1// Reference output for agent/human review — not executed by tests.
 2// After the append-string CSP patch is applied, nuxt.config.ts should look
 3// like this.
 4
 5// Dev-only allowance so impeccable live mode can load. Empty string in any
 6// non-development environment.
 7const __impeccableLiveDev =
 8  process.env.NODE_ENV === 'development' ? ' http://localhost:8400' : '';
 9
10export default defineNuxtConfig({
11  compatibilityDate: '2025-01-01',
12  devtools: { enabled: true },
13  routeRules: {
14    '/**': {
15      headers: {
16        'Content-Security-Policy':
17          "default-src 'self'; " +
18          `script-src 'self' 'unsafe-inline' 'unsafe-eval'${__impeccableLiveDev}; ` +
19          "style-src 'self' 'unsafe-inline'; " +
20          "img-src 'self' data: blob:; " +
21          `connect-src 'self'${__impeccableLiveDev}; ` +
22          "frame-ancestors 'self';",
23        'X-Frame-Options': 'SAMEORIGIN',
24      },
25    },
26  },
27});