@kensio/yulin 1.18.1 → 1.19.0

package/dist/sdk/wire/sim-sdk-wire-operation.d.ts

@@ -43,5 +43,20 @@ export interface SimSdkWireCredentialScope {
  * an unsupported request can still say which service it was for.
  */
 export declare function readSimSdkWireCredentialScope(request: SimSdkWireRequestHeaders): SimSdkWireCredentialScope | undefined;
+/**
+ * Read the credential scope a presigned URL states in its query string.
+ *
+ * A presigned URL is fetched by whatever holds it, over plain HTTP and with no
+ * Authorization header to read. It states the same access key and scope in
+ * `X-Amz-Credential`, and that parameter is the only place such a request says
+ * which service and Region it was signed for.
+ *
+ * This is separate from the header form because the two answer different
+ * questions. A request carrying an Authorization header came from an AWS SDK.
+ * A presigned URL came from anything that can make an HTTP request, so a
+ * caller asking whether it holds a serialized Command wants the header form
+ * alone.
+ */
+export declare function readSimSdkWirePresignedCredentialScope(path: string): SimSdkWireCredentialScope | undefined;
 export {};
 //# sourceMappingURL=sim-sdk-wire-operation.d.ts.map

package/dist/sdk/wire/sim-sdk-wire-operation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sdk-wire-operation.d.ts","sourceRoot":"","sources":["../../../src/sdk/wire/sim-sdk-wire-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAyCjE;;;;;;;GAOG;AACH,KAAK,wBAAwB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,mBAAmB,GAAG,SAAS,CAmBjC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,GAAG,SAAS,CAYvC"}
+{"version":3,"file":"sim-sdk-wire-operation.d.ts","sourceRoot":"","sources":["../../../src/sdk/wire/sim-sdk-wire-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAyCjE;;;;;;;GAOG;AACH,KAAK,wBAAwB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,mBAAmB,GAAG,SAAS,CAmBjC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,GAAG,SAAS,CAOvC;AAUD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,MAAM,GACX,yBAAyB,GAAG,SAAS,CAiBvC"}

package/dist/sdk/wire/sim-sdk-wire-operation.js

@@ -71,8 +71,60 @@ export function readSimSdkWireOperation(request) {
 export function readSimSdkWireCredentialScope(request) {
     const authorization = request.headers["authorization"];
     const credential = /Credential=[^/]*\/(?<scope>[^,\s]+)/.exec(authorization ?? "")?.groups?.["scope"];
-    const [, regionName, signingName] = credential?.split("/") ?? [];
-    if (regionName === undefined || signingName === undefined) {
+    return simSdkWireCredentialScope(credential);
+}
+/**
+ * The query parameter a presigned URL states its credential in, lower-cased.
+ *
+ * Signers emit the `X-Amz-` spelling. Names are compared without regard to
+ * case, matching how the signature verifier reads the same parameter.
+ */
+const presignedCredentialParameter = "x-amz-credential";
+/**
+ * Read the credential scope a presigned URL states in its query string.
+ *
+ * A presigned URL is fetched by whatever holds it, over plain HTTP and with no
+ * Authorization header to read. It states the same access key and scope in
+ * `X-Amz-Credential`, and that parameter is the only place such a request says
+ * which service and Region it was signed for.
+ *
+ * This is separate from the header form because the two answer different
+ * questions. A request carrying an Authorization header came from an AWS SDK.
+ * A presigned URL came from anything that can make an HTTP request, so a
+ * caller asking whether it holds a serialized Command wants the header form
+ * alone.
+ */
+export function readSimSdkWirePresignedCredentialScope(path) {
+    const query = path.indexOf("?");
+    if (query === -1) {
+        return undefined;
+    }
+    const parameters = new URLSearchParams(path.slice(query + 1));
+    for (const [name, value] of parameters) {
+        if (name.toLowerCase() === presignedCredentialParameter) {
+            // The value is `<access key id>/<scope>`, as an Authorization header
+            // writes it.
+            return simSdkWireCredentialScope(value.slice(value.indexOf("/") + 1));
+        }
+    }
+    return undefined;
+}
+/**
+ * Read the Region and the signing name out of a credential scope value.
+ *
+ * The scope is `<date>/<region>/<signing name>/aws4_request` wherever it is
+ * written. A value naming neither yields nothing, since a request that fails
+ * to say where it is going is one to decline.
+ *
+ * The rest of the shape goes unchecked here. Simulated IAM parses the same
+ * value again to verify the signature, and refuses a bad date or a missing
+ * `aws4_request` terminator by name. Refusing it here instead would answer a
+ * malformed signature with a 501 naming a hostname, which says nothing about
+ * what was actually wrong with it.
+ */
+function simSdkWireCredentialScope(scope) {
+    const [, regionName = "", signingName = ""] = scope?.split("/") ?? [];
+    if (regionName.length === 0 || signingName.length === 0) {
         return undefined;
     }
     return { regionName, signingName };

package/dist/sdk/wire/sim-sdk-wire-operation.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sdk-wire-operation.js","sourceRoot":"","sources":["../../../src/sdk/wire/sim-sdk-wire-operation.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,mCAAmC,EAAE,2BAA2B,CAAC;IAClE,CAAC,WAAW,EAAE,aAAa,CAAC;IAC5B,CAAC,oCAAoC,EAAE,KAAK,CAAC;IAC7C,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC7B,CAAC,0BAA0B,EAAE,kBAAkB,CAAC;IAChD,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACjC,CAAC,+BAA+B,EAAE,YAAY,CAAC;IAC/C,CAAC,eAAe,EAAE,iBAAiB,CAAC;IACpC,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrC,CAAC,cAAc,EAAE,KAAK,CAAC;IACvB,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CACtC,CAAC,CAAC;AAsBH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,oGAAoG;IACpG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,aAAa,SAAS,EAAE,CAAC;AAC/D,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAiC;IAEjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,qCAAqC,CAAC,IAAI,CAC3D,aAAa,IAAI,EAAE,CACpB,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"sim-sdk-wire-operation.js","sourceRoot":"","sources":["../../../src/sdk/wire/sim-sdk-wire-operation.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAgC,IAAI,GAAG,CAAC;IAClE,CAAC,mCAAmC,EAAE,2BAA2B,CAAC;IAClE,CAAC,WAAW,EAAE,aAAa,CAAC;IAC5B,CAAC,oCAAoC,EAAE,KAAK,CAAC;IAC7C,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,WAAW,EAAE,KAAK,CAAC;IACpB,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC7B,CAAC,0BAA0B,EAAE,kBAAkB,CAAC;IAChD,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACjC,CAAC,+BAA+B,EAAE,YAAY,CAAC;IAC/C,CAAC,eAAe,EAAE,iBAAiB,CAAC;IACpC,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrC,CAAC,cAAc,EAAE,KAAK,CAAC;IACvB,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CACtC,CAAC,CAAC;AAsBH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,oGAAoG;IACpG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,aAAa,SAAS,EAAE,CAAC;AAC/D,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAiC;IAEjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,qCAAqC,CAAC,IAAI,CAC3D,aAAa,IAAI,EAAE,CACpB,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAErB,OAAO,yBAAyB,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sCAAsC,CACpD,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAE9D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,4BAA4B,EAAE,CAAC;YACxD,qEAAqE;YACrE,aAAa;YACb,OAAO,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,yBAAyB,CAChC,KAAyB;IAEzB,MAAM,CAAC,EAAE,UAAU,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACrC,CAAC"}

package/dist/serve/http/api/sim-aws-api-endpoint.d.ts

@@ -15,6 +15,9 @@ interface SimAwsApiEndpointProperties {
  *
  * So this endpoint routes on the credential scope. One endpoint URL then
  * serves every simulated service, which is the shape `--endpoint-url` wants.
+ * A presigned URL signed for the same endpoint states its scope in the query
+ * string, since it carries no Authorization header of its own, and it routes
+ * here on that.
  *
  * The scope also says which protocol to read the request with. Most simulated
  * services speak the AWS JSON protocol and name their operation in a header.

package/dist/serve/http/api/sim-aws-api-endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-api-endpoint.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/api/sim-aws-api-endpoint.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAO9D,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IAExE,YAAY,UAAU,EAAE,2BAA2B,EAIlD;IAED;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CA0C5D;CACF"}
+{"version":3,"file":"sim-aws-api-endpoint.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/api/sim-aws-api-endpoint.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAO9D,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IAExE,YAAY,UAAU,EAAE,2BAA2B,EAIlD;IAED;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgD5D;CACF"}

package/dist/serve/http/api/sim-aws-api-endpoint.js

@@ -1,6 +1,6 @@
 import { SimSdkUnbridgedWireRequestError } from "../../../sdk/error/sim-sdk.error.js";
 import { SimSdkWireDispatcher } from "../../../sdk/wire/sim-sdk-wire-dispatcher.js";
-import { readSimSdkWireCredentialScope } from "../../../sdk/wire/sim-sdk-wire-operation.js";
+import { readSimSdkWireCredentialScope, readSimSdkWirePresignedCredentialScope, } from "../../../sdk/wire/sim-sdk-wire-operation.js";
 import { SimAwsReceivedRequest } from "../request/sim-aws-received-request.js";
 import { simAwsProtocolEndpoints, } from "./sim-aws-api-protocols.js";
 /**
@@ -16,6 +16,9 @@ import { simAwsProtocolEndpoints, } from "./sim-aws-api-protocols.js";
  *
  * So this endpoint routes on the credential scope. One endpoint URL then
  * serves every simulated service, which is the shape `--endpoint-url` wants.
+ * A presigned URL signed for the same endpoint states its scope in the query
+ * string, since it carries no Authorization header of its own, and it routes
+ * here on that.
  *
  * The scope also says which protocol to read the request with. Most simulated
  * services speak the AWS JSON protocol and name their operation in a header.
@@ -41,7 +44,12 @@ export class SimAwsApiEndpoint {
     async handle(request) {
         const received = await SimAwsReceivedRequest.receive(request);
         const wireRequest = simAwsApiWireRequest(request, received.body);
-        const scope = readSimSdkWireCredentialScope(wireRequest);
+        // A presigned query signature is read first, because that is the order
+        // simulated IAM verifies the two in. Routing a request by one signature
+        // and checking its scope against the other would refuse a request over a
+        // disagreement the caller never stated.
+        const scope = readSimSdkWirePresignedCredentialScope(wireRequest.path) ??
+            readSimSdkWireCredentialScope(wireRequest);
         if (scope === undefined) {
             return undefined;
         }

package/dist/serve/http/api/sim-aws-api-endpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-api-endpoint.js","sourceRoot":"","sources":["../../../../src/serve/http/api/sim-aws-api-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAG5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AAMpC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,iBAAiB;IACX,MAAM,CAAS;IACf,UAAU,CAAuB;IACjC,SAAS,CAA8C;IAExE,YAAY,UAAuC;QACjD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,uBAAuB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,QAAQ,CAAC,MAAM,CAC1B,OAAO,EACP,QAAQ,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,EACjC,MAAM,CAAC,QAAQ,EAAE,EACjB,KAAK,CAAC,UAAU,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;gBACrD,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;YACrE,MAAM,EAAE,QAAQ,CAAC,UAAU;YAC3B,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CAAC,KAAY;IAClD,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,OAAgB,EAChB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;QACpC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,IAAI,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-aws-api-endpoint.js","sourceRoot":"","sources":["../../../../src/serve/http/api/sim-aws-api-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EACL,6BAA6B,EAC7B,sCAAsC,GACvC,MAAM,6CAA6C,CAAC;AAGrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AAMpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,iBAAiB;IACX,MAAM,CAAS;IACf,UAAU,CAAuB;IACjC,SAAS,CAA8C;IAExE,YAAY,UAAuC;QACjD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,uBAAuB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEjE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,wCAAwC;QACxC,MAAM,KAAK,GACT,sCAAsC,CAAC,WAAW,CAAC,IAAI,CAAC;YACxD,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,QAAQ,CAAC,MAAM,CAC1B,OAAO,EACP,QAAQ,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,EACjC,MAAM,CAAC,QAAQ,EAAE,EACjB,KAAK,CAAC,UAAU,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;gBACrD,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;YACrE,MAAM,EAAE,QAAQ,CAAC,UAAU;YAC3B,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CAAC,KAAY;IAClD,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,OAAgB,EAChB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;QACpC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,IAAI,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/service/aws/factory/sim-aws-lambda-collaborators.d.ts

@@ -1,3 +1,4 @@
+import { SimAwsLambdaDestinations } from "../../lambda/destination/sim-aws-lambda-destinations.js";
 import { SimDynamoDbEventSourceStreams } from "../../lambda/event-source/stream/sim-dynamodb-event-source-streams.js";
 import { SimSqsEventSourceQueues } from "../../lambda/event-source/queue/sim-sqs-event-source-queues.js";
 import { SimEcrLambdaContainerImages } from "../../lambda/function/code/image/sim-ecr-lambda-container-images.js";
@@ -28,6 +29,7 @@ interface SimAwsLambdaCollaborators {
     readonly vmSdkModuleProvider: SimSdkLambdaVmModuleProvider;
     readonly outboundHttp: SimLambdaOutboundHttp;
     readonly logs: SimLogsServiceWriter;
+    readonly destinations: SimAwsLambdaDestinations;
 }
 /**
  * Build the collaborators simulated Lambda takes beyond the scoped ones every
@@ -46,6 +48,10 @@ interface SimAwsLambdaCollaborators {
  * rather than this scope's, because an image URI names the Account and Region
  * its registry is in, which need not be this one.
  *
+ * An asynchronous invocation result is sent through the whole simulation
+ * rather than through this scope, because a destination ARN names the Account
+ * and Region it lives in, and real Lambda delivers across both.
+ *
  * Handler output is recorded to the same Account/Region scope's simulated
  * CloudWatch Logs, since that is where `/aws/lambda/<name>` lives for a
  * function in this scope.

package/dist/service/aws/factory/sim-aws-lambda-collaborators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-lambda-collaborators.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-lambda-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uEAAuE,CAAC;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAEtH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAC5F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED;;GAEG;AACH,UAAU,yBAAyB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,mCAAmC,GAC9C,yBAAyB,CA0B3B"}
+{"version":3,"file":"sim-aws-lambda-collaborators.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-lambda-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,uEAAuE,CAAC;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAEtH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAC5F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED;;GAEG;AACH,UAAU,yBAAyB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;CACjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,mCAAmC,GAC9C,yBAAyB,CA2B3B"}

package/dist/service/aws/factory/sim-aws-lambda-collaborators.js

@@ -1,3 +1,4 @@
+import { SimAwsLambdaDestinations } from "../../lambda/destination/sim-aws-lambda-destinations.js";
 import { SimDynamoDbEventSourceStreams } from "../../lambda/event-source/stream/sim-dynamodb-event-source-streams.js";
 import { SimSqsEventSourceQueues } from "../../lambda/event-source/queue/sim-sqs-event-source-queues.js";
 import { SimEcrLambdaContainerImages } from "../../lambda/function/code/image/sim-ecr-lambda-container-images.js";
@@ -21,6 +22,10 @@ import { makeSimLambdaOutboundHttp } from "../../lambda/function/outbound/sim-la
  * rather than this scope's, because an image URI names the Account and Region
  * its registry is in, which need not be this one.
  *
+ * An asynchronous invocation result is sent through the whole simulation
+ * rather than through this scope, because a destination ARN names the Account
+ * and Region it lives in, and real Lambda delivers across both.
+ *
  * Handler output is recorded to the same Account/Region scope's simulated
  * CloudWatch Logs, since that is where `/aws/lambda/<name>` lives for a
  * function in this scope.
@@ -40,6 +45,7 @@ export function simAwsLambdaCollaborators(properties) {
     return {
         outboundHttp,
         runAsOwner: simAws,
+        destinations: new SimAwsLambdaDestinations({ simAws }),
         logs: scope.logs().serviceWriter(),
         urlRegistry: properties.urlRegistry,
         codeStore: new SimS3LambdaCodeStore({ s3: scope.s3() }),

package/dist/service/aws/factory/sim-aws-lambda-collaborators.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-lambda-collaborators.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-lambda-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uEAAuE,CAAC;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AA8B/G;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAA+C;IAE/C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACrC,MAAM,YAAY,GAAG,yBAAyB,CAAC;QAC7C,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,YAAY;QACZ,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE;QAClC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACvD,eAAe,EAAE,IAAI,2BAA2B,CAAC;YAC/C,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG;SACxC,CAAC;QACF,iBAAiB,EAAE,IAAI,uBAAuB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,kBAAkB,EAAE,IAAI,6BAA6B,CAAC;YACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;SAC3B,CAAC;QACF,mBAAmB,EAAE,IAAI,4BAA4B,CAAC;YACpD,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;YAC/C,YAAY;SACb,CAAC;KACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-aws-lambda-collaborators.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-lambda-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,uEAAuE,CAAC;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AA+B/G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAA+C;IAE/C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACrC,MAAM,YAAY,GAAG,yBAAyB,CAAC;QAC7C,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,YAAY;QACZ,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE;QAClC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACvD,eAAe,EAAE,IAAI,2BAA2B,CAAC;YAC/C,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG;SACxC,CAAC;QACF,iBAAiB,EAAE,IAAI,uBAAuB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,kBAAkB,EAAE,IAAI,6BAA6B,CAAC;YACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;SAC3B,CAAC;QACF,mBAAmB,EAAE,IAAI,4BAA4B,CAAC;YACpD,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;YAC/C,YAAY;SACb,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAmC5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CA6D/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AA6C5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CAqE/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js

@@ -1,5 +1,6 @@
 import { SimCfnCognitoGeneratedName } from "../sim-cfn-cognito-generated-name.js";
 import { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+import { SimCfnCognitoRefreshTokenRotation } from "./sim-cfn-cognito-refresh-token-rotation.js";
 import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validity-units.js";
 /**
  * The AWS::Cognito::UserPoolClient properties this simulation deploys.
@@ -9,6 +10,13 @@ import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validit
  * for, which scopes, which URL it may be sent back to, and which identity
  * provider it may sign a user in through.
  *
+ * `RefreshTokenRotation` is among them, because it decides which operation
+ * renews a session: a client deployed with rotation is renewed with
+ * `GetTokensFromRefreshToken` rather than `REFRESH_TOKEN_AUTH`.
+ *
+ * `AuthSessionValidity` is among them, because it decides how long a user
+ * answering a challenge has before its session runs out.
+ *
  * The managed login branding properties are not, because managed login is a
  * set of web pages rather than anything this simulation answers.
  */
@@ -21,6 +29,8 @@ const simulatedProperties = [
     "AccessTokenValidity",
     "IdTokenValidity",
     "RefreshTokenValidity",
+    "AuthSessionValidity",
+    "RefreshTokenRotation",
     "TokenValidityUnits",
     "AllowedOAuthFlows",
     "AllowedOAuthFlowsUserPoolClient",
@@ -66,6 +76,11 @@ export class SimCfnCognitoClientProperties {
             AccessTokenValidity: this.number(this.properties["AccessTokenValidity"], "AccessTokenValidity"),
             IdTokenValidity: this.number(this.properties["IdTokenValidity"], "IdTokenValidity"),
             RefreshTokenValidity: this.number(this.properties["RefreshTokenValidity"], "RefreshTokenValidity"),
+            AuthSessionValidity: this.number(this.properties["AuthSessionValidity"], "AuthSessionValidity"),
+            RefreshTokenRotation: new SimCfnCognitoRefreshTokenRotation({
+                resource: this.resource,
+                propertyParser: this.propertyParser,
+            }).parse(this.properties["RefreshTokenRotation"]),
             TokenValidityUnits: new SimCfnCognitoTokenValidityUnits({
                 resource: this.resource,
                 propertyParser: this.propertyParser,

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,qBAAqB;IACrB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,oBAAoB,EAAE,IAAI,iCAAiC,CAAC;gBAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;YACjD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts

@@ -0,0 +1,27 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCognitoRefreshTokenRotationType } from "../../user-pool/client/sim-cognito-refresh-token-rotation.js";
+import type { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+interface SimCfnCognitoRefreshTokenRotationProperties {
+    readonly resource: SimCfnResource;
+    readonly propertyParser: SimCfnCognitoPropertyParser;
+}
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export declare class SimCfnCognitoRefreshTokenRotation {
+    private readonly resource;
+    private readonly propertyParser;
+    constructor(properties: SimCfnCognitoRefreshTokenRotationProperties);
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value: SimCfnTemplateValue | undefined): SimCognitoRefreshTokenRotationType | undefined;
+}
+export {};
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.d.ts.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8DAA8D,CAAC;AACvH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAOzF,UAAU,2CAA2C;IACnD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;;OAGG;IACH,KAAK,CACH,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,kCAAkC,GAAG,SAAS,CA8BhD;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js

@@ -0,0 +1,35 @@
+/**
+ * The `RefreshTokenRotation` fields, which are both of them.
+ */
+const modelledFields = ["Feature", "RetryGracePeriodSeconds"];
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export class SimCfnCognitoRefreshTokenRotation {
+    resource;
+    propertyParser;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.propertyParser = properties.propertyParser;
+    }
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value) {
+        const rotation = this.propertyParser.optionalRecord(this.resource, value, "RefreshTokenRotation");
+        if (rotation === undefined) {
+            return undefined;
+        }
+        this.propertyParser.ignoreUnmodelledKeys(this.resource, rotation, modelledFields, "RefreshTokenRotation ");
+        return {
+            Feature: this.propertyParser.optionalString(this.resource, rotation["Feature"], "RefreshTokenRotation Feature"),
+            RetryGracePeriodSeconds: this.propertyParser.optionalNumber(this.resource, rotation["RetryGracePeriodSeconds"], "RefreshTokenRotation RetryGracePeriodSeconds"),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.js.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAO9D;;;;;;GAMG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAAuD;QACjE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,KAAsC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACjD,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,sBAAsB,CACvB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACtC,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR,cAAc,EACd,uBAAuB,CACxB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzC,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,SAAS,CAAC,EACnB,8BAA8B,CAC/B;YACD,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzD,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,yBAAyB,CAAC,EACnC,8CAA8C,CAC/C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.d.ts

@@ -1,16 +1,17 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
-import type { SimCognitoSignInPolicyType } from "../../user-pool/sim-cognito-password-policy.js";
+import type { SimCognitoSignInPolicyType } from "../../user-pool/sim-cognito-sign-in-policy.js";
 import type { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
 interface SimCfnCognitoSignInPolicyProperties {
     readonly resource: SimCfnResource;
     readonly propertyParser: SimCfnCognitoPropertyParser;
 }
 /**
- * Reads the `Policies SignInPolicy` of an AWS::Cognito::UserPool Resource.
+ * Reads the `Policies SignInPolicy` of an AWS::Cognito::UserPool Resource
+ * into the shape CreateUserPool takes.
  *
- * Nothing here chooses a first authentication factor, so this is read only so
- * that CreateUserPool receives it and refuses it in the words that say why.
+ * The factor names are checked by the pool rather than here, so a template and
+ * an SDK caller are held to the same rule in the same words.
  */
 export declare class SimCfnCognitoSignInPolicy {
     private readonly resource;

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-sign-in-policy.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAOzF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;GAKG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,KAAK,CACH,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,0BAA0B,GAAG,SAAS,CAyBxC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-sign-in-policy.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAOzF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,KAAK,CACH,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,0BAA0B,GAAG,SAAS,CAyBxC;CACF"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.js

@@ -1,12 +1,13 @@
 /**
- * The `SignInPolicy` fields, which reach CreateUserPool to be refused there.
+ * The `SignInPolicy` fields this simulation reads, which are all of them.
  */
 const modelledFields = ["AllowedFirstAuthFactors"];
 /**
- * Reads the `Policies SignInPolicy` of an AWS::Cognito::UserPool Resource.
+ * Reads the `Policies SignInPolicy` of an AWS::Cognito::UserPool Resource
+ * into the shape CreateUserPool takes.
  *
- * Nothing here chooses a first authentication factor, so this is read only so
- * that CreateUserPool receives it and refuses it in the words that say why.
+ * The factor names are checked by the pool rather than here, so a template and
+ * an SDK caller are held to the same rule in the same words.
  */
 export class SimCfnCognitoSignInPolicy {
     resource;

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-sign-in-policy.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAOnD;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAsC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAC/C,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,uBAAuB,CACxB,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACtC,IAAI,CAAC,QAAQ,EACb,MAAM,EACN,cAAc,EACd,wBAAwB,CACzB,CAAC;QAEF,OAAO;YACL,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAC9D,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,yBAAyB,CAAC,EACjC,+CAA+C,CAChD;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-sign-in-policy.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAOnD;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAsC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAC/C,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,uBAAuB,CACxB,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACtC,IAAI,CAAC,QAAQ,EACb,MAAM,EACN,cAAc,EACd,wBAAwB,CACzB,CAAC;QAEF,OAAO;YACL,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAC9D,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,yBAAyB,CAAC,EACjC,+CAA+C,CAChD;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.d.ts

@@ -20,6 +20,11 @@ interface SimCfnCognitoUserPoolMfaProperties {
  * list into those configurations is what lets `SetUserPoolMfaConfig` decide
  * which of them are simulated, so the two factors this simulation cannot
  * deliver a message for are refused in one place rather than two.
+ *
+ * `WebAuthnRelyingPartyID` and `WebAuthnUserVerification` travel the same
+ * way. CloudFormation carries them as two flat properties of the pool and the
+ * Cognito API takes them as one `WebAuthnConfiguration`, so they are gathered
+ * here into the call that configures them.
  */
 export declare class SimCfnCognitoUserPoolMfa {
     private readonly resource;
@@ -31,6 +36,14 @@ export declare class SimCfnCognitoUserPoolMfa {
      * here or on real AWS.
      */
     parse(userPoolId: string, properties: SimCfnTemplateValueRecord): SimSetUserPoolMfaConfigCommandInput | undefined;
+    /**
+     * How the template asks for passkeys to be registered, or nothing where it
+     * names neither property.
+     *
+     * The user verification value is checked by the pool rather than here, so a
+     * template and an SDK caller are refused in the same words.
+     */
+    private webAuthn;
     /**
      * The factors the template asks for, or nothing where it names none.
      */

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-user-pool-mfa.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAezF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;;;OAIG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,yBAAyB,GACpC,mCAAmC,GAAG,SAAS,CAiBjD;IAED;;OAEG;IACH,OAAO,CAAC,OAAO;IAwBf;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAW5B"}
+{"version":3,"file":"sim-cfn-cognito-user-pool-mfa.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAE5G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAezF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;;;OAIG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,yBAAyB,GACpC,mCAAmC,GAAG,SAAS,CAuBjD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IA0BhB;;OAEG;IACH,OAAO,CAAC,OAAO;IAwBf;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAW5B"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.js

@@ -16,6 +16,11 @@ const enabledMfaValues = ["SMS_MFA", "SOFTWARE_TOKEN_MFA", "EMAIL_OTP"];
  * list into those configurations is what lets `SetUserPoolMfaConfig` decide
  * which of them are simulated, so the two factors this simulation cannot
  * deliver a message for are refused in one place rather than two.
+ *
+ * `WebAuthnRelyingPartyID` and `WebAuthnUserVerification` travel the same
+ * way. CloudFormation carries them as two flat properties of the pool and the
+ * Cognito API takes them as one `WebAuthnConfiguration`, so they are gathered
+ * here into the call that configures them.
  */
 export class SimCfnCognitoUserPoolMfa {
     resource;
@@ -32,13 +37,37 @@ export class SimCfnCognitoUserPoolMfa {
     parse(userPoolId, properties) {
         const configuration = this.propertyParser.optionalString(this.resource, properties["MfaConfiguration"], "MfaConfiguration");
         const factors = this.factors(properties["EnabledMfas"]);
-        if (configuration === undefined && Object.keys(factors).length === 0) {
+        const webAuthn = this.webAuthn(properties);
+        if (configuration === undefined &&
+            webAuthn === undefined &&
+            Object.keys(factors).length === 0) {
             return undefined;
         }
         return {
             UserPoolId: userPoolId,
             ...(configuration !== undefined && { MfaConfiguration: configuration }),
             ...factors,
+            ...(webAuthn !== undefined && { WebAuthnConfiguration: webAuthn }),
+        };
+    }
+    /**
+     * How the template asks for passkeys to be registered, or nothing where it
+     * names neither property.
+     *
+     * The user verification value is checked by the pool rather than here, so a
+     * template and an SDK caller are refused in the same words.
+     */
+    webAuthn(properties) {
+        const relyingPartyId = this.propertyParser.optionalString(this.resource, properties["WebAuthnRelyingPartyID"], "WebAuthnRelyingPartyID");
+        const userVerification = this.propertyParser.optionalString(this.resource, properties["WebAuthnUserVerification"], "WebAuthnUserVerification");
+        if (relyingPartyId === undefined && userVerification === undefined) {
+            return undefined;
+        }
+        return {
+            ...(relyingPartyId !== undefined && { RelyingPartyId: relyingPartyId }),
+            ...(userVerification !== undefined && {
+                UserVerification: userVerification,
+            }),
         };
     }
     /**

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-user-pool-mfa.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAexE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,KAAK,CACH,UAAkB,EAClB,UAAqC;QAErC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACtD,IAAI,CAAC,QAAQ,EACb,UAAU,CAAC,kBAAkB,CAAC,EAC9B,kBAAkB,CACnB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAExD,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;YACvE,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,OAAO,CACb,KAAsC;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACnD,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,aAAa,CACd,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAEhC,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI;gBAC1C,6BAA6B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,KAAwB;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,IAAI,CAAC,QAAQ,EACb,eAAe,MAAM,CAAC,KAAK,CAAC,GAAG,EAC/B,UAAU,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-user-pool-mfa.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAexE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,KAAK,CACH,UAAkB,EAClB,UAAqC;QAErC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACtD,IAAI,CAAC,QAAQ,EACb,UAAU,CAAC,kBAAkB,CAAC,EAC9B,kBAAkB,CACnB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE3C,IACE,aAAa,KAAK,SAAS;YAC3B,QAAQ,KAAK,SAAS;YACtB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;YACvE,GAAG,OAAO;YACV,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CACd,UAAqC;QAErC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACvD,IAAI,CAAC,QAAQ,EACb,UAAU,CAAC,wBAAwB,CAAC,EACpC,wBAAwB,CACzB,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACzD,IAAI,CAAC,QAAQ,EACb,UAAU,CAAC,0BAA0B,CAAC,EACtC,0BAA0B,CAC3B,CAAC;QAEF,IAAI,cAAc,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;YACvE,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI;gBACpC,gBAAgB,EAAE,gBAAgB;aACnC,CAAC;SACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,OAAO,CACb,KAAsC;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACnD,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,aAAa,CACd,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAEhC,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI;gBAC1C,6BAA6B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aACjD,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,KAAwB;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,IAAI,CAAC,QAAQ,EACb,eAAe,MAAM,CAAC,KAAK,CAAC,GAAG,EAC/B,UAAU,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-user-pool-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAwElG,UAAU,yCAAyC;IACjD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,yCAAyC,EAKhE;IAED;;;;;OAKG;IACH,mBAAmB,IAAI,6BAA6B,CA0DnD;IAED;;;;OAIG;IACH,yBAAyB,CACvB,UAAU,EAAE,MAAM,GACjB,mCAAmC,GAAG,SAAS,CAKjD;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAahB;;;;;OAKG;IACH,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cfn-cognito-user-pool-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAC5G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAiFlG,UAAU,yCAAyC;IACjD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,yCAAyC,EAKhE;IAED;;;;;OAKG;IACH,mBAAmB,IAAI,6BAA6B,CA0DnD;IAED;;;;OAIG;IACH,yBAAyB,CACvB,UAAU,EAAE,MAAM,GACjB,mCAAmC,GAAG,SAAS,CAKjD;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAahB;;;;;OAKG;IACH,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.js

@@ -13,6 +13,13 @@ import { SimCfnCognitoPolicies } from "./sim-cfn-cognito-policies.js";
  * CloudFormation sets a pool's MFA in a SetUserPoolMfaConfig call after the
  * pool exists, and this deploys them the same way.
  *
+ * `WebAuthnRelyingPartyID` and `WebAuthnUserVerification` reach the pool
+ * through that same second call, which is where the Cognito API takes them.
+ * They decide which hosts a passkey authenticates for and whether an
+ * authenticator that checks nobody may register one, and a pool that reports
+ * them describes itself the way the deployed pool does. No passkey is
+ * registered or presented here.
+ *
  * `UserPoolTier` is here because CreateUserPool accepts it at its AWS default
  * and refuses it otherwise, in words that say why. A CDK stack states it
  * routinely, and a pool created without it would be reported as behaving
@@ -56,6 +63,8 @@ const simulatedProperties = [
     "LambdaConfig",
     "MfaConfiguration",
     "EnabledMfas",
+    "WebAuthnRelyingPartyID",
+    "WebAuthnUserVerification",
     "UserPoolTier",
     "AdminCreateUserConfig",
     "AutoVerifiedAttributes",

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-user-pool-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,kCAAkC,EAAE,MAAM,+CAA+C,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,mBAAmB,GAAG;IAC1B,cAAc;IACd,UAAU;IACV,oBAAoB;IACpB,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,uBAAuB;IACvB,wBAAwB;IACxB,oBAAoB;IACpB,QAAQ;IACR,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,6BAA6B;CAC9B,CAAC;AAOF;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,wBAAwB;QACtC,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAqD;QAC/D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,IAAI,qBAAqB,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACrC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,sBAAsB,EAAE,IAAI,4BAA4B,CAAC;gBACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;YACnD,qBAAqB,EAAE,IAAI,kCAAkC,CAAC;gBAC5D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;YAClD,sBAAsB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAC7D,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EACzC,wBAAwB,CACzB;YACD,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACzD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,MAAM,EAAE,IAAI,2BAA2B,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnC,2BAA2B,EAAE,IAAI,CAAC,MAAM,CACtC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAC9C,6BAA6B,CAC9B;YACD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CACnC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAC3C,0BAA0B,CAC3B;YACD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CACnC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAC3C,0BAA0B,CAC3B;YACD,sBAAsB,EAAE,IAAI,CAAC,MAAM,CACjC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EACzC,wBAAwB,CACzB;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,yBAAyB,CACvB,UAAkB;QAElB,OAAO,IAAI,wBAAwB,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,QAAQ;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;QAE3E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACK,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-user-pool-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,kCAAkC,EAAE,MAAM,+CAA+C,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,mBAAmB,GAAG;IAC1B,cAAc;IACd,UAAU;IACV,oBAAoB;IACpB,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,wBAAwB;IACxB,0BAA0B;IAC1B,cAAc;IACd,uBAAuB;IACvB,wBAAwB;IACxB,oBAAoB;IACpB,QAAQ;IACR,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,6BAA6B;CAC9B,CAAC;AAOF;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,wBAAwB;QACtC,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAqD;QAC/D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,IAAI,qBAAqB,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACrC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,sBAAsB,EAAE,IAAI,4BAA4B,CAAC;gBACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;YACnD,qBAAqB,EAAE,IAAI,kCAAkC,CAAC;gBAC5D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;YAClD,sBAAsB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAC7D,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EACzC,wBAAwB,CACzB;YACD,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACzD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,MAAM,EAAE,IAAI,2BAA2B,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnC,2BAA2B,EAAE,IAAI,CAAC,MAAM,CACtC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAC9C,6BAA6B,CAC9B;YACD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CACnC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAC3C,0BAA0B,CAC3B;YACD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CACnC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAC3C,0BAA0B,CAC3B;YACD,sBAAsB,EAAE,IAAI,CAAC,MAAM,CACjC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EACzC,wBAAwB,CACzB;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,yBAAyB,CACvB,UAAkB;QAElB,OAAO,IAAI,wBAAwB,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,QAAQ;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;QAE3E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACK,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}