/* Authentication visibility must outrank presentation-layer display overrides.
   The existing auth controller owns hidden; no session or role logic changes. */
html body.r3-workspace #app-shell[hidden],
html body #app-shell[hidden],
html body #login-screen[hidden] {
  display: none !important;
}
/* Navigation group layout must also respect the original role gate. */
html body.r3-workspace #app-shell #nav [data-min-role][hidden] {
  display: none !important;
}