@kensio/yulin 1.18.1 → 1.18.2

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAmC5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CA6D/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAyC5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CAiE/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js

@@ -1,5 +1,6 @@
 import { SimCfnCognitoGeneratedName } from "../sim-cfn-cognito-generated-name.js";
 import { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+import { SimCfnCognitoRefreshTokenRotation } from "./sim-cfn-cognito-refresh-token-rotation.js";
 import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validity-units.js";
 /**
  * The AWS::Cognito::UserPoolClient properties this simulation deploys.
@@ -9,6 +10,10 @@ import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validit
  * for, which scopes, which URL it may be sent back to, and which identity
  * provider it may sign a user in through.
  *
+ * `RefreshTokenRotation` is among them, because it decides which operation
+ * renews a session: a client deployed with rotation is renewed with
+ * `GetTokensFromRefreshToken` rather than `REFRESH_TOKEN_AUTH`.
+ *
  * The managed login branding properties are not, because managed login is a
  * set of web pages rather than anything this simulation answers.
  */
@@ -21,6 +26,7 @@ const simulatedProperties = [
     "AccessTokenValidity",
     "IdTokenValidity",
     "RefreshTokenValidity",
+    "RefreshTokenRotation",
     "TokenValidityUnits",
     "AllowedOAuthFlows",
     "AllowedOAuthFlowsUserPoolClient",
@@ -66,6 +72,10 @@ export class SimCfnCognitoClientProperties {
             AccessTokenValidity: this.number(this.properties["AccessTokenValidity"], "AccessTokenValidity"),
             IdTokenValidity: this.number(this.properties["IdTokenValidity"], "IdTokenValidity"),
             RefreshTokenValidity: this.number(this.properties["RefreshTokenValidity"], "RefreshTokenValidity"),
+            RefreshTokenRotation: new SimCfnCognitoRefreshTokenRotation({
+                resource: this.resource,
+                propertyParser: this.propertyParser,
+            }).parse(this.properties["RefreshTokenRotation"]),
             TokenValidityUnits: new SimCfnCognitoTokenValidityUnits({
                 resource: this.resource,
                 propertyParser: this.propertyParser,

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;;;;;GAcG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,oBAAoB,EAAE,IAAI,iCAAiC,CAAC;gBAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;YACjD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts

@@ -0,0 +1,27 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCognitoRefreshTokenRotationType } from "../../user-pool/client/sim-cognito-refresh-token-rotation.js";
+import type { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+interface SimCfnCognitoRefreshTokenRotationProperties {
+    readonly resource: SimCfnResource;
+    readonly propertyParser: SimCfnCognitoPropertyParser;
+}
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export declare class SimCfnCognitoRefreshTokenRotation {
+    private readonly resource;
+    private readonly propertyParser;
+    constructor(properties: SimCfnCognitoRefreshTokenRotationProperties);
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value: SimCfnTemplateValue | undefined): SimCognitoRefreshTokenRotationType | undefined;
+}
+export {};
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.d.ts.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8DAA8D,CAAC;AACvH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAOzF,UAAU,2CAA2C;IACnD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;;OAGG;IACH,KAAK,CACH,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,kCAAkC,GAAG,SAAS,CA8BhD;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js

@@ -0,0 +1,35 @@
+/**
+ * The `RefreshTokenRotation` fields, which are both of them.
+ */
+const modelledFields = ["Feature", "RetryGracePeriodSeconds"];
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export class SimCfnCognitoRefreshTokenRotation {
+    resource;
+    propertyParser;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.propertyParser = properties.propertyParser;
+    }
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value) {
+        const rotation = this.propertyParser.optionalRecord(this.resource, value, "RefreshTokenRotation");
+        if (rotation === undefined) {
+            return undefined;
+        }
+        this.propertyParser.ignoreUnmodelledKeys(this.resource, rotation, modelledFields, "RefreshTokenRotation ");
+        return {
+            Feature: this.propertyParser.optionalString(this.resource, rotation["Feature"], "RefreshTokenRotation Feature"),
+            RetryGracePeriodSeconds: this.propertyParser.optionalNumber(this.resource, rotation["RetryGracePeriodSeconds"], "RefreshTokenRotation RetryGracePeriodSeconds"),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.js.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAO9D;;;;;;GAMG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAAuD;QACjE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,KAAsC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACjD,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,sBAAsB,CACvB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACtC,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR,cAAc,EACd,uBAAuB,CACxB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzC,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,SAAS,CAAC,EACnB,8BAA8B,CAC/B;YACD,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzD,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,yBAAyB,CAAC,EACnC,8CAA8C,CAC/C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/auth/auth.command.d.ts

@@ -121,6 +121,37 @@ export interface SimRespondToAuthChallengeCommand {
     readonly input: SimRespondToAuthChallengeCommandInput;
 }
 export type SimRespondToAuthChallengeCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The GetTokensFromRefreshToken inputs this simulation reads, and the ones it
+ * refuses.
+ *
+ * There is no `SECRET_HASH` and no username: the refresh token is what says
+ * whose session this is, and the client secret itself is what proves the
+ * caller, as it does on real Cognito.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GetTokensFromRefreshTokenCommand/
+ */
+export interface SimGetTokensFromRefreshTokenCommandInput {
+    readonly RefreshToken?: string | undefined;
+    readonly ClientId?: string | undefined;
+    readonly ClientSecret?: string | undefined;
+    readonly DeviceKey?: string | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * Minimal structural sim Cognito GetTokensFromRefreshToken command.
+ */
+export interface SimGetTokensFromRefreshTokenCommand {
+    readonly input: SimGetTokensFromRefreshTokenCommandInput;
+}
+/**
+ * What a token refresh answers with, which is the tokens and nothing else:
+ * this operation runs no challenge, so it never answers with one.
+ */
+export interface SimGetTokensFromRefreshTokenCommandOutput {
+    readonly AuthenticationResult?: SimCognitoAuthenticationResultType | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
 /**
  * The GlobalSignOut inputs this simulation reads.
  *

package/dist/service/cognito/command/auth/auth.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts

@@ -6,6 +6,7 @@ import type { SimCognitoUserPoolTriggers } from "../../user-pool/trigger/sim-cog
 import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
@@ -44,6 +45,7 @@ export declare class SimCognitoAuthCommands {
     readonly adminRespondToChallenge: SimCognitoAdminRespondToChallenge;
     readonly initiateAuth: SimCognitoInitiateAuth;
     readonly respondToChallenge: SimCognitoRespondToChallenge;
+    readonly getTokensFromRefreshToken: SimCognitoGetTokensFromRefreshToken;
     readonly signOut: SimCognitoSignOutCommands;
     constructor(properties: SimCognitoAuthCommandsProperties);
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAOxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EAqDvD;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,yBAAyB,EAAE,mCAAmC,CAAC;IAC/E,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EA8DvD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js

@@ -1,6 +1,7 @@
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
 import { SimCognitoAuthFlowRunner } from "./sim-cognito-auth-flow-runner.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import { SimCognitoChallengeResponses } from "./sim-cognito-challenge-responses.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoMfaChallenge } from "./sim-cognito-mfa-challenge.js";
@@ -9,6 +10,7 @@ import { SimCognitoNewPasswordChallenge } from "./sim-cognito-new-password-chall
 import { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
 import { SimCognitoPasswordSignIn } from "./sim-cognito-password-sign-in.js";
 import { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
 import { SimCognitoSignInCompletion } from "./sim-cognito-sign-in-completion.js";
 import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
@@ -28,6 +30,7 @@ export class SimCognitoAuthCommands {
     adminRespondToChallenge;
     initiateAuth;
     respondToChallenge;
+    getTokensFromRefreshToken;
     signOut;
     constructor(properties) {
         const { resolver, authResolver, pools, clock, triggers, tokenIssuer, messenger, } = properties;
@@ -39,6 +42,10 @@ export class SimCognitoAuthCommands {
             triggers,
             mfaChallenge: new SimCognitoMfaChallenge({ messenger, clock }),
         });
+        // Both refresh operations answer the same way once the token is accepted,
+        // and which app client the refresh went through is what decides whether a
+        // new refresh token comes back.
+        const refreshedTokens = new SimCognitoRefreshedTokens({ tokenIssuer });
         const flowRunner = new SimCognitoAuthFlowRunner({
             passwordSignIn: new SimCognitoPasswordSignIn({
                 authResolver,
@@ -46,7 +53,7 @@ export class SimCognitoAuthCommands {
                 challenge: new SimCognitoNewPasswordChallenge({ clock }),
                 triggers,
             }),
-            refreshSignIn: new SimCognitoRefreshSignIn({ tokenIssuer, clock }),
+            refreshSignIn: new SimCognitoRefreshSignIn({ refreshedTokens, clock }),
         });
         const responses = new SimCognitoChallengeResponses({
             newPassword: new SimCognitoNewPasswordResponse({
@@ -72,6 +79,11 @@ export class SimCognitoAuthCommands {
             authResolver,
             responses,
         });
+        this.getTokensFromRefreshToken = new SimCognitoGetTokensFromRefreshToken({
+            authResolver,
+            refreshedTokens,
+            clock,
+        });
         this.signOut = new SimCognitoSignOutCommands({ resolver, pools, clock });
     }
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAuBtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,GACV,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,UAAU;gBACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;gBACxD,QAAQ;aACT,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAErG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAuBtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,yBAAyB,CAAsC;IAC/D,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,GACV,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,UAAU;gBACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;gBACxD,QAAQ;aACT,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,mCAAmC,CAAC;YACvE,YAAY;YACZ,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.d.ts

@@ -0,0 +1,35 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
+import type { SimGetTokensFromRefreshTokenCommand, SimGetTokensFromRefreshTokenCommandOutput } from "./auth.command.js";
+interface SimCognitoGetTokensFromRefreshTokenProperties {
+    readonly authResolver: SimCognitoAuthResolver;
+    readonly refreshedTokens: SimCognitoRefreshedTokens;
+    readonly clock: SimClock;
+}
+/**
+ * The GetTokensFromRefreshToken command.
+ *
+ * This is what renews a session on an app client that rotates its refresh
+ * tokens, and it renews one on a client that does not just as well. Like
+ * `InitiateAuth` it is what a browser or mobile app calls, so no IAM
+ * permission is involved and no caller is read.
+ *
+ * The request names no user and carries no `SECRET_HASH`. The refresh token is
+ * what says whose session this is, and the client secret is what proves the
+ * caller, which is why a confidential client sends `ClientSecret` here rather
+ * than a hash computed over a username it does not have.
+ */
+export declare class SimCognitoGetTokensFromRefreshToken {
+    private readonly authResolver;
+    private readonly refreshedTokens;
+    private readonly clock;
+    private readonly unsimulated;
+    constructor(properties: SimCognitoGetTokensFromRefreshTokenProperties);
+    /**
+     * Renew a session from the refresh token it holds.
+     */
+    handle(command: SimGetTokensFromRefreshTokenCommand): Promise<SimGetTokensFromRefreshTokenCommandOutput>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-get-tokens-from-refresh-token.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-get-tokens-from-refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EACV,mCAAmC,EACnC,yCAAyC,EAC1C,MAAM,mBAAmB,CAAC;AAE3B,UAAU,6CAA6C;IACrD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,mCAAmC;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAEF,YAAY,UAAU,EAAE,6CAA6C,EAIpE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,yCAAyC,CAAC,CA0BpD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.js

@@ -0,0 +1,51 @@
+import { requireSimCognitoRefreshTokenInput } from "../../user-pool/auth/sim-cognito-refresh-token-input.js";
+import { requireSimCognitoClientSecret } from "../../user-pool/client/sim-cognito-client-secret.js";
+import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
+/**
+ * The GetTokensFromRefreshToken command.
+ *
+ * This is what renews a session on an app client that rotates its refresh
+ * tokens, and it renews one on a client that does not just as well. Like
+ * `InitiateAuth` it is what a browser or mobile app calls, so no IAM
+ * permission is involved and no caller is read.
+ *
+ * The request names no user and carries no `SECRET_HASH`. The refresh token is
+ * what says whose session this is, and the client secret is what proves the
+ * caller, which is why a confidential client sends `ClientSecret` here rather
+ * than a hash computed over a username it does not have.
+ */
+export class SimCognitoGetTokensFromRefreshToken {
+    authResolver;
+    refreshedTokens;
+    clock;
+    unsimulated = new SimCognitoUnsimulatedInput("GetTokensFromRefreshToken");
+    constructor(properties) {
+        this.authResolver = properties.authResolver;
+        this.refreshedTokens = properties.refreshedTokens;
+        this.clock = properties.clock;
+    }
+    /**
+     * Renew a session from the refresh token it holds.
+     */
+    async handle(command) {
+        const { input } = command;
+        const { pool, client } = this.authResolver.client(input.ClientId);
+        this.unsimulated.refuse("DeviceKey", input.DeviceKey, "device remembering, which signs a known device in without its second factor");
+        requireSimCognitoClientSecret(client, input.ClientSecret);
+        const refreshToken = pool.auth.requireRefreshToken({
+            value: requireSimCognitoRefreshTokenInput(input.RefreshToken),
+            clientId: client.id,
+            now: this.clock.now(),
+        });
+        return {
+            $metadata: {},
+            AuthenticationResult: await this.refreshedTokens.issue({
+                pool,
+                client,
+                refreshToken,
+                clientMetadata: input.ClientMetadata,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-get-tokens-from-refresh-token.js.map

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-get-tokens-from-refresh-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yDAAyD,CAAC;AAC7G,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAcjF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mCAAmC;IAC7B,YAAY,CAAyB;IACrC,eAAe,CAA4B;IAC3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,0BAA0B,CAC3D,2BAA2B,CAC5B,CAAC;IAEF,YAAY,UAAyD;QACnE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,WAAW,EACX,KAAK,CAAC,SAAS,EACf,6EAA6E,CAC9E,CAAC;QACF,6BAA6B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACjD,KAAK,EAAE,kCAAkC,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7D,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBACrD,IAAI;gBACJ,MAAM;gBACN,YAAY;gBACZ,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-refresh-sign-in.d.ts

@@ -1,9 +1,9 @@
 import type { SimClock } from "../../../../util/clock/sim-clock.js";
-import type { SimCognitoTokenIssuer } from "../../user-pool/token/sim-cognito-token-issuer.js";
+import type { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
 import type { SimCognitoAuthRequest } from "./sim-cognito-password-sign-in.js";
 import type { SimCognitoAuthenticationOutput } from "./auth.command.js";
 interface SimCognitoRefreshSignInProperties {
-    readonly tokenIssuer: SimCognitoTokenIssuer;
+    readonly refreshedTokens: SimCognitoRefreshedTokens;
     readonly clock: SimClock;
 }
 /**
@@ -13,15 +13,10 @@ interface SimCognitoRefreshSignInProperties {
  * it is, which is why one presented to another app client is refused. Nothing
  * new comes back with the tokens, because real Cognito issues no new refresh
  * token here, so a client keeps the one it has until that expires.
- *
- * The pool's `PreTokenGeneration` trigger runs for the reissued tokens, as it
- * does on real Cognito, so a claim it changed since the sign-in is on the token
- * a refresh answers with rather than being stale for the life of the session.
  */
 export declare class SimCognitoRefreshSignIn {
-    private readonly tokenIssuer;
+    private readonly refreshedTokens;
     private readonly clock;
-    private readonly result;
     constructor(properties: SimCognitoRefreshSignInProperties);
     /**
      * Refresh a session, or refuse the token it was asked for with.

package/dist/service/cognito/command/auth/sim-cognito-refresh-sign-in.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-refresh-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-refresh-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAI/F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,iCAAiC;IACzC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CAoCzC;CACF"}
+{"version":3,"file":"sim-cognito-refresh-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-refresh-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,iCAAiC;IACzC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAuBD;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CA8BzC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-refresh-sign-in.js

@@ -1,8 +1,22 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
 import { requireSimCognitoSecretHash } from "../../user-pool/auth/sim-cognito-secret-hash.js";
-import { requireSimCognitoEnabled } from "../../user-pool/auth/sim-cognito-sign-in.js";
-import { SimCognitoTriggerOccasion } from "../../user-pool/trigger/sim-cognito-trigger-occasion.js";
-import { requireSimCognitoUsername } from "../../user-pool/user/sim-cognito-username.js";
-import { SimCognitoAuthenticationResult } from "./sim-cognito-authentication-result.js";
+/**
+ * Refuse a refresh through an app client that rotates its refresh tokens.
+ *
+ * Rotation and `REFRESH_TOKEN_AUTH` do not go together on real Cognito, which
+ * is why `aws-cdk-lib` drops `ALLOW_REFRESH_TOKEN_AUTH` from a client the
+ * moment it is given a rotation grace period. A client that kept the flow
+ * anyway is told where the operation went rather than handed tokens the real
+ * pool would not have handed it.
+ */
+function requireSimCognitoNoRotation(client) {
+    if (!client.refreshTokenRotation.enabled) {
+        return;
+    }
+    throw new SimCognitoInvalidParameterException(`REFRESH_TOKEN_AUTH is not available on the client ${client.id}: it ` +
+        `rotates its refresh tokens, so renew the session with ` +
+        `GetTokensFromRefreshToken instead`);
+}
 /**
  * Trading a refresh token for a new access and id token.
  *
@@ -10,17 +24,12 @@ import { SimCognitoAuthenticationResult } from "./sim-cognito-authentication-res
  * it is, which is why one presented to another app client is refused. Nothing
  * new comes back with the tokens, because real Cognito issues no new refresh
  * token here, so a client keeps the one it has until that expires.
- *
- * The pool's `PreTokenGeneration` trigger runs for the reissued tokens, as it
- * does on real Cognito, so a claim it changed since the sign-in is on the token
- * a refresh answers with rather than being stale for the life of the session.
  */
 export class SimCognitoRefreshSignIn {
-    tokenIssuer;
+    refreshedTokens;
     clock;
-    result = new SimCognitoAuthenticationResult();
     constructor(properties) {
-        this.tokenIssuer = properties.tokenIssuer;
+        this.refreshedTokens = properties.refreshedTokens;
         this.clock = properties.clock;
     }
     /**
@@ -28,6 +37,7 @@ export class SimCognitoRefreshSignIn {
      */
     async handle(request) {
         const { pool, client, parameters } = request;
+        requireSimCognitoNoRotation(client);
         const refreshToken = pool.auth.requireRefreshToken({
             value: parameters.require("REFRESH_TOKEN"),
             clientId: client.id,
@@ -36,19 +46,16 @@ export class SimCognitoRefreshSignIn {
         // The hash covers the username, and the request carries none, so the one
         // the token was issued to is what it has to have been computed with.
         requireSimCognitoSecretHash(refreshToken.username, client, parameters.find("SECRET_HASH"));
-        const user = pool.requireUser(requireSimCognitoUsername(refreshToken.username));
-        requireSimCognitoEnabled(user);
         // A refresh runs through `InitiateAuth`, whose `ClientMetadata` real
         // Cognito does not pass to the token trigger, so none travels with these
         // tokens.
         return {
             $metadata: {},
-            AuthenticationResult: this.result.of(await this.tokenIssuer.reissue({
+            AuthenticationResult: await this.refreshedTokens.issue({
                 pool,
                 client,
-                user,
-                occasion: SimCognitoTriggerOccasion.refreshTokenGeneration,
-            })),
+                refreshToken,
+            }),
         };
     }
 }

package/dist/service/cognito/command/auth/sim-cognito-refresh-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-refresh-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-refresh-sign-in.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAEvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AASxF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IACjB,WAAW,CAAwB;IACnC,KAAK,CAAW;IAChB,MAAM,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE/D,YAAY,UAA6C;QACvD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACjD,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC;YAC1C,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,yEAAyE;QACzE,qEAAqE;QACrE,2BAA2B,CACzB,YAAY,CAAC,QAAQ,EACrB,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAC3B,yBAAyB,CAAC,YAAY,CAAC,QAAQ,CAAC,CACjD,CAAC;QAEF,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE/B,qEAAqE;QACrE,yEAAyE;QACzE,UAAU;QACV,OAAO;YACL,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAClC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC7B,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,yBAAyB,CAAC,sBAAsB;aAC3D,CAAC,CACH;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-refresh-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-refresh-sign-in.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAW9F;;;;;;;;GAQG;AACH,SAAS,2BAA2B,CAAC,MAAgC;IACnE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,mCAAmC,CAC3C,qDAAqD,MAAM,CAAC,EAAE,OAAO;QACnE,wDAAwD;QACxD,mCAAmC,CACtC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,eAAe,CAA4B;IAC3C,KAAK,CAAW;IAEjC,YAAY,UAA6C;QACvD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAE7C,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACjD,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC;YAC1C,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,yEAAyE;QACzE,qEAAqE;QACrE,2BAA2B,CACzB,YAAY,CAAC,QAAQ,EACrB,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAC/B,CAAC;QAEF,qEAAqE;QACrE,yEAAyE;QACzE,UAAU;QACV,OAAO;YACL,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBACrD,IAAI;gBACJ,MAAM;gBACN,YAAY;aACb,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-refreshed-tokens.d.ts

@@ -0,0 +1,56 @@
+import type { SimCognitoIssuedToken } from "../../user-pool/auth/sim-cognito-issued-token.js";
+import type { SimCognitoUserPoolClient } from "../../user-pool/client/sim-cognito-user-pool-client.js";
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoTokenIssuer } from "../../user-pool/token/sim-cognito-token-issuer.js";
+import type { SimCognitoAuthenticationResultType } from "./auth.command.js";
+interface SimCognitoRefreshedTokensProperties {
+    readonly tokenIssuer: SimCognitoTokenIssuer;
+}
+/**
+ * What a refresh has to name for tokens to come back: the pool, the app client
+ * it goes through, and the refresh token the pool has already accepted.
+ */
+interface SimCognitoRefreshedTokensRequest {
+    readonly pool: SimCognitoUserPool;
+    readonly client: SimCognitoUserPoolClient;
+    readonly refreshToken: SimCognitoIssuedToken;
+    /**
+     * The `ClientMetadata` the request carried, which reaches the pool's token
+     * trigger. A `REFRESH_TOKEN_AUTH` refresh passes none, as real Cognito
+     * passes none from `InitiateAuth`.
+     */
+    readonly clientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * The tokens a refresh answers with, whichever operation asked for them.
+ *
+ * `REFRESH_TOKEN_AUTH` and `GetTokensFromRefreshToken` prove the caller
+ * differently and reach the pool differently, and once the refresh token is
+ * accepted they answer the same way, so what they share is here.
+ *
+ * Which app client the refresh went through decides whether a new refresh
+ * token comes back. A rotating client hands one out and spends the token that
+ * bought it, and a client with rotation off answers with the access and id
+ * token alone, leaving the caller the token it already has.
+ *
+ * The pool's `PreTokenGeneration` trigger runs for the reissued tokens either
+ * way, as it does on real Cognito, so a claim it changed since the sign-in is
+ * on the token a refresh answers with rather than being stale for the life of
+ * the session.
+ */
+export declare class SimCognitoRefreshedTokens {
+    private readonly tokenIssuer;
+    private readonly result;
+    constructor(properties: SimCognitoRefreshedTokensProperties);
+    /**
+     * Reissue a session's tokens, rotating its refresh token where the app
+     * client rotates.
+     *
+     * The refresh token names no user: the pool that issued it is what knows
+     * whose it is, which is why the user is looked up from the token rather than
+     * from the request.
+     */
+    issue(request: SimCognitoRefreshedTokensRequest): Promise<SimCognitoAuthenticationResultType>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-refreshed-tokens.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-refreshed-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-refreshed-tokens.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-refreshed-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAE9F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAI/F,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AAE5E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAED;;;GAGG;AACH,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAE7C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;;;;;;OAOG;IACG,KAAK,CACT,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,kCAAkC,CAAC,CAkB7C;CACF"}