From 90b99f8253c1124de2ca6f60cf12d6b94ecad153 Mon Sep 17 00:00:00 2001 From: Steven Date: Thu, 5 Nov 2026 22:04:22 +0800 Subject: [PATCH] =?UTF-8?q?feat(integrations):=20=E5=BE=AE=E4=BF=A1?= =?UTF-8?q?=E9=87=8C=E5=8F=91=E4=B8=80=E5=8F=A5=E8=AF=9D=EF=BC=8C=E5=8F=98?= =?UTF-8?q?=E6=88=90=E4=B8=80=E6=9D=A1=E4=BB=BB=E5=8A=A1=E6=88=96=E7=9F=A5?= =?UTF-8?q?=E8=AF=86?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 一条通道一张令牌，机器人把消息 POST 到 /integrations/clawbot/{token}， 正文按前缀落到任务或知识草稿：没有前缀就是任务，「知识：」「笔记：」记成知识， 「帮助」只回用法。首行当标题、其余当正文，`#标签` 摘出来挂到事项上。 同一个 msg_id 只处理一次——微信会重推，重推不能变成两条任务。 为什么不塞进 system_setting 的 JSON：一个工作区可能挂多个通道，还得能单独停用。 令牌库里只存 sha256，只在创建/重新生成时显示一次；收消息时还不知道是哪个工作区， 所以 bot_channel 的 RLS 额外放行 token_hash = current_setting('app.bot_token_hash')， 读到通道再 bind_tenant 进上下文，按通道创建者记账。 - 后端：models_integrations.py（bot_channel / bot_message）、迁移 0012（RLS）、 api/integrations.py（收消息 + 管理接口）、错误码 9002/9003 - Web：/w/:wsId/integrations「接入」页——建通道、复制回调地址与令牌、最近消息、 停用/换令牌/删除，只有 owner/admin 能改 - 测试：test_clawbot.py 10 例；web/e2e/integrations.mjs 7 项（冒充 clawbot 真推一条） 验证：pytest 150 passed，ruff check/format 全绿，tsc 0，vite build 通过，e2e 7 项全绿。 --- 2.Design/API.md | 75 +++ 2.Design/ROADMAP-M0-M1.md | 57 ++ 2.Design/screens/web-integrations.png | Bin 0 -> 77980 bytes backend/alembic/versions/0012_bot_channel.py | 108 ++++ backend/app/api/integrations.py | 562 +++++++++++++++++++ backend/app/errors.py | 6 + backend/app/main.py | 13 +- backend/app/models_integrations.py | 89 +++ backend/tests/conftest.py | 4 +- backend/tests/test_clawbot.py | 199 +++++++ web/e2e/integrations.mjs | 134 +++++ web/src/App.tsx | 3 + web/src/components/AppShell.tsx | 5 +- web/src/components/icons.tsx | 8 + web/src/lib/types.ts | 24 +- web/src/pages/Integrations.tsx | 323 +++++++++++ 16 files changed, 1606 insertions(+), 4 deletions(-) create mode 100644 2.Design/screens/web-integrations.png create mode 100644 backend/alembic/versions/0012_bot_channel.py create mode 100644 backend/app/api/integrations.py create mode 100644 backend/app/models_integrations.py create mode 100644 backend/tests/test_clawbot.py create mode 100644 web/e2e/integrations.mjs create mode 100644 web/src/pages/Integrations.tsx diff --git a/2.Design/API.md b/2.Design/API.md index 03f8805..c3a07db 100644 --- a/2.Design/API.md +++ b/2.Design/API.md @@ -697,6 +697,81 @@ Query： --- +## 6.5 外部接入（微信 clawbot） + +微信里那个机器人把消息 POST 到本服务，消息就变成任务或知识草稿。 +**这一组接口不带登录态**：机器人不会登我们的账号，它只照着配置好的地址发。 + +### 6.5.1 建通道（工作区 admin 以上） + +| 方法 | 路径 | 说明 | +|---|---|---| +| GET | `/workspaces/{ws}/integrations` | 列出这个工作区的通道 | +| POST | `/workspaces/{ws}/integrations` | `{"name":"微信"}`，**响应里带一次性令牌** | +| PATCH | `/workspaces/{ws}/integrations/{id}` | `{"name"?}`、`{"status":"active"｜"disabled"}` | +| POST | `/workspaces/{ws}/integrations/{id}/rotate` | 换令牌，旧地址立刻失效 | +| DELETE | `/workspaces/{ws}/integrations/{id}` | 删通道（历史消息级联删掉） | +| GET | `/workspaces/{ws}/integrations/{id}/messages?limit=20` | 最近的收信记录 | + +创建响应： + +```json +{ + "code": 0, "message": "ok", + "data": { + "channel": { "id": "…", "kind": "wechat_clawbot", "name": "微信", "status": "active", + "last_seen_at": null, "created_at": "2026-11-05T14:02:11Z" }, + "token": "lS7…(43 字符)", + "webhook_url": "https://example.com/api/v1/integrations/clawbot/lS7…" + } +} +``` + +> 令牌只在这里出现一次。库里存的是 `sha256(令牌)`，页面刷新之后连管理员也看不到； +> 丢了就 `rotate` 重新生成。 + +### 6.5.2 收消息（clawbot → 本服务） + +| 方法 | 路径 | 说明 | +|---|---|---| +| GET | `/integrations/clawbot/{token}?echostr=xxx` | 地址校验：有 `echostr` 就原样回纯文本 | +| POST | `/integrations/clawbot/{token}` | 收一条消息，回 `{"reply": "...", "action": "...", "duplicate": false}` | + +请求体**宽松解析**（不同机器人的壳子不一样），按顺序找第一个非空字符串： + +- 正文：`text` / `content` / `msg` / `message` / `query` / `body` / `data`（嵌套对象也会往里找 `text`、`content`、`body`、`message`） +- 消息 id：`msg_id` / `message_id` / `msgid` / `id` / `uuid` / `event_id` +- 发送者：`from` / `sender` / `from_user` / `user` / `uid` / `sender_id` + +正文的写法： + +| 开头 | 结果 | +|---|---| +| 直接说 | 任务（`status=inbox`） | +| `任务：` / `待办：` / `todo:` | 任务 | +| `知识：` / `笔记：` / `note:` / `kb:` | 知识草稿（`doc_type=note`、`status_hint=draft`） | +| `?` / `帮助` / `help` / `用法` | 只回一段用法说明，不建事项 | + +首行是标题（截到 180 字），其余行是正文；标题与正文里的 `#标签` 会被摘出来挂到事项上 +（纯数字的 `#123` 不算标签，避免把编号当成标签）。 + +**幂等**：带 `msg_id` 的请求重复到达只处理一次，第二次直接回上次的 `reply` 且 `duplicate: true` +——微信会重推，重推不能变成两条任务。 + +### 6.5.3 错误码 + +| code | HTTP | 场景 | +|---|---|---| +| 9002 | 404 | 令牌不存在或已被换掉；对外一律"通道不存在"，不区分工作区 | +| 9003 | 403 | 通道被停用（`status=disabled`） | + +### 6.5.4 租户隔离 + +`bot_channel` / `bot_message` 都带 `workspace_id NOT NULL` + RLS。收消息时还不知道它属于哪个 +工作区，所以 `bot_channel` 的策略额外允许 `token_hash = current_setting('app.bot_token_hash')`： +请求先把 `app.bot_token_hash` 设成本次令牌的哈希，策略只放行命中那一行，其余行照旧看不见。 +读到通道之后再 `bind_tenant()` 进这个工作区的上下文，任务是按**通道创建者**记账的。 + ## 7. 安卓发布与升级 `/app` 安装包不进版本库：`backend/static/apk/` 由 `publish_apk.py` 写入，里面有 APK 与一份 diff --git a/2.Design/ROADMAP-M0-M1.md b/2.Design/ROADMAP-M0-M1.md index 66d5f4d..76a327a 100644 --- a/2.Design/ROADMAP-M0-M1.md +++ b/2.Design/ROADMAP-M0-M1.md @@ -739,3 +739,60 @@ - 新增 `web/e2e/session-refresh.mjs`（6 项）：access 换成假串但 refresh 是真的 → 不被踢、首页正常、 拿到新令牌、新令牌能调接口；access 与 refresh 都假 → 才回登录页；控制台零异常。 - 安卓 `assembleDebug` 通过（JDK 17 + Gradle 8.9）。 + +## 13. 微信接入（clawbot，2026-11-05） + +### 13.1 要解决的问题 + +记事的动作发生在手机上，而任务和知识都在浏览器里。人正在外面、手上只有微信的时候， +"回去再记"通常等于"再也想不起来"。所以要有一条从微信直接落到工作区里的路。 + +### 13.2 决定 + +1. **一条通道一张令牌，令牌在 URL 里**。机器人不会登我们的账号；它只会照着配置好的地址 + POST。令牌是 32 字节随机串，库里只存 `sha256`，页面上"创建/重新生成"时显示一次。 +2. **一个工作区可以有多个通道**，各自能单独停用。塞进 `system_setting` 的 JSON 里就做不到 + "停这个、留那个"。 +3. **收消息用宽松解析**。clawbot 的消息壳子没有公开的固定 schema，与其猜错就 422， + 不如按常见字段名依次摸一遍，摸不到正文就记一条 `ignored` 留痕。 +4. **同一 `msg_id` 只处理一次**。微信会重推，重推变成第二条任务是最难解释的脏数据。 +5. **每条消息都留痕**（`bot_message`，含原始 JSON、处理结果、 reply）。 + 出问题时能直接回答"那条任务到底进没进"。 + +### 13.3 后端 + +| 位置 | 内容 | +|---|---| +| `backend/app/models_integrations.py` | `BotChannel`（令牌哈希、状态、最后收信时间）、`BotMessage`（文本、动作、item_id、reply、原始 JSON） | +| `backend/alembic/versions/0012_bot_channel.py` | 建两张表 + RLS；`bot_channel` 策略额外放行 `token_hash = current_setting('app.bot_token_hash')` | +| `backend/app/api/integrations.py` | 收消息 `GET/POST /integrations/clawbot/{token}`；管理接口 `/workspaces/{ws}/integrations` | +| `backend/app/errors.py` | `9002` 令牌无效、`9003` 通道停用 | + +正文解析：首行是标题（180 字封顶），其余是正文；`#标签` 摘出来挂事项上（纯数字不算）； +前缀 `知识：`/`笔记：` → 知识草稿，`任务：`/`todo:` → 任务，没有前缀就是任务。 + +### 13.4 Web + +新增 `/w/:wsId/integrations`「接入」页（左侧栏最后一项）： + +- 「怎么用」三步说明； +- 「新建通道」→ 一次性展示**回调地址 + 令牌**，各带复制按钮（clawbot 后台要粘的就是这里）； +- 每条通道：状态、最后收信时间、`最近消息`（最近 5 条，带"建了任务/建了知识"标签）、 + 停用/启用、重新生成令牌、删除； +- 只有 owner/admin 看得到写操作。 + +![接入页](screens/web-integrations.png) + +### 13.5 验证 + +- `backend/tests/test_clawbot.py` 10 例：纯文本成任务、`知识：`前缀成草稿并带标签、 + `帮助`只回复不建事项、错令牌 404/9002、停用通道 403/9003、同 `msg_id` 幂等、 + GET `echostr` 原样回、令牌只属于一个工作区、换令牌后旧地址失效、普通成员不能建通道。 +- `web/e2e/integrations.mjs` 7 项（真跑）：页面建通道 → 取回调地址 → 冒充 clawbot POST → + 任务出现在任务列表 → 重复推送不建第二条 → 「最近消息」看得到 → 控制台零报错。 + +### 13.6 还没做 + +- 只做了"进"（收消息建事项），没做"出"（改完任务回一条微信通知）。 +- 消息不认人：机器人只知道"这是这个工作区的消息"，按通道创建者记账；要认人得先做微信身份绑定。 +- 语音、图片、文件只留痕不处理。 diff --git a/2.Design/screens/web-integrations.png b/2.Design/screens/web-integrations.png new file mode 100644 index 0000000000000000000000000000000000000000..4915267d60f983d0316c65e3d5f1d4a6d84e0119 GIT binary patch literal 77980 zcmd42_dlE8|39u(r4&^~?UrhbqW0daYVS?0su_EPphInH#*V#1t=QDwt40ue?@b7i zFMYn=x7+7W_~xhFuIpTnan56%$GM*nH5GY6d@6h_EG$BW4>B59SU4G2SlEB??%zI9 zT35heVLic8kdf5#O5L4%+nEG*0|tZ)Jv-nc^R)H`LWVZ9fO@h?(wBfNJj3l<)I^qovtST6=hoc{d@ z_$~kE-z%&(x_h|)9^v^sp!xUb#qR&F2k9#O=;<{Lh37!7#0^_p(Sg>(CiutNytXnt zU$nOTOSBtaX-75xtit)Hj8Wu>CBA7+8tw7LQ50rjD@~aFA;j^6i`C`ROQ}njy66m3 zFn2@$_ex|6`7Y*nTJ8klu)UMMA{$NRj4KY>8B9!kx4>9fYIHv`zFFMh=7ar#a&an> zt+~jJ)IMOq(Sk57pUe5vFGKWd=uvKFfPq@G+!EU zF@AGe3O6(~X+gFcHeXxjZ`jdad_ttMGh|E*R{<}^KIuOE$4vKw4XZ%&2Vp~$Tf3wq zOMy@%dzs&9z{j^HCMy7FDZm~fw4d;~2H*MMO?O32VHxp$Y=26`)$9eI4G>IM3T5{&$4(SZuqtK{(VP}Gj6%Q_fzw-Ym4bk$1M$>``l16amxtB&~l$X(2!S~ z%fb(120aLo1OFTOiExqgx-xB|q06wDPbbzjC|dFd|414=%EcET+HbkuXUmX#C&Q z*W!N^4h!XQ-;u>RVfwhYn2Jk(qs3a{wK5?%jTql$5#x$nWED7d5Ig)@`As@I-re2{ zmIQ2cZ4+>dMZvv&W_M|D3ik=UXij_)Hs?7h%UKSB-L>Edv5lyCqS zo{U+(wY8lxq_Y>bTHm$ar~KPvWvt!G*?G2BgF>9=M^(Edd07o6Qu{`>IuEB3?_Zsk z4~v8B2e7BhG`jzh|5Ntv^j`POgf*b4>EnAlxi~&P1|8Av9#l11!`Cw4kh73 ze;51Tz)z2_nN9q^3~i)T)C`ie+P?Ri!qz;su>vIVl=l8$POs}?i{&eL(XQU{vc3^D ziVYFJ-r68G?2xzoFScCQGq4-gUVoLkdPPs7+qGN;^h-BJD-{RTh&Q+^Z&a~22mST> z^fzaZ6c#bfm*4-hH6as%(kq^>9p)#DqzLGZzSeZlvctPuC5a2X{s8RStUkv->UvJc z9a|^Ik`o5**~LKprGdiiAP+hy2o61yRl~<0(uEo*|NCZ&07MaAf0i|W<1e-nvWLL` ztaNp`8O?AnBgaK-YkmtL-h(S@O$Tgh+HuVnyIDDqbJU6|5*0#rKdQl<(lTo$F1|S* z=Z4TIB-O2*osa%=hc?4a>_|gE+4h^30>iSWTMwU5S)V)fP5Jyia`3fydEV(#?e*Z}ZVnGpt=dtu6+Gy|uK$QllRdX|o0$IeTCT3iA!6#H zPn?$RdKhl~AfVsLex+6mn$fP@I@6L@$_v6=VQP?TL+p0r`=FXw74nSQzZ!SHAK;IZA4%6Q4qVQ;M8r~btQF5( zYOOiB8q2YeQ1zggFZP7hrb806%sIv?l+*$cv|%S+-bvc3zZLKT%t) zt$hLx7olO*D&D%uo3Jy=l!{qN(XpR$)5BVu8b&1ax=D*oiCL|RpWB6aSG(o(52 z&ATUio!aQ8+Fr(k@CI4`i*{CjLyy~peQQLC^$ZqH_L$N?4w>GcMpK(8RBnu(fuQQk z&Ra187b|OVGxWW)zjdzHGk@$v9C%)D>>c<=W9GdK!QxdTx)*@Sy8B0G$?s13%^j)6 znGU@|_3b9@`;a$Udk;OQ7TgxZDbR0s0r`6YU*O2n1O~jI8vj)7lb2WNwT;GSQ*?6x zXg;4`WAsci5G>8kQ95(%iL4@Up;L<^K05#wnDROwxAcoG6y}9QwCrS_R~PT!Y!h5& zdq`h-#CtfhJj+sFIe~FBPrc;3Sz)vI6nVZ!y?ebKmL{dQe}Q)3G~qWw{uFrWVM`2; zOuI224j3!@r*+aZ6gx|6FhC>M^`jd|aqZe7kP-r!L8HBE$i8i6x%iHSg5dMoAOzey z{}jiuH!z&~Jhco|YQSo}{37;Ss+}Sop(S+s&{Z)?xA#Ze(PSyjqp$^s4fWKNsH@3z9#e&F!`;N0q?bn@FS^s8HUoEUVUV@J_saU5HTs#kTF|gD!a`%A+%Q& zwnpLwek%zefc8SsH@uTdjJGfnB{@fJN7?!l;_sD5r?l^%%siI5c(nZx$1owP2No&mG*Hv7R6?-bZ@} zbXmdJcjoe(Mf=ZahI;O89TD2U#ydB{&w5{=*=Crd8gMu_meXncJ=~G8n>gf~v>Zpg zEko6@zpu||)H$FTbd_tKGtCuji*mjr(dnPZD%c!I4ndnykFt%G(+lw`9u9B5=ASl_MQ?EOR!Mu#bMJ zwfA#7lmTmPbKTojXBScF5W!j7wNds8#O{YdC4;N|-fXlO2wxg5tq2i!pZFDfb&-j8Hgm;kd2X{tF1 zHfi}58t_UvPGW?*Wz$rYhoR`sXO>^Wf%v>1HblQa4G&~-u3e{dPDcOsePR*iMsh}Fs6lrOJA(n&H$R=y^?d}nxO z;IWkzFDUTZaH8Oq)Q^C|sF1YV!r=jLbl;IOMsRe|)3|id;AEIKg8I^g!*1|MZtj3f zm1V4=U-Uki()S;@5Wl0JS5zP{s@qeWBfjD0qD^ye7`cBbwNxHO@3UDZyqaZr<9S&U zWL{lOfI*utPgw;H1y0!34v_d97njfF@AEXKOHSW5;C#{06ebJ^v z@}{m$Z$)deqOizlOlW$q0Xh*ElE*~e=#+B~)bP#o?hge;ChfK*+P}`usN&-bMAjOq zoKAnB@6}AQCX6H?p?0`EzAW%u4nleDCYmH=$q@O?)k+Yw;8w5r z9Qg`g?S3!Dr+8S?G?k~hVJ)y%bY}(ic3$h*`_nO#%}gmtp!0}%XL}vl!u9bt>-j-!#mP)Pf@px!YFaL{7$Xi z3_)5`4mELO!`#gtbR`d67;gd?a4hF1ZYk#W1)&}lqb9K4sucUP~l{89u<2~NmOQ;?9nY`f?A z`RidcICigm*LSq{cA4P~h3DtA?Ct28*Y0&k^tVpI;qSeEW0=*+j2JKz{p`2li-NV3 zctM-sb)T|@TN;<^K(r>D54QyBj^c@EqjE8Jo6tKx1tXTFM`tr9h8R~fOqA>!KNfa& z@--97oB~&4%j}dag9Yt1&$OcWqnz*fM1PDaOBMw#hNK^zcSsgpZA6V3g3^WD_mH^6 zX>RC8r70I5hHdRI(T>TQu)lknH-eelimDN_Um$v$us7ggYTJnOlb`v`K-dO7cx$Ko z)Yp2tWN3hj;MT%J6{GmXjJ?<~UN|3keS_=7j=%a%^t%kGADeMtU2jv(j`r~+%ME~N z9Sc(qQ*3<(x8zd#XMX)(FJSMX1HHHB;5z1Nk%Qw}bg!EY(DKVI`$)-r!GxdRZxiil zQmcG*?tfEpLyFn@Ib*N^KRr|6znuWJ(Ox%;eMJ63x_cf&K6Q+UulLi{!nc*8ZUu{2 zv+i?f31!$i97z6LB`cF?5Hjm7Cajg@m}E70XJ-x4SHjh2>eXWpcd} z-ZIMixfQ~Kxrl0{NC2{z0nN1?w|7iT##hS9i9^TG7-W^rbamz5;$0;nA;odv(b%R= zwTOvp{o;4rW3afPr({!QBt>2`HTZB$0c}_}*zL$+k_~&3C?aSD{r26){GO*0>8({@ zX*u08)Y3Zr0)fc(%9>`^e@wk*3U*tau7|k0G7Afw%=HfJWHsnj0Zv7v`d@@IWqBdQ zhfI?wia6dJf>I%JMS8}$GHmjK5iCx6fU-Abf5<;9e^ zk*|Z6mezFAy9E4yE{-L&j_l=K^QT}FAoH4lN0nYG+s_T3%@9Iwq}E9eA${(l==D=Wn!wvPUc zUPX8oo-OBBcifM98sj95gS!~{k7vd=R%IOdg_~;GU-yEtkgS4+a5~QCYh;dd8d{$5 z1xnS)HO+6@^!GEl$v}x@_3q-Ms2my8LL9x;f4wKHjSrMZ25Es8nzPnu0$AFUqq$|V zozJF6x zez>eR#Ij?1_q@t&!PESo`NVxZ<&6doKiitr(XR5h+gb37_UP*NqRBUX{}(^WZCn5q z;2Q9lEyXGPd686Tw~S?DxcJQ~-@~A6+)$LPFx-{zmI?fMdm-ABxvdu|~*!<6*$ z%ss=)W3h80=d%t>QQ5JIlLusLm-&aEk8 z0^-7zV)=?elg%Cje&&H_=5D?TdGAvdWLWoQY-yF(r;8V6H#CY)g}1?u+z1$))9pTr zOG(x#zUOLu;12rz*dgcfk*jS?|8tsVzWw5F?S!{}><2>3oA}RV5G4)!j-Lwd9r#R( z=$UwaiptJ%X9arm`!nM~{dvzM?6Ri#t3~rW zp-ojm-7d$0ljp_$3x`X{-n^9`qD+sdb|XtMzPi^S;wwk~$-Val`?JFMST{7~E2f6dFz1lfd6U8Yqvcg9C)9MDcdP||fjx?+Cixp~A5H&_>51FbxQDf<>v0S=AIqR_jchHy_CKl0WFH`-IWE7lJ%5+|*L`_;yUSf% z(UWI&uajc_wdj#{>(WnrqWo_JffNK`?BwJWlgh`Wj#v8n^RQB>erjEA4t(97YJe7VyWuym0 zQ7s7AekcI_`}}ZIRX&;D-LX=;jGw(YK>8;~#hLK%sfo%ttiZli?09r`IEqM1A@nAW zoS`GE|8EhT5n=t#lrhr&J%6Js%^-{X?32SEi3qPtRNrwbl6!uQ&>Q02h1yUGXJkhyDXdO##&%=`VxmzOgU9LJ8rEO-Cg$tR zi8Q?B732Fo*EsqS7HjT#I;>7Fwm;G0z+;~D+4{XhkZ%6SN+S2Y)8?S#?m^vpb#s=f zr|i5GGZtrBO*&2KfZW_yq`T$GsOgXckKx|bdTiWI;KJf$)auz}QRh!|`kEHQ0wo@- zR@-nf{7ZJjBP^`GBs=R|-K#D7qJXS@QwxesW;y6`TB-jT$Aa%stN6qRkWL4r_V@Lf zufxx0ECP+S*B*=0Clo_u&*bD}w2BQ1<<3~*S!Cs8#JdoQJKj{66s`**7?F8Lc00>8SD8)f0yvzRHWg4n9+2bE@kYH8zxG)UG?R`GrI9 z@)v-;^XWoxX8S^cU5Eetxf6PFMQXJd`?S71wsb;5aGf;wsi-{X5WDCf4e`2T3Pq(k z>eS-G?w}gSvCtl+%>2nmxw<>qt{{&mG4K#26y3gBS-dYr9d&67d84*d!SS#9Z?{=j zqAnYszoTfDB4H9(-Xef%@s?kRNI8Rl6Pl*@TnDY?5kG0JWuFVJL1!O!s;($i76^oK zgbQRlYbmR*9?7Y96;}-B0Y!92Sp{yL6e4E$0+0v~DK()3#52C@^<^vinA7+o+pe%J zOVb)(B~?VXSZ<;(zE5_4vIzcSLZLOAN189C(_OSLkVkwRv)7IaQ39JJF0*=oj2a4_aZ96@+Y4Trl@%-<~5%me0L81; zd?&|yp$hn<+k32!{Pf3%{gWJ%Wv&9%R<9}4l9>GGca!t|+;4=gFQukw2-ViJO7X8y z+sVDA2TWCeYdsXy0B=${1c7$bVnyH7&0XE#B;o)Yl#=xOCm|^giZzo>mGhAh-_j?) z!$Rp$yI)RcM|1!j&q~`pp4)t5zI4%`Z8bP8gm3GGslx5pe9ip9or1KejxzpIQhCrX zIyO;VBsHVQyV2?2)`aWO-s{eTT%U^*-Yj>5@`(-nuk{6A#BUreoV+eGqV`eOV-6=; z8n1W7)sFv$Mn=V})|I?1Yuc#BJ^!PAC5K^RBz9`k$Ta=y((AOsuRc@5c@mI ziu-*B_z4!4ZWo1(^*6&&&Yl9Z$=Es+O?i6pXN=anchS%rEjxs`%K>~_xKYbV#1L8O z7;UYh3*4QvJMjP891V|}KWHwuvvx1eK|vc?_x-sz61P6J%Z99koKUdexNJ9u^Vv=o zumo@^bkQ8|3`~E6_zAiy@7YciX^}6f@)qoGjm=omv|czOjo`~Dh|4$@)nKoPA?|zC)Pbdz#Dr5O8TxD`_oJU9K?hruSBpoW4;Y^Fg zrGmN|mdM?l2BD=Bv@ssvjERX=nEfBjxx;;#UE6?MSRo9^EAhAbN{prnTx z2#2s|2Od!I^vD%@jF~vhjt}O0<4(JnxPyGdd@BdmYW1Eof)mri7wkXM{VFNT`Nf|IlB6cZCEt`LCin@PQkR|s~!W^N;)2~0Dp;- zj6$_1)mpkm7aA)-DPPt^4rw8I-NLr4^9I)*##d3jrDp*6-bvRh(7TY%GG902-=cO^ z&;IO;Ja4u~e=trxLaaMBrQWkrl-e_Ny{tUE9R0ej^`+^Ti%d4%d>e&0cE?P%YFRc! zXj><|l$8lJh>i6}d&y$x*+IC1p(=&%3oYcY2hK3e&io{a^?@o%U-r2zJ6Sh(-g4M( zrJc+w%zw4%w^ja*}p^S_qRbDNCv#Kpqr-G(-Aikd;co{f2|29kWCB8IybG=zU8yNw)A zBZ$t$I0kV=e_i(dpoBCKE>abQ^-b;xnu9AnyI5J4`Z%NTioN9M5a+wWoHK`K2E3u( zJ1N6aFqaNPPUMsw>$XR2*(J<7@`AC8^ZFzDN~og@)(mdJkWj#Ep zR~Uv*5U>+d+BzhRwHkW`ffe)6bjgs$rw@z#8(z7`Ds(4r(!%*^SF2~+ zyYU(#OW)>&^%WRK7w&`PDTampaQggj57t#IbKbH`>NyLJ=RhL?3F}DD$mY8ew_B*o zjfH9YbD{1@?&C;x^>3-m=4MA6`9q91N&ElT3y5`m5#D3RyFQcL?I%R*uB@ep)Sj+4 z7CDx<-Y8l{P`=$%4g|V)7OB?scJG%R3CZU*6~11Hk`$ZoS6A4d8aXB$g<2^dXXhFQ zj!IO3WAVTb6}A$u&V}b^W_9?J(*_kevvOcH&}uA(bvkej!Tyg;+?~JEOFghyHb>D8OXjr$Gx`(4SE~0PEm`#(#-q5wY%dC(aoN zWN~Ek)>H`NGm_nPHwUdFgk7qR2}!4CCkzL1P_n_Y7>Cd~LHyO|-xEj3u9EyW=U9@dP5$&Ja%hMS9Mm~;{DVRkC z!uDx|@CU7TXWx!a3s81SV-W73xYy2a%NFaPXez{F2tQtT8Y73`A2=u?-+e+Lxc#{3 zYUfue90`pzNl$x{0goZYKZ&~N949B~brJbvvBw&>>%zPLTt*)_JQl9UMS{*{GNVgk*-HM714 zH>b(|w&HSdEsV_^<;+714r+ylg%%(htMwYUQAB_#itW*mg32I0f~P0JF5>)U_3CgqN% z+-342=nUhT18P=PSQ~=t_PO3Xtl-Y&mh&A0rtqcrH~}7IsJB`kaA|(?)GeEt$r?V9 z_iT!z-(%CCf}M?tW@)pE;)IdBS+T$dob)&+Ww6c7^qqawiJie?Tp3|WAD4YQpwG7T z@OE=SMnW?B+u8Ewh~XY!wKqEdLmX3U9+~y9X>fS>r&+=ujNWtUtZ(DsPIZa8vh%=d z)#uJUu5}+a%U^?n1oUIBHrleIx4a<>`lpdQMpN^ ztsg)BA$x^-{Y^cVaJJ{m(Sye+awr~yHUJwmpGc&DwBn2rngsvo+iXHe^49_}3;rB@ zz3$nU0CU}bvd0b*)ie&Uc|sWFt@^ReAywDn%Rv9li`6#`FHy}3d3JKj$t#w&A~m*i zzD@Qg-C=IpDCZ`SRa0Q2L*d5;gNZT<#Aa^bjv?{{nJ(BR#=lVH!Z0x~xudVN5@0*Q z&cZDR~whK1gEfF`@iE>b72m1*{ zt9IBLLTJ-x&Az5M-D-4>Mm(`$vZVdd zF99yE)*U}_Dj34R&qf?mHs}Goo09{&ll(x(7<*1z&a_soY*xdj4|y+F~evD%0AGPIhjL>irv;vg}LpCV4$KyIz{6SRCJaHzbf zbRv;_(73d|e$cSn-Y~aordCqeSh}R?Csf^k(+5goab-=KVv)y}FRKca%sr0X{^yH3?q%1lQ58ZN8K`xluj>xQt zNrd3cwpbGayko=?$x^h@K;z@nuIhN8T~-Qf_O41cobXpZS)tO6)8Wqv6*l2=C%TXI zV%2i23DnI3VPnn!hvp~lO!PkL$B(?-Yp0#UuoX~pH7UlUmhbD)8ZfcceR69W?P$}_Y;#fOVmECVAO3Jp;g&z_Ll9G#O>yY1W_njX;5$bk2BgqtxJ4$N`z1~JgpW|RiptoZ!ieqgbyow^%cO_K{gn?X7 zyBXQp3D-`0-!pB+f6HY?Y+stA%HzdJX6m?>V;mH#@svQPP{Ux|*-!x*@n=IUMJQ-W z8Dv9<^4C!vu6pYzYVyJxGUU}&SA2`qAgMT`qokb9_KZhvJj1Jv$(Kz}tsr-jF{)L2 z?vy)bO^}tvkZq?;DlsMGjq+7jcZR;G*Qf0j*M3v~6DuI*XnI-(ht+m>_?W+;Q0!Vh zMlW$+OtS)%YEj0We_OV&hlYg_5D;J%e5~P6{8^_`0U?j#)9yF6T18sS72$(9PsitW z!vZ^bi@@Jo3Dh#Rp&DCY%?%u^7nZwL`ss|F3BL)RV_{io%E-uQX^k^R=~67yPzI^w zQ6K;48Pk~T$LC9&F(!k^I7OacZTOXU0!qd+oJA_``sO@7hg~xXetyi z4Js3PLnW6}kfQ4--tGFtV0;a%7sQ%$B_fvIi^qp+3U4d7e&YF&$1gfuv0JZ&9@t~1 zA+fGm1qD+(Lh9<#M@Q}@p1dEo{CtWLE7$7nae5@!Ez3Okci8x5lx)&7EsA)?%lu`FGBU}; z^?~6 zt(zXl2HI!J(wVQCgY0f6lD@X>z;QOF-q}VxOyZ)q_o~iBX)mC7RQ3)B7m%+AP92pC z#25I%y#B;W?=5y@roYLr%QAY|UZz>ln4$l{fpwrKuo}{+dBG?hWY+MID!O~g6Bt1X z5IIA0&dp&x`6;z`)p;?A6DJb<1zM65$qEes9x>EO3x~INC z$$JX|20MN@4m@7-+ZISSs6S#}GN^XGow{kl7A_=>K7a3Z%z?rQH zTViK_A|G|-8B{G~bL0s9J3d;}t>w93O&)nbgJ|w&wi$lLf4tTj-d%2O0QougV{&1& zFrk6iGVDQE5zK1?#uO)SZ2Z@L zZX(6*>Z3njkXg)f5h;6GoJQ;->FM9*O$E(+`9`@${Gb%(8yZ>2)rA}cdE5Vo7K~%c zOq%XGhoG~@ukB?96DllLzSh(yCrkil?9cxA=$>8uHARgaO?1`_rml*;+znN?EuALc zL#QI4p<-3td0%DEdac&{*9f#n<%iuYRP^)0@0JrQ!yfdPnt(Qoc9V99JIxdvfjI>zB0=UgeHTS3hk-VQ#gl3uVRv3%S@JrX?VR5p1M=cvnypvYE%%3ARQudkcV#Ro= zzH%2O*Z8l|pNw!DO^9J*K@|YXDa1yy;M4qaR1-iRswQZ()KmEiWDVL>QERMHW zu}LXENj!ZV=JwCGGHyTV{)S^*qB&C{uy6Fs#~^qII%#{Qt7J3Qu(}d{--Bzswq*yf zMsd4gxcy0ZS~V1$MipE6Uj)gb60@&b_O2{2ygMi)#hUmP^w zWwEZ^jNt-ZdSDEv8*UqV-v6MOSaGD8Nv~nn$QmM=9*W$t-(~|9WYQoJ@7*2Mmdl&e zClfp3hZ4nll&-#4l?EmLtW`M{drPrmHO6N!6#`qsLS4TA*l6Y5|fD z2`YEGA$~(W%J$DZ0$dn)?gjDeUy84;-=zLu+>iD34l&8{RKL9GKYL@~eqo$Ca*OuR z%O9;4Twj#dZSte;w&-4@jjMT71miGxYW9O`_P z)T>J$ABuRs^kKk)PnLHOoq7K~Wc_0woFF;}tuiVQdN3++C4AQ51a^BGa{GHSDMjgo z2aRORz1m~d^|ihlzDZ3bm6h!@(G3d?4Ua0bXey325>y+0ro6uu8|n8Jl0Khy;_B9D zcMxNUIQ@m0+n;fl&BtY^fl&gB#isj+0fU%UtH2$=KU5jki_}1Y#V0dfcNGXzbPe*2 zdRcBVkq*z+sBgbv!?yUMg~Z4gQ!*MNM_P@7MTx`)Jv}YGSH>*wSekFEnmY*t{)Pkx z7d#`QBxAx*Yu9PS;gL$>&_qX*$aZ$BM@KKS2znUs*ynbWcQ?aa%u=G{YaRLeg z0`_O=thIX8E?N^T@v=!2&P!5ef8uYC06cH|#M;F_nrE>uCVC(PrYdP=q{gC)$@0gl z6CtH9`+m1&EuY{}Sea;M8;~VA{sU>$at#rA z+rW*$HC~$ixf1-a(BaeuCkHnCI}8oh^^6v?JaoH4L1WXRdAyi?Dij2z$(6ubQZQ*c zrXn}n_igRmOxFGfxWO_atKeivc~xP?(3kTGJCbUm=oy8nkZVFX_L96w&G9yrWE~`g z&t9M|yOne&&mv2V^3&<}(SxMw=W(9~It_S>(gnODBU$h`jzi<&&_UdgeSnF8`_xXQGE>={^k6_sK-v*r2M#^5P7M2ds-taCo>{==TLvN z-%!7<@MfT9&I)JNFD^5P@2j@c5j`KXK^0}}#_AR}>a3BmmKl<)-)jBgpT2P<|2O{V zcUT4Vxx4cCRwd2`KEBl$=WKqiM4gsX=HWOc?|zp%eEczThR|4jG}q<*hdb;}z;Wis zwU7DzCUfm;JV};erJj-tG*-tg4)w zB?j?WR|1ZC%w^5gowc-n+>*iy;F91|?OU`g2m7n)!RRJ>7%1>L$jQ+z+rDPe_Mc3i z{?UF)NvY1v@-Yv#N?CRp>3ISMotVQvAgsa6SM1VE(lCgjNL7>s7dQ$lGi>wKjLq*z}K# zAK3#M32&I+&@O$T7n9%-8DKbXpeHeXv*MNY{t09jsZn1x$kYO}{%E)tJs_D*Q6}sX zJILs0dIycdTHLgLkfzO$EkejuY4eT1mj2QF z8_>$XsQBaFeWHxU84>e~uN!~U;iRGT`A9pVxiy=pv52Zs zZ?mmgrzE$vY+$_{2%( z^=6N2%=QbGzy62c>SMW;_WlQ7G2_PZ)7H;BqPT<;xD3@C{O(%nO)9{|&whi`o`2$E zM*fxj64OtavEnoZT_H-zK6;q40fF z^7DCpI`tMtvYa!#_3i{&WVutYc(68Se}rB^ zAJ03`SpJuVVjE4%tfThWnzB*I+(}yDKBLdAMZ`Fo%$aXC9MK&tD@n(grm+80qbQ{I z|GkB$o^b0mFcT$*f62^Bn$n)1^C9ltNUZ-KT)Wd%zzU#;2{MPRShpnDA9=lYo%{{v z#%>Z>8ZBRL4=C0LMy1SgPr7=aSA>)Wx0*ok6J{}6-q?96yVM)#EgQ7M9{FRHC*EOl zs!5QQBVXSbArD0A%W0&rhcw+qBXtCAf{%cu!meI*U`&rP^>Ln;3c{uD^xXkqdnGq- zY+l31)EkffGoJYA#Q43>$RxqP+dJRG${|dMs!?x{v4=$SdF8{hI@)Y-pqMxZoOCmO z!*0#b(YDxQs+{a9C^ve;$!2#~tGI@@JxC-}T`(%K6!Iym(|fJMtD#X;T;?v6MFn6N zIDH(a8kkMBvhitwf7X!N9*8ewPjTnDGS(j~zO=kt*C9@6^zQW>Ru8{4d1jw=^6_H_gU620Tn) zFUCRz>B=U^#r9aK@skGhNr}&sy=rbERz$q?)vtbko@PH0K@=)&s~uYba^g5V7iP#) zHXTsAE@SIfZ$!b{u!NdZWs`P-hj!M?9Kvu{G*AB+>0KU^kd^*(PwQ>h+)W4UM(1zQ z(_>|Vfe3Hm7VU?A9-l^IrsT=J>S6&MOa`qzbIv;b_jf*MQZdlKd&-ovAAyi*{II*C zgL9aAP!$=c&BNP6Ok z#x>Bgi&Jy&&*!WA{x;tll)D^#iYf52B-*2Xz{)u|s^>u2z|=aPCIv{67*ZajM@q5Q z6~-U&(EsClP?u&>J69u|%LuehN|AmEW`vD!2*zu40?Ms6R{IIs^*WQ1FMEHRvpMgl zXy*z!M*>8P0k_W7_vSWQwT)0+hiG;adbxgtEs(K^zA4=;r2Db?x!Q+5H2kLBDBaVN zsc2Cu-1rk3zG;?sH4*7$r6+e-7^;3L&M9eUlJ`!BV_-Cli+sS%ZnxK-sWrP>x$D$y zMogG0VKTa`(BJ4Uy}a26g=IRjwNn=l_1>v>Qqr_8^;@yLHRlnqszTOZC(_Y_Hi`%G zq}AP#vA;z&0I$f)N2l}p2XB}K zhMlB}P)dP1j-)rnS~QU8(3htdfD(^U7Oq{^qw1yIV9Pg}Y&%sqt{wO9P~K`cw=s)M z&ggg-r?=?Qvt0s9SH;JPwg46!SFqnnY8=z$JSs-u=U1m$C6Dm@jE4jx3!jqvOtp5{ zCHYLNW!cGS5<-~1v=)8mrF)$dN&Oxe>Y+P}=Bpi5gHsK+jXF#7zJnT+Sezcb*Qs1k z@ucT`6|BP4^3-~0d2&r=!tqoal3@|zzItml);RL>3{W=c#OP)_f6qJV&kR5UBh2Es zt&1k%^67*UByaH2WLhy?q7PonGT$?oQUIFVr%1dsh=H{I8t8vZ>vDc@=wg+u@e-}? zS{>Mr#d_Y#wS3m@wrX?>R*WhzH)4zQ#Jp!Zk;crG@C~BW!V|X`fA#>U*~r~8{gn*d zV@}wNgkY9m(7!jUZtJnWnh{)@I(gOIdH<;$O=o^1M2T}qQP3L1&W0QuW6^Ca57w|; zNWqHdoas?xPoQb=N2b)jVAJ)D>AG;SDAI&$H!Xo@UC zaE(a7j%lmuDK~g`Yj=6MGAPr|X((^=(_6R{y;BYpL8V)x0!^NnOMr;EI-;A6%2Y33 zQHwn4Wp&-i33nOb%INEtuPT`Eh?fP5Uq3@ZxY`zz7dw^d6Jo{4gR9gVY1TEmsXBc?;B6v zanz>HlX?W_6cA}6x%6i^u0CgaB&uB>?cleg#dz?$s@x#q3&5uOwTkMMuA|F>03y$R zhta{|q~hcUFW-impSj^x!b)s9H+#TTGss{F;@GbgAzmw>X!87gN)&c5ra+m!>QcOb zA?8A2*$V3H(4O~{m@!wfTl_IV^PtGV*G7nt^YYJk5h?!(E)7@buS;2%?nx5}`mICk z+mL}l{SXISyFDh*S8&%)oj30Q6~AGv-~X={5b~OC1#f>3B);{~Nie)u-u#DmQQXtV zuWa0cKOAY09aMg6Pq$jNB(O6D>y4!w+d9CppaO8hdZPFu!slii)gym&ae}TAZYPZ- zd67q%`MaomG63pC{ zM`+R#cTe99@JJPvaSBve@tKvQO7)%k`^|~gLx0qIDf;?#B{VjZBj#bqD0{~BCY%0! z$_8fcuD|`wSxl34%5}}}`9?dIJ!IExsGl|0MYLx2^jqwfn2p)9glL9jny-EoTSvO5 zvvR;2zoU+lyqLsPjQczH~ozBTwi7yLsGvsr`_u|DKd>3m4a8So|8mD7|V=*uv<6YURMn`BxRP` z9-lrr0~D<6=wE8>mqTRL#_7wZzv^fZKF^NiKllXOrbzp{utUg>CD!9%?C;$$WtC)a zY8)tZUb`y)w8A7koj*hOI%~9jb-3a>rY2jvPR4%)VFP;#;B}qskgXd6SeeIg2@S4! zhS_HTy^Ygh#PpwEd2N}0nrAxW?K=a<>(oCzgoDLhzyrMZB{g#CBb8(b5nGclbkp9+ z4W!P!=8)Dqm`v|WWJfME^{cLz5Ocfy-6%9-p6_q?60zqcO54*5)PKmCyZYDwQFny71S47<~3Ca!qWI$ zov;-r8~GiwpoLFgok(Bheo5gI?axZr0BKi%2g*(Dw=r!pTSa)!SRPEcAAZxFk=a;C*r#~ooPRKfOi5f4~uXobPCrj0hb{mR` zJ)!*1GVknbswB`x#}_m-_c)W1Tt2k<4r~pgy{nSok(am?47t)>jXu)?9kX>CXT2J< zxnYmb@fJvbmlfEwS`0RLeO0J1kxAg(ZG~ju7imX^NEC%9PPLZmZG<{!$*Fd=? z4nppnvpqff2Mjw?Uc(azHpGH_wZ6v5Y8lDekot5;Ajz!=Us)}*f`gw(6Ed=#XWClt z@2o?-`e$C~y(~D)<;1k}H}BgW=$!*n1@12l{@7d(a$GIW!!ZXK%?7$R+JJ0$p+dgg zSJK>$`y5-0t}w}J%l@jw97!g9_Pd?QZftv#A9$5gs68lt2;6y3m{S(b>@OhRnLT zRdFeTvA*r|E|1spmhY@3-&dq3=u>c9{iU{K`kS+FjuN_zKn|hjcjXS?9%9K$AR2A0 zZPUmOj2~{ZI_Usb2Sk!uoXSt}+Il#8*48{lT@DLcD_yi}L{{|)l7wZXX=1*>w2-?x zTjr%jnKm*xjSVS{80!8x$#9hWZR5@hnP!cdqyb|PGJfo{)G&v4H?_Y$6`RKML37&v zn1L^10{YllpJ2v``C~hdpVth+*P`{aiSf)SL1C+Qf-s$(!k6h4`JE2x*cUYKh z3Rf+2ta&vxELW)rPSs$@nrODiXJ4h>2wmNodZFvK@uz+IRjWKr%+83Jg2sPfx+omb z$W(AXJ;EZQX`ImT*&1_BIDkWZPE`{JC~+@0&glS(Hx!p^i1hG7Z?O^Ua@`aygOzq zjt_2sVv?TT?X4?1;vt?uIFRuro$U?O)%)#P-!!9-(z z1aR(R+Z^S8KaPfgV)y@V37e&$ffQErBuRb73NMunjwlfm5{JgqKKEH?*`@CAnY7ZbP)d+0EebJ3;rqd(%bt1Uv?wVIE(-Hw`D3 zC3n*e6L;pGoI*q)=960Fi?={fj4m~b;n>nuMO;68*7Rg&-IlAy@#Pxl#@l|)Bdx$I)vU{ocYd8vzu%DC(0l^v<5D(%8ru-Ry-Q~2x9UKtH4KbPV_!I}45{%kf;wsOp4&PO2p%tgN_P02t`yZgzg|Hd zdYq$XC#7duaXqVHj%Z~homSFW<5T^U1HzH{qsDM?+7K3-yko@zHY0Ab{b4?WNk~qS zmhU1UoZFR5=v%|V7`zr6HkCsi-?zm#c&0>Y_QDN4ocTI8xs`R3mtmzSP`964y<+=J zO$3&xXO*P}uSvb^XD)=PxoDWg<$@YCKF-R1vT?6)t*nz2-`$ryz4N zI7o?+4HIs>X)+9Zeb7^=xsziySZ`}gP@ZF^n1`sH5<6p5_VKWOyV8zGlYb{G`C3{- zpC}(XYz(La^LHh0cVB&Rb>CIt8e=vPy|;I;UnphR&mv8w;%oGsNTijYPgCsk)`M%E z^bhL5%*knm0%G%z$+)d7e*|BhINt5O=jMcWf3oPQ8W3*L^xA|rn`;kkjsU^a2Pg{r zchnBB$ik>r{pZ`sl39|hjZa5oe@~4QooikZcVVcRfv1ZV<1R{vR8Qm4k{S2P`7LLg z2IIneYsGOrdkuwwn0dpka)YWlySDsTD7cHF^aVba{zc@_EQdf`r)e=UegImsp_LtH zGH2GBWfc(@>%s_}bMX`JS2$?bz{svwT|X+hRyn{?E3M3;-yFg)*&^jV3E8P(W8SZt z5a1E@l#)gc@ozy5SqpS1*}C;~4peWCOT$ry*+VA(IJ~iRy4yGEGlr`ohtG4{$d)LA z+39(ZL1A}vm77bK26lsx==!$A;#Lik;qlpv6JM09RP)83H&|U{tF1&x0AyB5#N5z@sOy_r(bt=K7s9_o|-(9qZ z(@=RU1~Vi8Xy%|aRGL8ls~2=4LpW_8vSWRISVW<1r^yHM2rx_a(;P&Ql{=`u%~7B0 z7Fh~-zb0Sd&|quYR3GiFo*V9~;INUJo^P|HMznGBnj1#WHst({1*32m`+3pQXf*RZ zQ=;b>!zdRV4RG>df?N!Yek5d3wOd2>WYWqbL`IFXBb0CBxz&liC1Y4EiUPBECHf?y zNjv+eCDLP%ulnL>Kyn5I9N~0z_uqO)lJgNdv%EWuj-_C);?bu6!aac*zTi?)d#k7&8>7nKh5Us$D?gtqS-P|jWr-!WU`7EG1>e2sY$|Seu4spV zxn}L$p>c?|w(K25rDuSh0HcpuI6M}P*?`6!X@DsxA$hw*!(J6b1`Zg0s|9r)CP$&b zvt78AN}D$tjxcb!#-oMVci=I0*mx~eSNhkRg+qG@m;zsrQ^;qNg-vwZNArDq{<9yu zLP&f$zM*?>w~+SZrT`<8d;nzE#@52^w%Cx5@QFzN=(F2I{}4(Bmo@LT$dgq!mVHY_ zXG$OL+P|P$fg>=Hu)CZ#T)@uy9pkHdcPq!VvTj2FYXiLp1 zRJ|{WX^jE=2Yi5mqwrZxfN5Fwo`PL}SdQW-^sIGQ&H)kJmYq6o`}y!vP+Tf3U}!kd z;w@+zTQ8StX#Ai9xo8PxLa2+=_J<<)PtJ>KPjAQgmQs;b{ofvo`lm`YiIwML&*;jv zl7tt!we6cs{Iit(cHhM(GwUIRlo`_17+jo9&PDC68R<8$O{aeOKBh-`_$$8R`ScNa z3@%Z7_C;uL90`x*AVe^(IkBKxdGdv9RuI|?Q!2EcpM}KArGd0=+32b?uPQAzbaW*> z9Nqi1z(y_E2D)MQwJe7<+_fyq4Ix6Ddj_`|7v*}4$>L#IURr_8(cDVoVPkd*k+cK! zdbYckhWAtMk&Vhz2`(hw>iQc%Ajv*XTa9_5Tdty8$yTU&HEqbWWU?E}X~pZMuNF3W zCrhoRzK^U;;-IcB=EZmw?`8q~IWaDs0{L);aPqP>u>Z748&++sX zh8A|#<$G;kynKo*z~E7oq%tR#vN9QK4mWQRA{D*}N~r}VCTHlFCRF9VW^&x0M>pal zr{@Rcm$Bl2Jt;_#Rz*gS_L7uex`s(XQy}DHICOJNh|;bSk1KPX+ktS=1*Ft!WL6$< zH9q+cL(A!pM@I7(a&`Nb+4SzuxULrw63w(f%?s7pToihDx!wU>FpFp$w%qL@H4D>M zj6co8tcZx^UcGr=SWcJ&Rkk&`pUIIN5hG$!*|&hkF)~W+nw^`ALEg{@TGYN%9ZZU* z4*ArkwWHg+po;@wI*fGkxI`N*2<5><=NRoA?RhI>?_zRG<_#w)HxKC5k|8IF05x{O z+aYm^%}rcO7YY}uVUasF?rW4rG&fSLkA?ktt>}zFw#~a*G_c3=#nG;goB8IIs$2Xz z~(byTE-nAB8A$OQ2}`E-w|@$QBQO zm4UH23Zx+cL@vci6yRoBAo2X5l>h9Pp&Q)vMBWG~MO~q$J2?a|zK;E~IxU$)SyE!x z<#66MUKD+D30S9^3UzGQ%&x21WiQX<;&1w*gRa6py+(I&%#db$PFU6`#iq<2MgB4J zeyw-qIy#haK8XFy|9G&xeSu87W;rxpM`B2Cx_Kz&T*qHS_t22p@$@77EKiC?eVa#x zRgC~5H4?Bx3LWxn&p=fG& zbzO}vJEz9R7G^VgO?8H!Yq+V&Y113(V{|d7S|zBGGdul>MzyN5ZM|7TTD(v0MLO$C zOX3gwQbR|~x+w<7DMA)hNMoW?nQU)uM?gWel!w~Me%X?vg_}9enX@;f81+mo`tm_D zh0z#>Ju0r-!4olkvpsLE0^|FZzU?bVoZ6zUyVzYt9(#5fGFAqHmC8G_E2Cw(avEBn z02Ql*0i*cZR04IxhOO!=@|>%_@v3D5SQSwQJpt*uLm-|0)y2h7S~S^-xUIO7^Vz$j z1$LV~yBgDI?j19A8h2R=4ZP&2(4Efw5;ws2VdK@R$+2x3&dh8r-KC?cs4g1n)M0HN zcyI#~4VhATAarx)9tYJbaP0g*P3Af1rb|vudO9kG$D4$<6-mWm>x(!0RFxFgk?X@V1Qoz7@L2=xoWt$P^wi2L+qO7BES_=rP1yCzW`!LL&!Puj?lO#0=G- zy3nh-O778O>Qwbg$;{)VXd;A^%PN?Jn7~l2SPEidOf!3UEB>6-o2?Ev?6+QhiVLy` zBhgb`DH2$aXoQ=1?QZmrm{lrDk5^RJn=3L!T7Mnq=kCoLT4gzrOgB=-6i{T9_d3Lx zlYp-5chz%1-V_SmNnt6iQtnh0E;~_#mUAo4)pQ^o>JYNUR{;D-!XyJub^)0nJuex`-JT;&kR*OBU5 z^IqNEz2_C!ne$Phr?r?tCbNE@tEhe^`8ei`(ZGz$&GfwMdbQ%>A|smqR+{9p7TXO9 zh~nWmCe)aainsHQX&{9_$Y)Ep5|r65w7C6?)(Ul{iGvXJ7jUa71b?f%8lWHCFW8VPGy-EWh)A%@<2RUVi{_ z{5)Cr+3ZXq8(-f}O;~cZtX4(`6UT674yqO?iHf`E5~`eNDHUq@WwrcD;_c0TMARajk}E#Z{7GF?>x-NG!0p(~nZT zu1zmfNghvA_+an}2*JQMy;1Jt-gNON=&3X-qBS$-`21*P zi~|Y0bR7oSae8k78pVHIA8po?pV^z8u{?fLvg;4@2g=tBSwV)D!%_FCe5NX}fW&=Y z(Y@3vr%GojB+{L)(5gG|KY*;ikr@!t>?Sg6`n}D({}{fhyGKb_Bbmq)=Nx%yZwt%g zNY=;FEvK@)qZ7F+Osg_@uOjk~QYAASJN8{*=qEXeX8j+|;@0B%r&hQ`NqYce!VLtn zl)`BT{Pu@5fsakOQ|*wOfvOh2bh)w3!uMQ!o5x4~{iHMmiReW>i*kXN1;2jtUZeMa zJOsAgm!}w}0wHRyRBYRPMzds*I$yQ$L66h@T(9ikn1{zL^1?yM`u%SVrF#E6$r5@2 zm2~+)|7xqlDl&219)@4;j|}4PsAMruMC^-qj7D(x7Sahd3pb=&Q>bYehPm#7H9Sj} zyn)B(esYFi@2ye%Ui}=%9X^DRXH*`BY7>7lfoujh5RooK+;wc6ldv@!75#gVk86xz zve40d`~;c`2Y8WM03|ac&v>Y{rf>Z%Bf!H8UkmV z;E4#IAu<3EYv6^3fuJ0kl$bZ&*%H>~YB%oRM4jeF4_UFOZmg9c0>Hy_{1H^Tz6}e< z_o+(h=T)vfdj@Ih!T28)d9xh^?C64lMfo*7eY-)Izi+2z&5gc7f@m9t`pCm^J6xq2 z>BzIku0u`Fj zjQU&*uCJ(%#L~*CAs*Z%4@)cIALds-$()d5%g?ymB#YCfP)t@Z>j}i_c;?458%>1B zBXP86DRmXO;pkTwFV_aNv3+>bD=r~PdYjd8r}OzN@SKJ!n$nNZD%qOO{MF86yEoOx z#+k@=zo*)0-(EWRW9}|Nnn4(e1~2=V{MXKse_|hqHF)(V!M^5dg-Z4tMLLXdOPWF>Nw)pXU3A${yHV|8 z&4Q`dCtrR+=cn3645TFzWA|WTIq}H^9Vh!M(S~jlfe8uSBw^CbxPtoG`ko(};`lDV ziMjh5IJ;%VP?mI|6i}ucj^U(FN9CTUM{mdBJm>xUuKqV773ofoF^Y9&lLftfE}LG% zz}JC~=qMK3^!GT>i|RxVp>0}r1zGO@3 zAJ~uu(=d0C@LWqnkJE_L(FH?+y+P?sQE@prgGp~*U~o=c-XB3Xug&$}sfFM8h`Y{z zmKbb{IRKNV`S8HB2@oeSX-y>Z(hHeMiKi#bTu_n_O|561yecleep>9PH`kw5-uC)k zuR5eMUNXh7k~0&zXQ2A2=}}B2g_G&f33=p0kbt(HuEaA(dZGC z5~!;YLL|;-`1W!!4a1o>^{A!eP9t)hFweV#;UTMiP2tjA1iMZA;6BT}(uO$V`B!<+ zqT5Om3GZ3oSIrZWpRsMeKKl#%H5#yyq-5b`|JW-;%iFSlN^K{;&uni zNv%=s3AIe77g!4h-T@S|Zu`^5m5G6F!T-6zCY7iFs5*H^SsOus=e-J z!!J}0B2}W|qc*g^)xX>$<(XFUkY?t@BlLKnbAD27g3pWd@m{XEnXZM^jPo5Yun5sM zVj<=X+xL0scbETZFg`1b8Ol!nIk1oRK2Or*NhZas3Q59LkY0SsJMe~MtXcvxG4LYb z0(axbjQG}i^GYHGV%#F!IJ7ZNbPG{VqN?-7Y27Q+)S6-cLfMd|RMRE=(*8Gr$4nK} zd|q~Y{m)sNEyW0c&E~HGqMcyA3-N?q01sjW{Fm5AEfyyQ8+F|B!}FCM;6+_cYB9RCTsE1vxS<1Bga?~Lm2-x-b)BH`37^>7!ZV5AlqD0wLn^J( zzdyCA&e3V9PFjyR;fKY>JF$d81vE$C_)R3p6`ka0!zi)c)Krc$H^Q2bRB&H{Uwl>8-95so zo#(1_DWZ1nw$^Gg5H~xjxl@5+m4Ke|Oe~45pK0c&#VnB6k>}xM5C0*~<9m08bdX7Y z(NB|p66;e%1OPOm)6IJyDfOglNXVs13Ea5nvp!8sd|z%SIW!EDq1z|O88FF)K!Q`0Qwm8yXx ztBC0;EM^hVeTXUK3ApBR4f-GAoJn5Z028#A&=fQmJ#HXXSm%C6%iiQz{qZdwdkxlL zr0aTV;};-q>As;p4i@(MAUsI7y%fKKnxd7s9dhPC=ekG<>WN6)AnIHc#bKMDlL2&^9!`_f(-5yan;PXbs(57ZC_6xB(S31sXqTR=c?Bs>fQQWLb9*;`_ZX zU=kUs%&T+iIuWLNOY$WI^ZLnk2vdqrZtp2R>7p_))ps!usSnzkANP*7zfduXOUSIo zbg?5AzkUr3BjjkGou;`nFsHW~OWu~e9;{*)LjvB!ZC7#%=t4TH^S-AJ+RqGs!x#%& z{6_svl*w2MnQFhlcrq3Z0|@f)=q`oCDwQ$jib0A^uR(jvx3DwjEyVbovk_&EUIWD^ zzSn0393peW31%yHE~nqkNo?T8#lLkW$G3OVWBUT3M*3%1n(30Sx2?8!i98P>5PE;Z z&X?sP+7UCX2A7S8=$7!#m=GS*myGy0IWu+<&K?7%OMgQ^a|<$|)sg1haZFPym#;9R zR)h=f%ER^k+U}vmgX}QYcYX5p0l-(iij79|BY;dIumI*g6L45JwJng$*zOhKV6J6Z zy&N=)I}}C_xDSC3h5jqoe#e~VTPpy#6ScMIQ-{N(+ziCE7Sn*lnhUvdf??_?r;ql;wEpEHJhuv@& zqbr|Z!X}f_OY0Cj%L+XqEV!c)p6N`;0&WTboC)b{ zyR_o*&L3B0z< z;C&}mSW=Wu$Zdw2lbc((dSXG6W86fd?gQfn7I(ElCk}-pE=1H~axW*4uo{ge%QM?b zh@V}4Yx_1LnI9DjW`3VE{<%bTg#vwWhHX-uf9M;t9Bq#1_Tk+NB$wYw5vdCU2Bmi& zt{^ggc%~cEoBOg|L$zSp`%b3=nzUO^qhD$M+*eELhb5$!?#Qxy+q`5x;qQ-cU>S!} zwU_hR0BM>X2Yt5}NPAvmCM&o1zOyrF5H+rMy8a2tG~nvV;TFD#kj-NG)<4u&qf#wL zaQciVEFQUyijSG~cBpEsW-l$9mJf(OQ0yMMj-Vn?{lEDKo{}&of+l5a_RaZ^=u=C~ zQ^H3)uN8ViTe=AoYd5x@Em!0}lAh&gFA4YCjc*$Fl9gTEm)vYoEl3Atz4dzieFqYF z6!_$JTT^az-Gi;t$-yOq$IVu*3Azf9XS{Nfc~XbBh!uPdeNq>hPduqX6-j!|2`{M_Q|?9kQLeFP%88Rc3sIh^D>E4=ZiP1 zXuG84tAo&yzqiOfby8IYp+q!5bo)n97Vy=d5q;-+3NUXG5ROXGYLdwxRUJSh0g9!E z&w#4S0N4ESA77q-ry*d${>8=!pJ)D`C!ru>V?T(x9<@yU2oUbb(ATovfSuL(C8wY- zI|eWffIoxp=4rjcK_B!0tMm~I7uRN4_rd%8C#lh=5Q<>}mL(pb7jszFjr?B@Xiyhi z{-yj^5L!9aJmJ5@H2&WaQ7{#0MN)aZzC3*Ek0RxxxTrr(jC?{Wox|y5(4|ybXu3$L z(9i)prb#F(cW~sml7FE5B@zfP++zG1I?K^I8UI`LK?VQ<#6kd#BzNRZ3YS;LfAm=; zNRao`3@r*-5;bB#2!yiU>u0iCvq8eM4C)FfRL||OQV)1_8uD>2Egc9&W+*WKqQ~_A z>+lg!kz1B`Igxm3yI2s@SN9NHe!g;C)*TCsHZlV)3Mp3xJEM4M)Qk=3e1Am+z*b7k z!>e1W1NHhuOp@13zf9Xai)%JtiJ-i?UX6!i+VL`(&bX7&HTMi1;M0D${c`szU$wb^ zBzHtpy^!;P>k1$l(GqNc^bGv9->`vf8CKiDqu)jitNs)9Pk?Tuz-(x_{`{iVfAp7ydD^F2`> z;HK8<&a;J0@_%r9;4utau}C-&#VtJjV6?^<)7#r?_x$ZkhBuRWN`7*W%S(CKFIdQ^ z+J>#)eB|{{86+a+31{~DR9-ZZ%I?W?$}rtfO*qEDeLt>Xo^0EXAmKZ;e8nu&Hosuz z&mkcJ5%@nPcz|*bndFIYAEb|;O@PXrZ*esntjlH6v1?4%^C~zB@{&iV<9gprQ(IN$ z^_GDe468>m{$yl%BjU;fa=`WJuJ+9K%uJwe1nQ(!n)u^F6$6oz^DijIUdR+G<-b47 z4*H0_@U-51m1J)(9EoUh}?VR*!X?>-hOq zM@ukkb<&iNFOmd;gf=uDb zm08vxGsV{T5BWu`63=VOl}kq1NZCwB2b+%S_yVOjv6;^vCJ`g26ZxU;!*FVNFPyrd zPE^B7a?D}c_sbwKHQ#i*=h*dEvE&pCU0RH$N;nT+z~Vod%D;)S2;D8kH5v}S(aw}g z2@D9PF4C%&=m83Ne@?hsSLkfZirvxn%9r}5c2bTB;aHmvl#hq4DVWOC9wp5hu&usZ zLTC?^V8b9TohZAb{4Z^$>DoT9=or_DBJuelL+lAc&rt|BQ5E)u-Ff~#C?*kF!4R~_ zP;AKiNOT-oDgblTpdYJ+}MD*KB>Ca zbDpy$&A})+x&i_$vK_BtU=f3>Q#s^{4U(tsJJ2pR^^hb|XV|0=boR}^tf5cG&2Q&C zT)e`E$-+QAJ`q&e62!33`&#I1rcI$bfvX4jV(SHVQIk+`sP~|!DwS~{0vHQ%wZ>;LR~+pMkcZg=P(vmyu60ZpPyHyMEMmA% zp5f}#W2Hy#dr*=+o`8U>3PEGv!zD7+eXY*rF(-qsZ;o-BZHYM& zkt0~$zjwBgjxoc?+?w&*8{EfZG?}8Z{sxxAK$e%m<}^j9zOBfTcst4xrTCR#I`6|` z0NxcN<@ZbM9vd15V>oHrl(PY4LoOU#`K7FY9AGMhZM@>PB)QUDx8Jy4Y5`zZ=a^LH z>kkveF$cRSK7KzBi+@fi+g2fa@E&@5Yng5%2v{9*06h}O*+fs^R2d3=^(Y$%u2B(^ zYT#YU>;66kS)Z~@`$@m7%6S(_yBnbj$;7OV$S zO;t$0r4F|&K4jZH+v(7o4SW@OSY4B~s%Q(U4TyJzwaCV#tcnhaJF;nRRj^(;u8t#G zP;bK&SJfL1B&G_ZyYQ-IB7wAzPa4bv<|NgW5+PaG*sLs&Y8M`>3ESTw(7w%I&fMNS)P{^2nlEZ!@)G%Z6M2K4P%POeDI^{D)@=40g~|c!F_$b>Z+XM z%RcopL)U0*7UE`cIv!A%f=>u%jt?t(Nn~<#>e1F7;kX(vG#lUwZ+)VQ z6!M#}9W1P$Cs}+C{nNbYRd6ZP~$ZMPvK%a5_uLrcPWWsh_S{X`&{cLr+R?pz9` zHJMrF{;P5tg<0X6JiFOSe1BAM97e3=c*JA@zizn-dQl~b-edwPOjaw<y(PXQNdEB4WG=sxb9%p;a2@_t-A&2*WLq+IUkju-LMOb^XRj{DfNt$ z`p~*a1a9CyS*hB8MKHm*31{#v3)$P8tm z>(I(ES#eHos?3^>U3z$t#S6VTjMTnigzve($1dPsJ5EPVN~3{Hd9ok%xM84JSrU-* zOT$qbB;UBc80?b9TYy1XjRj8DItYlFuVxF`vA-wc>FlFPh9kw()6( ze;r^_Q}h;xs~VsaxcR6yo-THKNh~#!FO5>I{upFGOA3=Ln`q z&lX8Ru#B`q5;@F?$h(=n6E}B_?kVrQB^3HAY>Bic^S+F@<_n|d`8Am0VX~9-WbUVT z4;#>*ScRJ0z~|QWAu!>2hbCB@Qtn8_U5D|6jQv0JRj&{b{W8MNMu~%l}ipDE> zR1sFkGvPg+64RE4i*wet(^+0kn-qHIp1YG?)i;!vNiR<$U8^?dkyb}ph~)!=xc^|5 z+%|ghliaJay9KjrO#&=5O$iGB7=@`hi0&xAo6n-d9F9&<+*AR^7j)!UOEZ6f$ipja zXtP?`(Al^cc6g=kLIn@(Bb+$k5Ga?dH;Z2Be%J$-P{{$&HE2@CYY<<0rV#9#zuJwS zdN#?~KhfcQ&;uc9Cb6{Ka^6~3ZImJ=#w7M5Qwuv%8DX+zcGcK=dD zk^c{Bz!$&rVfAK9`M1l>ZUw`D_9u><*}K09Xr0# z4t)%7vr(YuIXnF^Fq=g7`MF36L1LH3K=uopPsvKHG!0>pZ@!GkUfdwdzcoz}uYWMJ}MA+=W6Tm^TJl$E`q5r%fV)uks*QS)`RY zkuW`t86aiO(wtT#TT;J>kDXeXWyOp zR%mqrHy$a(bW$_gnU6l0s_xN_70gxM4+j^Mq-%MMwzE%%@rUL0R;8xN+EwR%uG&n=R-^QV(P}=g%lN9Wf4Y`3~meFJw~2emp#Yx~K=l zsSQwV5#HkxwIn2!x@vwO_?YdYoqjM;o;~9>apf(kYISd2G>&8XC#)$v-l1_brGD<$ zgpXjJhjFRHb)AVQ@ks9d?T@5op=2&$!#8Xap67d{hpId-J`~7(YK<5EQfveMu7t-o zB4+6yg>jFy=CQ2b;Np|!)teN&JVl^v;f$@bSX(lQyqizADmcAZguH#;$m()eNzhbE zNgO6RP@gnV)Q~f#B?&spZt(K-ly`G5)&4UfX0OWQT0M#m zlt--kAN=M&xFXMyWjswh1i0hw=vYuDx8H3$j(j0yEcF&JUPoe^SJ+&Pp7xro?pTDr zfJ|9jtBm~6W`v)vuJrsi)U$joPE-i4pUQhX+C4BD^sWTRXp$+rl?s2)U^u6Uz2a|0 z zp&7Niympog?0&98K@st_lRweM{p?3`aHtYAQ|<1D^iogbbda6dqS@s=*w}-IL>bXS z0!uwaUI)#eU~g(7t*Jo`Nut$a3C56<6*o4Br}s%lx*W55`{pu^vh}5_?zE(;wu6Pq z;Y}uIO&;4{VUyHRhr~fK2DcFx>=mDJwt4rx@aR&_^(}r~iHX_aiS5rd zw&D4nwERT`R)hR%w)KR{>1LOLb5^8(7kleYN#TtRy0Eb?jMesZW60;9yb+CFMXrMr z{J=v$m;Y_40_NW-a8si&ZjKS_zk~<9RHR?I?B-bV>ydfg9gx;ayr_syqNCko!_VEA zXPot|7rh~jfh^h&J=EZ|1-kQUkS`NVxi)O3>hmTEg`T_*KGWhq-6nHuHm&#^Ke=LX zU{K`tux~L?`4%lS!$INdU7?e;JoL^j)!E!VMep8VOD|k@BAFL_m1P-i#kfva56t(w z7ck$evqOhmWD}g!{%*Tkx0cfuxhMkijP3THJ6LkTnMlQ7%t~GB zbSh?ZvKq)rzC_!t!adGv@_3DP24)D=8$i^&wCuK+2gM6l<#pe}s^q^5939*C7^i-% zMdl+d5P!cs%!?8L4$Cj!+nt;@BxNbq^-~cA1`brv;nlYl9a)A&)CJlViToGS{mR zS^Wmw{qY(V5m-npCO{H!G=`%k zkJj86ghh!LLP6$W=q+2ZtdXG8iBI3dPs*Yi-+ z=<3yY(jsG;ZPk3;a2S8S)ne+Ee1DnL`D1)|;|j>nQ#jpP0PrVmV7+}#kB`laNWlr4 zVq(;k$ycd5V~0JZ!y*rx(>GurK0DaLKWVdvi@=RX=EsFAm*=(W$+vf*J?MTI+)~`- z;B-?O^nMTGizd=y>k+DEJI`)m_Or$H5HjC-Is3?6(!kBYWCvinO`fGZ)%~M#9CG#t zDho^uh%}Ea{3~(9lmG?9tWO-!`Gu4iAQarOl{-ZtEXBaP2K~&4{D{;dbX=7TiKO$A zUeecG?sjXhW!_88PG>9Yov&R4r)w6V8?$UTQ`q($RF6oh6}H5Vb*FpTN`LmviV=8N zj(cNU;|*OkC==*G63{?6{C^y-Yy^Sse(0ouErP={yZH*g37h@C_EwWDSFRe z3bjldO}MA)dmFt?kk;W|(bA=1BUbIX%PqJ$xPNF-LJc0RRFUBzTQ7h@zl{~vLjN*- z-gtX)pk+I~<#zYC)p~2|_IW(W>Ji{MqD29a3$sO?L~ZBLk1IP4 zaSp7*+Kz8m7|*(df4+T~3j5C@JbxwoRvZE+v-zKP+7s zF2bBXW5QYO^Xrb?1JUCaDT)3vUTMyjQzD;^wPYbL_0#Br;YYfZj3F?j@f7>8G-k|J z(xliZA0-<|z0-|u2vFc95I9jRk40WTg{H(;MjPgKtNn+a`s7b6P?FwJr1f$K8Q+>+ zWG-U&o}+tY<6sZ|HeOZX;bMQGq1?X93gghNwOoWY*?44}tDAV3;mDE$<#NVPfzk^C zhFv8SRKbcxKFVtAe0{^rp>tJaojd$_ zUe4FD+NZOVE|8P!HCqRhVHt>gQ#*l^e0I#5nX3P*=Tp;Sms; z4rXw7TxHdq6?y14hp_dT+xI_MK%E%yny>@!i6>yidXWKfxcuK~L(91GuFe)4)0UZ- zJ5pC|>gBs9kZnof!9BBdm#M#YE26Buc}W^dLL>!qdSM7ObUjU=gOcq`bUN3yt-i&x z9jDc6M$0`SP}mlSpA0V1wVIkF04Qt4kC13`8H`Db_|~0ffX+ae#JFq=InraclJR_I zti+3qcN=*R7x=x9{Gs{eKf_z)N&6Iq^uJR=hh9Z}T%c~)DNuJUI0z`2u2w8oEf$+e-oHS)9M2Hg-ky2-7F9Zx1L)9O zpfki`L81N`^1P7MxvNS=8j%HSO?&)7R-&~Q z#S$XQR@2G6>(jnU+w?-^LbCqn-M|nmkErRdm^JN*lf#|wg{h3}pz%=7>4^^m+y04j z()G2r>Fa61wm-fjeyF8Urh0@?`9I%jYC;avr-0e|2?uCeGZ*eJNIT@vxCU2ohZ4fUR(H+2djnJx;hmwH_g!0Y!>fhM{cOfp)~iIbacZq~ z=&N??_C@L}T*YbN@++a>sweHjF77655V(*Fp0cG#!gbC{KK3f{kTO&8V$$CG8ZSGG z=Rsh5K&~vKWq@JDB-T`IBP?Rmb%Sapi@Hn2N<_19kRSuT0P;Wz`Y)X3J&g(%-Ql;x z;3=hPEqVAin2xrYWm3~o+>6`JKhup)YFk%8GXfH<0>lCS;}uX1Y@=6T_QWqw17(0^^_~_0IMmT zmMttxMq7_LG#mM?qmsA;BU@bEL57}AsUIZ%{Gjdh8auhqZru?!C>?wD3CX?jFC2HF zefZvpEdBhP3`xdYAR<1fbU!(bSu-@e)oyf#4Q}LgnW_a7pV;)vB@RAB9AkX7soaMF z@yz5ulRva6dvXD(N`g!04YY80Vl_4S^&n?VG11E|a(ZIc9rnKum(TV1VA)Em0UL$N zBVDQ0B08zQTH0aWmk8v2dDwb92pZi~TxM5^m*1KDwar{}Sbz1D0dkP2y?({v%EvKm z_o{!f8DU8{hj2Bgsov0IW1;zH(x;G%YPH7WapX@}1>So5AaHHz+w;tD0kdh+>k~iZ z;#88VmNJ`ZWQqwNDNI+iZrMB8wkJ!|ksJ@1>@CsadLe;(8YOj_OQ3 z>2NYeZQ6ejYUMjh|oBO}t1XOU@bzDAb+bQ>FiDQH65;6+LCj`XKCL zQjvgG!=>;JK1bDKF_;Y_)v_zsi4{P zLVja_)mT$NNn>^Yn@2HJfRiKPp6rTzllCwoA-^sawE92s6TX&R}nbq2br2 zvoI0*w}r^Ajk5SlC5`5KjrRr`ttKqx+?vqd2E_p@lLZB@(Oc@~ALT|DmgTyWoZ6uN zQ?0_S5EN?BObRpQTgRJcHV%Y|Iv{P8~O78yd1~Ih_EX zENNbCu7vHSOfH;yR9~9J+(B54XXJ{sa#}U7cXEaZ@D$BQ3s&UsnF`dl!3ZKBiW`X`l0fzuD^Jsf{p{Qof9ZXU;Dz zK$C4#UOS-^MH$zVg%uxf=Ula*ls3*I2ZputYsZd1_+C2gAe#=pKj#{~49$QE5{G&4 zA-2q2$i6?@W2k@;PkH8M4?A3S9h|rcYwef7-7ixUbxYpp_wsBX$3?n0xI36)o|b-b z`4W_WeMmXofY+SauMqiqu+)H2!}F|Sx@cDKzP^n6P9Z$Cu%!r39uvsa7ipzm4LRNO zxWQ7=EUU_E8sN1~XwDxgM|Wo>wBUQqE8RvL4R38`DnkTL)2$1a63V|Sumk(v^IF%6 zCU}G1YImgWi8(}S>mt^5PGTV@`X%O`v-Yju|Do+Yqu~nsw^4~C5`rXJ^dKa9FVQ9; zi0DzHMvLCVU@#IvM2i;Ddk>=xMjIu1?`1H0AH6f2&GUcOdEd3phqK;w&i-i6zTNxY zcfEes@49mA{Tvce2Ggg*~eWR_R6*V;s`(ztyKT)D~0L zLoaUJS-naz@JL_i7+g4c5|M0fGls z&;6|nMkkEWae8ns-V+vr$QAycQF72X-xf<1j2li_i%Q5kdQ`6xedJ_mq~4+mp>AF% zQ?2BJtMvGtmc4r__<=*;W!x0O9oMDx1!ILK+jb~%8EyI;jH|DfA2B3{HpaXRdHJ?R znk$xr4jSxO?sBAv8c`QBoZw5T?iGP>(N`W&<;C@7RYeR zAFXXR1QB?U5=0qrk!_1hmS*?F=Pk+N;aTjD_!I}XZPR5@?JpM?(EZi@C|1O+o-h+x zJ+Rv2E|yX&GUlIP7zMt)J9J8b_T{1(mi6^~ z;?cxI!b`sw1ge!V$(JIgC%~MKLAqn`uHOMP9oY%RV62FErJ360c9I&=_U=yu_e~MGFO>w$*l+0}HBP{FjNh!+_v&_QYF2u#+`o=>23Rr7yAP z{%aj7VNzz-U?-T)G{LlY!=-v&e$Dh%mHzS3;%61a48!o`FX;>ByZLM84u!8~qy*=t z*xx7~lLZ!$`%pro3ld5s(Nf9yWFPMQu>C&fH-fs*l`fiFgm};7XbSe}O4}DbHLq5$ zGvW@qT6fyFm~%=`tlO321all*eso_r``CUcqZ^=mbuIpnF+_r$>SE^H`E*Drxm(65T+qs{Q5|x>K&lne|YFeDM zj-kjQl!DU2om2XwCc3pwnoedy4M@?Gmo2A|&(mzNLyXc<<@UEgXbHYZmyge2uPp?X z!k=SZ{$34JPm|98%HoJiAGX6)7bj%7Yg zneK}|@K>WUrvUiShV{b%c;5_a?V}u~H6dyEP6=Q>0Gm`iN_5ZCCurssnS5wyb;@D> z+s-^+2sf-9I30Ih&^Xw%UUO*TB%>P0UQqL-BerwkpXaEH>>d=xdC!(sd)25Pllc#P z)jwP!&&mo#r;&|>@2x(kzmTmyd{p2io^#x-P57#-Ah_*#&~vkkysKXgy&=&JXR%cA zHaI59YTbS$d*#OMeW-BpvAw3Jhwf_c6B07^*ZNgA6#3sRaTJBI;fjK)L&sfimnX(16V+HL0p!@B;NCswuFS|J z>*K~Z2WmpY38N{y=GH5a!!*N#q&QJYyWt(z^(qcSE^#st=CL=GGJnNzeM>%Io`N3! z@)qJo5V7bjtWhjzr_oHdULx+QZ8ChH8(2p_)eT9i3M&6=I41GSJLEa>4A%S5CY&JX zaqNSbLOA>V^Qrv%B&_tuJs+5z_tKLG9osMc>ckr{OpY-_L|8>L2u4zkKxERVH=E=jDyQ%D@f6h>PX-lvc;uEWd9cppVWuDCbTW3(|H+& zf^}-gMG{`&RHo@BVG#5FO;ZlCv5a4k`B9nsIPaPBq-*@}h$XJ}y1(t;J>0NGREqx> z3z+%kIEJ}pRBB~(@e`h6`AR0CgSNa_+65+Q_cI4KZ{A#!V4P95;N}{Vm#SDH!l+0)y84#b1g16*qayL>?Tcqd^p#`5 zquuB>Oz672Kxy1U>G282;>xNMps5Bm6Bcx+hK!Vco)(=M7Pnazqhlt^pENQca~6cK z)}NCt8TQN#G{37KEeQ*$D<8}6rDb&8T6hrV#8_+Kp3l{xrk{G~?}W)=f~6-JcpGp| z^5AnxyuYCJXP?N|mmG2(B%H{dvHGHfze7%kx1rsX8_`pXW!ddH)|)!d*ZR4XliYL# z=gf#ol6|1k;eJZ%N~wY9-%ES*kl@LbO71AsEZSlq@CfpGj?egvHa%d(F>iC@&+v%T zt-sX#ofiahp)=Kx=>6D2MSnM#Zl%5E@6#*KErSt<_U~%FGZwdU-&lCj%Ea0$!Ry(Y zsw{CeDsR0G0!+9stUjR|anHkOF2~FAaQ!^wYu@s94!kh;rk153VZDE10t#!Vq~5Mn?3P4ZrrTBpflKt3?H+fF|;{uM8yk^*IgBN zi&TSa%d~pd8yz|aAyb>lC1DQci-3BQQ>G>$=|60g%XvVZ*|V6Whb2~ZZQC@&W*1>+ zYVv!Mvy!8rhiCPV*Aqt@8@*YG?BKlCH0tIu=SyejZizg?b#=Ssr7>`g^Qh{D@1ace z4rnRj0=R^l#0<*jm@FZbenQg{TADBUOg6;@-Y4M|TDOhiOoXIQZ@Pw9@>nm5VYWwD z$N`Xh_*54T_c=2oPufn(stg`hwuZ&@boCxrI9NgnFb`jJyW40=W2(q7@Q>OYNO|L60gQbhYlg?iha%NK(J?HLC027DhhQX8# zMw<+oQd8I`2I;J)epC1;msWXho9?Hwja?QcU)GP0 zGI+L36C~{qWzX6$rx8||qrZ!9(%)qGn2Z9;ah{XTfi=|5=BOYYtsh%3J>%W%@nmy* zgvKvaUD7+bjyAp z@A;Twed%_$t^hDQR+$}II4!Trpv0;Y?wE*GP&bsm*6A! zDnG8)pxn@{Wo-N92+X>4pOY$Rwtc8xO@yeY&!KD9N6G-i=Rq14+lA(z=WNSV(0z?? zag`qW+RbzI-80Ta7F*>??%DXG+nlJJo(;Bg);d~ltopf~{?=(nXP-%kCt_tg7cwTI zT!SVs^qwjRF*>OS-N)GhJTQLzxNqGsWW<|=kI{o5n4NNB$D7eck)URS0|^jdM~O+$>@yb67IX$H-OG- z3$s};3TzX$P%`!67x|xxLU+wy9M<{~6B#_Zn!0IzdUNkKLpEkEC zYr(WQ*-FjsJ|av1Cf!Qu?UPcx->=^^@@`(zN0=6?Yg)y7pF z6T)-@=+|b6Ks08~;GB4@=wso>g{mjYnUP=~u~w51Qh)%*RPK|o``g{vN=#=X(IjCM zJ!;=L>mFO#hhoQhDI*ih$nLM_am~3_4d_6YU}36tx}g9JO++vDvF7uLwI-WpKB?wC z$lrGTjN;uC^5#z%oNp}jh$-^fzu**KoW zbV=h}FsvipG0lR0r z`ElEGQZ}}(cWxne8PTY;)~ogZtmML7YLz{zr+o6p+6n@P>Z_D`S$r;`X<$#avI;5hM4xalsCVcFY( zZjovEwtF3_^o?Yze~!=9&(Cao4Tq;(gmNI+w8L^qnbXtXUDN1rpk_sC8ej5?-#xPX zPH~;g)o(&{%8kspe&cBAh?|H!&a-X+tG~Yf&tvm3Z&~%LzsTd5e|Y;Ah)4mK#?x35 z$98=tyCpDn{iX3rZ>_1E3K<27OX|a*kdUf0dyJlaP~8ex_(jf?^5AuSaLC?tROhx^ znlAlxfMj;ZU(AE}N4F&-!I58Z%|mNhmSR|8DjqSN*S0v(R6!XwIf|a!!5Q`nF33NK z6Y2$IH4rymbiZ+fnajLGMpGIif`J)vrJefiFhmhix@=x-&qZ889PV;0og7UgSFU`d zHXO{{dDHrm>PO?skC2lYSITFo+YCiEXb1fjk(){xGmhgE4HACm_L%N0sQfnSlsg$( zD17;GnF=g^y7Gtng49wU+;*jW(sfmVTo$go-1FoPzJ43u;wOg}``mZ*<+tPZ!jVu; z-<@*PwmHudc!FR!VRqO;H-ccKK#SbGV}L|Wc=$21>tew%3kTCs{E*<9xU)97~nAwZ!I9?#*3N9g~o_>1p z>&$GNhG2j!K3r3z6V3ca)3M!mVHzxi|17b?rb>#;$!mWXJwt|s8f-*4uSi1?E;W+( z+GtgPmx!7Vwg6pf>2(c4n~V%&jfkiJYC9e{xB+oJ^~UQ4d3JG!&QF>heX{j#M*h}! zehkeTv`{t7c8pDj~!RUwOIVhVX-2xF&T#E+s;1RHx69`6hR(hrdvf^LAjV~YP>xQ(-d*QSa%)UE0Mjd zl@VXO-7-j=FBeiqPKfqs=bPNp<;Z?Qln2F76&Q&wrvZBL!lL5VVK)`^r}b>hV^c+9gs}G zyG_qdd#i2hYHN)C4^wz5+}p;$!p08kw8B}@+l!ZT)W;KEHE@-^3=fBuEti*0ODfwY zGhTN{z$nG3gtgOB<`vR&SAo=;D)-&Umx%QFreHulgp7iWj4YU) zm5uGgCCquLQ!PT9jiidLXt=SK*W9oSEig#ml_^auW`C*VH*07In^YB~0)Z<-QSA0gKy@Nl(w$ zEad7823!kjz%*5`F$t4Atwtv-JlUVx+5eePnTKUtj}*0^^bhC}{8C*hbC9i#&f>y2 zg3~AAkUsk&9iyir)M>=qQooqOZrev>v=_)4c7mJRkgpk<`ytNudLwso*q#aO1b^hd zqtv?-;{>G6RlHwnr!EQ(tJ;Gix+-&l&9Ki%zS`kRl*N*sHcU%8ngHOvSJ;jpbyvy7 zhuR#pMtcD6SMLikdbBVKI1Fu4(<0=(a>%41N9N+%TE(1Hc#5vzbv5|N<32RKAqtC& zLi>lY<&NK&qWKocT&atHYIUlgO;i+K*Wb6vdC0f+%fWL#w#*r?Q;t^d2X5GfDagVH zn-ua&D%So!H@qYv8MJ%Uy z9%>~>hF8E|l_2=1eHE9kKJ%FDn26VA=2WON51m{tZrB2-4+8OjDHvle@FByN0~pvn zKV;9Iv)%Y$>Ol^gQYyw}PW6`D^C5+F{ajUTXAM$N1@ODqakE$9`#%b> zvFDoTuc{B&W~(j(CU4(|lC8gI`F&kd=a0cFr(`jQ@2-2l8#e3`2cRhNCsp6j=!>r7QtH*(8*E@El=~)IDT_ zQF<|L7u5~nO*oI(&e0)Ee&g*U_SUH*Pd9lC|~X-|48NN~yTOn080_h)0NXmydFA z7sL6av4eimtsw&MM2pI4{uHxw>)s&~nmnt%9ty_}x4tFKYAUF@ z>u;XUiYfjb!NeSeFx`P;W$S8FDLFgbjnGKF(uzn}v|Dd?nOnod0p>w3b|*%|%#VdW+bR z=9ABx<08`VhI22FVj<0io(^3KpJZX*uq(D)+gv$`r4<@C>jJA$k=U{Rw$U}h8nf2G zH%2zr<5qhZ^NiR+W3;^mj}FHDzUZ15kVlap`cUOVj>6Ve!*m`s_yqZU9R&ZfpnfLp z@gNHf$^ZI$;h_Z2Wmo84$(gSwXY^Ri!ri@Zqz^yI05&*leNZ z#~paQY43(oqI00g)o&rtbmp_F5`{#~4CGS}x1|xiaJA=I3qWSPTb(d4!-)MgQ0v*$ zj>Wo~DxR|n&wn^_{!h60zzp`0dDB8sM#f|$7B9&`LRE2Oh!BVtd$1jpVXGG6)ef2J z*~7ispW0WOEG2KQT}FGWB(IkYmA?RH1BTJhdy^L1WWtjCV|70O=N+2(tM7Vu+d`Dm zn;r-O(k=Dun)%Q5f-+Jzv?}S!S{cRv$G$U0n|q0R=6Uyc$w@_AeoqC5)q?iXvQ3+I zPDP@S4We$Bg@~?waB@B0TcqstWa~^fF8j_utJ89W1+cAnvFYx~bcWXw>BM$;!j$d$ zEyQGOo|24q;T+rkeb;RR&M98ahpqx4+QeUM*ihR=Ha4R8^5wTl?9zNlXJ(}6##%#r zX4Lc)w%wlnNWkb4ROki0XY@k)i@w&pl@@C%uqs@CzTUCTohVwE7D2PNvajHJ-=!uv zJ8amrCD%7Cd~__MZ!xLn1$rZdzkK!IQsT*{+V?*2l+WBP6A0ahdg7PAN20(WxRV(_ zrM%g;Siit4-XD8+0An<$)-n~gdU$L;(*9V;F_U4v86)ysGt+!E$S(xt`Oqa<;?&9q z)P3^z_}Y8BWWmuaz5M)~{;-X**+K|y33F2mYW}I&`YOsH$2$z5)u2W88q7R=h`17K z#YQX|{g2ij9^79$Qq*%z5G~J>(5htu>ud!@JYWm8uW2c{`C^skUO8h((!iOgC#f^o zf4k=EfrFPyg+uT6+p+SD%x#6 z7{=|LMgPZ9RiSz=Vcj@Q2A5BrXBre66wsCrnSs_~w{pxf3}Ek7lhmgYVDE<_{K^9? zv5=?)tK)UQ@~iVC0|?c}Z?%2fmh5hD3(D<{?X2kr`b8?yKlq9lAF%fU5=*q518?Wm z^!buB{2o&ObmWfOlNq$h%HJc-VGkiZ!h8vko!0O3lB#u)H!3g96r%)(EdUOtrbhY~ z1%8Q-{pgm#s<~t9e4jgKHjrv+CN0ng(yl=-OAr3hfv~X$%w+|%$CILww zYyJtB`50%;ou@QJo~;a5diwet)S=LK_O9|wzE^!SNeyypOOPwj^Q7;^-%__2R_T16z<%=d`$1tm+m z@3UuIZ>6Q4JmN{=JSdqKoaP?dv%z`(2LwW%gy=M<~bgFo1MgA`ZwtM3D6(BY8bgWSRnd0pkl zHC0G*H_L$ap=^zVq2*m%^{}>(2{x)E>pL_}i0NE8>N_+$Z#)x?ud49fO>8YL9WNj@ zpy=50;S8g;M!r3roxJsX=>f`*&IBFfg1q(%D)A1eQv=3_+q+Kq|Dkl@$TSwIjgaDL zZ-LaJ+?udEtkkW0p63_0aEFN~y6i}%=}XxZ-3QHgl;N0pkP`JLODTvuej(3WgYU=L zuO=Oi{-PFQwS>s6?$V{0tZu8@WBX31uZCRuf9-~cHtnY-te2xt+{$x>C|zu~1uR=t zUdSLfD6c*c%9Rd_N?Mw;LCM_miQirPyP}!*6uS3tZEqQ*h32|!PL|6x7R0k;rqfFt!5*y0Wz*yB&|;z)%2<)ya>)k zAslwmP^~Y&z4LLA$}os-|LE@(3Hl?k5A^Uz&93^9 z9^p4QnW$8c58v#u!eyn)1t67yTCu%SXYP?2p?t%>@$0lngBU4`H+5AIq|%BKBej(O zP6c-9SH-fjp|mQ-)f2-$R;V#$+kbSfDm(NzH2J#WiBIiaO~UD>HbQeYbIB**vrC&C z;NW;nTH(WtTOJ=qE$2S2<=X$041G#GS~IEs1B9hVRXq)xFdM#L@}xp)*1tYk*0($`?jU9DpU?6@?7r+Ao6pgesZs6bCkI8Hz zot+8|mL@D#sMDZzl1t^4v7(tJNP`zv{H3-ZYGIx10KzWLs1t))wb911-h zPEUJw{rn)`HX^Xvl6B73Esdvq+3YiEdd>wmXMoBz%YOP?=eaMEN_f_<>d4L zsR&fj*OLkPD|RQTwn!CwTfj{F=P>tB1CHm7?2oHbHuV{W^DrUs$k!<3hpx`M3pZfC zYxYI{dYlwSmX-;qaQ%})F0N;(K`lln=TTpPdgH*QmZ{9mwH3PV49M19zY_uH@-OIq z!L`)HYutY~>Vm)l|KNXe7<||M2d2jv0?NC&vgI1C+Ybjv@xN+Qf9P)E-TZ~;zp_)G zJpacI>;Isj1{!BDED14}`Wm+h0!Ut3|B}J6ymRE>j`8D{NQQcT`ZF}|XEP&y-aljq zGTbqMoo0AWj835s5v_t8BM!6hkwtR-woFULQkW~}IOvmw>+8-4aeeK}LMMEckjXSeeP^GTPv4Ft;{~ye(UNq`-!;|Uk%`{I!{|vjX7sa#NHz_3 zKmCqa(B^?`_zTq>Wz+MYDTL>FD5SC7*0T+Qht$L8y?4yURqu;`_fdFzJK1qY z=+E9ZiNckV)k|i~fi5feV~LTTaa)oGn$TsY0#VR99E>fR2Xgltr-?I;AIjxIwF=xZ z0hRT8E~~#yS4K`fj`t)4C4=W0*u7!Wlx0=~F_SAGoF zJxTOwm$op?!ITh>m(kUc-~`X3^pV*Y!?6ok>d5dUvNm!ZSm}%hM9xFoc3^A(rL4?J zZc&=Hm*kewT%40a{n==9PT}Zs8n4fX{c~r95{hm?j9M>Yof=S+-T3;7`)>vQTuY-i z#nYnas6B#nUJ=1Bnz*tW`V&E(q4vqEes}jUj?11$qJT&mpUZKhG1;-lSppX0i5#A3 zHZWGyv$ZQ6>ah7BwN;CqZ41PkM6ntBv2asAF9)~z@a+ASto*wt`3rvvEt14EUnzoXK$;Wm)*$pf+x)snhGmao2r!$S?s z1;#`15}1Q!aQF%^hEA6!RwRT_<=Y#h4vQE~h-NPLYW{)g+Zn1l@AQ#pAt@l1v9)i; zgqnZ4R-WL-PE3ZDV$0B2PYSoX!%41lUTV7B<)x3Ns`Dj8^M52d)r5K#OQvhFLUT!m zria<_wv0ZMr{4qF=j@A$QZ(L#hjxDa?n-Ni5Ir#r9P0Cd^jE|mIe!;)E?s(`Q{nB- zqX<`6Dsz}b+eKsE9oU?=3Kfe#fc1#$$!jgO7>mtNKzJ5)*Jh&`U&a4uJ=U%+p{Eh6S0hzQOOL=Sg&tV5kH?{oa{%wLFbAP=_Dk-^eaOwkn zaV@LLx7$j+)45FRe}Yvt>Pdw zm258K?J-P<_B2G1a(B90IEqQreJ)p0mFZdHR-vFlA~yokXVBH=(=hqQCMYQF(7r2e zb3~%a?rvZiQS+jlGToJB$?})&*jBekfd*s6cja4SVcyAh1JbDJ9M3h2akp;ZyVAxu zZIreCOy>4CoG~fr=za zTFg_ZpmqGwP2zv#VomI87T+)AlX~9WuHF(lkh;}8wOEFi6&Cs&gAXGff{MiLeJ2yKlh9`*UE=+O@n9D}h%pF!|f5oc?6+;_Kc( z9K@`wtZ?+Fx(yA4|4>=)Zs5_Owx!Z4oqDp!xtJVxz*sqXbjDm}eItrWIfCo%sTST? z=Hi26>Kuc)IlwDg)k)Rd%cA2YW{1na8|tpkv8=2r5E=c zE>yoLS!b-nc~XApR1W}r$Mvp;lX zYRY896$fJZ;A1PgvJGAfG@0rLjKN2C^ef(zOWY|TGIJC)G8%$QHL?bk(T5kxvjU8> zVMxiyQYMeq#I@wBUW~9rie;I3Qic_0i zp?F)(vBqb5-S-=AzGUH(m4sq0TFdv1btw>rhQ#dZN-x;I2uC5q$`=(ty>Becee$ma zCakTM?Zh%hhrT^O->z0ig-yDB3LZ&JSB#zKTS@aeawsmE-4#w2eiH=PmzMJgY#y}H z+XrvbmjR|;>Y%`!zU2y=4R2*aoYz=De1?i;jJ+h{C-vGCpo zbuT#NuBu0KN0zGoc~}wpuPUvox#@U8?D9K_$<{UlQ)=05iVSeJBjvt|3)Vp6yIYLU z*u<}0OsGQnSI|m$e)>{sX!s{s6>s@dJwiH(SGLDCHs5nBvm@uEAmjID`x69QT@k2$ z;wGgPrU@3s0fM~|n`nBv=99-qec^KwksCHWubNLN@IslwFSeTV!~Yoo9ZNr1nAirU zRpEVK#SZ1|IsPn1U3<>rtq?6S;6PpB{nu><((`TXvnb=5nx=_b*xce#IxO5N(0K#9nRwJp2nKnUldQu3%?yP zb!<0EX4+$m_VoX*$v3FvKj-f0N)8hxZYzUUo{3BZ`eA2L1QloTVGEiuqaV+^DvOLX z!3>23!69F5y(5yz_h{qx4s!nz+8n2l*Ae9eA6*BgZ^lxwxQes!iJ^Vnr`+E<+~Qjg z1ihNw#5BLVGo>~{`)}0P?gE9?KL1y4 zmO#3vVaB+se5+cTV{3nLrH_zVnJVO;njY^wRq#h=m6eUqE1Ps(@AVP5iYBM=A#^24 zjPPBaw~1WUbogAlCyLJck=A2T#l>K%NY}G(j_>m-Fz*q?>@A0d$RQ`&J1piV=Qx@u+^P)SmD#PJ;hIt4@q%@S;w-eo30cO0`&M9^}2$t?z^pNFO@}OF}d_K zr}a9Z%2Cy9@5~dfjW2r@(Z7uMVcyPJRN3K;4B-e-YOAttF9hZbvEJjhMl8C*`QXW5 zK7TnsC7;iw-8qHVtCI(DaiWAj7cUZ2vC89Ugp@AwqJr%L ziGOCKk6EU?3IsSa{=mdmd?3%|tdhbfAa>|b8DN4pB2{IIbekKHjIkXJ7?a$xrmixs zM}3a$`ukmwuRYgCX3Xgo_$uH_bJfGqf(+d#LxX9I>$p>rz7KLtJJN2m0#lcGe^FzL zawJ#C>m01!2q<_t<((CIk;hE0)g?dub2tiawUQGbX&UExtNrJ8v!9`9+oH8J$kTnw zd`ku6u7O+CHe0baItX6L^8k^LEe~I2D2GCYYuD1}-{@5SsmP}ov^z&@G`qFm(^=et zlg(@#Mc9cQdFtxr7_3U0;^Ch*u8MPf$V3qj@<@J5;9|4BOqH;2(}5H7O*&nqE~4%F zmB-c=!^5jRHV9W#74oLMh5lmP?B0>qNp+s?I~K>!rS86qs?19joQVA5t9};LL zOT#FkvQwJ29>>YmTWtmuWT$0QY=dhO8;?e}7V#XC%0qvxQ&)$5AW_a!X<>oDC<>u^Y`8!*rmCQmC?%>ZYcR=xXYYN!#QHB?qMlOBkRIE3M&iA6h~NP-fM#Th}SZSp75k@ttRs4+mZCM>xxBp{%7K<@H+=xIFEhA?0x0LjdC_xU>#XZFPe(77 z#71C$QplB4gRp=>qszGTSV^n$F6rn`?_<68PnOZehZt>*uvDTx^&w^KqnY9VVgU+v zW;MC%ECm>U_j(^28?Sub05{w=XyMFb3={8!lITKS@J}r!9+^eN-=c8wQX_vpVCR_2 zqJv=u^)Vi#<)C~nfL*WH9N*;9C82e3pYfTf-@kZa;f`Y|1FwoOgLFKdirvR-UOa5H zKeOsG!bj$mP?KomB)JM`dkLrgPjERtk!B5ptoVx4iC?Fztm^cgOpXl$8?FTzr=CW^ zNyTzcQ_$ap3mjO_p@37k*i4eN1It97$YxkqpR#@t#daQ8*&>N>EeqK?Ra=I!Cm2$h z#^C0-Z+R}ukED2T=g~KFm{YS`m>I*>CrRUjg%C1uJaOX*!m-u`F{yEm70Hq*-E|HcQO8^M)ai9 zD=znOUe_@I%U1#! zgdKg0m2_4GJ_VM1YaU2SZ33f*(yM#vybhazqZbsRV3_;&Bsc!UT&60Mxu`^J;CqsA zjg^buX3vfd6yT(&B;9U4+bU?^_Ho#g^2Z5pSF)R;3uGDt0dVb(`tqr;WX zule-ZU%T2NuAzUT;eI+DRSba`7oACpJc0#HVUa^+^3k1iId05;h7n#xy;#87JDQIT zm7`K*f-FSzk2EK26aM5Q!oL1G`Ypeg8kKWL$5=_>zurbH4l@ zYaM~x+x!FAB09!YYNv4y!j2QGWk{5r zjYqXbs0IxxpZA$ikC#oMW2{r|Ep<3YL+)~K+J3Q^ecROTyu{(p_>|QO)(UyeZ5rP9 z?6Mo~Iq$U82fu4>cpq=^J1n{VQj@s*%VFNd(_`4D(B{J*iM=7lKOCI0ABD7_>FS!| z;Z*nKQNwUA>4M@YkS{?w8ssOMYtK?Mec4+=Mj}xN^;xXpS5zXH?%iF3hbl}%a&xU!ob?+Q&v;trZ1!ta|G};MEV6=AO zUD_jgJ=&&+V;EZ6%_UcjHny;hYH*n2*w0^fWHzw4+TAm-)A_Tzx@cFA?);@+?9}`e z`f|7f6I6*YVU14KR|CI{RkUY9cCD8wH0PXKt^PbrnxU2vJQS`H^0jOJ@igNON(&<$ zW(Rn69k{IW-3uIg#(E~I`zokdmOrNgv5}tc6!dV4oHVib2`{mSy`!$tJH4@3hk{2X zghT+xI)@lLtBD`wDr)w}dd=!Cci@u34|Vm6~D zvS9|7RslbE-}(gS=vRg5I-+wDIF+qR%_Mq2!Pd+5YfZiO-qOP-#z&HG(4P6TJ3klN zG7F6vRmOmTl6zlkoI_rBZlnPQT|D3+su^hDV297|^RObZoYsOEe2xfkS#9e27_}Jg zLAIS&bBj+!G|BOh{}0Grm3W{&5JPEQ~ zgC*2YgBjbhy7s#18OTl?_c2)OaZvG68Ei5qb#yx)Dpq?&a~nq$8Bad&$8BR|Em-2Pz^^-ZOFbB=S)1Ab)-Owc>BrL+sT&xu{`Ix`uFT2P+e8g_bnh5( za+AaY+%Vu$Mc?Qf|Mw=%B%H0Q=Gpa~RG*H3Alu~oXz7Mqf22`b+FdZAS75d4Td%z% zl%7oRMD&o%K>!SLX!Vh9ym$5k+8Zg`VS41_8AWolPwmz$oy$bllMJh6Vp` zjpn&1j@!N-<<_jwnCQ!ByC6$2TuI@kzOJ)VGQbirL|7<4p8@=bs0gI0Jt2ogj0Hl+ zQLsG5a^^;U=QSt7OD2>}*9YEFs8+96lLo+_-Ex<@h%D)j2?8bO-jnmw;NOjmReAUE zACW_EiXO`=S0s)3(ZoJ)k{18C!k~Z;O`|ys5U4+C?P)8bw6bFH6ZAQD&QEKN)FNK8 z-)Is!CS73Ps{XPh*PxrJsFf*xkWNSoJYc^!rW8EO$Kd5eWqsW&x%}PfKm-T4{(nMU zuZ#Zw1it-GLBTkmJ~L;Tf3TVuDRo}EfvkNu7FNdoq5Jyg(f`nBP{Ta;^*Mm2AbmbE zJ(3T};?tK}DRq^|1w81K(EG~l2^9|JvuKVnVRSgnK5PEWP! z`unE#ws#ef2SaC0yY?#jKGPhG<0)p8|GfZ;v)ov|A;#gX|FI4DuNe4_{2dx!D}7cr zE0QOQ06+(nVEDh?dqqlCpe92JzGf!AmiVtu_)WiedCA5~VD;udPbL2^qvf@{Rh$tC zNHhm{1}7I>YRq^or_Jc~@OreGo0~T($zR7Oa8B;rm^#b>-VHb;FF9-8pI-CJaOfHS z=jTc+4R<;_yEw_`Z`xY&&HplrJG)?K=l{X|cOLxDsP8xXPxt#@(0?wr*QRP3jPKve ze2m+vkM4#A?Hp6wB7aQ!?D{`7!~%*X0$zNRRgUtc`f9i2;G&%!F-t7Y(g?&<&=}uU z|J7;IWMPsDILII_j~i>X1s>e~&+R01fC~UWHAto$DZ^W@ubjg2s1Vgo#yvgmR2xU!5u0 z!Knd0@@vjcN$;(}rF1RM1pi7K+NZPVOnH(yRFPqwuKoutRh{TK?+Tgy)E`H7`BRHi z{@>VJvN+@Kc7T8$iK+Wnpe+m(xyHu)sM=R7}Xog>VI5^BU*ih?5)s zRBepTK|;-?oiB_BpYS@gtuxH$Y$ws5oJ1+jf6Yw96ZQu&T!JX|%q|(${yZWMd7oG% z>XZ&NS}rljeEIZT7{Obbw7o**wx{ZMn{!WPC6<7=UZNzLJWi8y5msSs1&WsWeS3D&G9HjX+v5@ zpkmevM{6#8)Aw!0-v5aLx<=zlGUA!hj~vl37Ycl{Z>q;5w@MGWQZyuME*91%Ha5n+ zLWNg4i?XZt1%_v?{Y#oPG(ObrzO8!!W(ONi)UvHP^i4niSG%-AlCjxkwir>o_OBB4 zeTLe6#YSOs`h&gV#s2AAU@)u3;=@Rds`bB^nu!@ZW2B{hIz^d`lv{R1%uG+-J6XBc zJW^B94HW2l6~#@QVZvTL6W%kX;as$7oiC<>yG08ueFBQi@K;j5rw}W?O#8%9ziE)B zN7|J|mb91Js3tLr?dg(}9jpsE9SOMG=cVk^d()P~WHft<CT9-i@fi8YaDR~HHhSW?-X=qx=YdcX8j5WM?g20Ah;O?CnuCDn@vsRUt#CsW>eEX zm#MR+vg~00GUPN#5!N&2E~=eATD`AP01jb2d4NNxR;YDHqjWz!>TQnLK|+cW;r5{J z)zB3t#cY1JAJ=&;H*kxLZTQd0FT1ED6_l3C+5Uy{z^9n#pTT!slkA^%0O4I#ldzy2 zpp%ldv}Ap~MfiL(mir&(PGwfs((kkSR0iS(jOF8cN89?=A;e(KemPNIA&%76$1P;l z8!y4plGSf6*xjM*Vfd?3WSH5YePsLmRP-o%*&9<34+uH&OPwe}@*n7*U zxV~>oH1dm~A-D$*5ZpZp7J|D&a4j4PD@Z~pq;PkFI|SE)1a}EgNKp{nA-ETP$p7BH zw|m_2Ucd2PkMTbAw}L}eZT8t`@3rQdbFNCX92o-{Cn>uD3qk7}Dj6{-(EegVgnBpg zutGxN{AG!rzQ*CZts4d{mwSBf_674kbt6l>CVm-8??K@8%CiW(HCbZ9Z(Mqfyf?kt z#H_lDtu(tYsJ360_Y5oZ_f0SH)3g#VrJD7uQhS}Do-FwI%C-0Zw1FPT^7X78Z*$A? zVgzPb)?b`OlQMNAMq<=1P@d@a=C6x1mBycLp$BDs!grhw!)Y$S`#UeTO{{cNPj4H| zDy;U1G^rHi*9@NA`;jxUzHr;rT>PuIVCpp`(`~%?MH~Knr0;rHvjNpG`XeG3TwPj{ zel6Md$aE&6z>hf=c6{q;<(qpQ@K{Azvjvfw0{ zX|DChMAx&C+(>63)h#(DD~9rL10haO5{R{Ntqx6ylOtS=OlP_=U+aq%q7;GlxP=|M z#D4JZNx}rS9+EycNf{Eurh2!ljm^1ii8k=o<%5VE*zHwC`r581i_DIwhr;~(X7?_Q zgDrK*PW62%(9OX!8UsJ%e52=n=4!t%sGo4`Wqh2LE-y_iERA4$_ls(?%ZhQdx}(QG z)J^{D1G}3h;cM zqsiFi8NoBbqHY-Tw)?FhhPlDJd4fv?(~#!|yyFB8AKJZn$rC)3T_+{p#J{O}1& zu(~S{b67eW_hByKftt)zUQUeLHzH3+b88 zcDWH?-C0x|dr9cCflNBxYRzk2SzwZ3sMl-dF%VTfPpx;*zWtPW>Ct`lQ?JSS5F3=9Y>Rvgdg;Y>#HoW({fR~xXX>GZjyMH(771$beVOv zEp*)y$jy5H^C=EZAt;hp%5~}srJjq4;e|v^pzb!Y)y=7YhD&MN`iY;l*N^J1Uct&4s(uo4 zcpJOLM($=iPrW7!#Qw>s?DSbt7ZKMbYPxJ+3~A+}6)21&Qr6OyQYHnL@G5H1nm<<7 zy(kD@pt#Kf;?#HOyi~_f;b_0ZHe+K-l8=o!<7^?fR)Z(|3j}wQYs;FLPyR51y#1l$ z(@4BRzC5Z25!35e4oy>I(yPhOWG(Ic^~H;ShfABD>X*Ycq-=+~sjqulP2S@ zR4jrT18wTJ(U8Y}rcoIId+T5-@RB-d1ppjwd;yI-zp=9`tZW@N>&K0m(7=;?_!Zz3r)8XO1CKR@HbM0vcE^RoOHx=2cA6|6VW?6V$Ozn^?FkqdU;=sB=}^ z5E;NI(R$*ARoC=G0OrebF4}y9UF_?TS~}UCjpe0(6VGj)*^oDRSpQ|W#3CPd{*#tR z@+qm4d0cRkimF`@fUKIu*P`pI=dV>!vzz%}B!k7w7Fw81h85*tXTeD7`c-1W0Wl5n zs>L(v!L2iw_IcTAMg_S`1bXxafd{muw4d;L)Khep;DC=%qAo5&C-v}c=fFajC`tuc z1cepJY<3=U`(|IZVc|h>!if6@C@!Q2lghZSM%AA6yri2y)(nXVlN%AvYX#*EjXj=t zu2&z&5p%*Fg-1PDZ$U9eC;px)`i`{M#HBwa6M7up@uZlqPMJs&L`b1WL04YzrGvZ@ z(zNh=Hh&x>AT9HCQ@*Oob@fG~0WTR4>f~5f+_f#64dNpAg7+e?J43=HNJL^ZC?qFT z1Mp6)6Qh@qr2Cl!V6ehf>B}`E*&or|j+u*1ft9dOAk><~6Wa6V$NC<5k3~H57Fl|` zoqyHmFY2^F&A74rI&JWBOlxnEL|8+>Z_}u@{Z^~=iK^Y~J}@J)m&#lrv7PiZytOkVl$RW7DY%;j0`DV^;GVk-#m5a(r4zcB?N1xrd13Im5Z*8+A8OQZv3a(d~r z4iCY9k(<>E`>y(DFq^Fb@S{v`n=;RViD6oOWQmyH9eKiRo z2VX=+-^PF&Af?l77jeA`jwh+>lp;+~b{0SEya5J)L1nW3rLxXha=Fv7XYYCp{XQ*) zr0cuosa4U^ycG)jN0wUHEx|~uYsD3w7<8~6ReXdI(I7N#LHk_|kb*rR%wggQsXI;16F!XYH)ad*1O+c}*&^THG7spjnm{I1!NE1hVQj2Z zUG$8|4jkp`K9b>#;@{JS9I6+vW?dUw<@WA0=)1+#9B7j9Wb23-e%pn3E^{} z>Cf9NaD}lDIZQW~e6!Sjo!yXIMMx`qGCMKG^|q9*K=1@~iA&u1wY9nvtpFODUUxh{ zi=wFf?wD($e|A(nhqAap#Zv-X!=FxszZ76g7yBnioVk==r1WU8OgGbyaW8YZb&y7k z4pGCMQuegIrQtMC^Bulg=`B-Ija%&z8$!AGEx^S12RN6Q#O4b47Vnu?I~?Ajd|c z1>9A_Qb=6McpLj|iC@v!MV<8gx*}|+MdstgOrYVQRl@w7AmoN^N%f_uFjt1)Qr?L-->hF z8oj-q(AqpYg`1SjHmpekDRBJx)PR}Qo~nR{Qi#vx!NfCabJVc|!V!EOcNP(3%V|DMD}L0gxlv%ipbD(hnsxzJ?R5RRIGD5Ju@k5RE!8O~age8W4-w3WmMx4BqSv#@*H?AfcQKuhK z9^7j$Q4K^-VvGhu{Jo}YuaN{F@re9Y_12mUG8y^(ObS7*I(AmErHWUw*g`aqgSH=0 zrc{OFpMm1!Jv>y;WQsttL+az5-eQ%_0iq;p!H@3!DBHoc4EGd}53V#tL*X2=-MojKgnr2HOwbg@J*uS#p|*BR)Ty5d>ai%%B7rXfom~&60&P=tAg{ukK?1zR zJ^in6?Yxa>SvJen7C!=XQ+@8-X_5Jcm)o~D9y?0W-z|C`le#K2`0v!;WEwK6?HgAw zrbp;*`-{{qMDCsbx}9MgD_WS3`<4Sa` zb{(oLph(mgRX`m5UJ`vuSIN||;>!n{w8C2ZeKEz#NmW{Y_!JlDm9OHP#q|+KRHnpC zOhs?Z4~fjAWwtWh%KSQa1u3V7O%GVv*f5{|sc;z*7i+Gwn>xLs_QSx!dd1G(xQj@2 z2s>mUioHr4p&hJ{b9OGe_c1CJT&eh;XHkB5l~^jUzI>jsR#eG4^#h9p3xQxmA7kfd z!s@o*3}#~C?0-Ou;7W&wI6e+bdz%!hfvvIH!x7#lDo`q?;~EA^v69&jA{o;Uz0(%= zybJ{@+l0Ya6&i9y4H~bu3}GMp0hlg)YHYvC0nSw_7YpT_J)JDkZo6f!KLV8-@^HHj z%R+0*7ZN>BihKLTj1NjmIVe&q4&2Iz4PSlNxz^{e=)zPd<{<71%TX-Z;`_3ax?#7= z*ou6B9UC+wY-_(Bze!4c)o(1ZWh2k);^FUhxwg4j&Z-EI&>u9C(oQHYU?jh`x4Sx| z-=?3pLE@wd(X9=M|JKPmddX%dcrvEMwHlaFcY^A~s*HV{2d@&*Um0>`JL^pn_NfO+ z)Gd>qzBy)X5}1JGf*R%c=rTrGmu7*w12(|0epOL>`1+Ow&9L>S7gK!~Y(FEF0pFLKZOWq#j2xF2{e{>a z-V+~Ac==Vj9tpQR{l&NI&7Ssgdf{^}pKLfpnd0Q-3=*BfWxhpssCE8rbFoC5Vq>#B zCVTyuc*3~EM|gMKD8fXPYWFw3M$KXa=%b=!S|J9GDu~-4id0sv=oNeXZPKJEnFW0; zGYqH@d{_j4)uDigm>4iJnIANNftSQ5k95lK2=Bo!abNbL1aOT7`Hh!14IVw#NqMXX z0Ad>T?d|d|BQCd}v6nDuja@!N<@dadb{W;; zRUP{^!MRf@g%A!pnQ(^?LH#Rbu=I8}25BD#>PBt|xKaeZuzA8E%E>9rwjO8jR$Thj z=8EnKKZCL0>jWi3N8^|{#1a4U{l4S3P`cTJr;^4bOsC7bVmmvq0UW{ZhtaCA(|WVu zaI)gx-!bpV``HAncJU9*9+31F4NJ(U7xw1E)@{C~66N zCqr&EY$y)SdUMqonnIhY0r(cJY9niHURL)V4v|?WeR5vgA& zYQzA{%vIXHq&}{*rg9VJkSH}|HL*No=q08F0J|XDtA77@7G~_iGXS5|Oi=B`diR(@ z$m-C7g?_3==ej~@GpbR>#%3mdNsY9q*N`vCP4aFn>Wsfsb&{TF$Tz}qq#qBr@QQpb z7yNz7bc3{~>0u=|-S^Yyc&wKD;yW$rIhP%BBRZ9rIcXV@=KhH&G4b{Tg3~XU@Q9qr zhdftLBfXU}y-uZX?xpn+m<4+NwrD&byk8J4&Wq}vahPOh4h*JpsqbMa`Td;|Fp0G0bO^&30wC^!Ql2tBemf!x0+QeRS8_pve4+CF z7#J{igV)w$qJ=STlG*{6Mi{VgG*xw8qS8gEBO$7LbKyGe`bC(p&AJa~n*9#ad&YdCGFPtPahuYH5_C}Q*d z>i4dRS19<95(MC8@B z?OGH_liDFl@Yty;1Bq=_u;M>$R3{g5hkErbeNL{hcDF$>ko}2J|0p%Qo236 z%VGURNGFyImi+B|uVwoh-BtDMPI= z-TegAMi+Wyx-l2{;BLV8=55A{lR1U%2>G`6+A{8b^~1+a z_3yQN|EYxb|8l5Sc=yN(s}2u;sh!B4)5E%y(FbRAmOwG-p31{JVU%1xxpsLR26cWA zhhnN;@82r9fy6A~n~s(0Kyvm$m$bW)`2ysDQBE&>3g1TbZd*E0?b2uh={BxcbvDOi zip+|%Iw9G+KjVyN?CKIX?8KRX&$Yln?^2!_yRf&tWNC4)}l*{NC?IANU^DR=lf zKi+mWCMI%(73sd!=4$|U_8!TWpz1&R-ZAPUGek*|g%Yi?MW4Zm!!|$=`YT6P{vvpw zhrhG;E$23dPejw+OY`1Xe1FvZP)4c%Cc)mSeNy9}^jIpY9YMFrs>QL{p|By>0t=i4 zw1V-OonNcVh8mXuGnW!0F_Ua58EN^hm;7;6ryvN4O-T%QN^G5-asYFFM0}_P^0#}x z@s+MuZ}z!s^;O08{2NM|qGPM9jv}SEw46G7qfs5{0#2f{dv#1f^Q8`H!pBA~9<5D; z6QGZ`J|e+e{ewdLK$O)DV6IyRaw?83Ob(Y^LKmd} zNqY5QLzUf!m`fScJD}#Cue4JC2gF8<}R3misb;H}WKC2ReJ^MI_ zfC&8>%zDSEuzu|V-j!fEj2t#T5FizJt>PSz^(AL_&Kbp8$}t`u)kCDP12XWo-XCs> z>JdelN?m(jO6|&=CdwX3&u5SxO{S|jvn^%lHo`M$a?j_6b|(bZWF!O(M4KJ-+D}7$ zf~m^BV3EeP;PZ_nxP6T@On8+Oj@1KNR#*FLaW>v7*Vl{XK)yZEydpIlDXl7|!7S_P zd&^WS9mGKxD5Z-j+^+uwHYYCx64^2!s}6 z%RUOCGU^noexliIaK6+kwlR+ zz86cYtu?hG0y;HfBkW{ydTxXq&WM$CN%I zpAcrj7V=sCag|w${*x^ZySvNY;BfE#ZArNF`~6dW%Rw+@fTRUJs$^FB3f<lkJa?n4E{?2!KB5g(|wqt%Y*R|BA32u&j z_js@hmHpQ%RDA!BN4$ezybZ8v4u9JeQoVu~D5P3u{Eu?oGOr4mC_utuD*aP3#;9?h>_`W>5_Y@W|!?S;J?b}^ zRp<#HfEv@e`i^893U~@Vm$AMg@8r91xd}a!^6waAmaqz~o8(yNo#Av{6zML1rBq$$ zmYy0%a(2<5CErHHX}5aXd19{zBnLzR1)-4B> zsnmWopTn9>?zSahtu4gO_+K9G&G_qA+H^~Ry!p4%Bi>!roBi6 zHYlF#Lstr3nUWMR5%-*8l3nMgW)%TSQ3({!iGVOMAt3=X)2j0P(Id4Fcif(&Fx=d2A`9boVy#2+RWDwBKK!swv8=shP9d2I6L#+umiMC<%Nh3RruOebmtJ*H%*PQY)?!Z;0VTWG%QnOCnjiq{dXZol#pkg9q&WjMutT@%+fD8sHY6m z=Bqa%gAPS^IFB<_U7yHW3*eTe+(Pyr(Ru4r_o0!YinfkfDC4wwiNU7!jGS_jr=*7~ zoyPUx>U98p2(&7492`0y%C3wSBDZu1F-jm|BDMgfpRNaMjvTv}9s{e}=gMI!u@^}# z17tFyv*T0}#zMO*!J2d(tfDV7mm-&hE({#@XM3&u6$iO?Bu>IRrHi(@Kk2d>H^>{; z0Y`Y*ScUd9(In%@O6xiOE`&I~1dL-a+h*3W1W&!vj44C&??zS* z_4#q-Qe&>=20vp);_<|Kf$}yc0bcr=qno-nQY(AjSF7XjxqNcXbKg~3F5k(v_10ep za+5COIpKcE^~dB62CVcl*#7^H1-Lt&-m7%CZWl&=sVHEuubM1F&r;_^Tu=y#qmd1Pm0ic!7LjJRJsk*7Fjtwu(E}}hBoHry&Q~ks&Gu_S_t~@)K)m8q%+a;j**l0YwvibbG z=&c)+A#xnPcv{USVT13t9L!^|=iPO{{xmwO@b;!?8G1Qa99wO_s15Q<4%j3kbcnI?MIZ33u-+iM@p@ZndMD=JqJXm0UEdX?xWlK@)5~ z^8wd@qu8SEmJQ)I!JZv_9-u`hflcUX%b2qvHlD%)am;1w$LT-mg?P@h_-y?oO)PSC zgOjT_+T!~q55A0O_j~N0<~p&dpD#n3C*L-eHhLZz7Mr}*)=3dtJc+-=7&k(a)!Tc{ z@j$I*SnregBziO%;k(9Y34_X0Zn`zz#n!qzul?DTtIIW8(_#~Js%{Ko`n65agcFP( zzezGVb`&s1M+~C2XX+{^X zYOyTgF&BAd=FghGmfX@vZhleE6jID0*zytU0|jD6yfSqA3fMHsLjRoW*pZB7Ne2u1 z?8UV>A9YBUMb3}XzPkM-eNkUL+Y1tLF$X&@l{OT~3+(GgM1fEzl;T=wY34w>pO+LC@=YM8ja zNB~Ps6!%AX?TM%!)eYQ;(t$IQX!Vn#i$6mKO5>3ze!i2na{I3ZmQ7w776Ov%qWI;H zSiK&~Z1>=cd$>(y`JBO>w2j?SMhl=7!-v8SBfT*KHB*NJ&BuJpex#R5YjWFdT9jAa zo00P@Y*&!|lGCBy+2%4gD$*^qh0o}$ap~VFp-V*SKs#`br5W>mHXPZGGrvy9dK98b?KItCvSeB@%im9*o zz%{2Av^4eUizQn<;I@*hx(M=tG(=&xZ3kJLMwm2KdLzK)luV3`i6))nM-+kkLTadC z+1`a}5r59n%C;~ZV-}2%Dk3)^C?sl3birCE#G&pVb_DASj6DYq&v5DK-ys7}N){!E z)5TkD(Tv+9q~4EYtp@Vcr{9aK4RWO$Ee*aNU{@XCjFO$q zmSvO~@Gxs{yz`P?sPB&UxSVbYzNEiUG&LC z0aLS5gS-TEv7X*uj*{6pB}}^W>w3+p>&l;JVVq${Izn!@6Ndm=)8~UGpeO!4D*-dAa>b z_KUnUJUC~{rWIVO3__H|jjX;=`>hA%p+CCW@h7z>&&jBSH7$G_MvXkoHzFnk#JwGW zPUhAH<(d%IzTd!|2)N64N7zMh>$9*+@Jz|$J1~LD*Wy~8s?gxytgqFeZE2u5aVVt1q0T=@Feez)T6 z{K)httn@!~*&7l}t+Z(@*A_{Kn;bzn=ZTe50mB}vZOdY~Fn_eP#N!zSMLipeU^l?i z7sAdVEB76Mdco~EIb9;u4wOEL{GOdgvcsn2^X(QBeHCRKitGZp&oXBpB;K!P(b5#e zoh^3v=R9_Ha!ZRI*$_qqD5Q%M;2VJ{cXHklhhQjcoXGW}v&>F$pRop>ZYf!=HLg%< zf>l*}s+Bw4!z0MJXpSPutDxGKzE}LdNoPgx-L^(o-c#&YX~H8pL=(k8YY3q!?(%|z zAr~P_&FDpsRBPOhxXu%p&ha|LY&Yj?FLkmXE3m~`|DJf6lihQpO!fuKE+|fRzv4W6 z5y;Y?jNHDy)dIT15)3)2Y!~vb?1Vqu_piF_fL*=@g2T!U6yFxS0{4W7299)0=2~#a z!iiUOtFR^By}E6JoGzU9>Z5kwLhU{*i4qQsU7Yrr=1{pRv@E3qhe7_;C%;o$-_+O9 z2kQ_74Naz8T!~GbuZn{hnZ$84m+M$Q23iE84p1-I#-pm`GaVsdbt zzr{A3>Nt>){X7!V?sR?1ERps&>raGzk*%R)=~70rfXUiB$e)S(IYBa3(}~+Ybtl1% z^5jbsf=>&@d7;9|bsn`C)@u$tJ(gw#EiFUs_Sdl)=1f?FEf!nlemrhYcf_!PuNqJf zaXze-mG#Upv0A{*3Bu_O^ZY3YwabS<3fNh;%>K+FwyY?MT|iQ0mI=RrkT|4 z0&IA8irQJ|vm8lH$$3?-tXfXG{m|iQb{VFoa$}QXoW!QbpxhBTq*aIw(^cryi-Mb~ z&}0$w{3tG0i!H;Dy5^AL>VU#Dd72PsUiHZ8!iMPD6Uvz+Wp1hrx}T~!JlBVE>oV>O zl{xiF>JMFm<1{X$5T}h0>#$g#wuEO9CmMp-(^;1&ERyt%x{$pXiv~z#Cfa5Gl>V$> z%qc?T}ZoKe|L)EcES$=f(7Hp;L1G0l^^(}dPQ#2zcwE2;nHDLSHpNK_NTs z!MzR@0E|aIlj{(1$grdA;IrE{njqJ>(m#>&ZCD4x>Q++Z)I_%`}=`DC}5ti@&WNF%r69j!lqvA5M@CDa%w zTZSg*rR6nUdl@rY|7*4m#+NgPb+53 zo|e5>5xN?#&7y{L81?oK1|L0VwJviIyHd%?M9cVNOxBzJcsWaA(RCb$Vg%9~oGn#9HkKU!Z z5y@11NiQh8Sy)QX=lbO|n^B5MZ{5S0dG}yKTADKc#L>=lX(u7#vQMLWvbgG7G;FEN zFw{U8-H;P`bm?UY4gOB;!O+n>!JZhc3+(P4ZXIyC{kAE0lbu+?9uxp-upHl)T@H^# zUH{3!HlM?$yW2*91T%jSJ)Q_2xy$`{&^G$E+u5|jeWLG5ww;c-o{=8r7Enm-npi$s+VP;pLowS~B#|i*Bi8srb?GaBvedDQMT7$ z1udYb-{SdF#Lf@i#MHD($a*&GmUVhSXAbmtp0h!0J(hfNe9@{bA|vF!+sNwNJ}*Uj zGtEEM^Gd9d#w5$#9K+`}F?MEYWon!PKf=1%{qNj<`Jh$`SfdOV>}o21kkdK;(6cr2 zd5gC+WU@~I4^m&|8k8_lh%7q%Et#Y22j2*XKvSMBlTauHzBts7LRwXq(Wf2ye)JAk zJKn&XoE@&q5MUj@OZBW0MB-6}D(vv{=>R z9HR~SqJWHHX)b&^CDveQUC}aq_Mu%kkrBQtN5?-+&8-#?zo*XiRZNQ$OLog9>U~22 zqfxj{o>KGH(^#%qpj`68-=#>3aIU$XB@m8!C7|~$R7Tu3s1kFCmORA1pn2S!DF%U|KpnLQ;a_& zZ5s4<@A+o*pY&ytDj(l?d0nhN;QkB3oXGIY{Z(;(-3Lg83OP0^KN_#!3I7%J6%to* z(WcS^5;R|cV*Qbf$iEFJgnF%W{Hv`@p;;9vEjeA494$FxI}?zcSiT_n_zVZ*{9=dU z@?RgoQ+1yW(^esr##+VX%&^15?y!WwUt+O zwm~!S?a2(RDMIQzBxT2+a#CN|Y#2D8p=Z^$xdy_g$501`q81L$YKTcQx zW)>S;;+V`LAs?N+$|wKo{I~7vcjF=?AbEKk7ncwp*SjFXa0piMy3qW4Q>J=GDneSk zZ4Vq@5NuF?d`7@{cLVi5Nu#?Dx`h69gV+`_?tGVM3N3uYbs@$m9fejtw=V zopamLzyFyo1V;{Dpat4CIEcWpFb_p+W7>I$ynRf4rZwBGe~*1Uq||`MF{0^6%KjX` zhZ0GhI$kkAag$#+8x8=~--yziRh;q~YNV@QUi6qAIR274Z}^uOQgrQq5JUdQFpBSr z20Gl4g+JXoT9y58`=Kl69k~pq^AVGhoyrR$5`PYuQac~Y3E?_m_`kdM=dSC$mi)y< zLq!rV=ZrY2e^{Pl4AgU7eykJ?OR<6iyHOk=t z=vW791~Zcy;0)-j2o#9clR`ff3uF|YtvIX>v!-e@-0U`{eod;s_BD-zB!`K<;7>pI zNFDXb+3^L1!1epXL;S@vUjbjT6=VO(h?yPRk(gGY-2HuZ8qdYys)l_L;>zxL6`)DQ zr?EDtYz>cp^11T^z*d(lDim{B&v+OyD50R|avd>ajB3huKQ{(p?i;j#dzL!RMsz(D z=D4o1NK8oFa#XdQdUk&CX*mc@+Tu(y2z3D+q&-X79OaZ^^o=5ubQXHPGfY%R!*T zS#m!O?m5roN>scWUi~EpQ0EgB-A*x(<`5(nN)Y+uQRJd=@4d+ZY|YER!XCdh`Z@xr z6oqDp|7|MW%B9NO*Ne3FN!0(~-y_S`D|=dKzD~^)q6FR$kVqw)&#Ofj+#)6VI+wGa zto%~NMX_oWavjhh8AUSd%GQq8FVeGrvM>`8V{QqfIAfIAaKC8{_yUv_=R0L0^u_4_ z@sfwsV`I<156J&EaUykemFcyQ?&NHC46)jNMI}ze?u5_CscstM;K=y1qTM~w(|NA; z>y7LOyfT2Ii27p7l!0|lAlIrTTp-G1xUZ=XmGIUOOv zAx?DR+H{(q;aadv*68>SKfsw^Ha|a9%{pz)5yzZ4_LWVn{bhv8ys)l_rc`R>qQBis zH#8O7d2Kh2mH_XZ45G6818n-zw(s5ZjN`ZZUA60wAUo`Nbt0P+*gMUQM)l&ZHJ}4t zr_OauS?FpH=!{uqc+z=!rzx=ilJ)ze1E>-&Z~6e?l~Uw5!hrPXa>+B^?l?Ko6!{hq zW<|iU4U=-U3i%?;p3j<;!e*O1q@DME< z`zpgFC(6~WU_vTo!?ZsNmq3rXybL!Nt)baC%Qf zAGu9^c@m2e#5UM-3zbtQAx`skz!3@PfN!b|bPE(4X~}Y9ezCw9&0V6+t~}H^ZM7q= zSzWeBg$FOVrp~etH)7(BIV)9hgC`!R<(++*UNa?cv5A*o0L7sIZ zqOxDPe1FR%N^bFPy0fJ?_ql1P(b>wclKh}{{b8La1rqO^PChtRFd{L5KQJAhesewH}uM_dGI3!r{n5U(r-u3J*Z)fm9F`+LR(b%f2 zOKbFyu?3ad=q2=N&QVUc^85=P<3Y5|;1gF`>Ck3K-*edv=bjRIE{e9C;`SoeDCDrL zo&as*Eb*BBN-TRcby$zl?NTe-@)O3+hJBg1!@(Z}9Xv9_&ua_8XTv}vXP&DfxuMiY z+wwpGnf;=p=^%&dMfjZ^K_SC%Xyp@%Vh_n>weinn8W%hKx+US#q=$8vtQNiE&hjOz zj*pPq0}8|k0n(Px7EAiu6E-}qtZW3%vwNSq`^VZoHm73XOm2Sk8ce$2A}6LNZ*tUl zeWr5p{?`jWjI|^Vsu3~?=Vj+BNko1{mZ9M~Aw|Kwev_h(2&Ay?(u``VG?JYq)b;yP z;qMJzo7@92GI7-#;|zG#!{v0P9MRkVJB^@%ZRe9C5UK2OFm8-&FGcZ)@P(1AZRY*j zZU7Z6Ec+q}GwVFjaPp+9Q$8bqhjeS&&F>B7gve=mlpD|{!v3Y4+##g!-j%uHw4|#b z_DanZtUP#PCL0rK7A$PbnN79Jt>!DTd=tC07h#i0*g3cTR8Vbgm&c%<(?b;xxbwmj z_ntqbMDZT~q+>mmA~}dE<{ovhG|xl!iy2&jdw1THea|x$3)UO=D;Q=K{N*1imqxFZ zZ{-tM-c|$>UAV77=FFIy;n{M*PrnF|TCC50ZTu8+U^5oz|*> zYZE@?<4i+pH<7@4F)`3zBeSDCTPlsrC!IHqZv!wm4PNzTLJGC_14I|Z9I`Sx`~66l z5Nm}yqRnnw!kkH_k~AZw_q6lMsPyOA#i>qEm()gY{X1D(O1UbmWow`fd3xEG<%Nnp zWW#`e*mYt{$F5lydZ<9k(z|3qbboq`&rS8f?v)|?{dfn) zOnfUNuoV#26g3t=_Q>p8<^G3I^^l+h+1%SWi?YM-ty_g6QhMIq3Gv&eFJgC1f(mBL zv8+ZeiAoq){GA0@6?dQ6%v>*Z4V*R;YyKEB;AI2?PP2(sVm1MIMLxSe;5XprpxV`r z?E@y9cny;#NYto%w^C@7DlE(x?7l)!(5iU5_$6r+oG_hPR7QGrjeScMLq~KP&TGHz zXB6Mu{JO2V>Q4TaG2O&(&G+D_CwCjpQ{zB3?EFUSkc!K`^@{t+jAz7Vg_wriBiU;= z{j;DZ;**V8oyop-AtTjEd_5Y;V)y~aRvj$#Agv+we^L4O^B~;BvqS$>R0aqx>b{Hg-_{V+^X(#%(J`K z78#bJ{am6}^RflvI9<$Neh~#gMhrXSUiO(J5@x?7dfE~RbI2y?!nO;4zP=o}{BeWz z%?25>95fU?_J)Cw;_?k{RaQoPVM@;kyK+6YUlAd}>!O<%_a^&HBbrS1=S=9xZ)Xpt zYD+OFt-`7cJKLf~xgkF#g5WpaX`&spEY6^ne!#{#7_Wn>4LZ-8ypY?2HE!%8vv!cA zqd88aQILf}8TTuO*xn$coI!j{zgs!(Nz{tx0?)te{7xz>;mel_l~n69MWpx93CGkt zT@XaG#I>i|okaFdp0)w~^W(ncY+q7<+p-?Tdv7i#^s33!p`-dIX`O3no8)a5NXqni zU{>9QX<52r75^?Z-^y1KigIE%>wbQvxq4OhnHgymd0rhQpRywU_DSa+&f&)-I-sXO zz5NZ|i_Uj5hxL5UJazV|4bDD;B#mttabpq!=a)8Hmtmoi_2hzktAFB(w!7jOp6LZ#PsmmPVrkN=<*~X|;S1{zotUHUQ?);B1Pc9H%3C(bNDtA7mG*;{8KjmY zMrQHp=CRv$0b{e5n&UrDLST=|F(-K|FIC9ENC#_;$aqyM#Bqz1#xKLX_Mbo+SI;uY z64U5X)$)`BStG~2Mk2wvc>W{V@#)P2KcLYI{$&GYuIukXpttam=OD?{KCKHbf>e{% zs--L(Kg&TDMUxsdH^)j--=+uO z=S?KfoLI#+B22`PhTGvO07hEh4gkoQniSC_7eHdKZ{#;}C(zr@=4g>I z7XK^s0x*e>mFM;LMlj-hb|dx}QrT3kNxOgg1jYagpKtvmGDh5L_lfCY)^Q&3)A%;O ziSY#Ml^yiP@z8jOp>|5EROCM{JW_?Jt%TgV(}>emIfPuxcpasntIS|3&fH(|$}b&~|eOsVNio2OkS?U2p2T-d;49`>6xc&%TFe=ktbk%rEaP!mkD5-c0+^ z#4jj{`o~bVu^3G!&nIck0uzP+E1%R>7Wa;&3R{8Kn#KT=@Y~NrbaBJ}k=q68KQiGI z0n9-W$H{0 zW;?-;KwOFA;JtpmNb{AT{+H)OD2KC@8TqN2?MA0BCjL)i5EOi;V$Kr*=8ji(-BCr6 zz50s*`9T#%&ff}}KZItC8>{%2?QPa5`v^e~JZl1!RmPypb)WgLowHd4rE2?}-da*H z3GTkW@!wjs3mgpL<3%{Dw5bWS?iCU#E8Eb+no(mqK*-8 z^oSYdj+mCK&aN-ZXeu9R|HFX@ep^DBu512{a~to*G9pKXcK3JSlgBazt7$Q;y#>AE zApeyg`74+~UB8O9cjbXQGH)sRGFiOWNlJvuWCL@#(@(S{C>`QFbHB&)CAaMu+5@Xn zRg#dxb_Ul)E;s5GYujwO z;=^Rc1V_Z14g!Lg-GGYd5^bF(x&x{2Qz3jVs0{9TV;vDSj( zzqNOrQB7^z8c>9b6j6%w2OLydR1kqf6AW-Df*_$8K%`eGLTCbt2+~10C`wmKXi_8) zAT*KQr6&Xg61qq)DR(EFH^x2h$NO>Lc=x{X##z6TvG-nU?K#(&d+)jC_kHYb`DLbV zJ5Xsjmy(NXi9%8Z$n30wkL;Jeyb=NH5~A+fe7GZ?|D2*opUbpG1%R*X@SkRyrmg)X zn5Yk#+J!DD4@XVa5e@nvfT~aU5oFq|eN|s94ZBK|JK6#uToOH3?9T|FN&wPGGMp)H zmQtkg_mBTmWTz<3WTA{#A1O>JMlEqkx>76R3cYtVN@4tX2+^+A$*HUx#{0+@nZBCR`yR-V3n@?2Y`U_kje zHL6K&N%pho<6!#2H?JPO+pvow^;Jfi8G4qO1^Nn(&xPj)$YPd zcnyT$%Gi!KmM8zxP`=Evi=jMf~95Ip{OCo*TaEBCXvxyQ*uVs zfMqaA&J9koxyKU~cXLM|NVr#_-%`apS5a>!cC`{4J>|*p)89B$ zwQjW)>;sb6M%(b$sSr^B;rW7D+dg~E3c;b-7a()*CJEM5+pAFbQXQ{;w#^W{b8+FK zdfs;Ss9yC$CZ2>PQK&-VVv#H8IaK@p`OHs9d{Lsc#jl?m(F5GuDOU?4Wm3%_vT>Kl z)-kfHIHaKWz$MC=ULLPx1rzc5$EszM&+Wq5c+#UMGJ~Yfb4mLvr3HWuEr!*#1j~de zyGh~5Q9uoB%rWJ3uQ;Xn`5czF_mEmk?nd31LJ7;_8_GYwBTyMEX~Mfs*cxf5Mcew# z1LZmvf%Clgcqv^Cr1V{w{Eb}|NC#h|4O46Sdeem>_C%8<_7BXFT;xldaSRj=&1U&d z+)MWlj6xJ{*6^mLusP0?dh9<@MAAu-7R`G8;CcP=XP(z*bcF4zoD_TxO`#c;pt5xz zND|}Daa_D>Z5>({9(S@K`Ddb6XI>63P*YNZ1m(JwNcXtTOE2BuFlGU{`Zq7yvE_kY z4*=p#3Vsnd{9jo%-=02W{w#tnR5kb|>ZF4>_wY`~XlgH;5LB=|4LYUiE`dM*@Z{W3 zaTXVL4vtR4>p)-OQ^qFH^e~Pqiv=RrW*|_WZ$VFgrc(_dKNS<(+BbMf5HPV0 zg-~YQy!&(8O{6^2lJM>{{SkvXU8D}hEL;zgo4iB3SzRgT6zXwQQ>=61N$QXM|7E=` z${_zOvhg3+)?YKCq4}SPoBd_%e|lx7>#zbiRJK4Ju)4{=QJ(HE5B}30{L5=6q5WTs zO#gozzb$~TekSTOiAJ{Sd1MU-4fAhA%Kzraz;-6}z`u(x-Qvrxc&#zi+yr>NFos&1 z0s^6F2gk?smIQz+6L?oimt&z~@Bl)&wW(7H1ieW7RV#6EX+H~)U4q78LE!>Hll?(O zwdW8}`}CX%%>2FZ>>w%o){9|b=lNepyDub-! zL&C?H+m zIP3uFJL>*umS!;A+}SFWJU!_N`|hbo?R}GTlvM!)U_)`4^~TWnW(}a*WWE^QokUH9 zrEko!X9h}--)0gUDzDC_1k8*;w3X(u*q$vDze>DsQghey0QNKc9lk3hxUb{HF9+2t zen!c{nx59E+Doo&gGpR1>N6#TwpBaNCm8SjF~c=^hVlvwa&a5`Vo#13}g65#_T z`px?rW;Wl#Iv@P($dYNt7zuKd>?+R%TTl6Yb8xz>_MU*SX*`&P>HIND86Xv{DfV&v zz30*bj@H)W867;-SUbRbtL>PKjaLeVA!-zYJz9BR>re=GcZe$j~O;> zA9GuhWV9$HAqZFA2yN7GWS8^qzTH7a&D)Qj^{5;t4PEzIer;IontU2@;d8c38i@Pk zo?NrcIQi+#VpRGW>&X~x@+s`X zI-bo;b*sR3lU445Zh=kT+LCP!-Hz6X%mfZ>O009>B5$- z&mMH7r?syKgFi0(iXg5WcaJYC1g(1jBHQg}r!rdHP?dXz-c{%1baAZG=?t(zEz7^T z%$V2&tn4Vh1%G>R^dI|s?a4c;Ru8|hl&+sWVa3lL+LD;PA^~ETgQo~=OxCUDT*f1D ztToB%ngw4}Tr;w)2~DtAIQR~9n+PuFS~((b2oZ~`_%qiI2}_%_jrP4iXTxWXQVdmz z!=d$BonOF?S2!=Q@Pu^YIVpD+u9dG-!F@Z5^d`g1)O3SXu>vznCJ>39F^rtf+4kMD zkA4~+et(BJZ4Z?ASf&a?0uj5rn4MHW&x zvcs4_;)1Vj93)P5j8yTUslkSq?@_@^diXDPk-J$R{GGA57TQMNZ4hv!Uk}d8Gxlg< zgs8EK@BwVtxEfQaxTS*#MPlDLhXgKwfnv)?i8*=HwR1znnx3CT3QZk@E|g`-Vs3tL z-bm@H5tK|$UB8>%lHAo^JruD!4cufxNSgQv%V8M6$LYOnU>srSnpLRzm0w0HS?{99 zA9E^y_TpA-Q$bW{|F1y4&^R6>k-Bz{C7hY}`!U++uK7+^!SNz_(ZlF6N+AU_5^t$% zOf?Fsx0op*yP1YfwjH-IohB)AY`X7Lht9cm%5P<-4sekVune1GR?Ds$S(%YCC43p4 zY)njz6zDNiG`T4ea{!Z8BobO4FGfj=tZg;(l42IcPg40 zuZ*Tcm_C{3wiUZZ3t|u}o2j7vnG4*uR!Q~ySz%pQQsgbQ_AgGCXIQ=_?!FlCsh<4^ zK`)`KN+dINFzGWvwZyWi%~*g3(y8M*6|HD}evKM<^rVPp-PK;GTh zoMrc5?CJE3@Ho~XuSTia7xAfojVKA2h)2WOV3XR5h2A!yPehLKzF)-}k!YwW55ve8 zN_Y%k4&d`zu#q4f62y!ycsgT5K4^*&8LMyQSQK|QNS3basPB!35w8RK2;^|^HV0#k{0wHf`T)IShlcp zQ{ibAff|k?568<)hIHe(Qef(Zo2@8cZ~O7G+kKFf+-IphMk8lBoC9@jVbVGkYOY}` z*AP)GzLY`>ppE?Wzj=X2=LSp3Q$>eG1BpBGAN;-B7!3K){Vo>ZafT8IU)r|j$e4_3 zXMfifcfVKGhC_8$_O^38!mURb+0sW|D1Av!fs)~<=rTKP>?CqlqNJb~K*k2fQQ z61(p&tKmMclnEsUt@vV{f)(7UGrfBme%;Eg{-$)hUp+2kVS|VV%wIZn`OHeAkw|(J zql)L?y+lboq&taZ2C*N?+ubMYLtyR6R`BlmIow;mz04t)Phnu93xbQ}V1}%j8|Oo% z*=m0~9M}^`PPDEauB=<%oH~s#$?0m}j^^R3sre<(VRbfl8-J1! zD%2jm(#^>9>3QUf1>9n+o0xo>68kt9;dej=QTh&K#IS>N0npFIEW?i-nv9lpVxUp5iJ&_W~NNk!%Rr`C%hQjU}mNl$n zZnrH<*L3gvuZCzdRSb9*sL&qp)4-7Ed6u+Z)EYE?(xXMaQQ zb3QX*dwNam!i{h3$)bwiUu<6U#sEg??Wx}LQ1r|BIOSA7))$k&KXhC*p-oIG>WI8; znZ+&VuIZyeatcjlKO+uo#{jL+W>hfZ None: + for statement in CREATE_STATEMENTS: + op.execute(statement) + for statement in INDEX_STATEMENTS: + op.execute(statement) + for statement in POLICY_SQL: + op.execute(statement) + for statement in COMMENT_SQL: + op.execute(statement) + + +def downgrade() -> None: + op.execute("DROP TABLE IF EXISTS bot_message") + op.execute("DROP TABLE IF EXISTS bot_channel") diff --git a/backend/app/api/integrations.py b/backend/app/api/integrations.py new file mode 100644 index 0000000..a6d2097 --- /dev/null +++ b/backend/app/api/integrations.py @@ -0,0 +1,562 @@ +"""外部接入：微信（clawbot）发来的消息变成任务 / 知识。 + +## 一条消息是怎么变成事项的 + +微信里发一句话给机器人，clawbot 把消息 POST 到 + + POST /api/v1/integrations/clawbot/{token} + +令牌在 URL 里，**不带登录态**：机器人不会登我们的账号，它只会照着配置好的 +地址发。令牌是 32 字节随机串，库里只存 sha256。 + +正文按前缀决定去哪个池子： + + 知识：xxx / 笔记：xxx / note: xxx → 知识草稿 + 任务：xxx / todo: xxx → 任务（默认也是任务） + ?、帮助、help → 回一段用法说明 + +首行是标题，其余行是正文。首行里的 `#标签` 会被摘出来挂到事项上 +（标签是知识的主要检索入口，手机上敲#比打开网页加标签省事）。 + +## 为什么每条消息都留痕 + +微信会重推（网络抖动、机器人重启）。没有留痕就只能靠猜"那条任务到底进没进"。 +`bot_message.external_id` 上有个部分唯一索引：同一个外部消息 id 第二次到达时 +直接回上次的答案，不会变成两条任务。 + +## 安全边界 + +- 令牌错 → 9002（对外一律"通道不存在"，不区分"错令牌"和"这个工作区没接"）。 +- 通道被停用 → 9003。 +- 消息里不认人：机器人只知道"这是这个工作区的一条消息"，落库按通道创建者记账， + 不会因为消息内容去猜是谁发的。 +""" + +from __future__ import annotations + +import hashlib +import secrets +import uuid +from datetime import datetime, timezone +from typing import Annotated, Any + +from fastapi import APIRouter, Body, Query, Request +from fastapi.responses import PlainTextResponse +from sqlalchemy import select +from sqlalchemy.exc import IntegrityError + +from ..db import bind_tenant +from ..deps import AdminDep, SessionDep +from ..errors import AppError, ErrorCode +from ..models import Member, Workspace +from ..models_integrations import BotChannel, BotMessage +from ..models_knowledge import KnowledgeDoc +from ..models_task import Item +from ..schemas import ok +from .items import _log, _set_tags + +webhook_router = APIRouter(prefix="/integrations", tags=["外部接入"]) +admin_router = APIRouter(prefix="/workspaces", tags=["外部接入"]) + +# 标题在 item.title 上是 varchar(200)，留点余量给"…"之类的后缀。 +MAX_TITLE = 180 +MAX_BODY = 20000 + +KNOWLEDGE_PREFIXES = ("知识", "笔记", "note", "knowledge", "kb") +TASK_PREFIXES = ("任务", "待办", "todo", "task") +HELP_PREFIXES = ("?", "？", "帮助", "help", "用法") + +HELP_TEXT = ( + "发什么都能用，写法：\n" + "· 直接说　→ 记成任务\n" + "· 知识：内容　→ 记成知识草稿（也可以写「笔记：」）\n" + "· 任务：内容　→ 明确记成任务\n" + "首行当标题，后面几行当正文；标题里带 #标签 会自动加上。" +) + + +def hash_token(token: str) -> str: + return hashlib.sha256(token.encode("utf-8")).hexdigest() + + +def new_token() -> str: + return secrets.token_urlsafe(32) + + +def _pick(data: dict[str, Any], *keys: str) -> str | None: + """从任意形状的 payload 里挖字段（clawbot 的消息壳子没定死，宽松一点）。""" + for key in keys: + value = data.get(key) + if isinstance(value, str) and value.strip(): + return value + if isinstance(value, dict): + nested = _pick(value, "text", "content", "body", "message") + if nested: + return nested + return None + + +def extract_text(payload: dict[str, Any]) -> str: + text = _pick( + payload, + "text", + "content", + "msg", + "message", + "query", + "body", + "data", + "payload", + ) + return (text or "").strip() + + +def extract_external_id(payload: dict[str, Any]) -> str | None: + value = _pick(payload, "msg_id", "message_id", "msgid", "id", "uuid", "event_id") + return value[:128] if value else None + + +def extract_sender(payload: dict[str, Any]) -> str | None: + value = _pick(payload, "from", "sender", "from_user", "user", "uid", "sender_id") + return value[:128] if value else None + + +def split_command(text: str) -> tuple[str, str]: + """返回 (kind, 去掉前缀后的正文)。""" + head, _, rest = text.partition("\n") + probe = head.strip().lower() + for prefix in HELP_PREFIXES: + if probe == prefix or probe.startswith(f"{prefix}:") or probe.startswith(f"{prefix}："): + return "help", rest + for prefix in KNOWLEDGE_PREFIXES: + for sep in (":", "：", " ", "\u3000"): + if probe.startswith(f"{prefix}{sep}"): + offset = len(prefix) + len(sep) + return "knowledge", (head.strip()[offset:] + ("\n" + rest if rest else "")).strip() + for prefix in TASK_PREFIXES: + for sep in (":", "：", " ", "\u3000"): + if probe.startswith(f"{prefix}{sep}"): + offset = len(prefix) + len(sep) + return "task", (head.strip()[offset:] + ("\n" + rest if rest else "")).strip() + return "task", text + + +def split_tags(body: str) -> tuple[str, list[str]]: + """把 `#标签` 摘出来。只认行首和空白后的 #，免得把 "C#" 吃掉。""" + tags: list[str] = [] + kept: list[str] = [] + for line in body.splitlines(): + words = line.split(" ") + rest: list[str] = [] + for word in words: + if word.startswith("#") and len(word) > 1 and not word[1:].isdigit(): + name = word[1:].strip("，,。.;；") + if name and name.lower() not in {t.lower() for t in tags}: + tags.append(name) + continue + rest.append(word) + kept.append(" ".join(rest).rstrip()) + return "\n".join(kept).strip(), tags + + +def split_title(body: str) -> tuple[str, str]: + lines = body.splitlines() + if not lines: + return "", "" + title = lines[0].strip() + rest = "\n".join(lines[1:]).strip() + return title[:MAX_TITLE], rest[:MAX_BODY] + + +async def _creator_id(session: SessionDep, channel: BotChannel) -> uuid.UUID: + """消息记在谁名下：通道创建者；人没了就退回工作区 owner。""" + if channel.created_by is not None: + row = await session.execute( + select(Member.id).where( + Member.workspace_id == channel.workspace_id, + Member.user_id == channel.created_by, + Member.status == "active", + ) + ) + if row.first() is not None: + return channel.created_by + workspace = await session.get(Workspace, channel.workspace_id) + if workspace is None: # 理论上不可能：FK 是 CASCADE + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "接入通道不存在") + return workspace.owner_id + + +async def _create_task( + session: SessionDep, + *, + ws_id: uuid.UUID, + creator_id: uuid.UUID, + title: str, + body: str, + tags: list[str], +) -> Item: + item = Item( + workspace_id=ws_id, + kind="task", + title=title, + body_md=body, + status="inbox", + priority=0, + creator_id=creator_id, + ) + session.add(item) + await session.flush() + if tags: + await _set_tags(session, ws_id, item, tags) + await _log(session, item, creator_id, "created", {"via": "wechat_clawbot"}) + return item + + +async def _create_knowledge( + session: SessionDep, + *, + ws_id: uuid.UUID, + creator_id: uuid.UUID, + title: str, + body: str, + tags: list[str], +) -> Item: + item = Item( + workspace_id=ws_id, + kind="knowledge", + title=title, + body_md=body, + status="draft", + creator_id=creator_id, + ) + session.add(item) + await session.flush() + doc = KnowledgeDoc( + item_id=item.id, + workspace_id=ws_id, + author_id=creator_id, + source_item_id=None, + source_kind="manual", + doc_type="note", + status_hint="draft", + generated_by="human", + ) + session.add(doc) + await session.flush() + if tags: + await _set_tags(session, ws_id, item, tags) + await _log(session, item, creator_id, "knowledge_created", {"via": "wechat_clawbot"}) + return item + + +def _link(request: Request, ws_id: uuid.UUID, item: Item) -> str: + base = str(request.base_url).rstrip("/") + # base_url 形如 http://host:8200/api/v1/，而页面在站点根上 + base = base.split("/api/")[0] + if item.kind == "knowledge": + return f"{base}/w/{ws_id}/knowledge/{item.id}" + return f"{base}/w/{ws_id}?open={item.id}" + + +async def _channel_by_token(session: SessionDep, token: str) -> BotChannel: + from sqlalchemy import text as sql_text + + # 策略要靠这个值才放行那一行，必须先设。 + await session.execute( + sql_text("SELECT set_config('app.bot_token_hash', :h, true)"), {"h": hash_token(token)} + ) + row = ( + await session.execute(select(BotChannel).where(BotChannel.token_hash == hash_token(token))) + ).scalar_one_or_none() + if row is None: + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "接入通道不存在或令牌已失效") + return row + + +@webhook_router.get("/clawbot/{token}") +async def clawbot_verify( + token: str, session: SessionDep, echostr: str | None = Query(default=None) +): + """clawbot 后台通常先 GET 一次确认地址是活的：有 echostr 就原样回。""" + channel = await _channel_by_token(session, token) + if channel.status != "active": + raise AppError(ErrorCode.BOT_DISABLED, "这个通道已停用") + if echostr is not None: + return PlainTextResponse(echostr) + return ok({"channel": channel.name, "status": channel.status}) + + +@webhook_router.post("/clawbot/{token}") +async def clawbot_message( + token: str, + request: Request, + session: SessionDep, + payload: Annotated[dict[str, Any] | None, Body()] = None, +): + channel = await _channel_by_token(session, token) + if channel.status != "active": + raise AppError(ErrorCode.BOT_DISABLED, "这个通道已停用") + + raw: dict[str, Any] = payload if isinstance(payload, dict) else {} + text = extract_text(raw) + external_id = extract_external_id(raw) + sender = extract_sender(raw) + + await bind_tenant(session, channel.workspace_id, channel.created_by) + + # 重推：同一个外部消息 id 再来一次，回上次那句，不再建第二条。 + if external_id: + previous = ( + await session.execute( + select(BotMessage).where( + BotMessage.channel_id == channel.id, + BotMessage.external_id == external_id, + ) + ) + ).scalar_one_or_none() + if previous is not None: + channel.last_seen_at = datetime.now(timezone.utc) + return ok({"reply": previous.reply, "action": previous.action, "duplicate": True}) + + message = BotMessage( + workspace_id=channel.workspace_id, + channel_id=channel.id, + external_id=external_id, + sender=sender, + text=text[:MAX_BODY], + action="ignored", + reply="", + raw=raw if isinstance(raw, dict) else {"value": raw}, + ) + + if not text: + message.action = "ignored" + message.reply = "没收到正文，只收到一个空壳。" + session.add(message) + return ok({"reply": message.reply, "action": "ignored"}) + + kind, body = split_command(text) + creator_id = await _creator_id(session, channel) + + if kind == "help": + message.action = "help" + message.reply = HELP_TEXT + else: + body, tags = split_tags(body) + title, rest = split_title(body) + if not title: + message.action = "ignored" + message.reply = "只有标签没有内容，这条没记。" + elif kind == "knowledge": + item = await _create_knowledge( + session, + ws_id=channel.workspace_id, + creator_id=creator_id, + title=title, + body=rest, + tags=tags, + ) + message.action = "knowledge" + message.item_id = item.id + link = _link(request, channel.workspace_id, item) + message.reply = f"已记成知识草稿：《{item.title}》。去核对：{link}" + else: + item = await _create_task( + session, + ws_id=channel.workspace_id, + creator_id=creator_id, + title=title, + body=rest, + tags=tags, + ) + message.action = "task" + message.item_id = item.id + message.reply = ( + f"已记成任务：《{item.title}》。打开：{_link(request, channel.workspace_id, item)}" + ) + + channel.last_seen_at = datetime.now(timezone.utc) + channel.last_error = None + try: + # 用 SAVEPOINT 兜住唯一索引冲突：另一个并发请求刚插了同一条消息， + # 这里只要认输回同一句就行，不能把整笔事务打挂。 + async with session.begin_nested(): + session.add(message) + await session.flush() + except IntegrityError: + if external_id: + previous = ( + await session.execute( + select(BotMessage).where( + BotMessage.channel_id == channel.id, + BotMessage.external_id == external_id, + ) + ) + ).scalar_one_or_none() + if previous is not None: + return ok({"reply": previous.reply, "action": previous.action, "duplicate": True}) + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "同一条消息重复到达，已忽略") from None + + return ok({"reply": message.reply, "action": message.action, "duplicate": False}) + + +# ── 工作区里的管理接口（登录 + admin 以上） ───────────────────────────── + + +def _channel_out(channel: BotChannel) -> dict[str, Any]: + return { + "id": str(channel.id), + "kind": channel.kind, + "name": channel.name, + "status": channel.status, + "created_by": str(channel.created_by) if channel.created_by else None, + "last_seen_at": channel.last_seen_at, + "last_error": channel.last_error, + "created_at": channel.created_at, + } + + +def _webhook_url(request: Request, token: str) -> str: + base = str(request.base_url).rstrip("/") + return f"{base}/integrations/clawbot/{token}" + + +@admin_router.get("/{ws_id}/integrations") +async def list_integrations(ws_id: uuid.UUID, ctx: AdminDep, session: SessionDep): + rows = ( + ( + await session.execute( + select(BotChannel) + .where(BotChannel.workspace_id == ws_id) + .order_by(BotChannel.created_at.desc()) + ) + ) + .scalars() + .all() + ) + return ok({"items": [_channel_out(row) for row in rows]}) + + +@admin_router.post("/{ws_id}/integrations") +async def create_integration( + ws_id: uuid.UUID, + ctx: AdminDep, + session: SessionDep, + request: Request, + body: Annotated[dict[str, Any] | None, Body()] = None, +): + name = str((body or {}).get("name") or "").strip()[:64] or "微信" + token = new_token() + channel = BotChannel( + workspace_id=ws_id, + kind="wechat_clawbot", + name=name, + token_hash=hash_token(token), + status="active", + created_by=ctx.user.id, + ) + session.add(channel) + await session.flush() + return ok( + { + "channel": _channel_out(channel), + # 令牌只在这里出现一次，之后只能"重新生成"。 + "token": token, + "webhook_url": _webhook_url(request, token), + } + ) + + +@admin_router.patch("/{ws_id}/integrations/{channel_id}") +async def update_integration( + ws_id: uuid.UUID, + channel_id: uuid.UUID, + ctx: AdminDep, + session: SessionDep, + body: Annotated[dict[str, Any] | None, Body()] = None, +): + channel = await session.get(BotChannel, channel_id) + if channel is None or channel.workspace_id != ws_id: + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "接入通道不存在") + data = body or {} + if isinstance(data.get("name"), str): + channel.name = data["name"].strip()[:64] + if isinstance(data.get("status"), str): + if data["status"] not in ("active", "disabled"): + raise AppError(ErrorCode.VALIDATION_ERROR, "状态只能是 active 或 disabled") + channel.status = data["status"] + return ok({"channel": _channel_out(channel)}) + + +@admin_router.post("/{ws_id}/integrations/{channel_id}/rotate") +async def rotate_integration( + ws_id: uuid.UUID, + channel_id: uuid.UUID, + ctx: AdminDep, + session: SessionDep, + request: Request, +): + channel = await session.get(BotChannel, channel_id) + if channel is None or channel.workspace_id != ws_id: + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "接入通道不存在") + token = new_token() + channel.token_hash = hash_token(token) + return ok( + { + "channel": _channel_out(channel), + "token": token, + "webhook_url": _webhook_url(request, token), + } + ) + + +@admin_router.delete("/{ws_id}/integrations/{channel_id}") +async def delete_integration( + ws_id: uuid.UUID, channel_id: uuid.UUID, ctx: AdminDep, session: SessionDep +): + channel = await session.get(BotChannel, channel_id) + if channel is None or channel.workspace_id != ws_id: + raise AppError(ErrorCode.BOT_TOKEN_INVALID, "接入通道不存在") + await session.delete(channel) + return ok({"deleted": True}) + + +@admin_router.get("/{ws_id}/integrations/{channel_id}/messages") +async def list_messages( + ws_id: uuid.UUID, + channel_id: uuid.UUID, + ctx: AdminDep, + session: SessionDep, + limit: int = Query(default=20, ge=1, le=100), +): + rows = ( + ( + await session.execute( + select(BotMessage) + .where(BotMessage.workspace_id == ws_id, BotMessage.channel_id == channel_id) + .order_by(BotMessage.created_at.desc()) + .limit(limit) + ) + ) + .scalars() + .all() + ) + return ok( + { + "items": [ + { + "id": str(row.id), + "text": row.text, + "action": row.action, + "item_id": str(row.item_id) if row.item_id else None, + "reply": row.reply, + "sender": row.sender, + "created_at": row.created_at, + } + for row in rows + ] + } + ) + + +__all__ = ["webhook_router", "admin_router"] diff --git a/backend/app/errors.py b/backend/app/errors.py index 7164b2a..10599e2 100644 --- a/backend/app/errors.py +++ b/backend/app/errors.py @@ -79,6 +79,10 @@ class ErrorCode(IntEnum): # 9xxx 客户端发布（OTA） APP_RELEASE_NOT_FOUND = 9001 + # 9xxx 外部接入（微信 clawbot 等） + BOT_TOKEN_INVALID = 9002 + BOT_DISABLED = 9003 + # 默认 HTTP 状态：业务码自己带语义，HTTP 只是传输层 _HTTP_STATUS: dict[ErrorCode, int] = { @@ -135,6 +139,8 @@ _HTTP_STATUS: dict[ErrorCode, int] = { ErrorCode.ATTACHMENT_FORBIDDEN: 403, ErrorCode.CONFIRM_REQUIRED: 409, ErrorCode.APP_RELEASE_NOT_FOUND: 404, + ErrorCode.BOT_TOKEN_INVALID: 404, + ErrorCode.BOT_DISABLED: 403, } diff --git a/backend/app/main.py b/backend/app/main.py index 9c66de7..9614c9b 100644 --- a/backend/app/main.py +++ b/backend/app/main.py @@ -16,7 +16,16 @@ from starlette.responses import Response from starlette.staticfiles import StaticFiles from starlette.types import Scope -from .api import app_release, attachments, auth, items, knowledge, tickets, workspaces +from .api import ( + app_release, + attachments, + auth, + integrations, + items, + knowledge, + tickets, + workspaces, +) from .api import settings as settings_api from .config import get_settings from .db import SessionFactory, current_app_role, engine @@ -118,6 +127,8 @@ app.include_router(knowledge.router, prefix=settings.api_prefix) app.include_router(attachments.router, prefix=settings.api_prefix) app.include_router(app_release.router, prefix=settings.api_prefix) app.include_router(settings_api.router, prefix=settings.api_prefix) +app.include_router(integrations.admin_router, prefix=settings.api_prefix) +app.include_router(integrations.webhook_router, prefix=settings.api_prefix) @app.get("/health", tags=["运维"], summary="存活探针") diff --git a/backend/app/models_integrations.py b/backend/app/models_integrations.py new file mode 100644 index 0000000..760e9a3 --- /dev/null +++ b/backend/app/models_integrations.py @@ -0,0 +1,89 @@ +"""外部接入：微信（clawbot）这一类的机器人通道。 + +为什么单开一张表而不是塞进 `system_setting`： + +1. 一个工作区可以挂多个通道（自己的号、公司的号），也随时可能换； + 塞进 setting 的 JSON 里就没法"停用这一个、保留那一个"。 +2. 通道是**租户数据**：谁能往里发消息，取决于它属于哪个工作区。 + 租户表就得有 `workspace_id NOT NULL` + RLS（AGENTS.md 第 2.5 条）。 + +令牌只存 sha256：数据库被看见也拿不到能用的令牌；令牌只在创建时回显一次。 +""" + +from __future__ import annotations + +import uuid +from datetime import datetime + +from sqlalchemy import DateTime, ForeignKey, Index, String, Text, text +from sqlalchemy.dialects.postgresql import JSONB +from sqlalchemy.dialects.postgresql import UUID as PgUUID +from sqlalchemy.orm import Mapped, mapped_column + +from .models import Base, Timestamps, new_uuid + +BOT_KINDS = ("wechat_clawbot",) +BOT_STATUSES = ("active", "disabled") + +INTEGRATION_TENANT_TABLES = ("bot_channel", "bot_message") + + +class BotChannel(Base, Timestamps): + """一条接入通道：微信里那个机器人 ⇄ 本工作区。""" + + __tablename__ = "bot_channel" + __table_args__ = ( + Index("ix_bot_channel_ws", "workspace_id"), + Index("uq_bot_channel_token", "token_hash", unique=True), + ) + + id: Mapped[uuid.UUID] = mapped_column(PgUUID(as_uuid=True), primary_key=True, default=new_uuid) + workspace_id: Mapped[uuid.UUID] = mapped_column( + PgUUID(as_uuid=True), ForeignKey("workspace.id", ondelete="CASCADE"), nullable=False + ) + kind: Mapped[str] = mapped_column(String(32), nullable=False, default="wechat_clawbot") + name: Mapped[str] = mapped_column(String(64), nullable=False, default="") + # hex(sha256(令牌))。令牌本身只在创建响应里出现一次。 + token_hash: Mapped[str] = mapped_column(String(64), nullable=False) + status: Mapped[str] = mapped_column(String(16), nullable=False, default="active") + # 消息落在谁名下：用创建这条通道的人；人没了就退回工作区 owner。 + created_by: Mapped[uuid.UUID | None] = mapped_column( + PgUUID(as_uuid=True), ForeignKey("app_user.id", ondelete="SET NULL") + ) + last_seen_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True)) + last_error: Mapped[str | None] = mapped_column(Text) + + +class BotMessage(Base, Timestamps): + """收到的每条消息都留痕：出问题时能回答"那条任务到底有没有进去"。""" + + __tablename__ = "bot_message" + __table_args__ = ( + Index("ix_bot_message_channel", "channel_id", "created_at"), + # 同一个外部消息 id 只处理一次：微信会重推，重推不能变成两条任务。 + Index( + "uq_bot_message_external", + "channel_id", + "external_id", + unique=True, + postgresql_where=text("external_id IS NOT NULL"), + ), + ) + + id: Mapped[uuid.UUID] = mapped_column(PgUUID(as_uuid=True), primary_key=True, default=new_uuid) + workspace_id: Mapped[uuid.UUID] = mapped_column( + PgUUID(as_uuid=True), ForeignKey("workspace.id", ondelete="CASCADE"), nullable=False + ) + channel_id: Mapped[uuid.UUID] = mapped_column( + PgUUID(as_uuid=True), ForeignKey("bot_channel.id", ondelete="CASCADE"), nullable=False + ) + external_id: Mapped[str | None] = mapped_column(String(128)) + sender: Mapped[str | None] = mapped_column(String(128)) + text: Mapped[str] = mapped_column(Text, nullable=False, default="") + # task / knowledge / help / ignored / error + action: Mapped[str] = mapped_column(String(24), nullable=False, default="ignored") + item_id: Mapped[uuid.UUID | None] = mapped_column( + PgUUID(as_uuid=True), ForeignKey("item.id", ondelete="SET NULL") + ) + reply: Mapped[str] = mapped_column(Text, nullable=False, default="") + raw: Mapped[dict] = mapped_column(JSONB, nullable=False, default=dict) diff --git a/backend/tests/conftest.py b/backend/tests/conftest.py index f7fb496..04f7db2 100644 --- a/backend/tests/conftest.py +++ b/backend/tests/conftest.py @@ -39,7 +39,9 @@ from app.stores import reset_store_for_tests settings = get_settings() DEV_CODE = settings.sms_dev_code -_TABLES = "system_setting, audit_log, invitation, member, workspace, app_user" +_TABLES = ( + "bot_message, bot_channel, system_setting, audit_log, invitation, member, workspace, app_user" +) def _run_migrations() -> None: diff --git a/backend/tests/test_clawbot.py b/backend/tests/test_clawbot.py new file mode 100644 index 0000000..c410369 --- /dev/null +++ b/backend/tests/test_clawbot.py @@ -0,0 +1,199 @@ +"""微信（clawbot）接入：一条消息进来，变成任务或知识。 + +测的是**整条链路**：令牌 → 租户上下文 → 建事项 → 留痕 → 重复推送幂等。 +webhook 不带登录态，所以这里故意不用 `auth()` 头，只有管理接口才带。 +""" + +from __future__ import annotations + +from typing import Any + +from httpx import AsyncClient + +from .conftest import create_workspace, login, unwrap + + +async def _channel(client: AsyncClient, user: dict[str, Any], ws: dict[str, Any]) -> dict: + return unwrap( + await client.post( + f"/api/v1/workspaces/{ws['id']}/integrations", + json={"name": "我的微信"}, + headers=user["headers"], + ) + ) + + +async def _post(client: AsyncClient, token: str, payload: dict[str, Any]): + return await client.post(f"/api/v1/integrations/clawbot/{token}", json=payload) + + +async def test_plain_message_becomes_task(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信接入") + channel = await _channel(client, user, ws) + + resp = await _post( + client, + channel["token"], + {"msg_id": "wx-1", "from": "steven", "text": "给客户回电话\n顺便确认下报价"}, + ) + data = unwrap(resp) + assert data["action"] == "task" + assert data["duplicate"] is False + assert "给客户回电话" in data["reply"] + + items = unwrap( + await client.get(f"/api/v1/workspaces/{ws['id']}/items", headers=user["headers"]) + )["items"] + task = next(i for i in items if i["title"] == "给客户回电话") + assert task["kind"] == "task" + assert task["status"] == "inbox" + assert "顺便确认下报价" in task["body_md"] + + +async def test_knowledge_prefix_creates_draft_with_tags(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信知识") + channel = await _channel(client, user, ws) + + data = unwrap( + await _post( + client, + channel["token"], + {"text": "知识：回滚前先停灰度 #发布 #回滚\n1. 停流量\n2. 回滚镜像"}, + ) + ) + assert data["action"] == "knowledge" + + docs = unwrap( + await client.get( + f"/api/v1/workspaces/{ws['id']}/knowledge?status=draft", headers=user["headers"] + ) + )["items"] + doc = next(d for d in docs if d["title"] == "回滚前先停灰度") + assert doc["knowledge"]["status_hint"] == "draft" + assert doc["knowledge"]["doc_type"] == "note" + assert {t["name"] for t in doc["tags"]} == {"发布", "回滚"} + # 标签从标题摘出去以后，正文里不该再留 # 号 + assert "#发布" not in doc["body_md"] + + +async def test_help_reply_creates_nothing(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信帮助") + channel = await _channel(client, user, ws) + + data = unwrap(await _post(client, channel["token"], {"text": "帮助"})) + assert data["action"] == "help" + assert "记成任务" in data["reply"] + items = unwrap( + await client.get(f"/api/v1/workspaces/{ws['id']}/items", headers=user["headers"]) + )["items"] + assert items == [] + + +async def test_unknown_token_is_404(client: AsyncClient) -> None: + resp = await client.post("/api/v1/integrations/clawbot/nope", json={"text": "x"}) + assert resp.status_code == 404 + assert resp.json()["code"] == 9002 + + +async def test_disabled_channel_refuses_messages(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信停用") + channel = await _channel(client, user, ws) + await client.patch( + f"/api/v1/workspaces/{ws['id']}/integrations/{channel['channel']['id']}", + json={"status": "disabled"}, + headers=user["headers"], + ) + resp = await _post(client, channel["token"], {"text": "这条不该进去"}) + assert resp.status_code == 403 + assert resp.json()["code"] == 9003 + + +async def test_same_message_id_is_idempotent(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信重推") + channel = await _channel(client, user, ws) + payload = {"msg_id": "dup-1", "text": "只该有一条"} + + first = unwrap(await _post(client, channel["token"], payload)) + second = unwrap(await _post(client, channel["token"], payload)) + assert second["duplicate"] is True + assert second["reply"] == first["reply"] + + items = unwrap( + await client.get(f"/api/v1/workspaces/{ws['id']}/items", headers=user["headers"]) + )["items"] + assert [i["title"] for i in items] == ["只该有一条"] + + +async def test_get_verify_echoes_challenge(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信校验") + channel = await _channel(client, user, ws) + + resp = await client.get(f"/api/v1/integrations/clawbot/{channel['token']}?echostr=abc123") + assert resp.status_code == 200 + assert resp.text == "abc123" + + +async def test_token_belongs_to_one_workspace(client: AsyncClient) -> None: + user = await login(client) + ws_a = await create_workspace(client, user, "A 区") + ws_b = await create_workspace(client, user, "B 区") + channel = await _channel(client, user, ws_a) + + await _post(client, channel["token"], {"text": "只该进 A 区"}) + + items_a = unwrap( + await client.get(f"/api/v1/workspaces/{ws_a['id']}/items", headers=user["headers"]) + )["items"] + items_b = unwrap( + await client.get(f"/api/v1/workspaces/{ws_b['id']}/items", headers=user["headers"]) + )["items"] + assert [i["title"] for i in items_a] == ["只该进 A 区"] + assert items_b == [] + + +async def test_rotate_invalidates_old_token(client: AsyncClient) -> None: + user = await login(client) + ws = await create_workspace(client, user, "微信换令牌") + channel = await _channel(client, user, ws) + rotated = unwrap( + await client.post( + f"/api/v1/workspaces/{ws['id']}/integrations/{channel['channel']['id']}/rotate", + headers=user["headers"], + ) + ) + assert rotated["token"] != channel["token"] + old = await _post(client, channel["token"], {"text": "旧令牌"}) + assert old.status_code == 404 + new = unwrap(await _post(client, rotated["token"], {"text": "新令牌能用"})) + assert new["action"] == "task" + + +async def test_member_cannot_manage_channels(client: AsyncClient) -> None: + owner = await login(client) + ws = await create_workspace(client, owner, "微信权限") + member = await login(client) + code = unwrap( + await client.post( + f"/api/v1/workspaces/{ws['id']}/invitations", + json={"role": "member"}, + headers=owner["headers"], + ) + ) + await client.post( + f"/api/v1/workspaces/{ws['id']}/join", + json={"code": code["code"]}, + headers=member["headers"], + ) + resp = await client.post( + f"/api/v1/workspaces/{ws['id']}/integrations", + json={"name": "偷加的通道"}, + headers=member["headers"], + ) + assert resp.status_code == 403 + assert resp.json()["code"] in (3004, 3003) diff --git a/web/e2e/integrations.mjs b/web/e2e/integrations.mjs new file mode 100644 index 0000000..5a66f7a --- /dev/null +++ b/web/e2e/integrations.mjs @@ -0,0 +1,134 @@ +/** + * 微信接入的端到端验证：页面上建通道 → 把"微信"发来的那条 POST 打到回调地址 + * → 任务真出现在任务列表里。 + * + * 这里不发真正的微信消息（那得有人拿手机发），而是照着 clawbot 的形状 + * 直接 POST 一次——它就是这个接口唯一的调用方。 + */ +import { readFileSync } from "node:fs"; +import { chromium } from "playwright-core"; + +// 上一轮 e2e 建的密码就在仓库根的 .local 里（web/e2e 往上两级） +function devPassword() { + if (process.env.PASSWORD) return process.env.PASSWORD; + try { + return readFileSync(new URL("../../.local/e2e-account-password.txt", import.meta.url), "utf8").trim(); + } catch { + return "dadao-e2e-2026"; + } +} + +const WEB = process.env.WEB || "http://localhost:5180"; +const API = process.env.API || "http://127.0.0.1:8100/api/v1"; +const PHONE = process.env.PHONE || "13900000001"; +const PASSWORD = devPassword(); +const CHROME = + process.env.CHROME || + `${process.env.LOCALAPPDATA}\\ms-playwright\\chromium-1223\\chrome-win64\\chrome.exe`; + +const results = []; +function check(name, ok, detail = "") { + results.push({ name, ok, detail }); + console.log(`${ok ? "PASS" : "FAIL"} ${name}${detail ? ` — ${detail}` : ""}`); +} + +async function login() { + const resp = await fetch(`${API}/auth/login/password`, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ phone: PHONE, password: PASSWORD }), + }); + const body = await resp.json(); + if (body.code !== 0) throw new Error(`登录失败 ${JSON.stringify(body)}`); + return body.data; +} + +async function main() { + const session = await login(); + const token = session.tokens.access_token; + const headers = { authorization: `Bearer ${token}`, "content-type": "application/json" }; + + const wsList = await (await fetch(`${API}/workspaces`, { headers })).json(); + const ws = wsList.data.items[0]; + if (!ws) throw new Error("这个账号没有工作区"); + + const browser = await chromium.launch({ executablePath: CHROME, headless: true }); + const context = await browser.newContext({ viewport: { width: 1440, height: 960 } }); + const page = await context.newPage(); + const consoleErrors = []; + page.on("console", (m) => m.type() === "error" && consoleErrors.push(m.text())); + page.on("pageerror", (e) => consoleErrors.push(String(e))); + + await page.addInitScript( + ([access, refresh]) => { + localStorage.setItem("dadao.access", access); + localStorage.setItem("dadao.refresh", refresh); + }, + [token, session.tokens.refresh_token], + ); + + await page.goto(`${WEB}/w/${ws.id}/integrations`, { waitUntil: "networkidle" }); + check("接入页能打开", await page.getByRole("heading", { name: "接入" }).isVisible()); + + // 建一条新通道：令牌只在创建后那一屏出现 + await page.getByRole("button", { name: "新建通道" }).click(); + const urlBox = page.getByTestId("webhook-url"); + await urlBox.waitFor({ state: "visible" }); + const url = (await urlBox.innerText()).trim(); + check("创建后拿到回调地址", /\/integrations\/clawbot\/[\w-]{20,}/.test(url), url.slice(0, 48) + "…"); + + // 冒充 clawbot 推一条消息 + const push = await fetch(url, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ + msg_id: `e2e-${Date.now()}`, + from: "e2e", + text: `微信来的任务 ${Date.now()}\n从手机发的，带正文`, + }), + }); + const pushed = await push.json(); + check("回调地址收到消息并建了任务", pushed.code === 0 && pushed.data.action === "task"); + const title = pushed.data.reply.match(/《(.+?)》/)?.[1] || ""; + + // 再推一次同一条：不该多出第二条 + const again = await ( + await fetch(url, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ msg_id: "dup", text: "重复消息" }), + }) + ).json(); + const dup = await ( + await fetch(url, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ msg_id: "dup", text: "重复消息" }), + }) + ).json(); + check("同一条消息不会建两条", again.code === 0 && dup.data.duplicate === true); + + // 页面上的「最近消息」要能看到刚才那几条 + await page.getByRole("button", { name: "最近消息" }).first().click(); + await page.getByText("建了任务").first().waitFor({ state: "visible" }); + check("页面能看到收到的消息", await page.getByText("建了任务").first().isVisible()); + + // 任务真的进了任务列表 + const items = await (await fetch(`${API}/workspaces/${ws.id}/items`, { headers })).json(); + const found = items.data.items.find((i) => i.title === title); + check("任务出现在工作区里", Boolean(found), title); + + check("控制台零报错", consoleErrors.length === 0, consoleErrors.slice(0, 2).join(" | ")); + + await page.screenshot({ path: "e2e/artifacts/integrations.png", fullPage: true }); + await browser.close(); + + const failed = results.filter((r) => !r.ok); + console.log(`\n${failed.length === 0 ? "ALL PASS" : "FAILED"} — pass ${results.length - failed.length}, fail ${failed.length}`); + if (failed.length > 0) process.exit(1); +} + +main().catch((err) => { + console.error("FAIL 脚本异常 —", err.message); + process.exit(1); +}); diff --git a/web/src/App.tsx b/web/src/App.tsx index 7929b43..525cc44 100644 --- a/web/src/App.tsx +++ b/web/src/App.tsx @@ -16,6 +16,7 @@ import { KnowledgeDocPage } from "./pages/KnowledgeDoc"; import { NotificationsPage } from "./pages/Notifications"; import { JoinPage } from "./pages/Join"; import { AccountPage } from "./pages/Account"; +import { IntegrationsPage } from "./pages/Integrations"; import { SettingsPage } from "./pages/Settings"; interface AuthState { @@ -103,6 +104,8 @@ export function App() { } /> } /> } /> + {/* 接入：微信一句话变成任务/知识，配置在这一页 */} + } /> } /> } /> diff --git a/web/src/components/AppShell.tsx b/web/src/components/AppShell.tsx index e5a6d1a..44bf879 100644 --- a/web/src/components/AppShell.tsx +++ b/web/src/components/AppShell.tsx @@ -5,6 +5,7 @@ import { api } from "../lib/client"; import type { Workspace } from "../lib/types"; import { Book, + Chat, ChevronDown, Bell, Columns, @@ -23,7 +24,8 @@ export type Section = | "tickets" | "knowledge" | "notifications" - | "members"; + | "members" + | "integrations"; const NAV: { key: Section; label: string; to: (id: string) => string; icon: ReactNode }[] = [ { key: "tasks", label: "任务", to: (id) => `/w/${id}`, icon: }, @@ -37,6 +39,7 @@ const NAV: { key: Section; label: string; to: (id: string) => string; icon: Reac icon: , }, { key: "members", label: "成员", to: (id) => `/w/${id}/members`, icon: }, + { key: "integrations", label: "接入", to: (id) => `/w/${id}/integrations`, icon: }, ]; function initial(name: string) { diff --git a/web/src/components/icons.tsx b/web/src/components/icons.tsx index 2173ff4..c233b6c 100644 --- a/web/src/components/icons.tsx +++ b/web/src/components/icons.tsx @@ -227,6 +227,14 @@ export const Settings = (p: IconProps) => ( ); +/** 对话气泡：外部接入（微信等）用这个图标。 */ +export const Chat = (p: IconProps) => ( + + + + +); + export const Sliders = (p: IconProps) => ( diff --git a/web/src/lib/types.ts b/web/src/lib/types.ts index bc056ea..50a17f7 100644 --- a/web/src/lib/types.ts +++ b/web/src/lib/types.ts @@ -223,4 +223,26 @@ export interface AppNotification { body: string; read_at: string | null; created_at: string; -} \ No newline at end of file +} +/** 外部接入通道：微信机器人靠这条令牌往工作区里发消息。 */ +export interface BotChannel { + id: string; + kind: string; + name: string; + status: "active" | "disabled"; + created_by: string | null; + last_seen_at: string | null; + last_error: string | null; + created_at: string; +} + +/** 收到的消息留痕：`action` 说明它变成了什么。 */ +export interface BotMessage { + id: string; + text: string; + action: "task" | "knowledge" | "help" | "ignored" | "error" | string; + item_id: string | null; + reply: string; + sender: string | null; + created_at: string; +} diff --git a/web/src/pages/Integrations.tsx b/web/src/pages/Integrations.tsx new file mode 100644 index 0000000..d745b32 --- /dev/null +++ b/web/src/pages/Integrations.tsx @@ -0,0 +1,323 @@ +import { useCallback, useEffect, useState } from "react"; +import { useParams } from "react-router-dom"; + +import { AppShell } from "../components/AppShell"; +import { Chat, Link2, Plus, Trash } from "../components/icons"; +import { Button, EmptyState, InlineAlert, PageHeader, SkeletonRows } from "../components/ui"; +import { useAuth } from "../App"; +import { api, ApiError } from "../lib/client"; +import { copyText } from "../lib/clipboard"; +import type { BotChannel, BotMessage } from "../lib/types"; + +/** 真发出去的那一步：把令牌拼成地址。 */ +function webhookUrl(origin: string, token: string) { + return `${origin.replace(/\/$/, "")}/api/v1/integrations/clawbot/${token}`; +} + +function ago(iso: string | null): string { + if (!iso) return "还没收到过消息"; + const diff = Math.max(0, Date.now() - new Date(iso).getTime()); + const min = Math.floor(diff / 60_000); + if (min < 1) return "刚刚收到消息"; + if (min < 60) return `${min} 分钟前收到消息`; + const hour = Math.floor(min / 60); + if (hour < 24) return `${hour} 小时前收到消息`; + return `${Math.floor(hour / 24)} 天前收到消息`; +} + +const ACTION_TEXT: Record = { + task: "建了任务", + knowledge: "建了知识", + help: "回了用法", + ignored: "没处理", + error: "出错", +}; + +/** + * 接入页：把微信（clawbot）接进这个工作区。 + * + * 令牌是通道的钥匙，**只在创建/重生成时出现一次**——旁边配一个复制按钮， + * 因为用户要做的就是把它粘进 clawbot 的后台。 + */ +export function IntegrationsPage() { + const { wsId = "" } = useParams(); + const { user, workspaces } = useAuth(); + const ws = workspaces.find((w) => w.id === wsId); + const canManage = ws?.role === "owner" || ws?.role === "admin"; + + const [channels, setChannels] = useState([]); + const [loading, setLoading] = useState(true); + const [error, setError] = useState(null); + const [busy, setBusy] = useState(null); + /** 刚建好或刚换过的令牌：只活在这一屏里，刷新就没了（库里只有 sha256）。 */ + const [fresh, setFresh] = useState<{ id: string; token: string; url: string } | null>(null); + const [copied, setCopied] = useState<"url" | "token" | null>(null); + const [messages, setMessages] = useState>({}); + + const load = useCallback(async () => { + setLoading(true); + setError(null); + try { + const data = await api.get<{ items: BotChannel[] }>(`/workspaces/${wsId}/integrations`); + setChannels(data.items); + } catch (err) { + setError(err instanceof ApiError ? err.message : "读取接入配置失败"); + } finally { + setLoading(false); + } + }, [wsId]); + + useEffect(() => { + void load(); + }, [load]); + + async function create() { + setBusy("create"); + setError(null); + try { + const data = await api.post<{ channel: BotChannel; token: string }>( + `/workspaces/${wsId}/integrations`, + { name: "微信" }, + ); + setFresh({ + id: data.channel.id, + token: data.token, + url: webhookUrl(window.location.origin, data.token), + }); + await load(); + } catch (err) { + setError(err instanceof ApiError ? err.message : "创建通道失败"); + } finally { + setBusy(null); + } + } + + async function toggle(channel: BotChannel) { + setBusy(channel.id); + try { + await api.patch<{ channel: BotChannel }>( + `/workspaces/${wsId}/integrations/${channel.id}`, + { status: channel.status === "active" ? "disabled" : "active" }, + ); + await load(); + } catch (err) { + setError(err instanceof ApiError ? err.message : "改状态失败"); + } finally { + setBusy(null); + } + } + + async function rotate(channel: BotChannel) { + setBusy(channel.id); + try { + const data = await api.post<{ token: string }>( + `/workspaces/${wsId}/integrations/${channel.id}/rotate`, + {}, + ); + setFresh({ + id: channel.id, + token: data.token, + url: webhookUrl(window.location.origin, data.token), + }); + await load(); + } catch (err) { + setError(err instanceof ApiError ? err.message : "换令牌失败"); + } finally { + setBusy(null); + } + } + + async function remove(channel: BotChannel) { + if (!window.confirm(`删掉「${channel.name}」这条通道？微信那边再发消息就进不来了。`)) return; + setBusy(channel.id); + try { + await api.del(`/workspaces/${wsId}/integrations/${channel.id}`); + if (fresh?.id === channel.id) setFresh(null); + await load(); + } catch (err) { + setError(err instanceof ApiError ? err.message : "删除失败"); + } finally { + setBusy(null); + } + } + + async function peek(channel: BotChannel) { + setBusy(channel.id); + try { + const data = await api.get<{ items: BotMessage[] }>( + `/workspaces/${wsId}/integrations/${channel.id}/messages?limit=5`, + ); + setMessages((prev) => ({ ...prev, [channel.id]: data.items })); + } catch (err) { + setError(err instanceof ApiError ? err.message : "读取消息失败"); + } finally { + setBusy(null); + } + } + + async function copy(kind: "url" | "token", text: string) { + const ok = await copyText(text); + if (!ok) { + setError("浏览器不让直接写剪贴板，请手动选中复制"); + return; + } + setCopied(kind); + window.setTimeout(() => setCopied(null), 1600); + } + + return ( + + void create()} disabled={busy === "create"}> + 新建通道 + + ) : null + } + /> + + {error ? ( +
+ {error} +
+ ) : null} + +
+

怎么用

+
    +
  1. 在下面建一条通道，把「回调地址」粘进 clawbot 的后台。
    2. +
  2. 在微信里给机器人发消息：直接说就是任务，「知识：」开头记成知识草稿。
    3. +
  3. 首行当标题，其余当正文；标题里带 #标签 会一起加上。
    4. +
+
+ + {fresh ? ( +
+

通道已就绪，这两样只在现在显示一次

+
+
+

回调地址

+
+ + {fresh.url} + + +
+
+
+

令牌

+
+ + {fresh.token} + + +
+
+
+

+ 令牌等同于钥匙：库里只存它的哈希，页面刷新就再也看不到。丢了就「重新生成」，旧地址立刻失效。 +

+
+ ) : null} + + {loading ? ( + + ) : channels.length === 0 ? ( + } + title="还没有接进来" + hint={ + canManage + ? "先建一条通道，再把地址填到 clawbot 里；之后微信里发的话就会出现在任务和知识里。" + : "这个工作区还没有配接入通道。需要所有者或管理员来建。" + } + /> + ) : ( +
    + {channels.map((channel) => ( +
  • +
    + + + +
    +

    {channel.name}

    +

    {ago(channel.last_seen_at)}

    +
    + + {channel.status === "active" ? "接收中" : "已停用"} + + {canManage ? ( +
    + + + + +
    + ) : null} +
    + + {channel.last_error ? ( +

    上次出错：{channel.last_error}

    + ) : null} + + {messages[channel.id] ? ( + messages[channel.id].length === 0 ? ( +

    还没有收到过消息。

    + ) : ( +
      + {messages[channel.id].map((m) => ( +
    • + + {ACTION_TEXT[m.action] ?? m.action} + + {m.text || "(空)"} + + {new Date(m.created_at).toLocaleTimeString("zh-CN", { + hour: "2-digit", + minute: "2-digit", + })} + +
      • + ))} +
    + ) + ) : null} +
    • + ))} +
+ )} + + {!canManage && user ? ( +

接入通道只有所有者和管理员能改。

+ ) : null} + + ); +}