@kensio/yulin 0.42.0 → 0.43.0

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAE3D;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,cAAc,EAAE,CAEnC;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAQ9B;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAEjC;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAQpD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAcvB"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js

@@ -0,0 +1,73 @@
+import { SimCognitoUsernameExistsException, SimCognitoUserNotFoundException, } from "../../error/sim-cognito.error.js";
+/**
+ * The users of one simulated user pool.
+ *
+ * Users are keyed by username, which is what every admin operation names one
+ * by. Usernames are case sensitive here, as they are on a pool created without
+ * a `UsernameConfiguration`, which this simulation refuses.
+ */
+export class SimCognitoUserStore {
+    users = new Map();
+    /**
+     * Every user in this pool, in creation order.
+     */
+    get all() {
+        return this.users.values().toArray();
+    }
+    /**
+     * How many users the pool holds.
+     */
+    get count() {
+        return this.users.size;
+    }
+    /**
+     * Store a newly created user, refusing a username the pool already holds.
+     */
+    add(user) {
+        if (this.users.has(user.username)) {
+            throw new SimCognitoUsernameExistsException(`User account ${user.username} already exists in this user pool.`);
+        }
+        this.users.set(user.username, user);
+    }
+    /**
+     * Forget a deleted user.
+     */
+    remove(user) {
+        this.users.delete(user.username);
+    }
+    /**
+     * Find a user by username.
+     */
+    find(username) {
+        return this.users.get(username);
+    }
+    /**
+     * Resolve a user by username, or refuse.
+     */
+    require(username) {
+        const found = this.find(username);
+        if (found === undefined) {
+            throw new SimCognitoUserNotFoundException(this.missingMessage(username));
+        }
+        return found;
+    }
+    /**
+     * Say why a username reached no user.
+     *
+     * A value that is some user's `sub` gets its own message. Real Cognito
+     * accepts a `sub` where an admin operation asks for a username, and this
+     * simulation resolves users by username only, so the refusal explains
+     * itself rather than looking like the user was never created.
+     */
+    missingMessage(username) {
+        const bySub = this.all.find((user) => user.sub === username);
+        if (bySub !== undefined) {
+            return (`User ${username} does not exist: that is the sub of user ` +
+                `${bySub.username}. Real Cognito also accepts a sub where an admin ` +
+                `operation asks for a username, and this simulation resolves users ` +
+                `by username only.`);
+        }
+        return `User ${username} does not exist.`;
+    }
+}
+//# sourceMappingURL=sim-cognito-user-store.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAI1C;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAoB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iCAAiC,CACzC,gBAAgB,IAAI,CAAC,QAAQ,oCAAoC,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAoB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,QAA4B;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CACL,QAAQ,QAAQ,2CAA2C;gBAC3D,GAAG,KAAK,CAAC,QAAQ,mDAAmD;gBACpE,oEAAoE;gBACpE,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,QAAQ,kBAAkB,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user.d.ts

@@ -0,0 +1,98 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoAttributeType, SimCognitoUserAttributes } from "./sim-cognito-user-attributes.js";
+import { SimCognitoUserPassword } from "./sim-cognito-user-password.js";
+import { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
+import type { SimCognitoUsername } from "./sim-cognito-username.js";
+interface SimCognitoUserProperties {
+    readonly username: SimCognitoUsername;
+    readonly sub: string;
+    readonly attributes: SimCognitoUserAttributes;
+    readonly password?: SimCognitoUserPassword | undefined;
+    readonly clock: SimClock;
+}
+/**
+ * One simulated Cognito user.
+ *
+ * The user's `sub` is a UUID Cognito allocates, and is not the username. Code
+ * that keys on the wrong one works only while the two happen to match, which
+ * they never do on a real pool.
+ *
+ * A user starts in `FORCE_CHANGE_PASSWORD`, because `AdminCreateUser` is the
+ * only way to make one here. That is the status that stops a user signing in
+ * with the temporary password it was given.
+ */
+export declare class SimCognitoUser {
+    readonly username: SimCognitoUsername;
+    readonly sub: string;
+    readonly creationDate: Date;
+    private readonly clock;
+    private readonly userAttributes;
+    private userStatus;
+    private userPassword;
+    private isEnabled;
+    private modifiedDate;
+    constructor(properties: SimCognitoUserProperties);
+    /**
+     * When the user last changed.
+     */
+    get lastModifiedDate(): Date;
+    /**
+     * Where the user is in the status lifecycle.
+     */
+    get status(): SimCognitoUserStatus;
+    /**
+     * Whether the user may authenticate at all.
+     *
+     * A disabled user keeps its password and its attributes, and neither real
+     * Cognito nor this simulation signs it in. A refresh is refused too, so
+     * disabling a user ends the sessions it has rather than only stopping new
+     * ones.
+     */
+    get enabled(): boolean;
+    /**
+     * The user's attributes, with the `sub` Cognito allocated among them.
+     *
+     * Real Cognito reports `sub` alongside the attributes a request set, which
+     * is where most code reads a user's identifier from.
+     */
+    get attributes(): readonly SimCognitoAttributeType[];
+    /**
+     * The user's attributes by name, without the `sub` Cognito allocated.
+     *
+     * This is what an id token's claims are built from: every attribute there
+     * has a value, and the sub is a claim of its own.
+     */
+    get attributeValues(): ReadonlyMap<string, string>;
+    /**
+     * Set the password an admin gave this user.
+     *
+     * A permanent password is the user's own, and confirms it. A temporary one
+     * leaves the user in `FORCE_CHANGE_PASSWORD`, having to replace it through
+     * the `NEW_PASSWORD_REQUIRED` challenge before it can sign in normally.
+     */
+    setPassword(password: string, permanent: boolean | undefined): void;
+    /**
+     * Whether a candidate password is this user's.
+     *
+     * A user with no password at all matches nothing. `AdminCreateUser` leaves
+     * one that way when the request named no `TemporaryPassword`: real Cognito
+     * generates one and sends it to the user, and nothing here delivers a
+     * message for the user to read it from.
+     */
+    hasPassword(candidate: string | undefined): boolean;
+    /**
+     * Apply an attribute update to this user.
+     */
+    updateAttributes(requested: readonly SimCognitoAttributeType[] | undefined): void;
+    /**
+     * Let the user authenticate again.
+     */
+    enable(): void;
+    /**
+     * Stop the user authenticating.
+     */
+    disable(): void;
+    private touch;
+}
+export {};
+//# sourceMappingURL=sim-cognito-user.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,UAAU,wBAAwB;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,SAAgB,QAAQ,EAAE,kBAAkB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,UAAU,CAA4C;IAC9D,OAAO,CAAC,YAAY,CAAqC;IACzD,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,wBAAwB,EAQ/C;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,oBAAoB,CAEjC;IAED;;;;;;;OAOG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,SAAS,uBAAuB,EAAE,CAEnD;IAED;;;;;OAKG;IACH,IAAI,eAAe,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAEjD;IAED;;;;;;OAMG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAIlE;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAElD;IAED;;OAEG;IACH,gBAAgB,CACd,SAAS,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,GACxD,IAAI,CAGN;IAED;;OAEG;IACH,MAAM,IAAI,IAAI,CAGb;IAED;;OAEG;IACH,OAAO,IAAI,IAAI,CAGd;IAED,OAAO,CAAC,KAAK;CAGd"}

package/dist/service/cognito/user-pool/user/sim-cognito-user.js

@@ -0,0 +1,122 @@
+import { SimCognitoUserPassword } from "./sim-cognito-user-password.js";
+import { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
+/**
+ * One simulated Cognito user.
+ *
+ * The user's `sub` is a UUID Cognito allocates, and is not the username. Code
+ * that keys on the wrong one works only while the two happen to match, which
+ * they never do on a real pool.
+ *
+ * A user starts in `FORCE_CHANGE_PASSWORD`, because `AdminCreateUser` is the
+ * only way to make one here. That is the status that stops a user signing in
+ * with the temporary password it was given.
+ */
+export class SimCognitoUser {
+    username;
+    sub;
+    creationDate;
+    clock;
+    userAttributes;
+    userStatus = SimCognitoUserStatus.forceChangePassword;
+    userPassword;
+    isEnabled = true;
+    modifiedDate;
+    constructor(properties) {
+        this.username = properties.username;
+        this.sub = properties.sub;
+        this.userAttributes = properties.attributes;
+        this.userPassword = properties.password;
+        this.clock = properties.clock;
+        this.creationDate = this.clock.now();
+        this.modifiedDate = this.creationDate;
+    }
+    /**
+     * When the user last changed.
+     */
+    get lastModifiedDate() {
+        return this.modifiedDate;
+    }
+    /**
+     * Where the user is in the status lifecycle.
+     */
+    get status() {
+        return this.userStatus;
+    }
+    /**
+     * Whether the user may authenticate at all.
+     *
+     * A disabled user keeps its password and its attributes, and neither real
+     * Cognito nor this simulation signs it in. A refresh is refused too, so
+     * disabling a user ends the sessions it has rather than only stopping new
+     * ones.
+     */
+    get enabled() {
+        return this.isEnabled;
+    }
+    /**
+     * The user's attributes, with the `sub` Cognito allocated among them.
+     *
+     * Real Cognito reports `sub` alongside the attributes a request set, which
+     * is where most code reads a user's identifier from.
+     */
+    get attributes() {
+        return [{ Name: "sub", Value: this.sub }, ...this.userAttributes.entries];
+    }
+    /**
+     * The user's attributes by name, without the `sub` Cognito allocated.
+     *
+     * This is what an id token's claims are built from: every attribute there
+     * has a value, and the sub is a claim of its own.
+     */
+    get attributeValues() {
+        return this.userAttributes.values;
+    }
+    /**
+     * Set the password an admin gave this user.
+     *
+     * A permanent password is the user's own, and confirms it. A temporary one
+     * leaves the user in `FORCE_CHANGE_PASSWORD`, having to replace it through
+     * the `NEW_PASSWORD_REQUIRED` challenge before it can sign in normally.
+     */
+    setPassword(password, permanent) {
+        this.userPassword = new SimCognitoUserPassword(password);
+        this.userStatus = SimCognitoUserStatus.afterPasswordSet(permanent);
+        this.touch();
+    }
+    /**
+     * Whether a candidate password is this user's.
+     *
+     * A user with no password at all matches nothing. `AdminCreateUser` leaves
+     * one that way when the request named no `TemporaryPassword`: real Cognito
+     * generates one and sends it to the user, and nothing here delivers a
+     * message for the user to read it from.
+     */
+    hasPassword(candidate) {
+        return this.userPassword?.matches(candidate) ?? false;
+    }
+    /**
+     * Apply an attribute update to this user.
+     */
+    updateAttributes(requested) {
+        this.userAttributes.update(requested);
+        this.touch();
+    }
+    /**
+     * Let the user authenticate again.
+     */
+    enable() {
+        this.isEnabled = true;
+        this.touch();
+    }
+    /**
+     * Stop the user authenticating.
+     */
+    disable() {
+        this.isEnabled = false;
+        this.touch();
+    }
+    touch() {
+        this.modifiedDate = this.clock.now();
+    }
+}
+//# sourceMappingURL=sim-cognito-user.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAWpE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACT,QAAQ,CAAqB;IAC7B,GAAG,CAAS;IACZ,YAAY,CAAO;IAElB,KAAK,CAAW;IAChB,cAAc,CAA2B;IAClD,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC;IACtD,YAAY,CAAqC;IACjD,SAAS,GAAG,IAAI,CAAC;IACjB,YAAY,CAAO;IAE3B,YAAY,UAAoC;QAC9C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,QAAgB,EAAE,SAA8B;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAA6B;QACvC,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,SAAyD;QAEzD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-username.d.ts

@@ -0,0 +1,10 @@
+import type { Brand } from "../../../../util/brand.type.js";
+export type SimCognitoUsername = Brand<string, "SimCognitoUsername">;
+/**
+ * Read a requested username, or refuse a malformed one.
+ *
+ * A username is the identifier every admin operation names a user by, and it
+ * takes the same form as a group name, which is where the rule lives.
+ */
+export declare function requireSimCognitoUsername(value: string | undefined): SimCognitoUsername;
+//# sourceMappingURL=sim-cognito-username.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-username.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-username.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAG5D,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,kBAAkB,CAGpB"}

package/dist/service/cognito/user-pool/user/sim-cognito-username.js

@@ -0,0 +1,12 @@
+import { SimCognitoIdentifier } from "../sim-cognito-identifier.js";
+/**
+ * Read a requested username, or refuse a malformed one.
+ *
+ * A username is the identifier every admin operation names a user by, and it
+ * takes the same form as a group name, which is where the rule lives.
+ */
+export function requireSimCognitoUsername(value) {
+    return new SimCognitoIdentifier({ field: "Username", subject: "user", value })
+        .value;
+}
+//# sourceMappingURL=sim-cognito-username.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-username.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-username.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAyB;IAEzB,OAAO,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SAC3E,KAA2B,CAAC;AACjC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-document.factory.d.ts

@@ -0,0 +1,43 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { SimIamPolicyDocument } from "./sim-iam-policy.js";
+/**
+ * Builds the JSON string an IAM policy document is supplied as.
+ *
+ * A test states only the part of the statement it is about. The Version, and
+ * an Allow effect, come from the defaults, since a test that has to spell them
+ * out every time buries the Action and Resource it actually cares about.
+ *
+ * ```typescript
+ * await simAws.iam().putRolePolicy(
+ *   new PutRolePolicyCommand({
+ *     RoleName: "FunctionInvoker",
+ *     PolicyName: "InvokePolicy",
+ *     PolicyDocument: simIamPolicyDocumentFactory.make({
+ *       Statement: { Action: "lambda:InvokeFunction", Resource: functionArn },
+ *     }),
+ *   }),
+ * );
+ * ```
+ *
+ * This is equally the shape of a trust policy, a resource policy or a key
+ * policy, so the one factory covers all of them:
+ *
+ * ```typescript
+ * simIamPolicyDocumentFactory.make({
+ *   Statement: {
+ *     Principal: { AWS: `arn:aws:iam::${accountId}:root` },
+ *     Action: "sts:AssumeRole",
+ *   },
+ * });
+ * ```
+ *
+ * There is no default Principal. Leaving it out keeps a statement that names
+ * one from merging with a default that names another.
+ *
+ * The default `Effect: "Allow"` only reaches a single-statement override. A
+ * multi-statement policy overrides `Statement` with an array, which replaces
+ * the default rather than merging into each entry, so every statement in an
+ * array needs its own `Effect`.
+ */
+export declare const simIamPolicyDocumentFactory: MappedFactory<SimIamPolicyDocument, string, undefined>;
+//# sourceMappingURL=sim-iam-policy-document.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-document.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-document.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,2BAA2B,wDASvC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-document.factory.js

@@ -0,0 +1,46 @@
+import { MappedFactory } from "@kensio/part-factory";
+import { jsonStringify } from "../../../util/type-guard/json.js";
+/**
+ * Builds the JSON string an IAM policy document is supplied as.
+ *
+ * A test states only the part of the statement it is about. The Version, and
+ * an Allow effect, come from the defaults, since a test that has to spell them
+ * out every time buries the Action and Resource it actually cares about.
+ *
+ * ```typescript
+ * await simAws.iam().putRolePolicy(
+ *   new PutRolePolicyCommand({
+ *     RoleName: "FunctionInvoker",
+ *     PolicyName: "InvokePolicy",
+ *     PolicyDocument: simIamPolicyDocumentFactory.make({
+ *       Statement: { Action: "lambda:InvokeFunction", Resource: functionArn },
+ *     }),
+ *   }),
+ * );
+ * ```
+ *
+ * This is equally the shape of a trust policy, a resource policy or a key
+ * policy, so the one factory covers all of them:
+ *
+ * ```typescript
+ * simIamPolicyDocumentFactory.make({
+ *   Statement: {
+ *     Principal: { AWS: `arn:aws:iam::${accountId}:root` },
+ *     Action: "sts:AssumeRole",
+ *   },
+ * });
+ * ```
+ *
+ * There is no default Principal. Leaving it out keeps a statement that names
+ * one from merging with a default that names another.
+ *
+ * The default `Effect: "Allow"` only reaches a single-statement override. A
+ * multi-statement policy overrides `Statement` with an array, which replaces
+ * the default rather than merging into each entry, so every statement in an
+ * array needs its own `Effect`.
+ */
+export const simIamPolicyDocumentFactory = new MappedFactory(() => ({
+    Version: "2012-10-17",
+    Statement: { Effect: "Allow" },
+}), (document) => jsonStringify(document));
+//# sourceMappingURL=sim-iam-policy-document.factory.js.map

package/dist/service/iam/policy/sim-iam-policy-document.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-document.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,aAAa,CAI1D,GAAG,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;CAC/B,CAAC,EACF,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CACtC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -2,5 +2,5 @@ import { DynamicFactory } from "@kensio/part-factory";
 /**
  * Generates fake IAM managed policy records.
  */
-export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
+export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy, undefined>;
 //# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}
+{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,8EAqB9B,CAAC"}

package/dist/service/iam/role/sim-iam-role.factory.d.ts

@@ -3,5 +3,5 @@ import type { SimIamRole } from "./sim-iam-role.js";
 /**
  * Generates fake IAM Role records.
  */
-export declare const simIamRoleFactory: DynamicFactory<SimIamRole>;
+export declare const simIamRoleFactory: DynamicFactory<SimIamRole, undefined>;
 //# sourceMappingURL=sim-iam-role.factory.d.ts.map

package/dist/service/iam/role/sim-iam-role.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,4BAqB5B,CAAC"}
+{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,uCAqB5B,CAAC"}

package/dist/service/lambda/function/code/sim-lambda-vm-zip-function.factory.d.ts

@@ -0,0 +1,31 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import { SimLambdaFunction } from "../sim-lambda-function.js";
+import { type LambdaCodeZipFiles } from "./make-lambda-code-zip.js";
+/**
+ * What a test asks for when it wants a function backed by zip code running in
+ * a vm sandbox.
+ *
+ * The code is either source for a single index.js module or a map of archive
+ * paths, as `makeLambdaCodeZip` accepts.
+ */
+export interface SimLambdaVmZipFunctionInput {
+    readonly name: string;
+    readonly roleArn: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly code: string | LambdaCodeZipFiles;
+    readonly handlerName: string;
+    readonly memorySizeMb: number;
+}
+/**
+ * Builds a simulated Lambda function whose code is a real zip archive run in a
+ * vm sandbox, without a simulated Lambda service to hold it.
+ *
+ * ```typescript
+ * const simFunction = simLambdaVmZipFunctionFactory.make({
+ *   code: "exports.handler = async () => null;",
+ * });
+ * ```
+ */
+export declare const simLambdaVmZipFunctionFactory: MappedFactory<SimLambdaVmZipFunctionInput, SimLambdaFunction, undefined>;
+//# sourceMappingURL=sim-lambda-vm-zip-function.factory.d.ts.map

package/dist/service/lambda/function/code/sim-lambda-vm-zip-function.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-vm-zip-function.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-vm-zip-function.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,2BAA2B,CAAC;AAGnC;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,0EAkCzC,CAAC"}

package/dist/service/lambda/function/code/sim-lambda-vm-zip-function.factory.js

@@ -0,0 +1,45 @@
+import { MappedFactory } from "@kensio/part-factory";
+import { SimZipArchive } from "../../../../util/zip/zip-archive.js";
+import { simLambdaEnvironmentFactory } from "../environment/sim-lambda-environment.factory.js";
+import { SimLambdaFunction } from "../sim-lambda-function.js";
+import { makeLambdaCodeZip, } from "./make-lambda-code-zip.js";
+import { SimLambdaVmZipCode } from "./sim-lambda-vm-zip-code.js";
+/**
+ * Builds a simulated Lambda function whose code is a real zip archive run in a
+ * vm sandbox, without a simulated Lambda service to hold it.
+ *
+ * ```typescript
+ * const simFunction = simLambdaVmZipFunctionFactory.make({
+ *   code: "exports.handler = async () => null;",
+ * });
+ * ```
+ */
+export const simLambdaVmZipFunctionFactory = new MappedFactory(() => ({
+    name: "vm-test",
+    roleArn: "arn:aws:iam::111111111111:role/VmRole",
+    accountRegionScope: {
+        accountId: "111111111111",
+        regionName: "eu-west-2",
+    },
+    code: "exports.handler = async () => null;",
+    handlerName: "index.handler",
+    memorySizeMb: 128,
+}), (input) => {
+    const archive = SimZipArchive.fromBytes(makeLambdaCodeZip(input.code));
+    const environment = simLambdaEnvironmentFactory.make({
+        functionName: input.name,
+        regionName: input.accountRegionScope.regionName,
+        memorySizeMb: input.memorySizeMb,
+    });
+    return new SimLambdaFunction({
+        name: input.name,
+        roleArn: input.roleArn,
+        accountRegionScope: input.accountRegionScope,
+        code: new SimLambdaVmZipCode({
+            archive,
+            handlerName: input.handlerName,
+            environment,
+        }),
+    });
+});
+//# sourceMappingURL=sim-lambda-vm-zip-function.factory.js.map

package/dist/service/lambda/function/code/sim-lambda-vm-zip-function.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-vm-zip-function.factory.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-vm-zip-function.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAEL,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAkBjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,aAAa,CAI5D,GAAG,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,uCAAuC;IAChD,kBAAkB,EAAE;QAClB,SAAS,EAAE,cAAiC;QAC5C,UAAU,EAAE,WAAW;KACxB;IACD,IAAI,EAAE,qCAAqC;IAC3C,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,GAAG;CAClB,CAAC,EACF,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,2BAA2B,CAAC,IAAI,CAAC;QACnD,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;QAC/C,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,OAAO,IAAI,iBAAiB,CAAC;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,IAAI,EAAE,IAAI,kBAAkB,CAAC;YAC3B,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW;SACZ,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CACF,CAAC"}

package/dist/service/lambda/function/environment/sim-lambda-environment.factory.d.ts

@@ -0,0 +1,20 @@
+import { MappedFactory } from "@kensio/part-factory";
+import { SimLambdaEnvironment } from "./sim-lambda-environment.js";
+/**
+ * What a test asks for when it wants a function environment.
+ *
+ * The declared variables are a plain object rather than the Map the
+ * environment keeps, because that is how a test writes them and how
+ * Environment.Variables arrives from the SDK.
+ */
+export interface SimLambdaEnvironmentInput {
+    readonly functionName: string;
+    readonly regionName: string;
+    readonly memorySizeMb: number;
+    readonly declaredVariables: Record<string, string>;
+}
+/**
+ * Builds the environment one simulated Lambda function runs with.
+ */
+export declare const simLambdaEnvironmentFactory: MappedFactory<SimLambdaEnvironmentInput, SimLambdaEnvironment, undefined>;
+//# sourceMappingURL=sim-lambda-environment.factory.d.ts.map

package/dist/service/lambda/function/environment/sim-lambda-environment.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-environment.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpD;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,2EAiBvC,CAAC"}

package/dist/service/lambda/function/environment/sim-lambda-environment.factory.js

@@ -0,0 +1,17 @@
+import { MappedFactory } from "@kensio/part-factory";
+import { SimLambdaEnvironment } from "./sim-lambda-environment.js";
+/**
+ * Builds the environment one simulated Lambda function runs with.
+ */
+export const simLambdaEnvironmentFactory = new MappedFactory(() => ({
+    functionName: "greeter",
+    regionName: "eu-west-2",
+    memorySizeMb: 128,
+    declaredVariables: {},
+}), (input) => new SimLambdaEnvironment({
+    functionName: input.functionName,
+    regionName: input.regionName,
+    memorySizeMb: input.memorySizeMb,
+    declaredVariables: new Map(Object.entries(input.declaredVariables)),
+}));
+//# sourceMappingURL=sim-lambda-environment.factory.js.map

package/dist/service/lambda/function/environment/sim-lambda-environment.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-environment.factory.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAgBnE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,aAAa,CAI1D,GAAG,EAAE,CAAC,CAAC;IACL,YAAY,EAAE,SAAS;IACvB,UAAU,EAAE,WAAW;IACvB,YAAY,EAAE,GAAG;IACjB,iBAAiB,EAAE,EAAE;CACtB,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;IACvB,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,iBAAiB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;CACpE,CAAC,CACL,CAAC"}

package/dist/service/lambda/function/url/sim-lambda-function-url.factory.d.ts

@@ -0,0 +1,20 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import { SimLambdaFunctionUrl } from "./sim-lambda-function-url.js";
+/**
+ * What a test asks for when it wants a Function URL record.
+ */
+export interface SimLambdaFunctionUrlInput {
+    readonly functionName: string;
+    readonly functionArn: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Builds a Function URL record on its own, without a simulated Lambda service
+ * to hold it.
+ *
+ * A test that wants a Function URL a simulated Lambda knows about calls
+ * CreateFunctionUrlConfig instead, as an application would.
+ */
+export declare const simLambdaFunctionUrlFactory: MappedFactory<SimLambdaFunctionUrlInput, SimLambdaFunctionUrl, undefined>;
+//# sourceMappingURL=sim-lambda-function-url.factory.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,EAEL,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,2EAmBvC,CAAC"}