/* A read-only role sees the CRM exactly as it is, minus the ways in. The
     database refuses their writes regardless — this just removes dead buttons. */
  body.phi-readonly .btn-add-sale,
  body.phi-readonly .btn-add-contact,
  body.phi-readonly #phi-add-btn,
  body.phi-readonly .acc-primary { display: none !important; }
  body.phi-readonly::after {
    content: 'Read-only access'; position: fixed; bottom: 12px; right: 12px; z-index: 2147483400;
    background: #7f6680; color: #fff; border-radius: 8px; padding: 6px 12px;
    font: 600 11.5px -apple-system, BlinkMacSystemFont, sans-serif; opacity: .8;
  }