@kensio/yulin 1.12.0 → 1.12.1

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client-settings.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mCAAmC,EACnC,KAAK,uCAAuC,EAC7C,MAAM,8CAA8C,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,WAAW,0CACf,SACE,4BAA4B,EAC5B,uCAAuC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1D;AAED;;;;;;;;GAQG;AACH,qBAAa,gCAAgC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,0BAA0B,EAAE,oCAAoC,CAAC;IACjF,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD;;;OAGG;IACH,SAAgB,WAAW,EAAE,mCAAmC,CAAC;IAEjE,YAAY,UAAU,EAAE,0CAA0C,EAajE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client-settings.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,0CACf,SAAQ,4BAA4B,EAAE,2BAA2B;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1D;AAED;;;;;;;;GAQG;AACH,qBAAa,gCAAgC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,0BAA0B,EAAE,oCAAoC,CAAC;IACjF,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD;;OAEG;IACH,SAAgB,KAAK,EAAE,uBAAuB,CAAC;IAE/C,YAAY,UAAU,EAAE,0CAA0C,EAajE;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.js

@@ -1,8 +1,8 @@
 import { SimCognitoName } from "../sim-cognito-name.js";
 import { SimCognitoExplicitAuthFlows } from "./sim-cognito-explicit-auth-flows.js";
+import { SimCognitoOAuthSettings, } from "./sim-cognito-oauth-settings.js";
 import { SimCognitoPreventUserExistenceErrors } from "./sim-cognito-prevent-user-existence-errors.js";
 import { SimCognitoTokenValidity, } from "./sim-cognito-token-validity.js";
-import { SimCognitoUnsimulatedClientSettings, } from "./sim-cognito-unsimulated-client-settings.js";
 /**
  * The settable properties of one simulated app client.
  *
@@ -18,10 +18,9 @@ export class SimCognitoUserPoolClientSettings {
     preventUserExistenceErrors;
     tokenValidity;
     /**
-     * What the request set and nothing here acts on, kept so a described client
-     * reports it.
+     * What this client may do at the pool's hosted domain.
      */
-    unsimulated;
+    oauth;
     constructor(properties) {
         this.name = new SimCognitoName({
             field: "ClientName",
@@ -30,7 +29,7 @@ export class SimCognitoUserPoolClientSettings {
         this.explicitAuthFlows = new SimCognitoExplicitAuthFlows(properties.ExplicitAuthFlows);
         this.preventUserExistenceErrors = new SimCognitoPreventUserExistenceErrors(properties.PreventUserExistenceErrors);
         this.tokenValidity = new SimCognitoTokenValidity(properties);
-        this.unsimulated = new SimCognitoUnsimulatedClientSettings(properties);
+        this.oauth = new SimCognitoOAuthSettings(properties);
     }
 }
 //# sourceMappingURL=sim-cognito-user-pool-client-settings.js.map

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client-settings.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mCAAmC,GAEpC,MAAM,8CAA8C,CAAC;AAkBtD;;;;;;;;GAQG;AACH,MAAM,OAAO,gCAAgC;IAC3B,IAAI,CAAS;IACb,iBAAiB,CAA8B;IAC/C,0BAA0B,CAAuC;IACjE,aAAa,CAA0B;IAEvD;;;OAGG;IACa,WAAW,CAAsC;IAEjE,YAAY,UAAsD;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC;YAC7B,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,UAAU,CAAC,UAAU;SAC7B,CAAC,CAAC,KAAK,CAAC;QACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CACtD,UAAU,CAAC,iBAAiB,CAC7B,CAAC;QACF,IAAI,CAAC,0BAA0B,GAAG,IAAI,oCAAoC,CACxE,UAAU,CAAC,0BAA0B,CACtC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,mCAAmC,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client-settings.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AAgBzC;;;;;;;;GAQG;AACH,MAAM,OAAO,gCAAgC;IAC3B,IAAI,CAAS;IACb,iBAAiB,CAA8B;IAC/C,0BAA0B,CAAuC;IACjE,aAAa,CAA0B;IAEvD;;OAEG;IACa,KAAK,CAA0B;IAE/C,YAAY,UAAsD;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC;YAC7B,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,UAAU,CAAC,UAAU;SAC7B,CAAC,CAAC,KAAK,CAAC;QACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CACtD,UAAU,CAAC,iBAAiB,CAC7B,CAAC;QACF,IAAI,CAAC,0BAA0B,GAAG,IAAI,oCAAoC,CACxE,UAAU,CAAC,0BAA0B,CACtC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.d.ts

@@ -3,7 +3,7 @@ import type { SimCognitoUserPoolId } from "../sim-cognito-user-pool-id.js";
 import type { SimCognitoExplicitAuthFlows } from "./sim-cognito-explicit-auth-flows.js";
 import type { SimCognitoPreventUserExistenceErrors } from "./sim-cognito-prevent-user-existence-errors.js";
 import type { SimCognitoTokenValidity } from "./sim-cognito-token-validity.js";
-import type { SimCognitoUnsimulatedClientSettings } from "./sim-cognito-unsimulated-client-settings.js";
+import type { SimCognitoOAuthSettings } from "./sim-cognito-oauth-settings.js";
 import type { SimCognitoUserPoolClientSettings } from "./sim-cognito-user-pool-client-settings.js";
 import type { SimCognitoUserPoolClientId } from "./sim-cognito-user-pool-client-id.js";
 interface SimCognitoUserPoolClientProperties {
@@ -51,10 +51,10 @@ export declare class SimCognitoUserPoolClient {
      */
     get tokenValidity(): SimCognitoTokenValidity;
     /**
-     * What the client was given and nothing here acts on, kept so a described
-     * client reports it.
+     * What this client may do at its pool's hosted domain: which grant, which
+     * scopes, which redirects and which identity providers.
      */
-    get unsimulatedSettings(): SimCognitoUnsimulatedClientSettings;
+    get oauth(): SimCognitoOAuthSettings;
     /**
      * When the client's settings last changed, which is its creation date until
      * something updates it.

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,EAAE,EAAE,0BAA0B,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,EAAE,EAAE,0BAA0B,CAAC;IAC/C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;;OAGG;IACH,SAAgB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,kCAAkC,EAQzD;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,2BAA2B,CAEnD;IAED;;OAEG;IACH,IAAI,0BAA0B,IAAI,oCAAoC,CAErE;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,uBAAuB,CAE3C;IAED;;;OAGG;IACH,IAAI,mBAAmB,IAAI,mCAAmC,CAE7D;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,gCAAgC,GAAG,IAAI,CAGvD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,EAAE,EAAE,0BAA0B,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,EAAE,EAAE,0BAA0B,CAAC;IAC/C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;;OAGG;IACH,SAAgB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,kCAAkC,EAQzD;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,2BAA2B,CAEnD;IAED;;OAEG;IACH,IAAI,0BAA0B,IAAI,oCAAoC,CAErE;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,uBAAuB,CAE3C;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,uBAAuB,CAEnC;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,gCAAgC,GAAG,IAAI,CAGvD;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.js

@@ -52,11 +52,11 @@ export class SimCognitoUserPoolClient {
         return this.clientSettings.tokenValidity;
     }
     /**
-     * What the client was given and nothing here acts on, kept so a described
-     * client reports it.
+     * What this client may do at its pool's hosted domain: which grant, which
+     * scopes, which redirects and which identity providers.
      */
-    get unsimulatedSettings() {
-        return this.clientSettings.unsimulated;
+    get oauth() {
+        return this.clientSettings.oauth;
     }
     /**
      * When the client's settings last changed, which is its creation date until

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IACnB,EAAE,CAA6B;IAC/B,UAAU,CAAuB;IACjC,YAAY,CAAO;IAEnC;;;OAGG;IACa,MAAM,CAAqB;IAE1B,KAAK,CAAW;IACzB,cAAc,CAAmC;IACjD,YAAY,CAAO;IAE3B,YAAY,UAA8C;QACxD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAA0C;QAC/C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IACnB,EAAE,CAA6B;IAC/B,UAAU,CAAuB;IACjC,YAAY,CAAO;IAEnC;;;OAGG;IACa,MAAM,CAAqB;IAE1B,KAAK,CAAW;IACzB,cAAc,CAAmC;IACjD,YAAY,CAAO;IAE3B,YAAY,UAA8C;QACxD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAA0C;QAC/C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The custom domain configuration of a user pool domain, in the shape a
+ * request sets it and a described domain reports it.
+ */
+export interface SimCognitoCustomDomainConfigType {
+    readonly CertificateArn?: string | undefined;
+    readonly SecurityPolicy?: string | undefined;
+}
+/**
+ * The certificate a custom domain is served with.
+ *
+ * Nothing here terminates TLS, so the certificate is recorded rather than
+ * used. It is still required, as real Cognito requires it: a custom domain
+ * created without one is a request that fails on the way to AWS, and a
+ * simulation that accepted it would hide that.
+ *
+ * The certificate is not resolved against simulated ACM. Real Cognito requires
+ * one issued in `us-east-1`, whatever region the pool is in, and checking that
+ * here would only repeat a rule no request in a test is trying to break.
+ */
+export declare class SimCognitoCustomDomainConfig {
+    readonly certificateArn: string;
+    readonly securityPolicy: string | undefined;
+    constructor(config: SimCognitoCustomDomainConfigType);
+    /**
+     * This configuration as a described domain reports it.
+     */
+    toOutput(): SimCognitoCustomDomainConfigType;
+}
+//# sourceMappingURL=sim-cognito-custom-domain-config.d.ts.map

package/dist/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-custom-domain-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA4B;IACvC,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnD,YAAY,MAAM,EAAE,gCAAgC,EAUnD;IAED;;OAEG;IACH,QAAQ,IAAI,gCAAgC,CAO3C;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.js

@@ -0,0 +1,37 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The certificate a custom domain is served with.
+ *
+ * Nothing here terminates TLS, so the certificate is recorded rather than
+ * used. It is still required, as real Cognito requires it: a custom domain
+ * created without one is a request that fails on the way to AWS, and a
+ * simulation that accepted it would hide that.
+ *
+ * The certificate is not resolved against simulated ACM. Real Cognito requires
+ * one issued in `us-east-1`, whatever region the pool is in, and checking that
+ * here would only repeat a rule no request in a test is trying to break.
+ */
+export class SimCognitoCustomDomainConfig {
+    certificateArn;
+    securityPolicy;
+    constructor(config) {
+        if (config.CertificateArn === undefined || config.CertificateArn === "") {
+            throw new SimCognitoInvalidParameterException("CustomDomainConfig CertificateArn is required: a custom domain is " +
+                "served with a certificate");
+        }
+        this.certificateArn = config.CertificateArn;
+        this.securityPolicy = config.SecurityPolicy;
+    }
+    /**
+     * This configuration as a described domain reports it.
+     */
+    toOutput() {
+        return {
+            CertificateArn: this.certificateArn,
+            ...(this.securityPolicy !== undefined && {
+                SecurityPolicy: this.securityPolicy,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-custom-domain-config.js.map

package/dist/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-custom-domain-config.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-custom-domain-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAWvF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA4B;IACvB,cAAc,CAAS;IACvB,cAAc,CAAqB;IAEnD,YAAY,MAAwC;QAClD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;YACxE,MAAM,IAAI,mCAAmC,CAC3C,oEAAoE;gBAClE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-domain-name.d.ts

@@ -0,0 +1,58 @@
+interface SimCognitoDomainNameProperties {
+    readonly value: string | undefined;
+    /**
+     * Whether the request asked for a custom domain, which is what a
+     * `CustomDomainConfig` says. A prefix and a custom domain are validated
+     * differently, and the request rather than the value is what decides which
+     * one is being asked for.
+     */
+    readonly custom: boolean;
+    /** The region the pool lives in, which a prefix domain is served under. */
+    readonly regionName: string;
+}
+/**
+ * The domain string of one user pool domain, and the hostname it is served on.
+ *
+ * A prefix domain is one DNS label, and Cognito puts it under
+ * `auth.<region>.amazoncognito.com`. A custom domain is the whole hostname,
+ * which the request owns rather than Cognito. The two are different enough
+ * that a value is checked against the form the request asked for rather than
+ * being guessed at from the value itself.
+ */
+export declare class SimCognitoDomainName {
+    readonly value: string;
+    readonly custom: boolean;
+    /**
+     * The hostname real Cognito would serve this domain on.
+     */
+    readonly hostname: string;
+    constructor(properties: SimCognitoDomainNameProperties);
+    private static required;
+    /**
+     * The hostname this domain answers on inside the simulation.
+     *
+     * Serving drops the AWS domain from an AWS hostname, in the same way it
+     * drops `.amazonaws.com` from an S3 endpoint, so a prefix domain is reached
+     * locally by the part in front of it. A custom domain is the hostname the
+     * request chose, and there is nothing to drop.
+     */
+    get localHostname(): string;
+    /**
+     * Check a prefix domain, which is one label with no reserved word in it.
+     *
+     * Real Cognito refuses a prefix containing `aws`, `amazon` or `cognito`, and
+     * a pool deployed with one here would fail on the way to AWS rather than
+     * here.
+     */
+    private requirePrefix;
+    /**
+     * Check a custom domain, which is a fully qualified name below a domain the
+     * request owns.
+     *
+     * Real Cognito requires a subdomain rather than a bare registered domain,
+     * so `auth.example.com` is accepted and `example.com` is not.
+     */
+    private requireCustomDomain;
+}
+export {};
+//# sourceMappingURL=sim-cognito-domain-name.d.ts.map

package/dist/service/cognito/user-pool/domain/sim-cognito-domain-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-name.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-domain-name.ts"],"names":[],"mappings":"AA0CA,UAAU,8BAA8B;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,MAAM,EAAE,OAAO,CAAC;IAEhC;;OAEG;IACH,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC,YAAY,UAAU,EAAE,8BAA8B,EAarD;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ;IAiBvB;;;;;;;OAOG;IACH,IAAI,aAAa,IAAI,MAAM,CAM1B;IAED;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAmBrB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAU5B"}

package/dist/service/cognito/user-pool/domain/sim-cognito-domain-name.js

@@ -0,0 +1,123 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * How long a domain string may be, prefix and custom alike.
+ */
+const maxDomainLength = 63;
+/**
+ * The characters one DNS label holds, which is what a prefix domain is.
+ */
+const domainLabelPattern = /^[\da-z-]+$/u;
+/**
+ * Whether a value is one DNS label: those characters, starting and ending with
+ * a letter or a number.
+ *
+ * The first and last characters are checked separately rather than in the
+ * pattern, because a pattern saying all three things at once is the kind that
+ * backtracks.
+ */
+function isDomainLabel(value) {
+    const first = value.at(0) ?? "";
+    const last = value.at(-1) ?? "";
+    return domainLabelPattern.test(value) && first !== "-" && last !== "-";
+}
+/**
+ * The words real Cognito refuses in a prefix domain.
+ */
+const reservedWords = ["aws", "amazon", "cognito"];
+/**
+ * The label a hosted domain sits under, between the prefix and the region.
+ */
+const cognitoDomainHostLabel = "auth";
+/**
+ * The domain suffix real Cognito serves a prefix domain on.
+ */
+const cognitoDomainHostSuffix = "amazoncognito.com";
+/**
+ * The domain string of one user pool domain, and the hostname it is served on.
+ *
+ * A prefix domain is one DNS label, and Cognito puts it under
+ * `auth.<region>.amazoncognito.com`. A custom domain is the whole hostname,
+ * which the request owns rather than Cognito. The two are different enough
+ * that a value is checked against the form the request asked for rather than
+ * being guessed at from the value itself.
+ */
+export class SimCognitoDomainName {
+    value;
+    custom;
+    /**
+     * The hostname real Cognito would serve this domain on.
+     */
+    hostname;
+    constructor(properties) {
+        this.value = SimCognitoDomainName.required(properties.value);
+        this.custom = properties.custom;
+        if (this.custom) {
+            this.requireCustomDomain();
+            this.hostname = this.value;
+        }
+        else {
+            this.requirePrefix();
+            this.hostname =
+                `${this.value}.${cognitoDomainHostLabel}.` +
+                    `${properties.regionName}.${cognitoDomainHostSuffix}`;
+        }
+    }
+    static required(value) {
+        if (value === undefined || value === "") {
+            throw new SimCognitoInvalidParameterException("Domain is required: name the domain the pool is served on");
+        }
+        if (value.length > maxDomainLength) {
+            throw new SimCognitoInvalidParameterException(`Domain '${value}' is too long: a domain is at most ` +
+                `${String(maxDomainLength)} characters`);
+        }
+        return value;
+    }
+    /**
+     * The hostname this domain answers on inside the simulation.
+     *
+     * Serving drops the AWS domain from an AWS hostname, in the same way it
+     * drops `.amazonaws.com` from an S3 endpoint, so a prefix domain is reached
+     * locally by the part in front of it. A custom domain is the hostname the
+     * request chose, and there is nothing to drop.
+     */
+    get localHostname() {
+        if (this.custom) {
+            return this.value;
+        }
+        return this.hostname.replace(`.${cognitoDomainHostSuffix}`, "");
+    }
+    /**
+     * Check a prefix domain, which is one label with no reserved word in it.
+     *
+     * Real Cognito refuses a prefix containing `aws`, `amazon` or `cognito`, and
+     * a pool deployed with one here would fail on the way to AWS rather than
+     * here.
+     */
+    requirePrefix() {
+        if (!isDomainLabel(this.value)) {
+            throw new SimCognitoInvalidParameterException(`Domain '${this.value}' is not a domain prefix: a prefix is lower ` +
+                `case letters, numbers and hyphens, starting and ending with a ` +
+                `letter or a number`);
+        }
+        const reserved = reservedWords.find((word) => this.value.includes(word));
+        if (reserved !== undefined) {
+            throw new SimCognitoInvalidParameterException(`Domain '${this.value}' contains the reserved word '${reserved}': a ` +
+                `domain prefix cannot contain ${reservedWords.join(", ")}`);
+        }
+    }
+    /**
+     * Check a custom domain, which is a fully qualified name below a domain the
+     * request owns.
+     *
+     * Real Cognito requires a subdomain rather than a bare registered domain,
+     * so `auth.example.com` is accepted and `example.com` is not.
+     */
+    requireCustomDomain() {
+        const labels = this.value.split(".");
+        if (labels.length < 3 || labels.some((label) => !isDomainLabel(label))) {
+            throw new SimCognitoInvalidParameterException(`Domain '${this.value}' is not a custom domain: a custom domain is a ` +
+                `fully qualified subdomain, such as 'auth.example.com'`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-domain-name.js.map

package/dist/service/cognito/user-pool/domain/sim-cognito-domain-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-name.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-domain-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF;;GAEG;AACH,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;GAEG;AACH,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAE1C;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC;;GAEG;AACH,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAiBpD;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IACd,MAAM,CAAU;IAEhC;;OAEG;IACa,QAAQ,CAAS;IAEjC,YAAY,UAA0C;QACpD,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAEhC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ;gBACX,GAAG,IAAI,CAAC,KAAK,IAAI,sBAAsB,GAAG;oBAC1C,GAAG,UAAU,CAAC,UAAU,IAAI,uBAAuB,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,KAAyB;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,mCAAmC,CAC3C,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAmC,CAC3C,WAAW,KAAK,qCAAqC;gBACnD,GAAG,MAAM,CAAC,eAAe,CAAC,aAAa,CAC1C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,aAAa;QACf,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACK,aAAa;QACnB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,mCAAmC,CAC3C,WAAW,IAAI,CAAC,KAAK,8CAA8C;gBACjE,gEAAgE;gBAChE,oBAAoB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,mCAAmC,CAC3C,WAAW,IAAI,CAAC,KAAK,iCAAiC,QAAQ,OAAO;gBACnE,gCAAgC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,mCAAmC,CAC3C,WAAW,IAAI,CAAC,KAAK,iDAAiD;gBACpE,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-pool-domains.d.ts

@@ -0,0 +1,33 @@
+import type { SimCreateUserPoolDomainCommandInput } from "../../command/domain/user-pool-domain.command.js";
+import type { SimCognitoUserPool } from "../sim-cognito-user-pool.js";
+import { SimCognitoUserPoolDomain } from "./sim-cognito-user-pool-domain.js";
+/**
+ * The one domain a pool can have: building the one a request asked for, and
+ * resolving the one the pool holds.
+ *
+ * A `CustomDomainConfig` is what says the request wants a custom domain rather
+ * than a Cognito prefix, so it decides both how the domain string is checked
+ * and whether a certificate is required.
+ */
+export declare class SimCognitoPoolDomains {
+    /**
+     * Refuse a second domain on a pool that has one.
+     *
+     * Real Cognito allows one domain per pool, prefix or custom, so a request
+     * adding another is refused rather than quietly replacing what is there.
+     */
+    private static requireNoDomain;
+    private static customDomainConfig;
+    /**
+     * Make a pool's domain, refusing a pool that already has one.
+     */
+    make(pool: SimCognitoUserPool, input: SimCreateUserPoolDomainCommandInput): SimCognitoUserPoolDomain;
+    /**
+     * The domain a delete request named, or a refusal.
+     *
+     * Real Cognito answers a request naming a domain the pool does not hold the
+     * same way it answers one naming no pool at all, and says no more than that.
+     */
+    require(pool: SimCognitoUserPool, domainValue: string | undefined): SimCognitoUserPoolDomain;
+}
+//# sourceMappingURL=sim-cognito-pool-domains.d.ts.map

package/dist/service/cognito/user-pool/domain/sim-cognito-pool-domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pool-domains.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-pool-domains.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAOtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAW9B,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAUjC;;OAEG;IACH,IAAI,CACF,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,mCAAmC,GACzC,wBAAwB,CAiB1B;IAED;;;;;OAKG;IACH,OAAO,CACL,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,wBAAwB,CAU1B;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-pool-domains.js

@@ -0,0 +1,66 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { simCognitoUserPoolRegionName } from "../sim-cognito-user-pool-id.js";
+import { SimCognitoCustomDomainConfig, } from "./sim-cognito-custom-domain-config.js";
+import { SimCognitoDomainName } from "./sim-cognito-domain-name.js";
+import { SimCognitoUserPoolDomain } from "./sim-cognito-user-pool-domain.js";
+/**
+ * The one domain a pool can have: building the one a request asked for, and
+ * resolving the one the pool holds.
+ *
+ * A `CustomDomainConfig` is what says the request wants a custom domain rather
+ * than a Cognito prefix, so it decides both how the domain string is checked
+ * and whether a certificate is required.
+ */
+export class SimCognitoPoolDomains {
+    /**
+     * Refuse a second domain on a pool that has one.
+     *
+     * Real Cognito allows one domain per pool, prefix or custom, so a request
+     * adding another is refused rather than quietly replacing what is there.
+     */
+    static requireNoDomain(pool) {
+        const existing = pool.auth.domain;
+        if (existing !== undefined) {
+            throw new SimCognitoInvalidParameterException(`User pool ${pool.id} already has the domain '${existing.value}': a ` +
+                `pool has one domain, so delete that one before adding another`);
+        }
+    }
+    static customDomainConfig(config) {
+        if (config === undefined) {
+            return undefined;
+        }
+        return new SimCognitoCustomDomainConfig(config);
+    }
+    /**
+     * Make a pool's domain, refusing a pool that already has one.
+     */
+    make(pool, input) {
+        SimCognitoPoolDomains.requireNoDomain(pool);
+        return new SimCognitoUserPoolDomain({
+            name: new SimCognitoDomainName({
+                value: input.Domain,
+                custom: input.CustomDomainConfig !== undefined,
+                // A prefix domain is served under the pool's own region, which the
+                // pool id names, so no separate region is needed here.
+                regionName: simCognitoUserPoolRegionName(pool.id),
+            }),
+            userPoolId: pool.id,
+            customDomainConfig: SimCognitoPoolDomains.customDomainConfig(input.CustomDomainConfig),
+            managedLoginVersion: input.ManagedLoginVersion,
+        });
+    }
+    /**
+     * The domain a delete request named, or a refusal.
+     *
+     * Real Cognito answers a request naming a domain the pool does not hold the
+     * same way it answers one naming no pool at all, and says no more than that.
+     */
+    require(pool, domainValue) {
+        const domain = pool.auth.domain;
+        if (domain === undefined || domain.value !== domainValue) {
+            throw new SimCognitoInvalidParameterException("No such domain or user pool exists.");
+        }
+        return domain;
+    }
+}
+//# sourceMappingURL=sim-cognito-pool-domains.js.map

package/dist/service/cognito/user-pool/domain/sim-cognito-pool-domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pool-domains.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-pool-domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAGvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EACL,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;;;;OAKG;IACK,MAAM,CAAC,eAAe,CAAC,IAAwB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAElC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,mCAAmC,CAC3C,aAAa,IAAI,CAAC,EAAE,4BAA4B,QAAQ,CAAC,KAAK,OAAO;gBACnE,+DAA+D,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,MAAoD;QAEpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,IAAI,CACF,IAAwB,EACxB,KAA0C;QAE1C,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5C,OAAO,IAAI,wBAAwB,CAAC;YAClC,IAAI,EAAE,IAAI,oBAAoB,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,MAAM,EAAE,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBAC9C,mEAAmE;gBACnE,uDAAuD;gBACvD,UAAU,EAAE,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;aAClD,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,kBAAkB,EAAE,qBAAqB,CAAC,kBAAkB,CAC1D,KAAK,CAAC,kBAAkB,CACzB;YACD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,OAAO,CACL,IAAwB,EACxB,WAA+B;QAE/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAEhC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACzD,MAAM,IAAI,mCAAmC,CAC3C,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.d.ts

@@ -0,0 +1,58 @@
+import type { SimCognitoUserPoolId } from "../sim-cognito-user-pool-id.js";
+import type { SimCognitoCustomDomainConfig } from "./sim-cognito-custom-domain-config.js";
+import type { SimCognitoDomainName } from "./sim-cognito-domain-name.js";
+interface SimCognitoUserPoolDomainProperties {
+    readonly name: SimCognitoDomainName;
+    readonly userPoolId: SimCognitoUserPoolId;
+    readonly customDomainConfig?: SimCognitoCustomDomainConfig | undefined;
+    /**
+     * Which managed login branding the domain was created with: `1` for the
+     * classic hosted UI and `2` for managed login. Neither set of pages is
+     * simulated, so the version is recorded and reported rather than changing
+     * anything.
+     */
+    readonly managedLoginVersion?: number | undefined;
+}
+/**
+ * One simulated user pool domain.
+ *
+ * A pool has at most one domain, and the domain is where the OAuth endpoints
+ * are served: without one, a pool has an API and nothing a browser can reach.
+ *
+ * Real Cognito puts a CloudFront distribution in front of a custom domain and
+ * expects the domain's own DNS to point at it. This simulation answers on the
+ * custom hostname directly, so the distribution it reports is a name nothing
+ * here serves, and a test needs no DNS record of its own.
+ */
+export declare class SimCognitoUserPoolDomain {
+    readonly name: SimCognitoDomainName;
+    readonly userPoolId: SimCognitoUserPoolId;
+    readonly customDomainConfig: SimCognitoCustomDomainConfig | undefined;
+    readonly managedLoginVersion: number | undefined;
+    /**
+     * The CloudFront distribution real Cognito would put in front of a custom
+     * domain, which a prefix domain does not get.
+     */
+    readonly cloudFrontDistribution: string | undefined;
+    constructor(properties: SimCognitoUserPoolDomainProperties);
+    /**
+     * The distribution name a domain reports, which only a custom domain has.
+     */
+    private static distributionFor;
+    /** The domain string this domain was created with. */
+    get value(): string;
+    /** The hostname real Cognito would serve this domain on. */
+    get hostname(): string;
+    /** The hostname this domain answers on inside the simulation. */
+    get localHostname(): string;
+    /**
+     * The hostnames a request can reach this domain by.
+     *
+     * A prefix domain answers on both the real AWS hostname and the local one it
+     * is rewritten to, so a request that names either finds it. They are the
+     * same hostname for a custom domain, which has no AWS domain to drop.
+     */
+    get hostnames(): readonly string[];
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-domain.d.ts.map

package/dist/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-domain.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAOzE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAEvE;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,IAAI,EAAE,oBAAoB,CAAC;IAC3C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,kBAAkB,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7E,SAAgB,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IAExD;;;OAGG;IACH,SAAgB,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3D,YAAY,UAAU,EAAE,kCAAkC,EAQzD;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAa9B,sDAAsD;IACtD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,4DAA4D;IAC5D,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,iEAAiE;IACjE,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;;;;OAMG;IACH,IAAI,SAAS,IAAI,SAAS,MAAM,EAAE,CAEjC;CACF"}

package/dist/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.js

@@ -0,0 +1,70 @@
+import { faker } from "@faker-js/faker";
+/**
+ * How many characters a simulated CloudFront distribution name carries.
+ */
+const distributionNameLength = 13;
+/**
+ * One simulated user pool domain.
+ *
+ * A pool has at most one domain, and the domain is where the OAuth endpoints
+ * are served: without one, a pool has an API and nothing a browser can reach.
+ *
+ * Real Cognito puts a CloudFront distribution in front of a custom domain and
+ * expects the domain's own DNS to point at it. This simulation answers on the
+ * custom hostname directly, so the distribution it reports is a name nothing
+ * here serves, and a test needs no DNS record of its own.
+ */
+export class SimCognitoUserPoolDomain {
+    name;
+    userPoolId;
+    customDomainConfig;
+    managedLoginVersion;
+    /**
+     * The CloudFront distribution real Cognito would put in front of a custom
+     * domain, which a prefix domain does not get.
+     */
+    cloudFrontDistribution;
+    constructor(properties) {
+        this.name = properties.name;
+        this.userPoolId = properties.userPoolId;
+        this.customDomainConfig = properties.customDomainConfig;
+        this.managedLoginVersion = properties.managedLoginVersion;
+        this.cloudFrontDistribution = SimCognitoUserPoolDomain.distributionFor(this.name.custom);
+    }
+    /**
+     * The distribution name a domain reports, which only a custom domain has.
+     */
+    static distributionFor(custom) {
+        if (!custom) {
+            return undefined;
+        }
+        const name = faker.string.alphanumeric({
+            length: distributionNameLength,
+            casing: "lower",
+        });
+        return `${name}.cloudfront.net`;
+    }
+    /** The domain string this domain was created with. */
+    get value() {
+        return this.name.value;
+    }
+    /** The hostname real Cognito would serve this domain on. */
+    get hostname() {
+        return this.name.hostname;
+    }
+    /** The hostname this domain answers on inside the simulation. */
+    get localHostname() {
+        return this.name.localHostname;
+    }
+    /**
+     * The hostnames a request can reach this domain by.
+     *
+     * A prefix domain answers on both the real AWS hostname and the local one it
+     * is rewritten to, so a request that names either finds it. They are the
+     * same hostname for a custom domain, which has no AWS domain to drop.
+     */
+    get hostnames() {
+        return [...new Set([this.hostname, this.localHostname])];
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-domain.js.map

package/dist/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-domain.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/domain/sim-cognito-user-pool-domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAKxC;;GAEG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAgBlC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,wBAAwB;IACnB,IAAI,CAAuB;IAC3B,UAAU,CAAuB;IACjC,kBAAkB,CAA2C;IAC7D,mBAAmB,CAAqB;IAExD;;;OAGG;IACa,sBAAsB,CAAqB;IAE3D,YAAY,UAA8C;QACxD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,sBAAsB,GAAG,wBAAwB,CAAC,eAAe,CACpE,IAAI,CAAC,IAAI,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,eAAe,CAAC,MAAe;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YACrC,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,OAAO,GAAG,IAAI,iBAAiB,CAAC;IAClC,CAAC;IAED,sDAAsD;IACtD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,iEAAiE;IACjE,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,SAAS;QACX,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF"}