@kensio/yulin 1.14.2 → 1.15.1

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.d.ts

@@ -0,0 +1,83 @@
+import { SimCognitoMfaConfiguration } from "./sim-cognito-mfa-configuration.js";
+/**
+ * Whether a pool offers a time-based one-time password as a second factor.
+ */
+export interface SimCognitoSoftwareTokenMfaConfigType {
+    readonly Enabled?: boolean | undefined;
+}
+/**
+ * What a pool says in the text message carrying a second factor.
+ *
+ * Real Cognito also takes an `SmsConfiguration` here, naming the IAM role it
+ * assumes to call SNS. Nothing here delivers a message, and `CreateUserPool`
+ * refuses the pool's own `SmsConfiguration` for that reason, so the command
+ * refuses this one in the same words rather than recording a role it would
+ * never assume.
+ */
+export interface SimCognitoSmsMfaConfigType {
+    readonly SmsAuthenticationMessage?: string | undefined;
+    readonly SmsConfiguration?: object | undefined;
+}
+/**
+ * The MFA configuration of a pool, in the shape `SetUserPoolMfaConfig` and
+ * `GetUserPoolMfaConfig` carry it.
+ *
+ * Real Cognito carries one more factor configuration here, for the code sent
+ * by email. That one needs the pool's `EmailConfiguration`, which
+ * `CreateUserPool` refuses, so the command refuses it rather than reporting it
+ * back.
+ */
+export interface SimCognitoUserPoolMfaType {
+    readonly MfaConfiguration?: string | undefined;
+    readonly SoftwareTokenMfaConfiguration?: SimCognitoSoftwareTokenMfaConfigType | undefined;
+    readonly SmsMfaConfiguration?: SimCognitoSmsMfaConfigType | undefined;
+}
+/**
+ * The multi-factor authentication one simulated user pool is configured for:
+ * whether it challenges, and which factors it offers.
+ *
+ * The two arrive separately on real Cognito. `CreateUserPool` and
+ * `UpdateUserPool` carry the `MfaConfiguration` alone, and only
+ * `SetUserPoolMfaConfig` says which factors a challenge could use, which is why
+ * CloudFormation deploys a pool with MFA in two calls rather than one. That is
+ * also why an update replaces the challenging and leaves the factors where they
+ * were.
+ *
+ * A sign-in reads this to decide whether the user owes a second factor, and
+ * `GetUserPoolMfaConfig` reports it. The factors it lists are what a pool
+ * offers rather than what any one user registered: a challenge is issued for
+ * the factor the user itself enabled.
+ */
+export declare class SimCognitoUserPoolMfa {
+    #private;
+    constructor(configuration: SimCognitoMfaConfiguration);
+    /**
+     * Whether the pool challenges, and which users it challenges.
+     */
+    get configuration(): SimCognitoMfaConfiguration;
+    /**
+     * Replace the whole configuration, as `SetUserPoolMfaConfig` replaces it: a
+     * factor the request leaves out goes back to being unconfigured.
+     *
+     * A request naming `SoftwareTokenMfaConfiguration` without an `Enabled` is
+     * asking for it disabled, as real Cognito reads one.
+     */
+    set(input: SimCognitoUserPoolMfaType): void;
+    /**
+     * Whether the pool offers a second factor sent as a text message.
+     */
+    get sendsSms(): boolean;
+    /**
+     * Take on the factors of the configuration this one replaces.
+     *
+     * An `UpdateUserPool` request names an `MfaConfiguration` and no factor
+     * configuration at all, so an update changes whether the pool challenges and
+     * leaves what it would challenge with alone, as it does on real Cognito.
+     */
+    keepFactorsOf(replaced: SimCognitoUserPoolMfa): void;
+    /**
+     * This configuration as `GetUserPoolMfaConfig` reports it.
+     */
+    toOutput(): SimCognitoUserPoolMfaType;
+}
+//# sourceMappingURL=sim-cognito-user-pool-mfa.d.ts.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-mfa.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,6BAA6B,CAAC,EACnC,oCAAoC,GACpC,SAAS,CAAC;IACd,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACvE;AAgDD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;;IAgBhC,YAAY,aAAa,EAAE,0BAA0B,EAEpD;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,0BAA0B,CAE9C;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAM1C;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAGnD;IAED;;OAEG;IACH,QAAQ,IAAI,yBAAyB,CAQpC;CACF"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.js

@@ -0,0 +1,114 @@
+import { requireSimCognitoVerificationWording, simCognitoLongestSmsMessage, } from "../message/sim-cognito-verification-wording.js";
+import { SimCognitoMfaConfiguration } from "./sim-cognito-mfa-configuration.js";
+/**
+ * Whether a request asked for a time-based one-time password, and nothing
+ * where it named no such factor at all.
+ */
+function softwareTokenIn(input) {
+    const requested = input.SoftwareTokenMfaConfiguration;
+    if (requested === undefined) {
+        return undefined;
+    }
+    return requested.Enabled ?? false;
+}
+/**
+ * What a request asked for in a text message carrying a code, and nothing
+ * where it configured no such factor at all.
+ *
+ * The wording is held to the rules real Cognito holds an SMS message to, so a
+ * message that would reach a user with no code in it is refused here rather
+ * than on the way to AWS.
+ */
+function smsIn(input) {
+    const requested = input.SmsMfaConfiguration;
+    if (requested === undefined) {
+        return undefined;
+    }
+    const message = requested.SmsAuthenticationMessage;
+    return {
+        ...(message !== undefined && {
+            SmsAuthenticationMessage: requireSimCognitoVerificationWording("SmsAuthenticationMessage", message, simCognitoLongestSmsMessage),
+        }),
+    };
+}
+/**
+ * The multi-factor authentication one simulated user pool is configured for:
+ * whether it challenges, and which factors it offers.
+ *
+ * The two arrive separately on real Cognito. `CreateUserPool` and
+ * `UpdateUserPool` carry the `MfaConfiguration` alone, and only
+ * `SetUserPoolMfaConfig` says which factors a challenge could use, which is why
+ * CloudFormation deploys a pool with MFA in two calls rather than one. That is
+ * also why an update replaces the challenging and leaves the factors where they
+ * were.
+ *
+ * A sign-in reads this to decide whether the user owes a second factor, and
+ * `GetUserPoolMfaConfig` reports it. The factors it lists are what a pool
+ * offers rather than what any one user registered: a challenge is issued for
+ * the factor the user itself enabled.
+ */
+export class SimCognitoUserPoolMfa {
+    #configuration;
+    /**
+     * Whether a time-based one-time password is enabled, where a request said.
+     * A pool no `SetUserPoolMfaConfig` request has reached has no answer to give
+     * rather than a false one, which is what real Cognito reports for one.
+     */
+    #softwareToken;
+    /**
+     * What the pool would say in a text message carrying a code, where a request
+     * configured the factor at all.
+     */
+    #sms;
+    constructor(configuration) {
+        this.#configuration = configuration;
+    }
+    /**
+     * Whether the pool challenges, and which users it challenges.
+     */
+    get configuration() {
+        return this.#configuration;
+    }
+    /**
+     * Replace the whole configuration, as `SetUserPoolMfaConfig` replaces it: a
+     * factor the request leaves out goes back to being unconfigured.
+     *
+     * A request naming `SoftwareTokenMfaConfiguration` without an `Enabled` is
+     * asking for it disabled, as real Cognito reads one.
+     */
+    set(input) {
+        this.#configuration = new SimCognitoMfaConfiguration(input.MfaConfiguration);
+        this.#softwareToken = softwareTokenIn(input);
+        this.#sms = smsIn(input);
+    }
+    /**
+     * Whether the pool offers a second factor sent as a text message.
+     */
+    get sendsSms() {
+        return this.#sms !== undefined;
+    }
+    /**
+     * Take on the factors of the configuration this one replaces.
+     *
+     * An `UpdateUserPool` request names an `MfaConfiguration` and no factor
+     * configuration at all, so an update changes whether the pool challenges and
+     * leaves what it would challenge with alone, as it does on real Cognito.
+     */
+    keepFactorsOf(replaced) {
+        this.#softwareToken = replaced.#softwareToken;
+        this.#sms = replaced.#sms;
+    }
+    /**
+     * This configuration as `GetUserPoolMfaConfig` reports it.
+     */
+    toOutput() {
+        return {
+            MfaConfiguration: this.#configuration.value,
+            ...(this.#softwareToken !== undefined && {
+                SoftwareTokenMfaConfiguration: { Enabled: this.#softwareToken },
+            }),
+            ...(this.#sms !== undefined && { SmsMfaConfiguration: this.#sms }),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-mfa.js.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-mfa.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,2BAA2B,GAC5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAwChF;;;GAGG;AACH,SAAS,eAAe,CACtB,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,6BAA6B,CAAC;IAEtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,KAAK,CACZ,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE5C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAEnD,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI;YAC3B,wBAAwB,EAAE,oCAAoC,CAC5D,0BAA0B,EAC1B,OAAO,EACP,2BAA2B,CAC5B;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IAChC,cAAc,CAA6B;IAE3C;;;;OAIG;IACH,cAAc,CAAsB;IAEpC;;;OAGG;IACH,IAAI,CAAyC;IAE7C,YAAY,aAAyC;QACnD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAgC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAA0B,CAClD,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAA+B;QAC3C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK;YAC3C,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,6BAA6B,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;aAChE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.d.ts

@@ -0,0 +1,61 @@
+import { type SimCognitoAttributeDataType } from "./sim-cognito-attribute-data-type.js";
+/**
+ * How long the value of a `String` attribute may be.
+ *
+ * Cognito carries both bounds as strings, which is how the API reports them
+ * back as well.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_StringAttributeConstraintsType.html
+ */
+export interface SimCognitoStringAttributeConstraintsType {
+    readonly MinLength?: string | undefined;
+    readonly MaxLength?: string | undefined;
+}
+/**
+ * The range the value of a `Number` attribute may be in.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_NumberAttributeConstraintsType.html
+ */
+export interface SimCognitoNumberAttributeConstraintsType {
+    readonly MinValue?: string | undefined;
+    readonly MaxValue?: string | undefined;
+}
+/**
+ * The bounds a schema attribute declares, whichever kind it has.
+ */
+export interface SimCognitoAttributeConstraintsType {
+    readonly StringAttributeConstraints?: SimCognitoStringAttributeConstraintsType | undefined;
+    readonly NumberAttributeConstraints?: SimCognitoNumberAttributeConstraintsType | undefined;
+}
+/**
+ * What one attribute's declared bounds do: refuse a value outside them, and
+ * report themselves back as the declaration wrote them.
+ */
+export interface SimCognitoAttributeConstraints {
+    requireValue(value: string): void;
+    toOutput(): SimCognitoAttributeConstraintsType;
+}
+/**
+ * One kind of bounds, already read out of the declaration.
+ */
+export interface SimCognitoAttributeBounds {
+    readonly attributeName: string;
+    readonly minimum: number | undefined;
+    readonly maximum: number | undefined;
+}
+interface SimCognitoAttributeConstraintsProperties {
+    readonly declared: SimCognitoAttributeConstraintsType;
+    readonly dataType: SimCognitoAttributeDataType;
+    readonly attributeName: string;
+}
+/**
+ * The bounds one schema attribute holds its values to.
+ *
+ * A `String` attribute is bounded by length and a `Number` attribute by value,
+ * and Cognito refuses the constraints of the wrong kind rather than applying
+ * neither, so a declaration that could not have created the pool on real AWS
+ * does not create one here.
+ */
+export declare function simCognitoAttributeConstraintsFor(properties: SimCognitoAttributeConstraintsProperties): SimCognitoAttributeConstraints;
+export {};
+//# sourceMappingURL=sim-cognito-attribute-constraints.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-attribute-constraints.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,sCAAsC,CAAC;AAI9C;;;;;;;GAOG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,0BAA0B,CAAC,EAChC,wCAAwC,GACxC,SAAS,CAAC;IACd,QAAQ,CAAC,0BAA0B,CAAC,EAChC,wCAAwC,GACxC,SAAS,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,IAAI,kCAAkC,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,UAAU,wCAAwC;IAChD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,wCAAwC,GACnD,8BAA8B,CAsBhC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.js

@@ -0,0 +1,64 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { isNumeric, } from "./sim-cognito-attribute-data-type.js";
+import { SimCognitoNumberConstraints } from "./sim-cognito-number-constraints.js";
+import { SimCognitoStringConstraints } from "./sim-cognito-string-constraints.js";
+/**
+ * The bounds one schema attribute holds its values to.
+ *
+ * A `String` attribute is bounded by length and a `Number` attribute by value,
+ * and Cognito refuses the constraints of the wrong kind rather than applying
+ * neither, so a declaration that could not have created the pool on real AWS
+ * does not create one here.
+ */
+export function simCognitoAttributeConstraintsFor(properties) {
+    const { declared, dataType, attributeName } = properties;
+    const range = declared.NumberAttributeConstraints;
+    const lengths = declared.StringAttributeConstraints;
+    requireDeclarationOfItsKind(properties);
+    if (dataType.isNumber) {
+        return new SimCognitoNumberConstraints({
+            attributeName,
+            minimum: bound(attributeName, "MinValue", range?.MinValue),
+            maximum: bound(attributeName, "MaxValue", range?.MaxValue),
+            declared: range,
+        });
+    }
+    return new SimCognitoStringConstraints({
+        attributeName,
+        minimum: bound(attributeName, "MinLength", lengths?.MinLength),
+        maximum: bound(attributeName, "MaxLength", lengths?.MaxLength),
+        declared: lengths,
+    });
+}
+/**
+ * Refuse constraints of a kind the attribute's type has no use for.
+ *
+ * Real Cognito refuses these too, so a schema declaring a `MaxValue` on a
+ * `String` fails on the way to AWS rather than deploying with a bound nothing
+ * applies.
+ */
+function requireDeclarationOfItsKind(properties) {
+    const { declared, dataType, attributeName } = properties;
+    if (declared.StringAttributeConstraints !== undefined && !dataType.isString) {
+        throw refusal(attributeName, "has StringAttributeConstraints, which only a String attribute takes");
+    }
+    if (declared.NumberAttributeConstraints !== undefined && !dataType.isNumber) {
+        throw refusal(attributeName, "has NumberAttributeConstraints, which only a Number attribute takes");
+    }
+}
+/**
+ * Read one declared bound, which Cognito carries as a string.
+ */
+function bound(attributeName, field, declared) {
+    if (declared === undefined) {
+        return undefined;
+    }
+    if (!isNumeric(declared)) {
+        throw refusal(attributeName, `has a ${field} of '${declared}', which is not a number`);
+    }
+    return Number(declared);
+}
+function refusal(attributeName, says) {
+    return new SimCognitoInvalidParameterException(`Schema attribute '${attributeName}' ${says}`);
+}
+//# sourceMappingURL=sim-cognito-attribute-constraints.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-attribute-constraints.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-attribute-constraints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,SAAS,GAEV,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AA6DlF;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,UAAoD;IAEpD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,0BAA0B,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,0BAA0B,CAAC;IAEpD,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAExC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,2BAA2B,CAAC;YACrC,aAAa;YACb,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;YAC1D,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;YAC1D,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,2BAA2B,CAAC;QACrC,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;QAC9D,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;QAC9D,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,2BAA2B,CAClC,UAAoD;IAEpD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC;IAEzD,IAAI,QAAQ,CAAC,0BAA0B,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,OAAO,CACX,aAAa,EACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,0BAA0B,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,OAAO,CACX,aAAa,EACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CACZ,aAAqB,EACrB,KAAa,EACb,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,CACX,aAAa,EACb,SAAS,KAAK,QAAQ,QAAQ,0BAA0B,CACzD,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO,CACd,aAAqB,EACrB,IAAY;IAEZ,OAAO,IAAI,mCAAmC,CAC5C,qBAAqB,aAAa,KAAK,IAAI,EAAE,CAC9C,CAAC;AACJ,CAAC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The kinds of value a Cognito attribute can hold.
+ */
+export type SimCognitoAttributeDataTypeValue = "Boolean" | "DateTime" | "Number" | "String";
+/**
+ * What kind of value one attribute in a pool's schema holds.
+ *
+ * An attribute declared without one is a `String`, which is what real Cognito
+ * defaults it to and what a CDK `StringAttribute` states anyway.
+ *
+ * Every attribute value is carried as a string on the wire, whatever its type,
+ * so this is what decides whether the string a request sent is one the
+ * attribute could hold. Real Cognito checks the same thing, and a value it
+ * would refuse is refused here rather than stored and read back as something
+ * an application cannot parse.
+ */
+export declare class SimCognitoAttributeDataType {
+    readonly value: SimCognitoAttributeDataTypeValue;
+    constructor(requested: string | undefined, attributeName: string);
+    /** Whether values of this type are numbers rather than text. */
+    get isNumber(): boolean;
+    /** Whether values of this type are bounded by a length. */
+    get isString(): boolean;
+    /**
+     * Refuse a value this type could not hold.
+     *
+     * A `String` holds anything, so only the other three have anything to say.
+     * A `DateTime` is taken as an ISO 8601 instant or the seconds since the
+     * epoch, which are the two forms an application writes one in.
+     */
+    requireValue(attributeName: string, value: string): void;
+    private holds;
+}
+/**
+ * Whether a string is a number Cognito would read as one.
+ *
+ * An empty string is not, although `Number("")` is zero, because a request
+ * sending nothing at all is not sending a number. `Infinity` is not either,
+ * although `Number` reads it: Cognito holds a number as a number, and there is
+ * no such value to hold.
+ */
+export declare function isNumeric(value: string): boolean;
+//# sourceMappingURL=sim-cognito-attribute-data-type.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-attribute-data-type.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,MAAM,gCAAgC,GACxC,SAAS,GACT,UAAU,GACV,QAAQ,GACR,QAAQ,CAAC;AASb;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,KAAK,EAAE,gCAAgC,CAAC;IAExD,YAAY,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,aAAa,EAAE,MAAM,EAgB/D;IAED,gEAAgE;IAChE,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,2DAA2D;IAC3D,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUvD;IAED,OAAO,CAAC,KAAK;CAgBd;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhD"}

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.js

@@ -0,0 +1,86 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+const dataTypeValues = new Set([
+    "Boolean",
+    "DateTime",
+    "Number",
+    "String",
+]);
+/**
+ * What kind of value one attribute in a pool's schema holds.
+ *
+ * An attribute declared without one is a `String`, which is what real Cognito
+ * defaults it to and what a CDK `StringAttribute` states anyway.
+ *
+ * Every attribute value is carried as a string on the wire, whatever its type,
+ * so this is what decides whether the string a request sent is one the
+ * attribute could hold. Real Cognito checks the same thing, and a value it
+ * would refuse is refused here rather than stored and read back as something
+ * an application cannot parse.
+ */
+export class SimCognitoAttributeDataType {
+    value;
+    constructor(requested, attributeName) {
+        if (requested === undefined) {
+            this.value = "String";
+            return;
+        }
+        if (!dataTypeValues.has(requested)) {
+            throw new SimCognitoInvalidParameterException(`Schema attribute '${attributeName}' has an AttributeDataType of ` +
+                `'${requested}', which is not a Cognito attribute type: use ${[
+                    ...dataTypeValues,
+                ].join(", ")}`);
+        }
+        this.value = requested;
+    }
+    /** Whether values of this type are numbers rather than text. */
+    get isNumber() {
+        return this.value === "Number";
+    }
+    /** Whether values of this type are bounded by a length. */
+    get isString() {
+        return this.value === "String";
+    }
+    /**
+     * Refuse a value this type could not hold.
+     *
+     * A `String` holds anything, so only the other three have anything to say.
+     * A `DateTime` is taken as an ISO 8601 instant or the seconds since the
+     * epoch, which are the two forms an application writes one in.
+     */
+    requireValue(attributeName, value) {
+        if (this.holds(value)) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`User attribute '${attributeName}' is '${value}', which is not a ` +
+            `${this.value}: the pool's schema declares the attribute as a ` +
+            `${this.value}, and Cognito refuses a value it cannot read as one`);
+    }
+    holds(value) {
+        switch (this.value) {
+            case "Boolean": {
+                return value === "true" || value === "false";
+            }
+            case "DateTime": {
+                return !Number.isNaN(Date.parse(value)) || isNumeric(value);
+            }
+            case "Number": {
+                return isNumeric(value);
+            }
+            case "String": {
+                return true;
+            }
+        }
+    }
+}
+/**
+ * Whether a string is a number Cognito would read as one.
+ *
+ * An empty string is not, although `Number("")` is zero, because a request
+ * sending nothing at all is not sending a number. `Infinity` is not either,
+ * although `Number` reads it: Cognito holds a number as a number, and there is
+ * no such value to hold.
+ */
+export function isNumeric(value) {
+    return value.trim() !== "" && Number.isFinite(Number(value));
+}
+//# sourceMappingURL=sim-cognito-attribute-data-type.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-attribute-data-type.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-attribute-data-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAWvF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACtB,KAAK,CAAmC;IAExD,YAAY,SAA6B,EAAE,aAAqB;QAC9D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,aAAa,gCAAgC;gBAChE,IAAI,SAAS,iDAAiD;oBAC5D,GAAG,cAAc;iBAClB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,SAA6C,CAAC;IAC7D,CAAC;IAED,gEAAgE;IAChE,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IACjC,CAAC;IAED,2DAA2D;IAC3D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,aAAqB,EAAE,KAAa;QAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,aAAa,SAAS,KAAK,oBAAoB;YAChE,GAAG,IAAI,CAAC,KAAK,kDAAkD;YAC/D,GAAG,IAAI,CAAC,KAAK,qDAAqD,CACrE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;YAC/C,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-number-constraints.d.ts

@@ -0,0 +1,28 @@
+import type { SimCognitoAttributeBounds, SimCognitoAttributeConstraints, SimCognitoAttributeConstraintsType, SimCognitoNumberAttributeConstraintsType } from "./sim-cognito-attribute-constraints.js";
+interface SimCognitoNumberConstraintsProperties extends SimCognitoAttributeBounds {
+    readonly declared: SimCognitoNumberAttributeConstraintsType | undefined;
+}
+/**
+ * The range the values of one `Number` attribute may be in.
+ *
+ * An attribute declared without either bound takes any number, as it does on
+ * real Cognito: the type is what refuses a value that is not one at all.
+ */
+export declare class SimCognitoNumberConstraints implements SimCognitoAttributeConstraints {
+    private readonly attributeName;
+    private readonly minimum;
+    private readonly maximum;
+    private readonly declared;
+    constructor(properties: SimCognitoNumberConstraintsProperties);
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput(): SimCognitoAttributeConstraintsType;
+    /**
+     * Refuse a value outside the range.
+     */
+    requireValue(value: string): void;
+}
+export {};
+//# sourceMappingURL=sim-cognito-number-constraints.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-number-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-number-constraints.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-number-constraints.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,wCAAwC,CAAC;AAEhD,UAAU,qCAAsC,SAAQ,yBAAyB;IAC/E,QAAQ,CAAC,QAAQ,EAAE,wCAAwC,GAAG,SAAS,CAAC;CACzE;AAED;;;;;GAKG;AACH,qBAAa,2BAA4B,YAAW,8BAA8B;IAChF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEX;IAEd,YAAY,UAAU,EAAE,qCAAqC,EAK5D;IAED;;;OAGG;IACH,QAAQ,IAAI,kCAAkC,CAM7C;IAED;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAgBhC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-number-constraints.js

@@ -0,0 +1,44 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The range the values of one `Number` attribute may be in.
+ *
+ * An attribute declared without either bound takes any number, as it does on
+ * real Cognito: the type is what refuses a value that is not one at all.
+ */
+export class SimCognitoNumberConstraints {
+    attributeName;
+    minimum;
+    maximum;
+    declared;
+    constructor(properties) {
+        this.attributeName = properties.attributeName;
+        this.minimum = properties.minimum;
+        this.maximum = properties.maximum;
+        this.declared = properties.declared;
+    }
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput() {
+        if (this.declared === undefined) {
+            return {};
+        }
+        return { NumberAttributeConstraints: { ...this.declared } };
+    }
+    /**
+     * Refuse a value outside the range.
+     */
+    requireValue(value) {
+        const number = Number(value);
+        if (this.minimum !== undefined && number < this.minimum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is below the MinValue of ` +
+                `${String(this.minimum)} the pool's schema sets`);
+        }
+        if (this.maximum !== undefined && number > this.maximum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is above the MaxValue of ` +
+                `${String(this.maximum)} the pool's schema sets`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-number-constraints.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-number-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-number-constraints.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-number-constraints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAYvF;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACrB,aAAa,CAAS;IACtB,OAAO,CAAqB;IAC5B,OAAO,CAAqB;IAC5B,QAAQ,CAEX;IAEd,YAAY,UAAiD;QAC3D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,6BAA6B;gBAChE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,6BAA6B;gBAChE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The prefix Cognito puts on an attribute a pool declared for itself.
+ */
+export declare const simCognitoCustomAttributePrefix = "custom:";
+/**
+ * The prefix Cognito puts on a developer-only attribute, which is not
+ * simulated.
+ */
+export declare const simCognitoDeveloperAttributePrefix = "dev:";
+/**
+ * The name Cognito holds a declared attribute under.
+ *
+ * A custom attribute is written under a `custom:` name, because that is the
+ * name real Cognito gives it: a `Schema` naming `userId` is set and read as
+ * `custom:userId`, and code that writes the bare name works against neither.
+ *
+ * Cognito adds that prefix itself, so a declaration already carrying one is
+ * refused: it would otherwise be written as `custom:custom:userId` here and on
+ * AWS alike, and a request setting `custom:userId` would find nothing.
+ */
+export declare function simCognitoSchemaAttributeName(name: string | undefined, custom: boolean): string;
+//# sourceMappingURL=sim-cognito-schema-attribute-name.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-schema-attribute-name.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,+BAA+B,YAAY,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,kCAAkC,SAAS,CAAC;AAczD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,MAAM,EAAE,OAAO,GACd,MAAM,CA6BR"}