25 June 2026v0.7.8
Permission-safe operations, internal registrations, and richer reporting
Autopilot 0.7.8 tightens permission enforcement across customer, deal, trade-in, and reporting workflows while adding internal registration tools, Sales Log view templates, and a more useful Weekly Usage report.
New features
- Sales Log now has a saved-view gallery with ready-made starting points for month views, salesperson-focused views, sales-channel month views, and carry-over cleanup.
- Internal registrations now have a proper workbench for demos, service loans, pre-regs, and sponsor cars, including edit, profile, return, delete, sales-channel assignment, and a new dashboard widget.
- Weekly Usage is now its own management report with active users, sessions, estimated active time, page views, busy app areas, and safer recipient management.
- The reports landing page has been rebuilt around the dealership staple reports, including Daily Sales Summary, Weekly Usage, report templates, and a custom-report request card.
- Active-now status now has a dedicated server endpoint so activity signals can be reused consistently across reports and shell surfaces.
Changes & improvements
- Customer search, the customer directory, customer detail, Messages recipients, and Companion customer tools now respect deal-access scope and customer field permissions before showing names, contact details, licence fields, or gross profit.
- Global search is smarter for multi-word vehicle lookups, order numbers, stock numbers, VIN endings, variants, and common Tiggo spelling mistakes, while still respecting field visibility.
- Deal reassignment, custom-field edits, trade-in edits, and full write-up saves now verify the actual RLS result instead of assuming a permission check earlier in the flow was enough.
- Trade-in controls now have dedicated create, view, edit, delete, and appraisal-value permissions, and full saves preserve trade-in fields the caller is not allowed to edit.
- Business-manager own-scope access now follows finance-manager ownership through GP reports, projected GP, report pivots, deal children, and relevant save paths.
- Dashboard defaults are more compact and activity-forward, with deal comments in the starter layout, smaller quick links and leaderboard tiles, and opt-in stock beta links clearly labelled.
- The notification bell is now a compact dropdown focused on meaningful alerts, approvals, assigned tasks, mentions, support messages, and access requests, while ordinary chat unread state stays on chat.
- Messages, queues, automations, and email insights have been visually tightened, and email analytics now clearly says when delivery/open/click tracking is unavailable.
- Additional-dealership onboarding now starts with the welcome step, supports naming the new dealership during setup, and lets an existing customer cancel an unfinished setup safely.
- The report and usage loaders now page through larger Supabase result sets, share auth-email lookup logic, and prevent navigation into future Weekly Usage weeks.
Bug fixes
- Fixed stale RLS permission keys that still referenced retired view/edit resources after the access-key consolidation, including stock, settings, branding, notifications, reports, and permission administration tables.
- Fixed internal registration inserts that could fail because incoming-order select/update policies still used the old stock permission keys.
- Fixed permission-admin read and write RLS so delegated permission managers can save the same Settings -> Permissions changes the UI allows.
- Normalised field-permission metadata so all field resources are tri-state, correctly sorted, and aligned with the server-side edit checks.
- Tightened Supabase function security by pinning the delivery trigger search path and removing anonymous execute access from the own-session revocation RPC.
- Fixed business-manager own-scope write-up saves so replacing line items and trade-ins uses finance-manager ownership instead of salesperson-only ownership.
- Fixed projected GP and GP pivot paths so users with own, team, department, or channel-limited deal access cannot widen the report by requesting another salesperson.
- Fixed report and customer surfaces that could previously include customers or financial rows outside the caller's effective deal scope.