Auto-build: agents (python) from fc2d460

2026-08-08 20:43:21 +03:00 · 2026-08-08 12:49:01 +00:00
3687 changed files with 16510 additions and 222530 deletions
@@ -1,32 +0,0 @@
-{
-  "name": "cc-1c-skills",
-  "interface": {
-    "displayName": "1C Skills"
-  },
-  "plugins": [
-    {
-      "name": "1c-skills",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/Nikolay-Shirokov/cc-1c-skills.git",
-        "ref": "port-codex"
-      },
-      "policy": {
-        "installation": "AVAILABLE"
-      },
-      "category": "Development"
-    },
-    {
-      "name": "1c-skills-py",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/Nikolay-Shirokov/cc-1c-skills.git",
-        "ref": "port-codex-py"
-      },
-      "policy": {
-        "installation": "AVAILABLE"
-      },
-      "category": "Development"
-    }
-  ]
-}
@@ -24,7 +24,7 @@ allowed-tools:
 | `NoValidate` | Пропустить авто-валидацию |

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cf-edit.ps1" -ConfigPath '<path>' -Operation modify-property -Value 'Version=1.0.0.1'
+python ".agents/skills/cf-edit/scripts/cf-edit.py" -ConfigPath '<path>' -Operation modify-property -Value 'Version=1.0.0.1'
 ```

 ## Операции
@@ -1,4 +1,4 @@
-# cf-edit v1.11 — Edit 1C configuration root (Configuration.xml)
+# cf-edit v1.16 — Edit 1C configuration root (Configuration.xml)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][Alias('Path')][string]$ConfigPath,
@@ -163,6 +163,8 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 Assert-EditAllowed $resolvedPath 'editable'

 # --- Load XML with PreserveWhitespace ---
+# NB: парсер XML по спецификации схлопывает CRLF в LF, а вставки ниже собираются с
+# явным CRLF — поэтому EOL приводится к целевому в точке записи (см. финализацию).
 $script:xmlDoc = New-Object System.Xml.XmlDocument
 $script:xmlDoc.PreserveWhitespace = $true
 $script:xmlDoc.Load($resolvedPath)
@@ -691,7 +693,9 @@ $bodyBlock$declarations
 	if (-not (Test-Path $extDir)) { New-Item -ItemType Directory -Path $extDir -Force | Out-Null }
 	$caiPath = Join-Path $extDir "ClientApplicationInterface.xml"
 	$utf8Bom = New-Object System.Text.UTF8Encoding($true)
-	[System.IO.File]::WriteAllText($caiPath, $caiXml, $utf8Bom)
+	# Файл создаём мы — канон: CRLF в разделителях, без перевода строки в конце.
+	$caiXml = ($caiXml -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($caiPath, $caiXml.TrimEnd("`r", "`n"), $utf8Bom)
 	$script:modifyCount++
 	Info "Wrote panel layout: $caiPath"
 }
@@ -880,7 +884,9 @@ $rightXml
 	if (-not (Test-Path $extDir)) { New-Item -ItemType Directory -Path $extDir -Force | Out-Null }
 	$hpPath = Join-Path $extDir "HomePageWorkArea.xml"
 	$utf8Bom = New-Object System.Text.UTF8Encoding($true)
-	[System.IO.File]::WriteAllText($hpPath, $hpXml, $utf8Bom)
+	# Файл создаём мы — канон: CRLF в разделителях, без перевода строки в конце.
+	$hpXml = ($hpXml -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($hpPath, $hpXml.TrimEnd("`r", "`n"), $utf8Bom)
 	$script:modifyCount++
 	Info "Wrote home page layout: $hpPath"
 }
@@ -982,6 +988,14 @@ $memStream.Close()
 $text = [System.Text.Encoding]::UTF8.GetString($bytes)
 if ($text.Length -gt 0 -and $text[0] -eq [char]0xFEFF) { $text = $text.Substring(1) }
 $text = $text.Replace('encoding="utf-8"', 'encoding="UTF-8"')
+# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+$text = [regex]::Replace($text, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })
+# Целевой перевод строки: стиль файла-назначения — правка наследует его (#44/#46/#47),
+# новый файл получает канон выгрузки CRLF. Зеркало _detect_xml_style в py-порту.
+$targetEol = if ((Test-Path -LiteralPath $resolvedPath) -and ([System.IO.File]::ReadAllText($resolvedPath) -notmatch "`r`n")) { "`n" } else { "`r`n" }
+$text = ($text -replace "`r`n", "`n") -replace "`n", $targetEol

 $utf8Bom = New-Object System.Text.UTF8Encoding($true)
 [System.IO.File]::WriteAllText($resolvedPath, $text, $utf8Bom)
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cf-edit v1.11 — Edit 1C configuration root (Configuration.xml)
+# cf-edit v1.16 — Edit 1C configuration root (Configuration.xml)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -341,21 +341,22 @@ def _detect_xml_style(path):


 def _finalize_xml_bytes(xml_bytes, style):
-    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
-    enc_decl = style["enc"] if style else "utf-8"
+    """Привести байты к стилю оригинала; для НОВОГО файла (style is None) — к канону
+    выгрузки Конфигуратора: encoding="UTF-8", CRLF в разделителях, без перевода в конце."""
+    enc_decl = style["enc"] if style else "UTF-8"
    xml_bytes = xml_bytes.replace(
        b"<?xml version='1.0' encoding='UTF-8'?>",
        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
-    # Финальный перенос — как в оригинале (новый файл → есть)
-    want_final_nl = style["final_nl"] if style else True
+    # Финальный перенос — как в оригинале (новый файл → нет, канон #57)
+    want_final_nl = style["final_nl"] if style else False
    xml_bytes = xml_bytes.rstrip(b"\n")
    if want_final_nl:
        xml_bytes += b"\n"
-    # EOL — как в оригинале (новый файл → LF, текущее поведение)
-    if style and style["crlf"]:
+    # EOL — как в оригинале (новый файл → CRLF, канон #57)
+    if (style["crlf"] if style else True):
        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
    return xml_bytes

@@ -23,7 +23,7 @@ allowed-tools:
 | `OutFile` | Записать результат в файл (UTF-8 BOM) |

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cf-info.ps1" -ConfigPath "<путь>"
+python ".agents/skills/cf-info/scripts/cf-info.py" -ConfigPath "<путь>"
 ```

 ## Три режима
@@ -24,7 +24,7 @@ allowed-tools:
 | `CompatibilityMode` | Режим совместимости (default: `Version8_3_24`) |

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cf-init.ps1" -Name "МояКонфигурация"
+python ".agents/skills/cf-init/scripts/cf-init.py" -Name "МояКонфигурация"
 ```

 ## Примеры
@@ -1,4 +1,4 @@
-# cf-init v1.3 — Create empty 1C configuration scaffold
+# cf-init v1.8 — Create empty 1C configuration scaffold
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -9,9 +9,9 @@ param(
 	[string]$Vendor,
 	[string]$CompatibilityMode = "Version8_3_24",
 	# Версия формата выгрузки (MDClasses). Её задаёт ПЛАТФОРМА, которой выгружают, и от режима
-	# совместимости она не зависит: 8.3.24 пишет 2.17, 8.3.27 — 2.20. Дефолт консервативный —
-	# 2.17 читается всеми поддерживаемыми платформами.
-	[ValidateSet("2.17", "2.20", "2.21")]
+	# совместимости она не зависит: 8.3.20-8.3.24 пишут 2.17, 8.3.25 — 2.18, 8.3.26 — 2.19,
+	# 8.3.27 — 2.20. Дефолт консервативный: 2.17 читается всеми поддерживаемыми платформами.
+	[ValidateSet("2.17", "2.18", "2.19", "2.20", "2.21")]
 	[string]$FormatVersion = "2.17"
 )

@@ -43,6 +43,9 @@ $co6 = [guid]::NewGuid().ToString()
 $co7 = [guid]::NewGuid().ToString()

 # --- Mobile functionalities ---
+# Версия формата как число — по ней ниже включаются вставки 2.21.
+$is221 = (($FormatVersion -match '^(\d+)\.(\d+)$') -and ([int]$Matches[1] * 100 + [int]$Matches[2]) -ge 221)
+
 $mobileFuncs = @(
 	@("Biometrics","true"), @("Location","false"), @("BackgroundLocation","false"),
 	@("BluetoothPrinters","false"), @("WiFiPrinters","false"), @("Contacts","false"),
@@ -59,6 +62,9 @@ $mobileFuncs = @(
 	@("DocumentScanning","false"), @("SpeechToText","false"), @("Geofences","false"),
 	@("IncomingShareRequests","false"), @("AllIncomingShareRequestsTypesProcessing","false")
 )
+# TextToSpeech — возможность мобильного приложения, добавленная форматом 2.21 (8.5),
+# последней в списке. На младших форматах платформа её не пишет.
+if ($is221) { $mobileFuncs += ,@("TextToSpeech","false") }

 $mobileXml = ""
 foreach ($mf in $mobileFuncs) {
@@ -72,13 +78,39 @@ if ($Synonym) {
 }

 # --- Optional properties ---
-$vendorXml = if ($Vendor) { [System.Security.SecurityElement]::Escape($Vendor) } else { "" }
-$versionXml = if ($Version) { [System.Security.SecurityElement]::Escape($Version) } else { "" }
+# Элемент целиком, а не значение внутри пары: при пустом значении Конфигуратор
+# пишет <Vendor/>, а не <Vendor></Vendor>.
+$vendorEl = if ($Vendor) { "<Vendor>$([System.Security.SecurityElement]::Escape($Vendor))</Vendor>" } else { "<Vendor/>" }
+$versionEl = if ($Version) { "<Version>$([System.Security.SecurityElement]::Escape($Version))</Version>" } else { "<Version/>" }
+
+# --- Свойства и пространство имён формата 2.21 (платформа 8.5) ---
+# Значения и ПОЗИЦИИ сняты с выгрузки 8.5.1 (debug/fmt221/dump_v851): те же исходники,
+# выгруженные с 8.3.27 и с 8.5.1, различаются ровно этим. Порядок важен — вставки идут
+# на своё место, а не в конец.
+$nl = "`r`n"
+$f221AuxForms = ""; $f221WindowVariant = ""; $f221OpenVariant = ""; $f221Captions = ""; $f221Migration = ""
+$palNs = ""
+if ($is221) {
+	$palNs = ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette"'
+	# Скобки вокруг -join обязательны: без них `$nl + (массив) -join $nl` разбирается как
+	# `($nl + массив) -join $nl`, массив склеивается пробелами и все теги уезжают в одну строку.
+	$f221AuxForms = $nl + ((@(
+		"<AuxiliaryReportForm/>", "<AuxiliaryReportVariantForm/>", "<AuxiliaryReportSettingsForm/>",
+		"<AuxiliaryDynamicListSettingsForm/>", "<AuxiliaryDataHistoryChangeHistoryForm/>",
+		"<AuxiliaryDataHistoryVersionDataForm/>", "<AuxiliaryDataHistoryVersionDifferencesForm/>",
+		"<AuxiliaryCollaborationSystemUsersChoiceForm/>"
+	) | ForEach-Object { "`t`t`t$_" }) -join $nl)
+	$f221WindowVariant = $nl + "`t`t`t<MainClientApplicationWindowInterfaceVariant>NavigationLeft</MainClientApplicationWindowInterfaceVariant>" +
+		$nl + "`t`t`t<ClientApplicationTheme>Auto</ClientApplicationTheme>"
+	$f221OpenVariant = $nl + "`t`t`t<ClientApplicationWindowsOpenVariant>OpenDataInDialogs</ClientApplicationWindowsOpenVariant>"
+	$f221Captions = $nl + "`t`t`t<Caption/>" + $nl + "`t`t`t<ShortCaption/>"
+	$f221Migration = $nl + "`t`t`t<Version85InterfaceMigrationMode>DontUse</Version85InterfaceMigrationMode>"
+}

 # --- Configuration.xml ---
 $cfgXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$FormatVersion">
+<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"$palNs xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$FormatVersion">
 	<Configuration uuid="$uuidCfg">
 		<InternalInfo>
 			<xr:ContainedObject>
@@ -122,8 +154,8 @@ $cfgXml = @"
 			</UsePurposes>
 			<ScriptVariant>Russian</ScriptVariant>
 			<DefaultRoles/>
-			<Vendor>$vendorXml</Vendor>
-			<Version>$versionXml</Version>
+			$vendorEl
+			$versionEl
 			<UpdateCatalogAddress/>
 			<IncludeHelpInContents>false</IncludeHelpInContents>
 			<UseManagedFormInOrdinaryApplication>false</UseManagedFormInOrdinaryApplication>
@@ -145,15 +177,15 @@ $cfgXml = @"
 			<DefaultDataHistoryChangeHistoryForm/>
 			<DefaultDataHistoryVersionDataForm/>
 			<DefaultDataHistoryVersionDifferencesForm/>
-			<DefaultCollaborationSystemUsersChoiceForm/>
+			<DefaultCollaborationSystemUsersChoiceForm/>$f221AuxForms
 			<RequiredMobileApplicationPermissions/>
 			<UsedMobileApplicationFunctionalities>$mobileXml
 			</UsedMobileApplicationFunctionalities>
 			<StandaloneConfigurationRestrictionRoles/>
 			<MobileApplicationURLs/>
-			<AllowedIncomingShareRequestTypes/>
-			<MainClientApplicationWindowMode>Normal</MainClientApplicationWindowMode>
-			<DefaultInterface/>
+			<AllowedIncomingShareRequestTypes/>$f221WindowVariant
+			<MainClientApplicationWindowMode>Normal</MainClientApplicationWindowMode>$f221OpenVariant
+			<DefaultInterface/>$f221Captions
 			<DefaultStyle/>
 			<DefaultLanguage>Language.Русский</DefaultLanguage>
 			<BriefInformation/>
@@ -165,7 +197,7 @@ $cfgXml = @"
 			<ObjectAutonumerationMode>NotAutoFree</ObjectAutonumerationMode>
 			<ModalityUseMode>DontUse</ModalityUseMode>
 			<SynchronousPlatformExtensionAndAddInCallUseMode>DontUse</SynchronousPlatformExtensionAndAddInCallUseMode>
-			<InterfaceCompatibilityMode>TaxiEnableVersion8_2</InterfaceCompatibilityMode>
+			<InterfaceCompatibilityMode>TaxiEnableVersion8_2</InterfaceCompatibilityMode>$f221Migration
 			<DatabaseTablespacesUseMode>DontUse</DatabaseTablespacesUseMode>
 			<CompatibilityMode>$CompatibilityMode</CompatibilityMode>
 			<DefaultConstantsForm/>
@@ -180,7 +212,7 @@ $cfgXml = @"
 # --- Languages/Русский.xml ---
 $langXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$FormatVersion">
+<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"$palNs xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$FormatVersion">
 	<Language uuid="$uuidLang">
 		<Properties>
 			<Name>Русский</Name>
@@ -240,11 +272,20 @@ if (-not (Test-Path $extDir)) {
 # --- Write files with UTF-8 BOM ---
 $enc = New-Object System.Text.UTF8Encoding($true)

-[System.IO.File]::WriteAllText($cfgFile, $cfgXml, $enc)
+# XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+#
+# Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+# копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+function Write-XmlFile([string]$path, [string]$text, $encoding) {
+	$t = ($text -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($path, $t.TrimEnd("`r", "`n"), $encoding)
+}
+
+Write-XmlFile $cfgFile $cfgXml $enc
 $langFile = Join-Path $langDir "Русский.xml"
-[System.IO.File]::WriteAllText($langFile, $langXml, $enc)
+Write-XmlFile $langFile $langXml $enc
 $caiFile = Join-Path $extDir "ClientApplicationInterface.xml"
-[System.IO.File]::WriteAllText($caiFile, $caiXml, $enc)
+Write-XmlFile $caiFile $caiXml $enc

 # --- Output ---
 Write-Host "[OK] Создана конфигурация: $Name"
@@ -1,8 +1,8 @@
 #!/usr/bin/env python3
-# cf-init v1.3 — Create empty 1C configuration scaffold
+# cf-init v1.8 — Create empty 1C configuration scaffold
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 """Generates minimal XML source files for a 1C configuration."""
-import sys, os, argparse, uuid
+import sys, os, argparse, re, uuid

 def esc_xml(s):
    return s.replace('&','&amp;').replace('<','&lt;').replace('>','&gt;').replace('"','&quot;')
@@ -14,6 +14,16 @@ def write_utf8_bom(path, content):
    with open(path, 'w', encoding='utf-8-sig', newline='') as f:
        f.write(content)

+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    write_utf8_bom(path, text)
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -25,8 +35,10 @@ def main():
    parser.add_argument('-Vendor', dest='Vendor', default='')
    parser.add_argument('-CompatibilityMode', dest='CompatibilityMode', default='Version8_3_24')
    # Версия формата выгрузки (MDClasses) — её задаёт ПЛАТФОРМА, а не режим совместимости:
-    # 8.3.24 пишет 2.17, 8.3.27 — 2.20. Дефолт консервативный: 2.17 читается всеми платформами.
-    parser.add_argument('-FormatVersion', dest='FormatVersion', default='2.17', choices=['2.17', '2.20', '2.21'])
+    # 8.3.20-8.3.24 пишут 2.17, 8.3.25 — 2.18, 8.3.26 — 2.19, 8.3.27 — 2.20.
+    # Дефолт консервативный: 2.17 читается всеми платформами.
+    parser.add_argument('-FormatVersion', dest='FormatVersion', default='2.17',
+                        choices=['2.17', '2.18', '2.19', '2.20', '2.21'])
    args = parser.parse_args()

    name = args.Name
@@ -52,6 +64,10 @@ def main():
    co = [new_uuid() for _ in range(7)]

    # --- Mobile functionalities ---
+    # Версия формата как число — по ней ниже включаются вставки 2.21.
+    _fm = re.match(r'^(\d+)\.(\d+)$', args.FormatVersion)
+    is_221 = bool(_fm) and int(_fm.group(1)) * 100 + int(_fm.group(2)) >= 221
+
    mobile_funcs = [
        ("Biometrics","true"), ("Location","false"), ("BackgroundLocation","false"),
        ("BluetoothPrinters","false"), ("WiFiPrinters","false"), ("Contacts","false"),
@@ -68,6 +84,10 @@ def main():
        ("DocumentScanning","false"), ("SpeechToText","false"), ("Geofences","false"),
        ("IncomingShareRequests","false"), ("AllIncomingShareRequestsTypesProcessing","false"),
    ]
+    # TextToSpeech — возможность мобильного приложения, добавленная форматом 2.21 (8.5),
+    # последней в списке. На младших форматах платформа её не пишет.
+    if is_221:
+        mobile_funcs.append(("TextToSpeech", "false"))

    mobile_xml = ""
    for func_name, func_use in mobile_funcs:
@@ -78,8 +98,10 @@ def main():
    if synonym:
        synonym_xml = f"\r\n\t\t\t\t<v8:item>\r\n\t\t\t\t\t<v8:lang>ru</v8:lang>\r\n\t\t\t\t\t<v8:content>{esc_xml(synonym)}</v8:content>\r\n\t\t\t\t</v8:item>\r\n\t\t\t"

-    vendor_xml = esc_xml(vendor) if vendor else ""
-    version_xml = esc_xml(version) if version else ""
+    # Элемент целиком, а не значение внутри пары: при пустом значении Конфигуратор
+    # пишет <Vendor/>, а не <Vendor></Vendor>.
+    vendor_el = f"<Vendor>{esc_xml(vendor)}</Vendor>" if vendor else "<Vendor/>"
+    version_el = f"<Version>{esc_xml(version)}</Version>" if version else "<Version/>"

    class_ids = [
        "9cd510cd-abfc-11d4-9434-004095e12fc7",
@@ -91,6 +113,28 @@ def main():
        "fb282519-d103-4dd3-bc12-cb271d631dfc",
    ]

+    # Свойства и пространство имён формата 2.21 (платформа 8.5). Значения и ПОЗИЦИИ сняты
+    # с выгрузки 8.5.1 (debug/fmt221/dump_v851): те же исходники, выгруженные с 8.3.27 и
+    # с 8.5.1, различаются ровно этим. Порядок важен — вставки идут на своё место.
+    pal_ns = ""
+    f221_aux_forms = f221_window_variant = f221_open_variant = f221_captions = f221_migration = ""
+    if is_221:
+        pal_ns = ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette"'
+        f221_aux_forms = "\r\n" + "\r\n".join(
+            f"\t\t\t{t}" for t in (
+                "<AuxiliaryReportForm/>", "<AuxiliaryReportVariantForm/>", "<AuxiliaryReportSettingsForm/>",
+                "<AuxiliaryDynamicListSettingsForm/>", "<AuxiliaryDataHistoryChangeHistoryForm/>",
+                "<AuxiliaryDataHistoryVersionDataForm/>", "<AuxiliaryDataHistoryVersionDifferencesForm/>",
+                "<AuxiliaryCollaborationSystemUsersChoiceForm/>"))
+        f221_window_variant = ("\r\n\t\t\t<MainClientApplicationWindowInterfaceVariant>NavigationLeft"
+                               "</MainClientApplicationWindowInterfaceVariant>"
+                               "\r\n\t\t\t<ClientApplicationTheme>Auto</ClientApplicationTheme>")
+        f221_open_variant = ("\r\n\t\t\t<ClientApplicationWindowsOpenVariant>OpenDataInDialogs"
+                             "</ClientApplicationWindowsOpenVariant>")
+        f221_captions = "\r\n\t\t\t<Caption/>\r\n\t\t\t<ShortCaption/>"
+        f221_migration = ("\r\n\t\t\t<Version85InterfaceMigrationMode>DontUse"
+                          "</Version85InterfaceMigrationMode>")
+
    contained_objects = ""
    for i in range(7):
        contained_objects += f"""\t\t\t<xr:ContainedObject>
@@ -99,7 +143,7 @@ def main():
 \t\t\t</xr:ContainedObject>\n"""

    cfg_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{args.FormatVersion}">
+<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"{pal_ns} xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{args.FormatVersion}">
 \t<Configuration uuid="{uuid_cfg}">
 \t\t<InternalInfo>
 {contained_objects}\t\t</InternalInfo>
@@ -115,8 +159,8 @@ def main():
 \t\t\t</UsePurposes>
 \t\t\t<ScriptVariant>Russian</ScriptVariant>
 \t\t\t<DefaultRoles/>
-\t\t\t<Vendor>{vendor_xml}</Vendor>
-\t\t\t<Version>{version_xml}</Version>
+\t\t\t{vendor_el}
+\t\t\t{version_el}
 \t\t\t<UpdateCatalogAddress/>
 \t\t\t<IncludeHelpInContents>false</IncludeHelpInContents>
 \t\t\t<UseManagedFormInOrdinaryApplication>false</UseManagedFormInOrdinaryApplication>
@@ -138,15 +182,15 @@ def main():
 \t\t\t<DefaultDataHistoryChangeHistoryForm/>
 \t\t\t<DefaultDataHistoryVersionDataForm/>
 \t\t\t<DefaultDataHistoryVersionDifferencesForm/>
-\t\t\t<DefaultCollaborationSystemUsersChoiceForm/>
+\t\t\t<DefaultCollaborationSystemUsersChoiceForm/>{f221_aux_forms}
 \t\t\t<RequiredMobileApplicationPermissions/>
 \t\t\t<UsedMobileApplicationFunctionalities>{mobile_xml}
 \t\t\t</UsedMobileApplicationFunctionalities>
 \t\t\t<StandaloneConfigurationRestrictionRoles/>
 \t\t\t<MobileApplicationURLs/>
-\t\t\t<AllowedIncomingShareRequestTypes/>
-\t\t\t<MainClientApplicationWindowMode>Normal</MainClientApplicationWindowMode>
-\t\t\t<DefaultInterface/>
+\t\t\t<AllowedIncomingShareRequestTypes/>{f221_window_variant}
+\t\t\t<MainClientApplicationWindowMode>Normal</MainClientApplicationWindowMode>{f221_open_variant}
+\t\t\t<DefaultInterface/>{f221_captions}
 \t\t\t<DefaultStyle/>
 \t\t\t<DefaultLanguage>Language.Русский</DefaultLanguage>
 \t\t\t<BriefInformation/>
@@ -158,7 +202,7 @@ def main():
 \t\t\t<ObjectAutonumerationMode>NotAutoFree</ObjectAutonumerationMode>
 \t\t\t<ModalityUseMode>DontUse</ModalityUseMode>
 \t\t\t<SynchronousPlatformExtensionAndAddInCallUseMode>DontUse</SynchronousPlatformExtensionAndAddInCallUseMode>
-\t\t\t<InterfaceCompatibilityMode>TaxiEnableVersion8_2</InterfaceCompatibilityMode>
+\t\t\t<InterfaceCompatibilityMode>TaxiEnableVersion8_2</InterfaceCompatibilityMode>{f221_migration}
 \t\t\t<DatabaseTablespacesUseMode>DontUse</DatabaseTablespacesUseMode>
 \t\t\t<CompatibilityMode>{compat}</CompatibilityMode>
 \t\t\t<DefaultConstantsForm/>
@@ -171,7 +215,7 @@ def main():

    # --- Languages/Русский.xml ---
    lang_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{args.FormatVersion}">
+<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"{pal_ns} xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{args.FormatVersion}">
 \t<Language uuid="{uuid_lang}">
 \t\t<Properties>
 \t\t\t<Name>Русский</Name>
@@ -220,11 +264,11 @@ def main():
    os.makedirs(ext_dir, exist_ok=True)

    # --- Write files ---
-    write_utf8_bom(cfg_file, cfg_xml)
+    write_xml_file(cfg_file, cfg_xml)
    lang_file = os.path.join(lang_dir, "Русский.xml")
-    write_utf8_bom(lang_file, lang_xml)
+    write_xml_file(lang_file, lang_xml)
    cai_file = os.path.join(ext_dir, "ClientApplicationInterface.xml")
-    write_utf8_bom(cai_file, cai_xml)
+    write_xml_file(cai_file, cai_xml)

    print(f"[OK] Создана конфигурация: {name}")
    print(f"     Каталог:            {output_dir}")
@@ -24,6 +24,6 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cf-validate.ps1" -ConfigPath "upload/cfempty"
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cf-validate.ps1" -ConfigPath "upload/cfempty/Configuration.xml"
+python ".agents/skills/cf-validate/scripts/cf-validate.py" -ConfigPath "upload/cfempty"
+python ".agents/skills/cf-validate/scripts/cf-validate.py" -ConfigPath "upload/cfempty/Configuration.xml"
 ```
@@ -1,4 +1,4 @@
-# cf-validate v1.4 — Validate 1C configuration root structure
+# cf-validate v1.5 — Validate 1C configuration root structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -205,8 +205,9 @@ if ($root.NamespaceURI -ne $expectedNs) {
 $version = $root.GetAttribute("version")
 if (-not $version) {
 	Report-Warn "1. Missing version attribute on MetaDataObject"
-} elseif ($version -ne "2.17" -and $version -ne "2.20" -and $version -ne "2.21") {
-	Report-Warn "1. Unusual version '$version' (expected 2.17, 2.20 or 2.21)"
+} elseif ($version -notin @("2.17", "2.18", "2.19", "2.20", "2.21")) {
+	# Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+	Report-Warn "1. Unusual version '$version' (expected 2.17-2.20 or 2.21)"
 }

 # Must have Configuration child
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cf-validate v1.4 — Validate 1C configuration XML structure
+# cf-validate v1.5 — Validate 1C configuration XML structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 """Validates Configuration.xml: root structure, InternalInfo, properties, ChildObjects, languages."""
 import sys, os, argparse, re
@@ -232,8 +232,9 @@ def main():
    version = root.get('version', '')
    if not version:
        r.warn('1. Missing version attribute on MetaDataObject')
-    elif version not in ('2.17', '2.20', '2.21'):
-        r.warn(f"1. Unusual version '{version}' (expected 2.17, 2.20 or 2.21)")
+    elif version not in ('2.17', '2.18', '2.19', '2.20', '2.21'):
+        # Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+        r.warn(f"1. Unusual version '{version}' (expected 2.17-2.20 or 2.21)")

    # Must have Configuration child
    cfg_node = None
@@ -71,7 +71,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-borrow.ps1" -ExtensionPath src -ConfigPath C:\cfsrc\erp -Object "Catalog.Контрагенты"
+python ".agents/skills/cfe-borrow/scripts/cfe-borrow.py" -ExtensionPath src -ConfigPath C:\cfsrc\erp -Object "Catalog.Контрагенты"
 ```

 ## Примеры
@@ -1,4 +1,4 @@
-# cfe-borrow v1.9 — Borrow objects from configuration into extension (CFE)
+# cfe-borrow v1.16 — Borrow objects from configuration into extension (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)][string]$ExtensionPath,
@@ -285,14 +285,36 @@ $script:generatedTypes = @{
 	"DefinedType" = @(
 		@{ prefix = "DefinedType"; category = "DefinedType" }
 	)
+	"Sequence" = @(
+		@{ prefix = "SequenceRecord";    category = "Record" }
+		@{ prefix = "SequenceManager";   category = "Manager" }
+		@{ prefix = "SequenceRecordSet"; category = "RecordSet" }
+	)
+	"FilterCriterion" = @(
+		@{ prefix = "FilterCriterionManager"; category = "Manager" }
+		@{ prefix = "FilterCriterionList";    category = "List" }
+	)
+	"SettingsStorage" = @(
+		@{ prefix = "SettingsStorageManager"; category = "Manager" }
+	)
+	"IntegrationService" = @(
+		@{ prefix = "IntegrationServiceManager"; category = "Manager" }
+	)
+	"WSReference" = @(
+		@{ prefix = "WSReferenceManager"; category = "Manager" }
+	)
 }

-# Types that need ChildObjects element
+# Types that need ChildObjects element — fallback when the source object cannot be probed.
+# The platform emits <ChildObjects> for every container type even when empty, and rejects
+# the file without it ("ожидаемое ChildObjects"); primary signal is the source object itself.
 $typesWithChildObjects = @(
 	"Catalog","Document","ExchangePlan","ChartOfAccounts",
 	"ChartOfCharacteristicTypes","ChartOfCalculationTypes",
 	"BusinessProcess","Task","Enum",
-	"InformationRegister","AccumulationRegister","AccountingRegister","CalculationRegister"
+	"InformationRegister","AccumulationRegister","AccountingRegister","CalculationRegister",
+	"DataProcessor","Report","DocumentJournal","FilterCriterion","SettingsStorage",
+	"Sequence","HTTPService","WebService","IntegrationService","Subsystem"
 )

 # CommonModule properties to copy from source
@@ -348,7 +370,10 @@ function Detect-FormatVersion([string]$dir) {
 	while ($d) {
 		$cfgPath = Join-Path $d "Configuration.xml"
 		if (Test-Path $cfgPath) {
-			$head = [System.IO.File]::ReadAllText($cfgPath, [System.Text.Encoding]::UTF8).Substring(0, [Math]::Min(2000, (Get-Item $cfgPath).Length))
+			$cfgText = [System.IO.File]::ReadAllText($cfgPath, [System.Text.Encoding]::UTF8)
+			# Длину среза берём по СТРОКЕ, а не по размеру файла: размер в БАЙТАХ, Substring считает
+			# СИМВОЛЫ, и на кириллице байт больше — короткий Configuration.xml ронял навык исключением.
+			$head = $cfgText.Substring(0, [Math]::Min(2000, $cfgText.Length))
 			if ($head -match '<MetaDataObject[^>]+version="(\d+\.\d+)"') { return $Matches[1] }
 		}
 		$parent = Split-Path $d -Parent
@@ -363,6 +388,20 @@ $script:formatVersion = Detect-FormatVersion $extDir
 # --- 8. Namespaces declaration for object XML ---
 $script:xmlnsDecl = 'xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'

+# Версия формата как число для сравнений: "2.20" → 220, "2.9" → 209.
+# Строковое сравнение здесь неверно ("2.9" > "2.17" лексикографически) — известная ловушка.
+function Get-FormatRank([string]$ver) {
+	if ($ver -match '^(\d+)\.(\d+)$') { return [int]$Matches[1] * 100 + [int]$Matches[2] }
+	return 0
+}
+
+# 2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+# Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+# дописать в конец нельзя.
+if ((Get-FormatRank $script:formatVersion) -ge 221) {
+	$script:xmlnsDecl = $script:xmlnsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+}
+
 # --- 9. Parse -Object into items ---
 $items = @()
 foreach ($part in $Object.Split(";;")) {
@@ -454,6 +493,9 @@ function Read-SourceObject {
 		}
 	}

+	# Whether the platform emits <ChildObjects> for this type — the source object is the ground truth
+	$srcProps["__HasChildObjects"] = ($srcEl.SelectSingleNode("md:ChildObjects", $srcNs) -ne $null)
+
 	return @{
 		Uuid = $srcUuid
 		Properties = $srcProps
@@ -796,11 +838,22 @@ function Borrow-Form {
 		}
 	}

-	# Extract the <Form ...> opening tag from source text (preserves namespace declarations)
+	# Открывающий тег <Form ...> берём из исходной формы — ради её объявлений пространств имён,
+	# но version подставляем СВОЮ: форма обязана нести версию расширения, иначе платформа
+	# отвергает импорт (форма 2.13 внутри расширения 2.17). Раньше тег копировался целиком,
+	# и версия источника молча побеждала.
 	$xmlDecl = '<?xml version="1.0" encoding="UTF-8"?>'
 	$formTag = "<Form version=`"${formVersion}`">"
 	if ($srcFormContent -match '(?s)^(<\?xml[^?]*\?>)') { $xmlDecl = $Matches[1] }
-	if ($srcFormContent -match '(<Form[^>]*>)') { $formTag = $Matches[1] }
+	if ($srcFormContent -match '(<Form[^>]*>)') {
+		$srcTag = $Matches[1]
+		$srcNs = $srcTag -replace '^<Form\s*', '' -replace '\s*/?>$', '' -replace '\s*version="[^"]*"', ''
+		# 2.21 (8.5): пространство палитры. Место строгое — после lf, перед style.
+		if ((Get-FormatRank $formVersion) -ge 221 -and $srcNs -notmatch 'xmlns:pal=') {
+			$srcNs = $srcNs -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+		}
+		$formTag = if ($srcNs) { "<Form $srcNs version=`"${formVersion}`">" } else { "<Form version=`"${formVersion}`">" }
+	}

 	# Build output Form.xml
 	$formXmlSb = New-Object System.Text.StringBuilder
@@ -889,7 +942,15 @@ function Borrow-Form {
 		New-Item -ItemType Directory -Path $formXmlDir -Force | Out-Null
 	}
 	$formXmlFile = Join-Path $formXmlDir "Form.xml"
-	[System.IO.File]::WriteAllText($formXmlFile, $formXmlSb.ToString(), $enc)
+	# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+	# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+	# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+	# Здесь источник не XmlWriter, а OuterXml исходного документа — спацовывает так же.
+	$formXmlText = $formXmlSb.ToString()
+	$formXmlText = [regex]::Replace($formXmlText, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })
+	# Файл создаём мы — канон выгрузки: CRLF в разделителях строк.
+	$formXmlText = ($formXmlText -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($formXmlFile, $formXmlText, $enc)
 	Info "  Created: $formXmlFile"

 	# 6. Create empty Module.bsl — but NEVER overwrite an existing one (re-borrow must
@@ -995,8 +1056,16 @@ function Register-FormInObject {
 	$text2 = [System.Text.Encoding]::UTF8.GetString($bytes2)
 	if ($text2.Length -gt 0 -and $text2[0] -eq [char]0xFEFF) { $text2 = $text2.Substring(1) }
 	$text2 = $text2.Replace('encoding="utf-8"', 'encoding="UTF-8"')
+	# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+	# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+	# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+	$text2 = [regex]::Replace($text2, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })

 	$utf8Bom2 = New-Object System.Text.UTF8Encoding($true)
+	# Целевой перевод строки: стиль файла-назначения — правка наследует его (#44/#46/#47),
+	# новый файл получает канон выгрузки CRLF. Зеркало _detect_xml_style в py-порту.
+	$targetEol = if ((Test-Path -LiteralPath $objFile) -and ([System.IO.File]::ReadAllText($objFile) -notmatch "`r`n")) { "`n" } else { "`r`n" }
+	$text2 = ($text2 -replace "`r`n", "`n") -replace "`n", $targetEol
 	[System.IO.File]::WriteAllText($objFile, $text2, $utf8Bom2)
 	Info "  Registered form in: $objFile"
 }
@@ -1385,7 +1454,17 @@ function Merge-AttributesIntoObject {
 		# Insert attributes before </ChildObjects>
 		$text3 = $text3 -replace '</ChildObjects>', "${allAttrXml}`r`n`t`t</ChildObjects>"

+		# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+		# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+		# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+		# Стоит ПОСЛЕ вставки реквизитов, чтобы накрыть и их.
+		$text3 = [regex]::Replace($text3, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })
+
 		$utf8Bom3 = New-Object System.Text.UTF8Encoding($true)
+		# Целевой перевод строки: стиль файла-назначения — правка наследует его (#44/#46/#47),
+		# новый файл получает канон выгрузки CRLF. Зеркало _detect_xml_style в py-порту.
+		$targetEol = if ((Test-Path -LiteralPath $objFile) -and ([System.IO.File]::ReadAllText($objFile) -notmatch "`r`n")) { "`n" } else { "`r`n" }
+		$text3 = ($text3 -replace "`r`n", "`n") -replace "`n", $targetEol
 		[System.IO.File]::WriteAllText($objFile, $text3, $utf8Bom3)
 		Info "  Merged $added attribute(s) into: $objFile"
 	}
@@ -1669,7 +1748,7 @@ function Build-BorrowedObjectXml {
 	$sb.AppendLine("`t`t</Properties>") | Out-Null

 	# ChildObjects (for types that need it)
-	if ($typesWithChildObjects -contains $typeName) {
+	if ($sourceProps["__HasChildObjects"] -or ($typesWithChildObjects -contains $typeName)) {
 		$sb.AppendLine("`t`t<ChildObjects/>") | Out-Null
 	}

@@ -1849,8 +1928,16 @@ $memStream.Close()
 $text = [System.Text.Encoding]::UTF8.GetString($bytes)
 if ($text.Length -gt 0 -and $text[0] -eq [char]0xFEFF) { $text = $text.Substring(1) }
 $text = $text.Replace('encoding="utf-8"', 'encoding="UTF-8"')
+# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+$text = [regex]::Replace($text, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })

 $utf8Bom = New-Object System.Text.UTF8Encoding($true)
+# Целевой перевод строки: стиль файла-назначения — правка наследует его (#44/#46/#47),
+# новый файл получает канон выгрузки CRLF. Зеркало _detect_xml_style в py-порту.
+$targetEol = if ((Test-Path -LiteralPath $extResolvedPath) -and ([System.IO.File]::ReadAllText($extResolvedPath) -notmatch "`r`n")) { "`n" } else { "`r`n" }
+$text = ($text -replace "`r`n", "`n") -replace "`n", $targetEol
 [System.IO.File]::WriteAllText($extResolvedPath, $text, $utf8Bom)
 Info "Saved: $extResolvedPath"

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cfe-borrow v1.9 — Borrow objects from configuration into extension (CFE)
+# cfe-borrow v1.16 — Borrow objects from configuration into extension (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -254,13 +254,36 @@ GENERATED_TYPES = {
    "DefinedType": [
        {"prefix": "DefinedType", "category": "DefinedType"},
    ],
+    "Sequence": [
+        {"prefix": "SequenceRecord", "category": "Record"},
+        {"prefix": "SequenceManager", "category": "Manager"},
+        {"prefix": "SequenceRecordSet", "category": "RecordSet"},
+    ],
+    "FilterCriterion": [
+        {"prefix": "FilterCriterionManager", "category": "Manager"},
+        {"prefix": "FilterCriterionList", "category": "List"},
+    ],
+    "SettingsStorage": [
+        {"prefix": "SettingsStorageManager", "category": "Manager"},
+    ],
+    "IntegrationService": [
+        {"prefix": "IntegrationServiceManager", "category": "Manager"},
+    ],
+    "WSReference": [
+        {"prefix": "WSReferenceManager", "category": "Manager"},
+    ],
 }

+# Types that need ChildObjects element — fallback when the source object cannot be probed.
+# The platform emits <ChildObjects> for every container type even when empty, and rejects
+# the file without it ("expected ChildObjects"); primary signal is the source object itself.
 TYPES_WITH_CHILD_OBJECTS = [
    "Catalog", "Document", "ExchangePlan", "ChartOfAccounts",
    "ChartOfCharacteristicTypes", "ChartOfCalculationTypes",
    "BusinessProcess", "Task", "Enum",
    "InformationRegister", "AccumulationRegister", "AccountingRegister", "CalculationRegister",
+    "DataProcessor", "Report", "DocumentJournal", "FilterCriterion", "SettingsStorage",
+    "Sequence", "HTTPService", "WebService", "IntegrationService", "Subsystem",
 ]

 COMMON_MODULE_PROPS = ["Global", "ClientManagedApplication", "Server", "ExternalConnection", "ClientOrdinaryApplication", "ServerCall"]
@@ -300,6 +323,23 @@ def detect_format_version(d):
    return "2.17"


+def format_rank(ver):
+    """"2.20" → 220, "2.9" → 209. Строковое сравнение неверно ("2.9" > "2.17")."""
+    m = re.match(r'^(\d+)\.(\d+)$', ver or '')
+    return int(m.group(1)) * 100 + int(m.group(2)) if m else 0
+
+
+def apply_pal_ns(format_version):
+    """2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+    Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+    дописать в конец нельзя."""
+    global XMLNS_DECL
+    if format_rank(format_version) >= 221:
+        XMLNS_DECL = XMLNS_DECL.replace(
+            ' xmlns:style=',
+            ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style=')
+
+
 def get_child_indent(container):
    if container.text and "\n" in container.text:
        after_nl = container.text.rsplit("\n", 1)[-1]
@@ -366,21 +406,22 @@ def _detect_xml_style(path):


 def _finalize_xml_bytes(xml_bytes, style):
-    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
-    enc_decl = style["enc"] if style else "utf-8"
+    """Привести байты к стилю оригинала; для НОВОГО файла (style is None) — к канону
+    выгрузки Конфигуратора: encoding="UTF-8", CRLF в разделителях, без перевода в конце."""
+    enc_decl = style["enc"] if style else "UTF-8"
    xml_bytes = xml_bytes.replace(
        b"<?xml version='1.0' encoding='UTF-8'?>",
        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
-    # Финальный перенос — как в оригинале (новый файл → есть)
-    want_final_nl = style["final_nl"] if style else True
+    # Финальный перенос — как в оригинале (новый файл → нет, канон #57)
+    want_final_nl = style["final_nl"] if style else False
    xml_bytes = xml_bytes.rstrip(b"\n")
    if want_final_nl:
        xml_bytes += b"\n"
-    # EOL — как в оригинале (новый файл → LF, текущее поведение)
-    if style and style["crlf"]:
+    # EOL — как в оригинале (новый файл → CRLF, канон #57)
+    if (style["crlf"] if style else True):
        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
    return xml_bytes

@@ -396,10 +437,29 @@ def save_xml_bom(tree, path):


 def save_text_bom(path, text):
-    with open(path, "w", encoding="utf-8-sig") as fh:
+    """Записать текст как есть, ничего не нормализуя.
+
+    Для файлов, которые мы ПРАВИМ: переводы строк уже пришли из самого файла, и
+    менять их нельзя (контракт #44/#46/#47). newline="" обязателен — без него
+    текстовый режим Python дал бы CRLF на Windows и LF на macOS, то есть вывод
+    навыка зависел бы от ОС.
+    """
+    with open(path, "w", encoding="utf-8-sig", newline="") as fh:
        fh.write(text)


+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+
+    Только для файлов, которые СОЗДАЁМ: правка существующего наследует его стиль.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    save_text_bom(path, text)
+
+
 def new_guid():
    return str(uuid.uuid4())

@@ -448,6 +508,7 @@ def main():
    cfg_dir = os.path.dirname(cfg_resolved)

    format_version = detect_format_version(ext_dir)
+    apply_pal_ns(format_version)

    # --- 2. Load extension Configuration.xml ---
    xml_parser = etree.XMLParser(remove_blank_text=False)
@@ -536,6 +597,9 @@ def main():
                    type_xml = etree.tostring(type_node, encoding="unicode")
                    src_props["__TypeXml"] = re.sub(r'\s+xmlns(?::\w+)?="[^"]*"', '', type_xml)

+        # Whether the platform emits <ChildObjects> for this type — the source object is the ground truth
+        src_props["__HasChildObjects"] = src_el.find(f"{{{MD_NS}}}ChildObjects") is not None
+
        return {"Uuid": src_uuid, "Properties": src_props, "Element": src_el}

    def read_source_form_uuid(type_name, obj_name, form_name):
@@ -612,7 +676,7 @@ def main():

        lines.append("\t\t</Properties>")

-        if type_name in TYPES_WITH_CHILD_OBJECTS:
+        if source_props.get("__HasChildObjects") or type_name in TYPES_WITH_CHILD_OBJECTS:
            lines.append("\t\t<ChildObjects/>")

        lines.append(f"\t</{type_name}>")
@@ -971,7 +1035,9 @@ def main():
            warn(f"Cannot merge attributes: {obj_file} not found")
            return

-        with open(obj_file, "r", encoding="utf-8-sig") as fh:
+        # newline="" => без трансляции: иначе CRLF молча схлопнется в LF при чтении
+        # и файл будет переписан в LF.
+        with open(obj_file, "r", encoding="utf-8-sig", newline="") as fh:
            obj_content = fh.read()

        # Collect existing attribute names for dedup (text-based)
@@ -1030,7 +1096,9 @@ def main():
        obj_file = os.path.join(ext_dir, dir_name, f"{obj_name}.xml")

        # Read existing object XML (needed for dedup + enrichment)
-        with open(obj_file, "r", encoding="utf-8-sig") as fh:
+        # newline="" => без трансляции: иначе CRLF молча схлопнется в LF при чтении
+        # и файл будет переписан в LF.
+        with open(obj_file, "r", encoding="utf-8-sig", newline="") as fh:
            obj_content = fh.read()

        # Dedup: skip attributes/TS already present in object's ChildObjects (idempotent re-borrow)
@@ -1107,7 +1175,7 @@ def main():
            target_dir = os.path.join(ext_dir, CHILD_TYPE_DIR_MAP[rt["TypeName"]])
            os.makedirs(target_dir, exist_ok=True)
            target_file = os.path.join(target_dir, f"{rt['ObjName']}.xml")
-            save_text_bom(target_file, borrowed_xml)
+            write_xml_file(target_file, borrowed_xml)
            add_to_child_objects(rt["TypeName"], rt["ObjName"])
            borrowed_files.append(target_file)
            info(f"  Auto-borrowed: {rt['TypeName']}.{rt['ObjName']}")
@@ -1172,7 +1240,7 @@ def main():
            t_target_dir = os.path.join(ext_dir, CHILD_TYPE_DIR_MAP[target_type_name])
            os.makedirs(t_target_dir, exist_ok=True)
            t_target_file = os.path.join(t_target_dir, f"{target_obj_name}.xml")
-            save_text_bom(t_target_file, t_borrowed_xml)
+            write_xml_file(t_target_file, t_borrowed_xml)
            add_to_child_objects(target_type_name, target_obj_name)
            borrowed_files.append(t_target_file)
            info(f"  Auto-borrowed for deep path: {target_type_name}.{target_obj_name}")
@@ -1196,7 +1264,7 @@ def main():
                s_target_dir = os.path.join(ext_dir, CHILD_TYPE_DIR_MAP[srt["TypeName"]])
                os.makedirs(s_target_dir, exist_ok=True)
                s_target_file = os.path.join(s_target_dir, f"{srt['ObjName']}.xml")
-                save_text_bom(s_target_file, s_borrowed_xml)
+                write_xml_file(s_target_file, s_borrowed_xml)
                add_to_child_objects(srt["TypeName"], srt["ObjName"])
                borrowed_files.append(s_target_file)
                info(f"  Auto-borrowed (deep): {srt['TypeName']}.{srt['ObjName']}")
@@ -1253,7 +1321,7 @@ def main():
        os.makedirs(form_meta_dir, exist_ok=True)

        form_meta_file = os.path.join(form_meta_dir, f"{form_name}.xml")
-        save_text_bom(form_meta_file, "\n".join(form_meta_lines))
+        write_xml_file(form_meta_file, "\n".join(form_meta_lines))
        info(f"  Created: {form_meta_file}")

        # 5. Generate Form.xml with BaseForm
@@ -1339,7 +1407,7 @@ def main():
                        target_dir = os.path.join(ext_dir, "CommonPictures")
                        os.makedirs(target_dir, exist_ok=True)
                        target_file = os.path.join(target_dir, f"{pic_name}.xml")
-                        save_text_bom(target_file, borrowed_xml)
+                        write_xml_file(target_file, borrowed_xml)
                        add_to_child_objects("CommonPicture", pic_name)
                        auto_borrowed_pics.append(pic_name)
                        borrowed_files.append(target_file)
@@ -1388,7 +1456,7 @@ def main():
                        target_dir = os.path.join(ext_dir, "StyleItems")
                        os.makedirs(target_dir, exist_ok=True)
                        target_file = os.path.join(target_dir, f"{style_name}.xml")
-                        save_text_bom(target_file, borrowed_xml)
+                        write_xml_file(target_file, borrowed_xml)
                        add_to_child_objects("StyleItem", style_name)
                        borrowed_files.append(target_file)
                        info(f"  Auto-borrowed: StyleItem.{style_name}")
@@ -1452,14 +1520,17 @@ def main():
                        target_dir = os.path.join(ext_dir, "Enums")
                        os.makedirs(target_dir, exist_ok=True)
                        target_file = os.path.join(target_dir, f"{enum_name}.xml")
-                        save_text_bom(target_file, borrowed_xml)
+                        write_xml_file(target_file, borrowed_xml)
                        add_to_child_objects("Enum", enum_name)
                        borrowed_files.append(target_file)
                        info(f"  Auto-borrowed: Enum.{enum_name} (with {len(ev_xmls)} EnumValue(s))")
                    else:
                        warn(f"  Enum.{enum_name} not found in source config")

-        # Extract the <Form ...> opening tag from source text
+        # Открывающий тег <Form ...> берём из исходной формы — ради её объявлений пространств
+        # имён, но version подставляем СВОЮ: форма обязана нести версию расширения, иначе
+        # платформа отвергает импорт (форма 2.13 внутри расширения 2.17). Раньше тег
+        # копировался целиком, и версия источника молча побеждала.
        xml_decl = '<?xml version="1.0" encoding="UTF-8"?>'
        form_tag = f'<Form version="{form_version}">'
        m_decl = re.search(r'^(<\?xml[^?]*\?>)', src_form_content)
@@ -1467,7 +1538,15 @@ def main():
            xml_decl = m_decl.group(1)
        m_tag = re.search(r'(<Form[^>]*>)', src_form_content)
        if m_tag:
-            form_tag = m_tag.group(1)
+            src_ns = re.sub(r'^<Form\s*', '', m_tag.group(1))
+            src_ns = re.sub(r'\s*/?>$', '', src_ns)
+            src_ns = re.sub(r'\s*version="[^"]*"', '', src_ns)
+            # 2.21 (8.5): пространство палитры. Место строгое — после lf, перед style.
+            if format_rank(form_version) >= 221 and 'xmlns:pal=' not in src_ns:
+                src_ns = src_ns.replace(
+                    ' xmlns:style=',
+                    ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style=')
+            form_tag = f'<Form {src_ns} version="{form_version}">' if src_ns else f'<Form version="{form_version}">'

        # Build output
        parts = []
@@ -1546,7 +1625,7 @@ def main():
        form_xml_dir = os.path.join(form_meta_dir, form_name, "Ext")
        os.makedirs(form_xml_dir, exist_ok=True)
        form_xml_file = os.path.join(form_xml_dir, "Form.xml")
-        save_text_bom(form_xml_file, "".join(parts))
+        write_xml_file(form_xml_file, "".join(parts))
        info(f"  Created: {form_xml_file}")

        # 6. Create empty Module.bsl — but NEVER overwrite an existing one (re-borrow must
@@ -1630,7 +1709,7 @@ def main():
                target_dir = os.path.join(ext_dir, dir_name)
                os.makedirs(target_dir, exist_ok=True)
                target_file = os.path.join(target_dir, f"{obj_name}.xml")
-                save_text_bom(target_file, borrowed_xml)
+                write_xml_file(target_file, borrowed_xml)
                info(f"  Created: {target_file}")

                add_to_child_objects(type_name, obj_name)
@@ -1657,7 +1736,7 @@ def main():
            os.makedirs(target_dir, exist_ok=True)

            target_file = os.path.join(target_dir, f"{obj_name}.xml")
-            save_text_bom(target_file, borrowed_xml)
+            write_xml_file(target_file, borrowed_xml)
            info(f"  Created: {target_file}")

            add_to_child_objects(type_name, obj_name)
@@ -23,7 +23,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-diff.ps1" -ExtensionPath src -ConfigPath C:\cfsrc\erp -Mode A
+python ".agents/skills/cfe-diff/scripts/cfe-diff.py" -ExtensionPath src -ConfigPath C:\cfsrc\erp -Mode A
 ```

 ## Mode A — обзор расширения
@@ -44,7 +44,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-init.ps1" -Name "МоёРасширение"
+python ".agents/skills/cfe-init/scripts/cfe-init.py" -Name "МоёРасширение"
 ```

 ## Примеры
@@ -1,4 +1,4 @@
-# cfe-init v1.2 — Create 1C configuration extension scaffold (CFE)
+# cfe-init v1.7 — Create 1C configuration extension scaffold (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -125,16 +125,19 @@ if ($Synonym) {
 }

 # --- Optional properties ---
-$vendorXml = if ($Vendor) { [System.Security.SecurityElement]::Escape($Vendor) } else { "" }
-$versionXml = if ($Version) { [System.Security.SecurityElement]::Escape($Version) } else { "" }
+# Элемент целиком, а не значение внутри пары: при пустом значении Конфигуратор
+# пишет <Vendor/>, а не <Vendor></Vendor>.
+$vendorEl = if ($Vendor) { "<Vendor>$([System.Security.SecurityElement]::Escape($Vendor))</Vendor>" } else { "<Vendor/>" }
+$versionEl = if ($Version) { "<Version>$([System.Security.SecurityElement]::Escape($Version))</Version>" } else { "<Version/>" }

 # --- Role name ---
 $roleName = "${NamePrefix}ОсновнаяРоль"

 # --- DefaultRoles XML ---
-$defaultRolesXml = ""
+# Элемент целиком: без роли Конфигуратор пишет <DefaultRoles/>, а не пустую пару.
+$defaultRolesEl = "<DefaultRoles/>"
 if (-not $NoRole) {
-	$defaultRolesXml = "`r`n`t`t`t`t<xr:Item xsi:type=`"xr:MDObjectRef`">Role.$roleName</xr:Item>`r`n`t`t`t"
+	$defaultRolesEl = "<DefaultRoles>`r`n`t`t`t`t<xr:Item xsi:type=`"xr:MDObjectRef`">Role.$roleName</xr:Item>`r`n`t`t`t</DefaultRoles>"
 }

 # --- ChildObjects ---
@@ -144,10 +147,32 @@ if (-not $NoRole) {
 }
 $childObjectsXml += "`r`n`t`t"

+# Объявления пространств имён — одной переменной: места эмиссии её только интерполируют.
+# Правки шапки (как xmlns:pal в формате 2.21) делаются здесь, в одном месте.
+$xmlnsDecl = 'xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+
+# Версия формата как число для сравнений: "2.20" → 220, "2.9" → 209.
+# Строковое сравнение здесь неверно ("2.9" > "2.17" лексикографически) — известная ловушка.
+function Get-FormatRank([string]$ver) {
+	if ($ver -match '^(\d+)\.(\d+)$') { return [int]$Matches[1] * 100 + [int]$Matches[2] }
+	return 0
+}
+
+# 2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+# Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+# дописать в конец нельзя.
+# Caption/ShortCaption — свойства корня из того же формата 2.21, между Version и
+# DefaultLanguage (позиция снята с выгрузки расширения из базы 8.5).
+$f221Captions = ""
+if ((Get-FormatRank $formatVersion) -ge 221) {
+	$xmlnsDecl = $xmlnsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+	$f221Captions = "`r`n`t`t`t<Caption/>`r`n`t`t`t<ShortCaption/>"
+}
+
 # --- Configuration.xml ---
 $cfgXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$formatVersion">
+<MetaDataObject $xmlnsDecl version="$formatVersion">
 	<Configuration uuid="$uuidCfg">
 		<InternalInfo>
 			<xr:ContainedObject>
@@ -193,9 +218,9 @@ $cfgXml = @"
 				<v8:Value xsi:type="app:ApplicationUsePurpose">PlatformApplication</v8:Value>
 			</UsePurposes>
 			<ScriptVariant>Russian</ScriptVariant>
-			<DefaultRoles>$defaultRolesXml</DefaultRoles>
-			<Vendor>$vendorXml</Vendor>
-			<Version>$versionXml</Version>
+			$defaultRolesEl
+			$vendorEl
+			$versionEl$f221Captions
 			<DefaultLanguage>Language.Русский</DefaultLanguage>
 			<BriefInformation/>
 			<DetailedInformation/>
@@ -212,7 +237,7 @@ $cfgXml = @"
 # --- Languages/Русский.xml (adopted format) ---
 $langXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$formatVersion">
+<MetaDataObject $xmlnsDecl version="$formatVersion">
 	<Language uuid="$uuidLang">
 		<InternalInfo/>
 		<Properties>
@@ -229,7 +254,7 @@ $langXml = @"
 # --- Role XML ---
 $roleXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$formatVersion">
+<MetaDataObject $xmlnsDecl version="$formatVersion">
 	<Role uuid="$uuidRole">
 		<Properties>
 			<Name>$([System.Security.SecurityElement]::Escape($roleName))</Name>
@@ -252,9 +277,18 @@ if (-not (Test-Path $langDir)) {
 # --- Write files with UTF-8 BOM ---
 $enc = New-Object System.Text.UTF8Encoding($true)

-[System.IO.File]::WriteAllText($cfgFile, $cfgXml, $enc)
+# XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+#
+# Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+# копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+function Write-XmlFile([string]$path, [string]$text, $encoding) {
+	$t = ($text -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($path, $t.TrimEnd("`r", "`n"), $encoding)
+}
+
+Write-XmlFile $cfgFile $cfgXml $enc
 $langFile = Join-Path $langDir "Русский.xml"
-[System.IO.File]::WriteAllText($langFile, $langXml, $enc)
+Write-XmlFile $langFile $langXml $enc

 # --- Role ---
 if (-not $NoRole) {
@@ -263,7 +297,7 @@ if (-not $NoRole) {
 		New-Item -ItemType Directory -Path $roleDir -Force | Out-Null
 	}
 	$roleFile = Join-Path $roleDir "$roleName.xml"
-	[System.IO.File]::WriteAllText($roleFile, $roleXml, $enc)
+	Write-XmlFile $roleFile $roleXml $enc
 }

 # --- Output ---
@@ -1,8 +1,8 @@
 #!/usr/bin/env python3
-# cfe-init v1.2 — Create 1C configuration extension scaffold (CFE)
+# cfe-init v1.7 — Create 1C configuration extension scaffold (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 """Generates minimal XML source files for a 1C configuration extension."""
-import sys, os, argparse, uuid
+import sys, os, re, argparse, uuid
 from xml.etree import ElementTree as ET

 def esc_xml(s):
@@ -15,6 +15,22 @@ def write_utf8_bom(path, content):
    with open(path, 'w', encoding='utf-8-sig', newline='') as f:
        f.write(content)

+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    write_utf8_bom(path, text)
+
+
+def format_rank(ver):
+    """"2.20" → 220, "2.9" → 209. Строковое сравнение неверно ("2.9" > "2.17")."""
+    m = re.match(r'^(\d+)\.(\d+)$', ver or '')
+    return int(m.group(1)) * 100 + int(m.group(2)) if m else 0
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -128,16 +144,21 @@ def main():
    if synonym:
        synonym_xml = f"\r\n\t\t\t\t<v8:item>\r\n\t\t\t\t\t<v8:lang>ru</v8:lang>\r\n\t\t\t\t\t<v8:content>{esc_xml(synonym)}</v8:content>\r\n\t\t\t\t</v8:item>\r\n\t\t\t"

-    vendor_xml = esc_xml(vendor) if vendor else ""
-    version_xml = esc_xml(version) if version else ""
+    # Элемент целиком, а не значение внутри пары: при пустом значении Конфигуратор
+    # пишет <Vendor/>, а не <Vendor></Vendor>.
+    vendor_el = f"<Vendor>{esc_xml(vendor)}</Vendor>" if vendor else "<Vendor/>"
+    version_el = f"<Version>{esc_xml(version)}</Version>" if version else "<Version/>"

    # --- Role name ---
    role_name = f"{name_prefix}ОсновнаяРоль"

    # --- DefaultRoles XML ---
-    default_roles_xml = ""
+    # Элемент целиком: без роли Конфигуратор пишет <DefaultRoles/>, а не пустую пару.
+    default_roles_el = "<DefaultRoles/>"
    if not args.NoRole:
-        default_roles_xml = f'\r\n\t\t\t\t<xr:Item xsi:type="xr:MDObjectRef">Role.{role_name}</xr:Item>\r\n\t\t\t'
+        default_roles_el = ('<DefaultRoles>\r\n\t\t\t\t'
+                            f'<xr:Item xsi:type="xr:MDObjectRef">Role.{role_name}</xr:Item>'
+                            '\r\n\t\t\t</DefaultRoles>')

    # --- ChildObjects ---
    child_objects_xml = f"\r\n\t\t\t<Language>Русский</Language>"
@@ -156,6 +177,40 @@ def main():
    ]

    contained_objects = ""
+
+    # Объявления пространств имён — одной переменной: места эмиссии её только подставляют.
+    # Правки шапки (как xmlns:pal в формате 2.21) делаются здесь, в одном месте.
+    xmlns_decl = (
+        'xmlns="http://v8.1c.ru/8.3/MDClasses"'
+        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
+        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
+        ' xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi"'
+        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
+        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
+        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
+        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
+        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
+        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
+        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
+        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
+        ' xmlns:xen="http://v8.1c.ru/8.3/xcf/enums"'
+        ' xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef"'
+        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
+        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
+        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+    )
+
+    # 2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+    # Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+    # дописать в конец нельзя.
+    # Caption/ShortCaption — свойства корня из того же формата 2.21, между Version и
+    # DefaultLanguage (позиция снята с выгрузки расширения из базы 8.5).
+    f221_captions = ""
+    if format_rank(format_version) >= 221:
+        xmlns_decl = xmlns_decl.replace(
+            ' xmlns:style=',
+            ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style=')
+        f221_captions = "\r\n\t\t\t<Caption/>\r\n\t\t\t<ShortCaption/>"
    for i in range(7):
        contained_objects += f"""\t\t\t<xr:ContainedObject>
 \t\t\t\t<xr:ClassId>{class_ids[i]}</xr:ClassId>
@@ -163,7 +218,7 @@ def main():
 \t\t\t</xr:ContainedObject>\n"""

    cfg_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{format_version}">
+<MetaDataObject {xmlns_decl} version="{format_version}">
 \t<Configuration uuid="{uuid_cfg}">
 \t\t<InternalInfo>
 {contained_objects}\t\t</InternalInfo>
@@ -181,9 +236,9 @@ def main():
 \t\t\t\t<v8:Value xsi:type="app:ApplicationUsePurpose">PlatformApplication</v8:Value>
 \t\t\t</UsePurposes>
 \t\t\t<ScriptVariant>Russian</ScriptVariant>
-\t\t\t<DefaultRoles>{default_roles_xml}</DefaultRoles>
-\t\t\t<Vendor>{vendor_xml}</Vendor>
-\t\t\t<Version>{version_xml}</Version>
+\t\t\t{default_roles_el}
+\t\t\t{vendor_el}
+\t\t\t{version_el}{f221_captions}
 \t\t\t<DefaultLanguage>Language.Русский</DefaultLanguage>
 \t\t\t<BriefInformation/>
 \t\t\t<DetailedInformation/>
@@ -198,7 +253,7 @@ def main():

    # --- Languages/Русский.xml (adopted format) ---
    lang_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{format_version}">
+<MetaDataObject {xmlns_decl} version="{format_version}">
 \t<Language uuid="{uuid_lang}">
 \t\t<InternalInfo/>
 \t\t<Properties>
@@ -213,7 +268,7 @@ def main():

    # --- Role XML ---
    role_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="{format_version}">
+<MetaDataObject {xmlns_decl} version="{format_version}">
 \t<Role uuid="{uuid_role}">
 \t\t<Properties>
 \t\t\t<Name>{esc_xml(role_name)}</Name>
@@ -229,9 +284,9 @@ def main():
    os.makedirs(lang_dir, exist_ok=True)

    # --- Write files ---
-    write_utf8_bom(cfg_file, cfg_xml)
+    write_xml_file(cfg_file, cfg_xml)
    lang_file = os.path.join(lang_dir, "Русский.xml")
-    write_utf8_bom(lang_file, lang_xml)
+    write_xml_file(lang_file, lang_xml)

    # --- Role ---
    role_file = None
@@ -239,7 +294,7 @@ def main():
        role_dir = os.path.join(output_dir, "Roles")
        os.makedirs(role_dir, exist_ok=True)
        role_file = os.path.join(role_dir, f"{role_name}.xml")
-        write_utf8_bom(role_file, role_xml)
+        write_xml_file(role_file, role_xml)

    # --- Output ---
    print(f"[OK] Создано расширение: {name}")
@@ -110,7 +110,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-patch-method.ps1" -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
+python ".agents/skills/cfe-patch-method/scripts/cfe-patch-method.py" -ExtensionPath src\cfe\ИмяРасширения -ConfigPath src\cf -ModulePath "Catalog.Контрагенты.ObjectModule" -MethodName "ПриЗаписи" -InterceptorType Before
 ```

 ## Примеры
@@ -24,6 +24,6 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-validate.ps1" -ExtensionPath "src"
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/cfe-validate.ps1" -ExtensionPath "src/Configuration.xml"
+python ".agents/skills/cfe-validate/scripts/cfe-validate.py" -ExtensionPath "src"
+python ".agents/skills/cfe-validate/scripts/cfe-validate.py" -ExtensionPath "src/Configuration.xml"
 ```
@@ -1,4 +1,4 @@
-# cfe-validate v1.4 — Validate 1C configuration extension structure (CFE)
+# cfe-validate v1.5 — Validate 1C configuration extension structure (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -197,8 +197,9 @@ if ($root.NamespaceURI -ne $expectedNs) {
 $version = $root.GetAttribute("version")
 if (-not $version) {
 	Report-Warn "1. Missing version attribute on MetaDataObject"
-} elseif ($version -ne "2.17" -and $version -ne "2.20" -and $version -ne "2.21") {
-	Report-Warn "1. Unusual version '$version' (expected 2.17, 2.20 or 2.21)"
+} elseif ($version -notin @("2.17", "2.18", "2.19", "2.20", "2.21")) {
+	# Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+	Report-Warn "1. Unusual version '$version' (expected 2.17-2.20 or 2.21)"
 }

 # Must have Configuration child
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# cfe-validate v1.4 — Validate 1C configuration extension XML structure (CFE)
+# cfe-validate v1.5 — Validate 1C configuration extension XML structure (CFE)
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 """Validates extension Configuration.xml: root, InternalInfo, extension properties, ChildObjects, borrowed objects."""
 import sys, os, argparse, re
@@ -216,8 +216,9 @@ def main():
    version = root.get('version', '')
    if not version:
        r.warn('1. Missing version attribute on MetaDataObject')
-    elif version not in ('2.17', '2.20', '2.21'):
-        r.warn(f"1. Unusual version '{version}' (expected 2.17, 2.20 or 2.21)")
+    elif version not in ('2.17', '2.18', '2.19', '2.20', '2.21'):
+        # Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+        r.warn(f"1. Unusual version '{version}' (expected 2.17-2.20 or 2.21)")

    # Must have Configuration child
    cfg_node = None
@@ -31,7 +31,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" <параметры>
+python ".agents/skills/db-create/scripts/db-create.py" <параметры>
 ```

 ### Параметры скрипта
@@ -45,6 +45,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" <п
 | `-UseTemplate <файл>` | нет | Создать из шаблона (.cf или .dt) |
 | `-AddToList` | нет | Добавить в список баз 1С |
 | `-ListName <имя>` | нет | Имя базы в списке |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -57,14 +59,14 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" <п

 ```powershell
 # Создать файловую базу
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" -InfoBasePath "C:\Bases\NewDB"
+python ".agents/skills/db-create/scripts/db-create.py" -InfoBasePath "C:\Bases\NewDB"

 # Создать серверную базу
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test"
+python ".agents/skills/db-create/scripts/db-create.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test"

 # Создать из шаблона CF
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" -InfoBasePath "C:\Bases\NewDB" -UseTemplate "C:\Templates\config.cf"
+python ".agents/skills/db-create/scripts/db-create.py" -InfoBasePath "C:\Bases\NewDB" -UseTemplate "C:\Templates\config.cf"

 # Создать и добавить в список баз
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-create.ps1" -InfoBasePath "C:\Bases\NewDB" -AddToList -ListName "Новая база"
+python ".agents/skills/db-create/scripts/db-create.py" -InfoBasePath "C:\Bases\NewDB" -AddToList -ListName "Новая база"
 ```
@@ -0,0 +1,476 @@
+# db-create v1.10 — Create 1C information base
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Создание информационной базы 1С
+
+.DESCRIPTION
+    Создаёт новую информационную базу 1С (файловую или серверную).
+    Поддерживает создание из шаблона и добавление в список баз.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UseTemplate
+    Путь к файлу шаблона (.cf или .dt)
+
+.PARAMETER AddToList
+    Добавить в список баз 1С
+
+.PARAMETER ListName
+    Имя базы в списке
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-create.ps1 -InfoBasePath "C:\Bases\NewDB"
+
+.EXAMPLE
+    .\db-create.ps1 -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test"
+
+.EXAMPLE
+    .\db-create.ps1 -InfoBasePath "C:\Bases\NewDB" -UseTemplate "C:\Templates\config.cf" -AddToList -ListName "Новая база"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UseTemplate,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$AddToList,
+
+    [Parameter(Mandatory=$false)]
+    [string]$ListName,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$UseTemplate = ConvertTo-CleanPath $UseTemplate '-UseTemplate'
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-FileIbCreated {
+    # File-infobase postcondition: the platform must have produced a non-empty 1Cv8.1CD.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$IbPath)
+    $f = Join-Path $IbPath "1Cv8.1CD"
+    return (Test-Path $f) -and ((Get-Item $f -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/UseTemplate' = '-UseTemplate'; '/AddToList' = '-AddToList'; '--db-path' = '-InfoBasePath'; '--load' = '-UseTemplate'; '--restore' = '-UseTemplate' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Validate template ---
+if ($UseTemplate -and -not (Test-Path $UseTemplate)) {
+    Write-Host "Error: template file not found: $UseTemplate" -ForegroundColor Red
+    exit 1
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_create_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        $arguments = @("infobase", "create", "--db-path=$InfoBasePath", "--create-database")
+        if ($UseTemplate) {
+            if ([System.IO.Path]::GetExtension($UseTemplate) -ieq ".dt") {
+                $arguments += "--restore=$UseTemplate"
+            } else {
+                $arguments += "--load=$UseTemplate", "--apply"
+            }
+        }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $((Format-ArgsForDisplay $arguments $engine) -join ' ')"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $ibMissing = ($exitCode -eq 0) -and -not (Test-FileIbCreated $InfoBasePath)
+        if ($ibMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "Information base created successfully: $InfoBasePath" -ForegroundColor Green
+        } elseif ($ibMissing) {
+            Write-Host "Error: exit code 0 but 1Cv8.1CD is missing or empty at $InfoBasePath — information base was not created" -ForegroundColor Red
+        } else {
+            Write-Host "Error creating information base (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("CREATEINFOBASE")
+
+    # Quotes go INSIDE the token (File="path"): 1C's own parser wants them there, quoting
+    # the whole token instead breaks a path with spaces. Hence -PreQuoted on the launch.
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "Srvr=`"$InfoBaseServer`";Ref=`"$InfoBaseRef`""
+    } else {
+        $arguments += "File=`"$InfoBasePath`""
+    }
+
+    # --- Template ---
+    if ($UseTemplate) {
+        $arguments += "/UseTemplate", "`"$UseTemplate`""
+    }
+
+    # --- Add to list ---
+    if ($AddToList) {
+        if ($ListName) {
+            $arguments += "/AddToList", "`"$ListName`""
+        } else {
+            $arguments += "/AddToList"
+        }
+    }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "create_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $((Format-ArgsForDisplay $arguments $engine) -join ' ')"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition (file infobase only): exit 0 without a non-empty 1Cv8.1CD is a false success.
+    $ibMissing = ($exitCode -eq 0) -and -not ($InfoBaseServer -and $InfoBaseRef) -and -not (Test-FileIbCreated $InfoBasePath)
+    if ($ibMissing) { $exitCode = 1 }
+
+    if ($exitCode -eq 0) {
+        if ($InfoBaseServer -and $InfoBaseRef) {
+            Write-Host "Information base created successfully: $InfoBaseServer/$InfoBaseRef" -ForegroundColor Green
+        } else {
+            Write-Host "Information base created successfully: $InfoBasePath" -ForegroundColor Green
+        }
+    } elseif ($ibMissing) {
+        Write-Host "Error: exit code 0 but 1Cv8.1CD is missing or empty at $InfoBasePath — information base was not created" -ForegroundColor Red
+    } else {
+        Write-Host "Error creating information base (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,502 @@
+#!/usr/bin/env python3
+# db-create v1.10 — Create 1C information base
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+def file_ib_created(ib_path):
+    """File-infobase postcondition: the platform must have produced a non-empty 1Cv8.1CD.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    f = os.path.join(ib_path, "1Cv8.1CD")
+    return os.path.isfile(f) and os.path.getsize(f) > 0
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Create 1C information base",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UseTemplate", default="")
+    parser.add_argument("-AddToList", action="store_true")
+    parser.add_argument("-ListName", default="")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    args.UseTemplate = clean_path(args.UseTemplate, "-UseTemplate")
+
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/UseTemplate": "-UseTemplate",
+        "/AddToList": "-AddToList",
+        "--db-path": "-InfoBasePath",
+        "--load": "-UseTemplate",
+        "--restore": "-UseTemplate",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Validate template ---
+    if args.UseTemplate and not os.path.exists(args.UseTemplate):
+        print(f"Error: template file not found: {args.UseTemplate}", file=sys.stderr)
+        sys.exit(1)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        arguments = ["infobase", "create", f"--db-path={args.InfoBasePath}", "--create-database"]
+        if args.UseTemplate:
+            if os.path.splitext(args.UseTemplate)[1].lower() == ".dt":
+                arguments.append(f"--restore={args.UseTemplate}")
+            else:
+                arguments.extend([f"--load={args.UseTemplate}", "--apply"])
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+        print(f"Running: ibcmd {' '.join(format_args_for_display(arguments, engine))}")
+        result = run_ibcmd([v8path] + arguments, warn_no_user=False)
+        exit_code = result.returncode
+        ib_missing = exit_code == 0 and not file_ib_created(args.InfoBasePath)
+        if ib_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Information base created successfully: {args.InfoBasePath}")
+        elif ib_missing:
+            print(
+                f"Error: exit code 0 but 1Cv8.1CD is missing or empty at {args.InfoBasePath} "
+                "— information base was not created",
+                file=sys.stderr,
+            )
+        else:
+            print(f"Error creating information base (code: {exit_code})", file=sys.stderr)
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_create_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["CREATEINFOBASE"]
+
+        # Quotes go INSIDE the token (File="path"): that is where 1C's parser expects them.
+        # Quoting the whole token instead breaks a path with spaces — on both OSes.
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.append(f'Srvr="{args.InfoBaseServer}";Ref="{args.InfoBaseRef}"')
+        else:
+            arguments.append(f'File="{args.InfoBasePath}"')
+
+        # --- Template ---
+        if args.UseTemplate:
+            arguments.extend(["/UseTemplate", f'"{args.UseTemplate}"'])
+
+        # --- Add to list ---
+        if args.AddToList:
+            if args.ListName:
+                arguments.extend(["/AddToList", f'"{args.ListName}"'])
+            else:
+                arguments.append("/AddToList")
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "create_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {' '.join(format_args_for_display(arguments, engine))}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition (file infobase only): exit 0 without a non-empty 1Cv8.1CD is a false success.
+        is_server = bool(args.InfoBaseServer and args.InfoBaseRef)
+        ib_missing = exit_code == 0 and not is_server and not file_ib_created(args.InfoBasePath)
+        if ib_missing:
+            exit_code = 1
+
+        if exit_code == 0:
+            if is_server:
+                print(f"Information base created successfully: {args.InfoBaseServer}/{args.InfoBaseRef}")
+            else:
+                print(f"Information base created successfully: {args.InfoBasePath}")
+        elif ib_missing:
+            print(
+                f"Error: exit code 0 but 1Cv8.1CD is missing or empty at {args.InfoBasePath} "
+                "— information base was not created",
+                file=sys.stderr,
+            )
+        else:
+            print(f"Error creating information base (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+        print_platform_output(result)
+
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -35,7 +35,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" <параметры>
+python ".agents/skills/db-dump-cf/scripts/db-dump-cf.py" <параметры>
 ```

 ### Параметры скрипта
@@ -51,6 +51,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" <п
 | `-OutputFile <путь>` | да | Путь к выходному CF-файлу |
 | `-Extension <имя>` | нет | Выгрузить расширение |
 | `-AllExtensions` | нет | Выгрузить все расширения |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -58,11 +60,11 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" <п

 ```powershell
 # Выгрузка конфигурации (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "C:\backup\config.cf"
+python ".agents/skills/db-dump-cf/scripts/db-dump-cf.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "C:\backup\config.cf"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -OutputFile "config.cf"
+python ".agents/skills/db-dump-cf/scripts/db-dump-cf.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -OutputFile "config.cf"

 # Выгрузка расширения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-cf.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "ext.cfe" -Extension "МоёРасширение"
+python ".agents/skills/db-dump-cf/scripts/db-dump-cf.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "ext.cfe" -Extension "МоёРасширение"
 ```
@@ -0,0 +1,496 @@
+# db-dump-cf v1.12 — Dump 1C configuration to CF file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Выгрузка конфигурации 1С в CF-файл
+
+.DESCRIPTION
+    Выгружает конфигурацию информационной базы в бинарный CF-файл.
+    Поддерживает выгрузку расширений.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER OutputFile
+    Путь к выходному CF-файлу
+
+.PARAMETER Extension
+    Имя расширения для выгрузки
+
+.PARAMETER AllExtensions
+    Выгрузить все расширения
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-dump-cf.ps1 -InfoBasePath "C:\Bases\MyDB" -OutputFile "config.cf"
+
+.EXAMPLE
+    .\db-dump-cf.ps1 -InfoBasePath "C:\Bases\MyDB" -OutputFile "ext.cfe" -Extension "МоёРасширение"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$OutputFile,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Extension,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$AllExtensions,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$OutputFile = ConvertTo-CleanPath $OutputFile '-OutputFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Ensure output directory exists ---
+$outDir = Split-Path $OutputFile -Parent
+if ($outDir -and -not (Test-Path $outDir)) {
+    New-Item -ItemType Directory -Path $outDir -Force | Out-Null
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_dump_cf_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        if ($AllExtensions) {
+            Write-Host "Error: ibcmd config save does not support -AllExtensions (use -Extension)" -ForegroundColor Red
+            exit 1
+        }
+        $arguments = @("infobase", "config", "save", "--db-path=$InfoBasePath")
+        if ($Extension) { $arguments += "--extension=$Extension" }
+        $arguments += "$OutputFile"
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "Configuration dumped successfully to: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — configuration was not dumped" -ForegroundColor Red
+        } else {
+            Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/DumpCfg", "`"$OutputFile`""
+
+    # --- Extensions ---
+    if ($Extension) {
+        $arguments += "-Extension", "`"$Extension`""
+    } elseif ($AllExtensions) {
+        $arguments += "-AllExtensions"
+    }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "dump_cf_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
+    if ($exitCode -eq 0) {
+        Write-Host "Configuration dumped successfully to: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — configuration was not dumped" -ForegroundColor Red
+    } else {
+        Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,514 @@
+#!/usr/bin/env python3
+# db-dump-cf v1.12 — Dump 1C configuration to CF file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Dump 1C configuration to CF file",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-OutputFile", required=True)
+    parser.add_argument("-Extension", default="")
+    parser.add_argument("-AllExtensions", action="store_true")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.OutputFile = clean_path(args.OutputFile, "-OutputFile")
+
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Ensure output directory exists ---
+    out_dir = os.path.dirname(args.OutputFile)
+    if out_dir and not os.path.isdir(out_dir):
+        os.makedirs(out_dir, exist_ok=True)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        if args.AllExtensions:
+            print("Error: ibcmd config save does not support -AllExtensions (use -Extension)", file=sys.stderr)
+            sys.exit(1)
+        arguments = ["infobase", "config", "save", f"--db-path={args.InfoBasePath}"]
+        if args.Extension:
+            arguments.append(f"--extension={args.Extension}")
+        arguments.append(args.OutputFile)
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Configuration dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — configuration was not dumped", file=sys.stderr)
+        else:
+            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)
+        sys.exit(exit_code)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_cf_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.extend(["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"'])
+        else:
+            arguments.extend(["/F", f'"{args.InfoBasePath}"'])
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments.extend(["/DumpCfg", f'"{args.OutputFile}"'])
+
+        # --- Extensions ---
+        if args.Extension:
+            arguments.extend(["-Extension", f'"{args.Extension}"'])
+        elif args.AllExtensions:
+            arguments.append("-AllExtensions")
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "dump_cf_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Configuration dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — configuration was not dumped", file=sys.stderr)
+        else:
+            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -38,7 +38,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-dt.ps1" <параметры>
+python ".agents/skills/db-dump-dt/scripts/db-dump-dt.py" <параметры>
 ```

 ### Параметры скрипта
@@ -52,6 +52,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-dt.ps1" <п
 | `-UserName <имя>` | нет | Имя пользователя |
 | `-Password <пароль>` | нет | Пароль |
 | `-OutputFile <путь>` | да | Путь к выходному DT-файлу |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -59,10 +61,10 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-dt.ps1" <п

 ```powershell
 # Выгрузка ИБ (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-dt.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "C:\backup\base.dt"
+python ".agents/skills/db-dump-dt/scripts/db-dump-dt.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -OutputFile "C:\backup\base.dt"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-dt.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -OutputFile "base.dt"
+python ".agents/skills/db-dump-dt/scripts/db-dump-dt.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -OutputFile "base.dt"
 ```

 ## Связанные навыки
@@ -0,0 +1,470 @@
+# db-dump-dt v1.11 — Dump 1C information base to DT file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Выгрузка информационной базы 1С в DT-файл
+
+.DESCRIPTION
+    Выгружает информационную базу целиком (конфигурация + данные) в DT-файл.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER OutputFile
+    Путь к выходному DT-файлу
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-dump-dt.ps1 -InfoBasePath "C:\Bases\MyDB" -OutputFile "backup.dt"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$OutputFile,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$OutputFile = ConvertTo-CleanPath $OutputFile '-OutputFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Ensure output directory exists ---
+$outDir = Split-Path $OutputFile -Parent
+if ($outDir -and -not (Test-Path $outDir)) {
+    New-Item -ItemType Directory -Path $outDir -Force | Out-Null
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_dump_dt_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        $arguments = @("infobase", "dump", "--db-path=$InfoBasePath")
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "$OutputFile"
+
+        $arguments += "--data=$tempDir"
+
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "Information base dumped successfully to: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — information base was not dumped" -ForegroundColor Red
+        } else {
+            Write-Host "Error dumping information base (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/DumpIB", "`"$OutputFile`""
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "dump_dt_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
+    if ($exitCode -eq 0) {
+        Write-Host "Information base dumped successfully to: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — information base was not dumped" -ForegroundColor Red
+    } else {
+        Write-Host "Error dumping information base (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,501 @@
+#!/usr/bin/env python3
+# db-dump-dt v1.11 — Dump 1C information base to DT file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Dump 1C information base to DT file",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-OutputFile", required=True)
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.OutputFile = clean_path(args.OutputFile, "-OutputFile")
+
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Ensure output directory exists ---
+    out_dir = os.path.dirname(args.OutputFile)
+    if out_dir and not os.path.isdir(out_dir):
+        os.makedirs(out_dir, exist_ok=True)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        arguments = ["infobase", "dump", f"--db-path={args.InfoBasePath}"]
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(args.OutputFile)
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Information base dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — information base was not dumped", file=sys.stderr)
+        else:
+            print(f"Error dumping information base (code: {exit_code})", file=sys.stderr)
+        sys.exit(exit_code)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_dt_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.extend(["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"'])
+        else:
+            arguments.extend(["/F", f'"{args.InfoBasePath}"'])
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments.extend(["/DumpIB", f'"{args.OutputFile}"'])
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "dump_dt_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Information base dumped successfully to: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — information base was not dumped", file=sys.stderr)
+        else:
+            print(f"Error dumping information base (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -37,7 +37,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" <параметры>
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" <параметры>
 ```

 ### Параметры скрипта
@@ -56,6 +56,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" <
 | `-Extension <имя>` | нет | Выгрузить расширение |
 | `-AllExtensions` | нет | Выгрузить все расширения |
 | `-Format <формат>` | нет | `Hierarchical` (по умолч.) / `Plain` |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -74,17 +76,17 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" <

 ```powershell
 # Полная выгрузка (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full

 # Инкрементальная выгрузка
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Changes
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Changes

 # Частичная выгрузка
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Partial -Objects "Справочник.Номенклатура,Документ.Заказ"
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Partial -Objects "Справочник.Номенклатура,Документ.Заказ"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -ConfigDir "C:\WS\cfsrc" -Mode Full
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Dev" -UserName "Admin" -Password "secret" -ConfigDir "C:\WS\cfsrc" -Mode Full

 # Выгрузка расширения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-dump-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\ext_src" -Mode Full -Extension "МоёРасширение"
+python ".agents/skills/db-dump-xml/scripts/db-dump-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\ext_src" -Mode Full -Extension "МоёРасширение"
 ```
@@ -0,0 +1,566 @@
+# db-dump-xml v1.14 — Dump 1C configuration to XML files
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Выгрузка конфигурации 1С в XML-файлы
+
+.DESCRIPTION
+    Выполняет выгрузку конфигурации 1С в файлы в четырёх режимах:
+    - Full: полная выгрузка всей конфигурации
+    - Changes: инкрементальная выгрузка изменённых объектов
+    - Partial: выгрузка конкретных объектов из списка
+    - UpdateInfo: обновление только ConfigDumpInfo.xml
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER ConfigDir
+    Каталог для выгрузки конфигурации
+
+.PARAMETER Mode
+    Режим выгрузки: Full, Changes, Partial, UpdateInfo (по умолчанию Changes)
+
+.PARAMETER Objects
+    Имена объектов метаданных через запятую (для режима Partial)
+
+.PARAMETER Extension
+    Имя расширения для выгрузки
+
+.PARAMETER AllExtensions
+    Выгрузить все расширения
+
+.PARAMETER Format
+    Формат выгрузки: Hierarchical или Plain (по умолчанию Hierarchical)
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-dump-xml.ps1 -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\src" -Mode Full
+
+.EXAMPLE
+    .\db-dump-xml.ps1 -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\src" -Mode Partial -Objects "Справочник.Номенклатура,Документ.Заказ"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$ConfigDir,
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("Full", "Changes", "Partial", "UpdateInfo")]
+    [string]$Mode = "Changes",
+
+    [Parameter(Mandatory=$false)]
+    [string]$Objects,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Extension,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$AllExtensions,
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("Hierarchical", "Plain")]
+    [string]$Format = "Hierarchical",
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$ConfigDir = ConvertTo-CleanPath $ConfigDir '-ConfigDir'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-DirNonEmpty {
+    # Postcondition: the platform must have written files into the output directory.
+    # Exit code 0 with an empty dir (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Container) -and ([bool](Get-ChildItem -LiteralPath $Path -Force -ErrorAction SilentlyContinue | Select-Object -First 1))
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Validate Partial mode ---
+if ($Mode -eq "Partial" -and -not $Objects) {
+    Write-Host "Error: -Objects required for Partial mode" -ForegroundColor Red
+    exit 1
+}
+
+# --- Create output dir if needed ---
+if (-not (Test-Path $ConfigDir)) {
+    New-Item -ItemType Directory -Path $ConfigDir -Force | Out-Null
+    Write-Host "Created output directory: $ConfigDir"
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_dump_xml_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only; hierarchical Full/Changes) ---
+        if ($Format -eq "Plain") {
+            Write-Host "Error: ibcmd config export supports hierarchical format only (use -Format Hierarchical or 1cv8)" -ForegroundColor Red
+            exit 1
+        }
+        if ($AllExtensions) {
+            $arguments = @("infobase", "config", "export", "all-extensions", "$ConfigDir", "--db-path=$InfoBasePath")
+        } elseif ($Mode -eq "UpdateInfo") {
+            Write-Host "Error: ibcmd config export does not support Mode UpdateInfo; use 1cv8" -ForegroundColor Red
+            exit 1
+        } elseif ($Mode -eq "Partial") {
+            $objList = @($Objects -split ',' | ForEach-Object { $_.Trim() } | Where-Object { $_ })
+            $arguments = @("infobase", "config", "export", "objects") + $objList
+            $arguments += "--out=$ConfigDir", "--db-path=$InfoBasePath"
+            if ($Extension) { $arguments += "--extension=$Extension" }
+        } else {
+            $arguments = @("infobase", "config", "export", "--db-path=$InfoBasePath")
+            if ($Extension) { $arguments += "--extension=$Extension" }
+            $arguments += "$ConfigDir"
+        }
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $ConfigDir)
+        if ($outMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "Configuration exported successfully to: $ConfigDir" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no files under $ConfigDir — configuration was not exported" -ForegroundColor Red
+        } else {
+            Write-Host "Error exporting configuration (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/DumpConfigToFiles", "`"$ConfigDir`""
+    $arguments += "-Format", $Format
+
+    switch ($Mode) {
+        "Full" {
+            Write-Host "Executing full configuration dump..."
+        }
+        "Changes" {
+            Write-Host "Executing incremental configuration dump..."
+            $arguments += "-update"
+            $arguments += "-force"
+        }
+        "Partial" {
+            Write-Host "Executing partial configuration dump..."
+            $objectList = $Objects -split ',' | ForEach-Object { $_.Trim() } | Where-Object { $_ }
+
+            $listFile = Join-Path $tempDir "dump_list.txt"
+            $utf8Bom = New-Object System.Text.UTF8Encoding($true)
+            [System.IO.File]::WriteAllLines($listFile, $objectList, $utf8Bom)
+
+            $arguments += "-listFile", "`"$listFile`""
+            Write-Host "Objects to dump: $($objectList.Count)"
+            foreach ($obj in $objectList) { Write-Host "  $obj" }
+        }
+        "UpdateInfo" {
+            Write-Host "Updating ConfigDumpInfo.xml..."
+            $arguments += "-configDumpInfoOnly"
+        }
+    }
+
+    # --- Extensions ---
+    if ($Extension) {
+        $arguments += "-Extension", "`"$Extension`""
+    } elseif ($AllExtensions) {
+        $arguments += "-AllExtensions"
+    }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "dump_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition: exit 0 with an empty output directory is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $ConfigDir)
+    if ($outMissing) { $exitCode = 1 }
+    if ($exitCode -eq 0) {
+        Write-Host "Dump completed successfully" -ForegroundColor Green
+        Write-Host "Configuration dumped to: $ConfigDir"
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no files under $ConfigDir — configuration was not dumped" -ForegroundColor Red
+    } else {
+        Write-Host "Error dumping configuration (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,569 @@
+#!/usr/bin/env python3
+# db-dump-xml v1.14 — Dump 1C configuration to XML files
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def dir_nonempty(path):
+    """Postcondition: the platform must have written files into the output directory.
+    Exit code 0 with an empty dir (broken/headless env) is a false success — reject it."""
+    return os.path.isdir(path) and any(os.scandir(path))
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Dump 1C configuration to XML files",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="", help="Path to 1cv8.exe or its bin directory")
+    parser.add_argument("-InfoBasePath", default="", help="Path to file infobase")
+    parser.add_argument("-InfoBaseServer", default="", help="1C server (for server infobase)")
+    parser.add_argument("-InfoBaseRef", default="", help="Infobase name on server")
+    parser.add_argument("-UserName", default="", help="1C user name")
+    parser.add_argument("-Password", default="", help="1C user password")
+    parser.add_argument("-ConfigDir", required=True, help="Directory for configuration dump")
+    parser.add_argument(
+        "-Mode",
+        default="Changes",
+        choices=["Full", "Changes", "Partial", "UpdateInfo"],
+        help="Dump mode (default: Changes)",
+    )
+    parser.add_argument("-Objects", default="", help="Comma-separated metadata object names (for Partial mode)")
+    parser.add_argument("-Extension", default="", help="Extension name to dump")
+    parser.add_argument("-AllExtensions", action="store_true", help="Dump all extensions")
+    parser.add_argument(
+        "-Format",
+        default="Hierarchical",
+        choices=["Hierarchical", "Plain"],
+        help="Dump format (default: Hierarchical)",
+    )
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.ConfigDir = clean_path(args.ConfigDir, "-ConfigDir")
+
+    # --- Resolve V8Path ---
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Validate Partial mode ---
+    if args.Mode == "Partial" and not args.Objects:
+        print("Error: -Objects required for Partial mode", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Create output dir if needed ---
+    if not os.path.exists(args.ConfigDir):
+        os.makedirs(args.ConfigDir, exist_ok=True)
+        print(f"Created output directory: {args.ConfigDir}")
+
+    # --- ibcmd branch (file infobase only; hierarchical Full/Changes) ---
+    if engine == "ibcmd":
+        if args.Format == "Plain":
+            print("Error: ibcmd config export supports hierarchical format only (use -Format Hierarchical or 1cv8)", file=sys.stderr)
+            sys.exit(1)
+        if args.AllExtensions:
+            arguments = ["infobase", "config", "export", "all-extensions", args.ConfigDir, f"--db-path={args.InfoBasePath}"]
+        elif args.Mode == "UpdateInfo":
+            print("Error: ibcmd config export does not support Mode UpdateInfo; use 1cv8", file=sys.stderr)
+            sys.exit(1)
+        elif args.Mode == "Partial":
+            obj_list = [o.strip() for o in args.Objects.split(",") if o.strip()]
+            arguments = ["infobase", "config", "export", "objects"] + obj_list
+            arguments += [f"--out={args.ConfigDir}", f"--db-path={args.InfoBasePath}"]
+            if args.Extension:
+                arguments.append(f"--extension={args.Extension}")
+        else:
+            arguments = ["infobase", "config", "export", f"--db-path={args.InfoBasePath}"]
+            if args.Extension:
+                arguments.append(f"--extension={args.Extension}")
+            arguments.append(args.ConfigDir)
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        exit_code = result.returncode
+        out_missing = exit_code == 0 and not dir_nonempty(args.ConfigDir)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Configuration exported successfully to: {args.ConfigDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.ConfigDir} — configuration was not exported", file=sys.stderr)
+        else:
+            print(f"Error exporting configuration (code: {exit_code})", file=sys.stderr)
+        sys.exit(exit_code)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_dump_xml_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments += ["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"']
+        else:
+            arguments += ["/F", f'"{args.InfoBasePath}"']
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments += ["/DumpConfigToFiles", f'"{args.ConfigDir}"']
+        arguments += ["-Format", args.Format]
+
+        if args.Mode == "Full":
+            print("Executing full configuration dump...")
+        elif args.Mode == "Changes":
+            print("Executing incremental configuration dump...")
+            arguments.append("-update")
+            arguments.append("-force")
+        elif args.Mode == "Partial":
+            print("Executing partial configuration dump...")
+            object_list = [obj.strip() for obj in args.Objects.split(",") if obj.strip()]
+
+            list_file = os.path.join(temp_dir, "dump_list.txt")
+            with open(list_file, "w", encoding="utf-8-sig") as f:
+                f.write("\n".join(object_list))
+
+            arguments += ["-listFile", f'"{list_file}"']
+            print(f"Objects to dump: {len(object_list)}")
+            for obj in object_list:
+                print(f"  {obj}")
+        elif args.Mode == "UpdateInfo":
+            print("Updating ConfigDumpInfo.xml...")
+            arguments.append("-configDumpInfoOnly")
+
+        # --- Extensions ---
+        if args.Extension:
+            arguments += ["-Extension", f'"{args.Extension}"']
+        elif args.AllExtensions:
+            arguments.append("-AllExtensions")
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "dump_log.txt")
+        arguments += ["/Out", f'"{out_file}"']
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition: exit 0 with an empty output directory is a false success.
+        out_missing = exit_code == 0 and not dir_nonempty(args.ConfigDir)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print("Dump completed successfully")
+            print(f"Configuration dumped to: {args.ConfigDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.ConfigDir} — configuration was not dumped", file=sys.stderr)
+        else:
+            print(f"Error dumping configuration (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.exists(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -29,6 +29,7 @@ allowed-tools:
 ```json
 {
  "v8path": "C:\\Program Files\\1cv8\\8.3.25.1257\\bin",
+  "v8args": ["/UseHwLicenses+"],
  "databases": [
    {
      "id": "dev",
@@ -61,6 +62,8 @@ allowed-tools:
 | Поле | Тип | Описание |
 |------|-----|----------|
 | `v8path` | string | Каталог bin платформы 1С. Необязательный — если не задан, автоопределение |
+| `v8args` | array | Доп. аргументы запуска `1cv8.exe` для всех навыков, напр. `["/UseHwLicenses+"]` |
+| `ibcmdargs` | array | Доп. аргументы `ibcmd` (форма `--ключ=значение`) |
 | `databases` | array | Массив баз данных |
 | `default` | string | id базы по умолчанию |

@@ -36,7 +36,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" <параметры>
+python ".agents/skills/db-load-cf/scripts/db-load-cf.py" <параметры>
 ```

 ### Параметры скрипта
@@ -52,6 +52,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" <п
 | `-InputFile <путь>` | да | Путь к CF-файлу |
 | `-Extension <имя>` | нет | Загрузить как расширение |
 | `-AllExtensions` | нет | Загрузить все расширения из архива |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -63,11 +65,11 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" <п

 ```powershell
 # Файловая база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "C:\backup\config.cf"
+python ".agents/skills/db-load-cf/scripts/db-load-cf.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "C:\backup\config.cf"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test" -UserName "Admin" -Password "secret" -InputFile "config.cf"
+python ".agents/skills/db-load-cf/scripts/db-load-cf.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test" -UserName "Admin" -Password "secret" -InputFile "config.cf"

 # Загрузка расширения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-cf.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "ext.cfe" -Extension "МоёРасширение"
+python ".agents/skills/db-load-cf/scripts/db-load-cf.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "ext.cfe" -Extension "МоёРасширение"
 ```
@@ -0,0 +1,497 @@
+# db-load-cf v1.13 — Load 1C configuration from CF file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Загрузка конфигурации 1С из CF-файла
+
+.DESCRIPTION
+    Загружает конфигурацию из бинарного CF-файла в информационную базу.
+    Поддерживает загрузку расширений.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER InputFile
+    Путь к CF-файлу для загрузки
+
+.PARAMETER Extension
+    Загрузить как расширение
+
+.PARAMETER AllExtensions
+    Загрузить все расширения из архива
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-load-cf.ps1 -InfoBasePath "C:\Bases\MyDB" -InputFile "config.cf"
+
+.EXAMPLE
+    .\db-load-cf.ps1 -InfoBasePath "C:\Bases\MyDB" -InputFile "ext.cfe" -Extension "МоёРасширение"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$InputFile,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Extension,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$AllExtensions,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$InputFile = ConvertTo-CleanPath $InputFile '-InputFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Validate input file ---
+if (-not (Test-Path $InputFile)) {
+    Write-Host "Error: input file not found: $InputFile" -ForegroundColor Red
+    exit 1
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_load_cf_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        if ($AllExtensions) {
+            Write-Host "Error: ibcmd config load does not support -AllExtensions (use -Extension)" -ForegroundColor Red
+            exit 1
+        }
+        $arguments = @("infobase", "config", "load", "--db-path=$InfoBasePath")
+        if ($Extension) { $arguments += "--extension=$Extension" }
+        $arguments += "$InputFile"
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        if ($exitCode -eq 0) {
+            Write-Host "Configuration loaded successfully from: $InputFile" -ForegroundColor Green
+        } else {
+            Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/LoadCfg", "`"$InputFile`""
+
+    # --- Extensions ---
+    if ($Extension) {
+        $arguments += "-Extension", "`"$Extension`""
+    } elseif ($AllExtensions) {
+        $arguments += "-AllExtensions"
+    }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "load_cf_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    if ($exitCode -eq 0) {
+        Write-Host "Configuration loaded successfully from: $InputFile" -ForegroundColor Green
+    } else {
+        Write-Host "Error loading configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,520 @@
+#!/usr/bin/env python3
+# db-load-cf v1.13 — Load 1C configuration from CF file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Load 1C configuration from CF file",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-InputFile", required=True)
+    parser.add_argument("-Extension", default="")
+    parser.add_argument("-AllExtensions", action="store_true")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.InputFile = clean_path(args.InputFile, "-InputFile")
+
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Validate input file ---
+    if not os.path.isfile(args.InputFile):
+        print(f"Error: input file not found: {args.InputFile}", file=sys.stderr)
+        sys.exit(1)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        if args.AllExtensions:
+            print("Error: ibcmd config load does not support -AllExtensions (use -Extension)", file=sys.stderr)
+            sys.exit(1)
+        arguments = ["infobase", "config", "load", f"--db-path={args.InfoBasePath}"]
+        if args.Extension:
+            arguments.append(f"--extension={args.Extension}")
+        arguments.append(args.InputFile)
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        if result.returncode == 0:
+            print(f"Configuration loaded successfully from: {args.InputFile}")
+        else:
+            print(f"Error loading configuration (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
+        sys.exit(result.returncode)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_load_cf_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.extend(["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"'])
+        else:
+            arguments.extend(["/F", f'"{args.InfoBasePath}"'])
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments.extend(["/LoadCfg", f'"{args.InputFile}"'])
+
+        # --- Extensions ---
+        if args.Extension:
+            arguments.extend(["-Extension", f'"{args.Extension}"'])
+        elif args.AllExtensions:
+            arguments.append("-AllExtensions")
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "load_cf_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        if exit_code == 0:
+            print(f"Configuration loaded successfully from: {args.InputFile}")
+        else:
+            print(f"Error loading configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -52,7 +52,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-dt.ps1" <параметры>
+python ".agents/skills/db-load-dt/scripts/db-load-dt.py" <параметры>
 ```

 ### Параметры скрипта
@@ -68,6 +68,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-dt.ps1" <п
 | `-InputFile <путь>` | да | Путь к DT-файлу |
 | `-JobsCount <N>` | нет | Число фоновых заданий загрузки (0 = по числу процессоров) |
 | `-UnlockCode <код>` | нет | Код разблокировки (`/UC`), если заблокировано начало сеансов |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -80,10 +82,10 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-dt.ps1" <п

 ```powershell
 # Файловая база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-dt.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "C:\backup\base.dt"
+python ".agents/skills/db-load-dt/scripts/db-load-dt.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -InputFile "C:\backup\base.dt"

 # Серверная база с ускорением загрузки
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-dt.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test" -UserName "Admin" -Password "secret" -InputFile "base.dt" -JobsCount 4
+python ".agents/skills/db-load-dt/scripts/db-load-dt.py" -InfoBaseServer "srv01" -InfoBaseRef "MyApp_Test" -UserName "Admin" -Password "secret" -InputFile "base.dt" -JobsCount 4
 ```

 ## Связанные навыки
@@ -0,0 +1,487 @@
+# db-load-dt v1.12 — Load 1C information base from DT file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Загрузка информационной базы 1С из DT-файла
+
+.DESCRIPTION
+    Загружает информационную базу целиком (конфигурация + данные) из DT-файла.
+    ВНИМАНИЕ: операция полностью перезаписывает базу.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER InputFile
+    Путь к DT-файлу для загрузки
+
+.PARAMETER JobsCount
+    Количество фоновых заданий для загрузки (0 = по числу процессоров)
+
+.PARAMETER UnlockCode
+    Код разблокировки базы (/UC) — если заблокировано начало сеансов
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-load-dt.ps1 -InfoBasePath "C:\Bases\MyDB" -InputFile "backup.dt"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$InputFile,
+
+    [Parameter(Mandatory=$false)]
+    [int]$JobsCount = 0,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UnlockCode,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$InputFile = ConvertTo-CleanPath $InputFile '-InputFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Validate input file ---
+if (-not (Test-Path $InputFile)) {
+    Write-Host "Error: input file not found: $InputFile" -ForegroundColor Red
+    exit 1
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_load_dt_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        $arguments = @("infobase", "restore", "--db-path=$InfoBasePath")
+        if (-not (Test-Path (Join-Path $InfoBasePath "1Cv8.1CD"))) { $arguments += "--create-database" }
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "$InputFile"
+
+        $arguments += "--data=$tempDir"
+
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        if ($exitCode -eq 0) {
+            Write-Host "Information base restored successfully from: $InputFile" -ForegroundColor Green
+        } else {
+            Write-Host "Error restoring information base (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+    if ($UnlockCode) { $arguments += "/UC`"$UnlockCode`"" }
+
+    $arguments += "/RestoreIB", "`"$InputFile`""
+    if ($JobsCount -gt 0) { $arguments += "-JobsCount", "$JobsCount" }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "load_dt_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    if ($exitCode -eq 0) {
+        Write-Host "Information base restored successfully from: $InputFile" -ForegroundColor Green
+    } else {
+        Write-Host "Error restoring information base (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,515 @@
+#!/usr/bin/env python3
+# db-load-dt v1.12 — Load 1C information base from DT file
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Load 1C information base from DT file",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-InputFile", required=True)
+    parser.add_argument("-JobsCount", type=int, default=0)
+    parser.add_argument("-UnlockCode", default="")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.InputFile = clean_path(args.InputFile, "-InputFile")
+
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Validate input file ---
+    if not os.path.isfile(args.InputFile):
+        print(f"Error: input file not found: {args.InputFile}", file=sys.stderr)
+        sys.exit(1)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        arguments = ["infobase", "restore", f"--db-path={args.InfoBasePath}"]
+        if not os.path.isfile(os.path.join(args.InfoBasePath, "1Cv8.1CD")):
+            arguments.append("--create-database")
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(args.InputFile)
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        if result.returncode == 0:
+            print(f"Information base restored successfully from: {args.InputFile}")
+        else:
+            print(f"Error restoring information base (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
+        sys.exit(result.returncode)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_load_dt_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.extend(["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"'])
+        else:
+            arguments.extend(["/F", f'"{args.InfoBasePath}"'])
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+        if args.UnlockCode:
+            arguments.append(f'/UC"{args.UnlockCode}"')
+
+        arguments.extend(["/RestoreIB", f'"{args.InputFile}"'])
+        if args.JobsCount > 0:
+            arguments.extend(["-JobsCount", str(args.JobsCount)])
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "load_dt_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        if exit_code == 0:
+            print(f"Information base restored successfully from: {args.InputFile}")
+        else:
+            print(f"Error restoring information base (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -38,7 +38,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-git.ps1" <параметры>
+python ".agents/skills/db-load-git/scripts/db-load-git.py" <параметры>
 ```

 ### Параметры скрипта
@@ -59,6 +59,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-git.ps1" <
 | `-Format <формат>` | нет | `Hierarchical` (по умолч.) / `Plain` |
 | `-DryRun` | нет | Только показать что будет загружено (без загрузки) |
 | `-UpdateDB` | нет | После загрузки сразу обновить конфигурацию БД (`/UpdateDBCfg`) |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -70,8 +72,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-git.ps1" <

 ```powershell
 # Все незафиксированные изменения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-git.ps1" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\WS\cfsrc" -Source All -UpdateDB
+python ".agents/skills/db-load-git/scripts/db-load-git.py" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\WS\cfsrc" -Source All -UpdateDB

 # Из диапазона коммитов
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-git.ps1" -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\WS\cfsrc" -Source Commit -CommitRange "HEAD~3..HEAD"
+python ".agents/skills/db-load-git/scripts/db-load-git.py" -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\WS\cfsrc" -Source Commit -CommitRange "HEAD~3..HEAD"
 ```
@@ -1,4 +1,4 @@
-# db-load-git v1.15 — Load Git changes into 1C database
+# db-load-git v1.18 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -48,6 +48,12 @@
 .PARAMETER DryRun
    Только показать что будет загружено (без загрузки)

+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
 .EXAMPLE
    .\db-load-git.ps1 -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\src" -Source All

@@ -102,7 +108,13 @@ param(
    [switch]$DryRun,

    [Parameter(Mandatory=$false)]
-    [switch]$UpdateDB
+    [switch]$UpdateDB,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
 )

 $OutputEncoding = [System.Text.Encoding]::UTF8
@@ -115,6 +127,128 @@ function Protect-Secrets {
    return $Text
 }

+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
 function Get-ExitAnnotation {
    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
@@ -191,32 +325,75 @@ if (-not $DryRun) {
 # --- Detect engine + validate connection (skip if DryRun) ---
 $engine = "1cv8"
 if (-not $DryRun) {
-function Invoke-IbcmdProcess {
-    # Run ibcmd non-interactively: a closed stdin pipe (EOF) makes ibcmd's auth prompt
-    # fast-fail instead of hanging. Returns @{ Output; ExitCode }. cp866 decodes ibcmd's
-    # native OEM output. The 1cv8/DESIGNER branch keeps using Start-Process.
-    param([string]$Exe, [string[]]$IbArgs)
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
    $psi = New-Object System.Diagnostics.ProcessStartInfo
    $psi.FileName = $Exe
-    $psi.Arguments = ($IbArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
    $psi.UseShellExecute = $false
    $psi.CreateNoWindow = $true
    $psi.RedirectStandardInput = $true
    $psi.RedirectStandardOutput = $true
    $psi.RedirectStandardError = $true
-    try {
-        $psi.StandardOutputEncoding = [System.Text.Encoding]::GetEncoding(866)
-        $psi.StandardErrorEncoding = [System.Text.Encoding]::GetEncoding(866)
-    } catch {}
    $p = [System.Diagnostics.Process]::Start($psi)
    $p.StandardInput.Close()
-    $out = $p.StandardOutput.ReadToEnd()
-    $err = $p.StandardError.ReadToEnd()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
    if ($err) { $out += $err }
    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
 }

+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+

    $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
    if ($engine -eq "ibcmd") {
@@ -230,6 +407,10 @@ function Invoke-IbcmdProcess {
    }
 }

+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
 # --- Validate config dir ---
 if (-not (Test-Path $ConfigDir)) {
    Write-Host "Error: config directory not found: $ConfigDir" -ForegroundColor Red
@@ -396,24 +577,26 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
-        $__ib = Invoke-IbcmdProcess $V8Path $arguments
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -ne 0) {
            Write-Host "Error loading changes (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
-            if ($output) { Write-Host ($output | Out-String) }
+            Write-PlatformOutput $output
            exit $exitCode
        }
        Write-Host "Changes loaded successfully ($($configFiles.Count) files)" -ForegroundColor Green
-        if ($output) { Write-Host ($output | Out-String) }
+        Write-PlatformOutput $output
        if ($UpdateDB) {
            $applyArgs = @("infobase", "config", "apply", "--db-path=$InfoBasePath", "--force")
            if ($UserName) { $applyArgs += "--user=$UserName" }
            if ($Password) { $applyArgs += "--password=$Password" }
            $applyArgs += "--data=$tempDir"
-            Write-Host "Running: ibcmd $(Protect-Secrets ($applyArgs -join ' ') @($Password, $UserName))"
-            $__ib = Invoke-IbcmdProcess $V8Path $applyArgs
+            $applyArgs += $extraArgs
+            Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $applyArgs $engine) -join ' ') @($Password, $UserName))"
+            $__ib = Invoke-PlatformProcess $V8Path $applyArgs
            $applyOut = $__ib.Output
            $exitCode = $__ib.ExitCode
            if ($exitCode -eq 0) {
@@ -421,7 +604,7 @@ try {
            } else {
                Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            }
-            if ($applyOut) { Write-Host ($applyOut | Out-String) }
+            Write-PlatformOutput $applyOut
        }
        exit $exitCode
    }
@@ -466,14 +649,15 @@ try {
    $outFile = Join-Path $tempDir "load_log.txt"
    $arguments += "/Out", "`"$outFile`""
    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs

    # --- Execute ---
    Write-Host ""
    Write-Host "Executing partial configuration load..."
-    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"

-    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
-    $exitCode = $process.ExitCode
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode

    # --- Result ---
    Write-Host ""
@@ -491,6 +675,7 @@ try {
            Write-Host "--- End ---"
        }
    }
+    Write-PlatformOutput $__v8.Output

    exit $exitCode

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-git v1.15 — Load Git changes into 1C database
+# db-load-git v1.18 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -36,6 +36,163 @@ def _find_project_v8path():
        d = parent


+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
 def _version_dir(p):
    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
    parent = os.path.dirname(p)
@@ -86,6 +243,85 @@ IBCMD_NOUSER_HINT = (
 )


+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
 def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    """Run an ibcmd command non-interactively.

@@ -96,7 +332,10 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    if warn_no_user and os.name == "nt" and not has_username:
        sys.stderr.write(IBCMD_NOUSER_HINT)
        sys.stderr.flush()
-    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r


 def get_object_xml_from_subfile(relative_path):
@@ -185,7 +424,18 @@ def main():
    )
    parser.add_argument("-DryRun", action="store_true", help="Only show what would be loaded (no actual load)")
    parser.add_argument("-UpdateDB", action="store_true", help="Also update database configuration after load")
-    args = parser.parse_args()
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.ConfigDir = clean_path(args.ConfigDir, "-ConfigDir")

    # --- Resolve V8Path (skip if DryRun) ---
    v8path = None
@@ -204,6 +454,18 @@ def main():
            print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
            sys.exit(1)

+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
    # --- Validate config dir ---
    if not os.path.exists(args.ConfigDir):
        print(f"Error: config directory not found: {args.ConfigDir}", file=sys.stderr)
@@ -340,18 +602,13 @@ def main():
            if args.Password:
                arguments.append(f"--password={args.Password}")
            arguments.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
+            arguments.extend(extra_args)
+            print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
            result = run_ibcmd([v8path] + arguments, bool(args.UserName))
            if result.returncode != 0:
                print(f"Error loading changes (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
-                if result.stdout:
-                    print(result.stdout)
-                if result.stderr:
-                    print(result.stderr, file=sys.stderr)
                sys.exit(result.returncode)
            print(f"Changes loaded successfully ({len(config_files)} files)")
-            if result.stdout:
-                print(result.stdout)
            exit_code = 0
            if args.UpdateDB:
                apply_args = ["infobase", "config", "apply", f"--db-path={args.InfoBasePath}", "--force"]
@@ -360,17 +617,15 @@ def main():
                if args.Password:
                    apply_args.append(f"--password={args.Password}")
                apply_args.append(f"--data={ib_data}")
-                print(f"Running: ibcmd {_redact(' '.join(apply_args), args.Password, args.UserName)}")
+                apply_args.extend(extra_args)
+                print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(apply_args, engine)), args.Password, args.UserName)}")
                ar = run_ibcmd([v8path] + apply_args, bool(args.UserName))
                exit_code = ar.returncode
                if exit_code == 0:
                    print("Database configuration updated successfully")
                else:
                    print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
-                if ar.stdout:
-                    print(ar.stdout)
-                if ar.stderr:
-                    print(ar.stderr, file=sys.stderr)
+                print_platform_output(ar)
            sys.exit(exit_code)

        # --- Write list file (UTF-8 with BOM) ---
@@ -382,24 +637,24 @@ def main():
        arguments = ["DESIGNER"]

        if args.InfoBaseServer and args.InfoBaseRef:
-            arguments += ["/S", f"{args.InfoBaseServer}/{args.InfoBaseRef}"]
+            arguments += ["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"']
        else:
-            arguments += ["/F", args.InfoBasePath]
+            arguments += ["/F", f'"{args.InfoBasePath}"']

        if args.UserName:
-            arguments.append(f"/N{args.UserName}")
+            arguments.append(f'/N"{args.UserName}"')
        if args.Password:
-            arguments.append(f"/P{args.Password}")
+            arguments.append(f'/P"{args.Password}"')

-        arguments += ["/LoadConfigFromFiles", args.ConfigDir]
-        arguments += ["-listFile", list_file]
+        arguments += ["/LoadConfigFromFiles", f'"{args.ConfigDir}"']
+        arguments += ["-listFile", f'"{list_file}"']
        arguments += ["-Format", args.Format]
        arguments.append("-partial")
        arguments.append("-updateConfigDumpInfo")

        # --- Extensions ---
        if args.Extension:
-            arguments += ["-Extension", args.Extension]
+            arguments += ["-Extension", f'"{args.Extension}"']
        elif args.AllExtensions:
            arguments.append("-AllExtensions")

@@ -409,19 +664,16 @@ def main():

        # --- Output ---
        out_file = os.path.join(temp_dir, "load_log.txt")
-        arguments += ["/Out", out_file]
+        arguments += ["/Out", f'"{out_file}"']
        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)

        # --- Execute ---
        print("")
        print("Executing partial configuration load...")
-        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")

-        result = subprocess.run(
-            [v8path] + arguments,
-            capture_output=True,
-            text=True,
-        )
+        result = run_v8(v8path, arguments)
        exit_code = result.returncode

        # --- Result ---
@@ -442,6 +694,7 @@ def main():
            except Exception:
                pass

+        print_platform_output(result)
        sys.exit(exit_code)

    finally:
@@ -38,7 +38,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" <параметры>
+python ".agents/skills/db-load-xml/scripts/db-load-xml.py" <параметры>
 ```

 ### Параметры скрипта
@@ -59,6 +59,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" <
 | `-AllExtensions` | нет | Загрузить все расширения |
 | `-Format <формат>` | нет | `Hierarchical` (по умолч.) / `Plain` |
 | `-UpdateDB` | нет | После загрузки сразу обновить конфигурацию БД (`/UpdateDBCfg`) |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -88,14 +90,14 @@ Documents/Заказ/Forms/ФормаДокумента.xml

 ```powershell
 # Полная загрузка
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full
+python ".agents/skills/db-load-xml/scripts/db-load-xml.py" -V8Path "C:\Program Files\1cv8\8.3.25.1257\bin" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full

 # Частичная загрузка конкретных файлов
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Partial -Files "Catalogs/Номенклатура.xml,Catalogs/Номенклатура/Ext/ObjectModule.bsl"
+python ".agents/skills/db-load-xml/scripts/db-load-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Partial -Files "Catalogs/Номенклатура.xml,Catalogs/Номенклатура/Ext/ObjectModule.bsl"

 # Загрузка расширения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\ext_src" -Mode Full -Extension "МоёРасширение"
+python ".agents/skills/db-load-xml/scripts/db-load-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\ext_src" -Mode Full -Extension "МоёРасширение"

 # Загрузка + обновление БД в одном запуске
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-load-xml.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full -UpdateDB
+python ".agents/skills/db-load-xml/scripts/db-load-xml.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -ConfigDir "C:\WS\cfsrc" -Mode Full -UpdateDB
 ```
@@ -1,4 +1,4 @@
-# db-load-xml v1.16 — Load 1C configuration from XML files
+# db-load-xml v1.19 — Load 1C configuration from XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -48,6 +48,12 @@
 .PARAMETER Format
    Формат файлов: Hierarchical или Plain (по умолчанию Hierarchical)

+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
 .EXAMPLE
    .\db-load-xml.ps1 -InfoBasePath "C:\Bases\MyDB" -ConfigDir "C:\src" -Mode Full

@@ -102,7 +108,13 @@ param(
    [switch]$UpdateDB,

    [Parameter(Mandatory=$false)]
-    [switch]$StrictLog
+    [switch]$StrictLog,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
 )

 $OutputEncoding = [System.Text.Encoding]::UTF8
@@ -132,6 +144,165 @@ function Get-ExitAnnotation {
    return ""
 }

+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$ConfigDir = ConvertTo-CleanPath $ConfigDir '-ConfigDir'
+$ListFile = ConvertTo-CleanPath $ListFile '-ListFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
 # --- Resolve V8Path ---
 function Find-ProjectV8Path {
    $dir = (Get-Location).Path
@@ -176,35 +347,82 @@ if (-not (Test-Path $V8Path)) {
 }

 # --- Detect engine (ibcmd vs 1cv8) by exe name ---
-function Invoke-IbcmdProcess {
-    # Run ibcmd non-interactively: a closed stdin pipe (EOF) makes ibcmd's auth prompt
-    # fast-fail instead of hanging. Returns @{ Output; ExitCode }. cp866 decodes ibcmd's
-    # native OEM output. The 1cv8/DESIGNER branch keeps using Start-Process.
-    param([string]$Exe, [string[]]$IbArgs)
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
    $psi = New-Object System.Diagnostics.ProcessStartInfo
    $psi.FileName = $Exe
-    $psi.Arguments = ($IbArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
    $psi.UseShellExecute = $false
    $psi.CreateNoWindow = $true
    $psi.RedirectStandardInput = $true
    $psi.RedirectStandardOutput = $true
    $psi.RedirectStandardError = $true
-    try {
-        $psi.StandardOutputEncoding = [System.Text.Encoding]::GetEncoding(866)
-        $psi.StandardErrorEncoding = [System.Text.Encoding]::GetEncoding(866)
-    } catch {}
    $p = [System.Diagnostics.Process]::Start($psi)
    $p.StandardInput.Close()
-    $out = $p.StandardOutput.ReadToEnd()
-    $err = $p.StandardError.ReadToEnd()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
    if ($err) { $out += $err }
    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
 }

+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+

 $engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }

+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
 # --- Validate connection ---
 if ($engine -eq "ibcmd") {
    if (-not $InfoBasePath) {
@@ -268,25 +486,27 @@ try {
        if ($UserName) { $arguments += "--user=$UserName" }
        if ($Password) { $arguments += "--password=$Password" }
        $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
-        $__ib = Invoke-IbcmdProcess $V8Path $arguments
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
        $output = $__ib.Output
        $exitCode = $__ib.ExitCode
        if ($exitCode -ne 0) {
            Write-Host "Error loading configuration from files (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
-            if ($output) { Write-Host ($output | Out-String) }
+            Write-PlatformOutput $output
            exit $exitCode
        }
        Write-Host "Configuration loaded successfully from: $ConfigDir" -ForegroundColor Green
-        if ($output) { Write-Host ($output | Out-String) }
+        Write-PlatformOutput $output

        if ($UpdateDB) {
            $applyArgs = @("infobase", "config", "apply", "--db-path=$InfoBasePath", "--force")
            if ($UserName) { $applyArgs += "--user=$UserName" }
            if ($Password) { $applyArgs += "--password=$Password" }
            $applyArgs += "--data=$tempDir"
-            Write-Host "Running: ibcmd $(Protect-Secrets ($applyArgs -join ' ') @($Password, $UserName))"
-            $__ib = Invoke-IbcmdProcess $V8Path $applyArgs
+            $applyArgs += $extraArgs
+            Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $applyArgs $engine) -join ' ') @($Password, $UserName))"
+            $__ib = Invoke-PlatformProcess $V8Path $applyArgs
            $applyOut = $__ib.Output
            $exitCode = $__ib.ExitCode
            if ($exitCode -eq 0) {
@@ -294,7 +514,7 @@ try {
            } else {
                Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
            }
-            if ($applyOut) { Write-Host ($applyOut | Out-String) }
+            Write-PlatformOutput $applyOut
        }
        exit $exitCode
    }
@@ -373,11 +593,12 @@ try {
    $outFile = Join-Path $tempDir "load_log.txt"
    $arguments += "/Out", "`"$outFile`""
    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs

    # --- Execute ---
-    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
-    $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
-    $exitCode = $process.ExitCode
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode

    # --- Read log ---
    $logContent = $null
@@ -424,6 +645,7 @@ try {
        Write-Host $logContent
        Write-Host "--- End ---"
    }
+    Write-PlatformOutput $__v8.Output

    if ($silentFailures.Count -gt 0) {
        $msg = "[warning] log contains $($silentFailures.Count) rejection(s) — platform loaded config but dropped properties/refs"
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-xml v1.16 — Load 1C configuration from XML files
+# db-load-xml v1.19 — Load 1C configuration from XML files
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -36,6 +36,163 @@ def _find_project_v8path():
        d = parent


+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
 def _version_dir(p):
    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
    parent = os.path.dirname(p)
@@ -86,6 +243,85 @@ IBCMD_NOUSER_HINT = (
 )


+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
 def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    """Run an ibcmd command non-interactively.

@@ -96,7 +332,10 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    if warn_no_user and os.name == "nt" and not has_username:
        sys.stderr.write(IBCMD_NOUSER_HINT)
        sys.stderr.flush()
-    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r


 def describe_exit(code):
@@ -168,13 +407,37 @@ def main():
        action="store_true",
        help="Treat silent rejection warnings in the log as errors (elevate exit code to 1)",
    )
-    args = parser.parse_args()
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.ConfigDir = clean_path(args.ConfigDir, "-ConfigDir")
+    args.ListFile = clean_path(args.ListFile, "-ListFile")

    # --- Resolve V8Path ---
    v8path = resolve_v8path(args.V8Path)

    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"

+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
    # --- Validate connection ---
    if engine == "ibcmd":
        if not args.InfoBasePath:
@@ -232,18 +495,13 @@ def main():
        if args.Password:
            arguments.append(f"--password={args.Password}")
        arguments.append(f"--data={ib_data}")
-        print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
        if result.returncode != 0:
            print(f"Error loading configuration from files (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
-            if result.stdout:
-                print(result.stdout)
-            if result.stderr:
-                print(result.stderr, file=sys.stderr)
            sys.exit(result.returncode)
        print(f"Configuration loaded successfully from: {args.ConfigDir}")
-        if result.stdout:
-            print(result.stdout)
        exit_code = 0
        if args.UpdateDB:
            apply_args = ["infobase", "config", "apply", f"--db-path={args.InfoBasePath}", "--force"]
@@ -252,17 +510,15 @@ def main():
            if args.Password:
                apply_args.append(f"--password={args.Password}")
            apply_args.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {_redact(' '.join(apply_args), args.Password, args.UserName)}")
+            apply_args.extend(extra_args)
+            print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(apply_args, engine)), args.Password, args.UserName)}")
            ar = run_ibcmd([v8path] + apply_args, bool(args.UserName))
            exit_code = ar.returncode
            if exit_code == 0:
                print("Database configuration updated successfully")
            else:
                print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
-            if ar.stdout:
-                print(ar.stdout)
-            if ar.stderr:
-                print(ar.stderr, file=sys.stderr)
+            print_platform_output(ar)
        sys.exit(exit_code)

    # --- Temp dir ---
@@ -274,16 +530,16 @@ def main():
        arguments = ["DESIGNER"]

        if args.InfoBaseServer and args.InfoBaseRef:
-            arguments += ["/S", f"{args.InfoBaseServer}/{args.InfoBaseRef}"]
+            arguments += ["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"']
        else:
-            arguments += ["/F", args.InfoBasePath]
+            arguments += ["/F", f'"{args.InfoBasePath}"']

        if args.UserName:
-            arguments.append(f"/N{args.UserName}")
+            arguments.append(f'/N"{args.UserName}"')
        if args.Password:
-            arguments.append(f"/P{args.Password}")
+            arguments.append(f'/P"{args.Password}"')

-        arguments += ["/LoadConfigFromFiles", args.ConfigDir]
+        arguments += ["/LoadConfigFromFiles", f'"{args.ConfigDir}"']

        if args.Mode == "Full":
            print("Executing full configuration load...")
@@ -319,7 +575,7 @@ def main():
            for fl in file_list:
                print(f"  {fl}")

-            arguments += ["-listFile", generated_list_file]
+            arguments += ["-listFile", f'"{generated_list_file}"']
            arguments.append("-partial")
            arguments.append("-updateConfigDumpInfo")

@@ -327,7 +583,7 @@ def main():

        # --- Extensions ---
        if args.Extension:
-            arguments += ["-Extension", args.Extension]
+            arguments += ["-Extension", f'"{args.Extension}"']
        elif args.AllExtensions:
            arguments.append("-AllExtensions")

@@ -337,16 +593,13 @@ def main():

        # --- Output ---
        out_file = os.path.join(temp_dir, "load_log.txt")
-        arguments += ["/Out", out_file]
+        arguments += ["/Out", f'"{out_file}"']
        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)

        # --- Execute ---
-        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
-        result = subprocess.run(
-            [v8path] + arguments,
-            capture_output=True,
-            text=True,
-        )
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
        exit_code = result.returncode

        # --- Read log ---
@@ -392,6 +645,7 @@ def main():
            print(log_content)
            print("--- End ---")

+        print_platform_output(result)
        if silent_failures:
            suffix = "" if args.StrictLog else " (pass -StrictLog to treat as error)"
            print(
@@ -36,7 +36,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" <параметры>
+python ".agents/skills/db-run/scripts/db-run.py" <параметры>
 ```

 ### Параметры скрипта
@@ -52,6 +52,7 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" <пар
 | `-Execute <файл.epf>` | нет | Запуск внешней обработки сразу после старта |
 | `-CParam <строка>` | нет | Параметр запуска (/C) |
 | `-URL <ссылка>` | нет | Навигационная ссылка (формат `e1cib/...`) |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -63,14 +64,14 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" <пар

 ```powershell
 # Простой запуск
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin"
+python ".agents/skills/db-run/scripts/db-run.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin"

 # Запуск с обработкой
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -Execute "C:\epf\МояОбработка.epf"
+python ".agents/skills/db-run/scripts/db-run.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -Execute "C:\epf\МояОбработка.epf"

 # Открыть по навигационной ссылке
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -URL "e1cib/data/Справочник.Номенклатура"
+python ".agents/skills/db-run/scripts/db-run.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -URL "e1cib/data/Справочник.Номенклатура"

 # Серверная база с параметром запуска
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-run.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -CParam "ЗапуститьОбновление"
+python ".agents/skills/db-run/scripts/db-run.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -CParam "ЗапуститьОбновление"
 ```
@@ -0,0 +1,369 @@
+# db-run v1.7 — Launch 1C:Enterprise
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Запуск 1С:Предприятие
+
+.DESCRIPTION
+    Запускает информационную базу в режиме 1С:Предприятие (пользовательский режим).
+    Запуск в фоне — не ждёт завершения процесса.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER Execute
+    Путь к внешней обработке для запуска
+
+.PARAMETER CParam
+    Параметр запуска (/C)
+
+.PARAMETER URL
+    Навигационная ссылка (e1cib/...)
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-run.ps1 -InfoBasePath "C:\Bases\MyDB"
+
+.EXAMPLE
+    .\db-run.ps1 -InfoBasePath "C:\Bases\MyDB" -Execute "C:\epf\МояОбработка.epf"
+
+.EXAMPLE
+    .\db-run.ps1 -InfoBasePath "C:\Bases\MyDB" -CParam "ЗапуститьОбновление"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Execute,
+
+    [Parameter(Mandatory=$false)]
+    [string]$CParam,
+
+    [Parameter(Mandatory=$false)]
+    [string]$URL,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$Execute = ConvertTo-CleanPath $Execute '-Execute'
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Resolve additional arguments ---
+# 1C:Enterprise is always launched by 1cv8 — ibcmd has no interactive mode.
+$engine = "1cv8"
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '/Execute' = '-Execute'; '/C' = '-CParam'; '/URL' = '-URL' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+function Format-ArgToken {
+    # ShellExecute re-joins the argument string, so quote each extra token that needs it.
+    param([string]$Token)
+    if ($Token -match '[\s"]') { return ' "' + ($Token -replace '"', '\"') + '"' }
+    return " $Token"
+}
+
+# --- Validate connection ---
+if (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Build arguments as single string ---
+# Note: Start-Process without -NoNewWindow uses ShellExecute.
+# Passing ArgumentList as array can corrupt Cyrillic when ShellExecute
+# re-joins elements. Single string avoids this.
+$argString = "ENTERPRISE"
+
+if ($InfoBaseServer -and $InfoBaseRef) {
+    $argString += " /S `"$InfoBaseServer/$InfoBaseRef`""
+} else {
+    $argString += " /F `"$InfoBasePath`""
+}
+
+if ($UserName) { $argString += " /N`"$UserName`"" }
+if ($Password) { $argString += " /P`"$Password`"" }
+
+# --- Optional params ---
+if ($Execute) {
+    $ext = [System.IO.Path]::GetExtension($Execute).ToLower()
+    if ($ext -eq ".erf") {
+        Write-Host "[WARN] /Execute не поддерживает ERF-файлы (внешние отчёты)." -ForegroundColor Yellow
+        Write-Host "       Откройте отчёт через «Файл -> Открыть»: $Execute" -ForegroundColor Yellow
+        Write-Host "       Запускаю базу без /Execute." -ForegroundColor Yellow
+        $Execute = ""
+    }
+}
+if ($Execute) {
+    $argString += " /Execute `"$Execute`""
+}
+if ($CParam) {
+    $argString += " /C `"$CParam`""
+}
+if ($URL) {
+    $argString += " /URL `"$URL`""
+}
+
+$argString += " /DisableStartupDialogs"
+
+# The display string is built from the same tokens with secret-prone values redacted.
+$displayString = $argString
+foreach ($tok in $extraArgs) { $argString += (Format-ArgToken $tok) }
+foreach ($tok in (Format-ArgsForDisplay $extraArgs $engine)) { $displayString += (Format-ArgToken $tok) }
+
+# --- Execute (background) ---
+# Redact the password/user before printing the command line — never leak secrets.
+$displayArg = Protect-Secrets $displayString @($Password, $UserName)
+Write-Host "Running: 1cv8.exe $displayArg"
+$proc = Start-Process -FilePath $V8Path -ArgumentList $argString -PassThru
+
+# --- Bounded early-exit check ---
+# The launch is a background GUI process, so we don't wait for completion. But a process
+# that dies within the first ~1.5s never really started (bad base, no display, license) —
+# report that honestly instead of a blind "launched".
+$deadline = (Get-Date).AddMilliseconds(1500)
+while ((Get-Date) -lt $deadline -and -not $proc.HasExited) {
+    Start-Sleep -Milliseconds 200
+}
+if ($proc.HasExited) {
+    Write-Host "Error: 1C:Enterprise exited immediately (code: $($proc.ExitCode))" -ForegroundColor Red
+    if ($proc.ExitCode -ne 0) { exit $proc.ExitCode } else { exit 1 }
+}
+Write-Host "PID: $($proc.Id)"
+Write-Host "1C:Enterprise launched" -ForegroundColor Green
@@ -0,0 +1,365 @@
+#!/usr/bin/env python3
+# db-run v1.7 — Launch 1C:Enterprise
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import glob
+import json
+import os
+import re
+import subprocess
+import sys
+import time
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Launch 1C:Enterprise",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-Execute", default="")
+    parser.add_argument("-CParam", default="")
+    parser.add_argument("-URL", default="")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    args.Execute = clean_path(args.Execute, "-Execute")
+
+    v8path = resolve_v8path(args.V8Path)
+
+    # --- Resolve additional arguments ---
+    # 1C:Enterprise is always launched by 1cv8 — ibcmd has no interactive mode.
+    engine = "1cv8"
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "/Execute": "-Execute",
+        "/C": "-CParam",
+        "/URL": "-URL",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Build arguments ---
+    arguments = ["ENTERPRISE"]
+
+    if args.InfoBaseServer and args.InfoBaseRef:
+        arguments.extend(["/S", f"{args.InfoBaseServer}/{args.InfoBaseRef}"])
+    else:
+        arguments.extend(["/F", args.InfoBasePath])
+
+    if args.UserName:
+        arguments.append(f"/N{args.UserName}")
+    if args.Password:
+        arguments.append(f"/P{args.Password}")
+
+    # --- Optional params ---
+    execute = args.Execute
+    if execute:
+        ext = os.path.splitext(execute)[1].lower()
+        if ext == ".erf":
+            print("[WARN] /Execute does not support ERF files (external reports).")
+            print(f"       Open the report via File -> Open: {execute}")
+            print("       Launching database without /Execute.")
+            execute = ""
+
+    if execute:
+        arguments.extend(["/Execute", execute])
+    if args.CParam:
+        arguments.extend(["/C", args.CParam])
+    if args.URL:
+        arguments.extend(["/URL", args.URL])
+
+    arguments.append("/DisableStartupDialogs")
+    arguments.extend(extra_args)
+
+    # --- Execute (background) ---
+    # Redact the password/user before printing the command line — never leak secrets.
+    print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+    proc = subprocess.Popen([v8path] + arguments)
+
+    # --- Bounded early-exit check ---
+    # The launch is a background GUI process, so we don't wait for completion. But a process
+    # that dies within the first ~1.5s never really started (bad base, no display, license) —
+    # report that honestly instead of a blind "launched".
+    deadline = time.monotonic() + 1.5
+    while time.monotonic() < deadline and proc.poll() is None:
+        time.sleep(0.2)
+    rc = proc.poll()
+    if rc is not None:
+        print(f"Error: 1C:Enterprise exited immediately (code: {rc})", file=sys.stderr)
+        sys.exit(rc if rc and rc > 0 else 1)
+    print(f"PID: {proc.pid}")
+    print("1C:Enterprise launched")
+
+
+if __name__ == "__main__":
+    main()
@@ -35,7 +35,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" <параметры>
+python ".agents/skills/db-update/scripts/db-update.py" <параметры>
 ```

 ### Параметры скрипта
@@ -53,6 +53,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" <п
 | `-Dynamic <+/->` | нет | `+` — динамическое обновление, `-` — отключить |
 | `-Server` | нет | Обновление на стороне сервера |
 | `-WarningsAsErrors` | нет | Предупреждения считать ошибками |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — нужен либо `-InfoBasePath`, либо пара `-InfoBaseServer` + `-InfoBaseRef`

@@ -76,11 +78,11 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" <п

 ```powershell
 # Обычное обновление (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin"
+python ".agents/skills/db-update/scripts/db-update.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin"

 # Динамическое обновление (серверная база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -Dynamic "+"
+python ".agents/skills/db-update/scripts/db-update.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -Dynamic "+"

 # Обновление расширения
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/db-update.ps1" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -Extension "МоёРасширение"
+python ".agents/skills/db-update/scripts/db-update.py" -InfoBasePath "C:\Bases\MyDB" -UserName "Admin" -Extension "МоёРасширение"
 ```
@@ -0,0 +1,515 @@
+# db-update v1.13 — Update 1C database configuration
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Обновление конфигурации базы данных 1С
+
+.DESCRIPTION
+    Применяет изменения основной конфигурации к конфигурации базы данных.
+    Поддерживает динамическое обновление, обновление расширений.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER Extension
+    Имя расширения для обновления
+
+.PARAMETER AllExtensions
+    Обновить все расширения
+
+.PARAMETER Dynamic
+    Динамическое обновление: "+" включить, "-" отключить
+
+.PARAMETER Server
+    Обновление на стороне сервера
+
+.PARAMETER WarningsAsErrors
+    Предупреждения считать ошибками
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\db-update.ps1 -InfoBasePath "C:\Bases\MyDB"
+
+.EXAMPLE
+    .\db-update.ps1 -InfoBasePath "C:\Bases\MyDB" -Dynamic "+" -Extension "МоёРасширение"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Extension,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$AllExtensions,
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("+", "-")]
+    [string]$Dynamic,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$Server,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$WarningsAsErrors,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+function Get-ExitAnnotation {
+    # Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    # A batch DESIGNER that crashes (e.g. missing license) may leave the infobase locked or
+    # half-updated — surface that instead of a plain code. (Windows exception codes only;
+    # POSIX signals are handled in the .py port.)
+    param([int]$Code)
+    $win = @{
+        -1073741819 = "0xC0000005 (access violation)"
+        -1073741515 = "0xC0000135 (missing DLL)"
+        -1073740791 = "0xC0000409 (stack overrun)"
+    }
+    if ($win.ContainsKey($Code)) {
+        return " — abnormal termination, exception $($win[$Code]); the infobase may be left in an inconsistent state; verify it before retrying"
+    }
+    return ""
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+# --- Validate connection ---
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+} elseif (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef" -ForegroundColor Red
+    exit 1
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "db_update_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch (file infobase only) ---
+        if ($AllExtensions) {
+            Write-Host "Error: ibcmd config apply does not support -AllExtensions (use -Extension)" -ForegroundColor Red
+            exit 1
+        }
+        $arguments = @("infobase", "config", "apply", "--db-path=$InfoBasePath", "--force")
+        if ($Dynamic -eq "+") { $arguments += "--dynamic=auto" }
+        elseif ($Dynamic -eq "-") { $arguments += "--dynamic=disable" }
+        if ($Extension) { $arguments += "--extension=$Extension" }
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        if ($exitCode -eq 0) {
+            Write-Host "Database configuration updated successfully" -ForegroundColor Green
+        } else {
+            Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/UpdateDBCfg"
+
+    # --- Options ---
+    if ($Dynamic) {
+        $arguments += "-Dynamic$Dynamic"
+    }
+    if ($Server) {
+        $arguments += "-Server"
+    }
+    if ($WarningsAsErrors) {
+        $arguments += "-WarningsAsErrors"
+    }
+
+    # --- Extensions ---
+    if ($Extension) {
+        $arguments += "-Extension", "`"$Extension`""
+    } elseif ($AllExtensions) {
+        $arguments += "-AllExtensions"
+    }
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "update_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    if ($exitCode -eq 0) {
+        Write-Host "Database configuration updated successfully" -ForegroundColor Green
+    } else {
+        Write-Host "Error updating database configuration (code: $exitCode)$(Get-ExitAnnotation $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,528 @@
+#!/usr/bin/env python3
+# db-update v1.13 — Update 1C database configuration
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def describe_exit(code):
+    """Annotate an abnormal process exit code so a crash isn't reported as a bare number.
+    Batch 1C in a broken/headless environment (no GUI session, no license) can crash mid-run
+    instead of returning a clean error, possibly leaving the infobase locked or half-mutated."""
+    if code is None:
+        return ""
+    win = {
+        3221225477: "0xC0000005 (access violation)", -1073741819: "0xC0000005 (access violation)",
+        3221225781: "0xC0000135 (missing DLL)", -1073741515: "0xC0000135 (missing DLL)",
+        3221226505: "0xC0000409 (stack overrun)", -1073740791: "0xC0000409 (stack overrun)",
+    }
+    if code in win:
+        return f" — abnormal termination, exception {win[code]}; the infobase may be left in an inconsistent state; verify it before retrying"
+    if -64 <= code < 0:
+        try:
+            import signal
+            name = signal.Signals(-code).name
+        except (ValueError, AttributeError):
+            name = f"signal {-code}"
+        return (f" — process terminated by {name} (abnormal termination, not a normal exit); "
+                "the infobase may be left in an inconsistent state; verify it before retrying")
+    return ""
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Update 1C database configuration",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="")
+    parser.add_argument("-InfoBasePath", default="")
+    parser.add_argument("-InfoBaseServer", default="")
+    parser.add_argument("-InfoBaseRef", default="")
+    parser.add_argument("-UserName", default="")
+    parser.add_argument("-Password", default="")
+    parser.add_argument("-Extension", default="")
+    parser.add_argument("-AllExtensions", action="store_true")
+    parser.add_argument("-Dynamic", default="", choices=["", "+", "-"])
+    parser.add_argument("-Server", action="store_true")
+    parser.add_argument("-WarningsAsErrors", action="store_true")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+
+    v8path = resolve_v8path(args.V8Path)
+
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate connection ---
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+    elif not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: specify -InfoBasePath or -InfoBaseServer + -InfoBaseRef", file=sys.stderr)
+        sys.exit(1)
+
+    # --- ibcmd branch (file infobase only) ---
+    if engine == "ibcmd":
+        if args.AllExtensions:
+            print("Error: ibcmd config apply does not support -AllExtensions (use -Extension)", file=sys.stderr)
+            sys.exit(1)
+        arguments = ["infobase", "config", "apply", f"--db-path={args.InfoBasePath}", "--force"]
+        if args.Dynamic == "+":
+            arguments.append("--dynamic=auto")
+        elif args.Dynamic == "-":
+            arguments.append("--dynamic=disable")
+        if args.Extension:
+            arguments.append(f"--extension={args.Extension}")
+        ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+        atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+        if args.UserName:
+            arguments.append(f"--user={args.UserName}")
+        if args.Password:
+            arguments.append(f"--password={args.Password}")
+        arguments.append(f"--data={ib_data}")
+        arguments.extend(extra_args)
+        print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_ibcmd([v8path] + arguments, bool(args.UserName))
+        if result.returncode == 0:
+            print("Database configuration updated successfully")
+        else:
+            print(f"Error updating database configuration (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
+        sys.exit(result.returncode)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"db_update_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments.extend(["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"'])
+        else:
+            arguments.extend(["/F", f'"{args.InfoBasePath}"'])
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments.append("/UpdateDBCfg")
+
+        # --- Options ---
+        if args.Dynamic:
+            arguments.append(f"-Dynamic{args.Dynamic}")
+        if args.Server:
+            arguments.append("-Server")
+        if args.WarningsAsErrors:
+            arguments.append("-WarningsAsErrors")
+
+        # --- Extensions ---
+        if args.Extension:
+            arguments.extend(["-Extension", f'"{args.Extension}"'])
+        elif args.AllExtensions:
+            arguments.append("-AllExtensions")
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "update_log.txt")
+        arguments.extend(["/Out", f'"{out_file}"'])
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        if exit_code == 0:
+            print("Database configuration updated successfully")
+        else:
+            print(f"Error updating database configuration (code: {exit_code}){describe_exit(exit_code)}", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.isdir(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -40,7 +40,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-build.ps1" <параметры>
+python ".agents/skills/epf-build/scripts/epf-build.py" <параметры>
 ```

 ### Параметры скрипта
@@ -55,6 +55,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-build.ps1" <п
 | `-Password <пароль>` | нет | Пароль |
 | `-SourceFile <путь>` | да | Путь к корневому XML-файлу исходников |
 | `-OutputFile <путь>` | да | Путь к выходному EPF/ERF-файлу |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — опционально. Если не указано — автоматически создаётся временная база со заглушками метаданных

@@ -62,8 +64,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-build.ps1" <п

 ```powershell
 # Сборка обработки (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-build.ps1" -InfoBasePath "C:\Bases\MyDB" -SourceFile "src/МояОбработка.xml" -OutputFile "build/МояОбработка.epf"
+python ".agents/skills/epf-build/scripts/epf-build.py" -InfoBasePath "C:\Bases\MyDB" -SourceFile "src/МояОбработка.xml" -OutputFile "build/МояОбработка.epf"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-build.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -SourceFile "src/МояОбработка.xml" -OutputFile "build/МояОбработка.epf"
+python ".agents/skills/epf-build/scripts/epf-build.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -SourceFile "src/МояОбработка.xml" -OutputFile "build/МояОбработка.epf"
 ```
@@ -0,0 +1,510 @@
+# epf-build v1.12 — Build external data processor or report (EPF/ERF) from XML sources
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Сборка внешней обработки/отчёта 1С из XML-исходников
+
+.DESCRIPTION
+    Собирает EPF/ERF-файл из XML-исходников с помощью платформы 1С.
+    Общий скрипт для epf-build и erf-build.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER SourceFile
+    Путь к корневому XML-файлу исходников
+
+.PARAMETER OutputFile
+    Путь к выходному EPF/ERF-файлу
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\epf-build.ps1 -InfoBasePath "C:\Bases\MyDB" -SourceFile "src\МояОбработка.xml" -OutputFile "build\МояОбработка.epf"
+
+.EXAMPLE
+    .\epf-build.ps1 -InfoBasePath "C:\Bases\MyDB" -SourceFile "src\МойОтчёт.xml" -OutputFile "build\МойОтчёт.erf"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$SourceFile,
+
+    [Parameter(Mandatory=$true)]
+    [string]$OutputFile,
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$SourceFile = ConvertTo-CleanPath $SourceFile '-SourceFile'
+$OutputFile = ConvertTo-CleanPath $OutputFile '-OutputFile'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-OutputNonEmpty {
+    # Postcondition: the platform must have produced a non-empty output file.
+    # Exit code 0 without it (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Leaf) -and ((Get-Item $Path -ErrorAction SilentlyContinue).Length -gt 0)
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+if ($engine -eq "ibcmd" -and $InfoBaseServer -and $InfoBaseRef) {
+    Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath or omit for stub)" -ForegroundColor Red
+    exit 1
+}
+
+# --- Auto-create stub database if no connection specified ---
+$autoCreatedBase = $null
+if (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    $sourceDir = Split-Path $SourceFile -Parent
+    $autoBasePath = Join-Path $env:TEMP "epf_stub_db_$(Get-Random)"
+    $stubScript = Join-Path $PSScriptRoot "stub-db-create.ps1"
+    Write-Host "No database specified. Creating temporary stub database..."
+    # The stub runs its own platform processes (CREATEINFOBASE, LoadConfigFromFiles,
+    # UpdateDBCfg) — they need the same extra arguments as the final build. Only the
+    # explicit ones are forwarded: the stub reads .v8-project.json itself.
+    # Invoked via -Command, not -File: -File takes the tail literally, so an array
+    # parameter would arrive as a single comma-glued token.
+    $q = { param($s) "'" + ($s -replace "'", "''") + "'" }
+    $stubCmd = "& $(& $q $stubScript) -SourceDir $(& $q $sourceDir) -V8Path $(& $q $V8Path) -TempBasePath $(& $q $autoBasePath)"
+    if ($AdditionalV8Arguments.Count -gt 0) {
+        $stubCmd += " -AdditionalV8Arguments " + (($AdditionalV8Arguments | ForEach-Object { & $q $_ }) -join ',')
+    }
+    if ($AdditionalIbcmdArguments.Count -gt 0) {
+        $stubCmd += " -AdditionalIbcmdArguments " + (($AdditionalIbcmdArguments | ForEach-Object { & $q $_ }) -join ',')
+    }
+    $stubProc = Start-Process -FilePath "powershell.exe" -ArgumentList "-NoProfile -Command `"$stubCmd`"" -NoNewWindow -Wait -PassThru
+    if ($stubProc.ExitCode -ne 0) {
+        Write-Host "Error: failed to create stub database" -ForegroundColor Red
+        exit 1
+    }
+    $InfoBasePath = $autoBasePath
+    $autoCreatedBase = $autoBasePath
+}
+
+# --- Validate source file ---
+if (-not (Test-Path $SourceFile)) {
+    Write-Host "Error: source file not found: $SourceFile" -ForegroundColor Red
+    exit 1
+}
+
+# --- Ensure output directory exists ---
+$outDir = Split-Path $OutputFile -Parent
+if ($outDir -and -not (Test-Path $outDir)) {
+    New-Item -ItemType Directory -Path $outDir -Force | Out-Null
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "epf_build_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch: build EPF/ERF via config import --out ---
+        $srcDir = Split-Path $SourceFile -Parent
+        $arguments = @("infobase", "config", "import", "$srcDir", "--out=$OutputFile", "--db-path=$InfoBasePath")
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+        if ($outMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "External data processor/report built successfully: $OutputFile" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — build produced no output" -ForegroundColor Red
+        } else {
+            Write-Host "Error building external data processor/report (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/LoadExternalDataProcessorOrReportFromFiles", "`"$SourceFile`"", "`"$OutputFile`""
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "build_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition: exit 0 without a non-empty output file is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-OutputNonEmpty $OutputFile)
+    if ($outMissing) { $exitCode = 1 }
+    if ($exitCode -eq 0) {
+        Write-Host "Build completed successfully: $OutputFile" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no non-empty file at $OutputFile — build produced no output" -ForegroundColor Red
+    } else {
+        Write-Host "Error building (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+    if ($autoCreatedBase -and (Test-Path $autoCreatedBase)) {
+        Remove-Item -Path $autoCreatedBase -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,528 @@
+#!/usr/bin/env python3
+# epf-build v1.12 — Build external data processor or report (EPF/ERF) from XML sources
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def output_nonempty(path):
+    """Postcondition: the platform must have produced a non-empty output file.
+    Exit code 0 without it (broken/headless env) is a false success — reject it."""
+    return os.path.isfile(path) and os.path.getsize(path) > 0
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Build external data processor or report (EPF/ERF) from XML sources",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="", help="Path to 1cv8.exe or its bin directory")
+    parser.add_argument("-InfoBasePath", default="", help="Path to file infobase")
+    parser.add_argument("-InfoBaseServer", default="", help="1C server (for server infobase)")
+    parser.add_argument("-InfoBaseRef", default="", help="Infobase name on server")
+    parser.add_argument("-UserName", default="", help="1C user name")
+    parser.add_argument("-Password", default="", help="1C user password")
+    parser.add_argument("-SourceFile", required=True, help="Path to root XML source file")
+    parser.add_argument("-OutputFile", required=True, help="Path to output EPF/ERF file")
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.SourceFile = clean_path(args.SourceFile, "-SourceFile")
+    args.OutputFile = clean_path(args.OutputFile, "-OutputFile")
+
+    # --- Resolve V8Path ---
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+    if engine == "ibcmd" and args.InfoBaseServer and args.InfoBaseRef:
+        print("Error: ibcmd supports file infobases only (use -InfoBasePath or omit for stub)", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Auto-create stub database if no connection specified ---
+    auto_created_base = None
+    if not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        source_dir = os.path.dirname(os.path.abspath(args.SourceFile))
+        auto_base_path = os.path.join(tempfile.gettempdir(), f"epf_stub_db_{random.randint(0, 999999)}")
+        stub_script = os.path.join(os.path.dirname(os.path.abspath(__file__)), "stub-db-create.py")
+        print("No database specified. Creating temporary stub database...")
+        stub_cmd = [sys.executable, stub_script, "-SourceDir", source_dir, "-V8Path", v8path,
+                    "-TempBasePath", auto_base_path]
+        # The stub runs its own platform processes (CREATEINFOBASE, LoadConfigFromFiles,
+        # UpdateDBCfg) — they need the same extra arguments as the final build. Only the
+        # explicit ones are forwarded: the stub reads .v8-project.json itself.
+        if v8_extra:
+            stub_cmd += ["-AdditionalV8Arguments"] + list(v8_extra)
+        if ibcmd_extra:
+            stub_cmd += ["-AdditionalIbcmdArguments"] + list(ibcmd_extra)
+        result = subprocess.run(stub_cmd, capture_output=False)
+        if result.returncode != 0:
+            print("Error: failed to create stub database", file=sys.stderr)
+            sys.exit(1)
+        args.InfoBasePath = auto_base_path
+        auto_created_base = auto_base_path
+
+    # --- Validate source file ---
+    if not os.path.isfile(args.SourceFile):
+        print(f"Error: source file not found: {args.SourceFile}", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Ensure output directory exists ---
+    out_dir = os.path.dirname(args.OutputFile)
+    if out_dir and not os.path.exists(out_dir):
+        os.makedirs(out_dir, exist_ok=True)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"epf_build_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        if engine == "ibcmd":
+            # --- ibcmd branch: build EPF/ERF via config import --out ---
+            src_dir = os.path.dirname(os.path.abspath(args.SourceFile))
+            arguments = ["infobase", "config", "import", src_dir, f"--out={args.OutputFile}", f"--db-path={args.InfoBasePath}"]
+            ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+            atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+            if args.UserName:
+                arguments.append(f"--user={args.UserName}")
+            if args.Password:
+                arguments.append(f"--password={args.Password}")
+            arguments.append(f"--data={ib_data}")
+            arguments.extend(extra_args)
+            print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+            result = run_ibcmd([v8path] + arguments, warn_no_user=False)
+            exit_code = result.returncode
+            out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+            if out_missing:
+                exit_code = 1
+            if exit_code == 0:
+                print(f"External data processor/report built successfully: {args.OutputFile}")
+            elif out_missing:
+                print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — build produced no output", file=sys.stderr)
+            else:
+                print(f"Error building external data processor/report (code: {exit_code})", file=sys.stderr)
+            sys.exit(exit_code)
+
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments += ["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"']
+        else:
+            arguments += ["/F", f'"{args.InfoBasePath}"']
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments += ["/LoadExternalDataProcessorOrReportFromFiles", f'"{args.SourceFile}"', f'"{args.OutputFile}"']
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "build_log.txt")
+        arguments += ["/Out", f'"{out_file}"']
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition: exit 0 without a non-empty output file is a false success.
+        out_missing = exit_code == 0 and not output_nonempty(args.OutputFile)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Build completed successfully: {args.OutputFile}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no non-empty file at {args.OutputFile} — build produced no output", file=sys.stderr)
+        else:
+            print(f"Error building (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.exists(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+        if auto_created_base and os.path.exists(auto_created_base):
+            shutil.rmtree(auto_created_base, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -1,4 +1,4 @@
-# stub-db-create v1.3 — Create temp 1C infobase with metadata stubs for EPF/ERF build
+# stub-db-create v1.7 — Create temp 1C infobase with metadata stubs for EPF/ERF build
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -7,12 +7,162 @@ param(
 	[Parameter(Mandatory)]
 	[string]$V8Path,

-	[string]$TempBasePath
+	[string]$TempBasePath,
+
+	[string[]]$AdditionalV8Arguments = @(),
+
+	[string[]]$AdditionalIbcmdArguments = @()
 )

 $ErrorActionPreference = "Stop"
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8

+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$SourceDir = ConvertTo-CleanPath $SourceDir '-SourceDir'
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$TempBasePath = ConvertTo-CleanPath $TempBasePath '-TempBasePath'
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+
 # --- 1. Scan XML files for reference types ---

 $typeMap = @{}  # MetadataType -> @(Name1, Name2, ...)
@@ -1253,34 +1403,89 @@ $propsXml		</Properties>$childObjLine
 }

 # --- 5a. Stub via ibcmd (one call: create [--import --apply]) ---
-function Invoke-IbcmdProcess {
-    # Run ibcmd non-interactively: a closed stdin pipe (EOF) makes ibcmd's auth prompt
-    # fast-fail instead of hanging. Returns @{ Output; ExitCode }. cp866 decodes ibcmd's
-    # native OEM output. The 1cv8/DESIGNER branch keeps using Start-Process.
-    param([string]$Exe, [string[]]$IbArgs)
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
    $psi = New-Object System.Diagnostics.ProcessStartInfo
    $psi.FileName = $Exe
-    $psi.Arguments = ($IbArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
    $psi.UseShellExecute = $false
    $psi.CreateNoWindow = $true
    $psi.RedirectStandardInput = $true
    $psi.RedirectStandardOutput = $true
    $psi.RedirectStandardError = $true
-    try {
-        $psi.StandardOutputEncoding = [System.Text.Encoding]::GetEncoding(866)
-        $psi.StandardErrorEncoding = [System.Text.Encoding]::GetEncoding(866)
-    } catch {}
    $p = [System.Diagnostics.Process]::Start($psi)
    $p.StandardInput.Close()
-    $out = $p.StandardOutput.ReadToEnd()
-    $err = $p.StandardError.ReadToEnd()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
    if ($err) { $out += $err }
    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
 }

+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+

 $stubEngine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-TempBasePath'; '--db-path' = '-TempBasePath' }
+$extraArgs = @(Resolve-ExtraArgs $stubEngine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+
+function Format-ArgToken {
+	# Start-Process takes these argument lists as one string, so quote each token that needs it.
+	param([string]$Token)
+	if ($Token -match '[\s"]') { return ' "' + ($Token -replace '"', '\"') + '"' }
+	return " $Token"
+}
+$extraArgString = -join ($extraArgs | ForEach-Object { Format-ArgToken $_ })
 if ($stubEngine -eq "ibcmd") {
 	Write-Host "Creating infobase (ibcmd): $TempBasePath"
 	$ibData = Join-Path $env:TEMP "stub_data_$(Get-Random)"
@@ -1288,12 +1493,13 @@ if ($stubEngine -eq "ibcmd") {
 	$ibArgs = @("infobase", "create", "--db-path=$TempBasePath", "--create-database")
 	if ($hasRefTypes) { $ibArgs += "--import=$(Join-Path $TempBasePath 'cfg')", "--apply", "--force" }
 	$ibArgs += "--data=$ibData"
-	$__ib = Invoke-IbcmdProcess $V8Path $ibArgs
+	$ibArgs += $extraArgs
+	$__ib = Invoke-PlatformProcess $V8Path $ibArgs
 	$ibOut = $__ib.Output
 	$ibRc = $__ib.ExitCode
 	Remove-Item -Path $ibData -Recurse -Force -ErrorAction SilentlyContinue
 	if ($ibRc -ne 0) {
-		if ($ibOut) { Write-Host ($ibOut | Out-String) }
+		Write-PlatformOutput $ibOut
 		Write-Error "Failed to create stub infobase (code: $ibRc)"
 		exit 1
 	}
@@ -1305,9 +1511,10 @@ if ($stubEngine -eq "ibcmd") {

 # --- 5. Create infobase ---
 Write-Host "Creating infobase: $TempBasePath"
-$createArgs = "CREATEINFOBASE File=`"$TempBasePath`" /DisableStartupDialogs"
-$proc = Start-Process -FilePath $V8Path -ArgumentList $createArgs -NoNewWindow -Wait -PassThru
+$createArgs = "CREATEINFOBASE File=`"$TempBasePath`" /DisableStartupDialogs" + $extraArgString
+$proc = Invoke-PlatformProcess $V8Path @($createArgs) -PreQuoted
 if ($proc.ExitCode -ne 0) {
+	Write-PlatformOutput $proc.Output
 	Write-Error "Failed to create infobase (code: $($proc.ExitCode))"
 	exit 1
 }
@@ -1318,10 +1525,11 @@ if ($hasRefTypes) {
 	# LoadConfigFromFiles
 	Write-Host "Loading configuration from files..."
 	$loadLog = Join-Path $env:TEMP "stub_load_log.txt"
-	$loadArgs = "DESIGNER /F`"$TempBasePath`" /LoadConfigFromFiles `"$cfgDir`" /Out `"$loadLog`" /DisableStartupDialogs"
-	$proc = Start-Process -FilePath $V8Path -ArgumentList $loadArgs -NoNewWindow -Wait -PassThru
+	$loadArgs = "DESIGNER /F`"$TempBasePath`" /LoadConfigFromFiles `"$cfgDir`" /Out `"$loadLog`" /DisableStartupDialogs" + $extraArgString
+	$proc = Invoke-PlatformProcess $V8Path @($loadArgs) -PreQuoted
 	if ($proc.ExitCode -ne 0) {
 		if (Test-Path $loadLog) { Get-Content $loadLog -Raw -ErrorAction SilentlyContinue | Write-Host }
+		Write-PlatformOutput $proc.Output
 		Write-Error "Failed to load config (code: $($proc.ExitCode))"
 		exit 1
 	}
@@ -1329,10 +1537,11 @@ if ($hasRefTypes) {
 	# UpdateDBCfg
 	Write-Host "Updating database configuration..."
 	$updateLog = Join-Path $env:TEMP "stub_update_log.txt"
-	$updateArgs = "DESIGNER /F`"$TempBasePath`" /UpdateDBCfg /Out `"$updateLog`" /DisableStartupDialogs"
-	$proc = Start-Process -FilePath $V8Path -ArgumentList $updateArgs -NoNewWindow -Wait -PassThru
+	$updateArgs = "DESIGNER /F`"$TempBasePath`" /UpdateDBCfg /Out `"$updateLog`" /DisableStartupDialogs" + $extraArgString
+	$proc = Invoke-PlatformProcess $V8Path @($updateArgs) -PreQuoted
 	if ($proc.ExitCode -ne 0) {
 		if (Test-Path $updateLog) { Get-Content $updateLog -Raw -ErrorAction SilentlyContinue | Write-Host }
+		Write-PlatformOutput $proc.Output
 		Write-Error "Failed to update DB config (code: $($proc.ExitCode))"
 		exit 1
 	}
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# stub-db-create v1.3 — Create temp 1C infobase with metadata stubs for EPF/ERF build
+# stub-db-create v1.7 — Create temp 1C infobase with metadata stubs for EPF/ERF build
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -20,6 +20,75 @@ IBCMD_NOUSER_HINT = (
 )


+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
 def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    """Run an ibcmd command non-interactively.

@@ -30,7 +99,167 @@ def run_ibcmd(cmd, has_username=False, warn_no_user=True):
    if warn_no_user and os.name == "nt" and not has_username:
        sys.stderr.write(IBCMD_NOUSER_HINT)
        sys.stderr.flush()
-    return subprocess.run(cmd, input="", capture_output=True, encoding="utf-8", errors="replace")
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra


 def new_uuid():
@@ -802,7 +1031,17 @@ def main():
    parser.add_argument('-SourceDir', required=True)
    parser.add_argument('-V8Path', required=True)
    parser.add_argument('-TempBasePath', default='')
-    args = parser.parse_args()
+    parser.add_argument('-AdditionalV8Arguments', nargs='*', default=[],
+                        help='Extra 1cv8 arguments, e.g. /UseHwLicenses+')
+    parser.add_argument('-AdditionalIbcmdArguments', nargs='*', default=[],
+                        help='Extra ibcmd arguments in --key=value form')
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.SourceDir = clean_path(args.SourceDir, "-SourceDir")
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.TempBasePath = clean_path(args.TempBasePath, "-TempBasePath")

    type_map = scan_ref_types(args.SourceDir)
    register_columns = scan_register_columns(args.SourceDir)
@@ -1057,6 +1296,10 @@ def main():

    # Stub via ibcmd (one call: create [--import --apply])
    stub_engine = "ibcmd" if os.path.basename(args.V8Path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {"/F": "-TempBasePath", "--db-path": "-TempBasePath"}
+    extra_args = resolve_extra_args(stub_engine, v8_extra, ibcmd_extra, arg_hints)
    if stub_engine == "ibcmd":
        import shutil
        print(f'Creating infobase (ibcmd): {temp_base}')
@@ -1065,6 +1308,7 @@ def main():
        if has_ref_types:
            ib_args += [f'--import={os.path.join(temp_base, "cfg")}', '--apply', '--force']
        ib_args.append(f'--data={ib_data}')
+        ib_args.extend(extra_args)
        result = run_ibcmd(ib_args, warn_no_user=False)
        shutil.rmtree(ib_data, ignore_errors=True)
        if result.returncode != 0:
@@ -1083,11 +1327,10 @@ def main():

    # Create infobase
    print(f'Creating infobase: {temp_base}')
-    result = subprocess.run(
-        [args.V8Path, 'CREATEINFOBASE', f'File={temp_base}', '/DisableStartupDialogs'],
-        capture_output=True, text=True,
-    )
+    result = run_v8(args.V8Path, ['CREATEINFOBASE', f'File="{temp_base}"', '/DisableStartupDialogs']
+                    + [quote_if_needed(a) for a in extra_args])
    if result.returncode != 0:
+        print_platform_output(result)
        print(f'Failed to create infobase (code: {result.returncode})', file=sys.stderr)
        sys.exit(1)

@@ -1095,21 +1338,18 @@ def main():
        cfg_dir = os.path.join(temp_base, 'cfg')
        # LoadConfigFromFiles
        print('Loading configuration from files...')
-        result = subprocess.run(
-            [args.V8Path, 'DESIGNER', f'/F{temp_base}', '/LoadConfigFromFiles', cfg_dir, '/DisableStartupDialogs'],
-            capture_output=True, text=True,
-        )
+        result = run_v8(args.V8Path, ['DESIGNER', f'/F"{temp_base}"', '/LoadConfigFromFiles', f'"{cfg_dir}"',
+                                      '/DisableStartupDialogs'] + [quote_if_needed(a) for a in extra_args])
        if result.returncode != 0:
+            print_platform_output(result)
            print(f'Failed to load config (code: {result.returncode})', file=sys.stderr)
            sys.exit(1)

        # UpdateDBCfg
        print('Updating database configuration...')
        update_log = os.path.join(tempfile.gettempdir(), 'stub_update_log.txt')
-        result = subprocess.run(
-            [args.V8Path, 'DESIGNER', f'/F{temp_base}', '/UpdateDBCfg', '/Out', update_log, '/DisableStartupDialogs'],
-            capture_output=True, text=True,
-        )
+        result = run_v8(args.V8Path, ['DESIGNER', f'/F"{temp_base}"', '/UpdateDBCfg', '/Out', f'"{update_log}"',
+                                      '/DisableStartupDialogs'] + [quote_if_needed(a) for a in extra_args])
        if result.returncode != 0:
            if os.path.isfile(update_log):
                try:
@@ -1117,6 +1357,7 @@ def main():
                        print(f.read())
                except Exception:
                    pass
+            print_platform_output(result)
            print(f'Failed to update DB config (code: {result.returncode})', file=sys.stderr)
            sys.exit(1)

@@ -39,7 +39,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-dump.ps1" <параметры>
+python ".agents/skills/epf-dump/scripts/epf-dump.py" <параметры>
 ```

 ### Параметры скрипта
@@ -55,6 +55,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-dump.ps1" <па
 | `-InputFile <путь>` | да | Путь к EPF/ERF-файлу |
 | `-OutputDir <путь>` | да | Каталог для выгрузки исходников |
 | `-Format <формат>` | нет | `Hierarchical` (по умолч.) / `Plain` |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — обязательно хотя бы одно подключение. Без базы скрипт завершится с ошибкой (dump в пустой базе безвозвратно теряет ссылочные типы)

@@ -62,8 +64,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-dump.ps1" <па

 ```powershell
 # Разборка обработки (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-dump.ps1" -InfoBasePath "C:\Bases\MyDB" -InputFile "build/МояОбработка.epf" -OutputDir "src"
+python ".agents/skills/epf-dump/scripts/epf-dump.py" -InfoBasePath "C:\Bases\MyDB" -InputFile "build/МояОбработка.epf" -OutputDir "src"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-dump.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -InputFile "build/МояОбработка.epf" -OutputDir "src"
+python ".agents/skills/epf-dump/scripts/epf-dump.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -InputFile "build/МояОбработка.epf" -OutputDir "src"
 ```
@@ -0,0 +1,497 @@
+# epf-dump v1.11 — Dump external data processor or report (EPF/ERF) to XML sources
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+# NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
+<#
+.SYNOPSIS
+    Разборка внешней обработки/отчёта 1С в XML-исходники
+
+.DESCRIPTION
+    Разбирает EPF/ERF-файл во XML-исходники с помощью платформы 1С.
+    Общий скрипт для epf-dump и erf-dump.
+
+.PARAMETER V8Path
+    Путь к каталогу bin платформы или к 1cv8.exe
+
+.PARAMETER InfoBasePath
+    Путь к файловой информационной базе
+
+.PARAMETER InfoBaseServer
+    Сервер 1С (для серверной базы)
+
+.PARAMETER InfoBaseRef
+    Имя базы на сервере
+
+.PARAMETER UserName
+    Имя пользователя 1С
+
+.PARAMETER Password
+    Пароль пользователя
+
+.PARAMETER InputFile
+    Путь к EPF/ERF-файлу
+
+.PARAMETER OutputDir
+    Каталог для выгрузки исходников
+
+.PARAMETER Format
+    Формат выгрузки: Hierarchical или Plain (по умолчанию Hierarchical)
+
+.PARAMETER AdditionalV8Arguments
+    Дополнительные аргументы запуска 1cv8.exe (например /UseHwLicenses+)
+
+.PARAMETER AdditionalIbcmdArguments
+    Дополнительные аргументы запуска ibcmd (форма --ключ=значение)
+
+.EXAMPLE
+    .\epf-dump.ps1 -InfoBasePath "C:\Bases\MyDB" -InputFile "build\МояОбработка.epf" -OutputDir "src"
+
+.EXAMPLE
+    .\epf-dump.ps1 -InfoBasePath "C:\Bases\MyDB" -InputFile "build\МойОтчёт.erf" -OutputDir "src"
+#>
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$V8Path,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBasePath,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseServer,
+
+    [Parameter(Mandatory=$false)]
+    [string]$InfoBaseRef,
+
+    [Parameter(Mandatory=$false)]
+    [string]$UserName,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Password,
+
+    [Parameter(Mandatory=$true)]
+    [string]$InputFile,
+
+    [Parameter(Mandatory=$true)]
+    [string]$OutputDir,
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("Hierarchical", "Plain")]
+    [string]$Format = "Hierarchical",
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalV8Arguments = @(),
+
+    [Parameter(Mandatory=$false)]
+    [string[]]$AdditionalIbcmdArguments = @()
+)
+
+$OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+
+# --- Additional platform arguments ---
+$script:V8OwnedKeys = @(
+    'DESIGNER', 'ENTERPRISE', 'CREATEINFOBASE', 'CONFIG',
+    '/F', '/S', '/N', '/P', '/Out', '/DisableStartupDialogs',
+    '/UseTemplate', '/AddToList', '/Execute', '/C', '/URL', '/UC',
+    '/DumpIB', '/RestoreIB', '/DumpCfg', '/LoadCfg',
+    '/DumpConfigToFiles', '/LoadConfigFromFiles', '/UpdateDBCfg',
+    '/DumpExternalDataProcessorOrReportToFiles', '/LoadExternalDataProcessorOrReportFromFiles'
+)
+$script:IbcmdOwnedKeys = @(
+    '--db-path', '--data', '--out', '--file', '--load', '--restore',
+    '--import', '--export', '--apply', '--force', '--create-database',
+    '--user', '--password'
+)
+$script:V8SecretKeys = @('/P', '/UC', '/WSP', '/AWSP')
+$script:IbcmdSecretKeys = @('--password', '--token', '--db-pwd')
+
+function Test-ArgKeyMatch {
+    # A token matches a key when it equals the key, or starts with it and the next
+    # character is not a letter — catches glued /N"user" and --password=x, while
+    # keeping /ClearCache distinct from /C.
+    param([string]$Token, [string]$Key)
+    if ($Token.Length -lt $Key.Length) { return $false }
+    if (-not $Token.Substring(0, $Key.Length).Equals($Key, [System.StringComparison]::OrdinalIgnoreCase)) { return $false }
+    if ($Token.Length -eq $Key.Length) { return $true }
+    return -not [char]::IsLetter($Token[$Key.Length])
+}
+
+function Get-ProjectExtraArgs {
+    # v8args / ibcmdargs from .v8-project.json — same upward walk as v8path.
+    param([string]$Name)
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.$Name) { return @($j.$Name | ForEach-Object { [string]$_ }) }
+            } catch {}
+            return @()
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return @()
+}
+
+function Assert-ExtraArgs {
+    # The platform accepts only one batch operation, and a duplicate connection or
+    # output key fails with an opaque 1C error — reject what the skill owns itself.
+    param([string[]]$ExtraArgs, [string]$Engine, [hashtable]$Hints)
+    $paramName = if ($Engine -eq 'ibcmd') { '-AdditionalIbcmdArguments' } else { '-AdditionalV8Arguments' }
+    $owned = if ($Engine -eq 'ibcmd') { $script:IbcmdOwnedKeys } else { $script:V8OwnedKeys }
+    foreach ($tok in $ExtraArgs) {
+        if ($Engine -eq 'ibcmd' -and $tok -notmatch '^-') {
+            Write-Host "Error: '$tok' is a positional token — pass values as --key=value ($paramName cannot extend the ibcmd command)" -ForegroundColor Red
+            exit 1
+        }
+        foreach ($k in $owned) {
+            if (Test-ArgKeyMatch $tok $k) {
+                $hint = ''
+                if ($Hints -and $Hints.ContainsKey($k)) { $hint = " (use $($Hints[$k]))" }
+                Write-Host "Error: $k is controlled by the skill and cannot be passed via $paramName$hint" -ForegroundColor Red
+                exit 1
+            }
+        }
+    }
+}
+
+function Resolve-ExtraArgs {
+    # Pick the argument list for the selected engine and validate it. An explicitly passed
+    # parameter for the other engine is an error; the same keys coming from .v8-project.json
+    # simply do not apply — a project may describe both engines.
+    param([string]$Engine, [string[]]$V8Extra, [string[]]$IbcmdExtra, [hashtable]$Hints)
+    # powershell.exe -File — how skills are invoked — cannot bind an array parameter:
+    # space-separated values spill into positional ones, a comma-joined list arrives as a
+    # single token. So accept the repo's list convention (comma-separated) and split here;
+    # a native array call keeps working. A value containing a comma is not supported.
+    $V8Extra = @($V8Extra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    $IbcmdExtra = @($IbcmdExtra | ForEach-Object { $_ -split ',' } | Where-Object { $_ -ne '' })
+    if ($Engine -eq 'ibcmd' -and $V8Extra.Count -gt 0) {
+        Write-Host "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd (use -AdditionalIbcmdArguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -ne 'ibcmd' -and $IbcmdExtra.Count -gt 0) {
+        Write-Host "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 (use -AdditionalV8Arguments)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Engine -eq 'ibcmd') {
+        $extra = @(Get-ProjectExtraArgs 'ibcmdargs') + @($IbcmdExtra)
+    } else {
+        $extra = @(Get-ProjectExtraArgs 'v8args') + @($V8Extra)
+    }
+    if ($extra.Count -gt 0) { Assert-ExtraArgs $extra $Engine $Hints }
+    # Plain return, no comma trick: the caller re-collects with @(...), and ,@() there
+    # would nest the array — the tokens would then be glued into one argument.
+    return $extra
+}
+
+function Format-ArgsForDisplay {
+    # Redact values of secret-prone keys in glued, =-joined and separate forms.
+    # Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    # a leaked password does.
+    param([string[]]$ArgList, [string]$Engine)
+    $keys = if ($Engine -eq 'ibcmd') { $script:IbcmdSecretKeys } else { $script:V8SecretKeys }
+    $res = @()
+    $maskNext = $false
+    foreach ($tok in $ArgList) {
+        if ($maskNext) { $res += '***'; $maskNext = $false; continue }
+        $hit = $null
+        foreach ($k in $keys) {
+            if ($tok.Length -ge $k.Length -and $tok.Substring(0, $k.Length).Equals($k, [System.StringComparison]::OrdinalIgnoreCase)) { $hit = $k; break }
+        }
+        if (-not $hit) { $res += $tok; continue }
+        if ($tok.Length -eq $hit.Length) { $res += $tok; $maskNext = $true }
+        elseif ($tok[$hit.Length] -eq '=') { $res += ($hit + '=***') }
+        else { $res += ($hit + '***') }
+    }
+    return ,$res
+}
+
+function ConvertTo-CleanPath {
+    # Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    # surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    # inside afterwards cannot be part of a real path — reject it by name instead of letting
+    # 1C answer with its opaque "Неверные или отсутствующие параметры соединения".
+    param([string]$Value, [string]$ParamName)
+    if (-not $Value) { return $Value }
+    $v = $Value.Trim()
+    if ($v.Length -ge 2 -and $v[0] -eq $v[-1] -and ($v[0] -eq '"' -or $v[0] -eq "'")) {
+        $v = $v.Substring(1, $v.Length - 2).Trim()
+    }
+    if ($v.Length -gt 3 -and ($v[-1] -eq '\' -or $v[-1] -eq '/')) { $v = $v.Substring(0, $v.Length - 1) }
+    if ($v.Contains('"')) {
+        Write-Host "Error: $ParamName contains a quote character: $Value" -ForegroundColor Red
+        exit 1
+    }
+    return $v
+}
+
+$V8Path = ConvertTo-CleanPath $V8Path '-V8Path'
+$InfoBasePath = ConvertTo-CleanPath $InfoBasePath '-InfoBasePath'
+$InputFile = ConvertTo-CleanPath $InputFile '-InputFile'
+$OutputDir = ConvertTo-CleanPath $OutputDir '-OutputDir'
+
+function Assert-InfoBaseExists {
+    # These skills work on a ready infobase. Saying so up front beats the platform's
+    # "Неверные или отсутствующие параметры соединения" after a launch.
+    param([string]$Path)
+    if (-not $Path) { return }
+    if (-not (Test-Path (Join-Path $Path "1Cv8.1CD"))) {
+        Write-Host "Error: information base not found at $Path (no 1Cv8.1CD)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+Assert-InfoBaseExists $InfoBasePath
+
+# --- Resolve V8Path ---
+function Find-ProjectV8Path {
+    $dir = (Get-Location).Path
+    while ($dir) {
+        $pf = Join-Path $dir ".v8-project.json"
+        if (Test-Path $pf) {
+            try {
+                $j = Get-Content $pf -Raw -Encoding UTF8 | ConvertFrom-Json
+                if ($j.v8path) { return [string]$j.v8path }
+            } catch {}
+            return $null
+        }
+        $parent = Split-Path $dir -Parent
+        if (-not $parent -or $parent -eq $dir) { break }
+        $dir = $parent
+    }
+    return $null
+}
+
+if (-not $V8Path) {
+    $V8Path = Find-ProjectV8Path
+}
+if (-not $V8Path) {
+    $found = Get-ChildItem @("C:\Program Files\1cv8\*\bin\1cv8.exe", "C:\Program Files (x86)\1cv8\*\bin\1cv8.exe") -ErrorAction SilentlyContinue |
+        Sort-Object { try { [version]$_.Directory.Parent.Name } catch { [version]"0.0" } } -Descending |
+        Select-Object -First 1
+    if ($found) {
+        $V8Path = $found.FullName
+        Write-Host "Auto-selected platform $($found.Directory.Parent.Name): $V8Path" -ForegroundColor Yellow
+    } else {
+        Write-Host "Error: 1C executable not found. Specify -V8Path" -ForegroundColor Red
+        exit 1
+    }
+}
+if (Test-Path $V8Path -PathType Container) {
+    $V8Path = Join-Path $V8Path "1cv8.exe"
+}
+
+if (-not (Test-Path $V8Path)) {
+    Write-Host "Error: 1C executable not found at $V8Path" -ForegroundColor Red
+    exit 1
+}
+
+# --- Validate database connection ---
+if (-not $InfoBasePath -and (-not $InfoBaseServer -or -not $InfoBaseRef)) {
+    Write-Host "Error: database connection required. Specify -InfoBasePath or -InfoBaseServer/-InfoBaseRef" -ForegroundColor Red
+    Write-Host "Dump in an empty database loses reference types (CatalogRef, DocumentRef, etc.) irreversibly." -ForegroundColor Yellow
+    exit 1
+}
+
+# --- Detect engine (ibcmd vs 1cv8) by exe name ---
+function ConvertFrom-PlatformBytes {
+    # ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    # OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — guessing
+    # one of them outright mangles Cyrillic.
+    param([byte[]]$Bytes)
+    if (-not $Bytes -or $Bytes.Length -eq 0) { return '' }
+    try {
+        $strict = New-Object System.Text.UTF8Encoding($false, $true)
+        return $strict.GetString($Bytes)
+    } catch {
+        return [System.Text.Encoding]::GetEncoding(866).GetString($Bytes)
+    }
+}
+
+function Invoke-PlatformProcess {
+    # Run the platform non-interactively and capture its console output. A closed stdin pipe
+    # (EOF) makes an auth prompt fast-fail instead of hanging; capturing keeps the child's
+    # text out of our stream until we print it labelled (and out of the wrong encoding).
+    # Returns @{ Output; ExitCode }.
+    #
+    # Quoting differs by engine, so the caller says which it built:
+    #   ibcmd    — tokens are bare (--db-path=C:\a b), the whole token gets quoted here;
+    #   1cv8     — -PreQuoted: the caller already put quotes inside the token (File="C:\a b"),
+    #              which is where 1C's own parser expects them; quoting again breaks the value.
+    param([string]$Exe, [string[]]$ProcArgs, [switch]$PreQuoted)
+    $psi = New-Object System.Diagnostics.ProcessStartInfo
+    $psi.FileName = $Exe
+    $psi.Arguments = if ($PreQuoted) {
+        $ProcArgs -join ' '
+    } else {
+        ($ProcArgs | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' '
+    }
+    $psi.UseShellExecute = $false
+    $psi.CreateNoWindow = $true
+    $psi.RedirectStandardInput = $true
+    $psi.RedirectStandardOutput = $true
+    $psi.RedirectStandardError = $true
+    $p = [System.Diagnostics.Process]::Start($psi)
+    $p.StandardInput.Close()
+    # stderr is drained in parallel: reading the streams one after another deadlocks
+    # as soon as the other one fills its pipe buffer.
+    $errMs = New-Object System.IO.MemoryStream
+    $errTask = $p.StandardError.BaseStream.CopyToAsync($errMs)
+    $outMs = New-Object System.IO.MemoryStream
+    $p.StandardOutput.BaseStream.CopyTo($outMs)
+    $errTask.Wait()
+    $p.WaitForExit()
+    $out = ConvertFrom-PlatformBytes $outMs.ToArray()
+    $err = ConvertFrom-PlatformBytes $errMs.ToArray()
+    if ($err) { $out += $err }
+    return [pscustomobject]@{ Output = $out; ExitCode = $p.ExitCode }
+}
+
+function Write-PlatformOutput {
+    # Print what the platform wrote to the console as its own labelled block. Silence stays
+    # silent: in batch mode 1cv8 reports through /Out and prints nothing here.
+    param([string]$Text)
+    if (-not $Text) { return }
+    $t = $Text.TrimEnd()
+    if (-not $t) { return }
+    $limit = 65536
+    if ($t.Length -gt $limit) {
+        $t = "[... обрезано, показаны последние $limit символов ...]`r`n" + $t.Substring($t.Length - $limit)
+    }
+    Write-Host "--- Вывод платформы ---"
+    Write-Host $t
+    Write-Host "--- End ---"
+}
+
+
+function Test-DirNonEmpty {
+    # Postcondition: the platform must have written files into the output directory.
+    # Exit code 0 with an empty dir (broken/headless env) is a false success — reject it.
+    param([string]$Path)
+    return (Test-Path $Path -PathType Container) -and ([bool](Get-ChildItem -LiteralPath $Path -Force -ErrorAction SilentlyContinue | Select-Object -First 1))
+}
+
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
+}
+
+$engine = if ((Split-Path $V8Path -Leaf) -match '^ibcmd') { "ibcmd" } else { "1cv8" }
+
+# --- Resolve additional arguments for the selected engine ---
+$argHints = @{ '/F' = '-InfoBasePath'; '/S' = '-InfoBaseServer + -InfoBaseRef'; '/N' = '-UserName'; '/P' = '-Password'; '--db-path' = '-InfoBasePath'; '--user' = '-UserName'; '--password' = '-Password' }
+$extraArgs = @(Resolve-ExtraArgs $engine $AdditionalV8Arguments $AdditionalIbcmdArguments $argHints)
+if ($engine -eq "ibcmd") {
+    if (-not $InfoBasePath) {
+        Write-Host "Error: ibcmd supports file infobases only (use -InfoBasePath)" -ForegroundColor Red
+        exit 1
+    }
+    if ($Format -eq "Plain") {
+        Write-Host "Error: ibcmd config export supports hierarchical format only (use -Format Hierarchical or 1cv8)" -ForegroundColor Red
+        exit 1
+    }
+}
+
+# --- Validate input file ---
+if (-not (Test-Path $InputFile)) {
+    Write-Host "Error: input file not found: $InputFile" -ForegroundColor Red
+    exit 1
+}
+
+# --- Ensure output directory exists ---
+if (-not (Test-Path $OutputDir)) {
+    New-Item -ItemType Directory -Path $OutputDir -Force | Out-Null
+}
+
+# --- Temp dir ---
+$tempDir = Join-Path $env:TEMP "epf_dump_$(Get-Random)"
+New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+
+try {
+    if ($engine -eq "ibcmd") {
+        # --- ibcmd branch: dump EPF/ERF via config export --file ---
+        $arguments = @("infobase", "config", "export", "--file=$InputFile", "$OutputDir", "--db-path=$InfoBasePath")
+        if ($UserName) { $arguments += "--user=$UserName" }
+        if ($Password) { $arguments += "--password=$Password" }
+        $arguments += "--data=$tempDir"
+        $arguments += $extraArgs
+        Write-Host "Running: ibcmd $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+        $__ib = Invoke-PlatformProcess $V8Path $arguments
+        $output = $__ib.Output
+        $exitCode = $__ib.ExitCode
+        $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $OutputDir)
+        if ($outMissing) { $exitCode = 1 }
+        if ($exitCode -eq 0) {
+            Write-Host "External data processor/report dumped successfully to: $OutputDir" -ForegroundColor Green
+        } elseif ($outMissing) {
+            Write-Host "Error: exit code 0 but no files under $OutputDir — dump produced no output" -ForegroundColor Red
+        } else {
+            Write-Host "Error dumping external data processor/report (code: $exitCode)" -ForegroundColor Red
+        }
+        Write-PlatformOutput $output
+        exit $exitCode
+    }
+
+    # --- 1cv8 branch ---
+    # --- Build arguments ---
+    $arguments = @("DESIGNER")
+
+    if ($InfoBaseServer -and $InfoBaseRef) {
+        $arguments += "/S", "`"$InfoBaseServer/$InfoBaseRef`""
+    } else {
+        $arguments += "/F", "`"$InfoBasePath`""
+    }
+
+    if ($UserName) { $arguments += "/N`"$UserName`"" }
+    if ($Password) { $arguments += "/P`"$Password`"" }
+
+    $arguments += "/DumpExternalDataProcessorOrReportToFiles", "`"$OutputDir`"", "`"$InputFile`""
+    $arguments += "-Format", $Format
+
+    # --- Output ---
+    $outFile = Join-Path $tempDir "dump_log.txt"
+    $arguments += "/Out", "`"$outFile`""
+    $arguments += "/DisableStartupDialogs"
+    $arguments += $extraArgs
+
+    # --- Execute ---
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ((Format-ArgsForDisplay $arguments $engine) -join ' ') @($Password, $UserName))"
+    $__v8 = Invoke-PlatformProcess $V8Path $arguments -PreQuoted
+    $exitCode = $__v8.ExitCode
+
+    # --- Result ---
+    # Postcondition: exit 0 with an empty output directory is a false success.
+    $outMissing = ($exitCode -eq 0) -and -not (Test-DirNonEmpty $OutputDir)
+    if ($outMissing) { $exitCode = 1 }
+    if ($exitCode -eq 0) {
+        Write-Host "Dump completed successfully to: $OutputDir" -ForegroundColor Green
+    } elseif ($outMissing) {
+        Write-Host "Error: exit code 0 but no files under $OutputDir — dump produced no output" -ForegroundColor Red
+    } else {
+        Write-Host "Error dumping (code: $exitCode)" -ForegroundColor Red
+    }
+
+    if (Test-Path $outFile) {
+        $logContent = Get-Content $outFile -Raw -ErrorAction SilentlyContinue
+        if ($logContent) {
+            Write-Host "--- Log ---"
+            Write-Host $logContent
+            Write-Host "--- End ---"
+        }
+    }
+    Write-PlatformOutput $__v8.Output
+
+    exit $exitCode
+
+} finally {
+    if (Test-Path $tempDir) {
+        Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
@@ -0,0 +1,518 @@
+#!/usr/bin/env python3
+# epf-dump v1.11 — Dump external data processor or report (EPF/ERF) to XML sources
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+
+import argparse
+import atexit
+import glob
+import json
+import os
+import random
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def _find_project_v8path():
+    """Walk up from CWD to find .v8-project.json and read its v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get("v8path")
+                if v:
+                    return v
+            except Exception:
+                pass
+            return None
+        parent = os.path.dirname(d)
+        if parent == d:
+            return None
+        d = parent
+
+
+# --- Additional platform arguments ---
+V8_OWNED_KEYS = [
+    "DESIGNER", "ENTERPRISE", "CREATEINFOBASE", "CONFIG",
+    "/F", "/S", "/N", "/P", "/Out", "/DisableStartupDialogs",
+    "/UseTemplate", "/AddToList", "/Execute", "/C", "/URL", "/UC",
+    "/DumpIB", "/RestoreIB", "/DumpCfg", "/LoadCfg",
+    "/DumpConfigToFiles", "/LoadConfigFromFiles", "/UpdateDBCfg",
+    "/DumpExternalDataProcessorOrReportToFiles", "/LoadExternalDataProcessorOrReportFromFiles",
+]
+IBCMD_OWNED_KEYS = [
+    "--db-path", "--data", "--out", "--file", "--load", "--restore",
+    "--import", "--export", "--apply", "--force", "--create-database",
+    "--user", "--password",
+]
+V8_SECRET_KEYS = ["/P", "/UC", "/WSP", "/AWSP"]
+IBCMD_SECRET_KEYS = ["--password", "--token", "--db-pwd"]
+
+
+def arg_key_match(token, key):
+    """Token matches a key when it equals it, or starts with it and the next character
+    is not a letter — catches glued /N"user" and --password=x, while keeping
+    /ClearCache distinct from /C."""
+    if len(token) < len(key):
+        return False
+    if token[: len(key)].lower() != key.lower():
+        return False
+    if len(token) == len(key):
+        return True
+    return not token[len(key)].isalpha()
+
+
+def project_extra_args(name):
+    """v8args / ibcmdargs from .v8-project.json — same upward walk as v8path."""
+    d = os.getcwd()
+    while True:
+        pf = os.path.join(d, ".v8-project.json")
+        if os.path.isfile(pf):
+            try:
+                with open(pf, encoding="utf-8-sig") as f:
+                    data = json.load(f)
+                v = data.get(name)
+                if v:
+                    return [str(x) for x in v]
+            except Exception:
+                pass
+            return []
+        parent = os.path.dirname(d)
+        if parent == d:
+            return []
+        d = parent
+
+
+def assert_extra_args(extra, engine, hints):
+    """The platform accepts only one batch operation, and a duplicate connection or
+    output key fails with an opaque 1C error — reject what the skill owns itself."""
+    param = "-AdditionalIbcmdArguments" if engine == "ibcmd" else "-AdditionalV8Arguments"
+    owned = IBCMD_OWNED_KEYS if engine == "ibcmd" else V8_OWNED_KEYS
+    for tok in extra:
+        if engine == "ibcmd" and not tok.startswith("-"):
+            print(
+                f"Error: '{tok}' is a positional token — pass values as --key=value "
+                f"({param} cannot extend the ibcmd command)",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+        for k in owned:
+            if arg_key_match(tok, k):
+                hint = f" (use {hints[k]})" if hints and k in hints else ""
+                print(
+                    f"Error: {k} is controlled by the skill and cannot be passed via {param}{hint}",
+                    file=sys.stderr,
+                )
+                sys.exit(1)
+
+
+def format_args_for_display(arglist, engine):
+    """Redact values of secret-prone keys in glued, =-joined and separate forms.
+    Matching here is a plain prefix (no letter rule): over-masking costs nothing,
+    a leaked password does."""
+    keys = IBCMD_SECRET_KEYS if engine == "ibcmd" else V8_SECRET_KEYS
+    res = []
+    mask_next = False
+    for tok in arglist:
+        if mask_next:
+            res.append("***")
+            mask_next = False
+            continue
+        hit = None
+        for k in keys:
+            if tok[: len(k)].lower() == k.lower():
+                hit = k
+                break
+        if hit is None:
+            res.append(tok)
+        elif len(tok) == len(hit):
+            res.append(tok)
+            mask_next = True
+        elif tok[len(hit)] == "=":
+            res.append(hit + "=***")
+        else:
+            res.append(hit + "***")
+    return res
+
+
+def extract_extra_args(argv, known_opts):
+    """argparse refuses values that start with '-' (every ibcmd key does), so pull the two
+    escape-hatch lists out of argv by hand: after the flag, take everything up to the next
+    declared skill option. Returns (remaining_argv, v8_extra, ibcmd_extra)."""
+    rest, v8, ibcmd = [], [], []
+    i = 0
+    while i < len(argv):
+        low = argv[i].lower()
+        if low in ("-additionalv8arguments", "-additionalibcmdarguments"):
+            target = v8 if low == "-additionalv8arguments" else ibcmd
+            i += 1
+            while i < len(argv) and argv[i].lower() not in known_opts:
+                target.append(argv[i])
+                i += 1
+            continue
+        rest.append(argv[i])
+        i += 1
+    return rest, v8, ibcmd
+
+
+def resolve_extra_args(engine, v8_extra, ibcmd_extra, hints):
+    """Pick the argument list for the selected engine and validate it. An explicitly
+    passed parameter for the other engine is an error; the same keys coming from
+    .v8-project.json simply do not apply — a project may describe both engines.
+
+    Comma-separated elements are split apart: PowerShell's -File cannot bind an array,
+    so that form is the documented one and both ports must accept it. A value containing
+    a comma is not supported."""
+    v8_extra = [p for tok in v8_extra for p in str(tok).split(",") if p]
+    ibcmd_extra = [p for tok in ibcmd_extra for p in str(tok).split(",") if p]
+    if engine == "ibcmd" and v8_extra:
+        print(
+            "Error: -AdditionalV8Arguments applies to 1cv8 only; the selected engine is ibcmd "
+            "(use -AdditionalIbcmdArguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine != "ibcmd" and ibcmd_extra:
+        print(
+            "Error: -AdditionalIbcmdArguments applies to ibcmd only; the selected engine is 1cv8 "
+            "(use -AdditionalV8Arguments)",
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    if engine == "ibcmd":
+        extra = project_extra_args("ibcmdargs") + list(ibcmd_extra)
+    else:
+        extra = project_extra_args("v8args") + list(v8_extra)
+    if extra:
+        assert_extra_args(extra, engine, hints)
+    return extra
+
+
+def _version_dir(p):
+    """Version dir for both Windows (.../1cv8/<ver>/bin/1cv8.exe) and *nix (.../1cv8/<ver>/1cv8)."""
+    parent = os.path.dirname(p)
+    if os.path.basename(parent).lower() == "bin":
+        parent = os.path.dirname(parent)
+    return os.path.basename(parent)
+
+
+def _version_key(p):
+    """Numeric sort key from version dir name."""
+    return [int(x) for x in re.findall(r"\d+", _version_dir(p))]
+
+
+def resolve_v8path(v8path):
+    """Resolve path to a 1C executable (1cv8; ibcmd only when given explicitly)."""
+    if not v8path:
+        v8path = _find_project_v8path()
+    if not v8path:
+        if os.name == "nt":
+            candidates = (
+                glob.glob(r"C:\Program Files\1cv8\*\bin\1cv8.exe")
+                + glob.glob(r"C:\Program Files (x86)\1cv8\*\bin\1cv8.exe")
+            )
+        else:
+            # PY-only: PS-порт на *nix не исполняется, поэтому *nix-раскладки нет в .ps1.
+            candidates = glob.glob("/opt/1cv8/*/1cv8")
+        if candidates:
+            v8path = max(candidates, key=_version_key)
+            print(f"Auto-selected platform {_version_dir(v8path)}: {v8path}")
+        else:
+            print("Error: 1C executable not found. Specify -V8Path", file=sys.stderr)
+            sys.exit(1)
+    if os.path.isdir(v8path):
+        # PY-only: на *nix исполняемый называется "1cv8" (без .exe); ibcmd — только явным путём.
+        exe = "1cv8.exe" if os.name == "nt" else "1cv8"
+        v8path = os.path.join(v8path, exe)
+    if not os.path.isfile(v8path):
+        print(f"Error: 1C executable not found at {v8path}", file=sys.stderr)
+        sys.exit(1)
+    return v8path
+
+
+IBCMD_NOUSER_HINT = (
+    "[ibcmd] No -UserName/-Password given; the infobase may require authentication. "
+    "On Windows ibcmd reads credentials from the console (stdin is ignored), so this "
+    "call may block instead of failing. If it does not return promptly, abort and "
+    "re-run with -UserName and -Password.\n"
+)
+
+
+def decode_platform_bytes(data):
+    """ibcmd writes UTF-8 (checked on 8.3.24, 8.3.27, 8.5), a crashing 1cv8 may still emit
+    OEM text. Decode strictly as UTF-8 and fall back to cp866 on invalid bytes — the locale
+    code page (what text=True uses) mangles both."""
+    if not data:
+        return ""
+    try:
+        return data.decode("utf-8")
+    except UnicodeDecodeError:
+        return data.decode("cp866", errors="replace")
+
+
+def assert_infobase_exists(path):
+    """These skills work on a ready infobase. Saying so up front beats the platform's
+    "Неверные или отсутствующие параметры соединения" after a launch."""
+    if not path:
+        return
+    if not os.path.isfile(os.path.join(path, "1Cv8.1CD")):
+        print(f"Error: information base not found at {path} (no 1Cv8.1CD)", file=sys.stderr)
+        sys.exit(1)
+
+
+def clean_path(value, param=""):
+    """Forgive what is unambiguous in a path the caller passed: surrounding whitespace,
+    surrounding quotes that survived shell parsing, a trailing separator. A quote left
+    inside afterwards cannot be part of a real path — reject it by name instead of letting
+    1C answer with its opaque "Неверные или отсутствующие параметры соединения"."""
+    if not value:
+        return value
+    v = value.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        v = v[1:-1].strip()
+    if len(v) > 3 and v[-1] in "\\/":
+        v = v[:-1]
+    if '"' in v:
+        print(f"Error: {param or 'path'} contains a quote character: {value}", file=sys.stderr)
+        sys.exit(1)
+    return v
+
+
+def quote_if_needed(token):
+    """Extra arguments come from the caller unquoted; the 1cv8 command line is joined
+    verbatim, so a token with a space needs quotes of its own."""
+    if token and (" " in token or "\t" in token) and '"' not in token:
+        return f'"{token}"'
+    return token
+
+
+def run_v8(v8path, arguments):
+    """Run 1cv8 in batch mode and capture its console output.
+
+    The arguments carry their own quotes inside the value (File="C:\\a b") — that is where
+    1C's parser expects them, on Windows and on *nix alike. Windows list2cmdline would
+    escape those quotes, so there the command line is handed over ready-made.
+    """
+    if os.name == "nt":
+        cmd = '"' + v8path + '" ' + " ".join(arguments)
+    else:
+        cmd = [v8path] + arguments
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def print_platform_output(result):
+    """Print what the platform wrote to the console as its own labelled block. Silence stays
+    silent: in batch mode 1cv8 reports through /Out and prints nothing here."""
+    text = ((result.stdout or "") + (result.stderr or "")).rstrip()
+    if not text:
+        return
+    limit = 65536
+    if len(text) > limit:
+        text = f"[... обрезано, показаны последние {limit} символов ...]\n" + text[-limit:]
+    print("--- Вывод платформы ---")
+    print(text)
+    print("--- End ---")
+
+
+def run_ibcmd(cmd, has_username=False, warn_no_user=True):
+    """Run an ibcmd command non-interactively.
+
+    input="" closes stdin (EOF) so ibcmd's auth prompt fast-fails instead of hanging.
+    On Windows without -UserName ibcmd reads the console directly and may still block —
+    that residual case is flagged via IBCMD_NOUSER_HINT (model-facing).
+    """
+    if warn_no_user and os.name == "nt" and not has_username:
+        sys.stderr.write(IBCMD_NOUSER_HINT)
+        sys.stderr.flush()
+    r = subprocess.run(cmd, input=b"", capture_output=True)
+    r.stdout = decode_platform_bytes(r.stdout)
+    r.stderr = decode_platform_bytes(r.stderr)
+    return r
+
+
+def dir_nonempty(path):
+    """Postcondition: the platform must have written files into the output directory.
+    Exit code 0 with an empty dir (broken/headless env) is a false success — reject it."""
+    return os.path.isdir(path) and any(os.scandir(path))
+
+
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(
+        description="Dump external data processor or report (EPF/ERF) to XML sources",
+        allow_abbrev=False,
+    )
+    parser.add_argument("-V8Path", default="", help="Path to 1cv8.exe or its bin directory")
+    parser.add_argument("-InfoBasePath", default="", help="Path to file infobase")
+    parser.add_argument("-InfoBaseServer", default="", help="1C server (for server infobase)")
+    parser.add_argument("-InfoBaseRef", default="", help="Infobase name on server")
+    parser.add_argument("-UserName", default="", help="1C user name")
+    parser.add_argument("-Password", default="", help="1C user password")
+    parser.add_argument("-InputFile", required=True, help="Path to EPF/ERF file")
+    parser.add_argument("-OutputDir", required=True, help="Directory for dumped XML sources")
+    parser.add_argument(
+        "-Format",
+        default="Hierarchical",
+        choices=["Hierarchical", "Plain"],
+        help="Dump format (default: Hierarchical)",
+    )
+    parser.add_argument("-AdditionalV8Arguments", nargs="*", default=[],
+                        help="Extra 1cv8 arguments, e.g. /UseHwLicenses+")
+    parser.add_argument("-AdditionalIbcmdArguments", nargs="*", default=[],
+                        help="Extra ibcmd arguments in --key=value form")
+    known_opts = {s.lower() for a in parser._actions for s in a.option_strings}
+    argv, v8_extra, ibcmd_extra = extract_extra_args(sys.argv[1:], known_opts)
+    args = parser.parse_args(argv)
+
+    args.V8Path = clean_path(args.V8Path, "-V8Path")
+    args.InfoBasePath = clean_path(args.InfoBasePath, "-InfoBasePath")
+    assert_infobase_exists(args.InfoBasePath)
+    args.InputFile = clean_path(args.InputFile, "-InputFile")
+    args.OutputDir = clean_path(args.OutputDir, "-OutputDir")
+
+    # --- Resolve V8Path ---
+    v8path = resolve_v8path(args.V8Path)
+    engine = "ibcmd" if os.path.basename(v8path).lower().startswith("ibcmd") else "1cv8"
+
+    # --- Resolve additional arguments for the selected engine ---
+    arg_hints = {
+        "/F": "-InfoBasePath",
+        "/S": "-InfoBaseServer + -InfoBaseRef",
+        "/N": "-UserName",
+        "/P": "-Password",
+        "--db-path": "-InfoBasePath",
+        "--user": "-UserName",
+        "--password": "-Password",
+    }
+    extra_args = resolve_extra_args(engine, v8_extra, ibcmd_extra, arg_hints)
+
+    # --- Validate database connection ---
+    if not args.InfoBasePath and (not args.InfoBaseServer or not args.InfoBaseRef):
+        print("Error: database connection required. Specify -InfoBasePath or -InfoBaseServer/-InfoBaseRef", file=sys.stderr)
+        print("Dump in an empty database loses reference types (CatalogRef, DocumentRef, etc.) irreversibly.")
+        sys.exit(1)
+    if engine == "ibcmd":
+        if not args.InfoBasePath:
+            print("Error: ibcmd supports file infobases only (use -InfoBasePath)", file=sys.stderr)
+            sys.exit(1)
+        if args.Format == "Plain":
+            print("Error: ibcmd config export supports hierarchical format only (use -Format Hierarchical or 1cv8)", file=sys.stderr)
+            sys.exit(1)
+
+    # --- Validate input file ---
+    if not os.path.isfile(args.InputFile):
+        print(f"Error: input file not found: {args.InputFile}", file=sys.stderr)
+        sys.exit(1)
+
+    # --- Ensure output directory exists ---
+    if not os.path.exists(args.OutputDir):
+        os.makedirs(args.OutputDir, exist_ok=True)
+
+    # --- Temp dir ---
+    temp_dir = os.path.join(tempfile.gettempdir(), f"epf_dump_{random.randint(0, 999999)}")
+    os.makedirs(temp_dir, exist_ok=True)
+
+    try:
+        if engine == "ibcmd":
+            # --- ibcmd branch: dump EPF/ERF via config export --file ---
+            arguments = ["infobase", "config", "export", f"--file={args.InputFile}", args.OutputDir, f"--db-path={args.InfoBasePath}"]
+            ib_data = tempfile.mkdtemp(prefix="ibcmd_data_")
+            atexit.register(shutil.rmtree, ib_data, ignore_errors=True)
+            if args.UserName:
+                arguments.append(f"--user={args.UserName}")
+            if args.Password:
+                arguments.append(f"--password={args.Password}")
+            arguments.append(f"--data={ib_data}")
+            arguments.extend(extra_args)
+            print(f"Running: ibcmd {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+            result = run_ibcmd([v8path] + arguments, warn_no_user=False)
+            exit_code = result.returncode
+            out_missing = exit_code == 0 and not dir_nonempty(args.OutputDir)
+            if out_missing:
+                exit_code = 1
+            if exit_code == 0:
+                print(f"External data processor/report dumped successfully to: {args.OutputDir}")
+            elif out_missing:
+                print(f"Error: exit code 0 but no files under {args.OutputDir} — dump produced no output", file=sys.stderr)
+            else:
+                print(f"Error dumping external data processor/report (code: {exit_code})", file=sys.stderr)
+            sys.exit(exit_code)
+
+        # --- Build arguments ---
+        arguments = ["DESIGNER"]
+
+        if args.InfoBaseServer and args.InfoBaseRef:
+            arguments += ["/S", f'"{args.InfoBaseServer}/{args.InfoBaseRef}"']
+        else:
+            arguments += ["/F", f'"{args.InfoBasePath}"']
+
+        if args.UserName:
+            arguments.append(f'/N"{args.UserName}"')
+        if args.Password:
+            arguments.append(f'/P"{args.Password}"')
+
+        arguments += ["/DumpExternalDataProcessorOrReportToFiles", f'"{args.OutputDir}"', f'"{args.InputFile}"']
+        arguments += ["-Format", args.Format]
+
+        # --- Output ---
+        out_file = os.path.join(temp_dir, "dump_log.txt")
+        arguments += ["/Out", f'"{out_file}"']
+        arguments.append("/DisableStartupDialogs")
+        arguments.extend(quote_if_needed(a) for a in extra_args)
+
+        # --- Execute ---
+        print(f"Running: 1cv8.exe {_redact(' '.join(format_args_for_display(arguments, engine)), args.Password, args.UserName)}")
+        result = run_v8(v8path, arguments)
+        exit_code = result.returncode
+
+        # --- Result ---
+        # Postcondition: exit 0 with an empty output directory is a false success.
+        out_missing = exit_code == 0 and not dir_nonempty(args.OutputDir)
+        if out_missing:
+            exit_code = 1
+        if exit_code == 0:
+            print(f"Dump completed successfully to: {args.OutputDir}")
+        elif out_missing:
+            print(f"Error: exit code 0 but no files under {args.OutputDir} — dump produced no output", file=sys.stderr)
+        else:
+            print(f"Error dumping (code: {exit_code})", file=sys.stderr)
+
+        if os.path.isfile(out_file):
+            try:
+                with open(out_file, "r", encoding="utf-8-sig") as f:
+                    log_content = f.read()
+                if log_content:
+                    print("--- Log ---")
+                    print(log_content)
+                    print("--- End ---")
+            except Exception:
+                pass
+
+        print_platform_output(result)
+        sys.exit(exit_code)
+
+    finally:
+        if os.path.exists(temp_dir):
+            shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    main()
@@ -0,0 +1,42 @@
+---
+name: epf-init
+description: Создать пустую внешнюю обработку 1С (scaffold XML-исходников). Используй когда нужно создать новую внешнюю обработку с нуля
+argument-hint: <Name> [Synonym]
+allowed-tools:
+  - Bash
+  - Read
+  - Write
+  - Edit
+  - Glob
+  - Grep
+---
+
+# /epf-init — Создание новой обработки
+
+Генерирует минимальный набор XML-исходников для внешней обработки 1С: корневой файл метаданных и каталог обработки.
+
+## Usage
+
+```
+/epf-init <Name> [Synonym] [SrcDir] [FormatVersion]
+```
+
+| Параметр      | Обязательный | По умолчанию | Описание                                       |
+|---------------|:------------:|--------------|------------------------------------------------|
+| Name          | да           | —            | Имя обработки (латиница/кириллица)             |
+| Synonym       | нет          | = Name       | Синоним (отображаемое имя)                     |
+| SrcDir        | нет          | `src`        | Каталог исходников относительно CWD            |
+| FormatVersion | нет          | `2.17`       | Версия формата: 2.20 — платформа 8.3.27, 2.21 — 8.5. Дефолт открывается любой платформой |
+
+## Команда
+
+```powershell
+python ".agents/skills/epf-init/scripts/init.py" -Name "<Name>" [-Synonym "<Synonym>"] [-SrcDir "<SrcDir>"] [-FormatVersion "<2.17|2.18|2.19|2.20|2.21>"]
+```
+
+## Дальнейшие шаги
+
+- Добавить форму: `/form-add`
+- Добавить макет: `/template-add`
+- Добавить справку: `/help-add`
+- Собрать EPF: `/epf-build`
@@ -0,0 +1,118 @@
+# epf-init v1.4 — Init 1C external data processor scaffold
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+param(
+	[Parameter(Mandatory)]
+	[string]$Name,
+
+	[string]$Synonym = $Name,
+
+	[string]$SrcDir = "src",
+
+	# Версия формата выгрузки. Своей конфигурации у автономной обработки нет, наследовать
+	# версию неоткуда — поэтому её задают явно. Формы, макеты и справку внутри обработки
+	# навыки берут уже отсюда: их детектор читает version из корня этого файла.
+	[ValidateSet("2.17", "2.18", "2.19", "2.20", "2.21")]
+	[string]$FormatVersion = "2.17"
+)
+
+$ErrorActionPreference = "Stop"
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+[Console]::InputEncoding = [System.Text.Encoding]::UTF8
+
+$uuid1 = [guid]::NewGuid().ToString()
+$uuid2 = [guid]::NewGuid().ToString()
+$uuid3 = [guid]::NewGuid().ToString()
+$uuid4 = [guid]::NewGuid().ToString()
+
+# Объявления пространств имён — одной переменной: места эмиссии её только интерполируют.
+$xmlnsDecl = 'xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+# 2.21 (8.5) добавила в шапку пространство палитры. Вставляем НА МЕСТО (после lf, перед style):
+# платформа держит объявления по алфавиту, дописать в конец нельзя.
+if (($FormatVersion -match '^(\d+)\.(\d+)$') -and ([int]$Matches[1] * 100 + [int]$Matches[2]) -ge 221) {
+	$xmlnsDecl = $xmlnsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+}
+
+$xml = @"
+<?xml version="1.0" encoding="UTF-8"?>
+<MetaDataObject $xmlnsDecl version="$FormatVersion">
+	<ExternalDataProcessor uuid="$uuid1">
+		<InternalInfo>
+			<xr:ContainedObject>
+				<xr:ClassId>c3831ec8-d8d5-4f93-8a22-f9bfae07327f</xr:ClassId>
+				<xr:ObjectId>$uuid2</xr:ObjectId>
+			</xr:ContainedObject>
+			<xr:GeneratedType name="ExternalDataProcessorObject.$Name" category="Object">
+				<xr:TypeId>$uuid3</xr:TypeId>
+				<xr:ValueId>$uuid4</xr:ValueId>
+			</xr:GeneratedType>
+		</InternalInfo>
+		<Properties>
+			<Name>$Name</Name>
+			<Synonym>
+				<v8:item>
+					<v8:lang>ru</v8:lang>
+					<v8:content>$Synonym</v8:content>
+				</v8:item>
+			</Synonym>
+			<Comment/>
+			<DefaultForm/>
+			<AuxiliaryForm/>
+		</Properties>
+		<ChildObjects/>
+	</ExternalDataProcessor>
+</MetaDataObject>
+"@
+
+$rootFile = Join-Path $SrcDir "$Name.xml"
+$processorDir = Join-Path $SrcDir $Name
+
+if (Test-Path $rootFile) {
+	Write-Error "Файл уже существует: $rootFile"
+	exit 1
+}
+
+if (-not (Test-Path $SrcDir)) {
+	New-Item -ItemType Directory -Path $SrcDir -Force | Out-Null
+}
+$extDir = Join-Path $processorDir "Ext"
+New-Item -ItemType Directory -Path $extDir -Force | Out-Null
+
+$enc = New-Object System.Text.UTF8Encoding($true)
+# XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+#
+# Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+# копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+function Write-XmlFile([string]$path, [string]$text, $encoding) {
+	$t = ($text -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($path, $t.TrimEnd("`r", "`n"), $encoding)
+}
+
+Write-XmlFile (Resolve-Path $SrcDir | Join-Path -ChildPath "$Name.xml") $xml $enc
+
+# --- Модуль объекта ---
+
+$moduleBsl = @"
+#Область ОписаниеПеременных
+
+#КонецОбласти
+
+#Область ПрограммныйИнтерфейс
+
+#КонецОбласти
+
+#Область СлужебныеПроцедурыИФункции
+
+#КонецОбласти
+"@
+
+$modulePath = Join-Path $extDir "ObjectModule.bsl"
+# Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+# чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+# неканоничен (1235 модулей с ним, 766 без). Шаблон берёт переводы строк из
+# самого скрипта, а он в репозитории хранится с LF.
+$moduleBsl = ($moduleBsl -replace "`r`n", "`n") -replace "`n", "`r`n"
+[System.IO.File]::WriteAllText($modulePath, $moduleBsl, $enc)
+
+Write-Host "[OK] Создана обработка: $rootFile"
+Write-Host "     Каталог: $processorDir"
+Write-Host "     Модуль:  $modulePath"
@@ -0,0 +1,151 @@
+#!/usr/bin/env python3
+# epf-init v1.4 — Init 1C external data processor scaffold
+# Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
+"""Generates minimal XML source files for a 1C external data processor."""
+import sys, os, re, argparse, uuid
+
+def esc_xml(s):
+    return s.replace('&','&amp;').replace('<','&lt;').replace('>','&gt;').replace('"','&quot;')
+
+def new_uuid():
+    return str(uuid.uuid4())
+
+def write_utf8_bom(path, content):
+    with open(path, 'w', encoding='utf-8-sig', newline='') as f:
+        f.write(content)
+
+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    write_utf8_bom(path, text)
+
+
+def format_rank(ver):
+    """"2.20" → 220, "2.9" → 209. Строковое сравнение неверно ("2.9" > "2.17")."""
+    m = re.match(r'^(\d+)\.(\d+)$', ver or '')
+    return int(m.group(1)) * 100 + int(m.group(2)) if m else 0
+
+
+def main():
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+    parser = argparse.ArgumentParser(description='Init 1C external data processor scaffold', allow_abbrev=False)
+    parser.add_argument('-Name', dest='Name', required=True)
+    parser.add_argument('-Synonym', dest='Synonym', default=None)
+    parser.add_argument('-SrcDir', dest='SrcDir', default='src')
+    # Версия формата выгрузки. Своей конфигурации у автономного объекта нет, наследовать
+    # версию неоткуда — поэтому её задают явно. Формы, макеты и справку внутри объекта
+    # навыки берут уже отсюда: их детектор читает version из корня этого файла.
+    parser.add_argument('-FormatVersion', dest='FormatVersion', default='2.17',
+                        choices=['2.17', '2.18', '2.19', '2.20', '2.21'])
+    args = parser.parse_args()
+
+    name = args.Name
+    synonym = args.Synonym if args.Synonym else name
+    src_dir = args.SrcDir
+
+    uuid1 = new_uuid()
+    uuid2 = new_uuid()
+    uuid3 = new_uuid()
+    uuid4 = new_uuid()
+
+    # Объявления пространств имён — одной переменной: места эмиссии её только подставляют.
+    xmlns_decl = (
+        'xmlns="http://v8.1c.ru/8.3/MDClasses"'
+        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
+        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
+        ' xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi"'
+        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
+        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
+        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
+        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
+        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
+        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
+        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
+        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
+        ' xmlns:xen="http://v8.1c.ru/8.3/xcf/enums"'
+        ' xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef"'
+        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
+        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
+        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+    )
+    format_version = args.FormatVersion
+    # 2.21 (8.5) добавила в шапку пространство палитры. Вставляем НА МЕСТО (после lf, перед
+    # style): платформа держит объявления по алфавиту, дописать в конец нельзя.
+    if format_rank(format_version) >= 221:
+        xmlns_decl = xmlns_decl.replace(
+            ' xmlns:style=',
+            ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style=')
+
+    xml = f'''<?xml version="1.0" encoding="UTF-8"?>
+<MetaDataObject {xmlns_decl} version="{format_version}">
+\t<ExternalDataProcessor uuid="{uuid1}">
+\t\t<InternalInfo>
+\t\t\t<xr:ContainedObject>
+\t\t\t\t<xr:ClassId>c3831ec8-d8d5-4f93-8a22-f9bfae07327f</xr:ClassId>
+\t\t\t\t<xr:ObjectId>{uuid2}</xr:ObjectId>
+\t\t\t</xr:ContainedObject>
+\t\t\t<xr:GeneratedType name="ExternalDataProcessorObject.{name}" category="Object">
+\t\t\t\t<xr:TypeId>{uuid3}</xr:TypeId>
+\t\t\t\t<xr:ValueId>{uuid4}</xr:ValueId>
+\t\t\t</xr:GeneratedType>
+\t\t</InternalInfo>
+\t\t<Properties>
+\t\t\t<Name>{esc_xml(name)}</Name>
+\t\t\t<Synonym>
+\t\t\t\t<v8:item>
+\t\t\t\t\t<v8:lang>ru</v8:lang>
+\t\t\t\t\t<v8:content>{esc_xml(synonym)}</v8:content>
+\t\t\t\t</v8:item>
+\t\t\t</Synonym>
+\t\t\t<Comment/>
+\t\t\t<DefaultForm/>
+\t\t\t<AuxiliaryForm/>
+\t\t</Properties>
+\t\t<ChildObjects/>
+\t</ExternalDataProcessor>
+</MetaDataObject>'''
+
+    root_file = os.path.join(src_dir, f"{name}.xml")
+    processor_dir = os.path.join(src_dir, name)
+
+    if os.path.exists(root_file):
+        print(f"Файл уже существует: {root_file}", file=sys.stderr)
+        sys.exit(1)
+
+    os.makedirs(src_dir, exist_ok=True)
+    ext_dir = os.path.join(processor_dir, "Ext")
+    os.makedirs(ext_dir, exist_ok=True)
+
+    write_xml_file(os.path.join(os.path.abspath(src_dir), f"{name}.xml"), xml)
+
+    # --- Модуль объекта ---
+    module_bsl = """\
+#Область ОписаниеПеременных
+
+#КонецОбласти
+
+#Область ПрограммныйИнтерфейс
+
+#КонецОбласти
+
+#Область СлужебныеПроцедурыИФункции
+
+#КонецОбласти"""
+
+    module_path = os.path.join(ext_dir, "ObjectModule.bsl")
+    # Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+    # чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+    # неканоничен (1235 модулей с ним, 766 без).
+    write_utf8_bom(module_path, module_bsl.replace('\r\n', '\n').replace('\n', '\r\n'))
+
+    print(f"[OK] Создана обработка: {root_file}")
+    print(f"     Каталог: {processor_dir}")
+    print(f"     Модуль:  {module_path}")
+
+if __name__ == '__main__':
+    main()
@@ -24,7 +24,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-validate.ps1" -ObjectPath "src/МояОбработка"
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/epf-validate.ps1" -ObjectPath "src/МояОбработка/МояОбработка.xml"
+python ".agents/skills/epf-validate/scripts/epf-validate.py" -ObjectPath "src/МояОбработка"
+python ".agents/skills/epf-validate/scripts/epf-validate.py" -ObjectPath "src/МояОбработка/МояОбработка.xml"
 ```

@@ -1,4 +1,4 @@
-# epf-validate v1.2 — Validate 1C external data processor / report structure
+# epf-validate v1.3 — Validate 1C external data processor / report structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # Works for both EPF (ExternalDataProcessor) and ERF (ExternalReport) — auto-detects
 param(
@@ -185,8 +185,9 @@ if ($root.NamespaceURI -ne $expectedNs) {
 $version = $root.GetAttribute("version")
 if (-not $version) {
 	Report-Warn "1. Missing version attribute on MetaDataObject"
-} elseif ($version -ne "2.17" -and $version -ne "2.20" -and $version -ne "2.21") {
-	Report-Warn "1. Unusual version '$version' (expected 2.17, 2.20 or 2.21)"
+} elseif ($version -notin @("2.17", "2.18", "2.19", "2.20", "2.21")) {
+	# Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+	Report-Warn "1. Unusual version '$version' (expected 2.17-2.20 or 2.21)"
 }

 # Detect type: ExternalDataProcessor or ExternalReport
@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# epf-validate v1.2 — Validate 1C external data processor / report structure
+# epf-validate v1.3 — Validate 1C external data processor / report structure
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # Works for both EPF (ExternalDataProcessor) and ERF (ExternalReport) — auto-detects

@@ -165,8 +165,9 @@ def main():
    version = root.get("version", "")
    if not version:
        report_warn("1. Missing version attribute on MetaDataObject")
-    elif version not in ("2.17", "2.20", "2.21"):
-        report_warn(f"1. Unusual version '{version}' (expected 2.17, 2.20 or 2.21)")
+    elif version not in ("2.17", "2.18", "2.19", "2.20", "2.21"):
+        # Лестница версий формата: 2.17 (8.3.20-8.3.24), 2.18 (8.3.25), 2.19 (8.3.26), 2.20 (8.3.27).
+        report_warn(f"1. Unusual version '{version}' (expected 2.17-2.20 or 2.21)")

    # Detect type
    child_elements = []
@@ -42,7 +42,7 @@ allowed-tools:
 Используй общий скрипт из epf-build:

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-build/scripts/epf-build.ps1" <параметры>
+python ".agents/skills/epf-build/scripts/epf-build.py" <параметры>
 ```

 ### Параметры скрипта
@@ -57,6 +57,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-build/scripts/epf-bu
 | `-Password <пароль>` | нет | Пароль |
 | `-SourceFile <путь>` | да | Путь к корневому XML-файлу исходников |
 | `-OutputFile <путь>` | да | Путь к выходному ERF-файлу |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — опционально. Если не указано — автоматически создаётся временная база со заглушками метаданных

@@ -64,8 +66,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-build/scripts/epf-bu

 ```powershell
 # Сборка отчёта (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-build/scripts/epf-build.ps1" -InfoBasePath "C:\Bases\MyDB" -SourceFile "src/МойОтчёт.xml" -OutputFile "build/МойОтчёт.erf"
+python ".agents/skills/epf-build/scripts/epf-build.py" -InfoBasePath "C:\Bases\MyDB" -SourceFile "src/МойОтчёт.xml" -OutputFile "build/МойОтчёт.erf"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-build/scripts/epf-build.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -SourceFile "src/МойОтчёт.xml" -OutputFile "build/МойОтчёт.erf"
+python ".agents/skills/epf-build/scripts/epf-build.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -SourceFile "src/МойОтчёт.xml" -OutputFile "build/МойОтчёт.erf"
 ```
@@ -41,7 +41,7 @@ allowed-tools:
 Используй общий скрипт из epf-dump:

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dump.ps1" <параметры>
+python ".agents/skills/epf-dump/scripts/epf-dump.py" <параметры>
 ```

 ### Параметры скрипта
@@ -57,6 +57,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dum
 | `-InputFile <путь>` | да | Путь к ERF-файлу |
 | `-OutputDir <путь>` | да | Каталог для выгрузки исходников |
 | `-Format <формат>` | нет | `Hierarchical` (по умолч.) / `Plain` |
+| `-AdditionalV8Arguments <список>` | нет | Доп. аргументы запуска `1cv8.exe` через запятую, напр. `/UseHwLicenses+` |
+| `-AdditionalIbcmdArguments <список>` | нет | Доп. аргументы `ibcmd` через запятую, в форме `--ключ=значение` |

 > `*` — обязательно хотя бы одно подключение. Без базы скрипт завершится с ошибкой (dump в пустой базе безвозвратно теряет ссылочные типы)

@@ -64,8 +66,8 @@ powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dum

 ```powershell
 # Разборка отчёта (файловая база)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dump.ps1" -InfoBasePath "C:\Bases\MyDB" -InputFile "build/МойОтчёт.erf" -OutputDir "src"
+python ".agents/skills/epf-dump/scripts/epf-dump.py" -InfoBasePath "C:\Bases\MyDB" -InputFile "build/МойОтчёт.erf" -OutputDir "src"

 # Серверная база
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dump.ps1" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -InputFile "build/МойОтчёт.erf" -OutputDir "src"
+python ".agents/skills/epf-dump/scripts/epf-dump.py" -InfoBaseServer "srv01" -InfoBaseRef "MyDB" -UserName "Admin" -Password "secret" -InputFile "build/МойОтчёт.erf" -OutputDir "src"
 ```
@@ -0,0 +1,43 @@
+---
+name: erf-init
+description: Создать пустой внешний отчёт 1С (scaffold XML-исходников). Используй когда нужно создать новый внешний отчёт с нуля
+argument-hint: <Name> [Synonym] [--with-skd]
+allowed-tools:
+  - Bash
+  - Read
+  - Write
+  - Edit
+  - Glob
+  - Grep
+---
+
+# /erf-init — Создание нового отчёта
+
+Генерирует минимальный набор XML-исходников для внешнего отчёта 1С: корневой файл метаданных и каталог отчёта.
+
+## Usage
+
+```
+/erf-init <Name> [Synonym] [SrcDir] [FormatVersion] [--with-skd]
+```
+
+| Параметр      | Обязательный | По умолчанию | Описание                              |
+|---------------|:------------:|--------------|---------------------------------------|
+| Name          | да           | —            | Имя отчёта (латиница/кириллица)       |
+| Synonym       | нет          | = Name       | Синоним (отображаемое имя)            |
+| SrcDir        | нет          | `src`        | Каталог исходников относительно CWD   |
+| FormatVersion | нет          | `2.17`       | Версия формата: 2.20 — платформа 8.3.27, 2.21 — 8.5. Дефолт открывается любой платформой |
+| --WithSKD     | нет          | —            | Создать пустую СКД и привязать к MainDataCompositionSchema |
+
+## Команда
+
+```powershell
+python ".agents/skills/erf-init/scripts/init.py" -Name "<Name>" [-Synonym "<Synonym>"] [-SrcDir "<SrcDir>"] [-FormatVersion "<2.17|2.18|2.19|2.20|2.21>"] [-WithSKD]
+```
+
+## Дальнейшие шаги
+
+- Добавить форму: `/form-add`
+- Добавить макет: `/template-add`
+- Добавить справку: `/help-add`
+- Собрать ERF: `/erf-build`
@@ -1,4 +1,4 @@
-# erf-init v1.1 — Init 1C external report scaffold
+# erf-init v1.4 — Init 1C external report scaffold
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -8,7 +8,13 @@ param(

 	[string]$SrcDir = "src",

-	[switch]$WithSKD
+	[switch]$WithSKD,
+
+	# Версия формата выгрузки. Своей конфигурации у автономного отчёта нет, наследовать
+	# версию неоткуда — поэтому её задают явно. Формы, макеты и справку внутри отчёта
+	# навыки берут уже отсюда: их детектор читает version из корня этого файла.
+	[ValidateSet("2.17", "2.18", "2.19", "2.20", "2.21")]
+	[string]$FormatVersion = "2.17"
 )

 $ErrorActionPreference = "Stop"
@@ -20,6 +26,14 @@ $uuid2 = [guid]::NewGuid().ToString()
 $uuid3 = [guid]::NewGuid().ToString()
 $uuid4 = [guid]::NewGuid().ToString()

+# Объявления пространств имён — одной переменной: места эмиссии её только интерполируют.
+$xmlnsDecl = 'xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+# 2.21 (8.5) добавила в шапку пространство палитры. Вставляем НА МЕСТО (после lf, перед style):
+# платформа держит объявления по алфавиту, дописать в конец нельзя.
+if (($FormatVersion -match '^(\d+)\.(\d+)$') -and ([int]$Matches[1] * 100 + [int]$Matches[2]) -ge 221) {
+	$xmlnsDecl = $xmlnsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+}
+
 # --- Формируем Properties ---

 $mainDCSValue = ""
@@ -48,7 +62,7 @@ $childObjectsXml = if ($childObjectsContent) {

 $xml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="2.17">
+<MetaDataObject $xmlnsDecl version="$FormatVersion">
 	<ExternalReport uuid="$uuid1">
 		<InternalInfo>
 			<xr:ContainedObject>
@@ -98,7 +112,16 @@ $extDir = Join-Path $reportDir "Ext"
 New-Item -ItemType Directory -Path $extDir -Force | Out-Null

 $enc = New-Object System.Text.UTF8Encoding($true)
-[System.IO.File]::WriteAllText((Resolve-Path $SrcDir | Join-Path -ChildPath "$Name.xml"), $xml, $enc)
+# XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+#
+# Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+# копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+function Write-XmlFile([string]$path, [string]$text, $encoding) {
+	$t = ($text -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($path, $t.TrimEnd("`r", "`n"), $encoding)
+}
+
+Write-XmlFile (Resolve-Path $SrcDir | Join-Path -ChildPath "$Name.xml") $xml $enc

 # --- Модуль объекта ---

@@ -117,6 +140,11 @@ $moduleBsl = @"
 "@

 $modulePath = Join-Path $extDir "ObjectModule.bsl"
+# Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+# чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+# неканоничен (1235 модулей с ним, 766 без). Шаблон берёт переводы строк из
+# самого скрипта, а он в репозитории хранится с LF.
+$moduleBsl = ($moduleBsl -replace "`r`n", "`n") -replace "`n", "`r`n"
 [System.IO.File]::WriteAllText($modulePath, $moduleBsl, $enc)

 Write-Host "[OK] Создан отчёт: $rootFile"
@@ -136,7 +164,7 @@ if ($WithSKD) {

 	$skdMetaXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="2.17">
+<MetaDataObject $xmlnsDecl version="$FormatVersion">
 	<Template uuid="$skdUuid">
 		<Properties>
 			<Name>$skdName</Name>
@@ -153,7 +181,7 @@ if ($WithSKD) {
 </MetaDataObject>
 "@

-	[System.IO.File]::WriteAllText($skdMetaPath, $skdMetaXml, $enc)
+	Write-XmlFile $skdMetaPath $skdMetaXml $enc

 	$skdContent = @"
 <?xml version="1.0" encoding="UTF-8"?>
@@ -173,7 +201,7 @@ if ($WithSKD) {
 "@

 	$skdFilePath = Join-Path $skdExtDir "Template.xml"
-	[System.IO.File]::WriteAllText($skdFilePath, $skdContent, $enc)
+	Write-XmlFile $skdFilePath $skdContent $enc

 	Write-Host "     СКД:     $skdMetaPath"
 	Write-Host "     Тело:    $skdFilePath"
@@ -1,8 +1,8 @@
 #!/usr/bin/env python3
-# erf-init v1.1 — Init 1C external report scaffold
+# erf-init v1.4 — Init 1C external report scaffold
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 """Generates minimal XML source files for a 1C external report."""
-import sys, os, argparse, uuid
+import sys, os, re, argparse, uuid

 def esc_xml(s):
    return s.replace('&','&amp;').replace('<','&lt;').replace('>','&gt;').replace('"','&quot;')
@@ -14,6 +14,22 @@ def write_utf8_bom(path, content):
    with open(path, 'w', encoding='utf-8-sig', newline='') as f:
        f.write(content)

+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    write_utf8_bom(path, text)
+
+
+def format_rank(ver):
+    """"2.20" → 220, "2.9" → 209. Строковое сравнение неверно ("2.9" > "2.17")."""
+    m = re.match(r'^(\d+)\.(\d+)$', ver or '')
+    return int(m.group(1)) * 100 + int(m.group(2)) if m else 0
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -21,6 +37,11 @@ def main():
    parser.add_argument('-Name', dest='Name', required=True)
    parser.add_argument('-Synonym', dest='Synonym', default=None)
    parser.add_argument('-SrcDir', dest='SrcDir', default='src')
+    # Версия формата выгрузки. Своей конфигурации у автономного объекта нет, наследовать
+    # версию неоткуда — поэтому её задают явно. Формы, макеты и справку внутри объекта
+    # навыки берут уже отсюда: их детектор читает version из корня этого файла.
+    parser.add_argument('-FormatVersion', dest='FormatVersion', default='2.17',
+                        choices=['2.17', '2.18', '2.19', '2.20', '2.21'])
    parser.add_argument('-WithSKD', dest='WithSKD', action='store_true')
    args = parser.parse_args()

@@ -33,6 +54,34 @@ def main():
    uuid3 = new_uuid()
    uuid4 = new_uuid()

+    # Объявления пространств имён — одной переменной: места эмиссии её только подставляют.
+    xmlns_decl = (
+        'xmlns="http://v8.1c.ru/8.3/MDClasses"'
+        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
+        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
+        ' xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi"'
+        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
+        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
+        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
+        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
+        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
+        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
+        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
+        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
+        ' xmlns:xen="http://v8.1c.ru/8.3/xcf/enums"'
+        ' xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef"'
+        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
+        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
+        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+    )
+    format_version = args.FormatVersion
+    # 2.21 (8.5) добавила в шапку пространство палитры. Вставляем НА МЕСТО (после lf, перед
+    # style): платформа держит объявления по алфавиту, дописать в конец нельзя.
+    if format_rank(format_version) >= 221:
+        xmlns_decl = xmlns_decl.replace(
+            ' xmlns:style=',
+            ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style=')
+
    # --- Properties ---
    main_dcs_value = ""
    child_objects_content = ""
@@ -45,7 +94,7 @@ def main():
    child_objects_xml = f"<ChildObjects>{child_objects_content}\t\t</ChildObjects>" if child_objects_content else "<ChildObjects/>"

    xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="2.17">
+<MetaDataObject {xmlns_decl} version="{format_version}">
 \t<ExternalReport uuid="{uuid1}">
 \t\t<InternalInfo>
 \t\t\t<xr:ContainedObject>
@@ -90,7 +139,7 @@ def main():
    ext_dir = os.path.join(report_dir, "Ext")
    os.makedirs(ext_dir, exist_ok=True)

-    write_utf8_bom(os.path.join(os.path.abspath(src_dir), f"{name}.xml"), xml)
+    write_xml_file(os.path.join(os.path.abspath(src_dir), f"{name}.xml"), xml)

    # --- Модуль объекта ---
    module_bsl = """\
@@ -107,7 +156,10 @@ def main():
 #КонецОбласти"""

    module_path = os.path.join(ext_dir, "ObjectModule.bsl")
-    write_utf8_bom(module_path, module_bsl)
+    # Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+    # чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+    # неканоничен (1235 модулей с ним, 766 без).
+    write_utf8_bom(module_path, module_bsl.replace('\r\n', '\n').replace('\n', '\r\n'))

    print(f"[OK] Создан отчёт: {root_file}")
    print(f"     Каталог: {report_dir}")
@@ -124,7 +176,7 @@ def main():
        skd_uuid = new_uuid()

        skd_meta_xml = f'''<?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="2.17">
+<MetaDataObject {xmlns_decl} version="{format_version}">
 \t<Template uuid="{skd_uuid}">
 \t\t<Properties>
 \t\t\t<Name>{skd_name}</Name>
@@ -140,7 +192,7 @@ def main():
 \t</Template>
 </MetaDataObject>'''

-        write_utf8_bom(skd_meta_path, skd_meta_xml)
+        write_xml_file(skd_meta_path, skd_meta_xml)

        skd_content = '''<?xml version="1.0" encoding="UTF-8"?>
 <DataCompositionSchema xmlns="http://v8.1c.ru/8.1/data-composition-system/schema"
@@ -158,7 +210,7 @@ def main():
 </DataCompositionSchema>'''

        skd_file_path = os.path.join(skd_ext_dir, "Template.xml")
-        write_utf8_bom(skd_file_path, skd_content)
+        write_xml_file(skd_file_path, skd_content)

        print(f"     СКД:     {skd_meta_path}")
        print(f"     Тело:    {skd_file_path}")
@@ -26,7 +26,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-validate/scripts/epf-validate.ps1" -ObjectPath "src/МойОтчёт"
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/../epf-validate/scripts/epf-validate.ps1" -ObjectPath "src/МойОтчёт/МойОтчёт.xml"
+python ".agents/skills/epf-validate/scripts/epf-validate.py" -ObjectPath "src/МойОтчёт"
+python ".agents/skills/epf-validate/scripts/epf-validate.py" -ObjectPath "src/МойОтчёт/МойОтчёт.xml"
 ```

@@ -32,7 +32,7 @@ allowed-tools:
 ## Команда

 ```powershell
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/form-add.ps1" -ObjectPath "<ObjectPath>" -FormName "<FormName>" [-Purpose "<Purpose>"] [-Synonym "<Synonym>"] [-SetDefault]
+python ".agents/skills/form-add/scripts/form-add.py" -ObjectPath "<ObjectPath>" -FormName "<FormName>" [-Purpose "<Purpose>"] [-Synonym "<Synonym>"] [-SetDefault]
 ```

 ## Purpose — назначение формы
@@ -1,4 +1,4 @@
-# form-add v1.11 — Add managed form to 1C config object
+# form-add v1.23 — Add managed form to 1C config object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 param(
 	[Parameter(Mandatory)]
@@ -154,9 +154,20 @@ function Assert-EditAllowed([string]$targetPath, [string]$require) {
 function Detect-FormatVersion([string]$dir) {
 	$d = $dir
 	while ($d) {
+		# Автономная внешняя обработка/отчёт: своего Configuration.xml у неё нет, версию несёт
+		# корень самой обработки. Без этого форма и макет внутри обработки 2.21 писались бы 2.17.
+		$extPath = "$d.xml"
+		if (Test-Path $extPath) {
+			$extText = [System.IO.File]::ReadAllText($extPath, [System.Text.Encoding]::UTF8)
+			$extHead = $extText.Substring(0, [Math]::Min(2000, $extText.Length))
+			if ($extHead -match '<(ExternalDataProcessor|ExternalReport)[ >]' -and $extHead -match '<MetaDataObject[^>]+version="(\d+\.\d+)"') { return $Matches[1] }
+		}
 		$cfgPath = Join-Path $d "Configuration.xml"
 		if (Test-Path $cfgPath) {
-			$head = [System.IO.File]::ReadAllText($cfgPath, [System.Text.Encoding]::UTF8).Substring(0, [Math]::Min(2000, (Get-Item $cfgPath).Length))
+			$cfgText = [System.IO.File]::ReadAllText($cfgPath, [System.Text.Encoding]::UTF8)
+			# Длину среза берём по СТРОКЕ, а не по размеру файла: размер в БАЙТАХ, Substring считает
+			# СИМВОЛЫ, и на кириллице байт больше — короткий Configuration.xml ронял навык исключением.
+			$head = $cfgText.Substring(0, [Math]::Min(2000, $cfgText.Length))
 			if ($head -match '<MetaDataObject[^>]+version="(\d+\.\d+)"') { return $Matches[1] }
 		}
 		$parent = Split-Path $d -Parent
@@ -166,6 +177,13 @@ function Detect-FormatVersion([string]$dir) {
 	return "2.17"
 }

+# Версия формата как число для сравнений: "2.20" → 220, "2.9" → 209.
+# Строковое сравнение здесь неверно ("2.9" > "2.17" лексикографически) — известная ловушка.
+function Get-FormatRank([string]$ver) {
+	if ($ver -match '^(\d+)\.(\d+)$') { return [int]$Matches[1] * 100 + [int]$Matches[2] }
+	return 0
+}
+
 # --- Фаза 1: Определение типа объекта ---

 # Resolve ObjectPath (directory → .xml)
@@ -187,7 +205,26 @@ if (-not (Test-Path $ObjectPath)) {

 $objectXmlFull = Resolve-Path $ObjectPath
 Assert-EditAllowed $objectXmlFull.Path 'editable'
-$script:formatVersion = Detect-FormatVersion (Split-Path $objectXmlFull.Path -Parent)
+# Версию берём прежде всего из корня самого объекта — он её несёт всегда, а у автономной
+# внешней обработки/отчёта подниматься к Configuration.xml просто некуда.
+$script:formatVersion = $null
+$objHead = [System.IO.File]::ReadAllText($objectXmlFull.Path, [System.Text.Encoding]::UTF8)
+$objHead = $objHead.Substring(0, [Math]::Min(2000, $objHead.Length))
+if ($objHead -match '<MetaDataObject[^>]+version="(\d+\.\d+)"') { $script:formatVersion = $Matches[1] }
+if (-not $script:formatVersion) { $script:formatVersion = Detect-FormatVersion (Split-Path $objectXmlFull.Path -Parent) }
+
+# Объявления пространств имён — одной переменной на корень: места эмиссии их только
+# интерполируют. Правки шапки (как xmlns:pal в формате 2.21) делаются здесь, в одном месте.
+$script:xmlnsDecl = 'xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+$script:formNsDecl = 'xmlns="http://v8.1c.ru/8.3/xcf/logform" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:dcscor="http://v8.1c.ru/8.1/data-composition-system/core" xmlns:dcsset="http://v8.1c.ru/8.1/data-composition-system/settings" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+
+# 2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+# Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+# дописать в конец нельзя.
+if ((Get-FormatRank $script:formatVersion) -ge 221) {
+	$script:xmlnsDecl = $script:xmlnsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+	$script:formNsDecl = $script:formNsDecl -replace ' xmlns:style=', ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+}

 $xmlDoc = New-Object System.Xml.XmlDocument
 $xmlDoc.PreserveWhitespace = $true
@@ -310,9 +347,16 @@ if ($objectType -in $processorLikeTypes) {
 	$extPresentationLine = "`n`t`t`t<ExtendedPresentation/>"
 }

+# Использование в режиме совместимости интерфейса — свойство формата 2.21 (8.5),
+# сразу после UsePurposes (проверено по выгрузке 8.5, до ExtendedPresentation).
+$useInIfcLine = ""
+if ((Get-FormatRank $script:formatVersion) -ge 221) {
+	$useInIfcLine = "`n`t`t`t<UseInInterfaceCompatibilityMode>Any</UseInInterfaceCompatibilityMode>"
+}
+
 $formMetaXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xen="http://v8.1c.ru/8.3/xcf/enums" xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="$($script:formatVersion)">
+<MetaDataObject $($script:xmlnsDecl) version="$($script:formatVersion)">
 	<Form uuid="$formUuid">
 		<Properties>
 			<Name>$FormName</Name>
@@ -328,20 +372,29 @@ $formMetaXml = @"
 			<UsePurposes>
 				<v8:Value xsi:type="app:ApplicationUsePurpose">PlatformApplication</v8:Value>
 				<v8:Value xsi:type="app:ApplicationUsePurpose">MobilePlatformApplication</v8:Value>
-			</UsePurposes>$extPresentationLine
+			</UsePurposes>$useInIfcLine$extPresentationLine
 		</Properties>
 	</Form>
 </MetaDataObject>
 "@

-[System.IO.File]::WriteAllText($formMetaPath, $formMetaXml, $encBom)
+# XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+#
+# Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+# копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+#
+# Модуль .bsl сюда НЕ идёт — он пишется отдельно.
+function Write-XmlFile([string]$path, [string]$text, $encoding) {
+	$t = ($text -replace "`r`n", "`n") -replace "`n", "`r`n"
+	[System.IO.File]::WriteAllText($path, $t.TrimEnd("`r", "`n"), $encoding)
+}
+
+Write-XmlFile $formMetaPath $formMetaXml $encBom

 # --- 3b. Form.xml ---

 $formXmlPath = Join-Path $formExtDir "Form.xml"

-$formNsDecl = 'xmlns="http://v8.1c.ru/8.3/xcf/logform" xmlns:app="http://v8.1c.ru/8.2/managed-application/core" xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config" xmlns:dcscor="http://v8.1c.ru/8.1/data-composition-system/core" xmlns:dcsset="http://v8.1c.ru/8.1/data-composition-system/settings" xmlns:ent="http://v8.1c.ru/8.1/data/enterprise" xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform" xmlns:style="http://v8.1c.ru/8.1/data/ui/style" xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system" xmlns:v8="http://v8.1c.ru/8.1/data/core" xmlns:v8ui="http://v8.1c.ru/8.1/data/ui" xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web" xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows" xmlns:xr="http://v8.1c.ru/8.3/xcf/readable" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
-
 if ($Purpose -eq "List" -or $Purpose -eq "Choice") {
 	# Динамический список
 	# MainTable: тип.имя
@@ -349,7 +402,7 @@ if ($Purpose -eq "List" -or $Purpose -eq "Choice") {

 	$formXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<Form $formNsDecl version="$($script:formatVersion)">
+<Form $($script:formNsDecl) version="$($script:formatVersion)">
 	<AutoCommandBar name="ФормаКоманднаяПанель" id="-1">
 		<Autofill>true</Autofill>
 	</AutoCommandBar>
@@ -374,7 +427,7 @@ if ($Purpose -eq "List" -or $Purpose -eq "Choice") {

 	$formXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<Form $formNsDecl version="$($script:formatVersion)">
+<Form $($script:formNsDecl) version="$($script:formatVersion)">
 	<AutoCommandBar name="ФормаКоманднаяПанель" id="-1">
 		<Autofill>true</Autofill>
 	</AutoCommandBar>
@@ -421,7 +474,7 @@ if ($Purpose -eq "List" -or $Purpose -eq "Choice") {

 	$formXml = @"
 <?xml version="1.0" encoding="UTF-8"?>
-<Form $formNsDecl version="$($script:formatVersion)">
+<Form $($script:formNsDecl) version="$($script:formatVersion)">
 	<AutoCommandBar name="ФормаКоманднаяПанель" id="-1">
 		<Autofill>true</Autofill>
 	</AutoCommandBar>
@@ -441,7 +494,7 @@ if ($Purpose -eq "List" -or $Purpose -eq "Choice") {
 if (Test-Path $formXmlPath) {
 	Write-Host "[SKIP] Form.xml already exists: $formXmlPath — not overwriting"
 } else {
-	[System.IO.File]::WriteAllText($formXmlPath, $formXml, $encBom)
+	Write-XmlFile $formXmlPath $formXml $encBom
 }

 # --- 3c. Module.bsl ---
@@ -473,6 +526,11 @@ $moduleBsl = @"
 if (Test-Path $modulePath) {
 	Write-Host "[SKIP] Module.bsl already exists: $modulePath — not overwriting"
 } else {
+	# Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+	# чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+	# неканоничен (1235 модулей с ним, 766 без). Шаблон берёт переводы строк из
+	# самого скрипта, а он в репозитории хранится с LF.
+	$moduleBsl = ($moduleBsl -replace "`r`n", "`n") -replace "`n", "`r`n"
 	[System.IO.File]::WriteAllText($modulePath, $moduleBsl, $encBom)
 }

@@ -582,12 +640,27 @@ if ($SetDefault -or $isFirstFormForPurpose) {
 $settings = New-Object System.Xml.XmlWriterSettings
 $settings.Encoding = $encBom
 $settings.Indent = $false
+$settings.NewLineHandling = [System.Xml.NewLineHandling]::None

-$stream = New-Object System.IO.FileStream($objectXmlFull.Path, [System.IO.FileMode]::Create)
-$writer = [System.Xml.XmlWriter]::Create($stream, $settings)
+# Через MemoryStream, а не прямо в файл: нужен шаг пост-обработки строки.
+$memStream = New-Object System.IO.MemoryStream
+$writer = [System.Xml.XmlWriter]::Create($memStream, $settings)
 $xmlDoc.Save($writer)
-$writer.Close()
-$stream.Close()
+$writer.Flush(); $writer.Close()
+
+$xmlText = [System.Text.Encoding]::UTF8.GetString($memStream.ToArray())
+$memStream.Close()
+if ($xmlText.Length -gt 0 -and $xmlText[0] -eq [char]0xFEFF) { $xmlText = $xmlText.Substring(1) }
+$xmlText = $xmlText.Replace('encoding="utf-8"', 'encoding="UTF-8"')
+# Пустой элемент: XmlWriter отдаёт `<a />`, Конфигуратор пишет `<a/>`. Внутри
+# CDATA/комментария ` />` может быть содержимым (там `>` не экранируется),
+# поэтому они идут первыми ветками альтернации и возвращаются как есть.
+$xmlText = [regex]::Replace($xmlText, '(?s)<!\[CDATA\[.*?\]\]>|<!--.*?-->|(?<=\S) />', { param($m) if ($m.Value -eq ' />') { '/>' } else { $m.Value } })
+# Целевой перевод строки: стиль файла-назначения — правка наследует его (#44/#46/#47),
+# новый файл получает канон выгрузки CRLF. Зеркало _detect_xml_style в py-порту.
+$targetEol = if ((Test-Path -LiteralPath $objectXmlFull.Path) -and ([System.IO.File]::ReadAllText($objectXmlFull.Path) -notmatch "`r`n")) { "`n" } else { "`r`n" }
+$xmlText = ($xmlText -replace "`r`n", "`n") -replace "`n", $targetEol
+[System.IO.File]::WriteAllText($objectXmlFull.Path, $xmlText, $encBom)

 # --- Фаза 5: Вывод ---

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# form-add v1.11 — Add managed form to 1C config object
+# form-add v1.23 — Add managed form to 1C config object
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills

 import argparse
@@ -196,6 +196,16 @@ NSMAP = {

 def detect_format_version(d):
    while d:
+        # Автономная внешняя обработка/отчёт: своего Configuration.xml у неё нет, версию несёт
+        # корень самой обработки. Без этого форма и макет внутри обработки 2.21 писались бы 2.17.
+        ext_path = d + ".xml"
+        if os.path.isfile(ext_path):
+            with open(ext_path, "r", encoding="utf-8-sig") as f:
+                ext_head = f.read(2000)
+            if re.search(r'<(ExternalDataProcessor|ExternalReport)[ >]', ext_head):
+                m = re.search(r'<MetaDataObject[^>]+version="(\d+\.\d+)"', ext_head)
+                if m:
+                    return m.group(1)
        cfg_path = os.path.join(d, "Configuration.xml")
        if os.path.isfile(cfg_path):
            with open(cfg_path, "r", encoding="utf-8-sig") as f:
@@ -210,6 +220,12 @@ def detect_format_version(d):
    return "2.17"


+def format_rank(ver):
+    """"2.20" → 220, "2.9" → 209. Строковое сравнение неверно ("2.9" > "2.17")."""
+    m = re.match(r'^(\d+)\.(\d+)$', ver or '')
+    return int(m.group(1)) * 100 + int(m.group(2)) if m else 0
+
+
 def _detect_xml_style(path):
    """Стиль существующего файла для round-trip-сохранения: BOM / EOL / регистр encoding /
    финальный перенос. None → файл новый (сохранить текущее поведение)."""
@@ -227,21 +243,22 @@ def _detect_xml_style(path):


 def _finalize_xml_bytes(xml_bytes, style):
-    """Привести сериализованные байты к стилю оригинала (или к дефолту, если style is None)."""
-    enc_decl = style["enc"] if style else "utf-8"
+    """Привести байты к стилю оригинала; для НОВОГО файла (style is None) — к канону
+    выгрузки Конфигуратора: encoding="UTF-8", CRLF в разделителях, без перевода в конце."""
+    enc_decl = style["enc"] if style else "UTF-8"
    xml_bytes = xml_bytes.replace(
        b"<?xml version='1.0' encoding='UTF-8'?>",
        b'<?xml version="1.0" encoding="' + enc_decl.encode("ascii") + b'"?>')
    # Канонизировать переносы к LF (убирает &#13; от \r в tail'ах)
    xml_bytes = (xml_bytes.replace(b"&#13;\n", b"\n").replace(b"&#13;", b"")
                 .replace(b"\r\n", b"\n").replace(b"\r", b"\n"))
-    # Финальный перенос — как в оригинале (новый файл → есть)
-    want_final_nl = style["final_nl"] if style else True
+    # Финальный перенос — как в оригинале (новый файл → нет, канон #57)
+    want_final_nl = style["final_nl"] if style else False
    xml_bytes = xml_bytes.rstrip(b"\n")
    if want_final_nl:
        xml_bytes += b"\n"
-    # EOL — как в оригинале (новый файл → LF, текущее поведение)
-    if style and style["crlf"]:
+    # EOL — как в оригинале (новый файл → CRLF, канон #57)
+    if (style["crlf"] if style else True):
        xml_bytes = xml_bytes.replace(b"\n", b"\r\n")
    return xml_bytes

@@ -259,10 +276,24 @@ def save_xml_with_bom(tree, path):

 def write_text_with_bom(path, text):
    """Write text to file with UTF-8 BOM."""
-    with open(path, "w", encoding="utf-8-sig") as f:
+    # newline="" => без трансляции: в текстовом режиме Python на Windows превратил
+    # бы \n в \r\n, а на macOS оставил \n — вывод зависел бы от ОС.
+    with open(path, "w", encoding="utf-8-sig", newline="") as f:
        f.write(text)


+def write_xml_file(path, content):
+    """XML в каноне выгрузки Конфигуратора: CRLF в разделителях, без перевода в конце.
+
+    Копия этой функции есть в каждом навыке-эмиттере (навыки автономны). Держать
+    копии одинаковыми — сознательно: разошедшиеся копии сводят на нет весь смысл.
+
+    Модуль .bsl сюда НЕ идёт — он пишется отдельно.
+    """
+    text = content.replace('\r\n', '\n').replace('\n', '\r\n').rstrip('\r\n')
+    write_text_with_bom(path, text)
+
+
 def main():
    sys.stdout.reconfigure(encoding="utf-8")
    sys.stderr.reconfigure(encoding="utf-8")
@@ -299,7 +330,64 @@ def main():

    object_xml_full = os.path.abspath(object_path)
    assert_edit_allowed(object_xml_full, "editable")
-    format_version = detect_format_version(os.path.dirname(object_xml_full))
+    # Версию берём прежде всего из корня самого объекта — он её несёт всегда, а у автономной
+    # внешней обработки/отчёта подниматься к Configuration.xml просто некуда.
+    format_version = None
+    with open(object_xml_full, "r", encoding="utf-8-sig") as f:
+        obj_head = f.read(2000)
+    m_ver = re.search(r'<MetaDataObject[^>]+version="(\d+\.\d+)"', obj_head)
+    if m_ver:
+        format_version = m_ver.group(1)
+    if not format_version:
+        format_version = detect_format_version(os.path.dirname(object_xml_full))
+
+    # Объявления пространств имён — одной переменной на корень: места эмиссии их только
+    # подставляют. Правки шапки (как xmlns:pal в формате 2.21) делаются здесь, в одном месте.
+    xmlns_decl = (
+        'xmlns="http://v8.1c.ru/8.3/MDClasses"'
+        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
+        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
+        ' xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi"'
+        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
+        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
+        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
+        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
+        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
+        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
+        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
+        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
+        ' xmlns:xen="http://v8.1c.ru/8.3/xcf/enums"'
+        ' xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef"'
+        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
+        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
+        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+    )
+    form_ns_decl = (
+        'xmlns="http://v8.1c.ru/8.3/xcf/logform"'
+        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
+        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
+        ' xmlns:dcscor="http://v8.1c.ru/8.1/data-composition-system/core"'
+        ' xmlns:dcsset="http://v8.1c.ru/8.1/data-composition-system/settings"'
+        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
+        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
+        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
+        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
+        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
+        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
+        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
+        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
+        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
+        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
+        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+    )
+
+    # 2.21 (8.5) добавила в шапку пространство палитры — ради <Color> у значений перечисления.
+    # Вставляем НА МЕСТО (после lf, перед style): платформа держит объявления по алфавиту,
+    # дописать в конец нельзя.
+    if format_rank(format_version) >= 221:
+        pal = ' xmlns:pal="http://v8.1c.ru/8.1/data/ui/colors/palette" xmlns:style='
+        xmlns_decl = xmlns_decl.replace(' xmlns:style=', pal)
+        form_ns_decl = form_ns_decl.replace(' xmlns:style=', pal)

    parser_xml = etree.XMLParser(remove_blank_text=False)
    tree = etree.parse(object_xml_full, parser_xml)
@@ -388,24 +476,7 @@ def main():

    form_meta_xml = (
        '<?xml version="1.0" encoding="UTF-8"?>\n'
-        '<MetaDataObject xmlns="http://v8.1c.ru/8.3/MDClasses"'
-        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
-        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
-        ' xmlns:cmi="http://v8.1c.ru/8.2/managed-application/cmi"'
-        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
-        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
-        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
-        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
-        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
-        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
-        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
-        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
-        ' xmlns:xen="http://v8.1c.ru/8.3/xcf/enums"'
-        ' xmlns:xpr="http://v8.1c.ru/8.3/xcf/predef"'
-        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
-        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
-        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
-        f' version="{format_version}">\n'
+        f'<MetaDataObject {xmlns_decl} version="{format_version}">\n'
        f'\t<Form uuid="{form_uuid}">\n'
        '\t\t<Properties>\n'
        f'\t\t\t<Name>{form_name}</Name>\n'
@@ -422,37 +493,22 @@ def main():
        '\t\t\t\t<v8:Value xsi:type="app:ApplicationUsePurpose">PlatformApplication</v8:Value>\n'
        '\t\t\t\t<v8:Value xsi:type="app:ApplicationUsePurpose">MobilePlatformApplication</v8:Value>\n'
        '\t\t\t</UsePurposes>\n'
+        # Использование в режиме совместимости интерфейса — свойство формата 2.21 (8.5),
+        # сразу после UsePurposes (проверено по выгрузке 8.5, до ExtendedPresentation).
+        + ('\t\t\t<UseInInterfaceCompatibilityMode>Any</UseInInterfaceCompatibilityMode>\n'
+           if format_rank(format_version) >= 221 else '')
        + ('\t\t\t<ExtendedPresentation/>\n' if object_type in processor_like_types else '')
        + '\t\t</Properties>\n'
        '\t</Form>\n'
        '</MetaDataObject>'
    )

-    write_text_with_bom(form_meta_path, form_meta_xml)
+    write_xml_file(form_meta_path, form_meta_xml)

    # --- 3b. Form.xml ---

    form_xml_path = os.path.join(form_ext_dir, "Form.xml")

-    form_ns_decl = (
-        'xmlns="http://v8.1c.ru/8.3/xcf/logform"'
-        ' xmlns:app="http://v8.1c.ru/8.2/managed-application/core"'
-        ' xmlns:cfg="http://v8.1c.ru/8.1/data/enterprise/current-config"'
-        ' xmlns:dcscor="http://v8.1c.ru/8.1/data-composition-system/core"'
-        ' xmlns:dcsset="http://v8.1c.ru/8.1/data-composition-system/settings"'
-        ' xmlns:ent="http://v8.1c.ru/8.1/data/enterprise"'
-        ' xmlns:lf="http://v8.1c.ru/8.2/managed-application/logform"'
-        ' xmlns:style="http://v8.1c.ru/8.1/data/ui/style"'
-        ' xmlns:sys="http://v8.1c.ru/8.1/data/ui/fonts/system"'
-        ' xmlns:v8="http://v8.1c.ru/8.1/data/core"'
-        ' xmlns:v8ui="http://v8.1c.ru/8.1/data/ui"'
-        ' xmlns:web="http://v8.1c.ru/8.1/data/ui/colors/web"'
-        ' xmlns:win="http://v8.1c.ru/8.1/data/ui/colors/windows"'
-        ' xmlns:xr="http://v8.1c.ru/8.3/xcf/readable"'
-        ' xmlns:xs="http://www.w3.org/2001/XMLSchema"'
-        ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
-    )
-
    if purpose in ("List", "Choice"):
        # Dynamic list
        main_table = f"{object_type}.{object_name}"
@@ -551,7 +607,7 @@ def main():
    if os.path.exists(form_xml_path):
        print(f"[SKIP] Form.xml already exists: {form_xml_path} — not overwriting")
    else:
-        write_text_with_bom(form_xml_path, form_xml)
+        write_xml_file(form_xml_path, form_xml)

    # --- 3c. Module.bsl ---

@@ -582,7 +638,10 @@ def main():
    if os.path.exists(module_path):
        print(f"[SKIP] Module.bsl already exists: {module_path} — not overwriting")
    else:
-        write_text_with_bom(module_path, module_bsl)
+        # Модуль пишем в каноне платформы: CRLF в разделителях строк (корпус: 2643 CRLF,
+        # чисто-LF 0 из 3001). Хвостовой перевод НЕ навязываем — у платформы он
+        # неканоничен (1235 модулей с ним, 766 без).
+        write_text_with_bom(module_path, module_bsl.replace('\r\n', '\n').replace('\n', '\r\n'))

    # --- Phase 4: Register in parent object ---

@@ -29,10 +29,10 @@ allowed-tools:

 ```powershell
 # Режим JSON DSL
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/form-compile.ps1" -JsonPath "<json>" -OutputPath "<Form.xml>"
+python ".agents/skills/form-compile/scripts/form-compile.py" -JsonPath "<json>" -OutputPath "<Form.xml>"

 # Режим from-object (объект и purpose выводятся из OutputPath; Document и Catalog)
-powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/form-compile.ps1" -FromObject -OutputPath "<.../TypePlural/ObjectName/Forms/FormName/Ext/Form.xml>"
+python ".agents/skills/form-compile/scripts/form-compile.py" -FromObject -OutputPath "<.../TypePlural/ObjectName/Forms/FormName/Ext/Form.xml>"
 ```

 ## JSON DSL — справка
--- a/Show More
+++ b/Show More