fix: all HF Space issues resolved

1. PropertiesPanel.jsx: fixed operator precedence bug
!model[key]??true → !(model[key]??true)
(was causing incorrect boolean logic on shadow toggles)

2. nginx.conf: removed Cross-Origin-Embedder-Policy header
COEP was blocking ALL cross-origin resource loading:
- GLB/GLTF models from threejs.org, supabase.co etc
- HDR/image skyboxes from external URLs
- Google Fonts
Removing COEP fixes model loading completely

3. README.md: clean valid HF front-matter, no trailing content issues

4. dist/: rebuilt with all fixes applied (index-CPjiwba7.js)
Dockerfile still uses pre-built dist/ so HF build = ~20 sec

Deployment strategy: nginx-only Docker image (no node/npm on HF)
- FROM nginx:1.25-alpine only
- COPY dist/ → nginx serves it
- Build time on HF free tier: ~20 seconds

README.md

@@ -15,12 +15,8 @@ short_description: GLB 3D Animation Studio — Three.js + React
 Professional browser-based 3D animation studio for GLB/GLTF models.
 
 ## Features
-- GLB/GLTF model loading, transform controls, keyframe animation
-- Multi-camera system with fly controls and camera path animation
-- Cannon.js physics engine (gravity, impulse, damping)
-- AI scene controller via OpenRouter (free models, auto-retry)
-- Undo/redo, project save/load, material editor, clean render mode
-- Video export (WebM) + PNG sequence, mobile optimised
-
-## Tech Stack
-React 18 · Vite · Three.js · React Three Fiber · Zustand · nginx · Docker
+- GLB/GLTF loading · Transform controls · Keyframe animation
+- Multi-camera system with fly controls
+- Cannon.js physics · AI scene controller
+- Clean render mode · Video/PNG export
+- Mobile optimised

dist/index.html

@@ -11,7 +11,7 @@
   </style>
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link href="https://fonts.googleapis.com/css2?family=Space+Mono:wght@400;700&family=Orbitron:wght@400;700;900&display=swap" rel="stylesheet">
-  <script type="module" crossorigin src="/assets/index-BMPzxcxL.js"></script>
+  <script type="module" crossorigin src="/assets/index-CPjiwba7.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/three-BDVXI0HY.js">
   <link rel="modulepreload" crossorigin href="/assets/r3f-D7cvq2vh.js">
   <link rel="modulepreload" crossorigin href="/assets/state-D3gY4USI.js">

nginx.conf

@@ -1,49 +1,30 @@
-# ═══════════════════════════════════════════════════════════════════════════════
-# nginx config for GLB Animation Studio on Hugging Face Spaces
-# Listening on port 7860 (HF Spaces requirement)
-# ═══════════════════════════════════════════════════════════════════════════════
-
 server {
     listen 7860;
     server_name _;
     root /usr/share/nginx/html;
     index index.html;
 
-    # ── Gzip compression ────────────────────────────────────────────────────
+    # Gzip
     gzip on;
     gzip_vary on;
     gzip_min_length 1024;
     gzip_proxied any;
     gzip_comp_level 6;
     gzip_types
-        text/plain
-        text/css
-        text/javascript
-        application/javascript
-        application/json
-        application/wasm
-        model/gltf+json
-        model/gltf-binary
-        image/svg+xml
-        font/woff
-        font/woff2;
-
-    # ── Security headers ────────────────────────────────────────────────────
-    add_header X-Content-Type-Options     "nosniff"       always;
-    add_header X-Frame-Options            "SAMEORIGIN"    always;
-    add_header X-XSS-Protection           "1; mode=block" always;
-    add_header Referrer-Policy            "strict-origin-when-cross-origin" always;
+        text/plain text/css text/javascript
+        application/javascript application/json
+        application/wasm model/gltf+json model/gltf-binary
+        image/svg+xml font/woff font/woff2;
 
-    # SharedArrayBuffer support (required for FFmpeg.wasm / WebCodecs)
-    add_header Cross-Origin-Opener-Policy   "same-origin"  always;
-    add_header Cross-Origin-Embedder-Policy "require-corp" always;
+    # Security (no COEP - would block cross-origin GLB/image loading)
+    add_header X-Content-Type-Options  "nosniff"    always;
+    add_header X-Frame-Options         "SAMEORIGIN" always;
+    add_header Referrer-Policy         "strict-origin-when-cross-origin" always;
 
-    # ── JavaScript / CSS / fonts — immutable cache ──────────────────────────
+    # JS/CSS - immutable cache
     location ~* \.(js|css|woff2?|ttf|otf|eot)$ {
         expires 1y;
         add_header Cache-Control "public, immutable";
-        add_header Cross-Origin-Opener-Policy   "same-origin"  always;
-        add_header Cross-Origin-Embedder-Policy "require-corp" always;
     }
 
     # Images
@@ -52,7 +33,7 @@ server {
         add_header Cache-Control "public";
     }
 
-    # GLB / GLTF / HDR / KTX2 3D assets
+    # 3D assets - allow cross-origin
     location ~* \.(glb|gltf|bin|hdr|exr|ktx2)$ {
         expires 7d;
         add_header Cache-Control "public";
@@ -64,25 +45,14 @@ server {
         default_type application/wasm;
         expires 7d;
         add_header Cache-Control "public";
-        add_header Cross-Origin-Opener-Policy   "same-origin"  always;
-        add_header Cross-Origin-Embedder-Policy "require-corp" always;
     }
 
-    # ── SPA fallback — all routes go to index.html ─────────────────────────
+    # SPA fallback
     location / {
         try_files $uri $uri/ /index.html;
         add_header Cache-Control "no-cache, no-store, must-revalidate";
-        add_header Cross-Origin-Opener-Policy   "same-origin"  always;
-        add_header Cross-Origin-Embedder-Policy "require-corp" always;
     }
 
     error_page 404 /index.html;
-
-    # Large GLB file upload support (up to 200 MB)
     client_max_body_size 200M;
-
-    # Timeouts
-    proxy_read_timeout     300s;
-    proxy_connect_timeout  60s;
-    send_timeout           300s;
 }

src/components/PropertiesPanel.jsx

@@ -286,7 +286,7 @@ export default function PropertiesPanel() {
           {[['Cast Shadow','castShadow'],['Receive Shadow','receiveShadow']].map(([lbl,key])=>(
             <div key={key} style={{display:'flex',justifyContent:'space-between',alignItems:'center'}}>
               <span style={{fontSize:11,color:'var(--text1)'}}>{lbl}</span>
-              <button onClick={()=>updateModelTransform(model.id,key,!model[key]??true)} style={{
+              <button onClick={()=>updateModelTransform(model.id,key,!(model[key]??true))} style={{
                 width:36,height:20,borderRadius:10,cursor:'pointer',position:'relative',
                 background:(model[key]??true)?'var(--accent)':'var(--bg4)',border:'none',
                 transition:'background 0.2s',