From 6b106f52fc4dbca4c307a01fc3a750b2d062b250 Mon Sep 17 00:00:00 2001 From: carbotaniuman <41451839+carbotaniuman@users.noreply.github.com> Date: Sat, 6 Jun 2020 17:52:25 -0500 Subject: [PATCH] Squash a bunch of commits together --- .gitignore | 107 ++ LICENSE | 674 +++++++++++++ README.md | 35 + architecture.drawio | 1 + architecture.png | Bin 0 -> 48854 bytes architecture2.png | Bin 0 -> 51647 bytes build.gradle | 52 + dev/settings.json | 7 + gradle.properties | 2 + gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 55190 bytes gradle/wrapper/gradle-wrapper.properties | 6 + gradlew | 172 ++++ gradlew.bat | 84 ++ settings.gradle | 1 + .../java/mdnet/base/CachingInputStream.java | 87 ++ src/main/java/mdnet/base/ClientSettings.java | 60 ++ src/main/java/mdnet/base/Constants.java | 12 + src/main/java/mdnet/base/MangadexClient.java | 203 ++++ src/main/java/mdnet/base/ServerHandler.java | 79 ++ src/main/java/mdnet/base/ServerSettings.java | 106 ++ src/main/java/mdnet/base/Statistics.java | 40 + src/main/java/mdnet/cache/DiskLruCache.java | 949 ++++++++++++++++++ .../java/mdnet/cache/StrictLineReader.java | 216 ++++ src/main/java/mdnet/cache/Util.java | 57 ++ src/main/kotlin/mdnet/base/Application.kt | 184 ++++ src/main/kotlin/mdnet/base/Keys.kt | 145 +++ src/main/kotlin/mdnet/base/Netty.kt | 126 +++ src/main/resources/logback.xml | 31 + 28 files changed, 3436 insertions(+) create mode 100644 .gitignore create mode 100644 LICENSE create mode 100644 README.md create mode 100644 architecture.drawio create mode 100644 architecture.png create mode 100644 architecture2.png create mode 100644 build.gradle create mode 100644 dev/settings.json create mode 100644 gradle.properties create mode 100644 gradle/wrapper/gradle-wrapper.jar create mode 100644 gradle/wrapper/gradle-wrapper.properties create mode 100644 gradlew create mode 100644 gradlew.bat create mode 100644 settings.gradle create mode 100644 src/main/java/mdnet/base/CachingInputStream.java create mode 100644 src/main/java/mdnet/base/ClientSettings.java create mode 100644 src/main/java/mdnet/base/Constants.java create mode 100644 src/main/java/mdnet/base/MangadexClient.java create mode 100644 src/main/java/mdnet/base/ServerHandler.java create mode 100644 src/main/java/mdnet/base/ServerSettings.java create mode 100644 src/main/java/mdnet/base/Statistics.java create mode 100644 src/main/java/mdnet/cache/DiskLruCache.java create mode 100644 src/main/java/mdnet/cache/StrictLineReader.java create mode 100644 src/main/java/mdnet/cache/Util.java create mode 100644 src/main/kotlin/mdnet/base/Application.kt create mode 100644 src/main/kotlin/mdnet/base/Keys.kt create mode 100644 src/main/kotlin/mdnet/base/Netty.kt create mode 100644 src/main/resources/logback.xml diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..c02342d --- /dev/null +++ b/.gitignore @@ -0,0 +1,107 @@ + +# Created by https://www.gitignore.io/api/linux,macos,gradle,windows +# Edit at https://www.gitignore.io/?templates=linux,macos,gradle,windows + +### Linux ### +*~ + +# temporary files which can be created if a process still has a handle open of a deleted file +.fuse_hidden* + +# KDE directory preferences +.directory + +# Linux trash folder which might appear on any partition or disk +.Trash-* + +# .nfs files are created when an open file is removed but is still being accessed +.nfs* + +### macOS ### +# General +.DS_Store +.AppleDouble +.LSOverride + +# Icon must end with two \r +Icon + +# Thumbnails +._* + +# Files that might appear in the root of a volume +.DocumentRevisions-V100 +.fseventsd +.Spotlight-V100 +.TemporaryItems +.Trashes +.VolumeIcon.icns +.com.apple.timemachine.donotpresent + +# Directories potentially created on remote AFP share +.AppleDB +.AppleDesktop +Network Trash Folder +Temporary Items +.apdisk + +### Windows ### +# Windows thumbnail cache files +Thumbs.db +Thumbs.db:encryptable +ehthumbs.db +ehthumbs_vista.db + +# Dump file +*.stackdump + +# Folder config file +[Dd]esktop.ini + +# Recycle Bin used on file shares +$RECYCLE.BIN/ + +# Windows Installer files +*.cab +*.msi +*.msix +*.msm +*.msp + +# Windows shortcuts +*.lnk + +### Gradle ### +.gradle +build/ + +# Ignore Gradle GUI config +gradle-app.setting + +# Avoid ignoring Gradle wrapper jar file (.jar files are usually ignored) +!gradle-wrapper.jar + +# Cache of project +.gradletasknamecache + +# # Work around https://youtrack.jetbrains.com/issue/IDEA-116898 +# gradle/wrapper/gradle-wrapper.properties + +### Gradle Patch ### +**/build/ + +# End of https://www.gitignore.io/api/linux,macos,gradle,windows + +.vscode/** +**/.idea/** +*.iml + +.eclipse/** +.classpath/** +.settings/** + +.nb-gradle/** +nbproject/** + +log/** +cache/** \ No newline at end of file diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..94a9ed0 --- /dev/null +++ b/LICENSE @@ -0,0 +1,674 @@ + GNU GENERAL PUBLIC LICENSE + Version 3, 29 June 2007 + + Copyright (C) 2007 Free Software Foundation, Inc. + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The GNU General Public License is a free, copyleft license for +software and other kinds of works. + + The licenses for most software and other practical works are designed +to take away your freedom to share and change the works. By contrast, +the GNU General Public License is intended to guarantee your freedom to +share and change all versions of a program--to make sure it remains free +software for all its users. We, the Free Software Foundation, use the +GNU General Public License for most of our software; it applies also to +any other work released this way by its authors. You can apply it to +your programs, too. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +them if you wish), that you receive source code or can get it if you +want it, that you can change the software or use pieces of it in new +free programs, and that you know you can do these things. + + To protect your rights, we need to prevent others from denying you +these rights or asking you to surrender the rights. Therefore, you have +certain responsibilities if you distribute copies of the software, or if +you modify it: responsibilities to respect the freedom of others. + + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must pass on to the recipients the same +freedoms that you received. You must make sure that they, too, receive +or can get the source code. And you must show them these terms so they +know their rights. + + Developers that use the GNU GPL protect your rights with two steps: +(1) assert copyright on the software, and (2) offer you this License +giving you legal permission to copy, distribute and/or modify it. + + For the developers' and authors' protection, the GPL clearly explains +that there is no warranty for this free software. For both users' and +authors' sake, the GPL requires that modified versions be marked as +changed, so that their problems will not be attributed erroneously to +authors of previous versions. + + Some devices are designed to deny users access to install or run +modified versions of the software inside them, although the manufacturer +can do so. This is fundamentally incompatible with the aim of +protecting users' freedom to change the software. The systematic +pattern of such abuse occurs in the area of products for individuals to +use, which is precisely where it is most unacceptable. Therefore, we +have designed this version of the GPL to prohibit the practice for those +products. If such problems arise substantially in other domains, we +stand ready to extend this provision to those domains in future versions +of the GPL, as needed to protect the freedom of users. + + Finally, every program is threatened constantly by software patents. +States should not allow patents to restrict development and use of +software on general-purpose computers, but in those that do, we wish to +avoid the special danger that patents applied to a free program could +make it effectively proprietary. To prevent this, the GPL assures that +patents cannot be used to render the program non-free. + + The precise terms and conditions for copying, distribution and +modification follow. + + TERMS AND CONDITIONS + + 0. Definitions. + + "This License" refers to version 3 of the GNU General Public License. + + "Copyright" also means copyright-like laws that apply to other kinds of +works, such as semiconductor masks. + + "The Program" refers to any copyrightable work licensed under this +License. Each licensee is addressed as "you". "Licensees" and +"recipients" may be individuals or organizations. + + To "modify" a work means to copy from or adapt all or part of the work +in a fashion requiring copyright permission, other than the making of an +exact copy. The resulting work is called a "modified version" of the +earlier work or a work "based on" the earlier work. + + A "covered work" means either the unmodified Program or a work based +on the Program. + + To "propagate" a work means to do anything with it that, without +permission, would make you directly or secondarily liable for +infringement under applicable copyright law, except executing it on a +computer or modifying a private copy. Propagation includes copying, +distribution (with or without modification), making available to the +public, and in some countries other activities as well. + + To "convey" a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through +a computer network, with no transfer of a copy, is not conveying. + + An interactive user interface displays "Appropriate Legal Notices" +to the extent that it includes a convenient and prominently visible +feature that (1) displays an appropriate copyright notice, and (2) +tells the user that there is no warranty for the work (except to the +extent that warranties are provided), that licensees may convey the +work under this License, and how to view a copy of this License. If +the interface presents a list of user commands or options, such as a +menu, a prominent item in the list meets this criterion. + + 1. Source Code. + + The "source code" for a work means the preferred form of the work +for making modifications to it. "Object code" means any non-source +form of a work. + + A "Standard Interface" means an interface that either is an official +standard defined by a recognized standards body, or, in the case of +interfaces specified for a particular programming language, one that +is widely used among developers working in that language. + + The "System Libraries" of an executable work include anything, other +than the work as a whole, that (a) is included in the normal form of +packaging a Major Component, but which is not part of that Major +Component, and (b) serves only to enable use of the work with that +Major Component, or to implement a Standard Interface for which an +implementation is available to the public in source code form. A +"Major Component", in this context, means a major essential component +(kernel, window system, and so on) of the specific operating system +(if any) on which the executable work runs, or a compiler used to +produce the work, or an object code interpreter used to run it. + + The "Corresponding Source" for a work in object code form means all +the source code needed to generate, install, and (for an executable +work) run the object code and to modify the work, including scripts to +control those activities. However, it does not include the work's +System Libraries, or general-purpose tools or generally available free +programs which are used unmodified in performing those activities but +which are not part of the work. For example, Corresponding Source +includes interface definition files associated with source files for +the work, and the source code for shared libraries and dynamically +linked subprograms that the work is specifically designed to require, +such as by intimate data communication or control flow between those +subprograms and other parts of the work. + + The Corresponding Source need not include anything that users +can regenerate automatically from other parts of the Corresponding +Source. + + The Corresponding Source for a work in source code form is that +same work. + + 2. Basic Permissions. + + All rights granted under this License are granted for the term of +copyright on the Program, and are irrevocable provided the stated +conditions are met. This License explicitly affirms your unlimited +permission to run the unmodified Program. The output from running a +covered work is covered by this License only if the output, given its +content, constitutes a covered work. This License acknowledges your +rights of fair use or other equivalent, as provided by copyright law. + + You may make, run and propagate covered works that you do not +convey, without conditions so long as your license otherwise remains +in force. You may convey covered works to others for the sole purpose +of having them make modifications exclusively for you, or provide you +with facilities for running those works, provided that you comply with +the terms of this License in conveying all material for which you do +not control copyright. Those thus making or running the covered works +for you must do so exclusively on your behalf, under your direction +and control, on terms that prohibit them from making any copies of +your copyrighted material outside their relationship with you. + + Conveying under any other circumstances is permitted solely under +the conditions stated below. Sublicensing is not allowed; section 10 +makes it unnecessary. + + 3. Protecting Users' Legal Rights From Anti-Circumvention Law. + + No covered work shall be deemed part of an effective technological +measure under any applicable law fulfilling obligations under article +11 of the WIPO copyright treaty adopted on 20 December 1996, or +similar laws prohibiting or restricting circumvention of such +measures. + + When you convey a covered work, you waive any legal power to forbid +circumvention of technological measures to the extent such circumvention +is effected by exercising rights under this License with respect to +the covered work, and you disclaim any intention to limit operation or +modification of the work as a means of enforcing, against the work's +users, your or third parties' legal rights to forbid circumvention of +technological measures. + + 4. Conveying Verbatim Copies. + + You may convey verbatim copies of the Program's source code as you +receive it, in any medium, provided that you conspicuously and +appropriately publish on each copy an appropriate copyright notice; +keep intact all notices stating that this License and any +non-permissive terms added in accord with section 7 apply to the code; +keep intact all notices of the absence of any warranty; and give all +recipients a copy of this License along with the Program. + + You may charge any price or no price for each copy that you convey, +and you may offer support or warranty protection for a fee. + + 5. Conveying Modified Source Versions. + + You may convey a work based on the Program, or the modifications to +produce it from the Program, in the form of source code under the +terms of section 4, provided that you also meet all of these conditions: + + a) The work must carry prominent notices stating that you modified + it, and giving a relevant date. + + b) The work must carry prominent notices stating that it is + released under this License and any conditions added under section + 7. This requirement modifies the requirement in section 4 to + "keep intact all notices". + + c) You must license the entire work, as a whole, under this + License to anyone who comes into possession of a copy. This + License will therefore apply, along with any applicable section 7 + additional terms, to the whole of the work, and all its parts, + regardless of how they are packaged. This License gives no + permission to license the work in any other way, but it does not + invalidate such permission if you have separately received it. + + d) If the work has interactive user interfaces, each must display + Appropriate Legal Notices; however, if the Program has interactive + interfaces that do not display Appropriate Legal Notices, your + work need not make them do so. + + A compilation of a covered work with other separate and independent +works, which are not by their nature extensions of the covered work, +and which are not combined with it such as to form a larger program, +in or on a volume of a storage or distribution medium, is called an +"aggregate" if the compilation and its resulting copyright are not +used to limit the access or legal rights of the compilation's users +beyond what the individual works permit. Inclusion of a covered work +in an aggregate does not cause this License to apply to the other +parts of the aggregate. + + 6. Conveying Non-Source Forms. + + You may convey a covered work in object code form under the terms +of sections 4 and 5, provided that you also convey the +machine-readable Corresponding Source under the terms of this License, +in one of these ways: + + a) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by the + Corresponding Source fixed on a durable physical medium + customarily used for software interchange. + + b) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by a + written offer, valid for at least three years and valid for as + long as you offer spare parts or customer support for that product + model, to give anyone who possesses the object code either (1) a + copy of the Corresponding Source for all the software in the + product that is covered by this License, on a durable physical + medium customarily used for software interchange, for a price no + more than your reasonable cost of physically performing this + conveying of source, or (2) access to copy the + Corresponding Source from a network server at no charge. + + c) Convey individual copies of the object code with a copy of the + written offer to provide the Corresponding Source. This + alternative is allowed only occasionally and noncommercially, and + only if you received the object code with such an offer, in accord + with subsection 6b. + + d) Convey the object code by offering access from a designated + place (gratis or for a charge), and offer equivalent access to the + Corresponding Source in the same way through the same place at no + further charge. You need not require recipients to copy the + Corresponding Source along with the object code. If the place to + copy the object code is a network server, the Corresponding Source + may be on a different server (operated by you or a third party) + that supports equivalent copying facilities, provided you maintain + clear directions next to the object code saying where to find the + Corresponding Source. Regardless of what server hosts the + Corresponding Source, you remain obligated to ensure that it is + available for as long as needed to satisfy these requirements. + + e) Convey the object code using peer-to-peer transmission, provided + you inform other peers where the object code and Corresponding + Source of the work are being offered to the general public at no + charge under subsection 6d. + + A separable portion of the object code, whose source code is excluded +from the Corresponding Source as a System Library, need not be +included in conveying the object code work. + + A "User Product" is either (1) a "consumer product", which means any +tangible personal property which is normally used for personal, family, +or household purposes, or (2) anything designed or sold for incorporation +into a dwelling. In determining whether a product is a consumer product, +doubtful cases shall be resolved in favor of coverage. For a particular +product received by a particular user, "normally used" refers to a +typical or common use of that class of product, regardless of the status +of the particular user or of the way in which the particular user +actually uses, or expects or is expected to use, the product. A product +is a consumer product regardless of whether the product has substantial +commercial, industrial or non-consumer uses, unless such uses represent +the only significant mode of use of the product. + + "Installation Information" for a User Product means any methods, +procedures, authorization keys, or other information required to install +and execute modified versions of a covered work in that User Product from +a modified version of its Corresponding Source. The information must +suffice to ensure that the continued functioning of the modified object +code is in no case prevented or interfered with solely because +modification has been made. + + If you convey an object code work under this section in, or with, or +specifically for use in, a User Product, and the conveying occurs as +part of a transaction in which the right of possession and use of the +User Product is transferred to the recipient in perpetuity or for a +fixed term (regardless of how the transaction is characterized), the +Corresponding Source conveyed under this section must be accompanied +by the Installation Information. But this requirement does not apply +if neither you nor any third party retains the ability to install +modified object code on the User Product (for example, the work has +been installed in ROM). + + The requirement to provide Installation Information does not include a +requirement to continue to provide support service, warranty, or updates +for a work that has been modified or installed by the recipient, or for +the User Product in which it has been modified or installed. Access to a +network may be denied when the modification itself materially and +adversely affects the operation of the network or violates the rules and +protocols for communication across the network. + + Corresponding Source conveyed, and Installation Information provided, +in accord with this section must be in a format that is publicly +documented (and with an implementation available to the public in +source code form), and must require no special password or key for +unpacking, reading or copying. + + 7. Additional Terms. + + "Additional permissions" are terms that supplement the terms of this +License by making exceptions from one or more of its conditions. +Additional permissions that are applicable to the entire Program shall +be treated as though they were included in this License, to the extent +that they are valid under applicable law. If additional permissions +apply only to part of the Program, that part may be used separately +under those permissions, but the entire Program remains governed by +this License without regard to the additional permissions. + + When you convey a copy of a covered work, you may at your option +remove any additional permissions from that copy, or from any part of +it. (Additional permissions may be written to require their own +removal in certain cases when you modify the work.) You may place +additional permissions on material, added by you to a covered work, +for which you have or can give appropriate copyright permission. + + Notwithstanding any other provision of this License, for material you +add to a covered work, you may (if authorized by the copyright holders of +that material) supplement the terms of this License with terms: + + a) Disclaiming warranty or limiting liability differently from the + terms of sections 15 and 16 of this License; or + + b) Requiring preservation of specified reasonable legal notices or + author attributions in that material or in the Appropriate Legal + Notices displayed by works containing it; or + + c) Prohibiting misrepresentation of the origin of that material, or + requiring that modified versions of such material be marked in + reasonable ways as different from the original version; or + + d) Limiting the use for publicity purposes of names of licensors or + authors of the material; or + + e) Declining to grant rights under trademark law for use of some + trade names, trademarks, or service marks; or + + f) Requiring indemnification of licensors and authors of that + material by anyone who conveys the material (or modified versions of + it) with contractual assumptions of liability to the recipient, for + any liability that these contractual assumptions directly impose on + those licensors and authors. + + All other non-permissive additional terms are considered "further +restrictions" within the meaning of section 10. If the Program as you +received it, or any part of it, contains a notice stating that it is +governed by this License along with a term that is a further +restriction, you may remove that term. If a license document contains +a further restriction but permits relicensing or conveying under this +License, you may add to a covered work material governed by the terms +of that license document, provided that the further restriction does +not survive such relicensing or conveying. + + If you add terms to a covered work in accord with this section, you +must place, in the relevant source files, a statement of the +additional terms that apply to those files, or a notice indicating +where to find the applicable terms. + + Additional terms, permissive or non-permissive, may be stated in the +form of a separately written license, or stated as exceptions; +the above requirements apply either way. + + 8. Termination. + + You may not propagate or modify a covered work except as expressly +provided under this License. Any attempt otherwise to propagate or +modify it is void, and will automatically terminate your rights under +this License (including any patent licenses granted under the third +paragraph of section 11). + + However, if you cease all violation of this License, then your +license from a particular copyright holder is reinstated (a) +provisionally, unless and until the copyright holder explicitly and +finally terminates your license, and (b) permanently, if the copyright +holder fails to notify you of the violation by some reasonable means +prior to 60 days after the cessation. + + Moreover, your license from a particular copyright holder is +reinstated permanently if the copyright holder notifies you of the +violation by some reasonable means, this is the first time you have +received notice of violation of this License (for any work) from that +copyright holder, and you cure the violation prior to 30 days after +your receipt of the notice. + + Termination of your rights under this section does not terminate the +licenses of parties who have received copies or rights from you under +this License. If your rights have been terminated and not permanently +reinstated, you do not qualify to receive new licenses for the same +material under section 10. + + 9. Acceptance Not Required for Having Copies. + + You are not required to accept this License in order to receive or +run a copy of the Program. Ancillary propagation of a covered work +occurring solely as a consequence of using peer-to-peer transmission +to receive a copy likewise does not require acceptance. However, +nothing other than this License grants you permission to propagate or +modify any covered work. These actions infringe copyright if you do +not accept this License. Therefore, by modifying or propagating a +covered work, you indicate your acceptance of this License to do so. + + 10. Automatic Licensing of Downstream Recipients. + + Each time you convey a covered work, the recipient automatically +receives a license from the original licensors, to run, modify and +propagate that work, subject to this License. You are not responsible +for enforcing compliance by third parties with this License. + + An "entity transaction" is a transaction transferring control of an +organization, or substantially all assets of one, or subdividing an +organization, or merging organizations. If propagation of a covered +work results from an entity transaction, each party to that +transaction who receives a copy of the work also receives whatever +licenses to the work the party's predecessor in interest had or could +give under the previous paragraph, plus a right to possession of the +Corresponding Source of the work from the predecessor in interest, if +the predecessor has it or can get it with reasonable efforts. + + You may not impose any further restrictions on the exercise of the +rights granted or affirmed under this License. For example, you may +not impose a license fee, royalty, or other charge for exercise of +rights granted under this License, and you may not initiate litigation +(including a cross-claim or counterclaim in a lawsuit) alleging that +any patent claim is infringed by making, using, selling, offering for +sale, or importing the Program or any portion of it. + + 11. Patents. + + A "contributor" is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The +work thus licensed is called the contributor's "contributor version". + + A contributor's "essential patent claims" are all patent claims +owned or controlled by the contributor, whether already acquired or +hereafter acquired, that would be infringed by some manner, permitted +by this License, of making, using, or selling its contributor version, +but do not include claims that would be infringed only as a +consequence of further modification of the contributor version. For +purposes of this definition, "control" includes the right to grant +patent sublicenses in a manner consistent with the requirements of +this License. + + Each contributor grants you a non-exclusive, worldwide, royalty-free +patent license under the contributor's essential patent claims, to +make, use, sell, offer for sale, import and otherwise run, modify and +propagate the contents of its contributor version. + + In the following three paragraphs, a "patent license" is any express +agreement or commitment, however denominated, not to enforce a patent +(such as an express permission to practice a patent or covenant not to +sue for patent infringement). To "grant" such a patent license to a +party means to make such an agreement or commitment not to enforce a +patent against the party. + + If you convey a covered work, knowingly relying on a patent license, +and the Corresponding Source of the work is not available for anyone +to copy, free of charge and under the terms of this License, through a +publicly available network server or other readily accessible means, +then you must either (1) cause the Corresponding Source to be so +available, or (2) arrange to deprive yourself of the benefit of the +patent license for this particular work, or (3) arrange, in a manner +consistent with the requirements of this License, to extend the patent +license to downstream recipients. "Knowingly relying" means you have +actual knowledge that, but for the patent license, your conveying the +covered work in a country, or your recipient's use of the covered work +in a country, would infringe one or more identifiable patents in that +country that you have reason to believe are valid. + + If, pursuant to or in connection with a single transaction or +arrangement, you convey, or propagate by procuring conveyance of, a +covered work, and grant a patent license to some of the parties +receiving the covered work authorizing them to use, propagate, modify +or convey a specific copy of the covered work, then the patent license +you grant is automatically extended to all recipients of the covered +work and works based on it. + + A patent license is "discriminatory" if it does not include within +the scope of its coverage, prohibits the exercise of, or is +conditioned on the non-exercise of one or more of the rights that are +specifically granted under this License. You may not convey a covered +work if you are a party to an arrangement with a third party that is +in the business of distributing software, under which you make payment +to the third party based on the extent of your activity of conveying +the work, and under which the third party grants, to any of the +parties who would receive the covered work from you, a discriminatory +patent license (a) in connection with copies of the covered work +conveyed by you (or copies made from those copies), or (b) primarily +for and in connection with specific products or compilations that +contain the covered work, unless you entered into that arrangement, +or that patent license was granted, prior to 28 March 2007. + + Nothing in this License shall be construed as excluding or limiting +any implied license or other defenses to infringement that may +otherwise be available to you under applicable patent law. + + 12. No Surrender of Others' Freedom. + + If conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot convey a +covered work so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you may +not convey it at all. For example, if you agree to terms that obligate you +to collect a royalty for further conveying from those to whom you convey +the Program, the only way you could satisfy both those terms and this +License would be to refrain entirely from conveying the Program. + + 13. Use with the GNU Affero General Public License. + + Notwithstanding any other provision of this License, you have +permission to link or combine any covered work with a work licensed +under version 3 of the GNU Affero General Public License into a single +combined work, and to convey the resulting work. The terms of this +License will continue to apply to the part which is the covered work, +but the special requirements of the GNU Affero General Public License, +section 13, concerning interaction through a network will apply to the +combination as such. + + 14. Revised Versions of this License. + + The Free Software Foundation may publish revised and/or new versions of +the GNU General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + + Each version is given a distinguishing version number. If the +Program specifies that a certain numbered version of the GNU General +Public License "or any later version" applies to it, you have the +option of following the terms and conditions either of that numbered +version or of any later version published by the Free Software +Foundation. If the Program does not specify a version number of the +GNU General Public License, you may choose any version ever published +by the Free Software Foundation. + + If the Program specifies that a proxy can decide which future +versions of the GNU General Public License can be used, that proxy's +public statement of acceptance of a version permanently authorizes you +to choose that version for the Program. + + Later license versions may give you additional or different +permissions. However, no additional obligations are imposed on any +author or copyright holder as a result of your choosing to follow a +later version. + + 15. Disclaimer of Warranty. + + THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY +APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT +HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY +OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM +IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF +ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + + 16. Limitation of Liability. + + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS +THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY +GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE +USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF +DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD +PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), +EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF +SUCH DAMAGES. + + 17. Interpretation of Sections 15 and 16. + + If the disclaimer of warranty and limitation of liability provided +above cannot be given local legal effect according to their terms, +reviewing courts shall apply local law that most closely approximates +an absolute waiver of all civil liability in connection with the +Program, unless a warranty or assumption of liability accompanies a +copy of the Program in return for a fee. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +state the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . + +Also add information on how to contact you by electronic and paper mail. + + If the program does terminal interaction, make it output a short +notice like this when it starts in an interactive mode: + + Copyright (C) + This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, your program's commands +might be different; for a GUI interface, you would use an "about box". + + You should also get your employer (if you work as a programmer) or school, +if any, to sign a "copyright disclaimer" for the program, if necessary. +For more information on this, and how to apply and follow the GNU GPL, see +. + + The GNU General Public License does not permit incorporating your program +into proprietary programs. If your program is a subroutine library, you +may consider it more useful to permit linking proprietary applications with +the library. If this is what you want to do, use the GNU Lesser General +Public License instead of this License. But first, please read +. diff --git a/README.md b/README.md new file mode 100644 index 0000000..33a44fa --- /dev/null +++ b/README.md @@ -0,0 +1,35 @@ +# Mangadex@Home + +## To Build + +### Requirements + +- The Java(TM) SE JDK, version 8 or greater +- ~500MB of free space + +### Instructions + +- Run `./gradlew build` in order to build the entire project +- Find the generated jars in `build/libs`, where the `-all` jar is fat-jar with all dependencies + +## Features + +### V1.0 +- [X] **implement [API calls](https://gitlab.com/mangadex/mangadex_at_home/-/wikis/backend)** +- [X] HTTPS +- [X] cache eviction (on max size) +- [X] cert refresh (when sent by API) +- [X] async server (for users and upstream) +- [X] streaming response (for users, upstream and in between) +- [X] logging files +- [X] config file +- [X] license GPL V3 (c) Mangadex.org +### V2.0 +- [X] bandwidth limit +- [X] egress limit +- [X] max connections limit +- [X] graceful shutdown (finish in-flight requests) +- [X] cache encryption (encryption key = cache key) +### Stashed +- [ ] IPv6 +- [ ] HTTP/2 and HTTP/3 \ No newline at end of file diff --git a/architecture.drawio b/architecture.drawio new file mode 100644 index 0000000..700f9ef --- /dev/null +++ b/architecture.drawio @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/architecture.png b/architecture.png new file mode 100644 index 0000000000000000000000000000000000000000..007075ea6362719f5b99d0657da330a5c4cdfa55 GIT binary patch literal 48854 zcmeFYi#yYA{6Fp(5z#@3Wl% zDlX0_f|Qg@yOfml3&kbiO4Y!tVQ^h33hf&eA!M-FbSXoq)8aQnOGqeJ5M>BO8CqJR z+4PVoK9>W&g6k1n8jHcA(-!YpLM$Ps5F1m7B?)3-2z9iw0Uwr7Gnh5ZfAM(=lg|0q zkhK{EG+^XG31M-fxPnkaC=&eNg%d?*gWupX_{0;zhcEbN0SU6O4ze-^UmYVO*>oQ| z)r}QpXo<0g!pxvH;IfgMGs(l<(9#KfXS2fT;1`x263&&pLgQ0n%~)LUxCPV(V1lC^e75*an^WKMr;Ty zjLpR3yqPe5h|nXPx;WbyI$yv7rdlxEe_cynjuJ)E7q8OjF{}_U4ogEQ8W^0$qA>ZC z2=EB&pH0agP&fw1@ghg#;C=#95Gqy}w%9s{0w%D~v?nmDDHy4w5tz4-8e%Q5!g@k1 zI8kf_(UFR_@H4bTx^gI_C|nfV0}=tF#^7VQF32bf6(jOO!vvmSa&!nk3`<0XqA*N% z7DenX4EOS4T02|AVtC=PR5yw{#m0$_a*AenM_D^sI{Lf8u_6xBk%@KYS!2QbWPytn z6^FsQVQnZ#3Y><6^I)M6h9!pLM=qg-$nd@v}6i#@V2P2y8IZ27(cV0+ORN(V&JbGo#9DZX45gLMJ!2s{vj!cnclyhD5m15~!NbCt-Uv^w4Hq6`gJMHG7(5aq6i4^4@p58_BcNmkfr^giKy4zC_^{Y0E`f|- zIFYsr&I6IOld;-!F3>q046D}4y;w^Yy?hG%khYQpO6T-o`3!)fkvAc_n99lZ-K%!xp*Xy*<$0NHi`A?S#Pjc?$42iT{u|5I%HMQepFF}8xs;O08sz~{KX;!{6=|$mBM(7!e|IMkp%bS<73<-`~?=#*3ks9l{MW_ z7%h3gl>k1Xp;0j*0s;d{V#jdZV?Erhy`9K@TwJIJnrszm4fjV_MLUW_-bf}&T?@i<4up|m4lIj(KNBTn;J~lL0IvE|xWqVn&94&a% zXfo5sg+Pp;SPJO`6wx2bW-?F^cW)avFLw`^m>KRE9*IPgLp^+G6b}KF>J%RC3WjGz zvxee;*L#Hf3GpF*j$urWkcPlR!#P$cPirT#Gn45N?T2Ccxe$>!o|wYm_*-xzB4}v1 z1()T+Vsan^QY@A2gF<+dLn(NQB@yOL!l4;12#-i;h>I5j;mU(MhepH1F=9HFOt9id zyNf`_NDP~cvthYAhDQ3}-Q3+{LOcYnC`US$FBV&1Eiptg8iMzuP(#qMF*Jez>=tA= z-ip8gL#890V~8v$I?~HO#??6n>JCTyMetZLI4HxCfh4+e#2j}k6bmKrAkf%w9>p_^ z&1GYJ@YYlY*4ZUGl1(DOqJhofA_&zp#6OD87kc+U!@~$9NFl&q$v4EAM`1ycYzv4V zgY3i?5!oUbKa|3-;zhv12y8q=Nb>fxjwFQpL|}bI%t)B8I}S_cqIuDLjC&+G%r!d1 zCeq6@1mzL#gmop5!>Bk58yhGD4x*wz9~L4cLLvB&C^A(P8*ahE$KZ)#D-@sLN5BZ( zXkt$)0T)Z8U_;qxM5r^JWZ^1g2pJZRe5y4EP7Cp-a-kfSbA)TSmya9NizWi!87Lvn zhfEfDS&*n6C@U^c5-NOgR#X>j5lkrb^|i$L3P}W~Xm~h+EJ@6Xrz5MB(TzP7Hsdr5}&y$HHyi0i-wB`*bofc#m1c+?Z)?{k;vgNCoztIB|Bqr;BoK+5%BmPSP0Y8CYtOO ziiu&nMMk5;7-)Zb1drntV#5%#P%N~Q6VZxHvZ4)QLM?1RDWw1o-d4V6^^A*{UFw$Cx3q@ftA3@EtEnK6G>R>2oekL z?o1?mfcLF%46%zVndl)F(FjxykLMpAiWCdHX{<0S2EodS%kZ#_@?$%S3D$0S7w`g$ zEAZg*Be-I>P(m#DKlmXy5q%j}0*sIX_4T2XJS71PW5wY{bEBCsjz7s6P3L?1iL8ZU z2#I6K6)^A!&q$0PDuUn@inDZg7a>ISa1RFG!qJr%73ohDg(F~YWRH+g$53z36j(9v zN%R#F*uLUWUp${}Lt%mlL&Os>o>U%Hf=Doy&LJF_jawwe0!k;**|B&@4)t)v`trkZ z-Z7!hUPv}A8tKM|gpqs!l0Y(ih)9Zsvn3M+wc>;#Vcs|lg@ba%yV~$Wy)kGk9qel! zi4(<(V1?1G99iBL?j-OU&Ck`FO0@JOI}!L$6wev$EyP=ddy?@4AELW2o=g|{V!UnG zR^BWQ6&8hp(3xQ@w!}>0XeNa~frcQXu<+0jf}6E>SR|6*>;?7XyMR26gvXFzl7J8Q zCqsP0J;R6`A8^$@+L99+8SRT*2uHp`lt0Sb8(<@(H;UsXpoRM|-Th(CZcHCXwq*!I zlI$QZ(H0mM#TrKuS%@4dd<51Nj`y>178AkEXh&zPzdITcW9?1lh^#!^h_Hwd>j+*n zJ`!}zW-%gtI21UQgLn1fSz5=EVG&*=EHoPB;_HF7v=T+&ydxrf@fMDuP!b90%jKY> zMInAptO!^X4CBs3^C2u}1Vt#4_$A94#rI)w{XIE&B8d!vhlv4T#Zb{MLS(oz8e$Q{ z72x@yJV!T23|z9SSbQ3p#vxmh{m_=qM1+9m&vEvoQkZ_c5Fyplm4~u&qKAnnZa9jE z55j^8g-2M&_(nsVgiw08h)oS4`qO!MOF9;$ZHzlCS|mnFoF>!)AW&DDg?qGfh!u{F zjUa~kgi!qn1YdeID>}+A%!h_S#8Mb83tIu^=1rslAdQURb5KaCvj>bx!Vxe?98PG- zgpjdTD4$R=RDh=7kW8+KPs90nAsE(PFfTMKloSyG!b}Lp-znBo7)A{9_Q$|bLR1($ zhUyZAiNX5wv3?vUmY*L4WPJ?9-2!97u?~;5;fu+%SU-w4jzob*5&gIx62KQLj1i() zv5XiCA2*s0iVE@bU|G70z>D5tQGT(ZP!X2PclYsdVT8CxQJnBRoFI%ta)F7-yl85a z51+$^Qi)Wt(BF&a1|`A?QK2Fz*U!l#79Qz=1~y;`{roNQNQA410cUWaZectRC?19< zNsu872C-p!+W;Jcbc~fCXUUHQZvKb57a%zJ|3BITMY|OSSxHIhO1YpMNy5O1UGg`` z55EtbT+y{c-}pp|l8K_?-n}Ok_eRAk6S~%S4Hz35r>CUsUD0)L|B1c2T}EB5CV%c( z|LORB=ev;i`HtXArS+T9?~|_)(75NXV;RTn;%03pzuf!#XNyI?f{sx4%%!=TPt?=V z7i^$3N&gTQn1ixkzQ^#^U_Zs;J0 zr@8~$#0I>WGaipjtW{p8x{lM8!xu{uvcdaI5{wE2-0G?kgy2Z!nPDP?Np@ zZgwd#d)J+M?OgJJ!HyYAU&2)|^;{yEu$20s_?^4f32^He>!!4;NAhwtxIIR4Ls!Nh z+$>++UTuxJlLt?G(mTZbmZtHwGgaM#kYjv1;o5tJJuK4y>5}+YyLMc2#)(o292*+lno< zGuleY;SXm|0#ok_Z4b1ftvQ$XZ-_e5wIB0#%xEv)k5w2f&|2aGo~UPR)?K4|Z1D*- zX)Qfq?yg-O7&XsTg{NB#c`;=!#m5qN!lM>DagbxD07E#(+G#mDcsZA_WMja*`mq(Fj0|b% zYqJg_!+~Y}uk{RE8J{gM4>DW5#XF0%Bk1mK%RTc#V?ufQcubU!ZPZxq{Lhb< zre^!OA2~-qsVC*?kyScA# z`S05_MPp@Yv=7~t6mNX+z|9s1S*JvN-)d>K(SwF=uD4@8ZC$C}c+;)WtcLr>-ca^^ z^6aPn$Kc;c@8yt!7VEfK_K*4L4*JuR=z^B|0~v|;6tmWE_r4YL$>jUz0piE;UtjKR z$Z#l@tl4y|cGU)dxwa3mD}*uD0JQN(VbGqu*w-Sgca?8h-L_u;pC8U&+UQoW^`P0V zZLEP?SHV!x`&6_xy|}pR5SY{B`Xt%Y%#PCi?jdESUMEv@x}9F_FJ5NV=y~}E#2{F0 z6f8*P8{&A^=^o{V4*LY=={fCluA#NiKEJvtV?KF5S)u1-)*FMm`*ZQ{pA`G- zng5Dq_0^m%v5WH-~pbXs$}3!9PFiy!?GpI*6Oa@jLT;pkN38uHJ^BgKVo^hD)5fKsLIQsVTk-F z_Ra3;Y_UuIJn@XX<_w`!AFXtMcJ>PE*}Kb+bPm}>ylkHC*kNvdZ@%VLorriV`s0~D zA$l@6N2vp6fbETWZy)6VGrs-Kem|^S`>~);jJw~yg@4P1TdLPyY!h)Xtmj&*jgAN9hT?jz+U_DN~r zli@F_{D^m|hux9MOH{fakH5{?aZwR!>#Liq+s(Z*Q}FYS{uSAK4+n0?KJGg0*5d|A zj~Zz`yt-xQb#=v4?t6=? zNn+v6z-#OyuWkyk>br93CC7`P%mcs=F;{&m35M1$2HViH6MctwS7ct^YxKaNa5G-# z2N=n!uL@;N7uPh+j1&g7?v+>G$Qy2qA#NDali8y;Ir(7u`8VTdkM9Xv%6q?Utne0_ z+}D;_a9HN{K6uDiW8dl%-#+!fNE>~AA>g#{WooPP%wY0z*SAgCBd2og2^PL8S~mH> zBevjcE+=A0jo;rST&jDf+dDnlah-tO^ZnBq*!Fu09SZDh2h#BF58cKsMHZ*@yC*yE zet#V|)w20`bG|XL+wJqr#}})Q*owbZ)Nk4S@ww?$V!o}2Kcb0I?70@v-(9QQK51s~ zeuWNul`#G5_DjUGxQ)ZhkSf$n{>%rmU!Cx>{`+3h{z{c*DbeJ~Y?&3=d#L*D2*G<& zpdd?LUa+*;!gc^}Hl@a^FRM|p}Nkp@0GaEHL|Gt=eE{}AH3@eM@KE%ZLD|hUu_`MJ9Ph| zQbWnas<#tzGML(18>BanJ+W>SwH!1I<2|%7sl)3&?cLO{*H$z|yBeQ~UV1ra()&I! z<>#c*{kPLIFM@tGTT<6vt{#Hu*|pEJR!YY!&N-E+*DjmN5HeEmdOJfN9avvOd9dVa zxZD?0+iSj8HhUZ`PlqB+4`?G!*40fW-kE(FZjvQ4ZW3b9KKI+8PDak=j16RSaO?+= zJUj!#np4((&_?i`Gc`=RDNea@DXGDw#zA-MrZyVT{%U{k^OveO5R4Mb$c-ZZPgC4?YsL_w`Pvk}}_|)Jc6U`INOfCXLEeM-*=K*;)K~ z^csb%YRHbCW2a2ARW;03X&W`1Op}l8JmDDj6!Yrzq5UhDb+`x#-tmfS$HxZ!Fj=)j zye2oZy4rn@G;gER12AK9iklRzYIuX!mv%s64v4>hHr?@ezV@f-Tk}0{(>0sQ9M#z6 zWht?16{hqH#%$XaRJA={)8=3Eii~gB!-5{*=n?0N*j8u za^2hbpWnP@ysG=<8?ux0#-JdueMq!?uP?kkwEodhL%JUGXD8DQ<*-90=E>W(XwQ2W zA3Qy|^4oip;bo_(zcez9G|DTM_Njl&diDt}pM%~`O}eh2{N)hd-nbVR&FAeMLTCoH z>IBNQAK!7QdBPyaRzKnQOyRamQkE)QsJ-lXN}49B-$=Jpw_2#KdZn>@i6Y{?hOpl8 zrFucq8mZl?%LUzg5lg34Rh5vNP6d}X>|FJgzp2g3NN5qPC&O`&penK*EO_FKMbTB+ zEsrL)4YLi4V#fQI?qja0GD?H0JA^h~f3xR&VASZ7;?0UZ$bH$78s%54(gpBe^dMBd ziv);Nog3Y_^^Wd&zwOm4lvgmfJYDYf1_!BAQ#tlTESChpd_W}Bh+lJWvO(Dd2Y)4B zrm6U%xdb7&ahs8Vs<-&p#9CcD{R&AFs{h|6R!C5HdSbR38I>^%zOX53xM{=yn&B>s{%Xr)1L<-rPVS7MxIx1cx+K=9WJYl`=6ZPHo%wVt5VC> zU6CG8EIO7L_5JbeB1cM8M4=?E^IhD1?v5HH+`KIJsLrV8i7;NV_qzOtPR#HB*oT3H zJK!pq2ENAoHz71ZzmwuFUP5_5Fvi(;ajre*21Gu9h|DJ_d~7^T*jCr*=muqMT#2?4h31 z*`ohx1WqN>V9Z#_uKkL1t;CpZ*B*%%?>orJI4+JlDY%h|OiKg?z{-eAemg$ai*}+I zscLR}xbc5D8s7~#8s4jF3cgar)Iag-j5hP6L*+jcxym`DKhc1GELf>{t?z41DOjD5 zgj~3HjsTw4eJN;1&#vS4@eN%U`ZgR_r7+q{i~&GAv_xgySm=R>Mc5Ar-Dc*N|8sP(Q@8SX zZgvB6m+uTNHnOq(zTdjzn--Tu|Ah471gspIHd*NhKfeeFJgNkw(T!=U>knqE+#E)N z7B8?|VBbMiIpKp7+rN#adQHBshlGk+^NptlV&Am9YdQ3wQ|mV1b`m*2e-J0vCSEc? z=s4yd^|>NgGV;zh04LMFyuM=@{h=H3t;y`a5#CrSeO--O`!@2d#sWeFN*X+%&OEC1&q&hxYPK>Qy++0(bz3UiakI?E_Koe^ zK4nDww?2x-GK{5X13sj#a<};m1Gj;}fw2z*(AW%c>%8}h4gU?=LGF)Jy=hAC1iT_P zPS0Us)f4{gUSLMA>qN6PQm#(_d5|M;krLoRx;;W9Niw9-ROL0Tt%tYJ@9&i_g=|$l zxH$H72P3seWj&ki2RwtDZDg^DjR^Nf5pY`m+a?tjfB=IphY$Vd9kvG+C#vIf{nI|Y zq<{AICq&)FAai4R5`bSW+3T!n5BIO0YTy2);!8&f!ax(s$Rb_m4BYAh+oR>E_4$0$ z0Pokrw<@guYZ2w!KJ{NOe0mCt{W$@knZ~;r{Bip`^sx>=BTPsYx|M{}HSYU@x6Qs( zNxmQakU3-E0QN%Fn{&PT5(C$lDb~$A52#7_yGJzB<0HR4RXt<6l6ZC_y)~ad-ep+n zec|XTvz@*G0-jD608n>&*X@|^>Z1YIIW3bz4|+z|mJ8)61)b zb0lMQ)Q0$PUdJDS2Ol2<fz3I~+Q){(+1l)v)05E>*u3MzLKi+Gh zuO<8#Sz}B*lXWg_HbKG^UtXy!f%A~(yf2t+kD2iNdtcT*a?qjW(B_=^Z_n^umqW0A zSHlj!x*Hz=sHh>_4KO?Z8Llw@>GGezro|u*1&JCTWovDIuutU>yRWA54`2i9&4dqL zFV7J4>U~G0Ex6h7_}L@Dam(HvN&V-?Y4x3DPOH`Tokaktq3c2b45$nlIqewc z|9z0TjNcESwr|Gt@*VTK*;+8~Wcj@HV11Q(i~uCPlmnQy-?r!v8z<#Lj!9*-7sD=r zJ%s^y@PfUpbeel^nP(ZYbxYuB*VTxaiK5-}Umsbr@)1cCX_#eJ9f@8yc%q3 z2Y_Pks7YDG1JWdK(X4n|>gFB($bR;~tsZR27Vjz}FzRakj>9HoLg09sj@Zb1xK2D1 zwtANL<+UA{a+Rx_((=fYsEmyg#f09vN?uOUrml0Yc&neKBv?)@*#M7pD2@Ak(>DWJ z_c-*D@ayoo3(~Snng{PEj{sV?rf%64b{`>o{B&X9L4^&wJ=LT3h0S;TnZQ+lnsF<$ zTCjTf^D3`HYiq+Mu>hMS9#ikV8eS;A|K@J|Z2TqG;uh~!G%*)9IDm0C+PY!SK z@s3DxPWbi|+v-*Vp&+B-5NZXcQT6xIodk!{#Wxi_Zp2UY}As|L1`&l zHQ1Ey`8ob8ecC4|-Vmr7KBaWE@Z3qDAI-fq@vbTotICN6Zbk2PyRptXtX%P`V~P6I zeX6NUHB^HMVvGB!=z@m?e_&JO-g-b@Pse@#%pdF2s|>tzYg^-N8??juR@C^$z&fGc z_%mGg-jt@C4M7jhv`&XUJxRC~#TuFHM3?;f{>5BE1YRb|C80ynfbx(kiZysD-evvKQNLxtDjjr4nf99c5kwa1^HO6wZm za;Z-L_@1AYN&^l?Nrmfr9 zzNz$~;{!vtf{LFK8m+YbJ`*17dpjngN1@c?(57r?{;I@$Mn>hpM|nt;{R*VqLLRfw z8-5wV=us@Qu4MsZ&tnE}f4NI6b=TgBsgQ9Ks^5tFezEmjQgT9ip-t~5CkY<^cM;m4t{ zjy65J^NQE(p3Yn(Ep(fn_aH{QHca^aQB&SZ>DzjV%2v5Qm)+d!m!9aOUcFzf_|uE? z;>#azxJa`5r!cAfOc0d5=qD;eFj;H$ZX_nBDhdJPkb8bk9N3e&>yZb@18krE@||ET zDQl&*Rh^cZ*0pa%)t^`NMW;WR{Ybvk8~tjb>*kIO?c%m`lo!WkM)YM~BL{(mWwKh6 z8VdR@REM|)UpO~PAL!*xEIjSZ|NA=b%Tmq=RZjvIe6yvx^6dW1z2#58_c)KH{6*Ch z!E9B!D&lMz@v!;NE^99 z=7#;co5|+8ZlR*m6VEPoyrzO5`Sb};oJi|-zS_jf2kG#_P}cHm2GE6qBj zSxr~J^d4?dIrQc3uZz1U?FcAViicCrsL1jJxD>sq`f; zr$|?Nir#V%JrK&eHn@+ta|Laa^8P-X-xsiwyj=$}=6$qm+qt1j88!AGm6kb3`9R;E zW6sm{WCAhuCP?;b4g{zxQA;3guqd63$iF9qH~>NGj#2#Rdmlh)ZEUpQb&k&)gxIu9h>bK%Dp zoNB?LVV(nt@CT=q`Ach*ky!$75F1FaR2?9a=MhpOMu0AiJGRYmi_b+;nZ}K(2p}kT zU5f~q`2oc2OU}_CO_2gZKLI+rYfh5YVdf42kRo4@h|<-xxF z?6hs>c9P8vz2+FK24MTxs`^n75;`;Lx%Ymb(YOo*%8%>d|_e{~2$#@|A z$2Z=L8t=+OJ@6>^IBJ!V2Y)cFa>@GT{hQ_~+{9j|Ghi{coRsK*KkJ^l9Ng$77YC%| z*6D0ZkSGkb(xqMR zBJ?2eorC5<_VA+VR&O)33Ig3Bh zYk_u^WQacvnVD)Tv>vI--@}>aBy3VjSYqd1c+ed&`Pc<1<41aEHD-!$@OR}hJz-l{XlGan8@;f0SJoQsv9Md%bIV2wfJpw1i@c?h z@(I9yz(Lwe?Y77(t;&Tm+iwUGwO6ZmW+igK*1O}7Mgf_|Orpu{mwWq0x1yN_E?ilj zGX=I%K2|ersn@ociHaKbVD2C|Tq3(iRX1vO7|>+>n$&a%RlXLh3zyZXUb3`zl0aak zCk~||wa`ZUQ*Fn01gS@Wrs?;GpZW;vzlqEzakW2UE>#kY)_wXIFp0QSYb@nSzK*xSHqf!1*msVaj<^5 z>Mz~cEy^H(@eEEBs})C>b6QSbQnwh;8s5({itIT@Het&)YBDeBzvu0Hw5D;L@u&kK zFGF_d^l8__1YWalhtZ$+JR4O7ebNIXj6Wh7&h5YEp$1jy%Idno3mF+%f|;~W_&I*| z!!&^OTUG#fnF}xP?ysgK|5V)`n%;+*!x||A;2|*jl(}FsqMSp~Wsk5|Y7C-MX$AS(}%gjjlBZW}~8{Qhos4+Nad;-`3drv}YHvny*2LM10GD8w@Dp z#KRl6ON@%D50k4l+~14V-pK&jP?sYYwUS!<>7l7+c*@E}rn}Q7F@RG67}`xgz+vLj6`+MpKqH8XegV~6cRodZ;f+zqhx}a&>~|QIcyr`!O8V+_hmCUc z2;n}baNg=#x$PHY=Hi9wx;z`ot0D5zxWx#oBfZltvm1A#Ctt!=;sL#FWPBVylw~^Z z0LWQZqiC=`>BG9mw3dV8o$LF-&=VEqvZSVJ^%YF`Hzn?SV!3o}N-x_k{@`W9^^&RP z!41mhKsY2R8A(i$o_JU>5#j^RAoK%WgHPK|6f544Uwq~I;BWzN;f=RHAMgG#7IGLln|R0blz6!dS^vkB;U z;=6!SHPlDPvJ69-vJQe1E*F5Er!Z?wNY3OqK&;*Ys_ymo^-aO%9h+6JDEu+I(k6RT zFgiQJdv6=^dv`H7$X;#VTkf(F$N&e9PJg9NgDAc&FG%RkNC@0rrMPCMifW}&(%6S- z)ZBI_=F>WJ=clw+?0sPS6fJPETe&Sl^+y0>TG z^$gkJ-D^Myos4cR1-obxFt7>t5MA(G z%$X5F7uQftVO$`H(1ym)FLp*^bGsag_mS(bDm;JPbNTWF69OjQrP z>K}gpxDe0iC^ZFkpRrLhTWbeOat=F71V#79rzJpME>%iVkfUQqn|}Yq@#=%L2bm5) zC^6i1E6S4lx^6P2?e!HPx>T+2sNmij1cy)4E+H%Rowcxp=A;t``bW{7}wczsy7nF-Z zYv9zp$|k^cN3NC$>QMC>igSVoCrstesM*Wu%)QtYYrnVoWJ+e+CifywN#z0n*QXF5 zCOF91rq+X~Yz&xOVf4r6qOe!E4O@}cf$=kBi9+!#4f$hNR$~91@lwO~BbIc+izn-R zif{GqLs%{Brj4Lukn4@ZUtBb_R7DOpW~|%~{|orI>cOKY#VV3`$FhB;GYW9oE=jQh zx9%&Z2-C~~OROt1>o5q8_;N3YJZc4%7o6ouMybYf2R7_5^S!+X2tvdezYIm+B(Taw zp37mp&pqc0K?%eT%h1jfknG%nh0#wWNr5v>ATd2TYCWr#PAEc3=`gDT`fBJ<^6|sz ziK``XZs|p%3Ir%%0Wk<=OdQbfCeK}E_-1V}>2 zjST2M^4;B{)#lId#{Yt3A6)FN3M-W&0$8qwKjQi^wMsdedUPPep^96|=zBZ}D{+GK1FaY)tIcZe4dE4`?6Ztx} z!p^wl>rc}imw|$gEkHl3bw39<&ADBtDh#ioSnyR@Tl#^6YF&5*3Kb+EP+@(8M9HqL z-U|;2?X9Wuzj|)jT1aB)C}jMoWVFGiGP-TGj3)<29v22|QH=Yp417t|8Au)@fMHL6 zM0h{Xlu92ewTs&b%67zBv!|@pn9Wab$8z5g=l%lOs;So%6e_%vNI9`@;tRpKO4TXv z8TPhY=?;UYcfq8met&=C2IS6i08gfXAW{K?z89%B+?q22i+c?f3|7H1_Vdo9w2X%c z#fdlff`HJnaqcm7z04BcU7*zOo*PP&G5-R5gAHBpQ_&gYE%wOYC3?O-rXE6C2B_UN88u4 z>UG<}4m<=ZQeG*@5k6f5L43vs)Prc+iLdC!#(}y7L$8x4SNrnehkuj*O7znY)svuv zKn~Xi1ZO4Anunvc%#H%Aj;PVRdK^Toi}hOqMtBE|EL4|Kl?6bZ;=gNFmk44}AD?^t zoc*LVS3gJdRdWW1{{Wq0z+F9nhZjn2QimkMT;vWJ-{#9gphuledE}@F)N{Lhx*Bur z6n~_(M);K~0^-(bkh#06{Gf+FTmvOU5+YRTS9_)rs7eD}e$~N_mAh_V%Qqpr9<_-u z0ioTyW7ymtJEqVaBRLp%*bYR;XJUYTLuVAVX-)_S0J^)##)(L7k@RFJx+g6Yj2|6rc;!xQ|303dYv0)c|nQaFm zn=(=&CK~|Jn^1NNP~aQ$z{R@Gk+;ljwY`s#=GpI_t4`diC6D^?dEoZ`L{R;Mj-P+9 ze1}mEj0QnkJ9G_QxEu57=thsDq~E{6tK`4BzbZ0iPO9*;FBh5mW)79zjRsXcSZ$x2 z#y+0Osd|R`TI;ahefhH?K`u_nRT*CP zg;%iE50H;W4TW!!0*gORFn-f91z#>aNn3%9h!lDvcTjaZ2f1 zkl3LgsiSN4GC-m0x1`zX_j*z4Wg6)s%DJ+(VGBuHdn_Sxz zgnF599ktOlLA#$`@>EGVV+%Bmu6qdyA6Km!E_Eq!S_Ub;t{_vic98xy$uVv$nc$l# zr9qu&8thch6sXmE+p7i+X)9#bs=+~#S1T>)F*-L})}mgh-k^uf2cX3SZ=tHOZe;A~ zDU;i4>hAy1XxwICwoXCbATU&>1NKt(X6mwLnZ3y~xAw1j?!SV$>v=;AJ3DdB>%9>d zq?DLjfOUX4EQl7Df;FsvknzArck|YEj8xj6K?*1-scXIADL=GYu`Dv|YwKsTj9Q{; zKL1y0;+o-$^D-%i?Xsm5p{mA|fFcP72v?f}xsfcCv%Lq@5pNylSq<}JoAr4y=MED% z_tYjET!QXNQRsLBfV&@T2ZuCyXL*Bz;7nIhNBR=ITA!!-n$f#gR&5f=aZ#v9(tjxj zXiVc{pv`KG>PlVGF{^jw=vAycL{?8d_agz8Gg8^70iu2id5QuhSh;qA7d zk`qjxs*FU^Iieo$gUkwJ2WsBAn|GM8ZTHigdm^yCjZFG zyLI5Mj02Uw*=#dp#egppynqRK>5BvZ>6~%a>BQ#U>Brezku8c{?4HFore_LCTs<>*f?c4MHLLHlk&LW z7yzbF)pZ^v@TY!z<95CTC|}7;F#OQ^wT0Zy;%uix5J;!mPej-gz>8bbhsVJwo!^E6 zc1s^vi@)HYOj7j9T;3ScWpJtq)FevI;dHca#-_zh4muuo2?0s+wfudC!DimIBS<6M z7(nN$>#wo<{3NdfsAUPZAam(w9_tACLEMt+*e`*s*L63ywLPXT2NU~Lrr@f+L^4Au z%iEE1V1~UiI^ZbG;N9t5i3mN>d)aAQ)Yyrsi?zM7pxh#EEQydJEwOiEo0+x*w}GQ; z8t{b!xrN9T(wFqB0ggWGA*;7->#RdPVK^&X9}3b%E~KmK+xRo=?}WxL6Vj_sM{WZM z4fjHKWciY$$A#u@;C!3BQnw8N>4H21?76?#-X3Hq~hT z_dU(~Bq~=6Sm$&xqc+AN7=WPhC)8@7X__AU>rb2&M*^zePl;oZM~Mz<82AE&hy zdF@kOZ*n~0&rO2N!MND*F0{u7=X(dOScDFfG}+~<((X1u<<6JXzXE>pP`4daydA!{ z>vn6Rv~0J=T4nV~8JP~->8x7?v2&9{HF4iLk}}b5AQIk+{bIJ`&)g|+K>2XAc~V9P zr)lu5K-W=5(}J2Z4~j1NbCZ_mE_rtJ9h3&lqpEsV=?$NaNDNhIa|>s*N%N}C+K zf9uiXS=$t;z;?oESHtCY-*UxH_k>?h+5*K*qV!8d*q*=B58IrU41FydMz7eYIc>T} z0f5s(%4^Ij-XHD#ag6*IouC$9mS` z&-2qZ?D4(e1-vS!WJf~a1-iVlMm{LimVah@TxEr{TLv^;Wkp=F5q4`)uZ2Z!w_N2e z`-_3?;Mm#_$gN+?)OYOJ&3bd!E~qVZLn%@UrQG-tfcLy6Ns;a9b%mgg89y{se!oFF z5{Sso`XLG`fh}A8YTzuR{GN?6_#MBmyj;59cTh@F`CJ}3)UYXla@A8e*qGOpcyfi- z!K0oPeYYbp-}y~zpkH1lzrfnFdm%qS5vv@p)~JYk`BTTly4h>X>gK`p`_IDKD8O6Z z%iGL)2Y7aYqecA7D=Y(ead7_r)mvIY?QU{d;c|tX#F0jX$z{FDrGb@fJxdw&p!PW` z=HsNLOz-=&?<=OwT9cRCS5S{#o_<6Pk~{fXBe+m%G*KsEp7%@1qh&8f7szBEzGujA zQcBv>Ma;_@(vJZt;i_rP7YB?zUzeg4moq0BFD$Gm1k^K?tk<*(%~c8lknga0?Yp~zLLeUqJ){Z}4;olC9V{xS88hv=pp}a;(7=YG&z_;95C8_il5j6_e9l|ShIUQ8BdNrbULfry#Wn)M;CM$ zW+8a*en+MDYOa1_(F>3W4~dnHTW7`V^E0J72L^NqS&< z-^KfR@Q=tY%qO`J_Rd^(x$_RxQq1U{s1OnP<=GJvMQ5pjS(ojK&MLdp72*HhIP`zt z_`kOLKgLULAB7*^9_LCpjob3|?dJ5Amq6riK0@3K{>%dEd=iz@=(nR+Ns=oPz6=~v z*dR9QJ@Yxver<^0=U&vYaM(JBjfp_>We{M_`+m_lNvONfQX^#9c`sJR%6Xh2d z1M?a)4yDj8D)#A~w9;-XS#>PS`=#RzNXQOU{YS;IQdrcGX3X&X$kCChz*8pnKUQvb zG5Mjisz7x>q2-yV)aQ7i$ncW3-Bj|W_LY4C=bQVj%hCOusm=$>A0cLc)NX2-_ap9( z$lv{O{dlh+mlkLFBEADukU2Fi8#k>zbKq-y;pmSw^v;UqhNI6!!xLLNm6UfJH3_)) zhp?%A=Zesk7WQkhE~io*PqzOh9^MswaX`wcH`r(bYR1da`Qf$gjt^cn{@xp(tAU4} zcU|p(hz64sHpVuk)Wr1bwH&o$?({hF^H1t#Vr#?dAh(OmDc3@qY+Bziq9*KFEa48@ z>&VqHWs!Y?9`RFeB>^H>kx_fh%Ed3;VNR{njyrbHcA`-<@PXcSjz{j}O;)XYa6Rr` z9{zntuF6O6mZMMJJU)crKQ1=kVS4yn&*5`dwH{wRUr3*sdT5#OoF*E%dYv|QJ~-_m22)M4$G-xC7< z?6;+wukRJ_zB8n37}AiE5k*;Fx&HRS3Qx6_A4(eiUgQ|9n$;|37n=XpyR>?@s|l&n z;M48pxmX>St#3ZPG0hGy$XoK{rR(`wyVblu)Q|T=gW6;@uRE61jy4;1(8Q=G0m37X zMmM(q)mz8eu87LnEm5Th0WSTMFu!a?^t<^td1@DCXCF_I+L^S$3f6x33vQQd7>qrB zzBc+$>pg0|^GeD$9a~(NU8z@r*-z(N*CMvwULKVD zu7!ARGy(DRP?g`;j4K~Hw-Am$%2{7PFyCR2>BG%@_wXkF$H^?6u7D3V979b@M!~kj zfrTx#g|087#z&fh5?lvb4M!gQ*fR2z#Cmt$-2TuJBBtf*DQtP@S6F#Sj-$z|x6g8z zkH-()Yvqo%SC~HESyOye2{%;rDmtpDM7^vcBA4EQ4}bIO{D4~HLjP5stUsun>vw`OZ4xYT+d8)?R; z(HuHr_Sd%q_cyfW=`6%=I3H{a|g7PW#m`1I;MbNA4-?QcA?uY#Y zMMFzjJ!NNY3oqqnX?Hv2{r$WlE59XViSg8~s>b53D`e(P;Sg-R@9Qqsv&tOZQgLJA z=PAq)B_N4+-@JJIa{T7C@dj6#p7mbz^KdB|Q`fYN!CY~2w5=K9-HrY7X6>k9-Ma^I zDvzX;_WVuwE!y>SnWp)rHLZGhS{&hAci6@a@o?Pir&^JY_*r6lv-({SKwZpP6$Lj~% z$=n)M*=10p!rQ07xIa-@!#AF4AKle4=v;?&eCEuE3;`|Y7Cv1h3m6sJD6Qq2RQjc;DS^pKj0i z1b!(>7wk=0I#L`F^thPolkc|1yg4OL_FY=?uaUPMHd}^mnLp+FVg|1?X0E|+yUx)y zCZ5jY#HXE~&4zQ$8{v=M@y@hI|ITtLnbFg{d3s;Z8$wF$XyQ}eicxyz=tH=+8uQ9 zYti*U`Dllix)Vif&U&mh`*`j5mt`&$)tS8)Kg;JfBDDQOHlXVL<)S*YZec>ShHY=) zu~(~?Y31yS#<*OYKy=&C_R1~o ziPe3&5<6RHeLVi8qNRrVsj6L9N&c|PO+jC_U&OUOkWKLoP42zB>+Z|=#=cxxozYb} zXAZiYQZP1GFGW{4|8zeR->8|kAA>u3{-x9I;X#XMBNu88_x$ZBvLeiW>KkI^K%*~y zWP-BWqE=@3|v& z5S~VkpU6`5-JAGX*XxLW@&{PNN>g6xj<}j{A7A?Ku@wZIIiRJ# zL+2;12_IAy37>lFXdEysLI|hK?^EujZ8%__j7b=KFxFNXbQ+bkdG+NzHeCBRqrUTM zQ%Q68YgUKP+5esXX>I)fu=kc>RetTdw}gNo-JME<^dzObB?Ku+X{K}|t+ce1NQbm^ zNlQ$nq`O19^BvRwdiGlDc;9vG=gWKSFZ&zHr^wZ|^hacU9p_O$=ThVjN& z*e%24B%1pstOF-)w)_?O)ZHzqLdH7Rf)mcsfz!>!i2H#DH5l~Q3b3|s zcIpZl&P>|1AID0LLT@~-lDw9lJ6{EV!Z16A7+?HJ-||GYl0zr*)1Ke?HIVBT|F2wt z7eD;|^jiQ0zE1x5vje5fM5eSlR%0x7yD+k*HX; zd&2zcM*CyiuYv8@#h+o=KN187*5V)X5PHh$LnK?0<*>N#M zV3Smo!uHv#UP9%&Q{Pnb)hKAw1bk@G#^226m#lhkYshTx@Hsp|@@g%=dH^+Q@rm=P zGD#|(txyA6FoTLs>sO)|!Lc-2^j~^O!<@xlaU1t2zhZ)?9eE`xDYgd6h{&WDIeTv# zOqk`HZG6eR}2h(Z+?<+xul+4jy;EAQvZjh)MP4`$Ba?n3j|WA-=d0Nq*I_!s=55| zp#5&HU$4gZ*o*L0o9BIbrI_>4gqh}1Ub<$bevAB6b*$^oN&~fQ8X>D`5JWzLpei-1 zuZ&Q_>D>}i<6PZN?l*jXBKE)I=d-X3h+OjMdDO^So=lTNt4N{7F@)aHI`wFL?6o*S z^Y>au4LMw0HWYbM0oOhBAJ>uy-*v!V`VTTjqDJPAkJY~w~T23D+=U2_1 z-!pVF`sB6-B^UaQYqrjgbSov{cFB_)IUAzO2!AJe#YDugebeTl*|cp?@F%44tNNss z0XOxHLwSv(o`7awXM5ZW?MCGlCmJL4tiB}r9?z}a)OgLDUDoZvhmwulmYyJEuRjM1 z6_&vzadrNtpsRi0WQn>}w@D`)Dk~&JA0HbR&EXrWoWDUyVJUm{Gvk#&@tK5A&(D{o zu)yGIWFAHt#sWe&9M$ICU&MP54-Q-IwOB6>V~NY_J;O_zKUOvy0%a!=@|?mIy559Y z`<&38$qmkh!jT_e*fIqSiH6ds7@-{J(-mafmHX)tQOAo3@4;`Ks_Cwe zqTT$S`|I3Y?KGOhKHj$4e+KUDfz)_L2B~$n)*6?})2OSqtmg%)b@XHOHVuA%im#Zg zt5)M$5#RTwz3ov}Vbabf>&tfQo9UQQ4>sCv#$b28$^L{SW2dG? zz0M-hciH`J=91^_&bkWdb+)B5Fs>=4s`nk(dPIfRsNQ{B~x zFSqt*8@~3nq@KC%Xw>=YTc9>VE1kVjfLD{kXj9#!6T-Go*(*-iLt>~eZ5|aEzd82a zSc^$>$ZIH1YM_zDcJPDRxRLOfhUq2K3Cr^$lU(eYEGJwHxDO4hd5ltw=5Gbj3eQydCqDY$4m-}^C}x0CY( zHu<_pyES;saay0OZWjlnSY4AFdUe;aYQ;bO*00cQ-!DKV20hbP%B) z)m>7n*h!Z6MB$@3xAj@UaDF{zi%#=+5SZwQy%=DPu{9c?8<7(;kTZ{9YXlBAP|v+I zN<6b}Ku5$Auk#(jLeva0#wP6&T$Tzybo|x)^{5tXA(?w>!ZoD$#M9fZ*NPdu7%GLH zkJai8U2`{)P;F#{!G5&P2_vJvi8FQE>2YmUkD44|m3=%e&Yunp5HGj+{nTt)kBi9= zI|Sn%ZER#=DNHHyji=^@Z)D=2hddi_+2UbYwqrmJXok?FU%t0Pj5%($AZO6{B6rjA zF%d~h{Ja@Ah2Z?T%yKD)0{J)m$V#Y0RUF+d4rs^M!%=J6)>%m_TeOyN-i4!@))rIf94bMUN!ZD=Uj`sW>M6^4$=6~~l*fy2|;{+Uvk@HT~d z<+9^dxU=0BAwBp{%78QhX!S;Ic^lx@gfq&o)LX0wG3yrPFaF}((`#?Rm6cd$Wq2Zv zrZ76a=F>HQ@HU6ah(f$Do%X>#)mDt z_;ETT$sa@G-X%UEF*~-Bkc=czH6qtddnIV;e-)aknjymR2>*%Z;d-d=)DwF=5y2P+ zRXqDrU*(m@vKx0MR<4HryFC1Q*|vk6)+70&LJVC2beSY|Y1^ObYS7j6QM`7As7MbvE0QyryUXO)hz}_7p<>-0kIb+bcP*$0T2CRh$lg;7?_0 zuI%0Uy>R7Obnh*{tW`d!P2q8;O042&3>@7J@4dR~%4!|ZSVqJxco!wG=6LRx^Hzf_ zjNywnQ5YRdA`1gG%(w`P`K5Ls7r#FdLoNx+oh+$mj>|(=YpJe4JI0U?%`BopHrR8 zaa-rNnYcLQ`!LSbSITo_ORdCUKOzgeQL%$5`hx_-;=y$eL&~rYpE!`G>MNaDm@c z)0k6RRf)Lq&x>TrH>BxG)fMPoIlPN_TseDTH`^EP6@eC*5F~y5qIZ%9U6E2tr73S z#b?X4L&il1aiY%+V{g6P=jGC)TwEZJ-{asJga?ngvt`SG4wkK?KZ9pwfF2-HKx64y z#h|f@V!eD|`4Vi%zCnCXeh4ue?D8!Pz0=_2evhU}(?y!fA5ASvCm$w|Yi!lvdz`OG zP5A0N^X#`0u|$RH5ZJ{Cf zty7!MOX$m)pkEhimB|@FVl=D&_vFN0=uyh|D!W4pS0-fZ_Q6$hK4Bt{XpB|G5+ZDK z&1bK~J1U+Co^{5k7;E81!iM@S!n`d1fKGAP#F6eH=g8=0?7-1dx4EANho!|4O2^9-jYbqDRicMyky{1fAGG0FGT8LGv^WClp zQh&XXzWFrXa8C?MjFyEHWNQ_R;wGR4tq1(FaKRl~lUKJT#nh$ZU%M8qMCa z+$SMAzV;?XV9C12=ecwLnRY>-S2i zNo?utbq=$!WT&4LBi!cJe!cVM_S`ioQqPOlhiJq)HtLnYSQ@Tl{W1tDdvr9wdF$7)(N^6knFd0&WL?gFhr!PL4c%t!Y$g{_f`X=Yr-J zbJDF@&?O!sByTqB<$qzjcvEacY$VG@;mX=lW*%mRIQgJpvj?B=7PpyHgY(z>fd_%Z zo(A?aTi(?`bQ^s6tj=+2vB?LmtHCc`hovP+qt@X{lWd&n>szM%sRr$*QIu>k`HGa* zx~z22P`Rss zkzZv#ROSE)IY!KMZ&pWs~q&9OlYdui;nuB&wWg(H?W(%_T+<;4uirc zgAn5sW}0OndBiE}Rb72!eUoqh`wv437TR^Yt^x1}06tFx7|)_fc;QX}g~WSwHH364>2%XiZNbxga<00RHhOLT;| zAk?iGj5Z9_9o4%xsU}=fjg&Z)1}#zDht;Rv+T8ATE$&-9$|}en-d|_x6PvZms(c`? z>u)YM_!hp9&PkRky|$cw)H6BAA>WSoYC^`yb51T@LJNb)Q${7fjY5=dZbl%UuG=WS zRqAPB{Mc|FuFZ6D{L$UJH>Mb5b^OaAZ`%7nj+4u4*Ld^MbD+~EqHAq28s z^t+0Y;^!;(I%~zAx6ORWj-FYOFO4 z#Yp%Sj+zg?{46ser!lA)o_l`BAzWv#xr#AS+@@buBQ!@j=MjD5@=WuJ9*2;^VQZu| zjuVBGqXjkRxPH2J^c+4wr9yY8MTYE!PBq5AT(^*MwvQ5*epK=|h_%KKEtxsPk$aye zQHen~zA}5*;&r4sj2DQJaYW2kY?Na9sy*&`t@YQcR;d@mKOQgN9I-x0M0${ITF>{* zbM9VJ`~WdU*i4d-n$Ka_$mX}d?wmY{;Rp6fivpd~@ovKUyX%`v9&Z0B*`iArt7fS* zv-MnM-R#AVnx~jI`ZuXy=wi~Cvz3~4!<-g;977VG;sY)%=|#W4y3w=RCr~QB`s5q8 zy~zD(l`i7WYQ&LXa-@i4wy({7A(^U-Gg#?50uPsQUYARlJ<+|oXsy5sKvq*9F=x)T zE{XoINW=J~FEg%>GSf6Y)_$fYRR0-{O+ZQ2lHt|m0d_0NMtC+E&33&QF_nWI0xcE! z#E~Qs1%IFbQRaTi@>f@8&U`m8+4ErF)qaa@?3JG|^GMH$N2SH-J12cXmYsPk$1G{z zRgxvgog-G9?acWcQxSjEE-RLbD0lCI7 z0_)(GAjnF$uTxfZmG6L;UaLc$7qfsQ-!Dd^9$gN@!d={-G&)|ZU4pHV$Qoc`Lk2@_>iYM=q<33Y@6c+9p za*mQo5gf3)&_WNi#6QYx5Dg40+5ooKP??+EJ_Tpjtsmw8QE!qgi=I5;CBOl^Vo-75 zPqpD}rK$i|_cQvxjbTVDTL(Kq%+|-asvKtgCp5_)HlfgTYG6!DlE`(P$jTOCjgWUs zr$?z%t{z2toeDYRgFQE`aiJ`zwM9>I(fVW|CQCa}ey?+1YUupwieu}fZZjHzM^T|r zu4xx!f38Ke=TIbZCsjU76>=g<6$b( z99;S+(;JQhyhsoK=J4fq26QaR?@Cd`BPJ0J*JH0yzem6S2~SD?N4(Ab_5|v8KR3-X zk7ho}Bu^RSG4g^jnzfu(q~$<)f3{I#F)p-DK;dI9OEe)e`Js=^Ylyeva<{koS`acc zdh3KR{(C2Qv*{Y4@ps`oqC`QT|rp z^6-RRMhM5h!R=J@bUFAL>gF^JdT;a%(-x1V&irI}n93lIm01`@Y5CN5OEGj3P&pxZs+bW^%|OvOo9{98jihaPrprIzGp_-Y`=%3+{i zjrby*XS-bgtWxMAOg$1Y{?qU5UXMgxRD6;QqfnM z`f%>8?8?kh`yXA?v?XgOeUkVL4ODkGISAQMnys&JxXzZB*EbxCL-SX2%*F=%e$|j?5i?_f z>|oOtMu{x^R7?$+o&Iy}?fFyS6=B@u`SBCJ%A9tkAc`Nd`a(XItEtHExSGS!=-aC& z1EnQ6Mk-$r_fz}dKtUYEI z=OoiTOM0{|HhxEK+crDVuu~YlT^yIJk2<{k1+8BFLD66_^r73PQUHC#>)mJBC-u0Z zu!EQ6*0Eng{oAF&4ACk0`OrVE(2t@lhXZCDO_eM^QrBqPm6tVPSrEIw$44j*ZZO%| z=+W)o_Cw6>zRrkbmPuEamG__S(0;xfw41Aex#)L-UG(p=UG<-(zCBM_xsyyX+m)Uv zj)}k^7h$|_Q*_n8;92=tf^Q1v;cho63-Bf1`fBouCc|UtL)j)BOtzW(Dx9O6XkDD5 z-F~DhsClBbfX1lJrBbA|fuM~vxSrIE%e=b`@J|V~!#)T7PqjiSU3$XmnS0(|*$R>N zM|m9RvOJN)V#L`Pq#dr?ZSRhI9N!V)wcW+}kUetm+JRMytlC%&}HXjhqwD%p`b-mnqGrGVJmRQvocp^J}8FP8(&wdzhTKLPjsQ9ip5xU96 zX2{5Wr!9k@?0}4lYd3>s8v&Ax-tpRuRsq{A=#R(&JUm8Kw*A^aM7r9#{xLOS5gR|% z1xjR^YaR&>0M$5WWNeG+uimjqLJl`i((wL0H&U>EwH%4CjDy9j<)h(cNH=A=l) zoKgD0p1+4MvhuQ;CIjN9#bIUOWics9}mC{637C5QYU%iZ-)h~43u>C!BMymQ} zu`U1)Civ`^AhVD`vkmI686@nkctpqF7zGU#oEW&1Ee_E)*ZVCMcRK78d%lJ{ATczG zRcE=h1YfxJ7$jH^faKQI@2J!@IUWhj$Y|;tv=7F+Re+^TD{2qeid^QHu7RVt2ktYO zh#DF~0y)RY4Dzw!fXcMB{`##QE)EHxZNNEHSLgd`26lk~R_~oVKpF<%zT$zD<+Q>; z(_k`?vO0#=RB*d9QLY5cgW~}Jrh*NYMMd5yjC8>FsbvK+V%3oCF_WBOqoo za$teGNG(A+Gy?#Qz^$@YSOJ>XQSHE4w7T3K!3}60|M^6{D)YBzyL!OUqwrs!$&Ax1 z46s)kGdWC?WNpCYR?-ZJZMD2DkdSSFxE2A0AIX*qgX~lV3jgJIrwhBQ0z}PHG(v+3 z0kDYzkXHiWC@TTZkilnJtnZHz#~MfzUiKdFF93tjyLV0;b)Fe;PwWOrYmaBl^pHGA z?j}czB;}Fy17H*2?)9cw)B~J>Za7}Zo|DLtMm)n?>gV@J?&7+sHv{%YR)m9?p8v`P zz}qk>?P|0F_9u1#^GyKUTRlc(Z!A_s{HMz51{OCLhp+!6XLLuxs|FC8R)Lf0Bfy1C zhsoi5hKYXJqzQfG$Wtr5WD)HF!Ff%dA>{g2r4;ZCaAZxFa@b$h0?6emSD-p7YQaUgy&;VkX#-Slb zf!haciUI#4P)ZMORRB)s2D;y=U4rVYm1hlrkgWu~k9m64mcP+E<~u{%{|kw);`B$f zsT{lsfaHE)k#_qgU*&;>usuueg=Lul95uMjCfU+Yl5yKG^09?Ql$PyK*)KSyK>6T_ z?r@01J@q<%w6qB@`Bjv5q_P(W5&f&&u2CaHt0O~Zqj~lZmA1aMMBy=&n{H&9trXdX$B=a;MTRlqs{>=aF+yb{ck(GOgy-i8~F zzf1d(m)5(^LLbSU0tnmvz^~4HF|dq@ybjA?1%xa78;eR*MDXp9)MntL{SikW_CNl; z{x=(ihPP|EAbH$@>S-?#!aLw@VkxUK`Hr}3iVqKcmghPtXvyzaVHq<|i$9ZO%LWKx z^L6amEc|^B=VU@zDivV-%>!0T&9C}=0@(3p5drO>H>?5jMj~));}WOA+Z#Z47@eY= z1BT7CG$8@~7#Iz*WhV{)G^H9edfM$(b@b%`&F;eye~?Huh<~i5N5;~o**|Z>*?bT< z_=!&m?vVF>6Q~(X0s8zZPE#?GK)jMb%#gM$iN!O(qE7&BIi(PE!dVgJXm&(I;9p6O z5xbHH{#Dt329IN4h%P*$qhovuBK{fHl5J&}wGjP>rj=AM{Se+;z)ubE zpZ-<_oDE?38g3H(FJE4b6h;F~^f)pyxYd9`5NKNmWyS_iZI@AAWC0Ae!yb^UulN&h z1J0~7{2F0?^tTPT*Jc9$HYc2|wFa2!7+d0ZmmAc76IkJ_vp>E4JqqbxrJo>Ht+!yMHqFYk}PNu24AEf z0n=ejW5|0DarKSgo1|T&$Rt$paQY7%V(uU&Wf=fWo6KOa0wjfL<_$$NAy7cYT&T zBVg8iiB$W;NFiMX(W2T0;4WVX=l$*Dz&=I?toFqJ>f@1w)&J`?dR5Z_W`P9`hx?0h zEPBBR2YG{F$v(MSXmT&78%BYKhLH)@LkAd5g>m1$sI}9R$)``M7lF}G0FP_}oCykC za9XbzRnudEo4pX@iPP|daFIUFD>>LeDc)!svW=DhKP3 zbPdp)00e?)OP`*f-s)$!eNte*FS(*>iw6n4?Z^M2?>^<*zKT=M_;G?k7=`B zk!|uNgC6LTt`1R|z=8a-#p|2U0czl*mH-I73lfk~9dMr_AU^&W859C}4AAwmd=Dsa z24iW107F30Gb_q8)*R)%W2PfNY`zefnTTBh%O|unc46jt&Z^*@aAoDO1txKmx)=is~E}bZBYOb|8Rw ziM}T8Q!CL<@0A|6Mh{Z#`mdXTL+^AJT)UBIg{HeY-4F|z(G%tx=$TQ=D5^8b?eTek zOo3+j9|J#FX5o4yIiZFBYk)Xx1#quJ*E`_8WW~eK#Gre;969C?ntTSxvn-h;$s#o5 zs2xw>Ku~Vm#b1=mu}g9MB3-z0A+hLPRmSyB5}x@>d3Q$xoKJuVRIKJ<|LYDUG?roA zeUFH&z@?y&xp4;M#>4{B*Yth$$AFBW09KURXIR1S0_4dVD3B=_sQlxyQNxHdV)@aj zY=nvNtb}bDEvG8t1BnHjW|Db^zZHx@R^ByWSaH4FeFqjrJR(LkLlA;4FhLhOTkViu zrg9oJ7fNz2vxH}a_QGLJt;H{W#A78!pbhWic*qDBA3gWGsfVuvw`o3W;M~2d1qRk! zF)&hmgqsJ8?QsskeGSDwad+$}R3lU9I5`BrUS)Pov8)E|5OZdLdq;3@EDli+Ap!^m z*nkp)gzyt6j!ys^Ow}{vZ@b;Y6z%0z41$==jP8VVO{EeAWRUDS(XhdzOq2fDU=5&a z=SeD%WVhhULCQ86)^wHSvjXGiP7OIVl(871-`f*6EVHUwTdCVjxlI9*ty%(wtU+`2N=BKW})y3wj^jnH8 z#RXRh4l`$>Ajcx0ZE;m5WlPtfVh&Zme}HrF7%H2N!@<|ComX!|T=ey5<7fH&Y#b2= zs+W^jR<|gaf%b;;2HgPYdVa z4L$Mi(~ZjD8}w(YkHbBtKC;H95}73b;5x}PnyZkb`IHX-aaA)-{ND}N&*%4AFe(ZX zb0{$)1T9?TxZaTO@cx@S<)Su$;k7)jhJ@EXdN?oF3D$_WoDc$@5N&qIuQ)6O$$c4u zTr_!&O7(}xVp?J{-Jx`7ER@K(oA>F5ZRbjol6&)W85s@Nu;ZJb_X?I)u;%@#>U~jf z%d?__F5mtiqGCrM)sU7~_=nS_+O<1UBX%x>9#Z(23ScSwl(FhB(msG8#k|mCMdw`_ z)U%3qWlJyV?UiDMh zZNHp_Y8rnOK!TJE2_X)v>prr28f)x$AV(;IjqN54t8r>T(Kn$3-xIIfq)YgwBlU2( z^cdhXTc~Z9>Kt%!ar^jZ{wP1~-4H;&aT^uzPvG8lHq^{u`D@Ig1+`-B{9)rg`FkmL1dlShT!qc|B__?!fR&ZvpoOKwH9Knfd@@BfSQJfH#?i$@9 zi1Tg8%_HX2?5zUrHN!;RQIYzaJ@EiFwIv~U)gx#T;iqG?dQAw=?hV)DyNA7Ut)Cl^ z5S;d~GQa9ud`7qG2@{}#cCK@mGB?^k}~zQq>%lI8z$iGFb|qglAp2F;35y*FK4oEwolBqBqpvvXM0mL4rCf}qdV%)*i_=RSwG&H0LltK91u#XvCJzM5i)W``@($kO{ zJ!*t~{*PuWzbrlLhHIq5LY>?YT?Zc_GthrFa|(1y+GXHZWgNYy`E189(v$u7;c*n? zVc_9W`4SLe1derN#A2GipVjI19-N_te|8YOE1IP*a3;=PN=OQjiUPi!ib?}GwHMjZ!1q1_qxRZGb_rXG!PG2+BV226#0GvLc%}4}We+M=qD};E{tJzpa-P%Q3nzA{AY5GVcLK0DA!XFBgO>ECEP z*2qz|sun|>Ps|>PrM2`F;7ygupiO5-#Or*3kcj(>3nBq2+12Q=i{J9cQSYhO$g6`# zy7-y(AXarVdD_sYc^ug9#c+*)fDyD!l60E%L^ozBkZSuJjY(>ZX>_VICcxdIkk>q1 zZyr;{Qo{<(Dk7lknYg$Gvdd#t92kpt0@uvnTI6!j+Oq#G*WSdUOjg~=w%=n}oi7kv z%?B|hp!v*;D1^d@W|e2y9}5L739%oCuiu4#hkntJlm(O2G|62mUT=)FV~UQ3>oJb{ z-xd;F-A`pP$e((LieM2*uI-g}ihEFo9^bS3Y@n%fs∨$qqA`*n3aq_niZ>h z7m2ty6doiY^o?xa&|%n+uyuF-npW9c!F@cj=VyYhZ)W4R`OB1el4ZT`Z*Lloc`e2W zu1=GW6Bzxeu8!BUTujapY-aK>PsyjVxXqP0uUfCqym>8ukqBMg#z87h_Jso8t_{g_ z_F!sHBU!+E(nwisAr#&&o8sLWbugE9k+)Ou(d5A;DpCqn4ewP8t~#Oe<+LZT-|j_* z6S{9!6XNDwrDJ092{Cju|Hyu`KC9AOUhuy-LnXtZkfmpg`8-0XI9e26z~p$>3@B0T zLI=YL)6EVTU*{V?Xyz+3_fQCXumx9RM;A86TvQKC{OYpF6Q}!}* zNKTj2INMP*^UE4}vc_P7;Mg}SVz0`<2pky79x)mdk_q$JxLqXTK6;#WI{|3ZDg9Mt zIItv%_wND%8sTl)g%Dmg6K>ZY1a%{*I*}04Js~f5iGX!#4`O7 z7DYbOY(#`S2MVtQ3rjPC|7rA4Jq@FenAvT3`wLJPH}6`mc}+D5hCV^k?wX_ZNS#woC zYNRq--1!B%VJ$34LPtqTJ07(SO7w#X*m)k{ykHP2zp z@)~i+Sw6i1_O#7?RR4%i-r8yKa#36U#%vZ|`iTR>`n)IjX*)wonA!1Nb4Q@YQcf4g z)k?v=lv=Kz~M>aYF<*u5;DQj2odoliR8ik$W(8eE(r4y8X+qDbtH z5}^C`W+J`ud}r?gVu~iXiIQ5eYBwr6I{()%bwwap2EHi1b2>?|abiCT?t4_@FrKz7 z=I#2sgx9|(5Yln^JnJS*HaIG`=r}(dGa$3aO32a27vG{U!DvjtImqd34$0!WuQqDN z+T(s{`Kx4g?ND>*(QvTf+qKW{G+xj9r-?bBeATc2z`v`nCZj~8;-cZRtZ2Tl^d+}< zROoC|9Js%^5||DRyglw;FWDLhm)r1==a?Vg{dlL=H6Ic@o%z#!w5VKFqx`I8Yc+&( z#bs-zAq(QgolVd1y{UMfbb!1WYpC@GoD!P~rWmqK=lG7&3h?fEpS@BAylAuG4SIVo}I2Q>!UFj38iuJ-fU36Qflm`vjd7C(t=P3Qt_R%6Ih-<_wdKIDzQt z$%~V_O2Y&WU!m8ocE*eM>vchd5n6cuwlfWwm}H_%-^UFbd_uO9zRIcS^W|3*zB^fs zFX~1a{pBWF^x_TU_Vb#o*IG2`m{Lir4bv9`1n$BadFFNb-h&HksY0#D`;<~zQ`x_9)zjE?tGF)td!OCsva7VCMw^@|Dk6~ zPwryFo$dCMA~A+Ir$>@K3+xCD(->SOnZCZvL{?%X8ZwY3|819h9<%o$-f;eQ-T`_h zaQ}H(nK${4;(irE=wC_Vy1$SS*#Gd6yRU!mH35%jG^8QVZ}f`yjSI4`*Xj$})mOES z3N!o;IgzQ{Ba@_N&3gM^cj`vAyUT~aK6lhu(TOT@_u$;JptSUr=HI6RTZNq6_oUZi zvySqRAa}jt-!~#Suyw8z+u*fh-Cr|13;Fif3;6;`Z4zN;l=p;B>|~mG+lfqtvr5YmX0wo$Tg6+qgtJuMv9FE-SF7!~`uy&szHhgm`CbpzjWt*k zYfR(LGN$-JPFo;3Zd+G*%hP4-fkg&+Rb%AtAb zncM2?l`C{D_)Rd|R8l9>&AI3lXN;EO%XG&-2WCE-IpgS2gWtK8zMp(p73GO1PO z1XIKMm`3?TfArDf2A`{53U&l$DxqI|LVSo3{t=5x!0n?<=t9aV?o_jPFi#s{^jwPB zdQTzfLEO!Qp9E>rzkVM+U}B8UqPcs37%@uQ5~ew>uU+U@eWi67!cw!}=50L^{$rWX zek_-XB{L_ut~7{o*{hM)dQ|h=Z!Xx$sP;9pcA>rma>r2!OSrP*z#04UWY-#P+Jr+s zwwoW5G+W(=ah6{vGNaw7(WfRHXfAiqxjPb%DLBSy=k^F4zK|Ec(SD$UGwLNJ3(-z#{ zo4ET4w?prVsZULJDbo>@Y*?i>;0Vo1HBgz7M4rF&&+6j-FA86Di(W| z_ih?65=5=|Y18kISGb^o7!ejkHaCyl%NmAKn31Bg1dR+jz3nf;+F?P$k?jtR<$Ba{ zLrrp!Huakjh^>E-0rU3^jitx)DowF92sG(=5|r+AVjHL3vw3gsY>%ZEr>m?YJccG3 z-N-dQe9xNjb^YzZqMc7L?oqierSscXGbR+cw1cY|N!~KHUiRyL6`#9yJ2vWUDgx3f zv!Y=AT!U}e#kYk?+Lc1>UL7s&LS&g>5d+8GG`uYDJ3VMA5$a0^Hkj?h@%-;*D5J*i zd%vdFcHXR@l6S@F+v=A3_QAe-*M*m&CMO*jyn)e}oMkhNZi6GAVE}#XO6Y?ONYA%6 zm|tbtArQWTEY$nOlWEzB`=XrY|BUwCBZR%0pQW>z5_P<+XA86aa_--dmFYpZ*Ryxn z*%M)VIb^omV?ic|O^Ki7yusb{kcTMTmrLYnOmBx^@jY69EOQX#xrm!tT<@buB;!5e z`@uZ&j8ASvr*-KqcUxgu%O_SdB3uh%<>A6r@UVJo=8%D(|Eh?E zJP2^t%e3^PLbEz1xe`Tmq^S2=BfC91=B&Ao@TK!^|K=zsCZ^~!3aw2-dbx#Y5!}9> z7BzEe%&C54{)1^8zbM#gJ!1qclnDJ-^w(3BzI2z+sU4g9H|%!e*Izp3(94eIMI;wV z)twO>DHc||+gRz5`1E|$>FSz#1(|&^O2S(-3KhxtoE{8D@S~b$M%EkNcmHwhb zSK)T^@pv!;Gox%L8L#6x*JUKROr5iaw}HYOY47LSoBaJ&y0md%s-N%foy&}BKIKPc zaPSYReB#l#DY0S{n;`HuN`#uMWL%jQ#AGk{UuQ^8hidMJ8!f+RVoMi{JtP0EM#0ys z7j@A)dg!o6mS^+fZS?R9x#3akOrnl@wSv~M8drRqiLV(h1%Hwff)wsxU7a9C($uWD~r5VjdX(~$k1N1DF5Sm({w=&6R@JMTg|^1jZu**_$P zd##>owu+qHs7cXuZ(dzlgg;yjf@G_#20F>pZ(EY&@9Jl>1HOIy-2n>S$@;#a`+JkmToBK zwwZD<)AxhE(9o$VY4T%&Rk6HEK8w^W#Wf|K5qS)%<-b%O0j zvxmkrQ1QN0#)9(!OCQ>Mv_)#9*$Y=%$0TOmhV)5_zSN`(*NOc0&hF5^4V^djJ*+Wv zC31y|Hoc)|YV=}syICP7gvYUQy>aP+uQT&FE5_&iy}V_Y!;Rgd2W3;Rslf^4@ON~G z=Yp!Q3?{pPpU&=N^9u&q{J}KkoDR7NmF3yui6V|*!QR8JV4ex%Fjwl$x$BO!AuGSA|t4la$vesXVBd!{&rEoc1I{it59EKAgTo#NK-PCzk}F2sW; zPajA_#aH1PsxN8o{g&J-8K3B88emgm_j28*y8H|u@@odh`;4Z9^;G}o6fURz+KQQM z4d-p~pVBs#kD9w!1o}^&Yx_zQ za%g?)go`rTslGLamY(jW-ISbG zLyT6<-&ZHpQ<;8R-OMN&bSes#S-k}GhzM&qKoHzYfa*j$bwB6{Bmk z8q+zjfA4xrlb#_?>5Pc*;~zcniSYZV(Z6~i`TH8^8@SeJ&(I4b*dvD=>-SjyDKh=l zG1;aR?9x@?I_8voZj=;Uv~!>rpG+ix;e>Bez=P7kk@Xw}h47|tv ztGx#D9Xo$on`?g9BPZT71+lD0M0*qVkH9A^pfqLzmjm+(;0wxwJ=OV)mwf*zZ-AEm zWBsWRB~^6sv)6-I;FHu`Jy9$zf0fq|1v59GyiVHvJ^{)rid-Zjaspg=4UViH;jrj~ z{FNEQ$t;Ba%8ZW_Lmz{7m;Hln`|*+;ZY&83T4CfrrLc(Mw)|T$-2dBW18uoRiIn?q zG)TY5ro!NHW|hjLl>&Tfac%-#okEBon zRhK`FuZ0$@m2q<(Amsg{>azaP42}G&>V_6-;lPLx-oFkA z=>Mk{wa=K$YX8=v*=*s+%-_C|!fP1@1j`{y6-P8HTc<82adGQ^R9(fU1lpCqsxGZf z!j>Ie)#cVA zks~Ykt|`Y^3=rv8HK!@NGZ?cVP`W4*t`4ZM$pf4Rh*z`$lV7Q=bY4E5|0+J*$YsEq z4z8L|07*k`dEwtx-ppZ|yD*qI5^$ZMB8s;MJy;GC_C;te>29(Oan{lz$Ww?94aKG| zBcjJE{jS11+y;0FSC@$`fjPu;Z>eut@?@j*oQ?7}&A;;jFP-c*h#|u&&nkuy23}%C2 z8c4etom4zX2y?jNH@`9@?srl5@0Khlw95!#AT23>cd8oX(*^Bz=uAPO_(F1+74BHx zgO8D2 zNKh&OH!Qqp^Sk|b3UmHvCK+ULDS||RN{m+)z1=FC6nyRTg1cNiIKL`^L4Gm5VRt<*Co64 z^^Y=gP$q@LL@iMe8|ecsvW0{0rm*L4JBP|jKzjjmtSY!h?hCklcPiv-)yncymuNDR zeTuUbQnbxz&|>x;Us*l(IL8)fDtr6Y2@4A=9~>3F0134JPGms3NUF_5nF>f5t@?K& z1Fo$tHf|Gh-Td|a--!&kXQBwY(lb_ODE#kKE6BJ*=X0D-pZMMJ?sm5kr6} z$`us#))ucSYw4|-u6=^XHUatpRn_zER#=-l?|ZnOM*+$$7qaIpDMk2HeE(xHP2~fIX$xT>kU2M( zbdWmKy4}h?c@Z=KOsQ zD9lpBvm}yU!CK+w3dla5au|RW3M=872a?zOIRpQ+5CB8nViL2D?Spht@5+jkej&sM zPhZwh4FVkpCA#0aOoI=OT2Lh0I3PgA?5!cbK9-)yi4>9kIo_E7pKD&7$f?r=0%MWS z%+n1jg9G23VtZQ~Zo@MckhoYTMXsy*)SOcnw)4)cb`Rbo#-$=Nq7U zECz0mKLqJqTndAYMCKw4;7Jx9E(NqYv~ln&&WC2Az~GzIrtfcqDa|~ITn{G4u4{{%`1b)_ z0ba{Dpvbvl96jHN6N$NHGEUGV0tqgh*{Ra~Gb^npv8+o#S)YP^t?Ilv02-Lmd;UL8 z->O>BYvyCBZ7`Ntt2oNioEOZ>+DoN_kO0W~_R)n5rQ|!6U%)20naWcQ$ORDqtcxWU zQ&SDfeLz-f!4Cuw)BH#Oub*FQZ~~eFNB=NjQz! z2t0Z3N?jjcx5AIV>+e87llI96)O^xqjE zs5U-%{ zIw4@i7g#L*j+y*gL;PWYXkp5R7xl9*TL+89$^hY=Z```3w+GEDWhXCYP z+sMc$s_VVSc$>-#Tf{2gLQ*aOk1}z7!kV{)hqWF6N}yE$f8RUH@Dnw(fa2_wiwxN5 z@XCrS+YP^~dYMu&7!0P17v<>SASfmE4CDZEp}(8UOnOvdToSRD3CijEDSeN3S62ZE zS{}dy59TO5Xo~<$Z}(270chH{u*yH&b-EX%a1?=`CM6)WWliD@=;j$wG^|ocegm}U z^vtD8xUEck6VjDfB;scRh{ro@>?vcx0CIjgV+h;tr{CmzbtY zUv3cD@SyGk9IJxm4Ckc_gpaWSb zG{d~y=9;rcU2je6t6h!xRLs#Rhti%kod`1|(Y@M&;_AGk)!>WV)P}>1X2=&mE_+J+ zHWSC-;t}>OQ$E=%Ub@dP_0F02$E74` z$L2i0%Z-+gYu>8oMkP5Go-oOOM?!YH8%-XO{91BE@KC;siu5I-H30v^Fg+;}s+@16 z0x@pK0zHEqZ*?Ms*Njl|Yx$!LG~|mrm;GfR#bQP=oOq#_T;$N35LvZp;Wlhilua9D z%U<^gKK5M5VuJ^Cw|CXL2v&=RSbKnvD?zjJ=laTpmxCoBkO?H-Lb2ZGDMgWm;yyfUMMY#)dt`|O z>Y_XHD~>ZHpu59gaAMj)23&U`{|~!sCJXb@2SjU8vv&(ee#NR*FmqOtKqLsB6d{hI z^anhZ=xWCRG|gkn)IkP3dxUsFzCapfOO`I_i6n1!oN%=PM-fhiN@QcJnPmc)F)IKh z5=GxmEF9K*qFRCMxg<+~nUrw)hzFSfSL@;p+G#0V$JTg*o`w)uA7rQ9=0Zhwm&_^v zxB`Lt%)=EKTv9}{vfDexaNna0_!pQB__T*t`89LzVw@@2@v)wlq`ZIZq!5Du#rb6D zZG73V8A_`fIFr{z4LUwe#J#Ilp>ERy|jk$?&rbzUtF54%1wF ze4%{@$=hf}*1eUvXtA^KRQ?o{ItV@${7hgje3D9M`X)G)C{v;GFP;|FCAIrsz6iSb zQEr@u((oCi+9b}E-+zcG@UXV3w`c0RcRd!=DHTiNltnk6{<1DHex0^jyq2@$1cc6Ro(qU*e`OGeNit%{cU6U7!XbMGn8NiZBm;Y8y3xGsfxjm+ zYs=?uzhi09t~>jrm1KRra2DHyq;knlh1H7L5z8jTb&qR6-}NTHs%5Pw<3^nlO)jUa zK^tfAD?|C{Dy^V)&*k9xq1QcrCf??LqEr zVOVRIH1KK3%oLJ>jY#zxL3jzLr_n_N(gZG4pgoyv0~LNFa%XG!{I!6wiW-Ox46Sm8 z=Z)8uy~e@a;(rRNy{jwFdo;lE#*s9|sO)jg%65TpwFH7Y>~wiNj}sQY^J75w9wLw~ zV0U#Q7OkJHeexh%-fQL5u~88A8?_67=Z2#TqprIzjMU$Dddro6&)tp@4)(~l{Or<~ z`m&?%(i*@b^Zi(tgcTlbUdaX#0v+~oPsT}S=Kda8kpglv;lZRex#G~*+trJU8v)pH z3R`UNLfClifg1?NuH-*Z$$PKSG1ScPusGrm9{1Pu9t z;zsFx@j~E1V8gT}a*?UowBYbM3#f!(EJ@Ss^QUPmHK3idGIEmc^aVFlZJeIfzYHr! z2_}I$*^Hv-nv5}#u$;3`M*_}$=$C#={oF|Zmkwrbn02x|r$^HZle#OhJ`uU;YvXU8 zJdIrgkT4ECug2;)jqho4b%R||`GR+6Z5HMR&O*(dGH}6OK10j8=}nlU-c@PS7InhZTR(e4ew11YIygbE zmySFMKgJe8gWgl=w5T}z@3Y*9*~w9e7^)E-*A!)%YJps=IrjP)7an$<#{DA+WFjGw z1CyysZ=vbOfVtsJ&L->adKny5)0N)$tFfn4rf*hus>Az8rs_k$cSK;%XnuK9qj6(- zMR4cGpgp$h9>XuxZOIBw?baE1GT1480jQwip9( zrcFVC+#uf!bzXlGusd%=?md}w_HZBhR^{vzv$@;aPxIFKZIOokOp+CUre4 zxx!n#{KJJbvhfXT`&0^stK6LtkERL>NO7tD1WCs2=d><*Ke60?hQ24?6YZci3rT*vz#h@kfrmwU#;jHSKbL`t3PyUZ~c ze#)UG9>*L(;Z1jEbj`E~%fM5-O=0HxXQg#S@(m%!)B}qbzBqKu1IH^SZ3WDMJ!4Fc zEQr@n(`(M|ks1PKH@9Pqn=f()AU`#!WPD^i$7-+Xu`49~o;gdK(p>-^5%EX|Kt;cW0*CErSF&0H#2OINNo44TRw_lZ|O z?KCN%XQ$=)tMzRmFyXEGOLAZDtHXkPl94)316O9%CZ3xvs&3D>&Y70wn>+B{p6`_QmC1e{$ZfgdWUk)p3liKd_48wQ^W$NR+#)A(|Oo7 zCcQa}rO0k4OZ4sCV1ttBkL7mb(_u#Hm`vgwz)JfhLWIu%jRK!kUUjUOIDwnZ;$kIV zEv_fP(RGM&+6)|SW5COMOC__9Tkh;Ec6FYox%~N9l|GOMkmA|@ znF27NZ%}o)^iGz zAglCt^J(+0!|F4c2fq}jYQk6w^s>_)0bE$L%N_&K-@2U^lSYz_w}z?edEVVD*qQgY z1jrLEt2zs%N$T0F<6dYR%>9y*l8mgZ*JPi;wUrbV6_X=tc?SQI=jlK@S*lLRf7fFM z;`KO1Pyz!vn&RUTmXtl6d}hK%Icd%HNFnozOE4kk{`IO8e!d`Cq_j-vRR#+G0UNR- z`wvTBHJMNLoGXU!o}bR zw@FkuK?NvZ-#3?i_;)|$EI$|S2a)oHdsDD)R@&U-G5|rOfoi*Nws?J;CIJ`4{zfM- zOAjvF?SGd-;zPE_4Y_oS3 z-hVlNUEbFie|POuNR-x2t`S|p-!YDOHd?;q{5bJ|BNmT={c{)MmcKs~?$?3R;19Hp;7Zn?g?rq-2Q!k4wPOwsR{tY5xQPV!yd{Ntf%-T>JS0X9rA3Ya(&= z=9kmzvnIJ1_>cT2(Cp7q>C*izIp;~W>ysj$Dc>!i{v8dfttT%8?5=F_CWkfL9xBPB zPHypQ$7I@>@GnKHE!)vo2*JdXm}wH-9E%bfT1vpx3gCv@&cpc*nT`Rni9wO%nv94{ zzvLYb4SA!iY6EM0vuBQ#DO9Dh8crEXk20lquQY>9%#5W=D|o<%RRe)uLorx?Rj{5b zU|n=E{5hzv-sSfp>iK=N|FbeJ)qx>!vj_{Zb)boF3ZH)q|53oyXP)R_-ZuDBH@)4% zN9_B2&}xeAE`SZijmw@K^M^Y|eF)ib;r3Ll&Pn=4rR1b;zN)0b>V8<<;bgOevpuT0?*pG0duVCA>dV09<#{US0wGFmotHzF#Y8J~sTa=r)#q zcH8NjO+1J*Yo7>sZ1D3|SkAWaZRPV9F*_-9ry034vOeP|cL1HEd!E-OdE4f^b8qN` zS171hd#?YKUXjFYy16dq)x+fbQn%t>_uPrn`p*?Mg3v zAejx!mh{&a|A1O;3fU<Ii>9VB1m}1Nl<@ ztWr*Ywnc~edx?o=k|V*8b^Z%I$4QD+slNNfMi2jjL!+KQM16_qcwr`DwXDWR=_*Po z?^(<(!+I`p`cS-w`L~nW9*YdrC!cf<(dDmxYwwYPX(ir;?qntlB%i0dh@kZW%AfY9 zwx5zP1#I9@B>aYB=%2NeRgf>DPSh9Sb>(G+v2Ab2**L`uMN288{AD*3Rm%F`mZV6L zJ5U3DP<{_`yrkxGe|7T3>UiQcJ*CsbRW0BH3k~^cByUTIU7j(_uXX`+B z)Q+OnNlltzJLH_U_24_{W6*bD6v&Rr%B88@oV9hzt6J{mKXIDfJ$fOkBb!xg?|vDJ znvlFX&|+xui+^ImLno<<>48uO9>Ew-ZZy1u?gNd#_r>LALuqlq)i}mKN4uu@R(4^) z=5M9r0j%S~N0x#6KSk8j`mFU6#>9^AmY!`3msx$Xf{-&;pES%2Tg;3JnwfZJE%3Ua z^>?Z#a@z%1WxT#45!CCeOpL>w`bDS^zqoO%h()6;O(FQCe|tU{?f_LrC(60DE7L{C zkZ-fRMZVD20*)~UD-|7C9{VHO*m|CUQWD)cS-?}6Ju zxl(mNztk_4(iYmWI5L>n7c8f-(Rmt8h*W=Qo3XlbS2q46=Mi4`8GaY$=pBQA zTk9Id+rSMF;xrL$Hefbz_tna{^@9q zHxuR$rZi3~wfq$Bz5L_bo0IhOWPenc8d+FmqzzFiV}DdIQbc9=!RC~P4Ns?l%hojJ z4VwT)h`IRc{?+U5lTT+Sx2Zv<$V=Pl2Ki#$urmc@)qvr(A)_pKtz(T%M0ae>j(7Ok zh|39$Y4DGw7J!_i>CRM$?IN&i4v6_y@bK{=w6cvYCG1C$^zM?00YdJ;vYw=wHR6VU zn%`2lKB&R-!Ou1H#-OoG8SA={a+g5YpXvBRov&LiYO^cd;qK#-H_ytc8*5LssK@c~ z|Iz}_3+WWy2h`xiM;C_E!_$-(JR#(-kUPNLQ>^#Bc2=AYv2VL|G&Jz$VF$ew$N-Hp zn&PsefVl~}$)=`e5B@ezdXrlvH7IbM<;TLH)lyI^gl$j_y%n0f`(Dv!7nhAMl+l4}p)w0=Ba}&+mb_E{c0^YJ00g zV9u_?-Lw!`*~+8$VrrkgvAq(%LXqqFNPh>Nt{=ir4PFF>gLIXVlKmFDL$A5ACPCii zraR^`7q??!S~)oqWYvw67oVoO^dQ*Mt1;c|#Mn|rEs4Px$b={=P+48JR-tVGTIH(0 z4w-yF-L!aG$(RoReeSBVxAyIoxz9bVf}Zr+ww?>GglN>v2p4UC;k?O?1Fsx6vMTFx zi8m9n>KA3JvK)_n9enHvGO0rbQ=Sxh&+8PzJ5Q>hOv_$V@4HIkL-doO`tXa{|41?m zQ54}GWb%;prw#{qkHCXb(YpqapT7c2hW}2h}+mL4t)wE;k;wR3QICn0|js?7AXpnzcP{R<)PI z?@~gr>*QJQZ}!nf!p9OT&*jE1d5;`07G|)TY?kTBHMKO{u_;_Op9kpuHp#bY$Tj1+>5l>%l%~ zkEHD{&t***p~T0z`87H$bunD1nm1IeKk?q^z2j4ZdT6mE29g0u5%gYHCu9D z?CP6&3d~iUs74nE$MEn$n9zwU5>`w3qU_a|n=T+1A913@s}7xxE!*bRfC?MXQG%E} z9>gLU4_USR^foJSJ(Bm{(kB2ms~I&7ip#?5+q*A-HE}pQE%H%?zH4PiRWpyk+jW2J|mgP5}#mv5*(pMyo;B+F448FNTN$Lof+;a}r`Km4A@+ zf#ZpUCfNcXyAD~;V8n$`=LLa9Bx5!YmT3FKHDIeTz_KyL@H~m* zw>u-@X(>0P`rYlz6PalHyAAO*E`YDIvc_==%G`FRDV| z5nT*n&J)>N{nE9YoxfCQ}vy%f|2c^Y1nRxHdXtT&N8f(8e1nsr>IY zRJb-zWk8$k>kwEYUB}_S+sNSBXnX_X2!J+0Pb4p9jT7P&cZ8%!*Ip`epXdQg*mUR+ zfLl9UEZB+%EH0lHZNKa=3D#5k^Q9~QNF5oO44J2hmjAF{(RV0R88&mu8DDtr#ymQ; Qf(QO?Y3Xa0tJ^>NFDZ?FWsr#8jow>=5Q*MP5Oo-dKBGnNM4jlt zFc_Ut2IG#r-}ig(ANP-2*1dQAes|WgJkL4L+2wQg-se1fpXcLi^%vwfX>S4m0P>g0 z3R(aFF&F^2K1Onl&~jSvL4)w`x|OV&ECBH13)$IQBEmh>J7q030KkVG00?>y0N@Bs zL8}0Oy8r;N{ssV$NC5z7oHG!b&j5fc-(IWgC|+D#5T03IUmqD6$FfgdDt_}_k zR!~qlJw0u2Z+CQbynp|Ge0==;{5&5Y-@(BF{`~Z8XXzZfftzhQnfP&v>f4THIUdZ} z&3SoH<+PJ5g2!R8O~FT~V^fefNd#LV>fZ{E0~_?WbZ zSG=O4V%j6%{QP`xZ}0H%5QoEUZf-6tETGZo>FMdz)YQ?@(T0WwC=}Y!(UF^*+uz?` zRaKRflY^a{*&7_jZEl@m4_6DI+pQh=)6>D{DkECpKjEJ-Rq$if3Mx4hY2mP6VTWxB zJw86hVzEd4*`1x8tE;Qc&CPRjb8tBP_wV1kySpu@qq?aLzxeFNKl?>pzkdubM&y*s zYv{do^~?k` zk(HG#EiJuz^=eX5($UcoKR^H4+S=W_cY}h0mX?+R3*NjXOwtuIl@|(t2qJoA!VRgj zvVkiAz{h&|cf~7T#)HsE?DkSkkr+kvfbtrvfXSCa!sG*9D#+@1O>Lfk45WII_nqt& z>2+n2mK)P=LKg-hR!Xr0mL4#+={VjVA@odTGc(!CIUcXB8yf~gQt0XCZT#qHHK^7w zm#ucjcFjAW`Fe3ZqC`jUC~u1F(%Sw<`vsk8y*KH`4H0DbX0kI{{#1HF@TeH#iW=R) z|DEPLN|49g0D$uKR%Hqc!kCZG@Au@C5}b^ZgjGBN2mm~~`u0(H#Z^F%0@EkdYdr!f zlJ~I>dkG$UH&`G}-rx%0Im`d-M3f(WVmVNl2-E=px|0;Rx()TbSurwP0D!p)3(%Yw z+7OFnBtTWc7JKtQP&|imUP1$as6DuZD#ot&61pI;b{GLl04nXtCA3V)giELa@Pb>H z(02=4Tu#ORs6(GeLU`r)&CipG0YSmBtDM>WLw>0OgwmSy<|G0<@o=bPH1v@Cwqr0k^zLz)zr;390&(fTz*}R2nG(-~V}u zM814^Pd9Qc_z`BC7yvksjnp{#7W|dC0v|vyAI5LT2^zE{K1_c*Z$+A4cHU8v`~N9c z|3~e|dBX4T1n!C+%I055VLC+*`r{2I*hpV0pMlhNcxRG^hR@QUzp$r+ z%=FFgw;UaXetWNDQc9Z{0p945WK-iooHWDr|mV`aPlfC;s}ouJt)(gbZe%KI_tQIJM5s-tV;Vm&Xcs{bT+()QGrI^XUqP+W>8O z2YfPx_p0-wXj}pQb&BVvV$~*ipZDS80f$(NgEZHF;5mOo_kJia%U$or02=MEHo>^E`8fKboKiwSNJz;0hNjy5t-(R|&%U;N zB+~Bd8q-O(7ugd*f5XOVFtp_5@!5E(P~31ANQRd$V0~#m?QZ0qnTCZk2}vrp*CYL^ z{lj-^^E}o}MH>}_IrroAVWUruiH3V9ZL4>3Xgl~lx4jw}Aj=Il z;~UyA*I`y;Hz6tCyk8$oa&JN;Mcu6=Y+9~2v#%5sY81EB=~!7=X&79*_zT~o6_v1q zlm)PHL4&&T$H4)0HMN1Lf|1nvDOk&HdL{FFa$tqv7z37c9a7u&0zv!3NVl@EC`20> zPZL$-GWRma%U4DC!QV(1^v$~V^T1iU7oUGGtX9$Pd$Ij2rB5cP+^YU*x_UKIe>OG3 zkw76G?EA^KAUs$ho_>FxPWEZ-NJJO$-w+vdXL*9mz>3wE&#fBz3*}JAHuFw(9R4fUIe8ECH!$wTl-Y^F7o4-KmObLmEJxi&JhG>ZsJiV8_u z1TxPcqyzU?&N4r?qU@6gE&s7)mZmcu(3042zCin%f}O`qMp2t8Fi%zJUIW9Hn`bNS zE{y(~u-)Q!*4&j%@zLdJkj~;PD#P2#7DdH(+<-S1@~GO$g#Uu4*F4*jNSxOtHfFct z$StNlP|V$dt&O@OJde`UZMLR#YPlr;nkExz_JSUx1+p&I*pn3q`qG5*k*{A1i|O7h z{@Q9yFI?WK)?*-(J14>$rnr`dAzv%v zPVwY-ogM=UNE_z^He|Xjc(^@7B)#P6&DohJx(z)BLbtkg|EyFkaX8hln`vmm=Z4Y| zeA0qWD6fIBSB2YYuWN>M+xbH05oIPbg3TgZbrLo^d$8;h5}$!@v}@NrAi^Kh=E?Ru zEB5gk5gz|U2hzH3{Q?q*&S=NslChrF>I+!yw=i>mXZ3Mf4oBNra4ieMf=6h1vhQi< zV5*L9RBx~Qlp?SpgX&`L`;8_`zA8v2q@~b2gv#=_i}QE_g_}J7s!Or@aj{1d^bqY1 zTzY?QzGsfca{t3Fd&O>Ms`JBdH3(wh$lgeyRTB9UHi}?*hAFY!*R%GZG|6)Sxi(r3 z%?b=uG%8vwOV}0OeMzhi{bQ**Z0y>8J=<0I$gV_M0;+=A>fiXLu72C7i8|fZ3cjx3 zRNT30BkF*rfY3`5VAa?Y-#41p+&9j%DzJd?nI4e6v>jJ_$AWA}5n*dqZ07MtTN_w*e+ziR!Dx9xD6 zhhvtZ23GHW*ZGJSOk>mdlOvR-^{n?`m`6x)G!HBN&^%Q<(y70sMcx4-jCM?W*QmJM z=RS9)37ez}uo`#FpHWijyE#`oplI+DHP0aXU9pbL^~X<@f| zZ~oEt1A-K<>E>K;L4G-XwNJJy_lF@>sbCzLMl0BM@^b2jiO^>2U3*4N;4`B^g{8DQ zdUEMW<~p(B8(IUH`~I34&W<588%teLB!u z7y~u_qtQVDTE2()zdt0N7SvZ(|IlZFl=FZb04h1jGRp2~+5$OjHhSc^c7+GOThn&320rYnOYiO~tNbG=NoqbWBgVl5|Tf$8?U@OQbnuWeaR3W8f;EZ@#0$+Tks{V;cr*dawnBa17F(RCTbpEq4@K5V!cv^&lbJ7VQl)?C`li zL4OqgN8%q-cLZB-XTUP-$`QR-m(5Pzcux&M!{dVSp(^(%FSeN{Hg<&&i|JRcfu)BqbyYC0ajp1!f=nylJtUlZ$X=VRJgolw@a=7=Iu$-s2qX z1xai+V7C_reVRf@i8JphW@C0_4X(H?aQQCyh44>9VL1k0b|2s z1)GWmj*mG$&Lv<_eK)P%6p{kXw8o#KQR3Aa(-&iQI_fYV!yz>z69H9BjDO^;WEhAdQ>1DW1H_xXat{M7?pRZKkRQ`Hl4H+C)qpEcBew=W}mg zjPYADJ^thJK&k7(dmkr@z~fuuLQO^%A-Kx9U1<-$68dEcHc{FX7s;`8znRRW^s8=X zWXylxju6hN(JRs)e*0}fribky2F-NZ`0mNI;>R$9-yVXv8H%zPFU(-{B%LR_`LmMK zgNd=tNjfCQ0d|yXZ+?2cyR7(R(i^xng)LsYcsHbZ@&MuSB4a{U_rAt&Y5PvNP z*}S`I*cIRL%}+w;?_1z=t0uETxP~jU<%hS*QFfWjK328?Q#aBu4~hQSD6)bKGB~e* zrox}f+N!SYY6wCa9l}^m>!%%_Q9%Z7^xpi+YATSyNjm>aQ0j4kQ~z49nji!i^|F7a zPMY&f(i8gSw||V?6yf!f{vh~43+JlU*Cp{*tj_>MFxJjDJ7Y7sRKs<)OJWCdWj_lYkeh~@2 zA`u(?G^DWCYIg26^BKv5d-3t3mcyOJ#dT9_?WijK*!6>qL~v;N{>e@W4?2W3=P*YF z&F4$sl04+yhHd@~o(XWh{-SA*@0iEyVojA96eP3^W*^AZ)LecJHvNHzY>9KjBi;CL z#Hg!jO;ZVmL)m0?&L$0KohJu=sHlkmSA~hI&2f*rx`BUG#j|^!XIkfq$6#nWWS?dH z;SpDXhjk|PVTERE(Q$Pcz5qw=Y!Dyr8e?2f^{Q=U4+_TyAre#J3wIo?%suWwcm3LZ zkO_kq>YvG+XQO4rdAQi%xU!#Uc}Sz%k1`-Cs&9)z`7y|<*BsIq0=_aBqtX-5U#Ld0 zZ1{#5Iz!d1+rN79-gGnubJB-DtAVy`Khbaqmf}|m{B@&wwh3;o5vT>rNqyT5d~;lP zcavU%4siev@K~OKyXM4$nvQW8{>@k@2nOc8*YwPDYyAQG#Ec=}%5%{K@bW5Z?IT}~ zRt$#dq7MSoZ}>B|A|WGlx)}2CvEOnp&_xI79^Z{UL(cKVHi64c#61^gXh037!5|qK z4(;7#oPqPkOya!&E*4M_g_BQqpv)k5)=!1wY?xfgm zNp;xlSz08x{Mat?hADEWYzjup8&K9s7U;TGau$3VZFB$SBajPO3LUZsJA#a@@0gRB z_gf(tim1ddP~ikOglP3Aa`IE~<|ELly@1AN6;n9t`dhYuqwGGjo=(@&npjUc2ylAQ zxEV;tMFhVAtCBhh)^CQ`)_)bz(3`g(ehAqmJL$l++LOmB!ywJ%{>O1WyW>%F=dL~9 z3IbsPZ#!@Ktz9*Kw&_fUy7}vhre^<}+GGj{P~&4cEMldi4_8|&Fx9~g;xj(!JiAHq z8QcJFa6TMp%@zWSZ7VEu9e#8;vXg*F6+Yy;BT)@${O0@a+HDj3nbyKcvQ~s?FRl<` z`ve}DbZ=C}4#E?TCvIwhw9N2k_ndMZAB7m}8}PB?I})Lw=2veQvg>^iDE|1Q1K&!(nVn>Ia(=^tWLbx@pC!9w`JgFJ)t+vE+(f+ zASQmyot6*t8Aq#3pviPxYW7k&SnVKAqzL0LynhwuLtjCoejcp^1JHL{lh_l(11N!L z@9nLNSB=ui<6mb#-O!WwaZ7+6V7`$jMuMB4-mQP!^j!}|lMiS=kpYDw@0^wKPn9^-vnJAorrYC~-jJkq911!W1 zz3}$%xS<4;x+1~`H$jvJMESF0;z1cC&06zjl44tS4hvB*1F=-Fj8Nk1%y%+h)3%p1 zMutTP#kV;Y^A~MIIVo6DQsIJRR)cQqL!!#53vti~ync8xQLVNY&wzs#HLtaP7;T`^0+1S zigqEczU6_yLrA0fe4tIi9JtP`0qzSGk}%e4(0PQb-%&$ znqS^X{a8JCz#NpG1r6s)#Et9lBKN!9A3cZ3Yj{Ag*^Hou^s{vupNcGoFU+14g7=;z zVJDS__Lvi1?;prd2wXTEF4uZqTGX_^2axk>VLa$UD7EO&hK;)yqozMfeK zAu5%^#-_J*A?#!%hdtY$4*$IMQ+Q8^baeNB#OilN)wy zD9WSkW+P7@jp8(wJ@8C%7pm>37!0liz*j;_YkXp(?gzM3Gu;sQi2mev6%4`QUJV7@ z&Z0{mk6#X%*oBuSLAtH4F)M!&fpvX3lCp64() zQ)QV6UuONr%9Ovu4daY`>QAq`q+RQ+{cS?bN5#^IZ^*?kWP#}Kcj zzAtmKxCT2IZn4432i)|v-n#i&pme&iuEXquy~tQQH^vO>qS2d6XWo*!oqh%~uBJwU zTaPPLPV)K75u&EqG8Yz)YKC%mPiudo(Z)WYX6oiE&Ene#A89J#F(*DhX2=^kfBbky zx7tJ?LA6R^_)4gmSLB)jl@*j5BL6U3MV_fzMUml=_lsVv;|9fA&g;-~$tcp%sWlHhWt5c zeF@7nhh3~VJy-Z&y9p&Th_>#fGc6Q2yH>$wu+;W|q>a&;>GT=Q()g)=$Uo2U7ss$I zEv}(?pLgDh29tsK{g#w~nSI|)R}z>mr{m|&`MZ>n!+iNu zzU#Y_G~08p{|*M4zKx;io~Qqm&%pXG6ZqnY1#Q^7*yz?|&J@A_j^~#y4597=*@p`` z{!L;NCf_xzillx?;W%Xe;XC5X+T*3zR^5jh2;;VH3Xox67ummB&mF5qp!Tc?iIkLM z)dK|@&bZzGQkFz%-AyjH%#2=GShq;}a$o*mNlxVLOZ6I*S&LRiI#|+oqnZDO>mh`) zULwJW-!hY2%4m8VSZ-{t=}Q#iEV6sQwjL9sVfUmMcKG(=3OillI?M$5`J|VDp3Njx<7&pDo#QK) z*H2hx%a$nqm2kcY{*xp8=+;2=MMA4eP9g-&#}@F4P3if@yd@@$WRg2v$LV zGKn(v7tal7JXi*;2$@KW=4Mm+0RDrJ1T9#?iZ(o|V;`*q>pAF!?;kGthZ^Pt3HStG zA}I01Z|#7<{R|hy&ARYa<#L;!d(_hOcAO;Uzf2;AnhwvoRNe4rNHnAmi5_|(Glblz zApRFyjP>vea`;MRh{nWxS4J#0+wPVujJ3pqsx%P@6TA-p{DknP@xZ*$n)6M}F7f0L z;`$Yz#c8MJ0SPjJM@*nqI%Z_)K0rW~2_!(cONTt4@CMvxkKw)_!+k(53mNzL$l)c@Fy}+6`p71tGcy`OqW_1HApulMo`3P;g5SIL9f5`}uv;%^Rqj{-NM2 zt^bgvL*2Y{10He(E;rBg|1e2Fd+1*w0MDQOBliEt4bQJqQ`2mB&^OO7h<&>LS0p(Y zDT*D==zBP~7#i+^-jXpiH1w&v&$ui%(-QuLQRbs$)4}oXXlWk+5Oy1N6V4u!zA!l& zesr#Vl+`R?m37<-)_>B)C}aFd$?W5|{j=Sr4vIBa5WxBxTn_fpYZqRdy#cZZiwyn+{cgNvFkh#q9CD1Gic5P9}UKUvk~{IUY`yBlf6WL-58*jfxCOG zdklt~p8ue$-Jxt;9J_72SuefpBdHV1?KVDO{?z_L^W%&O_apWQpRI|tzAYc4l3I2S z-|icL=iBd>xi%hm($5A`#uZc)-8>R|x^bjw-S7MY&UbzMPsr9AW3Pj~$t4iK`v=ew zd@i26CrTyweKulPJ9qhHt?g%T%j6G_{r5#Ra}9jF9u6iXhcF3dH{l0nayr7m7P$BM zlf@#q^*cKnR+DW$B%yGpK5(>CY?YU|h$qo%%#?c?^Jy6Zj}x$lgJJ8*+{=5mzCpHk z7H{p!4?%orb0wR%FdxBvZUX zszBoN*hKHLk4u%S!p)RP=cR#kZQS<^@8Erur)yzRf8s@sXJ79y!EE-YbUQfY`QJUU(Z))A zcCXxdk60vR2{8fOE<3VYtH%g;kuMb7bZjb(7S)=OcXe3k@(KE__xP{&xVLc*<^{s_ z(qCe0O}N%f??rc$lvqysDJ`8FLhngk|Ml@ZnDGX+@1NAMwlRH1sn6nTEK$jJUsWY7 z(1~7b;c~q9W+*0NzO*S8!j#w;hhx94+E%^>Inq7^dc{1?9H1%%paaKvm zx6xubw+H&wKHlRvSD*gqJ-Z|+B;yiUWFA(Yx@%CAc|7Gn*YJz_Y%nAFw&1EhD4E0f zR!g6_%=m-U5=@XIBbwXdKQt+E`UXZvs&^Xei+%3H zs+9(xY;gWIL`O5FRJ-dvp&zWxe?a_EQ$d^7MIhUWFC0j#_4h?TB5fpxRBKCV+cVr{ zEg}TE70}xB<%A-cB%+4HFxiQCFtx!>*G--xglh&NSm-9i9IjYw`S!utV0-(R8jXvS z=A`A@;wnr$5;ljU)IWx1QybXdWrMO+$Dej!g=+izY?9X#)P-vd ze#c|LF{|yunx85h-pDniH0h=^NV$4GLm2`Sb*EX3sK!Ngrm}*CD<&2i7hwHZRLanb9?Tod+&_ z;w`*su}ZS!9yU3=s)SU>RJcl3RrX`3EqpF;LkA}(ED5EyrSiyFmY6>goKFTjt=dkh zO$YfR#kLB{Nalpq%4l}Q1 zLZehw*Hs^nPdb+b6hDBkM-^hBHm5ddt4?`XZtIG>#;ba+LPE_r4Xg3i!r+!?g{Dq= z1zpvo^>2AX(x?!-zb$7vc+j&fApDT_D1Cj6NYr zq3JhaD;vcJ#R-^@DAG)4DqMF!(XCB5FiC;^Z;<}z$Iv?L_H9mMH ztYfPL^TaZrU;Bxth;jcd7-MGyEUiJ54ooD2ldnO0Xmo{M*&2hQt_6zN;@)t_$^9uo zNPHs(jnh4$(t_!ZKR}p_ztkBJ%d5bUI;5q5uvd`u_QcGIjYH$5m`XL?9!u~1J4u+d zQ{eZ~UhDkf?`PKkYmV!&aE|-GyArg{W zL%zhH-`^#LhwTWD$iggJS}`@~5vZskd$f^RCsvhq8hbx+IKyN4Gwv7Tl7n1~gL;hTGaeLE04{f-&=Qyy!0R@{U_lyH0MIwg!%yexhj z&Q{yXsm})5ut=|X!i5kSU^Z?!eCIfoB6^ zuhp9fl)MkQ3U4$7gMIEy=?Obl?Lg~J%8ptabLdgFNNMna96x&uCWM9>{;HsrcJl>6 z1-U>u+wOU@$X*ndf>6U|C)8`>q2!PO&y-t^MuZZuRij{s4^KQyaGt!>cecT;PoSf4 zeTVpI>K8V74X+mkowBfMzW7(TIJ-BzYtM74zOK}QYxM5X@{c3axD(Yz!)>&`ze;)s zElDJw-RDLb@|TH#CPd0&6(tW1E1AL`thp#XSsAFd)eS3&uv}1^=HYodr6vE}ZK6F` z%U@TR%xOLJkk#|JDmL!>>~{eD$N9Z7|16B$+4T%!=1szOMSC<9(}$%LMt++)v~?7O zkn{dR@pp{L!erelmJgIlDGM#p_IKH-m(te^YJcvUGis`d8->M4!KoYw+HEU^(5RYj zzjrA)1g`@c3(> zi8x(>*_VjGWCux)QLu>!&{(|HQ=U;Pm`j8;w`S^BaneM!W+R`OKi8IanO&4o2_}D) zIq2~&#DC7RGXL29Ve4RYGA4wcq~ZRStH16l3+SRdZ#M~Q8a^`pr@!Or_nKi@nCqai zgHnTssF|P!tX57vV}rFs9RhSwo3kf#MA4RI()2%GmK@o1#Vwz4XpsYpVxbS@ORLt& z#%VUYM>fn}=j5xa2)f5X4Xle1ntXPF4~7yQuKl=YUi}AUo4})5l%T7f=78|7T1m6K zQ#mn(z`uR%v2Qj($p7`a&yqhYS^aG6R1<6WrG`;_Mg9X9j5}IMMT84fc?y-4j!4Fw zcPq2OS3@6;pQ3DvL`6P=8Gi@=j9Q@lIcL4#1y4&b`CJR${=LSYG)bt5576=76V9Eg zS@~RaQF87R^wfCx+*H&ZN zM=asi_<{O(1GFC=2QqT_z#5%sSG{%nmSb3_))hB)6Bxw)JMw13&dkP#eV&Hgi@fUt zts13lG>xR9ed)Y?66k~?dKvb_iTqRxPwWu%?pc{k?YL{Ma5QUN4_#BM}qRYugm-w9wpe&27`N)WwiXbfp7V* zm$2LJueeGx^dvhWi33Hoxi4^uP~-2v7~ezD#XgPo+Jy5(&a5HZtM3|>fTCYtF0K4b z39jFg@2t}&IUVG!PZ~XVPw~X55MEQb9ubSFqUU|KX7P>(HFaR}0)?P9_}W7VgL85! z)#DJUZ_9j;vif_|%eE%d@d5qh{30KzVd7N}PlA7u5ZBr+0YaW z0TH9JFk8|E8jWNI9%(J8igjMEnuAFL_}(@{gWs-L6{$}tc)K3q$b_W%Vj2;)K+Ny< z!oC4aGw%My^cjMGBARwT4Qg*jzAfc?6K?oIyHSBg~Zt z$82uS2zjhPXQrRwn9;f1Iz&A)DHGLWOz%A1=zRutAx`XZP*SP#05Sy_qc&ahDNEU;`##t+F^;AEkw$7^uBU#?%PooUE(|>5a zRoE7YQhx3!(Npa_WKUlB-JzXqVJU~X{c^`t(0T*n&sCCBzVYPTIPF8?d_JpRXi2k$AB>S{rDL|%0vfdrn94D zPd*;qcy;xs7JAd55zA)ceeDAcgOn>r)_j!7Fgp_McqcvvI+?F4dfStbiDf%jTn>@x z_2P-GhQn>Do!h=;e9oJ=wqZ;-2o%LytY2VNMQNo*e$e^JAiY*#sSL!N*N#ZglkFCrCEC-?7&_DY^4p6pNkh>#hvCCe~_X44UK(iCv*O6Qryb_rUa57+-tuT6!T#pHJZwHvei+zvV4cHTk?#SQc9*=?UGwJyu|^gj zFG9r}*OJJd_(J7y!^2dzsK#4z%v0d)xjN}U&rUne ztn}spUv-BUuKS(eF3)6r-AhoNJ_dJ|bJc6b?Qa#SyYr>lW`MVEyfkihK`Jqs49rp! zPbGh*Rh+5PY~w_&v)6b57YFXc9m7zzi8B!h9u}mf7dFhD0|^n+QHG5x^JPY*57*3o z2j{8C>(N3z)W6Hzdhn+-Vsc1#)QQ}!hvFfFDQw95YNL(qC#gPclIVf5t`L!D!A#KC z2gdwOIhd~_pv4cfM-GOKXU#_s6Gvy-9nwu_EBuf|$^3=S;5co2HP?y^H`lI!*ZU)m zQKApxZ9joGsof>$4$lwtc~~eb@e7P(- z3x}ks!bKfc2yem^O^-9gVLFQA5wd!9T{nQYS<7rlT+CN14s#x^GUPsRY-9aHNKNJ0YTT4&dqYpP`Yb-o3KCOxBaG_tH(j{QOySR9bBC~ z^G(%rW#u9dT~yF`YZlH6igqT3%~!RAYWRTc8PP<|FzRr`rnHaqgqyrCKbfaa335@3 zJS4T#t=<6FK2}-;O#^-)qw;j@zrpyl#4-V2V%1Z+T5SM=pElj^mT&P_0wla4KsDJ)%676$_L~n>4_oXl_&p7t&~Fn=Uw*9f?MXwa<3z)ujZ`5=!{J+I9^`n zI>x;2Ch-s6y!kfH!_x)im-5=-3NUyVB%S)DdmNo4xVcF|cNk4utt+fzQE4v{KdhFY zF9IeuF9ma}i^(}+?Ci>XY_t#7ljyixZGvwb*#X5>s*1I(!&cI6`j3m!mLc@4>%qEe zUJeed5e9?dHe;y!9Kg!i3_YDE$Uc^+#nG~Iz9_PTZ?xQ?z|FQp?33QjY~z76<9Yq$ z<&HOR#au_?F#e)kC%Su3fOJQOu|Er8!(!vZG?~66ps&v&`lix8#nyZX;s6(v78ZKo zURhuwl0Q0eFpQ|B_w6XZh9Fx&N~b2;^`+}g z^C9bowg!Iimfr&mrXAdPD&@yKj@ww!*MNLTNS$D9G($^3D;x@b3NBmv`OQ`8FA&qp?<%B94oXXg+h^-q+-jkZpv%ZvN$91#m zgX5ItTe`EWM!LcSI9u}@8rGX_B5=KTGQJMFmgP+?%5S?v1|g07h3f~cjU6wd+-l__ zXR-u^^q0~;V2iB8%a8RKf1s&<7;bask(9^i>)V8Jd3M^2D<_su*(=fNw+*+yCN~{s zw!Bzs52(RQyOf>uoL#vUF$f{*&M=V7;iwsMpR)J&+*cpcl&6`}i|Cf^2ec7EJ}|Fz zZfrP=m-+BMb?JG+Yk4@MRK`h2d#jTXa*QN|!%9_5AV5UW|Jp$KTFN4Z@O9Kbzn@+L z^tD2_2{#8rWBn;SfrLwEJ;D$`5aIhELNkF@j#KY4oi`|K)~OaIeHQfv1! z4SOGMG9;lLbK9`$=CxyRuI~L?wbsC}0D}VE`%LZg!(6w*>Z@+bH;>r>Z|t1-8h&VT z&eVImnoM2R3Xo2=2Ht4nHT;lcnndU(+4Zct8M?q%*7}Rz-SEQ|KYW(nTLEyP?tL8F z2wy|2djQ}G`xM`qsDTwp1?v=_A1~&XY(UZbWy2l`8Gyn5ZRT3M{KRB15BvcHGf-N2 zO+1&HkQ&3B0n7(v!ce#`23EusC?#c>XvH7}>LdAI7Gakx@(3*Q<)8x3BLcq?6cDum zhDjF_M8C7hNRX?I@MMmu2tn4J6S_+UqAwM=Nl<_pA50iN^Nle4o6_Imgv(o^m-_$M zY+WvOy()08&SQa4oZ^lVh8cT3!IVCq(-(pm_epR7+FE36YVq0=4}v#RM;$Z!Bv@l4 z^*(_?6@#Qdop*)|VHX+hN=&{h)nIhxAPMS=+VaFe>HZagM`uwe zkY37BGG6Km5CFe+AtD1JAHKd0SY>2T6hILoMmOWL$T!`Dpb;bEb+08RJ_mep74VCg zQyT7dw}t8XWqSl$`~G-~L1V|L;UTJ(zC{IG4aY`&ldtc zn#|b?|8y{bF%9rN2R#^aDjX6rZO{b3J-Ddd=NrAXKcxuvJFUnQ&b`j9IYQ3&brKCx zkznReo*HL6;Ri)E(0YzQolS(y5!JcVBC>XO&2!OZ_jJwIZM@!X#$S+w~gCR zTp@70?Yw6!=BUt4PzlxzY<<7|G5f>$SVZ_Q-czHh!4vm5g}BY~R% zJ)W~>_(5}Cj9I95C|D90RlglTI?q3UDx(@0-7CBWvUB#m*btReMB$9ZtXbe5b=X*L z$OnN1U%4rbS+j-twr1~ZtW6h7YJd9Y=j-s3+osK=T#bSFGnIp;Q#%w0d(@0CR#H2^ z#4Y~9YhUT~C_H=o_9jvyYkscbWRt)AV$7u>fVI=>>_7@aPa0!aXtukRGVf5m|H2?z z_^9(s#qe=-oy-`p`HXq{XN}-R?r4`C-yRCrHpCKXihbNE(@uZpduM_1iF#%yU1lQV zTtn<<(OUeFgtT`kp55v75z`62Tz2)T5}zdnc9$Jr0E6;n~=m> zwbY)~aTX5tP7y1~KPk$dpFJx^VKMzja|cH}Yjbc;Cxkja{S(OQvi(`~5_7Mk*`bxZ zb7}@E>n`RdJy41f8mWxc?Z)y4O61|qO`B>cd+`jep1_OmwHtQGrPJ`6*tTpDs^%0X z84TT+lyX4Lk<;9z`R101H>W6lv)1^0Le6{j46k%M2-orOWWT)p;<(!3xI?3JY_q)^ zTb<#*gR`=D?XS?uHQ1Lu85psv+w6fc4`~P@%$mw4FxHr3n|wIrU@6`7JPk9nXgfVdhqUUd$v|UZibw>mswu% zw_S5JO2TJ97O6~!Iq0mrXy^_sc^^}n4IN*q-BW6!s{-S0go$dd2>eALtN z^~ew|>t>%WXZ0qsED2g?ffv{wxNSD-b{Z~ij>3Wb>2BCupr#4}bUD{c{mZwKNz*<6V06IX<;i2F_&DtG0r#BbnB~NUOT&7ofkc?)wu)veyN5@mM+beH(3+*5b zIUa>BH!eMUe;JRjKBYg&G{`=nIp-F7gcRLc-0^c`0~I$g9{9R?UZ6s{v-?&GPG5>r z5{-}th+gEF;vbb^=5c|#$oq*UXP**`2yrn|1l}~^&!-u>Hec54Q(KN7I4$^Xb9aNT zoa(R^8ODeoVMlgLJZ%DFg*r~v@MI8rqDu#gjZ$t%y5>4f<0R;*t_)-URZhs>2U6J) zkebT2?~8}81&kfyg}qKYMP6MzUW!m(^WL1wu?Ps@Ic%Kj7YG3_Jgw@%mebq9nu~+* z3&{1)=Zc>zj>RqMb(&Xf!&!Ul`B^~z@&QMo`Y9^|=`xvMccbswTetrMdq^i)sGdqJ>!40!as+w50M$?lvF`$aQ1Jv4na|VM=eKitai^ka1KPiv3+qyKkjx=mJ zOcBiy_|ehjYdpB^TtLR_C@EzF7YcR3y+`3H?H}RPZePJG;(hSq8J}OCSJ$^Jzg~>B zy{80omY71>c1kOd7bu(<_tR59J`!!*RWr|Y*$&?{4bY*pIiJ#m&G(4SHIN3VG=EIQ z9GO&f3m-8d)jRgIr;}W5~NGm4LWzEX~RFV*^p0^SAcXvM{Fx){ez) zRTp8lD8kFg;tIUi=&_lArp5UZzr#Rlb2@VVyg(0s!A9$?5b89wT;k8o{$MrH)TFit z+r=`_%6j8+<=QlLbOAN}AcMLk+IbbgEJb2dhtuEvAKX;EZku9dj;FQmWI#esQ2-Q4Kv@}vLrJ*!Alxt0{Q0^Sdp78lyE$I z;PpVW-JOTQ1WRczDMdjMrl>RK$vjuu{K;M=l$>VFlgd`x4cbHH^zSkA2-4&yPokWPDm$hc6yXG8)@w zI_iP^Hb?x*wvOh(Pn*}<`x{T8r;2AB|M8C#=B=+tgxxaE{~(g^wPLdwmL6LOYVmVG zl6v?HnC)B8pD@Z`e!Q3QmdV6+fAWC$PJ8Phj0p~TLjxvLat_8uubcQ69=hs^t{pj6 zHJa#bmc!CJOyA1wM%C}}`^bZ^ZHFLNBfP$wFvz|6f=SXzF=4LJuCN8VeEuJ^%|Guu zhZ?`tnTwP&aeQT?1@B!ZBZ!d>MWj_zn%4W5<9V7+jOV?bA_)s<`nN`-3l2{;9T>}4 zHtWb{BmwuL2Tn4L0cHK`9wPj`JsT~gQg?pa3vkd{DC%NgRBC*CXwS?J$1~9e=Z(&M zyLsWak4rW+xhS<`Gc*m<}mdm(C-x^>3i`+2o9=ob%@0Pi`z|jh| zgl*F3&iU=6ZcE)H#_95tHT3_&-g`zh`D|_DDpn9sY0?p-NL8xRJA%>)p(G%vw9pLI zARxVifPjK@K_DbZ36RhPM4EI$=)H%k^!mR!p67Qw&xiNxf4ytH-&m~NGka$C?3umi z+Siuz`Neu(E<9(*?6luveW32>*TJ^Aug~#8(mO=m=_>GdT#Xvn(z@^KV*;UVroMf0 z(j)VG-RabJ*DrropFIm@Nw**LvkXtZ2vt-{m?3K>eO@28dn`{7>W**YrkfX`N8Wqi zJWf{mX$_8MFuPs{&FMd74zkH;U!Th}J@ulSh!M zKS(p+asFTa=Q&Ft`X+Z4eWU#|mjC%j1~+ZGEHqr|WO1pF+jxPz_Yzj|6j0Th7qIGP zz>AAXC-vnmKgkp2 zY9B$9@O2^;?%H1LeWV??*?YgWCrTQD9^37Ysa%|CpvajEaAvvWxnCv?8OS-fN?l<> zJLz4&mLGM+bq_nN*ylE(b)|+IS zQ-~XiX0ZnEs%8g6PPYtaBv5jwRCfKw=4X-y9dux{3-!#6Ixh29BaWtD^OR7)$q8v>fQ-s1k`JV_^p^ z>)tf{)%V?on=>zu0|>EAc+D5R*f1Fc*WruwvEO}kVsi~OUkaoM*ZFF>tK7_`>%h*a z-up*v1g35XCAP$It2Z42*2wAjd=H#r=*Rqiv;xwe6S#v+&>${11s{oOp+URxjZ6-& zS-r%JkIp${yI~B{84^rbY*)iA>V#+|)o6tXA-pC%^@lCd^0f;&LbJGMAv*V}#zof6 z`Pm54evpv#mrEV0BF?5RZet?q8wL2S{L9PzLP0NoPC2{6ylub4#~miZ?&U-Ha56ah zJW&G|R2T_ruA$9DrvjQZPbViJPB0{GM?Gey%ivoT1NR&pR(c=BEXIf6TJ26EQ@RRt z7^sO{LzN-n8oqGU2o=UEr^m*SV*#0fu{#9aa@{3(;jG;rMpshVmkZyH#z2r6}8tDAQrES%Y*-V|WcXSShZnr>vzn7Y-4fXw&kq2*=?h01= zOh+Y?k5eE2{ACXU_ooOW%+XP*?UAWwhWij((UtERhLq6u`#YX+=o>r3*wA<+)fdt) ziHSxgp_EiV3cV}01_k{0Mj2;5>xu4nf85ADl2${%z5tL=C>k*T!0&Jpf*lo5ud_eD z&kj^yeVdUebJyG;DsGG|t0TFyF`PN0>ee;Or-QVmLWBfO2?L~^zeKxgO>VfUNNW?u zwpmozNyjBlb+)h>@bFs66B2}U<2){H};tYW018spB{fm;W+9FuiW z{j_ezDa9+orCBntxn(HGWx?LTO>A_M(Ubv?o2VJS9+h+9v0^o3gf7A~u%0TV#&}HRT+hZ0daT z#EzG$^9NrMeVrXNGPlfXtoScIe3WT5<&F&opE2IBfqgS`FyvBN6`Fo8r3%2j&QLzb z8dOrn>y0>Gm55w-}&1LB9|eu%xI2@fSZ+HsRZscomam3>)iBW2Ydx*l^wYlwvUh5jZK^dFELY z9Wo7`Yynvh_xLOkfyP~PSqdl%0K(nL#2SI#q!VdAPS5df9e)d~*}d?`3YHDezyG9) zcF)X79D#lbfXG~Oyxrt*_Z`wGp&Rw{{b%EcylUF$9>M8QNK@HJ)ZV~^Nm#<+od>D2 zyt`_2G#y{;LLQnzK~=-j-X&#apWOqiSi=jU=m^Kw#>qJ(fS3}Hd6y)+*+g1M zg)vW;!O}$)Lj8*rBNU_sM!ncQ61;9}$*H1)g4Be}YdlXjeEu9dTUVL!$IHWrQ@9wJ zK|&IggxP)#F~lQI5dYdlf68)R@vxU001GlX1_GEt|<;yTV48QgdV| zH32!zhVS6mhe{zZ^t3H|K4z9;*2>~;&CwLj^f+_sp0O&@zYse|8MXQzLI#jVkxQY6 znjm82*z&l0q7!=Iq5<(oHJ-~;+LP^WDC)F;>_~GHsvdOV1C!gq31+Yi)d`^yx=8;i zz!b}2Kr+Z2(7<8G;_yc!#8;*U)H`ZEu#;s(VG&xO2%WTC;wGjOx9B2(2lLqhi6=bH z9A(u--QXHf>_}&V8w)!;fov1Zi`t$%6`oHXzx51L!e10W#kWiX0%;8}YQFL_U6?>i ztz1@AR~{YDm`2Q&3bjuUy>Dkt9Qe3Es-&(B_ugoDnhEu^8qf}u2GWD&ZRYb#hl(76 zxQf^r0Z~>PlgGHxCV9vwL47M_`ZQX0f}(^nyV4T+F%qqI{F;1)nZ8iUl)!?)Pf3H) z$#R$Nice(gO?@X8L4(98CA;B5soN5VG|#Rss-qS2d(jOgMYOlfuNVhFTofES_+OXR zE*~&?B@%HG+oieo1X7AZ`<8LTr7|)6$_hf0F?KE##;8}c9o!MX4Sqe;7952&No-7k z{M;s|GBL*Snu)tbRnM&t3vLi(0RpZSYja&MY*Jef&HMAgLF36m_|NHJ_|N-PuizKq z9psjv;N|@6jS0g>r&V}etU|fM*A^eg9+Gs87A-qeaJKPgcA<}Oa$w<>2mLqtp6BVv z)UDssx|HB3ewD}Rg{OJhTG;lzJc}rLHs3AD4BM%x-(R}YWYth{g)*XXFOJoi-GFz< z>r%#EHg{VOVkDP=r_S5%B|F`ZCnk9V>aL`>p`uO=N~hxeitt|d*XelfDSlM_xbuI$;kK9I~bC;fNw(6-c1uen))v?b1CZKMD?j3gjPYLqh(- zI;`yfg>{%qLxQh2T-wnb7-|y&Tas-7C0(iOVL_Q!z5%EQ=^M2fSqXx#RvXN%QtySr z=sG2}l~fyrQno?nVF@_clOoS%uz0om+uVn}k@ps?9;V{;@_#Ljy0+YbGoSO-MsCOh zALWAfsJ~;#%sV9YZ}goZAku;(RVzK0Ve{WL9=T@OW00CAgk==upCo<8}yA% zy>q|IFT5PyxY0cTSq05igJed7KR7j$?ysI>D2wWTD9Elu=|L>NfQpzIhO(tt{lba=Ey zmP1eo1i%s0&7H-^*<{}eALTN>;Y-UD?#-gLtzqNBs*pM@>68D0cwbG5o3K4 zeI}(_|0RBISIMl^hO&#-FKvfHUSCwZ+75bHRu~h!zz=$g$KZ3QrP?rd7l+`!q|gUD z40QcD8C&edyv-Ij*sYWkGFYZ&b!9e`Z9i27;@$a^ah zhWebFojCFmlh4e}KeGIc5Dj-&^wWbi_($ay)V96LLPH!yQ?d+kf>}`7D+9^xNTMXA zD%$cww`va7P|(5A1dApFd`lo_;5?YRg=z@6(+f=KhHV)2BEIl9iT_KJpem|FWPbXO zBZ{H!^RTRfO0zILObwgpCg7^yFVz&Wj59N^1WAF?sBFuha#ob1e`U?#^n}}WK0Ii% zV~9P9N81b2ms0{Dmnpv+0J#7Z!kw$`qZ)J@-~uoQm0*#e3(LWS9e52f z24imQz|XkOIb0Z_UyZOTl$KzqRHjUD2yg{4cLPj6=|yX;An;dH&crKAslJ~f%8#tpib4s@X`#U*lZan zh@pv(8YF-zs;{=ceEX89=|BWYUUIQT-w=j^@hoZ0IMB~dMCPE$39iheWlU^iwY|X6%;@iP6UfcwYrVb zc$XFz+v-uR&-rU-k=kF#GhEnCT*c$z+lZgwPmtBi{w)~RlUQI{CxyJe>3QFq6dHUg za@akIA?xEEjgBWGuomQCJ9C|T>|k|JB>b0n%PJeVV#h+DtRN&pDSB2Mic+mbbxVWg z?0_5e?2WDO6Wzd$KVw4^q`TLB=lhxMs7!rmJ-mdLof~B3j(XQG*@8!V^ISfcw2X|> zD8Pex~3`a3uwl@7->-xak~`pc+V~E}$BgrX6N?jR#(zSBf&6a{S(o!5f-b zUe@{N%9Yk+8Lwyhjik7r@u^pZ%GIalilM!vtVFR%iM@D;nZz(a3}++0Sb^w zWwve?c$;FXCJKX(v56VRo*gIXS6q(EoHD$qlKqZS_BjTo`vLw*N^q!HgjBv*mgQ`+ zo9=v^Z!Vy^Z`3)ga1cxO&ih#-K?H5qzNy*zw7cqTumD<$gCqFWdE~X6Ch(R8 zIUdLXY4a$(bIYMAhPD&O^E=Fu&a6d}HTws+jPy%;(w}}R zlig&4<5bo71P=1-k)-JDm>X?>Bk3z^Cf^M7v ze3fdrkwzlA_HDeQMy7ai6j5CgpD6nk&0ax@LM6ULmCv{0qt6Ky^C|frk)7!zVBhX> zEKrztO48lPRYW?c8>A$t<_yW+Dja|~eoqU{?6oP}1B)l7%;(6m+`Xkd4`rv|Z|*FN z1sgoD4L?K1kxWT%7rO3$idqPH2jJb*!bx2c^=H%1th2dJm&V8Tr{C!n#cgRiW%%Ya zfw~_WQp(|f`sO8L`TX+|Z9J3WfG5L3x|@vf>z4tK+Vd5W8_z0RIo<4)Od?)jRKLYE z&nvZ<5Vu~*5A-v<#C}&6BSuEjlAT$yh&(o^ET2^>iH&s-v;H|r`6jpf_e;baeqceB zSCb1*Z@uFyIl)m-zPB0H$+*`j!v0+NfJ9!l^?)cTt&?S|Slok@DRBU1AY& zLq05*{8F+oy)4JLqPy?87Vgo9anw#sqz3P@$o9fD-obtVuvv0PrfWcf1b|?%MeI4i znsHeo`XXT3;F^rH$q!m+5CM#8{t*4k0N)P0=dqFs-+$d>cWW1z|cz@MXlrjHlF8j3%$l7m0N7HxZ_IBagI#DrC>c8|Z8LVYpQ zA_@Gv;Ww=q-Xx*`9Yb&A@@amn7npnL(BIhC1U2T#{#c~4Qdv82U0oP=B_d!bgi#W^^1mmS)Hk6s>q2(VrOwGkYEIiA%-6Ms!u zRY6js;Mh3~TCk$+Jd(!aMNZEkkCVaHPauCM0W+zSJg;n#4B4ez*VL@^d4?DlxTT-8`n4uj|R<} z48*b%nEtckZ`v>>f>-bjH2c0&75HyfDcf!9YFWw5aWruVUckUBq?04FpFh!n>~&rc|4Ftt~GR4@%+nzDW#by$A2$ z019pZ^q*{m$ks0qrT3aDaIF1hX-pX*nej)gqI3HRneo`@bwx0k_=+T4vZppnGGg^QNOCxd

K_mQ{N(B1J8b%*8ers6tEn$^1P!uWybb0!vL&H&K# zf7Tp5iyPHN<0@SG%J$Jq3L4XKxIK?C@(YHY_PC*(sOaZ@9EJQ6kqjL?7N*9AZqo(A zUpuvsWmw*kxTq?E;FMx^z{zx5a!2jg?k{8r+k&*$i)sh)n#e8iQ)z8tl8Xe*6f ze)YYir*et+tB+1RT+9&7r`7%F?ccjbx)sA9R9^xEZ4(3wFXMlzX6MZDUZF`K6zuRi zVJA(r;WY8~3{h^}VB!kSUQ|$x@%3^3*J3!iitvALRaUHFTh89RzP1_A%UqliOHaJb zGOB=dxuS_Hi3lH48410MHm?xi(>?tRQ7POu)Z#7rFCAAy&*_CIU@Wk0ECXV5-?mFW zoM!Rm;S)bP*jZtA_z5&JLgf%aLVPKpxMs#|Fu)2#Pq#7K(3Ypj8>?t z5=OSz97B(8{a1)YWZrRNN~Usr>o%1bf##7Kzz6*H65MtvwB5bWRliB{UcgC5m>5v4g+dzoUS$ zEr8z2vXkK7MH%tEVQ|{fYGmx5?OMza<{Bt_!HJ!l$D-Yn7n1GMR(1Z%mY`>cpYnhu z_6^Vj<_V|CFSiNy9T-Q;$2=9e& zsPlkJ%Qo7qZ1r2U4Zsow?4fz>q{st&(?jeJTb#u5IZ$%c1G zjlU3wCIHka)#dl$9gP3kiU|<1YjY+Ezn#Uu8v=#1Dr*Z0z7kPUZXAt1vp74C0b73J z>PkQQ;daR&1GfQGkbqL>vjZ~~&pXp&qp$wc4!t^-mKUJ`^H%wYDl`e$Rxqt|?cs`t zb?|HU^h%A2s!X@H_Z&l3(M1ThS524Y(b*UNIf_)}(Fv-Jk=qX93ED0>+Lv2GyoU>pHq&5jWF8h+-L1_?(ePnIvy51UwAjS$!h7Z z-(uroTC~?zf;2@Mx#|AvxD&!AKFL9d5ubk6`R3?t5g6k^Iw;U z4IL>ed+~zQ0ANCbmCz&gm~{%J_1&62wfd!9X2G%J4Rqd~XLo?P8U%gV#PgtOc*m^t zC0bT?xxT2y%|HP?X;FTB4^?C+b#dxP?DZH(1gqkD&6ktRH@)lbwY|=7;vP1=N+32r zp2D=dt*819^;k4e#}ZroA@z-Im{N1>tGh~f3Daq(K5_{0&Y%!IcGegQt#Uc0h@>m( z`b^%~+7U_%QenLn2l!ZAo!(A`HbuEyTZ5(@cvi9in1PKs-ecS-EpQ_dehNQctlLdH zPyq2h+z_0XoEnH3ZVeHR`@H%gTZr%>CP^O6eWLxIc{5;+$0F{J@Hbt#a2!PrXPMIk1GQaEIT2n#D06c~ld}tG=9g>3SX95czCd zaXYbTs+sLw`1EWI%gk)5%%JS>gl`dzz-nm)^O4KZcAX;Nu@7w4ysQ zEa_DT7w!sEEO%3oEL*%VcfIs;h*paDqqXi_Js=adPz5XdL?Z@IY^o`nzscwfrtyi4@ z>xpEVfH5&HJMA+xU~!z4ZddLxInsz?uJt&ZgBT%8CRzs{TkeMmBu51F>Sg~hxO%VG zTWneVed6Bl8p?2}X4G(rZ|KbN?nwFIA%D+P7ItY4QH6W&&xy{heF^%bTHu}&BzM(; z_OV9+x(x5wyRpR_^PJgzw`C8}75Vc~kB~Cww$bfL=k~m3BY{IV9U8yzbRV^CD}AAs zyZyznMuhODzhkfJut3*BZNR8$!f8F5cVm&d4*X{m@%RcW6Hi;CIBs)c z!wY7v{2rIy4m$i!W%}v5!~l!?hjflh1?jWvuJ3lm8#p*Sy$QAX`ZU)TV~ewb4ybu= zQ(##z0^M7-*foy>kVOJ71LEa7W+@LlHJaUM;(3YexR^52iSn47Wt4I(ED_N9y+BA) zHy1Fy_W`2S?$(gaXs_jU#yMt{5Yg8iExJ2TM{-%NV2G|&Ri_qSVB6X5+^(a2iUF{qOGZF^u;csh&HUQcc?0F#N%Nym`o%SO*Z@?a?qGbdAmjrBh1R(MD2M2hQX$lh>*?x4SR0Fwfx}zs#H&ohN87+|JDGLA@AvZG?2^ zt|S36v6g0EM@PK1H2-t8yn40j#Kc=~YtIoT8~GNpTjBkad({*jB6WpzR!>_CZDD*6 z@i_1PbZE!7s#@@>JenTh1LQD6X9nFkQ+Q571)>BQPb?-%ONYCUxGlSQd+pUDOKq{L z2e)c&%9)^h+RW0QumWtShfLl57Iz8Jb<;$TsxU4Ji4(=8j>9+LyFh52$ zkr!}$JQM}V?pn~%+=hl=_T491>DjWD%Yn-?z1DAA><)H}_^w^d;QIQA6~>)WfIs(M zzJ~WLtmA$>ghriC&t9lU|ds>R#IS^}$CyIZNmgYnle>&K6#Q-b>L^^_tU zHzGsNT78V(9LYUvR1z0OceveAR7GD$9kx9n^;iy97%%MJmlFttmS6Bn3G zuq?Dna%|DV#QYu_P7ebZT4LSGl+k76*nen9`Ejg*I1z3E z+9c!S;_aSFKpIuG*=w*#z{aAGcFAx}&w@ozAe~J$X`tvTM~7*EHs#n~x*?Z`J9S_ZL$YH;*<~6vIIgPs6!p zD4RN6;;7y)PNq=<@{z-X#(`@yARCCr)!bNo)S3>}RzNc)(Ci3Moe!Wtf=YLLSl%O| z0TOXZb_t(HYhD5CnX#~o+czndxOZk`bH-ANY{qzf@jS9D!!^N>o_2UlJQBQojP44A zh+M%cI-MB-U33=6P`Wl|IQbUkh^esl%JSv)a?MGBxhuuQj>JTwX(@hjvwW-z&x!WB zj3SfWsWUxrZpWLGPeViMRUOj@rep7gK$)jbGRN(-XiLL}3$Kg;WYC|QU)6Q2w1~O< ziH^K@IE$+)EoJnnD&~-a>C^`%`Ss?^Lo-; z?&7>vA9*Y(>a`v^BPBH-(m54f>5QB(+^P6m5J|=BArLjd7y93k8sNmPssAfnasAH< z{NpiP{xfC&1Z#jyZHd2ctN>z@@oxw3{~RbnaCwsXUhiN%_p8-t>|yGkAc@t{EUzIC z(d!japZd2}vk3k1dA9V8*|U-qp3fxr|xe>*6@u&lqU|%Yx5mfYWI6YR8_dkt8 z;M*17WTaW%L1K09dq6IV(BrUf__IUjs5op{dznkM(OYxQfBuu z8@Tk+wBIPnCUo7QalLvue{_4jC8FjwBP%?pY_gT}-y{1li=ZCX_LRFZ!8XV6m7BMj z)vFxF*8lwX0d#XOm1sr&>!?=$0SEZ;r8LOD13|&+XsPCLn~X7euR}xi5Yt1}CO-#< zhOyOEf#Tg&pUtrozZx#jQ(X%E;c@Xq+1EmMYkbRyaj)PYcQJ+C@(EvlA8E-!{40l) z@8fBed$S{xSu!c@yJ|bBi*IGR_oYau5l#|9iEx>lLo$+A+nIp%{m*n5z}=GL@QoyV z;Cl+KQZ+f%&a<(yR=g4O#{;HR+f!;%5BI)t&9s743xj-~1+)no^voeS#`%H^`b)Yg zR#dK-?u>=eFS}a)_Ig${_~2R~vhB><;7!#<-PWn?Z;k@y8$1UOE@?& z+`|!?W52(Dcp4QbT%?@vdt)*+KSOm6hYSe48l!@Fy^xyk>7;qGS@f(L{OS*8+$%d2^$o{LqYhHj8ZHTgm^J?>yc-X{)5`;tFr!F^_*}2$uXPn^-qg}Ljp44gLB_^8feGP&7d{_e&@ftNP+|{eJAAP0d8AKVenqHa>*~Q~?mk0*(FDE^?%Xf&I3drN^>Sdj}K8Eq% z3u6y|vtm@zH-T+^Ony+r6(%M~a=-aF5A=OOcrE+%;d*;eD(cDuJ(rTy)FDCb+(|Q@+KeSy655v7z^Ln93K%ce}O+pr7z}BN*wl> zNe=I+w4n|D%a#nz9vBw(SADs%XoqDPw3UEwq4p%$38_X{gjYWkP^%>~?OYYjp~H<= zwJ~Tmiy11U+M@n?P^PBDhE}onw$Ci7?SE9ZyLCIjgh$8F00WV!^Iqfy>o@gBHQ&6~ z+yW9mOskHf%Mx8LKQi~it|HwiX?x&(BNJ+a>I?TCoS2}Dflb^b*;iC6 zKT_Cj^7j2b`?#B}oN{%Oue`!*_{uHp{6*juq>&qp75xg2Pej^~(aywa$&#k4Z~kZj zRc_35PK~7Qs*LgTM^{s(v3adGUSguFVRsFY8_cz%X8O6G(X#Qmr*wmRhQji!~qeU?St#=O<8y(SFg8k|j#HrlfAonyzCM>5%(&@0HQiwl6HteSy5 z)Alx8Rp2PYayK8>!cw?rd}@$$C%Z58avKSz&x#%Hgi)3Y+ZUB1@2=%tM_&2RI-}sc zk==Qsa|E2puCd5dMx8OSwVJ(5k2lZi)%=I0tDq!rs9$BKBt-3 z5ol%0J<3MC9pwzsZ5~ZCyCG7z5ErmS0Q36N*aABcJ<+ysBLlUl^(#Cm`(!zCE0nt_ zi$GUJ9QK|YIo5&j#+V-HRBloL=aXwJQEL6|2vgfAC^L9+lB{mshZ10M!^wGQjjPFw z1GRFgfR_QlrSh-`caE3ax(*MI8^#1Q24o)}a~Nli%Itmh{^joBH8Q|Zp_#`PNAgIk zaV*M|b!T^iHFS}pLe`$O<%KA>)J=1iHTwtyivFnpwm_Lu=Dx17)t3sFCw5q&Qo_yU zS!`V_X>SI7>zL^u`vZrKWZO10&rgN<{`&XaTUQHh z)|*nUu=MOI<@%oJH^Ix!Ww8#B#x`3CydOhx>?^(UuwHQPDsS210vl_VJNc)7Td&{< zh@l))M$ga{A-EbIEEn-19YYA;h(*-tC%1Q8%S-Lcr>=F~oLccMw4 zT<$Y)1B;4=kG)>lHoK@Q=?otukX+kYxnJwuLo9YU5JtQwmZun(d)o&K8Pz0f#d73> zxxqa-*#~wG3qKR1oDNs7(DX@Bb;T}`DWa{XP}V+ zz#6GdRNrZ2Aq!jLY<*e;i-EiKwXX0eO7L5>Gv7=rgO7L&9fwxNFjTkDSxTL%l4!Chx zH)WOd(=daq8;Qo~90}~&@YL_DUANQOjnx649>|^LFY6u@yUHqCo`hD=^?R<{12Ixk zP9EblV=KRBG9+ufJfBgvPP8eQ?b@4N@tDcDa2^=eO`x2TK4gol={k_xgvc(1;28+F zuom$N$l;dFZUIXxrX918MHO_FUdl4&c19gz^i*nov?I+ivsj=hD0Qp5oFYPfV*O_m zPJ1s^>-B_rB_lTNJh1ryCK<%}FOxnpk7b)=&U^t?I;`W6+qZB_bt(>m45w<*dT-(T z5)@cA%rV|5G9EejTUT>j)_rDww?<4Yh(){5F^GG@6kA(yFuG$X-8Y6FQK?Ja-*d3( zi;|f|Z~?ET^qkmmg-}x&!Old0>jaS<0l|-lIK4z|E}{~Meo*g`$loLQSN1R}V4D#1 z5w{LiqE||aVG?0_ouj1>m|qvy5?YBo+r1+v7t=giwt<2pwjw6*jyq>X?ekx z>T1~KHSl3njK-*beqxyrVfT+rz`N|fHVrUEX-g<3>$2m4RyT8&(O=2W5$>=xUfHw}9={Y0;e39~{8n~RkkB}j1>GlH zl-9MRKJltJzH@^(9`Y@GWPSAN7Z%_${d+REyTwAI1ViX7yUARo=J=xkO4jgn_@;tv ztrY3{OXa6F%`V+*bPZADXNa)-jg_3y3hH7XdWO^|}K-PE6E6ZsmbT`KgG$SCMIKFdI zY*Z*f2NR3h_BeMiNd>1F%Uoaacv9n8ROZfOhf?EKwB}xqSeLDIO9Wt&fyrSU9;hK% z(!v@}<$DB0YSPoashZf`=ybA=YS^oLCp$Zb&z}$7#MeDde`)LsSAFc(r%WU@Z_B~1BIJ7c)>-Ba~>8POx0bC*3E9N1r$9~ ztTEjqQSq=JBbP{?Rg<~ihmY;@qWz>%l5;{HkKS%}kEc{|*RSs$dz{c%`B%}ue^n^u zHG7{-D(P89SLmdziIZq@gBr}*GDpld)k;S#{6+R~j$RN%#*pF5fpd?d;W}~pG%9M6 zbyH?z@$knGJRnY%Wp$gT>BfWq8eovpbGxMRz3(yZ6qC`n4T^my=Vo*${Ujfi*H1j5 zZxCHF z)KphV)6$n^ENL^V{^#$HUy=kkVCoxKM^<@74^CdFY4z#OJXGcse^`EMLHKFt3nOSG zFdTm^b@_!}MDe;9Nc+^KAME8VdVCvTi-qB?>!9ac=Wr|s?G;)3ETb1UA%73xr--5! zOl~|{6yZSAVJDiUWk)MUpdI(%!&iefzpI^Gl*SHsL?gdb?9mq+@?vJmww)b-0;2u>+C%|e968YFQVqR-?njmUm95A@eF5A$@Idg84sl#yRTX8~^Ak5w zQWeC+o44rZ3DnWvUNo8SU{yoJ(->ALeq!E{ zyIbfe?iOm5qw9zg)4Yhc+JNWaZ9YgMeS*PmdwGx~Mid-tp@!x)6(=ZDRF4w;0m>

dRVsFU{acu z22(EZdf^d1u2@Lot!jk5EM)iz!bjv(8Ir~TJowKAURh{f_uW7JU}joh;-f#(ok=v2 zt}pe%-lL#4G@w49cN8@eMA3bMIQ-fUuBk5812>CD4H>pc#+WGcrEtloKyqUGw}}`< zkcv5hfH#>h{aD<_p589`sE@=Lp9Jn7WHr7l`Pgu`?VhQe0t&o7CV#mnCux z**_u7Id(t<_fHdF#D;Z2OKiggU1P(;K9}Xo>gsH5`=`0QoZ|)l{7}$sid&3@NoQ|w zF#V4)lHqWl8*Z>GD;j>@UOG4OoYSN$QEfg4o$FW?RrWc;?RtQ5bXGQm4{rBVr6VZT zuJFmFd~OGa(icPbqixiuNUewN+-EExtH7=KkA%Nc3Rio2aHByW3Ec5&bG_hARl)p1 z-jYJfR6E##whWpgNN(%QIiYD0`4DRu>0~$-q8kUpYMT~)oCHxpDAO>n3&2m%m+)4l zOEi7BmWG0RIPxUTgiTG;Jhwis^_L>aYvJHuD1UCkX?llm&WpnWypH{Lm_cWM5u>hQ zhn^7{r6O`=k z-)#d^0cXti)$sch2m@JRO*_%(2$Pqnuk5g3K1ri@e&4R)K^zc^Ov6$gq`jSKDDXb@ zA}3oMJ3!La|02O?wrZdZW*vGkqbjxswsCH}&fB3Lh^#9rbcZNX6ez2DYAcM*(xW=)13Ua^70WA52EXK3DT)4CYe|~@BB1DF);r#UK}xLEav04>-UvVT zH9w9QXEDp`!(-quRk(Ot*?*_NS-f!x7gzL=6(DIt<~C)R*?sIXO~OJdf;g4UdI%r( zk&^S8DaAKh#L{{Yp3xO#m%n+^EgDO6P#Aa=j5-b}5g;f5xxD$wT?AA7pi?hp?Sj+l zgGFm)J}vZ1@RxkUrqg4|L?4L6r*8wRNOI7l5$E|b@>){cn z$Vr>eXOQ))qBjf$Y)6np(6g#r_=1Tc6Ik&$lxpX0nMbPT0KL=7jw7l50ezMEE{KmJXsL)A#x z+|OB@RrAK4!CYldIIM`KBUMwgy%m&>p{Wgzi?IJGR^M)juF*U!6bneU$X=PX69PXd zS6SR0FK@-zGtd3(+nO_R2*;|WK?n^!h=h6_mo*KSN0nM&MaC&eB3_O$mj@CXHsD^Q z0SnWtus{>!VD_~V{n{U+CP@U4{P`R{;&!|ra|zCDC3OQmD8;Hwd{8X%#b4+3JL~Vw zk8^$-iSMm7MQ)R~Zp&XBk?_+BUwy(uD_1lJjbjTr-k&wqxE;%%p!B_ zKv%qGW@G-+5c#y5BNkD~IXkbw6nwSkc1jmLxsl$1Yl8jj?lN~K2n56Z6AeJx7aTc#Em@ERVd?@~qQ zY}>tgjpxPf80nsuU|s@g6Is5Fh&;9@V?(gQG%$hYb>z#MXnl+SEyc%LFX!@gQkZ8<0DiVe+WyJO2cE4x@UG+?O%Sqr3t zMdQfNW8SracHMJTC8qermM)A#2KWwh^drd99J=SH`J=beh|Z-q+C<#ayGc@r&;O>( zh7>a9)$U&btCbUahs+(ZtvTI-Y}zQ6!4JD$`nI4$yK#Jx7k|hLn-*~s?d6RlxN^me zu2d=!=Dv?HD+NTrTUSE+vJ&tmajjx;8N$oe%6{4i8mWY2-Gd8&Gtr-`6YS5S=rhj@tKw&Otm{qw`}o$T_;rRC=Pc(bO}sdyWfWK+K!;KiZmF#B4O z-L|Z*pG_KoQTL7T+uSqa*>+dpq>t12=N5rO5ODQd1PMf_S#qfgG+`U<>_JutFf|02>H52 zd6!HLqhb4x-qiD?KjGC#*j**Qq`)@at^{4yDe&ZnX+a^AKWDIxr;?wg5shStOY64Q zq15J=UAd*54LH4jwTgkwy+No%3aV6$F)-0)7QCpXis(ixc;S0=`qL_K(4&|#yyI)E?VH+=v3~h_3 z8Mhy43z5s^An9W9;}ITVc9%#X?a8nuyQhf6M zi(VySDxugc4gsHACDp&$3d@@;zy?uIiu2;1;@HVLoGM1JS{GPm;Vo5m$rY3|2#P4g z#AAC$&FC8Z0ErWaw@%gb){Sh3xg6y(!;L$K;T^-9b#hS&5Vk*8QLj?SKL2(}qZ|iA zDjy={d8wmgYNFjdQE1o^qg^iwU39UP|9a~K0df@rPJ0&SAY=2MT>O)A{jQkWEBf)K z1%xPctqN}x{z{jv~h?79{svUHDC+R6I z*wfCfld|E5eDt6!L?Ane zz4a87uyWfzBU)zs&C5)Yt+L2Ir#W)dGP|c7MAoC8Jy2bI9=x$7M_-4W(TKBnlw?3& z$hF#ro{OPtLP4LG+T74~IApXo^rRm+eEPR_-s9e@FEiK|c!vv5&A+$nbp;=05_C7N z|J%2$o9qjKU1q6Fx-~>^P~(w)2~IMUh~f%w^S|wL%u&(>c@f6Qp{ZgXP>dh5p`#LW zLu~_fKb<%MP?*0KmNESy`j#d}I?&L#pMCr>%z&F`b&tB91wdr{wHH*ZzE9{-TP%Ln zdez=L;h*qRd+cYd z$XC$;rPMPB$zP>v&#fas&S`mOEjUPq1CX7+_9TOP0%V6j)y)v_Hvk?_`R6CqMref7 z35iY_z4qGQbSM0dP-}!=0bm!n@t;q7IpOlqL<_*K{_V!NOB$Mrj}>~E^sGkzT4A0| z7DqIB2t@3!X9(lJJ*sB40ZRB^h3Im5rfk7Zr@eRkKOYrzMB*gC`kwGV^?B<{quxk3 zq>cP<8TLrZRcbH%2FyhM+Ef|!1gsG1$p?8`sE+`K@ULCXVfunMN(xJq{5PQ`r$00l z!>~jK04VLRy$;xAD`5zTWWD#dZdSGWtlH?m-5{C%&?X%C-&DP@`hHa#AWr^IeP-cY z(yW;p=(V~2*4(KFBzc$5xSId={7b-iKmzdRzm;ZMSWnPLc&0M6!ylV`K%4zfiw%wt z*F9A&I~F$c^dY%$zPWzhET5u~0kWR~w-KXW$)$DA1KywSke} zSIchiEqr}B&+YhpshP5_Nc(p)Qr%O=7BZmqO+770NP&xo+NQ@ang^vP3ZV=@FKIjIxqo)?4AFLGU}}0C zdyn>H+dE{|2w)Wffu4EoV}8({vA2NI>`&OW5T`M)3V`$l+Ew3LwLJ~6g#c+%_O$`7 z2@q&tZW`dA0D)e_djpIU0F8{niBux^RBA-`A_&wba9W~-IOWE%0V%Obr?(w&fVU4R zpe(lq34lBT1d8A|jRZI<0A87WfW?9U1j_0>W9~RF$MFT?R0y{Wq{gP6-ujI5ZWk5- zE*KiTw4)P|(9u(_Z z0L2)8*{ghZrlIp2!T(Z1^m#6)eS!1h)aJcAg@M|EJk@;-+YWj!0~&Y;(Vq(~JOu+v zAS|uW?D;Rz7hl)-nV!+^yto8a0{AXK@1-AN&R8}6ABxE1r2@QMfIvbZ6cZsTjHVme zBAcnITSC~8t+vVb^p!1tBHyZ~6uCG!#CPB>JPp!4FP~8kdMFbCfkxn5O9pf}t@v5T z3@iXs#7Ng>kyjgem5N#k*%da?#}V1vcf2kO>YpdoDFN?pm*+1JRf4Irp+?$4S+xY& zT+|)=sb3(^W^V)+dNJjLuotlj_p!ptg+vU|)Y0aSC`Me6rbD?sDh6SQU?#v-}lNy8B{*ec*OVqP}vk{_#OEIA@e&3coDwU(;9oEs>yVF$11)bJ*GTgOY?(uqTGfA zNkoQ1jDApqQ)_o1)q*2&@MU#_%>Z6Mb{0Jkzdi|e%tx954Wv|Bk*$EO7r#g+a^C+1 za*K=Q?x6Jr)J5MX^q4Kc;}TJ>SNBJ}NfeW!e7apqrC)d`IZNUcBHYQYusi}&2F>1*6T-^x(Xa*Upjjq>29 zBHq8CrPP-uJO*YB`KAsSp>W`4tnWvEKF%pD@91She9rCoB%2LPY_Nxb4=BIEQY!WE zFIOXNI)W3oSJ8{N4fv7Y{fnA{011WM1=ap# zCrNDvh+Z};LZy6eR1NnvpHNcQK+^{DwR|v`#4t=np`~=0*osJ3L%Qy@p;Ht@DbHat z%Sy2}pUR(l>~!e`GYXMNOEHj5Kg^fx+R$Q604Vbu^(^-Rnv3{eiUS#tc1M!&mVcuf z%M%{5{x+yN`s8I2fTBtj zRMDhn$MJZ!B;)}WdgYnslPTjiD*5wS3xEQy4|W~D{95sL_yHmjyDj~oo(Hh(E?pc; zlWM2a-Ts86;8emA0qiz_>9^bmJA#DJpis`atEp*JN+9Fxs16~wv0RHbsK6k=o zl)sHy^2Q_=;2#y6&2!!X%V69uJT6wQ?%H0Y9jDH%1Mb_V>qC1g#P@lY`bq%W3u{d!I zK-le07p5me5^KUj@(e&a^0dJo>4f(*>$11AtB%j1XWSLVPzO>_DQHpU^~YKWcI1+8 z3yIo_9OC5n-0)7h=p^7*Gh4h9nhSsTY*^ow5_Qq?9F-lJb}JtpyqhuplucXpT48nf z#E2M5Yr8~AWU@uMIY{wmP&5Q^S~Xl6RKkfG8G#M+R9w;HXXVRBn3Jh=9+&4;_csnp z5_T<7wox>EIP*0Tb|oWoU{q71X9+!T4R<5Xz9rI`ZHytj10Ak|M=#Ug!p*}!FM51|v+Zs#?MrpS1}z$?S-2dv%5?$4vc z%6`@(2_~~bWmpF*z+>5c?qT=!AU$H1Vi54Q0vcN*?;z^+5?);h35GZmqJo#xZjcb^ zkD*x6_;NdoudZc!dQ2I4V0~MIO!o;5pxc$1&lQ*@8kOn19loEhtt3i8o@Enjz7Z^? z=?U@L-_tfb4j{NkblwH}Uk}^p=-In&N{gZ74T|zmnYd2(Vhu)ZPlw4+3bpaP4oJ6n z9*&q=RT{yE!CL3#F)et_={+8Q==^3RW^rg(zs61ryj4n9Q$7VR64XcN%_Q97nk!2W zFQn535u6!?3(IRHernMxTcWk3Vl3kA4qAfVY`b5Go?~QzOhp5pkkydI7^=<@e-8S) z6{Dec&vQwdlLARs&4#X&5W=G$em}X4oNIwrDY#^#a-g(e3!fr30jhM%0>~%XH=}@` z4F6t&P|maYh?Q5kNKtgFNjvmHn#)=Bv;j}!@6Y<>MPPAtrb`OItKa!V18^e(sK*=7 z%K-n_dDimYqW0_SPd!0@b7(LD3yYxktii+}%G z((XZ3onE&vEtlOtlc=w9e68zvW+|xfN1Dbq&1Kagy&ho!F7ZDS`7&!C5m{V4Qx6fB zqVF8b5nA;%59bX4qY4OV9A_C-Ffm0_-}sMt3=l#GMO2UAzHsNtIhr5H%%~ z{_2e|tLa5(_a&fNxBz!Fia-N`GH?7(ibx&>9wh~?@BEZ#G62XiFQUu= z9T8YCW1bvu^bpg1ubzZ%Edo}-lhq;uK9z$$CpX9~)HOi+7ygkD;2AHa$smual%!)G zmm_K3a+(UJHN>_fUsW+J3)2RVDp+$o!nE(L%fCk5$?>Tam>7rPg=%wnFrI7bZ|m@J z)yB8ZR}*LTdmo9*`Z|oH7TErs7L;F|QM8S|#xGWo=vd^*WEUt^S*&u^LD^rjTN%kn z{<)yEU}tg5fMWBAJ&L&9^c~zk5bPKEX%A6pCdtI@au`-+-SJK2|WqQ~=-hP(*XRI*YkmH~3~}QNA0W#-f%DJSHvyhnM6fce&2ADUi#QYv0v9foIbu zn*qO_EbIwHuj~wAx5phf0vfUeVNb6{ZX4Y&c71lKN~np?t{a ztzSmAv5Fp*=7-#Ln3vteqjqdhy*uMI44ss$)M-(}x(I>V{uX$h7o^2)EGGzj!QH$N zi#A|ekt4z14H;i#`gmRmd`q>njDNl$iYkgqU`ZaE#W^IjASgqR>e+kJluboKBl&4P znYXryBmBgoYE%`G@V&Pk*L#t7irLQ?q)N{kO?v4M^%(ACK2 zL``Xl6;^_~Hf^DN3pq;g2Pw3Abi?EvU~N?SFUG(4m^y!n?_Mguog ziT1oKO^*FEcUt5;LMFkFSu?GtT^cLQota=bw>Nn$N=paf0#02>wu8bPZEbewY1jOB z-C6EiOPWocioRZ%h;aOLkNrj;r&}!U`OnUu_2EGm8MONzMdE4_b>C#oxBo^L98E68 zDM}+Y4-UrdE}!zFrYu#4XJ|_t?cT^q?GL(+$z7jzAV?6lyT-aKYy^ziWA0ZdI6vll z6rO!@%Y9?!dkluiqqO$e%R>Y^lZ+?e7PfM+XeCh_8$DQ?NsB6+rU)Snc<#=>g-~>a zc#LN`R+YWs7=ccT?0v1xr2cGn$Hm}gWQx@j@rhCKG4Vy1~6rCJAwi72HZXh)q3h6OEFfd2~-R_pRPmF20Gh@7{Utcl>jhTO|yZhgW`y4-Ujf zdSeY{!J-(|WOrvm5e)k6_n{LueNTf}jAe{zmfik>tSvwF zueOfuw#)9cPpzK_9vdF?kywpsX%}cr49m$P_($I`V=6z`OSr1mT|XH;{H+GeH<>ND zSmA7vypCyX68B>HdX(PDtNR<~9aDDt;2-VVVS1a-Ypbo^!Q@)lY|P=Y^ut1&!*Bg~ zOC_U*Pq#uP40i1vf3iwM05tVXw(M>N&6%~80ng2be<Bie9+`e5_dWHUQc<53Kr>lJOi>+LHuBXa6KTF~P(Ult*)Xw&$jnU3NX_Sr_k0LMS5fb3zdt$&ZA~ut|6u8wmRYCk6x)>lr9>qhxK@@p7K8TSP zH9sgS6rPSts>Ab0aH?0sluTuU!C7tsZ7o?7yUJJfAHQ?9CaS-<)s!};cT{CzNRxWc zhsu_P&MqE~6Hzyq6yfh~_?A8^2AQgW<37avA_P9}NA!ko>qIw2+K9z0I5`~(vom7E zv^~UCpEq0VJsu>-kJaAr0hkAVszWI>D}oZugF9eWuU_Xt%pC&U#$O80>{vpmX>P|a znp`sDN0IL&402ENM_Jmy)mb#_0hfl_swfSZnSG|M#qBQJPwu7Ybi$PL` zpN4dL7n-c?r}?SutM|f_!*-p!QIl)g!nOj53p!>))%;sjz}GN_iCOcqJrp`XGr-rW zKW{oSmYk1^BA-tq5lr8)+^lRs@d@$qxfO{~mbH0R$D4M|nFJr!>j9^yvqC#ex%tm`_-g zpKlf)(Kn7o)3#^o>bn|+UlUi;{8{^=adnyr*bCr_sKF{(6g(p*9Flc(8W2D(yIvxTh9p28tyU8h6 zz#i#W-$R9on*8XSSpG!qh=B0{(x7HEu&p27-9%4#n#_&QyB}{VPEg}K&9i5?K&JOrIl#sHU zxp1g1lZiqnth!UHsJb~qq+4GljdtQ$mP@k>p)J%C*Qx2g-E_q@)|Jp1E9`~MF4LT4 zqP));G!M_26}&CxYIGaAjP#%ZljVgQDWgOk0-8nH(=$yPmZZx~)xmN$jL1D&IB zsu2esiAe&CJ8OHh0j7y148Q@yO;dn`^x012N}HdrgtZtP7q$$V%*+sIo);`X9CygF zLz%@2Zh6?v-SP+AAN^WpSMTS*h@o(31C#Y+U6g7U;XxqqaU6Dy1)XWh`-3iA{#?-}RQ zACYM#Uae&RvGsgJ0l?Ep4>cP=5Z3M9n2nk@#bPT~^-fr#xBQCm=BRbn8w@@XxT%wq zx~=|^lam+`)51KJl?Uy?@T*^UPxf?Dro;r@cTbEtu{8w9h(Xn=1otZYS^niK0nXA1 zv^8&NO}jU1m&CVw;%|7q1@Pa;(Qzaaf!R-jTWQ^OkhG|aNt99MAs?u1SV2;)53vbx z-^0d)NqT)3^Ox?;@!qA~VbTKJya-Y=9V-Pu%W?=quf=yDmCQuO%&ME?y7d7gUEroD z>X-ICe!$lRExs=uKefY5%W~G;Z^qz4CoEllZS`Nw`Ubc)D9B@~U0%6+Xh{3S(T+xYQGJYbP~>~jQ%bzy}GxC$p~doJm;MVP3SI%@&!Iv}Zw*A<^RpL>M`!cf2E z^N)xN{udJb=+ps|!q8~&1s>lEN)aAs=MjKB4I1~`#LiATD1O=)lU@5Wyf5`jwRTUEw+ zyg4`O!YzewD^%_tx84BdUie4qUvI*5Ylo@2d zryvRSJlY$T{KXm|gXnEsJq*l|Dv?GAnRTTbT>$kl|09vFOiauJaj>5IhGO25+j&|; z4u2g)NE^jN;xlzZV)pL1tqF+~=9;O^77l+2;j^kKsEYU5$n@e3eZ~5$bCxKJzHc0%VUF&UcsDXLcg@QY_ zUt^DJoBdRp-*NI@Su)c>?0$|W07*YXv_D7a-YRW7{@E?H4V{^Js>%M&Z93WOg!k=e z8RHxUGe++DSLR>MJ`2w$cZZ{7-cVBR`&bD7Z0xj1f35B{;BGwd`Kr5$pNCc1p1k2U zmmz{aMh;JFzMij$Yj#XL_D~tm&~>HH^jhC~PA8drK}mt$Xyc8z7jlSkzBv|6>e2sB zwD_{e%iNA~n)fMBBsoow7pUGy-f=S?*STvr%B{?)$OwJ%uBl@?l6!`M{O8nXVS0Ka z*Yxbty++x6C|yE%6t2^QX`(=q?l!Jd2Nk@u6XMqvpzHdpw77Zyw~RjT?nFT7$hYdY z?L~sb^f2ymQQR{xp50XOFli7dsC`UJ2(ZS(+#@e-Q-G8&WUy3}?@4R*e?j{er*MkB zGh4RCy7%fxzE~KIA|y>E+?K(s&qO_>SCu12{<_Oa%g!Oj_dVy=+`+QUE9Q4w9m=I- z{q?RJKfeuxv~mI?fBBea@)nYB(q_3^ z%k5|TcJ`-vzq@m@l5!|Y%C^>SxY4+;{3PI|5q_g^1ZA40TZ;PIj4p^oBeu7;>@$trBqHy1L z%EmMl06xcsi|q0j#5UDJqYG-5>q35Ll3y>qa`cF8V_}E9HW-^HHg5@%=;btvi;MGA z)at6Qd$l^qaRbDa@FL*l19mZw<>Af;Y+?dFRwA9-`Hqk_w&Eo4U0X~2_?q0?fX{mi zua-tNuc?;^KkccZ)WC9$OQd3QxW_WM9d#e=5aQP5xtyC%{KL3I*hJrL4Ben7X@@=e z%mVDF-+L|zt7x_`SNtqslvSIOdsXtPXHC`Wl*AKXqky?3cfKOP(&1pJQ%4%1Kr;tt zuI4DO6u^a;WUNcf%;wGCVZb+qCxMS$4Pk9Rzu)Z-?5^jm&L#pje4kf6-|By3ue|h> z+r@O$}9Yqg+ym0bBTy%Az}42zC zwfNy9(KO)5n%RJmS1dRdLdTYwn|xN&7E(+1d}X&$4^)Nn%vy z`h29wVNE9ZIA1Wlx=mBbd6;%S9y4)JIH+-77(eZ{NOSBp&R#gPNvwpI&LM#3p>ZtFiOO#LIfl zeVVo}>yGor{Ld+mliyw=-rgY4Jy0EZwf0?lL3;S7m%}E9kesA))fxCf+G>+BiCSRLEYSYSsy2%v3@Os}sD<|?Q(+d;K1 zXB6$u)p~@dh!bFe`9mMR_pF+ z|9U+L39Kr=ZMGH*cWy`4*g2HUHXg@lYaw{%7fA1{i1CmW7+j9|XlXcVITU;tay>+$ z*F=`Gz1H4P)L>xHbK5PwrIqsm2ZyMu-O^V)cPE9 zdnKe}H7_vyV}arC9=axWcrxYrRK<+0^m$@*0l3j{Xwq;jq)W)#w4Xs>cM}Ee@Jy5s z=x^NcOQt;7cm!3I#e3MwJeq&agF;oPlt+0FD z0XpmvEHas|^rp#wepfmQ%8XhvH4-(_S?18Dcva8eDOgi_;%?bgXNgN6`NlcRR%u+c z&r&lrNFI%6rg<|m-d=Z;VmQ}Ozoa91(q>1<4wx^LE;4hp4U?|QDYJ>|xo0IqdsAw5 zEdip*ZZQ|7HK;0NKjjExV>TOxdqKez4m@ z4K%eUc7rLSDh9O7 z7Z}2~81&ra$^;yOxL<%kZ(~H=4jOM1(~O!00_TFDq$ix+_fi8mGd#k>Z=Av7dTtA~ zV~01hwZr8qegy+-%%7od#<>+gJb%jq7*`O;qO0+<-rJde%P@16Gt^d_@1d@R@z+!i zVd|^E!_IyKZ)Vg+gn+<3?vtJI`orl{CY&O08G6h6(6&M1h`|fMioLl0M0*ia-z^LX z0m}Rk32Bfx-mEuGrar^8HAJzVr}6m;_A^Qqy*GMU0!Y>Kksn302Bd#>+SH-Bx4jw< zx()*M-A%?)t-0(`fHpcSLEk&3kHyH10T&yl$48fbU%9RbddAUyFmtW%OnTHK9B>pU zXL$#J*Zrov!V5t7vTmq50A;KB%RD;&n)AFsv%`g$mHC+;lnf7h=s`BWn1;e|N)g*(ZBmqoy>&aK+S+Z5Dym* z7dsapI}e`*w}3F$Q{kt4tXy2eTwDs_18aZDU~6w`W$yNW&mcTteb)A%momUkfu!-r F{{yum?9l)K literal 0 HcmV?d00001 diff --git a/build.gradle b/build.gradle new file mode 100644 index 0000000..3487a37 --- /dev/null +++ b/build.gradle @@ -0,0 +1,52 @@ +plugins { + id 'java' + id 'org.jetbrains.kotlin.jvm' version '1.3.72' + id 'application' + id 'com.github.johnrengelman.shadow' version '5.2.0' + id "com.diffplug.gradle.spotless" version "3.18.0" +} + +group = 'com.mangadex' +version = '1.0.0-rc0' +mainClassName = 'mdnet.base.MangadexClient' + +repositories { + mavenCentral() + jcenter() +} + +dependencies { + implementation group: 'com.konghq', name: 'unirest-java', version: '3.7.02' + + implementation "org.jetbrains.kotlin:kotlin-stdlib-jdk8" + + implementation group: "org.http4k", name: "http4k-core", version: "$http_4k_version" + implementation group: "org.http4k", name: "http4k-server-netty", version: "$http_4k_version" + implementation group: "org.http4k", name: "http4k-client-apache", version: "$http_4k_version" + implementation group: 'commons-io', name: 'commons-io', version: '2.7' + + implementation "ch.qos.logback:logback-classic:$logback_version" +} + +java { + sourceCompatibility = JavaVersion.VERSION_1_8 + targetCompatibility = JavaVersion.VERSION_1_8 +} + +spotless { + java { + eclipse() + removeUnusedImports() + trimTrailingWhitespace() + endWithNewline() + } + kotlin { + ktlint() + trimTrailingWhitespace() + endWithNewline() + } +} + +run { + args = ["dev/settings.json"] +} \ No newline at end of file diff --git a/dev/settings.json b/dev/settings.json new file mode 100644 index 0000000..7bdb768 --- /dev/null +++ b/dev/settings.json @@ -0,0 +1,7 @@ +{ + "client_secret": "7rc7p00md0n0xsvqnv4rv17fthvjjrzpdghak1yq45833zvdvnb0", + "max_cache_size_mib": 2048, + "client_port": 8080, + "max_burst_rate_kib_per_second": 100, + "max_bandwidth_mib_per_hour": 1 +} diff --git a/gradle.properties b/gradle.properties new file mode 100644 index 0000000..2abeadc --- /dev/null +++ b/gradle.properties @@ -0,0 +1,2 @@ +http_4k_version=3.249.0 +logback_version=1.2.1 diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..87b738cbd051603d91cc39de6cb000dd98fe6b02 GIT binary patch literal 55190 zcmafaW0WS*vSoFbZQHhO+s0S6%`V%vZQJa!ZQHKus_B{g-pt%P_q|ywBQt-*Stldc z$+IJ3?^KWm27v+sf`9-50uuadKtMnL*BJ;1^6ynvR7H?hQcjE>7)art9Bu0Pcm@7C z@c%WG|JzYkP)<@zR9S^iR_sA`azaL$mTnGKnwDyMa;8yL_0^>Ba^)phg0L5rOPTbm7g*YIRLg-2^{qe^`rb!2KqS zk~5wEJtTdD?)3+}=eby3x6%i)sb+m??NHC^u=tcG8p$TzB<;FL(WrZGV&cDQb?O0GMe6PBV=V z?tTO*5_HTW$xea!nkc~Cnx#cL_rrUGWPRa6l+A{aiMY=<0@8y5OC#UcGeE#I>nWh}`#M#kIn-$A;q@u-p71b#hcSItS!IPw?>8 zvzb|?@Ahb22L(O4#2Sre&l9H(@TGT>#Py)D&eW-LNb!=S;I`ZQ{w;MaHW z#to!~TVLgho_Pm%zq@o{K3Xq?I|MVuVSl^QHnT~sHlrVxgsqD-+YD?Nz9@HA<;x2AQjxP)r6Femg+LJ-*)k%EZ}TTRw->5xOY z9#zKJqjZgC47@AFdk1$W+KhTQJKn7e>A&?@-YOy!v_(}GyV@9G#I?bsuto4JEp;5|N{orxi_?vTI4UF0HYcA( zKyGZ4<7Fk?&LZMQb6k10N%E*$gr#T&HsY4SPQ?yerqRz5c?5P$@6dlD6UQwZJ*Je9 z7n-@7!(OVdU-mg@5$D+R%gt82Lt%&n6Yr4=|q>XT%&^z_D*f*ug8N6w$`woqeS-+#RAOfSY&Rz z?1qYa5xi(7eTCrzCFJfCxc%j{J}6#)3^*VRKF;w+`|1n;Xaojr2DI{!<3CaP`#tXs z*`pBQ5k@JLKuCmovFDqh_`Q;+^@t_;SDm29 zCNSdWXbV?9;D4VcoV`FZ9Ggrr$i<&#Dx3W=8>bSQIU_%vf)#(M2Kd3=rN@^d=QAtC zI-iQ;;GMk|&A++W5#hK28W(YqN%?!yuW8(|Cf`@FOW5QbX|`97fxmV;uXvPCqxBD zJ9iI37iV)5TW1R+fV16y;6}2tt~|0J3U4E=wQh@sx{c_eu)t=4Yoz|%Vp<#)Qlh1V z0@C2ZtlT>5gdB6W)_bhXtcZS)`9A!uIOa`K04$5>3&8An+i9BD&GvZZ=7#^r=BN=k za+=Go;qr(M)B~KYAz|<^O3LJON}$Q6Yuqn8qu~+UkUKK~&iM%pB!BO49L+?AL7N7o z(OpM(C-EY753=G=WwJHE`h*lNLMNP^c^bBk@5MyP5{v7x>GNWH>QSgTe5 z!*GPkQ(lcbEs~)4ovCu!Zt&$${9$u(<4@9%@{U<-ksAqB?6F`bQ;o-mvjr)Jn7F&j$@`il1Mf+-HdBs<-`1FahTxmPMMI)@OtI&^mtijW6zGZ67O$UOv1Jj z;a3gmw~t|LjPkW3!EZ=)lLUhFzvO;Yvj9g`8hm%6u`;cuek_b-c$wS_0M4-N<@3l|88 z@V{Sd|M;4+H6guqMm4|v=C6B7mlpP(+It%0E;W`dxMOf9!jYwWj3*MRk`KpS_jx4c z=hrKBkFK;gq@;wUV2eqE3R$M+iUc+UD0iEl#-rECK+XmH9hLKrC={j@uF=f3UiceB zU5l$FF7#RKjx+6!JHMG5-!@zI-eG=a-!Bs^AFKqN_M26%cIIcSs61R$yuq@5a3c3& z4%zLs!g}+C5%`ja?F`?5-og0lv-;(^e<`r~p$x%&*89_Aye1N)9LNVk?9BwY$Y$$F^!JQAjBJvywXAesj7lTZ)rXuxv(FFNZVknJha99lN=^h`J2> zl5=~(tKwvHHvh|9-41@OV`c;Ws--PE%{7d2sLNbDp;A6_Ka6epzOSFdqb zBa0m3j~bT*q1lslHsHqaHIP%DF&-XMpCRL(v;MV#*>mB^&)a=HfLI7efblG z(@hzN`|n+oH9;qBklb=d^S0joHCsArnR1-h{*dIUThik>ot^!6YCNjg;J_i3h6Rl0ji)* zo(tQ~>xB!rUJ(nZjCA^%X;)H{@>uhR5|xBDA=d21p@iJ!cH?+%U|VSh2S4@gv`^)^ zNKD6YlVo$%b4W^}Rw>P1YJ|fTb$_(7C;hH+ z1XAMPb6*p^h8)e5nNPKfeAO}Ik+ZN_`NrADeeJOq4Ak;sD~ zTe77no{Ztdox56Xi4UE6S7wRVxJzWxKj;B%v7|FZ3cV9MdfFp7lWCi+W{}UqekdpH zdO#eoOuB3Fu!DU`ErfeoZWJbWtRXUeBzi zBTF-AI7yMC^ntG+8%mn(I6Dw}3xK8v#Ly{3w3_E?J4(Q5JBq~I>u3!CNp~Ekk&YH` z#383VO4O42NNtcGkr*K<+wYZ>@|sP?`AQcs5oqX@-EIqgK@Pmp5~p6O6qy4ml~N{D z{=jQ7k(9!CM3N3Vt|u@%ssTw~r~Z(}QvlROAkQQ?r8OQ3F0D$aGLh zny+uGnH5muJ<67Z=8uilKvGuANrg@s3Vu_lU2ajb?rIhuOd^E@l!Kl0hYIxOP1B~Q zggUmXbh$bKL~YQ#!4fos9UUVG#}HN$lIkM<1OkU@r>$7DYYe37cXYwfK@vrHwm;pg zbh(hEU|8{*d$q7LUm+x&`S@VbW*&p-sWrplWnRM|I{P;I;%U`WmYUCeJhYc|>5?&& zj}@n}w~Oo=l}iwvi7K6)osqa;M8>fRe}>^;bLBrgA;r^ZGgY@IC^ioRmnE&H4)UV5 zO{7egQ7sBAdoqGsso5q4R(4$4Tjm&&C|7Huz&5B0wXoJzZzNc5Bt)=SOI|H}+fbit z-PiF5(NHSy>4HPMrNc@SuEMDuKYMQ--G+qeUPqO_9mOsg%1EHpqoX^yNd~~kbo`cH zlV0iAkBFTn;rVb>EK^V6?T~t~3vm;csx+lUh_%ROFPy0(omy7+_wYjN!VRDtwDu^h4n|xpAMsLepm% zggvs;v8+isCW`>BckRz1MQ=l>K6k^DdT`~sDXTWQ<~+JtY;I~I>8XsAq3yXgxe>`O zZdF*{9@Z|YtS$QrVaB!8&`&^W->_O&-JXn1n&~}o3Z7FL1QE5R*W2W@=u|w~7%EeC1aRfGtJWxImfY-D3t!!nBkWM> zafu>^Lz-ONgT6ExjV4WhN!v~u{lt2-QBN&UxwnvdH|I%LS|J-D;o>@@sA62@&yew0 z)58~JSZP!(lX;da!3`d)D1+;K9!lyNlkF|n(UduR-%g>#{`pvrD^ClddhJyfL7C-(x+J+9&7EsC~^O`&}V%)Ut8^O_7YAXPDpzv8ir4 zl`d)(;imc6r16k_d^)PJZ+QPxxVJS5e^4wX9D=V2zH&wW0-p&OJe=}rX`*->XT=;_qI&)=WHkYnZx6bLoUh_)n-A}SF_ z9z7agNTM5W6}}ui=&Qs@pO5$zHsOWIbd_&%j^Ok5PJ3yUWQw*i4*iKO)_er2CDUME ztt+{Egod~W-fn^aLe)aBz)MOc_?i-stTj}~iFk7u^-gGSbU;Iem06SDP=AEw9SzuF zeZ|hKCG3MV(z_PJg0(JbqTRf4T{NUt%kz&}4S`)0I%}ZrG!jgW2GwP=WTtkWS?DOs znI9LY!dK+1_H0h+i-_~URb^M;4&AMrEO_UlDV8o?E>^3x%ZJyh$JuDMrtYL8|G3If zPf2_Qb_W+V?$#O; zydKFv*%O;Y@o_T_UAYuaqx1isMKZ^32JtgeceA$0Z@Ck0;lHbS%N5)zzAW9iz; z8tTKeK7&qw!8XVz-+pz>z-BeIzr*#r0nB^cntjQ9@Y-N0=e&ZK72vlzX>f3RT@i7@ z=z`m7jNk!9%^xD0ug%ptZnM>F;Qu$rlwo}vRGBIymPL)L|x}nan3uFUw(&N z24gdkcb7!Q56{0<+zu zEtc5WzG2xf%1<@vo$ZsuOK{v9gx^0`gw>@h>ZMLy*h+6ueoie{D#}}` zK2@6Xxq(uZaLFC%M!2}FX}ab%GQ8A0QJ?&!vaI8Gv=vMhd);6kGguDmtuOElru()) zuRk&Z{?Vp!G~F<1#s&6io1`poBqpRHyM^p;7!+L??_DzJ8s9mYFMQ0^%_3ft7g{PD zZd}8E4EV}D!>F?bzcX=2hHR_P`Xy6?FOK)mCj)Ym4s2hh z0OlOdQa@I;^-3bhB6mpw*X5=0kJv8?#XP~9){G-+0ST@1Roz1qi8PhIXp1D$XNqVG zMl>WxwT+K`SdO1RCt4FWTNy3!i?N>*-lbnn#OxFJrswgD7HjuKpWh*o@QvgF&j+CT z{55~ZsUeR1aB}lv#s_7~+9dCix!5(KR#c?K?e2B%P$fvrsZxy@GP#R#jwL{y#Ld$} z7sF>QT6m|}?V;msb?Nlohj7a5W_D$y+4O6eI;Zt$jVGymlzLKscqer9#+p2$0It&u zWY!dCeM6^B^Z;ddEmhi?8`scl=Lhi7W%2|pT6X6^%-=q90DS(hQ-%c+E*ywPvmoF(KqDoW4!*gmQIklm zk#!GLqv|cs(JRF3G?=AYY19{w@~`G3pa z@xR9S-Hquh*&5Yas*VI};(%9%PADn`kzm zeWMJVW=>>wap*9|R7n#!&&J>gq04>DTCMtj{P^d12|2wXTEKvSf?$AvnE!peqV7i4 zE>0G%CSn%WCW1yre?yi9*aFP{GvZ|R4JT}M%x_%Hztz2qw?&28l&qW<6?c6ym{f$d z5YCF+k#yEbjCN|AGi~-NcCG8MCF1!MXBFL{#7q z)HO+WW173?kuI}^Xat;Q^gb4Hi0RGyB}%|~j8>`6X4CPo+|okMbKy9PHkr58V4bX6<&ERU)QlF8%%huUz&f+dwTN|tk+C&&o@Q1RtG`}6&6;ncQuAcfHoxd5AgD7`s zXynq41Y`zRSiOY@*;&1%1z>oNcWTV|)sjLg1X8ijg1Y zbIGL0X*Sd}EXSQ2BXCKbJmlckY(@EWn~Ut2lYeuw1wg?hhj@K?XB@V_ZP`fyL~Yd3n3SyHU-RwMBr6t-QWE5TinN9VD4XVPU; zonIIR!&pGqrLQK)=#kj40Im%V@ij0&Dh0*s!lnTw+D`Dt-xmk-jmpJv$1-E-vfYL4 zqKr#}Gm}~GPE+&$PI@4ag@=M}NYi7Y&HW82Q`@Y=W&PE31D110@yy(1vddLt`P%N^ z>Yz195A%tnt~tvsSR2{m!~7HUc@x<&`lGX1nYeQUE(%sphTi>JsVqSw8xql*Ys@9B z>RIOH*rFi*C`ohwXjyeRBDt8p)-u{O+KWP;$4gg||%*u{$~yEj+Al zE(hAQRQ1k7MkCq9s4^N3ep*$h^L%2Vq?f?{+cicpS8lo)$Cb69b98au+m2J_e7nYwID0@`M9XIo1H~|eZFc8Hl!qly612ADCVpU zY8^*RTMX(CgehD{9v|^9vZ6Rab`VeZ2m*gOR)Mw~73QEBiktViBhR!_&3l$|be|d6 zupC`{g89Y|V3uxl2!6CM(RNpdtynaiJ~*DqSTq9Mh`ohZnb%^3G{k;6%n18$4nAqR zjPOrP#-^Y9;iw{J@XH9=g5J+yEVh|e=4UeY<^65`%gWtdQ=-aqSgtywM(1nKXh`R4 zzPP&7r)kv_uC7X9n=h=!Zrf<>X=B5f<9~Q>h#jYRD#CT7D~@6@RGNyO-#0iq0uHV1 zPJr2O4d_xLmg2^TmG7|dpfJ?GGa`0|YE+`2Rata9!?$j#e9KfGYuLL(*^z z!SxFA`$qm)q-YKh)WRJZ@S+-sD_1E$V?;(?^+F3tVcK6 z2fE=8hV*2mgiAbefU^uvcM?&+Y&E}vG=Iz!%jBF7iv){lyC`)*yyS~D8k+Mx|N3bm zI~L~Z$=W9&`x)JnO;8c>3LSDw!fzN#X3qi|0`sXY4?cz{*#xz!kvZ9bO=K3XbN z5KrgN=&(JbXH{Wsu9EdmQ-W`i!JWEmfI;yVTT^a-8Ch#D8xf2dtyi?7p z%#)W3n*a#ndFpd{qN|+9Jz++AJQO#-Y7Z6%*%oyEP5zs}d&kKIr`FVEY z;S}@d?UU=tCdw~EJ{b}=9x}S2iv!!8<$?d7VKDA8h{oeD#S-$DV)-vPdGY@x08n)@ zag?yLF_E#evvRTj4^CcrLvBL=fft&@HOhZ6Ng4`8ijt&h2y}fOTC~7GfJi4vpomA5 zOcOM)o_I9BKz}I`q)fu+Qnfy*W`|mY%LO>eF^a z;$)?T4F-(X#Q-m}!-k8L_rNPf`Mr<9IWu)f&dvt=EL+ESYmCvErd@8B9hd)afc(ZL94S z?rp#h&{7Ah5IJftK4VjATklo7@hm?8BX*~oBiz)jyc9FuRw!-V;Uo>p!CWpLaIQyt zAs5WN)1CCeux-qiGdmbIk8LR`gM+Qg=&Ve}w?zA6+sTL)abU=-cvU`3E?p5$Hpkxw znu0N659qR=IKnde*AEz_7z2pdi_Bh-sb3b=PdGO1Pdf_q2;+*Cx9YN7p_>rl``knY zRn%aVkcv1(W;`Mtp_DNOIECtgq%ufk-mu_<+Fu3Q17Tq4Rr(oeq)Yqk_CHA7LR@7@ zIZIDxxhS&=F2IQfusQ+Nsr%*zFK7S4g!U0y@3H^Yln|i;0a5+?RPG;ZSp6Tul>ezM z`40+516&719qT)mW|ArDSENle5hE2e8qY+zfeZoy12u&xoMgcP)4=&P-1Ib*-bAy` zlT?>w&B|ei-rCXO;sxo7*G;!)_p#%PAM-?m$JP(R%x1Hfas@KeaG%LO?R=lmkXc_MKZW}3f%KZ*rAN?HYvbu2L$ zRt_uv7~-IejlD1x;_AhwGXjB94Q=%+PbxuYzta*jw?S&%|qb=(JfJ?&6P=R7X zV%HP_!@-zO*zS}46g=J}#AMJ}rtWBr21e6hOn&tEmaM%hALH7nlm2@LP4rZ>2 zebe5aH@k!e?ij4Zwak#30|}>;`bquDQK*xmR=zc6vj0yuyC6+U=LusGnO3ZKFRpen z#pwzh!<+WBVp-!$MAc<0i~I%fW=8IO6K}bJ<-Scq>e+)951R~HKB?Mx2H}pxPHE@} zvqpq5j81_jtb_WneAvp<5kgdPKm|u2BdQx9%EzcCN&U{l+kbkhmV<1}yCTDv%&K^> zg;KCjwh*R1f_`6`si$h6`jyIKT7rTv5#k~x$mUyIw)_>Vr)D4fwIs@}{FSX|5GB1l z4vv;@oS@>Bu7~{KgUa_8eg#Lk6IDT2IY$41$*06{>>V;Bwa(-@N;ex4;D`(QK*b}{ z{#4$Hmt)FLqERgKz=3zXiV<{YX6V)lvYBr3V>N6ajeI~~hGR5Oe>W9r@sg)Na(a4- zxm%|1OKPN6^%JaD^^O~HbLSu=f`1px>RawOxLr+1b2^28U*2#h*W^=lSpSY4(@*^l z{!@9RSLG8Me&RJYLi|?$c!B0fP=4xAM4rerxX{xy{&i6=AqXueQAIBqO+pmuxy8Ib z4X^}r!NN3-upC6B#lt7&x0J;)nb9O~xjJMemm$_fHuP{DgtlU3xiW0UesTzS30L+U zQzDI3p&3dpONhd5I8-fGk^}@unluzu%nJ$9pzoO~Kk!>dLxw@M)M9?pNH1CQhvA`z zV;uacUtnBTdvT`M$1cm9`JrT3BMW!MNVBy%?@ZX%;(%(vqQAz<7I!hlDe|J3cn9=} zF7B;V4xE{Ss76s$W~%*$JviK?w8^vqCp#_G^jN0j>~Xq#Zru26e#l3H^{GCLEXI#n z?n~F-Lv#hU(bZS`EI9(xGV*jT=8R?CaK)t8oHc9XJ;UPY0Hz$XWt#QyLBaaz5+}xM zXk(!L_*PTt7gwWH*HLWC$h3Ho!SQ-(I||nn_iEC{WT3S{3V{8IN6tZ1C+DiFM{xlI zeMMk{o5;I6UvaC)@WKp9D+o?2Vd@4)Ue-nYci()hCCsKR`VD;hr9=vA!cgGL%3k^b(jADGyPi2TKr(JNh8mzlIR>n(F_hgiV(3@Ds(tjbNM7GoZ;T|3 zWzs8S`5PrA!9){jBJuX4y`f<4;>9*&NY=2Sq2Bp`M2(fox7ZhIDe!BaQUb@P(ub9D zlP8!p(AN&CwW!V&>H?yPFMJ)d5x#HKfwx;nS{Rr@oHqpktOg)%F+%1#tsPtq7zI$r zBo-Kflhq-=7_eW9B2OQv=@?|y0CKN77)N;z@tcg;heyW{wlpJ1t`Ap!O0`Xz{YHqO zI1${8Hag^r!kA<2_~bYtM=<1YzQ#GGP+q?3T7zYbIjN6Ee^V^b&9en$8FI*NIFg9G zPG$OXjT0Ku?%L7fat8Mqbl1`azf1ltmKTa(HH$Dqlav|rU{zP;Tbnk-XkGFQ6d+gi z-PXh?_kEJl+K98&OrmzgPIijB4!Pozbxd0H1;Usy!;V>Yn6&pu*zW8aYx`SC!$*ti zSn+G9p=~w6V(fZZHc>m|PPfjK6IN4(o=IFu?pC?+`UZAUTw!e`052{P=8vqT^(VeG z=psASIhCv28Y(;7;TuYAe>}BPk5Qg=8$?wZj9lj>h2kwEfF_CpK=+O6Rq9pLn4W)# zeXCKCpi~jsfqw7Taa0;!B5_C;B}e56W1s8@p*)SPzA;Fd$Slsn^=!_&!mRHV*Lmt| zBGIDPuR>CgS4%cQ4wKdEyO&Z>2aHmja;Pz+n|7(#l%^2ZLCix%>@_mbnyPEbyrHaz z>j^4SIv;ZXF-Ftzz>*t4wyq)ng8%0d;(Z_ExZ-cxwei=8{(br-`JYO(f23Wae_MqE z3@{Mlf^%M5G1SIN&en1*| zH~ANY1h3&WNsBy$G9{T=`kcxI#-X|>zLX2r*^-FUF+m0{k)n#GTG_mhG&fJfLj~K& zU~~6othMlvMm9<*SUD2?RD+R17|Z4mgR$L*R3;nBbo&Vm@39&3xIg;^aSxHS>}gwR zmzs?h8oPnNVgET&dx5^7APYx6Vv6eou07Zveyd+^V6_LzI$>ic+pxD_8s~ zC<}ucul>UH<@$KM zT4oI=62M%7qQO{}re-jTFqo9Z;rJKD5!X5$iwUsh*+kcHVhID08MB5cQD4TBWB(rI zuWc%CA}}v|iH=9gQ?D$1#Gu!y3o~p7416n54&Hif`U-cV?VrUMJyEqo_NC4#{puzU zzXEE@UppeeRlS9W*^N$zS`SBBi<@tT+<%3l@KhOy^%MWB9(A#*J~DQ;+MK*$rxo6f zcx3$3mcx{tly!q(p2DQrxcih|)0do_ZY77pyHGE#Q(0k*t!HUmmMcYFq%l$-o6%lS zDb49W-E?rQ#Hl``C3YTEdGZjFi3R<>t)+NAda(r~f1cT5jY}s7-2^&Kvo&2DLTPYP zhVVo-HLwo*vl83mtQ9)PR#VBg)FN}+*8c-p8j`LnNUU*Olm1O1Qqe62D#$CF#?HrM zy(zkX|1oF}Z=T#3XMLWDrm(|m+{1&BMxHY7X@hM_+cV$5-t!8HT(dJi6m9{ja53Yw z3f^`yb6Q;(e|#JQIz~B*=!-GbQ4nNL-NL z@^NWF_#w-Cox@h62;r^;Y`NX8cs?l^LU;5IWE~yvU8TqIHij!X8ydbLlT0gwmzS9} z@5BccG?vO;rvCs$mse1*ANi-cYE6Iauz$Fbn3#|ToAt5v7IlYnt6RMQEYLldva{~s zvr>1L##zmeoYgvIXJ#>bbuCVuEv2ZvZ8I~PQUN3wjP0UC)!U+wn|&`V*8?)` zMSCuvnuGec>QL+i1nCPGDAm@XSMIo?A9~C?g2&G8aNKjWd2pDX{qZ?04+2 zeyLw}iEd4vkCAWwa$ zbrHlEf3hfN7^1g~aW^XwldSmx1v~1z(s=1az4-wl} z`mM+G95*N*&1EP#u3}*KwNrPIgw8Kpp((rdEOO;bT1;6ea~>>sK+?!;{hpJ3rR<6UJb`O8P4@{XGgV%63_fs%cG8L zk9Fszbdo4tS$g0IWP1>t@0)E%-&9yj%Q!fiL2vcuL;90fPm}M==<>}Q)&sp@STFCY z^p!RzmN+uXGdtPJj1Y-khNyCb6Y$Vs>eZyW zPaOV=HY_T@FwAlleZCFYl@5X<<7%5DoO(7S%Lbl55?{2vIr_;SXBCbPZ(up;pC6Wx={AZL?shYOuFxLx1*>62;2rP}g`UT5+BHg(ju z&7n5QSvSyXbioB9CJTB#x;pexicV|9oaOpiJ9VK6EvKhl4^Vsa(p6cIi$*Zr0UxQ z;$MPOZnNae2Duuce~7|2MCfhNg*hZ9{+8H3?ts9C8#xGaM&sN;2lriYkn9W>&Gry! z3b(Xx1x*FhQkD-~V+s~KBfr4M_#0{`=Yrh90yj}Ph~)Nx;1Y^8<418tu!$1<3?T*~ z7Dl0P3Uok-7w0MPFQexNG1P5;y~E8zEvE49>$(f|XWtkW2Mj`udPn)pb%} zrA%wRFp*xvDgC767w!9`0vx1=q!)w!G+9(-w&p*a@WXg{?T&%;qaVcHo>7ca%KX$B z^7|KBPo<2;kM{2mRnF8vKm`9qGV%|I{y!pKm8B(q^2V;;x2r!1VJ^Zz8bWa)!-7a8 zSRf@dqEPlsj!7}oNvFFAA)75})vTJUwQ03hD$I*j6_5xbtd_JkE2`IJD_fQ;a$EkO z{fQ{~e%PKgPJsD&PyEvDmg+Qf&p*-qu!#;1k2r_(H72{^(Z)htgh@F?VIgK#_&eS- z$~(qInec>)XIkv@+{o6^DJLpAb>!d}l1DK^(l%#OdD9tKK6#|_R?-%0V!`<9Hj z3w3chDwG*SFte@>Iqwq`J4M&{aHXzyigT620+Vf$X?3RFfeTcvx_e+(&Q*z)t>c0e zpZH$1Z3X%{^_vylHVOWT6tno=l&$3 z9^eQ@TwU#%WMQaFvaYp_we%_2-9=o{+ck zF{cKJCOjpW&qKQquyp2BXCAP920dcrZ}T1@piukx_NY;%2W>@Wca%=Ch~x5Oj58Hv z;D-_ALOZBF(Mqbcqjd}P3iDbek#Dwzu`WRs`;hRIr*n0PV7vT+%Io(t}8KZ zpp?uc2eW!v28ipep0XNDPZt7H2HJ6oey|J3z!ng#1H~x_k%35P+Cp%mqXJ~cV0xdd z^4m5^K_dQ^Sg?$P`))ccV=O>C{Ds(C2WxX$LMC5vy=*44pP&)X5DOPYfqE${)hDg< z3hcG%U%HZ39=`#Ko4Uctg&@PQLf>?0^D|4J(_1*TFMOMB!Vv1_mnOq$BzXQdOGqgy zOp#LBZ!c>bPjY1NTXksZmbAl0A^Y&(%a3W-k>bE&>K?px5Cm%AT2E<&)Y?O*?d80d zgI5l~&Mve;iXm88Q+Fw7{+`PtN4G7~mJWR^z7XmYQ>uoiV!{tL)hp|= zS(M)813PM`d<501>{NqaPo6BZ^T{KBaqEVH(2^Vjeq zgeMeMpd*1tE@@);hGjuoVzF>Cj;5dNNwh40CnU+0DSKb~GEMb_# zT8Z&gz%SkHq6!;_6dQFYE`+b`v4NT7&@P>cA1Z1xmXy<2htaDhm@XXMp!g($ zw(7iFoH2}WR`UjqjaqOQ$ecNt@c|K1H1kyBArTTjLp%-M`4nzOhkfE#}dOpcd;b#suq8cPJ&bf5`6Tq>ND(l zib{VrPZ>{KuaIg}Y$W>A+nrvMg+l4)-@2jpAQ5h(Tii%Ni^-UPVg{<1KGU2EIUNGaXcEkOedJOusFT9X3%Pz$R+-+W+LlRaY-a$5r?4V zbPzgQl22IPG+N*iBRDH%l{Zh$fv9$RN1sU@Hp3m=M}{rX%y#;4(x1KR2yCO7Pzo>rw(67E{^{yUR`91nX^&MxY@FwmJJbyPAoWZ9Z zcBS$r)&ogYBn{DOtD~tIVJUiq|1foX^*F~O4hlLp-g;Y2wKLLM=?(r3GDqsPmUo*? zwKMEi*%f)C_@?(&&hk>;m07F$X7&i?DEK|jdRK=CaaNu-)pX>n3}@%byPKVkpLzBq z{+Py&!`MZ^4@-;iY`I4#6G@aWMv{^2VTH7|WF^u?3vsB|jU3LgdX$}=v7#EHRN(im zI(3q-eU$s~r=S#EWqa_2!G?b~ z<&brq1vvUTJH380=gcNntZw%7UT8tLAr-W49;9y^=>TDaTC|cKA<(gah#2M|l~j)w zY8goo28gj$n&zcNgqX1Qn6=<8?R0`FVO)g4&QtJAbW3G#D)uNeac-7cH5W#6i!%BH z=}9}-f+FrtEkkrQ?nkoMQ1o-9_b+&=&C2^h!&mWFga#MCrm85hW;)1pDt;-uvQG^D zntSB?XA*0%TIhtWDS!KcI}kp3LT>!(Nlc(lQN?k^bS8Q^GGMfo}^|%7s;#r+pybl@?KA++|FJ zr%se9(B|g*ERQU96az%@4gYrxRRxaM2*b}jNsG|0dQi;Rw{0WM0E>rko!{QYAJJKY z)|sX0N$!8d9E|kND~v|f>3YE|uiAnqbkMn)hu$if4kUkzKqoNoh8v|S>VY1EKmgO} zR$0UU2o)4i4yc1inx3}brso+sio{)gfbLaEgLahj8(_Z#4R-v) zglqwI%`dsY+589a8$Mu7#7_%kN*ekHupQ#48DIN^uhDxblDg3R1yXMr^NmkR z7J_NWCY~fhg}h!_aXJ#?wsZF$q`JH>JWQ9`jbZzOBpS`}-A$Vgkq7+|=lPx9H7QZG z8i8guMN+yc4*H*ANr$Q-3I{FQ-^;8ezWS2b8rERp9TMOLBxiG9J*g5=?h)mIm3#CGi4JSq1ohFrcrxx@`**K5%T}qbaCGldV!t zVeM)!U3vbf5FOy;(h08JnhSGxm)8Kqxr9PsMeWi=b8b|m_&^@#A3lL;bVKTBx+0v8 zLZeWAxJ~N27lsOT2b|qyp$(CqzqgW@tyy?CgwOe~^i;ZH zlL``i4r!>i#EGBNxV_P@KpYFQLz4Bdq{#zA&sc)*@7Mxsh9u%e6Ke`?5Yz1jkTdND zR8!u_yw_$weBOU}24(&^Bm|(dSJ(v(cBct}87a^X(v>nVLIr%%D8r|&)mi+iBc;B;x;rKq zd8*X`r?SZsTNCPQqoFOrUz8nZO?225Z#z(B!4mEp#ZJBzwd7jW1!`sg*?hPMJ$o`T zR?KrN6OZA1H{9pA;p0cSSu;@6->8aJm1rrO-yDJ7)lxuk#npUk7WNER1Wwnpy%u zF=t6iHzWU(L&=vVSSc^&D_eYP3TM?HN!Tgq$SYC;pSIPWW;zeNm7Pgub#yZ@7WPw#f#Kl)W4%B>)+8%gpfoH1qZ;kZ*RqfXYeGXJ_ zk>2otbp+1By`x^1V!>6k5v8NAK@T;89$`hE0{Pc@Q$KhG0jOoKk--Qx!vS~lAiypV zCIJ&6B@24`!TxhJ4_QS*S5;;Pk#!f(qIR7*(c3dN*POKtQe)QvR{O2@QsM%ujEAWEm) z+PM=G9hSR>gQ`Bv2(k}RAv2+$7qq(mU`fQ+&}*i%-RtSUAha>70?G!>?w%F(b4k!$ zvm;E!)2`I?etmSUFW7WflJ@8Nx`m_vE2HF#)_BiD#FaNT|IY@!uUbd4v$wTglIbIX zblRy5=wp)VQzsn0_;KdM%g<8@>#;E?vypTf=F?3f@SSdZ;XpX~J@l1;p#}_veWHp>@Iq_T z@^7|h;EivPYv1&u0~l9(a~>dV9Uw10QqB6Dzu1G~-l{*7IktljpK<_L8m0|7VV_!S zRiE{u97(%R-<8oYJ{molUd>vlGaE-C|^<`hppdDz<7OS13$#J zZ+)(*rZIDSt^Q$}CRk0?pqT5PN5TT`Ya{q(BUg#&nAsg6apPMhLTno!SRq1e60fl6GvpnwDD4N> z9B=RrufY8+g3_`@PRg+(+gs2(bd;5#{uTZk96CWz#{=&h9+!{_m60xJxC%r&gd_N! z>h5UzVX%_7@CUeAA1XFg_AF%(uS&^1WD*VPS^jcC!M2v@RHZML;e(H-=(4(3O&bX- zI6>usJOS+?W&^S&DL{l|>51ZvCXUKlH2XKJPXnHjs*oMkNM#ZDLx!oaM5(%^)5XaP zk6&+P16sA>vyFe9v`Cp5qnbE#r#ltR5E+O3!WnKn`56Grs2;sqr3r# zp@Zp<^q`5iq8OqOlJ`pIuyK@3zPz&iJ0Jcc`hDQ1bqos2;}O|$i#}e@ua*x5VCSx zJAp}+?Hz++tm9dh3Fvm_bO6mQo38al#>^O0g)Lh^&l82+&x)*<n7^Sw-AJo9tEzZDwyJ7L^i7|BGqHu+ea6(&7jKpBq>~V z8CJxurD)WZ{5D0?s|KMi=e7A^JVNM6sdwg@1Eg_+Bw=9j&=+KO1PG|y(mP1@5~x>d z=@c{EWU_jTSjiJl)d(>`qEJ;@iOBm}alq8;OK;p(1AdH$)I9qHNmxxUArdzBW0t+Qeyl)m3?D09770g z)hzXEOy>2_{?o%2B%k%z4d23!pZcoxyW1Ik{|m7Q1>fm4`wsRrl)~h z_=Z*zYL+EG@DV1{6@5@(Ndu!Q$l_6Qlfoz@79q)Kmsf~J7t1)tl#`MD<;1&CAA zH8;i+oBm89dTTDl{aH`cmTPTt@^K-%*sV+t4X9q0Z{A~vEEa!&rRRr=0Rbz4NFCJr zLg2u=0QK@w9XGE=6(-JgeP}G#WG|R&tfHRA3a9*zh5wNTBAD;@YYGx%#E4{C#Wlfo z%-JuW9=FA_T6mR2-Vugk1uGZvJbFvVVWT@QOWz$;?u6+CbyQsbK$>O1APk|xgnh_8 zc)s@Mw7#0^wP6qTtyNq2G#s?5j~REyoU6^lT7dpX{T-rhZWHD%dik*=EA7bIJgOVf_Ga!yC8V^tkTOEHe+JK@Fh|$kfNxO^= z#lpV^(ZQ-3!^_BhV>aXY~GC9{8%1lOJ}6vzXDvPhC>JrtXwFBC+!3a*Z-%#9}i z#<5&0LLIa{q!rEIFSFc9)>{-_2^qbOg5;_A9 ztQ))C6#hxSA{f9R3Eh^`_f${pBJNe~pIQ`tZVR^wyp}=gLK}e5_vG@w+-mp#Fu>e| z*?qBp5CQ5zu+Fi}xAs)YY1;bKG!htqR~)DB$ILN6GaChoiy%Bq@i+1ZnANC0U&D z_4k$=YP47ng+0NhuEt}6C;9-JDd8i5S>`Ml==9wHDQFOsAlmtrVwurYDw_)Ihfk35 zJDBbe!*LUpg%4n>BExWz>KIQ9vexUu^d!7rc_kg#Bf= z7TLz|l*y*3d2vi@c|pX*@ybf!+Xk|2*z$@F4K#MT8Dt4zM_EcFmNp31#7qT6(@GG? zdd;sSY9HHuDb=w&|K%sm`bYX#%UHKY%R`3aLMO?{T#EI@FNNFNO>p@?W*i0z(g2dt z{=9Ofh80Oxv&)i35AQN>TPMjR^UID-T7H5A?GI{MD_VeXZ%;uo41dVm=uT&ne2h0i zv*xI%9vPtdEK@~1&V%p1sFc2AA`9?H)gPnRdlO~URx!fiSV)j?Tf5=5F>hnO=$d$x zzaIfr*wiIc!U1K*$JO@)gP4%xp!<*DvJSv7p}(uTLUb=MSb@7_yO+IsCj^`PsxEl& zIxsi}s3L?t+p+3FXYqujGhGwTx^WXgJ1}a@Yq5mwP0PvGEr*qu7@R$9j>@-q1rz5T zriz;B^(ex?=3Th6h;7U`8u2sDlfS{0YyydK=*>-(NOm9>S_{U|eg(J~C7O zIe{|LK=Y`hXiF_%jOM8Haw3UtaE{hWdzo3BbD6ud7br4cODBtN(~Hl+odP0SSWPw;I&^m)yLw+nd#}3#z}?UIcX3=SssI}`QwY=% zAEXTODk|MqTx}2DVG<|~(CxgLyi*A{m>M@1h^wiC)4Hy>1K7@|Z&_VPJsaQoS8=ex zDL&+AZdQa>ylxhT_Q$q=60D5&%pi6+qlY3$3c(~rsITX?>b;({FhU!7HOOhSP7>bmTkC8KM%!LRGI^~y3Ug+gh!QM=+NZXznM)?L3G=4=IMvFgX3BAlyJ z`~jjA;2z+65D$j5xbv9=IWQ^&-K3Yh`vC(1Qz2h2`o$>Cej@XRGff!it$n{@WEJ^N z41qk%Wm=}mA*iwCqU_6}Id!SQd13aFER3unXaJJXIsSnxvG2(hSCP{i&QH$tL&TPx zDYJsuk+%laN&OvKb-FHK$R4dy%M7hSB*yj#-nJy?S9tVoxAuDei{s}@+pNT!vLOIC z8g`-QQW8FKp3cPsX%{)0B+x+OhZ1=L7F-jizt|{+f1Ga7%+!BXqjCjH&x|3%?UbN# zh?$I1^YokvG$qFz5ySK+Ja5=mkR&p{F}ev**rWdKMko+Gj^?Or=UH?SCg#0F(&a_y zXOh}dPv0D9l0RVedq1~jCNV=8?vZfU-Xi|nkeE->;ohG3U7z+^0+HV17~-_Mv#mV` zzvwUJJ15v5wwKPv-)i@dsEo@#WEO9zie7mdRAbgL2kjbW4&lk$vxkbq=w5mGKZK6@ zjXWctDkCRx58NJD_Q7e}HX`SiV)TZMJ}~zY6P1(LWo`;yDynY_5_L?N-P`>ALfmyl z8C$a~FDkcwtzK9m$tof>(`Vu3#6r#+v8RGy#1D2)F;vnsiL&P-c^PO)^B-4VeJteLlT@25sPa z%W~q5>YMjj!mhN})p$47VA^v$Jo6_s{!y?}`+h+VM_SN`!11`|;C;B};B&Z<@%FOG z_YQVN+zFF|q5zKab&e4GH|B;sBbKimHt;K@tCH+S{7Ry~88`si7}S)1E{21nldiu5 z_4>;XTJa~Yd$m4A9{Qbd)KUAm7XNbZ4xHbg3a8-+1uf*$1PegabbmCzgC~1WB2F(W zYj5XhVos!X!QHuZXCatkRsdEsSCc+D2?*S7a+(v%toqyxhjz|`zdrUvsxQS{J>?c& zvx*rHw^8b|v^7wq8KWVofj&VUitbm*a&RU_ln#ZFA^3AKEf<#T%8I!Lg3XEsdH(A5 zlgh&M_XEoal)i#0tcq8c%Gs6`xu;vvP2u)D9p!&XNt z!TdF_H~;`g@fNXkO-*t<9~;iEv?)Nee%hVe!aW`N%$cFJ(Dy9+Xk*odyFj72T!(b%Vo5zvCGZ%3tkt$@Wcx8BWEkefI1-~C_3y*LjlQ5%WEz9WD8i^ z2MV$BHD$gdPJV4IaV)G9CIFwiV=ca0cfXdTdK7oRf@lgyPx;_7*RRFk=?@EOb9Gcz zg~VZrzo*Snp&EE{$CWr)JZW)Gr;{B2ka6B!&?aknM-FENcl%45#y?oq9QY z3^1Y5yn&^D67Da4lI}ljDcphaEZw2;tlYuzq?uB4b9Mt6!KTW&ptxd^vF;NbX=00T z@nE1lIBGgjqs?ES#P{ZfRb6f!At51vk%<0X%d_~NL5b8UyfQMPDtfU@>ijA0NP3UU zh{lCf`Wu7cX!go`kUG`1K=7NN@SRGjUKuo<^;@GS!%iDXbJs`o6e`v3O8-+7vRkFm z)nEa$sD#-v)*Jb>&Me+YIW3PsR1)h=-Su)))>-`aRcFJG-8icomO4J@60 zw10l}BYxi{eL+Uu0xJYk-Vc~BcR49Qyyq!7)PR27D`cqGrik=?k1Of>gY7q@&d&Ds zt7&WixP`9~jjHO`Cog~RA4Q%uMg+$z^Gt&vn+d3&>Ux{_c zm|bc;k|GKbhZLr-%p_f%dq$eiZ;n^NxoS-Nu*^Nx5vm46)*)=-Bf<;X#?`YC4tLK; z?;u?shFbXeks+dJ?^o$l#tg*1NA?(1iFff@I&j^<74S!o;SWR^Xi);DM%8XiWpLi0 zQE2dL9^a36|L5qC5+&Pf0%>l&qQ&)OU4vjd)%I6{|H+pw<0(a``9w(gKD&+o$8hOC zNAiShtc}e~ob2`gyVZx59y<6Fpl*$J41VJ-H*e-yECWaDMmPQi-N8XI3 z%iI@ljc+d}_okL1CGWffeaejlxWFVDWu%e=>H)XeZ|4{HlbgC-Uvof4ISYQzZ0Um> z#Ov{k1c*VoN^f(gfiueuag)`TbjL$XVq$)aCUBL_M`5>0>6Ska^*Knk__pw{0I>jA zzh}Kzg{@PNi)fcAk7jMAdi-_RO%x#LQszDMS@_>iFoB+zJ0Q#CQJzFGa8;pHFdi`^ zxnTC`G$7Rctm3G8t8!SY`GwFi4gF|+dAk7rh^rA{NXzc%39+xSYM~($L(pJ(8Zjs* zYdN_R^%~LiGHm9|ElV4kVZGA*T$o@YY4qpJOxGHlUi*S*A(MrgQ{&xoZQo+#PuYRs zv3a$*qoe9gBqbN|y|eaH=w^LE{>kpL!;$wRahY(hhzRY;d33W)m*dfem@)>pR54Qy z ze;^F?mwdU?K+=fBabokSls^6_6At#1Sh7W*y?r6Ss*dmZP{n;VB^LDxM1QWh;@H0J z!4S*_5j_;+@-NpO1KfQd&;C7T`9ak;X8DTRz$hDNcjG}xAfg%gwZSb^zhE~O);NMO zn2$fl7Evn%=Lk!*xsM#(y$mjukN?A&mzEw3W5>_o+6oh62kq=4-`e3B^$rG=XG}Kd zK$blh(%!9;@d@3& zGFO60j1Vf54S}+XD?%*uk7wW$f`4U3F*p7@I4Jg7f`Il}2H<{j5h?$DDe%wG7jZQL zI{mj?t?Hu>$|2UrPr5&QyK2l3mas?zzOk0DV30HgOQ|~xLXDQ8M3o#;CNKO8RK+M; zsOi%)js-MU>9H4%Q)#K_me}8OQC1u;f4!LO%|5toa1|u5Q@#mYy8nE9IXmR}b#sZK z3sD395q}*TDJJA9Er7N`y=w*S&tA;mv-)Sx4(k$fJBxXva0_;$G6!9bGBw13c_Uws zXks4u(8JA@0O9g5f?#V~qR5*u5aIe2HQO^)RW9TTcJk28l`Syl>Q#ZveEE4Em+{?%iz6=V3b>rCm9F zPQQm@-(hfNdo2%n?B)u_&Qh7^^@U>0qMBngH8}H|v+Ejg*Dd(Y#|jgJ-A zQ_bQscil%eY}8oN7ZL+2r|qv+iJY?*l)&3W_55T3GU;?@Om*(M`u0DXAsQ7HSl56> z4P!*(%&wRCb?a4HH&n;lAmr4rS=kMZb74Akha2U~Ktni>>cD$6jpugjULq)D?ea%b zk;UW0pAI~TH59P+o}*c5Ei5L-9OE;OIBt>^(;xw`>cN2`({Rzg71qrNaE=cAH^$wP zNrK9Glp^3a%m+ilQj0SnGq`okjzmE7<3I{JLD6Jn^+oas=h*4>Wvy=KXqVBa;K&ri z4(SVmMXPG}0-UTwa2-MJ=MTfM3K)b~DzSVq8+v-a0&Dsv>4B65{dBhD;(d44CaHSM zb!0ne(*<^Q%|nuaL`Gb3D4AvyO8wyygm=1;9#u5x*k0$UOwx?QxR*6Od8>+ujfyo0 zJ}>2FgW_iv(dBK2OWC-Y=Tw!UwIeOAOUUC;h95&S1hn$G#if+d;*dWL#j#YWswrz_ zMlV=z+zjZJ%SlDhxf)vv@`%~$Afd)T+MS1>ZE7V$Rj#;J*<9Ld=PrK0?qrazRJWx) z(BTLF@Wk279nh|G%ZY7_lK7=&j;x`bMND=zgh_>>-o@6%8_#Bz!FnF*onB@_k|YCF z?vu!s6#h9bL3@tPn$1;#k5=7#s*L;FLK#=M89K^|$3LICYWIbd^qguQp02w5>8p-H z+@J&+pP_^iF4Xu>`D>DcCnl8BUwwOlq6`XkjHNpi@B?OOd`4{dL?kH%lt78(-L}eah8?36zw9d-dI6D{$s{f=M7)1 zRH1M*-82}DoFF^Mi$r}bTB5r6y9>8hjL54%KfyHxn$LkW=AZ(WkHWR;tIWWr@+;^^ zVomjAWT)$+rn%g`LHB6ZSO@M3KBA? z+W7ThSBgpk`jZHZUrp`F;*%6M5kLWy6AW#T{jFHTiKXP9ITrMlEdti7@&AT_a-BA!jc(Kt zWk>IdY-2Zbz?U1)tk#n_Lsl?W;0q`;z|t9*g-xE!(}#$fScX2VkjSiboKWE~afu5d z2B@9mvT=o2fB_>Mnie=TDJB+l`GMKCy%2+NcFsbpv<9jS@$X37K_-Y!cvF5NEY`#p z3sWEc<7$E*X*fp+MqsOyMXO=<2>o8)E(T?#4KVQgt=qa%5FfUG_LE`n)PihCz2=iNUt7im)s@;mOc9SR&{`4s9Q6)U31mn?}Y?$k3kU z#h??JEgH-HGt`~%)1ZBhT9~uRi8br&;a5Y3K_Bl1G)-y(ytx?ok9S*Tz#5Vb=P~xH z^5*t_R2It95=!XDE6X{MjLYn4Eszj9Y91T2SFz@eYlx9Z9*hWaS$^5r7=W5|>sY8}mS(>e9Ez2qI1~wtlA$yv2e-Hjn&K*P z2zWSrC~_8Wrxxf#%QAL&f8iH2%R)E~IrQLgWFg8>`Vnyo?E=uiALoRP&qT{V2{$79 z%9R?*kW-7b#|}*~P#cA@q=V|+RC9=I;aK7Pju$K-n`EoGV^-8Mk=-?@$?O37evGKn z3NEgpo_4{s>=FB}sqx21d3*=gKq-Zk)U+bM%Q_}0`XGkYh*+jRaP+aDnRv#Zz*n$pGp zEU9omuYVXH{AEx>=kk}h2iKt!yqX=EHN)LF}z1j zJx((`CesN1HxTFZ7yrvA2jTPmKYVij>45{ZH2YtsHuGzIRotIFj?(8T@ZWUv{_%AI zgMZlB03C&FtgJqv9%(acqt9N)`4jy4PtYgnhqev!r$GTIOvLF5aZ{tW5MN@9BDGu* zBJzwW3sEJ~Oy8is`l6Ly3an7RPtRr^1Iu(D!B!0O241Xua>Jee;Rc7tWvj!%#yX#m z&pU*?=rTVD7pF6va1D@u@b#V@bShFr3 zMyMbNCZwT)E-%L-{%$3?n}>EN>ai7b$zR_>=l59mW;tfKj^oG)>_TGCJ#HbLBsNy$ zqAqPagZ3uQ(Gsv_-VrZmG&hHaOD#RB#6J8&sL=^iMFB=gH5AIJ+w@sTf7xa&Cnl}@ zxrtzoNq>t?=(+8bS)s2p3>jW}tye0z2aY_Dh@(18-vdfvn;D?sv<>UgL{Ti08$1Q+ zZI3q}yMA^LK=d?YVg({|v?d1|R?5 zL0S3fw)BZazRNNX|7P4rh7!+3tCG~O8l+m?H} z(CB>8(9LtKYIu3ohJ-9ecgk+L&!FX~Wuim&;v$>M4 zUfvn<=Eok(63Ubc>mZrd8d7(>8bG>J?PtOHih_xRYFu1Hg{t;%+hXu2#x%a%qzcab zv$X!ccoj)exoOnaco_jbGw7KryOtuf(SaR-VJ0nAe(1*AA}#QV1lMhGtzD>RoUZ;WA?~!K{8%chYn?ttlz17UpDLlhTkGcVfHY6R<2r4E{mU zq-}D?+*2gAkQYAKrk*rB%4WFC-B!eZZLg4(tR#@kUQHIzEqV48$9=Q(~J_0 zy1%LSCbkoOhRO!J+Oh#;bGuXe;~(bIE*!J@i<%_IcB7wjhB5iF#jBn5+u~fEECN2* z!QFh!m<(>%49H12Y33+?$JxKV3xW{xSs=gxkxW-@Xds^|O1`AmorDKrE8N2-@ospk z=Au%h=f!`_X|G^A;XWL}-_L@D6A~*4Yf!5RTTm$!t8y&fp5_oqvBjW{FufS`!)5m% z2g(=9Ap6Y2y(9OYOWuUVGp-K=6kqQ)kM0P^TQT{X{V$*sN$wbFb-DaUuJF*!?EJPl zJev!UsOB^UHZ2KppYTELh+kqDw+5dPFv&&;;C~=u$Mt+Ywga!8YkL2~@g67}3wAQP zrx^RaXb1(c7vwU8a2se75X(cX^$M{FH4AHS7d2}heqqg4F0!1|Na>UtAdT%3JnS!B)&zelTEj$^b0>Oyfw=P-y-Wd^#dEFRUN*C{!`aJIHi<_YA2?piC%^ zj!p}+ZnBrM?ErAM+D97B*7L8U$K zo(IR-&LF(85p+fuct9~VTSdRjs`d-m|6G;&PoWvC&s8z`TotPSoksp;RsL4VL@CHf z_3|Tn%`ObgRhLmr60<;ya-5wbh&t z#ycN_)3P_KZN5CRyG%LRO4`Ot)3vY#dNX9!f!`_>1%4Q`81E*2BRg~A-VcN7pcX#j zrbl@7`V%n z6J53(m?KRzKb)v?iCuYWbH*l6M77dY4keS!%>}*8n!@ROE4!|7mQ+YS4dff1JJC(t z6Fnuf^=dajqHpH1=|pb(po9Fr8it^;2dEk|Ro=$fxqK$^Yix{G($0m-{RCFQJ~LqUnO7jJcjr zl*N*!6WU;wtF=dLCWzD6kW;y)LEo=4wSXQDIcq5WttgE#%@*m><@H;~Q&GniA-$in z`sjWFLgychS1kIJmPtd-w6%iKkj&dGhtB%0)pyy0M<4HZ@ZY0PWLAd7FCrj&i|NRh?>hZj*&FYnyu%Ur`JdiTu&+n z78d3n)Rl6q&NwVj_jcr#s5G^d?VtV8bkkYco5lV0LiT+t8}98LW>d)|v|V3++zLbHC(NC@X#Hx?21J0M*gP2V`Yd^DYvVIr{C zSc4V)hZKf|OMSm%FVqSRC!phWSyuUAu%0fredf#TDR$|hMZihJ__F!)Nkh6z)d=NC z3q4V*K3JTetxCPgB2_)rhOSWhuXzu+%&>}*ARxUaDeRy{$xK(AC0I=9%X7dmc6?lZNqe-iM(`?Xn3x2Ov>sej6YVQJ9Q42>?4lil?X zew-S>tm{=@QC-zLtg*nh5mQojYnvVzf3!4TpXPuobW_*xYJs;9AokrXcs!Ay z;HK>#;G$*TPN2M!WxdH>oDY6k4A6S>BM0Nimf#LfboKxJXVBC=RBuO&g-=+@O-#0m zh*aPG16zY^tzQLNAF7L(IpGPa+mDsCeAK3k=IL6^LcE8l0o&)k@?dz!79yxUquQIe($zm5DG z5RdXTv)AjHaOPv6z%99mPsa#8OD@9=URvHoJ1hYnV2bG*2XYBgB!-GEoP&8fLmWGg z9NG^xl5D&3L^io&3iYweV*qhc=m+r7C#Jppo$Ygg;jO2yaFU8+F*RmPL` zYxfGKla_--I}YUT353k}nF1zt2NO?+kofR8Efl$Bb^&llgq+HV_UYJUH7M5IoN0sT z4;wDA0gs55ZI|FmJ0}^Pc}{Ji-|#jdR$`!s)Di4^g3b_Qr<*Qu2rz}R6!B^;`Lj3sKWzjMYjexX)-;f5Y+HfkctE{PstO-BZan0zdXPQ=V8 zS8cBhnQyy4oN?J~oK0zl!#S|v6h-nx5to7WkdEk0HKBm;?kcNO*A+u=%f~l&aY*+J z>%^Dz`EQ6!+SEX$>?d(~|MNWU-}JTrk}&`IR|Ske(G^iMdk04)Cxd@}{1=P0U*%L5 zMFH_$R+HUGGv|ju2Z>5x(-aIbVJLcH1S+(E#MNe9g;VZX{5f%_|Kv7|UY-CM(>vf= z!4m?QS+AL+rUyfGJ;~uJGp4{WhOOc%2ybVP68@QTwI(8kDuYf?#^xv zBmOHCZU8O(x)=GVFn%tg@TVW1)qJJ_bU}4e7i>&V?r zh-03>d3DFj&@}6t1y3*yOzllYQ++BO-q!)zsk`D(z||)y&}o%sZ-tUF>0KsiYKFg6 zTONq)P+uL5Vm0w{D5Gms^>H1qa&Z##*X31=58*r%Z@Ko=IMXX{;aiMUp-!$As3{sq z0EEk02MOsgGm7$}E%H1ys2$yftNbB%1rdo@?6~0!a8Ym*1f;jIgfcYEF(I_^+;Xdr z2a>&oc^dF3pm(UNpazXgVzuF<2|zdPGjrNUKpdb$HOgNp*V56XqH`~$c~oSiqx;8_ zEz3fHoU*aJUbFJ&?W)sZB3qOSS;OIZ=n-*#q{?PCXi?Mq4aY@=XvlNQdA;yVC0Vy+ z{Zk6OO!lMYWd`T#bS8FV(`%flEA9El;~WjZKU1YmZpG#49`ku`oV{Bdtvzyz3{k&7 zlG>ik>eL1P93F zd&!aXluU_qV1~sBQf$F%sM4kTfGx5MxO0zJy<#5Z&qzNfull=k1_CZivd-WAuIQf> zBT3&WR|VD|=nKelnp3Q@A~^d_jN3@$x2$f@E~e<$dk$L@06Paw$);l*ewndzL~LuU zq`>vfKb*+=uw`}NsM}~oY}gW%XFwy&A>bi{7s>@(cu4NM;!%ieP$8r6&6jfoq756W z$Y<`J*d7nK4`6t`sZ;l%Oen|+pk|Ry2`p9lri5VD!Gq`U#Ms}pgX3ylAFr8(?1#&dxrtJgB>VqrlWZf61(r`&zMXsV~l{UGjI7R@*NiMJLUoK*kY&gY9kC@^}Fj* zd^l6_t}%Ku<0PY71%zQL`@}L}48M!@=r)Q^Ie5AWhv%#l+Rhu6fRpvv$28TH;N7Cl z%I^4ffBqx@Pxpq|rTJV)$CnxUPOIn`u278s9#ukn>PL25VMv2mff)-RXV&r`Dwid7}TEZxXX1q(h{R6v6X z&x{S_tW%f)BHc!jHNbnrDRjGB@cam{i#zZK*_*xlW@-R3VDmp)<$}S%t*@VmYX;1h zFWmpXt@1xJlc15Yjs2&e%)d`fimRfi?+fS^BoTcrsew%e@T^}wyVv6NGDyMGHSKIQ zC>qFr4GY?#S#pq!%IM_AOf`#}tPoMn7JP8dHXm(v3UTq!aOfEXNRtEJ^4ED@jx%le zvUoUs-d|2(zBsrN0wE(Pj^g5wx{1YPg9FL1)V1JupsVaXNzq4fX+R!oVX+q3tG?L= z>=s38J_!$eSzy0m?om6Wv|ZCbYVHDH*J1_Ndajoh&?L7h&(CVii&rmLu+FcI;1qd_ zHDb3Vk=(`WV?Uq;<0NccEh0s`mBXcEtmwt6oN99RQt7MNER3`{snV$qBTp={Hn!zz z1gkYi#^;P8s!tQl(Y>|lvz{5$uiXsitTD^1YgCp+1%IMIRLiSP`sJru0oY-p!FPbI)!6{XM%)(_Dolh1;$HlghB-&e><;zU&pc=ujpa-(+S&Jj zX1n4T#DJDuG7NP;F5TkoG#qjjZ8NdXxF0l58RK?XO7?faM5*Z17stidTP|a%_N z^e$D?@~q#Pf+708cLSWCK|toT1YSHfXVIs9Dnh5R(}(I;7KhKB7RD>f%;H2X?Z9eR z{lUMuO~ffT!^ew= z7u13>STI4tZpCQ?yb9;tSM-(EGb?iW$a1eBy4-PVejgMXFIV_Ha^XB|F}zK_gzdhM z!)($XfrFHPf&uyFQf$EpcAfk83}91Y`JFJOiQ;v5ca?)a!IxOi36tGkPk4S6EW~eq z>WiK`Vu3D1DaZ}515nl6>;3#xo{GQp1(=uTXl1~ z4gdWxr-8a$L*_G^UVd&bqW_nzMM&SlNW$8|$lAfo@zb+P>2q?=+T^qNwblP*RsN?N zdZE%^Zs;yAwero1qaoqMp~|KL=&npffh981>2om!fseU(CtJ=bW7c6l{U5(07*e0~ zJRbid6?&psp)ilmYYR3ZIg;t;6?*>hoZ3uq7dvyyq-yq$zH$yyImjfhpQb@WKENSP zl;KPCE+KXzU5!)mu12~;2trrLfs&nlEVOndh9&!SAOdeYd}ugwpE-9OF|yQs(w@C9 zoXVX`LP~V>%$<(%~tE*bsq(EFm zU5z{H@Fs^>nm%m%wZs*hRl=KD%4W3|(@j!nJr{Mmkl`e_uR9fZ-E{JY7#s6i()WXB0g-b`R{2r@K{2h3T+a>82>722+$RM*?W5;Bmo6$X3+Ieg9&^TU(*F$Q3 zT572!;vJeBr-)x?cP;^w1zoAM`nWYVz^<6N>SkgG3s4MrNtzQO|A?odKurb6DGZffo>DP_)S0$#gGQ_vw@a9JDXs2}hV&c>$ zUT0;1@cY5kozKOcbN6)n5v)l#>nLFL_x?2NQgurQH(KH@gGe>F|$&@ zq@2A!EXcIsDdzf@cWqElI5~t z4cL9gg7{%~4@`ANXnVAi=JvSsj95-7V& zME3o-%9~2?cvlH#twW~99=-$C=+b5^Yv}Zh4;Mg-!LS zw>gqc=}CzS9>v5C?#re>JsRY!w|Mtv#%O3%Ydn=S9cQarqkZwaM4z(gL~1&oJZ;t; zA5+g3O6itCsu93!G1J_J%Icku>b3O6qBW$1Ej_oUWc@MI)| zQ~eyS-EAAnVZp}CQnvG0N>Kc$h^1DRJkE7xZqJ0>p<>9*apXgBMI-v87E0+PeJ-K& z#(8>P_W^h_kBkI;&e_{~!M+TXt@z8Po*!L^8XBn{of)knd-xp{heZh~@EunB2W)gd zAVTw6ZZasTi>((qpBFh(r4)k zz&@Mc@ZcI-4d639AfcOgHOU+YtpZ)rC%Bc5gw5o~+E-i+bMm(A6!uE>=>1M;V!Wl4 z<#~muol$FsY_qQC{JDc8b=$l6Y_@_!$av^08`czSm!Xan{l$@GO-zPq1s>WF)G=wv zDD8j~Ht1pFj)*-b7h>W)@O&m&VyYci&}K|0_Z*w`L>1jnGfCf@6p}Ef*?wdficVe_ zmPRUZ(C+YJU+hIj@_#IiM7+$4kH#VS5tM!Ksz01siPc-WUe9Y3|pb4u2qnn zRavJiRpa zq?tr&YV?yKt<@-kAFl3s&Kq#jag$hN+Y%%kX_ytvpCsElgFoN3SsZLC>0f|m#&Jhu zp7c1dV$55$+k78FI2q!FT}r|}cIV;zp~#6X2&}22$t6cHx_95FL~T~1XW21VFuatb zpM@6w>c^SJ>Pq6{L&f9()uy)TAWf;6LyHH3BUiJ8A4}od)9sriz~e7}l7Vr0e%(=>KG1Jay zW0azuWC`(|B?<6;R)2}aU`r@mt_#W2VrO{LcX$Hg9f4H#XpOsAOX02x^w9+xnLVAt z^~hv2guE-DElBG+`+`>PwXn5kuP_ZiOO3QuwoEr)ky;o$n7hFoh}Aq0@Ar<8`H!n} zspCC^EB=6>$q*gf&M2wj@zzfBl(w_@0;h^*fC#PW9!-kT-dt*e7^)OIU{Uw%U4d#g zL&o>6`hKQUps|G4F_5AuFU4wI)(%9(av7-u40(IaI|%ir@~w9-rLs&efOR@oQy)}{ z&T#Qf`!|52W0d+>G!h~5A}7VJky`C3^fkJzt3|M&xW~x-8rSi-uz=qBsgODqbl(W#f{Ew#ui(K)(Hr&xqZs` zfrK^2)tF#|U=K|_U@|r=M_Hb;qj1GJG=O=d`~#AFAccecIaq3U`(Ds1*f*TIs=IGL zp_vlaRUtFNK8(k;JEu&|i_m39c(HblQkF8g#l|?hPaUzH2kAAF1>>Yykva0;U@&oRV8w?5yEK??A0SBgh?@Pd zJg{O~4xURt7!a;$rz9%IMHQeEZHR8KgFQixarg+MfmM_OeX#~#&?mx44qe!wt`~dd zqyt^~ML>V>2Do$huU<7}EF2wy9^kJJSm6HoAD*sRz%a|aJWz_n6?bz99h)jNMp}3k ztPVbos1$lC1nX_OK0~h>=F&v^IfgBF{#BIi&HTL}O7H-t4+wwa)kf3AE2-Dx@#mTA z!0f`>vz+d3AF$NH_-JqkuK1C+5>yns0G;r5ApsU|a-w9^j4c+FS{#+7- zH%skr+TJ~W_8CK_j$T1b;$ql_+;q6W|D^BNK*A+W5XQBbJy|)(IDA=L9d>t1`KX2b zOX(Ffv*m?e>! zS3lc>XC@IqPf1g-%^4XyGl*1v0NWnwZTW?z4Y6sncXkaA{?NYna3(n@(+n+#sYm}A zGQS;*Li$4R(Ff{obl3#6pUsA0fKuWurQo$mWXMNPV5K66V!XYOyc})^>889Hg3I<{V^Lj9($B4Zu$xRr=89-lDz9x`+I8q(vEAimx1K{sTbs|5x7S zZ+7o$;9&9>@3K;5-DVzGw=kp7ez%1*kxhGytdLS>Q)=xUWv3k_x(IsS8we39Tijvr z`GKk>gkZTHSht;5q%fh9z?vk%sWO}KR04G9^jleJ^@ovWrob7{1xy7V=;S~dDVt%S za$Q#Th%6g1(hiP>hDe}7lcuI94K-2~Q0R3A1nsb7Y*Z!DtQ(Ic<0;TDKvc6%1kBdJ z$hF!{uALB0pa?B^TC}#N5gZ|CKjy|BnT$7eaKj;f>Alqdb_FA3yjZ4CCvm)D&ibL) zZRi91HC!TIAUl<|`rK_6avGh`!)TKk=j|8*W|!vb9>HLv^E%t$`@r@piI(6V8pqDG zBON7~=cf1ZWF6jc{qkKm;oYBtUpIdau6s+<-o^5qNi-p%L%xAtn9OktFd{@EjVAT% z#?-MJ5}Q9QiK_jYYWs+;I4&!N^(mb!%4zx7qO6oCEDn=8oL6#*9XIJ&iJ30O`0vsFy|fEVkw}*jd&B6!IYi+~Y)qv6QlM&V9g0 zh)@^BVDB|P&#X{31>G*nAT}Mz-j~zd>L{v{9AxrxKFw8j;ccQ$NE0PZCc(7fEt1xd z`(oR2!gX6}R+Z77VkDz^{I)@%&HQT5q+1xlf*3R^U8q%;IT8-B53&}dNA7GW`Ki&= z$lrdH zDCu;j$GxW<&v_4Te7=AE2J0u1NM_7Hl9$u{z(8#%8vvrx2P#R7AwnY|?#LbWmROa; zOJzU_*^+n(+k;Jd{e~So9>OF>fPx$Hb$?~K1ul2xr>>o@**n^6IMu8+o3rDp(X$cC z`wQt9qIS>yjA$K~bg{M%kJ00A)U4L+#*@$8UlS#lN3YA{R{7{-zu#n1>0@(#^eb_% zY|q}2)jOEM8t~9p$X5fpT7BZQ1bND#^Uyaa{mNcFWL|MoYb@>y`d{VwmsF&haoJuS2W7azZU0{tu#Jj_-^QRc35tjW~ae&zhKk!wD}#xR1WHu z_7Fys#bp&R?VXy$WYa$~!dMxt2@*(>@xS}5f-@6eoT%rwH zv_6}M?+piNE;BqaKzm1kK@?fTy$4k5cqYdN8x-<(o6KelwvkTqC3VW5HEnr+WGQlF zs`lcYEm=HPpmM4;Ich7A3a5Mb3YyQs7(Tuz-k4O0*-YGvl+2&V(B&L1F8qfR0@vQM-rF<2h-l9T12eL}3LnNAVyY_z51xVr$%@VQ-lS~wf3mnHc zoM({3Z<3+PpTFCRn_Y6cbxu9v>_>eTN0>hHPl_NQQuaK^Mhrv zX{q#80ot;ptt3#js3>kD&uNs{G0mQp>jyc0GG?=9wb33hm z`y2jL=J)T1JD7eX3xa4h$bG}2ev=?7f>-JmCj6){Upo&$k{2WA=%f;KB;X5e;JF3IjQBa4e-Gp~xv- z|In&Rad7LjJVz*q*+splCj|{7=kvQLw0F@$vPuw4m^z=B^7=A4asK_`%lEf_oIJ-O z{L)zi4bd#&g0w{p1$#I&@bz3QXu%Y)j46HAJKWVfRRB*oXo4lIy7BcVl4hRs<%&iQ zr|)Z^LUJ>qn>{6y`JdabfNNFPX7#3`x|uw+z@h<`x{J4&NlDjnknMf(VW_nKWT!Jh zo1iWBqT6^BR-{T=4Ybe+?6zxP_;A5Uo{}Xel%*=|zRGm1)pR43K39SZ=%{MDCS2d$~}PE-xPw4ZK6)H;Zc&0D5p!vjCn0wCe&rVIhchR9ql!p2`g0b@JsC^J#n_r*4lZ~u0UHKwo(HaHUJDHf^gdJhTdTW z3i7Zp_`xyKC&AI^#~JMVZj^9WsW}UR#nc#o+ifY<4`M+?Y9NTBT~p`ONtAFf8(ltr*ER-Ig!yRs2xke#NN zkyFcaQKYv>L8mQdrL+#rjgVY>Z2_$bIUz(kaqL}cYENh-2S6BQK-a(VNDa_UewSW` zMgHi<3`f!eHsyL6*^e^W7#l?V|42CfAjsgyiJsA`yNfAMB*lAsJj^K3EcCzm1KT zDU2+A5~X%ax-JJ@&7>m`T;;}(-e%gcYQtj}?ic<*gkv)X2-QJI5I0tA2`*zZRX(;6 zJ0dYfMbQ+{9Rn3T@Iu4+imx3Y%bcf2{uT4j-msZ~eO)5Z_T7NC|Nr3)|NWjomhv=E zXaVin)MY)`1QtDyO7mUCjG{5+o1jD_anyKn73uflH*ASA8rm+S=gIfgJ);>Zx*hNG z!)8DDCNOrbR#9M7Ud_1kf6BP)x^p(|_VWCJ+(WGDbYmnMLWc?O4zz#eiP3{NfP1UV z(n3vc-axE&vko^f+4nkF=XK-mnHHQ7>w05$Q}iv(kJc4O3TEvuIDM<=U9@`~WdKN* zp4e4R1ncR_kghW}>aE$@OOc~*aH5OOwB5U*Z)%{LRlhtHuigxH8KuDwvq5{3Zg{Vr zrd@)KPwVKFP2{rXho(>MTZZfkr$*alm_lltPob4N4MmhEkv`J(9NZFzA>q0Ch;!Ut zi@jS_=0%HAlN+$-IZGPi_6$)ap>Z{XQGt&@ZaJ(es!Po5*3}>R4x66WZNsjE4BVgn z>}xm=V?F#tx#e+pimNPH?Md5hV7>0pAg$K!?mpt@pXg6UW9c?gvzlNe0 z3QtIWmw$0raJkjQcbv-7Ri&eX6Ks@@EZ&53N|g7HU<;V1pkc&$3D#8k!coJ=^{=vf z-pCP;vr2#A+i#6VA?!hs6A4P@mN62XYY$#W9;MwNia~89i`=1GoFESI+%Mbrmwg*0 zbBq4^bA^XT#1MAOum)L&ARDXJ6S#G>&*72f50M1r5JAnM1p7GFIv$Kf9eVR(u$KLt z9&hQ{t^i16zL1c(tRa~?qr?lbSN;1k;%;p*#gw_BwHJRjcYPTj6>y-rw*dFTnEs95 z`%-AoPL!P16{=#RI0 zUb6#`KR|v^?6uNnY`zglZ#Wd|{*rZ(x&Hk8N6ob6mpX~e^qu5kxvh$2TLJA$M=rx zc!#ot+sS+-!O<0KR6+Lx&~zgEhCsbFY{i_DQCihspM?e z-V}HemMAvFzXR#fV~a=Xf-;tJ1edd}Mry@^=9BxON;dYr8vDEK<<{ zW~rg(ZspxuC&aJo$GTM!9_sXu(EaQJNkV9AC(ob#uA=b4*!Uf}B*@TK=*dBvKKPAF z%14J$S)s-ws9~qKsf>DseEW(ssVQ9__YNg}r9GGx3AJiZR@w_QBlGP>yYh0lQCBtf zx+G;mP+cMAg&b^7J!`SiBwC81M_r0X9kAr2y$0(Lf1gZK#>i!cbww(hn$;fLIxRf? z!AtkSZc-h76KGSGz%48Oe`8ZBHkSXeVb!TJt_VC>$m<#}(Z}!(3h631ltKb3CDMw^fTRy%Ia!b&at`^g7Ew-%WLT9(#V0OP9CE?uj62s>`GI3NA z!`$U+i<`;IQyNBkou4|-7^9^ylac-Xu!M+V5p5l0Ve?J0wTSV+$gYtoc=+Ve*OJUJ z$+uIGALW?}+M!J9+M&#bT=Hz@{R2o>NtNGu1yS({pyteyb>*sg4N`KAD?`u3F#C1y z2K4FKOAPASGZTep54PqyCG(h3?kqQQAxDSW@>T2d!n;9C8NGS;3A8YMRcL>b=<<%M zMiWf$jY;`Ojq5S{kA!?28o)v$;)5bTL<4eM-_^h4)F#eeC2Dj*S`$jl^yn#NjJOYT zx%yC5Ww@eX*zsM)P(5#wRd=0+3~&3pdIH7CxF_2iZSw@>kCyd z%M}$1p((Bidw4XNtk&`BTkU{-PG)SXIZ)yQ!Iol6u8l*SQ1^%zC72FP zLvG>_Z0SReMvB%)1@+et0S{<3hV@^SY3V~5IY(KUtTR{*^xJ^2NN{sIMD9Mr9$~(C$GLNlSpzS=fsbw-DtHb_T|{s z9OR|sx!{?F``H!gVUltY7l~dx^a(2;OUV^)7 z%@hg`8+r&xIxmzZ;Q&v0X%9P)U0SE@r@(lKP%TO(>6I_iF{?PX(bez6v8Gp!W_nd5 z<8)`1jcT)ImNZp-9rr4_1MQ|!?#8sJQx{`~7)QZ75I=DPAFD9Mt{zqFrcrXCU9MG8 zEuGcy;nZ?J#M3!3DWW?Zqv~dnN6ijlIjPfJx(#S0cs;Z=jDjKY|$w2s4*Xa1Iz953sN2Lt!Vmk|%ZwOOqj`sA--5Hiaq8!C%LV zvWZ=bxeRV(&%BffMJ_F~~*FdcjhRVNUXu)MS(S#67rDe%Ler=GS+WysC1I2=Bmbh3s6wdS}o$0 zz%H08#SPFY9JPdL6blGD$D-AaYi;X!#zqib`(XX*i<*eh+2UEPzU4}V4RlC3{<>-~ zadGA8lSm>b7Z!q;D_f9DT4i)Q_}ByElGl*Cy~zX%IzHp)@g-itZB6xM70psn z;AY8II99e6P2drgtTG5>`^|7qg`9MTp%T~|1N3tBqV}2zgow3TFAH{XPor0%=HrkXnKyxyozHlJ6 zd3}OWkl?H$l#yZqOzZbMI+lDLoH48;s10!m1!K87g;t}^+A3f3e&w{EYhVPR0Km*- zh5-ku$Z|Ss{2?4pGm(Rz!0OQb^_*N`)rW{z)^Cw_`a(_L9j=&HEJl(!4rQy1IS)>- zeTIr>hOii`gc(fgYF(cs$R8l@q{mJzpoB5`5r>|sG zBpsY}RkY(g5`bj~D>(;F8v*DyjX(#nVLSs>)XneWI&%Wo>a0u#4A?N<1SK4D}&V1oN)76 z%S>a2n3n>G`YY1>0Hvn&AMtMuI_?`5?4y3w2Hnq4Qa2YH5 zxKdfM;k467djL31Y$0kd9FCPbU=pHBp@zaIi`Xkd80;%&66zvSqsq6%aY)jZacfvw ztkWE{ZV6V2WL9e}Dvz|!d96KqVkJU@5ryp#rReeWu>mSrOJxY^tWC9wd0)$+lZc%{ zY=c4#%OSyQJvQUuy^u}s8DN8|8T%TajOuaY^)R-&8s@r9D`(Ic4NmEu)fg1f!u`xUb;9t#rM z>}cY=648@d5(9A;J)d{a^*ORdVtJrZ77!g~^lZ9@)|-ojvW#>)Jhe8$7W3mhmQh@S zU=CSO+1gSsQ+Tv=x-BD}*py_Ox@;%#hPb&tqXqyUW9jV+fonnuCyVw=?HR>dAB~Fg z^vl*~y*4|)WUW*9RC%~O1gHW~*tJb^a-j;ae2LRNo|0S2`RX>MYqGKB^_ng7YRc@! zFxg1X!VsvXkNuv^3mI`F2=x6$(pZdw=jfYt1ja3FY7a41T07FPdCqFhU6%o|Yb6Z4 zpBGa=(ao3vvhUv#*S{li|EyujXQPUV;0sa5!0Ut)>tPWyC9e0_9(=v*z`TV5OUCcx zT=w=^8#5u~7<}8Mepqln4lDv*-~g^VoV{(+*4w(q{At6d^E-Usa2`JXty++Oh~on^ z;;WHkJsk2jvh#N|?(2PLl+g!M0#z_A;(#Uy=TzL&{Ei5G9#V{JbhKV$Qmkm%5tn!CMA? z@hM=b@2DZWTQ6>&F6WCq6;~~WALiS#@{|I+ucCmD6|tBf&e;$_)%JL8$oIQ%!|Xih1v4A$=7xNO zZVz$G8;G5)rxyD+M0$20L$4yukA_D+)xmK3DMTH3Q+$N&L%qB)XwYx&s1gkh=%qGCCPwnwhbT4p%*3R)I}S#w7HK3W^E%4w z2+7ctHPx3Q97MFYB48HfD!xKKb(U^K_4)Bz(5dvwyl*R?)k;uHEYVi|{^rvh)w7}t z`tnH{v9nlVHj2ign|1an_wz0vO)*`3RaJc#;(W-Q6!P&>+@#fptCgtUSn4!@b7tW0&pE2Qj@7}f#ugu4*C)8_}AMRuz^WG zc)XDcOPQjRaGptRD^57B83B-2NKRo!j6TBAJntJPHNQG;^Oz}zt5F^kId~miK3J@l ztc-IKp6qL!?u~q?qfGP0I~$5gvq#-0;R(oLU@sYayr*QH95fnrYA*E|n%&FP@Cz`a zSdJ~(c@O^>qaO`m9IQ8sd8!L<+)GPJDrL7{4{ko2gWOZel^3!($Gjt|B&$4dtfTmBmC>V`R&&6$wpgvdmns zxcmfS%9_ZoN>F~azvLFtA(9Q5HYT#A(byGkESnt{$Tu<73$W~reB4&KF^JBsoqJ6b zS?$D7DoUgzLO-?P`V?5_ub$nf1p0mF?I)StvPomT{uYjy!w&z$t~j&en=F~hw|O(1 zlV9$arQmKTc$L)Kupwz_zA~deT+-0WX6NzFPh&d+ly*3$%#?Ca9Z9lOJsGVoQ&1HNg+)tJ_sw)%oo*DK)iU~n zvL``LqTe=r=7SwZ@LB)9|3QB5`0(B9r(iR}0nUwJss-v=dXnwMRQFYSRK1blS#^g(3@z{`=8_CGDm!LESTWig zzm1{?AG&7`uYJ;PoFO$o8RWuYsV26V{>D-iYTnvq7igWx9@w$EC*FV^vpvDl@i9yp zPIqiX@hEZF4VqzI3Y)CHhR`xKN8poL&~ak|wgbE4zR%Dm(a@?bw%(7(!^>CM!^4@J z6Z)KhoQP;WBq_Z_&<@i2t2&xq>N>b;Np2rX?yK|-!14iE2T}E|jC+=wYe~`y38g3J z8QGZquvqBaG!vw&VtdXWX5*i5*% zJP~7h{?&E|<#l{klGPaun`IgAJ4;RlbRqgJz5rmHF>MtJHbfqyyZi53?Lhj=(Ku#& z__ubmZIxzSq3F90Xur!1)Vqe6b@!ueHA!93H~jdHmaS5Q^CULso}^poy)0Op6!{^9 zWyCyyIrdBP4fkliZ%*g+J-A!6VFSRF6Liu6G^^=W>cn81>4&7(c7(6vCGSAJ zQZ|S3mb|^Wf=yJ(h~rq`iiW~|n#$+KcblIR<@|lDtm!&NBzSG-1;7#YaU+-@=xIm4 zE}edTYd~e&_%+`dIqqgFntL-FxL3!m4yTNt<(^Vt9c6F(`?9`u>$oNxoKB29<}9FE zgf)VK!*F}nW?}l95%RRk8N4^Rf8)Xf;drT4<|lUDLPj^NPMrBPL;MX&0oGCsS za3}vWcF(IPx&W6{s%zwX{UxHX2&xLGfT{d9bWP!g;Lg#etpuno$}tHoG<4Kd*=kpU z;4%y(<^yj(UlG%l-7E9z_Kh2KoQ19qT3CR@Ghr>BAgr3Vniz3LmpC4g=g|A3968yD2KD$P7v$ zx9Q8`2&qH3&y-iv0#0+jur@}k`6C%7fKbCr|tHX2&O%r?rBpg`YNy~2m+ z*L7dP$RANzVUsG_Lb>=__``6vA*xpUecuGsL+AW?BeSwyoQfDlXe8R1*R1M{0#M?M zF+m19`3<`gM{+GpgW^=UmuK*yMh3}x)7P738wL8r@(Na6%ULPgbPVTa6gh5Q(SR0f znr6kdRpe^(LVM;6Rt(Z@Lsz3EX*ry6(WZ?w>#ZRelx)N%sE+MN>5G|Z8{%@b&D+Ov zPU{shc9}%;G7l;qbonIb_1m^Qc8ez}gTC-k02G8Rl?7={9zBz8uRX2{XJQ{vZhs67avlRn| zgRtWl0Lhjet&!YC47GIm%1gdq%T24_^@!W3pCywc89X4I5pnBCZDn(%!$lOGvS*`0!AoMtqxNPFgaMR zwoW$p;8l6v%a)vaNsesED3f}$%(>zICnoE|5JwP&+0XI}JxPccd+D^gx`g`=GsUc0 z9Uad|C+_@_0%JmcObGnS@3+J^0P!tg+fUZ_w#4rk#TlJYPXJiO>SBxzs9(J;XV9d{ zmTQE1(K8EYaz9p^XLbdWudyIPJlGPo0U*)fAh-jnbfm@SYD_2+?|DJ-^P+ojG{2{6 z>HJtedEjO@j_tqZ4;Zq1t5*5cWm~W?HGP!@_f6m#btM@46cEMhhK{(yI&jG)fwL1W z^n_?o@G8a-jYt!}$H*;{0#z8lANlo!9b@!c5K8<(#lPlpE!z86Yq#>WT&2} z;;G1$pD%iNoj#Z=&kij5&V1KHIhN-h<;{HC5wD)PvkF>CzlQOEx_0;-TJ*!#&{Wzt zKcvq^SZIdop}y~iouNqtU7K7+?eIz-v_rfNM>t#i+dD$s_`M;sjGubTdP)WI*uL@xPOLHt#~T<@Yz>xt50ZoTw;a(a}lNiDN-J${gOdE zx?8LOA|tv{Mb}=TTR=LcqMqbCJkKj+@;4Mu)Cu0{`~ohix6E$g&tff)aHeUAQQ%M? zIN4uSUTzC1iMEWL*W-in1y)C`E+R8j?4_?X4&2Zv5?QdkNMz(k} zw##^Ikx`#_s>i&CO_mu@vJJ*|3ePRDl5pq$9V^>D;g0R%l>lw;ttyM6Sy`NBF{)Lr zSk)V>mZr96+aHY%vTLLt%vO-+juw6^SO_ zYGJaGeWX6W(TOQx=5oTGXOFqMMU*uZyt>MR-Y`vxW#^&)H zk0!F8f*@v6NO@Z*@Qo)+hlX40EWcj~j9dGrLaq%1;DE_%#lffXCcJ;!ZyyyZTz74Q zb2WSly6sX{`gQeToQsi1-()5EJ1nJ*kXGD`xpXr~?F#V^sxE3qSOwRSaC9x9oa~jJ zTG9`E|q zC5Qs1xh}jzb5UPYF`3N9YuMnI7xsZ41P;?@c|%w zl=OxLr6sMGR+`LStLvh)g?fA5p|xbUD;yFAMQg&!PEDYxVYDfA>oTY;CFt`cg?Li1 z0b})!9Rvw&j#*&+D2))kXLL z0+j=?7?#~_}N-qdEIP>DQaZh#F(#e0WNLzwUAj@r694VJ8?Dr5_io2X49XYsG^ zREt0$HiNI~6VV!ycvao+0v7uT$_ilKCvsC+VDNg7yG1X+eNe^3D^S==F3ByiW0T^F zH6EsH^}Uj^VPIE&m)xlmOScYR(w750>hclqH~~dM2+;%GDXT`u4zG!p((*`Hwx41M z4KB+`hfT(YA%W)Ve(n+Gu9kuXWKzxg{1ff^xNQw>w%L-)RySTk9kAS92(X0Shg^Q? zx1YXg_TLC^?h6!4mBqZ9pKhXByu|u~gF%`%`vdoaGBN3^j4l!4x?Bw4Jd)Z4^di}! zXlG1;hFvc>H?bmmu1E7Vx=%vahd!P1#ZGJOJYNbaek^$DHt`EOE|Hlij+hX>ocQFSLVu|wz`|KVl@Oa;m2k6b*mNK2Vo{~l9>Qa3@B7G7#k?)aLx;w6U ze8bBq%vF?5v>#TspEoaII!N}sRT~>bh-VWJ7Q*1qsz%|G)CFmnttbq$Ogb{~YK_=! z{{0vhlW@g!$>|}$&4E3@k`KPElW6x#tSX&dfle>o!irek$NAbDzdd2pVeNzk4&qgJ zXvNF0$R96~g0x+R1igR=Xu&X_Hc5;!Ze&C)eUTB$9wW&?$&o8Yxhm5s(S`;?{> z*F?9Gr0|!OiKA>Rq-ae=_okB6&yMR?!JDer{@iQgIn=cGxs-u^!8Q$+N&pfg2WM&Z zulHu=Uh~U>fS{=Nm0x>ACvG*4R`Dx^kJ65&Vvfj`rSCV$5>c04N26Rt2S?*kh3JKq z9(3}5T?*x*AP(X2Ukftym0XOvg~r6Ms$2x&R&#}Sz23aMGU&7sU-cFvE3Eq`NBJe84VoftWF#v7PDAp`@V zRFCS24_k~;@~R*L)eCx@Q9EYmM)Sn}HLbVMyxx%{XnMBDc-YZ<(DXDBYUt8$u5Zh} zBK~=M9cG$?_m_M61YG+#|9Vef7LfbH>(C21&aC)x$^Lg}fa#SF){RX|?-xZjSOrn# z2ZAwUF)$VB<&S;R3FhNSQOV~8w%A`V9dWyLiy zgt7G=Z4t|zU3!dh5|s(@XyS|waBr$>@=^Dspmem8)@L`Ns{xl%rGdX!R(BiC5C7Vo zXetb$oC_iXS}2x_Hy}T(hUUNbO47Q@+^4Q`h>(R-;OxCyW#eoOeC51jzxnM1yxBrp zz6}z`(=cngs6X05e79o_B7@3K|Qpe3n38Py_~ zpi?^rj!`pq!7PHGliC$`-8A^Ib?2qgJJCW+(&TfOnFGJ+@-<<~`7BR0f4oSINBq&R z2CM`0%WLg_Duw^1SPwj-{?BUl2Y=M4e+7yL1{C&&f&zjF06#xf>VdLozgNye(BNgSD`=fFbBy0HIosLl@JwCQl^s;eTnc( z3!r8G=K>zb`|bLLI0N|eFJk%s)B>oJ^M@AQzqR;HUjLsOqW<0v>1ksT_#24*U@R3HJu*A^#1o#P3%3_jq>icD@<`tqU6ICEgZrME(xX#?i^Z z%Id$_uyQGlFD-CcaiRtRdGn|K`Lq5L-rx7`vYYGH7I=eLfHRozPiUtSe~Tt;IN2^gCXmf2#D~g2@9bhzK}3nphhG%d?V7+Zq{I2?Gt*!NSn_r~dd$ zqkUOg{U=MI?Ehx@`(X%rQB?LP=CjJ*V!rec{#0W2WshH$X#9zep!K)tzZoge*LYd5 z@g?-j5_mtMp>_WW`p*UNUZTFN{_+#m*bJzt{hvAdkF{W40{#L3w6gzPztnsA_4?&0 z(+>pv!zB16rR-(nm(^c>Z(its{ny677vT8sF564^mlZvJ!h65}OW%Hn|2OXbOQM%b z{6C54Z2v;^hyMQ;UH+HwFD2!F!VlQ}6Z{L0_9g5~CH0@Mqz?ZC`^QkhOU#$Lx<4`B zyZsa9uPF!rZDo8ZVfzzR#raQ>5|)k~_Ef*wDqG^76o)j!C4 zykvT*o$!-MBko@?{b~*Zf2*YMlImrK`cEp|#D7f%Twm<|C|dWD \(.*\)$'` + if expr "$link" : '/.*' > /dev/null; then + PRG="$link" + else + PRG=`dirname "$PRG"`"/$link" + fi +done +SAVED="`pwd`" +cd "`dirname \"$PRG\"`/" >/dev/null +APP_HOME="`pwd -P`" +cd "$SAVED" >/dev/null + +APP_NAME="Gradle" +APP_BASE_NAME=`basename "$0"` + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD="maximum" + +warn () { + echo "$*" +} + +die () { + echo + echo "$*" + echo + exit 1 +} + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "`uname`" in + CYGWIN* ) + cygwin=true + ;; + Darwin* ) + darwin=true + ;; + MINGW* ) + msys=true + ;; + NONSTOP* ) + nonstop=true + ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD="$JAVA_HOME/jre/sh/java" + else + JAVACMD="$JAVA_HOME/bin/java" + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD="java" + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if [ "$cygwin" = "false" -a "$darwin" = "false" -a "$nonstop" = "false" ] ; then + MAX_FD_LIMIT=`ulimit -H -n` + if [ $? -eq 0 ] ; then + if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then + MAX_FD="$MAX_FD_LIMIT" + fi + ulimit -n $MAX_FD + if [ $? -ne 0 ] ; then + warn "Could not set maximum file descriptor limit: $MAX_FD" + fi + else + warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT" + fi +fi + +# For Darwin, add options to specify how the application appears in the dock +if $darwin; then + GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\"" +fi + +# For Cygwin, switch paths to Windows format before running java +if $cygwin ; then + APP_HOME=`cygpath --path --mixed "$APP_HOME"` + CLASSPATH=`cygpath --path --mixed "$CLASSPATH"` + JAVACMD=`cygpath --unix "$JAVACMD"` + + # We build the pattern for arguments to be converted via cygpath + ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null` + SEP="" + for dir in $ROOTDIRSRAW ; do + ROOTDIRS="$ROOTDIRS$SEP$dir" + SEP="|" + done + OURCYGPATTERN="(^($ROOTDIRS))" + # Add a user-defined pattern to the cygpath arguments + if [ "$GRADLE_CYGPATTERN" != "" ] ; then + OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)" + fi + # Now convert the arguments - kludge to limit ourselves to /bin/sh + i=0 + for arg in "$@" ; do + CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -` + CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option + + if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition + eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"` + else + eval `echo args$i`="\"$arg\"" + fi + i=$((i+1)) + done + case $i in + (0) set -- ;; + (1) set -- "$args0" ;; + (2) set -- "$args0" "$args1" ;; + (3) set -- "$args0" "$args1" "$args2" ;; + (4) set -- "$args0" "$args1" "$args2" "$args3" ;; + (5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;; + (6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;; + (7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;; + (8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;; + (9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;; + esac +fi + +# Escape application args +save () { + for i do printf %s\\n "$i" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/' \\\\/" ; done + echo " " +} +APP_ARGS=$(save "$@") + +# Collect all arguments for the java command, following the shell quoting and substitution rules +eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$APP_ARGS" + +# by default we should be in the correct project dir, but when run from Finder on Mac, the cwd is wrong +if [ "$(uname)" = "Darwin" ] && [ "$HOME" = "$PWD" ]; then + cd "$(dirname "$0")" +fi + +exec "$JAVACMD" "$@" diff --git a/gradlew.bat b/gradlew.bat new file mode 100644 index 0000000..6d57edc --- /dev/null +++ b/gradlew.bat @@ -0,0 +1,84 @@ +@if "%DEBUG%" == "" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%" == "" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if "%ERRORLEVEL%" == "0" goto init + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto init + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:init +@rem Get command-line arguments, handling Windows variants + +if not "%OS%" == "Windows_NT" goto win9xME_args + +:win9xME_args +@rem Slurp the command line arguments. +set CMD_LINE_ARGS= +set _SKIP=2 + +:win9xME_args_slurp +if "x%~1" == "x" goto execute + +set CMD_LINE_ARGS=%* + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS% + +:end +@rem End local scope for the variables with windows NT shell +if "%ERRORLEVEL%"=="0" goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 +exit /b 1 + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/settings.gradle b/settings.gradle new file mode 100644 index 0000000..6353639 --- /dev/null +++ b/settings.gradle @@ -0,0 +1 @@ +rootProject.name = 'mangadex_at_home' diff --git a/src/main/java/mdnet/base/CachingInputStream.java b/src/main/java/mdnet/base/CachingInputStream.java new file mode 100644 index 0000000..c544e2b --- /dev/null +++ b/src/main/java/mdnet/base/CachingInputStream.java @@ -0,0 +1,87 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to You under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package mdnet.base; + +import org.apache.commons.io.IOUtils; +import org.apache.commons.io.input.ProxyInputStream; + +import java.io.IOException; +import java.io.InputStream; +import java.io.OutputStream; +import java.util.concurrent.ExecutorService; + +import static org.apache.commons.io.IOUtils.EOF; + +public class CachingInputStream extends ProxyInputStream { + private final OutputStream cache; + private final ExecutorService executor; + private final Runnable onClose; + + public CachingInputStream(InputStream response, ExecutorService executor, OutputStream cache, Runnable onClose) { + super(response); + this.executor = executor; + this.cache = cache; + this.onClose = onClose; + } + + @Override + public void close() throws IOException { + executor.submit(() -> { + try { + IOUtils.copy(in, cache); + } catch (IOException ignored) { + } finally { + try { + in.close(); + } catch (IOException ignored) { + } + try { + cache.close(); + } catch (IOException ignored) { + } + onClose.run(); + } + }); + } + + @Override + public int read() throws IOException { + final int ch = super.read(); + if (ch != EOF) { + cache.write(ch); + } + return ch; + } + + @Override + public int read(final byte[] bts, final int st, final int end) throws IOException { + final int n = super.read(bts, st, end); + if (n != EOF) { + cache.write(bts, st, n); + } + return n; + } + + @Override + public int read(final byte[] bts) throws IOException { + final int n = super.read(bts); + if (n != EOF) { + cache.write(bts, 0, n); + } + return n; + } +} diff --git a/src/main/java/mdnet/base/ClientSettings.java b/src/main/java/mdnet/base/ClientSettings.java new file mode 100644 index 0000000..fbad9ac --- /dev/null +++ b/src/main/java/mdnet/base/ClientSettings.java @@ -0,0 +1,60 @@ +package mdnet.base; + +import com.google.gson.annotations.SerializedName; + +import java.util.Objects; +import java.util.regex.Pattern; + +public final class ClientSettings { + @SerializedName("max_cache_size_mib") + private final long maxCacheSizeMib; + @SerializedName("max_bandwidth_mib_per_hour") + private final long maxBandwidthMibPerHour; + @SerializedName("max_burst_rate_kib_per_second") + private final long maxBurstRateKibPerSecond; + @SerializedName("client_port") + private final int clientPort; + @SerializedName("client_secret") + private final String clientSecret; + + public ClientSettings(long maxCacheSizeMib, long maxBandwidthMibPerHour, long maxBurstRateKibPerSecond, + int clientPort, String clientSecret) { + this.maxCacheSizeMib = maxCacheSizeMib; + this.maxBandwidthMibPerHour = maxBandwidthMibPerHour; + this.maxBurstRateKibPerSecond = maxBurstRateKibPerSecond; + this.clientPort = clientPort; + this.clientSecret = Objects.requireNonNull(clientSecret); + } + + public long getMaxCacheSizeMib() { + return maxCacheSizeMib; + } + + public long getMaxBandwidthMibPerHour() { + return maxBandwidthMibPerHour; + } + + public long getMaxBurstRateKibPerSecond() { + return maxBurstRateKibPerSecond; + } + + public int getClientPort() { + return clientPort; + } + + public String getClientSecret() { + return clientSecret; + } + + @Override + public String toString() { + return "ClientSettings{" + "maxCacheSizeMib=" + maxCacheSizeMib + ", maxBandwidthMibPerHour=" + + maxBandwidthMibPerHour + ", maxBurstRateKibPerSecond=" + maxBurstRateKibPerSecond + ", clientPort=" + + clientPort + ", clientSecret='" + clientSecret + '\'' + '}'; + } + + public static boolean isSecretValid(String clientSecret) { + final int CLIENT_KEY_LENGTH = 52; + return Pattern.matches("^[a-zA-Z0-9]{" + CLIENT_KEY_LENGTH + "}$", clientSecret); + } +} diff --git a/src/main/java/mdnet/base/Constants.java b/src/main/java/mdnet/base/Constants.java new file mode 100644 index 0000000..4805455 --- /dev/null +++ b/src/main/java/mdnet/base/Constants.java @@ -0,0 +1,12 @@ +package mdnet.base; + +import java.time.Duration; + +public class Constants { + public static final int CLIENT_BUILD = 1; + public static final String CLIENT_VERSION = "1.0"; + public static final Duration MAX_AGE_CACHE = Duration.ofDays(14); + + public static final int MAX_CONCURRENT_CONNECTIONS = 100; + public static final String OVERLOADED_MESSAGE = "This server is experiencing a surge in connections. Please try again later."; +} diff --git a/src/main/java/mdnet/base/MangadexClient.java b/src/main/java/mdnet/base/MangadexClient.java new file mode 100644 index 0000000..677d85a --- /dev/null +++ b/src/main/java/mdnet/base/MangadexClient.java @@ -0,0 +1,203 @@ +package mdnet.base; + +import com.google.gson.Gson; +import mdnet.cache.DiskLruCache; +import org.http4k.server.Http4kServer; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import java.io.File; +import java.io.FileNotFoundException; +import java.io.FileReader; +import java.io.IOException; +import java.util.concurrent.Executors; +import java.util.concurrent.ScheduledExecutorService; +import java.util.concurrent.TimeUnit; +import java.util.concurrent.atomic.AtomicInteger; +import java.util.concurrent.atomic.AtomicReference; + +public class MangadexClient { + private final static Logger LOGGER = LoggerFactory.getLogger(MangadexClient.class); + + // This lock protects the Http4kServer from concurrent restart attempts + private final Object shutdownLock = new Object(); + private final ScheduledExecutorService executorService = Executors.newSingleThreadScheduledExecutor(); + private final ServerHandler serverHandler; + private final ClientSettings clientSettings; + private final AtomicReference statistics; + private ServerSettings serverSettings; + + // if this is null, then the server has shutdown + private Http4kServer engine; + private DiskLruCache cache; + + public MangadexClient(ClientSettings clientSettings) { + this.clientSettings = clientSettings; + this.serverHandler = new ServerHandler(clientSettings); + this.statistics = new AtomicReference<>(); + + try { + cache = DiskLruCache.open(new File("cache"), 1, 2, + clientSettings.getMaxCacheSizeMib() * 1024 * 1024 /* MiB to bytes */); + } catch (IOException e) { + MangadexClient.dieWithError(e); + } + } + + // This function also does most of the program initialization. + public void runLoop() { + statistics.set(new Statistics()); + loginAndStartServer(); + + if (LOGGER.isInfoEnabled()) { + LOGGER.info("MDNet initialization completed successfully. Starting normal operation."); + } + + // we don't really care about the Atomic part here + AtomicInteger counter = new AtomicInteger(); + // ping keep-alive every 45 seconds + executorService.scheduleAtFixedRate(() -> { + int num = counter.get(); + if (num == 80) { + counter.set(0); + + // if server is stopped due to egress limits, restart it + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Hourly update: refreshing statistics"); + } + statistics.set(new Statistics()); + + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Restarting server stopped due to hourly bandwidth limit"); + } + if (engine == null) { + loginAndStartServer(); + } + } else { + counter.set(num + 1); + } + + if (clientSettings.getMaxBandwidthMibPerHour() != 0 && clientSettings.getMaxBandwidthMibPerHour() * 1024 + * 1024 /* MiB to bytes */ < statistics.get().getBytesSent().get()) { + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Shutting down server as hourly bandwidth limit reached"); + } + + synchronized (shutdownLock) { + logoutAndStopServer(); + } + } + + // if the server is offline then don't try and refresh certs + if (engine == null) { + return; + } + + ServerSettings n = serverHandler.pingControl(serverSettings); + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Server settings received: {}", n); + } + + if (n != null && (n.getTls() != null || !n.getImageServer().equals(serverSettings.getImageServer()))) { + // certificates or upstream url must have changed, restart webserver + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Doing internal restart of HTTP server to refresh certs/upstream URL"); + } + + synchronized (shutdownLock) { + logoutAndStopServer(); + loginAndStartServer(); + } + } + }, 45, 45, TimeUnit.SECONDS); + + } + + private void loginAndStartServer() { + serverSettings = serverHandler.loginToControl(); + if (serverSettings == null) { + MangadexClient.dieWithError("Failed to get a login response from server - check API secret for validity"); + } + engine = ApplicationKt.getServer(cache, serverSettings, clientSettings, statistics); + engine.start(); + + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Internal HTTP server was successfully started"); + } + } + + private void logoutAndStopServer() { + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Gracefully shutting down HTTP server"); + } + serverHandler.logoutFromControl(); + engine.stop(); + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Internal HTTP server has gracefully shut down"); + } + engine = null; + } + + public void shutdown() { + executorService.shutdown(); + synchronized (shutdownLock) { + if (engine == null) { + return; + } + + logoutAndStopServer(); + } + } + + public static void main(String[] args) { + System.out.println("Mangadex@Home Client " + Constants.CLIENT_VERSION + " (Build " + Constants.CLIENT_BUILD + + ") initializing\n"); + System.out.println("Copyright (c) 2020, Mangadex"); + + try { + String file = "settings.json"; + if (args.length == 1) { + file = args[0]; + } else if (args.length != 0) { + MangadexClient.dieWithError("Expected one argument: path to config file, or nothing"); + } + + ClientSettings settings = new Gson().fromJson(new FileReader(file), ClientSettings.class); + + if (!ClientSettings.isSecretValid(settings.getClientSecret())) + MangadexClient.dieWithError("Config Error: API Secret is invalid, must be 52 alphanumeric characters"); + + if (settings.getClientPort() == 0) { + MangadexClient.dieWithError("Config Error: Invalid port number"); + } + + if (settings.getMaxCacheSizeMib() < 1024) { + MangadexClient.dieWithError("Config Error: Invalid max cache size, must be >= 1024 MiB (1GiB)"); + } + + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Client settings loaded: {}", settings); + } + + MangadexClient client = new MangadexClient(settings); + Runtime.getRuntime().addShutdownHook(new Thread(client::shutdown)); + client.runLoop(); + } catch (FileNotFoundException e) { + MangadexClient.dieWithError(e); + } + } + + public static void dieWithError(Throwable e) { + if (LOGGER.isErrorEnabled()) { + LOGGER.error("Critical Error", e); + } + System.exit(1); + } + + public static void dieWithError(String error) { + if (LOGGER.isErrorEnabled()) { + LOGGER.error("Critical Error: " + error); + } + System.exit(1); + } +} diff --git a/src/main/java/mdnet/base/ServerHandler.java b/src/main/java/mdnet/base/ServerHandler.java new file mode 100644 index 0000000..edcf4ac --- /dev/null +++ b/src/main/java/mdnet/base/ServerHandler.java @@ -0,0 +1,79 @@ +package mdnet.base; + +import kong.unirest.HttpResponse; +import kong.unirest.Unirest; +import kong.unirest.json.JSONObject; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import java.util.HashMap; + +public class ServerHandler { + private final static Logger LOGGER = LoggerFactory.getLogger(ServerHandler.class); + private static final String SERVER_ADDRESS = "https://mangadex-test.net/"; + + private final ClientSettings settings; + + public ServerHandler(ClientSettings settings) { + this.settings = settings; + } + + public boolean logoutFromControl() { + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Disconnecting from the control server"); + } + + HashMap params = new HashMap<>(); + params.put("secret", settings.getClientSecret()); + + HttpResponse json = Unirest.post(SERVER_ADDRESS + "stop").header("Content-Type", "application/json") + .body(new JSONObject(params)).asEmpty(); + + return json.isSuccess(); + } + + public ServerSettings loginToControl() { + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Connecting to the control server"); + } + + HashMap params = new HashMap<>(); + params.put("secret", settings.getClientSecret()); + params.put("port", settings.getClientPort()); + params.put("disk_space", settings.getMaxCacheSizeMib() * 1024 * 1024 /* MiB to bytes */); + + HttpResponse response = Unirest.post(SERVER_ADDRESS + "ping") + .header("Content-Type", "application/json").body(new JSONObject(params)).asObject(ServerSettings.class); + + if (response.isSuccess()) { + return response.getBody(); + } else { + // unirest deserializes errors into an object with all null fields instead of a + // null object + return null; + } + } + + public ServerSettings pingControl(ServerSettings old) { + if (LOGGER.isInfoEnabled()) { + LOGGER.info("Pinging the control server"); + } + + HashMap params = new HashMap<>(); + params.put("secret", settings.getClientSecret()); + params.put("port", settings.getClientPort()); + params.put("disk_space", settings.getMaxCacheSizeMib() * 1024 * 1024 /* MiB to bytes */); + params.put("tls_created_at", old.getTls().getCreatedAt()); + + HttpResponse response = Unirest.post(SERVER_ADDRESS + "ping") + .header("Content-Type", "application/json").body(new JSONObject(params)).asObject(ServerSettings.class); + + if (response.isSuccess()) { + return response.getBody(); + } else { + // unirest deserializes errors into an object with all null fields instead of a + // null object + return null; + } + } +} diff --git a/src/main/java/mdnet/base/ServerSettings.java b/src/main/java/mdnet/base/ServerSettings.java new file mode 100644 index 0000000..4938957 --- /dev/null +++ b/src/main/java/mdnet/base/ServerSettings.java @@ -0,0 +1,106 @@ +package mdnet.base; + +import com.google.gson.annotations.SerializedName; + +import java.util.Objects; + +public final class ServerSettings { + @SerializedName("image_server") + private final String imageServer; + private final TlsCert tls; + + public ServerSettings(String imageServer, TlsCert tls) { + this.imageServer = Objects.requireNonNull(imageServer); + this.tls = tls; + } + + public String getImageServer() { + return imageServer; + } + + public TlsCert getTls() { + return tls; + } + + @Override + public String toString() { + return "ServerSettings{" + "imageServer='" + imageServer + '\'' + ", tls=" + "" + '}'; + } + + @Override + public boolean equals(Object o) { + if (this == o) + return true; + if (o == null || getClass() != o.getClass()) + return false; + + ServerSettings that = (ServerSettings) o; + + if (!imageServer.equals(that.imageServer)) + return false; + return Objects.equals(tls, that.tls); + } + + @Override + public int hashCode() { + int result = imageServer.hashCode(); + result = 31 * result + (tls != null ? tls.hashCode() : 0); + return result; + } + + public static final class TlsCert { + @SerializedName("created_at") + private final String createdAt; + @SerializedName("private_key") + private final String privateKey; + private final String certificate; + + public TlsCert(String createdAt, String privateKey, String certificate) { + this.createdAt = Objects.requireNonNull(createdAt); + this.privateKey = Objects.requireNonNull(privateKey); + this.certificate = Objects.requireNonNull(certificate); + } + + public String getCreatedAt() { + return createdAt; + } + + public String getPrivateKey() { + return privateKey; + } + + public String getCertificate() { + return certificate; + } + + @Override + public String toString() { + return "TlsCert{" + "createdAt='" + createdAt + '\'' + ", privateKey='" + privateKey + '\'' + + ", certificate='" + certificate + '\'' + '}'; + } + + @Override + public boolean equals(Object o) { + if (this == o) + return true; + if (o == null || getClass() != o.getClass()) + return false; + + TlsCert tlsCert = (TlsCert) o; + + if (!createdAt.equals(tlsCert.createdAt)) + return false; + if (!privateKey.equals(tlsCert.privateKey)) + return false; + return certificate.equals(tlsCert.certificate); + } + + @Override + public int hashCode() { + int result = createdAt.hashCode(); + result = 31 * result + privateKey.hashCode(); + result = 31 * result + certificate.hashCode(); + return result; + } + } +} diff --git a/src/main/java/mdnet/base/Statistics.java b/src/main/java/mdnet/base/Statistics.java new file mode 100644 index 0000000..29651d3 --- /dev/null +++ b/src/main/java/mdnet/base/Statistics.java @@ -0,0 +1,40 @@ +package mdnet.base; + +import java.util.concurrent.atomic.AtomicInteger; +import java.util.concurrent.atomic.AtomicLong; + +public class Statistics { + private final AtomicInteger requestsServed; + private final AtomicInteger cacheHits; + private final AtomicInteger cacheMisses; + private final AtomicLong bytesSent; + + public Statistics() { + requestsServed = new AtomicInteger(); + cacheHits = new AtomicInteger(); + cacheMisses = new AtomicInteger(); + bytesSent = new AtomicLong(); + } + + public AtomicInteger getRequestsServed() { + return requestsServed; + } + + public AtomicInteger getCacheHits() { + return cacheHits; + } + + public AtomicInteger getCacheMisses() { + return cacheMisses; + } + + public AtomicLong getBytesSent() { + return bytesSent; + } + + @Override + public String toString() { + return "Statistics{" + "requestsServed=" + requestsServed + ", cacheHits=" + cacheHits + ", cacheMisses=" + + cacheMisses + ", bytesSent=" + bytesSent + '}'; + } +} diff --git a/src/main/java/mdnet/cache/DiskLruCache.java b/src/main/java/mdnet/cache/DiskLruCache.java new file mode 100644 index 0000000..f983a86 --- /dev/null +++ b/src/main/java/mdnet/cache/DiskLruCache.java @@ -0,0 +1,949 @@ +/* + * Copyright (C) 2011 The Android Open Source Project + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package mdnet.cache; + +import org.apache.commons.io.IOUtils; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import java.io.BufferedWriter; +import java.io.Closeable; +import java.io.EOFException; +import java.io.File; +import java.io.FileInputStream; +import java.io.FileNotFoundException; +import java.io.FileOutputStream; +import java.io.FilterOutputStream; +import java.io.IOException; +import java.io.InputStream; +import java.io.OutputStream; +import java.io.OutputStreamWriter; +import java.io.Writer; +import java.nio.charset.StandardCharsets; +import java.util.ArrayList; +import java.util.Iterator; +import java.util.LinkedHashMap; +import java.util.Map; +import java.util.concurrent.Callable; +import java.util.concurrent.LinkedBlockingQueue; +import java.util.concurrent.ThreadPoolExecutor; +import java.util.concurrent.TimeUnit; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + +/** + * A cache that uses a bounded amount of space on a filesystem. Each cache entry + * has a string key and a fixed number of values. Each key must match the regex + * [a-z0-9_-]{1,120}. Values are byte sequences, accessible as + * streams or files. Each value must be between {@code 0} and + * {@code Integer.MAX_VALUE} bytes in length. + * + *

+ * The cache stores its data in a directory on the filesystem. This directory + * must be exclusive to the cache; the cache may delete or overwrite files from + * its directory. It is an error for multiple processes to use the same cache + * directory at the same time. + * + *

+ * This cache limits the number of bytes that it will store on the filesystem. + * When the number of stored bytes exceeds the limit, the cache will remove + * entries in the background until the limit is satisfied. The limit is not + * strict: the cache may temporarily exceed it while waiting for files to be + * deleted. The limit does not include filesystem overhead or the cache journal + * so space-sensitive applications should set a conservative limit. + * + *

+ * Clients call {@link #edit} to create or update the values of an entry. An + * entry may have only one editor at one time; if a value is not available to be + * edited then {@link #edit} will return null. + *

    + *
  • When an entry is being created it is necessary to supply + * a full set of values; the empty value should be used as a placeholder if + * necessary. + *
  • When an entry is being edited, it is not necessary to + * supply data for every value; values default to their previous value. + *
+ * Every {@link #edit} call must be matched by a call to {@link Editor#commit} + * or {@link Editor#abort}. Committing is atomic: a read observes the full set + * of values as they were before or after the commit, but never a mix of values. + * + *

+ * Clients call {@link #get} to read a snapshot of an entry. The read will + * observe the value at the time that {@link #get} was called. Updates and + * removals after the call do not impact ongoing reads. + * + *

+ * This class is tolerant of some I/O errors. If files are missing from the + * filesystem, the corresponding entries will be dropped from the cache. If an + * error occurs while writing a cache value, the edit will fail silently. + * Callers should handle other problems by catching {@code IOException} and + * responding appropriately. + */ +public final class DiskLruCache implements Closeable { + private final static Logger LOGGER = LoggerFactory.getLogger(DiskLruCache.class); + + private static final String JOURNAL_FILE = "journal"; + private static final String JOURNAL_FILE_TEMP = "journal.tmp"; + private static final String JOURNAL_FILE_BACKUP = "journal.bkp"; + + private static final String MAGIC = "libcore.io.DiskLruCache"; + private static final String VERSION_1 = "1"; + private static final long ANY_SEQUENCE_NUMBER = -1; + private static final String STRING_KEY_PATTERN = "[a-z0-9_-]{1,120}"; + public static final Pattern LEGAL_KEY_PATTERN = Pattern.compile(STRING_KEY_PATTERN); + private static final String CLEAN = "CLEAN"; + private static final String DIRTY = "DIRTY"; + private static final String REMOVE = "REMOVE"; + private static final String READ = "READ"; + + /* + * This cache uses a journal file named "journal". A typical journal file looks + * like this: libcore.io.DiskLruCache 1 100 2 + * + * CLEAN 3400330d1dfc7f3f7f4b8d4d803dfcf6 832 21054 DIRTY + * 335c4c6028171cfddfbaae1a9c313c52 CLEAN 335c4c6028171cfddfbaae1a9c313c52 3934 + * 2342 REMOVE 335c4c6028171cfddfbaae1a9c313c52 DIRTY + * 1ab96a171faeeee38496d8b330771a7a CLEAN 1ab96a171faeeee38496d8b330771a7a 1600 + * 234 READ 335c4c6028171cfddfbaae1a9c313c52 READ + * 3400330d1dfc7f3f7f4b8d4d803dfcf6 + * + * The first five lines of the journal form its header. They are the constant + * string "libcore.io.DiskLruCache", the disk cache's version, the application's + * version, the value count, and a blank line. + * + * Each of the subsequent lines in the file is a record of the state of a cache + * entry. Each line contains space-separated values: a state, a key, and + * optional state-specific values. o DIRTY lines track that an entry is actively + * being created or updated. Every successful DIRTY action should be followed by + * a CLEAN or REMOVE action. DIRTY lines without a matching CLEAN or REMOVE + * indicate that temporary files may need to be deleted. o CLEAN lines track a + * cache entry that has been successfully published and may be read. A publish + * line is followed by the lengths of each of its values. o READ lines track + * accesses for LRU. o REMOVE lines track entries that have been deleted. + * + * The journal file is appended to as cache operations occur. The journal may + * occasionally be compacted by dropping redundant lines. A temporary file named + * "journal.tmp" will be used during compaction; that file should be deleted if + * it exists when the cache is opened. + */ + + private final File directory; + private final File journalFile; + private final File journalFileTmp; + private final File journalFileBackup; + private final int appVersion; + private long maxSize; + private final int valueCount; + private long size = 0; + private Writer journalWriter; + private final LinkedHashMap lruEntries = new LinkedHashMap<>(0, 0.75f, true); + private int redundantOpCount; + + /** + * To differentiate between old and current snapshots, each entry is given a + * sequence number each time an edit is committed. A snapshot is stale if its + * sequence number is not equal to its entry's sequence number. + */ + private long nextSequenceNumber = 0; + + /** This cache uses a single background thread to evict entries. */ + final ThreadPoolExecutor executorService = new ThreadPoolExecutor(0, 1, 60L, TimeUnit.SECONDS, + new LinkedBlockingQueue<>()); + private final Callable cleanupCallable = new Callable() { + public Void call() throws Exception { + synchronized (DiskLruCache.this) { + if (journalWriter == null) { + return null; // Closed. + } + trimToSize(); + if (journalRebuildRequired()) { + rebuildJournal(); + redundantOpCount = 0; + } + } + return null; + } + }; + + private DiskLruCache(File directory, int appVersion, int valueCount, long maxSize) { + this.directory = directory; + this.appVersion = appVersion; + this.journalFile = new File(directory, JOURNAL_FILE); + this.journalFileTmp = new File(directory, JOURNAL_FILE_TEMP); + this.journalFileBackup = new File(directory, JOURNAL_FILE_BACKUP); + this.valueCount = valueCount; + this.maxSize = maxSize; + } + + /** + * Opens the cache in {@code directory}, creating a cache if none exists there. + * + * @param directory + * a writable directory + * @param valueCount + * the number of values per cache entry. Must be positive. + * @param maxSize + * the maximum number of bytes this cache should use to store + * @throws IOException + * if reading or writing the cache directory fails + */ + public static DiskLruCache open(File directory, int appVersion, int valueCount, long maxSize) throws IOException { + if (maxSize <= 0) { + throw new IllegalArgumentException("maxSize <= 0"); + } + if (valueCount <= 0) { + throw new IllegalArgumentException("valueCount <= 0"); + } + + // If a bkp file exists, use it instead. + File backupFile = new File(directory, JOURNAL_FILE_BACKUP); + if (backupFile.exists()) { + File journalFile = new File(directory, JOURNAL_FILE); + // If journal file also exists just delete backup file. + if (journalFile.exists()) { + backupFile.delete(); + } else { + renameTo(backupFile, journalFile, false); + } + } + + // Prefer to pick up where we left off. + DiskLruCache cache = new DiskLruCache(directory, appVersion, valueCount, maxSize); + if (cache.journalFile.exists()) { + try { + cache.readJournal(); + cache.processJournal(); + return cache; + } catch (IOException journalIsCorrupt) { + if (LOGGER.isWarnEnabled()) { + LOGGER.warn("DiskLruCache " + directory + " is corrupt - removing", journalIsCorrupt); + } + cache.delete(); + } + } + + // Create a new empty cache. + directory.mkdirs(); + cache = new DiskLruCache(directory, appVersion, valueCount, maxSize); + cache.rebuildJournal(); + return cache; + } + + private void readJournal() throws IOException { + StrictLineReader reader = new StrictLineReader(new FileInputStream(journalFile), StandardCharsets.UTF_8); + try { + String magic = reader.readLine(); + String version = reader.readLine(); + String appVersionString = reader.readLine(); + String valueCountString = reader.readLine(); + String blank = reader.readLine(); + if (!MAGIC.equals(magic) || !VERSION_1.equals(version) + || !Integer.toString(appVersion).equals(appVersionString) + || !Integer.toString(valueCount).equals(valueCountString) || !"".equals(blank)) { + throw new IOException("unexpected journal header: [" + magic + ", " + version + ", " + valueCountString + + ", " + blank + "]"); + } + + int lineCount = 0; + while (true) { + try { + readJournalLine(reader.readLine()); + lineCount++; + } catch (EOFException endOfJournal) { + break; + } + } + redundantOpCount = lineCount - lruEntries.size(); + + // If we ended on a truncated line, rebuild the journal before appending to it. + if (reader.hasUnterminatedLine()) { + rebuildJournal(); + } else { + journalWriter = new BufferedWriter( + new OutputStreamWriter(new FileOutputStream(journalFile, true), StandardCharsets.UTF_8)); + } + } finally { + Util.closeQuietly(reader); + } + } + + private void readJournalLine(String line) throws IOException { + int firstSpace = line.indexOf(' '); + if (firstSpace == -1) { + throw new IOException("unexpected journal line: " + line); + } + + int keyBegin = firstSpace + 1; + int secondSpace = line.indexOf(' ', keyBegin); + final String key; + if (secondSpace == -1) { + key = line.substring(keyBegin); + if (firstSpace == REMOVE.length() && line.startsWith(REMOVE)) { + lruEntries.remove(key); + return; + } + } else { + key = line.substring(keyBegin, secondSpace); + } + + Entry entry = lruEntries.get(key); + if (entry == null) { + entry = new Entry(key); + lruEntries.put(key, entry); + } + + if (secondSpace != -1 && firstSpace == CLEAN.length() && line.startsWith(CLEAN)) { + String[] parts = line.substring(secondSpace + 1).split(" "); + entry.readable = true; + entry.currentEditor = null; + entry.setLengths(parts); + } else if (secondSpace == -1 && firstSpace == DIRTY.length() && line.startsWith(DIRTY)) { + entry.currentEditor = new Editor(entry); + } else if (secondSpace == -1 && firstSpace == READ.length() && line.startsWith(READ)) { + // This work was already done by calling lruEntries.get(). + } else { + throw new IOException("unexpected journal line: " + line); + } + } + + /** + * Computes the initial size and collects garbage as a part of opening the + * cache. Dirty entries are assumed to be inconsistent and will be deleted. + */ + private void processJournal() throws IOException { + deleteIfExists(journalFileTmp); + for (Iterator i = lruEntries.values().iterator(); i.hasNext();) { + Entry entry = i.next(); + if (entry.currentEditor == null) { + for (int t = 0; t < valueCount; t++) { + size += entry.lengths[t]; + } + } else { + entry.currentEditor = null; + for (int t = 0; t < valueCount; t++) { + deleteIfExists(entry.getCleanFile(t)); + deleteIfExists(entry.getDirtyFile(t)); + } + i.remove(); + } + } + } + + /** + * Creates a new journal that omits redundant information. This replaces the + * current journal if it exists. + */ + private synchronized void rebuildJournal() throws IOException { + if (journalWriter != null) { + journalWriter.close(); + } + + Writer writer = new BufferedWriter( + new OutputStreamWriter(new FileOutputStream(journalFileTmp), StandardCharsets.UTF_8)); + try { + writer.write(MAGIC); + writer.write("\n"); + writer.write(VERSION_1); + writer.write("\n"); + writer.write(Integer.toString(appVersion)); + writer.write("\n"); + writer.write(Integer.toString(valueCount)); + writer.write("\n"); + writer.write("\n"); + + for (Entry entry : lruEntries.values()) { + if (entry.currentEditor != null) { + writer.write(DIRTY + ' ' + entry.key + '\n'); + } else { + writer.write(CLEAN + ' ' + entry.key + entry.getLengths() + '\n'); + } + } + } finally { + Util.closeQuietly(writer); + } + + if (journalFile.exists()) { + renameTo(journalFile, journalFileBackup, true); + } + renameTo(journalFileTmp, journalFile, false); + journalFileBackup.delete(); + + journalWriter = new BufferedWriter( + new OutputStreamWriter(new FileOutputStream(journalFile, true), StandardCharsets.UTF_8)); + } + + private static void deleteIfExists(File file) throws IOException { + if (file.exists() && !file.delete()) { + throw new IOException(); + } + } + + private static void renameTo(File from, File to, boolean deleteDestination) throws IOException { + if (deleteDestination) { + deleteIfExists(to); + } + if (!from.renameTo(to)) { + throw new IOException(); + } + } + + /** + * Returns a snapshot of the entry named {@code key}, or null if it doesn't + * exist is not currently readable. If a value is returned, it is moved to the + * head of the LRU queue. + */ + public synchronized Snapshot get(String key) throws IOException { + checkNotClosed(); + validateKey(key); + Entry entry = lruEntries.get(key); + if (entry == null) { + return null; + } + + if (!entry.readable) { + return null; + } + + // Open all streams eagerly to guarantee that we see a single published + // snapshot. If we opened streams lazily then the streams could come + // from different edits. + InputStream[] ins = new InputStream[valueCount]; + try { + for (int i = 0; i < valueCount; i++) { + ins[i] = new FileInputStream(entry.getCleanFile(i)); + } + } catch (FileNotFoundException e) { + // A file must have been deleted manually! + for (int i = 0; i < valueCount; i++) { + if (ins[i] != null) { + Util.closeQuietly(ins[i]); + } else { + break; + } + } + return null; + } + + redundantOpCount++; + journalWriter.append(READ + ' ').append(key).append(String.valueOf('\n')); + if (journalRebuildRequired()) { + executorService.submit(cleanupCallable); + } + + return new Snapshot(key, entry.sequenceNumber, ins, entry.lengths); + } + + /** + * Returns an editor for the entry named {@code key}, or null if another edit is + * in progress. + */ + public Editor edit(String key) throws IOException { + return edit(key, ANY_SEQUENCE_NUMBER); + } + + private synchronized Editor edit(String key, long expectedSequenceNumber) throws IOException { + checkNotClosed(); + validateKey(key); + Entry entry = lruEntries.get(key); + if (expectedSequenceNumber != ANY_SEQUENCE_NUMBER + && (entry == null || entry.sequenceNumber != expectedSequenceNumber)) { + return null; // Snapshot is stale. + } + if (entry == null) { + entry = new Entry(key); + lruEntries.put(key, entry); + } else if (entry.currentEditor != null) { + return null; // Another edit is in progress. + } + + Editor editor = new Editor(entry); + entry.currentEditor = editor; + + // Flush the journal before creating files to prevent file leaks. + journalWriter.write(DIRTY + ' ' + key + '\n'); + journalWriter.flush(); + return editor; + } + + /** Returns the directory where this cache stores its data. */ + public File getDirectory() { + return directory; + } + + /** + * Returns the maximum number of bytes that this cache should use to store its + * data. + */ + public synchronized long getMaxSize() { + return maxSize; + } + + /** + * Changes the maximum number of bytes the cache can store and queues a job to + * trim the existing store, if necessary. + */ + public synchronized void setMaxSize(long maxSize) { + this.maxSize = maxSize; + executorService.submit(cleanupCallable); + } + + /** + * Returns the number of bytes currently being used to store the values in this + * cache. This may be greater than the max size if a background deletion is + * pending. + */ + public synchronized long size() { + return size; + } + + private synchronized void completeEdit(Editor editor, boolean success) throws IOException { + Entry entry = editor.entry; + if (entry.currentEditor != editor) { + throw new IllegalStateException(); + } + + // If this edit is creating the entry for the first time, every index must have + // a value. + if (success && !entry.readable) { + for (int i = 0; i < valueCount; i++) { + if (!editor.written[i]) { + editor.abort(); + throw new IllegalStateException("Newly created entry didn't create value for index " + i); + } + if (!entry.getDirtyFile(i).exists()) { + editor.abort(); + return; + } + } + } + + for (int i = 0; i < valueCount; i++) { + File dirty = entry.getDirtyFile(i); + if (success) { + if (dirty.exists()) { + File clean = entry.getCleanFile(i); + dirty.renameTo(clean); + long oldLength = entry.lengths[i]; + long newLength = clean.length(); + entry.lengths[i] = newLength; + size = size - oldLength + newLength; + } + } else { + deleteIfExists(dirty); + } + } + + redundantOpCount++; + entry.currentEditor = null; + if (entry.readable | success) { + entry.readable = true; + journalWriter.write(CLEAN + ' ' + entry.key + entry.getLengths() + '\n'); + if (success) { + entry.sequenceNumber = nextSequenceNumber++; + } + } else { + lruEntries.remove(entry.key); + journalWriter.write(REMOVE + ' ' + entry.key + '\n'); + } + journalWriter.flush(); + + if (size > maxSize || journalRebuildRequired()) { + executorService.submit(cleanupCallable); + } + } + + /** + * We only rebuild the journal when it will halve the size of the journal and + * eliminate at least 2000 ops. + */ + private boolean journalRebuildRequired() { + final int redundantOpCompactThreshold = 2000; + return redundantOpCount >= redundantOpCompactThreshold // + && redundantOpCount >= lruEntries.size(); + } + + /** + * Drops the entry for {@code key} if it exists and can be removed. Entries + * actively being edited cannot be removed. + * + * @return true if an entry was removed. + */ + public synchronized boolean remove(String key) throws IOException { + checkNotClosed(); + validateKey(key); + Entry entry = lruEntries.get(key); + if (entry == null || entry.currentEditor != null) { + return false; + } + + for (int i = 0; i < valueCount; i++) { + File file = entry.getCleanFile(i); + if (file.exists() && !file.delete()) { + throw new IOException("failed to delete " + file); + } + size -= entry.lengths[i]; + entry.lengths[i] = 0; + } + + redundantOpCount++; + journalWriter.append(REMOVE + ' ' + key + '\n'); + lruEntries.remove(key); + + if (journalRebuildRequired()) { + executorService.submit(cleanupCallable); + } + + return true; + } + + /** Returns true if this cache has been closed. */ + public synchronized boolean isClosed() { + return journalWriter == null; + } + + private void checkNotClosed() { + if (journalWriter == null) { + throw new IllegalStateException("cache is closed"); + } + } + + /** Force buffered operations to the filesystem. */ + public synchronized void flush() throws IOException { + checkNotClosed(); + trimToSize(); + journalWriter.flush(); + } + + /** Closes this cache. Stored values will remain on the filesystem. */ + public synchronized void close() throws IOException { + if (journalWriter == null) { + return; // Already closed. + } + for (Entry entry : new ArrayList<>(lruEntries.values())) { + if (entry.currentEditor != null) { + entry.currentEditor.abort(); + } + } + trimToSize(); + journalWriter.close(); + journalWriter = null; + } + + private void trimToSize() throws IOException { + while (size > maxSize) { + Map.Entry toEvict = lruEntries.entrySet().iterator().next(); + remove(toEvict.getKey()); + } + } + + /** + * Closes the cache and deletes all of its stored values. This will delete all + * files in the cache directory including files that weren't created by the + * cache. + */ + public void delete() throws IOException { + close(); + Util.deleteContents(directory); + } + + private void validateKey(String key) { + Matcher matcher = LEGAL_KEY_PATTERN.matcher(key); + if (!matcher.matches()) { + throw new IllegalArgumentException("keys must match regex " + STRING_KEY_PATTERN + ": \"" + key + "\""); + } + } + + /** A snapshot of the values for an entry. */ + public final class Snapshot implements Closeable { + private final String key; + private final long sequenceNumber; + private final InputStream[] ins; + private final long[] lengths; + + private Snapshot(String key, long sequenceNumber, InputStream[] ins, long[] lengths) { + this.key = key; + this.sequenceNumber = sequenceNumber; + this.ins = ins; + this.lengths = lengths; + } + + /** + * Returns an editor for this snapshot's entry, or null if either the entry has + * changed since this snapshot was created or if another edit is in progress. + */ + public Editor edit() throws IOException { + return DiskLruCache.this.edit(key, sequenceNumber); + } + + /** Returns the unbuffered stream with the value for {@code index}. */ + public InputStream getInputStream(int index) { + return ins[index]; + } + + /** Returns the string value for {@code index}. */ + public String getString(int index) throws IOException { + try (InputStream in = getInputStream(index)) { + return IOUtils.toString(in, StandardCharsets.UTF_8); + } + } + + /** Returns the byte length of the value for {@code index}. */ + public long getLength(int index) { + return lengths[index]; + } + + public void close() { + for (InputStream in : ins) { + Util.closeQuietly(in); + } + } + } + + private static final OutputStream NULL_OUTPUT_STREAM = new OutputStream() { + @Override + public void write(int b) { + // Eat all writes silently. Nom nom. + } + }; + + /** Edits the values for an entry. */ + public final class Editor { + private final Entry entry; + private final boolean[] written; + private boolean hasErrors; + private boolean committed; + + private Editor(Entry entry) { + this.entry = entry; + this.written = (entry.readable) ? null : new boolean[valueCount]; + } + + /** + * Returns an unbuffered input stream to read the last committed value, or null + * if no value has been committed. + */ + public InputStream newInputStream(int index) throws IOException { + synchronized (DiskLruCache.this) { + if (entry.currentEditor != this) { + throw new IllegalStateException(); + } + if (!entry.readable) { + return null; + } + try { + return new FileInputStream(entry.getCleanFile(index)); + } catch (FileNotFoundException e) { + return null; + } + } + } + + /** + * Returns the last committed value as a string, or null if no value has been + * committed. + */ + public String getString(int index) throws IOException { + InputStream in = newInputStream(index); + try { + return in != null ? IOUtils.toString(in, StandardCharsets.UTF_8) : null; + } finally { + Util.closeQuietly(in); + } + } + + /** + * Write a string to the specified index. + */ + public void setString(int index, String value) throws IOException { + OutputStream out = newOutputStream(index); + try { + IOUtils.write(value, out, StandardCharsets.UTF_8); + } finally { + Util.closeQuietly(out); + } + } + + /** + * Returns a new unbuffered output stream to write the value at {@code index}. + * If the underlying output stream encounters errors when writing to the + * filesystem, this edit will be aborted when {@link #commit} is called. The + * returned output stream does not throw IOExceptions. + */ + public OutputStream newOutputStream(int index) { + if (index < 0 || index >= valueCount) { + throw new IllegalArgumentException("Expected index " + index + " to " + + "be greater than 0 and less than the maximum value count " + "of " + valueCount); + } + synchronized (DiskLruCache.this) { + if (entry.currentEditor != this) { + throw new IllegalStateException(); + } + if (!entry.readable) { + written[index] = true; + } + File dirtyFile = entry.getDirtyFile(index); + FileOutputStream outputStream; + try { + outputStream = new FileOutputStream(dirtyFile); + } catch (FileNotFoundException e) { + // Attempt to recreate the cache directory. + directory.mkdirs(); + try { + outputStream = new FileOutputStream(dirtyFile); + } catch (FileNotFoundException e2) { + // We are unable to recover. Silently eat the writes. + return NULL_OUTPUT_STREAM; + } + } + return new FaultHidingOutputStream(outputStream); + } + } + + /** + * Commits this edit so it is visible to readers. This releases the edit lock so + * another edit may be started on the same key. + */ + public void commit() throws IOException { + if (hasErrors) { + completeEdit(this, false); + remove(entry.key); // The previous entry is stale. + } else { + completeEdit(this, true); + } + committed = true; + } + + /** + * Aborts this edit. This releases the edit lock so another edit may be started + * on the same key. + */ + public void abort() throws IOException { + completeEdit(this, false); + } + + public long getLength(int index) { + return entry.getDirtyFile(index).length(); + } + + public void abortUnlessCommitted() { + if (!committed) { + try { + abort(); + } catch (IOException ignored) { + } + } + } + + private class FaultHidingOutputStream extends FilterOutputStream { + private FaultHidingOutputStream(OutputStream out) { + super(out); + } + + @Override + public void write(int oneByte) { + try { + out.write(oneByte); + } catch (IOException e) { + hasErrors = true; + } + } + + @Override + public void write(byte[] buffer, int offset, int length) { + try { + out.write(buffer, offset, length); + } catch (IOException e) { + hasErrors = true; + } + } + + @Override + public void close() { + try { + out.close(); + } catch (IOException e) { + hasErrors = true; + } + } + + @Override + public void flush() { + try { + out.flush(); + } catch (IOException e) { + hasErrors = true; + } + } + } + } + + private final class Entry { + private final String key; + + /** Lengths of this entry's files. */ + private final long[] lengths; + + /** True if this entry has ever been published. */ + private boolean readable; + + /** The ongoing edit or null if this entry is not being edited. */ + private Editor currentEditor; + + /** The sequence number of the most recently committed edit to this entry. */ + private long sequenceNumber; + + private Entry(String key) { + this.key = key; + this.lengths = new long[valueCount]; + } + + public String getLengths() { + StringBuilder result = new StringBuilder(); + for (long size : lengths) { + result.append(' ').append(size); + } + return result.toString(); + } + + /** Set lengths using decimal numbers like "10123". */ + private void setLengths(String[] strings) throws IOException { + if (strings.length != valueCount) { + throw invalidLengths(strings); + } + + try { + for (int i = 0; i < strings.length; i++) { + lengths[i] = Long.parseLong(strings[i]); + } + } catch (NumberFormatException e) { + throw invalidLengths(strings); + } + } + + private IOException invalidLengths(String[] strings) throws IOException { + throw new IOException("unexpected journal line: " + java.util.Arrays.toString(strings)); + } + + public File getCleanFile(int i) { + return new File(directory, key + "." + i); + } + + public File getDirtyFile(int i) { + return new File(directory, key + "." + i + ".tmp"); + } + } +} diff --git a/src/main/java/mdnet/cache/StrictLineReader.java b/src/main/java/mdnet/cache/StrictLineReader.java new file mode 100644 index 0000000..8677a9c --- /dev/null +++ b/src/main/java/mdnet/cache/StrictLineReader.java @@ -0,0 +1,216 @@ +/* + * Copyright (C) 2012 The Android Open Source Project + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package mdnet.cache; + +import java.io.ByteArrayOutputStream; +import java.io.Closeable; +import java.io.EOFException; +import java.io.IOException; +import java.io.InputStream; +import java.io.UnsupportedEncodingException; +import java.nio.charset.Charset; +import java.nio.charset.StandardCharsets; + +/** + * Buffers input from an {@link InputStream} for reading lines. + * + *

+ * This class is used for buffered reading of lines. For purposes of this class, + * a line ends with "\n" or "\r\n". End of input is reported by throwing + * {@code EOFException}. Unterminated line at end of input is invalid and will + * be ignored, the caller may use {@code + * hasUnterminatedLine()} to detect it after catching the {@code EOFException}. + * + *

+ * This class is intended for reading input that strictly consists of lines, + * such as line-based cache entries or cache journal. Unlike the + * {@link java.io.BufferedReader} which in conjunction with + * {@link java.io.InputStreamReader} provides similar functionality, this class + * uses different end-of-input reporting and a more restrictive definition of a + * line. + * + *

+ * This class supports only charsets that encode '\r' and '\n' as a single byte + * with value 13 and 10, respectively, and the representation of no other + * character contains these values. We currently check in constructor that the + * charset is UTF-8. + */ +final class StrictLineReader implements Closeable { + private static final byte CR = (byte) '\r'; + private static final byte LF = (byte) '\n'; + + private final InputStream in; + private final Charset charset; + + /* + * Buffered data is stored in {@code buf}. As long as no exception occurs, 0 <= + * pos <= end and the data in the range [pos, end) is buffered for reading. At + * end of input, if there is an unterminated line, we set end == -1, otherwise + * end == pos. If the underlying {@code InputStream} throws an {@code + * IOException}, end may remain as either pos or -1. + */ + private byte[] buf; + private int pos; + private int end; + + /** + * Constructs a new {@code LineReader} with the specified charset and the + * default capacity. + * + * @param in + * the {@code InputStream} to read data from. + * @param charset + * the charset used to decode data. Only UTF-8 is supported. + * @throws NullPointerException + * if {@code in} or {@code charset} is null. + * @throws IllegalArgumentException + * if the specified charset is not supported. + */ + public StrictLineReader(InputStream in, Charset charset) { + this(in, 8192, charset); + } + + /** + * Constructs a new {@code LineReader} with the specified capacity and charset. + * + * @param in + * the {@code InputStream} to read data from. + * @param capacity + * the capacity of the buffer. + * @param charset + * the charset used to decode data. Only UTF-8 is supported. + * @throws NullPointerException + * if {@code in} or {@code charset} is null. + * @throws IllegalArgumentException + * if {@code capacity} is negative or zero or the specified charset + * is not supported. + */ + public StrictLineReader(InputStream in, int capacity, Charset charset) { + if (in == null || charset == null) { + throw new NullPointerException(); + } + if (capacity < 0) { + throw new IllegalArgumentException("capacity <= 0"); + } + if (!(charset.equals(StandardCharsets.UTF_8))) { + throw new IllegalArgumentException("Unsupported encoding"); + } + + this.in = in; + this.charset = charset; + buf = new byte[capacity]; + } + + /** + * Closes the reader by closing the underlying {@code InputStream} and marking + * this reader as closed. + * + * @throws IOException + * for errors when closing the underlying {@code InputStream}. + */ + public void close() throws IOException { + synchronized (in) { + if (buf != null) { + buf = null; + in.close(); + } + } + } + + /** + * Reads the next line. A line ends with {@code "\n"} or {@code "\r\n"}, this + * end of line marker is not included in the result. + * + * @return the next line from the input. + * @throws IOException + * for underlying {@code InputStream} errors. + * @throws EOFException + * for the end of source stream. + */ + public String readLine() throws IOException { + synchronized (in) { + if (buf == null) { + throw new IOException("LineReader is closed"); + } + + // Read more data if we are at the end of the buffered data. + // Though it's an error to read after an exception, we will let {@code + // fillBuf()} + // throw again if that happens; thus we need to handle end == -1 as well as end + // == pos. + if (pos >= end) { + fillBuf(); + } + // Try to find LF in the buffered data and return the line if successful. + for (int i = pos; i != end; ++i) { + if (buf[i] == LF) { + int lineEnd = (i != pos && buf[i - 1] == CR) ? i - 1 : i; + String res = new String(buf, pos, lineEnd - pos, charset.name()); + pos = i + 1; + return res; + } + } + + // Let's anticipate up to 80 characters on top of those already read. + ByteArrayOutputStream out = new ByteArrayOutputStream(end - pos + 80) { + @Override + public String toString() { + int length = (count > 0 && buf[count - 1] == CR) ? count - 1 : count; + try { + return new String(buf, 0, length, charset.name()); + } catch (UnsupportedEncodingException e) { + throw new AssertionError(e); // Since we control the charset this will never happen. + } + } + }; + + while (true) { + out.write(buf, pos, end - pos); + // Mark unterminated line in case fillBuf throws EOFException or IOException. + end = -1; + fillBuf(); + // Try to find LF in the buffered data and return the line if successful. + for (int i = pos; i != end; ++i) { + if (buf[i] == LF) { + if (i != pos) { + out.write(buf, pos, i - pos); + } + pos = i + 1; + return out.toString(); + } + } + } + } + } + + public boolean hasUnterminatedLine() { + return end == -1; + } + + /** + * Reads new input data into the buffer. Call only with pos == end or end == -1, + * depending on the desired outcome if the function throws. + */ + private void fillBuf() throws IOException { + int result = in.read(buf, 0, buf.length); + if (result == -1) { + throw new EOFException(); + } + pos = 0; + end = result; + } +} diff --git a/src/main/java/mdnet/cache/Util.java b/src/main/java/mdnet/cache/Util.java new file mode 100644 index 0000000..74078e8 --- /dev/null +++ b/src/main/java/mdnet/cache/Util.java @@ -0,0 +1,57 @@ +/* + * Copyright (C) 2010 The Android Open Source Project + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package mdnet.cache; + +import java.io.Closeable; +import java.io.File; +import java.io.IOException; + +/** Junk drawer of utility methods. */ +final class Util { + private Util() { + } + + /** + * Deletes the contents of {@code dir}. Throws an IOException if any file could + * not be deleted, or if {@code dir} is not a readable directory. + */ + static void deleteContents(File dir) throws IOException { + File[] files = dir.listFiles(); + if (files == null) { + throw new IOException("not a readable directory: " + dir); + } + for (File file : files) { + if (file.isDirectory()) { + deleteContents(file); + } + if (!file.delete()) { + throw new IOException("failed to delete file: " + file); + } + } + } + + static void closeQuietly(/* Auto */Closeable closeable) { + if (closeable != null) { + try { + closeable.close(); + } catch (RuntimeException rethrown) { + throw rethrown; + } catch (Exception ignored) { + } + } + } +} diff --git a/src/main/kotlin/mdnet/base/Application.kt b/src/main/kotlin/mdnet/base/Application.kt new file mode 100644 index 0000000..fe7c339 --- /dev/null +++ b/src/main/kotlin/mdnet/base/Application.kt @@ -0,0 +1,184 @@ +/* ktlint-disable no-wildcard-imports */ +package mdnet.base + +import mdnet.cache.DiskLruCache +import org.apache.http.client.config.CookieSpecs +import org.apache.http.client.config.RequestConfig +import org.apache.http.impl.client.HttpClients +import org.http4k.client.ApacheClient +import org.http4k.core.BodyMode +import org.http4k.core.Filter +import org.http4k.core.HttpHandler +import org.http4k.core.Method +import org.http4k.core.Request +import org.http4k.core.Response +import org.http4k.core.Status +import org.http4k.core.then +import org.http4k.filter.MaxAgeTtl +import org.http4k.filter.ServerFilters +import org.http4k.lens.Path +import org.http4k.routing.bind +import org.http4k.routing.routes +import org.http4k.server.Http4kServer +import org.http4k.server.asServer +import org.slf4j.LoggerFactory +import java.io.InputStream +import java.security.MessageDigest +import java.time.ZoneOffset +import java.time.ZonedDateTime +import java.time.format.DateTimeFormatter +import java.util.* +import java.util.concurrent.Executors +import java.util.concurrent.atomic.AtomicReference +import javax.crypto.Cipher +import javax.crypto.CipherInputStream +import javax.crypto.CipherOutputStream +import javax.crypto.spec.SecretKeySpec + +private val LOGGER = LoggerFactory.getLogger("Application") + +fun getServer(cache: DiskLruCache, serverSettings: ServerSettings, clientSettings: ClientSettings, statistics: AtomicReference): Http4kServer { + val executor = Executors.newCachedThreadPool() + + val client = ApacheClient(responseBodyMode = BodyMode.Stream, client = HttpClients.custom() + .setDefaultRequestConfig(RequestConfig.custom() + .setCookieSpec(CookieSpecs.IGNORE_COOKIES) + .build()) + .build()) + + val app = { request: Request -> + + val chapterHash = Path.of("chapterHash")(request) + val fileName = Path.of("fileName")(request) + val cacheId = md5String("$chapterHash.$fileName") + + statistics.get().requestsServed.incrementAndGet() + + // Netty doesn't do Content-Length or Content-Type, so we have the pleasure of doing that ourselves + fun respond(input: InputStream, length: String, type: String): Response = + Response(Status.OK).header("Content-Length", length) + .header("Content-Type", type) + .header("X-Content-Type-Options", "nosniff") + .body(input, length.toLong()) + + val snapshot = cache.get(cacheId) + if (snapshot != null) { + statistics.get().cacheHits.incrementAndGet() + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Request for $chapterHash/$fileName hit cache") + } + + respond(CipherInputStream(snapshot.getInputStream(0), getRc4(cacheId)), + snapshot.getLength(0).toString(), snapshot.getString(1)) + } else { + statistics.get().cacheMisses.incrementAndGet() + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Request for $chapterHash/$fileName missed cache") + } + val mdResponse = client(Request(Method.GET, "${serverSettings.imageServer}${request.uri}")) + + if (mdResponse.status != Status.OK) { + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Request for $chapterHash/$fileName errored with status {}", mdResponse.status) + } + mdResponse.close() + Response(mdResponse.status) + } else { + val contentLength = mdResponse.header("Content-Length")!! + val contentType = mdResponse.header("Content-Type")!! + + val editor = cache.edit(cacheId) + + // A null editor means that this file is being written to + // concurrently so we skip the cache process + if (editor != null) { + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Request for $chapterHash/$fileName is being cached and served") + } + editor.setString(1, contentType) + + val tee = CachingInputStream(mdResponse.body.stream, + executor, CipherOutputStream(editor.newOutputStream(0), getRc4(cacheId))) { + // Note: if neither of the options get called/are in the log + // check that tee gets closed and for exceptions in this lambda + if (editor.getLength(0) == contentLength.toLong()) { + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Cache download $chapterHash/$fileName committed") + } + + editor.commit() + } else { + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Cache download $chapterHash/$fileName aborted") + } + + editor.abort() + } + } + respond(tee, contentLength, contentType) + } else { + if (LOGGER.isTraceEnabled) { + LOGGER.trace("Request for $chapterHash/$fileName is being served") + } + + respond(mdResponse.body.stream, contentLength, contentType) + } + } + } + } + + return catchAllHideDetails() + .then(ServerFilters.CatchLensFailure) + .then(addCommonHeaders()) + .then( + routes( + "/data/{chapterHash}/{fileName}" bind Method.GET to app + ) + ) + .asServer(Netty(serverSettings.tls, clientSettings, statistics)) +} + +private fun getRc4(key: String): Cipher { + val rc4 = Cipher.getInstance("RC4") + rc4.init(Cipher.ENCRYPT_MODE, SecretKeySpec(key.toByteArray(), "RC4")) + return rc4 +} + +private val HTTP_TIME_FORMATTER = DateTimeFormatter.ofPattern("EEE, dd MMM yyyy HH:mm:ss O", Locale.ENGLISH) + +private fun addCommonHeaders(): Filter { + return Filter { next: HttpHandler -> + { request: Request -> + val now = ZonedDateTime.now(ZoneOffset.UTC) + val response = next(request) + response.header("Date", HTTP_TIME_FORMATTER.format(now)) + .header("Server", "Mangadex@Home Node") + .header("Cache-Control", listOf("public", MaxAgeTtl(Constants.MAX_AGE_CACHE).toHeaderValue()).joinToString(", ")) + .header("Expires", HTTP_TIME_FORMATTER.format(now.plusSeconds(Constants.MAX_AGE_CACHE.seconds))) + .header("Cache-Control", "public, max-age=604800") // 1 week browser cache + .header("Timing-Allow-Origin", "https://mangadex.org") + } + } +} + +private fun catchAllHideDetails(): Filter { + return Filter { next: HttpHandler -> + { request: Request -> + try { + next(request) + } catch (e: Exception) { + Response(Status.INTERNAL_SERVER_ERROR) + } + } + } +} + +private fun md5String(stringToHash: String): String { + val digest = MessageDigest.getInstance("MD5") + + val sb = StringBuilder() + for (b in digest.digest(stringToHash.toByteArray())) { + sb.append(String.format("%02x", b)) + } + return sb.toString() +} diff --git a/src/main/kotlin/mdnet/base/Keys.kt b/src/main/kotlin/mdnet/base/Keys.kt new file mode 100644 index 0000000..02a0767 --- /dev/null +++ b/src/main/kotlin/mdnet/base/Keys.kt @@ -0,0 +1,145 @@ +//The code below is adapted from from https://github.com/Mastercard/client-encryption-java/blob/master/src/main/java/com/mastercard/developer/utils/EncryptionUtils.java +// +//Copyright (c) 2019 Mastercard +// +//Permission is hereby granted, free of charge, to any person obtaining a copy +//of this software and associated documentation files (the "Software"), to deal +//in the Software without restriction, including without limitation the rights +//to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +//copies of the Software, and to permit persons to whom the Software is +//furnished to do so, subject to the following conditions: +// +//The above copyright notice and this permission notice shall be included in all +//copies or substantial portions of the Software. +// +//THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +//IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +//FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +//AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +//LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +//OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +//SOFTWARE. +package mdnet.base + +import java.io.ByteArrayInputStream +import java.io.ByteArrayOutputStream +import java.io.InputStream +import java.security.KeyFactory +import java.security.PrivateKey +import java.security.cert.CertificateFactory +import java.security.cert.X509Certificate +import java.security.spec.InvalidKeySpecException +import java.security.spec.PKCS8EncodedKeySpec + +private const val PKCS_1_PEM_HEADER = "-----BEGIN RSA PRIVATE KEY-----" +private const val PKCS_1_PEM_FOOTER = "-----END RSA PRIVATE KEY-----" +private const val PKCS_8_PEM_HEADER = "-----BEGIN PRIVATE KEY-----" +private const val PKCS_8_PEM_FOOTER = "-----END PRIVATE KEY-----" + +fun getX509Cert(certificate: String): X509Certificate { + val targetStream: InputStream = ByteArrayInputStream(certificate.toByteArray()) + return CertificateFactory.getInstance("X509").generateCertificate(targetStream) as X509Certificate +} + +fun getPrivateKey(privateKey: String): PrivateKey { + return loadKey(privateKey)!! +} + +fun loadKey(keyDataString: String): PrivateKey? { + if (keyDataString.contains(PKCS_1_PEM_HEADER)) { + // OpenSSL / PKCS#1 Base64 PEM encoded file + val fixedString = keyDataString.replace(PKCS_1_PEM_HEADER, "").replace(PKCS_1_PEM_FOOTER, "") + return readPkcs1PrivateKey(base64Decode(fixedString)) + } + if (keyDataString.contains(PKCS_8_PEM_HEADER)) { + // PKCS#8 Base64 PEM encoded file + val fixedString = keyDataString.replace(PKCS_8_PEM_HEADER, "").replace(PKCS_8_PEM_FOOTER, "") + return readPkcs1PrivateKey(base64Decode(fixedString)) + } + + return null +} + +private fun readPkcs8PrivateKey(pkcs8Bytes: ByteArray): PrivateKey? { + val keyFactory = KeyFactory.getInstance("RSA", "SunRsaSign") + val keySpec = PKCS8EncodedKeySpec(pkcs8Bytes) + return try { + keyFactory.generatePrivate(keySpec) + } catch (e: InvalidKeySpecException) { + throw IllegalArgumentException("Unexpected key format!", e) + } +} + +private fun readPkcs1PrivateKey(pkcs1Bytes: ByteArray): PrivateKey? { + // We can't use Java internal APIs to parse ASN.1 structures, so we build a PKCS#8 key Java can understand + val pkcs1Length = pkcs1Bytes.size + val totalLength = pkcs1Length + 22 + val pkcs8Header = byteArrayOf( + 0x30, 0x82.toByte(), (totalLength shr 8 and 0xff).toByte(), (totalLength and 0xff).toByte(), // Sequence + total length + 0x2, 0x1, 0x0, // Integer (0) + 0x30, 0xD, 0x6, 0x9, 0x2A, 0x86.toByte(), 0x48, 0x86.toByte(), 0xF7.toByte(), 0xD, 0x1, 0x1, 0x1, 0x5, 0x0, // Sequence: 1.2.840.113549.1.1.1, NULL + 0x4, 0x82.toByte(), (pkcs1Length shr 8 and 0xff).toByte(), (pkcs1Length and 0xff).toByte() // Octet string + length + ) + val pkcs8bytes = join(pkcs8Header, pkcs1Bytes) + return readPkcs8PrivateKey(pkcs8bytes) +} + +private fun join(byteArray1: ByteArray, byteArray2: ByteArray): ByteArray { + val bytes = ByteArray(byteArray1.size + byteArray2.size) + System.arraycopy(byteArray1, 0, bytes, 0, byteArray1.size) + System.arraycopy(byteArray2, 0, bytes, byteArray1.size, byteArray2.size) + return bytes +} + +private val b64ints = intArrayOf( + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63, 52, 53, 54, + 55, 56, 57, 58, 59, 60, 61, -1, -1, -1, -1, -1, -1, -1, 0, 1, 2, + 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, + 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1, -1, 26, 27, 28, 29, 30, + 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, + 48, 49, 50, 51, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1) + +private fun base64Decode(value: String): ByteArray { + val valueBytes = value.toByteArray() + val outputStream = ByteArrayOutputStream() + var i = 0 + while (i < valueBytes.size) { + var b: Int + b = if (b64ints[valueBytes[i].toInt()] != -1) { + b64ints[valueBytes[i].toInt()] and 0xFF shl 18 + } else { + i++ + continue + } + var num = 0 + if (i + 1 < valueBytes.size && b64ints[valueBytes[i + 1].toInt()] != -1) { + b = b or (b64ints[valueBytes[i + 1].toInt()] and 0xFF shl 12) + num++ + } + if (i + 2 < valueBytes.size && b64ints[valueBytes[i + 2].toInt()] != -1) { + b = b or (b64ints[valueBytes[i + 2].toInt()] and 0xFF shl 6) + num++ + } + if (i + 3 < valueBytes.size && b64ints[valueBytes[i + 3].toInt()] != -1) { + b = b or (b64ints[valueBytes[i + 3].toInt()] and 0xFF) + num++ + } + while (num > 0) { + val c = b and 0xFF0000 shr 16 + outputStream.write(c) + b = b shl 8 + num-- + } + i += 4 + } + return outputStream.toByteArray() +} diff --git a/src/main/kotlin/mdnet/base/Netty.kt b/src/main/kotlin/mdnet/base/Netty.kt new file mode 100644 index 0000000..6e18e13 --- /dev/null +++ b/src/main/kotlin/mdnet/base/Netty.kt @@ -0,0 +1,126 @@ +package mdnet.base + +import io.netty.bootstrap.ServerBootstrap +import io.netty.buffer.Unpooled +import io.netty.channel.ChannelFactory +import io.netty.channel.ChannelFuture +import io.netty.channel.ChannelHandler.Sharable +import io.netty.channel.ChannelHandlerContext +import io.netty.channel.ChannelInboundHandlerAdapter +import io.netty.channel.ChannelInitializer +import io.netty.channel.ChannelOption +import io.netty.channel.ServerChannel +import io.netty.channel.nio.NioEventLoopGroup +import io.netty.channel.socket.SocketChannel +import io.netty.channel.socket.nio.NioServerSocketChannel +import io.netty.handler.codec.http.DefaultFullHttpResponse +import io.netty.handler.codec.http.HttpHeaderNames +import io.netty.handler.codec.http.HttpObjectAggregator +import io.netty.handler.codec.http.HttpResponseStatus +import io.netty.handler.codec.http.HttpServerCodec +import io.netty.handler.codec.http.HttpUtil +import io.netty.handler.codec.http.HttpVersion +import io.netty.handler.ssl.OptionalSslHandler +import io.netty.handler.ssl.SslContextBuilder +import io.netty.handler.ssl.SslHandler +import io.netty.handler.stream.ChunkedWriteHandler +import io.netty.handler.traffic.GlobalTrafficShapingHandler +import io.netty.handler.traffic.TrafficCounter +import org.http4k.core.HttpHandler +import org.http4k.server.Http4kChannelHandler +import org.http4k.server.Http4kServer +import org.http4k.server.ServerConfig +import java.net.InetSocketAddress +import java.nio.charset.StandardCharsets +import java.util.concurrent.TimeUnit +import java.util.concurrent.atomic.AtomicInteger +import java.util.concurrent.atomic.AtomicReference + +@Sharable +class ConnectionCounter : ChannelInboundHandlerAdapter() { + private val connections = AtomicInteger() + + override fun channelActive(ctx: ChannelHandlerContext) { + val sslHandler = ctx.pipeline()[SslHandler::class.java] + + if (sslHandler != null) { + sslHandler.handshakeFuture().addListener { + handleConnection(ctx) + } + } else { + handleConnection(ctx) + } + } + + private fun handleConnection(ctx: ChannelHandlerContext) { + if (connections.incrementAndGet() <= Constants.MAX_CONCURRENT_CONNECTIONS) { + super.channelActive(ctx) + } else { + val response = Unpooled.copiedBuffer(Constants.OVERLOADED_MESSAGE, StandardCharsets.UTF_8) + val res = + DefaultFullHttpResponse(HttpVersion.HTTP_1_1, HttpResponseStatus.SERVICE_UNAVAILABLE, response) + res.headers().set(HttpHeaderNames.CONTENT_TYPE, "text/html; charset=UTF-8") + HttpUtil.setContentLength(res, response.readableBytes().toLong()) + + ctx.writeAndFlush(res) + ctx.close() + } + } + + override fun channelInactive(ctx: ChannelHandlerContext) { + super.channelInactive(ctx) + connections.decrementAndGet() + } +} + +class Netty(private val tls: ServerSettings.TlsCert, private val clientSettings: ClientSettings, private val stats: AtomicReference) : ServerConfig { + override fun toServer(httpHandler: HttpHandler): Http4kServer = object : Http4kServer { + private val masterGroup = NioEventLoopGroup() + private val workerGroup = NioEventLoopGroup() + private lateinit var closeFuture: ChannelFuture + private lateinit var address: InetSocketAddress + + private val counter = ConnectionCounter() + private val burstLimiter = object : GlobalTrafficShapingHandler( + workerGroup, 1024 * clientSettings.maxBurstRateKibPerSecond, 0, 50) { + override fun doAccounting(counter: TrafficCounter) { + stats.get().bytesSent.getAndAdd(counter.cumulativeWrittenBytes()) + } + } + + override fun start(): Http4kServer = apply { + val sslContext = SslContextBuilder.forServer(getPrivateKey(tls.privateKey), getX509Cert(tls.certificate)).build() + + val bootstrap = ServerBootstrap() + bootstrap.group(masterGroup, workerGroup) + .channelFactory(ChannelFactory { NioServerSocketChannel() }) + .childHandler(object : ChannelInitializer() { + public override fun initChannel(ch: SocketChannel) { + + ch.pipeline().addLast("ssl", OptionalSslHandler(sslContext)) + + ch.pipeline().addLast("codec", HttpServerCodec()) + ch.pipeline().addLast("counter", counter) + ch.pipeline().addLast("aggregator", HttpObjectAggregator(65536)) + ch.pipeline().addLast("burstLimiter", burstLimiter) + ch.pipeline().addLast("streamer", ChunkedWriteHandler()) + ch.pipeline().addLast("handler", Http4kChannelHandler(httpHandler)) + } + }) + .option(ChannelOption.SO_BACKLOG, 1000) + .childOption(ChannelOption.SO_KEEPALIVE, true) + + val channel = bootstrap.bind(clientSettings.clientPort).sync().channel() + address = channel.localAddress() as InetSocketAddress + closeFuture = channel.closeFuture() + } + + override fun stop() = apply { + masterGroup.shutdownGracefully(5, 15, TimeUnit.SECONDS).sync() + workerGroup.shutdownGracefully(5, 15, TimeUnit.SECONDS).sync() + closeFuture.sync() + } + + override fun port(): Int = if (clientSettings.clientPort > 0) clientSettings.clientPort else address.port + } +} diff --git a/src/main/resources/logback.xml b/src/main/resources/logback.xml new file mode 100644 index 0000000..369fc65 --- /dev/null +++ b/src/main/resources/logback.xml @@ -0,0 +1,31 @@ + + + log/latest.log + + log/logFile.%d{yyyy-MM-dd}.log + 14 + 5MB + + + + %d{YYYY-MM-dd HH:mm:ss} %-5level %logger{36} - %msg%n + + + + + + + + + + %d{YYYY-MM-dd HH:mm:ss} %-5level %logger{36} - %msg%n + + + + + + + + + +