feat(appointment-settings): let clinics manage each member doctor's booking

The API and React components were already parameterized by doctor uuid, but 14
copy-pasted identity checks limited every endpoint to "the doctor themselves or
an admin", so a clinic owner could not touch a member doctor's booking setup.

- Replaces those 14 checks with one denyDoctorAccess() that also admits the
  owner of a clinic the doctor belongs to, and a member doctor holding the
  clinic's appointment_settings permission (view for GET, update for writes).
  A doctor's own settings short-circuit before any permission lookup.
- Moves ScheduleSection and its tabs out of DoctorDetailPage into
  components/schedule/ScheduleSection.tsx so the doctor panel and the new
  clinic page render the same module instead of one page importing another.
  Pure relocation — no logic changed.
- Adds ClinicAppointmentSettingsPage: one tab per clinic doctor, each rendering
  that same section. The tab wrapper is keyed by doctor uuid so in-progress
  schedule edits cannot leak onto the wrong doctor.
- insurance-pricing accepts an optional doctor_uuid (query on GET, body on PUT)
  under the same access rule, so the visit-price card works inside the clinic
  tabs. Fixes saveInsurancePricing calling getInsurancePricing with the wrong
  argument by extracting the shared pricingPayload().

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

assets/admin/App.tsx

@@ -62,6 +62,7 @@ import SettingsMenuPage from './pages/SettingsMenuPage';
 import AccountSettingsPage from './pages/AccountSettingsPage';
 import TagsSettingsPage from './pages/TagsSettingsPage';
 import AppointmentSettingsPage from './pages/AppointmentSettingsPage';
+import ClinicAppointmentSettingsPage from './pages/ClinicAppointmentSettingsPage';
 import PatientsListPage from './pages/PatientsListPage';
 import InventoryPage from './pages/InventoryPage';
 import PatientRecordFormPage from './pages/PatientRecordFormPage';
@@ -199,6 +200,7 @@ export default function App() {
 
         {/* پزشکان کلینیک — تب تنظیماتِ مالک کلینیک */}
         <Route path="settings/clinic-doctors" element={<RoleRoute roles={['clinic']} blockClinicScope><ClinicDoctorsPage /></RoleRoute>} />
+        <Route path="settings/appointment-settings" element={<RoleRoute roles={['clinic']}><ClinicAppointmentSettingsPage /></RoleRoute>} />
         {/* مسیر قدیمی «مدیریت مطب» → ریدایرکت به تب جدید */}
         <Route path="my-clinic" element={<Navigate to="/admin/settings/clinic-doctors" replace />} />
 

assets/admin/components/FreeVisitPrice.tsx

@@ -6,15 +6,18 @@ import { formatRial, rialToToman, tomanToRial } from '../lib/utils';
 
 interface Pricing { free_visit_price_rials: number; require_visit_price: boolean }
 
-export default function FreeVisitPrice() {
+/** بدون doctorUuid روی موجودیت کاربر جاری کار می‌کند؛ با آن، قیمت همان پزشک. */
+export default function FreeVisitPrice({ doctorUuid }: { doctorUuid?: string }) {
   const qc = useQueryClient();
   const [value, setValue] = useState('');
   const [required, setRequired] = useState(false);
   const [error, setError] = useState('');
 
   const { data } = useQuery<{ data: Pricing }>({
-    queryKey: ['insurance-pricing'],
-    queryFn: () => api.get('/api/v1/insurance-pricing'),
+    queryKey: ['insurance-pricing', doctorUuid ?? 'self'],
+    queryFn: () => api.get(doctorUuid
+      ? `/api/v1/insurance-pricing?doctor_uuid=${doctorUuid}`
+      : '/api/v1/insurance-pricing'),
   });
   const pricing = (data as any)?.data as Pricing | undefined;
 
@@ -29,10 +32,11 @@ export default function FreeVisitPrice() {
     mutationFn: () => api.put('/api/v1/insurance-pricing', {
       free_visit_price_rials: tomanToRial(Number(value) || 0),
       require_visit_price: required,
+      ...(doctorUuid ? { doctor_uuid: doctorUuid } : {}),
     }),
     onSuccess: () => {
       toast.success('قیمت ویزیت ذخیره شد');
-      qc.invalidateQueries({ queryKey: ['insurance-pricing'] });
+      qc.invalidateQueries({ queryKey: ['insurance-pricing', doctorUuid ?? 'self'] });
     },
     onError: (e: Error) => toast.error(e.message),
   });

assets/admin/components/layout/PurchaseSubscriptionSidebar.tsx

@@ -20,6 +20,7 @@ const NAV_ITEMS: NavItem[] = [
   { key: 'subscription',   label: 'خرید اشتراک',    to: '/admin/subscription' },
   { key: 'payment',        label: 'مدیریت پرداخت',   to: '/admin/my-financial' },
   { key: 'appointment',    label: 'مدیریت نوبت دهی', to: '/admin/appointment-settings', roles: ['doctor'] },
+  { key: 'appointment',    label: 'مدیریت نوبت دهی', to: '/admin/settings/appointment-settings', roles: ['clinic'] },
   { key: 'insurance',      label: 'مدیریت بیمه',     to: '/admin/insurance-pricing' },
   { key: 'discounts',      label: 'مدیریت تخفیف‌ها', to: '/admin/discounts', roles: ['doctor', 'clinic'] },
   { key: 'tags',           label: 'تگ ها',           to: '/admin/tags-settings' },

assets/admin/components/layout/SettingsLayout.tsx

@@ -23,6 +23,7 @@ export const SETTINGS_MENU: SettingsMenuItem[] = [
   { key: 'subscription', label: 'خرید اشتراک',       icon: CreditCardIcon,           to: '/admin/subscription' },
   { key: 'doctor',       label: 'مدیریت پزشک',        icon: UserIcon,                 to: '/admin/profile',              roles: ['doctor'] },
   { key: 'appointment',  label: 'مدیریت نوبت دهی',    icon: CalendarDaysIcon,         to: '/admin/appointment-settings', roles: ['doctor'] },
+  { key: 'appointment',  label: 'مدیریت نوبت دهی',    icon: CalendarDaysIcon,         to: '/admin/settings/appointment-settings', roles: ['clinic'] },
   { key: 'clinic-doctors', label: 'پزشکان کلینیک',    icon: BuildingOffice2Icon,      to: '/admin/settings/clinic-doctors', roles: ['clinic'] },
   { key: 'payment',      label: 'مدیریت پرداخت',      icon: BanknotesIcon,            to: '/admin/my-financial' },
   { key: 'secretary',    label: 'مدیریت منشی',        icon: UsersIcon,                to: '/admin/my-secretaries' },

assets/admin/pages/AppointmentSettingsPage.tsx

@@ -1,7 +1,7 @@
 import { useAuthStore } from '../stores/authStore';
 import SettingsLayout from '../components/layout/SettingsLayout';
 import FreeVisitPrice from '../components/FreeVisitPrice';
-import { ScheduleSection } from './DoctorDetailPage';
+import { ScheduleSection } from '../components/schedule/ScheduleSection';
 
 /**
  * مدیریت نوبت دهی — the doctor's appointment settings: visit price and the full

assets/admin/pages/ClinicAppointmentSettingsPage.tsx

@@ -0,0 +1,107 @@
+import { useMemo, useState } from 'react';
+import { Link } from 'react-router-dom';
+import { useQuery } from '@tanstack/react-query';
+import { UserGroupIcon } from '@heroicons/react/24/outline';
+import { api } from '../lib/api';
+import type { ApiResponse } from '../lib/api';
+import { useAuthStore } from '../stores/authStore';
+import SettingsLayout from '../components/layout/SettingsLayout';
+import { ScheduleSection } from '../components/schedule/ScheduleSection';
+import FreeVisitPrice from '../components/FreeVisitPrice';
+import type { ClinicDoctorItem } from '../components/ClinicDoctorsManager';
+
+/**
+ * تنظیمات نوبت‌دهی همه پزشکان کلینیک — یک تب به ازای هر پزشک.
+ *
+ * هر تب دقیقاً همان ScheduleSection پنل پزشک مستقل را رندر می‌کند؛ تنها تفاوت،
+ * امکان جابه‌جایی بین پزشکان است.
+ */
+function ClinicAppointmentSettingsContent() {
+  const { dbUuid, context, availableContexts } = useAuthStore();
+  const [activeUuid, setActiveUuid] = useState<string | null>(null);
+
+  // کاربری که هم پزشک است هم مالک کلینیک، dbUuid‌اش ممکن است uuid پزشک باشد.
+  const clinicUuid = useMemo(() => {
+    if (context?.type === 'clinic') return dbUuid;
+    return availableContexts.find(c => c.type === 'clinic')?.db_uuid ?? null;
+  }, [context, dbUuid, availableContexts]);
+
+  const doctorsQ = useQuery({
+    queryKey: ['clinic-doctors', clinicUuid],
+    queryFn:  () => api.get<ApiResponse<{ data: ClinicDoctorItem[] }>>(`/api/v1/clinic/doctor-list/${clinicUuid}`),
+    enabled:  !!clinicUuid,
+  });
+
+  const doctorList: ClinicDoctorItem[] = useMemo(() => {
+    const raw = doctorsQ.data?.data;
+    return (raw as any)?.data ?? raw ?? [];
+  }, [doctorsQ.data]);
+
+  const selected = activeUuid ?? doctorList[0]?.uuid ?? null;
+
+  if (!clinicUuid) {
+    return (
+      <div style={{ padding: 40, textAlign: 'center' }}>
+        <p style={{ color: 'var(--text-3)', fontSize: 14 }}>
+          {dbUuid ? 'کلینیکی برای این حساب کاربری یافت نشد' : 'در حال بارگذاری اطلاعات کلینیک...'}
+        </p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="fade-in" style={{ display: 'flex', flexDirection: 'column', gap: 'var(--gap)' }}>
+      <div className="card-title-row">
+        <div>
+          <h1 className="section-title">مدیریت نوبت دهی</h1>
+          <div className="muted">تنظیمات نوبت‌دهی پزشکان کلینیک</div>
+        </div>
+      </div>
+
+      {doctorsQ.isLoading ? (
+        <div className="card card-pad"><p className="muted">در حال بارگذاری پزشکان...</p></div>
+      ) : doctorList.length === 0 ? (
+        <div className="card card-pad">
+          <div className="empty" style={{ padding: '20px 0' }}>
+            <UserGroupIcon style={{ width: 30, height: 30 }} />
+            <p className="muted">هیچ پزشکی به این کلینیک متصل نیست</p>
+            <Link className="btn primary sm" to="/admin/settings/clinic-doctors">مدیریت پزشکان کلینیک</Link>
+          </div>
+        </div>
+      ) : (
+        <>
+          <div className="card card-pad" style={{ paddingBottom: 12 }}>
+            <div className="seg" style={{ overflowX: 'auto', flexWrap: 'nowrap' }}>
+              {doctorList.map(doc => (
+                <button
+                  key={doc.uuid}
+                  className={selected === doc.uuid ? 'active' : ''}
+                  style={{ whiteSpace: 'nowrap' }}
+                  onClick={() => setActiveUuid(doc.uuid)}
+                >
+                  {doc.name}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          {/* key اجباری است: بدون آن state ویرایشِ برنامه بین پزشکان نشت می‌کند */}
+          {selected && (
+            <div key={selected}>
+              <FreeVisitPrice doctorUuid={selected} />
+              <ScheduleSection doctorUuid={selected} />
+            </div>
+          )}
+        </>
+      )}
+    </div>
+  );
+}
+
+export default function ClinicAppointmentSettingsPage() {
+  return (
+    <SettingsLayout active="appointment">
+      <ClinicAppointmentSettingsContent />
+    </SettingsLayout>
+  );
+}