cozyclay 1.5.0 → 1.7.0

package/bin/cozyclay.mjs

@@ -3,12 +3,12 @@
  * cozyclay - run the studio from a published package.
  *
  * `npx cozyclay` / `bunx cozyclay` should behave like `npm run dev` does in a
- * clone: the studio in a browser, with the optional ARDY sidecar wired up.
+ * clone: the studio in a browser, with the optional motion sidecar wired up.
  * The difference is that nothing is built here. The package ships the built
  * `dist/`, so this launcher only has to
  *
  *   - serve those files over loopback,
- *   - forward /ardy to its dynamically selected sidecar port (the job Vite's dev proxy does),
+ *   - forward /ardy to its dynamically selected sidecar port (the same job Vite's dev proxy does),
  *   - keep the sidecar's lifetime tied to this process.
  *
  * It has no dependencies on purpose. A launcher that needs an install step
@@ -16,7 +16,7 @@
  */
 import { spawn } from "node:child_process";
 import { startBridge, terminateOwned } from "../tools/process-supervisor.mjs";
-import { createReadStream, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { createReadStream, existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { createServer, request as httpRequest } from "node:http";
 import { homedir } from "node:os";
 import { extname, join, normalize, resolve } from "node:path";
@@ -25,11 +25,37 @@ import { fileURLToPath } from "node:url";
 import { runMcp } from "./mcp-runtime.mjs";
 import { openBrowser } from "./open-browser.mjs";
 import { checkForUpdate, runUpdate } from "./update-check.mjs";
+import { verifyPackageMarker } from "./package-signature.mjs";
+import {
+	markTelemetryNoticeShown,
+	markTelemetryFirstLaunch,
+	effectiveTelemetryEnabled,
+	readTelemetryState,
+	setTelemetryEnabled,
+	takeRuntimeTelemetryConfig,
+	TELEMETRY_NOTICE_VERSION,
+} from "./telemetry-state.mjs";
 
 const PKG_ROOT = resolve(fileURLToPath(new URL("..", import.meta.url)));
+let packageMetadata = {};
+try {
+	packageMetadata = JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf8"));
+} catch {
+	// An unreadable package is handled by the existing missing-build checks.
+}
 const DIST = join(PKG_ROOT, "dist");
 const BRIDGE = join(PKG_ROOT, "tools", "ardy", "bridge.mjs");
-let bridgePort = 5181;
+const OFFICIAL_PACKAGE = (
+	packageMetadata.name === "cozyclay"
+	&& !existsSync(join(PKG_ROOT, ".git"))
+	&& verifyPackageMarker(join(DIST, "cozyclay-package.json"), PKG_ROOT, packageMetadata)
+);
+// A bridge is optional. Keep the endpoint unset until this launcher owns a
+// sidecar; otherwise /ardy requests could accidentally reach an unrelated
+// process that happens to be listening on the bridge's historical default
+// port (5181).
+let bridge = null;
+let bridgePort = null;
 
 const TYPES = {
 	".html": "text/html; charset=utf-8",
@@ -49,14 +75,14 @@ const TYPES = {
 };
 
 function parseArgs(argv) {
-	const opts = { port: 5180, host: "127.0.0.1", ardy: true, open: true, star: true, updateCheck: true };
+	const opts = { port: 5180, host: "127.0.0.1", motion: true, open: true, star: true, updateCheck: true };
 	for (let i = 0; i < argv.length; i += 1) {
 		const arg = argv[i];
 		if (arg === "--port" || arg === "-p") opts.port = Number(argv[++i]);
 		else if (arg.startsWith("--port=")) opts.port = Number(arg.slice(7));
 		else if (arg === "--host") opts.host = String(argv[++i]);
 		else if (arg.startsWith("--host=")) opts.host = arg.slice(7);
-		else if (arg === "--no-ardy") opts.ardy = false;
+		else if (arg === "--no-motion") opts.motion = false;
 		else if (arg === "--no-open") opts.open = false;
 		else if (arg === "--no-star") opts.star = false;
 		else if (arg === "--no-update-check") opts.updateCheck = false;
@@ -94,16 +120,19 @@ const HELP = `cozyclay - browser-based 3D staging studio
   npx cozyclay mcp          run the MCP server (for Claude, Cursor, any MCP client)
   cclay update              install the latest cozyclay globally (npm install -g)
   npx cozyclay --port 5200  serve on another port
-  npx cozyclay --no-ardy    skip the optional motion-generation sidecar
+  npx cozyclay --no-motion  skip the optional motion-generation sidecar
   npx cozyclay --no-open    do not open a browser
   npx cozyclay --no-star    never ask about starring the repo
   npx cozyclay --no-update-check
                             do not look for a newer release
+  cclay telemetry status   show anonymous telemetry status
+  cclay telemetry off      disable anonymous telemetry
+  cclay telemetry on       enable anonymous telemetry
 
 cclay is the same command, shorter: a global install gives you both.
 
-Motion generation needs an SSH-reachable NVIDIA machine running ARDY; point
-the sidecar at it with CCLAY_ARDY_HOST. Everything else - staging, posing,
+Motion generation needs an SSH-reachable NVIDIA machine running Kimodo; point
+the sidecar at it with CCLAY_KIMODO_HOST. Everything else - staging, posing,
 paths, cameras, timeline, playback - runs locally with no extra setup.`;
 
 function serveFile(res, path) {
@@ -121,6 +150,12 @@ function serveFile(res, path) {
 // Forward /ardy to the sidecar. Same contract as the Vite dev proxy, so the
 // browser code needs no build-time knowledge of how it was launched.
 function proxyToBridge(req, res) {
+	if (!bridge || bridgePort === null || bridge.exitCode !== null || bridge.signalCode !== null) {
+		req.resume();
+		res.writeHead(503, { "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "motion sidecar is not running" }));
+		return;
+	}
 	const upstream = httpRequest(
 		{ host: "127.0.0.1", port: bridgePort, path: req.url, method: req.method, headers: req.headers },
 		(upstreamRes) => {
@@ -132,7 +167,7 @@ function proxyToBridge(req, res) {
 		// An absent sidecar is an expected state, not a crash: the app treats a
 		// failed probe as "generation unavailable" and carries on.
 		res.writeHead(503, { "content-type": "application/json" });
-		res.end(JSON.stringify({ error: "ardy sidecar is not running" }));
+		res.end(JSON.stringify({ error: "motion sidecar is not running" }));
 	});
 	req.pipe(upstream);
 }
@@ -148,7 +183,9 @@ function readState() {
 function writeState(patch) {
 	try {
 		mkdirSync(STATE_DIR, { recursive: true });
-		writeFileSync(STATE_FILE, JSON.stringify({ ...readState(), ...patch }, null, "\t"));
+		const temporary = `${STATE_FILE}.${process.pid}.tmp`;
+		writeFileSync(temporary, JSON.stringify({ ...readState(), ...patch }, null, "\t"), { mode: 0o600 });
+		renameSync(temporary, STATE_FILE);
 	} catch {
 		/* a read-only home is not a reason to fail a local dev server */
 	}
@@ -200,11 +237,7 @@ async function maybeAskForStar(startedAt, opts) {
 // Read on every launch now, so it must not be able to take the launcher down:
 // the version is cosmetic here, and "0.0.0" just suppresses a bogus notice.
 function readVersion() {
-	try {
-		return JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf8")).version ?? "0.0.0";
-	} catch {
-		return "0.0.0";
-	}
+	return typeof packageMetadata.version === "string" ? packageMetadata.version : "0.0.0";
 }
 
 const argv = process.argv.slice(2);
@@ -218,18 +251,50 @@ if (argv[0] === "mcp") {
 		process.exit(1);
 	}
 	runUpdate();
+} else if (argv[0] === "telemetry") {
+	const action = argv[1] ?? "status";
+	if (argv.length > 2 || !["status", "on", "off"].includes(action)) {
+		console.error("cozyclay: telemetry accepts status, on, or off");
+		process.exit(1);
+	}
+	if (action === "on") setTelemetryEnabled(STATE_FILE, true);
+	if (action === "off") setTelemetryEnabled(STATE_FILE, false);
+	const state = readTelemetryState(STATE_FILE);
+	const effective = OFFICIAL_PACKAGE && effectiveTelemetryEnabled(state);
+	const reason = !OFFICIAL_PACKAGE
+		? " (source checkout)"
+		: state.telemetryEnabled && !effective
+			? " (environment override)"
+			: "";
+	console.log(`Telemetry: ${effective ? "on" : "off"}${reason}`);
+	if (action !== "status") console.log("Reload any open CozyClay studio tab to apply this setting.");
 } else {
 
 const opts = parseArgs(argv);
-	if (opts.help) {
-		console.log(HELP);
-		process.exit(opts.invalid ? 1 : 0);
+if (opts.help) {
+	console.log(HELP);
+	process.exit(opts.invalid ? 1 : 0);
 }
 const version = readVersion();
 if (opts.version) {
 	console.log(version);
 	process.exit(0);
 }
+let runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+	appVersion: version,
+	officialPackage: OFFICIAL_PACKAGE,
+});
+const telemetryState = readTelemetryState(STATE_FILE);
+if (
+	runtimeTelemetry.telemetryEnabled
+	&& telemetryState.noticeVersion < TELEMETRY_NOTICE_VERSION
+) {
+	console.log(
+		"Anonymous usage metrics are on (no prompts, project content, filenames, or account information).\n" +
+			"Disable anytime: cclay telemetry off",
+	);
+	markTelemetryNoticeShown(STATE_FILE);
+}
 // Fired before anything blocking and never awaited on the launch path: the
 // notice is worth a line of output, never a second of startup.
 const updatePending = opts.updateCheck && !process.env.CI && !process.env.COZYCLAY_NO_UPDATE_CHECK ? checkForUpdate(version, STATE_DIR) : null;
@@ -241,9 +306,8 @@ if (!existsSync(join(DIST, "app", "index.html"))) {
 
 // The sidecar exits immediately without a box to talk to, so starting it
 // unconditionally would greet a first-time `npx cozyclay` with an error it
-// cannot act on. An unset CCLAY_ARDY_HOST is the normal case, not a fault.
-const ardyHost = process.env.CCLAY_ARDY_HOST?.trim();
-let bridge = null;
+// cannot act on. An unset CCLAY_KIMODO_HOST is the normal case, not a fault.
+const kimodoHost = process.env.CCLAY_KIMODO_HOST?.trim();
 let server = null;
 const startedAt = Date.now();
 let shuttingDown = false;
@@ -262,7 +326,7 @@ async function shutdown(exitCode = 0) {
 process.on("SIGINT", () => shutdown(130));
 process.on("SIGTERM", () => shutdown(143));
 
-if (opts.ardy && ardyHost && existsSync(BRIDGE)) {
+if (opts.motion && kimodoHost && existsSync(BRIDGE)) {
 	try {
 		({ child: bridge, port: bridgePort } = await startBridge({
 			command: process.execPath,
@@ -288,7 +352,7 @@ if (opts.ardy && ardyHost && existsSync(BRIDGE)) {
 		}));
 	} catch (err) {
 		console.error(`cozyclay: motion generation sidecar failed: ${err.message}`);
-		console.error("cozyclay: studio did not start; set COZYCLAY_BRIDGE_PORT to an available port or use --no-ardy.");
+		console.error("cozyclay: studio did not start; set COZYCLAY_BRIDGE_PORT to an available port or use --no-motion.");
 		if (bridge) await terminateOwned(bridge);
 		process.exit(1);
 	}
@@ -296,6 +360,46 @@ if (opts.ardy && ardyHost && existsSync(BRIDGE)) {
 
 server = createServer((req, res) => {
 	const url = new URL(req.url ?? "/", "http://localhost");
+	if (url.pathname === "/__cozyclay/telemetry") {
+		if (req.method === "POST") {
+			const origin = req.headers.origin;
+			const expectedOrigin = `http://127.0.0.1:${opts.port}`;
+			if (origin !== expectedOrigin) {
+				res.writeHead(403, { "content-type": "application/json; charset=utf-8" });
+				res.end(JSON.stringify({ error: "forbidden origin" }));
+				return;
+			}
+			let body = "";
+			req.setEncoding("utf8");
+			req.on("data", (chunk) => {
+				body += chunk;
+				if (body.length > 1024) req.destroy();
+			});
+			req.on("end", () => {
+				try {
+					const value = JSON.parse(body);
+					if (typeof value.enabled !== "boolean") throw new TypeError("enabled must be boolean");
+					setTelemetryEnabled(STATE_FILE, value.enabled);
+					runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+						appVersion: version,
+						officialPackage: OFFICIAL_PACKAGE,
+					});
+					res.writeHead(200, {
+						"content-type": "application/json; charset=utf-8",
+						"cache-control": "no-store",
+					});
+					res.end(JSON.stringify(runtimeTelemetry));
+				} catch {
+					res.writeHead(400, { "content-type": "application/json; charset=utf-8" });
+					res.end(JSON.stringify({ error: "invalid telemetry setting" }));
+				}
+			});
+			return;
+		}
+		res.writeHead(405, { allow: "POST", "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "method not allowed" }));
+		return;
+	}
 	// Only the routes the bridge actually owns: /ardy/ is ALSO a public asset
 	// directory (cskel27-rest.json), and those files live in dist/, not behind
 	// the sidecar. Same rule as the Vite dev proxy bypass.
@@ -303,7 +407,14 @@ server = createServer((req, res) => {
 		proxyToBridge(req, res);
 		return;
 	}
-	const rel = decodeURIComponent(url.pathname);
+	let rel;
+	try {
+		rel = decodeURIComponent(url.pathname);
+	} catch {
+		res.writeHead(400, { "content-type": "text/plain; charset=utf-8" });
+		res.end("invalid URL encoding");
+		return;
+	}
 	// normalize + prefix check: a request must not escape dist/.
 	let target = join(DIST, normalize(rel));
 	if (!target.startsWith(DIST)) {
@@ -322,6 +433,28 @@ server = createServer((req, res) => {
 		res.end("not found");
 		return;
 	}
+	if (target === join(DIST, "app", "index.html")) {
+		runtimeTelemetry = takeRuntimeTelemetryConfig(STATE_FILE, {
+			appVersion: version,
+			officialPackage: OFFICIAL_PACKAGE,
+		});
+		const runtime = runtimeTelemetry;
+		if (runtime.firstLaunch) {
+			markTelemetryFirstLaunch(STATE_FILE);
+		}
+		// __COZYCLAY_LIVE__ opts the production build into the loopback live
+		// socket (src/App.jsx gates on DEV || this flag); without it an
+		// npx-served studio can never attach to the MCP server's live hub.
+		const script = `<script>window.__COZYCLAY_RUNTIME__ = ${JSON.stringify(runtime).replaceAll("<", "\\u003c")}; window.__COZYCLAY_LIVE__ = true;</script>`;
+		const html = readFileSync(target, "utf8").replace("</head>", `${script}\n</head>`);
+		res.writeHead(200, {
+			"content-type": "text/html; charset=utf-8",
+			"content-length": Buffer.byteLength(html),
+			"cache-control": "no-store",
+		});
+		res.end(html);
+		return;
+	}
 	serveFile(res, target);
 });
 
@@ -340,12 +473,13 @@ server.listen({ port: opts.port, host: "127.0.0.1", ipv6Only: false }, () => {
 	// marketing page.
 	const url = `http://127.0.0.1:${opts.port}/app/`;
 	console.log(`CozyClay is running at ${url}`);
-	if (!opts.ardy) console.log("Motion generation: off (--no-ardy).");
-	else if (bridge) console.log(`Motion generation: sidecar running against ${ardyHost}.`);
+	console.log("Use a Chromium-based browser — Safari and Firefox are not supported.");
+	if (!opts.motion) console.log("Motion generation: off (--no-motion).");
+	else if (bridge) console.log(`Motion generation: sidecar running against ${kimodoHost}.`);
 	else
 		console.log(
-			"Motion generation: off. It runs on an SSH-reachable NVIDIA machine with ARDY;\n" +
-				"set CCLAY_ARDY_HOST=user@host to turn it on. Everything else works without it.",
+			"Motion generation: off. It runs on an SSH-reachable NVIDIA machine with Kimodo;\n" +
+				"set CCLAY_KIMODO_HOST=user@host to turn it on. Everything else works without it.",
 		);
 	if (opts.open) openBrowser(url);
 	void updatePending?.then((latest) => {

package/bin/package-signature.mjs

@@ -0,0 +1,95 @@
+import { createHash, createPublicKey, verify } from "node:crypto";
+import { readdirSync, readFileSync } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+
+export const PACKAGE_SIGNATURE_PUBLIC_KEY = "MCowBQYDK2VwAyEAiDLutMZ8CX/NzpuQF/juhT8v9QwPBUvIOHFRqEZoG3U=";
+
+const CONTENT_ROOTS = [
+	"bin",
+	"dist",
+	"src",
+	"tools",
+	"mcp/runtime",
+	"mcp/server.mjs",
+	"mcp/live-hub.mjs",
+	"mcp/ardy-prompts.mjs",
+	"mcp/package.json",
+	"mcp/README.md",
+	"mcp/LIVE-PROTOCOL.md",
+	"package.json",
+	"README.md",
+	"CHANGELOG.md",
+	"LICENSE",
+	"LICENSES",
+	"LICENSING.md",
+	"THIRD_PARTY_NOTICES.md",
+];
+
+function ignored(relativePath) {
+	return relativePath === "dist/cozyclay-package.json"
+		|| (/^dist\/media\/[^/]+\.mp4$/i.test(relativePath))
+		|| relativePath.startsWith("tools/ardy/out/")
+		|| /^tools\/qa-[^/]+\.mjs$/i.test(relativePath);
+}
+
+function collectFiles(path, packageRoot, output) {
+	let entries;
+	try {
+		entries = readdirSync(path, { withFileTypes: true });
+	} catch (error) {
+		if (error?.code === "ENOTDIR") {
+			const relativePath = relative(packageRoot, path).split(sep).join("/");
+			if (!ignored(relativePath)) output.push({ path, relativePath });
+			return;
+		}
+		if (error?.code === "ENOENT") return;
+		throw error;
+	}
+	for (const entry of entries) {
+		const child = join(path, entry.name);
+		const relativePath = relative(packageRoot, child).split(sep).join("/");
+		if (ignored(relativePath)) continue;
+		if (entry.isDirectory()) collectFiles(child, packageRoot, output);
+		if (entry.isFile()) output.push({ path: child, relativePath });
+	}
+}
+
+export function computePackageDigest(packageRoot) {
+	const absoluteRoot = resolve(packageRoot);
+	const files = [];
+	for (const entry of CONTENT_ROOTS) collectFiles(join(absoluteRoot, entry), absoluteRoot, files);
+	files.sort((left, right) => left.relativePath.localeCompare(right.relativePath));
+	const hash = createHash("sha256");
+	for (const file of files) {
+		hash.update(file.relativePath);
+		hash.update("\0");
+		hash.update(readFileSync(file.path));
+		hash.update("\0");
+	}
+	return hash.digest("hex");
+}
+
+export function verifyPackageMarker(
+	markerFile,
+	packageRoot,
+	packageMetadata,
+	publicKeyBase64 = PACKAGE_SIGNATURE_PUBLIC_KEY,
+) {
+	try {
+		const marker = JSON.parse(readFileSync(markerFile, "utf8"));
+		const payload = JSON.parse(marker.payload);
+		if (payload.distribution !== "npm") return false;
+		if (payload.package !== "cozyclay") return false;
+		if (payload.version !== packageMetadata.version) return false;
+		if (payload.repository !== "NomaDamas/CozyClay") return false;
+		if (payload.content_sha256 !== computePackageDigest(packageRoot)) return false;
+		const publicKey = createPublicKey({
+			key: Buffer.from(publicKeyBase64, "base64"),
+			format: "der",
+			type: "spki",
+		});
+		return verify(null, Buffer.from(marker.payload), publicKey, Buffer.from(marker.signature, "base64"));
+	} catch {
+		return false;
+	}
+}

package/bin/telemetry-state.mjs

@@ -0,0 +1,111 @@
+import { randomUUID as nodeRandomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+
+export const TELEMETRY_NOTICE_VERSION = 1;
+export const POSTHOG_PROJECT_TOKEN = "phc_CpizzZ8VhSorSS8yEeQhdpUcvB2erp5xkCbnFD8HTJ5m";
+export const POSTHOG_API_HOST = "https://t.cozyclay.org";
+
+const DEFAULT_STATE = Object.freeze({
+	installationId: null,
+	telemetryEnabled: true,
+	firstLaunchedAt: null,
+	noticeVersion: 0,
+});
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+function rawState(stateFile) {
+	try {
+		const parsed = JSON.parse(readFileSync(stateFile, "utf8"));
+		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+	} catch (error) {
+		return error?.code === "ENOENT" ? {} : { telemetryEnabled: false };
+	}
+}
+
+function normalizedState(value) {
+	return {
+		installationId: typeof value.installationId === "string" && UUID_PATTERN.test(value.installationId)
+			? value.installationId
+			: null,
+		telemetryEnabled: value.telemetryEnabled !== false,
+		firstLaunchedAt: typeof value.telemetryFirstLaunchedAt === "string"
+			? value.telemetryFirstLaunchedAt
+			: null,
+		noticeVersion: Number.isInteger(value.telemetryNoticeVersion)
+			? value.telemetryNoticeVersion
+			: 0,
+	};
+}
+
+function writeState(stateFile, patch) {
+	const next = { ...rawState(stateFile), ...patch };
+	mkdirSync(dirname(stateFile), { recursive: true });
+	const temporary = `${stateFile}.${process.pid}.tmp`;
+	writeFileSync(temporary, JSON.stringify(next, null, "\t"), { mode: 0o600 });
+	renameSync(temporary, stateFile);
+}
+
+function envDisablesTelemetry(env) {
+	if (env.CI && !/^(0|false|no|off)$/i.test(env.CI)) return true;
+	if (/^(1|true|yes|on)$/i.test(env.DO_NOT_TRACK ?? "")) return true;
+	return /^(0|false|no|off)$/i.test(env.COZYCLAY_TELEMETRY ?? "");
+}
+
+export function readTelemetryState(stateFile) {
+	return normalizedState(rawState(stateFile));
+}
+
+export function effectiveTelemetryEnabled(state, env = process.env) {
+	return state.telemetryEnabled && !envDisablesTelemetry(env);
+}
+
+export function setTelemetryEnabled(stateFile, enabled) {
+	writeState(stateFile, {
+		telemetryEnabled: enabled === true,
+		...(enabled === true ? {} : { installationId: null }),
+	});
+	return readTelemetryState(stateFile);
+}
+
+export function markTelemetryNoticeShown(stateFile) {
+	writeState(stateFile, { telemetryNoticeVersion: TELEMETRY_NOTICE_VERSION });
+}
+
+export function markTelemetryFirstLaunch(stateFile, now = () => new Date().toISOString()) {
+	if (readTelemetryState(stateFile).firstLaunchedAt) return;
+	writeState(stateFile, { telemetryFirstLaunchedAt: now() });
+}
+
+export function takeRuntimeTelemetryConfig(
+	stateFile,
+	{
+		appVersion,
+		officialPackage = true,
+		env = process.env,
+		now = () => new Date().toISOString(),
+		randomUUID = nodeRandomUUID,
+	} = {},
+) {
+	const existing = readTelemetryState(stateFile);
+	const telemetryEnabled = officialPackage && effectiveTelemetryEnabled(existing, env);
+	let installationId = existing.installationId;
+	const firstLaunch = telemetryEnabled && !existing.firstLaunchedAt;
+	const patch = {};
+
+	if (telemetryEnabled && !installationId) {
+		installationId = randomUUID();
+		patch.installationId = installationId;
+	}
+	if (Object.keys(patch).length > 0) writeState(stateFile, patch);
+
+	return {
+		distribution: "npm",
+		telemetryEnabled,
+		installationId: telemetryEnabled ? installationId : null,
+		appVersion,
+		apiKey: POSTHOG_PROJECT_TOKEN,
+		apiHost: POSTHOG_API_HOST,
+		firstLaunch,
+	};
+}

package/dist/ai-camera-control/index.html

@@ -6,9 +6,8 @@
     <meta name="description" content="Camera control for AI video: why prompting an angle keeps drifting, what Seedance, Veo and Kling actually accept, and how blocking the shot in 3D first gives you the same camera on every take." />
     <meta name="theme-color" content="#232323" />
     <link rel="canonical" href="https://cozyclay.org/ai-camera-control/" />
-    <link rel="icon" href="/favicon.ico" sizes="any" />
-    <link rel="icon" type="image/png" sizes="32x32" href="/icons/icon-32.png" />
     <link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png" />
+    <link rel="icon" href="/favicon.ico" sizes="48x48 96x96 192x192" />
     <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
 
     <meta property="og:type" content="article" />
@@ -207,7 +206,7 @@
           <a href="/#what">What it does</a>
           <a href="/#start">Quick start</a>
           <a href="/ai-camera-control/">AI camera control</a>
-          <a href="https://github.com/HaD0Yun/CozyClay">GitHub</a>
+          <a href="https://github.com/NomaDamas/CozyClay">GitHub</a>
         </nav>
       </div>
     </header>
@@ -343,7 +342,7 @@
 
         <div class="cta">
           <a class="btn primary" href="/">What CozyClay does</a>
-          <a class="btn ghost" href="https://github.com/HaD0Yun/CozyClay">View on GitHub</a>
+          <a class="btn ghost" href="https://github.com/NomaDamas/CozyClay">View on GitHub</a>
         </div>
         <p class="note">
           Free and open source. Runs locally with <code>npx cozyclay</code>.
@@ -393,7 +392,7 @@
       <div class="wrap">
         <p>
           <a href="/">CozyClay</a> ·
-          <a href="https://github.com/HaD0Yun/CozyClay">GitHub</a> ·
+          <a href="https://github.com/NomaDamas/CozyClay">GitHub</a> ·
           <a href="https://www.npmjs.com/package/cozyclay">npm</a>
         </p>
         <p>

package/dist/app/index.html

@@ -14,9 +14,8 @@
     <meta name="robots" content="noindex, follow" />
     <link rel="canonical" href="https://cozyclay.org/app/" />
     <link rel="manifest" href="/manifest.webmanifest" />
-    <link rel="icon" href="/favicon.ico" sizes="any" />
-    <link rel="icon" type="image/png" sizes="32x32" href="/icons/icon-32.png" />
     <link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png" />
+    <link rel="icon" href="/favicon.ico" sizes="48x48 96x96 192x192" />
     <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
 
     <meta property="og:type" content="website" />
@@ -35,8 +34,9 @@
     <title>CozyClay Studio — 3D staging and previs in your browser</title>
 
     <script defer src="https://static.cloudflareinsights.com/beacon.min.js" data-cf-beacon='{"token": "6a4384d1375d4ffc8a30a6346a8ad1a0"}'></script>
-    <script type="module" crossorigin src="/assets/app-zu633VCI.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/app-CqOk49Bk.css">
+    <script type="module" crossorigin src="/assets/app-BdCI2Bys.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/modulepreload-polyfill-P2Xu9kJm.js">
+    <link rel="stylesheet" crossorigin href="/assets/app-CrB3UF4K.css">
   </head>
   <body>
     <div id="root">