test(platform-dump-modes): покрыть db-dump-xml Full/Changes/UpdateInfo на реальной 1С

Постусловие непустого каталога валидировалось только на Full/Partial. Новый 1cv8-тест гоняет Changes (в существующий дамп) и UpdateInfo (в свежий каталог) → подтверждает, что режимы дают реальный выход и постусловие не даёт ложного падения. UpdateInfo проверяется ассертом наличия ConfigDumpInfo.xml. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
fix(db-*,epf-*): точная редактура секретов по значению вместо regex по токену
2026-07-21 12:11:02 +03:00 · 2026-07-19 20:31:45 +03:00 · 2026-07-19 20:28:27 +03:00 · 2026-07-19 20:15:34 +03:00 · 2026-07-19 20:02:42 +03:00 · 2026-07-19 19:50:06 +03:00
397 changed files with 18259 additions and 1137 deletions
@@ -1,4 +1,4 @@
-# cf-edit v1.8 — Edit 1C configuration root (Configuration.xml)
+# cf-edit v1.10 — Edit 1C configuration root (Configuration.xml)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][Alias('Path')][string]$ConfigPath,
@@ -44,6 +44,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -80,10 +90,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cf-edit v1.8 — Edit 1C configuration root (Configuration.xml)
+# cf-edit v1.10 — Edit 1C configuration root (Configuration.xml)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -33,6 +33,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -72,6 +84,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -79,6 +94,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -307,13 +324,49 @@ def parse_batch_value(val):
    return items


-def save_xml_bom(tree, path):
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_bom(tree, path):
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# cfe-borrow v1.8 — Borrow objects from configuration into extension (CFE)
+# cfe-borrow v1.9 — Borrow objects from configuration into extension (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][string]$ExtensionPath,
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cfe-borrow v1.8 — Borrow objects from configuration into extension (CFE)
+# cfe-borrow v1.9 — Borrow objects from configuration into extension (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -349,13 +349,49 @@ def expand_self_closing(container, parent_indent):
        container.text = "\r\n" + parent_indent


-def save_xml_bom(tree, path):
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_bom(tree, path):
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,7 +1,7 @@
 ---
 name: cfe-patch-method
-description: Генерация перехватчика метода в расширении 1С (CFE). Используй когда нужно перехватить метод заимствованного объекта — вставить код до, после или вместо оригинального
-argument-hint: -ExtensionPath <path> -ModulePath "Catalog.X.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
+description: Генерация и актуализация перехватчика метода в расширении 1С (CFE). Используй когда нужно перехватить метод заимствованного объекта — вставить код до, после, вместо оригинала, изменить его тело (ИзменениеИКонтроль) — или актуализировать перехватчик после изменения оригинала
+argument-hint: -ExtensionPath <path> -ConfigPath <path> -ModulePath "Catalog.X.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
 allowed-tools:
  - Bash
  - Read
@@ -10,22 +10,31 @@ allowed-tools:

 # /cfe-patch-method — Генерация перехватчика метода

-Генерирует `.bsl` файл с декоратором перехвата для заимствованного объекта расширения. Создаёт файл или дописывает в существующий.
+Читает оригинал метода из конфигурации-источника и генерирует `.bsl`-перехватчик заимствованного объекта: с правильной директивой контекста, полной сигнатурой, обрамляющими инструкциями препроцессора и областями. Для `ИзменениеИКонтроль` копирует всё тело оригинала. Создаёт файл модуля, дописывает в существующий или актуализирует уже заимствованный метод.

 ## Предусловие

-Объект должен быть заимствован в расширение (`/cfe-borrow`). Скрипт читает `NamePrefix` из `Configuration.xml` расширения для формирования имени процедуры.
+Объект должен быть заимствован в расширение (`/cfe-borrow`). Нужен доступ к исходникам базовой конфигурации (`-ConfigPath`) — оттуда читается оригинал метода. `NamePrefix` берётся из `Configuration.xml` расширения.
+
+### Авто-определение ConfigPath
+
+Если пользователь не указал `-ConfigPath` — попробуй определить автоматически:
+1. Прочитай `.v8-project.json` из корня проекта
+2. Разреши целевую базу (по имени, ветке или `default` — алгоритм из `/db-list`)
+3. Если у базы есть поле `configSrc` — используй как `-ConfigPath`
+4. Если `configSrc` нет — спроси у пользователя

 ## Параметры

 | Параметр | Описание | По умолчанию |
 |----------|----------|--------------|
 | `ExtensionPath` | Путь к расширению (обязат.) | — |
-| `ModulePath` | Путь к модулю (обязат.) | — |
-| `MethodName` | Имя перехватываемого метода (обязат.) | — |
-| `InterceptorType` | `Before` / `After` / `ModificationAndControl` (обязат.) | — |
-| `Context` | Директива контекста | `НаСервере` |
-| `IsFunction` | Метод — функция (добавит `Возврат`) | false |
+| `ConfigPath` | Путь к конфигурации-источнику | обязат., кроме случая, когда `ModulePath` — путь к файлу |
+| `ModulePath` | Логическое имя (`Тип.Имя.Модуль`) **или** путь к файлу модуля `.bsl` | обязат. для генерации |
+| `MethodName` | Имя перехватываемого метода | обязат. для генерации |
+| `InterceptorType` | `Before` / `After` / `Instead` / `ModificationAndControl` | обязат. для генерации |
+| `Check` | Проверить контролируемые методы на дрейф (только отчёт) | — |
+| `Actualize` | Актуализировать дрейфнувшие контролируемые методы | — |

 ## Формат ModulePath

@@ -40,39 +49,97 @@ allowed-tools:

 Аналогично для Report, DataProcessor, InformationRegister и других типов.

+Вместо логического имени в `ModulePath` можно передать **путь к файлу** модуля-источника `.bsl` — тогда `-ConfigPath` указывать не нужно (оригинал читается прямо из этого файла). Путь модуля расширения определяется от типовой папки в пути автоматически.
+
 ## Типы перехвата

-| InterceptorType | Декоратор | Назначение |
-|-----------------|-----------|------------|
-| `Before` | `&Перед` | Код до вызова оригинального метода |
-| `After` | `&После` | Код после вызова оригинального метода |
-| `ModificationAndControl` | `&ИзменениеИКонтроль` | Копия тела метода с маркерами `#Вставка`/`#Удаление` |
+| InterceptorType | Декоратор | Назначение | Применим к |
+|-----------------|-----------|------------|------------|
+| `Before` | `&Перед` | Код до вызова оригинального метода | процедуры |
+| `After` | `&После` | Код после вызова оригинального метода | процедуры |
+| `Instead` | `&Вместо` | Замена метода; в теле — скаффолд `ПродолжитьВызов(...)` | процедуры и функции |
+| `ModificationAndControl` | `&ИзменениеИКонтроль` | Копия тела оригинала для правки маркерами `#Вставка`/`#Удаление` | процедуры и функции |
+
+## Маркеры `#Вставка` / `#Удаление` (для `ModificationAndControl`)
+
+`&ИзменениеИКонтроль` вставляет в перехватчик **копию тела оригинала**. Дальше отредактируй тело под свою доработку, **помечая каждое изменение** — платформа так отличает твою правку от неизменного оригинала:
+
+- **Добавляешь код** → оберни его `#Вставка` … `#КонецВставки`.
+- **Удаляешь код оригинала** → оберни удаляемые строки `#Удаление` … `#КонецУдаления`, но сами строки **оставь между маркерами** (платформа сверяет их с оригиналом).
+- **Заменяешь** → `#Удаление` старое `#КонецУдаления` сразу за ним `#Вставка` новое `#КонецВставки`.
+
+Пример:
+```bsl
+&ИзменениеИКонтроль("ПриЗаписи")
+Процедура Расш_ПриЗаписи(Отказ)
+	СуммаДокумента = РассчитатьСумму();
+#Вставка
+	// доработка: округляем
+	СуммаДокумента = Окр(СуммаДокумента, 2);
+#КонецВставки
+#Удаление
+	Записать();
+#КонецУдаления
+#Вставка
+	ЗаписатьСПроверкой(Отказ);
+#КонецВставки
+КонецПроцедуры
+```
+
+Правила:
+- Маркеры — на **отдельной строке с 0-й колонки** (без отступа), даже внутри отступов и текста запроса (`|…`).
+- **Незамеченные (unmarked) строки должны совпадать с оригиналом дословно** — это и есть «контроль». Если оригинал в конфигурации-источнике изменится, unmarked-контекст разойдётся → метод потребует актуализации (см. ниже; проверить пачкой — `-Check`).
+- Меняешь только свои `#Вставка`/`#Удаление`; чужой оригинал не трогай.
+
+## Актуализация
+
+После изменения оригинала в конфигурации-источнике перехватчик `&ИзменениеИКонтроль` может рассинхронизироваться — unmarked-контекст разойдётся с новым оригиналом. Платформа при загрузке об этом молчит, поэтому актуализируй сам:
+
+- **Проверить** — `-Check`: отчёт по всем контролируемым методам расширения, ничего не пишет (`exit 1`, если есть дрейф или конфликт).
+- **Актуализировать** — `-Actualize`: переносит правки (`#Вставка`/`#Удаление`) на новый оригинал по всему расширению. Сузить область: `-ModulePath` — один модуль, `+ -MethodName` — один метод. Для одного метода то же делает повторный вызов с `-InterceptorType ModificationAndControl`.
+
+Статусы в выводе:
+
+- `[АКТУАЛЕН]` — оригинал не менялся, правок нет;
+- `[АКТУАЛИЗИРОВАН]` — тело обновлено по новому оригиналу, правки сохранены (в выводе — сводка);
+- `[АКТУАЛИЗИРОВАН-ЧАСТИЧНО]` — часть правок не удалось разместить (якорь изменился в новом оригинале). Они помечены `// [РЕСИНК-КОНФЛИКТ]` в модуле и не потеряны; путь к merge-воркспейсу — в выводе (начни с `index.md`, дальше по каждому конфликту его `conflict.md`, размести блоки вручную в `.bsl` расширения);
+- `[ПЕРЕНЕСЕНО В ОСНОВНУЮ]` — правка уже есть в новом оригинале (вставленный код внесён вендором) или удаляемый блок уже вырезан. Правка неактуальна — убирается из тела, дублировать/конфликтовать не нужно. Если так со всеми правками метода — перехватчик можно удалить. `-Check` этим не роняет `exit`.
+
+Повторный вызов `Before`/`After`/`Instead` для уже перехваченного метода дубль не создаёт (`[ПРОПУЩЕН]`).

 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-patch-method.ps1" -ExtensionPath src -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
+powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-patch-method.ps1" -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
 ```

 ## Примеры

 ```powershell
-# Перехват &Перед на сервере
-... -ExtensionPath src -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
+# Код перед записью
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before

-# Перехват &После на клиенте
-... -ExtensionPath src -ModulePath "Document.Заказ.Form.ФормаДокумента" -MethodName "ПослеЗаписиНаСервере" -InterceptorType After -Context "НаКлиенте"
+# Перехват После на форме
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Document.Заказ.Form.ФормаДокумента" -MethodName "ПослеЗаписиНаСервере" -InterceptorType After

-# ИзменениеИКонтроль для функции
-... -ExtensionPath src -ModulePath "CommonModule.ОбщийМодуль" -MethodName "ПолучитьДанные" -InterceptorType ModificationAndControl -IsFunction
+# Замена функции (ПродолжитьВызов)
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "CommonModule.ОбщийМодуль" -MethodName "ПолучитьДанные" -InterceptorType Instead
+
+# ИзменениеИКонтроль — копия тела для правки маркерами
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Document.РеализацияТоваров.ObjectModule" -MethodName "ОбработкаПроведения" -InterceptorType ModificationAndControl
+
+# ModulePath как путь к файлу модуля-источника (без -ConfigPath)
+... -ExtensionPath src\cfe\ИмяРасширения -ModulePath "src\cf\CommonModules\ОбщийМодуль\Ext\Module.bsl" -MethodName "ПолучитьДанные" -InterceptorType Instead
+
+# Проверить все контролируемые методы расширения на дрейф
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -Check
+
+# Актуализировать дрейфнувшие контролируемые методы пачкой
+... -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -Actualize
 ```

-## Генерируемый код (Before)
+## Верификация

-```bsl
-&НаСервере
-&Перед("ПриЗаписи")
-Процедура Расш1_ПриЗаписи()
-	// TODO: код перед вызовом оригинального метода
-КонецПроцедуры
+```
+/cfe-validate <ExtensionPath>
 ```
@@ -930,6 +930,17 @@ if ($script:borrowedFormsWithTree.Count -eq 0) {
 	Report-OK "13. TypeLink: clean"
 }

+# --- Breadcrumb: controlled methods (&ИзменениеИКонтроль) drift is not checked here ---
+$extRootDir = Split-Path $resolvedPath -Parent
+$ctrlCount = 0
+foreach ($bslFile in (Get-ChildItem -Path $extRootDir -Recurse -Filter *.bsl -File -ErrorAction SilentlyContinue)) {
+	$txt = [System.IO.File]::ReadAllText($bslFile.FullName, [System.Text.Encoding]::UTF8)
+	$ctrlCount += ([regex]::Matches($txt, '(?m)^\s*&ИзменениеИКонтроль\(')).Count
+}
+if ($ctrlCount -gt 0) {
+	Out-Line "[INFO]  Контролируемых методов (&ИзменениеИКонтроль): $ctrlCount — их актуальность здесь не проверяется. Сверьте: /cfe-patch-method -Check -ExtensionPath <ext> -ConfigPath <cf>"
+}
+
 # --- Final output ---
 & $finalize

@@ -885,6 +885,21 @@ def main():
    elif check13_ok:
        r.ok('13. TypeLink: clean')

+    # --- Breadcrumb: controlled methods (&ИзменениеИКонтроль) drift is not checked here ---
+    ctrl_count = 0
+    for dp, _dn, files in os.walk(config_dir):
+        for fn in files:
+            if fn.endswith('.bsl'):
+                try:
+                    with open(os.path.join(dp, fn), 'r', encoding='utf-8-sig') as f:
+                        for ln in f:
+                            if re.match(r'^\s*&ИзменениеИКонтроль\(', ln):
+                                ctrl_count += 1
+                except OSError:
+                    pass
+    if ctrl_count > 0:
+        r.out('[INFO]  Контролируемых методов (&ИзменениеИКонтроль): %d — их актуальность здесь не проверяется. Сверьте: /cfe-patch-method -Check -ExtensionPath <ext> -ConfigPath <cf>' % ctrl_count)
+
    # --- Final output ---
    r.finalize(out_file)
    sys.exit(1 if r.errors > 0 else 0)
@@ -1,4 +1,4 @@
-# db-create v1.6 — Create 1C information base
+# db-create v1.7 — Create 1C information base
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -138,6 +138,14 @@ function Invoke-IbcmdProcess {
 }


+function Test-FileIbCreated {
+    # File-infobase postcondition: the platform must have produced a non-empty 1Cv8.1CD.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$IbPath)
+    $f = Join-Path $IbPath "1Cv8.1CD"
+    return (Test-Path $f) -and ((Get-Item $f -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }

 # --- Validate connection ---
@@ -177,8 +185,12 @@ try {
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $ibMissing = ($exitCode -eq 0) -and -not (Test-FileIbCreated $InfoBasePath)
+        if ($ibMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "Information base created successfully: $InfoBasePath" -ForegroundColor Green
+        } elseif ($ibMissing) {
+            Write-Host "Error: exit code 0 but 1Cv8.1CD is missing or empty at $InfoBasePath — information base was not created" -ForegroundColor Red
        } else {
            Write-Host "Error creating information base (code: $exitCode)" -ForegroundColor Red
        }
@@ -221,12 +233,18 @@ try {
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition (file infobase only): exit 0 without a non-empty 1Cv8.1CD is a false success.
+    $ibMissing = ($exitCode -eq 0) -and -not ($InfoBaseServer -and $InfoBaseRef) -and -not (Test-FileIbCreated $InfoBasePath)
+    if ($ibMissing) { $exitCode = 1 }
+
    if ($exitCode -eq 0) {
        if ($InfoBaseServer -and $InfoBaseRef) {
            Write-Host "Information base created successfully: $InfoBaseServer/$InfoBaseRef" -ForegroundColor Green
        } else {
            Write-Host "Information base created successfully: $InfoBasePath" -ForegroundColor Green
        }
+    } elseif ($ibMissing) {
+        Write-Host "Error: exit code 0 but 1Cv8.1CD is missing or empty at $InfoBasePath — information base was not created" -ForegroundColor Red
    } else {
        Write-Host "Error creating information base (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-create v1.6 — Create 1C information base
+# db-create v1.7 — Create 1C information base
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -78,6 +78,13 @@ def resolve_v8path(v8path):
    return v8path


+def file_ib_created(ib_path):
+    """File-infobase postcondition: the platform must have produced a non-empty 1Cv8.1CD.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    f = os.path.join(ib_path, "1Cv8.1CD")
+    return os.path.isfile(f) and os.path.getsize(f) > 0
+
+
 IBCMD_NOUSER_HINT = (
    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
@@ -145,15 +152,25 @@ def main():
        arguments.append(f"--data={ib_data}")
        print(f"Running: ibcmd {' '.join(arguments)}")
        result = run_ibcmd([v8path] + arguments, warn_no_user=False)
-        if result.returncode == 0:
+        exit_code = result.returncode
+        ib_missing = exit_code == 0 and not file_ib_created(args.InfoBasePath)
+        if ib_missing:
+            exit_code = 1
+        if exit_code == 0:
            print(f"Information base created successfully: {args.InfoBasePath}")
+        elif ib_missing:
+            print(
+                f"Error: exit code 0 but 1Cv8.1CD is missing or empty at {args.InfoBasePath} "
+                "— information base was not created",
+                file=sys.stderr,
+            )
        else:
-            print(f"Error creating information base (code: {result.returncode})", file=sys.stderr)
+            print(f"Error creating information base (code: {exit_code})", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
            print(result.stderr, file=sys.stderr)
-        sys.exit(result.returncode)
+        sys.exit(exit_code)

    # --- Temp dir ---
    temp_dir = os.path.join(tempfile.gettempdir(), f"db_create_{random.randint(0, 999999)}")
@@ -196,11 +213,23 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition (file infobase only): exit 0 without a non-empty 1Cv8.1CD is a false success.
+        is_server = bool(args.InfoBaseServer and args.InfoBaseRef)
+        ib_missing = exit_code == 0 and not is_server and not file_ib_created(args.InfoBasePath)
+        if ib_missing:
+            exit_code = 1
+
        if exit_code == 0:
-            if args.InfoBaseServer and args.InfoBaseRef:
+            if is_server:
                print(f"Information base created successfully: {args.InfoBaseServer}/{args.InfoBaseRef}")
            else:
                print(f"Information base created successfully: {args.InfoBasePath}")
+        elif ib_missing:
+            print(
+                f"Error: exit code 0 but 1Cv8.1CD is missing or empty at {args.InfoBasePath} "
+                "— information base was not created",
+                file=sys.stderr,
+            )
        else:
            print(f"Error creating information base (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# db-dump-cf v1.6 — Dump 1C configuration to CF file
+# db-dump-cf v1.9 — Dump 1C configuration to CF file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -76,6 +76,13 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -147,6 +154,13 @@ function Invoke-IbcmdProcess {
 }


+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }

 # --- Validate connection ---
@@ -183,12 +197,16 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "Configuration dumped successfully to: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — configuration was not dumped" -ForegroundColor Red
        } else {
            Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
        }
@@ -224,13 +242,18 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
    if ($exitCode -eq 0) {
        Write-Host "Configuration dumped successfully to: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — configuration was not dumped" -ForegroundColor Red
    } else {
        Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-dump-cf v1.6 — Dump 1C configuration to CF file
+# db-dump-cf v1.9 — Dump 1C configuration to CF file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,21 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -150,17 +165,23 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
-        if result.returncode == 0:
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
            print(f"Configuration dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — configuration was not dumped", file=sys.stderr)
        else:
-            print(f"Error dumping configuration (code: {result.returncode})", file=sys.stderr)
+            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
            print(result.stderr, file=sys.stderr)
-        sys.exit(result.returncode)
+        sys.exit(exit_code)

    # --- Temp dir ---
    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_cf_{random.randint(0, 999999)}")
@@ -194,7 +215,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -203,8 +224,14 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
        if exit_code == 0:
            print(f"Configuration dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — configuration was not dumped", file=sys.stderr)
        else:
            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# db-dump-dt v1.5 — Dump 1C information base to DT file
+# db-dump-dt v1.8 — Dump 1C information base to DT file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -60,6 +60,13 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -131,6 +138,13 @@ function Invoke-IbcmdProcess {
 }


+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }

 # --- Validate connection ---
@@ -163,12 +177,16 @@ try {
        $arguments += "$OutputFile"

        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "Information base dumped successfully to: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — information base was not dumped" -ForegroundColor Red
        } else {
            Write-Host "Error dumping information base (code: $exitCode)" -ForegroundColor Red
        }
@@ -197,13 +215,18 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
    if ($exitCode -eq 0) {
        Write-Host "Information base dumped successfully to: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — information base was not dumped" -ForegroundColor Red
    } else {
        Write-Host "Error dumping information base (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-dump-dt v1.5 — Dump 1C information base to DT file
+# db-dump-dt v1.8 — Dump 1C information base to DT file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,21 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -143,17 +158,23 @@ def main():
        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
-        if result.returncode == 0:
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
            print(f"Information base dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — information base was not dumped", file=sys.stderr)
        else:
-            print(f"Error dumping information base (code: {result.returncode})", file=sys.stderr)
+            print(f"Error dumping information base (code: {exit_code})", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
            print(result.stderr, file=sys.stderr)
-        sys.exit(result.returncode)
+        sys.exit(exit_code)

    # --- Temp dir ---
    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_dt_{random.randint(0, 999999)}")
@@ -181,7 +202,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -190,8 +211,14 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
        if exit_code == 0:
            print(f"Information base dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — information base was not dumped", file=sys.stderr)
        else:
            print(f"Error dumping information base (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# db-dump-xml v1.8 — Dump 1C configuration to XML files
+# db-dump-xml v1.11 — Dump 1C configuration to XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -99,6 +99,13 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -170,6 +177,13 @@ function Invoke-IbcmdProcess {
 }


+function Test-DirNonEmpty {
+    # Postcondition: the platform must have written files into the output directory.
+    # Exit code 0 with an empty dir (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Container) -and ([bool](Get-ChildItem -LiteralPath $Path -Force -ErrorAction SilentlyContinue | Select-Object -First 1))
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }

 # --- Validate connection ---
@@ -224,12 +238,16 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $ConfigDir)
+        if ($outMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "Configuration exported successfully to: $ConfigDir" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no files under $ConfigDir — configuration was not exported" -ForegroundColor Red
        } else {
            Write-Host "Error exporting configuration (code: $exitCode)" -ForegroundColor Red
        }
@@ -293,14 +311,19 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition: exit 0 with an empty output directory is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $ConfigDir)
+    if ($outMissing) { $exitCode = 1 }
    if ($exitCode -eq 0) {
        Write-Host "Dump completed successfully" -ForegroundColor Green
        Write-Host "Configuration dumped to: $ConfigDir"
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no files under $ConfigDir — configuration was not dumped" -ForegroundColor Red
    } else {
        Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-dump-xml v1.8 — Dump 1C configuration to XML files
+# db-dump-xml v1.11 — Dump 1C configuration to XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,21 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def dir_nonempty(path):
+    """Postcondition: the platform must have written files into the output directory.
+    Exit code 0 with an empty dir (broken/headless env) is a false success — reject it."""
+    return os.path.isdir(path) and any(os.scandir(path))
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -181,17 +196,23 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
-        if result.returncode == 0:
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not dir_nonempty(args.ConfigDir)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
            print(f"Configuration exported successfully to: {args.ConfigDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.ConfigDir} — configuration was not exported", file=sys.stderr)
        else:
-            print(f"Error exporting configuration (code: {result.returncode})", file=sys.stderr)
+            print(f"Error exporting configuration (code: {exit_code})", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
            print(result.stderr, file=sys.stderr)
-        sys.exit(result.returncode)
+        sys.exit(exit_code)

    # --- Temp dir ---
    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_xml_{random.randint(0, 999999)}")
@@ -248,7 +269,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -257,9 +278,15 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition: exit 0 with an empty output directory is a false success.
+        out_missing = exit_code == 0 and not dir_nonempty(args.ConfigDir)
+        if out_missing:
+            exit_code = 1
        if exit_code == 0:
            print("Dump completed successfully")
            print(f"Configuration dumped to: {args.ConfigDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.ConfigDir} — configuration was not dumped", file=sys.stderr)
        else:
            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# db-load-cf v1.6 — Load 1C configuration from CF file
+# db-load-cf v1.10 — Load 1C configuration from CF file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -76,6 +76,30 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -183,14 +207,14 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -eq 0) {
            Write-Host "Configuration loaded successfully from: $InputFile" -ForegroundColor Green
        } else {
-            Write-Host "Error loading configuration (code: $exitCode)" -ForegroundColor Red
+            Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
        }
        if ($output) { Write-Host ($output | Out-String) }
        exit $exitCode
@@ -224,7 +248,7 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

@@ -232,7 +256,7 @@ try {
    if ($exitCode -eq 0) {
        Write-Host "Configuration loaded successfully from: $InputFile" -ForegroundColor Green
    } else {
-        Write-Host "Error loading configuration (code: $exitCode)" -ForegroundColor Red
+        Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
    }

    if (Test-Path $outFile) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-cf v1.6 — Load 1C configuration from CF file
+# db-load-cf v1.10 — Load 1C configuration from CF file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,39 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -150,12 +183,12 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
        if result.returncode == 0:
            print(f"Configuration loaded successfully from: {args.InputFile}")
        else:
-            print(f"Error loading configuration (code: {result.returncode})", file=sys.stderr)
+            print(f"Error loading configuration (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
@@ -194,7 +227,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -206,7 +239,7 @@ def main():
        if exit_code == 0:
            print(f"Configuration loaded successfully from: {args.InputFile}")
        else:
-            print(f"Error loading configuration (code: {exit_code})", file=sys.stderr)
+            print(f"Error loading configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)

        if os.path.isfile(out_file):
            try:
@@ -1,4 +1,4 @@
-# db-load-dt v1.5 — Load 1C information base from DT file
+# db-load-dt v1.9 — Load 1C information base from DT file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -73,6 +73,30 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -177,14 +201,14 @@ try {
        $arguments += "$InputFile"

        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -eq 0) {
            Write-Host "Information base restored successfully from: $InputFile" -ForegroundColor Green
        } else {
-            Write-Host "Error restoring information base (code: $exitCode)" -ForegroundColor Red
+            Write-Host "Error restoring information base (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
        }
        if ($output) { Write-Host ($output | Out-String) }
        exit $exitCode
@@ -213,7 +237,7 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

@@ -221,7 +245,7 @@ try {
    if ($exitCode -eq 0) {
        Write-Host "Information base restored successfully from: $InputFile" -ForegroundColor Green
    } else {
-        Write-Host "Error restoring information base (code: $exitCode)" -ForegroundColor Red
+        Write-Host "Error restoring information base (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
    }

    if (Test-Path $outFile) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-dt v1.5 — Load 1C information base from DT file
+# db-load-dt v1.9 — Load 1C information base from DT file
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,39 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -147,12 +180,12 @@ def main():
        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
        if result.returncode == 0:
            print(f"Information base restored successfully from: {args.InputFile}")
        else:
-            print(f"Error restoring information base (code: {result.returncode})", file=sys.stderr)
+            print(f"Error restoring information base (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
@@ -189,7 +222,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -201,7 +234,7 @@ def main():
        if exit_code == 0:
            print(f"Information base restored successfully from: {args.InputFile}")
        else:
-            print(f"Error restoring information base (code: {exit_code})", file=sys.stderr)
+            print(f"Error restoring information base (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)

        if os.path.isfile(out_file):
            try:
@@ -1,4 +1,4 @@
-# db-load-git v1.11 — Load Git changes into 1C database
+# db-load-git v1.15 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -108,6 +108,30 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
 # --- Helper: map sub-file path (BSL, HTML, etc.) to object XML ---
 function Get-ObjectXmlFromSubFile {
    param([string]$RelativePath)
@@ -372,12 +396,12 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -ne 0) {
-            Write-Host "Error loading changes (code: $exitCode)" -ForegroundColor Red
+            Write-Host "Error loading changes (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            if ($output) { Write-Host ($output | Out-String) }
            exit $exitCode
        }
@@ -388,14 +412,14 @@ try {
            if ($UserName) { $applyArgs += "--user=$UserName" }
            if ($Password) { $applyArgs += "--password=$Password" }
            $applyArgs += "--data=$tempDir"
-            Write-Host "Running: ibcmd $($applyArgs -join ' ')"
+            Write-Host "Running: ibcmd $(Protect-Secrets ($applyArgs -join ' ') @($Password, $UserName))"
            $__ib = Invoke-IbcmdProcess $V8Path $applyArgs
            $applyOut = $__ib.Output
            $exitCode = $__ib.ExitCode
            if ($exitCode -eq 0) {
                Write-Host "Database configuration updated successfully" -ForegroundColor Green
            } else {
-                Write-Host "Error updating database configuration (code: $exitCode)" -ForegroundColor Red
+                Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            }
            if ($applyOut) { Write-Host ($applyOut | Out-String) }
        }
@@ -446,7 +470,7 @@ try {
    # --- Execute ---
    Write-Host ""
    Write-Host "Executing partial configuration load..."
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"

    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode
@@ -456,7 +480,7 @@ try {
    if ($exitCode -eq 0) {
        Write-Host "Load completed successfully" -ForegroundColor Green
    } else {
-        Write-Host "Error loading configuration (code: $exitCode)" -ForegroundColor Red
+        Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
    }

    if (Test-Path $outFile) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-git v1.11 — Load Git changes into 1C database
+# db-load-git v1.15 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -121,6 +121,39 @@ def run_git(config_dir, git_args):
    return []


+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -307,10 +340,10 @@ def main():
            if args.Password:
                arguments.append(f"--password={args.Password}")
            arguments.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {' '.join(arguments)}")
+            print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
            result = run_ibcmd([v8path] + arguments, bool(args.UserName))
            if result.returncode != 0:
-                print(f"Error loading changes (code: {result.returncode})", file=sys.stderr)
+                print(f"Error loading changes (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
                if result.stdout:
                    print(result.stdout)
                if result.stderr:
@@ -327,13 +360,13 @@ def main():
                if args.Password:
                    apply_args.append(f"--password={args.Password}")
                apply_args.append(f"--data={ib_data}")
-                print(f"Running: ibcmd {' '.join(apply_args)}")
+                print(f"Running: ibcmd {_redact(' '.join(apply_args), args.Password, args.UserName)}")
                ar = run_ibcmd([v8path] + apply_args, bool(args.UserName))
                exit_code = ar.returncode
                if exit_code == 0:
                    print("Database configuration updated successfully")
                else:
-                    print(f"Error updating database configuration (code: {exit_code})", file=sys.stderr)
+                    print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
                if ar.stdout:
                    print(ar.stdout)
                if ar.stderr:
@@ -382,7 +415,7 @@ def main():
        # --- Execute ---
        print("")
        print("Executing partial configuration load...")
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")

        result = subprocess.run(
            [v8path] + arguments,
@@ -396,7 +429,7 @@ def main():
        if exit_code == 0:
            print("Load completed successfully")
        else:
-            print(f"Error loading configuration (code: {exit_code})", file=sys.stderr)
+            print(f"Error loading configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)

        if os.path.isfile(out_file):
            try:
@@ -1,4 +1,4 @@
-# db-load-xml v1.12 — Load 1C configuration from XML files
+# db-load-xml v1.16 — Load 1C configuration from XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -108,6 +108,30 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -244,12 +268,12 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -ne 0) {
-            Write-Host "Error loading configuration from files (code: $exitCode)" -ForegroundColor Red
+            Write-Host "Error loading configuration from files (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            if ($output) { Write-Host ($output | Out-String) }
            exit $exitCode
        }
@@ -261,14 +285,14 @@ try {
            if ($UserName) { $applyArgs += "--user=$UserName" }
            if ($Password) { $applyArgs += "--password=$Password" }
            $applyArgs += "--data=$tempDir"
-            Write-Host "Running: ibcmd $($applyArgs -join ' ')"
+            Write-Host "Running: ibcmd $(Protect-Secrets ($applyArgs -join ' ') @($Password, $UserName))"
            $__ib = Invoke-IbcmdProcess $V8Path $applyArgs
            $applyOut = $__ib.Output
            $exitCode = $__ib.ExitCode
            if ($exitCode -eq 0) {
                Write-Host "Database configuration updated successfully" -ForegroundColor Green
            } else {
-                Write-Host "Error updating database configuration (code: $exitCode)" -ForegroundColor Red
+                Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            }
            if ($applyOut) { Write-Host ($applyOut | Out-String) }
        }
@@ -351,7 +375,7 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

@@ -392,7 +416,7 @@ try {
    if ($exitCode -eq 0) {
        Write-Host "Load completed successfully" -ForegroundColor Green
    } else {
-        Write-Host "Error loading configuration (code: $exitCode)" -ForegroundColor Red
+        Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
    }

    if ($logContent) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-xml v1.12 — Load 1C configuration from XML files
+# db-load-xml v1.16 — Load 1C configuration from XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,39 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -199,10 +232,10 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
        if result.returncode != 0:
-            print(f"Error loading configuration from files (code: {result.returncode})", file=sys.stderr)
+            print(f"Error loading configuration from files (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
            if result.stdout:
                print(result.stdout)
            if result.stderr:
@@ -219,13 +252,13 @@ def main():
            if args.Password:
                apply_args.append(f"--password={args.Password}")
            apply_args.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {' '.join(apply_args)}")
+            print(f"Running: ibcmd {_redact(' '.join(apply_args), args.Password, args.UserName)}")
            ar = run_ibcmd([v8path] + apply_args, bool(args.UserName))
            exit_code = ar.returncode
            if exit_code == 0:
                print("Database configuration updated successfully")
            else:
-                print(f"Error updating database configuration (code: {exit_code})", file=sys.stderr)
+                print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
            if ar.stdout:
                print(ar.stdout)
            if ar.stderr:
@@ -308,7 +341,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -352,7 +385,7 @@ def main():
        if exit_code == 0:
            print("Load completed successfully")
        else:
-            print(f"Error loading configuration (code: {exit_code})", file=sys.stderr)
+            print(f"Error loading configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)

        if log_content:
            print("--- Log ---")
@@ -1,4 +1,4 @@
-# db-run v1.2 — Launch 1C:Enterprise
+# db-run v1.4 — Launch 1C:Enterprise
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -79,6 +79,13 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -165,7 +172,23 @@ if ($URL) {

 $argString += " /DisableStartupDialogs"

-# --- Execute (background, no wait) ---
-Write-Host "Running: 1cv8.exe $argString"
-Start-Process -FilePath $V8Path -ArgumentList $argString
+# --- Execute (background) ---
+# Redact the password/user before printing the command line — never leak secrets.
+$displayArg = Protect-Secrets $argString @($Password, $UserName)
+Write-Host "Running: 1cv8.exe $displayArg"
+$proc = Start-Process -FilePath $V8Path -ArgumentList $argString -PassThru
+
+# --- Bounded early-exit check ---
+# The launch is a background GUI process, so we don't wait for completion. But a process
+# that dies within the first ~1.5s never really started (bad base, no display, license) —
+# report that honestly instead of a blind "launched".
+$deadline = (Get-Date).AddMilliseconds(1500)
+while ((Get-Date) -lt $deadline -and -not $proc.HasExited) {
+    Start-Sleep -Milliseconds 200
+}
+if ($proc.HasExited) {
+    Write-Host "Error: 1C:Enterprise exited immediately (code: $($proc.ExitCode))" -ForegroundColor Red
+    if ($proc.ExitCode -ne 0) { exit $proc.ExitCode } else { exit 1 }
+}
+Write-Host "PID: $($proc.Id)"
 Write-Host "1C:Enterprise launched" -ForegroundColor Green
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-run v1.2 — Launch 1C:Enterprise
+# db-run v1.4 — Launch 1C:Enterprise
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -9,6 +9,7 @@ import os
 import re
 import subprocess
 import sys
+import time


 def _find_project_v8path():
@@ -74,6 +75,15 @@ def resolve_v8path(v8path):
    return v8path


+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -131,9 +141,23 @@ def main():

    arguments.append("/DisableStartupDialogs")

-    # --- Execute (background, no wait) ---
-    print(f"Running: 1cv8.exe {' '.join(arguments)}")
-    subprocess.Popen([v8path] + arguments)
+    # --- Execute (background) ---
+    # Redact the password/user before printing the command line — never leak secrets.
+    print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
+    proc = subprocess.Popen([v8path] + arguments)
+
+    # --- Bounded early-exit check ---
+    # The launch is a background GUI process, so we don't wait for completion. But a process
+    # that dies within the first ~1.5s never really started (bad base, no display, license) —
+    # report that honestly instead of a blind "launched".
+    deadline = time.monotonic() + 1.5
+    while time.monotonic() < deadline and proc.poll() is None:
+        time.sleep(0.2)
+    rc = proc.poll()
+    if rc is not None:
+        print(f"Error: 1C:Enterprise exited immediately (code: {rc})", file=sys.stderr)
+        sys.exit(rc if rc and rc > 0 else 1)
+    print(f"PID: {proc.pid}")
    print("1C:Enterprise launched")


@@ -1,4 +1,4 @@
-# db-update v1.6 — Update 1C database configuration
+# db-update v1.10 — Update 1C database configuration
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -89,6 +89,30 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -191,14 +215,14 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -eq 0) {
            Write-Host "Database configuration updated successfully" -ForegroundColor Green
        } else {
-            Write-Host "Error updating database configuration (code: $exitCode)" -ForegroundColor Red
+            Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
        }
        if ($output) { Write-Host ($output | Out-String) }
        exit $exitCode
@@ -243,7 +267,7 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

@@ -251,7 +275,7 @@ try {
    if ($exitCode -eq 0) {
        Write-Host "Database configuration updated successfully" -ForegroundColor Green
    } else {
-        Write-Host "Error updating database configuration (code: $exitCode)" -ForegroundColor Red
+        Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
    }

    if (Test-Path $outFile) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-update v1.6 — Update 1C database configuration
+# db-update v1.10 — Update 1C database configuration
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,39 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -151,12 +184,12 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {' '.join(arguments)}")
+        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
        if result.returncode == 0:
            print("Database configuration updated successfully")
        else:
-            print(f"Error updating database configuration (code: {result.returncode})", file=sys.stderr)
+            print(f"Error updating database configuration (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
        if result.stdout:
            print(result.stdout)
        if result.stderr:
@@ -203,7 +236,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -215,7 +248,7 @@ def main():
        if exit_code == 0:
            print("Database configuration updated successfully")
        else:
-            print(f"Error updating database configuration (code: {exit_code})", file=sys.stderr)
+            print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)

        if os.path.isfile(out_file):
            try:
@@ -1,4 +1,4 @@
-# epf-build v1.6 — Build external data processor or report (EPF/ERF) from XML sources
+# epf-build v1.9 — Build external data processor or report (EPF/ERF) from XML sources
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -70,6 +70,13 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -141,6 +148,13 @@ function Invoke-IbcmdProcess {
 }


+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
 if ($engine -eq "ibcmd" -and $InfoBaseServer -and $InfoBaseRef) {
    Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath or omit for stub)" -ForegroundColor Red
@@ -188,12 +202,16 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "External data processor/report built successfully: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — build produced no output" -ForegroundColor Red
        } else {
            Write-Host "Error building external data processor/report (code: $exitCode)" -ForegroundColor Red
        }
@@ -222,13 +240,18 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
    if ($exitCode -eq 0) {
        Write-Host "Build completed successfully: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — build produced no output" -ForegroundColor Red
    } else {
        Write-Host "Error building (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# epf-build v1.6 — Build external data processor or report (EPF/ERF) from XML sources
+# epf-build v1.9 — Build external data processor or report (EPF/ERF) from XML sources
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,21 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -166,17 +181,23 @@ def main():
            if args.Password:
                arguments.append(f"--password={args.Password}")
            arguments.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {' '.join(arguments)}")
+            print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
            result = run_ibcmd([v8path] + arguments, warn_no_user=False)
-            if result.returncode == 0:
+            exit_code = result.returncode
+            out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+            if out_missing:
+                exit_code = 1
+            if exit_code == 0:
                print(f"External data processor/report built successfully: {args.OutputFile}")
+            elif out_missing:
+                print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — build produced no output", file=sys.stderr)
            else:
-                print(f"Error building external data processor/report (code: {result.returncode})", file=sys.stderr)
+                print(f"Error building external data processor/report (code: {exit_code})", file=sys.stderr)
            if result.stdout:
                print(result.stdout)
            if result.stderr:
                print(result.stderr, file=sys.stderr)
-            sys.exit(result.returncode)
+            sys.exit(exit_code)

        # --- Build arguments ---
        arguments = ["DESIGNER"]
@@ -199,7 +220,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -208,8 +229,14 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
        if exit_code == 0:
            print(f"Build completed successfully: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — build produced no output", file=sys.stderr)
        else:
            print(f"Error building (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# epf-dump v1.6 — Dump external data processor or report (EPF/ERF) to XML sources
+# epf-dump v1.8 — Dump external data processor or report (EPF/ERF) to XML sources
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -155,6 +155,20 @@ function Invoke-IbcmdProcess {
 }


+function Test-DirNonEmpty {
+    # Postcondition: the platform must have written files into the output directory.
+    # Exit code 0 with an empty dir (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Container) -and ([bool](Get-ChildItem -LiteralPath $Path -Force -ErrorAction SilentlyContinue | Select-Object -First 1))
+}
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
 if ($engine -eq "ibcmd") {
    if (-not $InfoBasePath) {
@@ -189,12 +203,16 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $($arguments -join ' ')"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
        $__ib = Invoke-IbcmdProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $OutputDir)
+        if ($outMissing) { $exitCode = 1 }
        if ($exitCode -eq 0) {
            Write-Host "External data processor/report dumped successfully to: $OutputDir" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no files under $OutputDir — dump produced no output" -ForegroundColor Red
        } else {
            Write-Host "Error dumping external data processor/report (code: $exitCode)" -ForegroundColor Red
        }
@@ -224,13 +242,18 @@ try {
    $arguments += "/DisableStartupDialogs"

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $($arguments -join ' ')"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
    $exitCode = $process.ExitCode

    # --- Result ---
+    # Postcondition: exit 0 with an empty output directory is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $OutputDir)
+    if ($outMissing) { $exitCode = 1 }
    if ($exitCode -eq 0) {
        Write-Host "Dump completed successfully to: $OutputDir" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no files under $OutputDir — dump produced no output" -ForegroundColor Red
    } else {
        Write-Host "Error dumping (code: $exitCode)" -ForegroundColor Red
    }
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# epf-dump v1.6 — Dump external data processor or report (EPF/ERF) to XML sources
+# epf-dump v1.8 — Dump external data processor or report (EPF/ERF) to XML sources
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -99,6 +99,21 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")


+def dir_nonempty(path):
+    """Postcondition: the platform must have written files into the output directory.
+    Exit code 0 with an empty dir (broken/headless env) is a false success — reject it."""
+    return os.path.isdir(path) and any(os.scandir(path))
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -163,17 +178,23 @@ def main():
            if args.Password:
                arguments.append(f"--password={args.Password}")
            arguments.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {' '.join(arguments)}")
+            print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
            result = run_ibcmd([v8path] + arguments, warn_no_user=False)
-            if result.returncode == 0:
+            exit_code = result.returncode
+            out_missing = exit_code == 0 and not dir_nonempty(args.OutputDir)
+            if out_missing:
+                exit_code = 1
+            if exit_code == 0:
                print(f"External data processor/report dumped successfully to: {args.OutputDir}")
+            elif out_missing:
+                print(f"Error: exit code 0 but no files under {args.OutputDir} — dump produced no output", file=sys.stderr)
            else:
-                print(f"Error dumping external data processor/report (code: {result.returncode})", file=sys.stderr)
+                print(f"Error dumping external data processor/report (code: {exit_code})", file=sys.stderr)
            if result.stdout:
                print(result.stdout)
            if result.stderr:
                print(result.stderr, file=sys.stderr)
-            sys.exit(result.returncode)
+            sys.exit(exit_code)

        # --- Build arguments ---
        arguments = ["DESIGNER"]
@@ -197,7 +218,7 @@ def main():
        arguments.append("/DisableStartupDialogs")

        # --- Execute ---
-        print(f"Running: 1cv8.exe {' '.join(arguments)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
        result = subprocess.run(
            [v8path] + arguments,
            capture_output=True,
@@ -206,8 +227,14 @@ def main():
        exit_code = result.returncode

        # --- Result ---
+        # Postcondition: exit 0 with an empty output directory is a false success.
+        out_missing = exit_code == 0 and not dir_nonempty(args.OutputDir)
+        if out_missing:
+            exit_code = 1
        if exit_code == 0:
            print(f"Dump completed successfully to: {args.OutputDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.OutputDir} — dump produced no output", file=sys.stderr)
        else:
            print(f"Error dumping (code: {exit_code})", file=sys.stderr)

@@ -1,4 +1,4 @@
-# form-add v1.8 — Add managed form to 1C config object
+# form-add v1.10 — Add managed form to 1C config object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -33,6 +33,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -69,10 +79,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# form-add v1.8 — Add managed form to 1C config object
+# form-add v1.10 — Add managed form to 1C config object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -32,6 +32,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -71,6 +83,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -78,6 +93,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -193,14 +210,50 @@ def detect_format_version(d):
    return "2.17"


-def save_xml_with_bom(tree, path):
-    """Save XML tree to file with UTF-8 BOM."""
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_with_bom(tree, path):
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -187,6 +187,7 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/form-compile.ps1" -
 | `showTitle: true` | Показывать заголовок группы |
 | `united: false` | Левый край полей ввода выравнивается только в пределах этой группы (по умолчанию `true` — сквозное выравнивание по самому длинному заголовку, в т.ч. с соседними группами) |
 | `collapsed: true` | Для `behavior: "collapsible"` / `"popup"` — группа создаётся свёрнутой |
+| `controlRepresentation` | Отображение управления свёрткой (`behavior: "collapsible"`): `"TitleHyperlink"` (гиперссылка заголовка, по умолчанию) / `"Picture"` (картинка) |
 | `representation` | `"none"`, `"normal"`, `"weak"`, `"strong"` |
 | `children: [...]` | Вложенные элементы |

@@ -1,4 +1,4 @@
-# form-compile v1.174 — Compile 1C managed form from JSON or object metadata
+# form-compile v1.175 — Compile 1C managed form from JSON or object metadata
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[string]$JsonPath,
@@ -1362,6 +1362,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -1398,10 +1408,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# form-compile v1.174 — Compile 1C managed form from JSON or object metadata
+# form-compile v1.175 — Compile 1C managed form from JSON or object metadata
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import copy
@@ -34,6 +34,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -73,6 +85,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -80,6 +95,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1,4 +1,4 @@
-# form-edit v1.3 — Edit 1C managed form elements
+# form-edit v1.5 — Edit 1C managed form elements
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -27,6 +27,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -63,10 +73,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,4 +1,4 @@
-# form-edit v1.3 — Edit 1C managed form elements (Python port)
+# form-edit v1.5 — Edit 1C managed form elements (Python port)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1458,14 +1475,40 @@ if elem_events_list:

 # ── 13. Save ────────────────────────────────────────────────

+# Round-trip: определить стиль исходного файла (на диске он ещё не перезаписан).
+try:
+    _fe_raw = open(resolved_form_path, "rb").read()
+except OSError:
+    _fe_raw = None
+if _fe_raw is not None:
+    _fe_bom = _fe_raw.startswith(b"\xef\xbb\xbf")
+    _fe_body = _fe_raw[3:] if _fe_bom else _fe_raw
+    _fe_crlf = b"\r\n" in _fe_body
+    _fe_enc_m = re.search(rb'encoding="([^"]+)"', _fe_body[:200])
+    _fe_enc = _fe_enc_m.group(1).decode("ascii") if _fe_enc_m else "utf-8"
+    _fe_final_nl = _fe_body.endswith(b"\n")
+else:
+    _fe_bom, _fe_crlf, _fe_enc, _fe_final_nl = True, False, "utf-8", True
+
 xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-# Fix XML declaration quotes
-xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-if not xml_bytes.endswith(b"\n"):
+# Восстановить регистр encoding как в оригинале.
+xml_bytes = xml_bytes.replace(
+    b"<?xml version='1.0' encoding='UTF-8'?>",
+    b'<?xml version="1.0" encoding="' + _fe_enc.encode("ascii") + b'"?>')
+# Канонизировать переносы к LF (убирает &#13; от \r в tail'ах).
+xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+             .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+# Финальный перенос — как в оригинале.
+xml_bytes = xml_bytes.rstrip(b"\n")
+if _fe_final_nl:
    xml_bytes += b"\n"
-# Write with BOM
+# EOL — как в оригинале.
+if _fe_crlf:
+    xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+# Write preserving BOM as in original.
 with open(resolved_form_path, "wb") as f:
-    f.write(b'\xef\xbb\xbf')
+    if _fe_bom:
+        f.write(b'\xef\xbb\xbf')
    f.write(xml_bytes)

 # ── 14. Summary ─────────────────────────────────────────────
@@ -1,4 +1,4 @@
-# form-info v1.4 — Analyze 1C managed form structure
+# form-info v1.5 — Analyze 1C managed form structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory=$true)]
@@ -372,6 +372,16 @@ if ($formsIdx -ge 0 -and ($formsIdx + 1) -lt $parts.Count) {
 # See docs/1c-support-state-spec.md. Walks up from the target path, taking the
 # uuid of the nearest element meta-xml (form/template/etc.) and the config root
 # bin. Never throws — degrades to "не на поддержке".
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-SupportStatusForPath([string]$targetPath) {
 	try {
 		$rp = (Resolve-Path $targetPath).Path
@@ -390,8 +400,10 @@ function Get-SupportStatusForPath([string]$targetPath) {
 		}
 		# The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
 		$elemUuid = Get-RootUuid $rp
+		if (Test-ExternalObjectRoot $rp) { return $null }
 		$d = [System.IO.Path]::GetDirectoryName($rp)
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return $null }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $binPath) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -448,7 +460,8 @@ if ($formTitle) { $header += " — `"$formTitle`"" }
 if ($objectContext) { $header += " ($objectContext)" }
 $header += " ==="
 $lines += $header
-$lines += "Поддержка: $(Get-SupportStatusForPath $FormPath)"
+$support = Get-SupportStatusForPath $FormPath
+if ($null -ne $support) { $lines += "Поддержка: $support" }

 # --- Form properties (Title excluded — shown in header) ---

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# form-info v1.4 — Analyze 1C managed form structure
+# form-info v1.5 — Analyze 1C managed form structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -353,14 +353,29 @@ def get_support_status_for_path(target_path):
            except Exception:
                pass
            return None
+        def is_external_root(xml_path):
+            if not os.path.isfile(xml_path):
+                return False
+            try:
+                mx = etree.parse(xml_path).getroot()
+                for child in mx:
+                    if isinstance(child.tag, str):
+                        return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+            except Exception:
+                return False
+            return False
        rp = os.path.abspath(target_path)
        # The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
        elem_uuid = root_uuid(rp)
+        if is_external_root(rp):
+            return None
        bin_path = None
        d = os.path.dirname(rp)
        for _ in range(12):
            if not d:
                break
+            if is_external_root(d + ".xml"):
+                return None
            if not elem_uuid:
                elem_uuid = root_uuid(d + ".xml")
            if not bin_path:
@@ -513,7 +528,9 @@ def main():
        header += f" ({object_context})"
    header += " ==="
    lines.append(header)
-    lines.append(f"Поддержка: {get_support_status_for_path(form_path)}")
+    _support = get_support_status_for_path(form_path)
+    if _support is not None:
+        lines.append(f"Поддержка: {_support}")

    # --- Form properties (Title excluded -- shown in header) ---
    prop_names = [
@@ -1,4 +1,4 @@
-# form-remove v1.3 — Remove form from 1C object
+# form-remove v1.4 — Remove form from 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# remove-form v1.3 — Remove form from 1C object
+# remove-form v1.4 — Remove form from 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -13,14 +13,50 @@ from lxml import etree
 NSMAP = {"md": "http://v8.1c.ru/8.3/MDClasses"}


-def save_xml_with_bom(tree, path):
-    """Save XML tree to file with UTF-8 BOM."""
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_with_bom(tree, path):
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# help-add v1.7 — Add built-in help to 1C object
+# help-add v1.9 — Add built-in help to 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -28,6 +28,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -64,10 +74,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# add-help v1.7 — Add built-in help to 1C object
+# add-help v1.9 — Add built-in help to 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -33,6 +33,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -72,6 +84,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -79,6 +94,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -188,14 +205,50 @@ def detect_format_version(d):
    return "2.17"


-def save_xml_with_bom(tree, path):
-    """Save XML tree to file with UTF-8 BOM."""
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_with_bom(tree, path):
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# interface-edit v1.6 — Edit 1C CommandInterface.xml
+# interface-edit v1.8 — Edit 1C CommandInterface.xml
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][Alias('Path')][string]$CIPath,
@@ -39,6 +39,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -75,10 +85,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# interface-edit v1.6 — Edit 1C CommandInterface.xml
+# interface-edit v1.8 — Edit 1C CommandInterface.xml
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -270,13 +287,49 @@ def parse_value_list(val):
    return [val]


-def save_xml_bom(tree, path):
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_bom(tree, path):
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -14,6 +14,9 @@ allowed-tools:
 Принимает JSON-определение объекта → генерирует XML + модули в структуре выгрузки конфигурации и
 регистрирует объект в `Configuration.xml`.

+`ConfigDumpInfo.xml` намеренно не трогается: это служебный файл версий объектов, которым управляет
+платформа (для инкрементальной выгрузки).
+
 ## Порядок работы

 1. Составь JSON по синтаксису ниже → запиши во временный файл.
@@ -1,4 +1,4 @@
-# meta-compile v1.65 — Compile 1C metadata object from JSON
+# meta-compile v1.66 — Compile 1C metadata object from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -36,6 +36,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -72,10 +82,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# meta-compile v1.65 — Compile 1C metadata object from JSON
+# meta-compile v1.66 — Compile 1C metadata object from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -36,6 +36,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -75,6 +87,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -82,6 +97,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -14,6 +14,16 @@
 Свойство можно задать, даже если оно ещё не выставлено у объекта (например `FullTextSearch`, `DataHistory`).
 Опечатка в имени свойства → ошибка (правка не теряется молча). Допустимы имена свойств соответствующего типа объекта.

+### Type — тип значения (Константа, ПВХ)
+
+`Type=...` перестраивает дескриптор типа значения. Значение — тип 1С в том же синтаксисе,
+что у реквизитов: составной через `+`, с квалификаторами и ссылочными типами:
+```powershell
+-Operation modify-property -Value "Type=String(100) + Number(15,2) + CatalogRef.Номенклатура"
+```
+Структурные свойства (со вложенными узлами) в скалярный текст не превращаются: попытка задать
+такое свойство обычным `Ключ=Значение` (кроме `Type`) завершается ошибкой до записи файла.
+
 ## Свойства-списки

 Свойства, значение которых — список ссылок. Управляются через inline `add-*` / `remove-*` / `set-*` и через JSON `modify.properties`.
@@ -1,4 +1,4 @@
-# meta-edit v1.19 — Edit existing 1C metadata object XML (+add-predefined предопределённые Ext/Predefined.xml)
+# meta-edit v1.22 — Edit existing 1C metadata object XML
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[string]$DefinitionFile,
@@ -170,6 +170,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -206,10 +216,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -2028,6 +2041,32 @@ function Modify-Properties($propsDef) {
 			$valueStr = if ($propValue) { "true" } else { "false" }
 		}

+		# Structural value-type property (корневой <Type> у Константы, ПВХ) —
+		# перестроить дескриптор типа через Build-ValueTypeXml (не расплющивать в скаляр)
+		if ($propName -ceq "Type") {
+			$typeIndent = Get-ChildIndent $script:propertiesEl
+			$newTypeXml = Build-ValueTypeXml $typeIndent $valueStr
+			$newTypeNodes = Import-Fragment $newTypeXml
+			if ($newTypeNodes.Count -gt 0) {
+				# ReplaceChild сохраняет whitespace до/после узла на месте (без склейки отступов)
+				$script:propertiesEl.ReplaceChild($newTypeNodes[0], $propEl) | Out-Null
+				Info "Modified property: Type = $valueStr"
+				$script:modifyCount++
+			}
+			return
+		}
+
+		# Guard: не расплющивать структурное свойство (с дочерними узлами) в скалярный текст —
+		# это молча повредит XML. Завершаем ошибкой ДО записи файла.
+		$hasChildElements = $false
+		foreach ($ch in $propEl.ChildNodes) {
+			if ($ch.NodeType -eq 'Element') { $hasChildElements = $true; break }
+		}
+		if ($hasChildElements) {
+			Write-Error "modify-property: свойство '$propName' структурное (содержит дочерние узлы) — установка скалярного текста повредит XML; не поддерживается"
+			exit 1
+		}
+
 		$propEl.InnerText = $valueStr
 		Info "Modified property: $propName = $valueStr"
 		$script:modifyCount++
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# meta-edit v1.19 — Edit existing 1C metadata object XML (+add-predefined предопределённые Ext/Predefined.xml)
+# meta-edit v1.22 — Edit existing 1C metadata object XML
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -32,6 +32,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -71,6 +83,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -78,6 +93,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1898,6 +1915,27 @@ def modify_properties(props_def):
        if isinstance(prop_value, bool):
            value_str = "true" if prop_value else "false"

+        # Structural value-type property (корневой <Type> у Константы, ПВХ) —
+        # перестроить дескриптор типа через build_value_type_xml (не расплющивать в скаляр)
+        if prop_name == "Type":
+            type_indent = get_child_indent(properties_el)
+            new_type_xml = build_value_type_xml(type_indent, value_str)
+            new_type_nodes = import_fragment(new_type_xml)
+            if new_type_nodes:
+                type_idx = list(properties_el).index(prop_el)
+                new_type_nodes[0].tail = prop_el.tail
+                properties_el.insert(type_idx + 1, new_type_nodes[0])
+                remove_node_with_whitespace(prop_el)
+                info(f"Modified property: Type = {value_str}")
+                modify_count += 1
+            continue
+
+        # Guard: не расплющивать структурное свойство (с дочерними узлами) в скалярный текст —
+        # это молча повредит XML. Завершаем ошибкой ДО записи файла.
+        if len(list(prop_el)) > 0:
+            print(f"meta-edit: modify-property: свойство '{prop_name}' структурное (содержит дочерние узлы) — установка скалярного текста повредит XML; не поддерживается", file=sys.stderr)
+            sys.exit(1)
+
        # Set inner text — clear children first, set text
        for ch in list(prop_el):
            prop_el.remove(ch)
@@ -2858,11 +2896,46 @@ def set_complex_property(property_name, values):
 # ============================================================


+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
+        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
 def save_xml(tree, path):
-    """Save XML tree with BOM and proper encoding declaration."""
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    # Fix XML declaration quotes
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
    # Fix d5p1 namespace declarations stripped by lxml (it treats them as unused
    # because d5p1: appears only in text content, not in element/attribute names)
    xml_bytes = re.sub(
@@ -2870,10 +2943,10 @@ def save_xml(tree, path):
        b'\\1 xmlns:d5p1="http://v8.1c.ru/8.1/data/enterprise/current-config"\\2',
        xml_bytes
    )
-    if not xml_bytes.endswith(b"\n"):
-        xml_bytes += b"\n"
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# meta-info v1.3 — Compact summary of 1C metadata object
+# meta-info v1.4 — Compact summary of 1C metadata object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory=$true)][Alias('Path')][string]$ObjectPath,
@@ -418,8 +418,19 @@ function Get-WSOperations($childObjs) {
 # --- Support status of this object (Ext/ParentConfigurations.bin) ---
 # See docs/1c-support-state-spec.md. Walks up to the config root, decodes the
 # object's support rule. Never throws — degrades to "не на поддержке".
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-ObjectSupportStatus([string]$objUuid) {
 	try {
+		if (Test-ExternalObjectRoot $ObjectPath) { return $null }
 		# Walk up to the config root (dir with Configuration.xml or Ext/ParentConfigurations.bin).
 		$d = [System.IO.Path]::GetDirectoryName($ObjectPath)
 		$binPath = $null
@@ -653,7 +664,8 @@ if (-not $drillDone) {
 	if ($synonym -and $synonym -ne $objName) { $header += " — `"$synonym`"" }
 	$header += " ==="
 	Out $header
-	Out "Поддержка: $(Get-ObjectSupportStatus $typeNode.GetAttribute('uuid'))"
+	$support = Get-ObjectSupportStatus $typeNode.GetAttribute('uuid')
+	if ($null -ne $support) { Out "Поддержка: $support" }

 	# --- Type presentation (ref objects) ---
 	if ($isRefObject) {
@@ -1,4 +1,4 @@
-# meta-info v1.3 — Compact summary of 1C metadata object (Python port)
+# meta-info v1.4 — Compact summary of 1C metadata object (Python port)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import os
@@ -472,8 +472,23 @@ def get_ws_operations(child_objs):
 # ── Support status of this object (Ext/ParentConfigurations.bin) ──
 # See docs/1c-support-state-spec.md. Walks up to the config root, decodes the
 # object's support rule. Never throws — degrades to "не на поддержке".
+def _meta_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
+
 def get_object_support_status(obj_uuid):
    try:
+        if _meta_is_external_root(object_path):
+            return None
        d = os.path.dirname(object_path)
        bin_path = None
        for _ in range(8):
@@ -703,7 +718,9 @@ if not drill_done:
        header += f' \u2014 "{synonym}"'
    header += " ==="
    out(header)
-    out(f"Поддержка: {get_object_support_status(type_node.get('uuid', ''))}")
+    _support = get_object_support_status(type_node.get('uuid', ''))
+    if _support is not None:
+        out(f"Поддержка: {_support}")

    # Type presentation (ref objects)
    if is_ref_object:
@@ -1,4 +1,4 @@
-# meta-remove v1.3 — Remove metadata object from 1C configuration dump
+# meta-remove v1.5 — Remove metadata object from 1C configuration dump
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -93,6 +93,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -129,10 +139,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# meta-remove v1.3 — Remove metadata object from 1C configuration dump
+# meta-remove v1.5 — Remove metadata object from 1C configuration dump
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -258,13 +275,49 @@ def localname(el):
    return etree.QName(el.tag).localname


-def save_xml_bom(tree, path):
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_bom(tree, path):
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# meta-validate v1.9 — Validate 1C metadata object structure
+# meta-validate v1.10 — Validate 1C metadata object structure (+корневой <Type>: скаляр без структуры = ошибка)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -558,6 +558,26 @@ if ($propsNode) {
 		}
 	}

+	# Корневой <Type> (дескриптор типа значения — Константа, ПВХ) должен быть структурным:
+	# <v8:Type>/<v8:TypeSet>, а не скалярный текст. Скаляр = повреждённый тип (напр. после
+	# старого meta-edit modify-property Type). См. issue #42.
+	$rootTypeEl = $propsNode.SelectSingleNode("md:Type", $ns)
+	if ($rootTypeEl) {
+		$v8Types = $rootTypeEl.SelectNodes("v8:Type", $ns)
+		$v8TypeSets = $rootTypeEl.SelectNodes("v8:TypeSet", $ns)
+		$scalarText = ""
+		foreach ($cn in $rootTypeEl.ChildNodes) {
+			if ($cn.NodeType -eq 'Text' -or $cn.NodeType -eq 'CDATA') {
+				$t = $cn.Value.Trim()
+				if ($t) { $scalarText = $t; break }
+			}
+		}
+		if ($v8Types.Count -eq 0 -and $v8TypeSets.Count -eq 0 -and $scalarText) {
+			Report-Error "4. Property <Type> содержит скалярный текст '$scalarText' без структуры типа (<v8:Type>/<v8:TypeSet>) — повреждённый дескриптор типа значения"
+			$check4Ok = $false
+		}
+	}
+
 	if ($check4Ok) {
 		Report-OK "4. Property values: $enumChecked enum properties checked"
 	}
@@ -1,4 +1,4 @@
-# meta-validate v1.9 — Validate 1C metadata object structure (Python port)
+# meta-validate v1.10 — Validate 1C metadata object structure (Python port) (+корневой <Type>: скаляр без структуры = ошибка)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import os
@@ -555,6 +555,18 @@ if props_node is not None:
                check4_ok = False
            enum_checked += 1

+    # Корневой <Type> (дескриптор типа значения — Константа, ПВХ) должен быть структурным:
+    # <v8:Type>/<v8:TypeSet>, а не скалярный текст. Скаляр = повреждённый тип (напр. после
+    # старого meta-edit modify-property Type). См. issue #42.
+    root_type_el = find(props_node, "md:Type")
+    if root_type_el is not None:
+        scalar_text = inner_text(root_type_el).strip()
+        v8_types = find_all(root_type_el, "v8:Type")
+        v8_type_sets = find_all(root_type_el, "v8:TypeSet")
+        if len(v8_types) == 0 and len(v8_type_sets) == 0 and scalar_text:
+            report_error(f"4. Property <Type> содержит скалярный текст '{scalar_text}' без структуры типа (<v8:Type>/<v8:TypeSet>) — повреждённый дескриптор типа значения")
+            check4_ok = False
+
    if check4_ok:
        report_ok(f"4. Property values: {enum_checked} enum properties checked")
 else:
@@ -34,16 +34,16 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/mxl-compile.ps1" -J

 ## Рабочий процесс

-1. Claude пишет JSON-определение (Write tool) → файл `.json`
-2. Claude вызывает `/mxl-compile` для генерации Template.xml
-3. Claude вызывает `/mxl-validate` для проверки корректности
-4. Claude вызывает `/mxl-info` для верификации структуры
+1. Написать JSON-определение (Write tool) → файл `.json`
+2. Вызвать `/mxl-compile` для генерации Template.xml
+3. Вызвать `/mxl-validate` для проверки корректности
+4. Вызвать `/mxl-info` для верификации структуры

 **Если макет создаётся по изображению** (скриншот, скан печатной формы) — сначала вызвать `/img-grid` для наложения сетки, по ней определить границы колонок и пропорции, затем использовать `"Nx"` ширины + `"page"` для автоматического расчёта размеров.

 ## JSON-схема DSL

-Полная спецификация формата: **`docs/mxl-dsl-spec.md`** (прочитать через Read tool перед написанием JSON).
+Ниже — компактная структура и ключевые правила, достаточные для типового макета. Полные таблицы полей (все свойства шрифтов, стилей, ячеек), развёрнутый пример и ограничения формата — в **`reference/dsl-spec.md`**; нужны не всегда, читать по необходимости.

 Краткая структура:

@@ -63,3 +63,4 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/mxl-compile.ps1" -J
 - `rowStyle` — автозаполнение пустот стилем (рамки по всей ширине)
 - Тип заполнения определяется автоматически: `param` → Parameter, `text` → Text, `template` → Template
 - `rowspan` — объединение строк вниз (rowStyle учитывает занятые ячейки)
+- `empty` в строке — шорткат для N подряд пустых строк (`{ "empty": 3 }` = три `{}`)
@@ -0,0 +1,160 @@
+# Спецификация MXL DSL — JSON-формат описания табличного документа
+
+Компактный JSON-формат для описания макетов табличных документов 1С (SpreadsheetDocument). Используется навыком `/mxl-compile` (JSON → XML).
+
+## Пример
+
+```json
+{
+  "columns": 10,
+  "defaultWidth": 30,
+  "columnWidths": { "1": 15, "2-8": 40, "9-10": 50 },
+
+  "fonts": {
+    "default": { "face": "Arial", "size": 10 },
+    "bold": { "face": "Arial", "size": 10, "bold": true },
+    "header": { "face": "Arial", "size": 14, "bold": true }
+  },
+
+  "styles": {
+    "default": {},
+    "header": { "font": "header", "align": "center" },
+    "label": { "font": "bold" },
+    "bordered": { "border": "all" },
+    "bordered-right": { "border": "all", "align": "right" },
+    "total-right": { "font": "bold", "border": "top", "align": "right" }
+  },
+
+  "areas": [
+    {
+      "name": "Заголовок",
+      "rows": [
+        { "height": 20, "cells": [
+          { "col": 1, "span": 10, "style": "header", "param": "ТекстЗаголовка" }
+        ]}
+      ]
+    },
+    {
+      "name": "ШапкаТаблицы",
+      "rows": [
+        { "rowStyle": "bordered", "cells": [
+          { "col": 1, "text": "№" },
+          { "col": 2, "span": 6, "text": "Наименование" },
+          { "col": 9, "text": "Кол-во" },
+          { "col": 10, "text": "Сумма" }
+        ]}
+      ]
+    },
+    {
+      "name": "Строка",
+      "rows": [
+        { "rowStyle": "bordered", "cells": [
+          { "col": 1, "param": "НомерСтроки" },
+          { "col": 2, "span": 6, "param": "Товар", "detail": "Номенклатура" },
+          { "col": 9, "style": "bordered-right", "param": "Количество" },
+          { "col": 10, "style": "bordered-right", "param": "Сумма" }
+        ]}
+      ]
+    },
+    {
+      "name": "Итого",
+      "rows": [
+        { "cells": [
+          { "col": 8, "span": 2, "style": "total-right", "text": "Итого:" },
+          { "col": 10, "style": "total-right", "param": "Всего" }
+        ]}
+      ]
+    }
+  ]
+}
+```
+
+## Верхний уровень
+
+| Поле | Обяз. | По умолч. | Описание |
+|------|:-----:|-----------|----------|
+| `columns` | да | — | Количество колонок |
+| `page` | нет | — | Формат страницы: `"A4-landscape"` (780), `"A4-portrait"` (540) или число. Автоматически вычисляет `defaultWidth` из суммы пропорций `"Nx"` |
+| `defaultWidth` | нет | 10 | Ширина колонок по умолчанию. Игнорируется если задан `page` и все колонки используют `"Nx"` |
+| `columnWidths` | нет | `{}` | Ширины колонок. Ключи 1-based: `"1"`, `"3-14"`, `"5,7,9"`. Значения: число (абсолют) или `"Nx"` (множитель от defaultWidth, напр. `"2x"`, `"0.5x"`) |
+| `fonts` | нет | — | Именованные шрифты (если не задано, создаётся Arial 10) |
+| `styles` | нет | `{}` | Именованные стили |
+| `areas` | да | — | Массив именованных областей (порядок = порядок в документе) |
+
+## Шрифты (`fonts.<name>`)
+
+| Поле | По умолч. | Описание |
+|------|-----------|----------|
+| `face` | `"Arial"` | Имя шрифта |
+| `size` | `10` | Размер |
+| `bold` | `false` | Жирный |
+| `italic` | `false` | Курсив |
+| `underline` | `false` | Подчёркнутый |
+| `strikeout` | `false` | Зачёркнутый |
+
+Шрифт `"default"` используется когда стиль не указывает шрифт явно. Если не определён, создаётся автоматически (Arial 10).
+
+## Стили (`styles.<name>`)
+
+| Поле | По умолч. | Описание |
+|------|-----------|----------|
+| `font` | `"default"` | Ссылка на имя шрифта |
+| `align` | — | `left`, `center`, `right` |
+| `valign` | — | `top`, `center` |
+| `border` | — | Стороны рамки: `all`, `top`, `bottom`, `left`, `right`, `none`. Через запятую: `"top,bottom"` |
+| `borderWidth` | `"thin"` | Толщина рамки: `thin` (1px) или `thick` (2px) |
+| `wrap` | `false` | Перенос текста |
+| `format` | — | Формат данных 1С: `"ЧЦ=15; ЧДЦ=2"`, `"ДФ=dd.MM.yyyy"` и т.д. |
+
+## Области (`areas[]`)
+
+| Поле | Обяз. | Описание |
+|------|:-----:|----------|
+| `name` | да | Имя области для `Макет.ПолучитьОбласть("Имя")` |
+| `rows` | да | Массив строк |
+
+## Строки (`rows[]`)
+
+| Поле | По умолч. | Описание |
+|------|-----------|----------|
+| `height` | — | Высота строки (если не задана, используется авто) |
+| `rowStyle` | — | Стиль для ВСЕХ колонок (заполняет пустоты рамками) |
+| `cells` | `[]` | Массив ячеек |
+| `empty` | — | Количество подряд идущих пустых строк (заменяет N отдельных `{}`) |
+
+Строка без `cells` и `rowStyle` → пустая строка. `{ "empty": 3 }` эквивалентно трём `{}`.
+
+## Ячейки (`cells[]`)
+
+| Поле | Обяз. | По умолч. | Описание |
+|------|:-----:|-----------|----------|
+| `col` | да | — | Позиция колонки (1-based) |
+| `span` | нет | `1` | Объединение по горизонтали (количество колонок) |
+| `rowspan` | нет | `1` | Объединение по вертикали (количество строк) |
+| `style` | нет | rowStyle | Стиль ячейки (переопределяет rowStyle) |
+| `param` | нет | — | Параметр заполнения |
+| `detail` | нет | — | Параметр расшифровки (только с `param`) |
+| `text` | нет | — | Статический текст |
+| `template` | нет | — | Шаблонный текст с `[Параметр]` |
+
+### Тип заполнения
+
+Определяется автоматически по содержимому ячейки:
+- `param` → fillType=Parameter
+- `template` → fillType=Template
+- `text` → fillType=Text
+- ничего → без fillType (пустая ячейка или рамка)
+
+## `rowStyle` — автозаполнение
+
+Когда задан `rowStyle`, компилятор создаёт ячейки для ВСЕХ колонок строки. Позиции без явных ячеек заполняются пустыми ячейками с указанным стилем. Это обеспечивает сплошные рамки в табличных строках.
+
+Если в предыдущих строках той же области есть ячейки с `rowspan`, их колонки при автозаполнении пропускаются.
+
+## Ограничения
+
+Текущая версия не поддерживает:
+- Множественные наборы колонок (`columnsID`)
+- Области типа Columns / Rectangle
+- Рисунки (штрихкоды, картинки)
+- Фон ячеек
@@ -1,4 +1,4 @@
-# mxl-compile v1.3 — Compile 1C spreadsheet from JSON
+# mxl-compile v1.4 — Compile 1C spreadsheet from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -26,6 +26,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -62,10 +72,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# mxl-compile v1.3 — Compile 1C spreadsheet from JSON
+# mxl-compile v1.4 — Compile 1C spreadsheet from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -36,22 +36,9 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/mxl-decompile.ps1"

 Декомпиляция существующего макета для анализа или доработки:

-1. Claude вызывает `/mxl-decompile` для получения JSON из Template.xml
-2. Claude анализирует или модифицирует JSON (добавляет области, меняет стили)
-3. Claude вызывает `/mxl-compile` для генерации нового Template.xml
-4. Claude вызывает `/mxl-validate` для проверки
+1. Вызвать `/mxl-decompile` для получения JSON из Template.xml
+2. Проанализировать или изменить JSON (добавить области, поменять стили)
+3. Вызвать `/mxl-compile` для генерации нового Template.xml
+4. Вызвать `/mxl-validate` для проверки

-## JSON-схема DSL
-
-Полная спецификация формата: **`docs/mxl-dsl-spec.md`** (прочитать через Read tool).
-
-## Генерация имён
-
-Скрипт автоматически генерирует осмысленные имена:
-
- **Шрифты**: `default`, `bold`, `header`, `small`, `italic` — или описательные имена по свойствам
- **Стили**: `bordered`, `bordered-center`, `bold-right`, `border-top` и т.д. — по комбинации свойств
-
-## Детектирование `rowStyle`
-
-Если в строке есть пустые ячейки (без параметров/текста) и все они имеют одинаковый формат — этот формат распознаётся как `rowStyle`, а пустые ячейки исключаются из вывода.
+Формат JSON на выходе — тот же DSL, что принимает `/mxl-compile`; его полное описание живёт в навыке `/mxl-compile`.
@@ -1,4 +1,4 @@
-# mxl-info v1.1 — Analyze 1C spreadsheet structure
+# mxl-info v1.2 — Analyze 1C spreadsheet structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Alias('Path')]
@@ -321,6 +321,16 @@ if ($Format -eq "json") {
 	exit 0
 }

+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-SupportStatusForPath([string]$targetPath) {
 	try {
 		$rp = (Resolve-Path $targetPath).Path
@@ -339,8 +349,10 @@ function Get-SupportStatusForPath([string]$targetPath) {
 		}
 		# The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
 		$elemUuid = Get-RootUuid $rp
+		if (Test-ExternalObjectRoot $rp) { return $null }
 		$d = [System.IO.Path]::GetDirectoryName($rp)
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return $null }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $binPath) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -385,7 +397,8 @@ function Get-SupportStatusForPath([string]$targetPath) {
 $lines = @()

 $lines += "=== $templateName ==="
-$lines += "Поддержка: $(Get-SupportStatusForPath $TemplatePath)"
+$support = Get-SupportStatusForPath $TemplatePath
+if ($null -ne $support) { $lines += "Поддержка: $support" }
 $lines += "  Rows: $docHeight, Columns: $defaultColCount"

 if ($columnSets.Count -eq 0) {
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# mxl-info v1.1 — Analyze 1C spreadsheet structure
+# mxl-info v1.2 — Analyze 1C spreadsheet structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -321,14 +321,29 @@ def get_support_status_for_path(target_path):
            except Exception:
                pass
            return None
+        def is_external_root(xml_path):
+            if not os.path.isfile(xml_path):
+                return False
+            try:
+                mx = etree.parse(xml_path).getroot()
+                for child in mx:
+                    if isinstance(child.tag, str):
+                        return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+            except Exception:
+                return False
+            return False
        rp = os.path.abspath(target_path)
        # The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
        elem_uuid = root_uuid(rp)
+        if is_external_root(rp):
+            return None
        bin_path = None
        d = os.path.dirname(rp)
        for _ in range(12):
            if not d:
                break
+            if is_external_root(d + ".xml"):
+                return None
            if not elem_uuid:
                elem_uuid = root_uuid(d + ".xml")
            if not bin_path:
@@ -380,7 +395,9 @@ def get_support_status_for_path(target_path):
 lines = []

 lines.append(f"=== {template_name} ===")
-lines.append(f"Поддержка: {get_support_status_for_path(template_path)}")
+_support = get_support_status_for_path(template_path)
+if _support is not None:
+    lines.append(f"Поддержка: {_support}")
 lines.append(f"  Rows: {doc_height}, Columns: {default_col_count}")

 if len(column_sets) == 0:
@@ -1,4 +1,4 @@
-# role-compile v1.7 — Compile 1C role from JSON
+# role-compile v1.8 — Compile 1C role from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -26,6 +26,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -62,10 +72,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# role-compile v1.7 — Compile 1C role from JSON
+# role-compile v1.8 — Compile 1C role from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1,4 +1,4 @@
-# role-info v1.1 — Analyze 1C role rights
+# role-info v1.2 — Analyze 1C role rights
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory=$true)][Alias('Path')][string]$RightsPath,
@@ -145,6 +145,16 @@ foreach ($tpl in $tplNodes) {
 	}
 }

+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-SupportStatusForPath([string]$targetPath) {
 	try {
 		$rp = (Resolve-Path $targetPath).Path
@@ -163,8 +173,10 @@ function Get-SupportStatusForPath([string]$targetPath) {
 		}
 		# The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
 		$elemUuid = Get-RootUuid $rp
+		if (Test-ExternalObjectRoot $rp) { return $null }
 		$d = [System.IO.Path]::GetDirectoryName($rp)
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return $null }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $binPath) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -209,7 +221,8 @@ $header = "=== Role: $roleName"
 if ($roleSynonym) { $header += " --- `"$roleSynonym`"" }
 $header += " ==="
 Out $header
-Out "Поддержка: $(Get-SupportStatusForPath $RightsPath)"
+$support = Get-SupportStatusForPath $RightsPath
+if ($null -ne $support) { Out "Поддержка: $support" }
 Out ""

 Out "Properties: setForNewObjects=$setForNew, setForAttributesByDefault=$setForAttrs, independentRightsOfChildObjects=$independentChild"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# role-info v1.1 — Analyze 1C role rights
+# role-info v1.2 — Analyze 1C role rights
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -161,14 +161,29 @@ def get_support_status_for_path(target_path):
            except Exception:
                pass
            return None
+        def is_external_root(xml_path):
+            if not os.path.isfile(xml_path):
+                return False
+            try:
+                mx = etree.parse(xml_path).getroot()
+                for child in mx:
+                    if isinstance(child.tag, str):
+                        return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+            except Exception:
+                return False
+            return False
        rp = os.path.abspath(target_path)
        # The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
        elem_uuid = root_uuid(rp)
+        if is_external_root(rp):
+            return None
        bin_path = None
        d = os.path.dirname(rp)
        for _ in range(12):
            if not d:
                break
+            if is_external_root(d + ".xml"):
+                return None
            if not elem_uuid:
                elem_uuid = root_uuid(d + ".xml")
            if not bin_path:
@@ -222,7 +237,9 @@ if role_synonym:
    header += f' --- "{role_synonym}"'
 header += " ==="
 out(header)
-out(f"Поддержка: {get_support_status_for_path(rights_path)}")
+_support = get_support_status_for_path(rights_path)
+if _support is not None:
+    out(f"Поддержка: {_support}")
 out()

 out(f"Properties: setForNewObjects={set_for_new}, setForAttributesByDefault={set_for_attrs}, independentRightsOfChildObjects={independent_child}")
@@ -1,4 +1,4 @@
-# skd-compile v1.107 — Compile 1C DCS from JSON
+# skd-compile v1.108 — Compile 1C DCS from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[string]$DefinitionFile,
@@ -25,6 +25,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -61,10 +71,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# skd-compile v1.107 — Compile 1C DCS from JSON
+# skd-compile v1.108 — Compile 1C DCS from JSON
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -31,6 +31,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -70,6 +82,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -77,6 +92,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1,4 +1,4 @@
-# skd-edit v1.28 — Atomic 1C DCS editor
+# skd-edit v1.30 — Atomic 1C DCS editor
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: парный .py собирает выражения автодат вне f-string ради совместимости с python 3.9 (PEP 701).
 param(
@@ -64,6 +64,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -100,10 +110,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,4 +1,4 @@
-# skd-edit v1.28 — Atomic 1C DCS editor (Python port)
+# skd-edit v1.30 — Atomic 1C DCS editor (Python port)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -141,6 +141,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -180,6 +192,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -187,6 +202,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1967,6 +1984,12 @@ raw_root_opening = _root_open_m.group(0) if _root_open_m else None

 # Detect line ending convention so save can normalize back to whatever the source used.
 line_ending = "\r\n" if "\r\n" in raw_original_text else "\n"
+# Round-trip: сохранить BOM / регистр encoding / финальный перенос как в оригинале.
+_skd_had_bom = raw_original_bytes.startswith(b"\xef\xbb\xbf")
+_skd_body = raw_original_bytes[3:] if _skd_had_bom else raw_original_bytes
+_skd_enc_m = re.search(rb'encoding="([^"]+)"', _skd_body[:200])
+_skd_enc = _skd_enc_m.group(1).decode("ascii") if _skd_enc_m else "utf-8"
+_skd_final_nl = _skd_body.endswith(b"\n")

 xml_parser = etree.XMLParser(remove_blank_text=False)
 tree = etree.parse(resolved_path, xml_parser)
@@ -3406,7 +3429,10 @@ if not dirty:
    sys.exit(0)

 xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
+# Round-trip: восстановить регистр encoding как в оригинале.
+xml_bytes = xml_bytes.replace(
+    b"<?xml version='1.0' encoding='UTF-8'?>",
+    b'<?xml version="1.0" encoding="' + _skd_enc.encode("ascii") + b'"?>')

 # Format-preserve post-processing (mirrors PS path):
 #   (1) restore the original raw <DataCompositionSchema ...> opening tag — lxml collapses
@@ -3418,17 +3444,24 @@ if raw_root_opening:
 # defensive — strip any space before `/>` so PS and PY ports stay byte-equivalent.
 xml_text = re.sub(r"(?<=\S) />", "/>", xml_text)

-# Normalize line endings to match source.
+# Канонизировать переносы к LF (убирает возможный &#13;), затем к стилю источника.
+xml_text = xml_text.replace("&#13;\n", "\n").replace("&#13;", "").replace("\r\n", "\n").replace("\r", "\n")
 if line_ending == "\r\n":
-    xml_text = re.sub(r"(?<!\r)\n", "\r\n", xml_text)
-else:
-    xml_text = xml_text.replace("\r\n", "\n")
+    xml_text = xml_text.replace("\n", "\r\n")
 xml_bytes = xml_text.encode("utf-8")

-if not xml_bytes.endswith(b"\n"):
-    xml_bytes += b"\n"
+# Финальный перенос — как в оригинале.
+if line_ending == "\r\n":
+    xml_bytes = xml_bytes.rstrip(b"\r\n")
+    if _skd_final_nl:
+        xml_bytes += b"\r\n"
+else:
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if _skd_final_nl:
+        xml_bytes += b"\n"
 with open(resolved_path, "wb") as f:
-    f.write(b'\xef\xbb\xbf')
+    if _skd_had_bom:
+        f.write(b'\xef\xbb\xbf')
    f.write(xml_bytes)

 print(f"[OK] Saved {resolved_path}")
@@ -1,4 +1,4 @@
-# skd-info v1.7 — Analyze 1C DCS structure
+# skd-info v1.8 — Analyze 1C DCS structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory=$true)]
@@ -334,6 +334,16 @@ for ($i = $pathParts.Count - 1; $i -ge 0; $i--) {

 $totalXmlLines = (Get-Content $resolvedPath).Count

+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-SupportStatusForPath([string]$targetPath) {
 	try {
 		$rp = (Resolve-Path $targetPath).Path
@@ -352,8 +362,10 @@ function Get-SupportStatusForPath([string]$targetPath) {
 		}
 		# The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
 		$elemUuid = Get-RootUuid $rp
+		if (Test-ExternalObjectRoot $rp) { return $null }
 		$d = [System.IO.Path]::GetDirectoryName($rp)
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return $null }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $binPath) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -395,7 +407,8 @@ function Get-SupportStatusForPath([string]$targetPath) {

 function Show-Overview {
 	$lines.Add("=== DCS: $templateName ($totalXmlLines lines) ===")
-	$lines.Add("Поддержка: $(Get-SupportStatusForPath $TemplatePath)")
+	$support = Get-SupportStatusForPath $TemplatePath
+	if ($null -ne $support) { $lines.Add("Поддержка: $support") }
 	$lines.Add("")

 	# Sources
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# skd-info v1.7 — Analyze 1C DCS structure
+# skd-info v1.8 — Analyze 1C DCS structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -278,14 +278,29 @@ def get_support_status_for_path(target_path):
            except Exception:
                pass
            return None
+        def is_external_root(xml_path):
+            if not os.path.isfile(xml_path):
+                return False
+            try:
+                mx = etree.parse(xml_path).getroot()
+                for child in mx:
+                    if isinstance(child.tag, str):
+                        return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+            except Exception:
+                return False
+            return False
        rp = os.path.abspath(target_path)
        # The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
        elem_uuid = root_uuid(rp)
+        if is_external_root(rp):
+            return None
        bin_path = None
        d = os.path.dirname(rp)
        for _ in range(12):
            if not d:
                break
+            if is_external_root(d + ".xml"):
+                return None
            if not elem_uuid:
                elem_uuid = root_uuid(d + ".xml")
            if not bin_path:
@@ -424,7 +439,9 @@ def main():

    def show_overview():
        lines.append(f"=== DCS: {template_name} ({total_xml_lines} lines) ===")
-        lines.append(f"Поддержка: {get_support_status_for_path(template_path)}")
+        _support = get_support_status_for_path(template_path)
+        if _support is not None:
+            lines.append(f"Поддержка: {_support}")
        lines.append("")

        # Sources
@@ -1,4 +1,4 @@
-# subsystem-compile v1.8 — Create 1C subsystem from JSON definition
+# subsystem-compile v1.9 — Create 1C subsystem from JSON definition
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[string]$DefinitionFile,
@@ -63,6 +63,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -99,10 +109,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# subsystem-compile v1.8 — Create 1C subsystem from JSON definition
+# subsystem-compile v1.9 — Create 1C subsystem from JSON definition
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import argparse
 import json
@@ -32,6 +32,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -71,6 +83,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -78,6 +93,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -1,4 +1,4 @@
-# subsystem-edit v1.5 — Edit existing 1C subsystem XML
+# subsystem-edit v1.7 — Edit existing 1C subsystem XML
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][Alias('Path')][string]$SubsystemPath,
@@ -136,6 +136,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -172,10 +182,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# subsystem-edit v1.5 — Edit existing 1C subsystem XML
+# subsystem-edit v1.7 — Edit existing 1C subsystem XML
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -32,6 +32,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -71,6 +83,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -78,6 +93,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -416,13 +433,49 @@ def parse_value_list(val):
    return [val]


-def save_xml_bom(tree, path):
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_bom(tree, path):
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# subsystem-info v1.1 — Compact summary of 1C subsystem structure
+# subsystem-info v1.2 — Compact summary of 1C subsystem structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory=$true)][Alias('Path')][string]$SubsystemPath,
@@ -17,6 +17,16 @@ $ErrorActionPreference = 'Stop'
 $script:lines = @()
 function Out([string]$text) { $script:lines += $text }

+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Get-SupportStatusForPath([string]$targetPath) {
 	try {
 		$rp = (Resolve-Path $targetPath).Path
@@ -35,8 +45,10 @@ function Get-SupportStatusForPath([string]$targetPath) {
 		}
 		# The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
 		$elemUuid = Get-RootUuid $rp
+		if (Test-ExternalObjectRoot $rp) { return $null }
 		$d = [System.IO.Path]::GetDirectoryName($rp)
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return $null }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $binPath) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -175,7 +187,8 @@ function Get-SubsystemDir([string]$xmlPath) {
 # --- Show functions for full mode ---
 function Show-Overview {
 	Out "Подсистема: $subName"
-	Out "Поддержка: $(Get-SupportStatusForPath $SubsystemPath)"
+	$support = Get-SupportStatusForPath $SubsystemPath
+	if ($null -ne $support) { Out "Поддержка: $support" }
 	if ($synonym -and $synonym -ne $subName) { Out "Синоним: $synonym" }
 	if ($commentText) { Out "Комментарий: $commentText" }
 	Out "ВключатьВКомандныйИнтерфейс: $inclCI"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# subsystem-info v1.1 — Compact summary of 1C subsystem structure
+# subsystem-info v1.2 — Compact summary of 1C subsystem structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -150,14 +150,29 @@ def get_support_status_for_path(target_path):
            except Exception:
                pass
            return None
+        def is_external_root(xml_path):
+            if not os.path.isfile(xml_path):
+                return False
+            try:
+                mx = etree.parse(xml_path).getroot()
+                for child in mx:
+                    if isinstance(child.tag, str):
+                        return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+            except Exception:
+                return False
+            return False
        rp = os.path.abspath(target_path)
        # The target file itself may be the element meta-xml (e.g. Subsystems/X.xml).
        elem_uuid = root_uuid(rp)
+        if is_external_root(rp):
+            return None
        bin_path = None
        d = os.path.dirname(rp)
        for _ in range(12):
            if not d:
                break
+            if is_external_root(d + ".xml"):
+                return None
            if not elem_uuid:
                elem_uuid = root_uuid(d + ".xml")
            if not bin_path:
@@ -208,7 +223,9 @@ def get_support_status_for_path(target_path):
 def show_overview(sub_name, synonym, comment_text, incl_ci, use_one_cmd,
                  explanation, pic_text, content_items, groups, child_names, has_ci):
    out(f"Подсистема: {sub_name}")
-    out(f"Поддержка: {get_support_status_for_path(subsystem_path)}")
+    _support = get_support_status_for_path(subsystem_path)
+    if _support is not None:
+        out(f"Поддержка: {_support}")
    if synonym and synonym != sub_name:
        out(f"Синоним: {synonym}")
    if comment_text:
@@ -1,4 +1,4 @@
-# template-add v1.7 — Add template to 1C object
+# template-add v1.9 — Add template to 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -38,6 +38,16 @@ function Get-RootUuid([string]$xmlPath) {
 	} catch {}
 	return $null
 }
+function Test-ExternalObjectRoot([string]$xmlPath) {
+	if (-not (Test-Path $xmlPath)) { return $false }
+	try {
+		[xml]$mx = Get-Content -Path $xmlPath -Encoding UTF8
+		$el = $mx.DocumentElement.FirstChild
+		while ($el -and $el.NodeType -ne 'Element') { $el = $el.NextSibling }
+		if ($el) { return @('ExternalDataProcessor','ExternalReport') -contains $el.LocalName }
+	} catch {}
+	return $false
+}
 function Find-V8Project([string]$startDir) {
 	$d = $startDir
 	for ($i = 0; $i -lt 20 -and $d; $i++) {
@@ -74,10 +84,13 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 	try {
 		$rp = $targetPath
 		try { $rp = (Resolve-Path $targetPath -ErrorAction Stop).Path } catch {}
+		# Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+		if (Test-ExternalObjectRoot $rp) { return }
 		$elemUuid = Get-RootUuid $rp
 		$cfgDir = $null; $binPath = $null
 		$d = if (Test-Path $rp -PathType Container) { $rp } else { [System.IO.Path]::GetDirectoryName($rp) }
 		for ($i = 0; $i -lt 12 -and $d; $i++) {
+			if (Test-ExternalObjectRoot "$d.xml") { return }
 			if (-not $elemUuid) { $elemUuid = Get-RootUuid "$d.xml" }
 			if (-not $cfgDir) {
 				$cand = Join-Path (Join-Path $d "Ext") "ParentConfigurations.bin"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# add-template v1.7 — Add template to 1C object
+# add-template v1.9 — Add template to 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -34,6 +34,18 @@ def _sg_root_uuid(xml_path):
    return None


+def _sg_is_external_root(xml_path):
+    if not os.path.isfile(xml_path):
+        return False
+    try:
+        mx = etree.parse(xml_path).getroot()
+        for child in mx:
+            if isinstance(child.tag, str):
+                return child.tag.split("}")[-1] in ("ExternalDataProcessor", "ExternalReport")
+    except Exception:
+        return False
+    return False
+
 def _sg_find_v8project(start_dir):
    d = start_dir
    for _ in range(20):
@@ -73,6 +85,9 @@ def _sg_get_edit_mode(cfg_dir):
 def assert_edit_allowed(target_path, require):
    try:
        rp = os.path.abspath(target_path)
+        # Autonomous external object (EPF/ERF): never part of a config on support (issue #39).
+        if _sg_is_external_root(rp):
+            return
        elem_uuid = _sg_root_uuid(rp)
        cfg_dir = None
        bin_path = None
@@ -80,6 +95,8 @@ def assert_edit_allowed(target_path, require):
        for _ in range(12):
            if not d:
                break
+            if _sg_is_external_root(d + ".xml"):
+                return
            if not elem_uuid:
                elem_uuid = _sg_root_uuid(d + ".xml")
            if not cfg_dir:
@@ -181,14 +198,50 @@ TYPE_MAP = {
 }


-def save_xml_with_bom(tree, path):
-    """Save XML tree to file with UTF-8 BOM."""
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_with_bom(tree, path):
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -1,4 +1,4 @@
-# template-remove v1.2 — Remove template from 1C object
+# template-remove v1.3 — Remove template from 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# remove-template v1.1 — Remove template from 1C object
+# remove-template v1.3 — Remove template from 1C object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -13,14 +13,50 @@ from lxml import etree
 NSMAP = {"md": "http://v8.1c.ru/8.3/MDClasses"}


-def save_xml_with_bom(tree, path):
-    """Save XML tree to file with UTF-8 BOM."""
-    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
-    xml_bytes = xml_bytes.replace(b"<?xml version='1.0' encoding='UTF-8'?>", b'<?xml version="1.0" encoding="utf-8"?>')
-    if not xml_bytes.endswith(b"\n"):
+def _detect_xml_style(path):
+    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
+    финальный перенос. None → файл новый (сохранить текущее поведение)."""
+    try:
+        raw = open(path, "rb").read()
+    except OSError:
+        return None
+    bom = raw.startswith(b"\xef\xbb\xbf")
+    body = raw[3:] if bom else raw
+    crlf = b"\r\n" in body
+    m = re.search(rb'encoding="([^"]+)"', body[:200])
+    enc = m.group(1).decode("ascii") if m else "utf-8"
+    final_nl = body.endswith(b"\n")
+    return {"bom": bom, "crlf": crlf, "enc": enc, "final_nl": final_nl}
+
+
+def _finalize_xml_bytes(xml_bytes, style):
+    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
+    enc_decl = style["enc"] if style else "utf-8"
+    xml_bytes = xml_bytes.replace(
+        b"<?xml version='1.0' encoding='UTF-8'?>",
+        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
+    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
+    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
+                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
+    # Финальный перенос — как в оригинале (новый файл → есть)
+    want_final_nl = style["final_nl"] if style else True
+    xml_bytes = xml_bytes.rstrip(b"\n")
+    if want_final_nl:
        xml_bytes += b"\n"
+    # EOL — как в оригинале (новый файл → LF, текущее поведение)
+    if style and style["crlf"]:
+        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
+    return xml_bytes
+
+
+def save_xml_with_bom(tree, path):
+    """Save XML tree preserving the existing file's BOM/EOL/encoding-case/final-newline."""
+    style = _detect_xml_style(path)
+    xml_bytes = etree.tostring(tree, xml_declaration=True, encoding="UTF-8")
+    xml_bytes = _finalize_xml_bytes(xml_bytes, style)
    with open(path, "wb") as f:
-        f.write(b"\xef\xbb\xbf")
+        if style is None or style["bom"]:
+            f.write(b"\xef\xbb\xbf")
        f.write(xml_bytes)


@@ -57,8 +57,10 @@ node $RUN run <url> script.js   # exits when done, no session
 ### Interactive mode (step-by-step development)

 ```bash
-# 1. Start session (run_in_background=true, prints JSON when ready)
-node $RUN start <url>
+# 1. Start session in the background — `start` stays running as the server, so don't wait on
+#    its stdout. Poll `status` instead: it exits 0 only once the session is loaded and live.
+node $RUN start <url>            # run_in_background=true
+until node $RUN status >/dev/null 2>&1; do sleep 2; done   # exit 0 = ready

 # 2. Execute scripts against running session
 cat <<'SCRIPT' | node $RUN exec -
@@ -140,10 +142,17 @@ Returns current form structure. This is the primary way to understand what's on

 **openTabs** — array of `{ name, active? }` from the open-windows tab bar. Only present when the tab bar is enabled in 1C settings. Do NOT rely on this — use `formCount`/`openForms` instead.

-**fields** — each field has: `name`, `value`, `label?`, `actions?` (select, clear, open), `required?` (true for unfilled mandatory fields)
+**fields** — each field has: `name`, `value`, `label?`, `actions?` (select, clear, open), `required?` (true for unfilled mandatory fields), `disabled?` (control is unavailable). `buttons[]` carry `disabled?` too.

 **navigation** — form navigation panel links (for objects with subordinate catalogs): `[{ name, active? }]`. Clickable via `clickElement()`. Only present when the form has a navigation panel (e.g. "Основное", "Объекты метаданных", "Подсистемы").

+**groups** — collapsible and pop-up form groups: `[{ name, title, collapsed, behavior? }]`. `collapsed: true` means the group's content is hidden — part of the form is not shown until you expand it (common on settings pages like "Администрирование → Интернет-поддержка и сервисы"). `behavior: 'popup'` marks a pop-up group (content shows in a floating panel); absent for ordinary collapsible groups. Expand/collapse (or open/close a pop-up) by the group title with `clickElement`, same vocabulary as tree nodes: `{ expand: true }` reveals (idempotent), `{ expand: false }` hides, `{ toggle: true }` flips. After expanding, the group's content becomes readable in the next `getFormState()` (its fields/hyperlinks/texts appear). Plain (non-collapsible) groups are not listed.
+```js
+const form = await getFormState();
+// form.groups = [{ name: "ГруппаНовости", title: "Новости", collapsed: true }, ...]
+await clickElement('Новости', { expand: true });   // reveal the group's content
+```
+
 **tables** — array of all visible grids: `[{ name, columns, rowCount, label? }]`. `label` is the visual group title shown on screen (e.g. "Входящие"), absent when grid has no visible title. Use `readTable()` for actual data.

 **table** — backward-compatible alias for the first grid: `{ present, columns, rowCount }`.
@@ -189,6 +198,22 @@ Special row fields:
 - `hierarchical: true` — list has groups (on result object)
 - `viewMode: 'tree'` — tree view active (on result object)

+Row state — in object lists, decoded from the row's state icon (no need to add a column to the list):
+- `_deleted: true|false` — marked for deletion (catalogs, documents, tasks, business processes, charts of accounts/calculation types)
+- `_posted: true|false` — documents
+- `_predefined: true|false` — catalogs, charts of accounts/calculation types
+- `_completed: true|false` — tasks
+- `_started`, `_finished` — business processes
+- `_rowPic: '<icon>:<N>'` — raw icon id, for diagnostics
+
+```js
+const t = await readTable();
+const doc = t.rows.find(r => r['Номер'] === 'ТД00-000005');
+if (doc._deleted === true) { /* marked for deletion */ }
+```
+
+**A missing state field means "unknown", never `false`** — the property may not apply (documents have no `_predefined`), or the icon may be unrecognised. So `if (!row._deleted)` is unsafe: it reads "unknown" as "not deleted". Compare explicitly (`=== true` / `=== false`) and treat `undefined` as a third outcome. Rows outside object lists (form tabular sections, value lists) have no state fields at all. If `_rowPic` is present but the booleans aren't, report its value — that icon needs decoding support.
+
 **`total` is misleading for long lists.** 1С virtualizes both dynamic lists and form tabular sections — the DOM holds only a window of visible rows. `total` / `shown` count what's *loaded right now*, not the size of the underlying collection. Use **`hasMore`** to know if there's more data outside the window:

 ```js
@@ -240,6 +265,8 @@ Sections + all open tabs.
 #### `clickElement(text, { dblclick?, table?, expand?, modifier?, scroll? })` → form state
 Click button, hyperlink, tab, navigation panel link, or grid row (fuzzy match).

+**Disabled controls throw.** `clickElement`, `fillFields`, and `selectValue` throw `"X" is disabled` on an unavailable control instead of reporting a fake success — check `getFormState().buttons[].disabled` / `fields[].disabled` first.
+
 - `table` — scope button search to a specific grid's command panel (by name from `tables[]`):
  ```js
  await clickElement('Добавить', { table: 'Исходящие' }); // clicks "Добавить" near "Исходящие" grid
@@ -209,6 +209,11 @@ export default {
  // },
  // defaultContext: 'clerk',

+  // Context-pool / 1C license management (all optional; omit = no cap, default stays open).
+  // maxContexts: 2,            // cap on simultaneous 1C sessions; omit for unlimited
+  // contextPolicy: 'reuse',    // 'reuse' (keep open within cap) | 'strict' (close after each test)
+  // pinnedContexts: [],        // never evicted; defaults to [defaultContext], [] makes default evictable
+
  timeout: 30000,
  retries: 0,
  screenshot: 'on-failure',  // 'every-step' | 'off'
@@ -319,7 +324,9 @@ export default async function({ clerk, manager, step, assert }) {
 }
 ```

-Close contexts you no longer need (`manager.closeContext('clerk')`) before the next multi-user test starts — frees a 1C web-client license and stops the previous role from holding state.
+Close contexts you no longer need (`manager.closeContext('clerk')`) before the next multi-user test starts — frees a 1C web-client license and stops the previous role from holding state. On tight-license stands prefer configuring the pool (`maxContexts` + `contextPolicy` + `pinnedContexts`) over manual per-test closing — the runner then evicts and reuses sessions automatically.
+
+**Context pool (1C licenses).** With `maxContexts` set, the runner caps simultaneous 1C sessions: before each test it evicts least-recently-used contexts that are neither pinned nor needed, reusing already-open ones. `contextPolicy: 'reuse'` (default) keeps sessions for speed; `'strict'` closes a test's non-pinned contexts right after it. `pinnedContexts` are never evicted (default `[defaultContext]`; set `[]` to make the default context evictable on a tight stand). If the pool can't fit even after eviction, the test fails with a clear `context pool exhausted` error instead of an opaque connection failure.

 ### Failing-test repro

@@ -370,9 +377,18 @@ node $RUN test tests/<app-name>/ --grep='накладн'                      #
 node $RUN test tests/<app-name>/ --bail --retry=1                      # stop on first fail, allow 1 retry
 node $RUN test tests/<app-name>/ --report=allure-results --format=allure --report-dir=allure-results
 node $RUN test tests/<app-name>/ --report=-                            # machine JSON to stdout, progress to stderr
+node $RUN test tests/<app-name>/ --global-timeout=3600000              # ceiling for the whole run (exit 2)
 node $RUN test tests/<app-name>/ -- --rebuild-stand                    # after `--` → hookArgs
 ```

+**Timeouts and hangs.** A test's `timeout` is a contract, not a wish: when it expires the runner probes the
+context and destroys whatever is wedged, so the run always moves on. The failure carries a verdict — `hang`
+(browser alive, renderer's JS thread blocked; the context is aborted, its 1C seance released from Node, and
+the next test recreates it) versus `slow`/`slow-network` (nothing is broken — raise `export const timeout`).
+A `hang` is never retried. Exit codes: `1` red tests, `2` `--global-timeout` fired (report written, seances
+released), `3` the shutdown itself wedged. Allure results are written per test as it finishes, so a hang
+cannot destroy the results collected before it — no external watchdog needed.
+
 **Output contract.** `test` behaves like a test runner: by default the human report (with the summary as the last line) goes to **stdout** — read the tail of stdout + exit code. The machine report is opt-in via `--report`: `--report=path` writes it to a file (default JSON; XML for `--format=junit`), `--report=-` writes it to stdout while progress moves to stderr. Allure needs `--format=allure` + a directory (`-` is invalid for allure). For detailed triage use `--report=path` or `--report=-`. **In `--report=-` mode never use `2>&1`** — it merges stderr progress into the stdout JSON. (In the default mode there is no JSON in stdout, so `… | tail` is safe.)

 ### Allure static config — `_allure/`
@@ -1,4 +1,4 @@
-// web-test browser v1.18 — engine facade: re-exports the public API from engine/*
+// web-test browser v1.19 — engine facade: re-exports the public API from engine/*
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 /**
 * Public API of the web-test engine. Pure re-export facade — no logic here.
@@ -22,6 +22,9 @@ export {
  connect, disconnect, attach, detach, getSession,
  createContext, setActiveContext, listContexts, getActiveContext,
  hasContext, closeContext,
+  // Unresponsive-context handling (test runner). abortContext is the sanctioned way to
+  // mutate the registry from outside — the `contexts` Map itself stays private.
+  abortContext, probeContext, getContextDiagnostics,
 } from './engine/core/session.mjs';

 // ── navigation ────────────────────────────────────────────────────────────
@@ -1,4 +1,4 @@
-// web-test cli/commands/run v1.0 — autonomous connect → exec → disconnect (no server)
+// web-test cli/commands/run v1.1 — autonomous connect → exec → disconnect (no server)
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import { readFileSync } from 'fs';
 import { resolve } from 'path';
@@ -13,7 +13,14 @@ export async function cmdRun(url, fileOrDash) {
    ? await readStdin()
    : readFileSync(resolve(fileOrDash), 'utf-8');

-  await browser.connect(url);
+  // Same as cmdStart: a startup blocker is a diagnosis, not a crash. connect() has already
+  // released the seance and closed the browser; a stack trace pointing into session.mjs would
+  // read as an engine bug and send the reader off to debug the wrong thing.
+  try {
+    await browser.connect(url);
+  } catch (e) {
+    die(e.message);
+  }
  const result = await executeScript(code);
  await browser.disconnect();

@@ -1,4 +1,4 @@
-// web-test cli/commands/start v1.0
+// web-test cli/commands/start v1.1
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import http from 'http';
 import { writeFileSync } from 'fs';
@@ -10,7 +10,15 @@ import { handleRequest } from '../server.mjs';
 export async function cmdStart(url) {
  if (!url) die('Usage: node src/run.mjs start <url>');

-  const state = await browser.connect(url);
+  // A startup blocker (no free 1C licence, publication asking for credentials) is a diagnosis,
+  // not a crash — connect() already released the seance and closed the browser, so print the
+  // message and leave instead of dumping a stack trace that reads like an engine failure.
+  let state;
+  try {
+    state = await browser.connect(url);
+  } catch (e) {
+    die(e.message);
+  }

  const httpServer = http.createServer(handleRequest);
  httpServer.listen(0, '127.0.0.1', () => {
@@ -1,14 +1,32 @@
-// web-test cli/commands/status v1.0 — check session
+// web-test cli/commands/status v1.1 — check session (active liveness probe)
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import { existsSync, readFileSync } from 'fs';
 import { out } from '../util.mjs';
-import { SESSION_FILE } from '../session.mjs';
+import { SESSION_FILE, cleanup } from '../session.mjs';

-export function cmdStatus() {
+export async function cmdStatus() {
  if (!existsSync(SESSION_FILE)) {
-    out({ ok: false, message: 'No active session' });
+    out({ ok: false, ready: false, message: 'No active session' });
    process.exit(1);
  }
  const sess = JSON.parse(readFileSync(SESSION_FILE, 'utf-8'));
-  out({ ok: true, ...sess });
+  // The session file is written only after connect() finished, but the server process may have
+  // died since (crash/reboot) and left the file behind. Don't trust the file — probe the
+  // in-process /status endpoint for real liveness.
+  try {
+    const resp = await fetch(`http://127.0.0.1:${sess.port}/status`, { signal: AbortSignal.timeout(2000) });
+    const body = await resp.json();
+    if (body.connected) {
+      out({ ok: true, ready: true, ...sess });
+    } else {
+      out({ ok: false, ready: false, reason: 'browser-disconnected', ...sess });
+      process.exit(1);
+    }
+  } catch {
+    // Server unreachable → the file is stale (process gone). Self-heal by removing it so the
+    // next status/start reads clean.
+    cleanup();
+    out({ ok: false, ready: false, reason: 'server-unreachable', ...sess });
+    process.exit(1);
+  }
 }
@@ -1,14 +1,15 @@
-// web-test cli/commands/test v1.3 — regression test runner
+// web-test cli/commands/test v1.8 — regression test runner
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
-import { existsSync, writeFileSync, mkdirSync } from 'fs';
+import { existsSync, writeFileSync, mkdirSync, renameSync, copyFileSync, unlinkSync } from 'fs';
 import { resolve, dirname, basename, relative } from 'path';
 import * as browser from '../../browser.mjs';
-import { out, die, elapsed, slugify, formatDuration, interpolate, printSteps } from '../util.mjs';
-import { buildContext, buildScopedContext } from '../exec-context.mjs';
+import { out, die, elapsed, slugify, formatDuration, interpolate, printSteps, softDeadline } from '../util.mjs';
+import { buildContext, buildScopedContext, setErrorShotDir } from '../exec-context.mjs';
 import { createAssertions } from '../test-runner/assertions.mjs';
 import { buildSeverityIndex } from '../test-runner/severity.mjs';
 import { writeAllure, buildJUnit, syncAllureExtras } from '../test-runner/reporters.mjs';
 import { discoverTests, resetState } from '../test-runner/discover.mjs';
+import { planEviction, touchLru, dropLru } from '../test-runner/context-pool.mjs';

 export async function cmdTest(rawArgs) {
  // Split off everything after `--` — those args belong to user-defined hooks
@@ -18,8 +19,30 @@ export async function cmdTest(rawArgs) {
  const ownArgs  = sepIdx >= 0 ? rawArgs.slice(0, sepIdx) : rawArgs;
  const hookArgs = sepIdx >= 0 ? rawArgs.slice(sepIdx + 1) : [];

+  // Deadline budgets for the cleanup path. Every one of these calls reaches into Playwright
+  // and can hang forever against a wedged renderer (page.evaluate has no timeout of its own),
+  // so none of them may be awaited bare. A breach is always logged — silent swallowing is what
+  // turned the original incident into a 29-minute mystery.
+  //
+  // These defaults are sized for a light stand. A heavy application legitimately needs more —
+  // override per key via `deadlines: {...}` in webtest.config.mjs rather than editing this.
+  const D = {
+    screenshot: 10000,
+    teardown: 15000,
+    afterEach: 15000,
+    setActive: 5000,
+    resetState: 20000,
+    startRecording: 15000,
+    stopRecording: 40000,   // ffmpeg has its own 30s inside
+    closeContext: 20000,
+    disconnect: 30000,
+    hooks: 120000,          // afterAll/cleanup only — prepare/beforeAll stay unbounded (see below)
+    abortAll: 30000,        // whole abort+cleanup sequence for one hung test
+    probe: 2000,
+  };
+
  // Parse flags
-  const opts = { bail: false, retry: 0, timeout: 30000, report: null, format: 'json', screenshot: null, reportDir: null, record: false };
+  const opts = { bail: false, retry: 0, timeout: 30000, globalTimeout: 0, report: null, format: 'json', screenshot: null, reportDir: null, record: false };
  let tags = null, grep = null, urlFlag = null;
  const positional = [];
  for (const a of ownArgs) {
@@ -29,6 +52,7 @@ export async function cmdTest(rawArgs) {
    else if (a === '--bail')           opts.bail = true;
    else if (a.startsWith('--retry=')) opts.retry = parseInt(a.slice(8)) || 0;
    else if (a.startsWith('--timeout=')) opts.timeout = parseInt(a.slice(10)) || 30000;
+    else if (a.startsWith('--global-timeout=')) opts.globalTimeout = parseInt(a.slice(17)) || 0;
    else if (a.startsWith('--report=')) opts.report = a.slice(9);
    else if (a.startsWith('--format=')) opts.format = a.slice(9);
    else if (a.startsWith('--screenshot=')) opts.screenshot = a.slice(13);
@@ -87,10 +111,48 @@ export async function cmdTest(rawArgs) {
  }
  if (!url) url = contextSpecs[defaultContextName].url;

+  // Context-pool config (license management). All three optional; without them the runner keeps
+  // its legacy behavior: default stays open, contexts accumulate, no eviction.
+  //   maxContexts    — cap on simultaneous 1C sessions (null = unlimited).
+  //   contextPolicy  — 'reuse' (keep open within the cap) | 'strict' (close a test's non-pinned
+  //                    contexts right after it, to release licenses ASAP).
+  //   pinnedContexts — never evicted by LRU. Defaults to [defaultContext] so today's "default is
+  //                    never closed between tests" holds; set [] to make default evictable.
+  let maxContexts = null;
+  if (config.maxContexts != null) {
+    if (!Number.isInteger(config.maxContexts) || config.maxContexts < 1) {
+      die(`Invalid maxContexts=${config.maxContexts} (expected a positive integer or omit for unlimited)`);
+    }
+    maxContexts = config.maxContexts;
+  }
+  const contextPolicy = config.contextPolicy == null ? 'reuse' : config.contextPolicy;
+  if (!['reuse', 'strict'].includes(contextPolicy)) {
+    die(`Invalid contextPolicy="${contextPolicy}" (expected 'reuse' or 'strict')`);
+  }
+  const pinnedContexts = Array.isArray(config.pinnedContexts) ? config.pinnedContexts : [defaultContextName];
+  for (const n of pinnedContexts) {
+    if (!contextSpecs[n]) die(`pinnedContexts entry "${n}" not found in contexts: [${Object.keys(contextSpecs).join(', ')}]`);
+  }
+  const pinnedSet = new Set(pinnedContexts);
+  // LRU usage order — oldest first, freshest last. Drives eviction under a maxContexts cap.
+  const lruOrder = [];
+
  // Apply config defaults (CLI flags override)
  if (!tags && config.tags) tags = config.tags;
  opts.timeout = ownArgs.some(a => a.startsWith('--timeout=')) ? opts.timeout : (config.timeout || opts.timeout);
  opts.retry = ownArgs.some(a => a.startsWith('--retry=')) ? opts.retry : (config.retries || opts.retry);
+  opts.globalTimeout = ownArgs.some(a => a.startsWith('--global-timeout=')) ? opts.globalTimeout : (config.globalTimeout || opts.globalTimeout);
+
+  // Per-key deadline overrides. Defaults suit a light stand; a heavy application may honestly
+  // need longer (a big form's resetState, a slow close). Unknown keys are a typo, not a wish —
+  // fail fast rather than silently ignoring an override the author believed was in effect.
+  if (config.deadlines) {
+    for (const [k, v] of Object.entries(config.deadlines)) {
+      if (!(k in D)) die(`Invalid deadlines.${k} in config (expected one of: ${Object.keys(D).join(', ')})`);
+      if (typeof v !== 'number' || !(v > 0)) die(`Invalid deadlines.${k}=${v} (expected a positive number of ms)`);
+      D[k] = v;
+    }
+  }
  if (config.preserveClipboard === false && !ownArgs.includes('--no-preserve-clipboard')) {
    browser.setPreserveClipboard(false);
  }
@@ -116,6 +178,10 @@ export async function cmdTest(rawArgs) {
    : (opts.report && !reportToStdout ? dirname(resolve(opts.report)) : testDir);
  if (opts.screenshot !== 'off') {
    try { mkdirSync(reportDir, { recursive: true }); } catch {}
+    // 1C-error screenshots (taken inside the action wrapper) default to a single
+    // fixed file at the skill root — outside reportDir and shared by every test.
+    // Point them at reportDir so each failure keeps its own attachable file.
+    setErrorShotDir(reportDir);
  }

  // Discover test files
@@ -179,10 +245,153 @@ export async function cmdTest(rawArgs) {
  const results = [];
  let passCount = 0, failCount = 0, skipCount = 0;

+  // Per-test diagnostics are BUFFERED and flushed right after that test's ✓/✗ line.
+  // A test's cleanup runs before its result is printed, so writing straight to the stream put
+  // `! …` lines ABOVE the test they belong to — i.e. visually under the PREVIOUS test's result.
+  // Anyone reading the log (a model included) attributes them to the wrong test; that misreading
+  // already cost this session a wrong conclusion. Outside a test (hooks, final teardown) there is
+  // nothing to attach to, so lines go straight out.
+  let diagSink = null;
+  const emit = (line) => { if (diagSink) diagSink.push(line); else W.write(line); };
+  const flushDiag = () => {
+    if (!diagSink) return;
+    for (const line of diagSink) W.write(line);
+    diagSink = null;
+  };
+
+  /**
+   * Bounded best-effort await: the replacement for `try { await x } catch {}`.
+   * Same tolerance for failure, but a call that never settles can no longer stall the run,
+   * and every breach leaves a visible line instead of a silent 29-minute stall.
+   */
+  async function bounded(promise, ms, label) {
+    const r = await softDeadline(promise, ms, label);
+    if (!r.ok) emit(`    ! ${label}: ${r.timedOut ? `timed out after ${ms}ms` : r.err.message.split('\n')[0]}\n`);
+    return r;
+  }
+
+  /**
+   * Reset one context between tests — and only reuse it if the reset actually WORKED.
+   *
+   * Reusing a context whose UI was not cleaned leaks someone else's open form into the next test:
+   * silent drift instead of a visible error, the worst possible outcome. Two ways to end up there,
+   * and both must lead here:
+   *   - the reset breached its deadline (badly-sized budget, wedged page);
+   *   - the reset ran to completion but did not clean anything (a modal that refuses to close) —
+   *     this one used to pass as success, because `bounded` only reports timeouts and throws.
+   * Either way: destroy the slot, ensureContext recreates a clean one. The cost is a relaunch,
+   * never a wrong test result.
+   */
+  async function resetOrAbort(cn, ctx) {
+    const sw = await bounded(browser.setActiveContext(cn), D.setActive, `setActiveContext(${cn})`);
+    if (!sw.ok) return false;
+    const r = await bounded(resetState(ctx), D.resetState, `resetState(${cn})`);
+    if (r.ok && r.value?.clean) return true;
+
+    if (r.ok) {
+      // Name what stayed open — otherwise the next investigation starts from archaeology.
+      const v = r.value || {};
+      const what = v.title ? `"${v.title}"` : `#${v.form}`;
+      emit(`    ! resetState(${cn}): not clean — form ${what}${v.modal ? ' (modal)' : ''} still open` +
+              ` after ${v.attempts} close attempt(s)` +
+              `${v.lastError ? `, last error: ${v.lastError.message.split('\n')[0]}` : ''}\n`);
+    }
+    emit(`    ! context "${cn}" left dirty — aborting it, the next test gets a fresh one\n`);
+    await bounded(browser.abortContext(cn), D.closeContext, `abortContext(${cn})`);
+    dropLru(lruOrder, cn);
+    return false;
+  }
+
+  // Bumped for every attempt. A timed-out test's body keeps running — a promise cannot be
+  // cancelled, so when its pending call finally rejects, its own `finally` would go on to
+  // drive the UI of whichever test is running by then. Silent cross-test corruption.
+  //
+  // The run shares one `ctx` object (hooks hold it too), so an epoch stamped on ctx could not
+  // tell the zombie from the live caller — both are the same object. Each attempt therefore
+  // gets its own Proxy view bound to its epoch; calls through a stale view throw.
+  let abortEpoch = 0;
+  function makeTestCtx(base, epoch) {
+    return new Proxy(base, {
+      get(target, prop, recv) {
+        const v = Reflect.get(target, prop, recv);
+        if (typeof v !== 'function') return v;
+        return (...args) => {
+          if (epoch !== abortEpoch) {
+            throw new Error(`test abandoned (timeout) — blocked a late ${String(prop)}() call from its body; it would have hit the next test`);
+          }
+          return v.apply(target, args);
+        };
+      },
+    });
+  }
+
+  function buildReport(state) {
+    const totalDuration = results.reduce((s, r) => s + r.duration, 0);
+    return {
+      runner: 'web-test', url, startedAt, finishedAt: new Date().toISOString(),
+      state,
+      duration: totalDuration,
+      summary: { total: results.length, passed: passCount, failed: failCount, skipped: skipCount },
+      tests: results,
+    };
+  }
+
+  let allureWritten = false;
+  /**
+   * Record a finished test AND persist it immediately. The report used to be written only
+   * after the loop, so a single hang destroyed every result collected so far.
+   * writeAllure([tr]) is byte-identical to the batch call: it mints its own uuid per test and
+   * severityIndex is read-only.
+   */
+  function recordResult(tr) {
+    results.push(tr);
+    if (opts.format === 'allure') {
+      try { writeAllure([tr], reportDir, severityIndex); allureWritten = true; } catch (e) { W.write(`    ! allure write: ${e.message}\n`); }
+    } else if (opts.format === 'json' && opts.report && !reportToStdout) {
+      try { writeFileSync(resolve(opts.report), JSON.stringify(buildReport('partial'), null, 2)); } catch {}
+    }
+  }
+
  const hookLog = (...a) => W.write(`[hooks] ${a.map(String).join(' ')}\n`);
  const hookEnv = { hookArgs, log: hookLog, config };
+  // Deliberately unbounded and allowed to throw: prepare() rebuilds the stand (db-create +
+  // load + update), whose honest duration depends on the application's size — a deadline here
+  // would cut a legitimate rebuild. And its failure must stay fatal: proceeding into a run
+  // without a stand turns one clear error into a screenful of confusing ones.
  if (hooks.prepare) await hooks.prepare(hookEnv);

+  /** Force-release every open context (frees 1C licenses), then drop the browser. */
+  async function shutdownAll() {
+    for (const name of browser.listContexts()) {
+      await bounded(browser.abortContext(name), D.closeContext, `abortContext(${name})`);
+    }
+    await bounded(browser.disconnect(), D.disconnect, 'disconnect');
+  }
+
+  /**
+   * Wall-clock ceiling for the whole run. This works even while a test is wedged: a pending
+   * Playwright await does not block the event loop, it is merely an unsettled promise — which
+   * is precisely why the original incident stalled quietly instead of crashing.
+   * Report first (that's what the user needs), hygiene second, exit unconditionally.
+   */
+  let globalTimer = null;
+  let hardStopping = false;
+  async function hardStop(reason) {
+    if (hardStopping) return;
+    hardStopping = true;
+    W.write(`\n!! ${reason}: run exceeded --global-timeout=${opts.globalTimeout}ms — forcing shutdown\n`);
+    abortEpoch++;
+    // Last-resort exit if the shutdown itself wedges. Referenced on purpose: it must survive.
+    const bailout = setTimeout(() => process.exit(3), 20000);
+    try { writeFinalReport('aborted'); } catch (e) { W.write(`    ! report: ${e.message}\n`); }
+    await softDeadline(shutdownAll(), 15000, 'shutdown');
+    clearTimeout(bailout);
+    process.exit(2);
+  }
+  if (opts.globalTimeout > 0) {
+    globalTimer = setTimeout(() => { void hardStop('global-timeout'); }, opts.globalTimeout);
+  }
+
  // Lazy context creation
  async function ensureContext(name) {
    if (browser.hasContext(name)) return;
@@ -210,8 +419,25 @@ export async function cmdTest(rawArgs) {
  }

  try {
-    // Connect: create default context up front
-    await ensureContext(defaultContextName);
+    // Connect: create default context up front (hosts beforeAll / hooks). It is NOT permanently
+    // pinned — under a maxContexts cap it becomes an LRU eviction candidate unless it is listed in
+    // pinnedContexts. Register it in the LRU order.
+    //
+    // This one call needs its own catch: it sits in a try that has only a `finally`, and run.mjs
+    // does not wrap cmdTest — so a throw here would escape as a raw stack trace and skip the
+    // report entirely. A blocked startup (e.g. no free 1C licence) dooms the whole run anyway,
+    // so say it once, keep the report, and leave.
+    try {
+      await ensureContext(defaultContextName);
+    } catch (e) {
+      W.write(`\n!! cannot open context "${defaultContextName}": ${e.message}\n\n`);
+      try { writeFinalReport('aborted'); } catch {}
+      // process.exit skips the `finally` below, and killing the process does NOT release a 1C
+      // seance — so release what we hold explicitly before leaving.
+      await softDeadline(shutdownAll(), 15000, 'shutdown');
+      process.exit(1);
+    }
+    touchLru(lruOrder, defaultContextName);

    const ctx = buildContext({ noRecord: false });
    ctx.assert = createAssertions();
@@ -230,6 +456,8 @@ export async function cmdTest(rawArgs) {
    let testIdx = 0;
    for (const t of filtered) {
      testIdx++;
+      // Buffer this test's diagnostics; they are flushed under its own result line below.
+      diagSink = [];
      const declaredContexts = t.contexts && t.contexts.length
        ? t.contexts
        : [t.context || defaultContextName];
@@ -237,18 +465,57 @@ export async function cmdTest(rawArgs) {
      if (t.skip) {
        const reason = typeof t.skip === 'string' ? t.skip : '';
        W.write(`  ○ ${t.name}${reason ? ` (skip: ${reason})` : ' (skip)'}\n`);
-        results.push({ name: t.name, file: t.file, tags: t.tags, contexts: declaredContexts, status: 'skipped', duration: 0, attempts: 0, steps: [], output: '', error: null, screenshot: null });
+        flushDiag();
+        recordResult({ name: t.name, file: t.file, tags: t.tags, contexts: declaredContexts, status: 'skipped', duration: 0, attempts: 0, steps: [], output: '', error: null, screenshot: null });
        skipCount++;
        continue;
      }

      const testContextNames = declaredContexts;
      try {
+        // Make room in the license pool before opening this test's contexts. Already-open needed
+        // contexts are reused (ensureContext no-ops); LRU-oldest non-pinned contexts are evicted.
+        const plan = planEviction({
+          open: browser.listContexts(),
+          needed: testContextNames,
+          pinned: pinnedSet,
+          max: maxContexts,
+          lruOrder,
+        });
+        if (plan.error) throw new Error(plan.error);
+        // Needed-but-not-yet-open contexts — also serve as a parking fallback when eviction would
+        // close the sole open context (can't closeContext the active slot with no survivor).
+        const toOpenQueue = testContextNames.filter(n => !browser.hasContext(n));
+        for (const name of plan.toEvict) {
+          if (browser.getActiveContext() === name) {
+            let survivor = browser.listContexts().find(n => n !== name);
+            if (!survivor) {
+              // `name` is the only open context. Open a needed one first to park on — room is
+              // guaranteed because we free `name` right after and multi-context implies max>=2.
+              if (browser.listContexts().length < maxContexts && toOpenQueue.length) {
+                const parkName = toOpenQueue.shift();
+                await ensureContext(parkName);
+                survivor = parkName;
+              } else {
+                throw new Error(`cannot evict "${name}": it is the only open context and maxContexts=${maxContexts} leaves no room to switch. Use maxContexts>=2 when tests alternate contexts.`);
+              }
+            }
+            await browser.setActiveContext(survivor);
+          }
+          if (hooks.beforeCloseContext && hookCtx) {
+            try { await hooks.beforeCloseContext(hookCtx, name, contextSpecs[name]); }
+            catch (e) { hookLog(`beforeCloseContext("${name}") threw: ${e.message.split('\n')[0]}`); }
+          }
+          await browser.closeContext(name);
+          dropLru(lruOrder, name);
+        }
        for (const cn of testContextNames) await ensureContext(cn);
        await browser.setActiveContext(testContextNames[0]);
+        touchLru(lruOrder, testContextNames);
      } catch (e) {
        W.write(`  ✗ ${t.name} (context setup failed: ${e.message})\n`);
-        results.push({ name: t.name, file: t.file, tags: t.tags, contexts: declaredContexts, status: 'failed', duration: 0, attempts: 0, steps: [], output: '', error: { message: e.message }, screenshot: null });
+        flushDiag();
+        recordResult({ name: t.name, file: t.file, tags: t.tags, contexts: declaredContexts, status: 'failed', duration: 0, attempts: 0, steps: [], output: '', error: { message: e.message }, screenshot: null });
        failCount++;
        if (opts.bail) break;
        continue;
@@ -282,7 +549,8 @@ export async function cmdTest(rawArgs) {
        let videoFile = null;
        if (opts.record) {
          videoFile = resolve(reportDir, `${testIdx}-${slugify(t.name)}.mp4`);
-          try { await browser.startRecording(videoFile, { force: true }); } catch { videoFile = null; }
+          const rec = await bounded(browser.startRecording(videoFile, { force: true }), D.startRecording, 'startRecording');
+          if (!rec.ok) videoFile = null;
        }

        ctx.log = (...a) => output.push(a.map(String).join(' '));
@@ -323,6 +591,9 @@ export async function cmdTest(rawArgs) {
          }
        }

+        const myEpoch = ++abortEpoch;
+        let timedOut = false;
+
        try {
          if (hooks.beforeEach) await hooks.beforeEach(ctx);
          if (t.setup) await t.setup(ctx);
@@ -330,8 +601,8 @@ export async function cmdTest(rawArgs) {
          let timeoutTimer;
          try {
            await Promise.race([
-              t.fn(ctx, t.param),
-              new Promise((_, reject) => { timeoutTimer = setTimeout(() => reject(new Error(`Timeout (${t.timeout}ms)`)), t.timeout); }),
+              t.fn(makeTestCtx(ctx, myEpoch), t.param),
+              new Promise((_, reject) => { timeoutTimer = setTimeout(() => { timedOut = true; reject(new Error(`Timeout (${t.timeout}ms)`)); }, t.timeout); }),
            ]);
          } finally {
            // Clear the guard timer — otherwise it stays armed in the event loop and,
@@ -340,16 +611,19 @@ export async function cmdTest(rawArgs) {
            clearTimeout(timeoutTimer);
          }

-          if (t.teardown) try { await t.teardown(ctx); } catch {}
+          // Bounded even on the green path: a test can pass and still leave the UI in a state
+          // where resetState wedges — that would stall the run just as dead as a failure would.
+          if (t.teardown) await bounded(t.teardown(ctx), D.teardown, 'teardown');
          ctx.testResult = { status: 'passed', duration: elapsed(t0), attempts: attempt, error: null, steps };
-          if (hooks.afterEach) try { await hooks.afterEach(ctx); } catch {}
+          if (hooks.afterEach) await bounded(hooks.afterEach(ctx), D.afterEach, 'hooks.afterEach');
          for (const cn of testContextNames) {
-            try { await browser.setActiveContext(cn); await resetState(ctx); } catch {}
+            if (!browser.hasContext(cn)) continue;
+            await resetOrAbort(cn, ctx);
          }
          for (const k of scopedKeys) delete ctx[k];

          if (videoFile) {
-            try { await browser.stopRecording(); } catch {}
+            await bounded(browser.stopRecording(), D.stopRecording, 'stopRecording');
          }
          const dur = elapsed(t0);
          testResult = { name: t.name, file: t.file, tags: t.tags, contexts: testContextNames, severity: t.severity, status: 'passed', duration: dur, attempts: attempt, start: t0, stop: Date.now(), steps, output: output.join('\n'), error: null, screenshot: null, video: videoFile };
@@ -357,35 +631,123 @@ export async function cmdTest(rawArgs) {
          break;

        } catch (e) {
-          // Screenshot on failure FIRST — before teardown/afterEach/resetState reset the UI.
-          let shotFile = e.onecError?.screenshot;
-          if (!shotFile && opts.screenshot !== 'off') {
-            try {
-              const png = await browser.screenshot();
-              shotFile = resolve(reportDir, `error-${testIdx}-${slugify(t.file.replace(/\.test\.mjs$/, ''))}.png`);
-              writeFileSync(shotFile, png);
-            } catch {}
+          // ── Timeout: diagnose, then destroy what hung. Everything below this point that
+          // goes through the renderer (screenshot, teardown, resetState) is pointless on a
+          // wedged page and would itself hang — so on `hang` we skip straight to the abort.
+          let diagnosis = null;
+          if (timedOut) {
+            const active = browser.getActiveContext();
+            const probe = active ? await browser.probeContext(active, { ms: D.probe }) : null;
+            const diag = active ? browser.getContextDiagnostics(active) : null;
+            const verdict = !probe ? 'no-context'
+              : !probe.browserAlive ? 'browser-dead'
+              : !probe.rendererAlive ? 'hang'
+              : diag?.net.inFlight > 0 ? 'slow-network'
+              : 'slow';
+
+            const lines = [
+              `verdict: ${verdict}` + (verdict === 'hang' ? ' (renderer unresponsive, browser alive)' : ''),
+              `  context "${active}" [${diag?.isolation}] · renderer probe: ${probe?.rendererAlive ? `ok in ${probe.rendererMs}ms` : `timed out at ${D.probe}ms`}` +
+                ` · browser probe: ${probe?.browserAlive ? `ok in ${probe.browserMs}ms` : `timed out at ${D.probe}ms`}`,
+              `  network: ${diag?.net.inFlight} in flight, last event ${diag?.msSinceLastNetEvent != null ? (diag.msSinceLastNetEvent / 1000).toFixed(1) + 's ago' : 'never'}` +
+                ` (${diag?.net.requests} req / ${diag?.net.responses} resp)`,
+            ];
+            // Same failure, different remedy — say which, or the next person guesses.
+            if (verdict === 'slow' || verdict === 'slow-network') {
+              lines.push('  no hang detected — the test is simply slower than its declared timeout; raise `export const timeout`');
+            }
+
+            if (verdict === 'hang' || verdict === 'browser-dead') {
+              const ab = await bounded(browser.abortContext(active), D.abortAll, 'abortContext');
+              const r = ab.ok ? ab.value : null;
+              lines.push(`  recovery: ${r ? `context aborted (logout: ${r.logout}, closed: ${r.closed}${r.escalated ? ', escalated to browser kill' : ''})` : 'abort failed'} — next test recreates it`);
+              if (r?.notes?.length) lines.push(`  notes: ${r.notes.join('; ')}`);
+              if (active) dropLru(lruOrder, active);
+            }
+            diagnosis = { verdict, probe, net: diag?.net };
+            e.message = `${e.message} — ${lines[0]}`;
+            output.push(...lines);
+            emit(lines.map(l => `    ${l}\n`).join(''));
          }

-          if (t.teardown) try { await t.teardown(ctx); } catch {}
-          const errInfo = { message: e.message, step: e.onecError?.step, screenshot: shotFile, onecError: e.onecError };
+          const dead = diagnosis && (diagnosis.verdict === 'hang' || diagnosis.verdict === 'browser-dead');
+
+          // Screenshot on failure FIRST — before teardown/afterEach/resetState reset the UI.
+          // Skipped on a dead page: it goes through the renderer, so it can only hang.
+          let shotFile = e.onecError?.screenshot;
+          if (!shotFile && opts.screenshot !== 'off' && !dead) {
+            const shot = await bounded(browser.screenshot(), D.screenshot, 'screenshot');
+            if (shot.ok) {
+              try {
+                shotFile = resolve(reportDir, `error-${testIdx}-${slugify(t.file.replace(/\.test\.mjs$/, ''))}.png`);
+                writeFileSync(shotFile, shot.value);
+              } catch { shotFile = undefined; }
+            }
+          } else if (shotFile && dirname(resolve(shotFile)) !== reportDir) {
+            // Shot came from a context built before setErrorShotDir (e.g. a server
+            // session started earlier): reporters attach by basename, so anything
+            // outside reportDir is a dead link. Move it in under a unique name.
+            const dest = resolve(reportDir, `error-${testIdx}-${slugify(t.file.replace(/\.test\.mjs$/, ''))}.png`);
+            try {
+              renameSync(resolve(shotFile), dest);
+              shotFile = dest;
+            } catch {
+              try {
+                copyFileSync(resolve(shotFile), dest);
+                try { unlinkSync(resolve(shotFile)); } catch {}
+                shotFile = dest;
+              } catch {}
+            }
+          }
+
+          if (t.teardown && !dead) await bounded(t.teardown(ctx), D.teardown, 'teardown');
+          const errInfo = { message: e.message, step: e.onecError?.step, screenshot: shotFile, onecError: e.onecError, diagnosis };
          ctx.testResult = { status: 'failed', duration: elapsed(t0), attempts: attempt, error: errInfo, steps };
-          if (hooks.afterEach) try { await hooks.afterEach(ctx); } catch {}
-          for (const cn of testContextNames) {
-            try { await browser.setActiveContext(cn); await resetState(ctx); } catch {}
+          if (hooks.afterEach) await bounded(hooks.afterEach(ctx), D.afterEach, 'hooks.afterEach');
+          // resetState drives the UI (up to 10 × getFormState + closeForm, all page.evaluate).
+          // On a dead page it cannot succeed — the slot is already gone anyway.
+          if (!dead) {
+            for (const cn of testContextNames) {
+              if (!browser.hasContext(cn)) continue;
+              await resetOrAbort(cn, ctx);
+            }
          }
          for (const k of scopedKeys) delete ctx[k];

          if (videoFile) {
-            try { await browser.stopRecording(); } catch {}
+            await bounded(browser.stopRecording(), D.stopRecording, 'stopRecording');
          }
          lastError = errInfo;
          const dur = elapsed(t0);
          testResult = { name: t.name, file: t.file, tags: t.tags, contexts: testContextNames, severity: t.severity, status: 'failed', duration: dur, attempts: attempt, start: t0, stop: Date.now(), steps, output: output.join('\n'), error: errInfo, screenshot: shotFile, video: videoFile };
+
+          // A wedged renderer is not flakiness — retrying just buys another full timeout
+          // plus another abort. Stop after the first hang.
+          if (dead) break;
        }
      }

-      results.push(testResult);
+      // strict policy: release this test's non-pinned contexts right after it (all attempts done),
+      // instead of keeping them for reuse. Frees 1C licenses ASAP on shared/tight stands. Parks
+      // active on a survivor before closing; never closes the sole remaining context.
+      if (contextPolicy === 'strict') {
+        for (const name of testContextNames) {
+          if (pinnedSet.has(name) || !browser.hasContext(name)) continue;
+          if (browser.getActiveContext() === name) {
+            const survivor = browser.listContexts().find(n => n !== name);
+            if (!survivor) continue; // can't close the sole active context — leave it open
+            try { await browser.setActiveContext(survivor); } catch {}
+          }
+          if (hooks.beforeCloseContext && hookCtx) {
+            try { await hooks.beforeCloseContext(hookCtx, name, contextSpecs[name]); }
+            catch (e) { hookLog(`beforeCloseContext("${name}") threw: ${e.message.split('\n')[0]}`); }
+          }
+          try { await browser.closeContext(name); } catch {}
+          dropLru(lruOrder, name);
+        }
+      }
+
+      recordResult(testResult);

      if (testResult.status === 'passed') {
        passCount++;
@@ -398,26 +760,35 @@ export async function cmdTest(rawArgs) {
        if (lastError?.screenshot) W.write(`    screenshot: ${lastError.screenshot}\n`);
      }

+      flushDiag();
+
      if (opts.bail && testResult.status === 'failed') break;
    }

-    if (hooks.afterAll) try { await hooks.afterAll(ctx); } catch {}
+    // Out of the per-test scope (also on `break`): afterAll and the final teardown have no test
+    // to nest under, so their diagnostics go straight to the stream again.
+    flushDiag();
+
+    if (hooks.afterAll) await bounded(hooks.afterAll(ctx), D.hooks, 'hooks.afterAll');

  } finally {
+    clearTimeout(globalTimer);
    // Per-context teardown
    try {
      const remaining = browser.listContexts();
      if (remaining.length > 0) {
        const survivor = remaining[0];
-        try { await browser.setActiveContext(survivor); } catch {}
+        await bounded(browser.setActiveContext(survivor), D.setActive, `setActiveContext(${survivor})`);
        for (let i = remaining.length - 1; i >= 1; i--) {
          const name = remaining[i];
          if (hooks.beforeCloseContext && hookCtx) {
            try { await hooks.beforeCloseContext(hookCtx, name, contextSpecs[name]); }
            catch (e) { hookLog(`beforeCloseContext("${name}") threw: ${e.message.split('\n')[0]}`); }
          }
-          try { await browser.closeContext(name); }
-          catch (e) { hookLog(`closeContext("${name}") failed: ${e.message.split('\n')[0]}`); }
+          // closeContext goes through the page (logout + close). If it breaches, fall back to
+          // abortContext: it logs out from Node, which is the path that survives a dead page.
+          const cc = await bounded(browser.closeContext(name), D.closeContext, `closeContext(${name})`);
+          if (!cc.ok) await bounded(browser.abortContext(name), D.closeContext, `abortContext(${name})`);
        }
        if (hooks.beforeCloseContext && hookCtx) {
          try { await hooks.beforeCloseContext(hookCtx, survivor, contextSpecs[survivor]); }
@@ -427,32 +798,35 @@ export async function cmdTest(rawArgs) {
    } catch (e) {
      hookLog(`final teardown loop failed: ${e.message.split('\n')[0]}`);
    }
-    try { await browser.disconnect(); } catch {}
-    if (hooks.cleanup) try { await hooks.cleanup(hookEnv); } catch {}
+    await bounded(browser.disconnect(), D.disconnect, 'disconnect');
+    if (hooks.cleanup) await bounded(hooks.cleanup(hookEnv), D.hooks, 'hooks.cleanup');
  }

-  const finishedAt = new Date().toISOString();
  const totalDuration = results.reduce((s, r) => s + r.duration, 0);
-
  W.write(`\n${passCount} passed, ${failCount} failed, ${skipCount} skipped (${formatDuration(totalDuration)})\n\n`);

-  const report = {
-    runner: 'web-test', url, startedAt, finishedAt,
-    duration: totalDuration,
-    summary: { total: results.length, passed: passCount, failed: failCount, skipped: skipCount },
-    tests: results,
-  };
-  if (opts.format === 'allure') {
-    writeAllure(results, reportDir, severityIndex);
-    syncAllureExtras(testDir, reportDir);
-  } else if (opts.format === 'junit') {
-    if (reportToStdout) process.stdout.write(buildJUnit(report, testDir) + '\n');
-    else writeFileSync(resolve(opts.report), buildJUnit(report, testDir));
-  } else if (reportToStdout) {
-    out(report);
-  } else if (opts.report) {
-    writeFileSync(resolve(opts.report), JSON.stringify(report, null, 2));
-  }
+  writeFinalReport('complete');

  if (failCount > 0) process.exit(1);
+
+  /**
+   * Allure results are already on disk (recordResult writes each test as it finishes), so this
+   * only completes the formats that need whole-run totals. Also called from hardStop, where
+   * `state` is 'aborted' and `results` holds whatever finished before the ceiling hit.
+   */
+  function writeFinalReport(state) {
+    const report = buildReport(state);
+    if (opts.format === 'allure') {
+      // Guard against a result-producing path that skipped recordResult; normally a no-op.
+      if (!allureWritten) writeAllure(results, reportDir, severityIndex);
+      syncAllureExtras(testDir, reportDir);
+    } else if (opts.format === 'junit') {
+      if (reportToStdout) process.stdout.write(buildJUnit(report, testDir) + '\n');
+      else writeFileSync(resolve(opts.report), buildJUnit(report, testDir));
+    } else if (reportToStdout) {
+      out(report);
+    } else if (opts.report) {
+      writeFileSync(resolve(opts.report), JSON.stringify(report, null, 2));
+    }
+  }
 }
@@ -1,13 +1,29 @@
-// web-test cli/exec-context v1.0 — buildContext + executeScript для run/exec/test
+// web-test cli/exec-context v1.1 — buildContext + executeScript для run/exec/test
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import { readFileSync, writeFileSync } from 'fs';
 import { resolve, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import * as browser from '../browser.mjs';
-import { elapsed } from './util.mjs';
+import { elapsed, slugify } from './util.mjs';

 const __dirname = dirname(fileURLToPath(import.meta.url));
-const ERROR_SHOT_PATH = resolve(__dirname, '..', '..', 'error-shot.png');
+const DEFAULT_ERROR_SHOT_PATH = resolve(__dirname, '..', '..', 'error-shot.png');
+
+// Where 1C-error screenshots go. The default is a single fixed file: fine for
+// interactive `exec`/`run` (last error wins, easy to find), wrong for a test run
+// where every test needs its own file inside reportDir. cmdTest overrides this.
+let errorShotDir = null;
+let errorShotSeq = 0;
+
+export function setErrorShotDir(dir) {
+  errorShotDir = dir;
+  errorShotSeq = 0;
+}
+
+function nextErrorShotPath(label) {
+  if (!errorShotDir) return DEFAULT_ERROR_SHOT_PATH;
+  return resolve(errorShotDir, `onec-error-${++errorShotSeq}-${slugify(label || 'shot')}.png`);
+}

 /**
 * Build a per-context wrapper: same shape as buildContext output, but every call
@@ -69,7 +85,7 @@ export function buildContext({ noRecord = false } = {}) {
        let errorShot;
        try {
          const png = await ctx.screenshot();
-          errorShot = ERROR_SHOT_PATH;
+          errorShot = nextErrorShotPath(name);
          writeFileSync(errorShot, png);
        } catch {}
        // Try to fetch call stack for modal errors before throwing
@@ -127,7 +143,7 @@ export async function executeScript(code, { noRecord } = {}) {
    if (!shotFile) {
      try {
        const png = await browser.screenshot();
-        shotFile = ERROR_SHOT_PATH;
+        shotFile = nextErrorShotPath('script');
        writeFileSync(shotFile, png);
      } catch {}
    }
@@ -0,0 +1,87 @@
+// web-test cli/test-runner/context-pool v1.0 — pure context-pool planner (LRU eviction).
+// Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+//
+// Decides which already-open contexts (each = one live 1C session = one license) to evict
+// so the next test's declared contexts fit within `maxContexts` simultaneous sessions.
+// Pure functions, no browser — unit-tested in context-pool.test.mjs.
+
+/**
+ * @param {object} p
+ * @param {string[]} p.open      currently open context names (live 1C sessions)
+ * @param {string[]} p.needed    context names the next test declares
+ * @param {Set<string>|string[]} [p.pinned] never-evict context names
+ * @param {number|null} [p.max]  simultaneous-session cap; null/undefined = unlimited
+ * @param {string[]} [p.lruOrder] usage order, oldest first / freshest last
+ * @returns {{ toEvict: string[], error: string|null }}
+ */
+export function planEviction({ open = [], needed = [], pinned = [], max = null, lruOrder = [] }) {
+  const pinnedSet = pinned instanceof Set ? pinned : new Set(pinned);
+  const neededSet = new Set(needed);
+  const openSet = new Set(open);
+
+  // Unlimited pool → never evict (back-compat: behaves like the pre-pool runner).
+  if (max == null) return { toEvict: [], error: null };
+
+  // Lower bound that must stay live regardless of eviction: this test's needed contexts, plus
+  // pinned contexts that are ALREADY open (pinned = "don't evict while open", NOT "always open" —
+  // a pinned context that is currently closed does not count against this test's budget).
+  const mustStay = new Set(needed);
+  for (const p of pinnedSet) if (openSet.has(p)) mustStay.add(p);
+  if (mustStay.size > max) {
+    return {
+      toEvict: [],
+      error: `context pool exhausted: this test needs ${mustStay.size} simultaneous 1C sessions `
+        + `(declared contexts + already-open pinned) but maxContexts=${max}. `
+        + `Raise maxContexts, reduce declared contexts, or shrink pinnedContexts.`,
+    };
+  }
+
+  // projected = everything live once we open `needed`. If it already fits, nothing to evict.
+  const projected = new Set([...open, ...needed]);
+  if (projected.size <= max) return { toEvict: [], error: null };
+
+  // Evictable = open, not pinned, not needed — oldest first by lruOrder.
+  const evictable = [];
+  for (const name of lruOrder) {
+    if (openSet.has(name) && !pinnedSet.has(name) && !neededSet.has(name)) evictable.push(name);
+  }
+  // Any open evictable missing from lruOrder → treat as oldest (evict first).
+  for (const name of open) {
+    if (!lruOrder.includes(name) && !pinnedSet.has(name) && !neededSet.has(name)) {
+      evictable.unshift(name);
+    }
+  }
+
+  const toEvict = [];
+  let size = projected.size;
+  for (const name of evictable) {
+    if (size <= max) break;
+    toEvict.push(name);
+    size--;
+  }
+  // Guaranteed size <= max here: after removing all evictable, projected collapses to
+  // (open ∩ pinned) ∪ needed == mustStay, and mustStay.size <= max passed the guard above.
+  return { toEvict, error: null };
+}
+
+/**
+ * Move `names` to the fresh end of the LRU order (most-recently-used last). Mutates and returns
+ * `lruOrder`. Idempotent per name — existing entries are relocated, not duplicated.
+ */
+export function touchLru(lruOrder, names) {
+  for (const n of (Array.isArray(names) ? names : [names])) {
+    const i = lruOrder.indexOf(n);
+    if (i >= 0) lruOrder.splice(i, 1);
+    lruOrder.push(n);
+  }
+  return lruOrder;
+}
+
+/** Remove `names` from the LRU order (e.g. after a context is closed). Mutates and returns it. */
+export function dropLru(lruOrder, names) {
+  for (const n of (Array.isArray(names) ? names : [names])) {
+    const i = lruOrder.indexOf(n);
+    if (i >= 0) lruOrder.splice(i, 1);
+  }
+  return lruOrder;
+}
@@ -1,4 +1,4 @@
-// web-test cli/test-runner/discover v1.1 — test file discovery + state reset between tests
+// web-test cli/test-runner/discover v1.3 — test file discovery + state reset between tests
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 import { existsSync, readdirSync } from 'fs';
 import { resolve } from 'path';
@@ -29,15 +29,54 @@ export function discoverTests(testPaths) {
  return [...new Set(files)].sort();
 }

+/**
+ * Return the context to a clean desktop between tests — and REPORT whether that worked.
+ *
+ * The verdict is the point. closeForm does not throw when a form refuses to close: it returns
+ * `{closed:false}`, and this loop used to drop that on the floor, so a context with someone else's
+ * modal still open went back into the pool as "clean" and the next test clicked into it. Measured
+ * on the pilot's stand: 10 idle iterations, `closed:false` every time, state unchanged — and the
+ * runner called it a success.
+ *
+ * @returns {Promise<{clean: boolean, attempts: number, form?: any, title?: string, modal?: boolean, lastError?: Error}>}
+ *   `clean:false` also when the check itself failed — not being able to confirm is not being clean.
+ */
 export async function resetState(ctx) {
  try { if (typeof ctx.dismissPendingErrors === 'function') await ctx.dismissPendingErrors(); } catch {}
+  let attempts = 0;
+  let lastError = null;
  for (let i = 0; i < 10; i++) {
    try {
      const state = await ctx.getFormState();
      // form === null means no form open (desktop). form === 0 is a real background form
      // 1C exposes in some states — must still close it to fully reset.
-      if (state.form == null) break;
-      await ctx.closeForm({ save: false });
-    } catch { break; }
+      if (state.form == null) return { clean: true, attempts };
+      attempts++;
+      const r = await ctx.closeForm({ save: false });
+      // The platform found nothing closable → this is the desktop, however many forms sit on it.
+      // Without this the check would be "form == null", which is only true for an EMPTY desktop:
+      // on a real application the home page keeps its own forms (measured: form=5, formCount=3,
+      // no cross), so the old rule declared a perfectly clean context dirty after every test.
+      if (r?.nothingToClose) return { clean: true, attempts, desktop: true };
+      // Deliberately NOT bailing out on `closed:false`: measured A/B on the live suite — a dirty
+      // «Приходная накладная *» reports closed:false on the first round and closes on a later one,
+      // so an early exit aborted a context that was about to be clean. `closed` compares form
+      // numbers, so an intermediate step (a popup going away) reads as "nothing happened" even
+      // though progress was made. The verdict below judges the END state, which is what matters.
+    } catch (e) { lastError = e; break; }
+  }
+
+  // Control check — the loop proves nothing on its own: it can also exit via `catch` above.
+  try {
+    const state = await ctx.getFormState();
+    if (state.form == null) return { clean: true, attempts };
+    return {
+      clean: false, attempts, lastError,
+      form: state.form,
+      title: state.activeTab || null,
+      modal: !!state.modal,
+    };
+  } catch (e) {
+    return { clean: false, attempts, lastError: lastError || e };
  }
 }
@@ -1,6 +1,10 @@
-// web-test cli/util v1.2 — generic helpers for CLI commands
+// web-test cli/util v1.4 — generic helpers for CLI commands
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

+// Wall-clock bounds live in the engine (session.mjs needs them too, and the engine must not
+// depend on cli/). Re-exported here so CLI callers have one import site.
+export { withDeadline, softDeadline, DeadlineError } from '../engine/core/deadline.mjs';
+
 export function out(obj) {
  process.stdout.write(JSON.stringify(obj, null, 2) + '\n');
 }
@@ -35,12 +39,29 @@ export function elapsed2(start, stop) {
  return Math.round(((stop || Date.now()) - start) / 100) / 10;
 }

+const TRANSLIT = {
+  а: 'a', б: 'b', в: 'v', г: 'g', д: 'd', е: 'e', ё: 'e', ж: 'zh', з: 'z', и: 'i',
+  й: 'y', к: 'k', л: 'l', м: 'm', н: 'n', о: 'o', п: 'p', р: 'r', с: 's', т: 't',
+  у: 'u', ф: 'f', х: 'h', ц: 'ts', ч: 'ch', ш: 'sh', щ: 'sch', ъ: '', ы: 'y', ь: '',
+  э: 'e', ю: 'yu', я: 'ya',
+};
+
+/**
+ * ASCII-only slug for artifact file names (screenshots, videos).
+ * Non-ASCII names are unusable as Allure attachments: the Allure CLI silently
+ * fails to resolve them and emits `"size": 0` with no link to the file
+ * (JAVA_OPTS encoding flags do not help). Cyrillic is transliterated so the
+ * name stays readable; anything else non-ASCII collapses to `-`.
+ */
 export function slugify(s) {
-  return String(s).trim()
-    .replace(/[\s/\\:*?"<>|]+/g, '-')
+  const ascii = String(s).trim().toLowerCase()
+    .replace(/[а-яё]/g, ch => TRANSLIT[ch] ?? '-');
+  return ascii
+    .replace(/[^a-z0-9._-]+/g, '-')
    .replace(/-+/g, '-')
    .replace(/^-|-$/g, '')
-    .slice(0, 60) || 'step';
+    .slice(0, 60)
+    .replace(/^-|-$/g, '') || 'step';
 }

 export function formatDuration(seconds) {
@@ -1,4 +1,4 @@
-// web-test dom v1.16 — facade re-exporting injectable DOM scripts from dom/
+// web-test dom v1.20 — facade re-exporting injectable DOM scripts from dom/
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 /**
 * Facade: re-exports DOM selector & semantic mapping script generators.
@@ -11,6 +11,7 @@

 export {
  detectFormScript,
+  closeCrossScript,
  readFormScript,
  findClickTargetScript,
  findFieldButtonScript,
@@ -1,4 +1,4 @@
-// web-test dom shared v1.2 — embedded JS function constants
+// web-test dom shared v1.7 — embedded JS function constants
 // Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 /**
 * Shared function strings embedded into page.evaluate() generators.
@@ -105,34 +105,257 @@ export const HEADERLESS_GRID_FN = `function synthHeaderlessColumns(grid) {
  return cols;
 }`;

+/**
+ * Single source of truth for columns of a grid WITH a header — the headed twin of
+ * synthHeaderlessColumns above, and for the same reason: a column name must map to the same
+ * physical cell for readers (readTable) and resolvers (click, row search, filter, fill).
+ *
+ * Column identity is `colindex` — 1С's own column id, present on both header boxes and body
+ * cells. Geometry is the FALLBACK, used only for cells that have no header of their own
+ * (sub-rows of a merged header, e.g. «Субконто Дт» over three stacked cells).
+ *
+ * Why colindex first: a wide header (ERP task list, «Исполнитель» spanning x 1085…1515) covers
+ * the narrow headers below it («Срок» 1085…1251, «Выполнена» 1251…1515). Matching a cell by its
+ * center-x alone puts the «Исполнитель» cell (center 1300) into the «Выполнена» group — which
+ * both fakes a merged header (phantom «Выполнена 1/2») and glues foreign values together.
+ * The write path (grid-edit.mjs) already resolves cells by colindex for exactly this reason.
+ *
+ * Column: { name, text, title, ci, x, right, y, h, fixed, kind?, subIdx? }
+ *  - ci      — anchor; null for expanded sub-columns (their cells carry a different colindex).
+ *  - subIdx  — set on «Имя 1/2/3» columns expanded from ONE header over several sub-rows;
+ *              such a cell is found by its Y order inside the header's x-range.
+ */
+export const COLUMN_MODEL_FN = HEADERLESS_GRID_FN + `
+function picInfoShared(cell) {
+  if (!cell) return null;
+  if (cell.querySelector('.gridListH, .gridListV, [tree="true"], .gridBoxTree')) return null;
+  const dib = cell.querySelector('.gridBoxImg .dIB');
+  if (!dib) return null;
+  const bg = dib.style.backgroundImage || '';
+  if (!bg.includes('pictureCollection/picture/')) return null;
+  const m = bg.match(/[?&]gx=(\\d+)/);
+  return { gx: m ? m[1] : '0' };
+}
+
+function buildColumnModel(grid) {
+  const head = grid.querySelector('.gridHead');
+  const body = grid.querySelector('.gridBody');
+  const empty = { columns: [], byCi: {}, groups: new Map(), subRows: {}, multiRow: {}, headless: !head };
+  if (!body) return empty;
+
+  if (!head) {
+    const cols = synthHeaderlessColumns(grid).map(c => ({
+      name: c.name, text: c.name, title: '', ci: c.colindex, subTarget: c.subTarget,
+      kind: c.kind, x: 0, right: 0, y: 0, h: 0, fixed: false,
+    }));
+    const byCi = {};
+    cols.forEach(c => { if (c.ci != null && byCi[c.ci] === undefined) byCi[c.ci] = c; });
+    return { columns: cols, byCi, groups: new Map(), subRows: {}, multiRow: {}, headless: true };
+  }
+
+  const headLine = head.querySelector('.gridLine') || head;
+  const lines = [...body.querySelectorAll('.gridLine')];
+  const cellByCi = (line, ci) => [...line.children].find(b => b.offsetWidth > 0 && b.getAttribute('colindex') === ci);
+  const columns = [];
+
+  [...headLine.children].forEach(box => {
+    if (box.offsetWidth === 0) return;
+    const ci = box.getAttribute('colindex');
+    const textEl = box.querySelector('.gridBoxText');
+    const text = ((textEl || box).innerText || '').trim().replace(/\\n/g, ' ');
+    const title = (box.getAttribute('title') || '').trim();
+    const r = box.getBoundingClientRect();
+    const base = { ci, x: r.x, right: r.x + r.width, y: r.y, h: r.height,
+                   fixed: box.classList.contains('gridBoxFix') };
+    if (text) { columns.push(Object.assign(base, { name: text, text: text, title: title })); return; }
+
+    // Unnamed header — a column only if its cells hold a checkbox or a picture. 1С doesn't
+    // expose the technical name, so it is named by the header tooltip.
+    // Sample SEVERAL rows: a picture bound to a Boolean draws nothing for false, so an empty
+    // first row is not evidence that the column has no pictures at all.
+    let kind = null;
+    for (const line of lines.slice(0, 10)) {
+      const cell = ci != null ? cellByCi(line, ci) : null;
+      if (!cell) continue;
+      if (cell.querySelector('.checkbox')) { kind = 'checkbox'; break; }
+      if (picInfoShared(cell)) { kind = 'picture'; break; }
+    }
+    if (!kind && picInfoShared(box)) kind = 'picture';
+    if (!kind) return;
+    let name = kind === 'checkbox' ? '(checkbox)' : (title || '(picture)');
+    if (columns.some(c => c.name === name)) {
+      let n = 2;
+      while (columns.some(c => c.name === name + ' ' + n)) n++;
+      name = name + ' ' + n;
+    }
+    columns.push(Object.assign(base, { name: name, text: '', title: title, kind: kind }));
+  });
+
+  const keyOf = c => Math.round(c.x) + ':' + Math.round(c.right);
+  const groups = new Map();
+  columns.forEach(c => { const k = keyOf(c); if (!groups.has(k)) groups.set(k, []); groups.get(k).push(c); });
+  for (const hdrs of groups.values()) hdrs.sort((a, b) => a.y - b.y);
+  const byCi = {};
+  columns.forEach(c => { if (c.ci != null && byCi[c.ci] === undefined) byCi[c.ci] = c; });
+
+  // Sub-rows per x-group, measured on the first data line. A cell belongs to the group of its
+  // OWN header whenever colindex says so; only header-less cells are placed geometrically.
+  const subRows = {};
+  if (lines[0]) {
+    [...lines[0].children].forEach(box => {
+      if (box.offsetWidth === 0) return;
+      const ci = box.getAttribute('colindex');
+      const own = ci != null ? byCi[ci] : null;
+      let key = null;
+      const r = box.getBoundingClientRect();
+      if (own) key = keyOf(own);
+      else {
+        const cx = r.x + r.width / 2;
+        for (const [k, hdrs] of groups) {
+          if (cx >= hdrs[0].x && cx < hdrs[0].right) { key = k; break; }
+        }
+      }
+      if (key == null) return;
+      (subRows[key] = subRows[key] || []).push({ y: r.y });
+    });
+    Object.keys(subRows).forEach(k => subRows[k].sort((a, b) => a.y - b.y));
+  }
+
+  // Stacked headers (2+ over several sub-rows) → match by Y order.
+  // ONE header over several sub-rows → merged header: expand into «Имя 1..N».
+  const multiRow = {};
+  for (const [k, hdrs] of groups) {
+    const subs = subRows[k];
+    if (!subs || subs.length <= 1) continue;
+    if (hdrs.length >= 2) { multiRow[k] = hdrs; continue; }
+    const base = hdrs[0];
+    const at = columns.indexOf(base);
+    columns.splice(at, 1);
+    if (base.ci != null && byCi[base.ci] === base) delete byCi[base.ci];
+    const expanded = [];
+    for (let si = 0; si < subs.length; si++) {
+      const col = Object.assign({}, base, {
+        name: base.name + ' ' + (si + 1), ci: null,
+        y: base.y + si, h: base.h / subs.length, subIdx: si,
+      });
+      columns.splice(at + si, 0, col);
+      expanded.push(col);
+    }
+    groups.set(k, expanded);
+    multiRow[k] = expanded;
+  }
+
+  return { columns: columns, byCi: byCi, groups: groups, subRows: subRows, multiRow: multiRow, headless: false };
+}
+
+/** Cell → column. colindex first; geometry only for cells without a header of their own. */
+function columnForCell(model, box) {
+  const ci = box.getAttribute('colindex');
+  if (ci != null && model.byCi[ci]) return model.byCi[ci];
+  const r = box.getBoundingClientRect();
+  const cx = r.x + r.width / 2;
+  const fixed = box.classList.contains('gridBoxFix');
+  for (const k of Object.keys(model.multiRow)) {
+    const hdrs = model.multiRow[k];
+    if (cx < hdrs[0].x || cx >= hdrs[0].right) continue;
+    const subs = model.subRows[k];
+    if (subs) {
+      const si = subs.findIndex(s => Math.abs(s.y - r.y) < 5);
+      if (si >= 0 && si < hdrs.length) return hdrs[si];
+    }
+    let best = hdrs[0], bd = Infinity;
+    for (const h of hdrs) { const d = Math.abs(r.y - h.y); if (d < bd) { bd = d; best = h; } }
+    return best;
+  }
+  return model.columns.find(c => cx >= c.x && cx < c.right && c.fixed === fixed) || null;
+}
+
+/** Column → cell inside a given line. Mirror of columnForCell, same precedence. */
+function cellForColumn(model, line, col) {
+  const boxes = [...line.children].filter(b => b.offsetWidth > 0);
+  if (col.subIdx != null) {
+    const inGroup = boxes
+      .filter(b => {
+        const r = b.getBoundingClientRect();
+        const cx = r.x + r.width / 2;
+        return cx >= col.x && cx < col.right && b.classList.contains('gridBoxFix') === col.fixed;
+      })
+      .sort((a, b) => a.getBoundingClientRect().y - b.getBoundingClientRect().y);
+    return inGroup[col.subIdx] || null;
+  }
+  if (col.ci != null) {
+    const hit = boxes.find(b => b.getAttribute('colindex') === col.ci);
+    if (hit) return hit;
+  }
+  return boxes
+    .filter(b => b.classList.contains('gridBoxFix') === col.fixed)
+    .find(b => {
+      const r = b.getBoundingClientRect();
+      const cx = r.x + r.width / 2;
+      return cx >= col.x && cx < col.right;
+    }) || null;
+}
+
+/** Column by user-supplied name: exact → «Группа / Имя» suffix → substring. */
+function resolveColumnByName(model, name) {
+  const lo = s => (s || '').toLowerCase().replace(/ё/g, 'е').trim();
+  const cand = c => [c.name, c.text, c.title].filter(Boolean);
+  const n = lo(name);
+  const suffix = lo(' / ' + name);
+  return model.columns.find(c => cand(c).some(t => lo(t) === n))
+      || model.columns.find(c => cand(c).some(t => lo(t).endsWith(suffix)))
+      || model.columns.find(c => cand(c).some(t => lo(t).includes(n)))
+      || null;
+}`;
+
+// Селекторы детекции формы. EDIT_SEL — «редактируемые» контролы (поля/кнопки): их наличие
+// исторически = «это форма». Но страницы настроек/справки (напр. «Интернет-поддержка и сервисы»)
+// собраны только из гиперссылок/frameButton/групп и НЕ имеют ни одного из этих трёх → форма не
+// детектировалась (form=null). ANY_SEL добавляет контентные/интерактивные классы декораций, чтобы
+// такие формы регистрировались. form0 (рабочий стол, тоже полон гиперссылок) исключается фильтром n>0.
+const FORM_DETECT_EDIT_SEL = 'input.editInput[id], textarea[id], a.press[id]';
+const FORM_DETECT_ANY_SEL = FORM_DETECT_EDIT_SEL + ', .staticTextHyper[id], .frameButton[id], .checkbox[id], .radio[id], .tumblerItem[id], .grid[id]';
+
 /** Detect active form number. Picks form with most visible elements, skipping form0.
 *  When modalSurface is visible — prefer the highest-numbered form (modal dialog). */
 export const DETECT_FORM_FN = HAS_VISIBLE_MODAL_FN + `
 function detectForm() {
-  const counts = {};
-  document.querySelectorAll('input.editInput[id], textarea[id], a.press[id]').forEach(el => {
+  const editSel = ${JSON.stringify(FORM_DETECT_EDIT_SEL)};
+  const anySel = ${JSON.stringify(FORM_DETECT_ANY_SEL)};
+  const editCounts = {};   // строгие поля/кнопки
+  const anyCounts = {};    // + контентные декорации
+  document.querySelectorAll(anySel).forEach(el => {
    if (el.offsetWidth === 0) return;
    const m = el.id.match(/^form(\\d+)_/);
-    if (m) counts[m[1]] = (counts[m[1]] || 0) + 1;
+    if (!m) return;
+    anyCounts[m[1]] = (anyCounts[m[1]] || 0) + 1;
+    if (el.matches(editSel)) editCounts[m[1]] = (editCounts[m[1]] || 0) + 1;
  });
-  const nums = Object.keys(counts).map(Number);
+  const nums = Object.keys(anyCounts).map(Number);
  if (!nums.length) return null;
  const candidates = nums.filter(n => n > 0);
  if (!candidates.length) return nums[0];
  // When modal surface is visible, prefer the highest-numbered form (modal dialog)
  if (hasVisibleModal()) {
    const maxForm = Math.max(...candidates);
-    if (counts[maxForm] >= 1) return maxForm;
+    if (anyCounts[maxForm] >= 1) return maxForm;
  }
-  return candidates.reduce((best, n) => counts[n] > counts[best] ? n : best);
+  // Двухуровневый выбор: пока есть формы с редактируемыми контролами — выбираем по ним (прежнее
+  // поведение, обычные формы не сдвигаются). Только когда у ВСЕХ кандидатов их нет (info-страница) —
+  // выбираем по расширенному счёту.
+  const editable = candidates.filter(n => editCounts[n] > 0);
+  const pool = editable.length ? editable : candidates;
+  const metric = editable.length ? editCounts : anyCounts;
+  return pool.reduce((best, n) => metric[n] > metric[best] ? n : best);
 }`;

 /** Detect all open forms + modal state. Returns { activeForm, allForms, formCount, modal }.
 *  Works even when the open-windows tab bar is hidden. */
 export const DETECT_FORMS_FN = HAS_VISIBLE_MODAL_FN + `
 function detectForms() {
+  const anySel = ${JSON.stringify(FORM_DETECT_ANY_SEL)};
  const counts = {};
-  document.querySelectorAll('input.editInput[id], textarea[id], a.press[id]').forEach(el => {
+  document.querySelectorAll(anySel).forEach(el => {
    if (el.offsetWidth === 0) return;
    const m = el.id.match(/^form(\\d+)_/);
    if (m) counts[m[1]] = (counts[m[1]] || 0) + 1;
@@ -214,6 +437,7 @@ function readForm(p) {
      type: 'checkbox'
    };
    if (label && label !== name) field.label = label;
+    if (el.classList.contains('checkboxDisabled')) field.disabled = true;
    fields.push(field);
  });

@@ -249,6 +473,7 @@ function readForm(p) {
      options: options.map(o => o.label)
    };
    if (label && label !== name) field.label = label;
+    if (document.getElementById(p + name)?.classList.contains('radioDisabled')) field.disabled = true;
    fields.push(field);
  }

@@ -277,15 +502,21 @@ function readForm(p) {
    const text = nbsp(el.innerText?.trim() || '');
    const idName = el.id?.replace(p, '') || '';
    if (!text && !idName) return;
-    buttons.push({ name: text || idName, frame: true });
+    // frameButton disabled uses the same class as a.press buttons (pressDisabled).
+    const btn = { name: text || idName, frame: true };
+    if (el.classList.contains('pressDisabled')) btn.disabled = true;
+    buttons.push(btn);
  });

-  // Tumbler items
+  // Tumbler items. Disabled state lives on the group element .frameTumbler
+  // (class tumblerDisabled), not on the individual segments.
  document.querySelectorAll('[id^="' + p + '"].tumblerItem').forEach(el => {
    if (el.offsetWidth === 0) return;
    const text = el.innerText?.trim();
    const idName = el.id?.replace(p, '') || '';
-    buttons.push({ name: text || idName, tumbler: true });
+    const btn = { name: text || idName, tumbler: true };
+    if (el.closest('.frameTumbler')?.classList.contains('tumblerDisabled')) btn.disabled = true;
+    buttons.push(btn);
  });

  // Tabs — scoped to form by checking ancestor IDs
@@ -443,12 +674,43 @@ function readForm(p) {
  });
  if (iframeCount) result.iframes = iframeCount;

+  // Collapsible / popup groups — surface that part of the form is hidden + its state.
+  // Идентификация раскрываемой группы (есть заголовок <base>#title_text и один из признаков):
+  //   • заголовок — гиперссылка (.staticTextHyper: ControlRepresentation=TitleHyperlink);
+  //   • рядом кнопка-каретка <base>#titleBtn (ControlRepresentation=Picture);
+  //   • есть панель <base>#panel_div — это ВСПЛЫВАЮЩАЯ (popup) группа.
+  // Обычные (несворачиваемые) группы не имеют ничего из этого — их не показываем.
+  // Состояние:
+  //   • popup: display панели <base>#panel_div (none → закрыта);
+  //   • collapsible: DOM у 1С плоский (контент — сиблинги под mainGroup, не вложены), но при
+  //     глубинном обходе Form.xml ПЕРВЫЙ контент-сиблинг сразу за #title_div — всегда дочерний
+  //     элемент группы (свободные соседи идут после всех детей). Его display = состояние.
+  const groups = [];
+  document.querySelectorAll('[id^="' + p + '"][id$="#title_text"]').forEach(tt => {
+    if (tt.offsetWidth === 0 && tt.offsetHeight === 0) return;
+    const base = tt.id.slice(0, -('#title_text'.length));
+    const panelDiv = document.getElementById(base + '#panel_div');   // popup-маркер
+    const isHyper = tt.classList.contains('staticTextHyper');
+    const hasBtn = !!document.getElementById(base + '#titleBtn');
+    if (!isHyper && !hasBtn && !panelDiv) return; // обычная (несворачиваемая) группа
+    const g = { name: base.replace(p, ''), title: nbsp(tt.innerText?.trim() || '') };
+    if (panelDiv) {
+      g.behavior = 'popup';
+      g.collapsed = getComputedStyle(panelDiv).display === 'none';
+    } else {
+      const contentSib = document.getElementById(base + '#title_div')?.nextElementSibling;
+      if (contentSib) g.collapsed = getComputedStyle(contentSib).display === 'none';
+    }
+    groups.push(g);
+  });
+
  if (fields.length) result.fields = fields;
  if (buttons.length) result.buttons = buttons;
  if (formTabs.length) result.tabs = formTabs;
  if (navigation.length) result.navigation = navigation;
  if (texts.length) result.texts = texts;
  if (hyperlinks.length) result.hyperlinks = hyperlinks;
+  if (groups.length) result.groups = groups;

  // Group DCS report settings into readable format
  if (result.fields) {
--- a/Show More
+++ b/Show More