Show clinic hours and phone with icons in the header.

Co-authored-by: Cursor <cursoragent@cursor.com>

CHANGELOG.md

@@ -2,6 +2,51 @@
 
 Формат основан на [Keep a Changelog](https://keepachangelog.com/ru/1.1.0/), версии — [SemVer](https://semver.org/lang/ru/).
 
+## [1.0.11] — 2026-09-17
+
+### Сайт
+
+- В шапке рядом с логотипом — режим работы и телефоны `+7 (499) 674-07-09` / `122` с иконками в цветах сайта
+
+## [1.0.10] — 2026-09-17
+
+### Сайт
+
+- Личный кабинет больше не показывает чужие демо-записи: без входа разделы пустые, у каждого пациента только свои заявки, документы и счета
+- После заявки на запись создаётся кабинет (если пациента ещё не было) и на почту уходит письмо со сводкой услуги, стоимостью и полезной информацией
+- В галерее четыре фото КДЦ МОНИКИ как загруженные файлы, не ссылки
+
+## [1.0.9] — 2026-09-17
+
+### Сайт
+
+- В заявке на запись: обязательные ФИО и e-mail, маска телефона РФ `+7` только из цифр, проверка e-mail (`@` и домен), серые примеры в полях
+
+## [1.0.8] — 2026-09-17
+
+### CMS
+
+- Исправлена сессия входа в админку по HTTP: cookie больше не отбрасывается из‑за Origin/CSRF
+
+### Сайт
+
+- Cookie входа в личный кабинет сохраняется на HTTP без флага Secure
+
+## [1.0.7] — 2026-09-17
+
+### CMS
+
+- Вход в админку по HTTP снова сохраняет сессию: Secure-cookie больше не ставится без HTTPS
+
+## [1.0.6] — 2026-09-17
+
+### Сайт
+
+- В разделе «Документы» три публичных файла из шапок: согласие на персональные данные, ИДС на медвмешательство/врачебную тайну/телемед, договор с физическим лицом
+- Удалён публичный договор «…(2026)»
+- Онлайн-запись временно без расписания: услуга или врач → филиал → ФИО, e-mail, телефон; после отправки — «Большое спасибо, мы свяжемся и уточним информацию»
+- Заявки сохраняются в админке (коллекция «Заявки на запись»)
+
 ## [1.0.5] — 2026-09-17
 
 ### Сайт
@@ -55,6 +100,11 @@
 - Docker Compose для локальной БД
 - Секреты и логины в git не входят
 
+[1.0.10]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.10
+[1.0.9]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.9
+[1.0.8]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.8
+[1.0.7]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.7
+[1.0.6]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.6
 [1.0.5]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.5
 [1.0.4]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.4
 [1.0.3]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.3

README.md

@@ -4,7 +4,7 @@
 
 Репозиторий: [Moniki_uslugi](https://git.myunion.pro/Alex/Moniki_uslugi) на [git.myunion.pro](https://git.myunion.pro/).
 
-Текущая версия: **v1.0.5** (см. [CHANGELOG.md](CHANGELOG.md)).
+Текущая версия: **v1.0.11** (см. [CHANGELOG.md](CHANGELOG.md)).
 
 ## Что внутри
 

apps/cms/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moniki/cms",
-  "version": "1.0.5",
+  "version": "1.0.11",
   "private": true,
   "type": "module",
   "scripts": {
@@ -19,6 +19,7 @@
     "seed:news": "tsx src/seed/import-news.ts",
     "seed:pages": "tsx src/seed/site-pages.ts",
     "seed:documents": "tsx src/seed/public-documents.ts",
+    "seed:gallery": "tsx src/seed/gallery-photos.ts",
     "seed:i18n": "python3 src/seed/translate_locales.py",
     "lint": "next lint"
   },

apps/cms/src/app/(payload)/api/custom/inquiries/route.ts

@@ -0,0 +1,78 @@
+import configPromise from '@payload-config'
+import { getPayload } from 'payload'
+import { NextResponse } from 'next/server'
+import { isValidEmailAddress, isValidFullName, isValidRuPhone, normalizeRuPhone } from '@/lib/contact-fields'
+import { findOrCreatePatient, notifyInquiry } from '@/lib/inquiry-account'
+
+function asText(value: unknown) {
+  return typeof value === "string" ? value.trim() : ""
+}
+
+function asId(value: unknown) {
+  if (typeof value === "number" && Number.isFinite(value)) return value
+  if (typeof value === "string" && value.trim()) {
+    const n = Number(value)
+    return Number.isFinite(n) ? n : value.trim()
+  }
+  return undefined
+}
+
+export async function POST(req: Request) {
+  const body = (await req.json().catch(() => ({}))) as Record<string, unknown>
+  const name = asText(body.name).replace(/\s+/g, " ")
+  const email = asText(body.email)
+  const phone = normalizeRuPhone(asText(body.phone))
+  const branch = asId(body.branch)
+  const service = asId(body.service)
+  const doctor = asId(body.doctor)
+
+  if (!isValidFullName(name) || !isValidEmailAddress(email) || !isValidRuPhone(phone) || branch == null || (service == null && doctor == null)) {
+    return NextResponse.json({ error: "invalid" }, { status: 400 })
+  }
+
+  try {
+    const payload = await getPayload({ config: configPromise })
+    let patientId: string | number | undefined
+    let cabinetCreated = false
+    let password: string | undefined
+    try {
+      const account = await findOrCreatePatient(payload, { email, name, phone })
+      patientId = account.id
+      cabinetCreated = account.created
+      password = account.password
+    } catch (error) {
+      payload.logger.error({ err: error }, 'Failed to create patient cabinet from inquiry')
+    }
+
+    const doc = await payload.create({
+      collection: "inquiries",
+      overrideAccess: true,
+      data: {
+        name,
+        email,
+        phone,
+        branch,
+        ...(service != null ? { service } : {}),
+        ...(doctor != null ? { doctor } : {}),
+        ...(patientId != null ? { patient: patientId } : {}),
+        status: "new",
+      },
+    })
+
+    notifyInquiry(payload, {
+      inquiryId: doc.id,
+      patientName: name,
+      email,
+      phone,
+      cabinetCreated,
+      password,
+    }).catch((error) => {
+      payload.logger.error({ err: error }, 'Failed to send inquiry email')
+    })
+
+    return NextResponse.json({ id: String(doc.id), cabinetCreated })
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "failed"
+    return NextResponse.json({ error: message }, { status: 400 })
+  }
+}

apps/cms/src/collections/Documents.ts

@@ -21,6 +21,7 @@ export const Documents: CollectionConfig = {
     }) as Access,
     create: ({ req: { user } }) => user?.role === 'admin',
     update: ({ req: { user } }) => user?.role === 'admin',
+    delete: ({ req: { user } }) => user?.role === 'admin',
   },
   fields: [
     { name: 'title', type: 'text', required: true, localized: true, label: 'Название' },

apps/cms/src/collections/Inquiries.ts

@@ -0,0 +1,81 @@
+import type { CollectionConfig } from 'payload'
+import { ADMIN_GROUP } from '../admin/groups'
+import { isValidEmailAddress, isValidFullName, isValidRuPhone, normalizeRuPhone } from '../lib/contact-fields'
+
+export const Inquiries: CollectionConfig = {
+  slug: 'inquiries',
+  labels: { singular: 'Заявка на запись', plural: 'Заявки на запись' },
+  admin: {
+    group: ADMIN_GROUP.booking,
+    useAsTitle: 'name',
+    defaultColumns: ['name', 'phone', 'email', 'status', 'createdAt'],
+    description: 'Заявки с сайта без выбора времени. Свяжитесь с пациентом и уточните детали.',
+  },
+  access: {
+    create: () => true,
+    read: ({ req: { user } }) => {
+      if (!user) return false
+      if (user.role === 'admin') return true
+      return { patient: { equals: user.id } }
+    },
+    update: ({ req: { user } }) => user?.role === 'admin',
+    delete: ({ req: { user } }) => user?.role === 'admin',
+  },
+  hooks: {
+    beforeValidate: [
+      ({ data }) => {
+        if (!data) return data
+        if (typeof data.name === 'string') data.name = data.name.trim().replace(/\s+/g, ' ')
+        if (typeof data.email === 'string') data.email = data.email.trim()
+        if (typeof data.phone === 'string') {
+          const phone = normalizeRuPhone(data.phone)
+          if (phone) data.phone = phone
+        }
+        return data
+      },
+    ],
+  },
+  fields: [
+    {
+      name: 'name',
+      type: 'text',
+      required: true,
+      label: 'ФИО',
+      validate: (value: string | null | undefined) =>
+        isValidFullName(String(value ?? '')) ? true : 'Укажите фамилию и имя буквами',
+    },
+    {
+      name: 'email',
+      type: 'email',
+      required: true,
+      label: 'E-mail',
+      validate: (value: string | null | undefined) =>
+        isValidEmailAddress(String(value ?? '')) ? true : 'Укажите e-mail в формате name@domain.ru',
+    },
+    {
+      name: 'phone',
+      type: 'text',
+      required: true,
+      label: 'Телефон',
+      validate: (value: string | null | undefined) =>
+        isValidRuPhone(String(value ?? '')) ? true : 'Укажите телефон в формате +7 и 10 цифр',
+    },
+    { name: 'service', type: 'relationship', relationTo: 'services', label: 'Услуга' },
+    { name: 'doctor', type: 'relationship', relationTo: 'doctors', label: 'Врач' },
+    { name: 'branch', type: 'relationship', relationTo: 'branches', required: true, label: 'Филиал' },
+    { name: 'patient', type: 'relationship', relationTo: 'users', label: 'Пациент' },
+    {
+      name: 'status',
+      type: 'select',
+      required: true,
+      defaultValue: 'new',
+      label: 'Статус',
+      options: [
+        { label: 'Новая', value: 'new' },
+        { label: 'В работе', value: 'in_progress' },
+        { label: 'Закрыта', value: 'done' },
+      ],
+    },
+  ],
+  timestamps: true,
+}

apps/cms/src/collections/Media.ts

@@ -15,6 +15,10 @@ export const Media: CollectionConfig = {
       'application/pdf',
       'application/msword',
       'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+      'application/rtf',
+      'text/rtf',
+      'application/x-rtf',
+      'text/richtext',
     ],
   },
   access: {

apps/cms/src/collections/Users.ts

@@ -8,7 +8,7 @@ export const Users: CollectionConfig = {
     tokenExpiration: 60 * 60 * 24 * 7,
     cookies: {
       sameSite: 'Lax',
-      secure: process.env.NODE_ENV === 'production',
+      secure: false,
     },
   },
   admin: {

apps/cms/src/lib/contact-fields.ts

@@ -0,0 +1,25 @@
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[A-Za-z0-9-]{2,}$/
+
+export function isValidFullName(value: string) {
+  const name = value.trim().replace(/\s+/g, " ")
+  if (name.length < 3) return false
+  const parts = name.split(" ").filter(Boolean)
+  if (parts.length < 2) return false
+  return /^[\p{L}][\p{L}\s'-]*$/u.test(name)
+}
+
+export function isValidEmailAddress(value: string) {
+  return EMAIL_RE.test(value.trim())
+}
+
+export function normalizeRuPhone(value: string) {
+  let digits = value.replace(/\D/g, "")
+  if (digits.startsWith("8")) digits = `7${digits.slice(1)}`
+  if (!digits.startsWith("7")) digits = `7${digits}`
+  digits = digits.slice(0, 11)
+  return digits.length === 11 ? `+${digits}` : ""
+}
+
+export function isValidRuPhone(value: string) {
+  return /^\+7\d{10}$/.test(normalizeRuPhone(value))
+}

apps/cms/src/lib/ensure-inquiries-schema.ts

@@ -0,0 +1,82 @@
+import { sql } from '@payloadcms/db-postgres'
+import type { Payload } from 'payload'
+
+type DrizzleAdapter = {
+  drizzle: { execute: (query: unknown) => Promise<unknown> }
+}
+
+async function exec(payload: Payload, query: unknown) {
+  const adapter = payload.db as DrizzleAdapter
+  await adapter.drizzle.execute(query)
+}
+
+export async function ensureInquiriesSchema(payload: Payload) {
+  await exec(
+    payload,
+    sql`
+    DO $$ BEGIN
+      CREATE TYPE enum_inquiries_status AS ENUM ('new', 'in_progress', 'done');
+    EXCEPTION
+      WHEN duplicate_object THEN NULL;
+    END $$
+  `,
+  )
+
+  await exec(
+    payload,
+    sql`
+    CREATE TABLE IF NOT EXISTS inquiries (
+      id serial PRIMARY KEY,
+      name character varying NOT NULL,
+      email character varying NOT NULL,
+      phone character varying NOT NULL,
+      service_id integer,
+      doctor_id integer,
+      branch_id integer NOT NULL,
+      status enum_inquiries_status DEFAULT 'new' NOT NULL,
+      updated_at timestamp(3) with time zone DEFAULT now() NOT NULL,
+      created_at timestamp(3) with time zone DEFAULT now() NOT NULL
+    )
+  `,
+  )
+
+  await exec(
+    payload,
+    sql`
+    ALTER TABLE inquiries
+      ADD COLUMN IF NOT EXISTS patient_id integer
+  `,
+  )
+  await exec(
+    payload,
+    sql`
+    CREATE INDEX IF NOT EXISTS inquiries_patient_idx ON inquiries (patient_id)
+  `,
+  )
+
+  await exec(
+    payload,
+    sql`
+    ALTER TABLE payload_locked_documents_rels
+      ADD COLUMN IF NOT EXISTS inquiries_id integer
+  `,
+  )
+  await exec(
+    payload,
+    sql`
+    CREATE INDEX IF NOT EXISTS payload_locked_documents_rels_inquiries_id_idx
+    ON payload_locked_documents_rels (inquiries_id)
+  `,
+  )
+  await exec(
+    payload,
+    sql`
+    DO $$ BEGIN
+      ALTER TABLE payload_locked_documents_rels
+        ADD CONSTRAINT payload_locked_documents_rels_inquiries_fk
+        FOREIGN KEY (inquiries_id) REFERENCES inquiries(id) ON DELETE CASCADE;
+    EXCEPTION WHEN duplicate_object THEN NULL;
+    END $$
+  `,
+  )
+}

apps/cms/src/lib/inquiry-account.ts

@@ -0,0 +1,105 @@
+import { randomBytes } from 'crypto'
+import type { Payload } from 'payload'
+import { buildInquiryEmail } from './inquiry-email'
+import { sendNotification } from './notifications'
+
+function siteUrl() {
+  return (process.env.CORS_ORIGINS || 'http://localhost:3000').split(',')[0]?.trim() || 'http://localhost:3000'
+}
+
+function generateCabinetPassword() {
+  const alphabet = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789'
+  const bytes = randomBytes(10)
+  let out = 'Mk-'
+  for (const byte of bytes) out += alphabet[byte % alphabet.length]
+  return out
+}
+
+function relRecord(value: unknown): Record<string, unknown> | null {
+  return value && typeof value === 'object' ? (value as Record<string, unknown>) : null
+}
+
+function relText(value: unknown, key: string) {
+  const rec = relRecord(value)
+  const raw = rec?.[key]
+  return typeof raw === 'string' ? raw.trim() : ''
+}
+
+export async function findOrCreatePatient(
+  payload: Payload,
+  input: { email: string; name: string; phone: string },
+): Promise<{ id: string | number; created: boolean; password?: string }> {
+  const email = input.email.trim().toLowerCase()
+  const existing = await payload.find({
+    collection: 'users',
+    where: { email: { equals: email } },
+    limit: 1,
+    overrideAccess: true,
+  })
+  if (existing.docs[0]) {
+    const user = existing.docs[0]
+    if (!user.phone && input.phone) {
+      await payload.update({
+        collection: 'users',
+        id: user.id,
+        overrideAccess: true,
+        data: { phone: input.phone },
+      })
+    }
+    return { id: user.id, created: false }
+  }
+
+  const password = generateCabinetPassword()
+  const created = await payload.create({
+    collection: 'users',
+    overrideAccess: true,
+    data: {
+      email,
+      password,
+      fullName: input.name,
+      phone: input.phone,
+      role: 'patient',
+      emailOptIn: true,
+    },
+  })
+  return { id: created.id, created: true, password }
+}
+
+export async function notifyInquiry(
+  payload: Payload,
+  input: {
+    inquiryId: string | number
+    patientName: string
+    email: string
+    phone: string
+    cabinetCreated: boolean
+    password?: string
+  },
+) {
+  const inquiry = await payload.findByID({
+    collection: 'inquiries',
+    id: input.inquiryId,
+    depth: 2,
+    overrideAccess: true,
+  })
+  const message = buildInquiryEmail({
+    patientName: input.patientName,
+    email: input.email,
+    phone: input.phone,
+    serviceTitle: relText(inquiry.service, 'title').replace(/^\d+(?:\.\d+)*\.?\s+/, '').trim(),
+    servicePrice: Number(relRecord(inquiry.service)?.price) || undefined,
+    doctorName: relText(inquiry.doctor, 'fullName'),
+    branchName: relText(inquiry.branch, 'name'),
+    branchAddress: relText(inquiry.branch, 'address'),
+    cabinetCreated: input.cabinetCreated,
+    password: input.password,
+    loginUrl: `${siteUrl()}/ru/login`,
+  })
+  await sendNotification(payload, {
+    channel: 'email',
+    to: input.email,
+    subject: message.subject,
+    body: message.text,
+    html: message.html,
+  })
+}

apps/cms/src/lib/inquiry-email.ts

@@ -0,0 +1,149 @@
+function escapeHtml(text: string) {
+  return text
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+}
+
+function row(label: string, value: string) {
+  if (!value.trim()) return ''
+  return `<tr>
+    <td style="padding:8px 0;color:#64748b;font-size:14px;width:40%;vertical-align:top;">${escapeHtml(label)}</td>
+    <td style="padding:8px 0;color:#0f172a;font-size:14px;font-weight:600;">${escapeHtml(value)}</td>
+  </tr>`
+}
+
+export type InquiryEmailInput = {
+  patientName: string
+  email: string
+  phone: string
+  serviceTitle?: string
+  servicePrice?: number
+  doctorName?: string
+  branchName?: string
+  branchAddress?: string
+  cabinetCreated: boolean
+  password?: string
+  loginUrl: string
+}
+
+function formatPrice(amount?: number) {
+  if (amount == null || !Number.isFinite(amount) || amount <= 0) return ''
+  return new Intl.NumberFormat('ru-RU', {
+    style: 'currency',
+    currency: 'RUB',
+    maximumFractionDigits: 0,
+  }).format(amount)
+}
+
+export function buildInquiryEmail(input: InquiryEmailInput) {
+  const firstName = input.patientName.trim().split(/\s+/)[1] || input.patientName.trim()
+  const price = formatPrice(input.servicePrice)
+  const subject = input.cabinetCreated
+    ? 'Личный кабинет и заявка на запись — МОНИКИ'
+    : 'Ваша заявка на запись принята — МОНИКИ'
+
+  const cabinetBlock = input.cabinetCreated
+    ? `
+      <div style="margin:24px 0;padding:20px;border-radius:16px;background:#eef6fb;border:1px solid #cfe3f2;">
+        <p style="margin:0 0 8px;font-size:16px;font-weight:700;color:#163a56;">Для вас создан личный кабинет</p>
+        <p style="margin:0 0 16px;font-size:14px;line-height:1.55;color:#334155;">
+          В кабинете будут ваши заявки, документы и счета. Войти можно по почте, которую вы указали в заявке.
+        </p>
+        <table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+          ${row('Логин', input.email)}
+          ${input.password ? row('Пароль', input.password) : ''}
+        </table>
+        <p style="margin:16px 0 0;">
+          <a href="${escapeHtml(input.loginUrl)}" style="display:inline-block;background:#1b4b73;color:#ffffff;text-decoration:none;padding:12px 20px;border-radius:999px;font-size:14px;font-weight:700;">
+            Войти в личный кабинет
+          </a>
+        </p>
+      </div>`
+    : `
+      <p style="margin:0 0 20px;font-size:14px;line-height:1.55;color:#334155;">
+        Заявка сохранена в вашем личном кабинете. Войти можно по адресу
+        <a href="${escapeHtml(input.loginUrl)}" style="color:#1b4b73;font-weight:700;">${escapeHtml(input.loginUrl)}</a>.
+      </p>`
+
+  const html = `<!doctype html>
+<html lang="ru">
+  <body style="margin:0;padding:0;background:#f4f7fb;font-family:'Segoe UI',Arial,sans-serif;">
+    <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background:#f4f7fb;padding:24px 12px;">
+      <tr>
+        <td align="center">
+          <table role="presentation" width="640" cellspacing="0" cellpadding="0" style="max-width:640px;width:100%;background:#ffffff;border-radius:20px;overflow:hidden;box-shadow:0 10px 30px rgba(15,23,42,0.06);">
+            <tr>
+              <td style="background:linear-gradient(135deg,#163a56,#1b4b73);padding:28px 32px;color:#ffffff;">
+                <p style="margin:0;font-size:12px;letter-spacing:.12em;text-transform:uppercase;opacity:.8;">КДЦ МОНИКИ</p>
+                <h1 style="margin:8px 0 0;font-size:24px;line-height:1.3;">Заявка принята</h1>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:32px;">
+                <p style="margin:0 0 16px;font-size:16px;color:#0f172a;">Здравствуйте, ${escapeHtml(firstName)}!</p>
+                <p style="margin:0 0 20px;font-size:15px;line-height:1.6;color:#334155;">
+                  Спасибо, что выбрали платные медицинские услуги КДЦ МОНИКИ им. М. Ф. Владимирского.
+                  Мы получили вашу заявку и свяжемся с вами, чтобы уточнить удобную дату и время.
+                </p>
+                <div style="padding:4px 20px 8px;border-radius:16px;background:#f8fafc;border:1px solid #e2e8f0;">
+                  <p style="margin:16px 0 4px;font-size:13px;font-weight:700;letter-spacing:.04em;text-transform:uppercase;color:#1b4b73;">Сводка заявки</p>
+                  <table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+                    ${row('Пациент', input.patientName)}
+                    ${row('Услуга', input.serviceTitle || '')}
+                    ${row('Стоимость', price)}
+                    ${row('Врач', input.doctorName || '')}
+                    ${row('Филиал', input.branchName || '')}
+                    ${row('Адрес', input.branchAddress || '')}
+                    ${row('Телефон для связи', input.phone)}
+                    ${row('E-mail', input.email)}
+                  </table>
+                </div>
+                ${cabinetBlock}
+                <div style="margin-top:8px;padding:20px;border-radius:16px;background:#fff8ef;border:1px solid #f1e0c3;">
+                  <p style="margin:0 0 10px;font-size:16px;font-weight:700;color:#9a6700;">Полезная информация</p>
+                  <ul style="margin:0;padding-left:18px;color:#57534e;font-size:14px;line-height:1.65;">
+                    <li>Возьмите паспорт. Если есть полис ОМС или результаты обследований — их тоже полезно иметь при себе.</li>
+                    <li>Приходите за 10–15 минут до приёма, чтобы оформить документы на стойке регистрации.</li>
+                    <li>Точное время визита подтвердит администратор: +7 (499) 674-07-09 или 122.</li>
+                    <li>Основной филиал: ул. Щепкина, 61/2, метро «Проспект Мира».</li>
+                    <li>Если планы изменятся, напишите нам или позвоните — заявку можно уточнить или перенести.</li>
+                  </ul>
+                </div>
+                <p style="margin:24px 0 0;font-size:13px;line-height:1.6;color:#64748b;">
+                  С заботой о вашем здоровье,<br>
+                  <strong style="color:#163a56;">КДЦ МОНИКИ</strong><br>
+                  Платные медицинские услуги
+                </p>
+              </td>
+            </tr>
+          </table>
+        </td>
+      </tr>
+    </table>
+  </body>
+</html>`
+
+  const textLines = [
+    `Здравствуйте, ${firstName}!`,
+    '',
+    'Мы получили вашу заявку на запись в КДЦ МОНИКИ и свяжемся с вами, чтобы уточнить дату и время.',
+    '',
+    input.serviceTitle ? `Услуга: ${input.serviceTitle}` : '',
+    price ? `Стоимость: ${price}` : '',
+    input.doctorName ? `Врач: ${input.doctorName}` : '',
+    input.branchName ? `Филиал: ${input.branchName}` : '',
+    input.branchAddress ? `Адрес: ${input.branchAddress}` : '',
+    `Телефон: ${input.phone}`,
+    `E-mail: ${input.email}`,
+    '',
+    input.cabinetCreated
+      ? `Для вас создан личный кабинет.\nЛогин: ${input.email}\nПароль: ${input.password || ''}\nВход: ${input.loginUrl}`
+      : `Личный кабинет: ${input.loginUrl}`,
+    '',
+    'Возьмите паспорт, приходите за 10–15 минут. Телефон: +7 (499) 674-07-09, 122.',
+  ].filter(Boolean)
+
+  return { subject, html, text: textLines.join('\n') }
+}

apps/cms/src/lib/notifications.ts

@@ -9,6 +9,7 @@ export type NotifyInput = {
   to: string
   subject: string
   body: string
+  html?: string
 }
 
 function escapeHtml(text: string) {
@@ -36,7 +37,7 @@ export async function sendNotification(
     const result = await payload.sendEmail({
       to: input.to,
       subject: input.subject,
-      html: `<p>${escapeHtml(input.body)}</p>`,
+      html: input.html || `<p>${escapeHtml(input.body)}</p>`,
       text: input.body,
     })
     if (result && typeof result === 'object' && 'skipped' in result && result.skipped) {

apps/cms/src/payload.config.ts

@@ -24,6 +24,7 @@ import { Documents } from './collections/Documents'
 import { Favorites } from './collections/Favorites'
 import { Notifications } from './collections/Notifications'
 import { Invoices } from './collections/Invoices'
+import { Inquiries } from './collections/Inquiries'
 import { Settings } from './globals/Settings'
 import { settingsResendAdapter } from './lib/email'
 import { ensureSettingsSchema } from './lib/ensure-settings-schema'
@@ -31,6 +32,7 @@ import { ensurePagesSchema } from './lib/ensure-pages-schema'
 import { ensureDocumentsSchema } from './lib/ensure-documents-schema'
 import { ensureServicesSchema } from './lib/ensure-services-schema'
 import { ensureBannersSchema } from './lib/ensure-banners-schema'
+import { ensureInquiriesSchema } from './lib/ensure-inquiries-schema'
 
 const filename = fileURLToPath(import.meta.url)
 const dirname = path.dirname(filename)
@@ -59,6 +61,7 @@ export default buildConfig({
     Services,
     Schedules,
     Bookings,
+    Inquiries,
     Invoices,
     Reviews,
     Pages,
@@ -80,6 +83,7 @@ export default buildConfig({
     await ensureDocumentsSchema(payload)
     await ensureServicesSchema(payload)
     await ensureBannersSchema(payload)
+    await ensureInquiriesSchema(payload)
     try {
       const { seedSitePages } = await import('./seed/site-pages')
       await seedSitePages(payload)
@@ -92,6 +96,12 @@ export default buildConfig({
     } catch (err) {
       payload.logger.error({ err }, 'Failed to seed public documents')
     }
+    try {
+      const { seedGalleryPhotos } = await import('./seed/gallery-photos')
+      await seedGalleryPhotos(payload)
+    } catch (err) {
+      payload.logger.error({ err }, 'Failed to seed gallery photos')
+    }
   },
   editor: lexicalEditor(),
   i18n: {
@@ -110,7 +120,8 @@ export default buildConfig({
   }),
   sharp,
   cors: allowedOrigins,
-  csrf: allowedOrigins,
+  // Empty list: do not drop the session cookie when Origin is missing or atypical (HTTP IP:port admin).
+  csrf: [],
   localization: {
     locales: [
       { code: 'ru', label: 'Русский' },

apps/cms/src/seed/gallery-photos.ts

@@ -0,0 +1,110 @@
+import 'dotenv/config'
+import fs from 'fs'
+import path from 'path'
+import { fileURLToPath } from 'url'
+import type { Payload } from 'payload'
+
+export const GALLERY_PHOTOS = [
+  {
+    filename: 'photo-6.jpg',
+    mime: 'image/jpeg',
+    title: 'Ресепшен КДЦ МОНИКИ',
+    alt: 'Стойка регистрации КДЦ МОНИКИ',
+    sortOrder: 10,
+  },
+  {
+    filename: 'photo69.jpeg',
+    mime: 'image/jpeg',
+    title: 'Администратор на ресепшене',
+    alt: 'Администратор КДЦ МОНИКИ за стойкой регистрации',
+    sortOrder: 20,
+  },
+  {
+    filename: 'photo68.jpg',
+    mime: 'image/jpeg',
+    title: 'Зона ожидания',
+    alt: 'Зал ожидания отделения платных медицинских услуг КДЦ МОНИКИ',
+    sortOrder: 30,
+  },
+  {
+    filename: 'photo-9.jpg',
+    mime: 'image/jpeg',
+    title: 'Стойка регистрации',
+    alt: 'Интерьер стойки регистрации КДЦ МОНИКИ',
+    sortOrder: 40,
+  },
+]
+
+function filePath(filename: string) {
+  const here = path.dirname(fileURLToPath(import.meta.url))
+  const bundled = path.join(here, 'files', 'gallery', filename)
+  return fs.existsSync(bundled) ? bundled : null
+}
+
+export async function seedGalleryPhotos(payload: Payload) {
+  for (const item of GALLERY_PHOTOS) {
+    const source = filePath(item.filename)
+    if (!source) {
+      payload.logger.warn(`Gallery photo not found: ${item.filename}`)
+      continue
+    }
+
+    const already = await payload.find({
+      collection: 'gallery',
+      where: { title: { equals: item.title } },
+      locale: 'ru',
+      limit: 1,
+    })
+    if (already.docs.length) continue
+
+    const existingMedia = await payload.find({
+      collection: 'media',
+      where: { filename: { equals: item.filename } },
+      limit: 1,
+    })
+
+    let mediaId = existingMedia.docs[0]?.id
+    if (!mediaId) {
+      const buf = fs.readFileSync(source)
+      const media = await payload.create({
+        collection: 'media',
+        locale: 'ru',
+        data: { alt: item.alt },
+        file: {
+          data: buf,
+          mimetype: item.mime,
+          name: item.filename,
+          size: buf.length,
+        },
+      })
+      mediaId = media.id
+    }
+
+    await payload.create({
+      collection: 'gallery',
+      locale: 'ru',
+      data: {
+        title: item.title,
+        image: mediaId,
+        category: 'clinic',
+        sortOrder: item.sortOrder,
+      },
+    })
+    payload.logger.info(`Seeded gallery photo ${item.filename}`)
+  }
+}
+
+async function main() {
+  const { getPayload } = await import('payload')
+  const config = (await import('../payload.config')).default
+  const payload = await getPayload({ config })
+  await seedGalleryPhotos(payload)
+  process.exit(0)
+}
+
+if (process.argv[1]?.includes('gallery-photos')) {
+  main().catch((err) => {
+    console.error(err)
+    process.exit(1)
+  })
+}

apps/cms/src/seed/public-documents.ts

@@ -4,64 +4,94 @@ import path from 'path'
 import { fileURLToPath } from 'url'
 import type { Payload } from 'payload'
 
-export const PUBLIC_CONTRACT_FILENAME = 'Dogovor-platnie-2026.docx'
-export const PUBLIC_CONTRACT_TITLE = 'Договор на оказание платных медицинских услуг (2026)'
-const CONTRACT_MIME =
-  'application/vnd.openxmlformats-officedocument.wordprocessingml.document'
+const DOCX_MIME = 'application/vnd.openxmlformats-officedocument.wordprocessingml.document'
+const RTF_MIME = 'application/rtf'
 
-function contractPath() {
+export const PUBLIC_DOCUMENTS = [
+  {
+    filename: 'Soglasie-personalnye-dannye.rtf',
+    title: 'Согласие пациента на обработку персональных данных',
+    mime: RTF_MIME,
+    type: 'other' as const,
+    issuedAt: '2026-07-15T00:00:00.000Z',
+  },
+  {
+    filename: 'IDS-meditsinskoe-vmeshatelstvo.docx',
+    title:
+      'Информированное добровольное согласие пациента (законного представителя пациента) на медицинское вмешательство, предоставление сведений, составляющих врачебную тайну, и консультацию врача-специалиста с применением телемедицинских технологий',
+    mime: DOCX_MIME,
+    type: 'other' as const,
+    issuedAt: '2026-09-01T00:00:00.000Z',
+  },
+  {
+    filename: 'Dogovor-platnye-uslugi-fiz-litso.docx',
+    title: 'Договор на оказание платных медицинских услуг (с физическим лицом)',
+    mime: DOCX_MIME,
+    type: 'contract' as const,
+    issuedAt: '2026-06-30T00:00:00.000Z',
+  },
+]
+
+const OLD_CONTRACT_FILENAME = 'Dogovor-platnie-2026.docx'
+
+function filePath(filename: string) {
   const here = path.dirname(fileURLToPath(import.meta.url))
-  const bundled = path.join(here, 'files', PUBLIC_CONTRACT_FILENAME)
+  const bundled = path.join(here, 'files', filename)
   if (fs.existsSync(bundled)) return bundled
-  const icloud = path.join(
-    process.env.HOME || '',
-    'Library/Mobile Documents/com~apple~CloudDocs/Downloads icloud',
-    PUBLIC_CONTRACT_FILENAME,
-  )
-  if (fs.existsSync(icloud)) return icloud
   return null
 }
 
-function copyToWebPublic(source: string) {
+function copyToWebPublic(source: string, filename: string) {
   const here = path.dirname(fileURLToPath(import.meta.url))
-  const dest = path.resolve(here, '../../../web/public/documents', PUBLIC_CONTRACT_FILENAME)
+  const dest = path.resolve(here, '../../../web/public/documents', filename)
   fs.mkdirSync(path.dirname(dest), { recursive: true })
   fs.copyFileSync(source, dest)
 }
 
 export async function seedPublicDocuments(payload: Payload) {
-  const filePath = contractPath()
-  if (!filePath) {
-    payload.logger.warn('Public contract file not found, skip seed')
-    return
-  }
-
-  copyToWebPublic(filePath)
-
   const existing = await payload.find({
     collection: 'documents',
-    where: {
-      and: [{ isPublic: { equals: true } }, { type: { equals: 'contract' } }],
-    },
-    limit: 50,
+    where: { isPublic: { equals: true } },
+    limit: 100,
     depth: 1,
   })
 
-  const already = existing.docs.some((doc) => {
+  for (const doc of existing.docs) {
     const file = typeof doc.file === 'object' && doc.file ? doc.file : null
     const filename = file && 'filename' in file ? String(file.filename || '') : ''
-    return filename === PUBLIC_CONTRACT_FILENAME || String(doc.title || '').includes('платных медицинских услуг')
-  })
-  if (already) return
+    const title = String(doc.title || '')
+    const stale =
+      filename === OLD_CONTRACT_FILENAME || title.includes('(2026)') || title.includes('платных медицинских услуг (2026)')
+    if (!stale) continue
+    await payload.delete({ collection: 'documents', id: doc.id })
+    payload.logger.info(`Removed public document ${title}`)
+  }
 
-  const buf = fs.readFileSync(filePath)
+  for (const item of PUBLIC_DOCUMENTS) {
+    const source = filePath(item.filename)
+    if (!source) {
+      payload.logger.warn(`Public document file not found: ${item.filename}`)
+      continue
+    }
+    copyToWebPublic(source, item.filename)
+
+    const already = await payload.find({
+      collection: 'documents',
+      where: {
+        and: [{ isPublic: { equals: true } }, { title: { equals: item.title } }],
+      },
+      limit: 1,
+    })
+    if (already.docs.length) continue
+
+    const buf = fs.readFileSync(source)
     const media = await payload.create({
       collection: 'media',
-    data: { alt: PUBLIC_CONTRACT_TITLE },
+      data: { alt: item.title },
       file: {
         data: buf,
-      mimetype: CONTRACT_MIME,
-      name: PUBLIC_CONTRACT_FILENAME,
+        mimetype: item.mime,
+        name: item.filename,
         size: buf.length,
       },
     })
@@ -70,14 +100,15 @@ export async function seedPublicDocuments(payload: Payload) {
       collection: 'documents',
       locale: 'ru',
       data: {
-      title: PUBLIC_CONTRACT_TITLE,
-      type: 'contract',
+        title: item.title,
+        type: item.type,
         isPublic: true,
         file: media.id,
-      issuedAt: '2026-01-01T00:00:00.000Z',
+        issuedAt: item.issuedAt,
       },
     })
-  payload.logger.info(`Seeded public document ${PUBLIC_CONTRACT_FILENAME}`)
+    payload.logger.info(`Seeded public document ${item.filename}`)
+  }
 }
 
 async function main() {

apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moniki/web",
-  "version": "1.0.5",
+  "version": "1.0.11",
   "private": true,
   "scripts": {
     "dev": "next dev -p 3000",

apps/web/src/app/[locale]/cabinet/documents/page.tsx

@@ -1,3 +1,5 @@
+import { getMyDocuments } from "@/lib/api";
+import { formatDate } from "@/lib/utils";
 import { getTranslations, setRequestLocale } from "next-intl/server";
 
 export default async function CabinetDocumentsPage({
@@ -8,11 +10,27 @@ export default async function CabinetDocumentsPage({
   const { locale } = await params;
   setRequestLocale(locale);
   const t = await getTranslations("cabinet");
+  const documents = await getMyDocuments();
 
   return (
     <div>
       <h2 className="mb-4 text-xl font-semibold">{t("documents")}</h2>
+      {documents.length === 0 ? (
         <p className="text-[var(--text-muted)]">{t("emptyDocuments")}</p>
+      ) : (
+        <ul className="space-y-3">
+          {documents.map((doc) => (
+            <li key={doc.id} className="rounded-[12px] border border-[var(--border)] bg-white px-4 py-3">
+              <a href={doc.href} className="font-semibold text-[var(--brand-700)]" target="_blank" rel="noreferrer">
+                {doc.title}
+              </a>
+              {doc.issuedAt ? (
+                <p className="mt-1 text-sm text-[var(--text-muted)]">{formatDate(doc.issuedAt, locale)}</p>
+              ) : null}
+            </li>
+          ))}
+        </ul>
+      )}
     </div>
   );
 }

apps/web/src/app/[locale]/cabinet/invoices/page.tsx

@@ -1,6 +1,6 @@
 import { Card } from "@/components/ui/Card";
-import { getMyBookings } from "@/lib/api";
-import { formatPrice } from "@/lib/utils";
+import { getMyInvoices } from "@/lib/api";
+import { formatDate, formatPrice } from "@/lib/utils";
 import { getTranslations, setRequestLocale } from "next-intl/server";
 
 export default async function CabinetInvoicesPage({
@@ -11,24 +11,27 @@ export default async function CabinetInvoicesPage({
   const { locale } = await params;
   setRequestLocale(locale);
   const t = await getTranslations("cabinet");
-  const bookings = await getMyBookings();
+  const invoices = await getMyInvoices();
 
   return (
     <div>
       <h2 className="mb-4 text-xl font-semibold">{t("invoices")}</h2>
-      {bookings.length === 0 ? (
+      {invoices.length === 0 ? (
         <p className="text-[var(--text-muted)]">{t("emptyInvoices")}</p>
       ) : (
         <div className="space-y-3">
-          {bookings.map((b) => (
-            <Card key={b.id} className="flex items-center justify-between gap-4">
+          {invoices.map((invoice) => (
+            <Card key={invoice.id} className="flex items-center justify-between gap-4">
               <div>
-                <p className="font-semibold">{b.serviceTitle}</p>
-                <p className="text-sm text-[var(--text-muted)]">{b.datetime}</p>
+                <p className="font-semibold">{invoice.title}</p>
+                <p className="text-sm text-[var(--text-muted)]">
+                  {invoice.number}
+                  {invoice.datetime ? ` · ${formatDate(invoice.datetime, locale)}` : ""}
+                </p>
               </div>
               <div className="text-right">
-                <p className="font-bold text-[var(--brand-700)]">{formatPrice(b.price, locale)}</p>
-                <p className="text-xs text-[var(--neutral-500)]">{b.paid ? t("paid") : t("unpaid")}</p>
+                <p className="font-bold text-[var(--brand-700)]">{formatPrice(invoice.amount, locale)}</p>
+                <p className="text-xs text-[var(--neutral-500)]">{invoice.paid ? t("paid") : t("unpaid")}</p>
               </div>
             </Card>
           ))}

apps/web/src/app/[locale]/cabinet/layout.tsx

@@ -1,5 +1,7 @@
 import { CabinetNav } from "@/components/cabinet/CabinetNav";
 import { namedPageMetadata } from "@/lib/page-metadata";
+import { me } from "@/lib/api";
+import { Link } from "@/i18n/routing";
 import { getTranslations, setRequestLocale } from "next-intl/server";
 import type { ReactNode } from "react";
 
@@ -22,6 +24,20 @@ export default async function CabinetLayout({
   const { locale } = await params;
   setRequestLocale(locale);
   const t = await getTranslations("cabinet");
+  const auth = await getTranslations("auth");
+  const user = await me();
+
+  if (!user) {
+    return (
+      <div className="mx-auto max-w-xl px-4 py-12 sm:px-6">
+        <h1 className="text-3xl font-bold text-[var(--neutral-900)]">{t("title")}</h1>
+        <p className="mt-4 text-[var(--text-muted)]">{t("loginHint")}</p>
+        <Link href="/login" className="mt-4 inline-block font-semibold text-[var(--brand-700)]">
+          {auth("login")}
+        </Link>
+      </div>
+    );
+  }
 
   return (
     <div className="mx-auto max-w-6xl px-4 py-12 sm:px-6">

apps/web/src/app/[locale]/gallery/page.tsx

@@ -35,7 +35,7 @@ export default async function GalleryPage({
               {/* eslint-disable-next-line @next/next/no-img-element */}
               <img src={item.image} alt={item.title} className="mx-auto block w-full object-cover object-center" />
               <figcaption className="bg-white px-3 py-2 text-sm text-[var(--neutral-600)]">
-                {item.title} · {item.category}
+                {item.title}
               </figcaption>
             </figure>
           ))}

apps/web/src/app/api/auth/login/route.ts

@@ -19,24 +19,11 @@ export async function POST(request: Request) {
       httpOnly: true,
       sameSite: "lax",
       path: "/",
-      secure: process.env.NODE_ENV === "production",
+      secure: false,
       maxAge: 60 * 60 * 24 * 7,
     });
     return response;
   } catch {
-    // Demo login fallback when CMS is down
-    if (body.email && body.password) {
-      const response = NextResponse.json({
-        user: { id: "demo", email: body.email, name: "Пациент" },
-      });
-      response.cookies.set(AUTH_COOKIE, "demo-token", {
-        httpOnly: true,
-        sameSite: "lax",
-        path: "/",
-        maxAge: 60 * 60 * 24 * 7,
-      });
-      return response;
-    }
     return NextResponse.json({ message: "Login failed" }, { status: 500 });
   }
 }

apps/web/src/app/api/auth/me/route.ts

@@ -5,13 +5,7 @@ import { NextResponse } from "next/server";
 export async function GET() {
   const store = await cookies();
   const token = store.get(AUTH_COOKIE)?.value;
-  if (!token) return NextResponse.json({ user: null }, { status: 401 });
-
-  if (token === "demo-token") {
-    return NextResponse.json({
-      user: { id: "demo", email: "patient@example.com", name: "Пациент", phone: "+7" },
-    });
-  }
+  if (!token || token === "demo-token") return NextResponse.json({ user: null }, { status: 401 });
 
   try {
     const res = await fetch(`${CMS_URL}/api/users/me`, {
@@ -21,21 +15,21 @@ export async function GET() {
     const data = await res.json();
     return NextResponse.json(data, { status: res.status });
   } catch {
-    return NextResponse.json({
-      user: { id: "demo", email: "patient@example.com", name: "Пациент" },
-    });
+    return NextResponse.json({ user: null }, { status: 401 });
   }
 }
 
 export async function PATCH(request: Request) {
   const store = await cookies();
   const token = store.get(AUTH_COOKIE)?.value;
-  if (!token) return NextResponse.json({ message: "Unauthorized" }, { status: 401 });
+  if (!token || token === "demo-token") return NextResponse.json({ message: "Unauthorized" }, { status: 401 });
 
   const body = await request.json();
-  if (token === "demo-token") {
-    return NextResponse.json({ user: { id: "demo", ...body } });
-  }
+  const payload = {
+    ...body,
+    fullName: body.fullName || body.name,
+  };
+  delete payload.name;
 
   try {
     const res = await fetch(`${CMS_URL}/api/users/me`, {
@@ -44,11 +38,11 @@ export async function PATCH(request: Request) {
         Authorization: `Bearer ${token}`,
         "Content-Type": "application/json",
       },
-      body: JSON.stringify(body),
+      body: JSON.stringify(payload),
     });
     const data = await res.json();
     return NextResponse.json(data, { status: res.status });
   } catch {
-    return NextResponse.json({ user: { id: "demo", ...body } });
+    return NextResponse.json({ message: "Update failed" }, { status: 500 });
   }
 }

apps/web/src/app/api/auth/register/route.ts

@@ -4,44 +4,44 @@ import { NextResponse } from "next/server";
 export async function POST(request: Request) {
   const body = await request.json();
   try {
+    const payload = {
+      email: body.email,
+      password: body.password,
+      fullName: body.fullName || body.name,
+      phone: body.phone,
+      role: "patient",
+    };
     const res = await fetch(`${CMS_URL}/api/users`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
+      body: JSON.stringify(payload),
     });
     const data = await res.json();
     if (!res.ok) {
       return NextResponse.json(data, { status: res.status });
     }
 
-    // Auto-login after register
     const loginRes = await fetch(`${CMS_URL}/api/users/login`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ email: body.email, password: body.password }),
     });
     const loginData = await loginRes.json().catch(() => ({}));
-    const token = loginData.token || data.token || "demo-token";
+    const token = loginData.token || data.token;
+    if (!token) {
+      return NextResponse.json({ message: "Register succeeded but login failed" }, { status: 500 });
+    }
 
     const response = NextResponse.json({ user: data.doc || data.user || { email: body.email } });
     response.cookies.set(AUTH_COOKIE, token, {
       httpOnly: true,
       sameSite: "lax",
       path: "/",
-      secure: process.env.NODE_ENV === "production",
+      secure: false,
       maxAge: 60 * 60 * 24 * 7,
     });
     return response;
   } catch {
-    const response = NextResponse.json({
-      user: { id: "demo", email: body.email, name: body.name },
-    });
-    response.cookies.set(AUTH_COOKIE, "demo-token", {
-      httpOnly: true,
-      sameSite: "lax",
-      path: "/",
-      maxAge: 60 * 60 * 24 * 7,
-    });
-    return response;
+    return NextResponse.json({ message: "Register failed" }, { status: 500 });
   }
 }

apps/web/src/app/api/inquiries/route.ts

@@ -0,0 +1,40 @@
+import { createInquiry } from "@/lib/api";
+import {
+  isValidEmailAddress,
+  isValidFullName,
+  isValidRuPhone,
+  normalizeRuPhone,
+} from "@/lib/contact-fields";
+import { NextResponse } from "next/server";
+
+function asText(value: unknown) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+export async function POST(request: Request) {
+  const body = (await request.json()) as Record<string, unknown>;
+  const name = asText(body.name ?? body.patientName).replace(/\s+/g, " ");
+  const email = asText(body.email);
+  const phone = normalizeRuPhone(asText(body.phone));
+  const branchId = asText(body.branchId);
+  const serviceId = asText(body.serviceId) || undefined;
+  const doctorId = asText(body.doctorId) || undefined;
+
+  if (!isValidFullName(name) || !isValidEmailAddress(email) || !isValidRuPhone(phone) || !branchId || (!serviceId && !doctorId)) {
+    return NextResponse.json({ error: "invalid" }, { status: 400 });
+  }
+
+  try {
+    const inquiry = await createInquiry({
+      name,
+      email,
+      phone,
+      branchId,
+      serviceId,
+      doctorId,
+    });
+    return NextResponse.json(inquiry);
+  } catch {
+    return NextResponse.json({ error: "unavailable" }, { status: 503 });
+  }
+}

apps/web/src/components/booking/BookingWizard.tsx

@@ -4,7 +4,14 @@ import { Button } from "@/components/ui/Button";
 import { Card } from "@/components/ui/Card";
 import { Input } from "@/components/ui/Input";
 import { Select } from "@/components/ui/Select";
-import type { Branch, Doctor, Service, Slot } from "@/lib/demo-data";
+import type { Branch, Doctor, Service } from "@/lib/demo-data";
+import {
+  formatRuPhone,
+  isValidEmailAddress,
+  isValidFullName,
+  isValidRuPhone,
+  normalizeRuPhone,
+} from "@/lib/contact-fields";
 import { matchesQuery } from "@/lib/search";
 import { cn, formatPrice, stripPriceListIndex } from "@/lib/utils";
 import { useTranslations, useLocale } from "next-intl";
@@ -21,7 +28,6 @@ type Props = {
 const steps = [
   { id: "service", labelKey: "stepService" },
   { id: "branch", labelKey: "stepBranch" },
-  { id: "slot", labelKey: "stepSlot" },
   { id: "confirm", labelKey: "stepConfirm" },
 ] as const;
 
@@ -40,11 +46,10 @@ export function BookingWizard({
   const [services, setServices] = useState<Service[]>([]);
   const [serviceQuery, setServiceQuery] = useState("");
   const [branchId, setBranchId] = useState(initialBranchId || "");
-  const [date, setDate] = useState(() => new Date().toISOString().slice(0, 10));
-  const [slots, setSlots] = useState<Slot[]>([]);
-  const [slotId, setSlotId] = useState("");
   const [name, setName] = useState("");
+  const [email, setEmail] = useState("");
   const [phone, setPhone] = useState("");
+  const [fieldErrors, setFieldErrors] = useState<{ name?: string; email?: string; phone?: string }>({});
   const [done, setDone] = useState(false);
   const [error, setError] = useState("");
   const [pending, startTransition] = useTransition();
@@ -61,7 +66,6 @@ export function BookingWizard({
   const service = services.find((s) => s.id === serviceId);
   const doctor = doctors.find((d) => d.id === doctorId);
   const branch = branches.find((b) => b.id === branchId);
-  const slot = slots.find((s) => s.id === slotId);
 
   const visibleServices = useMemo(() => {
     const list = !serviceQuery.trim()
@@ -81,54 +85,49 @@ export function BookingWizard({
     return doctors.filter((d) => d.services.includes(serviceId));
   }, [doctors, serviceId]);
 
-  async function loadSlots(nextDate: string, nextBranch: string) {
-    const params = new URLSearchParams({
-      date: nextDate,
-      branchId: nextBranch,
-    });
-    if (doctorId) params.set("doctorId", doctorId);
-    if (serviceId) params.set("serviceId", serviceId);
-    const res = await fetch(`/api/slots?${params}`);
-    const data = (await res.json()) as Slot[];
-    setSlots(data);
-    setSlotId("");
+  function contactErrors() {
+    const next: { name?: string; email?: string; phone?: string } = {};
+    if (!name.trim()) next.name = t("nameRequired");
+    else if (!isValidFullName(name)) next.name = t("nameInvalid");
+    if (!email.trim()) next.email = t("emailRequired");
+    else if (!isValidEmailAddress(email)) next.email = t("emailInvalid");
+    if (!isValidRuPhone(phone)) next.phone = t("phoneInvalid");
+    return next;
   }
 
   function canNext() {
     if (step === 0) return Boolean(serviceId || doctorId);
     if (step === 1) return Boolean(branchId);
-    if (step === 2) return Boolean(slotId);
-    return Boolean(name && phone);
+    return true;
   }
 
   async function onNext() {
     setError("");
-    if (step === 1 && branchId) {
-      await loadSlots(date, branchId);
-    }
     if (step < steps.length - 1) {
       setStep((s) => s + 1);
       return;
     }
+    const nextErrors = contactErrors();
+    setFieldErrors(nextErrors);
+    if (Object.keys(nextErrors).length) return;
     startTransition(async () => {
       try {
-        const res = await fetch("/api/bookings", {
+        const res = await fetch("/api/inquiries", {
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify({
             serviceId: serviceId || undefined,
             doctorId: doctorId || undefined,
             branchId,
-            slotId,
-            datetime: slot?.start,
-            patientName: name,
-            phone,
+            name: name.trim().replace(/\s+/g, " "),
+            email: email.trim(),
+            phone: normalizeRuPhone(phone),
           }),
         });
         if (!res.ok) throw new Error("fail");
         setDone(true);
       } catch {
-        setError(t("confirm"));
+        setError(t("error"));
       }
     });
   }
@@ -177,7 +176,7 @@ export function BookingWizard({
                 <button
                   key={s.id}
                   type="button"
-                  onClick={() => setServiceId(s.id)}
+                  onClick={() => setServiceId(s.id === serviceId ? "" : s.id)}
                   className={cn(
                     "flex w-full items-center justify-between gap-3 border-b border-[var(--border)] px-3 py-2 text-left text-sm last:border-b-0",
                     serviceId === s.id
@@ -233,53 +232,6 @@ export function BookingWizard({
         ) : null}
 
         {step === 2 ? (
-          <>
-            <Input
-              type="date"
-              label={t("selectDate")}
-              value={date}
-              onChange={async (e) => {
-                const v = e.target.value;
-                setDate(v);
-                if (branchId) await loadSlots(v, branchId);
-              }}
-            />
-            <div>
-              <p className="mb-2 text-sm font-medium text-[var(--neutral-700)]">{t("selectTime")}</p>
-              {slots.filter((s) => s.available).length === 0 ? (
-                <p className="text-sm text-[var(--text-muted)]">{t("noSlots")}</p>
-              ) : (
-                <div className="flex flex-wrap gap-2">
-                  {slots
-                    .filter((s) => s.available)
-                    .map((s) => {
-                      const label = new Date(s.start).toLocaleTimeString([], {
-                        hour: "2-digit",
-                        minute: "2-digit",
-                      });
-                      return (
-                        <button
-                          key={s.id}
-                          type="button"
-                          onClick={() => setSlotId(s.id)}
-                          className={cn(
-                            "rounded-[10px] border px-3 py-2 text-sm font-medium",
-                            slotId === s.id
-                              ? "border-[var(--brand-500)] bg-[var(--brand-600)] text-white"
-                              : "border-[var(--border)] hover:border-[var(--brand-300)]",
-                          )}
-                        >
-                          {label}
-                        </button>
-                      );
-                    })}
-                </div>
-              )}
-            </div>
-          </>
-        ) : null}
-
-        {step === 3 ? (
           <>
             <div className="rounded-[10px] bg-[var(--neutral-50)] p-4 text-sm">
               <p className="font-semibold">{t("summary")}</p>
@@ -287,12 +239,55 @@ export function BookingWizard({
                 {service ? <li>{stripPriceListIndex(service.title)}</li> : null}
                 {doctor ? <li>{doctor.name}</li> : null}
                 {branch ? <li>{branch.name}</li> : null}
-                {slot ? <li>{new Date(slot.start).toLocaleString()}</li> : null}
-                {service ? <li>{formatPrice(service.price, locale)}</li> : null}
               </ul>
             </div>
-            <Input label={t("patientName")} value={name} onChange={(e) => setName(e.target.value)} required />
-            <Input label={t("phone")} value={phone} onChange={(e) => setPhone(e.target.value)} required />
+            <Input
+              label={t("patientName")}
+              placeholder={t("namePlaceholder")}
+              value={name}
+              autoComplete="name"
+              error={fieldErrors.name}
+              onChange={(e) => {
+                setName(e.target.value);
+                setFieldErrors((prev) => ({ ...prev, name: undefined }));
+              }}
+              onBlur={() => setFieldErrors((prev) => ({ ...prev, name: contactErrors().name }))}
+              required
+            />
+            <Input
+              type="email"
+              inputMode="email"
+              label={t("email")}
+              placeholder={t("emailPlaceholder")}
+              value={email}
+              autoComplete="email"
+              error={fieldErrors.email}
+              onChange={(e) => {
+                setEmail(e.target.value);
+                setFieldErrors((prev) => ({ ...prev, email: undefined }));
+              }}
+              onBlur={() => setFieldErrors((prev) => ({ ...prev, email: contactErrors().email }))}
+              required
+            />
+            <Input
+              type="tel"
+              inputMode="numeric"
+              label={t("phone")}
+              placeholder={t("phonePlaceholder")}
+              value={phone}
+              autoComplete="tel"
+              error={fieldErrors.phone}
+              onChange={(e) => {
+                setPhone(formatRuPhone(e.target.value));
+                setFieldErrors((prev) => ({ ...prev, phone: undefined }));
+              }}
+              onBlur={() => setFieldErrors((prev) => ({ ...prev, phone: contactErrors().phone }))}
+              onFocus={() => {
+                if (!phone.trim() || phone.trim() === "+") setPhone("+7");
+              }}
+              maxLength={16}
+              required
+            />
           </>
         ) : null}
 

apps/web/src/components/cabinet/BookingActions.tsx

@@ -95,15 +95,20 @@ export function BookingActions({ booking }: { booking: Booking }) {
           <p className="mt-1 text-sm text-[var(--text-muted)]">{booking.doctorName}</p>
           <p className="text-sm text-[var(--text-muted)]">{booking.branchName}</p>
           <p className="mt-2 text-sm font-medium">{formatDate(booking.datetime, locale)}</p>
+          {booking.source === "inquiry" ? (
+            <p className="mt-2 text-sm text-[var(--text-muted)]">{t("requestPending")}</p>
+          ) : null}
         </div>
         <div className="text-right">
           <p className="text-sm font-semibold text-[var(--brand-700)]">{statusLabel}</p>
-          <p className="mt-1 text-sm">{formatPrice(booking.price, locale)}</p>
+          {booking.price ? <p className="mt-1 text-sm">{formatPrice(booking.price, locale)}</p> : null}
+          {booking.source === "inquiry" ? null : (
             <p className="text-xs text-[var(--neutral-500)]">{paid ? t("paid") : t("unpaid")}</p>
+          )}
         </div>
       </div>
 
-      {status === "upcoming" ? (
+      {status === "upcoming" && booking.source !== "inquiry" ? (
         <div className="mt-4 flex flex-wrap gap-2">
           {!paid ? (
             <Button size="sm" onClick={pay} disabled={pending}>
@@ -161,7 +166,7 @@ export function BookingActions({ booking }: { booking: Booking }) {
 
       {reviewDone ? <p className="mt-3 text-sm text-[var(--success)]">{tr("thanks")}</p> : null}
 
-      {status === "upcoming" ? (
+      {status === "upcoming" && booking.source !== "inquiry" ? (
         <p className="mt-3 text-xs text-[var(--neutral-500)]">
           <Link href="/booking" className="underline">
             {t("reschedule")}

apps/web/src/components/layout/Header.tsx

@@ -1,5 +1,6 @@
 "use client";
 
+import { HeaderContacts } from "@/components/layout/HeaderContacts";
 import { HeaderTools } from "@/components/layout/HeaderTools";
 import { LocaleSwitcher } from "@/components/layout/LocaleSwitcher";
 import { Logo } from "@/components/layout/Logo";
@@ -37,18 +38,20 @@ export function Header() {
 
   return (
     <header className="sticky top-0 z-50 border-b border-[var(--border)] bg-[var(--surface)]">
-      <div className="mx-auto flex h-[var(--header-h)] max-w-7xl items-center gap-3 px-4 sm:px-6">
+      <div className="mx-auto flex h-[var(--header-h)] w-full max-w-[1600px] items-center gap-3 px-4 sm:px-6">
         <Logo tagline={meta("tagline")} className="min-w-0 shrink-0" />
+        <span className="hidden h-10 w-px shrink-0 bg-[var(--border)] xl:block" aria-hidden />
+        <HeaderContacts className="hidden xl:flex" />
 
         <nav
-          className="hidden min-w-0 flex-1 items-center justify-end gap-0 lg:flex"
+          className="hidden min-w-0 flex-1 items-center justify-end overflow-hidden lg:flex"
           aria-label={a11y("mainNav")}
         >
           {links.map((l) => (
             <Link
               key={l.href}
               href={l.href}
-              className="whitespace-nowrap rounded-lg px-2.5 py-2 text-base font-medium text-[var(--neutral-700)] transition hover:bg-[var(--brand-50)] hover:text-[var(--brand-700)]"
+              className="whitespace-nowrap rounded-lg px-2 py-2 text-[15px] font-medium text-[var(--neutral-700)] transition hover:bg-[var(--brand-50)] hover:text-[var(--brand-700)]"
             >
               {t(l.key)}
             </Link>
@@ -109,6 +112,7 @@ export function Header() {
                 <Button size="sm">{t("cabinet")}</Button>
               </Link>
             </div>
+            <HeaderContacts stacked className="mt-4 border-t border-[var(--border)] pt-4 lg:hidden" />
           </nav>
         </div>
       ) : null}

apps/web/src/components/layout/HeaderContacts.tsx

@@ -0,0 +1,77 @@
+"use client";
+
+import { cn } from "@/lib/utils";
+import { Clock, Phone01 } from "@untitledui/icons";
+import { useTranslations } from "next-intl";
+import type { ReactNode } from "react";
+
+function IconWell({ children }: { children: ReactNode }) {
+  return (
+    <span className="flex h-8 w-8 shrink-0 items-center justify-center rounded-[10px] bg-[var(--brand-50)] text-[var(--brand-700)]">
+      {children}
+    </span>
+  );
+}
+
+export function HeaderContacts({
+  className,
+  stacked = false,
+}: {
+  className?: string;
+  stacked?: boolean;
+}) {
+  const t = useTranslations("header");
+  const hero = useTranslations("hero");
+
+  return (
+    <div
+      className={cn(
+        stacked ? "flex flex-col items-stretch gap-3" : "flex min-w-0 items-center gap-3",
+        className,
+      )}
+    >
+      <div
+        className={cn(
+          "min-w-0 items-center gap-2.5",
+          stacked ? "flex" : "hidden min-[1480px]:flex",
+        )}
+      >
+        <IconWell>
+          <Clock size={16} aria-hidden />
+        </IconWell>
+        <p className="min-w-0 leading-snug">
+          <span className="sr-only">{t("hoursLabel")}. </span>
+          <span className="block text-[13px] font-semibold tracking-tight text-[var(--brand-700)]">
+            {t("hoursWeekdays")}
+          </span>
+          <span className="block text-[12px] text-[var(--neutral-500)]">{t("hoursWeekend")}</span>
+        </p>
+      </div>
+
+      {!stacked ? (
+        <span className="hidden h-8 w-px shrink-0 bg-[var(--border)] min-[1480px]:block" aria-hidden />
+      ) : null}
+
+      <div className={cn("min-w-0 items-center gap-2.5", stacked ? "flex" : "hidden xl:flex")}>
+        <IconWell>
+          <Phone01 size={16} aria-hidden />
+        </IconWell>
+        <p className="min-w-0 leading-snug">
+          <span className="sr-only">{t("phoneLabel")}. </span>
+          <a
+            href="tel:+74996740709"
+            className="block text-[13px] font-semibold tracking-tight text-[var(--brand-700)] transition hover:text-[var(--brand-800)]"
+          >
+            {hero("phone")}
+          </a>
+          <a
+            href="tel:122"
+            className="block text-[12px] font-medium text-[var(--neutral-500)] transition hover:text-[var(--brand-700)]"
+          >
+            {hero("phoneAlt")}
+          </a>
+        </p>
+      </div>
+    </div>
+  );
+}

apps/web/src/components/pages/PublicDocumentsList.tsx

@@ -1,6 +1,6 @@
 import { Card } from "@/components/ui/Card";
 import {
-  FALLBACK_PUBLIC_CONTRACT_HREF,
+  FALLBACK_PUBLIC_DOCUMENTS,
   getPublicDocuments,
   type PublicDocument,
 } from "@/lib/api";
@@ -19,16 +19,7 @@ function fileLabel(item: PublicDocument) {
 export async function PublicDocumentsList({ locale }: { locale: string }) {
   const t = await getTranslations("legal.documentsPage");
   const docs = await getPublicDocuments(locale);
-  const items: PublicDocument[] = docs.length
-    ? docs
-    : [
-        {
-          id: 0,
-          title: t("contractTitle"),
-          href: FALLBACK_PUBLIC_CONTRACT_HREF,
-          filename: "Dogovor-platnie-2026.docx",
-        },
-      ];
+  const items: PublicDocument[] = docs.length ? docs : FALLBACK_PUBLIC_DOCUMENTS;
 
   return (
     <ul className="space-y-4">

apps/web/src/lib/api.ts

@@ -1,7 +1,6 @@
 import { cookies } from "next/headers";
 import {
   demoBanners,
-  demoBookings,
   demoBranches,
   demoDoctors,
   demoGallery,
@@ -46,15 +45,15 @@ function withLocale(query: URLSearchParams, locale?: string | null) {
   return query;
 }
 
-type FetchOptions = RequestInit & { token?: string | null; fallback?: unknown };
+type FetchOptions = RequestInit & { token?: string | null; fallback?: unknown; timeoutMs?: number };
 
 async function cmsFetch<T>(path: string, options: FetchOptions = {}): Promise<T> {
-  const { token, fallback, ...init } = options;
+  const { token, fallback, timeoutMs, ...init } = options;
   const headers = new Headers(init.headers);
   headers.set("Content-Type", "application/json");
   if (token) headers.set("Authorization", `Bearer ${token}`);
 
-  const timeout = AbortSignal.timeout(5000);
+  const timeout = AbortSignal.timeout(timeoutMs ?? 5000);
   const signal = init.signal ? AbortSignal.any([init.signal, timeout]) : timeout;
 
   try {
@@ -170,6 +169,83 @@ function asText(value: unknown): string {
   return "";
 }
 
+function isPatientToken(token: string | null): token is string {
+  return Boolean(token) && token !== "demo-token";
+}
+
+function relRecord(value: unknown): Record<string, unknown> | null {
+  return value && typeof value === "object" ? (value as Record<string, unknown>) : null;
+}
+
+function mapInquiryBooking(raw: Record<string, unknown>): Booking {
+  const service = relRecord(raw.service);
+  const doctor = relRecord(raw.doctor);
+  const branch = relRecord(raw.branch);
+  return {
+    id: `inquiry-${raw.id}`,
+    serviceTitle: stripPriceListIndex(asText(service?.title)) || (doctor ? "Приём врача" : "Заявка на запись"),
+    doctorName: asText(doctor?.fullName) || "—",
+    branchName: asText(branch?.name),
+    datetime: asText(raw.createdAt),
+    status: asText(raw.status) === "done" ? "completed" : "upcoming",
+    price: Number(service?.price) || 0,
+    paid: false,
+    source: "inquiry",
+  };
+}
+
+function mapCmsBooking(raw: Record<string, unknown>): Booking {
+  const service = relRecord(raw.service);
+  const doctor = relRecord(raw.doctor);
+  const branch = relRecord(raw.branch);
+  const statusRaw = asText(raw.status);
+  const status: Booking["status"] =
+    statusRaw === "completed" ? "completed" : statusRaw === "cancelled" || statusRaw === "expired" ? "cancelled" : "upcoming";
+  return {
+    id: String(raw.id ?? ""),
+    serviceTitle: stripPriceListIndex(asText(service?.title)) || "Услуга",
+    doctorName: asText(doctor?.fullName) || "—",
+    branchName: asText(branch?.name),
+    datetime: asText(raw.startsAt) || asText(raw.createdAt),
+    status,
+    price: Number(raw.price) || Number(service?.price) || 0,
+    paid: asText(raw.paymentStatus) === "paid",
+    source: "booking",
+  };
+}
+
+function mapFavorite(raw: Record<string, unknown>): Service | Doctor | null {
+  const doctor = relRecord(raw.doctor);
+  if (doctor) {
+    return {
+      id: String(doctor.id ?? raw.id ?? ""),
+      slug: asText(doctor.slug),
+      name: asText(doctor.fullName) || asText(doctor.name),
+      specialty: asText(doctor.specialty) || asText(doctor.position),
+      experienceYears: Number(doctor.experienceYears) || 0,
+      photo: mediaSrc(doctor.photo),
+      bio: asText(doctor.bio),
+      rating: Number(doctor.rating) || 0,
+      reviewsCount: Number(doctor.reviewsCount) || 0,
+      services: [],
+      branchIds: [],
+    };
+  }
+  const service = relRecord(raw.service);
+  if (service) {
+    return {
+      id: String(service.id ?? raw.id ?? ""),
+      slug: asText(service.slug),
+      title: asText(service.title),
+      category: asText(service.groupTitle) || asText(service.category),
+      price: Number(service.price) || 0,
+      durationMin: Number(service.durationMin) || 0,
+      description: asText(service.description),
+    };
+  }
+  return null;
+}
+
 function mapIds(value: unknown): string[] {
   if (!Array.isArray(value)) return [];
   return value.map((item) => {
@@ -664,10 +740,24 @@ export async function getNewsBySlug(slug: string, locale = "ru"): Promise<NewsIt
 }
 
 export async function getGallery(locale = "ru"): Promise<GalleryItem[]> {
-  const query = withLocale(new URLSearchParams({ limit: "100", depth: "1" }), locale);
-  return cmsFetch<GalleryItem[]>(`/api/gallery?${query}`, { fallback: demoGallery }).then((data) =>
-    unwrapList(data as PayloadList<GalleryItem> | GalleryItem[]),
-  );
+  const query = withLocale(new URLSearchParams({ limit: "100", depth: "1", sort: "sortOrder" }), locale);
+  try {
+    const data = await cmsFetch<PayloadList<Record<string, unknown>>>(`/api/gallery?${query}`, {
+      cache: "no-store",
+    });
+    const items = unwrapList(data)
+      .map((raw) => ({
+        id: String(raw.id ?? ""),
+        title: asText(raw.title),
+        image: mediaSrc(raw.image),
+        category: asText(raw.category),
+      }))
+      .filter((item) => item.id && item.image);
+    if (items.length) return items;
+  } catch {
+    // fall through to demo
+  }
+  return demoGallery;
 }
 
 export async function getReviews(
@@ -767,6 +857,31 @@ export async function createBooking(payload: {
   });
 }
 
+export async function createInquiry(payload: {
+  name: string;
+  email: string;
+  phone: string;
+  branchId: string;
+  serviceId?: string;
+  doctorId?: string;
+}): Promise<{ id: string }> {
+  const data: Record<string, unknown> = {
+    name: payload.name,
+    email: payload.email,
+    phone: payload.phone,
+    branch: Number(payload.branchId) || payload.branchId,
+    status: "new",
+  };
+  if (payload.serviceId) data.service = Number(payload.serviceId) || payload.serviceId;
+  if (payload.doctorId) data.doctor = Number(payload.doctorId) || payload.doctorId;
+  return cmsFetch(`/api/custom/inquiries`, {
+    method: "POST",
+    body: JSON.stringify(data),
+    cache: "no-store",
+    timeoutMs: 30000,
+  });
+}
+
 export async function cancelBooking(id: string): Promise<void> {
   const token = await getAuthToken();
   await cmsFetch(`/api/bookings/${id}`, {
@@ -827,11 +942,16 @@ export async function createReview(payload: {
 
 export async function getFavorites(): Promise<(Service | Doctor)[]> {
   const token = await getAuthToken();
-  return cmsFetch(`/api/favorites`, {
+  if (!isPatientToken(token)) return [];
+  return cmsFetch(`/api/favorites?depth=1&limit=50`, {
     token,
     cache: "no-store",
-    fallback: [],
-  }).then((data) => unwrapList(data as PayloadList<Service | Doctor> | (Service | Doctor)[]));
+    fallback: { docs: [] },
+  }).then((data) =>
+    unwrapList(data as PayloadList<Record<string, unknown>> | Record<string, unknown>[])
+      .map(mapFavorite)
+      .filter((item): item is Service | Doctor => Boolean(item)),
+  );
 }
 
 export async function addFavorite(payload: {
@@ -860,11 +980,78 @@ export async function removeFavorite(id: string): Promise<void> {
 
 export async function getMyBookings(): Promise<Booking[]> {
   const token = await getAuthToken();
-  return cmsFetch<Booking[]>(`/api/bookings?mine=true`, {
+  if (!isPatientToken(token)) return [];
+  const [inquiries, bookings] = await Promise.all([
+    cmsFetch<PayloadList<Record<string, unknown>>>(`/api/inquiries?limit=50&depth=2&sort=-createdAt`, {
       token,
       cache: "no-store",
-    fallback: demoBookings,
-  }).then((data) => unwrapList(data as PayloadList<Booking> | Booking[]));
+      fallback: { docs: [] },
+    }).catch(() => ({ docs: [] })),
+    cmsFetch<PayloadList<Record<string, unknown>>>(`/api/bookings?limit=50&depth=2&sort=-startsAt`, {
+      token,
+      cache: "no-store",
+      fallback: { docs: [] },
+    }).catch(() => ({ docs: [] })),
+  ]);
+  return [
+    ...unwrapList(inquiries).map(mapInquiryBooking),
+    ...unwrapList(bookings).map(mapCmsBooking),
+  ].sort((a, b) => Date.parse(b.datetime) - Date.parse(a.datetime));
+}
+
+export type CabinetDocument = {
+  id: string;
+  title: string;
+  href: string;
+  issuedAt?: string;
+};
+
+export async function getMyDocuments(): Promise<CabinetDocument[]> {
+  const token = await getAuthToken();
+  if (!isPatientToken(token)) return [];
+  const data = await cmsFetch<PayloadList<Record<string, unknown>>>(
+    `/api/documents?depth=1&limit=50&sort=-issuedAt&where[isPublic][equals]=false`,
+    { token, cache: "no-store", fallback: { docs: [] } },
+  ).catch(() => ({ docs: [] as Record<string, unknown>[] }));
+  return unwrapList(data)
+    .map((raw) => {
+      const file = raw.file && typeof raw.file === "object" ? (raw.file as Record<string, unknown>) : null;
+      const href = mediaSrc(file);
+      const title = asText(raw.title);
+      if (!title || !href) return null;
+      return { id: String(raw.id ?? ""), title, href, issuedAt: asText(raw.issuedAt) || undefined };
+    })
+    .filter((item): item is CabinetDocument => Boolean(item));
+}
+
+export type CabinetInvoice = {
+  id: string;
+  number: string;
+  title: string;
+  amount: number;
+  paid: boolean;
+  datetime: string;
+};
+
+export async function getMyInvoices(): Promise<CabinetInvoice[]> {
+  const token = await getAuthToken();
+  if (!isPatientToken(token)) return [];
+  const data = await cmsFetch<PayloadList<Record<string, unknown>>>(
+    `/api/invoices?depth=2&limit=50&sort=-createdAt`,
+    { token, cache: "no-store", fallback: { docs: [] } },
+  ).catch(() => ({ docs: [] as Record<string, unknown>[] }));
+  return unwrapList(data).map((raw) => {
+    const booking = relRecord(raw.booking);
+    const service = booking ? relRecord(booking.service) : null;
+    return {
+      id: String(raw.id ?? ""),
+      number: asText(raw.number) || String(raw.id ?? ""),
+      title: asText(service?.title) || asText(raw.number) || "Счёт",
+      amount: Number(raw.amount) || 0,
+      paid: asText(raw.status) === "paid",
+      datetime: asText(raw.paidAt) || asText(raw.createdAt),
+    };
+  });
 }
 
 export async function me(): Promise<{
@@ -874,13 +1061,22 @@ export async function me(): Promise<{
   phone?: string;
 } | null> {
   const token = await getAuthToken();
-  if (!token) return null;
+  if (!isPatientToken(token)) return null;
   try {
-    return await cmsFetch(`/api/users/me`, {
+    const data = await cmsFetch<Record<string, unknown>>(`/api/users/me`, {
       token,
       cache: "no-store",
-      fallback: { id: "demo", email: "patient@example.com", name: "Пациент", phone: "+7" },
     });
+    const user = relRecord(data.user) || data;
+    const email = asText(user.email);
+    const id = user.id != null ? String(user.id) : "";
+    if (!email || !id || id === "demo") return null;
+    return {
+      id,
+      email,
+      name: asText(user.fullName) || asText(user.name) || undefined,
+      phone: asText(user.phone) || undefined,
+    };
   } catch {
     return null;
   }
@@ -1059,7 +1255,29 @@ export type PublicDocument = {
   issuedAt?: string;
 };
 
-export const FALLBACK_PUBLIC_CONTRACT_HREF = "/documents/Dogovor-platnie-2026.docx";
+export const FALLBACK_PUBLIC_DOCUMENTS: PublicDocument[] = [
+  {
+    id: 1,
+    title: "Согласие пациента на обработку персональных данных",
+    href: "/documents/Soglasie-personalnye-dannye.rtf",
+    filename: "Soglasie-personalnye-dannye.rtf",
+  },
+  {
+    id: 2,
+    title:
+      "Информированное добровольное согласие пациента (законного представителя пациента) на медицинское вмешательство, предоставление сведений, составляющих врачебную тайну, и консультацию врача-специалиста с применением телемедицинских технологий",
+    href: "/documents/IDS-meditsinskoe-vmeshatelstvo.docx",
+    filename: "IDS-meditsinskoe-vmeshatelstvo.docx",
+  },
+  {
+    id: 3,
+    title: "Договор на оказание платных медицинских услуг (с физическим лицом)",
+    href: "/documents/Dogovor-platnye-uslugi-fiz-litso.docx",
+    filename: "Dogovor-platnye-uslugi-fiz-litso.docx",
+  },
+];
+
+export const FALLBACK_PUBLIC_CONTRACT_HREF = FALLBACK_PUBLIC_DOCUMENTS[2].href;
 
 export async function getPublicDocuments(locale = "ru"): Promise<PublicDocument[]> {
   try {

apps/web/src/lib/contact-fields.ts

@@ -0,0 +1,41 @@
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[A-Za-z0-9-]{2,}$/
+
+export function isValidFullName(value: string) {
+  const name = value.trim().replace(/\s+/g, " ")
+  if (name.length < 3) return false
+  const parts = name.split(" ").filter(Boolean)
+  if (parts.length < 2) return false
+  return /^[\p{L}][\p{L}\s'-]*$/u.test(name)
+}
+
+export function isValidEmailAddress(value: string) {
+  const email = value.trim()
+  return EMAIL_RE.test(email)
+}
+
+export function ruPhoneDigits(value: string) {
+  let digits = value.replace(/\D/g, "")
+  if (digits.startsWith("8")) digits = `7${digits.slice(1)}`
+  if (!digits.startsWith("7")) digits = `7${digits}`
+  return digits.slice(0, 11)
+}
+
+export function formatRuPhone(value: string) {
+  const digits = ruPhoneDigits(value)
+  const local = digits.slice(1)
+  let formatted = "+7"
+  if (local.length > 0) formatted += ` ${local.slice(0, 3)}`
+  if (local.length > 3) formatted += ` ${local.slice(3, 6)}`
+  if (local.length > 6) formatted += ` ${local.slice(6, 8)}`
+  if (local.length > 8) formatted += ` ${local.slice(8, 10)}`
+  return formatted
+}
+
+export function normalizeRuPhone(value: string) {
+  const digits = ruPhoneDigits(value)
+  return digits.length === 11 ? `+${digits}` : ""
+}
+
+export function isValidRuPhone(value: string) {
+  return /^\+7\d{10}$/.test(normalizeRuPhone(value))
+}

apps/web/src/lib/demo-data.ts

@@ -131,6 +131,7 @@ export type Booking = {
   status: "upcoming" | "completed" | "cancelled";
   price: number;
   paid: boolean;
+  source?: "inquiry" | "booking";
 };
 
 export const demoServices: Service[] = [

apps/web/src/messages/be.json

@@ -20,6 +20,12 @@
     "menu": "Меню",
     "close": "Закрыць"
   },
+  "header": {
+    "hoursLabel": "Рэжым працы",
+    "hoursWeekdays": "Пн–Сб 08:00–20:00",
+    "hoursWeekend": "Нд 09:00–16:00",
+    "phoneLabel": "Тэлефон"
+  },
   "a11y": {
     "open": "Спецыяльныя магчымасці",
     "title": "Налады даступнасці",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "Анлайн-запіс",
-    "subtitle": "Абярыце паслугу ці ўрача, філіял і зручны час",
+    "subtitle": "Абярыце паслугу ці ўрача, філіял і пакіньце кантакты — мы звяжамся з вамі",
     "stepService": "Паслуга / ўрач",
     "stepBranch": "Філіял",
     "stepSlot": "Дата і час",
-    "stepConfirm": "Пацверджанне",
+    "stepConfirm": "Кантакты",
     "selectService": "Абярыце паслугу",
-    "selectDoctor": "Абярыце ўрача (неабавязкова)",
+    "selectDoctor": "Абярыце ўрача",
     "selectBranch": "Абярыце філіял",
     "selectDate": "Дата",
     "selectTime": "Даступны час",
     "noSlots": "Няма свабодных слотаў на гэтую дату",
-    "confirm": "Пацвердзіць запіс",
-    "success": "Запіс створаны",
-    "successHint": "Мы дашлём напамін на email. Кіраваць запісам можна ў асабістым кабінеце.",
+    "confirm": "Адправіць заяўку",
+    "success": "Вялікі дзякуй!",
+    "successHint": "Мы абавязкова звяжамся з вамі ў бліжэйшы час і ўдакладнім усю інфармацыю.",
+    "error": "Не ўдалося адправіць заяўку. Патэлефануйце нам або паспрабуйце яшчэ раз.",
     "next": "Далей",
     "back": "Назад",
     "patientName": "ПІБ",
+    "email": "E-mail",
     "phone": "Тэлефон",
-    "summary": "Зводка запісу",
-    "searchService": "Знайдзіце паслугу па назве або кодзе"
+    "summary": "Зводка заяўкі",
+    "searchService": "Знайдзіце паслугу па назве або кодзе",
+    "namePlaceholder": "Іваноў Іван Іванавіч",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "Укажыце ПІБ",
+    "nameInvalid": "Укажыце прозвішча і імя літарамі",
+    "emailRequired": "Укажыце e-mail",
+    "emailInvalid": "Укажыце e-mail у фармаце name@domain.ru",
+    "phoneInvalid": "Укажыце тэлефон у фармаце +7 і 10 лічбаў"
   },
   "branches": {
     "title": "Філіялы",
@@ -226,6 +242,8 @@
     "emptyFavorites": "Абранае пустое",
     "emptyDocuments": "Дакументаў пакуль няма",
     "emptyInvoices": "Рахункаў пакуль няма",
+    "loginHint": "Увайдзіце ў асабісты кабінет, каб убачыць свае запісы, дакументы і рахункі.",
+    "requestPending": "Заяўка прынята. Мы звяжамся з вамі, каб удакладніць дату і час.",
     "save": "Захаваць",
     "saved": "Захавана"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "Урачы з вялікім клінічным досведам",
     "allDoctors": "Усе ўрачы",
     "allReviews": "Усе водгукі",
-    "ctaTitle": "Запішыцеся на зручны час",
-    "ctaSubtitle": "Анлайн-запіс 24/7, напаміны і аплата праз СБП",
+    "ctaTitle": "Пакіньце заяўку на прыём",
+    "ctaSubtitle": "Абярыце паслугу ці ўрача — мы звяжамся з вамі і ўдакладнім дэталі",
     "branchesTitle": "Нашы адрасы",
     "branchesSubtitle": "Дзве зручныя лакацыі для прыёму",
     "newsTitle": "Навіны клінікі",
@@ -312,7 +330,7 @@
       "subtitle": "Дагаворы і іншыя файлы для пацыентаў платных паслуг.",
       "intro": "Спампуйце актуальныя дакументы па платных медыцынскіх паслугах МОНІКІ.",
       "download": "Спампаваць",
-      "contractTitle": "Дагавор на аказанне платных медыцынскіх паслуг (2026)"
+      "contractTitle": "Дагавор на аказанне платных медыцынскіх паслуг (з фізічнай асобай)"
     },
     "discounts": {
       "title": "Зніжкі і льготы",

apps/web/src/messages/en.json

@@ -20,6 +20,12 @@
     "menu": "Menu",
     "close": "Close"
   },
+  "header": {
+    "hoursLabel": "Opening hours",
+    "hoursWeekdays": "Mon–Sat 08:00–20:00",
+    "hoursWeekend": "Sun 09:00–16:00",
+    "phoneLabel": "Phone"
+  },
   "a11y": {
     "open": "Accessibility",
     "title": "Accessibility settings",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "Online booking",
-    "subtitle": "Choose a service or doctor, branch, and time slot",
+    "subtitle": "Choose a service or doctor and a branch, then leave your contacts — we will call you back",
     "stepService": "Service / doctor",
     "stepBranch": "Branch",
     "stepSlot": "Date & time",
-    "stepConfirm": "Confirm",
+    "stepConfirm": "Contacts",
     "selectService": "Select a service",
-    "selectDoctor": "Select a doctor (optional)",
+    "selectDoctor": "Select a doctor",
     "selectBranch": "Select a branch",
     "selectDate": "Date",
     "selectTime": "Available times",
     "noSlots": "No slots available for this date",
-    "confirm": "Confirm booking",
-    "success": "Booking created",
-    "successHint": "We will email a reminder. Manage bookings in your account.",
+    "confirm": "Send request",
+    "success": "Thank you!",
+    "successHint": "We will contact you shortly and confirm all the details.",
+    "error": "Could not send the request. Please call us or try again.",
     "next": "Next",
     "back": "Back",
     "patientName": "Full name",
+    "email": "E-mail",
     "phone": "Phone",
-    "summary": "Booking summary",
-    "searchService": "Find a service by name or code"
+    "summary": "Request summary",
+    "searchService": "Find a service by name or code",
+    "namePlaceholder": "Ivanov Ivan Ivanovich",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "Enter your full name",
+    "nameInvalid": "Enter last name and first name in letters",
+    "emailRequired": "Enter your e-mail",
+    "emailInvalid": "Enter an e-mail like name@domain.ru",
+    "phoneInvalid": "Enter a phone number as +7 and 10 digits"
   },
   "branches": {
     "title": "Branches",
@@ -226,6 +242,8 @@
     "emptyFavorites": "No favorites yet",
     "emptyDocuments": "No documents yet",
     "emptyInvoices": "No invoices yet",
+    "loginHint": "Sign in to see your bookings, documents and invoices. Each patient has a personal account.",
+    "requestPending": "Your request was received. We will contact you to confirm the date and time.",
     "save": "Save",
     "saved": "Saved"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "Doctors with extensive clinical experience",
     "allDoctors": "All doctors",
     "allReviews": "All reviews",
-    "ctaTitle": "Book a convenient time",
-    "ctaSubtitle": "Online booking 24/7, reminders, and SBP payments",
+    "ctaTitle": "Leave a booking request",
+    "ctaSubtitle": "Choose a service or doctor — we will contact you to confirm the details",
     "branchesTitle": "Our locations",
     "branchesSubtitle": "Two convenient campuses for appointments",
     "newsTitle": "Clinic news",
@@ -312,7 +330,7 @@
       "subtitle": "Contracts and other files for paid-service patients.",
       "intro": "Download current documents for paid medical services at MONIKI.",
       "download": "Download",
-      "contractTitle": "Paid medical services contract (2026)"
+      "contractTitle": "Paid medical services contract (with an individual)"
     },
     "discounts": {
       "title": "Discounts and benefits",

apps/web/src/messages/ky.json

@@ -20,6 +20,12 @@
     "menu": "Меню",
     "close": "Жабуу"
   },
+  "header": {
+    "hoursLabel": "Иш убактысы",
+    "hoursWeekdays": "Дш–Иш 08:00–20:00",
+    "hoursWeekend": "Жк 09:00–16:00",
+    "phoneLabel": "Телефон"
+  },
   "a11y": {
     "open": "Атайын мүмкүнчүлүктөр",
     "title": "Жеткиликтүүлүк жөндөөлөрү",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "Онлайн жазылуу",
-    "subtitle": "Кызмат же дарыгерди, филиалды жана ыңгайлуу убакытты тандаңыз",
+    "subtitle": "Кызмат же дарыгерди жана филиалды тандап, байланышыңызды калтырыңыз — биз сиз менен байланышабыз",
     "stepService": "Кызмат / дарыгер",
     "stepBranch": "Филиал",
     "stepSlot": "Дата жана убакыт",
-    "stepConfirm": "Ырастоо",
+    "stepConfirm": "Байланыш",
     "selectService": "Кызматты тандаңыз",
-    "selectDoctor": "Дарыгерди тандаңыз (милдеттүү эмес)",
+    "selectDoctor": "Дарыгерди тандаңыз",
     "selectBranch": "Филиалды тандаңыз",
     "selectDate": "Дата",
     "selectTime": "Жеткиликтүү убакыт",
     "noSlots": "Бул датага бош слот жок",
-    "confirm": "Жазылууну ырастоо",
-    "success": "Жазылуу түзүлдү",
-    "successHint": "Эскертүүнү emailге жөнөтөбүз. Жазылууну жеке кабинеттен башкарыңыз.",
+    "confirm": "Өтүнмө жөнөтүү",
+    "success": "Чоң рахмат!",
+    "successHint": "Биз жакын арада сиз менен байланышып, бардык маалыматты тактайбыз.",
+    "error": "Өтүнмө жөнөтүлгөн жок. Бизге чалыңыз же кайра аракет кылыңыз.",
     "next": "Андан ары",
     "back": "Артка",
     "patientName": "Аты-жөнү",
+    "email": "E-mail",
     "phone": "Телефон",
-    "summary": "Жазылуу жыйынтыгы",
-    "searchService": "Кызматты аталышы же коду боюнча табыңыз"
+    "summary": "Өтүнмөнүн жыйынтыгы",
+    "searchService": "Кызматты аталышы же коду боюнча табыңыз",
+    "namePlaceholder": "Иванов Иван Иванович",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "Аты-жөнүңүздү жазыңыз",
+    "nameInvalid": "Фамилия жана атын тамгалар менен жазыңыз",
+    "emailRequired": "E-mail жазыңыз",
+    "emailInvalid": "E-mailди name@domain.ru форматында жазыңыз",
+    "phoneInvalid": "Телефонду +7 жана 10 сан форматында жазыңыз"
   },
   "branches": {
     "title": "Филиалдар",
@@ -226,6 +242,8 @@
     "emptyFavorites": "Тандалмалар бош",
     "emptyDocuments": "Азырынча документ жок",
     "emptyInvoices": "Азырынча эсеп жок",
+    "loginHint": "Жазууларыңызды, документтерди жана эсептерди көрүү үчүн жеке кабинетке кириңиз.",
+    "requestPending": "Өтүнмө кабыл алынды. Биз дата менен убакытты тактоо үчүн байланышабыз.",
     "save": "Сактоо",
     "saved": "Сакталды"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "Чоң клиникалык тажрыйбалуу дарыгерлер",
     "allDoctors": "Бардык дарыгерлер",
     "allReviews": "Бардык пикирлер",
-    "ctaTitle": "Ыңгайлуу убакытка жазылыңыз",
-    "ctaSubtitle": "Онлайн жазылуу 24/7, эскертүүлөр жана СБП төлөмү",
+    "ctaTitle": "Кабыл алуу өтүнмөсүн калтырыңыз",
+    "ctaSubtitle": "Кызмат же дарыгерди тандаңыз — биз сиз менен байланышып, деталдарды тактайбыз",
     "branchesTitle": "Биздин даректер",
     "branchesSubtitle": "Кабыл алуу үчүн эки ыңгайлуу жайгашкан жер",
     "newsTitle": "Клиника жаңылыктары",
@@ -312,7 +330,7 @@
       "subtitle": "Акылуу кызматтардын бейтаптары үчүн келишимдер жана башка файлдар.",
       "intro": "МОНИКИнин акылуу медициналык кызматтары боюнча актуалдуу документтерди жүктөп алыңыз.",
       "download": "Жүктөө",
-      "contractTitle": "Акылуу медициналык кызматтарды көрсөтүү келишими (2026)"
+      "contractTitle": "Акылуу медициналык кызматтарды көрсөтүү келишими (жеке жак менен)"
     },
     "discounts": {
       "title": "Арзандатуулар жана жеңилдиктер",

apps/web/src/messages/ru.json

@@ -20,6 +20,12 @@
     "menu": "Меню",
     "close": "Закрыть"
   },
+  "header": {
+    "hoursLabel": "Режим работы",
+    "hoursWeekdays": "Пн–Сб 08:00–20:00",
+    "hoursWeekend": "Вс 09:00–16:00",
+    "phoneLabel": "Телефон"
+  },
   "a11y": {
     "open": "Специальные возможности",
     "title": "Настройки доступности",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "Онлайн-запись",
-    "subtitle": "Выберите услугу или врача, филиал и удобное время",
+    "subtitle": "Выберите услугу или врача, филиал и оставьте контакты — мы свяжемся с вами",
     "stepService": "Услуга / врач",
     "stepBranch": "Филиал",
     "stepSlot": "Дата и время",
-    "stepConfirm": "Подтверждение",
+    "stepConfirm": "Контакты",
     "selectService": "Выберите услугу",
     "searchService": "Найдите услугу по названию или коду",
-    "selectDoctor": "Выберите врача (необязательно)",
+    "selectDoctor": "Выберите врача",
     "selectBranch": "Выберите филиал",
     "selectDate": "Дата",
     "selectTime": "Доступное время",
     "noSlots": "Нет свободных слотов на эту дату",
-    "confirm": "Подтвердить запись",
-    "success": "Запись создана",
-    "successHint": "Мы отправим напоминание на email. Управлять записью можно в личном кабинете.",
+    "confirm": "Отправить заявку",
+    "success": "Большое спасибо!",
+    "successHint": "Мы обязательно свяжемся с вами в ближайшее время и уточним всю информацию.",
+    "error": "Не удалось отправить заявку. Позвоните нам или попробуйте ещё раз.",
     "next": "Далее",
     "back": "Назад",
     "patientName": "ФИО",
+    "email": "E-mail",
     "phone": "Телефон",
-    "summary": "Сводка записи"
+    "summary": "Сводка заявки",
+    "namePlaceholder": "Иванов Иван Иванович",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "Укажите ФИО",
+    "nameInvalid": "Укажите фамилию и имя буквами",
+    "emailRequired": "Укажите e-mail",
+    "emailInvalid": "Укажите e-mail в формате name@domain.ru",
+    "phoneInvalid": "Укажите телефон в формате +7 и 10 цифр"
   },
   "branches": {
     "title": "Филиалы",
@@ -226,6 +242,8 @@
     "emptyFavorites": "Избранное пусто",
     "emptyDocuments": "Документов пока нет",
     "emptyInvoices": "Счетов пока нет",
+    "loginHint": "Войдите в личный кабинет, чтобы увидеть свои записи, документы и счета. У каждого пациента свой кабинет.",
+    "requestPending": "Заявка принята. Мы свяжемся с вами, чтобы уточнить дату и время визита.",
     "save": "Сохранить",
     "saved": "Сохранено"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "Врачи с большим клиническим опытом",
     "allDoctors": "Все врачи",
     "allReviews": "Все отзывы",
-    "ctaTitle": "Запишитесь на удобное время",
-    "ctaSubtitle": "Онлайн-запись 24/7, напоминания и оплата через СБП",
+    "ctaTitle": "Оставьте заявку на приём",
+    "ctaSubtitle": "Выберите услугу или врача — мы свяжемся с вами и уточним детали",
     "branchesTitle": "Наши адреса",
     "branchesSubtitle": "Два удобных локации для приёма",
     "newsTitle": "Новости клиники",
@@ -312,7 +330,7 @@
       "subtitle": "Договоры и другие файлы для пациентов платных услуг.",
       "intro": "Скачайте актуальные документы по платным медицинским услугам МОНИКИ.",
       "download": "Скачать",
-      "contractTitle": "Договор на оказание платных медицинских услуг (2026)"
+      "contractTitle": "Договор на оказание платных медицинских услуг (с физическим лицом)"
     },
     "discounts": {
       "title": "Скидки и льготы",

apps/web/src/messages/tg.json

@@ -20,6 +20,12 @@
     "menu": "Меню",
     "close": "Пӯшидан"
   },
+  "header": {
+    "hoursLabel": "Соатҳои кор",
+    "hoursWeekdays": "Дш–Шб 08:00–20:00",
+    "hoursWeekend": "Як 09:00–16:00",
+    "phoneLabel": "Телефон"
+  },
   "a11y": {
     "open": "Имкониятҳои махсус",
     "title": "Танзимоти дастрасӣ",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "Сабти онлайн",
-    "subtitle": "Хизмат ё духтур, филиал ва вақти қулайро интихоб кунед",
+    "subtitle": "Хизмат ё духтур ва филиалро интихоб кунед ва тамос гузоред — мо бо шумо тамос мегирем",
     "stepService": "Хизмат / духтур",
     "stepBranch": "Филиал",
     "stepSlot": "Сана ва вақт",
-    "stepConfirm": "Тасдиқ",
+    "stepConfirm": "Тамос",
     "selectService": "Хизматро интихоб кунед",
-    "selectDoctor": "Духтурро интихоб кунед (ихтиёрӣ)",
+    "selectDoctor": "Духтурро интихоб кунед",
     "selectBranch": "Филиалро интихоб кунед",
     "selectDate": "Сана",
     "selectTime": "Вақтҳои дастрас",
     "noSlots": "Барои ин сана слот нест",
-    "confirm": "Сабтро тасдиқ кунед",
-    "success": "Сабт эҷод шуд",
-    "successHint": "Ёдраскунӣ ба email мефиристем. Сабтро дар кабинети шахсӣ идора кунед.",
+    "confirm": "Фиристодани дархост",
+    "success": "Ташаккури зиёд!",
+    "successHint": "Мо ҳатман дар наздиктарин вақт бо шумо тамос мегирем ва тамоми маълумотро дақиқ мекунем.",
+    "error": "Дархост фиристода нашуд. Ба мо занг занед ё бори дигар кӯшиш кунед.",
     "next": "Минбаъд",
     "back": "Бозгашт",
     "patientName": "Ному насаб",
+    "email": "E-mail",
     "phone": "Телефон",
-    "summary": "Хулосаи сабт",
-    "searchService": "Хизматро бо ном ё рамз ҷустуҷӯ кунед"
+    "summary": "Хулосаи дархост",
+    "searchService": "Хизматро бо ном ё рамз ҷустуҷӯ кунед",
+    "namePlaceholder": "Иванов Иван Иванович",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "Ному насабро нависед",
+    "nameInvalid": "Насаб ва номро бо ҳарфҳо нависед",
+    "emailRequired": "E-mail-ро нависед",
+    "emailInvalid": "E-mail-ро дар шакли name@domain.ru нависед",
+    "phoneInvalid": "Телефонро дар шакли +7 ва 10 рақам нависед"
   },
   "branches": {
     "title": "Филиалҳо",
@@ -226,6 +242,8 @@
     "emptyFavorites": "Дӯстдоштаҳо холӣ",
     "emptyDocuments": "Ҳанӯз ҳуҷҷат нест",
     "emptyInvoices": "Ҳанӯз ҳисоб нест",
+    "loginHint": "Ба кабинети шахсӣ ворид шавед, то дархостҳо, ҳуҷҷатҳо ва ҳисобҳои худро бубинед.",
+    "requestPending": "Дархост қабул шуд. Мо барои дақиқ кардани сана ва вақт бо шумо тамос мегирем.",
     "save": "Нигоҳ доштан",
     "saved": "Нигоҳ дошта шуд"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "Духтурон бо таҷрибаи зиёди клиникӣ",
     "allDoctors": "Ҳамаи духтурон",
     "allReviews": "Ҳамаи шарҳҳо",
-    "ctaTitle": "Ба вақти қулай сабт кунед",
-    "ctaSubtitle": "Сабти онлайн 24/7, ёдраскунӣ ва пардохти СБП",
+    "ctaTitle": "Дархости қабулро гузоред",
+    "ctaSubtitle": "Хизмат ё духтурро интихоб кунед — мо бо шумо тамос гирифта ҷузъиётро дақиқ мекунем",
     "branchesTitle": "Суроғаҳои мо",
     "branchesSubtitle": "Ду макони қулай барои қабул",
     "newsTitle": "Хабарҳои клиника",
@@ -312,7 +330,7 @@
       "subtitle": "Шартномаҳо ва дигар файлҳо барои беморони хизматрасонии пулакӣ.",
       "intro": "Ҳуҷҷатҳои актуалии хизматрасонии тиббии пулакии МОНИКИ-ро боргирӣ кунед.",
       "download": "Боргирӣ",
-      "contractTitle": "Шартнома дар бораи расонидани хизматрасонии тиббии пулакӣ (2026)"
+      "contractTitle": "Шартнома дар бораи расонидани хизматрасонии тиббии пулакӣ (бо шахси воқеӣ)"
     },
     "discounts": {
       "title": "Тахфиф ва имтиёзҳо",

apps/web/src/messages/zh.json

@@ -20,6 +20,12 @@
     "menu": "菜单",
     "close": "关闭"
   },
+  "header": {
+    "hoursLabel": "工作时间",
+    "hoursWeekdays": "周一至周六 08:00–20:00",
+    "hoursWeekend": "周日 09:00–16:00",
+    "phoneLabel": "电话"
+  },
   "a11y": {
     "open": "无障碍",
     "title": "无障碍设置",
@@ -119,26 +125,36 @@
   },
   "booking": {
     "title": "在线预约",
-    "subtitle": "选择服务或医生、分院和合适时间",
+    "subtitle": "选择服务或医生、分院并留下联系方式，我们会与您联系",
     "stepService": "服务 / 医生",
     "stepBranch": "分院",
     "stepSlot": "日期与时间",
-    "stepConfirm": "确认",
+    "stepConfirm": "联系方式",
     "selectService": "选择服务",
-    "selectDoctor": "选择医生（可选）",
+    "selectDoctor": "选择医生",
     "selectBranch": "选择分院",
     "selectDate": "日期",
     "selectTime": "可预约时间",
     "noSlots": "该日期暂无空档",
-    "confirm": "确认预约",
-    "success": "预约已创建",
-    "successHint": "我们将发送邮件提醒。可在个人中心管理预约。",
+    "confirm": "提交申请",
+    "success": "非常感谢！",
+    "successHint": "我们会尽快与您联系并确认全部信息。",
+    "error": "申请未能发送。请致电我们或稍后重试。",
     "next": "下一步",
     "back": "返回",
     "patientName": "姓名",
+    "email": "E-mail",
     "phone": "电话",
-    "summary": "预约摘要",
-    "searchService": "按名称或编码查找服务"
+    "summary": "申请摘要",
+    "searchService": "按名称或编码查找服务",
+    "namePlaceholder": "Ivanov Ivan Ivanovich",
+    "emailPlaceholder": "ivan.ivanov@mail.ru",
+    "phonePlaceholder": "+7 900 123 45 67",
+    "nameRequired": "请填写姓名",
+    "nameInvalid": "请用字母填写姓和名",
+    "emailRequired": "请填写电子邮箱",
+    "emailInvalid": "请填写 name@domain.ru 格式的邮箱",
+    "phoneInvalid": "请填写 +7 加 10 位数字的电话"
   },
   "branches": {
     "title": "分院",
@@ -226,6 +242,8 @@
     "emptyFavorites": "暂无收藏",
     "emptyDocuments": "暂无文件",
     "emptyInvoices": "暂无账单",
+    "loginHint": "请登录个人账户查看您的预约、文件和账单。每位患者都有独立账户。",
+    "requestPending": "申请已受理。我们会联系您确认就诊日期和时间。",
     "save": "保存",
     "saved": "已保存"
   },
@@ -236,8 +254,8 @@
     "doctorsSubtitle": "拥有丰富临床经验的医生",
     "allDoctors": "全部医生",
     "allReviews": "全部评价",
-    "ctaTitle": "预约合适时间",
-    "ctaSubtitle": "全天候在线预约、提醒与 SBP 支付",
+    "ctaTitle": "提交就诊申请",
+    "ctaSubtitle": "选择服务或医生，我们会与您联系并确认细节",
     "branchesTitle": "我们的地址",
     "branchesSubtitle": "两个便捷就诊地点",
     "newsTitle": "医院新闻",
@@ -312,7 +330,7 @@
       "subtitle": "付费服务患者可下载的合同及其他文件。",
       "intro": "下载莫尼基付费医疗服务的现行文件。",
       "download": "下载",
-      "contractTitle": "付费医疗服务合同（2026）"
+      "contractTitle": "付费医疗服务合同（自然人）"
     },
     "discounts": {
       "title": "折扣与优惠",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "moniki-platnye-uslugi",
-  "version": "1.0.5",
+  "version": "1.0.11",
   "private": true,
   "scripts": {
     "dev": "pnpm -r --parallel dev",