@fargowealth/fargo-ai-cli 1.5.0 → 1.5.1

package/src/yida-cli.mjs

@@ -1,65 +0,0 @@
-import { yidaLogin, yidaLogout, yidaStatus } from "./yida-auth.mjs";
-import { describeYidaForm } from "./yida-schema.mjs";
-import { getYidaBusinessBundle, listYidaBusinesses } from "./yida-business.mjs";
-
-export const YIDA_HELP = `Usage: fargo yida <command>
-
-  auth login [--endpoint https://www.aliwork.com] [--corp-id dingXXX] [--no-browser]
-  auth status|profiles
-  auth logout [--profile <profileId>]
-  schema <appType> <formUuid> [--profile <profileId>]
-  business list [--profile <profileId>]
-  business get <businessId> [--revision <number>] [--bundle-hash <sha256:...>] [--profile <profileId>]
-
-Personal YiDA credentials stay on this computer, isolated by verified Fargo
-account and YiDA enterprise/member. Login uses the OpenYida-compatible OAuth
-client and YiDA token service. Availability depends on the target environment.
-Schema queries are read-only and may require design permissions. Business list
-returns the publisher's selected employee entries; fetch only the chosen bundle.
-Model output omits default values and executable source. Reviewed local MCP
-adapters separately declare their submission scope and confirmation requirements.
-`;
-
-function parse(args, flags) {
-  const values = {};
-  const positionals = [];
-  for (let index = 0; index < args.length; index++) {
-    const argument = args[index];
-    if (!argument.startsWith("--")) { positionals.push(argument); continue; }
-    if (!flags.includes(argument) || Object.hasOwn(values, argument)) throw new Error(`Unsupported or repeated YiDA option: ${argument}`);
-    if (argument === "--no-browser") { values[argument] = true; continue; }
-    const value = args[++index];
-    if (!value || value.startsWith("--")) throw new Error(`Missing YiDA option value: ${argument}`);
-    values[argument] = value;
-  }
-  return { values, positionals };
-}
-
-export async function runYidaCli(args, store, options = {}) {
-  const stdout = options.stdout ?? process.stdout;
-  const stderr = options.stderr ?? process.stderr;
-  if (!args.length || args.includes("--help") || args.includes("-h")) { stdout.write(YIDA_HELP); return; }
-  let result;
-  if (args[0] === "auth" && args[1] === "login") {
-    const { values, positionals } = parse(args.slice(2), ["--endpoint", "--corp-id", "--no-browser"]);
-    if (positionals.length) throw new Error(YIDA_HELP);
-    result = await yidaLogin(store, {
-      ...options, endpoint: values["--endpoint"], corpId: values["--corp-id"], openBrowser: !values["--no-browser"],
-      onYidaAuthorization: options.onYidaAuthorization ?? (({ authorizationUrl }) => stderr.write(`请在浏览器完成宜搭授权：\n${authorizationUrl}\n`))
-    });
-  } else if (args[0] === "auth" && ["status", "profiles", "logout"].includes(args[1])) {
-    const { values, positionals } = parse(args.slice(2), args[1] === "logout" ? ["--profile"] : []);
-    if (positionals.length) throw new Error(YIDA_HELP);
-    result = args[1] === "logout" ? await yidaLogout(store, { ...options, profile: values["--profile"] }) : await yidaStatus(store, options);
-  } else if (args[0] === "business" && ["list", "get"].includes(args[1])) {
-    const { values, positionals } = parse(args.slice(2), args[1] === "list" ? ["--profile"] : ["--profile", "--revision", "--bundle-hash"]);
-    if (positionals.length !== (args[1] === "get" ? 1 : 0)) throw new Error(YIDA_HELP);
-    const businessOptions = { ...options, profile: values["--profile"], ...(values["--revision"] !== undefined ? { revision: Number(values["--revision"]) } : {}), ...(values["--bundle-hash"] ? { bundleHash: values["--bundle-hash"] } : {}) };
-    result = args[1] === "list" ? await listYidaBusinesses(store, businessOptions) : await getYidaBusinessBundle(store, positionals[0], businessOptions);
-  } else if (args[0] === "schema") {
-    const { values, positionals } = parse(args.slice(1), ["--profile"]);
-    if (positionals.length !== 2) throw new Error(YIDA_HELP);
-    result = await describeYidaForm(store, positionals[0], positionals[1], { ...options, profile: values["--profile"] });
-  } else throw new Error(YIDA_HELP);
-  stdout.write(`${JSON.stringify(result)}\n`);
-}

package/src/yida-confirmation.mjs

@@ -1,86 +0,0 @@
-// Display projections only. These do not enable any additional submission adapter.
-const shared = [
-  ['employeeField_m41da53i', '申请人'], ['dateField_m41cj93y', '申请日期'],
-  ['selectField_m41cj946', '支付公司'], ['radioField_m41da53k', '是否项目费用'],
-  ['selectField_m41da53l', '项目名称'], ['textField_m41cj948', '开户银行'],
-  ['textField_m41cj949', '收款账号（尾号）'], ['textareaField_m41cj94b', '申请事由']
-];
-export const confirmationLayouts = {
-  expense: { title: '费用报销申请',
-    header: [...shared, ['textField_m6so5pht', '申请部门'], ['selectField_m8lq9x6l', '成本承担公司'],
-      ['textField_m4vmcrx7', '收款账户名称'], ['textField_m41cj947', '支付币种'], ['numberField_m41cj94a', '报销总额']],
-    columns: [['textField_m41cj94g', '费用内容'], ['selectField_m41cj94f', '费用类别'], ['selectField_m4aplvi5', '会计科目'],
-      ['numberField_m41cj94j', '原币金额'], ['selectField_m41cj94m', '原币种'], ['numberField_m41cj94n', '汇率'],
-      ['numberField_m41cj94p', '报销金额（支付币种）'], ['textField_m41cj94q', '备注']] },
-  travel: { title: '出差费用报销申请',
-    header: [...shared, ['textField_m6sokzua', '申请部门'], ['selectField_m8lo3vpc', '成本承担公司'],
-      ['textField_m4viq0z9', '收款账户名称'], ['textField_m41cj947', '支付币种'], ['numberField_m41cj94a', '报销总额'],
-      ['textField_m459scfn', '差旅津贴币种'], ['numberField_m459scfo', '差旅津贴总额']],
-    columns: [['associationFormField_m459scfc', '关联出差申请'], ['textField_m459scf4', '出发地'], ['textField_m459scf6', '目的地'],
-      ['cascadeDateField_m459scfj', '出差日期'], ['numberField_m459scfa', '天数'], ['selectField_m41cj94m', '原币种'],
-      ['numberField_m41cj94j', '飞机／车船票款'], ['numberField_m459scfk', '实际飞机／车船票款'],
-      ['numberField_m459scfg', '住宿费'], ['numberField_m459scfh', '实际住宿费'], ['numberField_m459scfi', '市内交通费'],
-      ['numberField_m459scfd', '其他费用'], ['numberField_m41cj94n', '汇率'], ['numberField_m41cj94p', '报销金额（支付币种）'],
-      ['numberField_m459scfl', '津贴标准'], ['numberField_m459scfm', '津贴金额']] },
-  payment: { title: '对外费用支出申请',
-    header: [...shared, ['textField_m6speeqq', '申请部门'], ['selectField_m8g46rue', '成本承担公司'],
-      ['textField_m453obgi', '合同公司名称'], ['selectField_m453obgj', '支付币种'], ['numberField_m41cj94a', '支付总额'],
-      ['dateField_m453obgk', '最晚付款日期'], ['associationFormField_m7a8veso', '相关合同审批'],
-      ['associationFormField_ma3cqw2z', '相关用印审批']],
-    columns: [['textField_m41cj94g', '支付内容'], ['selectField_m41cj94f', '费用类别'], ['selectField_m4aq5ht9', '会计科目'],
-      ['numberField_m41cj94j', '支付金额（支付币种）'], ['textField_m41cj94q', '备注']] }
-};
-
-const cell = value => {
-  if (value === undefined || value === null || value === '') return '待补充';
-  if (!['string', 'number', 'boolean'].includes(typeof value)) throw new Error('YIDA_CONFIRMATION_DISPLAY_VALUE_REQUIRED');
-  return String(value).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
-    .replace(/\|/g, '&#124;').replace(/[\\`*_\[\]~]/g, c => `&#${c.charCodeAt(0)};`).replace(/[\r\n]+/g, ' / ');
-};
-const table = (headers, rows) => [
-  `| ${headers.map(cell).join(' | ')} |`, `| ${headers.map(() => '---').join(' | ')} |`,
-  ...rows.map(row => `| ${row.map(cell).join(' | ')} |`)
-].join('\n');
-
-// Callers must resolve member/association names and dates to human-readable
-// display values first. Missing values remain visible; templates are not approval.
-export function renderYidaConfirmation(kind, { headerValues, rows, attachments = [] }) {
-  const layout = confirmationLayouts[kind];
-  if (!layout || !Array.isArray(rows) || !rows.length) throw new Error('YIDA_CONFIRMATION_ROWS_REQUIRED');
-  const overall = layout.header.map(([key, label]) => [label, key === 'textField_m41cj949' && headerValues[key]
-    ? `****${String(headerValues[key]).slice(-4)}` : headerValues[key]]);
-  overall.push(['附件', attachments.length ? attachments.map(a => a.name).join('；') : '待补充']);
-  return `**${layout.title} · 待确认，尚未提交**\n\n**整体参数**\n\n${table(['项目', '内容'], overall)}\n\n**明细数据**\n\n${table(['序号', ...layout.columns.map(([, label]) => label)], rows.map((row, i) => [i + 1, ...layout.columns.map(([key]) => row[key])]))}\n\n请核对以上整体参数、明细和附件。回复“确认提交”或“Confirm”后才会正式提交；如需修改，请指出对应项目或明细行。`;
-}
-
-export const confirmationBusinessKinds = {
-  form_6eb2e57a94cf4445bb28508dc45262e3mddx: 'expense',
-  travel_reimbursement: 'travel', external_payment: 'payment'
-};
-
-export function businessConfirmationContract(schema, kind) {
-  const layout = confirmationLayouts[kind];
-  const fields = new Map(schema.fields.map(f => [f.fieldId, f]));
-  if (!layout || layout.header.some(([id]) => !fields.has(id)) ||
-      layout.columns.some(([id]) => fields.get(id)?.parentFieldId !== 'tableField_m41cj94c')) throw new Error('YIDA_CONFIRMATION_SCHEMA_CHANGED');
-  return { required: true, format: 'markdown', sections: ['overall_parameters', 'detail_rows'],
-    headerFields: layout.header.map(([fieldId, label]) => ({ fieldId, label })),
-    detailColumns: layout.columns.map(([fieldId, label]) => ({ fieldId, label })),
-    explicitHumanReplyRequired: true, changesRequireReconfirmation: true,
-    binding: 'previewHash', callerAttestation: 'userConfirmed',
-    executionAvailability: kind === 'expense' ? 'reviewed_non_project_single_row_adapter' : 'display_only_no_new_submission_adapter' };
-}
-
-export function businessConfirmationHandbook(kind) {
-  const layout = confirmationLayouts[kind];
-  if (!layout) throw new Error('YIDA_CONFIRMATION_KIND_INVALID');
-  const headerValues = Object.fromEntries(layout.header.map(([id, label]) => [id, `待填：${label}`]));
-  headerValues.textField_m41cj949 = '0000';
-  const row = Object.fromEntries(layout.columns.map(([id, label]) => [id, `待填：${label}`]));
-  return `\n<!-- fargo-user-confirmation:start -->\n## 用户提交确认表\n\n以下为本业务的字段模板，展示时必须替换成同一份实际预览的值；账号 0000 仅为脱敏占位，不可用于提交。数据缺失或规则未解析时先补齐。项目分支的项目名称、项目类别／科目和成本归属应按实际显隐补充；未经适配的分支不能仅凭确认表提交。\n\n${renderYidaConfirmation(kind, { headerValues, rows: [row], attachments: [{ name: '待填：实际附件名称及已核验页数' }] })}\n\n### Confirm 与正式提交\n\n1. 展示完整的整体参数表与所有明细行；申请人／部门显示业务名称，关联单据显示标题，账号仅展示尾号。附件须列出实际待提交文件。不能只显示金额就要求确认。\n2. 等待用户对这版表格明确回复“确认提交”或“Confirm”。最初“帮我申请”的指令、沉默、工具返回或 Agent 自行判断，都不能代替这一步。\n3. 得到明确确认后，才允许调用本地已适配的提交工具，使用这版 revision、bundleHash、previewHash；费用报销工具另传 userConfirmed=true。此参数是调用方对真实人类确认的声明，不是用户签名或权限凭证。\n4. 任意参数、明细、附件发生改变，或执行时预览指纹不匹配，都应重新生成、展示并等待确认。确认状态不能沿用到新内容，也不能跨业务或跨用户复用。\n5. 提交后以 API 回读确认单号、金额和附件。结果不确定只做核验，不自动再次创建。\n\n${kind === 'expense' ? '当前可执行范围为本人、非项目、单明细费用报销；先 dryRun=true 获取 confirmation.markdown，收到确认后再 dryRun=false。' : '本节只定义提交前展示和用户确认流程；当前发布没有新增本业务的通用提交适配器。用户 Confirm 也不解除未验证分支或接口的限制。'}\n<!-- fargo-user-confirmation:end -->\n`;
-}
-
-export function appendBusinessConfirmation(handbook, kind) {
-  const cleaned = handbook.replace(/\n?<!-- fargo-user-confirmation:start -->[\s\S]*?<!-- fargo-user-confirmation:end -->\n?/g, '').trimEnd();
-  return cleaned + '\n' + businessConfirmationHandbook(kind);
-}

package/src/yida-expense-contract.mjs

@@ -1,86 +0,0 @@
-import { confirmationLayouts } from "./yida-confirmation.mjs";
-// Reviewed ordinary-expense adapter contract. Shared by the runtime and the
-// schema publisher; no personal records, credentials, or arbitrary expressions.
-export const EXPENSE_BUSINESS_ID = "form_6eb2e57a94cf4445bb28508dc45262e3mddx";
-export const EXPENSE_SCHEMA_HASH = "sha256:8bbaf86f707819a65c517cff180fbe257c127615706567912ad60d300b797cbd";
-const steps = [
-  ["company", "selectField_m41cj946", "linked_value", "one"],
-  ["costCompanies", "selectField_m8lq9x6l", "options", "list"],
-  ["categories", "selectField_m41cj94f", "options", "list"],
-  ["currencies", "selectField_m41cj94m", "options", "list"],
-  ["accounts", "selectField_m4aplvi5", "options", "list"],
-  ["paymentCurrency", "textField_m41cj947", "linked_value", "one"],
-  ["framework", "selectField_m8lq9x6m", "linked_value", "one"],
-  ["businessLine", "selectField_m8lq9x6s", "linked_value", "one"],
-  ["businessSubline", "selectField_m8lq9x6t", "linked_value", "one"],
-  ["finance", "employeeField_m45931x3", "linked_value", "list"],
-  ["cashier", "employeeField_m45931x4", "linked_value", "list"],
-  ["rate", "numberField_m41cj94n", "linked_value", "one"],
-  ["hkdRate", "numberField_m41cj959", "linked_value", "one"]
-];
-export const expenseLookupPlan = steps.map(([name, fieldId, kind, result]) => ({ name, fieldId, kind, result }));
-export function expenseExecutionContract(schema) {
-  if (schema.businessId !== EXPENSE_BUSINESS_ID || schema.schemaHash !== EXPENSE_SCHEMA_HASH) throw new Error("YIDA_EXPENSE_DEFINITION_NOT_REVIEWED");
-  return {
-    version: 3, adapter: "ordinary_expense_v1", localTool: "yida_submit_expense", reviewedSchemaHash: EXPENSE_SCHEMA_HASH,
-    scope: { ownRequestsOnly: true, project: false, lineCount: 1, attachmentCount: 1, genericSubmission: false },
-    inputs: {
-      amount: { field: "tableField_m41cj94c.numberField_m41cj94j", meaning: "original_amount", minimum: 0.01, maximum: 100000000, decimalPlaces: 2 },
-      currency: { field: "tableField_m41cj94c.selectField_m41cj94m", source: "user_and_live_options" },
-      description: { field: "tableField_m41cj94c.textField_m41cj94g", source: "user" },
-      expenseCategory: { field: "tableField_m41cj94c.selectField_m41cj94f", source: "live_options" },
-      accountingItem: { field: "tableField_m41cj94c.selectField_m4aplvi5", dependsOn: ["expenseCategory"], source: "live_options" },
-      costCompany: { field: "selectField_m8lq9x6l", source: "user_and_live_options", distinctFrom: "paymentCompany" },
-      invoiceNumber: { storage: "notes_and_row_note", source: "invoice", duplicateKey: true },
-      invoiceDate: { storage: "notes", format: "valid_calendar_date_YYYY-MM-DD" },
-      paymentOrder: { storage: "notes_and_row_note", source: "payment_evidence", duplicateKey: true },
-      attachmentReceiptPath: { scope: "local_only", registeredUploadRequired: true }
-    },
-    identity: { applicant: "current_OAuth_member", bank: "same_members_HR_record", department: "own_main_department", manager: "first_configured_department_manager", shareHrWithinOperation: true, onlineChecksPerPreparation: 1, localCredentialCheckOnReuse: true, onlineRevalidationBeforeWrite: true, taskLifetime: "single_MCP_invocation_max_5_minutes" },
-    lookupPlan: expenseLookupPlan.map(step => ({ ...step, inputs: schema.runtime.rules.find(r => r.fieldId === step.fieldId && r.kind === step.kind).inputs })),
-    lookupAliases: { textField_m41cj956: "selectField_m41cj946" },
-    scheduling: { dependencyDriven: true, maxConcurrentLookups: 4, cacheLifetime: "one_operation", persistentValueCache: false, revalidateOnExecute: true },
-    calculations: schema.runtime.rules.filter(r => ["numberField_m41cj94p", "numberField_m41cj94o", "numberField_m41cj94a", "numberField_m41cj95d"].includes(r.fieldId) && r.kind === "calculation")
-      .map(({ fieldId, expression, inputs }) => ({ fieldId, expression, inputs, decimalPlaces: 2, implementation: "decimal_half_up" })),
-    currencies: { original: "selectField_m41cj94m", payment: "textField_m41cj947", reporting: "HKD", rates: "live_lookup_each_operation" },
-    attachment: { field: "attachmentField_m41cj94r", type: "application/pdf", maxBytes: 20000000, readbackEncoding: ["array", "json_string_array"], compare: ["fileUuid", "name", "size"] },
-    confirmation: { required: true, format: "markdown", sections: ["overall_parameters", "detail_rows"], headerFields: confirmationLayouts.expense.header.map(([fieldId, label]) => ({ fieldId, label })), detailColumns: confirmationLayouts.expense.columns.map(([fieldId, label]) => ({ fieldId, label })), showBeforeSubmit: true, explicitHumanReplyRequired: true, callerAttestation: "userConfirmed", binding: "previewHash", changesRequireReconfirmation: true },
-    submission: { defaultDryRun: true, pin: ["revision", "bundleHash", "previewHash"], duplicateScope: "own_form_invoice_or_order_excluding_detail_verified_terminated", mutationAttempts: 1,
-      gates: ["publisher_admission", "live_schema", "own_identity", "process_binding", "current_options", "preview_match", "duplicate_scan", "operation_lock"],
-      unknownResult: "read_only_reconcile_never_resubmit" },
-    verification: { compare: ["processInstanceId", "formUuid", "processCode", "originator", "invoiceNumber", "paymentOrder", "amounts", "currencies", "exchangeRates", "category", "accountingItem", "companies", "ownBank", "attachment"],
-      evidence: "one_live_non_project_submission_readback_2026-10-15", allBranchesVerified: false },
-    limitations: ["project_expenses_not_adapted", "multi_line_not_adapted", "upload_requires_registered_local_receipt", "other_workflow_cancellations_not_live_verified"]
-  };
-}
-
-export const expenseExecutionHandbook = `
-## 普通费用报销：已验证的本地执行契约
-
-本节对应 schema.execution，工具为 yida_submit_expense。已完成一次本人、非项目、单明细、单 PDF 的真实提交与回读；不代表项目报销、多明细或其他业务可直接提交。付款公司来自当前员工配置，成本承担公司需按票据及业务选择；两者可以不同。收款人及银行资料仅来自当前员工自己的 HR。
-
-### 最短执行路径
-
-1. 从发票取得金额、币种、号码、开票日期，从付款凭证取得订单号。发票与截图合并为同一 PDF，保留页序、原内容并检查页数和可读性。
-2. 使用个人 OAuth 完成 OSS 签名上传和宜搭回调登记，取得绑定本地账号及企业的上传回执。当前上传仍需本地辅助流程，提交工具不接受裸文件 URL，也不负责合并文件。
-3. 提交工具默认 dryRun=true。固定业务包版本并核实实时定义；同一次准备只取一份 HR，同时查询部门经理和 13 项选项／联动。查询按 schema 的 inputs 调度，最多 4 项并行，汇率不等待业务线。
-4. 原币金额与付款币金额分别展示。行付款金额 = ROUND(原币金额 × 原币至付款币汇率, 2)；行 HKD 金额 = ROUND(行付款金额 × 付款币至 HKD 汇率, 2)。总额分别汇总对应行金额，按十进制四舍五入。
-5. 同一次工具调用内共用身份上下文，只远程解析一次身份；每次使用前检查本地凭据是否变化。上下文最长 5 分钟，完成或失败即释放；真正写入前再次在线核验身份。
-6. 将 confirmation.markdown 中的整体参数表、明细数据表完整展示给用户，等待其对这版内容明确回复“确认提交”或“Confirm”。之后才复用返回的 revision、bundleHash、previewHash，并指定 userConfirmed=true、dryRun=false。不能将最初“帮我报销”的请求或工具输出视为对预览的确认；修改内容或预览失效后必须重新展示并等待确认。执行重新读取实时值，变化导致预览不匹配时应重新准备并再次确认，不沿用旧汇率或收款资料。
-7. 发起前完整扫描本人此表单的发票号或订单号重复记录，并在操作锁内再次检查。已经通过详情确认本人、同表单同流程、终止状态的旧申请不阻止独立重提；活动、完成和不明状态记录仍阻止重复。每次提交尝试由持久化操作记录保护，不删除旧回执，也不在新申请中添加业务关联；这不是宜搭端全局幂等保证。
-8. 获得实例号后回读，核对身份、流程、金额、币种、汇率、科目、公司、本人收款信息及附件的 UUID／名称／大小。附件既可能是数组，也可能是 JSON 文本数组。
-
-### 结果处理
-
-- preview：仅准备；不创建申请。保存返回的版本和预览指纹。
-- already_exists：检测到本人相同发票号或订单号，且不能确认是已终止的旧申请；返回现有实例。查详情核对，不作为新提交成功，也不重新提交。
-- submitted 且 verified=true：写入及回读均已确认，可报告单号与状态。
-- verification_pending：已有实例回执，后续只读详情补核验，不能再次创建。
-- result_unknown：写入结果不确定，按操作记录与本人列表对账，不能通过新请求号重试。
-
-### 更新与信息边界
-
-原始字段／公式的 schemaHash 与适配器审核版本绑定。新增执行规则以新的 Schema + Handbook 业务包 revision 分发，旧版本保持不可变；运行时能力还需更新本地 Fargo CLI，发布云端手册不会自动更新客户端代码。定义或上游返回结构变化时保持失败关闭，补充测试后再升级。
-
-持久化缓存仅保存定义包；HR、银行资料、汇率和选项不跨操作缓存。账号与权限检查、执行前实时定义复核保留。此契约不包含用户的银行账号、发票、附件地址或 OAuth 凭据。
-`;

package/src/yida-expense.mjs

@@ -1,261 +0,0 @@
-import { renderYidaConfirmation } from "./yida-confirmation.mjs";
-import { createYidaTaskContext } from "./yida-task.mjs";
-import { createHash } from "node:crypto";
-import { lstat, readFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { isAbsolute, join } from "node:path";
-import { getYidaBusinessBundle } from "./yida-business.mjs";
-import { canonicalJson, HASH } from "./yida-bundle-format.mjs";
-import { resolveYidaOwner, yidaStatus, yidaRead, yidaLookupExpression, yidaApplicantConnector, yidaPostFormOnce } from "./yida-auth.mjs";
-import { compileYidaLookup } from "./yida-rules.mjs";
-import { resolveYidaApplicantFromContext } from "./yida-runtime.mjs";
-import { describeYidaForm } from "./yida-schema.mjs";
-import { runRecordedYidaMutation, extractYidaProcessId } from "./yida-operation.mjs";
-
-import { EXPENSE_BUSINESS_ID as businessId, EXPENSE_SCHEMA_HASH as reviewedHash, expenseLookupPlan } from "./yida-expense-contract.mjs";
-import { resolveYidaLookupPlan } from "./yida-lookup-plan.mjs";
-const digest = value => `sha256:${createHash("sha256").update(canonicalJson(value)).digest("hex")}`;
-const fail = code => { throw new Error(code); };
-// Decimal half-up on the API's decimal numbers; binary multiplication can turn
-// 1 * 1.005 into 1.00. Keep exact cents through the rounding step.
-export function roundYidaMoneyProduct(a, b) {
-  const decimal = value => {
-    if (!Number.isFinite(value) || value < 0) fail("YIDA_EXPENSE_RATE_INVALID");
-    const [mantissa, exponent = "0"] = String(value).toLowerCase().split("e");
-    const [integer, fraction = ""] = mantissa.split(".");
-    return { n: BigInt(integer + fraction), scale: fraction.length - Number(exponent) };
-  };
-  const x = decimal(a), y = decimal(b), scale = x.scale + y.scale - 2;
-  let cents = x.n * y.n;
-  if (scale > 0) { const divisor = 10n ** BigInt(scale); cents = (cents * 2n + divisor) / (2n * divisor); }
-  else cents *= 10n ** BigInt(-scale);
-  if (cents > BigInt(Number.MAX_SAFE_INTEGER)) fail("YIDA_EXPENSE_AMOUNT_OVERFLOW");
-  return Number(cents) / 100;
-}
-
-function validInvoiceDate(value) {
-  if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(value)) return false;
-  const date = new Date(`${value}T00:00:00Z`);
-  return Number.isFinite(date.getTime()) && date.toISOString().slice(0, 10) === value;
-}
-
-// YiDA returns AttachmentField values as JSON text in getInstanceById,
-// while other collection fields may already be arrays. Normalize by field type.
-export function readYidaExpenseArray(value) {
-  if (typeof value === "string") {
-    if (value.length > 2_000_000) fail("YIDA_EXPENSE_READBACK_MALFORMED");
-    try { value = JSON.parse(value); } catch { fail("YIDA_EXPENSE_READBACK_MALFORMED"); }
-  }
-  if (!Array.isArray(value)) fail("YIDA_EXPENSE_READBACK_MALFORMED");
-  return value;
-}
-
-// A reviewed adapter for this ordinary, non-project expense form only. This
-// does not enable the catalog's generic submission capability or arbitrary writes.
-export async function submitYidaExpense(store, input, options = {}) {
-  const task = createYidaTaskContext(store, options);
-  try { return await submitExpenseInTask(store, input, task.options); }
-  finally { task.close(); }
-}
-
-async function submitExpenseInTask(store, input, options) {
-  if (!input || !Number.isFinite(input.amount) || input.amount <= 0 || input.amount > 100_000_000 ||
-      Math.abs(input.amount * 100 - Math.round(input.amount * 100)) > 0.000001 || !/^[A-Z]{3}$/.test(input.currency ?? "") ||
-      !/^[0-9]{8,30}$/.test(input.invoiceNumber ?? "") || !validInvoiceDate(input.invoiceDate) ||
-      !/^[A-Za-z0-9_-]{1,80}$/.test(input.paymentOrder ?? "") ||
-      ["description", "expenseCategory", "accountingItem", "costCompany"].some(k => typeof input[k] !== "string" || !input[k].trim() || input[k].length > 1000) ||
-      typeof input.attachmentReceiptPath !== "string" || !isAbsolute(input.attachmentReceiptPath) ||
-      (input.dryRun !== undefined && typeof input.dryRun !== "boolean") || (input.userConfirmed !== undefined && typeof input.userConfirmed !== "boolean")) fail("YIDA_EXPENSE_INPUT_INVALID");
-  const execute = input.dryRun === false;
-  if (execute && (!HASH.test(input.previewHash ?? "") || !HASH.test(input.bundleHash ?? "") || !Number.isSafeInteger(input.revision) || input.revision < 1)) fail("YIDA_EXPENSE_PREVIEW_REQUIRED");
-  if (execute && input.userConfirmed !== true) fail("YIDA_EXPENSE_USER_CONFIRMATION_REQUIRED");
-  const owner = await resolveYidaOwner(store, options);
-  const loaded = await getYidaBusinessBundle(store, businessId, { ...options, revision: input.revision, bundleHash: input.bundleHash });
-  const schema = loaded.bundle.schema;
-  if (loaded.status !== "current" || schema.schemaHash !== reviewedHash || schema.formType !== "process") fail("YIDA_EXPENSE_DEFINITION_NOT_REVIEWED");
-  const principal = (await yidaStatus(store, options)).profiles.find(p => p.profile === loaded.profile);
-  if (!principal || principal.corpId !== loaded.bundle.corpId || principal.baseUrl !== loaded.bundle.yidaOrigin) fail("YIDA_EXPENSE_IDENTITY_MISMATCH");
-  const local = { ...options, profile: principal.profile, schemaHash: reviewedHash };
-  const assertOwner = async () => { if (digest(owner) !== digest(await resolveYidaOwner(store, options))) fail("YIDA_FARGO_ACCOUNT_CHANGED"); };
-  const checkBinding = async () => {
-    const x = await yidaRead(store, `/${schema.appType}/query/formProcBinding/getBindingByFormUuid.json?${new URLSearchParams({ formUuid: schema.formUuid })}`, local);
-    if (x.content?.appType !== schema.appType || x.content?.procCode !== schema.entry.processCode) fail("YIDA_EXPENSE_PROCESS_MISMATCH");
-  };
-  await checkBinding();
-  const fileInfo = await lstat(input.attachmentReceiptPath);
-  if (!fileInfo.isFile() || fileInfo.isSymbolicLink() || fileInfo.size > 100_000 ||
-      typeof process.getuid === "function" && fileInfo.uid !== process.getuid()) fail("YIDA_EXPENSE_ATTACHMENT_INVALID");
-  const proof = JSON.parse(await readFile(input.attachmentReceiptPath, "utf8"));
-  const attachment = proof.attachment;
-  if (digest(proof.owner) !== digest(owner) || proof.profile !== principal.profile || !/^[a-f0-9]{64}$/.test(proof.hash ?? "") ||
-      !attachment || !attachment.name?.endsWith(".pdf") || !Number.isSafeInteger(attachment.size) || attachment.size <= 0 || attachment.size > 20_000_000 ||
-      !attachment.fileUuid?.startsWith(schema.appType + "_") && !attachment.fileUuid?.startsWith(schema.appType + "/")) fail("YIDA_EXPENSE_ATTACHMENT_INVALID");
-  for (const key of ["url", "downloadUrl", "previewUrl"]) {
-    let url; try { url = new URL(attachment[key]); } catch { fail("YIDA_EXPENSE_ATTACHMENT_INVALID"); }
-    if (url.origin !== principal.baseUrl) fail("YIDA_EXPENSE_ATTACHMENT_INVALID");
-  }
-  const lookup = async (rule, values) => {
-    const x = await yidaLookupExpression(store, schema.appType, schema.formUuid, compileYidaLookup(rule, values, schema.appType), local);
-    return x.content ?? x.result;
-  };
-  const memberIds = values => {
-    if (!values.length || values.some(v => typeof v !== "string" || !/^[A-Za-z0-9_.@-]{1,200}$/.test(v))) fail("YIDA_EXPENSE_ROUTING_UNRESOLVED");
-    return values;
-  };
-  const hrPromise = yidaApplicantConnector(store, schema.runtime.connectors.find(c => c.name === "getUserMessage"), "self_hr", undefined, local);
-  const applicantPromise = hrPromise.then(hr => resolveYidaApplicantFromContext(store, schema, principal, hr, undefined, local));
-  const [applicant, hrResponse, resolved] = await Promise.all([
-    applicantPromise, hrPromise,
-    resolveYidaLookupPlan(schema, expenseLookupPlan, {
-      textField_m41cj95b: principal.userId,
-      textField_m8lq9x6o: applicantPromise.then(a => a.departmentId),
-      selectField_m41cj94f: input.expenseCategory, selectField_m41cj94m: input.currency, textField_m41cj958: "HKD"
-    }, { textField_m41cj956: "selectField_m41cj946" }, lookup)
-  ]);
-  const hr = hrResponse.content?.serviceReturnValue ?? hrResponse.content;
-  if (hr?.errcode !== 0 || hr.success !== true || hr.result?.length !== 1 || hr.result[0].userid !== principal.userId) fail("YIDA_EXPENSE_HR_IDENTITY_MISMATCH");
-  const ownField = code => hr.result[0].field_data_list?.find(f => f.field_code === code)?.field_value_list?.[0]?.value ?? "";
-  // Only the bank fields the reviewed page copies from this member's own HR record.
-  const bank = { textField_m41cj949: ownField("sys04-bankAccountNo"), textField_m41cj948: ownField("c25a949b-1c28-4ad0-803b-4ce1ba8c7148"),
-    textField_m4vmcrx5: ownField("59b7514e-5d01-4a63-b236-e2566cf3e0e6"), textField_m4vmcrx6: ownField("eec62388-645f-4fa0-8ab5-42351a623c0b"),
-    textField_m4vmcrx7: ownField("eb1f9d44-a245-42f8-b11a-7b616b56bfcb") };
-  if (Object.values(bank).some(v => typeof v !== "string") || !bank.textField_m41cj949 || !bank.textField_m4vmcrx7) fail("YIDA_EXPENSE_OWN_BANK_REQUIRED");
-  if (!resolved.costCompanies.includes(input.costCompany) || !resolved.categories.includes(input.expenseCategory) ||
-      !resolved.currencies.includes(input.currency) || !resolved.accounts.includes(input.accountingItem)) fail("YIDA_EXPENSE_OPTION_INVALID");
-  const company = resolved.company, finance = resolved.finance, cashier = resolved.cashier;
-  const values = { textField_m41cj947: resolved.paymentCurrency, selectField_m8lq9x6m: resolved.framework,
-    selectField_m8lq9x6s: resolved.businessLine, selectField_m8lq9x6t: resolved.businessSubline };
-  const rate = Number(resolved.rate), hkdRate = Number(resolved.hkdRate);
-  if (![rate, hkdRate].every(n => Number.isFinite(n) && n > 0)) fail("YIDA_EXPENSE_RATE_INVALID");
-  const paid = roundYidaMoneyProduct(input.amount, rate), hkd = roundYidaMoneyProduct(paid, hkdRate);
-  const today = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Hong_Kong", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date());
-  const note = `${input.description}；原币 ${input.amount.toFixed(2)} ${input.currency}；发票 ${input.invoiceNumber}（${input.invoiceDate}）；支付订单 ${input.paymentOrder}。发票及付款凭证合并为同一份附件。`;
-  const row = { selectField_m41cj94f: input.expenseCategory, selectField_m4aplvi5: input.accountingItem, textField_m41cj94g: input.description,
-    numberField_m41cj94j: input.amount, selectField_m41cj94m: input.currency, numberField_m41cj94n: rate, numberField_m41cj94p: paid,
-    numberField_m41cj94o: hkd, numberField_m41cj959: hkdRate, textField_m41cj958: "HKD", textField_m41cj94q: `发票 ${input.invoiceNumber}；订单 ${input.paymentOrder}` };
-  const data = { ...bank, employeeField_m41da53i: [principal.userId], selectField_m4lf0x1o: applicant.departmentId,
-    textField_m6so5pht: applicant.departmentName, employeeField_m4lf0x1p: applicant.managerIds, textField_m8lq9x6n: applicant.departmentId,
-    textField_m8lq9x6o: applicant.departmentId, textField_m41cj95b: principal.userId, textField_m41cj957: applicant.workPlace ?? "",
-    textField_m41cj95a: applicant.positionLevel ?? "", textField_m41cj95c: principal.userId,
-    textField_mam99rbr: String(applicant.managerIds.length === 1 && applicant.managerIds[0] === principal.userId),
-    dateField_m41cj93y: Date.parse(`${today}T00:00:00+08:00`),
-    selectField_m41cj946: company, textField_m41cj956: company, textField_m41cj947: values.textField_m41cj947,
-    radioField_m8lq9x6j: company === input.costCompany ? "HIDDEN" : "NORMAL", selectField_m8lq9x6l: input.costCompany,
-    selectField_m8lq9x6m: values.selectField_m8lq9x6m, selectField_m8lq9x6s: values.selectField_m8lq9x6s, selectField_m8lq9x6t: values.selectField_m8lq9x6t,
-    radioField_m41da53k: "HIDDEN", textField_ml7ujl1g: "生效", textField_m8omfh8q: "是", textareaField_m41cj94b: note,
-    numberField_m41cj94a: paid, numberField_m41cj95d: hkd, employeeField_m45931x3: memberIds(finance), employeeField_m45931x4: memberIds(cashier),
-    tableField_m41cj94c: [row], attachmentField_m41cj94r: [attachment] };
-  const known = new Set(schema.fields.map(f => f.fieldId));
-  if ([...Object.keys(data), ...Object.keys(row)].some(k => !known.has(k))) fail("YIDA_EXPENSE_FIELD_INVALID");
-  const fields = { formUuid: schema.formUuid, processCode: schema.entry.processCode, formDataJson: JSON.stringify(data), deptId: applicant.departmentId, _api: "nattyFetch", _mock: "false" };
-  await assertOwner();
-  let previewHash;
-  const summary = { businessId, invoiceNumber: input.invoiceNumber, description: input.description, originalAmount: input.amount, originalCurrency: input.currency,
-    paymentAmount: paid, paymentCurrency: values.textField_m41cj947, exchangeRate: rate, paymentCompany: company, costCompany: input.costCompany,
-    expenseCategory: input.expenseCategory, accountingItem: input.accountingItem, attachmentName: attachment.name, attachmentSize: attachment.size,
-    bankAccountLast4: bank.textField_m41cj949.slice(-4) };
-  const listPath = `/dingtalk/web/${schema.appType}/v1/process/getInstances.json`;
-  async function reconcile() {
-    const terminatedIds = [];
-    for (let page = 1, seen = 0; page <= 20; page++) {
-      const x = await yidaRead(store, `${listPath}?${new URLSearchParams({ formUuid: schema.formUuid, originatorId: principal.userId, currentPage: String(page), pageSize: "100" })}`, local);
-      const content = x.content;
-      if (!Array.isArray(content?.data) || !Number.isSafeInteger(content.totalCount)) fail("YIDA_EXPENSE_RECONCILIATION_INCOMPLETE");
-      const matches = content.data.filter(r => r.originator?.userId === principal.userId &&
-        (JSON.stringify(r.data).includes(input.invoiceNumber) || JSON.stringify(r.data).includes(input.paymentOrder)));
-      for (const match of matches) {
-        if (!["TERMINATED", "CANCELED"].includes(match.instanceStatus)) return { match, terminatedIds };
-        // List states can be stale. Only a current, same-owner/form/detail read
-        // proves a prior invoice attempt is terminated and can be excluded.
-        if (typeof match.processInstanceId !== "string" || !/^[A-Za-z0-9_-]{1,200}$/.test(match.processInstanceId)) fail("YIDA_EXPENSE_RECONCILIATION_INCOMPLETE");
-        const detail = await yidaRead(store, `/dingtalk/web/${schema.appType}/v1/process/getInstanceById.json?${new URLSearchParams({ processInstanceId: match.processInstanceId })}`, local);
-        if (!isTerminatedExpense(detail.content, match.processInstanceId, schema, principal, input)) return { match, terminatedIds };
-        terminatedIds.push(match.processInstanceId);
-      }
-      seen += content.data.length;
-      if (seen >= content.totalCount) return { match: null, terminatedIds: [...new Set(terminatedIds)].sort() };
-      if (!content.data.length) break;
-    }
-    fail("YIDA_EXPENSE_RECONCILIATION_INCOMPLETE");
-  }
-  const reconciled = await reconcile();
-  const existing = reconciled.match;
-  previewHash = digest({ owner, profile: principal.profile, pin: loaded.pin, fields, terminatedIds: reconciled.terminatedIds });
-  const base = { pin: loaded.pin, previewHash, summary };
-  if (existing) return { ...base, status: "already_exists", requestSent: false, verified: false, actionRequired: "An invoice/order match exists. Read its details; do not resubmit.", processInstanceId: existing.processInstanceId, instanceStatus: existing.instanceStatus };
-  if (!execute) {
-    const markdown = renderYidaConfirmation("expense", {
-      headerValues: { ...data, employeeField_m41da53i: principal.userId, dateField_m41cj93y: today,
-        radioField_m41da53k: "否", selectField_m41da53l: "不适用（非项目）",
-        numberField_m41cj94a: `${paid.toFixed(2)} ${values.textField_m41cj947}` },
-      rows: [{ ...row, numberField_m41cj94j: input.amount.toFixed(2), numberField_m41cj94p: paid.toFixed(2) }], attachments: [attachment]
-    });
-    return { ...base, status: "preview", requestSent: false,
-      confirmation: { required: true, status: "awaiting_user", previewHash, markdown } };
-  }
-  if (input.previewHash !== previewHash) fail("YIDA_EXPENSE_PREVIEW_CHANGED");
-  const operationId = `expense-${digest({ owner, profile: principal.profile, appType: schema.appType, formUuid: schema.formUuid, invoiceNumber: input.invoiceNumber, ...(reconciled.terminatedIds.length ? { terminatedIds: reconciled.terminatedIds } : {}) }).slice(7)}`;
-  const operationRoot = options.yidaOperationDirectory ?? (process.platform === "win32" ? join(process.env.APPDATA || homedir(), "Fargo AI", "yida-operations") : join(options.yidaHome ?? homedir(), ".fargo", "yida-operations"));
-  let attemptedHere = false, receipt;
-  try {
-    receipt = await runRecordedYidaMutation({ directory: join(operationRoot, digest({ owner, profile: principal.profile }).slice(7)), requestId: operationId, payloadHash: previewHash,
-      send: async () => {
-        await assertOwner();
-        await checkBinding();
-        if ((await describeYidaForm(store, schema.appType, schema.formUuid, local)).schemaHash !== reviewedHash) fail("YIDA_SCHEMA_CHANGED");
-        const duplicate = await reconcile();
-        if (duplicate.match) return { processInstanceId: duplicate.match.processInstanceId, requestSent: false };
-        if (digest(duplicate.terminatedIds) !== digest(reconciled.terminatedIds)) fail("YIDA_EXPENSE_PREVIEW_CHANGED");
-        attemptedHere = true;
-        const response = await yidaPostFormOnce(store, `/dingtalk/web/${schema.appType}/v1/process/startInstance.json`, fields,
-          { ...local, expectedYidaPrincipal: principal, expectedFargoOwner: owner });
-        return { processInstanceId: extractYidaProcessId(response), requestSent: true };
-      } });
-  } catch (error) {
-    // Reconcile only. A new preview/request ID must not replay an ambiguous write.
-    const duplicate = await reconcile().catch(() => null);
-    if (duplicate?.match) receipt = { processInstanceId: duplicate.match.processInstanceId };
-    else return { ...base, status: "result_unknown", verified: false, requestSent: attemptedHere, operationId,
-      upstreamCode: error.upstreamCode ?? null, actionRequired: "Read the instance list and resolve the recorded operation; do not resubmit." };
-  }
-  try {
-    await assertOwner();
-    const x = await yidaRead(store, `/dingtalk/web/${schema.appType}/v1/process/getInstanceById.json?${new URLSearchParams({ processInstanceId: receipt.processInstanceId })}`, local);
-    const record = x.content;
-    const serialNumber = verifyYidaExpenseRecord(record, { processInstanceId: receipt.processInstanceId, schema, principal, input, paid, hkd, rate, hkdRate, values, company, bank, attachment });
-    await assertOwner();
-    return { ...base, status: "submitted", verified: true, verification: "api_readback", requestSent: attemptedHere, operationId,
-      processInstanceId: receipt.processInstanceId, instanceStatus: record.instanceStatus, serialNumber };
-  } catch {
-    return { ...base, status: "verification_pending", verified: false, requestSent: attemptedHere, operationId, processInstanceId: receipt.processInstanceId,
-      actionRequired: "A receipt exists. Read the instance to verify its fields; do not resubmit." };
-  }
-}
-
-export function verifyYidaExpenseRecord(record, { processInstanceId, schema, principal, input, paid, hkd, rate, hkdRate, values, company, bank, attachment }) {
-    const d = record?.data;
-    const rows = readYidaExpenseArray(d?.tableField_m41cj94c);
-    const attachments = readYidaExpenseArray(d?.attachmentField_m41cj94r);
-    const line = rows[0];
-    if (record?.processInstanceId !== processInstanceId || record.formUuid !== schema.formUuid || record.processCode !== schema.entry.processCode ||
-        record.originator?.userId !== principal.userId || !d || !line || rows.length !== 1 ||
-        !JSON.stringify(d).includes(input.invoiceNumber) || !JSON.stringify(d).includes(input.paymentOrder) ||
-        Number(d.numberField_m41cj94a) !== paid || Number(line.numberField_m41cj94j) !== input.amount || Number(line.numberField_m41cj94p) !== paid ||
-        Number(line.numberField_m41cj94n) !== rate || Number(line.numberField_m41cj959) !== hkdRate ||
-        Number(line.numberField_m41cj94o) !== hkd || Number(d.numberField_m41cj95d) !== hkd ||
-        line.selectField_m41cj94f !== input.expenseCategory || line.selectField_m4aplvi5 !== input.accountingItem ||
-        line.selectField_m41cj94m !== input.currency || d.textField_m41cj947 !== values.textField_m41cj947 ||
-        d.selectField_m41cj946 !== company || d.selectField_m8lq9x6l !== input.costCompany ||
-        d.textField_m41cj949 !== bank.textField_m41cj949 || d.textField_m4vmcrx7 !== bank.textField_m4vmcrx7 ||
-        attachments.length !== 1 || attachments[0]?.fileUuid !== attachment.fileUuid ||
-        attachments[0]?.name !== attachment.name || Number(attachments[0]?.size) !== attachment.size) fail("YIDA_EXPENSE_READBACK_MISMATCH");
-  return record.data.serialNumberField_m41cj93z ?? null;
-}
-
-// Terminal records do not block a fresh independent expense. No association is
-// written into business data; local replay protection uses the verified history.
-export function isTerminatedExpense(record, id, schema, principal, input) {
-  return record?.processInstanceId === id && record.formUuid === schema.formUuid && record.processCode === schema.entry.processCode &&
-    record.originator?.userId === principal.userId && ["TERMINATED", "CANCELED"].includes(record.instanceStatus) &&
-    (JSON.stringify(record.data ?? {}).includes(input.invoiceNumber) || JSON.stringify(record.data ?? {}).includes(input.paymentOrder));
-}

package/src/yida-lookup-plan.mjs

@@ -1,59 +0,0 @@
-// Operation-scoped dependency execution. No persistent cache, page JavaScript,
-// authentication reuse, or writes. The caller supplies its authorized lookup.
-export async function resolveYidaLookupPlan(schema, plan, seeds, aliases, lookup, concurrency = 4) {
-  const fail = () => { throw new Error("YIDA_LOOKUP_PLAN_INVALID"); };
-  if (!Number.isInteger(concurrency) || concurrency < 1 || concurrency > 8 || plan.length > 100) fail();
-  const nodes = new Map(), providers = new Map();
-  for (const step of plan) {
-    if (nodes.has(step.name) || !["one", "list"].includes(step.result)) fail();
-    const rules = schema.runtime.rules.filter(r => r.fieldId === step.fieldId && r.kind === step.kind);
-    if (rules.length !== 1 || !Array.isArray(rules[0].inputs)) fail();
-    nodes.set(step.name, { ...step, rule: rules[0] });
-    if (step.kind === "linked_value" && step.result === "one") {
-      if (providers.has(step.fieldId) || Object.hasOwn(seeds, step.fieldId) || Object.hasOwn(aliases, step.fieldId)) fail();
-      providers.set(step.fieldId, step.name);
-    }
-  }
-  // Validate the whole graph before issuing any lookup, including cycles through aliases.
-  const visiting = new Set(), visited = new Set();
-  function checkField(id) {
-    if (Object.hasOwn(seeds, id)) return;
-    if (visited.has(id)) return;
-    if (visiting.has(id)) fail();
-    visiting.add(id);
-    if (Object.hasOwn(aliases, id)) checkField(aliases[id]);
-    else if (providers.has(id)) nodes.get(providers.get(id)).rule.inputs.forEach(checkField);
-    else fail();
-    visiting.delete(id); visited.add(id);
-  }
-  for (const node of nodes.values()) node.rule.inputs.forEach(checkField);
-  let active = 0;
-  const waiting = [];
-  async function limited(fn) {
-    if (active >= concurrency) await new Promise(resolve => waiting.push(resolve));
-    else active++;
-    try { return await fn(); }
-    finally { if (waiting.length) waiting.shift()(); else active--; }
-  }
-  const pending = new Map();
-  function field(id) {
-    if (Object.hasOwn(seeds, id)) return Promise.resolve(seeds[id]);
-    if (Object.hasOwn(aliases, id)) return field(aliases[id]);
-    return run(providers.get(id));
-  }
-  function run(name) {
-    if (!pending.has(name)) {
-      const node = nodes.get(name);
-      pending.set(name, (async () => {
-        const pairs = await Promise.all(node.rule.inputs.map(async id => [id, await field(id)]));
-        const values = await limited(() => lookup(node.rule, Object.fromEntries(pairs)));
-        if (!Array.isArray(values) || values.length >= 100) throw new Error("YIDA_EXPENSE_LOOKUP_INCOMPLETE");
-        if (node.result === "list") return values;
-        if (values.length !== 1 || !["string", "number"].includes(typeof values[0]) || values[0] === "") throw new Error("YIDA_EXPENSE_DEFAULT_AMBIGUOUS");
-        return values[0];
-      })());
-    }
-    return pending.get(name);
-  }
-  return Object.fromEntries(await Promise.all([...nodes.keys()].map(async name => [name, await run(name)])));
-}