+			req.on("end", () => {
+				try {
+					const value = JSON.parse(body);
+					if (typeof value.enabled !== "boolean") throw new TypeError("enabled must be boolean");
+					setTelemetryEnabled(STATE_FILE, value.enabled);
+					runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+						appVersion: version,
+						officialPackage: OFFICIAL_PACKAGE,
+					});
+					res.writeHead(200, {
+						"content-type": "application/json; charset=utf-8",
+						"cache-control": "no-store",
+					});
+					res.end(JSON.stringify(runtimeTelemetry));
+				} catch {
+					res.writeHead(400, { "content-type": "application/json; charset=utf-8" });
+					res.end(JSON.stringify({ error: "invalid telemetry setting" }));
+				}
+			});
+			return;
+		}
+		res.writeHead(405, { allow: "POST", "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "method not allowed" }));
+		return;
+	}
 	// Only the routes the bridge actually owns: /ardy/ is ALSO a public asset
 	// directory (cskel27-rest.json), and those files live in dist/, not behind
 	// the sidecar. Same rule as the Vite dev proxy bypass.
@@ -303,7 +397,14 @@ server = createServer((req, res) => {
 		proxyToBridge(req, res);
 		return;
 	}
-	const rel = decodeURIComponent(url.pathname);
+	let rel;
+	try {
+		rel = decodeURIComponent(url.pathname);
+	} catch {
+		res.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+		res.end("invalid URL encoding");
+		return;
+	}
 	// normalize + prefix check: a request must not escape dist/.
 	let target = join(DIST, normalize(rel));
 	if (!target.startsWith(DIST)) {
@@ -322,6 +423,25 @@ server = createServer((req, res) => {
 		res.end("not found");
 		return;
 	}
+	if (target === join(DIST, "app", "index.html")) {
+		runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+			appVersion: version,
+			officialPackage: OFFICIAL_PACKAGE,
+		});
+		const runtime = runtimeTelemetry;
+		if (runtime.firstLaunch) {
+			markTelemetryFirstLaunch(STATE_FILE);
+		}
+		const script = `<script>window.__COZYCLAY_RUNTIME__ = ${JSON.stringify(runtime).replaceAll("<", "\\u003c")};</script>`;
+		const html = readFileSync(target, "utf8").replace("</head>", `${script}\n</head>`);
+		res.writeHead(200, {
+			"content-type": "text/html; charset=utf-8",
+			"content-length": Buffer.byteLength(html),
+			"cache-control": "no-store",
+		});
+		res.end(html);
+		return;
+	}
 	serveFile(res, target);
 });
 
@@ -340,6 +460,7 @@ server.listen({ port: opts.port, host: "127.0.0.1", ipv6Only: false }, () => {
 	// marketing page.
 	const url = `http://127.0.0.1:${opts.port}/app/`;
 	console.log(`CozyClay is running at ${url}`);
+	console.log("Use a Chromium-based browser — Safari and Firefox are not supported.");
 	if (!opts.ardy) console.log("Motion generation: off (--no-ardy).");
 	else if (bridge) console.log(`Motion generation: sidecar running against ${ardyHost}.`);
 	else

package/bin/package-signature.mjs

@@ -0,0 +1,95 @@
+import { createHash, createPublicKey, verify } from "node:crypto";
+import { readdirSync, readFileSync } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+
+export const PACKAGE_SIGNATURE_PUBLIC_KEY = "MCowBQYDK2VwAyEAiDLutMZ8CX/NzpuQF/juhT8v9QwPBUvIOHFRqEZoG3U=";
+
+const CONTENT_ROOTS = [
+	"bin",
+	"dist",
+	"src",
+	"tools",
+	"mcp/runtime",
+	"mcp/server.mjs",
+	"mcp/live-hub.mjs",
+	"mcp/ardy-prompts.mjs",
+	"mcp/package.json",
+	"mcp/README.md",
+	"mcp/LIVE-PROTOCOL.md",
+	"package.json",
+	"README.md",
+	"CHANGELOG.md",
+	"LICENSE",
+	"LICENSES",
+	"LICENSING.md",
+	"THIRD_PARTY_NOTICES.md",
+];
+
+function ignored(relativePath) {
+	return relativePath === "dist/cozyclay-package.json"
+		|| (/^dist\/media\/[^/]+\.mp4$/i.test(relativePath))
+		|| relativePath.startsWith("tools/ardy/out/")
+		|| /^tools\/qa-[^/]+\.mjs$/i.test(relativePath);
+}
+
+function collectFiles(path, packageRoot, output) {
+	let entries;
+	try {
+		entries = readdirSync(path, { withFileTypes: true });
+	} catch (error) {
+		if (error?.code === "ENOTDIR") {
+			const relativePath = relative(packageRoot, path).split(sep).join("/");
+			if (!ignored(relativePath)) output.push({ path, relativePath });
+			return;
+		}
+		if (error?.code === "ENOENT") return;
+		throw error;
+	}
+	for (const entry of entries) {
+		const child = join(path, entry.name);
+		const relativePath = relative(packageRoot, child).split(sep).join("/");
+		if (ignored(relativePath)) continue;
+		if (entry.isDirectory()) collectFiles(child, packageRoot, output);
+		if (entry.isFile()) output.push({ path: child, relativePath });
+	}
+}
+
+export function computePackageDigest(packageRoot) {
+	const absoluteRoot = resolve(packageRoot);
+	const files = [];
+	for (const entry of CONTENT_ROOTS) collectFiles(join(absoluteRoot, entry), absoluteRoot, files);
+	files.sort((left, right) => left.relativePath.localeCompare(right.relativePath));
+	const hash = createHash("sha256");
+	for (const file of files) {
+		hash.update(file.relativePath);
+		hash.update("\0");
+		hash.update(readFileSync(file.path));
+		hash.update("\0");
+	}
+	return hash.digest("hex");
+}
+
+export function verifyPackageMarker(
+	markerFile,
+	packageRoot,
+	packageMetadata,
+	publicKeyBase64 = PACKAGE_SIGNATURE_PUBLIC_KEY,
+) {
+	try {
+		const marker = JSON.parse(readFileSync(markerFile, "utf8"));
+		const payload = JSON.parse(marker.payload);
+		if (payload.distribution !== "npm") return false;
+		if (payload.package !== "cozyclay") return false;
+		if (payload.version !== packageMetadata.version) return false;
+		if (payload.repository !== "NomaDamas/CozyClay") return false;
+		if (payload.content_sha256 !== computePackageDigest(packageRoot)) return false;
+		const publicKey = createPublicKey({
+			key: Buffer.from(publicKeyBase64, "base64"),
+			format: "der",
+			type: "spki",
+		});
+		return verify(null, Buffer.from(marker.payload), publicKey, Buffer.from(marker.signature, "base64"));
+	} catch {
+		return false;
+	}
+}

package/bin/telemetry-state.mjs

@@ -0,0 +1,111 @@
+import { randomUUID as nodeRandomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+
+export const TELEMETRY_NOTICE_VERSION = 1;
+export const POSTHOG_PROJECT_TOKEN = "phc_CpizzZ8VhSorSS8yEeQhdpUcvB2erp5xkCbnFD8HTJ5m";
+export const POSTHOG_API_HOST = "https://t.cozyclay.org";
+
+const DEFAULT_STATE = Object.freeze({
+	installationId: null,
+	telemetryEnabled: true,
+	firstLaunchedAt: null,
+	noticeVersion: 0,
+});
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+function rawState(stateFile) {
+	try {
+		const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
+		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+	} catch (error) {
+		return error?.code === "ENOENT" ? {} : { telemetryEnabled: false };
+	}
+}
+
+function normalizedState(value) {
+	return {
+		installationId: typeof value.installationId === "string" && UUID_PATTERN.test(value.installationId)
+			? value.installationId
+			: null,
+		telemetryEnabled: value.telemetryEnabled !== false,
+		firstLaunchedAt: typeof value.telemetryFirstLaunchedAt === "string"
+			? value.telemetryFirstLaunchedAt
+			: null,
+		noticeVersion: Number.isInteger(value.telemetryNoticeVersion)
+			? value.telemetryNoticeVersion
+			: 0,
+	};
+}
+
+function writeState(stateFile, patch) {
+	const next = { ...rawState(stateFile), ...patch };
+	mkdirSync(dirname(stateFile), { recursive: true });
+	const temporary = `${stateFile}.${process.pid}.tmp`;
+	writeFileSync(temporary, JSON.stringify(next, null, "\t"), { mode: 0o600 });
+	renameSync(temporary, stateFile);
+}
+
+function envDisablesTelemetry(env) {
+	if (env.CI && !/^(0|false|no|off)$/i.test(env.CI)) return true;
+	if (/^(1|true|yes|on)$/i.test(env.DO_NOT_TRACK ?? "")) return true;
+	return /^(0|false|no|off)$/i.test(env.COZYCLAY_TELEMETRY ?? "");
+}
+
+export function readTelemetryState(stateFile) {
+	return normalizedState(rawState(stateFile));
+}
+
+export function effectiveTelemetryEnabled(state, env = process.env) {
+	return state.telemetryEnabled && !envDisablesTelemetry(env);
+}
+
+export function setTelemetryEnabled(stateFile, enabled) {
+	writeState(stateFile, {
+		telemetryEnabled: enabled === true,
+		...(enabled === true ? {} : { installationId: null }),
+	});
+	return readTelemetryState(stateFile);
+}
+
+export function markTelemetryNoticeShown(stateFile) {
+	writeState(stateFile, { telemetryNoticeVersion: TELEMETRY_NOTICE_VERSION });
+}
+
+export function markTelemetryFirstLaunch(stateFile, now = () => new Date().toISOString()) {
+	if (readTelemetryState(stateFile).firstLaunchedAt) return;
+	writeState(stateFile, { telemetryFirstLaunchedAt: now() });
+}
+
+export function takeRuntimeTelemetryConfig(
+	stateFile,
+	{
+		appVersion,
+		officialPackage = true,
+		env = process.env,
+		now = () => new Date().toISOString(),
+		randomUUID = nodeRandomUUID,
+	} = {},
+) {
+	const existing = readTelemetryState(stateFile);
+	const telemetryEnabled = officialPackage && effectiveTelemetryEnabled(existing, env);
+	let installationId = existing.installationId;
+	const firstLaunch = telemetryEnabled && !existing.firstLaunchedAt;
+	const patch = {};
+
+	if (telemetryEnabled && !installationId) {
+		installationId = randomUUID();
+		patch.installationId = installationId;
+	}
+	if (Object.keys(patch).length > 0) writeState(stateFile, patch);
+
+	return {
+		distribution: "npm",
+		telemetryEnabled,
+		installationId: telemetryEnabled ? installationId : null,
+		appVersion,
+		apiKey: POSTHOG_PROJECT_TOKEN,
+		apiHost: POSTHOG_API_HOST,
+		firstLaunch,
+	};
+}

package/dist/ai-camera-control/index.html

@@ -6,9 +6,8 @@
     <meta name="description" content="Camera control for AI video: why prompting an angle keeps drifting, what Seedance, Veo and Kling actually accept, and how blocking the shot in 3D first gives you the same camera on every take." />
     <meta name="theme-color" content="#232323" />
     <link rel="canonical" href="https://cozyclay.org/ai-camera-control/" />
-    <link rel="icon" href="/favicon.ico" sizes="any" />
-    <link rel="icon" type="image/png" sizes="32x32" href="/icons/icon-32.png" />
     <link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png" />
+    <link rel="icon" href="/favicon.ico" sizes="48x48 96x96 192x192" />
     <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
 
     <meta property="og:type" content="article" />
@@ -207,7 +206,7 @@
           <a href="/#what">What it does</a>
           <a href="/#start">Quick start</a>
           <a href="/ai-camera-control/">AI camera control</a>
-          <a href="https://github.com/HaD0Yun/CozyClay">GitHub</a>
+          <a href="https://github.com/NomaDamas/CozyClay">GitHub</a>
         </nav>
       </div>
     </header>
@@ -343,7 +342,7 @@
 
         <div class="cta">
           <a class="btn primary" href="/">What CozyClay does</a>
-          <a class="btn ghost" href="https://github.com/HaD0Yun/CozyClay">View on GitHub</a>
+          <a class="btn ghost" href="https://github.com/NomaDamas/CozyClay">View on GitHub</a>
         </div>
         <p class="note">
           Free and open source. Runs locally with <code>npx cozyclay</code>.
@@ -393,7 +392,7 @@
       <div class="wrap">
         <p>
           <a href="/">CozyClay</a> ·
-          <a href="https://github.com/HaD0Yun/CozyClay">GitHub</a> ·
+          <a href="https://github.com/NomaDamas/CozyClay">GitHub</a> ·
           <a href="https://www.npmjs.com/package/cozyclay">npm</a>
         </p>
         <p>

package/dist/app/index.html

@@ -14,9 +14,8 @@
     <meta name="robots" content="noindex, follow" />
     <link rel="canonical" href="https://cozyclay.org/app/" />
     <link rel="manifest" href="/manifest.webmanifest" />
-    <link rel="icon" href="/favicon.ico" sizes="any" />
-    <link rel="icon" type="image/png" sizes="32x32" href="/icons/icon-32.png" />
     <link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png" />
+    <link rel="icon" href="/favicon.ico" sizes="48x48 96x96 192x192" />
     <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
 
     <meta property="og:type" content="website" />
@@ -35,7 +34,7 @@
     <title>CozyClay Studio — 3D staging and previs in your browser</title>
 
     <script defer src="https://static.cloudflareinsights.com/beacon.min.js" data-cf-beacon='{"token": "6a4384d1375d4ffc8a30a6346a8ad1a0"}'></script>
-    <script type="module" crossorigin src="/assets/app-zu633VCI.js"></script>
+    <script type="module" crossorigin src="/assets/app-G55dPEDB.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/app-CqOk49Bk.css">
   </head>
   <body>