@wirecat/bitrix24-cli 0.0.0-stage → 0.1.0

package/dist/bitrix/transport.js

@@ -0,0 +1,189 @@
+import { backoffMs, CliError, isCliError, realSleep, wallClock, } from "@wirecat/cli-base";
+import { providerWaitMs, readJsonResponse } from "@wirecat/cli-base/http";
+import { apiJson, currentAttempt, providerEvent, providerRequest } from "@wirecat/cli-core/cli";
+import { bitrixError } from "./errors.js";
+import { methodOf } from "./methods.js";
+import { methodUrl } from "./webhook.js";
+const DEFAULT_TIMEOUT_MS = 30_000;
+const LARGEST_ANSWER = 16 * 1024 * 1024;
+const RETRY = { retries: 3, baseDelayMs: 1_000, maxDelayMs: 10_000, maxRetryAfterMs: 30_000 };
+/** A pace wait longer than this ends the run instead of sitting in it, as cli-core's messenger pacing does. */
+const LONGEST_PACE_WAIT_MS = 60_000;
+/** A keyed write that never got an answer may have run: the caller repeats it with the same operation id. */
+const lastOf = (method, error, reads) => reads || (error.code !== "timeout" && error.code !== "network_error")
+    ? error
+    : new CliError("outcome_unknown", `${method} got no answer; repeat it with the same --operation-id, which Bitrix24 will not run twice`, { operation: method, retryable: true });
+/**
+ * Bitrix24's REST API over an incoming webhook, method by method.
+ *
+ * ⚠ **The webhook's secret is part of every address** — `/rest/<user>/<secret>/<method>` — so the address never
+ * leaves this class: not in an error, not in a run record, and never by passing on a failed request's own error,
+ * whose text may hold it. Modelled on tg-cli's Bot API transport, which has the same problem.
+ */
+export class BitrixTransport {
+    #webhook;
+    #fetch;
+    #timeoutMs;
+    #signal;
+    #events;
+    #pacer;
+    #sleep;
+    #now;
+    #random;
+    constructor(options) {
+        this.#webhook = options.webhook;
+        this.#fetch = options.fetch ?? fetch;
+        this.#timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.#signal = options.signal;
+        this.#events = options.events;
+        this.#pacer = options.pacer;
+        this.#sleep = options.sleep ?? realSleep;
+        this.#now = options.now ?? Date.now;
+        this.#random = options.random ?? Math.random;
+    }
+    /** The employee the webhook acts as. */
+    get userId() {
+        return this.#webhook.userId;
+    }
+    /**
+     * Reads are tried again on a refused rate or a lost answer. A write is tried again only on REST 3.0 with an
+     * `Idempotency-Key`, which Bitrix24 answers from its store instead of running twice; any other write that got no
+     * answer is `outcome_unknown`.
+     */
+    async call(method, params = {}, options = {}) {
+        const known = methodOf(method);
+        const api = options.api ?? known.api;
+        const reads = known.effect === "read";
+        const key = api === 3 && !reads ? options.idempotencyKey : undefined;
+        const repeatable = reads || key !== undefined;
+        let waited;
+        for (let attempt = 1;; attempt++) {
+            try {
+                await this.#turn(method);
+                return await this.#once(method, params, { api, reads, key, attempt, waited });
+            }
+            catch (error) {
+                if (!isCliError(error) || !repeatable)
+                    throw error;
+                const asked = error.details.retry_after_ms;
+                const wait = typeof asked === "number" ? asked : backoffMs(attempt, RETRY, this.#random);
+                const again = error.code === "rate_limited" || error.details.retryable === true;
+                if (!again || wait > RETRY.maxRetryAfterMs || attempt > RETRY.retries)
+                    throw lastOf(method, error, reads);
+                if (error.code === "rate_limited")
+                    await this.#pacer?.holdFor(wait);
+                await this.#wait(wait, method);
+                waited = wait;
+            }
+        }
+    }
+    async #turn(method) {
+        if (!this.#pacer)
+            return;
+        const at = await this.#pacer.reserve();
+        const wait = at - this.#now();
+        if (wait <= 0)
+            return;
+        if (wait > LONGEST_PACE_WAIT_MS)
+            throw new CliError("rate_limited", `this profile must wait ${Math.ceil(wait / 1000)} s before ${method}`, {
+                operation: method,
+                retry_after_ms: wait,
+                remembered: true,
+            });
+        await this.#wait(wait, method);
+    }
+    async #wait(ms, method) {
+        try {
+            await this.#sleep(ms, this.#signal, "retry");
+        }
+        catch {
+            throw new CliError("cancelled", `stopped while waiting to call ${method}`, { operation: method });
+        }
+    }
+    async #once(method, params, run) {
+        // Not AbortSignal.timeout: its timer holds the run's async context until the deadline (tg-cli, 2026-11-05).
+        const deadline = new AbortController();
+        const timer = setTimeout(() => deadline.abort(new DOMException(`${method} timed out`, "TimeoutError")), this.#timeoutMs);
+        timer.unref();
+        const end = providerRequest(method, this.#events ?? providerEvent, {
+            method: "POST",
+            endpointTemplate: `/rest/${run.api === 3 ? "api/" : ""}:user/:token/${method}`,
+            transport: "http",
+            ...(currentAttempt()
+                ? {}
+                : { attempt: run.attempt, ...(run.waited === undefined ? {} : { waitMs: run.waited }) }),
+        });
+        const signal = AbortSignal.any([deadline.signal, ...(this.#signal ? [this.#signal] : [])]);
+        try {
+            let response;
+            try {
+                response = await this.#fetch(methodUrl(this.#webhook, run.api, method), {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                        Accept: "application/json",
+                        ...(run.key ? { "Idempotency-Key": run.key } : {}),
+                    },
+                    body: apiJson(params),
+                    // A redirect would carry the secret path to another host.
+                    redirect: "error",
+                    signal,
+                });
+            }
+            catch (error) {
+                const failure = this.#unanswered(method, error, run.reads || run.key !== undefined);
+                end({ errorCode: failure.code });
+                throw failure;
+            }
+            let body;
+            try {
+                body = await readJsonResponse(response, { maxBytes: LARGEST_ANSWER, signal });
+            }
+            catch (error) {
+                if (signal.aborted) {
+                    const failure = this.#unanswered(method, error, run.reads || run.key !== undefined);
+                    end({ status: response.status, errorCode: failure.code });
+                    throw failure;
+                }
+                end({ status: response.status, errorCode: "invalid_response" });
+                if (!response.ok)
+                    throw bitrixError(method, response.status, undefined);
+                throw new CliError("invalid_response", `Bitrix24 answered ${method} with something that is not JSON`, {
+                    operation: method,
+                    status: response.status,
+                });
+            }
+            const answer = (body ?? {});
+            if (!response.ok || answer.error !== undefined) {
+                const refusal = bitrixError(method, response.status, answer, {
+                    now: this.#now(),
+                    waitMs: providerWaitMs(response.headers, wallClock),
+                });
+                end({
+                    status: response.status,
+                    errorCode: refusal.code,
+                    providerError: String(refusal.details.provider_error ?? ""),
+                });
+                throw refusal;
+            }
+            end({ status: response.status });
+            return {
+                result: answer.result,
+                ...(typeof answer.total === "number" ? { total: answer.total } : {}),
+                ...(typeof answer.next === "number" ? { next: answer.next } : {}),
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    #unanswered(method, error, repeatable) {
+        if (this.#signal?.aborted && this.#signal.reason?.name !== "TimeoutError")
+            return new CliError("cancelled", `${method} was cancelled`, { operation: method });
+        if (!repeatable)
+            return new CliError("outcome_unknown", `${method} got no answer; Bitrix24 may or may not have carried it out — check before repeating it`, { operation: method, retryable: false });
+        const timedOut = error?.name === "TimeoutError";
+        return new CliError(timedOut ? "timeout" : "network_error", timedOut ? `${method} got no answer within ${this.#timeoutMs} ms` : `${method} could not reach Bitrix24`, { operation: method, retryable: true });
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/bitrix/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/bitrix/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,QAAQ,EACR,UAAU,EAEV,SAAS,EAET,SAAS,GACV,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAkB,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE/G,OAAO,EAAsB,WAAW,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAoB,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAA;AAEtD,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACvC,MAAM,KAAK,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;AAC1G,+GAA+G;AAC/G,MAAM,oBAAoB,GAAG,MAAM,CAAA;AA+BnC,6GAA6G;AAC7G,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAe,EAAE,KAAc,EAAY,EAAE,CAC3E,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC;IACnE,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,IAAI,QAAQ,CACV,iBAAiB,EACjB,GAAG,MAAM,2FAA2F,EACpG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CACvC,CAAA;AAEP;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IACjB,QAAQ,CAAS;IACjB,MAAM,CAAW;IACjB,UAAU,CAAQ;IAClB,OAAO,CAAyB;IAChC,OAAO,CAAuB;IAC9B,MAAM,CAAmB;IACzB,MAAM,CAAW;IACjB,IAAI,CAAc;IAClB,OAAO,CAAc;IAE9B,YAAY,OAA+B;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAA;QACpC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;QACzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAA;IAC9C,CAAC;IAED,wCAAwC;IACxC,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,MAAM,GAA4B,EAAE,EAAE,OAAO,GAAgB,EAAE;QACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAA;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAA;QACrC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACpE,MAAM,UAAU,GAAG,KAAK,IAAI,GAAG,KAAK,SAAS,CAAA;QAC7C,IAAI,MAA0B,CAAA;QAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU;oBAAE,MAAM,KAAK,CAAA;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAA;gBAC1C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAA;gBAC/E,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;gBACzG,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;oBAAE,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;gBACnE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC9B,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAM;QACxB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,IAAI,IAAI,CAAC;YAAE,OAAM;QACrB,IAAI,IAAI,GAAG,oBAAoB;YAC7B,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,0BAA0B,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,MAAM,EAAE,EAAE;gBACxG,SAAS,EAAE,MAAM;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;QACJ,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,MAAc;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,iCAAiC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;QACnG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CACT,MAAc,EACd,MAA+B,EAC/B,GAA+G;QAE/G,4GAA4G;QAC5G,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,GAAG,MAAM,YAAY,EAAE,cAAc,CAAC,CAAC,EAC7E,IAAI,CAAC,UAAU,CAChB,CAAA;QACD,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,aAAa,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,gBAAgB,EAAE,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,MAAM,EAAE;YAC9E,SAAS,EAAE,MAAM;YACjB,GAAG,CAAC,cAAc,EAAE;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1F,IAAI,CAAC;YACH,IAAI,QAAkB,CAAA;YACtB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE;oBACtE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,kBAAkB;wBAC1B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnD;oBACD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;oBACrB,0DAA0D;oBAC1D,QAAQ,EAAE,OAAO;oBACjB,MAAM;iBACP,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;gBACnF,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;gBAChC,MAAM,OAAO,CAAA;YACf,CAAC;YACD,IAAI,IAAa,CAAA;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAA;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;oBACnF,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;oBACzD,MAAM,OAAO,CAAA;gBACf,CAAC;gBACD,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,MAAM,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACvE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,MAAM,kCAAkC,EAAE;oBACpG,SAAS,EAAE,MAAM;oBACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAAiC,CAAA;YAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE;oBAC3D,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;oBAChB,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;iBACpD,CAAC,CAAA;gBACF,GAAG,CAAC;oBACF,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,OAAO,CAAC,IAAI;oBACvB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;iBAC5D,CAAC,CAAA;gBACF,MAAM,OAAO,CAAA;YACf,CAAC;YACD,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YAChC,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,KAAc,EAAE,UAAmB;QAC7D,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,IAAK,IAAI,CAAC,OAAO,CAAC,MAA4B,EAAE,IAAI,KAAK,cAAc;YAC9F,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,MAAM,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;QACpF,IAAI,CAAC,UAAU;YACb,OAAO,IAAI,QAAQ,CACjB,iBAAiB,EACjB,GAAG,MAAM,yFAAyF,EAClG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CACxC,CAAA;QACH,MAAM,QAAQ,GAAI,KAA2B,EAAE,IAAI,KAAK,cAAc,CAAA;QACtE,OAAO,IAAI,QAAQ,CACjB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EACtC,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,yBAAyB,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,2BAA2B,EACxG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CACvC,CAAA;IACH,CAAC;CACF"}

package/dist/bitrix/webhook.d.ts

@@ -0,0 +1,14 @@
+/** An incoming webhook: the portal, the employee it acts as, and the secret that is the whole sign-in. */
+export interface Webhook {
+    origin: string;
+    userId: string;
+    secret: string;
+}
+/**
+ * Takes the address as Bitrix24 shows it, `https://<portal>/rest/<user>/<secret>/`, with or without a method or the
+ * REST 3.0 `api/` segment pasted after it. The text is never quoted back: the secret is part of it.
+ */
+export declare const parseWebhook: (raw: string) => Webhook;
+/** REST 2 lives at `/rest/`, REST 3.0 at `/rest/api/`; both take the same user and secret. */
+export declare const methodUrl: (webhook: Webhook, api: 2 | 3, method: string) => string;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/bitrix/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/bitrix/webhook.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAID;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAS,MAAM,KAAG,OAgB1C,CAAA;AAED,8FAA8F;AAC9F,eAAO,MAAM,SAAS,YAAa,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,KAAG,MACyB,CAAA"}

package/dist/bitrix/webhook.js

@@ -0,0 +1,29 @@
+import { CliError } from "@wirecat/cli-base";
+const PATH = /^\/rest\/(?:api\/)?(\d+)\/([A-Za-z0-9_-]+)(?:\/.*)?$/;
+/**
+ * Takes the address as Bitrix24 shows it, `https://<portal>/rest/<user>/<secret>/`, with or without a method or the
+ * REST 3.0 `api/` segment pasted after it. The text is never quoted back: the secret is part of it.
+ */
+export const parseWebhook = (raw) => {
+    const refused = (why) => new CliError("validation_error", `that is not a Bitrix24 incoming webhook address: ${why}`, {
+        reason: "webhook.malformed",
+    });
+    let url;
+    try {
+        url = new URL(raw.trim());
+    }
+    catch {
+        throw refused("it is not a URL");
+    }
+    if (url.protocol !== "https:")
+        throw refused("it must start with https://");
+    if (url.username || url.password || url.search || url.hash)
+        throw refused("it carries more than the address");
+    const path = PATH.exec(url.pathname);
+    if (!path?.[1] || !path[2])
+        throw refused("its path is not /rest/<user id>/<secret>/");
+    return { origin: url.origin, userId: path[1], secret: path[2] };
+};
+/** REST 2 lives at `/rest/`, REST 3.0 at `/rest/api/`; both take the same user and secret. */
+export const methodUrl = (webhook, api, method) => `${webhook.origin}/rest/${api === 3 ? "api/" : ""}${webhook.userId}/${webhook.secret}/${method}`;
+//# sourceMappingURL=webhook.js.map

package/dist/bitrix/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/bitrix/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAS5C,MAAM,IAAI,GAAG,sDAAsD,CAAA;AAEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAW,EAAE;IACnD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,IAAI,QAAQ,CAAC,kBAAkB,EAAE,oDAAoD,GAAG,EAAE,EAAE;QAC1F,MAAM,EAAE,mBAAmB;KAC5B,CAAC,CAAA;IACJ,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAC3E,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAA;IAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,2CAA2C,CAAC,CAAA;IACtF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;AACjE,CAAC,CAAA;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAE,GAAU,EAAE,MAAc,EAAU,EAAE,CAChF,GAAG,OAAO,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,CAAA"}

package/dist/bundle/all-profiles-QJ444GSX.js

@@ -0,0 +1,24 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  CHILD_IDLE_MS,
+  allProfilesServer,
+  serveAllProfilesOverHttp,
+  serveAllProfilesOverStdio,
+  withProfile
+} from "./chunk-QIPTIUMJ.js";
+import "./chunk-RRJNNPR4.js";
+import "./chunk-7GRZAKBB.js";
+import "./chunk-FOTREPNS.js";
+import "./chunk-5D4AEUVA.js";
+import "./chunk-LRGYKOCP.js";
+import "./chunk-IRV2PCQ2.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-ZVVMGPBJ.js";
+export {
+  CHILD_IDLE_MS,
+  allProfilesServer,
+  serveAllProfilesOverHttp,
+  serveAllProfilesOverStdio,
+  withProfile
+};

package/dist/bundle/anthropic-RHRAVHC2.js

@@ -0,0 +1,70 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  checkedOptions
+} from "./chunk-YZ5LHE5Q.js";
+import {
+  messagesFor,
+  systemFor
+} from "./chunk-K3UIB6ZF.js";
+import {
+  Anthropic
+} from "./chunk-ADLS6FVG.js";
+import {
+  array,
+  optional,
+  strictObject,
+  string
+} from "./chunk-IRV2PCQ2.js";
+import "./chunk-Y5E2WNWB.js";
+import {
+  __name
+} from "./chunk-ZVVMGPBJ.js";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.586.0_@wirecat+cli-base@0.79.0_commander@15.0.0_esbuild@0.28.2_type_bdecddef0ae5a50ae90cab8b9e35c13b/node_modules/@wirecat/cli-core/dist/models/anthropic.js
+var options = strictObject({
+  stop_sequences: optional(array(string()))
+});
+var anthropic = {
+  images: true,
+  baseUrl: "https://api.anthropic.com",
+  validate: /* @__PURE__ */ __name((given) => checkedOptions("anthropic", options, given), "validate"),
+  complete: /* @__PURE__ */ __name(async (target, request, checked, apiKey, fetcher) => {
+    const client = new Anthropic({
+      apiKey: apiKey ?? "",
+      authToken: null,
+      fetch: /* @__PURE__ */ __name((input, init) => fetcher(input, { ...init, redirect: "error" }), "fetch"),
+      baseURL: target.baseUrl,
+      maxRetries: 0,
+      logLevel: "off",
+      timeout: 12e4
+    });
+    const response = await client.messages.stream({
+      ...checked,
+      model: target.model,
+      system: systemFor(request),
+      messages: [
+        ...messagesFor(request),
+        ...request.images === void 0 ? [] : [
+          {
+            role: "user",
+            content: request.images.map((image) => ({
+              type: "image",
+              source: { type: "base64", media_type: image.mimeType, data: image.data }
+            }))
+          }
+        ]
+      ],
+      max_tokens: request.maxTokens
+    }).finalMessage();
+    if (response.stop_reason !== "end_turn")
+      throw new Error("incomplete response");
+    return {
+      text: response.content.filter((block) => block.type === "text").map((block) => block.text).join(""),
+      tokens: response.usage.input_tokens + response.usage.output_tokens + (response.usage.cache_creation_input_tokens ?? 0) + (response.usage.cache_read_input_tokens ?? 0)
+    };
+  }, "complete")
+};
+export {
+  anthropic
+};

package/dist/bundle/app-server-QIT6S7AZ.js

@@ -0,0 +1,224 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  PER_RUN,
+  envelope
+} from "./chunk-YYO7D2MO.js";
+import "./chunk-HAXNUIGQ.js";
+import {
+  mcpUrlOf
+} from "./chunk-XNHSPHUN.js";
+import {
+  answeredWire
+} from "./chunk-RRJNNPR4.js";
+import {
+  answered,
+  failed,
+  registerCommands,
+  runCommandForAgent,
+  toolsFromCommands
+} from "./chunk-QMPN6WKD.js";
+import {
+  agentJson,
+  skillResource
+} from "./chunk-WKRQ44EH.js";
+import {
+  StdioServerTransport,
+  serveStdio
+} from "./chunk-7GRZAKBB.js";
+import "./chunk-FZL7F5NR.js";
+import "./chunk-POC3V3AO.js";
+import "./chunk-ZDQQCXFG.js";
+import "./chunk-XRFJWHY5.js";
+import {
+  DEFAULT_OUTPUT_BYTES,
+  changesAuthorityAt,
+  describeProgram,
+  environmentOf,
+  judgedTargets,
+  readOnlyLockOf,
+  readsOverMcpAt,
+  rootOf2 as rootOf
+} from "./chunk-U5ACMCAQ.js";
+import "./chunk-FOTREPNS.js";
+import "./chunk-EVYSBZ3I.js";
+import "./chunk-CXL33BFL.js";
+import "./chunk-CNNEA2M4.js";
+import {
+  appInstructions
+} from "./chunk-FLUEXJ4X.js";
+import {
+  McpServer
+} from "./chunk-5D4AEUVA.js";
+import {
+  mcpHttpMarker
+} from "./chunk-OTD2ZRXD.js";
+import "./chunk-N6FLBXZS.js";
+import "./chunk-XJXONOB5.js";
+import "./chunk-QGMDQ2PM.js";
+import "./chunk-2SNUMZ7S.js";
+import "./chunk-SGRYYE4X.js";
+import "./chunk-K3UIB6ZF.js";
+import "./chunk-QSNROIJL.js";
+import "./chunk-BCF7P4FZ.js";
+import "./chunk-XD4FRDSL.js";
+import "./chunk-EXOOKUEA.js";
+import "./chunk-H2ADPPSH.js";
+import "./chunk-P364PLIK.js";
+import "./chunk-VEWWAGTD.js";
+import "./chunk-TE3FR6MI.js";
+import "./chunk-DTXERR44.js";
+import "./chunk-QQXH2OPB.js";
+import "./chunk-ZGZT5S6B.js";
+import "./chunk-LRGYKOCP.js";
+import "./chunk-D5S6QV6R.js";
+import "./chunk-MBDK4YXG.js";
+import {
+  CliError,
+  mcpErrorResult
+} from "./chunk-IRV2PCQ2.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-SFRNX2TI.js";
+import {
+  __name
+} from "./chunk-ZVVMGPBJ.js";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.586.0_@wirecat+cli-base@0.79.0_commander@15.0.0_esbuild@0.28.2_type_bdecddef0ae5a50ae90cab8b9e35c13b/node_modules/@wirecat/cli-core/dist/mcp/app-server.js
+var EXCLUDED = [["mcp"]];
+var createAppServer = /* @__PURE__ */ __name((command, context, options) => {
+  const { app } = options;
+  const root = rootOf(command);
+  const environment = environmentOf(command);
+  if (!environment.runCommand)
+    throw new Error("the MCP server runs inside run(), which hands it the program");
+  const program = { run: environment.runCommand, commands: describeProgram(root) };
+  const flags = command.optsWithGlobals();
+  const overrides = flags.permission ?? [];
+  const { settings } = context;
+  const levels = /* @__PURE__ */ __name(() => options.resolveSettings(flags, { env: context.env }).permissions, "levels");
+  const readOnly = /* @__PURE__ */ __name(() => readOnlyLockOf(app, context.env) !== void 0, "readOnly");
+  const authority = changesAuthorityAt(root);
+  const targets = judgedTargets(root);
+  const passed = Object.fromEntries(Object.entries(environment).filter(([key]) => !PER_RUN.has(key)));
+  const tools = toolsFromCommands(program.commands, {
+    includeUnavailable: true,
+    exclude: EXCLUDED,
+    levels: settings.permissions,
+    currentLevels: levels,
+    readOnly: readOnly(),
+    authority,
+    fetchOnly: readsOverMcpAt(root),
+    permissions: options.permissions
+  });
+  const availability = /* @__PURE__ */ __name((one) => () => {
+    const permitted = one.availability?.() ?? { available: true };
+    if (!permitted.available)
+      return permitted;
+    return options.availability?.(one.path, settings.profile) ?? permitted;
+  }, "availability");
+  const commands = Object.fromEntries(tools.map((one) => [
+    one.command,
+    {
+      title: one.title,
+      description: one.description,
+      writes: one.writes,
+      availability: availability(one),
+      input: one.input,
+      run: /* @__PURE__ */ __name(async (input, ctx) => {
+        const own = options.availability?.(one.path, settings.profile);
+        if (own && !own.available)
+          return failed(new CliError("permission_error", `${one.command}: ${own.reason ?? "unavailable for this profile"}`, {
+            ...own.permission ? { permission: own.permission } : {}
+          }), app.errors);
+        const traceparent = ctx?.mcpReq?._meta?.traceparent;
+        const env = typeof traceparent === "string" ? { ...context.env, TRACEPARENT: traceparent } : context.env;
+        const answer = await runCommandForAgent(program, one.path, input, {
+          profile: settings.profile,
+          readOnly: readOnly(),
+          env,
+          levels,
+          overrides,
+          authority,
+          permissions: options.permissions,
+          environment: passed
+        });
+        if ("error" in answer)
+          return mcpErrorResult(JSON.parse(agentJson(answer.error)));
+        try {
+          return answered(envelope(one.command, answer.result), DEFAULT_OUTPUT_BYTES, targets);
+        } catch (error) {
+          return failed(error, app.errors);
+        }
+      }, "run")
+    }
+  ]));
+  const skill = options.skill ? skillResource(app, options.skill) : void 0;
+  const build = /* @__PURE__ */ __name(() => {
+    const server = new McpServer({ name: app.command, version: app.version }, {
+      instructions: appInstructions({
+        command: app.command,
+        name: options.name,
+        profile: settings.profile,
+        untrusted: options.untrusted,
+        ...skill ? { skill: skill.instruction } : {}
+      })
+    });
+    registerCommands(server, app.command, commands, app.errors, void 0, app.messenger);
+    if (skill) {
+      const { uri, name, title, description, mimeType, read } = skill;
+      server.registerResource(name, uri, { title, description, mimeType }, read);
+    }
+    return server;
+  }, "build");
+  return { build, offered: Object.keys(commands) };
+}, "createAppServer");
+var serveAppOverStdio = /* @__PURE__ */ __name(async (command, context, options) => {
+  const { build } = createAppServer(command, context, options);
+  const { stdin, stdout, signal } = environmentOf(command);
+  const own = stdin && stdout && stdin !== process.stdin;
+  const wire = answeredWire(own ? stdin : process.stdin, own ? stdout : process.stdout);
+  const handle = serveStdio(build, {
+    transport: new StdioServerTransport(wire.input, wire.output),
+    onerror: /* @__PURE__ */ __name((error) => context.renderer.note(`mcp: ${error.message}`), "onerror")
+  });
+  const ended = await new Promise((resolve) => {
+    wire.ended.then(() => resolve("input"));
+    if (own)
+      signal?.addEventListener("abort", () => resolve("stopped"), { once: true });
+    else {
+      process.once("SIGINT", () => resolve("stopped"));
+      process.once("SIGTERM", () => resolve("stopped"));
+    }
+  });
+  if (ended === "input")
+    await wire.answered();
+  wire.release();
+  await handle.close();
+}, "serveAppOverStdio");
+var serveAppOverHttp = /* @__PURE__ */ __name(async (command, context, options, http) => {
+  const { app } = options;
+  const { build } = createAppServer(command, context, options);
+  const { serveOverHttp } = await import("./serve-ES7AG5IK.js");
+  const listening = await serveOverHttp(build, {
+    ...http,
+    appName: app.command,
+    reaches: `your ${options.name}`,
+    onCode: /* @__PURE__ */ __name((code, expires) => context.renderer.note(context.env[mcpHttpMarker(app.envPrefix)] === void 0 ? `login code for a new browser app: ${code} (until ${expires.toTimeString().slice(0, 5)}; a new one after each login)` : `a new login code for a browser app: \`${app.command} ${context.settings.profile} mcp server status\``), "onCode"),
+    onError: /* @__PURE__ */ __name((error) => context.renderer.note(`mcp: ${error.message}`), "onError")
+  }).catch((error) => {
+    if (error.code === "EADDRINUSE")
+      throw new CliError("configuration_error", `port ${http.port} is in use \u2014 pass another with --port`);
+    throw error;
+  });
+  context.renderer.note(`serving on ${listening.url.href} \u2014 point your tunnel at it; connectors use ${mcpUrlOf(http.publicUrl).href}`);
+  await new Promise((resolve) => {
+    process.once("SIGINT", resolve);
+    process.once("SIGTERM", resolve);
+  });
+  await listening.close();
+}, "serveAppOverHttp");
+export {
+  createAppServer,
+  serveAppOverHttp,
+  serveAppOverStdio
+};

package/dist/bundle/b24.js

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  IDENTITY
+} from "./chunk-CZ23EVP4.js";
+import "./chunk-QSNROIJL.js";
+import "./chunk-PH5FZX6E.js";
+import "./chunk-BCF7P4FZ.js";
+import "./chunk-INFYLWUA.js";
+import "./chunk-XD4FRDSL.js";
+import "./chunk-ZIAQPTUS.js";
+import "./chunk-EXOOKUEA.js";
+import "./chunk-QQXH2OPB.js";
+import "./chunk-ZGZT5S6B.js";
+import "./chunk-LRGYKOCP.js";
+import {
+  catchCrashes
+} from "./chunk-IRV2PCQ2.js";
+import "./chunk-Y5E2WNWB.js";
+import "./chunk-ZVVMGPBJ.js";
+
+// dist/bin/b24.js
+import { enableCompileCache } from "node:module";
+enableCompileCache();
+var stopCatching = catchCrashes({ cli: IDENTITY.command, interactive: process.stdout.isTTY === true });
+var { run } = await import("./program-GO3RVP2H.js");
+try {
+  process.exitCode = await run(process.argv.slice(2));
+} finally {
+  stopCatching();
+}