@kensio/yulin 1.14.2 → 1.15.1

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.js

@@ -0,0 +1,64 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The prefix Cognito puts on an attribute a pool declared for itself.
+ */
+export const simCognitoCustomAttributePrefix = "custom:";
+/**
+ * The prefix Cognito puts on a developer-only attribute, which is not
+ * simulated.
+ */
+export const simCognitoDeveloperAttributePrefix = "dev:";
+/**
+ * How long the name of a custom attribute may be, before its prefix.
+ */
+const maxCustomNameLength = 20;
+/**
+ * The characters Cognito takes in an attribute name: letters, marks, symbols,
+ * numbers and punctuation. A space is in none of them, which is the one most
+ * often written.
+ */
+const customNamePattern = /^[\p{L}\p{M}\p{S}\p{N}\p{P}]+$/u;
+/**
+ * The name Cognito holds a declared attribute under.
+ *
+ * A custom attribute is written under a `custom:` name, because that is the
+ * name real Cognito gives it: a `Schema` naming `userId` is set and read as
+ * `custom:userId`, and code that writes the bare name works against neither.
+ *
+ * Cognito adds that prefix itself, so a declaration already carrying one is
+ * refused: it would otherwise be written as `custom:custom:userId` here and on
+ * AWS alike, and a request setting `custom:userId` would find nothing.
+ */
+export function simCognitoSchemaAttributeName(name, custom) {
+    if (name === undefined || name === "") {
+        throw new SimCognitoInvalidParameterException("A Schema attribute needs a Name saying what the pool is to call it");
+    }
+    if (!custom) {
+        return name;
+    }
+    requireBareName(name);
+    if (name.length > maxCustomNameLength) {
+        throw new SimCognitoInvalidParameterException(`Schema attribute '${name}' is too long: a custom attribute name is ` +
+            `at most ${String(maxCustomNameLength)} characters`);
+    }
+    if (!customNamePattern.test(name)) {
+        throw new SimCognitoInvalidParameterException(`Schema attribute '${name}' has a character Cognito does not take in ` +
+            `an attribute name: a name is letters, marks, symbols, numbers and ` +
+            `punctuation, and a space is none of those`);
+    }
+    return `${simCognitoCustomAttributePrefix}${name}`;
+}
+/**
+ * Refuse a declaration that wrote the prefix Cognito adds.
+ */
+function requireBareName(name) {
+    if (!name.startsWith(simCognitoCustomAttributePrefix) &&
+        !name.startsWith(simCognitoDeveloperAttributePrefix)) {
+        return;
+    }
+    const bare = name.slice(name.indexOf(":") + 1);
+    throw new SimCognitoInvalidParameterException(`Schema attribute '${name}' names its own prefix: Cognito adds the ` +
+        `'${simCognitoCustomAttributePrefix}' itself, so declare '${bare}' and ` +
+        `set it as '${simCognitoCustomAttributePrefix}${bare}'`);
+}
+//# sourceMappingURL=sim-cognito-schema-attribute-name.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-schema-attribute-name.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-schema-attribute-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,SAAS,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAEzD;;GAEG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAwB,EACxB,MAAe;IAEf,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,mCAAmC,CAC3C,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtB,IAAI,IAAI,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,IAAI,4CAA4C;YACnE,WAAW,MAAM,CAAC,mBAAmB,CAAC,aAAa,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,IAAI,6CAA6C;YACpE,oEAAoE;YACpE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,+BAA+B,GAAG,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;QACjD,CAAC,IAAI,CAAC,UAAU,CAAC,kCAAkC,CAAC,EACpD,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/C,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,IAAI,2CAA2C;QAClE,IAAI,+BAA+B,yBAAyB,IAAI,QAAQ;QACxE,cAAc,+BAA+B,GAAG,IAAI,GAAG,CAC1D,CAAC;AACJ,CAAC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute.d.ts

@@ -0,0 +1,68 @@
+import { type SimCognitoAttributeConstraintsType } from "./sim-cognito-attribute-constraints.js";
+/**
+ * One attribute of a pool's schema, as a `Schema` declares it and a described
+ * pool reports it.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SchemaAttributeType.html
+ */
+export interface SimCognitoSchemaAttributeType extends SimCognitoAttributeConstraintsType {
+    readonly Name?: string | undefined;
+    readonly AttributeDataType?: string | undefined;
+    readonly DeveloperOnlyAttribute?: boolean | undefined;
+    readonly Mutable?: boolean | undefined;
+    readonly Required?: boolean | undefined;
+}
+interface SimCognitoSchemaAttributeProperties {
+    readonly declared: SimCognitoSchemaAttributeType;
+    /**
+     * Whether this is an attribute the pool declared for itself rather than one
+     * of the standard set. A custom attribute is the one Cognito renames.
+     */
+    readonly custom: boolean;
+}
+/**
+ * One attribute a pool's schema holds: what it is called, what it holds, and
+ * whether a user can be given a second value for it.
+ *
+ * A declaration is checked against what real Cognito accepts rather than taken
+ * as written, so a pool that could not have been created on AWS is not created
+ * here. A `Required` custom attribute and a `DeveloperOnlyAttribute` are the
+ * two a request most often asks for and neither Cognito nor this simulation
+ * gives it.
+ */
+export declare class SimCognitoSchemaAttribute {
+    /** The name this attribute is written and read under. */
+    readonly name: string;
+    /** Whether a user that already has this attribute may be given another value. */
+    readonly mutable: boolean;
+    /** Whether a user cannot be created without this attribute. */
+    readonly required: boolean;
+    private readonly declared;
+    private readonly dataType;
+    private readonly constraints;
+    constructor(properties: SimCognitoSchemaAttributeProperties);
+    /**
+     * Refuse a value this attribute could not hold.
+     */
+    requireValue(value: string): void;
+    /**
+     * Refuse a write to an attribute the schema fixed.
+     *
+     * Real Cognito takes an immutable attribute while the user is being created
+     * and refuses every write after that, which is what makes one usable as an
+     * application's own identifier for the user. A user created without one
+     * cannot be given it later either.
+     */
+    requireMutable(): void;
+    /**
+     * This attribute as `DescribeUserPool` reports it, under the name Cognito
+     * gave it.
+     */
+    toOutput(): SimCognitoSchemaAttributeType;
+    /**
+     * Refuse a custom attribute real Cognito would not create.
+     */
+    private requireCustomAttributeCognitoAllows;
+}
+export {};
+//# sourceMappingURL=sim-cognito-schema-attribute.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-schema-attribute.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-schema-attribute.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,kCAAkC,EACxC,MAAM,wCAAwC,CAAC;AAOhD;;;;;GAKG;AACH,MAAM,WAAW,6BAA8B,SAAQ,kCAAkC;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IAEjD;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC,yDAAyD;IACzD,SAAgB,IAAI,EAAE,MAAM,CAAC;IAE7B,iFAAiF;IACjF,SAAgB,OAAO,EAAE,OAAO,CAAC;IAEjC,+DAA+D;IAC/D,SAAgB,QAAQ,EAAE,OAAO,CAAC;IAElC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,UAAU,EAAE,mCAAmC,EAyB1D;IAED;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAGhC;IAED;;;;;;;OAOG;IACH,cAAc,IAAI,IAAI,CAUrB;IAED;;;OAGG;IACH,QAAQ,IAAI,6BAA6B,CASxC;IAED;;OAEG;IACH,OAAO,CAAC,mCAAmC;CAiB5C"}

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute.js

@@ -0,0 +1,98 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { simCognitoAttributeConstraintsFor, } from "./sim-cognito-attribute-constraints.js";
+import { SimCognitoAttributeDataType } from "./sim-cognito-attribute-data-type.js";
+import { simCognitoDeveloperAttributePrefix, simCognitoSchemaAttributeName, } from "./sim-cognito-schema-attribute-name.js";
+/**
+ * One attribute a pool's schema holds: what it is called, what it holds, and
+ * whether a user can be given a second value for it.
+ *
+ * A declaration is checked against what real Cognito accepts rather than taken
+ * as written, so a pool that could not have been created on AWS is not created
+ * here. A `Required` custom attribute and a `DeveloperOnlyAttribute` are the
+ * two a request most often asks for and neither Cognito nor this simulation
+ * gives it.
+ */
+export class SimCognitoSchemaAttribute {
+    /** The name this attribute is written and read under. */
+    name;
+    /** Whether a user that already has this attribute may be given another value. */
+    mutable;
+    /** Whether a user cannot be created without this attribute. */
+    required;
+    declared;
+    dataType;
+    constraints;
+    constructor(properties) {
+        const { declared, custom } = properties;
+        this.declared = declared;
+        this.name = simCognitoSchemaAttributeName(declared.Name, custom);
+        // A declaration saying nothing about either is asking for an attribute
+        // that is neither mutable nor required, which is what real Cognito
+        // defaults both to. A standard attribute no schema names keeps the
+        // mutability the standard schema gives it.
+        this.mutable = declared.Mutable ?? false;
+        this.required = declared.Required ?? false;
+        this.dataType = new SimCognitoAttributeDataType(declared.AttributeDataType, this.name);
+        this.constraints = simCognitoAttributeConstraintsFor({
+            declared,
+            dataType: this.dataType,
+            attributeName: this.name,
+        });
+        if (custom) {
+            this.requireCustomAttributeCognitoAllows();
+        }
+    }
+    /**
+     * Refuse a value this attribute could not hold.
+     */
+    requireValue(value) {
+        this.dataType.requireValue(this.name, value);
+        this.constraints.requireValue(value);
+    }
+    /**
+     * Refuse a write to an attribute the schema fixed.
+     *
+     * Real Cognito takes an immutable attribute while the user is being created
+     * and refuses every write after that, which is what makes one usable as an
+     * application's own identifier for the user. A user created without one
+     * cannot be given it later either.
+     */
+    requireMutable() {
+        if (this.mutable) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`User attribute '${this.name}' cannot be changed: the pool's schema ` +
+            `declares it with Mutable false, so Cognito takes it when the user ` +
+            `is created and refuses it afterwards`);
+    }
+    /**
+     * This attribute as `DescribeUserPool` reports it, under the name Cognito
+     * gave it.
+     */
+    toOutput() {
+        return {
+            Name: this.name,
+            AttributeDataType: this.dataType.value,
+            DeveloperOnlyAttribute: this.declared.DeveloperOnlyAttribute ?? false,
+            Mutable: this.mutable,
+            Required: this.required,
+            ...this.constraints.toOutput(),
+        };
+    }
+    /**
+     * Refuse a custom attribute real Cognito would not create.
+     */
+    requireCustomAttributeCognitoAllows() {
+        if (this.declared.DeveloperOnlyAttribute === true) {
+            throw new SimCognitoInvalidParameterException(`Schema attribute '${this.name}' is a DeveloperOnlyAttribute, which ` +
+                `is not simulated: Cognito writes one under a ` +
+                `'${simCognitoDeveloperAttributePrefix}' name that only an admin ` +
+                `operation can read or set`);
+        }
+        if (this.required) {
+            throw new SimCognitoInvalidParameterException(`Schema attribute '${this.name}' is Required, which Cognito refuses: ` +
+                `only a standard attribute can be required`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-schema-attribute.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-schema-attribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-schema-attribute.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-schema-attribute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,iCAAiC,GAGlC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,kCAAkC,EAClC,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AA0BhD;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACpC,yDAAyD;IACzC,IAAI,CAAS;IAE7B,iFAAiF;IACjE,OAAO,CAAU;IAEjC,+DAA+D;IAC/C,QAAQ,CAAU;IAEjB,QAAQ,CAAgC;IACxC,QAAQ,CAA8B;IACtC,WAAW,CAAiC;IAE7D,YAAY,UAA+C;QACzD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEjE,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAC7C,QAAQ,CAAC,iBAAiB,EAC1B,IAAI,CAAC,IAAI,CACV,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,iCAAiC,CAAC;YACnD,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,IAAI;SACzB,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,mCAAmC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,IAAI,yCAAyC;YACnE,oEAAoE;YACpE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YACtC,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,KAAK;YACrE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mCAAmC;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,IAAI,CAAC,IAAI,uCAAuC;gBACnE,+CAA+C;gBAC/C,IAAI,kCAAkC,4BAA4B;gBAClE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,mCAAmC,CAC3C,qBAAqB,IAAI,CAAC,IAAI,wCAAwC;gBACpE,2CAA2C,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.d.ts

@@ -0,0 +1,28 @@
+import type { SimCognitoSchemaAttributeType } from "./sim-cognito-schema-attribute.js";
+/**
+ * One attribute of the standard schema, which always has a name.
+ */
+type SimCognitoStandardAttribute = SimCognitoSchemaAttributeType & {
+    readonly Name: string;
+};
+/**
+ * The standard attributes every Cognito pool's schema holds.
+ *
+ * These are the OpenID Connect claims, plus the two verification flags, the
+ * `sub` Cognito allocates, and the types and bounds real Cognito gives each of
+ * them. They are all mutable and none but `sub` is required, which is what a
+ * pool created without a `Schema` of its own has. A pool's `Schema` can
+ * redeclare one of them to make it required or to fix it, and adds anything
+ * else under a `custom:` name.
+ */
+export declare const simCognitoStandardAttributes: readonly SimCognitoStandardAttribute[];
+/**
+ * Whether an attribute name is one every pool's schema holds.
+ *
+ * A pool's own `Schema` naming one of these redeclares it rather than adding a
+ * `custom:` attribute of that name, which is how a pool makes an attribute
+ * such as `email` required.
+ */
+export declare function isSimCognitoStandardAttribute(name: string): boolean;
+export {};
+//# sourceMappingURL=sim-cognito-standard-attributes.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-standard-attributes.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-standard-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAEvF;;GAEG;AACH,KAAK,2BAA2B,GAAG,6BAA6B,GAAG;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAsEF;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,2BAA2B,EAU5E,CAAC;AAMJ;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.js

@@ -0,0 +1,96 @@
+/**
+ * The bounds Cognito gives a standard `String` attribute that has no narrower
+ * ones of its own.
+ */
+const standardStringConstraints = { MinLength: "0", MaxLength: "2048" };
+/**
+ * The `String` attributes of the standard schema, which is most of it.
+ */
+const standardStringNames = [
+    "address",
+    "email",
+    "family_name",
+    "gender",
+    "given_name",
+    "locale",
+    "middle_name",
+    "name",
+    "nickname",
+    "phone_number",
+    "picture",
+    "preferred_username",
+    "profile",
+    "website",
+    "zoneinfo",
+];
+/**
+ * The standard attributes whose type is not `String`, and `birthdate`, whose
+ * length Cognito fixes at the ten characters of a `YYYY-MM-DD` date.
+ */
+const standardOtherAttributes = [
+    {
+        Name: "birthdate",
+        AttributeDataType: "String",
+        Mutable: true,
+        StringAttributeConstraints: { MinLength: "10", MaxLength: "10" },
+    },
+    { Name: "email_verified", AttributeDataType: "Boolean", Mutable: true },
+    {
+        Name: "phone_number_verified",
+        AttributeDataType: "Boolean",
+        Mutable: true,
+    },
+    {
+        Name: "updated_at",
+        AttributeDataType: "Number",
+        Mutable: true,
+        NumberAttributeConstraints: { MinValue: "0" },
+    },
+];
+/**
+ * The `sub` Cognito allocates, which every pool's schema reports and no
+ * request may set.
+ *
+ * It is here because `DescribeUserPool` reports it among the schema attributes
+ * on real Cognito. Nothing writes it: `SimCognitoUserAttributes` refuses a
+ * request naming it before the schema is consulted, and the user holds its own.
+ */
+const subAttribute = {
+    Name: "sub",
+    AttributeDataType: "String",
+    Mutable: false,
+    Required: true,
+    StringAttributeConstraints: { MinLength: "1", MaxLength: "2048" },
+};
+/**
+ * The standard attributes every Cognito pool's schema holds.
+ *
+ * These are the OpenID Connect claims, plus the two verification flags, the
+ * `sub` Cognito allocates, and the types and bounds real Cognito gives each of
+ * them. They are all mutable and none but `sub` is required, which is what a
+ * pool created without a `Schema` of its own has. A pool's `Schema` can
+ * redeclare one of them to make it required or to fix it, and adds anything
+ * else under a `custom:` name.
+ */
+export const simCognitoStandardAttributes = [
+    subAttribute,
+    ...standardStringNames.map((name) => ({
+        Name: name,
+        AttributeDataType: "String",
+        Mutable: true,
+        StringAttributeConstraints: standardStringConstraints,
+    })),
+    ...standardOtherAttributes,
+];
+const standardAttributeNames = new Set(simCognitoStandardAttributes.map((attribute) => attribute.Name));
+/**
+ * Whether an attribute name is one every pool's schema holds.
+ *
+ * A pool's own `Schema` naming one of these redeclares it rather than adding a
+ * `custom:` attribute of that name, which is how a pool makes an attribute
+ * such as `email` required.
+ */
+export function isSimCognitoStandardAttribute(name) {
+    return standardAttributeNames.has(name);
+}
+//# sourceMappingURL=sim-cognito-standard-attributes.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-standard-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-standard-attributes.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-standard-attributes.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,yBAAyB,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAExE;;GAEG;AACH,MAAM,mBAAmB,GAAsB;IAC7C,SAAS;IACT,OAAO;IACP,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;IACV,cAAc;IACd,SAAS;IACT,oBAAoB;IACpB,SAAS;IACT,SAAS;IACT,UAAU;CACX,CAAC;AAEF;;;GAGG;AACH,MAAM,uBAAuB,GAA2C;IACtE;QACE,IAAI,EAAE,WAAW;QACjB,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;KACjE;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;IACvE;QACE,IAAI,EAAE,uBAAuB;QAC7B,iBAAiB,EAAE,SAAS;QAC5B,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,YAAY;QAClB,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;KAC9C;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,YAAY,GAAgC;IAChD,IAAI,EAAE,KAAK;IACX,iBAAiB,EAAE,QAAQ;IAC3B,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,IAAI;IACd,0BAA0B,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE;CAClE,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC;IACE,YAAY;IACZ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,IAAI;QACV,iBAAiB,EAAE,QAAQ;QAC3B,OAAO,EAAE,IAAI;QACb,0BAA0B,EAAE,yBAAyB;KACtD,CAAC,CAAC;IACH,GAAG,uBAAuB;CAC3B,CAAC;AAEJ,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CACzD,4BAA4B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAChE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,OAAO,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.d.ts

@@ -0,0 +1,33 @@
+import type { SimCognitoAttributeBounds, SimCognitoAttributeConstraints, SimCognitoAttributeConstraintsType, SimCognitoStringAttributeConstraintsType } from "./sim-cognito-attribute-constraints.js";
+interface SimCognitoStringConstraintsProperties extends SimCognitoAttributeBounds {
+    readonly declared: SimCognitoStringAttributeConstraintsType | undefined;
+}
+/**
+ * How long the values of one attribute may be.
+ *
+ * An attribute with no `MaxLength` of its own still stops at the 2048
+ * characters Cognito holds any attribute to, which is the bound every pool
+ * applied before a schema could narrow it.
+ *
+ * These are the bounds of anything that is not a `Number`. A `Boolean` and a
+ * `DateTime` take no constraints of their own, and the values either of them
+ * could hold are well inside this length anyway.
+ */
+export declare class SimCognitoStringConstraints implements SimCognitoAttributeConstraints {
+    private readonly attributeName;
+    private readonly minimum;
+    private readonly maximum;
+    private readonly declared;
+    constructor(properties: SimCognitoStringConstraintsProperties);
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput(): SimCognitoAttributeConstraintsType;
+    /**
+     * Refuse a value of the wrong length.
+     */
+    requireValue(value: string): void;
+}
+export {};
+//# sourceMappingURL=sim-cognito-string-constraints.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-string-constraints.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-string-constraints.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,wCAAwC,CAAC;AAOhD,UAAU,qCAAsC,SAAQ,yBAAyB;IAC/E,QAAQ,CAAC,QAAQ,EAAE,wCAAwC,GAAG,SAAS,CAAC;CACzE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,2BAA4B,YAAW,8BAA8B;IAChF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEX;IAEd,YAAY,UAAU,EAAE,qCAAqC,EAK5D;IAED;;;OAGG;IACH,QAAQ,IAAI,kCAAkC,CAM7C;IAED;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAchC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.js

@@ -0,0 +1,52 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The longest value Cognito holds in any attribute, whatever its schema says.
+ */
+const maxAttributeValueLength = 2048;
+/**
+ * How long the values of one attribute may be.
+ *
+ * An attribute with no `MaxLength` of its own still stops at the 2048
+ * characters Cognito holds any attribute to, which is the bound every pool
+ * applied before a schema could narrow it.
+ *
+ * These are the bounds of anything that is not a `Number`. A `Boolean` and a
+ * `DateTime` take no constraints of their own, and the values either of them
+ * could hold are well inside this length anyway.
+ */
+export class SimCognitoStringConstraints {
+    attributeName;
+    minimum;
+    maximum;
+    declared;
+    constructor(properties) {
+        this.attributeName = properties.attributeName;
+        this.minimum = properties.minimum;
+        this.maximum = properties.maximum ?? maxAttributeValueLength;
+        this.declared = properties.declared;
+    }
+    /**
+     * These bounds as a described pool reports them, in the shape the
+     * declaration gave them.
+     */
+    toOutput() {
+        if (this.declared === undefined) {
+            return {};
+        }
+        return { StringAttributeConstraints: { ...this.declared } };
+    }
+    /**
+     * Refuse a value of the wrong length.
+     */
+    requireValue(value) {
+        if (value.length > this.maximum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is longer than the ` +
+                `${String(this.maximum)} characters the pool's schema allows`);
+        }
+        if (this.minimum !== undefined && value.length < this.minimum) {
+            throw new SimCognitoInvalidParameterException(`User attribute '${this.attributeName}' is shorter than the ` +
+                `${String(this.minimum)} characters the pool's schema wants`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-string-constraints.js.map

package/dist/service/cognito/user-pool/schema/sim-cognito-string-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-string-constraints.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-string-constraints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAQvF;;GAEG;AACH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAMrC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA2B;IACrB,aAAa,CAAS;IACtB,OAAO,CAAqB;IAC5B,OAAO,CAAS;IAChB,QAAQ,CAEX;IAEd,YAAY,UAAiD;QAC3D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,uBAAuB,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,uBAAuB;gBAC1D,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,CAAC,aAAa,wBAAwB;gBAC3D,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.d.ts

@@ -0,0 +1,89 @@
+import { SimCognitoSchemaAttribute, type SimCognitoSchemaAttributeType } from "./sim-cognito-schema-attribute.js";
+/**
+ * The attributes one simulated user pool holds on its users.
+ *
+ * Every pool starts with the standard schema, and its `Schema` adds to it. A
+ * declaration naming a standard attribute redeclares that one, which is how a
+ * pool makes `email` required, and a declaration naming anything else becomes
+ * a `custom:` attribute of the pool's own.
+ *
+ * The schema is what every write of a user attribute is checked against, so an
+ * attribute no schema declares is refused where it was written rather than
+ * stored and read back by an application that expected Cognito to have kept
+ * it.
+ *
+ * A pool's schema is fixed once the pool exists. Real Cognito adds to it with
+ * `AddCustomAttributes` and has no `UpdateUserPool` input for it at all, so an
+ * update carries the schema across rather than replacing it.
+ */
+export declare class SimCognitoUserPoolSchema {
+    private readonly byName;
+    /**
+     * The names the request declared, which is what a repeated declaration is
+     * caught by: the standard attributes are held before any of them and are
+     * there to be redeclared rather than to collide with one.
+     */
+    private readonly declaredNames;
+    constructor(declared?: readonly SimCognitoSchemaAttributeType[]);
+    /**
+     * Refuse a `Schema` of a length Cognito would not take.
+     *
+     * A request declaring an empty list is refused rather than treated as a
+     * request declaring nothing, because real Cognito refuses one: a `Schema`
+     * built from an application's own configuration and left empty fails on the
+     * way to AWS, and it should fail here first.
+     */
+    private static requireDeclarableList;
+    /**
+     * The `custom:` attributes this pool declared, in declaration order.
+     */
+    get customNames(): readonly string[];
+    /**
+     * The attributes a user cannot be created without.
+     *
+     * `sub` is not among them although the schema reports it as required:
+     * Cognito allocates one for every user, so nothing is ever created without
+     * it and no request may send it.
+     */
+    get requiredNames(): readonly string[];
+    /**
+     * Whether this schema holds an attribute of that name.
+     */
+    holds(name: string): boolean;
+    /**
+     * The attribute of that name, or nothing where the schema does not hold it.
+     */
+    find(name: string): SimCognitoSchemaAttribute | undefined;
+    /**
+     * Say, for a refusal, what a pool holding no custom attributes at all does.
+     *
+     * This is the sentence that tells a caller whether it declared the attribute
+     * under a different name or never declared it, which is the difference
+     * between the two mistakes that reach this refusal.
+     */
+    describeHolding(): string;
+    /**
+     * Refuse a user created without an attribute the schema requires.
+     *
+     * Real Cognito refuses `SignUp` and `AdminCreateUser` the same way, so a
+     * pool whose `Schema` made an attribute required is one an application has
+     * to send that attribute to here as well.
+     */
+    requireEveryRequired(held: ReadonlySet<string>): void;
+    /**
+     * This schema as `DescribeUserPool` reports it, standard attributes first.
+     */
+    toOutput(): readonly SimCognitoSchemaAttributeType[];
+    private get attributes();
+    /**
+     * Take on one attribute a `Schema` declared.
+     *
+     * A name the same request already declared is refused, whether it is a
+     * custom attribute or a standard one being redeclared: taking the last of
+     * them would deploy a pool holding something the request did not plainly
+     * ask for.
+     */
+    private declare;
+    private hold;
+}
+//# sourceMappingURL=sim-cognito-user-pool-schema.d.ts.map

package/dist/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-schema.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/schema/sim-cognito-user-pool-schema.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,mCAAmC,CAAC;AAe3C;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgD;IAEvE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IAEnD,YAAY,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,EAgB9D;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAYpC;;OAEG;IACH,IAAI,WAAW,IAAI,SAAS,MAAM,EAAE,CAInC;IAED;;;;;;OAMG;IACH,IAAI,aAAa,IAAI,SAAS,MAAM,EAAE,CAIrC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3B;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAExD;IAED;;;;;;OAMG;IACH,eAAe,IAAI,MAAM,CAWxB;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAWpD;IAED;;OAEG;IACH,QAAQ,IAAI,SAAS,6BAA6B,EAAE,CAEnD;IAED,OAAO,KAAK,UAAU,GAErB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAef,OAAO,CAAC,IAAI;CAGb"}