@kensio/yulin 0.42.0 → 0.43.0

package/dist/service/cognito/command/user/user.command.d.ts

@@ -0,0 +1,135 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimCognitoAttributeType } from "../../user-pool/user/sim-cognito-user-attributes.js";
+/**
+ * A user as sim Cognito reports it in `AdminCreateUser` and `ListUsers`.
+ *
+ * The attributes arrive under `Attributes` here and under `UserAttributes` in
+ * an `AdminGetUser` response. Real Cognito names them differently in the two
+ * places, so code reading the wrong one finds nothing here as well.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserType.html
+ */
+export interface SimCognitoUserType {
+    readonly Username?: string | undefined;
+    readonly Attributes?: readonly SimCognitoAttributeType[] | undefined;
+    readonly UserCreateDate?: Date | undefined;
+    readonly UserLastModifiedDate?: Date | undefined;
+    readonly Enabled?: boolean | undefined;
+    readonly UserStatus?: string | undefined;
+}
+/**
+ * A user as `AdminGetUser` reports it, which is a user pool response rather
+ * than a `UserType`.
+ */
+export interface SimCognitoDescribedUser {
+    readonly Username?: string | undefined;
+    readonly UserAttributes?: readonly SimCognitoAttributeType[] | undefined;
+    readonly UserCreateDate?: Date | undefined;
+    readonly UserLastModifiedDate?: Date | undefined;
+    readonly Enabled?: boolean | undefined;
+    readonly UserStatus?: string | undefined;
+}
+/**
+ * What every admin user operation names: the pool, and the user in it.
+ */
+export interface SimCognitoAdminUserCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly Username?: string | undefined;
+}
+/**
+ * The AdminCreateUser inputs this simulation reads, and the ones it refuses.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminCreateUserCommand/
+ */
+export interface SimAdminCreateUserCommandInput extends SimCognitoAdminUserCommandInput {
+    readonly UserAttributes?: readonly SimCognitoAttributeType[] | undefined;
+    readonly TemporaryPassword?: string | undefined;
+    readonly MessageAction?: string | undefined;
+    readonly DesiredDeliveryMediums?: readonly string[] | undefined;
+    readonly ForceAliasCreation?: boolean | undefined;
+    readonly ValidationData?: readonly SimCognitoAttributeType[] | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminCreateUser command.
+ */
+export interface SimAdminCreateUserCommand {
+    readonly input: SimAdminCreateUserCommandInput;
+}
+export interface SimAdminCreateUserCommandOutput {
+    readonly User?: SimCognitoUserType | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Cognito AdminGetUser command.
+ */
+export interface SimAdminGetUserCommand {
+    readonly input: SimCognitoAdminUserCommandInput;
+}
+export interface SimAdminGetUserCommandOutput extends SimCognitoDescribedUser {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Cognito AdminDeleteUser command.
+ */
+export interface SimAdminDeleteUserCommand {
+    readonly input: SimCognitoAdminUserCommandInput;
+}
+export interface SimAdminDeleteUserCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The AdminSetUserPassword inputs, which are all simulated.
+ *
+ * `Permanent` is the one that matters: without it the password is temporary,
+ * and the user is left in `FORCE_CHANGE_PASSWORD` unable to sign in normally.
+ */
+export interface SimAdminSetUserPasswordCommandInput extends SimCognitoAdminUserCommandInput {
+    readonly Password?: string | undefined;
+    readonly Permanent?: boolean | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminSetUserPassword command.
+ */
+export interface SimAdminSetUserPasswordCommand {
+    readonly input: SimAdminSetUserPasswordCommandInput;
+}
+export interface SimAdminSetUserPasswordCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The AdminUpdateUserAttributes inputs this simulation reads, and the one it
+ * refuses.
+ */
+export interface SimAdminUpdateUserAttributesCommandInput extends SimCognitoAdminUserCommandInput {
+    readonly UserAttributes?: readonly SimCognitoAttributeType[] | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminUpdateUserAttributes command.
+ */
+export interface SimAdminUpdateUserAttributesCommand {
+    readonly input: SimAdminUpdateUserAttributesCommandInput;
+}
+export interface SimAdminUpdateUserAttributesCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Cognito AdminDisableUser command.
+ */
+export interface SimAdminDisableUserCommand {
+    readonly input: SimCognitoAdminUserCommandInput;
+}
+export interface SimAdminDisableUserCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Cognito AdminEnableUser command.
+ */
+export interface SimAdminEnableUserCommand {
+    readonly input: SimCognitoAdminUserCommandInput;
+}
+export interface SimAdminEnableUserCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=user.command.d.ts.map

package/dist/service/cognito/command/user/user.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAEnG;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA+B,SAAQ,+BAA+B;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mCAAoC,SAAQ,+BAA+B;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,wCAAyC,SAAQ,+BAA+B;IAC/F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/user/user.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user.command.js.map

package/dist/service/cognito/command/user/user.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.command.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user.command.ts"],"names":[],"mappings":""}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.d.ts

@@ -11,9 +11,10 @@ export declare class SimCognitoUserPoolView {
     /**
      * A pool as `CreateUserPool` and `DescribeUserPool` report it.
      *
-     * `MfaConfiguration` is always `OFF` because MFA is not simulated, and
-     * `EstimatedNumberOfUsers` is always zero because a pool holds no users
-     * yet.
+     * `MfaConfiguration` is always `OFF` because MFA is not simulated.
+     * `EstimatedNumberOfUsers` is how many users the pool holds now. Real
+     * Cognito refreshes that number periodically rather than on each write, so
+     * it can lag there in a way it never does here.
      */
     describe(pool: SimCognitoUserPool): SimCognitoUserPoolType;
     /**

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,sBAAsB,CAYzD;IAED;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,kBAAkB,GAAG,iCAAiC,CAOrE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,sBAAsB,CAYzD;IAED;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,kBAAkB,GAAG,iCAAiC,CAOrE;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.js

@@ -8,9 +8,10 @@ export class SimCognitoUserPoolView {
     /**
      * A pool as `CreateUserPool` and `DescribeUserPool` report it.
      *
-     * `MfaConfiguration` is always `OFF` because MFA is not simulated, and
-     * `EstimatedNumberOfUsers` is always zero because a pool holds no users
-     * yet.
+     * `MfaConfiguration` is always `OFF` because MFA is not simulated.
+     * `EstimatedNumberOfUsers` is how many users the pool holds now. Real
+     * Cognito refreshes that number periodically rather than on each write, so
+     * it can lag there in a way it never does here.
      */
     describe(pool) {
         return {
@@ -20,7 +21,7 @@ export class SimCognitoUserPoolView {
             Policies: { PasswordPolicy: pool.passwordPolicy.toOutput() },
             DeletionProtection: pool.deletionProtection.value,
             MfaConfiguration: "OFF",
-            EstimatedNumberOfUsers: 0,
+            EstimatedNumberOfUsers: pool.userCount,
             CreationDate: pool.creationDate,
             LastModifiedDate: pool.lastModifiedDate,
         };

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAwB;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;YACnB,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK;YACjD,gBAAgB,EAAE,KAAK;YACvB,sBAAsB,EAAE,CAAC;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAwB;QAChC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAwB;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;YACnB,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK;YACjD,gBAAgB,EAAE,KAAK;YACvB,sBAAsB,EAAE,IAAI,CAAC,SAAS;YACtC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAwB;QAChC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/error/sim-cognito.error.d.ts

@@ -31,4 +31,55 @@ export declare class SimCognitoInvalidParameterException extends SimCognitoError
     readonly name = "InvalidParameterException";
     constructor(message: string);
 }
+/**
+ * Simulated Cognito UsernameExistsException error.
+ *
+ * Real Cognito reports a second user created with a username the pool already
+ * holds this way.
+ */
+export declare class SimCognitoUsernameExistsException extends SimCognitoError {
+    readonly name = "UsernameExistsException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito GroupExistsException error.
+ *
+ * Real Cognito reports a second group created with a name the pool already
+ * holds this way.
+ */
+export declare class SimCognitoGroupExistsException extends SimCognitoError {
+    readonly name = "GroupExistsException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito UserNotFoundException error.
+ *
+ * Real Cognito reports an operation naming a user its pool does not hold this
+ * way, rather than as a missing resource.
+ */
+export declare class SimCognitoUserNotFoundException extends SimCognitoError {
+    readonly name = "UserNotFoundException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito NotAuthorizedException error.
+ *
+ * Real Cognito reports a failed sign-in this way, whether the password was
+ * wrong, the user was disabled or the request could not be verified. It says
+ * no more than that on purpose, and neither does this.
+ */
+export declare class SimCognitoNotAuthorizedException extends SimCognitoError {
+    readonly name = "NotAuthorizedException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito InvalidPasswordException error.
+ *
+ * Real Cognito reports a password its pool's password policy does not allow
+ * this way, and says which rule the password broke.
+ */
+export declare class SimCognitoInvalidPasswordException extends SimCognitoError {
+    readonly name = "InvalidPasswordException";
+    constructor(message: string);
+}
 //# sourceMappingURL=sim-cognito.error.d.ts.map

package/dist/service/cognito/error/sim-cognito.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,SAAS,EAAE,uBAAuB;IAFpD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,uBAA4B,EAGxD;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,eAAe;IACtE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,eAAe;IACtE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-cognito.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,SAAS,EAAE,uBAAuB;IAFpD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,uBAA4B,EAGxD;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,eAAe;IACtE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,eAAe;IACtE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,iCAAkC,SAAQ,eAAe;IACpE,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,8BAA+B,SAAQ,eAAe;IACjE,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,+BAAgC,SAAQ,eAAe;IAClE,SAAyB,IAAI,2BAA2B;IAExD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,gCAAiC,SAAQ,eAAe;IACnE,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,kCAAmC,SAAQ,eAAe;IACrE,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/cognito/error/sim-cognito.error.js

@@ -32,4 +32,65 @@ export class SimCognitoInvalidParameterException extends SimCognitoError {
         super(message, { httpStatusCode: 400 });
     }
 }
+/**
+ * Simulated Cognito UsernameExistsException error.
+ *
+ * Real Cognito reports a second user created with a username the pool already
+ * holds this way.
+ */
+export class SimCognitoUsernameExistsException extends SimCognitoError {
+    name = "UsernameExistsException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito GroupExistsException error.
+ *
+ * Real Cognito reports a second group created with a name the pool already
+ * holds this way.
+ */
+export class SimCognitoGroupExistsException extends SimCognitoError {
+    name = "GroupExistsException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito UserNotFoundException error.
+ *
+ * Real Cognito reports an operation naming a user its pool does not hold this
+ * way, rather than as a missing resource.
+ */
+export class SimCognitoUserNotFoundException extends SimCognitoError {
+    name = "UserNotFoundException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito NotAuthorizedException error.
+ *
+ * Real Cognito reports a failed sign-in this way, whether the password was
+ * wrong, the user was disabled or the request could not be verified. It says
+ * no more than that on purpose, and neither does this.
+ */
+export class SimCognitoNotAuthorizedException extends SimCognitoError {
+    name = "NotAuthorizedException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito InvalidPasswordException error.
+ *
+ * Real Cognito reports a password its pool's password policy does not allow
+ * this way, and says which rule the password broke.
+ */
+export class SimCognitoInvalidPasswordException extends SimCognitoError {
+    name = "InvalidPasswordException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
 //# sourceMappingURL=sim-cognito.error.js.map

package/dist/service/cognito/error/sim-cognito.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA4B,EAAE;QAEvD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA4B,EAAE;QAEvD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iCAAkC,SAAQ,eAAe;IAC3C,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,8BAA+B,SAAQ,eAAe;IACxC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAExD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gCAAiC,SAAQ,eAAe;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,kCAAmC,SAAQ,eAAe;IAC5C,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/cognito/index.d.ts

@@ -7,7 +7,22 @@ export { SimCognitoPasswordPolicy, type SimCognitoPasswordPolicyType, type SimCo
 export { SimCognitoUserPoolClient } from "./user-pool/client/sim-cognito-user-pool-client.js";
 export type { SimCognitoUserPoolClientId } from "./user-pool/client/sim-cognito-user-pool-client-id.js";
 export { SimCognitoExplicitAuthFlows } from "./user-pool/client/sim-cognito-explicit-auth-flows.js";
+export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cognito-prevent-user-existence-errors.js";
 export { SimCognitoTokenLifetime, type SimCognitoTokenValidityUnit, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, type SimCognitoTokenValidityInput, type SimCognitoTokenValidityUnitsType, } from "./user-pool/client/sim-cognito-token-validity.js";
-export { SimCognitoError, SimCognitoInvalidParameterException, SimCognitoResourceNotFoundException, } from "./error/sim-cognito.error.js";
+export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
+export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
+export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
+export type { SimCognitoUsername } from "./user-pool/user/sim-cognito-username.js";
+export { SimCognitoUserStatus, type SimCognitoUserStatusValue, } from "./user-pool/user/sim-cognito-user-status.js";
+export { SimCognitoUserAttributes, type SimCognitoAttributeType, } from "./user-pool/user/sim-cognito-user-attributes.js";
+export { SimCognitoGroup } from "./user-pool/group/sim-cognito-group.js";
+export type { SimCognitoGroupName } from "./user-pool/group/sim-cognito-group-name.js";
+export { SimCognitoGroupSettings, type SimCognitoGroupSettingsInput, } from "./user-pool/group/sim-cognito-group-settings.js";
+export { SimCognitoSigningKey, type SimCognitoJwk, type SimCognitoJwks, } from "./user-pool/token/sim-cognito-signing-key.js";
+export { SimCognitoTokenIssuer, type SimCognitoIssuedTokens, } from "./user-pool/token/sim-cognito-token-issuer.js";
+export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
+export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
+export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
+export { SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/cognito/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,yBAAyB,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,GAClC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/index.js

@@ -5,7 +5,20 @@ export { SimCognitoDeletionProtection, } from "./user-pool/sim-cognito-deletion-
 export { SimCognitoPasswordPolicy, } from "./user-pool/sim-cognito-password-policy.js";
 export { SimCognitoUserPoolClient } from "./user-pool/client/sim-cognito-user-pool-client.js";
 export { SimCognitoExplicitAuthFlows } from "./user-pool/client/sim-cognito-explicit-auth-flows.js";
+export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cognito-prevent-user-existence-errors.js";
 export { SimCognitoTokenLifetime, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, } from "./user-pool/client/sim-cognito-token-validity.js";
-export { SimCognitoError, SimCognitoInvalidParameterException, SimCognitoResourceNotFoundException, } from "./error/sim-cognito.error.js";
+export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
+export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
+export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
+export { SimCognitoUserStatus, } from "./user-pool/user/sim-cognito-user-status.js";
+export { SimCognitoUserAttributes, } from "./user-pool/user/sim-cognito-user-attributes.js";
+export { SimCognitoGroup } from "./user-pool/group/sim-cognito-group.js";
+export { SimCognitoGroupSettings, } from "./user-pool/group/sim-cognito-group-settings.js";
+export { SimCognitoSigningKey, } from "./user-pool/token/sim-cognito-signing-key.js";
+export { SimCognitoTokenIssuer, } from "./user-pool/token/sim-cognito-token-issuer.js";
+export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
+export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
+export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
+export { SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.js.map

package/dist/service/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,wBAAwB,GAIzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,wBAAwB,GAIzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAEtE,OAAO,EACL,oBAAoB,GAErB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,EACL,uBAAuB,GAExB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,GAGrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/registry/sim-cognito-user-pool-registry.d.ts

@@ -0,0 +1,31 @@
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+/**
+ * Simulated Cognito cross-Account registry of user pools.
+ *
+ * A served JWKS request carries the region in its hostname and the pool id in
+ * its path, and says nothing about the Account. Simulated Cognito state is per
+ * Account/Region, so the serving layer needs a way from a pool id to the pool
+ * that has it. This registry is that lookup, which is also why pool ids are
+ * allocated against it and are unique across every Account and Region of one
+ * simulated AWS environment.
+ */
+export declare class SimCognitoUserPoolRegistry {
+    private readonly poolsById;
+    /**
+     * The pool ids already in use in this simulated AWS.
+     */
+    get ids(): Set<string>;
+    /**
+     * Register a newly created pool, so its public endpoints resolve.
+     */
+    register(pool: SimCognitoUserPool): void;
+    /**
+     * Forget a deleted pool, so its public endpoints stop resolving.
+     */
+    deregister(pool: SimCognitoUserPool): void;
+    /**
+     * Find a pool by id, in whichever Account and Region created it.
+     */
+    find(userPoolId: string): SimCognitoUserPool | undefined;
+}
+//# sourceMappingURL=sim-cognito-user-pool-registry.d.ts.map

package/dist/service/cognito/registry/sim-cognito-user-pool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/registry/sim-cognito-user-pool-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAGhF;;;;;;;;;GASG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGtB;IAEJ;;OAEG;IACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAErB;IAED;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAEvC;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAEzC;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEvD;CACF"}

package/dist/service/cognito/registry/sim-cognito-user-pool-registry.js

@@ -0,0 +1,38 @@
+/**
+ * Simulated Cognito cross-Account registry of user pools.
+ *
+ * A served JWKS request carries the region in its hostname and the pool id in
+ * its path, and says nothing about the Account. Simulated Cognito state is per
+ * Account/Region, so the serving layer needs a way from a pool id to the pool
+ * that has it. This registry is that lookup, which is also why pool ids are
+ * allocated against it and are unique across every Account and Region of one
+ * simulated AWS environment.
+ */
+export class SimCognitoUserPoolRegistry {
+    poolsById = new Map();
+    /**
+     * The pool ids already in use in this simulated AWS.
+     */
+    get ids() {
+        return new Set(this.poolsById.keys());
+    }
+    /**
+     * Register a newly created pool, so its public endpoints resolve.
+     */
+    register(pool) {
+        this.poolsById.set(pool.id, pool);
+    }
+    /**
+     * Forget a deleted pool, so its public endpoints stop resolving.
+     */
+    deregister(pool) {
+        this.poolsById.delete(pool.id);
+    }
+    /**
+     * Find a pool by id, in whichever Account and Region created it.
+     */
+    find(userPoolId) {
+        return this.poolsById.get(userPoolId);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-registry.js.map

package/dist/service/cognito/registry/sim-cognito-user-pool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-registry.js","sourceRoot":"","sources":["../../../../src/service/cognito/registry/sim-cognito-user-pool-registry.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,GAAG,IAAI,GAAG,EAGjC,CAAC;IAEJ;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAwB;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAwB;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAAkB;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAkC,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.d.ts

@@ -0,0 +1,11 @@
+import { type SimSdkCommandRoute } from "../../../sdk/index.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+/**
+ * The SDK Command routes for signing in and signing out.
+ *
+ * The client-side routes read no caller from the SDK context, because real
+ * Cognito authorizes them with no IAM policy: a browser calling `InitiateAuth`
+ * holds no AWS credentials at all.
+ */
+export declare function simCognitoSdkAuthRoutes(simCognito: SimCognitoIdentityProvider): readonly (readonly [string, SimSdkCommandRoute])[];
+//# sourceMappingURL=sim-cognito-sdk-auth-routes.d.ts.map

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-auth-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CA4CpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.js

@@ -0,0 +1,37 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * The SDK Command routes for signing in and signing out.
+ *
+ * The client-side routes read no caller from the SDK context, because real
+ * Cognito authorizes them with no IAM policy: a browser calling `InitiateAuth`
+ * holds no AWS credentials at all.
+ */
+export function simCognitoSdkAuthRoutes(simCognito) {
+    return [
+        [
+            "AdminInitiateAuthCommand",
+            async (command, context) => await simCognito.adminInitiateAuth(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminRespondToAuthChallengeCommand",
+            async (command, context) => await simCognito.adminRespondToAuthChallenge(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "InitiateAuthCommand",
+            async (command) => await simCognito.initiateAuth(command),
+        ],
+        [
+            "RespondToAuthChallengeCommand",
+            async (command) => await simCognito.respondToAuthChallenge(command),
+        ],
+        [
+            "GlobalSignOutCommand",
+            async (command) => await simCognito.globalSignOut(command),
+        ],
+        [
+            "AdminUserGlobalSignOutCommand",
+            async (command, context) => await simCognito.adminUserGlobalSignOut(command, simSdkCallerOptions(context)),
+        ],
+    ];
+}
+//# sourceMappingURL=sim-cognito-sdk-auth-routes.js.map

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-auth-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAW/B;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAsC;IAEtC,OAAO;QACL;YACE,0BAA0B;YAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,iBAAiB,CAChC,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oCAAoC;YACpC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,2BAA2B,CAC1C,OAAgD,EAChD,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,qBAAqB;YACrB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,YAAY,CAAC,OAAiC,CAAC;SACnE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,CAC5C;SACJ;QACD;YACE,sBAAsB;YACtB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,aAAa,CAAC,OAAkC,CAAC;SACrE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts

@@ -1,7 +1,11 @@
-import { type SimSdkCommandRoute, type SimSdkCommandRouter } from "../../../sdk/index.js";
+import type { SimSdkCommandRoute, SimSdkCommandRouter } from "../../../sdk/index.js";
 import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
 /**
  * Routes intercepted SDK Commands to one scoped simulated Cognito.
+ *
+ * The routes are grouped the way the operations themselves are, into pools and
+ * their app clients, the users and groups in them, and signing in, so that
+ * adding an operation touches the group it belongs to.
  */
 export declare class SimCognitoSdkCommandRouter implements SimSdkCommandRouter {
     private readonly routes;

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAa/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;GAEG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAmEjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAKtF;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAMjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js

@@ -1,43 +1,20 @@
-import { simSdkCallerOptions, } from "../../../sdk/index.js";
+import { simCognitoSdkAuthRoutes } from "./sim-cognito-sdk-auth-routes.js";
+import { simCognitoSdkDirectoryRoutes } from "./sim-cognito-sdk-directory-routes.js";
+import { simCognitoSdkPoolRoutes } from "./sim-cognito-sdk-pool-routes.js";
 /**
  * Routes intercepted SDK Commands to one scoped simulated Cognito.
+ *
+ * The routes are grouped the way the operations themselves are, into pools and
+ * their app clients, the users and groups in them, and signing in, so that
+ * adding an operation touches the group it belongs to.
  */
 export class SimCognitoSdkCommandRouter {
     routes;
     constructor(simCognito) {
         this.routes = new Map([
-            [
-                "CreateUserPoolCommand",
-                async (command, context) => await simCognito.createUserPool(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "DescribeUserPoolCommand",
-                async (command, context) => await simCognito.describeUserPool(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "DeleteUserPoolCommand",
-                async (command, context) => await simCognito.deleteUserPool(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "ListUserPoolsCommand",
-                async (command, context) => await simCognito.listUserPools(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "CreateUserPoolClientCommand",
-                async (command, context) => await simCognito.createUserPoolClient(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "DescribeUserPoolClientCommand",
-                async (command, context) => await simCognito.describeUserPoolClient(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "DeleteUserPoolClientCommand",
-                async (command, context) => await simCognito.deleteUserPoolClient(command, simSdkCallerOptions(context)),
-            ],
-            [
-                "ListUserPoolClientsCommand",
-                async (command, context) => await simCognito.listUserPoolClients(command, simSdkCallerOptions(context)),
-            ],
+            ...simCognitoSdkPoolRoutes(simCognito),
+            ...simCognitoSdkDirectoryRoutes(simCognito),
+            ...simCognitoSdkAuthRoutes(simCognito),
         ]);
     }
     /**

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAe/B;;GAEG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,uBAAuB;gBACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,cAAc,CAC7B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,yBAAyB;gBACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,uBAAuB;gBACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,cAAc,CAC7B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,sBAAsB;gBACtB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,aAAa,CAC5B,OAAkC,EAClC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,6BAA6B;gBAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,+BAA+B;gBAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,6BAA6B;gBAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,4BAA4B;gBAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,mBAAmB,CAClC,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,4BAA4B,CAAC,UAAU,CAAC;YAC3C,GAAG,uBAAuB,CAAC,UAAU,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}