@kensio/yulin 1.16.0 → 1.16.2

package/dist/service/cognito/serve/page/sim-cognito-provider-links.js

@@ -0,0 +1,18 @@
+import { simCognitoAuthorizePath } from "./sim-cognito-page-paths.js";
+/**
+ * One link per identity provider this app client offers, each starting the
+ * federated sign-in the authorize endpoint already answers.
+ *
+ * A provider the client left out of its `SupportedIdentityProviders` is left
+ * off the page, because the authorize request the link would make is one that
+ * endpoint refuses.
+ */
+export function simCognitoProviderLinks(markup, pool, parameters) {
+    const clientId = parameters["client_id"];
+    const client = clientId === undefined ? undefined : pool.findClient(clientId);
+    return pool.auth.identityProviders.all
+        .filter((provider) => client?.oauth.allowsIdentityProvider(provider.name) ?? false)
+        .map((provider) => markup.link(simCognitoAuthorizePath, { ...parameters, identity_provider: provider.name }, `Sign in with ${provider.name}`))
+        .join("");
+}
+//# sourceMappingURL=sim-cognito-provider-links.js.map

package/dist/service/cognito/serve/page/sim-cognito-provider-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-provider-links.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-provider-links.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,IAAwB,EACxB,UAAoC;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE9E,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG;SACnC,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAC/D;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,EAAE,GAAG,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnD,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAChC,CACF;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.d.ts

@@ -0,0 +1,27 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+/**
+ * The form that finishes a password reset, reached from the one that started
+ * it.
+ *
+ * It takes the code the pool issued and the password the person has chosen,
+ * and posts both to `ConfirmForgotPassword`. A wrong code and a password the
+ * pool's policy turns down are both shown on the form, which is where the
+ * person can do something about them.
+ *
+ * Nothing here delivers a code to anybody. The pool records the message it
+ * would have sent, and `SimCognitoUserPool.confirmationCode` is where a test
+ * reads it from, which is where a person would have read it out of an inbox.
+ */
+export declare class SimCognitoResetPasswordPage {
+    private readonly markup;
+    /**
+     * The page, or the reset its form has just finished.
+     */
+    handle(form: SimCognitoPageForm): Promise<Response>;
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    private render;
+}
+//# sourceMappingURL=sim-cognito-reset-password-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-reset-password-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-reset-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsBxD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAwBf"}

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.js

@@ -0,0 +1,65 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPageMarkup } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoResetPasswordPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The form that finishes a password reset, reached from the one that started
+ * it.
+ *
+ * It takes the code the pool issued and the password the person has chosen,
+ * and posts both to `ConfirmForgotPassword`. A wrong code and a password the
+ * pool's policy turns down are both shown on the form, which is where the
+ * person can do something about them.
+ *
+ * Nothing here delivers a code to anybody. The pool records the message it
+ * would have sent, and `SimCognitoUserPool.confirmationCode` is where a test
+ * reads it from, which is where a person would have read it out of an inbox.
+ */
+export class SimCognitoResetPasswordPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The page, or the reset its form has just finished.
+     */
+    async handle(form) {
+        if (!form.isPosted) {
+            return this.render(form);
+        }
+        try {
+            await form.cognito.confirmForgotPassword({
+                input: {
+                    ClientId: form.clientId,
+                    Username: form.username,
+                    ConfirmationCode: form.field("code"),
+                    Password: form.field("password"),
+                    ...form.secretHash(),
+                },
+            });
+        }
+        catch (error) {
+            return this.render(form, SimCognitoPageForm.messageIn(error));
+        }
+        // The user signs in with its new password at the endpoint the browser
+        // arrived on, which is where the grant it started carries on from.
+        return this.markup.redirect(simCognitoAuthorizePath, form.parameters);
+    }
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    render(form, message) {
+        const { parameters, username } = form;
+        // The page that started the reset names the user, and a browser that came
+        // here from a link instead has to say who it is.
+        const user = username === ""
+            ? this.markup.field("username", "Username")
+            : this.markup.hidden({ username });
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoResetPasswordPath, this.markup.hidden(parameters) +
+                user +
+                this.markup.field("code", "Reset code") +
+                this.markup.field("password", "New password", "password") +
+                this.markup.submit("reset", "Set the new password")) +
+            this.markup.link(simCognitoAuthorizePath, parameters, "Back to sign in");
+        return this.markup.page("Choose a new password", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-reset-password-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-reset-password-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-reset-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;gBACvC,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBACpC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;oBAChC,GAAG,IAAI,CAAC,UAAU,EAAE;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,IAAwB,EAAE,OAAgB;QACvD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAEtC,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,IAAI,GACR,QAAQ,KAAK,EAAE;YACb,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEvC,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,EAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI;gBACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB,CAAC,CACtD;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts

@@ -0,0 +1,20 @@
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import { type SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
+/**
+ * The sign-in form managed login answers an authorize request with.
+ *
+ * The form posts back to the authorize endpoint, carrying the parameters the
+ * browser arrived on as hidden inputs and the two fields the person filled in.
+ * The pool's identity providers are links to the same endpoint with
+ * `identity_provider` set, so both ways in are reachable from this one page,
+ * and the other pages of the journey are links beside them.
+ */
+export declare class SimCognitoSignInPage {
+    private readonly markup;
+    /**
+     * The page a browser is answered with, with a message where a sign-in has
+     * already been refused once.
+     */
+    render(pool: SimCognitoUserPool, parameters: SimCognitoPageParameters, message?: string): Response;
+}
+//# sourceMappingURL=sim-cognito-sign-in-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAkBtC;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,wBAAwB,EACpC,OAAO,CAAC,EAAE,MAAM,GACf,QAAQ,CAgBV;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js

@@ -0,0 +1,40 @@
+import { SimCognitoPageMarkup, } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoForgotPasswordPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+import { simCognitoProviderLinks } from "./sim-cognito-provider-links.js";
+/**
+ * The other pages the sign-in form links to, in the order they are offered.
+ */
+const linkedPages = [
+    [simCognitoSignUpPath, "Sign up"],
+    [simCognitoConfirmPath, "Confirm a sign-up"],
+    [simCognitoForgotPasswordPath, "Forgotten your password?"],
+];
+/**
+ * The sign-in form managed login answers an authorize request with.
+ *
+ * The form posts back to the authorize endpoint, carrying the parameters the
+ * browser arrived on as hidden inputs and the two fields the person filled in.
+ * The pool's identity providers are links to the same endpoint with
+ * `identity_provider` set, so both ways in are reachable from this one page,
+ * and the other pages of the journey are links beside them.
+ */
+export class SimCognitoSignInPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The page a browser is answered with, with a message where a sign-in has
+     * already been refused once.
+     */
+    render(pool, parameters, message) {
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoAuthorizePath, this.markup.hidden(parameters) +
+                this.markup.field("username", "Username") +
+                this.markup.field("password", "Password", "password") +
+                this.markup.submit("signIn", "Sign in")) +
+            simCognitoProviderLinks(this.markup, pool, parameters) +
+            linkedPages
+                .map(([path, text]) => this.markup.link(path, parameters, text))
+                .join("");
+        return this.markup.page("Sign in", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-in-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,GAA2C;IAC1D,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACjC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;IAC5C,CAAC,4BAA4B,EAAE,0BAA0B,CAAC;CAC3D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAwB,EACxB,UAAoC,EACpC,OAAgB;QAEhB,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC;YACtD,WAAW;iBACR,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;iBAC/D,IAAI,CAAC,EAAE,CAAC,CAAC;QAEd,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.d.ts

@@ -0,0 +1,35 @@
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+/**
+ * The sign-up form, reached from a link on the sign-in page.
+ *
+ * The form asks for a username, a password and the attributes the pool needs
+ * of a new user. Those are the ones its `Schema` made required, and the ones
+ * its `AutoVerifiedAttributes` names, because the second is where the
+ * confirmation code would have been delivered.
+ *
+ * Posting it is `SignUp`, called as an application calls it. A refusal is
+ * shown on the form, which is what managed login does with a password the
+ * pool's policy turns down.
+ */
+export declare class SimCognitoSignUpPage {
+    private readonly markup;
+    /**
+     * The attributes this pool's sign-up form asks for.
+     */
+    static attributeNames(pool: SimCognitoUserPool): readonly string[];
+    /**
+     * The attributes the form asked for, as `SignUp` takes them.
+     */
+    private static attributesIn;
+    /**
+     * The page, or the sign-up its form has just posted.
+     */
+    handle(form: SimCognitoPageForm): Promise<Response>;
+    /**
+     * The page a browser is answered with, with a message where a sign-up has
+     * already been refused once.
+     */
+    private render;
+}
+//# sourceMappingURL=sim-cognito-sign-up-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-up-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-up-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQhE;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,SAAS,MAAM,EAAE,CAYjE;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAQ3B;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuBxD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAoBf"}

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.js

@@ -0,0 +1,85 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPageMarkup } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The sign-up form, reached from a link on the sign-in page.
+ *
+ * The form asks for a username, a password and the attributes the pool needs
+ * of a new user. Those are the ones its `Schema` made required, and the ones
+ * its `AutoVerifiedAttributes` names, because the second is where the
+ * confirmation code would have been delivered.
+ *
+ * Posting it is `SignUp`, called as an application calls it. A refusal is
+ * shown on the form, which is what managed login does with a password the
+ * pool's policy turns down.
+ */
+export class SimCognitoSignUpPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The attributes this pool's sign-up form asks for.
+     */
+    static attributeNames(pool) {
+        const { schema, autoVerifiedAttributes, usernameAttributes } = pool.settings;
+        const asked = new Set([
+            ...schema.requiredNames,
+            ...autoVerifiedAttributes.names,
+        ]);
+        // A pool signing users in by an address takes that address as the
+        // username, so asking for it again would be asking the same question
+        // twice.
+        return [...asked.difference(new Set(usernameAttributes.names))];
+    }
+    /**
+     * The attributes the form asked for, as `SignUp` takes them.
+     */
+    static attributesIn(form) {
+        return this.attributeNames(form.pool)
+            .map((name) => ({ Name: name, Value: form.field(name) }))
+            .filter((attribute) => (attribute.Value ?? "") !== "");
+    }
+    /**
+     * The page, or the sign-up its form has just posted.
+     */
+    async handle(form) {
+        if (!form.isPosted) {
+            return this.render(form);
+        }
+        try {
+            await form.cognito.signUp({
+                input: {
+                    ClientId: form.clientId,
+                    Username: form.username,
+                    Password: form.field("password"),
+                    UserAttributes: SimCognitoSignUpPage.attributesIn(form),
+                    ...form.secretHash(),
+                },
+            });
+        }
+        catch (error) {
+            return this.render(form, SimCognitoPageForm.messageIn(error));
+        }
+        return this.markup.redirect(simCognitoConfirmPath, {
+            ...form.parameters,
+            username: form.username,
+        });
+    }
+    /**
+     * The page a browser is answered with, with a message where a sign-up has
+     * already been refused once.
+     */
+    render(form, message) {
+        const { parameters } = form;
+        const attributes = SimCognitoSignUpPage.attributeNames(form.pool)
+            .map((name) => this.markup.field(name, name))
+            .join("");
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoSignUpPath, this.markup.hidden(parameters) +
+                this.markup.field("username", "Username") +
+                this.markup.field("password", "Password", "password") +
+                attributes +
+                this.markup.submit("signUp", "Sign up")) +
+            this.markup.link(simCognitoAuthorizePath, parameters, "Back to sign in");
+        return this.markup.page("Sign up", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-up-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-up-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-up-page.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAwB;QAC5C,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,GAC1D,IAAI,CAAC,QAAQ,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;YACpB,GAAG,MAAM,CAAC,aAAa;YACvB,GAAG,sBAAsB,CAAC,KAAK;SAChC,CAAC,CAAC;QAEH,kEAAkE;QAClE,qEAAqE;QACrE,SAAS;QACT,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,YAAY,CACzB,IAAwB;QAExB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACxD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;oBAChC,cAAc,EAAE,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC;oBACvD,GAAG,IAAI,CAAC,UAAU,EAAE;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE;YACjD,GAAG,IAAI,CAAC,UAAU;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,IAAwB,EAAE,OAAgB;QACvD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aAC9D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAC5C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oBAAoB,EACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,UAAU;gBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.d.ts

@@ -1,35 +1,35 @@
-import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
-import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
-import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoDomainRequest } from "./sim-cognito-domain-request.js";
+export type { SimCognitoDomainRequest } from "./sim-cognito-domain-request.js";
 /**
- * One request to a hosted domain, and what answers it.
- */
-export interface SimCognitoDomainRequest {
-    readonly pool: SimCognitoUserPool;
-    /** The simulated Cognito scope the pool belongs to. */
-    readonly cognito: SimCognitoIdentityProvider;
-    readonly serviceRequest: SimAwsServiceRequest;
-    readonly url: URL;
-}
-/**
- * The three endpoints a pool's hosted domain serves.
+ * The endpoints and pages a pool's hosted domain serves.
  *
- * Each takes one HTTP method and one only, as real Cognito's do, and turns
- * what the simulation answered into the redirect or the JSON body a browser or
- * an application's own server reads.
+ * The token and logout endpoints take one HTTP method each, as real Cognito's
+ * do. The authorize endpoint takes the post of the sign-in form it serves as
+ * well as the get an application sends the browser on, and so do the two pages
+ * reached from that form.
  */
 export declare class SimCognitoDomainEndpoints {
     private readonly response;
     private readonly tokenRequest;
+    private readonly pageRequest;
+    private readonly pages;
     /**
      * Answer a request that reached the domain's hostname.
      */
     handleRequest(request: SimCognitoDomainRequest): Promise<Response>;
     /**
-     * Sign a user in through an identity provider and send the browser back to
-     * the application with a code.
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     *
+     * A get carrying credentials and a post of the sign-in form are the same
+     * request to the simulation. Both name the user and its password, and the
+     * only difference is where those two were read from.
      */
     private authorize;
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    private refused;
     /**
      * Exchange an authorization code or a refresh token for tokens.
      */
@@ -39,10 +39,7 @@ export declare class SimCognitoDomainEndpoints {
      */
     private logout;
     /**
-     * Answer a request that used the method its endpoint takes.
-     *
-     * Each endpoint takes one method and one only, as real Cognito's do, so what
-     * is left to say about any other is which one it was.
+     * Answer a request that used a method its endpoint takes.
      */
     private answered;
 }

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-domain-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAWhF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAElC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAE7D;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBvE;IAED;;;OAGG;YACW,SAAS;IAkBvB;;OAEG;YACW,KAAK;IAenB;;OAEG;YACW,MAAM;IAcpB;;;;;OAKG;YACW,QAAQ;CAavB"}
+{"version":3,"file":"sim-cognito-domain-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAgB/E,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsBvE;IAED;;;;;;;OAOG;YACW,SAAS;IAiBvB;;OAEG;IACH,OAAO,CAAC,OAAO;IAef;;OAEG;YACW,KAAK;IAenB;;OAEG;YACW,MAAM;IAcpB;;OAEG;YACW,QAAQ;CAavB"}

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.js

@@ -1,27 +1,37 @@
+import { SimCognitoManagedLogin } from "./page/sim-cognito-managed-login.js";
+import { simCognitoAuthorizePath } from "./page/sim-cognito-page-paths.js";
+import { SimCognitoPageRequest } from "./page/sim-cognito-page-request.js";
 import { SimCognitoOAuthResponse } from "./sim-cognito-oauth-response.js";
 import { SimCognitoTokenRequest } from "./sim-cognito-token-request.js";
 /**
- * The paths a hosted domain serves.
+ * The remaining paths a hosted domain serves.
  */
-const authorizePath = "/oauth2/authorize";
 const tokenPath = "/oauth2/token";
 const logoutPath = "/logout";
 /**
- * The three endpoints a pool's hosted domain serves.
+ * The methods a page takes, which is both of them, because a form is fetched
+ * and then posted back.
+ */
+const pageMethods = "GET, POST";
+/**
+ * The endpoints and pages a pool's hosted domain serves.
  *
- * Each takes one HTTP method and one only, as real Cognito's do, and turns
- * what the simulation answered into the redirect or the JSON body a browser or
- * an application's own server reads.
+ * The token and logout endpoints take one HTTP method each, as real Cognito's
+ * do. The authorize endpoint takes the post of the sign-in form it serves as
+ * well as the get an application sends the browser on, and so do the two pages
+ * reached from that form.
  */
 export class SimCognitoDomainEndpoints {
     response = new SimCognitoOAuthResponse();
     tokenRequest = new SimCognitoTokenRequest();
+    pageRequest = new SimCognitoPageRequest();
+    pages = new SimCognitoManagedLogin();
     /**
      * Answer a request that reached the domain's hostname.
      */
     async handleRequest(request) {
         const { pathname } = request.url;
-        if (pathname === authorizePath) {
+        if (pathname === simCognitoAuthorizePath) {
             return await this.authorize(request);
         }
         if (pathname === tokenPath) {
@@ -30,23 +40,37 @@ export class SimCognitoDomainEndpoints {
         if (pathname === logoutPath) {
             return await this.logout(request);
         }
+        if (SimCognitoManagedLogin.servesPage(pathname)) {
+            return await this.answered(request, pageMethods, async () => this.pages.handlePage(request));
+        }
         return this.response.noSuchEndpoint(pathname);
     }
     /**
-     * Sign a user in through an identity provider and send the browser back to
-     * the application with a code.
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     *
+     * A get carrying credentials and a post of the sign-in form are the same
+     * request to the simulation. Both name the user and its password, and the
+     * only difference is where those two were read from.
      */
     async authorize(request) {
-        const parameters = Object.fromEntries(request.url.searchParams);
-        return await this.answered(request, "GET", async () => {
+        return await this.answered(request, pageMethods, async () => {
+            const parameters = this.pageRequest.values(request.serviceRequest, request.url);
             try {
                 return this.response.redirect(await request.cognito.hostedAuthorize(request.pool, parameters));
             }
             catch (error) {
-                return this.response.refusedRedirect(error, parameters["redirect_uri"], parameters["state"]);
+                return this.refused(request, parameters, error);
             }
         });
     }
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    refused(request, parameters, error) {
+        return (this.pages.refusedSignIn(request, parameters, error) ??
+            this.response.refusedRedirect(error, parameters["redirect_uri"], parameters["state"]));
+    }
     /**
      * Exchange an authorization code or a refresh token for tokens.
      */
@@ -75,15 +99,12 @@ export class SimCognitoDomainEndpoints {
         });
     }
     /**
-     * Answer a request that used the method its endpoint takes.
-     *
-     * Each endpoint takes one method and one only, as real Cognito's do, so what
-     * is left to say about any other is which one it was.
+     * Answer a request that used a method its endpoint takes.
      */
-    async answered(request, method, answer) {
+    async answered(request, allowed, answer) {
         const requested = request.serviceRequest.request.method;
-        if (requested !== method) {
-            return this.response.notAllowed(requested, method);
+        if (!allowed.split(", ").includes(requested)) {
+            return this.response.notAllowed(requested, allowed);
         }
         return await answer();
     }

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-domain-endpoints.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;GAEG;AACH,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,UAAU,GAAG,SAAS,CAAC;AAc7B;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzC,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE7D;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,SAAS,CAAC,OAAgC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAClC,KAAK,EACL,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,OAAO,CAAC,CACpB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,OAAgC;QAClD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CACzB,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAC/B,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAC/C,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAAC,OAAgC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,QAAQ,CACpB,OAAgC,EAChC,MAAc,EACd,MAA+B;QAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAExD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-domain-endpoints.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;GAEG;AACH,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;GAGG;AACH,MAAM,WAAW,GAAG,WAAW,CAAC;AAIhC;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzC,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC5C,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEtD;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACzC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,SAAS,CAAC,OAAgC;QACtD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,GAAG,CACZ,CAAC;YAEF,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,OAAO,CACb,OAAgC,EAChC,UAAoC,EACpC,KAAc;QAEd,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC3B,KAAK,EACL,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,OAAO,CAAC,CACpB,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,OAAgC;QAClD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CACzB,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAC/B,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAC/C,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAAC,OAAgC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CACpB,OAAgC,EAChC,OAAe,EACf,MAA+B;QAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAExD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-domain-request.d.ts

@@ -0,0 +1,14 @@
+import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+/**
+ * One request to a hosted domain, and what answers it.
+ */
+export interface SimCognitoDomainRequest {
+    readonly pool: SimCognitoUserPool;
+    /** The simulated Cognito scope the pool belongs to. */
+    readonly cognito: SimCognitoIdentityProvider;
+    readonly serviceRequest: SimAwsServiceRequest;
+    readonly url: URL;
+}
+//# sourceMappingURL=sim-cognito-domain-request.d.ts.map

package/dist/service/cognito/serve/sim-cognito-domain-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-request.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAElC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB"}

package/dist/service/cognito/serve/sim-cognito-domain-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cognito-domain-request.js.map

package/dist/service/cognito/serve/sim-cognito-domain-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-request.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-request.ts"],"names":[],"mappings":""}

package/dist/service/cognito/sim-cognito-user-directory.d.ts

@@ -40,6 +40,22 @@ export declare abstract class SimCognitoUserDirectory extends SimCognitoUserFact
      * Handle an AdminConfirmSignUp Command from the SDK.
      */
     adminConfirmSignUp(command: simCognitoCommands.SimAdminConfirmSignUpCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminConfirmSignUpCommandOutput>;
+    /**
+     * Handle a ForgotPassword Command from the SDK.
+     *
+     * No caller is read, because real Cognito authorizes this operation with no
+     * IAM policy at all: it is what an application calls for someone who cannot
+     * sign in and holds no AWS credentials.
+     */
+    forgotPassword(command: simCognitoCommands.SimForgotPasswordCommand): Promise<simCognitoCommands.SimForgotPasswordCommandOutput>;
+    /**
+     * Handle a ConfirmForgotPassword Command from the SDK.
+     */
+    confirmForgotPassword(command: simCognitoCommands.SimConfirmForgotPasswordCommand): Promise<simCognitoCommands.SimConfirmForgotPasswordCommandOutput>;
+    /**
+     * Handle an AdminResetUserPassword Command from the SDK.
+     */
+    adminResetUserPassword(command: simCognitoCommands.SimAdminResetUserPasswordCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminResetUserPasswordCommandOutput>;
     /**
      * Handle an AdminGetUser Command from the SDK.
      */

package/dist/service/cognito/sim-cognito-user-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,KAAK,wCAAwC,EAC9C,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,uBAAwB,SAAQ,qBAAqB;IACzE,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}
+{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,KAAK,wCAAwC,EAC9C,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,uBAAwB,SAAQ,qBAAqB;IACzE,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;;;;;OAMG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,GACnD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,kBAAkB,CAAC,+BAA+B,GAC1D,OAAO,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAGnE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}