fix: refresh installed clients and hide admin control by role

public/app.css

@@ -19,6 +19,7 @@
 }
 
 *{ box-sizing:border-box; }
+.hidden{ display:none !important; }
 html{ background:var(--surface); }
 body{
   margin:0; background:var(--surface); color:var(--ink);

public/sw.js

@@ -1,4 +1,4 @@
-const CACHE_NAME = "roast-planner-static-v2";
+const CACHE_NAME = "roast-planner-static-v3";
 const APP_SHELL = [
 	"/",
 	"/landing.html",
@@ -64,9 +64,10 @@ self.addEventListener("fetch", (event) => {
 		return;
 	}
 
+	// Prefer fresh JavaScript and styles so installed clients receive UI/security updates
+	// immediately; use the cache only when offline.
 	event.respondWith(
-		caches.match(request).then((cached) => {
+		fetch(request)
-			const update = fetch(request)
 			.then((response) => {
 				if (response.ok)
 					caches
@@ -74,8 +75,6 @@ self.addEventListener("fetch", (event) => {
 						.then((cache) => cache.put(request, response.clone()));
 				return response;
 			})
-				.catch(() => cached);
+			.catch(() => caches.match(request)),
-			return cached ?? update;
-		}),
 	);
 });