@wirecat/bitrix24-cli 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+Notable changes to `@wirecat/bitrix24-cli`. One section per version, newest first.
+
+## 0.1.0 — 06.11.2026
+
+### Fixed
+
+- An error reason that a newer cli-core also defines no longer makes every failing command crash instead of printing
+  its error.
+
+### Added
+
+- Started from `@wirecat/cli-template` 0.14.0.
+- The client for Bitrix24's REST API over an incoming webhook: REST 3.0 for deals, leads, contacts and companies,
+  REST 2 for the rest; the portal's rate limits paced and waited out; a write repeated only with an
+  `Idempotency-Key`; the webhook's secret kept out of every error and run record.
+- `session start | status | end` per profile and `session list`: the webhook address read hidden or from stdin,
+  checked against the portal, kept in the keyring under `bitrix24-cli`; `session status --check` says whose rights
+  the webhook carries.
+- `list` and `show` for `deals`, `leads`, `people` (contacts), `organizations` (companies), `pipelines`, `stages`
+  (with each stage's outcome), `products` and `users`, live from the portal. A list takes a query that becomes the
+  portal's own filter; a free word in it matches part of a title or name. A name two records share is refused with
+  both as candidates.
+- `create` and `update` for `deals`, `leads`, `people` and `organizations`, and `move` for deals and leads: each
+  write answers its `operation_id`, which Bitrix24 receives as the `Idempotency-Key`, so `--operation-id` repeats a
+  write safely; `--dry-run` previews; assigning a record to another employee is denied until allowed
+  (`crm.assign-others`).
+- `api list`, `api show <method>` and `api call <method> --body <json>`: any Bitrix24 method, on the REST version it
+  lives on, checking `api.<method>` and the command key it does the same as; messaging, automation, tasks and
+  `batch` writes are denied until allowed.

package/LICENSE

@@ -0,0 +1,204 @@
+Copyright (c) 2026 Viacheslav Ptsarev
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,18 @@
-# Temporary Holding Version
+# b24
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+`b24` reads and changes a Bitrix24 portal's sales data from the terminal, from scripts and from AI agents: deals,
+leads, contacts, companies, pipelines and their stages, products and employees. It signs in with one of the portal's
+incoming webhooks and acts with the rights of the employee who made it.
+
+```sh
+npm install -g @wirecat/bitrix24-cli
+b24 work session start            # paste the webhook address; it is kept in the keyring
+b24 work deals list outcome:open
+b24 work leads list updated_at>=7d --json
+b24 work deals move 42 --stage "Contract signed"
+```
+
+Every command answers JSON with `--json`, every write answers an `operation_id` and can be previewed with
+`--dry-run`, and `b24 work mcp serve` gives the same commands to an agent. Start with
+[installation](docs/installation.md), then [usage](docs/usage.md). The design is in
+[docs/dev/DESIGN.md](docs/dev/DESIGN.md).

package/dist/api-keys.d.ts

@@ -0,0 +1,21 @@
+import type { Level } from "@wirecat/cli-core/sends";
+import { type Effect } from "./bitrix/methods.js";
+export declare const apiKey: (method: string) => string;
+/**
+ * Families whose writes reach people or start the portal's own automation: messages and notifications (im,
+ * imopenlines, imbot; read-only for now, NEED-2278 A), SMS and mail services, telephony, workflows, CRM activities
+ * (an e-mail activity sends the mail), tasks (the assignee is told), invitations (`user.add` mails one), and `batch`,
+ * which can hold any of them. Denied until the owner allows them.
+ */
+export declare const DENIED_FAMILIES: string[];
+/** A method's default, as WC-PERM-22 has it: a read and an ordinary change allowed, a delete asked. */
+export declare const apiDefault: (method: string, effect?: Effect) => Level;
+/**
+ * The command key a raw call does the same as, so `api call crm.deal.update` cannot get round `deals.update: deny`
+ * (gcal-cli's `WRITE_METHODS`). An update that sets a stage is a move too.
+ */
+export declare const commandKeysOf: (method: string, body?: Record<string, unknown>) => string[];
+/** The keys `permissions` may name for `api`: the known methods and the denied families. */
+export declare const API_KEYS: string[];
+export declare const API_DEFAULTS: Record<string, Level>;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,KAAK,MAAM,EAA2B,MAAM,qBAAqB,CAAA;AAE1E,eAAO,MAAM,MAAM,WAAY,MAAM,KAAG,MAAyB,CAAA;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,UAe3B,CAAA;AAKD,uGAAuG;AACvG,eAAO,MAAM,UAAU,WAAY,MAAM,WAAU,MAAM,KAA6B,KAGrF,CAAA;AAKD;;;GAGG;AACH,eAAO,MAAM,aAAa,WAAY,MAAM,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAQ,MAAM,EASxF,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,QAAQ,UAAoF,CAAA;AAEzG,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAQ9C,CAAA"}

package/dist/api-keys.js

@@ -0,0 +1,58 @@
+import { KNOWN_METHODS, methodOf } from "./bitrix/methods.js";
+export const apiKey = (method) => `api.${method}`;
+/**
+ * Families whose writes reach people or start the portal's own automation: messages and notifications (im,
+ * imopenlines, imbot; read-only for now, NEED-2278 A), SMS and mail services, telephony, workflows, CRM activities
+ * (an e-mail activity sends the mail), tasks (the assignee is told), invitations (`user.add` mails one), and `batch`,
+ * which can hold any of them. Denied until the owner allows them.
+ */
+export const DENIED_FAMILIES = [
+    "im",
+    "imopenlines",
+    "imbot",
+    "messageservice",
+    "mailservice",
+    "telephony",
+    "voximplant",
+    "bizproc",
+    "crm.automation",
+    "crm.activity",
+    "tasks",
+    "task",
+    "user.add",
+    "batch",
+];
+const deniedFamily = (method) => DENIED_FAMILIES.some((family) => method === family || method.startsWith(`${family}.`));
+/** A method's default, as WC-PERM-22 has it: a read and an ordinary change allowed, a delete asked. */
+export const apiDefault = (method, effect = methodOf(method).effect) => {
+    if (effect !== "read" && deniedFamily(method))
+        return "deny";
+    return effect === "destructive" ? "ask" : "allow";
+};
+const NOUNS = { deal: "deals", lead: "leads", contact: "people", company: "organizations" };
+const ACTIONS = { add: "create", update: "update", delete: "delete" };
+/**
+ * The command key a raw call does the same as, so `api call crm.deal.update` cannot get round `deals.update: deny`
+ * (gcal-cli's `WRITE_METHODS`). An update that sets a stage is a move too.
+ */
+export const commandKeysOf = (method, body = {}) => {
+    const [, type, action] = /^crm\.(deal|lead|contact|company)\.(add|update|delete)$/.exec(method) ?? [];
+    if (!type || !action)
+        return [];
+    const noun = NOUNS[type];
+    const keys = [`${noun}.${ACTIONS[action]}`];
+    const fields = (body.fields ?? {});
+    if (action === "update" && fields.stageId !== undefined && (type === "deal" || type === "lead"))
+        keys.push(`${noun}.move`);
+    return keys;
+};
+/** The keys `permissions` may name for `api`: the known methods and the denied families. */
+export const API_KEYS = [...KNOWN_METHODS.map((one) => apiKey(one.name)), ...DENIED_FAMILIES.map(apiKey)];
+export const API_DEFAULTS = {
+    ...Object.fromEntries(KNOWN_METHODS.filter((one) => apiDefault(one.name, one.effect) !== "allow").map((one) => [
+        apiKey(one.name),
+        apiDefault(one.name, one.effect),
+    ])),
+    ...Object.fromEntries(DENIED_FAMILIES.map((family) => [apiKey(family), "deny"])),
+};
+//# sourceMappingURL=api-keys.js.map

package/dist/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,aAAa,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE1E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,OAAO,MAAM,EAAE,CAAA;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI;IACJ,aAAa;IACb,OAAO;IACP,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,OAAO;IACP,MAAM;IACN,UAAU;IACV,OAAO;CACR,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,EAAE,CACtC,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAA;AAExF,uGAAuG;AACvG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,MAAM,GAAW,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAS,EAAE;IAC5F,IAAI,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5D,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AACnD,CAAC,CAAA;AAED,MAAM,KAAK,GAA2B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;AACnH,MAAM,OAAO,GAA2B,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAE7F;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,IAAI,GAA4B,EAAE,EAAY,EAAE;IAC5F,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,yDAAyD,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACrG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAA;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IAC3B,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AAEzG,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,GAAG,MAAM,CAAC,WAAW,CACnB,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACvF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAChB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;KACjC,CAAC,CACH;IACD,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAe,CAAC,CAAC,CAAC;CAC1F,CAAA"}

package/dist/bin/b24.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=b24.d.ts.map

package/dist/bin/b24.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"b24.d.ts","sourceRoot":"","sources":["../../src/bin/b24.ts"],"names":[],"mappings":""}

package/dist/bin/b24.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+// cli-dev bundle loader
+import * as module from "node:module"
+
+const words = process.argv.slice(2)
+// As the CLI answers it, unless a test records the argv: then the CLI writes the record too.
+if (
+  words.length === 1 &&
+  (words[0] === "--version" || words[0] === "-V") &&
+  !Object.keys(process.env).some((key) => key.endsWith("_TEST_ARGV_LOG"))
+) {
+  process.stdout.write("0.1.0\n")
+} else {
+  // Before the bundle compiles: the bundle's own call comes after its chunks.
+  module.enableCompileCache()
+  const serves = ((words) => {
+    const plain = words.filter((word) => !word.startsWith("-"));
+    return plain
+        .slice(0, 4)
+        .some((word, at) => word === "serve" || word === "watch" || (word === "mcp" && plain[at + 1] === undefined));
+})(words)
+  if (serves && module.registerHooks) {
+    const bundle = new URL("../bundle/", import.meta.url).href
+    module.registerHooks({
+      resolve: (specifier, context, next) =>
+        specifier.startsWith("./") && context.parentURL?.startsWith(bundle)
+          ? { url: new URL(specifier, context.parentURL).href, format: "module", shortCircuit: true }
+          : next(specifier, context),
+    })
+  }
+  const chunks = ["../bundle/all-profiles-QJ444GSX.js","../bundle/anthropic-RHRAVHC2.js","../bundle/app-server-QIT6S7AZ.js","../bundle/bun-H6RSODZ3.js","../bundle/bun-sqlite-BO4LTQHX.js","../bundle/decode-5ZPLTYV6.js","../bundle/dist-PII6Z6X3.js","../bundle/echarts-J6LAPIX7.js","../bundle/embed-YG5LDHME.js","../bundle/embedder-7FNUA5OZ.js","../bundle/first-screen-VQM4MTS7.js","../bundle/instructions-AXWTQHMR.js","../bundle/mcp-7F46P6AM.js","../bundle/mcp-J5R5A65I.js","../bundle/mcp-WALJM6QX.js","../bundle/node-CWKAIOEM.js","../bundle/node-P4E63KXA.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-LSEKVRDA.js","../bundle/oauth-THYNLRLD.js","../bundle/open-E47QYKFC.js","../bundle/openai-EWSGC3BC.js","../bundle/process-WKTEA3WE.js","../bundle/program-GO3RVP2H.js","../bundle/prompt-CAQ7QR3U.js","../bundle/recognize-6KGHNZC3.js","../bundle/remote-3UO2WDC3.js","../bundle/rerank-2JVDPZBX.js","../bundle/serve-ES7AG5IK.js","../bundle/server-5LE5LNUQ.js","../bundle/server-BU4VBM6S.js","../bundle/state-7NH5G4XJ.js","../bundle/store-7O4JQD2Z.js","../bundle/store-maintenance-command-UDVGEY2D.js"]
+  if (((words) => words
+    .filter((word) => !word.startsWith("-"))
+    .slice(0, 2)
+    .includes("upgrade"))(words)) await Promise.allSettled(chunks.map((chunk) => import(chunk)))
+  const running = import("../bundle/b24.js")
+  // After the server answers its first request, so it starts no later.
+  if (serves) setTimeout(() => void Promise.allSettled(chunks.map((chunk) => import(chunk))), 2000).unref()
+  await running
+}

package/dist/bin/b24.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"b24.js","sourceRoot":"","sources":["../../src/bin/b24.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,kBAAkB,EAAE,CAAA;AACpB,MAAM,YAAY,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,CAAA;AACxG,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;AAC7C,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC;QAAS,CAAC;IACT,YAAY,EAAE,CAAA;AAChB,CAAC"}

package/dist/bitrix/errors.d.ts

@@ -0,0 +1,22 @@
+import { CliError } from "@wirecat/cli-base";
+/** REST 2: `{ error, error_description }`, where `error` may be empty; REST 3.0: `{ error: { code, message, validation } }`. */
+export interface BitrixFailure {
+    error?: string | {
+        code?: unknown;
+        message?: unknown;
+        validation?: unknown;
+    };
+    error_description?: unknown;
+    time?: {
+        operating_reset_at?: unknown;
+    };
+}
+/**
+ * Bitrix24's refusal as one of the stable codes a script branches on. The message names the method and Bitrix24's
+ * code, never its description.
+ */
+export declare const bitrixError: (method: string, status: number, body: BitrixFailure | undefined, { now, waitMs }?: {
+    now?: number;
+    waitMs?: number | undefined;
+}) => CliError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/bitrix/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/bitrix/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,mBAAmB,CAAA;AAalF,gIAAgI;AAChI,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;IAC5E,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACxC;AA2BD;;;GAGG;AACH,eAAO,MAAM,WAAW,WACd,MAAM,UACN,MAAM,QACR,aAAa,GAAG,SAAS,oBACD;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,KAC1E,QAqDF,CAAA"}

package/dist/bitrix/errors.js

@@ -0,0 +1,76 @@
+import { CliError } from "@wirecat/cli-base";
+import { retryableStatus, statusToCode } from "@wirecat/cli-base/http";
+/** The 503 refusal of a portal over its 2 requests a second (apidocs "REST API limits"). */
+const QUERY_LIMIT_WAIT_MS = 1_000;
+/** A 429 without `operating_reset_at`: the operating limit is counted over ten one-minute baskets. */
+const OPERATING_WAIT_MS = 60_000;
+const SIGN_IN = new Set(["NO_AUTH_FOUND", "INVALID_CREDENTIALS", "EXPIRED_TOKEN", "INVALID_TOKEN", "WRONG_AUTH_TYPE"]);
+const SCOPE = new Set(["INSUFFICIENT_SCOPE", "BITRIX_REST_V3_EXCEPTION_INSUFFICIENTSCOPEEXCEPTION"]);
+const DENIED = new Set(["ACCESS_DENIED", "USER_ACCESS_ERROR", "BITRIX_REST_V3_EXCEPTION_ACCESSDENIEDEXCEPTION"]);
+const NOT_FOUND = new Set(["NOT_FOUND", "BITRIX_REST_V3_EXCEPTION_ENTITYNOTFOUNDEXCEPTION"]);
+const CODE = /^[A-Za-z0-9_]{1,128}$/;
+/** Only a code-shaped name: a description can quote a field's value, which is somebody's data (WC-SECR-6). */
+const codeOf = (body) => {
+    const raw = typeof body?.error === "object" && body.error !== null ? body.error.code : body?.error;
+    if (typeof raw === "string" && CODE.test(raw))
+        return raw.toUpperCase();
+    // REST 2 answers a missing record with an empty code and "Not found".
+    if (raw === "" && typeof body?.error_description === "string" && /^not found$/i.test(body.error_description.trim()))
+        return "NOT_FOUND";
+    return undefined;
+};
+const fieldsOf = (body) => {
+    const validation = typeof body?.error === "object" && body.error !== null ? body.error.validation : undefined;
+    if (!Array.isArray(validation))
+        return [];
+    return validation
+        .map((one) => one?.field)
+        .filter((field) => typeof field === "string" && CODE.test(field.replace(/\./g, "_")));
+};
+const operatingWaitMs = (body, now) => {
+    const reset = Number(body?.time?.operating_reset_at);
+    return Number.isFinite(reset) && reset * 1000 > now ? reset * 1000 - now : OPERATING_WAIT_MS;
+};
+/**
+ * Bitrix24's refusal as one of the stable codes a script branches on. The message names the method and Bitrix24's
+ * code, never its description.
+ */
+export const bitrixError = (method, status, body, { now = Date.now(), waitMs } = {}) => {
+    const code = codeOf(body);
+    const details = { operation: method, status, ...(code ? { provider_error: code } : {}) };
+    const named = code ? ` (${code})` : "";
+    const as = (errorCode, message, more = {}) => new CliError(errorCode, message, { ...details, ...more });
+    if (code === "QUERY_LIMIT_EXCEEDED")
+        return as("rate_limited", `Bitrix24 asks to slow down before ${method}: the portal's request limit is reached`, {
+            retry_after_ms: waitMs ?? QUERY_LIMIT_WAIT_MS,
+            retryable: true,
+        });
+    if (code === "OPERATION_TIME_LIMIT")
+        return as("rate_limited", `Bitrix24 holds ${method} for a while: this webhook used up its time on that method`, {
+            retry_after_ms: waitMs ?? operatingWaitMs(body, now),
+            retryable: true,
+        });
+    if (code && SCOPE.has(code))
+        return as("permission_error", `this webhook has no scope for ${method}${named}; add it in Bitrix24`, {
+            reason: "webhook.scope-missing",
+        });
+    if (code === "PORTAL_DELETED")
+        return as("authentication_error", "this Bitrix24 portal was deleted");
+    if ((code && DENIED.has(code)) || status === 403)
+        return as("permission_error", `the webhook's user may not do ${method}${named}`, { reason: "bitrix.access-denied" });
+    if ((code && SIGN_IN.has(code)) || status === 401)
+        return as("authentication_error", `Bitrix24 refused this webhook${named}; set a working one with \`b24 <profile> session start\``, { reason: "webhook.refused" });
+    if (code === "ERROR_METHOD_NOT_FOUND")
+        return as("not_found", `Bitrix24 does not know ${method}, or the webhook has no scope for it (ERROR_METHOD_NOT_FOUND)`, { reason: "method.unknown" });
+    if (code && NOT_FOUND.has(code))
+        return as("not_found", `${method}: Bitrix24 has no such record${named}`);
+    if (code === "BITRIX_REST_V3_EXCEPTION_IDEMPOTENCYKEYREUSEDEXCEPTION")
+        return as("conflict", `${method}: this --operation-id was already used for a different request; leave it out for a new write`, { reason: "operation.reused" });
+    const fields = fieldsOf(body);
+    if (status === 400 || code?.startsWith("BITRIX_REST_V3_EXCEPTION_"))
+        return as("validation_error", `Bitrix24 refused ${method}${named}${fields.length ? `; check ${fields.join(", ")}` : ""}`, fields.length ? { fields } : {});
+    if (status >= 500)
+        return as("provider_unavailable", `Bitrix24 failed on ${method}${named}`, { retryable: retryableStatus(status) });
+    return as(status >= 400 ? statusToCode(status) : "provider_error", `Bitrix24 refused ${method}${named}`);
+};
+//# sourceMappingURL=errors.js.map

package/dist/bitrix/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/bitrix/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAEtE,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,KAAK,CAAA;AACjC,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAA;AACtH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC,CAAA;AACpG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,gDAAgD,CAAC,CAAC,CAAA;AAChH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC,CAAA;AAS5F,MAAM,IAAI,GAAG,uBAAuB,CAAA;AAEpC,8GAA8G;AAC9G,MAAM,MAAM,GAAG,CAAC,IAA+B,EAAsB,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAA;IAClG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAA;IACvE,sEAAsE;IACtE,IAAI,GAAG,KAAK,EAAE,IAAI,OAAO,IAAI,EAAE,iBAAiB,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACjH,OAAO,WAAW,CAAA;IACpB,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAA+B,EAAY,EAAE;IAC7D,MAAM,UAAU,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAA;IACzC,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAA2B,EAAE,KAAK,CAAC;SACjD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;AAC1G,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,IAA+B,EAAE,GAAW,EAAE,EAAE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAA;AAC9F,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAc,EACd,MAAc,EACd,IAA+B,EAC/B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAkD,EAAE,EACtE,EAAE;IACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACzB,MAAM,OAAO,GAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACzG,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACtC,MAAM,EAAE,GAAG,CAAC,SAAoB,EAAE,OAAe,EAAE,IAAI,GAAoB,EAAE,EAAE,EAAE,CAC/E,IAAI,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAE3D,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,qCAAqC,MAAM,yCAAyC,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,mBAAmB;YAC7C,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,kBAAkB,MAAM,4DAA4D,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;YACpD,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,sBAAsB,EAAE;YACnG,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAA;IACpG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC9C,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;IACtH,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC/C,OAAO,EAAE,CACP,sBAAsB,EACtB,gCAAgC,KAAK,0DAA0D,EAC/F,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC9B,CAAA;IACH,IAAI,IAAI,KAAK,wBAAwB;QACnC,OAAO,EAAE,CACP,WAAW,EACX,0BAA0B,MAAM,+DAA+D,EAC/F,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC7B,CAAA;IACH,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,MAAM,gCAAgC,KAAK,EAAE,CAAC,CAAA;IACzG,IAAI,IAAI,KAAK,wDAAwD;QACnE,OAAO,EAAE,CACP,UAAU,EACV,GAAG,MAAM,8FAA8F,EACvG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAC/B,CAAA;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,UAAU,CAAC,2BAA2B,CAAC;QACjE,OAAO,EAAE,CACP,kBAAkB,EAClB,oBAAoB,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAChC,CAAA;IACH,IAAI,MAAM,IAAI,GAAG;QACf,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACnH,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,MAAM,GAAG,KAAK,EAAE,CAAC,CAAA;AAC1G,CAAC,CAAA"}

package/dist/bitrix/methods.d.ts

@@ -0,0 +1,13 @@
+export type RestVersion = 2 | 3;
+export type Effect = "read" | "write" | "destructive";
+export interface Method {
+    name: string;
+    api: RestVersion;
+    effect: Effect;
+    scope: string;
+}
+/** Which REST version answers a method, what it does, and its scope; unknown methods go to REST 2, the older API. */
+export declare const methodOf: (name: string) => Method;
+/** Methods `b24`'s own commands call; `api list` starts from them. */
+export declare const KNOWN_METHODS: readonly Method[];
+//# sourceMappingURL=methods.d.ts.map

package/dist/bitrix/methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"methods.d.ts","sourceRoot":"","sources":["../../src/bitrix/methods.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAA;AAC/B,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,CAAA;AAErD,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAuBD,qHAAqH;AACrH,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,MAKtC,CAAA;AAEF,sEAAsE;AACtE,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAM1C,CAAA"}

package/dist/bitrix/methods.js

@@ -0,0 +1,33 @@
+/**
+ * The CRM objects REST 3.0 serves (`crm.<type>.<action>`, apidocs "REST 3.0 items", 2026-11-05). Pipelines, lead
+ * stages, products and users stay on REST 2: lead stages have no REST 3.0 method yet, and one path for all stages
+ * keeps the outcome rule in one place.
+ */
+const REST3_TYPES = /^crm\.(deal|lead|contact|company|quote|smartinvoice|smartprocess\d+)\./;
+const READ_ACTIONS = new Set(["list", "get", "fields", "current", "search", "aggregate", "admin", "access"]);
+const effectOf = (name) => {
+    const action = name.slice(name.lastIndexOf(".") + 1);
+    if (action === "delete" || action === "deletefieldvalue")
+        return "destructive";
+    if (READ_ACTIONS.has(action) || name.endsWith(".field.list"))
+        return "read";
+    return "write";
+};
+const scopeOf = (name) => {
+    const first = name.slice(0, name.indexOf("."));
+    return first === "crm" || first === "user" || first === "catalog" || first === "task" ? first : "basic";
+};
+/** Which REST version answers a method, what it does, and its scope; unknown methods go to REST 2, the older API. */
+export const methodOf = (name) => ({
+    name,
+    api: REST3_TYPES.test(name) ? 3 : 2,
+    effect: effectOf(name),
+    scope: scopeOf(name),
+});
+/** Methods `b24`'s own commands call; `api list` starts from them. */
+export const KNOWN_METHODS = [
+    ...["deal", "lead", "contact", "company"].flatMap((type) => ["list", "get", "add", "update", "delete"].map((action) => methodOf(`crm.${type}.${action}`))),
+    ...["crm.item.list", "crm.category.list", "crm.status.list", "crm.product.list", "crm.product.get"].map(methodOf),
+    ...["user.current", "user.get", "user.admin"].map(methodOf),
+];
+//# sourceMappingURL=methods.js.map

package/dist/bitrix/methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"methods.js","sourceRoot":"","sources":["../../src/bitrix/methods.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,MAAM,WAAW,GAAG,wEAAwE,CAAA;AAE5F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAE5G,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,aAAa,CAAA;IAC9E,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,MAAM,CAAA;IAC3E,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AACzG,CAAC,CAAA;AAED,qHAAqH;AACrH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC;IACjD,IAAI;IACJ,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAA;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzD,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAC9F;IACD,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjH,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;CAC5D,CAAA"}

package/dist/bitrix/transport.d.ts

@@ -0,0 +1,50 @@
+import { type SleepLike } from "@wirecat/cli-base";
+import { type EventSink } from "@wirecat/cli-core/cli";
+import type { Pacer } from "@wirecat/cli-core/sends";
+import { type RestVersion } from "./methods.js";
+import { type Webhook } from "./webhook.js";
+export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+export interface BitrixTransportOptions {
+    webhook: Webhook;
+    fetch?: FetchLike;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    events?: EventSink;
+    /** Shared by every `b24` process of the profile: the portal's limit is per portal, not per process. */
+    pacer?: Pacer;
+    sleep?: SleepLike;
+    now?: () => number;
+    random?: () => number;
+}
+export interface CallOptions {
+    /** A write's operation id, sent as REST 3.0's `Idempotency-Key`, which makes the write safe to repeat. */
+    idempotencyKey?: string;
+    /** Overrides the method table, for `api call --rest`. */
+    api?: RestVersion;
+}
+/** REST 2 lists carry `total` and `next` beside `result`; REST 3.0 answers carry neither. */
+export interface BitrixAnswer {
+    result: unknown;
+    total?: number;
+    next?: number;
+}
+/**
+ * Bitrix24's REST API over an incoming webhook, method by method.
+ *
+ * ⚠ **The webhook's secret is part of every address** — `/rest/<user>/<secret>/<method>` — so the address never
+ * leaves this class: not in an error, not in a run record, and never by passing on a failed request's own error,
+ * whose text may hold it. Modelled on tg-cli's Bot API transport, which has the same problem.
+ */
+export declare class BitrixTransport {
+    #private;
+    constructor(options: BitrixTransportOptions);
+    /** The employee the webhook acts as. */
+    get userId(): string;
+    /**
+     * Reads are tried again on a refused rate or a lost answer. A write is tried again only on REST 3.0 with an
+     * `Idempotency-Key`, which Bitrix24 answers from its store instead of running twice; any other write that got no
+     * answer is `outcome_unknown`.
+     */
+    call(method: string, params?: Record<string, unknown>, options?: CallOptions): Promise<BitrixAnswer>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/bitrix/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/bitrix/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EAEf,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAA2B,KAAK,SAAS,EAAkC,MAAM,uBAAuB,CAAA;AAC/G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAEpD,OAAO,EAAY,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAa,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAQtD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE7E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,uGAAuG;IACvG,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,0GAA0G;IAC1G,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,yDAAyD;IACzD,GAAG,CAAC,EAAE,WAAW,CAAA;CAClB;AAED,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAYD;;;;;;GAMG;AACH,qBAAa,eAAe;;IAW1B,YAAY,OAAO,EAAE,sBAAsB,EAU1C;IAED,wCAAwC;IACxC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAsBjH;CAyHF"}