@kensio/yulin 0.41.0 → 0.43.0

package/dist/service/cognito/command/group/sim-cognito-list-groups.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
+import type { SimListGroupsCommand, SimListGroupsCommandOutput } from "./group.command.js";
+interface SimCognitoListGroupsProperties {
+    readonly resolver: SimCognitoRequestResolver;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The ListGroups command.
+ */
+export declare class SimCognitoListGroups {
+    private readonly resolver;
+    private readonly view;
+    constructor(properties: SimCognitoListGroupsProperties);
+    /**
+     * List the groups of one pool, in creation order.
+     *
+     * This is not precedence order. `AdminListGroupsForUser` is the one that
+     * sorts, because that is the listing whose order decides which group's role
+     * a user prefers.
+     */
+    handle(command: SimListGroupsCommand, options?: SimCognitoCommandOptions): SimListGroupsCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-list-groups.d.ts.map

package/dist/service/cognito/command/group/sim-cognito-list-groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-groups.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-list-groups.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,oBAAoB,CAAC;AAE5B,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;CAC9C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAOD;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,8BAA8B,EAErD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,wBAAwB,GACjC,0BAA0B,CAmB5B;CACF"}

package/dist/service/cognito/command/group/sim-cognito-list-groups.js

@@ -0,0 +1,38 @@
+import { SimCognitoPage } from "../sim-cognito-page.js";
+import { SimCognitoGroupView } from "./sim-cognito-group-view.js";
+/**
+ * How many groups a page holds when the request does not say.
+ */
+const defaultLimit = 60;
+/**
+ * The ListGroups command.
+ */
+export class SimCognitoListGroups {
+    resolver;
+    view = new SimCognitoGroupView();
+    constructor(properties) {
+        this.resolver = properties.resolver;
+    }
+    /**
+     * List the groups of one pool, in creation order.
+     *
+     * This is not precedence order. `AdminListGroupsForUser` is the one that
+     * sorts, because that is the listing whose order decides which group's role
+     * a user prefers.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const pool = this.resolver.pool("cognito-idp:ListGroups", input.UserPoolId, options);
+        const page = new SimCognitoPage(pool.groups, {
+            maxResults: input.Limit ?? defaultLimit,
+            nextToken: input.NextToken,
+            maxResultsField: "Limit",
+        });
+        return {
+            $metadata: {},
+            Groups: page.items.map((group) => this.view.describe(group)),
+            NextToken: page.nextToken,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-list-groups.js.map

package/dist/service/cognito/command/group/sim-cognito-list-groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-groups.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-list-groups.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAclE;;GAEG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAA4B;IACpC,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA6B,EAC7B,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,wBAAwB,EACxB,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YAC3C,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,YAAY;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-command.types.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The sim Cognito Command types, gathered for the service facade.
+ */
+export type { SimCognitoUserPoolType, SimCreateUserPoolCommand, SimCreateUserPoolCommandInput, SimCreateUserPoolCommandOutput, SimDeleteUserPoolCommand, SimDeleteUserPoolCommandInput, SimDeleteUserPoolCommandOutput, SimDescribeUserPoolCommand, SimDescribeUserPoolCommandInput, SimDescribeUserPoolCommandOutput, } from "./user-pool/user-pool.command.js";
+export type { SimCognitoUserPoolDescriptionType, SimListUserPoolsCommand, SimListUserPoolsCommandInput, SimListUserPoolsCommandOutput, } from "./user-pool/list-user-pools.command.js";
+export type { SimCognitoUserPoolClientType, SimCreateUserPoolClientCommand, SimCreateUserPoolClientCommandInput, SimCreateUserPoolClientCommandOutput, SimDeleteUserPoolClientCommand, SimDeleteUserPoolClientCommandInput, SimDeleteUserPoolClientCommandOutput, SimDescribeUserPoolClientCommand, SimDescribeUserPoolClientCommandInput, SimDescribeUserPoolClientCommandOutput, } from "./client/user-pool-client.command.js";
+export type { SimCognitoUserPoolClientDescription, SimListUserPoolClientsCommand, SimListUserPoolClientsCommandInput, SimListUserPoolClientsCommandOutput, } from "./client/list-user-pool-clients.command.js";
+export type { SimAdminCreateUserCommand, SimAdminCreateUserCommandInput, SimAdminCreateUserCommandOutput, SimAdminDeleteUserCommand, SimAdminDeleteUserCommandOutput, SimAdminDisableUserCommand, SimAdminDisableUserCommandOutput, SimAdminEnableUserCommand, SimAdminEnableUserCommandOutput, SimAdminGetUserCommand, SimAdminGetUserCommandOutput, SimAdminSetUserPasswordCommand, SimAdminSetUserPasswordCommandInput, SimAdminSetUserPasswordCommandOutput, SimAdminUpdateUserAttributesCommand, SimAdminUpdateUserAttributesCommandInput, SimAdminUpdateUserAttributesCommandOutput, SimCognitoAdminUserCommandInput, SimCognitoDescribedUser, SimCognitoUserType, } from "./user/user.command.js";
+export type { SimListUsersCommand, SimListUsersCommandInput, SimListUsersCommandOutput, } from "./user/list-users.command.js";
+export type { SimCognitoGroupCommandInput, SimCognitoGroupType, SimCreateGroupCommand, SimCreateGroupCommandInput, SimCreateGroupCommandOutput, SimDeleteGroupCommand, SimDeleteGroupCommandOutput, SimGetGroupCommand, SimGetGroupCommandOutput, SimListGroupsCommand, SimListGroupsCommandInput, SimListGroupsCommandOutput, SimUpdateGroupCommand, SimUpdateGroupCommandInput, SimUpdateGroupCommandOutput, } from "./group/group.command.js";
+export type { SimAdminAddUserToGroupCommand, SimAdminAddUserToGroupCommandOutput, SimAdminListGroupsForUserCommand, SimAdminListGroupsForUserCommandInput, SimAdminListGroupsForUserCommandOutput, SimAdminRemoveUserFromGroupCommand, SimAdminRemoveUserFromGroupCommandOutput, SimCognitoGroupMembershipCommandInput, SimListUsersInGroupCommand, SimListUsersInGroupCommandInput, SimListUsersInGroupCommandOutput, } from "./group/group-membership.command.js";
+export type { SimAdminInitiateAuthCommand, SimAdminInitiateAuthCommandInput, SimAdminInitiateAuthCommandOutput, SimAdminRespondToAuthChallengeCommand, SimAdminRespondToAuthChallengeCommandInput, SimAdminRespondToAuthChallengeCommandOutput, SimAdminUserGlobalSignOutCommand, SimAdminUserGlobalSignOutCommandInput, SimAdminUserGlobalSignOutCommandOutput, SimCognitoAuthenticationOutput, SimCognitoAuthenticationResultType, SimGlobalSignOutCommand, SimGlobalSignOutCommandInput, SimGlobalSignOutCommandOutput, SimInitiateAuthCommand, SimInitiateAuthCommandInput, SimInitiateAuthCommandOutput, SimRespondToAuthChallengeCommand, SimRespondToAuthChallengeCommandInput, SimRespondToAuthChallengeCommandOutput, } from "./auth/auth.command.js";
+//# sourceMappingURL=sim-cognito-command.types.d.ts.map

package/dist/service/cognito/command/sim-cognito-command.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,qCAAqC,EACrC,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC"}

package/dist/service/cognito/command/sim-cognito-command.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cognito-command.types.js.map

package/dist/service/cognito/command/sim-cognito-command.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-command.types.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":""}

package/dist/service/cognito/command/sim-cognito-commands.d.ts

@@ -0,0 +1,44 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCognitoUserPoolStore } from "../user-pool/sim-cognito-user-pool-store.js";
+import { SimCognitoAuthCommands } from "./auth/sim-cognito-auth-commands.js";
+import { SimCognitoListUserPoolClients } from "./client/sim-cognito-list-user-pool-clients.js";
+import { SimCognitoGroupCommands } from "./group/sim-cognito-group-commands.js";
+import { SimCognitoGroupMembershipCommands } from "./group/sim-cognito-group-membership-commands.js";
+import { SimCognitoListGroups } from "./group/sim-cognito-list-groups.js";
+import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool-client-commands.js";
+import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
+import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
+import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
+import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+interface SimCognitoCommandsProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly clock: SimClock;
+    readonly pools: SimCognitoUserPoolStore;
+}
+/**
+ * The command handlers of one simulated Cognito scope.
+ *
+ * They share an authorizer, a pool store and a clock, so they are built
+ * together here rather than in the service facade, which is left as
+ * delegation.
+ */
+export declare class SimCognitoCommands {
+    readonly userPools: SimCognitoUserPoolCommands;
+    readonly listUserPools: SimCognitoListUserPools;
+    readonly clients: SimCognitoUserPoolClientCommands;
+    readonly listClients: SimCognitoListUserPoolClients;
+    readonly users: SimCognitoUserCommands;
+    readonly userUpdates: SimCognitoUserUpdateCommands;
+    readonly listUsers: SimCognitoListUsers;
+    readonly groups: SimCognitoGroupCommands;
+    readonly groupMembership: SimCognitoGroupMembershipCommands;
+    readonly listGroups: SimCognitoListGroups;
+    readonly auth: SimCognitoAuthCommands;
+    constructor(properties: SimCognitoCommandsProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-commands.d.ts.map

package/dist/service/cognito/command/sim-cognito-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAInG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAE3F,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAE7C,YAAY,UAAU,EAAE,4BAA4B,EAkCnD;CACF"}

package/dist/service/cognito/command/sim-cognito-commands.js

@@ -0,0 +1,72 @@
+import { SimCognitoUserPoolClientFactory } from "../user-pool/client/sim-cognito-user-pool-client-factory.js";
+import { SimCognitoGroupFactory } from "../user-pool/group/sim-cognito-group-factory.js";
+import { SimCognitoUserPoolFactory } from "../user-pool/sim-cognito-user-pool-factory.js";
+import { SimCognitoUserFactory } from "../user-pool/user/sim-cognito-user-factory.js";
+import { SimCognitoAuthCommands } from "./auth/sim-cognito-auth-commands.js";
+import { SimCognitoAuthorizer } from "./authorize/sim-cognito-authorizer.js";
+import { SimCognitoListUserPoolClients } from "./client/sim-cognito-list-user-pool-clients.js";
+import { SimCognitoGroupCommands } from "./group/sim-cognito-group-commands.js";
+import { SimCognitoGroupMembershipCommands } from "./group/sim-cognito-group-membership-commands.js";
+import { SimCognitoListGroups } from "./group/sim-cognito-list-groups.js";
+import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool-client-commands.js";
+import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
+import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoRequestResolver } from "./sim-cognito-request-resolver.js";
+import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
+import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
+import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+/**
+ * The command handlers of one simulated Cognito scope.
+ *
+ * They share an authorizer, a pool store and a clock, so they are built
+ * together here rather than in the service facade, which is left as
+ * delegation.
+ */
+export class SimCognitoCommands {
+    userPools;
+    listUserPools;
+    clients;
+    listClients;
+    users;
+    userUpdates;
+    listUsers;
+    groups;
+    groupMembership;
+    listGroups;
+    auth;
+    constructor(properties) {
+        const { accountRegionScope, iam, clock, pools } = properties;
+        const authorizer = new SimCognitoAuthorizer({ iam, accountRegionScope });
+        const resolver = new SimCognitoRequestResolver({ pools, authorizer });
+        this.userPools = new SimCognitoUserPoolCommands({
+            pools,
+            poolFactory: new SimCognitoUserPoolFactory({
+                accountRegionScope,
+                pools,
+                clock,
+            }),
+            authorizer,
+        });
+        this.listUserPools = new SimCognitoListUserPools({ pools, authorizer });
+        this.clients = new SimCognitoUserPoolClientCommands({
+            pools,
+            clientFactory: new SimCognitoUserPoolClientFactory({ clock }),
+            authorizer,
+        });
+        this.listClients = new SimCognitoListUserPoolClients({ pools, authorizer });
+        this.users = new SimCognitoUserCommands({
+            resolver,
+            userFactory: new SimCognitoUserFactory({ clock }),
+        });
+        this.userUpdates = new SimCognitoUserUpdateCommands({ resolver });
+        this.listUsers = new SimCognitoListUsers({ resolver });
+        this.groups = new SimCognitoGroupCommands({
+            resolver,
+            groupFactory: new SimCognitoGroupFactory({ clock }),
+        });
+        this.groupMembership = new SimCognitoGroupMembershipCommands({ resolver });
+        this.listGroups = new SimCognitoListGroups({ resolver });
+        this.auth = new SimCognitoAuthCommands({ resolver, pools, clock });
+    }
+}
+//# sourceMappingURL=sim-cognito-commands.js.map

package/dist/service/cognito/command/sim-cognito-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAS3F;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAE7C,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW,EAAE,IAAI,yBAAyB,CAAC;gBACzC,kBAAkB;gBAClB,KAAK;gBACL,KAAK;aACN,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;YAC7D,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,WAAW,EAAE,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-page.d.ts

@@ -0,0 +1,39 @@
+interface SimCognitoPageProperties {
+    readonly maxResults: number;
+    readonly nextToken: string | undefined;
+    /**
+     * What this operation calls its page size input. `ListUsers` calls it
+     * `Limit`, so a refusal has to name the input the caller actually wrote.
+     */
+    readonly maxResultsField?: string;
+    /**
+     * What this operation calls its continuation token. `ListUsers` calls it
+     * `PaginationToken`.
+     */
+    readonly nextTokenField?: string;
+}
+/**
+ * One page of listed items, and the token that reaches the next one.
+ *
+ * Every Cognito listing pages the same way, so the rules live here once. How
+ * many items a page holds by default is not shared, because `ListUserPools`
+ * insists on being told and the others do not.
+ */
+export declare class SimCognitoPage<TItem> {
+    readonly items: readonly TItem[];
+    readonly nextToken: string | undefined;
+    constructor(listed: readonly TItem[], properties: SimCognitoPageProperties);
+    private static maxResults;
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * Tokens are the canonical non-negative integer representation this
+     * simulation emits, so anything else is rejected rather than silently
+     * starting again from the beginning. An offset past the end of the list is
+     * rejected for the same reason: no such token is ever issued.
+     */
+    private static startIndex;
+    private static tokenFor;
+}
+export {};
+//# sourceMappingURL=sim-cognito-page.d.ts.map

package/dist/service/cognito/command/sim-cognito-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAOA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;GAMG;AACH,qBAAa,cAAc,CAAC,KAAK;IAC/B,SAAgB,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC;IACxC,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YAAY,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAczE;IAED,OAAO,CAAC,MAAM,CAAC,UAAU;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAyBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}

package/dist/service/cognito/command/sim-cognito-page.js

@@ -0,0 +1,59 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+/**
+ * The most Cognito will return in one page of either listing.
+ */
+const maxMaxResults = 60;
+/**
+ * One page of listed items, and the token that reaches the next one.
+ *
+ * Every Cognito listing pages the same way, so the rules live here once. How
+ * many items a page holds by default is not shared, because `ListUserPools`
+ * insists on being told and the others do not.
+ */
+export class SimCognitoPage {
+    items;
+    nextToken;
+    constructor(listed, properties) {
+        const maxResults = SimCognitoPage.maxResults(properties.maxResults, properties.maxResultsField ?? "MaxResults");
+        const startIndex = SimCognitoPage.startIndex(properties.nextToken, listed.length, properties.nextTokenField ?? "NextToken");
+        const nextIndex = startIndex + maxResults;
+        this.items = listed.slice(startIndex, nextIndex);
+        this.nextToken = SimCognitoPage.tokenFor(nextIndex, listed.length);
+    }
+    static maxResults(requested, field) {
+        if (!Number.isSafeInteger(requested) ||
+            requested < 1 ||
+            requested > maxMaxResults) {
+            throw new SimCognitoInvalidParameterException(`${field} must be a whole number between 1 and ${String(maxMaxResults)}`);
+        }
+        return requested;
+    }
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * Tokens are the canonical non-negative integer representation this
+     * simulation emits, so anything else is rejected rather than silently
+     * starting again from the beginning. An offset past the end of the list is
+     * rejected for the same reason: no such token is ever issued.
+     */
+    static startIndex(nextToken, listedCount, field) {
+        if (nextToken === undefined) {
+            return 0;
+        }
+        const startIndex = Number(nextToken);
+        if (!Number.isSafeInteger(startIndex) ||
+            startIndex < 0 ||
+            startIndex >= listedCount ||
+            String(startIndex) !== nextToken) {
+            throw new SimCognitoInvalidParameterException(`${field} is not a token this simulation issued`);
+        }
+        return startIndex;
+    }
+    static tokenFor(nextIndex, listedCount) {
+        if (nextIndex >= listedCount) {
+            return undefined;
+        }
+        return String(nextIndex);
+    }
+}
+//# sourceMappingURL=sim-cognito-page.js.map

package/dist/service/cognito/command/sim-cognito-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;GAEG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAiBzB;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,KAAK,CAAmB;IACxB,SAAS,CAAqB;IAE9C,YAAY,MAAwB,EAAE,UAAoC;QACxE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAC1C,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,eAAe,IAAI,YAAY,CAC3C,CAAC;QACF,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAC1C,UAAU,CAAC,SAAS,EACpB,MAAM,CAAC,MAAM,EACb,UAAU,CAAC,cAAc,IAAI,WAAW,CACzC,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,SAAiB,EAAE,KAAa;QACxD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAChC,SAAS,GAAG,CAAC;YACb,SAAS,GAAG,aAAa,EACzB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,yCAAyC,MAAM,CAAC,aAAa,CAAC,EAAE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB,EACnB,KAAa;QAEb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,wCAAwC,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-request-resolver.d.ts

@@ -0,0 +1,86 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoGroup } from "../user-pool/group/sim-cognito-group.js";
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoUserPoolStore } from "../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoUser } from "../user-pool/user/sim-cognito-user.js";
+import type { SimCognitoAuthorizer } from "./authorize/sim-cognito-authorizer.js";
+interface SimCognitoRequestResolverProperties {
+    readonly pools: SimCognitoUserPoolStore;
+    readonly authorizer: SimCognitoAuthorizer;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * What an operation naming a user in a pool has resolved.
+ */
+export interface SimCognitoUserInPool {
+    readonly pool: SimCognitoUserPool;
+    readonly user: SimCognitoUser;
+}
+/**
+ * What an operation naming a group in a pool has resolved.
+ */
+export interface SimCognitoGroupInPool {
+    readonly pool: SimCognitoUserPool;
+    readonly group: SimCognitoGroup;
+}
+/**
+ * What a membership operation has resolved: the group, and the user going
+ * into or out of it.
+ */
+export interface SimCognitoGroupMembership {
+    readonly group: SimCognitoGroup;
+    readonly user: SimCognitoUser;
+}
+/**
+ * What every request names: the pool, and the user or group in it.
+ */
+interface SimCognitoResourceInput {
+    readonly UserPoolId?: string | undefined;
+    readonly Username?: string | undefined;
+    readonly GroupName?: string | undefined;
+}
+/**
+ * Resolves the pool, user and group an operation names.
+ *
+ * Every one of them starts the same way: authorize against the pool's ARN,
+ * because neither a user nor a group has an ARN of its own, then find the
+ * pool, then find what the request named in it. Authorization comes first, as
+ * real IAM evaluates a request before the service handles it, so a caller
+ * with no permission is refused whether or not the user or group is there.
+ */
+export declare class SimCognitoRequestResolver {
+    private readonly pools;
+    private readonly authorizer;
+    constructor(properties: SimCognitoRequestResolverProperties);
+    /**
+     * Resolve the pool an operation names, once the caller may reach it.
+     */
+    pool(action: string, userPoolId: string | undefined, options: SimCognitoCommandOptions | undefined): SimCognitoUserPool;
+    /**
+     * Resolve the user an operation names, and the pool holding it.
+     */
+    poolUser(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoUserInPool;
+    /**
+     * Resolve the user an operation names, once the caller may reach its pool.
+     */
+    user(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoUser;
+    /**
+     * Resolve the group an operation names, and the pool holding it.
+     */
+    poolGroup(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroupInPool;
+    /**
+     * Resolve the group an operation names, once the caller may reach its pool.
+     */
+    group(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroup;
+    /**
+     * Resolve the group and the user a membership operation names.
+     *
+     * The user is resolved first, as the operation is an `Admin` one naming a
+     * user, so a request naming neither reports the user missing.
+     */
+    membership(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroupMembership;
+}
+export {};
+//# sourceMappingURL=sim-cognito-request-resolver.d.ts.map

package/dist/service/cognito/command/sim-cognito-request-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-request-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-request-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAE5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAElF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;GAEG;AACH,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAElD,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,kBAAkB,CAMpB;IAED;;OAEG;IACH,QAAQ,CACN,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,oBAAoB,CAOtB;IAED;;OAEG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,cAAc,CAEhB;IAED;;OAEG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,qBAAqB,CAOvB;IAED;;OAEG;IACH,KAAK,CACH,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,eAAe,CAEjB;IAED;;;;;OAKG;IACH,UAAU,CACR,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,yBAAyB,CAO3B;CACF"}

package/dist/service/cognito/command/sim-cognito-request-resolver.js

@@ -0,0 +1,74 @@
+import { requireSimCognitoGroupName } from "../user-pool/group/sim-cognito-group-name.js";
+import { requireSimCognitoUserPoolId } from "../user-pool/sim-cognito-user-pool-id.js";
+import { requireSimCognitoUsername } from "../user-pool/user/sim-cognito-username.js";
+/**
+ * Resolves the pool, user and group an operation names.
+ *
+ * Every one of them starts the same way: authorize against the pool's ARN,
+ * because neither a user nor a group has an ARN of its own, then find the
+ * pool, then find what the request named in it. Authorization comes first, as
+ * real IAM evaluates a request before the service handles it, so a caller
+ * with no permission is refused whether or not the user or group is there.
+ */
+export class SimCognitoRequestResolver {
+    pools;
+    authorizer;
+    constructor(properties) {
+        this.pools = properties.pools;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * Resolve the pool an operation names, once the caller may reach it.
+     */
+    pool(action, userPoolId, options) {
+        const poolId = requireSimCognitoUserPoolId(userPoolId);
+        this.authorizer.authorizeUserPool(action, poolId, options?.caller);
+        return this.pools.require(poolId);
+    }
+    /**
+     * Resolve the user an operation names, and the pool holding it.
+     */
+    poolUser(action, input, options) {
+        const pool = this.pool(action, input.UserPoolId, options);
+        return {
+            pool,
+            user: pool.requireUser(requireSimCognitoUsername(input.Username)),
+        };
+    }
+    /**
+     * Resolve the user an operation names, once the caller may reach its pool.
+     */
+    user(action, input, options) {
+        return this.poolUser(action, input, options).user;
+    }
+    /**
+     * Resolve the group an operation names, and the pool holding it.
+     */
+    poolGroup(action, input, options) {
+        const pool = this.pool(action, input.UserPoolId, options);
+        return {
+            pool,
+            group: pool.requireGroup(requireSimCognitoGroupName(input.GroupName)),
+        };
+    }
+    /**
+     * Resolve the group an operation names, once the caller may reach its pool.
+     */
+    group(action, input, options) {
+        return this.poolGroup(action, input, options).group;
+    }
+    /**
+     * Resolve the group and the user a membership operation names.
+     *
+     * The user is resolved first, as the operation is an `Admin` one naming a
+     * user, so a request naming neither reports the user missing.
+     */
+    membership(action, input, options) {
+        const { pool, user } = this.poolUser(action, input, options);
+        return {
+            group: pool.requireGroup(requireSimCognitoGroupName(input.GroupName)),
+            user,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-request-resolver.js.map

package/dist/service/cognito/command/sim-cognito-request-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-request-resolver.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-request-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAGvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AA8CtF;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IACnB,KAAK,CAA0B;IAC/B,UAAU,CAAuB;IAElD,YAAY,UAA+C;QACzD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,IAAI,CACF,MAAc,EACd,UAA8B,EAC9B,OAA6C;QAE7C,MAAM,MAAM,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,MAAc,EACd,KAA8B,EAC9B,OAA6C;QAE7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE1D,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,CACF,MAAc,EACd,KAA8B,EAC9B,OAA6C;QAE7C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,SAAS,CACP,MAAc,EACd,KAA8B,EAC9B,OAA6C;QAE7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE1D,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CACH,MAAc,EACd,KAA8B,EAC9B,OAA6C;QAE7C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACH,UAAU,CACR,MAAc,EACd,KAA8B,EAC9B,OAA6C;QAE7C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI;SACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-unsimulated-input.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Refuses a request input this simulation does not model.
+ *
+ * Both creation commands need the same two refusals, in the same words: one
+ * for an input nothing here honours at all, and one for an input whose only
+ * simulated value is the default. Keeping them in one place is what makes
+ * every refusal say why it happened rather than only that it did.
+ */
+export declare class SimCognitoUnsimulatedInput {
+    private readonly operation;
+    constructor(operation: string);
+    /**
+     * Refuse an input this simulation does not model at all.
+     */
+    refuse(option: string, value: unknown, feature: string): void;
+    /**
+     * Refuse an input set to anything but the one value this simulation models.
+     */
+    refuseUnless(option: string, value: string | boolean | undefined, simulated: string | boolean, feature: string): void;
+}
+//# sourceMappingURL=sim-cognito-unsimulated-input.d.ts.map

package/dist/service/cognito/command/sim-cognito-unsimulated-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-input.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-unsimulated-input.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,YAAY,SAAS,EAAE,MAAM,EAE5B;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAS5D;IAED;;OAEG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAAG,OAAO,EAC3B,OAAO,EAAE,MAAM,GACd,IAAI,CAUN;CACF"}

package/dist/service/cognito/command/sim-cognito-unsimulated-input.js

@@ -0,0 +1,37 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+/**
+ * Refuses a request input this simulation does not model.
+ *
+ * Both creation commands need the same two refusals, in the same words: one
+ * for an input nothing here honours at all, and one for an input whose only
+ * simulated value is the default. Keeping them in one place is what makes
+ * every refusal say why it happened rather than only that it did.
+ */
+export class SimCognitoUnsimulatedInput {
+    operation;
+    constructor(operation) {
+        this.operation = operation;
+    }
+    /**
+     * Refuse an input this simulation does not model at all.
+     */
+    refuse(option, value, feature) {
+        if (value === undefined) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`${this.operation} ${option} is not simulated: ${feature} would be ` +
+            `ignored here and applied on real AWS`);
+    }
+    /**
+     * Refuse an input set to anything but the one value this simulation models.
+     */
+    refuseUnless(option, value, simulated, feature) {
+        if (value === undefined || value === simulated) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`${this.operation} ${option} '${String(value)}' is not simulated: ` +
+            `${feature} would be ignored here and applied on real AWS. Only ` +
+            `'${String(simulated)}' is supported.`);
+    }
+}
+//# sourceMappingURL=sim-cognito-unsimulated-input.js.map

package/dist/service/cognito/command/sim-cognito-unsimulated-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-input.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-unsimulated-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,CAAS;IAEnC,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAc,EAAE,KAAc,EAAE,OAAe;QACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,sBAAsB,OAAO,YAAY;YAClE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CACV,MAAc,EACd,KAAmC,EACnC,SAA2B,EAC3B,OAAe;QAEf,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,sBAAsB;YACjE,GAAG,OAAO,uDAAuD;YACjE,IAAI,MAAM,CAAC,SAAS,CAAC,iBAAiB,CACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/user/list-users.command.d.ts

@@ -0,0 +1,30 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimCognitoUserType } from "./user.command.js";
+/**
+ * The ListUsers inputs this simulation reads, and the ones it refuses.
+ *
+ * This listing pages differently from the others: the page size is `Limit`
+ * rather than `MaxResults`, and the continuation token is `PaginationToken`
+ * rather than `NextToken`, as it is on real Cognito.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/ListUsersCommand/
+ */
+export interface SimListUsersCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly Limit?: number | undefined;
+    readonly PaginationToken?: string | undefined;
+    readonly Filter?: string | undefined;
+    readonly AttributesToGet?: readonly string[] | undefined;
+}
+/**
+ * Minimal structural sim Cognito ListUsers command.
+ */
+export interface SimListUsersCommand {
+    readonly input: SimListUsersCommandInput;
+}
+export interface SimListUsersCommandOutput {
+    readonly Users?: readonly SimCognitoUserType[] | undefined;
+    readonly PaginationToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=list-users.command.d.ts.map

package/dist/service/cognito/command/user/list-users.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/list-users.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/user/list-users.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=list-users.command.js.map

package/dist/service/cognito/command/user/list-users.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users.command.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/list-users.command.ts"],"names":[],"mappings":""}