/*
 * Self-hosted webfonts (CASA Tier 2 / ZAP CWE-345 SRI finding).
 *
 * These were previously loaded from fonts.googleapis.com + cdn.jsdelivr.net,
 * which ZAP flagged for missing Subresource Integrity. Google's css2 endpoint
 * serves UA-varying CSS so a fixed integrity hash is impossible; the fix is to
 * stop loading fonts cross-origin entirely. woff2 files are vendored alongside
 * this stylesheet and served same-origin from /assets/fonts/, so no SRI is
 * needed and the CSP font/style origins tighten to 'self'.
 *
 * Sources: Manrope / Outfit / JetBrains Mono — Google Fonts (latin subset).
 *          Geist — the `geist` npm package (Geist-Variable.woff2).
 */

@font-face {
  font-family: 'Manrope';
  font-style: normal;
  font-weight: 700;
  font-display: swap;
  src: url('./manrope-700.woff2') format('woff2');
}

@font-face {
  font-family: 'Manrope';
  font-style: normal;
  font-weight: 800;
  font-display: swap;
  src: url('./manrope-800.woff2') format('woff2');
}

@font-face {
  font-family: 'Outfit';
  font-style: normal;
  font-weight: 400;
  font-display: swap;
  src: url('./outfit-400.woff2') format('woff2');
}

@font-face {
  font-family: 'JetBrains Mono';
  font-style: normal;
  font-weight: 400;
  font-display: swap;
  src: url('./jetbrains-mono-400.woff2') format('woff2');
}

/* Geist is a variable font — one file covers the full weight axis. */
@font-face {
  font-family: 'Geist';
  font-style: normal;
  font-weight: 100 900;
  font-display: swap;
  src: url('./geist-variable.woff2') format('woff2');
}