@kensio/yulin 1.20.16 → 1.21.0

package/dist/service/cloudfront/controller/error/sim-cf-custom-error-responder.js

@@ -5,6 +5,10 @@
  * matching the response page path decides which Origin it comes from. That is
  * what lets a Distribution keep its error pages somewhere other than the
  * content that failed, as CloudFront does.
+ *
+ * A rule carrying `ErrorCachingMinTTL` alone has no page. The Origin's error
+ * reaches the viewer, and the rule says how long the Distribution holds it
+ * for.
  */
 export class SimCfCustomErrorResponder {
     behaviourResolver;
@@ -18,14 +22,14 @@ export class SimCfCustomErrorResponder {
      * Distribution configures one for its status.
      */
     async apply(request, distribution, response) {
-        const customErrorResponse = distribution.customErrorResponses.find((candidate) => candidate.errorCode === response.status);
-        if (customErrorResponse === undefined) {
+        const page = distribution.customErrorResponses.find((candidate) => candidate.errorCode === response.status)?.page;
+        if (page === undefined) {
             return response;
         }
-        return await this.responsePage(request, distribution, customErrorResponse);
+        return await this.responsePage(request, distribution, page);
     }
-    async responsePage(request, distribution, customErrorResponse) {
-        const pageRequest = this.pageRequest(request, customErrorResponse);
+    async responsePage(request, distribution, page) {
+        const pageRequest = this.pageRequest(request, page);
         const behaviour = this.behaviourResolver.resolve(pageRequest, distribution);
         const pageResponse = await this.originFetcher.fetch(pageRequest, distribution, behaviour);
         // A response page that is itself unavailable leaves the viewer with the
@@ -34,13 +38,13 @@ export class SimCfCustomErrorResponder {
             return pageResponse;
         }
         return new Response(pageResponse.body, {
-            status: customErrorResponse.responseCode,
+            status: page.responseCode,
             headers: pageResponse.headers,
         });
     }
-    pageRequest(request, customErrorResponse) {
+    pageRequest(request, page) {
         const url = new URL(request.url);
-        url.pathname = customErrorResponse.responsePagePath;
+        url.pathname = page.responsePagePath;
         url.search = "";
         // The response page is fetched without a body, whatever the viewer sent,
         // so headers describing the viewer's body would describe nothing.

package/dist/service/cloudfront/controller/origin/sim-cf-origin-stage.d.ts

@@ -25,8 +25,8 @@ export interface SimCfOriginStageResult {
  * Fetches from the Behavior's Origin, running the Lambda@Edge functions on
  * either side of the fetch.
  *
- * Real CloudFront runs the origin events on a cache miss only. Nothing here
- * caches, so every request is a miss and both events run every time.
+ * Real CloudFront runs the origin events on a cache miss only, and so does
+ * this. A request the Distribution's cache answers never reaches this stage.
  */
 export declare class SimCfOriginStage {
     private readonly originFetcher;

package/dist/service/cloudfront/controller/origin/sim-cf-origin-stage.js

@@ -2,8 +2,8 @@
  * Fetches from the Behavior's Origin, running the Lambda@Edge functions on
  * either side of the fetch.
  *
- * Real CloudFront runs the origin events on a cache miss only. Nothing here
- * caches, so every request is a miss and both events run every time.
+ * Real CloudFront runs the origin events on a cache miss only, and so does
+ * this. A request the Distribution's cache answers never reaches this stage.
  */
 export class SimCfOriginStage {
     originFetcher;

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.d.ts

@@ -1,12 +1,12 @@
 import type { SimCloudFrontControllerDependencies } from "./dependency/sim-cf-controller-dependency.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, put the request through the Distribution's web ACL,
- * apply the default root object, resolve the matching Behavior, run
- * viewer-request hooks, fetch from the Origin with the origin hooks either
- * side of the fetch, replace an error response with the Distribution's custom
- * error page, apply the Behavior's response headers policy, then run
- * viewer-response hooks where the Origin did not answer with an error.
+ * read the edge it arrived at, route to a Distribution, put the request
+ * through the Distribution's web ACL, apply the default root object, resolve
+ * the matching Behavior, run viewer-request hooks, answer from that edge's
+ * cache or from the Origin, say which of the two answered in `X-Cache`, apply
+ * the Behavior's response headers policy, then run viewer-response hooks where
+ * the Origin did not answer with an error.
  *
  * A viewer hook is a CloudFront Function or a Lambda@Edge function. A Behavior
  * carries at most one of the two kinds at the viewer events, which

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.js

@@ -1,12 +1,14 @@
+import { simCfCacheStatusResponse } from "../cache/sim-cf-cache-status.js";
+import { simCfRequestEdge } from "../cache/sim-cf-edge.js";
 import { simCfDefaultRootObjectRequest } from "./root-object/sim-cf-default-root-object-request.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, put the request through the Distribution's web ACL,
- * apply the default root object, resolve the matching Behavior, run
- * viewer-request hooks, fetch from the Origin with the origin hooks either
- * side of the fetch, replace an error response with the Distribution's custom
- * error page, apply the Behavior's response headers policy, then run
- * viewer-response hooks where the Origin did not answer with an error.
+ * read the edge it arrived at, route to a Distribution, put the request
+ * through the Distribution's web ACL, apply the default root object, resolve
+ * the matching Behavior, run viewer-request hooks, answer from that edge's
+ * cache or from the Origin, say which of the two answered in `X-Cache`, apply
+ * the Behavior's response headers policy, then run viewer-response hooks where
+ * the Origin did not answer with an error.
  *
  * A viewer hook is a CloudFront Function or a Lambda@Edge function. A Behavior
  * carries at most one of the two kinds at the viewer events, which
@@ -27,7 +29,11 @@ export class SimCloudFrontRequestPipeline {
      * Process one incoming request and produce the response the caller sees.
      */
     async handle(request) {
-        let requestReference = request;
+        // The edge is read first and its header taken off the request. A web ACL
+        // rule, an edge function and the Origin therefore never see an instruction
+        // that was addressed to the simulator.
+        const edge = simCfRequestEdge(request);
+        let requestReference = edge.request;
         const route = this.stages.distroRouter.routeForRequest(requestReference);
         if (route === undefined) {
             return new Response("Suitable sim CloudFront Distribution not found", {
@@ -62,25 +68,34 @@ export class SimCloudFrontRequestPipeline {
             return edgeResult;
         }
         requestReference = edgeResult;
-        // Fetch from the Origin, running the origin-request and origin-response
-        // Lambda@Edge functions on either side of the fetch. An origin-request
-        // function that answered with a response of its own leaves the Origin
-        // unread, and the response takes the Origin response's place from here on.
-        const originResult = await this.stages.originStage.fetch(requestReference, distro, behaviour);
-        // Replace an Origin error with the Distribution's custom error page, if it
-        // configures one for that status.
-        const errorResponse = await this.stages.customErrorResponder.apply(requestReference, distro, originResult.response);
+        // Answer from this edge's cache where it holds the key, and from the Origin
+        // where it does not. A miss runs the origin-request and origin-response
+        // Lambda@Edge functions either side of the fetch, has an Origin error
+        // replaced with the Distribution's custom error page, and is stored.
+        const content = await this.stages.contentStage.serve({
+            request: requestReference,
+            cloudFront,
+            distribution: distro,
+            behaviour,
+            edgeId: edge.edgeId,
+        });
+        // Say whether the cache or the Origin answered, as CloudFront says it. A
+        // hit already carries the `Age` the cache measured. Both go on ahead of the
+        // response headers policy and the viewer-response event. A policy can take
+        // either off, and a viewer-response function sees them.
+        const served = simCfCacheStatusResponse(content.response, content.cacheHit);
         // Apply the Behavior's response headers policy, if it names one. CloudFront
         // does this after the response leaves the cache and before the
         // viewer-response event, so the custom error page above carries the
         // policy's headers and a viewer-response function that runs sees them.
-        const response = this.stages.responseHeadersApplicator.apply(cloudFront, requestReference, errorResponse, behaviour);
+        const response = this.stages.responseHeadersApplicator.apply(cloudFront, requestReference, served, behaviour);
         // CloudFront runs no viewer-response function when the Origin answered
         // 400 or higher, for either kind of function. The status that decides it
-        // is the one the Origin returned, so neither a custom error response
-        // carrying `ResponseCode: 200` above nor an origin-response function that
-        // replaced the status brings the function back.
-        if (originResult.originStatus >= 400) {
+        // is the one the Origin returned, or the one it returned when the cache
+        // entry being served was stored. Neither a custom error response carrying
+        // `ResponseCode: 200` nor an origin-response function that replaced the
+        // status brings the function back.
+        if (content.originStatus >= 400) {
             return response;
         }
         // Handle viewer-response CFF, if any.

package/dist/service/cloudfront/custom-error/sim-cloudfront-custom-error-response.d.ts

@@ -9,15 +9,33 @@ export declare const simCloudFrontCustomErrorCodes: ReadonlySet<number>;
  * page for an error without telling the viewer anything went wrong.
  */
 export declare const simCloudFrontCustomErrorResponseCodes: ReadonlySet<number>;
+/**
+ * How long CloudFront holds an error for where a rule names no
+ * `ErrorCachingMinTTL`, and where a Distribution configures no rule for the
+ * status at all.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/HTTPStatusCodes.html
+ */
+export declare const simCloudFrontDefaultErrorCachingMinTtlSec = 10;
+/**
+ * The page a custom error response serves in place of the Origin's error.
+ *
+ * CloudFront pairs `ResponsePagePath` and `ResponseCode`. A rule carries both
+ * or neither.
+ */
+export interface SimCloudFrontCustomErrorPage {
+    readonly responsePagePath: string;
+    readonly responseCode: number;
+}
 /**
  * A custom error response of a sim CloudFront Distribution.
  *
- * Only a rule with a response page reaches this model. A rule carrying nothing
- * but `ErrorCode` and `ErrorCachingMinTTL` configures error caching, which the
- * simulator has nothing to cache with.
+ * A rule carrying nothing but `ErrorCode` and `ErrorCachingMinTTL` configures
+ * how long the Origin's own error is held for. It has no page, and the viewer
+ * gets what the Origin answered.
  */
 export interface SimCloudFrontCustomErrorResponse {
     readonly errorCode: number;
-    readonly responsePagePath: string;
-    readonly responseCode: number;
+    readonly errorCachingMinTtlSec: number;
+    readonly page?: SimCloudFrontCustomErrorPage | undefined;
 }

package/dist/service/cloudfront/custom-error/sim-cloudfront-custom-error-response.js

@@ -11,3 +11,11 @@ export const simCloudFrontCustomErrorCodes = new Set([
  * page for an error without telling the viewer anything went wrong.
  */
 export const simCloudFrontCustomErrorResponseCodes = new Set([200, ...simCloudFrontCustomErrorCodes]);
+/**
+ * How long CloudFront holds an error for where a rule names no
+ * `ErrorCachingMinTTL`, and where a Distribution configures no rule for the
+ * status at all.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/HTTPStatusCodes.html
+ */
+export const simCloudFrontDefaultErrorCachingMinTtlSec = 10;

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-cache-policy.d.ts

@@ -0,0 +1,18 @@
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
+/**
+ * Refuses a Cache Behavior naming a cache policy this simulation does not
+ * hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export declare class SimCfBehaviorCachePolicy {
+    private readonly policies;
+    constructor(policies: SimCloudFrontCachePolicyRegistry);
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId: string | undefined, cachePolicyId: string | undefined): void;
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-cache-policy.js

@@ -0,0 +1,30 @@
+import { SimCloudFrontNoSuchCachePolicy } from "../../error/sim-cloudfront.error.js";
+/**
+ * Refuses a Cache Behavior naming a cache policy this simulation does not
+ * hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export class SimCfBehaviorCachePolicy {
+    policies;
+    constructor(policies) {
+        this.policies = policies;
+    }
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId, cachePolicyId) {
+        if (cachePolicyId === undefined ||
+            this.policies.byId(cachePolicyId) !== undefined) {
+            return;
+        }
+        throw new SimCloudFrontNoSuchCachePolicy(`Sim CloudFront Behavior for Origin ${targetOriginId} names cache ` +
+            `policy ${cachePolicyId}, which does not exist. A Behavior names one ` +
+            `of CloudFront's seven managed policies, or a policy an ` +
+            `AWS::CloudFront::CachePolicy Resource created in this simulation. A ` +
+            `policy ID from a real account is neither.`);
+    }
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-origin-request-policy.d.ts

@@ -0,0 +1,18 @@
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "../../origin-request-policy/sim-cf-origin-request-policy-registry.js";
+/**
+ * Refuses a Cache Behavior naming an origin request policy this simulation
+ * does not hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export declare class SimCfBehaviorOriginRequestPolicy {
+    private readonly policies;
+    constructor(policies: SimCloudFrontOriginRequestPolicyRegistry);
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId: string | undefined, originRequestPolicyId: string | undefined): void;
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-origin-request-policy.js

@@ -0,0 +1,30 @@
+import { SimCloudFrontNoSuchOriginRequestPolicy } from "../../error/sim-cf-origin-request-policy.error.js";
+/**
+ * Refuses a Cache Behavior naming an origin request policy this simulation
+ * does not hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export class SimCfBehaviorOriginRequestPolicy {
+    policies;
+    constructor(policies) {
+        this.policies = policies;
+    }
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId, originRequestPolicyId) {
+        if (originRequestPolicyId === undefined ||
+            this.policies.byId(originRequestPolicyId) !== undefined) {
+            return;
+        }
+        throw new SimCloudFrontNoSuchOriginRequestPolicy(`Sim CloudFront Behavior for Origin ${targetOriginId} names origin ` +
+            `request policy ${originRequestPolicyId}, which does not exist. A ` +
+            `Behavior names one of CloudFront's eight managed policies, or a ` +
+            `policy an AWS::CloudFront::OriginRequestPolicy Resource created in ` +
+            `this simulation. A policy ID from a real account is neither.`);
+    }
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.d.ts

@@ -0,0 +1,30 @@
+import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig, SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
+import type { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import type { SimCfBehaviorOriginRequestPolicy } from "./sim-cf-behavior-origin-request-policy.js";
+import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+/**
+ * The policies a Cache Behavior names, and whether this simulation holds them.
+ *
+ * A Behavior points at a response headers policy, a cache policy and an origin
+ * request policy by ID, and all three live outside the Distribution. Each one
+ * is checked the same way and at the same moment, so they are asked together.
+ */
+export declare class SimCfBehaviorPolicies {
+    private readonly responseHeadersPolicy;
+    private readonly cachePolicy;
+    private readonly originRequestPolicy;
+    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, cachePolicy: SimCfBehaviorCachePolicy, originRequestPolicy: SimCfBehaviorOriginRequestPolicy);
+    /**
+     * Refuse every Behavior of a DistributionConfig that names a policy which is
+     * not there, without touching the Distribution.
+     *
+     * An update replaces a Distribution's whole configuration, so this runs
+     * before any of it is torn down. A refusal here leaves the Distribution
+     * serving exactly what it served before, rather than half replaced.
+     */
+    assertAllExist(distributionConfig: SimCloudFrontDistributionConfig): void;
+    /**
+     * Refuse one Behavior naming a policy of any kind which is not there.
+     */
+    assertExists(behavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig): void;
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.js

@@ -0,0 +1,44 @@
+/**
+ * The policies a Cache Behavior names, and whether this simulation holds them.
+ *
+ * A Behavior points at a response headers policy, a cache policy and an origin
+ * request policy by ID, and all three live outside the Distribution. Each one
+ * is checked the same way and at the same moment, so they are asked together.
+ */
+export class SimCfBehaviorPolicies {
+    responseHeadersPolicy;
+    cachePolicy;
+    originRequestPolicy;
+    constructor(responseHeadersPolicy, cachePolicy, originRequestPolicy) {
+        this.responseHeadersPolicy = responseHeadersPolicy;
+        this.cachePolicy = cachePolicy;
+        this.originRequestPolicy = originRequestPolicy;
+    }
+    /**
+     * Refuse every Behavior of a DistributionConfig that names a policy which is
+     * not there, without touching the Distribution.
+     *
+     * An update replaces a Distribution's whole configuration, so this runs
+     * before any of it is torn down. A refusal here leaves the Distribution
+     * serving exactly what it served before, rather than half replaced.
+     */
+    assertAllExist(distributionConfig) {
+        const behaviors = [
+            distributionConfig.DefaultCacheBehavior,
+            ...(distributionConfig.CacheBehaviors?.Items ?? []),
+        ];
+        for (const behavior of behaviors) {
+            if (behavior !== undefined) {
+                this.assertExists(behavior);
+            }
+        }
+    }
+    /**
+     * Refuse one Behavior naming a policy of any kind which is not there.
+     */
+    assertExists(behavior) {
+        this.responseHeadersPolicy.assertExists(behavior.TargetOriginId, behavior.ResponseHeadersPolicyId);
+        this.cachePolicy.assertExists(behavior.TargetOriginId, behavior.CachePolicyId);
+        this.originRequestPolicy.assertExists(behavior.TargetOriginId, behavior.OriginRequestPolicyId);
+    }
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-properties.d.ts

@@ -1,8 +1,8 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontBehavior } from "../../behaviour/sim-cloud-front-behavior.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 /**
  * Build the Behavior properties common to both the default Cache Behavior and
  * a named one. Callers add their own fields, such as the path pattern, on top.
  */
-export declare function simCfBehaviorProperties(cacheBehavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy): SimCloudFrontBehavior;
+export declare function simCfBehaviorProperties(cacheBehavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig, policies: SimCfBehaviorPolicies): SimCloudFrontBehavior;

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-properties.js

@@ -6,10 +6,10 @@ import { assertConsistentQuantity } from "../../command/sim-cf-list-quantity.js"
  * Build the Behavior properties common to both the default Cache Behavior and
  * a named one. Callers add their own fields, such as the path pattern, on top.
  */
-export function simCfBehaviorProperties(cacheBehavior, responseHeadersPolicy) {
-    const { TargetOriginId, ResponseHeadersPolicyId } = cacheBehavior;
+export function simCfBehaviorProperties(cacheBehavior, policies) {
+    const { TargetOriginId, ResponseHeadersPolicyId, CachePolicyId, OriginRequestPolicyId, } = cacheBehavior;
     assertDefined(TargetOriginId, "CloudFront CacheBehavior TargetOriginId");
-    responseHeadersPolicy.assertExists(TargetOriginId, ResponseHeadersPolicyId);
+    policies.assertExists(cacheBehavior);
     return {
         targetOriginName: TargetOriginId,
         allowedMethods: methodsSet("AllowedMethods", cacheBehavior.AllowedMethods, [
@@ -23,6 +23,12 @@ export function simCfBehaviorProperties(cacheBehavior, responseHeadersPolicy) {
         ...(ResponseHeadersPolicyId !== undefined && {
             responseHeadersPolicyId: ResponseHeadersPolicyId,
         }),
+        ...(CachePolicyId !== undefined && {
+            cachePolicyId: CachePolicyId,
+        }),
+        ...(OriginRequestPolicyId !== undefined && {
+            originRequestPolicyId: OriginRequestPolicyId,
+        }),
         functionAssociations: configureCffAssociations(cacheBehavior),
         lambdaFunctionAssociations: configureEdgeAssociations(cacheBehavior),
     };

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-response-headers-policy.d.ts

@@ -1,4 +1,3 @@
-import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 /**
  * Refuses a Cache Behavior naming a response headers policy this simulation
@@ -12,15 +11,6 @@ import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-
 export declare class SimCfBehaviorResponseHeadersPolicy {
     private readonly policies;
     constructor(policies: SimCloudFrontResponseHeadersPolicyRegistry);
-    /**
-     * Refuse every Behavior of a DistributionConfig that names a policy which is
-     * not there, without touching the Distribution.
-     *
-     * An update replaces a Distribution's whole configuration, so this runs
-     * before any of it is torn down: a refusal here leaves the Distribution
-     * serving exactly what it served before, rather than half replaced.
-     */
-    assertAllExist(distributionConfig: SimCloudFrontDistributionConfig): void;
     /**
      * Refuse one Behavior naming a policy which is not there.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-response-headers-policy.js

@@ -13,25 +13,6 @@ export class SimCfBehaviorResponseHeadersPolicy {
     constructor(policies) {
         this.policies = policies;
     }
-    /**
-     * Refuse every Behavior of a DistributionConfig that names a policy which is
-     * not there, without touching the Distribution.
-     *
-     * An update replaces a Distribution's whole configuration, so this runs
-     * before any of it is torn down: a refusal here leaves the Distribution
-     * serving exactly what it served before, rather than half replaced.
-     */
-    assertAllExist(distributionConfig) {
-        const behaviors = [
-            distributionConfig.DefaultCacheBehavior,
-            ...(distributionConfig.CacheBehaviors?.Items ?? []),
-        ];
-        for (const behavior of behaviors) {
-            if (behavior !== undefined) {
-                this.assertExists(behavior.TargetOriginId, behavior.ResponseHeadersPolicyId);
-            }
-        }
-    }
     /**
      * Refuse one Behavior naming a policy which is not there.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts

@@ -1,6 +1,8 @@
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "../../origin-request-policy/sim-cf-origin-request-policy-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -9,6 +11,8 @@ interface SimCloudFrontConfiguratorProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,4 +1,7 @@
 import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
+import { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import { SimCfBehaviorOriginRequestPolicy } from "./sim-cf-behavior-origin-request-policy.js";
+import { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -10,6 +13,9 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * same set of configurators.
  */
 export function makeSimCloudFrontDistributionConfigurator(properties) {
-    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies);
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy, new SimCfDistributionWebAcl(properties.webAclResolver));
+    const behaviorPolicies = new SimCfBehaviorPolicies(new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies), new SimCfBehaviorCachePolicy(properties.cachePolicies), new SimCfBehaviorOriginRequestPolicy(properties.originRequestPolicies));
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, {
+        cachePolicies: properties.cachePolicies,
+        originRequestPolicies: properties.originRequestPolicies,
+    }, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(behaviorPolicies), behaviorPolicies, new SimCfDistributionWebAcl(properties.webAclResolver));
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.d.ts

@@ -1,12 +1,12 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 /**
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export declare class SimCloudFrontBehaviorConfigurator {
-    private readonly responseHeadersPolicy;
-    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    private readonly policies;
+    constructor(policies: SimCfBehaviorPolicies);
     /**
      * Configure the default Cache Behavior on a Distribution.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.js

@@ -4,16 +4,16 @@ import { simCfBehaviorProperties } from "./sim-cf-behavior-properties.js";
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export class SimCloudFrontBehaviorConfigurator {
-    responseHeadersPolicy;
-    constructor(responseHeadersPolicy) {
-        this.responseHeadersPolicy = responseHeadersPolicy;
+    policies;
+    constructor(policies) {
+        this.policies = policies;
     }
     /**
      * Configure the default Cache Behavior on a Distribution.
      */
     configureDefaultCacheBehavior(distribution, cacheBehavior) {
         assertDefined(cacheBehavior, "CloudFront DefaultCacheBehavior");
-        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy));
+        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.policies));
     }
     /**
      * Configure a Cache Behavior on a Distribution.
@@ -22,7 +22,7 @@ export class SimCloudFrontBehaviorConfigurator {
         assertDefined(cacheBehavior.PathPattern, "CloudFront CacheBehavior PathPattern");
         distribution.addBehavior({
             pathPattern: cacheBehavior.PathPattern,
-            ...simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy),
+            ...simCfBehaviorProperties(cacheBehavior, this.policies),
         });
     }
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-custom-error-configurator.d.ts

@@ -4,15 +4,25 @@ import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.j
  * Applies custom error response configuration to a sim CloudFront
  * Distribution.
  *
- * CloudFront pairs `ResponsePagePath` and `ResponseCode`: a rule carrying one
+ * CloudFront pairs `ResponsePagePath` and `ResponseCode`. A rule carrying one
  * without the other is refused rather than half applied. A rule carrying
- * neither only configures error caching, which this simulator does not model,
- * so it is accepted and left out of the Distribution's request handling.
+ * neither configures error caching alone, and it reaches the Distribution with
+ * no page for the viewer to be sent.
  */
 export declare class SimCloudFrontCustomErrorConfigurator {
     /**
      * Configure one custom error response on a Distribution.
      */
     configure(distribution: SimCloudFrontDistribution, customErrorResponse: SimCloudFrontCustomErrorResponseConfig): void;
+    /**
+     * How long the rule holds its error for, which CloudFront defaults to ten
+     * seconds.
+     *
+     * A template can write a number as a string, and that one is read as the
+     * seconds it spells. Anything else falls back to the default. The
+     * alternative would be a stack that fails to deploy over the seconds an
+     * error is held for.
+     */
+    private errorCachingMinTtlSec;
     private responseCode;
 }