/* SmokeVPN public site - light + dark, mobile-first. Palette reused from the WGEP admin panel. */
:root{
  --bg:#eef4f0; --card:#ffffff; --fg:#16241c; --mut:#5f7468; --grn:#1f9d57; --grnd:#15793f;
  --grnl:#eaf6ee; --bd:#d9e7df; --ok:#1f9d57; --bad:#cf3a52; --warn:#c98a00;
  --shadow:0 1px 2px rgba(20,80,50,.05); --shadow-lg:0 12px 40px rgba(20,80,50,.12);
  --r:14px;
}
[data-theme="dark"]{
  --bg:#0e1512; --card:#152019; --fg:#e7f1ec; --mut:#9bb0a5; --grn:#2bbd6e; --grnd:#23a85f;
  --grnl:#16271d; --bd:#26382e; --ok:#2bbd6e; --bad:#e0667c; --warn:#e0a93a;
  --shadow:0 1px 2px rgba(0,0,0,.3); --shadow-lg:0 14px 44px rgba(0,0,0,.5);
}
*{box-sizing:border-box}
/* the [hidden] attribute must ALWAYS win, even over a class that sets display (e.g. .ruledevrow/.poolrow set
   display:flex which would otherwise beat [hidden] on equal specificity). Elements toggled via el.hidden rely
   on this. */
[hidden]{display:none!important}
html{-webkit-text-size-adjust:100%}
body{margin:0;font:15px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;
  background:var(--bg);color:var(--fg);-webkit-font-smoothing:antialiased}
a{color:var(--grnd);text-decoration:none}
a:hover{text-decoration:underline}
h1,h2,h3{line-height:1.2;margin:0 0 .4em}
h1{font-size:clamp(28px,5vw,44px);letter-spacing:-.02em}
h2{font-size:clamp(20px,3vw,26px)}
.wrap{max-width:1080px;margin:0 auto;padding:0 20px}
.mut{color:var(--mut)}
.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace}
.hp{position:absolute!important;left:-9999px!important;width:1px;height:1px;overflow:hidden}

/* nav */
.nav{position:sticky;top:0;z-index:20;display:flex;align-items:center;justify-content:space-between;
  gap:16px;padding:12px 20px;background:color-mix(in srgb,var(--bg) 86%,transparent);
  backdrop-filter:saturate(1.2) blur(8px);border-bottom:1px solid var(--bd)}
.brand{display:inline-flex;align-items:center;gap:9px;font-weight:800;font-size:18px;color:var(--fg);margin-right:auto}
.brand:hover{text-decoration:none}
.brand.small{font-size:16px}
.brandmark{width:24px;height:24px;fill:none;stroke:var(--grn);stroke-width:1.7;stroke-linecap:round;stroke-linejoin:round}
/* nav links live in a hamburger dropdown at ALL widths (desktop = mobile). The primary action
   (Dashboard / Log in) is a .navcta button that stays visible on the bar. */
.navlinks{display:none;position:absolute;top:calc(100% + 6px);right:12px;flex-direction:column;align-items:stretch;
  gap:2px;min-width:230px;background:var(--card);border:1px solid var(--bd);border-radius:12px;padding:8px;
  box-shadow:0 14px 34px rgba(20,80,50,.20);z-index:30}
.navlinks.open{display:flex}
.navlinks>a,.navlinks .link{padding:9px 12px;border-radius:9px;color:var(--fg);font-weight:600;font-size:14px;
  width:100%;text-align:left;box-sizing:border-box}
.navlinks>a:hover,.navlinks .link:hover{background:var(--grnl);text-decoration:none}
.navlinks>a.on{color:var(--grnd)}
.navlinks .inline{display:block;width:100%}
/* primary action button (Dashboard / Log in) pinned on the bar */
.navcta{flex:none}
.navcta.on{background:var(--grnd)}
.inline{display:inline;margin:0}
.link{background:none;border:0;color:var(--fg);font:inherit;font-weight:600;font-size:14px;cursor:pointer;padding:8px 12px;border-radius:9px}
.link:hover{background:var(--grnl)}
.iconbtn{display:inline-grid;place-items:center;width:38px;height:38px;border:1px solid var(--bd);
  background:var(--card);border-radius:10px;cursor:pointer;color:var(--fg)}
.iconbtn:hover{border-color:var(--grn)}
.iconbtn svg{width:18px;height:18px;fill:none;stroke:currentColor;stroke-width:1.7;stroke-linecap:round;stroke-linejoin:round}
.ic-moon{display:none}
.navtoggle{display:inline-grid}   /* hamburger: always visible now (desktop + mobile) */
[data-theme="dark"] .ic-sun{display:none}
[data-theme="dark"] .ic-moon{display:block}

/* buttons */
.btn{display:inline-block;background:var(--grn);color:#fff;border:0;border-radius:10px;padding:11px 18px;
  font:inherit;font-weight:700;cursor:pointer;text-align:center}
.btn:hover{background:var(--grnd);text-decoration:none}
.btn:active{transform:translateY(1px)}
.btn.ghost{background:var(--card);color:var(--grnd);border:1px solid var(--bd)}
.btn.ghost:hover{background:var(--grnl);border-color:var(--grn)}
.btn.sm{padding:7px 13px;font-size:13px;border-radius:9px}
.btn.full{display:block;width:100%}
.btn[disabled]{opacity:.5;cursor:not-allowed}

/* flash */
.flash{max-width:1080px;margin:14px auto 0;padding:11px 16px;border-radius:11px;font-size:14px;font-weight:600}
.flash.ok{background:var(--grnl);color:var(--grnd);border:1px solid var(--bd)}
.flash.bad{background:#fdecef;color:var(--bad);border:1px solid #f0cdd4}
[data-theme="dark"] .flash.bad{background:#2a161c}

.wrap.main,main.wrap{padding-top:8px;padding-bottom:8px}
main{min-height:60vh;padding:14px 0 40px}
.card{background:var(--card);border:1px solid var(--bd);border-radius:var(--r);padding:20px;box-shadow:var(--shadow)}
.pill{display:inline-block;padding:4px 12px;border-radius:999px;background:var(--grnl);border:1px solid var(--bd);
  color:var(--grnd);font-size:13px;font-weight:600}
.pill.sm{padding:2px 9px;font-size:12px}
.pill.warn{background:#fff5e6;color:var(--warn);border-color:#f0e0c0}
[data-theme="dark"] .pill.warn{background:#2a2310}
.badge{display:inline-block;padding:3px 10px;border-radius:8px;font-size:12px;font-weight:700}
.badge.ok{background:var(--grnl);color:var(--grnd)}
.badge.down{background:#fdecef;color:var(--bad)}
.badge.warn{background:#fff5e6;color:var(--warn)}
[data-theme="dark"] .badge.down{background:#2a161c}
[data-theme="dark"] .badge.warn{background:#2a2310}

/* hero */
.hero{display:grid;grid-template-columns:1.05fr 1fr;gap:30px;align-items:center;padding:34px 0 24px}
.eyebrow{display:inline-block;font-size:12.5px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;
  color:var(--grnd);background:var(--grnl);border:1px solid var(--bd);padding:5px 11px;border-radius:999px}
.hero-text h1{margin-top:16px}
.accent{color:var(--grn)}
.lede{font-size:17px;color:var(--mut);max-width:46ch}
.cta{display:flex;gap:10px;flex-wrap:wrap;margin:22px 0}
.stats{display:flex;gap:26px;margin-top:8px}
.stats div{display:flex;flex-direction:column}
.stats strong{font-size:24px}
.stats span{font-size:12.5px;color:var(--mut)}
.hero-map{padding:14px}
.maplegend{margin-top:8px;font-size:12.5px;text-align:center}
.maplegend .dot{display:inline-block;width:9px;height:9px;border-radius:50%;background:var(--grn);vertical-align:middle}

/* world map svg */
.worldmap{width:100%;height:auto;display:block}
.wm-ocean{fill:var(--grnl);stroke:var(--bd);stroke-width:1}
.wm-land{fill:var(--card);stroke:var(--bd);stroke-width:.6}
[data-theme="dark"] .wm-land{fill:#1d2e23}
.wm-grid{stroke:var(--bd);stroke-width:.6;opacity:.55}
.wm-dot circle{fill:var(--grn)}
.wm-dot.down circle{fill:var(--mut);opacity:.55}
.wm-pulse{fill:var(--grn);opacity:.30;transform-box:fill-box;transform-origin:center;
  animation:wmpulse 2.8s ease-out infinite}
@keyframes wmpulse{0%{transform:scale(1);opacity:.4}70%{opacity:0}100%{transform:scale(3);opacity:0}}
@media (prefers-reduced-motion:reduce){.wm-pulse{animation:none;opacity:0}}

/* features */
.features{display:grid;grid-template-columns:repeat(4,1fr);gap:16px;margin:24px 0}
.feat{padding:18px}
.featic{width:30px;height:30px;fill:none;stroke:var(--grn);stroke-width:1.6;stroke-linecap:round;stroke-linejoin:round;margin-bottom:6px}
.feat h3{font-size:16px;margin:.2em 0 .3em}
.feat p{margin:0;font-size:14px}

.cta-band{display:flex;align-items:center;justify-content:space-between;gap:20px;margin:24px 0;flex-wrap:wrap}
.cta-band h2{margin:0 0 4px}
.cta-band p{margin:0}
.howto{margin:22px 0;font-size:14px}

/* page heads / tables */
.pagehead{padding:24px 0 6px}
.tablewrap{overflow:auto;-webkit-overflow-scrolling:touch}
.tablewrap.short{max-height:420px}
table.grid{width:100%;border-collapse:collapse;font-size:14px}
table.grid th,table.grid td{text-align:left;padding:11px 12px;border-bottom:1px solid var(--bd);white-space:nowrap;vertical-align:middle}
table.grid thead th{position:sticky;top:0;background:var(--card);font-size:12px;text-transform:uppercase;
  letter-spacing:.04em;color:var(--mut);z-index:1}
table.grid tbody tr:hover{background:var(--grnl)}
table.grid td.num,table.grid th.num{text-align:right;font-variant-numeric:tabular-nums}
/* country cell: NEVER display:flex on the <td> (it drops the cell out of the table column model, so the
   body columns stop lining up with the header). Keep it a real table-cell; align the flag inline. */
.ctry{font-weight:600}
.ctry .flag{margin-right:6px}
.flag{border-radius:3px;box-shadow:0 0 0 1px var(--bd);object-fit:cover;flex:none;vertical-align:middle}
/* offline servers in the picker: shown only when toggled, greyed, NOT selectable */
.picktoggle{display:inline-flex;align-items:center;gap:6px;font-size:13px;color:var(--mut);margin:2px 0 8px;cursor:pointer}
.picktoggle input{flex:none}
.picktable tbody tr.off{opacity:.5;cursor:default}
.picktable tbody tr.off:hover{background:transparent}
.flag.txt{display:inline-grid;place-items:center;width:20px;height:14px;font-size:9px;font-weight:700;
  background:var(--grnl);color:var(--grnd);border-radius:3px}

/* auth */
.auth{display:grid;grid-template-columns:1fr 1fr;gap:20px;max-width:820px;margin:30px auto;align-items:start}
.auth.single{grid-template-columns:1fr;max-width:480px}
.authcard{padding:26px}
.authcard.alt{background:var(--grnl)}
.authcard.center{text-align:center}
.authcard h1{font-size:26px}
.authcard label{display:block;font-size:13px;font-weight:600;margin:14px 0 6px}
.authcard input[type=text],.authcard input[name=account_number]{width:100%;background:var(--card);
  border:1px solid var(--bd);color:var(--fg);border-radius:10px;padding:12px 14px;font:inherit;
  font-size:16px;letter-spacing:.04em}
.authcard input:focus{outline:2px solid var(--grn);outline-offset:1px;border-color:var(--grn)}
.authcard .btn{margin-top:16px}
.acctbox{display:flex;align-items:center;gap:10px;margin:18px 0 8px;flex-wrap:wrap}
.acctnum{font-family:ui-monospace,monospace;font-size:clamp(18px,4vw,24px);font-weight:700;letter-spacing:.08em;
  background:var(--grnl);border:1px solid var(--bd);border-radius:10px;padding:12px 16px;color:var(--fg);flex:1}
.note{background:var(--grnl);border:1px solid var(--bd);border-radius:10px;padding:10px 13px;font-size:13px;color:var(--grnd)}
.tiny{font-size:12px;margin-top:10px}
.powstatus{margin-top:10px;font-size:13px}

/* dashboard */
.dash{padding:18px 0}
.dashhead{display:flex;align-items:flex-end;justify-content:space-between;gap:16px;flex-wrap:wrap;margin-bottom:8px}
.dashbadges{display:flex;gap:8px;align-items:center;flex-wrap:wrap}
.acctinline,.acctinline code{font-family:ui-monospace,monospace;letter-spacing:.06em}
/* account number: blurred by default (shoulder-surf/screen-share safe); eye toggle reveals it. filter keeps
   the same box, so toggling never shifts layout. */
.acctreveal{display:inline-flex;align-items:center;gap:8px;vertical-align:middle}
.acctval.blurred{filter:blur(6px);user-select:none}
.eyebtn{width:30px;height:30px;flex:none}
.eyebtn svg{width:16px;height:16px}
.eyebtn.revealed .eye-slash{display:none}
.dash .card{margin-top:16px}
.cardhead{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:12px;flex-wrap:wrap}
.cardhead h2{margin:0;font-size:18px}
.banner{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;
  border-left:3px solid var(--warn)}
.banner p{margin:.2em 0 0}
.empty{padding:8px 0}

/* device controls */
.btn.danger{background:var(--card);color:var(--bad);border:1px solid #f0cdd4}
[data-theme="dark"] .btn.danger{border-color:#5a2730}
.btn.danger:hover{background:#fdecef}
[data-theme="dark"] .btn.danger:hover{background:#2a161c}
.addrow{display:flex;gap:8px;margin-bottom:14px;flex-wrap:wrap}
.addrow input{flex:1;min-width:180px;background:var(--card);border:1px solid var(--bd);color:var(--fg);border-radius:9px;padding:9px 12px;font:inherit}
.addrow input:focus{outline:2px solid var(--grn);outline-offset:1px;border-color:var(--grn)}
.devtable td{vertical-align:middle}
.devtable td:first-child,.devtable th:first-child{min-width:160px}
/* Address + Exit columns: real width so their content can actually centre under the (centred) headers */
.devtable td:nth-child(2),.devtable th:nth-child(2){width:140px;white-space:nowrap;text-align:center}
.devtable td:nth-child(3),.devtable th:nth-child(3){width:300px;white-space:nowrap;text-align:center}
/* centre the exit dropdown: block form + inline-block select centred by text-align; the spinner goes out
   of flow (absolute) so it never offsets the centre - its visibility toggle keeps the no-layout-shift rule */
.devtable td:nth-child(3) .routeform{display:block;position:relative;margin:0}
.devtable td:nth-child(3) .routesel{display:inline-block;width:auto;max-width:240px}
/* center vertically with auto-margins (NOT transform) so the rotate animation isn't overridden -> it spins in
   place instead of bouncing up/down */
.devtable td:nth-child(3) .spin{position:absolute;right:6px;top:0;bottom:0;margin:auto 0}
/* sortable table headers (exit network / servers) */
table.grid th[data-sort]{cursor:pointer;user-select:none}
table.grid th[data-sort]:hover{color:var(--grnd)}
.sortarrow{color:var(--grn);font-size:10px;margin-left:2px}
/* exit picker modal */
.pickerbox{max-width:560px}
.pickopts{display:flex;flex-wrap:wrap;gap:8px;margin:10px 0}
.pickopt{border:1px solid var(--bd);background:var(--card);color:var(--fg);border-radius:9px;padding:8px 12px;font:inherit;font-size:13px;font-weight:600;cursor:pointer}
.pickopt:hover{border-color:var(--grn)}
.pickopt.sel{border-color:var(--grn);background:var(--grnl);color:var(--grnd)}
.picksearch{width:100%;background:var(--card);border:1px solid var(--bd);color:var(--fg);border-radius:9px;padding:9px 12px;font:inherit;margin:6px 0}
.pickwrap{max-height:46vh;overflow:auto}
.picktable tbody tr{cursor:pointer}
.picktable tbody tr.sel{background:var(--grnl)}
.picktable tbody tr.sel td:first-child{box-shadow:inset 3px 0 0 var(--grn)}
.exitbtn{background:var(--card);border:1px solid var(--bd);color:var(--fg);border-radius:8px;padding:7px 10px;font:inherit;font-size:13px;cursor:pointer;display:inline-flex;align-items:center;gap:6px;max-width:230px}
.exitbtn:hover{border-color:var(--grn)}
.exitbtn .caret{color:var(--mut);font-size:10px}
.devname{display:flex;align-items:center;gap:8px}
.devname>span{font-weight:600}
.pencil{background:none;border:0;cursor:pointer;color:var(--mut);padding:3px;border-radius:6px;display:inline-grid;place-items:center;line-height:0}
.pencil:hover{color:var(--grnd);background:var(--grnl)}
.pencil svg{width:15px;height:15px;fill:none;stroke:currentColor;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round}
.modalbox label{display:block;font-size:13px;font-weight:600;margin:8px 0 6px}
.modalbox input[type=text]{width:100%;background:var(--card);border:1px solid var(--bd);color:var(--fg);border-radius:9px;padding:10px 12px;font:inherit;font-size:16px}
.modalbox input[type=text]:focus{outline:2px solid var(--grn);outline-offset:1px;border-color:var(--grn)}
.subtitle{margin-top:-2px}
.routeform{display:flex;gap:6px;align-items:center}
.routesel{background:var(--card);border:1px solid var(--bd);color:var(--fg);border-radius:8px;padding:7px 9px;font:inherit;font-size:13px;max-width:210px}
/* the actions stay a real <td> (vertical-align middle like every other cell) so the row's bottom
   border lines up; the flex lives on an INNER wrapper. Setting display:flex on the <td> itself takes
   it out of the table row layout and misaligns its border - the long-standing "lines don't match" bug. */
/* actions column is greedy + right-aligned so Config/Remove (and any future buttons) sit at the far
   right edge of the row; the device/address/exit columns keep their natural width on the left. */
.devactions{vertical-align:middle;white-space:nowrap;text-align:right}
.devactions .acts{display:inline-flex;gap:6px;align-items:center;justify-content:flex-end}
/* the Device (name) column is the flexible filler so the row fills edge-to-edge; actions hug the right */
.devtable td:first-child,.devtable th:first-child{width:auto}
.devtable td.devactions{width:1%;white-space:nowrap;text-align:right}
.devtable th.actcol{width:1%;white-space:nowrap;text-align:center}
/* the green note under the Default exit (mode explanation), like the admin panel */
.exitnote{margin:8px 0 0;font-size:13px;font-weight:600;color:var(--grnd);min-height:18px}
.acctdef .routeform{flex-wrap:wrap;align-items:center;margin-top:4px}
.acctdef .routesel{flex:0 1 260px;max-width:260px}
.acctdef [data-acctapply]{flex:none}
/* beautiful corner X for modals (replaces the old "Close" button); title stays left-aligned */
.pickhead{display:flex;align-items:flex-start;justify-content:space-between;gap:10px;margin-bottom:8px}
.pickhead h3{margin:0;text-align:left}
.modalx{flex:none;width:32px;height:32px;border:0;background:none;color:var(--mut);font-size:24px;line-height:1;border-radius:8px;cursor:pointer;display:grid;place-items:center}
.modalx:hover{background:var(--grnl);color:var(--grnd)}
/* AJAX loading spinner next to the exit dropdown (fixed size, never shifts the layout) */
/* the spinner slot is ALWAYS present (reserves its space) and only toggles VISIBILITY, so showing it
   never reflows the row - Config/Remove stay put. */
.spin{display:inline-block;width:15px;height:15px;border:2px solid var(--bd);border-top-color:var(--grn);border-radius:50%;animation:spin .6s linear infinite;flex:none;visibility:hidden}
.spin.on{visibility:visible}
@keyframes spin{to{transform:rotate(360deg)}}
.acctdef .routeform{max-width:340px;margin-top:4px}
.acctdef .routesel{flex:1;max-width:260px}
/* client-side toasts (AJAX has no page reload). RULE: notifications ALWAYS bottom-right (never centered). */
.toasts{position:fixed;right:18px;bottom:18px;display:flex;flex-direction:column;align-items:flex-end;gap:8px;z-index:90;pointer-events:none}
.toast{background:var(--card);border:1px solid var(--bd);border-left:3px solid var(--grn);border-radius:10px;padding:10px 16px;font-size:14px;font-weight:600;box-shadow:var(--shadow-lg);opacity:0;transform:translateY(8px);transition:opacity .2s,transform .2s;max-width:300px;text-align:center;line-height:1.4;white-space:normal}
.toast img{height:13px;width:auto;vertical-align:-2px;margin-right:2px;border-radius:2px}
.toast.show{opacity:1;transform:none}
.toast.bad{border-left-color:var(--bad)}
.qrwrap{display:flex;justify-content:center;margin:14px 0}
.qr{width:220px;height:220px;background:#fff;border:1px solid var(--bd);border-radius:12px;padding:10px;image-rendering:pixelated}
.conf{width:100%;background:var(--bg);border:1px solid var(--bd);color:var(--fg);border-radius:10px;padding:12px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px;margin-top:6px;resize:vertical}
.row.gap{display:flex;gap:8px;margin:12px 0}
.row.gap.end{justify-content:flex-end;align-items:center}

/* modal (logout warning) */
.hide{display:none!important}
.modal{position:fixed;inset:0;background:rgba(0,0,0,.45);display:flex;align-items:center;justify-content:center;z-index:80;padding:16px}
.modalbox{background:var(--card);border:1px solid var(--bd);border-radius:14px;padding:22px;max-width:460px;width:100%;box-shadow:var(--shadow-lg)}
.modalbox.confirmbox{max-width:400px}   /* the shared confirm dialog is a bit more compact */
.confirmbox #confirmMsg{margin:2px 0 18px;line-height:1.5}
.modalbox h3{margin:0 0 8px}

/* footer */
.foot{border-top:1px solid var(--bd);margin-top:30px;padding:30px 0 24px;background:var(--card)}
.footgrid{display:grid;grid-template-columns:1.4fr 1fr 1fr;gap:24px}
.footgrid strong{display:block;margin-bottom:8px}
.footgrid a{display:block;color:var(--mut);font-size:14px;padding:2px 0}
.footgrid p{margin:0;font-size:13.5px}
.copy{margin-top:22px;padding-top:14px;border-top:1px solid var(--bd);font-size:13px}

/* exit pools (#15) */
.poolmodes{gap:18px;margin:6px 0 0}
.modalbox .modaldiv{border:0;border-top:1px solid var(--bd);opacity:.55;margin:16px 0 2px}
.modalbox .poolmodes .radio{display:inline-flex;align-items:center;gap:6px;cursor:pointer;font-size:14px;font-weight:400;margin:0}
.poolmodes .radio input{flex:none}
.poolhelp{margin:8px 0 0}
.poolpick{max-height:240px;overflow:auto;border:1px solid var(--bd);border-radius:10px;margin-top:6px}
.poolpick .picktable{margin:0}
.poolpick .selcol{width:1%;white-space:nowrap;text-align:center}
.poolpick tr.poolrow{cursor:pointer}
.poolpick tr.poolrow[hidden]{display:none}
.poolpick tr.poolrow:hover{background:var(--grnl)}
.poolexits{max-width:360px;white-space:normal;line-height:1.5}
html.modal-open{overflow:hidden}
/* #14 routing-rule device sub-picker */
.ruledevrow{display:flex;align-items:center;gap:10px;margin:8px 0 2px;flex-wrap:wrap}
.devchecklist{max-height:220px;overflow-y:auto;border:1px solid var(--bd);border-radius:10px;padding:6px;margin-top:6px}
.devchecklist label{display:flex;align-items:center;gap:8px;padding:6px 8px;border-radius:8px;font-size:14px;cursor:pointer}
.devchecklist label:hover{background:var(--grnl)}
.devchecklist input{flex:none}
.devsummary{cursor:pointer;font-size:13px;color:var(--grnd);text-decoration:underline}
.devsummary:hover{color:var(--grn)}

/* responsive */
@media (max-width:880px){
  .features{grid-template-columns:1fr 1fr}
  .hero{grid-template-columns:1fr;gap:22px;padding-top:24px}
  .hero-map{order:-1}
  .footgrid{grid-template-columns:1fr}
  .auth{grid-template-columns:1fr}
}
@media (max-width:520px){
  .features{grid-template-columns:1fr}
  .navlinks>a:not(.btn){padding:8px 8px}
  .stats{gap:18px}
}
/* mobile header: the hamburger drawer spans the width; tighten the bar so brand + CTA + toggles fit. */
@media (max-width:640px){
  .nav{gap:10px;padding:10px 14px}
  .navlinks{left:12px;right:12px;min-width:0}
  .navcta{padding:6px 11px;font-size:12.5px}
}
/* proxy card - fixed-size icon copy button (clipboard -> check on click; NEVER resizes; the two SVGs are
   stacked in the same grid cell and visibility-toggled, so the box can't reflow) */
.copybtn{background:var(--grnl);border:1px solid var(--bd);color:var(--grnd);cursor:pointer;
  width:30px;height:28px;border-radius:6px;margin-left:6px;vertical-align:middle;
  display:inline-grid;place-items:center;padding:0;line-height:0}
.copybtn:hover{background:var(--grn);color:#fff;border-color:var(--grn)}
.copybtn svg{grid-area:1/1;width:15px;height:15px;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.copybtn .i-check{display:none}
.copybtn.copied,.copybtn.copied:hover{color:var(--ok);border-color:var(--ok);background:var(--grnl)}
.copybtn.copied .i-clip{display:none}
.copybtn.copied .i-check{display:block}
.nowrap{white-space:nowrap}
.proxytable td{vertical-align:middle}

/* --- subscription / payments --- */
/* dashboard subscription card: a row, flex on the CARD (a div) - never on a td/th */
.subcard{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}
.subcard .subinfo{flex:1 1 280px;min-width:0}
.subcard .subinfo strong{font-size:15px}
.subcard p{margin:.25em 0 0}
.usebar{-webkit-appearance:none;appearance:none;width:100%;max-width:340px;height:8px;margin-top:10px;border:0;border-radius:6px;overflow:hidden;background:var(--grnl);display:block}
.usebar::-webkit-progress-bar{background:var(--grnl);border-radius:6px}
.usebar::-webkit-progress-value{background:var(--grn);border-radius:6px}
.usebar::-moz-progress-bar{background:var(--grn);border-radius:6px}
.subhead{margin-bottom:18px}
.subhead h1{margin:0 0 6px}
.subhead p{margin:.2em 0 0}
/* plan grid: auto-fit cards, mobile-friendly (collapses to one column) */
.plangrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:14px;margin-bottom:20px}
.plancard{position:relative;display:flex;flex-direction:column;align-items:center;text-align:center;gap:6px;
  background:var(--card);border:1px solid var(--bd);border-radius:var(--r);padding:20px 16px;box-shadow:var(--shadow)}
.plancard.best{border-color:var(--grn);box-shadow:0 0 0 1px var(--grn),var(--shadow)}
a.plancard{text-decoration:none;color:inherit;transition:border-color .12s,box-shadow .12s}
a.plancard:hover{border-color:var(--grn);box-shadow:0 0 0 1px var(--grn),var(--shadow);text-decoration:none}
.center{text-align:center}
.planflag{position:absolute;top:-10px;left:50%;transform:translateX(-50%);white-space:nowrap;
  background:var(--grn);color:#fff;font-size:11px;font-weight:600;padding:3px 10px;border-radius:999px}
.plandur{font-weight:600;font-size:15px}
.planprice{font-size:26px;font-weight:700;color:var(--grnd);line-height:1}
.planper{font-size:12px}
.planoff{color:var(--grnd);font-weight:600}
.plancard .btn{margin-top:6px}
.subfeatures h2{margin:0 0 10px;font-size:17px}
.featlist{list-style:none;margin:0 0 12px;padding:0;display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:8px 18px}
.featlist li{position:relative;padding-left:24px;color:var(--fg)}
.featlist li::before{content:"";position:absolute;left:2px;top:7px;width:11px;height:6px;border-left:2px solid var(--grn);
  border-bottom:2px solid var(--grn);transform:rotate(-45deg)}
/* payment success/failure result card */
.payresult{text-align:center}
.payresult h1{margin:6px 0}
.payresult .btn{margin-top:14px}
.paymark{width:64px;height:64px;border-radius:50%;margin:0 auto;display:grid;place-items:center}
.paymark svg{width:32px;height:32px;fill:none;stroke:currentColor;stroke-width:2.5;stroke-linecap:round;stroke-linejoin:round}
.paymark.ok{background:var(--grnl);color:var(--grnd)}
.paymark.bad{background:#fdecef;color:var(--bad)}
[data-theme="dark"] .paymark.bad{background:#2a1418}
.paymark.wait{background:var(--grnl)}
.paymark.wait .spin{visibility:visible;width:26px;height:26px;border-width:3px}

/* --- contextual help "?" icon (deep-links to a FAQ article) - fixed size, never reflows --- */
.helpbtn{display:inline-grid;place-items:center;width:19px;height:19px;border-radius:50%;border:1px solid var(--bd);
  background:var(--card);color:var(--mut);font-size:12px;font-weight:700;line-height:1;text-decoration:none;
  vertical-align:middle;margin-left:7px}
.helpbtn:hover{border-color:var(--grn);color:var(--grnd);background:var(--grnl);text-decoration:none}

/* --- FAQ accordion (native <details>) --- */
.faq{max-width:760px;margin:0 auto}
.faq details{border:1px solid var(--bd);border-radius:12px;background:var(--card);margin-bottom:10px;box-shadow:var(--shadow)}
.faq summary{cursor:pointer;padding:15px 18px;font-weight:600;list-style:none;display:flex;align-items:center;
  justify-content:space-between;gap:12px}
.faq summary::-webkit-details-marker{display:none}
.faq summary::after{content:'+';color:var(--mut);font-weight:700;font-size:19px;line-height:1}
.faq details[open]>summary::after{content:'\2212'}
.faq details[open]>summary{border-bottom:1px solid var(--bd)}
.faq .faqbody{padding:14px 18px}
.faq .faqbody p{margin:.45em 0}
.faq .faqbody ul{margin:.45em 0;padding-left:20px}
.faq .faqbody li{margin:.25em 0}
.faq details:target{border-color:var(--grn);box-shadow:0 0 0 1px var(--grn),var(--shadow)}
.faqbody ol{margin:.5em 0;padding-left:20px}
.faqbody ol li{margin:.3em 0}

/* --- install page --- */
.install .subhead .setupsteps{margin:12px 0 0;padding-left:20px;line-height:1.6}
.install .setupsteps li{margin:.35em 0}
.platgrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(116px,1fr));gap:12px;margin:20px 0}
.platcard{display:flex;flex-direction:column;align-items:center;gap:9px;padding:18px 12px;border:1px solid var(--bd);
  border-radius:var(--r);background:var(--card);box-shadow:var(--shadow);text-decoration:none;color:var(--fg);
  transition:border-color .12s,color .12s}
.platcard:hover{border-color:var(--grn);color:var(--grnd);text-decoration:none}
.platcard span{font-weight:600;font-size:14px}
.platicon{width:40px;height:40px;fill:currentColor}
.platicon.stroke{fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.install-acc summary{justify-content:flex-start;gap:9px}
.install-acc summary::after{margin-left:auto}
.install-acc summary .platicon{width:22px;height:22px;flex:none}
.cmd{display:flex;align-items:center;gap:8px;background:var(--grnl);border:1px solid var(--bd);border-radius:8px;
  padding:7px 10px;margin:8px 0;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:13px;overflow-x:auto}
.cmd code{flex:1 1 auto;white-space:pre;color:var(--fg);background:none}
.cmd .copybtn{flex:none}

/* --- account-created page (Mullvad-style: copy/download + "saved it" checkbox blurs the number) --- */
.acctready{text-align:center}
.acctready .acctbox{justify-content:center;margin:18px 0 6px}
.acctbox-c{justify-content:center}   /* CSP-clean replacement for an inline style on the logout-modal acctbox */
.acctnum{transition:filter .35s ease}
.acctnum.blurred{filter:blur(8px);user-select:none}
.acctbtns{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin:8px 0 4px}
.acctbtns .btn{margin-top:0;display:inline-flex;align-items:center;justify-content:center;gap:7px}
.acctbtns .btn svg{width:16px;height:16px;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.acctbtns .i-check{display:none}
.acctbtns .copied .i-clip{display:none}
.acctbtns .copied .i-check{display:inline}
.acctbtns .copied{color:var(--ok);border-color:var(--ok)}
.savedchk{display:flex;align-items:flex-start;gap:9px;text-align:left;margin:16px 0 4px;font-size:14px;cursor:pointer}
.savedchk input{margin-top:2px;flex:none;width:17px;height:17px;accent-color:var(--grn)}
.acctready a.btn[aria-disabled="true"]{opacity:.5;pointer-events:none}
/* text copy button: reserve space for the longest label ("Copied") so it never resizes on click */
#copyConf{min-width:78px}
/* Add Device popup */
.addsec{font-weight:600;margin:15px 0 6px;font-size:.95rem}
.lblgap{margin:6px 0 2px}
#addModal .routesel{width:100%}
/* proxy code-snippet popup */
.snipcol,.snipcell{width:1%;white-space:nowrap;text-align:center}
.snipbtn{display:inline-flex;align-items:center;justify-content:center;width:32px;height:32px;padding:0;border:1px solid var(--bd);background:var(--card);color:var(--grnd);border-radius:8px;cursor:pointer}
.snipbtn:hover{background:var(--grnl);border-color:var(--grn)}
.snipbtn svg{width:17px;height:17px;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.snipbox{max-width:580px}
.sniptabs{display:flex;flex-wrap:wrap;gap:6px;margin:4px 0 10px}
.sniptab{padding:5px 12px;border:1px solid var(--bd);background:var(--card);color:var(--fg);border-radius:999px;font:inherit;font-size:13px;cursor:pointer}
.sniptab.on{background:var(--grn);border-color:var(--grn);color:#fff}
.codeblock{background:#0f172a;color:#e2e8f0;border-radius:10px;padding:14px 16px;overflow:auto;height:260px;margin:0 0 14px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:13px;line-height:1.5;white-space:pre}
.codeblock code{font:inherit;color:inherit;background:none;padding:0;white-space:pre}
#snipCopy{min-width:78px}
.pwmask{color:var(--mut);letter-spacing:1px}
/* proxy table: Address (col 2) is the flexible filler, so Username/Password/Exit/Code stay tight on the
   right and Code sits right after Exit (no big gap, less horizontal scroll) */
.proxytable td:first-child,.proxytable th:first-child{width:1%;white-space:nowrap}
.proxytable td:nth-child(3),.proxytable th:nth-child(3){width:1%;white-space:nowrap}
.proxytable td:nth-child(4),.proxytable th:nth-child(4){width:1%;white-space:nowrap}
.proxytable td:nth-child(5),.proxytable th:nth-child(5){width:1%;white-space:nowrap}
/* routing rules table (P3): Destination + Exit are the flexible columns; Applies-to + Actions stay tight */
.ruletable td{vertical-align:middle}
.ruletable td.devactions,.ruletable th.actcol{width:1%;white-space:nowrap;text-align:center}
.ruletable td.devactions{text-align:right}
.ruletable td:nth-child(3),.ruletable th:nth-child(3){width:1%;white-space:nowrap;text-align:center}
.ruletable td:nth-child(2),.ruletable th:nth-child(2){text-align:center}   /* Exit column: header + content centered */
/* exit pools table: match the devices/rules tables - name left, the rest (header + content) centered,
   actions header centered with the buttons flush right (same as devices) */
.pooltable td{vertical-align:middle}
.pooltable td:nth-child(2),.pooltable th:nth-child(2){text-align:center}   /* Rotation */
.pooltable td:nth-child(3),.pooltable th:nth-child(3){text-align:center}   /* Exits */
.pooltable th.actcol{width:1%;white-space:nowrap;text-align:center}
.pooltable td.devactions{width:1%;white-space:nowrap;text-align:right}
.rtype{display:inline-block;padding:1px 7px;border-radius:6px;font-size:11px;font-weight:700;
  background:var(--grnl);color:var(--grnd);vertical-align:middle;margin-right:4px}
.badge.neutral{background:var(--grnl);color:var(--mut)}
.badge.mini{padding:2px 7px;font-size:11px;margin-left:6px;font-weight:600}
/* the rule modal's "choose a server" row: button + chosen-exit label on one line, wraps on narrow screens */
.ruleexit{display:flex;gap:10px;align-items:center;flex-wrap:wrap;margin:2px 0 6px}
/* routing rules: search/filter row + a scrolling viewport (~12 rows) with a sticky header (no page reload) */
.rulefilter{display:flex;gap:8px;align-items:center;margin:0 0 10px}
.rulefilter[hidden]{display:none}   /* class display:flex would otherwise beat the [hidden] attribute */
.rulefilter .picksearch{flex:1;margin:0}
#ruleWrap{max-height:520px;overflow:auto}
#ruleWrap thead th{position:sticky;top:0;background:var(--card);z-index:1}
/* button loading state (NO layout shift): the button keeps its exact size, the label goes invisible, a
   centered spinner overlays, and clicks are blocked while the request is in flight. */
.btn.loading{position:relative;color:transparent !important;pointer-events:none}
.btn.loading::after{content:"";position:absolute;top:50%;left:50%;width:14px;height:14px;margin:-7px 0 0 -7px;
  border:2px solid #fff;border-top-color:transparent;border-radius:50%;animation:btnspin .6s linear infinite}
/* light-background buttons (ghost / danger) need a visible (non-white) spinner */
.btn.ghost.loading::after{border-color:var(--grnd);border-top-color:transparent}
.btn.danger.loading::after{border-color:var(--bad);border-top-color:transparent}
@keyframes btnspin{to{transform:rotate(360deg)}}
/* per-device DNS filtering modal (P2c) */
.dnsquick{display:flex;gap:6px;flex-wrap:wrap;margin:2px 0 14px}
.dnscats{display:flex;flex-direction:column;margin-bottom:16px}
.dnsrow{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:10px 2px;border-bottom:1px solid rgba(128,128,128,.18);cursor:pointer}
.dnsrow:last-child{border-bottom:none}
.dnsrow span{font-size:.95rem}
.dnsrow input[type=checkbox]{width:18px;height:18px;flex:none;cursor:pointer;accent-color:var(--grn)}
.acctready #continueHint{margin-top:8px}

/* --- discreet "by creating an account you agree..." note under the create form --- */
.agreenote{margin:10px 0 0;font-size:11.5px;line-height:1.5;color:var(--mut);opacity:.85;text-align:center}
.agreenote a{color:var(--mut);text-decoration:underline}
.agreenote a:hover{color:var(--grnd)}

/* --- legal pages (Terms, Privacy) --- */
.legal{max-width:760px;margin:0 auto}
.legal h1{margin:0 0 4px}
.legal .updated{color:var(--mut);font-size:13px;margin:0 0 18px}
.legal h2{font-size:17px;margin:24px 0 6px}
.legal p{line-height:1.62;margin:.5em 0}
.legal ul{padding-left:20px;line-height:1.62}
.legal li{margin:.3em 0}
.legal .email{margin-top:16px}
.legal .footnote{color:var(--mut);font-size:12.5px;line-height:1.5;margin:.25em 0}

/* free-trial highlight banner (pricing page; green-tinted card, CTA right-aligned) */
.trialbanner{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;
  border-color:var(--grn);background:var(--grnl);margin-bottom:18px}
.trialbanner-txt{display:flex;flex-direction:column;gap:2px;min-width:0}
.trialbanner-txt strong{font-size:16px}
.trialbanner .btn{flex:none}

/* security page: 2FA + device-to-device */
.pill.on{background:var(--grnl);color:var(--grn);border-color:var(--grn)}
.pill.off{background:rgba(128,128,128,.14);color:#7a7a7a;border-color:var(--bd)}
.nomar{margin:0}

/* enrollment - one centered column */
#enrollBox{margin-top:14px;scroll-margin-top:80px}   /* clear the sticky nav when we scroll it into view */
.enroll{max-width:320px;margin:0 auto;text-align:center;display:flex;flex-direction:column;align-items:center;gap:10px}
.enroll>p{margin:0}
#qrWrap{display:inline-flex;justify-content:center;align-items:center;border:0;background:none;padding:0;margin:0;cursor:zoom-in;border-radius:12px}
#qrWrap svg{width:190px;height:190px;background:#fff;padding:8px;border-radius:10px;border:1px solid var(--bd);display:block}
#qrWrap:focus-visible{outline:2px solid var(--grn);outline-offset:3px}
/* manual key chip - click to copy */
.keychip{display:inline-flex;align-items:center;gap:9px;background:var(--grnl);border:1px solid var(--bd);
  border-radius:999px;padding:7px 14px;font:inherit;cursor:pointer;color:var(--fg);max-width:100%}
.keychip:hover{border-color:var(--grn)}
.keychip .keychip-lbl{font-size:12px;color:var(--mut);font-weight:600;flex:none}
.keychip code{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:14px;letter-spacing:1px;
  overflow-wrap:anywhere}
.keychip svg{width:15px;height:15px;flex:none;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.keychip .i-check{display:none}
.keychip.copied{border-color:var(--ok);color:var(--ok)}
.keychip.copied .i-clip{display:none}
.keychip.copied .i-check{display:inline}
/* confirm-code form */
.confirm2fa{width:100%;margin-top:6px}
.confirm2fa label{display:block;font-size:13px;font-weight:600;color:var(--mut);margin:0 0 8px}
.codeinput{width:100%;text-align:center;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;
  font-size:24px;letter-spacing:10px;padding:12px 10px 12px 20px;background:var(--card);border:1px solid var(--bd);
  color:var(--fg);border-radius:11px}
.codeinput:focus{outline:2px solid var(--grn);outline-offset:1px;border-color:var(--grn)}
.codeinput::placeholder{letter-spacing:10px;color:var(--mut);opacity:.5}
/* the same cute field in the Disable / Regenerate modals; a bit tighter spacing so a 14-char recovery code fits */
.modalbox .codeinput{letter-spacing:6px;margin-top:2px}
.modalbox .codeinput::placeholder{letter-spacing:6px}

/* QR lightbox */
.modalbox.qrbox{max-width:320px;padding:16px;text-align:center}
.modalbox.qrbox svg{width:100%;height:auto;max-width:280px;background:#fff;padding:10px;border-radius:12px}

/* setting row with a real switch */
.setrow{display:flex;align-items:center;justify-content:space-between;gap:16px;margin-top:16px}
.setrow-text{display:flex;flex-direction:column;gap:3px;min-width:0}
.setrow-title{font-size:.95rem;font-weight:600}
.switch{position:relative;display:inline-block;width:48px;height:28px;flex:none}
.switch input{position:absolute;opacity:0;width:0;height:0}
.switch .slider{position:absolute;inset:0;background:rgba(128,128,128,.35);border-radius:999px;
  transition:background .15s ease;cursor:pointer}
.switch .slider::before{content:"";position:absolute;width:22px;height:22px;left:3px;top:3px;background:#fff;
  border-radius:50%;box-shadow:0 1px 3px rgba(0,0,0,.35);transition:transform .15s ease}
.switch input:checked+.slider{background:var(--grn)}
.switch input:checked+.slider::before{transform:translateX(20px)}
.switch input:focus-visible+.slider{outline:2px solid var(--grn);outline-offset:2px}
.switch input:disabled+.slider{opacity:.45;cursor:not-allowed}
/* device-to-device label: normal when on, grayed when off */
.setrow-title{transition:color .12s ease}
.setrow.off .setrow-title{color:var(--mut)}
/* a disabled action button (e.g. before a valid code is entered) */
.btn:disabled,.btn[disabled]{opacity:.5;cursor:not-allowed}
/* "use a recovery code instead" link under the modal code field */
.reclink{margin:2px 0 6px}
.linklike{background:none;border:0;color:var(--grnd);font:inherit;font-size:12.5px;cursor:pointer;padding:2px 0;text-decoration:underline}
.linklike:hover{color:var(--grn)}

.reccodes{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:15px;line-height:1.85;
  letter-spacing:.5px;background:var(--grnl);border:1px solid var(--bd);border-radius:10px;padding:12px 14px;
  margin:6px 0 2px;white-space:pre;overflow-x:auto;text-align:center}
.btn[aria-disabled="true"]{opacity:.5;pointer-events:none}