From 457d152292897541d9195f287972a4d8b85ba5b5 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 23:20:59 +0000 Subject: [PATCH] Sync generated provider output --- .agent/skills/impeccable/reference/live-setup.md | 2 ++ .agent/skills/impeccable/reference/live.md | 2 ++ .agents/skills/impeccable/reference/live-setup.md | 2 ++ .agents/skills/impeccable/reference/live.md | 2 ++ .claude/skills/impeccable/reference/live-setup.md | 2 ++ .claude/skills/impeccable/reference/live.md | 2 ++ .cursor/skills/impeccable/reference/live-setup.md | 2 ++ .cursor/skills/impeccable/reference/live.md | 2 ++ .dsh/skills/impeccable/reference/live-setup.md | 2 ++ .dsh/skills/impeccable/reference/live.md | 2 ++ .gemini/skills/impeccable/reference/live-setup.md | 2 ++ .gemini/skills/impeccable/reference/live.md | 2 ++ .github/skills/impeccable/reference/live-setup.md | 2 ++ .github/skills/impeccable/reference/live.md | 2 ++ .grok/skills/impeccable/reference/live-setup.md | 2 ++ .grok/skills/impeccable/reference/live.md | 2 ++ .hermes/skills/impeccable/reference/live-setup.md | 2 ++ .hermes/skills/impeccable/reference/live.md | 2 ++ .kiro/skills/impeccable/reference/live-setup.md | 2 ++ .kiro/skills/impeccable/reference/live.md | 2 ++ .opencode/skills/impeccable/reference/live-setup.md | 2 ++ .opencode/skills/impeccable/reference/live.md | 2 ++ .pi/skills/impeccable/reference/live-setup.md | 2 ++ .pi/skills/impeccable/reference/live.md | 2 ++ .qoder/skills/impeccable/reference/live-setup.md | 2 ++ .qoder/skills/impeccable/reference/live.md | 2 ++ .rovodev/skills/impeccable/reference/live-setup.md | 2 ++ .rovodev/skills/impeccable/reference/live.md | 2 ++ .trae-cn/skills/impeccable/reference/live-setup.md | 2 ++ .trae-cn/skills/impeccable/reference/live.md | 2 ++ .trae/skills/impeccable/reference/live-setup.md | 2 ++ .trae/skills/impeccable/reference/live.md | 2 ++ .veto/skills/impeccable/reference/live-setup.md | 2 ++ .veto/skills/impeccable/reference/live.md | 2 ++ .vibe/skills/impeccable/reference/live-setup.md | 2 ++ .vibe/skills/impeccable/reference/live.md | 2 ++ plugin/skills/impeccable/reference/live-setup.md | 2 ++ plugin/skills/impeccable/reference/live.md | 2 ++ 38 files changed, 76 insertions(+) diff --git a/.agent/skills/impeccable/reference/live-setup.md b/.agent/skills/impeccable/reference/live-setup.md index 768f01945..54dbabf4c 100644 --- a/.agent/skills/impeccable/reference/live-setup.md +++ b/.agent/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.agent/skills/impeccable/reference/live.md b/.agent/skills/impeccable/reference/live.md index 43fd1e2fc..1faa46b93 100644 --- a/.agent/skills/impeccable/reference/live.md +++ b/.agent/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.agent/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.agents/skills/impeccable/reference/live-setup.md b/.agents/skills/impeccable/reference/live-setup.md index b32f1370f..6e10f00f7 100644 --- a/.agents/skills/impeccable/reference/live-setup.md +++ b/.agents/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.agents/skills/impeccable/reference/live.md b/.agents/skills/impeccable/reference/live.md index a8d544555..fb85b3fdd 100644 --- a/.agents/skills/impeccable/reference/live.md +++ b/.agents/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.agents/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + Codex: run live helper commands, the app dev server, and any dependency-installing setup with `sandbox_permissions: "require_escalated"` from the start; live mode depends on localhost and package-manager network access that the sandbox blocks. ## The contract (read once) diff --git a/.claude/skills/impeccable/reference/live-setup.md b/.claude/skills/impeccable/reference/live-setup.md index 66232e171..670ecc737 100644 --- a/.claude/skills/impeccable/reference/live-setup.md +++ b/.claude/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.claude/skills/impeccable/reference/live.md b/.claude/skills/impeccable/reference/live.md index 6887314b5..4307a2121 100644 --- a/.claude/skills/impeccable/reference/live.md +++ b/.claude/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.claude/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.cursor/skills/impeccable/reference/live-setup.md b/.cursor/skills/impeccable/reference/live-setup.md index 000fdb69c..1f3b5812e 100644 --- a/.cursor/skills/impeccable/reference/live-setup.md +++ b/.cursor/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.cursor/skills/impeccable/reference/live.md b/.cursor/skills/impeccable/reference/live.md index 686dc92b9..a25d87bfe 100644 --- a/.cursor/skills/impeccable/reference/live.md +++ b/.cursor/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.cursor/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.dsh/skills/impeccable/reference/live-setup.md b/.dsh/skills/impeccable/reference/live-setup.md index 30a76aa80..0feb54e9a 100644 --- a/.dsh/skills/impeccable/reference/live-setup.md +++ b/.dsh/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.dsh/skills/impeccable/reference/live.md b/.dsh/skills/impeccable/reference/live.md index e10afebf7..b95da6b4e 100644 --- a/.dsh/skills/impeccable/reference/live.md +++ b/.dsh/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.dsh/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.gemini/skills/impeccable/reference/live-setup.md b/.gemini/skills/impeccable/reference/live-setup.md index d80405ac8..515fdb1f3 100644 --- a/.gemini/skills/impeccable/reference/live-setup.md +++ b/.gemini/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.gemini/skills/impeccable/reference/live.md b/.gemini/skills/impeccable/reference/live.md index 374e3024e..b6f93743b 100644 --- a/.gemini/skills/impeccable/reference/live.md +++ b/.gemini/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.gemini/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.github/skills/impeccable/reference/live-setup.md b/.github/skills/impeccable/reference/live-setup.md index 4e217f8cc..02a3a2265 100644 --- a/.github/skills/impeccable/reference/live-setup.md +++ b/.github/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.github/skills/impeccable/reference/live.md b/.github/skills/impeccable/reference/live.md index df1ae2676..bbd0639e3 100644 --- a/.github/skills/impeccable/reference/live.md +++ b/.github/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.github/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.grok/skills/impeccable/reference/live-setup.md b/.grok/skills/impeccable/reference/live-setup.md index 1f10b8ed7..b5ef6e233 100644 --- a/.grok/skills/impeccable/reference/live-setup.md +++ b/.grok/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.grok/skills/impeccable/reference/live.md b/.grok/skills/impeccable/reference/live.md index e4911688b..8905f0732 100644 --- a/.grok/skills/impeccable/reference/live.md +++ b/.grok/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.grok/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.hermes/skills/impeccable/reference/live-setup.md b/.hermes/skills/impeccable/reference/live-setup.md index b56922ddb..a2635fde4 100644 --- a/.hermes/skills/impeccable/reference/live-setup.md +++ b/.hermes/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.hermes/skills/impeccable/reference/live.md b/.hermes/skills/impeccable/reference/live.md index 015b6ff3c..87e3dc812 100644 --- a/.hermes/skills/impeccable/reference/live.md +++ b/.hermes/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.hermes/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.kiro/skills/impeccable/reference/live-setup.md b/.kiro/skills/impeccable/reference/live-setup.md index 04c3cda29..fdbe7a7f8 100644 --- a/.kiro/skills/impeccable/reference/live-setup.md +++ b/.kiro/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.kiro/skills/impeccable/reference/live.md b/.kiro/skills/impeccable/reference/live.md index ee234b8a8..0b91c2113 100644 --- a/.kiro/skills/impeccable/reference/live.md +++ b/.kiro/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.kiro/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.opencode/skills/impeccable/reference/live-setup.md b/.opencode/skills/impeccable/reference/live-setup.md index 90e019608..7af86b729 100644 --- a/.opencode/skills/impeccable/reference/live-setup.md +++ b/.opencode/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.opencode/skills/impeccable/reference/live.md b/.opencode/skills/impeccable/reference/live.md index 221fd63e7..64f0e7931 100644 --- a/.opencode/skills/impeccable/reference/live.md +++ b/.opencode/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.opencode/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.pi/skills/impeccable/reference/live-setup.md b/.pi/skills/impeccable/reference/live-setup.md index c92262696..a280a781a 100644 --- a/.pi/skills/impeccable/reference/live-setup.md +++ b/.pi/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.pi/skills/impeccable/reference/live.md b/.pi/skills/impeccable/reference/live.md index 877cdf177..c22aed17b 100644 --- a/.pi/skills/impeccable/reference/live.md +++ b/.pi/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.pi/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.qoder/skills/impeccable/reference/live-setup.md b/.qoder/skills/impeccable/reference/live-setup.md index 51fec27bf..31321b0b5 100644 --- a/.qoder/skills/impeccable/reference/live-setup.md +++ b/.qoder/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.qoder/skills/impeccable/reference/live.md b/.qoder/skills/impeccable/reference/live.md index 40862a51b..8748426a6 100644 --- a/.qoder/skills/impeccable/reference/live.md +++ b/.qoder/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.qoder/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.rovodev/skills/impeccable/reference/live-setup.md b/.rovodev/skills/impeccable/reference/live-setup.md index 33ccdbbf5..a31e282cc 100644 --- a/.rovodev/skills/impeccable/reference/live-setup.md +++ b/.rovodev/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.rovodev/skills/impeccable/reference/live.md b/.rovodev/skills/impeccable/reference/live.md index c529a7c59..603448ff2 100644 --- a/.rovodev/skills/impeccable/reference/live.md +++ b/.rovodev/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.rovodev/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.trae-cn/skills/impeccable/reference/live-setup.md b/.trae-cn/skills/impeccable/reference/live-setup.md index 4e5d39cf1..3874a6fad 100644 --- a/.trae-cn/skills/impeccable/reference/live-setup.md +++ b/.trae-cn/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.trae-cn/skills/impeccable/reference/live.md b/.trae-cn/skills/impeccable/reference/live.md index ff37766d5..799b869a0 100644 --- a/.trae-cn/skills/impeccable/reference/live.md +++ b/.trae-cn/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.trae-cn/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.trae/skills/impeccable/reference/live-setup.md b/.trae/skills/impeccable/reference/live-setup.md index 7872609d2..5d3781d57 100644 --- a/.trae/skills/impeccable/reference/live-setup.md +++ b/.trae/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.trae/skills/impeccable/reference/live.md b/.trae/skills/impeccable/reference/live.md index 88e0b4ca3..766ed2527 100644 --- a/.trae/skills/impeccable/reference/live.md +++ b/.trae/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.trae/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.veto/skills/impeccable/reference/live-setup.md b/.veto/skills/impeccable/reference/live-setup.md index f63f64171..2c7047929 100644 --- a/.veto/skills/impeccable/reference/live-setup.md +++ b/.veto/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.veto/skills/impeccable/reference/live.md b/.veto/skills/impeccable/reference/live.md index 4f2c5f5b5..0b0e9f162 100644 --- a/.veto/skills/impeccable/reference/live.md +++ b/.veto/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.veto/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/.vibe/skills/impeccable/reference/live-setup.md b/.vibe/skills/impeccable/reference/live-setup.md index 47767f4b9..03988d8c0 100644 --- a/.vibe/skills/impeccable/reference/live-setup.md +++ b/.vibe/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/.vibe/skills/impeccable/reference/live.md b/.vibe/skills/impeccable/reference/live.md index eb777ed1a..3f54c78df 100644 --- a/.vibe/skills/impeccable/reference/live.md +++ b/.vibe/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `.vibe/skills/impeccable/scripts/impeccable detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins. diff --git a/plugin/skills/impeccable/reference/live-setup.md b/plugin/skills/impeccable/reference/live-setup.md index 07290a769..816b34ada 100644 --- a/plugin/skills/impeccable/reference/live-setup.md +++ b/plugin/skills/impeccable/reference/live-setup.md @@ -42,6 +42,8 @@ On every boot the project is scanned for HTML files under common page roots (`pu ## CSP detection (first-time only) +Keep all allowances below development-only, including manual middleware and meta-tag edits. Do not change a deployed production site's CSP to load the localhost helper; see [live.md](live.md) for production inspection alternatives. + If `config.cspChecked === true`, skip this whole section; the user was already asked once. ```bash diff --git a/plugin/skills/impeccable/reference/live.md b/plugin/skills/impeccable/reference/live.md index 23d47bd70..0df66f1e0 100644 --- a/plugin/skills/impeccable/reference/live.md +++ b/plugin/skills/impeccable/reference/live.md @@ -4,6 +4,8 @@ Interactive live variant mode: select elements in the browser, pick a design act A running dev server with HMR (Vite, Next.js, Bun, etc.), OR a static HTML file open in the browser. If the dev server's default port is busy, the app is very likely ALREADY running; probe the default URL before spawning a second server. +Live editing requires a local checkout; injection into deployed production sites (including HTTPS) is unsupported. For production inspection, use `"/scripts/impeccable" detect ` or the browser extension, not the live helper. Do not disable browser security or weaken production CSP to enable live mode. + ## The contract (read once) Execute in order. No step skipped, no step reordered. Every tool output in live mode may carry an `_instructions` field: it is the authoritative next step for that exact situation, with real ids and paths substituted; when it conflicts with your recollection of this document, `_instructions` wins.