@kensio/yulin 0.41.0 → 0.43.0

package/README.md

@@ -22,6 +22,7 @@ npm i -D @kensio/yulin
 - [ACM](./docs/services/acm "Simulated ACM docs")
 - [CloudFormation](./docs/services/cloudformation "Simulated CloudFormation docs")
 - [CloudFront](./docs/services/cloudfront "Simulated CloudFront docs")
+- [Cognito user pools](./docs/services/cognito "Simulated Cognito user pools docs")
 - [IAM](./docs/services/iam "Simulated IAM docs")
 - [KMS](./docs/services/kms "Simulated KMS docs")
 - [Lambda](./docs/services/lambda "Simulated Lambda docs")

package/dist/sdk/router/resolve-sim-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-sim-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,eAAe,GAAG,MAAM,EACnC,UAAU,EAAE,aAAa,GACxB,mBAAmB,CA+CrB"}
+{"version":3,"file":"resolve-sim-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,eAAe,GAAG,MAAM,EACnC,UAAU,EAAE,aAAa,GACxB,mBAAmB,CAkDrB"}

package/dist/sdk/router/resolve-sim-sdk-command-router.js

@@ -21,6 +21,9 @@ export function resolveSimSdkCommandRouter(simAws, serviceId, accountId, regionN
         case "CloudFront": {
             return scoped.cloudFront().sdkCommandRouter();
         }
+        case "Cognito Identity Provider": {
+            return scoped.cognitoIdentityProvider().sdkCommandRouter();
+        }
         case "DynamoDB": {
             return scoped.dynamoDb().sdkCommandRouter();
         }

package/dist/sdk/router/resolve-sim-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-sim-sdk-command-router.js","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,SAAiB,EACjB,SAAmC,EACnC,UAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE5D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAChD,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,iBAAiB,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,SAAS,CAAC;YACR,MAAM,IAAI,yBAAyB,CACjC,4DAA4D;gBAC1D,GAAG,SAAS,MAAM,CACrB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"resolve-sim-sdk-command-router.js","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,SAAiB,EACjB,SAAmC,EACnC,UAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE5D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAChD,CAAC;QACD,KAAK,2BAA2B,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,iBAAiB,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,SAAS,CAAC;YACR,MAAM,IAAI,yBAAyB,CACjC,4DAA4D;gBAC1D,GAAG,SAAS,MAAM,CACrB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/serve/controller/factory/sim-aws-service-controller-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-controller-factory.d.ts","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAM9D;;GAEG;AACH,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,MAAM,EAAI;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CAsBnD;CACF"}
+{"version":3,"file":"sim-aws-service-controller-factory.d.ts","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAO9D;;GAEG;AACH,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,MAAM,EAAI;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CAyBnD;CACF"}

package/dist/serve/controller/factory/sim-aws-service-controller-factory.js

@@ -1,4 +1,5 @@
 import { SimCloudFrontServiceController } from "../../../service/cloudfront/controller/sim-cloudfront-controller.js";
+import { SimCognitoServiceController } from "../../../service/cognito/serve/sim-cognito-controller.js";
 import { SimLambdaServiceController } from "../../../service/lambda/serve/sim-lambda-controller.js";
 import { SimRoute53ServiceController } from "../../../service/route53/serve/sim-route53-controller.js";
 import { SimS3ServiceController } from "../../../service/s3/serve/sim-s3-controller.js";
@@ -29,6 +30,9 @@ export class SimAwsServiceControllerFactory {
             case "route53": {
                 return new SimRoute53ServiceController({ simAws: this.simAws });
             }
+            case "cognitoIdentityProvider": {
+                return new SimCognitoServiceController({ simAws: this.simAws });
+            }
             default: {
                 throw new Error(`No controller for simulated AWS service ${serviceName}`);
             }

package/dist/serve/controller/factory/sim-aws-service-controller-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-controller-factory.js","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF;;GAEG;AACH,MAAM,OAAO,8BAA8B;IACZ,MAAM;IAAnC,YAA6B,MAAc;sBAAd,MAAM;IAAW,CAAC;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAmB;QACxB,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,8BAA8B,CAAC;oBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,2CAA2C,WAAW,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-aws-service-controller-factory.js","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AACrH,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF;;GAEG;AACH,MAAM,OAAO,8BAA8B;IACZ,MAAM;IAAnC,YAA6B,MAAc;sBAAd,MAAM;IAAW,CAAC;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAmB;QACxB,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,8BAA8B,CAAC;oBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,yBAAyB,EAAE,CAAC;gBAC/B,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,2CAA2C,WAAW,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/serve/controller/sim-aws-service-signing-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-signing-name.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,GACtC,MAAM,CAeR"}
+{"version":3,"file":"sim-aws-service-signing-name.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,GACtC,MAAM,CAkBR"}

package/dist/serve/controller/sim-aws-service-signing-name.js

@@ -20,6 +20,9 @@ export function simAwsServiceSigningName(service) {
         case "route53": {
             return "route53";
         }
+        case "cognitoIdentityProvider": {
+            return "cognito-idp";
+        }
     }
 }
 //# sourceMappingURL=sim-aws-service-signing-name.js.map

package/dist/serve/controller/sim-aws-service-signing-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-signing-name.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-aws-service-signing-name.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,yBAAyB,EAAE,CAAC;YAC/B,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/serve/controller/sim-service-controller.d.ts

@@ -14,7 +14,7 @@ import { SimAwsRequestCaller } from "../../service/iam/request/sim-aws-request-c
  */
 export type SimAwsServiceEndpoint = "rest" | "website";
 export interface SimAwsServiceTarget {
-    readonly service: "s3" | "cloudFront" | "lambda" | "route53";
+    readonly service: "s3" | "cloudFront" | "lambda" | "route53" | "cognitoIdentityProvider";
     readonly resourceName: string;
     readonly regionName?: AwsRegionName;
     readonly endpoint?: SimAwsServiceEndpoint;

package/dist/serve/controller/sim-service-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-service-controller.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,OAAO,EAAE,OAAO,CAAC;IACjC,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,YAAY,UAAU,EAAE,8BAA8B,EAMrD;CACF;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,MAAM,EAAE,MAAM,KACX,uBAAuB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE"}
+{"version":3,"file":"sim-service-controller.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EACd,IAAI,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,yBAAyB,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,OAAO,EAAE,OAAO,CAAC;IACjC,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,YAAY,UAAU,EAAE,8BAA8B,EAMrD;CACF;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,MAAM,EAAE,MAAM,KACX,uBAAuB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE"}

package/dist/serve/controller/sim-service-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-service-controller.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AA8B1F;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAsB;IAC5B,OAAO,CAAU;IACjB,MAAM,CAAsB;IAC5B,IAAI,CAA0B;IAE9C,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,gEAAgE;QAChE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"sim-service-controller.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AA+B1F;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAsB;IAC5B,OAAO,CAAU;IACjB,MAAM,CAAsB;IAC5B,IAAI,CAA0B;IAE9C,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,gEAAgE;QAChE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF"}

package/dist/serve/http/url/sim-aws-local-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-url.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAEA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,gBAAuB,eAAe,SAAoC;IAE1E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAE1B,YAAY,UAAU,EAAE,wBAAwB,EAO/C;IAED;;OAEG;IACH,KAAK,IAAI,GAAG,CAEX;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,sBAAsB,IAAI,GAAG,CAI5B;IAED,OAAO,CAAC,aAAa;IAcrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;CAY1B"}
+{"version":3,"file":"sim-aws-local-url.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAEA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,gBAAuB,eAAe,SAAoC;IAE1E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAE1B,YAAY,UAAU,EAAE,wBAAwB,EAO/C;IAED;;OAEG;IACH,KAAK,IAAI,GAAG,CAEX;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,sBAAsB,IAAI,GAAG,CAI5B;IAED,OAAO,CAAC,aAAa;IAcrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;CAa1B"}

package/dist/serve/http/url/sim-aws-local-url.js

@@ -55,6 +55,7 @@ export class SimAwsLocalUrl {
         // matched separately rather than by making the Bucket label optional.
         const awsHostname = /^(?<prefix>.+\.(?:s3|s3-website)\.[^.]+)\.amazonaws\.com$/.exec(hostname) ??
             /^(?<prefix>s3\.[^.]+)\.amazonaws\.com$/.exec(hostname) ??
+            /^(?<prefix>cognito-idp\.[^.]+)\.amazonaws\.com$/.exec(hostname) ??
             /^(?<prefix>.+\.lambda-url\.[^.]+)\.on\.aws$/.exec(hostname);
         return awsHostname?.groups?.["prefix"];
     }

package/dist/serve/http/url/sim-aws-local-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-url.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAO5E;;GAEG;AACH,MAAM,OAAO,cAAc;IAClB,MAAM,CAAU,eAAe,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAEzD,GAAG,CAAM;IAE1B,YAAY,UAAoC;QAC9C,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE3D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,GAAG,iBAAiB,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,QAAgB;QACxC,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,WAAW,GACf,2DAA2D,CAAC,IAAI,CAC9D,QAAQ,CACT;YACD,wCAAwC,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvD,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,OAAO,WAAW,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"sim-aws-local-url.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAO5E;;GAEG;AACH,MAAM,OAAO,cAAc;IAClB,MAAM,CAAU,eAAe,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAEzD,GAAG,CAAM;IAE1B,YAAY,UAAoC;QAC9C,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE3D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,GAAG,iBAAiB,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,QAAgB;QACxC,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,WAAW,GACf,2DAA2D,CAAC,IAAI,CAC9D,QAAQ,CACT;YACD,wCAAwC,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvD,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChE,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,OAAO,WAAW,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-account-region-service-builder.d.ts

@@ -0,0 +1,101 @@
+import type { BackgroundCompleter, BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimAwsAccountRegionContainer } from "../sim-aws-account-region-scope.js";
+import type { SimAws } from "../sim-aws.js";
+import { SimAcm } from "../../acm/sim-acm.js";
+import { SimCloudFormation } from "../../cloudformation/index.js";
+import { SimCognitoIdentityProvider } from "../../cognito/index.js";
+import { SimDynamoDb as SimDynamoDatabase } from "../../dynamodb/index.js";
+import type { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimKms } from "../../kms/index.js";
+import { SimLambda } from "../../lambda/index.js";
+import type { SimLambdaUrlRegistry } from "../../lambda/registry/sim-lambda-url-registry.js";
+import { SimS3 } from "../../s3/sim-s3.js";
+import { SimSecretsManager } from "../../secretsmanager/index.js";
+import { SimSsm } from "../../ssm/index.js";
+import { SimSts } from "../../sts/sim-sts.js";
+import type { SimAwsAccountServiceCache } from "./sim-aws-account-service-cache.js";
+import type { SimAwsScopedServiceRegistries } from "./sim-aws-scoped-service-registries.js";
+interface SimAwsAccountRegionServiceBuilderProperties {
+    readonly simAws: SimAws;
+    readonly background: BackgroundScheduler & BackgroundCompleter;
+    readonly registries: SimAwsScopedServiceRegistries;
+    readonly iamRegistry: SimIamRegistry;
+    readonly lambdaUrlRegistry: SimLambdaUrlRegistry;
+    readonly accountServices: SimAwsAccountServiceCache;
+}
+/**
+ * Builder for simulated AWS services scoped to one Account and Region.
+ *
+ * SimAwsServiceFactory owns the top-level policy of which scope a service
+ * belongs to. This class is the half of that split holding the services whose
+ * AWS state is scoped to an account/region pair, as SimAwsAccountServiceCache
+ * is the half holding the services scoped to a whole account.
+ *
+ * Nothing is cached here, which is the point of the split: a service in this
+ * class is built fresh for the scope that asks for it, because on real AWS its
+ * state does not cross a Region boundary. Each build method is therefore just
+ * the wiring for one service, and says in its own doc comment what makes that
+ * service Region-scoped.
+ *
+ * Services here reach account-scoped ones, IAM above all, through the same
+ * account cache the factory uses, so a Region's services decide against the
+ * one IAM its Account owns.
+ */
+export declare class SimAwsAccountRegionServiceBuilder {
+    private readonly simAws;
+    private readonly background;
+    private readonly registries;
+    private readonly iamRegistry;
+    private readonly lambdaUrlRegistry;
+    private readonly accountServices;
+    constructor(properties: SimAwsAccountRegionServiceBuilderProperties);
+    /** Create simulated ACM for an Account Region scope. */
+    createAcm(scope: SimAwsAccountRegionContainer): SimAcm;
+    /** Create simulated CloudFormation for an Account Region scope. */
+    createCloudFormation(scope: SimAwsAccountRegionContainer): SimCloudFormation;
+    /**
+     * Create simulated Cognito user pools for an Account Region scope.
+     *
+     * User pools are Region-scoped on real AWS: a pool id names its Region, and
+     * a pool cannot be reached from another one.
+     */
+    createCognitoIdentityProvider(scope: SimAwsAccountRegionContainer): SimCognitoIdentityProvider;
+    /** Create simulated DynamoDB for an Account Region scope. */
+    createDynamoDb(scope: SimAwsAccountRegionContainer): SimDynamoDatabase;
+    /**
+     * Create simulated KMS for an Account Region scope.
+     *
+     * KMS keys are Region-scoped on real AWS: a key ARN names its Region, and a
+     * ciphertext produced in one Region cannot be decrypted in another.
+     */
+    createKms(scope: SimAwsAccountRegionContainer): SimKms;
+    /**
+     * Create simulated Lambda for an Account Region scope.
+     *
+     * S3-located function code is fetched from the same Account/Region scope's
+     * simulated S3, as real Lambda requires same-region code buckets. Function
+     * code running in the vm runtime is provided host-installed AWS SDK
+     * packages intercepted into this SimAws, as the real Lambda runtime
+     * provides the SDK.
+     */
+    createLambda(scope: SimAwsAccountRegionContainer): SimLambda;
+    /** Create simulated S3 for an Account Region scope. */
+    createS3(scope: SimAwsAccountRegionContainer): SimS3;
+    /**
+     * Create simulated Secrets Manager for an Account Region scope, whose secret
+     * values are encrypted through that same scope's simulated KMS.
+     */
+    createSecretsManager(scope: SimAwsAccountRegionContainer): SimSecretsManager;
+    /**
+     * Create simulated SSM for an Account Region scope.
+     *
+     * Parameters are Region-scoped on real AWS: a parameter name is unique
+     * within one Account and Region, and its ARN names the Region. SecureString
+     * values are encrypted through that same scope's simulated KMS.
+     */
+    createSsm(scope: SimAwsAccountRegionContainer): SimSsm;
+    /** Create simulated STS for an Account/Region scope. */
+    createSts(scope: SimAwsAccountRegionContainer): SimSts;
+}
+export {};
+//# sourceMappingURL=sim-aws-account-region-service-builder.d.ts.map

package/dist/service/aws/factory/sim-aws-account-region-service-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-account-region-service-builder.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-region-service-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAG7F,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F,UAAU,2CAA2C;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuB;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,UAAU,EAAE,2CAA2C,EAOlE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAerD;IAED,mEAAmE;IACnE,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAO3E;IAED;;;;;OAKG;IACH,6BAA6B,CAC3B,KAAK,EAAE,4BAA4B,GAClC,0BAA0B,CAS5B;IAED,6DAA6D;IAC7D,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAMrE;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAMrD;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,SAAS,CAa3D;IAED,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CAOnD;IAED;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAO3E;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAOrD;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;CACF"}

package/dist/service/aws/factory/sim-aws-account-region-service-builder.js

@@ -0,0 +1,177 @@
+import { SimAcm } from "../../acm/sim-acm.js";
+import { SimRoute53AcmDnsRecords } from "../../acm/validation/sim-route53-acm-dns-records.js";
+import { SimCloudFormation } from "../../cloudformation/index.js";
+import { SimCognitoIdentityProvider } from "../../cognito/index.js";
+import { SimDynamoDb as SimDynamoDatabase } from "../../dynamodb/index.js";
+import { SimKms } from "../../kms/index.js";
+import { SimLambda } from "../../lambda/index.js";
+import { SimS3LambdaCodeStore } from "../../lambda/function/code/store/sim-s3-lambda-code-store.js";
+import { SimSdkLambdaVmModuleProvider } from "../../lambda/function/code/vm/sdk/sim-sdk-lambda-vm-module-provider.js";
+import { SimS3 } from "../../s3/sim-s3.js";
+import { SimSecretsManager } from "../../secretsmanager/index.js";
+import { SimSsm } from "../../ssm/index.js";
+import { SimSts } from "../../sts/sim-sts.js";
+/**
+ * Builder for simulated AWS services scoped to one Account and Region.
+ *
+ * SimAwsServiceFactory owns the top-level policy of which scope a service
+ * belongs to. This class is the half of that split holding the services whose
+ * AWS state is scoped to an account/region pair, as SimAwsAccountServiceCache
+ * is the half holding the services scoped to a whole account.
+ *
+ * Nothing is cached here, which is the point of the split: a service in this
+ * class is built fresh for the scope that asks for it, because on real AWS its
+ * state does not cross a Region boundary. Each build method is therefore just
+ * the wiring for one service, and says in its own doc comment what makes that
+ * service Region-scoped.
+ *
+ * Services here reach account-scoped ones, IAM above all, through the same
+ * account cache the factory uses, so a Region's services decide against the
+ * one IAM its Account owns.
+ */
+export class SimAwsAccountRegionServiceBuilder {
+    simAws;
+    background;
+    registries;
+    iamRegistry;
+    lambdaUrlRegistry;
+    accountServices;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+        this.background = properties.background;
+        this.registries = properties.registries;
+        this.iamRegistry = properties.iamRegistry;
+        this.lambdaUrlRegistry = properties.lambdaUrlRegistry;
+        this.accountServices = properties.accountServices;
+    }
+    /** Create simulated ACM for an Account Region scope. */
+    createAcm(scope) {
+        const acm = new SimAcm({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+            // Certificates validate against Hosted Zones from any simulated Account,
+            // as real ACM validates against public DNS.
+            dnsRecords: new SimRoute53AcmDnsRecords({
+                route53Registry: this.registries.route53,
+            }),
+        });
+        this.registries.acm.register(scope.accountRegionScope, acm);
+        return acm;
+    }
+    /** Create simulated CloudFormation for an Account Region scope. */
+    createCloudFormation(scope) {
+        return new SimCloudFormation({
+            simAws: this.simAws,
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+        });
+    }
+    /**
+     * Create simulated Cognito user pools for an Account Region scope.
+     *
+     * User pools are Region-scoped on real AWS: a pool id names its Region, and
+     * a pool cannot be reached from another one.
+     */
+    createCognitoIdentityProvider(scope) {
+        return new SimCognitoIdentityProvider({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+            // Pool ids are unique across the simulation, and a pool is reachable by
+            // id alone from the serving layer, whichever scope created it.
+            userPoolRegistry: this.registries.cognito,
+        });
+    }
+    /** Create simulated DynamoDB for an Account Region scope. */
+    createDynamoDb(scope) {
+        return new SimDynamoDatabase({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+        });
+    }
+    /**
+     * Create simulated KMS for an Account Region scope.
+     *
+     * KMS keys are Region-scoped on real AWS: a key ARN names its Region, and a
+     * ciphertext produced in one Region cannot be decrypted in another.
+     */
+    createKms(scope) {
+        return new SimKms({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+        });
+    }
+    /**
+     * Create simulated Lambda for an Account Region scope.
+     *
+     * S3-located function code is fetched from the same Account/Region scope's
+     * simulated S3, as real Lambda requires same-region code buckets. Function
+     * code running in the vm runtime is provided host-installed AWS SDK
+     * packages intercepted into this SimAws, as the real Lambda runtime
+     * provides the SDK.
+     */
+    createLambda(scope) {
+        return new SimLambda({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+            runAsOwner: this.simAws,
+            urlRegistry: this.lambdaUrlRegistry,
+            codeStore: new SimS3LambdaCodeStore({ s3: scope.s3() }),
+            vmSdkModuleProvider: new SimSdkLambdaVmModuleProvider({
+                simAws: this.simAws,
+                regionName: scope.accountRegionScope.regionName,
+            }),
+        });
+    }
+    /** Create simulated S3 for an Account Region scope. */
+    createS3(scope) {
+        return new SimS3({
+            accountRegionScope: scope.accountRegionScope,
+            s3GlobalRegistry: this.registries.s3,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+        });
+    }
+    /**
+     * Create simulated Secrets Manager for an Account Region scope, whose secret
+     * values are encrypted through that same scope's simulated KMS.
+     */
+    createSecretsManager(scope) {
+        return new SimSecretsManager({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+            kms: scope.kms(),
+        });
+    }
+    /**
+     * Create simulated SSM for an Account Region scope.
+     *
+     * Parameters are Region-scoped on real AWS: a parameter name is unique
+     * within one Account and Region, and its ARN names the Region. SecureString
+     * values are encrypted through that same scope's simulated KMS.
+     */
+    createSsm(scope) {
+        return new SimSsm({
+            accountRegionScope: scope.accountRegionScope,
+            iam: this.accountServices.createIam(scope),
+            background: this.background,
+            kms: scope.kms(),
+        });
+    }
+    /** Create simulated STS for an Account/Region scope. */
+    createSts(scope) {
+        this.accountServices.createIam(scope);
+        return new SimSts({
+            accountRegionScope: scope.accountRegionScope,
+            background: this.background,
+            iamResolver: this.iamRegistry,
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-account-region-service-builder.js.map

package/dist/service/aws/factory/sim-aws-account-region-service-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-account-region-service-builder.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-region-service-builder.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAa9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,iCAAiC;IAC3B,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,UAAU,CAAgC;IAC1C,WAAW,CAAiB;IAC5B,iBAAiB,CAAuB;IACxC,eAAe,CAA4B;IAE5D,YAAY,UAAuD;QACjE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAmC;QAC3C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,yEAAyE;YACzE,4CAA4C;YAC5C,UAAU,EAAE,IAAI,uBAAuB,CAAC;gBACtC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;aACzC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAE5D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mEAAmE;IACnE,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,6BAA6B,CAC3B,KAAmC;QAEnC,OAAO,IAAI,0BAA0B,CAAC;YACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,wEAAwE;YACxE,+DAA+D;YAC/D,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,cAAc,CAAC,KAAmC;QAChD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAmC;QAC9C,OAAO,IAAI,SAAS,CAAC;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,WAAW,EAAE,IAAI,CAAC,iBAAiB;YACnC,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACvD,mBAAmB,EAAE,IAAI,4BAA4B,CAAC;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;aAChD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,QAAQ,CAAC,KAAmC;QAC1C,OAAO,IAAI,KAAK,CAAC;YACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;YACpC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAmC;QAC3C,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtC,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts

@@ -24,7 +24,8 @@ interface SimAwsAccountServiceCacheProperties {
  * SimAwsServiceFactory owns the top-level service construction policy and the
  * shared registries for one SimAws instance. This class is the narrower cache
  * it delegates to for services whose AWS state is scoped to an account rather
- * than to an account/region pair.
+ * than to an account/region pair, as SimAwsAccountRegionServiceBuilder is the
+ * one it delegates to for the rest.
  *
  * This class is the account-scoped service catalog: it records which simulated
  * AWS services share one instance across all regions in an account. A single

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mDAAmD,CAAC;AAK3D,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,UAAU,EAAE,mCAAmC,EAQ1D;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAenE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CA0BrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAY7D;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mDAAmD,CAAC;AAK3D,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,UAAU,EAAE,mCAAmC,EAQ1D;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAenE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CA0BrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAY7D;CACF"}

package/dist/service/aws/factory/sim-aws-account-service-cache.js

@@ -12,7 +12,8 @@ import { accountServiceCacheKey } from "./account-service-cache-key.js";
  * SimAwsServiceFactory owns the top-level service construction policy and the
  * shared registries for one SimAws instance. This class is the narrower cache
  * it delegates to for services whose AWS state is scoped to an account rather
- * than to an account/region pair.
+ * than to an account/region pair, as SimAwsAccountRegionServiceBuilder is the
+ * one it delegates to for the rest.
  *
  * This class is the account-scoped service catalog: it records which simulated
  * AWS services share one instance across all regions in an account. A single

package/dist/service/aws/factory/sim-aws-account-service-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,WAAW,CAAiB;IAC5B,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,iBAAiB,CAA0B;IAC3C,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,mEAAmE;gBACnE,iEAAiE;gBACjE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,mEAAmE;gBACnE,qEAAqE;gBACrE,kBAAkB,EAAE,IAAI,wBAAwB,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,UAAU;oBACtB,cAAc,EAAE,IAAI,2BAA2B,CAC7C,IAAI,CAAC,iBAAiB,EACtB,KAAK,CAAC,kBAAkB,CAAC,SAAS,CACnC;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,WAAW,CAAiB;IAC5B,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,iBAAiB,CAA0B;IAC3C,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,mEAAmE;gBACnE,iEAAiE;gBACjE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,mEAAmE;gBACnE,qEAAqE;gBACrE,kBAAkB,EAAE,IAAI,wBAAwB,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,UAAU;oBACtB,cAAc,EAAE,IAAI,2BAA2B,CAC7C,IAAI,CAAC,iBAAiB,EACtB,KAAK,CAAC,kBAAkB,CAAC,SAAS,CACnC;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-request-auth-wiring.d.ts

@@ -0,0 +1,45 @@
+import type { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimIamAccessKeyRegistry } from "../../iam/registry/sim-iam-access-key-registry.js";
+import { SimIamSigV4Verifier } from "../../iam/sigv4/sim-iam-sigv4-verifier.js";
+import { SimAwsRequestCallerResolver } from "../../iam/request/sim-aws-request-caller-resolver.js";
+interface SimAwsRequestAuthWiringProperties {
+    readonly iamRegistry: SimIamRegistry;
+}
+/**
+ * The request authentication collaborators shared by one SimAws instance.
+ *
+ * SimAwsServiceFactory constructs simulated services for an Account/Region
+ * scope. This class holds the one graph that deliberately spans every scope
+ * instead: a signed request names an access key rather than an Account, so
+ * verifying it has to start from a simulation-wide index and only then reach
+ * the IAM that issued the key.
+ *
+ * Keeping the three pieces together means they are wired once, in the order
+ * they depend on each other, rather than as separate fields that happen to
+ * refer to one another.
+ * @internal
+ */
+export declare class SimAwsRequestAuthWiring {
+    /**
+     * Shared index of which Account owns each simulated access key.
+     *
+     * A SigV4 signed request names an access key but not an Account, so this is
+     * what lets a signature be traced back to the IAM that issued it.
+     */
+    readonly accessKeyRegistry: SimIamAccessKeyRegistry;
+    /**
+     * Verifies SigV4 signatures made with any access key in this simulation.
+     */
+    readonly signedRequests: SimIamSigV4Verifier;
+    /**
+     * Resolves the principal behind an HTTP request into this simulation.
+     *
+     * This is the single request authentication boundary: everything arriving
+     * over HTTP, including the in-process `SimAwsHttp.fetch()` path, gets its
+     * caller from here.
+     */
+    readonly requestCallers: SimAwsRequestCallerResolver;
+    constructor(properties: SimAwsRequestAuthWiringProperties);
+}
+export {};
+//# sourceMappingURL=sim-aws-request-auth-wiring.d.ts.map

package/dist/service/aws/factory/sim-aws-request-auth-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-request-auth-wiring.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-request-auth-wiring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AAEnG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,uBAAuB;IAClC;;;;;OAKG;IACH,SAAgB,iBAAiB,0BAAiC;IAElE;;OAEG;IACH,SAAgB,cAAc,EAAE,mBAAmB,CAAC;IAEpD;;;;;;OAMG;IACH,SAAgB,cAAc,EAAE,2BAA2B,CAAC;IAE5D,YAAY,UAAU,EAAE,iCAAiC,EAWxD;CACF"}

package/dist/service/aws/factory/sim-aws-request-auth-wiring.js

@@ -0,0 +1,51 @@
+import { SimIamAccessKeyRegistry } from "../../iam/registry/sim-iam-access-key-registry.js";
+import { SimIamGlobalCredentialResolver } from "../../iam/registry/sim-iam-global-credential-resolver.js";
+import { SimIamSigV4Verifier } from "../../iam/sigv4/sim-iam-sigv4-verifier.js";
+import { SimAwsRequestCallerResolver } from "../../iam/request/sim-aws-request-caller-resolver.js";
+/**
+ * The request authentication collaborators shared by one SimAws instance.
+ *
+ * SimAwsServiceFactory constructs simulated services for an Account/Region
+ * scope. This class holds the one graph that deliberately spans every scope
+ * instead: a signed request names an access key rather than an Account, so
+ * verifying it has to start from a simulation-wide index and only then reach
+ * the IAM that issued the key.
+ *
+ * Keeping the three pieces together means they are wired once, in the order
+ * they depend on each other, rather than as separate fields that happen to
+ * refer to one another.
+ * @internal
+ */
+export class SimAwsRequestAuthWiring {
+    /**
+     * Shared index of which Account owns each simulated access key.
+     *
+     * A SigV4 signed request names an access key but not an Account, so this is
+     * what lets a signature be traced back to the IAM that issued it.
+     */
+    accessKeyRegistry = new SimIamAccessKeyRegistry();
+    /**
+     * Verifies SigV4 signatures made with any access key in this simulation.
+     */
+    signedRequests;
+    /**
+     * Resolves the principal behind an HTTP request into this simulation.
+     *
+     * This is the single request authentication boundary: everything arriving
+     * over HTTP, including the in-process `SimAwsHttp.fetch()` path, gets its
+     * caller from here.
+     */
+    requestCallers;
+    constructor(properties) {
+        this.signedRequests = new SimIamSigV4Verifier({
+            credentials: new SimIamGlobalCredentialResolver({
+                accessKeys: this.accessKeyRegistry,
+                iam: properties.iamRegistry,
+            }),
+        });
+        this.requestCallers = new SimAwsRequestCallerResolver({
+            signedRequests: this.signedRequests,
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-request-auth-wiring.js.map

package/dist/service/aws/factory/sim-aws-request-auth-wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-request-auth-wiring.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-request-auth-wiring.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AAMnG;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,uBAAuB;IAClC;;;;;OAKG;IACa,iBAAiB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAElE;;OAEG;IACa,cAAc,CAAsB;IAEpD;;;;;;OAMG;IACa,cAAc,CAA8B;IAE5D,YAAY,UAA6C;QACvD,IAAI,CAAC,cAAc,GAAG,IAAI,mBAAmB,CAAC;YAC5C,WAAW,EAAE,IAAI,8BAA8B,CAAC;gBAC9C,UAAU,EAAE,IAAI,CAAC,iBAAiB;gBAClC,GAAG,EAAE,UAAU,CAAC,WAAW;aAC5B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,IAAI,2BAA2B,CAAC;YACpD,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-scoped-service-registries.d.ts

@@ -1,4 +1,5 @@
 import { SimAcmRegistry } from "../../acm/registry/sim-acm-registry.js";
+import { SimCognitoUserPoolRegistry } from "../../cognito/registry/sim-cognito-user-pool-registry.js";
 import { SimRoute53Registry } from "../../route53/registry/sim-route53-registry.js";
 import { SimS3GlobalRegistry } from "../../s3/sim-s3-global-registry.js";
 /**
@@ -16,6 +17,12 @@ export declare class SimAwsScopedServiceRegistries {
      * can resolve the Certificate it names.
      */
     readonly acm: SimAcmRegistry;
+    /**
+     * Indexes the user pools created in any Account and Region of one SimAws
+     * instance, so a served request naming only a pool id, such as one for a
+     * pool's JWKS, finds the pool it belongs to.
+     */
+    readonly cognito: SimCognitoUserPoolRegistry;
     /**
      * Owns hosted zone and DNS record state shared by the account-scoped Route53
      * service instances created for one SimAws instance.

package/dist/service/aws/factory/sim-aws-scoped-service-registries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-scoped-service-registries.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-scoped-service-registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;GAOG;AACH,qBAAa,6BAA6B;IACxC;;;;OAIG;IACH,SAAgB,GAAG,iBAAwB;IAE3C;;;OAGG;IACH,SAAgB,OAAO,qBAA4B;IAEnD;;;;OAIG;IACH,SAAgB,EAAE,sBAA6B;CAChD"}
+{"version":3,"file":"sim-aws-scoped-service-registries.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-scoped-service-registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0DAA0D,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;GAOG;AACH,qBAAa,6BAA6B;IACxC;;;;OAIG;IACH,SAAgB,GAAG,iBAAwB;IAE3C;;;;OAIG;IACH,SAAgB,OAAO,6BAAoC;IAE3D;;;OAGG;IACH,SAAgB,OAAO,qBAA4B;IAEnD;;;;OAIG;IACH,SAAgB,EAAE,sBAA6B;CAChD"}