@kensio/yulin 1.20.17 → 1.21.0

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.d.ts

@@ -1,17 +1,19 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig, SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import type { SimCfBehaviorOriginRequestPolicy } from "./sim-cf-behavior-origin-request-policy.js";
 import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 /**
  * The policies a Cache Behavior names, and whether this simulation holds them.
  *
- * A Behavior points at a response headers policy and a cache policy by ID, and
- * both live outside the Distribution. Each one is checked the same way and at
- * the same moment, so they are asked together.
+ * A Behavior points at a response headers policy, a cache policy and an origin
+ * request policy by ID, and all three live outside the Distribution. Each one
+ * is checked the same way and at the same moment, so they are asked together.
  */
 export declare class SimCfBehaviorPolicies {
     private readonly responseHeadersPolicy;
     private readonly cachePolicy;
-    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, cachePolicy: SimCfBehaviorCachePolicy);
+    private readonly originRequestPolicy;
+    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, cachePolicy: SimCfBehaviorCachePolicy, originRequestPolicy: SimCfBehaviorOriginRequestPolicy);
     /**
      * Refuse every Behavior of a DistributionConfig that names a policy which is
      * not there, without touching the Distribution.
@@ -22,7 +24,7 @@ export declare class SimCfBehaviorPolicies {
      */
     assertAllExist(distributionConfig: SimCloudFrontDistributionConfig): void;
     /**
-     * Refuse one Behavior naming a policy of either kind which is not there.
+     * Refuse one Behavior naming a policy of any kind which is not there.
      */
     assertExists(behavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig): void;
 }

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.js

@@ -1,16 +1,18 @@
 /**
  * The policies a Cache Behavior names, and whether this simulation holds them.
  *
- * A Behavior points at a response headers policy and a cache policy by ID, and
- * both live outside the Distribution. Each one is checked the same way and at
- * the same moment, so they are asked together.
+ * A Behavior points at a response headers policy, a cache policy and an origin
+ * request policy by ID, and all three live outside the Distribution. Each one
+ * is checked the same way and at the same moment, so they are asked together.
  */
 export class SimCfBehaviorPolicies {
     responseHeadersPolicy;
     cachePolicy;
-    constructor(responseHeadersPolicy, cachePolicy) {
+    originRequestPolicy;
+    constructor(responseHeadersPolicy, cachePolicy, originRequestPolicy) {
         this.responseHeadersPolicy = responseHeadersPolicy;
         this.cachePolicy = cachePolicy;
+        this.originRequestPolicy = originRequestPolicy;
     }
     /**
      * Refuse every Behavior of a DistributionConfig that names a policy which is
@@ -32,10 +34,11 @@ export class SimCfBehaviorPolicies {
         }
     }
     /**
-     * Refuse one Behavior naming a policy of either kind which is not there.
+     * Refuse one Behavior naming a policy of any kind which is not there.
      */
     assertExists(behavior) {
         this.responseHeadersPolicy.assertExists(behavior.TargetOriginId, behavior.ResponseHeadersPolicyId);
         this.cachePolicy.assertExists(behavior.TargetOriginId, behavior.CachePolicyId);
+        this.originRequestPolicy.assertExists(behavior.TargetOriginId, behavior.OriginRequestPolicyId);
     }
 }

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-properties.js

@@ -7,7 +7,7 @@ import { assertConsistentQuantity } from "../../command/sim-cf-list-quantity.js"
  * a named one. Callers add their own fields, such as the path pattern, on top.
  */
 export function simCfBehaviorProperties(cacheBehavior, policies) {
-    const { TargetOriginId, ResponseHeadersPolicyId, CachePolicyId } = cacheBehavior;
+    const { TargetOriginId, ResponseHeadersPolicyId, CachePolicyId, OriginRequestPolicyId, } = cacheBehavior;
     assertDefined(TargetOriginId, "CloudFront CacheBehavior TargetOriginId");
     policies.assertExists(cacheBehavior);
     return {
@@ -26,6 +26,9 @@ export function simCfBehaviorProperties(cacheBehavior, policies) {
         ...(CachePolicyId !== undefined && {
             cachePolicyId: CachePolicyId,
         }),
+        ...(OriginRequestPolicyId !== undefined && {
+            originRequestPolicyId: OriginRequestPolicyId,
+        }),
         functionAssociations: configureCffAssociations(cacheBehavior),
         lambdaFunctionAssociations: configureEdgeAssociations(cacheBehavior),
     };

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts

@@ -2,6 +2,7 @@ import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "../../origin-request-policy/sim-cf-origin-request-policy-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -11,6 +12,7 @@ interface SimCloudFrontConfiguratorProperties {
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
     readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,5 +1,6 @@
 import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 import { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import { SimCfBehaviorOriginRequestPolicy } from "./sim-cf-behavior-origin-request-policy.js";
 import { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
@@ -12,6 +13,9 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * same set of configurators.
  */
 export function makeSimCloudFrontDistributionConfigurator(properties) {
-    const behaviorPolicies = new SimCfBehaviorPolicies(new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies), new SimCfBehaviorCachePolicy(properties.cachePolicies));
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(behaviorPolicies), behaviorPolicies, new SimCfDistributionWebAcl(properties.webAclResolver));
+    const behaviorPolicies = new SimCfBehaviorPolicies(new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies), new SimCfBehaviorCachePolicy(properties.cachePolicies), new SimCfBehaviorOriginRequestPolicy(properties.originRequestPolicies));
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, {
+        cachePolicies: properties.cachePolicies,
+        originRequestPolicies: properties.originRequestPolicies,
+    }, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(behaviorPolicies), behaviorPolicies, new SimCfDistributionWebAcl(properties.webAclResolver));
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-custom-error-configurator.d.ts

@@ -4,15 +4,25 @@ import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.j
  * Applies custom error response configuration to a sim CloudFront
  * Distribution.
  *
- * CloudFront pairs `ResponsePagePath` and `ResponseCode`: a rule carrying one
+ * CloudFront pairs `ResponsePagePath` and `ResponseCode`. A rule carrying one
  * without the other is refused rather than half applied. A rule carrying
- * neither only configures error caching, which this simulator does not model,
- * so it is accepted and left out of the Distribution's request handling.
+ * neither configures error caching alone, and it reaches the Distribution with
+ * no page for the viewer to be sent.
  */
 export declare class SimCloudFrontCustomErrorConfigurator {
     /**
      * Configure one custom error response on a Distribution.
      */
     configure(distribution: SimCloudFrontDistribution, customErrorResponse: SimCloudFrontCustomErrorResponseConfig): void;
+    /**
+     * How long the rule holds its error for, which CloudFront defaults to ten
+     * seconds.
+     *
+     * A template can write a number as a string, and that one is read as the
+     * seconds it spells. Anything else falls back to the default. The
+     * alternative would be a stack that fails to deploy over the seconds an
+     * error is held for.
+     */
+    private errorCachingMinTtlSec;
     private responseCode;
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-custom-error-configurator.js

@@ -1,13 +1,13 @@
-import { simCloudFrontCustomErrorCodes, simCloudFrontCustomErrorResponseCodes, } from "../../custom-error/sim-cloudfront-custom-error-response.js";
+import { simCloudFrontCustomErrorCodes, simCloudFrontCustomErrorResponseCodes, simCloudFrontDefaultErrorCachingMinTtlSec, } from "../../custom-error/sim-cloudfront-custom-error-response.js";
 import { SimCloudFrontInvalidArgument, SimCloudFrontInvalidErrorCode, SimCloudFrontInvalidResponseCode, } from "../../error/sim-cloudfront.error.js";
 /**
  * Applies custom error response configuration to a sim CloudFront
  * Distribution.
  *
- * CloudFront pairs `ResponsePagePath` and `ResponseCode`: a rule carrying one
+ * CloudFront pairs `ResponsePagePath` and `ResponseCode`. A rule carrying one
  * without the other is refused rather than half applied. A rule carrying
- * neither only configures error caching, which this simulator does not model,
- * so it is accepted and left out of the Distribution's request handling.
+ * neither configures error caching alone, and it reaches the Distribution with
+ * no page for the viewer to be sent.
  */
 export class SimCloudFrontCustomErrorConfigurator {
     /**
@@ -21,10 +21,12 @@ export class SimCloudFrontCustomErrorConfigurator {
         }
         const responsePagePath = customErrorResponse.ResponsePagePath;
         const responseCode = this.responseCode(customErrorResponse.ResponseCode);
+        const errorCachingMinTtlSec = this.errorCachingMinTtlSec(customErrorResponse.ErrorCachingMinTTL);
         if (responsePagePath === undefined || responsePagePath === "") {
             if (responseCode !== undefined) {
                 throw new SimCloudFrontInvalidArgument(`CloudFront CustomErrorResponse for ${String(errorCode)} has a ResponseCode without a ResponsePagePath`);
             }
+            distribution.addCustomErrorResponse({ errorCode, errorCachingMinTtlSec });
             return;
         }
         if (responseCode === undefined) {
@@ -35,10 +37,29 @@ export class SimCloudFrontCustomErrorConfigurator {
         }
         distribution.addCustomErrorResponse({
             errorCode,
-            responsePagePath,
-            responseCode,
+            errorCachingMinTtlSec,
+            page: { responsePagePath, responseCode },
         });
     }
+    /**
+     * How long the rule holds its error for, which CloudFront defaults to ten
+     * seconds.
+     *
+     * A template can write a number as a string, and that one is read as the
+     * seconds it spells. Anything else falls back to the default. The
+     * alternative would be a stack that fails to deploy over the seconds an
+     * error is held for.
+     */
+    errorCachingMinTtlSec(errorCachingMinTtl) {
+        const seconds = typeof errorCachingMinTtl === "string" && errorCachingMinTtl.trim() !== ""
+            ? Number(errorCachingMinTtl)
+            : errorCachingMinTtl;
+        return typeof seconds === "number" &&
+            Number.isFinite(seconds) &&
+            seconds >= 0
+            ? seconds
+            : simCloudFrontDefaultErrorCachingMinTtlSec;
+    }
     responseCode(responseCode) {
         if (responseCode === undefined || responseCode === "") {
             return undefined;

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.d.ts

@@ -3,6 +3,7 @@ import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.j
 import { type SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCfBehaviorPolicyRegistries } from "../../origin-request-policy/sim-cf-behavior-forwarded.js";
 /**
  * Applies Origin configuration to a sim CloudFront Distribution.
  *
@@ -16,8 +17,9 @@ import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-acce
 export declare class SimCloudFrontOriginConfigurator {
     private readonly s3OriginResolver;
     private readonly originAccessControls;
+    private readonly policies;
     private readonly customOriginDispatcher?;
-    constructor(s3OriginResolver: SimCloudFrontS3OriginResolver, originAccessControls: SimCloudFrontOriginAccessControlRegistry, customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined);
+    constructor(s3OriginResolver: SimCloudFrontS3OriginResolver, originAccessControls: SimCloudFrontOriginAccessControlRegistry, policies: SimCfBehaviorPolicyRegistries, customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined);
     /**
      * Configure an Origin on a Distribution.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.js

@@ -18,10 +18,12 @@ import { simCfOriginCustomHeaders } from "../../origin/sim-cf-origin-custom-head
 export class SimCloudFrontOriginConfigurator {
     s3OriginResolver;
     originAccessControls;
+    policies;
     customOriginDispatcher;
-    constructor(s3OriginResolver, originAccessControls, customOriginDispatcher) {
+    constructor(s3OriginResolver, originAccessControls, policies, customOriginDispatcher) {
         this.s3OriginResolver = s3OriginResolver;
         this.originAccessControls = originAccessControls;
+        this.policies = policies;
         this.customOriginDispatcher = customOriginDispatcher;
     }
     /**
@@ -61,6 +63,7 @@ export class SimCloudFrontOriginConfigurator {
                 originPath: origin.OriginPath,
                 dispatcher: this.customOriginDispatcher,
                 customHeaders,
+                policies: this.policies,
                 ...(originAccessControl !== undefined && { originAccessControl }),
             }));
             return;

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.d.ts

@@ -3,6 +3,7 @@ import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-ca
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "../origin-request-policy/sim-cf-origin-request-policy-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCfWebAclResolver } from "../web-acl/sim-cf-web-acl.js";
 import type { SimCfEdgeFunctions } from "../edge/sim-cf-edge-functions.js";
@@ -12,9 +13,9 @@ import type { SimCfEdgeFunctions } from "../edge/sim-cf-edge-functions.js";
  *
  * A DistributionConfig is mostly references: a Bucket or a hostname per
  * Origin, a certificate, an origin access control, a response headers policy,
- * a cache policy, a web ACL, a Lambda@Edge function version. None of them belongs to
- * CloudFront, and creation and update resolve every one of them the same way,
- * so they travel together.
+ * a cache policy, an origin request policy, a web ACL, a Lambda@Edge function
+ * version. None of them belongs to CloudFront, and creation and update resolve
+ * every one of them the same way, so they travel together.
  */
 export interface SimCfDistributionConfigurationState {
     readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
@@ -23,6 +24,7 @@ export interface SimCfDistributionConfigurationState {
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
     readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
     readonly webAclResolver: SimCfWebAclResolver | undefined;
     readonly edgeFunctions: SimCfEdgeFunctions | undefined;
 }

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts

@@ -3,6 +3,7 @@ import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-ca
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "../origin-request-policy/sim-cf-origin-request-policy-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCloudFrontRegistry } from "../registry/sim-cloud-front-registry.js";
 import type { SimCfWebAclResolver } from "../web-acl/sim-cf-web-acl.js";
@@ -14,6 +15,7 @@ interface SimCloudFrontDistributionReconfigurerProperties {
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
     readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/distribution/sim-cf-distribution-view.js

@@ -7,7 +7,7 @@ export function simCloudFrontDistributionView(distribution) {
         ARN: simCloudFrontDistributionArn(distribution),
         Status: distribution.status,
         LastModifiedTime: distribution.lastModifiedTime,
-        InProgressInvalidationBatches: 0,
+        InProgressInvalidationBatches: distribution.invalidations.inProgressCount,
         DomainName: `${distribution.distributionId.toLowerCase()}.cloudfront.net`,
         DistributionConfig: distribution.distributionConfig,
     };

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.d.ts

@@ -6,6 +6,8 @@ import type { SimCloudFrontCustomErrorResponse } from "../custom-error/sim-cloud
 import { type SimAwsAccountId } from "../../aws/sim-aws-account.js";
 import type { SimCloudFrontDistributionConfig } from "../command/create-distribution/create-distribution.command.js";
 import { type SimClock } from "../../../util/clock/sim-clock.js";
+import { SimCfDistributionCache } from "../cache/sim-cf-distribution-cache.js";
+import { SimCfInvalidations } from "../invalidation/sim-cf-invalidations.js";
 export type SimCloudFrontDistributionId = Brand<string, "SimCloudFrontDistributionId">;
 export type SimCloudFrontDistributionStatus = "Deploying" | "Deployed";
 interface SimCloudFrontDistributionProperties {
@@ -14,8 +16,9 @@ interface SimCloudFrontDistributionProperties {
     readonly accountId?: SimAwsAccountId;
     readonly distributionConfig?: SimCloudFrontDistributionConfig;
     /**
-     * Clock stamping this Distribution's last modified time. A Distribution built
-     * standalone, outside a SimAws instance, falls back to the real clock.
+     * Clock stamping this Distribution's last modified time and expiring what its
+     * cache holds. A Distribution built standalone, outside a SimAws instance,
+     * falls back to the real clock.
      */
     readonly clock?: SimClock;
 }
@@ -29,6 +32,26 @@ export declare class SimCloudFrontDistribution {
     readonly behaviors: SimCloudFrontBehavior[];
     readonly customErrorResponses: SimCloudFrontCustomErrorResponse[];
     readonly lastModifiedTime: Date;
+    /**
+     * The clock this Distribution reads, which its cache expires on.
+     */
+    readonly clock: SimClock;
+    /**
+     * What this Distribution has cached, keyed by cache key.
+     *
+     * A configuration update leaves it alone, as it leaves a real
+     * Distribution's cached objects alone: an object cached under the old
+     * configuration is served until it expires or something removes it.
+     */
+    readonly cache: SimCfDistributionCache;
+    /**
+     * The invalidations this Distribution has been asked for.
+     *
+     * They outlive a configuration update, as the cache does, since an
+     * invalidation is a record of what was cleared rather than part of the
+     * Distribution's configuration.
+     */
+    readonly invalidations: SimCfInvalidations;
     private readonly alternateDomainNames;
     private readonly origins;
     constructor(properties?: SimCloudFrontDistributionProperties);

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.js

@@ -2,6 +2,8 @@ import { faker } from "@faker-js/faker";
 import { makeSimAwsAccountId, } from "../../aws/sim-aws-account.js";
 import { SimRealClock } from "../../../util/clock/sim-clock.js";
 import { SimCloudFrontDistributionNotDisabled } from "../error/sim-cloudfront.error.js";
+import { SimCfDistributionCache } from "../cache/sim-cf-distribution-cache.js";
+import { SimCfInvalidations } from "../invalidation/sim-cf-invalidations.js";
 /**
  * Simulated CloudFront Distribution.
  */
@@ -11,6 +13,26 @@ export class SimCloudFrontDistribution {
     behaviors = [];
     customErrorResponses = [];
     lastModifiedTime;
+    /**
+     * The clock this Distribution reads, which its cache expires on.
+     */
+    clock;
+    /**
+     * What this Distribution has cached, keyed by cache key.
+     *
+     * A configuration update leaves it alone, as it leaves a real
+     * Distribution's cached objects alone: an object cached under the old
+     * configuration is served until it expires or something removes it.
+     */
+    cache;
+    /**
+     * The invalidations this Distribution has been asked for.
+     *
+     * They outlive a configuration update, as the cache does, since an
+     * invalidation is a record of what was cleared rather than part of the
+     * Distribution's configuration.
+     */
+    invalidations = new SimCfInvalidations();
     #status;
     #distributionConfig;
     #enabled;
@@ -21,6 +43,8 @@ export class SimCloudFrontDistribution {
     origins = new Map();
     constructor(properties = {}) {
         const { distributionId = makeDistributionId(), status = "Deployed", accountId = makeSimAwsAccountId(), distributionConfig, clock = new SimRealClock(), } = properties;
+        this.clock = clock;
+        this.cache = new SimCfDistributionCache(clock);
         this.lastModifiedTime = clock.now();
         this.distributionId = distributionId;
         this.#status = status;

package/dist/service/cloudfront/error/sim-cf-invalidation.error.d.ts

@@ -0,0 +1,22 @@
+import { SimCloudFrontError } from "./sim-cloudfront.error.js";
+/**
+ * Simulated CloudFront NoSuchInvalidation error.
+ *
+ * What CloudFront answers when an invalidation ID names nothing on the
+ * Distribution it was asked for.
+ */
+export declare class SimCloudFrontNoSuchInvalidation extends SimCloudFrontError {
+    readonly name = "NoSuchInvalidation";
+    constructor(message: string);
+}
+/**
+ * Simulated CloudFront InvalidationBatchAlreadyExists error.
+ *
+ * A `CallerReference` makes an invalidation batch idempotent. Repeating one
+ * with the paths it was created with answers with that invalidation, and
+ * repeating it with different paths is refused rather than clearing anything.
+ */
+export declare class SimCloudFrontInvalidationBatchAlreadyExists extends SimCloudFrontError {
+    readonly name = "InvalidationBatchAlreadyExists";
+    constructor(message: string);
+}

package/dist/service/cloudfront/error/sim-cf-invalidation.error.js

@@ -0,0 +1,26 @@
+import { SimCloudFrontError } from "./sim-cloudfront.error.js";
+/**
+ * Simulated CloudFront NoSuchInvalidation error.
+ *
+ * What CloudFront answers when an invalidation ID names nothing on the
+ * Distribution it was asked for.
+ */
+export class SimCloudFrontNoSuchInvalidation extends SimCloudFrontError {
+    name = "NoSuchInvalidation";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated CloudFront InvalidationBatchAlreadyExists error.
+ *
+ * A `CallerReference` makes an invalidation batch idempotent. Repeating one
+ * with the paths it was created with answers with that invalidation, and
+ * repeating it with different paths is refused rather than clearing anything.
+ */
+export class SimCloudFrontInvalidationBatchAlreadyExists extends SimCloudFrontError {
+    name = "InvalidationBatchAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}

package/dist/service/cloudfront/error/sim-cf-origin-request-policy.error.d.ts

@@ -0,0 +1,22 @@
+import { SimCloudFrontError } from "./sim-cloudfront.error.js";
+/**
+ * Simulated CloudFront NoSuchOriginRequestPolicy error.
+ *
+ * What CloudFront answers when a Behavior's `OriginRequestPolicyId` names no
+ * origin request policy the account holds, at Distribution create or update
+ * time rather than when a request first needs the policy.
+ */
+export declare class SimCloudFrontNoSuchOriginRequestPolicy extends SimCloudFrontError {
+    readonly name = "NoSuchOriginRequestPolicy";
+    constructor(message: string);
+}
+/**
+ * Simulated CloudFront OriginRequestPolicyAlreadyExists error.
+ *
+ * CloudFront requires an origin request policy name to be unique within an
+ * account, so a second policy claiming a name is refused rather than created.
+ */
+export declare class SimCloudFrontOriginRequestPolicyAlreadyExists extends SimCloudFrontError {
+    readonly name = "OriginRequestPolicyAlreadyExists";
+    constructor(message: string);
+}

package/dist/service/cloudfront/error/sim-cf-origin-request-policy.error.js

@@ -0,0 +1,26 @@
+import { SimCloudFrontError } from "./sim-cloudfront.error.js";
+/**
+ * Simulated CloudFront NoSuchOriginRequestPolicy error.
+ *
+ * What CloudFront answers when a Behavior's `OriginRequestPolicyId` names no
+ * origin request policy the account holds, at Distribution create or update
+ * time rather than when a request first needs the policy.
+ */
+export class SimCloudFrontNoSuchOriginRequestPolicy extends SimCloudFrontError {
+    name = "NoSuchOriginRequestPolicy";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated CloudFront OriginRequestPolicyAlreadyExists error.
+ *
+ * CloudFront requires an origin request policy name to be unique within an
+ * account, so a second policy claiming a name is refused rather than created.
+ */
+export class SimCloudFrontOriginRequestPolicyAlreadyExists extends SimCloudFrontError {
+    name = "OriginRequestPolicyAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}

package/dist/service/cloudfront/index.d.ts

@@ -4,6 +4,8 @@ export { cloudFrontFunctionSourceFromModule } from "./cff/function-code-module/c
 export type { CloudFrontFunction } from "./typings/cloudfront-functions.namespace.js";
 export type { LambdaAtEdge } from "./typings/lambda-at-edge.namespace.js";
 export type { SimCfRedundantOrigin } from "./origin/sim-cf-redundant-origins.js";
+export { simCfDefaultEdgeId, simCfEdgeHeaderName, } from "./cache/sim-cf-edge.js";
+export type { SimCfCachingConfiguration } from "./registry/sim-cloud-front-registry.js";
 export type { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
 export type { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-store-commands.js";
 export type { SimCloudFrontKeyValueStore, SimCloudFrontKeyValueStoreId, SimCloudFrontKeyValueStoreStatus, } from "./key-value-store/sim-cf-key-value-store.js";

package/dist/service/cloudfront/index.js

@@ -1,3 +1,4 @@
 export { makeCffFunctionCodeInput } from "./cff/function-code-input/cff-function-code-input.js";
 export { cloudFrontViewerRequestEventFactory, cloudFrontViewerResponseEventFactory, } from "./factory/cloudfront-functions.factory.js";
 export { cloudFrontFunctionSourceFromModule } from "./cff/function-code-module/cff-code-module-file.js";
+export { simCfDefaultEdgeId, simCfEdgeHeaderName, } from "./cache/sim-cf-edge.js";

package/dist/service/cloudfront/invalidation/sim-cf-invalidation-path.d.ts

@@ -0,0 +1,22 @@
+/**
+ * One path as an invalidation names it.
+ *
+ * CloudFront takes a path relative to the Distribution, beginning with a
+ * slash. One arriving without a leading slash is read as though it had one, so
+ * the bare `*` that clears everything is the same batch as `/*`.
+ */
+export declare function simCfInvalidationPath(path: string): string;
+/**
+ * Whether a path an invalidation names covers a path the Distribution has
+ * cached.
+ *
+ * A path on its own names one object. A path ending in a wildcard names
+ * everything below what comes before it, so `/images/*` covers
+ * `/images/logo.png` and leaves `/index.html` alone, and `/*` covers
+ * everything the Distribution holds.
+ */
+export declare function simCfInvalidationCovers(invalidationPath: string, path: string): boolean;
+/**
+ * Whether any path in a batch covers a path the Distribution has cached.
+ */
+export declare function simCfInvalidationBatchCovers(invalidationPaths: readonly string[], path: string): boolean;

package/dist/service/cloudfront/invalidation/sim-cf-invalidation-path.js

@@ -0,0 +1,32 @@
+/**
+ * One path as an invalidation names it.
+ *
+ * CloudFront takes a path relative to the Distribution, beginning with a
+ * slash. One arriving without a leading slash is read as though it had one, so
+ * the bare `*` that clears everything is the same batch as `/*`.
+ */
+export function simCfInvalidationPath(path) {
+    const named = path.trim();
+    return named.startsWith("/") ? named : `/${named}`;
+}
+/**
+ * Whether a path an invalidation names covers a path the Distribution has
+ * cached.
+ *
+ * A path on its own names one object. A path ending in a wildcard names
+ * everything below what comes before it, so `/images/*` covers
+ * `/images/logo.png` and leaves `/index.html` alone, and `/*` covers
+ * everything the Distribution holds.
+ */
+export function simCfInvalidationCovers(invalidationPath, path) {
+    const named = simCfInvalidationPath(invalidationPath);
+    return named.endsWith("*")
+        ? path.startsWith(named.slice(0, -1))
+        : path === named;
+}
+/**
+ * Whether any path in a batch covers a path the Distribution has cached.
+ */
+export function simCfInvalidationBatchCovers(invalidationPaths, path) {
+    return invalidationPaths.some((invalidationPath) => simCfInvalidationCovers(invalidationPath, path));
+}

package/dist/service/cloudfront/invalidation/sim-cf-invalidation-view.d.ts

@@ -0,0 +1,43 @@
+import type { SimCfInvalidation } from "./sim-cf-invalidation.js";
+/**
+ * The batch of paths an invalidation was created from, as the API returns it.
+ */
+export interface SimCfInvalidationBatchView {
+    readonly Paths: {
+        readonly Quantity: number;
+        readonly Items: readonly string[];
+    };
+    readonly CallerReference: string;
+}
+/**
+ * Minimal structural sim CloudFront invalidation, as the API returns it.
+ *
+ * CreateInvalidation and GetInvalidation both answer with this shape.
+ */
+export interface SimCfInvalidationView {
+    readonly Id: string;
+    readonly Status: string;
+    readonly CreateTime: Date;
+    readonly InvalidationBatch: SimCfInvalidationBatchView;
+}
+/**
+ * One invalidation as ListInvalidations returns it, which leaves out the
+ * batch of paths.
+ */
+export interface SimCfInvalidationSummaryView {
+    readonly Id: string;
+    readonly CreateTime: Date;
+    readonly Status: string;
+}
+/**
+ * Build the API view of a sim CloudFront invalidation.
+ */
+export declare function simCfInvalidationView(invalidation: SimCfInvalidation): SimCfInvalidationView;
+/**
+ * Build the listing view of a sim CloudFront invalidation.
+ */
+export declare function simCfInvalidationSummary(invalidation: SimCfInvalidation): SimCfInvalidationSummaryView;
+/**
+ * The URL CreateInvalidation reports the new invalidation at.
+ */
+export declare function simCfInvalidationLocation(distributionId: string, invalidationId: string): string;