@kensio/yulin 1.7.0 → 1.9.0

package/dist/service/cognito/user-pool/trigger/sim-cognito-custom-message.d.ts

@@ -0,0 +1,31 @@
+import type { SimCognitoMessageMedium } from "../message/sim-cognito-sent-message.js";
+import type { SimCognitoMessageWording } from "../message/sim-cognito-message-wording.js";
+/**
+ * What a `CustomMessage` handler wrote in place of the pool's own wording.
+ *
+ * A handler writes into `response.emailSubject`, `response.emailMessage` and
+ * `response.smsMessage`, and whichever it left alone leaves the pool's wording
+ * in place. A handler that returned the event untouched has written nothing,
+ * which is the ordinary case for a handler that only cares about one occasion.
+ *
+ * The message is not delivered here, so what the handler wrote is what the
+ * pool records.
+ */
+export declare class SimCognitoCustomMessage {
+    private readonly emailSubject;
+    private readonly emailMessage;
+    private readonly smsMessage;
+    constructor(returned: unknown);
+    private static text;
+    /**
+     * The pool's wording with what the handler wrote in place of it.
+     */
+    wordingFor(medium: SimCognitoMessageMedium, wording: SimCognitoMessageWording): SimCognitoMessageWording;
+    /**
+     * What the handler wrote for one medium.
+     *
+     * A text message has no subject, so `emailSubject` reaches an email only.
+     */
+    private writtenFor;
+}
+//# sourceMappingURL=sim-cognito-custom-message.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-custom-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-custom-message.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-custom-message.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,2CAA2C,CAAC;AA8CnD;;;;;;;;;;GAUG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAEhD,YAAY,QAAQ,EAAE,OAAO,EAe5B;IAED,OAAO,CAAC,MAAM,CAAC,IAAI;IAYnB;;OAEG;IACH,UAAU,CACR,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,wBAAwB,GAChC,wBAAwB,CAE1B;IAED;;;;OAIG;IACH,OAAO,CAAC,UAAU;CASnB"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-custom-message.js

@@ -0,0 +1,73 @@
+import { SimCognitoInvalidLambdaResponseException } from "../../error/sim-cognito-trigger.error.js";
+/**
+ * The response half of the event a handler returned, or nothing where it wrote
+ * no message.
+ *
+ * A pool with no `CustomMessage` trigger at all returns nothing, and a handler
+ * that dropped the response wrote nothing. Both leave the pool's own wording in
+ * place. A response that is something other than an object is refused: a
+ * handler that put one there meant to say something, and this cannot read it.
+ */
+function answerOf(returned) {
+    if (typeof returned !== "object" || returned === null) {
+        return {};
+    }
+    const { response } = returned;
+    if (response === undefined) {
+        return {};
+    }
+    if (typeof response !== "object" || response === null) {
+        throw new SimCognitoInvalidLambdaResponseException(`The CustomMessage trigger returned a response that is not an object, ` +
+            `so there is no message in it. A handler writes its message into the ` +
+            `response of the event it was given.`);
+    }
+    return response;
+}
+/**
+ * What a `CustomMessage` handler wrote in place of the pool's own wording.
+ *
+ * A handler writes into `response.emailSubject`, `response.emailMessage` and
+ * `response.smsMessage`, and whichever it left alone leaves the pool's wording
+ * in place. A handler that returned the event untouched has written nothing,
+ * which is the ordinary case for a handler that only cares about one occasion.
+ *
+ * The message is not delivered here, so what the handler wrote is what the
+ * pool records.
+ */
+export class SimCognitoCustomMessage {
+    emailSubject;
+    emailMessage;
+    smsMessage;
+    constructor(returned) {
+        const answer = answerOf(returned);
+        this.emailSubject = SimCognitoCustomMessage.text("emailSubject", answer.emailSubject);
+        this.emailMessage = SimCognitoCustomMessage.text("emailMessage", answer.emailMessage);
+        this.smsMessage = SimCognitoCustomMessage.text("smsMessage", answer.smsMessage);
+    }
+    static text(field, value) {
+        if (value === undefined || typeof value === "string") {
+            return value;
+        }
+        throw new SimCognitoInvalidLambdaResponseException(`The CustomMessage trigger returned a response whose ${field} is a ` +
+            `${typeof value} rather than a string, so it is not a message the ` +
+            `pool can send.`);
+    }
+    /**
+     * The pool's wording with what the handler wrote in place of it.
+     */
+    wordingFor(medium, wording) {
+        return wording.replacedBy(this.writtenFor(medium));
+    }
+    /**
+     * What the handler wrote for one medium.
+     *
+     * A text message has no subject, so `emailSubject` reaches an email only.
+     */
+    writtenFor(medium) {
+        if (medium === "SMS") {
+            return { body: this.smsMessage };
+        }
+        return { subject: this.emailSubject, body: this.emailMessage };
+    }
+}
+//# sourceMappingURL=sim-cognito-custom-message.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-custom-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-custom-message.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-custom-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAC;AAoBpG;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,QAAiB;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAkC,CAAC;IAExD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,wCAAwC,CAChD,uEAAuE;YACrE,sEAAsE;YACtE,qCAAqC,CACxC,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,uBAAuB;IACjB,YAAY,CAAqB;IACjC,YAAY,CAAqB;IACjC,UAAU,CAAqB;IAEhD,YAAY,QAAiB;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,CAAC,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAC9C,cAAc,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAC9C,cAAc,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAC5C,YAAY,EACZ,MAAM,CAAC,UAAU,CAClB,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,IAAI,CAAC,KAAa,EAAE,KAAc;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,wCAAwC,CAChD,uDAAuD,KAAK,QAAQ;YAClE,GAAG,OAAO,KAAK,oDAAoD;YACnE,gBAAgB,CACnB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CACR,MAA+B,EAC/B,OAAiC;QAEjC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACK,UAAU,CAChB,MAA+B;QAE/B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACjE,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-lambda-config.d.ts

@@ -0,0 +1,58 @@
+import { type SimCognitoTriggerName } from "./sim-cognito-trigger-name.js";
+/**
+ * The `LambdaConfig` a pool was created with, as a described pool reports it.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_LambdaConfigType.html
+ */
+export interface SimCognitoLambdaConfigType {
+    readonly PreSignUp?: string | undefined;
+    readonly PostConfirmation?: string | undefined;
+    readonly PreAuthentication?: string | undefined;
+    readonly PostAuthentication?: string | undefined;
+    readonly PreTokenGeneration?: string | undefined;
+    readonly CustomMessage?: string | undefined;
+}
+/**
+ * The Lambda triggers one simulated user pool runs.
+ *
+ * A trigger is held as the function ARN the request named, and nothing is
+ * looked up here: the function is resolved when the trigger fires, so a pool
+ * can be created before the function it names and a function deleted
+ * afterwards fails the request rather than the pool.
+ *
+ * Every other `LambdaConfig` key real Cognito has is refused, naming the
+ * trigger and saying why, so a pool never quietly drops one. That is the whole
+ * reason this reads the config rather than storing it: a pool that accepted a
+ * `PreTokenGeneration` trigger and never called it would issue different tokens
+ * here and on real AWS.
+ */
+export declare class SimCognitoLambdaConfig {
+    private readonly operation;
+    private readonly unsimulated;
+    private readonly triggers;
+    private readonly configured;
+    constructor(config: object | undefined, operation: string);
+    /**
+     * The function ARN a trigger names, or nothing when the pool has no such
+     * trigger.
+     */
+    find(trigger: SimCognitoTriggerName): string | undefined;
+    /**
+     * This config as a described pool reports it.
+     *
+     * A pool created without a `LambdaConfig` at all reports none, rather than
+     * reporting an empty one, so a describe answers what the request said.
+     */
+    toOutput(): SimCognitoLambdaConfigType | undefined;
+    /**
+     * Read one `LambdaConfig` entry, refusing a trigger this simulation does not
+     * run.
+     *
+     * A key real Cognito does not have at all is refused too, in the same words
+     * as one it has: either way the pool would behave differently for having
+     * accepted it.
+     */
+    private read;
+    private requireFunctionArn;
+}
+//# sourceMappingURL=sim-cognito-lambda-config.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-lambda-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-lambda-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-lambda-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,+BAA+B,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,YAAY,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAUxD;IAED;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAEvD;IAED;;;;;OAKG;IACH,QAAQ,IAAI,0BAA0B,GAAG,SAAS,CAMjD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,IAAI;IAoBZ,OAAO,CAAC,kBAAkB;CAU3B"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-lambda-config.js

@@ -0,0 +1,77 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { SimCognitoUnsimulatedInput } from "../../command/sim-cognito-unsimulated-input.js";
+import { simCognitoTriggerNames, simCognitoUnsimulatedTriggers, } from "./sim-cognito-trigger-name.js";
+/**
+ * The Lambda triggers one simulated user pool runs.
+ *
+ * A trigger is held as the function ARN the request named, and nothing is
+ * looked up here: the function is resolved when the trigger fires, so a pool
+ * can be created before the function it names and a function deleted
+ * afterwards fails the request rather than the pool.
+ *
+ * Every other `LambdaConfig` key real Cognito has is refused, naming the
+ * trigger and saying why, so a pool never quietly drops one. That is the whole
+ * reason this reads the config rather than storing it: a pool that accepted a
+ * `PreTokenGeneration` trigger and never called it would issue different tokens
+ * here and on real AWS.
+ */
+export class SimCognitoLambdaConfig {
+    operation;
+    unsimulated;
+    triggers = new Map();
+    configured;
+    constructor(config, operation) {
+        const entries = Object.entries(config ?? {});
+        this.operation = operation;
+        this.unsimulated = new SimCognitoUnsimulatedInput(operation);
+        this.configured = config !== undefined;
+        for (const [key, value] of entries) {
+            this.read(key, value);
+        }
+    }
+    /**
+     * The function ARN a trigger names, or nothing when the pool has no such
+     * trigger.
+     */
+    find(trigger) {
+        return this.triggers.get(trigger);
+    }
+    /**
+     * This config as a described pool reports it.
+     *
+     * A pool created without a `LambdaConfig` at all reports none, rather than
+     * reporting an empty one, so a describe answers what the request said.
+     */
+    toOutput() {
+        if (!this.configured) {
+            return undefined;
+        }
+        return Object.fromEntries(this.triggers);
+    }
+    /**
+     * Read one `LambdaConfig` entry, refusing a trigger this simulation does not
+     * run.
+     *
+     * A key real Cognito does not have at all is refused too, in the same words
+     * as one it has: either way the pool would behave differently for having
+     * accepted it.
+     */
+    read(key, value) {
+        if (value === undefined) {
+            return;
+        }
+        if (!simCognitoTriggerNames.includes(key)) {
+            this.unsimulated.refuse(`LambdaConfig ${key}`, value, simCognitoUnsimulatedTriggers.get(key) ??
+                "a Lambda trigger this simulation does not know");
+        }
+        this.triggers.set(key, this.requireFunctionArn(key, value));
+    }
+    requireFunctionArn(key, value) {
+        if (typeof value !== "string" || value === "") {
+            throw new SimCognitoInvalidParameterException(`${this.operation} LambdaConfig ${key} must be the ARN of the ` +
+                `function the trigger invokes`);
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=sim-cognito-lambda-config.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-lambda-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-lambda-config.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-lambda-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EACL,sBAAsB,EACtB,6BAA6B,GAE9B,MAAM,+BAA+B,CAAC;AAgBvC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,sBAAsB;IAChB,SAAS,CAAS;IAClB,WAAW,CAA6B;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpD,UAAU,CAAU;IAErC,YAAY,MAA0B,EAAE,SAAiB;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC;QAEvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,OAA8B;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACK,IAAI,CAAC,GAAW,EAAE,KAAc;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,GAA4B,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,gBAAgB,GAAG,EAAE,EACrB,KAAK,EACL,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC;gBACpC,gDAAgD,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,GAA4B,EAC5B,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,GAAW,EAAE,KAAc;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,GAAG,IAAI,CAAC,SAAS,iBAAiB,GAAG,0BAA0B;gBAC7D,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.d.ts

@@ -0,0 +1,28 @@
+import type { SimCognitoUser } from "../user/sim-cognito-user.js";
+/**
+ * What a `PreSignUp` handler asked for in the event it returned.
+ *
+ * These three are the whole of what the trigger can change: whether the new
+ * user skips confirmation, and whether its email and phone number count as
+ * verified without a code ever being answered.
+ */
+export declare class SimCognitoPreSignUpResponse {
+    readonly autoConfirmUser: boolean;
+    readonly autoVerifyEmail: boolean;
+    readonly autoVerifyPhone: boolean;
+    constructor(returned: unknown);
+    /**
+     * The attributes the handler asked to have marked verified.
+     */
+    get verifiedAttributeNames(): readonly string[];
+    /**
+     * Mark the attributes the handler asked to verify on the new user.
+     *
+     * An attribute the sign-up did not carry is refused rather than skipped.
+     * Real Cognito fails the sign-up in the same case, because there is no
+     * address to call verified, and a user created here with the flag quietly
+     * unset would be a user the deployed pool refused to create at all.
+     */
+    verifyAttributesOf(user: SimCognitoUser): void;
+}
+//# sourceMappingURL=sim-cognito-pre-sign-up-response.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pre-sign-up-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAoClE;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,eAAe,EAAE,OAAO,CAAC;IAEzC,YAAY,QAAQ,EAAE,OAAO,EAM5B;IAED;;OAEG;IACH,IAAI,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAY9C;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAY7C;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.js

@@ -0,0 +1,68 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The response half of the event a handler returned, or nothing where it
+ * returned no usable response.
+ *
+ * A handler that dropped the response, and a pool with no `PreSignUp` trigger
+ * at all, both read as having asked for nothing.
+ */
+function answerOf(returned) {
+    if (typeof returned !== "object" || returned === null) {
+        return {};
+    }
+    const { response } = returned;
+    if (typeof response !== "object" || response === null) {
+        return {};
+    }
+    return response;
+}
+/**
+ * What a `PreSignUp` handler asked for in the event it returned.
+ *
+ * These three are the whole of what the trigger can change: whether the new
+ * user skips confirmation, and whether its email and phone number count as
+ * verified without a code ever being answered.
+ */
+export class SimCognitoPreSignUpResponse {
+    autoConfirmUser;
+    autoVerifyEmail;
+    autoVerifyPhone;
+    constructor(returned) {
+        const answer = answerOf(returned);
+        this.autoConfirmUser = answer.autoConfirmUser === true;
+        this.autoVerifyEmail = answer.autoVerifyEmail === true;
+        this.autoVerifyPhone = answer.autoVerifyPhone === true;
+    }
+    /**
+     * The attributes the handler asked to have marked verified.
+     */
+    get verifiedAttributeNames() {
+        const names = [];
+        if (this.autoVerifyEmail) {
+            names.push("email");
+        }
+        if (this.autoVerifyPhone) {
+            names.push("phone_number");
+        }
+        return names;
+    }
+    /**
+     * Mark the attributes the handler asked to verify on the new user.
+     *
+     * An attribute the sign-up did not carry is refused rather than skipped.
+     * Real Cognito fails the sign-up in the same case, because there is no
+     * address to call verified, and a user created here with the flag quietly
+     * unset would be a user the deployed pool refused to create at all.
+     */
+    verifyAttributesOf(user) {
+        for (const name of this.verifiedAttributeNames) {
+            if (!user.attributeValues.has(name)) {
+                throw new SimCognitoInvalidParameterException(`The PreSignUp trigger asked to verify '${name}', and the sign-up ` +
+                    `carried no '${name}' attribute to verify. Real Cognito refuses ` +
+                    `the sign-up in the same case.`);
+            }
+        }
+        user.verifyAttributes(this.verifiedAttributeNames);
+    }
+}
+//# sourceMappingURL=sim-cognito-pre-sign-up-response.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pre-sign-up-response.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAgBvF;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,QAAiB;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAkC,CAAC;IAExD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACtB,eAAe,CAAU;IACzB,eAAe,CAAU;IACzB,eAAe,CAAU;IAEzC,YAAY,QAAiB;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,IAAoB;QACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,mCAAmC,CAC3C,0CAA0C,IAAI,qBAAqB;oBACjE,eAAe,IAAI,8CAA8C;oBACjE,+BAA+B,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-context.d.ts

@@ -0,0 +1,36 @@
+import type { SimCognitoUserPoolClient } from "../client/sim-cognito-user-pool-client.js";
+import type { SimCognitoUserPool } from "../sim-cognito-user-pool.js";
+import type { SimCognitoUser } from "../user/sim-cognito-user.js";
+/**
+ * The request a trigger is firing for.
+ *
+ * The app client is optional because the admin operations have none. Real
+ * Cognito reports `CLIENT_ID_NOT_APPLICABLE` as the caller context's client id
+ * for those, which is what a handler branching on the client sees.
+ *
+ * The user is the one the trigger is about. On the `PreSignUp` occasions it has
+ * not been added to the pool yet, which is the point: a handler that throws
+ * leaves the pool without it.
+ */
+export interface SimCognitoTriggerContext {
+    readonly pool: SimCognitoUserPool;
+    readonly user: SimCognitoUser;
+    readonly client?: SimCognitoUserPoolClient | undefined;
+    /**
+     * The `ClientMetadata` the request carried.
+     *
+     * A sign-in's reaches `PreAuthentication` as its validation data and
+     * `PostAuthentication` as its client metadata. A sign-up's reaches
+     * `PreSignUp` and `PostConfirmation` as client metadata, alongside the
+     * validation data below.
+     */
+    readonly clientMetadata?: Readonly<Record<string, string>> | undefined;
+    /**
+     * The `ValidationData` a sign-up or a user creation carried.
+     *
+     * Real Cognito never stores this on the user. It exists to be read by a
+     * `PreSignUp` handler and goes no further.
+     */
+    readonly validationData?: Readonly<Record<string, string>> | undefined;
+}
+//# sourceMappingURL=sim-cognito-trigger-context.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-context.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAEvD;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAEvE;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-context.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cognito-trigger-context.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-context.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-context.ts"],"names":[],"mappings":""}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-event.d.ts

@@ -0,0 +1,27 @@
+import type { SimCognitoTriggerContext } from "./sim-cognito-trigger-context.js";
+import type { SimCognitoTriggerOccasion } from "./sim-cognito-trigger-occasion.js";
+/**
+ * The event document a simulated Cognito Lambda trigger is invoked with.
+ *
+ * The shape is the real one, down to the `response` a handler is expected to
+ * hand back with its answer written into it. Only `PreSignUp` is asked
+ * anything, so it is the only one whose response arrives with fields already
+ * in it, which is how real Cognito sends it.
+ */
+export declare class SimCognitoTriggerEvent {
+    private readonly context;
+    constructor(context: SimCognitoTriggerContext);
+    /**
+     * The response half of the event, as real Cognito sends it.
+     *
+     * A `PreSignUp` handler is sent the three flags it can answer with, already
+     * set to false, so a handler reading one before writing it finds what it
+     * would find against a real pool.
+     */
+    private static response;
+    /**
+     * The event for one occasion.
+     */
+    document(occasion: SimCognitoTriggerOccasion): object;
+}
+//# sourceMappingURL=sim-cognito-trigger-event.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-event.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEjF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAsBnF;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,OAAO,EAAE,wBAAwB,EAE5C;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ;IAYvB;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CAcpD;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-event.js

@@ -0,0 +1,69 @@
+import { simCognitoUserPoolRegionName } from "../sim-cognito-user-pool-id.js";
+import { SimCognitoTriggerRequest } from "./sim-cognito-trigger-request.js";
+/**
+ * The SDK version real Cognito reports for a caller it could not identify,
+ * which is what an SDK v3 client gets.
+ *
+ * Every invocation here reports this, because nothing in a simulated request
+ * says which SDK made it. A handler branching on it would branch the same way
+ * against a real pool called from the JavaScript SDK, and differently from one
+ * called by an older SDK that does announce itself.
+ */
+const awsSdkVersion = "aws-sdk-unknown-unknown";
+/**
+ * The client id real Cognito reports for an operation no app client made.
+ *
+ * `AdminCreateUser` and `AdminConfirmSignUp` are called with AWS credentials
+ * rather than through an app client, so there is no client id to report.
+ */
+const adminCallerClientId = "CLIENT_ID_NOT_APPLICABLE";
+/**
+ * The event document a simulated Cognito Lambda trigger is invoked with.
+ *
+ * The shape is the real one, down to the `response` a handler is expected to
+ * hand back with its answer written into it. Only `PreSignUp` is asked
+ * anything, so it is the only one whose response arrives with fields already
+ * in it, which is how real Cognito sends it.
+ */
+export class SimCognitoTriggerEvent {
+    context;
+    constructor(context) {
+        this.context = context;
+    }
+    /**
+     * The response half of the event, as real Cognito sends it.
+     *
+     * A `PreSignUp` handler is sent the three flags it can answer with, already
+     * set to false, so a handler reading one before writing it finds what it
+     * would find against a real pool.
+     */
+    static response(trigger) {
+        if (trigger !== "PreSignUp") {
+            return {};
+        }
+        return {
+            autoConfirmUser: false,
+            autoVerifyEmail: false,
+            autoVerifyPhone: false,
+        };
+    }
+    /**
+     * The event for one occasion.
+     */
+    document(occasion) {
+        return {
+            version: "1",
+            region: simCognitoUserPoolRegionName(this.context.pool.id),
+            userPoolId: this.context.pool.id,
+            userName: this.context.user.username,
+            callerContext: {
+                awsSdkVersion,
+                clientId: this.context.client?.id ?? adminCallerClientId,
+            },
+            triggerSource: occasion.source,
+            request: new SimCognitoTriggerRequest(this.context).document(occasion),
+            response: SimCognitoTriggerEvent.response(occasion.trigger),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-trigger-event.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-event.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAI9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,OAAO,CAA2B;IAEnD,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,QAAQ,CAAC,OAA8B;QACpD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAmC;QAC1C,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAChC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACpC,aAAa,EAAE;gBACb,aAAa;gBACb,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,mBAAmB;aACzD;YACD,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,OAAO,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtE,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC5D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.d.ts

@@ -0,0 +1,59 @@
+/**
+ * A pool asking to reach the function one of its triggers names.
+ *
+ * The pool ARN and the Account that owns it travel with every request because
+ * they are what the function's resource policy is written against: real Cognito
+ * invokes with the pool as the source ARN, so a permission granted for one pool
+ * does not open the function to another.
+ */
+export interface SimCognitoTriggerFunctionRequest {
+    readonly functionArn: string;
+    readonly userPoolArn: string;
+    readonly userPoolAccountId: string;
+}
+/**
+ * The narrow slice of simulated Lambda that a Cognito user pool trigger needs.
+ *
+ * A pool asks two things of a function: whether it may invoke it, and then to
+ * invoke it and hand back what the handler returned. Both are asked by ARN,
+ * because a `LambdaConfig` names a function by ARN and that ARN can name
+ * another Account or Region.
+ *
+ * The invocation is synchronous and its result is read, which is what makes
+ * these triggers different from an event notification: the handler's return
+ * value is the event the pool goes on with, and a handler that throws refuses
+ * the sign-in.
+ */
+export interface SimCognitoTriggerFunctions {
+    /**
+     * Why the pool may not invoke the function, or nothing when it may.
+     *
+     * A reason rather than a boolean, because it is repeated back in the
+     * `UnexpectedLambdaException` whoever has to grant the permission reads.
+     */
+    invokeRefusal(request: SimCognitoTriggerFunctionRequest): string | undefined;
+    /**
+     * Invoke the function with the trigger event, answering with whatever the
+     * handler returned.
+     */
+    invoke(request: SimCognitoTriggerFunctionRequest, event: object): Promise<unknown>;
+}
+/**
+ * The trigger functions of a simulated Cognito built without simulated Lambda,
+ * such as a standalone SimCognitoIdentityProvider constructed outside SimAws.
+ *
+ * A pool can still be created with a `LambdaConfig`, because the function is
+ * only resolved when a trigger fires. It is the sign-in that says there is no
+ * Lambda to reach, rather than the pool creation that would have to guess.
+ */
+export declare class SimCognitoNoTriggerFunctions implements SimCognitoTriggerFunctions {
+    /**
+     * Refuse the invocation, explaining how to reach a function.
+     */
+    invokeRefusal(request: SimCognitoTriggerFunctionRequest): string;
+    /**
+     * Refuse to invoke, for the same reason.
+     */
+    invoke(request: SimCognitoTriggerFunctionRequest): Promise<unknown>;
+}
+//# sourceMappingURL=sim-cognito-trigger-functions.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-functions.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,GAAG,SAAS,CAAC;IAE7E;;;OAGG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,0BAA0B;IAC7E;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,gCAAgC,GAAG,MAAM,CAM/D;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAElE;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.js

@@ -0,0 +1,25 @@
+/**
+ * The trigger functions of a simulated Cognito built without simulated Lambda,
+ * such as a standalone SimCognitoIdentityProvider constructed outside SimAws.
+ *
+ * A pool can still be created with a `LambdaConfig`, because the function is
+ * only resolved when a trigger fires. It is the sign-in that says there is no
+ * Lambda to reach, rather than the pool creation that would have to guess.
+ */
+export class SimCognitoNoTriggerFunctions {
+    /**
+     * Refuse the invocation, explaining how to reach a function.
+     */
+    invokeRefusal(request) {
+        return (`${request.functionArn} cannot be reached: this ` +
+            `SimCognitoIdentityProvider was built without simulated Lambda. Reach ` +
+            `Cognito through SimAws to run a user pool trigger.`);
+    }
+    /**
+     * Refuse to invoke, for the same reason.
+     */
+    invoke(request) {
+        return Promise.reject(new Error(this.invokeRefusal(request)));
+    }
+}
+//# sourceMappingURL=sim-cognito-trigger-functions.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-functions.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-functions.ts"],"names":[],"mappings":"AA8CA;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACvC;;OAEG;IACH,aAAa,CAAC,OAAyC;QACrD,OAAO,CACL,GAAG,OAAO,CAAC,WAAW,2BAA2B;YACjD,uEAAuE;YACvE,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAyC;QAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;CACF"}