@draftlab/auth 0.15.0 → 0.16.0

package/dist/types/provider/provider.d.ts

@@ -0,0 +1,226 @@
+import type { Context, Hono } from "hono";
+import type { StorageAdapter } from "../storage/storage";
+/**
+ * OAuth provider system for Draft Auth.
+ * Defines the interfaces and utilities for implementing authentication providers
+ * that integrate with various OAuth 2.0 services.
+ *
+ * ## Creating a Provider
+ *
+ * ```ts
+ * export const MyProvider = (config: MyConfig): Provider<MyUserData> => ({
+ *   type: "my-provider",
+ *
+ *   init(routes, ctx) {
+ *     routes.get("/authorize", async (c) => {
+ *       // Redirect to provider's auth URL
+ *       return c.redirect(authUrl)
+ *     })
+ *
+ *     routes.get("/callback", async (c) => {
+ *       // Handle callback and extract user data
+ *       const userData = await processCallback(c)
+ *       return await ctx.success(c, userData)
+ *     })
+ *   }
+ * })
+ * ```
+ *
+ * ## Using Providers
+ *
+ * ```ts
+ * export default issuer({
+ *   providers: {
+ *     github: GithubProvider({ ... }),
+ *     google: GoogleProvider({ ... })
+ *   }
+ * })
+ * ```
+ */
+/**
+ * Router instance used for provider route definitions.
+ * Providers use this to register their authorization and callback endpoints.
+ */
+export type ProviderRoute = Hono<{
+    Variables: {
+        provider: string;
+    };
+}>;
+/**
+ * Authentication provider interface that handles OAuth flows.
+ * Each provider implements authentication with a specific service (GitHub, Google, etc.).
+ *
+ * @template Properties - Type of user data returned by successful authentication
+ */
+export interface Provider<Properties = Record<string, unknown>> {
+    /**
+     * Unique identifier for this provider type.
+     * Used in URLs and provider selection UI.
+     *
+     * @example "github", "google", "steam"
+     */
+    readonly type: string;
+    /**
+     * Initializes the provider by registering required routes.
+     * Called during issuer setup to configure authorization and callback endpoints.
+     *
+     * @param route - Hono router instance for registering provider endpoints
+     * @param options - Provider utilities and configuration
+     *
+     * @example
+     * ```ts
+     * init(routes, ctx) {
+     *   routes.get("/authorize", async (c) => {
+     *     // Redirect to OAuth provider
+     *     return c.redirect(buildAuthUrl())
+     *   })
+     *
+     *   routes.get("/callback", async (c) => {
+     *     // Process callback and return user data
+     *     const userData = await handleCallback(c)
+     *     return await ctx.success(c, userData)
+     *   })
+     * }
+     * ```
+     */
+    init: (route: ProviderRoute, options: ProviderOptions<Properties>) => void;
+}
+/**
+ * Utilities and callbacks provided to providers during initialization.
+ * Contains methods for state management, user flow completion, and storage access.
+ *
+ * @template Properties - Type of user data handled by the provider
+ */
+export interface ProviderOptions<Properties> {
+    /**
+     * Name of the provider instance as configured in the issuer.
+     * Corresponds to the key used in the providers object.
+     */
+    readonly name: string;
+    /**
+     * Completes the authentication flow with user data.
+     * Called when the provider successfully authenticates a user.
+     *
+     * @param ctx - Hono request context
+     * @param properties - User data extracted from the provider
+     * @param opts - Optional utilities for session management
+     * @returns Response that completes the OAuth flow
+     *
+     * @example
+     * ```ts
+     * const userData = { userId: "123", email: "user@example.com" }
+     * return await ctx.success(c, userData)
+     * ```
+     */
+    success: (ctx: Context, properties: Properties, opts?: {
+        /** Function to invalidate existing user sessions */
+        readonly invalidate?: (subject: string) => Promise<void>;
+    }) => Promise<Response>;
+    /**
+     * Forwards a response through the provider context.
+     * Used for redirects and custom responses within the OAuth flow.
+     *
+     * @param ctx - Hono request context
+     * @param response - Response to forward
+     * @returns Forwarded response
+     */
+    forward: (ctx: Context, response: Response) => Response;
+    /**
+     * Stores a temporary value with expiration for the current session.
+     * Useful for storing OAuth state, PKCE verifiers, and other temporary data.
+     *
+     * @param ctx - Hono request context
+     * @param key - Storage key identifier
+     * @param maxAge - TTL in seconds
+     * @param value - Value to store
+     *
+     * @example
+     * ```ts
+     * // Store OAuth state for 10 minutes
+     * await ctx.set(c, "oauth_state", 600, { state, redirectUri })
+     * ```
+     */
+    set: <T>(ctx: Context, key: string, maxAge: number, value: T) => Promise<void>;
+    /**
+     * Retrieves a previously stored temporary value.
+     *
+     * @param ctx - Hono request context
+     * @param key - Storage key identifier
+     * @returns Promise resolving to the stored value or undefined if not found/expired
+     *
+     * @example
+     * ```ts
+     * const oauthState = await ctx.get<OAuthState>(c, "oauth_state")
+     * if (!oauthState) {
+     *   throw new Error("OAuth state expired")
+     * }
+     * ```
+     */
+    get: <T>(ctx: Context, key: string) => Promise<T | undefined>;
+    /**
+     * Removes a stored temporary value.
+     *
+     * @param ctx - Hono request context
+     * @param key - Storage key identifier
+     *
+     * @example
+     * ```ts
+     * // Clean up OAuth state after use
+     * await ctx.unset(c, "oauth_state")
+     * ```
+     */
+    unset: (ctx: Context, key: string) => Promise<void>;
+    /**
+     * Invalidates all sessions for a given subject (user).
+     * Forces logout across all devices and applications.
+     *
+     * @param subject - Subject identifier to invalidate
+     *
+     * @example
+     * ```ts
+     * // Force logout on password change
+     * await ctx.invalidate(userId)
+     * ```
+     */
+    invalidate: (subject: string) => Promise<void>;
+    /**
+     * Storage adapter for persistent data operations.
+     * Provides access to the configured storage backend.
+     */
+    readonly storage: StorageAdapter;
+}
+/**
+ * Base error class for provider-related errors.
+ * Extend this class to create specific provider error types.
+ *
+ * @example
+ * ```ts
+ * export class GitHubApiError extends ProviderError {
+ *   constructor(message: string, public readonly statusCode: number) {
+ *     super(message)
+ *   }
+ * }
+ * ```
+ */
+export declare class ProviderError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when a provider encounters an unknown or unexpected error.
+ * Used as a fallback for unhandled error conditions.
+ *
+ * @example
+ * ```ts
+ * catch (error) {
+ *   if (error instanceof SomeSpecificError) {
+ *     // Handle specific error
+ *   } else {
+ *     throw new ProviderUnknownError(`Unexpected error: ${error}`)
+ *   }
+ * }
+ * ```
+ */
+export declare class ProviderUnknownError extends ProviderError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/types/provider/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/provider/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC;IAAE,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAAA;AAErE;;;;;GAKG;AACH,MAAM,WAAW,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK,IAAI,CAAA;CAC1E;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe,CAAC,UAAU;IAC1C;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;;;;;;;;;;;;OAcG;IACH,OAAO,EAAE,CACR,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,UAAU,EACtB,IAAI,CAAC,EAAE;QACN,oDAAoD;QACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KACxD,KACG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAEtB;;;;;;;OAOG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAA;IAEvD;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9E;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;IAE7D;;;;;;;;;;;OAWG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnD;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAc,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI3B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;gBAC1C,OAAO,CAAC,EAAE,MAAM;CAI5B"}

package/dist/types/provider/reddit.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Reddit authentication provider for Draft Auth.
+ * Implements OAuth 2.0 flow for authenticating users with their Reddit accounts.
+ *
+ * ## Quick Setup
+ *
+ * ```ts
+ * import { RedditProvider } from "@draftlab/auth/provider/reddit"
+ *
+ * export default issuer({
+ *   basePath: "/auth", // Important for callback URL
+ *   providers: {
+ *     reddit: RedditProvider({
+ *       clientID: process.env.REDDIT_CLIENT_ID,
+ *       clientSecret: process.env.REDDIT_CLIENT_SECRET,
+ *       scopes: ["identity"]
+ *     })
+ *   }
+ * })
+ * ```
+ *
+ * **Callback URL Pattern**: `{baseURL}{basePath}/{provider}/callback`
+ * - Development: `http://localhost:3000/auth/reddit/callback`
+ * - Production: `https://yourapp.com/auth/reddit/callback`
+ *
+ * Register this URL in your Reddit App Preferences.
+ *
+ * ## Common Scopes
+ *
+ * - `identity` - Access user's identity information
+ * - `read` - Access user's private data (saved posts, hidden posts, etc.)
+ * - `submit` - Submit links and posts
+ * - `modposts` - Moderate posts
+ * - `privatemessages` - Access private messages
+ * - `subscribe` - Subscribe to subreddits
+ * - `wikiread` - Read wiki pages
+ *
+ * ## User Data Access
+ *
+ * ```ts
+ * success: async (ctx, value) => {
+ *   if (value.provider === "reddit") {
+ *     const accessToken = value.tokenset.access
+ *
+ *     // Fetch user information
+ *     const userResponse = await fetch('https://oauth.reddit.com/api/v1/me', {
+ *       headers: { Authorization: `Bearer ${accessToken}` }
+ *     })
+ *     const user = await userResponse.json()
+ *
+ *     // User info: id, name, created_utc, link_karma, comment_karma
+ *   }
+ * }
+ * ```
+ *
+ * @packageDocumentation
+ */
+import { type Oauth2WrappedConfig } from "./oauth2";
+/**
+ * Configuration options for Reddit OAuth 2.0 provider.
+ * Extends the base OAuth 2.0 configuration with Reddit-specific documentation.
+ */
+export interface RedditConfig extends Oauth2WrappedConfig {
+    /**
+     * Reddit app client ID.
+     * Get this from your Reddit application preferences at https://www.reddit.com/prefs/apps
+     *
+     * @example
+     * ```ts
+     * {
+     *   clientID: "abcdef123456"
+     * }
+     * ```
+     */
+    readonly clientID: string;
+    /**
+     * Reddit app client secret.
+     * Keep this secure and never expose it to client-side code.
+     *
+     * @example
+     * ```ts
+     * {
+     *   clientSecret: process.env.REDDIT_CLIENT_SECRET
+     * }
+     * ```
+     */
+    readonly clientSecret: string;
+    /**
+     * Reddit OAuth scopes to request access for.
+     * Determines what data and actions your app can access.
+     *
+     * @example
+     * ```ts
+     * {
+     *   scopes: [
+     *     "identity",           // Access user identity
+     *     "read"                // Read private data
+     *   ]
+     * }
+     * ```
+     */
+    readonly scopes: string[];
+}
+/**
+ * Creates a Reddit OAuth 2.0 authentication provider.
+ * Allows users to authenticate using their Reddit accounts.
+ *
+ * @param config - Reddit OAuth 2.0 configuration
+ * @returns OAuth 2.0 provider configured for Reddit
+ *
+ * @example
+ * ```ts
+ * // Basic Reddit authentication
+ * const basicReddit = RedditProvider({
+ *   clientID: process.env.REDDIT_CLIENT_ID,
+ *   clientSecret: process.env.REDDIT_CLIENT_SECRET
+ * })
+ *
+ * // Reddit with identity scope
+ * const redditWithIdentity = RedditProvider({
+ *   clientID: process.env.REDDIT_CLIENT_ID,
+ *   clientSecret: process.env.REDDIT_CLIENT_SECRET,
+ *   scopes: ["identity"]
+ * })
+ *
+ * // Using the access token to fetch user data
+ * export default issuer({
+ *   providers: { reddit: redditWithIdentity },
+ *   success: async (ctx, value) => {
+ *     if (value.provider === "reddit") {
+ *       const token = value.tokenset.access
+ *
+ *       const userRes = await fetch('https://oauth.reddit.com/api/v1/me', {
+ *         headers: {
+ *           'Authorization': `Bearer ${token}`,
+ *           'User-Agent': 'YourApp/1.0'
+ *         }
+ *       })
+ *       const user = await userRes.json()
+ *
+ *       return ctx.subject("user", {
+ *         redditId: user.id,
+ *         username: user.name,
+ *         linkKarma: user.link_karma,
+ *         commentKarma: user.comment_karma
+ *       })
+ *     }
+ *   }
+ * })
+ * ```
+ *
+ * **Callback URL Pattern**: `{baseURL}{basePath}/{provider}/callback`
+ * - Development: `http://localhost:3000/auth/reddit/callback`
+ * - Production: `https://yourapp.com/auth/reddit/callback`
+ *
+ * Register this URL in your Reddit App Preferences.
+ */
+export declare const RedditProvider: (config: RedditConfig) => import("./provider").Provider<import("./oauth2").Oauth2UserData>;
+//# sourceMappingURL=reddit.d.ts.map

package/dist/types/provider/reddit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reddit.d.ts","sourceRoot":"","sources":["../../../src/provider/reddit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,EAAkB,KAAK,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnE;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,mBAAmB;IACxD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IAEzB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,YAAY,qEASlD,CAAA"}

package/dist/types/provider/slack.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Slack authentication provider for Draft Auth.
+ * Implements OAuth 2.0 flow for authenticating users with their Slack accounts.
+ *
+ * ## Quick Setup
+ *
+ * ```ts
+ * import { SlackProvider } from "@draftlab/auth/provider/slack"
+ *
+ * export default issuer({
+ *   basePath: "/auth", // Important for callback URL
+ *   providers: {
+ *     slack: SlackProvider({
+ *       clientID: process.env.SLACK_CLIENT_ID,
+ *       clientSecret: process.env.SLACK_CLIENT_SECRET,
+ *       scopes: ["users:read", "users:read.email"]
+ *     })
+ *   }
+ * })
+ * ```
+ *
+ * **Callback URL Pattern**: `{baseURL}{basePath}/{provider}/callback`
+ * - Development: `http://localhost:3000/auth/slack/callback`
+ * - Production: `https://yourapp.com/auth/slack/callback`
+ *
+ * Register this URL in your Slack App settings.
+ *
+ * ## Common Scopes
+ *
+ * - `users:read` - Access to user profiles
+ * - `users:read.email` - Access user email addresses
+ * - `team:read` - Access team information
+ * - `channels:read` - View channels
+ * - `groups:read` - View private channels
+ * - `im:read` - View direct messages
+ * - `mpim:read` - View group direct messages
+ *
+ * ## User Data Access
+ *
+ * ```ts
+ * success: async (ctx, value) => {
+ *   if (value.provider === "slack") {
+ *     const accessToken = value.tokenset.access
+ *
+ *     // Fetch user information
+ *     const userResponse = await fetch('https://slack.com/api/auth.test', {
+ *       headers: { Authorization: `Bearer ${accessToken}` }
+ *     })
+ *     const userInfo = await userResponse.json()
+ *
+ *     // Get user details
+ *     const userDetailsResponse = await fetch(
+ *       `https://slack.com/api/users.info?user=${userInfo.user_id}`,
+ *       { headers: { Authorization: `Bearer ${accessToken}` } }
+ *     )
+ *     const { user } = await userDetailsResponse.json()
+ *   }
+ * }
+ * ```
+ *
+ * @packageDocumentation
+ */
+import { type Oauth2WrappedConfig } from "./oauth2";
+/**
+ * Configuration options for Slack OAuth 2.0 provider.
+ * Extends the base OAuth 2.0 configuration with Slack-specific documentation.
+ */
+export interface SlackConfig extends Oauth2WrappedConfig {
+    /**
+     * Slack app client ID.
+     * Get this from your Slack App settings at https://api.slack.com/apps
+     *
+     * @example
+     * ```ts
+     * {
+     *   clientID: "123456789.1234567890"
+     * }
+     * ```
+     */
+    readonly clientID: string;
+    /**
+     * Slack app client secret.
+     * Keep this secure and never expose it to client-side code.
+     *
+     * @example
+     * ```ts
+     * {
+     *   clientSecret: process.env.SLACK_CLIENT_SECRET
+     * }
+     * ```
+     */
+    readonly clientSecret: string;
+    /**
+     * Slack OAuth scopes to request access for.
+     * Determines what data and actions your app can access.
+     *
+     * @example
+     * ```ts
+     * {
+     *   scopes: [
+     *     "users:read",           // Access to user profiles
+     *     "users:read.email",     // Access user emails
+     *     "team:read"             // Access team information
+     *   ]
+     * }
+     * ```
+     */
+    readonly scopes: string[];
+}
+/**
+ * Creates a Slack OAuth 2.0 authentication provider.
+ * Allows users to authenticate using their Slack accounts.
+ *
+ * @param config - Slack OAuth 2.0 configuration
+ * @returns OAuth 2.0 provider configured for Slack
+ *
+ * @example
+ * ```ts
+ * // Basic Slack authentication
+ * const basicSlack = SlackProvider({
+ *   clientID: process.env.SLACK_CLIENT_ID,
+ *   clientSecret: process.env.SLACK_CLIENT_SECRET
+ * })
+ *
+ * // Slack with user scopes
+ * const slackWithScopes = SlackProvider({
+ *   clientID: process.env.SLACK_CLIENT_ID,
+ *   clientSecret: process.env.SLACK_CLIENT_SECRET,
+ *   scopes: ["users:read", "users:read.email", "team:read"]
+ * })
+ *
+ * // Using the access token to fetch user data
+ * export default issuer({
+ *   providers: { slack: slackWithScopes },
+ *   success: async (ctx, value) => {
+ *     if (value.provider === "slack") {
+ *       const token = value.tokenset.access
+ *
+ *       // Get basic user info
+ *       const authRes = await fetch('https://slack.com/api/auth.test', {
+ *         headers: { Authorization: `Bearer ${token}` }
+ *       })
+ *       const authInfo = await authRes.json()
+ *
+ *       // Get detailed user info
+ *       const userRes = await fetch(
+ *         `https://slack.com/api/users.info?user=${authInfo.user_id}`,
+ *         { headers: { Authorization: `Bearer ${token}` } }
+ *       )
+ *       const { user } = await userRes.json()
+ *
+ *       return ctx.subject("user", {
+ *         slackId: user.id,
+ *         username: user.name,
+ *         realName: user.real_name,
+ *         email: user.profile?.email,
+ *         workspace: authInfo.team_id
+ *       })
+ *     }
+ *   }
+ * })
+ * ```
+ *
+ * **Callback URL Pattern**: `{baseURL}{basePath}/{provider}/callback`
+ * - Development: `http://localhost:3000/auth/slack/callback`
+ * - Production: `https://yourapp.com/auth/slack/callback`
+ *
+ * Register this URL in your Slack App settings.
+ */
+export declare const SlackProvider: (config: SlackConfig) => import("./provider").Provider<import("./oauth2").Oauth2UserData>;
+//# sourceMappingURL=slack.d.ts.map

package/dist/types/provider/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/provider/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAkB,KAAK,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnE;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IACvD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IAEzB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,WAAW,qEAShD,CAAA"}