DATFU Travel ERP v1.0.1 — audited repair
==========================================

This revision repairs the uploaded v1.0.0 package without pretending demo-only UI actions are persisted.

Fixed
- Standalone Full HTML View CSS corruption: the stylesheet now starts with a valid :root rule.
- Added the corrected self-contained design preview at public/design-preview.html.
- Finance API endpoints now require super_admin/admin/accountant access.
- User and finance resource reads are no longer exposed to ordinary authenticated users.
- Booking workflow stage changes are limited to operations roles or the assigned user.
- Financial transaction code generation no longer uses count()+1, avoiding common concurrent-code collisions.
- Added authenticated document download endpoint.
- Added admin-only settings read/update API.
- Doctor now verifies compiled JS/CSS assets and the design preview.
- cPanel script supports DATFU_REBUILD_FRONTEND=1 for an intentional frontend rebuild.

Important integration status
- Dashboard is API-backed in the current React SPA.
- Several rich module screens/actions in resources/js remain demo/fallback UI and are not yet wired to database CRUD.
- The corrected public/design-preview.html is a visual/interaction prototype, not a substitute for backend persistence.
- Do not treat a button closing a demo modal as proof that a database record was saved.