@kensio/yulin 1.15.0 → 1.16.0

package/dist/service/cognito/user-pool/sim-cognito-username-attributes.d.ts

@@ -0,0 +1,87 @@
+import type { SimCognitoAttributeType } from "./user/sim-cognito-user-attributes.js";
+import { type SimCognitoUsername } from "./user/sim-cognito-username.js";
+/**
+ * What a new user of a pool is stored as: the username it is keyed by, and
+ * the attributes it starts with.
+ */
+export interface SimCognitoNewUserIdentity {
+    readonly username: SimCognitoUsername;
+    readonly attributes: readonly SimCognitoAttributeType[] | undefined;
+}
+/**
+ * The attributes a pool signs its users in by, from its `UsernameAttributes`.
+ *
+ * A pool created without any is signed in by username, and a request naming a
+ * user names the username it was created with. A pool created with them works
+ * the other way round: the caller signs in by email or by phone number, and
+ * the username is a UUID Cognito generates that no caller ever chose. That is
+ * what an application built against such a pool sees in `cognito:username` and
+ * in `AdminGetUser`, so it is what this simulation stores.
+ *
+ * The address itself stays reachable. It goes into the attribute the pool
+ * signs in by, and a request naming a user by that address resolves the same
+ * user, which is the alias resolution real Cognito does for its admin
+ * operations and its sign-ins.
+ */
+export declare class SimCognitoUsernameAttributes {
+    private readonly attributes;
+    constructor(requested?: readonly string[]);
+    /**
+     * The attribute a new user's own value goes into, alongside the attributes
+     * the request asked for.
+     *
+     * A request that set the attribute itself keeps its own value, as long as
+     * it is the one the username says. The two naming different accounts is
+     * refused rather than resolved in favour of either, because real Cognito
+     * signs the user in by only one of them and code written against the other
+     * would look up a user that is not there.
+     */
+    private static withSignInValue;
+    /**
+     * Whether the pool signs users in by username, which is the default.
+     */
+    get isEmpty(): boolean;
+    /**
+     * The attribute names, as the request gave them.
+     */
+    get names(): readonly string[];
+    /**
+     * These attributes as a described pool reports them, or nothing where the
+     * pool signs users in by username.
+     */
+    toOutput(): readonly string[] | undefined;
+    /**
+     * The username and attributes a user being created is stored with.
+     *
+     * A pool signing users in by username stores what the request asked for. A
+     * pool signing them in by an attribute stores a generated UUID instead, and
+     * puts the value the request called the username into the attribute it
+     * signs in by, which is what real Cognito does with it.
+     */
+    identify(requested: SimCognitoUsername, attributes: readonly SimCognitoAttributeType[] | undefined): SimCognitoNewUserIdentity;
+    /**
+     * The values a user can be signed in by, by the attribute each is held in.
+     *
+     * A user missing the attribute has no value for it, which is how a
+     * federated user reaches a pool that signs its own users in by email: the
+     * provider's mapping may not carry one.
+     */
+    signInValues(attributes: ReadonlyMap<string, string>): ReadonlyMap<string, string>;
+    /**
+     * Whether a user holding these attributes is the one a value names.
+     */
+    matches(attributes: ReadonlyMap<string, string>, value: string): boolean;
+    /**
+     * The attribute a username fills, or a refusal saying what the pool signs
+     * users in by.
+     *
+     * Real Cognito refuses a username of the wrong form here rather than
+     * creating a user nobody could sign in as.
+     */
+    private requireSignInAttribute;
+    /**
+     * How a refusal describes what this pool's usernames have to look like.
+     */
+    private describeForms;
+}
+//# sourceMappingURL=sim-cognito-username-attributes.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-username-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username-attributes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-username-attributes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;CACrE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAElE,YAAY,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAIxC;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAwB9B;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED;;;OAGG;IACH,QAAQ,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAMxC;IAED;;;;;;;OAOG;IACH,QAAQ,CACN,SAAS,EAAE,kBAAkB,EAC7B,UAAU,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,GACzD,yBAAyB,CAe3B;IAED;;;;;;OAMG;IACH,YAAY,CACV,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAY7B;IAED;;OAEG;IACH,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIvE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB"}

package/dist/service/cognito/user-pool/sim-cognito-username-attributes.js

@@ -0,0 +1,137 @@
+import { randomUUID } from "node:crypto";
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+import { SimCognitoSignInAttribute } from "./sim-cognito-sign-in-attribute.js";
+import { requireSimCognitoUsername, } from "./user/sim-cognito-username.js";
+/**
+ * The attributes a pool signs its users in by, from its `UsernameAttributes`.
+ *
+ * A pool created without any is signed in by username, and a request naming a
+ * user names the username it was created with. A pool created with them works
+ * the other way round: the caller signs in by email or by phone number, and
+ * the username is a UUID Cognito generates that no caller ever chose. That is
+ * what an application built against such a pool sees in `cognito:username` and
+ * in `AdminGetUser`, so it is what this simulation stores.
+ *
+ * The address itself stays reachable. It goes into the attribute the pool
+ * signs in by, and a request naming a user by that address resolves the same
+ * user, which is the alias resolution real Cognito does for its admin
+ * operations and its sign-ins.
+ */
+export class SimCognitoUsernameAttributes {
+    attributes;
+    constructor(requested) {
+        this.attributes = (requested ?? []).map((name) => new SimCognitoSignInAttribute(name));
+    }
+    /**
+     * The attribute a new user's own value goes into, alongside the attributes
+     * the request asked for.
+     *
+     * A request that set the attribute itself keeps its own value, as long as
+     * it is the one the username says. The two naming different accounts is
+     * refused rather than resolved in favour of either, because real Cognito
+     * signs the user in by only one of them and code written against the other
+     * would look up a user that is not there.
+     */
+    static withSignInValue(attribute, value, attributes) {
+        const requested = attributes ?? [];
+        const given = requested.find((entry) => entry.Name === attribute.name);
+        if (given === undefined) {
+            return [...requested, { Name: attribute.name, Value: value }];
+        }
+        if (given.Value !== value) {
+            throw new SimCognitoInvalidParameterException(`Username '${value}' and the ${attribute.name} attribute ` +
+                `'${String(given.Value)}' name different accounts: a pool that ` +
+                `signs users in by ${attribute.name} takes the username as that ` +
+                `attribute's value`);
+        }
+        return requested;
+    }
+    /**
+     * Whether the pool signs users in by username, which is the default.
+     */
+    get isEmpty() {
+        return this.attributes.length === 0;
+    }
+    /**
+     * The attribute names, as the request gave them.
+     */
+    get names() {
+        return this.attributes.map((attribute) => attribute.name);
+    }
+    /**
+     * These attributes as a described pool reports them, or nothing where the
+     * pool signs users in by username.
+     */
+    toOutput() {
+        if (this.isEmpty) {
+            return undefined;
+        }
+        return this.names;
+    }
+    /**
+     * The username and attributes a user being created is stored with.
+     *
+     * A pool signing users in by username stores what the request asked for. A
+     * pool signing them in by an attribute stores a generated UUID instead, and
+     * puts the value the request called the username into the attribute it
+     * signs in by, which is what real Cognito does with it.
+     */
+    identify(requested, attributes) {
+        if (this.isEmpty) {
+            return { username: requested, attributes };
+        }
+        const attribute = this.requireSignInAttribute(requested);
+        return {
+            username: requireSimCognitoUsername(randomUUID()),
+            attributes: SimCognitoUsernameAttributes.withSignInValue(attribute, requested, attributes),
+        };
+    }
+    /**
+     * The values a user can be signed in by, by the attribute each is held in.
+     *
+     * A user missing the attribute has no value for it, which is how a
+     * federated user reaches a pool that signs its own users in by email: the
+     * provider's mapping may not carry one.
+     */
+    signInValues(attributes) {
+        const values = new Map();
+        for (const attribute of this.attributes) {
+            const value = attributes.get(attribute.name);
+            if (value !== undefined) {
+                values.set(attribute.name, value);
+            }
+        }
+        return values;
+    }
+    /**
+     * Whether a user holding these attributes is the one a value names.
+     */
+    matches(attributes, value) {
+        return this.attributes.some((attribute) => attributes.get(attribute.name) === value);
+    }
+    /**
+     * The attribute a username fills, or a refusal saying what the pool signs
+     * users in by.
+     *
+     * Real Cognito refuses a username of the wrong form here rather than
+     * creating a user nobody could sign in as.
+     */
+    requireSignInAttribute(username) {
+        const attribute = this.attributes.find((candidate) => candidate.holds(username));
+        if (attribute === undefined) {
+            throw new SimCognitoInvalidParameterException(`Username should be ${this.describeForms()}.`);
+        }
+        return attribute;
+    }
+    /**
+     * How a refusal describes what this pool's usernames have to look like.
+     */
+    describeForms() {
+        const descriptions = this.attributes.map((attribute) => attribute.description);
+        if (descriptions.length > 1) {
+            return `either ${descriptions.join(" or ")}`;
+        }
+        return descriptions.join(" or ");
+    }
+}
+//# sourceMappingURL=sim-cognito-username-attributes.js.map

package/dist/service/cognito/user-pool/sim-cognito-username-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username-attributes.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-username-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAWxC;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAA4B;IACtB,UAAU,CAAuC;IAElE,YAAY,SAA6B;QACvC,IAAI,CAAC,UAAU,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,eAAe,CAC5B,SAAoC,EACpC,KAAa,EACb,UAA0D;QAE1D,MAAM,SAAS,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,mCAAmC,CAC3C,aAAa,KAAK,aAAa,SAAS,CAAC,IAAI,aAAa;gBACxD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,yCAAyC;gBAChE,qBAAqB,SAAS,CAAC,IAAI,8BAA8B;gBACjE,mBAAmB,CACtB,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CACN,SAA6B,EAC7B,UAA0D;QAE1D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAEzD,OAAO;YACL,QAAQ,EAAE,yBAAyB,CAAC,UAAU,EAAE,CAAC;YACjD,UAAU,EAAE,4BAA4B,CAAC,eAAe,CACtD,SAAS,EACT,SAAS,EACT,UAAU,CACX;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CACV,UAAuC;QAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEzC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAuC,EAAE,KAAa;QAC5D,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,CACxD,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAAC,QAAgB;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnD,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC1B,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,mCAAmC,CAC3C,sBAAsB,IAAI,CAAC,aAAa,EAAE,GAAG,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CACtC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CACrC,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,UAAU,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.d.ts

@@ -1,3 +1,4 @@
+import type { SimCognitoUsernameAttributes } from "../sim-cognito-username-attributes.js";
 import type { SimCognitoUser } from "./sim-cognito-user.js";
 import type { SimCognitoUsername } from "./sim-cognito-username.js";
 /**
@@ -6,9 +7,18 @@ import type { SimCognitoUsername } from "./sim-cognito-username.js";
  * Users are keyed by username, which is what every admin operation names one
  * by. Usernames are case sensitive here, as they are on a pool created without
  * a `UsernameConfiguration`, which this simulation refuses.
+ *
+ * A pool that signs its users in by an attribute keys them by the UUID
+ * username Cognito generated, and reaches them by that attribute's value as
+ * well: real Cognito resolves the alias for its admin operations and its
+ * sign-ins, so a request naming a user by its email finds the same user a
+ * request naming the UUID finds. What a pool signs users in by is fixed when
+ * the pool is created, which is why this is settled once here.
  */
 export declare class SimCognitoUserStore {
     private readonly users;
+    private readonly signInBy;
+    constructor(signInBy: SimCognitoUsernameAttributes);
     /**
      * Every user in this pool, in creation order.
      */
@@ -19,6 +29,11 @@ export declare class SimCognitoUserStore {
     get count(): number;
     /**
      * Store a newly created user, refusing a username the pool already holds.
+     *
+     * A pool signing users in by an attribute refuses a second user holding a
+     * value another user signs in by too. That value identifies the account
+     * there, so allowing two would leave a sign-in naming an account this pool
+     * has two of.
      */
     add(user: SimCognitoUser): void;
     /**
@@ -26,13 +41,22 @@ export declare class SimCognitoUserStore {
      */
     remove(user: SimCognitoUser): void;
     /**
-     * Find a user by username.
+     * Find a user by username, or by a value the pool signs users in by.
      */
     find(username: string): SimCognitoUser | undefined;
     /**
      * Resolve a user by username, or refuse.
      */
     require(username: SimCognitoUsername): SimCognitoUser;
+    /**
+     * Find the user signing in by a value, where the pool signs users in by an
+     * attribute at all.
+     */
+    private findBySignInValue;
+    /**
+     * Refuse a user signing in by a value another user already signs in by.
+     */
+    private requireSignInValuesFree;
     /**
      * Say why a username reached no user.
      *

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAE3D;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,cAAc,EAAE,CAEnC;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAQ9B;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAEjC;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAQpD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAcvB"}
+{"version":3,"file":"sim-cognito-user-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IAExD,YAAY,QAAQ,EAAE,4BAA4B,EAEjD;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,cAAc,EAAE,CAEnC;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;;;;;OAOG;IACH,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAS9B;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAEjC;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAQpD;IAED;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAcvB"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js

@@ -5,9 +5,20 @@ import { SimCognitoUsernameExistsException, SimCognitoUserNotFoundException, } f
  * Users are keyed by username, which is what every admin operation names one
  * by. Usernames are case sensitive here, as they are on a pool created without
  * a `UsernameConfiguration`, which this simulation refuses.
+ *
+ * A pool that signs its users in by an attribute keys them by the UUID
+ * username Cognito generated, and reaches them by that attribute's value as
+ * well: real Cognito resolves the alias for its admin operations and its
+ * sign-ins, so a request naming a user by its email finds the same user a
+ * request naming the UUID finds. What a pool signs users in by is fixed when
+ * the pool is created, which is why this is settled once here.
  */
 export class SimCognitoUserStore {
     users = new Map();
+    signInBy;
+    constructor(signInBy) {
+        this.signInBy = signInBy;
+    }
     /**
      * Every user in this pool, in creation order.
      */
@@ -22,11 +33,17 @@ export class SimCognitoUserStore {
     }
     /**
      * Store a newly created user, refusing a username the pool already holds.
+     *
+     * A pool signing users in by an attribute refuses a second user holding a
+     * value another user signs in by too. That value identifies the account
+     * there, so allowing two would leave a sign-in naming an account this pool
+     * has two of.
      */
     add(user) {
         if (this.users.has(user.username)) {
             throw new SimCognitoUsernameExistsException(`User account ${user.username} already exists in this user pool.`);
         }
+        this.requireSignInValuesFree(user);
         this.users.set(user.username, user);
     }
     /**
@@ -36,10 +53,10 @@ export class SimCognitoUserStore {
         this.users.delete(user.username);
     }
     /**
-     * Find a user by username.
+     * Find a user by username, or by a value the pool signs users in by.
      */
     find(username) {
-        return this.users.get(username);
+        return this.users.get(username) ?? this.findBySignInValue(username);
     }
     /**
      * Resolve a user by username, or refuse.
@@ -51,6 +68,26 @@ export class SimCognitoUserStore {
         }
         return found;
     }
+    /**
+     * Find the user signing in by a value, where the pool signs users in by an
+     * attribute at all.
+     */
+    findBySignInValue(value) {
+        if (this.signInBy.isEmpty) {
+            return undefined;
+        }
+        return this.all.find((user) => this.signInBy.matches(user.attributeValues, value));
+    }
+    /**
+     * Refuse a user signing in by a value another user already signs in by.
+     */
+    requireSignInValuesFree(user) {
+        for (const [name, value] of this.signInBy.signInValues(user.attributeValues)) {
+            if (this.findBySignInValue(value) !== undefined) {
+                throw new SimCognitoUsernameExistsException(`An account with the given ${name} already exists.`);
+            }
+        }
+    }
     /**
      * Say why a username reached no user.
      *

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAI1C;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAoB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iCAAiC,CACzC,gBAAgB,IAAI,CAAC,QAAQ,oCAAoC,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAoB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,QAA4B;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CACL,QAAQ,QAAQ,2CAA2C;gBAC3D,GAAG,KAAK,CAAC,QAAQ,mDAAmD;gBACpE,oEAAoE;gBACpE,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,QAAQ,kBAAkB,CAAC;IAC5C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAK1C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,QAAQ,CAA+B;IAExD,YAAY,QAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,GAAG,CAAC,IAAoB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iCAAiC,CACzC,gBAAgB,IAAI,CAAC,QAAQ,oCAAoC,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAoB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,KAAa;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CACnD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,IAAoB;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CACpD,IAAI,CAAC,eAAe,CACrB,EAAE,CAAC;YACF,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,IAAI,iCAAiC,CACzC,6BAA6B,IAAI,kBAAkB,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,QAA4B;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CACL,QAAQ,QAAQ,2CAA2C;gBAC3D,GAAG,KAAK,CAAC,QAAQ,mDAAmD;gBACpE,oEAAoE;gBACpE,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,QAAQ,kBAAkB,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/lambda/factory/lambda-dynamodb-stream-event.factory.d.ts

@@ -0,0 +1,47 @@
+import { DynamicFactory, type ItemFactory } from "@kensio/part-factory";
+import type { SimLambdaDynamoDbStreamEvent, SimLambdaDynamoDbStreamEventRecord } from "../event-source/poll/sim-lambda-dynamodb-stream-event.types.js";
+/**
+ * Makes the records of a DynamoDB stream event, one change each.
+ *
+ * A test that cares about the change and nothing else says only that:
+ *
+ * ```typescript
+ * lambdaDynamoDbStreamEventRecordFactory.make({
+ *   eventName: "MODIFY",
+ *   dynamodb: { NewImage: { status: { S: "shipped" } } },
+ * });
+ * ```
+ *
+ * What a real record says in more than one place is computed from the rest, so
+ * a record is one a stream could have delivered:
+ *
+ * - the images match the `eventName`: an `INSERT` carries a new image, a
+ *   `REMOVE` an old one, and a `MODIFY` both, alongside the keys
+ * - `StreamViewType` names the images the record actually carries, including
+ *   any the test added
+ * - `awsRegion` is the Region of the stream ARN given
+ *
+ * The casing is the event's own rather than a scheme: `eventID` has a capital
+ * ID, `eventSourceARN` a capital ARN, `dynamodb` none, and the block inside it
+ * is capitalized. All of it is what a function receives.
+ *
+ * `SizeBytes` is a plausible default rather than a measurement of the images
+ * given, so a test asserting on it should say what it expects.
+ */
+export declare const lambdaDynamoDbStreamEventRecordFactory: DynamicFactory<SimLambdaDynamoDbStreamEventRecord, undefined>;
+/**
+ * Makes the event a DynamoDB stream event source mapping invokes a function
+ * with.
+ *
+ * The default is the single-record batch a stream delivers when one item has
+ * changed. A batch is the records a test asks for, each completed by
+ * `lambdaDynamoDbStreamEventRecordFactory`:
+ *
+ * ```typescript
+ * lambdaDynamoDbStreamEventFactory.make({
+ *   Records: [{ eventName: "INSERT" }, { eventName: "REMOVE" }],
+ * });
+ * ```
+ */
+export declare const lambdaDynamoDbStreamEventFactory: ItemFactory<SimLambdaDynamoDbStreamEvent>;
+//# sourceMappingURL=lambda-dynamodb-stream-event.factory.d.ts.map

package/dist/service/lambda/factory/lambda-dynamodb-stream-event.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-dynamodb-stream-event.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/factory/lambda-dynamodb-stream-event.factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKxE,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,gEAAgE,CAAC;AA0BxE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,sCAAsC,+DA0B/C,CAAC;AAEL;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,4BAA4B,CACnB,CAAC"}

package/dist/service/lambda/factory/lambda-dynamodb-stream-event.factory.js

@@ -0,0 +1,96 @@
+import { faker } from "@faker-js/faker";
+import { DynamicFactory } from "@kensio/part-factory";
+import { SimRecordsEventFactory } from "../../../util/factory/sim-records-event.factory.js";
+import { DEFAULT_SIM_AWS_ACCOUNT_ID } from "../../aws/sim-aws-account.js";
+import { DEFAULT_SIM_AWS_REGION_NAME } from "../../aws/sim-aws-region.js";
+import { streamRecordChange, } from "./lambda-dynamodb-stream-record-change.js";
+const millisecondsPerSecond = 1000;
+/**
+ * The stream a made record comes from when a test does not name one.
+ *
+ * A stream ARN is a table ARN with a label after it, and real DynamoDB makes
+ * the label the instant the stream was enabled.
+ *
+ * Built when a record is made rather than when this module loads: the Account
+ * and Region defaults come from modules that reach this one back through the
+ * service index, and reading them at load time would read them before they
+ * exist.
+ */
+function defaultStreamArn() {
+    return (`arn:aws:dynamodb:${DEFAULT_SIM_AWS_REGION_NAME}:${DEFAULT_SIM_AWS_ACCOUNT_ID}` +
+        `:table/orders/stream/2026-01-01T00:00:00.000`);
+}
+/**
+ * Makes the records of a DynamoDB stream event, one change each.
+ *
+ * A test that cares about the change and nothing else says only that:
+ *
+ * ```typescript
+ * lambdaDynamoDbStreamEventRecordFactory.make({
+ *   eventName: "MODIFY",
+ *   dynamodb: { NewImage: { status: { S: "shipped" } } },
+ * });
+ * ```
+ *
+ * What a real record says in more than one place is computed from the rest, so
+ * a record is one a stream could have delivered:
+ *
+ * - the images match the `eventName`: an `INSERT` carries a new image, a
+ *   `REMOVE` an old one, and a `MODIFY` both, alongside the keys
+ * - `StreamViewType` names the images the record actually carries, including
+ *   any the test added
+ * - `awsRegion` is the Region of the stream ARN given
+ *
+ * The casing is the event's own rather than a scheme: `eventID` has a capital
+ * ID, `eventSourceARN` a capital ARN, `dynamodb` none, and the block inside it
+ * is capitalized. All of it is what a function receives.
+ *
+ * `SizeBytes` is a plausible default rather than a measurement of the images
+ * given, so a test asserting on it should say what it expects.
+ */
+export const lambdaDynamoDbStreamEventRecordFactory = new DynamicFactory((overrides = {}) => {
+    const eventSourceArn = overrides.eventSourceARN ?? defaultStreamArn();
+    const change = streamRecordChange(overrides);
+    return {
+        eventID: faker.string.hexadecimal({
+            length: 32,
+            casing: "lower",
+            prefix: "",
+        }),
+        eventName: change.eventName,
+        eventVersion: "1.1",
+        eventSource: "aws:dynamodb",
+        awsRegion: streamArnRegion(eventSourceArn),
+        dynamodb: {
+            ApproximateCreationDateTime: Math.floor(Date.now() / millisecondsPerSecond),
+            ...change.images,
+            SequenceNumber: "100000000000000000000",
+            SizeBytes: 64,
+            StreamViewType: change.streamViewType,
+        },
+        eventSourceARN: eventSourceArn,
+    };
+});
+/**
+ * Makes the event a DynamoDB stream event source mapping invokes a function
+ * with.
+ *
+ * The default is the single-record batch a stream delivers when one item has
+ * changed. A batch is the records a test asks for, each completed by
+ * `lambdaDynamoDbStreamEventRecordFactory`:
+ *
+ * ```typescript
+ * lambdaDynamoDbStreamEventFactory.make({
+ *   Records: [{ eventName: "INSERT" }, { eventName: "REMOVE" }],
+ * });
+ * ```
+ */
+export const lambdaDynamoDbStreamEventFactory = new SimRecordsEventFactory(lambdaDynamoDbStreamEventRecordFactory);
+/**
+ * The Region a DynamoDB stream ARN names, which is the Region its records
+ * report.
+ */
+function streamArnRegion(streamArn) {
+    return streamArn.split(":", 4)[3] ?? DEFAULT_SIM_AWS_REGION_NAME;
+}
+//# sourceMappingURL=lambda-dynamodb-stream-event.factory.js.map

package/dist/service/lambda/factory/lambda-dynamodb-stream-event.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-dynamodb-stream-event.factory.js","sourceRoot":"","sources":["../../../../src/service/lambda/factory/lambda-dynamodb-stream-event.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAoB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAK1E,OAAO,EAEL,kBAAkB,GACnB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB;IACvB,OAAO,CACL,oBAAoB,2BAA2B,IAAI,0BAA0B,EAAE;QAC/E,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,IAAI,cAAc,CAAqC,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE;IACxE,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,IAAI,gBAAgB,EAAE,CAAC;IACtE,MAAM,MAAM,GAAuB,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAEjE,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAChC,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,EAAE;SACX,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE,eAAe,CAAC,cAAc,CAAC;QAC1C,QAAQ,EAAE;YACR,2BAA2B,EAAE,IAAI,CAAC,KAAK,CACrC,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CACnC;YACD,GAAG,MAAM,CAAC,MAAM;YAChB,cAAc,EAAE,uBAAuB;YACvC,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC;QACD,cAAc,EAAE,cAAc;KAC/B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,IAAI,sBAAsB,CAAC,sCAAsC,CAAC,CAAC;AAErE;;;GAGG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,2BAA2B,CAAC;AACnE,CAAC"}

package/dist/service/lambda/factory/lambda-dynamodb-stream-record-change.d.ts

@@ -0,0 +1,36 @@
+import type { DeepPartialObject } from "@kensio/part-factory";
+import type { SimLambdaDynamoDbEventImage, SimLambdaDynamoDbStreamEventRecord } from "../event-source/poll/sim-lambda-dynamodb-stream-event.types.js";
+type StreamRecordOverrides = DeepPartialObject<SimLambdaDynamoDbStreamEventRecord>;
+/**
+ * The images one record carries by default, which is what the change is.
+ *
+ * All three are optional because an image the test described itself is left
+ * out of the defaults entirely. Overrides are merged onto defaults key by key,
+ * so a default image left in would reach the record as the test's item merged
+ * with this one, carrying attributes and even keys the test never mentioned.
+ */
+interface StreamRecordImages {
+    readonly Keys?: SimLambdaDynamoDbEventImage;
+    readonly NewImage?: SimLambdaDynamoDbEventImage;
+    readonly OldImage?: SimLambdaDynamoDbEventImage;
+}
+/**
+ * The change a made record reports, with the images and the view type that go
+ * with it.
+ */
+export interface StreamRecordChange {
+    readonly eventName: string;
+    readonly images: StreamRecordImages;
+    readonly streamViewType: string;
+}
+/**
+ * Work out the change a record reports from what a test said about it.
+ *
+ * An `INSERT` carries a new image, a `REMOVE` an old one and a `MODIFY` both,
+ * because that is what each of them means, and a record whose images disagree
+ * with its event name is one no stream delivers. The view type then names the
+ * images the record ends up carrying, including any the test supplied itself.
+ */
+export declare function streamRecordChange(overrides: StreamRecordOverrides): StreamRecordChange;
+export {};
+//# sourceMappingURL=lambda-dynamodb-stream-record-change.d.ts.map

package/dist/service/lambda/factory/lambda-dynamodb-stream-record-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-dynamodb-stream-record-change.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/factory/lambda-dynamodb-stream-record-change.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EACV,2BAA2B,EAC3B,kCAAkC,EACnC,MAAM,gEAAgE,CAAC;AAExE,KAAK,qBAAqB,GACxB,iBAAiB,CAAC,kCAAkC,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;CACjD;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAYD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,qBAAqB,GAC/B,kBAAkB,CA6BpB"}

package/dist/service/lambda/factory/lambda-dynamodb-stream-record-change.js

@@ -0,0 +1,64 @@
+const keys = { orderId: { S: "YL-1" } };
+const placedOrder = {
+    orderId: { S: "YL-1" },
+    status: { S: "placed" },
+};
+const shippedOrder = {
+    orderId: { S: "YL-1" },
+    status: { S: "shipped" },
+};
+/**
+ * Work out the change a record reports from what a test said about it.
+ *
+ * An `INSERT` carries a new image, a `REMOVE` an old one and a `MODIFY` both,
+ * because that is what each of them means, and a record whose images disagree
+ * with its event name is one no stream delivers. The view type then names the
+ * images the record ends up carrying, including any the test supplied itself.
+ */
+export function streamRecordChange(overrides) {
+    const eventName = overrides.eventName ?? "INSERT";
+    const body = overrides.dynamodb ?? {};
+    // Mentioning an image as `undefined` is how a test says a record carries
+    // none, so what is asked here is whether the test named the image at all
+    // rather than whether it gave a value for it.
+    const namedKeys = Object.hasOwn(body, "Keys");
+    const namedNew = Object.hasOwn(body, "NewImage");
+    const namedOld = Object.hasOwn(body, "OldImage");
+    const carriesNew = namedNew
+        ? body.NewImage !== undefined
+        : eventName !== "REMOVE";
+    const carriesOld = namedOld
+        ? body.OldImage !== undefined
+        : eventName !== "INSERT";
+    return {
+        eventName,
+        // An image the test described is left out here and comes from the
+        // overrides whole, rather than being merged onto one of these.
+        images: {
+            ...(!namedKeys && { Keys: keys }),
+            ...(carriesNew && !namedNew && { NewImage: newImageFor(eventName) }),
+            ...(carriesOld && !namedOld && { OldImage: oldImageFor(eventName) }),
+        },
+        streamViewType: streamViewType(carriesNew, carriesOld),
+    };
+}
+function newImageFor(eventName) {
+    return eventName === "MODIFY" ? shippedOrder : placedOrder;
+}
+function oldImageFor(eventName) {
+    return eventName === "REMOVE" ? shippedOrder : placedOrder;
+}
+/**
+ * The view type naming the images a record carries, as real DynamoDB reports
+ * the view type its stream was enabled with.
+ */
+function streamViewType(carriesNew, carriesOld) {
+    if (carriesNew && carriesOld) {
+        return "NEW_AND_OLD_IMAGES";
+    }
+    if (carriesNew) {
+        return "NEW_IMAGE";
+    }
+    return carriesOld ? "OLD_IMAGE" : "KEYS_ONLY";
+}
+//# sourceMappingURL=lambda-dynamodb-stream-record-change.js.map

package/dist/service/lambda/factory/lambda-dynamodb-stream-record-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-dynamodb-stream-record-change.js","sourceRoot":"","sources":["../../../../src/service/lambda/factory/lambda-dynamodb-stream-record-change.ts"],"names":[],"mappings":"AAkCA,MAAM,IAAI,GAAgC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;AACrE,MAAM,WAAW,GAAgC;IAC/C,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE;IACtB,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE;CACxB,CAAC;AACF,MAAM,YAAY,GAAgC;IAChD,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE;IACtB,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE;CACzB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAgC;IAEhC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEtC,yEAAyE;IACzE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,QAAQ;QACzB,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC7B,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;IAC3B,MAAM,UAAU,GAAG,QAAQ;QACzB,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC7B,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;IAE3B,OAAO;QACL,SAAS;QACT,kEAAkE;QAClE,+DAA+D;QAC/D,MAAM,EAAE;YACN,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;SACrE;QACD,cAAc,EAAE,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,UAAmB,EAAE,UAAmB;IAC9D,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAChD,CAAC"}