@kensio/yulin 1.10.2 → 1.10.3

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.d.ts

@@ -1,9 +1,12 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
+import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 /**
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export declare class SimCloudFrontBehaviorConfigurator {
+    private readonly responseHeadersPolicy;
+    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
     /**
      * Configure the default Cache Behavior on a Distribution.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-behavior-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gCAAgC,EAChC,uCAAuC,EAExC,MAAM,kEAAkE,CAAC;AAG1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAGnF;;GAEG;AACH,qBAAa,iCAAiC;IAC5C;;OAEG;IACH,6BAA6B,CAC3B,YAAY,EAAE,yBAAyB,EACvC,aAAa,EAAE,uCAAuC,GAAG,SAAS,GACjE,IAAI,CAGN;IAED;;OAEG;IACH,sBAAsB,CACpB,YAAY,EAAE,yBAAyB,EACvC,aAAa,EAAE,gCAAgC,GAC9C,IAAI,CASN;CACF"}
+{"version":3,"file":"sim-cloud-front-behavior-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gCAAgC,EAChC,uCAAuC,EACxC,MAAM,kEAAkE,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAEvG;;GAEG;AACH,qBAAa,iCAAiC;IAE1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IADxC,YACmB,qBAAqB,EAAE,kCAAkC,EACxE;IAEJ;;OAEG;IACH,6BAA6B,CAC3B,YAAY,EAAE,yBAAyB,EACvC,aAAa,EAAE,uCAAuC,GAAG,SAAS,GACjE,IAAI,CAKN;IAED;;OAEG;IACH,sBAAsB,CACpB,YAAY,EAAE,yBAAyB,EACvC,aAAa,EAAE,gCAAgC,GAC9C,IAAI,CASN;CACF"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.js

@@ -1,15 +1,19 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { configureCffAssociations } from "./sim-cff-associations-configure.js";
+import { simCfBehaviorProperties } from "./sim-cf-behavior-properties.js";
 /**
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export class SimCloudFrontBehaviorConfigurator {
+    responseHeadersPolicy;
+    constructor(responseHeadersPolicy) {
+        this.responseHeadersPolicy = responseHeadersPolicy;
+    }
     /**
      * Configure the default Cache Behavior on a Distribution.
      */
     configureDefaultCacheBehavior(distribution, cacheBehavior) {
         assertDefined(cacheBehavior, "CloudFront DefaultCacheBehavior");
-        distribution.addBehavior(buildBaseBehaviorProperties(cacheBehavior));
+        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy));
     }
     /**
      * Configure a Cache Behavior on a Distribution.
@@ -18,37 +22,8 @@ export class SimCloudFrontBehaviorConfigurator {
         assertDefined(cacheBehavior.PathPattern, "CloudFront CacheBehavior PathPattern");
         distribution.addBehavior({
             pathPattern: cacheBehavior.PathPattern,
-            ...buildBaseBehaviorProperties(cacheBehavior),
+            ...simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy),
         });
     }
 }
-/**
- * Build the shared Behavior properties common to both default and named Cache
- * Behaviors. Callers add their own fields (e.g. pathPattern) on top.
- */
-function buildBaseBehaviorProperties(cacheBehavior) {
-    assertDefined(cacheBehavior.TargetOriginId, "CloudFront CacheBehavior TargetOriginId");
-    return {
-        targetOriginName: cacheBehavior.TargetOriginId,
-        allowedMethods: methodsSet(cacheBehavior.AllowedMethods, ["GET", "HEAD"]),
-        cachedMethods: methodsSet(cacheBehavior.AllowedMethods?.CachedMethods, [
-            "GET",
-            "HEAD",
-        ]),
-        ...(cacheBehavior.ViewerProtocolPolicy !== undefined && {
-            viewerProtocolPolicy: cacheBehavior.ViewerProtocolPolicy,
-        }),
-        ...(cacheBehavior.ResponseHeadersPolicyId !== undefined && {
-            responseHeadersPolicyId: cacheBehavior.ResponseHeadersPolicyId,
-        }),
-        functionAssociations: configureCffAssociations(cacheBehavior),
-    };
-}
-/**
- * Build a Set of HTTP methods from a method list config, falling back to the
- * provided defaults when no items are configured.
- */
-function methodsSet(methods, fallback) {
-    return new Set(methods?.Items ?? fallback);
-}
 //# sourceMappingURL=sim-cloud-front-behavior-configurator.js.map

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-behavior-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAE/E;;GAEG;AACH,MAAM,OAAO,iCAAiC;IAC5C;;OAEG;IACH,6BAA6B,CAC3B,YAAuC,EACvC,aAAkE;QAElE,aAAa,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QAChE,YAAY,CAAC,WAAW,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,YAAuC,EACvC,aAA+C;QAE/C,aAAa,CACX,aAAa,CAAC,WAAW,EACzB,sCAAsC,CACvC,CAAC;QACF,YAAY,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,GAAG,2BAA2B,CAAC,aAAa,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,2BAA2B,CAClC,aAEoC;IAEpC,aAAa,CACX,aAAa,CAAC,cAAc,EAC5B,yCAAyC,CAC1C,CAAC;IAEF,OAAO;QACL,gBAAgB,EAAE,aAAa,CAAC,cAAc;QAC9C,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzE,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,cAAc,EAAE,aAAa,EAAE;YACrE,KAAK;YACL,MAAM;SACP,CAAC;QACF,GAAG,CAAC,aAAa,CAAC,oBAAoB,KAAK,SAAS,IAAI;YACtD,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;SACzD,CAAC;QACF,GAAG,CAAC,aAAa,CAAC,uBAAuB,KAAK,SAAS,IAAI;YACzD,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;SAC/D,CAAC;QACF,oBAAoB,EAAE,wBAAwB,CAAC,aAAa,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,OAA4C,EAC5C,QAAkB;IAElB,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"sim-cloud-front-behavior-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAG1E;;GAEG;AACH,MAAM,OAAO,iCAAiC;IAEzB,qBAAqB;IADxC,YACmB,qBAAyD;qCAAzD,qBAAqB;IACrC,CAAC;IAEJ;;OAEG;IACH,6BAA6B,CAC3B,YAAuC,EACvC,aAAkE;QAElE,aAAa,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QAChE,YAAY,CAAC,WAAW,CACtB,uBAAuB,CAAC,aAAa,EAAE,IAAI,CAAC,qBAAqB,CAAC,CACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,YAAuC,EACvC,aAA+C;QAE/C,aAAa,CACX,aAAa,CAAC,WAAW,EACzB,sCAAsC,CACvC,CAAC;QACF,YAAY,CAAC,WAAW,CAAC;YACvB,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,GAAG,uBAAuB,CAAC,aAAa,EAAE,IAAI,CAAC,qBAAqB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts

@@ -2,6 +2,7 @@ import type { SimCloudFrontDistributionConfig } from "../../command/create-distr
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
 import type { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-configurator.js";
 import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
+import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
  *
@@ -18,8 +19,20 @@ import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavi
 export declare class SimCloudFrontDistributionConfigurator {
     private readonly originConfigurator;
     private readonly behaviorConfigurator;
+    private readonly responseHeadersPolicy;
     private readonly customErrorConfigurator;
-    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator);
+    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    /**
+     * Refuse a DistributionConfig this simulation cannot apply, before anything
+     * is applied.
+     *
+     * Only what a Behavior names outside itself is checked here, because that is
+     * what an update can find missing after the Distribution was already built
+     * against it. Everything else the configurators refuse is a property of the
+     * config itself, which `configure` reaches before it has changed anything
+     * worth undoing.
+     */
+    assertConfigurable(distributionConfig: SimCloudFrontDistributionConfig): void;
     /**
      * Configure a Distribution from its DistributionConfig.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAIpG;;;;;;;;;;;;GAYG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IALvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACtE;IAEJ;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAiCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAIvG;;;;;;;;;;;;GAYG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IANxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACvD,qBAAqB,EAAE,kCAAkC,EACxE;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAEN;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAiCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js

@@ -16,10 +16,25 @@ import { SimCloudFrontInvalidDefaultRootObject } from "../../error/sim-cloudfron
 export class SimCloudFrontDistributionConfigurator {
     originConfigurator;
     behaviorConfigurator;
+    responseHeadersPolicy;
     customErrorConfigurator = new SimCloudFrontCustomErrorConfigurator();
-    constructor(originConfigurator, behaviorConfigurator) {
+    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy) {
         this.originConfigurator = originConfigurator;
         this.behaviorConfigurator = behaviorConfigurator;
+        this.responseHeadersPolicy = responseHeadersPolicy;
+    }
+    /**
+     * Refuse a DistributionConfig this simulation cannot apply, before anything
+     * is applied.
+     *
+     * Only what a Behavior names outside itself is checked here, because that is
+     * what an update can find missing after the Distribution was already built
+     * against it. Everything else the configurators refuse is a property of the
+     * config itself, which `configure` reaches before it has changed anything
+     * worth undoing.
+     */
+    assertConfigurable(distributionConfig) {
+        this.responseHeadersPolicy.assertAllExist(distributionConfig);
     }
     /**
      * Configure a Distribution from its DistributionConfig.

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IALtB,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD;kCADvD,kBAAkB;oCAClB,oBAAoB;IACpC,CAAC;IAEJ;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IANvB,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD,EACvD,qBAAyD;kCAFzD,kBAAkB;oCAClB,oBAAoB;qCACpB,qBAAqB;IACrC,CAAC;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAmD;QAEnD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts

@@ -2,6 +2,7 @@ import type { SimCloudFrontDistributionConfig } from "../command/create-distribu
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCloudFrontRegistry } from "../registry/sim-cloud-front-registry.js";
 import type { SimCloudFrontDistribution } from "./sim-cloudfront-distribution.js";
 interface SimCloudFrontDistributionReconfigurerProperties {
@@ -9,6 +10,7 @@ interface SimCloudFrontDistributionReconfigurerProperties {
     readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
+    readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
 }
 /**
  * Applies a replacement DistributionConfig to a Distribution already in place.
@@ -27,9 +29,11 @@ export declare class SimCloudFrontDistributionReconfigurer {
      * domain names the Distribution answers on so a name the update drops is
      * free for another Distribution.
      *
-     * A name another Distribution already holds is refused before anything is
-     * changed, so a rejected update leaves the Distribution as it was rather
-     * than half replaced.
+     * Everything an update can be refused for that is not a property of the
+     * config itself — a name another Distribution already holds, a response
+     * headers policy no longer there — is checked before anything is changed, so
+     * a rejected update leaves the Distribution as it was rather than half
+     * replaced.
      */
     reconfigure(distribution: SimCloudFrontDistribution, distributionConfig: SimCloudFrontDistributionConfig): void;
 }

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-reconfigurer.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,mEAAmE,CAAC;AAClI,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAGrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAElF,UAAU,+CAA+C;IACvD,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;CACzE;AAED;;;;;;;GAOG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IAErE,YAAY,UAAU,EAAE,+CAA+C,EAGtE;IAED;;;;;;;;OAQG;IACH,WAAW,CACT,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAmBN;CACF"}
+{"version":3,"file":"sim-cf-distribution-reconfigurer.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,mEAAmE,CAAC;AAClI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACxI,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAGrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAElF,UAAU,+CAA+C;IACvD,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;CAC9E;AAED;;;;;;;GAOG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IAErE,YAAY,UAAU,EAAE,+CAA+C,EAGtE;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAoBN;CACF"}

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.js

@@ -19,13 +19,16 @@ export class SimCloudFrontDistributionReconfigurer {
      * domain names the Distribution answers on so a name the update drops is
      * free for another Distribution.
      *
-     * A name another Distribution already holds is refused before anything is
-     * changed, so a rejected update leaves the Distribution as it was rather
-     * than half replaced.
+     * Everything an update can be refused for that is not a property of the
+     * config itself — a name another Distribution already holds, a response
+     * headers policy no longer there — is checked before anything is changed, so
+     * a rejected update leaves the Distribution as it was rather than half
+     * replaced.
      */
     reconfigure(distribution, distributionConfig) {
         const { distributionId } = distribution;
         this.cloudFrontRegistry.assertAlternateDomainNamesAvailable(distributionConfig.Aliases?.Items ?? [], distributionId);
+        this.configurator.assertConfigurable(distributionConfig);
         this.cloudFrontRegistry.deregisterAlternateDomainNames(distributionId);
         distribution.replaceConfiguration(distributionConfig);
         this.configurator.configure(distribution, distributionConfig);

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-reconfigurer.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yCAAyC,EAAE,MAAM,4DAA4D,CAAC;AAWvH;;;;;;;GAOG;AACH,MAAM,OAAO,qCAAqC;IAC/B,kBAAkB,CAAwB;IAC1C,YAAY,CAAwC;IAErE,YAAY,UAA2D;QACrE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,yCAAyC,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CACT,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAExC,IAAI,CAAC,kBAAkB,CAAC,mCAAmC,CACzD,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EACvC,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAEvE,YAAY,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE9D,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cf-distribution-reconfigurer.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,yCAAyC,EAAE,MAAM,4DAA4D,CAAC;AAYvH;;;;;;;GAOG;AACH,MAAM,OAAO,qCAAqC;IAC/B,kBAAkB,CAAwB;IAC1C,YAAY,CAAwC;IAErE,YAAY,UAA2D;QACrE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,yCAAyC,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAExC,IAAI,CAAC,kBAAkB,CAAC,mCAAmC,CACzD,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EACvC,cAAc,CACf,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAEzD,IAAI,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAEvE,YAAY,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE9D,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts

@@ -80,6 +80,17 @@ export declare class SimCloudFrontNoSuchResponseHeadersPolicy extends SimCloudFr
     readonly name = "NoSuchResponseHeadersPolicy";
     constructor(message: string);
 }
+/**
+ * Simulated CloudFront InvalidResponseHeadersPolicyId error.
+ *
+ * What CloudFront answers when a Behavior's `ResponseHeadersPolicyId` names no
+ * response headers policy the account holds, at Distribution create or update
+ * time rather than when a request first needs the policy.
+ */
+export declare class SimCloudFrontInvalidResponseHeadersPolicyId extends SimCloudFrontError {
+    readonly name = "InvalidResponseHeadersPolicyId";
+    constructor(message: string);
+}
 /**
  * Simulated CloudFront ResponseHeadersPolicyAlreadyExists error.
  *

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,SAAS,EAAE,0BAA0B;IAFvD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,0BAA+B,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,SAAyB,IAAI,sBAAsB;IAEnD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,kBAAkB;IACtE,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,kBAAkB;IACrE,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,kBAAkB;IACvE,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,wCAAyC,SAAQ,kBAAkB;IAC9E,SAAyB,IAAI,iCAAiC;IAE9D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,+CAAgD,SAAQ,kBAAkB;IACrF,SAAyB,IAAI,wCAAwC;IAErE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uCAAwC,SAAQ,kBAAkB;IAC7E,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,6CAA8C,SAAQ,kBAAkB;IACnF,SAAyB,IAAI,sCAAsC;IAEnE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,oCAAqC,SAAQ,kBAAkB;IAC1E,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-cloudfront.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,SAAS,EAAE,0BAA0B;IAFvD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,0BAA+B,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,SAAyB,IAAI,sBAAsB;IAEnD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,kBAAkB;IACtE,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,kBAAkB;IACrE,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,kBAAkB;IACvE,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,wCAAyC,SAAQ,kBAAkB;IAC9E,SAAyB,IAAI,iCAAiC;IAE9D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,2CAA4C,SAAQ,kBAAkB;IACjF,SAAyB,IAAI,oCAAoC;IAEjE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,+CAAgD,SAAQ,kBAAkB;IACrF,SAAyB,IAAI,wCAAwC;IAErE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uCAAwC,SAAQ,kBAAkB;IAC7E,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,6CAA8C,SAAQ,kBAAkB;IACnF,SAAyB,IAAI,sCAAsC;IAEnE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,oCAAqC,SAAQ,kBAAkB;IAC1E,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/cloudfront/error/sim-cloudfront.error.js

@@ -93,6 +93,19 @@ export class SimCloudFrontNoSuchResponseHeadersPolicy extends SimCloudFrontError
         super(message, { httpStatusCode: 404 });
     }
 }
+/**
+ * Simulated CloudFront InvalidResponseHeadersPolicyId error.
+ *
+ * What CloudFront answers when a Behavior's `ResponseHeadersPolicyId` names no
+ * response headers policy the account holds, at Distribution create or update
+ * time rather than when a request first needs the policy.
+ */
+export class SimCloudFrontInvalidResponseHeadersPolicyId extends SimCloudFrontError {
+    name = "InvalidResponseHeadersPolicyId";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
 /**
  * Simulated CloudFront ResponseHeadersPolicyAlreadyExists error.
  *

package/dist/service/cloudfront/error/sim-cloudfront.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront.error.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA+B,EAAE;QAE1D,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IAC1C,IAAI,GAAG,kBAAkB,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,kBAAkB;IAC7C,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IACzC,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,kBAAkB;IAC5C,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,kBAAkB;IAC9C,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wCAAyC,SAAQ,kBAAkB;IACrD,IAAI,GAAG,6BAA6B,CAAC;IAE9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+CAAgD,SAAQ,kBAAkB;IAC5D,IAAI,GAAG,oCAAoC,CAAC;IAErE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uCAAwC,SAAQ,kBAAkB;IACpD,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6CAA8C,SAAQ,kBAAkB;IAC1D,IAAI,GAAG,kCAAkC,CAAC;IAEnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oCAAqC,SAAQ,kBAAkB;IACjD,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cloudfront.error.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA+B,EAAE;QAE1D,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IAC1C,IAAI,GAAG,kBAAkB,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,kBAAkB;IAC7C,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IACzC,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,kBAAkB;IAC5C,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,kBAAkB;IAC9C,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wCAAyC,SAAQ,kBAAkB;IACrD,IAAI,GAAG,6BAA6B,CAAC;IAE9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,2CAA4C,SAAQ,kBAAkB;IACxD,IAAI,GAAG,gCAAgC,CAAC;IAEjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+CAAgD,SAAQ,kBAAkB;IAC5D,IAAI,GAAG,oCAAoC,CAAC;IAErE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uCAAwC,SAAQ,kBAAkB;IACpD,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6CAA8C,SAAQ,kBAAkB;IAC1D,IAAI,GAAG,kCAAkC,CAAC;IAEnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oCAAqC,SAAQ,kBAAkB;IACjD,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.d.ts

@@ -0,0 +1,27 @@
+/**
+ * One entry of a CORS policy's `AccessControlAllowOrigins` list.
+ *
+ * CloudFront allows the wildcard on its own, meaning every Origin, and as the
+ * leftmost subdomain of a host, meaning any one subdomain of it. It allows the
+ * wildcard nowhere else: not as a top-level domain (`example.*`), to the right
+ * of a subdomain (`test.*.example.org`), within one (`*test.example.org`), or
+ * inside a term (`exa*mple.org`).
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html
+ */
+/**
+ * Whether an allow-list entry places its wildcard where CloudFront allows one.
+ *
+ * An entry with no wildcard is always well formed, and so is the bare wildcard.
+ */
+export declare function simCfCorsOriginPatternIsValid(pattern: string): boolean;
+/**
+ * Whether one allow-list entry matches the `Origin` a request carried.
+ *
+ * A wildcard entry stands for exactly one label, as a wildcard certificate
+ * does, so `*.example.org` matches `https://site.example.org` and does not
+ * match `https://deep.site.example.org`. An entry naming no scheme matches the
+ * host whichever scheme the request used.
+ */
+export declare function simCfCorsOriginPatternMatches(pattern: string, requestOrigin: string): boolean;
+//# sourceMappingURL=sim-cf-cors-origin-pattern.d.ts.map

package/dist/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-cors-origin-pattern.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQtE;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAoBT"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.js

@@ -0,0 +1,70 @@
+/**
+ * One entry of a CORS policy's `AccessControlAllowOrigins` list.
+ *
+ * CloudFront allows the wildcard on its own, meaning every Origin, and as the
+ * leftmost subdomain of a host, meaning any one subdomain of it. It allows the
+ * wildcard nowhere else: not as a top-level domain (`example.*`), to the right
+ * of a subdomain (`test.*.example.org`), within one (`*test.example.org`), or
+ * inside a term (`exa*mple.org`).
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html
+ */
+/**
+ * Whether an allow-list entry places its wildcard where CloudFront allows one.
+ *
+ * An entry with no wildcard is always well formed, and so is the bare wildcard.
+ */
+export function simCfCorsOriginPatternIsValid(pattern) {
+    if (!pattern.includes("*") || pattern === "*") {
+        return true;
+    }
+    const { host } = splitOrigin(pattern);
+    return host.startsWith("*.") && !host.slice(2).includes("*");
+}
+/**
+ * Whether one allow-list entry matches the `Origin` a request carried.
+ *
+ * A wildcard entry stands for exactly one label, as a wildcard certificate
+ * does, so `*.example.org` matches `https://site.example.org` and does not
+ * match `https://deep.site.example.org`. An entry naming no scheme matches the
+ * host whichever scheme the request used.
+ */
+export function simCfCorsOriginPatternMatches(pattern, requestOrigin) {
+    if (pattern === requestOrigin) {
+        return true;
+    }
+    if (!pattern.includes("*")) {
+        return false;
+    }
+    const patternOrigin = splitOrigin(pattern);
+    const origin = splitOrigin(requestOrigin);
+    if (patternOrigin.scheme !== undefined &&
+        patternOrigin.scheme !== origin.scheme) {
+        return false;
+    }
+    return hostMatches(patternOrigin.host, origin.host);
+}
+/**
+ * Whether a `*.example.org` host pattern covers the host of a request Origin.
+ */
+function hostMatches(patternHost, host) {
+    if (!patternHost.startsWith("*.")) {
+        return false;
+    }
+    const suffix = patternHost.slice(1);
+    if (!host.endsWith(suffix)) {
+        return false;
+    }
+    const label = host.slice(0, -suffix.length);
+    return label.length > 0 && !label.includes(".");
+}
+/**
+ * An Origin split into the scheme it names, if any, and the rest of it.
+ */
+function splitOrigin(origin) {
+    const separator = origin.indexOf("://");
+    return separator === -1
+        ? { scheme: undefined, host: origin }
+        : { scheme: origin.slice(0, separator), host: origin.slice(separator + 3) };
+}
+//# sourceMappingURL=sim-cf-cors-origin-pattern.js.map

package/dist/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-cors-origin-pattern.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-cors-origin-pattern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEtC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,aAAqB;IAErB,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAE1C,IACE,aAAa,CAAC,MAAM,KAAK,SAAS;QAClC,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,WAAmB,EAAE,IAAY;IACpD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAExC,OAAO,SAAS,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QACrC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;AAChF,CAAC"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.d.ts

@@ -0,0 +1,44 @@
+interface SimCloudFrontResponseHeadersPolicyCorsProperties {
+    readonly allowCredentials: boolean;
+    readonly allowHeaders: readonly string[];
+    readonly allowMethods: readonly string[];
+    readonly allowOrigins: readonly string[];
+    readonly exposeHeaders?: readonly string[];
+    readonly maxAgeSec?: number;
+    readonly originOverride: boolean;
+}
+/**
+ * The CORS section of a response headers policy.
+ *
+ * CloudFront reflects the viewer request's `Origin` header against the
+ * configured allow list rather than sending the list itself, so the headers
+ * this adds depend on the request they answer: a request naming an Origin
+ * the list does not allow gets none of them, the same as CloudFront sending
+ * none rather than a mismatched one.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-cors
+ */
+export declare class SimCloudFrontResponseHeadersPolicyCors {
+    private readonly allowCredentials;
+    private readonly allowHeaders;
+    private readonly allowMethods;
+    private readonly allowOrigins;
+    private readonly exposeHeaders;
+    private readonly maxAgeSec;
+    private readonly originOverride;
+    constructor(properties: SimCloudFrontResponseHeadersPolicyCorsProperties);
+    /**
+     * Set this policy's CORS headers on a response, for the `Origin` header a
+     * viewer request carried.
+     *
+     * `OriginOverride` decides the whole section rather than one header at a
+     * time, unlike a custom or security header: without it, an Origin response
+     * carrying any CORS header at all keeps every header this section would have
+     * set off the response, whether or not the policy names that header.
+     */
+    apply(headers: Headers, requestOrigin: string | null): void;
+    private resolveAllowOrigin;
+    private resolvedAllowMethods;
+}
+export {};
+//# sourceMappingURL=sim-cf-response-headers-policy-cors.d.ts.map

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-response-headers-policy-cors.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AA4BA,UAAU,gDAAgD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,YAAY,UAAU,EAAE,gDAAgD,EAQvE;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CA8C1D;IAED,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,oBAAoB;CAK7B"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.js

@@ -0,0 +1,111 @@
+import { simCfCorsOriginPatternMatches } from "./sim-cf-cors-origin-pattern.js";
+const allAccessControlMethods = [
+    "GET",
+    "DELETE",
+    "HEAD",
+    "OPTIONS",
+    "PATCH",
+    "POST",
+    "PUT",
+];
+/**
+ * The response headers a CORS section decides, whether or not it sets each.
+ *
+ * Without `OriginOverride`, an Origin response carrying any one of these keeps
+ * the whole section off, so the set matters rather than just the ones the
+ * policy would have added.
+ */
+const corsResponseHeaders = [
+    "Access-Control-Allow-Origin",
+    "Access-Control-Allow-Methods",
+    "Access-Control-Allow-Headers",
+    "Access-Control-Allow-Credentials",
+    "Access-Control-Expose-Headers",
+    "Access-Control-Max-Age",
+];
+/**
+ * The CORS section of a response headers policy.
+ *
+ * CloudFront reflects the viewer request's `Origin` header against the
+ * configured allow list rather than sending the list itself, so the headers
+ * this adds depend on the request they answer: a request naming an Origin
+ * the list does not allow gets none of them, the same as CloudFront sending
+ * none rather than a mismatched one.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-cors
+ */
+export class SimCloudFrontResponseHeadersPolicyCors {
+    allowCredentials;
+    allowHeaders;
+    allowMethods;
+    allowOrigins;
+    exposeHeaders;
+    maxAgeSec;
+    originOverride;
+    constructor(properties) {
+        this.allowCredentials = properties.allowCredentials;
+        this.allowHeaders = properties.allowHeaders;
+        this.allowMethods = properties.allowMethods;
+        this.allowOrigins = properties.allowOrigins;
+        this.exposeHeaders = properties.exposeHeaders ?? [];
+        this.maxAgeSec = properties.maxAgeSec;
+        this.originOverride = properties.originOverride;
+    }
+    /**
+     * Set this policy's CORS headers on a response, for the `Origin` header a
+     * viewer request carried.
+     *
+     * `OriginOverride` decides the whole section rather than one header at a
+     * time, unlike a custom or security header: without it, an Origin response
+     * carrying any CORS header at all keeps every header this section would have
+     * set off the response, whether or not the policy names that header.
+     */
+    apply(headers, requestOrigin) {
+        if (!this.originOverride &&
+            corsResponseHeaders.some((n) => headers.has(n))) {
+            return;
+        }
+        const allowOrigin = this.resolveAllowOrigin(requestOrigin);
+        if (allowOrigin === undefined) {
+            return;
+        }
+        headers.set("Access-Control-Allow-Origin", allowOrigin);
+        // CloudFront varies the cache on Origin whenever the header it sent back
+        // was chosen for this request rather than good for every request, so a
+        // cached response for one Origin is never served to a different one.
+        if (allowOrigin !== "*") {
+            headers.append("Vary", "Origin");
+        }
+        headers.set("Access-Control-Allow-Methods", this.resolvedAllowMethods().join(","));
+        headers.set("Access-Control-Allow-Headers", this.allowHeaders.join(","));
+        // A false Access-Control-Allow-Credentials is not a header value the
+        // fetch spec recognises, so CloudFront leaves it off rather than sending
+        // a value meaning the same as absence.
+        if (this.allowCredentials) {
+            headers.set("Access-Control-Allow-Credentials", "true");
+        }
+        if (this.exposeHeaders.length > 0) {
+            headers.set("Access-Control-Expose-Headers", this.exposeHeaders.join(","));
+        }
+        if (this.maxAgeSec !== undefined) {
+            headers.set("Access-Control-Max-Age", String(this.maxAgeSec));
+        }
+    }
+    resolveAllowOrigin(requestOrigin) {
+        if (this.allowOrigins.includes("*")) {
+            return "*";
+        }
+        if (requestOrigin === null) {
+            return undefined;
+        }
+        return this.allowOrigins.some((pattern) => simCfCorsOriginPatternMatches(pattern, requestOrigin))
+            ? requestOrigin
+            : undefined;
+    }
+    resolvedAllowMethods() {
+        return this.allowMethods.includes("ALL")
+            ? allAccessControlMethods
+            : this.allowMethods;
+    }
+}
+//# sourceMappingURL=sim-cf-response-headers-policy-cors.js.map

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-response-headers-policy-cors.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAEhF,MAAM,uBAAuB,GAAG;IAC9B,KAAK;IACL,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;CACG,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG;IAC1B,6BAA6B;IAC7B,8BAA8B;IAC9B,8BAA8B;IAC9B,kCAAkC;IAClC,+BAA+B;IAC/B,wBAAwB;CAChB,CAAC;AAYX;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,gBAAgB,CAAU;IAC1B,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,aAAa,CAAoB;IACjC,SAAS,CAAqB;IAC9B,cAAc,CAAU;IAEzC,YAAY,UAA4D;QACtE,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAgB,EAAE,aAA4B;QAClD,IACE,CAAC,IAAI,CAAC,cAAc;YACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC/C,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;QAExD,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,GAAG,CACT,8BAA8B,EAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CACtC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzE,qEAAqE;QACrE,yEAAyE;QACzE,uCAAuC;QACvC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CACT,+BAA+B,EAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7B,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,aAA4B;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,CACtD;YACC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,oBAAoB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.d.ts

@@ -1,11 +1,15 @@
 import type { Brand } from "../../../util/brand.type.js";
 import type { SimCloudFrontResponseHeader } from "./sim-cf-response-header.js";
+import type { SimCloudFrontResponseHeadersPolicyCors } from "./sim-cf-response-headers-policy-cors.js";
 export type SimCloudFrontResponseHeadersPolicyId = Brand<string, "SimCloudFrontResponseHeadersPolicyId">;
 interface SimCloudFrontResponseHeadersPolicyProperties {
     readonly id?: SimCloudFrontResponseHeadersPolicyId;
     readonly name: string;
     readonly customHeaders?: readonly SimCloudFrontResponseHeader[];
     readonly headersToRemove?: readonly string[];
+    readonly securityHeaders?: readonly SimCloudFrontResponseHeader[];
+    readonly serverTiming?: SimCloudFrontResponseHeader | undefined;
+    readonly cors?: SimCloudFrontResponseHeadersPolicyCors | undefined;
 }
 /**
  * Simulated CloudFront response headers policy.
@@ -21,14 +25,18 @@ export declare class SimCloudFrontResponseHeadersPolicy {
     readonly name: string;
     readonly customHeaders: readonly SimCloudFrontResponseHeader[];
     readonly headersToRemove: readonly string[];
+    readonly securityHeaders: readonly SimCloudFrontResponseHeader[];
+    readonly serverTiming: SimCloudFrontResponseHeader | undefined;
+    readonly cors: SimCloudFrontResponseHeadersPolicyCors | undefined;
     constructor(properties: SimCloudFrontResponseHeadersPolicyProperties);
     /**
-     * Return the response this policy makes of one the Origin gave back.
+     * Return the response this policy makes of one the Origin gave back, for
+     * the `Origin` header the viewer request carried.
      *
      * The body is passed straight through. Only the headers change, so a response
      * whose body has already been read stays readable.
      */
-    apply(response: Response): Response;
+    apply(response: Response, requestOrigin?: string | null): Response;
 }
 export type SimCloudFrontResponseHeadersPolicyMap = Map<SimCloudFrontResponseHeadersPolicyId, SimCloudFrontResponseHeadersPolicy>;
 export {};