/* The platform typeface, served from here rather than from Google.
   ---------------------------------------------------------------------------
   Served by the Dashboard at /css/mango-font.css. Tools link to it by that
   absolute path, like the header and the page shell — behind the shared proxy
   every tool is on this origin, so one copy dresses the whole platform.

   WHY IT IS NOT LOADED FROM GOOGLE ANY MORE
     Every page used to fetch this from fonts.googleapis.com, which meant a
     render-blocking request to a third party on an internal admin tool, and a
     Content-Security-Policy that had to allow two external hosts. Self-hosting
     removes both: the CSP is now `default-src 'self'` with no exceptions for
     styles or fonts, so nothing on any page may load from anywhere else. That
     is a materially stronger policy, and it costs one 30 KB file that is cached
     across every tool.

   ONE FILE, EVERY WEIGHT
     Red Hat Display is a variable font, so the single .woff2 below covers the
     whole 300-900 range — hence `font-weight: 300 900` rather than one
     @font-face per weight. Asking for 500 or 700 in a rule just works.

   Red Hat Display is licensed under the SIL Open Font License 1.1.
   See public/fonts/README.md.
   --------------------------------------------------------------------------- */

@font-face {
  font-family: 'Red Hat Display';
  font-style: normal;
  font-weight: 300 900;          /* variable: the whole range from one file */
  font-display: swap;            /* show text immediately in the fallback */
  src: url('/fonts/red-hat-display.woff2') format('woff2-variations'),
       url('/fonts/red-hat-display.woff2') format('woff2');
}

/* The stack every Mango page and tool should use. Named as a token so a tool
   writes `font-family: var(--mango-font)` and never repeats the fallbacks. */
:root{
  --mango-font: 'Red Hat Display', -apple-system, BlinkMacSystemFont, 'Segoe UI',
                Roboto, Helvetica, Arial, sans-serif;
}