@kensio/yulin 0.41.0 → 0.43.0

package/dist/service/cognito/user-pool/group/sim-cognito-group.d.ts

@@ -0,0 +1,77 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoUserPoolId } from "../sim-cognito-user-pool-id.js";
+import type { SimCognitoGroupName } from "./sim-cognito-group-name.js";
+import type { SimCognitoGroupSettings } from "./sim-cognito-group-settings.js";
+interface SimCognitoGroupProperties {
+    readonly name: SimCognitoGroupName;
+    readonly userPoolId: SimCognitoUserPoolId;
+    readonly settings: SimCognitoGroupSettings;
+    readonly clock: SimClock;
+}
+/**
+ * One simulated Cognito group, and the users in it.
+ *
+ * The group holds its members rather than each user holding its groups,
+ * because that is the direction deletion runs: deleting a group takes its
+ * membership with it, and leaves the users alone.
+ *
+ * `Precedence` is the property that matters most. It decides the order the
+ * `cognito:groups` claim will list a user's groups in, and which group's role
+ * reaches the `cognito:preferred_role` claim. Zero is the strongest, and a
+ * group with no precedence is weaker than any group that has one.
+ */
+export declare class SimCognitoGroup {
+    readonly name: SimCognitoGroupName;
+    readonly userPoolId: SimCognitoUserPoolId;
+    readonly creationDate: Date;
+    private readonly clock;
+    private readonly members;
+    private groupSettings;
+    private modifiedDate;
+    constructor(properties: SimCognitoGroupProperties);
+    /**
+     * What the group is for, if the request that made it said.
+     */
+    get description(): string | undefined;
+    /**
+     * Where this group sits against the others a user may belong to, if it has
+     * a precedence at all.
+     */
+    get precedence(): number | undefined;
+    /**
+     * The IAM role a member of this group prefers, if the group has one.
+     *
+     * Nothing here assumes that role. It reaches the token claims, which are
+     * not simulated yet, and identity pools, which are not simulated at all.
+     */
+    get roleArn(): string | undefined;
+    /**
+     * When the group's properties last changed.
+     */
+    get lastModifiedDate(): Date;
+    /**
+     * Replace the group's properties.
+     *
+     * `UpdateGroup` replaces all three rather than merging: real Cognito does
+     * not say which it does, and a request naming every property is the one
+     * thing that behaves the same either way.
+     */
+    update(settings: SimCognitoGroupSettings): void;
+    /**
+     * Put a user in this group.
+     *
+     * Adding a user already in the group changes nothing and is not an error,
+     * as it is not on real Cognito.
+     */
+    addMember(username: string): void;
+    /**
+     * Take a user out of this group, whether or not they were in it.
+     */
+    removeMember(username: string): void;
+    /**
+     * Whether a user is in this group.
+     */
+    hasMember(username: string): boolean;
+}
+export {};
+//# sourceMappingURL=sim-cognito-group.d.ts.map

package/dist/service/cognito/user-pool/group/sim-cognito-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-group.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/group/sim-cognito-group.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,UAAU,yBAAyB;IACjC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAe;IAC1B,SAAgB,IAAI,EAAE,mBAAmB,CAAC;IAC1C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,yBAAyB,EAOhD;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,GAAG,SAAS,CAEpC;IAED;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED;;;;;OAKG;IACH,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAG9C;IAED;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEhC;IAED;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEnC;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnC;CACF"}

package/dist/service/cognito/user-pool/group/sim-cognito-group.js

@@ -0,0 +1,90 @@
+/**
+ * One simulated Cognito group, and the users in it.
+ *
+ * The group holds its members rather than each user holding its groups,
+ * because that is the direction deletion runs: deleting a group takes its
+ * membership with it, and leaves the users alone.
+ *
+ * `Precedence` is the property that matters most. It decides the order the
+ * `cognito:groups` claim will list a user's groups in, and which group's role
+ * reaches the `cognito:preferred_role` claim. Zero is the strongest, and a
+ * group with no precedence is weaker than any group that has one.
+ */
+export class SimCognitoGroup {
+    name;
+    userPoolId;
+    creationDate;
+    clock;
+    members = new Set();
+    groupSettings;
+    modifiedDate;
+    constructor(properties) {
+        this.name = properties.name;
+        this.userPoolId = properties.userPoolId;
+        this.groupSettings = properties.settings;
+        this.clock = properties.clock;
+        this.creationDate = this.clock.now();
+        this.modifiedDate = this.creationDate;
+    }
+    /**
+     * What the group is for, if the request that made it said.
+     */
+    get description() {
+        return this.groupSettings.description;
+    }
+    /**
+     * Where this group sits against the others a user may belong to, if it has
+     * a precedence at all.
+     */
+    get precedence() {
+        return this.groupSettings.precedence;
+    }
+    /**
+     * The IAM role a member of this group prefers, if the group has one.
+     *
+     * Nothing here assumes that role. It reaches the token claims, which are
+     * not simulated yet, and identity pools, which are not simulated at all.
+     */
+    get roleArn() {
+        return this.groupSettings.roleArn;
+    }
+    /**
+     * When the group's properties last changed.
+     */
+    get lastModifiedDate() {
+        return this.modifiedDate;
+    }
+    /**
+     * Replace the group's properties.
+     *
+     * `UpdateGroup` replaces all three rather than merging: real Cognito does
+     * not say which it does, and a request naming every property is the one
+     * thing that behaves the same either way.
+     */
+    update(settings) {
+        this.groupSettings = settings;
+        this.modifiedDate = this.clock.now();
+    }
+    /**
+     * Put a user in this group.
+     *
+     * Adding a user already in the group changes nothing and is not an error,
+     * as it is not on real Cognito.
+     */
+    addMember(username) {
+        this.members.add(username);
+    }
+    /**
+     * Take a user out of this group, whether or not they were in it.
+     */
+    removeMember(username) {
+        this.members.delete(username);
+    }
+    /**
+     * Whether a user is in this group.
+     */
+    hasMember(username) {
+        return this.members.has(username);
+    }
+}
+//# sourceMappingURL=sim-cognito-group.js.map

package/dist/service/cognito/user-pool/group/sim-cognito-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-group.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/group/sim-cognito-group.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IACV,IAAI,CAAsB;IAC1B,UAAU,CAAuB;IACjC,YAAY,CAAO;IAElB,KAAK,CAAW;IAChB,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,aAAa,CAA0B;IACvC,YAAY,CAAO;IAE3B,YAAY,UAAqC;QAC/C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAiC;QACtC,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,QAAgB;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-deletion-protection.d.ts

@@ -0,0 +1,18 @@
+export type SimCognitoDeletionProtectionValue = "ACTIVE" | "INACTIVE";
+/**
+ * Whether a user pool is protected against deletion.
+ *
+ * A pool created through the API is unprotected unless the request asks for
+ * protection, which is the opposite of what the console does. A protected pool
+ * refuses `DeleteUserPool` with `InvalidParameterException` until the
+ * protection is turned off.
+ */
+export declare class SimCognitoDeletionProtection {
+    readonly value: SimCognitoDeletionProtectionValue;
+    constructor(requested: string | undefined);
+    /**
+     * Whether deletion is currently refused.
+     */
+    get isActive(): boolean;
+}
+//# sourceMappingURL=sim-cognito-deletion-protection.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-deletion-protection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-deletion-protection.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-deletion-protection.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iCAAiC,GAAG,QAAQ,GAAG,UAAU,CAAC;AAKtE;;;;;;;GAOG;AACH,qBAAa,4BAA4B;IACvC,SAAgB,KAAK,EAAE,iCAAiC,CAAC;IAEzD,YAAY,SAAS,EAAE,MAAM,GAAG,SAAS,EAkBxC;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-deletion-protection.js

@@ -0,0 +1,31 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+const deletionProtectionValues = new Set(["ACTIVE", "INACTIVE"]);
+/**
+ * Whether a user pool is protected against deletion.
+ *
+ * A pool created through the API is unprotected unless the request asks for
+ * protection, which is the opposite of what the console does. A protected pool
+ * refuses `DeleteUserPool` with `InvalidParameterException` until the
+ * protection is turned off.
+ */
+export class SimCognitoDeletionProtection {
+    value;
+    constructor(requested) {
+        if (requested === undefined) {
+            this.value = "INACTIVE";
+            return;
+        }
+        if (!deletionProtectionValues.has(requested)) {
+            throw new SimCognitoInvalidParameterException(`DeletionProtection '${requested}' is not a Cognito deletion ` +
+                `protection value: use ACTIVE or INACTIVE`);
+        }
+        this.value = requested;
+    }
+    /**
+     * Whether deletion is currently refused.
+     */
+    get isActive() {
+        return this.value === "ACTIVE";
+    }
+}
+//# sourceMappingURL=sim-cognito-deletion-protection.js.map

package/dist/service/cognito/user-pool/sim-cognito-deletion-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-deletion-protection.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-deletion-protection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAIpF,MAAM,wBAAwB,GAC5B,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACvB,KAAK,CAAoC;IAEzD,YAAY,SAA6B;QACvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IACE,CAAC,wBAAwB,CAAC,GAAG,CAC3B,SAA8C,CAC/C,EACD,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,uBAAuB,SAAS,8BAA8B;gBAC5D,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,SAA8C,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IACjC,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-identifier.d.ts

@@ -0,0 +1,26 @@
+interface SimCognitoIdentifierProperties {
+    /**
+     * The request input the value came from, such as `GroupName`, so a refusal
+     * names the field the caller wrote.
+     */
+    readonly field: string;
+    /**
+     * What the identifier names, such as `group`, for the same reason.
+     */
+    readonly subject: string;
+    readonly value: string | undefined;
+}
+/**
+ * A username or a group name.
+ *
+ * Cognito gives both the same form, so the rule lives here once: required, at
+ * most 128 characters, and no whitespace. Both are validated before anything
+ * is looked up, so a value Cognito would reject fails as a validation error
+ * rather than as a missing user or group.
+ */
+export declare class SimCognitoIdentifier {
+    readonly value: string;
+    constructor(properties: SimCognitoIdentifierProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-identifier.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-identifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-identifier.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-identifier.ts"],"names":[],"mappings":"AAUA,UAAU,8BAA8B;IACtC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,UAAU,EAAE,8BAA8B,EAwBrD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-identifier.js

@@ -0,0 +1,34 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+const maxIdentifierLength = 128;
+/**
+ * The characters Cognito allows in a username and in a group name: letters,
+ * marks, symbols, numbers and punctuation, and no whitespace among them.
+ */
+const identifierPattern = /^[\p{L}\p{M}\p{S}\p{N}\p{P}]+$/u;
+/**
+ * A username or a group name.
+ *
+ * Cognito gives both the same form, so the rule lives here once: required, at
+ * most 128 characters, and no whitespace. Both are validated before anything
+ * is looked up, so a value Cognito would reject fails as a validation error
+ * rather than as a missing user or group.
+ */
+export class SimCognitoIdentifier {
+    value;
+    constructor(properties) {
+        const { field, subject, value } = properties;
+        if (value === undefined || value === "") {
+            throw new SimCognitoInvalidParameterException(`${field} is required: name the ${subject} the request is for`);
+        }
+        if (value.length > maxIdentifierLength) {
+            throw new SimCognitoInvalidParameterException(`${field} '${value}' is longer than the ` +
+                `${String(maxIdentifierLength)} characters Cognito allows`);
+        }
+        if (!identifierPattern.test(value)) {
+            throw new SimCognitoInvalidParameterException(`${field} '${value}' contains characters Cognito does not allow: a ` +
+                `${subject} name may not hold whitespace`);
+        }
+        this.value = value;
+    }
+}
+//# sourceMappingURL=sim-cognito-identifier.js.map

package/dist/service/cognito/user-pool/sim-cognito-identifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-identifier.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-identifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAe5D;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IAE9B,YAAY,UAA0C;QACpD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAE7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,0BAA0B,OAAO,qBAAqB,CAC/D,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACvC,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,KAAK,KAAK,uBAAuB;gBACvC,GAAG,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,KAAK,KAAK,kDAAkD;gBAClE,GAAG,OAAO,+BAA+B,CAC5C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-name.d.ts

@@ -0,0 +1,22 @@
+interface SimCognitoNameProperties {
+    /**
+     * The request input the name came from, such as `PoolName`, so a refusal
+     * names the field the caller wrote rather than a term only this simulation
+     * uses.
+     */
+    readonly field: string;
+    readonly value: string | undefined;
+}
+/**
+ * The friendly name of a user pool or of an app client.
+ *
+ * Both take the same form on real Cognito: required, at most 128 characters,
+ * and limited to word characters, whitespace and `+=,.@-`. A name is not an
+ * identifier, so nothing stops two pools sharing one.
+ */
+export declare class SimCognitoName {
+    readonly value: string;
+    constructor(properties: SimCognitoNameProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-name.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-name.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-name.ts"],"names":[],"mappings":"AAKA,UAAU,wBAAwB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,UAAU,EAAE,wBAAwB,EAsB/C;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-name.js

@@ -0,0 +1,29 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+const namePattern = /^[\w\s+=,.@-]+$/u;
+const maxNameLength = 128;
+/**
+ * The friendly name of a user pool or of an app client.
+ *
+ * Both take the same form on real Cognito: required, at most 128 characters,
+ * and limited to word characters, whitespace and `+=,.@-`. A name is not an
+ * identifier, so nothing stops two pools sharing one.
+ */
+export class SimCognitoName {
+    value;
+    constructor(properties) {
+        const { field, value } = properties;
+        if (value === undefined || value === "") {
+            throw new SimCognitoInvalidParameterException(`${field} is required`);
+        }
+        if (value.length > maxNameLength) {
+            throw new SimCognitoInvalidParameterException(`${field} '${value}' is longer than the ${String(maxNameLength)} ` +
+                `characters Cognito allows`);
+        }
+        if (!namePattern.test(value)) {
+            throw new SimCognitoInvalidParameterException(`${field} '${value}' contains characters Cognito does not allow: a ` +
+                `name may hold letters, digits, underscores, whitespace and +=,.@-`);
+        }
+        this.value = value;
+    }
+}
+//# sourceMappingURL=sim-cognito-name.js.map

package/dist/service/cognito/user-pool/sim-cognito-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-name.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,aAAa,GAAG,GAAG,CAAC;AAY1B;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,KAAK,CAAS;IAE9B,YAAY,UAAoC;QAC9C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAEpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,mCAAmC,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,KAAK,KAAK,wBAAwB,MAAM,CAAC,aAAa,CAAC,GAAG;gBAChE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,KAAK,KAAK,kDAAkD;gBAClE,mEAAmE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-password-check.d.ts

@@ -0,0 +1,24 @@
+import type { SimCognitoPasswordPolicy } from "./sim-cognito-password-policy.js";
+/**
+ * Checks a password against one pool's password policy.
+ *
+ * A password is checked wherever one arrives, so the rules live here once
+ * rather than at `AdminCreateUser` and `AdminSetUserPassword` separately. The
+ * refusals say which rule the password broke, in the words real Cognito uses,
+ * because that message is often the only thing a test has to go on.
+ */
+export declare class SimCognitoPasswordCheck {
+    private readonly policy;
+    constructor(policy: SimCognitoPasswordPolicy);
+    private static refuse;
+    /**
+     * Read a password this pool accepts, or refuse it.
+     *
+     * A missing password is a validation error rather than a policy failure,
+     * because real Cognito rejects the request before it reaches the policy.
+     */
+    require(field: string, password: string | undefined): string;
+    private requirePolicy;
+    private requireCharacters;
+}
+//# sourceMappingURL=sim-cognito-password-check.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-password-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-password-check.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-check.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAsBjF;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD,YAAY,MAAM,EAAE,wBAAwB,EAE3C;IAED,OAAO,CAAC,MAAM,CAAC,MAAM;IAMrB;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAiB3D;IAED,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,iBAAiB;CAiB1B"}

package/dist/service/cognito/user-pool/sim-cognito-password-check.js

@@ -0,0 +1,73 @@
+import { SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, } from "../error/sim-cognito.error.js";
+const maxPasswordLength = 256;
+/**
+ * The characters Cognito counts as symbols in a password.
+ */
+const symbolPattern = /[\^$*.[\]{}()?"!@#%&/\\,><':;|_~`+= -]/u;
+/**
+ * The letters Cognito counts towards the uppercase and lowercase requirements.
+ *
+ * A password may hold any Unicode character, and which of them satisfy these
+ * two rules is not documented, so basic Latin is what counts here. That
+ * refuses a password of, say, Greek letters that real Cognito might accept.
+ * Refusing one it would have taken is a puzzling test failure; taking one it
+ * would have refused is a sign-up that fails in a deployment.
+ */
+const uppercasePattern = /[A-Z]/u;
+const lowercasePattern = /[a-z]/u;
+const numberPattern = /\d/u;
+/**
+ * Checks a password against one pool's password policy.
+ *
+ * A password is checked wherever one arrives, so the rules live here once
+ * rather than at `AdminCreateUser` and `AdminSetUserPassword` separately. The
+ * refusals say which rule the password broke, in the words real Cognito uses,
+ * because that message is often the only thing a test has to go on.
+ */
+export class SimCognitoPasswordCheck {
+    policy;
+    constructor(policy) {
+        this.policy = policy;
+    }
+    static refuse(reason) {
+        throw new SimCognitoInvalidPasswordException(`Password did not conform with policy: ${reason}`);
+    }
+    /**
+     * Read a password this pool accepts, or refuse it.
+     *
+     * A missing password is a validation error rather than a policy failure,
+     * because real Cognito rejects the request before it reaches the policy.
+     */
+    require(field, password) {
+        if (password === undefined || password === "") {
+            throw new SimCognitoInvalidParameterException(`${field} is required: give the user a password the pool's policy allows`);
+        }
+        if (password.length > maxPasswordLength) {
+            throw new SimCognitoInvalidPasswordException(`${field} is longer than the ${String(maxPasswordLength)} characters ` +
+                `Cognito allows`);
+        }
+        this.requirePolicy(password);
+        return password;
+    }
+    requirePolicy(password) {
+        if (password.length < this.policy.minimumLength) {
+            SimCognitoPasswordCheck.refuse("Password not long enough");
+        }
+        this.requireCharacters(password);
+    }
+    requireCharacters(password) {
+        if (this.policy.requiresUppercase && !uppercasePattern.test(password)) {
+            SimCognitoPasswordCheck.refuse("Password must have uppercase characters");
+        }
+        if (this.policy.requiresLowercase && !lowercasePattern.test(password)) {
+            SimCognitoPasswordCheck.refuse("Password must have lowercase characters");
+        }
+        if (this.policy.requiresNumbers && !numberPattern.test(password)) {
+            SimCognitoPasswordCheck.refuse("Password must have numeric characters");
+        }
+        if (this.policy.requiresSymbols && !symbolPattern.test(password)) {
+            SimCognitoPasswordCheck.refuse("Password must have symbol characters");
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-password-check.js.map

package/dist/service/cognito/user-pool/sim-cognito-password-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-password-check.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-check.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AAGvC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B;;GAEG;AACH,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAClC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAClC,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,MAAM,CAA2B;IAElD,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,MAAc;QAClC,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,MAAM,EAAE,CAClD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAa,EAAE,QAA4B;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,iEAAiE,CAC1E,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACxC,MAAM,IAAI,kCAAkC,CAC1C,GAAG,KAAK,uBAAuB,MAAM,CAAC,iBAAiB,CAAC,cAAc;gBACpE,gBAAgB,CACnB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChD,uBAAuB,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,uBAAuB,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,uBAAuB,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,uBAAuB,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,uBAAuB,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-password-policy.d.ts

@@ -0,0 +1,56 @@
+/**
+ * A user pool password policy, in the shape Cognito reports it.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_PasswordPolicyType.html
+ */
+export interface SimCognitoPasswordPolicyType {
+    readonly MinimumLength?: number | undefined;
+    readonly RequireUppercase?: boolean | undefined;
+    readonly RequireLowercase?: boolean | undefined;
+    readonly RequireNumbers?: boolean | undefined;
+    readonly RequireSymbols?: boolean | undefined;
+    readonly PasswordHistorySize?: number | undefined;
+    readonly TemporaryPasswordValidityDays?: number | undefined;
+}
+/**
+ * The sign-in policy of a user pool, which chooses the first factor a user
+ * may authenticate with.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignInPolicyType.html
+ */
+export interface SimCognitoSignInPolicyType {
+    readonly AllowedFirstAuthFactors?: readonly string[] | undefined;
+}
+/**
+ * The policies of a user pool, as Cognito groups them.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolPolicyType.html
+ */
+export interface SimCognitoUserPoolPoliciesType {
+    readonly PasswordPolicy?: SimCognitoPasswordPolicyType | undefined;
+    readonly SignInPolicy?: SimCognitoSignInPolicyType | undefined;
+}
+/**
+ * The password policy of one simulated user pool.
+ *
+ * The defaults are the ones real Cognito applies when a `CreateUserPool`
+ * request says nothing about passwords: eight characters, with an uppercase
+ * letter, a lowercase letter, a number and a symbol each required. A pool
+ * created here therefore rejects the same passwords a pool created with the
+ * SDK and no arguments would.
+ */
+export declare class SimCognitoPasswordPolicy {
+    readonly minimumLength: number;
+    readonly requiresUppercase: boolean;
+    readonly requiresLowercase: boolean;
+    readonly requiresNumbers: boolean;
+    readonly requiresSymbols: boolean;
+    readonly temporaryPasswordValidityDays: number;
+    constructor(policy?: SimCognitoPasswordPolicyType);
+    private static wholeNumberIn;
+    /**
+     * The policy as Cognito reports it on the pool.
+     */
+    toOutput(): SimCognitoPasswordPolicyType;
+}
+//# sourceMappingURL=sim-cognito-password-policy.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-password-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-password-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7D;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAChE;AAKD;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,6BAA6B,EAAE,MAAM,CAAC;IAEtD,YAAY,MAAM,GAAE,4BAAiC,EAepD;IAED,OAAO,CAAC,MAAM,CAAC,aAAa;IAmB5B;;OAEG;IACH,QAAQ,IAAI,4BAA4B,CASvC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-password-policy.js

@@ -0,0 +1,51 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+const minimumLengthRange = { least: 6, most: 99 };
+const temporaryPasswordValidityDaysRange = { least: 0, most: 365 };
+/**
+ * The password policy of one simulated user pool.
+ *
+ * The defaults are the ones real Cognito applies when a `CreateUserPool`
+ * request says nothing about passwords: eight characters, with an uppercase
+ * letter, a lowercase letter, a number and a symbol each required. A pool
+ * created here therefore rejects the same passwords a pool created with the
+ * SDK and no arguments would.
+ */
+export class SimCognitoPasswordPolicy {
+    minimumLength;
+    requiresUppercase;
+    requiresLowercase;
+    requiresNumbers;
+    requiresSymbols;
+    temporaryPasswordValidityDays;
+    constructor(policy = {}) {
+        this.minimumLength = SimCognitoPasswordPolicy.wholeNumberIn("MinimumLength", policy.MinimumLength ?? 8, minimumLengthRange);
+        this.requiresUppercase = policy.RequireUppercase ?? true;
+        this.requiresLowercase = policy.RequireLowercase ?? true;
+        this.requiresNumbers = policy.RequireNumbers ?? true;
+        this.requiresSymbols = policy.RequireSymbols ?? true;
+        this.temporaryPasswordValidityDays = SimCognitoPasswordPolicy.wholeNumberIn("TemporaryPasswordValidityDays", policy.TemporaryPasswordValidityDays ?? 7, temporaryPasswordValidityDaysRange);
+    }
+    static wholeNumberIn(field, value, range) {
+        if (!Number.isSafeInteger(value) ||
+            value < range.least ||
+            value > range.most) {
+            throw new SimCognitoInvalidParameterException(`PasswordPolicy ${field} must be a whole number between ` +
+                `${String(range.least)} and ${String(range.most)}`);
+        }
+        return value;
+    }
+    /**
+     * The policy as Cognito reports it on the pool.
+     */
+    toOutput() {
+        return {
+            MinimumLength: this.minimumLength,
+            RequireUppercase: this.requiresUppercase,
+            RequireLowercase: this.requiresLowercase,
+            RequireNumbers: this.requiresNumbers,
+            RequireSymbols: this.requiresSymbols,
+            TemporaryPasswordValidityDays: this.temporaryPasswordValidityDays,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-password-policy.js.map

package/dist/service/cognito/user-pool/sim-cognito-password-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-password-policy.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAqCpF,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClD,MAAM,kCAAkC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IACnB,aAAa,CAAS;IACtB,iBAAiB,CAAU;IAC3B,iBAAiB,CAAU;IAC3B,eAAe,CAAU;IACzB,eAAe,CAAU;IACzB,6BAA6B,CAAS;IAEtD,YAAY,MAAM,GAAiC,EAAE;QACnD,IAAI,CAAC,aAAa,GAAG,wBAAwB,CAAC,aAAa,CACzD,eAAe,EACf,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,6BAA6B,GAAG,wBAAwB,CAAC,aAAa,CACzE,+BAA+B,EAC/B,MAAM,CAAC,6BAA6B,IAAI,CAAC,EACzC,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,KAAa,EACb,KAAa,EACb,KAAwD;QAExD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK;YACnB,KAAK,GAAG,KAAK,CAAC,IAAI,EAClB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,KAAK,kCAAkC;gBACvD,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B;SAClE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.d.ts

@@ -0,0 +1,26 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+/**
+ * The part of a user pool ARN that comes before the pool's own id.
+ */
+export declare function cognitoUserPoolArnPrefix(accountRegionScope: SimAwsAccountRegionScope): string;
+interface SimCognitoUserPoolArnProperties {
+    readonly userPoolId: SimCognitoUserPoolId;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The ARN of one simulated user pool.
+ *
+ * A pool ARN is the pool id after `userpool/`, and the id already names its
+ * region, so the region appears twice:
+ * `arn:aws:cognito-idp:eu-west-2:111111111111:userpool/eu-west-2_aBcDeFgHi`.
+ * This is the resource every user pool IAM policy is written against,
+ * including the policies for app client operations, which have no ARN of
+ * their own.
+ */
+export declare class SimCognitoUserPoolArn {
+    readonly value: string;
+    constructor(properties: SimCognitoUserPoolArnProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-arn.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,kBAAkB,EAAE,wBAAwB,GAC3C,MAAM,CAIR;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,UAAU,EAAE,+BAA+B,EAItD;CACF"}