From 6cd033449fd328410128bc3e840f4b8d3d74f052 Mon Sep 17 00:00:00 2001 From: Tobi Smethurst <31960611+tsmethurst@users.noreply.github.com> Date: Mon, 17 May 2021 19:06:58 +0200 Subject: [PATCH] Refine statuses (#26) Remote media is now dereferenced and attached properly to incoming federated statuses. Mentions are now dereferenced and attached properly to incoming federated statuses. Small fixes to status visibility. Allow URL params for filtering statuses: // ExcludeRepliesKey is for specifying whether to exclude replies in a list of returned statuses by an account. // PinnedKey is for specifying whether to include pinned statuses in a list of returned statuses by an account. // MaxIDKey is for specifying the maximum ID of the status to retrieve. // MediaOnlyKey is for specifying that only statuses with media should be returned in a list of returned statuses by an account. Add endpoint for fetching an account's statuses. --- internal/api/client/account/account.go | 17 ++ internal/api/client/account/followers.go | 49 ++++ internal/api/client/account/statuses.go | 117 ++++++++ internal/api/model/status.go | 28 +- internal/api/s2s/user/userget.go | 2 +- internal/db/db.go | 11 +- internal/db/pg/pg.go | 91 +++--- internal/federation/federating_db.go | 32 ++- internal/federation/federatingprotocol.go | 50 ---- internal/federation/federator.go | 4 +- internal/federation/util.go | 3 +- internal/gotosocial/actions.go | 1 - internal/gtsmodel/messages.go | 29 ++ internal/gtsmodel/status.go | 4 +- internal/media/{media.go => handler.go} | 264 +++--------------- .../media/{media_test.go => handler_test.go} | 0 internal/media/mock_MediaHandler.go | 59 ---- internal/media/processicon.go | 141 ++++++++++ internal/media/processimage.go | 128 +++++++++ internal/media/processvideo.go | 23 ++ internal/media/test/test-jpeg-processed.jpg | Bin 300156 -> 771517 bytes internal/media/test/test-jpeg-thumbnail.jpg | Bin 6790 -> 29611 bytes internal/media/util.go | 8 +- internal/message/accountprocess.go | 127 +++++++++ internal/message/adminprocess.go | 18 ++ internal/message/appprocess.go | 18 ++ internal/message/error.go | 18 ++ internal/message/fediprocess.go | 22 +- internal/message/fromclientapiprocess.go | 73 +++++ .../fromcommonprocess.go} | 16 +- internal/message/fromfederatorprocess.go | 208 ++++++++++++++ internal/message/frprocess.go | 18 ++ internal/message/instanceprocess.go | 18 ++ internal/message/mediaprocess.go | 20 +- internal/message/processor.go | 138 +++------ internal/message/processorutil.go | 18 ++ internal/message/statusprocess.go | 40 ++- internal/router/router.go | 2 +- internal/transport/controller.go | 19 +- internal/transport/transport.go | 77 +++++ internal/typeutils/asextractionutil.go | 38 ++- internal/typeutils/asinterfaces.go | 14 +- internal/typeutils/astointernal.go | 2 +- internal/typeutils/internaltofrontend.go | 19 +- testrig/db.go | 1 - 45 files changed, 1415 insertions(+), 570 deletions(-) create mode 100644 internal/api/client/account/followers.go create mode 100644 internal/api/client/account/statuses.go create mode 100644 internal/gtsmodel/messages.go rename internal/media/{media.go => handler.go} (57%) rename internal/media/{media_test.go => handler_test.go} (100%) delete mode 100644 internal/media/mock_MediaHandler.go create mode 100644 internal/media/processicon.go create mode 100644 internal/media/processimage.go create mode 100644 internal/media/processvideo.go create mode 100644 internal/message/fromclientapiprocess.go rename internal/{gtsmodel/statuspin.go => message/fromcommonprocess.go} (57%) create mode 100644 internal/message/fromfederatorprocess.go create mode 100644 internal/transport/transport.go diff --git a/internal/api/client/account/account.go b/internal/api/client/account/account.go index dce8102..1e4b716 100644 --- a/internal/api/client/account/account.go +++ b/internal/api/client/account/account.go @@ -32,6 +32,17 @@ import ( ) const ( + // LimitKey is for setting the return amount limit for eg., requesting an account's statuses + LimitKey = "limit" + // ExcludeRepliesKey is for specifying whether to exclude replies in a list of returned statuses by an account. + ExcludeRepliesKey = "exclude_replies" + // PinnedKey is for specifying whether to include pinned statuses in a list of returned statuses by an account. + PinnedKey = "pinned" + // MaxIDKey is for specifying the maximum ID of the status to retrieve. + MaxIDKey = "max_id" + // MediaOnlyKey is for specifying that only statuses with media should be returned in a list of returned statuses by an account. + MediaOnlyKey = "only_media" + // IDKey is the key to use for retrieving account ID in requests IDKey = "id" // BasePath is the base API path for this module @@ -42,6 +53,10 @@ const ( VerifyPath = BasePath + "/verify_credentials" // UpdateCredentialsPath is for updating account credentials UpdateCredentialsPath = BasePath + "/update_credentials" + // GetStatusesPath is for showing an account's statuses + GetStatusesPath = BasePathWithID + "/statuses" + // GetFollowersPath is for showing an account's followers + GetFollowersPath = BasePathWithID + "/followers" ) // Module implements the ClientAPIModule interface for account-related actions @@ -65,6 +80,8 @@ func (m *Module) Route(r router.Router) error { r.AttachHandler(http.MethodPost, BasePath, m.AccountCreatePOSTHandler) r.AttachHandler(http.MethodGet, BasePathWithID, m.muxHandler) r.AttachHandler(http.MethodPatch, BasePathWithID, m.muxHandler) + r.AttachHandler(http.MethodGet, GetStatusesPath, m.AccountStatusesGETHandler) + r.AttachHandler(http.MethodGet, GetFollowersPath, m.AccountFollowersGETHandler) return nil } diff --git a/internal/api/client/account/followers.go b/internal/api/client/account/followers.go new file mode 100644 index 0000000..3401df2 --- /dev/null +++ b/internal/api/client/account/followers.go @@ -0,0 +1,49 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package account + +import ( + "net/http" + + "github.com/gin-gonic/gin" + "github.com/superseriousbusiness/gotosocial/internal/oauth" +) + +// AccountFollowersGETHandler serves the followers of the requested account, if they're visible to the requester. +func (m *Module) AccountFollowersGETHandler(c *gin.Context) { + authed, err := oauth.Authed(c, true, true, true, true) + if err != nil { + c.JSON(http.StatusUnauthorized, gin.H{"error": "unauthorized"}) + return + } + + targetAcctID := c.Param(IDKey) + if targetAcctID == "" { + c.JSON(http.StatusBadRequest, gin.H{"error": "no account id specified"}) + return + } + + followers, errWithCode := m.processor.AccountFollowersGet(authed, targetAcctID) + if errWithCode != nil { + c.JSON(errWithCode.Code(), gin.H{"error": errWithCode.Safe()}) + return + } + + c.JSON(http.StatusOK, followers) +} diff --git a/internal/api/client/account/statuses.go b/internal/api/client/account/statuses.go new file mode 100644 index 0000000..f03a942 --- /dev/null +++ b/internal/api/client/account/statuses.go @@ -0,0 +1,117 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package account + +import ( + "net/http" + "strconv" + + "github.com/gin-gonic/gin" + "github.com/superseriousbusiness/gotosocial/internal/oauth" +) + +// AccountStatusesGETHandler serves the statuses of the requested account, if they're visible to the requester. +// +// Several different filters might be passed into this function in the query: +// +// limit -- show only limit number of statuses +// exclude_replies -- exclude statuses that are a reply to another status +// max_id -- the maximum ID of the status to show +// pinned -- show only pinned statuses +// media_only -- show only statuses that have media attachments +func (m *Module) AccountStatusesGETHandler(c *gin.Context) { + l := m.log.WithField("func", "AccountStatusesGETHandler") + + authed, err := oauth.Authed(c, false, false, false, false) + if err != nil { + l.Debugf("error authing: %s", err) + c.JSON(http.StatusUnauthorized, gin.H{"error": "unauthorized"}) + return + } + + targetAcctID := c.Param(IDKey) + if targetAcctID == "" { + l.Debug("no account id specified in query") + c.JSON(http.StatusBadRequest, gin.H{"error": "no account id specified"}) + return + } + + limit := 30 + limitString := c.Query(LimitKey) + if limitString != "" { + i, err := strconv.ParseInt(limitString, 10, 64) + if err != nil { + l.Debugf("error parsing limit string: %s", err) + c.JSON(http.StatusBadRequest, gin.H{"error": "couldn't parse limit query param"}) + return + } + limit = int(i) + } + + excludeReplies := false + excludeRepliesString := c.Query(ExcludeRepliesKey) + if excludeRepliesString != "" { + i, err := strconv.ParseBool(excludeRepliesString) + if err != nil { + l.Debugf("error parsing replies string: %s", err) + c.JSON(http.StatusBadRequest, gin.H{"error": "couldn't parse exclude replies query param"}) + return + } + excludeReplies = i + } + + maxID := "" + maxIDString := c.Query(MaxIDKey) + if maxIDString != "" { + maxID = maxIDString + } + + pinned := false + pinnedString := c.Query(PinnedKey) + if pinnedString != "" { + i, err := strconv.ParseBool(pinnedString) + if err != nil { + l.Debugf("error parsing pinned string: %s", err) + c.JSON(http.StatusBadRequest, gin.H{"error": "couldn't parse pinned query param"}) + return + } + pinned = i + } + + mediaOnly := false + mediaOnlyString := c.Query(MediaOnlyKey) + if mediaOnlyString != "" { + i, err := strconv.ParseBool(mediaOnlyString) + if err != nil { + l.Debugf("error parsing media only string: %s", err) + c.JSON(http.StatusBadRequest, gin.H{"error": "couldn't parse media only query param"}) + return + } + mediaOnly = i + } + + statuses, errWithCode := m.processor.AccountStatusesGet(authed, targetAcctID, limit, excludeReplies, maxID, pinned, mediaOnly) + if errWithCode != nil { + l.Debugf("error from processor account statuses get: %s", errWithCode) + c.JSON(errWithCode.Code(), gin.H{"error": errWithCode.Safe()}) + return + } + + c.JSON(http.StatusOK, statuses) +} diff --git a/internal/api/model/status.go b/internal/api/model/status.go index 2cb22aa..2456d1a 100644 --- a/internal/api/model/status.go +++ b/internal/api/model/status.go @@ -55,7 +55,7 @@ type Status struct { // Have you bookmarked this status? Bookmarked bool `json:"bookmarked"` // Have you pinned this status? Only appears if the status is pinnable. - Pinned bool `json:"pinned"` + Pinned bool `json:"pinned,omitempty"` // HTML-encoded status content. Content string `json:"content"` // The status being reblogged. @@ -86,23 +86,23 @@ type Status struct { // It should be used at the path https://mastodon.example/api/v1/statuses type StatusCreateRequest struct { // Text content of the status. If media_ids is provided, this becomes optional. Attaching a poll is optional while status is provided. - Status string `form:"status"` + Status string `form:"status" json:"status" xml:"status"` // Array of Attachment ids to be attached as media. If provided, status becomes optional, and poll cannot be used. MediaIDs []string `form:"media_ids" json:"media_ids" xml:"media_ids"` // Poll to include with this status. - Poll *PollRequest `form:"poll"` + Poll *PollRequest `form:"poll" json:"poll" xml:"poll"` // ID of the status being replied to, if status is a reply - InReplyToID string `form:"in_reply_to_id"` + InReplyToID string `form:"in_reply_to_id" json:"in_reply_to_id" xml:"in_reply_to_id"` // Mark status and attached media as sensitive? - Sensitive bool `form:"sensitive"` + Sensitive bool `form:"sensitive" json:"sensitive" xml:"sensitive"` // Text to be shown as a warning or subject before the actual content. Statuses are generally collapsed behind this field. - SpoilerText string `form:"spoiler_text"` + SpoilerText string `form:"spoiler_text" json:"spoiler_text" xml:"spoiler_text"` // Visibility of the posted status. Enumerable oneOf public, unlisted, private, direct. - Visibility Visibility `form:"visibility"` + Visibility Visibility `form:"visibility" json:"visibility" xml:"visibility"` // ISO 8601 Datetime at which to schedule a status. Providing this paramter will cause ScheduledStatus to be returned instead of Status. Must be at least 5 minutes in the future. - ScheduledAt string `form:"scheduled_at"` + ScheduledAt string `form:"scheduled_at" json:"scheduled_at" xml:"scheduled_at"` // ISO 639 language code for this status. - Language string `form:"language"` + Language string `form:"language" json:"language" xml:"language"` } // Visibility denotes the visibility of this status to other users @@ -130,13 +130,13 @@ type AdvancedStatusCreateForm struct { // to the standard mastodon-compatible ones. type AdvancedVisibilityFlagsForm struct { // The gotosocial visibility model - VisibilityAdvanced *string `form:"visibility_advanced"` + VisibilityAdvanced *string `form:"visibility_advanced" json:"visibility_advanced" xml:"visibility_advanced"` // This status will be federated beyond the local timeline(s) - Federated *bool `form:"federated"` + Federated *bool `form:"federated" json:"federated" xml:"federated"` // This status can be boosted/reblogged - Boostable *bool `form:"boostable"` + Boostable *bool `form:"boostable" json:"boostable" xml:"boostable"` // This status can be replied to - Replyable *bool `form:"replyable"` + Replyable *bool `form:"replyable" json:"replyable" xml:"replyable"` // This status can be liked/faved - Likeable *bool `form:"likeable"` + Likeable *bool `form:"likeable" json:"likeable" xml:"likeable"` } diff --git a/internal/api/s2s/user/userget.go b/internal/api/s2s/user/userget.go index 8df137f..9d268e1 100644 --- a/internal/api/s2s/user/userget.go +++ b/internal/api/s2s/user/userget.go @@ -56,7 +56,7 @@ func (m *Module) UsersGETHandler(c *gin.Context) { // make a copy of the context to pass along so we don't break anything cp := c.Copy() - user, err := m.processor.GetFediUser(requestedUsername, cp.Request) // GetAPUser handles auth as well + user, err := m.processor.GetFediUser(requestedUsername, cp.Request) // GetFediUser handles auth as well if err != nil { l.Info(err.Error()) c.JSON(err.Code(), gin.H{"error": err.Safe()}) diff --git a/internal/db/db.go b/internal/db/db.go index a354dde..cbcd698 100644 --- a/internal/db/db.go +++ b/internal/db/db.go @@ -160,16 +160,14 @@ type DB interface { // In case of no entries, a 'no entries' error will be returned GetFavesByAccountID(accountID string, faves *[]gtsmodel.StatusFave) error - // GetStatusesByAccountID is a shortcut for the common action of fetching a list of statuses produced by accountID. - // The given slice 'statuses' will be set to the result of the query, whatever it is. - // In case of no entries, a 'no entries' error will be returned - GetStatusesByAccountID(accountID string, statuses *[]gtsmodel.Status) error + // CountStatusesByAccountID is a shortcut for the common action of counting statuses produced by accountID. + CountStatusesByAccountID(accountID string) (int, error) // GetStatusesByTimeDescending is a shortcut for getting the most recent statuses. accountID is optional, if not provided // then all statuses will be returned. If limit is set to 0, the size of the returned slice will not be limited. This can // be very memory intensive so you probably shouldn't do this! // In case of no entries, a 'no entries' error will be returned - GetStatusesByTimeDescending(accountID string, statuses *[]gtsmodel.Status, limit int) error + GetStatusesByTimeDescending(accountID string, statuses *[]gtsmodel.Status, limit int, excludeReplies bool, maxID string, pinned bool, mediaOnly bool) error // GetLastStatusForAccountID simply gets the most recent status by the given account. // The given slice 'status' pointer will be set to the result of the query, whatever it is. @@ -251,9 +249,6 @@ type DB interface { // StatusBookmarkedBy checks if a given status has been bookmarked by a given account ID StatusBookmarkedBy(status *gtsmodel.Status, accountID string) (bool, error) - // StatusPinnedBy checks if a given status has been pinned by a given account ID - StatusPinnedBy(status *gtsmodel.Status, accountID string) (bool, error) - // FaveStatus faves the given status, using accountID as the faver. // The returned fave will be nil if the status was already faved. FaveStatus(status *gtsmodel.Status, accountID string) (*gtsmodel.StatusFave, error) diff --git a/internal/db/pg/pg.go b/internal/db/pg/pg.go index f8c2fdb..d3590a0 100644 --- a/internal/db/pg/pg.go +++ b/internal/db/pg/pg.go @@ -456,23 +456,35 @@ func (ps *postgresService) GetFavesByAccountID(accountID string, faves *[]gtsmod return nil } -func (ps *postgresService) GetStatusesByAccountID(accountID string, statuses *[]gtsmodel.Status) error { - if err := ps.conn.Model(statuses).Where("account_id = ?", accountID).Select(); err != nil { +func (ps *postgresService) CountStatusesByAccountID(accountID string) (int, error) { + count, err := ps.conn.Model(>smodel.Status{}).Where("account_id = ?", accountID).Count() + if err != nil { if err == pg.ErrNoRows { - return db.ErrNoEntries{} + return 0, nil } - return err + return 0, err } - return nil + return count, nil } -func (ps *postgresService) GetStatusesByTimeDescending(accountID string, statuses *[]gtsmodel.Status, limit int) error { +func (ps *postgresService) GetStatusesByTimeDescending(accountID string, statuses *[]gtsmodel.Status, limit int, excludeReplies bool, maxID string, pinned bool, mediaOnly bool) error { q := ps.conn.Model(statuses).Order("created_at DESC") + if accountID != "" { + q = q.Where("account_id = ?", accountID) + } if limit != 0 { q = q.Limit(limit) } - if accountID != "" { - q = q.Where("account_id = ?", accountID) + if excludeReplies { + q = q.Where("? IS NULL", pg.Ident("in_reply_to_id")) + } + if pinned { + q = q.Where("pinned = ?", true) + } + if mediaOnly { + q = q.WhereGroup(func(q *pg.Query) (*pg.Query, error) { + return q.Where("? IS NOT NULL", pg.Ident("attachments")).Where("attachments != '{}'"), nil + }) } if err := q.Select(); err != nil { if err == pg.ErrNoRows { @@ -679,20 +691,23 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc } // if the target user doesn't exist (anymore) then the status also shouldn't be visible - targetUser := >smodel.User{} - if err := ps.conn.Model(targetUser).Where("account_id = ?", targetAccount.ID).Select(); err != nil { - l.Debug("target user could not be selected") - if err == pg.ErrNoRows { - return false, db.ErrNoEntries{} + // note: we only do this for local users + if targetAccount.Domain == "" { + targetUser := >smodel.User{} + if err := ps.conn.Model(targetUser).Where("account_id = ?", targetAccount.ID).Select(); err != nil { + l.Debug("target user could not be selected") + if err == pg.ErrNoRows { + return false, db.ErrNoEntries{} + } + return false, err } - return false, err - } - // if target user is disabled, not yet approved, or not confirmed then don't show the status - // (although in the latter two cases it's unlikely they posted a status yet anyway, but you never know!) - if targetUser.Disabled || !targetUser.Approved || targetUser.ConfirmedAt.IsZero() { - l.Debug("target user is disabled, not approved, or not confirmed") - return false, nil + // if target user is disabled, not yet approved, or not confirmed then don't show the status + // (although in the latter two cases it's unlikely they posted a status yet anyway, but you never know!) + if targetUser.Disabled || !targetUser.Approved || targetUser.ConfirmedAt.IsZero() { + l.Debug("target user is disabled, not approved, or not confirmed") + return false, nil + } } // If requesting account is nil, that means whoever requested the status didn't auth, or their auth failed. @@ -755,6 +770,7 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc if blocked, err := ps.Blocked(relevantAccounts.ReplyToAccount.ID, requestingAccount.ID); err != nil { return false, err } else if blocked { + l.Debug("a block exists between requesting account and reply to account") return false, nil } } @@ -764,6 +780,7 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc if blocked, err := ps.Blocked(relevantAccounts.BoostedAccount.ID, requestingAccount.ID); err != nil { return false, err } else if blocked { + l.Debug("a block exists between requesting account and boosted account") return false, nil } } @@ -773,6 +790,7 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc if blocked, err := ps.Blocked(relevantAccounts.BoostedReplyToAccount.ID, requestingAccount.ID); err != nil { return false, err } else if blocked { + l.Debug("a block exists between requesting account and boosted reply to account") return false, nil } } @@ -782,9 +800,17 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc if blocked, err := ps.Blocked(a.ID, requestingAccount.ID); err != nil { return false, err } else if blocked { + l.Debug("a block exists between requesting account and a mentioned account") return false, nil } } + + // if the requesting account is mentioned in the status it should always be visible + for _, acct := range relevantAccounts.MentionedAccounts { + if acct.ID == requestingAccount.ID { + return true, nil // yep it's mentioned! + } + } } // at this point we know neither account blocks the other, or another account mentioned or otherwise referred to in the status @@ -800,6 +826,7 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc return false, err } if !follows { + l.Debug("requested status is followers only but requesting account is not a follower") return false, nil } return true, nil @@ -810,16 +837,12 @@ func (ps *postgresService) StatusVisible(targetStatus *gtsmodel.Status, targetAc return false, err } if !mutuals { + l.Debug("requested status is mutuals only but accounts aren't mufos") return false, nil } return true, nil case gtsmodel.VisibilityDirect: - // make sure the requesting account is mentioned in the status - for _, menchie := range targetStatus.Mentions { - if menchie == requestingAccount.ID { - return true, nil // yep it's mentioned! - } - } + l.Debug("requesting account requests a status it's not mentioned in") return false, nil // it's not mentioned -_- } @@ -890,10 +913,16 @@ func (ps *postgresService) PullRelevantAccountsFromStatus(targetStatus *gtsmodel } // now get all accounts with IDs that are mentioned in the status - for _, mentionedAccountID := range targetStatus.Mentions { + for _, mentionID := range targetStatus.Mentions { + + mention := >smodel.Mention{} + if err := ps.conn.Model(mention).Where("id = ?", mentionID).Select(); err != nil { + return accounts, fmt.Errorf("error getting mention with id %s: %s", mentionID, err) + } + mentionedAccount := >smodel.Account{} - if err := ps.conn.Model(mentionedAccount).Where("id = ?", mentionedAccountID).Select(); err != nil { - return accounts, err + if err := ps.conn.Model(mentionedAccount).Where("id = ?", mention.TargetAccountID).Select(); err != nil { + return accounts, fmt.Errorf("error getting mentioned account: %s", err) } accounts.MentionedAccounts = append(accounts.MentionedAccounts, mentionedAccount) } @@ -929,10 +958,6 @@ func (ps *postgresService) StatusBookmarkedBy(status *gtsmodel.Status, accountID return ps.conn.Model(>smodel.StatusBookmark{}).Where("status_id = ?", status.ID).Where("account_id = ?", accountID).Exists() } -func (ps *postgresService) StatusPinnedBy(status *gtsmodel.Status, accountID string) (bool, error) { - return ps.conn.Model(>smodel.StatusPin{}).Where("status_id = ?", status.ID).Where("account_id = ?", accountID).Exists() -} - func (ps *postgresService) FaveStatus(status *gtsmodel.Status, accountID string) (*gtsmodel.StatusFave, error) { // first check if a fave already exists, we can just return if so existingFave := >smodel.StatusFave{} diff --git a/internal/federation/federating_db.go b/internal/federation/federating_db.go index 4ea0412..f72c5e6 100644 --- a/internal/federation/federating_db.go +++ b/internal/federation/federating_db.go @@ -364,7 +364,7 @@ func (f *federatingDB) Get(c context.Context, id *url.URL) (value vocab.Type, er // // Under certain conditions and network activities, Create may be called // multiple times for the same ActivityStreams object. -func (f *federatingDB) Create(c context.Context, asType vocab.Type) error { +func (f *federatingDB) Create(ctx context.Context, asType vocab.Type) error { l := f.log.WithFields( logrus.Fields{ "func": "Create", @@ -373,6 +373,24 @@ func (f *federatingDB) Create(c context.Context, asType vocab.Type) error { ) l.Debugf("received CREATE asType %+v", asType) + targetAcctI := ctx.Value(util.APAccount) + if targetAcctI == nil { + l.Error("target account wasn't set on context") + } + targetAcct, ok := targetAcctI.(*gtsmodel.Account) + if !ok { + l.Error("target account was set on context but couldn't be parsed") + } + + fromFederatorChanI := ctx.Value(util.APFromFederatorChanKey) + if fromFederatorChanI == nil { + l.Error("from federator channel wasn't set on context") + } + fromFederatorChan, ok := fromFederatorChanI.(chan gtsmodel.FromFederator) + if !ok { + l.Error("from federator channel was set on context but couldn't be parsed") + } + switch gtsmodel.ActivityStreamsActivity(asType.GetTypeName()) { case gtsmodel.ActivityStreamsCreate: create, ok := asType.(vocab.ActivityStreamsCreate) @@ -391,6 +409,12 @@ func (f *federatingDB) Create(c context.Context, asType vocab.Type) error { if err := f.db.Put(status); err != nil { return fmt.Errorf("database error inserting status: %s", err) } + + fromFederatorChan <- gtsmodel.FromFederator{ + APObjectType: gtsmodel.ActivityStreamsNote, + APActivityType: gtsmodel.ActivityStreamsCreate, + GTSModel: status, + } } } case gtsmodel.ActivityStreamsFollow: @@ -407,6 +431,12 @@ func (f *federatingDB) Create(c context.Context, asType vocab.Type) error { if err := f.db.Put(followRequest); err != nil { return fmt.Errorf("database error inserting follow request: %s", err) } + + if !targetAcct.Locked { + if err := f.db.AcceptFollowRequest(followRequest.AccountID, followRequest.TargetAccountID); err != nil { + return fmt.Errorf("database error accepting follow request: %s", err) + } + } } return nil } diff --git a/internal/federation/federatingprotocol.go b/internal/federation/federatingprotocol.go index 0d2a8d9..d8f6eb8 100644 --- a/internal/federation/federatingprotocol.go +++ b/internal/federation/federatingprotocol.go @@ -71,49 +71,7 @@ func (f *federator) PostInboxRequestBodyHook(ctx context.Context, r *http.Reques l.Debug(err) return nil, err } - - // derefence the actor of the activity already - // var requestingActorIRI *url.URL - // actorProp := activity.GetActivityStreamsActor() - // if actorProp != nil { - // for i := actorProp.Begin(); i != actorProp.End(); i = i.Next() { - // if i.IsIRI() { - // requestingActorIRI = i.GetIRI() - // break - // } - // } - // } - // if requestingActorIRI != nil { - - // requestedAccountI := ctx.Value(util.APAccount) - // requestedAccount, ok := requestedAccountI.(*gtsmodel.Account) - // if !ok { - // return nil, errors.New("requested account was not set on request context") - // } - - // requestingActor := >smodel.Account{} - // if err := f.db.GetWhere("uri", requestingActorIRI.String(), requestingActor); err != nil { - // // there's been a proper error so return it - // if _, ok := err.(db.ErrNoEntries); !ok { - // return nil, fmt.Errorf("error getting requesting actor with id %s: %s", requestingActorIRI.String(), err) - // } - - // // we don't know this account (yet) so let's dereference it right now - // person, err := f.DereferenceRemoteAccount(requestedAccount.Username, publicKeyOwnerURI) - // if err != nil { - // return ctx, false, fmt.Errorf("error dereferencing account with public key id %s: %s", publicKeyOwnerURI.String(), err) - // } - - // a, err := f.typeConverter.ASRepresentationToAccount(person) - // if err != nil { - // return ctx, false, fmt.Errorf("error converting person with public key id %s to account: %s", publicKeyOwnerURI.String(), err) - // } - // requestingAccount = a - // } - // } - // set the activity on the context for use later on - return context.WithValue(ctx, util.APActivity, activity), nil } @@ -285,14 +243,6 @@ func (f *federator) FederatingCallbacks(ctx context.Context) (wrapped pub.Federa } wrapped = pub.FederatingWrappedCallbacks{ - // Follow handles additional side effects for the Follow ActivityStreams - // type, specific to the application using go-fed. - // - // The wrapping function can have one of several default behaviors, - // depending on the value of the OnFollow setting. - Follow: func(context.Context, vocab.ActivityStreamsFollow) error { - return nil - }, // OnFollow determines what action to take for this particular callback // if a Follow Activity is handled. OnFollow: onFollow, diff --git a/internal/federation/federator.go b/internal/federation/federator.go index 4fe0369..a3b1386 100644 --- a/internal/federation/federator.go +++ b/internal/federation/federator.go @@ -42,7 +42,9 @@ type Federator interface { DereferenceRemoteAccount(username string, remoteAccountID *url.URL) (typeutils.Accountable, error) // GetTransportForUser returns a new transport initialized with the key credentials belonging to the given username. // This can be used for making signed http requests. - GetTransportForUser(username string) (pub.Transport, error) + // + // If username is an empty string, our instance user's credentials will be used instead. + GetTransportForUser(username string) (transport.Transport, error) pub.CommonBehavior pub.FederatingProtocol } diff --git a/internal/federation/util.go b/internal/federation/util.go index d76ce85..14ceaeb 100644 --- a/internal/federation/util.go +++ b/internal/federation/util.go @@ -33,6 +33,7 @@ import ( "github.com/go-fed/activity/streams/vocab" "github.com/go-fed/httpsig" "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" + "github.com/superseriousbusiness/gotosocial/internal/transport" "github.com/superseriousbusiness/gotosocial/internal/typeutils" ) @@ -221,7 +222,7 @@ func (f *federator) DereferenceRemoteAccount(username string, remoteAccountID *u return nil, fmt.Errorf("type name %s not supported", t.GetTypeName()) } -func (f *federator) GetTransportForUser(username string) (pub.Transport, error) { +func (f *federator) GetTransportForUser(username string) (transport.Transport, error) { // We need an account to use to create a transport for dereferecing the signature. // If a username has been given, we can fetch the account with that username and use it. // Otherwise, we can take the instance account and use those credentials to make the request. diff --git a/internal/gotosocial/actions.go b/internal/gotosocial/actions.go index fb83a42..94b29b8 100644 --- a/internal/gotosocial/actions.go +++ b/internal/gotosocial/actions.go @@ -68,7 +68,6 @@ var models []interface{} = []interface{}{ >smodel.StatusFave{}, >smodel.StatusBookmark{}, >smodel.StatusMute{}, - >smodel.StatusPin{}, >smodel.Tag{}, >smodel.User{}, >smodel.Emoji{}, diff --git a/internal/gtsmodel/messages.go b/internal/gtsmodel/messages.go new file mode 100644 index 0000000..43f3063 --- /dev/null +++ b/internal/gtsmodel/messages.go @@ -0,0 +1,29 @@ +package gtsmodel + +// // ToClientAPI wraps a message that travels from the processor into the client API +// type ToClientAPI struct { +// APObjectType ActivityStreamsObject +// APActivityType ActivityStreamsActivity +// Activity interface{} +// } + +// FromClientAPI wraps a message that travels from client API into the processor +type FromClientAPI struct { + APObjectType ActivityStreamsObject + APActivityType ActivityStreamsActivity + GTSModel interface{} +} + +// // ToFederator wraps a message that travels from the processor into the federator +// type ToFederator struct { +// APObjectType ActivityStreamsObject +// APActivityType ActivityStreamsActivity +// GTSModel interface{} +// } + +// FromFederator wraps a message that travels from the federator into the processor +type FromFederator struct { + APObjectType ActivityStreamsObject + APActivityType ActivityStreamsActivity + GTSModel interface{} +} diff --git a/internal/gtsmodel/status.go b/internal/gtsmodel/status.go index 8693bce..d0d4795 100644 --- a/internal/gtsmodel/status.go +++ b/internal/gtsmodel/status.go @@ -34,7 +34,7 @@ type Status struct { Attachments []string `pg:",array"` // Database IDs of any tags used in this status Tags []string `pg:",array"` - // Database IDs of any accounts mentioned in this status + // Database IDs of any mentions in this status Mentions []string `pg:",array"` // Database IDs of any emojis used in this status Emojis []string `pg:",array"` @@ -69,6 +69,8 @@ type Status struct { ActivityStreamsType ActivityStreamsObject // Original text of the status without formatting Text string + // Has this status been pinned by its owner? + Pinned bool /* INTERNAL MODEL NON-DATABASE FIELDS diff --git a/internal/media/media.go b/internal/media/handler.go similarity index 57% rename from internal/media/media.go rename to internal/media/handler.go index 84f4ef5..8bbff9c 100644 --- a/internal/media/media.go +++ b/internal/media/handler.go @@ -19,8 +19,10 @@ package media import ( + "context" "errors" "fmt" + "net/url" "strings" "time" @@ -30,6 +32,7 @@ import ( "github.com/superseriousbusiness/gotosocial/internal/db" "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" "github.com/superseriousbusiness/gotosocial/internal/storage" + "github.com/superseriousbusiness/gotosocial/internal/transport" ) // Size describes the *size* of a piece of media @@ -68,13 +71,21 @@ type Handler interface { // ProcessLocalAttachment takes a new attachment and the requesting account, checks it out, removes exif data from it, // puts it in whatever storage backend we're using, sets the relevant fields in the database for the new media, - // and then returns information to the caller about the attachment. - ProcessLocalAttachment(attachment []byte, accountID string) (*gtsmodel.MediaAttachment, error) + // and then returns information to the caller about the attachment. It's the caller's responsibility to put the returned struct + // in the database. + ProcessAttachment(attachment []byte, accountID string, remoteURL string) (*gtsmodel.MediaAttachment, error) // ProcessLocalEmoji takes a new emoji and a shortcode, cleans it up, puts it in storage, and creates a new // *gts.Emoji for it, then returns it to the caller. It's the caller's responsibility to put the returned struct // in the database. ProcessLocalEmoji(emojiBytes []byte, shortcode string) (*gtsmodel.Emoji, error) + + // ProcessRemoteAttachment takes a transport, a bare-bones current attachment, and an accountID that the attachment belongs to. + // It then dereferences the attachment (ie., fetches the attachment bytes from the remote server), ensuring that the bytes are + // the correct content type. It stores the attachment in whatever storage backend the Handler has been initalized with, and returns + // information to the caller about the new attachment. It's the caller's responsibility to put the returned struct + // in the database. + ProcessRemoteAttachment(t transport.Transport, currentAttachment *gtsmodel.MediaAttachment, accountID string) (*gtsmodel.MediaAttachment, error) } type mediaHandler struct { @@ -136,27 +147,24 @@ func (mh *mediaHandler) ProcessHeaderOrAvatar(attachment []byte, accountID strin return ma, nil } -// ProcessLocalAttachment takes a new attachment and the requesting account, checks it out, removes exif data from it, +// ProcessAttachment takes a new attachment and the owning account, checks it out, removes exif data from it, // puts it in whatever storage backend we're using, sets the relevant fields in the database for the new media, // and then returns information to the caller about the attachment. -func (mh *mediaHandler) ProcessLocalAttachment(attachment []byte, accountID string) (*gtsmodel.MediaAttachment, error) { +func (mh *mediaHandler) ProcessAttachment(attachment []byte, accountID string, remoteURL string) (*gtsmodel.MediaAttachment, error) { contentType, err := parseContentType(attachment) if err != nil { return nil, err } mainType := strings.Split(contentType, "/")[0] switch mainType { - case MIMEVideo: - if !SupportedVideoType(contentType) { - return nil, fmt.Errorf("video type %s not supported", contentType) - } - if len(attachment) == 0 { - return nil, errors.New("video was of size 0") - } - if len(attachment) > mh.config.MediaConfig.MaxVideoSize { - return nil, fmt.Errorf("video size %d bytes exceeded max video size of %d bytes", len(attachment), mh.config.MediaConfig.MaxVideoSize) - } - return mh.processVideoAttachment(attachment, accountID, contentType) + // case MIMEVideo: + // if !SupportedVideoType(contentType) { + // return nil, fmt.Errorf("video type %s not supported", contentType) + // } + // if len(attachment) == 0 { + // return nil, errors.New("video was of size 0") + // } + // return mh.processVideoAttachment(attachment, accountID, contentType, remoteURL) case MIMEImage: if !SupportedImageType(contentType) { return nil, fmt.Errorf("image type %s not supported", contentType) @@ -164,10 +172,7 @@ func (mh *mediaHandler) ProcessLocalAttachment(attachment []byte, accountID stri if len(attachment) == 0 { return nil, errors.New("image was of size 0") } - if len(attachment) > mh.config.MediaConfig.MaxImageSize { - return nil, fmt.Errorf("image size %d bytes exceeded max image size of %d bytes", len(attachment), mh.config.MediaConfig.MaxImageSize) - } - return mh.processImageAttachment(attachment, accountID, contentType) + return mh.processImageAttachment(attachment, accountID, contentType, remoteURL) default: break } @@ -287,221 +292,26 @@ func (mh *mediaHandler) ProcessLocalEmoji(emojiBytes []byte, shortcode string) ( return e, nil } -/* - HELPER FUNCTIONS -*/ - -func (mh *mediaHandler) processVideoAttachment(data []byte, accountID string, contentType string) (*gtsmodel.MediaAttachment, error) { - return nil, nil -} - -func (mh *mediaHandler) processImageAttachment(data []byte, accountID string, contentType string) (*gtsmodel.MediaAttachment, error) { - var clean []byte - var err error - var original *imageAndMeta - var small *imageAndMeta - - switch contentType { - case MIMEJpeg, MIMEPng: - if clean, err = purgeExif(data); err != nil { - return nil, fmt.Errorf("error cleaning exif data: %s", err) - } - original, err = deriveImage(clean, contentType) - if err != nil { - return nil, fmt.Errorf("error parsing image: %s", err) - } - case MIMEGif: - clean = data - original, err = deriveGif(clean, contentType) - if err != nil { - return nil, fmt.Errorf("error parsing gif: %s", err) - } - default: - return nil, errors.New("media type unrecognized") +func (mh *mediaHandler) ProcessRemoteAttachment(t transport.Transport, currentAttachment *gtsmodel.MediaAttachment, accountID string) (*gtsmodel.MediaAttachment, error) { + if currentAttachment.RemoteURL == "" { + return nil, errors.New("no remote URL on media attachment to dereference") } - - small, err = deriveThumbnail(clean, contentType, 256, 256) + remoteIRI, err := url.Parse(currentAttachment.RemoteURL) if err != nil { - return nil, fmt.Errorf("error deriving thumbnail: %s", err) + return nil, fmt.Errorf("error parsing attachment url %s: %s", currentAttachment.RemoteURL, err) } - // now put it in storage, take a new uuid for the name of the file so we don't store any unnecessary info about it - extension := strings.Split(contentType, "/")[1] - newMediaID := uuid.NewString() - - URLbase := fmt.Sprintf("%s://%s%s", mh.config.StorageConfig.ServeProtocol, mh.config.StorageConfig.ServeHost, mh.config.StorageConfig.ServeBasePath) - originalURL := fmt.Sprintf("%s/%s/attachment/original/%s.%s", URLbase, accountID, newMediaID, extension) - smallURL := fmt.Sprintf("%s/%s/attachment/small/%s.jpeg", URLbase, accountID, newMediaID) // all thumbnails/smalls are encoded as jpeg - - // we store the original... - originalPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, Attachment, Original, newMediaID, extension) - if err := mh.storage.StoreFileAt(originalPath, original.image); err != nil { - return nil, fmt.Errorf("storage error: %s", err) - } - - // and a thumbnail... - smallPath := fmt.Sprintf("%s/%s/%s/%s/%s.jpeg", mh.config.StorageConfig.BasePath, accountID, Attachment, Small, newMediaID) // all thumbnails/smalls are encoded as jpeg - if err := mh.storage.StoreFileAt(smallPath, small.image); err != nil { - return nil, fmt.Errorf("storage error: %s", err) - } - - ma := >smodel.MediaAttachment{ - ID: newMediaID, - StatusID: "", - URL: originalURL, - RemoteURL: "", - CreatedAt: time.Now(), - UpdatedAt: time.Now(), - Type: gtsmodel.FileTypeImage, - FileMeta: gtsmodel.FileMeta{ - Original: gtsmodel.Original{ - Width: original.width, - Height: original.height, - Size: original.size, - Aspect: original.aspect, - }, - Small: gtsmodel.Small{ - Width: small.width, - Height: small.height, - Size: small.size, - Aspect: small.aspect, - }, - }, - AccountID: accountID, - Description: "", - ScheduledStatusID: "", - Blurhash: original.blurhash, - Processing: 2, - File: gtsmodel.File{ - Path: originalPath, - ContentType: contentType, - FileSize: len(original.image), - UpdatedAt: time.Now(), - }, - Thumbnail: gtsmodel.Thumbnail{ - Path: smallPath, - ContentType: MIMEJpeg, // all thumbnails/smalls are encoded as jpeg - FileSize: len(small.image), - UpdatedAt: time.Now(), - URL: smallURL, - RemoteURL: "", - }, - Avatar: false, - Header: false, - } - - return ma, nil - -} - -func (mh *mediaHandler) processHeaderOrAvi(imageBytes []byte, contentType string, mediaType Type, accountID string) (*gtsmodel.MediaAttachment, error) { - var isHeader bool - var isAvatar bool - - switch mediaType { - case Header: - isHeader = true - case Avatar: - isAvatar = true - default: - return nil, errors.New("header or avatar not selected") - } - - var clean []byte - var err error - - var original *imageAndMeta - switch contentType { - case MIMEJpeg: - if clean, err = purgeExif(imageBytes); err != nil { - return nil, fmt.Errorf("error cleaning exif data: %s", err) - } - original, err = deriveImage(clean, contentType) - case MIMEPng: - if clean, err = purgeExif(imageBytes); err != nil { - return nil, fmt.Errorf("error cleaning exif data: %s", err) - } - original, err = deriveImage(clean, contentType) - case MIMEGif: - clean = imageBytes - original, err = deriveGif(clean, contentType) - default: - return nil, errors.New("media type unrecognized") + // for content type, we assume we don't know what to expect... + expectedContentType := "*/*" + if currentAttachment.File.ContentType != "" { + // ... and then narrow it down if we do + expectedContentType = currentAttachment.File.ContentType } + attachmentBytes, err := t.DereferenceMedia(context.Background(), remoteIRI, expectedContentType) if err != nil { - return nil, fmt.Errorf("error parsing image: %s", err) + return nil, fmt.Errorf("dereferencing remote media with url %s: %s", remoteIRI.String(), err) } - small, err := deriveThumbnail(clean, contentType, 256, 256) - if err != nil { - return nil, fmt.Errorf("error deriving thumbnail: %s", err) - } - - // now put it in storage, take a new uuid for the name of the file so we don't store any unnecessary info about it - extension := strings.Split(contentType, "/")[1] - newMediaID := uuid.NewString() - - URLbase := fmt.Sprintf("%s://%s%s", mh.config.StorageConfig.ServeProtocol, mh.config.StorageConfig.ServeHost, mh.config.StorageConfig.ServeBasePath) - originalURL := fmt.Sprintf("%s/%s/%s/original/%s.%s", URLbase, accountID, mediaType, newMediaID, extension) - smallURL := fmt.Sprintf("%s/%s/%s/small/%s.%s", URLbase, accountID, mediaType, newMediaID, extension) - - // we store the original... - originalPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, mediaType, Original, newMediaID, extension) - if err := mh.storage.StoreFileAt(originalPath, original.image); err != nil { - return nil, fmt.Errorf("storage error: %s", err) - } - - // and a thumbnail... - smallPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, mediaType, Small, newMediaID, extension) - if err := mh.storage.StoreFileAt(smallPath, small.image); err != nil { - return nil, fmt.Errorf("storage error: %s", err) - } - - ma := >smodel.MediaAttachment{ - ID: newMediaID, - StatusID: "", - URL: originalURL, - RemoteURL: "", - CreatedAt: time.Now(), - UpdatedAt: time.Now(), - Type: gtsmodel.FileTypeImage, - FileMeta: gtsmodel.FileMeta{ - Original: gtsmodel.Original{ - Width: original.width, - Height: original.height, - Size: original.size, - Aspect: original.aspect, - }, - Small: gtsmodel.Small{ - Width: small.width, - Height: small.height, - Size: small.size, - Aspect: small.aspect, - }, - }, - AccountID: accountID, - Description: "", - ScheduledStatusID: "", - Blurhash: original.blurhash, - Processing: 2, - File: gtsmodel.File{ - Path: originalPath, - ContentType: contentType, - FileSize: len(original.image), - UpdatedAt: time.Now(), - }, - Thumbnail: gtsmodel.Thumbnail{ - Path: smallPath, - ContentType: contentType, - FileSize: len(small.image), - UpdatedAt: time.Now(), - URL: smallURL, - RemoteURL: "", - }, - Avatar: isAvatar, - Header: isHeader, - } - - return ma, nil + return mh.ProcessAttachment(attachmentBytes, accountID, currentAttachment.RemoteURL) } diff --git a/internal/media/media_test.go b/internal/media/handler_test.go similarity index 100% rename from internal/media/media_test.go rename to internal/media/handler_test.go diff --git a/internal/media/mock_MediaHandler.go b/internal/media/mock_MediaHandler.go deleted file mode 100644 index 10fffbb..0000000 --- a/internal/media/mock_MediaHandler.go +++ /dev/null @@ -1,59 +0,0 @@ -// Code generated by mockery v2.7.4. DO NOT EDIT. - -package media - -import ( - mock "github.com/stretchr/testify/mock" - "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" -) - -// MockMediaHandler is an autogenerated mock type for the MediaHandler type -type MockMediaHandler struct { - mock.Mock -} - -// ProcessAttachment provides a mock function with given fields: img, accountID -func (_m *MockMediaHandler) ProcessAttachment(img []byte, accountID string) (*gtsmodel.MediaAttachment, error) { - ret := _m.Called(img, accountID) - - var r0 *gtsmodel.MediaAttachment - if rf, ok := ret.Get(0).(func([]byte, string) *gtsmodel.MediaAttachment); ok { - r0 = rf(img, accountID) - } else { - if ret.Get(0) != nil { - r0 = ret.Get(0).(*gtsmodel.MediaAttachment) - } - } - - var r1 error - if rf, ok := ret.Get(1).(func([]byte, string) error); ok { - r1 = rf(img, accountID) - } else { - r1 = ret.Error(1) - } - - return r0, r1 -} - -// SetHeaderOrAvatarForAccountID provides a mock function with given fields: img, accountID, headerOrAvi -func (_m *MockMediaHandler) SetHeaderOrAvatarForAccountID(img []byte, accountID string, headerOrAvi string) (*gtsmodel.MediaAttachment, error) { - ret := _m.Called(img, accountID, headerOrAvi) - - var r0 *gtsmodel.MediaAttachment - if rf, ok := ret.Get(0).(func([]byte, string, string) *gtsmodel.MediaAttachment); ok { - r0 = rf(img, accountID, headerOrAvi) - } else { - if ret.Get(0) != nil { - r0 = ret.Get(0).(*gtsmodel.MediaAttachment) - } - } - - var r1 error - if rf, ok := ret.Get(1).(func([]byte, string, string) error); ok { - r1 = rf(img, accountID, headerOrAvi) - } else { - r1 = ret.Error(1) - } - - return r0, r1 -} diff --git a/internal/media/processicon.go b/internal/media/processicon.go new file mode 100644 index 0000000..962d1c6 --- /dev/null +++ b/internal/media/processicon.go @@ -0,0 +1,141 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package media + +import ( + "errors" + "fmt" + "strings" + "time" + + "github.com/google/uuid" + "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" +) + +func (mh *mediaHandler) processHeaderOrAvi(imageBytes []byte, contentType string, mediaType Type, accountID string) (*gtsmodel.MediaAttachment, error) { + var isHeader bool + var isAvatar bool + + switch mediaType { + case Header: + isHeader = true + case Avatar: + isAvatar = true + default: + return nil, errors.New("header or avatar not selected") + } + + var clean []byte + var err error + + var original *imageAndMeta + switch contentType { + case MIMEJpeg: + if clean, err = purgeExif(imageBytes); err != nil { + return nil, fmt.Errorf("error cleaning exif data: %s", err) + } + original, err = deriveImage(clean, contentType) + case MIMEPng: + if clean, err = purgeExif(imageBytes); err != nil { + return nil, fmt.Errorf("error cleaning exif data: %s", err) + } + original, err = deriveImage(clean, contentType) + case MIMEGif: + clean = imageBytes + original, err = deriveGif(clean, contentType) + default: + return nil, errors.New("media type unrecognized") + } + + if err != nil { + return nil, fmt.Errorf("error parsing image: %s", err) + } + + small, err := deriveThumbnail(clean, contentType, 256, 256) + if err != nil { + return nil, fmt.Errorf("error deriving thumbnail: %s", err) + } + + // now put it in storage, take a new uuid for the name of the file so we don't store any unnecessary info about it + extension := strings.Split(contentType, "/")[1] + newMediaID := uuid.NewString() + + URLbase := fmt.Sprintf("%s://%s%s", mh.config.StorageConfig.ServeProtocol, mh.config.StorageConfig.ServeHost, mh.config.StorageConfig.ServeBasePath) + originalURL := fmt.Sprintf("%s/%s/%s/original/%s.%s", URLbase, accountID, mediaType, newMediaID, extension) + smallURL := fmt.Sprintf("%s/%s/%s/small/%s.%s", URLbase, accountID, mediaType, newMediaID, extension) + + // we store the original... + originalPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, mediaType, Original, newMediaID, extension) + if err := mh.storage.StoreFileAt(originalPath, original.image); err != nil { + return nil, fmt.Errorf("storage error: %s", err) + } + + // and a thumbnail... + smallPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, mediaType, Small, newMediaID, extension) + if err := mh.storage.StoreFileAt(smallPath, small.image); err != nil { + return nil, fmt.Errorf("storage error: %s", err) + } + + ma := >smodel.MediaAttachment{ + ID: newMediaID, + StatusID: "", + URL: originalURL, + RemoteURL: "", + CreatedAt: time.Now(), + UpdatedAt: time.Now(), + Type: gtsmodel.FileTypeImage, + FileMeta: gtsmodel.FileMeta{ + Original: gtsmodel.Original{ + Width: original.width, + Height: original.height, + Size: original.size, + Aspect: original.aspect, + }, + Small: gtsmodel.Small{ + Width: small.width, + Height: small.height, + Size: small.size, + Aspect: small.aspect, + }, + }, + AccountID: accountID, + Description: "", + ScheduledStatusID: "", + Blurhash: original.blurhash, + Processing: 2, + File: gtsmodel.File{ + Path: originalPath, + ContentType: contentType, + FileSize: len(original.image), + UpdatedAt: time.Now(), + }, + Thumbnail: gtsmodel.Thumbnail{ + Path: smallPath, + ContentType: contentType, + FileSize: len(small.image), + UpdatedAt: time.Now(), + URL: smallURL, + RemoteURL: "", + }, + Avatar: isAvatar, + Header: isHeader, + } + + return ma, nil +} diff --git a/internal/media/processimage.go b/internal/media/processimage.go new file mode 100644 index 0000000..dd8bff0 --- /dev/null +++ b/internal/media/processimage.go @@ -0,0 +1,128 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package media + +import ( + "errors" + "fmt" + "strings" + "time" + + "github.com/google/uuid" + "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" +) + +func (mh *mediaHandler) processImageAttachment(data []byte, accountID string, contentType string, remoteURL string) (*gtsmodel.MediaAttachment, error) { + var clean []byte + var err error + var original *imageAndMeta + var small *imageAndMeta + + switch contentType { + case MIMEJpeg, MIMEPng: + if clean, err = purgeExif(data); err != nil { + return nil, fmt.Errorf("error cleaning exif data: %s", err) + } + original, err = deriveImage(clean, contentType) + if err != nil { + return nil, fmt.Errorf("error parsing image: %s", err) + } + case MIMEGif: + clean = data + original, err = deriveGif(clean, contentType) + if err != nil { + return nil, fmt.Errorf("error parsing gif: %s", err) + } + default: + return nil, errors.New("media type unrecognized") + } + + small, err = deriveThumbnail(clean, contentType, 256, 256) + if err != nil { + return nil, fmt.Errorf("error deriving thumbnail: %s", err) + } + + // now put it in storage, take a new uuid for the name of the file so we don't store any unnecessary info about it + extension := strings.Split(contentType, "/")[1] + newMediaID := uuid.NewString() + + URLbase := fmt.Sprintf("%s://%s%s", mh.config.StorageConfig.ServeProtocol, mh.config.StorageConfig.ServeHost, mh.config.StorageConfig.ServeBasePath) + originalURL := fmt.Sprintf("%s/%s/attachment/original/%s.%s", URLbase, accountID, newMediaID, extension) + smallURL := fmt.Sprintf("%s/%s/attachment/small/%s.jpeg", URLbase, accountID, newMediaID) // all thumbnails/smalls are encoded as jpeg + + // we store the original... + originalPath := fmt.Sprintf("%s/%s/%s/%s/%s.%s", mh.config.StorageConfig.BasePath, accountID, Attachment, Original, newMediaID, extension) + if err := mh.storage.StoreFileAt(originalPath, original.image); err != nil { + return nil, fmt.Errorf("storage error: %s", err) + } + + // and a thumbnail... + smallPath := fmt.Sprintf("%s/%s/%s/%s/%s.jpeg", mh.config.StorageConfig.BasePath, accountID, Attachment, Small, newMediaID) // all thumbnails/smalls are encoded as jpeg + if err := mh.storage.StoreFileAt(smallPath, small.image); err != nil { + return nil, fmt.Errorf("storage error: %s", err) + } + + ma := >smodel.MediaAttachment{ + ID: newMediaID, + StatusID: "", + URL: originalURL, + RemoteURL: remoteURL, + CreatedAt: time.Now(), + UpdatedAt: time.Now(), + Type: gtsmodel.FileTypeImage, + FileMeta: gtsmodel.FileMeta{ + Original: gtsmodel.Original{ + Width: original.width, + Height: original.height, + Size: original.size, + Aspect: original.aspect, + }, + Small: gtsmodel.Small{ + Width: small.width, + Height: small.height, + Size: small.size, + Aspect: small.aspect, + }, + }, + AccountID: accountID, + Description: "", + ScheduledStatusID: "", + Blurhash: original.blurhash, + Processing: 2, + File: gtsmodel.File{ + Path: originalPath, + ContentType: contentType, + FileSize: len(original.image), + UpdatedAt: time.Now(), + }, + Thumbnail: gtsmodel.Thumbnail{ + Path: smallPath, + ContentType: MIMEJpeg, // all thumbnails/smalls are encoded as jpeg + FileSize: len(small.image), + UpdatedAt: time.Now(), + URL: smallURL, + RemoteURL: "", + }, + Avatar: false, + Header: false, + } + + return ma, nil + +} diff --git a/internal/media/processvideo.go b/internal/media/processvideo.go new file mode 100644 index 0000000..a2debf6 --- /dev/null +++ b/internal/media/processvideo.go @@ -0,0 +1,23 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package media + +// func (mh *mediaHandler) processVideoAttachment(data []byte, accountID string, contentType string, remoteURL string) (*gtsmodel.MediaAttachment, error) { +// return nil, nil +// } diff --git a/internal/media/test/test-jpeg-processed.jpg b/internal/media/test/test-jpeg-processed.jpg index 81dab59c7ce97460c084cc0091db41a44c5ece1c..33c75ac4ad9c496500662faf9137c3f7cf348afa 100644 GIT binary patch literal 771517 zcmc$`dsGwW+CChMEw*ZD>(e0|NSTM2k*sULuUqm9W>;1-cv6Q33_oz;Np-YJl>F} z9}kW9ejSv=^2?>x!--Cm;b}|9Y62=*S`G)zZ^Jt zlx@)?d7IS$pN`zi;YpHMi(*-?`h~VeIVcHuac$ZFYy# z<@R`e%n)ACe^&bOg#K$jFT#AD8agy+Xz<{ChCG!HUqLSpefqVj&%88eaq#MtQLn%E z&9J|Hu;+03g=Z&4em*dI%~v;`8}r7r_P^T(r}St>|L-RB?f<74{bxe|nNQ#@Z$!`# z*s!1%c?1u)O|iyUdoqlQF7w?pF;*w#rs%5ZIE7a#Ryw}$$FKq3VU8erv#?;cqF>=H z3h>q<9od@YH>y?!c*>^n9eNjW5+%g<2Y5jPMB=sI4W|;P1$g;rzr3W;9N_Ken{HP9Bfv{YaT3?`{?tESQF!aUgl172N^UWAc@-XQZ-6%~tk`dG zD5+1=`k9V%+?vGa(Uq~Li85Ih-gh{_dmGW760!xQ{^(|>k`8)NO-F6bJ8Mz@uD81a zypXkJ2Hl8vta|6V9G%=UfRWBMF`Q4kIf8L6jM_Vfc!?nA_)_t7x-rT}nCxR+Z|EC4 zQivG=p4wqC#NUZHUB8+t^ZOVV_fmPL0SB#Ob!aa}uaTcGe7S(sh4BmcCTcp}w$NY> z@LGnVNu)&*wf!PYtIF;)GaBbFo1(5pSlH@qH}z8D^Fr=rd@sOj3Qlcpb(9ImQrQ7s z1Yt8B<51`DLrFgW*0I)IyXGf$rNep=D!UoWGTNQ@=Rf<9N(u0USqTMv_tV#j&`8Fk z{`u0HEE!xD&ln_e*O^aejOQv!Fr{{cj23k^sEk#yK9i4$BRUq)UKMPGNd6U}LZX3k z)NEarDZne$=}Y7MNyVo& zP7LsL1YZklif49T>_BDy%&e{4N?4r&SAh3T@b-w{yLJ1sR4VTM*(fj4yQBR1V|b^u zKgp*I@Mu1L^DLL;@KgnORDf3?SfW$4!x9$#*!;t~0B@d#W_`F8jq+uusiQ0lerM4Y zGjr-8#dpjO$zuxG`L1tpD#OV#)F1nktXZjy3<=w6E5s24W%g&!)FO>YB&At*V|r-1 z6*XmXQ}r6lj&6n~VQ63Hg^jc)GqCW*&f3C0;T>y$x4T&e3oynI;5D<=Ncpv%m~K+r z*&q1I*Z{Ar#H`8ht43Z@-gdxky4PJhWkwhdQM(K(W1~wNVF~b_3K=a%y-}yo!=PDQ zCYPn(+Y?<-+_8(eOHYi%sRw&wKFRdAD*R(ypLz%fkHLcQOV07Mw`6O8XOP2IP2tc4 zk9vVcj1&RhrmgM283wJ@Zf;$0UtK1=V@lPzSTw<@rE;3LALpz_mQwd*#qmd)aEFbB zTTbvdUazUKKCSIy!3m#{*IHDT5ZV^tb?%myWFm?8#hB;S)xFr^&BLQA3sTUS)GlFHT5)`-F%LIhV#||UDU%&7qIx_fqYBl^-kcw04@3e*d zeh>Z7i$u1V)SKt(eygEE@W;Ya=ha%aN%DCi4yT7R=+94%`4zse<%B|>VNM9XJp9^9 zFTx#4gIcPa=}|}BQWG6D19GD0pEvyq=4+%xs)@mulj-{zNX=dncrj@z{fgVLO``CH z7BuS%+5@~RMb!2PqGRDvlkH&!tPdT!&&X^F@DeG_3+UHYumnU0c&BQEE*9kaBVt|t zqySGcz)clP9uOl9V%fm}j~n0T5eEf$-;qIe`-NeOArKy$&0SRge#%(tXM8#RH}82# zw}_&|wWv(nHg2=2_>fnOm|U|g?>(dm@amn~%B&H03--PYrbk;0wm+JZwa&5m?vU>T zJQU!)D~kv{gdoPmAchl^Xj&%MD!K@P&_VlH z#pIIuD7-%eYlnvD1H9A8w2D)o5JUI596x?yyf~r*ReZt zqBA>VQ#bn+8Hl5^yGMEaVcEZQswqrbE5|B>jZsvdMAFj#xLEu6%klSR1wF& zo{5(;Tx`mSI+*m_c&o=X`yk?2zF(GEFR`^-*D z&nzo@)-`NhE`AXW5Ag1N7T|Ryt9-`0)fdx3hZS;!NXreEQ4fb$Sc*U2M;b358(J^= z8eQj8Twb+OX)sN92ImHNVB4Z=0iNUS-tYby;N1@5r9@lf0Wjc!V##kcBqFgx-fBZ>p7rw6CbK#G}RBw9P>}s=ejx+!ra@wda;h zbG3PJXB_Oeh_>voqup^op-o;sm@(P7q!0Ptck_+n+-U~eG%GBj($HYDaMnG`l!8c*HYXpSap0(EBUj;@-k@)zeQMR z$TMNTU9q&)D!^XPlca2gELF9ILiZi4qJZ6eI{ByD8v?vLarzks```RYcOXrF7BXP5 ziuXL2+EH?)?tY9XEVdHj%~1u*XA%i@jG>%%Spqh>+Q_^BZ<|4nj$NaAhO1nLg1{hV)0So z1AXJ_ZE~_ixZu5dRD~o145L<>mLyH}!%AM438>Jc2YvCEQe_pFCR_jjQhm7q?^7Cn zzzHat`QYEu=w74wM+nqxR*vDMcq28i=ic($^zi@>0`I2OLcw?z=ha@TNCK!hsQ}D1 zNBlc`!#oBep6-g3>~eZSU6#;szXW*yFheRLR=F63Ma)n7q0%bxJtvz9TN~gp<>DLd z=ctZ?8(^ecGK{;6iQ*ia?jmJkCe8r^l;Z5?)KRRw6%+q1@fm6Zyjd2fR%|GHvk(hQ zP5m_Aq^!FyuqZ4-q{mO?jBW7VwP&ok6{B#*|F{7ylGRoyKNdDi+FhNF1u1R?Gh$=D zP9-Kyx|?TWGLPRwiL1l`-cgyd#|#Ui7CCm9@c3)%_8YN)>YREiwI|wvr#s1Imsb;N z9U_&rBFLr(2<|)+dg1srVRH(RvysH75qY_KN4pbweP<#5HHv%(d&67n*T}(oBwhNd zs%lALx5O&N_qpLOAZ;bp&VK(HxaCTr$~R6K;&p3S;-^zDla|<9u$Bq0s6Epy%xmp{ zI$l1--dVYU>VOZj@Bs$a&9+rsd)Ke1SG(BVqQvDD=*p+uyiJWEgAjVAYiQiEglZSJ zXw^rs;4SmeY#fhgQ=cZW-0a1FS;egv0=$#_x$LPLqBr(B1i~KXW*^13hdgoAu)G1; zskRWhl`xT#MahTo?cWc^D_&1=O97W0#`1ecmV?dnt#w<$$1XaJ7Hw_Xs1-e5UIH7M z#D#OiE%)T$n76|F?Q|JRbQ)B$x2XnKZ+d=lHx9iW;0e%5wJDRzuOetkOG*9o9}PAm z-X#Tq!zAfcp||EvQx*jlqim6G#Us42K&u=(C zX*l+B#IohW4+#o@6Uy1D)eKf4Wx@@o*H!CSh0hPq$`=q?<oH=u>aLcJSHq7{1L)(ki{7^~W0~ zzntW<4kzJiBbMRTe*FX_$)Y5m?BB#mIx~JzdoG!oBTr_2aTIC@IZmj&Bm5l|Jr0f% z;o9_~+e%7rFMOd9Bf2;8;mGBWf1cQ^AX=SZUHYUaYbmTSap=M1?>H*NveeY?9o(!( z4_BLz4#Ae^EZ%P6(3@+rz_|Y%R|BbQ$Wag9-pa)qy#d~$8a(re^j=}63F;#Nl?^QX z%w^5-uCe&CT;_f!vtyv?k6g;gy`|-H&>z$lHcKw(tt6SFPX4u}2Q7a-Ntqzi5KXGS{OzwdL1cj|^bUt5z7n{20gzIbHlar)sEPHx5Z z<#qwg4OcEd@;pq!d89V-P}tx?XbfW0+VkXc$^Pr1NZmP$ z{R(kQhqlNm+Rnq71U~hADsdG6e}I=~)j=8}#LW$6%04)p+nJ#-&_UQHi}Dcbt)$j& zwziym47dLP@7zzB{I~wPNa0JysCH%O<0qHIIEbs}PNe+BiZf=Jms&p9!82K36H1ZE zWn#Z^zP|l1r*CH|Rc}_yF4M!c*MgwZupk$%+qY7B@6zs6D7R>sXN+wXximp<#Q&5n zO$R_;#QpVvQH?PMOC4#Vq&H7546!0USjL=|b9JR%U?CsH3NrBtS%_nL2>UySg`NPf z#Afj>_0#t-)QBMttj!5E0D~WcUgIETTS{Io4)7jKm(1b%&Y4tzYeJPZOSc~; z)ly7({fWB6^t$mX7pvtz9$L?%z3zIDm$BA35w^>f?POCDK7`Ex_FZqtRvcW#sY|T{K_a9e#6qf2e<<3Cm9d zh}S6`v^=)#>CC$FqlSfPrtRQ%(p6mebzpVWT6N=kzvXvfa&#+$zt|c&-Y&eFqQeBi z5Aek6b?dl(h^lIZ!>qr%D|lg@?sX0zj?wJf#Fvj~8cKm)i+7op#NU7!$tjhDO?Msryh7>d!wa<>f%3)oOr-AE^1_97`He({ zGZ%mFbef#O4rgf-Q8EaXwgq@MEvbhG)c2~Gah{CTgMJj?sd}UJxn8MfMs)^@j-#s{ zw|afyl5bx*>tV8y65`Q_MdKN(hEz$KBdXeKM9uGRTN$73^`-Y!x<)4TN!Aiu=sN>~ z6w-Dn$J(LpJ0ZQ2OC(iy(3Fl+`RM8Q0J~&2MtDXkj;X-T4Zw38^kvzT6<%zXo?7GK zBKhq&Td&#QPCdXY?_|{yjpUHa_ddaQ0Q<@)(exuN0bcm}^w9A&<MxEG(~etRlV+@KR5048n()!?XI(RhZpd09lyd8I#C6-hCH7$Jry7 za=+H8vMmNkqc?$)88x>X;-slxSG)Y%rpx?3zoq|+l}ZxoEq<5&ZnDHI`F6U0QV)-n$ z)xc)5;i_KiBPvA{`GlWIAD3i34H()&YmBU;we{Hgxk)iMCLry(u~=>-%j88JB|VP! zx1L8>;|%h(TwIdozz1jtUWJ#M_@6+*pX|WQOS~#~ORTxj!M+?YZ4?mUQ9TfneVSOFy^NgYtc3 z7@n#PiNeM)y--k{xU zwS1dfz~EWV{-*FlH>^2@BWKd?Lefcio!T&sgOLluY2aov%WA;7Zz5VxZsC#>7uMjL zJK6xd*EP5HL}OCda;|)))Ei3bw@~@V_IFFB`JK4>=yjm#-2Nyd>98=_p?^O6Ag`V_ zvy?Cu@>3TRW2p5&Lgkw(w~pIq+B>@D6+oJHL1HOjF-DNe$I zhZOC#_3y6HYhX<-IPrNGD-V0`THPmdLcivsPVQ;#lc=tLg+lj9JRMe%a@ad^8oxiW z`hk2pIo(w3-%Wh#!DK;b-f7wINMjz5Rh#;NF`IS9pQIxeX)TH@GgI;q%1B3y=rkv# zMB-uzJHs>kht=QOt+5Utq|@yxWaCh2Qsc;7Mb-K4&#HhB(cYPL`Q&b&*86-o*%A?! zzd&OT3-Ex%RayGAiC3)$W1^;Yv~&zYypR3so{t99?ZpSwQN4F%>1FrRsrwpsR)0t8 z+w!9tmhZq-;pU1tBfrkYVxkE(WlXHruO2aZ{TbLfW2?={3Nj(C7MQF51&xif?~3p) z;N^?6O{y|PXE{fPI`2cp*_o(unDl0yv#e;*cpR*9wW=Td^OqvNzkpP=oA3HV_xzd( zw`;U!oq?}19_)Rs@ZSKmOv>7leBC;jWdh|iF}T*B68}Qm*bev=u=OYD`MxQO#t$-C zvf1YBDCVOTJ2FI~1~ogfxe3aIY)C7Fg?av8;)TRM+RnmOE3-y4XA2DjZ>di<>WF** zH42qPRht>x0>wk0j8X$0D2={-24JJeJM72?3UD9s6Mb^>>3LDb8wpxG3#h~FboJ5z zZz}1w;(K3pREfz`;d;LMgP7Lcq}oSZaaj{Cz6*iY!4zc=Sw(DLXJ2zxdwr|P(n__| z##C^&tcXVbY=AUZjtI$anD+OZ*y8abN58|JAo(^DBTl}rCv;pM>fh^EKuvluk)6q4 z{=P5q_!i(-rC_kd&qT7294*_Ny)oe@=WrFBAu!}?OKu}2Cu8)QgXo%(!HFF+rK570 zZV{6?+imgP4=wME=hUwlbu2jGzN1mhUMK(G<;Q>FN+=(ei0g`;yHWFtPaK;A8yMil z`6db{aQczk(LgyRv0Dvvr)CU|g%61k%M#RJ^*K+?KsHYb;OfGr0B-?=Th^a=OdOtO zVJ4|YZU;NotGhh?o~*QGZ`BL}!)22TS<>Mf!Tg*Y`oAmt<6x61X~x>^zVrYu*Rxe~ z|0J0NDanJrPx9{l9B_^fXe5;&PSuk^=v!|!D}=`W3_6qq4B$L1TQs)2c^XtTt3~)M z+_lmvFU5B_Su2dFl>Pyt6WxbS{^Ja_kdhGlTe2p8r_b%HGf4ixeAD4>47(6|)Xaqk zUFGyXt*9(3or_GER|McR-^|6T)bjAc(NK`T=(;mGZ0yd$y{YyEePxcY94BQw<6STVnDrT=VQ1%EbY94?y@jM@WF@N>_i30Ykj6 zxdJ&HoG%p`d8_X1kH@zIykIkyCp0O?8>QY@%H`E~xrWpa><%ELMHp~k{O#;zG5Wob zRY!E%fWOW(DW$HUN7<$&SnYLu_#bEa)HZe2{-~EXzwJrxq71%mL^e)emeYm`y>dYX zq*$%1bO(KqZ%1@zO7F0;+-}E|C^n>FfjU<0i!3iz%#X^W*!d5`Cj5vAweONVi{%wI zd3SY$ObYAMkl<|F^-isQIx|Ww_s=;?szuk71Whce^ih5R={?U}90hBYsKfO*-_FO? zobFqyv(Ok4>mx7XH`^)WKQpB8A-TtKapj#28p-ut&q$-O5sI!2^hAo5=%-uwRDP>V z>tnOB*jn0*UHIB=F@*zmChj(}>AKi8yxxa7H#JWI(?M$+Ypcwt~sZD;b!FC<~;jdzA@F&xW^x$Ar(gT7+I z@8g<(S|s$ubM8J7#PpG_?cMsaFcJ#_ymCqz+=;ZKuV?JNs1#jH{vig~o?LFHM$)ea zhtgXmcInRnUM;lY4BhCuGVM>vfZ7$&%VZ*PHF;v(2<^W$76$EMwTqgsXBukH{$XMX z!lK-#^=?`1jvu64dQBQj?qE`TvUg_5L;iQ?4EmWN(7#a0vXc{iO9n|^wdJAtIHO^H zKZjnDo17M{UhV6y3ey()e@vQKq2rqv#|p+{EzLGDp~bc3VuM@JOjOONB1^!uN;TH= zkJ*&np?2y0c*xHV6Gwy^b_ds{0nu9 zWfVzj+PP%mhCzmnFf+UN9nKtV+;g1&n2Z&Rw< zE|EilsW8&p;de-~o>X!zOR>J%^s zIoYneCx0E7;3(@>OqmY%Hwn*ru9gv(mY_=!M`7^f^BCCCu>W$Zg!t@ z{*pkddYkI&Q_0_3FF+_K%=s3bPO~_+2vwzpFf2#F#>XpRF5gSTDs~t!1!*~wY#6V5^~Js|L4s0L>PjW&+PcM@`uBs+opRM?=0$nV;$X~B@ zSe+J}BK~H&$toL6S&NA0vr?fAk3M&t3He(RW3uRH^7DnRo>Ah=_xy=tp|a*?FsMVzr&XI(oo^i6_LfL|*ogDIkS1-Ds zy-b*!iN8^S3dPiFVdCOi$RscNNfy^I0KCq}F{`1`4!+kbvV9awu^&fcadRggeM?oi zLf6mkT#XNS(O%2l>HzPRg(kERR~=H7dC$oqzE&{RYM6fGaT}H&Czb%x}P%lbmC>qpXC>^i>6U?Al-%xFzIEv9k=SX%K5N(>M%RB#mI(wi28t$ zzAt!y?xAZ}+vTFV%0pSQtgNl-_q}&c$}RPnv`qtpnjo(|@kEf3-~4#U`vSZQRQ2{& ze<+zx>B^lZU1cV9VRpmVnzbr#>Qa33+zpo`*n4zdjX#Y24gzT!#8}4%ENY)b7_|#W zW`FJvEjTJWf+_&7DXuvoD1|2T=jhLb&n^|p-ePXI-p`3@7GBzrbQ)c3s>kmQ$L~|E zq;o2|rPEK$RR4N~YH-GU+K|S{j>}db$EF1XRD6*)8Dhb`!Q$)7thiqnszpi3DMJIi zb$)^V<^0wdCdtyOKdBDR|J-ppCL)I415C+nW_h;*A6*&X^~h^wC1*jia03+>OVerl zE5Ry3c(-l2l0?Q9tkE|+qvd6TLWmE`4>dwJZX%(_lYcSU`)Q(MH>V|A33d|I8fYv*_VeEUT-_6(m3DW|;rv$O3$K{oIq8Q#S;7 zPS5GyB6Kf#;?#Z}!O2GQKQH$`O_7Oi(kZL~Oy^236OO0bdVr3@A)FwKFIOs+RnwsR zKMkx>UX?UqtI4dTH0`mEd~J^|-(X@c_Cl?@AVn6;L`lk`)4@z*x@(BbP;xGwm-S(ka$zaWWqP1|*fMiyww}iC7UH+=^ZCwKzz)ih#lR&dhAb@Op(odgDsBaM9kQb? zKe0&W6dS>$SGq&0_}&k5A_%ew{ka$dn3`sHn4g$hfh+Dl=67dlb6syvZrS`Gmy2a5 zWvLz4iK~-rp!nKQC4mh6-Q{e{uBgv$vQejG3X&4AL_$t2H&`Jz26!XtvWY`6OWSM1FL+kw=T9Tf^sW@B*v$KWe&6$?$#N+@G^7y! z-OXtc`%({I;my`J;qkUF__wcbtp4KV8DMa>NFc~+Y6o%fp{cFbKUdRJY9qa{>;$ba9enpTxmTk1rS+FS zBnuC4q@}!fT#T+>o|J2+H9E+z{mWuLIVqZ^;U}>KY?@NIk90RooKa8H?5FQgMtZ=+ zIwzm=RZbcq&H<=9Q&=n{AISIh%aS=oZ$dh?-|h7AU(BnQNyoa{ELNx9YPTd_b%kGB zo`F<%N0JWqEM8$=Hf`d9amNpvpwo*kk_!5LH&8l`RhN%N6(2K?x z*0z~DL{v_ZYj=ZE7(JBuZDR^Vfm< z#d(DtJBR0zyKS6=eJ#fi4G!HNNi4qO5*8u}@h6U57S@Ya>CgMm zR6=v7|2ku;&$`I`OPDhNK7JfEoMiK&lOUm6(*Dy{%tT*zJ4z8O;GA42Gg9<*$!8yT z8gn`>)~sY}r53N@q+`W?P)vfAgXh;)35#I7zTBo7Mq@Ahg(1$e&# z_am#&;WY=$24_cY&_YlIEp}OPtest$V-Ow#e~#S|vnwS278Ek=?*@23RUU_Fztj-o z<7JtG7)F2d%eJs*%E|s}cE3SyOl+)QUAGy0p-Wd)a9;Ao3NJAqZc;O!ob@MZbUM4% zxZ`$(eTuVGI1D->cbev93Y4`&FLyNb8_fJo&5;}QsxI#yZ(PbzF}j!^TLiIjyGqiD zM2<_TDU-v3cY>>yqXY=F?^MmIm@p#}R4)-0RhzoGcxWWdkonP{yYdC!%LU5@K*TE* zHT;MVxXQ$16?e}Ma_cUOg~UhcID$$J1uUzm<+@xm*iM7oK zWdDe5=q@t(vRm>LnL}T?cj1|mBOB4i8e`x7#D%oa7(=e~uhNXfm&r!F}12i2&UiAiH^$1{(~x$ ziw&k!bC$(e@1vrvOp;2fpSC88ThL%-)zXXJA}FQrY(9_v0J!L?v#z1B06@EX2^U^a zQ^~Gw(;+n8Q3b;MTp_GZ_6lqz7k4^Q*G5$?_d#Y6*EeKi1ieAEJk(>h>saw20wjKNV)*u4Z7 zJ6N)r#k=G2)m)^AcS`i^Oh-heBT~DkE8Zl?Zb++;hUlZEbO!aSE)SPXe6Cj?_s5Ll3Vnzaw<#+R z&rrFE=T|vMW-FFcrqCm2A|`WI_Izk9&?q$JYm~Xik95@>^iDAjR247oX|G0-Yl+@1 z(kRhcbE9dsp0)Y#${D03jn8oWE1z!w0BU}v2Ex0@ju!pGEKb7b7sHy;&X`1%Hw{;I zplX!ZN=dyF&vT~6HOLT&B+UmyfklS-A1S#ZzR@{mkUv>GSmfORA$WBO-8z6P^{xV! zu$GY-P=jMu!{`s1q|q%Qa$&LGpPeS?%~Bt)kC{>RKv|q=#aTt!H{j}~!K>37>@xzq zUkE<{*v->oo^d&7EY#fjL}_Mlu_>X4 zvz>mC>ERpuckk<17aw8itFXM+NS3e)scx#9e{ZXQgGHx)#Y#F_&V&cW7IJ^XM#7w> z@?q*&vc7fgS<*dQX3(>v9rxL`Bv60wyFqoc7NhgAkMt%M;a@@uQ44<%+g}Y`d^i|s znZ-+cO8>b2I0h#9ut5a|{N&PRbRQL0W|ZpHJ-g}C02U?QXA?0HB26hIt#94-R*36z zTL_q!Yb)coU0QbQH~*HqjTdYeV%dG_IFC~top?H4RJ>buwJ}&5kt|9*rUUMc{ zIQCGXXJ8wDk&?nSySd~KYJ} z9u(~OAUe&bXF9gT{3su5wptaAo2MV?FUnp{GBXvYZ~vuW+juE14_X9hiQ*q`UCK&2 zwEW19@Iz1Sc=OP6Q1wD>({egvwFA*UlRB&CEozSys!P|2AbuaJwa{iK>t{TTqvrYz z+QG%Uo>um4MR)!nM?4|x+wj6(%V4$HxhOUC{}fJ~a?HgdAG=#H=Wk7^p?3akxM~P% zu0UFq&s~!KM25AL>S|ya{mfUe2*g0qvQ!;qKKQ@v*6GW1`q_o|53LgS=epw8IqdaA@nKz%#Y?4lP1c*m2AOv7iQ8z@A_ zC`4j*@n4Dv?Ot#_CABKe%B(qy9|NkrOKhnCv% z3oH>)C^fKv2^cDL{iNQKY8G94tc(EZ#?LVd2bcZh!P}4cp8fgUmkeo2c;=&z%0pPu z8RXxQr0EvaKD~Z@q-e%T)dfPN(z8>w#yMvkmHqs}y`Y&`M0W1EjOfvaM;^$(h?iH(JIuX<2DIW0I<1yjFa(y_6+gZY)XiQp<9t@7UX6Zne}jT-m~7^LH>@` zbm>~k`}z*~pRNHtFY8bB-DIlmpyM93^AUNk$jpqn!*oKm>SO$IgnF)N`2j7Pv+@p! zHC?WtW7|UCu)p@(yYckqR2)V+T5sve#u1}rDlC?3NRzrV)+lZpKN5Iu9b?tod^Ofl zE>XcpKRf)Dt$0HD@jDl|f)hwf-+fyuBltAiy(?;AdETFGMlQ@h$OSk(rh!s0j?UK< zPAL?4$5XV6_KE2${-rf9%+X_#U<{%hcNuxA&I*Pc8AOOH9GLDD;Y`-HyDj(Fayv@1 zx(SCtuTkg3&6!RXCxbzl$Q&-i>^y}(4UO|T86$LEOB?4jJnBn%@Vz)4W&BgmGI4YK zzGIqPwH(oE%TEi_#%#+PU95UY+>|$XZM3Pay!&9t@4kV=iTV6ahSb)kDiv;N^Sd&E zKtM;A0^ONXBKcCE4ydcgV|8( z_43`p&5^BUZP{!zmtO6reGi2-9AumAF5|IOJpN!vWvW2KX7=WCqnIRtCHBAMGPOY+ z0bciT=Haq~Qs?t%1nIz;uG45XN5nSC2XTVPVbxa&df>P53P7zEm%zV6oo#ANcK1ZO zv*T|VT76FS`;MtI$wH*}xvZsqd)g}o@AK#QUv{xXy=L_7+^6ACOfW*0 zdT+?*xT*P_p>ARWpcpK8sR!>`(NSZ4Vll0_l{p?_vICZ#nilbrC<#fSX&r*3m(TTQe{NqJd7B1~Q({VB zqfIf}CWezWJ7f#Qns0|iw&IEaW_{ zOKR*$osvYmFg3YWko#wqQoc*-$2GE9EJ1JCCut(q+Go;6cs$X$3`(Y$y9qTfpj%5` z9ie1RtlI+4X? z!L7EFuK%IZQU*<(WnAvExfctR>31NY9quKs!Lw$uvq~6}&0dB1SM)bm|7Ot3SS|~1 z&uI&T!Xrq>^y_WC(`0M3{&x)iH}3({{J=x&G*0s> zS|pt3+SRDxq7(c*)K4Hexhx=Ck5l}!=gvWKA#b}=Ry1Qg!)CE9in{ZYuHl=PQMjL8 zu3P61dq{LWK#OX<%(Bb5C((xG8yxh783!dQ5K--}tT$6z96A2>)K&{LJ=zmKDvV+x z_UO5gR#K$4h_{46XbI9Y{W_Zm>g|JIfKYFj6&%{2$#2wp$?FjBghlJc8^!6GF0D5e z+Q_Pqq^O5wVGbLX`G4duiFGTii0;x0kl3dl)vG?w64w|}Kkc54$E9o3M(>!22;%r6 z;vIsPCx<$gIMhyf2xE^m?J&8*Y3XsK?#Xb6-ddOm!()MQS)zi>-OCQ^7wey#L$WVF zOlI>;R&vEa#)s5TmT@xFoVc$($2}ndq2rC{@VUg{>0;&0B}S{adSq5HJ*j=1REt!Z8fi8ezK<(1ITlIiYKJ{j1vVtvwph+c{*zwoQ3di zyL&l*uW6nyRcrK`bjqS-wU5=b)_dO$twnN$Za-?ve}dK)p`P@1B-TN5}sV2`UQ}^B}~uq&H4!_;e8J z+xi40I;Mg#iSI+bbiT_+M&aL4IhRgTM#^=sJTnvU+7fLHiV!!`ZONgccBQPsWm1@y zGa%|p25U?lpo1-|V)V*%jfo4tTfdgdcOl?*nWJ{`8&JQULh&9)YaOnNWS5?Pwh~sa zqbP~*7(1v7$uE(p{MO-j;p+a zuYeg|@1Hs-e;rjC#5%d;TT?nB%~=Q*4#uhUseis!PV_600tn-v1X6n2D|!PEK-dM; zJpPEqw~hO3g&R%>FT0eq0+i0Ag`2nH5zxN`OFa^35nLz91BZXA<~oLx-4dNkkW38r z6-9br7<8?7&-_QIv+XQpQz2XkJELf^OaTz@yZimCI(%Mlu|7;27KAN4*Y;y}D znK*M^Z3O$d7#X?Qaa{pkpL*J;oYWSekWO4aA-c;X;V@W2wfQc!wVm&q?4@+BJ#0!x z2wS8W$-Uf3x9pmKt=<^Eof%$2>-{gkueI#1G(XY6m+?QZDX+0j2>sBl2WSCgOo2$! zmk`7vTKfLrDTZ*{lsNxx5i~wFQ%pr# zceq9_fa6cVk_zOtiiv)E0w2u%u5m6^ci7mqCDv(G_cRfj%1jVW`skB&xaiY(?Em zmsd~SX;EujR6_Jdxi@187CefKeCCC+zYYzNUZJDuw?UpOG)Y(tb2&^uW) zVyl+gq-P4-!(RFa0GSx_X^xQCuR~l)jfwIn?ZpM`$U3en#u_bY*p2x0p+#G}LHJDe z$Bls?)zA{@O`P7)8(nbQ>LvLbYaT^lmxAAPdg7YlP+Pt3$M-mRVvO-bM_ud4Von-d z^p7)oWGU@$(VMS#<0cu|ktog_xFj{ZW89#*uZ=v|Il1sE9}=+5Ys2z=y`gVZ*yV8a zWtPJyn>n<|bSrLeFRI6~@YahR@{?UsCF3(|77C4)uS9N2r#Er(k7EAAr-3FXrp!P? zW}nnMZ}}sq<`2FZ!RLX%@O(z6e;tTi)42_;4U1}*);TO+4suFGb+r-28#XIbl1`y1 zMuo#W&LIo6XCBe`V_Bca$SzD9cj>WGp_k-xLewUMI!3r>+B13)yda>LgpI$@LiNpd zslUG1Es1X;8cyjo1!$UV^7xVV1q?9d#b+v8wcb5Zd*2~JS>%(+o^6D8BNR3bQ2Dkt z+Ahe-nt+t4YTI*C!arNzmy?x+isUgZpt#z5qzBg61Y4PJCl;~##_r{$8?=l1frRs0 z4T8B0xW%yW|~yA^$48nKjHc@&7VY=)Dm52je{9!xZOuUy+Gt2 zC$4ZCYvBC~n=BJhgUM&bDYx`9#=qyML;}6!4>O}4Jg|PZ2wZx4M09)(I*JbW7CkRO z_1BY}rv}>4kygNSixRR^d`z106;N*IGFfzci3Jv!lYBoXDU-PUw%-K*%iogUI=zwm z6`#vC8zhzn{A@qGRp1Tk(MtsqsQ0~LnY`;ci(ya`X`k~|J(_M};$X?t62OZBd68SY zlO0uf^?J_ger~_;tlO-=WfOlhP1~OUyoQ}|IUg)`?Q;<~Y3i8A0lGj{FZ7x8_bF%f zy`IT6oL-}YGeGUyMd9T2$5IZ20o;_>CT^_lGBFYQ0mfk<)y7qMij(Lf1yQa*d0&Qz zhJo&C;hFOhS~j=0O`^v`CAP`scwdU2y@&qfpR(y@;Xf?ea@ZD^qFpk24v06p745Y5 zz<7mMgsQ0Cu@J39^@;|28M>&c0EqV$>IC>H>ElaPzUhY_2o}sOY=5XYhOS)*@P;qx zuQS|9x&WGNpbf;`@dr?qytw9ka#a;eN4-}sgMBF5-`|~eE&5+X?>mICt(RVaCB?~b z@)zDy0#YFWn#wy|w7#%0)3iW`S2-zKP2jpa&axv-o~Hdq8p9#ZEJnW6EZg7)$@@fN zsm#!h*TMnHw+uQpoT+A#tm!4A7Q&1M?d=b`>$0%;1a7RW(4XO!We6Kpy=2d_^i0KC%qss3G(4tmoh*b)zLe6LwWt5o#=t(eQmJKXuq6%T}Z$i zBD@l!$FLSR3n&#V%l$W}KYoqJENHK76mQ#gl)-!qM;}!ijVvGbGh>;)4^JIPcmMs8 z{?FPaee10F?*~b@ihbutaIjf8rG?r)ebV#0z)67Gjreq18Na=@`&?#PyU*3oKfk-p z0;y{|jOF1&m%=*$aHaiFB^$!N38#D_X>s$zwP#5$p{$aZh#awn2Ugb&9*&GEaV6b{ zH#V?Klp%1dbb-}UnvBU?SVeyPh!{Vs?E(LuT9%y(HAAUn_MKjd?X>|y>OJnPlTlSQ zGI-Mf7v3`c?FCmW&%yxm*+tYl*?75n)Tr(F{APIdifhwf9h;104*WkdA_h(mZMk3j z*2O5Y_N>#t?xextCdx7_t75;l=2)NKz&gB%;EhbRd$hc1AX5`cZfc$hAI(te`Q0H; zSc>vIsV~UKp{nU3P9RSR>0(4lAQc4)f^ppBq6bNh;~$raUrF*u6nief%c?`RGur=$sxJX+;?Cc< z>ne3UV(VHDl(e;#wp6L>fpSf$t!za}t5r}SsnUvykWxe;kW7^d^&)MpqFkf05Dy?y z1O$OmQKCf%8YD=R2mwL}A@?Xoi|tyG?8nI?T9ZPK0L*D18MW6)afy(kTgb&V%&6#^zg&+zro z{>(|`x{$C3*43$jpT+$-Zjv|CHeTD$FskR2K^S4jjKQ@MY7!wrUE{nmwHnFBoNDZ> zqj{47y^UrQL)qv49Cz#U3tNZj_gr2l)1+_$27)YOD|L$5%jLhik%8ricWs^wMg0Et z=eQ(}e9fMnHeh#qkPC8Unp(d%@E*)GscTwEDSCfAkt8XN9~S<7YUQ+SV5f2h6J6c{h>;)yb!9VCXjpF&7cYx4+SMYe(H z4OLZwU#59FZDSqdKX08zzjpI`PnRzFMQZaEFCX!mX&$Ps&8+RVG+6Zx6gwxLm1S-> zG!;RxcUn}MOdTbOq~6BZ=HxVgHmZ?^>9CE$);7hq&4d<|n6lLuZ5bGHP~O z@7iq=o)pki9bhjIAtV_OEA_q}`CMQLOZz`3KWK6zqhZBj>11UAbGuLR3pRJ~QKk(6Jq4b{h=so?1fZu}N zxQ7a{&82Z^Ny_tuU)#C#&vBn9hmigdC(166BQF4l%*b88JLLqb2PYsk+w=v3MQyT52CpZ?|Zhq3`8=D8px48G0*pLVF3FT|x;*G5a_o3M5_@;4l?fD(jus_Fr`Vg(G zLWQFY33vuJ($~0M8S2n*`|er9SD(bBa&>t8^@bMFHURWUTO-2TbpbjD!Joiw!BQ|f<9DRdr-W7;QZ=}>t! z?`1Euzv-$AX(n^_v{I0_DDZQYrS}DolC(|%{>(pJ-b!41w1*5;dCvAtOu+m9<4PD5 zk?&xSamzS3LrkY$$NBeT_YcS|OcqyiVW?@MqwvB_M$7u`>9ZFnl!Lv02aNthod?J9 z>#!G2H&yGty>{|P6OA)g=T6NcdY2H+09}_7am0>HMuMfc*%<~X0$qlRA%J!drDq@7 zF(WlBbU=aL-6%8jUO;OKz|VCDhIj7QJ3gdW@hZpJSg%+dSsF+QGBFhwmi z=-Iw6ldapQxi%1ekP!O%(YNy3e`9`vP;3eXz7Gr76m%EwESzV#MiXgVua1dw(ct=N zaqMQ_g~5qn#n`-3e-w%*s?)*VFM^;rNB2lo%x>o6NC=GKz>7po^}PNnaz?Ror%B<2 zN+jf7e~yD7;!~Z4Or1|%!jGRT;_5QhR6ZRN$ILkZCv5~>u+_`63Ja}!@T_Pu=E&Ou z4fC(}4;X25D-n&j@+_Pa{`e4s?uCtEMRuSa`Y}YUntPT^wn&(N)H4F08C&UY#tzXl z8_d;VnKEkWR~iLLd&|16A9e|tUG?}?<+t{w{YyWDltvAvr=kekAAbJ5j6zR{@WjDX zC<-fC{@q+5$!ChK6-Djl_J^>5V9v!>srZUTjC4W$3qHyM(p;3zpSpJ_vfvHhIrJTx z&ED+7J?A}61bELqltoYbbDV&fj^53HE?(o`02dCbQKT&}#TKXr85IsyjMzlKz#|kB zHmO{uFlb|Ln^B2`5`33L^UZ|U!3KR9wGrpA8zZb&;!?TJ85#;@pQ80K4C{la98{{J z_#=%4!7TR$SI$-|>TGnwW>6S9y9*APMPi{=X*U6?mRo^HJI!N3my2Ct9@e&MJ@=uq zOPz1!+7RuSlHl)2ra#C_-OIGj3QD36cc?)M?_@W7_2sl0`qNp+#xdkWn)3(P_eeQj zwKtw0K?gUrVwNzxSpmjSEB{i>*;NU3n%iANJx{u7C%YkL)urd^iqH2*0g5@E89DJf8ITgT_cQ^{9d$bP(dxqaT|6e#l$qV>$h7q{@ z!cNrxU|Iv_w2@}W;|TMnk;Z{rzE$Zc)_RtZ(GU5!MQk4b$u4{l#}aZ-OeHs2VF90p zr=2%>7xk#c-m+S}>+)Z-$T$$58&R&T30kSu=rHNI3QXs1ZH-ck#o|*#*HHWNVSHf< z0LvesVyGvBU{l~`{$E%dU;bB@Lk6h6Q`-0H13^7;> zL`t`AfN&Y-jk8~-dfwPb}s6IDdql-HEIg+;8 zrHUs}a1ShYJwcc)5}vR3wW{Bo)1!7nb_n)&9m+=h#f(B5BRF+YlN5~I{*1}f(jnIk zpEXM2Hksx*q$KZ+?`|@B-mD#P^Pi-e?oH2o@>RNpOCh{uRDF-MFV(m0T>a|56d`bv zg-lR8gEnxY4-gdv7b^Y68VLcOYbk#<<8YP5+L9~`SF*9fuh~@bA8OrffHo1Tf*s<= zv|5B}G_v_-BKC;QaNQj)q2>wH{$&fZ|9~fxDn&doqX&5i$W_v+lZ#b7WofeNxLP*XuXBH((myi5%=rJKEJ2*S;b%mXzsN{%e&*ecX(@Ld~rxXj= zg^g)so$V5w2=jSuvXoT;hYtr#CY+{Zt22Q{u?lKOwjv0iyFHat)glvlk9o=iN}`p+ zq8GQyBg7^}$$e#MFK|7Tp9>&QT}q5ok#rU^_hAZCfjqtdU{S zye}pOe&nv>x)nNi-*KY_0K}&)Due^_;H5Ii*Rj2yEW8S)j*5hcOiNb_XN`R;A^gN5 z6SRLT&hL!N^Iaf<&Q+~5{tMWdDQ$M^kbwTk z>aO~iy%G3{$9=!uBoBj{R}ppj?7++9HI=*Ua!?%0wZBL3z}<_lGyrFXC1xi@y|F)U zo}4qhV1p}kjw?nTgfq-J=c}yRyUU(#Yz7Ct(O{uDLI^^q^n3**dY4~M0EFYPw``vW z&~v~zjsRP)GGOm;Di(<<+2EYo>a{%iOjGyQ}JaZR=9>A`(Jgc;!RmAbNpr1oU-q zleJKUUShJeo44gJiL%&rN}OZ1Ea$AJ;C-2L@mWcq{K#-%+4I&6^Wv1PPXzsH9aH^_ z3=vz(oaYYC`IHW+Q_IXG0fw@CdS1NPrjOmLWeH!L)}=|EiEghH{{IlR(N`n&+=Sk5GR zYE$LfL}iZhq-*qh;B`Q6?IBn*&Kzktu5L`SV@+BGL0F|+ZBhKS&g!3nTa#9x4;*(y zQ0aoNs3T^m^8_PPP%9qIxDE0I|5IFbR{363nrd9|A}fBTS!UH$ZD70jY2DSAapC!YFe7XX+4XmDpEvMRQuulF7@DW6;vO43>acOCP@2au) zthY*SD7p4dVTqFb5&re8h7)y)FV@yMu-CW4%UBo-41IG*mCLI!3BgLAKr$OUQm}PP zvL$ezSJ9brVNKc+)GCd(S;(b&Hrf{{kn|t@38_VDAV{kOg~RKtR&TAWJZ09ePFM^~ zfJjIyT|JE6=UTfRvQK1pArmlWU-2eOhvczOU0s zlG)EoeGJFzi)1=geW0iDZ`|3b z-BPTHNlJU?Q7&sYVZ@?w0Z7{gLeqC=(NMB1B}w7 zPyHX%cmJ_Sz>3q{(M=7JO6-{ON5wXrF$i))7SAv zFRm@ew;oUu;iU;{8Nbu?Wb7(r$4g}L@w5u#uzmbZrdPQ@lRlE3gta<}eI*_6(93RK zlEQ`O?&CMQk`+aO#amLDr)3p{z&Dq;HHT%{vGkfWGXAuUu7bAgQBGL?|WMby~!*) z_awE)ygEPRTGPSw!q-*wyQtCc5#Il8={_qMVBU$X!802`2AD#77U6Eq6R;3YovgPZ zy?^GwbVu?RCT}n=Ab}+SIyjo0h^yGY^i6K{lujNtcSE-QF%ff8{TLaYO!KVE+YUGL zH+qPz6mPG||GUS^E^|(!Mcbtmk~6O4yBML>h6d&~5HV_mPdww;fMDK!2nDuQ#@XhS z$j)X$M-NW<-sG_)HcPyF^U~c#vntK>BO6D@vfwB*>I9E8Z+s`U#RMlKJ;`xS01NK} zsg&n{T2K!E*4pr`0m2K;!>9UA+i{P(bgPW~39i*1NgoBO*q|MHF)bMGJff0{5~1_n zcU|foCVNIV;$8@|y;E* zlmpT8a8D47OJhO za#}sXr!s;U-LE{o4m%IM03-$=9rrArzTP3V<{LFFRZw4414$okRywEAb47G3dt+bJ zUEgJVL|QZujqXX2Y?H6j)AM~E(_UL3J68jbSZG#wf!mwdl)L25ao@KGqj|`TXAE1@ zJNKYqP>n(fa{n2P8LdFRBuCoRV+kl5&j$BTKnUrJs~?IwQB@~}lw{1IB0#gJQq9aA zd_)5g?c!dvmnv4sj>T2*2$UE}MF$oJm!9juRoX8I=D=V+KPOI5-T?xd*|+uY2Kxc>`t>!@_QAA#1|L|WLT6EWE&G>DMi3N#{Xm-uR5 zj)x7(0JHVSP%Hu-Q~<9rd9V033m8-=vIy#6=)O`3>E>F6Q|Mw`UA>+`@=%PIO-JL> z@(*8XfQFVp(LMvjVtpTM{s6MKGur`zKm3pP&j0Y&FQ2a9%8#o9mbbI%+ryF7PPoFTsxd`C)nU4)fP*g20zR2K0W`mObd&2|nx zcb=#gd=f*;`6|q%f6ZOhvv@oT0?eV`S=4IO76s7}j>58CUufls*$DOms;+YIm+28B zfv?dd%{fCJQi(eaXI2!hbjy_;Fv&WI@gcWYcro+u*413Ar(0(gpb{tD(-Djf2$oy2 zgbecYt0-ZHg(8}YMa#`Wr=X1dI_@F;J8U(KFQ^g{$9K-w(`({2lYO1zz(`q#ln?Qh z{V~e(Bxri{E%x@X`T<2g@#)_Ebgk}OZ2Q4UiHLNFXKM*Qt;rKVXZWbml4wwQ=}v~H zEpKyUFuh57b?|@kjEoxKqrMy*P`PRNeEpPZY(2%L8h53vzWuYa>oml1Qn3K1A$8uQ z07XUU;RPi*T(Gwe7ZDQR?du2f9YUKeG+*HXnyy0r)wZPa=`#Ap`z%df~<( zRLbn@9>RU#LBrm+3VS9;K7{(~=iuRgJnITkmu_zpc%R`X&!U7@ z1+PXNpF-DjHoB0-wB%OY97$&*;=`qaf~IA~-(7gr4AC25zmwd%cg9+OxL=r991WlG zf5ow#sGM<;PJ!6yxq<>K9#q0=kICpcz;qUej(ijEW}%hR%&u#E-X2GCsFjweY8?l3 zaQZ5W0r|Y1E+oJ#;nJ;edS7QVM&~o>8&o4&iLyi{am~GtlqPSTB8+RM1fhe@UN|xL z`+B8BEyv*%nme*Jx3Fv&pjWd2HVt3Q#PipW$I*zCg3gw0x6vsM)TM`lb={CIz^KG- zXfl0tx^Rbz?h`1*^7+|)9P}`#lY9dYV@-LgQ`f4_oUBB30Gij!?$OzOXeOD!PZLKA zpuqk$7-zXjTEbh?2zo$e6`MRbUC}CR}>K zSkpM*ut&l*ChJB7R0?kH#Ru>ia4c%LiM>b1^bV#yw<4OuD;PX|_Jn^+Ferip=nn z)MhBCgFHgac!;$Q#H{nT>l3{#4P+_}^o^P3{kIxp+YPzd4hi|Wr3tRrgpL5K zo!D{xxL+i6tZqojCKRKaLgigJ-*7#kh0l8LCP!2V_h2hF;QRVF*v9syhvUZ z@7^jc1ZoJ0O4Oj5wW%_=WZ-F<1N{39_%K0;n8o$(S}t7p=eW?NAdzc^KEa>k=21Rp z8yd_d*L3t5t)#ZbLnI57kDf`~54BMc->CJob|Y0Bl=2~kXZKizxsdAjNqV;y}~Er?wpau@R}o60l~#9}Lu z^$n)&(Dq<}a0zyYxf3mfB`;WX)R(uS&Go+~kQp(w<>TKQro1d`NE3gw!f4=&lV`)Kzt1g+@A!+e_ zsc}C%0cHRy5tpvAs*!;RMAa(wA5q?wkZDi{6W(y~1!w5JX6EFZ9%P0mVzAM%nl@%n zm=-&9RRM}=*v2RB%FuH(Dn96ZW7$!uzppDp=dh@u>{Jp5i@0EM75I;=YZP;XX}gNf zWXcpy^N9nUo3ru(T;qy_v)7KP%@y1-#I2bBYY_8A<6H=jvXH~Aw1Y{mHA&8uIZ}Kr zli{&6Fg%6w80@|5=-~zgEyCN=UFZjrZ2O8D5^cr4U?n0I{xJ4M_}};YaE0fKfhc_= z%!wJoQSR)t8I*`(gxS=tc$3Bf64*1=1I0U^+3 zkH>Z!><8dZqx9=62MD9u5a*GvhmoHNd2!bLQ?Cgip^8$pa^Ji?h(&3u;qpdU6!%?! zO9*Rs)10qFa5@D@ZeT=6sn%;f_|6ga(P)0m;IijSMQiHGrD})lM(v*0Hx5%y<=f43%K0xhPFs3`Gl9ibeYf zjq>6?5?ll`pViwFW%1FX zYv(aVCY#vfLA7tqE&`fx8bQO96pfDZX}`l4WAqc=%ICUAD5UI1FGHk^SXQQTm=6Dr zB?>Lja++;Fx(@*S1J&lGw2ZS`^h!;hiSGs9xz%AnsT{9acEkh-YO(X3h$N$G!$F4Q zGm<`4TlAiV5X?vX)&A|P*$oF1W&sVA`V8T$OA@v^su8=8y}$C^AHn;lf%bM(-W z5BH|yzk>nHI%u>tp!QWKtQy7Y4UGrQVGk(0+8^ZW2BVSDkmbU|$S&?7dY*BfP1y}f z3E2))D+mok3qFFXR_W5A!xOllP7}v10xm@h|MMto54fqK?8R|e=tg2hkG>g#NMB?ab>)o)sAMp)>WF)C0(NQ2|1M|Ljr}Lu`Vs(Zqh6(f z?hg`kGyqWWLQW0CY_;m;MLun`S8s^lkL6O4NM4C_Y`#`x~LywXvAtx}O z3rl?Rq7)tkN>%)-TlB|GHSWC+R@lOUAJM@F8?v%Ozqps7TewI64)=l+vlb9 zYmPV7I`%t{{K1wl5sO3*ufLiitl0$$f(PLDIR91zj(+Eh$pL}-OVmcd4^3^nT06WG z-IcZk;C8sW0{I7+2}#~>21ji(Sl9c}Y8at34~~t*B#tcNI=5Nf6F9~T_kdDLU_%k( zH3x@o2?qyj{P=)Iud^(Va|h}-t@L#ZIn@nZK5Wk>A{LdJIoKXzk| zGToRXs9}KMSxfr%rZ^clQ2)1K07uuW-d0;KnD!5ZeFzLtMCasmc>?M_)@)~c%n<3AsL3YV3jSKEDhYQhR z>XFX7+u?48lzt}B zd*pOGg|MI2qTprA{5ZH#!;R96)EDB1;K3)l5j(=C8)bCnR`(2p@JANO!IZ$rR1{*& zdwUts2;?kqER00@UX@YOBM8KcU!%TzA|84%8tzmGX#^sarFsRf>iF6nx+~l>zoLSl zlZQjg*r~T%8{}6(hD)I>{5Kr-b6fHol1kLF3$Q)q&|x%Y-r%W^l*p_x(^}LUWTbE0 zrTDFPo{Gq8XdveJ<$#sk-5|$|Un*!9%|Td$m?^cK;kk3EwkM|Lvf2&0dteQd*}`sO z;h_+uUG{1MnMe6Ch$u{t?2k0?fic@UW~*GvX|98DA!)s{WORLLP}&1NxJNS<*^%NK zz?#0dwz}#eI2@)(hQksBG^e6h_QDGsd2nU#&#G1FT7r!1o6lTQ%hc6?BQJp%=bofb zqIuZxWDT6Lu21}ruQlJRe*oFZ1z65tRpaw0;;^3+q-TU8%>fC_fzi-RsL~-ESx;H& zuUy9oc<+J~xD~3};G~WWn9>9)AL5&EjL#zBxOuKs=b%q^rcN`Y)n`*jGtj~Da2~T( znyBq&e-0c$p!2+6MI&%ss#Cls<-PiCCqOgk>69;+_WAyMA&g^O0ZNM_&z+>HA$NK5 zb&5V_O_d+{c|!bmr)PJbcPw}q-zq(d_d!ahi(5CIyxCl(EOn7a~hOp zI#t`#z>wRbUq<DDL&gGA`1; z3+!@dE8Hn+BbF@tG?(XR!=M+)9h|*#KSaV2Q6YfM|4dd4za=H}WGx+?ht{QoG>Zy`C7=&2tN=(0-6Bdd(> z5G@z`;8(noV2fdf{jL&92zuU;L2_FfT-ixp=O&(vrAjWqO`%>NyFbD)PtaSeLv>J^ zcl^o^`|80nY_tpT+pbyE^dvZ492#eBvx>``cR(Fj9+P`7Z5J_5`B+%*daU%?>DQnF+OC145Hn$iQL-fUA4eNBx!ripqR-!{b#M#B>L7Cl9%EmpetB@%MTtxHkJ|JCTltoXi_ow6m;fry) z%qVr-;(wU2xXT-dc6ab&IyLjLowAybh05W3J9B786sAV&UUi2y(By=1T=@@>^CRX(k@M#6NWjU{WFMUwV6boGiG=LB^v_ zu++7v4ZO>cA2GTDSilhbF*PjN-pBC5q@)Q_GEG$g*gh&gU_-urGsLsW64@1c^^+q& z^p>?P!Z9hq1p0#M{l3bT2umZFnd2X`L5mkXUuy{Z&@q zCouroDtekE9F)VA%9qg@P`Q~$M@l-02wyRqHT4nx3&=jsue1^o54ZhAOxy{oW3C;I zC~_UWE z+UX6$SKMgC2a6E!D{Aak6Nm171Zs>1R6mA4Z1}uH$RWnfgVQj782C9tj@;t3*SWRM z{x>{z^!P+irq#fb*jg^qhv8j{0{ZLS`P)BwIqQA(v*@ne28G`hk)T zMuRCtVo=q3yhsO!p4Y?U+opI$jQwi~u@9tR@?H)kLb||P$1*W7&iSK}$9W#{uE{zy zJDV0Dn4=3&fG_m6KDV_BL!5B`wfU|vm-46SyX~jzYY#H2qo1HMx9vzFud7QUvo|~} ztu_T36Sygs*(#^tq(nOdEs2uCfEE#E@vVk=0@|X+)XGxrtPZMZk{WqTH_Ksw->IlG z8F_j+F(SOwjMjriJlC1lwG@>cYqmfhYxzNC7JRbKE=0-(JVH zx&=GT8*mej0uRP6Xl4pgjbmIwz7OL=;RytNCm)b3)a9euQhjOvgbhgiCV+Id3mPh`DTAT^SN-+Ce#~}P9BuW z2Gr$|U_4L)%X8`bso?qxx!HS#wR~#Uk^Qt;t*PDBVVA;?#mLfWO!H_HP+w zjQh8_ottN||BLW1xP&g<#{b%d^u*J|tNQ5Y)~l70$=wG_x{wMtds8G^I|d^IaI#A**%PMMI@+U$j$IewF; zh-z+|1G?=wE{kbR%M68`!ctge43!!qZPSCu@J?A=A5O&ep5N}BQjaiGy!Ddohr^B` z02n)8VKEWZAAtBZPbQW@_r||-h5UxTO^-B`$BCf+PEI$6e2iHFztZf02Tc=@v!j$P zwvH#)!}HF$FL}-?1^4E|m;{r$HGA45J9UmGZIEKN9T#q#QAe>bwIWZCEtWfU3Ev5B zHi(-5HCs?cReWR#9&x%^12YF6e}FTQ;Zk&ksG)75?mMh((+Ty34*9`SJ&V;`|15i=%Wk zDiiW^MFF6aUAu`4BJsw4WZF$!dyDb_Gdn8=Dy~V&F^Q>8@u^RYPfQAP9jqup|$1+x>c}V@E>fVZAo$8?;y5 z)E&#B@Wd3YILaK`TP5+EO8XBW9W)5skzoOe1`hm< z_b@>9S{xJ&8p~SaAN*>x3|drj#Sm9S_=1^}CH&pY+jL{$ov%cc@x_y8_Kbj-bF{il~OyXe!+p^qG(~3X9C;TYI(U} z|BJ+yKarNp$Q(1CSI1yqlq&?V$5WW>-1!gT}4QL;PVZ76}Oa0M&3Tgj)2 z1aHx%-ePrjOv*#M8bpnCSGGw#{3Z}JGR#)n*2fi25`Wvh9NZ7Y?=>-~`@qye~w z0t)jnu+zmeHOJ=M)SR@@@ZXK`#xllI7U`jV%Rp~vNg$honTCS6hqN+v!-s2Drzw42iLGkyoUC!pq_J@{J}!X+?p6)Y$Sr{|YQDIz#Iw12LE$-sh2 zNF%L~dnx8uDEhzCQ~9q%QL z$Ty->I5@e@MJmb_TUI9KcrwO2V)Ya5}Z#Bf#B=VRD5yszs=b%0hYhTYzP8nM}w`h^VIQ)mfxfvbxO3 zWVEx!fVUayn4XX4M@k_LX21$LiXSOX*ZDpA*q{Z!x*X}9kAFscRq0sj>BV{kaoqS8DKqo3%u+ z8(IMhAWL5wMUjk&n=NzE*Qa;|;wT!-1Sv)?KhF`pv!+DFA>WCVjw9G1nArwZWns;@ z@iGjaRGrPJ3>SomySL_ypt(eg1N~LA^elvkGI^n5r`Q2m zFutz+s1H>7d2NuLrZquzt^LE@~v}f_2@aXRj!gtKk^qvW| zMY@W%yHvIwlq@Bp17)zY>YfQ)Pk``FP;3Mv!jCx2u=K6*e7MkdSK3{s$=OiFi}59$ zHYu}L6y3_YUiS;5p2)|uxWK&{U9qs7p%|!lt2|nL<20hPKJvu$r4S<@8E0uw#`N0x zU;0ABuCJO6?flEqFo3V5>~M3CVKh6CLk$(Q4F><=^=)n$^M&0 zrU+r@9O{5w_WgO9QJ+1iW*I>H$Ht7e5%N1B_0H3r>>5gqkS9Jc7^3Y9?J?&?%V91# ze!Kq67TnZ;G%gROy}{BaiB>)V<5@anvG-P4?5)mDe$f*!istF78vAkgL0E985S|lM zIiMVnQ-B(pX|M`;9HdDXiVy@g@z`mp9F)Hr+2GF?>k88`o;2tE;{XnAN&9DDj2aKt z4$hXaChf%!-g8ccc%a|B`qpBVc1po0Xr02xxoF@QZ|`w<6BAgCiUk@YR(>ZB7iu;} z(Lga;wtAd$mvRN@KMF(+(eH?R=@L}A;f`iaNAEtxm1koW9vibjDUWU|nhixi_V(Am zY)3P<;~)`$YI*f}*NO_iBe$WRhcDQV3c;ZMPYj(tfvT8Vg${P@x^B>>c#D;}_52#f zASH1?ft_U`x?)uEkGSD%T*V@eD4NOxdiN_LYgsp!z#Kh5w5d`R}cxfY6wyEN7!vo5+aVPm)1aACX9xJ+A=4c1o?`Bb|n*jKoEPaBw{SP zg=0+6FraznVP-+M(z<|#-G3o2!c$hHm10-1x6%y zc2Q|w=+Ut5L53_Tt|V{$XDFCW*@&|79CN>u5O2czyrO5v##$QY{h@wh;*T3_OUC3F zZ0CA~gSQ`azKAxPtP<xh5O-)Jvkqjsmo{)mw?9wNhAE^!B)Ci$C5 zW5;A8Bv$Qi^*geB)YXXSB!>bUC$3nlsWiAZzgFt<-|NK9eMb&qAEsK86Y_ey7sIm? z!n%9uV9j`<017!<91<0Tk4Um(c0FEjw(;H&EqrO5j`bxXkEi0}0&3=iU!Uau>Z5$g zNCSmsJ?}}*y*`mAp2)>7({JnFzeCuOn=k}jCfI*xD%E|!bSh4M&2PAuS5a{|bzswa zv=ZqxDB+@o?iQNiIZ8J84A5g*D09g@#K-S!yZZDsRY=*-7zuR9XJX zGHr;DgP4-J9|2F~bbI}x%2k2t#yDuFDv&)*6Q$)`0j-a29V>xITlU~rr^RCK5C{L7 zTXwjGO}z(fn*$L**yV23P;TnR6Ld$@vyCoxVfG{_NSVVoVszTo;`t;ZBBrn4e~5dP z$Q7P~`~t-K>^KOrL(pti+r273u(3qX_;Q3elH(G-TMgu@MA_`$Y|T`A zy60=qh3{dYg_&NU9-*F{VCd+P2GRIj2rlLKzUrTBV3c)0v4Wx9ICRkFEL@Rwmu%!+ zyjf)pgY^%jsM+ql69yyMIS`scKf7Hpl$<7CQuG%$=uZz5Oi+5J+cnrV>_Ujd^k4By z|DV#{Jg%v;iy93eqB!6XwM8+aA_S#QAd1C+h|Gi}-~cLBTLm1b6&ye~IDvu?MMOnq zOb7u}tAeO4#yVjgAq2E2QpJHmKr9gmN&2nlpnc!>yTAL-y?;a!h&eguJkQ>1uf6u( zex*g2)HojqN_N*iv|{bWYg9*V>)R z>uI%B@%wjTW}5M_%lA1S-)FURJ~A7HY9=tzIo(6vJMGt;7vZn1L$IfBP_!0Cmj2rD zz{Ez31vD*_WOW}8i~ZCBPL5yTT2BD*C6o|AISvb-$4_k>oGaf#l!AFsV4&JhlWa%P z}Gw5B0%~VeJP}BA?Z(-`77X_`MQCGM8$c0W|Kn<2UM2p;X=QPnAdA zqO5+72wA`-Hn>aT(e(`4A^%$mLsdDjDA)vmw(Aq+-&0i+2r28J=pQ-9?prJpXu>{c zYy-Y^pk8f zF{rGDF-|OpLqCTnm}F#U`6664l3?38XEe-vKlYYn*o`k6OPZje%X6}Wy&`i#qh_l6 zd#`a+wXlnlISW`ctQ{KaKG6|kDgOB4qAnkM#ovifK41(!?f%|+)N`` z1(59T(I0IdQLmPVw~hgBT|M#-*~w=*i*z8y`{+#MdHZo-;^RddJT`9(b%BB)i&hYL zK3;nt(v+><;oZm4gX?z!UiyCv*4b67oO^EP@r~Snfvdk!eNm0gzSB`sY@NW1zxOmA ztsG*rd;@<{YgL0T3WL-AveM5s8)+RVWFsFHE)hf>AC)^!@>bST{%G%a^ZO%L`L6th ztO#dw(Ck3_Rc=!tFKU)`(dD#rChf|#tce7{j(oWMDn}mNH4>cIsAZX9Q&hHzmWOoh zx_;>E&SfQgu+;MIVY-sx-}=2cF#2su3iWEk`j)rnbo>3TXq9r*`q^qHH27acr?GQ? z7cA2?Lu#dxjqKtLiM};ilXh<>XM(zF_Hy^i5zlZ@xtK3}k-F8Ue5YF$2tOkFd9y+9 z8}$>HLRR;g+P_g7xk=v1Us9|aX_{2O*b!&$5l$1xwx3$;IUfmpP5cjhbrjAb|K$m( zzeu?mee5OR5MhtqWF96c-z^XZ{{B9sbgXlWtC8$`o*|RB;_Yr%rk|dd#y>4j##jM5 zOBhXS1g8|R+AOQo8JSykbg9K-um*!L=s}1gF;BZArrHiw(P63_Mz(#rs*r$K+3&!g zTWQ#OaHB&|T5nY-H_$V03gL%I3o57nAyBcD5tO>UUWKuz8~nrG{MQg0f7|r8NBF;ZoAB=@Z%66F3W3k$!ND(W&q%3#3IW3`B(H2r$S{7T zE5pV*lH(a3_EVRd&t{O3c^IAJ_907Vl&$vDkAlm)#gw!qdIrB_4)%m6F=YCMFtYLg z2xHD}=a+X`KpKEl$f$vMq5C-)Rjb0UmX8%d(IMQtsM^kw6_`7d-pHQcfB~8&cD(( zybOrV-C;mh)G_eb_BBVMDiD{BZE=dw52X@1M7Ff-e6c8}EF{~dq4&n=^4BbZx9>QB zQ=!cA%7)crrA2dCpCKsHUbV*kVGH(Q(t`h#*nJ;-EKH43dR?V4F7-YnISd%sLW$dxBk&=5mR^YyG zy!$xNbM|fK-8s9gpMA^CxA$Io`>|$lz@UpK<$9XJCka8}2O|D%+6q3*`pgq`J*wP< zmqI`FcLV&C^axB|NXqGF{_EQVQa??BnLxy*2jE#pm1AeK-g)$~iPVwYM)ZNYuj|o8 zTot}gtpzSEd#uIc|Fb6P?^C-07^(>1^a@suvDBReKnN6+?3kBC zk71pXWnYitj*p|v0%u1HgRd(0?B`7Nv(lRybo2F~o>|nJng*2Clzm^5nE>Ylz_scL zOU-WbS~s^X;No1RIj0j+1Rz&5&%pRPFPEflij+k=90c2o+JYYA;oLRWWJa!^shf6R zJJlH=+ZtI}hx$!hVeh~fSPVsh8}Ht^%$XJp+%vH7QI_t~P2DwlcVZEzE~$?n%)HU{I;8*IppuR? Du}k;+i|fc39Ak=(mhs1M2ZNbJ7K?E#OTxNJhI;2SvY)n3!J zVO?+&(IN$KmkUNQ>}dC`Kk z?b>UCL)-S*jK+ z(%eij4K~Rs^(WjnSI5~)I306;Q~mutZX4(3Yy=qbJ9^~@@)LjR z)VNM4upO(CnEdJ^))^m3F|&G4P$k=~j-bkg!>XdIlII*XwZNp3`g?hja-g(hvrhdv zaNvt$q>Sl>v~dR0&OkPVo4qeLrE|MzW={_oIl*k!`CIZ<0x4NyN1(sD1v2f_Mek3X z{5p59>$;gOT6UVMsT;)U4JS&>?ET)GA#4w9eZ^yrO)4WwLfm~Z@tz6wL?+hJBNqwsCxUqi^99UkGZ%Y z(KGOR#a7JSs|rPbDBsSfC<9%3w)?jPd~oxDrllJntNmH%%M&P=oq6Y63g>l1jl4xo zA;Ta^_-Kbx$ML*_4=sKOFB@Y?G)H{qAC++|x>F92nptR*_v^7zLZ&*{1{s`XHH@)-3q3OWBzfla+uZ-nI&F@kk0 zfbt43r0dWA6dP8PhLgH#Lho+JweODdmcQTNvpKA(e6*>M^O1&vBkRF(2JVD4RdQMq z$x1JTOz~aW)W$@wB|#TBlk180pitOR{fu)3DHin5Dddzd$~?fUJ6g}`gn*9osL21x zpY}&tpC12Rs7lMsKOZ>M=&fwSQBbZy98z%n=Z10PH}J7BMkMjjbBRSLTXxykqed6V zw&;GNE@P@#VYzJC6&PQ68#o~A(x`)*S9mn^W_>W%hRv?(kldkgGxS+Cc~JTvPJh#C zbwpYVL`pE>QDOq1<2ddGM}6!Zh^TjdGkaJVrm(^FL+*mg;T$WG$a44M4O25lxax{y zHbnC|9rFm@UZUl+q%P?fj0T^jcH`}WHnMttz}3rDT#|e^@%Yu^fb-fO5>$7NFKMQ_f(ZRVTt@5!>Z+)=#|tH z=u2{J0z{?X1WjQ2S>-#8PlL&`V9bSLOk_KFXK$VcHTnR5Ax^j7hqB#VJe&+In0^z) zqTIMKCG(=P#I}OtQnlYq&OR;aWiCQtq}b6&arl;52y9Is@)LBqGAzKG0`-zdXEtd_ z!|0Muf}JK6Y5wa(LhXtyP?bCv>-k5BLZNnh_>IGd6V!h56{d!ac}VmJT^q^ium?>3 zC8kT4dViT$m)!W-hx3z`WR(3#wn&KOR1igWOt(+{Sf40}tH6KXe@u~*cnta@@qd;~KS+<}8@)6Ol#KXP zNIsai9AiI7X7(7-sq^TV-&IofMq6#el8r+3LfmiE2bN2VMhAC%_)Ij8GC8pO>Ju(3 z!o;CPuuz|9qA|W@rJYc7An;$JG4YhS&7&=9q1X-|&j}|#)YaL|QzIqdIx!q1^y5Da z6DTkyiq(9czeir~oVs-n)V`1h6_y%J2QK9|xtX4kA`gm3j&VGt+Kbk#Znd_(`j#&^ zZCP);IZ>yxb`gF2G5hZ3gBGQv^)3rn8e!B?ZG)x>A^dXTT1~-~c~@YIim5Z-h+|TN z*7hc4k*2VAA_Ty~-82?RT6^G|ooLB&GIYA{dR%PS0d}Ox1sC%k`CpTI1Z+se^fc1> z0mHfsAq6uuDASKKRsbqD;BL0mHW25!t|sNc7JM63D@T_Y#ecfxdC>;KD3JR)rbo%u ziHXEQgzYB;3rM3ldG&N~#R8Y;!Tqm}mG=yb5cV1eQ^0KRHsoIAbT~D!K8?h8tXxt& zd$#GWO-aJPIO^d=qt~0PeXRMd3tuxJRQH-7y8+cn9QhA-D8+m%E-QAMfYlrf8x%IP z1{*kiI?1kll|O|WwKaO4>WKWzQt9TD&0E8v?R1zXtYnwAxv?8t!W9*c^;Y>x$ z5;|jq@>Sc&#uiQUc$LjLP0URlP>jRAD*fg1YG-tCdr&>Bg@2zgY@APPdE2uW8Y7jO zCaXDNh~j7lcZ~WVr;hV5Y!0CWi{YiKIk;Y)Ya@ceH&2SH*Db&zw5HyTubbI6G`yBnCRJ zSrQ&~C1T?I3lE>TstMeaM3wxsBRGd3#ejBKpL;2H(o>#=kJVlF!Ku|A^`BRbiAmTt zvwakgp5=2oF(Oz`TAQWW|1(?=nw37}Q@{2c`E+kmo6Z)kT+BGb-5pFHrdv!$xN9*z z%zaHtT2bY-w7ud%6oJJxp=%+6IIBGK0(S!zY!0Z0Ywf9W6=@w?OG&}DT8BbvKX0N9y-(Y!v zvoTF1{v%c+m^NUEEIboJX)QnBL= z;q`rzp=q^#VME*`3msvxZg7m(MA+(Xevl2HCg^hOmDl8|m1yw*?#|WIdzh*>KO@x5 z#XWSU>^5`!p2LyQuw7*oDFr_Bq7qjFg>e&tOjmZ7_k3J;wt(A?4bp<|@aG2Z&2rNp zy6{!gXD{&%Zh?vW84%=$pU+)L`M#`YB+A8tQPhifW?tY1R)fLGcK(9N@@g&?RbW=J zR;bw-{AIZC+9!ZuODwfRQSd;f#)L^RM@^|sv-@>gZOk7?%%}$ia2krXCA>M_mvI)f zFS_KEem3L7+ctsjPhDiNoy{K)Z)G8V=4~%Xf1C8(s*=2!kB$S&fTyro_x7CUpHsIPnVS8bV^=Ed8BQnA#Pbx?pWTe@oe-Qd0|G0pa0hROJ!y^BE!Qr-Ca*P10n)8!-UzN0TH9lB8EvH#(n+<{Cb+fZ>`ISy;HR9BfSvpT&-^Vw4 zg6mlzd)zMUD=0s#I;y*JPIo_GOt#~_4gjNqWUt{p(90+npHIJ?WA#|pKlP&7fyUg# zTfdOhC=-HEal6y#br2JU_l1lkgr|`e`Zt)+_EN6Cj4D=z>-jvSgqJ1g9H*$ysR~=V z5^B!65S(QasVf#aL?82EjxP@Q`aH6)j4zK;oXz+r9MuD=(JP?v7OSIu%jfoY8SYm$ z?qhDxO+Bff*@v-gjATr|nZQ<|g&Ej#xZx}6(1Kh=gf zUQ63%JHFo2AUlfh=TPZ1$ZfT&S;3cl@4r9oCQ?O5A&_@Nv%o8uZ^}2FByR2I^FL{< z`kCjI;E=cGQl7QQXvjF)9joXWTn9MfjXO47YTn9H|MV-XXS#*g)6313DfK%@@F+rZ zx6ATUZ;MV{X{oO7X25ucV#U{3{lf_1efdpTR7Omi9noX55q$^Z>Uzp448UZcL)>1n z$T7Y;0egOcye01+hDD)j4Y&L6B*@ylJoat-eiZrxaQ?zaW@p6bCy?Ht1X;T|yZtn! z#ly2M)M{aL>hwBR@Q3_Qh>aE$*BY-$T+&;g&?#amj>)q{X8p_%?UmLXRUEt4p{_9N zXDk2RJw!KLm93we$UcAu9hvnJF`;{9-)igc9P#>&vqM?4YsKe6rZ|&(6Vl;9| zA>USd?{@x6QRO;4%xM(mzNz#O)wJ&>thU|y>W4F0f9-2SSP(sQ{*h-?`Rf(y-yvK& z58w%4kp3*`E>%yzcB|QE|4VJ-X8G%d3eJ0rXl!2DhD=#YI#MQ+Jil%#pk;`Y7r$Lp zzm3zykxE+!)Weblvox;G_H~D-^I9LD4P7!vfHB>al>M{LY0g6orOFqeDmw`Y9+}%i zzk`!N-^8eENp4-Ih}Tq_0nFMPRkhme5FhMJJzFIJB!N? zZv~@Zl;>wQa5ByPWcAK0X!=Mx$)JPA|-JMGtSehy^kd~llm~zt}DQv3CE%@0g#UA5-N%& z^zENh_i4Y)D@wn6qV12isOeZqjf;x{l2VF5M-4CRlw9#z({=`M*YfiWNRPs;MRiyr z%Q+_traiI*R>l0XFrP*5{I762D=})ZC|HjZQs58^2})aDNB*a?e>%H`S+%;Oh3e4c z&g_VsD0_u;<^T+`&G7X8{)lRl_NYcWw|!9zm#pGVfl&k4NI;kfyt0kLOgyb@Pu$q+ z+W)wd8EW{8p+go%s7pKZv#x>~JYC;B61?|P=i!yEqYTDz#B)yLA$_ms$~-m!Ag}m( z8YK-bqRf4TI!B9l-N)5c&RT^wsK+>h>Ud|*xh1bDPI*-D*g&o=| z0NY7|S}?@ur3l+*S~+~y1uY7Tx*xY?5o}{}bw?Zf54zC_uua6uu`SvmTqu{8V3-<& zS^a_|ugNQvwGz#~HaKk}&MMW+jAU23j$2|eC^JL^M`G*{P$bYD9fK;IYMw$CM3p}v z4Wk2{4!+;eU9WR<4A;ruVRzO_LxMkkRnp#Dt&7}xryhd4EEOq`ITR+&IUQE>TSHfo zra7Je=bVY1wrw{s3VCkC zsF3uzovb!k-$c=Sbk4|=OmInX@sXHZ4K10zI!^q4rcaY^tH)p?o{z*pamvlf!G`hb zPG>YrJIZFA#KuS)i8jouDxPf;KYhFw+gg0~HOH2v!v23>Qu&FOxT@C@z&`tT5?-iI z#HvE>Q568`KU2N4YeHL=D;xbCj&B-jvl$K?@2jXO%7nl`x+%q`%}6^NV?C6X@}722 zwMmg>Y43#?PEKK2b9E^iomXj+18hAS6U?4A$)C)FQ&H}!5<$u?n{zRozvpMj@v?Cg zp(b6buD)WT@gm2>t3or^Z}thOpZoC2aDk8RGKCf|0}5Q(LqK~@il%`8 zFw(PB55d4))=Z2(mWz$e%koU+$h(zpWos>SytV)`JP^6LGMBj0yoiB}IkZ@B4P8_Y z%YM;xEv;9Efh|fPB@$I*N&6Fp?b@a7CNl0AP1Jo=aEl-4>=Ii@Ixv`78*K9^&S@OXZS(Gzl069+OoQ5(p%(u2$DKkrv) zCOVl_3W7##hsGxwWTzpANIpo9YsOV%u-z!JfzyJf>`$0xI%RJy>eLOHjN)xfzbHR! z+5dgKKn(F3JwVX^1MTrJX57Vv&E?)mg&xkydpB~zt(-1`=f9OT5v{C2`%H)oa?=D4A6rjgpSW%Z5Sd7ls^*&MyTzd zg0kf`i21usI`d0kZ~}Rxg4{i}Bm4L-$L7NdoDObBL#93XTXjjS-d3%ZX|sz;nu9zo zeZyE{uQ8-jU7<6aVmqWV&J#>5(cE4bm67p;^vL^-b3$}4 z<+WS;QZH<=iKG96GXCtXu3XOQ&Y|n3FOoEg-H4~70W+jVJWu6bS>V$nSy0 zMd??#D}D!UkN^R}$@c(Y00A=b)%WDpA6*IP_rKCJ2e7lqLg7YXPry_OSPJ0&W^Y43X)%~htU^j^p7I@Po`}bWR z1N<4owMC;RL9+r zHLmQdZlrF??p%FwgDwbaI=jJTIO87?pYxwZ7C&amTcGi(xb$_9Zn-_(wdx;6&pHe) z3Qen=wzRhu9A@}$vBhb(2xDO3tz~JOvx_=4Y#Wk*G2?Jp*J&i<3!z*RCFeLBG4*Zom65!kEm{eNZE#8{2`ewP0@#e|&!2h_py1 z$^Sd*UQ^hX0w1#>^K`G!IW8ZX{+T2H0}NW=%y_<8ZNL*SuF10&Tq$fe>%ScwtEm&= zR&Rh(b#~QHWK>=#e;O|Di|+mBS3l!+e*{g{SG=CXK~RrrMz3z+c22uoRRBD`94aL{yDrVXpE(4;&-TAItl8g; zW9qBSlQeiJat^WGJQ?D0W-8+`bNXU6pP!Q4S*RzGAwKf|Wn98rj*CXh7M%Mlw75On zkWEZfWeh^5)T8}ujMO|=Tm8(e{c|xFEEscYU)0l2xp>-p;0I<}$t0kH*(C^CHqFs< zHERlGq!sf8`Yt+YtW2}tV~l1eT}&T%2;3;=p6C#j>qRpjm)pMCw`Dt$P106*Lrr^D z&-Y*z3)Z&dI!@w0gE=Uv{{jm1y0}WgQF_c(z7Qjvr8Fc^xUj}7CTs`4nL$IDKt6)AT<=umgx`=08hRPyh#*G~m3QWVgzN&g1bRiSzHC41^lf2>8bQBN% z`267ejXMAdR&LeZK!}0PI}zL-<7d#?>(-njf7tZ-4|fVpr)&1x$Xg1*=@n=eab9N7 zb0Vq`R?%&F)-JVQX^G~gkw{*V=Ht~5D{acX{sJ`hHyyevKGVVYyLR8s!bRuH+k_~1 zYtp*C^v?Aj_Oi=o)|ssIQyzPa`8$|tSDHKq(f-MiMknX z>%3^r=+$&-WNBgLPan2`Ddl1qgQP8QYV?Ctfo?x7i>%oq8z^shM0mz^XVr;igA({V zcI?6C__W&F5v^yUBHX(8V1YR&^2Y-Xh$~H`j#qlVS5qzlg%9O*h*XCxX$wie>$S}U zYA+v&y})C6**)W5>O0YaACHud`vQNNA1-?=0twN-u|6>U?yFA*jSVQ}%qeW#uUr=*78QK;rrEls zR2^Yi%hC1=Ft3rlvp-K=hirBNd$<#|D>hk^?9QEq3{sNVu8mhRGfnKXsTpkJlh zB(rwJgzW%B{eny6_*20wNI=Ks-B$&E<@VG077xgTX6a)`e|ZcX+2#RL$h=u|n(j9| zXZJxbcaQ-4ZPQHQx^2_)R(fuM(B=r(H|2`m z*{q0)C}Yk(#dswn#wvHO(;)Yd+_=%mn=()l^Y8JnA-9l5UhMmHwY_;xahcrM6FHd^ z@s&tf<;hl5`F@k7y9|SuTPsZ|S@-*;=Lnnf(d%J|$9w>NxKr1 zEdJs$q|Z0!N+-ek>4m>>AN_j0On+}pV!wHz>?NtY6RkEE8=D07x0tJK@DV%uFpOjv z|C*l)u@Ow8DE!xMWyGgO_KaaFP9Qw-kEBaAI%FbVSS80`TB~U2jf8=XXN4L+wd8Y2 z<2x>XA%E>!9ksTV6g0ld4eGajUQLVZ;GMZ=k6)I^CPijf)JLTi!nS6Nnx zfv&f8`Qg}0KZq_v^!^Wn0s4(MT>GG&cFJ3HrKp8e50EIs*L(xKHo%yTn{h%46jAd| ziwL~J$0Z|mZY|n4qTfOKj7SScQm)t<%=)%*2q;blLrgLy;9vfm7UF%x6gFHQXRGtUkB@! zllBAa6`6f~2!5EgjP)DnY-qbkdSTSm7^Fa>a-}BE!x3`>5(^K=UyNeeO&iB$Ay88K zGh~&qX|+pQJ-nTrbJODtJe+gmED+(fcMHbmR^>GUaa0B6R*ey?8Vy>3D+mti1wW9& zT~;j{Zg4Yd&%2{LH^U$?GA@J?aC+i4XGbhE;ameztPvP$@Qid{mD!gz_=aE3;q+9)&S2Su(@-|V&6-Q?9miPxAzQqj*h?( zMy}$Nb(>~(zSU9C(`S@?NRkG1vmxEcSFZTJ&?w67uU8pk6TPdqhOQpu)QH4?UXGgo zRea(Q3wINNCV9@WC>=9R&A>$DwDHA8Al2E7Vm`mhX+A{3p+Q>D7$5u6m%iaDFO}WO zTeA{WYb?40Xhjdk~k4C>44ra+(W1g$cz_@@@TYI~8c|FyE=QruD5tk^k zpAs~7l|3l_XDg7`-A7t37N#U_DGZ_|NVHRo+1}?Z@0`_+)h$e~lSj!PNp~#{?_QS$ z54i1%2Yj^Dt>IjcS&1B9s84`#Y}WI_V0~lHK=$bU%=ex7iK||n*#G!rKGN?;^|pSj z+Uk|bwqjV?iaxN5`Cnamm6~FeJ;Y|}Svk7S#Hq$Dt2fa`ARwOa&H3#pU1MUJcR=?M z&Ea&TuEsXcj=ta_RFC6eUq1BrS&_wAm!N&DJz1C@W*sqZ;4sZOVy(}>0m`PWwSHGg z6^Ib-J2o-Bpk?w+a0F@%Y+Ez3K{4tjHwfaB8`epipS0a2YCo)5E=G)YNQ>sumn5MJJ)o2h9w z5Co1}=|Xn>z;>5Ejd)ghC8H+HjVv;z6b*=%fL{WBt%lQSXyyQCcq%5`!Q2Av*dEiJ zEtb8AaxW->v-@TbYLG!fd#WXuMm~=dgx)NhbABy$ohaAAD)%Ck_)G>Kdb726;W4U$ z=qMEoI%byW@{e3=#y*^QqPn-*mTp#pO0-c3g#~Un&5tol)s++C-)yCQ1)b|8K%G41 zMudwk!^i}f5{7}y0 z?mE6OX(1zxxAg99@j+{Zm=HZ{ceQSarqE$m3_5@N>rX)slXdAY2iPk&IO~*BQs*$_KA*D zV;}1l$+$YXjKW;M>vmXI9H>l~uA?boYJUgR6R>a9oI=tD^77q;|t&_(i=ENz1u zuXFUj4IMn_*nBC-x!`6HAX^C+y|EtT{-hpbz4va5L&OGC_AF}ka=t!yT(81UzY4&P zr~-IZRSC=?CZ%&P3*`?uXI!~S+MlT3*l9-2^Q$GC4x6~XAvA?0tA*;plQ0kEW1!yP z<8820Yt27i&LY`B^oaR>3ulNWxd*4yPJt1(^2Rg9W#y3-{5(o4`1u(&t=>3XEz4 zX)F~wU(h_!W5Ih8^u51xiuHmO81dWLzE^pxI|2v58`mu29@20f_U^Jv1SCat!&|*cus>{Etrg#RewuSnl+hj0OMrs zj}BobpN^|*4nOw}gO$D~B3TT&k-5!c`MZyjJ6o795YS&V4*7amlP_xvibTB4*bQy= zPc&g`<_zo_t5GYSZ{1=EZLPxcdHCNgi|WY=^pQubbZ-Qiw&v|21@yaN4@=dJI(ZEk z@Nm_6ZCK8gSx;+8j#=HV-De4AC3(5p{@?hj;>%yY;dHKDvP}rPI6oFdP4K(G=?91X z!-x;(EZr43+F9Pc)*0NM)fD9R za*<>C1A6Soc5IfD5bWX}1BEBYojrAzU&aPCm%k|NM)tcs!KJU#IrXH%~>!+01uD745U6Nyzkv_e< zN7!urO3$R8vskwnIv!Tj)=x#U%zIzYBxxoJm#7aez*Mre@vpHJ zW-Y|!B%6vn49$jEfcG#2ecH!AB6#W_H!hmb&s3%{wxPUMN^fFDF7m$;7-ca_5yyM#^3~8{qLvQ9O1JqO${Eg!ZNYb%lNQ18WO%MprcwK84`tQD zO_GvK<*^x&61ST=0D9A}ksBHY4}i&V^RE5F&={!&Yf1HT;8rcoN{W@@56QaeH_##o z|2UoCX_&m)6MIfedRT9KBy8Q{!$Wct4QGsss$8hTcAT&93StFYXoidcETFoQQ7(&9t@c8B&I9&^zb%o{oJKW^`${>Oe=a~0lXGl9On=0SBZ&1H zuYBFBtPSW@G8(&&aLZ;v9TpQ>JmmeT+4gGNwU>|!_QRApXxi!(@dGCJ4g2E5rcUFu zVAFiD?O7(v`d&Lln(O+j6F1HMAZhW*_ZnQ8(Pyd|FzNSa_vI5$sw?!ysFA?fAz*iO zSQC%J;BOa;@<~)oE~Z{bC)E{d;+o^YQN%a0lcb?sjn`&3?Hpl`qo8$(Gr;ZXsJmHz z6qbfL?I8?rwBj>BaioEbeaXCQ&02us&isiUQAEmEC6GA;U(KSaJl|qcPKGHW5#;yQ0!pr1(MF-(%+78JO8W|0a}0JXo& zi%4*wETFcNQ{zvM8bdH^mD3EYtT!itw3BBDp0t_r`p;X?KxGAP%!2C6mwUDTT}|HB zzwK*I#Wr3&2u^A+JCq&501fxVvL?IlN8#ASps}$8`PZ-fVn`psnZCBzL?>u!5|Z&^ z`xDN4bAaJI(~HHzo&ktPNfqpdR|Ne_QmEHE$lpnl43fN#Cou5uwEKt|Upn8T%^}#B zU{r`c*n9Bgu%76%y}>2xA9NmBvU=4+r1M9Me9u#I9rKdq$T?iiMM`TZo%Ax7Ojw<| zOdj#D4XeHUY%uZC4+EkDq*OyKol_2o_J2@-yIQPH>vtrR1scmKN_jVSiQ3=x%?0AE zoo-}u+scuIqf8on490_}rmjLD*{u|ImG|cL_(wc7Z|S0jd$)F1J!#WTJXM<#cMuHv zN;*Ien7n?3rP4p*#SMJ*Y<+Qp_NN$ESN=`i6?9zK^8BkK#GVY)`Tt!_PX;{6s@Ir& zl(2y7(M`7Gm*Ly;-=6U~d*VhSa<*%6!Vgwsm-hw6ZRZqebhlsM8^>sCYhdc2JgCdj zA)wo!gvlk(6l)KX{LEo&5!&Y9CqW3vC}Cm=7FM6#bu6$Quk_QaP5sZi7)%I2a?>bJ zG~kcs)$XkY*yfw|vtjb-!|PXiWCSt-y(?V}NS_0JVpKhO5X|Y5e#hj48AMHN8ZNeK zaUYh(bDc3RD<&3#USdoXM;53N^0q@oNr}zTIab3a{5&qU+h%qgKhcxt-Y=Wyk@1~X z3*pAx4Ot3&AUSimozJ!tA~2rQen%e-#pGY#ivY+{RMw0n5HNZn^% zscl|P)yRAA99huya?x-1z~{U1v`4V6i;g2YJRxAUS5!Y$j;o0UB4G^bi;%fPCaal7`<%KBRSiYoJlJSIK$#GcPr z-Uw}%jdCmGw>xvL8n3~DkB36?@w(d33pV(B8pF9cnPV{__G@*WfQ1=1F1A^*4br%6 zwDm*DVwg&NJeMRd&IQIeZ89qmXRrAj9+D7o-*QBqdCw^tvZ}tNn%94>`!ig+Xu#6m zJEweOVarAO=K?d|=@z`fsVfa+Tm%s;KI>C5|Ea@aK40M)eS;p7G$ zE=3jou%-J@{fCF#aYz%j|BOL@*up3tscXskzwKE7XFou-jo~tKcqX6!cK1P)z>_^A z{&A?1=Q?1}oZyyIoWF@p8@Xs_-I!hk1s*>DSU#t;{S@V0pKaQEm*>lcYTM5iE$mi# z*Kq1rQsT8#dP=$BJ7)7H2Qj0wSH|0p7HMHW*k53X#JQr?UK(a?@L%}`_3b9vK#%UQ zXE8<}3mU&mNXbgZf|Vy*hHZ36%!*l1e6uD~zB9JCswQ3^jS(l^M!MWYlgO%>kdMv4lF;i4#QrPjLU#zf-OmM0rB*Co0DOMy80yokrm=gaH3;t7rH zpf;Jou$Y%B=@_jG#DxV3==m+sdTCv!%x!bQW}1x4^RF0>JU7CA{WlXnF3NZl8|_>F z{RMphUVW2?=X|XdqZM<}3mgp@7EFEygN^(qjr5>GF=hlp^4w>$cEene80pJ_*sh=_ z=r>wxU;1)r(c9j3eyS-?^y!A>3FJzp)GYoZa9?k%ld4T|B1vp1LKayl%ousUB% z*Y@}1uF1Qy2uSNLK4dpBDqo>e{QkK%L#C&RFSI;oqBz z0uxuet5rw)atk%R%HQ9U4Mkgo-B?o-n2~+qE15u*di+~s#;!9X$ZDN)uF`i*-it(rpaQUYo4C~}p|7K$ z5wphu+1iZnT72Tt=*yT_My%6rLmYqP9k(O)r0Y#V*fM}s9|BgbO(hrf9(I9Rz1ATT z=_h7T-94yC@Jmdmy1S1yhaJCR=KiaxXQ1bi{p1Xod3B5!?ugehFEvzt1BxQkrI>3p=ljmJ_9z6 zY0C(0@eRHjTGkjnz!@x1JhM2hcz{tLw9r3k!%XobB)^n-X^sXEXwoHY($#~6NcNo+ zQ{@^KhQP_V#A=Wn;Bhf^ccBT!@ILyPGh!CZHy{!R^9>PRB1br+C`*Qh;N!Y) zE?-be#(pdtMf0O0(h=jYsK6#Ufn`G~ABm@AGZ4;O=|{U945Fz|pJ`MS2Tu6Lsjw}x zsmmm>FXoo9dh1^XmaiHAlC6Ev$6ORCKccT3>eO9$Hh1=%@s=pQDodV)Hg#l8@~x01 z_T+hcM{8epvhL+cS$(!-@W3&W2JcobYkNojwrqFEHBb4Pxy~Upox8pWRs+otc*-Nx z*lW#r(W{{{3lCAYqY0ppX_{4tg%7#oJao zw{&BULf^qpWE%p@yokf<<7Lq9W&-XAAzKH}y#4uW4C1>8XTnS(@9;NIgS}ArW?4R zxiSZJw~C>AkIrXdqg&6e5n(&Z{> zon4+=HEcYZfCx^>Yfceu!)<)y+k|K~Yt#dLJmAFs(_}b%V!P&UZNTL>8Xd_?jA%039?b6yZ}pmjDyC~ zWe+sPw2$OOie~$~Qjeozs57BNQwRY8(G-HmirRAf{bUkaI4D@Av&o)MI5f0ki8yL8J=YH2D8g{0LjTq`X^>$>$kmlz}IeL_k7S#el~!Ru{j+)yw{$&_@507(*3B z5_^oJ$2u0O!qGv#2EZ3hkB8kOy@>z!uKwo^A1|?BGEDyqCeU}5=i$nj9_9iniGKNC zf9}hcw~`J1U%&nLU0aAWJ-w^ZM+!tQdJE%!)Fi_v5+!*h+X)ni-! zSAM7-VKPc=FIE(){+=)<^ z!X|#+oWVE0={{E4y+>QNc`~QF<7{Hp6W_=UkAvsQJ0~qqE8Mk_BrC1NqYMwa+8~nQ z!4>HDEm)Bra$bwA^qP>7(G)KF7K4Ug@-Qb_c@S0>*%;ioVz060J!|_mWhOkGHuTuE z5cZ8zo>mOUP*j@H7K}u}gNAZ;#2C&w^Ws#uV9hwFWkjto;?aWd%%mVo=mSEz4zd=S ztd#uYj>yul_z?OWB;Ke=U2fw>G}x2nR&9gxVkqo*bPuoxiUz-4O!m* zdb|Ix&xrz@!9$0M-3eiVzMXj9XR7}FDG&zVR0~3*bu7in6E8)>qN7&d1&g%Z=lcONoM+5eU6 zbRw%YU(W;CO=1i7q$qh#49WOCr+nXA4NC@Tmzke>;&yIoI$gRsn1rz309+V}8BWS>OY22EbiE8Vuzb=#law}4>075X?9eQgX9tzM;c zGT>JKrF$58Wo89mHd3q8AYWGVvk%xj&+Xh74vhyuV;4KdGjR}cHY29W6&K-@i{6&c z)Z^T3E+g4%L0mQoGq_7XO8ad9g0i_Zau!ag+Tx=}{-WVSsl} zuubE6uXbgw!5zp}=n=AUBr{SvvYU*QFg_%x>ZV@67vE`=LkJ?VclHt8Gv;}CveA1u z(JF_mByxipt2(oiZ7lT1IiR|V=iSei#2U0+8d}V+&~w(M@uNx9;x{92BJlA&@NzgN zZP6L*@@&X~8?8)Xf{7wV;1)>MP(9CSq65C*f7|%~KhFuZLAP_d(PtRG+@5UxU#IR(*e9}S`mPUT=e4+mdSj&`@n$S}yxWISOiTy>BoyYkDM|)Z5)zrkgnupn zXYV`uXo-zw*mtyzDQjX!)9nuawGg-%#8=RO@XJ>iV3pm+6p2iXr`INj>7Z`v|K z7~|Q+fHQ;j(|~W?4N-yAcITA0A^jdhn+f^)%3o0S54eWTUcU2>+9Y#Frtb2PjzmER z1aONlwnBNuK~`R7f?wUejb3@mEcNiSz1;3@Az9zSJv-K2(|hvH9)oYGGXX{R@{V5n z-giCKVFxwdm*4L>4g*t7LxVlIM*Cp6;Ym#cUEF~d(|6ApHIXtRJ|OW3XRo&XL;mg~ tNOVa`EX?&+|955ZzjI{dbhqhwr8Vy`7(3kM^J0{Fmy~;t|7mR(lgY$^fUKi;7zHIW3o9GD zppdYLsF<9*f})bLiqn*d-N)C@KL8Q<_I-FnrUOx_>-3$;oe#-~At+8#e>~9k=MnZ}Upuq1QCN z>)^$}C-d$e&Cwic8iWogY0_rniBaE*CBZMaKdlL)({W<1C&SnbX(sr+PyN_m=18tsur71{Fp5O z{}26;C+AuMF}#}=75PhCSHO^@{+XI1) zdHD`3K`!n7oLREX)ZCl7E)y;0rxcvhYHL@@q+0}HPL$up4%;6N5G)pcqnZHS1M^^l z^Hv(ZEt|DyjX1!pa1*<=k{10z zYYnC;2x!@NKgJPn0Ph{I6D2ZuB@3WYraParR>}T*qpN(U&XiDUL^VHt`&TOOraXhmzRjvTm8TE5dvvTH2250(~f6>Q%4+%~HL~`OYR6 zY=5HhUFLLV{h-tAVp5qDwRYteH%w09Jp_YZTvJU2WDiNRyS8qXls3I#sbH)Yl2wR$S6H-A}dTSk{* zu*`@wjhr<<=x!i6Z%lLcj$9=Ca`1KTxe->G(~eF0X!#&iVE02VxtLznji(Fe=g7|`&?fXB{IZZX2vDA^atUL`YDq{1 zlzLvM$qsR*UOZzCsMBIK!EprE)(`pEYnrO}sXc=ho#h*WlZC`r#{(;Az2d6xRxpiDAm7gBh_=$_N&lg~ zHODW=#h_k(>S>}0E5VUHJ@3dTvCpg;k)}!oUI-@S!qq|I0&q`q3x{FmUxkce=0mC9 z5*(R0NcJoHL}7&itB8w7l-D*T=Z{w;?=gThr zWjkqZ_iq##XFQZo$%^6q{!EVHLVSQko^Fh9{V zU;NMIaHm|7&}?2Y&2439R`WYoRQo9@2NQpmhw%Vj%!cg5q~eSDsZr_X*i)>)u1CvArlxtH&tOOFC^gZE-6d+4`Q#Kx7rL%FD{5loo zl^}RQX;|?}1lJB!9+mV6G*6YQz#&ulu`T$St;P_poHu{;m0B2~K|^xvC9_hkN*6%) zN&WrBiM`5Y`{&>Pc&f|*O&mmQbxl5aAKcOm_Tu3C81k}JIyo*0bz`uSP5!}T5`Q&a zWS2wJ9T$qj>;Z?aKi{~#>>nf5Nzc81-Rs^^L>sXpGAP=blfsl|<#}WnYFg4h1f4D_k~fpr%7&(?tf$8O9OKbs-1$r1hNi&{`j`^%uwayUBjlI ziTnqn2W@KP@xKEAof(>?^kQrPpWc zQycs-mqRN3VIv6>{|(o6INO2XAN)O~ z&1}|#;GSyhayjN+=e#(ynEJ25HP>Q8)#LHfYC}tXSyY;sfx>i}1w7an9CVgY#2#zn zp)j#DI~{y}IjJT&0D6+RA-Qf=V}Ht#~8-r}~b6_6%x)PjN)-!@EW@d@OK zzYNfu2P@@6pC4wwiho6pR=Ue2^P}1%8W5jdE&MTm_dIpuC(A8f|I0=1wuG$l z;cRKrvql}W?}h2B9rv-=7aKktkY2&VxkpvU^C{#=0&vD4DdGw4>b_NK*>stXG_YSx zIwg5M)?H>JwV}nj(i1=*l#}e``oN)XgxemBtSbgrx+jM_7J>^zhcNf`N*i{!o4QS{ zO{@p42Xh{%S*;`DtSf)V(^S1@^xw5))vjAC5EbLq>)#MFJh)YJ3o%CH#mw`dxK{6> zj2gN73&_HwcS236I1#lqttO_3f*VVSVF|BhGYP%BRNxukEHL3%)HUJ{LasF+NcN$k zG+zE{3MNq7&n&=V%CF1*Y_BiZ|4rCKC(=ISHr_S`uUUf@x7FE!)MkK+&;)ZV252Ha zSa`%J5(9|wAdBl`fBr>xz0DZAHK$}$=C+{XUh%NN+F7$;y_XT_ zFPSvSlflL4QROEGX=DAibz@D7Qp$z;oVrvI@5bh>L6M-NSp5RWwM37A_<-qQqZ^In?p3|SZ&YDF_+3b+C@gkIb)?tEh$&CNqeyQF8c{>;vA_hn z@zq(Z>j|$dY?Xx+`k?@^U*)ID?-wlbm+bLat(;-0+^q0;H1|~RvU}zjc`0=gJ-H4b zmfu(7fxGpGD2a;K9&pq>`Bu^Ab2r7`z$sy z-$iAUf)!=+@R!Xt5LA5CytgrE(a^}*l{^G_I;@&&{n<7YZp081xAh{|#E&Br`qYnc zF-<^F*$UV#T{m$A4Eb^@-s|4NRT1Kp{M7l>+;;TiGg{bmP&#P832|57toIEG22b25-(8k|ME7 z=KL2=H%C}*JU6VC>E0b>>;9tJoI`V|g}CNJWG|)zdi~WoKi)ahJ=ZRX!L2bRj7Hs!WX)uDJV&LAUxB=3g- zLjHZ5{;*2@c+hmN_Ii4ET={6T_mH`0(bhC{$em)Y@9=7XDgSXFW@M}{LylMT>)mz! zTXCz84fhJ)jrx5dBjX|?3%-r;TkaiI9}B*-q!?+ht~4^qFJAWL9%~*w2RX6J*%Wni zjbvLKqvliei}_f>1sv2G5m)v|BIX^}RAM_yAa0ZFweVv-o*Pla_4ko-+}!zSUh`u* zV9-RNP!S3Y)Ydtl*J-Q1;z{0T2!%b%y-Rkj9xq+_X~i|BS}4Umh_&CO*pQ-MHeT2Sa#&r}p=3Khf9gK= zbVAIC(0LPI4-)D%Ya;n4(=Dyoro0{_&@GT6{C{@#WkfVa6mPMI(>Hw{g<_O{{2Y8e z#_E(KAu83nj<-<4vs&~oV?z5pYcAEAn`3m7UjM1Sv7pbNnk#}rRCNoy5);UNAu~uX z5pmDTN-=nws4j$j5+MNxtOpwXkc)RGnLP9sz%)cEW!qL<@acF-!~wO$7!u*9_e1-YA0vmOrN2k0$d~^- zv^4HBJ8}MyMQ!M6J{3+#js>TzR_biqahA=bktY6h|&*+`hR4z zaUSceR{kXNlCn&j4>k7^C%IIR(~5+Uns^?}0hxnNAKUZXO{+?o%Ep=VLrJvK{fB2Y_}dNN`Hdfc zGmFOo)465z{*qBBW&S4!N|e?2-2$4FTQJ3}K}4rYO#-Z~T8k!eqlzAh*WW}3ZuFWt zWQ|%|71vgRF<++2rt>!C_T@(k1zE>%2F>CSNXVD1P7XjgdpLW~G6bqfKTN)x$<}w( z)M)$UYoxXncBs~iT4y0g6){h^Uqt{CJq0=y8z&7IaiHVqqM$2TQ0Iqn z`0kAlSJPb^52dtkIrXPn(F;|Ryrup#JaML73teW>7nlEi z$|=d7z;LyMD&3Wqe3V)!+HLN@ItUcXG>&t@CF2ZyEzVhbLYX9yMyo_PyAS1HTXnoc*{F!QE0U>&l~{ zZN=1?JCp{tnBy}z9ABq?OQsO`QrtA(nHDb0I@yxpOY%a+cmlPHVTw=~ca`|>TRnE7 z)4!$IPW8FmZ7B(>#^2?*>{KfimZ*lE>Za!n5snE2-&CR`Z=_!hBq)@(qDt>RFKK`$|M1r(IoYFr2veu2&MTNHo((S7z&-jX|u1*-Q%A&j^lqZ$Yx zUZ#^X=!J4M09;?Ra^E6NUyWxLc1HZ+QU}O9)|vK%^Wo6K-#utLPMWRziQnM9z&4Osz-osyy!HjcH9aZDCSQH#*;Huqr0EQoTlV0`Lv@BS+ zXW?W9<=ZFYrPsqIsxpVmlP$8L_n)nmne}uVzp&^$u8Xy^a9?N)rEl?%Ri~2eZaGyk zEXcb`lwZvYUw9LbRBZ7Aqt-1ZJPP)&sD9aV!r|(Ih@#QG%9Xa-1J5vg|CF_wkdw+@ z1vVsj;i>2sMCwW}Kt`@MiB*IbrQFeXYD%Ivu+Xx~M*y5d84=qQys^Y#%HY_3Mds=o zG5AA{|H$dIZ{1u+Jpc_owEb{KoK)xCDkVkk5SPU3>Qx51N9B`=wC**7fV4Q?x)>k1 zG)@?yxg<}Snf!5?Xaa732QspF%NN9=Oon|6l(>PGj%X4+A*aL%$b26SQc1rnm5tC9>}8j<{i@CK*}nd zE^Pmn^1OCymcce^?)h=8CU>Tfv@4=G{Y(>*&bbofut+4Vg61!-+2!<_@lBtMzI zqv(%+9pvd}MX1MJs_ARGv;+@n*PUBtfMC`2wP8!HF~ZS{DI=HvQXH*(qgObv*p$FW7_RUy;GQ?b)`i>$mAX#Vtw3FAGCFTwDOlM zdZNoKl>GI#tq1Dk#kUovIr|(ym@7vf$ zvlz?h#Zo((z9Cu3psoD#QPptqS|?>gfut!>&k?Ce4JP>M zIp}=5E_M;Oj;hw7!`r21r$HAlRbMLl|H z*c=tCv(5M(62pbAU5=Ft^MO+Y5(47@506%&pGk(6sVSmmId{y9*@hz2n#UxKk=g4M zLx%LH_7cg-V8e;Y;j^@8r7BC62FF4XL$*;BdHR#8Qi8~@3Y`0!6dp;U0Tht-TecXn zsX0X+Zrevemu|x1CoAW6=h(?a|L4ai54j2$rd$@6V|=58V-`2#v)yRAC4V0=iu2x1 zR{coU6%B8`$QNM0q@3=AKf~=Ib@Q#Gd_#Aa?<2y_H-bi8hNv!dCo3Ape=lQ}w%MJS zYlh|jw58DpqT^rB*7lzCOUsWAL?cd)iJ69^lSnw=4=ieLeKPfxo|Mb9bJFGvk`oPu zGkW@QeH8`tRnMDP{is~VTl+`ifgI;7f-CH2pKFH9^Y7ZF6lLIL;-%cGGB@f|lQEa* z7UU9qm0Orfzu--?udo!HwcFhMS+NlwYm6Pr%c(W!lII5Jv%&JOnn<4gSL%~`q_^{~ zejlR$aPc8hzXoKe!Zk!$AF9UL_K!J&UlizR z5;m^%%hF#Rn799mVY3xLDOI{c!ZYUflTa^{lKAwZNeUPesZEn4+n4lfKcod@bICFx z4`egwHZ%kU0BoRQQXL={E zv@tJBA?ch2Sb&eGX=KT}E?hb_Hr8RM+du@l+Ip49REOfge#Cx3+w`AyexpW!E6txl zECw?FD}1(YUX6yM*C8G|-xm6*4zbx)bNPk@_z?Byo>ar{Q_YtEOsx2~hIz%#LB)giTg49$n7WfY(f5cLC{_kS+R*I?>f zlC7rO#LIQ_5-}pUm(-GWynfuvyUlj^4K>zEKZ;PJo;M2gpHuj6Q|M%|=^N-ACDy<9 z3cotjF)rR4&!Al7-xuZ?d$f#CkI*;g+%~&fqIh~a+B0vOWo7+2&@{Ge`q@k!EPdE0 z=)|=92zo8-_7DY`4CXF(99(yQV29Z?cucGU%zzMdE^{KB{Y+#_|8j@0o&68i_7QSW zKLdNSrYT~@?=0(?z4OB---i;pi(#C`5WILE)rY>mHVYH|JZ-2gW06(}50dw)P)+%t z(uQnhynd^FTv)a*$QzW3c3Zk2Cby#t2Crg0nJQcDA%)GR@;%UgrPV-5IJ*Mw=!Z1~UjpmLvg1lC2FD#2=BwVTgULE8bAJ+7zRcu{bd5 za;caOF8^b0UBp3ag@X@yg{LZyJ<0%O8;X`+s1~yU=gKAZE*_y-ZkW=VG*ZTqd;=G_ zbXM8S5@o&=tg^$b8n#RHW!=@vjJ-EQ3$N8q%X8h2y?5B{O69^XK(W2vC39-H0UyVV zxh5H%L(xb)Uex6i%0~EH4M^d*btDzpp^haT3j6eCmifo3WzORCJVs8A{+6K z?0jK&pz7Mtr0kde(vD9r0V`7R>{%y0iII({EmN(~z@J&1HuLg-#!AcV4d8{to3t1M z{y~2Ino=pURKkspkqMD_zB8BMRfBgzTG5R}5;LX=V%OwTiyS$_r zNFV>*tWB~g+>?Wg3X`}>3_z)PEL3|olr8_g z?ZJG#+M5OKpqGEi6nHh63afG%HP?i+lpobT>SJp{fHj+6-5>f(7OT-9ci^t#*WQ>f zk&H=gC|y^MUm{%H-i@x&74=3Rd`b_<6&BNohLPSALW$&fm;8fq>n5~of_;>mD<;xp z!iZ}*+|$E3+$Nok-O@?#X;VaDx~mMEsS`|SIq_P(hbLCTk;Gi=GwcY{9Q>ITZq<@)P`^EtNy)8)iL&X8OLX+}5A$ z5Q0SKyQ1T0>D022G{~hXX1bwW&HX&ZAD)L;eb$(bs3eFuC-#|aeJt$t(&m%Gd#pEN zk3NaZ)k}s1n$adBeOAq|S0x>^r;+oPlN&J?Uza)Lx;%t5pdHPz&mhI9ezN(wiZ7T3 z#j+UYd;7aQL-q|}A)K?FZXyibv)JJZ;O)`b-tiBO=T6Rr&57n2C#y8YIi8HQAbNZ$ zPWw2QV*&6L@OnG^`LBb^l?tTxZ0=Q~hU;+9#f}>Q)A^o<0Rth!KJ|h-S6r&7L}U$@ z*%%x{qUW3fbFKKBUiOYt3z@QCg_w5#ek3yj^XdM~rRKu$Lnn4EMY`#2Ls>tIaY{br zrzl|4QJ>(qRU$)eSdZ%&#!r~?W8_`Hs1KWY)m6c&MP%Jyvg#K`>H3dK)phmv(S^lC zesM{QbIgSS(j?3?!cI2BNZpM;_A7<>Ls!f6OZ&pHY^U(>DCNc<5s9PxKGiqnn0!}z6fM`GZzCLy2^N0J15FzLgx1_cf$9|Q+>4rhG%O%4yqP$l z5vB0)dbC4uMjkTycpnKWL)bsT{k%{!dK}lHp8I9Tdzl42_dd8zbPbb~n=P8O;(d|p z_`#mA*;m>C=iUxh7@DQQOir#qiRF7PnhKstUiUT zw8wl_rZh=a6W}*2;$cdRr>rw9cwCo{aws#TOA~6FDmF?3>KnH!0|Yw2f&CiNLx&lu zr52S}*o;>PscyzObyxj&BGk-P?zf@BP0zQp^s%U-q7@S{v-P`|7T04T3at}@jUZSp z<>INmDW=KfFyF{yNf_1`t)LS53eYA?C*pSeZ0$W?|M1T819f3r6@=Y{9}p}e7ZlW4 z$8;ZM6Ytuu@YORw6)bN1^yhz!cVL6Vcf=w>9-V6W@lH3~V;K?n_4Y#Si-c9K%I|Nj zx&kcG-a3YpAMY#7YOfl=Ml!qhD%f&*yyY?jm=`*DNvu~JW;F9Rz3<;-+Vm3B=v7;d z6tN&E6M{c`ihxc1Eubx=_uH2yVwpn|%gthwqkN0o`YiB^iTrSb?PSd^yaQ9OL#qgu%Peur7I^^mzi zx6Uxha*XXbFap+f!4lVP4EFZYXLV1=_won37mH0Axnz25NiE1!N%U-_EATw16;t~5 zvi8pz=V!BAPFD%`6sHuYb*edl>AwePJjhb)V;{0y{7Q}Y{O=V?nVEG4GO=A8$_h34^Jdj}fR@F!yRO^}VE?t->cLZb_ zdmk(_;F0cq$kh5IYJ`onUgY8w|K&7d6>bOFr_Az(7QZ)~@~iY_T@sPljNG)%0F|eM zl?Z-TE|wB|XwN!E2R;dRlSfHcwzfb+8rQF(P~7Vb zORy2$sojY_1|6il(BlesD7Mk_1mw~!4a)^^>^&3psMm97bxA^Lb92i^WDw|JEa}SPsZ_hr%;(UcrN?!s#E?V`Fq@GPx z(Gi`Rvfw|nMY*1;f!z+CR*UKNE*k9H-JInm1@wf*;1$Ds+g-s^du`ez7I0@BcFG>y z6sAD~g3OICkn%NiAfr_+cY&CC$VK z+e*>H6c?AJACH-KOKA)MEqN|?>BL+A*!E6&CE_TZD%$Uza`j`fdr+adipZwy$%>x= z>s_>(pH2{H7>?7v7sU=(3+1jMAO!#SUIHxiJ%OBjt6yiGiGW>CCJ$a2XrBC0UYGzS z_7T3@>Fc@2>Ty`jU$XFW%}IH{b9YnsYc>+R0V``1Kn(^4{e<5n$hV?rNLKQ!l#6o5 z&xw>Ch}=*0tvvnt1RBL&dmc6R49lrKjB4kp!RwA;-fI5DbBAC;n!MYcpQKYS3bcCS7}K7S#wdToAUxRE)bx*#RCzi5Ex}@ac zJ|}x-q5Rc;c(<_>WZ+eHq1L@;Z9*4EryecsDMn@McR*lcu&++k4{y@r1 z`j)f#siNyn7fE7U`*MLB?RC?<(^7Vz00WgB!=}TppP)qL>`i!^C-tG;VQ@UhSg6}^ za}%kv7lc4+1Rr1V9NT2-G+0%6NC;<$sDTPwtu*uJ`vhDzZb_r{;2BE-w+2B7{9Tk$ zdZ#N7KCx$s_A2|D_SDFvv91=|c9o~jI~Y`zKWBpo+can*3AQ(;uWVtUD{+8?&sh4l zPRE)_rzv`GS6YwS0u7DpnSbR`c2S-5Z9xGmbDnTGAcSgu>pXZp^|;i_Pr?E}8@Ufa zZ(I4bf`NkADHGheu_xS%uOuT#+HWJbEsZt<6jSyxSHIA0!kkwnCS`@9iNI?JN-tUL zhRro*nx@Gj2Sta^w4&>_kMgZVyoXH6MUH^_iklgR;0_e@qMdKQAWiH_=3us;mJum) zdP2~XThHlE%V6oYe}AG9Jbg9VpA|~8m%Hh%2%@f&Pl2mv&jJKyu&R~t+%QO{??}?f z^5=?Xt*7wUQ@){n;>PW$(8zQ`8> z5PxFksl5=otN7D_)#?Nc=rORMb*h5{NmfHqJiNXz=$$RjE=Ww9tCW-jQT?=o0*WF@ zYX~#`t2$UFRBC)}IjTc&=e(2n?jYH`1GV`g*@&AC)WcQNNFjI<@$zHu?JQiu{X?4} zbb?Exj3RGL70ZQck40SE_T=VgDDJC{VRCYvNujX#!06-Gs5)EP)oZ?$C@uNEsVr5U z26wagg^Wnv7Z#`uxag2g_F*d&fSWv~Jr2Jrlu!I%u$n`yNn-!*79x78ND$erLTcQ} zDYF5ox8MEmkE(&HG5QFC6Alwc$ko0oS$ux9HG?ZVBRC$Ts)s{VPUlKsIjkKN>3KQ=te=rv#yjB{D8qjg} zo!L%$b^fi4@cJ#RH8^+mFB#Qvk!_cRk5yG_HK+(wM1Omvt|&ty{N9NL{bJI+0B99N z=G--|DCJV?Dh(607D;SaraWaZpN13X)-&K#JsE$={@e4EheZ1g=X*N8KDHLv%Nt{* zol6m1k8i7AEa;p$V|EpzE6Nw-hV+Z7sv67{><75@j|WRk8kw$0tI0k!&0AD=8)7o` zwpd@wA7|m%a#`F%87%FT9uIU?$18UC^wkf_oc=d=X-D#m;s75wXQu}jKGVrONVp~v zUnz{jXc{xQ`g&Q=*6=TNSSJ`vk$IRp^~hjzfQE9IAX!=7MVKK;FhK38{b1ou^|K8P zxIOtyF1tPG`>yhI^&cnJ74>#M=DWY1fou8gTNiBhj?@A5Ovl_ypw{!Z+)EA#*=#K;^39_x=q(xO4&Tb%DK4lFiq> zwLdrWIbUE62h}gHuWwH?oIM1eQM?gip-UK3{-qB>hb017J76lJ+mr6sqvDbtdtiSJ zd$_uUtpTaE_ig3$?)gn<=e>;c$HBHPlfqcswIrg)qV_w(^Ym)orj99j5bN(9&_!l> z{c&rcQ)`Uh$3B*i&}I5$aO}_h4;8Dh;QOop=0#V@9sv9%32$d3{LWlpO0sggk%~%S z*07?eWHvY`Iz$jv zL7G?Cf}j@`J5T_vPk=f`I+#>c ztI3tpfkv<5#5Lb3*z;5mt|nV3*C8}1FzZLO+cbpO%F%K>Ju0v^h??{9xrG;yR?Ij# z+*YWw?_( zF^zf>d+amhC2MhB28vFQbS|)vA;(_}WOF_ds1(?oB6JzfKy4Nkf{@XZdR9kZIGNWf3 z@5M8u?SH`?1X%SQB*UasXuW3@$}PX;Kq^W~GO!*sPmI3t4%_9sPg%9@B`(&E_)E5% zL-JVe$+_71Pu| z3}Xo^BT0CD|E@yh5M!ycpS@UNY+or%X#Tv9(@@Zk;;>-TkOYI+XW%w;*WMf)em>fh z=$Y*9&teK6g_?x(4vQ+e1~S5#*HRdHnTA$EgkC#(oGfEq1og>_%JGp%WkD)_C5q11jUA#$XnX54;n5EpspG!=nBusoh8_Q9 zpA~pWP?SS-!*EKZ1^WU56P}7i$w$+5XFnZM}qt%>lXK< z_6D?$IGDgAx+0~?ji3KSqri8>J@bZZ&4jf}4-MaVNCJEW$JJd3cq7ZXdA)Y#)|~8@ zNXb$|8|CN(CUt$~HXcPa>y63;l(+GQK~Qb{ZnY3`*k>npoY}}{W&DFbEPx#7^>2NN zWbd1Iw|JDNxpunR%S$lN90XRS!B~knHX*cxoU}AQH?->CiqBko;e2_sX$AudBpeiX z({dryXKdAlYGDQph6m(?dw5V0#K-S8W~ZqmVl-vQG1=#K(s;tcX<;?;_JIPaH#_(* zS>N(K$a{`&sI z2M{Cq`q*$IYUJHElFAoslt!{Z5;XGRTAP2J9&YgB(+_T>Ayi+^)x4S}>iJHnWDLdm73AxY(426<3P#!YHyZ4PGqNC2(83#X@!9 zK&2)hx#S(9J-Y^!gXsEoHiU;IDOTLTReSp3i?YdrfVbeb2aiXLA7+S5KBZX``UY4} z9~$7$9~J&#&lRF!bNP5eO)+34k;Co8P5?s+E({N_w$=khr&!G;)ulw{8iWX#4(%Kf_TC)v=R zYWn#dj3fhn1rd9%0`t*a`9n=W;zm%(@gPj1BU@Z$_%B(5wD~snL*&hPv4i);Y^K$A z_0??6{V(2%`HJp`z*MWu>6|+loLCn+-yi(52o68%k=GeTQ_k$Eg5h5;{EM9m4fFGj z{S0(YJUxea!p42C#ST)yF94&&rBnhHhmu;YRAyi>Pm~1FOlPQT!NxGIykWi7wa7Kb z1(De`a_Di?_E@4-Q}|zoH$1kNZujBZO)IK6uOohMZ+D(>ixYo!!2`^n@FI?3D!BgM zm~GU?zfy7ez%L&K%1F&XbNkm(-+uIz-vpN+X4rO}4s3k>t5%GFSM%fh-X$EFO;^1V zju;qxC>YqqN}d3_^r{3JDSs9m4m54BYuis<{hSH064mS<+iLb*zFHiX#uawSxoc%l z?R-zkY%47majFfA&uT81hEz(TfY_0=SGhZi(g>X(B`0T44&Augf2w5QnORVT;a7j= zJ15bU=`UpYR0`@VvJ0W*^LV#xp~>o^4$J-D<%Nwg--Pbx--*p%vd-L>o@$RBbW@DD zPpXrMY93P$z{yKPbHyHfAX=kqZ+b4LI;k_}AcHJvE*zb2J~4gO)PETF`2G$!+F+Ny z_6C|Op4H~Ph)RQ&-j| zZ|?%-6lvgPbBm*NP`Jl5vYZMMZDYWbCK#vqLVuh=zU}%hA^xe+Y1(kGSV?U|9afL{ zGQwiG2|IOr(B)Y?m592TJH1we*x9Nh`}YIMl1A%<66cR>UOIn@YNMTH|#!ZU{QNTEKxdL2HClL+Vko*WtZ1Q-2(lWTJi0QN8UwkZQNF1 zG|aBSSy-o~dkj#J#rW$&kl2V$-VH5K0^y7r$4^9W?cABs|rTZWJs3nKLXBEcJG>wa%Z3p9I2$q>4{-wEx5Gg8B#I->uAet>vwK+#|?~ zHQt77h=OO{sty(hdDc(oFkCm9^*V?-5T;oqT$J^*7`G<9O4GnSeL+fi3hnX5#iEqd zW>fVXl4PZf`^l`LqQ$;Y<_b|WKb=`FwKC(V8()~!!lo!&uKl*g&^3@v3kbizgUHpY zT(OTnFOK+~!wj)(EA=abT?4EV(*%11j63RoLa>c(k@hk(mc{59DFwwu-)u9zWr?`D zv&7!65-5;Bo-`s0T&Yy}`6#7hhs)^sDI}2I6W_V>+SB;ClVXaKTWp6~&!!^#w{Z7T z@dvnNMDD8C!+@m|JC=_hpw0|p_f~=vV)@x9UMM{7DUL7|%8luAa1eWwC90;@p2Jt4 z5?J=SLH~~w%*u+#>=a#fS7Bti;j^p0WmL1i$;8xpL2|2S<_T0;*`qB(edoX^rp-8r z^h#^WPtW(U(AnOlDP!Xn{54vk_J=)EJ!2bGZp$UygrU>Dm$8Q+M9(o3Q)gwu&uIyY zeKb#u4!}Vlz6&(r+NjFh4)g&Yzb_2bU21AmT`cO*OQ*K@;nIhb){yAStj1VIPdKMY zsM;lf@U6J5rlp-kWpo=IyZQqR3YMWad){#;;`cD3>i5=+Xpyd)$(irYBuwgDyG7CZ8sxt z{(8D(tWe+FWmQdq-q7@o$=fDFwTYOHq0zBrr%P2*N-_epvJ@LwVP$1ycj-xDT1e`s z4uu2S7u5Oc8nG1AV60)aT)@eLFr1uE_cK$m*2=Gk)p+qf_Ge3yq^d92x9d~q<6WKi zw^@k36VI3DTT=JmNqN*tU|B3ot$L5Rjuu9bw>s~VJ_91jUiN7P=GqYF?8vDqhsqB3{HTWODzC;rUSgjzt#sWPoJ zR&*~PcQi#Bd)?AWhAvYHwn$))fZpAzTavj@_JAWH+a!V4Q3BHa$BS;9(B&7qDi zxqE&3KhEKU<@V`7!Tfqy`u6WjkaGCWPkykHKXEwF+Mu<&00VTdIKf&3`>Lm(YLjjb z8;}C}f`~$!kcKHh2HB{BF&RA-jo;@~fIftH|De?CvB~uy z)fqp*IvVpao|P{nr0OGbYw(JsTvK5+eDk;T_b;6LEMvZp&p z?up^1ISAkE!26p;?$-FU@lg($T$d(7?Pw&%t zt@jpH7Ea%{D9U<0>$;J&`P{`&qjFYtD$S?1RFc z9g5@&yp}_|>mi@~*s2?Xjs2*&te3`iMsY$g4n$Q$xoX_PRhjdL^+gs-OfC9&|3U%3 z4dgL$>zMcQc@XIZEib5~--_&h#J%1(@*-6`Oo@Ks-z!iqLv`K0w;QdY5{2|o66B)(yfXJCUjk$fqZ(Xum8TOAx?1f0miJ)J^~u*9oM84${!_CBr&Y1J z6w?%&3_r2&2H1SN9dsiqWwF`M;LS^!U;6KJ6on<;OrpT?gwiqNL_o(VF2=tuVg`#X zm`BX?AJ1w=?mTY}-L>Masci=O?pWoFPPaiy**v{ml9wL%vB4c-qdEkbujM?^)N&5L zRr~8Sv-e|yGyl{pf+R70z1Q@gmRCDRZ7`n1BmSkXF7qbb>bSDt-y zBhFbMg&!&}=#-<{T#4)mm$oq5%MvT?fCg9CiVhYY6p#E_4`}rV|7#-hM2gKe42MQ= zv!H+#71aQwe4t=fZ*}0sFowjOF7dHNOB8c7GlPc}D1N76u5Ij`Z#7O>?Egzfl&!>X zX)s+n$k7i97A0!zE*D$c;s@x}&~ItqA-#%!)Ctf~8`t*~YoT?7WZ1%!^$M3abEvmn zq~2e1$0$|uJ3y;=o9Dfb`{~@yv$_X18aka~@GK_#7bR;+_{WEONw;H*uD<-yXtX(f zZvxKn?|6Ug-3r_z_Zk)m;HEiEliVV_L#Cjg%?X6@@kS?2+<4j=lFXGcbv-nsT#%~o zDOpksD_Rd5W2o~S^bx2moQI2FyVvPS@(q~lhm12wjK$?G<4ZH%Ts9|L_}e7=Z-g?` z85~w?o$gm@UL~!R0^;&`PWAsROBjCD|DJf`^m&PQ(~Efs4JK;g{{6s;W%|={P%y+0 zBCEz={i~${M-}^NZ>oEVHVghj``B_x`DQmsZ_hc#l_Njl-Zc8lRk80NQu)g%C&*C( z@}eWz-0Z@*89Hlx>iRRNp*bl)xj~W6FadBm+x>5kq&L?-yRe)VQ0H$6o*VxljAx2{ z8QLvf5f{fi|CN)B?AM*QK?vkw6~m60;h|qm)l5K~vyMy~IAb`;O3=0aoRiH(GqUfc z%pA_-O@!K@j?Lg=o2}lUfe-<=0fRLBhN|Wis{bDWKr+A05%FdIk?`mCXYq0^&ENbZ zf3zRMomja)7jU;}HK~v6_I9ML;FzVqnd$!k5p^9W z6++vzPv&XY*8$mJib;2F62Ux%;y*Bx z#agO-8Td7%t^B7=m&bn&HA{;Jo;8c@mOeZ9#~z<_kTim6JgBerRC!}V9lzR0oz<>j z-@y2LQ+-Fqz8JW9WtHxJ8+>J&S0MzF8GaEy=>ngx7#_|$NUa{uS$-LKhg!b2k_&d2JkVe27fEp~%l)S6 zaW%!l8;K`X=Raxx02%7q&Yx@HOPzUcbZ-dwlg6*3X>!RRO9^%Ta`x*`lTS=MaN1o9 zJ1dzJFvjw~nG{aOd27S%{6?NC)qF>&+ru@zw1&z{dui??yOQ20{vUYpRwkY+duXKc z!>7|+_fyKt5q1)cxL=gZ6D|@@Ct>BR5 zr-B&fa?b3>i#y^PYI)@8zimo*YE+}|JIz9^d;BdZ*}~dKMI@fDU!%*oa)k=KJ%(^l zse@RIL|3zljXJZ12v4k%Y8535sVO_Rsq?47xvf*i9vBzM^4TJ42JR%0VR-4Tc(Q5wY_ERV)M|IZz|ECjD^PC zxWFKa=KdN?>Ea7!QdGsI_=%O2km^%J)ushV#u;0cAn;F7SAHW)oBsd}1~2AE;qh+f zNd(NzXRhm3jOEk-O9(?8a%!Y8*;`txD5+uT%{!+j%>A6B%Osa9uAYuKaWj8lX-;#G_(=7&9G*$A@ZlpK zgN{k=ayy>0S)8TS*ae6UVmT*2@&QwfoScF>`T>K~*DDc^{t;~<$T>bL*S6qwZ|vU; zoE}C77?4JJ$3e*1*Q8&y-LS|C)+GD?0K|bnC(~&Mj)&?iO7K#tYda}azn!NKm9=P` zpBE_LtJL<1KW~MyPVUZzBKlqO?RKANv!>Bm-rrPMoRj^hV0Mh00iyVfkUDTe5O8?_ z401EVi&HY{C>+g%Xop-93Q{$r3qWdk`l>2xX2*tM4^L zFNz7zuPev+*9#+wG~1jFq}*8KXQnOgMnK1)_53RuRATB>i&simd$+pxQ+r!`t3M;u z#bz!zY87ENrOBA6tF)xGTHj41+mw3Ssycb(&xxav3l;{+h6&!kJVax@MsPo+cAg4% z`&PWlq^x=so?8T}lD-{K#~8r}k&}YJ3>;wa54k)~9th;w4^f@a^%yznoPGxxuSM`B zu%3StazRfGSvkQuC+!{=LyzIfEu-t?yH3`%^#1nc;Ht{D zDX)dR#=4YKvv;LdIzL-oY1!!Ay6Z5AZMn4AAU_K1=8VS#gL zjpr<_b`__b13ZX0DYYqLgIuv)D$Zd&_PZpSqv^6hQc!}Py;+L zeW}dtW@k%V`N8xb6+w4p;ja|k+T6=+C;U$!-vhFigzNtR3$3M%h(9t(6~iRapS&5B zfdq>3-w?*@s@+@pjKFGMCTCodrTo1lGak%%0PslKd-d?JvV`bRg_4St+*Rdt=|&B! zD<#UT_jhgSt&gU89BmlE{K0N?nl1fM5 zB0$G+zm7U{$5V0itBY+L!RvDt*(KH*RU^xkG*96lhm%IbYZ&m!DCc(g^UCiVP8Ag> z){K*d>C&rDm86?WIH@$3GFDoBnIw}|=8|ZITt#dYsLB;&u^ErG=Tc9Se7H#a?o{VF zIViRKNH*onz84vLr^EeSZ8iS@gWK<}blGG0v8nkti!7|xfxKnl=~DVTc(mJ}G+RoD z#xXc~osmLq^CgSB_>p&`>k?{7Z+rI32KXcJ`EBklBa#c2HqiVrvWe%7v*ldOBNIQA z^F*F`iJC$jSCwhjb}-NIzT)ymcz@wxc$@7oI$|?x7mGY0<}sNWoHNJ03J9DiRbl3C zXve8|(?!v2^xanBe$OwN@I&GI>FuSYu~{|6#m~aY8QE^7j(DSvHj~Wr7Dh86Oa&~< z@j0DLI?SkI6RR52btpnq;Gev+NvX>APWN$k=1{VmY1-?pWwoJ$v|$>No+1iSZMl0l zho>hFMI@A4ljeM_-NyD!x7B~bId`RNy5YK8$>N_xl_7=J?a`yS@lVD`>}M$yihP?% zUX--9yj=}2AQX=<;|tFq_EAX zx~tpT%{-7zA)V zL_os?rv1dn1aVzlZgHMvpHs&<;4q3cv68~prGt}nF;1Vct5%#9W|VCyQd5GwUp1u` zer?8FD@Or?p@@}weD!^l;fLpglZ|N6a@ubG&y^{q%Hrm^qMnDyel%$U!mdayr|Nk* z&QJU$-XT+yo=5=oJu#lRuTt?f)Vg1Zz6{?B2(&qE{7+$Yms4p;dmY)dwfJXs2ClYR z-0x$4k{F{7jL>QKMk%eG1+^y_<<-=_RKp5jUEq`OO|f)}x{TQMXM$9F599jP_)^|=SsEDpVdBP_l_Y4RZ?$|cNZM8a zs%|osP2_HGlx2<&kJ!pqEF9q6+Mb=nT8SMnM;Yfe`c_$vg8G#@(R`ehV65!ar6@Hm zu9A0Fd&RwMu6UGaH7s19?B`WWl`WE#;@0~$8?CJN>V0XeN2K1}_|@jUn@hGI2z8cO z?;dSVN58iC^(rl~Xe_OyM7Wwiv%-QVj?^*TJ#p?A00(+Ge`%*on4i#Emqz` zIsKz$GeHz^TwJ1+k)0!%kz&w4`*hue| zIN;acW-zH*g*u+jJdvqVPNg;Oxy@6Yp!sCsbd}OeXNpkdQl(hTTk|-MHStk){7H9;n>{c~8yq;3IW+4fXwnp4EjzHrlw$yK+ zmsZwhh&c1SP|gE3V~J!s<7_}nKO2F`k%-7vW?;;G&d`x<$5DT5Ngm0m9y{~Ue!Z)y zxt}_QtVqkRh=Bv3#?4%UeMmSePtcy#hDDjwrG7fb*(f{_p~1?*4q4C^jCdPr2IQ}iSWO}Hl)JleJ{qhWS=xlg3Cj> zj3S+$NRB~x?J*_gEfhOd5V4c0_~Oxx4c;-jHqd`&293)XK3jMb;z3-wiZaE4A2*d5 zJe(*vK1rfYGk7z@h?zcDggzj+U4W6hPn8(?gKL!nJZvqsNdj+n3qZld zYR?mgPHjpw;~I2oC2Ji7XSG!8?S6=ep zw%*ZscOv)~;K~N#YtIBb1DtMOi2ncGyCZg~( zuW8~R2wg0Z&gPj?mb?UI70ij)#=b#p}ZvVXdr?$gnHI@?5fzry(dvex%wA~fXo zBjNAFR|A2bHsF8{Q|K#e_J+BZ>%{&emR47Bt!fs?LaJgrOPl*BlM1R1$SvbSahAYl zW+bua{u4zt#+~9hl~}AXi5P$gP(B*`O>?=ha0pg8Jvxzr$4C1>Te$HziAewh;$3}# z0N??t>eyVKasVSaAmn7{iuv`3t%}Prbv5Lb3G%kA=M`GCW!Y&f^uNUW+qR_P4ECKS z*D{N8*F>Ab%H3Vv)3&b3TcPup!-vO+0QAv(PDgAX_(t_}$@kz2gT?nva-I>NAenqW zJcoq`E#hww0tiqSfCm5o4geU%Mey=L{{RUNPH=RO6Az(28r4_0=ni@J&uXdS41Jfv zKkRsM@Hx&8h_%u)o(J9@{G9V&$rFNkv|X&!BW~7}JY#p$OStcJw(>uvu=ttBhcQ%> ze3G18lD)a8;`07R{{X$qQfWSl={-yP!0>*IazEs6@dzAs{{V?ch6v}cCyamfs_wHW zX|9OLJFI{Q2aoJU8R?wy_!55{hhjV#qWb>;!dfq$Ozj294U)Ej!0Lbg~ z2F-@8)SvC0AGcC8ZxnJyNj-CqUrg5;`CAKtoS(GWk%PuQ&vIAO{{YrLmC$&0^K2TF zXOQ}hgn)CO-RT}8RzAEen9d0Kk4nc=4BBnZWC~Mq<%sh*bSRRK50QBqDxuB&A z)0Cq5Ik4%wH*F%8%I!UMwwfk;)2$3f2MfzJe`T58?MGY6TguAr>FKM{E3;r`PZPum z#!Ze09FSTdJNFnl@6?L*pN7zZFN|cBva$F^!a@h$!)jg%UNiE717mkM8NfNg@>p08 z62w6#EoaU;fbjF|4{rQ{UZ3DQkg$09fhuG0PMgyw{$rj5k06fZ7VX!H^Kt5Kf{MFN zjvZ*VwChn^tFG?XS}XnD_E%OA#5u~+m-eKjuX|ZJw|y-A?)%+oYv0;_BRnhNPZ)if zN=9xxQRO2#NXnn^m3$&9rO_i&!B_@9T5?hbV>|SQ zEP+a^IT5sHcyE?RU;_ms)BJUGhrymD7;MWoi%C2JTmBMngRhp#pO+&fb?0tIMm%F( zxmMP%xgd>8#HDtQtY1tV^uQ_)IO;LRNv{hlr6-1_rOfR-N^e`~8cAxs6Z6^KJ$}10 z$0eC(6(uNH*21W(DJH(Ti;R*@SvMH_wn@dL;?$C7rFe36PYgS8M3%k{_-ShtF?o1dAxmiD z0rrARIB;ASZW~FuMeu4d!)EK^Qm`caz}S2{U@|*4!-6nIGm(yT<+)+uZv(qCxgH|E z%P}Vbd?WC{05=ozf%5gn23LWK#5Awe6nddCuJ#HRITg|*ths~F_EKB_)Yv;@jgxif5K7WGF$*R z5gTBVqdX0#J$F7KYr;Pbh(zgd{{Zl$JO)IEen@+-hHR_*)kkMUWsJ5zgDbf()#vYh zEzOU^IIY9YJNWm-*6_rE*vmA&Ch%yAIMoK`GBbnEL4Sts1`k{oa0YXnS z{N=jW>^W_{g*KPM-ka&ueZLHtLN9XEsnh}J`(jLBUV`kECb z&4x|AB|i7JG%mciwY1k>w|-6<7WVG#d;0a$o~`v(_>yk-eR^3htM&QihA$l%F8)R=Y5?=k03TjEazU;8nFsccsmT8TknZ3P2w)RbB%Jfmf!CoY>Cb>f z1%S$%$VkUyi{Xwt@r-t@E6GaV>Sre(+XUowKPC7XAotzRYVvS$g$UE;vWlp!exJC- zdD*QKT3P9Kmj3Mh_wKvCS0(H1C~wx*TmJx0+`Kn2kHdNxSIYkY!V~cfyhkK%TN}Nu zM+$Nns&lp1eHu(%mQ>h`u(i*3jA*GsmwXTn#*^XAxQ-JCHPs+&E3;Zp~r-)%3Vwfdd! z#%q<6!FmQx3GwfU+Z#>>ei?i$>)RP}I-Z9d=DgZxvl_Of;n`*X0EBtOC{Pt|_@{N< z#K;KSvkDW2CCCJTHxAR|Gm+rG4r7n_tvpA`$mjkQr@~>JcF1CJ*WA~VER80udQ0Iy zu;s}l<+Gw{zyY3fgUn?><&cm@LaGbZr-plyFre zS=C&XAv|_rdTuU16PL4;Cghd0Ib!SAGB+^T;Evt*e|4=OK?#o_gaM`8xS-BM+8haI&Q;bEiV9lw}te82e|^ z_TG24(o$_)`uJCcP9mjWnMx9KingjvLkT3^le=2obhGk4K=2ggYr{YE3-JPsf=AEc z{ZVm&-~F$A@rsXLn45nLs634XgWIONtuX+9z=lRJMQ8X%Qx>-w8TqWWW#DA|+D-C* zCO=wDZcWkX1F20R(BO0b03m%*v-;=Lt$!a*AMNmxTJl2LY5Y7@+x$H&e@Ef#IOKKV ze|lA_B(%MiY_Yc0)6=GnU0s`!zC0VFsO{pf5Fh-dcxV3riT!iwS$A`ivYhp3Mmlt| zRU@Z7V~&ULq?UcY7t>(?lAa;gBpmb)r+9ry9AuoQIXrRAWy>z$M(pL#o;d@^QTS&c zmrBvWx!+5BT8(*LY5BY9=jve^?i8Fkz9`U>*R?8(%cPoXZjBuVlX%gs+N0o`h#9fL z!r1E3kPig$CJs8*QeADfbtH_zVOdXXVeOc(oL-=T)Xbb>%nvyhv-0W@%;0Sw4DU!FFs4Peu*TT?7Cm8xueI__7q^JtRsn9$-O4q(_J@K zUAD2?S>JBfZR90)X4DXJPD7x`?oI}Cj-=-quSD=>pc2F46q|yd_(L@8=NWAHo50D> zU~&f|wnrJr@k>dVU&6%ncz`F_l#HG+^DpaN&xWp)`!79Fvkqi+m0-?||Jq z57W-Z;M0RkWT;0=XqG0Dw(oB}wfTFPO!A}`GrpLbm0N8}?NXc7Uvk=l7St3#1v&dHu_F;DcUseR^cSxoqeCH&!|7aUpCartzZl5nR>N8yL+G6p~o0Zh7MYOhS>sYC#wcgXZX{{2| zd-`>S_#PF4J;X4)@!>oJk2=G_0CXG=+>wAreFuHp%a;EDgiFCLPDt?%sC~X)3Vbsd zz!(I9o;&BhbLF-=g8hMQ2~cBi5lRcXsbP0*qaX?xg2Wq4g#fw7JPtdn`49Xdz6)+h z9w63%$8EkA_-MYP9FBR;M-_#9GlfTed7Wmjzr5?p{Zqd+)9&mld7R!Jmn@r6tx8tE zUuTEDof49FzU#Ho+QoWbMeqSH%J}QXKQj}B&adFPHxtz3aL)jao$8m4u7H9R6Rg1e zE$~cR<0o!@%ixJhbIEAR7}%ZzqXEZEdpouN0EBPAQjl4H;WqJOummnayYL*O1|Wdg zZloM!5T>#`S$ri}5p$OCAB7_TcQM*{VaU(YGtlFfPH>w6=Fo$og%rku^^feBU&B_lDOajDN*v@nMf# zpSvbcAod45SI@p6)~+Y`gW1_}EA#CiBE0VFKmlMly=$ldJ znn?90SlA`P*5(-Q!Cc)Sunx zI%HtvbYBa@0Ux2x2TrFst+ISGjOOgs^7zMA*S#oB@1>f%cimrf&xy`4a+6VV)m5|a zbs8%6yZ&4Lm$8fDsmGaYRF>Oecvyj)f5lC$VCT~Xc>s@?cjmnZ#8+kQz8lHAES@sf z4sv=81L1JMJ#aRDp4hJ-@dd}3G<=d)+Uar7bFAtwv~Umcl14enJ+gZ(Ui_Uez|Xku zhs8S6430tm#`t!b&$pF;bDVxP`X&LmsyEWt(%U{}_S3bUmb!G*_-s<qo(Yz@kfl?Za~^4pW%@i92_4Zv7R_5+PtO~AgDRzgAvmQY{X}e!oH%E)u~Ib zyxz7?nbS$Wy*+!g&%@p-v|L@itwyhPd&;8M=J(xn^ZJWYkUf{hCI=xtA8HHRfZwzv z4bToUWd8uihd9U|Kk4L&teA9NPRN{Nf^PZ8VUMSC^si~Sx>+o~EDhN!;ERLw>3VC}D5HX2Q~{F}4?0EcS?q(!jurs^|;+i1HSb?LZ+k5Si( zyL`j#nv)LtnQVHDUXkhQbNbdQN%CO#nOlxO=eKUe?#~C`(x<$b{i^imC9j#Xd*kgq z4CM4U=cRDd$3hr*Dakm-SC3Z}^?X*B(|i0k^gUMzbEkHjPV1vw)Z1^$%HP(W)8T1$ z=vJGKcKAcbQT7?%XL2#$f?MiIBc^Lh;+5B%d*p&n-wS*XL(WER{v3>qdmDq;U{@vK ztFXE~y0HtlLGfY`4sv9)f0PV&EIN)rJu1({4NYd&f-gJ#H}K31bRS~yE|~}SkN3#V zNdWPT*Vw#GHvBd^Fc3+*IVY6kB9{GKl2+>U(H}1G^8VIxac`EMDoLj7xv+ZNqel*D6@P&9;0}MZmJVfMr{{Y3f_(-9O;~5zs9ys7<9C-PVjZWn8&W|F1 zPZ@0|Q(R})2RJzA--`7A0E`luJR{*D-1wu!4n|2QKMsBn1^#67&tFRNDP=3D%yM!4 zo)8|qoj&&{$zVEuE_>!pgR?_NIJ32VJqxrn>nUOw}7Ytq^tURwsT$|);19D8wF z-Qy&jx@yvXo%)|C%Xf4qFG0RZaX$wEZafXDM8$~60|XqL4C5pLUu}WsZvhGw93@x#CJm`w zJL2k8dtF}AzTIzSq3}|q+;g{5{>@j<<*L^F*vO{#vb$aF({xnutnps>8(xO$M1o;+ z;pDfHMPRZscx%N_1jxw*tfcSfa9x-z$}8Oe0BA3Un%vj^DAiikmeSi=*5*s4j#i50 zpHkH%2@zQGepPp8Bml9y4cI2We$h3n9RtHUjm6!Swx;Q*cv+%?;pC15F=-m&FPj~+ zMDmsl0nCY>S<5kFUuJ&UpSBjK@iR-&d>v`w-w)_IFNXgBwCs`%H%^Axr?@(fs;tSqa3 z?xhL0TAEQ*>P5zsWh#?xD9gmor^QtGrz4}o*;228#pW2vrw3`aya+XYW|tuOFXY-A6RKq=l1A?YB=O1ExOTeBYKy z82Z&q2HABRWDk~Ml5hZMWK+-MPQ5u6gP)eyXwRqGu21Wn{y&X>n$8!k8TLspTU1|^ zwE6iT*D$Kq4y8Vha%NSl|&eP?zW5S(AQGf^heO>rdKHu`-qz*BR@_O@AOj_n+09Hdwd(=AbKvp;sOT;mGIxgrN%MG3Nh)7j2!325wUO^uvrIuoyg-J;OCBq zr%tu#dX3IJ9pR-JB{km?F$8*OJ_7(?@NiUTuLr2E99U0oT$eFfA~WRuewi5~u#Zo*LC>JU?~G$Um5eZJ+e%K-v#j3R)U7&^ zvs!(t-u(?~+R^_}$qBc(%+o|~eT%2?t zzXyzW>CJfE?fHFn8TX%(&dw~3I2uGS_2(Gp7|w7r-nQV>_uFeBkI#3iX?H-5yJDBb zjCy}~-i}T{w|xE+#ckHJdaVpz^;o@xGkah zS+aJgh_$xk&}m)>1dN;p0ddAX&vV9I$+~GX(M+S?nWTSCnLp10x9{g4@Q&yU)#29l zxkx|r&GgR*>?7EiUmojT?H_eV)qUE((H-N}ck82Hor&#lnY4tq$=eR0sLz0L zgLQM^pm0BgAF>RdMnL)wU0j9@oQw?fk`5RQdJq`(t9FuNDM8LMU;h9mY)Q%g0Dyjc z^NP$MgV&)v^v48$pRcug^lCd&mGq3Y-)p4T;peuU4s}gI%_n=eDRlUq-(I}k4{92S z^1ddaak}Hf6GFLeNgow-d&7gfo)wShj)b2ofyfb)$NEepXR%pH^!gF+TeIEmo5a8{ zKWebJg~0?Jr^OccV;uKn41KaW#dAvg1Y>qjog0!HBMtKf$j?18FnJ^p2sQLLj9)bA z$-Ai1l9Zy}kDaSqMekcp-kLRLmkt{a>C>ql8=T=SbkZ~_LeH<+U3%->YO!6Q{{YWX zpHMR6A5-h^_|}EVjND$3OQYPeQ;nww%_FEJ5xWF(I^&MH;e$6oK5XN#IOF+`VUMj( zD=~R+IWn<0=b>Z3$G!*USVp{KPITjGMO0R9H`P;`wVs;$MSJsVm6}}1_43{8rPPy4 zPO;a?>C;Vab{bXDO9<1U8h?l*#yI`$w$aa_2RP@E&ulZq_kMn_6Yd!rH-zHn{+;|c zrb0UMa0U;jd~u9>NlMy<&M^k2oE+r5D09yPIp^DqddI8J=ITMo$QD{s9tT*oyC}#% zLWOwztI@<`xo{LA&eK!ECAv+*jwYSg%2ro)cUEU2puN3Gq_(SO{N+j8@2Bgg_dbdE zt$NSlF9s$@&9Ccne7G3j@blpi>4T3?LNVwo$mY2#a_2vK2-7+1y54B`#(Ocxu^`uT z@h)Qi74T+$V!EcOCmBC`z#jZrbCzwjpdE~xOZ7%O1#@v~n3F6}KBHY#m-?R$CpA57cp%O8P$8bV$?0L4_(7l@g>k8a!CIGNjT5(sw@~Mfm^}8cYOfSxXj9Amg-OOxS!(8swy=wnyT8KuUGIG_eeQXbG8!_en0r`r zMy*W6yQb6j)g=1urAxg!rn|nbOX^E0M_akjp_3}&BHOkzyOx*$6rHUO80Cu`C(E(Yl{XT@s&$^)a}ncVBml``qsaR zuiE%qyI{1BG_G@;?q*;xK*##b^*nKtjGjqx4O-cLVHwU+l(3j+^GZ#-{bsbbZ8vpQ zc6;lg>MX9B#o=l~DSJA#+OkQ0_MHXM+h1g^`q^Cbn{rlUBd$mv@Fgq#f5x3~+k_nF z5CA@&WT*Q70G^c!ef9qUd4HIvNuS;4{&|djH#haq*R6go)~oURn*Dz>?bG*UyQgR8 z%?tiZ@EM*l+c~8N0Q>RzgZ}{5%{Gc;4~*f#`u_kUM*g0i#yG|Y1L@5$ar*wF6i_tU z+xpr5h`f#o1okV>u6yzCQY)1bFF27ENY4inEA;j#KO9v!+awNq4mx`heL?Bktx{_L z0Egi2Zl!f~=Dz(O-oFA{i3>P6=WHvHj&P{MILFuP%{DeHU#QD5J+qRh@#)vTO)&Du z{nQ@(Am{uKwGsTKy7j=$GD*iHj-OM{rDoNlpL>44=3A7x+im<>>u$Qf-esj?91=&~ z80-K%0r^*5eR1Y^cSeJEF>0FBg-1{((tIfx$n-u-W7LD#0bF+(&wpRXkJqQaO450Y zTSFIRc5pol!D@_sGJKWK(z)tE%5>$~yZqxMy7aqi^}UYuB^Xp%UVMrx&zkM`{{V&- z8MaFfItz%KC(t~9r^-)b*E|zZTse6I4!%vQ<&HLqmW)?N4c8Wyv*Wm0ku#`^4$ z@$aABwmOneCz`?ynN^QJycx$smK^)>-_o=rVxD0i^Uc37%1837ph&^TIR_tz&*Uk^ zB-&jqcirpvBPz0#lv8b`&2Luj->$!K+4+@@bCTbVSe)SV`PGYw%i3B(PDE`ifDc(< zvWbp8{?57MwN;ar&*S{*PtE0q$oU2_!On5X_uKgK_;*rQYA>?avtQTWV}?uKTj_V@ zs#-nvzLtGE6GGu*lc>PXM^XFO2M4Gl2CDuwAUjdO2j&V0Bh`@c=rXzd{c0?7dUN^o z@BV+CcXOykM*TfnyM4UA>veaua^1_$)_>Q?*q&n3>SvFdDMuLRcA$^x>PhFXB=SkD zki=uzgMK2O(z86Qddavq;^FXpdFTHCuTj@T>vP)g;Zn8ix0Ifp7VAqfLYiCawZ7!P zPeMg}KI6s+!5)L2N8|Z{PLe`hijo0h#Ez$v!RR`BeLCbLO~jg@z34PJ-uqCe{u)?G;)50Q~HXNC7c{|DhU|L;0~C_Ol10Z zuIE})qY7=dqZ&;n-$hY98oIYOy6y5Z_Ik=zx5v`SrqlkNweEYD#5onbG2q~ND}8w0 znBDOI0O39}$n@v89@XRy**NEq<~aWV^?o(zUO2p2tUNtvt(CTl-fw-=_$R;?@1Jn? zOsA%Hu6kg3%N?ZWI2kzuuo>s;+PzxxnyEO=``nbJe)pqJR%@e+Z8WsgZ4WmugkBb# zma=lKD{EzZMOL4yO+EH{SlyE2{v=khXOzB#fuBRDF+H)5Gp>0jo&c<~IX98EbN;C_ z-{pl92M7I<4_~G@sLZeSF&`iC@T_|AgpiKDh5bIA>Y!u0dE|%OGwj(NJ+MBURMf8K zsYS`P7*Sr1lw_9LZ#ije+f7lVX*ca!T1r)1TIsxBh!q2SgBRHX;y=7)29g9`g@a%wbALyoAtVHQsV{B7u7c1`su%2R>}5m H?VtbIu|PXSi;@Sa)6`ku9dP0Nd4}`!7Z?~A z7#S~IWM*e!W@2LIX1mJDew_yjxz5AK$1f}`$}cD>#K(72QB3l-jGUYtR8;w%(j8T4 zS-CrOjEs!TOw3#?EL?X4_yq3!{|?6gr&#^|KRWOzRMA*(P)7I?qxCH_HE3xBe*_`BQn==Huab`*ZZU@pWirQ!q1t}A4zqx zWL^9bGAw<~T{ za~4!!>qdxMH%o8lso7D>^e=PN<`%pe`rKmMjDMoH5MmZ;gs*&jchqY<@Cqx=HgJkA z$FnH;w^_VdQh|`$AnzWkj(jZtnXhZEiUG`l{i@*B(jIMjYLVqvamoM@}1sEimlc_fYNItJ&z z8;YN66$gftJC{BS#|YgP_F@{Fl{XB!qU*sg^K|%2<@@{YK@$jFg62YllVh7{XssXa zo}mQ$+`~ss%c2v-u~tE;<{!>qCvSMUB!C{m0i0uRFw7WSn-2TurjM+M0$$16&Y9S? zh?(4|ook~BSyF!ckGHNTbcl+(EINXpu9{hJwpqx8MW6}`Q7eKLxRP={o7D&Pa+&R2 zHNAocJ(D#BEw|pp+5ve!#(&q(Xz7Q}f47uuJliX_sSAxsS$b^40t8#>ojbW9pDS&LHe;l%)ox#g zZ?uvS7?oHpYu%T5058Kw88pt}QfBkJwCMZHI~?PJ58lR4Q z-7{YXwfY`SA;mx2Tq}WB8dX2|lax7}+!_qjoI1m}^if*3S)umWf=&?6rQ-mJ<}Bo- zSoAUr=`)99{HboebxDiv?=l}12>!Mw{Tt!x|K0O#0BzNHFmGVWt=FrRars4nNvpxngsF=oN0Zz`Mqw)GhEi;}Z9!5J+k%K@+}6!M_j) zMunHkKF5?jnjVvefg`^ z-Gk%^4C}GXAzxcP6fNnKhgZcOoPPpSNn_EM+VtTh{>|P%7p${F#$sAggCB9>+RtYxb6ll~*0D2B6YPnYGhP9utSxOat98H4~#1X6d+++?Wv^SrvH z`x(QnpY48joG+N2v-{~S&!M}ULSZ&>TX!!D$p(jp1_x6t%KS=(o=BXz%p~UiJLzn1iFXV7j(yB^4Nx|9q*e)vCp~EAr7W=!ocS9Cs-9NXcP#;^yvCwX|L5 zl^=YF%DwrOVYE^%$H{+ z9~w)W>#k^A>4bDg-hYf!EgOHczV83ySchllwR_4LAIhYJ$T|+fUz?)x(J2Lf?^U^2 zz|*5Z(BoL-8Pfvn8!e)SlJ@T}wW-PikQpt$1A1B8?hLDQMWSSXl{UojbrmOH?LI1y zbFntS*V$R~HQTQ&Lf@I@dBZKONQqYIHEs(nl_wDyq2!YUK@*LvveU!}t4$(k$Bl2+ z3_?ld+t)pOTAjjA1r{uPw-1(X{Pn)3M6v@(Zr6<9SS{EeuMJcCzGPM+dVH#TD8sM$ z^pNK$KOsW@qmlG8Zu%G{r7csr*(V7GMQ1LDHuVlZvzd3V_6bAF@-MHMs(!8(_3pdz zX!!nHH&G+A26^*5-{&HKyouJnB`3?I7lfR=N3+8Y!$Mlxg})gN$r5TDfhhInA-ZL7 zO>@3KJ#Iia@CSzEE zUxV*<2G^^VYII2%(*ND#T+HirbJyKs|F$hyh2~I}VaweJ>C)2DFLJ_XyNw2S$l_ZC z{k%+J*j%J?N-b-PUW9#Ln+$?;pZpyxn{E2b^4#{9w4~>9qqd9mrn>T~d2)h8lK*BR zVkWbyxF6ESeeJ@u4*MdW1p8+jZRuF2l|YOWVon}gfmZmS5C-KxYklC~o)A`ERWQXY z!CVuk?tFU|URCFRy?PjDqsz-R5nk)+`sKZ8r->e)eXnm3KW=uvbf(*2{`(bBVWoQJ zj?bJ=?7+xjQ^kRul0E(Tt$mWGkSg=!n~tTMlm+h*HlX1&u|HG014*`2D2ZeB4j+PNMDR+P7)(HB~Hg&W=3fx{W^pri8E3Y~%p$r>tf+x!Xd zakC)`t&2S@`^6Zm+jR@O0MGm@6M5c6Kb}W}_O%AR+>a_P@%FSO{id>`%NCQF{S+ zO4kqVQMK|=Nqf{kE%Ilo;zXq`!Mbqv_0Cq;2Onf{>5CvNlTyl4mN^^l)i;kjD$Jr@ zBTPME;+r@F>I=%!iO7PHZsTPHR=DT#T_d7M$*R@Tb-{rz{e>^j+#eojTAaA9 zwc%NP7rpcd;9ovwQItw>e7e&I+U4a=cq!HwbN75klKf2<5c;Fw2eFel$ilqZ-@~wy zg|ypzyTVFGyqaoDM3IGC>(=0Rw?}n;JuJ2I8NR>mDi>uX-CshF;w{sS(~Q{Hu-fOe zJ@-ENyyYzUOt6`5^z+W60uXtgB#MxhC4af>SK(ky^qNk;hP8=KhnB;5KvdH2|5{g= zx!!1#B;e)~2KgqSoZ^LNY;>tO?#@cMne~)TOpJ+SrjE%td;t2-WTX8Vr$TL#jI1&r z=)Y7l`1l{6Bu}hfbKhDQIrnm&q{UkZY0On=KWH62K58v1xpyav;~a7_)A!=1`#TWO z%u!_OTWGm6v16k*L+nC>IIGq0ewiD;b%CW+l-Y;iMN5Css{vYeg;e_Uk=he*n1d~* zO+16g7G5bT9RJVCGX!sgZ$8n3yuHLQnT;SiP@M9F5)b5UZ4|Xn%!`TLW2M=0E$L24 z^5bxsXTVS1cx4yY7e8B-0s4N|>*C>R(kX|X9CFMy7||x^Xjw|n%)Iqjh6c9!Mon=L zDPE0fDjZY}$4PD-@7G%r{GIf71J52`PPOlgKiRfBHTM;X4=uM5TNJ^XEZ$l=r7rtjYG^xPL*tC#T7ASp`(%k%=vQ>JxxRtXC zYD2+8nz5lFK8s#a^3C2NjtW#+$OrwN8=B2ZYXnXG)^*1fkOFS<_dj|v&alE>nFn|I zN)D$Ak+~V6;iksAu6&1DD0EGx z6*vsxI0jWVDuA0QR{!o6*zxlR=CFrjLQl)v;(bPT|8S76b#i)Q3;Y=A^`m0l>b&y7 zcQ8{ahMlm^jz5{y?D{Y&Tiqv66RIOp*zrm4UYRS`bVt&c%HG=SuGSZ_ykgu_Qn*&; zOLqbT%ipDDJZ*ihY?A!(yjp7D=%RLEFVj~wpYH(tIC$?g#M0iEUUHUhZJZn`k$cO@ zJiujhpe#UbIq^v2SJpD2{qTW8bbmC~hX}6B_jo<7m;aU4+&puZ&hyO<*}r@>BJBfR z=SRB3L4UtLSGiVg>{6XSu){=w-Mh);7i0P?b zDZ~oqK4Y@j)%J;lJ{-p*16-dFpuP-bEw3N~n!2AKPm0tNI6?j+ zl?othi-=pKNHsG&^yi7$Q-&PL*JaDZpC>$3==o{_hom+JBt-Aa(_v)~*^|WjADDup zvIiv!x~f0n6J^CpT0LO;lFmtWl8Qyl zPf50~!Vqn!d1(!Z{Cfqx&~=~8ERN7_OC0u+V!;MKKIcFgWz{m%>}X2?;$5oXysA;-1Cta zruX_0FD0+Qf90Zd=8idf*V)u(2HqGkt$>?_vGQIb<$jX|&VGV8)lgQ-JH+^a=~7?A zJAuwVd)zjD(7Z*Jm0(1Z+r@BW8YH{^?F|>QwOz=%^YC|r++-h@tRgogj&i1EY8y8P z+Sbv5#M}42byI;q;u$Cybg%MLzZ080=E9(wbum#HgCEYcsZOd9I2X=$S=-a?fw7Dd z1H~GWN6DBBCS$0;YfxpzHW&VN+&wHArF~d3AC}m=O*@B0`Zfi&Y+8M?K&AqFxoo39 zpN~d%EID3YPW3xAZ$YV|RNNb>z;D}9@S)KkI2EY$B9(UM8hwP#{U33I=W1uwtHufg zoSoewG$mCy3x~1o|F{IF;11;d%)Ab)cV%K&DR1lbkjgPQ3?-^A&?&r5ue@h7@bL=l zKrz1_wsw2DDp8aYru&o3*1wKE0*p>q7kZ6xRVP~-8gaifZZ%PX z9aaqDEP-|0{9_|Cc&}$)Ziv|xJbzl=p0Od+e(SI8!Itm_IM%AQ$>o?A# zsVxkX)6ha`vGXy)+dZ)Diu=4^F69n*qll9VXh)DiJQes-AW}~+#T30gORG5hEopv< z)Ojh*-|a{FfF?>=N!m!MV@}E$u=N~c*FUL(c}0|do8tN071MqVUCSHOAyt&9!(<7# z36j#xN*!sX@<$?Fo9-H}Wqj4p%8HFiM}f=JOb> zy8JLTJEgZY>>h|hDj+lRm2QrK!^NoCj|$iuQQ}LlG;o7|p+hZs3T;!>8MgM%i5^J&GmdzxapPN!aQ7!s!_cC#wN32lVgpnHVadiKKa*@;22>Ik97&5|!~O zw{7gH6JB!j-Y-^C=vvvebl>;EaY5P)uufA6)=eTSA(;wj1iK4^s(Tpx(F@qY#R*Ma zH5b)k$IobZ*PZ{RWwI4)jSXyH7#QQ{mBNr<2b?AHPl+e61uv|dC}$qrj!2N%GTP}_ zlp@8mq0?>=z>>n*EM2we6BDr|7;RN0TCys-jT9wwz&7$g0R#9H>F5jkAOO0B#)!Qe ztmeo2BkB@8e{0gr5)p4o>*&(InyHEkG2=f0j ztiru1*@Pca>%sr9^RQH48y^(d!QVAaTGwAWzsNz#KZ;OGP~;?r(MnV|xTpg{H5d(v%4X}gXR6w}YHw*op3dov0q5`cEe}?yMS7RbTDEdH-mVc16 z^ll+w*$Czo5qD_wiTk#KCdD{R3vExEc8tm307pWkgH%c@P2fm0wxCxM+OTUZk(oAr zMS5YkqevVd*wgL7dQ})HL|%IWYla>Uu1yW5_Yg1B5Oc6g5pyUTrt|I2v_=KZ-j~=J z%35~Y5*Ew_M+9jm<7u)RX2UzI#E#z+73$a-C}EZgsOuIR4ZT5+W*>^c7;B2iXL`sh zwDA0!6WK7=Lj@kwkbdFu_Bvp?jt_lHF z8U`tGthARutpwz-_M^mIBMy?%k~Q=b9SN6_+O+rK%eZgH0Bp|W^kTeSBqW+7cD?53 zDlAn3amn`DhtGH;BK)M@)P=mO_VdI%Y`^M%@u^gyGcq3bMP#Az8>Y?V0mmIQrv5Ah zp#^I~{z2|@JP)(z2ta}ljP{Fbb&Dbl${tAXEN#rgj(jY%4~x>Ujx^TSnum(d-VhKQ zj2}EK97Pqzr5NzOMn{<3bupo=Qvm^evwh0>B#qB7I#Ov?oybgv;vglSm5BSlo*O(i zClo2{Qh{&a0ek6(xe4Vf965zI{>%P)@RZg_k$+H|+60=RPh7ND5l~q&1O_J?Xtoma z*2v=XS`|*_iZ||DJ_~({Q(Ur+;i7cV7u1WJ1>StD{r8pSvWs^N zPcO6uf+PP<(PVn@Y@25He77|!&{bhs_N>S00qD!naXcoAH+5aYx7solobH diff --git a/internal/media/util.go b/internal/media/util.go index f4f2819..1178649 100644 --- a/internal/media/util.go +++ b/internal/media/util.go @@ -206,7 +206,9 @@ func deriveImage(b []byte, contentType string) (*imageAndMeta, error) { } out := &bytes.Buffer{} - if err := jpeg.Encode(out, i, nil); err != nil { + if err := jpeg.Encode(out, i, &jpeg.Options{ + Quality: 100, + }); err != nil { return nil, err } @@ -256,7 +258,9 @@ func deriveThumbnail(b []byte, contentType string, x uint, y uint) (*imageAndMet aspect := float64(width) / float64(height) out := &bytes.Buffer{} - if err := jpeg.Encode(out, thumb, nil); err != nil { + if err := jpeg.Encode(out, thumb, &jpeg.Options{ + Quality: 100, + }); err != nil { return nil, err } return &imageAndMeta{ diff --git a/internal/message/accountprocess.go b/internal/message/accountprocess.go index 9433140..a10f6d0 100644 --- a/internal/message/accountprocess.go +++ b/internal/message/accountprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( @@ -166,3 +184,112 @@ func (p *processor) AccountUpdate(authed *oauth.Auth, form *apimodel.UpdateCrede } return acctSensitive, nil } + +func (p *processor) AccountStatusesGet(authed *oauth.Auth, targetAccountID string, limit int, excludeReplies bool, maxID string, pinned bool, mediaOnly bool) ([]apimodel.Status, ErrorWithCode) { + targetAccount := >smodel.Account{} + if err := p.db.GetByID(targetAccountID, targetAccount); err != nil { + if _, ok := err.(db.ErrNoEntries); ok { + return nil, NewErrorNotFound(fmt.Errorf("no entry found for account id %s", targetAccountID)) + } + return nil, NewErrorInternalError(err) + } + + statuses := []gtsmodel.Status{} + apiStatuses := []apimodel.Status{} + if err := p.db.GetStatusesByTimeDescending(targetAccountID, &statuses, limit, excludeReplies, maxID, pinned, mediaOnly); err != nil { + if _, ok := err.(db.ErrNoEntries); ok { + return apiStatuses, nil + } + return nil, NewErrorInternalError(err) + } + + for _, s := range statuses { + relevantAccounts, err := p.db.PullRelevantAccountsFromStatus(&s) + if err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error getting relevant statuses: %s", err)) + } + + visible, err := p.db.StatusVisible(&s, targetAccount, authed.Account, relevantAccounts) + if err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error checking status visibility: %s", err)) + } + if !visible { + continue + } + + var boostedStatus *gtsmodel.Status + if s.BoostOfID != "" { + bs := >smodel.Status{} + if err := p.db.GetByID(s.BoostOfID, bs); err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error getting boosted status: %s", err)) + } + boostedRelevantAccounts, err := p.db.PullRelevantAccountsFromStatus(bs) + if err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error getting relevant accounts from boosted status: %s", err)) + } + + boostedVisible, err := p.db.StatusVisible(bs, relevantAccounts.BoostedAccount, authed.Account, boostedRelevantAccounts) + if err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error checking boosted status visibility: %s", err)) + } + + if boostedVisible { + boostedStatus = bs + } + } + + apiStatus, err := p.tc.StatusToMasto(&s, targetAccount, authed.Account, relevantAccounts.BoostedAccount, relevantAccounts.ReplyToAccount, boostedStatus) + if err != nil { + return nil, NewErrorInternalError(fmt.Errorf("error converting status to masto: %s", err)) + } + + apiStatuses = append(apiStatuses, *apiStatus) + } + + return apiStatuses, nil +} + +func (p *processor) AccountFollowersGet(authed *oauth.Auth, targetAccountID string) ([]apimodel.Account, ErrorWithCode) { + blocked, err := p.db.Blocked(authed.Account.ID, targetAccountID) + if err != nil { + return nil, NewErrorInternalError(err) + } + + if blocked { + return nil, NewErrorNotFound(fmt.Errorf("block exists between accounts")) + } + + followers := []gtsmodel.Follow{} + accounts := []apimodel.Account{} + if err := p.db.GetFollowersByAccountID(targetAccountID, &followers); err != nil { + if _, ok := err.(db.ErrNoEntries); ok { + return accounts, nil + } + return nil, NewErrorInternalError(err) + } + + for _, f := range followers { + blocked, err := p.db.Blocked(authed.Account.ID, f.AccountID) + if err != nil { + return nil, NewErrorInternalError(err) + } + if blocked { + continue + } + + a := >smodel.Account{} + if err := p.db.GetByID(f.AccountID, a); err != nil { + if _, ok := err.(db.ErrNoEntries); ok { + continue + } + return nil, NewErrorInternalError(err) + } + + account, err := p.tc.AccountToMastoPublic(a) + if err != nil { + return nil, NewErrorInternalError(err) + } + accounts = append(accounts, *account) + } + return accounts, nil +} diff --git a/internal/message/adminprocess.go b/internal/message/adminprocess.go index abf7b61..d26196d 100644 --- a/internal/message/adminprocess.go +++ b/internal/message/adminprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/appprocess.go b/internal/message/appprocess.go index bf56f08..2fddb7a 100644 --- a/internal/message/appprocess.go +++ b/internal/message/appprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/error.go b/internal/message/error.go index cbd55dc..ceeef1b 100644 --- a/internal/message/error.go +++ b/internal/message/error.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/fediprocess.go b/internal/message/fediprocess.go index 133e7db..3c7c30e 100644 --- a/internal/message/fediprocess.go +++ b/internal/message/fediprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( @@ -60,10 +78,10 @@ func (p *processor) authenticateAndDereferenceFediRequest(username string, r *ht } // put it in our channel to queue it for async processing - p.FromFederator() <- FromFederator{ + p.FromFederator() <- gtsmodel.FromFederator{ APObjectType: gtsmodel.ActivityStreamsProfile, APActivityType: gtsmodel.ActivityStreamsCreate, - Activity: requestingAccount, + GTSModel: requestingAccount, } return requestingAccount, nil diff --git a/internal/message/fromclientapiprocess.go b/internal/message/fromclientapiprocess.go new file mode 100644 index 0000000..1a12216 --- /dev/null +++ b/internal/message/fromclientapiprocess.go @@ -0,0 +1,73 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package message + +import ( + "errors" + "fmt" + + "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" +) + +func (p *processor) processFromClientAPI(clientMsg gtsmodel.FromClientAPI) error { + switch clientMsg.APObjectType { + case gtsmodel.ActivityStreamsNote: + status, ok := clientMsg.GTSModel.(*gtsmodel.Status) + if !ok { + return errors.New("note was not parseable as *gtsmodel.Status") + } + + if err := p.notifyStatus(status); err != nil { + return err + } + + if status.VisibilityAdvanced.Federated { + return p.federateStatus(status) + } + return nil + } + return fmt.Errorf("message type unprocessable: %+v", clientMsg) +} + +func (p *processor) federateStatus(status *gtsmodel.Status) error { + // // derive the sending account -- it might be attached to the status already + // sendingAcct := >smodel.Account{} + // if status.GTSAccount != nil { + // sendingAcct = status.GTSAccount + // } else { + // // it wasn't attached so get it from the db instead + // if err := p.db.GetByID(status.AccountID, sendingAcct); err != nil { + // return err + // } + // } + + // outboxURI, err := url.Parse(sendingAcct.OutboxURI) + // if err != nil { + // return err + // } + + // // convert the status to AS format Note + // note, err := p.tc.StatusToAS(status) + // if err != nil { + // return err + // } + + // _, err = p.federator.FederatingActor().Send(context.Background(), outboxURI, note) + return nil +} diff --git a/internal/gtsmodel/statuspin.go b/internal/message/fromcommonprocess.go similarity index 57% rename from internal/gtsmodel/statuspin.go rename to internal/message/fromcommonprocess.go index 1df3333..14f145d 100644 --- a/internal/gtsmodel/statuspin.go +++ b/internal/message/fromcommonprocess.go @@ -16,18 +16,10 @@ along with this program. If not, see . */ -package gtsmodel +package message -import "time" +import "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" -// StatusPin refers to a status 'pinned' to the top of an account -type StatusPin struct { - // id of this pin in the database - ID string `pg:"type:uuid,default:gen_random_uuid(),pk,notnull,unique"` - // when was this pin created - CreatedAt time.Time `pg:"type:timestamp,notnull,default:now()"` - // id of the account that created ('did') the pinning (this should always be the same as the author of the status) - AccountID string `pg:",notnull"` - // database id of the status that has been pinned - StatusID string `pg:",notnull"` +func (p *processor) notifyStatus(status *gtsmodel.Status) error { + return nil } diff --git a/internal/message/fromfederatorprocess.go b/internal/message/fromfederatorprocess.go new file mode 100644 index 0000000..2dd8e9e --- /dev/null +++ b/internal/message/fromfederatorprocess.go @@ -0,0 +1,208 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + +package message + +import ( + "errors" + "fmt" + "net/url" + + "github.com/google/uuid" + "github.com/sirupsen/logrus" + "github.com/superseriousbusiness/gotosocial/internal/db" + "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" + "github.com/superseriousbusiness/gotosocial/internal/transport" +) + +func (p *processor) processFromFederator(federatorMsg gtsmodel.FromFederator) error { + l := p.log.WithFields(logrus.Fields{ + "func": "processFromFederator", + "federatorMsg": fmt.Sprintf("%+v", federatorMsg), + }) + + l.Debug("entering function PROCESS FROM FEDERATOR") + + switch federatorMsg.APObjectType { + case gtsmodel.ActivityStreamsNote: + + incomingStatus, ok := federatorMsg.GTSModel.(*gtsmodel.Status) + if !ok { + return errors.New("note was not parseable as *gtsmodel.Status") + } + + l.Debug("will now derefence incoming status") + if err := p.dereferenceStatusFields(incomingStatus); err != nil { + return fmt.Errorf("error dereferencing status from federator: %s", err) + } + if err := p.db.UpdateByID(incomingStatus.ID, incomingStatus); err != nil { + return fmt.Errorf("error updating dereferenced status in the db: %s", err) + } + + if err := p.notifyStatus(incomingStatus); err != nil { + return err + } + } + + return nil +} + +// dereferenceStatusFields fetches all the information we temporarily pinned to an incoming +// federated status, back in the federating db's Create function. +// +// When a status comes in from the federation API, there are certain fields that +// haven't been dereferenced yet, because we needed to provide a snappy synchronous +// response to the caller. By the time it reaches this function though, it's being +// processed asynchronously, so we have all the time in the world to fetch the various +// bits and bobs that are attached to the status, and properly flesh it out, before we +// send the status to any timelines and notify people. +// +// Things to dereference and fetch here: +// +// 1. Media attachments. +// 2. Hashtags. +// 3. Emojis. +// 4. Mentions. +// 5. Posting account. +// 6. Replied-to-status. +// +// SIDE EFFECTS: +// This function will deference all of the above, insert them in the database as necessary, +// and attach them to the status. The status itself will not be added to the database yet, +// that's up the caller to do. +func (p *processor) dereferenceStatusFields(status *gtsmodel.Status) error { + l := p.log.WithFields(logrus.Fields{ + "func": "dereferenceStatusFields", + "status": fmt.Sprintf("%+v", status), + }) + l.Debug("entering function") + + var t transport.Transport + var err error + var username string + // TODO: dereference with a user that's addressed by the status + t, err = p.federator.GetTransportForUser(username) + if err != nil { + return fmt.Errorf("error creating transport: %s", err) + } + + // the status should have an ID by now, but just in case it doesn't let's generate one here + // because we'll need it further down + if status.ID == "" { + status.ID = uuid.NewString() + } + + // 1. Media attachments. + // + // At this point we should know: + // * the media type of the file we're looking for (a.File.ContentType) + // * the blurhash (a.Blurhash) + // * the file type (a.Type) + // * the remote URL (a.RemoteURL) + // This should be enough to pass along to the media processor. + attachmentIDs := []string{} + for _, a := range status.GTSMediaAttachments { + l.Debugf("dereferencing attachment: %+v", a) + + // it might have been processed elsewhere so check first if it's already in the database or not + maybeAttachment := >smodel.MediaAttachment{} + err := p.db.GetWhere("remote_url", a.RemoteURL, maybeAttachment) + if err == nil { + // we already have it in the db, dereferenced, no need to do it again + l.Debugf("attachment already exists with id %s", maybeAttachment.ID) + attachmentIDs = append(attachmentIDs, maybeAttachment.ID) + continue + } + if _, ok := err.(db.ErrNoEntries); !ok { + // we have a real error + return fmt.Errorf("error checking db for existence of attachment with remote url %s: %s", a.RemoteURL, err) + } + // it just doesn't exist yet so carry on + l.Debug("attachment doesn't exist yet, calling ProcessRemoteAttachment", a) + deferencedAttachment, err := p.mediaHandler.ProcessRemoteAttachment(t, a, status.AccountID) + if err != nil { + p.log.Errorf("error dereferencing status attachment: %s", err) + continue + } + l.Debugf("dereferenced attachment: %+v", deferencedAttachment) + deferencedAttachment.StatusID = status.ID + if err := p.db.Put(deferencedAttachment); err != nil { + return fmt.Errorf("error inserting dereferenced attachment with remote url %s: %s", a.RemoteURL, err) + } + deferencedAttachment.Description = a.Description + attachmentIDs = append(attachmentIDs, deferencedAttachment.ID) + } + status.Attachments = attachmentIDs + + // 2. Hashtags + + // 3. Emojis + + // 4. Mentions + // At this point, mentions should have the namestring and mentionedAccountURI set on them. + // + // We should dereference any accounts mentioned here which we don't have in our db yet, by their URI. + mentions := []string{} + for _, m := range status.GTSMentions { + uri, err := url.Parse(m.MentionedAccountURI) + if err != nil { + l.Debugf("error parsing mentioned account uri %s: %s", m.MentionedAccountURI, err) + continue + } + + m.StatusID = status.ID + m.OriginAccountID = status.GTSAccount.ID + m.OriginAccountURI = status.GTSAccount.URI + + targetAccount := >smodel.Account{} + if err := p.db.GetWhere("uri", uri.String(), targetAccount); err != nil { + // proper error + if _, ok := err.(db.ErrNoEntries); !ok { + return fmt.Errorf("db error checking for account with uri %s", uri.String()) + } + + // we just don't have it yet, so we should go get it.... + accountable, err := p.federator.DereferenceRemoteAccount(username, uri) + if err != nil { + // we can't dereference it so just skip it + l.Debugf("error dereferencing remote account with uri %s: %s", uri.String(), err) + continue + } + + targetAccount, err = p.tc.ASRepresentationToAccount(accountable) + if err != nil { + l.Debugf("error converting remote account with uri %s into gts model: %s", uri.String(), err) + continue + } + + if err := p.db.Put(targetAccount); err != nil { + return fmt.Errorf("db error inserting account with uri %s", uri.String()) + } + } + + // by this point, we know the targetAccount exists in our database with an ID :) + m.TargetAccountID = targetAccount.ID + if err := p.db.Put(m); err != nil { + return fmt.Errorf("error creating mention: %s", err) + } + mentions = append(mentions, m.ID) + } + status.Mentions = mentions + + return nil +} diff --git a/internal/message/frprocess.go b/internal/message/frprocess.go index c96b83d..cc38385 100644 --- a/internal/message/frprocess.go +++ b/internal/message/frprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/instanceprocess.go b/internal/message/instanceprocess.go index 0b0f155..05ea103 100644 --- a/internal/message/instanceprocess.go +++ b/internal/message/instanceprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/mediaprocess.go b/internal/message/mediaprocess.go index 3985849..094da7a 100644 --- a/internal/message/mediaprocess.go +++ b/internal/message/mediaprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( @@ -40,7 +58,7 @@ func (p *processor) MediaCreate(authed *oauth.Auth, form *apimodel.AttachmentReq } // allow the mediaHandler to work its magic of processing the attachment bytes, and putting them in whatever storage backend we're using - attachment, err := p.mediaHandler.ProcessLocalAttachment(buf.Bytes(), authed.Account.ID) + attachment, err := p.mediaHandler.ProcessAttachment(buf.Bytes(), authed.Account.ID, "") if err != nil { return nil, fmt.Errorf("error reading attachment: %s", err) } diff --git a/internal/message/processor.go b/internal/message/processor.go index 7fc850e..c9ba5f8 100644 --- a/internal/message/processor.go +++ b/internal/message/processor.go @@ -20,10 +20,7 @@ package message import ( "context" - "errors" - "fmt" "net/http" - "net/url" "github.com/sirupsen/logrus" apimodel "github.com/superseriousbusiness/gotosocial/internal/api/model" @@ -45,13 +42,13 @@ import ( // for clean distribution of messages without slowing down the client API and harming the user experience. type Processor interface { // ToClientAPI returns a channel for putting in messages that need to go to the gts client API. - ToClientAPI() chan ToClientAPI + // ToClientAPI() chan gtsmodel.ToClientAPI // FromClientAPI returns a channel for putting messages in that come from the client api going to the processor - FromClientAPI() chan FromClientAPI + FromClientAPI() chan gtsmodel.FromClientAPI // ToFederator returns a channel for putting in messages that need to go to the federator (activitypub). - ToFederator() chan ToFederator + // ToFederator() chan gtsmodel.ToFederator // FromFederator returns a channel for putting messages in that come from the federator (activitypub) going into the processor - FromFederator() chan FromFederator + FromFederator() chan gtsmodel.FromFederator // Start starts the Processor, reading from its channels and passing messages back and forth. Start() error // Stop stops the processor cleanly, finishing handling any remaining messages before closing down. @@ -71,6 +68,11 @@ type Processor interface { AccountGet(authed *oauth.Auth, targetAccountID string) (*apimodel.Account, error) // AccountUpdate processes the update of an account with the given form AccountUpdate(authed *oauth.Auth, form *apimodel.UpdateCredentialsRequest) (*apimodel.Account, error) + // AccountStatusesGet fetches a number of statuses (in time descending order) from the given account, filtered by visibility for + // the account given in authed. + AccountStatusesGet(authed *oauth.Auth, targetAccountID string, limit int, excludeReplies bool, maxID string, pinned bool, mediaOnly bool) ([]apimodel.Status, ErrorWithCode) + // AccountFollowersGet + AccountFollowersGet(authed *oauth.Auth, targetAccountID string) ([]apimodel.Account, ErrorWithCode) // AdminEmojiCreate handles the creation of a new instance emoji by an admin, using the given form. AdminEmojiCreate(authed *oauth.Auth, form *apimodel.EmojiCreateRequest) (*apimodel.Emoji, error) @@ -142,10 +144,10 @@ type Processor interface { // processor just implements the Processor interface type processor struct { // federator pub.FederatingActor - toClientAPI chan ToClientAPI - fromClientAPI chan FromClientAPI - toFederator chan ToFederator - fromFederator chan FromFederator + // toClientAPI chan gtsmodel.ToClientAPI + fromClientAPI chan gtsmodel.FromClientAPI + // toFederator chan gtsmodel.ToFederator + fromFederator chan gtsmodel.FromFederator federator federation.Federator stop chan interface{} log *logrus.Logger @@ -160,10 +162,10 @@ type processor struct { // NewProcessor returns a new Processor that uses the given federator and logger func NewProcessor(config *config.Config, tc typeutils.TypeConverter, federator federation.Federator, oauthServer oauth.Server, mediaHandler media.Handler, storage storage.Storage, db db.DB, log *logrus.Logger) Processor { return &processor{ - toClientAPI: make(chan ToClientAPI, 100), - fromClientAPI: make(chan FromClientAPI, 100), - toFederator: make(chan ToFederator, 100), - fromFederator: make(chan FromFederator, 100), + // toClientAPI: make(chan gtsmodel.ToClientAPI, 100), + fromClientAPI: make(chan gtsmodel.FromClientAPI, 100), + // toFederator: make(chan gtsmodel.ToFederator, 100), + fromFederator: make(chan gtsmodel.FromFederator, 100), federator: federator, stop: make(chan interface{}), log: log, @@ -176,19 +178,19 @@ func NewProcessor(config *config.Config, tc typeutils.TypeConverter, federator f } } -func (p *processor) ToClientAPI() chan ToClientAPI { - return p.toClientAPI -} +// func (p *processor) ToClientAPI() chan gtsmodel.ToClientAPI { +// return p.toClientAPI +// } -func (p *processor) FromClientAPI() chan FromClientAPI { +func (p *processor) FromClientAPI() chan gtsmodel.FromClientAPI { return p.fromClientAPI } -func (p *processor) ToFederator() chan ToFederator { - return p.toFederator -} +// func (p *processor) ToFederator() chan gtsmodel.ToFederator { +// return p.toFederator +// } -func (p *processor) FromFederator() chan FromFederator { +func (p *processor) FromFederator() chan gtsmodel.FromFederator { return p.fromFederator } @@ -198,17 +200,20 @@ func (p *processor) Start() error { DistLoop: for { select { - case clientMsg := <-p.toClientAPI: - p.log.Infof("received message TO client API: %+v", clientMsg) + // case clientMsg := <-p.toClientAPI: + // p.log.Infof("received message TO client API: %+v", clientMsg) case clientMsg := <-p.fromClientAPI: p.log.Infof("received message FROM client API: %+v", clientMsg) if err := p.processFromClientAPI(clientMsg); err != nil { p.log.Error(err) } - case federatorMsg := <-p.toFederator: - p.log.Infof("received message TO federator: %+v", federatorMsg) + // case federatorMsg := <-p.toFederator: + // p.log.Infof("received message TO federator: %+v", federatorMsg) case federatorMsg := <-p.fromFederator: p.log.Infof("received message FROM federator: %+v", federatorMsg) + if err := p.processFromFederator(federatorMsg); err != nil { + p.log.Error(err) + } case <-p.stop: break DistLoop } @@ -223,82 +228,3 @@ func (p *processor) Stop() error { close(p.stop) return nil } - -// ToClientAPI wraps a message that travels from the processor into the client API -type ToClientAPI struct { - APObjectType gtsmodel.ActivityStreamsObject - APActivityType gtsmodel.ActivityStreamsActivity - Activity interface{} -} - -// FromClientAPI wraps a message that travels from client API into the processor -type FromClientAPI struct { - APObjectType gtsmodel.ActivityStreamsObject - APActivityType gtsmodel.ActivityStreamsActivity - Activity interface{} -} - -// ToFederator wraps a message that travels from the processor into the federator -type ToFederator struct { - APObjectType gtsmodel.ActivityStreamsObject - APActivityType gtsmodel.ActivityStreamsActivity - Activity interface{} -} - -// FromFederator wraps a message that travels from the federator into the processor -type FromFederator struct { - APObjectType gtsmodel.ActivityStreamsObject - APActivityType gtsmodel.ActivityStreamsActivity - Activity interface{} -} - -func (p *processor) processFromClientAPI(clientMsg FromClientAPI) error { - switch clientMsg.APObjectType { - case gtsmodel.ActivityStreamsNote: - status, ok := clientMsg.Activity.(*gtsmodel.Status) - if !ok { - return errors.New("note was not parseable as *gtsmodel.Status") - } - - if err := p.notifyStatus(status); err != nil { - return err - } - - if status.VisibilityAdvanced.Federated { - return p.federateStatus(status) - } - return nil - } - return fmt.Errorf("message type unprocessable: %+v", clientMsg) -} - -func (p *processor) federateStatus(status *gtsmodel.Status) error { - // derive the sending account -- it might be attached to the status already - sendingAcct := >smodel.Account{} - if status.GTSAccount != nil { - sendingAcct = status.GTSAccount - } else { - // it wasn't attached so get it from the db instead - if err := p.db.GetByID(status.AccountID, sendingAcct); err != nil { - return err - } - } - - outboxURI, err := url.Parse(sendingAcct.OutboxURI) - if err != nil { - return err - } - - // convert the status to AS format Note - note, err := p.tc.StatusToAS(status) - if err != nil { - return err - } - - _, err = p.federator.FederatingActor().Send(context.Background(), outboxURI, note) - return err -} - -func (p *processor) notifyStatus(status *gtsmodel.Status) error { - return nil -} diff --git a/internal/message/processorutil.go b/internal/message/processorutil.go index 233a18a..676635a 100644 --- a/internal/message/processorutil.go +++ b/internal/message/processorutil.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( diff --git a/internal/message/statusprocess.go b/internal/message/statusprocess.go index d9d115a..86a07eb 100644 --- a/internal/message/statusprocess.go +++ b/internal/message/statusprocess.go @@ -1,3 +1,21 @@ +/* + GoToSocial + Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . +*/ + package message import ( @@ -82,10 +100,10 @@ func (p *processor) StatusCreate(auth *oauth.Auth, form *apimodel.AdvancedStatus } // put the new status in the appropriate channel for async processing - p.fromClientAPI <- FromClientAPI{ + p.fromClientAPI <- gtsmodel.FromClientAPI{ APObjectType: newStatus.ActivityStreamsType, APActivityType: gtsmodel.ActivityStreamsCreate, - Activity: newStatus, + GTSModel: newStatus, } // return the frontend representation of the new status to the submitter @@ -161,8 +179,10 @@ func (p *processor) StatusFave(authed *oauth.Auth, targetStatusID string) (*apim } // is the status faveable? - if !targetStatus.VisibilityAdvanced.Likeable { - return nil, errors.New("status is not faveable") + if targetStatus.VisibilityAdvanced != nil { + if !targetStatus.VisibilityAdvanced.Likeable { + return nil, errors.New("status is not faveable") + } } // it's visible! it's faveable! so let's fave the FUCK out of it @@ -218,8 +238,10 @@ func (p *processor) StatusBoost(authed *oauth.Auth, targetStatusID string) (*api return nil, NewErrorNotFound(errors.New("status is not visible")) } - if !targetStatus.VisibilityAdvanced.Boostable { - return nil, NewErrorForbidden(errors.New("status is not boostable")) + if targetStatus.VisibilityAdvanced != nil { + if !targetStatus.VisibilityAdvanced.Boostable { + return nil, NewErrorForbidden(errors.New("status is not boostable")) + } } // it's visible! it's boostable! so let's boost the FUCK out of it @@ -428,8 +450,10 @@ func (p *processor) StatusUnfave(authed *oauth.Auth, targetStatusID string) (*ap } // is the status faveable? - if !targetStatus.VisibilityAdvanced.Likeable { - return nil, errors.New("status is not faveable") + if targetStatus.VisibilityAdvanced != nil { + if !targetStatus.VisibilityAdvanced.Likeable { + return nil, errors.New("status is not faveable") + } } // it's visible! it's faveable! so let's unfave the FUCK out of it diff --git a/internal/router/router.go b/internal/router/router.go index eed8577..3e0435e 100644 --- a/internal/router/router.go +++ b/internal/router/router.go @@ -153,7 +153,7 @@ func New(config *config.Config, logger *logrus.Logger) (Router, error) { s := &http.Server{ Handler: engine, ReadTimeout: 60 * time.Second, - WriteTimeout: 5 * time.Second, + WriteTimeout: 30 * time.Second, IdleTimeout: 30 * time.Second, ReadHeaderTimeout: 30 * time.Second, } diff --git a/internal/transport/controller.go b/internal/transport/controller.go index 72f41b3..ad75408 100644 --- a/internal/transport/controller.go +++ b/internal/transport/controller.go @@ -21,6 +21,7 @@ package transport import ( "crypto" "fmt" + "sync" "github.com/go-fed/activity/pub" "github.com/go-fed/httpsig" @@ -30,7 +31,7 @@ import ( // Controller generates transports for use in making federation requests to other servers. type Controller interface { - NewTransport(pubKeyID string, privkey crypto.PrivateKey) (pub.Transport, error) + NewTransport(pubKeyID string, privkey crypto.PrivateKey) (Transport, error) } type controller struct { @@ -51,7 +52,7 @@ func NewController(config *config.Config, clock pub.Clock, client pub.HttpClient } // NewTransport returns a new http signature transport with the given public key id (a URL), and the given private key. -func (c *controller) NewTransport(pubKeyID string, privkey crypto.PrivateKey) (pub.Transport, error) { +func (c *controller) NewTransport(pubKeyID string, privkey crypto.PrivateKey) (Transport, error) { prefs := []httpsig.Algorithm{httpsig.RSA_SHA256, httpsig.RSA_SHA512} digestAlgo := httpsig.DigestSha256 getHeaders := []string{"(request-target)", "host", "date"} @@ -67,5 +68,17 @@ func (c *controller) NewTransport(pubKeyID string, privkey crypto.PrivateKey) (p return nil, fmt.Errorf("error creating post signer: %s", err) } - return pub.NewHttpSigTransport(c.client, c.appAgent, c.clock, getSigner, postSigner, pubKeyID, privkey), nil + sigTransport := pub.NewHttpSigTransport(c.client, c.appAgent, c.clock, getSigner, postSigner, pubKeyID, privkey) + + return &transport{ + client: c.client, + appAgent: c.appAgent, + gofedAgent: "(go-fed/activity v1.0.0)", + clock: c.clock, + pubKeyID: pubKeyID, + privkey: privkey, + sigTransport: sigTransport, + getSigner: getSigner, + getSignerMu: &sync.Mutex{}, + }, nil } diff --git a/internal/transport/transport.go b/internal/transport/transport.go new file mode 100644 index 0000000..afd4085 --- /dev/null +++ b/internal/transport/transport.go @@ -0,0 +1,77 @@ +package transport + +import ( + "context" + "crypto" + "fmt" + "io/ioutil" + "net/http" + "net/url" + "sync" + + "github.com/go-fed/activity/pub" + "github.com/go-fed/httpsig" +) + +// Transport wraps the pub.Transport interface with some additional +// functionality for fetching remote media. +type Transport interface { + pub.Transport + DereferenceMedia(c context.Context, iri *url.URL, expectedContentType string) ([]byte, error) +} + +// transport implements the Transport interface +type transport struct { + client pub.HttpClient + appAgent string + gofedAgent string + clock pub.Clock + pubKeyID string + privkey crypto.PrivateKey + sigTransport *pub.HttpSigTransport + getSigner httpsig.Signer + getSignerMu *sync.Mutex +} + +func (t *transport) BatchDeliver(c context.Context, b []byte, recipients []*url.URL) error { + return t.sigTransport.BatchDeliver(c, b, recipients) +} + +func (t *transport) Deliver(c context.Context, b []byte, to *url.URL) error { + return t.sigTransport.Deliver(c, b, to) +} + +func (t *transport) Dereference(c context.Context, iri *url.URL) ([]byte, error) { + return t.sigTransport.Dereference(c, iri) +} + +func (t *transport) DereferenceMedia(c context.Context, iri *url.URL, expectedContentType string) ([]byte, error) { + req, err := http.NewRequest("GET", iri.String(), nil) + if err != nil { + return nil, err + } + req = req.WithContext(c) + if expectedContentType == "" { + req.Header.Add("Accept", "*/*") + } else { + req.Header.Add("Accept", expectedContentType) + } + req.Header.Add("Date", t.clock.Now().UTC().Format("Mon, 02 Jan 2006 15:04:05")+" GMT") + req.Header.Add("User-Agent", fmt.Sprintf("%s %s", t.appAgent, t.gofedAgent)) + req.Header.Set("Host", iri.Host) + t.getSignerMu.Lock() + err = t.getSigner.SignRequest(t.privkey, t.pubKeyID, req, nil) + t.getSignerMu.Unlock() + if err != nil { + return nil, err + } + resp, err := t.client.Do(req) + if err != nil { + return nil, err + } + defer resp.Body.Close() + if resp.StatusCode != http.StatusOK { + return nil, fmt.Errorf("GET request to %s failed (%d): %s", iri.String(), resp.StatusCode, resp.Status) + } + return ioutil.ReadAll(resp.Body) +} diff --git a/internal/typeutils/asextractionutil.go b/internal/typeutils/asextractionutil.go index 4ee3347..1c04272 100644 --- a/internal/typeutils/asextractionutil.go +++ b/internal/typeutils/asextractionutil.go @@ -29,6 +29,7 @@ import ( "time" "github.com/go-fed/activity/pub" + "github.com/go-fed/activity/streams" "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" "github.com/superseriousbusiness/gotosocial/internal/util" ) @@ -304,12 +305,24 @@ func extractAttachments(i withAttachment) ([]*gtsmodel.MediaAttachment, error) { attachmentProp := i.GetActivityStreamsAttachment() for iter := attachmentProp.Begin(); iter != attachmentProp.End(); iter = iter.Next() { - attachmentable, ok := iter.(Attachmentable) + + t := iter.GetType() + if t == nil { + fmt.Printf("\n\n\nGetType() nil\n\n\n") + continue + } + + m, _ := streams.Serialize(t) + fmt.Printf("\n\n\n%s\n\n\n", m) + + attachmentable, ok := t.(Attachmentable) if !ok { + fmt.Printf("\n\n\nnot attachmentable\n\n\n") continue } attachment, err := extractAttachment(attachmentable) if err != nil { + fmt.Printf("\n\n\n%s\n\n\n", err) continue } attachments = append(attachments, attachment) @@ -343,23 +356,20 @@ func extractAttachment(i Attachmentable) (*gtsmodel.MediaAttachment, error) { attachment.Description = name } - blurhash, err := extractBlurhash(i) - if err == nil { - attachment.Blurhash = blurhash - } + attachment.Processing = gtsmodel.ProcessingStatusReceived return attachment, nil } -func extractBlurhash(i withBlurhash) (string, error) { - if i.GetTootBlurhashProperty() == nil { - return "", errors.New("blurhash property was nil") - } - if i.GetTootBlurhashProperty().Get() == "" { - return "", errors.New("empty blurhash string") - } - return i.GetTootBlurhashProperty().Get(), nil -} +// func extractBlurhash(i withBlurhash) (string, error) { +// if i.GetTootBlurhashProperty() == nil { +// return "", errors.New("blurhash property was nil") +// } +// if i.GetTootBlurhashProperty().Get() == "" { +// return "", errors.New("empty blurhash string") +// } +// return i.GetTootBlurhashProperty().Get(), nil +// } func extractHashtags(i withTag) ([]*gtsmodel.Tag, error) { tags := []*gtsmodel.Tag{} diff --git a/internal/typeutils/asinterfaces.go b/internal/typeutils/asinterfaces.go index 970ed2e..c31a37a 100644 --- a/internal/typeutils/asinterfaces.go +++ b/internal/typeutils/asinterfaces.go @@ -69,8 +69,6 @@ type Attachmentable interface { withMediaType withURL withName - withBlurhash - withFocalPoint } // Hashtaggable represents the minimum activitypub interface for representing a 'hashtag' tag. @@ -212,13 +210,13 @@ type withMediaType interface { GetActivityStreamsMediaType() vocab.ActivityStreamsMediaTypeProperty } -type withBlurhash interface { - GetTootBlurhashProperty() vocab.TootBlurhashProperty -} +// type withBlurhash interface { +// GetTootBlurhashProperty() vocab.TootBlurhashProperty +// } -type withFocalPoint interface { - // TODO -} +// type withFocalPoint interface { +// // TODO +// } type withHref interface { GetActivityStreamsHref() vocab.ActivityStreamsHrefProperty diff --git a/internal/typeutils/astointernal.go b/internal/typeutils/astointernal.go index 7f0a4c1..4aa6e2b 100644 --- a/internal/typeutils/astointernal.go +++ b/internal/typeutils/astointernal.go @@ -281,7 +281,7 @@ func (c *converter) ASStatusToStatus(statusable Statusable) (*gtsmodel.Status, e // if it's CC'ed to public, it's public or unlocked // mentioned SPECIFIC ACCOUNTS also get added to CC'es if it's not a direct message - if isPublic(to) { + if isPublic(cc) || isPublic(to) { visibility = gtsmodel.VisibilityPublic } diff --git a/internal/typeutils/internaltofrontend.go b/internal/typeutils/internaltofrontend.go index 861350b..e4ccab9 100644 --- a/internal/typeutils/internaltofrontend.go +++ b/internal/typeutils/internaltofrontend.go @@ -20,6 +20,7 @@ package typeutils import ( "fmt" + "strings" "time" "github.com/superseriousbusiness/gotosocial/internal/api/model" @@ -86,16 +87,12 @@ func (c *converter) AccountToMastoPublic(a *gtsmodel.Account) (*model.Account, e } // count statuses - statuses := []gtsmodel.Status{} - if err := c.db.GetStatusesByAccountID(a.ID, &statuses); err != nil { + statusesCount, err := c.db.CountStatusesByAccountID(a.ID) + if err != nil { if _, ok := err.(db.ErrNoEntries); !ok { return nil, fmt.Errorf("error getting last statuses: %s", err) } } - var statusesCount int - if statuses != nil { - statusesCount = len(statuses) - } // check when the last status was lastStatus := >smodel.Status{} @@ -195,7 +192,7 @@ func (c *converter) AppToMastoPublic(a *gtsmodel.Application) (*model.Applicatio func (c *converter) AttachmentToMasto(a *gtsmodel.MediaAttachment) (model.Attachment, error) { return model.Attachment{ ID: a.ID, - Type: string(a.Type), + Type: strings.ToLower(string(a.Type)), URL: a.URL, PreviewURL: a.Thumbnail.URL, RemoteURL: a.RemoteURL, @@ -294,7 +291,6 @@ func (c *converter) StatusToMasto( var faved bool var reblogged bool var bookmarked bool - var pinned bool var muted bool // requestingAccount will be nil for public requests without auth @@ -319,11 +315,6 @@ func (c *converter) StatusToMasto( if err != nil { return nil, fmt.Errorf("error checking if requesting account has bookmarked status: %s", err) } - - pinned, err = c.db.StatusPinnedBy(s, requestingAccount.ID) - if err != nil { - return nil, fmt.Errorf("error checking if requesting account has pinned status: %s", err) - } } var mastoRebloggedStatus *model.Status @@ -522,7 +513,7 @@ func (c *converter) StatusToMasto( Reblogged: reblogged, Muted: muted, Bookmarked: bookmarked, - Pinned: pinned, + Pinned: s.Pinned, Content: s.Content, Reblog: mastoRebloggedStatus, Application: mastoApplication, diff --git a/testrig/db.go b/testrig/db.go index 0b49201..fb4a4e6 100644 --- a/testrig/db.go +++ b/testrig/db.go @@ -42,7 +42,6 @@ var testModels []interface{} = []interface{}{ >smodel.StatusFave{}, >smodel.StatusBookmark{}, >smodel.StatusMute{}, - >smodel.StatusPin{}, >smodel.Tag{}, >smodel.User{}, >smodel.Emoji{},