Add SMS OTP, harden auth, and fix order/checkout server bugs.

Ship 4-digit OTP with rate-limit attempts, Tehran-safe expiry/rass math, larger JSON body limit for check images, and safer order pricing/status guards. Include rebuilt dist for prebuilt deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>

dist/common/utils/order-status.js

@@ -5,18 +5,40 @@ exports.resolveAdminStatusFilter = resolveAdminStatusFilter;
 exports.toAdminStatus = toAdminStatus;
 const client_1 = require("@prisma/client");
 exports.ADMIN_STATUS_MAP = {
-    pending_review: [client_1.OrderStatus.awaiting_review, client_1.OrderStatus.pricing],
+    pending_review: [
+        client_1.OrderStatus.cart,
+        client_1.OrderStatus.awaiting_settlement,
+        client_1.OrderStatus.cash_in_progress,
+        client_1.OrderStatus.check_in_progress,
+        client_1.OrderStatus.submitted,
+        client_1.OrderStatus.awaiting_review,
+        client_1.OrderStatus.pricing,
+        client_1.OrderStatus.cash_invoice_issued,
+        client_1.OrderStatus.awaiting_cash_payment,
+        client_1.OrderStatus.cash_payment_submitted,
+        client_1.OrderStatus.awaiting_cash_confirmation,
+    ],
     pending_check: [client_1.OrderStatus.awaiting_check_review],
-    needs_correction: [client_1.OrderStatus.needs_correction],
-    check_correction: [client_1.OrderStatus.check_needs_fix],
+    needs_correction: [
+        client_1.OrderStatus.needs_correction,
+        client_1.OrderStatus.awaiting_settlement_fix,
+    ],
+    check_correction: [client_1.OrderStatus.check_needs_fix, client_1.OrderStatus.check_rejected],
     final_approval: [
         client_1.OrderStatus.final_approved,
         client_1.OrderStatus.checks_approved,
         client_1.OrderStatus.cash_confirmed,
+        client_1.OrderStatus.preparing,
+        client_1.OrderStatus.ready_to_ship,
     ],
     shipped: [client_1.OrderStatus.shipped],
     delivered: [client_1.OrderStatus.delivered],
 };
+const TERMINAL_STATUSES = [
+    client_1.OrderStatus.cancelled,
+    client_1.OrderStatus.rejected,
+    client_1.OrderStatus.expired,
+];
 function resolveAdminStatusFilter(status) {
     if (!status)
         return undefined;
@@ -32,7 +54,9 @@ function toAdminStatus(status) {
         if (list.includes(status))
             return admin;
     }
-    return status;
+    if (TERMINAL_STATUSES.includes(status))
+        return status;
+    return 'pending_review';
 }
 exports.ORDER_STATUS_LABELS = {
     cart: 'سبد خرید',