Freely movable & resizable button cluster (#54)
The on-page button cluster can now be moved and resized freely, beyond the four corner presets.

New
Drag to move — grab the ☰ grip to place the cluster anywhere; position is remembered.
Drag to resize — corner grip sets the cluster width; the size is remembered and overrides the max-width cap.
Gear menu — the rarely-used Sort / Edit Layout / Set-picker controls now tuck behind a ⚙ gear instead of taking permanent space. Click to open, click away to close.
Quiet by default — the grip and gear stay hidden until you hover the buttons, then enlarge and darken so they're easy to grab.
Alt+N still cycles the corner presets and now also resets a free move/resize back to a corner.
Robustness
Stays clear of the scrollbar and never clips off-screen; saved layout re-clamps into view on window resize.
Sort/edit/set controls snap to the side/edge nearest the cluster.
Resize uses a min-height floor so buttons never spill past the box.
Under the hood
23 new tests; full suite 309 passing. No new permissions.

Added
iNaturalist Network multi-node support (#51) — the buttons and shortcuts now work on every iNaturalist Network site (iNaturalist Australia / inaturalist.ala.org.au, mexico.inaturalist.org, naturalista.uy, argentinat.org, biodiversity4all.org, and the rest), not just www.inaturalist.org. The whole Network shares one account system and one API, so your existing login just works on whichever site you use. User-facing links (Identify/Explore, the URL builder) now stay on the node you're actually on.
"All places" toggle in the URL builder — regional sites default to their own country when no place is set; tick this to add place_id=any and keep a query global. (Ignored if you've added a specific Place filter.)
Fixed
Editing an "Add Taxon ID" button wiped the taxon (#52) — opening a saved Add Taxon ID action and clicking Update Configuration failed with "Please select a valid taxon…" until you re-picked the taxon. The id is now preserved on edit.
URL builder Location Accuracy labels were dead clicks (#53) — only the radio dots responded; the Any/True/False labels are now clickable and the Accuracy Above/Below labels sit on their number inputs.
URL builder Geoprivacy couldn't be cleared (#53) — Geoprivacy and Taxon Geoprivacy now have an "Any" option, so you can return to no filter after selecting one.

Fixed
Editing a multi-action configuration could blank a selection and fail to save (#50) — when a configuration had more than one action, the "Mark as Reviewed/Unreviewed" (and "Follow/Unfollow") radio buttons could silently lose their selection, and then Update Configuration threw Cannot read properties of null (reading 'value'). The radios used hardcoded name/id attributes, so every action's radios shared one document-wide radio group and cleared each other. Each action now gets a unique radio-group name/id, and the save reads are null-guarded with a sensible default. Thanks to @sbrobeson for the precise repro that pinpointed the cause.
macOS Alt(Option) keyboard shortcuts did nothing (#49) — e.g. Alt+N to rotate buttons. On macOS, Option turns the keystroke into a special character, so event.key was no longer the letter the shortcut was matching against. Shortcuts now fall back to event.code (the physical key) when Alt is held.
Mojibake on the options page — the expand/collapse arrows on existing configuration items (and a few other glyphs) rendered as â–¼ because options.html had no <meta charset>, so the browser decoded options.js as Windows-1252 instead of UTF-8. Added <meta charset="UTF-8">.
Added
Firefox for Android support (#47) — added browser_specific_settings.gecko_android to the manifest so the extension can be installed on Firefox for Android.

~8× faster bulk actions. A 200-obs OF bulk dropped from ~4–5 minutes to ~33 seconds via parallel validation, prevention, and per-obs action loops, plus a v2 selective-fields prefetch and elimination of unused waits.
Downvote-existing-annotation action. New checkbox on the annotation action panel: downvote the matching existing annotation instead of trying to add a new one. Useful for cleanup workflows.
URLgen state persistence. All your URL-builder settings (quality grade, reviewed, licenses, bbox, custom lists, action boxes) now actually persist across sessions. Previously only action boxes did.
URLgen default state is now all three quality grades + reviewed=any (was just research-grade + reviewed=no).
Bug fixes: 429 cascade on addAnnotation, silent undo-record loss past 10 MB, v2 prefetch subfield gap, dead-code cleanup.
Fixed
Project dropdown surfaces common-word projects (#48) — lookupProject now queries iNaturalist's relevance-ranked /projects/autocomplete endpoint instead of the general /projects search sorted by observation_count (which came back null, so the sort was meaningless and buried matches past per_page). Typing "blue" now finds the project Blue!.
Added
Manual project ID entry (#48) — the Project ID field is no longer read-only. Typing an ID resolves it via the new lookupProjectById helper and auto-fills the project name (inline success/error feedback), as an escape hatch for any project the dropdown still can't surface.

Patch release: remove third-party CDN dependency.

Discovered during the Chrome Web Store submission pass that URLgen.html loaded FontAwesome from cdnjs.cloudflare.com at runtime — meaning Cloudflare saw users' IPs every time the URL filter generator opened. This contradicted the privacy policy's claim of no third-party hosts beyond iNaturalist (and GitHub for explicit issue-reporter clicks).

Removed
The remote cdnjs.cloudflare.com stylesheet link from URLgen.html.
Changed
The two draw-control icons on the URL filter generator's map are now inline SVGs in URLgen.js, using currentColor so they inherit Leaflet's control styling. Zero additional payload; no font files; no remote loads.
Note on .fa-* references in content.js
Unchanged — those query iNaturalist's own page DOM (iNat already loads FontAwesome on its pages). We never needed to ship the library ourselves for those references.