@kensio/yulin 1.16.1 → 1.16.2

package/dist/service/cognito/sim-cognito-user-directory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-directory.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC;AASvC;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,uBAAwB,SAAQ,qBAAqB;IACzE,YAAsB,UAA6C;QACjE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD;QAEnD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAwD,EACxD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkD,EAClD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA+D,EAC/D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA+C,EAC/C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,OAA8C,EAC9C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAgD,EAChD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD,EACzD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-directory.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC;AASvC;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,uBAAwB,SAAQ,qBAAqB;IACzE,YAAsB,UAA6C;QACjE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD;QAEnD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAwD,EACxD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD;QAEpD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAA2D;QAE3D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkD,EAClD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA+D,EAC/D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA+C,EAC/C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,OAA8C,EAC9C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAgD,EAChD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD,EACzD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-sign-in.d.ts

@@ -27,6 +27,15 @@ export declare function requireSimCognitoEnabled(user: SimCognitoUser): void;
  * actually missing, so an application can send it to `ConfirmSignUp`.
  */
 export declare function requireSimCognitoConfirmed(user: SimCognitoUser): void;
+/**
+ * Refuse a sign-in by a user whose password an administrator has reset.
+ *
+ * This is checked alongside the confirmation, and for the same reason: the
+ * user is told what is actually missing, so an application can send it to
+ * `ConfirmForgotPassword` with the code the reset issued rather than back to
+ * the password field.
+ */
+export declare function requireSimCognitoPasswordSet(user: SimCognitoUser): void;
 /**
  * Refuse a sign-in the user cannot make.
  *

package/dist/service/cognito/user-pool/auth/sim-cognito-sign-in.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-sign-in.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,wBAAwB,EAChC,QAAQ,EAAE,MAAM,GACf,cAAc,CAgBhB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,cAAc,EACpB,QAAQ,EAAE,MAAM,GACf,IAAI,CAQN"}
+{"version":3,"file":"sim-cognito-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-sign-in.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,wBAAwB,EAChC,QAAQ,EAAE,MAAM,GACf,cAAc,CAgBhB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAMvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,cAAc,EACpB,QAAQ,EAAE,MAAM,GACf,IAAI,CAQN"}

package/dist/service/cognito/user-pool/auth/sim-cognito-sign-in.js

@@ -1,4 +1,4 @@
-import { SimCognitoNotAuthorizedException, SimCognitoUserNotConfirmedException, } from "../../error/sim-cognito.error.js";
+import { SimCognitoNotAuthorizedException, SimCognitoPasswordResetRequiredException, SimCognitoUserNotConfirmedException, } from "../../error/sim-cognito.error.js";
 import { requireSimCognitoUsername } from "../user/sim-cognito-username.js";
 /**
  * Resolve the user a sign-in names, as the app client reports one that is not
@@ -44,6 +44,19 @@ export function requireSimCognitoConfirmed(user) {
         throw new SimCognitoUserNotConfirmedException("User is not confirmed.");
     }
 }
+/**
+ * Refuse a sign-in by a user whose password an administrator has reset.
+ *
+ * This is checked alongside the confirmation, and for the same reason: the
+ * user is told what is actually missing, so an application can send it to
+ * `ConfirmForgotPassword` with the code the reset issued rather than back to
+ * the password field.
+ */
+export function requireSimCognitoPasswordSet(user) {
+    if (user.status.mustResetPassword) {
+        throw new SimCognitoPasswordResetRequiredException("Password reset required for the user.");
+    }
+}
 /**
  * Refuse a sign-in the user cannot make.
  *

package/dist/service/cognito/user-pool/auth/sim-cognito-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAwB,EACxB,MAAgC,EAChC,QAAgB;IAEhB,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,CAClC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAoB;IAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,gCAAgC,CAAC,mBAAmB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAoB;IAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,mCAAmC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAoB,EACpB,QAAgB;IAEhB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,CAClC,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-cognito-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,wCAAwC,EACxC,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAwB,EACxB,MAAgC,EAChC,QAAgB;IAEhB,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,CAClC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAoB;IAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,gCAAgC,CAAC,mBAAmB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAoB;IAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,mCAAmC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAoB;IAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,IAAI,wCAAwC,CAChD,uCAAuC,CACxC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAoB,EACpB,QAAgB;IAEhB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,CAClC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/service/cognito/user-pool/idp/sim-cognito-federated-identity.d.ts

@@ -1,3 +1,4 @@
+import type { SimCognitoAttributeType } from "../user/sim-cognito-user-attributes.js";
 /**
  * One entry of a user's `identities`, in the shape an id token carries it.
  *
@@ -59,6 +60,15 @@ export declare class SimCognitoFederatedIdentity {
      * holds is what the token claim holds.
      */
     toAttributeValue(): string;
+    /**
+     * The `identities` attribute a federated user reports, as the one entry a
+     * described user carries it in.
+     *
+     * A local user has no such attribute at all, so this is a list rather than a
+     * single attribute: the user spreads whichever it has into the attributes it
+     * reports.
+     */
+    attributes(): readonly SimCognitoAttributeType[];
 }
 export {};
 //# sourceMappingURL=sim-cognito-federated-identity.d.ts.map

package/dist/service/cognito/user-pool/idp/sim-cognito-federated-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-federated-identity.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-federated-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,YAAY,UAAU,EAAE,qCAAqC,EAM5D;IAED;;;;;OAKG;IACH,OAAO,IAAI,uBAAuB,CASjC;IAED;;;;;;OAMG;IACH,gBAAgB,IAAI,MAAM,CAEzB;CACF"}
+{"version":3,"file":"sim-cognito-federated-identity.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-federated-identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,YAAY,UAAU,EAAE,qCAAqC,EAM5D;IAED;;;;;OAKG;IACH,OAAO,IAAI,uBAAuB,CASjC;IAED;;;;;;OAMG;IACH,gBAAgB,IAAI,MAAM,CAEzB;IAED;;;;;;;OAOG;IACH,UAAU,IAAI,SAAS,uBAAuB,EAAE,CAE/C;CACF"}

package/dist/service/cognito/user-pool/idp/sim-cognito-federated-identity.js

@@ -46,5 +46,16 @@ export class SimCognitoFederatedIdentity {
     toAttributeValue() {
         return JSON.stringify([this.toClaim()]);
     }
+    /**
+     * The `identities` attribute a federated user reports, as the one entry a
+     * described user carries it in.
+     *
+     * A local user has no such attribute at all, so this is a list rather than a
+     * single attribute: the user spreads whichever it has into the attributes it
+     * reports.
+     */
+    attributes() {
+        return [{ Name: "identities", Value: this.toAttributeValue() }];
+    }
 }
 //# sourceMappingURL=sim-cognito-federated-identity.js.map

package/dist/service/cognito/user-pool/idp/sim-cognito-federated-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-federated-identity.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-federated-identity.ts"],"names":[],"mappings":"AAkCA;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACtB,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,MAAM,CAAgB;IACtB,WAAW,CAAS;IAEpC,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,OAAO;QACL,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-federated-identity.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-federated-identity.ts"],"names":[],"mappings":"AAoCA;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACtB,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,MAAM,CAAgB;IACtB,WAAW,CAAS;IAEpC,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,OAAO;QACL,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,UAAU;QACR,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/service/cognito/user-pool/message/sim-cognito-code-delivery.d.ts

@@ -0,0 +1,44 @@
+import type { SimCognitoMessageDelivery } from "./sim-cognito-message-delivery.js";
+import type { SimCognitoMessageMedium } from "./sim-cognito-sent-message.js";
+/**
+ * Where a pool sent a code, as the operation that sent it reports it back.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CodeDeliveryDetailsType.html
+ */
+export interface SimCognitoCodeDeliveryDetailsType {
+    readonly Destination?: string | undefined;
+    readonly DeliveryMedium?: string | undefined;
+    readonly AttributeName?: string | undefined;
+}
+/**
+ * The details a pool answers with for a message it has just sent.
+ *
+ * Real Cognito reports where a code went without reporting the address it went
+ * to, so the destination is masked. That masking is what makes the response
+ * safe to show a browser: an application prints it to say which address to go
+ * and look at, and someone who guessed the username learns nothing from it.
+ *
+ * The masked shape here follows real Cognito's rather than being read back
+ * from a live account, so assert that a destination came back and which
+ * medium carried it rather than on the mask itself.
+ */
+export declare function simCognitoCodeDelivery(delivery: SimCognitoMessageDelivery): SimCognitoCodeDeliveryDetailsType;
+/**
+ * The details a pool answers a reset for a user it does not hold with.
+ *
+ * An app client with `PreventUserExistenceErrors` of `ENABLED` answers a
+ * `ForgotPassword` naming an unknown user as though a code had gone out, which
+ * is what stops the operation being used to find out who has an account. Real
+ * Cognito makes up a destination for it, and so does this: there is no address
+ * behind it, so the username the request supplied is what gets masked.
+ */
+export declare function simCognitoHiddenCodeDelivery(username: string): SimCognitoCodeDeliveryDetailsType;
+/**
+ * One address with all but its first character and its last dotted part
+ * hidden, which is how Cognito writes an address it will not report.
+ *
+ * A phone number keeps its last four digits instead, because that is the part
+ * a person recognises their own number by.
+ */
+export declare function simCognitoMaskedDestination(recipient: string, medium: SimCognitoMessageMedium): string;
+//# sourceMappingURL=sim-cognito-code-delivery.d.ts.map

package/dist/service/cognito/user-pool/message/sim-cognito-code-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-code-delivery.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-code-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAE7E;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAeD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,yBAAyB,GAClC,iCAAiC,CASnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf,iCAAiC,CAMnC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAMR"}

package/dist/service/cognito/user-pool/message/sim-cognito-code-delivery.js

@@ -0,0 +1,78 @@
+/**
+ * How many characters of a phone number Cognito leaves showing.
+ */
+const shownDigits = 4;
+/**
+ * The attribute each medium is reached by, which is what a response names.
+ */
+const attributeNames = {
+    EMAIL: "email",
+    SMS: "phone_number",
+};
+/**
+ * The details a pool answers with for a message it has just sent.
+ *
+ * Real Cognito reports where a code went without reporting the address it went
+ * to, so the destination is masked. That masking is what makes the response
+ * safe to show a browser: an application prints it to say which address to go
+ * and look at, and someone who guessed the username learns nothing from it.
+ *
+ * The masked shape here follows real Cognito's rather than being read back
+ * from a live account, so assert that a destination came back and which
+ * medium carried it rather than on the mask itself.
+ */
+export function simCognitoCodeDelivery(delivery) {
+    return {
+        Destination: simCognitoMaskedDestination(delivery.recipient, delivery.medium),
+        DeliveryMedium: delivery.medium,
+        AttributeName: attributeNames[delivery.medium],
+    };
+}
+/**
+ * The details a pool answers a reset for a user it does not hold with.
+ *
+ * An app client with `PreventUserExistenceErrors` of `ENABLED` answers a
+ * `ForgotPassword` naming an unknown user as though a code had gone out, which
+ * is what stops the operation being used to find out who has an account. Real
+ * Cognito makes up a destination for it, and so does this: there is no address
+ * behind it, so the username the request supplied is what gets masked.
+ */
+export function simCognitoHiddenCodeDelivery(username) {
+    return {
+        Destination: simCognitoMaskedDestination(username, "EMAIL"),
+        DeliveryMedium: "EMAIL",
+        AttributeName: attributeNames.EMAIL,
+    };
+}
+/**
+ * One address with all but its first character and its last dotted part
+ * hidden, which is how Cognito writes an address it will not report.
+ *
+ * A phone number keeps its last four digits instead, because that is the part
+ * a person recognises their own number by.
+ */
+export function simCognitoMaskedDestination(recipient, medium) {
+    if (medium === "SMS") {
+        return maskedNumber(recipient);
+    }
+    return maskedAddress(recipient);
+}
+function maskedNumber(number) {
+    const shown = number.slice(-shownDigits);
+    return `${"*".repeat(Math.max(number.length - shownDigits, 0))}${shown}`;
+}
+function maskedAddress(address) {
+    const at = address.indexOf("@");
+    if (at === -1) {
+        return maskedPart(address);
+    }
+    const domain = address.slice(at + 1);
+    const dot = domain.indexOf(".");
+    const host = dot === -1 ? domain : domain.slice(0, dot);
+    const tail = dot === -1 ? "" : domain.slice(dot);
+    return `${maskedPart(address.slice(0, at))}@${maskedPart(host)}${tail}`;
+}
+function maskedPart(part) {
+    return `${part.slice(0, 1)}***`;
+}
+//# sourceMappingURL=sim-cognito-code-delivery.js.map

package/dist/service/cognito/user-pool/message/sim-cognito-code-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-code-delivery.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-code-delivery.ts"],"names":[],"mappings":"AAcA;;GAEG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,cAAc,GAAsD;IACxE,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,cAAc;CACpB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAmC;IAEnC,OAAO;QACL,WAAW,EAAE,2BAA2B,CACtC,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,CAChB;QACD,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,OAAO;QACL,WAAW,EAAE,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3D,cAAc,EAAE,OAAO;QACvB,aAAa,EAAE,cAAc,CAAC,KAAK;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,MAA+B;IAE/B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IAEzC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjD,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;AAClC,CAAC"}

package/dist/service/cognito/user-pool/message/sim-cognito-message-occasion.d.ts

@@ -1,14 +1,18 @@
 /**
  * What made a simulated user pool send a message.
  *
- * These are the four occasions this simulation reaches: a user signing itself
- * up, that user asking for another code, an administrator creating a user, and
- * a sign-in being challenged for a code sent by text message. Real Cognito
- * sends on more of them, a password reset among them, which is not simulated
- * here.
+ * These are the five occasions this simulation reaches: a user signing itself
+ * up, that user asking for another code, an administrator creating a user, a
+ * sign-in being challenged for a code sent by text message, and a password
+ * being reset. Real Cognito sends on more of them, an attribute being verified
+ * among them, which is not simulated here.
+ *
+ * `ForgotPassword` covers the reset an administrator starts as well as the one
+ * the user asks for, because real Cognito sends both under the one
+ * `CustomMessage_ForgotPassword` trigger source.
  *
  * `SimCognitoTriggerOccasion.customMessage` turns one of these into the
  * occasion the `CustomMessage` trigger fires for.
  */
-export type SimCognitoMessageOccasion = "SignUp" | "ResendCode" | "AdminCreateUser" | "Authentication";
+export type SimCognitoMessageOccasion = "SignUp" | "ResendCode" | "AdminCreateUser" | "Authentication" | "ForgotPassword";
 //# sourceMappingURL=sim-cognito-message-occasion.d.ts.map

package/dist/service/cognito/user-pool/message/sim-cognito-message-occasion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-message-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-message-occasion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,GACjC,QAAQ,GACR,YAAY,GACZ,iBAAiB,GACjB,gBAAgB,CAAC"}
+{"version":3,"file":"sim-cognito-message-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-message-occasion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,yBAAyB,GACjC,QAAQ,GACR,YAAY,GACZ,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,CAAC"}

package/dist/service/cognito/user-pool/message/sim-cognito-pool-messenger.d.ts

@@ -3,6 +3,7 @@ import type { SimCognitoUserPoolClient } from "../client/sim-cognito-user-pool-c
 import type { SimCognitoUserPool } from "../sim-cognito-user-pool.js";
 import type { SimCognitoUserPoolTriggers } from "../trigger/sim-cognito-user-pool-triggers.js";
 import type { SimCognitoUser } from "../user/sim-cognito-user.js";
+import { SimCognitoMessageDelivery } from "./sim-cognito-message-delivery.js";
 import type { SimCognitoMessageOccasion } from "./sim-cognito-message-occasion.js";
 interface SimCognitoPoolMessengerProperties {
     readonly triggers: SimCognitoUserPoolTriggers;
@@ -45,9 +46,11 @@ export declare class SimCognitoPoolMessenger {
      * `CustomMessage` trigger first so that a handler can write its own.
      *
      * A pool with nowhere to write to sends nothing, as one does on real
-     * Cognito, rather than recording a message addressed to no one.
+     * Cognito, rather than recording a message addressed to no one. Where a
+     * message did go out, the answer says where, because an operation reporting
+     * `CodeDeliveryDetails` has nowhere else to read that from.
      */
-    send(request: SimCognitoMessageRequest): Promise<void>;
+    send(request: SimCognitoMessageRequest): Promise<SimCognitoMessageDelivery | undefined>;
 }
 export {};
 //# sourceMappingURL=sim-cognito-pool-messenger.d.ts.map

package/dist/service/cognito/user-pool/message/sim-cognito-pool-messenger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-pool-messenger.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-pool-messenger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAKnF,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;GAEG;AACH,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;;;;;OAMG;IACG,IAAI,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4C3D;CACF"}
+{"version":3,"file":"sim-cognito-pool-messenger.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-pool-messenger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAKnF,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;GAEG;AACH,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;;;;;;;OAQG;IACG,IAAI,CACR,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CA8ChD;CACF"}

package/dist/service/cognito/user-pool/message/sim-cognito-pool-messenger.js

@@ -27,12 +27,14 @@ export class SimCognitoPoolMessenger {
      * `CustomMessage` trigger first so that a handler can write its own.
      *
      * A pool with nowhere to write to sends nothing, as one does on real
-     * Cognito, rather than recording a message addressed to no one.
+     * Cognito, rather than recording a message addressed to no one. Where a
+     * message did go out, the answer says where, because an operation reporting
+     * `CodeDeliveryDetails` has nowhere else to read that from.
      */
     async send(request) {
         const delivery = SimCognitoMessageDelivery.forOccasion(request.pool, request.user, request.occasion);
         if (delivery === undefined) {
-            return;
+            return undefined;
         }
         const { medium } = delivery;
         const custom = await this.triggers.customMessage(SimCognitoTriggerOccasion.customMessage(request.occasion), {
@@ -57,6 +59,7 @@ export class SimCognitoPoolMessenger {
             occasion: request.occasion,
             sentDate: this.clock.now(),
         }));
+        return delivery;
     }
 }
 //# sourceMappingURL=sim-cognito-pool-messenger.js.map

package/dist/service/cognito/user-pool/message/sim-cognito-pool-messenger.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-pool-messenger.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-pool-messenger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAGvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AA0BtE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IACjB,QAAQ,CAA6B;IACrC,KAAK,CAAW;IAEjC,YAAY,UAA6C;QACvD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,OAAiC;QAC1C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,WAAW,CACpD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,CACjB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAC9C,yBAAyB,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EACzD;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CACF,CAAC;QACF,MAAM,MAAM,GAAG,yBAAyB,CACtC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,EAChB,MAAM,CACP,CAAC;QACF,qEAAqE;QACrE,oBAAoB;QACpB,MAAM,YAAY,GAAG,IAAI,6BAA6B,CAAC;YACrD,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAElD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC1B,IAAI,qBAAqB,CAAC;YACxB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;YACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC3B,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-pool-messenger.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/message/sim-cognito-pool-messenger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAGvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AA0BtE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IACjB,QAAQ,CAA6B;IACrC,KAAK,CAAW;IAEjC,YAAY,UAA6C;QACvD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CACR,OAAiC;QAEjC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,WAAW,CACpD,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,CACjB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAC9C,yBAAyB,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EACzD;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CACF,CAAC;QACF,MAAM,MAAM,GAAG,yBAAyB,CACtC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,EAChB,MAAM,CACP,CAAC;QACF,qEAAqE;QACrE,oBAAoB;QACpB,MAAM,YAAY,GAAG,IAAI,6BAA6B,CAAC;YACrD,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAElD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC1B,IAAI,qBAAqB,CAAC;YACxB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;YACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC3B,CAAC,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.d.ts

@@ -33,6 +33,14 @@ export declare class SimCognitoTriggerOccasion {
      * Cognito.
      */
     static readonly confirmSignUp: SimCognitoTriggerOccasion;
+    /**
+     * A user reaching `CONFIRMED` by finishing a password reset.
+     *
+     * Real Cognito runs `PostConfirmation` for `ConfirmForgotPassword` as well
+     * as for a sign-up, under a source of its own, so a handler that creates a
+     * profile record on first confirmation can tell the two apart.
+     */
+    static readonly confirmForgotPassword: SimCognitoTriggerOccasion;
     /**
      * A sign-in, before the user's password is checked.
      */
@@ -74,6 +82,13 @@ export declare class SimCognitoTriggerOccasion {
      * The invitation an admin-created user is sent.
      */
     static readonly customMessageAdminCreateUser: SimCognitoTriggerOccasion;
+    /**
+     * The code a user resetting a forgotten password is sent.
+     *
+     * `AdminResetUserPassword` reports this source too, because real Cognito has
+     * none of its own for the reset an administrator starts.
+     */
+    static readonly customMessageForgotPassword: SimCognitoTriggerOccasion;
     /**
      * The code a sign-in challenged for a second factor is sent.
      */

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-trigger-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,gBAAuB,MAAM,4BAG3B;IAEF;;;;;;OAMG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;OAMG;IACH,gBAAuB,aAAa,4BAGlC;IAEF;;OAEG;IACH,gBAAuB,iBAAiB,4BAGtC;IAEF;;OAEG;IACH,gBAAuB,kBAAkB,4BAGvC;IAEF;;OAEG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;;OAOG;IACH,gBAAuB,0BAA0B,4BAI7C;IAEJ;;;;;;OAMG;IACH,gBAAuB,sBAAsB,4BAG3C;IAEF;;OAEG;IACH,gBAAuB,mBAAmB,4BAGxC;IAEF;;OAEG;IACH,gBAAuB,uBAAuB,4BAC+B;IAE7E;;OAEG;IACH,gBAAuB,4BAA4B,4BAI/C;IAEJ;;OAEG;IACH,gBAAuB,2BAA2B,4BAI9C;IAEJ,SAAgB,OAAO,EAAE,qBAAqB,CAAC;IAC/C,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,eAGN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAe3B;CACF"}
+{"version":3,"file":"sim-cognito-trigger-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,gBAAuB,MAAM,4BAG3B;IAEF;;;;;;OAMG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;OAMG;IACH,gBAAuB,aAAa,4BAGlC;IAEF;;;;;;OAMG;IACH,gBAAuB,qBAAqB,4BAG1C;IAEF;;OAEG;IACH,gBAAuB,iBAAiB,4BAGtC;IAEF;;OAEG;IACH,gBAAuB,kBAAkB,4BAGvC;IAEF;;OAEG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;;OAOG;IACH,gBAAuB,0BAA0B,4BAI7C;IAEJ;;;;;;OAMG;IACH,gBAAuB,sBAAsB,4BAG3C;IAEF;;OAEG;IACH,gBAAuB,mBAAmB,4BAGxC;IAEF;;OAEG;IACH,gBAAuB,uBAAuB,4BAC+B;IAE7E;;OAEG;IACH,gBAAuB,4BAA4B,4BAI/C;IAEJ;;;;;OAKG;IACH,gBAAuB,2BAA2B,4BAI9C;IAEJ;;OAEG;IACH,gBAAuB,2BAA2B,4BAI9C;IAEJ,SAAgB,OAAO,EAAE,qBAAqB,CAAC;IAC/C,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,eAGN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAkB3B;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.js

@@ -31,6 +31,14 @@ export class SimCognitoTriggerOccasion {
      * Cognito.
      */
     static confirmSignUp = new SimCognitoTriggerOccasion("PostConfirmation", "PostConfirmation_ConfirmSignUp");
+    /**
+     * A user reaching `CONFIRMED` by finishing a password reset.
+     *
+     * Real Cognito runs `PostConfirmation` for `ConfirmForgotPassword` as well
+     * as for a sign-up, under a source of its own, so a handler that creates a
+     * profile record on first confirmation can tell the two apart.
+     */
+    static confirmForgotPassword = new SimCognitoTriggerOccasion("PostConfirmation", "PostConfirmation_ConfirmForgotPassword");
     /**
      * A sign-in, before the user's password is checked.
      */
@@ -72,6 +80,13 @@ export class SimCognitoTriggerOccasion {
      * The invitation an admin-created user is sent.
      */
     static customMessageAdminCreateUser = new SimCognitoTriggerOccasion("CustomMessage", "CustomMessage_AdminCreateUser");
+    /**
+     * The code a user resetting a forgotten password is sent.
+     *
+     * `AdminResetUserPassword` reports this source too, because real Cognito has
+     * none of its own for the reset an administrator starts.
+     */
+    static customMessageForgotPassword = new SimCognitoTriggerOccasion("CustomMessage", "CustomMessage_ForgotPassword");
     /**
      * The code a sign-in challenged for a second factor is sent.
      */
@@ -103,6 +118,9 @@ export class SimCognitoTriggerOccasion {
             case "Authentication": {
                 return this.customMessageAuthentication;
             }
+            case "ForgotPassword": {
+                return this.customMessageForgotPassword;
+            }
         }
     }
 }

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-trigger-occasion.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACI,MAAM,CAAU,MAAM,GAAG,IAAI,yBAAyB,CAC3D,WAAW,EACX,kBAAkB,CACnB,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,WAAW,EACX,2BAA2B,CAC5B,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,aAAa,GAAG,IAAI,yBAAyB,CAClE,kBAAkB,EAClB,gCAAgC,CACjC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,iBAAiB,GAAG,IAAI,yBAAyB,CACtE,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,kBAAkB,GAAG,IAAI,yBAAyB,CACvE,oBAAoB,EACpB,mCAAmC,CACpC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,oBAAoB,EACpB,gCAAgC,CACjC,CAAC;IAEF;;;;;;;OAOG;IACI,MAAM,CAAU,0BAA0B,GAC/C,IAAI,yBAAyB,CAC3B,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IAEJ;;;;;;OAMG;IACI,MAAM,CAAU,sBAAsB,GAAG,IAAI,yBAAyB,CAC3E,oBAAoB,EACpB,+BAA+B,CAChC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,mBAAmB,GAAG,IAAI,yBAAyB,CACxE,eAAe,EACf,sBAAsB,CACvB,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,uBAAuB,GAC5C,IAAI,yBAAyB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAE7E;;OAEG;IACI,MAAM,CAAU,4BAA4B,GACjD,IAAI,yBAAyB,CAC3B,eAAe,EACf,+BAA+B,CAChC,CAAC;IAEJ;;OAEG;IACI,MAAM,CAAU,2BAA2B,GAChD,IAAI,yBAAyB,CAC3B,eAAe,EACf,8BAA8B,CAC/B,CAAC;IAEY,OAAO,CAAwB;IAC/B,MAAM,CAAS;IAE/B,YAAoB,OAA8B,EAAE,MAAc;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAClC,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,uBAAuB,CAAC;YACtC,CAAC;YACD,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,4BAA4B,CAAC;YAC3C,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,2BAA2B,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-trigger-occasion.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACI,MAAM,CAAU,MAAM,GAAG,IAAI,yBAAyB,CAC3D,WAAW,EACX,kBAAkB,CACnB,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,WAAW,EACX,2BAA2B,CAC5B,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,aAAa,GAAG,IAAI,yBAAyB,CAClE,kBAAkB,EAClB,gCAAgC,CACjC,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,qBAAqB,GAAG,IAAI,yBAAyB,CAC1E,kBAAkB,EAClB,wCAAwC,CACzC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,iBAAiB,GAAG,IAAI,yBAAyB,CACtE,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,kBAAkB,GAAG,IAAI,yBAAyB,CACvE,oBAAoB,EACpB,mCAAmC,CACpC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,oBAAoB,EACpB,gCAAgC,CACjC,CAAC;IAEF;;;;;;;OAOG;IACI,MAAM,CAAU,0BAA0B,GAC/C,IAAI,yBAAyB,CAC3B,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IAEJ;;;;;;OAMG;IACI,MAAM,CAAU,sBAAsB,GAAG,IAAI,yBAAyB,CAC3E,oBAAoB,EACpB,+BAA+B,CAChC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,mBAAmB,GAAG,IAAI,yBAAyB,CACxE,eAAe,EACf,sBAAsB,CACvB,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,uBAAuB,GAC5C,IAAI,yBAAyB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAE7E;;OAEG;IACI,MAAM,CAAU,4BAA4B,GACjD,IAAI,yBAAyB,CAC3B,eAAe,EACf,+BAA+B,CAChC,CAAC;IAEJ;;;;;OAKG;IACI,MAAM,CAAU,2BAA2B,GAChD,IAAI,yBAAyB,CAC3B,eAAe,EACf,8BAA8B,CAC/B,CAAC;IAEJ;;OAEG;IACI,MAAM,CAAU,2BAA2B,GAChD,IAAI,yBAAyB,CAC3B,eAAe,EACf,8BAA8B,CAC/B,CAAC;IAEY,OAAO,CAAwB;IAC/B,MAAM,CAAS;IAE/B,YAAoB,OAA8B,EAAE,MAAc;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAClC,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,uBAAuB,CAAC;YACtC,CAAC;YACD,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,4BAA4B,CAAC;YAC3C,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,2BAA2B,CAAC;YAC1C,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,2BAA2B,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.d.ts

@@ -39,8 +39,11 @@ export declare class SimCognitoUserPoolTriggers {
      * request without undoing the confirmation: the user stays confirmed, exactly
      * as on real Cognito. `AdminCreateUser` never reaches here, as it never
      * reaches it on real Cognito.
+     *
+     * The occasion is what tells a sign-up being confirmed from a password being
+     * reset, which real Cognito reports as two sources of the one trigger.
      */
-    postConfirmation(context: SimCognitoTriggerContext): Promise<void>;
+    postConfirmation(occasion: SimCognitoTriggerOccasion, context: SimCognitoTriggerContext): Promise<void>;
     /**
      * Run the `CustomMessage` trigger, if the pool has one, and read what it
      * wrote.

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-triggers.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAExF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IAExE,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAItC;IAED;;;;;;;OAOG;IACG,gBAAgB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAED;;;;;;;;OAQG;IACG,aAAa,CACjB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAIlC;IAED;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;IAED;;;;;;;OAOG;IACG,kBAAkB,CACtB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAInC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-triggers.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAExF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IAExE,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAItC;IAED;;;;;;;;;;OAUG;IACG,gBAAgB,CACpB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAEf;IAED;;;;;;;;OAQG;IACG,aAAa,CACjB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAIlC;IAED;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;IAED;;;;;;;OAOG;IACG,kBAAkB,CACtB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAInC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.js

@@ -39,9 +39,12 @@ export class SimCognitoUserPoolTriggers {
      * request without undoing the confirmation: the user stays confirmed, exactly
      * as on real Cognito. `AdminCreateUser` never reaches here, as it never
      * reaches it on real Cognito.
+     *
+     * The occasion is what tells a sign-up being confirmed from a password being
+     * reset, which real Cognito reports as two sources of the one trigger.
      */
-    async postConfirmation(context) {
-        await this.invocation.run(SimCognitoTriggerOccasion.confirmSignUp, context);
+    async postConfirmation(occasion, context) {
+        await this.invocation.run(occasion, context);
     }
     /**
      * Run the `CustomMessage` trigger, if the pool has one, and read what it

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-triggers.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAGpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAM9E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,UAAU,CAA8B;IACxC,eAAe,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAExE,YAAY,UAAgD;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CACb,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,2BAA2B,CACpC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAiC;QACtD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CACjB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,uBAAuB,CAChC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAiC;QACvD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,iBAAiB,EAC3C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAiC;QACxD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,kBAAkB,EAC5C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-triggers.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAGpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAM9E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,UAAU,CAA8B;IACxC,eAAe,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAExE,YAAY,UAAgD;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CACb,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,2BAA2B,CACpC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CACpB,QAAmC,EACnC,OAAiC;QAEjC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CACjB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,uBAAuB,CAChC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAiC;QACvD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,iBAAiB,EAC3C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAiC;QACxD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,kBAAkB,EAC5C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.d.ts

@@ -1,11 +1,13 @@
 import type { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
 /**
- * The confirmation one user has outstanding.
+ * The code one user has outstanding.
  *
- * A user that signed itself up holds a code until it confirms, and a user that
- * did not holds none. Keeping the code and what it answers together is the
- * same modelling choice `SimCognitoUserPassword` makes: the user asks whether
- * a candidate is right, rather than reading the value out to compare it.
+ * A user that signed itself up holds one until it confirms, a user that asked
+ * to reset a forgotten password holds one until it sets the new one, and a
+ * user doing neither holds none. Keeping the code and what it answers together
+ * is the same modelling choice `SimCognitoUserPassword` makes: the user asks
+ * whether a candidate is right, rather than reading the value out to compare
+ * it.
  *
  * The value is readable, unlike a password, because nothing here delivers the
  * message that would carry it.
@@ -25,11 +27,17 @@ export declare class SimCognitoUserConfirmation {
      * Follow the user to a status.
      *
      * A user waiting to be confirmed holds a code, and one that has left
-     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more.
+     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more. A
+     * user an administrator has sent to `RESET_REQUIRED` is issued its code
+     * after the move, because the code is what the reset is answered with.
      */
     settle(status: SimCognitoUserStatus): void;
     /**
      * Refuse a candidate that is not the code outstanding.
+     *
+     * A user holding no code at all is refused as having an expired one, which
+     * is what real Cognito answers a code that has already been spent with.
+     * Nothing here ages a code out, so that is the only way to reach it.
      */
     require(candidate: string | undefined): void;
 }

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-confirmation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-confirmation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;;;;;GAUG;AACH,qBAAa,0BAA0B;;IAGrC,YAAY,MAAM,EAAE,oBAAoB,EAEvC;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAIzC;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAM3C;CACF"}
+{"version":3,"file":"sim-cognito-user-confirmation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-confirmation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,qBAAa,0BAA0B;;IAGrC,YAAY,MAAM,EAAE,oBAAoB,EAEvC;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAIzC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAY3C;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.js

@@ -1,12 +1,14 @@
-import { SimCognitoCodeMismatchException } from "../../error/sim-cognito.error.js";
+import { SimCognitoCodeMismatchException, SimCognitoExpiredCodeException, } from "../../error/sim-cognito.error.js";
 import { SimCognitoConfirmationCode } from "./sim-cognito-confirmation-code.js";
 /**
- * The confirmation one user has outstanding.
+ * The code one user has outstanding.
  *
- * A user that signed itself up holds a code until it confirms, and a user that
- * did not holds none. Keeping the code and what it answers together is the
- * same modelling choice `SimCognitoUserPassword` makes: the user asks whether
- * a candidate is right, rather than reading the value out to compare it.
+ * A user that signed itself up holds one until it confirms, a user that asked
+ * to reset a forgotten password holds one until it sets the new one, and a
+ * user doing neither holds none. Keeping the code and what it answers together
+ * is the same modelling choice `SimCognitoUserPassword` makes: the user asks
+ * whether a candidate is right, rather than reading the value out to compare
+ * it.
  *
  * The value is readable, unlike a password, because nothing here delivers the
  * message that would carry it.
@@ -32,18 +34,27 @@ export class SimCognitoUserConfirmation {
      * Follow the user to a status.
      *
      * A user waiting to be confirmed holds a code, and one that has left
-     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more.
+     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more. A
+     * user an administrator has sent to `RESET_REQUIRED` is issued its code
+     * after the move, because the code is what the reset is answered with.
      */
     settle(status) {
-        this.#code = status.isUnconfirmed
+        this.#code = status.holdsCode
             ? SimCognitoConfirmationCode.issue()
             : undefined;
     }
     /**
      * Refuse a candidate that is not the code outstanding.
+     *
+     * A user holding no code at all is refused as having an expired one, which
+     * is what real Cognito answers a code that has already been spent with.
+     * Nothing here ages a code out, so that is the only way to reach it.
      */
     require(candidate) {
-        if (this.#code?.matches(candidate) !== true) {
+        if (this.#code === undefined) {
+            throw new SimCognitoExpiredCodeException("Invalid code provided, please request a code again.");
+        }
+        if (!this.#code.matches(candidate)) {
             throw new SimCognitoCodeMismatchException("Invalid verification code provided, please try again.");
         }
     }