@fiado/type-kit 3.64.0 → 3.66.0

package/_test_/unit/platformRbac/dtos/CreateTenantRequest.test.ts

@@ -1,68 +1,68 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
-
-describe('CreateTenantRequest', () => {
-    const valid = {
-        tenantId: 'acme-mx',
-        displayName: 'Acme México',
-        emailDomain: 'acme.com',
-        tablePrefix: 'acme',
-        adminEmail: 'admin@acme.com',
-        adminName: 'Admin Acme',
-        region: 'us-east-1',
-        mfaRequired: true,
-        passwordMinLength: 12,
-    };
-
-    it('valida happy path (0 errores)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, valid);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
-        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
-        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si adminEmail es inválido', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
-    });
-
-    it('falla si tenantId tiene mayúsculas', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si passwordMinLength es menor a 8', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
-    });
-
-    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
-        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
-        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
-        const dto = plainToInstance(
-            CreateTenantRequest,
-            { ...valid, temporaryPassword: 'Secreto123!' },
-            { excludeExtraneousValues: true },
-        );
-        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
-        // sanity: una prop sí declarada en el contrato sí sobrevive
-        expect(dto.tenantId).toBe('acme-mx');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
+
+describe('CreateTenantRequest', () => {
+    const valid = {
+        tenantId: 'acme-mx',
+        displayName: 'Acme México',
+        emailDomain: 'acme.com',
+        tablePrefix: 'acme',
+        adminEmail: 'admin@acme.com',
+        adminName: 'Admin Acme',
+        region: 'us-east-1',
+        mfaRequired: true,
+        passwordMinLength: 12,
+    };
+
+    it('valida happy path (0 errores)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, valid);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
+        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
+        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si adminEmail es inválido', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
+    });
+
+    it('falla si tenantId tiene mayúsculas', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si passwordMinLength es menor a 8', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
+    });
+
+    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
+        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
+        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
+        const dto = plainToInstance(
+            CreateTenantRequest,
+            { ...valid, temporaryPassword: 'Secreto123!' },
+            { excludeExtraneousValues: true },
+        );
+        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
+        // sanity: una prop sí declarada en el contrato sí sobrevive
+        expect(dto.tenantId).toBe('acme-mx');
+    });
+});

package/_test_/unit/platformRbac/tenantTypes.test.ts

@@ -0,0 +1,32 @@
+import { TenantType, levelsOf, tableSuffixForLevel, scopeRankOrder } from '../../../src/platformRbac/tenantTypes';
+import { PermissionScope } from '../../../src/platformRbac/enums/PermissionScope';
+
+describe('tenantTypes', () => {
+    it('retail define RETAILER>STORE', () => {
+        expect(levelsOf(TenantType.RETAIL)).toEqual([PermissionScope.RETAILER, PermissionScope.STORE]);
+    });
+
+    it('scopeRankOrder = [PLATFORM, TENANT, RETAILER, STORE] (retail único tipo hoy)', () => {
+        expect(scopeRankOrder()).toEqual([
+            PermissionScope.PLATFORM,
+            PermissionScope.TENANT,
+            PermissionScope.RETAILER,
+            PermissionScope.STORE,
+        ]);
+    });
+
+    it('tableSuffixForLevel mapea cada nivel de retail a su sufijo de tabla', () => {
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.RETAILER)).toBe('SharedRetailer');
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.STORE)).toBe('SharedStore');
+    });
+
+    it('tableSuffixForLevel devuelve undefined para un nivel no mapeado (PLATFORM/TENANT son fijos)', () => {
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.PLATFORM)).toBeUndefined();
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.TENANT)).toBeUndefined();
+    });
+
+    it('scopeRankOrder no produce duplicados', () => {
+        const order = scopeRankOrder();
+        expect(new Set(order).size).toBe(order.length);
+    });
+});

package/bin/cognitoBackofficeConnector/dtos/SetUserPasswordRequest.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Request para reset de password admin con password temporal (el `cognitoSub`
+ * viaja por path param del endpoint). El `region` se mantiene por consistencia
+ * con `UserActionRequest`.
+ */
+export declare class SetUserPasswordRequest {
+    userPoolId: string;
+    region: string;
+    temporaryPassword: string;
+}

package/bin/cognitoBackofficeConnector/dtos/{MfaPoolConfig.js → SetUserPasswordRequest.js}

@@ -9,28 +9,32 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MfaPoolConfig = void 0;
+exports.SetUserPasswordRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
-// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
-// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
-// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
-// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
-// 'EMAIL_OTP' a este array.
-const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
-class MfaPoolConfig {
+/**
+ * Request para reset de password admin con password temporal (el `cognitoSub`
+ * viaja por path param del endpoint). El `region` se mantiene por consistencia
+ * con `UserActionRequest`.
+ */
+class SetUserPasswordRequest {
 }
-exports.MfaPoolConfig = MfaPoolConfig;
+exports.SetUserPasswordRequest = SetUserPasswordRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], MfaPoolConfig.prototype, "requireMfa", void 0);
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], SetUserPasswordRequest.prototype, "userPoolId", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
-    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
-    __metadata("design:type", Array)
-], MfaPoolConfig.prototype, "mfaTypes", void 0);
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], SetUserPasswordRequest.prototype, "region", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], SetUserPasswordRequest.prototype, "temporaryPassword", void 0);

package/bin/cognitoBackofficeConnector/index.d.ts

@@ -14,6 +14,7 @@ export * from './dtos/CreateUserRequest';
 export * from './dtos/CreateUserResponse';
 export * from './dtos/UpdateUserAttributesRequest';
 export * from './dtos/UserActionRequest';
+export * from './dtos/SetUserPasswordRequest';
 export * from './dtos/DeleteUserRequest';
 export * from './dtos/ResendInvitationRequest';
 export * from './dtos/UserDetailResponse';

package/bin/cognitoBackofficeConnector/index.js

@@ -30,6 +30,7 @@ __exportStar(require("./dtos/CreateUserRequest"), exports);
 __exportStar(require("./dtos/CreateUserResponse"), exports);
 __exportStar(require("./dtos/UpdateUserAttributesRequest"), exports);
 __exportStar(require("./dtos/UserActionRequest"), exports);
+__exportStar(require("./dtos/SetUserPasswordRequest"), exports);
 __exportStar(require("./dtos/DeleteUserRequest"), exports);
 __exportStar(require("./dtos/ResendInvitationRequest"), exports);
 __exportStar(require("./dtos/UserDetailResponse"), exports);

package/bin/platformRbac/index.d.ts

@@ -23,3 +23,4 @@ export * from './dtos/AuthorizeRequest';
 export * from './dtos/AuthorizeResponse';
 export * from './dtos/CreateTenantRequest';
 export type { CreateTenantResponse } from './dtos/CreateTenantResponse';
+export { TenantType, TENANT_TYPES, levelsOf, tableSuffixForLevel, scopeRankOrder } from './tenantTypes';

package/bin/platformRbac/index.js

@@ -23,7 +23,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizeDenyReason = exports.PermissionCategory = exports.PermissionScope = exports.Permission = void 0;
+exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PermissionCategory = exports.PermissionScope = exports.Permission = void 0;
 var Permission_1 = require("./enums/Permission");
 Object.defineProperty(exports, "Permission", { enumerable: true, get: function () { return Permission_1.Permission; } });
 var PermissionScope_1 = require("./enums/PermissionScope");
@@ -54,3 +54,12 @@ __exportStar(require("./dtos/AuthorizeResponse"), exports);
 // F-11 — onboarding de tenant (POST backoffice createTenant). CreateTenantRequest lleva
 // decoradores class-validator → export de valor; CreateTenantResponse es interface → type-only.
 __exportStar(require("./dtos/CreateTenantRequest"), exports);
+// A1 — registro data-driven de tenant-types (niveles debajo de TENANT, por tipo).
+// Consumido por ScopeValidationService._rank vía scopeRankOrder() y por los seeds.
+// Accesible bajo el namespace PlatformRbac (el index raíz hace export * as PlatformRbac).
+var tenantTypes_1 = require("./tenantTypes");
+Object.defineProperty(exports, "TenantType", { enumerable: true, get: function () { return tenantTypes_1.TenantType; } });
+Object.defineProperty(exports, "TENANT_TYPES", { enumerable: true, get: function () { return tenantTypes_1.TENANT_TYPES; } });
+Object.defineProperty(exports, "levelsOf", { enumerable: true, get: function () { return tenantTypes_1.levelsOf; } });
+Object.defineProperty(exports, "tableSuffixForLevel", { enumerable: true, get: function () { return tenantTypes_1.tableSuffixForLevel; } });
+Object.defineProperty(exports, "scopeRankOrder", { enumerable: true, get: function () { return tenantTypes_1.scopeRankOrder; } });

package/bin/platformRbac/tenantTypes.d.ts

@@ -0,0 +1,25 @@
+import { PermissionScope } from './enums/PermissionScope';
+/**
+ * Tipos de tenant soportados por el rbac-business. Cada tipo define su propia
+ * jerarquía de niveles DEBAJO de TENANT (data-driven). Hoy solo existe `retail`.
+ */
+export declare enum TenantType {
+    RETAIL = "retail"
+}
+interface TenantTypeDef {
+    displayName: string;
+    /** Niveles DEBAJO de TENANT, en orden jerárquico (más alto → más bajo). */
+    levels: PermissionScope[];
+    /** Sufijo de tabla DDB por nivel (el prefix del tenant se antepone en runtime). */
+    tableSuffix: Partial<Record<PermissionScope, string>>;
+}
+export declare const TENANT_TYPES: Record<TenantType, TenantTypeDef>;
+export declare function levelsOf(type: TenantType): PermissionScope[];
+export declare function tableSuffixForLevel(type: TenantType, level: PermissionScope): string | undefined;
+/**
+ * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
+ * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
+ * así que un orden global concatenado es seguro. Sin duplicados.
+ */
+export declare function scopeRankOrder(): PermissionScope[];
+export {};

package/bin/platformRbac/tenantTypes.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TENANT_TYPES = exports.TenantType = void 0;
+exports.levelsOf = levelsOf;
+exports.tableSuffixForLevel = tableSuffixForLevel;
+exports.scopeRankOrder = scopeRankOrder;
+const PermissionScope_1 = require("./enums/PermissionScope");
+/**
+ * Tipos de tenant soportados por el rbac-business. Cada tipo define su propia
+ * jerarquía de niveles DEBAJO de TENANT (data-driven). Hoy solo existe `retail`.
+ */
+var TenantType;
+(function (TenantType) {
+    TenantType["RETAIL"] = "retail";
+})(TenantType || (exports.TenantType = TenantType = {}));
+exports.TENANT_TYPES = {
+    [TenantType.RETAIL]: {
+        displayName: 'Retail',
+        levels: [PermissionScope_1.PermissionScope.RETAILER, PermissionScope_1.PermissionScope.STORE],
+        tableSuffix: {
+            [PermissionScope_1.PermissionScope.RETAILER]: 'SharedRetailer',
+            [PermissionScope_1.PermissionScope.STORE]: 'SharedStore',
+        },
+    },
+};
+function levelsOf(type) {
+    return exports.TENANT_TYPES[type].levels;
+}
+function tableSuffixForLevel(type, level) {
+    return exports.TENANT_TYPES[type].tableSuffix[level];
+}
+/**
+ * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
+ * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
+ * así que un orden global concatenado es seguro. Sin duplicados.
+ */
+function scopeRankOrder() {
+    const order = [PermissionScope_1.PermissionScope.PLATFORM, PermissionScope_1.PermissionScope.TENANT];
+    for (const def of Object.values(exports.TENANT_TYPES)) {
+        for (const lvl of def.levels)
+            if (!order.includes(lvl))
+                order.push(lvl);
+    }
+    return order;
+}

package/jest.config.js

@@ -1,8 +1,8 @@
-/** @type {import('jest').Config} */
-module.exports = {
-    preset: 'ts-jest',
-    testEnvironment: 'node',
-    roots: ['<rootDir>/_test_'],
-    testMatch: ['**/*.test.ts'],
-    moduleFileExtensions: ['ts', 'js', 'json'],
-};
+/** @type {import('jest').Config} */
+module.exports = {
+    preset: 'ts-jest',
+    testEnvironment: 'node',
+    roots: ['<rootDir>/_test_'],
+    testMatch: ['**/*.test.ts'],
+    moduleFileExtensions: ['ts', 'js', 'json'],
+};

package/package.json

@@ -1,31 +1,31 @@
-{
-  "name": "@fiado/type-kit",
-  "version": "3.64.0",
-  "description": "",
-  "main": "bin/index.js",
-  "types": "bin/index.d.ts",
-  "scripts": {
-    "test": "jest",
-    "build": "tsc",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [],
-  "author": "Fiado Inc",
-  "license": "ISC",
-  "devDependencies": {
-    "@types/jest": "^30.0.0",
-    "@types/node": "^20.11.20",
-    "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.2",
-    "install": "^0.13.0",
-    "jest": "^30.4.2",
-    "reflect-metadata": "^0.2.2",
-    "ts-jest": "^29.4.11",
-    "typescript": "^5.3.3"
-  },
-  "peerDependencies": {
-    "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.2",
-    "reflect-metadata": "^0.2.2"
-  }
-}
+{
+  "name": "@fiado/type-kit",
+  "version": "3.66.0",
+  "description": "",
+  "main": "bin/index.js",
+  "types": "bin/index.d.ts",
+  "scripts": {
+    "test": "jest",
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "Fiado Inc",
+  "license": "ISC",
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^20.11.20",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.2",
+    "install": "^0.13.0",
+    "jest": "^30.4.2",
+    "reflect-metadata": "^0.2.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^5.3.3"
+  },
+  "peerDependencies": {
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.2",
+    "reflect-metadata": "^0.2.2"
+  }
+}

package/src/account/dtos/AccountCreateRequest.ts

@@ -1,110 +1,110 @@
-import { IsBoolean, IsDateString, IsEmail, IsEnum, IsOptional, IsString, Length, Matches, ValidateNested } from 'class-validator';
-import { AddressResponse } from "../../address";
-import { CountryId } from "../../country";
-import { regexUuidV4 } from '../../helpers/constans/regex';
-import { TypeOfDirectoryId } from '../../directory';
-import { IsPhoneNumberFiado } from '../../card/validations/IsPhoneNumberConstraint';
-import { IdentificationDocument, SexDocument } from '../../identity';
-import { Profile } from "../../directory/enums/Profile";
-import { AccountLevelEnum } from "../enums/AccountLevelEnum";
-import { Provider } from '../../provider';
-import { Type } from 'class-transformer';
-
-export class AccountCreateRequest {
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    directoryId: string;
-
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    ownerDirectoryId: string;
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'peopleId must be a valid UUID v4',
-        })
-    peopleId: string;
-
-    @IsEnum(AccountLevelEnum)
-    accountLevel: AccountLevelEnum;
-
-    @IsEnum(TypeOfDirectoryId)
-    typeOfDirectoryId: string;
-
-    @IsString()
-    latLastNameMaternal: string
-
-    @IsString()
-    latLastNamePaternal: string
-
-    @IsString()
-    latNames: string
-
-    @IsString()
-    countryOfBirth: string
-
-    @IsString()
-    usNames: string
-
-    @IsString()
-    usLastNames: string
-
-    @IsPhoneNumberFiado()
-    phoneNumber: string;
-
-    @IsOptional()
-    @ValidateNested()
-    @Type(() => AddressResponse)
-    address: AddressResponse;
-
-    @IsEmail()
-    email: string;
-
-    @IsDateString()
-    dob: string;
-
-    @IsBoolean()
-    isHost?: boolean;
-
-    @IsOptional()
-    documentInfo?: IdentificationDocument;
-
-    @IsOptional()
-    documentNumber?: string;
-
-    @IsOptional()
-    documentType?: string;
-
-    @IsOptional()
-    @IsEnum(SexDocument)
-    gender: SexDocument;
-
-    @IsEnum(CountryId)
-    countryId: CountryId;
-
-    @IsEnum(Profile)
-    userProfile: Profile;
-
-    @IsEnum(Provider)
-    provider: Provider;
-
-    @IsOptional()
-    SSN_ITIN?: string;
-
-    @IsOptional()
-    externalReferenceId?: string;
-
-    @IsOptional()
-    @IsString()
-    source?: "BACKOFFICE" | "USER_APP" | "API";
-
-}
+import { IsBoolean, IsDateString, IsEmail, IsEnum, IsOptional, IsString, Length, Matches, ValidateNested } from 'class-validator';
+import { AddressResponse } from "../../address";
+import { CountryId } from "../../country";
+import { regexUuidV4 } from '../../helpers/constans/regex';
+import { TypeOfDirectoryId } from '../../directory';
+import { IsPhoneNumberFiado } from '../../card/validations/IsPhoneNumberConstraint';
+import { IdentificationDocument, SexDocument } from '../../identity';
+import { Profile } from "../../directory/enums/Profile";
+import { AccountLevelEnum } from "../enums/AccountLevelEnum";
+import { Provider } from '../../provider';
+import { Type } from 'class-transformer';
+
+export class AccountCreateRequest {
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    directoryId: string;
+
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    ownerDirectoryId: string;
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'peopleId must be a valid UUID v4',
+        })
+    peopleId: string;
+
+    @IsEnum(AccountLevelEnum)
+    accountLevel: AccountLevelEnum;
+
+    @IsEnum(TypeOfDirectoryId)
+    typeOfDirectoryId: string;
+
+    @IsString()
+    latLastNameMaternal: string
+
+    @IsString()
+    latLastNamePaternal: string
+
+    @IsString()
+    latNames: string
+
+    @IsString()
+    countryOfBirth: string
+
+    @IsString()
+    usNames: string
+
+    @IsString()
+    usLastNames: string
+
+    @IsPhoneNumberFiado()
+    phoneNumber: string;
+
+    @IsOptional()
+    @ValidateNested()
+    @Type(() => AddressResponse)
+    address: AddressResponse;
+
+    @IsEmail()
+    email: string;
+
+    @IsDateString()
+    dob: string;
+
+    @IsBoolean()
+    isHost?: boolean;
+
+    @IsOptional()
+    documentInfo?: IdentificationDocument;
+
+    @IsOptional()
+    documentNumber?: string;
+
+    @IsOptional()
+    documentType?: string;
+
+    @IsOptional()
+    @IsEnum(SexDocument)
+    gender: SexDocument;
+
+    @IsEnum(CountryId)
+    countryId: CountryId;
+
+    @IsEnum(Profile)
+    userProfile: Profile;
+
+    @IsEnum(Provider)
+    provider: Provider;
+
+    @IsOptional()
+    SSN_ITIN?: string;
+
+    @IsOptional()
+    externalReferenceId?: string;
+
+    @IsOptional()
+    @IsString()
+    source?: "BACKOFFICE" | "USER_APP" | "API";
+
+}