@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/sts/service-role/sim-service-role.js

@@ -1,17 +1,7 @@
 import { SimIamAccessDenied } from "../../iam/error/sim-iam.error.js";
-import { IamRoleArnParser } from "../../iam/role/arn/sim-iam-role-arn-parser.js";
 import { AssumeRoleTrustPolicyAuthorizer } from "../auth-z/assume-role-trust-policy-authorizer.js";
-/**
- * Read the Account and name out of a role ARN a service will assume.
- *
- * The ARN is checked for being a role ARN where the request that carried it was
- * written, so this is reading a known shape rather than validating an unknown
- * one.
- */
-export function simServiceRoleTarget(roleArn) {
-    const parts = new IamRoleArnParser().parse(roleArn);
-    return { accountId: parts.accountId, roleName: parts.roleName, roleArn };
-}
+import { simServiceRoleConditionContext, } from "./sim-service-role-source.js";
+import { simServiceRoleCaller, } from "./sim-service-role-target.js";
 /**
  * Assume a role as a service principal, and answer with the caller it makes.
  *
@@ -26,14 +16,17 @@ export function simServiceRoleTarget(roleArn) {
  * exactly the split `SimResolvedCaller` exists for.
  */
 export async function assumeSimServiceRole(assumption) {
-    const { target, servicePrincipal, sessionName, iam, refusals } = assumption;
+    const { target, servicePrincipal, sessionName, scope, source, refusals } = assumption;
+    const iam = scope.iam();
     const role = await roleOrRefuse(target, iam, refusals);
     try {
         new AssumeRoleTrustPolicyAuthorizer().authorize({
             roleArn: target.roleArn,
             role,
             targetIam: iam,
+            region: scope.accountRegionScope.regionName,
             caller: { kind: "service", service: servicePrincipal },
+            conditionContext: simServiceRoleConditionContext(source),
         });
     }
     catch (error) {
@@ -42,14 +35,7 @@ export async function assumeSimServiceRole(assumption) {
         }
         throw error;
     }
-    return {
-        kind: "resolved",
-        principal: {
-            kind: "arn",
-            arn: `arn:aws:sts::${target.accountId}:assumed-role/${target.roleName}/${sessionName}`,
-        },
-        identityPolicyPrincipal: { kind: "arn", arn: target.roleArn },
-    };
+    return simServiceRoleCaller(target, sessionName);
 }
 /**
  * Load the role, refusing when it is not there.

package/dist/service/sts/sim-sts.js

@@ -28,6 +28,7 @@ export class SimSts {
     async assumeRole(command, options) {
         const handler = new AssumeRoleCommandHandler({
             sourceAccountId: this.accountRegionScope.accountId,
+            regionName: this.accountRegionScope.regionName,
             iamResolver: this.iamResolver,
             background: this.background,
         });

package/dist/service/wafv2/cfn/association/sim-cfn-waf-association-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimWafV2 } from "../../sim-wafv2.js";
 import { SimWafCfnWebAclAssociation } from "./sim-cfn-waf-web-acl-association.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnWafAssociationCreatorProperties {
     readonly wafV2: SimWafV2;
 }
@@ -26,7 +27,7 @@ export declare class SimCfnWafAssociationCreator {
     /**
      * Make the association an AWS::WAFv2::WebACLAssociation Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafCfnWebAclAssociation>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimWafCfnWebAclAssociation>;
     /**
      * Take the association an AWS::WAFv2::WebACLAssociation Resource made off
      * again.
@@ -40,6 +41,6 @@ export declare class SimCfnWafAssociationCreator {
      * CloudFormation no reason to bring the association down first, and deleting
      * the stage took the association with it, so there is nothing left to undo.
      */
-    delete(resource: SimCfnResource, association: SimWafCfnWebAclAssociation): Promise<void>;
+    delete(resource: SimCfnResource, association: SimWafCfnWebAclAssociation, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/wafv2/cfn/association/sim-cfn-waf-association-creator.js

@@ -27,7 +27,7 @@ export class SimCfnWafAssociationCreator {
     /**
      * Make the association an AWS::WAFv2::WebACLAssociation Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const config = new SimCfnWafAssociationConfig({ resource, properties });
         const association = new SimWafCfnWebAclAssociation({
             resourceArn: config.resourceArn(),
@@ -43,7 +43,7 @@ export class SimCfnWafAssociationCreator {
                     ResourceArn: association.resourceArn,
                     WebACLArn: association.webAclArn,
                 },
-            });
+            }, options);
             return association;
         });
     }
@@ -60,12 +60,10 @@ export class SimCfnWafAssociationCreator {
      * CloudFormation no reason to bring the association down first, and deleting
      * the stage took the association with it, so there is nothing left to undo.
      */
-    async delete(resource, association) {
+    async delete(resource, association, options) {
         await simCfnWafResourceCommand(wafWebAclAssociationResourceType, resource.logicalId, async () => {
             try {
-                await this.#wafV2.disassociateWebAcl({
-                    input: { ResourceArn: association.resourceArn },
-                });
+                await this.#wafV2.disassociateWebAcl({ input: { ResourceArn: association.resourceArn } }, options);
             }
             catch (error) {
                 if (!(error instanceof SimWafUnavailableEntityException)) {

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimWafIpSet } from "../../ip-set/sim-waf-ip-set.js";
 import type { SimWafV2 } from "../../sim-wafv2.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnWafIpSetCreatorProperties {
     readonly wafV2: SimWafV2;
 }
@@ -19,10 +20,10 @@ export declare class SimCfnWafIpSetCreator {
     /**
      * Create the IP set an AWS::WAFv2::IPSet Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafIpSet>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimWafIpSet>;
     /**
      * Delete the IP set an AWS::WAFv2::IPSet Resource created.
      */
-    delete(resource: SimCfnResource, ipSet: SimWafIpSet): Promise<void>;
+    delete(resource: SimCfnResource, ipSet: SimWafIpSet, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.js

@@ -18,13 +18,13 @@ export class SimCfnWafIpSetCreator {
     /**
      * Create the IP set an AWS::WAFv2::IPSet Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const input = new SimCfnWafIpSetConfig({
             resource,
             properties,
         }).createInput();
         return await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => {
-            const created = await this.#wafV2.createIpSet({ input });
+            const created = await this.#wafV2.createIpSet({ input }, options);
             const arn = created.Summary?.ARN;
             assertDefined(arn, `sim WAFv2 IP set ARN for CloudFormation Resource ${resource.logicalId}`);
             const ipSet = this.#wafV2.findIpSetByArn(arn);
@@ -35,7 +35,7 @@ export class SimCfnWafIpSetCreator {
     /**
      * Delete the IP set an AWS::WAFv2::IPSet Resource created.
      */
-    async delete(resource, ipSet) {
+    async delete(resource, ipSet, options) {
         await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteIpSet({
             input: {
                 Name: ipSet.name,
@@ -43,6 +43,6 @@ export class SimCfnWafIpSetCreator {
                 Id: ipSet.id,
                 LockToken: ipSet.lockToken,
             },
-        }));
+        }, options));
     }
 }

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimWafRegexPatternSet } from "../../regex-pattern-set/sim-waf-regex-pattern-set.js";
 import type { SimWafV2 } from "../../sim-wafv2.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnWafRegexPatternSetCreatorProperties {
     readonly wafV2: SimWafV2;
 }
@@ -19,10 +20,10 @@ export declare class SimCfnWafRegexPatternSetCreator {
     /**
      * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafRegexPatternSet>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimWafRegexPatternSet>;
     /**
      * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
      */
-    delete(resource: SimCfnResource, patternSet: SimWafRegexPatternSet): Promise<void>;
+    delete(resource: SimCfnResource, patternSet: SimWafRegexPatternSet, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.js

@@ -18,13 +18,13 @@ export class SimCfnWafRegexPatternSetCreator {
     /**
      * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const input = new SimCfnWafRegexPatternSetConfig({
             resource,
             properties,
         }).createInput();
         return await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => {
-            const created = await this.#wafV2.createRegexPatternSet({ input });
+            const created = await this.#wafV2.createRegexPatternSet({ input }, options);
             const arn = created.Summary?.ARN;
             assertDefined(arn, `sim WAFv2 regex pattern set ARN for CloudFormation Resource ${resource.logicalId}`);
             const patternSet = this.#wafV2.findRegexPatternSetByArn(arn);
@@ -35,7 +35,7 @@ export class SimCfnWafRegexPatternSetCreator {
     /**
      * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
      */
-    async delete(resource, patternSet) {
+    async delete(resource, patternSet, options) {
         await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteRegexPatternSet({
             input: {
                 Name: patternSet.name,
@@ -43,6 +43,6 @@ export class SimCfnWafRegexPatternSetCreator {
                 Id: patternSet.id,
                 LockToken: patternSet.lockToken,
             },
-        }));
+        }, options));
     }
 }

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import { type SimCfnWafCreators } from "./sim-cfn-waf-creators.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Deletes the simulated WAFv2 resources a CloudFormation Stack created.
  *
@@ -16,5 +17,5 @@ export declare class SimCfnWafResourceDeleter {
     /**
      * Delete one simulated WAFv2 Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.js

@@ -17,23 +17,23 @@ export class SimCfnWafResourceDeleter {
     /**
      * Delete one simulated WAFv2 Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, options) {
         const creators = this.#creators;
         switch (resourceTypeName) {
             case wafWebAclResourceTypeName: {
-                await creators.webAcl.delete(resource, created(resource, "web ACL"));
+                await creators.webAcl.delete(resource, created(resource, "web ACL"), options);
                 return;
             }
             case wafWebAclAssociationResourceTypeName: {
-                await creators.association.delete(resource, created(resource, "web ACL association"));
+                await creators.association.delete(resource, created(resource, "web ACL association"), options);
                 return;
             }
             case wafIpSetResourceTypeName: {
-                await creators.ipSet.delete(resource, created(resource, "IP set"));
+                await creators.ipSet.delete(resource, created(resource, "IP set"), options);
                 return;
             }
             case wafRegexPatternSetResourceTypeName: {
-                await creators.regexPatternSet.delete(resource, created(resource, "regex pattern set"));
+                await creators.regexPatternSet.delete(resource, created(resource, "regex pattern set"), options);
                 return;
             }
             default: {

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimWafV2 } from "../sim-wafv2.js";
 interface SimWafCfnResourceFactoryProperties {
     readonly wafV2: SimWafV2;
@@ -28,6 +28,6 @@ export declare class SimWafCfnResourceFactory implements SimCfnServiceResourceFa
     /**
      * Delete a simulated WAFv2 resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.js

@@ -1,6 +1,7 @@
 import { simCfnWafCreators, unsupportedSimWafResourceType, } from "./sim-cfn-waf-creators.js";
 import { SimCfnWafResourceDeleter } from "./sim-cfn-waf-resource-deleter.js";
 import { wafIpSetResourceTypeName, wafRegexPatternSetResourceTypeName, wafWebAclAssociationResourceTypeName, wafWebAclResourceTypeName, } from "./sim-cfn-waf-resource-types.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated WAFv2 resources.
  *
@@ -30,18 +31,19 @@ export class SimWafCfnResourceFactory {
     async create(resourceTypeName, resource, context) {
         const properties = context.resolvedProperties ?? resource.properties;
         const creators = this.#creators;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case wafWebAclResourceTypeName: {
-                return await creators.webAcl.create(resource, properties);
+                return await creators.webAcl.create(resource, properties, options);
             }
             case wafWebAclAssociationResourceTypeName: {
-                return await creators.association.create(resource, properties);
+                return await creators.association.create(resource, properties, options);
             }
             case wafIpSetResourceTypeName: {
-                return await creators.ipSet.create(resource, properties);
+                return await creators.ipSet.create(resource, properties, options);
             }
             case wafRegexPatternSetResourceTypeName: {
-                return await creators.regexPatternSet.create(resource, properties);
+                return await creators.regexPatternSet.create(resource, properties, options);
             }
             default: {
                 throw unsupportedSimWafResourceType(resourceTypeName, "");
@@ -51,7 +53,7 @@ export class SimWafCfnResourceFactory {
     /**
      * Delete a simulated WAFv2 resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.#deleter.delete(resourceTypeName, resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.#deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimWafV2 } from "../../sim-wafv2.js";
 import type { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnWafWebAclCreatorProperties {
     readonly wafV2: SimWafV2;
 }
@@ -29,7 +30,7 @@ export declare class SimCfnWafWebAclCreator {
     /**
      * Create the web ACL an AWS::WAFv2::WebACL Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafWebAcl>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimWafWebAcl>;
     /**
      * Delete the web ACL an AWS::WAFv2::WebACL Resource created.
      *
@@ -38,6 +39,6 @@ export declare class SimCfnWafWebAclCreator {
      * it holds. A template that associates without naming it keeps that refusal,
      * which says which resources are still pointing at the ACL.
      */
-    delete(resource: SimCfnResource, webAcl: SimWafWebAcl): Promise<void>;
+    delete(resource: SimCfnResource, webAcl: SimWafWebAcl, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.js

@@ -29,7 +29,7 @@ export class SimCfnWafWebAclCreator {
     /**
      * Create the web ACL an AWS::WAFv2::WebACL Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const input = new SimCfnWafWebAclConfig({
             resource,
             properties,
@@ -39,9 +39,7 @@ export class SimCfnWafWebAclCreator {
             Rules: simCfnWafEvaluatableRules(this.#wafV2, resource, input),
         };
         return await simCfnWafResourceCommand(wafWebAclResourceType, resource.logicalId, async () => {
-            const created = await this.#wafV2.createWebAcl({
-                input: deployable,
-            });
+            const created = await this.#wafV2.createWebAcl({ input: deployable }, options);
             const arn = created.Summary?.ARN;
             assertDefined(arn, `sim WAFv2 web ACL ARN for CloudFormation Resource ${resource.logicalId}`);
             const webAcl = this.#wafV2.findWebAclByArn(arn);
@@ -57,7 +55,7 @@ export class SimCfnWafWebAclCreator {
      * it holds. A template that associates without naming it keeps that refusal,
      * which says which resources are still pointing at the ACL.
      */
-    async delete(resource, webAcl) {
+    async delete(resource, webAcl, options) {
         await simCfnWafResourceCommand(wafWebAclResourceType, resource.logicalId, async () => await this.#wafV2.deleteWebAcl({
             input: {
                 Name: webAcl.name,
@@ -65,6 +63,6 @@ export class SimCfnWafWebAclCreator {
                 Id: webAcl.id,
                 LockToken: webAcl.lockToken,
             },
-        }));
+        }, options));
     }
 }

package/dist/service/wafv2/command/authorize/sim-wafv2-authorizer.js

@@ -34,6 +34,7 @@ export class SimWafAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/wafv2/sim-wafv2-commands.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimWafAssociations } from "./association/sim-waf-associations.js";
 import { type SimWafProtectedResources } from "./association/sim-waf-protected-resources.js";
 import { SimWafAssociationCommands } from "./command/association/sim-wafv2-association-commands.js";

package/dist/service/wafv2/sim-wafv2-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimWafAssociations } from "./association/sim-waf-associations.js";
 import { SimWafNoProtectedResources, } from "./association/sim-waf-protected-resources.js";
 import { SimWafAssociationAccess } from "./command/association/sim-wafv2-association-access.js";
@@ -39,7 +39,8 @@ export class SimWafCommands {
     regexPatternSetCommands;
     background;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), protectedResources = new SimWafNoProtectedResources(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), protectedResources = new SimWafNoProtectedResources(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const authorizer = new SimWafAuthorizer({ iam });
         this.background = background;
         this.webAclCommands = new SimWafWebAclCommands({

package/dist/util/clock/sim-clock-control.d.ts

@@ -76,8 +76,10 @@ export declare class SimClockControl implements SimClock {
      * The duration is measured from a frozen instant. Advancing by exactly a
      * buffering interval or a schedule period lands on the due instant every
      * time, whatever the host clock does while the advance runs.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`.
      */
-    advanceBy(duration: SimDuration | SimDurationInput): Promise<void>;
+    advanceBy(duration: SimDuration | SimDurationInput | number): Promise<void>;
     /**
      * Dispatch everything due at or before an instant, in due order.
      *

package/dist/util/clock/sim-clock-control.js

@@ -82,6 +82,8 @@ export class SimClockControl {
      * The duration is measured from a frozen instant. Advancing by exactly a
      * buffering interval or a schedule period lands on the due instant every
      * time, whatever the host clock does while the advance runs.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`.
      */
     async advanceBy(duration) {
         this.clock.freeze();

package/dist/util/clock/sim-controllable-clock.d.ts

@@ -48,7 +48,9 @@ export declare class SimControllableClock implements SimClock {
     setTo(instant: Date): void;
     /**
      * Move simulated time forward by a duration, and stop there.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`.
      */
-    advanceBy(duration: SimDuration | SimDurationInput): void;
+    advanceBy(duration: SimDuration | SimDurationInput | number): void;
 }
 export {};

package/dist/util/clock/sim-controllable-clock.js

@@ -53,6 +53,8 @@ export class SimControllableClock {
     }
     /**
      * Move simulated time forward by a duration, and stop there.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`.
      */
     advanceBy(duration) {
         const milliseconds = SimDuration.of(duration).toMilliseconds();

package/dist/util/clock/sim-duration.d.ts

@@ -29,9 +29,13 @@ export declare class SimDuration {
     private readonly milliseconds;
     private constructor();
     /**
-     * Build a duration from the components a caller wrote, or pass one through.
+     * Build a duration from the components a caller wrote, from a plain number of
+     * milliseconds, or pass an existing duration through.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`. That is what
+     * a caller reaching for `advanceBy(1000)` has in mind.
      */
-    static of(duration: SimDuration | SimDurationInput): SimDuration;
+    static of(duration: SimDuration | SimDurationInput | number): SimDuration;
     /**
      * Build a duration from a plain number of milliseconds.
      */

package/dist/util/clock/sim-duration.js

@@ -45,12 +45,19 @@ export class SimDuration {
         this.milliseconds = milliseconds;
     }
     /**
-     * Build a duration from the components a caller wrote, or pass one through.
+     * Build a duration from the components a caller wrote, from a plain number of
+     * milliseconds, or pass an existing duration through.
+     *
+     * A bare number counts milliseconds, as it does for `setTimeout`. That is what
+     * a caller reaching for `advanceBy(1000)` has in mind.
      */
     static of(duration) {
         if (duration instanceof this) {
             return duration;
         }
+        if (typeof duration === "number") {
+            return this.ofMilliseconds(duration);
+        }
         return new this(totalMilliseconds(duration));
     }
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "1.20.12",
+  "version": "1.20.14",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": "https://github.com/KensioSoftware/yulin",
   "homepage": "https://yulinsim.dev/",
@@ -142,6 +142,10 @@
     },
     "./oxlint/cffjs2.oxlintrc.json": "./dist/config/oxlint/cffjs2.oxlintrc.json",
     "./package.json": "./package.json",
+    "./organizations": {
+      "import": "./dist/service/organizations/index.js",
+      "types": "./dist/service/organizations/index.d.ts"
+    },
     "./personalize": {
       "import": "./dist/service/personalize/index.js",
       "types": "./dist/service/personalize/index.d.ts"