@kensio/yulin 1.20.16 → 1.21.0

package/dist/service/cloudformation/deploy/sim-cfn-template-file-loader.d.ts

@@ -5,6 +5,7 @@ import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import type { SimCfnTemplateFileWatchOptions } from "../watch/sim-cfn-template-watch.type.js";
 import { type SimCfnTemplateFileTransform } from "./sim-cfn-template-file-transform.js";
+import type { SimCfnResourceOrder } from "../stack/deploy/sim-cfn-resource-order.js";
 export interface SimCloudFormationDeployTemplateFileProperties {
     readonly templatePath: string;
     readonly stackName?: SimCloudFormationStackName | string | undefined;
@@ -19,6 +20,16 @@ export interface SimCloudFormationDeployTemplateFileProperties {
      * policy denying an Account's root principal then denies.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The order Resources with no dependency between them are created in.
+     *
+     * CloudFormation is free to create them either way round, and the template's
+     * own order is what a deployment does by default. `reversed` starts each
+     * dependency batch from its last Resource, so a Stack that only deploys in
+     * the order its template happens to be written fails here rather than in the
+     * account. Declared dependencies and `DependsOn` are honoured either way.
+     */
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
     /**
      * Adapt the parsed template before it is deployed, and again every time a
      * watched file changes.
@@ -53,6 +64,7 @@ export interface SimCfnLoadedTemplateFile {
     readonly parameters?: Record<string, string> | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
     readonly caller?: SimAwsCaller | undefined;
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
 }
 /**

package/dist/service/cloudformation/deploy/sim-cfn-template-file-loader.js

@@ -16,7 +16,7 @@ export class SimCfnTemplateFileLoader {
      */
     async load(properties) {
         const deployment = simCfnTemplateFileDeployment(properties);
-        const { templatePath, parameters, bindings, caller } = deployment;
+        const { templatePath, parameters, bindings, caller, resourceOrder } = deployment;
         const stackName = deployment.stackName ?? stackNameFromTemplatePath(templatePath);
         // The template is named to a `yulin watch` supervisor, so re-synthing a
         // stack restarts the process that deployed it. Nothing happens outside
@@ -32,6 +32,7 @@ export class SimCfnTemplateFileLoader {
             parameters,
             bindings,
             caller,
+            resourceOrder,
             cdkOutContext,
         };
     }

package/dist/service/cloudformation/resource/cfn/cloudfront/sim-cloudfront-cache-policy-cfn.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCloudFrontCachePolicy } from "../../../../cloudfront/cache-policy/sim-cf-cache-policy.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimCloudFrontCachePolicyCfnProperties {
+    readonly policy: SimCloudFrontCachePolicy;
+}
+/**
+ * CloudFormation-facing behavior for an AWS::CloudFront::CachePolicy Resource.
+ */
+export declare class SimCloudFrontCachePolicyCfn implements SimCfnResourceValueAdapter {
+    private readonly policy;
+    constructor(properties: SimCloudFrontCachePolicyCfnProperties);
+    /**
+     * CloudFormation Ref for AWS::CloudFront::CachePolicy returns the policy ID,
+     * which is what a Cache Behavior's CachePolicyId wants.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * CloudFormation attributes for AWS::CloudFront::CachePolicy.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};

package/dist/service/cloudformation/resource/cfn/cloudfront/sim-cloudfront-cache-policy-cfn.js

@@ -0,0 +1,30 @@
+/**
+ * CloudFormation-facing behavior for an AWS::CloudFront::CachePolicy Resource.
+ */
+export class SimCloudFrontCachePolicyCfn {
+    policy;
+    constructor(properties) {
+        this.policy = properties.policy;
+    }
+    /**
+     * CloudFormation Ref for AWS::CloudFront::CachePolicy returns the policy ID,
+     * which is what a Cache Behavior's CachePolicyId wants.
+     */
+    refValue() {
+        return this.policy.id;
+    }
+    /**
+     * CloudFormation attributes for AWS::CloudFront::CachePolicy.
+     */
+    attributeValue(attributeName) {
+        switch (attributeName) {
+            case "Id": {
+                return this.policy.id;
+            }
+            default: {
+                /* v8 ignore next */
+                return `${this.policy.id}.${attributeName}`;
+            }
+        }
+    }
+}

package/dist/service/cloudformation/resource/cfn/cloudfront/sim-cloudfront-cfn-value-adapter.js

@@ -4,6 +4,10 @@ import { SimCloudFrontFunction } from "../../../../cloudfront/cff/sim-cloudfront
 import { SimCloudFrontFunctionCfn } from "./sim-cloudfront-function-cfn.js";
 import { SimCloudFrontResponseHeadersPolicy } from "../../../../cloudfront/response-headers-policy/sim-cf-response-headers-policy.js";
 import { SimCloudFrontResponseHeadersPolicyCfn } from "./sim-cloudfront-rh-policy-cfn.js";
+import { SimCloudFrontCachePolicy } from "../../../../cloudfront/cache-policy/sim-cf-cache-policy.js";
+import { SimCloudFrontCachePolicyCfn } from "./sim-cloudfront-cache-policy-cfn.js";
+import { SimCloudFrontOriginRequestPolicy } from "../../../../cloudfront/origin-request-policy/sim-cf-origin-request-policy.js";
+import { SimCloudFrontOriginRequestPolicyCfn } from "./sim-cloudfront-orp-cfn.js";
 import { SimCloudFrontOriginAccessControl } from "../../../../cloudfront/origin-access-control/sim-cf-origin-access-control.js";
 import { SimCloudFrontOriginAccessControlCfn } from "./sim-cloudfront-oac-cfn.js";
 import { SimCloudFrontKeyValueStore } from "../../../../cloudfront/key-value-store/sim-cf-key-value-store.js";
@@ -28,6 +32,18 @@ export function cloudFrontValueAdapter(properties) {
             policy: properties.simResource,
         });
     }
+    if (properties.type === "AWS::CloudFront::CachePolicy" &&
+        properties.simResource instanceof SimCloudFrontCachePolicy) {
+        return new SimCloudFrontCachePolicyCfn({
+            policy: properties.simResource,
+        });
+    }
+    if (properties.type === "AWS::CloudFront::OriginRequestPolicy" &&
+        properties.simResource instanceof SimCloudFrontOriginRequestPolicy) {
+        return new SimCloudFrontOriginRequestPolicyCfn({
+            policy: properties.simResource,
+        });
+    }
     if (properties.type === "AWS::CloudFront::OriginAccessControl" &&
         properties.simResource instanceof SimCloudFrontOriginAccessControl) {
         return new SimCloudFrontOriginAccessControlCfn({

package/dist/service/cloudformation/resource/cfn/cloudfront/sim-cloudfront-orp-cfn.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCloudFrontOriginRequestPolicy } from "../../../../cloudfront/origin-request-policy/sim-cf-origin-request-policy.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimCloudFrontOriginRequestPolicyCfnProperties {
+    readonly policy: SimCloudFrontOriginRequestPolicy;
+}
+/**
+ * CloudFormation-facing behavior for an AWS::CloudFront::OriginRequestPolicy
+ * Resource.
+ */
+export declare class SimCloudFrontOriginRequestPolicyCfn implements SimCfnResourceValueAdapter {
+    private readonly policy;
+    constructor(properties: SimCloudFrontOriginRequestPolicyCfnProperties);
+    /**
+     * CloudFormation Ref for AWS::CloudFront::OriginRequestPolicy returns the
+     * policy ID, which is what a Cache Behavior's OriginRequestPolicyId wants.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * CloudFormation attributes for AWS::CloudFront::OriginRequestPolicy.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};

package/dist/service/cloudformation/resource/cfn/cloudfront/sim-cloudfront-orp-cfn.js

@@ -0,0 +1,31 @@
+/**
+ * CloudFormation-facing behavior for an AWS::CloudFront::OriginRequestPolicy
+ * Resource.
+ */
+export class SimCloudFrontOriginRequestPolicyCfn {
+    policy;
+    constructor(properties) {
+        this.policy = properties.policy;
+    }
+    /**
+     * CloudFormation Ref for AWS::CloudFront::OriginRequestPolicy returns the
+     * policy ID, which is what a Cache Behavior's OriginRequestPolicyId wants.
+     */
+    refValue() {
+        return this.policy.id;
+    }
+    /**
+     * CloudFormation attributes for AWS::CloudFront::OriginRequestPolicy.
+     */
+    attributeValue(attributeName) {
+        switch (attributeName) {
+            case "Id": {
+                return this.policy.id;
+            }
+            default: {
+                /* v8 ignore next */
+                return `${this.policy.id}.${attributeName}`;
+            }
+        }
+    }
+}

package/dist/service/cloudformation/resource/name/sim-cfn-generated-resource-name.d.ts

@@ -6,18 +6,25 @@ interface SimCfnGeneratedResourceNameProperties {
 /**
  * The name CloudFormation gives a Resource whose template does not name it.
  *
- * Real CloudFormation generates `<stack name>-<logical ID>-<random>`. The
- * random part is left out here so a test can predict the name, which is the one
- * thing a template cannot rely on for real. Everything else follows AWS: two
+ * CloudFormation generates `<stack name>-<logical ID>-<random>`. The tail here
+ * is a hash of the other two parts rather than random characters. The same
+ * template deployed under the same stack name generates the same name again,
+ * and a test can read it back and compare. Everything else follows AWS. Two
  * stacks deploying the same template get different names, because the stack
  * name is part of it.
  *
- * Each service has its own limit on how long a name can be, so a long stack
- * name and logical ID together are trimmed to fit. The start is kept, since
- * that is where the stack name is, and the trimmed name ends in a hash of the
- * untrimmed one. CDK puts its own disambiguating hash at the end of a logical
- * ID, which is exactly what trimming cuts off, so without that two Resources in
- * one stack could end up asking for the same name.
+ * Each service has its own limit on how long a name can be, and CloudFormation
+ * reserves the last thirteen characters of it for the tail and its hyphen. What
+ * is left over goes to the stack name and the logical ID either side of one
+ * more hyphen, half each, the stack name rounding up and either taking what the
+ * other does not use. Where a service allows 64 characters, a long stack name
+ * and a long logical ID keep 25 each. The rule is inferred from names real
+ * CloudFormation produced, since AWS documents none of it.
+ *
+ * The tail is derived from the whole untrimmed name. That is what keeps two
+ * trimmed names apart. CDK puts its own disambiguating hash at the end of a
+ * logical ID, which is exactly what trimming cuts off, so without that two
+ * Resources in one stack could end up asking for the same name.
  */
 export declare class SimCfnGeneratedResourceName {
     private readonly stackName;
@@ -29,12 +36,22 @@ export declare class SimCfnGeneratedResourceName {
      */
     get value(): string;
     /**
-     * The tail a trimmed name ends with, derived from the whole untrimmed name.
+     * The stack name and logical ID, trimmed to the room the tail leaves them.
+     *
+     * A name that already fits is kept whole. One that does not gives each part
+     * half of what is left. The stack name is trimmed rather than lost, since
+     * that is the part an IAM policy scoped by resource prefix matches on.
+     */
+    private trimmed;
+    /**
+     * The tail the name ends with, derived from the whole untrimmed name.
      *
      * It is a hash rather than the random characters real CloudFormation uses, so
-     * the name stays the same between deployments of the same template.
+     * the name stays the same between deployments of the same template. Hex
+     * suits every service, since one that only allows lowercase takes it as it
+     * is.
      */
-    private distinguisher;
+    private tail;
     /**
      * The name before it is trimmed to the length the service allows.
      *

package/dist/service/cloudformation/resource/name/sim-cfn-generated-resource-name.js

@@ -1,24 +1,31 @@
 import { createHash } from "node:crypto";
 /**
- * How many characters of the hash of the untrimmed name a trimmed one ends
- * with, so two long names that start the same do not become one name.
+ * How many characters the tail on the end of a generated name is, which is as
+ * many as the random characters real CloudFormation ends one with.
  */
-const distinguisherLength = 8;
+const tailLength = 12;
 /**
  * The name CloudFormation gives a Resource whose template does not name it.
  *
- * Real CloudFormation generates `<stack name>-<logical ID>-<random>`. The
- * random part is left out here so a test can predict the name, which is the one
- * thing a template cannot rely on for real. Everything else follows AWS: two
+ * CloudFormation generates `<stack name>-<logical ID>-<random>`. The tail here
+ * is a hash of the other two parts rather than random characters. The same
+ * template deployed under the same stack name generates the same name again,
+ * and a test can read it back and compare. Everything else follows AWS. Two
  * stacks deploying the same template get different names, because the stack
  * name is part of it.
  *
- * Each service has its own limit on how long a name can be, so a long stack
- * name and logical ID together are trimmed to fit. The start is kept, since
- * that is where the stack name is, and the trimmed name ends in a hash of the
- * untrimmed one. CDK puts its own disambiguating hash at the end of a logical
- * ID, which is exactly what trimming cuts off, so without that two Resources in
- * one stack could end up asking for the same name.
+ * Each service has its own limit on how long a name can be, and CloudFormation
+ * reserves the last thirteen characters of it for the tail and its hyphen. What
+ * is left over goes to the stack name and the logical ID either side of one
+ * more hyphen, half each, the stack name rounding up and either taking what the
+ * other does not use. Where a service allows 64 characters, a long stack name
+ * and a long logical ID keep 25 each. The rule is inferred from names real
+ * CloudFormation produced, since AWS documents none of it.
+ *
+ * The tail is derived from the whole untrimmed name. That is what keeps two
+ * trimmed names apart. CDK puts its own disambiguating hash at the end of a
+ * logical ID, which is exactly what trimming cuts off, so without that two
+ * Resources in one stack could end up asking for the same name.
  */
 export class SimCfnGeneratedResourceName {
     stackName;
@@ -33,24 +40,48 @@ export class SimCfnGeneratedResourceName {
      * The generated name.
      */
     get value() {
+        const tail = this.tail();
+        if (this.maximumLength <= tailLength + 1) {
+            return tail.slice(0, this.maximumLength);
+        }
+        return `${this.trimmed()}-${tail}`;
+    }
+    /**
+     * The stack name and logical ID, trimmed to the room the tail leaves them.
+     *
+     * A name that already fits is kept whole. One that does not gives each part
+     * half of what is left. The stack name is trimmed rather than lost, since
+     * that is the part an IAM policy scoped by resource prefix matches on.
+     */
+    trimmed() {
         const composed = this.composed();
-        if (composed.length <= this.maximumLength) {
+        const budget = this.maximumLength - tailLength - 1;
+        if (composed.length <= budget) {
             return composed;
         }
-        const kept = composed.slice(0, this.maximumLength - distinguisherLength - 1);
-        return `${kept}-${this.distinguisher(composed)}`;
+        if (this.stackName === undefined || this.stackName === "") {
+            return composed.slice(0, budget);
+        }
+        const shared = budget - 1;
+        const stackNameKept = Math.min(this.stackName.length, shared - Math.min(this.logicalId.length, Math.floor(shared / 2)));
+        return [
+            this.stackName.slice(0, stackNameKept),
+            this.logicalId.slice(0, shared - stackNameKept),
+        ].join("-");
     }
     /**
-     * The tail a trimmed name ends with, derived from the whole untrimmed name.
+     * The tail the name ends with, derived from the whole untrimmed name.
      *
      * It is a hash rather than the random characters real CloudFormation uses, so
-     * the name stays the same between deployments of the same template.
+     * the name stays the same between deployments of the same template. Hex
+     * suits every service, since one that only allows lowercase takes it as it
+     * is.
      */
-    distinguisher(composed) {
+    tail() {
         return createHash("sha1")
-            .update(composed)
+            .update(this.composed())
             .digest("hex")
-            .slice(0, distinguisherLength);
+            .slice(0, tailLength);
     }
     /**
      * The name before it is trimmed to the length the service allows.

package/dist/service/cloudformation/stack/deploy/sim-cfn-resource-order.d.ts

@@ -0,0 +1,19 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+/**
+ * The order the Resources in one dependency batch are started in.
+ *
+ * CloudFormation creates Resources with no dependency between them in whatever
+ * order it likes, so a template whose Resources only work in the order it wrote
+ * them deploys some of the time. `template` is the order the template declared,
+ * which is what a deployment does unless it is asked for something else.
+ * `reversed` starts each batch from its last Resource, which is the other order
+ * a pair with nothing between them could be created in.
+ *
+ * Dependencies are unaffected either way: a Resource still waits for everything
+ * it refers to and everything its `DependsOn` names.
+ */
+export type SimCfnResourceOrder = "template" | "reversed";
+/**
+ * The Resources of one batch, in the order the deployment asked for.
+ */
+export declare function simCfnOrderedResources(resources: readonly SimCfnResource[], order: SimCfnResourceOrder | undefined): readonly SimCfnResource[];

package/dist/service/cloudformation/stack/deploy/sim-cfn-resource-order.js

@@ -0,0 +1,6 @@
+/**
+ * The Resources of one batch, in the order the deployment asked for.
+ */
+export function simCfnOrderedResources(resources, order) {
+    return order === "reversed" ? resources.toReversed() : resources;
+}

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-batch-creator.d.ts

@@ -3,12 +3,14 @@ import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnBinding } from "../../bind/sim-cfn-binding.js";
 import type { SimCdkOutContext } from "../../cdk/sim-cdk-out-context.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+import { type SimCfnResourceOrder } from "./sim-cfn-resource-order.js";
 interface SimCfnStackResourceBatchCreatorProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
     readonly caller?: SimAwsCaller | undefined;
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
 }
 /**
  * Creates one dependency-ready batch of Stack Resources.
@@ -17,6 +19,7 @@ interface SimCfnStackResourceBatchCreatorProperties {
  * class owns only the batch execution details:
  *
  * - create all Resources in the batch in parallel
+ * - start them in the order the deployment asked for
  * - pass the shared Stack creation context to each Resource
  *
  * It does not choose which Resources are ready, retry incomplete Resources, or
@@ -30,12 +33,16 @@ export declare class SimCfnStackResourceBatchCreator {
     private readonly cdkOutContext;
     private readonly bindings;
     private readonly caller;
+    private readonly resourceOrder;
     constructor(properties: SimCfnStackResourceBatchCreatorProperties);
     /**
      * Create the supplied Resources concurrently.
      *
      * Each Resource still owns its own create lifecycle and status transitions.
      * This method only waits for the batch to settle.
+     *
+     * Nothing in the batch depends on anything else in it, so the order they
+     * start in is the deployment's to choose.
      */
     create(resources: readonly SimCfnResource[]): Promise<void>;
 }

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-batch-creator.js

@@ -1,3 +1,4 @@
+import { simCfnOrderedResources, } from "./sim-cfn-resource-order.js";
 /**
  * Creates one dependency-ready batch of Stack Resources.
  *
@@ -5,6 +6,7 @@
  * class owns only the batch execution details:
  *
  * - create all Resources in the batch in parallel
+ * - start them in the order the deployment asked for
  * - pass the shared Stack creation context to each Resource
  *
  * It does not choose which Resources are ready, retry incomplete Resources, or
@@ -18,22 +20,27 @@ export class SimCfnStackResourceBatchCreator {
     cdkOutContext;
     bindings;
     caller;
+    resourceOrder;
     constructor(properties) {
-        const { simAws, resources, cdkOutContext, bindings, caller } = properties;
+        const { simAws, resources, cdkOutContext, bindings, caller, resourceOrder, } = properties;
         this.simAws = simAws;
         this.resources = resources;
         this.cdkOutContext = cdkOutContext;
         this.bindings = bindings;
         this.caller = caller;
+        this.resourceOrder = resourceOrder;
     }
     /**
      * Create the supplied Resources concurrently.
      *
      * Each Resource still owns its own create lifecycle and status transitions.
      * This method only waits for the batch to settle.
+     *
+     * Nothing in the batch depends on anything else in it, so the order they
+     * start in is the deployment's to choose.
      */
     async create(resources) {
-        await Promise.all(resources.map(async (resource) => {
+        await Promise.all(simCfnOrderedResources(resources, this.resourceOrder).map(async (resource) => {
             await resource.create({
                 simAws: this.simAws,
                 resources: this.resources,

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
 import type { SimCdkOutContext } from "../../cdk/sim-cdk-out-context.js";
 import type { SimCfnBinding } from "../../bind/sim-cfn-binding.js";
+import type { SimCfnResourceOrder } from "./sim-cfn-resource-order.js";
 interface SimCfnStackResourceCreatorProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
@@ -10,6 +11,7 @@ interface SimCfnStackResourceCreatorProperties {
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
     readonly caller?: SimAwsCaller | undefined;
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
 }
 /**
  * Orchestrates dependency-ordered creation of a Stack's simulated Resources.

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-creator.js

@@ -21,7 +21,7 @@ export class SimCfnStackResourceCreator {
     stackName;
     batchCreator;
     constructor(properties) {
-        const { simAws, resources, stackName, cdkOutContext, bindings, caller } = properties;
+        const { simAws, resources, stackName, cdkOutContext, bindings, caller, resourceOrder, } = properties;
         this.resources = resources;
         this.stackName = stackName;
         this.batchCreator = new SimCfnStackResourceBatchCreator({
@@ -30,6 +30,7 @@ export class SimCfnStackResourceCreator {
             cdkOutContext,
             bindings,
             caller,
+            resourceOrder,
         });
     }
     /**

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.d.ts

@@ -6,6 +6,7 @@ import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimCdkOutContext } from "../cdk/sim-cdk-out-context.js";
 import type { SimCfnResource } from "../resource/sim-cfn-resource.js";
 import type { SimCfnTemplate } from "../template/sim-cfn-template.js";
+import type { SimCfnResourceOrder } from "./deploy/sim-cfn-resource-order.js";
 import { SimCfnStackUpdater } from "./update/sim-cfn-stack-updater.js";
 import type { SimCloudFormationStackName } from "./sim-cfn-stack.js";
 interface SimCfnStackUpdateProperties {
@@ -25,6 +26,10 @@ interface SimCfnStackResourceOperationsProperties {
      * caller leaves each service to decide the request as the Account root.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The order Resources with no dependency between them are started in.
+     */
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
 }
 /**
  * What a Stack can ask simulated AWS to do with its Resources.
@@ -44,6 +49,7 @@ export declare class SimCfnStackResourceOperations {
     private readonly accountRegionScope;
     private readonly stackName;
     private readonly bindings;
+    private readonly resourceOrder;
     private cdkOutContext;
     private caller;
     constructor(properties: SimCfnStackResourceOperationsProperties);

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.js

@@ -20,16 +20,18 @@ export class SimCfnStackResourceOperations {
     accountRegionScope;
     stackName;
     bindings;
+    resourceOrder;
     cdkOutContext;
     caller;
     constructor(properties) {
-        const { simAws, accountRegionScope, stackName, cdkOutContext, bindings, caller, } = properties;
+        const { simAws, accountRegionScope, stackName, cdkOutContext, bindings, caller, resourceOrder, } = properties;
         this.simAws = simAws;
         this.accountRegionScope = accountRegionScope;
         this.stackName = stackName;
         this.cdkOutContext = cdkOutContext;
         this.bindings = bindings;
         this.caller = caller;
+        this.resourceOrder = resourceOrder;
     }
     /**
      * Take on what an update brings with it, for this and every later operation.
@@ -106,6 +108,7 @@ export class SimCfnStackResourceOperations {
             cdkOutContext: this.cdkOutContext,
             bindings: this.bindings,
             caller: this.caller,
+            resourceOrder: this.resourceOrder,
         });
     }
     deleter(resources) {

package/dist/service/cloudformation/stack/sim-cfn-stack.js

@@ -38,7 +38,7 @@ export class SimCfnStack {
     stackOutputs;
     cfnTemplate;
     constructor(properties) {
-        const { simAws, accountRegionScope, background, stackName, template, cdkOutContext, bindings, caller, exports, } = properties;
+        const { simAws, accountRegionScope, background, stackName, template, cdkOutContext, bindings, caller, resourceOrder, exports, } = properties;
         this.background = background;
         this.stackName = stackName;
         this.stackOutputs = new SimCfnStackOutputs({ stackName, exports });
@@ -61,6 +61,7 @@ export class SimCfnStack {
             cdkOutContext,
             bindings,
             caller,
+            resourceOrder,
         });
         this.lifecycle = new SimCfnStackDeploymentLifecycle({
             background,

package/dist/service/cloudformation/stack/sim-cfn-stack.type.d.ts

@@ -7,6 +7,7 @@ import type { SimCfnTemplate } from "../template/sim-cfn-template.js";
 import type { SimCdkOutContext } from "../cdk/sim-cdk-out-context.js";
 import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimCfnExports } from "../export/sim-cfn-exports.js";
+import type { SimCfnResourceOrder } from "./deploy/sim-cfn-resource-order.js";
 export type SimCloudFormationStackName = Brand<string, "SimCloudFormationStackName">;
 export type SimCloudFormationStackStatus = "REVIEW_IN_PROGRESS" | "CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "CREATE_FAILED" | "UPDATE_IN_PROGRESS" | "UPDATE_COMPLETE" | "UPDATE_FAILED" | "DELETE_IN_PROGRESS" | "DELETE_COMPLETE" | "DELETE_FAILED";
 export interface SimCfnStackUpdateProperties {
@@ -37,6 +38,11 @@ export interface SimCloudFormationStackProperties {
      * simulation.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The order this Stack starts Resources with no dependency between them in.
+     * The template's own order unless the deployment asked for another one.
+     */
+    readonly resourceOrder?: SimCfnResourceOrder | undefined;
     /**
      * The export names published in the Account and Region this Stack deploys
      * into. This Stack publishes its own Outputs here and reads the ones its

package/dist/service/cloudfront/behaviour/sim-cloud-front-behavior.d.ts

@@ -5,6 +5,10 @@ export interface SimCloudFrontBehavior {
     pathPattern?: string;
     targetOriginName: string;
     allowedMethods: Set<string>;
+    /**
+     * The methods this Behavior caches a response for. A request made with any
+     * other method reaches the Origin every time.
+     */
     cachedMethods: Set<string>;
     viewerProtocolPolicy?: "allow-all" | "redirect-to-https" | "https-only";
     originPath?: string;
@@ -12,6 +16,18 @@ export interface SimCloudFrontBehavior {
      * The response headers policy applied to every response this Behavior serves.
      */
     responseHeadersPolicyId?: string | undefined;
+    /**
+     * The cache policy this Behavior was given, whether a template created it or
+     * AWS manages it. It decides what the Distribution's cache keys on, and a
+     * Behavior naming no policy this simulation holds caches nothing.
+     */
+    cachePolicyId?: string | undefined;
+    /**
+     * The origin request policy this Behavior was given, whether a template
+     * created it or AWS manages it. What reaches the Origin does not read it
+     * yet.
+     */
+    originRequestPolicyId?: string | undefined;
     functionAssociations?: undefined | {
         viewerRequest?: SimArn;
         viewerResponse?: SimArn;

package/dist/service/cloudfront/cache/sim-cf-accept-encoding.d.ts

@@ -0,0 +1,11 @@
+import type { SimCloudFrontCacheKey } from "../cache-policy/sim-cf-cache-key.js";
+/**
+ * The compression the policy keys on, as CloudFront's normalized
+ * `Accept-Encoding`.
+ *
+ * This is what caches one object twice, once compressed and once not, without
+ * the header being in the policy's whitelist. An encoding the viewer accepts
+ * but the policy does not enable is left out, since CloudFront would not have
+ * asked the Origin for it.
+ */
+export declare function simCfNormalizedAcceptEncoding(headers: Headers, cacheKey: SimCloudFrontCacheKey): string[];