@kensio/yulin 1.10.0 → 1.10.2

package/dist/service/s3/command/sim-s3-request-options.d.ts

@@ -1,4 +1,23 @@
 import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * The condition key naming what a simulated service is reaching the Bucket for,
+ * such as the CloudFront Distribution an Origin read belongs to.
+ *
+ * This is the key a Bucket policy granting a service principal is nearly always
+ * conditioned on, since a service principal is shared by every resource of that
+ * service. CDK writes it as `AWS:SourceArn`, which matches the same key: the
+ * condition matcher is case insensitive on key names, as IAM is.
+ */
+export declare const simS3SourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the Bucket for.
+ *
+ * It only has a job when that resource and the Bucket are in different
+ * Accounts, which is why AWS's own documented Bucket policies carry it
+ * alongside the source ARN.
+ */
+export declare const simS3SourceAccountConditionKey = "aws:SourceAccount";
 /**
  * The per-request options every simulated S3 command accepts.
  *
@@ -6,6 +25,27 @@ import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
  * area can name it without importing the facade back.
  */
 export interface SimS3RequestOptions {
+    /**
+     * Who is making the request. An omitted caller is the Account root, as it is
+     * everywhere else in the simulation.
+     */
     readonly caller?: SimAwsCaller;
+    /**
+     * What the caller is reaching the Bucket for, supplied to IAM as
+     * `aws:SourceArn`.
+     *
+     * This is for a simulated service making a request on a resource's behalf,
+     * which is how real AWS supplies it. A value the caller does not have is left
+     * out rather than supplied empty, so a statement conditioned on it fails to
+     * match instead of matching an empty string.
+     */
+    readonly sourceArn?: string;
+    /**
+     * The Account owning the resource the caller is reaching the Bucket for,
+     * supplied to IAM as `aws:SourceAccount`.
+     *
+     * Left out the same way when the caller has no value for it.
+     */
+    readonly sourceAccount?: string;
 }
 //# sourceMappingURL=sim-s3-request-options.d.ts.map

package/dist/service/s3/command/sim-s3-request-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC"}
+{"version":3,"file":"sim-s3-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,sBAAsB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAE/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC"}

package/dist/service/s3/command/sim-s3-request-options.js

@@ -1,2 +1,20 @@
-export {};
+/**
+ * The condition key naming what a simulated service is reaching the Bucket for,
+ * such as the CloudFront Distribution an Origin read belongs to.
+ *
+ * This is the key a Bucket policy granting a service principal is nearly always
+ * conditioned on, since a service principal is shared by every resource of that
+ * service. CDK writes it as `AWS:SourceArn`, which matches the same key: the
+ * condition matcher is case insensitive on key names, as IAM is.
+ */
+export const simS3SourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the Bucket for.
+ *
+ * It only has a job when that resource and the Bucket are in different
+ * Accounts, which is why AWS's own documented Bucket policies carry it
+ * alongside the source ARN.
+ */
+export const simS3SourceAccountConditionKey = "aws:SourceAccount";
 //# sourceMappingURL=sim-s3-request-options.js.map

package/dist/service/s3/command/sim-s3-request-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-request-options.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":""}
+{"version":3,"file":"sim-s3-request-options.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mBAAmB,CAAC"}

package/dist/service/s3/index.d.ts

@@ -1,4 +1,6 @@
 export { SimS3 } from "./sim-s3.js";
 export type { SimS3MountFilesystemOptions, SimS3MountReloadTarget, } from "./mount/sim-s3-mount.type.js";
+export type { SimS3KeyPrefixMetadata } from "./object/s3-key-prefix-metadata.js";
+export type { SimS3SystemMetadataField, SimS3SystemMetadataValues, } from "./object/s3-system-metadata.js";
 export type { SimS3NotificationDeliveryFailure } from "./notification/sim-s3-notification-failures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/s3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,YAAY,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC"}

package/dist/service/s3/mount/sim-s3-mount-directory-events.js

@@ -21,7 +21,7 @@ export class SimS3MountDirectoryEvents {
      * Start listening for writes under the directory.
      */
     start() {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
         const watcher = fs.watch(this.directoryPath, { recursive: true }, (_event, fileName) => {
             if (this.namesTheDirectoryItself(fileName)) {
                 return;

package/dist/service/s3/mount/sim-s3-mount.type.d.ts

@@ -1,3 +1,4 @@
+import type { SimS3KeyPrefixMetadata } from "../object/s3-key-prefix-metadata.js";
 /**
  * Somewhere a reload can be sent, which in practice is a local server.
  *
@@ -39,5 +40,31 @@ export interface SimS3MountFilesystemOptions {
      * Added to the list rather than replacing it, and a leading dot is optional.
      */
     readonly additionalFileExtensions?: readonly string[] | undefined;
+    /**
+     * System metadata to report for the Objects under a key prefix.
+     *
+     * A stored Object carries what S3 was told at upload time. A file carries
+     * its bytes and its name, so a mounted Bucket has only the extension to go
+     * on and describes every Object with a `content-type` and nothing else. This
+     * is where the rest is declared.
+     *
+     * A CDK `BucketDeployment` into the same Bucket has already said what it
+     * publishes, and a mount inherits that, so this is for what no deployment
+     * covers and for answering differently on purpose. A declaration here goes
+     * over an inherited one, header by header.
+     *
+     * `ContentEncoding` is the one a site can be broken without. A directory of
+     * brotli files served with no `content-encoding` is bytes no browser can
+     * decode, and a deployment that sets the header would have made them work:
+     *
+     * ```typescript
+     * systemMetadata: [{ keyPrefix: "br/", metadata: { ContentEncoding: "br" } }]
+     * ```
+     *
+     * Every declaration whose prefix the key starts with applies, in the order
+     * they were given, so a later one wins where two name the same header. A
+     * declared `ContentType` replaces the one guessed from the extension.
+     */
+    readonly systemMetadata?: readonly SimS3KeyPrefixMetadata[] | undefined;
 }
 //# sourceMappingURL=sim-s3-mount.type.d.ts.map

package/dist/service/s3/mount/sim-s3-mount.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-mount.type.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/mount/sim-s3-mount.type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAErD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACnE"}
+{"version":3,"file":"sim-s3-mount.type.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/mount/sim-s3-mount.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAErD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAElE;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;CACzE"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-s3-notification-functions.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIzD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAGjG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CA0BpB;IAED;;;;;;;;OAQG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,EAC5C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAWf;IAED,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;CAKd"}
+{"version":3,"file":"sim-aws-s3-notification-functions.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIzD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAGjG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CA0BpB;IAED;;;;;;;;OAQG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,EAC5C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAYf;IAED,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;CAKd"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js

@@ -57,6 +57,7 @@ export class SimAwsS3NotificationFunctions {
     async invoke(request, event) {
         const arn = SimS3NotificationFunctionArn.parse(request.destinationArn);
         const simFunction = this.findFunction(arn);
+        // oxlint-disable-next-line yulin/assert-defined-guard -- `assertDefined` is denser per line, and this file is close enough to the FTA threshold that the guard costs less kept as it is
         if (simFunction === undefined) {
             throw new Error(`${request.destinationArn} is not a simulated Lambda function.`);
         }

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-s3-notification-functions.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8EAA8E,CAAC;AAIhI,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAOrF;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAA4C;QAE5C,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,qBAAqB;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,cAAc,kBAAkB;gBAClE,GAAG,qBAAqB,qBAAqB,OAAO,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C,EAC5C,KAAa;QAEb,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,YAAY,CAClB,GAAiC;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAEO,GAAG,CAAC,GAAiC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CACX,GAAiC;QAEjC,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;CACF"}
+{"version":3,"file":"sim-aws-s3-notification-functions.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8EAA8E,CAAC;AAIhI,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAOrF;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAA4C;QAE5C,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,qBAAqB;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,cAAc,kBAAkB;gBAClE,GAAG,qBAAqB,qBAAqB,OAAO,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C,EAC5C,KAAa;QAEb,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,wLAAwL;QACxL,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,YAAY,CAClB,GAAiC;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAEO,GAAG,CAAC,GAAiC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CACX,GAAiC;QAEjC,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/s3/notification/sim-s3-notification-failures.js

@@ -72,7 +72,7 @@ export class SimS3NotificationFailures {
             return;
         }
         this.warned.add(key);
-        // eslint-disable-next-line no-console
+        // oxlint-disable-next-line no-console
         console.warn(`Simulated S3 Bucket ${failure.event.bucketName} could not notify ` +
             `${failure.destinationArn} of ${failure.event.eventName}: ${failure.reason}`);
     }

package/dist/service/s3/object/s3-declared-system-metadata.d.ts

@@ -0,0 +1,63 @@
+import { type SimS3KeyPrefixMetadata } from "./s3-key-prefix-metadata.js";
+import type { SimS3SystemMetadataDeclarations } from "./s3-system-metadata-declaration.type.js";
+interface SimS3DeclaredSystemMetadataProperties {
+    /**
+     * What the Bucket was already told about its Objects, which is where a CDK
+     * `BucketDeployment` into the same Bucket has left the headers it publishes.
+     */
+    readonly inherited?: SimS3SystemMetadataDeclarations | undefined;
+    /** What the mount declares itself, for the Objects under a key prefix. */
+    readonly declarations?: readonly SimS3KeyPrefixMetadata[] | undefined;
+}
+/**
+ * The system metadata declared for an Object key by everything that describes
+ * it.
+ *
+ * Storage that holds an Object holds its metadata with it, so nothing needs
+ * this. Storage that maps Objects onto files has only the file to go on, and a
+ * file carries its bytes and its name and nothing else, so anything S3 would
+ * have been told at upload time has to be declared instead. `Content-Encoding`
+ * is the one that stops a site working without it: a directory of brotli files
+ * served without the header is bytes no browser can decode.
+ *
+ * What the Bucket was told comes first and what the mount declares goes over
+ * the top, so a mount serving the files a deployment publishes answers as the
+ * deployment did without restating any of it, and still has the last word
+ * where it wants a different answer locally.
+ */
+export declare class SimS3DeclaredSystemMetadata {
+    private readonly inherited;
+    private readonly declared;
+    constructor(properties?: SimS3DeclaredSystemMetadataProperties);
+    /**
+     * The headers declared for one Object key, under the names a read returns
+     * them by.
+     *
+     * Every declaration that describes the key applies, in the order they were
+     * made, so a later one wins where two name the same header.
+     */
+    headersForObjectKey(key: string): Record<string, string>;
+    /**
+     * The declarations about one key, inherited ones first.
+     */
+    private describing;
+    /**
+     * What the Bucket has to say about one key.
+     *
+     * The declarations it holds are read on every lookup rather than copied when
+     * the mount is set up, because the two happen in either order: a dev script
+     * mounts a directory into a Bucket and deploys the Stack that describes it
+     * afterwards as readily as before, and an inheritance that only worked one
+     * way round would be a worse trap than restating the headers by hand.
+     *
+     * What was published wins outright. Everything else is a guess about a file
+     * that was not there when the Bucket was last filled, and a guess is only
+     * taken where one declaration makes it: two deployments can publish into the
+     * same prefix with different headers, and serving a page as the other one's
+     * brotli would break it in a way declaring nothing does not.
+     */
+    private inheritedFor;
+    private addDeclared;
+}
+export {};
+//# sourceMappingURL=s3-declared-system-metadata.d.ts.map

package/dist/service/s3/object/s3-declared-system-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-declared-system-metadata.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-declared-system-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAEV,+BAA+B,EAChC,MAAM,0CAA0C,CAAC;AAMlD,UAAU,qCAAqC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IAEjE,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;CACvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE,YAAY,UAAU,GAAE,qCAA0C,EAKjE;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQvD;IAED;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,WAAW;CAYpB"}

package/dist/service/s3/object/s3-declared-system-metadata.js

@@ -0,0 +1,82 @@
+import { SimS3KeyPrefixDeclaration, } from "./s3-key-prefix-metadata.js";
+import { simS3SystemMetadataHeaders, } from "./s3-system-metadata.js";
+/**
+ * The system metadata declared for an Object key by everything that describes
+ * it.
+ *
+ * Storage that holds an Object holds its metadata with it, so nothing needs
+ * this. Storage that maps Objects onto files has only the file to go on, and a
+ * file carries its bytes and its name and nothing else, so anything S3 would
+ * have been told at upload time has to be declared instead. `Content-Encoding`
+ * is the one that stops a site working without it: a directory of brotli files
+ * served without the header is bytes no browser can decode.
+ *
+ * What the Bucket was told comes first and what the mount declares goes over
+ * the top, so a mount serving the files a deployment publishes answers as the
+ * deployment did without restating any of it, and still has the last word
+ * where it wants a different answer locally.
+ */
+export class SimS3DeclaredSystemMetadata {
+    inherited;
+    declared;
+    constructor(properties = {}) {
+        this.inherited = properties.inherited;
+        this.declared = (properties.declarations ?? []).map((declaration) => new SimS3KeyPrefixDeclaration(declaration));
+    }
+    /**
+     * The headers declared for one Object key, under the names a read returns
+     * them by.
+     *
+     * Every declaration that describes the key applies, in the order they were
+     * made, so a later one wins where two name the same header.
+     */
+    headersForObjectKey(key) {
+        const headers = {};
+        for (const declaration of this.describing(key)) {
+            this.addDeclared(headers, declaration.metadata);
+        }
+        return headers;
+    }
+    /**
+     * The declarations about one key, inherited ones first.
+     */
+    describing(key) {
+        return [
+            ...this.inheritedFor(key),
+            ...this.declared.filter((declaration) => declaration.describes(key)),
+        ];
+    }
+    /**
+     * What the Bucket has to say about one key.
+     *
+     * The declarations it holds are read on every lookup rather than copied when
+     * the mount is set up, because the two happen in either order: a dev script
+     * mounts a directory into a Bucket and deploys the Stack that describes it
+     * afterwards as readily as before, and an inheritance that only worked one
+     * way round would be a worse trap than restating the headers by hand.
+     *
+     * What was published wins outright. Everything else is a guess about a file
+     * that was not there when the Bucket was last filled, and a guess is only
+     * taken where one declaration makes it: two deployments can publish into the
+     * same prefix with different headers, and serving a page as the other one's
+     * brotli would break it in a way declaring nothing does not.
+     */
+    inheritedFor(key) {
+        const inherited = this.inherited?.declarations() ?? [];
+        const describing = inherited.filter((declaration) => declaration.describes(key));
+        if (describing.length > 0) {
+            return describing;
+        }
+        const wouldDescribe = inherited.filter((declaration) => declaration.wouldDescribe(key));
+        return wouldDescribe.length === 1 ? wouldDescribe : [];
+    }
+    addDeclared(headers, declared) {
+        for (const header of simS3SystemMetadataHeaders) {
+            const value = declared[header.field];
+            if (value !== undefined) {
+                headers[header.name] = value;
+            }
+        }
+    }
+}
+//# sourceMappingURL=s3-declared-system-metadata.js.map

package/dist/service/s3/object/s3-declared-system-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-declared-system-metadata.js","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-declared-system-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAE1B,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,0BAA0B,GAE3B,MAAM,yBAAyB,CAAC;AAajC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA2B;IACrB,SAAS,CAA8C;IACvD,QAAQ,CAA4C;IAErE,YAAY,UAAU,GAA0C,EAAE;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CACjD,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,WAAW,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,GAAW;QAC7B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,GAAW;QAC5B,OAAO;YACL,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YACzB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;SACrE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,YAAY,CAAC,GAAW;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAC3B,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CACrD,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAC/B,CAAC;QAEF,OAAO,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAEO,WAAW,CACjB,OAA+B,EAC/B,QAAmC;QAEnC,KAAK,MAAM,MAAM,IAAI,0BAA0B,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/object/s3-key-prefix-metadata.d.ts

@@ -0,0 +1,32 @@
+import type { SimS3SystemMetadataDeclaration } from "./s3-system-metadata-declaration.type.js";
+import type { SimS3SystemMetadataValues } from "./s3-system-metadata.js";
+/**
+ * System metadata declared for the Objects under one key prefix.
+ */
+export interface SimS3KeyPrefixMetadata {
+    /**
+     * The Object key prefix this applies to, such as `br/`. An empty prefix
+     * applies to every Object.
+     */
+    readonly keyPrefix: string;
+    /** What S3 reports about the Objects under that prefix. */
+    readonly metadata: SimS3SystemMetadataValues;
+}
+/**
+ * A declaration that describes the Objects under a key prefix.
+ *
+ * This is the plain form, and the one a mount is written in: a prefix and what
+ * to report about everything under it. It is a standing statement rather than a
+ * record of what was published, so it answers the same for a file that is there
+ * and a file that turns up later.
+ */
+export declare class SimS3KeyPrefixDeclaration implements SimS3SystemMetadataDeclaration {
+    readonly metadata: SimS3SystemMetadataValues;
+    private readonly keyPrefix;
+    constructor(declared: SimS3KeyPrefixMetadata);
+    /** Whether an Object key is under the declared prefix. */
+    describes(objectKey: string): boolean;
+    /** The same question, because a prefix describes what has not arrived yet. */
+    wouldDescribe(objectKey: string): boolean;
+}
+//# sourceMappingURL=s3-key-prefix-metadata.d.ts.map

package/dist/service/s3/object/s3-key-prefix-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-key-prefix-metadata.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-key-prefix-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,YAAW,8BAA8B;IAC9E,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,YAAY,QAAQ,EAAE,sBAAsB,EAG3C;IAED,0DAA0D;IAC1D,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEpC;IAED,8EAA8E;IAC9E,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAExC;CACF"}

package/dist/service/s3/object/s3-key-prefix-metadata.js

@@ -0,0 +1,25 @@
+/**
+ * A declaration that describes the Objects under a key prefix.
+ *
+ * This is the plain form, and the one a mount is written in: a prefix and what
+ * to report about everything under it. It is a standing statement rather than a
+ * record of what was published, so it answers the same for a file that is there
+ * and a file that turns up later.
+ */
+export class SimS3KeyPrefixDeclaration {
+    metadata;
+    keyPrefix;
+    constructor(declared) {
+        this.keyPrefix = declared.keyPrefix;
+        this.metadata = declared.metadata;
+    }
+    /** Whether an Object key is under the declared prefix. */
+    describes(objectKey) {
+        return objectKey.startsWith(this.keyPrefix);
+    }
+    /** The same question, because a prefix describes what has not arrived yet. */
+    wouldDescribe(objectKey) {
+        return this.describes(objectKey);
+    }
+}
+//# sourceMappingURL=s3-key-prefix-metadata.js.map

package/dist/service/s3/object/s3-key-prefix-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-key-prefix-metadata.js","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-key-prefix-metadata.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IAC3B,QAAQ,CAA4B;IAE5B,SAAS,CAAS;IAEnC,YAAY,QAAgC;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,0DAA0D;IAC1D,SAAS,CAAC,SAAiB;QACzB,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/service/s3/object/s3-system-metadata-declaration.type.d.ts

@@ -0,0 +1,38 @@
+import type { SimS3SystemMetadataValues } from "./s3-system-metadata.js";
+/**
+ * Something that says what S3 reports about Objects it does not store.
+ *
+ * A stored Object carries its own system metadata, so this is for the Objects
+ * that cannot: the ones a mounted directory maps onto files, which carry their
+ * bytes and their names and nothing else. Whatever S3 was told about them is
+ * declared instead, by whichever part of the simulated account knows it.
+ *
+ * A declaration says two things, because a mount serves the files a build
+ * writes rather than the files something published. It knows which Objects it
+ * described, and it knows the rule it described them by, and those answer
+ * different questions: what is this Object, and what would this file have been.
+ */
+export interface SimS3SystemMetadataDeclaration {
+    /** Whether this is what S3 holds about the Object under a key. */
+    describes(objectKey: string): boolean;
+    /**
+     * Whether this is what S3 would hold about a file arriving under a key.
+     *
+     * A rule rather than a fact, so it answers for a page a rebuild added after
+     * the last deployment ran.
+     */
+    wouldDescribe(objectKey: string): boolean;
+    /** What it says S3 reports about them. */
+    readonly metadata: SimS3SystemMetadataValues;
+}
+/**
+ * Somewhere declarations are kept and can be read back.
+ *
+ * Named by the shape rather than the class, so storage laying a mount's
+ * declarations over a Bucket's takes the Bucket as somewhere to read from
+ * rather than as the Bucket.
+ */
+export interface SimS3SystemMetadataDeclarations {
+    declarations(): readonly SimS3SystemMetadataDeclaration[];
+}
+//# sourceMappingURL=s3-system-metadata-declaration.type.d.ts.map

package/dist/service/s3/object/s3-system-metadata-declaration.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-system-metadata-declaration.type.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata-declaration.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,8BAA8B;IAC7C,kEAAkE;IAClE,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAEtC;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAE1C,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,YAAY,IAAI,SAAS,8BAA8B,EAAE,CAAC;CAC3D"}

package/dist/service/s3/object/s3-system-metadata-declaration.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=s3-system-metadata-declaration.type.js.map

package/dist/service/s3/object/s3-system-metadata-declaration.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-system-metadata-declaration.type.js","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata-declaration.type.ts"],"names":[],"mappings":""}

package/dist/service/s3/object/s3-system-metadata.d.ts

@@ -21,6 +21,15 @@ export declare class SimS3SystemMetadataHeader {
  * indexable by them.
  */
 export type SimS3SystemMetadataField = "CacheControl" | "ContentDisposition" | "ContentEncoding" | "ContentLanguage" | "ContentType" | "Expires";
+/**
+ * System metadata values, under the request field names a `PutObject` sets
+ * them with.
+ *
+ * Every value is a string here, including `Expires`, which a `PutObject` takes
+ * as a `Date`. Nothing is being written, so there is no request field to format:
+ * this says what S3 already holds about a file, in the form a read hands back.
+ */
+export type SimS3SystemMetadataValues = Partial<Record<SimS3SystemMetadataField, string>>;
 /**
  * The system metadata S3 stores as a header and returns as one.
  *
@@ -29,4 +38,14 @@ export type SimS3SystemMetadataField = "CacheControl" | "ContentDisposition" | "
  * a deployment or the console guesses one from the file extension.
  */
 export declare const simS3SystemMetadataHeaders: readonly SimS3SystemMetadataHeader[];
+/**
+ * Read system metadata written as headers back into the fields it is declared
+ * with.
+ *
+ * A `Custom::CDKBucketDeployment` carries its `SystemMetadata` as the headers
+ * the sync sets, which is the form an Object holds them in and the wrong form
+ * to declare them in. Anything outside the list above is dropped: only these
+ * are declarable, and only these are served.
+ */
+export declare function simS3SystemMetadataValues(headers: ReadonlyMap<string, string>): SimS3SystemMetadataValues;
 //# sourceMappingURL=s3-system-metadata.d.ts.map

package/dist/service/s3/object/s3-system-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"s3-system-metadata.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;aAElB,KAAK,EAAE,wBAAwB;aAC/B,IAAI,EAAE,MAAM;IAF9B,YACkB,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,EAC1B;CACL;AAED;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,SAAS,CAAC;AAEd;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,yBAAyB,EAQxE,CAAC"}
+{"version":3,"file":"s3-system-metadata.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;aAElB,KAAK,EAAE,wBAAwB;aAC/B,IAAI,EAAE,MAAM;IAF9B,YACkB,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,EAC1B;CACL;AAED;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,SAAS,CAAC;AAEd;;;;;;;GAOG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAC7C,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CACzC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,yBAAyB,EAQxE,CAAC;AAEJ;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,yBAAyB,CAY3B"}

package/dist/service/s3/object/s3-system-metadata.js

@@ -32,4 +32,23 @@ export const simS3SystemMetadataHeaders = [
     new SimS3SystemMetadataHeader("ContentType", "content-type"),
     new SimS3SystemMetadataHeader("Expires", "expires"),
 ];
+/**
+ * Read system metadata written as headers back into the fields it is declared
+ * with.
+ *
+ * A `Custom::CDKBucketDeployment` carries its `SystemMetadata` as the headers
+ * the sync sets, which is the form an Object holds them in and the wrong form
+ * to declare them in. Anything outside the list above is dropped: only these
+ * are declarable, and only these are served.
+ */
+export function simS3SystemMetadataValues(headers) {
+    const values = {};
+    for (const header of simS3SystemMetadataHeaders) {
+        const value = headers.get(header.name);
+        if (value !== undefined) {
+            values[header.field] = value;
+        }
+    }
+    return values;
+}
 //# sourceMappingURL=s3-system-metadata.js.map

package/dist/service/s3/object/s3-system-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"s3-system-metadata.js","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IAElB,KAAK;IACL,IAAI;IAFtB,YACkB,KAA+B,EAC/B,IAAY;qBADZ,KAAK;oBACL,IAAI;IACnB,CAAC;CACL;AAgBD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC;IACE,IAAI,yBAAyB,CAAC,cAAc,EAAE,eAAe,CAAC;IAC9D,IAAI,yBAAyB,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;IAC1E,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACpE,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACpE,IAAI,yBAAyB,CAAC,aAAa,EAAE,cAAc,CAAC;IAC5D,IAAI,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC;CACpD,CAAC"}
+{"version":3,"file":"s3-system-metadata.js","sourceRoot":"","sources":["../../../../src/service/s3/object/s3-system-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IAElB,KAAK;IACL,IAAI;IAFtB,YACkB,KAA+B,EAC/B,IAAY;qBADZ,KAAK;oBACL,IAAI;IACnB,CAAC;CACL;AA4BD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC;IACE,IAAI,yBAAyB,CAAC,cAAc,EAAE,eAAe,CAAC;IAC9D,IAAI,yBAAyB,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;IAC1E,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACpE,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACpE,IAAI,yBAAyB,CAAC,aAAa,EAAE,cAAc,CAAC;IAC5D,IAAI,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC;CACpD,CAAC;AAEJ;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAoC;IAEpC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,KAAK,MAAM,MAAM,IAAI,0BAA0B,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/s3/serve/sim-s3-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-route.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GACpB,iBAAiB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE/D;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,iBAAiB,CAEnB"}
+{"version":3,"file":"sim-s3-route.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,iBAAiB,CAEnB"}

package/dist/service/s3/serve/sim-s3-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-route.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AAyCA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,OAAe;IAEf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"sim-s3-route.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AA2CA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,OAAe;IAEf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC"}

package/dist/service/s3/sim-s3.d.ts

@@ -85,6 +85,13 @@ export declare class SimS3 {
      * Passing somewhere to reload, as `{ reload: srv }`, also watches the
      * directory: a build that writes into it reloads the connected browsers once
      * the writes stop, without the Bucket having to be filled again.
+     *
+     * A file on disk carries no metadata, so an Object read out of one is
+     * described by its extension and by what the Bucket was told about the
+     * Objects the mount replaced: a CDK `BucketDeployment` into the same Bucket
+     * says what it publishes, which is how a mounted directory of brotli files
+     * keeps its `content-encoding`. `systemMetadata` declares the rest for a key
+     * prefix, and goes over the top of anything inherited.
      */
     mountBucketFilesystem(bucketName: SimS3BucketName | string, directoryPath: string, options?: SimS3MountFilesystemOptions): void;
     /**

package/dist/service/s3/sim-s3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.d.ts","sourceRoot":"","sources":["../../../src/service/s3/sim-s3.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,KAAK,aAAa,MAAM,mCAAmC,CAAC;AAExE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAIvF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AAExH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAEhF;;;;GAIG;AACH,qBAAa,KAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsB;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgD;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAE7D,YAAY,UAAU,GAAE,eAAoB,EAkB3C;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,uDAAuD;IACjD,eAAe,CACnB,OAAO,EAAE,aAAa,CAAC,yBAAyB,EAChD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAExD;IAED,uDAAuD;IACjD,eAAe,CACnB,OAAO,EAAE,aAAa,CAAC,yBAAyB,EAChD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAExD;IAED,0DAA0D;IACpD,kBAAkB,CACtB,OAAO,EAAE,aAAa,CAAC,4BAA4B,EACnD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kCAAkC,CAAC,CAE3D;IAED,6DAA6D;IACvD,oBAAoB,CACxB,OAAO,EAAE,aAAa,CAAC,8BAA8B,EACrD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAE7D;IAED,6DAA6D;IACvD,oBAAoB,CACxB,OAAO,EAAE,aAAa,CAAC,8BAA8B,EACrD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAE7D;IAED,gEAAgE;IAC1D,uBAAuB,CAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,EACxD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,uCAAuC,CAAC,CAEhE;IAED,wDAAwD;IAClD,gBAAgB,CACpB,OAAO,EAAE,aAAa,CAAC,0BAA0B,EACjD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAEzD;IAED,2EAA2E;IACrE,kCAAkC,CACtC,OAAO,EAAE,aAAa,CAAC,4CAA4C,EACnE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kDAAkD,CAAC,CAE3E;IAED,2EAA2E;IACrE,kCAAkC,CACtC,OAAO,EAAE,aAAa,CAAC,4CAA4C,EACnE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kDAAkD,CAAC,CAE3E;IAED,kDAAkD;IAC5C,WAAW,CACf,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAEpD;IAED,gDAAgD;IAC1C,SAAS,CACb,OAAO,EAAE,aAAa,CAAC,mBAAmB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAElD;IAED,gDAAgD;IAC1C,SAAS,CACb,OAAO,EAAE,aAAa,CAAC,mBAAmB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAElD;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,oDAAoD;IAC9C,aAAa,CACjB,OAAO,EAAE,aAAa,CAAC,uBAAuB,EAC9C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAEtD;IAED,kDAAkD;IAC5C,WAAW,CACf,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAEpD;IAED,kDAAkD;IAClD,kBAAkB,CAChB,UAAU,EAAE,eAAe,GAAG,MAAM,GACnC,WAAW,GAAG,SAAS,CAEzB;IAED;;;;OAIG;IACH,+BAA+B,IAAI,SAAS,gCAAgC,EAAE,CAE7E;IAED;;;;;;OAMG;IACH,aAAa,IAAI,GAAG,CAEnB;IAED,iEAAiE;IACjE,YAAY,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,GAAG,GAAG,CAEtD;IAED,4DAA4D;IAC5D,mBAAmB,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,GAAG,GAAG,CAE7D;IAED;;OAEG;IACH,eAAe,CACb,UAAU,EAAE,eAAe,GAAG,MAAM,GACnC,wBAAwB,GAAG,SAAS,CAEtC;IAED;;;;;;OAMG;IACH,qBAAqB,CACnB,UAAU,EAAE,eAAe,GAAG,MAAM,EACpC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,2BAAgC,GACxC,IAAI,CAEN;IAED;;;;;OAKG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAE7C;IAED;;;;;;OAMG;IACH,8BAA8B,IAAI,IAAI,CAErC;IAED;;;;;;;OAOG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED,0DAA0D;IAC1D,kBAAkB,IAAI,4BAA4B,CAEjD;IAED,yEAAyE;IACzE,gBAAgB,IAAI,mBAAmB,CAEtC;CACF;AAED,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"sim-s3.d.ts","sourceRoot":"","sources":["../../../src/service/s3/sim-s3.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,KAAK,aAAa,MAAM,mCAAmC,CAAC;AAExE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAIvF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AAExH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAEhF;;;;GAIG;AACH,qBAAa,KAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsB;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgD;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAE7D,YAAY,UAAU,GAAE,eAAoB,EAkB3C;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,uDAAuD;IACjD,eAAe,CACnB,OAAO,EAAE,aAAa,CAAC,yBAAyB,EAChD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAExD;IAED,uDAAuD;IACjD,eAAe,CACnB,OAAO,EAAE,aAAa,CAAC,yBAAyB,EAChD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAExD;IAED,0DAA0D;IACpD,kBAAkB,CACtB,OAAO,EAAE,aAAa,CAAC,4BAA4B,EACnD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kCAAkC,CAAC,CAE3D;IAED,6DAA6D;IACvD,oBAAoB,CACxB,OAAO,EAAE,aAAa,CAAC,8BAA8B,EACrD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAE7D;IAED,6DAA6D;IACvD,oBAAoB,CACxB,OAAO,EAAE,aAAa,CAAC,8BAA8B,EACrD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAE7D;IAED,gEAAgE;IAC1D,uBAAuB,CAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,EACxD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,uCAAuC,CAAC,CAEhE;IAED,wDAAwD;IAClD,gBAAgB,CACpB,OAAO,EAAE,aAAa,CAAC,0BAA0B,EACjD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAEzD;IAED,2EAA2E;IACrE,kCAAkC,CACtC,OAAO,EAAE,aAAa,CAAC,4CAA4C,EACnE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kDAAkD,CAAC,CAE3E;IAED,2EAA2E;IACrE,kCAAkC,CACtC,OAAO,EAAE,aAAa,CAAC,4CAA4C,EACnE,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,kDAAkD,CAAC,CAE3E;IAED,kDAAkD;IAC5C,WAAW,CACf,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAEpD;IAED,gDAAgD;IAC1C,SAAS,CACb,OAAO,EAAE,aAAa,CAAC,mBAAmB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAElD;IAED,gDAAgD;IAC1C,SAAS,CACb,OAAO,EAAE,aAAa,CAAC,mBAAmB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAElD;IAED,mDAAmD;IAC7C,YAAY,CAChB,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAErD;IAED,oDAAoD;IAC9C,aAAa,CACjB,OAAO,EAAE,aAAa,CAAC,uBAAuB,EAC9C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAEtD;IAED,kDAAkD;IAC5C,WAAW,CACf,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAEpD;IAED,kDAAkD;IAClD,kBAAkB,CAChB,UAAU,EAAE,eAAe,GAAG,MAAM,GACnC,WAAW,GAAG,SAAS,CAEzB;IAED;;;;OAIG;IACH,+BAA+B,IAAI,SAAS,gCAAgC,EAAE,CAE7E;IAED;;;;;;OAMG;IACH,aAAa,IAAI,GAAG,CAEnB;IAED,iEAAiE;IACjE,YAAY,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,GAAG,GAAG,CAEtD;IAED,4DAA4D;IAC5D,mBAAmB,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,GAAG,GAAG,CAE7D;IAED;;OAEG;IACH,eAAe,CACb,UAAU,EAAE,eAAe,GAAG,MAAM,GACnC,wBAAwB,GAAG,SAAS,CAEtC;IAED;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CACnB,UAAU,EAAE,eAAe,GAAG,MAAM,EACpC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,2BAAgC,GACxC,IAAI,CAEN;IAED;;;;;OAKG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAE7C;IAED;;;;;;OAMG;IACH,8BAA8B,IAAI,IAAI,CAErC;IAED;;;;;;;OAOG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED,0DAA0D;IAC1D,kBAAkB,IAAI,4BAA4B,CAEjD;IAED,yEAAyE;IACzE,gBAAgB,IAAI,mBAAmB,CAEtC;CACF;AAED,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/service/s3/sim-s3.js

@@ -143,6 +143,13 @@ export class SimS3 {
      * Passing somewhere to reload, as `{ reload: srv }`, also watches the
      * directory: a build that writes into it reloads the connected browsers once
      * the writes stop, without the Bucket having to be filled again.
+     *
+     * A file on disk carries no metadata, so an Object read out of one is
+     * described by its extension and by what the Bucket was told about the
+     * Objects the mount replaced: a CDK `BucketDeployment` into the same Bucket
+     * says what it publishes, which is how a mounted directory of brotli files
+     * keeps its `content-encoding`. `systemMetadata` declares the rest for a key
+     * prefix, and goes over the top of anything inherited.
      */
     mountBucketFilesystem(bucketName, directoryPath, options = {}) {
         this.bucketAccess.mountFilesystem(bucketName, directoryPath, options);