@kensio/yulin 1.7.0 → 1.9.0

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-response.js

@@ -0,0 +1,38 @@
+import { SimCognitoInvalidLambdaResponseException } from "../../error/sim-cognito-trigger.error.js";
+/**
+ * Refuse what a Lambda trigger handler returned, unless it is the event it was
+ * given.
+ *
+ * A trigger handler is handed the event and has to return it, changed or not.
+ * Real Cognito reads the returned object rather than the one it sent, so a
+ * handler that returns nothing has dropped the event, and one that returns
+ * something without the `request` it was given has returned a different event.
+ * Both are `InvalidLambdaResponseException` there and here.
+ *
+ * `response` is not checked. `PreSignUp` is the only trigger here that reads
+ * anything out of it, and a handler that dropped it is read as having answered
+ * no to all three of its flags, which is what a handler with nothing to ask for
+ * means. Refusing a missing `response` would refuse handlers real Cognito
+ * accepts.
+ */
+export function requireSimCognitoTriggerResponse(trigger, returned) {
+    if (typeof returned !== "object" ||
+        returned === null ||
+        Array.isArray(returned)) {
+        throw new SimCognitoInvalidLambdaResponseException(`The ${trigger} trigger returned ${describeReturned(returned)} rather ` +
+            `than the event it was given. A trigger handler has to return the ` +
+            `event, changed or not.`);
+    }
+    if (!("request" in returned)) {
+        throw new SimCognitoInvalidLambdaResponseException(`The ${trigger} trigger returned an object without a request, so it is ` +
+            `not the event it was given. A trigger handler has to return the ` +
+            `event, changed or not.`);
+    }
+}
+function describeReturned(returned) {
+    if (Array.isArray(returned)) {
+        return "an array";
+    }
+    return returned === null ? "null" : typeof returned;
+}
+//# sourceMappingURL=sim-cognito-trigger-response.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-trigger-response.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wCAAwC,EAAE,MAAM,0CAA0C,CAAC;AAGpG;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAA8B,EAC9B,QAAiB;IAEjB,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,wCAAwC,CAChD,OAAO,OAAO,qBAAqB,gBAAgB,CAAC,QAAQ,CAAC,UAAU;YACrE,mEAAmE;YACnE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,wCAAwC,CAChD,OAAO,OAAO,0DAA0D;YACtE,kEAAkE;YAClE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC;AACtD,CAAC"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.d.ts

@@ -0,0 +1,81 @@
+import type { SimCognitoClaimsOverride } from "../token/sim-cognito-claims-override.js";
+import { SimCognitoCustomMessage } from "./sim-cognito-custom-message.js";
+import { SimCognitoPreSignUpResponse } from "./sim-cognito-pre-sign-up-response.js";
+import type { SimCognitoTriggerContext } from "./sim-cognito-trigger-context.js";
+import type { SimCognitoTriggerFunctions } from "./sim-cognito-trigger-functions.js";
+import { SimCognitoTriggerOccasion } from "./sim-cognito-trigger-occasion.js";
+interface SimCognitoUserPoolTriggersProperties {
+    readonly functions: SimCognitoTriggerFunctions;
+}
+/**
+ * Runs the Lambda triggers a simulated user pool names.
+ *
+ * One method per trigger, because each says something different about when it
+ * fires and what the pool does with what the handler answered. Reaching the
+ * function is the same for all of them, and lives in
+ * `SimCognitoTriggerInvocation`.
+ */
+export declare class SimCognitoUserPoolTriggers {
+    private readonly invocation;
+    private readonly claimsOverrides;
+    constructor(properties: SimCognitoUserPoolTriggersProperties);
+    /**
+     * Run the `PreSignUp` trigger, if the pool has one, and read its answer.
+     *
+     * This runs before the user is added to the pool, so a handler that throws
+     * refuses the sign-up and leaves the pool without it, which is what the
+     * trigger is for.
+     *
+     * The answer is read on every occasion and acted on by the caller. Real
+     * Cognito ignores all three flags when the occasion is `AdminCreateUser`,
+     * because that user is already past confirmation, so that caller reads the
+     * answer and does nothing with it.
+     */
+    preSignUp(occasion: SimCognitoTriggerOccasion, context: SimCognitoTriggerContext): Promise<SimCognitoPreSignUpResponse>;
+    /**
+     * Run the `PostConfirmation` trigger, if the pool has one.
+     *
+     * This runs once the user is `CONFIRMED`, so a handler that throws fails the
+     * request without undoing the confirmation: the user stays confirmed, exactly
+     * as on real Cognito. `AdminCreateUser` never reaches here, as it never
+     * reaches it on real Cognito.
+     */
+    postConfirmation(context: SimCognitoTriggerContext): Promise<void>;
+    /**
+     * Run the `CustomMessage` trigger, if the pool has one, and read what it
+     * wrote.
+     *
+     * This runs before the message is recorded, so a handler that throws leaves
+     * the pool with no message rather than with the wording it was about to use.
+     * A pool without the trigger, and a handler that wrote nothing, both read as
+     * having left the pool's own wording alone.
+     */
+    customMessage(occasion: SimCognitoTriggerOccasion, context: SimCognitoTriggerContext): Promise<SimCognitoCustomMessage>;
+    /**
+     * Run the `PreAuthentication` trigger, if the pool has one.
+     *
+     * A handler that throws refuses the sign-in, which is what the trigger is
+     * for: the message it threw is carried into the
+     * `UserLambdaValidationException` the caller sees.
+     */
+    preAuthentication(context: SimCognitoTriggerContext): Promise<void>;
+    /**
+     * Run the `PostAuthentication` trigger, if the pool has one.
+     *
+     * This runs once the tokens have been issued, so a handler that throws fails
+     * the request without undoing the sign-in: the user is signed in, and the
+     * tokens the pool issued stay issued, exactly as on real Cognito.
+     */
+    postAuthentication(context: SimCognitoTriggerContext): Promise<void>;
+    /**
+     * Run the `PreTokenGeneration` trigger, if the pool has one, and answer with
+     * what its handler asked to change about the claims.
+     *
+     * A pool without the trigger, and a handler that returned the event without
+     * writing a response, both answer with an override that changes nothing, so
+     * the token layer applies one either way.
+     */
+    preTokenGeneration(occasion: SimCognitoTriggerOccasion, context: SimCognitoTriggerContext): Promise<SimCognitoClaimsOverride>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-triggers.d.ts.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-triggers.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAExF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IAExE,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;;OAWG;IACG,SAAS,CACb,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAItC;IAED;;;;;;;OAOG;IACG,gBAAgB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAED;;;;;;;;OAQG;IACG,aAAa,CACjB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAIlC;IAED;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;IAED;;;;;;;OAOG;IACG,kBAAkB,CACtB,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAInC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.js

@@ -0,0 +1,90 @@
+import { SimCognitoClaimsOverrideReader } from "../token/sim-cognito-claims-override-reader.js";
+import { SimCognitoCustomMessage } from "./sim-cognito-custom-message.js";
+import { SimCognitoPreSignUpResponse } from "./sim-cognito-pre-sign-up-response.js";
+import { SimCognitoTriggerInvocation } from "./sim-cognito-trigger-invocation.js";
+import { SimCognitoTriggerOccasion } from "./sim-cognito-trigger-occasion.js";
+/**
+ * Runs the Lambda triggers a simulated user pool names.
+ *
+ * One method per trigger, because each says something different about when it
+ * fires and what the pool does with what the handler answered. Reaching the
+ * function is the same for all of them, and lives in
+ * `SimCognitoTriggerInvocation`.
+ */
+export class SimCognitoUserPoolTriggers {
+    invocation;
+    claimsOverrides = new SimCognitoClaimsOverrideReader();
+    constructor(properties) {
+        this.invocation = new SimCognitoTriggerInvocation(properties.functions);
+    }
+    /**
+     * Run the `PreSignUp` trigger, if the pool has one, and read its answer.
+     *
+     * This runs before the user is added to the pool, so a handler that throws
+     * refuses the sign-up and leaves the pool without it, which is what the
+     * trigger is for.
+     *
+     * The answer is read on every occasion and acted on by the caller. Real
+     * Cognito ignores all three flags when the occasion is `AdminCreateUser`,
+     * because that user is already past confirmation, so that caller reads the
+     * answer and does nothing with it.
+     */
+    async preSignUp(occasion, context) {
+        return new SimCognitoPreSignUpResponse(await this.invocation.run(occasion, context));
+    }
+    /**
+     * Run the `PostConfirmation` trigger, if the pool has one.
+     *
+     * This runs once the user is `CONFIRMED`, so a handler that throws fails the
+     * request without undoing the confirmation: the user stays confirmed, exactly
+     * as on real Cognito. `AdminCreateUser` never reaches here, as it never
+     * reaches it on real Cognito.
+     */
+    async postConfirmation(context) {
+        await this.invocation.run(SimCognitoTriggerOccasion.confirmSignUp, context);
+    }
+    /**
+     * Run the `CustomMessage` trigger, if the pool has one, and read what it
+     * wrote.
+     *
+     * This runs before the message is recorded, so a handler that throws leaves
+     * the pool with no message rather than with the wording it was about to use.
+     * A pool without the trigger, and a handler that wrote nothing, both read as
+     * having left the pool's own wording alone.
+     */
+    async customMessage(occasion, context) {
+        return new SimCognitoCustomMessage(await this.invocation.run(occasion, context));
+    }
+    /**
+     * Run the `PreAuthentication` trigger, if the pool has one.
+     *
+     * A handler that throws refuses the sign-in, which is what the trigger is
+     * for: the message it threw is carried into the
+     * `UserLambdaValidationException` the caller sees.
+     */
+    async preAuthentication(context) {
+        await this.invocation.run(SimCognitoTriggerOccasion.preAuthentication, context);
+    }
+    /**
+     * Run the `PostAuthentication` trigger, if the pool has one.
+     *
+     * This runs once the tokens have been issued, so a handler that throws fails
+     * the request without undoing the sign-in: the user is signed in, and the
+     * tokens the pool issued stay issued, exactly as on real Cognito.
+     */
+    async postAuthentication(context) {
+        await this.invocation.run(SimCognitoTriggerOccasion.postAuthentication, context);
+    }
+    /**
+     * Run the `PreTokenGeneration` trigger, if the pool has one, and answer with
+     * what its handler asked to change about the claims.
+     *
+     * A pool without the trigger, and a handler that returned the event without
+     * writing a response, both answer with an override that changes nothing, so
+     * the token layer applies one either way.
+     */
+    async preTokenGeneration(occasion, context) {
+        return this.claimsOverrides.read(await this.invocation.run(occasion, context));
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-triggers.js.map

package/dist/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-triggers.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-user-pool-triggers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAGpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAM9E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,UAAU,CAA8B;IACxC,eAAe,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAExE,YAAY,UAAgD;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CACb,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,2BAA2B,CACpC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAiC;QACtD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CACjB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,uBAAuB,CAChC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAiC;QACvD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,iBAAiB,EAC3C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAiC;QACxD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,yBAAyB,CAAC,kBAAkB,EAC5C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAmC,EACnC,OAAiC;QAEjC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-confirmation-code.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The confirmation code a pool issues to a user that signed itself up.
+ *
+ * Real Cognito emails or texts the code and never reports it back, so a value
+ * object here would be write-only if it exposed nothing. It exposes its value,
+ * and a pool hands that value to a test through
+ * `SimCognitoUserPool.confirmationCode`, because nothing here delivers a
+ * message for a test to read the code from. That is the one place this
+ * simulation knowingly tells a caller something real Cognito would not.
+ *
+ * The code is six digits, as a real one is, so code parsing or validating it
+ * gets the shape it would get in a deployment.
+ */
+export declare class SimCognitoConfirmationCode {
+    readonly value: string;
+    private constructor();
+    /**
+     * Issue a fresh code.
+     *
+     * Leading zeros are kept, because a real code has them and a test treating
+     * the value as a number would lose them.
+     */
+    static issue(): SimCognitoConfirmationCode;
+    /**
+     * Whether a candidate is this code.
+     */
+    matches(candidate: string | undefined): boolean;
+}
+//# sourceMappingURL=sim-cognito-confirmation-code.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-confirmation-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-confirmation-code.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-confirmation-code.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;GAYG;AACH,qBAAa,0BAA0B;IACrC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,OAAO,eAEN;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,IAAI,0BAA0B,CAIzC;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE9C;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-confirmation-code.js

@@ -0,0 +1,40 @@
+import { randomInt } from "node:crypto";
+/**
+ * How many digits a Cognito confirmation code has.
+ */
+const codeDigits = 6;
+/**
+ * The confirmation code a pool issues to a user that signed itself up.
+ *
+ * Real Cognito emails or texts the code and never reports it back, so a value
+ * object here would be write-only if it exposed nothing. It exposes its value,
+ * and a pool hands that value to a test through
+ * `SimCognitoUserPool.confirmationCode`, because nothing here delivers a
+ * message for a test to read the code from. That is the one place this
+ * simulation knowingly tells a caller something real Cognito would not.
+ *
+ * The code is six digits, as a real one is, so code parsing or validating it
+ * gets the shape it would get in a deployment.
+ */
+export class SimCognitoConfirmationCode {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    /**
+     * Issue a fresh code.
+     *
+     * Leading zeros are kept, because a real code has them and a test treating
+     * the value as a number would lose them.
+     */
+    static issue() {
+        return new SimCognitoConfirmationCode(String(randomInt(0, 10 ** codeDigits)).padStart(codeDigits, "0"));
+    }
+    /**
+     * Whether a candidate is this code.
+     */
+    matches(candidate) {
+        return candidate === this.value;
+    }
+}
+//# sourceMappingURL=sim-cognito-confirmation-code.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-confirmation-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-confirmation-code.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-confirmation-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,0BAA0B;IACrB,KAAK,CAAS;IAE9B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,0BAA0B,CACnC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CACjE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAA6B;QACnC,OAAO,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC;IAClC,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-attributes.d.ts

@@ -32,6 +32,14 @@ export declare class SimCognitoUserAttributes {
      * The attributes, in the order they were first set.
      */
     get entries(): readonly SimCognitoAttributeType[];
+    /**
+     * Mark the named attributes verified, where they are held.
+     *
+     * This is what a pool's `AutoVerifiedAttributes` reaches when a user
+     * confirms its sign-up. An attribute the user does not have is left alone
+     * rather than flagged as verified, because there was nothing to verify.
+     */
+    verify(names: readonly string[]): void;
     /**
      * Apply requested attributes over the ones already held.
      *

package/dist/service/cognito/user-pool/user/sim-cognito-user-attributes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-attributes.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-attributes.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAiCD;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAEpD,YAAY,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,EAEzD;IAED,OAAO,CAAC,MAAM,CAAC,WAAW;IAyB1B,OAAO,CAAC,MAAM,CAAC,YAAY;IAiB3B;;OAEG;IACH,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAExC;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,uBAAuB,EAAE,CAKhD;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,IAAI,CAa3D;CACF"}
+{"version":3,"file":"sim-cognito-user-attributes.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-attributes.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAiCD;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAEpD,YAAY,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,EAEzD;IAED,OAAO,CAAC,MAAM,CAAC,WAAW;IAyB1B,OAAO,CAAC,MAAM,CAAC,YAAY;IAiB3B;;OAEG;IACH,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAExC;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,uBAAuB,EAAE,CAKhD;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAMrC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,IAAI,CAa3D;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-attributes.js

@@ -85,6 +85,18 @@ export class SimCognitoUserAttributes {
             .map(([name, value]) => ({ Name: name, Value: value }))
             .toArray();
     }
+    /**
+     * Mark the named attributes verified, where they are held.
+     *
+     * This is what a pool's `AutoVerifiedAttributes` reaches when a user
+     * confirms its sign-up. An attribute the user does not have is left alone
+     * rather than flagged as verified, because there was nothing to verify.
+     */
+    verify(names) {
+        this.update(names
+            .filter((name) => this.byName.has(name))
+            .map((name) => ({ Name: `${name}_verified`, Value: "true" })));
+    }
     /**
      * Apply requested attributes over the ones already held.
      *

package/dist/service/cognito/user-pool/user/sim-cognito-user-attributes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-attributes.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAYvF;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,SAAS;IACT,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;IACV,cAAc;IACd,uBAAuB;IACvB,SAAS;IACT,oBAAoB;IACpB,SAAS;IACT,YAAY;IACZ,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,wBAAwB;IAClB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,YAAY,SAA8C;QACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,IAAwB;QACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,mCAAmC,CAC3C,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,mCAAmC,CAC3C,oEAAoE;gBAClE,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,6CAA6C;gBAClE,6DAA6D;gBAC7D,gEAAgE,CACnE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,IAAY,EAAE,KAAyB;QACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,iBAAiB,CACzC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC3C,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,uBAAuB;gBAC5C,GAAG,MAAM,CAAC,uBAAuB,CAAC,4BAA4B,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM;aACf,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACtD,OAAO,EAAE,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAA8C;QACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAElE,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,IAAI,EACJ,wBAAwB,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-attributes.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAYvF;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,SAAS;IACT,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;IACV,cAAc;IACd,uBAAuB;IACvB,SAAS;IACT,oBAAoB;IACpB,SAAS;IACT,YAAY;IACZ,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,wBAAwB;IAClB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,YAAY,SAA8C;QACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,IAAwB;QACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,mCAAmC,CAC3C,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,mCAAmC,CAC3C,oEAAoE;gBAClE,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,6CAA6C;gBAClE,6DAA6D;gBAC7D,gEAAgE,CACnE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,IAAY,EAAE,KAAyB;QACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,iBAAiB,CACzC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC3C,MAAM,IAAI,mCAAmC,CAC3C,mBAAmB,IAAI,uBAAuB;gBAC5C,GAAG,MAAM,CAAC,uBAAuB,CAAC,4BAA4B,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM;aACf,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACtD,OAAO,EAAE,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAwB;QAC7B,IAAI,CAAC,MAAM,CACT,KAAK;aACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAA8C;QACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAElE,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,IAAI,EACJ,wBAAwB,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.d.ts

@@ -0,0 +1,36 @@
+import type { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
+/**
+ * The confirmation one user has outstanding.
+ *
+ * A user that signed itself up holds a code until it confirms, and a user that
+ * did not holds none. Keeping the code and what it answers together is the
+ * same modelling choice `SimCognitoUserPassword` makes: the user asks whether
+ * a candidate is right, rather than reading the value out to compare it.
+ *
+ * The value is readable, unlike a password, because nothing here delivers the
+ * message that would carry it.
+ */
+export declare class SimCognitoUserConfirmation {
+    #private;
+    constructor(status: SimCognitoUserStatus);
+    /**
+     * The code outstanding, if there is one.
+     */
+    get code(): string | undefined;
+    /**
+     * Issue a fresh code, forgetting any outstanding one.
+     */
+    issue(): void;
+    /**
+     * Follow the user to a status.
+     *
+     * A user waiting to be confirmed holds a code, and one that has left
+     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more.
+     */
+    settle(status: SimCognitoUserStatus): void;
+    /**
+     * Refuse a candidate that is not the code outstanding.
+     */
+    require(candidate: string | undefined): void;
+}
+//# sourceMappingURL=sim-cognito-user-confirmation.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-confirmation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-confirmation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;;;;;GAUG;AACH,qBAAa,0BAA0B;;IAGrC,YAAY,MAAM,EAAE,oBAAoB,EAEvC;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAIzC;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAM3C;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.js

@@ -0,0 +1,51 @@
+import { SimCognitoCodeMismatchException } from "../../error/sim-cognito.error.js";
+import { SimCognitoConfirmationCode } from "./sim-cognito-confirmation-code.js";
+/**
+ * The confirmation one user has outstanding.
+ *
+ * A user that signed itself up holds a code until it confirms, and a user that
+ * did not holds none. Keeping the code and what it answers together is the
+ * same modelling choice `SimCognitoUserPassword` makes: the user asks whether
+ * a candidate is right, rather than reading the value out to compare it.
+ *
+ * The value is readable, unlike a password, because nothing here delivers the
+ * message that would carry it.
+ */
+export class SimCognitoUserConfirmation {
+    #code;
+    constructor(status) {
+        this.settle(status);
+    }
+    /**
+     * The code outstanding, if there is one.
+     */
+    get code() {
+        return this.#code?.value;
+    }
+    /**
+     * Issue a fresh code, forgetting any outstanding one.
+     */
+    issue() {
+        this.#code = SimCognitoConfirmationCode.issue();
+    }
+    /**
+     * Follow the user to a status.
+     *
+     * A user waiting to be confirmed holds a code, and one that has left
+     * `UNCONFIRMED` has spent it: a code confirms one sign-up and no more.
+     */
+    settle(status) {
+        this.#code = status.isUnconfirmed
+            ? SimCognitoConfirmationCode.issue()
+            : undefined;
+    }
+    /**
+     * Refuse a candidate that is not the code outstanding.
+     */
+    require(candidate) {
+        if (this.#code?.matches(candidate) !== true) {
+            throw new SimCognitoCodeMismatchException("Invalid verification code provided, please try again.");
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-user-confirmation.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-user-confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-confirmation.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAGhF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAyC;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,0BAA0B,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAA4B;QACjC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa;YAC/B,CAAC,CAAC,0BAA0B,CAAC,KAAK,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAA6B;QACnC,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,+BAA+B,CACvC,uDAAuD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-factory.d.ts

@@ -1,4 +1,5 @@
 import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoPasswordPolicy } from "../sim-cognito-password-policy.js";
 import { type SimCognitoAttributeType } from "./sim-cognito-user-attributes.js";
 import { SimCognitoUser } from "./sim-cognito-user.js";
 import type { SimCognitoUsername } from "./sim-cognito-username.js";
@@ -9,10 +10,24 @@ interface SimCognitoMakeUserProperties {
     readonly username: SimCognitoUsername;
     readonly attributes?: readonly SimCognitoAttributeType[] | undefined;
     /**
-     * The password the user starts with, already checked against the pool's
-     * policy. A user made without one has no password at all.
+     * The password the user starts with, checked here against the pool's policy.
+     * A user made without one has no password at all.
      */
     readonly temporaryPassword?: string | undefined;
+    /** The policy the pool holds its users' passwords to. */
+    readonly passwordPolicy: SimCognitoPasswordPolicy;
+}
+interface SimCognitoSignUpUserProperties {
+    readonly username: SimCognitoUsername;
+    readonly attributes?: readonly SimCognitoAttributeType[] | undefined;
+    /**
+     * The password the user chose, checked here against the pool's policy. It is
+     * the user's own rather than a temporary one, so the user signs in with it
+     * as soon as it is confirmed.
+     */
+    readonly password: string | undefined;
+    /** The policy the pool holds its users' passwords to. */
+    readonly passwordPolicy: SimCognitoPasswordPolicy;
 }
 /**
  * Builds simulated users, including the `sub` Cognito allocates.
@@ -20,6 +35,13 @@ interface SimCognitoMakeUserProperties {
 export declare class SimCognitoUserFactory {
     private readonly clock;
     constructor(properties: SimCognitoUserFactoryProperties);
+    /**
+     * The password a user starts with, checked against the pool's policy.
+     *
+     * `AdminCreateUser` naming no `TemporaryPassword` leaves the user with no
+     * password at all: real Cognito generates one and sends it to the user, and
+     * the invitation this simulation records carries no password to read.
+     */
     private static passwordFor;
     /**
      * Make a new user for a pool.
@@ -29,6 +51,13 @@ export declare class SimCognitoUserFactory {
      * therefore fails here rather than in a deployment.
      */
     make(properties: SimCognitoMakeUserProperties): SimCognitoUser;
+    /**
+     * Make a user that signed itself up, waiting to be confirmed.
+     *
+     * The user starts in `UNCONFIRMED` holding the confirmation code it gets
+     * with that status, which is where real Cognito leaves a `SignUp`.
+     */
+    signUp(properties: SimCognitoSignUpUserProperties): SimCognitoUser;
 }
 export {};
 //# sourceMappingURL=sim-cognito-user-factory.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-user-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IACrE;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED,OAAO,CAAC,MAAM,CAAC,WAAW;IAU1B;;;;;;OAMG;IACH,IAAI,CAAC,UAAU,EAAE,4BAA4B,GAAG,cAAc,CAQ7D;CACF"}
+{"version":3,"file":"sim-cognito-user-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAErE;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEhD,yDAAyD;IACzD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAErE;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC,yDAAyD;IACzD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAc1B;;;;;;OAMG;IACH,IAAI,CAAC,UAAU,EAAE,4BAA4B,GAAG,cAAc,CAY7D;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAAU,EAAE,8BAA8B,GAAG,cAAc,CAgBjE;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-factory.js

@@ -1,7 +1,9 @@
 import { randomUUID } from "node:crypto";
+import { SimCognitoPasswordCheck } from "../sim-cognito-password-check.js";
 import { SimCognitoUserAttributes, } from "./sim-cognito-user-attributes.js";
 import { SimCognitoUser } from "./sim-cognito-user.js";
 import { SimCognitoUserPassword } from "./sim-cognito-user-password.js";
+import { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
 /**
  * Builds simulated users, including the `sub` Cognito allocates.
  */
@@ -10,11 +12,18 @@ export class SimCognitoUserFactory {
     constructor(properties) {
         this.clock = properties.clock;
     }
-    static passwordFor(temporaryPassword) {
-        if (temporaryPassword === undefined) {
+    /**
+     * The password a user starts with, checked against the pool's policy.
+     *
+     * `AdminCreateUser` naming no `TemporaryPassword` leaves the user with no
+     * password at all: real Cognito generates one and sends it to the user, and
+     * the invitation this simulation records carries no password to read.
+     */
+    static passwordFor(field, given, policy) {
+        if (given === undefined) {
             return undefined;
         }
-        return new SimCognitoUserPassword(temporaryPassword);
+        return new SimCognitoUserPassword(new SimCognitoPasswordCheck(policy).require(field, given));
     }
     /**
      * Make a new user for a pool.
@@ -28,7 +37,25 @@ export class SimCognitoUserFactory {
             username: properties.username,
             sub: randomUUID(),
             attributes: new SimCognitoUserAttributes(properties.attributes),
-            password: SimCognitoUserFactory.passwordFor(properties.temporaryPassword),
+            password: SimCognitoUserFactory.passwordFor("TemporaryPassword", properties.temporaryPassword, properties.passwordPolicy),
+            clock: this.clock,
+        });
+    }
+    /**
+     * Make a user that signed itself up, waiting to be confirmed.
+     *
+     * The user starts in `UNCONFIRMED` holding the confirmation code it gets
+     * with that status, which is where real Cognito leaves a `SignUp`.
+     */
+    signUp(properties) {
+        return new SimCognitoUser({
+            username: properties.username,
+            sub: randomUUID(),
+            attributes: new SimCognitoUserAttributes(properties.attributes),
+            // The password a user chose is required, where the temporary one an
+            // administrator gives is not.
+            password: new SimCognitoUserPassword(new SimCognitoPasswordCheck(properties.passwordPolicy).require("Password", properties.password)),
+            status: SimCognitoUserStatus.unconfirmed,
             clock: this.clock,
         });
     }

package/dist/service/cognito/user-pool/user/sim-cognito-user-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-factory.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAEL,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAiBxE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAW;IAEjC,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAEO,MAAM,CAAC,WAAW,CACxB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,UAAwC;QAC3C,OAAO,IAAI,cAAc,CAAC;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,GAAG,EAAE,UAAU,EAAE;YACjB,UAAU,EAAE,IAAI,wBAAwB,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/D,QAAQ,EAAE,qBAAqB,CAAC,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC;YACzE,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-factory.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAEL,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAoCpE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAW;IAEjC,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,WAAW,CACxB,KAAa,EACb,KAAyB,EACzB,MAAgC;QAEhC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,sBAAsB,CAC/B,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,UAAwC;QAC3C,OAAO,IAAI,cAAc,CAAC;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,GAAG,EAAE,UAAU,EAAE;YACjB,UAAU,EAAE,IAAI,wBAAwB,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/D,QAAQ,EAAE,qBAAqB,CAAC,WAAW,CACzC,mBAAmB,EACnB,UAAU,CAAC,iBAAiB,EAC5B,UAAU,CAAC,cAAc,CAC1B;YACD,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAA0C;QAC/C,OAAO,IAAI,cAAc,CAAC;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,GAAG,EAAE,UAAU,EAAE;YACjB,UAAU,EAAE,IAAI,wBAAwB,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/D,oEAAoE;YACpE,8BAA8B;YAC9B,QAAQ,EAAE,IAAI,sBAAsB,CAClC,IAAI,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,OAAO,CAC5D,UAAU,EACV,UAAU,CAAC,QAAQ,CACpB,CACF;YACD,MAAM,EAAE,oBAAoB,CAAC,WAAW;YACxC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}