feat(#102): validation NIR (format + clé 2A/2B) + warning cohérence

Made-with: Cursor

backend/src/routes/auth/auth.service.ts

@@ -23,6 +23,7 @@ import { ParentsChildren } from 'src/entities/parents_children.entity';
 import { AssistanteMaternelle } from 'src/entities/assistantes_maternelles.entity';
 import { LoginDto } from './dto/login.dto';
 import { AppConfigService } from 'src/modules/config/config.service';
+import { validateNir } from 'src/common/utils/nir.util';
 
 @Injectable()
 export class AuthService {
@@ -325,6 +326,18 @@ export class AuthService {
             );
         }
 
+        const nirNormalized = (dto.nir || '').replace(/\s/g, '').toUpperCase();
+        const nirValidation = validateNir(nirNormalized, {
+            dateNaissance: dto.date_naissance,
+        });
+        if (!nirValidation.valid) {
+            throw new BadRequestException(nirValidation.error || 'NIR invalide');
+        }
+        if (nirValidation.warning) {
+            // Warning uniquement : on ne bloque pas (AM souvent étrangères, DOM-TOM, Corse)
+            console.warn('[inscrireAMComplet] NIR warning:', nirValidation.warning, 'email=', dto.email);
+        }
+
         const existe = await this.usersService.findByEmailOrNull(dto.email);
         if (existe) {
             throw new ConflictException('Un compte avec cet email existe déjà');
@@ -370,7 +383,7 @@ export class AuthService {
             const am = amRepo.create({
                 user_id: userEnregistre.id,
                 approval_number: dto.numero_agrement,
-                nir: dto.nir,
+                nir: nirNormalized,
                 max_children: dto.capacite_accueil,
                 biography: dto.biographie,
                 residence_city: dto.ville ?? undefined,