@kensio/yulin 1.14.2 → 1.15.1

package/dist/service/cognito/command/user/sim-cognito-user-view.js

@@ -7,6 +7,20 @@
  * built here so the difference is deliberate rather than accidental.
  */
 export class SimCognitoUserView {
+    /**
+     * The second factors a user has registered, which both reads report.
+     *
+     * A user with none is reported without either field, rather than with an
+     * empty list, because that is what real Cognito answers for one.
+     */
+    static factors(user) {
+        const settings = user.mfa.settings;
+        const preferred = user.mfa.preferred;
+        return {
+            ...(settings.length > 0 && { UserMFASettingList: settings }),
+            ...(preferred !== undefined && { PreferredMfaSetting: preferred }),
+        };
+    }
     /**
      * A user as `AdminCreateUser` and `ListUsers` report it.
      */
@@ -31,6 +45,20 @@ export class SimCognitoUserView {
             UserLastModifiedDate: user.lastModifiedDate,
             Enabled: user.enabled,
             UserStatus: user.status.value,
+            ...SimCognitoUserView.factors(user),
+        };
+    }
+    /**
+     * A user as `GetUser` reports it to the user itself.
+     *
+     * There is no status, no creation date and no `Enabled` here, because real
+     * Cognito reports those to an administrator and not to the user.
+     */
+    self(user) {
+        return {
+            Username: user.username,
+            UserAttributes: user.attributes,
+            ...SimCognitoUserView.factors(user),
         };
     }
 }

package/dist/service/cognito/command/user/sim-cognito-user-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/sim-cognito-user-view.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;OAEG;IACH,KAAK,CAAC,IAAoB;QACxB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,YAAY;YACjC,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAoB;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,cAAc,EAAE,IAAI,CAAC,YAAY;YACjC,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;SAC9B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/sim-cognito-user-view.ts"],"names":[],"mappings":"AAQA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;;;;OAKG;IACK,MAAM,CAAC,OAAO,CAAC,IAAoB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAErC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;YAC5D,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAoB;QACxB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,YAAY;YACjC,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAoB;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,cAAc,EAAE,IAAI,CAAC,YAAY;YACjC,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC7B,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,IAAoB;QACvB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/user/user-mfa.command.d.ts

@@ -0,0 +1,111 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimCognitoMfaPreferenceType } from "../../user-pool/user/mfa/sim-cognito-mfa-factors.js";
+import type { SimCognitoAdminUserCommandInput, SimCognitoSelfUser } from "./user.command.js";
+/**
+ * The AssociateSoftwareToken inputs this simulation reads.
+ *
+ * Real Cognito takes either an `AccessToken` or the `Session` of an
+ * `MFA_SETUP` challenge. This simulation issues no such challenge, so a
+ * request naming a `Session` is refused: the user has to be signed in for a
+ * token to be registered here.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AssociateSoftwareTokenCommand/
+ */
+export interface SimAssociateSoftwareTokenCommandInput {
+    readonly AccessToken?: string | undefined;
+    readonly Session?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito AssociateSoftwareToken command.
+ */
+export interface SimAssociateSoftwareTokenCommand {
+    readonly input: SimAssociateSoftwareTokenCommandInput;
+}
+export interface SimAssociateSoftwareTokenCommandOutput {
+    readonly SecretCode?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The VerifySoftwareToken inputs this simulation reads.
+ *
+ * `FriendlyDeviceName` is the name a user gives the authenticator app it just
+ * registered. Device tracking is not simulated, so it is refused rather than
+ * recorded against a device nothing here holds.
+ */
+export interface SimVerifySoftwareTokenCommandInput {
+    readonly AccessToken?: string | undefined;
+    readonly Session?: string | undefined;
+    readonly UserCode?: string | undefined;
+    readonly FriendlyDeviceName?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito VerifySoftwareToken command.
+ */
+export interface SimVerifySoftwareTokenCommand {
+    readonly input: SimVerifySoftwareTokenCommandInput;
+}
+export interface SimVerifySoftwareTokenCommandOutput {
+    readonly Status?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The SetUserMFAPreference inputs this simulation reads, and the one it
+ * refuses.
+ *
+ * `EmailMfaSettings` is refused because a second factor sent by email needs
+ * the pool's `EmailConfiguration`, which `CreateUserPool` refuses, and
+ * `SetUserPoolMfaConfig` refuses the matching `EmailMfaConfiguration` for the
+ * same reason.
+ */
+export interface SimSetUserMFAPreferenceCommandInput extends SimCognitoMfaPreferenceType {
+    readonly AccessToken?: string | undefined;
+    readonly EmailMfaSettings?: object | undefined;
+}
+/**
+ * Minimal structural sim Cognito SetUserMFAPreference command.
+ */
+export interface SimSetUserMFAPreferenceCommand {
+    readonly input: SimSetUserMFAPreferenceCommandInput;
+}
+export interface SimSetUserMFAPreferenceCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The AdminSetUserMFAPreference inputs, which are the same settings named
+ * against a pool and a username rather than against an access token.
+ */
+export interface SimAdminSetUserMFAPreferenceCommandInput extends SimCognitoAdminUserCommandInput, SimCognitoMfaPreferenceType {
+    readonly EmailMfaSettings?: object | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminSetUserMFAPreference command.
+ */
+export interface SimAdminSetUserMFAPreferenceCommand {
+    readonly input: SimAdminSetUserMFAPreferenceCommandInput;
+}
+export interface SimAdminSetUserMFAPreferenceCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The GetUser inputs, which are the access token of the user reading itself.
+ */
+export interface SimGetUserCommandInput {
+    readonly AccessToken?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito GetUser command.
+ */
+export interface SimGetUserCommand {
+    readonly input: SimGetUserCommandInput;
+}
+/**
+ * What `GetUser` answers with, which is the user reading itself.
+ *
+ * The attributes arrive under `UserAttributes`, as they do in an
+ * `AdminGetUser` response, and there is no `UserStatus`: real Cognito reports
+ * a status to an administrator and not to the user itself.
+ */
+export interface SimGetUserCommandOutput extends SimCognitoSelfUser {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=user-mfa.command.d.ts.map

package/dist/service/cognito/command/user/user-mfa.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-mfa.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user-mfa.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EACV,+BAA+B,EAC/B,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;GASG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,wCACf,SAAQ,+BAA+B,EAAE,2BAA2B;IACpE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/user/user-mfa.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user-mfa.command.js.map

package/dist/service/cognito/command/user/user-mfa.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-mfa.command.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user-mfa.command.ts"],"names":[],"mappings":""}

package/dist/service/cognito/command/user/user.command.d.ts

@@ -17,11 +17,22 @@ export interface SimCognitoUserType {
     readonly Enabled?: boolean | undefined;
     readonly UserStatus?: string | undefined;
 }
+/**
+ * The second factors a user has registered, as every read of a user reports
+ * them.
+ *
+ * A user that has registered none is reported without either field rather than
+ * with an empty list, which is what real Cognito answers for one.
+ */
+export interface SimCognitoUserFactors {
+    readonly UserMFASettingList?: readonly string[] | undefined;
+    readonly PreferredMfaSetting?: string | undefined;
+}
 /**
  * A user as `AdminGetUser` reports it, which is a user pool response rather
  * than a `UserType`.
  */
-export interface SimCognitoDescribedUser {
+export interface SimCognitoDescribedUser extends SimCognitoUserFactors {
     readonly Username?: string | undefined;
     readonly UserAttributes?: readonly SimCognitoAttributeType[] | undefined;
     readonly UserCreateDate?: Date | undefined;
@@ -29,6 +40,13 @@ export interface SimCognitoDescribedUser {
     readonly Enabled?: boolean | undefined;
     readonly UserStatus?: string | undefined;
 }
+/**
+ * A user as `GetUser` reports it to the user itself.
+ */
+export interface SimCognitoSelfUser extends SimCognitoUserFactors {
+    readonly Username?: string | undefined;
+    readonly UserAttributes?: readonly SimCognitoAttributeType[] | undefined;
+}
 /**
  * What every admin user operation names: the pool, and the user in it.
  */

package/dist/service/cognito/command/user/user.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAEnG;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA+B,SAAQ,+BAA+B;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mCAAoC,SAAQ,+BAA+B;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,wCAAyC,SAAQ,+BAA+B;IAC/F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"user.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/user.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAEnG;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA+B,SAAQ,+BAA+B;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mCAAoC,SAAQ,+BAA+B;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,wCAAyC,SAAQ,+BAA+B;IAC/F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.d.ts

@@ -6,9 +6,9 @@ import type { SimCognitoUserPoolCommandInput } from "./user-pool.command.js";
  * them cannot be honoured here at all, and a pool created as if they had been
  * would behave differently in a deployment.
  *
- * `AccountRecoverySetting` is accepted at one value and refused at every
- * other. That value asks for nothing this simulation does not do, and it is
- * what CDK emits, so a stack that only wanted a pool deploys.
+ * `AccountRecoverySetting` is not here. A pool records the mechanisms it was
+ * asked for and reports them back, and SimCognitoAccountRecovery refuses a
+ * setting outside the shape Cognito states for it.
  *
  * `AdminCreateUserConfig` is simulated as far as `AllowAdminCreateUserOnly`
  * goes, which is what decides whether `SignUp` is allowed. The two keys beside
@@ -22,7 +22,6 @@ import type { SimCognitoUserPoolCommandInput } from "./user-pool.command.js";
  */
 export declare class SimCognitoUnsimulatedUserPoolFeatures {
     private readonly unsimulated;
-    private readonly structure;
     constructor(operation: string);
     /**
      * Refuse a request carrying a feature this simulation cannot honour.

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-features.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAkB7E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAE3D,YAAY,SAAS,EAAE,MAAM,EAG5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,IAAI,CA2CpD;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-features.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IAEzD,YAAY,SAAS,EAAE,MAAM,EAE5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,IAAI,CAqCpD;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.js

@@ -1,20 +1,4 @@
 import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
-import { SimCognitoUnsimulatedStructure } from "../sim-cognito-unsimulated-structure.js";
-/**
- * The account recovery a pool is accepted with, which is what `aws-cdk-lib`
- * 2.262.1 emits for a `UserPool` construct asking for nothing in particular.
- *
- * There is no `ForgotPassword` command here, so no mechanism is ever reached
- * whichever ones are listed. A request listing its own is still refused,
- * because choosing them is choosing behaviour, and a pool that ignored the
- * choice would recover accounts differently on real AWS.
- */
-const accountRecoverySetting = {
-    RecoveryMechanisms: [
-        { Name: "verified_phone_number", Priority: 1 },
-        { Name: "verified_email", Priority: 2 },
-    ],
-};
 /**
  * Refuses the user pool features this simulation does not model.
  *
@@ -22,9 +6,9 @@ const accountRecoverySetting = {
  * them cannot be honoured here at all, and a pool created as if they had been
  * would behave differently in a deployment.
  *
- * `AccountRecoverySetting` is accepted at one value and refused at every
- * other. That value asks for nothing this simulation does not do, and it is
- * what CDK emits, so a stack that only wanted a pool deploys.
+ * `AccountRecoverySetting` is not here. A pool records the mechanisms it was
+ * asked for and reports them back, and SimCognitoAccountRecovery refuses a
+ * setting outside the shape Cognito states for it.
  *
  * `AdminCreateUserConfig` is simulated as far as `AllowAdminCreateUserOnly`
  * goes, which is what decides whether `SignUp` is allowed. The two keys beside
@@ -38,10 +22,8 @@ const accountRecoverySetting = {
  */
 export class SimCognitoUnsimulatedUserPoolFeatures {
     unsimulated;
-    structure;
     constructor(operation) {
         this.unsimulated = new SimCognitoUnsimulatedInput(operation);
-        this.structure = new SimCognitoUnsimulatedStructure(operation);
     }
     /**
      * Refuse a request carrying a feature this simulation cannot honour.
@@ -49,7 +31,6 @@ export class SimCognitoUnsimulatedUserPoolFeatures {
     refuseIn(input) {
         this.unsimulated.refuse("UserAttributeUpdateSettings", input.UserAttributeUpdateSettings, "verification before an attribute changes");
         this.unsimulated.refuse("DeviceConfiguration", input.DeviceConfiguration, "device remembering");
-        this.structure.refuseUnless("AccountRecoverySetting", input.AccountRecoverySetting, accountRecoverySetting, "account recovery");
         this.unsimulated.refuse("AdminCreateUserConfig InviteMessageTemplate", input.AdminCreateUserConfig?.InviteMessageTemplate, "the wording of the invitation an admin-created user is sent");
         this.unsimulated.refuse("AdminCreateUserConfig UnusedAccountValidityDays", input.AdminCreateUserConfig?.UnusedAccountValidityDays, "expiring the temporary password an admin-created user was sent");
         this.unsimulated.refuse("UserPoolAddOns", input.UserPoolAddOns, "threat protection");

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-features.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAGzF;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB,EAAE;QAClB,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE;QAC9C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE;KACxC;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,qCAAqC;IAC/B,WAAW,CAA6B;IACxC,SAAS,CAAiC;IAE3D,YAAY,SAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,8BAA8B,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAqC;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6BAA6B,EAC7B,KAAK,CAAC,2BAA2B,EACjC,0CAA0C,CAC3C,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,qBAAqB,EACrB,KAAK,CAAC,mBAAmB,EACzB,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,YAAY,CACzB,wBAAwB,EACxB,KAAK,CAAC,sBAAsB,EAC5B,sBAAsB,EACtB,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6CAA6C,EAC7C,KAAK,CAAC,qBAAqB,EAAE,qBAAqB,EAClD,6DAA6D,CAC9D,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,iDAAiD,EACjD,KAAK,CAAC,qBAAqB,EAAE,yBAAyB,EACtD,gEAAgE,CACjE,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,gBAAgB,EAChB,KAAK,CAAC,cAAc,EACpB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,kBAAkB,EAClB,KAAK,CAAC,gBAAgB,EACtB,yCAAyC,CAC1C,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,qBAAqB,EACrB,KAAK,CAAC,mBAAmB,EACzB,uBAAuB,CACxB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-features.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-features.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAGjF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,qCAAqC;IAC/B,WAAW,CAA6B;IAEzD,YAAY,SAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAqC;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6BAA6B,EAC7B,KAAK,CAAC,2BAA2B,EACjC,0CAA0C,CAC3C,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,qBAAqB,EACrB,KAAK,CAAC,mBAAmB,EACzB,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6CAA6C,EAC7C,KAAK,CAAC,qBAAqB,EAAE,qBAAqB,EAClD,6DAA6D,CAC9D,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,iDAAiD,EACjD,KAAK,CAAC,qBAAqB,EAAE,yBAAyB,EACtD,gEAAgE,CACjE,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,gBAAgB,EAChB,KAAK,CAAC,cAAc,EACpB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,kBAAkB,EAClB,KAAK,CAAC,gBAAgB,EACtB,yCAAyC,CAC1C,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,qBAAqB,EACrB,KAAK,CAAC,mBAAmB,EACzB,uBAAuB,CACxB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.d.ts

@@ -2,12 +2,13 @@ import type { SimCreateUserPoolCommandInput } from "./user-pool.command.js";
 /**
  * Refuses the inputs deciding how a pool identifies its users.
  *
- * These four are `CreateUserPool` inputs only. Real Cognito fixes each of
+ * These three are `CreateUserPool` inputs only. Real Cognito fixes each of
  * them when the pool is made and has no `UpdateUserPool` input for any of
  * them, so the refusals only ever name creation.
  *
- * `UsernameAttributes` is the one that would hurt most, and it gets its own
- * refusal saying why.
+ * `Schema` is the fourth such input and is not refused: a pool takes the
+ * attributes it declares. `UsernameAttributes` is the one that would hurt
+ * most, and it gets its own refusal saying why.
  */
 export declare class SimCognitoUnsimulatedUserPoolIdentity {
     private readonly unsimulated;

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-identity.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E;;;;;;;;;GASG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAcnD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;CAcjC"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-identity.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAanD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;CAcjC"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.js

@@ -3,12 +3,13 @@ import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js"
 /**
  * Refuses the inputs deciding how a pool identifies its users.
  *
- * These four are `CreateUserPool` inputs only. Real Cognito fixes each of
+ * These three are `CreateUserPool` inputs only. Real Cognito fixes each of
  * them when the pool is made and has no `UpdateUserPool` input for any of
  * them, so the refusals only ever name creation.
  *
- * `UsernameAttributes` is the one that would hurt most, and it gets its own
- * refusal saying why.
+ * `Schema` is the fourth such input and is not refused: a pool takes the
+ * attributes it declares. `UsernameAttributes` is the one that would hurt
+ * most, and it gets its own refusal saying why.
  */
 export class SimCognitoUnsimulatedUserPoolIdentity {
     unsimulated = new SimCognitoUnsimulatedInput("CreateUserPool");
@@ -18,7 +19,6 @@ export class SimCognitoUnsimulatedUserPoolIdentity {
     refuseIn(input) {
         this.refuseUsernameAttributes(input.UsernameAttributes);
         this.unsimulated.refuse("AliasAttributes", input.AliasAttributes, "sign-in aliases");
-        this.unsimulated.refuse("Schema", input.Schema, "custom attributes");
         this.unsimulated.refuse("UsernameConfiguration", input.UsernameConfiguration, "case-insensitive usernames");
     }
     /**

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-identity.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAGjF;;;;;;;;;GASG;AACH,MAAM,OAAO,qCAAqC;IAC/B,WAAW,GAAG,IAAI,0BAA0B,CAC3D,gBAAgB,CACjB,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAoC;QAC3C,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAExD,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,iBAAiB,EACjB,KAAK,CAAC,eAAe,EACrB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,uBAAuB,EACvB,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAC9B,UAAyC;QAEzC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,wEAAwE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,mDAAmD,CACtD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-identity.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAGjF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qCAAqC;IAC/B,WAAW,GAAG,IAAI,0BAA0B,CAC3D,gBAAgB,CACjB,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAoC;QAC3C,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAExD,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,iBAAiB,EACjB,KAAK,CAAC,eAAe,EACrB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,uBAAuB,EACvB,KAAK,CAAC,qBAAqB,EAC3B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAC9B,UAAyC;QAEzC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,wEAAwE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,mDAAmD,CACtD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.d.ts

@@ -8,6 +8,11 @@ import type { SimCognitoUserPoolCommandInput } from "./user-pool.command.js";
  *
  * `CreateUserPool` and `UpdateUserPool` both carry them, so both refuse them,
  * each naming itself in the refusal.
+ *
+ * `MfaConfiguration` is not among them. A pool records what it was asked for
+ * and reports it back, and the sign-in that would have to answer a challenge
+ * is what refuses instead, where the refusal can say what it was that could
+ * not be done.
  */
 export declare class SimCognitoUnsimulatedUserPoolOptions {
     private readonly unsimulated;

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-options.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAE7E;;;;;;;;;GASG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAEnE,YAAY,SAAS,EAAE,MAAM,EAI5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,IAAI,CA0BpD;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-options.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAE7E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAEnE,YAAY,SAAS,EAAE,MAAM,EAI5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,IAAI,CAoBpD;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.js

@@ -10,6 +10,11 @@ import { SimCognitoUnsimulatedUserPoolMessaging } from "./sim-cognito-unsimulate
  *
  * `CreateUserPool` and `UpdateUserPool` both carry them, so both refuse them,
  * each naming itself in the refusal.
+ *
+ * `MfaConfiguration` is not among them. A pool records what it was asked for
+ * and reports it back, and the sign-in that would have to answer a challenge
+ * is what refuses instead, where the refusal can say what it was that could
+ * not be done.
  */
 export class SimCognitoUnsimulatedUserPoolOptions {
     unsimulated;
@@ -24,7 +29,6 @@ export class SimCognitoUnsimulatedUserPoolOptions {
      * Refuse a request carrying an input this simulation cannot honour.
      */
     refuseIn(input) {
-        this.unsimulated.refuseUnless("MfaConfiguration", input.MfaConfiguration, "OFF", "multi-factor authentication");
         this.unsimulated.refuseUnless("UserPoolTier", input.UserPoolTier, "ESSENTIALS", "the Lite and Plus feature plans");
         this.unsimulated.refuse("Policies SignInPolicy", input.Policies?.SignInPolicy, "choosing which factors a user may sign in with first");
         this.unsimulated.refuse("Policies PasswordPolicy PasswordHistorySize", input.Policies?.PasswordPolicy?.PasswordHistorySize, "refusing a password the user has used before");

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-options.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,sCAAsC,EAAE,MAAM,6CAA6C,CAAC;AAGrG;;;;;;;;;GASG;AACH,MAAM,OAAO,oCAAoC;IAC9B,WAAW,CAA6B;IACxC,QAAQ,CAAwC;IAChD,SAAS,CAAyC;IAEnE,YAAY,SAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAqC,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,IAAI,sCAAsC,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAqC;QAC5C,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,kBAAkB,EAClB,KAAK,CAAC,gBAAgB,EACtB,KAAK,EACL,6BAA6B,CAC9B,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,cAAc,EACd,KAAK,CAAC,YAAY,EAClB,YAAY,EACZ,iCAAiC,CAClC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,uBAAuB,EACvB,KAAK,CAAC,QAAQ,EAAE,YAAY,EAC5B,sDAAsD,CACvD,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6CAA6C,EAC7C,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EACnD,8CAA8C,CAC/C,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-options.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,sCAAsC,EAAE,MAAM,6CAA6C,CAAC;AAGrG;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,oCAAoC;IAC9B,WAAW,CAA6B;IACxC,QAAQ,CAAwC;IAChD,SAAS,CAAyC;IAEnE,YAAY,SAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAqC,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,IAAI,sCAAsC,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAqC;QAC5C,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,cAAc,EACd,KAAK,CAAC,YAAY,EAClB,YAAY,EACZ,iCAAiC,CAClC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,uBAAuB,EACvB,KAAK,CAAC,QAAQ,EAAE,YAAY,EAC5B,sDAAsD,CACvD,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,6CAA6C,EAC7C,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EACnD,8CAA8C,CAC/C,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.d.ts

@@ -9,10 +9,22 @@ import type { SimUpdateUserPoolCommandInput } from "./user-pool.command.js";
  * renames the pool with it, and a rename is not simulated, so a request
  * carrying one is refused rather than answered with a pool still under its
  * old name.
+ *
+ * `Schema` is refused for a different reason: real `UpdateUserPool` has no
+ * such input at all, and a request carrying one would change a pool's
+ * attributes here and nothing on AWS.
  */
 export declare class SimCognitoUnsimulatedUserPoolUpdates {
     private readonly unsimulated;
     private readonly options;
+    /**
+     * Refuse an update declaring a schema.
+     *
+     * A pool's schema is fixed when the pool is created. Real Cognito adds an
+     * attribute to one with `AddCustomAttributes`, which is not simulated, and
+     * takes nothing of the sort on `UpdateUserPool`.
+     */
+    private static refuseSchema;
     /**
      * Refuse an update carrying an input this simulation cannot honour.
      */

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-updates.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IACF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEtB;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAInD;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-updates.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IACF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEtB;IAEF;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAY3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAKnD;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.js

@@ -1,3 +1,4 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
 import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
 import { SimCognitoUnsimulatedUserPoolOptions } from "./sim-cognito-unsimulated-pool-options.js";
 /**
@@ -10,15 +11,35 @@ import { SimCognitoUnsimulatedUserPoolOptions } from "./sim-cognito-unsimulated-
  * renames the pool with it, and a rename is not simulated, so a request
  * carrying one is refused rather than answered with a pool still under its
  * old name.
+ *
+ * `Schema` is refused for a different reason: real `UpdateUserPool` has no
+ * such input at all, and a request carrying one would change a pool's
+ * attributes here and nothing on AWS.
  */
 export class SimCognitoUnsimulatedUserPoolUpdates {
     unsimulated = new SimCognitoUnsimulatedInput("UpdateUserPool");
     options = new SimCognitoUnsimulatedUserPoolOptions("UpdateUserPool");
+    /**
+     * Refuse an update declaring a schema.
+     *
+     * A pool's schema is fixed when the pool is created. Real Cognito adds an
+     * attribute to one with `AddCustomAttributes`, which is not simulated, and
+     * takes nothing of the sort on `UpdateUserPool`.
+     */
+    static refuseSchema(schema) {
+        if (schema === undefined) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException("UpdateUserPool Schema is not an input real Cognito has: a pool's " +
+            "schema is fixed when the pool is created, and AddCustomAttributes " +
+            "is what adds an attribute to one, which is not simulated");
+    }
     /**
      * Refuse an update carrying an input this simulation cannot honour.
      */
     refuseIn(input) {
         this.unsimulated.refuse("PoolName", input.PoolName, "renaming a pool");
+        SimCognitoUnsimulatedUserPoolUpdates.refuseSchema(input.Schema);
         this.options.refuseIn(input);
     }
 }

package/dist/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-updates.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AAGjG;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oCAAoC;IAC9B,WAAW,GAAG,IAAI,0BAA0B,CAC3D,gBAAgB,CACjB,CAAC;IACe,OAAO,GAAG,IAAI,oCAAoC,CACjE,gBAAgB,CACjB,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAoC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-updates.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-unsimulated-pool-updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AAGjG;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,oCAAoC;IAC9B,WAAW,GAAG,IAAI,0BAA0B,CAC3D,gBAAgB,CACjB,CAAC;IACe,OAAO,GAAG,IAAI,oCAAoC,CACjE,gBAAgB,CACjB,CAAC;IAEF;;;;;;OAMG;IACK,MAAM,CAAC,YAAY,CAAC,MAAqC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,mEAAmE;YACjE,oEAAoE;YACpE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAoC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvE,oCAAoC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAGlG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAKnF,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAC0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CACU;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACU;IAE7C,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAehC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAkBhC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,wBAAwB,GACjC,gCAAgC,CAalC;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAsBhC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAGlG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAKnF,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAC0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CACU;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACU;IAE7C,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAehC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CA8BhC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,wBAAwB,GACjC,gCAAgC,CAalC;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAsBhC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.js

@@ -56,9 +56,21 @@ export class SimCognitoUserPoolCommands {
         const userPoolId = requireSimCognitoUserPoolId(input.UserPoolId);
         this.authorizer.authorizeUserPool("cognito-idp:UpdateUserPool", userPoolId, options?.caller);
         this.unsimulatedUpdates.refuseIn(input);
-        this.pools
-            .require(userPoolId)
-            .update(new SimCognitoUserPoolSettings({ input, operation: "UpdateUserPool" }));
+        const pool = this.pools.require(userPoolId);
+        const settings = new SimCognitoUserPoolSettings({
+            input,
+            operation: "UpdateUserPool",
+        });
+        // An update carries whether the pool challenges for a second factor and
+        // nothing about the factors behind it, so the factors a
+        // SetUserPoolMfaConfig request configured survive it, as they do on real
+        // Cognito.
+        settings.mfa.keepFactorsOf(pool.settings.mfa);
+        // An update declares no schema, and one that tried was refused above, so
+        // the pool keeps the attributes it was created with rather than dropping
+        // back to the standard ones.
+        settings.keepSchemaOf(pool.settings);
+        pool.update(settings);
         return { $metadata: {} };
     }
     /**

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAG/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAsBzE;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAA0B;IAC/B,WAAW,CAA4B;IACvC,UAAU,CAAuB;IACjC,IAAI,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACpC,kBAAkB,GACjC,IAAI,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;IAC5C,mBAAmB,GAClC,IAAI,qCAAqC,EAAE,CAAC;IAC7B,kBAAkB,GACjC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YAAY,UAAgD;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,IAAI,CAAC,KAAK;aACP,OAAO,CAAC,UAAU,CAAC;aACnB,MAAM,CACL,IAAI,0BAA0B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CACvE,CAAC;QAEJ,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAmC,EACnC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,8BAA8B,EAC9B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,0CAA0C;gBAC/D,+DAA+D;gBAC/D,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAG/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAsBzE;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAA0B;IAC/B,WAAW,CAA4B;IACvC,UAAU,CAAuB;IACjC,IAAI,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACpC,kBAAkB,GACjC,IAAI,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;IAC5C,mBAAmB,GAClC,IAAI,qCAAqC,EAAE,CAAC;IAC7B,kBAAkB,GACjC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YAAY,UAAgD;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QAEH,wEAAwE;QACxE,wDAAwD;QACxD,yEAAyE;QACzE,WAAW;QACX,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9C,yEAAyE;QACzE,yEAAyE;QACzE,6BAA6B;QAC7B,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAmC,EACnC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,8BAA8B,EAC9B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,0CAA0C;gBAC/D,+DAA+D;gBAC/D,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-mfa-commands.d.ts

@@ -0,0 +1,58 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoUserPoolStore } from "../../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoAuthorizer } from "../authorize/sim-cognito-authorizer.js";
+import type { SimGetUserPoolMfaConfigCommand, SimGetUserPoolMfaConfigCommandOutput, SimSetUserPoolMfaConfigCommand, SimSetUserPoolMfaConfigCommandOutput } from "./user-pool-mfa.command.js";
+interface SimCognitoUserPoolMfaCommandsProperties {
+    readonly pools: SimCognitoUserPoolStore;
+    readonly authorizer: SimCognitoAuthorizer;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The commands that set and read a pool's multi-factor authentication.
+ *
+ * They are separate from the pool commands because the configuration they act
+ * on is separate: `CreateUserPool` carries an `MfaConfiguration` and nothing
+ * about the factors behind it, and this is where a pool is told which factors
+ * it offers. CloudFormation deploys a pool with MFA in the same two steps.
+ *
+ * Neither command simulates a challenge. What they change is what
+ * `DescribeUserPool` and `GetUserPoolMfaConfig` report, and whether a sign-in
+ * to the pool is refused for a challenge this simulation cannot issue.
+ */
+export declare class SimCognitoUserPoolMfaCommands {
+    private readonly pools;
+    private readonly authorizer;
+    private readonly unsimulated;
+    constructor(properties: SimCognitoUserPoolMfaCommandsProperties);
+    /**
+     * Set a pool's MFA configuration.
+     *
+     * The configuration is replaced rather than merged, as real Cognito replaces
+     * it: a factor the request leaves out goes back to being unconfigured.
+     */
+    set(command: SimSetUserPoolMfaConfigCommand, options?: SimCognitoCommandOptions): SimSetUserPoolMfaConfigCommandOutput;
+    /**
+     * Read a pool's MFA configuration.
+     */
+    get(command: SimGetUserPoolMfaConfigCommand, options?: SimCognitoCommandOptions): SimGetUserPoolMfaConfigCommandOutput;
+    /**
+     * Refuse the factors this simulation has no way to present.
+     *
+     * The SNS caller role inside an `SmsMfaConfiguration` is refused in the same
+     * words `CreateUserPool` refuses the pool's own `SmsConfiguration`: nothing
+     * here delivers a message, so a role recorded here would never be assumed.
+     * The factor itself is accepted without one, and the pool records the
+     * message it would have sent in the way it records every other one.
+     *
+     * A pool here has no `EmailConfiguration` either, because `CreateUserPool`
+     * refuses that, so real Cognito would refuse a code sent by email on a pool
+     * built the same way. A passkey is presented through the `USER_AUTH` flow,
+     * which is refused as a flow of its own, so a pool configured for one here
+     * would never be asked for it.
+     */
+    private refuseUnsimulatedFactors;
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-mfa-commands.d.ts.map