@bitrix24/b24jssdk 1.3.0 → 2.0.0

package/dist/umd/index.js

@@ -1,6 +1,6 @@
 /**
  * @package @bitrix24/b24jssdk
- * @version 1.3.0
+ * @version 2.0.0
  * @copyright (c) 2026 Bitrix24
  * @license MIT
  * @see https://github.com/bitrix24/b24jssdk
@@ -8153,11 +8153,11 @@
     }
   }
 
-  var __defProp$1K = Object.defineProperty;
-  var __name$1K = (target, value) => __defProp$1K(target, "name", { value, configurable: true });
+  var __defProp$1Q = Object.defineProperty;
+  var __name$1Q = (target, value) => __defProp$1Q(target, "name", { value, configurable: true });
   class AbstractFormatter {
     static {
-      __name$1K(this, "AbstractFormatter");
+      __name$1Q(this, "AbstractFormatter");
     }
     dateFormat;
     constructor(dateFormat = "YYYY-MM-DD HH:mm:ss") {
@@ -8175,11 +8175,11 @@
     }
   }
 
-  var __defProp$1J = Object.defineProperty;
-  var __name$1J = (target, value) => __defProp$1J(target, "name", { value, configurable: true });
+  var __defProp$1P = Object.defineProperty;
+  var __name$1P = (target, value) => __defProp$1P(target, "name", { value, configurable: true });
   class JsonFormatter extends AbstractFormatter {
     static {
-      __name$1J(this, "JsonFormatter");
+      __name$1P(this, "JsonFormatter");
     }
     constructor(dateFormat = "YYYY-MM-DD HH:mm:ss") {
       super(dateFormat);
@@ -8197,11 +8197,11 @@
     }
   }
 
-  var __defProp$1I = Object.defineProperty;
-  var __name$1I = (target, value) => __defProp$1I(target, "name", { value, configurable: true });
+  var __defProp$1O = Object.defineProperty;
+  var __name$1O = (target, value) => __defProp$1O(target, "name", { value, configurable: true });
   class LineFormatter extends AbstractFormatter {
     static {
-      __name$1I(this, "LineFormatter");
+      __name$1O(this, "LineFormatter");
     }
     formatString;
     constructor(formatString = "[{channel}] {levelName}: {message} {context} {extra} {date}", dateFormat = "YYYY-MM-DD HH:mm:ss") {
@@ -8226,11 +8226,11 @@
     }
   }
 
-  var __defProp$1H = Object.defineProperty;
-  var __name$1H = (target, value) => __defProp$1H(target, "name", { value, configurable: true });
+  var __defProp$1N = Object.defineProperty;
+  var __name$1N = (target, value) => __defProp$1N(target, "name", { value, configurable: true });
   class TelegramFormatter extends AbstractFormatter {
     static {
-      __name$1H(this, "TelegramFormatter");
+      __name$1N(this, "TelegramFormatter");
     }
     useHtml;
     maxMessageLength;
@@ -8317,9 +8317,9 @@ ${extraStr}
     }
   }
 
-  var __defProp$1G = Object.defineProperty;
-  var __name$1G = (target, value) => __defProp$1G(target, "name", { value, configurable: true });
-  const pidProcessor = /* @__PURE__ */ __name$1G((record) => {
+  var __defProp$1M = Object.defineProperty;
+  var __name$1M = (target, value) => __defProp$1M(target, "name", { value, configurable: true });
+  const pidProcessor = /* @__PURE__ */ __name$1M((record) => {
     record.extra["pid"] = "?";
     if (typeof process !== "undefined" && process.pid) {
       record.extra["pid"] = process.pid;
@@ -8327,9 +8327,9 @@ ${extraStr}
     return record;
   }, "pidProcessor");
 
-  var __defProp$1F = Object.defineProperty;
-  var __name$1F = (target, value) => __defProp$1F(target, "name", { value, configurable: true });
-  const memoryUsageProcessor = /* @__PURE__ */ __name$1F((record) => {
+  var __defProp$1L = Object.defineProperty;
+  var __name$1L = (target, value) => __defProp$1L(target, "name", { value, configurable: true });
+  const memoryUsageProcessor = /* @__PURE__ */ __name$1L((record) => {
     record.extra["memoryUsage"] = "?";
     if (typeof process !== "undefined" && process.memoryUsage) {
       record.extra["memoryUsage"] = Math.round(process.memoryUsage().heapUsed / 1024 / 1024) + "MB";
@@ -8337,11 +8337,11 @@ ${extraStr}
     return record;
   }, "memoryUsageProcessor");
 
-  var __defProp$1E = Object.defineProperty;
-  var __name$1E = (target, value) => __defProp$1E(target, "name", { value, configurable: true });
+  var __defProp$1K = Object.defineProperty;
+  var __name$1K = (target, value) => __defProp$1K(target, "name", { value, configurable: true });
   class AbstractHandler {
     static {
-      __name$1E(this, "AbstractHandler");
+      __name$1K(this, "AbstractHandler");
     }
     level;
     formatter = null;
@@ -8364,11 +8364,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1D = Object.defineProperty;
-  var __name$1D = (target, value) => __defProp$1D(target, "name", { value, configurable: true });
+  var __defProp$1J = Object.defineProperty;
+  var __name$1J = (target, value) => __defProp$1J(target, "name", { value, configurable: true });
   class ConsoleHandler extends AbstractHandler {
     static {
-      __name$1D(this, "ConsoleHandler");
+      __name$1J(this, "ConsoleHandler");
     }
     _styles = /* @__PURE__ */ new Map();
     _useStyles;
@@ -8448,11 +8448,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1C = Object.defineProperty;
-  var __name$1C = (target, value) => __defProp$1C(target, "name", { value, configurable: true });
+  var __defProp$1I = Object.defineProperty;
+  var __name$1I = (target, value) => __defProp$1I(target, "name", { value, configurable: true });
   class ConsoleV2Handler extends ConsoleHandler {
     static {
-      __name$1C(this, "ConsoleV2Handler");
+      __name$1I(this, "ConsoleV2Handler");
     }
     constructor(level = LogLevel.DEBUG, options) {
       super(level, options);
@@ -8485,11 +8485,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1B = Object.defineProperty;
-  var __name$1B = (target, value) => __defProp$1B(target, "name", { value, configurable: true });
+  var __defProp$1H = Object.defineProperty;
+  var __name$1H = (target, value) => __defProp$1H(target, "name", { value, configurable: true });
   class MemoryHandler extends AbstractHandler {
     static {
-      __name$1B(this, "MemoryHandler");
+      __name$1H(this, "MemoryHandler");
     }
     records = [];
     limit;
@@ -8520,11 +8520,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1A = Object.defineProperty;
-  var __name$1A = (target, value) => __defProp$1A(target, "name", { value, configurable: true });
+  var __defProp$1G = Object.defineProperty;
+  var __name$1G = (target, value) => __defProp$1G(target, "name", { value, configurable: true });
   class StreamHandler extends AbstractHandler {
     static {
-      __name$1A(this, "StreamHandler");
+      __name$1G(this, "StreamHandler");
     }
     /**
      * Stream for writing logs.
@@ -8579,11 +8579,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1z = Object.defineProperty;
-  var __name$1z = (target, value) => __defProp$1z(target, "name", { value, configurable: true });
+  var __defProp$1F = Object.defineProperty;
+  var __name$1F = (target, value) => __defProp$1F(target, "name", { value, configurable: true });
   class ConsolaAdapter extends AbstractHandler {
     static {
-      __name$1z(this, "ConsolaAdapter");
+      __name$1F(this, "ConsolaAdapter");
     }
     consolaInstance;
     constructor(level = LogLevel.DEBUG, options) {
@@ -8628,11 +8628,11 @@ ${extraStr}
     }
   }
 
-  var __defProp$1y = Object.defineProperty;
-  var __name$1y = (target, value) => __defProp$1y(target, "name", { value, configurable: true });
+  var __defProp$1E = Object.defineProperty;
+  var __name$1E = (target, value) => __defProp$1E(target, "name", { value, configurable: true });
   class WinstonAdapter extends AbstractHandler {
     static {
-      __name$1y(this, "WinstonAdapter");
+      __name$1E(this, "WinstonAdapter");
     }
     winstonLogger;
     constructor(level = LogLevel.DEBUG, options) {
@@ -8672,8 +8672,8 @@ ${extraStr}
     }
   }
 
-  var __defProp$1x = Object.defineProperty;
-  var __name$1x = (target, value) => __defProp$1x(target, "name", { value, configurable: true });
+  var __defProp$1D = Object.defineProperty;
+  var __name$1D = (target, value) => __defProp$1D(target, "name", { value, configurable: true });
   var Environment = /* @__PURE__ */ ((Environment2) => {
     Environment2["UNKNOWN"] = "unknown";
     Environment2["BROWSE"] = "browser";
@@ -8689,13 +8689,13 @@ ${extraStr}
     }
     return "unknown" /* UNKNOWN */;
   }
-  __name$1x(getEnvironment, "getEnvironment");
+  __name$1D(getEnvironment, "getEnvironment");
 
-  var __defProp$1w = Object.defineProperty;
-  var __name$1w = (target, value) => __defProp$1w(target, "name", { value, configurable: true });
+  var __defProp$1C = Object.defineProperty;
+  var __name$1C = (target, value) => __defProp$1C(target, "name", { value, configurable: true });
   class TelegramHandler extends AbstractHandler {
     static {
-      __name$1w(this, "TelegramHandler");
+      __name$1C(this, "TelegramHandler");
     }
     botToken;
     chatId;
@@ -8833,11 +8833,11 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1v = Object.defineProperty;
-  var __name$1v = (target, value) => __defProp$1v(target, "name", { value, configurable: true });
+  var __defProp$1B = Object.defineProperty;
+  var __name$1B = (target, value) => __defProp$1B(target, "name", { value, configurable: true });
   class AbstractLogger {
     static {
-      __name$1v(this, "AbstractLogger");
+      __name$1B(this, "AbstractLogger");
     }
     /**
      * @inheritDoc
@@ -8890,11 +8890,11 @@ If you need to send logs from browser, use a proxy server.`;
     // endregion ////
   }
 
-  var __defProp$1u = Object.defineProperty;
-  var __name$1u = (target, value) => __defProp$1u(target, "name", { value, configurable: true });
+  var __defProp$1A = Object.defineProperty;
+  var __name$1A = (target, value) => __defProp$1A(target, "name", { value, configurable: true });
   class NullLogger extends AbstractLogger {
     static {
-      __name$1u(this, "NullLogger");
+      __name$1A(this, "NullLogger");
     }
     // region static methods for creation ////
     static create() {
@@ -8910,11 +8910,11 @@ If you need to send logs from browser, use a proxy server.`;
     // endregion ////
   }
 
-  var __defProp$1t = Object.defineProperty;
-  var __name$1t = (target, value) => __defProp$1t(target, "name", { value, configurable: true });
+  var __defProp$1z = Object.defineProperty;
+  var __name$1z = (target, value) => __defProp$1z(target, "name", { value, configurable: true });
   class Logger extends AbstractLogger {
     static {
-      __name$1t(this, "Logger");
+      __name$1z(this, "Logger");
     }
     channel;
     handlers = [];
@@ -8973,11 +8973,11 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1s = Object.defineProperty;
-  var __name$1s = (target, value) => __defProp$1s(target, "name", { value, configurable: true });
+  var __defProp$1y = Object.defineProperty;
+  var __name$1y = (target, value) => __defProp$1y(target, "name", { value, configurable: true });
   class LoggerFactory {
     static {
-      __name$1s(this, "LoggerFactory");
+      __name$1y(this, "LoggerFactory");
     }
     static createNullLogger() {
       return NullLogger.create();
@@ -9025,8 +9025,8 @@ If you need to send logs from browser, use a proxy server.`;
     }
   }
 
-  var __defProp$1r = Object.defineProperty;
-  var __name$1r = (target, value) => __defProp$1r(target, "name", { value, configurable: true });
+  var __defProp$1x = Object.defineProperty;
+  var __name$1x = (target, value) => __defProp$1x(target, "name", { value, configurable: true });
   const deprecateMessage = "@deprecate: use Logger. https://bitrix24.github.io/b24jssdk/docs/working-with-the-rest-api/logger/";
   var LoggerType = /* @__PURE__ */ ((LoggerType2) => {
     LoggerType2["desktop"] = "desktop";
@@ -9039,7 +9039,7 @@ If you need to send logs from browser, use a proxy server.`;
   })(LoggerType || {});
   class LoggerBrowser {
     static {
-      __name$1r(this, "LoggerBrowser");
+      __name$1x(this, "LoggerBrowser");
     }
     #logger;
     /**
@@ -9196,12 +9196,12 @@ If you need to send logs from browser, use a proxy server.`;
     return DataType2;
   })(DataType || {});
 
-  var __defProp$1q = Object.defineProperty;
-  var __name$1q = (target, value) => __defProp$1q(target, "name", { value, configurable: true });
+  var __defProp$1w = Object.defineProperty;
+  var __name$1w = (target, value) => __defProp$1w(target, "name", { value, configurable: true });
   const OBJECT_CONSTRUCTOR_STRING = Function.prototype.toString.call(Object);
   class TypeManager {
     static {
-      __name$1q(this, "TypeManager");
+      __name$1w(this, "TypeManager");
     }
     getTag(value) {
       return Object.prototype.toString.call(value);
@@ -9523,8 +9523,8 @@ If you need to send logs from browser, use a proxy server.`;
   }
   const Type = new TypeManager();
 
-  var __defProp$1p = Object.defineProperty;
-  var __name$1p = (target, value) => __defProp$1p(target, "name", { value, configurable: true });
+  var __defProp$1v = Object.defineProperty;
+  var __name$1v = (target, value) => __defProp$1v(target, "name", { value, configurable: true });
   function pick(data, keys) {
     const result = {};
     for (const key of keys) {
@@ -9532,7 +9532,7 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return result;
   }
-  __name$1p(pick, "pick");
+  __name$1v(pick, "pick");
   function omit(data, keys) {
     const result = { ...data };
     for (const key of keys) {
@@ -9540,18 +9540,18 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return result;
   }
-  __name$1p(omit, "omit");
+  __name$1v(omit, "omit");
   function isArrayOfArray(item) {
     return Array.isArray(item[0]);
   }
-  __name$1p(isArrayOfArray, "isArrayOfArray");
+  __name$1v(isArrayOfArray, "isArrayOfArray");
   function getEnumValue(enumObj, value) {
     return Object.values(enumObj).includes(value) ? value : void 0;
   }
-  __name$1p(getEnumValue, "getEnumValue");
+  __name$1v(getEnumValue, "getEnumValue");
 
-  var __defProp$1o = Object.defineProperty;
-  var __name$1o = (target, value) => __defProp$1o(target, "name", { value, configurable: true });
+  var __defProp$1u = Object.defineProperty;
+  var __name$1u = (target, value) => __defProp$1u(target, "name", { value, configurable: true });
   const byteToHex = [];
   for (let i = 0; i < 256; ++i) {
     byteToHex.push((i + 256).toString(16).slice(1));
@@ -9570,7 +9570,7 @@ If you need to send logs from browser, use a proxy server.`;
       return t >>> 0;
     };
   }
-  __name$1o(sfc32, "sfc32");
+  __name$1u(sfc32, "sfc32");
   function uuidv7() {
     const bytes = new Uint8Array(16);
     const timestamp = BigInt(Date.now());
@@ -9592,10 +9592,10 @@ If you need to send logs from browser, use a proxy server.`;
     bytes[8] = 128 | bytes[8] & 63;
     return (byteToHex[bytes[0]] + byteToHex[bytes[1]] + byteToHex[bytes[2]] + byteToHex[bytes[3]] + "-" + byteToHex[bytes[4]] + byteToHex[bytes[5]] + "-" + byteToHex[bytes[6]] + byteToHex[bytes[7]] + "-" + byteToHex[bytes[8]] + byteToHex[bytes[9]] + "-" + byteToHex[bytes[10]] + byteToHex[bytes[11]] + byteToHex[bytes[12]] + byteToHex[bytes[13]] + byteToHex[bytes[14]] + byteToHex[bytes[15]]).toLowerCase();
   }
-  __name$1o(uuidv7, "uuidv7");
+  __name$1u(uuidv7, "uuidv7");
 
-  var __defProp$1n = Object.defineProperty;
-  var __name$1n = (target, value) => __defProp$1n(target, "name", { value, configurable: true });
+  var __defProp$1t = Object.defineProperty;
+  var __name$1t = (target, value) => __defProp$1t(target, "name", { value, configurable: true });
   const reEscape = /[&<>'"]/g;
   const reUnescape = /&(?:amp|#38|lt|#60|gt|#62|apos|#39|quot|#34)/g;
   const escapeEntities = {
@@ -9619,7 +9619,7 @@ If you need to send logs from browser, use a proxy server.`;
   };
   class TextManager {
     static {
-      __name$1n(this, "TextManager");
+      __name$1t(this, "TextManager");
     }
     getRandom(length = 8) {
       return [...Array(length)].map(() => Math.trunc(Math.random() * 36).toString(36)).join("");
@@ -9719,7 +9719,7 @@ If you need to send logs from browser, use a proxy server.`;
     numberFormat(number, decimals = 0, decPoint = ".", thousandsSep = ",") {
       const n = !Number.isFinite(number) ? 0 : number;
       const fractionDigits = !Number.isFinite(decimals) ? 0 : Math.abs(decimals);
-      const toFixedFix = /* @__PURE__ */ __name$1n((n2, fractionDigits2) => {
+      const toFixedFix = /* @__PURE__ */ __name$1t((n2, fractionDigits2) => {
         const k = Math.pow(10, fractionDigits2);
         return Math.round(n2 * k) / k;
       }, "toFixedFix");
@@ -9788,8 +9788,8 @@ If you need to send logs from browser, use a proxy server.`;
   }
   const Text = new TextManager();
 
-  var __defProp$1m = Object.defineProperty;
-  var __name$1m = (target, value) => __defProp$1m(target, "name", { value, configurable: true });
+  var __defProp$1s = Object.defineProperty;
+  var __name$1s = (target, value) => __defProp$1s(target, "name", { value, configurable: true });
   let UA = "";
   try {
     UA = navigator?.userAgent.toLowerCase();
@@ -9798,7 +9798,7 @@ If you need to send logs from browser, use a proxy server.`;
   }
   class BrowserManager {
     static {
-      __name$1m(this, "BrowserManager");
+      __name$1s(this, "BrowserManager");
     }
     isOpera() {
       return UA.includes("opera");
@@ -9936,8 +9936,8 @@ If you need to send logs from browser, use a proxy server.`;
     return ApiVersion2;
   })(ApiVersion || {});
 
-  var __defProp$1l = Object.defineProperty;
-  var __name$1l = (target, value) => __defProp$1l(target, "name", { value, configurable: true });
+  var __defProp$1r = Object.defineProperty;
+  var __name$1r = (target, value) => __defProp$1r(target, "name", { value, configurable: true });
   var EnumCrmEntityType = /* @__PURE__ */ ((EnumCrmEntityType2) => {
     EnumCrmEntityType2["undefined"] = "UNDEFINED";
     EnumCrmEntityType2["lead"] = "CRM_LEAD";
@@ -9981,7 +9981,7 @@ If you need to send logs from browser, use a proxy server.`;
     const key = EnumCrmEntityTypeId[id];
     return EnumCrmEntityTypeShort[key] || "?" /* undefined */;
   }
-  __name$1l(getEnumCrmEntityTypeShort, "getEnumCrmEntityTypeShort");
+  __name$1r(getEnumCrmEntityTypeShort, "getEnumCrmEntityTypeShort");
 
   var ProductRowDiscountTypeId = /* @__PURE__ */ ((ProductRowDiscountTypeId2) => {
     ProductRowDiscountTypeId2[ProductRowDiscountTypeId2["undefined"] = 0] = "undefined";
@@ -10015,8 +10015,8 @@ If you need to send logs from browser, use a proxy server.`;
     return CatalogRoundingRuleType2;
   })(CatalogRoundingRuleType || {});
 
-  var __defProp$1k = Object.defineProperty;
-  var __name$1k = (target, value) => __defProp$1k(target, "name", { value, configurable: true });
+  var __defProp$1q = Object.defineProperty;
+  var __name$1q = (target, value) => __defProp$1q(target, "name", { value, configurable: true });
   var EnumBitrix24Edition = /* @__PURE__ */ ((EnumBitrix24Edition2) => {
     EnumBitrix24Edition2["undefined"] = "undefined";
     EnumBitrix24Edition2["b24"] = "b24";
@@ -10064,7 +10064,7 @@ If you need to send logs from browser, use a proxy server.`;
     }
     return EnumCrmEntityTypeId.undefined;
   }
-  __name$1k(convertBizprocDocumentTypeToCrmEntityTypeId, "convertBizprocDocumentTypeToCrmEntityTypeId");
+  __name$1q(convertBizprocDocumentTypeToCrmEntityTypeId, "convertBizprocDocumentTypeToCrmEntityTypeId");
   function getDocumentType(documentType, entityId) {
     let entityIdFormatted = "";
     let base = "undefined" /* undefined */;
@@ -10132,7 +10132,7 @@ If you need to send logs from browser, use a proxy server.`;
       entityIdFormatted
     ];
   }
-  __name$1k(getDocumentType, "getDocumentType");
+  __name$1q(getDocumentType, "getDocumentType");
   function getDocumentId(documentType, id, dynamicId) {
     let entityIdFormatted = "";
     const tmp = getDocumentType(documentType, 1);
@@ -10180,7 +10180,7 @@ If you need to send logs from browser, use a proxy server.`;
       entityIdFormatted
     ];
   }
-  __name$1k(getDocumentId, "getDocumentId");
+  __name$1q(getDocumentId, "getDocumentId");
   function getDocumentTypeForFilter(documentType) {
     const result = getDocumentType(documentType, 1);
     return [
@@ -10188,7 +10188,7 @@ If you need to send logs from browser, use a proxy server.`;
       result[1]
     ];
   }
-  __name$1k(getDocumentTypeForFilter, "getDocumentTypeForFilter");
+  __name$1q(getDocumentTypeForFilter, "getDocumentTypeForFilter");
 
   var LoadDataType = /* @__PURE__ */ ((LoadDataType2) => {
     LoadDataType2["App"] = "app";
@@ -10355,11 +10355,11 @@ If you need to send logs from browser, use a proxy server.`;
     ["ja" /* ja */]: "ja-JP"
   };
 
-  var __defProp$1j = Object.defineProperty;
-  var __name$1j = (target, value) => __defProp$1j(target, "name", { value, configurable: true });
+  var __defProp$1p = Object.defineProperty;
+  var __name$1p = (target, value) => __defProp$1p(target, "name", { value, configurable: true });
   class Result {
     static {
-      __name$1j(this, "Result");
+      __name$1p(this, "Result");
     }
     _errors;
     _data;
@@ -10413,9 +10413,16 @@ If you need to send logs from browser, use a proxy server.`;
      * {@link Result.getErrors}, the keys are not discarded — useful for batch
      * calls with `isHaltOnError: false`.
      *
-     * Keys are meaningful only when the error was added with an explicit key
-     * (e.g. an object / named-command batch). Array-mode batches and
-     * {@link Result.addErrors} fall back to generated UUID keys.
+     * For batch calls the key tells you *which* command failed:
+     * - an **object / named-command batch** keys each error by the command label;
+     * - an **array-mode batch** keys each per-command error by its **numeric
+     *   position** (`'0'`, `'1'`, … as a string), matching the command order you
+     *   passed in. (#255 — previously these fell back to a random UUID.)
+     *
+     * An envelope-level soft error (not tied to one command) lands under the
+     * internal `'base-error'` key, and {@link Result.addErrors} (no explicit key)
+     * still uses generated UUIDs — for those, prefer {@link Result.getErrors} /
+     * {@link Result.getErrorMessages}. (#230)
      *
      * @returns {Record<string, Error>} A map of error key to Error object.
      */
@@ -10471,11 +10478,11 @@ Errors: ${this.getErrorMessages().join(", ")}`;
     }
   }
 
-  var __defProp$1i = Object.defineProperty;
-  var __name$1i = (target, value) => __defProp$1i(target, "name", { value, configurable: true });
+  var __defProp$1o = Object.defineProperty;
+  var __name$1o = (target, value) => __defProp$1o(target, "name", { value, configurable: true });
   class SdkError extends Error {
     static {
-      __name$1i(this, "SdkError");
+      __name$1o(this, "SdkError");
     }
     code;
     _status;
@@ -10544,53 +10551,81 @@ ${this.stack}`;
     }
   }
 
-  var __defProp$1h = Object.defineProperty;
-  var __name$1h = (target, value) => __defProp$1h(target, "name", { value, configurable: true });
+  var __defProp$1n = Object.defineProperty;
+  var __name$1n = (target, value) => __defProp$1n(target, "name", { value, configurable: true });
   const SENSITIVE_PARAM_KEYS = [
     "auth",
     "password",
     "token",
     "secret",
     "access_token",
-    "refresh_token"
+    "refresh_token",
+    "client_secret",
+    "application_token",
+    "sessid",
+    "key",
+    "signature"
   ];
   const REDACTED_PLACEHOLDER = "***REDACTED***";
+  const QS_SENSITIVE_RE = new RegExp(
+    `([?&]|^)(${SENSITIVE_PARAM_KEYS.join("|")})=[^&#;]*`,
+    "gi"
+  );
   function isPlainObject$1(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
   }
-  __name$1h(isPlainObject$1, "isPlainObject");
+  __name$1n(isPlainObject$1, "isPlainObject");
+  function redactQueryString(value) {
+    if (!value.includes("=")) return value;
+    return value.replace(
+      QS_SENSITIVE_RE,
+      (_match, sep, key) => `${sep}${key}=${REDACTED_PLACEHOLDER}`
+    );
+  }
+  __name$1n(redactQueryString, "redactQueryString");
+  function redactValue(value, depth) {
+    if (typeof value === "string") return redactQueryString(value);
+    if (depth <= 0) return value;
+    if (isPlainObject$1(value)) return redactObject(value, depth - 1);
+    if (Array.isArray(value)) return value.map((item) => redactValue(item, depth));
+    return value;
+  }
+  __name$1n(redactValue, "redactValue");
   function redactObject(source, depth) {
     const sanitized = { ...source };
     for (const key of Object.keys(sanitized)) {
-      if (SENSITIVE_PARAM_KEYS.includes(key)) {
+      if (SENSITIVE_PARAM_KEYS.includes(key.toLowerCase())) {
         sanitized[key] = REDACTED_PLACEHOLDER;
         continue;
       }
-      if (depth <= 0) continue;
-      const child = sanitized[key];
-      if (isPlainObject$1(child)) {
-        sanitized[key] = redactObject(child, depth - 1);
-      } else if (Array.isArray(child)) {
-        sanitized[key] = child.map(
-          (item) => isPlainObject$1(item) ? redactObject(item, depth - 1) : item
-        );
-      }
+      sanitized[key] = redactValue(sanitized[key], depth);
     }
     return sanitized;
   }
-  __name$1h(redactObject, "redactObject");
+  __name$1n(redactObject, "redactObject");
   const DEFAULT_REDACT_DEPTH = 2;
   function redactSensitiveParams(params) {
     if (!isPlainObject$1(params)) return params;
     return redactObject(params, DEFAULT_REDACT_DEPTH);
   }
-  __name$1h(redactSensitiveParams, "redactSensitiveParams");
+  __name$1n(redactSensitiveParams, "redactSensitiveParams");
+  function redactSensitiveUrl(url, extraKeys = []) {
+    if (typeof url !== "string" || !url.includes("=")) return url;
+    if (extraKeys.length === 0) return redactQueryString(url);
+    const escaped = extraKeys.map((key) => key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
+    const re = new RegExp(
+      `([?&]|^)(${[...SENSITIVE_PARAM_KEYS, ...escaped].join("|")})=[^&#;]*`,
+      "gi"
+    );
+    return url.replace(re, (_match, sep, key) => `${sep}${key}=${REDACTED_PLACEHOLDER}`);
+  }
+  __name$1n(redactSensitiveUrl, "redactSensitiveUrl");
 
-  var __defProp$1g = Object.defineProperty;
-  var __name$1g = (target, value) => __defProp$1g(target, "name", { value, configurable: true });
+  var __defProp$1m = Object.defineProperty;
+  var __name$1m = (target, value) => __defProp$1m(target, "name", { value, configurable: true });
   class AjaxError extends SdkError {
     static {
-      __name$1g(this, "AjaxError");
+      __name$1m(this, "AjaxError");
     }
     requestInfo;
     constructor(params) {
@@ -10684,11 +10719,11 @@ ${this.stack}`;
     }
   }
 
-  var __defProp$1f = Object.defineProperty;
-  var __name$1f = (target, value) => __defProp$1f(target, "name", { value, configurable: true });
+  var __defProp$1l = Object.defineProperty;
+  var __name$1l = (target, value) => __defProp$1l(target, "name", { value, configurable: true });
   class AjaxResult extends Result {
     static {
-      __name$1f(this, "AjaxResult");
+      __name$1l(this, "AjaxResult");
     }
     _status;
     _query;
@@ -10803,10 +10838,10 @@ ${this.stack}`;
     }
     /**
      * @deprecated Will be removed in `2.0.0`. Tied to the `restApi:v2` envelope
-     *   field `total`, which `restApi:v3` does not return. For `restApi:v3` the
-     *   SDK exposes element counts via the `aggregate` action (`count` /
-     *   `countDistinct`); for `restApi:v2` use the list helpers, which iterate
-     *   without exposing `total`.
+     *   field `total`, which `restApi:v3` does not return. `restApi:v3` has no
+     *   element-count replacement yet — an `aggregate` action (`count` /
+     *   `countDistinct`) is planned but not exposed in the SDK; for `restApi:v2`
+     *   use the list helpers, which iterate without exposing `total`.
      *
      * @removed 2.0.0
      */
@@ -10871,11 +10906,12 @@ ${this.stack}`;
       );
     }
     #buildNextPageQuery() {
-      const result = { ...this._query };
       const payload = this._data;
       const nextValue = "next" in payload ? payload.next : void 0;
-      result.params.start = Text.toInteger(Text.toInteger(nextValue));
-      return result;
+      return {
+        ...this._query,
+        params: { ...this._query.params, start: Text.toInteger(nextValue) }
+      };
     }
     // Immutable API
     setData() {
@@ -10883,11 +10919,11 @@ ${this.stack}`;
     }
   }
 
-  var __defProp$1e = Object.defineProperty;
-  var __name$1e = (target, value) => __defProp$1e(target, "name", { value, configurable: true });
+  var __defProp$1k = Object.defineProperty;
+  var __name$1k = (target, value) => __defProp$1k(target, "name", { value, configurable: true });
   class ParamsFactory {
     static {
-      __name$1e(this, "ParamsFactory");
+      __name$1k(this, "ParamsFactory");
     }
     /**
      * Default parameters for regular tariffs
@@ -10995,11 +11031,11 @@ ${this.stack}`;
     }
   }
 
-  var __defProp$1d = Object.defineProperty;
-  var __name$1d = (target, value) => __defProp$1d(target, "name", { value, configurable: true });
+  var __defProp$1j = Object.defineProperty;
+  var __name$1j = (target, value) => __defProp$1j(target, "name", { value, configurable: true });
   class RateLimiter {
     static {
-      __name$1d(this, "RateLimiter");
+      __name$1j(this, "RateLimiter");
     }
     #tokens;
     #lastRefill;
@@ -11385,11 +11421,11 @@ ${this.stack}`;
     // endregion ////
   }
 
-  var __defProp$1c = Object.defineProperty;
-  var __name$1c = (target, value) => __defProp$1c(target, "name", { value, configurable: true });
+  var __defProp$1i = Object.defineProperty;
+  var __name$1i = (target, value) => __defProp$1i(target, "name", { value, configurable: true });
   class OperatingLimiter {
     static {
-      __name$1c(this, "OperatingLimiter");
+      __name$1i(this, "OperatingLimiter");
     }
     #config;
     #methodStats = /* @__PURE__ */ new Map();
@@ -11544,11 +11580,11 @@ ${this.stack}`;
     // endregion ////
   }
 
-  var __defProp$1b = Object.defineProperty;
-  var __name$1b = (target, value) => __defProp$1b(target, "name", { value, configurable: true });
+  var __defProp$1h = Object.defineProperty;
+  var __name$1h = (target, value) => __defProp$1h(target, "name", { value, configurable: true });
   class AdaptiveDelayer {
     static {
-      __name$1b(this, "AdaptiveDelayer");
+      __name$1h(this, "AdaptiveDelayer");
     }
     #config;
     #operatingLimiter;
@@ -11667,11 +11703,11 @@ ${this.stack}`;
     // endregion ////
   }
 
-  var __defProp$1a = Object.defineProperty;
-  var __name$1a = (target, value) => __defProp$1a(target, "name", { value, configurable: true });
+  var __defProp$1g = Object.defineProperty;
+  var __name$1g = (target, value) => __defProp$1g(target, "name", { value, configurable: true });
   class RestrictionManager {
     static {
-      __name$1a(this, "RestrictionManager");
+      __name$1g(this, "RestrictionManager");
     }
     #rateLimiter;
     #operatingLimiter;
@@ -12023,245 +12059,54 @@ ${this.stack}`;
     // endregion ////
   }
 
-  var __defProp$19 = Object.defineProperty;
-  var __name$19 = (target, value) => __defProp$19(target, "name", { value, configurable: true });
-  class ParseRow {
-    static {
-      __name$19(this, "ParseRow");
-    }
-    static getBatchCommand(row, options) {
-      if (row) {
-        if (typeof row === "object" && "method" in row && typeof row.method === "string") {
-          return {
-            method: row.method,
-            query: row.params,
-            as: row.as ?? options.asDefaultValue,
-            parallel: row.parallel ?? options.parallelDefaultValue
-          };
-        }
-        if (Array.isArray(row) && row.length > 0 && typeof row[0] === "string") {
-          return {
-            method: row[0],
-            query: row[1],
-            as: options.asDefaultValue,
-            parallel: options.parallelDefaultValue
-          };
-        }
-      }
-      throw new SdkError({
-        code: "JSSDK_INTERACTION_BATCH_ROW_FAIL",
-        description: `There were difficulties parsing the command for batch.
-${JSON.stringify({
-        row,
-        options
-      })}`,
-        status: 500
-      });
-    }
-    static getMethodsFromCommands(calls) {
-      const result = [];
-      const optsFake = {
-        parallelDefaultValue: false
-      };
-      if (Array.isArray(calls)) {
-        calls.forEach((row) => {
-          const command = ParseRow.getBatchCommand(row, optsFake);
-          result.push(command.method);
-        });
-      } else {
-        Object.entries(calls).forEach(([index, row]) => {
-          const command = ParseRow.getBatchCommand(row, { ...optsFake, asDefaultValue: index });
-          result.push(command.method);
-        });
-      }
-      return result;
-    }
-  }
-
-  var __defProp$18 = Object.defineProperty;
-  var __name$18 = (target, value) => __defProp$18(target, "name", { value, configurable: true });
+  var __defProp$1f = Object.defineProperty;
+  var __name$1f = (target, value) => __defProp$1f(target, "name", { value, configurable: true });
   class VersionManager {
     static {
-      __name$18(this, "VersionManager");
-    }
-    #supportMethods;
-    constructor() {
-      this.#supportMethods = [
-        // --- infrastructure ---
-        "/batch",
-        // done
-        "/scopes",
-        // done
-        "/rest.scope.list",
-        // done
-        "/rest.documentation.openapi",
-        "/documentation",
-        // --- main ---
-        /** @see /settings/configs/event_log.php */
-        "/main.eventlog.list",
-        // done
-        "/main.eventlog.get",
-        // done
-        "/main.eventlog.tail",
-        // done
-        "/main.eventlog.field.list",
-        "/main.eventlog.field.get",
-        // --- mail (rest-v3) ---
-        "/mail.mailbox.list",
-        "/mail.mailbox.get",
-        "/mail.mailbox.senders",
-        "/mail.mailbox.field.list",
-        "/mail.mailbox.field.get",
-        "/mail.message.list",
-        "/mail.message.get",
-        "/mail.message.thread",
-        "/mail.message.send",
-        "/mail.message.reply",
-        "/mail.message.forward",
-        "/mail.message.movetofolder",
-        "/mail.message.createcrmactivity",
-        "/mail.message.removecrmactivity",
-        "/mail.message.createtask",
-        "/mail.message.createcalendarevent",
-        "/mail.message.createchat",
-        "/mail.message.createfeedpost",
-        "/mail.message.field.list",
-        "/mail.message.field.get",
-        "/mail.recipient.listcontacts",
-        "/mail.recipient.listemployees",
-        "/mail.recipient.field.list",
-        "/mail.recipient.field.get",
-        // --- humanresources (rest-v3) ---
-        "/humanresources.node.add",
-        "/humanresources.node.edit",
-        "/humanresources.node.get",
-        "/humanresources.node.list",
-        "/humanresources.node.search",
-        "/humanresources.node.children",
-        "/humanresources.node.count",
-        "/humanresources.node.move",
-        "/humanresources.node.field.list",
-        "/humanresources.node.field.get",
-        "/humanresources.node.member.add",
-        "/humanresources.node.member.set",
-        "/humanresources.node.member.move",
-        "/humanresources.node.member.remove",
-        "/humanresources.node.communication.edit",
-        "/humanresources.node.communication.list",
-        "/humanresources.employee.search",
-        "/humanresources.employee.subordinates",
-        "/humanresources.employee.count",
-        "/humanresources.employee.multidepartment",
-        "/humanresources.employee.field.list",
-        "/humanresources.employee.field.get",
-        // --- tasks (rest-v3) ---
-        "/tasks.task.add",
-        "/tasks.task.get",
-        // done
-        "/tasks.task.update",
-        // done
-        "/tasks.task.delete",
-        "/tasks.task.access.get",
-        "/tasks.task.file.attach",
-        "/tasks.task.chat.message.send",
-        "/tasks.task.result.add",
-        "/tasks.task.result.addfromchatmessage",
-        "/tasks.task.result.update",
-        "/tasks.task.result.list",
-        "/tasks.task.result.delete",
-        "/tasks.task.field.list",
-        "/tasks.task.field.get",
-        "/tasks.task.access.field.list",
-        "/tasks.task.access.field.get",
-        "/tasks.task.file.field.list",
-        "/tasks.task.file.field.get",
-        "/tasks.task.chat.message.field.list",
-        "/tasks.task.chat.message.field.get",
-        // --- timeman (rest-v3) — read-only in v3 (no record.get / add / update / delete) ---
-        "/timeman.record.list",
-        "/timeman.record.field.list",
-        "/timeman.record.field.get"
-        // Cross-module methods are cross-referenced from the rest-v3 pages above but
-        // belong to modules not actualized here — add them when those modules land:
-        //   user.get                                          — user module (seen on humanresources + timeman)
-        //   im.message.update / im.message.delete / im.dialog.messages.get  — im module (seen on tasks)
-        //   disk.storage.uploadfile / disk.folder.uploadfile /
-        //   disk.storage.getchildren / disk.folder.getchildren            — disk module (seen on tasks)
-        //
-        // @todo When API.v3 arrives - change in AuthOAuthManager.initIsAdmin()
-        // '/profile' // wait
-        // '/main.message.get' // wait
-        // '/main.chat.update' // wait
-        // '/main.chat.list' // wait
-        // '/main.user.list' // wait
-      ];
+      __name$1f(this, "VersionManager");
     }
     static create() {
       return new VersionManager();
     }
     /**
-     * List of supported API versions
-     * The highest version must be first
+     * List of supported API versions.
+     * The highest version must be first.
      */
     getAllApiVersions() {
       return [ApiVersion.v3, ApiVersion.v2];
     }
-    isSupport(version, method) {
-      switch (version) {
-        case ApiVersion.v3:
-          return this.#v3Support(method);
-        case ApiVersion.v2:
-          return true;
-      }
-      return false;
-    }
-    #v3Support(method) {
-      return this.#supportMethods.includes(`/${method}`);
+    /**
+     * Retained for backward compatibility. The SDK no longer keeps a v3 method
+     * allowlist, so support is not decided client-side any more — always returns
+     * `true`. Method existence is validated by the server.
+     */
+    isSupport(_version, _method) {
+      return true;
     }
     /**
-     * Automatically obtain the API version
+     * Returns the API version to use when the caller did not specify one. With the
+     * allowlist removed there is no client-side signal that a method is a v3
+     * method, so this defaults to v2 (the universal endpoint). Use the explicit
+     * `actions.v3.*` surface to call a method on v3.
      */
-    automaticallyObtainApiVersion(method) {
-      const version = this.getAllApiVersions().find((version2) => versionManager.isSupport(version2, method));
-      if (!version) {
-        throw new SdkError({
-          code: "JSSDK_VERSION_MANAGER_NOT_DETECT_FOR_METHOD",
-          description: `No API version found that supports method ${method}.`,
-          status: 500
-        });
-      }
-      return version;
+    automaticallyObtainApiVersion(_method) {
+      return ApiVersion.v2;
     }
     /**
-     * Automatically obtain the API version for Batch
-     *
-     * @todo test methods
-     *   `[['crm.item.get', { entityTypeId: 3, id: 1 }]]`
-     *   `[{ method: 'crm.item.get', params: { entityTypeId: 3, id: 1 } }]`
-     *   `{ cmd1: { method: 'crm.item.get', params: { entityTypeId: 3, id: 1 } }, cmd2: ['crm.item.get', { entityTypeId: 2, id: 2 }] }`
+     * Batch counterpart of {@link automaticallyObtainApiVersion}. Defaults to v2;
+     * call `actions.v3.batch.make` explicitly to run a batch on v3.
      */
-    automaticallyObtainApiVersionForBatch(calls) {
-      const commands = ParseRow.getMethodsFromCommands(calls);
-      let isAllSupportV3 = true;
-      for (const [_, method] of commands.entries()) {
-        if (!this.isSupport(ApiVersion.v3, method)) {
-          isAllSupportV3 = false;
-          break;
-        }
-      }
-      if (isAllSupportV3) {
-        return ApiVersion.v3;
-      }
+    automaticallyObtainApiVersionForBatch(_calls) {
       return ApiVersion.v2;
     }
   }
   const versionManager = VersionManager.create();
 
-  var __defProp$17 = Object.defineProperty;
-  var __name$17 = (target, value) => __defProp$17(target, "name", { value, configurable: true });
+  var __defProp$1e = Object.defineProperty;
+  var __name$1e = (target, value) => __defProp$1e(target, "name", { value, configurable: true });
   class AbstractAction {
     static {
-      __name$17(this, "AbstractAction");
+      __name$1e(this, "AbstractAction");
     }
     _b24;
     _logger;
@@ -12271,11 +12116,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$16 = Object.defineProperty;
-  var __name$16 = (target, value) => __defProp$16(target, "name", { value, configurable: true });
+  var __defProp$1d = Object.defineProperty;
+  var __name$1d = (target, value) => __defProp$1d(target, "name", { value, configurable: true });
   class CallV2 extends AbstractAction {
     static {
-      __name$16(this, "CallV2");
+      __name$1d(this, "CallV2");
     }
     /**
      * Calls the Bitrix24 REST API method.
@@ -12307,28 +12152,16 @@ ${JSON.stringify({
      * console.log(response.getData().result.item.name)
      */
     async make(options) {
-      if (versionManager.isSupport(ApiVersion.v3, options.method)) {
-        LoggerFactory.forcedLog(
-          this._logger,
-          "warning",
-          `The method ${options.method} is available in restApi:v3. It's worth migrating to the new API.`,
-          {
-            method: options.method,
-            requestId: options.requestId,
-            code: "JSSDK_CORE_METHOD_AVAILABLE_IN_API_V3"
-          }
-        );
-      }
       const params = options.params || {};
       return this._b24.getHttpClient(ApiVersion.v2).call(options.method, params, options.requestId);
     }
   }
 
-  var __defProp$15 = Object.defineProperty;
-  var __name$15 = (target, value) => __defProp$15(target, "name", { value, configurable: true });
+  var __defProp$1c = Object.defineProperty;
+  var __name$1c = (target, value) => __defProp$1c(target, "name", { value, configurable: true });
   class CallListV2 extends AbstractAction {
     static {
-      __name$15(this, "CallListV2");
+      __name$1c(this, "CallListV2");
     }
     /**
      * Fast data retrieval without counting the total number of records.
@@ -12453,11 +12286,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$14 = Object.defineProperty;
-  var __name$14 = (target, value) => __defProp$14(target, "name", { value, configurable: true });
+  var __defProp$1b = Object.defineProperty;
+  var __name$1b = (target, value) => __defProp$1b(target, "name", { value, configurable: true });
   class FetchListV2 extends AbstractAction {
     static {
-      __name$14(this, "FetchListV2");
+      __name$1b(this, "FetchListV2");
     }
     /**
      * Calls a REST API list method and returns an async generator for efficient large data retrieval.
@@ -12583,11 +12416,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$13 = Object.defineProperty;
-  var __name$13 = (target, value) => __defProp$13(target, "name", { value, configurable: true });
+  var __defProp$1a = Object.defineProperty;
+  var __name$1a = (target, value) => __defProp$1a(target, "name", { value, configurable: true });
   class AbstractBatch extends AbstractAction {
     static {
-      __name$13(this, "AbstractBatch");
+      __name$1a(this, "AbstractBatch");
     }
     _addBatchErrorsIfAny(response, result) {
       if (!response.isSuccess) {
@@ -12665,11 +12498,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$12 = Object.defineProperty;
-  var __name$12 = (target, value) => __defProp$12(target, "name", { value, configurable: true });
+  var __defProp$19 = Object.defineProperty;
+  var __name$19 = (target, value) => __defProp$19(target, "name", { value, configurable: true });
   class BatchV2 extends AbstractBatch {
     static {
-      __name$12(this, "BatchV2");
+      __name$19(this, "BatchV2");
     }
     /**
      * Executes a batch request to the Bitrix24 REST API with a maximum number of commands of no more than 50.
@@ -12778,11 +12611,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$11 = Object.defineProperty;
-  var __name$11 = (target, value) => __defProp$11(target, "name", { value, configurable: true });
+  var __defProp$18 = Object.defineProperty;
+  var __name$18 = (target, value) => __defProp$18(target, "name", { value, configurable: true });
   class BatchByChunkV2 extends AbstractBatch {
     static {
-      __name$11(this, "BatchByChunkV2");
+      __name$18(this, "BatchByChunkV2");
     }
     /**
      * Executes a batch request with automatic chunking for any number of commands.
@@ -12857,8 +12690,8 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$10 = Object.defineProperty;
-  var __name$10 = (target, value) => __defProp$10(target, "name", { value, configurable: true });
+  var __defProp$17 = Object.defineProperty;
+  var __name$17 = (target, value) => __defProp$17(target, "name", { value, configurable: true });
   const callName$1 = /* @__PURE__ */ Symbol("call_V2");
   const callListName$1 = /* @__PURE__ */ Symbol("callList_V2");
   const fetchListName$1 = /* @__PURE__ */ Symbol("fetchList_V2");
@@ -12866,7 +12699,7 @@ ${JSON.stringify({
   const batchByChunkName$1 = /* @__PURE__ */ Symbol("batchByChunk_V2");
   class ActionsManagerV2 {
     static {
-      __name$10(this, "ActionsManagerV2");
+      __name$17(this, "ActionsManagerV2");
     }
     _b24;
     _logger;
@@ -12914,11 +12747,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$$ = Object.defineProperty;
-  var __name$$ = (target, value) => __defProp$$(target, "name", { value, configurable: true });
+  var __defProp$16 = Object.defineProperty;
+  var __name$16 = (target, value) => __defProp$16(target, "name", { value, configurable: true });
   class CallV3 extends AbstractAction {
     static {
-      __name$$(this, "CallV3");
+      __name$16(this, "CallV3");
     }
     /**
      * Calls the Bitrix24 REST API method.
@@ -12945,23 +12778,72 @@ ${JSON.stringify({
      * console.log(response.getData().result.item.title)
      */
     async make(options) {
-      if (!versionManager.isSupport(ApiVersion.v3, options.method)) {
-        throw new SdkError({
-          code: "JSSDK_CORE_METHOD_NOT_SUPPORT_IN_API_V3",
-          description: `restApi:v3 not support method ${options.method}`,
-          status: 500
-        });
-      }
       const params = options.params || {};
       return this._b24.getHttpClient(ApiVersion.v3).call(options.method, params, options.requestId);
     }
   }
 
-  var __defProp$_ = Object.defineProperty;
-  var __name$_ = (target, value) => __defProp$_(target, "name", { value, configurable: true });
+  var __defProp$15 = Object.defineProperty;
+  var __name$15 = (target, value) => __defProp$15(target, "name", { value, configurable: true });
+  class KeysetPaginationError extends Error {
+    static {
+      __name$15(this, "KeysetPaginationError");
+    }
+    errors;
+    messages;
+    constructor(errors, messages) {
+      super(messages.join("; "));
+      this.name = "KeysetPaginationError";
+      this.errors = errors;
+      this.messages = messages;
+    }
+  }
+  async function* keysetPaginate(b24, logger, strategy) {
+    let cursor = strategy.initialCursor;
+    let maxPageSize = 0;
+    while (true) {
+      const response = await b24.actions.v3.call.make({
+        method: strategy.method,
+        params: strategy.buildParams(cursor),
+        requestId: strategy.requestId
+      });
+      if (!response.isSuccess) {
+        logger.error(strategy.errorLabel, {
+          method: strategy.method,
+          requestId: strategy.requestId,
+          messages: response.getErrorMessages()
+        });
+        throw new KeysetPaginationError(response.errors, response.getErrorMessages());
+      }
+      const responseData = response.getData();
+      if (!responseData) {
+        break;
+      }
+      const resultData = responseData.result[strategy.customKeyForResult];
+      if (!Array.isArray(resultData) || resultData.length === 0) {
+        break;
+      }
+      yield resultData;
+      maxPageSize = Math.max(maxPageSize, resultData.length);
+      if (resultData.length < maxPageSize) {
+        break;
+      }
+      const lastItem = resultData[resultData.length - 1];
+      const next = lastItem ? strategy.readNextCursor(lastItem) : null;
+      if (next === null || next === void 0) {
+        logger.warning(strategy.noCursorWarning);
+        break;
+      }
+      cursor = next;
+    }
+  }
+  __name$15(keysetPaginate, "keysetPaginate");
+
+  var __defProp$14 = Object.defineProperty;
+  var __name$14 = (target, value) => __defProp$14(target, "name", { value, configurable: true });
   class CallListV3 extends AbstractAction {
     static {
-      __name$_(this, "CallListV3");
+      __name$14(this, "CallListV3");
     }
     /**
      * Fast data retrieval without counting the total number of records.
@@ -13030,63 +12912,48 @@ ${JSON.stringify({
         filter: [...params["filter"] || []],
         pagination: { page: 0, limit: batchSize }
       };
-      let allItems = [];
-      let isContinue = true;
-      let nextId = 0;
-      do {
-        const sendParams = { ...requestParams, filter: [...requestParams.filter] };
-        sendParams.filter.push([cursorIdKey, ">", nextId]);
-        const response = await this._b24.actions.v3.call.make({
+      const allItems = [];
+      try {
+        for await (const page of keysetPaginate(this._b24, this._logger, {
           method: options.method,
-          params: sendParams,
-          requestId: options.requestId
-        });
-        if (!response.isSuccess) {
-          this._logger.error("callFastListMethod", {
-            method: options.method,
-            requestId: options.requestId,
-            messages: response.getErrorMessages()
-          });
-          for (const [index, error] of response.errors) {
-            result.addError(error, index);
+          requestId: options.requestId,
+          customKeyForResult,
+          initialCursor: 0,
+          // Emulated keyset: append the `[cursorIdKey, '>', cursor]` page filter.
+          buildParams: /* @__PURE__ */ __name$14((cursor) => ({ ...requestParams, filter: [...requestParams.filter, [cursorIdKey, ">", cursor]] }), "buildParams"),
+          // Advance by the numeric id read from the last item via `idKey`. A
+          // non-numeric value (almost always an `idKey` that doesn't match the
+          // response field — e.g. sorting by `ID` while the response carries a
+          // lowercase `id`) stops the walk instead of silently truncating.
+          readNextCursor: /* @__PURE__ */ __name$14((lastItem) => {
+            const value = Number.parseInt(lastItem[idKey], 10);
+            return Number.isFinite(value) ? value : null;
+          }, "readNextCursor"),
+          noCursorWarning: `callList.make: pagination stops here \u2014 no numeric id could be read from the returned items via idKey "${idKey}". Make sure idKey matches the id field in the response; if the sortable field name differs from it, also set cursorIdKey (e.g. idKey: 'id', cursorIdKey: 'ID').`,
+          errorLabel: "callFastListMethod"
+        })) {
+          for (const item of page) {
+            allItems.push(item);
           }
-          isContinue = false;
-          break;
         }
-        const responseData = response.getData();
-        if (!responseData) {
-          isContinue = false;
-          break;
-        }
-        const resultData = responseData.result[customKeyForResult];
-        if (resultData.length === 0) {
-          isContinue = false;
-          break;
-        }
-        allItems = [...allItems, ...resultData];
-        if (resultData.length < batchSize) {
-          isContinue = false;
-          break;
-        }
-        const lastItem = resultData[resultData.length - 1];
-        const cursorValue = lastItem ? Number.parseInt(lastItem[idKey], 10) : Number.NaN;
-        if (Number.isFinite(cursorValue)) {
-          nextId = cursorValue;
+      } catch (error) {
+        if (error instanceof KeysetPaginationError) {
+          for (const [index, err] of error.errors) {
+            result.addError(err, index);
+          }
         } else {
-          this._logger.warning(`callList.make: pagination stops here \u2014 no numeric id could be read from the returned items via idKey "${idKey}". Make sure idKey matches the id field in the response; if the sortable field name differs from it, also set cursorIdKey (e.g. idKey: 'id', cursorIdKey: 'ID').`);
-          isContinue = false;
-          break;
+          throw error;
         }
-      } while (isContinue);
+      }
       return result.setData(allItems);
     }
   }
 
-  var __defProp$Z = Object.defineProperty;
-  var __name$Z = (target, value) => __defProp$Z(target, "name", { value, configurable: true });
+  var __defProp$13 = Object.defineProperty;
+  var __name$13 = (target, value) => __defProp$13(target, "name", { value, configurable: true });
   class FetchListV3 extends AbstractAction {
     static {
-      __name$Z(this, "FetchListV3");
+      __name$13(this, "FetchListV3");
     }
     /**
      * Calls a REST API list method and returns an async generator for efficient large data retrieval.
@@ -13156,61 +13023,320 @@ ${JSON.stringify({
         filter: [...params["filter"] || []],
         pagination: { page: 0, limit: batchSize }
       };
-      let isContinue = true;
-      let nextId = 0;
-      do {
-        const sendParams = { ...requestParams, filter: [...requestParams.filter] };
-        sendParams.filter.push([cursorIdKey, ">", nextId]);
-        const response = await this._b24.actions.v3.call.make({
+      try {
+        yield* keysetPaginate(this._b24, this._logger, {
+          method: options.method,
+          requestId: options.requestId,
+          customKeyForResult,
+          initialCursor: 0,
+          // Emulated keyset: append the `[cursorIdKey, '>', cursor]` page filter.
+          buildParams: /* @__PURE__ */ __name$13((cursor) => ({ ...requestParams, filter: [...requestParams.filter, [cursorIdKey, ">", cursor]] }), "buildParams"),
+          // Advance by the numeric id read from the last item via `idKey`. A
+          // non-numeric value (almost always an `idKey` that doesn't match the
+          // response field — e.g. sorting by `ID` while the response carries a
+          // lowercase `id`) stops the walk instead of silently truncating.
+          readNextCursor: /* @__PURE__ */ __name$13((lastItem) => {
+            const value = Number.parseInt(lastItem[idKey], 10);
+            return Number.isFinite(value) ? value : null;
+          }, "readNextCursor"),
+          noCursorWarning: `fetchList.make: pagination stops here \u2014 no numeric id could be read from the returned items via idKey "${idKey}". Make sure idKey matches the id field in the response; if the sortable field name differs from it, also set cursorIdKey (e.g. idKey: 'id', cursorIdKey: 'ID').`,
+          errorLabel: "fetchListMethod"
+        });
+      } catch (error) {
+        if (error instanceof KeysetPaginationError) {
+          throw new SdkError({
+            code: "JSSDK_CORE_B24_FETCH_LIST_METHOD_API_V3",
+            description: `API Error: ${error.messages.join("; ")}`,
+            status: 500
+          });
+        }
+        throw error;
+      }
+    }
+  }
+
+  var __defProp$12 = Object.defineProperty;
+  var __name$12 = (target, value) => __defProp$12(target, "name", { value, configurable: true });
+  class CallTailV3 extends AbstractAction {
+    static {
+      __name$12(this, "CallTailV3");
+    }
+    /**
+     * Returns every record of a `tail` method as one array.
+     *
+     * @template T - The type of the elements of the returned array (default is `unknown`).
+     *
+     * @param {ActionCallTailV3} options - parameters for executing the request.
+     *     - `method: string` - A REST API `tail` method name (for example: `main.eventlog.tail`).
+     *     - `params?: Omit<TypeCallParams, 'pagination' | 'order' | 'cursor'>` - Request parameters
+     *         (`filter`, `select`). `pagination`, `order` and `cursor` are managed by this helper.
+     *         The cursor field must NOT be used in `filter`.
+     *     - `cursorField?: string` - The DTO field that drives the cursor. Default is `id`.
+     *     - `order?: 'ASC' | 'DESC'` - Cursor direction. Default is `ASC`. For `DESC` you MUST pass
+     *         `initialValue` (the server pages by `field < value`, so the default `0` returns nothing).
+     *     - `customKeyForResult?: string` - The key the response groups rows under. Default is `items`.
+     *     - `requestId?: string` - Unique request identifier for tracking.
+     *     - `limit?: number` - How many records to retrieve at a time. Default is `50`. Maximum is `1000`.
+     *     - `initialValue?: number | string` - Cursor start value for the first page. Default is `0`
+     *         (valid for ascending numeric fields); required for `DESC` and for non-numeric fields.
+     *
+     * @returns {Promise<Result<T[]>>} A promise that resolves to the result of an REST API call.
+     *
+     * @example
+     * const response = await b24.actions.v3.callTail.make<{ id: string }>({
+     *   method: 'main.eventlog.tail',
+     *   params: { select: ['id', 'auditType'] },
+     *   cursorField: 'id',
+     *   customKeyForResult: 'items'
+     * })
+     * if (!response.isSuccess) {
+     *   throw new Error(`Problem: ${response.getErrorMessages().join('; ')}`)
+     * }
+     * console.log(`Result: ${response.getData()?.length}`)
+     */
+    async make(options) {
+      const batchSize = options?.limit ?? 50;
+      const result = new Result();
+      const cursorField = options?.cursorField ?? "id";
+      const order = options?.order ?? "ASC";
+      const customKeyForResult = options?.customKeyForResult ?? "items";
+      const params = options?.params ?? {};
+      if (/desc/i.test(order) && options?.initialValue === void 0) {
+        throw new SdkError({
+          code: "JSSDK_CORE_B24_CALL_TAIL_DESC_REQUIRES_INITIAL_VALUE",
+          description: 'callTail.make: order "DESC" requires an explicit `initialValue` (the server pages by `field < value`, so the default 0 returns nothing). Pass `initialValue` set to the type maximum / newest value.',
+          status: 500
+        });
+      }
+      if (Array.isArray(params["filter"]) && params["filter"].some((c) => Array.isArray(c) && c[0] === cursorField)) {
+        this._logger.warning(`callTail.make: the cursor field "${cursorField}" must not appear in \`filter\` \u2014 the server orders and pages by it and will reject a filter on the same field (INVALIDFILTEREXCEPTION). Remove it from \`filter\`.`);
+      }
+      let select = params["select"];
+      if (Array.isArray(select)) {
+        if (!select.includes(cursorField)) {
+          select = [...select, cursorField];
+        }
+      } else if (cursorField !== "id") {
+        this._logger.warning(`callTail.make: no \`select\` provided with a non-default cursorField "${cursorField}" \u2014 make sure it is in the server's default field set, otherwise pass \`select\` including "${cursorField}" so the cursor can advance.`);
+      }
+      const { select: _ignoredSelect, ...restParams } = params;
+      const allItems = [];
+      try {
+        for await (const page of keysetPaginate(this._b24, this._logger, {
+          method: options.method,
+          requestId: options.requestId,
+          customKeyForResult,
+          initialCursor: options?.initialValue ?? 0,
+          // Native keyset: drive the server's `cursor: { field, value, order, limit }`.
+          buildParams: /* @__PURE__ */ __name$12((cursor) => ({
+            ...restParams,
+            ...select ? { select } : {},
+            cursor: { field: cursorField, value: cursor, order, limit: batchSize }
+          }), "buildParams"),
+          // Advance by the raw cursor-field value from the last item; a missing
+          // value (cursorField not selected / wrong name) stops the walk.
+          readNextCursor: /* @__PURE__ */ __name$12((lastItem) => lastItem[cursorField] ?? null, "readNextCursor"),
+          noCursorWarning: `callTail.make: pagination stops here \u2014 no value could be read from the returned items via cursorField "${cursorField}". Make sure cursorField matches a field present in the response (and in \`select\`).`,
+          errorLabel: "callTailMethod"
+        })) {
+          for (const item of page) {
+            allItems.push(item);
+          }
+        }
+      } catch (error) {
+        if (error instanceof KeysetPaginationError) {
+          for (const [index, err] of error.errors) {
+            result.addError(err, index);
+          }
+        } else {
+          throw error;
+        }
+      }
+      return result.setData(allItems);
+    }
+  }
+
+  var __defProp$11 = Object.defineProperty;
+  var __name$11 = (target, value) => __defProp$11(target, "name", { value, configurable: true });
+  class FetchTailV3 extends AbstractAction {
+    static {
+      __name$11(this, "FetchTailV3");
+    }
+    /**
+     * Streams every record of a `tail` method as chunks, advancing the keyset
+     * cursor between requests.
+     *
+     * @template T - The type of items in the returned arrays (default is `unknown`).
+     *
+     * @param {ActionFetchTailV3} options - parameters for executing the request.
+     *     - `method: string` - A REST API `tail` method name (for example: `main.eventlog.tail`).
+     *     - `params?: Omit<TypeCallParams, 'pagination' | 'order' | 'cursor'>` - Request parameters.
+     *         Use `filter` and `select` to control the selection. `pagination`, `order` and `cursor`
+     *         are managed by this helper and must not be passed. The cursor field must NOT be used in `filter`.
+     *     - `cursorField?: string` - The DTO field that drives the cursor. Must be monotonic and
+     *         preferably unique, and present in `select`. Default is `id`.
+     *     - `order?: 'ASC' | 'DESC'` - Cursor direction. Default is `ASC`. For `DESC` you MUST pass
+     *         `initialValue` (the server pages by `field < value`, so the default `0` returns nothing).
+     *     - `customKeyForResult?: string` - The key the response groups rows under. Default is `items`.
+     *     - `requestId?: string` - Unique request identifier for tracking.
+     *     - `limit?: number` - How many records to retrieve at a time. Default is `50`. Maximum is `1000`.
+     *     - `initialValue?: number | string` - Cursor start value for the first page. Default is `0`
+     *         (valid for ascending numeric fields); required for `DESC` and for non-numeric fields.
+     *
+     * @returns {AsyncGenerator<T[]>} An async generator that yields chunks of data as arrays of type `T`.
+     *
+     * @example
+     * const generator = b24.actions.v3.fetchTail.make<{ id: string }>({
+     *   method: 'main.eventlog.tail',
+     *   params: { select: ['id', 'auditType'] },
+     *   cursorField: 'id',
+     *   customKeyForResult: 'items'
+     * })
+     * for await (const chunk of generator) {
+     *   console.log(`Processing ${chunk.length} items`)
+     * }
+     */
+    async *make(options) {
+      const batchSize = options?.limit ?? 50;
+      const cursorField = options?.cursorField ?? "id";
+      const order = options?.order ?? "ASC";
+      const customKeyForResult = options?.customKeyForResult ?? "items";
+      const params = options?.params ?? {};
+      if (/desc/i.test(order) && options?.initialValue === void 0) {
+        throw new SdkError({
+          code: "JSSDK_CORE_B24_FETCH_TAIL_DESC_REQUIRES_INITIAL_VALUE",
+          description: 'fetchTail.make: order "DESC" requires an explicit `initialValue` (the server pages by `field < value`, so the default 0 returns nothing). Pass `initialValue` set to the type maximum / newest value.',
+          status: 500
+        });
+      }
+      if (Array.isArray(params["filter"]) && params["filter"].some((c) => Array.isArray(c) && c[0] === cursorField)) {
+        this._logger.warning(`fetchTail.make: the cursor field "${cursorField}" must not appear in \`filter\` \u2014 the server orders and pages by it and will reject a filter on the same field (INVALIDFILTEREXCEPTION). Remove it from \`filter\`.`);
+      }
+      let select = params["select"];
+      if (Array.isArray(select)) {
+        if (!select.includes(cursorField)) {
+          select = [...select, cursorField];
+        }
+      } else if (cursorField !== "id") {
+        this._logger.warning(`fetchTail.make: no \`select\` provided with a non-default cursorField "${cursorField}" \u2014 make sure it is in the server's default field set, otherwise pass \`select\` including "${cursorField}" so the cursor can advance.`);
+      }
+      const { select: _ignoredSelect, ...restParams } = params;
+      try {
+        yield* keysetPaginate(this._b24, this._logger, {
           method: options.method,
-          params: sendParams,
-          requestId: options.requestId
+          requestId: options.requestId,
+          customKeyForResult,
+          initialCursor: options?.initialValue ?? 0,
+          // Native keyset: drive the server's `cursor: { field, value, order, limit }`.
+          buildParams: /* @__PURE__ */ __name$11((cursor) => ({
+            ...restParams,
+            ...select ? { select } : {},
+            cursor: { field: cursorField, value: cursor, order, limit: batchSize }
+          }), "buildParams"),
+          // Advance by the raw cursor-field value from the last item; a missing
+          // value (cursorField not selected / wrong name) stops the walk.
+          readNextCursor: /* @__PURE__ */ __name$11((lastItem) => lastItem[cursorField] ?? null, "readNextCursor"),
+          noCursorWarning: `fetchTail.make: pagination stops here \u2014 no value could be read from the returned items via cursorField "${cursorField}". Make sure cursorField matches a field present in the response (and in \`select\`).`,
+          errorLabel: "fetchTailMethod"
         });
-        if (!response.isSuccess) {
-          this._logger.error("fetchListMethod", {
-            method: options.method,
-            requestId: options.requestId,
-            messages: response.getErrorMessages()
-          });
+      } catch (error) {
+        if (error instanceof KeysetPaginationError) {
           throw new SdkError({
-            code: "JSSDK_CORE_B24_FETCH_LIST_METHOD_API_V3",
-            description: `API Error: ${response.getErrorMessages().join("; ")}`,
+            code: "JSSDK_CORE_B24_FETCH_TAIL_METHOD_API_V3",
+            description: `API Error: ${error.messages.join("; ")}`,
             status: 500
           });
         }
-        const responseData = response.getData();
-        if (!responseData) {
-          isContinue = false;
-          break;
-        }
-        const resultData = responseData.result[customKeyForResult];
-        if (resultData.length === 0) {
-          isContinue = false;
-          break;
+        throw error;
+      }
+    }
+  }
+
+  var __defProp$10 = Object.defineProperty;
+  var __name$10 = (target, value) => __defProp$10(target, "name", { value, configurable: true });
+  const AGGREGATE_FUNCTIONS = ["sum", "avg", "min", "max", "count", "countDistinct"];
+  class AggregateV3 extends AbstractAction {
+    static {
+      __name$10(this, "AggregateV3");
+    }
+    /**
+     * @param {ActionAggregateV3} options
+     *     - `method: string` - an `*.aggregate` method name.
+     *     - `select: AggregateSelectV3` - per-function field selection (`sum`/`avg`/`min`/`max`/`count`/`countDistinct`).
+     *     - `params?: { filter }` - optional v3 filter (array-of-triples; use `FilterV3` to build it).
+     *     - `requestId?: string` - tracking id.
+     *
+     * @returns {Promise<Result<AggregateResultV3>>} buckets keyed by function then field name.
+     *
+     * @example
+     * const response = await b24.actions.v3.aggregate.make({
+     *   method: 'some.entity.aggregate',
+     *   select: { sum: { amount: 'totalAmount' }, count: ['id'] },
+     *   params: { filter: FilterV3.build(FilterV3.eq('status', 'NEW')) }
+     * })
+     * if (response.isSuccess) {
+     *   const total = response.getData()?.sum?.amount
+     * }
+     */
+    async make(options) {
+      const result = new Result();
+      const select = options?.select ?? {};
+      for (const fn of Object.keys(select)) {
+        if (!AGGREGATE_FUNCTIONS.includes(fn)) {
+          throw new SdkError({
+            code: "JSSDK_AGGREGATE_V3_INVALID_FUNCTION",
+            description: `AggregateV3: "${fn}" is not an aggregate function \u2014 use one of ${AGGREGATE_FUNCTIONS.join(" ")}.`,
+            status: 400
+          });
         }
-        yield resultData;
-        if (resultData.length < batchSize) {
-          isContinue = false;
-          break;
+        const fields = select[fn];
+        if (!Array.isArray(fields) && (typeof fields !== "object" || fields === null)) {
+          throw new SdkError({
+            code: "JSSDK_AGGREGATE_V3_INVALID_SELECT",
+            description: `AggregateV3: select.${fn} must be a string[] (default alias) or a { field: alias } map.`,
+            status: 400
+          });
         }
-        const lastItem = resultData[resultData.length - 1];
-        const cursorValue = lastItem ? Number.parseInt(lastItem[idKey], 10) : Number.NaN;
-        if (Number.isFinite(cursorValue)) {
-          nextId = cursorValue;
-        } else {
-          this._logger.warning(`fetchList.make: pagination stops here \u2014 no numeric id could be read from the returned items via idKey "${idKey}". Make sure idKey matches the id field in the response; if the sortable field name differs from it, also set cursorIdKey (e.g. idKey: 'id', cursorIdKey: 'ID').`);
-          isContinue = false;
-          break;
+      }
+      const params = { select };
+      if (options?.params?.filter) {
+        params.filter = options.params.filter;
+      }
+      const response = await this._b24.actions.v3.call.make({
+        method: options.method,
+        params,
+        requestId: options.requestId
+      });
+      if (!response.isSuccess) {
+        this._logger.error("aggregateMethod", {
+          method: options.method,
+          requestId: options.requestId,
+          messages: response.getErrorMessages()
+        });
+        for (const [index, error] of response.errors) {
+          result.addError(error, index);
         }
-      } while (isContinue);
+        return result;
+      }
+      const payload = response.getData()?.result;
+      let buckets;
+      if (payload && typeof payload === "object" && "result" in payload) {
+        buckets = payload.result ?? {};
+      } else if (payload && typeof payload === "object") {
+        this._logger.warning(`aggregate.make: response has no nested 'result.result' envelope (the v3 reference \xA77 specifies double nesting); falling back to the top-level 'result'. method=${options.method}`);
+        buckets = payload;
+      } else {
+        buckets = {};
+      }
+      return result.setData(buckets);
     }
   }
 
-  var __defProp$Y = Object.defineProperty;
-  var __name$Y = (target, value) => __defProp$Y(target, "name", { value, configurable: true });
+  var __defProp$$ = Object.defineProperty;
+  var __name$$ = (target, value) => __defProp$$(target, "name", { value, configurable: true });
   class BatchV3 extends AbstractBatch {
     static {
-      __name$Y(this, "BatchV3");
+      __name$$(this, "BatchV3");
     }
     /**
      * Executes a batch request to the Bitrix24 REST API with a maximum number of commands of no more than 50.
@@ -13308,23 +13434,16 @@ ${JSON.stringify({
         ...options.options,
         apiVersion: ApiVersion.v3
       };
-      if (versionManager.automaticallyObtainApiVersionForBatch(options.calls) !== opts.apiVersion) {
-        throw new SdkError({
-          code: "JSSDK_CORE_METHOD_NOT_SUPPORT_IN_API_V3",
-          description: `restApi:v3 not support some methods in calls: ${JSON.stringify(options.calls)}`,
-          status: 500
-        });
-      }
       const response = await this._b24.getHttpClient(ApiVersion.v3).batch(options.calls, opts);
       return this._processBatchResponse(response, options.calls, opts);
     }
   }
 
-  var __defProp$X = Object.defineProperty;
-  var __name$X = (target, value) => __defProp$X(target, "name", { value, configurable: true });
+  var __defProp$_ = Object.defineProperty;
+  var __name$_ = (target, value) => __defProp$_(target, "name", { value, configurable: true });
   class BatchByChunkV3 extends AbstractBatch {
     static {
-      __name$X(this, "BatchByChunkV3");
+      __name$_(this, "BatchByChunkV3");
     }
     /**
      * Executes a batch request with automatic chunking for any number of commands.
@@ -13397,16 +13516,19 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$W = Object.defineProperty;
-  var __name$W = (target, value) => __defProp$W(target, "name", { value, configurable: true });
+  var __defProp$Z = Object.defineProperty;
+  var __name$Z = (target, value) => __defProp$Z(target, "name", { value, configurable: true });
   const callName = /* @__PURE__ */ Symbol("call_V3");
   const callListName = /* @__PURE__ */ Symbol("callList_V3");
   const fetchListName = /* @__PURE__ */ Symbol("fetchList_V3");
+  const callTailName = /* @__PURE__ */ Symbol("callTail_V3");
+  const fetchTailName = /* @__PURE__ */ Symbol("fetchTail_V3");
+  const aggregateName = /* @__PURE__ */ Symbol("aggregate_V3");
   const batchName = /* @__PURE__ */ Symbol("batch_V3");
   const batchByChunkName = /* @__PURE__ */ Symbol("batchByChunk_V3");
   class ActionsManagerV3 {
     static {
-      __name$W(this, "ActionsManagerV3");
+      __name$Z(this, "ActionsManagerV3");
     }
     _b24;
     _logger;
@@ -13440,6 +13562,24 @@ ${JSON.stringify({
       }
       return this._mapActions.get(fetchListName);
     }
+    get callTail() {
+      if (!this._mapActions.has(callTailName)) {
+        this._mapActions.set(callTailName, new CallTailV3(this._b24, this._logger));
+      }
+      return this._mapActions.get(callTailName);
+    }
+    get fetchTail() {
+      if (!this._mapActions.has(fetchTailName)) {
+        this._mapActions.set(fetchTailName, new FetchTailV3(this._b24, this._logger));
+      }
+      return this._mapActions.get(fetchTailName);
+    }
+    get aggregate() {
+      if (!this._mapActions.has(aggregateName)) {
+        this._mapActions.set(aggregateName, new AggregateV3(this._b24, this._logger));
+      }
+      return this._mapActions.get(aggregateName);
+    }
     get batch() {
       if (!this._mapActions.has(batchName)) {
         this._mapActions.set(batchName, new BatchV3(this._b24, this._logger));
@@ -13454,13 +13594,13 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$V = Object.defineProperty;
-  var __name$V = (target, value) => __defProp$V(target, "name", { value, configurable: true });
+  var __defProp$Y = Object.defineProperty;
+  var __name$Y = (target, value) => __defProp$Y(target, "name", { value, configurable: true });
   const apiV2Name = Symbol(ApiVersion.v2);
   const apiV3Name = Symbol(ApiVersion.v3);
   class ActionsManager {
     static {
-      __name$V(this, "ActionsManager");
+      __name$Y(this, "ActionsManager");
     }
     _b24;
     _logger;
@@ -13492,11 +13632,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$U = Object.defineProperty;
-  var __name$U = (target, value) => __defProp$U(target, "name", { value, configurable: true });
+  var __defProp$X = Object.defineProperty;
+  var __name$X = (target, value) => __defProp$X(target, "name", { value, configurable: true });
   class AbstractTool {
     static {
-      __name$U(this, "AbstractTool");
+      __name$X(this, "AbstractTool");
     }
     _b24;
     _logger;
@@ -13506,11 +13646,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$T = Object.defineProperty;
-  var __name$T = (target, value) => __defProp$T(target, "name", { value, configurable: true });
+  var __defProp$W = Object.defineProperty;
+  var __name$W = (target, value) => __defProp$W(target, "name", { value, configurable: true });
   class Ping extends AbstractTool {
     static {
-      __name$T(this, "Ping");
+      __name$W(this, "Ping");
     }
     /**
      * Measures the response speed of the Bitrix24 REST API.
@@ -13550,11 +13690,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$S = Object.defineProperty;
-  var __name$S = (target, value) => __defProp$S(target, "name", { value, configurable: true });
+  var __defProp$V = Object.defineProperty;
+  var __name$V = (target, value) => __defProp$V(target, "name", { value, configurable: true });
   class HealthCheck extends AbstractTool {
     static {
-      __name$S(this, "HealthCheck");
+      __name$V(this, "HealthCheck");
     }
     /**
      * Checks the availability of the Bitrix24 REST API.
@@ -13586,13 +13726,13 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$R = Object.defineProperty;
-  var __name$R = (target, value) => __defProp$R(target, "name", { value, configurable: true });
+  var __defProp$U = Object.defineProperty;
+  var __name$U = (target, value) => __defProp$U(target, "name", { value, configurable: true });
   const pingName = /* @__PURE__ */ Symbol("ping");
   const healthCheckName = /* @__PURE__ */ Symbol("healthCheck");
   class ToolsManager {
     static {
-      __name$R(this, "ToolsManager");
+      __name$U(this, "ToolsManager");
     }
     _b24;
     _logger;
@@ -13622,11 +13762,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$Q = Object.defineProperty;
-  var __name$Q = (target, value) => __defProp$Q(target, "name", { value, configurable: true });
+  var __defProp$T = Object.defineProperty;
+  var __name$T = (target, value) => __defProp$T(target, "name", { value, configurable: true });
   class AbstractB24 {
     static {
-      __name$Q(this, "AbstractB24");
+      __name$T(this, "AbstractB24");
     }
     /**
      * Maximum length for batch response.
@@ -18709,15 +18849,15 @@ ${JSON.stringify({
     create,
   } = axios;
 
-  var __defProp$P = Object.defineProperty;
-  var __name$P = (target, value) => __defProp$P(target, "name", { value, configurable: true });
+  var __defProp$S = Object.defineProperty;
+  var __name$S = (target, value) => __defProp$S(target, "name", { value, configurable: true });
   const DEFAULT_REQUEST_ID_HEADER_FIELD_NAME = "X-Request-ID";
   const DEFAULT_QUERY_STRING_PARAMETER_NAME = "bx24_request_id";
   const DEFAULT_QUERY_STRING_SDK_VER_PARAMETER_NAME = "bx24_sdk_ver";
   const DEFAULT_QUERY_STRING_SDK_TYPE_PARAMETER_NAME = "bx24_sdk_type";
   class RequestIdGenerator {
     static {
-      __name$P(this, "RequestIdGenerator");
+      __name$S(this, "RequestIdGenerator");
     }
     getQueryStringParameterName() {
       return DEFAULT_QUERY_STRING_PARAMETER_NAME;
@@ -18739,11 +18879,17 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$O = Object.defineProperty;
-  var __name$O = (target, value) => __defProp$O(target, "name", { value, configurable: true });
+  var __defProp$R = Object.defineProperty;
+  var __name$R = (target, value) => __defProp$R(target, "name", { value, configurable: true });
+  const LOG_MAX_LENGTH = 300;
+  const LOG_SLICE_LENGTH = 100;
+  function truncateForLog(value) {
+    return value.length > LOG_MAX_LENGTH ? value.slice(0, LOG_SLICE_LENGTH) + "..." : value;
+  }
+  __name$R(truncateForLog, "truncateForLog");
   class AbstractHttp {
     static {
-      __name$O(this, "AbstractHttp");
+      __name$R(this, "AbstractHttp");
     }
     _clientAxios;
     _authActions;
@@ -18772,18 +18918,20 @@ ${JSON.stringify({
       this._logger = LoggerFactory.createNullLogger();
       const defaultHeaders = {};
       if (this.isServerSide()) {
-        defaultHeaders["User-Agent"] = "b24-js-sdk/1.3.0";
+        defaultHeaders["User-Agent"] = "b24-js-sdk/2.0.0";
       }
       this._authActions = authActions;
       this._requestIdGenerator = new RequestIdGenerator();
       this._clientAxios = axios.create({
-        headers: {
-          ...defaultHeaders,
-          ...options ? options.headers : {}
-        },
         timeout: 3e4,
         timeoutErrorMessage: "Request timeout exceeded",
-        ...options && { ...options, headers: void 0 }
+        ...options ?? {},
+        // headers last so the merged default + caller headers aren't wiped by an
+        // `options.headers` (or the previous `headers: undefined`) spread (#144).
+        headers: {
+          ...defaultHeaders,
+          ...options?.headers ?? {}
+        }
       });
       const params = {
         ...ParamsFactory.getDefault(),
@@ -18819,7 +18967,7 @@ ${JSON.stringify({
     getStats() {
       return {
         ...this._restrictionManager.getStats(),
-        totalRequests: this._metrics.totalDuration,
+        totalRequests: this._metrics.totalRequests,
         successfulRequests: this._metrics.successfulRequests,
         failedRequests: this._metrics.failedRequests,
         totalDuration: this._metrics.totalDuration,
@@ -18831,7 +18979,7 @@ ${JSON.stringify({
      * @inheritDoc
      */
     async reset() {
-      this._metrics.totalDuration = 0;
+      this._metrics.totalRequests = 0;
       this._metrics.successfulRequests = 0;
       this._metrics.failedRequests = 0;
       this._metrics.totalDuration = 0;
@@ -18909,7 +19057,7 @@ ${JSON.stringify({
           this._restrictionManager.incrementError(method);
           this._updateMetrics(method, false, duration, lastError);
           this._logFailedRequest(requestId, method, attempt + 1, maxRetries, lastError);
-          if (attempt < maxRetries) {
+          if (attempt + 1 < maxRetries) {
             const waitTime = await this._restrictionManager.handleError(requestId, method, params, lastError, attempt);
             if (waitTime > 0) {
               this._restrictionManager.incrementStats("limitHits");
@@ -19057,8 +19205,9 @@ ${JSON.stringify({
               requestId,
               status: error.status,
               // Redact in case a future portal response embeds credentials in
-              // the error body (today it doesn't, but the channel is open). (#39)
-              responseData: JSON.stringify(redactSensitiveParams(error?.response?.data), null, 0)
+              // the error body (today it doesn't, but the channel is open) (#39),
+              // and cap the length so a large error body can't flood the sink (#236).
+              responseData: truncateForLog(JSON.stringify(redactSensitiveParams(error?.response?.data), null, 0))
             }
           );
         }
@@ -19077,14 +19226,12 @@ ${JSON.stringify({
       const methodFormatted = this._prepareMethod(requestId, method, this.getBaseUrl());
       const paramsFormatted = this._prepareParams(authData, params);
       const paramsFormattedForLog = JSON.stringify(redactSensitiveParams(paramsFormatted), null, 0);
-      const maxLogLength = 300;
-      const sliceLogLength = 100;
       this.getLogger().info(
         `post/send`,
         {
           requestId,
           method,
-          params: paramsFormattedForLog.length > maxLogLength ? paramsFormattedForLog.slice(0, sliceLogLength) + "..." : paramsFormattedForLog
+          params: truncateForLog(paramsFormattedForLog)
         }
       );
       const response = await this._clientAxios.post(methodFormatted, paramsFormatted);
@@ -19094,7 +19241,7 @@ ${JSON.stringify({
         {
           requestId,
           // responseFull: JSON.stringify(response.data, null, 2),
-          result: resultFormattedForLog.length > maxLogLength ? resultFormattedForLog.slice(0, sliceLogLength) + "..." : resultFormattedForLog,
+          result: truncateForLog(resultFormattedForLog),
           time: JSON.stringify(response.data.time, null, 0)
         }
       );
@@ -19136,6 +19283,50 @@ ${JSON.stringify({
         status: ajaxError.status
       });
     }
+    // endregion ////
+    // endregion ////
+    // region Prepare ////
+    /**
+     * Builds the request URL: the method path plus the SDK telemetry query params
+     * (`bx24_request_id` / `bx24_sdk_ver` / `bx24_sdk_type` — request tracing and
+     * SDK identification, not auth material).
+     *
+     * Carve-out for the legacy positional `task.*` methods (`task.commentitem.*`,
+     * `task.checklistitem.*`, `task.elapseditem.*`, …): these read the request
+     * **query string positionally**, so appending the telemetry params shifts
+     * `Param #0` and the server rejects the call —
+     * `WRONG_ARGUMENTS: Param #0 (taskId) ... expected integer, but given
+     * something else`. Verified live against a portal: the same
+     * `task.commentitem.getlist` / `task.checklistitem.getlist` call succeeds
+     * without the telemetry params and fails with them; modern `tasks.task.*`
+     * (named params) is unaffected. So telemetry is omitted for any method whose
+     * name contains `task.`.
+     *
+     * Shared by v2 and v3 (rather than per-transport): once the v3 method
+     * allowlist was dropped (#259) a positional `task.*` method can be routed via
+     * `actions.v3.*` too, so v3 needs the same suppression — keeping the rule in
+     * one place stops the two transports drifting apart again (#207).
+     *
+     * `includes('task.')` is a deliberate over-approximation: it also drops the
+     * (optional, telemetry-safe) params for modern `tasks.task.*` / `bizproc.task.*`.
+     * Narrowing to an anchored `^task\.` is possible but unverified across the
+     * whole task surface, so the broad, safe match is kept. Bitrix24 method names
+     * are lowercase by convention, so the case-sensitive match is sufficient.
+     *
+     * @see https://apidocs.bitrix24.com/settings/how-to-call-rest-api/data-encoding.html#order-of-parameters
+     */
+    _prepareMethod(requestId, method, baseUrl) {
+      const methodUrl = `/${encodeURIComponent(method)}`;
+      if (method.includes("task.")) {
+        return `${baseUrl}${methodUrl}`;
+      }
+      const queryParams = new URLSearchParams({
+        [this._requestIdGenerator.getQueryStringParameterName()]: requestId,
+        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "2.0.0",
+        [this._requestIdGenerator.getQueryStringSdkTypeParameterName()]: "b24-js-sdk"
+      });
+      return `${baseUrl}${methodUrl}?${queryParams.toString()}`;
+    }
     /**
      * Processes function parameters and adds authorization
      */
@@ -19300,11 +19491,11 @@ ${JSON.stringify({
     // endregion ////
   }
 
-  var __defProp$N = Object.defineProperty;
-  var __name$N = (target, value) => __defProp$N(target, "name", { value, configurable: true });
+  var __defProp$Q = Object.defineProperty;
+  var __name$Q = (target, value) => __defProp$Q(target, "name", { value, configurable: true });
   class AbstractInteractionBatch {
     static {
-      __name$N(this, "AbstractInteractionBatch");
+      __name$Q(this, "AbstractInteractionBatch");
     }
     parallelDefaultValue;
     requestId;
@@ -19357,12 +19548,12 @@ ${JSON.stringify({
     // endregion ////
   }
 
-  var __defProp$M = Object.defineProperty;
-  var __name$M = (target, value) => __defProp$M(target, "name", { value, configurable: true });
+  var __defProp$P = Object.defineProperty;
+  var __name$P = (target, value) => __defProp$P(target, "name", { value, configurable: true });
   const MAX_BATCH_COMMANDS_V2 = 50;
   class InteractionBatchV2 extends AbstractInteractionBatch {
     static {
-      __name$M(this, "InteractionBatchV2");
+      __name$P(this, "InteractionBatchV2");
     }
     get maxSize() {
       return MAX_BATCH_COMMANDS_V2;
@@ -19790,11 +19981,53 @@ ${JSON.stringify({
     return joined.length > 0 ? prefix + joined : ''
   }
 
-  var __defProp$L = Object.defineProperty;
-  var __name$L = (target, value) => __defProp$L(target, "name", { value, configurable: true });
+  var __defProp$O = Object.defineProperty;
+  var __name$O = (target, value) => __defProp$O(target, "name", { value, configurable: true });
   class AbstractProcessing {
     static {
-      __name$L(this, "AbstractProcessing");
+      __name$O(this, "AbstractProcessing");
+    }
+    // region prepareItems ////
+    /**
+     * Template method. The soft-error envelope guard lives here ONCE so v2 and v3
+     * can't drift on it (#228 — hoisted from the duplicated #145 fix).
+     *
+     * When the batch CALL itself soft-errors (a top-level code in the restriction
+     * manager's `exceptionCodeForSoft` set, surfaced as a soft `Result` instead of
+     * a throw), the envelope carries `{ error }` and no `result`, so
+     * `response.getData()` is `undefined`. Skip per-row parsing — it would
+     * dereference `getData()!.result` — and let {@link handleResults} surface the
+     * top-level errors. The version-specific success path is {@link _prepareItemsSuccess}.
+     */
+    async prepareItems(commands, responseHelper) {
+      const results = /* @__PURE__ */ new Map();
+      if (!responseHelper.response.isSuccess) {
+        return results;
+      }
+      return this._prepareItemsSuccess(commands, responseHelper, results);
+    }
+    // endregion ////
+    // region handleResults ////
+    /**
+     * Template method. Same single soft-error guard as {@link prepareItems} (#228):
+     * there is no per-row data and `getData()` is `undefined`, so surface the
+     * envelope's top-level errors and return an empty data map instead of
+     * dereferencing `getData()!.time`. The version-specific success path is
+     * {@link _handleResultsSuccess}.
+     */
+    async handleResults(commands, results, responseHelper) {
+      const result = new Result();
+      if (!responseHelper.response.isSuccess) {
+        for (const [index, error] of responseHelper.response.errors) {
+          result.addError(error, index);
+        }
+        result.setData({
+          result: /* @__PURE__ */ new Map(),
+          time: void 0
+        });
+        return result;
+      }
+      return this._handleResultsSuccess(commands, results, responseHelper, result);
     }
     // endregion ////
     // region Tools ////
@@ -19820,11 +20053,11 @@ ${JSON.stringify({
     // endregion ////
   }
 
-  var __defProp$K = Object.defineProperty;
-  var __name$K = (target, value) => __defProp$K(target, "name", { value, configurable: true });
+  var __defProp$N = Object.defineProperty;
+  var __name$N = (target, value) => __defProp$N(target, "name", { value, configurable: true });
   class AbstractProcessingV2 extends AbstractProcessing {
     static {
-      __name$K(this, "AbstractProcessingV2");
+      __name$N(this, "AbstractProcessingV2");
     }
     _buildRow(command) {
       return `${command.method}?${stringify(command.query || {})}`;
@@ -19853,8 +20086,9 @@ ${JSON.stringify({
       return result;
     }
     // region prepareItems ////
-    async prepareItems(commands, responseHelper) {
-      const results = /* @__PURE__ */ new Map();
+    // Soft-error guard lives in AbstractProcessing.prepareItems (#228); this is the
+    // success-only path for apiVer2.
+    async _prepareItemsSuccess(commands, responseHelper, results) {
       for (const [index, command] of commands.entries()) {
         await this._processResponseItem(
           command,
@@ -19902,34 +20136,90 @@ ${JSON.stringify({
           status: 500
         });
       }
-    }
-    // endregion ////
-    // region handleResults ////
-    async handleResults(_commands, results, responseHelper) {
-      const result = new Result();
-      const dataResult = /* @__PURE__ */ new Map();
-      for (const [index, data] of results) {
-        if (data.getStatus() !== 200 || !data.isSuccess) {
-          const ajaxError = this._createErrorFromAjaxResult(data);
-          this._processResponseError(result, ajaxError, `${index}`);
-          dataResult.set(index, data);
-        }
-        dataResult.set(index, data);
-      }
-      result.setData({
-        result: dataResult,
-        time: responseHelper.response.getData().time
-      });
+    }
+    // endregion ////
+    // region handleResults ////
+    // Soft-error guard lives in AbstractProcessing.handleResults (#228); this is the
+    // success-only path for apiVer2.
+    async _handleResultsSuccess(_commands, results, responseHelper, result) {
+      const dataResult = /* @__PURE__ */ new Map();
+      for (const [index, data] of results) {
+        if (data.getStatus() !== 200 || !data.isSuccess) {
+          const ajaxError = this._createErrorFromAjaxResult(data);
+          this._processResponseError(result, ajaxError, `${index}`);
+          dataResult.set(index, data);
+        }
+        dataResult.set(index, data);
+      }
+      result.setData({
+        result: dataResult,
+        time: responseHelper.response.getData().time
+      });
+      return result;
+    }
+    // endregion ////
+  }
+
+  var __defProp$M = Object.defineProperty;
+  var __name$M = (target, value) => __defProp$M(target, "name", { value, configurable: true });
+  class ParseRow {
+    static {
+      __name$M(this, "ParseRow");
+    }
+    static getBatchCommand(row, options) {
+      if (row) {
+        if (typeof row === "object" && "method" in row && typeof row.method === "string") {
+          return {
+            method: row.method,
+            query: row.params,
+            as: row.as ?? options.asDefaultValue,
+            parallel: row.parallel ?? options.parallelDefaultValue
+          };
+        }
+        if (Array.isArray(row) && row.length > 0 && typeof row[0] === "string") {
+          return {
+            method: row[0],
+            query: row[1],
+            as: options.asDefaultValue,
+            parallel: options.parallelDefaultValue
+          };
+        }
+      }
+      throw new SdkError({
+        code: "JSSDK_INTERACTION_BATCH_ROW_FAIL",
+        description: `There were difficulties parsing the command for batch.
+${JSON.stringify({
+        row,
+        options
+      })}`,
+        status: 500
+      });
+    }
+    static getMethodsFromCommands(calls) {
+      const result = [];
+      const optsFake = {
+        parallelDefaultValue: false
+      };
+      if (Array.isArray(calls)) {
+        calls.forEach((row) => {
+          const command = ParseRow.getBatchCommand(row, optsFake);
+          result.push(command.method);
+        });
+      } else {
+        Object.entries(calls).forEach(([index, row]) => {
+          const command = ParseRow.getBatchCommand(row, { ...optsFake, asDefaultValue: index });
+          result.push(command.method);
+        });
+      }
       return result;
     }
-    // endregion ////
   }
 
-  var __defProp$J = Object.defineProperty;
-  var __name$J = (target, value) => __defProp$J(target, "name", { value, configurable: true });
+  var __defProp$L = Object.defineProperty;
+  var __name$L = (target, value) => __defProp$L(target, "name", { value, configurable: true });
   class ProcessingAsArrayV2 extends AbstractProcessingV2 {
     static {
-      __name$J(this, "ProcessingAsArrayV2");
+      __name$L(this, "ProcessingAsArrayV2");
     }
     prepareCommands(calls, options) {
       const result = [];
@@ -19939,16 +20229,16 @@ ${JSON.stringify({
       });
       return result;
     }
-    _processResponseError(result, ajaxError, _index) {
-      result.addError(ajaxError);
+    _processResponseError(result, ajaxError, index) {
+      result.addError(ajaxError, index);
     }
   }
 
-  var __defProp$I = Object.defineProperty;
-  var __name$I = (target, value) => __defProp$I(target, "name", { value, configurable: true });
+  var __defProp$K = Object.defineProperty;
+  var __name$K = (target, value) => __defProp$K(target, "name", { value, configurable: true });
   class ProcessingAsObjectV2 extends AbstractProcessingV2 {
     static {
-      __name$I(this, "ProcessingAsObjectV2");
+      __name$K(this, "ProcessingAsObjectV2");
     }
     prepareCommands(calls, options) {
       const result = [];
@@ -19963,11 +20253,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$H = Object.defineProperty;
-  var __name$H = (target, value) => __defProp$H(target, "name", { value, configurable: true });
+  var __defProp$J = Object.defineProperty;
+  var __name$J = (target, value) => __defProp$J(target, "name", { value, configurable: true });
   class HttpV2 extends AbstractHttp {
     static {
-      __name$H(this, "HttpV2");
+      __name$J(this, "HttpV2");
     }
     constructor(authActions, options, restrictionParams) {
       super(authActions, options, restrictionParams);
@@ -20027,31 +20317,14 @@ ${JSON.stringify({
       return response;
     }
     // endregion ////
-    // region Prepare ////
-    /**
-     * @inheritDoc
-     */
-    _prepareMethod(requestId, method, baseUrl) {
-      const methodUrl = `/${encodeURIComponent(method)}`;
-      if (method.includes("task.")) {
-        return `${baseUrl}${methodUrl}`;
-      }
-      const queryParams = new URLSearchParams({
-        [this._requestIdGenerator.getQueryStringParameterName()]: requestId,
-        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.3.0",
-        [this._requestIdGenerator.getQueryStringSdkTypeParameterName()]: "b24-js-sdk"
-      });
-      return `${baseUrl}${methodUrl}?${queryParams.toString()}`;
-    }
-    // endregion ////
   }
 
-  var __defProp$G = Object.defineProperty;
-  var __name$G = (target, value) => __defProp$G(target, "name", { value, configurable: true });
+  var __defProp$I = Object.defineProperty;
+  var __name$I = (target, value) => __defProp$I(target, "name", { value, configurable: true });
   const MAX_BATCH_COMMANDS_V3 = 50;
   class InteractionBatchV3 extends AbstractInteractionBatch {
     static {
-      __name$G(this, "InteractionBatchV3");
+      __name$I(this, "InteractionBatchV3");
     }
     get maxSize() {
       return MAX_BATCH_COMMANDS_V3;
@@ -20075,11 +20348,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$F = Object.defineProperty;
-  var __name$F = (target, value) => __defProp$F(target, "name", { value, configurable: true });
+  var __defProp$H = Object.defineProperty;
+  var __name$H = (target, value) => __defProp$H(target, "name", { value, configurable: true });
   class AbstractProcessingV3 extends AbstractProcessing {
     static {
-      __name$F(this, "AbstractProcessingV3");
+      __name$H(this, "AbstractProcessingV3");
     }
     buildCommands(commands) {
       if (commands.length < 1) {
@@ -20092,11 +20365,9 @@ ${JSON.stringify({
       return commands;
     }
     // region prepareItems ////
-    async prepareItems(commands, responseHelper) {
-      const results = /* @__PURE__ */ new Map();
-      if (!responseHelper.response.isSuccess) {
-        return results;
-      }
+    // Soft-error guard lives in AbstractProcessing.prepareItems (#228); this is the
+    // success-only path for apiVer3 (all-or-nothing — no per-command errors).
+    async _prepareItemsSuccess(commands, responseHelper, results) {
       for (const [index, command] of commands.entries()) {
         await this._processResponseItem(
           command,
@@ -20145,19 +20416,10 @@ ${JSON.stringify({
     }
     // endregion ////
     // region handleResults ////
-    async handleResults(commands, results, responseHelper) {
-      const result = new Result();
+    // Soft-error guard lives in AbstractProcessing.handleResults (#228); this is the
+    // success-only path for apiVer3.
+    async _handleResultsSuccess(commands, results, responseHelper, result) {
       const dataResult = /* @__PURE__ */ new Map();
-      if (!responseHelper.response.isSuccess) {
-        for (const [index, error] of responseHelper.response.errors) {
-          result.addError(error, index);
-        }
-        result.setData({
-          result: dataResult,
-          time: void 0
-        });
-        return result;
-      }
       for (const [index, data] of results) {
         const rowIndex = Number.parseInt(`${index}`);
         const command = commands[rowIndex];
@@ -20185,11 +20447,11 @@ ${JSON.stringify({
     // endregion ////
   }
 
-  var __defProp$E = Object.defineProperty;
-  var __name$E = (target, value) => __defProp$E(target, "name", { value, configurable: true });
+  var __defProp$G = Object.defineProperty;
+  var __name$G = (target, value) => __defProp$G(target, "name", { value, configurable: true });
   class ProcessingAsArrayV3 extends AbstractProcessingV3 {
     static {
-      __name$E(this, "ProcessingAsArrayV3");
+      __name$G(this, "ProcessingAsArrayV3");
     }
     prepareCommands(calls, options) {
       const result = [];
@@ -20199,16 +20461,16 @@ ${JSON.stringify({
       });
       return result;
     }
-    _processResponseError(result, ajaxError, _index) {
-      result.addError(ajaxError);
+    _processResponseError(result, ajaxError, index) {
+      result.addError(ajaxError, index);
     }
   }
 
-  var __defProp$D = Object.defineProperty;
-  var __name$D = (target, value) => __defProp$D(target, "name", { value, configurable: true });
+  var __defProp$F = Object.defineProperty;
+  var __name$F = (target, value) => __defProp$F(target, "name", { value, configurable: true });
   class ProcessingAsObjectV3 extends AbstractProcessingV3 {
     static {
-      __name$D(this, "ProcessingAsObjectV3");
+      __name$F(this, "ProcessingAsObjectV3");
     }
     prepareCommands(calls, options) {
       const result = [];
@@ -20223,11 +20485,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$C = Object.defineProperty;
-  var __name$C = (target, value) => __defProp$C(target, "name", { value, configurable: true });
+  var __defProp$E = Object.defineProperty;
+  var __name$E = (target, value) => __defProp$E(target, "name", { value, configurable: true });
   class HttpV3 extends AbstractHttp {
     static {
-      __name$C(this, "HttpV3");
+      __name$E(this, "HttpV3");
     }
     constructor(authActions, options, restrictionParams) {
       super(authActions, options, restrictionParams);
@@ -20284,25 +20546,11 @@ ${JSON.stringify({
       return response;
     }
     // endregion ////
-    // region Prepare ////
-    /**
-     * @inheritDoc
-     */
-    _prepareMethod(requestId, method, baseUrl) {
-      const methodUrl = `/${encodeURIComponent(method)}`;
-      const queryParams = new URLSearchParams({
-        [this._requestIdGenerator.getQueryStringParameterName()]: requestId,
-        [this._requestIdGenerator.getQueryStringSdkParameterName()]: "1.3.0",
-        [this._requestIdGenerator.getQueryStringSdkTypeParameterName()]: "b24-js-sdk"
-      });
-      return `${baseUrl}${methodUrl}?${queryParams.toString()}`;
-    }
-    // endregion ////
   }
 
-  var __defProp$B = Object.defineProperty;
-  var __name$B = (target, value) => __defProp$B(target, "name", { value, configurable: true });
-  const useScrollSize = /* @__PURE__ */ __name$B(() => {
+  var __defProp$D = Object.defineProperty;
+  var __name$D = (target, value) => __defProp$D(target, "name", { value, configurable: true });
+  const useScrollSize = /* @__PURE__ */ __name$D(() => {
     return {
       scrollWidth: Math.max(
         document.documentElement.scrollWidth,
@@ -20315,11 +20563,11 @@ ${JSON.stringify({
     };
   }, "useScrollSize");
 
-  var __defProp$A = Object.defineProperty;
-  var __name$A = (target, value) => __defProp$A(target, "name", { value, configurable: true });
+  var __defProp$C = Object.defineProperty;
+  var __name$C = (target, value) => __defProp$C(target, "name", { value, configurable: true });
   class FormatterNumbers {
     static {
-      __name$A(this, "FormatterNumbers");
+      __name$C(this, "FormatterNumbers");
     }
     static isInternalConstructing = false;
     static instance = null;
@@ -20367,11 +20615,11 @@ ${JSON.stringify({
     }
   }
 
-  var __defProp$z = Object.defineProperty;
-  var __name$z = (target, value) => __defProp$z(target, "name", { value, configurable: true });
+  var __defProp$B = Object.defineProperty;
+  var __name$B = (target, value) => __defProp$B(target, "name", { value, configurable: true });
   class IbanSpecification {
     static {
-      __name$z(this, "IbanSpecification");
+      __name$B(this, "IbanSpecification");
     }
     /**
      * the code of the country
@@ -20537,7 +20785,7 @@ ${JSON.stringify({
   }
   class FormatterIban {
     static {
-      __name$z(this, "FormatterIban");
+      __name$B(this, "FormatterIban");
     }
     static isInternalConstructing = false;
     static instance = null;
@@ -20659,9 +20907,9 @@ ${JSON.stringify({
     // endregion ////
   }
 
-  var __defProp$y = Object.defineProperty;
-  var __name$y = (target, value) => __defProp$y(target, "name", { value, configurable: true });
-  const useFormatter = /* @__PURE__ */ __name$y(() => {
+  var __defProp$A = Object.defineProperty;
+  var __name$A = (target, value) => __defProp$A(target, "name", { value, configurable: true });
+  const useFormatter = /* @__PURE__ */ __name$A(() => {
     const formatterNumber = FormatterNumbers.getInstance();
     const formatterIban = FormatterIban.getInstance();
     formatterIban.addSpecification(
@@ -21106,6 +21354,171 @@ ${JSON.stringify({
     };
   }, "useFormatter");
 
+  var __defProp$z = Object.defineProperty;
+  var __name$z = (target, value) => __defProp$z(target, "name", { value, configurable: true });
+  const FILTER_V3_OPERATORS = ["=", "!=", ">", ">=", "<", "<=", "in", "between"];
+  function condition(field, operator, value) {
+    if (typeof field !== "string" || field.length === 0) {
+      throw new SdkError({
+        code: "JSSDK_FILTER_V3_INVALID_FIELD",
+        description: `FilterV3: field name must be a non-empty string, got ${JSON.stringify(field)}.`,
+        status: 400
+      });
+    }
+    if (!FILTER_V3_OPERATORS.includes(operator)) {
+      throw new SdkError({
+        code: "JSSDK_FILTER_V3_INVALID_OPERATOR",
+        description: `FilterV3: operator "${operator}" is not one of ${FILTER_V3_OPERATORS.join(" ")}.`,
+        status: 400
+      });
+    }
+    return [field, operator, value];
+  }
+  __name$z(condition, "condition");
+  const FilterV3 = Object.freeze({
+    /** `field = value` */
+    eq(field, value) {
+      return condition(field, "=", value);
+    },
+    /** `field != value` */
+    ne(field, value) {
+      return condition(field, "!=", value);
+    },
+    /** `field > value` */
+    gt(field, value) {
+      return condition(field, ">", value);
+    },
+    /** `field >= value` */
+    ge(field, value) {
+      return condition(field, ">=", value);
+    },
+    /** `field < value` */
+    lt(field, value) {
+      return condition(field, "<", value);
+    },
+    /** `field <= value` */
+    le(field, value) {
+      return condition(field, "<=", value);
+    },
+    /** `field in [values]` — `values` must be a non-empty array. */
+    in(field, values) {
+      if (!Array.isArray(values) || values.length === 0) {
+        throw new SdkError({
+          code: "JSSDK_FILTER_V3_INVALID_IN",
+          description: `FilterV3.in("${field}"): value must be a non-empty array.`,
+          status: 400
+        });
+      }
+      return condition(field, "in", values);
+    },
+    /** `field between [from, to]` — inclusive range of exactly two defined operands. */
+    between(field, from, to) {
+      if (from === void 0 || from === null || to === void 0 || to === null) {
+        throw new SdkError({
+          code: "JSSDK_FILTER_V3_INVALID_BETWEEN",
+          description: `FilterV3.between("${field}"): both range operands must be defined (got [${String(from)}, ${String(to)}]).`,
+          status: 400
+        });
+      }
+      return condition(field, "between", [from, to]);
+    },
+    /** Combine nodes with AND (for nesting inside an OR; the top level is already AND). */
+    and(...conditions) {
+      return { logic: "and", conditions };
+    },
+    /** Combine nodes with OR. */
+    or(...conditions) {
+      return { logic: "or", conditions };
+    },
+    /**
+     * Negate a condition or group (wraps it in a NOT). A bare condition is wrapped
+     * in a single-item AND group so the `negative` flag has somewhere to live.
+     * Returns a fresh group (the input's `conditions` array is copied, not shared).
+     */
+    not(node) {
+      if (isGroup(node)) {
+        return { ...node, conditions: [...node.conditions], negative: true };
+      }
+      return { logic: "and", negative: true, conditions: [node] };
+    },
+    /**
+     * Assemble the top-level filter array (its elements are AND-joined) ready to
+     * pass as `params.filter`. Falsy nodes are skipped, so you can inline
+     * conditionals: `F.build(F.eq('a', 1), flag && F.gt('b', 2))`.
+     *
+     * Always wrap with `build` (or an array) even for a single condition —
+     * `params.filter` must be an array, so pass `build(F.eq('a', 1))`, not the bare
+     * `F.eq('a', 1)`. Each surviving node is shape-checked, so a forgotten spread
+     * (`build([F.eq(...)])`) or a hand-rolled malformed triple fails fast here
+     * instead of as an opaque server error.
+     */
+    build(...nodes) {
+      const result = nodes.filter(Boolean);
+      for (const node of result) {
+        assertNode(node);
+      }
+      return result;
+    }
+  });
+  function isGroup(node) {
+    return !Array.isArray(node) && typeof node === "object" && node !== null && "conditions" in node;
+  }
+  __name$z(isGroup, "isGroup");
+  function assertNode(node) {
+    if (isGroup(node)) {
+      return;
+    }
+    const ok = Array.isArray(node) && node.length === 3 && typeof node[0] === "string" && FILTER_V3_OPERATORS.includes(node[1]);
+    if (!ok) {
+      throw new SdkError({
+        code: "JSSDK_FILTER_V3_INVALID_NODE",
+        description: `FilterV3.build: each node must be a [field, operator, value] condition or a group \u2014 got ${JSON.stringify(node)}. Did you forget to spread (build(...nodes)) or build a condition with FilterV3 helpers?`,
+        status: 400
+      });
+    }
+  }
+  __name$z(assertNode, "assertNode");
+
+  var __defProp$y = Object.defineProperty;
+  var __name$y = (target, value) => __defProp$y(target, "name", { value, configurable: true });
+  function assertPath(path, who) {
+    if (typeof path !== "string" || path.length === 0) {
+      throw new SdkError({
+        code: "JSSDK_BATCH_REF_V3_INVALID_PATH",
+        description: `${who}: path must be a non-empty dotted string (e.g. "tasks.id").`,
+        status: 400
+      });
+    }
+  }
+  __name$y(assertPath, "assertPath");
+  const BatchRefV3 = Object.freeze({
+    /**
+     * `{ $ref: path }` — substitute a single value from context, e.g.
+     * `ref('newTask.item.id')`. `add` → id / `update` → bool results are NOT in
+     * context (reference §8); only `item` (get) and `items` (list/tail) are.
+     */
+    ref(path) {
+      assertPath(path, "BatchRefV3.ref");
+      return { $ref: path };
+    },
+    /**
+     * `{ $refArray: path }` — collect one field across the `items[]` of an earlier
+     * list/tail command, e.g. `refArray('tasks.id')`. The path MUST contain a dot
+     * (`alias.field`); the server rejects a dot-less path with INVALIDSELECTEXCEPTION.
+     */
+    refArray(path) {
+      assertPath(path, "BatchRefV3.refArray");
+      if (!path.includes(".")) {
+        throw new SdkError({
+          code: "JSSDK_BATCH_REF_V3_INVALID_REF_ARRAY",
+          description: `BatchRefV3.refArray: path "${path}" must contain a dot ("alias.field") \u2014 the server collects <field> across the alias's items[].`,
+          status: 400
+        });
+      }
+      return { $refArray: path };
+    }
+  });
+
   var __defProp$x = Object.defineProperty;
   var __name$x = (target, value) => __defProp$x(target, "name", { value, configurable: true });
   class AuthHookManager {
@@ -21237,7 +21650,7 @@ ${JSON.stringify({
       try {
         parsedUrl = new URL(url.replace("/rest/api", "/rest"));
       } catch {
-        throw new Error(`Invalid webhook URL format: ${url}`);
+        throw new Error("Invalid webhook URL format");
       }
       if (parsedUrl.protocol !== "https:") {
         throw new Error("Webhook requires HTTPS protocol");
@@ -21255,7 +21668,7 @@ ${JSON.stringify({
       const userIdStr = pathParts[userIdIndex];
       const secret = pathParts[secretIndex];
       if (!/^\d+$/.test(userIdStr)) {
-        throw new Error(`User ID must be numeric in webhook URL, received: ${userIdStr}`);
+        throw new Error("User ID must be numeric in webhook URL");
       }
       const userId = Number.parseInt(userIdStr, 10);
       return new B24Hook(
@@ -21306,6 +21719,9 @@ ${JSON.stringify({
     #appFrame;
     #callbackPromises;
     #callbackSingletone;
+    // origins already warned about (#244) — dedup so a peer spamming postMessage
+    // from a foreign origin can't flood a wired logger sink
+    #rejectedOrigins = /* @__PURE__ */ new Set();
     _logger;
     runCallbackHandler;
     constructor(appFrame) {
@@ -21385,7 +21801,8 @@ ${JSON.stringify({
           cmd += ":" + listParams.filter(Boolean).join(":");
         }
         this.getLogger().debug(`send to ${this.#appFrame.getTargetOrigin()}`, {
-          cmd,
+          command: command.toString(),
+          callbackKey: keyPromise,
           origin: this.#appFrame.getTargetOrigin()
         });
         parent.postMessage(cmd, this.#appFrame.getTargetOrigin());
@@ -21415,18 +21832,25 @@ ${JSON.stringify({
      */
     _runCallback(event) {
       if (event.origin !== this.#appFrame.getTargetOrigin()) {
+        if (!this.#rejectedOrigins.has(event.origin)) {
+          this.#rejectedOrigins.add(event.origin);
+          this.getLogger().warning("message rejected: unexpected origin", {
+            origin: event.origin,
+            expected: this.#appFrame.getTargetOrigin()
+          });
+        }
         return;
       }
       if (event.data) {
-        this.getLogger().debug(`get from ${event.origin}`, {
-          data: event.data,
-          origin: event.origin
-        });
         const tmp = event.data.split(":");
         const cmd = {
           id: tmp[0],
           args: tmp.slice(1).join(":")
         };
+        this.getLogger().debug(`get from ${event.origin}`, {
+          id: cmd.id,
+          origin: event.origin
+        });
         if (cmd.args) {
           cmd.args = JSON.parse(cmd.args);
         }
@@ -22443,7 +22867,13 @@ ${JSON.stringify({
     }
     async init() {
       const data = await this.#messageManager.send(MessageCommands.getInitData, {});
-      this.getLogger().debug("init data", { data });
+      this.getLogger().debug("init data", {
+        PLACEMENT: data.PLACEMENT,
+        LANG: data.LANG,
+        INSTALL: data.INSTALL,
+        IS_ADMIN: data.IS_ADMIN,
+        FIRST_RUN: data.FIRST_RUN
+      });
       this.#appFrame.initData(data);
       this.#authManager.initData(data);
       this.#placementManager.initData(data);
@@ -22540,7 +22970,7 @@ ${JSON.stringify({
     #b24Target;
     #b24TargetRestWithPath;
     #oAuthTarget;
-    // 'https://oauth.bitrix.info'
+    // from serverEndpoint, e.g. 'https://oauth.bitrix24.tech'
     #isAdmin = null;
     constructor(b24OAuthParams, oAuthSecret) {
       this.#authOptions = Object.assign({}, b24OAuthParams);
@@ -22552,10 +22982,7 @@ ${JSON.stringify({
       this.#authExpires = this.#authOptions.expires * 1e3;
       this.#authExpiresIn = this.#authOptions.expiresIn;
       this.#clientAxios = axios.create({
-        baseURL: this.#oAuthTarget,
-        headers: {
-          "Content-Type": "application/json"
-        }
+        baseURL: this.#oAuthTarget
       });
       this.#b24TargetRestWithPath = /* @__PURE__ */ new Map();
       this.#b24TargetRestWithPath.set(ApiVersion.v2, `${this.#b24TargetRest}`);
@@ -22585,16 +23012,16 @@ ${JSON.stringify({
         if (this.#customRefreshAuth) {
           payload = await this.#customRefreshAuth();
         } else {
-          const response = await this.#clientAxios.get(
+          const body = new URLSearchParams({
+            grant_type: "refresh_token",
+            client_id: this.#oAuthSecret.clientId,
+            client_secret: this.#oAuthSecret.clientSecret,
+            refresh_token: this.#authOptions.refreshToken
+          });
+          const response = await this.#clientAxios.post(
             "/oauth/token/",
-            {
-              params: {
-                grant_type: "refresh_token",
-                client_id: this.#oAuthSecret.clientId,
-                client_secret: this.#oAuthSecret.clientSecret,
-                refresh_token: this.#authOptions.refreshToken
-              }
-            }
+            body,
+            { headers: { "Content-Type": "application/x-www-form-urlencoded" } }
           );
           if (response.data.error) {
             throw new Error(`Token update error: ${response.data.error}`);
@@ -22652,7 +23079,7 @@ ${JSON.stringify({
         }
         throw new Error(
           `Strange error: ${error instanceof Error ? error.message : error}`,
-          { cause: error }
+          { cause: error instanceof Error ? error : void 0 }
         );
       }
     }
@@ -23529,7 +23956,7 @@ ${JSON.stringify({
         }
         return;
       }
-      this.getLogger().error(`${Text.getDateForLog()}: Pull: Received rpc response with unknown id`, { response });
+      this.getLogger().error(`${Text.getDateForLog()}: Pull: Received rpc response with unknown id`, redactSensitiveParams({ response }));
     }
     parseJsonRpcMessage(message) {
       let decoded;
@@ -23552,7 +23979,7 @@ ${JSON.stringify({
       } else {
         this.getLogger().error(
           `${Text.getDateForLog()}: Pull: unknown rpc packet`,
-          { decoded }
+          redactSensitiveParams({ decoded })
         );
       }
       return [];
@@ -23593,7 +24020,7 @@ ${JSON.stringify({
         } else {
           this.getLogger().error(
             `${Text.getDateForLog()}: Pull: unknown rpc command in batch`,
-            { command }
+            redactSensitiveParams({ command })
           );
           result.push({
             jsonrpc: JSON_RPC_VERSION,
@@ -29930,9 +30357,15 @@ ${JSON.stringify({
     _pingWaitTimeout = null;
     // manual stop workaround ////
     _isManualDisconnect = false;
+    // set once destroy() has run; gates reconnect / watch / online so a torn-down
+    // client never schedules new work (#141) ////
+    _disposed = false;
     _loggingEnabled = false;
-    // bound event handlers ////
+    // bound event handlers, stored so they can be removed in destroy() (#141) ////
     _onPingTimeoutHandler;
+    _onBeforeUnloadHandler;
+    _onOfflineHandler;
+    _onOnlineHandler;
     // [userId] => array of callbacks
     _userStatusCallbacks = {};
     _connectPromise = null;
@@ -29993,6 +30426,9 @@ ${JSON.stringify({
       });
       this._loggingEnabled = this._sharedConfig.isLoggingEnabled();
       this._onPingTimeoutHandler = this.onPingTimeout.bind(this);
+      this._onBeforeUnloadHandler = this.onBeforeUnload.bind(this);
+      this._onOfflineHandler = this.onOffline.bind(this);
+      this._onOnlineHandler = this.onOnline.bind(this);
     }
     setLogger(logger) {
       this._logger = logger;
@@ -30006,11 +30442,29 @@ ${JSON.stringify({
     getLogger() {
       return this._logger;
     }
+    /**
+     * Terminal teardown: removes the window listeners, cancels every pending timer,
+     * persists the session for a quick re-init, and disconnects. Irreversible — a
+     * destroyed client schedules no further work and `start()` rejects with
+     * `PULL_DISPOSED`; create a new instance to reconnect.
+     */
     destroy() {
+      this._disposed = true;
       this.stop(CloseReasons.NORMAL_CLOSURE, "manual stop");
-      this.onBeforeUnload();
+      if (typeof window !== "undefined") {
+        window.removeEventListener("beforeunload", this._onBeforeUnloadHandler);
+        window.removeEventListener("offline", this._onOfflineHandler);
+        window.removeEventListener("online", this._onOnlineHandler);
+      }
+      if (this._storage) {
+        this._storage.remove(LsKeys.PullConfig);
+      }
+      this.persistSession();
     }
     init() {
+      if (this._disposed) {
+        return;
+      }
       this._connectors.webSocket = new WebSocketConnector({
         parent: this,
         onOpen: this.onWebSocketOpen.bind(this),
@@ -30026,9 +30480,11 @@ ${JSON.stringify({
         onError: this.onLongPollingError.bind(this)
       });
       this._connectionType = this.isWebSocketAllowed() ? ConnectionType.WebSocket : ConnectionType.LongPolling;
-      window.addEventListener("beforeunload", this.onBeforeUnload.bind(this));
-      window.addEventListener("offline", this.onOffline.bind(this));
-      window.addEventListener("online", this.onOnline.bind(this));
+      if (typeof window !== "undefined") {
+        window.addEventListener("beforeunload", this._onBeforeUnloadHandler);
+        window.addEventListener("offline", this._onOfflineHandler);
+        window.addEventListener("online", this._onOnlineHandler);
+      }
       this._jsonRpcAdapter = new JsonRpc({
         connector: this._connectors.webSocket,
         handlers: {
@@ -30180,7 +30636,8 @@ ${JSON.stringify({
             if (this._debug && this._context !== "master") {
               this.getLogger().warning(
                 `${Text.getDateForLog()}: Pull.attachCommandHandler: result of handler.getModuleId() is not a string`,
-                { data }
+                // data.params / data.extra are app-defined and may carry a credential key (#43)
+                redactSensitiveParams({ data })
               );
             }
             method(data.params, data.extra, data.command);
@@ -30189,9 +30646,21 @@ ${JSON.stringify({
       });
     }
     /**
+     * Connects the client and begins receiving events.
+     *
      * @param config
+     * @throws Rejects with `{ ex: { error: 'PULL_DISPOSED' } }` when called after
+     *   `destroy()` — a destroyed client cannot be restarted; create a new instance.
      */
     async start(config = null) {
+      if (this._disposed) {
+        return Promise.reject({
+          ex: {
+            error: "PULL_DISPOSED",
+            error_description: "PullClient has been destroyed; create a new instance"
+          }
+        });
+      }
       let allowConfigCaching = true;
       if (this.isConnected()) {
         return Promise.resolve(true);
@@ -30258,6 +30727,9 @@ ${JSON.stringify({
      * @param disconnectReason
      */
     restart(disconnectCode = CloseReasons.NORMAL_CLOSURE, disconnectReason = "manual restart") {
+      if (this._disposed) {
+        return;
+      }
       if (this._restartTimeout) {
         clearTimeout(this._restartTimeout);
         this._restartTimeout = null;
@@ -30300,6 +30772,34 @@ ${JSON.stringify({
     stop(disconnectCode = CloseReasons.NORMAL_CLOSURE, disconnectReason = "manual stop") {
       this.disconnect(disconnectCode, disconnectReason);
       this.stopCheckConfig();
+      this.clearAllTimers();
+    }
+    // Cancel every pending timer so a stopped/destroyed client leaves nothing
+    // running. Previously only _checkInterval was cleared, so the other six timers
+    // (including the self-rescheduling watch-extend) survived teardown (#141).
+    clearAllTimers() {
+      for (const timer of [
+        this._reconnectTimeout,
+        this._restartTimeout,
+        this._restoreWebSocketTimeout,
+        this._offlineTimeout,
+        this._watchUpdateTimeout,
+        this._pingWaitTimeout
+      ]) {
+        if (timer) {
+          clearTimeout(timer);
+        }
+      }
+      if (this._checkInterval) {
+        clearInterval(this._checkInterval);
+      }
+      this._reconnectTimeout = null;
+      this._restartTimeout = null;
+      this._restoreWebSocketTimeout = null;
+      this._offlineTimeout = null;
+      this._watchUpdateTimeout = null;
+      this._pingWaitTimeout = null;
+      this._checkInterval = null;
     }
     reconnect(disconnectCode, disconnectReason, delay = 1) {
       this.disconnect(disconnectCode, disconnectReason);
@@ -30518,7 +31018,10 @@ ${JSON.stringify({
       let configDump;
       if (this._config && this._config.channels) {
         configDump = {
-          ChannelID: this._config.channels.private?.id || "n/a",
+          // The private channel id is a subscription secret — mask it here too, not
+          // just in `Path` below, so the debug dump never surfaces it (#148). Expiry
+          // timestamps are non-sensitive and kept for diagnostics.
+          ChannelID: this._config.channels.private?.id ? REDACTED_PLACEHOLDER : "n/a",
           ChannelDie: this._config.channels.private?.end || "n/a",
           ChannelDieShared: this._config.channels.shared?.end || "n/a"
         };
@@ -30535,6 +31038,7 @@ ${JSON.stringify({
           websocketMode = this._connectors.webSocket?.socket?.url.search("binaryMode=true") != -1 ? "protobuf" : "text";
         }
       }
+      const connectionPath = this.connector?.connectionPath;
       return {
         "UserId": this._userId + (this._userId > 0 ? "" : "(guest)"),
         "Guest userId": this._guestMode && this._guestUserId !== 0 ? this._guestUserId : "-",
@@ -30546,7 +31050,9 @@ ${JSON.stringify({
         "WebSocket mode": websocketMode,
         "Try connect": this._reconnectTimeout ? "Y" : "N",
         "Try number": this._connectionAttempt,
-        "Path": this.connector?.connectionPath || "-",
+        // Mask the push JWT (`token`) and private `CHANNEL_ID`s before exposing
+        // the connection path through this developer-facing debug dump (#148).
+        "Path": connectionPath ? redactSensitiveUrl(connectionPath, ["CHANNEL_ID"]) : "-",
         ...configDump,
         "Last message": this._session.mid || "-",
         "Session history": this._session.history,
@@ -30577,13 +31083,10 @@ ${JSON.stringify({
         params["token"] = this._config?.jwt;
       } else {
         const channels = [];
-        if (this._config?.channels?.private) {
-          channels.push(this._config.channels.private?.id || "");
-        }
-        if (this._config?.channels.private?.id) {
+        if (this._config?.channels?.private?.id) {
           channels.push(this._config.channels.private.id);
         }
-        if (this._config?.channels.shared?.id) {
+        if (this._config?.channels?.shared?.id) {
           channels.push(this._config.channels.shared.id);
         }
         if (channels.length === 0) {
@@ -30832,7 +31335,8 @@ ${JSON.stringify({
         this.getLogger().warning("PULL ERROR", {
           errorType: "broadcastMessages execute error",
           errorEvent: error,
-          message
+          // app-defined message.params / extra may carry a credential key (#43)
+          message: redactSensitiveParams(message)
         });
       }
       if (message.extra && message.extra.revision_web) {
@@ -31062,6 +31566,9 @@ ${JSON.stringify({
       return true;
     }
     startCheckConfig() {
+      if (this._disposed) {
+        return;
+      }
       if (this._checkInterval) {
         clearInterval(this._checkInterval);
         this._checkInterval = null;
@@ -31102,7 +31609,7 @@ ${JSON.stringify({
         this.setPublicIds(Object.values(config.publicChannels));
       }
       this._configTimestamp = Number(config.server.config_timestamp);
-      if (this._storage && allowCaching) {
+      if (this._storage && allowCaching && !this._disposed) {
         try {
           this._storage.set(LsKeys.PullConfig, config);
         } catch (error) {
@@ -31163,7 +31670,7 @@ ${JSON.stringify({
      * @param connectionDelay
      */
     scheduleReconnect(connectionDelay = 0) {
-      if (!this._enabled) {
+      if (this._disposed || !this._enabled) {
         return;
       }
       if (!connectionDelay) {
@@ -31187,6 +31694,9 @@ ${JSON.stringify({
       }, connectionDelay * 1e3);
     }
     scheduleRestoreWebSocketConnection() {
+      if (this._disposed) {
+        return;
+      }
       this.logToConsole(
         `Pull: scheduling restoration of websocket connection in ${RESTORE_WEBSOCKET_TIMEOUT} seconds`
       );
@@ -31202,7 +31712,7 @@ ${JSON.stringify({
      * @returns {Promise}
      */
     async connect() {
-      if (!this._enabled) {
+      if (this._disposed || !this._enabled) {
         return Promise.reject();
       }
       if (this.connector?.connected) {
@@ -31228,6 +31738,9 @@ ${JSON.stringify({
      * @param restartDelay
      */
     scheduleRestart(disconnectCode, disconnectReason, restartDelay = 0) {
+      if (this._disposed) {
+        return;
+      }
       if (this._restartTimeout) {
         clearTimeout(this._restartTimeout);
         this._restartTimeout = null;
@@ -31310,13 +31823,13 @@ ${JSON.stringify({
             if (typeChanel === "private" && this._config?.channels?.private) {
               this._config.channels.private = message.params.new_channel;
               this.logToConsole(
-                `Pull: new config for ${message.params.channel.type} channel set: ${this._config.channels.private}`
+                `Pull: new config for ${message.params.channel.type} channel set: [updated]`
               );
             }
             if (typeChanel === "shared" && this._config?.channels?.shared) {
               this._config.channels.shared = message.params.new_channel;
               this.logToConsole(
-                `Pull: new config for ${message.params.channel.type} channel set: ${this._config.channels.shared}`
+                `Pull: new config for ${message.params.channel.type} channel set: [updated]`
               );
             }
             this.reconnect(CloseReasons.CONFIG_REPLACED, "config was replaced");
@@ -31573,7 +32086,10 @@ ${JSON.stringify({
       if (dataArray === null) {
         this.getLogger().warning("PULL ERROR", {
           errorType: "parseResponse error parsing message",
-          dataString: pullEvent
+          // The frame failed the NGINX-delimiter match, so its content is
+          // unparseable anyway and could carry a credential (e.g. a channel
+          // `signature`); log only its size, never the bytes (#43).
+          byteLength: pullEvent.length
         });
         return [];
       }
@@ -31626,15 +32142,28 @@ ${JSON.stringify({
     // endregion ////
     // region Events.Status /////
     onOffline() {
+      if (this._disposed) {
+        return;
+      }
       this.disconnect(CloseReasons.NORMAL_CLOSURE, "offline");
     }
     onOnline() {
+      if (this._disposed) {
+        return;
+      }
       this.connect().catch((error) => {
         this.getLogger().error("onOnline", { error });
       });
     }
     onBeforeUnload() {
       this._unloading = true;
+      this.persistSession();
+      this.scheduleReconnect(15);
+    }
+    // Persist the current session (with a short TTL) so a quick reload / re-init can
+    // resume it. Shared by onBeforeUnload and destroy() — destroy() saves WITHOUT
+    // scheduling a reconnect (#141).
+    persistSession() {
       const session = Type.clone(this.session);
       session.ttl = Date.now() + LS_SESSION_CACHE_TIME * 1e3;
       if (this._storage) {
@@ -31651,7 +32180,6 @@ ${JSON.stringify({
           );
         }
       }
-      this.scheduleReconnect(15);
     }
     // endregion ////
     // region PullStatus ////
@@ -31660,6 +32188,9 @@ ${JSON.stringify({
      * @param delay
      */
     sendPullStatusDelayed(status, delay) {
+      if (this._disposed) {
+        return;
+      }
       if (this._offlineTimeout) {
         clearTimeout(this._offlineTimeout);
         this._offlineTimeout = null;
@@ -31705,6 +32236,9 @@ ${JSON.stringify({
      * @param force
      */
     updateWatch(force = false) {
+      if (this._disposed) {
+        return;
+      }
       if (this._watchUpdateTimeout) {
         clearTimeout(this._watchUpdateTimeout);
         this._watchUpdateTimeout = null;
@@ -31745,6 +32279,9 @@ ${JSON.stringify({
       this.connector?.send(JSON_RPC_PONG);
     }
     updatePingWaitTimeout() {
+      if (this._disposed) {
+        return;
+      }
       if (this._pingWaitTimeout) {
         clearTimeout(this._pingWaitTimeout);
         this._pingWaitTimeout = null;
@@ -31762,7 +32299,7 @@ ${JSON.stringify({
     }
     onPingTimeout() {
       this._pingWaitTimeout = null;
-      if (!this._enabled || !this.isConnected()) {
+      if (this._disposed || !this._enabled || !this.isConnected()) {
         return;
       }
       this.getLogger().warning(`No pings are received in ${PING_TIMEOUT * 2} seconds. Reconnecting`);
@@ -31823,30 +32360,30 @@ ${JSON.stringify({
       if (message.extra?.sender && message.extra.sender.type === SenderType.Client) {
         this.getLogger().info(
           `onPullClientEvent-${message.module_id}`,
-          {
+          redactSensitiveParams({
             command: message.command,
             params: message.params,
             extra: message.extra
-          }
+          })
         );
       } else if (message.module_id == "online") {
         this.getLogger().info(
           `onPullOnlineEvent`,
-          {
+          redactSensitiveParams({
             command: message.command,
             params: message.params,
             extra: message.extra
-          }
+          })
         );
       } else {
         this.getLogger().info(
           `onPullEvent`,
-          {
+          redactSensitiveParams({
             moduleId: message.module_id,
             command: message.command,
             params: message.params,
             extra: message.extra
-          }
+          })
         );
       }
     }
@@ -32437,6 +32974,7 @@ ${JSON.stringify({
   exports.B24LocaleMap = B24LocaleMap;
   exports.B24OAuth = B24OAuth;
   exports.B24PullClientManager = PullClient;
+  exports.BatchRefV3 = BatchRefV3;
   exports.Browser = Browser;
   exports.CatalogProductImageType = CatalogProductImageType;
   exports.CatalogProductType = CatalogProductType;
@@ -32456,6 +32994,7 @@ ${JSON.stringify({
   exports.EnumCrmEntityTypeId = EnumCrmEntityTypeId;
   exports.EnumCrmEntityTypeShort = EnumCrmEntityTypeShort;
   exports.Environment = Environment;
+  exports.FilterV3 = FilterV3;
   exports.HttpV2 = HttpV2;
   exports.HttpV3 = HttpV3;
   exports.JsonFormatter = JsonFormatter;