@kensio/yulin 1.14.2 → 1.15.0

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.js

@@ -0,0 +1,96 @@
+/**
+ * The bounds Cognito gives a standard `String` attribute that has no narrower
+ * ones of its own.
+ */
+const standardStringConstraints = { MinLength: "0", MaxLength: "2048" };
+/**
+ * The `String` attributes of the standard schema, which is most of it.
+ */
+const standardStringNames = [
+    "address",
+    "email",
+    "family_name",
+    "gender",
+    "given_name",
+    "locale",
+    "middle_name",
+    "name",
+    "nickname",
+    "phone_number",
+    "picture",
+    "preferred_username",
+    "profile",
+    "website",
+    "zoneinfo",
+];
+/**
+ * The standard attributes whose type is not `String`, and `birthdate`, whose
+ * length Cognito fixes at the ten characters of a `YYYY-MM-DD` date.
+ */
+const standardOtherAttributes = [
+    {
+        Name: "birthdate",
+        AttributeDataType: "String",
+        Mutable: true,
+        StringAttributeConstraints: { MinLength: "10", MaxLength: "10" },
+    },
+    { Name: "email_verified", AttributeDataType: "Boolean", Mutable: true },
+    {
+        Name: "phone_number_verified",
+        AttributeDataType: "Boolean",
+        Mutable: true,
+    },
+    {
+        Name: "updated_at",
+        AttributeDataType: "Number",
+        Mutable: true,
+        NumberAttributeConstraints: { MinValue: "0" },
+    },
+];
+/**
+ * The `sub` Cognito allocates, which every pool's schema reports and no
+ * request may set.
+ *
+ * It is here because `DescribeUserPool` reports it among the schema attributes
+ * on real Cognito. Nothing writes it: `SimCognitoUserAttributes` refuses a
+ * request naming it before the schema is consulted, and the user holds its own.
+ */
+const subAttribute = {
+    Name: "sub",
+    AttributeDataType: "String",
+    Mutable: false,
+    Required: true,
+    StringAttributeConstraints: { MinLength: "1", MaxLength: "2048" },
+};
+/**
+ * The standard attributes every Cognito pool's schema holds.
+ *
+ * These are the OpenID Connect claims, plus the two verification flags, the
+ * `sub` Cognito allocates, and the types and bounds real Cognito gives each of
+ * them. They are all mutable and none but `sub` is required, which is what a
+ * pool created without a `Schema` of its own has. A pool's `Schema` can
+ * redeclare one of them to make it required or to fix it, and adds anything
+ * else under a `custom:` name.
+ */
+export const simCognitoStandardAttributes = [
+    subAttribute,
+    ...standardStringNames.map((name) => ({
+        Name: name,
+        AttributeDataType: "String",
+        Mutable: true,
+        StringAttributeConstraints: standardStringConstraints,
+    })),
+    ...standardOtherAttributes,
+];
+const standardAttributeNames = new Set(simCognitoStandardAttributes.map((attribute) => attribute.Name));
+/**
+ * Whether an attribute name is one every pool's schema holds.
+ *
+ * A pool's own `Schema` naming one of these redeclares it rather than adding a
+ * `custom:` attribute of that name, which is how a pool makes an attribute
+ * such as `email` required.
+ */
+export function isSimCognitoStandardAttribute(name) {
+    return standardAttributeNames.has(name);
+}
+//# sourceMappingURL=sim-cognito-standard-attributes.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-standard-attributes.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-standard-attributes.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,yBAAyB,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAExE;;GAEG;AACH,MAAM,mBAAmB,GAAsB;IAC7C,SAAS;IACT,OAAO;IACP,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;IACV,cAAc;IACd,SAAS;IACT,oBAAoB;IACpB,SAAS;IACT,SAAS;IACT,UAAU;CACX,CAAC;AAEF;;;GAGG;AACH,MAAM,uBAAuB,GAA2C;IACtE;QACE,IAAI,EAAE,WAAW;QACjB,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;KACjE;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;IACvE;QACE,IAAI,EAAE,uBAAuB;QAC7B,iBAAiB,EAAE,SAAS;QAC5B,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,YAAY;QAClB,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;KAC9C;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,YAAY,GAAgC;IAChD,IAAI,EAAE,KAAK;IACX,iBAAiB,EAAE,QAAQ;IAC3B,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,IAAI;IACd,0BAA0B,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE;CAClE,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC;IACE,YAAY;IACZ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,IAAI;QACV,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,yBAAyB;KACtD,CAAC,CAAC;IACH,GAAG,uBAAuB;CAC3B,CAAC;AAEJ,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CACzD,4BAA4B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAChE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,OAAO,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.d.ts

@@ -0,0 +1,33 @@
+import type { SimCognitoAttributeBounds, SimCognitoAttributeConstraints, SimCognitoAttributeConstraintsType, SimCognitoStringAttributeConstraintsType } from "./sim-cognito-attribute-constraints.js";
+interface SimCognitoStringConstraintsProperties extends SimCognitoAttributeBounds {
+    readonly declared: SimCognitoStringAttributeConstraintsType | undefined;
+}
+/**
+ * How long the values of one attribute may be.
+ *
+ * An attribute with no `MaxLength` of its own still stops at the 2048
+ * characters Cognito holds any attribute to, which is the bound every pool
+ * applied before a schema could narrow it.
+ *
+ * These are the bounds of anything that is not a `Number`. A `Boolean` and a
+ * `DateTime` take no constraints of their own, and the values either of them
+ * could hold are well inside this length anyway.
+ */
+export declare class SimCognitoStringConstraints implements SimCognitoAttributeConstraints {
+    private readonly attributeName;
+    private readonly minimum;
+    private readonly maximum;
+    private readonly declared;
+    constructor(properties: SimCognitoStringConstraintsProperties);
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput(): SimCognitoAttributeConstraintsType;
+    /**
+     * Refuse a value of the wrong length.
+     */
+    requireValue(value: string): void;
+}
+export {};
+//# sourceMappingURL=sim-cognito-string-constraints.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-string-constraints.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-string-constraints.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,wCAAwC,CAAC;AAOhD,UAAU,qCAAsC,SAAQ,yBAAyB;IAC/E,QAAQ,CAAC,QAAQ,EAAE,wCAAwC,GAAG,SAAS,CAAC;CACzE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,2BAA4B,YAAW,8BAA8B;IAChF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEX;IAEd,YAAY,UAAU,EAAE,qCAAqC,EAK5D;IAED;;;OAGG;IACH,QAAQ,IAAI,kCAAkC,CAM7C;IAED;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAchC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.js

@@ -0,0 +1,52 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The longest value Cognito holds in any attribute, whatever its schema says.
+ */
+const maxAttributeValueLength = 2048;
+/**
+ * How long the values of one attribute may be.
+ *
+ * An attribute with no `MaxLength` of its own still stops at the 2048
+ * characters Cognito holds any attribute to, which is the bound every pool
+ * applied before a schema could narrow it.
+ *
+ * These are the bounds of anything that is not a `Number`. A `Boolean` and a
+ * `DateTime` take no constraints of their own, and the values either of them
+ * could hold are well inside this length anyway.
+ */
+export class SimCognitoStringConstraints {
+    attributeName;
+    minimum;
+    maximum;
+    declared;
+    constructor(properties) {
+        this.attributeName = properties.attributeName;
+        this.minimum = properties.minimum;
+        this.maximum = properties.maximum ?? maxAttributeValueLength;
+        this.declared = properties.declared;
+    }
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput() {
+        if (this.declared === undefined) {
+            return {};
+        }
+        return { StringAttributeConstraints: { ...this.declared } };
+    }
+    /**
+     * Refuse a value of the wrong length.
+     */
+    requireValue(value) {
+        if (value.length > this.maximum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is longer than the ` +
+                `${String(this.maximum)} characters the pool's schema allows`);
+        }
+        if (this.minimum !== undefined && value.length < this.minimum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is shorter than the ` +
+                `${String(this.minimum)} characters the pool's schema wants`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-string-constraints.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-string-constraints.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-string-constraints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAQvF;;GAEG;AACH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAMrC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA2B;IACrB,aAAa,CAAS;IACtB,OAAO,CAAqB;IAC5B,OAAO,CAAS;IAChB,QAAQ,CAEX;IAEd,YAAY,UAAiD;QAC3D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,uBAAuB,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,uBAAuB;gBAC1D,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,wBAAwB;gBAC3D,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.d.ts

@@ -0,0 +1,89 @@
+import { SimCognitoSchemaAttribute, type SimCognitoSchemaAttributeType } from "./sim-cognito-schema-attribute.js";
+/**
+ * The attributes one simulated user pool holds on its users.
+ *
+ * Every pool starts with the standard schema, and its `Schema` adds to it. A
+ * declaration naming a standard attribute redeclares that one, which is how a
+ * pool makes `email` required, and a declaration naming anything else becomes
+ * a `custom:` attribute of the pool's own.
+ *
+ * The schema is what every write of a user attribute is checked against, so an
+ * attribute no schema declares is refused where it was written rather than
+ * stored and read back by an application that expected Cognito to have kept
+ * it.
+ *
+ * A pool's schema is fixed once the pool exists. Real Cognito adds to it with
+ * `AddCustomAttributes` and has no `UpdateUserPool` input for it at all, so an
+ * update carries the schema across rather than replacing it.
+ */
+export declare class SimCognitoUserPoolSchema {
+    private readonly byName;
+    /**
+     * The names the request declared, which is what a repeated declaration is
+     * caught by: the standard attributes are held before any of them and are
+     * there to be redeclared rather than to collide with one.
+     */
+    private readonly declaredNames;
+    constructor(declared?: readonly SimCognitoSchemaAttributeType[]);
+    /**
+     * Refuse a `Schema` of a length Cognito would not take.
+     *
+     * A request declaring an empty list is refused rather than treated as a
+     * request declaring nothing, because real Cognito refuses one: a `Schema`
+     * built from an application's own configuration and left empty fails on the
+     * way to AWS, and it should fail here first.
+     */
+    private static requireDeclarableList;
+    /**
+     * The `custom:` attributes this pool declared, in declaration order.
+     */
+    get customNames(): readonly string[];
+    /**
+     * The attributes a user cannot be created without.
+     *
+     * `sub` is not among them although the schema reports it as required:
+     * Cognito allocates one for every user, so nothing is ever created without
+     * it and no request may send it.
+     */
+    get requiredNames(): readonly string[];
+    /**
+     * Whether this schema holds an attribute of that name.
+     */
+    holds(name: string): boolean;
+    /**
+     * The attribute of that name, or nothing where the schema does not hold it.
+     */
+    find(name: string): SimCognitoSchemaAttribute | undefined;
+    /**
+     * Say, for a refusal, what a pool holding no custom attributes at all does.
+     *
+     * This is the sentence that tells a caller whether it declared the attribute
+     * under a different name or never declared it, which is the difference
+     * between the two mistakes that reach this refusal.
+     */
+    describeHolding(): string;
+    /**
+     * Refuse a user created without an attribute the schema requires.
+     *
+     * Real Cognito refuses `SignUp` and `AdminCreateUser` the same way, so a
+     * pool whose `Schema` made an attribute required is one an application has
+     * to send that attribute to here as well.
+     */
+    requireEveryRequired(held: ReadonlySet<string>): void;
+    /**
+     * This schema as `DescribeUserPool` reports it, standard attributes first.
+     */
+    toOutput(): readonly SimCognitoSchemaAttributeType[];
+    private get attributes();
+    /**
+     * Take on one attribute a `Schema` declared.
+     *
+     * A name the same request already declared is refused, whether it is a
+     * custom attribute or a standard one being redeclared: taking the last of
+     * them would deploy a pool holding something the request did not plainly
+     * ask for.
+     */
+    private declare;
+    private hold;
+}
+//# sourceMappingURL=sim-cognito-user-pool-schema.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-schema.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,mCAAmC,CAAC;AAe3C;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgD;IAEvE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IAEnD,YAAY,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,EAgB9D;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC;;OAEG;IACH,IAAI,WAAW,IAAI,SAAS,MAAM,EAAE,CAInC;IAED;;;;;;OAMG;IACH,IAAI,aAAa,IAAI,SAAS,MAAM,EAAE,CAIrC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3B;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAExD;IAED;;;;;;OAMG;IACH,eAAe,IAAI,MAAM,CAWxB;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAWpD;IAED;;OAEG;IACH,QAAQ,IAAI,SAAS,6BAA6B,EAAE,CAEnD;IAED,OAAO,KAAK,UAAU,GAErB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAef,OAAO,CAAC,IAAI;CAGb"}

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.js

@@ -0,0 +1,157 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { SimCognitoSchemaAttribute, } from "./sim-cognito-schema-attribute.js";
+import { isSimCognitoStandardAttribute, simCognitoStandardAttributes, } from "./sim-cognito-standard-attributes.js";
+/**
+ * How many attributes Cognito takes in one `Schema`.
+ *
+ * The list is what the limit is on, and a pool cannot reach the 50 custom
+ * attributes it may hold any other way: `AddCustomAttributes` is what adds to
+ * a schema afterwards, and that is not simulated.
+ */
+const maxSchemaAttributes = 50;
+/**
+ * The attributes one simulated user pool holds on its users.
+ *
+ * Every pool starts with the standard schema, and its `Schema` adds to it. A
+ * declaration naming a standard attribute redeclares that one, which is how a
+ * pool makes `email` required, and a declaration naming anything else becomes
+ * a `custom:` attribute of the pool's own.
+ *
+ * The schema is what every write of a user attribute is checked against, so an
+ * attribute no schema declares is refused where it was written rather than
+ * stored and read back by an application that expected Cognito to have kept
+ * it.
+ *
+ * A pool's schema is fixed once the pool exists. Real Cognito adds to it with
+ * `AddCustomAttributes` and has no `UpdateUserPool` input for it at all, so an
+ * update carries the schema across rather than replacing it.
+ */
+export class SimCognitoUserPoolSchema {
+    byName = new Map();
+    /**
+     * The names the request declared, which is what a repeated declaration is
+     * caught by: the standard attributes are held before any of them and are
+     * there to be redeclared rather than to collide with one.
+     */
+    declaredNames = new Set();
+    constructor(declared) {
+        for (const standard of simCognitoStandardAttributes) {
+            this.hold(new SimCognitoSchemaAttribute({ declared: standard, custom: false }));
+        }
+        if (declared === undefined) {
+            return;
+        }
+        SimCognitoUserPoolSchema.requireDeclarableList(declared);
+        for (const attribute of declared) {
+            this.declare(attribute);
+        }
+    }
+    /**
+     * Refuse a `Schema` of a length Cognito would not take.
+     *
+     * A request declaring an empty list is refused rather than treated as a
+     * request declaring nothing, because real Cognito refuses one: a `Schema`
+     * built from an application's own configuration and left empty fails on the
+     * way to AWS, and it should fail here first.
+     */
+    static requireDeclarableList(declared) {
+        if (declared.length === 0 || declared.length > maxSchemaAttributes) {
+            throw new SimCognitoInvalidParameterException(`Schema declares ${String(declared.length)} attributes: Cognito takes ` +
+                `between 1 and ${String(maxSchemaAttributes)} of them in one ` +
+                `CreateUserPool request`);
+        }
+    }
+    /**
+     * The `custom:` attributes this pool declared, in declaration order.
+     */
+    get customNames() {
+        return this.attributes
+            .filter((attribute) => !isSimCognitoStandardAttribute(attribute.name))
+            .map((attribute) => attribute.name);
+    }
+    /**
+     * The attributes a user cannot be created without.
+     *
+     * `sub` is not among them although the schema reports it as required:
+     * Cognito allocates one for every user, so nothing is ever created without
+     * it and no request may send it.
+     */
+    get requiredNames() {
+        return this.attributes
+            .filter((attribute) => attribute.required && attribute.name !== "sub")
+            .map((attribute) => attribute.name);
+    }
+    /**
+     * Whether this schema holds an attribute of that name.
+     */
+    holds(name) {
+        return this.byName.has(name);
+    }
+    /**
+     * The attribute of that name, or nothing where the schema does not hold it.
+     */
+    find(name) {
+        return this.byName.get(name);
+    }
+    /**
+     * Say, for a refusal, what a pool holding no custom attributes at all does.
+     *
+     * This is the sentence that tells a caller whether it declared the attribute
+     * under a different name or never declared it, which is the difference
+     * between the two mistakes that reach this refusal.
+     */
+    describeHolding() {
+        const custom = this.customNames;
+        if (custom.length === 0) {
+            return ("the pool holds the standard attributes only, because its " +
+                "CreateUserPool request declared no Schema of its own");
+        }
+        return `the pool's schema declares ${custom.join(", ")}`;
+    }
+    /**
+     * Refuse a user created without an attribute the schema requires.
+     *
+     * Real Cognito refuses `SignUp` and `AdminCreateUser` the same way, so a
+     * pool whose `Schema` made an attribute required is one an application has
+     * to send that attribute to here as well.
+     */
+    requireEveryRequired(held) {
+        const missing = this.requiredNames.filter((name) => !held.has(name));
+        if (missing.length === 0) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`User attributes ${missing.join(", ")} are required by the pool's ` +
+            `schema, and this user is being created without them`);
+    }
+    /**
+     * This schema as `DescribeUserPool` reports it, standard attributes first.
+     */
+    toOutput() {
+        return this.attributes.map((attribute) => attribute.toOutput());
+    }
+    get attributes() {
+        return this.byName.values().toArray();
+    }
+    /**
+     * Take on one attribute a `Schema` declared.
+     *
+     * A name the same request already declared is refused, whether it is a
+     * custom attribute or a standard one being redeclared: taking the last of
+     * them would deploy a pool holding something the request did not plainly
+     * ask for.
+     */
+    declare(declared) {
+        const custom = !isSimCognitoStandardAttribute(declared.Name ?? "");
+        const attribute = new SimCognitoSchemaAttribute({ declared, custom });
+        if (this.declaredNames.has(attribute.name)) {
+            throw new SimCognitoInvalidParameterException(`Schema attribute '${attribute.name}' is declared twice: a pool holds ` +
+                `one attribute of each name`);
+        }
+        this.declaredNames.add(attribute.name);
+        this.hold(attribute);
+    }
+    hold(attribute) {
+        this.byName.set(attribute.name, attribute);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-schema.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-schema.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAClB,MAAM,GAAG,IAAI,GAAG,EAAqC,CAAC;IAEvE;;;;OAIG;IACc,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnD,YAAY,QAAmD;QAC7D,KAAK,MAAM,QAAQ,IAAI,4BAA4B,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CACP,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAEzD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,qBAAqB,CAClC,QAAkD;QAElD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACnE,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,6BAA6B;gBACrE,iBAAiB,MAAM,CAAC,mBAAmB,CAAC,kBAAkB;gBAC9D,wBAAwB,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,UAAU;aACnB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,UAAU;aACnB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC;aACrE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,eAAe;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAEhC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CACL,2DAA2D;gBAC3D,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,8BAA8B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,IAAyB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAErE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;YACjE,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACK,OAAO,CAAC,QAAuC;QACrD,MAAM,MAAM,GAAG,CAAC,6BAA6B,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtE,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,SAAS,CAAC,IAAI,oCAAoC;gBACrE,4BAA4B,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAEO,IAAI,CAAC,SAAoC;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts

@@ -1,9 +1,12 @@
 import { SimCognitoAdminCreateUserConfig, type SimCognitoAdminCreateUserConfigType } from "./sim-cognito-admin-create-user-config.js";
 import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
 import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoUserPoolMfa } from "./mfa/sim-cognito-user-pool-mfa.js";
 import { SimCognitoPasswordPolicy, type SimCognitoUserPoolPoliciesType } from "./sim-cognito-password-policy.js";
 import { SimCognitoVerificationMessages, type SimCognitoVerificationMessagesType } from "./message/sim-cognito-verification-messages.js";
 import { SimCognitoUnsimulatedPoolSettings, type SimCognitoUnsimulatedPoolSettingsType } from "./sim-cognito-unsimulated-pool-settings.js";
+import type { SimCognitoSchemaAttributeType } from "./schema/sim-cognito-schema-attribute.js";
+import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
  * The pool settings a request can set, in the shape the SDK sends them.
@@ -14,9 +17,19 @@ import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 export interface SimCognitoUserPoolSettingsInput extends SimCognitoUnsimulatedPoolSettingsType, SimCognitoVerificationMessagesType {
     readonly Policies?: SimCognitoUserPoolPoliciesType | undefined;
     readonly DeletionProtection?: string | undefined;
+    readonly MfaConfiguration?: string | undefined;
     readonly AdminCreateUserConfig?: SimCognitoAdminCreateUserConfigType | undefined;
     readonly AutoVerifiedAttributes?: readonly string[] | undefined;
     readonly LambdaConfig?: object | undefined;
+    /**
+     * The attributes the pool holds on its users beyond the standard ones.
+     *
+     * Only `CreateUserPool` carries it. It is named among the shared settings
+     * because that is where the pool's schema is built, and `UpdateUserPool`
+     * refuses one rather than replacing the schema of a pool that already has
+     * users written against it.
+     */
+    readonly Schema?: readonly SimCognitoSchemaAttributeType[] | undefined;
 }
 interface SimCognitoUserPoolSettingsProperties {
     readonly input: SimCognitoUserPoolSettingsInput;
@@ -29,8 +42,8 @@ interface SimCognitoUserPoolSettingsProperties {
 /**
  * The settings of one simulated user pool that a request can change: the
  * password policy, the deletion protection, whether users may sign themselves
- * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
- * and what its messages say.
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
+ * whether it asks for a second factor and what its messages say.
  *
  * The pool's id, ARN and name are not among them. The first two identify the
  * pool, and renaming one is not simulated.
@@ -40,8 +53,13 @@ interface SimCognitoUserPoolSettingsProperties {
  * rather than merge: an update builds a whole configuration out of its own
  * request, and the pool swaps to it, so a setting the update is silent about
  * goes back to its default rather than staying as it was.
+ *
+ * The schema is the exception. Only `CreateUserPool` declares one, so an
+ * update takes on the schema of the settings it replaces rather than dropping
+ * the pool back to the standard attributes.
  */
 export declare class SimCognitoUserPoolSettings {
+    #private;
     readonly passwordPolicy: SimCognitoPasswordPolicy;
     readonly deletionProtection: SimCognitoDeletionProtection;
     readonly adminCreateUserConfig: SimCognitoAdminCreateUserConfig;
@@ -50,6 +68,17 @@ export declare class SimCognitoUserPoolSettings {
      * The Lambda triggers the pool runs, by the ARN of the function each names.
      */
     readonly lambdaConfig: SimCognitoLambdaConfig;
+    /**
+     * Whether the pool challenges for a second factor, and which factors it
+     * offers.
+     *
+     * The `MfaConfiguration` is one of these settings because both pool requests
+     * carry it. The factors behind it are not: only `SetUserPoolMfaConfig` says
+     * what they are, and it changes them in place rather than through a whole
+     * new set of settings, so an update carries them across rather than
+     * replacing them.
+     */
+    readonly mfa: SimCognitoUserPoolMfa;
     /**
      * What the pool says in the message it sends a user signing itself up.
      */
@@ -60,6 +89,20 @@ export declare class SimCognitoUserPoolSettings {
      */
     readonly unsimulated: SimCognitoUnsimulatedPoolSettings;
     constructor(properties: SimCognitoUserPoolSettingsProperties);
+    /**
+     * The attributes the pool holds on its users: the standard ones, and the
+     * ones its `Schema` declared under `custom:` names.
+     */
+    get schema(): SimCognitoUserPoolSchema;
+    /**
+     * Take on the schema of the settings this set replaces.
+     *
+     * `UpdateUserPool` has no `Schema` input on real Cognito, so an update
+     * changes nothing about the attributes a pool holds. Carrying the schema
+     * across is what keeps that true here, where an update otherwise replaces
+     * every setting with the default of the one it left out.
+     */
+    keepSchemaOf(replaced: SimCognitoUserPoolSettings): void;
 }
 export {};
 //# sourceMappingURL=sim-cognito-user-pool-settings.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,EACjC,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BACf,SACE,qCAAqC,EACrC,kCAAkC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA0B;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,WAAW,EAAE,iCAAiC,CAAC;IAE/D,YAAY,UAAU,EAAE,oCAAoC,EAqB3D;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,EACjC,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BACf,SACE,qCAAqC,EACrC,kCAAkC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,6BAA6B,EAAE,GAAG,SAAS,CAAC;CACxE;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,0BAA0B;;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;;;;;;;;OASG;IACH,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAE3C;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,WAAW,EAAE,iCAAiC,CAAC;IAI/D,YAAY,UAAU,EAAE,oCAAoC,EAyB3D;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,wBAAwB,CAErC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAEvD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js

@@ -1,15 +1,18 @@
 import { SimCognitoAdminCreateUserConfig, } from "./sim-cognito-admin-create-user-config.js";
 import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
 import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoMfaConfiguration } from "./mfa/sim-cognito-mfa-configuration.js";
+import { SimCognitoUserPoolMfa } from "./mfa/sim-cognito-user-pool-mfa.js";
 import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
 import { SimCognitoVerificationMessages, } from "./message/sim-cognito-verification-messages.js";
 import { SimCognitoUnsimulatedPoolSettings, } from "./sim-cognito-unsimulated-pool-settings.js";
+import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
  * The settings of one simulated user pool that a request can change: the
  * password policy, the deletion protection, whether users may sign themselves
- * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
- * and what its messages say.
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
+ * whether it asks for a second factor and what its messages say.
  *
  * The pool's id, ARN and name are not among them. The first two identify the
  * pool, and renaming one is not simulated.
@@ -19,6 +22,10 @@ import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
  * rather than merge: an update builds a whole configuration out of its own
  * request, and the pool swaps to it, so a setting the update is silent about
  * goes back to its default rather than staying as it was.
+ *
+ * The schema is the exception. Only `CreateUserPool` declares one, so an
+ * update takes on the schema of the settings it replaces rather than dropping
+ * the pool back to the standard attributes.
  */
 export class SimCognitoUserPoolSettings {
     passwordPolicy;
@@ -29,6 +36,17 @@ export class SimCognitoUserPoolSettings {
      * The Lambda triggers the pool runs, by the ARN of the function each names.
      */
     lambdaConfig;
+    /**
+     * Whether the pool challenges for a second factor, and which factors it
+     * offers.
+     *
+     * The `MfaConfiguration` is one of these settings because both pool requests
+     * carry it. The factors behind it are not: only `SetUserPoolMfaConfig` says
+     * what they are, and it changes them in place rather than through a whole
+     * new set of settings, so an update carries them across rather than
+     * replacing them.
+     */
+    mfa;
     /**
      * What the pool says in the message it sends a user signing itself up.
      */
@@ -38,6 +56,7 @@ export class SimCognitoUserPoolSettings {
      * reports it.
      */
     unsimulated;
+    #schema;
     constructor(properties) {
         const { input, operation } = properties;
         this.passwordPolicy = new SimCognitoPasswordPolicy(input.Policies?.PasswordPolicy);
@@ -45,8 +64,28 @@ export class SimCognitoUserPoolSettings {
         this.adminCreateUserConfig = new SimCognitoAdminCreateUserConfig(input.AdminCreateUserConfig);
         this.autoVerifiedAttributes = new SimCognitoAutoVerifiedAttributes(input.AutoVerifiedAttributes);
         this.lambdaConfig = new SimCognitoLambdaConfig(input.LambdaConfig, operation);
+        this.mfa = new SimCognitoUserPoolMfa(new SimCognitoMfaConfiguration(input.MfaConfiguration));
         this.verificationMessages = new SimCognitoVerificationMessages(input);
         this.unsimulated = new SimCognitoUnsimulatedPoolSettings(input);
+        this.#schema = new SimCognitoUserPoolSchema(input.Schema);
+    }
+    /**
+     * The attributes the pool holds on its users: the standard ones, and the
+     * ones its `Schema` declared under `custom:` names.
+     */
+    get schema() {
+        return this.#schema;
+    }
+    /**
+     * Take on the schema of the settings this set replaces.
+     *
+     * `UpdateUserPool` has no `Schema` input on real Cognito, so an update
+     * changes nothing about the attributes a pool holds. Carrying the schema
+     * across is what keeps that true here, where an update otherwise replaces
+     * every setting with the default of the one it left out.
+     */
+    keepSchemaOf(replaced) {
+        this.#schema = replaced.schema;
     }
 }
 //# sourceMappingURL=sim-cognito-user-pool-settings.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AA+BhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,WAAW,CAAoC;IAE/D,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AA0ChF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;;;;;;;;OASG;IACa,GAAG,CAAwB;IAE3C;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,WAAW,CAAoC;IAE/D,OAAO,CAA2B;IAElC,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,qBAAqB,CAClC,IAAI,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAoC;QAC/C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,CAAC;CACF"}