@kensio/yulin 1.18.1 → 1.19.0

package/dist/service/cognito/command/auth/auth.command.d.ts

@@ -47,6 +47,11 @@ export interface SimCognitoAuthenticationOutput {
     readonly ChallengeName?: string | undefined;
     readonly Session?: string | undefined;
     readonly ChallengeParameters?: Readonly<Record<string, string>> | undefined;
+    /**
+     * The factors a `USER_AUTH` sign-in offers, where the request named no
+     * preference and the pool answered with `SELECT_CHALLENGE`.
+     */
+    readonly AvailableChallenges?: readonly string[] | undefined;
     readonly AuthenticationResult?: SimCognitoAuthenticationResultType | undefined;
     readonly $metadata: SimResponseMetadata;
 }
@@ -121,6 +126,37 @@ export interface SimRespondToAuthChallengeCommand {
     readonly input: SimRespondToAuthChallengeCommandInput;
 }
 export type SimRespondToAuthChallengeCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The GetTokensFromRefreshToken inputs this simulation reads, and the ones it
+ * refuses.
+ *
+ * There is no `SECRET_HASH` and no username: the refresh token is what says
+ * whose session this is, and the client secret itself is what proves the
+ * caller, as it does on real Cognito.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GetTokensFromRefreshTokenCommand/
+ */
+export interface SimGetTokensFromRefreshTokenCommandInput {
+    readonly RefreshToken?: string | undefined;
+    readonly ClientId?: string | undefined;
+    readonly ClientSecret?: string | undefined;
+    readonly DeviceKey?: string | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * Minimal structural sim Cognito GetTokensFromRefreshToken command.
+ */
+export interface SimGetTokensFromRefreshTokenCommand {
+    readonly input: SimGetTokensFromRefreshTokenCommandInput;
+}
+/**
+ * What a token refresh answers with, which is the tokens and nothing else:
+ * this operation runs no challenge, so it never answers with one.
+ */
+export interface SimGetTokensFromRefreshTokenCommandOutput {
+    readonly AuthenticationResult?: SimCognitoAuthenticationResultType | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
 /**
  * The GlobalSignOut inputs this simulation reads.
  *

package/dist/service/cognito/command/auth/auth.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAE5E;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/auth/sim-cognito-answering-user.d.ts

@@ -0,0 +1,22 @@
+import type { SimCognitoAuthSession } from "../../user-pool/auth/sim-cognito-auth-session.js";
+import type { SimCognitoUser } from "../../user-pool/user/sim-cognito-user.js";
+import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoFirstFactorResponseRequest } from "./sim-cognito-first-factor-response.js";
+/**
+ * A challenge response that has been tied back to the sign-in it answers.
+ */
+export interface SimCognitoAnsweringUser {
+    readonly session: SimCognitoAuthSession;
+    readonly user: SimCognitoUser;
+}
+/**
+ * The session a challenge response carries and the user it belongs to.
+ *
+ * A session that has run out, one already spent, one for another user or app
+ * client and one issued for another challenge are all refused the same way,
+ * which is what real Cognito does with each. A user disabled between the
+ * challenge and the response cannot finish the sign-in either, as it could not
+ * start one.
+ */
+export declare function requireSimCognitoAnsweringUser(authResolver: SimCognitoAuthResolver, request: SimCognitoFirstFactorResponseRequest, now: Date): SimCognitoAnsweringUser;
+//# sourceMappingURL=sim-cognito-answering-user.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-answering-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-answering-user.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-answering-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAK9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAEnG;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,sBAAsB,EACpC,OAAO,EAAE,oCAAoC,EAC7C,GAAG,EAAE,IAAI,GACR,uBAAuB,CAezB"}

package/dist/service/cognito/command/auth/sim-cognito-answering-user.js

@@ -0,0 +1,25 @@
+import { requireSimCognitoEnabled, requireSimCognitoSignInUser, } from "../../user-pool/auth/sim-cognito-sign-in.js";
+/**
+ * The session a challenge response carries and the user it belongs to.
+ *
+ * A session that has run out, one already spent, one for another user or app
+ * client and one issued for another challenge are all refused the same way,
+ * which is what real Cognito does with each. A user disabled between the
+ * challenge and the response cannot finish the sign-in either, as it could not
+ * start one.
+ */
+export function requireSimCognitoAnsweringUser(authResolver, request, now) {
+    const { pool, client, parameters, challengeName } = request;
+    const username = authResolver.username(client, parameters);
+    const session = pool.auth.requireSession({
+        sessionId: request.session,
+        username,
+        clientId: client.id,
+        challengeName,
+        now,
+    });
+    const user = requireSimCognitoSignInUser(pool, client, username);
+    requireSimCognitoEnabled(user);
+    return { session, user };
+}
+//# sourceMappingURL=sim-cognito-answering-user.js.map

package/dist/service/cognito/command/auth/sim-cognito-answering-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-answering-user.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-answering-user.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAarD;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,YAAoC,EACpC,OAA6C,EAC7C,GAAS;IAET,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QACvC,SAAS,EAAE,OAAO,CAAC,OAAO;QAC1B,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,aAAa;QACb,GAAG;KACJ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEjE,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAE/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAgBpE;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,CAaR"}
+{"version":3,"file":"sim-cognito-auth-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAuBpE;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,CAaR"}

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.js

@@ -1,5 +1,7 @@
 import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
 import { simCognitoSmsMfa, simCognitoSoftwareTokenMfa, } from "../../user-pool/user/mfa/sim-cognito-mfa-factors.js";
+import { simCognitoPasswordChallenge, simCognitoWebAuthnChallenge, } from "./sim-cognito-available-challenges.js";
+import { simCognitoSelectChallenge } from "./sim-cognito-first-factor-challenge.js";
 /**
  * The challenge a user with a temporary password is answered with.
  */
@@ -11,11 +13,18 @@ export const newPasswordRequiredChallenge = "NEW_PASSWORD_REQUIRED";
  * how Cognito names them: a user registered for a software token is
  * challenged with `SOFTWARE_TOKEN_MFA` and answers with a
  * `SOFTWARE_TOKEN_MFA_CODE`.
+ *
+ * The last three are the first factors of a `USER_AUTH` sign-in.
+ * `SELECT_CHALLENGE` is answered with the factor the user picked, and the
+ * other two with the factor itself.
  */
 const answerableChallenges = [
     newPasswordRequiredChallenge,
     simCognitoSmsMfa,
     simCognitoSoftwareTokenMfa,
+    simCognitoSelectChallenge,
+    simCognitoPasswordChallenge,
+    simCognitoWebAuthnChallenge,
 ];
 /**
  * Refuse a challenge this simulation cannot answer.

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,qDAAqD,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAsB;IAC9C,4BAA4B;IAC5B,gBAAgB;IAChB,0BAA0B;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAiC;IAEjC,IACE,aAAa,KAAK,SAAS;QAC3B,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC5C,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,MAAM,CAAC,aAAa,CAAC,sBAAsB;QAC3D,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;QAC7D,oBAAoB,CACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cognito-auth-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAsB;IAC9C,4BAA4B;IAC5B,gBAAgB;IAChB,0BAA0B;IAC1B,yBAAyB;IACzB,2BAA2B;IAC3B,2BAA2B;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAiC;IAEjC,IACE,aAAa,KAAK,SAAS;QAC3B,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC5C,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,MAAM,CAAC,aAAa,CAAC,sBAAsB;QAC3D,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;QAC7D,oBAAoB,CACvB,CAAC;AACJ,CAAC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts

@@ -6,7 +6,9 @@ import type { SimCognitoUserPoolTriggers } from "../../user-pool/trigger/sim-cog
 import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoFirstFactorChallenge } from "./sim-cognito-first-factor-challenge.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
 import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
@@ -27,6 +29,11 @@ interface SimCognitoAuthCommandsProperties {
      * recorded the same way.
      */
     readonly messenger: SimCognitoPoolMessenger;
+    /**
+     * What asks a user for its first factor, shared with the hosted endpoints so
+     * a passkey presented at either answers the same kind of challenge.
+     */
+    readonly firstFactor: SimCognitoFirstFactorChallenge;
 }
 /**
  * The authentication command handlers of one simulated Cognito scope.
@@ -44,6 +51,7 @@ export declare class SimCognitoAuthCommands {
     readonly adminRespondToChallenge: SimCognitoAdminRespondToChallenge;
     readonly initiateAuth: SimCognitoInitiateAuth;
     readonly respondToChallenge: SimCognitoRespondToChallenge;
+    readonly getTokensFromRefreshToken: SimCognitoGetTokensFromRefreshToken;
     readonly signOut: SimCognitoSignOutCommands;
     constructor(properties: SimCognitoAuthCommandsProperties);
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAOxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EAqDvD;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAI9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAGrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,yBAAyB,EAAE,mCAAmC,CAAC;IAC/E,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EA6EvD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js

@@ -1,7 +1,11 @@
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
 import { SimCognitoAuthFlowRunner } from "./sim-cognito-auth-flow-runner.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import { SimCognitoChallengeResponses } from "./sim-cognito-challenge-responses.js";
+import { SimCognitoFirstFactorResponse } from "./sim-cognito-first-factor-response.js";
+import { SimCognitoPasswordResponse } from "./sim-cognito-password-response.js";
+import { SimCognitoWebAuthnResponse } from "./sim-cognito-web-authn-response.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoMfaChallenge } from "./sim-cognito-mfa-challenge.js";
 import { SimCognitoMfaResponse } from "./sim-cognito-mfa-response.js";
@@ -9,8 +13,10 @@ import { SimCognitoNewPasswordChallenge } from "./sim-cognito-new-password-chall
 import { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
 import { SimCognitoPasswordSignIn } from "./sim-cognito-password-sign-in.js";
 import { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
 import { SimCognitoSignInCompletion } from "./sim-cognito-sign-in-completion.js";
+import { SimCognitoUserAuthSignIn } from "./sim-cognito-user-auth-sign-in.js";
 import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
 /**
  * The authentication command handlers of one simulated Cognito scope.
@@ -28,9 +34,10 @@ export class SimCognitoAuthCommands {
     adminRespondToChallenge;
     initiateAuth;
     respondToChallenge;
+    getTokensFromRefreshToken;
     signOut;
     constructor(properties) {
-        const { resolver, authResolver, pools, clock, triggers, tokenIssuer, messenger, } = properties;
+        const { resolver, authResolver, pools, clock, triggers, tokenIssuer, messenger, firstFactor, } = properties;
         // Every sign-in ends the same way, wherever it finished: with the second
         // factor where the user owes one, and with the tokens and the
         // PostAuthentication trigger where it does not.
@@ -39,14 +46,25 @@ export class SimCognitoAuthCommands {
             triggers,
             mfaChallenge: new SimCognitoMfaChallenge({ messenger, clock }),
         });
+        // Both refresh operations answer the same way once the token is accepted,
+        // and which app client the refresh went through is what decides whether a
+        // new refresh token comes back.
+        const refreshedTokens = new SimCognitoRefreshedTokens({ tokenIssuer });
+        const passwordSignIn = new SimCognitoPasswordSignIn({
+            authResolver,
+            completion,
+            challenge: new SimCognitoNewPasswordChallenge({ clock }),
+            triggers,
+        });
         const flowRunner = new SimCognitoAuthFlowRunner({
-            passwordSignIn: new SimCognitoPasswordSignIn({
+            passwordSignIn,
+            refreshSignIn: new SimCognitoRefreshSignIn({ refreshedTokens, clock }),
+            userAuthSignIn: new SimCognitoUserAuthSignIn({
                 authResolver,
-                completion,
-                challenge: new SimCognitoNewPasswordChallenge({ clock }),
+                challenge: firstFactor,
+                passwordSignIn,
                 triggers,
             }),
-            refreshSignIn: new SimCognitoRefreshSignIn({ tokenIssuer, clock }),
         });
         const responses = new SimCognitoChallengeResponses({
             newPassword: new SimCognitoNewPasswordResponse({
@@ -55,6 +73,13 @@ export class SimCognitoAuthCommands {
                 clock,
             }),
             mfa: new SimCognitoMfaResponse({ authResolver, completion, clock }),
+            firstFactor: new SimCognitoFirstFactorResponse({
+                authResolver,
+                challenge: firstFactor,
+                password: new SimCognitoPasswordResponse({ completion }),
+                webAuthn: new SimCognitoWebAuthnResponse({ completion }),
+                clock,
+            }),
         });
         this.adminInitiateAuth = new SimCognitoAdminInitiateAuth({
             authResolver,
@@ -72,6 +97,11 @@ export class SimCognitoAuthCommands {
             authResolver,
             responses,
         });
+        this.getTokensFromRefreshToken = new SimCognitoGetTokensFromRefreshToken({
+            authResolver,
+            refreshedTokens,
+            clock,
+        });
         this.signOut = new SimCognitoSignOutCommands({ resolver, pools, clock });
     }
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAuBtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,GACV,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,UAAU;gBACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;gBACxD,QAAQ;aACT,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAErG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AA6BtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,yBAAyB,CAAsC;IAC/D,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,WAAW,GACZ,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,IAAI,wBAAwB,CAAC;YAClD,YAAY;YACZ,UAAU;YACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;YACxD,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc;YACd,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACtE,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,SAAS,EAAE,WAAW;gBACtB,cAAc;gBACd,QAAQ;aACT,CAAC;SACH,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YACnE,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,IAAI,0BAA0B,CAAC,EAAE,UAAU,EAAE,CAAC;gBACxD,QAAQ,EAAE,IAAI,0BAA0B,CAAC,EAAE,UAAU,EAAE,CAAC;gBACxD,KAAK;aACN,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,mCAAmC,CAAC;YACvE,YAAY;YACZ,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.d.ts

@@ -1,10 +1,12 @@
 import type { SimCognitoAuthFlow } from "./sim-cognito-auth-flow.js";
 import type { SimCognitoPasswordSignIn, SimCognitoAuthRequest } from "./sim-cognito-password-sign-in.js";
 import type { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import type { SimCognitoUserAuthSignIn } from "./sim-cognito-user-auth-sign-in.js";
 import type { SimCognitoAuthenticationOutput } from "./auth.command.js";
 interface SimCognitoAuthFlowRunnerProperties {
     readonly passwordSignIn: SimCognitoPasswordSignIn;
     readonly refreshSignIn: SimCognitoRefreshSignIn;
+    readonly userAuthSignIn: SimCognitoUserAuthSignIn;
 }
 /**
  * Runs whichever flow a request resolved to.
@@ -13,13 +15,15 @@ interface SimCognitoAuthFlowRunnerProperties {
  * the pool differently, and once a flow is resolved they run the same bodies,
  * so the running of one lives here rather than in either command.
  *
- * Running a flow is asynchronous because either flow may have to wait on the
- * pool's Lambda triggers. A password sign-in runs the authentication triggers,
- * and both flows run `PreTokenGeneration` where they issue tokens.
+ * Running a flow is asynchronous because any of them may have to wait on the
+ * pool's Lambda triggers. A password sign-in and a choice-based one run the
+ * authentication triggers, and every flow runs `PreTokenGeneration` where it
+ * issues tokens.
  */
 export declare class SimCognitoAuthFlowRunner {
     private readonly passwordSignIn;
     private readonly refreshSignIn;
+    private readonly userAuthSignIn;
     constructor(properties: SimCognitoAuthFlowRunnerProperties);
     /**
      * Run a flow the app client is configured for.

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flow-runner.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CACjD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IAExD,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;OAEG;IACG,GAAG,CACP,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CAMzC;CACF"}
+{"version":3,"file":"sim-cognito-auth-flow-runner.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAE1D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;OAEG;IACG,GAAG,CACP,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CAUzC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.js

@@ -5,16 +5,19 @@
  * the pool differently, and once a flow is resolved they run the same bodies,
  * so the running of one lives here rather than in either command.
  *
- * Running a flow is asynchronous because either flow may have to wait on the
- * pool's Lambda triggers. A password sign-in runs the authentication triggers,
- * and both flows run `PreTokenGeneration` where they issue tokens.
+ * Running a flow is asynchronous because any of them may have to wait on the
+ * pool's Lambda triggers. A password sign-in and a choice-based one run the
+ * authentication triggers, and every flow runs `PreTokenGeneration` where it
+ * issues tokens.
  */
 export class SimCognitoAuthFlowRunner {
     passwordSignIn;
     refreshSignIn;
+    userAuthSignIn;
     constructor(properties) {
         this.passwordSignIn = properties.passwordSignIn;
         this.refreshSignIn = properties.refreshSignIn;
+        this.userAuthSignIn = properties.userAuthSignIn;
     }
     /**
      * Run a flow the app client is configured for.
@@ -23,6 +26,9 @@ export class SimCognitoAuthFlowRunner {
         if (flow.exchangesRefreshToken) {
             return await this.refreshSignIn.handle(request);
         }
+        if (flow.offersChoice) {
+            return await this.userAuthSignIn.handle(request);
+        }
         return await this.passwordSignIn.handle(request);
     }
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flow-runner.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow-runner.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,wBAAwB;IAClB,cAAc,CAA2B;IACzC,aAAa,CAA0B;IAExD,YAAY,UAA8C;QACxD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,IAAwB,EACxB,OAA8B;QAE9B,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-flow-runner.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow-runner.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,wBAAwB;IAClB,cAAc,CAA2B;IACzC,aAAa,CAA0B;IACvC,cAAc,CAA2B;IAE1D,YAAY,UAA8C;QACxD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,IAAwB,EACxB,OAA8B;QAE9B,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flow.d.ts

@@ -5,6 +5,7 @@ interface SimCognitoAuthFlowProperties {
     readonly legacySettings?: readonly string[];
     readonly aliases?: readonly string[];
     readonly exchangesRefreshToken?: boolean;
+    readonly offersChoice?: boolean;
 }
 /**
  * One authentication flow this simulation runs.
@@ -22,6 +23,11 @@ export declare class SimCognitoAuthFlow {
      * a user in with a password.
      */
     readonly exchangesRefreshToken: boolean;
+    /**
+     * Whether the flow offers the user a choice of first factors rather than
+     * taking the one its name settles.
+     */
+    readonly offersChoice: boolean;
     private readonly aliases;
     private readonly settings;
     constructor(properties: SimCognitoAuthFlowProperties);

package/dist/service/cognito/command/auth/sim-cognito-auth-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flow.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAEvG,UAAU,4BAA4B;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,aAAa,EAAE,MAAM,CAAC;IAEtC;;;OAGG;IACH,SAAgB,qBAAqB,EAAE,OAAO,CAAC;IAE/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAE7C,YAAY,UAAU,EAAE,4BAA4B,EASnD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAaxD;CACF"}
+{"version":3,"file":"sim-cognito-auth-flow.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAEvG,UAAU,4BAA4B;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,aAAa,EAAE,MAAM,CAAC;IAEtC;;;OAGG;IACH,SAAgB,qBAAqB,EAAE,OAAO,CAAC;IAE/C;;;OAGG;IACH,SAAgB,YAAY,EAAE,OAAO,CAAC;IAEtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAE7C,YAAY,UAAU,EAAE,4BAA4B,EAUnD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAaxD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flow.js

@@ -15,12 +15,18 @@ export class SimCognitoAuthFlow {
      * a user in with a password.
      */
     exchangesRefreshToken;
+    /**
+     * Whether the flow offers the user a choice of first factors rather than
+     * taking the one its name settles.
+     */
+    offersChoice;
     aliases;
     settings;
     constructor(properties) {
         this.name = properties.name;
         this.clientSetting = properties.clientSetting;
         this.exchangesRefreshToken = properties.exchangesRefreshToken ?? false;
+        this.offersChoice = properties.offersChoice ?? false;
         this.aliases = properties.aliases ?? [];
         this.settings = [
             properties.clientSetting,

package/dist/service/cognito/command/auth/sim-cognito-auth-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flow.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAWvF;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IACb,IAAI,CAAS;IACb,aAAa,CAAS;IAEtC;;;OAGG;IACa,qBAAqB,CAAU;IAE9B,OAAO,CAAoB;IAC3B,QAAQ,CAAoB;IAE7C,YAAY,UAAwC;QAClD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,IAAI,KAAK,CAAC;QACvE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG;YACd,UAAU,CAAC,aAAa;YACxB,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,OAAO,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,MAAgC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7C,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CACzC,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,CAAC,IAAI,kCAAkC,MAAM,CAAC,EAAE,eAAe;YACpE,mBAAmB,IAAI,CAAC,aAAa,8BAA8B,CACtE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-flow.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAYvF;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IACb,IAAI,CAAS;IACb,aAAa,CAAS;IAEtC;;;OAGG;IACa,qBAAqB,CAAU;IAE/C;;;OAGG;IACa,YAAY,CAAU;IAErB,OAAO,CAAoB;IAC3B,QAAQ,CAAoB;IAE7C,YAAY,UAAwC;QAClD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,IAAI,KAAK,CAAC;QACvE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,KAAK,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG;YACd,UAAU,CAAC,aAAa;YACxB,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,OAAO,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,MAAgC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7C,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CACzC,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,CAAC,IAAI,kCAAkC,MAAM,CAAC,EAAE,eAAe;YACpE,mBAAmB,IAAI,CAAC,aAAa,8BAA8B,CACtE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flows.d.ts

@@ -17,6 +17,14 @@ export declare const userPasswordFlow: SimCognitoAuthFlow;
  * accepts either.
  */
 export declare const refreshTokenFlow: SimCognitoAuthFlow;
+/**
+ * Choice-based sign-in, where the pool offers the factors it allows first and
+ * the user presents one of them.
+ *
+ * This is the flow a passkey is presented through. It runs on both entry
+ * points, as it does on real Cognito.
+ */
+export declare const userAuthFlow: SimCognitoAuthFlow;
 /**
  * The flows one entry point into authentication runs.
  *

package/dist/service/cognito/command/auth/sim-cognito-auth-flows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flows.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flows.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,qBAAqB,oBAIhC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,oBAI3B,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,oBAK3B,CAAC;AAEH;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD,YAAY,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,kBAAkB,EAAE,EAGlE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAcxD;CACF;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,qBAGzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe,qBAG1B,CAAC"}
+{"version":3,"file":"sim-cognito-auth-flows.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flows.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,qBAAqB,oBAIhC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,oBAI3B,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,oBAK3B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,oBAIvB,CAAC;AAEH;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD,YAAY,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,kBAAkB,EAAE,EAGlE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAcxD;CACF;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,qBAIzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe,qBAI1B,CAAC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flows.js

@@ -31,6 +31,18 @@ export const refreshTokenFlow = new SimCognitoAuthFlow({
     aliases: ["REFRESH_TOKEN"],
     exchangesRefreshToken: true,
 });
+/**
+ * Choice-based sign-in, where the pool offers the factors it allows first and
+ * the user presents one of them.
+ *
+ * This is the flow a passkey is presented through. It runs on both entry
+ * points, as it does on real Cognito.
+ */
+export const userAuthFlow = new SimCognitoAuthFlow({
+    name: "USER_AUTH",
+    clientSetting: "ALLOW_USER_AUTH",
+    offersChoice: true,
+});
 /**
  * The flows one entry point into authentication runs.
  *
@@ -58,8 +70,8 @@ export class SimCognitoAuthFlows {
             return flow;
         }
         throw new SimCognitoInvalidParameterException(`AuthFlow '${String(authFlow)}' is not simulated: ${this.operation} ` +
-            `here runs ${this.flows.map((each) => each.name).join(" and ")}. SRP, ` +
-            `custom authentication and choice-based sign-in are not implemented.`);
+            `here runs ${this.flows.map((each) => each.name).join(" and ")}. SRP ` +
+            `and custom authentication are not implemented.`);
     }
 }
 /**
@@ -68,6 +80,7 @@ export class SimCognitoAuthFlows {
 export const adminAuthFlows = new SimCognitoAuthFlows("AdminInitiateAuth", [
     adminUserPasswordFlow,
     refreshTokenFlow,
+    userAuthFlow,
 ]);
 /**
  * The flows `InitiateAuth` runs.
@@ -75,5 +88,6 @@ export const adminAuthFlows = new SimCognitoAuthFlows("AdminInitiateAuth", [
 export const clientAuthFlows = new SimCognitoAuthFlows("InitiateAuth", [
     userPasswordFlow,
     refreshTokenFlow,
+    userAuthFlow,
 ]);
 //# sourceMappingURL=sim-cognito-auth-flows.js.map

package/dist/service/cognito/command/auth/sim-cognito-auth-flows.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-flows.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,kBAAkB,CAAC;IAC1D,IAAI,EAAE,0BAA0B;IAChC,aAAa,EAAE,gCAAgC;IAC/C,cAAc,EAAE,CAAC,mBAAmB,CAAC;CACtC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,kBAAkB,CAAC;IACrD,IAAI,EAAE,oBAAoB;IAC1B,aAAa,EAAE,0BAA0B;IACzC,cAAc,EAAE,CAAC,oBAAoB,CAAC;CACvC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,kBAAkB,CAAC;IACrD,IAAI,EAAE,oBAAoB;IAC1B,aAAa,EAAE,0BAA0B;IACzC,OAAO,EAAE,CAAC,eAAe,CAAC;IAC1B,qBAAqB,EAAE,IAAI;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,SAAS,CAAS;IAClB,KAAK,CAAgC;IAEtD,YAAY,SAAiB,EAAE,KAAoC;QACjE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CACpC,CAAC;QAEF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,aAAa,MAAM,CAAC,QAAQ,CAAC,uBAAuB,IAAI,CAAC,SAAS,GAAG;YACnE,aAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;YACvE,qEAAqE,CACxE,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC,mBAAmB,EAAE;IACzE,qBAAqB;IACrB,gBAAgB;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,mBAAmB,CAAC,cAAc,EAAE;IACrE,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC"}
+{"version":3,"file":"sim-cognito-auth-flows.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,kBAAkB,CAAC;IAC1D,IAAI,EAAE,0BAA0B;IAChC,aAAa,EAAE,gCAAgC;IAC/C,cAAc,EAAE,CAAC,mBAAmB,CAAC;CACtC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,kBAAkB,CAAC;IACrD,IAAI,EAAE,oBAAoB;IAC1B,aAAa,EAAE,0BAA0B;IACzC,cAAc,EAAE,CAAC,oBAAoB,CAAC;CACvC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,kBAAkB,CAAC;IACrD,IAAI,EAAE,oBAAoB;IAC1B,aAAa,EAAE,0BAA0B;IACzC,OAAO,EAAE,CAAC,eAAe,CAAC;IAC1B,qBAAqB,EAAE,IAAI;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,kBAAkB,CAAC;IACjD,IAAI,EAAE,WAAW;IACjB,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,SAAS,CAAS;IAClB,KAAK,CAAgC;IAEtD,YAAY,SAAiB,EAAE,KAAoC;QACjE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CACpC,CAAC;QAEF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,aAAa,MAAM,CAAC,QAAQ,CAAC,uBAAuB,IAAI,CAAC,SAAS,GAAG;YACnE,aAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;YACtE,gDAAgD,CACnD,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC,mBAAmB,EAAE;IACzE,qBAAqB;IACrB,gBAAgB;IAChB,YAAY;CACb,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,mBAAmB,CAAC,cAAc,EAAE;IACrE,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;CACb,CAAC,CAAC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-parameters.d.ts

@@ -13,6 +13,13 @@ export declare class SimCognitoAuthParameters {
      * Read a value the flow needs, or refuse.
      */
     require(name: string): string;
+    /**
+     * Read a value the flow needs as the JSON document it carries.
+     *
+     * A challenge response carries strings, so a credential travels as the JSON
+     * a browser serialized it to, which is how real Cognito takes one.
+     */
+    requireDocument(name: string): unknown;
     /**
      * Read a value that may or may not be there.
      */

package/dist/service/cognito/command/auth/sim-cognito-auth-parameters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-parameters.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-parameters.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD,YACE,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,EAIrD;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU5B;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErC;CACF"}
+{"version":3,"file":"sim-cognito-auth-parameters.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-parameters.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD,YACE,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,EAIrD;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU5B;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWrC;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-parameters.js

@@ -23,6 +23,22 @@ export class SimCognitoAuthParameters {
         }
         return value;
     }
+    /**
+     * Read a value the flow needs as the JSON document it carries.
+     *
+     * A challenge response carries strings, so a credential travels as the JSON
+     * a browser serialized it to, which is how real Cognito takes one.
+     */
+    requireDocument(name) {
+        const value = this.require(name);
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            throw new SimCognitoInvalidParameterException(`${name} in ${this.field} must be JSON: a credential travels as the ` +
+                `JSON a browser serializes a PublicKeyCredential to`);
+        }
+    }
     /**
      * Read a value that may or may not be there.
      */

package/dist/service/cognito/command/auth/sim-cognito-auth-parameters.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-parameters.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-parameters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAS;IACd,MAAM,CAA8B;IAErD,YACE,KAAa,EACb,MAAoD;QAEpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,mCAAmC,CAC3C,8BAA8B,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-parameters.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-parameters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAS;IACd,MAAM,CAA8B;IAErD,YACE,KAAa,EACb,MAAoD;QAEpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,mCAAmC,CAC3C,8BAA8B,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,OAAO,IAAI,CAAC,KAAK,6CAA6C;gBACnE,oDAAoD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF"}