feat: add clinic doctor invitation feature

- Implemented ClinicInvitationController to handle doctor invitations.
- Created ClinicDoctorInvitation entity and repository for managing invitations.
- Added ClinicInvitationService for business logic related to invitations.
- Introduced endpoints for inviting, listing, resending, changing status, and deleting invitations.
- Updated security configuration to allow public access to invitation endpoints.
- Added migration for clinic_doctor_invitations table.
- Enhanced DoctorRepository with a method to find doctors by mobile number.
- Updated ClinicDetailPage to include invitation management UI.

assets/admin/pages/ClinicDetailPage.tsx

@@ -9,13 +9,14 @@ import {
   ArrowRightIcon, PencilIcon, TrashIcon,
   BuildingOffice2Icon, PhoneIcon, MapPinIcon, XMarkIcon,
   PlusIcon, CameraIcon, ChevronDownIcon,
+  EnvelopeIcon, ArrowPathIcon, NoSymbolIcon,
 } from '@heroicons/react/24/outline';
 import { MapContainer, TileLayer, Marker, useMapEvents, useMap } from 'react-leaflet';
 import L from 'leaflet';
 import 'leaflet/dist/leaflet.css';
 import { toast } from 'sonner';
 import { api } from '../lib/api';
-import type { ApiResponse } from '../lib/api';
+import type { ApiResponse, PaginatedResponse } from '../lib/api';
 import type { ClinicDetail } from '../types';
 import { formatNumber } from '../lib/utils';
 import ConfirmDialog from '../components/ui/ConfirmDialog';
@@ -33,6 +34,19 @@ const IRAN_CENTER: [number, number] = [32.4279, 53.6880];
 
 // ── Types ──────────────────────────────────────────────────────────────────
 
+interface ClinicInvitation {
+  uuid: string;
+  mobile: string;
+  invited_name: string | null;
+  invited_specialty: string | null;
+  status: 'pending' | 'accepted' | 'rejected' | 'suspended' | 'removed';
+  token_used: boolean;
+  invited_at: number;
+  expires_at: number;
+  responded_at: number | null;
+  doctor: { uuid: string; name: string } | null;
+}
+
 interface ClinicDoctorItem {
   id: string; uuid: string; name: string;
   gender: string | null; degree: string | null;
@@ -478,6 +492,75 @@ function EditModal({ clinic, onClose, onSaved }: {
   );
 }
 
+// ── Invitation status badge ────────────────────────────────────────────────
+
+const INV_STATUS_MAP: Record<string, { label: string; cls: string }> = {
+  pending:   { label: 'در انتظار',   cls: 'amber' },
+  accepted:  { label: 'پذیرفته‌شده', cls: 'green' },
+  rejected:  { label: 'رد شده',      cls: 'gray'  },
+  suspended: { label: 'تعلیق',       cls: 'violet' },
+  removed:   { label: 'حذف‌شده',     cls: 'gray'  },
+};
+
+// ── Invite modal ───────────────────────────────────────────────────────────
+
+const inviteSchema = z.object({
+  mobile:    z.string().regex(/^09\d{9}$/, 'شماره موبایل ۱۱ رقمی با 09 شروع می‌شود'),
+  name:      z.string().optional(),
+  specialty: z.string().optional(),
+});
+type InviteForm = z.infer<typeof inviteSchema>;
+
+function InviteModal({ clinicUuid, onClose, onInvited }: {
+  clinicUuid: string; onClose: () => void; onInvited: () => void;
+}) {
+  const { register, handleSubmit, formState: { errors } } = useForm<InviteForm>({
+    resolver: zodResolver(inviteSchema),
+  });
+
+  const inviteMut = useMutation({
+    mutationFn: (d: InviteForm) =>
+      api.post<ApiResponse<ClinicInvitation>>(`/api/v1/admin/clinic/${clinicUuid}/invite-doctor`, d),
+    onSuccess: () => { toast.success('دعوتنامه ارسال شد'); onInvited(); onClose(); },
+    onError:   (e: Error) => toast.error(e.message),
+  });
+
+  return (
+    <div className="overlay" onClick={onClose}>
+      <div className="modal" style={{ maxWidth: 420 }} onClick={e => e.stopPropagation()}>
+        <div className="modal-head">
+          <b>دعوت پزشک به کلینیک</b>
+          <button className="mini-btn" onClick={onClose}><XMarkIcon style={{ width: 16, height: 16 }} /></button>
+        </div>
+        <form onSubmit={handleSubmit(d => inviteMut.mutate(d))}>
+          <div className="modal-body" style={{ display: 'flex', flexDirection: 'column', gap: 14 }}>
+            <div>
+              <label style={{ fontSize: 13, fontWeight: 600, display: 'block', marginBottom: 6 }}>شماره موبایل پزشک *</label>
+              <input className="input" dir="ltr" placeholder="09xxxxxxxxx" {...register('mobile')} />
+              {errors.mobile && <div className="err-text">{errors.mobile.message}</div>}
+            </div>
+            <div>
+              <label style={{ fontSize: 13, fontWeight: 600, display: 'block', marginBottom: 6 }}>نام پزشک (اختیاری)</label>
+              <input className="input" placeholder="دکتر نام و نام خانوادگی" {...register('name')} />
+            </div>
+            <div>
+              <label style={{ fontSize: 13, fontWeight: 600, display: 'block', marginBottom: 6 }}>تخصص (اختیاری)</label>
+              <input className="input" placeholder="مثال: قلب و عروق" {...register('specialty')} />
+            </div>
+            <p className="muted" style={{ fontSize: 12 }}>پیامک دعوتنامه با لینک ۷۲ ساعته ارسال می‌شود</p>
+          </div>
+          <div className="modal-foot">
+            <button type="button" className="btn ghost sm" onClick={onClose}>انصراف</button>
+            <button type="submit" className="btn primary sm" disabled={inviteMut.isPending}>
+              {inviteMut.isPending ? 'در حال ارسال...' : 'ارسال دعوتنامه'}
+            </button>
+          </div>
+        </form>
+      </div>
+    </div>
+  );
+}
+
 // ── Main Page ──────────────────────────────────────────────────────────────
 
 export default function ClinicDetailPage() {
@@ -486,6 +569,8 @@ export default function ClinicDetailPage() {
   const qc         = useQueryClient();
   const [editOpen, setEditOpen]     = useState(false);
   const [deleteOpen, setDeleteOpen] = useState(false);
+  const [inviteOpen, setInviteOpen] = useState(false);
+  const [doctorsTab, setDoctorsTab] = useState<'doctors' | 'invitations'>('doctors');
   const logoInputRef    = useRef<HTMLInputElement>(null);
   const galleryInputRef = useRef<HTMLInputElement>(null);
   const [logoUploading,    setLogoUploading]    = useState(false);
@@ -503,6 +588,12 @@ export default function ClinicDetailPage() {
     enabled:  !!uuid,
   });
 
+  const invitationsQ = useQuery({
+    queryKey: ['clinic-invitations', uuid],
+    queryFn:  () => api.get<PaginatedResponse<ClinicInvitation>>(`/api/v1/admin/clinic/${uuid}/invitations?limit=50`),
+    enabled:  !!uuid,
+  });
+
   const clinic: ClinicDetail | undefined = useMemo(() => {
     const raw = data?.data;
     return (raw as any)?.data ?? raw;
@@ -513,6 +604,8 @@ export default function ClinicDetailPage() {
     return (raw as any)?.data ?? raw ?? [];
   }, [doctorsQ.data]);
 
+  const invitationList: ClinicInvitation[] = invitationsQ.data?.data ?? [];
+
   const toggleMut = useMutation({
     mutationFn: () => api.patch<ApiResponse<any>>(`/api/v1/admin/clinic/${uuid}/status`, {}),
     onSuccess: () => {
@@ -529,6 +622,25 @@ export default function ClinicDetailPage() {
     onError:   (e: Error) => toast.error(e.message),
   });
 
+  const resendInvMut = useMutation({
+    mutationFn: (invUuid: string) => api.post<ApiResponse<any>>(`/api/v1/admin/clinic/invitation/${invUuid}/resend`, {}),
+    onSuccess: () => { toast.success('پیامک مجدداً ارسال شد'); qc.invalidateQueries({ queryKey: ['clinic-invitations', uuid] }); },
+    onError:   (e: Error) => toast.error(e.message),
+  });
+
+  const changeInvStatusMut = useMutation({
+    mutationFn: ({ invUuid, status }: { invUuid: string; status: string }) =>
+      api.patch<ApiResponse<any>>(`/api/v1/admin/clinic/invitation/${invUuid}/status`, { status }),
+    onSuccess: () => { toast.success('وضعیت دعوتنامه تغییر کرد'); qc.invalidateQueries({ queryKey: ['clinic-invitations', uuid] }); },
+    onError:   (e: Error) => toast.error(e.message),
+  });
+
+  const deleteInvMut = useMutation({
+    mutationFn: (invUuid: string) => api.delete<ApiResponse<null>>(`/api/v1/admin/clinic/invitation/${invUuid}`),
+    onSuccess: () => { toast.success('دعوتنامه حذف شد'); qc.invalidateQueries({ queryKey: ['clinic-invitations', uuid] }); },
+    onError:   (e: Error) => toast.error(e.message),
+  });
+
   const handleLogoUpload = async (file: File) => {
     setLogoUploading(true);
     try {
@@ -567,7 +679,7 @@ export default function ClinicDetailPage() {
       const json = await res.json();
       const url  = json?.data?.url;
       if (url && clinic) {
-        const existing = (clinic.images_clinic ?? []).map(img => img.url);
+        const existing = (clinic.images_clinic ?? []).filter(img => img?.url).map(img => img.url);
         await api.patch(`/api/v1/clinic/${uuid}`, { image_clinic: [...existing, url] });
         toast.success('تصویر اضافه شد');
         qc.invalidateQueries({ queryKey: ['clinic-detail', uuid] });
@@ -695,39 +807,122 @@ export default function ClinicDetailPage() {
             )}
           </div>
 
-          {/* Doctors */}
+          {/* Doctors + Invitations card */}
           <div className="card card-pad">
-            <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 14 }}>
-              <b style={{ fontSize: 14 }}>پزشکان ({formatNumber(doctorList.length)})</b>
+            {/* Card header */}
+            <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 12 }}>
+              <div className="seg">
+                <button className={doctorsTab === 'doctors' ? 'active' : ''} onClick={() => setDoctorsTab('doctors')}>
+                  پزشکان ({formatNumber(doctorList.length)})
+                </button>
+                <button className={doctorsTab === 'invitations' ? 'active' : ''} onClick={() => setDoctorsTab('invitations')}>
+                  دعوتنامه‌ها ({formatNumber(invitationList.length)})
+                </button>
+              </div>
+              <button className="btn primary sm" onClick={() => setInviteOpen(true)}>
+                <EnvelopeIcon style={{ width: 14, height: 14 }} /> دعوت پزشک
+              </button>
             </div>
-            {doctorList.length === 0 ? (
-              <div className="empty" style={{ padding: '20px 0' }}>
-                <p className="muted">هیچ پزشکی به این کلینیک متصل نیست</p>
-              </div>
-            ) : (
-              <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
-                {doctorList.map(doc => {
-                  const dHue = HUES_LIST[(doc.uuid?.charCodeAt(0) ?? 0) % HUES_LIST.length];
-                  const img  = doc.img?.[0]?.url;
-                  return (
-                    <div key={doc.id} style={{ display: 'flex', alignItems: 'center', gap: 10, padding: '8px 10px', borderRadius: 8, background: 'var(--surface-2, var(--bg))' }}>
-                      {img
-                        ? <img src={img} alt="" className="avatar sm" style={{ objectFit: 'cover', flexShrink: 0 }} />
-                        : <div className="avatar sm" style={{ background: `linear-gradient(145deg, oklch(0.62 0.15 ${dHue}), oklch(0.48 0.16 ${dHue}))`, flexShrink: 0 }}>{doc.name?.[0] ?? '?'}</div>
-                      }
-                      <div style={{ flex: 1, minWidth: 0 }}>
-                        <div style={{ fontWeight: 600, fontSize: 13 }}>{doc.name}</div>
-                        {doc.specialties?.length > 0 && (
-                          <div className="muted" style={{ fontSize: 11 }}>{doc.specialties.map(s => s.name).join('، ')}</div>
-                        )}
+
+            {/* Doctors tab */}
+            {doctorsTab === 'doctors' && (
+              doctorList.length === 0 ? (
+                <div className="empty" style={{ padding: '20px 0' }}>
+                  <p className="muted">هیچ پزشکی به این کلینیک متصل نیست</p>
+                </div>
+              ) : (
+                <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
+                  {doctorList.map(doc => {
+                    const dHue = HUES_LIST[(doc.uuid?.charCodeAt(0) ?? 0) % HUES_LIST.length];
+                    const img  = doc.img?.[0]?.url;
+                    return (
+                      <div key={doc.id} style={{ display: 'flex', alignItems: 'center', gap: 10, padding: '8px 10px', borderRadius: 8, background: 'var(--surface-2, var(--bg))' }}>
+                        {img
+                          ? <img src={img} alt="" className="avatar sm" style={{ objectFit: 'cover', flexShrink: 0 }} />
+                          : <div className="avatar sm" style={{ background: `linear-gradient(145deg, oklch(0.62 0.15 ${dHue}), oklch(0.48 0.16 ${dHue}))`, flexShrink: 0 }}>{doc.name?.[0] ?? '?'}</div>
+                        }
+                        <div style={{ flex: 1, minWidth: 0 }}>
+                          <div style={{ fontWeight: 600, fontSize: 13 }}>{doc.name}</div>
+                          {doc.specialties?.length > 0 && (
+                            <div className="muted" style={{ fontSize: 11 }}>{doc.specialties.map(s => s.name).join('، ')}</div>
+                          )}
+                        </div>
+                        <span className={`badge ${doc.active ? 'green' : 'gray'}`} style={{ fontSize: 11 }}>
+                          <span className="bdot" />{doc.active ? 'فعال' : 'غیرفعال'}
+                        </span>
                       </div>
-                      <span className={`badge ${doc.active ? 'green' : 'gray'}`} style={{ fontSize: 11 }}>
-                        <span className="bdot" />{doc.active ? 'فعال' : 'غیرفعال'}
-                      </span>
-                    </div>
-                  );
-                })}
-              </div>
+                    );
+                  })}
+                </div>
+              )
+            )}
+
+            {/* Invitations tab */}
+            {doctorsTab === 'invitations' && (
+              invitationList.length === 0 ? (
+                <div className="empty" style={{ padding: '20px 0' }}>
+                  <EnvelopeIcon style={{ width: 30, height: 30 }} />
+                  <p className="muted">هیچ دعوتنامه‌ای ارسال نشده</p>
+                </div>
+              ) : (
+                <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
+                  {invitationList.map(inv => {
+                    const statusInfo = INV_STATUS_MAP[inv.status] ?? { label: inv.status, cls: 'gray' };
+                    const isExpired  = !inv.token_used && inv.status === 'pending' && Date.now() / 1000 > inv.expires_at;
+                    return (
+                      <div key={inv.uuid} style={{ display: 'flex', alignItems: 'center', gap: 10, padding: '10px 12px', borderRadius: 8, background: 'var(--surface-2, var(--bg))' }}>
+                        <div style={{ flex: 1, minWidth: 0 }}>
+                          <div style={{ fontWeight: 600, fontSize: 13 }}>{inv.invited_name ?? inv.mobile}</div>
+                          <div style={{ display: 'flex', gap: 6, marginTop: 3, flexWrap: 'wrap', alignItems: 'center' }}>
+                            <span className="muted" style={{ fontSize: 11, direction: 'ltr' }}>{inv.mobile}</span>
+                            {inv.invited_specialty && (
+                              <span className="muted" style={{ fontSize: 11 }}>{inv.invited_specialty}</span>
+                            )}
+                            {inv.doctor && (
+                              <span className="badge blue" style={{ fontSize: 11 }}><span className="bdot" />{inv.doctor.name}</span>
+                            )}
+                          </div>
+                        </div>
+                        <div style={{ display: 'flex', flexDirection: 'column', alignItems: 'flex-end', gap: 6 }}>
+                          <span className={`badge ${isExpired ? 'gray' : statusInfo.cls}`} style={{ fontSize: 11 }}>
+                            <span className="bdot" />{isExpired ? 'منقضی' : statusInfo.label}
+                          </span>
+                          <div style={{ display: 'flex', gap: 4 }}>
+                            {inv.status === 'pending' && (
+                              <button
+                                className="mini-btn"
+                                title="ارسال مجدد"
+                                disabled={resendInvMut.isPending}
+                                onClick={() => resendInvMut.mutate(inv.uuid)}
+                              >
+                                <ArrowPathIcon style={{ width: 13, height: 13 }} />
+                              </button>
+                            )}
+                            {inv.status !== 'removed' && inv.status !== 'accepted' && (
+                              <button
+                                className="mini-btn"
+                                title="تعلیق"
+                                disabled={changeInvStatusMut.isPending}
+                                onClick={() => changeInvStatusMut.mutate({ invUuid: inv.uuid, status: inv.status === 'suspended' ? 'pending' : 'suspended' })}
+                              >
+                                <NoSymbolIcon style={{ width: 13, height: 13 }} />
+                              </button>
+                            )}
+                            <button
+                              className="mini-btn danger"
+                              title="حذف"
+                              disabled={deleteInvMut.isPending}
+                              onClick={() => deleteInvMut.mutate(inv.uuid)}
+                            >
+                              <TrashIcon style={{ width: 13, height: 13 }} />
+                            </button>
+                          </div>
+                        </div>
+                      </div>
+                    );
+                  })}
+                </div>
+              )
             )}
           </div>
 
@@ -748,7 +943,7 @@ export default function ClinicDetailPage() {
               </div>
             ) : (
               <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fill, minmax(110px, 1fr))', gap: 8 }}>
-                {clinic.images_clinic.map((img, i) => (
+                {clinic.images_clinic.filter(img => img?.url).map((img, i) => (
                   <div key={i} style={{ borderRadius: 8, overflow: 'hidden', aspectRatio: '1', background: 'var(--surface-2, var(--bg))' }}>
                     <img src={img.url} alt="" style={{ width: '100%', height: '100%', objectFit: 'cover' }} />
                   </div>
@@ -829,6 +1024,15 @@ export default function ClinicDetailPage() {
           onSaved={() => { qc.invalidateQueries({ queryKey: ['clinic-detail', uuid] }); qc.invalidateQueries({ queryKey: ['admin-clinics'] }); }} />
       )}
 
+      {/* Invite doctor modal */}
+      {inviteOpen && uuid && (
+        <InviteModal
+          clinicUuid={uuid}
+          onClose={() => setInviteOpen(false)}
+          onInvited={() => { qc.invalidateQueries({ queryKey: ['clinic-invitations', uuid] }); setDoctorsTab('invitations'); }}
+        />
+      )}
+
       {/* Delete confirm */}
       <ConfirmDialog
         open={deleteOpen}