@elvatis_com/openclaw-ispconfig 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Elvatis - Emre Kohler
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,138 @@
+# @elvatis_com/openclaw-ispconfig
+
+OpenClaw plugin to manage ISPConfig via the Remote JSON API.
+
+## Features
+
+- Session-based API client with auto-reconnect
+- 31 tools for read, write, and one-command provisioning
+- Safety guards via `readOnly` and `allowedOperations`
+- Live integration tests against a real ISPConfig host (read-only)
+
+## ISPConfig API format
+
+This plugin uses the JSON endpoint format:
+
+- URL: `https://server:8080/remote/json.php?method_name`
+- Method is passed as query string, not in JSON body
+- Body format:
+  - login: `{ "username": "...", "password": "..." }`
+  - normal calls: `{ "session_id": "...", ...params }`
+  - logout: `{ "session_id": "..." }`
+
+## Installation
+
+### ClawHub
+
+```bash
+clawhub install openclaw-ispconfig
+```
+
+### npm
+
+```bash
+npm install @elvatis_com/openclaw-ispconfig
+```
+
+## ISPConfig setup
+
+1. In ISPConfig, create a Remote User.
+2. Grant required API permissions.
+3. Copy endpoint URL and credentials.
+4. Configure plugin in OpenClaw.
+
+## Configuration
+
+`openclaw.plugin.json` config keys:
+
+- `apiUrl` (required): ISPConfig JSON API URL
+- `username` (required): remote user
+- `password` (required, secret): remote password
+- `serverId` (default `1`): default server id
+- `defaultServerIp` (optional): fallback IP for provisioning DNS A record
+- `readOnly` (default `false`): block write tools
+- `allowedOperations` (default `[]`): whitelist of tool names
+- `verifySsl` (default `true`): TLS certificate verification
+
+## Tools
+
+### Read tools
+
+- `isp_methods_list` params: none
+- `isp_system_info` params: none
+- `isp_client_list` params: optional filter fields
+- `isp_client_get` params: `client_id`
+- `isp_sites_list` params: optional filters accepted by `sites_web_domain_get`
+- `isp_site_get` params: `primary_id` (or `site_id`, `domain_id`)
+- `isp_domains_list` params: none
+- `isp_dns_zone_list` params: user-related filter params
+- `isp_dns_record_list` params: `zone_id`
+- `isp_mail_domain_list` params: optional filters
+- `isp_mail_user_list` params: optional filters
+- `isp_db_list` params: user-related filters
+- `isp_ssl_status` params: none
+- `isp_quota_check` params: `client_id`
+- `isp_backup_list` params: none (returns skipped if API method unavailable)
+- `isp_cron_list` params: optional filters
+
+### Write tools
+
+- `isp_client_add` params: ISPConfig `client_add` payload
+- `isp_site_add` params: ISPConfig `sites_web_domain_add` payload
+- `isp_domain_add` params: alias for `isp_site_add`
+- `isp_dns_zone_add` params: ISPConfig `dns_zone_add` payload
+- `isp_dns_record_add` params: include `type` (`A`, `AAAA`, `MX`, `TXT`, `CNAME`) and matching payload
+- `isp_dns_record_delete` params: include `type` and matching delete payload
+- `isp_mail_domain_add` params: ISPConfig `mail_domain_add` payload
+- `isp_mail_user_add` params: ISPConfig `mail_user_add` payload
+- `isp_mail_user_delete` params: ISPConfig `mail_user_delete` payload
+- `isp_db_add` params: ISPConfig `sites_database_add` payload
+- `isp_db_user_add` params: ISPConfig `sites_database_user_add` payload
+- `isp_shell_user_add` params: ISPConfig `sites_shell_user_add` payload
+- `isp_ftp_user_add` params: ISPConfig `sites_ftp_user_add` payload
+- `isp_cron_add` params: ISPConfig `sites_cron_add` payload
+
+### Provisioning tool
+
+- `isp_provision_site`
+- Required params:
+  - `domain`
+  - `clientName`
+  - `clientEmail`
+- Optional params:
+  - `serverIp`
+  - `createMail` (default `true`)
+  - `createDb` (default `true`)
+  - `serverId` (default from config)
+
+Workflow:
+
+1. Create client
+2. Create site with SSL and Let's Encrypt enabled
+3. Create DNS zone
+4. Add DNS records (`A`, `CNAME`, SPF TXT, DMARC TXT)
+5. Optionally create mail domain and `info@` + `admin@` mailboxes
+6. Optionally create DB user and database
+7. Ensure SSL flags are enabled on the site
+
+## Safety
+
+- `readOnly=true` blocks all write and provisioning tools
+- `allowedOperations=[...]` allows only named tools
+
+## Development
+
+```bash
+npm run build
+npm test
+```
+
+For live tests, provide environment variables:
+
+- `ISPCONFIG_API_URL`
+- `ISPCONFIG_USER`
+- `ISPCONFIG_PASS`
+
+## License
+
+MIT

package/dist/client.d.ts

@@ -0,0 +1,16 @@
+import { ISPConfigPluginConfig, JsonMap } from "./types";
+export declare class ISPConfigClient {
+    private readonly config;
+    private readonly url;
+    private readonly timeoutMs;
+    private readonly verifySsl;
+    private sessionId;
+    private isLoggingIn;
+    constructor(config: ISPConfigPluginConfig);
+    login(): Promise<string>;
+    logout(): Promise<unknown>;
+    call<T>(method: string, params?: JsonMap): Promise<T>;
+    private shouldRetrySession;
+    private rawCall;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,EAAwB,qBAAqB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAE/E,qBAAa,eAAe;IAOP,OAAO,CAAC,QAAQ,CAAC,MAAM;IAN1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAS;gBAEQ,MAAM,EAAE,qBAAqB;IAMpD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IA2BxB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAY1B,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,OAAY,GAAG,OAAO,CAAC,CAAC,CAAC;IAetE,OAAO,CAAC,kBAAkB;YAWZ,OAAO;CA0FtB"}

package/dist/client.js

@@ -0,0 +1,162 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ISPConfigClient = void 0;
+const node_http_1 = __importDefault(require("node:http"));
+const node_https_1 = __importDefault(require("node:https"));
+const node_url_1 = require("node:url");
+const errors_1 = require("./errors");
+class ISPConfigClient {
+    config;
+    url;
+    timeoutMs;
+    verifySsl;
+    sessionId = null;
+    isLoggingIn = false;
+    constructor(config) {
+        this.config = config;
+        this.url = new node_url_1.URL(config.apiUrl);
+        this.timeoutMs = config.timeoutMs ?? 20_000;
+        this.verifySsl = config.verifySsl ?? true;
+    }
+    async login() {
+        if (this.sessionId) {
+            return this.sessionId;
+        }
+        if (this.isLoggingIn) {
+            await new Promise((resolve) => setTimeout(resolve, 150));
+            return this.login();
+        }
+        this.isLoggingIn = true;
+        try {
+            const res = await this.rawCall("login", {
+                username: this.config.username,
+                password: this.config.password,
+            }, true);
+            if (!res || typeof res !== "string") {
+                throw new errors_1.ISPConfigError("auth_error", "ISPConfig login failed: no session_id returned");
+            }
+            this.sessionId = res;
+            return this.sessionId;
+        }
+        finally {
+            this.isLoggingIn = false;
+        }
+    }
+    async logout() {
+        if (!this.sessionId) {
+            return { ok: true, message: "No active session" };
+        }
+        try {
+            return await this.rawCall("logout", { session_id: this.sessionId }, true);
+        }
+        finally {
+            this.sessionId = null;
+        }
+    }
+    async call(method, params = {}) {
+        const sessionId = await this.login();
+        try {
+            return await this.rawCall(method, { session_id: sessionId, ...params }, true);
+        }
+        catch (error) {
+            if (!this.shouldRetrySession(error)) {
+                throw error;
+            }
+            this.sessionId = null;
+            const refreshed = await this.login();
+            return this.rawCall(method, { session_id: refreshed, ...params }, true);
+        }
+    }
+    shouldRetrySession(error) {
+        if (error instanceof errors_1.ISPConfigError) {
+            return error.code === "auth_error" && error.retryable;
+        }
+        if (!(error instanceof Error)) {
+            return false;
+        }
+        const msg = error.message.toLowerCase();
+        return msg.includes("session") || msg.includes("invalid") || msg.includes("expired") || msg.includes("auth");
+    }
+    async rawCall(method, body, unwrapEnvelope) {
+        const methodUrl = new node_url_1.URL(this.url.toString());
+        methodUrl.search = method;
+        const payload = JSON.stringify(body);
+        const protocol = methodUrl.protocol === "https:" ? node_https_1.default : node_http_1.default;
+        const requestOptions = {
+            method: "POST",
+            hostname: methodUrl.hostname,
+            port: methodUrl.port,
+            path: `${methodUrl.pathname}${methodUrl.search}`,
+            headers: {
+                "content-type": "application/json",
+                "content-length": Buffer.byteLength(payload),
+            },
+            timeout: this.timeoutMs,
+            rejectUnauthorized: this.verifySsl,
+        };
+        const raw = await new Promise((resolve, reject) => {
+            const req = protocol.request(requestOptions, (res) => {
+                const chunks = [];
+                res.on("data", (chunk) => chunks.push(chunk));
+                res.on("end", () => {
+                    const txt = Buffer.concat(chunks).toString("utf8");
+                    const status = res.statusCode ?? 500;
+                    if (status >= 400) {
+                        const code = status === 401 ? "auth_error"
+                            : status === 403 ? "permission_denied"
+                                : "api_error";
+                        reject(new errors_1.ISPConfigError(code, `ISPConfig HTTP ${status}: ${txt}`, {
+                            statusCode: status,
+                            retryable: status >= 500 || status === 401,
+                        }));
+                        return;
+                    }
+                    resolve(txt);
+                });
+            });
+            req.on("timeout", () => {
+                req.destroy(new errors_1.ISPConfigError("network_error", `ISPConfig request timeout after ${this.timeoutMs}ms`, { retryable: true }));
+            });
+            req.on("error", (err) => {
+                if (err instanceof errors_1.ISPConfigError) {
+                    reject(err);
+                }
+                else {
+                    reject(new errors_1.ISPConfigError("network_error", err.message, {
+                        retryable: true,
+                        cause: err,
+                    }));
+                }
+            });
+            req.write(payload);
+            req.end();
+        });
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            throw new errors_1.ISPConfigError("parse_error", `ISPConfig returned non-JSON response: ${raw}`);
+        }
+        if (!unwrapEnvelope) {
+            return parsed;
+        }
+        const envelope = parsed;
+        if (envelope.code && envelope.code !== "ok") {
+            const msg = `ISPConfig API ${envelope.code}: ${envelope.message ?? "Unknown error"}`;
+            const errorCode = (0, errors_1.classifyApiMessage)(msg);
+            throw new errors_1.ISPConfigError(errorCode, msg, {
+                retryable: errorCode === "auth_error",
+            });
+        }
+        if (Object.prototype.hasOwnProperty.call(envelope, "response")) {
+            return envelope.response;
+        }
+        return parsed;
+    }
+}
+exports.ISPConfigClient = ISPConfigClient;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA6B;AAC7B,4DAA+B;AAC/B,uCAA+B;AAC/B,qCAA8D;AAG9D,MAAa,eAAe;IAOU;IANnB,GAAG,CAAM;IACT,SAAS,CAAS;IAClB,SAAS,CAAU;IAC5B,SAAS,GAAkB,IAAI,CAAC;IAChC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAoC,MAA6B;QAA7B,WAAM,GAAN,MAAM,CAAuB;QAC/D,IAAI,CAAC,GAAG,GAAG,IAAI,cAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAS,OAAO,EAAE;gBAC9C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAC/B,EAAE,IAAI,CAAC,CAAC;YAET,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,uBAAc,CAAC,YAAY,EAAE,gDAAgD,CAAC,CAAC;YAC3F,CAAC;YAED,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAU,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,SAAkB,EAAE;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,KAAc;QACvC,IAAI,KAAK,YAAY,uBAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/G,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAa,EAAE,cAAuB;QAC7E,MAAM,SAAS,GAAG,IAAI,cAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAK,CAAC,CAAC,CAAC,mBAAI,CAAC;QAEhE,MAAM,cAAc,GAAyB;YAC3C,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE;YAChD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;aAC7C;YACD,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,kBAAkB,EAAE,IAAI,CAAC,SAAS;SACnC,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACnD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;oBACrC,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;wBAClB,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY;4BACxC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB;gCACtC,CAAC,CAAC,WAAW,CAAC;wBAChB,MAAM,CAAC,IAAI,uBAAc,CAAC,IAAI,EAAE,kBAAkB,MAAM,KAAK,GAAG,EAAE,EAAE;4BAClE,UAAU,EAAE,MAAM;4BAClB,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG;yBAC3C,CAAC,CAAC,CAAC;wBACJ,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,CAAC,IAAI,uBAAc,CAAC,eAAe,EAC5C,mCAAmC,IAAI,CAAC,SAAS,IAAI,EACrD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,IAAI,GAAG,YAAY,uBAAc,EAAE,CAAC;oBAClC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,uBAAc,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE;wBACtD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,uBAAc,CAAC,aAAa,EACpC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,MAAW,CAAC;QACrB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAiC,CAAC;QAEnD,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;YACrF,MAAM,SAAS,GAAG,IAAA,2BAAkB,EAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,IAAI,uBAAc,CAAC,SAAS,EAAE,GAAG,EAAE;gBACvC,SAAS,EAAE,SAAS,KAAK,YAAY;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YAC/D,OAAO,QAAQ,CAAC,QAAa,CAAC;QAChC,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AAxKD,0CAwKC"}

package/dist/errors.d.ts

@@ -0,0 +1,14 @@
+export type ISPConfigErrorCode = "validation_error" | "permission_denied" | "invalid_method" | "auth_error" | "api_error" | "network_error" | "parse_error";
+export declare class ISPConfigError extends Error {
+    readonly code: ISPConfigErrorCode;
+    readonly retryable: boolean;
+    readonly statusCode?: number;
+    constructor(code: ISPConfigErrorCode, message: string, options?: {
+        retryable?: boolean;
+        statusCode?: number;
+        cause?: unknown;
+    });
+}
+export declare function classifyApiMessage(message: string): ISPConfigErrorCode;
+export declare function normalizeError(err: unknown): ISPConfigError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,YAAY,GACZ,WAAW,GACX,eAAe,GACf,aAAa,CAAC;AAElB,qBAAa,cAAe,SAAQ,KAAK;IACvC,SAAgB,IAAI,EAAE,kBAAkB,CAAC;IACzC,SAAgB,SAAS,EAAE,OAAO,CAAC;IACnC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAGlC,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQ1E;AAuCD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAKtE;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAiF3D"}

package/dist/errors.js

@@ -0,0 +1,132 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// Structured error types for ISPConfig plugin
+// ---------------------------------------------------------------------------
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ISPConfigError = void 0;
+exports.classifyApiMessage = classifyApiMessage;
+exports.normalizeError = normalizeError;
+class ISPConfigError extends Error {
+    code;
+    retryable;
+    statusCode;
+    constructor(code, message, options) {
+        super(message, { cause: options?.cause });
+        this.name = "ISPConfigError";
+        this.code = code;
+        this.retryable = options?.retryable ?? false;
+        this.statusCode = options?.statusCode;
+    }
+}
+exports.ISPConfigError = ISPConfigError;
+// ---------------------------------------------------------------------------
+// Classify raw ISPConfig API error messages into error codes
+// ---------------------------------------------------------------------------
+const INVALID_METHOD_PATTERNS = [
+    "invalid function",
+    "unknown method",
+    "method not found",
+    "function not found",
+    "not a valid method",
+];
+const PERMISSION_PATTERNS = [
+    "permission denied",
+    "access denied",
+    "not allowed",
+    "forbidden",
+    "no permission",
+    "not permitted",
+    "authorization required",
+];
+const AUTH_PATTERNS = [
+    "session",
+    "login failed",
+    "authentication",
+    "auth failed",
+    "invalid credentials",
+    "expired",
+    "no session",
+];
+function matchesAny(msg, patterns) {
+    const lower = msg.toLowerCase();
+    return patterns.some((p) => lower.includes(p));
+}
+function classifyApiMessage(message) {
+    if (matchesAny(message, INVALID_METHOD_PATTERNS))
+        return "invalid_method";
+    if (matchesAny(message, PERMISSION_PATTERNS))
+        return "permission_denied";
+    if (matchesAny(message, AUTH_PATTERNS))
+        return "auth_error";
+    return "api_error";
+}
+// ---------------------------------------------------------------------------
+// Normalize any thrown value into an ISPConfigError
+// ---------------------------------------------------------------------------
+function normalizeError(err) {
+    if (err instanceof ISPConfigError)
+        return err;
+    const message = err instanceof Error ? err.message : String(err);
+    const cause = err instanceof Error ? err : undefined;
+    // Network / timeout
+    if (message.includes("timeout") ||
+        message.includes("ECONNREFUSED") ||
+        message.includes("ECONNRESET") ||
+        message.includes("ENOTFOUND") ||
+        message.includes("socket hang up")) {
+        return new ISPConfigError("network_error", message, {
+            retryable: true,
+            cause,
+        });
+    }
+    // HTTP status errors from rawCall
+    const httpMatch = message.match(/^ISPConfig HTTP (\d+)/);
+    if (httpMatch) {
+        const status = Number(httpMatch[1]);
+        if (status === 401 || status === 403) {
+            return new ISPConfigError(status === 401 ? "auth_error" : "permission_denied", message, { statusCode: status, retryable: status === 401, cause });
+        }
+        return new ISPConfigError("api_error", message, {
+            statusCode: status,
+            retryable: status >= 500,
+            cause,
+        });
+    }
+    // Non-JSON
+    if (message.includes("non-JSON response")) {
+        return new ISPConfigError("parse_error", message, { cause });
+    }
+    // ISPConfig API envelope errors
+    if (message.startsWith("ISPConfig API ")) {
+        const code = classifyApiMessage(message);
+        return new ISPConfigError(code, message, {
+            retryable: code === "auth_error",
+            cause,
+        });
+    }
+    // Login failure
+    if (message.includes("login failed")) {
+        return new ISPConfigError("auth_error", message, { cause });
+    }
+    // Validation errors (from validateParams or tool-level checks)
+    if (message.includes("Validation failed") ||
+        message.includes("Missing required") ||
+        message.includes("must not be empty") ||
+        message.includes("must be a valid number") ||
+        message.includes("must be one of")) {
+        return new ISPConfigError("validation_error", message, {
+            statusCode: 400,
+            cause,
+        });
+    }
+    // Guard/policy errors
+    if (message.includes("readOnly=true") || message.includes("blocked by allowedOperations")) {
+        return new ISPConfigError("permission_denied", message, {
+            statusCode: 403,
+            cause,
+        });
+    }
+    // Fallback
+    return new ISPConfigError("api_error", message, { cause });
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;;;AAkE9E,gDAKC;AAMD,wCAiFC;AAnJD,MAAa,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAqB;IACzB,SAAS,CAAU;IACnB,UAAU,CAAU;IAEpC,YACE,IAAwB,EACxB,OAAe,EACf,OAAuE;QAEvE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;IACxC,CAAC;CACF;AAhBD,wCAgBC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,MAAM,uBAAuB,GAAG;IAC9B,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;CACrB,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,mBAAmB;IACnB,eAAe;IACf,aAAa;IACb,WAAW;IACX,eAAe;IACf,eAAe;IACf,wBAAwB;CACzB,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,qBAAqB;IACrB,SAAS;IACT,YAAY;CACb,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW,EAAE,QAAkB;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAe;IAChD,IAAI,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC1E,IAAI,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACzE,IAAI,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,SAAgB,cAAc,CAAC,GAAY;IACzC,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC;IAE9C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAErD,oBAAoB;IACpB,IACE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,OAAO,EAAE;YAClD,SAAS,EAAE,IAAI;YACf,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,cAAc,CACvB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,EACnD,OAAO,EACP,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE;YAC9C,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,MAAM,IAAI,GAAG;YACxB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,WAAW;IACX,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE;YACvC,SAAS,EAAE,IAAI,KAAK,YAAY;YAChC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;IAChB,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,+DAA+D;IAC/D,IACE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,kBAAkB,EAAE,OAAO,EAAE;YACrD,UAAU,EAAE,GAAG;YACf,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,cAAc,CAAC,mBAAmB,EAAE,OAAO,EAAE;YACtD,UAAU,EAAE,GAAG;YACf,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,WAAW;IACX,OAAO,IAAI,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,4 @@
+import { ISPConfigPluginConfig } from "./types";
+export declare const WRITE_TOOLS: Set<string>;
+export declare function assertToolAllowed(config: ISPConfigPluginConfig, toolName: string): void;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,aAgBtB,CAAC;AAEH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAevF"}

package/dist/guards.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WRITE_TOOLS = void 0;
+exports.assertToolAllowed = assertToolAllowed;
+const errors_1 = require("./errors");
+exports.WRITE_TOOLS = new Set([
+    "isp_client_add",
+    "isp_site_add",
+    "isp_domain_add",
+    "isp_dns_zone_add",
+    "isp_dns_record_add",
+    "isp_dns_record_delete",
+    "isp_mail_domain_add",
+    "isp_mail_user_add",
+    "isp_mail_user_delete",
+    "isp_db_add",
+    "isp_db_user_add",
+    "isp_shell_user_add",
+    "isp_ftp_user_add",
+    "isp_cron_add",
+    "isp_provision_site",
+]);
+function assertToolAllowed(config, toolName) {
+    const allowed = config.allowedOperations ?? [];
+    if (allowed.length > 0 && !allowed.includes(toolName)) {
+        throw new errors_1.ISPConfigError("permission_denied", `Tool ${toolName} is blocked by allowedOperations policy`, { statusCode: 403 });
+    }
+    if ((config.readOnly ?? false) && exports.WRITE_TOOLS.has(toolName)) {
+        throw new errors_1.ISPConfigError("permission_denied", `Tool ${toolName} is blocked because readOnly=true`, { statusCode: 403 });
+    }
+}
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":";;;AAqBA,8CAeC;AApCD,qCAA0C;AAG7B,QAAA,WAAW,GAAG,IAAI,GAAG,CAAS;IACzC,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IACvB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,YAAY;IACZ,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;IACd,oBAAoB;CACrB,CAAC,CAAC;AAEH,SAAgB,iBAAiB,CAAC,MAA6B,EAAE,QAAgB;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,uBAAc,CAAC,mBAAmB,EAC1C,QAAQ,QAAQ,yCAAyC,EACzD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,mBAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAc,CAAC,mBAAmB,EAC1C,QAAQ,QAAQ,mCAAmC,EACnD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,71 @@
+export { ISPConfigError, ISPConfigErrorCode, normalizeError } from "./errors";
+import { ISPConfigPluginConfig, JsonMap } from "./types";
+export interface OpenClawRuntimeLike {
+    registerTool: (name: string, definition: {
+        description: string;
+        run: (params: JsonMap) => Promise<unknown>;
+    }) => void;
+}
+export interface BoundTool {
+    name: string;
+    description: string;
+    run: (params: JsonMap) => Promise<unknown>;
+}
+export declare function buildToolset(config: Partial<ISPConfigPluginConfig>): BoundTool[];
+export declare function registerAllTools(runtime: OpenClawRuntimeLike, config: Partial<ISPConfigPluginConfig>): void;
+declare const plugin: {
+    manifest: {
+        name: string;
+        version: string;
+        description: string;
+        config: {
+            apiUrl: {
+                type: string;
+                description: string;
+                required: boolean;
+            };
+            username: {
+                type: string;
+                description: string;
+                required: boolean;
+            };
+            password: {
+                type: string;
+                description: string;
+                required: boolean;
+                secret: boolean;
+            };
+            serverId: {
+                type: string;
+                description: string;
+                default: number;
+            };
+            defaultServerIp: {
+                type: string;
+                description: string;
+            };
+            readOnly: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            allowedOperations: {
+                type: string;
+                description: string;
+                items: {
+                    type: string;
+                };
+                default: never[];
+            };
+            verifySsl: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+        };
+        tools: string[];
+    };
+    register: typeof registerAllTools;
+};
+export default plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,KAAK,IAAI,CAAC;CACvH;AAoBD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,EAAE,CAQhF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAQ3G;AAED,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGX,CAAC;AAEF,eAAe,MAAM,CAAC"}