/* CSP (found on DEV, 18 Sep 2026). react-aria injects `<style id="react-aria-pressable-style">` at runtime containing
   exactly this rule, and our production CSP is `style-src 'self'` — so the browser blocks it and every pressable element
   falls back to `touch-action: auto`. On a phone that brings back double-tap zoom and presses the browser cancels
   mid-gesture, on an app whose whole dashboard is built for 390px.

   So the rule ships from our own origin. It lived in index.css until 19 Oct 2026, which applied it but left the
   blocked injection logging two CSP errors on every page. Here, linked in index.html under the id react-aria looks
   for, it also stops the injection: react-aria finds the element and adds nothing. Unlayered, as it has always been
   (react-aria's own copy sits in an anonymous @layer). */
[data-react-aria-pressable] {
  touch-action: pan-x pan-y pinch-zoom;
}