@surfiran/public-api-client 0.1.0 → 0.11.0

package/README.md

@@ -5,9 +5,14 @@ TypeScript types and a fetch-based client for SURFIRAN CRM Public API V1 (`/api/
 ## Contract Source
 
 ```text
-server/openapi/public-api-v1.yaml  (v0.6.0)
+contract/public-api-v1.yaml  (v0.9.0 package snapshot)
 ```
 
+The backend API remains the canonical contract owner at
+`server/openapi/public-api-v1.yaml`. This package contains an explicit,
+checked-in snapshot with provenance linking it to the canonical source commit
+and checksum. The package never reads backend source during generation.
+
 ## Current Runtime Scope
 
 Active read endpoints:
@@ -117,9 +122,74 @@ This package must never:
 
 ## Next.js Usage
 
-This client is already consumed from Next.js in production: `apps/web/lib/public*.ts` (tours, destinations, sitemap, search suggestions, site navigation) and multiple `apps/web/components/*` build on `createPublicApiClient` via the `@surfiran/public-api-client` path alias. There is no remaining gate blocking this consumption.
+The public Next.js website consumes this client as the exact published dependency `@surfiran/public-api-client@0.1.0`. Its TypeScript, Vitest, and build configuration must resolve the package from `node_modules`, never from the monorepo `packages/` source tree.
+
+## Code Generation
+
+From this package directory, install dependencies and generate the committed
+artifact from the checked-in contract snapshot:
+
+```text
+npm ci --include=dev
+npm run generate
+npm run verify:contract
+npm run verify:generated
+```
+
+Generation has stable ordering, formatting, LF newlines, no random identifiers,
+no machine-specific paths, and no uncontrolled timestamps. To synchronize the
+snapshot from the canonical backend source during monorepo development, use the
+explicit root command with a recorded source commit:
+
+```text
+npm run sync:public-api-client-contract -- --source-commit <canonical-source-commit>
+```
+
+The synchronization command is not required by a package-only clone and must
+not be used to create a competing contract.
+
+## Publication and Rollback
+
+Publication preflight is validation-only and must run from the package root:
+
+```text
+npm run verify:contract
+npm run generate
+npm run verify:generated
+npm run verify:package
+npm run typecheck
+npm test
+npm run build
+npm pack --dry-run --json
+npm run verify:pack
+npm run verify:publication-preflight -- <previous-exact-version>
+```
+
+Create and verify release provenance with an explicit UTC timestamp, source
+commit, rollback version, and packed tarball:
+
+```text
+npm pack --pack-destination <evidence-directory>
+npm run create:provenance -- \
+  --source-commit <full-source-commit> \
+  --generated-at <UTC-ISO-8601-timestamp> \
+  --tarball <packed-tarball> \
+  --rollback-version <previous-exact-version> \
+  --output <evidence-directory>/public-api-client-provenance.json
+npm run verify:provenance -- \
+  --file <evidence-directory>/public-api-client-provenance.json \
+  --tarball <packed-tarball>
+```
+
+The exact package allowlist is enforced before packing. Provenance links the
+package name and version, canonical source commit, canonical and snapshot
+checksums, generated artifact checksum, allowlist checksum, generation tool,
+explicit generation timestamp policy, rollback version, and tarball checksum.
+The package is immutable on npm. Consumers roll back by pinning the previous
+verified exact version; an existing version is never overwritten.
 
 ## Next Steps
 
-- Keep this package aligned with `server/openapi/public-api-v1.yaml`
-- Wire code generation only after an owner-approved codegen plan
+- Keep `server/openapi/public-api-v1.yaml` as the API-owned contract source
+- Synchronize the explicit snapshot only from the API-owned canonical source
+- Run package-local generation, validation, provenance, and clean-clone checks

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { GetPublicSearchSuggestionsParams, GetPublicSitemapParams, GetPublicTravelKnowledgeParams, ListPublicDeparturesParams, ListPublicDestinationsParams, ListPublicTourAccommodationsParams, ListPublicTourAvailabilityParams, ListPublicTourCategoriesParams, ListPublicTourExperiencesParams, ListPublicTravellerStoriesParams, ListPublicTourQuestionsParams, ListPublicTourReviewsParams, ListPublicTourItineraryParams, ListPublicTourRouteParams, ListPublicToursParams, PublicApiResult, PublicAvailabilityListResponse, PublicBookingIntentRequest, PublicBookingIntentResponse, PublicBrochureLeadRequest, PublicBrochureLeadResponse, PublicDepartureListResponse, PublicDestinationDetailResponse, PublicDestinationListResponse, PublicHomepageResponse, PublicInquiryRequest, PublicInquiryResponse, PublicSearchSuggestionsResponse, PublicSitemapResponse, PublicSiteChromeContentResponse, PublicSiteHomeContentResponse, PublicSiteNavigationResponse, PublicSiteTrustPageContentResponse, PublicTourAccommodationListResponse, PublicTourCategoryListResponse, PublicTourDetailResponse, PublicTourExperienceListResponse, PublicTravellerStoryListResponse, PublicTourListResponse, PublicTourQuestionListResponse, PublicTourReviewsSummaryResponse, PublicTourReviewListResponse, PublicTourItineraryResponse, PublicTourRouteResponse, PublicTravelKnowledgeResponse, PublicTravelStatusResponse } from './types.js';
+import type { GetPublicSearchSuggestionsParams, GetPublicSitemapParams, GetPublicTourPreviewParams, GetPublicTravelKnowledgeParams, ListPublicDeparturesParams, ListPublicDestinationsParams, ListPublicTourAccommodationsParams, ListPublicTourAvailabilityParams, ListPublicTourCategoriesParams, ListPublicTourExperiencesParams, ListPublicTravellerStoriesParams, ListPublicTourQuestionsParams, ListPublicTourReviewsParams, ListPublicTourItineraryParams, ListPublicTourRouteParams, ListPublicToursParams, PublicApiResult, PublicAvailabilityListResponse, PublicBookingIntentRequest, PublicBookingIntentResponse, PublicBrochureLeadRequest, PublicBrochureLeadResponse, PublicDepartureListResponse, PublicDestinationDetailResponse, PublicDestinationListResponse, PublicHomepageResponse, PublicInquiryRequest, PublicInquiryResponse, PublicSearchSuggestionsResponse, PublicSitemapResponse, PublicSiteChromeContentResponse, PublicSiteFeaturesResponse, PublicSiteHomeContentResponse, PublicSiteNavigationResponse, PublicSiteTrustPageContentResponse, PublicTourAccommodationListResponse, PublicTourCategoryListResponse, PublicTourDetailResponse, PublicTourExperienceListResponse, PublicTravellerStoryListResponse, PublicTourListResponse, PublicTourQuestionListResponse, PublicTourReviewsSummaryResponse, PublicTourReviewListResponse, PublicTourItineraryResponse, PublicTourRouteResponse, PublicTravelKnowledgeResponse, PublicTravelStatusResponse } from './types.js';
 export type PublicApiClientOptions = {
     baseUrl: string;
     fetchImpl?: typeof fetch;
@@ -13,6 +13,15 @@ export type PublicApiClientOptions = {
 export declare const createPublicApiClient: (options: PublicApiClientOptions) => {
     listPublicTours(params?: ListPublicToursParams): Promise<PublicApiResult<PublicTourListResponse>>;
     getPublicTourBySlug(slug: string): Promise<PublicApiResult<PublicTourDetailResponse>>;
+    /**
+     * ADR-0022 Tour Product/Edition MVP candidate preview: renders the same
+     * public-safe DTO as getPublicTourBySlug, with the Edition-sourced
+     * fields overlaid from an unpublished candidate instead of the currently
+     * live manifest. `token` is a short-lived signed token minted by the
+     * CRM, required (not optional, unlike this client's other params
+     * objects) — there is no unauthenticated variant of this call.
+     */
+    getPublicTourPreviewBySlug(slug: string, params: GetPublicTourPreviewParams): Promise<PublicApiResult<PublicTourDetailResponse>>;
     listPublicTourDepartures(slug: string, params?: ListPublicDeparturesParams): Promise<PublicApiResult<PublicDepartureListResponse>>;
     listPublicTourQuestions(slug: string, params?: ListPublicTourQuestionsParams): Promise<PublicApiResult<PublicTourQuestionListResponse>>;
     listPublicTourExperiences(slug: string, params?: ListPublicTourExperiencesParams): Promise<PublicApiResult<PublicTourExperienceListResponse>>;
@@ -31,6 +40,7 @@ export declare const createPublicApiClient: (options: PublicApiClientOptions) =>
     createPublicBrochureLead(body: PublicBrochureLeadRequest, idempotencyKey?: string): Promise<PublicApiResult<PublicBrochureLeadResponse>>;
     getPublicHomepage(): Promise<PublicApiResult<PublicHomepageResponse>>;
     getPublicSiteNavigation(): Promise<PublicApiResult<PublicSiteNavigationResponse>>;
+    getPublicSiteFeatures(): Promise<PublicApiResult<PublicSiteFeaturesResponse>>;
     getPublicSitemap(params?: GetPublicSitemapParams): Promise<PublicApiResult<PublicSitemapResponse>>;
     getPublicSearchSuggestions(params: GetPublicSearchSuggestionsParams): Promise<PublicApiResult<PublicSearchSuggestionsResponse>>;
     listPublicTourCategories(params?: ListPublicTourCategoriesParams): Promise<PublicApiResult<PublicTourCategoryListResponse>>;

package/dist/client.js

@@ -161,6 +161,17 @@ export const createPublicApiClient = (options) => {
         getPublicTourBySlug(slug) {
             return requestJson(`${baseUrl}/api/v1/tours/${encodeURIComponent(slug)}`, options);
         },
+        /**
+         * ADR-0022 Tour Product/Edition MVP candidate preview: renders the same
+         * public-safe DTO as getPublicTourBySlug, with the Edition-sourced
+         * fields overlaid from an unpublished candidate instead of the currently
+         * live manifest. `token` is a short-lived signed token minted by the
+         * CRM, required (not optional, unlike this client's other params
+         * objects) — there is no unauthenticated variant of this call.
+         */
+        getPublicTourPreviewBySlug(slug, params) {
+            return requestJson(`${baseUrl}/api/v1/tours/${encodeURIComponent(slug)}/preview?token=${encodeURIComponent(params.token)}`, options);
+        },
         listPublicTourDepartures(slug, params) {
             return requestJson(`${baseUrl}/api/v1/tours/${encodeURIComponent(slug)}/departures${toPaginationQueryString(params)}`, options);
         },
@@ -216,6 +227,11 @@ export const createPublicApiClient = (options) => {
         getPublicSiteNavigation() {
             return requestJson(`${baseUrl}/api/v1/site-navigation`, options);
         },
+        // Effective public website feature state. One call returns every known
+        // feature, so a consumer never needs a per-feature request.
+        getPublicSiteFeatures() {
+            return requestJson(`${baseUrl}/api/v1/site-features`, options);
+        },
         getPublicSitemap(params) {
             return requestJson(`${baseUrl}/api/v1/sitemap${toSitemapQueryString(params)}`, options);
         },

package/dist/generated/public-api-v1.d.ts

@@ -1,7 +1,7 @@
-export type GeneratedPublicApiVersion = '0.8.0';
-export type GeneratedPublicApiPath = '/homepage' | '/tours' | '/tours/{slug}' | '/tours/{slug}/availability' | '/tours/{slug}/departures' | '/tours/{slug}/questions' | '/tours/{slug}/experiences' | '/traveller-stories' | '/tours/{slug}/accommodations' | '/tours/{slug}/reviews-summary' | '/tours/{slug}/reviews' | '/tours/{slug}/route' | '/tours/{slug}/itinerary' | '/destinations' | '/destinations/{slug}' | '/sitemap' | '/tour-categories' | '/site-navigation' | '/search-suggestions' | '/travel-status' | '/travel-knowledge' | '/site-content/home' | '/site-content/header' | '/site-content/footer' | '/site-content/about' | '/site-content/contact' | '/site-content/faqs' | '/site-content/privacy' | '/site-content/terms' | '/site-content/responsible-travel' | '/site-content/iran-travel-status' | '/site-content/iran-visa-information' | '/site-content/money-in-iran' | '/site-content/travel-insurance' | '/site-content/health-safety-support' | '/site-content/booking-cancellation-policy' | '/site-content/cookie-policy' | '/site-content/accessibility-statement' | '/inquiries' | '/booking-intents' | '/brochure-leads' | '/booking-intents/{id}';
-export type GeneratedPublicApiOperation = 'GET /homepage' | 'GET /tours' | 'GET /tours/{slug}' | 'GET /tours/{slug}/availability' | 'GET /tours/{slug}/departures' | 'GET /tours/{slug}/questions' | 'GET /tours/{slug}/experiences' | 'GET /traveller-stories' | 'GET /tours/{slug}/accommodations' | 'GET /tours/{slug}/reviews-summary' | 'GET /tours/{slug}/reviews' | 'GET /tours/{slug}/route' | 'GET /tours/{slug}/itinerary' | 'GET /destinations' | 'GET /destinations/{slug}' | 'GET /sitemap' | 'GET /tour-categories' | 'GET /site-navigation' | 'GET /search-suggestions' | 'GET /travel-status' | 'GET /travel-knowledge' | 'GET /site-content/home' | 'GET /site-content/header' | 'GET /site-content/footer' | 'GET /site-content/about' | 'GET /site-content/contact' | 'GET /site-content/faqs' | 'GET /site-content/privacy' | 'GET /site-content/terms' | 'GET /site-content/responsible-travel' | 'GET /site-content/iran-travel-status' | 'GET /site-content/iran-visa-information' | 'GET /site-content/money-in-iran' | 'GET /site-content/travel-insurance' | 'GET /site-content/health-safety-support' | 'GET /site-content/booking-cancellation-policy' | 'GET /site-content/cookie-policy' | 'GET /site-content/accessibility-statement' | 'POST /inquiries' | 'POST /booking-intents' | 'POST /brochure-leads' | 'GET /booking-intents/{id}';
-export type GeneratedPublicApiActiveOperation = 'GET /homepage' | 'GET /tours' | 'GET /tours/{slug}' | 'GET /tours/{slug}/availability' | 'GET /tours/{slug}/departures' | 'GET /tours/{slug}/questions' | 'GET /tours/{slug}/experiences' | 'GET /traveller-stories' | 'GET /tours/{slug}/accommodations' | 'GET /tours/{slug}/reviews-summary' | 'GET /tours/{slug}/reviews' | 'GET /tours/{slug}/route' | 'GET /tours/{slug}/itinerary' | 'GET /destinations' | 'GET /destinations/{slug}' | 'GET /sitemap' | 'GET /tour-categories' | 'GET /site-navigation' | 'GET /search-suggestions' | 'GET /travel-status' | 'GET /travel-knowledge' | 'GET /site-content/home' | 'GET /site-content/header' | 'GET /site-content/footer' | 'GET /site-content/about' | 'GET /site-content/contact' | 'GET /site-content/faqs' | 'GET /site-content/privacy' | 'GET /site-content/terms' | 'GET /site-content/responsible-travel' | 'GET /site-content/iran-travel-status' | 'GET /site-content/iran-visa-information' | 'GET /site-content/money-in-iran' | 'GET /site-content/travel-insurance' | 'GET /site-content/health-safety-support' | 'GET /site-content/booking-cancellation-policy' | 'GET /site-content/cookie-policy' | 'GET /site-content/accessibility-statement' | 'POST /inquiries' | 'POST /booking-intents' | 'POST /brochure-leads';
+export type GeneratedPublicApiVersion = '0.9.0';
+export type GeneratedPublicApiPath = '/booking-intents' | '/booking-intents/{id}' | '/brochure-leads' | '/destinations' | '/destinations/{slug}' | '/homepage' | '/inquiries' | '/search-suggestions' | '/site-content/about' | '/site-content/accessibility-statement' | '/site-content/booking-cancellation-policy' | '/site-content/contact' | '/site-content/cookie-policy' | '/site-content/faqs' | '/site-content/footer' | '/site-content/header' | '/site-content/health-safety-support' | '/site-content/home' | '/site-content/iran-travel-status' | '/site-content/iran-visa-information' | '/site-content/money-in-iran' | '/site-content/privacy' | '/site-content/responsible-travel' | '/site-content/terms' | '/site-content/travel-insurance' | '/site-features' | '/site-navigation' | '/sitemap' | '/tour-categories' | '/tours' | '/tours/{slug}' | '/tours/{slug}/accommodations' | '/tours/{slug}/availability' | '/tours/{slug}/departures' | '/tours/{slug}/experiences' | '/tours/{slug}/itinerary' | '/tours/{slug}/preview' | '/tours/{slug}/questions' | '/tours/{slug}/reviews' | '/tours/{slug}/reviews-summary' | '/tours/{slug}/route' | '/travel-knowledge' | '/travel-status' | '/traveller-stories';
+export type GeneratedPublicApiOperation = 'GET /booking-intents/{id}' | 'GET /destinations' | 'GET /destinations/{slug}' | 'GET /homepage' | 'GET /search-suggestions' | 'GET /site-content/about' | 'GET /site-content/accessibility-statement' | 'GET /site-content/booking-cancellation-policy' | 'GET /site-content/contact' | 'GET /site-content/cookie-policy' | 'GET /site-content/faqs' | 'GET /site-content/footer' | 'GET /site-content/header' | 'GET /site-content/health-safety-support' | 'GET /site-content/home' | 'GET /site-content/iran-travel-status' | 'GET /site-content/iran-visa-information' | 'GET /site-content/money-in-iran' | 'GET /site-content/privacy' | 'GET /site-content/responsible-travel' | 'GET /site-content/terms' | 'GET /site-content/travel-insurance' | 'GET /site-features' | 'GET /site-navigation' | 'GET /sitemap' | 'GET /tour-categories' | 'GET /tours' | 'GET /tours/{slug}' | 'GET /tours/{slug}/accommodations' | 'GET /tours/{slug}/availability' | 'GET /tours/{slug}/departures' | 'GET /tours/{slug}/experiences' | 'GET /tours/{slug}/itinerary' | 'GET /tours/{slug}/preview' | 'GET /tours/{slug}/questions' | 'GET /tours/{slug}/reviews' | 'GET /tours/{slug}/reviews-summary' | 'GET /tours/{slug}/route' | 'GET /travel-knowledge' | 'GET /travel-status' | 'GET /traveller-stories' | 'POST /booking-intents' | 'POST /brochure-leads' | 'POST /inquiries';
+export type GeneratedPublicApiActiveOperation = 'GET /destinations' | 'GET /destinations/{slug}' | 'GET /homepage' | 'GET /search-suggestions' | 'GET /site-content/about' | 'GET /site-content/accessibility-statement' | 'GET /site-content/booking-cancellation-policy' | 'GET /site-content/contact' | 'GET /site-content/cookie-policy' | 'GET /site-content/faqs' | 'GET /site-content/footer' | 'GET /site-content/header' | 'GET /site-content/health-safety-support' | 'GET /site-content/home' | 'GET /site-content/iran-travel-status' | 'GET /site-content/iran-visa-information' | 'GET /site-content/money-in-iran' | 'GET /site-content/privacy' | 'GET /site-content/responsible-travel' | 'GET /site-content/terms' | 'GET /site-content/travel-insurance' | 'GET /site-features' | 'GET /site-navigation' | 'GET /sitemap' | 'GET /tour-categories' | 'GET /tours' | 'GET /tours/{slug}' | 'GET /tours/{slug}/accommodations' | 'GET /tours/{slug}/availability' | 'GET /tours/{slug}/departures' | 'GET /tours/{slug}/experiences' | 'GET /tours/{slug}/itinerary' | 'GET /tours/{slug}/preview' | 'GET /tours/{slug}/questions' | 'GET /tours/{slug}/reviews' | 'GET /tours/{slug}/reviews-summary' | 'GET /tours/{slug}/route' | 'GET /travel-knowledge' | 'GET /travel-status' | 'GET /traveller-stories' | 'POST /booking-intents' | 'POST /brochure-leads' | 'POST /inquiries';
 export type GeneratedPublicApiBlockedOperation = 'GET /booking-intents/{id}';
-export type GeneratedPublicApiOperationId = 'getPublicHomepage' | 'listPublicTours' | 'getPublicTourBySlug' | 'listPublicTourAvailability' | 'listPublicTourDepartures' | 'listPublicTourQuestions' | 'listPublicTourExperiences' | 'listPublicTravellerStories' | 'listPublicTourAccommodations' | 'getPublicTourReviewsSummary' | 'listPublicTourReviews' | 'listPublicTourRoute' | 'listPublicTourItinerary' | 'listPublicDestinations' | 'getPublicDestinationBySlug' | 'getPublicSitemap' | 'listPublicTourCategories' | 'getPublicSiteNavigation' | 'getPublicSearchSuggestions' | 'getPublicTravelStatus' | 'listPublicTravelKnowledge' | 'getPublicSiteContentHome' | 'getPublicSiteContentHeader' | 'getPublicSiteContentFooter' | 'getPublicSiteContentAbout' | 'getPublicSiteContentContact' | 'getPublicSiteContentFaqs' | 'getPublicSiteContentPrivacy' | 'getPublicSiteContentTerms' | 'getPublicSiteContentResponsibleTravel' | 'getPublicSiteContentIranTravelStatus' | 'getPublicSiteContentIranVisaInformation' | 'getPublicSiteContentMoneyInIran' | 'getPublicSiteContentTravelInsurance' | 'getPublicSiteContentHealthSafetySupport' | 'getPublicSiteContentBookingCancellationPolicy' | 'getPublicSiteContentCookiePolicy' | 'getPublicSiteContentAccessibilityStatement' | 'createPublicInquiry' | 'createPublicBookingIntent' | 'createPublicBrochureLead' | 'getBookingIntent';
-export type GeneratedPublicApiSchemaName = 'PublicHomepageResponse' | 'PublicHomepageStats' | 'PublicHomepageSeo' | 'PublicTourListResponse' | 'PublicTourDetailResponse' | 'PublicAvailabilityListResponse' | 'PublicDepartureListResponse' | 'PublicTourQuestionListResponse' | 'PublicTourExperienceListResponse' | 'PublicTravellerStoryListResponse' | 'PublicTourAccommodationListResponse' | 'PublicTourReviewsSummaryResponse' | 'PublicTourReviewListResponse' | 'PublicTourRouteResponse' | 'PublicDestinationListResponse' | 'PublicDestinationDetailResponse' | 'PublicSitemapResponse' | 'PublicSitemapEntry' | 'PublicTourCategoryListResponse' | 'PublicSearchSuggestionsResponse' | 'PublicTourCategoryListItem' | 'PublicSeo' | 'PublicSearchSuggestion' | 'PublicTourListItem' | 'PublicTourDetail' | 'PublicAvailabilityListItem' | 'PublicDepartureListItem' | 'PublicTourQuestionListItem' | 'PublicTourExperienceFrame' | 'PublicTourExperienceListItem' | 'PublicTravellerStoryListItem' | 'PublicTourAccommodationListItem' | 'PublicTourReviewsAggregate' | 'PublicTourRatingBreakdownItem' | 'PublicTourReviewsSummary' | 'PublicTourReviewListItem' | 'PublicTourRouteStop' | 'PublicTourItineraryDay' | 'PublicTourItineraryResponse' | 'PublicDestinationListItem' | 'PublicDestinationDetail' | 'PublicNavLink' | 'PublicStaticLink' | 'PublicSiteNavigationResponse' | 'PublicSiteRouteKey' | 'PublicSiteCta' | 'PublicSiteHomeSection' | 'PublicSiteHomeContent' | 'PublicSiteHomeContentResponse' | 'PublicSiteNavItem' | 'PublicSiteSocialLink' | 'PublicSiteChromeContent' | 'PublicSiteChromeContentResponse' | 'PublicSiteTrustTitledItem' | 'PublicSiteTrustSection' | 'PublicSiteTrustPageSeo' | 'PublicSiteTrustPageContent' | 'PublicSiteTrustPageContentResponse' | 'CreateInquiryRequest' | 'CreateInquiryResponse' | 'CreateBrochureLeadRequest' | 'CreateBrochureLeadResponse' | 'CreateBookingIntentRequest' | 'PublicBookingIntentStatus' | 'PublicBookingIntentPublicStatus' | 'PublicBookingIntentLinks' | 'CreateBookingIntentSuccessResponse' | 'GetBookingIntentStatusResponse' | 'BookingIntentConflictErrorResponse' | 'BookingIntentResponse' | 'PublicError' | 'PublicApiError' | 'PublicApiNotImplementedError' | 'PublicApiValidationError' | 'PublicApiRateLimitError' | 'PublicApiAbuseBlockedError' | 'PublicApiInternalError' | 'PublicApiNotFoundError' | 'PublicApiTravelStatusUnavailableError' | 'PublicErrorEnvelope' | 'PaginationMeta' | 'PublicTravelStatusState' | 'PublicTravelStatusReviewerLabel' | 'PublicTravelStatusFreshness' | 'PublicOfficialSourceCard' | 'PublicSurfiranOperationalUpdate' | 'PublicTravelStatusCorrectionNotice' | 'PublicTravelStatusHandoff' | 'PublicTravelStatusSection' | 'PublicTravelStatusResponse' | 'PublicTravelKnowledgeItem' | 'PublicTravelKnowledgeResponse';
+export type GeneratedPublicApiOperationId = 'getBookingIntent' | 'listPublicDestinations' | 'getPublicDestinationBySlug' | 'getPublicHomepage' | 'getPublicSearchSuggestions' | 'getPublicSiteContentAbout' | 'getPublicSiteContentAccessibilityStatement' | 'getPublicSiteContentBookingCancellationPolicy' | 'getPublicSiteContentContact' | 'getPublicSiteContentCookiePolicy' | 'getPublicSiteContentFaqs' | 'getPublicSiteContentFooter' | 'getPublicSiteContentHeader' | 'getPublicSiteContentHealthSafetySupport' | 'getPublicSiteContentHome' | 'getPublicSiteContentIranTravelStatus' | 'getPublicSiteContentIranVisaInformation' | 'getPublicSiteContentMoneyInIran' | 'getPublicSiteContentPrivacy' | 'getPublicSiteContentResponsibleTravel' | 'getPublicSiteContentTerms' | 'getPublicSiteContentTravelInsurance' | 'getPublicSiteFeatures' | 'getPublicSiteNavigation' | 'getPublicSitemap' | 'listPublicTourCategories' | 'listPublicTours' | 'getPublicTourBySlug' | 'listPublicTourAccommodations' | 'listPublicTourAvailability' | 'listPublicTourDepartures' | 'listPublicTourExperiences' | 'listPublicTourItinerary' | 'getPublicTourPreviewBySlug' | 'listPublicTourQuestions' | 'listPublicTourReviews' | 'getPublicTourReviewsSummary' | 'listPublicTourRoute' | 'listPublicTravelKnowledge' | 'getPublicTravelStatus' | 'listPublicTravellerStories' | 'createPublicBookingIntent' | 'createPublicBrochureLead' | 'createPublicInquiry';
+export type GeneratedPublicApiSchemaName = 'BookingIntentConflictErrorResponse' | 'BookingIntentResponse' | 'CanonicalIntakeAttribution' | 'CanonicalIntakeConsent' | 'CreateBookingIntentRequest' | 'CreateBookingIntentSuccessResponse' | 'CreateBrochureLeadRequest' | 'CreateBrochureLeadResponse' | 'CreateInquiryRequest' | 'CreateInquiryResponse' | 'GetBookingIntentStatusResponse' | 'PaginationMeta' | 'PublicApiAbuseBlockedError' | 'PublicApiError' | 'PublicApiInternalError' | 'PublicApiNotFoundError' | 'PublicApiNotImplementedError' | 'PublicApiRateLimitError' | 'PublicApiTravelStatusUnavailableError' | 'PublicApiValidationError' | 'PublicAvailabilityListItem' | 'PublicAvailabilityListResponse' | 'PublicBookingIntentLinks' | 'PublicBookingIntentPublicStatus' | 'PublicBookingIntentStatus' | 'PublicDepartureListItem' | 'PublicDepartureListResponse' | 'PublicDestinationDetail' | 'PublicDestinationDetailResponse' | 'PublicDestinationListItem' | 'PublicDestinationListResponse' | 'PublicError' | 'PublicErrorEnvelope' | 'PublicHomepageResponse' | 'PublicHomepageSeo' | 'PublicHomepageStats' | 'PublicNavLink' | 'PublicOfficialSourceCard' | 'PublicSearchSuggestion' | 'PublicSearchSuggestionsResponse' | 'PublicSeo' | 'PublicSiteChromeContent' | 'PublicSiteChromeContentResponse' | 'PublicSiteCta' | 'PublicSiteFeaturesResponse' | 'PublicSiteFeatureStates' | 'PublicSiteHomeContent' | 'PublicSiteHomeContentResponse' | 'PublicSiteHomeSection' | 'PublicSitemapEntry' | 'PublicSitemapResponse' | 'PublicSiteNavigationResponse' | 'PublicSiteNavItem' | 'PublicSiteRouteKey' | 'PublicSiteSocialLink' | 'PublicSiteTrustPageContent' | 'PublicSiteTrustPageContentResponse' | 'PublicSiteTrustPageSeo' | 'PublicSiteTrustSection' | 'PublicSiteTrustTitledItem' | 'PublicStaticLink' | 'PublicSurfiranOperationalUpdate' | 'PublicTourAccommodationListItem' | 'PublicTourAccommodationListResponse' | 'PublicTourCategoryListItem' | 'PublicTourCategoryListResponse' | 'PublicTourDetail' | 'PublicTourDetailEditorial' | 'PublicTourDetailResponse' | 'PublicTourExperienceFrame' | 'PublicTourExperienceListItem' | 'PublicTourExperienceListResponse' | 'PublicTourItineraryDay' | 'PublicTourItineraryResponse' | 'PublicTourListItem' | 'PublicTourListResponse' | 'PublicTourQuestionListItem' | 'PublicTourQuestionListResponse' | 'PublicTourRatingBreakdownItem' | 'PublicTourReviewListItem' | 'PublicTourReviewListResponse' | 'PublicTourReviewsAggregate' | 'PublicTourReviewsSummary' | 'PublicTourReviewsSummaryResponse' | 'PublicTourRouteResponse' | 'PublicTourRouteStop' | 'PublicTourTailorJourney' | 'PublicTravelKnowledgeItem' | 'PublicTravelKnowledgeResponse' | 'PublicTravellerStoryListItem' | 'PublicTravellerStoryListResponse' | 'PublicTravelStatusCorrectionNotice' | 'PublicTravelStatusFreshness' | 'PublicTravelStatusHandoff' | 'PublicTravelStatusResponse' | 'PublicTravelStatusReviewerLabel' | 'PublicTravelStatusSection' | 'PublicTravelStatusState';

package/dist/generated/public-api-v1.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED FILE. DO NOT EDIT.
-// Source: server/openapi/public-api-v1.yaml
-// Generator: scripts/generate-public-api-v1-types.cjs
+// Contract snapshot: contract/public-api-v1.yaml
+// Generator: scripts/generate-public-api-v1.cjs v1.0.0
 export {};

package/dist/index.d.ts

@@ -1,4 +1,4 @@
 export { createPublicApiClient } from './client.js';
-export type { PublicApiErrorCode, PublicApiV1Path, PublicApiV1RouteMap, PublicError, PublicErrorEnvelope, PublicApiError, PublicApiNotImplementedError, PublicApiValidationError, PublicApiRateLimitError, PublicApiAbuseBlockedError, PublicTourListItem, PublicTourDetail, PublicDepartureListItem, PublicAvailabilityStatus, PublicAvailabilityListItem, PublicAvailabilityListResponse, PublicDestinationListItem, PublicDestinationDetail, PublicTourListResponse, PublicTourDetailResponse, PublicDepartureListResponse, PublicDestinationListResponse, PublicDestinationDetailResponse, PublicApiResult, ListPublicToursParams, ListPublicDeparturesParams, ListPublicTourAvailabilityParams, ListPublicDestinationsParams, PublicInquiryRequest, PublicInquiryResponse, PublicBookingIntentRequest, PublicBookingIntentData, PublicBookingIntentResponse, PublicHomepageStats, PublicHomepageSeo, PublicHomepageResponse, PublicSitemapEntry, PublicSitemapResponse, PublicNavLink, PublicStaticLink, PublicSiteNavigationResponse, PublicTourCategoryListItem, PublicTourCategoryListResponse, PublicSearchSuggestion, PublicSearchSuggestionsResponse, PublicSiteRouteKey, PublicSiteCta, PublicSiteHomeSectionType, PublicSiteHomeSection, PublicSiteHomeContent, PublicSiteHomeContentResponse, PublicSiteNavItem, PublicSiteSocialPlatform, PublicSiteSocialLink, PublicSiteChromeContent, PublicSiteChromeContentResponse, PublicSiteTrustSectionType, PublicSiteTrustTitledItem, PublicSiteTrustParagraphGroup, PublicSiteTrustTitledItemList, PublicSiteTrustBulletList, PublicSiteTrustSection, PublicSiteTrustPageSeo, PublicSiteTrustPageContent, PublicSiteTrustPageContentResponse, PublicTravelStatusState, PublicTravelStatusFreshness, PublicSurfiranOperationalUpdate, PublicTravelStatusResponse, PublicTravelKnowledgeType, PublicTravelKnowledgeItem, PublicTravelKnowledgeResponse, GetPublicSitemapParams, GetPublicSearchSuggestionsParams, GetPublicTravelKnowledgeParams, ListPublicTourCategoriesParams, PublicTravellerStoryListItem, PublicTravellerStoryListResponse, ListPublicTravellerStoriesParams, PublicTourQuestionListItem, PublicTourQuestionListResponse, ListPublicTourQuestionsParams, PublicTourExperienceFrame, PublicTourExperienceListItem, PublicTourExperienceListResponse, ListPublicTourExperiencesParams, PublicTourAccommodationListItem, PublicTourAccommodationListResponse, ListPublicTourAccommodationsParams, PublicTourReviewsAggregate, PublicTourRatingBreakdownItem, PublicTourReviewsSummary, PublicTourReviewsSummaryResponse, PublicTourReviewListItem, PublicTourReviewListResponse, PublicTourReviewsLimit, ListPublicTourReviewsParams, PublicTourRouteStop, PublicTourRouteResponse, ListPublicTourRouteParams, PublicItineraryMealCode, PublicTourItineraryDay, PublicTourItineraryResponse, ListPublicTourItineraryParams, PublicBrochureLeadRequest, PublicBrochureLeadResponse, } from './types.js';
+export type { PublicApiErrorCode, PublicApiV1Path, PublicApiV1RouteMap, PublicError, PublicErrorEnvelope, PublicApiError, PublicApiNotImplementedError, PublicApiValidationError, PublicApiRateLimitError, PublicApiAbuseBlockedError, PublicTourListItem, PublicTourDetail, PublicTourDetailEditorial, PublicDepartureListItem, PublicAvailabilityStatus, PublicAvailabilityListItem, PublicAvailabilityListResponse, PublicDestinationListItem, PublicDestinationDetail, PublicTourListResponse, PublicTourDetailResponse, PublicDepartureListResponse, PublicDestinationListResponse, PublicDestinationDetailResponse, PublicApiResult, ListPublicToursParams, GetPublicTourPreviewParams, ListPublicDeparturesParams, ListPublicTourAvailabilityParams, ListPublicDestinationsParams, PublicInquiryRequest, PublicTourTailorJourney, PublicInquiryResponse, PublicBookingIntentRequest, PublicBookingIntentData, PublicBookingIntentResponse, PublicHomepageStats, PublicHomepageSeo, PublicHomepageResponse, PublicSitemapEntry, PublicSitemapResponse, PublicNavLink, PublicStaticLink, PublicSiteNavigationResponse, PublicTourCategoryListItem, PublicTourCategoryListResponse, PublicSearchSuggestion, PublicSearchSuggestionsResponse, PublicSiteRouteKey, PublicSiteCta, PublicSiteHomeSectionType, PublicSiteHomeSection, PublicSiteHomeContent, PublicSiteHomeContentResponse, PublicSiteNavItem, PublicSiteSocialPlatform, PublicSiteSocialLink, PublicSiteChromeContent, PublicSiteChromeContentResponse, PublicSiteFeatureStates, PublicSiteFeaturesResponse, PublicSiteTrustSectionType, PublicSiteTrustTitledItem, PublicSiteTrustParagraphGroup, PublicSiteTrustTitledItemList, PublicSiteTrustBulletList, PublicSiteTrustSection, PublicSiteTrustPageSeo, PublicSiteTrustPageContent, PublicSiteTrustPageContentResponse, PublicTravelStatusState, PublicTravelStatusFreshness, PublicSurfiranOperationalUpdate, PublicTravelStatusResponse, PublicTravelKnowledgeType, PublicTravelKnowledgeItem, PublicTravelKnowledgeResponse, GetPublicSitemapParams, GetPublicSearchSuggestionsParams, GetPublicTravelKnowledgeParams, ListPublicTourCategoriesParams, PublicTravellerStoryListItem, PublicTravellerStoryListResponse, ListPublicTravellerStoriesParams, PublicTourQuestionListItem, PublicTourQuestionListResponse, ListPublicTourQuestionsParams, PublicTourExperienceFrame, PublicTourExperienceListItem, PublicTourExperienceListResponse, ListPublicTourExperiencesParams, PublicTourAccommodationListItem, PublicTourAccommodationListResponse, ListPublicTourAccommodationsParams, PublicTourReviewsAggregate, PublicTourRatingBreakdownItem, PublicTourReviewsSummary, PublicTourReviewsSummaryResponse, PublicTourReviewListItem, PublicTourReviewListResponse, PublicTourReviewsLimit, ListPublicTourReviewsParams, PublicTourRouteStop, PublicTourRouteResponse, ListPublicTourRouteParams, PublicItineraryMealCode, PublicTourItineraryDay, PublicTourItineraryResponse, ListPublicTourItineraryParams, PublicBrochureLeadRequest, PublicBrochureLeadResponse, } from './types.js';
 export type { PublicApiClientOptions } from './client.js';
 export type { GeneratedPublicApiVersion, GeneratedPublicApiPath, GeneratedPublicApiOperation, GeneratedPublicApiActiveOperation, GeneratedPublicApiBlockedOperation, GeneratedPublicApiOperationId, GeneratedPublicApiSchemaName, } from './generated/public-api-v1.js';

package/dist/types.d.ts

@@ -1,10 +1,17 @@
 export type PublicApiErrorCode = 'PUBLIC_API_ROUTE_NOT_IMPLEMENTED' | 'PUBLIC_API_INTERNAL_ERROR' | 'PUBLIC_API_TOUR_NOT_FOUND' | 'PUBLIC_API_DESTINATION_NOT_FOUND' | 'PUBLIC_API_INVALID_QUERY' | 'PUBLIC_API_BOOKING_INTENT_VALIDATION_ERROR' | 'PUBLIC_API_IDEMPOTENCY_CONFLICT' | 'PUBLIC_API_RATE_LIMITED' | 'PUBLIC_API_ABUSE_BLOCKED' | 'PUBLIC_API_TRAVEL_STATUS_UNAVAILABLE' | 'PUBLIC_API_SITE_CONTENT_UNAVAILABLE' | 'PUBLIC_API_CLIENT_TIMEOUT';
-export type PublicApiV1Path = '/homepage' | '/site-navigation' | '/sitemap' | '/search-suggestions' | '/tour-categories' | '/tours' | '/tours/{slug}' | '/tours/{slug}/departures' | '/tours/{slug}/availability' | '/tours/{slug}/reviews' | '/destinations' | '/destinations/{slug}' | '/inquiries' | '/booking-intents' | '/travel-status' | '/travel-knowledge' | '/site-content/home' | '/site-content/header' | '/site-content/footer' | '/site-content/about' | '/site-content/contact' | '/site-content/faqs' | '/site-content/privacy' | '/site-content/terms' | '/site-content/responsible-travel' | '/site-content/iran-travel-status' | '/site-content/iran-visa-information' | '/site-content/money-in-iran' | '/site-content/travel-insurance' | '/site-content/health-safety-support' | '/site-content/booking-cancellation-policy' | '/site-content/cookie-policy' | '/site-content/accessibility-statement';
+export type PublicApiV1Path = '/homepage' | '/site-navigation' | '/site-features' | '/sitemap' | '/search-suggestions' | '/tour-categories' | '/tours' | '/tours/{slug}' | '/tours/{slug}/preview' | '/tours/{slug}/departures' | '/tours/{slug}/availability' | '/tours/{slug}/reviews' | '/destinations' | '/destinations/{slug}' | '/inquiries' | '/booking-intents' | '/travel-status' | '/travel-knowledge' | '/site-content/home' | '/site-content/header' | '/site-content/footer' | '/site-content/about' | '/site-content/contact' | '/site-content/faqs' | '/site-content/privacy' | '/site-content/terms' | '/site-content/responsible-travel' | '/site-content/iran-travel-status' | '/site-content/iran-visa-information' | '/site-content/money-in-iran' | '/site-content/travel-insurance' | '/site-content/health-safety-support' | '/site-content/booking-cancellation-policy' | '/site-content/cookie-policy' | '/site-content/accessibility-statement';
 export type PublicError = {
     code: string;
     message: string;
     status: number;
     requestId: string | null;
+    /**
+     * Optional public-safe diagnostic object (contract schema PublicError.details).
+     * Shape varies by error code — e.g. the destination-not-found error may
+     * carry `{ redirectSlug: string }` when the requested slug was renamed or
+     * merged into another place. Absent when there is nothing safe to expose.
+     */
+    details?: Record<string, unknown>;
 };
 export type PublicErrorEnvelope = {
     error: PublicError;
@@ -93,6 +100,16 @@ export type PublicTourListItem = {
      * here — it has no fixed tour to attach to; it is the `/inquire` flow.
      */
     travelFormat?: string | null;
+    /**
+     * True when staff have flagged this tour as a "Signature Trip" from
+     * `tour_packages.is_signature` (draft migration
+     * `20260820_tour_packages_is_signature.sql`, not yet executed in
+     * production, so this is `false` for every tour today). Independent of the
+     * homepage's positional "Signature Iran Tours" grid, which does not read
+     * this column. Optional so a response projected before this field existed
+     * still typechecks; absent means false.
+     */
+    isSignature?: boolean;
     /**
      * Owner directive 2026-08-07 (full Home design application): staff-authored
      * "was" price display for a current deal
@@ -121,6 +138,20 @@ export type PublicTourListItem = {
      * published.
      */
     maxGroupSize?: number | null;
+    /**
+     * Staff-authored city the tour begins in (`tour_packages.start_city`).
+     * Published so a curated value can override the endpoints the card otherwise
+     * derives from itinerary day objects, whose fallback reaches a day title when
+     * the day itself names no city. Null when unpublished — never backfilled and
+     * never guessed, so a consumer should fall back to its own derivation rather
+     * than treat null as "this tour has no start city".
+     */
+    startCity?: string | null;
+    /**
+     * Staff-authored city the tour ends in (`tour_packages.finish_city`). Same
+     * provenance and null semantics as `startCity`.
+     */
+    finishCity?: string | null;
     status: string;
     updatedAt: string | null;
 };
@@ -133,6 +164,92 @@ export type PublicTourDetail = PublicTourListItem & {
     gallery: string[];
     seoTitle: string | null;
     seoDescription: string | null;
+    editorial?: PublicTourDetailEditorial | null;
+    /**
+     * Operator-configured "Tailor This Journey" call to action.
+     *
+     * Absent when no operator has configured the module for this tour, so a
+     * consumer keeps whatever default tailor-made hand-off it already renders.
+     * Present with `enabled: false` and no other field when an operator switched
+     * it off — that is the signal to render nothing for this tour.
+     *
+     * The call to action leads to a personalised-proposal inquiry only. It never
+     * represents a booking, reservation, inventory hold, price guarantee,
+     * payment, or confirmed departure.
+     */
+    tailorThisJourney?: PublicTourTailorJourney;
+    /** Operator-curated related tours (PR-13 / OA-9), in the pinned order. Empty when none are pinned/published. */
+    relatedJourneys?: PublicTourListItem[];
+};
+export type PublicTourTailorJourney = {
+    enabled: boolean;
+    /** Canonical public slug of the source tour, for inquiry attribution. Present only when enabled. */
+    tourSlug?: string;
+    /** Operator override for the headline. Null means the consumer uses its own default copy. */
+    ctaTitle?: string | null;
+    /** Operator override for the supporting text. Null means the consumer uses its own default copy. */
+    ctaText?: string | null;
+    /** Published customisation prompts, in the operator's authored order. */
+    suggestedCustomizationOptions?: string[];
+};
+export type PublicTourDetailEditorial = {
+    tourType: string | null;
+    tourCode: string | null;
+    breadcrumbTitle: string | null;
+    authorName: string | null;
+    authorUrl: string | null;
+    authorRole: string | null;
+    lastReviewedAt: string | null;
+    guideLabel: string | null;
+    groupSizeNote: string | null;
+    paceLabel: string | null;
+    paceNote: string | null;
+    comfortLabel: string | null;
+    comfortNote: string | null;
+    guideNote: string | null;
+    startLabel: string | null;
+    endLabel: string | null;
+    startEndNote: string | null;
+    overviewParagraphs: string[];
+    heroAltText: string | null;
+    heroObjectPosition: string | null;
+    galleryAltTexts: string[];
+    galleryObjectPositions: string[];
+    heroVideo: {
+        url: string;
+        posterUrl: string | null;
+        durationLabel: string | null;
+    } | null;
+    heroQuote: {
+        text: string;
+        authorName: string | null;
+        travelDate: string | null;
+        sourceUrl: string | null;
+    } | null;
+    payment?: {
+        depositSummary: string | null;
+        balanceSummary: string | null;
+        cancellationSummary: string | null;
+        paymentSummary: string | null;
+    };
+    operator?: {
+        body: string | null;
+        imageUrl: string | null;
+        aboutUrl: string | null;
+        licenceLabel: string | null;
+        officeLabel: string | null;
+        metrics: Array<{
+            value: string;
+            label: string;
+        }>;
+    };
+    goodToKnow: Array<{
+        title: string;
+        body: string;
+        ctaLabel: string | null;
+        href: string | null;
+        icon: 'info' | 'card' | 'shield' | 'globe' | 'people' | 'route' | null;
+    }>;
 };
 export type PublicDepartureListItem = {
     id: number;
@@ -190,6 +307,10 @@ export type PublicTourReviewsAggregate = {
     averageRating: number | null;
     reviewCount: number;
     source: string | null;
+    /** Public URL for the source aggregate, when the CRM has verified one. */
+    sourceUrl?: string | null;
+    /** Source platform's operator-wide review count, when published. */
+    operatorReviewCount?: number | null;
     /** Most recent staff entry among included reviews — the "as of" honesty marker. */
     lastVerifiedAt: string | null;
 };
@@ -207,9 +328,13 @@ export type PublicTourReviewListItem = {
     authorName: string | null;
     partyType: string | null;
     reviewDate: string | null;
+    /** Source-backed month/year label when the original review has no known day. */
+    reviewDateLabel?: string | null;
     rating: number;
     title: string;
     body: string;
+    /** Public attribution for the operator reply, without the reply body. */
+    replyAuthor?: string | null;
     deepLink: string | null;
 };
 /** Meal codes a day can include. Always returned in B,L,D order. */
@@ -239,6 +364,13 @@ export type PublicTourItineraryDay = {
     includedActivities: string[];
     optionalActivities: string[];
     landmarks: string[];
+    transportNote: string | null;
+    extraNightsNote?: string | null;
+    /** Alt text aligned by index with mediaUrls. Older runtime responses may omit it. */
+    mediaAltTexts?: string[];
+    /** @deprecated Use mediaAltTexts. Retained for older consumers. */
+    mediaAltText?: string | null;
+    mediaUrls: string[];
 };
 export type PublicTourRouteStop = {
     id: number;
@@ -265,7 +397,14 @@ export type PublicAvailabilityListItem = {
     currency: string | null;
     priceDisplay: string | null;
     promoLabel?: string | null;
+    publicNote?: string | null;
     roomBasis?: 'twin_share' | 'double_share' | 'single_room' | 'triple_share' | 'family_room' | null;
+    roomOptions?: Array<{
+        basis: 'twin_share' | 'double_share' | 'single_room' | 'private_departure';
+        label: string;
+        priceDisplay: string;
+        minimumTravelers?: number;
+    }>;
     remainingCapacityBucket: 'available' | 'limited' | 'full' | 'unconstrained' | 'unknown';
     /**
      * Owner directive 2026-08-07: full Home design application — limited-state
@@ -278,6 +417,26 @@ export type PublicAvailabilityListItem = {
     ctaUrl?: string;
     updatedAt: string | null;
 };
+export type PublicSeoRobots = {
+    index: boolean;
+    follow: boolean;
+};
+/**
+ * Public-safe SEO projection (contract schema PublicSeo). The og fields
+ * default to mirroring title/description; destinations with a published place
+ * profile may carry operator-authored og overrides, a canonical override, and
+ * a robots directive. robots is null when no published source declares one.
+ */
+export type PublicSeo = {
+    title: string | null;
+    description: string | null;
+    canonicalPath: string;
+    ogTitle: string | null;
+    ogDescription: string | null;
+    ogImage: string | null;
+    schemaType: string | null;
+    robots?: PublicSeoRobots | null;
+};
 export type PublicDestinationListItem = {
     id: number;
     slug: string;
@@ -285,11 +444,15 @@ export type PublicDestinationListItem = {
     summary: string | null;
     heroImage: string | null;
     updatedAt: string | null;
+    /** Optional so consumers stay compatible with servers predating the seo projection. */
+    seo?: PublicSeo;
 };
 export type PublicDestinationDetail = PublicDestinationListItem & {
     description: string | null;
     seoTitle: string | null;
     seoDescription: string | null;
+    /** Operator-authored JSON-LD overrides from the published place profile. */
+    structuredDataOverrides?: Record<string, unknown> | null;
 };
 export type PublicTourListResponse = {
     data: PublicTourListItem[];
@@ -361,18 +524,58 @@ export type PublicInquiryRequest = {
     name: string;
     email: string;
     message: string;
+    /**
+     * Stable event identifier shared by the structured API submission and any
+     * transport fallback. The server creates one when an older client omits it.
+     */
+    leadEventId?: string | null;
+    phone?: string | null;
+    travelersCount?: number | null;
+    locale?: string | null;
+    formId?: string | null;
+    attribution?: {
+        landingPage?: string | null;
+        referrer?: string | null;
+        utmSource?: string | null;
+        utmMedium?: string | null;
+        utmCampaign?: string | null;
+        utmContent?: string | null;
+        utmTerm?: string | null;
+        sessionId?: string | null;
+        clickId?: string | null;
+    } | null;
+    consent?: {
+        purpose: string;
+        policyVersion: string;
+        /** ISO-8601 timestamp with an explicit timezone. */
+        capturedAt: string;
+    } | null;
     tourSlug?: string | null;
+    /**
+     * Closed public intent used by the CRM sales queue for inquiry routing.
+     * `tailor_made` requires a `tourSlug` whose tour is publicly eligible and
+     * whose Tailor This Journey call to action is enabled.
+     */
+    requestType?: 'tour_inquiry' | 'waiting_list' | 'specialist_question' | 'tailor_made' | null;
     /**
      * Optional requested departure date (YYYY-MM-DD) when the inquiry was
      * submitted from a specific public departure card. No departure identifier or
      * commercial data is sent.
      */
     departureDate?: string | null;
+    /**
+     * Customisation options the traveller selected from the ones published for
+     * the named tour. Requires `tourSlug` and `requestType: 'tailor_made'`, and
+     * every entry must match one of that tour's published
+     * `suggestedCustomizationOptions`. Free-text preferences belong in `message`.
+     */
+    customizationOptions?: string[] | null;
 };
 export type PublicInquiryResponse = {
     data: {
         accepted: boolean;
         inquiryId: string;
+        leadEventId: string;
     };
 };
 export type PublicBookingIntentRequest = {
@@ -383,10 +586,16 @@ export type PublicBookingIntentRequest = {
     leadTravelerEmail?: string | null;
     leadTravelerPhone?: string | null;
     notes?: string | null;
+    leadEventId?: string | null;
+    locale?: string | null;
+    formId?: string | null;
+    attribution?: PublicInquiryRequest['attribution'];
+    consent?: PublicInquiryRequest['consent'];
 };
 export type PublicBookingIntentStatus = 'received' | 'needs_review' | 'expired' | 'cancelled' | 'converted_internal';
 export type PublicBookingIntentData = {
     publicId: string;
+    leadEventId: string;
     status: PublicBookingIntentStatus;
     tourSlug: string;
     departureId: number | null;
@@ -411,11 +620,17 @@ export type PublicBrochureLeadRequest = {
     utmSource?: string | null;
     utmMedium?: string | null;
     utmCampaign?: string | null;
+    leadEventId?: string | null;
+    locale?: string | null;
+    formId?: string | null;
+    attribution?: PublicInquiryRequest['attribution'];
+    consent?: PublicInquiryRequest['consent'];
 };
 export type PublicBrochureLeadResponse = {
     data: {
         accepted: boolean;
         leadId: string;
+        leadEventId: string;
     };
 };
 export type PublicHomepageStats = {
@@ -550,7 +765,7 @@ export type PublicTravelStatusResponse = {
     };
 };
 /** Closed public route vocabulary. Routing is resolved by the rendering layer. */
-export type PublicSiteRouteKey = 'home' | 'tours' | 'tour-categories' | 'destinations' | 'about' | 'contact' | 'inquire' | 'faqs' | 'privacy' | 'terms' | 'responsible-travel' | 'iran-travel-status' | 'iran-visa-information' | 'money-in-iran' | 'travel-insurance' | 'health-safety-support' | 'booking-cancellation-policy' | 'cookie-policy' | 'accessibility-statement';
+export type PublicSiteRouteKey = 'home' | 'tours' | 'tour-categories' | 'destinations' | 'about' | 'contact' | 'inquire' | 'faqs' | 'privacy' | 'terms' | 'responsible-travel' | 'iran-travel-status' | 'iran-visa-information' | 'money-in-iran' | 'travel-insurance' | 'health-safety-support' | 'booking-cancellation-policy' | 'cookie-policy' | 'accessibility-statement' | 'reviews' | 'travel-trade';
 export type PublicSiteCta = {
     label: string;
     routeKey: PublicSiteRouteKey;
@@ -637,14 +852,87 @@ export type PublicSiteTrustPageContent = {
 export type PublicSiteTrustPageContentResponse = {
     data: PublicSiteTrustPageContent | null;
 };
+/**
+ * Effective on/off state for every known public website feature.
+ *
+ * Closed by construction: the key set is owned by the API's feature registry,
+ * so a consumer can only branch on a feature the contract actually declares.
+ * The payload is booleans only — it never carries who changed a setting, when,
+ * or whether a master control is involved.
+ *
+ * These configure presentation. Booking, payment, inventory, guaranteed
+ * departure, availability, price validity, cancellation, and visa state are
+ * authoritative operational facts and never appear here.
+ */
+export type PublicSiteFeatureStates = {
+    /**
+     * True when the website may offer tour comparison. When false, every Compare
+     * control is removed and the comparison page is unavailable. Comparison
+     * selections already stored in a visitor's browser are not affected.
+     */
+    compareTours: boolean;
+    /**
+     * True when the website may show traveller reviews and ratings. When false,
+     * review sections are removed from tour pages, the homepage, the tours
+     * catalog, and the tailor-made enquiry page, the dedicated reviews page is
+     * unavailable, and review ratings are omitted from structured data.
+     */
+    tourReviews: boolean;
+    /**
+     * True when the website may show deal ribbons, previous prices, and savings
+     * notes on tour cards. When false, those promotional marks are hidden while
+     * current prices and availability stay visible.
+     */
+    dealBadges: boolean;
+    /**
+     * True when the website may offer the email-gated PDF brochure download on
+     * tour pages. When false, every brochure control and the download dialog are
+     * removed.
+     */
+    brochureDownload: boolean;
+    /**
+     * True when the website may show the published traveller questions section
+     * on tour pages. When false, the section is removed and the questions are
+     * omitted from structured data.
+     */
+    tourQuestions: boolean;
+    /**
+     * True when the website may show the related-tours rail on tour pages. When
+     * false, the rail is removed.
+     */
+    relatedTours: boolean;
+    /**
+     * True when the website may promote the tailor-made service on tour pages
+     * and the tours catalog. When false, those teaser sections are removed;
+     * tailor-made pages stay reachable directly.
+     */
+    tailorMadeTeaser: boolean;
+    /**
+     * True when the website may show the guided trip-finder widget on the
+     * homepage. When false, the widget is removed.
+     */
+    tripFinder: boolean;
+    /**
+     * True when the website may show the traveller moments and stories section
+     * on the homepage. When false, the section is removed.
+     */
+    travellerStories: boolean;
+};
+export type PublicSiteFeaturesResponse = {
+    data: {
+        features: PublicSiteFeatureStates;
+    };
+};
 export type PublicApiV1RouteMap = {
     'GET /homepage': PublicHomepageResponse;
     'GET /site-navigation': PublicSiteNavigationResponse;
+    'GET /site-features': PublicSiteFeaturesResponse;
     'GET /sitemap': PublicSitemapResponse;
     'GET /search-suggestions': PublicSearchSuggestionsResponse;
     'GET /tour-categories': PublicTourCategoryListResponse;
     'GET /tours': PublicTourListResponse;
     'GET /tours/{slug}': PublicTourDetailResponse;
+    'GET /tours/{slug}/preview': PublicTourDetailResponse;
     'GET /tours/{slug}/departures': PublicDepartureListResponse;
     'GET /tours/{slug}/availability': PublicAvailabilityListResponse;
     'GET /tours/{slug}/reviews': PublicTourReviewListResponse;
@@ -698,6 +986,10 @@ export type ListPublicDeparturesParams = {
     limit?: number;
     cursor?: string;
 };
+export type GetPublicTourPreviewParams = {
+    /** Short-lived signed candidate-preview token minted by the CRM (ADR-0022). Required. */
+    token: string;
+};
 export type ListPublicTourQuestionsParams = {
     limit?: number;
 };

package/dist/types.js

@@ -1,3 +1,3 @@
-// TypeScript interfaces aligned with server/openapi/public-api-v1.yaml v0.8.0
+// TypeScript interfaces aligned with server/openapi/public-api-v1.yaml v0.9.0
 // Zero runtime code. Types only.
 export {};

package/package.json

@@ -1,8 +1,25 @@
 {
   "name": "@surfiran/public-api-client",
-  "version": "0.1.0",
+  "version": "0.11.0",
   "description": "TypeScript types and client for SURFIRAN CRM Public API V1",
   "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mehdi360/surfiran-public-api-client.git",
+    "directory": "."
+  },
+  "bugs": {
+    "url": "https://github.com/mehdi360/surfiran-public-api-client/issues"
+  },
+  "homepage": "https://github.com/mehdi360/surfiran-public-api-client",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -16,16 +33,29 @@
     }
   },
   "files": [
-    "dist",
-    "README.md"
+    "README.md",
+    "dist/client.d.ts",
+    "dist/client.js",
+    "dist/generated/public-api-v1.d.ts",
+    "dist/generated/public-api-v1.js",
+    "dist/index.d.ts",
+    "dist/index.js",
+    "dist/types.d.ts",
+    "dist/types.js"
   ],
   "scripts": {
-    "generate": "node ../../scripts/generate-public-api-v1-types.cjs",
     "build": "rm -rf dist && tsc -p tsconfig.json",
-    "prepack": "npm run typecheck && npm test && npm run build",
+    "generate": "node scripts/generate-public-api-v1.cjs",
+    "prepack": "npm run verify:contract && npm run verify:package && npm run verify:generated && npm run typecheck && npm test && npm run build",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "verify:generated": "npm run generate && git diff --exit-code -- src/generated/public-api-v1.ts"
+    "verify:contract": "node scripts/verify-contract.cjs",
+    "verify:generated": "node scripts/verify-generated.cjs",
+    "verify:package": "node scripts/verify-package.cjs",
+    "verify:pack": "node scripts/verify-pack.cjs",
+    "verify:publication-preflight": "node scripts/verify-publication-preflight.cjs",
+    "create:provenance": "node scripts/create-provenance.cjs",
+    "verify:provenance": "node scripts/verify-provenance.cjs"
   },
   "dependencies": {},
   "devDependencies": {