Validate booking contacts: required FIO and email, RF +7 phone mask, and email domain.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/web/src/app/api/inquiries/route.ts

@@ -1,4 +1,10 @@
 import { createInquiry } from "@/lib/api";
+import {
+  isValidEmailAddress,
+  isValidFullName,
+  isValidRuPhone,
+  normalizeRuPhone,
+} from "@/lib/contact-fields";
 import { NextResponse } from "next/server";
 
 function asText(value: unknown) {
@@ -7,19 +13,16 @@ function asText(value: unknown) {
 
 export async function POST(request: Request) {
   const body = (await request.json()) as Record<string, unknown>;
-  const name = asText(body.name ?? body.patientName);
+  const name = asText(body.name ?? body.patientName).replace(/\s+/g, " ");
   const email = asText(body.email);
-  const phone = asText(body.phone);
+  const phone = normalizeRuPhone(asText(body.phone));
   const branchId = asText(body.branchId);
   const serviceId = asText(body.serviceId) || undefined;
   const doctorId = asText(body.doctorId) || undefined;
 
-  if (!name || !email || !phone || !branchId || (!serviceId && !doctorId)) {
+  if (!isValidFullName(name) || !isValidEmailAddress(email) || !isValidRuPhone(phone) || !branchId || (!serviceId && !doctorId)) {
     return NextResponse.json({ error: "invalid" }, { status: 400 });
   }
-  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
-    return NextResponse.json({ error: "email" }, { status: 400 });
-  }
 
   try {
     const inquiry = await createInquiry({