<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
    <meta name="description" content="TradingScript.AI - AI-Powered Trading Strategy Platform">
    <meta http-equiv="Content-Security-Policy" content="
        default-src 'self';
        connect-src 'self'
            https://*.supabase.co
            https://nfgikmrusmxbhqzluwqx.supabase.co
            wss://*.supabase.co
            wss://nfgikmrusmxbhqzluwqx.supabase.co
            https://*.stripe.com
            https://api.stripe.com
            wss://*.stripe.com
            https://*.cloudfunctions.net
            https://us-central1-tradingscriptai-2bc06.cloudfunctions.net
            https://api.tradingscript.ai
            https://auth.tradingscript.ai
            https://*.googleapis.com
            https://identitytoolkit.googleapis.com
            https://securetoken.googleapis.com
            https://cdn.jsdelivr.net
            https://openrouter.ai
            https://api.openrouter.ai
            https://www.google-analytics.com
            https://analytics.google.com
            https://www.googletagmanager.com;
        script-src 'self'
            'unsafe-inline'
            'unsafe-eval'
            https://*.stripe.com
            https://js.stripe.com
            https://cdn.jsdelivr.net
            https://www.googletagmanager.com;
        script-src-elem 'self'
            'unsafe-inline'
            https://*.stripe.com
            https://js.stripe.com
            https://cdn.jsdelivr.net
            https://www.googletagmanager.com;
        style-src 'self'
            'unsafe-inline'
            https://cdn.jsdelivr.net
            https://fonts.googleapis.com;
        img-src 'self'
            data:
            blob:
            https://*.supabase.co
            https://nfgikmrusmxbhqzluwqx.supabase.co
            https://*.googleusercontent.com
            https://lh3.googleusercontent.com
            https://www.google-analytics.com;
        font-src 'self'
            data:
            https://cdn.jsdelivr.net
            https://fonts.gstatic.com;
        frame-src 'self'
            https://*.stripe.com;
        worker-src 'self' blob:;
        media-src 'self';
        object-src 'none';
        base-uri 'self';">

    <!-- Google tag (gtag.js) -->
    <script async src="https://www.googletagmanager.com/gtag/js?id=G-Z1NPN2YEBM"></script>
    <script>
      window.dataLayer = window.dataLayer || [];
      function gtag(){dataLayer.push(arguments);}
      gtag('js', new Date());

      gtag('config', 'G-Z1NPN2YEBM');
    </script>

    <link rel="icon" type="image/x-icon" href="/favicon.ico">
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
    <title>TradingScript.AI</title>
  <script type="module" crossorigin src="/assets/index-Dy2GTdGW.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-DUtjE3KI.css">
<link rel="manifest" href="/manifest.webmanifest"><script id="vite-plugin-pwa:register-sw" src="/registerSW.js"></script></head>

<body>
    <div id="root"></div>
</body>

</html>