@kensio/yulin 1.7.0 → 1.9.0

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js

@@ -0,0 +1,52 @@
+import { SimCognitoAdminCreateUserConfig, } from "./sim-cognito-admin-create-user-config.js";
+import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
+import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
+import { SimCognitoVerificationMessages, } from "./message/sim-cognito-verification-messages.js";
+import { SimCognitoUnsimulatedPoolSettings, } from "./sim-cognito-unsimulated-pool-settings.js";
+import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
+/**
+ * The settings of one simulated user pool that a request can change: the
+ * password policy, the deletion protection, whether users may sign themselves
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
+ * and what its messages say.
+ *
+ * The pool's id, ARN and name are not among them. The first two identify the
+ * pool, and renaming one is not simulated.
+ *
+ * A setting the request leaves out takes the default real Cognito applies to
+ * a pool that never asked for it. That is what makes `UpdateUserPool` replace
+ * rather than merge: an update builds a whole configuration out of its own
+ * request, and the pool swaps to it, so a setting the update is silent about
+ * goes back to its default rather than staying as it was.
+ */
+export class SimCognitoUserPoolSettings {
+    passwordPolicy;
+    deletionProtection;
+    adminCreateUserConfig;
+    autoVerifiedAttributes;
+    /**
+     * The Lambda triggers the pool runs, by the ARN of the function each names.
+     */
+    lambdaConfig;
+    /**
+     * What the pool says in the message it sends a user signing itself up.
+     */
+    verificationMessages;
+    /**
+     * What the request set that nothing here acts on, kept so a described pool
+     * reports it.
+     */
+    unsimulated;
+    constructor(properties) {
+        const { input, operation } = properties;
+        this.passwordPolicy = new SimCognitoPasswordPolicy(input.Policies?.PasswordPolicy);
+        this.deletionProtection = new SimCognitoDeletionProtection(input.DeletionProtection);
+        this.adminCreateUserConfig = new SimCognitoAdminCreateUserConfig(input.AdminCreateUserConfig);
+        this.autoVerifiedAttributes = new SimCognitoAutoVerifiedAttributes(input.AutoVerifiedAttributes);
+        this.lambdaConfig = new SimCognitoLambdaConfig(input.LambdaConfig, operation);
+        this.verificationMessages = new SimCognitoVerificationMessages(input);
+        this.unsimulated = new SimCognitoUnsimulatedPoolSettings(input);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-settings.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AA8BhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,WAAW,CAAoC;IAE/D,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts

@@ -1,25 +1,24 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
 import { SimCognitoPoolAuth } from "./auth/sim-cognito-pool-auth.js";
 import type { SimCognitoUserPoolClient } from "./client/sim-cognito-user-pool-client.js";
 import type { SimCognitoUserPoolClientId } from "./client/sim-cognito-user-pool-client-id.js";
 import type { SimCognitoGroup } from "./group/sim-cognito-group.js";
 import type { SimCognitoGroupName } from "./group/sim-cognito-group-name.js";
-import type { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import type { SimCognitoSentMessage } from "./message/sim-cognito-sent-message.js";
+import { SimCognitoSentMessageStore } from "./message/sim-cognito-sent-message-store.js";
 import type { SimCognitoName } from "./sim-cognito-name.js";
-import type { SimCognitoPasswordPolicy } from "./sim-cognito-password-policy.js";
 import type { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
-import type { SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
-import type { SimCognitoUnsimulatedPoolSettings } from "./sim-cognito-unsimulated-pool-settings.js";
+import { type SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+import type { SimCognitoUserPoolSettings } from "./sim-cognito-user-pool-settings.js";
 import { SimCognitoSigningKey, type SimCognitoJwks } from "./token/sim-cognito-signing-key.js";
 import type { SimCognitoUser } from "./user/sim-cognito-user.js";
-import type { SimCognitoUsername } from "./user/sim-cognito-username.js";
+import { type SimCognitoUsername } from "./user/sim-cognito-username.js";
 interface SimCognitoUserPoolProperties {
     readonly id: SimCognitoUserPoolId;
     readonly arn: SimCognitoUserPoolArn;
     readonly name: SimCognitoName;
-    readonly passwordPolicy: SimCognitoPasswordPolicy;
-    readonly deletionProtection: SimCognitoDeletionProtection;
-    readonly unsimulatedSettings: SimCognitoUnsimulatedPoolSettings;
-    readonly createdDate: Date;
+    readonly settings: SimCognitoUserPoolSettings;
+    readonly clock: SimClock;
 }
 /**
  * One simulated Cognito user pool.
@@ -33,36 +32,40 @@ export declare class SimCognitoUserPool {
     readonly id: SimCognitoUserPoolId;
     readonly arn: SimCognitoUserPoolArn;
     readonly name: string;
-    readonly passwordPolicy: SimCognitoPasswordPolicy;
-    readonly deletionProtection: SimCognitoDeletionProtection;
-    /**
-     * What the pool was created with and nothing here acts on, kept so a
-     * described pool reports it.
-     */
-    readonly unsimulatedSettings: SimCognitoUnsimulatedPoolSettings;
     readonly creationDate: Date;
     /**
      * The sign-ins part way through this pool, and the tokens it has issued.
      */
     readonly auth: SimCognitoPoolAuth;
+    /**
+     * The messages this pool would have sent. Nothing here delivers one, and
+     * real Cognito reports its messages to nobody, so this is the simulator's
+     * own record of what a user would have been sent.
+     */
+    readonly messages: SimCognitoSentMessageStore;
+    private readonly clock;
     private readonly clientStore;
     private readonly userStore;
     private readonly groupStore;
     constructor(properties: SimCognitoUserPoolProperties);
     /**
-     * The URL a token from this pool names as its issuer.
-     *
-     * The region comes out of the pool id, which is where SDK code and token
-     * verifiers get it from too.
+     * The settings this pool applies: its password policy, its deletion
+     * protection, whether users may sign themselves up, and what confirming a
+     * sign-up verifies.
      */
-    get issuerUrl(): string;
+    get settings(): SimCognitoUserPoolSettings;
     /**
-     * The name this pool is known by where a scheme would be wrong.
+     * Replace this pool's settings with the ones an update asked for.
      *
-     * This is the issuer URL without `https://`, and it is what an identity pool
-     * names a user pool provider by, and what `AWS::Cognito::UserPool` answers
-     * `Fn::GetAtt ProviderName` with.
+     * `UpdateUserPool` replaces rather than merges, as real Cognito does: the
+     * settings object is built from the update's own request, so a setting the
+     * request left out goes back to the default `CreateUserPool` would have
+     * given it rather than staying as it was.
      */
+    update(settings: SimCognitoUserPoolSettings): void;
+    /** The URL a token from this pool names as its issuer. */
+    get issuerUrl(): string;
+    /** The name this pool is known by where a scheme would be wrong. */
     get providerName(): string;
     /**
      * The key this pool signs its tokens with, generated on first use.
@@ -82,10 +85,10 @@ export declare class SimCognitoUserPool {
      */
     jwks(): SimCognitoJwks;
     /**
-     * When the pool last changed.
+     * When the pool's settings last changed.
      *
-     * Nothing can change a pool here, as `UpdateUserPool` is not simulated, so
-     * this is its creation date.
+     * A pool that no `UpdateUserPool` request has reached reports its creation
+     * date, as a real one does.
      */
     get lastModifiedDate(): Date;
     /**
@@ -141,6 +144,16 @@ export declare class SimCognitoUserPool {
      * Resolve a user of this pool by username, or refuse.
      */
     requireUser(username: SimCognitoUsername): SimCognitoUser;
+    /**
+     * The confirmation code a user of this pool has outstanding, if it has one.
+     *
+     * This is the simulator's own accessor, for a test that signed a user up:
+     * nothing here delivers a message for one to read the code from. Real
+     * Cognito reports a code to nobody, so this is a deliberate divergence.
+     */
+    confirmationCode(username: string): string | undefined;
+    /** Every message this pool would have sent, oldest first. */
+    sentMessages(): readonly SimCognitoSentMessage[];
     /**
      * Every group in this pool, in creation order.
      */

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,EAAE,iCAAiC,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IAEjE;;;OAGG;IACH,SAAgB,mBAAmB,EAAE,iCAAiC,CAAC;IAEvE,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAIzD,YAAY,UAAU,EAAE,4BAA4B,EAQnD;IAED;;;;;OAKG;IACH,IAAI,SAAS,IAAI,MAAM,CAItB;IAED;;;;;;OAMG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;;OAQG;IACH,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD;;;;OAIG;IACH,SAAgB,QAAQ,6BAAoC;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAMzD,YAAY,UAAU,EAAE,4BAA4B,EAQnD;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,0BAA0B,CAEzC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjD;IAED,0DAA0D;IAC1D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;;OAQG;IACH,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrD;IAED,6DAA6D;IAC7D,YAAY,IAAI,SAAS,qBAAqB,EAAE,CAE/C;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js

@@ -1,8 +1,11 @@
 import { SimCognitoPoolAuth } from "./auth/sim-cognito-pool-auth.js";
 import { SimCognitoUserPoolClientStore } from "./client/sim-cognito-user-pool-client-store.js";
 import { SimCognitoGroupStore } from "./group/sim-cognito-group-store.js";
+import { SimCognitoSentMessageStore } from "./message/sim-cognito-sent-message-store.js";
+import { simCognitoUserPoolIssuerUrl, simCognitoUserPoolProviderName, } from "./sim-cognito-user-pool-id.js";
 import { SimCognitoSigningKey, } from "./token/sim-cognito-signing-key.js";
 import { SimCognitoUserStore } from "./user/sim-cognito-user-store.js";
+import { requireSimCognitoUsername, } from "./user/sim-cognito-username.js";
 /**
  * One simulated Cognito user pool.
  *
@@ -14,50 +17,60 @@ export class SimCognitoUserPool {
     id;
     arn;
     name;
-    passwordPolicy;
-    deletionProtection;
-    /**
-     * What the pool was created with and nothing here acts on, kept so a
-     * described pool reports it.
-     */
-    unsimulatedSettings;
     creationDate;
     /**
      * The sign-ins part way through this pool, and the tokens it has issued.
      */
     auth = new SimCognitoPoolAuth();
+    /**
+     * The messages this pool would have sent. Nothing here delivers one, and
+     * real Cognito reports its messages to nobody, so this is the simulator's
+     * own record of what a user would have been sent.
+     */
+    messages = new SimCognitoSentMessageStore();
+    clock;
     clientStore = new SimCognitoUserPoolClientStore();
     userStore = new SimCognitoUserStore();
     groupStore = new SimCognitoGroupStore();
+    #settings;
+    #modifiedDate;
     #signingKey;
     constructor(properties) {
         this.id = properties.id;
         this.arn = properties.arn;
         this.name = properties.name.value;
-        this.passwordPolicy = properties.passwordPolicy;
-        this.deletionProtection = properties.deletionProtection;
-        this.unsimulatedSettings = properties.unsimulatedSettings;
-        this.creationDate = properties.createdDate;
+        this.#settings = properties.settings;
+        this.clock = properties.clock;
+        this.creationDate = this.clock.now();
+        this.#modifiedDate = this.creationDate;
     }
     /**
-     * The URL a token from this pool names as its issuer.
-     *
-     * The region comes out of the pool id, which is where SDK code and token
-     * verifiers get it from too.
+     * The settings this pool applies: its password policy, its deletion
+     * protection, whether users may sign themselves up, and what confirming a
+     * sign-up verifies.
      */
-    get issuerUrl() {
-        const [regionName] = this.id.split("_", 1);
-        return `https://cognito-idp.${String(regionName)}.amazonaws.com/${this.id}`;
+    get settings() {
+        return this.#settings;
     }
     /**
-     * The name this pool is known by where a scheme would be wrong.
+     * Replace this pool's settings with the ones an update asked for.
      *
-     * This is the issuer URL without `https://`, and it is what an identity pool
-     * names a user pool provider by, and what `AWS::Cognito::UserPool` answers
-     * `Fn::GetAtt ProviderName` with.
+     * `UpdateUserPool` replaces rather than merges, as real Cognito does: the
+     * settings object is built from the update's own request, so a setting the
+     * request left out goes back to the default `CreateUserPool` would have
+     * given it rather than staying as it was.
      */
+    update(settings) {
+        this.#settings = settings;
+        this.#modifiedDate = this.clock.now();
+    }
+    /** The URL a token from this pool names as its issuer. */
+    get issuerUrl() {
+        return simCognitoUserPoolIssuerUrl(this.id);
+    }
+    /** The name this pool is known by where a scheme would be wrong. */
     get providerName() {
-        return this.issuerUrl.replace("https://", "");
+        return simCognitoUserPoolProviderName(this.id);
     }
     /**
      * The key this pool signs its tokens with, generated on first use.
@@ -82,13 +95,13 @@ export class SimCognitoUserPool {
         return { keys: [this.signingKey.publicJwk()] };
     }
     /**
-     * When the pool last changed.
+     * When the pool's settings last changed.
      *
-     * Nothing can change a pool here, as `UpdateUserPool` is not simulated, so
-     * this is its creation date.
+     * A pool that no `UpdateUserPool` request has reached reports its creation
+     * date, as a real one does.
      */
     get lastModifiedDate() {
-        return this.creationDate;
+        return this.#modifiedDate;
     }
     /**
      * Every app client of this pool, in creation order.
@@ -169,6 +182,21 @@ export class SimCognitoUserPool {
     requireUser(username) {
         return this.userStore.require(username);
     }
+    /**
+     * The confirmation code a user of this pool has outstanding, if it has one.
+     *
+     * This is the simulator's own accessor, for a test that signed a user up:
+     * nothing here delivers a message for one to read the code from. Real
+     * Cognito reports a code to nobody, so this is a deliberate divergence.
+     */
+    confirmationCode(username) {
+        return this.requireUser(requireSimCognitoUsername(username))
+            .confirmationCode;
+    }
+    /** Every message this pool would have sent, oldest first. */
+    sentMessages() {
+        return this.messages.all;
+    }
     /**
      * Every group in this pool, in creation order.
      */

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAO1E,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAavE;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IAEjE;;;OAGG;IACa,mBAAmB,CAAoC;IAEvD,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE/B,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzD,WAAW,CAAmC;IAE9C,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,IAAI,SAAS;QACX,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE3C,OAAO,uBAAuB,MAAM,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD;;;;OAIG;IACa,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzD,SAAS,CAA6B;IACtC,aAAa,CAAO;IACpB,WAAW,CAAmC;IAE9C,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAoC;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS;QACX,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY;QACd,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;aACzD,gBAAgB,CAAC;IACtB,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-reader.d.ts

@@ -0,0 +1,29 @@
+import { SimCognitoClaimsOverride } from "./sim-cognito-claims-override.js";
+/**
+ * Reads what a `PreTokenGeneration` handler wrote into its response.
+ *
+ * A V1_0 response carries `claimsOverrideDetails`, and everything this reads is
+ * inside it. Anything a handler could write that this simulation would not act
+ * on is refused rather than dropped, because a claim that quietly does not
+ * arrive is the failure a test with a trigger in it is there to catch.
+ */
+export declare class SimCognitoClaimsOverrideReader {
+    /**
+     * The override the event a handler returned asks for.
+     *
+     * A handler that wrote nothing, and one that was never invoked because the
+     * pool has no such trigger, both give an empty override.
+     */
+    read(returned: unknown): SimCognitoClaimsOverride;
+    private details;
+    /**
+     * The claims to add or override, which a V1_0 response carries as strings.
+     *
+     * A value of any other type is refused. Complex claim values arrived with the
+     * V2_0 event, which this simulation does not run, so accepting one here would
+     * put a claim on a token that a deployed V1_0 trigger would not.
+     */
+    private added;
+    private suppressed;
+}
+//# sourceMappingURL=sim-cognito-claims-override-reader.d.ts.map

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-claims-override-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-claims-override-reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAY5E;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC;;;;;OAKG;IACH,IAAI,CAAC,QAAQ,EAAE,OAAO,GAAG,wBAAwB,CAYhD;IAED,OAAO,CAAC,OAAO;IAoBf;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;IA4Bb,OAAO,CAAC,UAAU;CAWnB"}

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-reader.js

@@ -0,0 +1,80 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCognitoClaimsOverride } from "./sim-cognito-claims-override.js";
+import { refuseSimCognitoResponse, requireSimCognitoResponseObject, requireSimCognitoResponseStrings, } from "./sim-cognito-claims-override-values.js";
+import { readSimCognitoGroupOverride } from "./sim-cognito-group-override.js";
+import { requireSimCognitoOverridableClaim, requireSimCognitoSuppressibleClaim, } from "./sim-cognito-reserved-claims.js";
+/**
+ * Reads what a `PreTokenGeneration` handler wrote into its response.
+ *
+ * A V1_0 response carries `claimsOverrideDetails`, and everything this reads is
+ * inside it. Anything a handler could write that this simulation would not act
+ * on is refused rather than dropped, because a claim that quietly does not
+ * arrive is the failure a test with a trigger in it is there to catch.
+ */
+export class SimCognitoClaimsOverrideReader {
+    /**
+     * The override the event a handler returned asks for.
+     *
+     * A handler that wrote nothing, and one that was never invoked because the
+     * pool has no such trigger, both give an empty override.
+     */
+    read(returned) {
+        const details = this.details(returned);
+        if (details === undefined) {
+            return SimCognitoClaimsOverride.none();
+        }
+        return new SimCognitoClaimsOverride({
+            added: this.added(details["claimsToAddOrOverride"]),
+            suppressed: this.suppressed(details["claimsToSuppress"]),
+            groups: readSimCognitoGroupOverride(details),
+        });
+    }
+    details(returned) {
+        if (!isRecord(returned)) {
+            return undefined;
+        }
+        const response = returned["response"];
+        if (!isRecord(response)) {
+            return undefined;
+        }
+        const details = response["claimsOverrideDetails"];
+        if (details === undefined || details === null) {
+            return undefined;
+        }
+        return requireSimCognitoResponseObject(details, "claimsOverrideDetails");
+    }
+    /**
+     * The claims to add or override, which a V1_0 response carries as strings.
+     *
+     * A value of any other type is refused. Complex claim values arrived with the
+     * V2_0 event, which this simulation does not run, so accepting one here would
+     * put a claim on a token that a deployed V1_0 trigger would not.
+     */
+    added(value) {
+        const added = new Map();
+        if (value === undefined || value === null) {
+            return added;
+        }
+        const claims = Object.entries(requireSimCognitoResponseObject(value, "claimsToAddOrOverride"));
+        for (const [claim, claimValue] of claims) {
+            requireSimCognitoOverridableClaim(claim);
+            if (typeof claimValue !== "string") {
+                refuseSimCognitoResponse(`a claimsToAddOrOverride value for ${claim} that is not a string. ` +
+                    `A V1_0 trigger event carries claim values as strings, and the ` +
+                    `complex values arrived with the V2_0 event.`);
+            }
+            added.set(claim, claimValue);
+        }
+        return added;
+    }
+    suppressed(value) {
+        const suppressed = new Set();
+        const claims = requireSimCognitoResponseStrings(value, "claimsToSuppress");
+        for (const claim of claims) {
+            requireSimCognitoSuppressibleClaim(claim);
+            suppressed.add(claim);
+        }
+        return suppressed;
+    }
+}
+//# sourceMappingURL=sim-cognito-claims-override-reader.js.map

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-claims-override-reader.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-claims-override-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACzC;;;;;OAKG;IACH,IAAI,CAAC,QAAiB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,wBAAwB,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,wBAAwB,CAAC;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YACnD,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACxD,MAAM,EAAE,2BAA2B,CAAC,OAAO,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,QAAiB;QAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAY,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAY,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAE3D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,+BAA+B,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,KAAc;QAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAExC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAC3B,+BAA+B,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAChE,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,EAAE,CAAC;YACzC,iCAAiC,CAAC,KAAK,CAAC,CAAC;YAEzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,wBAAwB,CACtB,qCAAqC,KAAK,yBAAyB;oBACjE,gEAAgE;oBAChE,6CAA6C,CAChD,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,KAAc;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAE3E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,kCAAkC,CAAC,KAAK,CAAC,CAAC;YAC1C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-values.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Refuse what a `PreTokenGeneration` handler wrote into its response.
+ *
+ * Every refusal reads as one sentence about the trigger, because that is what
+ * the reader of the failure has to go and change: the handler, rather than
+ * anything about the pool or the sign-in.
+ */
+export declare function refuseSimCognitoResponse(message: string): never;
+/**
+ * One field of the response, which has to be an object.
+ */
+export declare function requireSimCognitoResponseObject(value: unknown, field: string): Record<string, unknown>;
+/**
+ * One field of the response, which has to be a list of strings.
+ *
+ * A field that is not there at all asks for nothing, and answers with an empty
+ * list rather than being refused: a handler naming only the claims it adds has
+ * written a complete response.
+ */
+export declare function requireSimCognitoResponseStrings(value: unknown, field: string): readonly string[];
+//# sourceMappingURL=sim-cognito-claims-override-values.d.ts.map

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-claims-override-values.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-claims-override-values.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAI/D;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,SAAS,MAAM,EAAE,CAsBnB"}

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-values.js

@@ -0,0 +1,45 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCognitoInvalidLambdaResponseException } from "../../error/sim-cognito-trigger.error.js";
+/**
+ * Refuse what a `PreTokenGeneration` handler wrote into its response.
+ *
+ * Every refusal reads as one sentence about the trigger, because that is what
+ * the reader of the failure has to go and change: the handler, rather than
+ * anything about the pool or the sign-in.
+ */
+export function refuseSimCognitoResponse(message) {
+    throw new SimCognitoInvalidLambdaResponseException(`The PreTokenGeneration trigger returned ${message}`);
+}
+/**
+ * One field of the response, which has to be an object.
+ */
+export function requireSimCognitoResponseObject(value, field) {
+    if (!isRecord(value)) {
+        refuseSimCognitoResponse(`a ${field} that is not an object.`);
+    }
+    return value;
+}
+/**
+ * One field of the response, which has to be a list of strings.
+ *
+ * A field that is not there at all asks for nothing, and answers with an empty
+ * list rather than being refused: a handler naming only the claims it adds has
+ * written a complete response.
+ */
+export function requireSimCognitoResponseStrings(value, field) {
+    if (value === undefined || value === null) {
+        return [];
+    }
+    if (!Array.isArray(value)) {
+        refuseSimCognitoResponse(`a ${field} that is not a list.`);
+    }
+    const entries = [];
+    for (const entry of value) {
+        if (typeof entry !== "string") {
+            refuseSimCognitoResponse(`a ${field} holding something that is not a string.`);
+        }
+        entries.push(entry);
+    }
+    return entries;
+}
+//# sourceMappingURL=sim-cognito-claims-override-values.js.map

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-claims-override-values.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-claims-override-values.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAC;AAEpG;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,IAAI,wCAAwC,CAChD,2CAA2C,OAAO,EAAE,CACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,wBAAwB,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,wBAAwB,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,wBAAwB,CACtB,KAAK,KAAK,0CAA0C,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override.d.ts

@@ -0,0 +1,54 @@
+import type { SimCognitoTokenClaims } from "./sim-cognito-token-claims.js";
+interface SimCognitoClaimsOverrideProperties {
+    readonly added: ReadonlyMap<string, string>;
+    readonly suppressed: ReadonlySet<string>;
+    /**
+     * The groups the `cognito:groups` claim is to carry, or nothing when the
+     * handler said nothing about groups and the user's own are to stand.
+     */
+    readonly groups: readonly string[] | undefined;
+}
+/**
+ * What a `PreTokenGeneration` handler asked to change about a token's claims.
+ *
+ * A pool with no such trigger, and a handler that returned the event without
+ * writing a response, both produce an empty one of these, so the token layer
+ * applies an override either way rather than branching on whether there is one.
+ *
+ * The claim changes reach the id token, which is what a V1_0 trigger customises.
+ * The group override reaches the access token as well, because that is the one
+ * change real Cognito lets a V1_0 event make to an access token.
+ */
+export declare class SimCognitoClaimsOverride {
+    private readonly added;
+    private readonly suppressed;
+    private readonly groups;
+    constructor(properties: SimCognitoClaimsOverrideProperties);
+    /**
+     * The override a token is issued under when no handler asked for one.
+     */
+    static none(): SimCognitoClaimsOverride;
+    /**
+     * The id token's claims, with the handler's changes applied.
+     *
+     * Suppression runs last, so a claim named in both `claimsToAddOrOverride` and
+     * `claimsToSuppress` is suppressed. Real Cognito resolves the pair the same
+     * way round.
+     */
+    applyTo(claims: SimCognitoTokenClaims): SimCognitoTokenClaims;
+    /**
+     * The access token's claims, with the group override applied and nothing
+     * else.
+     */
+    applyGroupsTo(claims: SimCognitoTokenClaims): SimCognitoTokenClaims;
+    private addedClaims;
+    /**
+     * The claims with `cognito:groups` replaced by the groups the handler named.
+     *
+     * A handler that named no group at all suppresses the claim rather than
+     * carrying an empty list, which is what a pool does for a user in no groups.
+     */
+    private withGroups;
+}
+export {};
+//# sourceMappingURL=sim-cognito-claims-override.d.ts.map

package/dist/service/cognito/user-pool/token/sim-cognito-claims-override.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-claims-override.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-claims-override.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,qBAAqB,EACtB,MAAM,+BAA+B,CAAC;AAEvC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAEzC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAWD;;;;;;;;;;GAUG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IAEvD,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,IAAI,wBAAwB,CAMtC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,CAK5D;IAED;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,CAElE;IAED,OAAO,CAAC,WAAW;IAInB;;;;;OAKG;IACH,OAAO,CAAC,UAAU;CAgBnB"}