@bitrix24/b24jssdk 1.1.0 → 1.1.2

package/dist/umd/index.js

@@ -1,6 +1,6 @@
 /**
  * @package @bitrix24/b24jssdk
- * @version 1.1.0
+ * @version 1.1.2
  * @copyright (c) 2026 Bitrix24
  * @license MIT
  * @see https://github.com/bitrix24/b24jssdk
@@ -8153,11 +8153,11 @@
     }
   }
 
-  var __defProp$1J = Object.defineProperty;
-  var __name$1J = (target, value) => __defProp$1J(target, "name", { value, configurable: true });
+  var __defProp$1K = Object.defineProperty;
+  var __name$1K = (target, value) => __defProp$1K(target, "name", { value, configurable: true });
   class AbstractFormatter {
     static {
-      __name$1J(this, "AbstractFormatter");
+      __name$1K(this, "AbstractFormatter");
     }
     dateFormat;
     constructor(dateFormat = "YYYY-MM-DD HH:mm:ss") {
@@ -8175,11 +8175,11 @@
     }
   }
 
-  var __defProp$1I = Object.defineProperty;
-  var __name$1I = (target, value) => __defProp$1I(target, "name", { value, configurable: true });
+  var __defProp$1J = Object.defineProperty;
+  var __name$1J = (target, value) => __defProp$1J(target, "name", { value, configurable: true });
   class JsonFormatter extends AbstractFormatter {
     static {
-      __name$1I(this, "JsonFormatter");
+      __name$1J(this, "JsonFormatter");
     }
     constructor(dateFormat = "YYYY-MM-DD HH:mm:ss") {
       super(dateFormat);
@@ -8197,11 +8197,11 @@
     }
   }
 
-  var __defProp$1H = Object.defineProperty;
-  var __name$1H = (target, value) => __defProp$1H(target, "name", { value, configurable: true });
+  var __defProp$1I = Object.defineProperty;
+  var __name$1I = (target, value) => __defProp$1I(target, "name", { value, configurable: true });
   class LineFormatter extends AbstractFormatter {
     static {
-      __name$1H(this, "LineFormatter");
+      __name$1I(this, "LineFormatter");
     }
     formatString;
     constructor(formatString = "[{channel}] {levelName}: {message} {context} {extra} {date}", dateFormat = "YYYY-MM-DD HH:mm:ss") {
@@ -8226,11 +8226,11 @@
     }
   }
 
-  var __defProp$1G = Object.defineProperty;
-  var __name$1G = (target, value) => __defProp$1G(target, "name", { value, configurable: true });
+  var __defProp$1H = Object.defineProperty;
+  var __name$1H = (target, value) => __defProp$1H(target, "name", { value, configurable: true });
   class TelegramFormatter extends AbstractFormatter {
     static {
-      __name$1G(this, "TelegramFormatter");
+      __name$1H(this, "TelegramFormatter");
     }
     useHtml;
     maxMessageLength;
@@ -8317,9 +8317,9 @@ ${extraStr}
     }
   }
 
-  var __defProp$1F = Object.defineProperty;
-  var __name$1F = (target, value) => __defProp$1F(target, "name", { value, configurable: true });
-  const pidProcessor = /* @__PURE__ */ __name$1F((record) => {
+  var __defProp$1G = Object.defineProperty;
+  var __name$1G = (target, value) => __defProp$1G(target, "name", { value, configurable: true });
+  const pidProcessor = /* @__PURE__ */ __name$1G((record) => {
     record.extra["pid"] = "?";
     if (typeof process !== "undefined" && process.pid) {
       record.extra["pid"] = process.pid;
@@ -8327,9 +8327,9 @@ ${extraStr}
     return record;
   }, "pidProcessor");
 
-  var __defProp$1E = Object.defineProperty;
-  var __name$1E = (target, value) => __defProp$1E(target, "name", { value, configurable: true });
-  const memoryUsageProcessor = /* @__PURE__ */ __name$1E((record) => {
+  var __defProp$1F = Object.defineProperty;
+  var __name$1F = (target, value) => __defProp$1F(target, "name", { value, configurable: true });
+  const memoryUsageProcessor = /* @__PURE__ */ __name$1F((record) => {
     record.extra["memoryUsage"] = "?";
     if (typeof process !== "undefined" && process.memoryUsage) {
       record.extra["memoryUsage"] = Math.round(process.memoryUsage().heapUsed / 1024 / 1024) + "MB";
@@ -8337,11 +8337,11 @@ ${extraStr}
     return record;
   }, "memoryUsageProcessor");
 
-  var __defProp$1D = Object.defineProperty;
-  var __name$1D = (target, value) => __defProp$1D(target, "name", { value, configurable: true });
+  var __defProp$1E = Object.defineProperty;
+  var __name$1E = (target, value) => __defProp$1E(target, "name", { value, configurable: true });
   class AbstractHandler {
     static {
-      __name$1D(this, "AbstractHandler");
+      __name$1E(this, "AbstractHandler");
     }
     level;
     formatter = null;
@@ -8364,11 +8364,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1C = Object.defineProperty;
-  var __name$1C = (target, value) => __defProp$1C(target, "name", { value, configurable: true });
+  var __defProp$1D = Object.defineProperty;
+  var __name$1D = (target, value) => __defProp$1D(target, "name", { value, configurable: true });
   class ConsoleHandler extends AbstractHandler {
     static {
-      __name$1C(this, "ConsoleHandler");
+      __name$1D(this, "ConsoleHandler");
     }
     _styles = /* @__PURE__ */ new Map();
     _useStyles;
@@ -8448,11 +8448,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1B = Object.defineProperty;
-  var __name$1B = (target, value) => __defProp$1B(target, "name", { value, configurable: true });
+  var __defProp$1C = Object.defineProperty;
+  var __name$1C = (target, value) => __defProp$1C(target, "name", { value, configurable: true });
   class ConsoleV2Handler extends ConsoleHandler {
     static {
-      __name$1B(this, "ConsoleV2Handler");
+      __name$1C(this, "ConsoleV2Handler");
     }
     constructor(level = LogLevel.DEBUG, options) {
       super(level, options);
@@ -8485,11 +8485,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1A = Object.defineProperty;
-  var __name$1A = (target, value) => __defProp$1A(target, "name", { value, configurable: true });
+  var __defProp$1B = Object.defineProperty;
+  var __name$1B = (target, value) => __defProp$1B(target, "name", { value, configurable: true });
   class MemoryHandler extends AbstractHandler {
     static {
-      __name$1A(this, "MemoryHandler");
+      __name$1B(this, "MemoryHandler");
     }
     records = [];
     limit;
@@ -8520,11 +8520,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1z = Object.defineProperty;
-  var __name$1z = (target, value) => __defProp$1z(target, "name", { value, configurable: true });
+  var __defProp$1A = Object.defineProperty;
+  var __name$1A = (target, value) => __defProp$1A(target, "name", { value, configurable: true });
   class StreamHandler extends AbstractHandler {
     static {
-      __name$1z(this, "StreamHandler");
+      __name$1A(this, "StreamHandler");
     }
     /**
      * Stream for writing logs.
@@ -8579,11 +8579,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1y = Object.defineProperty;
-  var __name$1y = (target, value) => __defProp$1y(target, "name", { value, configurable: true });
+  var __defProp$1z = Object.defineProperty;
+  var __name$1z = (target, value) => __defProp$1z(target, "name", { value, configurable: true });
   class ConsolaAdapter extends AbstractHandler {
     static {
-      __name$1y(this, "ConsolaAdapter");
+      __name$1z(this, "ConsolaAdapter");
     }
     consolaInstance;
     constructor(level = LogLevel.DEBUG, options) {
@@ -8628,11 +8628,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1x = Object.defineProperty;
-  var __name$1x = (target, value) => __defProp$1x(target, "name", { value, configurable: true });
+  var __defProp$1y = Object.defineProperty;
+  var __name$1y = (target, value) => __defProp$1y(target, "name", { value, configurable: true });
   class WinstonAdapter extends AbstractHandler {
     static {
-      __name$1x(this, "WinstonAdapter");
+      __name$1y(this, "WinstonAdapter");
     }
     winstonLogger;
     constructor(level = LogLevel.DEBUG, options) {
@@ -8672,8 +8672,8 @@ ${extraStr}
     }
   }
 
-  var __defProp$1w = Object.defineProperty;
-  var __name$1w = (target, value) => __defProp$1w(target, "name", { value, configurable: true });
+  var __defProp$1x = Object.defineProperty;
+  var __name$1x = (target, value) => __defProp$1x(target, "name", { value, configurable: true });
   var Environment = /* @__PURE__ */ ((Environment2) => {
     Environment2["UNKNOWN"] = "unknown";
     Environment2["BROWSE"] = "browser";
@@ -8689,13 +8689,13 @@ ${extraStr}
     }
     return "unknown" /* UNKNOWN */;
   }
-  __name$1w(getEnvironment, "getEnvironment");
+  __name$1x(getEnvironment, "getEnvironment");
 
-  var __defProp$1v = Object.defineProperty;
-  var __name$1v = (target, value) => __defProp$1v(target, "name", { value, configurable: true });
+  var __defProp$1w = Object.defineProperty;
+  var __name$1w = (target, value) => __defProp$1w(target, "name", { value, configurable: true });
   class TelegramHandler extends AbstractHandler {
     static {
-      __name$1v(this, "TelegramHandler");
+      __name$1w(this, "TelegramHandler");
     }
     botToken;
     chatId;
@@ -8833,11 +8833,11 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1u = Object.defineProperty;
-  var __name$1u = (target, value) => __defProp$1u(target, "name", { value, configurable: true });
+  var __defProp$1v = Object.defineProperty;
+  var __name$1v = (target, value) => __defProp$1v(target, "name", { value, configurable: true });
   class AbstractLogger {
     static {
-      __name$1u(this, "AbstractLogger");
+      __name$1v(this, "AbstractLogger");
     }
     /**
      * @inheritDoc
@@ -8890,11 +8890,11 @@ If you need to send logs from browser, use a proxy server.`;
     // endregion ////
   }
 
-  var __defProp$1t = Object.defineProperty;
-  var __name$1t = (target, value) => __defProp$1t(target, "name", { value, configurable: true });
+  var __defProp$1u = Object.defineProperty;
+  var __name$1u = (target, value) => __defProp$1u(target, "name", { value, configurable: true });
   class NullLogger extends AbstractLogger {
     static {
-      __name$1t(this, "NullLogger");
+      __name$1u(this, "NullLogger");
     }
     // region static methods for creation ////
     static create() {
@@ -8910,11 +8910,11 @@ If you need to send logs from browser, use a proxy server.`;
     // endregion ////
   }
 
-  var __defProp$1s = Object.defineProperty;
-  var __name$1s = (target, value) => __defProp$1s(target, "name", { value, configurable: true });
+  var __defProp$1t = Object.defineProperty;
+  var __name$1t = (target, value) => __defProp$1t(target, "name", { value, configurable: true });
   class Logger extends AbstractLogger {
     static {
-      __name$1s(this, "Logger");
+      __name$1t(this, "Logger");
     }
     channel;
     handlers = [];
@@ -8973,11 +8973,11 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1r = Object.defineProperty;
-  var __name$1r = (target, value) => __defProp$1r(target, "name", { value, configurable: true });
+  var __defProp$1s = Object.defineProperty;
+  var __name$1s = (target, value) => __defProp$1s(target, "name", { value, configurable: true });
   class LoggerFactory {
     static {
-      __name$1r(this, "LoggerFactory");
+      __name$1s(this, "LoggerFactory");
     }
     static createNullLogger() {
       return NullLogger.create();
@@ -9025,8 +9025,8 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1q = Object.defineProperty;
-  var __name$1q = (target, value) => __defProp$1q(target, "name", { value, configurable: true });
+  var __defProp$1r = Object.defineProperty;
+  var __name$1r = (target, value) => __defProp$1r(target, "name", { value, configurable: true });
   const deprecateMessage = "@deprecate: use Logger. https://bitrix24.github.io/b24jssdk/docs/working-with-the-rest-api/logger/";
   var LoggerType = /* @__PURE__ */ ((LoggerType2) => {
     LoggerType2["desktop"] = "desktop";
@@ -9039,7 +9039,7 @@ If you need to send logs from browser, use a proxy server.`;
   })(LoggerType || {});
   class LoggerBrowser {
     static {
-      __name$1q(this, "LoggerBrowser");
+      __name$1r(this, "LoggerBrowser");
     }
     #logger;
     /**
@@ -9196,12 +9196,12 @@ If you need to send logs from browser, use a proxy server.`;
     return DataType2;
   })(DataType || {});
 
-  var __defProp$1p = Object.defineProperty;
-  var __name$1p = (target, value) => __defProp$1p(target, "name", { value, configurable: true });
+  var __defProp$1q = Object.defineProperty;
+  var __name$1q = (target, value) => __defProp$1q(target, "name", { value, configurable: true });
   const OBJECT_CONSTRUCTOR_STRING = Function.prototype.toString.call(Object);
   class TypeManager {
     static {
-      __name$1p(this, "TypeManager");
+      __name$1q(this, "TypeManager");
     }
     getTag(value) {
       return Object.prototype.toString.call(value);
@@ -9523,8 +9523,8 @@ If you need to send logs from browser, use a proxy server.`;
   }
   const Type = new TypeManager();
 
-  var __defProp$1o = Object.defineProperty;
-  var __name$1o = (target, value) => __defProp$1o(target, "name", { value, configurable: true });
+  var __defProp$1p = Object.defineProperty;
+  var __name$1p = (target, value) => __defProp$1p(target, "name", { value, configurable: true });
   function pick(data, keys) {
     const result = {};
     for (const key of keys) {
@@ -9532,7 +9532,7 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return result;
   }
-  __name$1o(pick, "pick");
+  __name$1p(pick, "pick");
   function omit(data, keys) {
     const result = { ...data };
     for (const key of keys) {
@@ -9540,18 +9540,18 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return result;
   }
-  __name$1o(omit, "omit");
+  __name$1p(omit, "omit");
   function isArrayOfArray(item) {
     return Array.isArray(item[0]);
   }
-  __name$1o(isArrayOfArray, "isArrayOfArray");
+  __name$1p(isArrayOfArray, "isArrayOfArray");
   function getEnumValue(enumObj, value) {
     return Object.values(enumObj).includes(value) ? value : void 0;
   }
-  __name$1o(getEnumValue, "getEnumValue");
+  __name$1p(getEnumValue, "getEnumValue");
 
-  var __defProp$1n = Object.defineProperty;
-  var __name$1n = (target, value) => __defProp$1n(target, "name", { value, configurable: true });
+  var __defProp$1o = Object.defineProperty;
+  var __name$1o = (target, value) => __defProp$1o(target, "name", { value, configurable: true });
   const byteToHex = [];
   for (let i = 0; i < 256; ++i) {
     byteToHex.push((i + 256).toString(16).slice(1));
@@ -9570,7 +9570,7 @@ If you need to send logs from browser, use a proxy server.`;
       return t >>> 0;
     };
   }
-  __name$1n(sfc32, "sfc32");
+  __name$1o(sfc32, "sfc32");
   function uuidv7() {
     const bytes = new Uint8Array(16);
     const timestamp = BigInt(Date.now());
@@ -9592,10 +9592,10 @@ If you need to send logs from browser, use a proxy server.`;
     bytes[8] = 128 | bytes[8] & 63;
     return (byteToHex[bytes[0]] + byteToHex[bytes[1]] + byteToHex[bytes[2]] + byteToHex[bytes[3]] + "-" + byteToHex[bytes[4]] + byteToHex[bytes[5]] + "-" + byteToHex[bytes[6]] + byteToHex[bytes[7]] + "-" + byteToHex[bytes[8]] + byteToHex[bytes[9]] + "-" + byteToHex[bytes[10]] + byteToHex[bytes[11]] + byteToHex[bytes[12]] + byteToHex[bytes[13]] + byteToHex[bytes[14]] + byteToHex[bytes[15]]).toLowerCase();
   }
-  __name$1n(uuidv7, "uuidv7");
+  __name$1o(uuidv7, "uuidv7");
 
-  var __defProp$1m = Object.defineProperty;
-  var __name$1m = (target, value) => __defProp$1m(target, "name", { value, configurable: true });
+  var __defProp$1n = Object.defineProperty;
+  var __name$1n = (target, value) => __defProp$1n(target, "name", { value, configurable: true });
   const reEscape = /[&<>'"]/g;
   const reUnescape = /&(?:amp|#38|lt|#60|gt|#62|apos|#39|quot|#34)/g;
   const escapeEntities = {
@@ -9619,7 +9619,7 @@ If you need to send logs from browser, use a proxy server.`;
   };
   class TextManager {
     static {
-      __name$1m(this, "TextManager");
+      __name$1n(this, "TextManager");
     }
     getRandom(length = 8) {
       return [...Array(length)].map(() => Math.trunc(Math.random() * 36).toString(36)).join("");
@@ -9719,7 +9719,7 @@ If you need to send logs from browser, use a proxy server.`;
     numberFormat(number, decimals = 0, decPoint = ".", thousandsSep = ",") {
       const n = !Number.isFinite(number) ? 0 : number;
       const fractionDigits = !Number.isFinite(decimals) ? 0 : Math.abs(decimals);
-      const toFixedFix = /* @__PURE__ */ __name$1m((n2, fractionDigits2) => {
+      const toFixedFix = /* @__PURE__ */ __name$1n((n2, fractionDigits2) => {
         const k = Math.pow(10, fractionDigits2);
         return Math.round(n2 * k) / k;
       }, "toFixedFix");
@@ -9788,8 +9788,8 @@ If you need to send logs from browser, use a proxy server.`;
   }
   const Text = new TextManager();
 
-  var __defProp$1l = Object.defineProperty;
-  var __name$1l = (target, value) => __defProp$1l(target, "name", { value, configurable: true });
+  var __defProp$1m = Object.defineProperty;
+  var __name$1m = (target, value) => __defProp$1m(target, "name", { value, configurable: true });
   let UA = "";
   try {
     UA = navigator?.userAgent.toLowerCase();
@@ -9798,7 +9798,7 @@ If you need to send logs from browser, use a proxy server.`;
   }
   class BrowserManager {
     static {
-      __name$1l(this, "BrowserManager");
+      __name$1m(this, "BrowserManager");
     }
     isOpera() {
       return UA.includes("opera");
@@ -9936,8 +9936,8 @@ If you need to send logs from browser, use a proxy server.`;
     return ApiVersion2;
   })(ApiVersion || {});
 
-  var __defProp$1k = Object.defineProperty;
-  var __name$1k = (target, value) => __defProp$1k(target, "name", { value, configurable: true });
+  var __defProp$1l = Object.defineProperty;
+  var __name$1l = (target, value) => __defProp$1l(target, "name", { value, configurable: true });
   var EnumCrmEntityType = /* @__PURE__ */ ((EnumCrmEntityType2) => {
     EnumCrmEntityType2["undefined"] = "UNDEFINED";
     EnumCrmEntityType2["lead"] = "CRM_LEAD";
@@ -9981,7 +9981,7 @@ If you need to send logs from browser, use a proxy server.`;
     const key = EnumCrmEntityTypeId[id];
     return EnumCrmEntityTypeShort[key] || "?" /* undefined */;
   }
-  __name$1k(getEnumCrmEntityTypeShort, "getEnumCrmEntityTypeShort");
+  __name$1l(getEnumCrmEntityTypeShort, "getEnumCrmEntityTypeShort");
 
   var ProductRowDiscountTypeId = /* @__PURE__ */ ((ProductRowDiscountTypeId2) => {
     ProductRowDiscountTypeId2[ProductRowDiscountTypeId2["undefined"] = 0] = "undefined";
@@ -10015,8 +10015,8 @@ If you need to send logs from browser, use a proxy server.`;
     return CatalogRoundingRuleType2;
   })(CatalogRoundingRuleType || {});
 
-  var __defProp$1j = Object.defineProperty;
-  var __name$1j = (target, value) => __defProp$1j(target, "name", { value, configurable: true });
+  var __defProp$1k = Object.defineProperty;
+  var __name$1k = (target, value) => __defProp$1k(target, "name", { value, configurable: true });
   var EnumBitrix24Edition = /* @__PURE__ */ ((EnumBitrix24Edition2) => {
     EnumBitrix24Edition2["undefined"] = "undefined";
     EnumBitrix24Edition2["b24"] = "b24";
@@ -10064,7 +10064,7 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return EnumCrmEntityTypeId.undefined;
   }
-  __name$1j(convertBizprocDocumentTypeToCrmEntityTypeId, "convertBizprocDocumentTypeToCrmEntityTypeId");
+  __name$1k(convertBizprocDocumentTypeToCrmEntityTypeId, "convertBizprocDocumentTypeToCrmEntityTypeId");
   function getDocumentType(documentType, entityId) {
     let entityIdFormatted = "";
     let base = "undefined" /* undefined */;
@@ -10132,7 +10132,7 @@ If you need to send logs from browser, use a proxy server.`;
       entityIdFormatted
     ];
   }
-  __name$1j(getDocumentType, "getDocumentType");
+  __name$1k(getDocumentType, "getDocumentType");
   function getDocumentId(documentType, id, dynamicId) {
     let entityIdFormatted = "";
     const tmp = getDocumentType(documentType, 1);
@@ -10180,7 +10180,7 @@ If you need to send logs from browser, use a proxy server.`;
       entityIdFormatted
     ];
   }
-  __name$1j(getDocumentId, "getDocumentId");
+  __name$1k(getDocumentId, "getDocumentId");
   function getDocumentTypeForFilter(documentType) {
     const result = getDocumentType(documentType, 1);
     return [
@@ -10188,7 +10188,7 @@ If you need to send logs from browser, use a proxy server.`;
       result[1]
     ];
   }
-  __name$1j(getDocumentTypeForFilter, "getDocumentTypeForFilter");
+  __name$1k(getDocumentTypeForFilter, "getDocumentTypeForFilter");
 
   var LoadDataType = /* @__PURE__ */ ((LoadDataType2) => {
     LoadDataType2["App"] = "app";
@@ -10355,11 +10355,11 @@ If you need to send logs from browser, use a proxy server.`;
     ["ja" /* ja */]: "ja-JP"
   };
 
-  var __defProp$1i = Object.defineProperty;
-  var __name$1i = (target, value) => __defProp$1i(target, "name", { value, configurable: true });
+  var __defProp$1j = Object.defineProperty;
+  var __name$1j = (target, value) => __defProp$1j(target, "name", { value, configurable: true });
   class Result {
     static {
-      __name$1i(this, "Result");
+      __name$1j(this, "Result");
     }
     _errors;
     _data;
@@ -10444,11 +10444,11 @@ Errors: ${this.getErrorMessages().join(", ")}`;
     }
   }
 
-  var __defProp$1h = Object.defineProperty;
-  var __name$1h = (target, value) => __defProp$1h(target, "name", { value, configurable: true });
+  var __defProp$1i = Object.defineProperty;
+  var __name$1i = (target, value) => __defProp$1i(target, "name", { value, configurable: true });
   class SdkError extends Error {
     static {
-      __name$1h(this, "SdkError");
+      __name$1i(this, "SdkError");
     }
     code;
     _status;
@@ -10517,6 +10517,48 @@ ${this.stack}`;
     }
   }
 
+  var __defProp$1h = Object.defineProperty;
+  var __name$1h = (target, value) => __defProp$1h(target, "name", { value, configurable: true });
+  const SENSITIVE_PARAM_KEYS = [
+    "auth",
+    "password",
+    "token",
+    "secret",
+    "access_token",
+    "refresh_token"
+  ];
+  const REDACTED_PLACEHOLDER = "***REDACTED***";
+  function isPlainObject$1(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+  }
+  __name$1h(isPlainObject$1, "isPlainObject");
+  function redactObject(source, depth) {
+    const sanitized = { ...source };
+    for (const key of Object.keys(sanitized)) {
+      if (SENSITIVE_PARAM_KEYS.includes(key)) {
+        sanitized[key] = REDACTED_PLACEHOLDER;
+        continue;
+      }
+      if (depth <= 0) continue;
+      const child = sanitized[key];
+      if (isPlainObject$1(child)) {
+        sanitized[key] = redactObject(child, depth - 1);
+      } else if (Array.isArray(child)) {
+        sanitized[key] = child.map(
+          (item) => isPlainObject$1(item) ? redactObject(item, depth - 1) : item
+        );
+      }
+    }
+    return sanitized;
+  }
+  __name$1h(redactObject, "redactObject");
+  const DEFAULT_REDACT_DEPTH = 2;
+  function redactSensitiveParams(params) {
+    if (!isPlainObject$1(params)) return params;
+    return redactObject(params, DEFAULT_REDACT_DEPTH);
+  }
+  __name$1h(redactSensitiveParams, "redactSensitiveParams");
+
   var __defProp$1g = Object.defineProperty;
   var __name$1g = (target, value) => __defProp$1g(target, "name", { value, configurable: true });
   class AjaxError extends SdkError {
@@ -10531,7 +10573,10 @@ ${this.stack}`;
       params.description = AjaxError.formatErrorMessage(params);
       super(params);
       this.name = "AjaxError";
-      this.requestInfo = params.requestInfo;
+      this.requestInfo = params.requestInfo ? {
+        ...params.requestInfo,
+        ...params.requestInfo.params !== void 0 ? { params: redactSensitiveParams(params.requestInfo.params) } : {}
+      } : void 0;
       this.cleanErrorStack();
     }
     /**
@@ -10580,7 +10625,7 @@ ${this.stack}`;
       let output = `[${this.name}] ${this.code} (${this._status}): ${this.message}`;
       if (this.requestInfo) {
         output += `
-Request: ${this.requestInfo?.requestId ? `[${this.requestInfo.requestId}] ` : ""}${this.requestInfo.method} ${this.requestInfo.url}`;
+Request: ${this.requestInfo?.requestId ? `[${this.requestInfo.requestId}] ` : ""}${this.requestInfo.method}`;
       }
       if (this.stack) {
         output += `
@@ -10594,8 +10639,8 @@ ${this.stack}`;
      */
     static formatErrorMessage(params) {
       if (!params?.description) {
-        if (params.requestInfo?.method && params.requestInfo.url) {
-          return `${params.code} (on ${params.requestInfo.method}${params.requestInfo?.url ? " " + params.requestInfo.url : ""})`;
+        if (params.requestInfo?.method) {
+          return `${params.code} (on ${params.requestInfo.method})`;
         } else {
           return `Internal ajax error`;
         }
@@ -10843,7 +10888,8 @@ ${this.stack}`;
           maxDelay: 7e3
         },
         maxRetries: 3,
-        retryDelay: 1e3
+        retryDelay: 1e3,
+        retryOnNetworkError: true
       };
     }
     /**
@@ -11735,49 +11781,81 @@ ${this.stack}`;
       ].includes(answerError.code) || (answerError.description ?? "").includes("Could not find value for parameter");
     }
     /**
-     * These exceptions will be thrown
+     * Built-in hard error codes (always throw, never retry).
+     *
+     * Includes authorization and fatal codes that must never be silently retried.
+     * Use `RestrictionParams.hardErrorCodes` to extend this list with custom codes.
+     */
+    static BUILT_IN_HARD_ERROR_CODES = [
+      "ERR_BAD_REQUEST",
+      "JSSDK_UNKNOWN_ERROR",
+      "100",
+      "INTERNAL_SERVER_ERROR",
+      "ERROR_UNEXPECTED_ANSWER",
+      "PORTAL_DELETED",
+      "ERROR_BATCH_METHOD_NOT_ALLOWED",
+      "ERROR_BATCH_LENGTH_EXCEEDED",
+      "NO_AUTH_FOUND",
+      "INVALID_REQUEST",
+      "OVERLOAD_LIMIT",
+      "expired_token",
+      "ACCESS_DENIED",
+      "INVALID_CREDENTIALS",
+      "user_access_error",
+      "insufficient_scope",
+      "ERROR_MANIFEST_IS_NOT_AVAILABLE",
+      "allowed_only_intranet_user",
+      "NOT_FOUND",
+      "INVALID_ARG_VALUE"
+    ];
+    /**
+     * Built-in soft error codes (returned as `AjaxResult` with error, never thrown).
+     *
+     * Use `RestrictionParams.softErrorCodes` to extend this list with custom codes.
+     */
+    static BUILT_IN_SOFT_ERROR_CODES = [
+      "ERROR_ENTITY_NOT_FOUND",
+      "BITRIX_REST_V3_EXCEPTION_ACCESSDENIEDEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_INVALIDJSONEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_INVALIDFILTEREXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_INVALIDSELECTEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_ENTITYNOTFOUNDEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_METHODNOTFOUNDEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_UNKNOWNDTOPROPERTYEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_VALIDATION_REQUESTVALIDATIONEXCEPTION",
+      "BITRIX_REST_V3_EXCEPTION_VALIDATION_DTOVALIDATIONEXCEPTION"
+    ];
+    /**
+     * Codes that cause the SDK to throw immediately.
+     *
+     * Composed of:
+     * - `BUILT_IN_HARD_ERROR_CODES` (always included)
+     * - `NETWORK_ERROR` and `REQUEST_TIMEOUT` when `retryOnNetworkError === false`
+     * - `RestrictionParams.hardErrorCodes` (user-provided extensions)
      */
     get exceptionCodeForHard() {
-      return [
-        "ERR_BAD_REQUEST",
-        "JSSDK_UNKNOWN_ERROR",
-        // 'REQUEST_TIMEOUT', 'NETWORK_ERROR',
-        "100",
-        "INTERNAL_SERVER_ERROR",
-        "ERROR_UNEXPECTED_ANSWER",
-        "PORTAL_DELETED",
-        "ERROR_BATCH_METHOD_NOT_ALLOWED",
-        "ERROR_BATCH_LENGTH_EXCEEDED",
-        "NO_AUTH_FOUND",
-        "INVALID_REQUEST",
-        "OVERLOAD_LIMIT",
-        "expired_token",
-        "ACCESS_DENIED",
-        "INVALID_CREDENTIALS",
-        "user_access_error",
-        "insufficient_scope",
-        "ERROR_MANIFEST_IS_NOT_AVAILABLE",
-        "allowed_only_intranet_user",
-        "NOT_FOUND",
-        "INVALID_ARG_VALUE"
-      ];
+      const codes = [...RestrictionManager.BUILT_IN_HARD_ERROR_CODES];
+      if (this.#config.retryOnNetworkError === false) {
+        codes.push("NETWORK_ERROR", "REQUEST_TIMEOUT");
+      }
+      if (this.#config.hardErrorCodes && this.#config.hardErrorCodes.length > 0) {
+        codes.push(...this.#config.hardErrorCodes);
+      }
+      return codes;
     }
     /**
-     * These exceptions will be thrown into `AjaxResult` as `AjaxError`
+     * Codes returned as `AjaxResult` with an `AjaxError` payload instead of thrown.
+     *
+     * Composed of:
+     * - `BUILT_IN_SOFT_ERROR_CODES` (always included)
+     * - `RestrictionParams.softErrorCodes` (user-provided extensions)
      */
     get exceptionCodeForSoft() {
-      return [
-        "ERROR_ENTITY_NOT_FOUND",
-        "BITRIX_REST_V3_EXCEPTION_ACCESSDENIEDEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_INVALIDJSONEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_INVALIDFILTEREXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_INVALIDSELECTEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_ENTITYNOTFOUNDEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_METHODNOTFOUNDEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_UNKNOWNDTOPROPERTYEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_VALIDATION_REQUESTVALIDATIONEXCEPTION",
-        "BITRIX_REST_V3_EXCEPTION_VALIDATION_DTOVALIDATIONEXCEPTION"
-      ];
+      const codes = [...RestrictionManager.BUILT_IN_SOFT_ERROR_CODES];
+      if (this.#config.softErrorCodes && this.#config.softErrorCodes.length > 0) {
+        codes.push(...this.#config.softErrorCodes);
+      }
+      return codes;
     }
     /**
      * Delay due to unknown errors
@@ -18130,7 +18208,7 @@ ${JSON.stringify({
       this._logger = LoggerFactory.createNullLogger();
       const defaultHeaders = {};
       if (this.isServerSide()) {
-        defaultHeaders["User-Agent"] = "b24-js-sdk/1.1.0";
+        defaultHeaders["User-Agent"] = "b24-js-sdk/1.1.2";
       }
       this._authActions = authActions;
       this._requestIdGenerator = new RequestIdGenerator();
@@ -18397,7 +18475,9 @@ ${JSON.stringify({
             {
               requestId,
               status: error.status,
-              responseData: JSON.stringify(error?.response?.data, null, 0)
+              // Redact in case a future portal response embeds credentials in
+              // the error body (today it doesn't, but the channel is open). (#39)
+              responseData: JSON.stringify(redactSensitiveParams(error?.response?.data), null, 0)
             }
           );
         }
@@ -18414,14 +18494,14 @@ ${JSON.stringify({
     async _makeAxiosRequest(requestId, method, params, authData) {
       const methodFormatted = this._prepareMethod(requestId, method, this.getBaseUrl());
       const paramsFormatted = this._prepareParams(authData, params);
-      const paramsFormattedForLog = JSON.stringify(paramsFormatted, null, 0);
+      const paramsFormattedForLog = JSON.stringify(redactSensitiveParams(paramsFormatted), null, 0);
       const maxLogLength = 300;
       const sliceLogLength = 100;
       this.getLogger().info(
         `post/send`,
         {
           requestId,
-          method: methodFormatted,
+          method,
           params: paramsFormattedForLog.length > maxLogLength ? paramsFormattedForLog.slice(0, sliceLogLength) + "..." : paramsFormattedForLog
         }
       );
@@ -18514,14 +18594,7 @@ ${JSON.stringify({
     // endregion ////
     // region Log ////
     _sanitizeParams(params) {
-      const sanitized = { ...params };
-      const sensitiveKeys = ["auth", "password", "token", "secret", "access_token", "refresh_token"];
-      sensitiveKeys.forEach((key) => {
-        if (key in sanitized && sanitized[key]) {
-          sanitized[key] = "***REDACTED***";
-        }
-      });
-      return sanitized;
+      return redactSensitiveParams(params);
     }
     _logRequest(requestId, method, params) {
       this.getLogger().debug(`http request starting`, {
@@ -19225,7 +19298,7 @@ ${JSON.stringify({
           answer: {
             error: resultError ? typeof resultError === "string" ? resultError : resultError.error : void 0,
             error_description: resultError ? typeof resultError === "string" ? void 0 : resultError.error_description : void 0,
-            result: resultData ?? {},
+            result: resultData,
             total: Number.parseInt(this._getBatchResultByIndex(responseResult.result_total, index) || "0"),
             next: Number.parseInt(this._getBatchResultByIndex(responseResult.result_next, index) || "0"),
             time: resultTime
@@ -19383,7 +19456,7 @@ ${JSON.stringify({
       }
       const queryParams = new URLSearchParams({
         [this._requestIdGenerator.getQueryStringParameterName()]: requestId,
-        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.1.0",
+        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.1.2",
         [this._requestIdGenerator.getQueryStringSdkTypeParameterName()]: "b24-js-sdk"
       });
       return `${baseUrl}${methodUrl}?${queryParams.toString()}`;
@@ -19454,21 +19527,28 @@ ${JSON.stringify({
       return results;
     }
     /**
-     * @todo ! api ver3 waite docs
+     * In `restApi:v3`, `response.getData().result` is the array/record of per-command
+     * results directly (no `result_error`/`result_time`/`result_total`/`result_next`
+     * split as in v2). Per-command errors do not exist in this format.
+     *
+     * The per-command `result` value is forwarded as-is, including `null` when the
+     * underlying REST method returns `null` (see issue #23).
      */
     async _processResponseItem(command, index, responseHelper, results) {
       const responseResult = responseHelper.response.getData().result;
       const resultData = this._getBatchResultByIndex(responseResult, index);
-      const methodName = command.method;
-      const resultError = void 0;
-      const resultTime = responseHelper.response.getData().time;
-      if (typeof resultTime !== "undefined") {
-        await responseHelper.restrictionManager.updateStats(responseHelper.requestId, `batch::${methodName}`, resultTime);
+      if (typeof resultData === "undefined") {
+        throw new SdkError({
+          code: "JSSDK_INTERACTION_BATCH_STRATEGY_V3_EMPTY_COMMAND_RESPONSE",
+          description: `There were difficulties parsing the response for batch { index: ${index}, method: ${command.method} }`,
+          status: 500
+        });
       }
+      const resultTime = responseHelper.response.getData().time;
       const result = new AjaxResult({
         answer: {
-          result: resultData ?? {},
-          error: resultError,
+          result: resultData,
+          error: void 0,
           time: resultTime
         },
         query: {
@@ -19630,7 +19710,7 @@ ${JSON.stringify({
       const methodUrl = `/${encodeURIComponent(method)}`;
       const queryParams = new URLSearchParams({
         [this._requestIdGenerator.getQueryStringParameterName()]: requestId,
-        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.1.0",
+        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.1.2",
         [this._requestIdGenerator.getQueryStringSdkTypeParameterName()]: "b24-js-sdk"
       });
       return `${baseUrl}${methodUrl}?${queryParams.toString()}`;