Changelog

• Deal financial panels now respect field-level visibility more consistently, keeping sensitive cost, profit, rebate, and F&I details hidden or read-only based on each user's permissions.
• Vehicle add-ons and write-up line items can still be managed where permitted without exposing unrelated finance, trade-in, or profitability details.
• Draft deal rows now have clearer pending-cancel styling and a cleaner list surface.

Security & permissions

• Stock price is now treated as a profit-sensitive field and hidden from salesperson-style roles unless that role already has gross-profit visibility.
• Manager approval is enforced before deals move into Sold or Delivered states, including authenticated API writes.
• Privileged deal actions now bind caller-supplied IDs to the user's active dealership and typed deal scope before reading metadata or sending side effects.

• Restricted deal saves now preserve existing hidden F&I, trade-in, and promotion data instead of accidentally recalculating from missing child rows.
• Reconditioning, transport, notes, mentions, and chat grant paths now fail closed for out-of-scope IDs before email, audit, grant, or mutation work can run.