feat(appointment): identify admin-booked patient by national code

Admin-side booking (POST /api/v1/my/appointment and
/api/v1/admin/appointment) resolved the patient User by mobile only, so
one person booked under two mobiles produced two User rows — and two
case-files, since PatientRecord is keyed on user_id. National code is the
real unique identity (User.national_code is already unique); a person may
have several mobiles.

Booking now requires + validates patient_national_code and resolves the
patient national-code-first (then mobile) via a shared PatientResolver, so
the case-file stays unique per national code even across mobiles. Reusing a
mobile already bound to a different national code returns 422
ERR_PROFILE_MOBILE_TAKEN. The admin create form and NewAppointmentDrawer
gain a national-code field and send it; both had a dead patient-picker URL
(/api/v1/patient) fixed to the real /api/v1/patients, whose payload already
carries user_national_code for autofill.

Docs (appointment.md, admin.md) and tests updated; new
AppointmentNationalCodeTest covers success, single-file reuse, missing,
invalid, and identity-conflict cases.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

assets/admin/pages/AppointmentCreatePage.tsx

@@ -18,7 +18,7 @@ import { WalletChargeLink } from '../components/AppointmentActions';
  */
 
 interface Option { uuid: string; name?: string; full_name?: string }
-interface PatientRow { uuid: string; user_name?: string; user_mobile?: string }
+interface PatientRow { uuid: string; user_name?: string; user_mobile?: string; user_national_code?: string }
 
 const toEpoch = (isoDate: string, time: string) =>
   Math.floor(new Date(`${isoDate}T${time || '00:00'}`).getTime() / 1000);
@@ -56,9 +56,10 @@ export default function AppointmentCreatePage() {
   const [picked, setPicked] = useState<PatientRow | null>(null);
   const [name, setName] = useState('');
   const [mobile, setMobile] = useState('');
+  const [nationalCode, setNationalCode] = useState('');
   const patientsQ = useQuery<ApiResponse<PatientRow[]>>({
     queryKey: ['create-patients', patientSearch],
-    queryFn: () => api.get(`/api/v1/patient?search=${encodeURIComponent(patientSearch)}&limit=10`),
+    queryFn: () => api.get(`/api/v1/patients?search=${encodeURIComponent(patientSearch)}&limit=10`),
     enabled: patientSearch.trim().length >= 2,
   });
   const patients = useMemo(() => patientsQ.data?.data ?? [], [patientsQ.data]);
@@ -90,7 +91,9 @@ export default function AppointmentCreatePage() {
 
   const effectiveName = picked?.user_name || name.trim();
   const effectiveMobile = picked?.user_mobile || mobile.trim();
-  const valid = !!doctorUuid && !!date && effectiveName.length >= 2 && effectiveMobile.length >= 10 && !!start && !!end;
+  const effectiveNationalCode = (picked?.user_national_code || nationalCode).replace(/\D/g, '');
+  const valid = !!doctorUuid && !!date && effectiveName.length >= 2 && effectiveMobile.length >= 10
+    && effectiveNationalCode.length === 10 && !!start && !!end;
 
   const create = useMutation({
     mutationFn: async () => {
@@ -101,6 +104,7 @@ export default function AppointmentCreatePage() {
         slot_end: toEpoch(date, end),
         patient_name: effectiveName,
         patient_mobile: effectiveMobile,
+        patient_national_code: effectiveNationalCode,
         ...(sectionUuid ? { service_section_uuid: sectionUuid } : {}),
         ...(itemUuid ? { service_item_uuid: itemUuid } : {}),
         ...(staffUuid ? { staff_uuid: staffUuid } : {}),
@@ -193,6 +197,13 @@ export default function AppointmentCreatePage() {
                   <input value={mobile} onChange={e => setMobile(e.target.value)} placeholder="شماره تماس مراجعه کننده" dir="ltr" />
                 </div>
               </div>
+              <div>
+                <label style={label}>کد ملی</label>
+                <div className="field" style={{ marginTop: 6 }}>
+                  <input value={nationalCode} onChange={e => setNationalCode(e.target.value.replace(/\D/g, '').slice(0, 10))}
+                    placeholder="کد ملی مراجعه کننده" dir="ltr" inputMode="numeric" maxLength={10} />
+                </div>
+              </div>
             </div>
           </>
         )}