/* Role-based nav visibility — beats panel-ops-modern display:flex !important */
body.role-customer #app-view .admin-only,
body.role-customer #app-view .nav-section.admin-only,
body.role-partner #app-view .admin-only,
body.role-partner #app-view .nav-section.admin-only {
  display: none !important;
}
body.role-admin #app-view .nav-section.customer-only:not(.admin-ops-section),
body.role-partner #app-view .nav-section.customer-only:not(.admin-ops-section) {
  display: none !important;
}
body.role-partner #app-view .nav-section.admin-ops-section {
  display: none !important;
}
body:not(.role-partner) #app-view .nav-section.partner-only {
  display: none !important;
}
body.role-admin #app-view .nav-item.admin-hide {
  display: none !important;
}

body.role-customer #app-view .nav-section.admin-only .nav-item,
body.role-partner #app-view .nav-section.admin-only .nav-item { display: none !important; }

body.role-customer #app-view .nav-item[data-page="detection-report"],
body.role-user #app-view .nav-item[data-page="detection-report"] { display: none !important; }
body.role-customer #app-view [data-plan-feature] { /* plan hide uses inline important */ }
/* Customer/public tools — always visible (admin-hide only hides from admin role) */
body.role-customer #app-view .nav-item[data-page="ml-tracker"],
body.role-customer #app-view .nav-item[data-page="support"],
body.role-customer #app-view .nav-item[data-page="changelog"],
body.role-customer #app-view .nav-item[data-page="notifications"],
body.role-user #app-view .nav-item[data-page="ml-tracker"],
body.role-user #app-view .nav-item[data-page="support"],
body.role-user #app-view .nav-item[data-page="changelog"],
body.role-user #app-view .nav-item[data-page="notifications"] {
  display: flex !important;
}