From 32b1165bb3f1a23c5470128c0503ff8c96ba8d57 Mon Sep 17 00:00:00 2001 From: loki5512344 Date: Wed, 10 Jun 2026 22:59:27 +0200 Subject: [PATCH] first commit --- .gitignore | 43 ++ build.gradle.kts | 25 + common/build.gradle.kts | 6 + .../dev/loki/loAuth/common/cfg/DbConfig.java | 19 + .../loki/loAuth/common/cfg/YamlConfig.java | 50 ++ .../loAuth/common/db/DatabaseManager.java | 485 ++++++++++++++++++ .../common/exception/DatabaseException.java | 5 + .../exception/DuplicateUserException.java | 5 + .../dev/loki/loAuth/common/model/User.java | 3 + .../loAuth/common/util/CodeGenerator.java | 21 + .../main/java/dev/loki/loAuth/common/.java | 0 discord/build.gradle.kts | 21 + .../java/dev/loki/loAuth/discord/Bot.java | 48 ++ .../dev/loki/loAuth/discord/BotLauncher.java | 42 ++ .../loki/loAuth/discord/auth/AuthService.java | 89 ++++ .../dev/loki/loAuth/discord/cfg/BotCfg.java | 25 + .../loki/loAuth/discord/cfg/BotConfig.java | 7 + .../listener/LoginReactionListener.java | 30 ++ .../discord/listener/VerifyListener.java | 45 ++ discord/src/main/resources/config.yml | 12 + gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 60756 bytes gradle/wrapper/gradle-wrapper.properties | 6 + gradlew | 234 +++++++++ gradlew.bat | 89 ++++ lib/fisch-frame-1.0.jar | Bin 0 -> 46184 bytes plugin/build.gradle.kts | 20 + .../java/dev/loki/loAuth/plugin/FoxAuth.java | 104 ++++ .../loki/loAuth/plugin/cfg/MessageConfig.java | 120 +++++ .../dev/loki/loAuth/plugin/cfg/PluginCfg.java | 40 ++ .../loAuth/plugin/listener/LoginListener.java | 134 +++++ plugin/src/main/resources/config.yml | 32 ++ settings.gradle.kts | 3 + 32 files changed, 1763 insertions(+) create mode 100644 .gitignore create mode 100644 build.gradle.kts create mode 100644 common/build.gradle.kts create mode 100644 common/src/main/java/dev/loki/loAuth/common/cfg/DbConfig.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/cfg/YamlConfig.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/db/DatabaseManager.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/exception/DatabaseException.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/exception/DuplicateUserException.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/model/User.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/util/CodeGenerator.java create mode 100644 common/src/main/java/dev/loki/loAuth/common/.java create mode 100644 discord/build.gradle.kts create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/Bot.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/BotLauncher.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/auth/AuthService.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/cfg/BotCfg.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/cfg/BotConfig.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/listener/LoginReactionListener.java create mode 100644 discord/src/main/java/dev/loki/loAuth/discord/listener/VerifyListener.java create mode 100644 discord/src/main/resources/config.yml create mode 100644 gradle/wrapper/gradle-wrapper.jar create mode 100644 gradle/wrapper/gradle-wrapper.properties create mode 100644 gradlew create mode 100644 gradlew.bat create mode 100644 lib/fisch-frame-1.0.jar create mode 100644 plugin/build.gradle.kts create mode 100644 plugin/src/main/java/dev/loki/loAuth/plugin/FoxAuth.java create mode 100644 plugin/src/main/java/dev/loki/loAuth/plugin/cfg/MessageConfig.java create mode 100644 plugin/src/main/java/dev/loki/loAuth/plugin/cfg/PluginCfg.java create mode 100644 plugin/src/main/java/dev/loki/loAuth/plugin/listener/LoginListener.java create mode 100644 plugin/src/main/resources/config.yml create mode 100644 settings.gradle.kts diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..1fac4d5 --- /dev/null +++ b/.gitignore @@ -0,0 +1,43 @@ +.gradle +build/ +!gradle/wrapper/gradle-wrapper.jar +!**/src/main/**/build/ +!**/src/test/**/build/ +.kotlin + +### IntelliJ IDEA ### +.idea/modules.xml +.idea/jarRepositories.xml +.idea/compiler.xml +.idea/libraries/ +*.iws +*.iml +*.ipr +out/ +!**/src/main/**/out/ +!**/src/test/**/out/ + +### Eclipse ### +.apt_generated +.classpath +.factorypath +.project +.settings +.springBeans +.sts4-cache +bin/ +!**/src/main/**/bin/ +!**/src/test/**/bin/ + +### NetBeans ### +/nbproject/private/ +/nbbuild/ +/dist/ +/nbdist/ +/.nb-gradle/ + +### VS Code ### +.vscode/ + +### Mac OS ### +.DS_Store \ No newline at end of file diff --git a/build.gradle.kts b/build.gradle.kts new file mode 100644 index 0000000..204353a --- /dev/null +++ b/build.gradle.kts @@ -0,0 +1,25 @@ +plugins { + java + id("com.gradleup.shadow") version "9.3.1" apply false +} + +allprojects { + group = "dev.loki" + version = "0.0.1" + + repositories { + mavenCentral() + maven { + name = "papermc" + url = uri("https://repo.papermc.io/repository/maven-public/") + } + } +} + +subprojects { + apply(plugin = "java") + + java { + toolchain.languageVersion.set(JavaLanguageVersion.of(21)) + } +} diff --git a/common/build.gradle.kts b/common/build.gradle.kts new file mode 100644 index 0000000..96962ca --- /dev/null +++ b/common/build.gradle.kts @@ -0,0 +1,6 @@ +dependencies { + implementation("com.zaxxer:HikariCP:7.0.2") + implementation("org.postgresql:postgresql:42.7.10") + implementation("org.xerial:sqlite-jdbc:3.49.1.0") + implementation("org.yaml:snakeyaml:2.3") +} diff --git a/common/src/main/java/dev/loki/loAuth/common/cfg/DbConfig.java b/common/src/main/java/dev/loki/loAuth/common/cfg/DbConfig.java new file mode 100644 index 0000000..eba1f17 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/cfg/DbConfig.java @@ -0,0 +1,19 @@ +package dev.loki.loAuth.common.cfg; + +public interface DbConfig { + String getDbType(); + String getDbHost(); + int getDbPort(); + String getDbName(); + String getDbUser(); + String getDbPassword(); + int getAuthTimeoutSeconds(); + int getVerificationCodeLength(); + + default String getJdbcUrl() { + if ("sqlite".equals(getDbType())) { + return "jdbc:sqlite:" + getDbName(); + } + return "jdbc:postgresql://" + getDbHost() + ":" + getDbPort() + "/" + getDbName(); + } +} diff --git a/common/src/main/java/dev/loki/loAuth/common/cfg/YamlConfig.java b/common/src/main/java/dev/loki/loAuth/common/cfg/YamlConfig.java new file mode 100644 index 0000000..648fb49 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/cfg/YamlConfig.java @@ -0,0 +1,50 @@ +package dev.loki.loAuth.common.cfg; + +import org.yaml.snakeyaml.Yaml; + +import java.io.IOException; +import java.io.InputStream; +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.Map; + +public final class YamlConfig { + + private final Map data; + + @SuppressWarnings("unchecked") + public YamlConfig(final Path path) throws IOException { + Yaml yaml = new Yaml(); + try (InputStream in = Files.newInputStream(path)) { + Object loaded = yaml.load(in); + if (loaded instanceof Map) { + this.data = (Map) loaded; + } else { + throw new IOException("Invalid config format: expected a map at root"); + } + } + } + + @SuppressWarnings("unchecked") + public T getRequired(final String key, final Class type) { + Object val = data.get(key); + if (val == null) { + throw new IllegalStateException("Missing config key: '" + key + "'"); + } + if (!type.isInstance(val)) { + throw new IllegalStateException("Config key '" + key + "' has wrong type: expected " + type.getSimpleName()); + } + return (T) val; + } + + @SuppressWarnings("unchecked") + public T get(final String key, final T defaultValue) { + Object val = data.get(key); + if (val == null) return defaultValue; + try { + return (T) val; + } catch (ClassCastException e) { + return defaultValue; + } + } +} diff --git a/common/src/main/java/dev/loki/loAuth/common/db/DatabaseManager.java b/common/src/main/java/dev/loki/loAuth/common/db/DatabaseManager.java new file mode 100644 index 0000000..cb59e75 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/db/DatabaseManager.java @@ -0,0 +1,485 @@ +package dev.loki.loAuth.common.db; + +import dev.loki.loAuth.common.cfg.DbConfig; +import dev.loki.loAuth.common.exception.DatabaseException; +import dev.loki.loAuth.common.exception.DuplicateUserException; +import dev.loki.loAuth.common.model.User; +import dev.loki.loAuth.common.util.CodeGenerator; +import com.zaxxer.hikari.HikariConfig; +import com.zaxxer.hikari.HikariDataSource; + +import java.sql.*; +import java.time.Instant; +import java.util.ArrayList; +import java.util.List; +import java.util.Optional; + +public final class DatabaseManager implements AutoCloseable { + + private final HikariDataSource ds; + private final DbConfig cfg; + private final boolean sqlite; + + public DatabaseManager(final DbConfig cfg, final String appName, final int maxPoolSize) { + this.cfg = cfg; + this.sqlite = "sqlite".equals(cfg.getDbType()); + + HikariConfig hikari = new HikariConfig(); + hikari.setJdbcUrl(cfg.getJdbcUrl()); + + if (sqlite) { + hikari.setDriverClassName("org.sqlite.JDBC"); + hikari.setMaximumPoolSize(1); + hikari.setMinimumIdle(1); + hikari.setConnectionTimeout(30_000); + hikari.addDataSourceProperty("journal_mode", "WAL"); + hikari.addDataSourceProperty("busy_timeout", "30000"); + } else { + try { + Class.forName("org.postgresql.Driver"); + } catch (ClassNotFoundException e) { + throw new RuntimeException("PostgreSQL driver not found", e); + } + hikari.setUsername(cfg.getDbUser()); + hikari.setPassword(cfg.getDbPassword()); + hikari.setMaximumPoolSize(maxPoolSize); + hikari.setMinimumIdle(Math.min(2, maxPoolSize)); + hikari.setConnectionTimeout(30_000); + hikari.setIdleTimeout(600_000); + hikari.setMaxLifetime(1_800_000); + hikari.addDataSourceProperty("sslmode", "prefer"); + hikari.addDataSourceProperty("ApplicationName", appName); + hikari.setDriverClassName("org.postgresql.Driver"); + } + + this.ds = new HikariDataSource(hikari); + initSchema(); + } + + // ─── Schema ──────────────────────────────────────────────────────────────── + + private void initSchema() { + String usersTable = sqlite ? """ + CREATE TABLE IF NOT EXISTS users ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + minecraft_nick TEXT NOT NULL, + discord_id TEXT NOT NULL, + created_at TEXT NOT NULL DEFAULT (datetime('now')), + updated_at TEXT NOT NULL DEFAULT (datetime('now')), + UNIQUE (minecraft_nick), + UNIQUE (discord_id) + ) + """ : """ + CREATE TABLE IF NOT EXISTS users ( + id BIGSERIAL PRIMARY KEY, + minecraft_nick VARCHAR(16) NOT NULL, + discord_id VARCHAR(20) NOT NULL, + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), + CONSTRAINT uq_minecraft_nick UNIQUE (minecraft_nick), + CONSTRAINT uq_discord_id UNIQUE (discord_id), + CONSTRAINT ck_minecraft_nick CHECK (minecraft_nick ~ '^[a-zA-Z0-9_]{3,16}$'), + CONSTRAINT ck_discord_id CHECK (discord_id ~ '^[0-9]{17,20}$') + ) + """; + + String verificationsTable = sqlite ? """ + CREATE TABLE IF NOT EXISTS pending_verifications ( + code TEXT PRIMARY KEY, + minecraft_nick TEXT NOT NULL UNIQUE, + expires_at INTEGER NOT NULL + ) + """ : """ + CREATE TABLE IF NOT EXISTS pending_verifications ( + code VARCHAR(16) PRIMARY KEY, + minecraft_nick VARCHAR(16) NOT NULL, + expires_at BIGINT NOT NULL, + CONSTRAINT uq_pv_minecraft_nick UNIQUE (minecraft_nick) + ) + """; + + String loginsTable = sqlite ? """ + CREATE TABLE IF NOT EXISTS pending_logins ( + token TEXT PRIMARY KEY, + discord_id TEXT NOT NULL UNIQUE, + minecraft_nick TEXT NOT NULL UNIQUE, + message_id TEXT, + expires_at INTEGER NOT NULL + ) + """ : """ + CREATE TABLE IF NOT EXISTS pending_logins ( + token VARCHAR(16) PRIMARY KEY, + discord_id VARCHAR(20) NOT NULL, + minecraft_nick VARCHAR(16) NOT NULL, + message_id VARCHAR(20), + expires_at BIGINT NOT NULL, + CONSTRAINT uq_pl_discord_id UNIQUE (discord_id), + CONSTRAINT uq_pl_minecraft_nick UNIQUE (minecraft_nick) + ) + """; + + try (Connection conn = ds.getConnection(); + Statement stmt = conn.createStatement()) { + stmt.execute(usersTable); + stmt.execute(verificationsTable); + stmt.execute(loginsTable); + } catch (SQLException e) { + throw new IllegalStateException("Failed to initialize DB schema", e); + } + } + + // ─── Users ──────────────────────────────────────────────────────────────── + + public User addUser(final String minecraftNick, final String discordId) { + validateNick(minecraftNick); + validateDiscordId(discordId); + + String sql = sqlite ? """ + INSERT INTO users (minecraft_nick, discord_id) + VALUES (?, ?) + """ : """ + INSERT INTO users (minecraft_nick, discord_id) + VALUES (?, ?) + RETURNING id, minecraft_nick, discord_id, created_at + """; + + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(sql)) { + ps.setString(1, minecraftNick); + ps.setString(2, discordId); + + if (sqlite) { + ps.executeUpdate(); + try (Statement stmt = conn.createStatement(); + ResultSet rs = stmt.executeQuery("SELECT last_insert_rowid()")) { + if (rs.next()) { + return new User(rs.getLong(1), minecraftNick, discordId, Instant.now()); + } + } + throw new SQLException("INSERT returned no rows"); + } else { + try (ResultSet rs = ps.executeQuery()) { + if (rs.next()) return mapUser(rs); + throw new SQLException("INSERT returned no rows"); + } + } + } catch (SQLException e) { + throw translateSqlException(e); + } + } + + public boolean isRegistered(final String minecraftNick) { + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement( + "SELECT 1 FROM users WHERE LOWER(minecraft_nick) = LOWER(?) LIMIT 1")) { + ps.setString(1, minecraftNick); + try (ResultSet rs = ps.executeQuery()) { + return rs.next(); + } + } catch (SQLException e) { + throw new DatabaseException("DB error in isRegistered", e); + } + } + + public Optional findByDiscordId(final String discordId) { + validateDiscordId(discordId); + return queryOneUser( + "SELECT id, minecraft_nick, discord_id, created_at FROM users WHERE discord_id = ?", + discordId + ); + } + + public Optional findByMinecraftNick(final String nick) { + validateNick(nick); + return queryOneUser( + "SELECT id, minecraft_nick, discord_id, created_at FROM users WHERE LOWER(minecraft_nick) = LOWER(?)", + nick + ); + } + + public boolean removeUser(final String discordId) { + validateDiscordId(discordId); + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement("DELETE FROM users WHERE discord_id = ?")) { + ps.setString(1, discordId); + return ps.executeUpdate() > 0; + } catch (SQLException e) { + throw new DatabaseException("Failed to remove user", e); + } + } + + // ─── Pending Verifications ──────────────────────────────────────────────── + + public String createVerificationCode(final String minecraftNick) { + validateNick(minecraftNick); + String code = CodeGenerator.generate(cfg.getVerificationCodeLength()); + long expiresAt = Instant.now().getEpochSecond() + cfg.getAuthTimeoutSeconds(); + + String sql = sqlite ? """ + INSERT INTO pending_verifications (code, minecraft_nick, expires_at) + VALUES (?, ?, ?) + ON CONFLICT(minecraft_nick) DO UPDATE + SET code = excluded.code, expires_at = excluded.expires_at + """ : """ + INSERT INTO pending_verifications (code, minecraft_nick, expires_at) + VALUES (?, ?, ?) + ON CONFLICT (minecraft_nick) DO UPDATE + SET code = EXCLUDED.code, expires_at = EXCLUDED.expires_at + """; + + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(sql)) { + ps.setString(1, code); + ps.setString(2, minecraftNick); + ps.setLong(3, expiresAt); + ps.executeUpdate(); + } catch (SQLException e) { + throw new DatabaseException("Failed to create verification code", e); + } + return code; + } + + public Optional consumeVerificationCode(final String code) { + if (sqlite) return consumeDeleteSelect("pending_verifications", "code", code); + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(""" + DELETE FROM pending_verifications + WHERE code = ? AND expires_at > ? + RETURNING minecraft_nick + """)) { + ps.setString(1, code); + ps.setLong(2, Instant.now().getEpochSecond()); + try (ResultSet rs = ps.executeQuery()) { + return rs.next() ? Optional.of(rs.getString("minecraft_nick")) : Optional.empty(); + } + } catch (SQLException e) { + throw new DatabaseException("Failed to consume verification code", e); + } + } + + // ─── Pending Logins ─────────────────────────────────────────────────────── + + public String createLoginToken(final String minecraftNick, final String discordId) { + validateNick(minecraftNick); + validateDiscordId(discordId); + String token = CodeGenerator.generate(16); + long expiresAt = Instant.now().getEpochSecond() + cfg.getAuthTimeoutSeconds(); + + String sql = sqlite ? """ + INSERT INTO pending_logins (token, discord_id, minecraft_nick, expires_at) + VALUES (?, ?, ?, ?) + ON CONFLICT(discord_id) DO UPDATE + SET token = excluded.token, + minecraft_nick = excluded.minecraft_nick, + message_id = NULL, + expires_at = excluded.expires_at + """ : """ + INSERT INTO pending_logins (token, discord_id, minecraft_nick, expires_at) + VALUES (?, ?, ?, ?) + ON CONFLICT (discord_id) DO UPDATE + SET token = EXCLUDED.token, + minecraft_nick = EXCLUDED.minecraft_nick, + message_id = NULL, + expires_at = EXCLUDED.expires_at + """; + + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(sql)) { + ps.setString(1, token); + ps.setString(2, discordId); + ps.setString(3, minecraftNick); + ps.setLong(4, expiresAt); + ps.executeUpdate(); + } catch (SQLException e) { + throw new DatabaseException("Failed to create login token", e); + } + return token; + } + + public void updateLoginMessageId(final String token, final String messageId) { + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement( + "UPDATE pending_logins SET message_id = ? WHERE token = ?")) { + ps.setString(1, messageId); + ps.setString(2, token); + ps.executeUpdate(); + } catch (SQLException e) { + throw new DatabaseException("Failed to update message id", e); + } + } + + public Optional consumeLoginToken(final String token) { + if (sqlite) return consumeDeleteSelect("pending_logins", "token", token); + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(""" + DELETE FROM pending_logins + WHERE token = ? AND expires_at > ? + RETURNING minecraft_nick + """)) { + ps.setString(1, token); + ps.setLong(2, Instant.now().getEpochSecond()); + try (ResultSet rs = ps.executeQuery()) { + return rs.next() ? Optional.of(rs.getString("minecraft_nick")) : Optional.empty(); + } + } catch (SQLException e) { + throw new DatabaseException("Failed to consume login token", e); + } + } + + public Optional consumeLoginTokenByMessageId(final String messageId) { + if (sqlite) return consumeDeleteSelect("pending_logins", "message_id", messageId); + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(""" + DELETE FROM pending_logins + WHERE message_id = ? AND expires_at > ? + RETURNING minecraft_nick + """)) { + ps.setString(1, messageId); + ps.setLong(2, Instant.now().getEpochSecond()); + try (ResultSet rs = ps.executeQuery()) { + return rs.next() ? Optional.of(rs.getString("minecraft_nick")) : Optional.empty(); + } + } catch (SQLException e) { + throw new DatabaseException("Failed to consume login token by message id", e); + } + } + + public boolean isTokenConsumed(final String token) { + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement( + "SELECT 1 FROM pending_logins WHERE token = ? AND expires_at > ? LIMIT 1")) { + ps.setString(1, token); + ps.setLong(2, Instant.now().getEpochSecond()); + try (ResultSet rs = ps.executeQuery()) { + return !rs.next(); + } + } catch (SQLException e) { + throw new DatabaseException("DB error in isTokenConsumed", e); + } + } + + public void deleteLoginToken(final String token) { + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement("DELETE FROM pending_logins WHERE token = ?")) { + ps.setString(1, token); + ps.executeUpdate(); + } catch (SQLException e) { + throw new DatabaseException("Failed to delete login token", e); + } + } + + public List popExpiredLogins() { + long now = Instant.now().getEpochSecond(); + List nicks = new ArrayList<>(); + + if (sqlite) { + try (Connection conn = ds.getConnection()) { + try (PreparedStatement ps = conn.prepareStatement( + "SELECT minecraft_nick FROM pending_logins WHERE expires_at <= ?")) { + ps.setLong(1, now); + try (ResultSet rs = ps.executeQuery()) { + while (rs.next()) nicks.add(rs.getString("minecraft_nick")); + } + } + if (!nicks.isEmpty()) { + try (PreparedStatement ps = conn.prepareStatement( + "DELETE FROM pending_logins WHERE expires_at <= ?")) { + ps.setLong(1, now); + ps.executeUpdate(); + } + } + } catch (SQLException e) { + throw new DatabaseException("Failed to pop expired logins", e); + } + return nicks; + } + + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement( + "DELETE FROM pending_logins WHERE expires_at <= ? RETURNING minecraft_nick")) { + ps.setLong(1, now); + try (ResultSet rs = ps.executeQuery()) { + while (rs.next()) nicks.add(rs.getString("minecraft_nick")); + } + } catch (SQLException e) { + throw new DatabaseException("Failed to pop expired logins", e); + } + return nicks; + } + + // ─── Helpers ────────────────────────────────────────────────────────────── + + private Optional consumeDeleteSelect(final String table, final String column, final String value) { + long now = Instant.now().getEpochSecond(); + try (Connection conn = ds.getConnection()) { + Optional result; + try (PreparedStatement ps = conn.prepareStatement( + "SELECT minecraft_nick FROM " + table + " WHERE " + column + " = ? AND expires_at > ?")) { + ps.setString(1, value); + ps.setLong(2, now); + try (ResultSet rs = ps.executeQuery()) { + result = rs.next() ? Optional.of(rs.getString("minecraft_nick")) : Optional.empty(); + } + } + if (result.isPresent()) { + try (PreparedStatement ps = conn.prepareStatement( + "DELETE FROM " + table + " WHERE " + column + " = ?")) { + ps.setString(1, value); + ps.executeUpdate(); + } + } + return result; + } catch (SQLException e) { + throw new DatabaseException("Failed to consume from " + table, e); + } + } + + private Optional queryOneUser(final String sql, final String param) { + try (Connection conn = ds.getConnection(); + PreparedStatement ps = conn.prepareStatement(sql)) { + ps.setString(1, param); + try (ResultSet rs = ps.executeQuery()) { + return rs.next() ? Optional.of(mapUser(rs)) : Optional.empty(); + } + } catch (SQLException e) { + throw new DatabaseException("Query failed", e); + } + } + + private static User mapUser(final ResultSet rs) throws SQLException { + return new User( + rs.getLong("id"), + rs.getString("minecraft_nick"), + rs.getString("discord_id"), + rs.getTimestamp("created_at").toInstant() + ); + } + + private static void validateNick(final String nick) { + if (nick == null || !nick.matches("^[a-zA-Z0-9_]{3,16}$")) + throw new IllegalArgumentException("Invalid Minecraft nick: " + nick); + } + + private static void validateDiscordId(final String id) { + if (id == null || !id.matches("^[0-9]{17,20}$")) + throw new IllegalArgumentException("Invalid Discord ID: " + id); + } + + private static RuntimeException translateSqlException(final SQLException e) { + String state = e.getSQLState(); + if ("23505".equals(state) || "23000".equals(state)) { + String msg = e.getMessage(); + if (msg != null && (msg.contains("minecraft_nick") || msg.contains("UNIQUE constraint failed: users.minecraft_nick"))) + return new DuplicateUserException("Minecraft nick already registered"); + if (msg != null && (msg.contains("discord_id") || msg.contains("UNIQUE constraint failed: users.discord_id"))) + return new DuplicateUserException("Discord ID already registered"); + return new DuplicateUserException("Duplicate entry"); + } + return new DatabaseException("Database error", e); + } + + @Override + public void close() { + ds.close(); + } +} diff --git a/common/src/main/java/dev/loki/loAuth/common/exception/DatabaseException.java b/common/src/main/java/dev/loki/loAuth/common/exception/DatabaseException.java new file mode 100644 index 0000000..e9a3a20 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/exception/DatabaseException.java @@ -0,0 +1,5 @@ +package dev.loki.loAuth.common.exception; + +public final class DatabaseException extends RuntimeException { + public DatabaseException(String msg, Throwable cause) { super(msg, cause); } +} \ No newline at end of file diff --git a/common/src/main/java/dev/loki/loAuth/common/exception/DuplicateUserException.java b/common/src/main/java/dev/loki/loAuth/common/exception/DuplicateUserException.java new file mode 100644 index 0000000..05f0702 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/exception/DuplicateUserException.java @@ -0,0 +1,5 @@ +package dev.loki.loAuth.common.exception; + +public final class DuplicateUserException extends RuntimeException { + public DuplicateUserException(String msg) { super(msg); } +} \ No newline at end of file diff --git a/common/src/main/java/dev/loki/loAuth/common/model/User.java b/common/src/main/java/dev/loki/loAuth/common/model/User.java new file mode 100644 index 0000000..0b16d48 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/model/User.java @@ -0,0 +1,3 @@ +package dev.loki.loAuth.common.model; + +public record User(long id, String minecraftNick, String discordId, java.time.Instant createdAt) {} \ No newline at end of file diff --git a/common/src/main/java/dev/loki/loAuth/common/util/CodeGenerator.java b/common/src/main/java/dev/loki/loAuth/common/util/CodeGenerator.java new file mode 100644 index 0000000..c354813 --- /dev/null +++ b/common/src/main/java/dev/loki/loAuth/common/util/CodeGenerator.java @@ -0,0 +1,21 @@ +package dev.loki.loAuth.common.util; + +import java.security.SecureRandom; + +public final class CodeGenerator { + + private static final String ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"; + private static final SecureRandom RNG = new SecureRandom(); + + private CodeGenerator() {} + + public static String generate(final int length) { + if (length < 4 || length > 16) + throw new IllegalArgumentException("Code length must be between 4 and 16"); + + StringBuilder sb = new StringBuilder(length); + for (int i = 0; i < length; i++) + sb.append(ALPHABET.charAt(RNG.nextInt(ALPHABET.length()))); + return sb.toString(); + } +} diff --git a/common/src/main/java/dev/loki/loAuth/common/.java b/common/src/main/java/dev/loki/loAuth/common/.java new file mode 100644 index 0000000..e69de29 diff --git a/discord/build.gradle.kts b/discord/build.gradle.kts new file mode 100644 index 0000000..f9f5851 --- /dev/null +++ b/discord/build.gradle.kts @@ -0,0 +1,21 @@ +import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar + +plugins { + id("com.gradleup.shadow") +} + +dependencies { + implementation(project(":common")) + implementation("net.dv8tion:JDA:6.4.0") + implementation("org.slf4j:slf4j-api:2.0.17") + runtimeOnly("ch.qos.logback:logback-classic:1.5.31") +} + +tasks.named("shadowJar") { + archiveBaseName.set("discord") + archiveClassifier.set("standalone") + + manifest { + attributes["Main-Class"] = "dev.loki.loAuth.discord.BotLauncher" + } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/Bot.java b/discord/src/main/java/dev/loki/loAuth/discord/Bot.java new file mode 100644 index 0000000..0ef8b89 --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/Bot.java @@ -0,0 +1,48 @@ +package dev.loki.loAuth.discord; + +import dev.loki.loAuth.common.db.DatabaseManager; +import dev.loki.loAuth.discord.auth.AuthService; +import dev.loki.loAuth.discord.cfg.BotConfig; +import dev.loki.loAuth.discord.listener.LoginReactionListener; +import dev.loki.loAuth.discord.listener.VerifyListener; +import net.dv8tion.jda.api.JDA; +import net.dv8tion.jda.api.JDABuilder; +import net.dv8tion.jda.api.OnlineStatus; +import net.dv8tion.jda.api.requests.GatewayIntent; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +public final class Bot { + + private static final Logger log = LoggerFactory.getLogger(Bot.class); + + private final BotConfig cfg; + private final DatabaseManager db; + private final JDA jda; + private final AuthService auth; + + public Bot(final BotConfig cfg) { + this.cfg = cfg; + this.db = new DatabaseManager(cfg, "loAuthBot", 10); + this.jda = JDABuilder + .createDefault(cfg.getToken(), + GatewayIntent.DIRECT_MESSAGES, + GatewayIntent.DIRECT_MESSAGE_REACTIONS, + GatewayIntent.MESSAGE_CONTENT) + .setStatus(OnlineStatus.ONLINE) + .build(); + this.auth = new AuthService(db, cfg, jda); + + jda.addEventListener( + new VerifyListener(auth), + new LoginReactionListener(db) + ); + } + + public void shutdown() { + auth.close(); + db.close(); + jda.shutdown(); + log.info("loAuth bot shut down."); + } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/BotLauncher.java b/discord/src/main/java/dev/loki/loAuth/discord/BotLauncher.java new file mode 100644 index 0000000..9bc3f1e --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/BotLauncher.java @@ -0,0 +1,42 @@ +package dev.loki.loAuth.discord; + +import dev.loki.loAuth.discord.cfg.BotCfg; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import java.io.IOException; +import java.io.InputStream; +import java.nio.file.Files; +import java.nio.file.Path; + +public final class BotLauncher { + + private static final Logger log = LoggerFactory.getLogger(BotLauncher.class); + + public static void main(final String[] args) { + BotCfg cfg; + try { + cfg = new BotCfg(getOrCreateConfig("config.yml")); + } catch (IOException e) { + log.error("Failed to load config: {}", e.getMessage()); + return; + } + + Bot bot = new Bot(cfg); + + Runtime.getRuntime().addShutdownHook(new Thread(bot::shutdown, "shutdown")); + + log.info("loAuth bot started."); + } + + private static Path getOrCreateConfig(final String fileName) throws IOException { + Path path = Path.of(System.getProperty("user.dir")).resolve(fileName); + if (Files.notExists(path)) { + try (InputStream in = BotLauncher.class.getResourceAsStream("/" + fileName)) { + if (in == null) throw new IOException("Resource not found: " + fileName); + Files.copy(in, path); + } + } + return path; + } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/auth/AuthService.java b/discord/src/main/java/dev/loki/loAuth/discord/auth/AuthService.java new file mode 100644 index 0000000..3a3621b --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/auth/AuthService.java @@ -0,0 +1,89 @@ +package dev.loki.loAuth.discord.auth; + +import dev.loki.loAuth.common.db.DatabaseManager; +import dev.loki.loAuth.discord.cfg.BotConfig; +import net.dv8tion.jda.api.JDA; +import net.dv8tion.jda.api.entities.User; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import java.util.List; +import java.util.Optional; +import java.util.concurrent.*; + +public final class AuthService implements AutoCloseable { + + private static final Logger log = LoggerFactory.getLogger(AuthService.class); + + private final DatabaseManager db; + private final BotConfig cfg; + private final JDA jda; + private final ScheduledExecutorService scheduler; + + public AuthService(final DatabaseManager db, final BotConfig cfg, final JDA jda) { + this.db = db; + this.cfg = cfg; + this.jda = jda; + this.scheduler = Executors.newSingleThreadScheduledExecutor(r -> { + Thread t = new Thread(r, "auth-expiry"); + t.setDaemon(true); + return t; + }); + + int ttl = cfg.getAuthTimeoutSeconds(); + scheduler.scheduleAtFixedRate(this::kickExpiredLogins, ttl, ttl, TimeUnit.SECONDS); + } + + public void verifyNewUser(final String code, final String discordId) { + Optional nick = db.consumeVerificationCode(code.toUpperCase()); + if (nick.isEmpty()) throw new IllegalArgumentException("Invalid or expired code: " + code); + db.addUser(nick.get(), discordId); + log.info("New user registered: {} -> {}", nick.get(), discordId); + } + + public void requestLoginApproval(final String minecraftNick, final String discordId) { + String token = db.createLoginToken(minecraftNick, discordId); + + User discordUser = jda.retrieveUserById(discordId).complete(); + discordUser.openPrivateChannel().queue(channel -> + channel.sendMessage( + "🔐 **Запрос на вход**\n" + + "Игрок **" + minecraftNick + "** пытается зайти на сервер.\n" + + "Поставь реакцию ✅ на это сообщение чтобы разрешить вход.\n" + + "Сообщение истекает через " + cfg.getAuthTimeoutSeconds() + " секунд." + ).queue(message -> { + message.addReaction(net.dv8tion.jda.api.entities.emoji.Emoji.fromUnicode("✅")).queue(); + db.updateLoginMessageId(token, message.getId()); + }), + error -> log.warn("Cannot send DM to {}: {}", discordId, error.getMessage()) + ); + } + + public void approveLogin(final String discordId) { + db.findByDiscordId(discordId).ifPresent(user -> { + Optional nick = db.consumeLoginToken(findTokenByDiscordId(discordId)); + nick.ifPresent(n -> log.info("Login approved for {} ({})", n, discordId)); + }); + } + + private String findTokenByDiscordId(final String discordId) { + // Ищем токен через БД — запрос по discord_id в pending_logins + // consumeLoginToken вызывается из LoginReactionListener напрямую по token из message + return discordId; // placeholder — см. LoginReactionListener + } + + private void kickExpiredLogins() { + try { + List expired = db.popExpiredLogins(); + if (!expired.isEmpty()) + log.info("Expired logins cleaned up: {}", expired); + } catch (Exception e) { + log.error("Error during expired login cleanup", e); + } + } + + @Override + public void close() { + scheduler.shutdown(); + } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotCfg.java b/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotCfg.java new file mode 100644 index 0000000..bfdf90f --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotCfg.java @@ -0,0 +1,25 @@ +package dev.loki.loAuth.discord.cfg; + +import dev.loki.loAuth.common.cfg.YamlConfig; + +import java.io.IOException; +import java.nio.file.Path; + +public final class BotCfg implements BotConfig { + + private final YamlConfig cfg; + + public BotCfg(final Path configPath) throws IOException { + cfg = new YamlConfig(configPath); + } + + @Override public String getToken() { return cfg.getRequired("token", String.class); } + @Override public String getDbType() { return cfg.getRequired("db_type", String.class); } + @Override public String getDbHost() { return cfg.getRequired("db_host", String.class); } + @Override public int getDbPort() { return cfg.getRequired("db_port", Integer.class); } + @Override public String getDbName() { return cfg.getRequired("db_name", String.class); } + @Override public String getDbUser() { return cfg.getRequired("db_user", String.class); } + @Override public String getDbPassword() { return cfg.getRequired("db_password", String.class); } + @Override public int getAuthTimeoutSeconds() { return cfg.getRequired("auth_timeout_seconds", Integer.class); } + @Override public int getVerificationCodeLength() { return cfg.getRequired("verification_code_length",Integer.class); } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotConfig.java b/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotConfig.java new file mode 100644 index 0000000..696878a --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/cfg/BotConfig.java @@ -0,0 +1,7 @@ +package dev.loki.loAuth.discord.cfg; + +import dev.loki.loAuth.common.cfg.DbConfig; + +public interface BotConfig extends DbConfig { + String getToken(); +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/listener/LoginReactionListener.java b/discord/src/main/java/dev/loki/loAuth/discord/listener/LoginReactionListener.java new file mode 100644 index 0000000..635b316 --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/listener/LoginReactionListener.java @@ -0,0 +1,30 @@ +package dev.loki.loAuth.discord.listener; + +import dev.loki.loAuth.common.db.DatabaseManager; +import net.dv8tion.jda.api.events.message.react.MessageReactionAddEvent; +import net.dv8tion.jda.api.hooks.ListenerAdapter; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +public final class LoginReactionListener extends ListenerAdapter { + + private static final Logger log = LoggerFactory.getLogger(LoginReactionListener.class); + private static final String CHECKMARK = "✅"; + + private final DatabaseManager db; + + public LoginReactionListener(final DatabaseManager db) { + this.db = db; + } + + @Override + public void onMessageReactionAdd(final MessageReactionAddEvent event) { + if (event.getUser() == null || event.getUser().isBot()) return; + if (!CHECKMARK.equals(event.getReaction().getEmoji().getName())) return; + + // Ищем токен по message_id — бот сохранил его при отправке + db.consumeLoginTokenByMessageId(event.getMessageId()).ifPresent(nick -> + log.info("Login approved for {} via reaction.", nick) + ); + } +} diff --git a/discord/src/main/java/dev/loki/loAuth/discord/listener/VerifyListener.java b/discord/src/main/java/dev/loki/loAuth/discord/listener/VerifyListener.java new file mode 100644 index 0000000..38fc357 --- /dev/null +++ b/discord/src/main/java/dev/loki/loAuth/discord/listener/VerifyListener.java @@ -0,0 +1,45 @@ +package dev.loki.loAuth.discord.listener; + +import dev.loki.loAuth.common.exception.DuplicateUserException; +import dev.loki.loAuth.discord.auth.AuthService; +import net.dv8tion.jda.api.entities.channel.ChannelType; +import net.dv8tion.jda.api.events.message.MessageReceivedEvent; +import net.dv8tion.jda.api.hooks.ListenerAdapter; + +public final class VerifyListener extends ListenerAdapter { + + private static final String COMMAND = "!verify"; + + private final AuthService auth; + + public VerifyListener(final AuthService auth) { + this.auth = auth; + } + + @Override + public void onMessageReceived(final MessageReceivedEvent event) { + if (event.getAuthor().isBot()) return; + if (!event.isFromType(ChannelType.PRIVATE)) return; + + String content = event.getMessage().getContentRaw().trim(); + if (!content.toUpperCase().startsWith(COMMAND)) return; + + String[] parts = content.split("\\s+", 2); + if (parts.length < 2) { + event.getChannel().sendMessage("Использование: `!verify КОД`").queue(); + return; + } + + String code = parts[1].trim().toUpperCase(); + String discordId = event.getAuthor().getId(); + + try { + auth.verifyNewUser(code, discordId); + event.getChannel().sendMessage("✅ Ты успешно зарегистрирован! Можешь заходить на сервер.").queue(); + } catch (IllegalArgumentException e) { + event.getChannel().sendMessage("❌ Неверный или просроченный код. Зайди на сервер снова чтобы получить новый.").queue(); + } catch (DuplicateUserException e) { + event.getChannel().sendMessage("⚠️ Этот Discord аккаунт уже привязан к другому игроку.").queue(); + } + } +} diff --git a/discord/src/main/resources/config.yml b/discord/src/main/resources/config.yml new file mode 100644 index 0000000..3810073 --- /dev/null +++ b/discord/src/main/resources/config.yml @@ -0,0 +1,12 @@ +mode: "standalone" # standalone | embedded +token: "token_here" + +db_type: "postgresql" # postgresql | sqlite +db_host: "localhost" +db_port: 5432 +db_name: "mydb" +db_user: "postgres" +db_password: "secret" + +auth_timeout_seconds: 120 +verification_code_length: 6 diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..249e5832f090a2944b7473328c07c9755baa3196 GIT binary patch literal 60756 zcmb5WV{~QRw(p$^Dz@00IL3?^hro$gg*4VI_WAaTyVM5Foj~O|-84 z$;06hMwt*rV;^8iB z1~&0XWpYJmG?Ts^K9PC62H*`G}xom%S%yq|xvG~FIfP=9*f zZoDRJBm*Y0aId=qJ?7dyb)6)JGWGwe)MHeNSzhi)Ko6J<-m@v=a%NsP537lHe0R* z`If4$aaBA#S=w!2z&m>{lpTy^Lm^mg*3?M&7HFv}7K6x*cukLIGX;bQG|QWdn{%_6 zHnwBKr84#B7Z+AnBXa16a?or^R?+>$4`}{*a_>IhbjvyTtWkHw)|ay)ahWUd-qq$~ zMbh6roVsj;_qnC-R{G+Cy6bApVOinSU-;(DxUEl!i2)1EeQ9`hrfqj(nKI7?Z>Xur zoJz-a`PxkYit1HEbv|jy%~DO^13J-ut986EEG=66S}D3!L}Efp;Bez~7tNq{QsUMm zh9~(HYg1pA*=37C0}n4g&bFbQ+?-h-W}onYeE{q;cIy%eZK9wZjSwGvT+&Cgv z?~{9p(;bY_1+k|wkt_|N!@J~aoY@|U_RGoWX<;p{Nu*D*&_phw`8jYkMNpRTWx1H* z>J-Mi_!`M468#5Aix$$u1M@rJEIOc?k^QBc?T(#=n&*5eS#u*Y)?L8Ha$9wRWdH^3D4|Ps)Y?m0q~SiKiSfEkJ!=^`lJ(%W3o|CZ zSrZL-Xxc{OrmsQD&s~zPfNJOpSZUl%V8tdG%ei}lQkM+z@-4etFPR>GOH9+Y_F<3=~SXln9Kb-o~f>2a6Xz@AS3cn^;c_>lUwlK(n>z?A>NbC z`Ud8^aQy>wy=$)w;JZzA)_*Y$Z5hU=KAG&htLw1Uh00yE!|Nu{EZkch zY9O6x7Y??>!7pUNME*d!=R#s)ghr|R#41l!c?~=3CS8&zr6*aA7n9*)*PWBV2w+&I zpW1-9fr3j{VTcls1>ua}F*bbju_Xq%^v;-W~paSqlf zolj*dt`BBjHI)H9{zrkBo=B%>8}4jeBO~kWqO!~Thi!I1H(in=n^fS%nuL=X2+s!p}HfTU#NBGiwEBF^^tKU zbhhv+0dE-sbK$>J#t-J!B$TMgN@Wh5wTtK2BG}4BGfsZOoRUS#G8Cxv|6EI*n&Xxq zt{&OxCC+BNqz$9b0WM7_PyBJEVObHFh%%`~!@MNZlo*oXDCwDcFwT~Rls!aApL<)^ zbBftGKKBRhB!{?fX@l2_y~%ygNFfF(XJzHh#?`WlSL{1lKT*gJM zs>bd^H9NCxqxn(IOky5k-wALFowQr(gw%|`0991u#9jXQh?4l|l>pd6a&rx|v=fPJ z1mutj{YzpJ_gsClbWFk(G}bSlFi-6@mwoQh-XeD*j@~huW4(8ub%^I|azA)h2t#yG z7e_V_<4jlM3D(I+qX}yEtqj)cpzN*oCdYHa!nm%0t^wHm)EmFP*|FMw!tb@&`G-u~ zK)=Sf6z+BiTAI}}i{*_Ac$ffr*Wrv$F7_0gJkjx;@)XjYSh`RjAgrCck`x!zP>Ifu z&%he4P|S)H*(9oB4uvH67^0}I-_ye_!w)u3v2+EY>eD3#8QR24<;7?*hj8k~rS)~7 zSXs5ww)T(0eHSp$hEIBnW|Iun<_i`}VE0Nc$|-R}wlSIs5pV{g_Dar(Zz<4X3`W?K z6&CAIl4U(Qk-tTcK{|zYF6QG5ArrEB!;5s?tW7 zrE3hcFY&k)+)e{+YOJ0X2uDE_hd2{|m_dC}kgEKqiE9Q^A-+>2UonB+L@v3$9?AYw zVQv?X*pK;X4Ovc6Ev5Gbg{{Eu*7{N3#0@9oMI~}KnObQE#Y{&3mM4`w%wN+xrKYgD zB-ay0Q}m{QI;iY`s1Z^NqIkjrTlf`B)B#MajZ#9u41oRBC1oM1vq0i|F59> z#StM@bHt|#`2)cpl_rWB($DNJ3Lap}QM-+A$3pe}NyP(@+i1>o^fe-oxX#Bt`mcQc zb?pD4W%#ep|3%CHAYnr*^M6Czg>~L4?l16H1OozM{P*en298b+`i4$|w$|4AHbzqB zHpYUsHZET$Z0ztC;U+0*+amF!@PI%^oUIZy{`L{%O^i{Xk}X0&nl)n~tVEpcAJSJ} zverw15zP1P-O8h9nd!&hj$zuwjg?DoxYIw{jWM zW5_pj+wFy8Tsa9g<7Qa21WaV&;ejoYflRKcz?#fSH_)@*QVlN2l4(QNk| z4aPnv&mrS&0|6NHq05XQw$J^RR9T{3SOcMKCXIR1iSf+xJ0E_Wv?jEc*I#ZPzyJN2 zUG0UOXHl+PikM*&g$U@g+KbG-RY>uaIl&DEtw_Q=FYq?etc!;hEC_}UX{eyh%dw2V zTTSlap&5>PY{6I#(6`j-9`D&I#|YPP8a;(sOzgeKDWsLa!i-$frD>zr-oid!Hf&yS z!i^cr&7tN}OOGmX2)`8k?Tn!!4=tz~3hCTq_9CdiV!NIblUDxHh(FJ$zs)B2(t5@u z-`^RA1ShrLCkg0)OhfoM;4Z{&oZmAec$qV@ zGQ(7(!CBk<5;Ar%DLJ0p0!ResC#U<+3i<|vib1?{5gCebG7$F7URKZXuX-2WgF>YJ^i zMhHDBsh9PDU8dlZ$yJKtc6JA#y!y$57%sE>4Nt+wF1lfNIWyA`=hF=9Gj%sRwi@vd z%2eVV3y&dvAgyuJ=eNJR+*080dbO_t@BFJO<@&#yqTK&+xc|FRR;p;KVk@J3$S{p` zGaMj6isho#%m)?pOG^G0mzOAw0z?!AEMsv=0T>WWcE>??WS=fII$t$(^PDPMU(P>o z_*0s^W#|x)%tx8jIgZY~A2yG;US0m2ZOQt6yJqW@XNY_>_R7(Nxb8Ged6BdYW6{prd!|zuX$@Q2o6Ona8zzYC1u!+2!Y$Jc9a;wy+pXt}o6~Bu1oF1c zp7Y|SBTNi@=I(K%A60PMjM#sfH$y*c{xUgeSpi#HB`?|`!Tb&-qJ3;vxS!TIzuTZs-&%#bAkAyw9m4PJgvey zM5?up*b}eDEY+#@tKec)-c(#QF0P?MRlD1+7%Yk*jW;)`f;0a-ZJ6CQA?E%>i2Dt7T9?s|9ZF|KP4;CNWvaVKZ+Qeut;Jith_y{v*Ny6Co6!8MZx;Wgo z=qAi%&S;8J{iyD&>3CLCQdTX*$+Rx1AwA*D_J^0>suTgBMBb=*hefV+Ars#mmr+YsI3#!F@Xc1t4F-gB@6aoyT+5O(qMz*zG<9Qq*f0w^V!03rpr*-WLH}; zfM{xSPJeu6D(%8HU%0GEa%waFHE$G?FH^kMS-&I3)ycx|iv{T6Wx}9$$D&6{%1N_8 z_CLw)_9+O4&u94##vI9b-HHm_95m)fa??q07`DniVjAy`t7;)4NpeyAY(aAk(+T_O z1om+b5K2g_B&b2DCTK<>SE$Ode1DopAi)xaJjU>**AJK3hZrnhEQ9E`2=|HHe<^tv z63e(bn#fMWuz>4erc47}!J>U58%<&N<6AOAewyzNTqi7hJc|X{782&cM zHZYclNbBwU6673=!ClmxMfkC$(CykGR@10F!zN1Se83LR&a~$Ht&>~43OX22mt7tcZUpa;9@q}KDX3O&Ugp6< zLZLfIMO5;pTee1vNyVC$FGxzK2f>0Z-6hM82zKg44nWo|n}$Zk6&;5ry3`(JFEX$q zK&KivAe${e^5ZGc3a9hOt|!UOE&OocpVryE$Y4sPcs4rJ>>Kbi2_subQ9($2VN(3o zb~tEzMsHaBmBtaHAyES+d3A(qURgiskSSwUc9CfJ@99&MKp2sooSYZu+-0t0+L*!I zYagjOlPgx|lep9tiU%ts&McF6b0VE57%E0Ho%2oi?=Ks+5%aj#au^OBwNwhec zta6QAeQI^V!dF1C)>RHAmB`HnxyqWx?td@4sd15zPd*Fc9hpDXP23kbBenBxGeD$k z;%0VBQEJ-C)&dTAw_yW@k0u?IUk*NrkJ)(XEeI z9Y>6Vel>#s_v@=@0<{4A{pl=9cQ&Iah0iD0H`q)7NeCIRz8zx;! z^OO;1+IqoQNak&pV`qKW+K0^Hqp!~gSohcyS)?^P`JNZXw@gc6{A3OLZ?@1Uc^I2v z+X!^R*HCm3{7JPq{8*Tn>5;B|X7n4QQ0Bs79uTU%nbqOJh`nX(BVj!#f;#J+WZxx4 z_yM&1Y`2XzhfqkIMO7tB3raJKQS+H5F%o83bM+hxbQ zeeJm=Dvix$2j|b4?mDacb67v-1^lTp${z=jc1=j~QD>7c*@+1?py>%Kj%Ejp7Y-!? z8iYRUlGVrQPandAaxFfks53@2EC#0)%mrnmGRn&>=$H$S8q|kE_iWko4`^vCS2aWg z#!`RHUGyOt*k?bBYu3*j3u0gB#v(3tsije zgIuNNWNtrOkx@Pzs;A9un+2LX!zw+p3_NX^Sh09HZAf>m8l@O*rXy_82aWT$Q>iyy zqO7Of)D=wcSn!0+467&!Hl))eff=$aneB?R!YykdKW@k^_uR!+Q1tR)+IJb`-6=jj zymzA>Sv4>Z&g&WWu#|~GcP7qP&m*w-S$)7Xr;(duqCTe7p8H3k5>Y-n8438+%^9~K z3r^LIT_K{i7DgEJjIocw_6d0!<;wKT`X;&vv+&msmhAAnIe!OTdybPctzcEzBy88_ zWO{6i4YT%e4^WQZB)KHCvA(0tS zHu_Bg+6Ko%a9~$EjRB90`P(2~6uI@SFibxct{H#o&y40MdiXblu@VFXbhz>Nko;7R z70Ntmm-FePqhb%9gL+7U8@(ch|JfH5Fm)5${8|`Lef>LttM_iww6LW2X61ldBmG0z zax3y)njFe>j*T{i0s8D4=L>X^j0)({R5lMGVS#7(2C9@AxL&C-lZQx~czI7Iv+{%1 z2hEG>RzX4S8x3v#9sgGAnPzptM)g&LB}@%E>fy0vGSa(&q0ch|=ncKjNrK z`jA~jObJhrJ^ri|-)J^HUyeZXz~XkBp$VhcTEcTdc#a2EUOGVX?@mYx#Vy*!qO$Jv zQ4rgOJ~M*o-_Wptam=~krnmG*p^j!JAqoQ%+YsDFW7Cc9M%YPiBOrVcD^RY>m9Pd< zu}#9M?K{+;UIO!D9qOpq9yxUquQRmQNMo0pT`@$pVt=rMvyX)ph(-CCJLvUJy71DI zBk7oc7)-%ngdj~s@76Yse3L^gV0 z2==qfp&Q~L(+%RHP0n}+xH#k(hPRx(!AdBM$JCfJ5*C=K3ts>P?@@SZ_+{U2qFZb>4kZ{Go37{# zSQc+-dq*a-Vy4?taS&{Ht|MLRiS)Sn14JOONyXqPNnpq&2y~)6wEG0oNy>qvod$FF z`9o&?&6uZjhZ4_*5qWVrEfu(>_n2Xi2{@Gz9MZ8!YmjYvIMasE9yVQL10NBrTCczq zcTY1q^PF2l!Eraguf{+PtHV3=2A?Cu&NN&a8V(y;q(^_mFc6)%Yfn&X&~Pq zU1?qCj^LF(EQB1F`8NxNjyV%fde}dEa(Hx=r7$~ts2dzDwyi6ByBAIx$NllB4%K=O z$AHz1<2bTUb>(MCVPpK(E9wlLElo(aSd(Os)^Raum`d(g9Vd_+Bf&V;l=@mM=cC>) z)9b0enb)u_7V!!E_bl>u5nf&Rl|2r=2F3rHMdb7y9E}}F82^$Rf+P8%dKnOeKh1vs zhH^P*4Ydr^$)$h@4KVzxrHyy#cKmWEa9P5DJ|- zG;!Qi35Tp7XNj60=$!S6U#!(${6hyh7d4q=pF{`0t|N^|L^d8pD{O9@tF~W;#Je*P z&ah%W!KOIN;SyAEhAeTafJ4uEL`(RtnovM+cb(O#>xQnk?dzAjG^~4$dFn^<@-Na3 z395;wBnS{t*H;Jef2eE!2}u5Ns{AHj>WYZDgQJt8v%x?9{MXqJsGP|l%OiZqQ1aB! z%E=*Ig`(!tHh>}4_z5IMpg{49UvD*Pp9!pxt_gdAW%sIf3k6CTycOT1McPl=_#0?8 zVjz8Hj*Vy9c5-krd-{BQ{6Xy|P$6LJvMuX$* zA+@I_66_ET5l2&gk9n4$1M3LN8(yEViRx&mtd#LD}AqEs?RW=xKC(OCWH;~>(X6h!uDxXIPH06xh z*`F4cVlbDP`A)-fzf>MuScYsmq&1LUMGaQ3bRm6i7OsJ|%uhTDT zlvZA1M}nz*SalJWNT|`dBm1$xlaA>CCiQ zK`xD-RuEn>-`Z?M{1%@wewf#8?F|(@1e0+T4>nmlSRrNK5f)BJ2H*$q(H>zGD0>eL zQ!tl_Wk)k*e6v^m*{~A;@6+JGeWU-q9>?+L_#UNT%G?4&BnOgvm9@o7l?ov~XL+et zbGT)|G7)KAeqb=wHSPk+J1bdg7N3$vp(ekjI1D9V$G5Cj!=R2w=3*4!z*J-r-cyeb zd(i2KmX!|Lhey!snRw z?#$Gu%S^SQEKt&kep)up#j&9}e+3=JJBS(s>MH+|=R(`8xK{mmndWo_r`-w1#SeRD&YtAJ#GiVI*TkQZ}&aq<+bU2+coU3!jCI6E+Ad_xFW*ghnZ$q zAoF*i&3n1j#?B8x;kjSJD${1jdRB;)R*)Ao!9bd|C7{;iqDo|T&>KSh6*hCD!rwv= zyK#F@2+cv3=|S1Kef(E6Niv8kyLVLX&e=U;{0x{$tDfShqkjUME>f8d(5nzSkY6@! z^-0>DM)wa&%m#UF1F?zR`8Y3X#tA!*7Q$P3lZJ%*KNlrk_uaPkxw~ zxZ1qlE;Zo;nb@!SMazSjM>;34ROOoygo%SF);LL>rRonWwR>bmSd1XD^~sGSu$Gg# zFZ`|yKU0%!v07dz^v(tY%;So(e`o{ZYTX`hm;@b0%8|H>VW`*cr8R%3n|ehw2`(9B+V72`>SY}9^8oh$En80mZK9T4abVG*to;E z1_S6bgDOW?!Oy1LwYy=w3q~KKdbNtyH#d24PFjX)KYMY93{3-mPP-H>@M-_>N~DDu zENh~reh?JBAK=TFN-SfDfT^=+{w4ea2KNWXq2Y<;?(gf(FgVp8Zp-oEjKzB%2Iqj;48GmY3h=bcdYJ}~&4tS`Q1sb=^emaW$IC$|R+r-8V- zf0$gGE(CS_n4s>oicVk)MfvVg#I>iDvf~Ov8bk}sSxluG!6#^Z_zhB&U^`eIi1@j( z^CK$z^stBHtaDDHxn+R;3u+>Lil^}fj?7eaGB z&5nl^STqcaBxI@v>%zG|j))G(rVa4aY=B@^2{TFkW~YP!8!9TG#(-nOf^^X-%m9{Z zCC?iC`G-^RcBSCuk=Z`(FaUUe?hf3{0C>>$?Vs z`2Uud9M+T&KB6o4o9kvdi^Q=Bw!asPdxbe#W-Oaa#_NP(qpyF@bVxv5D5))srkU#m zj_KA+#7sqDn*Ipf!F5Byco4HOSd!Ui$l94|IbW%Ny(s1>f4|Mv^#NfB31N~kya9!k zWCGL-$0ZQztBate^fd>R!hXY_N9ZjYp3V~4_V z#eB)Kjr8yW=+oG)BuNdZG?jaZlw+l_ma8aET(s+-x+=F-t#Qoiuu1i`^x8Sj>b^U} zs^z<()YMFP7CmjUC@M=&lA5W7t&cxTlzJAts*%PBDAPuqcV5o7HEnqjif_7xGt)F% zGx2b4w{@!tE)$p=l3&?Bf#`+!-RLOleeRk3 z7#pF|w@6_sBmn1nECqdunmG^}pr5(ZJQVvAt$6p3H(16~;vO>?sTE`Y+mq5YP&PBo zvq!7#W$Gewy`;%6o^!Dtjz~x)T}Bdk*BS#=EY=ODD&B=V6TD2z^hj1m5^d6s)D*wk zu$z~D7QuZ2b?5`p)E8e2_L38v3WE{V`bVk;6fl#o2`) z99JsWhh?$oVRn@$S#)uK&8DL8>An0&S<%V8hnGD7Z^;Y(%6;^9!7kDQ5bjR_V+~wp zfx4m3z6CWmmZ<8gDGUyg3>t8wgJ5NkkiEm^(sedCicP^&3D%}6LtIUq>mXCAt{9eF zNXL$kGcoUTf_Lhm`t;hD-SE)m=iBnxRU(NyL}f6~1uH)`K!hmYZjLI%H}AmEF5RZt z06$wn63GHnApHXZZJ}s^s)j9(BM6e*7IBK6Bq(!)d~zR#rbxK9NVIlgquoMq z=eGZ9NR!SEqP6=9UQg#@!rtbbSBUM#ynF);zKX+|!Zm}*{H z+j=d?aZ2!?@EL7C~%B?6ouCKLnO$uWn;Y6Xz zX8dSwj732u(o*U3F$F=7xwxm>E-B+SVZH;O-4XPuPkLSt_?S0)lb7EEg)Mglk0#eS z9@jl(OnH4juMxY+*r03VDfPx_IM!Lmc(5hOI;`?d37f>jPP$?9jQQIQU@i4vuG6MagEoJrQ=RD7xt@8E;c zeGV*+Pt+t$@pt!|McETOE$9k=_C!70uhwRS9X#b%ZK z%q(TIUXSS^F0`4Cx?Rk07C6wI4!UVPeI~-fxY6`YH$kABdOuiRtl73MqG|~AzZ@iL&^s?24iS;RK_pdlWkhcF z@Wv-Om(Aealfg)D^adlXh9Nvf~Uf@y;g3Y)i(YP zEXDnb1V}1pJT5ZWyw=1i+0fni9yINurD=EqH^ciOwLUGi)C%Da)tyt=zq2P7pV5-G zR7!oq28-Fgn5pW|nlu^b!S1Z#r7!Wtr{5J5PQ>pd+2P7RSD?>(U7-|Y z7ZQ5lhYIl_IF<9?T9^IPK<(Hp;l5bl5tF9>X-zG14_7PfsA>6<$~A338iYRT{a@r_ zuXBaT=`T5x3=s&3=RYx6NgG>No4?5KFBVjE(swfcivcIpPQFx5l+O;fiGsOrl5teR z_Cm+;PW}O0Dwe_(4Z@XZ)O0W-v2X><&L*<~*q3dg;bQW3g7)a#3KiQP>+qj|qo*Hk z?57>f2?f@`=Fj^nkDKeRkN2d$Z@2eNKpHo}ksj-$`QKb6n?*$^*%Fb3_Kbf1(*W9K>{L$mud2WHJ=j0^=g30Xhg8$#g^?36`p1fm;;1@0Lrx+8t`?vN0ZorM zSW?rhjCE8$C|@p^sXdx z|NOHHg+fL;HIlqyLp~SSdIF`TnSHehNCU9t89yr@)FY<~hu+X`tjg(aSVae$wDG*C zq$nY(Y494R)hD!i1|IIyP*&PD_c2FPgeY)&mX1qujB1VHPG9`yFQpLFVQ0>EKS@Bp zAfP5`C(sWGLI?AC{XEjLKR4FVNw(4+9b?kba95ukgR1H?w<8F7)G+6&(zUhIE5Ef% z=fFkL3QKA~M@h{nzjRq!Y_t!%U66#L8!(2-GgFxkD1=JRRqk=n%G(yHKn%^&$dW>; zSjAcjETMz1%205se$iH_)ZCpfg_LwvnsZQAUCS#^FExp8O4CrJb6>JquNV@qPq~3A zZ<6dOU#6|8+fcgiA#~MDmcpIEaUO02L5#T$HV0$EMD94HT_eXLZ2Zi&(! z&5E>%&|FZ`)CN10tM%tLSPD*~r#--K(H-CZqIOb99_;m|D5wdgJ<1iOJz@h2Zkq?} z%8_KXb&hf=2Wza(Wgc;3v3TN*;HTU*q2?#z&tLn_U0Nt!y>Oo>+2T)He6%XuP;fgn z-G!#h$Y2`9>Jtf}hbVrm6D70|ERzLAU>3zoWhJmjWfgM^))T+2u$~5>HF9jQDkrXR z=IzX36)V75PrFjkQ%TO+iqKGCQ-DDXbaE;C#}!-CoWQx&v*vHfyI>$HNRbpvm<`O( zlx9NBWD6_e&J%Ous4yp~s6)Ghni!I6)0W;9(9$y1wWu`$gs<$9Mcf$L*piP zPR0Av*2%ul`W;?-1_-5Zy0~}?`e@Y5A&0H!^ApyVTT}BiOm4GeFo$_oPlDEyeGBbh z1h3q&Dx~GmUS|3@4V36&$2uO8!Yp&^pD7J5&TN{?xphf*-js1fP?B|`>p_K>lh{ij zP(?H%e}AIP?_i^f&Li=FDSQ`2_NWxL+BB=nQr=$ zHojMlXNGauvvwPU>ZLq!`bX-5F4jBJ&So{kE5+ms9UEYD{66!|k~3vsP+mE}x!>%P za98bAU0!h0&ka4EoiDvBM#CP#dRNdXJcb*(%=<(g+M@<)DZ!@v1V>;54En?igcHR2 zhubQMq}VSOK)onqHfczM7YA@s=9*ow;k;8)&?J3@0JiGcP! zP#00KZ1t)GyZeRJ=f0^gc+58lc4Qh*S7RqPIC6GugG1gXe$LIQMRCo8cHf^qXgAa2 z`}t>u2Cq1CbSEpLr~E=c7~=Qkc9-vLE%(v9N*&HF`(d~(0`iukl5aQ9u4rUvc8%m) zr2GwZN4!s;{SB87lJB;veebPmqE}tSpT>+`t?<457Q9iV$th%i__Z1kOMAswFldD6 ztbOvO337S5o#ZZgN2G99_AVqPv!?Gmt3pzgD+Hp3QPQ`9qJ(g=kjvD+fUSS3upJn! zqoG7acIKEFRX~S}3|{EWT$kdz#zrDlJU(rPkxjws_iyLKU8+v|*oS_W*-guAb&Pj1 z35Z`3z<&Jb@2Mwz=KXucNYdY#SNO$tcVFr9KdKm|%^e-TXzs6M`PBper%ajkrIyUe zp$vVxVs9*>Vp4_1NC~Zg)WOCPmOxI1V34QlG4!aSFOH{QqSVq1^1)- z0P!Z?tT&E-ll(pwf0?=F=yOzik=@nh1Clxr9}Vij89z)ePDSCYAqw?lVI?v?+&*zH z)p$CScFI8rrwId~`}9YWPFu0cW1Sf@vRELs&cbntRU6QfPK-SO*mqu|u~}8AJ!Q$z znzu}50O=YbjwKCuSVBs6&CZR#0FTu)3{}qJJYX(>QPr4$RqWiwX3NT~;>cLn*_&1H zaKpIW)JVJ>b{uo2oq>oQt3y=zJjb%fU@wLqM{SyaC6x2snMx-}ivfU<1- znu1Lh;i$3Tf$Kh5Uk))G!D1UhE8pvx&nO~w^fG)BC&L!_hQk%^p`Kp@F{cz>80W&T ziOK=Sq3fdRu*V0=S53rcIfWFazI}Twj63CG(jOB;$*b`*#B9uEnBM`hDk*EwSRdwP8?5T?xGUKs=5N83XsR*)a4|ijz|c{4tIU+4j^A5C<#5 z*$c_d=5ml~%pGxw#?*q9N7aRwPux5EyqHVkdJO=5J>84!X6P>DS8PTTz>7C#FO?k#edkntG+fJk8ZMn?pmJSO@`x-QHq;7^h6GEXLXo1TCNhH z8ZDH{*NLAjo3WM`xeb=X{((uv3H(8&r8fJJg_uSs_%hOH%JDD?hu*2NvWGYD+j)&` zz#_1%O1wF^o5ryt?O0n;`lHbzp0wQ?rcbW(F1+h7_EZZ9{>rePvLAPVZ_R|n@;b$;UchU=0j<6k8G9QuQf@76oiE*4 zXOLQ&n3$NR#p4<5NJMVC*S);5x2)eRbaAM%VxWu9ohlT;pGEk7;002enCbQ>2r-us z3#bpXP9g|mE`65VrN`+3mC)M(eMj~~eOf)do<@l+fMiTR)XO}422*1SL{wyY(%oMpBgJagtiDf zz>O6(m;};>Hi=t8o{DVC@YigqS(Qh+ix3Rwa9aliH}a}IlOCW1@?%h_bRbq-W{KHF z%Vo?-j@{Xi@=~Lz5uZP27==UGE15|g^0gzD|3x)SCEXrx`*MP^FDLl%pOi~~Il;dc z^hrwp9sYeT7iZ)-ajKy@{a`kr0-5*_!XfBpXwEcFGJ;%kV$0Nx;apKrur zJN2J~CAv{Zjj%FolyurtW8RaFmpn&zKJWL>(0;;+q(%(Hx!GMW4AcfP0YJ*Vz!F4g z!ZhMyj$BdXL@MlF%KeInmPCt~9&A!;cRw)W!Hi@0DY(GD_f?jeV{=s=cJ6e}JktJw zQORnxxj3mBxfrH=x{`_^Z1ddDh}L#V7i}$njUFRVwOX?qOTKjfPMBO4y(WiU<)epb zvB9L=%jW#*SL|Nd_G?E*_h1^M-$PG6Pc_&QqF0O-FIOpa4)PAEPsyvB)GKasmBoEt z?_Q2~QCYGH+hW31x-B=@5_AN870vY#KB~3a*&{I=f);3Kv7q4Q7s)0)gVYx2#Iz9g(F2;=+Iy4 z6KI^8GJ6D@%tpS^8boU}zpi=+(5GfIR)35PzrbuXeL1Y1N%JK7PG|^2k3qIqHfX;G zQ}~JZ-UWx|60P5?d1e;AHx!_;#PG%d=^X(AR%i`l0jSpYOpXoKFW~7ip7|xvN;2^? zsYC9fanpO7rO=V7+KXqVc;Q5z%Bj})xHVrgoR04sA2 zl~DAwv=!(()DvH*=lyhIlU^hBkA0$e*7&fJpB0|oB7)rqGK#5##2T`@_I^|O2x4GO z;xh6ROcV<9>?e0)MI(y++$-ksV;G;Xe`lh76T#Htuia+(UrIXrf9?

L(tZ$0BqX1>24?V$S+&kLZ`AodQ4_)P#Q3*4xg8}lMV-FLwC*cN$< zt65Rf%7z41u^i=P*qO8>JqXPrinQFapR7qHAtp~&RZ85$>ob|Js;GS^y;S{XnGiBc zGa4IGvDl?x%gY`vNhv8wgZnP#UYI-w*^4YCZnxkF85@ldepk$&$#3EAhrJY0U)lR{F6sM3SONV^+$;Zx8BD&Eku3K zKNLZyBni3)pGzU0;n(X@1fX8wYGKYMpLmCu{N5-}epPDxClPFK#A@02WM3!myN%bkF z|GJ4GZ}3sL{3{qXemy+#Uk{4>Kf8v11;f8I&c76+B&AQ8udd<8gU7+BeWC`akUU~U zgXoxie>MS@rBoyY8O8Tc&8id!w+_ooxcr!1?#rc$-|SBBtH6S?)1e#P#S?jFZ8u-Bs&k`yLqW|{j+%c#A4AQ>+tj$Y z^CZajspu$F%73E68Lw5q7IVREED9r1Ijsg#@DzH>wKseye>hjsk^{n0g?3+gs@7`i zHx+-!sjLx^fS;fY!ERBU+Q zVJ!e0hJH%P)z!y%1^ZyG0>PN@5W~SV%f>}c?$H8r;Sy-ui>aruVTY=bHe}$e zi&Q4&XK!qT7-XjCrDaufT@>ieQ&4G(SShUob0Q>Gznep9fR783jGuUynAqc6$pYX; z7*O@@JW>O6lKIk0G00xsm|=*UVTQBB`u1f=6wGAj%nHK_;Aqmfa!eAykDmi-@u%6~ z;*c!pS1@V8r@IX9j&rW&d*}wpNs96O2Ute>%yt{yv>k!6zfT6pru{F1M3P z2WN1JDYqoTB#(`kE{H676QOoX`cnqHl1Yaru)>8Ky~VU{)r#{&s86Vz5X)v15ULHA zAZDb{99+s~qI6;-dQ5DBjHJP@GYTwn;Dv&9kE<0R!d z8tf1oq$kO`_sV(NHOSbMwr=To4r^X$`sBW4$gWUov|WY?xccQJN}1DOL|GEaD_!@& z15p?Pj+>7d`@LvNIu9*^hPN)pwcv|akvYYq)ks%`G>!+!pW{-iXPZsRp8 z35LR;DhseQKWYSD`%gO&k$Dj6_6q#vjWA}rZcWtQr=Xn*)kJ9kacA=esi*I<)1>w^ zO_+E>QvjP)qiSZg9M|GNeLtO2D7xT6vsj`88sd!94j^AqxFLi}@w9!Y*?nwWARE0P znuI_7A-saQ+%?MFA$gttMV-NAR^#tjl_e{R$N8t2NbOlX373>e7Ox=l=;y#;M7asp zRCz*CLnrm$esvSb5{T<$6CjY zmZ(i{Rs_<#pWW>(HPaaYj`%YqBra=Ey3R21O7vUbzOkJJO?V`4-D*u4$Me0Bx$K(lYo`JO}gnC zx`V}a7m-hLU9Xvb@K2ymioF)vj12<*^oAqRuG_4u%(ah?+go%$kOpfb`T96P+L$4> zQ#S+sA%VbH&mD1k5Ak7^^dZoC>`1L%i>ZXmooA!%GI)b+$D&ziKrb)a=-ds9xk#~& z7)3iem6I|r5+ZrTRe_W861x8JpD`DDIYZNm{$baw+$)X^Jtjnl0xlBgdnNY}x%5za zkQ8E6T<^$sKBPtL4(1zi_Rd(tVth*3Xs!ulflX+70?gb&jRTnI8l+*Aj9{|d%qLZ+ z>~V9Z;)`8-lds*Zgs~z1?Fg?Po7|FDl(Ce<*c^2=lFQ~ahwh6rqSjtM5+$GT>3WZW zj;u~w9xwAhOc<kF}~`CJ68 z?(S5vNJa;kriPlim33{N5`C{9?NWhzsna_~^|K2k4xz1`xcui*LXL-1#Y}Hi9`Oo!zQ>x-kgAX4LrPz63uZ+?uG*84@PKq-KgQlMNRwz=6Yes) zY}>YN+qP}nwr$(CZQFjUOI=-6J$2^XGvC~EZ+vrqWaOXB$k?%Suf5k=4>AveC1aJ! ziaW4IS%F$_Babi)kA8Y&u4F7E%99OPtm=vzw$$ zEz#9rvn`Iot_z-r3MtV>k)YvErZ<^Oa${`2>MYYODSr6?QZu+be-~MBjwPGdMvGd!b!elsdi4% z`37W*8+OGulab8YM?`KjJ8e+jM(tqLKSS@=jimq3)Ea2EB%88L8CaM+aG7;27b?5` z4zuUWBr)f)k2o&xg{iZ$IQkJ+SK>lpq4GEacu~eOW4yNFLU!Kgc{w4&D$4ecm0f}~ zTTzquRW@`f0}|IILl`!1P+;69g^upiPA6F{)U8)muWHzexRenBU$E^9X-uIY2%&1w z_=#5*(nmxJ9zF%styBwivi)?#KMG96-H@hD-H_&EZiRNsfk7mjBq{L%!E;Sqn!mVX*}kXhwH6eh;b42eD!*~upVG@ z#smUqz$ICm!Y8wY53gJeS|Iuard0=;k5i5Z_hSIs6tr)R4n*r*rE`>38Pw&lkv{_r!jNN=;#?WbMj|l>cU(9trCq; z%nN~r^y7!kH^GPOf3R}?dDhO=v^3BeP5hF|%4GNQYBSwz;x({21i4OQY->1G=KFyu z&6d`f2tT9Yl_Z8YACZaJ#v#-(gcyeqXMhYGXb=t>)M@fFa8tHp2x;ODX=Ap@a5I=U z0G80^$N0G4=U(>W%mrrThl0DjyQ-_I>+1Tdd_AuB3qpYAqY54upwa3}owa|x5iQ^1 zEf|iTZxKNGRpI>34EwkIQ2zHDEZ=(J@lRaOH>F|2Z%V_t56Km$PUYu^xA5#5Uj4I4RGqHD56xT%H{+P8Ag>e_3pN$4m8n>i%OyJFPNWaEnJ4McUZPa1QmOh?t8~n& z&RulPCors8wUaqMHECG=IhB(-tU2XvHP6#NrLVyKG%Ee*mQ5Ps%wW?mcnriTVRc4J`2YVM>$ixSF2Xi+Wn(RUZnV?mJ?GRdw%lhZ+t&3s7g!~g{%m&i<6 z5{ib-<==DYG93I(yhyv4jp*y3#*WNuDUf6`vTM%c&hiayf(%=x@4$kJ!W4MtYcE#1 zHM?3xw63;L%x3drtd?jot!8u3qeqctceX3m;tWetK+>~q7Be$h>n6riK(5@ujLgRS zvOym)k+VAtyV^mF)$29Y`nw&ijdg~jYpkx%*^ z8dz`C*g=I?;clyi5|!27e2AuSa$&%UyR(J3W!A=ZgHF9OuKA34I-1U~pyD!KuRkjA zbkN!?MfQOeN>DUPBxoy5IX}@vw`EEB->q!)8fRl_mqUVuRu|C@KD-;yl=yKc=ZT0% zB$fMwcC|HE*0f8+PVlWHi>M`zfsA(NQFET?LrM^pPcw`cK+Mo0%8*x8@65=CS_^$cG{GZQ#xv($7J z??R$P)nPLodI;P!IC3eEYEHh7TV@opr#*)6A-;EU2XuogHvC;;k1aI8asq7ovoP!* z?x%UoPrZjj<&&aWpsbr>J$Er-7!E(BmOyEv!-mbGQGeJm-U2J>74>o5x`1l;)+P&~ z>}f^=Rx(ZQ2bm+YE0u=ZYrAV@apyt=v1wb?R@`i_g64YyAwcOUl=C!i>=Lzb$`tjv zOO-P#A+)t-JbbotGMT}arNhJmmGl-lyUpMn=2UacVZxmiG!s!6H39@~&uVokS zG=5qWhfW-WOI9g4!R$n7!|ViL!|v3G?GN6HR0Pt_L5*>D#FEj5wM1DScz4Jv@Sxnl zB@MPPmdI{(2D?;*wd>3#tjAirmUnQoZrVv`xM3hARuJksF(Q)wd4P$88fGYOT1p6U z`AHSN!`St}}UMBT9o7i|G`r$ zrB=s$qV3d6$W9@?L!pl0lf%)xs%1ko^=QY$ty-57=55PvP(^6E7cc zGJ*>m2=;fOj?F~yBf@K@9qwX0hA803Xw+b0m}+#a(>RyR8}*Y<4b+kpp|OS+!whP( zH`v{%s>jsQI9rd$*vm)EkwOm#W_-rLTHcZRek)>AtF+~<(did)*oR1|&~1|e36d-d zgtm5cv1O0oqgWC%Et@P4Vhm}Ndl(Y#C^MD03g#PH-TFy+7!Osv1z^UWS9@%JhswEq~6kSr2DITo59+; ze=ZC}i2Q?CJ~Iyu?vn|=9iKV>4j8KbxhE4&!@SQ^dVa-gK@YfS9xT(0kpW*EDjYUkoj! zE49{7H&E}k%5(>sM4uGY)Q*&3>{aitqdNnRJkbOmD5Mp5rv-hxzOn80QsG=HJ_atI-EaP69cacR)Uvh{G5dTpYG7d zbtmRMq@Sexey)||UpnZ?;g_KMZq4IDCy5}@u!5&B^-=6yyY{}e4Hh3ee!ZWtL*s?G zxG(A!<9o!CL+q?u_utltPMk+hn?N2@?}xU0KlYg?Jco{Yf@|mSGC<(Zj^yHCvhmyx z?OxOYoxbptDK()tsJ42VzXdINAMWL$0Gcw?G(g8TMB)Khw_|v9`_ql#pRd2i*?CZl z7k1b!jQB=9-V@h%;Cnl7EKi;Y^&NhU0mWEcj8B|3L30Ku#-9389Q+(Yet0r$F=+3p z6AKOMAIi|OHyzlHZtOm73}|ntKtFaXF2Fy|M!gOh^L4^62kGUoWS1i{9gsds_GWBc zLw|TaLP64z3z9?=R2|T6Xh2W4_F*$cq>MtXMOy&=IPIJ`;!Tw?PqvI2b*U1)25^<2 zU_ZPoxg_V0tngA0J+mm?3;OYw{i2Zb4x}NedZug!>EoN3DC{1i)Z{Z4m*(y{ov2%- zk(w>+scOO}MN!exSc`TN)!B=NUX`zThWO~M*ohqq;J2hx9h9}|s#?@eR!=F{QTrq~ zTcY|>azkCe$|Q0XFUdpFT=lTcyW##i;-e{}ORB4D?t@SfqGo_cS z->?^rh$<&n9DL!CF+h?LMZRi)qju!meugvxX*&jfD!^1XB3?E?HnwHP8$;uX{Rvp# zh|)hM>XDv$ZGg=$1{+_bA~u-vXqlw6NH=nkpyWE0u}LQjF-3NhATL@9rRxMnpO%f7 z)EhZf{PF|mKIMFxnC?*78(}{Y)}iztV12}_OXffJ;ta!fcFIVjdchyHxH=t%ci`Xd zX2AUB?%?poD6Zv*&BA!6c5S#|xn~DK01#XvjT!w!;&`lDXSJT4_j$}!qSPrb37vc{ z9^NfC%QvPu@vlxaZ;mIbn-VHA6miwi8qJ~V;pTZkKqqOii<1Cs}0i?uUIss;hM4dKq^1O35y?Yp=l4i zf{M!@QHH~rJ&X~8uATV><23zZUbs-J^3}$IvV_ANLS08>k`Td7aU_S1sLsfi*C-m1 z-e#S%UGs4E!;CeBT@9}aaI)qR-6NU@kvS#0r`g&UWg?fC7|b^_HyCE!8}nyh^~o@< zpm7PDFs9yxp+byMS(JWm$NeL?DNrMCNE!I^ko-*csB+dsf4GAq{=6sfyf4wb>?v1v zmb`F*bN1KUx-`ra1+TJ37bXNP%`-Fd`vVQFTwWpX@;s(%nDQa#oWhgk#mYlY*!d>( zE&!|ySF!mIyfING+#%RDY3IBH_fW$}6~1%!G`suHub1kP@&DoAd5~7J55;5_noPI6eLf{t;@9Kf<{aO0`1WNKd?<)C-|?C?)3s z>wEq@8=I$Wc~Mt$o;g++5qR+(6wt9GI~pyrDJ%c?gPZe)owvy^J2S=+M^ z&WhIE`g;;J^xQLVeCtf7b%Dg#Z2gq9hp_%g)-%_`y*zb; zn9`f`mUPN-Ts&fFo(aNTsXPA|J!TJ{0hZp0^;MYHLOcD=r_~~^ymS8KLCSeU3;^QzJNqS z5{5rEAv#l(X?bvwxpU;2%pQftF`YFgrD1jt2^~Mt^~G>T*}A$yZc@(k9orlCGv&|1 zWWvVgiJsCAtamuAYT~nzs?TQFt<1LSEx!@e0~@yd6$b5!Zm(FpBl;(Cn>2vF?k zOm#TTjFwd2D-CyA!mqR^?#Uwm{NBemP>(pHmM}9;;8`c&+_o3#E5m)JzfwN?(f-a4 zyd%xZc^oQx3XT?vcCqCX&Qrk~nu;fxs@JUoyVoi5fqpi&bUhQ2y!Ok2pzsFR(M(|U zw3E+kH_zmTRQ9dUMZWRE%Zakiwc+lgv7Z%|YO9YxAy`y28`Aw;WU6HXBgU7fl@dnt z-fFBV)}H-gqP!1;V@Je$WcbYre|dRdp{xt!7sL3Eoa%IA`5CAA%;Wq8PktwPdULo! z8!sB}Qt8#jH9Sh}QiUtEPZ6H0b*7qEKGJ%ITZ|vH)5Q^2m<7o3#Z>AKc%z7_u`rXA zqrCy{-{8;9>dfllLu$^M5L z-hXs))h*qz%~ActwkIA(qOVBZl2v4lwbM>9l70Y`+T*elINFqt#>OaVWoja8RMsep z6Or3f=oBnA3vDbn*+HNZP?8LsH2MY)x%c13@(XfuGR}R?Nu<|07{$+Lc3$Uv^I!MQ z>6qWgd-=aG2Y^24g4{Bw9ueOR)(9h`scImD=86dD+MnSN4$6 z^U*o_mE-6Rk~Dp!ANp#5RE9n*LG(Vg`1)g6!(XtDzsov$Dvz|Gv1WU68J$CkshQhS zCrc|cdkW~UK}5NeaWj^F4MSgFM+@fJd{|LLM)}_O<{rj z+?*Lm?owq?IzC%U%9EBga~h-cJbIu=#C}XuWN>OLrc%M@Gu~kFEYUi4EC6l#PR2JS zQUkGKrrS#6H7}2l0F@S11DP`@pih0WRkRJl#F;u{c&ZC{^$Z+_*lB)r)-bPgRFE;* zl)@hK4`tEP=P=il02x7-C7p%l=B`vkYjw?YhdJU9!P!jcmY$OtC^12w?vy3<<=tlY zUwHJ_0lgWN9vf>1%WACBD{UT)1qHQSE2%z|JHvP{#INr13jM}oYv_5#xsnv9`)UAO zuwgyV4YZ;O)eSc3(mka6=aRohi!HH@I#xq7kng?Acdg7S4vDJb6cI5fw?2z%3yR+| zU5v@Hm}vy;${cBp&@D=HQ9j7NcFaOYL zj-wV=eYF{|XTkFNM2uz&T8uH~;)^Zo!=KP)EVyH6s9l1~4m}N%XzPpduPg|h-&lL` zAXspR0YMOKd2yO)eMFFJ4?sQ&!`dF&!|niH*!^*Ml##o0M(0*uK9&yzekFi$+mP9s z>W9d%Jb)PtVi&-Ha!o~Iyh@KRuKpQ@)I~L*d`{O8!kRObjO7=n+Gp36fe!66neh+7 zW*l^0tTKjLLzr`x4`_8&on?mjW-PzheTNox8Hg7Nt@*SbE-%kP2hWYmHu#Fn@Q^J(SsPUz*|EgOoZ6byg3ew88UGdZ>9B2Tq=jF72ZaR=4u%1A6Vm{O#?@dD!(#tmR;eP(Fu z{$0O%=Vmua7=Gjr8nY%>ul?w=FJ76O2js&17W_iq2*tb!i{pt#`qZB#im9Rl>?t?0c zicIC}et_4d+CpVPx)i4~$u6N-QX3H77ez z?ZdvXifFk|*F8~L(W$OWM~r`pSk5}#F?j_5u$Obu9lDWIknO^AGu+Blk7!9Sb;NjS zncZA?qtASdNtzQ>z7N871IsPAk^CC?iIL}+{K|F@BuG2>qQ;_RUYV#>hHO(HUPpk@ z(bn~4|F_jiZi}Sad;_7`#4}EmD<1EiIxa48QjUuR?rC}^HRocq`OQPM@aHVKP9E#q zy%6bmHygCpIddPjE}q_DPC`VH_2m;Eey&ZH)E6xGeStOK7H)#+9y!%-Hm|QF6w#A( zIC0Yw%9j$s-#odxG~C*^MZ?M<+&WJ+@?B_QPUyTg9DJGtQN#NIC&-XddRsf3n^AL6 zT@P|H;PvN;ZpL0iv$bRb7|J{0o!Hq+S>_NrH4@coZtBJu#g8#CbR7|#?6uxi8d+$g z87apN>EciJZ`%Zv2**_uiET9Vk{pny&My;+WfGDw4EVL#B!Wiw&M|A8f1A@ z(yFQS6jfbH{b8Z-S7D2?Ixl`j0{+ZnpT=;KzVMLW{B$`N?Gw^Fl0H6lT61%T2AU**!sX0u?|I(yoy&Xveg7XBL&+>n6jd1##6d>TxE*Vj=8lWiG$4=u{1UbAa5QD>5_ z;Te^42v7K6Mmu4IWT6Rnm>oxrl~b<~^e3vbj-GCdHLIB_>59}Ya+~OF68NiH=?}2o zP(X7EN=quQn&)fK>M&kqF|<_*H`}c zk=+x)GU>{Af#vx&s?`UKUsz})g^Pc&?Ka@t5$n$bqf6{r1>#mWx6Ep>9|A}VmWRnowVo`OyCr^fHsf# zQjQ3Ttp7y#iQY8l`zEUW)(@gGQdt(~rkxlkefskT(t%@i8=|p1Y9Dc5bc+z#n$s13 zGJk|V0+&Ekh(F};PJzQKKo+FG@KV8a<$gmNSD;7rd_nRdc%?9)p!|B-@P~kxQG}~B zi|{0}@}zKC(rlFUYp*dO1RuvPC^DQOkX4<+EwvBAC{IZQdYxoq1Za!MW7%p7gGr=j zzWnAq%)^O2$eItftC#TTSArUyL$U54-O7e|)4_7%Q^2tZ^0-d&3J1}qCzR4dWX!)4 zzIEKjgnYgMus^>6uw4Jm8ga6>GBtMjpNRJ6CP~W=37~||gMo_p@GA@#-3)+cVYnU> zE5=Y4kzl+EbEh%dhQokB{gqNDqx%5*qBusWV%!iprn$S!;oN_6E3?0+umADVs4ako z?P+t?m?};gev9JXQ#Q&KBpzkHPde_CGu-y z<{}RRAx=xlv#mVi+Ibrgx~ujW$h{?zPfhz)Kp7kmYS&_|97b&H&1;J-mzrBWAvY} zh8-I8hl_RK2+nnf&}!W0P+>5?#?7>npshe<1~&l_xqKd0_>dl_^RMRq@-Myz&|TKZBj1=Q()) zF{dBjv5)h=&Z)Aevx}+i|7=R9rG^Di!sa)sZCl&ctX4&LScQ-kMncgO(9o6W6)yd< z@Rk!vkja*X_N3H=BavGoR0@u0<}m-7|2v!0+2h~S2Q&a=lTH91OJsvms2MT~ zY=c@LO5i`mLpBd(vh|)I&^A3TQLtr>w=zoyzTd=^f@TPu&+*2MtqE$Avf>l>}V|3-8Fp2hzo3y<)hr_|NO(&oSD z!vEjTWBxbKTiShVl-U{n*B3#)3a8$`{~Pk}J@elZ=>Pqp|MQ}jrGv7KrNcjW%TN_< zZz8kG{#}XoeWf7qY?D)L)8?Q-b@Na&>i=)(@uNo zr;cH98T3$Iau8Hn*@vXi{A@YehxDE2zX~o+RY`)6-X{8~hMpc#C`|8y> zU8Mnv5A0dNCf{Ims*|l-^ z(MRp{qoGohB34|ggDI*p!Aw|MFyJ|v+<+E3brfrI)|+l3W~CQLPbnF@G0)P~Ly!1TJLp}xh8uW`Q+RB-v`MRYZ9Gam3cM%{ zb4Cb*f)0deR~wtNb*8w-LlIF>kc7DAv>T0D(a3@l`k4TFnrO+g9XH7;nYOHxjc4lq zMmaW6qpgAgy)MckYMhl?>sq;-1E)-1llUneeA!ya9KM$)DaNGu57Z5aE>=VST$#vb zFo=uRHr$0M{-ha>h(D_boS4zId;3B|Tpqo|?B?Z@I?G(?&Iei+-{9L_A9=h=Qfn-U z1wIUnQe9!z%_j$F_{rf&`ZFSott09gY~qrf@g3O=Y>vzAnXCyL!@(BqWa)Zqt!#_k zfZHuwS52|&&)aK;CHq9V-t9qt0au{$#6c*R#e5n3rje0hic7c7m{kW$p(_`wB=Gw7 z4k`1Hi;Mc@yA7dp@r~?@rfw)TkjAW++|pkfOG}0N|2guek}j8Zen(!+@7?qt_7ndX zB=BG6WJ31#F3#Vk3=aQr8T)3`{=p9nBHlKzE0I@v`{vJ}h8pd6vby&VgFhzH|q;=aonunAXL6G2y(X^CtAhWr*jI zGjpY@raZDQkg*aMq}Ni6cRF z{oWv}5`nhSAv>usX}m^GHt`f(t8@zHc?K|y5Zi=4G*UG1Sza{$Dpj%X8 zzEXaKT5N6F5j4J|w#qlZP!zS7BT)9b+!ZSJdToqJts1c!)fwih4d31vfb{}W)EgcA zH2pZ^8_k$9+WD2n`6q5XbOy8>3pcYH9 z07eUB+p}YD@AH!}p!iKv><2QF-Y^&xx^PAc1F13A{nUeCDg&{hnix#FiO!fe(^&%Qcux!h znu*S!s$&nnkeotYsDthh1dq(iQrE|#f_=xVgfiiL&-5eAcC-> z5L0l|DVEM$#ulf{bj+Y~7iD)j<~O8CYM8GW)dQGq)!mck)FqoL^X zwNdZb3->hFrbHFm?hLvut-*uK?zXn3q1z|UX{RZ;-WiLoOjnle!xs+W0-8D)kjU#R z+S|A^HkRg$Ij%N4v~k`jyHffKaC~=wg=9)V5h=|kLQ@;^W!o2^K+xG&2n`XCd>OY5Ydi= zgHH=lgy++erK8&+YeTl7VNyVm9-GfONlSlVb3)V9NW5tT!cJ8d7X)!b-$fb!s76{t z@d=Vg-5K_sqHA@Zx-L_}wVnc@L@GL9_K~Zl(h5@AR#FAiKad8~KeWCo@mgXIQ#~u{ zgYFwNz}2b6Vu@CP0XoqJ+dm8px(5W5-Jpis97F`+KM)TuP*X8H@zwiVKDKGVp59pI zifNHZr|B+PG|7|Y<*tqap0CvG7tbR1R>jn70t1X`XJixiMVcHf%Ez*=xm1(CrTSDt z0cle!+{8*Ja&EOZ4@$qhBuKQ$U95Q%rc7tg$VRhk?3=pE&n+T3upZg^ZJc9~c2es% zh7>+|mrmA-p&v}|OtxqmHIBgUxL~^0+cpfkSK2mhh+4b=^F1Xgd2)}U*Yp+H?ls#z zrLxWg_hm}AfK2XYWr!rzW4g;+^^&bW%LmbtRai9f3PjU${r@n`JThy-cphbcwn)rq9{A$Ht`lmYKxOacy z6v2R(?gHhD5@&kB-Eg?4!hAoD7~(h>(R!s1c1Hx#s9vGPePUR|of32bS`J5U5w{F) z>0<^ktO2UHg<0{oxkdOQ;}coZDQph8p6ruj*_?uqURCMTac;>T#v+l1Tc~%^k-Vd@ zkc5y35jVNc49vZpZx;gG$h{%yslDI%Lqga1&&;mN{Ush1c7p>7e-(zp}6E7f-XmJb4nhk zb8zS+{IVbL$QVF8pf8}~kQ|dHJAEATmmnrb_wLG}-yHe>W|A&Y|;muy-d^t^<&)g5SJfaTH@P1%euONny=mxo+C z4N&w#biWY41r8k~468tvuYVh&XN&d#%QtIf9;iVXfWY)#j=l`&B~lqDT@28+Y!0E+MkfC}}H*#(WKKdJJq=O$vNYCb(ZG@p{fJgu;h z21oHQ(14?LeT>n5)s;uD@5&ohU!@wX8w*lB6i@GEH0pM>YTG+RAIWZD;4#F1&F%Jp zXZUml2sH0!lYJT?&sA!qwez6cXzJEd(1ZC~kT5kZSp7(@=H2$Azb_*W&6aA|9iwCL zdX7Q=42;@dspHDwYE?miGX#L^3xD&%BI&fN9^;`v4OjQXPBaBmOF1;#C)8XA(WFlH zycro;DS2?(G&6wkr6rqC>rqDv3nfGw3hmN_9Al>TgvmGsL8_hXx09};l9Ow@)F5@y z#VH5WigLDwZE4nh^7&@g{1FV^UZ%_LJ-s<{HN*2R$OPg@R~Z`c-ET*2}XB@9xvAjrK&hS=f|R8Gr9 zr|0TGOsI7RD+4+2{ZiwdVD@2zmg~g@^D--YL;6UYGSM8i$NbQr4!c7T9rg!8;TM0E zT#@?&S=t>GQm)*ua|?TLT2ktj#`|R<_*FAkOu2Pz$wEc%-=Y9V*$&dg+wIei3b*O8 z2|m$!jJG!J!ZGbbIa!(Af~oSyZV+~M1qGvelMzPNE_%5?c2>;MeeG2^N?JDKjFYCy z7SbPWH-$cWF9~fX%9~v99L!G(wi!PFp>rB!9xj7=Cv|F+7CsGNwY0Q_J%FID%C^CBZQfJ9K(HK%k31j~e#&?hQ zNuD6gRkVckU)v+53-fc} z7ZCzYN-5RG4H7;>>Hg?LU9&5_aua?A0)0dpew1#MMlu)LHe(M;OHjHIUl7|%%)YPo z0cBk;AOY00%Fe6heoN*$(b<)Cd#^8Iu;-2v@>cE-OB$icUF9EEoaC&q8z9}jMTT2I z8`9;jT%z0;dy4!8U;GW{i`)3!c6&oWY`J3669C!tM<5nQFFrFRglU8f)5Op$GtR-3 zn!+SPCw|04sv?%YZ(a7#L?vsdr7ss@WKAw&A*}-1S|9~cL%uA+E~>N6QklFE>8W|% zyX-qAUGTY1hQ-+um`2|&ji0cY*(qN!zp{YpDO-r>jPk*yuVSay<)cUt`t@&FPF_&$ zcHwu1(SQ`I-l8~vYyUxm@D1UEdFJ$f5Sw^HPH7b!9 zzYT3gKMF((N(v0#4f_jPfVZ=ApN^jQJe-X$`A?X+vWjLn_%31KXE*}5_}d8 zw_B1+a#6T1?>M{ronLbHIlEsMf93muJ7AH5h%;i99<~JX^;EAgEB1uHralD*!aJ@F zV2ruuFe9i2Q1C?^^kmVy921eb=tLDD43@-AgL^rQ3IO9%+vi_&R2^dpr}x{bCVPej z7G0-0o64uyWNtr*loIvslyo0%)KSDDKjfThe0hcqs)(C-MH1>bNGBDRTW~scy_{w} zp^aq8Qb!h9Lwielq%C1b8=?Z=&U)ST&PHbS)8Xzjh2DF?d{iAv)Eh)wsUnf>UtXN( zL7=$%YrZ#|^c{MYmhn!zV#t*(jdmYdCpwqpZ{v&L8KIuKn`@IIZfp!uo}c;7J57N` zAxyZ-uA4=Gzl~Ovycz%MW9ZL7N+nRo&1cfNn9(1H5eM;V_4Z_qVann7F>5f>%{rf= zPBZFaV@_Sobl?Fy&KXyzFDV*FIdhS5`Uc~S^Gjo)aiTHgn#<0C=9o-a-}@}xDor;D zZyZ|fvf;+=3MZd>SR1F^F`RJEZo+|MdyJYQAEauKu%WDol~ayrGU3zzbHKsnHKZ*z zFiwUkL@DZ>!*x05ql&EBq@_Vqv83&?@~q5?lVmffQZ+V-=qL+!u4Xs2Z2zdCQ3U7B&QR9_Iggy} z(om{Y9eU;IPe`+p1ifLx-XWh?wI)xU9ik+m#g&pGdB5Bi<`PR*?92lE0+TkRuXI)z z5LP!N2+tTc%cB6B1F-!fj#}>S!vnpgVU~3!*U1ej^)vjUH4s-bd^%B=ItQqDCGbrEzNQi(dJ`J}-U=2{7-d zK8k^Rlq2N#0G?9&1?HSle2vlkj^KWSBYTwx`2?9TU_DX#J+f+qLiZCqY1TXHFxXZqYMuD@RU$TgcnCC{_(vwZ-*uX)~go#%PK z@}2Km_5aQ~(<3cXeJN6|F8X_1@L%@xTzs}$_*E|a^_URF_qcF;Pfhoe?FTFwvjm1o z8onf@OY@jC2tVcMaZS;|T!Ks(wOgPpRzRnFS-^RZ4E!9dsnj9sFt609a|jJbb1Dt@ z<=Gal2jDEupxUSwWu6zp<<&RnAA;d&4gKVG0iu6g(DsST(4)z6R)zDpfaQ}v{5ARt zyhwvMtF%b-YazR5XLz+oh=mn;y-Mf2a8>7?2v8qX;19y?b>Z5laGHvzH;Nu9S`B8} zI)qN$GbXIQ1VL3lnof^6TS~rvPVg4V?Dl2Bb*K2z4E{5vy<(@@K_cN@U>R!>aUIRnb zL*)=787*cs#zb31zBC49x$`=fkQbMAef)L2$dR{)6BAz!t5U_B#1zZG`^neKSS22oJ#5B=gl%U=WeqL9REF2g zZnfCb0?quf?Ztj$VXvDSWoK`0L=Zxem2q}!XWLoT-kYMOx)!7fcgT35uC~0pySEme z`{wGWTkGr7>+Kb^n;W?BZH6ZP(9tQX%-7zF>vc2}LuWDI(9kh1G#7B99r4x6;_-V+k&c{nPUrR zAXJGRiMe~aup{0qzmLNjS_BC4cB#sXjckx{%_c&^xy{M61xEb>KW_AG5VFXUOjAG4 z^>Qlm9A#1N{4snY=(AmWzatb!ngqiqPbBZ7>Uhb3)dTkSGcL#&SH>iMO-IJBPua`u zo)LWZ>=NZLr758j{%(|uQuZ)pXq_4c!!>s|aDM9#`~1bzK3J1^^D#<2bNCccH7~-X}Ggi!pIIF>uFx%aPARGQsnC8ZQc8lrQ5o~smqOg>Ti^GNme94*w z)JZy{_{#$jxGQ&`M z!OMvZMHR>8*^>eS%o*6hJwn!l8VOOjZQJvh)@tnHVW&*GYPuxqXw}%M!(f-SQf`=L z5;=5w2;%82VMH6Xi&-K3W)o&K^+vJCepWZ-rW%+Dc6X3(){z$@4zjYxQ|}8UIojeC zYZpQ1dU{fy=oTr<4VX?$q)LP}IUmpiez^O&N3E_qPpchGTi5ZM6-2ScWlQq%V&R2Euz zO|Q0Hx>lY1Q1cW5xHv5!0OGU~PVEqSuy#fD72d#O`N!C;o=m+YioGu-wH2k6!t<~K zSr`E=W9)!g==~x9VV~-8{4ZN9{~-A9zJpRe%NGg$+MDuI-dH|b@BD)~>pPCGUNNzY zMDg||0@XGQgw`YCt5C&A{_+J}mvV9Wg{6V%2n#YSRN{AP#PY?1FF1#|vO_%e+#`|2*~wGAJaeRX6=IzFNeWhz6gJc8+(03Ph4y6ELAm=AkN7TOgMUEw*N{= z_)EIDQx5q22oUR+_b*tazu9+pX|n1c*IB-}{DqIj z-?E|ks{o3AGRNb;+iKcHkZvYJvFsW&83RAPs1Oh@IWy%l#5x2oUP6ZCtv+b|q>jsf zZ_9XO;V!>n`UxH1LvH8)L4?8raIvasEhkpQoJ`%!5rBs!0Tu(s_D{`4opB;57)pkX z4$A^8CsD3U5*!|bHIEqsn~{q+Ddj$ME@Gq4JXtgVz&7l{Ok!@?EA{B3P~NAqb9)4? zkQo30A^EbHfQ@87G5&EQTd`frrwL)&Yw?%-W@uy^Gn23%j?Y!Iea2xw<-f;esq zf%w5WN@E1}zyXtYv}}`U^B>W`>XPmdLj%4{P298|SisrE;7HvXX;A}Ffi8B#3Lr;1 zHt6zVb`8{#+e$*k?w8|O{Uh|&AG}|DG1PFo1i?Y*cQm$ZwtGcVgMwtBUDa{~L1KT-{jET4w60>{KZ27vXrHJ;fW{6| z=|Y4!&UX020wU1>1iRgB@Q#m~1^Z^9CG1LqDhYBrnx%IEdIty z!46iOoKlKs)c}newDG)rWUikD%j`)p z_w9Ph&e40=(2eBy;T!}*1p1f1SAUDP9iWy^u^Ubdj21Kn{46;GR+hwLO=4D11@c~V zI8x&(D({K~Df2E)Nx_yQvYfh4;MbMJ@Z}=Dt3_>iim~QZ*hZIlEs0mEb z_54+&*?wMD`2#vsQRN3KvoT>hWofI_Vf(^C1ff-Ike@h@saEf7g}<9T`W;HAne-Nd z>RR+&SP35w)xKn8^U$7))PsM!jKwYZ*RzEcG-OlTrX3}9a{q%#Un5E5W{{hp>w~;` zGky+3(vJvQyGwBo`tCpmo0mo((?nM8vf9aXrrY1Ve}~TuVkB(zeds^jEfI}xGBCM2 zL1|#tycSaWCurP+0MiActG3LCas@_@tao@(R1ANlwB$4K53egNE_;!&(%@Qo$>h`^1S_!hN6 z)vZtG$8fN!|BXBJ=SI>e(LAU(y(i*PHvgQ2llulxS8>qsimv7yL}0q_E5WiAz7)(f zC(ahFvG8&HN9+6^jGyLHM~$)7auppeWh_^zKk&C_MQ~8;N??OlyH~azgz5fe^>~7F zl3HnPN3z-kN)I$4@`CLCMQx3sG~V8hPS^}XDXZrQA>}mQPw%7&!sd(Pp^P=tgp-s^ zjl}1-KRPNWXgV_K^HkP__SR`S-|OF0bR-N5>I%ODj&1JUeAQ3$9i;B~$S6}*^tK?= z**%aCiH7y?xdY?{LgVP}S0HOh%0%LI$wRx;$T|~Y8R)Vdwa}kGWv8?SJVm^>r6+%I z#lj1aR94{@MP;t-scEYQWc#xFA30^}?|BeX*W#9OL;Q9#WqaaM546j5j29((^_8Nu z4uq}ESLr~r*O7E7$D{!k9W>`!SLoyA53i9QwRB{!pHe8um|aDE`Cg0O*{jmor)^t)3`>V>SWN-2VJcFmj^1?~tT=JrP`fVh*t zXHarp=8HEcR#vFe+1a%XXuK+)oFs`GDD}#Z+TJ}Ri`FvKO@ek2ayn}yaOi%(8p%2$ zpEu)v0Jym@f}U|-;}CbR=9{#<^z28PzkkTNvyKvJDZe+^VS2bES3N@Jq!-*}{oQlz z@8bgC_KnDnT4}d#&Cpr!%Yb?E!brx0!eVOw~;lLwUoz#Np%d$o%9scc3&zPm`%G((Le|6o1 zM(VhOw)!f84zG^)tZ1?Egv)d8cdNi+T${=5kV+j;Wf%2{3g@FHp^Gf*qO0q!u$=m9 zCaY`4mRqJ;FTH5`a$affE5dJrk~k`HTP_7nGTY@B9o9vvnbytaID;^b=Tzp7Q#DmD zC(XEN)Ktn39z5|G!wsVNnHi) z%^q94!lL|hF`IijA^9NR0F$@h7k5R^ljOW(;Td9grRN0Mb)l_l7##{2nPQ@?;VjXv zaLZG}yuf$r$<79rVPpXg?6iiieX|r#&`p#Con2i%S8*8F}(E) zI5E6c3tG*<;m~6>!&H!GJ6zEuhH7mkAzovdhLy;)q z{H2*8I^Pb}xC4s^6Y}6bJvMu=8>g&I)7!N!5QG$xseeU#CC?ZM-TbjsHwHgDGrsD= z{%f;@Sod+Ch66Ko2WF~;Ty)v>&x^aovCbCbD7>qF*!?BXmOV3(s|nxsb*Lx_2lpB7 zokUnzrk;P=T-&kUHO}td+Zdj!3n&NR?K~cRU zAXU!DCp?51{J4w^`cV#ye}(`SQhGQkkMu}O3M*BWt4UsC^jCFUy;wTINYmhD$AT;4 z?Xd{HaJjP`raZ39qAm;%beDbrLpbRf(mkKbANan7XsL>_pE2oo^$TgdidjRP!5-`% zv0d!|iKN$c0(T|L0C~XD0aS8t{*&#LnhE;1Kb<9&=c2B+9JeLvJr*AyyRh%@jHej=AetOMSlz^=!kxX>>B{2B1uIrQyfd8KjJ+DBy!h)~*(!|&L4^Q_07SQ~E zcemVP`{9CwFvPFu7pyVGCLhH?LhEVb2{7U+Z_>o25#+3<|8%1T^5dh}*4(kfJGry} zm%r#hU+__Z;;*4fMrX=Bkc@7|v^*B;HAl0((IBPPii%X9+u3DDF6%bI&6?Eu$8&aWVqHIM7mK6?Uvq$1|(-T|)IV<>e?!(rY zqkmO1MRaLeTR=)io(0GVtQT@s6rN%C6;nS3@eu;P#ry4q;^O@1ZKCJyp_Jo)Ty^QW z+vweTx_DLm{P-XSBj~Sl<%_b^$=}odJ!S2wAcxenmzFGX1t&Qp8Vxz2VT`uQsQYtdn&_0xVivIcxZ_hnrRtwq4cZSj1c-SG9 z7vHBCA=fd0O1<4*=lu$6pn~_pVKyL@ztw1swbZi0B?spLo56ZKu5;7ZeUml1Ws1?u zqMf1p{5myAzeX$lAi{jIUqo1g4!zWLMm9cfWcnw`k6*BR^?$2(&yW?>w;G$EmTA@a z6?y#K$C~ZT8+v{87n5Dm&H6Pb_EQ@V0IWmG9cG=O;(;5aMWWrIPzz4Q`mhK;qQp~a z+BbQrEQ+w{SeiuG-~Po5f=^EvlouB@_|4xQXH@A~KgpFHrwu%dwuCR)=B&C(y6J4J zvoGk9;lLs9%iA-IJGU#RgnZZR+@{5lYl8(e1h6&>Vc_mvg0d@);X zji4T|n#lB!>pfL|8tQYkw?U2bD`W{na&;*|znjmalA&f;*U++_aBYerq;&C8Kw7mI z7tsG*?7*5j&dU)Lje;^{D_h`%(dK|pB*A*1(Jj)w^mZ9HB|vGLkF1GEFhu&rH=r=8 zMxO42e{Si6$m+Zj`_mXb&w5Q(i|Yxyg?juUrY}78uo@~3v84|8dfgbPd0iQJRdMj< zncCNGdMEcsxu#o#B5+XD{tsg*;j-eF8`mp~K8O1J!Z0+>0=7O=4M}E?)H)ENE;P*F z$Ox?ril_^p0g7xhDUf(q652l|562VFlC8^r8?lQv;TMvn+*8I}&+hIQYh2 z1}uQQaag&!-+DZ@|C+C$bN6W;S-Z@)d1|en+XGvjbOxCa-qAF*LA=6s(Jg+g;82f$ z(Vb)8I)AH@cdjGFAR5Rqd0wiNCu!xtqWbcTx&5kslzTb^7A78~Xzw1($UV6S^VWiP zFd{Rimd-0CZC_Bu(WxBFW7+k{cOW7DxBBkJdJ;VsJ4Z@lERQr%3eVv&$%)b%<~ zCl^Y4NgO}js@u{|o~KTgH}>!* z_iDNqX2(As7T0xivMH|3SC1ivm8Q}6Ffcd7owUKN5lHAtzMM4<0v+ykUT!QiowO;`@%JGv+K$bBx@*S7C8GJVqQ_K>12}M`f_Ys=S zKFh}HM9#6Izb$Y{wYzItTy+l5U2oL%boCJn?R3?jP@n$zSIwlmyGq30Cw4QBO|14` zW5c);AN*J3&eMFAk$SR~2k|&+&Bc$e>s%c{`?d~85S-UWjA>DS5+;UKZ}5oVa5O(N zqqc@>)nee)+4MUjH?FGv%hm2{IlIF-QX}ym-7ok4Z9{V+ZHVZQl$A*x!(q%<2~iVv znUa+BX35&lCb#9VE-~Y^W_f;Xhl%vgjwdjzMy$FsSIj&ok}L+X`4>J=9BkN&nu^E*gbhj3(+D>C4E z@Fwq_=N)^bKFSHTzZk?-gNU$@l}r}dwGyh_fNi=9b|n}J>&;G!lzilbWF4B}BBq4f zYIOl?b)PSh#XTPp4IS5ZR_2C!E)Z`zH0OW%4;&~z7UAyA-X|sh9@~>cQW^COA9hV4 zXcA6qUo9P{bW1_2`eo6%hgbN%(G-F1xTvq!sc?4wN6Q4`e9Hku zFwvlAcRY?6h^Fj$R8zCNEDq8`=uZB8D-xn)tA<^bFFy}4$vA}Xq0jAsv1&5!h!yRA zU()KLJya5MQ`q&LKdH#fwq&(bNFS{sKlEh_{N%{XCGO+po#(+WCLmKW6&5iOHny>g z3*VFN?mx!16V5{zyuMWDVP8U*|BGT$(%IO|)?EF|OI*sq&RovH!N%=>i_c?K*A>>k zyg1+~++zY4Q)J;VWN0axhoIKx;l&G$gvj(#go^pZskEVj8^}is3Jw26LzYYVos0HX zRPvmK$dVxM8(Tc?pHFe0Z3uq){{#OK3i-ra#@+;*=ui8)y6hsRv z4Fxx1c1+fr!VI{L3DFMwXKrfl#Q8hfP@ajgEau&QMCxd{g#!T^;ATXW)nUg&$-n25 zruy3V!!;{?OTobo|0GAxe`Acn3GV@W=&n;~&9 zQM>NWW~R@OYORkJAo+eq1!4vzmf9K%plR4(tB@TR&FSbDoRgJ8qVcH#;7lQub*nq&?Z>7WM=oeEVjkaG zT#f)=o!M2DO5hLR+op>t0CixJCIeXH*+z{-XS|%jx)y(j&}Wo|3!l7{o)HU3m7LYyhv*xF&tq z%IN7N;D4raue&&hm0xM=`qv`+TK@;_xAcGKuK(2|75~ar2Yw)geNLSmVxV@x89bQu zpViVKKnlkwjS&&c|-X6`~xdnh}Ps)Hs z4VbUL^{XNLf7_|Oi>tA%?SG5zax}esF*FH3d(JH^Gvr7Rp*n=t7frH!U;!y1gJB^i zY_M$KL_}mW&XKaDEi9K-wZR|q*L32&m+2n_8lq$xRznJ7p8}V>w+d@?uB!eS3#u<} zIaqi!b!w}a2;_BfUUhGMy#4dPx>)_>yZ`ai?Rk`}d0>~ce-PfY-b?Csd(28yX22L% zI7XI>OjIHYTk_@Xk;Gu^F52^Gn6E1&+?4MxDS2G_#PQ&yXPXP^<-p|2nLTb@AAQEY zI*UQ9Pmm{Kat}wuazpjSyXCdnrD&|C1c5DIb1TnzF}f4KIV6D)CJ!?&l&{T)e4U%3HTSYqsQ zo@zWB1o}ceQSV)<4G<)jM|@@YpL+XHuWsr5AYh^Q{K=wSV99D~4RRU52FufmMBMmd z_H}L#qe(}|I9ZyPRD6kT>Ivj&2Y?qVZq<4bG_co_DP`sE*_Xw8D;+7QR$Uq(rr+u> z8bHUWbV19i#)@@G4bCco@Xb<8u~wVDz9S`#k@ciJtlu@uP1U0X?yov8v9U3VOig2t zL9?n$P3=1U_Emi$#slR>N5wH-=J&T=EdUHA}_Z zZIl3nvMP*AZS9{cDqFanrA~S5BqxtNm9tlu;^`)3X&V4tMAkJ4gEIPl= zoV!Gyx0N{3DpD@)pv^iS*dl2FwANu;1;%EDl}JQ7MbxLMAp>)UwNwe{=V}O-5C*>F zu?Ny+F64jZn<+fKjF01}8h5H_3pey|;%bI;SFg$w8;IC<8l|3#Lz2;mNNik6sVTG3 z+Su^rIE#40C4a-587$U~%KedEEw1%r6wdvoMwpmlXH$xPnNQN#f%Z7|p)nC>WsuO= z4zyqapLS<8(UJ~Qi9d|dQijb_xhA2)v>la)<1md5s^R1N&PiuA$^k|A<+2C?OiHbj z>Bn$~t)>Y(Zb`8hW7q9xQ=s>Rv81V+UiuZJc<23HplI88isqRCId89fb`Kt|CxVIg znWcwprwXnotO>3s&Oypkte^9yJjlUVVxSe%_xlzmje|mYOVPH^vjA=?6xd0vaj0Oz zwJ4OJNiFdnHJX3rw&inskjryukl`*fRQ#SMod5J|KroJRsVXa5_$q7whSQ{gOi*s0 z1LeCy|JBWRsDPn7jCb4s(p|JZiZ8+*ExC@Vj)MF|*Vp{B(ziccSn`G1Br9bV(v!C2 z6#?eqpJBc9o@lJ#^p-`-=`4i&wFe>2)nlPK1p9yPFzJCzBQbpkcR>={YtamIw)3nt z(QEF;+)4`>8^_LU)_Q3 zC5_7lgi_6y>U%m)m@}Ku4C}=l^J=<<7c;99ec3p{aR+v=diuJR7uZi%aQv$oP?dn?@6Yu_+*^>T0ptf(oobdL;6)N-I!TO`zg^Xbv3#L0I~sn@WGk-^SmPh5>W+LB<+1PU}AKa?FCWF|qMNELOgdxR{ zbqE7@jVe+FklzdcD$!(A$&}}H*HQFTJ+AOrJYnhh}Yvta(B zQ_bW4Rr;R~&6PAKwgLWXS{Bnln(vUI+~g#kl{r+_zbngT`Y3`^Qf=!PxN4IYX#iW4 zucW7@LLJA9Zh3(rj~&SyN_pjO8H&)|(v%!BnMWySBJV=eSkB3YSTCyIeJ{i;(oc%_hk{$_l;v>nWSB)oVeg+blh=HB5JSlG_r7@P z3q;aFoZjD_qS@zygYqCn=;Zxjo!?NK!%J$ z52lOP`8G3feEj+HTp@Tnn9X~nG=;tS+z}u{mQX_J0kxtr)O30YD%oo)L@wy`jpQYM z@M>Me=95k1p*FW~rHiV1CIfVc{K8r|#Kt(ApkXKsDG$_>76UGNhHExFCw#Ky9*B-z zNq2ga*xax!HMf_|Vp-86r{;~YgQKqu7%szk8$hpvi_2I`OVbG1doP(`gn}=W<8%Gn z%81#&WjkH4GV;4u43EtSW>K_Ta3Zj!XF?;SO3V#q=<=>Tc^@?A`i;&`-cYj|;^ zEo#Jl5zSr~_V-4}y8pnufXLa80vZY4z2ko7fj>DR)#z=wWuS1$$W!L?(y}YC+yQ|G z@L&`2upy3f>~*IquAjkVNU>}c10(fq#HdbK$~Q3l6|=@-eBbo>B9(6xV`*)sae58*f zym~RRVx;xoCG3`JV`xo z!lFw)=t2Hy)e!IFs?0~7osWk(d%^wxq&>_XD4+U#y&-VF%4z?XH^i4w`TxpF{`XhZ z%G}iEzf!T(l>g;W9<~K+)$g!{UvhW{E0Lis(S^%I8OF&%kr!gJ&fMOpM=&=Aj@wuL zBX?*6i51Qb$uhkwkFYkaD_UDE+)rh1c;(&Y=B$3)J&iJfQSx!1NGgPtK!$c9OtJuu zX(pV$bfuJpRR|K(dp@^j}i&HeJOh@|7lWo8^$*o~Xqo z5Sb+!EtJ&e@6F+h&+_1ETbg7LfP5GZjvIUIN3ibCOldAv z)>YdO|NH$x7AC8dr=<2ekiY1%fN*r~e5h6Yaw<{XIErujKV~tiyrvV_DV0AzEknC- zR^xKM3i<1UkvqBj3C{wDvytOd+YtDSGu!gEMg+!&|8BQrT*|p)(dwQLEy+ zMtMzij3zo40)CA!BKZF~yWg?#lWhqD3@qR)gh~D{uZaJO;{OWV8XZ_)J@r3=)T|kt zUS1pXr6-`!Z}w2QR7nP%d?ecf90;K_7C3d!UZ`N(TZoWNN^Q~RjVhQG{Y<%E1PpV^4 z-m-K+$A~-+VDABs^Q@U*)YvhY4Znn2^w>732H?NRK(5QSS$V@D7yz2BVX4)f5A04~$WbxGOam22>t&uD)JB8-~yiQW6ik;FGblY_I>SvB_z2?PS z*Qm&qbKI{H1V@YGWzpx`!v)WeLT02};JJo*#f$a*FH?IIad-^(;9XC#YTWN6;Z6+S zm4O1KH=#V@FJw7Pha0!9Vb%ZIM$)a`VRMoiN&C|$YA3~ZC*8ayZRY^fyuP6$n%2IU z$#XceYZeqLTXw(m$_z|33I$B4k~NZO>pP6)H_}R{E$i%USGy{l{-jOE;%CloYPEU+ zRFxOn4;7lIOh!7abb23YKD+_-?O z0FP9otcAh+oSj;=f#$&*ExUHpd&e#bSF%#8*&ItcL2H$Sa)?pt0Xtf+t)z$_u^wZi z44oE}r4kIZGy3!Mc8q$B&6JqtnHZ>Znn!Zh@6rgIu|yU+zG8q`q9%B18|T|oN3zMq z`l&D;U!OL~%>vo&q0>Y==~zLiCZk4v%s_7!9DxQ~id1LLE93gf*gg&2$|hB#j8;?3 z5v4S;oM6rT{Y;I+#FdmNw z){d%tNM<<#GN%n9ox7B=3#;u7unZ~tLB_vRZ52a&2=IM)2VkXm=L+Iqq~uk#Dug|x z>S84e+A7EiOY5lj*!q?6HDkNh~0g;0Jy(al!ZHHDtur9T$y-~)94HelX1NHjXWIM7UAe}$?jiz z9?P4`I0JM=G5K{3_%2jPLC^_Mlw?-kYYgb7`qGa3@dn|^1fRMwiyM@Ch z;CB&o7&&?c5e>h`IM;Wnha0QKnEp=$hA8TJgR-07N~U5(>9vJzeoFsSRBkDq=x(YgEMpb=l4TDD`2 zwVJpWGTA_u7}?ecW7s6%rUs&NXD3+n;jB86`X?8(l3MBo6)PdakI6V6a}22{)8ilT zM~T*mU}__xSy|6XSrJ^%lDAR3Lft%+yxC|ZUvSO_nqMX!_ul3;R#*{~4DA=h$bP)%8Yv9X zyp><|e8=_ttI}ZAwOd#dlnSjck#6%273{E$kJuCGu=I@O)&6ID{nWF5@gLb16sj|&Sb~+du4e4O_%_o`Ix4NRrAsyr1_}MuP94s>de8cH-OUkVPk3+K z&jW)It9QiU-ti~AuJkL`XMca8Oh4$SyJ=`-5WU<{cIh+XVH#e4d&zive_UHC!pN>W z3TB;Mn5i)9Qn)#6@lo4QpI3jFYc0~+jS)4AFz8fVC;lD^+idw^S~Qhq>Tg(!3$yLD zzktzoFrU@6s4wwCMz}edpF5i5Q1IMmEJQHzp(LAt)pgN3&O!&d?3W@6U4)I^2V{;- z6A(?zd93hS*uQmnh4T)nHnE{wVhh(=MMD(h(P4+^p83Om6t<*cUW>l(qJzr%5vp@K zN27ka(L{JX=1~e2^)F^i=TYj&;<7jyUUR2Bek^A8+3Up*&Xwc{)1nRR5CT8vG>ExV zHnF3UqXJOAno_?bnhCX-&kwI~Ti8t4`n0%Up>!U`ZvK^w2+0Cs-b9%w%4`$+To|k= zKtgc&l}P`*8IS>8DOe?EB84^kx4BQp3<7P{Pq}&p%xF_81pg!l2|u=&I{AuUgmF5n zJQCTLv}%}xbFGYtKfbba{CBo)lWW%Z>i(_NvLhoQZ*5-@2l&x>e+I~0Nld3UI9tdL zRzu8}i;X!h8LHVvN?C+|M81e>Jr38%&*9LYQec9Ax>?NN+9(_>XSRv&6hlCYB`>Qm z1&ygi{Y()OU4@D_jd_-7vDILR{>o|7-k)Sjdxkjgvi{@S>6GqiF|o`*Otr;P)kLHN zZkpts;0zw_6;?f(@4S1FN=m!4^mv~W+lJA`&7RH%2$)49z0A+8@0BCHtj|yH--AEL z0tW6G%X-+J+5a{5*WKaM0QDznf;V?L5&uQw+yegDNDP`hA;0XPYc6e0;Xv6|i|^F2WB)Z$LR|HR4 zTQsRAby9(^Z@yATyOgcfQw7cKyr^3Tz7lc7+JEwwzA7)|2x+PtEb>nD(tpxJQm)Kn zW9K_*r!L%~N*vS8<5T=iv|o!zTe9k_2jC_j*7ik^M_ zaf%k{WX{-;0*`t`G!&`eW;gChVXnJ-Rn)To8vW-?>>a%QU1v`ZC=U)f8iA@%JG0mZ zDqH;~mgBnrCP~1II<=V9;EBL)J+xzCoiRBaeH&J6rL!{4zIY8tZka?_FBeQeNO3q6 zyG_alW54Ba&wQf{&F1v-r1R6ID)PTsqjIBc+5MHkcW5Fnvi~{-FjKe)t1bl}Y;z@< z=!%zvpRua>>t_x}^}z0<7MI!H2v6|XAyR9!t50q-A)xk0nflgF4*OQlCGK==4S|wc zRMsSscNhRzHMBU8TdcHN!q^I}x0iXJ%uehac|Zs_B$p@CnF)HeXPpB_Za}F{<@6-4 zl%kml@}kHQ(ypD8FsPJ2=14xXJE|b20RUIgs!2|R3>LUMGF6X*B_I|$`Qg=;zm7C z{mEDy9dTmPbued7mlO@phdmAmJ7p@GR1bjCkMw6*G7#4+`k>fk1czdJUB!e@Q(~6# zwo%@p@V5RL0ABU2LH7Asq^quDUho@H>eTZH9f*no9fY0T zD_-9px3e}A!>>kv5wk91%C9R1J_Nh!*&Kk$J3KNxC}c_@zlgpJZ+5L)Nw|^p=2ue}CJtm;uj*Iqr)K})kA$xtNUEvX;4!Px*^&9T_`IN{D z{6~QY=Nau6EzpvufB^hflc#XIsSq0Y9(nf$d~6ZwK}fal92)fr%T3=q{0mP-EyP_G z)UR5h@IX}3Qll2b0oCAcBF>b*@Etu*aTLPU<%C>KoOrk=x?pN!#f_Og-w+;xbFgjQ zXp`et%lDBBh~OcFnMKMUoox0YwBNy`N0q~bSPh@+enQ=4RUw1) zpovN`QoV>vZ#5LvC;cl|6jPr}O5tu!Ipoyib8iXqy}TeJ;4+_7r<1kV0v5?Kv>fYp zg>9L`;XwXa&W7-jf|9~uP2iyF5`5AJ`Q~p4eBU$MCC00`rcSF>`&0fbd^_eqR+}mK z4n*PMMa&FOcc)vTUR zlDUAn-mh`ahi_`f`=39JYTNVjsTa_Y3b1GOIi)6dY)D}xeshB0T8Eov5%UhWd1)u}kjEQ|LDo{tqKKrYIfVz~@dp!! zMOnah@vp)%_-jDTUG09l+;{CkDCH|Q{NqX*uHa1YxFShy*1+;J`gywKaz|2Q{lG8x zP?KBur`}r`!WLKXY_K;C8$EWG>jY3UIh{+BLv0=2)KH%P}6xE2kg)%(-uA6lC?u8}{K(#P*c zE9C8t*u%j2r_{;Rpe1A{9nNXU;b_N0vNgyK!EZVut~}+R2rcbsHilqsOviYh-pYX= zHw@53nlmwYI5W5KP>&`dBZe0Jn?nAdC^HY1wlR6$u^PbpB#AS&5L6zqrXN&7*N2Q` z+Rae1EwS)H=aVSIkr8Ek^1jy2iS2o7mqm~Mr&g5=jjt7VxwglQ^`h#Mx+x2v|9ZAwE$i_9918MjJxTMr?n!bZ6n$}y11u8I9COTU`Z$Fi z!AeAQLMw^gp_{+0QTEJrhL424pVDp%wpku~XRlD3iv{vQ!lAf!_jyqd_h}+Tr1XG| z`*FT*NbPqvHCUsYAkFnM`@l4u_QH&bszpUK#M~XLJt{%?00GXY?u_{gj3Hvs!=N(I z(=AuWPijyoU!r?aFTsa8pLB&cx}$*%;K$e*XqF{~*rA-qn)h^!(-;e}O#B$|S~c+U zN4vyOK0vmtx$5K!?g*+J@G1NmlEI=pyZXZ69tAv=@`t%ag_Hk{LP~OH9iE)I= zaJ69b4kuCkV0V zo(M0#>phpQ_)@j;h%m{-a*LGi(72TP)ws2w*@4|C-3+;=5DmC4s7Lp95%n%@Ko zfdr3-a7m*dys9iIci$A=4NPJ`HfJ;hujLgU)ZRuJI`n;Pw|yksu!#LQnJ#dJysgNb z@@qwR^wrk(jbq4H?d!lNyy72~Dnn87KxsgQ!)|*m(DRM+eC$wh7KnS-mho3|KE)7h zK3k;qZ;K1Lj6uEXLYUYi)1FN}F@-xJ z@@3Hb84sl|j{4$3J}aTY@cbX@pzB_qM~APljrjju6P0tY{C@ zpUCOz_NFmALMv1*blCcwUD3?U6tYs+N%cmJ98D%3)%)Xu^uvzF zS5O!sc#X6?EwsYkvPo6A%O8&y8sCCQH<%f2togVwW&{M;PR!a(ZT_A+jVAbf{@5kL zB@Z(hb$3U{T_}SKA_CoQVU-;j>2J=L#lZ~aQCFg-d<9rzs$_gO&d5N6eFSc z1ml8)P*FSi+k@!^M9nDWR5e@ATD8oxtDu=36Iv2!;dZzidIS(PCtEuXAtlBb1;H%Z zwnC^Ek*D)EX4#Q>R$$WA2sxC_t(!!6Tr?C#@{3}n{<^o;9id1RA&-Pig1e-2B1XpG zliNjgmd3c&%A}s>qf{_j#!Z`fu0xIwm4L0)OF=u(OEmp;bLCIaZX$&J_^Z%4Sq4GZ zPn6sV_#+6pJmDN_lx@1;Zw6Md_p0w9h6mHtzpuIEwNn>OnuRSC2=>fP^Hqgc)xu^4 z<3!s`cORHJh#?!nKI`Et7{3C27+EuH)Gw1f)aoP|B3y?fuVfvpYYmmukx0ya-)TQX zR{ggy5cNf4X|g)nl#jC9p>7|09_S7>1D2GTRBUTW zAkQ=JMRogZqG#v;^=11O6@rPPwvJkr{bW-Qg8`q8GoD#K`&Y+S#%&B>SGRL>;ZunM@49!}Uy zN|bBCJ%sO;@3wl0>0gbl3L@1^O60ONObz8ZI7nder>(udj-jt`;yj^nTQ$L9`OU9W zX4alF#$|GiR47%x@s&LV>2Sz2R6?;2R~5k6V>)nz!o_*1Y!$p>BC5&?hJg_MiE6UBy>RkVZj`9UWbRkN-Hk!S`=BS3t3uyX6)7SF#)71*}`~Ogz z1rap5H6~dhBJ83;q-Y<5V35C2&F^JI-it(=5D#v!fAi9p#UwV~2tZQI+W(Dv?1t9? zfh*xpxxO{-(VGB>!Q&0%^YW_F!@aZS#ucP|YaD#>wd1Fv&Z*SR&mc;asi}1G) z_H>`!akh-Zxq9#io(7%;a$)w+{QH)Y$?UK1Dt^4)up!Szcxnu}kn$0afcfJL#IL+S z5gF_Y30j;{lNrG6m~$Ay?)*V9fZuU@3=kd40=LhazjFrau>(Y>SJNtOz>8x_X-BlA zIpl{i>OarVGj1v(4?^1`R}aQB&WCRQzS~;7R{tDZG=HhgrW@B`W|#cdyj%YBky)P= zpxuOZkW>S6%q7U{VsB#G(^FMsH5QuGXhb(sY+!-R8Bmv6Sx3WzSW<1MPPN1!&PurYky(@`bP9tz z52}LH9Q?+FF5jR6-;|+GVdRA!qtd;}*-h&iIw3Tq3qF9sDIb1FFxGbo&fbG5n8$3F zyY&PWL{ys^dTO}oZ#@sIX^BKW*bon=;te9j5k+T%wJ zNJtoN1~YVj4~YRrlZl)b&kJqp+Z`DqT!la$x&&IxgOQw#yZd-nBP3!7FijBXD|IsU8Zl^ zc6?MKpJQ+7ka|tZQLfchD$PD|;K(9FiLE|eUZX#EZxhG!S-63C$jWX1Yd!6-Yxi-u zjULIr|0-Q%D9jz}IF~S%>0(jOqZ(Ln<$9PxiySr&2Oic7vb<8q=46)Ln%Z|<*z5&> z3f~Zw@m;vR(bESB<=Jqkxn(=#hQw42l(7)h`vMQQTttz9XW6^|^8EK7qhju4r_c*b zJIi`)MB$w@9epwdIfnEBR+?~);yd6C(LeMC& zn&&N*?-g&BBJcV;8&UoZi4Lmxcj16ojlxR~zMrf=O_^i1wGb9X-0@6_rpjPYemIin zmJb+;lHe;Yp=8G)Q(L1bzH*}I>}uAqhj4;g)PlvD9_e_ScR{Ipq|$8NvAvLD8MYr}xl=bU~)f%B3E>r3Bu9_t|ThF3C5~BdOve zEbk^r&r#PT&?^V1cb{72yEWH}TXEE}w>t!cY~rA+hNOTK8FAtIEoszp!qqptS&;r$ zaYV-NX96-h$6aR@1xz6_E0^N49mU)-v#bwtGJm)ibygzJ8!7|WIrcb`$XH~^!a#s& z{Db-0IOTFq#9!^j!n_F}#Z_nX{YzBK8XLPVmc&X`fT7!@$U-@2KM9soGbmOSAmqV z{nr$L^MBo_u^Joyf0E^=eo{Rt0{{e$IFA(#*kP@SQd6lWT2-#>` zP1)7_@IO!9lk>Zt?#CU?cuhiLF&)+XEM9B)cS(gvQT!X3`wL*{fArTS;Ak`J<84du zALKPz4}3nlG8Fo^MH0L|oK2-4xIY!~Oux~1sw!+It)&D3p;+N8AgqKI`ld6v71wy8I!eP0o~=RVcFQR2Gr(eP_JbSytoQ$Yt}l*4r@A8Me94y z8cTDWhqlq^qoAhbOzGBXv^Wa4vUz$(7B!mX`T=x_ueKRRDfg&Uc-e1+z4x$jyW_Pm zp?U;-R#xt^Z8Ev~`m`iL4*c#65Nn)q#=Y0l1AuD&+{|8-Gsij3LUZXpM0Bx0u7WWm zH|%yE@-#XEph2}-$-thl+S;__ciBxSSzHveP%~v}5I%u!z_l_KoW{KRx2=eB33umE zIYFtu^5=wGU`Jab8#}cnYry@9p5UE#U|VVvx_4l49JQ;jQdp(uw=$^A$EA$LM%vmE zvdEOaIcp5qX8wX{mYf0;#51~imYYPn4=k&#DsKTxo{_Mg*;S495?OBY?#gv=edYC* z^O@-sd-qa+U24xvcbL0@C7_6o!$`)sVr-jSJE4XQUQ$?L7}2(}Eixqv;L8AdJAVqc zq}RPgpnDb@E_;?6K58r3h4-!4rT4Ab#rLHLX?eMOfluJk=3i1@Gt1i#iA=O`M0@x! z(HtJP9BMHXEzuD93m|B&woj0g6T?f#^)>J>|I4C5?Gam>n9!8CT%~aT;=oco5d6U8 zMXl(=W;$ND_8+DD*?|5bJ!;8ebESXMUKBAf7YBwNVJibGaJ*(2G`F%wx)grqVPjudiaq^Kl&g$8A2 zWMxMr@_$c}d+;_B`#kUX-t|4VKH&_f^^EP0&=DPLW)H)UzBG%%Tra*5 z%$kyZe3I&S#gfie^z5)!twG={3Cuh)FdeA!Kj<-9** zvT*5%Tb`|QbE!iW-XcOuy39>D3oe6x{>&<#E$o8Ac|j)wq#kQzz|ATd=Z0K!p2$QE zPu?jL8Lb^y3_CQE{*}sTDe!2!dtlFjq&YLY@2#4>XS`}v#PLrpvc4*@q^O{mmnr5D zmyJq~t?8>FWU5vZdE(%4cuZuao0GNjp3~Dt*SLaxI#g_u>hu@k&9Ho*#CZP~lFJHj z(e!SYlLigyc?&5-YxlE{uuk$9b&l6d`uIlpg_z15dPo*iU&|Khx2*A5Fp;8iK_bdP z?T6|^7@lcx2j0T@x>X7|kuuBSB7<^zeY~R~4McconTxA2flHC0_jFxmSTv-~?zVT| zG_|yDqa9lkF*B6_{j=T>=M8r<0s;@z#h)3BQ4NLl@`Xr__o7;~M&dL3J8fP&zLfDfy z);ckcTev{@OUlZ`bCo(-3? z1u1xD`PKgSg?RqeVVsF<1SLF;XYA@Bsa&cY!I48ZJn1V<3d!?s=St?TLo zC0cNr`qD*M#s6f~X>SCNVkva^9A2ZP>CoJ9bvgXe_c}WdX-)pHM5m7O zrHt#g$F0AO+nGA;7dSJ?)|Mo~cf{z2L)Rz!`fpi73Zv)H=a5K)*$5sf_IZypi($P5 zsPwUc4~P-J1@^3C6-r9{V-u0Z&Sl7vNfmuMY4yy*cL>_)BmQF!8Om9Dej%cHxbIzA zhtV0d{=%cr?;bpBPjt@4w=#<>k5ee=TiWAXM2~tUGfm z$s&!Dm0R^V$}fOR*B^kGaipi~rx~A2cS0;t&khV1a4u38*XRUP~f za!rZMtay8bsLt6yFYl@>-y^31(*P!L^^s@mslZy(SMsv9bVoX`O#yBgEcjCmGpyc* zeH$Dw6vB5P*;jor+JOX@;6K#+xc)Z9B8M=x2a@Wx-{snPGpRmOC$zpsqW*JCh@M2Y z#K+M(>=#d^>Of9C`))h<=Bsy)6zaMJ&x-t%&+UcpLjV`jo4R2025 zXaG8EA!0lQa)|dx-@{O)qP6`$rhCkoQqZ`^SW8g-kOwrwsK8 z3ms*AIcyj}-1x&A&vSq{r=QMyp3CHdWH35!sad#!Sm>^|-|afB+Q;|Iq@LFgqIp#Z zD1%H+3I?6RGnk&IFo|u+E0dCxXz4yI^1i!QTu7uvIEH>i3rR{srcST`LIRwdV1P;W z+%AN1NIf@xxvVLiSX`8ILA8MzNqE&7>%jMzGt9wm78bo9<;h*W84i29^w!>V>{N+S zd`5Zmz^G;f=icvoOZfK5#1ctx*~UwD=ab4DGQXehQ!XYnak*dee%YN$_ZPL%KZuz$ zD;$PpT;HM^$KwtQm@7uvT`i6>Hae1CoRVM2)NL<2-k2PiX=eAx+-6j#JI?M}(tuBW zkF%jjLR)O`gI2fcPBxF^HeI|DWwQWHVR!;;{BXXHskxh8F@BMDn`oEi-NHt;CLymW z=KSv5)3dyzec0T5B*`g-MQ<;gz=nIWKUi9ko<|4I(-E0k$QncH>E4l z**1w&#={&zv4Tvhgz#c29`m|;lU-jmaXFMC11 z*dlXDMEOG>VoLMc>!rApwOu2prKSi*!w%`yzGmS+k(zm*CsLK*wv{S_0WX^8A-rKy zbk^Gf_92^7iB_uUF)EE+ET4d|X|>d&mdN?x@vxKAQk`O+r4Qdu>XGy(a(19g;=jU} zFX{O*_NG>!$@jh!U369Lnc+D~qch3uT+_Amyi}*k#LAAwh}k8IPK5a-WZ81ufD>l> z$4cF}GSz>ce`3FAic}6W4Z7m9KGO?(eWqi@L|5Hq0@L|&2flN1PVl}XgQ2q*_n2s3 zt5KtowNkTYB5b;SVuoXA@i5irXO)A&%7?V`1@HGCB&)Wgk+l|^XXChq;u(nyPB}b3 zY>m5jkxpZgi)zfbgv&ec4Zqdvm+D<?Im*mXweS9H+V>)zF#Zp3)bhl$PbISY{5=_z!8&*Jv~NYtI-g!>fDs zmvL5O^U%!^VaKA9gvKw|5?-jk>~%CVGvctKmP$kpnpfN{D8@X*Aazi$txfa%vd-|E z>kYmV66W!lNekJPom29LdZ%(I+ZLZYTXzTg*to~m?7vp%{V<~>H+2}PQ?PPAq`36R z<%wR8v6UkS>Wt#hzGk#44W<%9S=nBfB);6clKwnxY}T*w21Qc3_?IJ@4gYzC7s;WP zVQNI(M=S=JT#xsZy7G`cR(BP9*je0bfeN8JN5~zY(DDs0t{LpHOIbN);?T-69Pf3R zSNe*&p2%AwXHL>__g+xd4Hlc_vu<25H?(`nafS%)3UPP7_4;gk-9ckt8SJRTv5v0M z_Hww`qPudL?ajIR&X*;$y-`<)6dxx1U~5eGS13CB!lX;3w7n&lDDiArbAhSycd}+b zya_3p@A`$kQy;|NJZ~s44Hqo7Hwt}X86NK=(ey>lgWTtGL6k@Gy;PbO!M%1~Wcn2k zUFP|*5d>t-X*RU8g%>|(wwj*~#l4z^Aatf^DWd1Wj#Q*AY0D^V@sC`M zjJc6qXu0I7Y*2;;gGu!plAFzG=J;1%eIOdn zQA>J&e05UN*7I5@yRhK|lbBSfJ+5Uq;!&HV@xfPZrgD}kE*1DSq^=%{o%|LChhl#0 zlMb<^a6ixzpd{kNZr|3jTGeEzuo}-eLT-)Q$#b{!vKx8Tg}swCni>{#%vDY$Ww$84 zew3c9BBovqb}_&BRo#^!G(1Eg((BScRZ}C)Oz?y`T5wOrv);)b^4XR8 zhJo7+<^7)qB>I;46!GySzdneZ>n_E1oWZY;kf94#)s)kWjuJN1c+wbVoNQcmnv}{> zN0pF+Sl3E}UQ$}slSZeLJrwT>Sr}#V(dVaezCQl2|4LN`7L7v&siYR|r7M(*JYfR$ zst3=YaDw$FSc{g}KHO&QiKxuhEzF{f%RJLKe3p*7=oo`WNP)M(9X1zIQPP0XHhY3c znrP{$4#Ol$A0s|4S7Gx2L23dv*Gv2o;h((XVn+9+$qvm}s%zi6nI-_s6?mG! zj{DV;qesJb&owKeEK?=J>UcAlYckA7Sl+I&IN=yasrZOkejir*kE@SN`fk<8Fgx*$ zy&fE6?}G)d_N`){P~U@1jRVA|2*69)KSe_}!~?+`Yb{Y=O~_+@!j<&oVQQMnhoIRU zA0CyF1OFfkK44n*JD~!2!SCPM;PRSk%1XL=0&rz00wxPs&-_eapJy#$h!eqY%nS0{ z!aGg58JIJPF3_ci%n)QSVpa2H`vIe$RD43;#IRfDV&Ibit z+?>HW4{2wOfC6Fw)}4x}i1maDxcE1qi@BS*qcxD2gE@h3#4cgU*D-&3z7D|tVZWt= z-Cy2+*Cm@P4GN_TPUtaVyVesbVDazF@)j8VJ4>XZv!f%}&eO1SvIgr}4`A*3#vat< z_MoByL(qW6L7SFZ#|Gc1fFN)L2PxY+{B8tJp+pxRyz*87)vXR}*=&ahXjBlQKguuf zX6x<<6fQulE^C*KH8~W%ptpaC0l?b=_{~*U4?5Vt;dgM4t_{&UZ1C2j?b>b+5}{IF_CUyvz-@QZPMlJ)r_tS$9kH%RPv#2_nMb zRLj5;chJ72*U`Z@Dqt4$@_+k$%|8m(HqLG!qT4P^DdfvGf&){gKnGCX#H0!;W=AGP zbA&Z`-__a)VTS}kKFjWGk z%|>yE?t*EJ!qeQ%dPk$;xIQ+P0;()PCBDgjJm6Buj{f^awNoVx+9<|lg3%-$G(*f) zll6oOkN|yamn1uyl2*N-lnqRI1cvs_JxLTeahEK=THV$Sz*gQhKNb*p0fNoda#-&F zB-qJgW^g}!TtM|0bS2QZekW7_tKu%GcJ!4?lObt0z_$mZ4rbQ0o=^curCs3bJK6sq z9fu-aW-l#>z~ca(B;4yv;2RZ?tGYAU)^)Kz{L|4oPj zdOf_?de|#yS)p2v8-N||+XL=O*%3+y)oI(HbM)Ds?q8~HPzIP(vs*G`iddbWq}! z(2!VjP&{Z1w+%eUq^ '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/gradlew.bat b/gradlew.bat new file mode 100644 index 0000000..107acd3 --- /dev/null +++ b/gradlew.bat @@ -0,0 +1,89 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%" == "" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%" == "" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if "%ERRORLEVEL%" == "0" goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if "%ERRORLEVEL%"=="0" goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 +exit /b 1 + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/lib/fisch-frame-1.0.jar b/lib/fisch-frame-1.0.jar new file mode 100644 index 0000000000000000000000000000000000000000..eadc2faeb5f91c2217375f14d6a35299a262976f GIT binary patch literal 46184 zcma%i1CS=cwq|!v+cu|d+qP}nwr$(CZTGZo>u=kb>E3zw?!J9@Z|vKRC`NoIGpfEk zC$r9XNA7YlhGph`z##zS|7h&5{eSif z`uEz{-uB-*{I3}3|A{fPbT+p5Z;=T9f;2I7G5k09mr)eVJT?%JjL<)y=07_BXT$%1 zi~O~rGqy2wc5c;%@=;k?;XgGcvuE-&l+=g;5i^lALoT9$hAI%y0Fe|3xzbwVi7FPnyNZ03{HWbC(ml$ zk|l7Wn;8AtE_5FWsJau4DL5nrV789!@;g$(ulTvo*e^kSxb`)wNL|6NTd(zXoxjODX%W*s({WVvNSL^DGf zs$P~Rj|}z&OyrbT(EX+(If{%8#1>qeU3$ts~vm;xclNtmpsAKrJoTc2C{r7oDYmV*WMP9 zf^aRU5%+lx6hzXQW!#$1Q}c|P{o4g-%aEfYAl^c{fg%cN+|#ais*&o|uvSH89m>we z*4D;T4{fT_?2M`KxmTqtEn?*`uv*f!8HtV2UdV+OBmufd@NTapbjH}~nky_%ok1P* z1s#*`lUxN&MJZ7LEzVj5y&t_M4K?Q zXD!UpCx;d+xUeEFU6_WlaPGtGRv6)3OdU`-%d`rjx`QH87}bXt7(gY;uCa==+owbnS9lA&SMq_cj)ejxf{3WYN! zl{G3^_$(LTC_ytmUzBE_ndS14sqp0icut(l8dKpiU8WDbG~J^G^Gmc1ujE+M%2o(l z?AXuX3jtuXQ(Af#MSq0O11Kz=$!b`O^~!uU3+Cp{Gh^JG8Q^*}18&*Q@BxG%Ii|OB zSWli^2&<70DAqsH8CD4Pe%WesLv-g?D0nMCI}OISc)rj`qpCErI+1EE9&rC%^N>)MCIHJ)Dh;ngCgSy zMdo%yk%J&fPAomxS6(5$F_4mGzeE$^rPaL76TK;co|{Ib;A69#Q9qH;Ai=nazk+H9 z-HSA!*l>!@i%AZUKD7wW%{Mm;*6o|tBAbhui*myTR@N`9xqgHR&MiFdQ~z<1WWfy+ zEdYz)XkuT)yN11nltfigKuhJ65Kfdn0}Iweypex%5E9>4#|m-?no8DWm)#T*}z< zMD<6ZXJ1_AGzZnSV?rkJlpOp|iXS+DtVnItY1Kih`fBl1^`o-_fMIp-IED8s<%>Gl zPqu#$J{sZ$bWL=I${5g4m1`JD1^YEyu(w38AN&%9T6m;x5mySI@=Cs89C)+MTeg(# zk??XL+NiPLRHnc~6!+Ua`0Hoq5E_IheXpQD3Q8YsQvaE5 z?w9Sn_Y;B0c+C!xCOJ|J81jOK9o(Wt>>9?B;zzyQulf85d@4LHu(my{h;~qVu*TvV zES&+m2Gl{IA=6UjnYmC+p`ypECKXINGj?xSI%FWpis~S%igg3wFdj^$LISZM$a?s57LVIL*h|Yjuv;T3->G*Z!Q_&$NYQS35E7%NrGu(Ns=!@Rf+CNtY1O3s$CoNn9$|y6RUb^sQR#Ch znOt*B9&HtVCUU@50L2L}yu08PpSZzOslXahcM0BBgdOTN$;+%UDHecI+65}kljqa@Uf|aO{bR$pIMwwaE5T11*j?$9G9$m$7oTNT9oq;AB zqG9Rl0WhP~Ys~L){jsapF{1Q|sIbMCJ&qQicAVX+29MyoG*&i?p43Ysr=68v3GH`m zncHODQOoC*H!l0bmC9ucKbqIPG6h^ukZB&uoG-OTies*%oUdh`%oEV@LxF4vpc zQ@AOn3uSm`6#*}UG*k(>Igknsy+2ydT(>7715YPj$*LKbK9YWh`-7z_0`X}{(Wl;? z+@zy=>QTfxfNgc|)EJ{SYm*s>oWBu)d$P!_PYzwze@K+lcD#u0tAJ+Hy=Om@EwpBR zh9C`%fU}S%ZOBA6!#;tPo$39tZlX0cL?G6l?albNBeSL^QZ>yKjTr&0;SG8)KV_o; zb`N?;u#!R#TqxgO9?JM*^)97{%`rFJuDxnc^u0}bIR7Y%q*Z*>&8|n$&*J@xh%u_o z8P0q`#2qf-)jiX@9jCEFHFFx|xEt0t=S8LzBE+zLK|x?^I5)|WL1?eR;n(7BC6dDv z2Xso;c}2yIM&|X#Y9k1XqRl7>ZbY$HP-?E?NDoz{3Lb+yj5k3S$V&`XR<`j4sjV#0 z%T-$4tt8(MoZvqCR4r&yNG=h-i2jntbU42Z1hd>9<}<-uU8Kig##Lrh4CAu`HLM-o z>=7|ZD*_o)*)yVqj}-i6k4NDAL|u47Wt?DkiIM3_M7&fNxD0Oz>sXCFlwMHKQvy6^ z2ZAJ6?sM?Zsb~D+}gp9sb!Au zmC7!{3%vUfkYNp2Eud~>4&h~6ZR`u!-morUx86DIu?G&Duvqb`j0;=1)X3>r(e!@N zENlfe)sbJV2L1lzNL5Wu_FVQkVVG4|Lb?V$tw-Og!*?Cw8ncAEpz02Yxct4Pq8cw5 zTYXJ#!L5Z77^kaHTl)Dv%=49fdqqgzyq!fhg^@Gzpc0e*>`LCKM_QZ=*qM|jpYo;x zOnyA>?R{*ck|R=SSK@i?HVo$INH;(WJ3jtNJW^aXyMnpQ%~Ji2bIu5x%#Fm!C8(>> ziVUaDC16uw-8T$=9G(%%W9P1>kq6%Ap%J8*3l8dVIUwgq;StnvtXjp{n>$XuHGeqq zNzTn7%FhauuOr$!4juL&uPQroIr6F9}34In&*xvrm!r|LP$N(Ny;gZAaUW=j7JX?Y!C!pDt7YH=*(NLG%&wh z;SLbt_*tY=O>N_G3m?c`H6@@D^fqR2jW`zajfFosf)&n6-(z&4f6;?Ad3jzUbErfL zM_GB7m;O4b*DklP&FZh44SYB3d0;}qJ<1A=wIeEBa%l)B<~&A_xtXQ|uGx>`dw7WGr=j*aNuFG_)caYsX0Am+TOth-Sm&wYaK==7055$&S1(;$S&!IJ45fO5 zA+kk37W|H9cv(%myJ}%yGwijYO9GxvWU^0OkSM@PaApZl<|f8{gbz1iK8E}V$`Oam zud#q^k(fsFTvjpUldOg$p(25&rap*oi*+GKDkw@(_fhR(FE7uM2I;02@)OOhqM~}B zOp_tE+`9!0QW-;R(Rms}qX=>(!cY(Fgwo`A;$tkr>K>J|J5?D)g}>Y@8~W62sJL(f zE0~KJbL)pt5KXyG0KR5Lt4Hg~Cbn)j5L{hbnx&N1bK!X2SzSTv_jJ1U6v*Pe!PZ`8 zr*Lg#*^3(J&)fq8A1P&)uIlz*M208Y6tV%sPqf0r!Yc|9q=60{XknG%5|=%jp_^X1 zTLyO^w!}Vcyxglek|AA0$y`n?*KxTWx8ITluM>Py)ngK%nW92E40YDpO}p?c()$k8 zGzHdM`+~!Vnrm&w%J}|NNfn%#vt$UCA}RvqQd{xWO7A~08T&)5WA)3F0o~{wd>D`0 zB;^_P`*y@PCb?^C@>h@if*-^|Lwmz}NCL!JvUFL(qAu|LQQeLwHeY<-0mr|r72k>K z?k(d2w4!d}8=Pp>kMt^JA<}-w;F8Rh2~uq=%M*WEE(^jo{?x1>yl6OM`D$#nAd{G^ z_{A<@`a{J}0l3^ezZ{b}()*3|3yLrLI9q@9!!3d+Naik84!2;59d>b9_RBBpMmnj! zlS`5r+`ns+yckTUjzdqvP4I@p;`7Jkl>b8o; z&wrvn=&paP73TMsSVG0F(B!_4AN(oIqhlXF%oz2~m>%{9CwOtl?wk_1xM3sq zMkl;+5kwFpc*6odFzWtpB2OHIVc~&q7&?Dazs+pl3IIK(mZ!dXF6soG(D+R|tJOf> z`$^r*I&ITr3TE9k?8Byw7m%@GQ+acTH9p;^H)^yQO;Le%q6q?1Y=_ zR302&;!my4p$-TB&I{@f|2{HV?v^PIbBgs^VTkb(33#XYUIWpy8g<<{g}CVLOjt7) zxL_->6Ta9s_<$me*G!gJ727l08d=Y9VWAFn@_CGcSzcpwk zx<#=R3Va>8COD3%mq?U}vQ9?ujTWKqma29mdfY@jLi;($USYh%&Q)-$RvE3INbMWy zx(Ox2ecOx2%@y3YLcJcZj_onoJlNP`qn3$yOWL*59As!qigDZQBo)~<{zSpojBH<+ z)W#8EJ0+=7pldyBfseExVo?Ll#}jZr^=En3iBp3g)kMeVU?{pa=UkupKk&M81{lX1y)NSVx}ab25*iTkkfU??2mW zN%*Tb)s6O?s}#frhuBS1or0)X(oM_8c3Pyd7eSy*KhN6DA z)drKZkrQ9d^9naO5YO!b_+dvb+3vCK%W=TGn|0Xrh=Y%{=rr}>p2DQ-Qu*`)1=uzmvk+0l~ieN8a8wD3XeVOR>E1$ zj}zA!pgBqLU?t6Q6htKQA+2PC$|dICHIrs7lP}Fwwn=VXT(uPpwn>gQ#B)?vbmap! z(=buBDK6k@ty{F({i80ztLH!&b#jbXfPZ5trK+gb$*Iw{CZHBL6k zu*jiL&J)U!A5;SE33BKBNSADQvO(grYjUBUXA6yNd)P*KDjNYd4cu)XF>$pSI%zb; zV;j8fWZzI@sA1|^H4M_cR>2Q673OTq z%;9QxoGp2CrO}>rx-*Yw=ykryfv9BNpLU zP|=re^u){p0B&^oQpBxNwNjcVJ~OrN60=z+R$n#AQmjRCRM#%yI_gD>JE$(0)t<4G z!2Cd8aMPZnAW8W472_p=|q0{IbO9=B#^ ze0uIIeVKdkxIxU^6i+$!3J$3yu|F$fx@(UFC;2E6*beW!bP3%EgLs5($@ZUL6`OWk zGVzivi#t1F)KOE>OF5Oq`*dvSp3=UOaqfzvIJB47X>g(EFWwmTE!$`>?y@SA9IGw| zbvZJ#FUi>z^7dr$0nu*5YVyxmp9|WFhBn3ZjbRiyF~u{w53JUfP}5?}yS?eOs{Qa4 zbzl{)4lS)CNq0+gW9zXe7#p)@KJaZnv}$65!S2RTUuxaB>j<9IKLxs_T-G(WJTGb-z;)`0ZrtO=s#i+7AxAwB|V%53?(Fr5$#eaJpyd>>$2m4?L>-q66?5m)mgWFpNocaT@=!@MI;a!%%>*Voi`+WOFM2AS?MbV%WE`;ia9>+O~+?2kB^t6WS45 zcYOWC2tVJuEhp~);hW2SE(*UG?-|{+t9I6#DAi(>n)df~gt^h#ppT|vG1d+LJ=hJW zj-Vj$22e-hiLyjYQ-}trKh-$p|L!R>3h%5ZQ*NXxXUPN5s`3-ZEnqHQRRAw}0{9Ef zL|_`HJ^M}}haT}hEkhvn#~@Vlb;t7M9?Y|U&#cJPiiqG}W_i%ZR{lL%ifwzpbSW70 zoy%97C8<#0ibk&lgAx==;+ALT2n<9N*KHU>#Ac4uITHntyg#a7rnH)8Na{r@$<-O% zGGa^G8R}(+`$K9`+>H(1@b^veQ3oZ=O2%9bIK{Um-zBN|vnyNE9B2*l!0O}n5)v>*$~ zwWb8QCd!k?ZlG*;>UML;aC^dQwX4JvEL$Nx(-SGQ`T@AGFaGG3+7c2_9>%5)E|&Io|E8Y}PKMfY0|NnZ{M8NV{yRfq zdpk2rbJ73R&_6}B*n}xL5JuFnZ>LNoP(e@`olX%3869H@*o6_3Lm|jdrj)`k%Nd>J zH7C)-A&9%e7~UULg6M6M&a>zKea`Q1KHd-xp+`TN#y7`P6T(Lw9tQF|n)fH&Z&1*t z1a$g64jI$57&X$BCOYQkEjs(V3~{9Zud`zzo5XT~g}uU!NLVw%f2PS{3>R&#m|J-8 zIGC|Koy{kWZz681W(BGxh*R zy!L~6!MYI^MSM~|%%Q@1#*-($+g#yB6ml#}o<-tFK3{6T(E;{BT4=bi7&d!6rN=ID z@(WBs<-BO_L=Y-l{5 zHId-%-g%BG{Uv0a{sAYdAWL=aGh*X3l#klHYd=(%&gSG(_n z*1l9~WQ@OLnA(^tL^d_bX65;WA zqd*xNe3y?W7=ZFfuJio*>VzviY@$gFzi!1K&X7wPrRztn3jf1O3O*T*QW36P464*m zxYiXT#-!%iyQLkV_wXp&iEgD#Wo|EfJ{pHg^k11fcNQn7O^|p7OnRx|=LVuqoPsKOeD5dF#N-_M$;Eo-B6*|KDaNr9WXOT!F%2&Dys3ab_uLt8?Xwc~Th z^3&GXos{o7^9ZvgO)%=%UvFbCcb+OLq&uP6V^LNpm^3hkU3$MjQkrpwt=6Qni8TVT z1WTr3>KI_a&v?r-v{D^@j)=E&e__jGJSKkK-)fSTalz_Rsla!qBxQ`P35upNbBHw5 zYv0;r9$wMb3ij5ybohl9_aXwHJ@hOKjhw!WWme7GwyP)Jv3b$8g9v=ZO=WgZmxvr^ z%uNTij-ylNEINvNf`vM)Yw6z8D=?J{tGb^Rb=fhPaCfBu6xRK|Tkr=I!Rbm(Zm75X zXFSMYYsZ!rSrRNeL{PQFEf`v~hd$Y3@tmyG$u41^t_<77TqStv5WH}c84K;rJG^4Y zUa{mm>axHvqPM7=v@|JrZM?8MoYxASjpFst2zgZ)>FOUhT@HEAzsUxfmDSG9Q9R*3 z@o2|-Q-!KE@bMHPZ`{BL5ej40_{(nV9+V#Hw-h3GE?cW))`Qk7@WRKoyO67#>qinV zc&Jhm$>G}fE;^kk=2ZSd&!D)PC!2{nCnoL5wb#f4rovpo?4AeT&&0y*c8|I|i4~i@ zh0!XaQhE2(voz3Ba6XRiMFdNn?z~~{!d*KMea4u{8C_`iD^MsQc{?M}OG=yl$RK+a zo1!rX0EOW$HB293Z6*=n6$U*p%R)+seNyJ0&zBFWUAaYwAOQ3v_F)aDyo8v89=|qO{d|*MDCxXD3Cy2x3 zE$Z;=ELxn{4JN*d3A*sg(YBQ#kvin%nZh#j12w&dK&6hg${c74{KLhdQmMY;w(~ot z@2m|-E#pA-n}BN>45*4&C0_^3k%q1z1u1V(h<>jg@vQ>taJx<$U4lMkpG5gLe3A0S zZ%mug08*$JFN!=f{5YGqQCR~RPwqnCd4t1{lF<>c$;is)ri{3Q^P$nEO&6}SaEG|7 zhe)jhQViOo=}2=8=W*@Z#@N5kePgf66$jTU4lNZB!tC$y+8odQ|25tS^5*3%|D6Gr z{>}g-|9#|eB4PYz*a%e`v|AED^v&*YJnULd5fY{(MQkU*pqV8kQ9*8y&{5F_%rBYs zvdHP$n{bQzAe{zYzXlm_exhAgU^iUX5DGTb zu280Mh-z45iMTN+eP)#)XWvnTuYGagccv)qc+%13(pjJ&# z+?r#`ye;jaFgb8Jn`b*eHIUOL$lg^ng>k2}N69Lb<1TnbyE^QC#yTPQt@jypHU1`! zSwq_<>`)nW&eDRpTpy5aSs0}QaNQ&d6)$p%ha1JN`f9Pow39K8aSaRvUua^`v1}H; zHB?;{h;LN&EC5*if&X<>2s0dd>7fAuA<+N<{rrE7ihquYTrDVrzx8HcvnEOGnLHpN zGeARx+T%i~j?zGIh%AU8Nde#(xMcJb<0fR&GKei!)|M+(wXW6kR;{IrR@Vp?$v|pd z8aA~%7~PhyzRj&ID@DKeI&Wu4On_@R?036wx1DEsr`%_IlQDL=?q~wA^&JuUjy3MK z#zpfCtIU&K*q6IWnD+QWHgbSU1%=H+g6o5rPtF<*YlX)9hRp&nHamHj7StAZg3_k`xffNchk3(dQfK|NuL?k&6$4eTbi5*W>O5koO84O67BXfa)F zJ)}FB(Bs-w>oz@VQ6yoUq*5ls8QI3DBn_lF&`FKS^P%I~8G*|ceMYohH@0*RL~xQB zG!4u<=%UAP2Sbv)iY0ln2%9s8BhTHcv;!zJtcXmEv1buc;mD9t%TQQxlp{6NHyt6y zmTrU{l=YZxrd7n=??sw|v32HDXT%~yIoYHX$uiP%F)h`1mQrKS9ePM}Y%~w~mg+mL zv(s!j^cfoc5F5ouO4SVNLZxub4`~K7j#d^}ljRxCL$tA%B*mf)?i0{4^@7?(j=0jp z8*ew*PL6N|1Mh{y-aSc!E5oB@kD6HJq6&3t9UbywA02^@xU;m9B1SQZTPI9@W-=u< z?FzY?dFq~9)HIQ0!rE8Imn{ma7@8nPI~0aS+bmN=EB;7D)L2ll6*u?F4kcyzl4NaC zknTnxl(xTgQA(Y{My8bm!hrcbArka(*|0qXjq|KQiMdu@)E;H=bC&g(n@ShW%*FI@ zEa4mzt^u{0MO_WX4Bl`g@Cm!odfuXNVoWPl+k+=?Al(Aah>=dYEFFdlqSU^B1$Iy` z+2OB7;y{|rkY-`6%s^2kPqIa&+_?I_rnZ{RNae@MrqMAbhKUp2YBRktY2B-r$u_;= z!htQnGAip-7b{MzBE;Zb5sHvh(K!E;0*i2B1KW{nWgQ=V*(~pe1?j-*D0lZ_Va&0@ zG8*24NjS^JaAHfc3>cDNH#V)5IXv1dcnjM`L}4(xrSl^7u=bAovs{m?W8l43xtk4!KTyQ>7Hxmprqx zXEwV5ZqVXbgyk9O&Em$i5)_PO__(k@r|L`aMm*e>Y{%r-Y*s*qKI{3WM|528)EKP? z`(yEvBO6p1ES>zH5>;)Fc!Sk>$0G`m4tQ1r#F5&LnW1a8-SSm}lmcHH%bHmcsw!ZG zktFZ(*zP;OLw|9P3u2en(JkXYz2e=5~i5NLFV zS3#lkB@UW1=g9UGx*4{|${#Azh-A^qQK8uxx5d+91<4|T%2(9$&17IUWxyU3LGl%M z-uVYD8Wt|au(Xn+tc9|V^>B1kHxQjMd=vI(x7q7U25XUaY_?QZc+c)DeE2dhYfz8uy!Cp zx=b0{f0&JAq+`zXYJ%Oh`s3VLf}x)bxe!m7R^&%{Db;dim8f!|h&mSC4NZiNDo;4h~nk;f$f#UEuGE#3MZZjs_TCVDb(C|Lr%=#D$ zK%_Q*lGWkhPLT*R+e^sY+rtCSG@O#j6n)J+?2?Nm?f8wVm7#nec^;JhunL239DuBS zQqlDu+e&?zR#T2$OI#AT<<7mU-($&9^0Dzd2_#%-S97FL*B*uo6^iSt{IOf%9%ngu^j)9GNJ`G-CA!6pYqbV=B=26{f~>__V|u%?xC zEse3h0lId2EYRGZb(oQB5GXg8JjP%=_Yb9VHpwa!j0tG%i_qK`3Ug<5j z>jU%RS(L=$3I#R_T{b8-vMh|oQBzzaw;pS0vq@fc;B|fSIVUA}VlQq=r%LNwXDCFK z{;@rgE1AIEs3DWiWBKU8vH=U_;A*`U6;}TxM&3F7G_uh*l|(ztwRu^&kv65K-8S*u z^~s=!E055e(pBIx!L71@BY&|aGgX(h%Tt5X3T3$W^R@|qPNZ~-1GnvGDuI>;0U+~? zue#es!Q*;z<)Hd*BWkPBYZ2e#5vBDcSX!4U1KXnh+yw==y-Yb(ZVr)T?J%< zlb}!RwD~9;P|%ybY+eB$>uKLC6(-st3`CvZ3`ZwaukaHRGyw!R21m5jmG#?QhNCu5 z;Hs^&vaHrvAfrC7r`Bz`v|Ce2YOHU3HTaAsgxh#%wvA;m!{WvzWH;Ivc4zVVgux>< z&*h3T!~w=>KHF)!oAGeS%}m4FD9Kbp_<0J-S8by1l|I9GFcv_DY?T6ESVMSr&_PY=$D-sE#L)+pUbX<1+I-blwear4=qdQ; zttS1n5FyzaP(QTSO%0nT2}YtLz$ZpY4%U=eY~HEs zIASFg*+)SWK@ZLF24eTcto_JcOyr_B%|da5Cbu_eQ7}PB7lY%uG#F^Lx=rAmBNZuj zAzU(?yXElJ;kSP!n2Wur%=2vs6g9?XI;i8q}?u3eX9%+h1;czjp{f%C&xf&a-CE=32D;Y?|0eTfF15 zvlp;zJG$s4Stw1l__zm!0ne6Iowko@8y!BcBPrefPJvd`jADDspgjqRPVDnVUJi{DCXPn7_cdv63fyl^DCE^UhzY)vJnJM?R)chv zYl1fJQw}AjmkF z3kPd4U*h`m3g?KPc}L`M4pGkW-HLHz2;m~8EO*wu>ph1zFm0>c zH&UH<2-LjpI-Pdf<5`kSKV|4gjj(mJARtvrOLILK(PW33n&yjs^ucj%2cI!)P1#C4 z44HxxceJC4FTRTf2bJ^C;}hzf>K;NpaqxOxYNDglMo9o+Kr#lxErl-3e?BX^3oZpVF zp6-!wPFxCZ6NYefbc6QWb-}MG^2Rf;PARxTn0fZZ--iqOyCeamJYC7)vZIiD@T8h2=`I;+i;1n0< zCpjCP9n<4Eyhv8;X!&^13@F@~YOG!#+p(^F{8q0BiMB zea>DG^`#SFsS)w$h=g7orqUWSU>b2~RH6`$(}3G<0A_cZ?cJC(Svw%CAq*_*fo^^O zbM>HHLmo=~kf0+9xo!-}hC$B8lxH_c^1<~TeCvwZvEN6zPxP0VW44cWpYUs`L$Z&0 zpZFSoTr}XbXNnjj|F?kN&mAPx`rn)`tq%VOndq<=vmp! z^)7=kSdRX@zg~+F4R@cF13vGi;8`}DWf*d%p1?OVBiE3F*bZPvFtPD8qU2bNnGacP zv%Ysj>3o2+8?p@>32qtW^5mVDpf_ZA_f0QEcn-~|I(aGhPj%rrX_EEF>9K+?Vi?D% zeNav{GKRi?#qmZx{we+}ZI$VT7+Y;`lGM^>}fy)H)+@~;M7`7zJR*AF@w1+(2HU|g^i+Q>az;xlypR8<>S zX+70~7LIw^_tDO9#$Jwgjs|@j*OE+KTtYZ!-6*E!(CxUZf!|GboYzf@O%q?%RH)<+ z(SNdfO6JTTZqgakoWb>o`l$ugGdxgoF#V0BWyW7~M0*qi? zsZT-n&Ou;9w`KQJqjr8>8U4)xF_8&k34%H>e|yOsJnz(iZ85^PKb*4-onDIsaA(}Q zA3AM^THpDF4fL)@eL67T{PMmd;t7DbXK-U^#~)hi*@}-pdS$Tp}~zqI~C+Nz`X_f22IXe`mcPEXv_NW}m(SGS9U` z6bSUuW4k@YnnrYf)qc-iCEBF~IZoKp2qyNcJC=R#{T+Dk#J8KkpF}seFHE`Dsia?~ z;(kKCkx6fE{sq-Z#$is(aYI4I{D;2DWF-6Uk;=S3G8Em8lt!gD4l5*NoaMc_(%ApN zylna*>e8@j>7i3jcdtQyw(2bHv8&YU28B#CgPFlpCHm3iw(qKd#)^*IP%mDmCA(Gm zHvMW$17R6U6Qet^l{~v01rFr;!05FI_fsLZJfm42CG8bkIlW8E#MxPQETrd?TK4*A zS{h)_;vc8!LiAf)aTX07Tuu9dYE6ZDYMXUJZE{h@zbS``O(iB#y36z(KIZR2amMsZ zPjiRZ`qkm>!Ecz;cldIq!B?TqhVC-4+SNk1J;dGMLeMd5ips0BR-MbM#92O7pH@*# zkok&}Lic3HwZ@OvDcI9J8OxKruvWY+J5f8^vS%xs^C%9#^N|CbWx&d2fHld8=aRso zK`f(RSK`2K?56m)n`|c}v8QjI^lvKN2av5q3{9~9iH$uoHXjI_dtIkDB&73S$9GJR zM`%uOtj79BU+$U|+YyAuuLNUv@@8<~C5-JE+^p@`U&#;HzjTJ>g$6*kita^c(n_G! z?wu(4t=|eUpf#9w#=R!2YmH)R5HJUlyxlq(i-;kP{n*7`CVu$rZqUYGjaWRs1o#a7 zD6{jlF@48;S83-FygJ-5pWcDoy*}89y9)8W3F+f<1h>Y&V;`HS&X^R^ja$knhT{EGNv)WYgk)ea@PK;JQC-=$5aMfj|3f4PhI97-O>gP``Wk zZ3erJ%+N->A!zvH%)H*~Xrr(1iQbqS22*TOIkCQ(0SoX6%i%c*r6CR@M5$6#=g6v5 zX0+$X8r6k5wYg#E^e}X0{E8DDHlT+FHD)Z-37DIuRZMvmTNa<nH?q;POmVaxdzg># z*JYZA5CaVD3DG{zU^)BDbB3O;Q61+=mUUfP=SjA8pnZ&ETm00qe=$g3W8Zz>lEUxr zf6dPRP00S|AINzB*X*qEKPnjhT`DBRS~>*-0?I%H0uugz8UIs$|7R@($$z~Oa<#NE zF?IT9?zdFkQyEnp^}7|fd!Hhlu1G{w*A*k46`$llNpN8lES7>Q%Xr<^z#wBVR}+RDp&`)Bvowg2_w`R=t}{tLtb zn}5X^uS%$bO(9q-a16_NP-eZ1Ikkg>k$9<3z&0MB;g>I><63$Dudc`UP)?%qZ%8|ddLijYzc0Q4X4#kGWCgYj0Iyu=nM`t(#SwpEqL4g zWVWQcAYEArbL&;^3O(lfY+0=6#eiFRpj%sPg46Px)~rh9yWJ1(bsuHQp9bsJ2Khy= z5}7aIJ25(}aaa+}PR4;u4crF%1&6ZTZL*r2*)v_5_A5^ffuNV!QO|+T(cp0pUD}qa z=C+*VczfL>&BUU+@i-iVsI=G$1CL38>Gx3sY)frB+)PXMUJo&;r2ckpj+|iG%2gq_ zQ>8-C|GW)=89e zm>ki9S{g)VoiwO65r(I5BpbFRh;2$BF&zekqY&x}qUla8R10JIC42Oq4Vmc&>)f%5%qEX7`DvxI8GgakC%H zlFdqro5|{%jhA={0LqC>Ih{z@*@>FfWtdD_ve~W~nXT`=32R=;X^prtwUj@J+YeTp zuH#9MtWUJ{RW|=L7Pcy5hyEhmQ--nDE9h$&_%uGUcJC}aV>tG9l>{s~uBN}QWVCs# z^^|2n z3$3LBIw^MBbzy3IDxzG=otbe@CkJSTsiU8kg8Mzb^D-7-7Wl?#^&K~-yHtq6t(Toj zazSLXP{JH=2lk@b5{3{|{Ng8&%J=qUa9c?2joWl4j(uVT547~EE-e?GbN&5CoouUU zaG_l*)217|U3R!#JlJ||{}6kdFP5e-5pQ{1&cZ~T)z6!S<3orlv9_GRS0~vn%nT|C zI?aVA=uJ0s8r&cOMmrWdfRp2irUco6kpMBbh@5=<%tBkJqSy-xhs$s2q4n4im|$+Z zX$Epz%q_Gt>MO(Z6gew{Q;G5My2%B`G3Nn)7cd4r-S(1_TY3lm04f0VPAFp7?K&E8snp`EDO40ea!m+GFN72wb99FQ!&vU z`tB@qv>+G7Gs$P`5kiQU#rhp$;jc4*<&q`#&kNsx^4i=LmNs6IH^$k@_qbVXY9=l3}ae1+1d`gruIT6LGF#7JTI-YOCE1RdM6=B%RBuPZVGF%}wH!#4HJ0 z5>zPrTJMnTp1rE3Kf6MB^?d90aDGr)|AVu446ZcXwno#jla6h4Y}-ycwzFc}>1f5a zZFX$iwr#tE+xzTO=c}{Nw@=-BtJeExRn6z$Gv=7{8FNe%a3mGfgXD)MOQ*#JGE)`O zieBXE3N=-kr@(UT;E~T3OAf=0VcW%@XE%rr;@^Fxzl8Y2L>`q{VI~=Z++_B=2(O{i zaLF;BE@S~w5c9``10^oBMth%@c*(S>%34cT&MHCWJX%g}mo28oM z%wD5<%h^qmAtfB)YOOTC5C|BZ|I5Si3kKC2>EArE0}lei@c$)`{AbQklTpT%K>mc3 zI_V7v66A#+V)h4d6ht15h8a4tkie=n<|3n*PGSvhRBvCnf?el2$lP#xqLOGID+?E< zu9m)f#eDttH)%>wUy-O;t%jrWxq7yhbe~?G+7)hpeIBZVjQ`9x7a@ww4MJYSE)Mr3 zZ!bw5{IHg4I=Jw+PTd&6aIsOKGP7H)SM};cE*n8we(`Ud?r}5}#S*_B4RKUUYII~T zDes`I7#DBV+D&i#td*oe*Nq?=VsyPot5%Vt(cO9YO<-SLbUat5COthlM+0OegULEE zGViW54|fSBW^47Rlh|TLtLk8EB#oDpJQ0u23#_f7qMoMFcYw7f74-zq{6zNsT zu>SrQ-h&&<_=B1xZW!UyJi!WJB@jRil&U#W#fDCuM-c~?&CJYn$L|(AsS)^5SPy^f zot#2yyXxObY$!`aF>0rKnBR6pXKQ^jgsZ5uBPgRVa}FcZtDrXy zAOH_X%O?FczZ-9jhJ*b^?q@aa8<9>O#OvSt5;lfj&0~`7mN$TNMFO7_gvYdJigXjx z)-{sMe3+Z;7+FLmV#|WfiE|^mJh1LaS1z*4x=7iR$r=|fLZ0zKZBsG zkxX7`kd&vcruy-Xp=yLeUm0Gj05?YR@}au;1g&|DO5AFjenyOBKChBG5$X~}r;#JV zjv8mXS`Buig%nd|j*R0mzw&AXNODxoY<@{Y;WBHL7$`ig?Rfi{?7b5(Amgo2U9Og` zjlo8;>k`vi{u?z}*~SrGq`4x!NX1>AM@2SxBZW<_*+j@zd7$(xDZp32E6Zvl*IT+l zw+8bfC^M*8DDesByyNc()LAFE;YnFWM~R4iJG_sJcK_|q4Lx2$4lMcQs>$i<7@X?S zQ>IASBX-Bu%}pJa`vpW@Nr0`*qSeabgnT%%8(Q{2LUb_`K#J);TW3GKbuCqI?ADX` zx9=PSha6S%a)o$Y#LttCPJCukrM!{mRtp=4S^ozA#Q76Zb=6f?E;+CC8&oIJ0JtaJ z476@aGV;MH>zKeR?*aTUy(jlY{9zqFrqCfh#>#yZzM9z!1#l_QuE}@kC#)=^lWa-v zn5kpvZ8`CnnOoe`z1eGm0vYJe6XMz5#X45q`zzNDyoc#PLJ<^^yNTcAms;ZZF0Lk9}(=h$HrTP>UHCMWXiee8?6v;>ZrP$)%| zUBM`}ZFh8`5jS8Pu310}v>F43E#I|18vSj{l}+lE$r;NU9tOx%JiEgOVpp9KS<-mY^+z%pq!|Lk2If%y{!Zc)xp~II=FQ`xlnH| z9SjQ4T56_tGa3AQe-l|L)^Bp5A#)KN#aqH&Inqm4`2()vYXZZ|MF<15Lx-|@R#Y0{ zfKdf+Di;q)6h~!C@VCmX4o#dG|2+jC!P{iP9FC~cZ9>I-@)=Ayf8dAUCY^s*Wpgd2 z`4&>5H4GUCgw_MtV*@xftDMaO(!x4Qsm5_6ruk_a(vL;ZAA)Y>H#;k+Cghi_W9(GH z3qT*yuYZwb{Ds*6BK>&(7HDAkpxU!uD&=smm_6&-cxDgq`onbCL!l4Ou`H@T&#}r~}{`th>XvtEvnnV2u+>CSHv9FTguxV&nyKj;&93m4NXjYS zo>YK<9BKpUuJlD_OBw=4#N{;F`w`6)X?t#?5XP3*Yi-|5r&rA^i*{jDG@PF~iBz^S_0F4Xh1WQbP0ig^$3u4#-dw#QB!)D zUnP>s;qVPYn2f)v6_;^i-R&1Y=!~!+iubrj+=VR z^@$U$Y&lTG{0RX#_AXostW1dH2u9)eC`r6f@vfXH0m3KLtY_dT&^_T){(@G4MO z=fJ$0(NtTj9kw-+brv<9$M=_QBHHmcwq>1Ut;6pJe;yjv{XrO}20qkT|6#jbnZ00H zpD=Bp+f*pYsdG{)7kuqNzeP~WJsKNAP`cv1gYQ&+i!uQ+rVR07z|*F?M^cI!^0X7i zg((hv!vp*VCPw9;3O+)zEARYOmy7V6kFk98hix-1N8Aq!2qX_fzhm~7{T zej9M_c6+LxS}8BG@XEgFj}3Tx$L?R~;>0Rt%-mQ{tR`U|LQm&`vCIQ^^vs;4F9|`e z5;0)?%R#7SPlL1L8cd}HdZg#K4HKjNhDVlXT)5exAlfCrUPsVU7{P*g@Y92N@Oi&Q zJoUq%SbdjtNsEOKO2eS4V9%O}Lj3H@YX&Q_!+H(7J#3a*!yXr4dIhMfu}t6qQX}j2 zq8gXYI|)dPjiD6^SnX_M#VOl`E1sC8GdK~vuVg4;tq1%iES5GRH_b-1)EQLMw+0rz z-YH2ksvHaL;hOsgpoBrV42aQVZNA&Qxr=&Jus;=^7&xOeL z+GA{e*%O)GSSd#T5D@GTXUEgZG2>33(&2qT{rh_U-(PKOfIHxSUhS5Mo8gbY7GwK= zea-&8^7o&yvi~^YKX0|Vjkoe5zOQ^bt3^u@@nIGkX^n+63`u}esW4SM_K$c_392zbD@+D3jgaoQUEwrLTLgkcIPj-)s0R)4W^N<8KTo(++PU6Q z7HO^pf|`Y{5)j^{H+?mRD6IY&%B|Lwo3w@8#ul4P#+#m91_#F2`^bK%cj|(v)()-q zbwKLYu`DJ!5k%QpdtI@nNoMOYaU&9S;UhbZZOqGgrQyFR!foK_JhRHgb zNsCBa{V@G!wLG1vq(7^YA685$n&@+uktinuE{ClXUzspDJiag4vm8Y+FRccqn=G)8 zt+b%&=Nb}YNTKsQzH?I_L=RYHyocs4MU(=$X{qo_*)8)^v+Ig>(=}ICE!M>Iv=y)& z4V5qH1zhyYiGcvnc^(&-7zdg<{jxoc8nkRvQQ>Q> zqLPDlN-tcyQhOB6)eyzE>u-GX#tjW{6NMG1 zr~`$)G1of;3@DC+rv6m@%nsx1+$IafEL~v^`v@p-bU00WdPaGCDbr^U>-cfECmnvE zl+h`7EYI=G$6CWLot*mZ{So+}^)-YGup1%l46YU}gzaI!&Sjbit|;EeP|usItSm90 z{lJt8%>$9P0Ye10#yn5b=q~A9S32 zPi0bzdgL>uusQgs1-z|u7Va_fH0iM6JNEyr+t+y zAyBqU^)A?Bb}XI7&&K>MJ>cN3gzX(!ARnsE6I0iy$l0sJ!mV!DiLRZ<0VBttiuX+u zVS2RS;}&63TWcS8e{$W#=tH9)Zm?n7#MPO?>+V$tiY~#4!SW?6GecH-1RpP*8mt=O z?WV5B2G@yCjk}`@a33nlUS+=|oAA)r`c!M=ej0hD)0+s7%#AgRXn@wavG17t0oJTo8;bu8jl!m2>BBJeC_b1Z3qKmnoj>6YH0wH#|DuCy)NG%EB_7$znR zAq1t2JK67Yy|?$WfhN_IIn3YiXqcamH9|FbjTbq+#?B39f^8 zt|33SppU{O><6vnfukGD06(rh6QmVGgE zEvMH^+)j}1bUa9Q3qAx%ca+FgJTYhHC%mQ|HBTOLW4+_sr}oCM)Gfy*D)&5KEU#6& zFlL;%uC4>;?qEOp%F_ORfe|12J97MG{+v_zMeivojO~}8!eJ*|)DDP?AEjJ@zN-nO zAF18!XgAM$#pdf=Ds9h*7NhDl-j7cRz8E+?dkLv@!=R4V3m5CNZ9fIh6!JUlZd86S z)?h0CwV-P`B;7dbo9gP_*V(**r55(*8!Q`|OLT!bUki{sBQ6aRf=l98dMib#}g zeP4?i+xgA9^_NY~LZ^h&#+Yuqilnf!CxVv~Q_NJ@O>$>ur)ui-`V^>jkI_c|>}BcT zU-LzzN7{QPpeZ(i=`X^5*yOx*jc;o4AJ;t$zj1Qz_cR?Jc^_{7BnR}Sh?V?Fm9tY; z+EMqOe{mMyGQ6ghDDHDZ=VwsU6ALU&Q>jwb+fDk=ML*K7za`OwpGF6!?S79UZbiMu zd8abVn0``d!dhRpc6=voYP6pIjZYPg4`4Z?H}qPETEX@f95haW9f7!T*x zVp2R1m|!y};by-~+gPc5BzL=Ql8_ zdeOtSLD^@Hs(67yW8dA9g_*S2kyqWjwM&K;RYYbo-5YqpWllxhpGHF**xbg}_&z}r z%;oML6U8x3Vu-iX#hj!bEj@n{%8Kx!z=O@Xl;9KSmmsQC{El2GAb5Vz7bFRT9CY#b5RYOH6>0w^ z8Biz|?3JOW_7&PDbZd_$x$sK=p|@Z9XG4FY^4qFo*zX}SfFXeD6q>T}eJPnOf&bJH zjw)QqBKT9LxT;+4Co8ojsEpTlJtZeT=tl(KlY#d%@_i$MqRHGZ-pco+$`7ZL<-vyw z-NNiBvf`@30$o}@q*&XjA08aXcB)$`$!0QJlyaO~HDt3=Iqiv^-x7VIq=yg3H5-I! zwZUj5qi^*ckSx5lSJ!^3thTY?P;0%uOHIHr*)7@=;V4D&|3aZpl?YG)kSA%%h)>#a9aq z9q!RxH(TfIu!x<3`VC>ez?ps!{(JWQ*ID;pi{roJr~f(m_&>^Ox<~O12viV|=)c69 z`hSi5KjV}Cq~DF2|8VDR{qh?PN|UwK0LuLshlbV+3(u$c1qsTQ{tE~EJ31vxiirs` zs_B)WJ(cC=xstZcV08;x^O6trj#ib+>CsxJ)}P9y<*s9|>9r-x%P*eiDHDnH?d#j| z&gTiP?boMEyzGzREeR0TF>N8VycMLJV3bG{JQO*XMVm;o{4AH>p{Ql!E2r*c-v!p? zm&KGvqi&p8^hU`i%kGu`V*NjW?6>kjqB7m!6kihRN85_?f5u(3t9 z)p|?CZcR2cNi;NW?Pe-Ay?4E>u|xj7M_^?1hi9eT&4D zb^aYx5NE=C7_@$A&zvC%&h$OuJ=J;_MD}|m3v``4?=EpJzj(>zqEw0X}yYx$l*^Sw&fC9S!Fda?H{lZjWT5|*chfHvM!>06|^rL4c~icdtaQx z`w$XmW4HoF1F?0|qbQABxkFd6PzQKbUKB0zU>5_*0z-M$+b(4{!;{KV>3$IJYx;_y zX9tOE)7?fId*?3oc`qm?Kt!jw#Q$8Ahqa^umX7Y{8#0!gHrjxMXmFyzfhSxX45@Hi z){Jp)YL-N4Xz%Gdq`R$+{6O!w#cpz{q+jNB%Y@&c7a{ur47 zCbzebgtmCYqrWP;kjGjguXWa#6kB1DDw;dX)*isQ*2e^|mWaVh!s#B`{ygu{&v=n! zgq{AbVQUD%Psdp+NVkS9Wo8{>A7?@vA5G`vH*Y5+uh(hxcO=1d9N7S=v^U1I_Zt|O z{-O<~x(m;(3UlcG?4CqLaFT}DG7fZe0D}_MdU`aEt6rma$fAgVL!u+@{;0h8B`^+K zdz%?W+2attFjvSqKR97#h)BASo13*YNK5H7x=q$--_UHaF_lZ})kH{)*x6{;X$p>~ z>}oBjb5K6$GH4S(nH4TePT8sgY~&n_alw!u^rQ&z=cm2_L^7orr3Z52o4x$*?Mn+i zxDSnM;W}Lb;&;Pjs^XqbqECLvT?nxz5{IV}HU&rJ(u;^3k|D{L|K>}OHo;%dN>yR1 z6h>3u=+g`@WlfWI!}b`D6-*(Nf}?U~(M4QB5({UU0hd5Pr~rOY@Y#v;bwOLeVUzQw z-Oi>;7B;Q@E{coX93aDSQ9895(^=}nuto=Gkte$}SsHpq6)$=FO?U05W1-jBL1~F= z2fc&WYZx_Knl&0^?8UFOM$PlW;|gtnpyq7X-pE~;_?lrzOPH_v5*rFPu4YgkbL?XX*f!qKU5te+ zgCGx?n~~MeT{-*#D!U9{VqEoP!ABOR5oqx6X8pOf5prJ%+8Wq(!OHw14mo-yhCfa>VZW2*9>w*pUlqufwMNYxtV9OV4XgTmmth66w4;rd$)uhXVn4 z?Q`wulv~gDSwrP}xYaw73;r1?LCYIHjI}UkxW3ea%7$(E!`=x{Pq;l9lA>u5h1|CD zO^7#|l8v{UvUJUlS!***-X^Mn(z<5Lce`)i9jJ({FcfK85>u%;Z#vN*xJLEf(}#3R zdKKYZzcv80Q3r;F@|J`63fI8opu+D!2+ev33FsO5F?*-EHACL!$NPR4SR6Ws27Df4 z_~toSuBMq6u21zt+|a;v57}ve=vu-OtWy*S7%LR;ROrnAjp;f3v}0p>5lqR>ignL zweNC%yA>csv6U)=+*V}0-q97iKla_M5Go)VxJ`-6cORT{m+;SfMw|C?*Jt|3qR$*& z7}U{Uh8jV8Bu0GRCzQqMulfT)+9sh)yDbrO`35-m!&o?Wi7l z%s+WzPMVS0#%=xk(d;U7h_WNHjGx~z;fyw-GAnEx^?fQ;Cl-80wY6liN?TI03YA0w zifdi}sY)B0tdx?>a}{Hnank~m#YnFwq9!}DkeF*JIotsw-(K9f_^{Y-S|YfzvUyX8 z1IdqUj9AYP3a~oKZk2hIkK)CVVU4*TGONqOEHtDv=t9beW#24NXtj>A)nLWQWq)~+ zBB~}gv8WVNjM(#9q!VA0UEt^`*3=%%hjU|1vpR)IIPwtj;^6UsJNR;4ye)JKAGl`^ zm^7T_FUBXGp?ueFBK6#L6^)KY8#6Dh)Y<(f#&(}K%dMhHQPNE zly5SLssxyI75^@3wdlVcU$)`Qb9g*Eq*P2$ertrY7&47{vblhXhp%>VEZ1Msc1+LA z77#@WF8HCV)zuKF$CxjphDbbrW=oQW;8?6rlH5?C2aL6tBz+z+5ymR|SUNP)u2Zb= zNK3FZ49w6Q;^!f%Y%9WLcP>$ux9o?6;2DpXi=UBqabk}jfw%Oy7t7ibRUFG-Lo2Rd zqksw;4pIt~EZ_t0j?bb?!ucIduDRNmxc}toW9F1#5)CIAlUu#5Ndo|JZ;%c~^>nR9 zB1D7BNYHP|r97$yPz7q+eBj;s3$*Q%{T;^i zgVHi3@J_RJgaK3AF-%9=7@nW3Dl`==X#MkOS`G@K){`WD6!~#xzeH!s*W9P@>0)S2 znIrQG0kN9Tvj0@|%rd9`K)N;D)U^0A+KPKi0f{-XotcW3C56@4eW+I5w0-UJ;Vg9Y zoEKh#G>q-LR$zChRL(s1@{*rGvz*UntI_g0IYs-2t{$U4U=5CmO_rU^4dT5*nI+{_OL1y2c(HUy_SmmAA(xi>1AwxyD)?V85Tpi<-rwK)-nd_jIy^$;K zqw3$~$2&&ew;;Hp_IDsdN9wY%r-l)i$zB%gjMl)RBCqvKml&af8;nCr z(;!d$cghTka8!X?x(!O&#=V0M9Jhg|SDs+!;Wrom6F7D8A=6ZB9w zKzpAQPr+9jGCKkOQb8B~dV&u9t1ECgLP<^55J zx>KI^HRQY@!E7s2=1;sd8*6UQhbH>0F$&|xhu^mBMDmutg4t#$drYHM9IVbQ!W)*# z7FZr}Z24RkQytPnRw^1{4fl)yc3$s%*XHhtOed6#><5hX%^Djx^`Xf49LPhnJE!h< z;q^p)*rSJFZQfS$#?hzzsZJnOVgl~la1qo=`qhdgb8;<09pnY9Z=%zU)zpzCE{TfXrtO_#5Wx z@%Iw0G!v^r)zzt&;Nj&!{_n=VyAG~HpF*1WItF-s%5UZ%gQ?}1vv_ig$qC!BpVx@p z1s;1e{hXmXllpLq1KWbR<(PH2pI%(_@m4QO5v;kuNwq5PY|`=I1gk^1cWT7({@>BD zuspvlImRkP^7Ldiw6ppb%Fm#fI+1qC5^r>eMb>&ZyrGA7e#-WM271Rw^oUHw8LA_wQ2 zArNWo<*>2#$6naH(Xj!lQmT`)$`nb%`YBggKg0WEenf?RriaSJ7C)&qn}R#aF-Jaa znh{>D6&wzp-4p)IJY+)>QlvDYW<*_)R)4=T#)>afH)xQ4o;i)A9F)H1$~eFA?3?Vg z;r-ZJiM@fGjo(!!$wug%&xs}`w-?8hPXkcc=6VorF8^kstNDr6fRGCzINjrDjCx+}+2=0`jv9 zbV-Y3yHR@TyCz|Sv$ab!}NAyJY6P);ueU7so|^92#t3n>o2X+ypim%q?4me2RR9x*Vh@IK3Hx({#s+gn62 z1-_TCUop!67B)!!-w#p zG_ifhH`qF(&#EmL>idv7fi*k#@Jm*=uwB0db|X**T$quTWl+1w*t=*m90IL})uZ%v zgBrDK^U$sxuY5f~gz7k?2omweO!y_* zi!hV%rj_a>p7M22uo(Uv5Yw^p-gx?s#T}R6m0@D0#hsV%$Wb@(53mYc#RKO^OB6C# zZPprYwo_vx9^_ZYZ~64P(iK(tW=pnu$o_1&!`$jxiK8xXy)mDdC-m7B^EMlB+g_&p zFh$!l6DRgH9qFG)5;J`WHI-vgLiEY>!I^f~(HTUa>{y&n6~1EYWk_(%b?%T|4gS4< zsC%@vk}q)m{V!lL$i{C?-s}r8Cmd zW6$rE;G&({bd0BGiqleWfi3O>Y`b99jtlb-CN`BewOCx$>^fh@s8mGxvcF& zP`Pw25Chp*@zYvLHC%n1n}!v;sN1=<@<*Yb6^EcsFfLHA;O{kPj_0e4S7b`IL+Wpl z`*#hcKcVqI72B?CEgxYvqA1}^v!~Z?QhDXGCQSHR^mXN2lxJ?iO7rn)KA!o-I~BaeJaI3%de!!ntds6N4^QwJXLgx+wXnUMHb$E;#1Y!o?{&Iu1o)nI%6(a|zueGj zv>&UpS_5;{va#yk1G%%Vs!E-oCDvn^-fu{wW0>Nmrtl6EFSz@;UdG3N){}!5!D}$K z04qZQqwVOG!WR2HPq0SET|gd-A?0xl{dwGyoZ{o{7;N;DH~uSIN>gF<`Bhh1rv~}V z;@)?u!;h%jNOsB?>W;ecm3@mif^Zb8{)zPdGt8sgV2fe&92hWieSqMBs{9G_@7r+1 z|7$bt-w4~sQ=J6X|1RW`M*sm)_oaG z5IVjpptbEXQAKV?RP57TTh)cDl`g9d1zA(?GANAT0XDVWQa?`JC@blM0&*orZ=H@x z{Wz@2aB_?owcpw!UrMT}5{HdxsQk07M$Lp67vza{ST57Z<(l8c+-q$BI};s?C?xs3 zP0LOz`CZFoqMc%jNodj`Mih-n>c<&|h4 z0U(gn%{Dzx3}bbQ5!aeWfsx&f_aCQVcGuq-^V=f5-#u!4ibn^*#O5?M!pMPQf%LOuAChh}W`>XMkc>>R1)XmN-^n z%zrExM^Ic5Q!*;WX@}owC%(m1jkDf0IyW-J+B%l6atFkcxNEpI>MClwtv_7`6xg;_ zmlQRH#hh^+yC(%SC$(1Ss3vG7jgYZlC;iCc<62jhd6X7fH0Qt@G_U!Qr7G2~aQ_o) z9*~iGbr@aQI2wG_$*fgZS4Mg$f00C(h4RPBW>iaHZ7{ld;UvD%y#Wqhe7UKCB;rXj z<%;^|=T7;ffIAn52VI2rGk~p>3@o0ya?^qu^0M=^REVZ-1l6NPkEWc59rNJlxl+n% zfO&Fa4JL0+Q>)w5eM5~^ou~e3o%&t7A>8|%sk`9C(kH`oWGeUi8=s-(pXPv~@A}^` z2)!GoLsb;;v|%_)vFu;nZ@}ZdENVAx>|}yh%`>swOf;YbI0$)(Yro$IILk!eC2&oz zm#deo&wIx1j@6fk|FY}&2!f+JqMGWcLbpjzb2*(zb1S^2;T9A}lx+H@lr5lw40#4x zvW-~uM+z)b>W$rX#($gxr;SN)hktVKK`-A8N?&8mr2l)1KlDZ!^oB;zg-%c;J)BLQ zGkA10I9;9X+k91|^Em5RtV%7}2k2gN&w&s$!{?#YdS_@Q0iqW@z->!BflsVCeCMFjWgz zfQ<76=7{JdZ^T&y&EaA(Gwn)yox08O`*`B{g?>>q6DSF) z2*EUf9gbd7jh}9NC|QA%o!8o7h?D$^Z)c7^%+G42MKx0?1tC&r%d2}ly!9Py9#xWA z$Im1aD;==%R~<~N$5NRjUZr{5@lCKKar%0j35`)V|RFN--HHp^hD5g@u_2 z<=QeD$wsnkeh*dW1&*j#`8vU}PO$utOS#4d=*mZ}`4L4D{?OS4%cSgRvuyF+ zwEhWFa!XgHU05p@Vy~ssZs#sh#|2?@3PVh~!8&%5u3SW34_Naq(PX%XB(IZXsXbJI zx7yC7HovAR*or%4rtJ`U9mtP2Qz5X!9rmr2O(MjR8>exYCY@5+_=M4CbMTES#pD+G z6q_Y?*fMKK+$$gKrnY zAzYpWM_eQ$U$40PEIWIfccXFyP6ArnuWOePajMLLzFACPtqDALT#N2F%cb)EiB4zoh@4*vw-X>^)1!7p)bMMi*F zIAwo|GzahvB1yJ3z`mhtT|k;qo##!p;kF(`>bC`a{E>iW*=j!;X zi&%#2f;ThTo#XKlWXQPs$Hg#LmUHH?+P^8_wHYcM0cy+*p#eWuxZqJPcVql# z?rpWdD`<8DDRmbtMEV8Fj{x0M2SR zv#hh772to`JDYCLq22!#I+OmzE~0-Ir1Fo@{{kted2zJQr4&gfM|>XQM5{S=vL+FS zc{n<@B7{6DdU;R>Xf$)PrMjNJx}~J0wB4Ks!iORx#(7yD-<{t`ABr~9(vI|^OuWuR z6`fhvI$cgvZ`Xd1H6XP6CGaScmXg?##*v15*xS44A?*q@8Oc-~82u}3>y3vlK$G7M ze2Dn_ILwgpJqDb{;kJiiml>DR5i)vl`NpkDbdLbZ(PO>{!zSO384M|vq$xM}1IFIi ztzG#X!Qi(pQiRjht9ijn0|OLgcu$3wrUnR2!$$aG2kHKHNcsJVJY-?AKn(Lu_dZ5_ z-dy*Bzx5cP(Ro45e}v0yhnJo)^Xx9Vkwhn9{7;kh{8-9H(x=rJiAf|gem(q;U%Ng< zcVNH@rk(=IMvY;V7IOmvI8ot@KL_#=C+SqtM6FuoR2rj#*b#{e=g0hRBOgU^xmei* z%sSY?Fm>3N!|doHC+5|*?Mt5B>kS=rTh0Npa0xu?8}*C)+_Ixhas=79heQC+$#|RD zwtl{?#=^tz!YM|n4`oL1e(l8XA)&Ijz856?P`;ozkM>IlXcZ4tHUE6W;E`#eCY#iGSrq4NIfu{iiB z+9+>Z_(%Aq+G<0Qq-%U&tIx5GTZm5R3POfSQihWIG`267q#zlVr*lL*-SFMg+KCR4Li6@l6DWj zu+zd%iw`rhH%Ye;VJkT|p0|;0BOgV6U#q4lI_ZwXsc3aUQV&Gfp$7to;W5P{lx~Cj zH1Z|5g<{O&w|L${etABh7$TW^wpuKm;LGl#Ncl*%53`n-XH$QDQ`6fBR_khruzr1~ zzhgM%^&fx0CxwSr&9mc59F{PF>y=(L?3LD(2B!hggvD57$;E@5z&b;tyo2Y=B{5&k zRQ|d@+|K(5OJD_j3CqiYWkUFhwK0mczk^(VV+g2y+8hPH3MxJ(b>lB!iW(3>nE#rC zm`B5J$Rn&49htWH3;-gEdzb2F->9F8zcv&agcsj|IQ7{5#tRZ}95K)4d}R*MC$$*- zrKg9N>yGEkow&OHQz9vL>;}dg-J)DHx)7aUrMCSK-{emU7}}si^j= zs<1{>0Z|AL2uk0o@YzM`$S#g9r zt<3^m5ft(9XRuL#of)g_x&?_;_MTM{-UZy`YdOcNOsn)kK%sNKh(#RuY*YnPVO_}nUQe47N zXqbfG(A_2_Ww65rTW5;{5T;grkX*>0C7oSYPbpWjBf%70d6uKFh>?R*H#C#Y5rL7y z7E;bXYfoaDe))L8DxzO^3r{sN(xFS#aFuBh=GC}Kw_ABv1*>VqwZ4`En^Wl!^^_pmRfuK;q*4csfboF}db!$L z(b;4U)XH{rq=KE5IfGJyf(q+{(1nI4Xn~!lb=x@HIadNEZ~bj*|AJ}v5bfY_dkM!T z-D*{ZvOZ0JGc=p}S0)&uBafnZj-sD{39V%NBbp7D;0k}l&BiY>)j+8fbtm;V)|aW& zLR>OYGnSy#H`8Cc)z8TVA^ZXjw&dDy$tNEKoet?qer|6dwD`V|bbL?nS>3TzkpLXy z(3uq>W1f%G6JbiV5tQft8*F~4jwFSYl1BM@yHR{tjUsg2VOHujC^Dhf$l~YOKUlw0 zur$7s-iV!l$tcXEd?I8$m`}$+?=ryi@+Hon1wXo@c&E<__F+DlLl35~wSlI!iGWqh z!Ky}+hMz-$>QNqyh$LAGqEcm&g?qj}7NpEXkBFa*KsWwX9E?JVJ_l+czKJrWS6`Fz zJ)tu33X#1#iC~Dh1mp429uWBi($8Io=Lg@lihV(pB6$fqrfjI%>%geP@D79b$C&;6 zyLyVCW?sJMgWv|I?8%=TyPvgW&iIe}AEq_Q&!`dxrbhlNO6IEKZKgk9CZL$jm6hE(36!6F_p8UnqJGXL-%d!)4s`1-yg z5(T@!5PU0G6z6L)ZY=luZPU+WB)?x}F)V#S+v#TpNz_x(2h|PYXWN)6Z3Q~ys7^_) zkz7gAQyx%d*Na zLxl-t@)8$HywY@~{deC|m!``PR}^KGtMb$#KFcqKU#89HD$hNojgx)RzXnHwFPtaM z8&NR9H!ZZDZ1;>HOnW{Gs7)DV<|*mc9g`v8Md{5<3jo;s!Q#u%O`wEa}MrG$F3#ucmIt~UJ^98{{2qT>&1@r&v0 zRj+=o=@(0D%!^77;_aGjEErbh&+oR;npFc9SqTr5BQzoxG9b`k^yT!By728Q*Ly_$ zGmKtI2Rj8Flo}-6B?A=Ds|u$ECoHx(Mh~b=-=l>H&JI`l_Ol<^}uXpQ8bc(JY(xh|iHdCNph$!qSc9pA86C{ZhPw2p8YCLQ}YGOF7Z&XBpk}q?BTwXYHVm$M~;qHes28Vq> zFeyBKHb?%9b8eqqDRvCcB@SzJn*M*!*MC#=|5_FNy$DYKL#IirFocBkH_59&|KF4R ze*}pdIva{v18e}c|G69?N>#>bT?Osac26U0uOll&COxRwA^|uMEG(1N&@dTT%qd?s zpZM@C=~7!eiWcIOJ299!dlCPJ2{)TN%Ju(_m(o)A-|CW* zDLxl-A3u&=(xb9Ii!FlL2BGB&UqJ%lNf{V?PE{hOFlljuP;~o^+jFKYPk-lST!^MA zUhMQN)ObeURx;Pm(a-1GFB*JQEMKnCeC1J1SuTIWoc$KTcL6*E0V;8k`<5flWL9f@ zQuoDUP6x&q5W)C_JP(s3t2HtFea=ItO#W1feuZ!<|KG8^6MGTKvPNqq9)H`nDaF>M zN{&b(<*PR~g}$tRd&!&2a^vx0{bST3qeTjLj@oI_o8cVbM$MOW>mEiiue03o?kvD& zdp#muSVbZuT!2TdoWJy`ZY~N$+gvdn zOOm5}+c_jhytFKjNBD zd33H0=VEnf=v`k~fF2y{Vd_#CV>O>Dw7Kc5tBxjTKE6uGHliwX=g&DG9!YB`K*F{b zTT>wLT(e~F=&Cv;GX@!x&b4=h}SMj!Y<}9#@3`> zM9l?JLlfT4eYM*Kg!+VeCZ69!jnMv`q?tTA_Efpk}Sz2G@>YU`Fw&ZiI7(HaPp!HwS_7 zixSiR`{yFs_tbui=$A`_>}MG~eleD5=baLkjBddVDGvQ~0$)Ugmo9=JI~=4hgsHhB z3l4L_8G>1~OP00zQ-PW6w6eT{aJpzOr8v<-U>7xkJ%&OfnU*D1sZmtDD0O=1(v38_ zIv1{#1xyw2H}#YQd$y%q!xE$7Ah=mVS(B(Xf>}A%fi*=@1U0v>m}C9(V~)esGhvH8 z3;jL6HbXwH`iq%V0jAq*2+9`$&&lvHR*yQ?Kr@z+D$Kj&29M}=iDk0J3i@YIh67wx z3lKu|CbmG#Q_H}qA=2&ppmKDzaqtNPSDXK{`&WAM5VdBPu?nQs%!l|M#n$mXh7H=K zU!Gh)ghN+nfp6o7NXriHmusA%rk`1D^t$)ZDXw9F1IF*(fFX~i=>;CXp3Sub$IFL- zFf15v!r7AfXJjt4*q47kKgauc=E_ZRL4Ew9lr7 zLOTCsSZF8T-Kbvv9QIhrB-xfR(A6FRZ7=L-lY@8qr6OYw$p@(@*9Kf$cja?050 z8DZ3(Qr@pyD8uxN(gp1nl(F#FHI@%-w3B*}3*~cp_@KX#BJXt6t38}A$nXkRehPDt z3vY>K;RacERa==%ZPsDk`C94epyH(O*vvBJ0d{GkD-gsgh!WU(a{#q$jJ5ypkgE9d zGrHUXS$5xmR5P_V(~q`#Cg`)58bfoTGEYrX1za8Km35t=)WPCV8g)Sp>zBJq%KV3A zMzGKA{PSht&NL2#DW_&_k==EnNCU06d`nu6Eo=IP`j(T6v6plAH_di?MtMpYCWz`7 znJNCNEZS)9m*~LmI_gntLZgcIInJfaX)WNRyN?yX4Hmp)quY12i>RehS(V&PaxA<5 z8_K{H+?-WwywNt*0?Y#2Z3ck|E~&S0ydKK=zn&&0S-p~n-ipt6r;KAZhUN_~&<>8NB!J>qTW^+<3_xhX=P`PKCP&{ea z5ZnJS!x9t74dT%gdcyAGJ z@0MU-23irJB31f=zu<=d^upsPlx3h}$J!5EE z;TcWMgQJO@@2(|?Ye*=_aB4xuN+w6ewp3~>CL0F$4&5~cW_wF4!J!!-^+bL&sS1CN z=Iz<0M%@RJ0W3UyJl(jBW3(^D$=TwW@-b5q8;~I|e;TxeJZXp)Xa!rUv(`TV67Jt< z?vmfxlLLPd0kv;X(eT)LF1YXWQ|AY4We|5LLQnn~t&8dpwuc`O%*Dh*j-{5m zJrIsOARre`hO0^Qp7*<6QtQ1en9K{NQI1T-xNglzZ}DalFjy^8wZb{5b2 zPSn2hY)|i?WRzZ!vfj-fB`e7&V0KW|5Wv2}rR0@-FH{>+HLPYAiq|Vb`3ln}b2BZG zA3f_qrpSjH7K=F32d(qD_3S=4W9iJNNUXyYQq03w=>ntyjd%lQ6u{(B9>Jo5&NZNV z3o{Qr%_54UR{dfTHaL!UFtM#h9elv6S{laEa~XtUEG2qmr?3cn

Ix`ITiapY@p3 z3gws(MpttUdY!Rh|K{oAI6+0OklXVgDGsyOV1I>lLtp3I?WZN_!8>mWIYM)a7%MpUs1<4Rvy-o)pxavDWkrak z_W($=@kE6Xi=G&+bs%X;TKv*uJ8?gjY=@PJm|mj|<1au=ClPLmR5Qx;ukTUE%So%m2r zAfIna%K0albDN@yCl%ue4Ho zlb1zT2%aIjGgQ&Kg6lDTIo7X=-&EA`_bSKgz=XRq5PtL3{yBQF{l;Dw|U`o1X~$QgwMQXb6`2M}GS z35Xme(7zm>W*&VKcaz9O<+73q$)W$VmO>vJQ|hWtFQ%;Oh;SaISJ{qz0Y>rH0e!Hi z`6eF3pPeV2Q1nGhbP=0&i3#oA=g>aHA&)IgTn{;dwxmyK}F zicbC6Lj1?{>D)pT|7{_NJM8h-Xw9vmLY;d#s&k(CA-u)%{n6i^W26yeEp<>W#<`u` zz~Yb0#~X5L&2(>l>lE}&@c1tiusyT%XdZP5Ekr=dGiCR~gN~uBaX6)y>HNWEB9?uakV?00Ia zbK0@dcmsukszFr&PBmClLFgoMHq4!C^c9axxr{L-R+$nch@~3(<6YQ|ADN07Z<1!} zG>|4Gk?FWn^2?QUWc8M47dBkuNM=!7kASL2t9Nv7oK2g;2fVFmy$u$K`E*(R)m)-X zMUv`e=X4=9*b|n08=SpV8d;q;JUUeAG{=iB&5fuMrB0^i|3+i#sO#~XN3Y8@DFa>RZcmd|M z&F>~cX2g{WD%^1C7ZWjdZX#}-nFu-%(rd|c6A|~_M3C*(vK})PpdQnHHxU!J8b04V zjgJ$Q=L!MOe*jFxsya4GBypS6W|9nByy<&F9Gb#rYU`9p5xtP<;?;YL^=c)`5-O7BKUV|I%LHu<7E}F6ZF<1FwkOi*+>~Dwp+K_E7us!~+j}h1EfL}Um zh;=i$4%IPt4o#ssz7OOSe-z~KEIM@)>fo<`$C@kp{VRQWq1Ym{y1V6)jag>J4Y6-Y zdoiW#qJ)**GUxF63E#j`vT}=}QOSHt`oNTV0t4|_7DTLFN$O%E16gwVPc((hg?e4H z@7m2*CR-$Tg5Op=f!kd1P+BA;7Wa2>duE-wqhPn+^7K=PojLI<+lEfAR|z%Z6O6G% zmw+^aW;5po5gT8k+5CX~R9m08umJlh+Duojxv$!6W#hxQz<5cHx=-z&RtlPO z_F;SJG+LJ)zDxz#-N+Z3W!Hoxc(RoD9Ly^cys-GlcUZK5vXt=R-nVBnf-=M>u6bSA zkcGBxE{D4%f~bkxF;_Xc4FyN7?-SQA>{f_-%G_vy>eXmh%seKWCXPwN0wlYrl*WC6v7k_E^hStlUKRH0rJ}XSPeKrSyPQ zmT%7OJe()8Li6ukD4{!vtWL@pf_UhCHHfssyAo!+|4x>=MMwPkQtNApl>o0@oo6Up ziWRI+)ijRC?x>MdF=OCxf`>isk6)8EQJPqIfYfE_yFR%lS14GyLst#vRn0+)S!X61 zyC+}Wu(hsTw5JK`n-^R5-oprmxO4$5-@(9=_`6TS|uavBIve zC2SunnLyY59-`bXuzi(5P2CqPP()5I2+cs#qEVhGV$yddFAU+Nk?u*r9oiiAf|vBP zVlY26pnS6tJaX%-`mWL=n!BOBO0I6?S8!M2q*E7OTyMD73|nbk5E&GR*V-qqak>pR z0~d&4hs~;96~Y!QS#6o8h@8KP-+`AY0F@)elT4DajCc_3Thwyz>iA35-4CX>2A8=5 zI#c={GR(Or?PC|7A{@0wXJ1w|2AHNKV5as5HFS2eK3{Z?(Kb4B>%V(0fLqTL5sW=c zLcds#t}bR_QBXt&!aJ^U)FqQkOotC1J@StSkAbhAAfGZlYnBhjhE3exaoPb^1)sfI zIQ{H*Lf+0Z#S;O$C1EIoA`h9rdh@Jws?qknqFEK-v2VuoX!R;^u6_1} zi2GnQNs@&xf8G}9xd}HT)dg#0Q!-s2ywacY41R^Pm)1j8D|%UI^F^b9ajiYku(Wj+ zj(juBjN-Bu&3=9lFjIrk6%QRY_h%RR`tIiezEWZWoKL^?hK!Wn)vmisW~&>l8uPGp zj4|s02*ay7GU6qN575m=p+;-#xL%;olw>P+7IGdx6OvJ8e8T*+$;fYnQb<)*pqrFU zT5Eha9tQ%G)G7cCp0V+W3BG!oB!G8|bNqL$?k zzaN$yQ}`ty*%EN(Q|IrDvt-5?^YFK)H(EEkfUc#`GWUh>?CUvfp$de_$ic@k%UFqV_q z5b)(=n!fw;-quW%l1RNM3lpS8QMQ8v)*()^cV0QB6IV03M0q+*Oc(gu+YCPp3`w?% z%}KI~8}*VaAT6*_BBVe|D{$orUdG))IaN@&9>maN&NM1SN%w>o8TEjK2#Z>jeUuHR zut|Ea{ZQ`vOpP>$F^5Q^4c-4OR4g_vzE$oG=}__bAa^gv3LZx41e#`QkLYXHUE8br zq;k0js0xK_gfLLzt|eMySfT>Fu&hFb?QQ>Lf=o4+F@%E_ded zA;s;HDq0N0Z!>(wD>qw3I3Qu<5QT>eSUUd%95MELbx?7(_~EwH>P7~UPZFGFv)NkO znh#uaTc*cnd`T^g%%IXwkS4yYCqpf4E1hMcFjres$A4!V+m?9w4h8!`PW~14kh%ki zhHpMY2M;^kOK~&c_2K7RHCczA42o0wI$!LAPUU?Ao!2wcoULB%&)-bRMs`8^hS_=V z2G$+0*b%ssF)2|&NjG}tr8=KENj2z{U}&`LE68!I<2gQxO$vSzLFnKpO}FC1f@d1~ zW3)@rX~qH~UHCBt52t07jdZU+v?AN@&}vc0r1R{1Bb{0kr6Zy32Fl2*b^GMN#vZu5 zuZg%L8W~gxml(+ydi={z<^89XIx0`lp^YeM`z&l|!NNvGJ~Mzem#N5@a*j-WBS#aGrTsn77HLdeqwdNLP@i1hM?1#lL0S+9f8E6yU(tkbu{DmC`GpoKUTS`5NG^et> zK=79jdRx*cfVC(|$tTiuP#wfN(m8eIgDBJtoHx@(p4H{!v%+Zq~ zgU#5YS#_*pP3QFUg^1z7yjMq0@z-IBeXgOPEgaoY+%Xp=T^~oTvbZKI+K{KwbK+Uc zy3VZ3zOFI~EDYSlq2Uk05`hx}m?4+8j$4AF4+Uhdm+B|p82k9C#Gr?j#X2}uC9T&1 z|B`odwC)ODcaF+sTqNxioQ1s=6|mQmQ)k_v!sl_4T3?xlluD|~L|42WhD^bHIhg@P zYkT)hdR;%%!i^YEb4Gs?x9k$U_O?`&!e7<3UNTED4PBF~Y^^tkxfV4Zuqt}HJZNf< zExMi$-jZhKFDG%*DDW7&VkJAqm>k;s&FfmrRHkg&t8q4ZAy{?(Qx3bzzJ#|tDg%_0 zYgk+2gqy|uGJ3I%q92>+O2f6vu?T#FP|b1d3>}PSHF!Rty(PUAS2~rMCYnps$0~%{ zSG77zUzdcd!ppfoCa65ZVSHO>j-$j#H93BX<+53!LT%BMS@@o>CxzRBQlT^}132|| zo1##7zl%&4&5PVk4x{JF*2$+(jIUiF-6q$TYh;HH2>9owNsMk7JeR&{L}+0>tmeG? zy5})>y4y@nSX#teY;C_;Hewz-$rTwQB2gE?6nIvZ+Y=lrUgani4+iIHJ?`j{ihwX7 z&8%$!g5KLIUYGoNACStzCgNlQ(UUCwDOAJu(M$ugod=EM_d&0dze+!k*^(sP0Hf=| zatH*2fvK5)(fCk6$+k4rO}(gq^fAW1m($PsPIVi;R`z>S#6k8ws&3ZC8)}?f)Ad*B zy|r(HG;+C%LX<;gO$Cy7AgH48`qJ{3qmVGF{v(1wL$A59=*0D>WQvg@m%sH#cRIuG zZiTtkeiJp$z`gZcW%?sDVRF(esGoO3@w4}YQISf5v*oviT*vCh9g~%LcewLaD8o;aJ=%~5l$fMk{3^4+|5zJ zr))-xoW+@2NP>>CUpDUMe;^$`;iOyPrqqZ^3w^jTl0g=tZp2J7jXBLe%~7s8r#a5` zA~blFF<^z!wU#I<26|OdniTMnhcO3!o zw(q(!Ht&2R3C5YIjMI59r5dtr7{=TBB-#U{_y&c9;CA;qPo1yJRn*HV$*#;&VBw?p zYdK?&@5}1$jU`__&hPkf18^KvN>_@0wM+O7WEz95U>m+TX z1vT?yWqOB2Z!A|X}_CP=@Egs&9s7sDv>(mMn;$xMk)%43n6&9@(t_dL%#Mm zxXZ!$MV^hl5EzdQl~7!`ySL?D$SrCgs(bY@sP&UbUXy4|A&W=HwgfedZj>!5d-6-q z3-@fFwYG#$I-6v+pb-yxVI70S?lbnhp>X6<9G;)>Cb>xy!zsjS+&i5)#&2`LTAkQi zzvt+W5k&NL1D5du>2%fk*`s~k6Uvrv=>PVC->a(8dH|DeKOpPn53>yq2ZtY%Z%rfB zv-62HXLmGo6j>vvQCMsYlJW!Xu_8mIA3$a0s19tKC^tJj3wKoHftZ?HF8AiWo9$GV zPrpbYGvnYbqzMBDm->wie*IAYg}hzyX&-e64URl2GaM{?c!bPPxwDf_6~@qlF6G&e!{+1c$6EPE>Rm)#hQ{MUj>f{d42C^icLWT4s$@^4C#_2BSnGt!oAx}t z7qBQ3NxbalpWG7=Qz|J?wp76@d9brvuBJTWJtF%44ptngdAQhcczxq%W5x_r{atJz4Y+HC5)#1LM&gw@pKQ?o{ONhnKIvqr%_bV_OSik|I0V~rG)utDNAFHH!|AeuV?j4Mizdj2mv5I?Gn zEOLBaM~lp@5Qns>;IibV1~mWOQd{YGz3aC=_%`E-V)!@X2cUf54q$Ln;AHpY4!nBP zPJXu*ZjS8L*-h6XHrNoawTV$9VFWizqu+rPp+I5uQAV6SeP6oAt0MfoiJJQMNLBYK z62Bp=>~lAkXto27tnVLJ_JIUa+Y68J?}Zy6)6MFS8bz)#UOts%husu4zSM6c0-3%Y(=z-JLjyojV-;^;D z?E$t1i!Y2PTB{uLN#3i(qrBIsqR}|Lb8M>K(170yoO=!M84W)xO}=K4&k`dBGZP9g z$|}P9#yQyqAtC;-tOt3)7+N5+2%05*Mlq82Ybp{+9BNGkW~9^d#lu<0CE9shj2xP? z@!bT(d8B#O5hLtQ0-&gr(c#ZQ1~Zqn>$Q$@OfrGR%R1QsVDS=j!ZLNZ{?=5$BFA!JUY<3OvKpO zfzX!Ue8<$cTfV?z{%!W}@!n)If$T)_l0A70D_ypM@3AeHOf-@RmWXmezBienad*aJ7i>^~-t19y2l?4FdUSQ!82=}rXOa+#L-7vSi z9a+}XT}tX+-DUqGVsakst$K2(VS_b^^CQ}OSH1AeLsZ-f9##`Ni}p5U6R3&W4n7}H z)umzFrDpQh@L9kn6zlyf3JK z;r}R_fOv~;Lq^j-0!#P|fEt{g$NsayL$GOn%P@6wx74t7_i*^Ju8#Ems;yD&Sf$$JqhyM%Qg|t8P0P#Qm zs0)ajzb`JXHpa^KA}@_Y!fV=T8Vcgb*&r~c# z9%A;&1+OLUcf5b)vLFHxL;n}Ru?N2cUL*n_(hwt<7c{+xzoq>h&qSml27oST)@i?^ zU4(-WX^0Cv7qm&(Z)txo_aM>`eeVle1pIfje|q9-ihluKI}#Ez@UI_)gcMPD_S63X Dt!ZVx literal 0 HcmV?d00001 diff --git a/plugin/build.gradle.kts b/plugin/build.gradle.kts new file mode 100644 index 0000000..7f5539b --- /dev/null +++ b/plugin/build.gradle.kts @@ -0,0 +1,20 @@ +import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar + +plugins { + id("com.gradleup.shadow") +} + +dependencies { + implementation(project(":common")) + implementation(project(":discord")) { + exclude(group = "ch.qos.logback") + } + compileOnly("com.velocitypowered:velocity-api:3.5.0-SNAPSHOT") + annotationProcessor("com.velocitypowered:velocity-api:3.5.0-SNAPSHOT") +} + + +tasks.named("shadowJar") { + archiveBaseName.set("loauth") + archiveClassifier.set("") +} \ No newline at end of file diff --git a/plugin/src/main/java/dev/loki/loAuth/plugin/FoxAuth.java b/plugin/src/main/java/dev/loki/loAuth/plugin/FoxAuth.java new file mode 100644 index 0000000..544fc56 --- /dev/null +++ b/plugin/src/main/java/dev/loki/loAuth/plugin/FoxAuth.java @@ -0,0 +1,104 @@ +package dev.loki.loAuth.plugin; + +import dev.loki.loAuth.plugin.cfg.PluginCfg; +import dev.loki.loAuth.plugin.listener.LoginListener; +import dev.loki.loAuth.common.db.DatabaseManager; +import dev.loki.loAuth.discord.Bot; +import dev.loki.loAuth.discord.cfg.BotConfig; +import com.velocitypowered.api.event.Subscribe; +import com.velocitypowered.api.event.proxy.ProxyInitializeEvent; +import com.velocitypowered.api.event.proxy.ProxyShutdownEvent; +import com.velocitypowered.api.plugin.Plugin; +import com.velocitypowered.api.plugin.annotation.DataDirectory; +import com.velocitypowered.api.proxy.ProxyServer; +import jakarta.inject.Inject; +import org.slf4j.Logger; + +import java.io.IOException; +import java.io.InputStream; +import java.nio.file.Files; +import java.nio.file.Path; + +@Plugin(id = "loauth", name = "loAuth", version = "0.0.1", + description = "Discord 2FA auth for Velocity", authors = {"loki"}) +public final class FoxAuth { + + private final ProxyServer server; + private final Logger log; + private final Path dataDir; + + private DatabaseManager db; + private Bot discordBot; + + @Inject + public FoxAuth(final ProxyServer server, final Logger log, @DataDirectory final Path dataDir) { + this.server = server; + this.log = log; + this.dataDir = dataDir; + } + + @Subscribe + public void onInit(final ProxyInitializeEvent event) { + PluginCfg cfg; + try { + cfg = new PluginCfg(getOrCreateConfig("config.yml")); + } catch (IOException e) { + log.error("Failed to load config: {}", e.getMessage()); + return; + } + + db = new DatabaseManager(cfg, "loAuthPlugin", 5); + server.getEventManager().register(this, new LoginListener(server, db, cfg, log)); + + if ("embedded".equals(cfg.getMode())) { + startEmbeddedBot(cfg); + } else { + log.info("Mode: standalone — external Discord bot required."); + } + + log.info("loAuth initialized."); + } + + private void startEmbeddedBot(final PluginCfg cfg) { + String token = cfg.getToken(); + if (token.isEmpty()) { + log.warn("Mode is 'embedded' but token is empty! Discord bot not started."); + return; + } + + try { + discordBot = new Bot(new BotConfig() { + @Override public String getDbType() { return cfg.getDbType(); } + @Override public String getToken() { return token; } + @Override public String getDbHost() { return cfg.getDbHost(); } + @Override public int getDbPort() { return cfg.getDbPort(); } + @Override public String getDbName() { return cfg.getDbName(); } + @Override public String getDbUser() { return cfg.getDbUser(); } + @Override public String getDbPassword() { return cfg.getDbPassword(); } + @Override public int getAuthTimeoutSeconds() { return cfg.getAuthTimeoutSeconds(); } + @Override public int getVerificationCodeLength() { return cfg.getVerificationCodeLength(); } + }); + log.info("Discord bot started in embedded mode."); + } catch (Exception e) { + log.error("Failed to start embedded Discord bot: {}", e.getMessage()); + } + } + + @Subscribe + public void onShutdown(final ProxyShutdownEvent event) { + if (discordBot != null) discordBot.shutdown(); + if (db != null) db.close(); + } + + private Path getOrCreateConfig(final String fileName) throws IOException { + Files.createDirectories(dataDir); + Path target = dataDir.resolve(fileName); + if (Files.notExists(target)) { + try (InputStream in = getClass().getResourceAsStream("/" + fileName)) { + if (in == null) throw new IOException("Resource not found: " + fileName); + Files.copy(in, target); + } + } + return target; + } +} diff --git a/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/MessageConfig.java b/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/MessageConfig.java new file mode 100644 index 0000000..165e5e5 --- /dev/null +++ b/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/MessageConfig.java @@ -0,0 +1,120 @@ +package dev.loki.loAuth.plugin.cfg; + +import net.kyori.adventure.text.Component; +import net.kyori.adventure.text.TextComponent; +import net.kyori.adventure.text.event.ClickEvent; +import net.kyori.adventure.text.event.HoverEvent; +import net.kyori.adventure.text.format.TextColor; + +import java.util.ArrayList; +import java.util.List; +import java.util.Map; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + +public final class MessageConfig { + + private static final Pattern HEX_PATTERN = Pattern.compile("&#([0-9A-Fa-f]{6})"); + + private final Map raw; + + @SuppressWarnings("unchecked") + public MessageConfig(final Map raw) { + this.raw = raw; + } + + public Component header() { return text("first_login.header"); } + public Component returningHeader() { return text("returning_login.header"); } + public Component returningBody() { return text("returning_login.body"); } + public Component returningTimeout() { return text("returning_login.timeout"); } + public Component expiredHeader() { return text("expired.header"); } + public Component expiredBody() { return text("expired.body"); } + public Component success() { return text("success"); } + + public Component code(final String code) { + return parse("first_login.code", Map.of("code", code)) + .clickEvent(ClickEvent.copyToClipboard(code)) + .hoverEvent(HoverEvent.showText(text("first_login.code_hover"))); + } + + public Component discordLink(final String link) { + String fullLink = link.startsWith("http") ? link : "https://" + link; + return parse("first_login.discord", Map.of("link", link)) + .clickEvent(ClickEvent.openUrl(fullLink)) + .hoverEvent(HoverEvent.showText(text("first_login.discord_hover"))); + } + + public Component expires(final int seconds) { + return text("first_login.expires", Map.of("time", String.valueOf(seconds))); + } + + public Component react(final int seconds) { + return text("returning_login.react", Map.of("time", String.valueOf(seconds))); + } + + // ─── Parser ─────────────────────────────────────────────────────────────── + + private Component text(final String path) { + return text(path, Map.of()); + } + + private Component text(final String path, final Map placeholders) { + String rawStr = resolveRaw(path); + if (rawStr == null) return Component.text('[' + path + ']'); + return parse(rawStr, placeholders); + } + + private Component parse(final String rawStr, final Map placeholders) { + String str = applyPlaceholders(rawStr, placeholders); + + List hexes = new ArrayList<>(); + Matcher m = HEX_PATTERN.matcher(str); + while (m.find()) { + hexes.add(new int[]{m.start(), m.end(), Integer.parseInt(m.group(1), 16)}); + } + + TextComponent.Builder builder = Component.text(); + int last = 0; + + for (int i = 0; i < hexes.size(); i++) { + int[] h = hexes.get(i); + if (last < h[0]) { + builder.append(Component.text(str.substring(last, h[0]))); + } + TextColor color = TextColor.color(h[2]); + int nextStart = (i + 1 < hexes.size()) ? hexes.get(i + 1)[0] : str.length(); + builder.append(Component.text(str.substring(h[1], nextStart), color)); + last = nextStart; + } + + if (last < str.length()) { + builder.append(Component.text(str.substring(last))); + } + + return builder.build(); + } + + @SuppressWarnings("unchecked") + private String resolveRaw(final String path) { + String[] parts = path.split("\\."); + Map current = raw; + for (int i = 0; i < parts.length - 1; i++) { + Object next = current.get(parts[i]); + if (next instanceof Map) { + current = (Map) next; + } else { + return null; + } + } + Object val = current.get(parts[parts.length - 1]); + return val instanceof String ? (String) val : null; + } + + private static String applyPlaceholders(final String str, final Map placeholders) { + String result = str; + for (Map.Entry entry : placeholders.entrySet()) { + result = result.replace("{" + entry.getKey() + "}", entry.getValue()); + } + return result; + } +} diff --git a/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/PluginCfg.java b/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/PluginCfg.java new file mode 100644 index 0000000..10711e0 --- /dev/null +++ b/plugin/src/main/java/dev/loki/loAuth/plugin/cfg/PluginCfg.java @@ -0,0 +1,40 @@ +package dev.loki.loAuth.plugin.cfg; + +import dev.loki.loAuth.common.cfg.DbConfig; +import dev.loki.loAuth.common.cfg.YamlConfig; + +import java.io.IOException; +import java.nio.file.Path; +import java.util.Map; + +public final class PluginCfg implements DbConfig { + + private final YamlConfig cfg; + + public PluginCfg(final Path configPath) throws IOException { + cfg = new YamlConfig(configPath); + } + + public String getMode() { return cfg.getRequired("mode", String.class); } + public String getToken() { return cfg.get("token", ""); } + public String getDiscordLink() { return cfg.get("discord_link", "discord.gg/ЗАМЕНИ_НА_СВОЙ"); } + + @Override public String getDbType() { return cfg.getRequired("db_type", String.class); } + @Override public String getDbHost() { return cfg.getRequired("db_host", String.class); } + @Override public int getDbPort() { return cfg.getRequired("db_port", Integer.class); } + @Override public String getDbName() { return cfg.getRequired("db_name", String.class); } + @Override public String getDbUser() { return cfg.getRequired("db_user", String.class); } + @Override public String getDbPassword() { return cfg.getRequired("db_password", String.class); } + @Override public int getAuthTimeoutSeconds() { return cfg.getRequired("auth_timeout_seconds", Integer.class); } + @Override public int getVerificationCodeLength(){ return cfg.getRequired("verification_code_length",Integer.class); } + + public MessageConfig getMessages() { + Object msgs = cfg.get("messages", null); + if (msgs instanceof Map) { + @SuppressWarnings("unchecked") + Map map = (Map) msgs; + return new MessageConfig(map); + } + return new MessageConfig(Map.of()); + } +} diff --git a/plugin/src/main/java/dev/loki/loAuth/plugin/listener/LoginListener.java b/plugin/src/main/java/dev/loki/loAuth/plugin/listener/LoginListener.java new file mode 100644 index 0000000..ef54472 --- /dev/null +++ b/plugin/src/main/java/dev/loki/loAuth/plugin/listener/LoginListener.java @@ -0,0 +1,134 @@ +package dev.loki.loAuth.plugin.listener; + +import dev.loki.loAuth.plugin.cfg.MessageConfig; +import dev.loki.loAuth.plugin.cfg.PluginCfg; +import dev.loki.loAuth.common.db.DatabaseManager; +import dev.loki.loAuth.common.model.User; +import com.velocitypowered.api.event.Subscribe; +import com.velocitypowered.api.event.connection.LoginEvent; +import com.velocitypowered.api.proxy.ProxyServer; +import net.kyori.adventure.text.Component; +import net.kyori.adventure.text.format.NamedTextColor; +import org.slf4j.Logger; + +import java.util.Map; +import java.util.Optional; +import java.util.concurrent.*; + +public final class LoginListener { + + private final ProxyServer server; + private final DatabaseManager db; + private final PluginCfg cfg; + private final Logger log; + private final MessageConfig msg; + + private final Map> pendingKicks = new ConcurrentHashMap<>(); + private final Map pendingTokens = new ConcurrentHashMap<>(); + + private final ScheduledExecutorService scheduler = Executors.newScheduledThreadPool(2, r -> { + Thread t = new Thread(r, "foxauth-scheduler"); + t.setDaemon(true); + return t; + }); + + public LoginListener(final ProxyServer server, final DatabaseManager db, + final PluginCfg cfg, final Logger log) { + this.server = server; + this.db = db; + this.cfg = cfg; + this.log = log; + this.msg = cfg.getMessages(); + } + + @Subscribe + public void onLogin(final LoginEvent event) { + String nick = event.getPlayer().getUsername(); + + if (!db.isRegistered(nick)) { + handleFirstLogin(event, nick); + } else { + handleReturningLogin(event, nick); + } + } + + private void handleFirstLogin(final LoginEvent event, final String nick) { + String code = db.createVerificationCode(nick); + int ttl = cfg.getAuthTimeoutSeconds(); + String discordLink = cfg.getDiscordLink(); + + event.getPlayer().sendMessage(Component.text() + .append(msg.header()).appendNewline() + .append(msg.code(code)).appendNewline() + .append(msg.discordLink(discordLink)).appendNewline() + .append(msg.expires(ttl)) + .build() + ); + + log.info("First login for {}, verification code issued.", nick); + } + + private void handleReturningLogin(final LoginEvent event, final String nick) { + Optional discordId = db.findByMinecraftNick(nick).map(User::discordId); + if (discordId.isEmpty()) { + event.getPlayer().sendMessage(Component.text("Ошибка авторизации. Обратись к администратору.", NamedTextColor.RED)); + return; + } + + String token = db.createLoginToken(nick, discordId.get()); + pendingTokens.put(nick, token); + pollApproval(nick, token); + + log.info("Returning login for {}, awaiting Discord approval.", nick); + } + + private void pollApproval(final String nick, final String token) { + int ttl = cfg.getAuthTimeoutSeconds(); + + Component awaitMessage = Component.text() + .append(msg.returningHeader()).appendNewline() + .append(msg.returningBody()).appendNewline() + .append(msg.react(ttl)).appendNewline() + .append(msg.returningTimeout()) + .build(); + + ScheduledFuture[] pollRef = new ScheduledFuture[1]; + pollRef[0] = scheduler.scheduleAtFixedRate(() -> { + try { + if (db.isTokenConsumed(token)) { + pollRef[0].cancel(false); + cancelKick(nick); + pendingTokens.remove(nick); + server.getPlayer(nick).ifPresent(p -> + p.sendMessage(msg.success()) + ); + log.info("Login approved for {}.", nick); + } + } catch (Exception e) { + log.error("Poll error for {}: {}", nick, e.getMessage()); + } + }, 2, 2, TimeUnit.SECONDS); + + ScheduledFuture timeoutFuture = scheduler.schedule(() -> { + pollRef[0].cancel(false); + pendingTokens.remove(nick); + db.deleteLoginToken(token); + server.getPlayer(nick).ifPresent(p -> + p.sendMessage(Component.text() + .append(msg.expiredHeader()).appendNewline() + .append(msg.expiredBody()) + .build()) + ); + log.info("Login timeout for {}.", nick); + }, ttl, TimeUnit.SECONDS); + + pendingKicks.put(nick, timeoutFuture); + + server.getPlayer(nick).ifPresent(p -> p.sendMessage(awaitMessage)); + } + + private void cancelKick(final String nick) { + ScheduledFuture f = pendingKicks.remove(nick); + if (f != null) f.cancel(false); + } +} diff --git a/plugin/src/main/resources/config.yml b/plugin/src/main/resources/config.yml new file mode 100644 index 0000000..c9e8f45 --- /dev/null +++ b/plugin/src/main/resources/config.yml @@ -0,0 +1,32 @@ +mode: "standalone" # standalone | embedded +token: "" + +db_type: "postgresql" # postgresql | sqlite +db_host: "localhost" +db_port: 5432 +db_name: "mydb" +db_user: "postgres" +db_password: "secret" + +auth_timeout_seconds: 120 +verification_code_length: 6 + +discord_link: "discord.gg/ЗАМЕНИ_НА_СВОЙ" + +messages: + first_login: + header: "&#FF4444Ты не зарегистрирован!" + code: "&#FFAA00Код: 7FFFF{code}" + code_hover: "Нажми чтобы скопировать код" + discord: "&#AAAAAADiscord: &#FFFFFF{link}" + discord_hover: "Открыть Discord" + expires: "򇨣Код действителен {time} сек." + returning_login: + header: "&#FFAA00Подтверди вход в Discord!" + body: "&#AAAAAABот отправил тебе личное сообщение в Discord." + react: "&#AAAAAAПоставь 9F287✅ &#AAAAAAчтобы войти." + timeout: "򇨣Таймаут: {time} сек." + expired: + header: "&#FF4444Время ожидания истекло." + body: "&#AAAAAAЗайди снова и подтверди вход в Discord." + success: "7FF55Авторизация успешна!" diff --git a/settings.gradle.kts b/settings.gradle.kts new file mode 100644 index 0000000..19930ab --- /dev/null +++ b/settings.gradle.kts @@ -0,0 +1,3 @@ +rootProject.name = "loAuth" + +include("common", "discord", "plugin")