@kensio/yulin 0.42.0 → 0.44.0

package/dist/service/cognito/command/group/sim-cognito-group-membership-commands.js

@@ -0,0 +1,80 @@
+import { SimCognitoPage } from "../sim-cognito-page.js";
+import { SimCognitoUserView } from "../user/sim-cognito-user-view.js";
+import { SimCognitoGroupView } from "./sim-cognito-group-view.js";
+/**
+ * How many entries a page holds when the request does not say.
+ */
+const defaultLimit = 60;
+/**
+ * The commands that put users in groups, take them out again, and read the
+ * membership either way round.
+ */
+export class SimCognitoGroupMembershipCommands {
+    resolver;
+    groupView = new SimCognitoGroupView();
+    userView = new SimCognitoUserView();
+    constructor(properties) {
+        this.resolver = properties.resolver;
+    }
+    /**
+     * Put a user in a group.
+     *
+     * Adding a user already in the group succeeds and changes nothing, as it
+     * does on real Cognito, so nothing has to check first.
+     */
+    addUserToGroup(command, options) {
+        const { group, user } = this.resolver.membership("cognito-idp:AdminAddUserToGroup", command.input, options);
+        group.addMember(user.username);
+        return { $metadata: {} };
+    }
+    /**
+     * Take a user out of a group.
+     *
+     * Removing a user who is not in the group succeeds too, for the same
+     * reason.
+     */
+    removeUserFromGroup(command, options) {
+        const { group, user } = this.resolver.membership("cognito-idp:AdminRemoveUserFromGroup", command.input, options);
+        group.removeMember(user.username);
+        return { $metadata: {} };
+    }
+    /**
+     * List the groups a user belongs to, strongest precedence first.
+     *
+     * That order is what the `cognito:groups` claim will use, so the first
+     * group is the one whose role would reach `cognito:preferred_role`.
+     */
+    listGroupsForUser(command, options) {
+        const { input } = command;
+        const { pool, user } = this.resolver.poolUser("cognito-idp:AdminListGroupsForUser", input, options);
+        const page = new SimCognitoPage(pool.groupsOf(user.username), {
+            maxResults: input.Limit ?? defaultLimit,
+            nextToken: input.NextToken,
+            maxResultsField: "Limit",
+        });
+        return {
+            $metadata: {},
+            Groups: page.items.map((group) => this.groupView.describe(group)),
+            NextToken: page.nextToken,
+        };
+    }
+    /**
+     * List the users in a group, in the order they were created.
+     */
+    listUsersInGroup(command, options) {
+        const { input } = command;
+        const { pool, group } = this.resolver.poolGroup("cognito-idp:ListUsersInGroup", input, options);
+        const members = pool.users.filter((user) => group.hasMember(user.username));
+        const page = new SimCognitoPage(members, {
+            maxResults: input.Limit ?? defaultLimit,
+            nextToken: input.NextToken,
+            maxResultsField: "Limit",
+        });
+        return {
+            $metadata: {},
+            Users: page.items.map((user) => this.userView.entry(user)),
+            NextToken: page.nextToken,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-group-membership-commands.js.map

package/dist/service/cognito/command/group/sim-cognito-group-membership-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-group-membership-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-group-membership-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAoBlE;;GAEG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;GAGG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAA4B;IACpC,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAErD,YAAY,UAAuD;QACjE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,OAAsC,EACtC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAC9C,iCAAiC,EACjC,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CACjB,OAA2C,EAC3C,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAC9C,sCAAsC,EACtC,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3C,oCAAoC,EACpC,KAAK,EACL,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC5D,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,YAAY;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC7C,8BAA8B,EAC9B,KAAK,EACL,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5E,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,OAAO,EAAE;YACvC,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,YAAY;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/group/sim-cognito-group-view.d.ts

@@ -0,0 +1,18 @@
+import type { SimCognitoGroup } from "../../user-pool/group/sim-cognito-group.js";
+import type { SimCognitoGroupType } from "./group.command.js";
+/**
+ * How a simulated group is reported back to a caller.
+ *
+ * Every group operation reports the same shape, and a property the group does
+ * not have is left out rather than reported as a default, which is what real
+ * Cognito does: a group with no precedence has no `Precedence` in the
+ * response, and code reading one has to cope with that.
+ */
+export declare class SimCognitoGroupView {
+    /**
+     * A group as `CreateGroup`, `GetGroup`, `UpdateGroup` and the group
+     * listings report it.
+     */
+    describe(group: SimCognitoGroup): SimCognitoGroupType;
+}
+//# sourceMappingURL=sim-cognito-group-view.d.ts.map

package/dist/service/cognito/command/group/sim-cognito-group-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-group-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-group-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,mBAAmB,CAUpD;CACF"}

package/dist/service/cognito/command/group/sim-cognito-group-view.js

@@ -0,0 +1,26 @@
+/**
+ * How a simulated group is reported back to a caller.
+ *
+ * Every group operation reports the same shape, and a property the group does
+ * not have is left out rather than reported as a default, which is what real
+ * Cognito does: a group with no precedence has no `Precedence` in the
+ * response, and code reading one has to cope with that.
+ */
+export class SimCognitoGroupView {
+    /**
+     * A group as `CreateGroup`, `GetGroup`, `UpdateGroup` and the group
+     * listings report it.
+     */
+    describe(group) {
+        return {
+            GroupName: group.name,
+            UserPoolId: group.userPoolId,
+            Description: group.description,
+            Precedence: group.precedence,
+            RoleArn: group.roleArn,
+            CreationDate: group.creationDate,
+            LastModifiedDate: group.lastModifiedDate,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-group-view.js.map

package/dist/service/cognito/command/group/sim-cognito-group-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-group-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-group-view.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;;OAGG;IACH,QAAQ,CAAC,KAAsB;QAC7B,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/group/sim-cognito-list-groups.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
+import type { SimListGroupsCommand, SimListGroupsCommandOutput } from "./group.command.js";
+interface SimCognitoListGroupsProperties {
+    readonly resolver: SimCognitoRequestResolver;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The ListGroups command.
+ */
+export declare class SimCognitoListGroups {
+    private readonly resolver;
+    private readonly view;
+    constructor(properties: SimCognitoListGroupsProperties);
+    /**
+     * List the groups of one pool, in creation order.
+     *
+     * This is not precedence order. `AdminListGroupsForUser` is the one that
+     * sorts, because that is the listing whose order decides which group's role
+     * a user prefers.
+     */
+    handle(command: SimListGroupsCommand, options?: SimCognitoCommandOptions): SimListGroupsCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-list-groups.d.ts.map

package/dist/service/cognito/command/group/sim-cognito-list-groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-groups.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-list-groups.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,oBAAoB,CAAC;AAE5B,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;CAC9C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAOD;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,8BAA8B,EAErD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,wBAAwB,GACjC,0BAA0B,CAmB5B;CACF"}

package/dist/service/cognito/command/group/sim-cognito-list-groups.js

@@ -0,0 +1,38 @@
+import { SimCognitoPage } from "../sim-cognito-page.js";
+import { SimCognitoGroupView } from "./sim-cognito-group-view.js";
+/**
+ * How many groups a page holds when the request does not say.
+ */
+const defaultLimit = 60;
+/**
+ * The ListGroups command.
+ */
+export class SimCognitoListGroups {
+    resolver;
+    view = new SimCognitoGroupView();
+    constructor(properties) {
+        this.resolver = properties.resolver;
+    }
+    /**
+     * List the groups of one pool, in creation order.
+     *
+     * This is not precedence order. `AdminListGroupsForUser` is the one that
+     * sorts, because that is the listing whose order decides which group's role
+     * a user prefers.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const pool = this.resolver.pool("cognito-idp:ListGroups", input.UserPoolId, options);
+        const page = new SimCognitoPage(pool.groups, {
+            maxResults: input.Limit ?? defaultLimit,
+            nextToken: input.NextToken,
+            maxResultsField: "Limit",
+        });
+        return {
+            $metadata: {},
+            Groups: page.items.map((group) => this.view.describe(group)),
+            NextToken: page.nextToken,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-list-groups.js.map

package/dist/service/cognito/command/group/sim-cognito-list-groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-groups.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/group/sim-cognito-list-groups.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAclE;;GAEG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAA4B;IACpC,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA6B,EAC7B,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,wBAAwB,EACxB,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YAC3C,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,YAAY;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-command.types.d.ts

@@ -5,4 +5,9 @@ export type { SimCognitoUserPoolType, SimCreateUserPoolCommand, SimCreateUserPoo
 export type { SimCognitoUserPoolDescriptionType, SimListUserPoolsCommand, SimListUserPoolsCommandInput, SimListUserPoolsCommandOutput, } from "./user-pool/list-user-pools.command.js";
 export type { SimCognitoUserPoolClientType, SimCreateUserPoolClientCommand, SimCreateUserPoolClientCommandInput, SimCreateUserPoolClientCommandOutput, SimDeleteUserPoolClientCommand, SimDeleteUserPoolClientCommandInput, SimDeleteUserPoolClientCommandOutput, SimDescribeUserPoolClientCommand, SimDescribeUserPoolClientCommandInput, SimDescribeUserPoolClientCommandOutput, } from "./client/user-pool-client.command.js";
 export type { SimCognitoUserPoolClientDescription, SimListUserPoolClientsCommand, SimListUserPoolClientsCommandInput, SimListUserPoolClientsCommandOutput, } from "./client/list-user-pool-clients.command.js";
+export type { SimAdminCreateUserCommand, SimAdminCreateUserCommandInput, SimAdminCreateUserCommandOutput, SimAdminDeleteUserCommand, SimAdminDeleteUserCommandOutput, SimAdminDisableUserCommand, SimAdminDisableUserCommandOutput, SimAdminEnableUserCommand, SimAdminEnableUserCommandOutput, SimAdminGetUserCommand, SimAdminGetUserCommandOutput, SimAdminSetUserPasswordCommand, SimAdminSetUserPasswordCommandInput, SimAdminSetUserPasswordCommandOutput, SimAdminUpdateUserAttributesCommand, SimAdminUpdateUserAttributesCommandInput, SimAdminUpdateUserAttributesCommandOutput, SimCognitoAdminUserCommandInput, SimCognitoDescribedUser, SimCognitoUserType, } from "./user/user.command.js";
+export type { SimListUsersCommand, SimListUsersCommandInput, SimListUsersCommandOutput, } from "./user/list-users.command.js";
+export type { SimCognitoGroupCommandInput, SimCognitoGroupType, SimCreateGroupCommand, SimCreateGroupCommandInput, SimCreateGroupCommandOutput, SimDeleteGroupCommand, SimDeleteGroupCommandOutput, SimGetGroupCommand, SimGetGroupCommandOutput, SimListGroupsCommand, SimListGroupsCommandInput, SimListGroupsCommandOutput, SimUpdateGroupCommand, SimUpdateGroupCommandInput, SimUpdateGroupCommandOutput, } from "./group/group.command.js";
+export type { SimAdminAddUserToGroupCommand, SimAdminAddUserToGroupCommandOutput, SimAdminListGroupsForUserCommand, SimAdminListGroupsForUserCommandInput, SimAdminListGroupsForUserCommandOutput, SimAdminRemoveUserFromGroupCommand, SimAdminRemoveUserFromGroupCommandOutput, SimCognitoGroupMembershipCommandInput, SimListUsersInGroupCommand, SimListUsersInGroupCommandInput, SimListUsersInGroupCommandOutput, } from "./group/group-membership.command.js";
+export type { SimAdminInitiateAuthCommand, SimAdminInitiateAuthCommandInput, SimAdminInitiateAuthCommandOutput, SimAdminRespondToAuthChallengeCommand, SimAdminRespondToAuthChallengeCommandInput, SimAdminRespondToAuthChallengeCommandOutput, SimAdminUserGlobalSignOutCommand, SimAdminUserGlobalSignOutCommandInput, SimAdminUserGlobalSignOutCommandOutput, SimCognitoAuthenticationOutput, SimCognitoAuthenticationResultType, SimGlobalSignOutCommand, SimGlobalSignOutCommandInput, SimGlobalSignOutCommandOutput, SimInitiateAuthCommand, SimInitiateAuthCommandInput, SimInitiateAuthCommandOutput, SimRespondToAuthChallengeCommand, SimRespondToAuthChallengeCommandInput, SimRespondToAuthChallengeCommandOutput, } from "./auth/auth.command.js";
 //# sourceMappingURL=sim-cognito-command.types.d.ts.map

package/dist/service/cognito/command/sim-cognito-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4CAA4C,CAAC"}
+{"version":3,"file":"sim-cognito-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,qCAAqC,EACrC,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC"}

package/dist/service/cognito/command/sim-cognito-commands.d.ts

@@ -0,0 +1,44 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCognitoUserPoolStore } from "../user-pool/sim-cognito-user-pool-store.js";
+import { SimCognitoAuthCommands } from "./auth/sim-cognito-auth-commands.js";
+import { SimCognitoListUserPoolClients } from "./client/sim-cognito-list-user-pool-clients.js";
+import { SimCognitoGroupCommands } from "./group/sim-cognito-group-commands.js";
+import { SimCognitoGroupMembershipCommands } from "./group/sim-cognito-group-membership-commands.js";
+import { SimCognitoListGroups } from "./group/sim-cognito-list-groups.js";
+import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool-client-commands.js";
+import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
+import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
+import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
+import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+interface SimCognitoCommandsProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly clock: SimClock;
+    readonly pools: SimCognitoUserPoolStore;
+}
+/**
+ * The command handlers of one simulated Cognito scope.
+ *
+ * They share an authorizer, a pool store and a clock, so they are built
+ * together here rather than in the service facade, which is left as
+ * delegation.
+ */
+export declare class SimCognitoCommands {
+    readonly userPools: SimCognitoUserPoolCommands;
+    readonly listUserPools: SimCognitoListUserPools;
+    readonly clients: SimCognitoUserPoolClientCommands;
+    readonly listClients: SimCognitoListUserPoolClients;
+    readonly users: SimCognitoUserCommands;
+    readonly userUpdates: SimCognitoUserUpdateCommands;
+    readonly listUsers: SimCognitoListUsers;
+    readonly groups: SimCognitoGroupCommands;
+    readonly groupMembership: SimCognitoGroupMembershipCommands;
+    readonly listGroups: SimCognitoListGroups;
+    readonly auth: SimCognitoAuthCommands;
+    constructor(properties: SimCognitoCommandsProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-commands.d.ts.map

package/dist/service/cognito/command/sim-cognito-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAInG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAE3F,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAE7C,YAAY,UAAU,EAAE,4BAA4B,EAkCnD;CACF"}

package/dist/service/cognito/command/sim-cognito-commands.js

@@ -0,0 +1,72 @@
+import { SimCognitoUserPoolClientFactory } from "../user-pool/client/sim-cognito-user-pool-client-factory.js";
+import { SimCognitoGroupFactory } from "../user-pool/group/sim-cognito-group-factory.js";
+import { SimCognitoUserPoolFactory } from "../user-pool/sim-cognito-user-pool-factory.js";
+import { SimCognitoUserFactory } from "../user-pool/user/sim-cognito-user-factory.js";
+import { SimCognitoAuthCommands } from "./auth/sim-cognito-auth-commands.js";
+import { SimCognitoAuthorizer } from "./authorize/sim-cognito-authorizer.js";
+import { SimCognitoListUserPoolClients } from "./client/sim-cognito-list-user-pool-clients.js";
+import { SimCognitoGroupCommands } from "./group/sim-cognito-group-commands.js";
+import { SimCognitoGroupMembershipCommands } from "./group/sim-cognito-group-membership-commands.js";
+import { SimCognitoListGroups } from "./group/sim-cognito-list-groups.js";
+import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool-client-commands.js";
+import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
+import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoRequestResolver } from "./sim-cognito-request-resolver.js";
+import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
+import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
+import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+/**
+ * The command handlers of one simulated Cognito scope.
+ *
+ * They share an authorizer, a pool store and a clock, so they are built
+ * together here rather than in the service facade, which is left as
+ * delegation.
+ */
+export class SimCognitoCommands {
+    userPools;
+    listUserPools;
+    clients;
+    listClients;
+    users;
+    userUpdates;
+    listUsers;
+    groups;
+    groupMembership;
+    listGroups;
+    auth;
+    constructor(properties) {
+        const { accountRegionScope, iam, clock, pools } = properties;
+        const authorizer = new SimCognitoAuthorizer({ iam, accountRegionScope });
+        const resolver = new SimCognitoRequestResolver({ pools, authorizer });
+        this.userPools = new SimCognitoUserPoolCommands({
+            pools,
+            poolFactory: new SimCognitoUserPoolFactory({
+                accountRegionScope,
+                pools,
+                clock,
+            }),
+            authorizer,
+        });
+        this.listUserPools = new SimCognitoListUserPools({ pools, authorizer });
+        this.clients = new SimCognitoUserPoolClientCommands({
+            pools,
+            clientFactory: new SimCognitoUserPoolClientFactory({ clock }),
+            authorizer,
+        });
+        this.listClients = new SimCognitoListUserPoolClients({ pools, authorizer });
+        this.users = new SimCognitoUserCommands({
+            resolver,
+            userFactory: new SimCognitoUserFactory({ clock }),
+        });
+        this.userUpdates = new SimCognitoUserUpdateCommands({ resolver });
+        this.listUsers = new SimCognitoListUsers({ resolver });
+        this.groups = new SimCognitoGroupCommands({
+            resolver,
+            groupFactory: new SimCognitoGroupFactory({ clock }),
+        });
+        this.groupMembership = new SimCognitoGroupMembershipCommands({ resolver });
+        this.listGroups = new SimCognitoListGroups({ resolver });
+        this.auth = new SimCognitoAuthCommands({ resolver, pools, clock });
+    }
+}
+//# sourceMappingURL=sim-cognito-commands.js.map

package/dist/service/cognito/command/sim-cognito-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAS3F;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAE7C,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW,EAAE,IAAI,yBAAyB,CAAC;gBACzC,kBAAkB;gBAClB,KAAK;gBACL,KAAK;aACN,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;YAC7D,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,WAAW,EAAE,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-page.d.ts

@@ -1,13 +1,23 @@
 interface SimCognitoPageProperties {
     readonly maxResults: number;
     readonly nextToken: string | undefined;
+    /**
+     * What this operation calls its page size input. `ListUsers` calls it
+     * `Limit`, so a refusal has to name the input the caller actually wrote.
+     */
+    readonly maxResultsField?: string;
+    /**
+     * What this operation calls its continuation token. `ListUsers` calls it
+     * `PaginationToken`.
+     */
+    readonly nextTokenField?: string;
 }
 /**
  * One page of listed items, and the token that reaches the next one.
  *
- * Both Cognito listings page the same way, so the rules live here once. How
+ * Every Cognito listing pages the same way, so the rules live here once. How
  * many items a page holds by default is not shared, because `ListUserPools`
- * insists on being told and `ListUserPoolClients` does not.
+ * insists on being told and the others do not.
  */
 export declare class SimCognitoPage<TItem> {
     readonly items: readonly TItem[];

package/dist/service/cognito/command/sim-cognito-page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAOA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;GAMG;AACH,qBAAa,cAAc,CAAC,KAAK;IAC/B,SAAgB,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC;IACxC,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YAAY,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAUzE;IAED,OAAO,CAAC,MAAM,CAAC,UAAU;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAwBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}
+{"version":3,"file":"sim-cognito-page.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAOA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;GAMG;AACH,qBAAa,cAAc,CAAC,KAAK;IAC/B,SAAgB,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC;IACxC,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YAAY,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAczE;IAED,OAAO,CAAC,MAAM,CAAC,UAAU;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAyBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}

package/dist/service/cognito/command/sim-cognito-page.js

@@ -6,25 +6,25 @@ const maxMaxResults = 60;
 /**
  * One page of listed items, and the token that reaches the next one.
  *
- * Both Cognito listings page the same way, so the rules live here once. How
+ * Every Cognito listing pages the same way, so the rules live here once. How
  * many items a page holds by default is not shared, because `ListUserPools`
- * insists on being told and `ListUserPoolClients` does not.
+ * insists on being told and the others do not.
  */
 export class SimCognitoPage {
     items;
     nextToken;
     constructor(listed, properties) {
-        const maxResults = SimCognitoPage.maxResults(properties.maxResults);
-        const startIndex = SimCognitoPage.startIndex(properties.nextToken, listed.length);
+        const maxResults = SimCognitoPage.maxResults(properties.maxResults, properties.maxResultsField ?? "MaxResults");
+        const startIndex = SimCognitoPage.startIndex(properties.nextToken, listed.length, properties.nextTokenField ?? "NextToken");
         const nextIndex = startIndex + maxResults;
         this.items = listed.slice(startIndex, nextIndex);
         this.nextToken = SimCognitoPage.tokenFor(nextIndex, listed.length);
     }
-    static maxResults(requested) {
+    static maxResults(requested, field) {
         if (!Number.isSafeInteger(requested) ||
             requested < 1 ||
             requested > maxMaxResults) {
-            throw new SimCognitoInvalidParameterException(`MaxResults must be a whole number between 1 and ${String(maxMaxResults)}`);
+            throw new SimCognitoInvalidParameterException(`${field} must be a whole number between 1 and ${String(maxMaxResults)}`);
         }
         return requested;
     }
@@ -36,7 +36,7 @@ export class SimCognitoPage {
      * starting again from the beginning. An offset past the end of the list is
      * rejected for the same reason: no such token is ever issued.
      */
-    static startIndex(nextToken, listedCount) {
+    static startIndex(nextToken, listedCount, field) {
         if (nextToken === undefined) {
             return 0;
         }
@@ -45,7 +45,7 @@ export class SimCognitoPage {
             startIndex < 0 ||
             startIndex >= listedCount ||
             String(startIndex) !== nextToken) {
-            throw new SimCognitoInvalidParameterException("NextToken is not a token this simulation issued");
+            throw new SimCognitoInvalidParameterException(`${field} is not a token this simulation issued`);
         }
         return startIndex;
     }

package/dist/service/cognito/command/sim-cognito-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;GAEG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAOzB;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,KAAK,CAAmB;IACxB,SAAS,CAAqB;IAE9C,YAAY,MAAwB,EAAE,UAAoC;QACxE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAC1C,UAAU,CAAC,SAAS,EACpB,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,SAAiB;QACzC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAChC,SAAS,GAAG,CAAC;YACb,SAAS,GAAG,aAAa,EACzB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,MAAM,CAAC,aAAa,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB;QAEnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,iDAAiD,CAClD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-page.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;GAEG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAiBzB;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,KAAK,CAAmB;IACxB,SAAS,CAAqB;IAE9C,YAAY,MAAwB,EAAE,UAAoC;QACxE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAC1C,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,eAAe,IAAI,YAAY,CAC3C,CAAC;QACF,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAC1C,UAAU,CAAC,SAAS,EACpB,MAAM,CAAC,MAAM,EACb,UAAU,CAAC,cAAc,IAAI,WAAW,CACzC,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,SAAiB,EAAE,KAAa;QACxD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAChC,SAAS,GAAG,CAAC;YACb,SAAS,GAAG,aAAa,EACzB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,yCAAyC,MAAM,CAAC,aAAa,CAAC,EAAE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB,EACnB,KAAa;QAEb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,GAAG,KAAK,wCAAwC,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-request-resolver.d.ts

@@ -0,0 +1,86 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoGroup } from "../user-pool/group/sim-cognito-group.js";
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoUserPoolStore } from "../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoUser } from "../user-pool/user/sim-cognito-user.js";
+import type { SimCognitoAuthorizer } from "./authorize/sim-cognito-authorizer.js";
+interface SimCognitoRequestResolverProperties {
+    readonly pools: SimCognitoUserPoolStore;
+    readonly authorizer: SimCognitoAuthorizer;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * What an operation naming a user in a pool has resolved.
+ */
+export interface SimCognitoUserInPool {
+    readonly pool: SimCognitoUserPool;
+    readonly user: SimCognitoUser;
+}
+/**
+ * What an operation naming a group in a pool has resolved.
+ */
+export interface SimCognitoGroupInPool {
+    readonly pool: SimCognitoUserPool;
+    readonly group: SimCognitoGroup;
+}
+/**
+ * What a membership operation has resolved: the group, and the user going
+ * into or out of it.
+ */
+export interface SimCognitoGroupMembership {
+    readonly group: SimCognitoGroup;
+    readonly user: SimCognitoUser;
+}
+/**
+ * What every request names: the pool, and the user or group in it.
+ */
+interface SimCognitoResourceInput {
+    readonly UserPoolId?: string | undefined;
+    readonly Username?: string | undefined;
+    readonly GroupName?: string | undefined;
+}
+/**
+ * Resolves the pool, user and group an operation names.
+ *
+ * Every one of them starts the same way: authorize against the pool's ARN,
+ * because neither a user nor a group has an ARN of its own, then find the
+ * pool, then find what the request named in it. Authorization comes first, as
+ * real IAM evaluates a request before the service handles it, so a caller
+ * with no permission is refused whether or not the user or group is there.
+ */
+export declare class SimCognitoRequestResolver {
+    private readonly pools;
+    private readonly authorizer;
+    constructor(properties: SimCognitoRequestResolverProperties);
+    /**
+     * Resolve the pool an operation names, once the caller may reach it.
+     */
+    pool(action: string, userPoolId: string | undefined, options: SimCognitoCommandOptions | undefined): SimCognitoUserPool;
+    /**
+     * Resolve the user an operation names, and the pool holding it.
+     */
+    poolUser(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoUserInPool;
+    /**
+     * Resolve the user an operation names, once the caller may reach its pool.
+     */
+    user(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoUser;
+    /**
+     * Resolve the group an operation names, and the pool holding it.
+     */
+    poolGroup(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroupInPool;
+    /**
+     * Resolve the group an operation names, once the caller may reach its pool.
+     */
+    group(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroup;
+    /**
+     * Resolve the group and the user a membership operation names.
+     *
+     * The user is resolved first, as the operation is an `Admin` one naming a
+     * user, so a request naming neither reports the user missing.
+     */
+    membership(action: string, input: SimCognitoResourceInput, options: SimCognitoCommandOptions | undefined): SimCognitoGroupMembership;
+}
+export {};
+//# sourceMappingURL=sim-cognito-request-resolver.d.ts.map

package/dist/service/cognito/command/sim-cognito-request-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-request-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-request-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAE5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAElF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;GAEG;AACH,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAElD,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,kBAAkB,CAMpB;IAED;;OAEG;IACH,QAAQ,CACN,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,oBAAoB,CAOtB;IAED;;OAEG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,cAAc,CAEhB;IAED;;OAEG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,qBAAqB,CAOvB;IAED;;OAEG;IACH,KAAK,CACH,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,eAAe,CAEjB;IAED;;;;;OAKG;IACH,UAAU,CACR,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,yBAAyB,CAO3B;CACF"}

package/dist/service/cognito/command/sim-cognito-request-resolver.js

@@ -0,0 +1,74 @@
+import { requireSimCognitoGroupName } from "../user-pool/group/sim-cognito-group-name.js";
+import { requireSimCognitoUserPoolId } from "../user-pool/sim-cognito-user-pool-id.js";
+import { requireSimCognitoUsername } from "../user-pool/user/sim-cognito-username.js";
+/**
+ * Resolves the pool, user and group an operation names.
+ *
+ * Every one of them starts the same way: authorize against the pool's ARN,
+ * because neither a user nor a group has an ARN of its own, then find the
+ * pool, then find what the request named in it. Authorization comes first, as
+ * real IAM evaluates a request before the service handles it, so a caller
+ * with no permission is refused whether or not the user or group is there.
+ */
+export class SimCognitoRequestResolver {
+    pools;
+    authorizer;
+    constructor(properties) {
+        this.pools = properties.pools;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * Resolve the pool an operation names, once the caller may reach it.
+     */
+    pool(action, userPoolId, options) {
+        const poolId = requireSimCognitoUserPoolId(userPoolId);
+        this.authorizer.authorizeUserPool(action, poolId, options?.caller);
+        return this.pools.require(poolId);
+    }
+    /**
+     * Resolve the user an operation names, and the pool holding it.
+     */
+    poolUser(action, input, options) {
+        const pool = this.pool(action, input.UserPoolId, options);
+        return {
+            pool,
+            user: pool.requireUser(requireSimCognitoUsername(input.Username)),
+        };
+    }
+    /**
+     * Resolve the user an operation names, once the caller may reach its pool.
+     */
+    user(action, input, options) {
+        return this.poolUser(action, input, options).user;
+    }
+    /**
+     * Resolve the group an operation names, and the pool holding it.
+     */
+    poolGroup(action, input, options) {
+        const pool = this.pool(action, input.UserPoolId, options);
+        return {
+            pool,
+            group: pool.requireGroup(requireSimCognitoGroupName(input.GroupName)),
+        };
+    }
+    /**
+     * Resolve the group an operation names, once the caller may reach its pool.
+     */
+    group(action, input, options) {
+        return this.poolGroup(action, input, options).group;
+    }
+    /**
+     * Resolve the group and the user a membership operation names.
+     *
+     * The user is resolved first, as the operation is an `Admin` one naming a
+     * user, so a request naming neither reports the user missing.
+     */
+    membership(action, input, options) {
+        const { pool, user } = this.poolUser(action, input, options);
+        return {
+            group: pool.requireGroup(requireSimCognitoGroupName(input.GroupName)),
+            user,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-request-resolver.js.map