@kensio/yulin 1.18.2 → 1.19.1

package/dist/service/cognito/user-pool/sim-cognito-sign-in-policy.js

@@ -0,0 +1,100 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+const firstAuthFactors = [
+    "PASSWORD",
+    "EMAIL_OTP",
+    "SMS_OTP",
+    "WEB_AUTHN",
+];
+const mostFactors = 5;
+/**
+ * What a pool allows at the first prompt when its policy named nothing, which
+ * is what real Cognito falls back to.
+ */
+const defaultFactors = ["PASSWORD"];
+/**
+ * The factors one simulated user pool allows at the first prompt.
+ *
+ * A pool created without a sign-in policy allows a password and says nothing
+ * about it, which is how real Cognito reports one. A pool created with a
+ * policy carries the factors it named, and reports them back under `Policies`.
+ *
+ * A `USER_AUTH` sign-in reads these to decide what it can offer, and answers
+ * with the ones this user could actually present. `PASSWORD` and `WEB_AUTHN`
+ * are presented here. A code sent by email or by text is not, and a sign-in
+ * choosing one is refused in words that say what could not be done.
+ *
+ * The validation is real Cognito's. The four factor names are the ones it
+ * accepts, a list may name five of them at most, and a policy offering
+ * passkeys and nothing else is refused because AWS states that `WEB_AUTHN`
+ * "must be accompanied by at least one other option".
+ */
+export class SimCognitoSignInPolicy {
+    /**
+     * The factors the policy named, in the order it named them, and nothing
+     * where the pool was created without a policy at all.
+     */
+    #allowedFirstAuthFactors;
+    constructor(policy) {
+        const requested = policy?.AllowedFirstAuthFactors;
+        if (requested === undefined) {
+            this.#allowedFirstAuthFactors = undefined;
+            return;
+        }
+        this.#allowedFirstAuthFactors = SimCognitoSignInPolicy.factorsIn(requested);
+    }
+    static factorsIn(requested) {
+        this.requireCount(requested);
+        const factors = requested.map((factor) => this.requireKnown(factor));
+        this.requireCompanionForPasskeys(factors);
+        return factors;
+    }
+    static requireCount(requested) {
+        if (requested.length === 0) {
+            throw new SimCognitoInvalidParameterException("SignInPolicy AllowedFirstAuthFactors must name at least one factor: " +
+                `use one or more of ${firstAuthFactors.join(", ")}`);
+        }
+        if (requested.length > mostFactors) {
+            throw new SimCognitoInvalidParameterException("SignInPolicy AllowedFirstAuthFactors must name no more than " +
+                `${String(mostFactors)} factors`);
+        }
+    }
+    static requireKnown(factor) {
+        if (!firstAuthFactors.includes(factor)) {
+            throw new SimCognitoInvalidParameterException(`SignInPolicy AllowedFirstAuthFactors '${factor}' is not a Cognito ` +
+                `first authentication factor: use one of ${firstAuthFactors.join(", ")}`);
+        }
+        return factor;
+    }
+    /**
+     * Refuse a policy offering passkeys and nothing else, as real Cognito
+     * refuses one. A passkey has to be registered from a session that already
+     * exists, so a pool with no other way in would have nobody able to register.
+     *
+     * The companion has to be a different factor, so naming `WEB_AUTHN` twice
+     * leaves the pool as shut as naming it once does.
+     */
+    static requireCompanionForPasskeys(factors) {
+        if (factors.every((factor) => factor === "WEB_AUTHN")) {
+            throw new SimCognitoInvalidParameterException("SignInPolicy AllowedFirstAuthFactors WEB_AUTHN has to be " +
+                "accompanied by at least one other factor");
+        }
+    }
+    /**
+     * The factors a sign-in may offer, which is what the policy named or the
+     * password a pool with no policy allows.
+     */
+    get factors() {
+        return this.#allowedFirstAuthFactors ?? defaultFactors;
+    }
+    /**
+     * The policy as Cognito reports it on the pool, and nothing where the pool
+     * was created without one.
+     */
+    toOutput() {
+        if (this.#allowedFirstAuthFactors === undefined) {
+            return undefined;
+        }
+        return { AllowedFirstAuthFactors: [...this.#allowedFirstAuthFactors] };
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-in-policy.js.map

package/dist/service/cognito/user-pool/sim-cognito-sign-in-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-policy.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAwBpF,MAAM,gBAAgB,GAAyC;IAC7D,UAAU;IACV,WAAW;IACX,SAAS;IACT,WAAW;CACZ,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;GAGG;AACH,MAAM,cAAc,GAAyC,CAAC,UAAU,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,sBAAsB;IACjC;;;OAGG;IACM,wBAAwB,CAEnB;IAEd,YAAY,MAAmC;QAC7C,MAAM,SAAS,GAAG,MAAM,EAAE,uBAAuB,CAAC;QAElD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,wBAAwB,GAAG,SAAS,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,GAAG,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CAAC,SAAS,CACtB,SAA4B;QAE5B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAE7B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAErE,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAE1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,SAA4B;QACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,mCAAmC,CAC3C,sEAAsE;gBACpE,sBAAsB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAmC,CAC3C,8DAA8D;gBAC5D,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,MAAc;QACxC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAmC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,mCAAmC,CAC3C,yCAAyC,MAAM,qBAAqB;gBAClE,2CAA2C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,MAAmC,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,2BAA2B,CACxC,OAA6C;QAE7C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,mCAAmC,CAC3C,2DAA2D;gBACzD,0CAA0C,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,wBAAwB,IAAI,cAAc,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,uBAAuB,EAAE,CAAC,GAAG,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts

@@ -7,6 +7,7 @@ import { SimCognitoPasswordPolicy, type SimCognitoUserPoolPoliciesType } from ".
 import { SimCognitoVerificationMessages, type SimCognitoVerificationMessagesType } from "./message/sim-cognito-verification-messages.js";
 import type { SimCognitoSchemaAttributeType } from "./schema/sim-cognito-schema-attribute.js";
 import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
+import { SimCognitoSignInPolicy } from "./sim-cognito-sign-in-policy.js";
 import { SimCognitoUsernameAttributes } from "./sim-cognito-username-attributes.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
@@ -51,7 +52,8 @@ interface SimCognitoUserPoolSettingsProperties {
 }
 /**
  * The settings of one simulated user pool that a request can change: the
- * password policy, the deletion protection, whether users may sign themselves
+ * password policy, the factors it allows at the first prompt, the deletion
+ * protection, whether users may sign themselves
  * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
  * whether it asks for a second factor, how it recovers an account and what its
  * messages say.
@@ -73,6 +75,14 @@ interface SimCognitoUserPoolSettingsProperties {
 export declare class SimCognitoUserPoolSettings {
     #private;
     readonly passwordPolicy: SimCognitoPasswordPolicy;
+    /**
+     * The factors the pool allows at the first authentication prompt.
+     *
+     * A pool created without a `SignInPolicy` allows a password and reports no
+     * policy, as real Cognito reports one. A `USER_AUTH` sign-in offers the
+     * factors this names, narrowed to the ones the user could present.
+     */
+    readonly signInPolicy: SimCognitoSignInPolicy;
     readonly deletionProtection: SimCognitoDeletionProtection;
     readonly adminCreateUserConfig: SimCognitoAdminCreateUserConfig;
     readonly autoVerifiedAttributes: SimCognitoAutoVerifiedAttributes;

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,oCAAoC,EAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BAAgC,SAAQ,kCAAkC;IACzF,QAAQ,CAAC,sBAAsB,CAAC,EAC5B,oCAAoC,GACpC,SAAS,CAAC;IACd,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,6BAA6B,EAAE,GAAG,SAAS,CAAC;IAEvE;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC7D;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,0BAA0B;;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;;;;;;;;OASG;IACH,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAE3C;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,eAAe,EAAE,yBAAyB,CAAC;IAK3D,YAAY,UAAU,EAAE,oCAAoC,EA+B3D;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,wBAAwB,CAErC;IAED;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,4BAA4B,CAErD;IAED;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,oCAAoC,EAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BAAgC,SAAQ,kCAAkC;IACzF,QAAQ,CAAC,sBAAsB,CAAC,EAC5B,oCAAoC,GACpC,SAAS,CAAC;IACd,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,6BAA6B,EAAE,GAAG,SAAS,CAAC;IAEvE;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC7D;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,0BAA0B;;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IAEzD;;;;;;OAMG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;;;;;;;;OASG;IACH,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAE3C;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,eAAe,EAAE,yBAAyB,CAAC;IAK3D,YAAY,UAAU,EAAE,oCAAoC,EAkC3D;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,wBAAwB,CAErC;IAED;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,4BAA4B,CAErD;IAED;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjE;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js

@@ -7,11 +7,13 @@ import { SimCognitoUserPoolMfa } from "./mfa/sim-cognito-user-pool-mfa.js";
 import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
 import { SimCognitoVerificationMessages, } from "./message/sim-cognito-verification-messages.js";
 import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
+import { SimCognitoSignInPolicy } from "./sim-cognito-sign-in-policy.js";
 import { SimCognitoUsernameAttributes } from "./sim-cognito-username-attributes.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
  * The settings of one simulated user pool that a request can change: the
- * password policy, the deletion protection, whether users may sign themselves
+ * password policy, the factors it allows at the first prompt, the deletion
+ * protection, whether users may sign themselves
  * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
  * whether it asks for a second factor, how it recovers an account and what its
  * messages say.
@@ -32,6 +34,14 @@ import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
  */
 export class SimCognitoUserPoolSettings {
     passwordPolicy;
+    /**
+     * The factors the pool allows at the first authentication prompt.
+     *
+     * A pool created without a `SignInPolicy` allows a password and reports no
+     * policy, as real Cognito reports one. A `USER_AUTH` sign-in offers the
+     * factors this names, narrowed to the ones the user could present.
+     */
+    signInPolicy;
     deletionProtection;
     adminCreateUserConfig;
     autoVerifiedAttributes;
@@ -64,6 +74,7 @@ export class SimCognitoUserPoolSettings {
     constructor(properties) {
         const { input, operation } = properties;
         this.passwordPolicy = new SimCognitoPasswordPolicy(input.Policies?.PasswordPolicy);
+        this.signInPolicy = new SimCognitoSignInPolicy(input.Policies?.SignInPolicy);
         this.deletionProtection = new SimCognitoDeletionProtection(input.DeletionProtection);
         this.adminCreateUserConfig = new SimCognitoAdminCreateUserConfig(input.AdminCreateUserConfig);
         this.autoVerifiedAttributes = new SimCognitoAutoVerifiedAttributes(input.AutoVerifiedAttributes);

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAmDhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;;;;;;;;OASG;IACa,GAAG,CAAwB;IAE3C;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,eAAe,CAA4B;IAE3D,OAAO,CAA2B;IAClC,mBAAmB,CAA+B;IAElD,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,qBAAqB,CAClC,IAAI,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAClD,KAAK,CAAC,sBAAsB,EAC5B,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,IAAI,4BAA4B,CACzD,KAAK,CAAC,kBAAkB,CACzB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAoC;QACzD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAmDhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IAEzD;;;;;;OAMG;IACa,YAAY,CAAyB;IAErC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;;;;;;;;OASG;IACa,GAAG,CAAwB;IAE3C;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,eAAe,CAA4B;IAE3D,OAAO,CAA2B;IAClC,mBAAmB,CAA+B;IAElD,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,QAAQ,EAAE,YAAY,CAC7B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,qBAAqB,CAClC,IAAI,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAClD,KAAK,CAAC,sBAAsB,EAC5B,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,IAAI,4BAA4B,CACzD,KAAK,CAAC,kBAAkB,CACzB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAoC;QACzD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IACzD,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts

@@ -12,6 +12,7 @@ import { type SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
 import type { SimCognitoUserPoolSettings } from "./sim-cognito-user-pool-settings.js";
 import type { SimCognitoJwks, SimCognitoSigningKey } from "./token/sim-cognito-signing-key.js";
 import type { SimCognitoUser } from "./user/sim-cognito-user.js";
+import type { SimCognitoWebAuthnCredentialDocument } from "./user/web-authn/sim-cognito-web-authn-document.js";
 import { type SimCognitoUsername } from "./user/sim-cognito-username.js";
 interface SimCognitoUserPoolProperties {
     readonly id: SimCognitoUserPoolId;
@@ -58,10 +59,9 @@ export declare class SimCognitoUserPool {
     /**
      * Replace this pool's settings with the ones an update asked for.
      *
-     * `UpdateUserPool` replaces rather than merges, as real Cognito does: the
-     * settings object is built from the update's own request, so a setting the
-     * request left out goes back to the default `CreateUserPool` would have
-     * given it rather than staying as it was.
+     * `UpdateUserPool` replaces rather than merges, as real Cognito does, so a
+     * setting the request left out goes back to the default `CreateUserPool`
+     * would have given it rather than staying as it was.
      */
     update(settings: SimCognitoUserPoolSettings): void;
     /** The URL a token from this pool names as its issuer. */
@@ -73,105 +73,84 @@ export declare class SimCognitoUserPool {
     /** The public keys this pool publishes, as its JWKS endpoint serves them. */
     jwks(): SimCognitoJwks;
     /**
-     * When the pool's settings last changed.
-     *
-     * A pool that no `UpdateUserPool` request has reached reports its creation
-     * date, as a real one does.
+     * When the pool's settings last changed, which is its creation date until
+     * an `UpdateUserPool` request reaches it.
      */
     get lastModifiedDate(): Date;
-    /**
-     * Every app client of this pool, in creation order.
-     */
+    /** Every app client of this pool, in creation order. */
     get clients(): readonly SimCognitoUserPoolClient[];
-    /**
-     * The app client ids already in use in this pool.
-     */
+    /** The app client ids already in use in this pool. */
     get clientIds(): Set<string>;
-    /**
-     * Store a newly created app client.
-     */
+    /** Store a newly created app client. */
     addClient(client: SimCognitoUserPoolClient): void;
-    /**
-     * Forget a deleted app client.
-     */
+    /** Forget a deleted app client. */
     removeClient(client: SimCognitoUserPoolClient): void;
-    /**
-     * Find an app client of this pool by id.
-     */
+    /** Find an app client of this pool by id. */
     findClient(clientId: string): SimCognitoUserPoolClient | undefined;
-    /**
-     * Resolve an app client of this pool by id, or refuse.
-     */
+    /** Resolve an app client of this pool by id, or refuse. */
     requireClient(clientId: SimCognitoUserPoolClientId): SimCognitoUserPoolClient;
-    /**
-     * Every user in this pool, in creation order.
-     */
+    /** Every user in this pool, in creation order. */
     get users(): readonly SimCognitoUser[];
-    /**
-     * How many users this pool holds.
-     */
+    /** How many users this pool holds. */
     get userCount(): number;
-    /**
-     * Store a newly created user, refusing a username already in this pool.
-     */
+    /** Store a newly created user, refusing a username already in this pool. */
     addUser(user: SimCognitoUser): void;
     /**
      * Forget a deleted user, take them out of every group, and forget the
-     * tokens they hold.
-     *
-     * A group holding a user that no longer exists would answer `ListUsersInGroup`
-     * with a member this pool cannot describe, and a refresh token outliving its
-     * user would sign in someone the pool cannot describe either.
+     * tokens they hold. A group holding a user that no longer exists, or a
+     * refresh token outliving one, would reach a user this pool cannot
+     * describe.
      */
     removeUser(user: SimCognitoUser): void;
-    /**
-     * Find a user of this pool by username.
-     */
+    /** Find a user of this pool by username. */
     findUser(username: string): SimCognitoUser | undefined;
-    /**
-     * Resolve a user of this pool by username, or refuse.
-     */
+    /** Resolve a user of this pool by username, or refuse. */
     requireUser(username: SimCognitoUsername): SimCognitoUser;
     /**
      * The confirmation code a user of this pool has outstanding, if it has one.
      *
-     * This and `softwareTokenCode` are the simulator's own accessors, for a test
-     * that has nowhere else to read a code from: nothing here delivers a message
-     * or holds the user's phone. Real Cognito reports either code to nobody.
+     * This, `softwareTokenCode` and `webAuthnCredential` are the simulator's own
+     * accessors, for a test with nowhere else to read a secret from: nothing
+     * here delivers a message, holds the user's phone or runs a browser. Real
+     * Cognito reports none of them to anybody.
      */
     confirmationCode(username: string): string | undefined;
     /**
-     * The code a user's authenticator app is showing now, for a user that has
-     * been given a software token secret. A test that would rather compute the
-     * code itself can do so from the `SecretCode`, which is a real shared secret.
+     * The code a user's authenticator app is showing now. A test that would
+     * rather compute it can do so from the `SecretCode`, which is a real shared
+     * secret.
      */
     softwareTokenCode(username: string): string | undefined;
-    /** Every message this pool would have sent, oldest first. */
-    sentMessages(): readonly SimCognitoSentMessage[];
     /**
-     * Every group in this pool, in creation order.
+     * The credential a user's authenticator would have created for the passkey
+     * registration it has been given options for, which is what
+     * `CompleteWebAuthnRegistration` takes as its `Credential`.
      */
-    get groups(): readonly SimCognitoGroup[];
+    webAuthnCredential(username: string): SimCognitoWebAuthnCredentialDocument;
     /**
-     * Store a newly created group, refusing a name already in this pool.
+     * The credential a user's authenticator would have presented for the
+     * `WEB_AUTHN` challenge a session was issued with.
+     *
+     * The session is the `Session` the challenge answered with, because the
+     * challenge a passkey signs belongs to that one sign-in. Pass the result to
+     * `RespondToAuthChallenge` as its `CREDENTIAL`, which travels as JSON.
      */
+    webAuthnAssertion(session: string): SimCognitoWebAuthnCredentialDocument;
+    /** Every message this pool would have sent, oldest first. */
+    sentMessages(): readonly SimCognitoSentMessage[];
+    /** Every group in this pool, in creation order. */
+    get groups(): readonly SimCognitoGroup[];
+    /** Store a newly created group, refusing a name already in this pool. */
     addGroup(group: SimCognitoGroup): void;
-    /**
-     * Forget a deleted group, and with it the membership of its users.
-     */
+    /** Forget a deleted group, and with it the membership of its users. */
     removeGroup(group: SimCognitoGroup): void;
-    /**
-     * Find a group of this pool by name.
-     */
+    /** Find a group of this pool by name. */
     findGroup(groupName: string): SimCognitoGroup | undefined;
-    /**
-     * Resolve a group of this pool by name, or refuse.
-     */
+    /** Resolve a group of this pool by name, or refuse. */
     requireGroup(groupName: SimCognitoGroupName): SimCognitoGroup;
-    /**
-     * The groups a user of this pool belongs to, strongest precedence first.
-     */
+    /** The groups a user of this pool belongs to, strongest precedence first. */
     groupsOf(username: string): readonly SimCognitoGroup[];
+    private userNamed;
 }
 export {};
 //# sourceMappingURL=sim-cognito-user-pool.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD;;;;OAIG;IACH,SAAgB,QAAQ,6BAAoC;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;IAKjD,YAAY,UAAU,EAAE,4BAA4B,EAWnD;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,0BAA0B,CAEzC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjD;IAED,0DAA0D;IAC1D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,uEAAuE;IACvE,IAAI,UAAU,IAAI,oBAAoB,CAErC;IAED,6EAA6E;IAC7E,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrD;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAItD;IAED,6DAA6D;IAC7D,YAAY,IAAI,SAAS,qBAAqB,EAAE,CAE/C;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,oDAAoD,CAAC;AAE/G,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD;;;;OAIG;IACH,SAAgB,QAAQ,6BAAoC;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;IAKjD,YAAY,UAAU,EAAE,4BAA4B,EAWnD;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,0BAA0B,CAEzC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjD;IAED,0DAA0D;IAC1D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,uEAAuE;IACvE,IAAI,UAAU,IAAI,oBAAoB,CAErC;IAED,6EAA6E;IAC7E,IAAI,IAAI,cAAc,CAErB;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED,wDAAwD;IACxD,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED,sDAAsD;IACtD,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED,wCAAwC;IACxC,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED,mCAAmC;IACnC,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED,6CAA6C;IAC7C,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED,2DAA2D;IAC3D,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED,kDAAkD;IAClD,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED,sCAAsC;IACtC,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,4EAA4E;IAC5E,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED,0DAA0D;IAC1D,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErD;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtD;IAED;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,oCAAoC,CAEzE;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,oCAAoC,CAQvE;IAED,6DAA6D;IAC7D,YAAY,IAAI,SAAS,qBAAqB,EAAE,CAE/C;IAED,mDAAmD;IACnD,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED,uEAAuE;IACvE,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED,yCAAyC;IACzC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED,uDAAuD;IACvD,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;IAED,OAAO,CAAC,SAAS;CAGlB"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js

@@ -56,10 +56,9 @@ export class SimCognitoUserPool {
     /**
      * Replace this pool's settings with the ones an update asked for.
      *
-     * `UpdateUserPool` replaces rather than merges, as real Cognito does: the
-     * settings object is built from the update's own request, so a setting the
-     * request left out goes back to the default `CreateUserPool` would have
-     * given it rather than staying as it was.
+     * `UpdateUserPool` replaces rather than merges, as real Cognito does, so a
+     * setting the request left out goes back to the default `CreateUserPool`
+     * would have given it rather than staying as it was.
      */
     update(settings) {
         this.#settings = settings;
@@ -82,151 +81,137 @@ export class SimCognitoUserPool {
         return this.keys.jwks();
     }
     /**
-     * When the pool's settings last changed.
-     *
-     * A pool that no `UpdateUserPool` request has reached reports its creation
-     * date, as a real one does.
+     * When the pool's settings last changed, which is its creation date until
+     * an `UpdateUserPool` request reaches it.
      */
     get lastModifiedDate() {
         return this.#modifiedDate;
     }
-    /**
-     * Every app client of this pool, in creation order.
-     */
+    /** Every app client of this pool, in creation order. */
     get clients() {
         return this.clientStore.all;
     }
-    /**
-     * The app client ids already in use in this pool.
-     */
+    /** The app client ids already in use in this pool. */
     get clientIds() {
         return this.clientStore.ids;
     }
-    /**
-     * Store a newly created app client.
-     */
+    /** Store a newly created app client. */
     addClient(client) {
         this.clientStore.add(client);
     }
-    /**
-     * Forget a deleted app client.
-     */
+    /** Forget a deleted app client. */
     removeClient(client) {
         this.clientStore.remove(client);
     }
-    /**
-     * Find an app client of this pool by id.
-     */
+    /** Find an app client of this pool by id. */
     findClient(clientId) {
         return this.clientStore.find(clientId);
     }
-    /**
-     * Resolve an app client of this pool by id, or refuse.
-     */
+    /** Resolve an app client of this pool by id, or refuse. */
     requireClient(clientId) {
         return this.clientStore.require(clientId);
     }
-    /**
-     * Every user in this pool, in creation order.
-     */
+    /** Every user in this pool, in creation order. */
     get users() {
         return this.userStore.all;
     }
-    /**
-     * How many users this pool holds.
-     */
+    /** How many users this pool holds. */
     get userCount() {
         return this.userStore.count;
     }
-    /**
-     * Store a newly created user, refusing a username already in this pool.
-     */
+    /** Store a newly created user, refusing a username already in this pool. */
     addUser(user) {
         this.userStore.add(user);
     }
     /**
      * Forget a deleted user, take them out of every group, and forget the
-     * tokens they hold.
-     *
-     * A group holding a user that no longer exists would answer `ListUsersInGroup`
-     * with a member this pool cannot describe, and a refresh token outliving its
-     * user would sign in someone the pool cannot describe either.
+     * tokens they hold. A group holding a user that no longer exists, or a
+     * refresh token outliving one, would reach a user this pool cannot
+     * describe.
      */
     removeUser(user) {
         this.userStore.remove(user);
         this.groupStore.forgetUser(user.username);
         this.auth.signOut(user.username);
     }
-    /**
-     * Find a user of this pool by username.
-     */
+    /** Find a user of this pool by username. */
     findUser(username) {
         return this.userStore.find(username);
     }
-    /**
-     * Resolve a user of this pool by username, or refuse.
-     */
+    /** Resolve a user of this pool by username, or refuse. */
     requireUser(username) {
         return this.userStore.require(username);
     }
     /**
      * The confirmation code a user of this pool has outstanding, if it has one.
      *
-     * This and `softwareTokenCode` are the simulator's own accessors, for a test
-     * that has nowhere else to read a code from: nothing here delivers a message
-     * or holds the user's phone. Real Cognito reports either code to nobody.
+     * This, `softwareTokenCode` and `webAuthnCredential` are the simulator's own
+     * accessors, for a test with nowhere else to read a secret from: nothing
+     * here delivers a message, holds the user's phone or runs a browser. Real
+     * Cognito reports none of them to anybody.
      */
     confirmationCode(username) {
-        return this.requireUser(requireSimCognitoUsername(username))
-            .confirmationCode;
+        return this.userNamed(username).confirmationCode;
     }
     /**
-     * The code a user's authenticator app is showing now, for a user that has
-     * been given a software token secret. A test that would rather compute the
-     * code itself can do so from the `SecretCode`, which is a real shared secret.
+     * The code a user's authenticator app is showing now. A test that would
+     * rather compute it can do so from the `SecretCode`, which is a real shared
+     * secret.
      */
     softwareTokenCode(username) {
-        return this.requireUser(requireSimCognitoUsername(username)).mfa.codeAt(this.clock.now());
+        return this.userNamed(username).mfa.codeAt(this.clock.now());
+    }
+    /**
+     * The credential a user's authenticator would have created for the passkey
+     * registration it has been given options for, which is what
+     * `CompleteWebAuthnRegistration` takes as its `Credential`.
+     */
+    webAuthnCredential(username) {
+        return this.userNamed(username).webAuthn.registrationCredential();
+    }
+    /**
+     * The credential a user's authenticator would have presented for the
+     * `WEB_AUTHN` challenge a session was issued with.
+     *
+     * The session is the `Session` the challenge answered with, because the
+     * challenge a passkey signs belongs to that one sign-in. Pass the result to
+     * `RespondToAuthChallenge` as its `CREDENTIAL`, which travels as JSON.
+     */
+    webAuthnAssertion(session) {
+        const answering = this.auth.requireWebAuthnSession(session);
+        const user = this.userNamed(answering.username);
+        return user.webAuthn.device.present(answering.requireWebAuthnOptions(), Buffer.from(user.sub).toString("base64url"));
     }
     /** Every message this pool would have sent, oldest first. */
     sentMessages() {
         return this.messages.all;
     }
-    /**
-     * Every group in this pool, in creation order.
-     */
+    /** Every group in this pool, in creation order. */
     get groups() {
         return this.groupStore.all;
     }
-    /**
-     * Store a newly created group, refusing a name already in this pool.
-     */
+    /** Store a newly created group, refusing a name already in this pool. */
     addGroup(group) {
         this.groupStore.add(group);
     }
-    /**
-     * Forget a deleted group, and with it the membership of its users.
-     */
+    /** Forget a deleted group, and with it the membership of its users. */
     removeGroup(group) {
         this.groupStore.remove(group);
     }
-    /**
-     * Find a group of this pool by name.
-     */
+    /** Find a group of this pool by name. */
     findGroup(groupName) {
         return this.groupStore.find(groupName);
     }
-    /**
-     * Resolve a group of this pool by name, or refuse.
-     */
+    /** Resolve a group of this pool by name, or refuse. */
     requireGroup(groupName) {
         return this.groupStore.require(groupName);
     }
-    /**
-     * The groups a user of this pool belongs to, strongest precedence first.
-     */
+    /** The groups a user of this pool belongs to, strongest precedence first. */
     groupsOf(username) {
         return this.groupStore.forUser(username);
     }
+    userNamed(username) {
+        return this.requireUser(requireSimCognitoUsername(username));
+    }
 }
 //# sourceMappingURL=sim-cognito-user-pool.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAMtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD;;;;OAIG;IACa,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,CAAsB;IAC/B,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEjD,SAAS,CAA6B;IACtC,aAAa,CAAO;IAEpB,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CACtC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CACvC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAoC;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS;QACX,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY;QACd,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,uEAAuE;IACvE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;aACzD,gBAAgB,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CACrE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAOtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD;;;;OAIG;IACa,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,CAAsB;IAC/B,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEjD,SAAS,CAA6B;IACtC,aAAa,CAAO;IAEpB,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CACtC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CACvC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAoC;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS;QACX,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY;QACd,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,uEAAuE;IACvE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,sDAAsD;IACtD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,wCAAwC;IACxC,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,mCAAmC;IACnC,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,6CAA6C;IAC7C,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,2DAA2D;IAC3D,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,kDAAkD;IAClD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED,sCAAsC;IACtC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,4CAA4C;IAC5C,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,0DAA0D;IAC1D,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,gBAAgB,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAe;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CACjC,SAAS,CAAC,sBAAsB,EAAE,EAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC5C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED,mDAAmD;IACnD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED,yEAAyE;IACzE,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,uEAAuE;IACvE,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,yCAAyC;IACzC,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,uDAAuD;IACvD,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}