@kensio/yulin 1.7.0 → 1.9.0

package/dist/service/cognito/user-pool/sim-cognito-admin-create-user-config.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The `AdminCreateUserConfig` a request can set on a pool.
+ *
+ * `InviteMessageTemplate` and `UnusedAccountValidityDays` are named so that
+ * `CreateUserPool` can refuse them: both are about the invitation an
+ * admin-created user is sent, and nothing here delivers a message.
+ */
+export interface SimCognitoAdminCreateUserConfigType {
+    readonly AllowAdminCreateUserOnly?: boolean | undefined;
+    readonly InviteMessageTemplate?: object | undefined;
+    readonly UnusedAccountValidityDays?: number | undefined;
+}
+/**
+ * Whether a pool lets users sign themselves up.
+ *
+ * `AllowAdminCreateUserOnly: true` says only an administrator creates users,
+ * and real Cognito refuses `SignUp` against such a pool. That refusal is
+ * simulated rather than the setting being accepted and ignored, because a CDK
+ * `UserPool` without `selfSignUpEnabled` emits exactly that value: a project
+ * testing its registration flow against a pool created that way would pass
+ * here and fail in a deployment.
+ *
+ * A pool created without the setting allows sign-up, which is the AWS default
+ * for the field.
+ */
+export declare class SimCognitoAdminCreateUserConfig {
+    readonly allowAdminCreateUserOnly: boolean;
+    constructor(requested?: SimCognitoAdminCreateUserConfigType);
+    /**
+     * Refuse a sign-up against a pool only an administrator may create users in.
+     */
+    requireSelfServiceSignUp(): void;
+    /**
+     * This configuration as a described pool reports it.
+     *
+     * Real Cognito reports the setting whether or not the request named it, so
+     * a pool that allows sign-up says so rather than saying nothing.
+     */
+    toOutput(): SimCognitoAdminCreateUserConfigType;
+}
+//# sourceMappingURL=sim-cognito-admin-create-user-config.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-admin-create-user-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-create-user-config.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-admin-create-user-config.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,+BAA+B;IAC1C,SAAgB,wBAAwB,EAAE,OAAO,CAAC;IAElD,YAAY,SAAS,CAAC,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,wBAAwB,IAAI,IAAI,CAQ/B;IAED;;;;;OAKG;IACH,QAAQ,IAAI,mCAAmC,CAE9C;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-admin-create-user-config.js

@@ -0,0 +1,41 @@
+import { SimCognitoNotAuthorizedException } from "../error/sim-cognito.error.js";
+/**
+ * Whether a pool lets users sign themselves up.
+ *
+ * `AllowAdminCreateUserOnly: true` says only an administrator creates users,
+ * and real Cognito refuses `SignUp` against such a pool. That refusal is
+ * simulated rather than the setting being accepted and ignored, because a CDK
+ * `UserPool` without `selfSignUpEnabled` emits exactly that value: a project
+ * testing its registration flow against a pool created that way would pass
+ * here and fail in a deployment.
+ *
+ * A pool created without the setting allows sign-up, which is the AWS default
+ * for the field.
+ */
+export class SimCognitoAdminCreateUserConfig {
+    allowAdminCreateUserOnly;
+    constructor(requested) {
+        this.allowAdminCreateUserOnly =
+            requested?.AllowAdminCreateUserOnly ?? false;
+    }
+    /**
+     * Refuse a sign-up against a pool only an administrator may create users in.
+     */
+    requireSelfServiceSignUp() {
+        if (this.allowAdminCreateUserOnly) {
+            throw new SimCognitoNotAuthorizedException("SignUp is not permitted for this user pool: it was created with " +
+                "AdminCreateUserConfig AllowAdminCreateUserOnly true, so only " +
+                "AdminCreateUser makes a user in it.");
+        }
+    }
+    /**
+     * This configuration as a described pool reports it.
+     *
+     * Real Cognito reports the setting whether or not the request named it, so
+     * a pool that allows sign-up says so rather than saying nothing.
+     */
+    toOutput() {
+        return { AllowAdminCreateUserOnly: this.allowAdminCreateUserOnly };
+    }
+}
+//# sourceMappingURL=sim-cognito-admin-create-user-config.js.map

package/dist/service/cognito/user-pool/sim-cognito-admin-create-user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-create-user-config.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-admin-create-user-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAejF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,+BAA+B;IAC1B,wBAAwB,CAAU;IAElD,YAAY,SAA+C;QACzD,IAAI,CAAC,wBAAwB;YAC3B,SAAS,EAAE,wBAAwB,IAAI,KAAK,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,MAAM,IAAI,gCAAgC,CACxC,kEAAkE;gBAChE,+DAA+D;gBAC/D,qCAAqC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,EAAE,wBAAwB,EAAE,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-auto-verified-attributes.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The attributes a pool verifies when a user confirms its sign-up.
+ *
+ * Real Cognito sends the confirmation code to each of these, and marks the
+ * matching `_verified` flag once the user answers with the code. Nothing here
+ * sends anything, so what is simulated is the second half: confirming a
+ * sign-up sets `email_verified` or `phone_number_verified` on the user, which
+ * is what an application reads to decide whether it can trust the address.
+ *
+ * `AdminConfirmSignUp` sets neither, as it does not on real Cognito: an admin
+ * confirming a user says nothing about whether the address is really theirs.
+ */
+export declare class SimCognitoAutoVerifiedAttributes {
+    private readonly attributeNames;
+    constructor(requested?: readonly string[]);
+    private static requireVerifiable;
+    /**
+     * The attribute names, as the request gave them.
+     */
+    get names(): readonly string[];
+    /**
+     * Whether the pool verifies nothing automatically.
+     */
+    get isEmpty(): boolean;
+    /**
+     * These attributes as a described pool reports them, or nothing where the
+     * pool has none.
+     *
+     * A pool created without any reports the property not at all rather than as
+     * an empty list, which is how the settings a pool accepts without acting on
+     * are reported too.
+     */
+    toOutput(): readonly string[] | undefined;
+}
+//# sourceMappingURL=sim-cognito-auto-verified-attributes.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-auto-verified-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auto-verified-attributes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-auto-verified-attributes.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;GAWG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IAEnD,YAAY,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAIxC;IAED,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAWhC;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;;;OAOG;IACH,QAAQ,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAMxC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-auto-verified-attributes.js

@@ -0,0 +1,60 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+/**
+ * The attributes a pool can verify automatically.
+ *
+ * These are the two Cognito can send a confirmation code to, and the only two
+ * with a `_verified` flag in the standard schema.
+ */
+const verifiableAttributeNames = ["email", "phone_number"];
+/**
+ * The attributes a pool verifies when a user confirms its sign-up.
+ *
+ * Real Cognito sends the confirmation code to each of these, and marks the
+ * matching `_verified` flag once the user answers with the code. Nothing here
+ * sends anything, so what is simulated is the second half: confirming a
+ * sign-up sets `email_verified` or `phone_number_verified` on the user, which
+ * is what an application reads to decide whether it can trust the address.
+ *
+ * `AdminConfirmSignUp` sets neither, as it does not on real Cognito: an admin
+ * confirming a user says nothing about whether the address is really theirs.
+ */
+export class SimCognitoAutoVerifiedAttributes {
+    attributeNames;
+    constructor(requested) {
+        this.attributeNames = (requested ?? []).map((name) => SimCognitoAutoVerifiedAttributes.requireVerifiable(name));
+    }
+    static requireVerifiable(name) {
+        if (!verifiableAttributeNames.includes(name)) {
+            throw new SimCognitoInvalidParameterException(`AutoVerifiedAttributes '${name}' is not an attribute Cognito can ` +
+                `verify. Only ${verifiableAttributeNames.join(" and ")} can be`);
+        }
+        return name;
+    }
+    /**
+     * The attribute names, as the request gave them.
+     */
+    get names() {
+        return this.attributeNames;
+    }
+    /**
+     * Whether the pool verifies nothing automatically.
+     */
+    get isEmpty() {
+        return this.attributeNames.length === 0;
+    }
+    /**
+     * These attributes as a described pool reports them, or nothing where the
+     * pool has none.
+     *
+     * A pool created without any reports the property not at all rather than as
+     * an empty list, which is how the settings a pool accepts without acting on
+     * are reported too.
+     */
+    toOutput() {
+        if (this.isEmpty) {
+            return undefined;
+        }
+        return [...this.attributeNames];
+    }
+}
+//# sourceMappingURL=sim-cognito-auto-verified-attributes.js.map

package/dist/service/cognito/user-pool/sim-cognito-auto-verified-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auto-verified-attributes.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-auto-verified-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gCAAgC;IAC1B,cAAc,CAAoB;IAEnD,YAAY,SAA6B;QACvC,IAAI,CAAC,cAAc,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACnD,gCAAgC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CACzD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,IAAY;QAC3C,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,mCAAmC,CAC3C,2BAA2B,IAAI,oCAAoC;gBACjE,gBAAgB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAClE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.d.ts

@@ -6,20 +6,15 @@
  */
 export interface SimCognitoUnsimulatedPoolSettingsType {
     readonly AccountRecoverySetting?: object | undefined;
-    readonly AdminCreateUserConfig?: object | undefined;
-    readonly EmailVerificationMessage?: string | undefined;
-    readonly EmailVerificationSubject?: string | undefined;
-    readonly SmsVerificationMessage?: string | undefined;
-    readonly VerificationMessageTemplate?: object | undefined;
 }
 /**
  * The settings a pool was created with and this simulation does not act on.
  *
- * Each one configures message delivery or account recovery, and neither is
- * simulated, so nothing reads any of them back out. They are kept so
- * `DescribeUserPool` reports what the request set, which is how a test can
- * see that a template's declaration reached the pool rather than being
- * dropped on the way.
+ * `AccountRecoverySetting` chooses how a forgotten password is recovered, and
+ * there is no `ForgotPassword` command here, so nothing reads it back out. It
+ * is kept so `DescribeUserPool` reports what the request set, which is how a
+ * test can see that a template's declaration reached the pool rather than
+ * being dropped on the way.
  *
  * Only what the request set is reported. A pool created without one of these
  * describes without it, rather than describing it as the value the request
@@ -37,12 +32,12 @@ export declare class SimCognitoUnsimulatedPoolSettings {
      * reference.
      *
      * A caller passes its whole `CreateUserPool` input in, and may reuse or
-     * edit that object afterwards. Three of these are nested objects, so the
-     * copy goes all the way down. Copying means a described pool reports what
-     * the request said at the time it was made, as a real one does.
+     * edit that object afterwards. This one is a nested object, so the copy goes
+     * all the way down. Copying means a described pool reports what the request
+     * said at the time it was made, as a real one does.
      *
-     * Each setting is kept only where the request set it, so a pool created
-     * without one describes without it rather than describing it as the value
+     * The setting is kept only where the request set it, so a pool created
+     * without it describes without it rather than describing it as the value
      * the request would have needed to use.
      */
     private accepted;

package/dist/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IAEjE,YAAY,QAAQ,EAAE,qCAAqC,EAE1D;IAED;;OAEG;IACH,QAAQ,IAAI,qCAAqC,CAEhD;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,QAAQ;CAwBjB"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IAEjE,YAAY,QAAQ,EAAE,qCAAqC,EAE1D;IAED;;OAEG;IACH,QAAQ,IAAI,qCAAqC,CAEhD;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,QAAQ;CASjB"}

package/dist/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.js

@@ -1,11 +1,11 @@
 /**
  * The settings a pool was created with and this simulation does not act on.
  *
- * Each one configures message delivery or account recovery, and neither is
- * simulated, so nothing reads any of them back out. They are kept so
- * `DescribeUserPool` reports what the request set, which is how a test can
- * see that a template's declaration reached the pool rather than being
- * dropped on the way.
+ * `AccountRecoverySetting` chooses how a forgotten password is recovered, and
+ * there is no `ForgotPassword` command here, so nothing reads it back out. It
+ * is kept so `DescribeUserPool` reports what the request set, which is how a
+ * test can see that a template's declaration reached the pool rather than
+ * being dropped on the way.
  *
  * Only what the request set is reported. A pool created without one of these
  * describes without it, rather than describing it as the value the request
@@ -27,12 +27,12 @@ export class SimCognitoUnsimulatedPoolSettings {
      * reference.
      *
      * A caller passes its whole `CreateUserPool` input in, and may reuse or
-     * edit that object afterwards. Three of these are nested objects, so the
-     * copy goes all the way down. Copying means a described pool reports what
-     * the request said at the time it was made, as a real one does.
+     * edit that object afterwards. This one is a nested object, so the copy goes
+     * all the way down. Copying means a described pool reports what the request
+     * said at the time it was made, as a real one does.
      *
-     * Each setting is kept only where the request set it, so a pool created
-     * without one describes without it rather than describing it as the value
+     * The setting is kept only where the request set it, so a pool created
+     * without it describes without it rather than describing it as the value
      * the request would have needed to use.
      */
     accepted(settings) {
@@ -40,21 +40,6 @@ export class SimCognitoUnsimulatedPoolSettings {
             ...(settings.AccountRecoverySetting !== undefined && {
                 AccountRecoverySetting: settings.AccountRecoverySetting,
             }),
-            ...(settings.AdminCreateUserConfig !== undefined && {
-                AdminCreateUserConfig: settings.AdminCreateUserConfig,
-            }),
-            ...(settings.EmailVerificationMessage !== undefined && {
-                EmailVerificationMessage: settings.EmailVerificationMessage,
-            }),
-            ...(settings.EmailVerificationSubject !== undefined && {
-                EmailVerificationSubject: settings.EmailVerificationSubject,
-            }),
-            ...(settings.SmsVerificationMessage !== undefined && {
-                SmsVerificationMessage: settings.SmsVerificationMessage,
-            }),
-            ...(settings.VerificationMessageTemplate !== undefined && {
-                VerificationMessageTemplate: settings.VerificationMessageTemplate,
-            }),
         });
     }
 }

package/dist/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-unsimulated-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAwC;IAEjE,YAAY,QAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,QAAQ,CACd,QAA+C;QAE/C,OAAO,eAAe,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS,IAAI;gBACnD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;aACxD,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS,IAAI;gBAClD,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;aACtD,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC,wBAAwB,KAAK,SAAS,IAAI;gBACrD,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC,wBAAwB,KAAK,SAAS,IAAI;gBACrD,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS,IAAI;gBACnD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;aACxD,CAAC;YACF,GAAG,CAAC,QAAQ,CAAC,2BAA2B,KAAK,SAAS,IAAI;gBACxD,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;aAClE,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-unsimulated-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-unsimulated-pool-settings.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAwC;IAEjE,YAAY,QAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,QAAQ,CACd,QAA+C;QAE/C,OAAO,eAAe,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS,IAAI;gBACnD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;aACxD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.d.ts

@@ -20,6 +20,14 @@ interface SimCognitoUserPoolArnProperties {
  */
 export declare class SimCognitoUserPoolArn {
     readonly value: string;
+    /**
+     * The Account that owns the pool.
+     *
+     * This is kept alongside the ARN because it is what another service supplies
+     * as `AWS:SourceAccount` when the pool reaches it, such as a Lambda trigger
+     * invocation.
+     */
+    readonly accountId: string;
     constructor(properties: SimCognitoUserPoolArnProperties);
 }
 export {};

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,kBAAkB,EAAE,wBAAwB,GAC3C,MAAM,CAIR;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,UAAU,EAAE,+BAA+B,EAItD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,kBAAkB,EAAE,wBAAwB,GAC3C,MAAM,CAIR;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B;;;;;;OAMG;IACH,SAAgB,SAAS,EAAE,MAAM,CAAC;IAElC,YAAY,UAAU,EAAE,+BAA+B,EAKtD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.js

@@ -17,10 +17,19 @@ export function cognitoUserPoolArnPrefix(accountRegionScope) {
  */
 export class SimCognitoUserPoolArn {
     value;
+    /**
+     * The Account that owns the pool.
+     *
+     * This is kept alongside the ARN because it is what another service supplies
+     * as `AWS:SourceAccount` when the pool reaches it, such as a Lambda trigger
+     * invocation.
+     */
+    accountId;
     constructor(properties) {
         this.value =
             cognitoUserPoolArnPrefix(properties.accountRegionScope) +
                 properties.userPoolId;
+        this.accountId = properties.accountRegionScope.accountId;
     }
 }
 //# sourceMappingURL=sim-cognito-user-pool-arn.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-arn.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-arn.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-arn.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,kBAA4C;IAE5C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC;IAErD,OAAO,uBAAuB,UAAU,IAAI,SAAS,YAAY,CAAC;AACpE,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAqB;IAChB,KAAK,CAAS;IAE9B,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK;YACR,wBAAwB,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,UAAU,CAAC,UAAU,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-arn.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-arn.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,kBAA4C;IAE5C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC;IAErD,OAAO,uBAAuB,UAAU,IAAI,SAAS,YAAY,CAAC;AACpE,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAqB;IAChB,KAAK,CAAS;IAE9B;;;;;;OAMG;IACa,SAAS,CAAS;IAElC,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK;YACR,wBAAwB,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,UAAU,CAAC,UAAU,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC;IAC3D,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.d.ts

@@ -1,8 +1,7 @@
 import type { SimClock } from "../../../util/clock/sim-clock.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
-import { type SimCognitoUserPoolPoliciesType } from "./sim-cognito-password-policy.js";
 import { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
-import { type SimCognitoUnsimulatedPoolSettingsType } from "./sim-cognito-unsimulated-pool-settings.js";
+import { type SimCognitoUserPoolSettingsInput } from "./sim-cognito-user-pool-settings.js";
 import type { SimCognitoUserPoolStore } from "./sim-cognito-user-pool-store.js";
 interface SimCognitoUserPoolFactoryProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
@@ -11,13 +10,10 @@ interface SimCognitoUserPoolFactoryProperties {
 }
 interface SimCognitoMakeUserPoolProperties {
     readonly name: string | undefined;
-    readonly policies?: SimCognitoUserPoolPoliciesType | undefined;
-    readonly deletionProtection?: string | undefined;
     /**
-     * The settings the request set that this simulation accepts without acting
-     * on, which a described pool reports back.
+     * The `CreateUserPool` request the pool's settings are read out of.
      */
-    readonly unsimulatedSettings?: SimCognitoUnsimulatedPoolSettingsType | undefined;
+    readonly settings: SimCognitoUserPoolSettingsInput;
 }
 /**
  * Builds simulated user pools, including their id, ARN and defaults.

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAEL,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjD;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAC3B,qCAAqC,GAAG,SAAS,CAAC;CACrD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,gCAAgC,GAAG,kBAAkB,CA2BrE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;CACpD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,gCAAgC,GAAG,kBAAkB,CAsBrE;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js

@@ -1,10 +1,8 @@
-import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
 import { SimCognitoName } from "./sim-cognito-name.js";
-import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
 import { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
 import { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
 import { makeSimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
-import { SimCognitoUnsimulatedPoolSettings, } from "./sim-cognito-unsimulated-pool-settings.js";
+import { SimCognitoUserPoolSettings, } from "./sim-cognito-user-pool-settings.js";
 /**
  * Builds simulated user pools, including their id, ARN and defaults.
  *
@@ -36,10 +34,11 @@ export class SimCognitoUserPoolFactory {
                 field: "PoolName",
                 value: properties.name,
             }),
-            passwordPolicy: new SimCognitoPasswordPolicy(properties.policies?.PasswordPolicy),
-            deletionProtection: new SimCognitoDeletionProtection(properties.deletionProtection),
-            unsimulatedSettings: new SimCognitoUnsimulatedPoolSettings(properties.unsimulatedSettings ?? {}),
-            createdDate: this.clock.now(),
+            settings: new SimCognitoUserPoolSettings({
+                input: properties.settings,
+                operation: "CreateUserPool",
+            }),
+            clock: this.clock,
         });
     }
 }

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AAsBpD;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,cAAc,EAAE,IAAI,wBAAwB,CAC1C,UAAU,CAAC,QAAQ,EAAE,cAAc,CACpC;YACD,kBAAkB,EAAE,IAAI,4BAA4B,CAClD,UAAU,CAAC,kBAAkB,CAC9B;YACD,mBAAmB,EAAE,IAAI,iCAAiC,CACxD,UAAU,CAAC,mBAAmB,IAAI,EAAE,CACrC;YACD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAkB7C;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,QAAQ,EAAE,IAAI,0BAA0B,CAAC;gBACvC,KAAK,EAAE,UAAU,CAAC,QAAQ;gBAC1B,SAAS,EAAE,gBAAgB;aAC5B,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.d.ts

@@ -17,4 +17,28 @@ export declare function makeSimCognitoUserPoolId(regionName: AwsRegionName, exis
  * as a missing pool.
  */
 export declare function requireSimCognitoUserPoolId(value: string | undefined): SimCognitoUserPoolId;
+/**
+ * The Region a pool lives in, which its id names.
+ *
+ * This is where SDK code and token verifiers get it from too: splitting the id
+ * on the underscore is how the region is recovered everywhere, rather than
+ * being carried alongside.
+ */
+export declare function simCognitoUserPoolRegionName(userPoolId: string): string;
+/**
+ * The URL a token from a pool names as its issuer.
+ *
+ * This is the `iss` claim of the pool's tokens, the OIDC issuer its
+ * `.well-known` documents are served under, and what a JWT verifier is
+ * configured with.
+ */
+export declare function simCognitoUserPoolIssuerUrl(userPoolId: string): string;
+/**
+ * The name a pool is known by where a scheme would be wrong.
+ *
+ * This is the issuer URL without `https://`, and it is what an identity pool
+ * names a user pool provider by, and what `AWS::Cognito::UserPool` answers
+ * `Fn::GetAtt ProviderName` with.
+ */
+export declare function simCognitoUserPoolProviderName(userPoolId: string): string;
 //# sourceMappingURL=sim-cognito-user-pool-id.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-id.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAczE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,aAAa,EACzB,QAAQ,cAAoB,GAC3B,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,oBAAoB,CAetB"}
+{"version":3,"file":"sim-cognito-user-pool-id.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAczE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,aAAa,EACzB,QAAQ,cAAoB,GAC3B,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,oBAAoB,CAetB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAItE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.js

@@ -45,4 +45,36 @@ export function requireSimCognitoUserPoolId(value) {
     }
     return value;
 }
+/**
+ * The Region a pool lives in, which its id names.
+ *
+ * This is where SDK code and token verifiers get it from too: splitting the id
+ * on the underscore is how the region is recovered everywhere, rather than
+ * being carried alongside.
+ */
+export function simCognitoUserPoolRegionName(userPoolId) {
+    const [regionName] = userPoolId.split("_", 1);
+    return String(regionName);
+}
+/**
+ * The URL a token from a pool names as its issuer.
+ *
+ * This is the `iss` claim of the pool's tokens, the OIDC issuer its
+ * `.well-known` documents are served under, and what a JWT verifier is
+ * configured with.
+ */
+export function simCognitoUserPoolIssuerUrl(userPoolId) {
+    const regionName = simCognitoUserPoolRegionName(userPoolId);
+    return `https://cognito-idp.${regionName}.amazonaws.com/${userPoolId}`;
+}
+/**
+ * The name a pool is known by where a scheme would be wrong.
+ *
+ * This is the issuer URL without `https://`, and it is what an identity pool
+ * names a user pool provider by, and what `AWS::Cognito::UserPool` answers
+ * `Fn::GetAtt ProviderName` with.
+ */
+export function simCognitoUserPoolProviderName(userPoolId) {
+    return simCognitoUserPoolIssuerUrl(userPoolId).replace("https://", "");
+}
 //# sourceMappingURL=sim-cognito-user-pool-id.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-id.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAIpF;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,QAAQ,GAAG,IAAI,GAAG,EAAU;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5D,MAAM,EAAE,sBAAsB;SAC/B,CAAC,EAA0B,CAAC;QAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,wCAAwC;YAC1D,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,KAA6B,CAAC;AACvC,CAAC"}
+{"version":3,"file":"sim-cognito-user-pool-id.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAIpF;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,QAAQ,GAAG,IAAI,GAAG,EAAU;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5D,MAAM,EAAE,sBAAsB;SAC/B,CAAC,EAA0B,CAAC;QAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,wCAAwC;YAC1D,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,KAA6B,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,UAAkB;IAC7D,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAE5D,OAAO,uBAAuB,UAAU,kBAAkB,UAAU,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB;IAC/D,OAAO,2BAA2B,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts

@@ -0,0 +1,65 @@
+import { SimCognitoAdminCreateUserConfig, type SimCognitoAdminCreateUserConfigType } from "./sim-cognito-admin-create-user-config.js";
+import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
+import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoPasswordPolicy, type SimCognitoUserPoolPoliciesType } from "./sim-cognito-password-policy.js";
+import { SimCognitoVerificationMessages, type SimCognitoVerificationMessagesType } from "./message/sim-cognito-verification-messages.js";
+import { SimCognitoUnsimulatedPoolSettings, type SimCognitoUnsimulatedPoolSettingsType } from "./sim-cognito-unsimulated-pool-settings.js";
+import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
+/**
+ * The pool settings a request can set, in the shape the SDK sends them.
+ *
+ * `CreateUserPool` and `UpdateUserPool` both carry these, which is what lets
+ * an update build a pool's settings the same way a creation does.
+ */
+export interface SimCognitoUserPoolSettingsInput extends SimCognitoUnsimulatedPoolSettingsType, SimCognitoVerificationMessagesType {
+    readonly Policies?: SimCognitoUserPoolPoliciesType | undefined;
+    readonly DeletionProtection?: string | undefined;
+    readonly AdminCreateUserConfig?: SimCognitoAdminCreateUserConfigType | undefined;
+    readonly AutoVerifiedAttributes?: readonly string[] | undefined;
+    readonly LambdaConfig?: object | undefined;
+}
+interface SimCognitoUserPoolSettingsProperties {
+    readonly input: SimCognitoUserPoolSettingsInput;
+    /**
+     * The operation reading these settings, which its refusals name:
+     * `CreateUserPool` or `UpdateUserPool`.
+     */
+    readonly operation: string;
+}
+/**
+ * The settings of one simulated user pool that a request can change: the
+ * password policy, the deletion protection, whether users may sign themselves
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
+ * and what its messages say.
+ *
+ * The pool's id, ARN and name are not among them. The first two identify the
+ * pool, and renaming one is not simulated.
+ *
+ * A setting the request leaves out takes the default real Cognito applies to
+ * a pool that never asked for it. That is what makes `UpdateUserPool` replace
+ * rather than merge: an update builds a whole configuration out of its own
+ * request, and the pool swaps to it, so a setting the update is silent about
+ * goes back to its default rather than staying as it was.
+ */
+export declare class SimCognitoUserPoolSettings {
+    readonly passwordPolicy: SimCognitoPasswordPolicy;
+    readonly deletionProtection: SimCognitoDeletionProtection;
+    readonly adminCreateUserConfig: SimCognitoAdminCreateUserConfig;
+    readonly autoVerifiedAttributes: SimCognitoAutoVerifiedAttributes;
+    /**
+     * The Lambda triggers the pool runs, by the ARN of the function each names.
+     */
+    readonly lambdaConfig: SimCognitoLambdaConfig;
+    /**
+     * What the pool says in the message it sends a user signing itself up.
+     */
+    readonly verificationMessages: SimCognitoVerificationMessages;
+    /**
+     * What the request set that nothing here acts on, kept so a described pool
+     * reports it.
+     */
+    readonly unsimulated: SimCognitoUnsimulatedPoolSettings;
+    constructor(properties: SimCognitoUserPoolSettingsProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-settings.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,EACjC,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BACf,SACE,qCAAqC,EACrC,kCAAkC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAC7B,mCAAmC,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA0B;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,WAAW,EAAE,iCAAiC,CAAC;IAE/D,YAAY,UAAU,EAAE,oCAAoC,EAqB3D;CACF"}