From 1d73844a0a77206659d48e79385c0d83ce468ec0 Mon Sep 17 00:00:00 2001
From: Paul Bakaus <paul.bakaus@gmail.com>
Date: Thu, 23 Apr 2026 18:20:58 -0700
Subject: [PATCH] fix(site): remove dev-only live.js inject tags from
 production pages

public/index.html and public/privacy.html shipped to Cloudflare with
`<script src="http://localhost:8400/live.js">` inject tags left over
from a local /impeccable live session. On impeccable.style this
triggered Chrome's private-network-access prompt ("impeccable.style
wants to access other apps and services on this device") on every
page load.

The inject is dev-only scaffolding added by live-inject.mjs and
normally stripped by live-server.mjs stop. Both remaining copies
removed; next live session re-injects them locally.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html   | 3 ---
 public/privacy.html | 3 ---
 2 files changed, 6 deletions(-)

diff --git a/public/index.html b/public/index.html
index 78a359b12..0c4b70d45 100644
--- a/public/index.html
+++ b/public/index.html
@@ -1219,8 +1219,5 @@
 
   <script type="module" src="./app.js"></script>
 
-<!-- impeccable-live-start -->
-<script src="http://localhost:8400/live.js"></script>
-<!-- impeccable-live-end -->
 </body>
 </html>
diff --git a/public/privacy.html b/public/privacy.html
index d32f34df3..21421ef0e 100644
--- a/public/privacy.html
+++ b/public/privacy.html
@@ -76,8 +76,5 @@
   <h2>Contact</h2>
   <p>Questions about this policy? Open an issue on <a href="https://github.com/pbakaus/impeccable">GitHub</a> or reach out to <a href="https://x.com/pbakaus">@pbakaus</a>.</p>
   </main>
-<!-- impeccable-live-start -->
-<script src="http://localhost:8400/live.js"></script>
-<!-- impeccable-live-end -->
 </body>
 </html>