@kensio/yulin 1.17.0 → 1.17.2

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool-client.js

@@ -0,0 +1,36 @@
+import { SimCognitoUserPoolClientAlreadyExists } from "../error/sim-cognito.error.js";
+import { requireSimCognitoUserPoolClientId } from "./client/sim-cognito-user-pool-client-id.js";
+import { SimCognitoUserPoolClientSettings } from "./client/sim-cognito-user-pool-client-settings.js";
+import { requireSimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+/**
+ * Register an app client of a pool under a chosen client id.
+ *
+ * A client id is pinned alongside the pool id it belongs to, and real Cognito
+ * allocates it the same way, so the two are registered the same way too.
+ *
+ * The pool has to be there already, whether it was registered or created. A
+ * client belongs to a pool, and `CreateUserPoolClient` refuses an unknown pool
+ * the same way. The id has to be free across every pool in this simulated
+ * Cognito, because `InitiateAuth` finds a pool from a client id alone.
+ */
+export function registerSimCognitoUserPoolClient(registration, properties) {
+    const { pools } = properties;
+    const pool = pools.require(requireSimCognitoUserPoolId(registration.userPoolId));
+    const clientId = requireSimCognitoUserPoolClientId(registration.id);
+    const holder = pools.findClient(clientId);
+    if (holder !== undefined) {
+        throw new SimCognitoUserPoolClientAlreadyExists(`A sim Cognito app client with id ${clientId} is in pool ${holder.pool.id}`);
+    }
+    const client = properties.clientFactory.make({
+        id: clientId,
+        pool,
+        generateSecret: registration.generateSecret,
+        settings: new SimCognitoUserPoolClientSettings({
+            ...registration.settings,
+            ClientName: registration.name,
+        }),
+    });
+    pool.addClient(client);
+    return client;
+}
+//# sourceMappingURL=register-sim-cognito-user-pool-client.js.map

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-sim-cognito-user-pool-client.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/register-sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,+BAA+B,CAAC;AAEtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AAGrG,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAQ5E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAkD,EAClD,UAAsD;IAEtD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CACxB,2BAA2B,CAAC,YAAY,CAAC,UAAU,CAAC,CACrD,CAAC;IACF,MAAM,QAAQ,GAAG,iCAAiC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,qCAAqC,CAC7C,oCAAoC,QAAQ,eAAe,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;QAC3C,EAAE,EAAE,QAAQ;QACZ,IAAI;QACJ,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,QAAQ,EAAE,IAAI,gCAAgC,CAAC;YAC7C,GAAG,YAAY,CAAC,QAAQ;YACxB,UAAU,EAAE,YAAY,CAAC,IAAI;SAC9B,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEvB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool.d.ts

@@ -0,0 +1,25 @@
+import type { SimCognitoUserPoolRegistration } from "./sim-cognito-registration.types.js";
+import type { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
+import type { SimCognitoUserPoolFactory } from "./sim-cognito-user-pool-factory.js";
+import type { SimCognitoUserPoolStore } from "./sim-cognito-user-pool-store.js";
+interface RegisterSimCognitoUserPoolProperties {
+    readonly regionName: string;
+    readonly pools: SimCognitoUserPoolStore;
+    readonly poolFactory: SimCognitoUserPoolFactory;
+}
+/**
+ * Register a user pool the simulation is told already exists.
+ *
+ * Real Cognito allocates a pool id, so nothing on the command surface takes
+ * one. A CDK app that creates its pool in one stack and reads it from another
+ * carries the id across as a literal string, and every template naming it
+ * deploys against an id the simulation never chose. This is how a simulation
+ * comes to own that id before the template deploys.
+ *
+ * The pool goes through the same factory a created one does, so it gets the
+ * same ARN, the same settings defaults, and the same place in the cross-Account
+ * registry that serves its JWKS.
+ */
+export declare function registerSimCognitoUserPool(registration: SimCognitoUserPoolRegistration, properties: RegisterSimCognitoUserPoolProperties): SimCognitoUserPool;
+export {};
+//# sourceMappingURL=register-sim-cognito-user-pool.d.ts.map

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/register-sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,8BAA8B,EAC5C,UAAU,EAAE,oCAAoC,GAC/C,kBAAkB,CAsBpB"}

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool.js

@@ -0,0 +1,30 @@
+import { SimCognitoUserPoolAlreadyExists } from "../error/sim-cognito.error.js";
+import { requireSimCognitoUserPoolIdInRegion } from "./sim-cognito-user-pool-id.js";
+/**
+ * Register a user pool the simulation is told already exists.
+ *
+ * Real Cognito allocates a pool id, so nothing on the command surface takes
+ * one. A CDK app that creates its pool in one stack and reads it from another
+ * carries the id across as a literal string, and every template naming it
+ * deploys against an id the simulation never chose. This is how a simulation
+ * comes to own that id before the template deploys.
+ *
+ * The pool goes through the same factory a created one does, so it gets the
+ * same ARN, the same settings defaults, and the same place in the cross-Account
+ * registry that serves its JWKS.
+ */
+export function registerSimCognitoUserPool(registration, properties) {
+    const { pools } = properties;
+    const userPoolId = requireSimCognitoUserPoolIdInRegion(registration.id, properties.regionName);
+    if (pools.ids.has(userPoolId)) {
+        throw new SimCognitoUserPoolAlreadyExists(`A sim Cognito user pool with id ${userPoolId} already exists`);
+    }
+    const pool = properties.poolFactory.make({
+        id: userPoolId,
+        name: registration.name,
+        settings: registration.settings ?? {},
+    });
+    pools.add(pool);
+    return pool;
+}
+//# sourceMappingURL=register-sim-cognito-user-pool.js.map

package/dist/service/cognito/user-pool/register-sim-cognito-user-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/register-sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAIhF,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AASpF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAA4C,EAC5C,UAAgD;IAEhD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAC7B,MAAM,UAAU,GAAG,mCAAmC,CACpD,YAAY,CAAC,EAAE,EACf,UAAU,CAAC,UAAU,CACtB,CAAC;IAEF,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,+BAA+B,CACvC,mCAAmC,UAAU,iBAAiB,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;QACvC,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,IAAI,EAAE;KACtC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/cognito/user-pool/sim-cognito-registration.types.d.ts

@@ -0,0 +1,40 @@
+import type { SimCognitoUserPoolClientSettingsProperties } from "./client/sim-cognito-user-pool-client-settings.js";
+import type { SimCognitoUserPoolSettingsInput } from "./sim-cognito-user-pool-settings.js";
+/**
+ * What a simulation says about a user pool it registers as already existing.
+ */
+export interface SimCognitoUserPoolRegistration {
+    /**
+     * The pool id the simulated pool takes, in the `<region>_<characters>` form
+     * real Cognito allocates. The Region it names has to be the Region of the
+     * simulated Cognito registering it.
+     */
+    readonly id: string;
+    readonly name: string;
+    /**
+     * The rest of the pool's configuration, in the shape `CreateUserPool` sends
+     * it. A registration that leaves it out gets the same defaults a creation
+     * would have given the pool.
+     */
+    readonly settings?: SimCognitoUserPoolSettingsInput | undefined;
+}
+/**
+ * What a simulation says about an app client it registers as already existing.
+ */
+export interface SimCognitoUserPoolClientRegistration {
+    readonly userPoolId: string;
+    /**
+     * The client id the simulated app client takes, as real Cognito allocates
+     * one.
+     */
+    readonly id: string;
+    readonly name: string;
+    readonly generateSecret?: boolean | undefined;
+    /**
+     * The rest of the client's configuration, in the shape
+     * `CreateUserPoolClient` sends it. `ClientName` is left out of it, `name`
+     * carrying that.
+     */
+    readonly settings?: Omit<SimCognitoUserPoolClientSettingsProperties, "ClientName"> | undefined;
+}
+//# sourceMappingURL=sim-cognito-registration.types.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-registration.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-registration.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-registration.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AACpH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE9C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EACd,IAAI,CAAC,0CAA0C,EAAE,YAAY,CAAC,GAC9D,SAAS,CAAC;CACf"}

package/dist/service/cognito/user-pool/sim-cognito-registration.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cognito-registration.types.js.map

package/dist/service/cognito/user-pool/sim-cognito-registration.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-registration.types.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-registration.types.ts"],"names":[],"mappings":""}

package/dist/service/cognito/user-pool/sim-cognito-registrations.d.ts

@@ -0,0 +1,34 @@
+import type { SimCognitoUserPoolClientFactory } from "./client/sim-cognito-user-pool-client-factory.js";
+import type { SimCognitoUserPoolClient } from "./client/sim-cognito-user-pool-client.js";
+import type { SimCognitoUserPoolClientRegistration, SimCognitoUserPoolRegistration } from "./sim-cognito-registration.types.js";
+import type { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
+import type { SimCognitoUserPoolFactory } from "./sim-cognito-user-pool-factory.js";
+import type { SimCognitoUserPoolStore } from "./sim-cognito-user-pool-store.js";
+interface SimCognitoRegistrationsProperties {
+    /** The Region a pool registered here has to name in its id. */
+    readonly regionName: string;
+    readonly pools: SimCognitoUserPoolStore;
+    readonly poolFactory: SimCognitoUserPoolFactory;
+    readonly clientFactory: SimCognitoUserPoolClientFactory;
+}
+/**
+ * The user pools and app clients a simulation is told already exist.
+ *
+ * These are the simulator's own setup operations rather than AWS ones, so they
+ * skip the command surface and its authorization, as `mountBucketFilesystem`
+ * and `registerHostedZone` do.
+ */
+export declare class SimCognitoRegistrations {
+    private readonly properties;
+    constructor(properties: SimCognitoRegistrationsProperties);
+    /**
+     * Register a user pool under a chosen pool id.
+     */
+    userPool(registration: SimCognitoUserPoolRegistration): SimCognitoUserPool;
+    /**
+     * Register an app client of a pool under a chosen client id.
+     */
+    userPoolClient(registration: SimCognitoUserPoolClientRegistration): SimCognitoUserPoolClient;
+}
+export {};
+//# sourceMappingURL=sim-cognito-registrations.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-registrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-registrations.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-registrations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC;AACxG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EACV,oCAAoC,EACpC,8BAA8B,EAC/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,iCAAiC;IACzC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;CACzD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,iCAAiC,EAAI;IAE9E;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,8BAA8B,GAAG,kBAAkB,CAEzE;IAED;;OAEG;IACH,cAAc,CACZ,YAAY,EAAE,oCAAoC,GACjD,wBAAwB,CAE1B;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-registrations.js

@@ -0,0 +1,28 @@
+import { registerSimCognitoUserPoolClient } from "./register-sim-cognito-user-pool-client.js";
+import { registerSimCognitoUserPool } from "./register-sim-cognito-user-pool.js";
+/**
+ * The user pools and app clients a simulation is told already exist.
+ *
+ * These are the simulator's own setup operations rather than AWS ones, so they
+ * skip the command surface and its authorization, as `mountBucketFilesystem`
+ * and `registerHostedZone` do.
+ */
+export class SimCognitoRegistrations {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Register a user pool under a chosen pool id.
+     */
+    userPool(registration) {
+        return registerSimCognitoUserPool(registration, this.properties);
+    }
+    /**
+     * Register an app client of a pool under a chosen client id.
+     */
+    userPoolClient(registration) {
+        return registerSimCognitoUserPoolClient(registration, this.properties);
+    }
+}
+//# sourceMappingURL=sim-cognito-registrations.js.map

package/dist/service/cognito/user-pool/sim-cognito-registrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-registrations.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-registrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAoBjF;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACL,UAAU;IAAvC,YAA6B,UAA6C;0BAA7C,UAAU;IAAsC,CAAC;IAE9E;;OAEG;IACH,QAAQ,CAAC,YAA4C;QACnD,OAAO,0BAA0B,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,YAAkD;QAElD,OAAO,gCAAgC,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.d.ts

@@ -1,6 +1,7 @@
 import type { SimClock } from "../../../util/clock/sim-clock.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
+import { type SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
 import { type SimCognitoUserPoolSettingsInput } from "./sim-cognito-user-pool-settings.js";
 import type { SimCognitoUserPoolStore } from "./sim-cognito-user-pool-store.js";
 interface SimCognitoUserPoolFactoryProperties {
@@ -14,6 +15,14 @@ interface SimCognitoMakeUserPoolProperties {
      * The `CreateUserPool` request the pool's settings are read out of.
      */
     readonly settings: SimCognitoUserPoolSettingsInput;
+    /**
+     * The id the pool takes, where something else already decided it.
+     *
+     * `CreateUserPool` leaves this out and gets an allocated id, as real Cognito
+     * allocates one. A registration passes the id it was given, having checked
+     * that it is free and that it names this scope's region.
+     */
+    readonly id?: SimCognitoUserPoolId | undefined;
 }
 /**
  * Builds simulated user pools, including their id, ARN and defaults.

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;CACpD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,gCAAgC,GAAG,kBAAkB,CAsBrE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IAEnD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,gCAAgC,GAAG,kBAAkB,CAwBrE;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js

@@ -1,7 +1,7 @@
 import { SimCognitoName } from "./sim-cognito-name.js";
 import { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
 import { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
-import { makeSimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+import { makeSimCognitoUserPoolId, } from "./sim-cognito-user-pool-id.js";
 import { SimCognitoUserPoolSettings, } from "./sim-cognito-user-pool-settings.js";
 /**
  * Builds simulated user pools, including their id, ARN and defaults.
@@ -23,7 +23,8 @@ export class SimCognitoUserPoolFactory {
      * Make a new pool with no app clients yet.
      */
     make(properties) {
-        const userPoolId = makeSimCognitoUserPoolId(this.accountRegionScope.regionName, this.pools.ids);
+        const userPoolId = properties.id ??
+            makeSimCognitoUserPoolId(this.accountRegionScope.regionName, this.pools.ids);
         return new SimCognitoUserPool({
             id: userPoolId,
             arn: new SimCognitoUserPoolArn({

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAkB7C;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,QAAQ,EAAE,IAAI,0BAA0B,CAAC;gBACvC,KAAK,EAAE,UAAU,CAAC,QAAQ;gBAC1B,SAAS,EAAE,gBAAgB;aAC5B,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,wBAAwB,GAEzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AA2B7C;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GACd,UAAU,CAAC,EAAE;YACb,wBAAwB,CACtB,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEJ,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,QAAQ,EAAE,IAAI,0BAA0B,CAAC;gBACvC,KAAK,EAAE,UAAU,CAAC,QAAQ;gBAC1B,SAAS,EAAE,gBAAgB;aAC5B,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.d.ts

@@ -17,6 +17,15 @@ export declare function makeSimCognitoUserPoolId(regionName: AwsRegionName, exis
  * as a missing pool.
  */
 export declare function requireSimCognitoUserPoolId(value: string | undefined): SimCognitoUserPoolId;
+/**
+ * Read a requested user pool id that has to belong to one Region.
+ *
+ * A pool id carries the Region its pool lives in, and a pool's ARN carries the
+ * Region of the simulated Cognito holding it. Registering a pool under an id
+ * from another Region would name two Regions in one pool, which no real pool
+ * does.
+ */
+export declare function requireSimCognitoUserPoolIdInRegion(value: string | undefined, regionName: string): SimCognitoUserPoolId;
 /**
  * The Region a pool lives in, which its id names.
  *

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-id.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAczE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,aAAa,EACzB,QAAQ,cAAoB,GAC3B,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,oBAAoB,CAetB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzE"}
+{"version":3,"file":"sim-cognito-user-pool-id.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAczE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,aAAa,EACzB,QAAQ,cAAoB,GAC3B,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,oBAAoB,CAetB;AAED;;;;;;;GAOG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,GACjB,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.js

@@ -45,6 +45,24 @@ export function requireSimCognitoUserPoolId(value) {
     }
     return value;
 }
+/**
+ * Read a requested user pool id that has to belong to one Region.
+ *
+ * A pool id carries the Region its pool lives in, and a pool's ARN carries the
+ * Region of the simulated Cognito holding it. Registering a pool under an id
+ * from another Region would name two Regions in one pool, which no real pool
+ * does.
+ */
+export function requireSimCognitoUserPoolIdInRegion(value, regionName) {
+    const userPoolId = requireSimCognitoUserPoolId(value);
+    const idRegionName = simCognitoUserPoolRegionName(userPoolId);
+    if (idRegionName !== regionName) {
+        throw new SimCognitoInvalidParameterException(`UserPoolId '${userPoolId}' names Region ${idRegionName}, and this ` +
+            `simulated Cognito is ${regionName}. Register the pool on the ` +
+            `simulated Cognito of Region ${idRegionName}.`);
+    }
+    return userPoolId;
+}
 /**
  * The Region a pool lives in, which its id names.
  *

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-id.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAIpF;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,QAAQ,GAAG,IAAI,GAAG,EAAU;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5D,MAAM,EAAE,sBAAsB;SAC/B,CAAC,EAA0B,CAAC;QAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,wCAAwC;YAC1D,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,KAA6B,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,UAAkB;IAC7D,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAE5D,OAAO,uBAAuB,UAAU,kBAAkB,UAAU,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB;IAC/D,OAAO,2BAA2B,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC"}
+{"version":3,"file":"sim-cognito-user-pool-id.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAIpF;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,QAAQ,GAAG,IAAI,GAAG,EAAU;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5D,MAAM,EAAE,sBAAsB;SAC/B,CAAC,EAA0B,CAAC;QAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,wCAAwC;YAC1D,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,KAA6B,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAE9D,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,mCAAmC,CAC3C,eAAe,UAAU,kBAAkB,YAAY,aAAa;YAClE,wBAAwB,UAAU,6BAA6B;YAC/D,+BAA+B,YAAY,GAAG,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,UAAkB;IAC7D,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAE5D,OAAO,uBAAuB,UAAU,kBAAkB,UAAU,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB;IAC/D,OAAO,2BAA2B,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-store.d.ts

@@ -82,6 +82,14 @@ export declare class SimCognitoUserPoolStore {
      * from.
      */
     requireClient(clientId: SimCognitoUserPoolClientId): SimCognitoClientInPool;
+    /**
+     * Find an app client by id alone, and the pool holding it.
+     *
+     * This is the same search `requireClient` makes, for a caller that has
+     * something to do with the absence. Registering a client under a chosen id
+     * uses it to keep one client id out of two pools.
+     */
+    findClient(clientId: SimCognitoUserPoolClientId): SimCognitoClientInPool | undefined;
     /**
      * Resolve the access token a request is authorized with, and the pool that
      * signed it, or refuse.

package/dist/service/cognito/user-pool/sim-cognito-user-pool-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-store.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,GAAE,iCAAsC,EAG7D;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAWxB;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,kBAAkB,EAAE,CAEvC;IAED;;;;;;OAMG;IACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAErB;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAGlC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CASrC;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,SAAS,CAErE;IAED;;OAEG;IACH,OAAO,CAAC,UAAU,EAAE,oBAAoB,GAAG,kBAAkB,CAU5D;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,0BAA0B,GAAG,sBAAsB,CAY1E;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,2BAA2B,CAYxE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-store.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,GAAE,iCAAsC,EAG7D;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAWxB;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,kBAAkB,EAAE,CAEvC;IAED;;;;;;OAMG;IACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAErB;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAGlC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CASrC;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,SAAS,CAErE;IAED;;OAEG;IACH,OAAO,CAAC,UAAU,EAAE,oBAAoB,GAAG,kBAAkB,CAU5D;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,0BAA0B,GAAG,sBAAsB,CAU1E;IAED;;;;;;OAMG;IACH,UAAU,CACR,QAAQ,EAAE,0BAA0B,GACnC,sBAAsB,GAAG,SAAS,CAUpC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,2BAA2B,CAYxE;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-store.js

@@ -86,13 +86,27 @@ export class SimCognitoUserPoolStore {
      * from.
      */
     requireClient(clientId) {
+        const found = this.findClient(clientId);
+        if (found === undefined) {
+            throw new SimCognitoResourceNotFoundException(`App client ${clientId} does not exist.`);
+        }
+        return found;
+    }
+    /**
+     * Find an app client by id alone, and the pool holding it.
+     *
+     * This is the same search `requireClient` makes, for a caller that has
+     * something to do with the absence. Registering a client under a chosen id
+     * uses it to keep one client id out of two pools.
+     */
+    findClient(clientId) {
         for (const pool of this.all) {
             const client = pool.findClient(clientId);
             if (client !== undefined) {
                 return { pool, client };
             }
         }
-        throw new SimCognitoResourceNotFoundException(`App client ${clientId} does not exist.`);
+        return undefined;
     }
     /**
      * Resolve the access token a request is authorized with, and the pool that

package/dist/service/cognito/user-pool/sim-cognito-user-pool-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-store.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAiC3F;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IACjB,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9C,QAAQ,CAA6B;IACrC,OAAO,CAA2B;IAEnD,YAAY,UAAU,GAAsC,EAAE;QAC5D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACtE,CAAC;IAEO,MAAM,CAAC,SAAS,CACtB,MAA6B,EAC7B,GAAS;QAET,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gCAAgC,CAAC,2BAA2B,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAwB;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAwB;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAE7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAAgC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAgC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,kBAAkB,CAC1C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAoC;QAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,cAAc,QAAQ,kBAAkB,CACzC,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,KAAa,EAAE,GAAS;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAEhD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,CACjC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-store.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAiC3F;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IACjB,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9C,QAAQ,CAA6B;IACrC,OAAO,CAA2B;IAEnD,YAAY,UAAU,GAAsC,EAAE;QAC5D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACtE,CAAC;IAEO,MAAM,CAAC,SAAS,CACtB,MAA6B,EAC7B,GAAS;QAET,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gCAAgC,CAAC,2BAA2B,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAwB;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAwB;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAE7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAAgC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAgC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,kBAAkB,CAC1C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAoC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mCAAmC,CAC3C,cAAc,QAAQ,kBAAkB,CACzC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,QAAoC;QAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,KAAa,EAAE,GAAS;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAEhD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,CACjC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.d.ts

@@ -48,7 +48,7 @@ export declare class SimAwsCognitoTriggerFunctions implements SimCognitoTriggerF
      */
     invoke(request: SimCognitoTriggerFunctionRequest, event: object): Promise<unknown>;
     private policyRefusal;
-    private findFunction;
+    private findTarget;
     private iam;
 }
 export {};

package/dist/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-cognito-trigger-functions.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAQtD,OAAO,KAAK,EACV,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAE5C;;GAEG;AACH,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AAEtE,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,GACb,0BAA0B,CAE5B;AAED;;;;;;;;GAQG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,GAAG,SAAS,CAsB3E;IAED;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,gCAAgC,EACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAYlB;IAED,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,GAAG;CAKZ"}
+{"version":3,"file":"sim-aws-cognito-trigger-functions.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAQtD,OAAO,KAAK,EACV,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAE5C;;GAEG;AACH,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AAEtE,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,GACb,0BAA0B,CAE5B;AAED;;;;;;;;GAQG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,GAAG,SAAS,CAc3E;IAED;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,gCAAgC,EACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAYlB;IAED,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,GAAG;CAKZ"}

package/dist/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.js

@@ -41,16 +41,11 @@ export class SimAwsCognitoTriggerFunctions {
         if (arn === undefined) {
             return `${request.functionArn} is not a Lambda function ARN.`;
         }
-        if (arn.qualifier !== undefined) {
-            return (`${request.functionArn} names a function version or alias, and ` +
-                "simulated Lambda has neither, so it is refused rather than treated " +
-                "as the unqualified function.");
+        const target = this.findTarget(arn);
+        if (target === undefined) {
+            return missingFunctionRefusal(arn, request.functionArn);
         }
-        const simFunction = this.findFunction(arn);
-        if (simFunction === undefined) {
-            return `${request.functionArn} is not a simulated Lambda function.`;
-        }
-        return this.policyRefusal(simFunction, request);
+        return this.policyRefusal(target, request);
     }
     /**
      * Invoke the function with the trigger event, answering with what the
@@ -64,18 +59,18 @@ export class SimAwsCognitoTriggerFunctions {
      */
     async invoke(request, event) {
         const arn = parseSimLambdaFunctionArn(request.functionArn);
-        const simFunction = arn === undefined ? undefined : this.findFunction(arn);
+        const target = arn === undefined ? undefined : this.findTarget(arn);
         // oxlint-disable-next-line yulin/assert-defined-guard -- `assertDefined` is denser per line, and this file is close enough to the FTA threshold that the guard costs less kept as it is
-        if (simFunction === undefined) {
+        if (target === undefined) {
             throw new Error(`${request.functionArn} is not a simulated Lambda function.`);
         }
-        return await simFunction.invoke(event);
+        return await target.simFunction.invoke(event);
     }
-    policyRefusal(simFunction, request) {
+    policyRefusal(target, request) {
         const decision = new SimLambdaServiceInvokeAuthorizer({
-            iam: this.iam(simFunction),
+            iam: this.iam(target),
         }).authorize({
-            simFunction,
+            resource: target.resource,
             servicePrincipal: simCognitoServicePrincipal,
             sourceArn: request.userPoolArn,
             sourceAccount: request.userPoolAccountId,
@@ -88,15 +83,27 @@ export class SimAwsCognitoTriggerFunctions {
         }
         return undefined;
     }
-    findFunction(arn) {
+    findTarget(arn) {
         return this.simAws
             .accountRegionScope(arn.accountId, arn.regionName)
             .lambda()
-            .getSimFunctionByName(arn.functionName);
+            .getSimFunctionTarget(arn.functionName, arn.qualifier);
     }
-    iam(simFunction) {
-        const { accountId, regionName } = simFunction.accountRegionScope;
+    iam(target) {
+        const { accountId, regionName } = target.simFunction.accountRegionScope;
         return this.simAws.accountRegionScope(accountId, regionName).iam();
     }
 }
+/**
+ * Why a trigger ARN reaches nothing, for the pool to repeat back in its
+ * `UnexpectedLambdaException`.
+ *
+ * A qualified ARN says so, since the function it names may well be there while
+ * the version or alias it asked for is not.
+ */
+function missingFunctionRefusal(arn, functionArn) {
+    return arn.qualifier === undefined
+        ? `${functionArn} is not a simulated Lambda function.`
+        : `${functionArn} names no simulated Lambda function version or alias.`;
+}
 //# sourceMappingURL=sim-aws-cognito-trigger-functions.js.map

package/dist/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-cognito-trigger-functions.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAE7H,OAAO,EACL,yBAAyB,GAE1B,MAAM,2DAA2D,CAAC;AAMnE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAMtE;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAc;IAEd,OAAO,IAAI,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,OAAyC;QACrD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,WAAW,gCAAgC,CAAC;QAChE,CAAC;QAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CACL,GAAG,OAAO,CAAC,WAAW,0CAA0C;gBAChE,qEAAqE;gBACrE,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,WAAW,sCAAsC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,OAAyC,EACzC,KAAa;QAEb,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3E,wLAAwL;QACxL,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,WAAW,sCAAsC,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,aAAa,CACnB,WAA8B,EAC9B,OAAyC;QAEzC,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;SAC3B,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,0BAA0B;YAC5C,SAAS,EAAE,OAAO,CAAC,WAAW;YAC9B,aAAa,EAAE,OAAO,CAAC,iBAAiB;SACzC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,WAAW,kBAAkB;gBAC/D,GAAG,0BAA0B,oBAAoB;gBACjD,GAAG,OAAO,CAAC,WAAW,6CAA6C;gBACnE,iDAAiD,CAClD,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,YAAY,CAClB,GAA8B;QAE9B,OAAO,IAAI,CAAC,MAAM;aACf,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAEO,GAAG,CAAC,WAA8B;QACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,kBAAkB,CAAC;QAEjE,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;IACrE,CAAC;CACF"}
+{"version":3,"file":"sim-aws-cognito-trigger-functions.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-aws-cognito-trigger-functions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAE7H,OAAO,EACL,yBAAyB,GAE1B,MAAM,2DAA2D,CAAC;AAMnE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAMtE;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAc;IAEd,OAAO,IAAI,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,OAAyC;QACrD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,WAAW,gCAAgC,CAAC;QAChE,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,OAAyC,EACzC,KAAa;QAEb,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEpE,wLAAwL;QACxL,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,WAAW,sCAAsC,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAEO,aAAa,CACnB,MAA+B,EAC/B,OAAyC;QAEzC,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,gBAAgB,EAAE,0BAA0B;YAC5C,SAAS,EAAE,OAAO,CAAC,WAAW;YAC9B,aAAa,EAAE,OAAO,CAAC,iBAAiB;SACzC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,WAAW,kBAAkB;gBAC/D,GAAG,0BAA0B,oBAAoB;gBACjD,GAAG,OAAO,CAAC,WAAW,6CAA6C;gBACnE,iDAAiD,CAClD,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU,CAChB,GAA8B;QAE9B,OAAO,IAAI,CAAC,MAAM;aACf,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAEO,GAAG,CAAC,MAA+B;QACzC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC;QAExE,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;IACrE,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,GAA8B,EAC9B,WAAmB;IAEnB,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS;QAChC,CAAC,CAAC,GAAG,WAAW,sCAAsC;QACtD,CAAC,CAAC,GAAG,WAAW,uDAAuD,CAAC;AAC5E,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.js

@@ -39,7 +39,7 @@ export class SimElbV2InvokeAuthorizer {
      */
     authorize(input) {
         return this.lambdaAuthorizer.authorize({
-            simFunction: input.simFunction,
+            resource: input.simFunction,
             servicePrincipal: simElbV2ServicePrincipal,
             sourceArn: input.targetGroup.arn,
             sourceAccount: input.accountId,

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-invoke-authorizer.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-invoke-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAI1H;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAY7E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAwB;IAClB,gBAAgB,CAAmC;IAEpE,YAAY,UAA8C;QACxD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gCAAgC,CAAC;YAC3D,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,KAAuC;QAEvC,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACrC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,wBAAwB;YAC1C,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAChC,aAAa,EAAE,KAAK,CAAC,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-elbv2-invoke-authorizer.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-invoke-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAI1H;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAY7E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAwB;IAClB,gBAAgB,CAAmC;IAEpE,YAAY,UAA8C;QACxD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gCAAgC,CAAC;YAC3D,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,KAAuC;QAEvC,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACrC,QAAQ,EAAE,KAAK,CAAC,WAAW;YAC3B,gBAAgB,EAAE,wBAAwB;YAC1C,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAChC,aAAa,EAAE,KAAK,CAAC,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/eventbridge/delivery/sim-event-bridge-delivery-function.d.ts

@@ -18,10 +18,12 @@ export declare class SimEventBridgeDeliveryFunction {
      * Invoke the function with the event, if it admits EventBridge for this
      * rule.
      *
-     * The resource policy is consulted on every delivery rather than remembered
+     * The function, the version or alias a qualified target named, and the
+     * resource policy are all resolved on every delivery rather than remembered
      * from the moment the target was added, so a permission taken away
-     * afterwards stops delivery. Real EventBridge does not check it at
-     * `PutTargets` time either.
+     * afterwards stops delivery and an alias moved to another version moves what
+     * runs. Real EventBridge does not check any of it at `PutTargets` time
+     * either.
      */
     deliver(request: SimEventBridgeDeliveryRequest): Promise<void>;
 }

package/dist/service/eventbridge/delivery/sim-event-bridge-delivery-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-event-bridge-delivery-function.d.ts","sourceRoot":"","sources":["../../../../src/service/eventbridge/delivery/sim-event-bridge-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAM9F,OAAO,EACL,KAAK,6BAA6B,EAInC,MAAM,gCAAgC,CAAC;AAExC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,wCAAwC,EAE/D;IAED;;;;;;;;OAQG;IACG,OAAO,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCnE;CACF"}
+{"version":3,"file":"sim-event-bridge-delivery-function.d.ts","sourceRoot":"","sources":["../../../../src/service/eventbridge/delivery/sim-event-bridge-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAM9F,OAAO,EACL,KAAK,6BAA6B,EAInC,MAAM,gCAAgC,CAAC;AAExC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,wCAAwC,EAE/D;IAED;;;;;;;;;;OAUG;IACG,OAAO,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCnE;CACF"}