@wirecat/bitrix24-cli 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,84 @@
 
 Notable changes to `@wirecat/bitrix24-cli`. One section per version, newest first.
 
+## 0.5.0 — 07.11.2026
+
+### Added
+
+- `sync` copies the portal's pipelines, companies, contacts, deals and leads into the local WireCat store: what changed
+  since the last sync, or everything with `--rescan`; once a day it also finds what the portal deleted. `store status`
+  says how far each kind is. A sync stops before its deadline or `--max-pages`, and the next one goes on from there.
+- `deals close <ref> won|lost` and `leads close`, to the first won or lost stage of the record's pipeline, and
+  `deals delete` and `leads delete`, which ask first.
+- `deals create` and `update` take `--pipeline`, `--stage`, `--amount` with `--currency`, `--close-date` and
+  `--owner`; leads take the same but `--close-date`. A stage checks the move key, a won or lost one the close key too.
+- `search all` finds stored deals and leads beside the other WireCat tools' messages, notes and events. Under
+  `deals.list: deny` it leaves deals out and names them in `missing` and on stderr, and the same for leads; with every
+  kind it was asked for denied, it is refused (`search.all-denied`).
+- `b24 --help` and a bare `b24` open with what `b24` is for, what to try first, and where to start.
+
+### Changed — may break callers
+
+- `deals`, `leads`, `pipelines` and `stages` are cli-core's shared CRM commands, the same in every WireCat CRM tool.
+  Their lists and `show` read the local store, so run `sync` first; `--offline` works for them now.
+- A deal or lead is named by its ref, `deal:12` or `lead:7`, as a list prints it, not by its Bitrix24 id or title.
+- A deal or lead answers `ref`, `pipeline` and `pipeline_name`, `stage` (its name), `status` (`open`, `won` or `lost`),
+  `close_date`, `amount` as a decimal string in `currency`, both `null` with no amount, `assignee` as
+  `<portal>/user/<id>`, and the portal's own fields in `provider_metadata` by code. `stage_id`, `pipeline_id`,
+  `outcome`, `closes_on`, `assigned_to` and `person_ids` are gone from them; contacts are in `people`, the company in
+  `organization`.
+- Their list query takes `status`, `stage`, `pipeline` and `organization`; the free word, the time windows and the
+  portal's own fields are gone from it. `--all` is gone from those lists.
+- `deals move <ref> <stage>` takes the stage as an argument, not `--stage`.
+- Deal and lead writes have no `--body`. `--field <label or code>=<value>` sets a custom field by the definitions the
+  last `sync` stored: a list field takes its option's label or id, a multiple field one `--field` per value, and an
+  empty value clears it. A code that names a standard field (`stageId`, `categoryId`, `assignedById`, a lead's
+  `STATUS_ID`) is refused, and so is a `--field` with no key before its `=`.
+- A custom field's label and a list option's label are matched as cli-core matches names, for every `--field` and
+  query: `е` finds `ё`, and a letter typed as two code points finds the same letter typed as one. `people show` and
+  `organizations show` compare a name with the portal's matches the same way. A label that matched one field may now
+  match two, which is refused with both.
+- `fields list <deals|leads|people|organizations>` is cli-core's: it reads the definitions `sync` stored, so run
+  `sync` first, and each field names its `untrusted` parts.
+- `api.crm.deal.update` (and the other deal and lead `api.*` keys) at `ask` now asks on `deals update`, `move` and
+  `close` too, not only on `api call`. `--dry-run` of a deal or lead write names every key it may check: the
+  `api.*` key, and the move, close and `crm.assign-others` keys with the option that would make each apply.
+- `sync` reads the portal's field definitions of each kind, one more request per kind, so `--max-pages` reaches the
+  records later. A webhook without the rights to read them still syncs; any other failure there fails the sync.
+- Leads stand in one pipeline named `Leads`, since Bitrix24's leads have none.
+- `deals.delete` and `leads.delete` default to `ask`; `api call` that sets a stage checks `deals.close` (or
+  `leads.close`) as well as `deals.move`.
+- `mcp` and `doctor` are cli-core's shared commands: `mcp` adds `config`, `add` and `check`, and `--profiles` and
+  `--permission` on `serve`; `doctor` adds `--online`.
+- A `--body` or `api call` method that could be read in more than one way is refused before anything is sent: a
+  body that names one field twice in any spelling, an `entityTypeId` that is not a plain number, a `fields` that is
+  not an object, a method with any suffix but one `.json`, and a `crm.item` method without `entityTypeId`. Send each
+  field once, under one spelling.
+- `--operation-id` is gone from every write. On a live portal a create repeated with the same id made a second
+  record, so a repeat is never safe: after `outcome_unknown`, `sync` and `show` the record and write it again only if
+  it is not there. A deal or lead write given `--operation-id` is refused before anything is sent.
+
+### Fixed
+
+- A `sync` after the first one works. It asked the portal for what changed with a time the portal refuses, so
+  every kind failed and nothing new was copied. Times in a filter now go in whole seconds with an offset, which also
+  fixes `updated_at:` and `created_at:` in `people list` and `organizations list`.
+- A write answered with a server or gateway failure (500, 502, 504) is `outcome_unknown`, not `provider_unavailable`:
+  the portal may have made it. A write a cancel cuts is `outcome_unknown` too, never `cancelled`.
+- Stages are read page by page: a directory past REST 2's first 50 rows lost its later stages.
+- An id or owner that is not a number is refused before anything is sent; it went out empty before.
+- `--body` keeps integers past 2^53 as typed; `api call --body -` reads the body from stdin.
+- A request that gets no answer is cut after 10 seconds, not 30, so a read can be tried again before a one-shot
+  command's own 30 s run out.
+- `show` for people and organizations fails when the portal's field labels fail for a reason other than missing
+  rights, instead of showing the record without its labels.
+
+### Security
+
+- Permission checks on `api call` and on `people` and `organizations` writes read a body exactly as it is sent, so
+  the key they check is the key the write needs.
+- `api call` reads check the same keys as the commands that read those records, as its writes already did.
+
 ## 0.4.0 — 06.11.2026
 
 ### Added

package/README.md

@@ -1,18 +1,93 @@
-# b24
+# b24 — Bitrix24 CRM CLI for AI agents
 
 `b24` reads and changes a Bitrix24 portal's sales data from the terminal, from scripts and from AI agents: deals,
 leads, contacts, companies, pipelines and their stages, products and employees. It signs in with one of the portal's
-incoming webhooks and acts with the rights of the employee who made it.
+incoming webhooks and acts with the rights of the employee who made it. Deals and leads are copied into the local
+[WireCat](https://wirecat.dev) store, so lists and search work offline, beside your other WireCat tools' data.
+
+## Quick start
 
 ```sh
 npm install -g @wirecat/bitrix24-cli
+b24 skill install                 # the agent skill, for Claude Code, Codex, Gemini CLI and OpenClaw
 b24 work session start            # paste the webhook address; it is kept in the keyring
-b24 work deals list outcome:open
-b24 work leads list updated_at>=7d --json
-b24 work deals move 42 --stage "Contract signed"
+b24 work sync                     # copies pipelines, companies, contacts, deals and leads into the local store
+b24 work deals list status:open
+```
+
+`work` is a profile: a name you choose for one portal. It is the first word of every command that uses an account,
+and none is ever assumed. Make the webhook in Bitrix24 under Developer resources → Other → Incoming webhook, with the
+scopes `crm` and `user`. You need Node.js 22.16 or a later 22.x, or Node.js 24 or later. `b24 doctor` needs no
+network and shows what is set up.
+
+More: [installation](docs/installation.md), [usage](docs/usage.md).
+
+## What you can do
+
+```sh
+b24 work leads list stage:"In progress" --json      # from the store, offline too
+b24 work deals move deal:42 "Contract signed"       # checks deals.move, and deals.close for a won or lost stage
+b24 work search all kitchen                         # stored deals and leads beside your other WireCat data
+b24 work people update 4 --body '{"post":"Buyer"}'  # a contact, in Bitrix24's own field names
+b24 work api call crm.deal.fields --dry-run         # any REST method, with every permission it checks
 ```
 
-Every command answers JSON with `--json`, every write answers an `operation_id` and can be previewed with
-`--dry-run`, and `b24 work mcp serve` gives the same commands to an agent. Start with
-[installation](docs/installation.md), then [usage](docs/usage.md). The design is in
-[docs/dev/DESIGN.md](docs/dev/DESIGN.md).
+Every write answers an `operation_id` and can be previewed with `--dry-run`. More: [usage](docs/usage.md) and the
+[command reference](docs/commands.md).
+
+## For AI agents
+
+- **An agent with a terminal** (Claude Code, Codex, Gemini CLI, OpenClaw): `b24 skill install` writes the skill, the
+  agent's instruction sheet.
+- **An MCP client**: `b24 work mcp serve`, or `b24 work mcp add claude-code`. `mcp serve --permission deals=deny`
+  tightens the levels for one server; an agent can never loosen them.
+- **ChatGPT or Claude in a browser**: `b24 work mcp serve --http` behind your own tunnel.
+
+Text from the portal is marked `untrusted` in MCP answers: it is data for the agent, never instructions. `api call`
+and `session start`/`end` are never offered over MCP. With `--json`, every command prints one JSON value, and an error
+comes as JSON with a code to branch on.
+
+More: [agents](docs/usage.md#agents).
+
+## Settings and permissions
+
+Each profile has a permission level for every command and every REST method: `allow`, `ask`, `readonly` or `deny`.
+Assigning a record to another employee is denied until you allow it, a delete asks first, and methods that message
+people, publish or start the portal's automation are denied, reads too. A stage change can start the portal's own
+robots, which may write to your clients: set `permissions.deals.move` to `ask` if your portal has such robots.
+`B24_READ_ONLY=1` refuses every write.
+
+More: [settings](docs/configuration.md#permissions), [security](docs/security.md).
+
+## Limits
+
+- The portal allows about 2 requests a second for all its apps together; `b24` keeps to that pace.
+- `people`, `organizations`, `products`, `users` and `fields` still ask the portal on every read and refuse
+  `--offline`.
+- Bitrix24 does a repeated write again: on a live portal, a create repeated with the same `Idempotency-Key` made a
+  second record. After an `outcome_unknown`, look at the record before you write it again.
+
+## Security
+
+The webhook address is the password: anyone who has it can do what its employee can. `b24` keeps it in the system
+keyring and never prints it, in output, errors or run records. Report a vulnerability as [SECURITY.md](SECURITY.md)
+says.
+
+## When it does not work
+
+Start with `b24 doctor`, then [troubleshooting](docs/troubleshooting.md).
+
+## Documentation
+
+- [Install](docs/installation.md) · [Use it](docs/usage.md) · [Settings](docs/configuration.md) ·
+  [Security](docs/security.md) · [Commands](docs/commands.md) · [Troubleshooting](docs/troubleshooting.md)
+- The design: [docs/dev/DESIGN.md](docs/dev/DESIGN.md).
+
+## Part of WireCat
+
+`b24` is one of the [WireCat](https://wirecat.dev) tools. They share one local store, so `search all` and an agent see
+your CRM beside your messages, mail, notes and meetings.
+
+## License
+
+[Apache-2.0](LICENSE).

package/dist/api-keys.d.ts

@@ -1,5 +1,8 @@
+import type { DealKind } from "@wirecat/cli-core";
+import type { CrmVerb } from "@wirecat/cli-core/crm";
 import type { Level } from "@wirecat/cli-core/sends";
 import { type Effect } from "./bitrix/methods.js";
+import { type Body } from "./body.js";
 export declare const apiKey: (method: string) => string;
 /**
  * Families whose writes reach people, publish, or start the portal's own automation: messages and notifications (im,
@@ -11,31 +14,33 @@ export declare const apiKey: (method: string) => string;
 export declare const DENIED_FAMILIES: string[];
 /** Bitrix24 takes a method in any letter case and with a `.json` suffix; one name keeps the keys from being dodged. */
 export declare const normalMethod: (raw: string) => string;
-/** A field in any letter case, with or without underscores: Bitrix24 takes both `stageId` and `STAGE_ID`. */
-export declare const fieldOf: (record: Record<string, unknown>, name: string) => unknown;
-export declare const fieldsOf: (body: Record<string, unknown>) => Record<string, unknown>;
+/** A field in any letter case, with or without underscores: `parseBody` has refused a body that spells one twice. */
+export declare const fieldOf: (record: Body, name: string) => unknown;
+export declare const fieldsOf: (body: Body) => Record<string, unknown>;
 /** The employee a write assigns the record to, by any spelling of `assignedById`. */
-export declare const assigneeOf: (fields: Record<string, unknown>) => string | undefined;
+export declare const assigneeOf: (fields: Body) => string | undefined;
 /** Whether a write changes a deal's or a lead's stage: `stageId`, or a lead's REST 2 `STATUS_ID`. */
 export declare const setsStage: (type: string, fields: Record<string, unknown>) => boolean;
+/** What `api call` sends, checked once: the body `parseBody` gave, its `fields` an object and its type a number. */
+export declare const checkCall: (method: string, body: Body) => void;
 /**
- * The command keys a raw call does the same as, so `api call` cannot get round `deals.update: deny` (gcal-cli's
- * `WRITE_METHODS`). A create or update that sets a stage is a move too.
+ * The command keys a raw call does the same as, so `api call` cannot get round `deals: deny` (gcal-cli's
+ * `WRITE_METHODS`, WC-PERM-22). A create or update that sets a stage is a move too.
  */
-export declare const commandKeysOf: (method: string, body?: Record<string, unknown>) => string[];
-/** The command keys a CRM write command checks beside its own: `.move` when its fields set a stage. */
-export declare const stageKeysOf: (noun: string, fields: Record<string, unknown>) => string[];
+export declare const commandKeysOf: (method: string, body?: Body) => string[];
 /**
  * A method's default, as WC-PERM-22 has it, from an allow list: the reads `b24` makes and the CRM writes the command
  * keys govern are allowed, a delete and anything else asks, and the families that reach people are denied, reads too.
  */
-export declare const apiDefault: (method: string, effect?: Effect, body?: Record<string, unknown>) => Level;
+export declare const apiDefault: (method: string, effect?: Effect, body?: Body) => Level;
 /** The built-in levels with this call's own key, which the static table cannot list for every method. */
-export declare const callDefaults: (method: string, effect: Effect, body: Record<string, unknown>, defaults: Readonly<Record<string, Level>>) => Record<string, Level>;
+export declare const callDefaults: (method: string, effect: Effect, body: Body, defaults: Readonly<Record<string, Level>>) => Record<string, Level>;
 /**
- * The other way round: the `api.*` key a CRM write command's own request checks, so `api.crm.deal.update: deny` holds
- * on `deals update` too. Both the run and its `--dry-run` preview read it.
+ * The `api.*` key a deal's or lead's write sends its request under, so `api.crm.deal.update: deny` holds on `deals
+ * update` too: core's `CrmWrites.alsoChecks` and, through `crmAlsoChecks`, its `--dry-run`.
  */
+export declare const crmApiKeys: (kind: DealKind, verb: CrmVerb) => string[];
+/** The same for b24's own `people` and `organizations` writes, by command path. */
 export declare const apiKeysOf: (path: readonly string[]) => string[];
 /** The keys `permissions` may name for `api`: the known methods and the denied families. */
 export declare const API_KEYS: string[];

package/dist/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,KAAK,MAAM,EAA2B,MAAM,qBAAqB,CAAA;AAE1E,eAAO,MAAM,MAAM,WAAY,MAAM,KAAG,MAAyB,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,UAoB3B,CAAA;AAQD,uHAAuH;AACvH,eAAO,MAAM,YAAY,QAAS,MAAM,KAAG,MAAkD,CAAA;AAE7F,6GAA6G;AAC7G,eAAO,MAAM,OAAO,WAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,KAAG,OAIvE,CAAA;AAED,eAAO,MAAM,QAAQ,SAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAG9E,CAAA;AAED,qFAAqF;AACrF,eAAO,MAAM,UAAU,WAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,GAAG,SAGrE,CAAA;AAED,qGAAqG;AACrG,eAAO,MAAM,SAAS,SAAU,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAEoC,CAAA;AAgB9G;;;GAGG;AACH,eAAO,MAAM,aAAa,WAAY,MAAM,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAQ,MAAM,EAOxF,CAAA;AAED,uGAAuG;AACvG,eAAO,MAAM,WAAW,SAAU,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAGjF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,WACb,MAAM,WACN,MAAM,SACR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,KAKF,CAAA;AAED,yGAAyG;AACzG,eAAO,MAAM,YAAY,WACf,MAAM,UACN,MAAM,QACR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KACxC,MAAM,CAAC,MAAM,EAAE,KAAK,CAA0E,CAAA;AAIjG;;;GAGG;AACH,eAAO,MAAM,SAAS,SAAU,SAAS,MAAM,EAAE,KAAG,MAAM,EAKzD,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,QAAQ,UAAoF,CAAA;AAEzG,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAQ9C,CAAA"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,KAAK,MAAM,EAA2B,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAkC,MAAM,WAAW,CAAA;AAErE,eAAO,MAAM,MAAM,WAAY,MAAM,KAAG,MAAyB,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,UAoB3B,CAAA;AAQD,uHAAuH;AACvH,eAAO,MAAM,YAAY,QAAS,MAAM,KAAG,MAAkD,CAAA;AAE7F,qHAAqH;AACrH,eAAO,MAAM,OAAO,WAAY,IAAI,QAAQ,MAAM,KAAG,OAIpD,CAAA;AAED,eAAO,MAAM,QAAQ,SAAU,IAAI,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAG3D,CAAA;AAED,qFAAqF;AACrF,eAAO,MAAM,UAAU,WAAY,IAAI,KAAG,MAAM,GAAG,SAGlD,CAAA;AAED,qGAAqG;AACrG,eAAO,MAAM,SAAS,SAAU,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAEoC,CAAA;AAoB9G,oHAAoH;AACpH,eAAO,MAAM,SAAS,WAAY,MAAM,QAAQ,IAAI,KAAG,IAMtD,CAAA;AAoCD;;;GAGG;AACH,eAAO,MAAM,aAAa,WAAY,MAAM,SAAQ,IAAI,KAAQ,MAAM,EASrE,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,WAAY,MAAM,WAAU,MAAM,SAAkC,IAAI,KAAQ,KAKtG,CAAA;AAED,yGAAyG;AACzG,eAAO,MAAM,YAAY,WACf,MAAM,UACN,MAAM,QACR,IAAI,YACA,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KACxC,MAAM,CAAC,MAAM,EAAE,KAAK,CAA0E,CAAA;AAUjG;;;GAGG;AACH,eAAO,MAAM,UAAU,SAAU,QAAQ,QAAQ,OAAO,KAAG,MAAM,EAA8C,CAAA;AAI/G,mFAAmF;AACnF,eAAO,MAAM,SAAS,SAAU,SAAS,MAAM,EAAE,KAAG,MAAM,EAKzD,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,QAAQ,UAAoF,CAAA;AAEzG,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAQ9C,CAAA"}

package/dist/api-keys.js

@@ -1,4 +1,6 @@
+import { CliError } from "@wirecat/cli-base";
 import { KNOWN_METHODS, methodOf } from "./bitrix/methods.js";
+import { foldCode, isRecord, jsonNumber } from "./body.js";
 export const apiKey = (method) => `api.${method}`;
 /**
  * Families whose writes reach people, publish, or start the portal's own automation: messages and notifications (im,
@@ -33,15 +35,15 @@ const READ_FAMILIES = ["crm", "catalog", "user", "profile", "methods", "method",
 const inFamily = (families, method) => families.some((family) => method === family || method.startsWith(`${family}.`));
 /** Bitrix24 takes a method in any letter case and with a `.json` suffix; one name keeps the keys from being dodged. */
 export const normalMethod = (raw) => raw.toLowerCase().replace(/\.json$/, "");
-/** A field in any letter case, with or without underscores: Bitrix24 takes both `stageId` and `STAGE_ID`. */
+/** A field in any letter case, with or without underscores: `parseBody` has refused a body that spells one twice. */
 export const fieldOf = (record, name) => {
-    const wanted = name.toLowerCase();
-    const found = Object.keys(record).find((one) => one.replaceAll("_", "").toLowerCase() === wanted);
+    const wanted = foldCode(name);
+    const found = Object.keys(record).find((one) => foldCode(one) === wanted);
     return found === undefined ? undefined : record[found];
 };
 export const fieldsOf = (body) => {
     const fields = fieldOf(body, "fields");
-    return typeof fields === "object" && fields !== null ? fields : {};
+    return isRecord(fields) ? fields : {};
 };
 /** The employee a write assigns the record to, by any spelling of `assignedById`. */
 export const assigneeOf = (fields) => {
@@ -55,34 +57,80 @@ const NOUNS = { deal: "deals", lead: "leads", contact: "people", company: "organ
 const ACTIONS = { add: "create", update: "update", delete: "delete" };
 /** `crm.item.*`'s `entityTypeId` for the four types the commands cover (apidocs "crm.item.add"). */
 const ENTITY_TYPES = { "1": "lead", "2": "deal", "3": "contact", "4": "company" };
-/** The CRM type and action a raw write does, whether named `crm.deal.update` or `crm.item.update` with its type id. */
-const crmWriteOf = (method, body) => {
-    const named = /^crm\.(deal|lead|contact|company)\.(add|update|delete)$/.exec(method);
+const refused = (message) => new CliError("validation_error", message, { param: "--body", reason: "body.invalid", sent: false });
+/** `"02"`, `" 2"` or `"2.0"` would name no type here while the portal may read them as deals: only digits pass. */
+const entityTypeOf = (body) => {
+    const given = fieldOf(body, "entityTypeId");
+    if (given === undefined)
+        return undefined;
+    const digits = jsonNumber(given) ?? (typeof given === "string" ? given : typeof given === "number" ? String(given) : "");
+    if (!/^(0|[1-9][0-9]*)$/.test(digits))
+        throw refused("entityTypeId takes the type's number, such as 2 for deals");
+    return digits;
+};
+/** What `api call` sends, checked once: the body `parseBody` gave, its `fields` an object and its type a number. */
+export const checkCall = (method, body) => {
+    entityTypeOf(body);
+    const fields = fieldOf(body, "fields");
+    if (fields !== undefined && !isRecord(fields))
+        throw refused("fields takes a JSON object of field names and values");
+    if (/^crm\.item\.(add|update|delete|get|list|fields)$/.test(method) && fieldOf(body, "entityTypeId") === undefined)
+        throw refused(`${method} needs entityTypeId, the record type's number`);
+};
+const typeOf = (method, body) => {
+    const named = /^crm\.(deal|lead|contact|company)\.(.+)$/.exec(method);
     if (named?.[1] && named[2])
         return { type: named[1], action: named[2] };
-    const item = /^crm\.item\.(add|update|delete)$/.exec(method);
-    const type = ENTITY_TYPES[String(fieldOf(body, "entityTypeId"))];
+    const item = /^crm\.item\.(.+)$/.exec(method);
+    const type = ENTITY_TYPES[entityTypeOf(body) ?? ""];
     return item?.[1] && type ? { type, action: item[1] } : undefined;
 };
+/** The CRM type and action a raw write does, whether named `crm.deal.update` or `crm.item.update` with its type id. */
+const crmWriteOf = (method, body) => {
+    const found = typeOf(method, body);
+    return found && Object.hasOwn(ACTIONS, found.action) ? found : undefined;
+};
+/** The command a raw read reads the same as; any other read of a type, such as its product rows, is its list. */
+const readKeysOf = (method, body) => {
+    const crm = typeOf(method, body);
+    if (crm) {
+        const noun = NOUNS[crm.type];
+        if (crm.action === "get")
+            return [`${noun}.show`];
+        return /^(fields$|field\.|userfield\.)/.test(crm.action) ? ["fields.list"] : [`${noun}.list`];
+    }
+    // `crm.item.productrow.*` names its record by ownerType in the filter, not entityTypeId (apidocs).
+    if (method.startsWith("crm.item.") && fieldOf(body, "entityTypeId") === undefined)
+        return Object.values(NOUNS).map((noun) => `${noun}.list`);
+    const product = /^(?:crm|catalog)\.product\.(.+)$/.exec(method);
+    if (product)
+        return [product[1] === "get" ? "products.show" : "products.list"];
+    // `users list` and `users show` both read through user.get.
+    if (method === "user.get" || method === "user.search")
+        return ["users.list", "users.show"];
+    if (method.startsWith("crm.category."))
+        return ["pipelines.list"];
+    if (method.startsWith("crm.status."))
+        return ["stages.list"];
+    return [];
+};
 /**
- * The command keys a raw call does the same as, so `api call` cannot get round `deals.update: deny` (gcal-cli's
- * `WRITE_METHODS`). A create or update that sets a stage is a move too.
+ * The command keys a raw call does the same as, so `api call` cannot get round `deals: deny` (gcal-cli's
+ * `WRITE_METHODS`, WC-PERM-22). A create or update that sets a stage is a move too.
  */
 export const commandKeysOf = (method, body = {}) => {
+    if (methodOf(method).effect === "read")
+        return readKeysOf(method, body);
     const write = crmWriteOf(method, body);
     if (!write)
         return [];
     const noun = NOUNS[write.type];
     const keys = [`${noun}.${ACTIONS[write.action]}`];
+    // Without a lookup a stage may be a won or lost one, so both the move and the close key are checked.
     if (write.action !== "delete" && setsStage(write.type, fieldsOf(body)))
-        keys.push(`${noun}.move`);
+        keys.push(`${noun}.move`, `${noun}.close`);
     return keys;
 };
-/** The command keys a CRM write command checks beside its own: `.move` when its fields set a stage. */
-export const stageKeysOf = (noun, fields) => {
-    const type = Object.keys(NOUNS).find((one) => NOUNS[one] === noun) ?? "";
-    return setsStage(type, fields) ? [`${noun}.move`] : [];
-};
 /**
  * A method's default, as WC-PERM-22 has it, from an allow list: the reads `b24` makes and the CRM writes the command
  * keys govern are allowed, a delete and anything else asks, and the families that reach people are denied, reads too.
@@ -98,15 +146,24 @@ export const apiDefault = (method, effect = methodOf(method).effect, body = {})
 };
 /** The built-in levels with this call's own key, which the static table cannot list for every method. */
 export const callDefaults = (method, effect, body, defaults) => ({ ...defaults, [apiKey(method)]: apiDefault(method, effect, body) });
-const METHODS_OF_COMMANDS = { create: "add", update: "update", move: "update" };
+const METHODS = {
+    create: "add",
+    update: "update",
+    move: "update",
+    close: "update",
+    remove: "delete",
+};
 /**
- * The other way round: the `api.*` key a CRM write command's own request checks, so `api.crm.deal.update: deny` holds
- * on `deals update` too. Both the run and its `--dry-run` preview read it.
+ * The `api.*` key a deal's or lead's write sends its request under, so `api.crm.deal.update: deny` holds on `deals
+ * update` too: core's `CrmWrites.alsoChecks` and, through `crmAlsoChecks`, its `--dry-run`.
  */
+export const crmApiKeys = (kind, verb) => [apiKey(`crm.${kind}.${METHODS[verb]}`)];
+const OWN_WRITES = { people: "contact", organizations: "company" };
+/** The same for b24's own `people` and `organizations` writes, by command path. */
 export const apiKeysOf = (path) => {
     const [noun, command, ...rest] = path;
-    const type = Object.keys(NOUNS).find((one) => NOUNS[one] === noun);
-    const method = METHODS_OF_COMMANDS[command ?? ""];
+    const type = OWN_WRITES[noun ?? ""];
+    const method = command === "create" ? "add" : command === "update" ? "update" : undefined;
     return type && method && rest.length === 0 ? [apiKey(`crm.${type}.${method}`)] : [];
 };
 /** The keys `permissions` may name for `api`: the known methods and the denied families. */

package/dist/api-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,aAAa,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE1E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,OAAO,MAAM,EAAE,CAAA;AAEjE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI;IACJ,aAAa;IACb,OAAO;IACP,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,OAAO;IACP,MAAM;IACN,UAAU;IACV,2BAA2B;IAC3B,6BAA6B;IAC7B,YAAY;IACZ,OAAO;CACR,CAAA;AAED,qHAAqH;AACrH,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;AAEpH,MAAM,QAAQ,GAAG,CAAC,QAA2B,EAAE,MAAc,EAAE,EAAE,CAC/D,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAA;AAEjF,uHAAuH;AACvH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AAE7F,6GAA6G;AAC7G,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAA+B,EAAE,IAAY,EAAW,EAAE;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IACjG,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAA6B,EAA2B,EAAE;IACjF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACtC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAA;AACjG,CAAC,CAAA;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAA+B,EAAsB,EAAE;IAChF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1E,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,MAA+B,EAAW,EAAE,CAClF,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;IACpC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAA;AAE9G,MAAM,KAAK,GAA2B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;AACnH,MAAM,OAAO,GAA2B,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7F,oGAAoG;AACpG,MAAM,YAAY,GAA2B,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;AAEzG,uHAAuH;AACvH,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,IAA6B,EAAE,EAAE;IACnE,MAAM,KAAK,GAAG,yDAAyD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpF,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;IAChE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAClE,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,IAAI,GAA4B,EAAE,EAAY,EAAE;IAC5F,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IACjG,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,MAA+B,EAAY,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAA;IACxE,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxD,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAAc,EACd,MAAM,GAAW,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EACxC,IAAI,GAA4B,EAAE,EAC3B,EAAE;IACT,IAAI,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACpD,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC/E,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AACnD,CAAC,CAAA;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAc,EACd,MAAc,EACd,IAA6B,EAC7B,QAAyC,EAClB,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;AAEjG,MAAM,mBAAmB,GAA2B,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAEvG;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAY,EAAE;IAC7D,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;IACjD,OAAO,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACrF,CAAC,CAAA;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AAEzG,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,GAAG,MAAM,CAAC,WAAW,CACnB,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACvF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAChB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;KACjC,CAAC,CACH;IACD,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAe,CAAC,CAAC,CAAC;CAC1F,CAAA"}
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAI5C,OAAO,EAAe,aAAa,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAa,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAErE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,OAAO,MAAM,EAAE,CAAA;AAEjE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI;IACJ,aAAa;IACb,OAAO;IACP,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,OAAO;IACP,MAAM;IACN,UAAU;IACV,2BAA2B;IAC3B,6BAA6B;IAC7B,YAAY;IACZ,OAAO;CACR,CAAA;AAED,qHAAqH;AACrH,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;AAEpH,MAAM,QAAQ,GAAG,CAAC,QAA2B,EAAE,MAAc,EAAE,EAAE,CAC/D,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAA;AAEjF,uHAAuH;AACvH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AAE7F,qHAAqH;AACrH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAY,EAAE,IAAY,EAAW,EAAE;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAA;IACzE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAU,EAA2B,EAAE;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACtC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;AACvC,CAAC,CAAA;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAY,EAAsB,EAAE;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1E,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,MAA+B,EAAW,EAAE,CAClF,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;IACpC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAA;AAE9G,MAAM,KAAK,GAA2B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;AACnH,MAAM,OAAO,GAA2B,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7F,oGAAoG;AACpG,MAAM,YAAY,GAA2B,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;AAEzG,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAClC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAErG,mHAAmH;AACnH,MAAM,YAAY,GAAG,CAAC,IAAU,EAAsB,EAAE;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,MAAM,GACV,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC3G,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,OAAO,CAAC,2DAA2D,CAAC,CAAA;IACjH,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,oHAAoH;AACpH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,IAAU,EAAQ,EAAE;IAC5D,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACtC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,OAAO,CAAC,sDAAsD,CAAC,CAAA;IACpH,IAAI,kDAAkD,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,SAAS;QAChH,MAAM,OAAO,CAAC,GAAG,MAAM,+CAA+C,CAAC,CAAA;AAC3E,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,IAAU,EAAE,EAAE;IAC5C,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACnD,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAClE,CAAC,CAAA;AAED,uHAAuH;AACvH,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,IAAU,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAClC,OAAO,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC,CAAA;AAED,iHAAiH;AACjH,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,IAAU,EAAY,EAAE;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;QACjD,OAAO,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IAC/F,CAAC;IACD,mGAAmG;IACnG,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,SAAS;QAC/E,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/D,IAAI,OAAO;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAC9E,4DAA4D;IAC5D,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAC1F,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,OAAO,EAAE,CAAA;AACX,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,IAAI,GAAS,EAAE,EAAY,EAAE;IACzE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjD,qGAAqG;IACrG,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAA;IAClH,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,MAAM,GAAW,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,GAAS,EAAE,EAAS,EAAE;IAC7G,IAAI,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACpD,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC/E,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AACnD,CAAC,CAAA;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAc,EACd,MAAc,EACd,IAAU,EACV,QAAyC,EAClB,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;AAEjG,MAAM,OAAO,GAA4B;IACvC,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAc,EAAE,IAAa,EAAY,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AAE/G,MAAM,UAAU,GAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAA;AAE1F,mFAAmF;AACnF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAY,EAAE;IAC7D,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,OAAO,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACrF,CAAC,CAAA;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AAEzG,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,GAAG,MAAM,CAAC,WAAW,CACnB,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACvF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAChB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;KACjC,CAAC,CACH;IACD,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAe,CAAC,CAAC,CAAC;CAC1F,CAAA"}

package/dist/bin/b24.js

@@ -9,7 +9,7 @@ if (
   (words[0] === "--version" || words[0] === "-V") &&
   !Object.keys(process.env).some((key) => key.endsWith("_TEST_ARGV_LOG"))
 ) {
-  process.stdout.write("0.4.0\n")
+  process.stdout.write("0.5.0\n")
 } else {
   // Before the bundle compiles: the bundle's own call comes after its chunks.
   module.enableCompileCache()
@@ -28,7 +28,7 @@ if (
           : next(specifier, context),
     })
   }
-  const chunks = ["../bundle/all-profiles-MBQZCOVK.js","../bundle/anthropic-QCYLKSJJ.js","../bundle/app-server-FSLZ2Y6N.js","../bundle/bun-UYRQXF33.js","../bundle/bun-sqlite-GXME7EMT.js","../bundle/decode-IF2F2SFC.js","../bundle/dist-6Y64DTOE.js","../bundle/echarts-WDDVEJO2.js","../bundle/embed-VDUGYEAR.js","../bundle/embedder-DUN62H3Z.js","../bundle/first-screen-QAVKP5RF.js","../bundle/instructions-JIIKWS7X.js","../bundle/mcp-33JX6KP4.js","../bundle/mcp-57EQ6QJO.js","../bundle/mcp-PFJER2DE.js","../bundle/node-K57WT42O.js","../bundle/node-P4E63KXA.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-KS6ORRIG.js","../bundle/oauth-SLSANN37.js","../bundle/open-WJPHADEX.js","../bundle/openai-HXB3GTOD.js","../bundle/process-P73TFAXT.js","../bundle/program-7BMG5NIN.js","../bundle/prompt-WDPV37R4.js","../bundle/recognize-CXIFL6IV.js","../bundle/remote-Q4VJ4OQW.js","../bundle/rerank-SUFYK63I.js","../bundle/serve-B7PGFOC2.js","../bundle/server-4DBNJWW6.js","../bundle/server-OKE7SXJ2.js","../bundle/state-EZCCXQV7.js","../bundle/store-MZ7JBYR6.js","../bundle/store-maintenance-command-T5QZMENJ.js"]
+  const chunks = ["../bundle/all-profiles-CANIDIDS.js","../bundle/anthropic-JUJB4DCF.js","../bundle/app-server-3V5Z4PTK.js","../bundle/bun-LKMV5TY7.js","../bundle/bun-sqlite-S56EF74S.js","../bundle/decode-QSTBX4MG.js","../bundle/dist-6Y64DTOE.js","../bundle/echarts-JZELFH2N.js","../bundle/embed-4RIW2LVH.js","../bundle/embedder-SW7DTWSL.js","../bundle/first-screen-NMHNFZ2B.js","../bundle/instructions-BZE5YUGG.js","../bundle/mcp-SDWHDJTY.js","../bundle/node-KM3CUABH.js","../bundle/node-LTKZIO4U.js","../bundle/node-TLZSIHIJ.js","../bundle/node-sqlite-HQ5PN2RH.js","../bundle/oauth-UH6FOZQL.js","../bundle/open-TSUP3XGL.js","../bundle/openai-GVEE52E3.js","../bundle/process-AGXY76ZE.js","../bundle/program-BI4A4HFJ.js","../bundle/prompt-NRSUY7FA.js","../bundle/recognize-NPDPQ6PJ.js","../bundle/remote-HFASMVLB.js","../bundle/rerank-TL6Z6F7K.js","../bundle/serve-VB4DHDZQ.js","../bundle/server-T5EDRPJI.js","../bundle/server-Z6MW6C37.js","../bundle/source-4IGO5J7E.js","../bundle/sqlite-runtime-YS4POY3W.js","../bundle/state-ISZVVZGR.js","../bundle/store-IZJBAKJV.js","../bundle/store-L76MSQC3.js","../bundle/store-PBTIB7BD.js","../bundle/store-maintenance-command-YFKII7TF.js","../bundle/writer-3O5EYMFE.js"]
   if (((words) => words
     .filter((word) => !word.startsWith("-"))
     .slice(0, 2)

package/dist/bitrix/errors.js

@@ -65,7 +65,7 @@ export const bitrixError = (method, status, body, { now = Date.now(), waitMs } =
     if (code && NOT_FOUND.has(code))
         return as("not_found", `${method}: Bitrix24 has no such record${named}`);
     if (code === "BITRIX_REST_V3_EXCEPTION_IDEMPOTENCYKEYREUSEDEXCEPTION")
-        return as("conflict", `${method}: this --operation-id was already used for a different request; leave it out for a new write`, { reason: "operation.reused" });
+        return as("conflict", `${method}: Bitrix24 refused this write's operation id as already used for a different request`, { reason: "operation.reused" });
     const fields = fieldsOf(body);
     if (status === 400 || code?.startsWith("BITRIX_REST_V3_EXCEPTION_"))
         return as("validation_error", `Bitrix24 refused ${method}${named}${fields.length ? `; check ${fields.join(", ")}` : ""}`, fields.length ? { fields } : {});

package/dist/bitrix/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/bitrix/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAEtE,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,KAAK,CAAA;AACjC,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAA;AACtH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC,CAAA;AACpG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,gDAAgD,CAAC,CAAC,CAAA;AAChH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC,CAAA;AAS5F,MAAM,IAAI,GAAG,uBAAuB,CAAA;AAEpC,8GAA8G;AAC9G,MAAM,MAAM,GAAG,CAAC,IAA+B,EAAsB,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAA;IAClG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAA;IACvE,sEAAsE;IACtE,IAAI,GAAG,KAAK,EAAE,IAAI,OAAO,IAAI,EAAE,iBAAiB,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACjH,OAAO,WAAW,CAAA;IACpB,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAA+B,EAAY,EAAE;IAC7D,MAAM,UAAU,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAA;IACzC,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAA2B,EAAE,KAAK,CAAC;SACjD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;AAC1G,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,IAA+B,EAAE,GAAW,EAAE,EAAE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAA;AAC9F,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAc,EACd,MAAc,EACd,IAA+B,EAC/B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAkD,EAAE,EACtE,EAAE;IACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACzB,MAAM,OAAO,GAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACzG,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACtC,MAAM,EAAE,GAAG,CAAC,SAAoB,EAAE,OAAe,EAAE,IAAI,GAAoB,EAAE,EAAE,EAAE,CAC/E,IAAI,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAE3D,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,qCAAqC,MAAM,yCAAyC,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,mBAAmB;YAC7C,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,kBAAkB,MAAM,4DAA4D,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;YACpD,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,sBAAsB,EAAE;YACnG,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAA;IACpG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC9C,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;IACtH,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC/C,OAAO,EAAE,CACP,sBAAsB,EACtB,gCAAgC,KAAK,0DAA0D,EAC/F,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC9B,CAAA;IACH,IAAI,IAAI,KAAK,wBAAwB;QACnC,OAAO,EAAE,CACP,WAAW,EACX,0BAA0B,MAAM,+DAA+D,EAC/F,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC7B,CAAA;IACH,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,MAAM,gCAAgC,KAAK,EAAE,CAAC,CAAA;IACzG,IAAI,IAAI,KAAK,wDAAwD;QACnE,OAAO,EAAE,CACP,UAAU,EACV,GAAG,MAAM,8FAA8F,EACvG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAC/B,CAAA;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,UAAU,CAAC,2BAA2B,CAAC;QACjE,OAAO,EAAE,CACP,kBAAkB,EAClB,oBAAoB,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAChC,CAAA;IACH,IAAI,MAAM,IAAI,GAAG;QACf,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACnH,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,MAAM,GAAG,KAAK,EAAE,CAAC,CAAA;AAC1G,CAAC,CAAA"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/bitrix/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAEtE,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,KAAK,CAAA;AACjC,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAA;AACtH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC,CAAA;AACpG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,gDAAgD,CAAC,CAAC,CAAA;AAChH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC,CAAA;AAS5F,MAAM,IAAI,GAAG,uBAAuB,CAAA;AAEpC,8GAA8G;AAC9G,MAAM,MAAM,GAAG,CAAC,IAA+B,EAAsB,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAA;IAClG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAA;IACvE,sEAAsE;IACtE,IAAI,GAAG,KAAK,EAAE,IAAI,OAAO,IAAI,EAAE,iBAAiB,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACjH,OAAO,WAAW,CAAA;IACpB,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAA+B,EAAY,EAAE;IAC7D,MAAM,UAAU,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAA;IACzC,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAA2B,EAAE,KAAK,CAAC;SACjD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;AAC1G,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,IAA+B,EAAE,GAAW,EAAE,EAAE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAA;AAC9F,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAc,EACd,MAAc,EACd,IAA+B,EAC/B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAkD,EAAE,EACtE,EAAE;IACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACzB,MAAM,OAAO,GAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACzG,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACtC,MAAM,EAAE,GAAG,CAAC,SAAoB,EAAE,OAAe,EAAE,IAAI,GAAoB,EAAE,EAAE,EAAE,CAC/E,IAAI,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;IAE3D,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,qCAAqC,MAAM,yCAAyC,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,mBAAmB;YAC7C,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,sBAAsB;QACjC,OAAO,EAAE,CAAC,cAAc,EAAE,kBAAkB,MAAM,4DAA4D,EAAE;YAC9G,cAAc,EAAE,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;YACpD,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,sBAAsB,EAAE;YACnG,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAA;IACJ,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAA;IACpG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC9C,OAAO,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;IACtH,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,GAAG;QAC/C,OAAO,EAAE,CACP,sBAAsB,EACtB,gCAAgC,KAAK,0DAA0D,EAC/F,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC9B,CAAA;IACH,IAAI,IAAI,KAAK,wBAAwB;QACnC,OAAO,EAAE,CACP,WAAW,EACX,0BAA0B,MAAM,+DAA+D,EAC/F,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC7B,CAAA;IACH,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,MAAM,gCAAgC,KAAK,EAAE,CAAC,CAAA;IACzG,IAAI,IAAI,KAAK,wDAAwD;QACnE,OAAO,EAAE,CACP,UAAU,EACV,GAAG,MAAM,sFAAsF,EAC/F,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAC/B,CAAA;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,UAAU,CAAC,2BAA2B,CAAC;QACjE,OAAO,EAAE,CACP,kBAAkB,EAClB,oBAAoB,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAChC,CAAA;IACH,IAAI,MAAM,IAAI,GAAG;QACf,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACnH,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,MAAM,GAAG,KAAK,EAAE,CAAC,CAAA;AAC1G,CAAC,CAAA"}

package/dist/bitrix/transport.d.ts

@@ -16,7 +16,7 @@ export interface BitrixTransportOptions {
     random?: () => number;
 }
 export interface CallOptions {
-    /** A write's operation id, sent as REST 3.0's `Idempotency-Key`, so the owner can repeat it by hand. */
+    /** A write's operation id, sent as REST 3.0's `Idempotency-Key`; a live portal still did a repeat again. */
     idempotencyKey?: string;
 }
 /** REST 2 lists carry `total` and `next` beside `result`; REST 3.0 answers carry neither. */

package/dist/bitrix/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/bitrix/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EAEf,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAA2B,KAAK,SAAS,EAAkC,MAAM,uBAAuB,CAAA;AAC/G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAGpD,OAAO,EAAa,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAQtD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE7E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,uGAAuG;IACvG,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,wGAAwG;IACxG,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,qBAAa,eAAe;;IAW1B,YAAY,OAAO,EAAE,sBAAsB,EAU1C;IAED,wCAAwC;IACxC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqBjH;CA0HF"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/bitrix/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EAEf,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAA2B,KAAK,SAAS,EAAkC,MAAM,uBAAuB,CAAA;AAC/G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAGpD,OAAO,EAAa,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAYtD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE7E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,uGAAuG;IACvG,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,4GAA4G;IAC5G,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,qBAAa,eAAe;;IAW1B,YAAY,OAAO,EAAE,sBAAsB,EAU1C;IAED,wCAAwC;IACxC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqBjH;CAoIF"}

package/dist/bitrix/transport.js

@@ -4,7 +4,11 @@ import { apiJson, currentAttempt, providerEvent, providerRequest } from "@wireca
 import { bitrixError } from "./errors.js";
 import { methodOf } from "./methods.js";
 import { methodUrl } from "./webhook.js";
-const DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * A third of a one-shot command's 30 s deadline (cli-core `DEFAULT_COMMAND_MS`), so a read that timed out can still be
+ * tried again before the command ends. cli-core does not hand the run's remaining time to a transport.
+ */
+const DEFAULT_TIMEOUT_MS = 10_000;
 const LARGEST_ANSWER = 16 * 1024 * 1024;
 const RETRY = { retries: 3, baseDelayMs: 1_000, maxDelayMs: 10_000, maxRetryAfterMs: 30_000 };
 /** A pace wait longer than this ends the run instead of sitting in it, as cli-core's messenger pacing does. */
@@ -142,7 +146,7 @@ export class BitrixTransport {
                 }
                 end({ status: response.status, errorCode: "invalid_response" });
                 if (!response.ok)
-                    throw bitrixError(method, response.status, undefined);
+                    throw this.#refused(method, bitrixError(method, response.status, undefined), run.reads);
                 throw new CliError("invalid_response", `Bitrix24 answered ${method} with something that is not JSON`, {
                     operation: method,
                     status: response.status,
@@ -159,7 +163,7 @@ export class BitrixTransport {
                     errorCode: refusal.code,
                     providerError: String(refusal.details.provider_error ?? ""),
                 });
-                throw refusal;
+                throw this.#refused(method, refusal, run.reads);
             }
             end({ status: response.status });
             return {
@@ -172,12 +176,22 @@ export class BitrixTransport {
             clearTimeout(timer);
         }
     }
+    /** A gateway or server failure may come after a write was made; only a refusal says it was not. */
+    #refused(method, refusal, reads) {
+        if (reads || refusal.code !== "provider_unavailable")
+            return refusal;
+        return new CliError("outcome_unknown", `Bitrix24 failed on ${method}; it may or may not have carried it out`, {
+            ...refusal.details,
+            retryable: false,
+        });
+    }
     #unanswered(method, error, run) {
-        if (this.#signal?.aborted && this.#signal.reason?.name !== "TimeoutError")
-            return new CliError("cancelled", `${method} was cancelled`, { operation: method });
-        // A keyed write's caller names how to repeat it; a REST 2 write has no key to repeat it safely with.
+        // A cut write may have reached the portal: never "cancelled", which a caller would repeat (WC-LIFE-9). A keyed
+        // write's caller names how to repeat it; a REST 2 write has no key to repeat it safely with.
         if (!run.reads)
             return new CliError("outcome_unknown", `${method} got no answer; Bitrix24 may or may not have carried it out${run.key ? "" : " — check before repeating it"}`, { operation: method, retryable: false });
+        if (this.#signal?.aborted && this.#signal.reason?.name !== "TimeoutError")
+            return new CliError("cancelled", `${method} was cancelled`, { operation: method });
         const timedOut = error?.name === "TimeoutError";
         return new CliError(timedOut ? "timeout" : "network_error", timedOut ? `${method} got no answer within ${this.#timeoutMs} ms` : `${method} could not reach Bitrix24`, { operation: method, retryable: true });
     }