# v2 git bundle 35efd81d763edb80ef822041500082ba1415da59 refs/heads/bundle 35efd81d763edb80ef822041500082ba1415da59 HEAD PACKdxKN1>E_3E!d<2&ߒ'բJotCiN[2SN31&]&Nޢک6LQTq Q 3 fEocmV>ry{Cp ƨ].u nu?UUn:RoH~< ORY(xQn0 +x[,lٲvönv.Zk!ȴ''8AC]SjTU ѴCE֦#t℉CH SeUYg ZUe%p!&W]G˧a1ua+]jFJ8zfysDp1%r }L8E?Zяt| 9܁ʼn`)u~8>t&0&N#lF<`{ev{ ]{_2ӻ sX)V2t<\]Y$|1TXT:t$J썖FRz']ia{/l_`DvOkFPsvssB&Ρ4_y9vf3"~$c!S柙ߡ,̪*x1r0E{b;7DQH9Lg.XK#KLC9I4)Rp- G" ۔'*ͱ0Uk4>Vc}*mtinՈ<@>OmYUYأ6UcSP+ 3]C_þn*yMQ2a3?;o0sq( Lr4kmZ >' c=e9p0!./DSf kѾ̀&o ǝ.W:l*ok 1T=w)Fk0&ATU \m\gi 9Y E 3w@ >\`6ӽG64pR?6U<KafB((atBYHYyd"WΰҚqmI2P0[A߇ 1cg#J#Zw7$tԷ._:՘,xMn0<,[4Ȓ ҟEEZYu7"Ga$HZ!zžm^vErG@M_M/l*k!fSܒ[< tS$k[R5UUB-gK p$7FVESe+&iW>Ga.x!w`@{th.L0 ^~صWw )E]rq@)Dp@7s`#ٗ4d4Xh=#hؘ\~~ =k@7 u [H.;Nf D Q)f e[8yIeFs!ʑd&C#i3ZOhw!-5UjhoY;Ȍ86PG,17E\\w;3iYn$٭L_7/4ýS"xPKn0,EѬ?CG w9aORmn`y3^I `pAG:h2 םQ%B{Hٻ3-WRK3B-eD ?xcq>hGCd'hVg_ gFH6q2>EO&_#D x>y#%Ȥ=2(M8A%)s͖Ru.NnKCG d4ї[mSS|{n?|YS+\0J&zt[cR|@ZpFZk05n'ej,Wٷd8zJġ.3^xTێ6}W[mծMt/A4ibPHb- I #ȋmaI9g"d * l+]m$٤u)ueYL ҡ PleR"ϱ`RTX`|l6[J1A+ͣ]*<I҂XL${=B/Q`G=!(KFh9y^L+҃Ju[ZEOЎeD≁zmϩ׍A[#:i*k쿸_LBg+@iIS衒Νi@(C?t:IP~Iu'#3+=mb浀c:|4,V,_e(x^4[Z,dq)nO{)({ ʱ"!T=0T*~c// xkGfZ?,h/`4am ~xOqqe)+OzZV̬!}Ȓ5n f5fcoiЇ cG,tP1b6t#.| )fj4'D+():{"$ JI>wp41ϯW=pTU nc)]]*2cՁbŹ9JJDck]4Bg#۔~EkM՛W7%0N4u{Iy*9i^vèjhJKѝ#MI }>+옙 CY7x^hh t v>jI|i&ApM dNv4I8YĬiJ ;t* xN`9b޲4":jZIk<~nulong xN0w?ō "@0bԎ.Nt!xBEl>$&Kmj,u]֫r JU_nl!Wj29)KB*49J'M!mT.TZ!5@\nO7PUk)O_H&2Id>Lc ;Ϝ0i\ov?٢Yo;AbgdNv!@;b0!pL><$`leG1oo#כВC@{`s <gSߟ_G3hqz!i)}\NAvQOWF46sD#~p2xPm0 k [dKA-- Jc!dJR!:a'i,HAQY#2ڔrM^)L:R+۩NL;b`ir9V6VcYUE!p#:Qm|C^7e^5y q)[/bgL6O4@BSZ ?0zټ 8@"bߠ`\)]1| ?_>*&&OuiyRNם6wr&%Di{.C7?0R2$PDsJ FXKD ʇ sP ٙ١wD rU$J)M٨*YDU!ёPѨR"IRԘHU^%N !ɛZPpup%z+L N ; {, } +^F=R MG OW8[䄞|G\{VL7ޮ:dZF:w@OBI—$< A8BO n6]Y{yZȭ;ƴ|ہ> ٚ>ѢQ rtl7ObHtڴpY1hOǟ<5-mǷJS 2X¡v~z^ (k8G JOEI%jA#AGӨ,! pDdـpb8݉YhDw`FsEvY޷d=]VD1ek$ iI Ry >OCJKm}.@& ,0S~Ermt/CDV65^)4)Ma0Aq"0fZYs]J[ Wp/7p퉎t) FuWAɩgX=LN;fIˎ̴!O0\<$`W"7ʆ(vIq~Lc¿T餞>. "7:aN7wϗP{r Jf ƞ%l|;/t9[oFNBLɖB#(xMn0<,[ R,Y(j$AbHp7CrdH {R jny3{ #.EeUy,r*Y**n e5eTd Y+dռFJb8:||˧嚢ѳ6E!YUU?=L+0<UH*!XFr:S O_Y#[%2c P&P_ 7Ϯw7[iqWT$1D ؁f|T:0spL$S>"f7~ԎPNd'Kq; JbĨ>ZS!t5I!͜pe5e;I`5޽'~2>,)2BXg9A",jda )xQAn0 <6h޵Ehz Z⮉Ȓ!ɻMO}D_ؗr([:pD )i۾1w5áMwI۾Ռ\`SUf׽>LT}g]SQٕ{=k.i}NpgqTmMUPmY*SQo!O9=.<|_?~9m.Syg_:r }Ldubb(ڻbtn8*C1J3l^E`&WkxxW CV/ jNew4' 3;Uk;2I%%aC89Q"8F(F*0 w%@rLg#a=Iי]YS6I^gyz4@oVx0 3Ee}08a=\QGx3_z1qqBsa+2 ns{* Úx ˻ 0P)&}(2Gg !ޘƴGĜPըul݉k.Gl^LXX)4WgS#&4"x Ļ0 Kh6>d C!9vq AQFW1iݷLF\s"T4=2[K[sS%Bc}=UAxVn7}߯)iu-_ql# `;ȓ5˕kI) #!8h_9̜P)Eਪx|4yQSLOȧeL*r񼚩RI1?⌻*[zuj I'|JxitgAO{\fIkr<))8Z9EF=",d%VIATkFQlHmZUښ݅쩰a+eML⒌EV]0m]Kn*lgg"fޗ(E!-Gd rQR `%L_YorQںJՠoeޢ೘#W@"7P}ՙ41 {:]77I}>`U\D(Mn1ҾKƣ I0Bt1*c9:4{x?|F{O/)#x/σ4.iY*smҌu+ڑ 4twCTR.A;'V)uXl#+>3*ħJLi 1(2q,yPIg2?;]mQ kred uYT[+hq-f(%]댏/, Rk-!=\ &<Qm}&mu17rW#xQN0 +,3j7B;vm#^fG| I!bD {I6rl;Rm9d'V6T]%"~Tj([ڱz)Mt=MUH8{3 [ e7eU7m+ "bx `x  VY7nJ e8cݔJoC B\M;3f 2`"x`d$٢"|ī]i.NL}Imm[fWh_)`'ĴQ7#lx{39s!eoٽ~w,2;z  7ֻ9{.ຘxUn7}߯!i+INjİ6@j( "GZV+rCr~Ipe;H T=3sa ̴G'sVGLMztDO'S]4*K41Ϧttz̏>Ul:'S=/T*y:zUZNtr|r:h< [_|_$7#d#ytꖇ|"`(yEeY[/ H2*4I{I5,3PBH.uZj;fHj ƆƟ|!2mRQo  "AR]D_25ٵhU|VNX2VYC`LeQCdrP5`=^\^_|*Vw_KXvByEu.j߰NEr|vA82~B*" 6q|(yicv8LRްM&( ;N[?qӎaWoɺt?w%}Uz(&&/3K) :, 2piKpJF!Z$Dns}ۙ1 !x]*Usxt|) zoTMk/қO{I?[(U4zqi{أHBm9@R̢g!/0[ĢwpkZiQODX@{+vd8sӫW~A|G`Evl LQuUVgB`Y>,Un[u#CsPbŦQn'\$eYcnL0:<*YpAEV fҏ=5`tKm^=mFss{'>-oQ+kQ@ixt Ȓqnn16W[vsqKL#e'QlS6dR u*LNբl{4ƛ=FQVD"naWfzd1+_n?" ѢΔE4ٯ1g'GqF5p{/*g? ':㪢|4GZiXSi^(=La4P[#,a(ǭv w܊8P\yil3ik*-Dz(#xT4DxlyX~ԋhٝя=x{zk]%ſ|ixUnF+9%JDBĵրcr$nܥwS?tf)>$Q͛7`qӏj;SEEI-?#Vd>/&Yle5;=l8-e,+BM&s''Mgyx&z|z2|˵ b:,'K$SitgATuZi&x촩L=FבY  jXB#Ȉ F`wmk¨ړ=vf%G<5mHzز]z-!Oh/β\zhq̊Sx4?}URdW z"Efu8tBt.Em c)%_|XAk9߮6!ŏ*a Dm:KTօz&0f*YE;xe!j)ttמ$EROgq9[(:Dm̸%[ w}|nIEr0ʋcR:lh(^s\G9kDؖecw"YnJR G.y' :wֱC3w3,R|&VhiMa_aUi>]Vt}"~Imn;MTJ0l ; kXR37}`|#VkEAܣ 8"KG-;+92HHu2圀D"E܍ 8d!J>دh ^cf5J:Lx c)01-#i$SEYO۵XLVqrn֠t[KAO_JvJeKO\[7Q'bOv!!djjg0#Hy*YP)5N_o +_>;X>URcs/JvxUn7+>%JlKFpT@j 0|rWwIZO~aoS=A"93o{3J*EXLggS>_Y5/i6Kļf3L|VMӳRx~V<+NjBq>Ы1ϼo#?b~6g3/c}ڔ}xIim{gž6%ṁ5{"Q 6RZ+'ӢHR>E#_q"Gd[<$7]R;@~+&qL!YW)o)ZmP䷣u"krUviD+a!J7E#H,}d+ 7ᆣdzkO4`*2^̇=Ķ|9f4c4pF8hǻ4cMo%fiTO kl|jаd= ^ZFkȶ I͎ujC4`ZO̙D w#*=lJPC ~|ZVj|^ ;}TP$~f۬ĿW7*Uqi- J}aT(a! ꇖe¦u~}͗+eVȾD'^殃?K HE&OYNsk7==z|ly gxt2Llq\CѢ!aunĞU~pɾ`nW7 C5$gz͊&~uO s e t,3A[q}\m1J,@?C p'%qrk3o'$-C8Đ8'o%Ȗ9se)"_4a2d1c3<'Tw+dfy迖:5cG{$bw%x<+ҦX%]^Z9쒶I +Y^+tIr{25_v>POk9bQ +xMo0 $U n6=ֈvg94a3%C4 0}|ݺuX& Y q'xWmv:EMK9v]Θ_џ Tt.€ia%j1U8id,PhDc.$)^; *J1Ǿf╒QP`mY-cLE8Ӄb H5>\JwH =Z1{9If/:D8?iEoy.bLbiTtQמ 1ܪ0!`G< ڜY6Okc^yu/Vtn ot@חnޮ1>{I&xPn0+(ڞZCY+0H*}G %]9AL D@,f;Cޕ6TڢʪՂ|lM_x_6X}yQvk9gxw,B]|<ڔj$L7҉b߃f l HJ= 0ō5>7p9/ig= 4[Av Ow0 &#HV(*'2;lDx5<9$~}Lp"@I4âA(b3ԫM~͞gYm882|4_gw&:HdȞ6NLC| ?@Z__`hq,9gD/?vKĚfh~iukor; (%,u2Z̜IxSn0+9;E(r ڠ P@RqS?_/Rc֋DPٙQDڮdbrMkY-J.)'zeYaCJ-UM(z-J2/iX劊F;im.j|B1Ⅲ!\A͡;km"?~vPzĎ1DQRn'gX:R zԖQv@G(gՉ 12v59tHaH!2!h7Pbu <2'zP'TCŇ!Шu6%zـoY:-YZn 2xHND=8mȟ$NLīW)L+RLө&c &):vc<{1g*vI;w|B^[8 ingX:%pQLʝp^ʧv_Fȵh mqy 1}l) ɽd}=Zlg܌k }N(iΘCizTlO> :TڌTULsyAFQ<5+-ZB[C\\ؐ. h$ujHgvdUAxuis[Sx5H#g"+IJoʓ{ğBϖL7{l*J}:LǙmtZ:$E0xRA0sb8PpDGڕ%#:' y xCzzZ:dCn;UժWN:1b$aQuzYJJ)mt^u)J3~\O `v{YwFB![) `sʾD=Sd٦` <P8 _BS);5)tr)W*:8Y_ l^t+itaA18c 9p!p \ Ñ=(eO#9!Nlq>D:erdo͆Уu{af #"3#Z?WO(w!A2ta5kZ<6/J/<,i@V0i.nSI)JKx 5xeSKn04%[4( Gb-IIW=DOؓt('h.H{|G(6Le-r"]*/BDU*+Rё Z%5/5UMi%7uV)DJK CcvxP\b*We iN@/᧷/^\cwq' Dc݇$Ͳ >{ %(rz8[mvP#z[m)0* HmLgٜg'3%jd#94@aބ!1&Cs8j尷Shotlonp*G-sr"p,9{p{)?c Bݮ\fBpȯSy̐v!1S _䆠xPKj0lX'Ж@=DƵ# YNHK^;9Awx_&EfhZ<҂*Ssۖ*5lZʎf51RZjU7mev]gpJp@ag> @֍jK)ȟN6%'#4&{f0`1<7sq 2wE~= Yv/z 4RsMv03c# 1784922191 -0700 committer z 1784922191 -0700 docs: modernize + LLM.md + cross-links (one-way SDK model)FSxtree a45f1e76b0110091189cf80201494bfbf0a5607a parent 970ad02981c0874500141962bcec13c52bc66b7e author z 1784922189 -0700 committer z 1784922189 -0700 docs: modernize + LLM.md + cross-links (one-way SDK model) Dx*tree 75a5893d928bd7f2915b6fa474f2993c95e7790f parent 69c03d019cad947bdc16186d5035887a0a78800c author Hanzo Dev 1784762639 -0700 committer Hanzo Dev 1784762639 -0700 feat(calendar): env-guarded idempotent host seed for bookable bootstrap CALENDAR_SEED_HANDLE bootstraps a public booking page (handle/intro) via app.Save so a fresh instance is bookable before the host-management UI lands. Idempotent — no-op once the event type exists. ic(xqtree 3fd7ee883274a9f812d2d8ca7d5c6874be8f2a3a parent 83c6e99ae2d6fae732691c8305f93f70df71068d parent 0060f12c06cf31ac44b0c68af499ca48eb8a582a author Hanzo Dev 1784761752 -0700 committer Hanzo Dev 1784761752 -0700 feat(calendar): native /v1/calendar booking backend on Base (Cal API-v2 contract) Reshapes the scheduling plugin into the Cal.com API-v2 contract so Cal's atoms Booker renders against Base; adds DoS bounds (slot clamp+cap, capped holds/limiter maps, read/reserve throttle) and decouples the public handle from the IAM subject. Red-reviewed: data-isolation/double-book/leak cores cleared; DoS bounds verified. .|bx-tree 3fd7ee883274a9f812d2d8ca7d5c6874be8f2a3a parent c4ea96082124748ef8fc4b21b86723fc5860a992 author Hanzo Dev 1784755957 -0700 committer Hanzo Dev 1784755957 -0700 fix(calendar): bound public read/reserve DoS surface + decouple public handle Red review (fix-then-ship). Data-integrity cores unchanged and still green. DoS bounds (Red PoCs reproduced, now asserted bounded): - slots amplification: clamp startTime..endTime span to <=62 days AND cap generation at 5000 slots, both BEFORE generation; add per-IP + per-handle read throttle. 1000-year range: 203,164 slots/7.26MB -> 5000 slots/160KB. - holds map: real hard cap (prune-expired then evict-nearest-expiry) — was prune-only, which grew unbounded under fresh-reserve spam. 13,192 -> 8,192. - limiter maps: same hard cap (evict-oldest) under key rotation; add read/reserve rate limits (booking write already limited). 13,192 -> 8,192. Public handle decoupled from the IAM subject: eventType resolves by (handle, slug) via bound params; the internal IAM owner id is never placed in a URL or published in any DTO (public event, booking, reschedule). New handle field + partial unique (handle, slug) index on the (unshipped) scheduling migration. Deploy gate documented in book(): SQLite double-book guard holds only at replicas:1 + strategy:Recreate. Tests (-race, 20 pass): +TestComputeSlotsCapBounds, +TestHolds_HardCap, +TestLimiter_HardCap, +TestHTTP_SlotsAmplificationBounded, +TestHTTP_ReadRateLimited; PublicEventNoLeak/CreateBooking now assert the owner id never appears. Hxutree 60ba4eeb345448226425c6bc89af433cc4ca2030 parent 4e5766d76f6a805effba96cc56dab83faf3f3645 author Hanzo Dev 1784752298 -0700 committer Hanzo Dev 1784752298 -0700 feat(calendar): reshape scheduling plugin into the Cal.com API-v2 contract Rename plugins/scheduling -> plugins/calendar and mount under /v1/calendar, serving the Cal atom's endpoint subset — public event, available slots, advisory slot holds, booking create/read/reschedule/cancel and an anonymous /me — so cal.hanzo.ai renders Cal's real Booker straight against native Base. The reviewed core is preserved verbatim: computeSlots, the isOpenSlot availability gate, the transactional double-book guard + partial unique index, and the per-IP/per-host rate limiter (slots_test + redverify_test still pass). Security decisions live in cal.go: event types resolve by (owner, slug) so the client-supplied numeric eventTypeId is never trusted for data access; the public event and /me expose no host email and no raw meeting location (only revealed to the booking uid holder post-booking); reserve/delete are advisory holds that never gate the write path. ٥š&x0~JB!ĊKubXڕN<Oȓ]${'ZNFU$*(eř\"-PfٵBޕ]M.M-xLOpwܲ}OeUj/hSTE!x)%U=8Xw~C6$R|r00;G=&2̢ !R&bq<W+.f)ZO|laЁӼ4wFA;{-}4z&w⒍Y\Z<;?jczRL /,)1A"sQZ͗2yfQ. X,*ʥYHr) ˅ZV,ˋfV/EVV|Vb<ݰ蕒OMz~Mzg9e*k[;J?CوꌶhKqA(6B{/Y2BAx"/-Gt}J[[a0RfTRkQ=TgS7h_q6-J{̈́G AF77ֆ mYqs[BțtǺ#~봗C 4DBDp}θhmJ4V]Y21jUFVx2/@Q!#_K 1X1!P;4$Az,Ze|bE\z٣/tOYԭӢ '9%uAGP˹2Llѿixv_ G? WqD\rDlK1Tgb~4_ #;F羳#g*6p?iopN/ P=;L=ؖR;lP<1>}OR_!/^XוwU N2<xnJBȢXa"|e'oP=,!b b]W72]s.f/4E-dVF+Gz)2[#bV<2]Ըg! _2d>pbFN ,#҆[nBvv%`u^Q?Vul2'76* i7e1(f}?JDxItree d85a5a9896248bf3ef1b8e92128cbd9d4cb73ec8 parent 91b508a5a1b5ec6eb672543d659926eabd0b9a21 author Hanzo Dev 1784705513 -0700 committer Hanzo Dev 1784705513 -0700 feat(scheduling): booking API over the Base scheduling collections The public booking backend a booking page (cal.hanzo.ai) talks to, IAM-native: GET /v1/schedule/{owner}/{slug} — the event type (public) GET /v1/schedule/{owner}/{slug}/slots — open slots from availability minus existing bookings + synced calendar POST /v1/schedule/{owner}/{slug}/book — create a booking (conflict re-checked) GET /v1/booking/{uid} — view a booking by its opaque uid POST /v1/booking/{uid}/cancel — cancel by uid Slot computation is pure + tested (weekly windows in the host's tz, buffers, minimum-notice, conflict exclusion). Bookings are written by the endpoint after validation. Opt-in via SCHEDULING_ENABLED=true; wired into examples/base. Builds green; slot tests + boot-migration test pass. d;xOtree 397891adf480a451553869e99b577d0840a5a3de parent 1d98cbe51cbc4245bc8bd88217782860cc0681ea author Hanzo Dev 1784704722 -0700 committer Hanzo Dev 1784704722 -0700 feat(scheduling): native Base + IAM scheduling data model Adds the booking side of calendaring as native Base collections, complementing the connected-account calendar SYNC model (1780500000): eventType, availabilitySchedule, booking, bookingAttendee. IAM-native — every row carries the host's IAM user id in owner; hosts fully manage their own event types, schedules and bookings. Event types are publicly readable (booking pages are public); schedules and bookings stay owner-scoped; bookings are created by the booking endpoint (superuser) after availability/conflict validation, so CreateRule is nil at the collection layer. Boot-verify migration test passes. This makes Base the backend for scheduling — no external Prisma/Postgres app. )F0x,tree f902cc8d88d0f56d984fe8d699f2f2e64e79c578 parent c68c8ed9e585242583821fe7220a9a952526c12d parent 6333123f5430e283e39a187e4ac27df0b09161b1 author Hanzo Dev 1784688344 -0700 committer Hanzo Dev 1784688344 -0700 merge(chore/fork-hygiene-notice): consolidate onto main pYCx7tree f902cc8d88d0f56d984fe8d699f2f2e64e79c578 parent d20ac3a521d804b45f27a70a5211cb4221e1ffe9 author Hanzo AI 1784577080 -0700 committer Hanzo AI 1784577080 -0700 fix(build): image build resolves cross-org modules via git, matching test job The Dockerfile builder used the public proxy (no GOPRIVATE) while go.sum is tidied against git-direct (force-moved luxfi tags → proxy hashes ≠ go.sum). Result: 'go test' green in release.yaml (GOPRIVATE+token) but the arcd image build died 'SECURITY ERROR' on 'go mod download'. Compounding, platform-build.yml never passed the gh_token secret, so the Dockerfile's git fallback was empty. Fix (one module-resolution path for test + image): - Dockerfile: set GOPRIVATE/GONOSUMDB for hanzoai/* + luxfi/* so those modules fetch direct (git), matching go.sum; the mounted gh_token authenticates. - platform-build.yml: pass secrets: gh_token=${{ secrets.GH_PAT }} to buildx. Unblocks the base container image build → the tenant-isolation deploy (v0.39.15 carried the fix but its image was unbuildable). Lm)x`tree 164d36794e69efbebd15c0938e704f59de92754b parent 72ae8b23837785453e18a0ed29f281481939eb66 author Hanzo AI 1784568986 -0700 committer Hanzo AI 1784568986 -0700 fix(core): auth request-info goldens carry org_id tenant field Migration 1780600000 adds org_id to the canonical users collection so collection rules scope by tenant (@request.auth.org_id = org). Every serialized users-auth PublicExport now includes org_id; update the four event_request_test goldens to match the new canonical schema. (Local-only apis/SQLRun + tools/search/acos failures are CGO-mattn vs pure-Go-modernc driver artifacts — both pass green in CI, verified.) zUxXtree fa0b020873e21a2d592634da71a40854f9c35821 parent 01ab30a3b082c9bf2e5fa268efbb0b40efdf0da6 author Hanzo AI 1784567655 -0700 committer Hanzo AI 1784567668 -0700 platform: enforce tenant isolation on records + publishable-key public forms The records data-plane runs on ONE shared db, so a collection's RULES are the only tenant boundary — but provisioned collections shipped with '@request.auth.id != ""' (any authenticated Hanzo user), a cross-tenant read/write leak. - migration 1780600000: add org_id to the users auth collection so resolveJWKSToken's stamp fires and @request.auth.org_id resolves (PublicExport serializes schema fields only). _superusers skipped (they bypass record rules). - OnRecordCreateRequest stampTenantOwnership: force owner+org from the VALIDATED principal (JWT auth record OR resolved IAM pk-/sk- key), never from body/headers — tamper-proof attribution. Org-scoped create with no trusted org is refused (makes the publishable key mandatory for public submits). - publishable-key exception: a pk- key MAY POST into a public-form collection (createRule == ""); every other pk- write stays blocked. App-side org-scoped rules (@request.auth.org_id = org) land in hanzoai/app lib/base/provision.ts. Requires rebuild+redeploy of hanzo-app-base; the migration runs on the new pod's first boot. xtree 80a05cc23cd29998c9d28780a65bcc43fa4a20ac parent c22dd3e2d355c50fbd33f4fa93f8e683e8db54ec author Hanzo Dev 1784515915 -0700 committer Hanzo Dev 1784516240 -0700 chore(extbench): drop checked-in wazero-rust cargo target artifacts These are cargo build outputs (target/*), already covered by the fixture's .gitignore but committed before it existed. The fixture the benches load is validate.wasm at the fixture root, which is untouched. go build ./plugins/extbench/... green. "u=9xctree e22f638cd6ea07c20344fe779cf9ae68dd53442d parent 5a3dd91925458ef31a432f9feb3ca18f0813ea9d author z 1784391304 -0700 committer GitHub 1784391304 -0700 chore(sqlite): align Base to hanzoai/sqlite v0.3.2 + fix backend-naming comments (#51) Bumps github.com/hanzoai/sqlite v0.2.3 → v0.3.2. v0.3.2 vendors its pure-Go engine, so modernc.org/{sqlite,libc,mathutil,memory} and mattn/go-sqlite3 drop out of the module graph entirely — Base now runs on hanzoai/sqlite's named root API (HookRegisterer, PragmaDSN, DefaultPragmas, CommitHookRegisterer) with zero modernc. Comments that named the old modernc/mattn backends are corrected to the current pure-Go (!cgo) and hanzoai/sqlcipher (cgo) backends. go build ./... green (cgo + nocgo); go test ./apis ./store/... ./core/... ./plugins/waitlist green under CGO_ENABLED=0 (Base's build config). Co-authored-by: Hanzo Dev $D4Õ2x%tree 4a5051e5e366125cf3fd5324ee6296f798d2f73c parent 6c610955109aea2be54a6f0e93be876cf0fe5b83 author zeekay 1784331535 -0700 committer zeekay 1784331535 -0700 build(deps): tasks v1.48→v1.52.0 + consensus v1.36.2→v1.36.3 (off the rotten tag) tasks v1.52.0 isolates the consensus-backed quasar replicator into its own pkg/tasks/replication/quasar package — pkg/tasks (what base imports) now has zero consensus in its build graph. base still carries consensus as a graph indirect (tasks' go.mod requires it for the quasar package), now pinned to the VALID v1.36.3 instead of the force-moved v1.36.2 that broke the cloud image build. Full shed (base drops the consensus indirect entirely) needs quasar extracted to a SEPARATE module — tracked as the remaining #65 step. $}9xctree d52ce70a5347824068d4e70c4d90c3b64acc0f00 parent 8814a5482da8fa00cfe2cf95a75a1c1a16c00632 author zeekay 1784274975 -0700 committer zeekay 1784274975 -0700 build(deps): adopt unified luxfi stack via keys v1.4.1 (unbreak force-moved tags + vanished geth v1.16.99) base pinned luxfi/keys v1.2.0 and a ~15-version-stale luxfi stack that transitively required luxfi/geth v1.16.99 — a tag since DELETED on the remote ("unknown revision"), and every keys tag v1.1.0..v1.4.0 was force-moved with content changes (checksum mismatch). Only keys v1.4.1 is byte-stable. Adopting it floors the unified luxfi stack (consensus 1.25→1.36, crypto 1.19→1.20, geth →1.20.1, pulsar 1.1→1.9, threshold 1.9→1.12, zap 0.8→1.2, …), so `go mod tidy` resolves to existing tags and the pure-Go (CGO_ENABLED=0 modernc) build passes clean. go.mod/go.sum only. Co-authored-by: Hanzo Dev }1wzxWtree a47097af1cbb2bd92a1f5b5c7b978ac6b20fe4e8 parent 50bae8a0138828a493fa407a8aa28bd713b6e70e author z 1784055956 -0700 committer GitHub 1784055956 -0700 feat(waitlist): unify position on points (supersedes #44); boost via the award seam (#49) * chore(notice): pin PocketBase provenance and deviations; sweep product branding (#48) Co-authored-by: Hanzo Dev * feat(waitlist): unify position on points; boost awards through the seam Reconcile the points->position engine with #43's boost + waitlisted-access gate onto one mechanic: POINTS are the single position number. An entry's rank is its competition rank by points DESC (tied entries share a rank, earlier joiners break ties); points move only through award(), the one dedup'd choke point (UNIQUE(entry, dedupKey)) that also feeds the append-only waitlist_events ledger, activity feed, and per-source breakdown. - schema: waitlist_entries carries points (indexed rank) + breakdown, and keeps #43's sticky accessGranted; new waitlist_events ledger. Upgrade-safe ensureSchema reconciles fields in place and still seeds DefaultSlugs. - access gate kept exactly as #43: grantsAccess/hasAccess over the Open and AccessCapacity knobs, sticky capacity grant, superuser/AdminSecret model. - /boost stays service-authed (superuser/AdminSecret, e.g. hanzod) but is reimplemented as a caller-amount award through award() — no parallel boost store. Empty dedupKey accumulates; a keyed boost is replay-safe. - /status returns points-derived rank + access; /neighborhood is the keyset view; /export includes points. /award stays the AwardSecret connector seam. - tests: #43 gate tests adapted to points (competition-rank ordering, sticky access, default slugs); points_integration + the 10M rankbench carried over, the bench gated behind WL_BENCH and capped under -short; new boost seam test. --------- Co-authored-by: Hanzo Dev xtree 4f5306e0b9392647f7ea284d2c90f3e8d08be397 parent 50bae8a0138828a493fa407a8aa28bd713b6e70e author Hanzo Dev 1783983376 -0700 committer Hanzo Dev 1783983376 -0700 chore(notice): pin PocketBase provenance and deviations; sweep product branding "Uxtree 43933688f36cdd70396f982bf11b9d84319e222f parent 4a8248c4eeb2e55c52f6eeb391cc1327c20b74d7 author hanzo-dev 1783752898 -0700 committer hanzo-dev 1783752898 -0700 ci: run linux jobs on hanzo-build-linux-amd64 ARC scale set (no GitHub-hosted builders) .hW,x2tree 16311a50371d71a8c9cee3e01fdc42df17205dbb parent d90a0e53ef70d4ee1ae772fd53c8b3cd1bbef728 author Hanzo Dev 1783553162 -0700 committer GitHub 1783553162 -0700 fix(image): ship sqlite3 + python3 debug CLIs in the Base pod (#45) The Base pod (embedded SQLite platform store) had neither sqlite3 nor python3, blocking live debugging of the store. Base is a CGO_ENABLED=0 pure-Go build (modernc sqlite) with per-value app encryption, so the on-disk DB is a standard SQLite file the plaintext sqlite3 CLI opens directly. Add `sqlite` (sqlite3 CLI) + `python3` to the runtime stage. Runtime only; no build toolchain; Go build path untouched. Co-authored-by: Hanzo AI 쁓4xCtree 2df6b34c0c62ef39a44b8bcc40d5eee5477a15fa parent a1ee65cde35eca23ead056686ac346594961d073 author Hanzo AI 1783551158 -0700 committer Hanzo AI 1783551158 -0700 chore(sqlite): bump replicate v0.8.0 -> v0.9.5 — clears CGO=1 double-register panic replicate v0.9.5 routes all SQLite through hanzoai/sqlite (SetPersistWAL + OpenPragma with per-connection wal_autocheckpoint=0) and drops its direct modernc import. This is the bump that actually removes modernc from base's CGO=1 dependency graph, ending the 'sql: Register called twice for driver sqlite' panic in store/replicator when base is embedded in the cgo cloud binary (base -> commerce -> cloud). Verified CGO=1: 0 modernc in store/replicator deps; store/replicator, core, network all green (incl WAL commit-hook + encrypted-replication paths). Gxvtree 4b1a0642406af82fa2d8d71a97e3224d1d6daa41 parent 660fdc35531503f67b3e9e9b2c26588a13d45dfb author Hanzo AI 1783548394 -0700 committer Hanzo AI 1783550868 -0700 chore(sqlite): bump hanzoai/sqlite v0.2.1 -> v0.2.3 Adopts the canonical one-sqlite-driver module at v0.2.3, which adds the backend-neutral SetPersistWAL + OpenPragma primitives that hanzoai/replicate needs to drop its direct modernc import (the source of the CGO=1 'sql: Register called twice for driver sqlite' panic in store/replicator). Base's own code has carried ZERO direct modernc imports since v1.5.5. Pulls luxfi/crypto v1.19.26 + accel v1.2.4 transitively (required by sqlite v0.2.2+; not linked into base's CGO=0 binary graph). DOES NOT by itself clear the store/replicator CGO=1 panic: that needs hanzoai/replicate to be released with its modernc->hanzoai/sqlite migration (branch feat/one-sqlite-driver). Once replicate is tagged, bump it here (go get github.com/hanzoai/replicate@) and the panic is gone — PROVEN via a local replace: CGO=1 go test ./store/replicator/ ./core/ ./network/ all ok, zero 'Register called twice'. N vxetree f93b7b85100ee25a9bbdcbaedd46759112b59ff9 parent cb5675bc09f2c078af6a642ede9ac2e117f156a7 author z 1783526570 -0700 committer GitHub 1783526570 -0700 feat(waitlist): boost + waitlisted-access gate (capacity/open knobs, service boost endpoint) (#43) Extend the existing waitlist plugin for "public signup, waitlisted product access" with two move-up mechanics: referral (existing) and a service-attested boost (e.g. running a hanzod node). Additive and backward compatible. Schema (waitlist_entries): + boost (NumberField), + accessGranted (BoolField). Both default to zero; existing indexes unchanged. Config knobs (env): + DefaultSlugs (WAITLIST_DEFAULT_SLUGS, seeded on boot), + AccessCapacity (WAITLIST_ACCESS_CAPACITY, top-N auto-granted), + Open (WAITLIST_OPEN 1/true/yes, master access switch). Score/rank: score = referralCount + boost; computeRank ranks by (referralCount + boost), tie-break earlier createdAt. entryScore() helper. Access: hasAccess(entry, rank) = Open || accessGranted || (capacity>0 && rank<=capacity); a capacity-earned grant is persisted sticky so rank drift never revokes it. grantsAccess() pure policy. Endpoints: + POST /v1/waitlist/boost (service-authed only) accumulates boost for (waitlist,email), validated source in {hanzod,referral,share,grant}, optional amount (default 1) and grantAccess. isServiceAuthed() (superuser or Bearer AdminSecret) also lets a trusted server bypass captcha/rate-limit/ disposable checks on join and is reused by export. join/status responses gain score/boost/hasAccess (+ capacity/open on status). export CSV gains boost/accessGranted/score columns. Tests: config resolve (open/capacity/slugs), score+rank ordering with boost, grantsAccess truth table, capacity sticky-persist, open/closed access, and idempotent default-waitlist seeding. Co-authored-by: Hanzo Dev ,x tree 5fb8577c9b329ba6250bbd0f33e2ceaa44536422 parent 23c3e81b00362271704e27eb0d24f353d6ab7056 author z 1783272379 -0700 committer GitHub 1783272379 -0700 ci: fix network-attack-suite toolchain/auth; drop dead docker.yml (#42) * ci: auth private cross-org modules in network-attack-suite; drop dead docker.yml network-attack-suite: `go mod download` in network/ failed fetching the private transitive dep github.com/hanzoai/sqlite@v0.2.1 with `fatal: could not read Username for 'https://github.com'` — the job never configured git credentials. Add the same "Configure private cross-org module auth" step release.yaml already uses (GH_PAT insteadOf), plus the matching GOPRIVATE/GONOSUMDB job env, so hanzoai/* + luxfi/* resolve via authenticated git and go.sum verifies. This is the sole root cause; the downstream `?: operand expected` in the summary was just the count files holding "?" because the suite never ran. docker.yml: legacy reusable-caller (hanzoai/.github docker-build.yml@main) that has produced only startup_failure runs since inception (0 jobs, 0 check-runs, never green). It is superseded by the canonical platform-native path — base ships `.platform.yml`, which builds+pushes ghcr.io/hanzoai/base and rolls the operator `base` Service CR — and its `test` job is a strict subset of release.yaml's `go test ./...`. Per the reusable's own migration notice (repos with `.platform.yml` have migrated; docker-build.yml is only a fallback for un-migrated repos), this workflow is redundant. Remove it so the estate stops carrying a permanently-red duplicate. main is unprotected with no required status checks, so nothing depends on its context. Co-authored-by: Hanzo Dev * ci(network-attack-suite): enable cgo for the -race compile gate Unmasked by the auth fix: the compile-only gate and attack run use `go test -race`, which requires cgo, but the arc runner defaults CGO_ENABLED=0 → `-race requires cgo`. Set CGO_ENABLED=1 job-wide. Co-authored-by: Hanzo Dev * ci(network-attack-suite): provision gcc so cgo/-race can compile Next latent blocker after enabling cgo: the minimal arc runner has no C compiler (`cgo: C compiler "gcc" not found`), so `-race` can't build. Add a guarded `sudo apt-get install gcc` step (same pattern hanzoai/ci uses for jq/PyYAML) before the go steps. The race detector is core to the adversarial suite, so providing the toolchain — not dropping -race — is the fix. Co-authored-by: Hanzo Dev --------- Co-authored-by: Hanzo Dev o^"8x}tree 615c4eb194c9c3fca5007f1adfebc8b3640ab8a3 parent 7ae1d95b5bdaf64c4349e9c64d483d07c659c2c8 author zeekay 1783255641 -0700 committer zeekay 1783255641 -0700 fix(base-admin): right-align + tabular figures for numeric grid columns Pixel QA of the Twenty-grade record grid: numeric columns rendered as plain left-aligned text, so digits didn't line up column-wise. Number columns now right-align (header + cells) and number/date cells use tabular-nums, so amounts, counts and timestamps read as precise, column-aligned data — matching the grid's mono/tabular intent. Rebuilt the embedded dist (tsc -b && vite build, base=/_/). The grid already scrolls horizontally INSIDE its container on narrow viewports (verified 360/390/768/834/1440 — no body overflow), so mobile keeps readable column widths rather than compressing. Co-authored-by: Hanzo Dev B22x&tree 10bbca7a661e37e9fc4007b3750d2f1b2b45271b parent 58feac09adedcea3b42d15d765d193d20d67b797 author Hanzo Dev 1783227363 -0700 committer GitHub 1783227363 -0700 fix(deps): tidy go.mod + CI-original luxfi/keys hash (#41) #40 fixed the luxfi/keys checksum by reverting to the last-good baseline, but that go.mod is not tidy for tasks v1.48.0, so the release build fail-closed with 'updates to go.mod needed; go mod tidy'. Restore the tidy go.mod (tasks v1.48.0) and correct the ONE poisoned entry: luxfi/keys v1.2.0 h1 back to the immutable original the CI cache + go proxy pin (3TAcr4tw...), which a fresh checkout's force-re-tagged git content (+AriQNM...) had displaced. Verified: keys v1.2.0 is the only module shared with the last-good baseline whose hash drifted. Z@xtree 65c9b5c3b5bb098f62c7138eaf73b20cc01b0c9b parent 2640edd6fb9276198569bfc6d37db68f34eaf841 author Hanzo Dev 1783226992 -0700 committer GitHub 1783226992 -0700 fix(deps): restore CI-consistent go.sum (repin only tasks v1.48.0) (#40) #39 regenerated go.sum wholesale from a fresh checkout, which recorded the FORCE-RE-TAGGED content of several luxfi modules (e.g. luxfi/keys v1.2.0) instead of the immutable originals the CI build cache and go proxy pin. Result: the release image build fail-closed with 'checksum mismatch ... SECURITY ERROR' on luxfi/keys@v1.2.0 (downloaded 3TAcr4tw..., go.sum +AriQNM...). Restore the last-good, CI-verified go.mod/go.sum baseline and apply ONLY the intended delta: hanzoai/tasks v1.40.0 -> v1.48.0. Verified minimal — the bump adds exactly the tasks v1.48.0 module hash and changes no existing module hash (tasks v1.48.0 introduces no new transitive requirements). The durable-plugin cutover code (plugins/tasks/durable.go, token.go) is unchanged.QUaxtree d7f38c66c433e854589818eaecca33e88a978ca7 parent 396db9a0d662def248d1e6a50a13107041f0d686 author Hanzo Dev 1783226365 -0700 committer GitHub 1783226365 -0700 feat(tasks): repoint durable plugin to cloud's gated tasks engine (#39) The standalone tasksd is retired; cloud embeds the Hanzo Tasks engine and exposes it on a cluster-reachable, IAM-gated ZAP listener (Embedded.ServeGated, RequireIdentity, org-scoped per tasks CONTRACT §6). Repoint base's durable plugin — used by every hanzo-base app (playground, platform, ...) — onto it: - default DurableConfig.Address -> cloud.hanzo.svc:9999 (was the dead tasks.hanzo.ai:7233; deployments dialing tasks.hanzo.svc:7243 via TASKS_ADDRESS get repointed in universe) - mint a client_credentials bearer from the app's own IAM identity (canonical IAM_CLIENT_ID/IAM_CLIENT_SECRET + IAM_ENDPOINT|IAM_URL) via oauth2 clientcredentials and ride it on every dial as the tasks client Token; the gated engine org-scopes to the token owner. nil creds -> ungated dial (dev/loopback), fail-soft to SQLite as before - RegisterNamespace on connect + per org in ClientForOrg (idempotent upsert) — the gated engine org-prefixes the store, so a namespace must be registered before ExecuteWorkflow Deps: hanzoai/tasks v1.40.0 -> v1.48.0 (adds Options.Token over ZAP + org-scoped completion). Repin re-tagged transitive luxfi modules off their poisoned go.sum hashes to the next clean patch: zap v0.8.8 -> v0.8.12, pq v1.0.3 -> v1.1.0 (age v1.5.1 already on main).D vxgtree 64381d145f96fc327ac93017f5d058bbcb205e0c parent c419fd022d143e8172793d9749e2aefaf57e7d19 author Hanzo Dev 1783203265 -0700 committer GitHub 1783203265 -0700 fix(deps): repin luxfi/age v1.5.0 -> v1.5.1 (cold-cache checksum SECURITY ERROR) (#33) * fix(deps): repin luxfi/age v1.5.0 -> v1.5.1 (cold-cache checksum SECURITY ERROR) luxfi/age v1.5.0 was upstream-retagged (transient files GC'd from the tag tree), so the tag's zip content on the origin no longer matches the h1 hash recorded in go.sum. Cold-cache builds (fresh CI, empty GOMODCACHE) fail with: verifying github.com/luxfi/age@v1.5.0: checksum mismatch SECURITY ERROR v1.5.1 dereferences the same commit, is immutable, and is sum.golang.org verified (h1:Gj8iHMMi0lGkKT/mlXV2HVBr2m3vt2v0eKVsTMTtAQM=). Surgical: age require + go.sum only. go mod verify clean. * fix(deps): refresh go.sum for force-moved luxfi tags (keys/pq/zap) The luxfi/age v1.5.0->v1.5.1 repin alone did not make CI green: three OTHER luxfi tags were force-moved upstream (same tree recompiled, same go.mod), so their h1: content hashes in go.sum no longer verify on a cold cache — the "SECURITY ERROR / checksum mismatch" CI hit on luxfi/zap@v0.8.8, with luxfi/keys@v1.2.0 and luxfi/pq@v1.0.3 next in line. Regenerated go.sum via cold-cache `go mod tidy`: - luxfi/zap v0.8.8 h1: gFDyzMJ… -> B3R960O… - luxfi/keys v1.2.0 h1: +AriQNM7 -> 3TAcr4tw - luxfi/pq v1.0.3 h1: pFlQm1+5 -> ksw1dmfT - drop stale luxfi/age v1.5.0/go.mod (nothing requires v1.5.0) /go.mod hashes unchanged (benign re-tag, not tampering). go.mod untouched — no version bumps. Verified on a clean GOMODCACHE: `go mod verify` clean, `go build ./...` green. Co-authored-by: Hanzo Dev --------- Co-authored-by: Hanzo AI Co-authored-by: zeekay Co-authored-by: Hanzo Dev fXxytree f0360f3a0b285eb312fe478eb3731f176b21876d parent 296d8664e46283177a2740c77ab6985901c71e6d author z 1783200024 -0700 committer GitHub 1783200024 -0700 fix(store): authorize Get against the caller's org — IDOR defense in depth (M1) (#37) Red (M1): cross-tenant isolation in the shared multi-tenant process is NOT cryptographic — one MultiTenantStore serves many orgs and can fetch any org's KEK. The real first-line boundary is the claims->OrgID binding, which ForCtx/ ForOrg/ForApp/ForProject apply correctly, but the exported Get(ctx, Key) authorized with k.Valid() only. A single IDOR reaching Get with an attacker-influenced OrgID would give full cross-tenant decrypt with no crypto second line. - Get now denies a well-formed Key whose OrgID != the caller's authenticated claims org (new ErrCrossTenant). Claim-less internal callers (background jobs, migrations) remain trusted and bypass the check. - Corrected the false keyring.go isolation comment ("B's process is KMS-scoped to B so it can never fetch KEK_A"): the first-line boundary is claims->OrgID enforced in Get/ForCtx; per-org KMS KEK separation is the second line. Tests (go test -race ./store/): TestGet_DeniesCrossTenant (foreign-org Key -> ErrCrossTenant), TestGet_ClaimlessInternalCallerAllowed (background jobs still work). Full store suite green. Co-authored-by: Hanzo Dev ⎑x .tree f7bebf21b9a2ceb45ade44bebda5e67dbe6a2478 parent e9389062caaa3b5cf3730f91bbbb9f85917db049 author z 1783200021 -0700 committer GitHub 1783200021 -0700 feat(store): per-tenant PQ-encrypted replicate streaming HA + PITR (Pillar 2) (#38) Supersedes the auto-closed #36 (its base branch was deleted when #35 merged). Gives each per-tenant SQLite DB continuous WAL streaming to durable replica storage + restore-if-absent, so a pod dying restores each tenant DB from its replica — and the replica is encrypted with the SAME per-tenant age key as #35's whole-file path. store/encreplica — a replicate.ReplicaClient that age-encrypts (ML-KEM-768 + X25519) every LTX segment BEFORE it touches storage and decrypts on read. This is the SOLE at-rest boundary for the replica stream. Encryption lives in the client (after the plaintext LTX header is read), which is both the working path and the correct single boundary — replicate v0.8.0's built-in Replica.AgeRecipients encrypts before the file/s3 client peeks the header and is unusable. Self-describing framing [8B plaintext len][8B ts][age ciphertext] lets LTXFiles report accurate FileInfo (restore needs Size >= HeaderSize + a resumable reader) without leaking any tenant bytes. Backend is a pluggable Blobs store (LocalBlobs now; S3/vfs in prod — encryption identical per backend). store/replicator — Open/Sync/Close streaming + Restore. Restore has a SQLite safety gate: the reconstructed file must pass the magic check (defense in depth beyond the client's per-tenant age-decrypt) or it is removed and rejected. Addresses Red review of the prior HA PR: - C1 (CRITICAL, proven): the replica was plaintext (the encrypting client only existed in comments). NOW REAL + WIRED + TESTED — TestReplicaBytesAreEncrypted_NoPlaintextMarker runs Red's exact PoC and the marker never appears in the clear; every LTX blob is age ciphertext. - H1b: Restore now validates the restored SQLite before returning success. Tests (CGO_ENABLED=0 go test ./store/encreplica/ ./store/replicator/): no-plaintext-marker, write->replicate->wipe->restore->read, cross-tenant restore FAILS, no-replica gate, two-cycle failover, LocalBlobs + New() validation. Note: replicate transitively registers modernc.org/sqlite, which collides with hanzoai/sqlite's mattn driver under CGO — the canonical pure-Go build (CGO_ENABLED=0) resolves both to one registration. Staged next (own PR): wire the replicator into MultiTenantStore hydrate (restore-if-absent) / Checkpoint (Sync) / evict (Close) — H1a — handling the fresh-tenant empty-file open and WAL-checkpoint coordination; + single-writer lease/fencing (H1c). Not rushed into the data layer. Co-authored-by: Hanzo Dev 6x ttree 9b51f82c0df0d66a30319124a4cc0069728f5d22 parent f1a3f5d9e92e1f84a576e077b4cd01391438b97f author z 1783198664 -0700 committer GitHub 1783198664 -0700 feat(store): per-tenant KMS-rooted at-rest encryption (Pillar 1) (#35) * fix(deps): realign go.sum to sumdb for retagged luxfi age/keys/pq/zap CI build-base failed at go mod download with a SECURITY ERROR: go.sum held direct-git hashes for four force-moved luxfi tags, mismatching the immutable proxy+sumdb that the CI build resolves against (Dockerfile drops GOPRIVATE): luxfi/age v1.5.0, luxfi/keys v1.2.0, luxfi/pq v1.0.3, luxfi/zap v0.8.8 Realign the four module-zip hashes to the sum.golang.org-verified proxy hashes (the /go.mod hashes already matched). Verified: go mod download clean in a no-GOPRIVATE proxy+sumdb env; go.sum stable, no graph drift. * feat(store): per-tenant KMS-rooted at-rest encryption for the SQLite substrate Every per-tenant SQLite DB is now encrypted at rest with a key UNIQUE to its Key tuple (org/app/project/user), rooted in Hanzo KMS. The store never writes plaintext SQLite to durable storage — Keys is a required Option; New() refuses to boot without it (fail secure, no plaintext path exists). One at-rest boundary: luxfi/age post-quantum hybrid (ML-KEM-768 + X25519) — the same primitive hanzoai/vfs and hanzoai/replicate speak, so the tenant key composes across the whole-file, block, and WAL-stream paths without ever double-encrypting the same bytes (pillars 2 and 3 snap onto this key). Envelope key hierarchy (store/keyring.go): KMS Vault -> OrgRoot(orgID) -> KEK_org (32 random bytes, per org, in KMS) -> HKDF-SHA256(salt=domain, info=objectKey) -> WK (per-tenant wrap key) -> AES-256-GCM(AAD=objectKey) wraps a random per-DB age identity -> stored as a sidecar {objectKey}.agekey next to the DB The DB data key is the random age identity — stored only wrapped. KMS holds only the org KEK. Rotating the KEK re-wraps the tiny sidecar; the DB ciphertext is never rewritten (Keyring.Rotate). Isolation invariant (proven in keyring_test.go): org A cannot decrypt org B's DB — distinct KMS KEKs, and B's process is KMS-scoped to B. Within an org each DB has an independent random identity and its sidecar is AAD-bound to the exact objectKey, so no wrapped blob is portable across tenants. - store/keyring.go KeyProvider/RootSource/TenantKey + envelope Keyring - store/kmskeyring/ KMS-backed RootSource (get-or-create org KEK) - store/multitenant.go resolve key on hydrate; decrypt on download, encrypt on checkpoint/evict; ErrCorruptDB on undecryptable objects Tests (go test -race ./store/...): 10 crypto proofs plus kmskeyring get-or- create, copy semantics, malformed/wrong-length KEK rejection, and fail-secure- on-transient-error. Full existing store suite passes under mandatory encryption. --------- Co-authored-by: Hanzo Dev X닛3x;tree d70a89ce36a26a4c352352de1083a7922fe7c26c parent c8efb05585faf7788c6a1c33afddb1f98c922286 author z 1783196148 -0700 committer GitHub 1783196148 -0700 fix(deps): realign go.sum to sumdb for retagged luxfi age/keys/pq/zap (#34) CI build-base failed at go mod download with a SECURITY ERROR: go.sum held direct-git hashes for four force-moved luxfi tags, mismatching the immutable proxy+sumdb that the CI build resolves against (Dockerfile drops GOPRIVATE): luxfi/age v1.5.0, luxfi/keys v1.2.0, luxfi/pq v1.0.3, luxfi/zap v0.8.8 Realign the four module-zip hashes to the sum.golang.org-verified proxy hashes (the /go.mod hashes already matched). Verified: go mod download clean in a no-GOPRIVATE proxy+sumdb env; go.sum stable, no graph drift. Co-authored-by: Hanzo Dev Fޜxtree 504b2084b0a276dce207aed7165ab822fa7a7673 parent 1b058b2e93c36832f1daa9a2dad71165f0ec42b1 author Hanzo Dev 1783189301 -0700 committer GitHub 1783189301 -0700 feat(crm): email + calendar sync data model (connected accounts) (#22) * feat(crm): email + calendar sync data model (connected accounts) Phase 0 of email/calendar CRM sync: the 10-collection data model as a schema migration (same proven pattern as the saved-views collections). - connectedAccount — OAuth provider + handle + scopes + ENCRYPTED tokens (accessTokenEnc/refreshTokenEnc ciphertext only; authFailedAt drives reconnect). - messaging: messageChannel (sync state machine) / messageThread / message (dedup by headerMessageId) / messageParticipant (handle=email → person/user) / messageAssociation (per-channel external id + thread id + dedup). - calendar: calendarChannel / calendarEvent / calendarEventParticipant / calendarEventAssociation (recurringEventExternalId links series instances). Plugin-owned + user-readable: CreateRule/UpdateRule/DeleteRule = nil (only the sync plugin/superuser writes), owner-scoped List/View so the console shows a user's own mail/events. syncStateFields = the channel state machine (status/stage/cursor/throttle) the two-phase list→import engine drives. Relations are forward-compatible text refs (refField) so the schema applies before the person/company object graph exists; a later migration upgrades them. Next phases (plugins): plugins/connect (OAuth + token refresh + email→record matcher), plugins/messaging + plugins/calendar (Google drivers + the two-phase cron sync engine). Compiles clean; CI runs the full migration-boot test. Co-authored-by: Hanzo Dev * test(migrations): prove the connect/messaging/calendar model boots Boots a TestApp (which runs SystemMigrations) and asserts all ten collections apply with the intended access model: owner-scoped reads and nil create/update/ delete rules (plugin-only writes). Locks the Phase-0 CRM sync data model against a regression that would leave it world-readable or unwritable by the sync plugin. Co-authored-by: Hanzo Dev * test: account for the 10 CRM collections in collection-count assertions Migration 1780500000_connect_messaging_calendar adds 10 base-type collections (connect/messaging/calendar), so the default collection set grows 17 → 27. Update the enumeration/import tests to match: - core TestFindAllCollections: all-types total 17 → 27 (auth=4/view=7 unchanged; the new collections are all type "base"). - apis TestCollectionsList: "totalItems":17 → 27. - apis TestCollectionsImport: totalCollections baseline 17 → 27, and the deleteMissing scenario now deletes 9 + 10 = 19 collections (its delete-event counts 9 → 19). The dynamic systemCollections assertion is unchanged (the CRM collections are non-system). Co-authored-by: Hanzo Dev * test(platform): deterministic idle-eviction test (kill sweeper race) TestPoolManager_IdleEviction flaked as 'expected 3 pools, got 2': the setup loop released each pool immediately, so pool 0 went idle and the sweeper could evict it before the Len()==3 assertion on a slow runner. The #25 timeout bump (300ms) only widened the window, not closed it. Fix gates on a deterministic signal, not wall-clock: - Hold all 3 pools IN-USE through the Len()==3 assertion. The sweeper skips refCount>0 pools (evictIdleLocked), so setup can never race it. - After release, poll on IdleEvictions (the sweeper's last, monotonic step) instead of Len(): a pool leaves the LRU under lock before its IdleEvictions++ runs post-unlock, so Len()==0 can be observed while the counter lags. Same hardening applied to _SkipsInUse. - Replace fixed sleeps with a bounded eventually() poll. Verified: 50x -race against dbx.PoolManager (incl. a 60ms/open slow Connect that reproduces the original flake) all green. Co-authored-by: Hanzo Dev --------- Co-authored-by: zeekay Co-authored-by: Hanzo Dev 񏀟x tree 7b52d39326173a1c4dde2044950bbfc4f5890132 parent b2a4bcbd67554e03c211edc7738fdeb4b99774e3 author Hanzo Dev 1783166005 -0700 committer GitHub 1783166005 -0700 test+fix: clear pre-existing base test failures (iam /api→/v1, kube ns, pool timing) (#25) * build(release): trim goreleaser matrix to linux+darwin × amd64+arm64 The release workflow's goreleaser snapshot was red on main: it cross-compiled to s390x, ppc64le, 32-bit arm and windows — none of which Base ships or can even build. s390x/ppc64le trip a cronokirby/saferith package-name quirk (arith_s390x_test.go declares package big) pulled transitively via luxfi/threshold; windows can't compile cmd/cli/daemon.go (unconditional syscall.Setpgid). Reduce to the platforms Base actually runs on — linux servers (DOKS) and darwin dev machines, amd64 + arm64 — matching the amd64/arm64-only platform policy. All four remaining targets build clean. Completes "get base release fully green" (the rest of this branch's fixes — iam /v1 userinfo paths, kube namespace precedence, db-pool idle timing — already landed on main). Co-authored-by: Hanzo Dev * ci(release): drop vestigial node/pnpm setup that reddened green releases The release job never runs `pnpm install` (ui-react/dist is committed and embedded via //go:embed all:dist), yet it set up pnpm + node with `cache: pnpm`. Test and GoReleaser both pass, but the setup-node post-step then failed trying to save a pnpm store that was never populated ("Path(s) specified in the action for caching do(es) not exist") — failing the whole job on a no-op cache save. This was previously masked by the goreleaser s390x failure. Remove the unused pnpm/action-setup + setup-node steps; the job is now checkout → go → test → goreleaser. Co-authored-by: Hanzo Dev * test(core): de-flake the notify-watcher tests (races, not logic) Two pre-existing timing races in core that intermittently redden CI on loaded runners (neither touches product code): - TestNotifyWatcher_CollectionsUpdate released its barrier the instant the reload count hit 1, then asserted exactly 1 — so a late coalesced reload raced in as 2, and a starved runner that hadn't reloaded yet saw 0. Replace the release/assert handshake with a poll-to-quiescence (wait for the count to stay stable for a settle window, with generous headroom) and assert the real invariant: a 3-change burst coalesces into 1-2 reloads (fewer than 3), not exactly 1. - TestNotifyWatcher_SettingsUpdate released its barrier inside the reload handler BEFORE e.Next() swapped in the new settings, so the assertion could read app2 mid-reload with the old AppName ("Acme"). Apply e.Next() first, then release. Both now pass 10/10 locally; the assertions still fail on real regressions (no coalescing → 3 reloads; reload on the write pool; app2 never notified). Co-authored-by: Hanzo Dev --------- Co-authored-by: zeekay Co-authored-by: Hanzo Dev *]x@tree d2751d1a8493a13e82936f282c426007c3c1b6af parent 6c6190ab9b250477bb19eb83e3f0e1a5d9238ea6 author zeekay 1783138428 -0700 committer zeekay 1783138428 -0700 fix(sqlite): one driver — route all SQLite onto hanzoai/sqlite, drop modernc Base double-registered the database/sql "sqlite" driver when embedded in a CGO consumer that needs SQLCipher (commerce's per-tenant money DBs): hanzoai/sqlite registers "sqlite"→mattn under cgo while base's own `_ "modernc.org/sqlite"` blank imports register "sqlite"→modernc → `panic: sql: Register called twice for driver sqlite` at init. Fix: base imports ONLY github.com/hanzoai/sqlite (the canonical dual-backend driver) and never modernc directly. `go mod why modernc.org/sqlite` now resolves ONLY transitively via hanzoai/sqlite. - core/db_connect.go + store/multitenant.go: open via sqlite.PragmaDSN(path, sqlite.DefaultPragmas) — the ONE pragma set encoded in the ACTIVE backend's DSN syntax, so busy_timeout+WAL actually apply under both modernc (!cgo) and mattn (cgo). Kills the duplicated modernc-only DSN string. - core/base_network.go: resolve the raw driver conn via sqlite.CommitHookRegisterer (build-tagged; bridges mattn func() int / modernc func() int32 to one CommitHookFn). network/* stays backend-agnostic — its own HookRegisterer + test fakes are unchanged. - hack/pitr-restore.go, network/pitr_test.go, tools/search/provider_test.go: blank-import hanzoai/sqlite instead of modernc. - Removed modernc_versions_check.go + its OnBootstrap binding: the modernc/libc pairing is hanzoai/sqlite's concern now, not base's (base no longer pins it). - go.mod: require hanzoai/sqlite v0.2.1; modernc now // indirect; replace mattn/go-sqlite3 => v1.14.47 defeats the v2.0.3+incompatible poison (beego) under cgo. Encrypted-at-rest (SQLCipher via mattn under cgo) is untouched. Verified: CGO=0 binary builds; ./core/... ./network/... ./store/... ./tools/search/... tests GREEN; CGO=1 (commerce mode, -tags cloud) compiles; zero direct modernc imports remain. Co-authored-by: Hanzo Dev lRix`tree 1f363888ba190651995fc5c2d8a9b7e7541081fc parent 63809489b3f65b48327190ffc606a3d1a6d11fff author z 1783127161 -0700 committer GitHub 1783127161 -0700 feat(admin): IAM PKCE login — replace retired _superusers password auth (#31) * feat(admin): IAM PKCE login via @hanzo/iam (retire dead _superusers password) The admin login.tsx still POSTed to the retired /v1/collections/_superusers/auth-with-password endpoint (404/410 Gone), so nobody could reach the admin. Base is IAM-native (HIP-0111): rewrite sign-in as OAuth2 PKCE (S256) against Hanzo IAM via the @hanzo/iam SPA SDK. - lib/iam.ts: IAM SDK instance. serverUrl=hanzo.id, client_id=hanzo-base (-base), redirect_uri under the admin mount (BASE_URL) /auth/callback, scope 'openid profile email'. Direct to IAM (not Base's /v1/iam proxy, which strips the prefix into IAM's SPA catch-all); IAM sends CORS for the admin origin. - routes/login.tsx: 'Sign in with Hanzo' -> iam.signinRedirect(). No local password. @hanzo/ui true-black. - routes/auth.callback.tsx: iam.handleCallback() exchanges the code, then bridges the IAM access-token JWT into the Base auth store. Base /v1 validates it against IAM JWKS and mints an ephemeral _superusers session for admins (isGlobalAdmin/isAdmin/built-in) — mirrored client-side for the superuser guard. Co-authored-by: Hanzo Dev * build(admin): rebuild ui-react dist with IAM PKCE login CI does not rebuild the SPA — the committed dist/ (go:embed all:dist in ui-react/embed.go) is what ships. tsc -b && vite build green. Co-authored-by: Hanzo Dev --------- Co-authored-by: Hanzo Dev f3x!Qtree 7fe34b2e9ef0626d05b8cc9c731311e9ed9eb0e1 parent aa331e98d5230f583b9c0c66648c0537fe10ead2 author z 1783124788 -0700 committer GitHub 1783124788 -0700 feat(admin): Twenty-grade editable record grid on @hanzo/ui (true-black) (#30) * test+fix: clear pre-existing base test failures (iam /api→/v1, kube ns, pool timing) These failed on main already — surfaced once the zip-dep failure (#24) stopped masking the test run. None relate to zip; all are real drift/bugs: - iam userinfo path drift (5 failures): the client correctly requests the canonical /v1/iam/oauth/userinfo (HIP-0111), but the test fake-servers still registered the legacy /api/userinfo → 404. Updated iam_test.go (×4 + comment), platform_test.go, bootnode_test.go to the /v1 path. /api/get-user(s)/add-user are left as-is (client + tests agree there; a separate migration). - kube namespace bug (real): Client.New(defaultNamespace) let the in-cluster serviceaccount namespace file OVERRIDE an explicit namespace — so an ARC runner (arc-system) silently clobbered the caller's 'bootnode'. Now the pod namespace is adopted ONLY when the caller passed "". Explicit config wins. - db pool idle-eviction flake: IdleTimeout 50ms was shorter than the 3-pool setup loop on a loaded runner, so the sweeper evicted pool 0 before the Len()==3 assertion. Bumped to 300ms (+ wait 150→400ms). Co-authored-by: Hanzo Dev * build: goreleaser before-hook go mod download, not tidy (fixes release SECURITY ERROR) The release workflow runs GoReleaser on every PR; its before-hook ran `go mod tidy`, which RE-RESOLVES the module graph and trips the authenticated-git-only private module set (SECURITY ERROR / go.sum mismatch on the luxfi deps) — the Test and build steps pass because they verify against the committed go.sum via the runner's git auth instead of re-resolving. Release must never re-tidy (it mutates committed deps at release time). Swap to `go mod download`, which just populates the cache against the existing go.sum — same resolution path as the passing `go test ./...` step. Co-authored-by: Hanzo Dev * ci(release): GOPRIVATE + git-auth so goreleaser resolves luxfi from git The goreleaser go-mod hook fetched luxfi/keys from the public proxy (re-pushed bits) instead of authenticated git, so go.sum verification failed (SECURITY ERROR). Add GOPRIVATE + the same git insteadOf auth the Docker gate uses, at the job level, so test + the download hook + the builds all fetch hanzoai/* + luxfi/* from git — matching the committed go.sum. Co-authored-by: Hanzo Dev * feat(admin): @hanzo/ui true-black design system + buildable Vite baseline The ui-react admin was un-buildable WIP: package.json listed wouter/react-query while src used @tanstack/react-router + @luxfi/ui (Tamagui) with no Tailwind pipeline, a broken "/base" SDK import in all 19 routes, and a duplicate getRecord export. Nothing compiled. This lands a buildable baseline on the true-black @hanzo/ui shadcn design system. Verdict on @hanzo/ui consumability (settled empirically): the published @hanzo/ui@8 (gui/Tamagui, raw-TS source) and the @hanzo/ui barrel are NOT Vite-consumable — the barrel's index.mjs hard-imports next/image, next/link, cmdk, sonner, vaul, react-resizable-panels (unresolvable in Vite). @hanzo/ui@5 granular subpaths resolve but several components are coupled to bespoke theme classes. So we adopt @hanzo/ui's token table + true-black override and vendor the shadcn primitives (the pattern @hanzo/ui's own templates/vite-app uses). Verified in a browser: bodyBg #000, card #0a0a0a, hairline #171717, near-white primary, Basel + Geist Mono, .dark active. - package.json: real deps (@hanzo/ui@5.7.1, react-router, tailwind v3, radix, react-hook-form); drop wouter/@luxfi/ui - tailwind.config.cjs + postcss.config.cjs + src/index.css: shadcn HSL token scheme, true-black .dark (#000 canvas, gui surface/border ladder), Basel (self-hosted) + Geist Mono fonts - src/components/ui/{button,input,label}.tsx: vendored shadcn primitives on the shared tokens; src/lib/cn.ts - src/lib/api.ts: fix duplicate getRecord export (-> getRecordById), add getFullRecords paging + real /v1/realtime SSE client, export request - src/lib/base-client.ts: BaseClient object API over the /v1 fetch layer — unbreaks all 19 routes with zero route rewrites; base.ts drops broken "/base" - main.tsx: QueryClientProvider, import css, pin .dark, router basepath bound to BASE_ADMIN_UI_PATH (fixes /_/ mount routing); vite.config proxies /v1 - login.tsx converged onto @hanzo/ui primitives (first true-black route) - delete dead src/pages/* (old wouter generation, imported nowhere) - embed.go: correct the stale build comment (source is ./src, pnpm build) - rebuild committed dist/ (embedded by //go:embed) Co-authored-by: Hanzo Dev * feat(admin): Twenty-grade editable record grid on @hanzo/ui Replace the read-only records table with an inline-editable data grid — the heart of "edit everything". Cells own a display/edit split with a single commit/cancel protocol; the grid owns a two-tier keyboard cursor. - components/grid/RecordGrid: sortable columns (per-field sort toggle), sticky header, row selection + select-all, per-row actions (open/duplicate/delete), two-tier cursor — arrows move the active cell, Enter/F2/type-to-edit enters edit mode, Tab advances. True-black, hairline rows. - components/grid/EditableCell: display mode → floating Popover editor per type (text/number/date/textarea/json/select/relation); bool toggles in place; file/password/autodate render read-only. json validates on commit. - lib/fields: field-type → editor-kind mapping + display formatting + API value coercion, orthogonal to the grid. - routes/collections.$id.records: optimistic single-field persist (react-query onMutate cache patch + rollback on error), create (→ detail panel), duplicate, single + bulk delete behind a confirm Dialog, filter, pagination. - vendored primitives: checkbox, select, popover, dropdown-menu, dialog, textarea, badge (shadcn on the shared tokens); add the radix deps. - rebuild committed dist/ Co-authored-by: Hanzo Dev * feat(admin): record detail/edit panel on @hanzo/ui with per-type editors Rewrite the record editor on @hanzo/ui primitives + lib/fields. Each field renders the right editor by type — Input (text/number/date/url/email), Textarea (editor/json, json validated on submit), Select (single select), Checkbox (bool), file input (upload), relation as id csv. Auth collections get a password field; id + autodate render read-only. Controlled form state, optimistic invalidate, create/save/delete. True-black card, Basel type. Drops react-hook-form in favor of a small controlled form so @hanzo/ui Select/Checkbox bind cleanly. Co-authored-by: Hanzo Dev * feat(admin): converge root sidebar + collections list to true-black @hanzo/ui Phase 1 of the view convergence. The always-visible chrome and the entry point to the grid now match the true-black system. - __root: sidebar on bg-background/border-border with lucide icons + accent active state (was bg-neutral-950 + indigo) - collections: clickable collection rows -> /collections/$id/records, type/system badges, @hanzo/ui Input filter + Button delete (was raw table + indigo button) Co-authored-by: Hanzo Dev * fix(admin): flat route escapes so record grid/editor are reachable + safe default sort Two correctness fixes surfaced by end-to-end browser verification against a real Base server: 1. Routing: collections.$id[.records[.$recordId]] nested as TanStack layouts, but the parent components render content (not ), so /collections/$id/records rendered the collections list instead of the grid. Rename to flat escaped routes (collections_.$id_.records...) so each is a standalone route under root — URLs and all Link targets unchanged. 2. Default sort '-created' 400s on this fork's base collections (no `created` field). Default to '' (API insertion order, valid for any schema); sorting stays opt-in via column headers. Verified: grid renders true-black against /v1, inline text edit (floating editor) and bool toggle both persist to the real Base API (confirmed server-side). Co-authored-by: Hanzo Dev * docs(llm): admin @hanzo/ui rebuild — consumability verdict, IAM-native auth finding, phased plan Co-authored-by: Hanzo Dev --------- Co-authored-by: Hanzo Dev M`Ζxvtree 61037923d3ac457a10f9d4ab49315234a765c8d2 parent b2457a40b3aec3d7913a04e8a1217f31951cd7e8 parent 2edd08c37cffafac07618d23842537c1403a10d4 author z 1783115031 -0700 committer GitHub 1783115031 -0700 Merge pull request #29 from hanzoai/consolidate/base-sdks Move Base client SDKs out to dedicated repos (hanzo-js/base, hanzo-dart/base)5Csǜ5x\tree 61037923d3ac457a10f9d4ab49315234a765c8d2 parent 52860adec74390964eb495517e607ef099f5899c author hanzo-dev 1783114923 -0700 committer hanzo-dev 1783114923 -0700 Fold base-react into @hanzo/base/react; fix Dart package name to hanzo_base The standalone @hanzoai/base-react (never published to npm) duplicated React bindings that already ship inside @hanzo/base as the @hanzo/base/react subpath export (a superset). Retire it: replace sdk/base-react with a Moved pointer, so the SDK consolidation no longer carries a package that imported the removed file:../base-js. Update the design doc's example imports to the one true entry point @hanzo/base/react. Also correct the Dart client name in the Moved pointers: pub.dev 'hanzo' and 'base' are taken by unrelated packages, so the Dart package is hanzo_base (hanzo-dart/base). q$+x@tree f5671d60ff614e20c7eb9c8ee5806d27d1081c47 parent b2457a40b3aec3d7913a04e8a1217f31951cd7e8 author hanzo-dev 1783113385 -0700 committer hanzo-dev 1783113385 -0700 chore(sdk): move client SDKs out to dedicated repos The base server repo no longer carries the client SDKs. - JS `@hanzo/base` -> https://github.com/hanzo-js/base - Dart `hanzo` -> https://github.com/hanzo-dart/base Removes sdk/base-js and the monorepo publish-sdk workflow (each SDK now publishes from its own repo), leaving pointer READMEs at both former locations. Note: sdk/base-react still consumes @hanzoai/base via file:../base-js and needs a follow-up (repoint to @hanzo/base or relocate). 踐@xtree c4fa91f212780642e0a6041c15e78cde2c7a2bcd parent cb93d87ece578a710111f77b921b1bd7397953ea author zeekay 1783104085 -0700 committer zeekay 1783104085 -0700 fix(base): accept IAM_ENDPOINT||IAM_URL alias; align modernc version guard The shipped base binary read only IAM_URL for the platform IAMEndpoint, while the canonical env (docs, healthy deployments) is IAM_ENDPOINT — a deployment setting only one spelling would silently misconfigure Base. Resolve both (IAM_ENDPOINT then IAM_URL; likewise KMS_ENDPOINT then KMS_URL) via a small envAny helper, matching plugins/platform/kms_helpers.go. One way to configure, two accepted spellings — no per-deploy config drift. Also align modernc_versions_check.go's expected constants to the pairing actually in go.mod (sqlite v1.50.0 / libc v1.72.0) so the benign consistency WARN stops firing. libc is not semver-stable, so both move in lockstep with the sqlite tag's go.mod requirement (issue #6136). Co-authored-by: Hanzo Dev t\,Ex[tree 37d88650187d7ac8c3dab522f42a0fbee671b69e parent 43ea0ebf57301724f82b8f561f4cf8df6d4805c3 author zeekay 1783104085 -0700 committer zeekay 1783104085 -0700 deps: drop phantom mattn/go-sqlite3 v2.0.3, realign luxfi retag go.sum go build ./... and go mod tidy were broken by two dep-rot issues: 1. github.com/mattn/go-sqlite3 v2.0.3+incompatible — an invalid module tag (mattn's real max is v1.14.x; v2.0.3 has no readable go.mod), pulled in only as a test-dep of hanzoai/beego/v2/client/orm/mock, never imported by Base itself. It made every `go build ./...` fail module resolution. `go mod tidy` drops it entirely (satisfied transitively at v1.14.38). 2. luxfi/age@v1.5.0 and luxfi/zap@v0.8.8 were retagged upstream; go.sum still carried the pre-retag hashes → SECURITY ERROR checksum mismatch. Realigned to current upstream (GOPRIVATE, GOSUMDB=off for first-party). modernc.org/sqlite v1.50.0 + modernc.org/libc v1.72.0 unchanged and correct (sqlite v1.50.0's own go.mod pins libc v1.72.0). `go mod verify` clean. Co-authored-by: Hanzo Dev mjx@tree 5b13dc3a6955ba1bfde4b861ee437535bb8bef57 parent 7f6806d8fddca7985da5a6f7fe350ffc96135648 author Hanzo Dev 1783073760 -0700 committer GitHub 1783073760 -0700 security: gitleaks CI gate blocking private keys + hz_data secrets (#27) Co-authored-by: Blue (security) e*x{tree e86299d9b3350e7ce53260c1e60cd52c34a90190 parent 4661605125b6ef1c0259f894ab4324dc58781d72 parent a27b4f237c6d3bd1e3457bb74962d196152f80f9 author z 1783037976 -0700 committer GitHub 1783037976 -0700 Merge pull request #26 from hanzoai/feat/tenant-data-hierarchy feat(store): org/app/project tenant isolation key (HIP tenant-data-hierarchy)7uԗVxgtree e86299d9b3350e7ce53260c1e60cd52c34a90190 parent 4661605125b6ef1c0259f894ab4324dc58781d72 author Hanzo Dev 1783035381 -0700 committer Hanzo Dev 1783035381 -0700 store: extend tenant isolation key to org/app/project hierarchy Extend the multi-tenant SQLite Key from a 2-tier {org, user} model to a composable 3-tier {org, app, project} hierarchy so every Hanzo app inherits per-org / per-org-app / per-org-app-project isolation (tenant-data-hierarchy HIP). - Key gains App/Project fields; Scope gains ScopeApp/ScopeProject. - ObjectKey/String extended: org {org}/org.db app {org}/apps/{app}.db project {org}/apps/{app}/projects/{project}.db user {org}/users/{user}.db (unchanged) LocalPath now derives from ObjectKey — path layout lives in one place. - Valid() runs the SAME validateSlug path-traversal guard on app/project as on org/user (fallthrough project->app); no tier can escape cacheRoot. - ForApp/ForProject mirror ForOrg: org from IAM (claims), app+project from the request via WithApp/WithProject context accessors. Composable fallback: absent project -> app tier, absent app -> org tier. Tests cover the new key paths, LocalPath layout, composable resolution + fallback, gateway-bypass fail-closed, and app/project `..` traversal rejection at both Key.Valid and end-to-end ForApp/ForProject. \ֿxtree 6164fbf39061e2a94501049c822d08344794fac9 parent 5848719f2f5364d299a87f26225402a6e66fc3cc author Hanzo Dev 1783018597 -0700 committer Hanzo Dev 1783018597 -0700 chore: OSS attribution — PocketBase (MIT) LICENSE + NOTICE Kxtree 023e89ce2b72328538db9810f327ed5d7978fc86 parent 2dec0222a8996729cc925174aeee1ae79f6c96f4 author Hanzo Dev 1782982977 -0700 committer Hanzo Dev 1782982977 -0700 chore: zip canonical home — hanzoai/zip -> zap-proto/zip@v1.2.0 1Oԓx# tree 09e976c1605dc7437ec589282f5f5bd0a36f6aff parent bc38690c1b49361d4f5b2b8db21deace4a0b5933 author Hanzo Dev 1782977490 -0700 committer GitHub 1782977490 -0700 build: migrate hanzoai/zip → zap-proto/zip (public zip framework, unblocks CI) (#24) * build: public.ecr.aws mirror for golang/alpine base images Docker Hub's unauthenticated pull limit (429) breaks cold CI builds. Use the public.ecr.aws/docker/library mirror of the official golang + alpine images (same public OSS images, no Docker Hub budget) — matches the canonical cloud/console2 pattern. Co-authored-by: Hanzo Dev * build: migrate hanzoai/zip → zap-proto/zip (public canonical zip framework) The private hanzoai/zip@v0.2.2 tag became unreachable (git ls-remote exit 128), breaking base CI. zap-proto/zip is the canonical, PUBLIC zip framework — this both unblocks CI and makes base build from a public OSS Go package. - imports: github.com/hanzoai/zip → github.com/zap-proto/zip in the 3 users (conn_memory_test.go, plugins/gojavm/{module,runtime}.go). API is identical: zip.New/Config/Ctx + runtime.JSRuntime/NewJSRuntime/JSOptions — verified by an isolated compile against base's EXACT usage (two-value NewJSRuntime + PoolSize). - go.mod: zap-proto/zip v1.1.0 (+ transitive zap-proto/http v0.1.0). Every other dep zap-proto/zip needs (goja, esbuild, x/crypto/net/sys/text, sourcemap, pprof) base already pins at newer versions, so nothing else moves. - go.sum: hanzoai/zip removed, zap-proto/{zip,http} added. No replace directives. Co-authored-by: Hanzo Dev * test: bump collection-count expectations 12→17 for saved-views collections The saved-views migration (_views/_view_fields/_view_filters/_view_sorts/ _view_groups) added 5 system collections, but the apis/core count assertions were never updated (the #21 sweep covered core model tests, not these). CI only surfaced them now that the zip-dep failure no longer masks the test run. - apis/collection_test.go: superuser list totalItems 12→17 (×2) - apis/collection_import_test.go: totalCollections 12→17 (drives the +3=20 case) - core/collection_query_test.go: FindAllCollections all-scenarios 12→17 systemCollections (import_test:303) counts c.System at runtime — self-adjusts, no change. Remaining iam/bootnode/crdt/kube failures are pre-existing environment-integration tests (live IAM/auth/k8s), unrelated to this branch. Co-authored-by: Hanzo Dev --------- Co-authored-by: zeekay Co-authored-by: Hanzo Dev Fi%xQtree 2cfa94be251c5380bba6034fcb13bf213c1d1e39 parent dfd490abea5d72174b867588282d23ab4dee12d3 author Hanzo Dev 1782960460 -0700 committer GitHub 1782960460 -0700 build: public.ecr.aws mirror for golang/alpine base images (#23) Docker Hub's unauthenticated pull limit (429) breaks cold CI builds. Use the public.ecr.aws/docker/library mirror of the official golang + alpine images (same public OSS images, no Docker Hub budget) — matches the canonical cloud/console2 pattern. Co-authored-by: zeekay Co-authored-by: Hanzo Dev 4DxLtree 23e15248ffd73d12269dd0245348043a4edde64d parent d768a051785f14d775e02ff96ec85eff0f12c459 author Hanzo Dev 1782951420 -0700 committer GitHub 1782951420 -0700 feat(crm): saved views/filters/sorts/groups system collections (P0) (#20) The biggest data-plane gap for a CRM/CMS on Base: saved-view metadata (what turns a bare record table into table/board/calendar with saved filter+sort+column+ group-by per object). Persist as SYSTEM COLLECTIONS — _views, _view_fields, _view_filters, _view_sorts, _view_groups — so they ride the existing record CRUD + rules + realtime with ZERO new Go field types. The client compiles saved _view_filters rows into Base's own ?filter= DSL at read time, so there is no second query engine either. Owner-scoped (@request.auth.id), self-service create. P0 of the Base-as-universal-backend program (base CLAUDE.md): unblocks the P1 table filters, board grouping, and the view bar. Compiles clean; migration down-path drops children-before-parent. Co-authored-by: zeekay Co-authored-by: Hanzo Dev 0wڝFxmtree c4386c05d24a7e4aaa86cfd21d91905bded0dac1 parent b68ac70ae944d9022b815ca3e79ecabb124f597a author z 1782926844 -0700 committer GitHub 1782926844 -0700 feat(waitlist): register the waitlist plugin in the shipped base binary + fix go.sum (#19) The waitlist plugin (POST /v1/waitlist/join etc.) existed in plugins/waitlist but was never registered in examples/base/main.go — the binary that builds ghcr.io/hanzoai/base. So /v1/waitlist/join 404'd, console2's WAITLIST_URL had nothing to point at, and the UI showed 'the waitlist is not open on this deployment yet'. Register it (Enabled:true; Turnstile/admin/rate-limit resolve from env). It OnBootstrap-creates the waitlists + waitlist_entries collections. Also fix go.sum: luxfi/zap@v0.8.8 + luxfi/age@v1.5.0 still carried stale direct-git hashes that mismatch the immutable public proxy the Dockerfile now uses (finishing the retag-refresh the keys@v1.2.0 commit started) → base CI was red. Synced both to the canonical sum.golang.org hashes. Builds + vets clean via proxy; waitlist route serves. Co-authored-by: hanzo-dev xKtree 8d26d6838df3adfcb443320cba8ac1be3185087a parent 821975ac3fce2275310de0f15afba18584dc9d90 author zeekay 1782861806 -0700 committer zeekay 1782861806 -0700 fix(deps): refresh go.sum for retagged luxfi/keys@v1.2.0 (finalize gomod-realsemver-adminpath merge) Co-authored-by: Hanzo Dev i,xtree 263ace238c1135463c5267e1f23d944f026b96aa parent 71463d6d4b9356bbf74d37e8f5e9881365d4ab98 author zeekay 1782852958 -0700 committer zeekay 1782852958 -0700 docs(llm): storage-tier selector shipped (BASE_DB_TIER) Co-authored-by: Hanzo Dev rV0xtree db999f86b936cc380cfdbd0dfd751b7117b3e1e3 parent 06a7505c81a9f91d9e1dc5e7aca1f0ca1d08da2e author zeekay 1782852934 -0700 committer zeekay 1782852934 -0700 feat(core): storage-tier selector (BASE_DB_TIER, default sqlite) One knob picks the data backend per instance: sqlite (default, embedded) or sql (hanzoai/sql/Postgres via BASE_DB_URL). Resolved once in base.NewWithConfig → applied to BaseAppConfig DataDSN/AuxDSN, building on the existing dialect + PostgresDBConnect plumbing — no app rewrite, the /v1 data plane is identical across tiers. datastore is reserved (honest error, no silent fallback). Fails loudly on misconfig. 8 unit tests; default boots SQLite (health 200), verified. Co-authored-by: Hanzo Dev xItree 08ae51c686ac57af103d69bb182c272d1c87d9f6 parent a4fcc373221c381208702c0fd765db603b239b35 author zeekay 1782851597 -0700 committer zeekay 1782851597 -0700 docs(llm): Base-as-universal-backend program roadmap (storage tiers, app layer, @hanzo/ui rebuild) Co-authored-by: Hanzo Dev gx*tree 47ab1b08b6f3109311dfaf0aca60b036d9097dfb parent 01e3137eea50d28ead0f02af3db9bf8a86b40664 author zeekay 1782851526 -0700 committer zeekay 1782851526 -0700 chore: scrub upstream-fork brand mentions (Base-native naming only) Co-authored-by: Hanzo Dev ^x%tree 47e3481b2753057f55531e3877727fec08ae4a91 parent 2522bb61ebf4712e23c21e9972730d91a0c48300 author zeekay 1782850904 -0700 committer zeekay 1782850904 -0700 docs(llm): BASE_ADMIN_UI_PATH knob; drop upstream-fork mention Co-authored-by: Hanzo Dev oXm(xztree c2bced5e6d1882c114934dc80f1857406301802e parent 2e69d83b9e4629ef1471402b442ddabe085cf3b9 author zeekay 1782850691 -0700 committer zeekay 1782850691 -0700 feat(serve): configurable admin UI path (BASE_ADMIN_UI_PATH, default /_/) Admin dashboard mount is one knob: adminUIPath() reads BASE_ADMIN_UI_PATH (default /_/, e.g. /admin/), used for the mount, root redirect, and banner. ui-react vite `base` reads the same env so absolute asset URLs line up — same build+deploy contract as BASE_API_PREFIX ↔ VITE_API_PREFIX. Default /_/ keeps the committed dist unchanged. Co-authored-by: Hanzo Dev $xFtree c10b505c911f5db5eba62cc7bcb72e552dc5d899 parent 93e43eb8ddecf0f9c1034f4570cd41e1fcfe795a author zeekay 1782850691 -0700 committer zeekay 1782850691 -0700 fix(deps): real-semver pins, drop hanzoai/zip pseudo-replace kms/sdk/go v1.1.0→v1.1.1 (clean luxfi/constants v1.5.8), luxfi/kms v1.11.4→v1.11.7, hanzoai/zip v0.2.0→v0.2.2 (published real tag, replaces the v0.2.2-0.2026… pseudo-replace). Refresh go.sum for force-moved first-party tags. No pseudo-versions, no replace directives; builds clean. Co-authored-by: Hanzo Dev x10 NE' E! VUsc1(>0Cfc_ѓ$Yk c$+~I$,j6bA:yiue72be[?hW:*k9^@JIIUؔ; xA0Eb̔1ƫ O bLW @# G)[]| W&H(C&MGFuZ _;Evmtغ,sCm84|e]f eAsF=dxTn6S^lYd56 :cRx΀]ՔHI)R)NQ`W{aϰ쐴,wEَs-W)OYHyd)-\-y|V9؂gWU,Y\X,l1-fҴ.#A?x4]%l9`qL 4Zΐ~ج} mKQ@Y/pM[Km?/L߰m{]챳/V ɇ@5Xn,s01:6r[M%l|S)FcOLZ5tǚ"!5.xaw0B~l1?s,GTiIU鮊 N7puoKo;˘320X'Wi +{~4n)%KHGh5BzX>`-AuaRv^0>릾DޫUG:n{šIJAjU!#nsAVwrȎSvsE*._ꗛzl6@C˿##ABh"B6hyrMu*bupo, ̼` ̱Y`2P8lkW^ٸ_o{q{ϓh+Xy݀OQ)sZ х=^^(. vA9uG": V&31l?4aҧ3$L{=|-m%-8i ;Oa(urLb<.YR4{*Y<nW A'fBxmn0ED~% @i6%$__ߡd'i޹AZX4{wPNT \Q] <Ճbz6 Չ =N|86`5TkCVK- ,P' d _ ?.gN6@W= j 2!>1ϱ;)Qm mEeM0:ٶW+*H?~wF: `ǥ=O;CLt=}yKP6?Ӌ&'q8UKswQ胪 1+(ng?y;B{axKn1>E/ag<"Uv 0c AplTz1XrqdrF"8Z!QWj|頝 M1: &h2'1Stɹ1+yi0okodbv:hr>?Ĵf-?/23 lJ];4Nz}XV=cNx0 ` HɖC\+Iy8$>B*.0B͖b1z4@DC,MP{,gg3y$7u.m; l>.p{~5=@81\pBt˱-}_ǵ{u ֿ* *HxuVRH)vYKl€ TIsȉiZ#vfdcjbpdG66CLO oh<:L1l<̳<2q|tr|r2LFxV{:q2i%bs- gJx q_8ʌ,:CllKb\4g o6 spOƉ\͖ۇ-P Lg&5_.Wbٿ~e|Z̾Ϸre8|/lyq7kbS5ta֠\Te=Y{#g7jj6nXYs Lc9r}fvYRލ$Lyc}ߟ_[|>]a>l2C[Gxmj0D $PHr0%%f?*%ȡ}M̙aN (JnԆV{ؗ\pnŠG3)JmT\=ӼSngx~ʝ@u%@JYM}r^B>OFx n 6`"W R|i0eb0=)dꖒ`"H;Њe8juB,ù4榱s%FCIek}YL>I^1q8fxg`ݻ$q_L"ei4c` SƇM29x(+Soi{DGjb,,N qL8y#8 egU'5BSM;a;tV1mM̅Ovړ=, t'[-gu4avL$^=HaI&;-oSLBYެݙ,>(6љljmj}UMXVa::)$wg;81?q<reW6x}WV9}W0Up LV piJek,KIqfGΗ>MVg%sٗCpRPp| HatTވ8^qЩ&P)e}QXGcQDquDf'a[:gc*;9Go);],TG>5JOUY|SJB&Re2)DP֐$*]O>-lQkI" 6u1u:VʭV+DfnV"D>LJhs@TjЧCJ {kmIGtqrIV^tu=&t)y$e| [jQi@˭ޣxߏA*Uڹ)O˕C g;ɇR$n[ rf;'i'N66Pm>g3(D([ xm,Iqv~Vr3-C(EW[aiݜOfLКgF]]? f?n  rbp8Yl7ITzR@T: djz^f^7S }:I}rbo]&`U*tá8I*4{j ?@o?}{t9VLNԽVfJk N,3}@^|bҭ6Uz^l4w}i"3Gf\G#ˉ+6=%-T'gdwgҩm ۷8e8gVV,%6$4ƭP`>񵛞n7 TX&~3rEIFyN.5.)P_?oTfa oz?6U^v?\__]?_|r~nv.*ow=tlQ7UCH`O0|T࿸`_ɱr36c D &ʺwp-g<\|f;S-$.AB{,eԞ Awe<vҚÒ &ה\èx 4iX]>gh+ء=6:k(tѮ1aId92xsr a"vVbR1.%Q+Xkpac 2Ɇ&E7cI3V潹~!V>;; a ş1r.] rB.ONQHnӸIOOI1n0EbϞs5'%&]#7Ko8s)|r4l4hΈkx8oֺ bl3@x[ۘUxF7.B Vu$t@Ez ,vcbm*FE܀A}sB_TXA_y8 x¹p}11?&"e2w #s@hݪoSvѐֹ>` f!6i~EWRŊ~|*7axKN0>E/EnЈ389=D\UEIF#&Z%6XOtPHʡ͒l>cT٥k8'QZb~AtrR Lrb]2gRk52|{9^i·#) _kr.T9'Co}iQ$xMn0Zn8u9gI W4Dgp"x|! 5',FU`Nqqw#M$qWq^-څI8e1l;H'<+zYlŸwQ=Fe͘dA#*3l0Eݲ6c4hS{˜6̒G\ob/ea arjzw02F(/fɿkf}"ꌟ[k! }'wK_h;_u7$@ɡw ( n:ݝc/\ig`+eCӷj'h^4QWNPf:/ |UgBtWҥF8FKE^ A:S9,2(SnON`*#.F͂ RF_bF5m{8ˑF,+فʬEqUfZ{!"B1ev njZOHwW=D-j[|.hCS@N`(?b1پe+dF xD*꾡H.^f'Q)`%=Ȍ4]RHU!Lvb1IKWʭj iu<[(<QZcLd5 vdLc|l21ZqEχsW֞Ў}th =dBX'mQ2|.bZ ;EhVXYMF 1>G.Ǯy:QYPIqI,:V5#cBfLaaAq V \o;8jS5PAev*>-qE3}V2۵\ M+,ecN5v0KG`\բ CE;7~1z\ǨL>=^{ 5H0=Z :Op[Og#arD5>Dxh8sݠb1-*PӀHO2k&wIn<=A7!Z8/W \ИOAXݐ뼊XX-GtG!G딛̥~\Γ?w4xR]o0 |:Jc'K`E6tH> ,Cۦh' ַy<,KBE>eղM296 a<|D@*RrYR puF=\}>eא/\fg,5F@ZJ5:w3A=(-%,NFh{==q$S+AѪ!z@(6ѝ C 7"(y@%N`]O\yvұ>ƁtP12lyMZ& _q *&rep_jM 4mGrJP+Vxd2pFmJ:§?<}y|y512H3xmVn6}W Ї KeEIQ$ZZ"U~IPrvۗX!9gf[)Iʋxu1BL.t,f,/[9M/VjO2r.E>/f|)|2iZdI|F;c^?yr/NP?dg28]iVKK?+fZ+T~f ^cV ?(gq+*d%K% I]*-zRضګZҿC˷k:/ ~LQThL8m*#\;nt8 ՙ, ]5wot J~Vr͑}uOW߀Vߋ~24xB"ܮy*(;.(L[@x)7ڵI5U[ݸ2\X#_?RcL5ƚҊ/i,S%&OC )kUU8~1,C8 uN ҅qꢒŐim.D8m@7B+\HqccǢ5mQv})N\ʄ8F YV[?Q #ڬǷWpa1s- {'-A(%da3`|. zy1vȧ+juz( d;yR ? ӡsO{h![ 1Zw cA֕SY*=78,87051*2-ꪀ(ҙT"g Pp}qw8?֚:o߭=hsQ8FnE[^=rԵ?uK~26;^Uj%h_+k"2sYp@p,8jBn> j! Χ s(p*HApŔXaWm L%_x9[CBI@!bj %u'&TIm [NJ CrkYG!p]/azLWx`5X:3ޜ6j=`us!j\lS z!Ѩ?._ (0܎;@u#!3,/9r(7{ z=*8ws8Bc-<o^s6c8k0lah'(nH|{& 䳣1{q~ aYڙ$-%f@?_\.)Jm٤ݭC~.@ Pl!M4t:O4EϡNJH!awN{Q]f{6{FQ񎡵(ŠzwkZ5LƔupt?j;(=|0m"B#'`xm!b #qXVX9GIi _3@6$N:4*à,TVE ^c:[&gyKH>NZ-5ÛA?p}VonE(g6'۸% B98&trq?AA[ypl!~NxUr6+.R"&:ͫYz@DE J~a璒dѕi@88s.gDeHer~>'G*OVbGl#ONG.Ngy~#=rX9O+~r8=Zl~6r4&Fe*S±Ժ|Q?!U s{j;t Aч~R?U9?'cM4!J{L_8~D&6Hޅ@饣:s8jORw.R:W`,$I& x]x'6DϪ9[o)t@ RLKcc3TOB8w7S'9JMӲ*h(+TÔ. 0ə,iO%xhE{δ +uV/kI1WQnK[m9$:Ɩ:mP]{,`ؒIEZυ#^n5 V-8@OLjzuWҞU?pC;Z-PҼ#2IVWgt<%C2]pڬ3Ǯ0XYx@)-`*-5Nw4v_-fn&˙u6vJN a:Op8ЇqDMڬ(E6mmm <9I}LpX&O^ %֡{wZ*dg\}w>B*K=(7d/*Wjm]?/,Mo]4ϟŞhfRh7HȆ>u܉{,mnԏ!*98Fu*FD$8 \Dx4Ŵk%~y"3d˂B/ݣWע;JWøa :;m(^8 AeyXCBoghH6sfޖnstX3jW▖DA qgF epQwj/vDZ car`2þ ^*&gƈ~\naozz*دvĚg],3Et+xr&Ä nwWooh11zJx-acEJ OKgAO\w/ZF^} 6 \Sd|:pY~=yL3ۺZ+ ^mŘDgɐXZqyM߰R4N׋u-}oIHQB1v2ulKMFF断\!fh"]cޢ OH+ﺲmTxPNJbJ zCАSDAçbA@8xMn b(EUc" /Qvh4{I#pBI^fmňzhN n֝# B6VJyۦ(PiݐEcB=څ-BvPsf²<3b8fcv'Œ_汚BdW0;`Si'f4$T9 exw!.zvy<KS^ vLt!2\l+Tߊ{ie L7艧-慖2CZgzo-5#V+ > xAN0D>_Ԙ8m@JHvb--S@i63Ѽ1(Tv(Q%abԒ%iMik x(ޏ4z? ;i=9fxg {:=ߎt(A\\P+cb'E ("J&)#c(x= #L0ZG.h0)} uVv>%MS-9@CG +vg4ql1٠Ҿ ʔ2(~ΰO?܃-6´BBrK?':vHe~3L\`YnFݙxn0 w=,Dv[͖L!+MѶX2$9hȻ虡*E ${U%vӚkUN=H˾V"ꦔ=Z \<:8]s\k),Wy.M(2k #Nʼn!: +\/?d'-yd8O/9{K͑u] ڻyNbL%۴E̞{`;4Hvpn, y\)1bXmiFEh![VgHqI]p n&xPK0L'ш)m.wIqz8"' ̒]+ Z $iE(Q$ %;MV'jL`FGE!1C,D l"PW*TjTSLEA-D+!*֍pu^mUwh jD%D 8 Frg::/FV>p=t'܅<Cx(%>*R4e7\6*!%/&Jj4&xWË(=,= N3:|7afs,tH2U{}ܿ 086n_?~^=ŧӵVg{t=>S]%@xN0{Kw? A@חN稨)GE4-`"dSm!rA r$Jpx8x! X/6̕En,(BVşcٻ~{/o\x^~'m|r8[x1j/xk;[p4}7گ'R$x=N0>pqǤ$$53&'">Qdkٕ^b2+j$lBCɕ/c;<{8V|\閷tm`a6dTֶ1Ԥ={?.ҿp*[?Q5x;N0@ޫp E`l!`c%R?C ҹshu&WPm1`ՕS#T%yo} raJQ)TlZ2> "f  ,%H)k_#[w=i`=@P6cQ<&4ϾҾ TE,z[SxR |8vId{MDI dI0Z |v$F{\hعɵ@\,029HSAʄY[%Q2L1 k| ykꅯߛz~UE>_Qy;Qu]z,*m~^v ƀ'i)mYC7gYq;W x1N0E{%{tpxWơ'EtJ&=cb%))ZP}h)5؜$!q@"sqբ#?f胯R=dAʙ#RtuN\uZ_Fkm[ǐ$j~']#Q֎}z1|cݫ͑U"xMIn0 @RIh(<C__t`#A"C.*$ lvk>0bFѱi pI(\SV7'ɂ!#Lע .r]Ls<^Os$0t]5G-W6˲~U0N xANC!@ T3iv`65օp"%d%a8>e0emZO5BYB YHZ#$E@_jUK95$B瀲6>P>+oݞx'';3eNGbVbUx>?knLJ/On@xSn0+9%Hb˶GQ5l18AE/Ɗ\ID$R )/t%'ǡbI.gfgA&4q2S2d8N Myl"SQ#@R<$&Ʊ,R4NH` 7 5U_w0LQ<O#&Q$*Q2c߀M 2PpPR{RV\! =_0RUN`.<0,u['.^٬nn7y ۮ>>=2l']Vhq%(KiΚ3}qthq5׹84 5|RI8* =c'(?Zf~=ם* `J̱os\:x;wph|m]S*ZnЇ]LKbDڄgҚ C:+1hk@sс }E[r{-SF{zUJ]2o;(vaYvs29<>NīNvLcBWY7.c 0xSV=X:[FIm(Dݤsvu= ?bFpxTn7)iذ+kEQNl* "Ph.ɐ\a>@'̓tȕ-;:^-g8ZG1b(q2 q23'㱐Mr Wǃx5NGrh4DPod OWp<dt x0`4 G 5+3p ?Pek5/jo~;kW)J]%uC%\o݊ d9*ߜsǷy_y䟷pXR[RF9f0ǎi@؞\'R^7tѯk(k JP֩7"uI6t4s~p[H sFЃWAG`m"=NcyyUS}}G,ƾc[*T4lzظ2W9̟Βqq*&z;Xr|x^TcU^=_Ct{=l]%Ұ8*RlJJsfF%_=5Y. ,\nA*/Fw]ݵ"iJ:V SÝ=x2Sqo< o,.mԥiLiAiɠDuz$1!:J,PN*tN].KܤB@VƦ4m4AKC_ iQ(S n$14P#cc&<[)Q{XHhpkffvys}5S/׮KGј܈4hLfYd4}Ĉ7eZ%$٢^q<r &=-\DI=/Dd%H[׶>S Hja-'ַ6J &!_P N3^+y;>y5o|-Fkڟմ؍1%(@ j,xPn@)Fu6DU+"Y{dMO<Oȓ0v[8Pzf?vDtgIR\qYkE*mJ$ёa IR֪(:MtU^UZJEY;4nN8/8Γ$(ǣf&5 6:Vs7T^zx|ك'w7e3k 8'U~?g#5[gvL%9J/'~9wgA.׏o6XѪ 9x"E"<,vF) 6Gli>jG xFFr}r+ރ(­6w_v{փ󦲋 #^zL`oۙJB?O 3j@[' drD; qxYmrSL)?H'M7j]%+Qeq<X H?r\%QruRW^ׯ_ϖV)h8R'QNGo'p6:9 G`ҪXG#9$NxLxx0=dU>+>7#>x/;1< DAB.?US67VOs]>T>Y4Sbw,d¤8*+ſq;8Kt>TOح{F̍5UsD'Qhەi ǫ񇫻/?zR޳}/t;%r];QRv,Ka\TaH`+ssWRﶘgf*3qOaEJd'Rjڋگ cCt8])K_殲JTþ&ڊP\t1 w"M˒'&O*K~)ѫC%:tp+(NƩƘzRIU:o5Mй(mI+LeglNuh)AO ~E?zv$ΌL;L?uIW(ktr){} *Sip"I%۹(iFQ JS2TerUyQb!))r[8~;`K >⚷V/BY'\)XdX=9pA]!%ZY{/{8If(qʊQIB-v6j'ltPሇHrRLTa<X(ѻj)PC'M4 Rcg*Gy s8Hx)JSf]6ћASxyp>} E~Cd=kd=uM9Ȉ$MvoXR ́cx^Z%3Yw۵OwEn͏? w`K{A#8rJ\ vzza!4Fb%1L&w;M)g{b߷}QW?Ȯ؋nחKɯ›%<=s>`U #K\#7>iIK^5 C1?rk'R|TCu^>[upi?E V]jףU Zj+gQd[*i9_C]nR' +NҌ=F3y/y#ytG@VeߍBC$GDmDULÍT 9-.mosJL'j"掃 5-u u!gB/鷷̗䥀eD덜0!YSѴAjrskn6{U dBbyPirHQZ20 8//xAT^Zu!/^Oϕ~r)t.}p/&[{YwfSߑo,ۨP_Bt0ߡKs;䋪iDZ=몢)Fm кx^.VAѡ:f}L[L#]s~PJ/=/e,Fr7k #E>>x~lX9 Ҫy`+}''!*5z'2p=D;}p_=&ŀggsXGoA_] 4Dfqsoy&c3QoLkgHͱpC*Ky ˏ,~V^GUk+[`Xΰ { _b@z!z1|% -]ǥs1y EDr|Cu:[sLɢtYZAt "w_ա~;"~]S֖BG}[gt_. 02+A 1779981785 +0300 committer Gani Georgiev 1779981785 +0300 reference the correct announcement tRxtree 968c7a959e55dd4cf7775ba435900387942d36cf parent a49ff63b92ec77d6d8bcc0a10f95f0a57fe2f85e author Gani Georgiev 1779981551 +0300 committer Gani Georgiev 1779981551 +0300 updated ui/dist and changelog $ Oxtree 6f95eba964e5d5b6829a959606c6e1bb215be0ac parent 166a636f1a48f335238a8a0f6fcd445a7d86f570 author Gani Georgiev 1779981480 +0300 committer Gani Georgiev 1779981480 +0300 updated modernc.org/sqlite to 1.51.0 Pxtree eb174ff4a1ec4d48abad02b3bd53682961f99a1a parent 0240e8486f175c14238bca1c35cb04b20e40e2ee author Gani Georgiev 1779981398 +0300 committer Gani Georgiev 1779981398 +0300 fixed grammar cIƗxtree 1ec3112fff12dcc6138ddfa03128b1b611383176 parent 9f301b8f2ae81e86cba0e8202c54a10c8da9a2c0 author Gani Georgiev 1779980644 +0300 committer Gani Georgiev 1779980644 +0300 added the new no-llm security policy JQؕ*xn0~-hw8$!QU>=i,;' [C< NVys REUYQRHa4U:ϫ\nŀÆ2TJRmJ7V)jt!pFa j:;ulV:L(cDw9Ÿ__iadrq t)\*T+T;Z;zxC蘇 G1G q'@gЛph٬D> xFS?xvh>}7)b_F,~^ė=`\C+L?Xs&FčygW7WD3BWC&[xTnF}W $5/-JQHƭR?}ŭ|bl(PÝ33apDPI*ʫb(K!ѼEqˊO| q{X|!J]%U"v^r KuI vޣ=|/P,f2aF@#%QجQQ4ؾn@ * +TiCleWw}p|ݓy_3aס$Cg$Oyp*h+iyT3E V8uzp*5p۲s8Գpe4|YLLJj<Ԭ&'HCM'6^fv(Tϐ>Zhyp+9'2)EGf} oB%YsRnWpV|'2M#!r"!# u)ΝfQL<u^G䠰QeeFHZ.a7\BGv_'vEɩM!}`t??nQtj7Ɔ>mp5!䭳-k.]y@ y9d[v\]n')ܛ禷E/|͓I>Rذ[Wp 2o`Vt=v?< FH, #s'UN}DY]Ev6m\ssb"SKxSKs0W:ݘP -ʫ& 0kh%!i?_/ae=q>"/BLr˝j;b\Y*̲*r:@^iU*ʲ|2I<+DLQح*2_2ކq+cx*pboc.AVUY< Fi6M#CHa7{C%|21[{ [p}GKs}pZK0zaR@}9ѵTiV|@Ԍf#gͭ>0j O\ j)pLc2b#Camn4H1nj= p&;Og[,qg&Q0Ԩ0%G ؕ8`2ufA5EZ Wct"J 2 (=PD>D>~-RƆ i'.6--~ 9㈫;{zR`cMl6ZnZ4ӓoDÛ򴂓8#Ohxhޠ8 { "? ّ^2TY"EO*cnmp;P׋WHX#Ed(FC"U ,6l.4|a9JtR}2%m=n_;lE7d L糨QY*Cs#:#`IK2jq""xMr0:E/a[cR)RaA䶭B%ciO{뚉|t?daiFN//"aPgٙ"U? q>-[]cDx|֠}R}3I%0{[+Lj?Bʦ_춮`aLw;\ObX 1779864703 +0300 committer Gani Georgiev 1779864976 +0300 added extra confirm verification guards FSxtree 0aba769326e1fdd9fc8856abbe24545a8472666d parent 2a8b05917b0674eb7dcb77ccf0e2dbee7a4d4253 author Gani Georgiev 1779812452 +0300 committer Gani Georgiev 1779812452 +0300 updated btn loading animation ^jPxAj!DvBvs~mmc'CNANf>n.2XI I.\/WúY#ټ1^ʖ cxuNL&|o Fp%l5AP]W>_+G%/=,1:~*a~xtree cc58ea7f0db58cb7ac9db60c8280ae3549b95e94 parent 5b687348a46ff9004f6020683279fa93ef846c03 author Gani Georgiev 1779808937 +0300 committer Gani Georgiev 1779808937 +0300 removed legacy remember me redirect ՓQxMj0>Ń.AeKP!Jۢe޾.]~1) X) Tv1DK> JOuؘV㠬eE6H; cUktw[;J]t[N.dP+Ic&+tݙČ(3NH12@ʍP;vԣ6J@e&j=%^WdLj]<eNxMn! @=>Rď)9 c TJA[ 1779778808 +0300 committer Gani Georgiev 1779778808 +0300 updated migratecmd template tests ]Pӝx tree 0008732b96af01b7f91f17ced03119ab5a3c37bb parent 682728d74ad6988e7ec8e0dc77301481b33152f9 author Gani Georgiev 1779778170 +0300 committer Gani Georgiev 1779778170 +0300 updated the security policy of the project ySxAn E9F0 RUu7pɠܾTjOН`".ʹ5lǘt]WLl.PIKZ@hMxʽpÚ26c.7/{ (4{0q³OCb=w@/yKyB߱O 1779682774 +0300 committer Gani Georgiev 1779682774 +0300 registered missing oidc2/oidc3 option fields UQxtree a2550f9845f3d634418e3bac284b58f3fa80c845 parent 07643baa0454e16f82036dc9ab917ce2ff48bb94 author Gani Georgiev 1779628151 +0300 committer Gani Georgiev 1779628151 +0300 updated js-sdk and replaced missing handlers ]Txtree bf6d59d0e447dc1de88d3d7d23c6ea955e916692 parent cdae9f1c742127f643e9e863d111fe2bec216f31 author Gani Georgiev 1779608971 +0300 committer Gani Georgiev 1779609157 +0300 minor ui adjustments Lϑxtree 40b4dc4dfde84fcf56717c9023ced47907a8c5e8 parent 57b58fc733d08540f6036faf3c13127fa434e2a2 author Gani Georgiev 1779283371 +0300 committer Gani Georgiev 1779604230 +0300 minimal sql console API and UI UNːxtree 2e54bc38ff7077cfcf5eb2cdbf658bc5f0319182 parent c63ae16522e9101b8ef0ed22a4451c09eea95b97 author Gani Georgiev 1779565117 +0300 committer Gani Georgiev 1779565170 +0300 allow word breaking in labels wEOҜxtree 3fb200605182385a06e6f4228f20cebed4273486 parent 219555817cea9a2c764f2b15a3b4d92650604503 author Gani Georgiev 1779522617 +0300 committer Gani Georgiev 1779522769 +0300 fixed logs bulk selection O1L5xtree 4455790377368066e22ff557d0d8834d89b5771a parent 20a3e800c5a6a3b3b05f0e645415d61e26048d41 author Gani Georgiev 1779423620 +0300 committer Gani Georgiev 1779423620 +0300 updated backport changelog nRLx tree 412542abc16d87236b837d7ebd270881bccc42ee parent feb003f4333c844365d0a302da86cfde37b8b9b9 author Gani Georgiev 1779423184 +0300 committer Gani Georgiev 1779423290 +0300 updated jsvm types }Kxtree d151cbc9f1b66e0aee518d3bc335ee127a107014 parent 70b0575ea1f44e111e8fa9ed5047b2e2b8139ea0 author Gani Georgiev 1779420261 +0300 committer Gani Georgiev 1779420261 +0300 updated golang.org/x dependencies ?"P xˎ0E4yhh5lv91rۑ]i$V|_ȗeIιm[Pke׵սvj4J3HWZ1Q`DO qR({Mg;4bSTƎ//%J Ry Y+Xxx a-0t}+ha:Ij1Qx8fBig` iΌ`2O8C\v֌sYGO_s W j3310e;1h .ƒ &ŵ$DGM9^0P{oF&x ծ4Ʊ!-Y< o#X 1n9ƹq3p1LJ:Tʙ-xj0sK߮Rf! m(4JF7}^B/|gFtpQSIIJUS]dBʶ؈L^u-]A4s;ȲɩD 0XI|{Mɛ=LY@0l g랶G1>:1 AK2^xn`ǐ(-cBI4n6: IH b!@9a 袊-pO_ 84^y12)Lmr.>ʠeW‰:t`Fm_ 1779379258 +0300 committer Gani Georgiev 1779379258 +0300 updated reload tooltip and bumped app version }TTxAn E>+E؀1Rus `#a@â7x7fF;/[n",dV3aV*6 B#ܲ)8S6)xW'|4x`/?OFlNi-| )43PLR~0\:Y0{ Vch!<%_Qj_bx tree 1c05382ea3d2800392dff83b40a03530d46f3121 parent 9dc3b4e2b9c9789e9bd71a9fe1ab13fa74f322ad author Gani Georgiev 1779283639 +0300 committer Gani Georgiev 1779283639 +0300 updated shablon /J?YxTQ6)v*3bYk# vEm{ȑED"Y) 9aO!8NUɰ̛7of"M{Ӗ ª*]`ۊ ,jֵěBtufCEQESJYnx6U]wb6MW|SXoZQm3>8xgwmWlmUor)LqT!I rViHn\=`%+X/_A:ca0\ϲgl#! Gf;=.u?yHs>eiA ьQ{!%p-A>'׷4PVgN,+xtksF@[ԘC;x<*SH?^å*ݛ!! C zD|8?v?yԀRXQ+'?&£:{RBs0NҠ*r-2iLzna+7 nm,)=-͉hguq}$8*8{3rWdguP Iy,N=Ї`-z;.zH<9\>)nUttЖa8-/5bepbߡ5 OkA .UkD39wBk(C 'U9 ,49(NKi9cCT4C q,Ĕ%xM0>EIl@(vB0]XtC8'$83زT{jɱ{o#RUTi'e{TC_x+F l[[5c7AIUUcUSkn<oy/ ]^T}0M/cEB,3D.`?57ppHqxHК >~'-!n ̦s؁֭!r1,~ks%lp!g)nv-Bp̜єB|hƋ?sg*!<]A[ 9/%`_cIĽ8xQn@|WD$ڎZDhQB>8^kw> >SR Oݝ33(DO$daCcS 8OR +CxߏR?Ƀx'n.bK I(ߚB*8Ս9e{]47WaL/ Jf#XVYϠ6krq6:N._v ^BʪdЀ•B![֌OF&bt1]MoεTkN&S-?`,5\Sõ0?%{0fj'r܈LJec^ɡՇ E|Jn(Q0b=3xYcBO/*c0y_myD(A}6jc. U:ōT{Z2LOmkU+Iк_@V S $)6Ig,[co{h " 'Ѐu|r8G(}ζ~(6eCgT״ͩG%~5&=v^%~>qڗ޽綽h>~" xMn0 :)8E]Pm %A'H앦.,r"W?vNxL]Cj*ݞVDLsםM~2z0H _T2_jvλI=vblr%M,ApO0 C~N۴d hpS ,kZ$Ct-e9xRA0sc ؎EQP\*NV&jedovOx y (_nGMUjkVQjr^&GVEowr覔\Ԣj[R]:ʶ6U&Ǹ'{!po5NIvy+tx=n1ާ2)(tQӍFơotk5ZB\}ޅEG钬s[:AոgbjIYY'$y\h%C)Wv*$* YQk8%jpw0JyMa(o. Pd@HhxTKn#7DBX g,Y lfMlɚC*@-3A6BpXh:ٔoF\fj6B瓉2T¡ (Td>K|x|.Q:,e up#g K^"~ 삠Bg3iJ#6z $#H! Q%U"aaj,>#T(|Pןe Q+-eLN9 otw_@Z=m e!FE]sv}_ _a ԟn76!ܢr~'ZsV> [`A֒؈;6&l0 |'_ P)MxK*Kس1͜jv荠n7G3$>ނ8x3A[4j2Fiq[M%a@Ƞ:'ռcMc?&vGӄOtI_upx@dt@]U4rgscp^iQ.mͷZyGՋ;aOg/hSҘa4n|%E@iݩ4K66 rxTMo6W Ҥ8Eq $P"r%k#bX$gޛ7o[D 1I Lؤ_!&)\ Q2)Q,j|4UX|P$i_MFxXKc <¯7WH//i!N.$⦪?B"Ο| 2!8Ѽ-s*)J x|E7BgXXAM7h _BHV;]\4bXҿ9e߰` }H%@RXGN,$_F]Dɥ&p#<afz V ,{y6_|Ad`pMȆ*H49y3gZ F;)( JtPm, B uK5ofPoaQokW}';e?;w}rl.@-P&Q9v|صz#0piC9I $gu0{bqWd7]$'ôh(3nkc=XtFm:k{K"DVLHb!ɳCMw2):ż[<,o",ІXAərYm,^n#bRgucK%ExZ,nrΙ;>yC'Sk¥dYIU+21ۅmiPC+>PqQ45T u9Gh gd2҃:%lCy s=Zukt:u24+A{M0ʐ^jgڦ %[0Q5ESy?CX 635e55 3Ge>iU+:;'˭[@1,Zʸ̎mk]n ;qؙ^F%,V4 kZ}dִ{Qt<4c.-u̾Sa46ZGWd:lEzN7Cy/yZxTn6+$i,#NmHvˆY)R~I:骀mH̙s08" 9͋ 9erB9M&7I6ͯt<|.jtd".h:\MT]Ϯh|=҂|~; lBi滅#|ɩo#TpX2xx1 iJ@#E>T6o4%+5Je @,QkBsʡRoBlo Ch9\2?4;i<~y|Z >8%hC@Y`Sb8|J[T5N*DVS,TQ5 PdM c]Rوh'*Vћ3.гvQ;+S?#WA4n8 6@5֢ Y1~.Ǫ|B5uQkDY>;e\|,0Л]vw`IV?='0`$s:I3W[:@ЗQve}1bWb[eE I{!p)^-t)5QCibp򟎣~@#v k%xP8b:|\ptylԒ}?b4OqN1/G?ې5JC(,$_ U5Z(ʱj$No$@kf +'͖?џwQ:Rs+fͳkP%U 5g2|K9W(%Tn+$5U02@NWy;:D&ѦX|}7(*0"[!qCR^xTnF}W %fIaMAܡr؋/̗t]y3apD@Ror^ԲXm|=[7T-(yXlMj܊<uQgb&K!V\d:7 p+!&`^of ygmO0\ (%3359A T}*{Xo{{Vְ+NG iɛwxYP!ZCz8[]FT՞'NӉi*fI&N gi!gkΦsY2hB&նk(҅uǴXF;οnxM1@ừH^?p2ƞٍx'( Rw"ٸ`FC(.Kl3aLH3Ug$&`KllwbAM&2+/or *Zҥ1Ÿ@}QP/?_p9ݤ5,m>K+h'8?SEq ,_7 db/~gӚ{xUMoFW ҃%W>lI46E/Β$&wݥdS@__7KF\z̛ S2G}\W['kor:^]< :v4žFrkkئRARxC=mVd}O{5$r#WۺW3x Qu}*6e  gj{c;0N{ Gp"BBPgXf&upсaµHH9{>sJ#azɠ4T8= :)l'Q~YBE0Xp /֟wW7Wa|6H%}X_;k ]>(usB²uQ=B?D;lQQriJ*Р/r_^0>b;= O0/%H0wFQ01M٣}[JQ[̴.Z39JGFGP-U^>yQn~__ÎY+2 =cdb]rFN#f\a&>ቷ p\A9E 7k#G2Q-3_emh<|S2s#\^L{\/S֟xMR0 >htL/PŖO;c8G$4z8ABjHReujUUJYtV*ňjӔDYSRRRV樍#w>37[tz.]Һ^ժ.2XZJ0XfRguZD }؀}c$HK|=0TO #r'4LfMEn@@~ ?1طcL˙~7QdvNcA?A *>w[MO/yȺ m;~`xTMo6W {k_of --z F"%Dا؋A83o{ദ%/6j{y*JrSdy\j.ʮn*[^啾\eW|zVe}ܞ-{?V/e-6bK7yۦ1!I,7ۗF{=@ym{~=@;Qg ΝTu˙dsgiK [ۚ$Vq]MHο4qL9̙[<7ji:OBeД=cv?7JO5X քј.kr4z`Bd€9ąg|L*7F V&ct`?1N@wº!|B Z1QHGh+OXECwhnOL2A\SKd F80)&cJ%x;n'Ԙ Mc^sn1T@X[VIVC*.T  g}|='[I?a89Էf:T(<\tAeI/b].M2QӬNgQZP5"ll}rnO[:Vyc `)CcOOO?9ЁQZZ18R %>1A-L xg}tQ\$q綃 zB +E_딘A9dKҦUT2`?{aHtfO0/7H0wC (`ѡQP'>II,.׶fe޷9ZGT+נm(`?vp| A;ǵ*N1m[[rCΠ>ZpeTF4>ȵQ5Б*&ͳ*|;|y^?Vikߗ/DŦHLERFwNesBYz$جW llBVN]>v6(>IӸoR4<9=Xdlx\/Kczۯs8gO1{?}As<#gH:dyʹebM 5ϊB0v5uL  M+!'˺eb#7>xYAPf(a8PUuQ*̦:|wZMqЇh2Tm`(ahk sp-`UԱSrf8e^0EW"_Yij[,7;Dc -\UM=uҘ>DV1ͩĹ*!ؽ?6|i[Zdí-TZ.Pދr$ v'5V'~~X! zpd x$/a^}]1>`'.iy Is6k]z;@9W[1!^*SĕYfA30 [%Z]nͼ+@*-!4+@r7!ra46r*53YQ5 Num쌼oX45|U`rQ .a0TTv (źxxy>Rb-L RG!R3}9~I?U\e=ztN _ǹN[9,O"wIբ. β&?yOQl1rkPUnWPlGHw(;=m`ljI8'6`f0=P}#jGa@Ņb˾s,qQٳ*N@tJq\Is̖|t#Tzf) 5 f/0K]68(9yT.ڌa%Iwq:!3$'z@J%|졬H\F|ؓ2Oa!Ld&ȣ"N]d \]|3S_g n/@03F6Tlsi8TݟGh ZV4@.hz| ײrVMx}_`Foo?0r::}>RǣFF#%NGGGNwGOF udPV@%C܉czjNga̲M (evѱ̛ؐCw#:,7u5Cƨ3GULԳ"4l -٘ @D"* mmn핍 U)YYHK \^}=x)r,6!|DPasn%@Б1`:v".)xc_d(v0$aIҒ 6K&i}pQPt`rՅIEV$7v&>:lgai7Fb79AYQ05nGGw̘RkLGcC1r~͞#ӋJ7_bq=z}\x#C=k1y6?ƜW=VT#b:)*-$.OD=ПDz.oJ,F{7 FpΠ^+"خ834-珊`XH12RǖىCqӷ[Rf(o.=ۖԨ1:_x"rƬ$eP-@(a袬EV\i'>n>FN&l+G_T :OSMTY\` - [,\ nlHCBQ9JVR&[Scz9&D`[g<A,|@6r ;4P)'8<ܦ.AMeEc9x4Xupp~x=qJDX#u _2xG/3pUImTW7doز$d,FHfX!iQ`tF3Hh"P p"u8ҧr>ƴz˓޾9={| rc]3[g ugpqJP[ȡ78gp3Vwa4<*S"KjTs'@&=II;\ je цcHpfU҈ϑ.Ic77Z ѩg'e s G>}|\TS,~&1"a+-tܞ:5oב/GHg=E_i3w])7c"W`Nԡ%a,XDEqxcv8ogeq *tj|8 ULE2N|Қ 9pfԧͭz4ˁònNey|^x-߶KrZ!mF lZP LPu.,CoYot$1B&x澠chu/:`^!(DŽ$D>,Qk4 <,W}Q5‡Ba"&'{ gWZo*hsg7j A06JV k|)g3{ R7- ASt{<) ~vGy1BmYlbQMVg)`P7RҗUv3κw|050YD57l `A6.me͑tt/;.VY[JtkɝXk%"m}fzjJXUʖ+dp2+̛zO+xDvmD#HE i {?D˭ sȎG/Y#= YUvN r3hFTf 0)hUY moWzp4K}=d@_6<3Լ;='(j}#Xj )l:%?zZY,i@80MV/^)"D[DLZm}öb^l54s&&W2'yl-;7fv5ɎHYqfo^hOwpKP|W0 ~xTFзk} ݻXۯM`2'aGΥ;mV "u m-a8a!{jڏ,Aq57*Q+Sn+^üG/W#z5m9j6pBfkшHꟌWlev Սo iLR Z_81\U³AFzT۩7y:FaG!KNo`?IJvһ}DN/F>umUƙM*Ȱ1 ǛO?|8B2YoH$(DR$Cw=^el Mه'#zS#Gv*یAa48'jv8"T;P M@§}Dfahh$:ыRԖz:YV!|+jkR^1j #]ɫ@f}ɪ N G.YBԹH4+H KsW Ϸ7 ÉeXu$4pl!BoX,7Rhڔ\ Hɑ5qUGA_)7 CpTCr S'cdQ BY$1㋦́؊ *ɏB":yLB6>P`R778Qє~.mkk^LMT^䷲[]?Ɨ1u8*eߩRP;?sYq==eDxh5+iu aTgΌe6k"5m-Q) AlBriSN;'UVx鍜vX6!;̒lRw',Zpq"u}.c°"ꯕww@.!0JmhWp&~4a܉eぴf#mLI wɿ$v ͼŠWV{~d4pESXRy^ω`{(~bA儾'%}!gX|S!V8>GM[# ,Rq8?O ]N?hd2MB,@պdl}*w p2+$b}^ꕄ3Ǵ$+êХBe`(V^iKl78kt)=oP=rm}0ЇR`#8;GJWܵW:g+x)ᴷFt9kwkDd/F.=,^jwi|D`FeaUrC봭glЉ M/(ȗoJ#{A324l#F;33e'"ȉDlYY+Yn/H]Q*-kFR卒ٵ7(,(kGF\+@S8nkz_&Q$|ou7RNmTvEr#alڏkڳ&VWywUa=7Uh~Us bN"R{k9B,dI@.Kik(f{k;ɚڝvSN>o.?uG)Y:xq U ["e^~xE6kAe!7"ퟨ+W"JJK;mCQ.ޠk9%ٞ,cg&,"#unU67S08L㍔5l <ºV[m;Ϳl)g]t˲ IJ Qf1KY>`(p1C=i`beŧ,xVY9 ,12<yل / +˓l>/L7m+ݰmS`B@,'$0E&^ #.[`gr۫'GoblJ&E5L)Tҵ!hBByQ,i) 1Y|RY) n( EqlI2Le0yϖKBŸ(".h7g70_pi% v(`*#A6lmr:LmѳQ9N?1nYcZT8n s)+.ፑ#ڲ6[Al 1!AxI3uhֹJOplfG}9LMkt| ME혧:7DQa\ڲ[]/1>!8smK%hq+;?N1l]HPpKFv9`ô_}Fc&+T.c ϓ4nMkou2u4`LZ#K!`ck¦d'd!flMҋ[j3W Dwts8Ƒ6;xRMO1l.P!U[5kOn¯8ʵ{,ϛ^pD d5+6մ*.UTd3E!CG&d9$TmTJ)hZ4D8Dzl20:El>I?75Du ŢbQmBd oH&-O5 xYﾭ?oVVfيvIyDaK2I19ϋy>N>vIreKۓPruj jGǣ l/<>93˭=n߷'JSt C -XIr5-= dzk?Nl}$Ƨgb&nON0Azd;caLwr2x`ֺ= ɇC\M{.ߗY NA8 "jJbMN1'_BGk{dBJ F̖ΡfP` Jl+#tL, ljb['kpla=:6:#u9Æ)|G2 ^݉Т!vIAu5xRKn0lb%[AQm&i{4؈@RrU$%N,gf#*:o,("#̒Lx/ztdE*՚ҤL8s7*[YYLZ̓-iN%EQQ$* Ed CA &(Mh,Xyk}ՐDI.L;] ;_@M{rx2`r܌/BlDA'Y堺t&Ǐ<`0dc_ݍz| g%ף<㌛x|&Bд0)Ӥ;]-'f%9|'?X:pjېD~^;Qm;V:LطL ͈?;f#k 6.tLxTKo8WR%mQ Р(H1CDjɑh{f{!q8kT 3W5Q\.򵮦z T%JO+=WlAZՒ=z;M?V}j=E y*L?dګ4 4`v|sapl;@ cyGzhdY[w!O?0,}d |ƪFKY5p^Fcv޺$#aNvZLëV"CI`C"g>>]B?V 53ێ/6wW ԃmu:9 臠$-Z9 wWasg%tV&OR|G̥DX<V&=RtTWe,J&8k(&$fb仑~\,hm-npyM~1XQej081f8Adq)_Bl<9xR=o0+nKٲh%nHEaɣE")^Jnu{=ȥ"'r:+("/UeURU(QEOA gsʧTB TQJ)gRKvо8^;Ie?@QUb^Ei^y"\hfD򈎼#+  J0dFKdQL4ؽՆ$\M>Yw$1e؝k:|gY7i 5wMǝA봍]&kYԞݦ>vCEqqȨBH-B.=[pбh?uQxݾѰ ]'=~!vi)&:md~34dE??t^,>I@ZA vΈY `8ۻA _Ȼm`۟5}\̯$y ~٬ /\U}x̒?~~7ђOxT6+{Hd[-zdm]i #5E $e;%r7O |Qgr,yYpQJ-Y1˲hѓ,r5WR.嬠PyUL뢠bJ`k7lgE_mWw2/9*˄tMc"*8*1BDo^"٠٨QkaXRz`&2SĚ XPNP Xr^>%ВOc G+ɌP%9>¨$t>N`LsTg[ݻLOcs '=oHAIgh8TB[w|l#oOe;V\uF3).$O0`0(Xߚp0~d`#ϼO2ckQ"j%U$kQZ,.Wx+6ϻ/}~z|{ÐLNNDx=|`GKmt]g[&كu' ĺSi\!:pNUj8p qyU1p(\bEGjPLGk"'U a>'sܴŗ[݁pY11A)lϟoF|o׮RxT]oF|G iEb ؉X;(~//eAT@pnfvfAUSm]S]Ky'ƪFin.-i䘊funӕX MYU4صe{c>BVuwYqZiԚa Ӻ=ith= Y',[r E3{kc?N<6hhRߠ-\Çq<33ϤM\~w*;B}QOd%*خӪnkg" =kl P 8Wu-Vo()eCl Wwu&כ,[Uxʒ*rPu&c_1K7~3ƏVr LoQG!&`!5 &$)e!V E AӉR2_~zEƯp_}M16AkyNd4-&xډqFv҇C$RxTɎFW-醌!#2R!VNu G` A$s70mt\TYՔem 6f/)~}}d6Loz0׫&t=@lPakNj - !89Եu2?v:&;d>s(rg+@c{ΚUo7*/1l*.ϜV7s<u$Ls5\ۂ ]/X((2N}!G]vsb֚lة+ƓA[3'KHʞ}{Z$tK ž]kxؽ ?by$`Y:^~3^(sA왭3fW{-P U)OĿ/ZxTn6+V l)-ٻ) ٠M 4c1"6TIʎsX#h9TAyސAO(e9_,rX_VfӔy^ XIL7-kQ6+˂:/Kռ:»[x+inZw,<mU?J a4)] |OֈEέ=f `k24$?=eDP # v)t2mQFVRk&w,9?iry* 5rZpW)| :Ꙁtc<]~J<!#| nM $wp 4Y\e fP3n~TO,X$ -eCPŽuPg}8v~Crwy|&gQq8\g0%#Dx؋(2D73l ܢ{/EoDc3tLnoo>q+IUaWãcÎ'>G'%S<Z5-U(9Z c çi7g_JxSM6W-6VZ>) mmPHnH스@RfYAQR#ߛyP)Qdn󢦲 5h"/6ё ¼.E-eS)t'^5pͳ=$a\%~DbY-QkV!D;0k-S 5&hȴ 4Qw^{vHOy |qtgrqK;p\pC4$'M;%1Ќ4.=ͣuEGrW[rWs1|o;u >C8Xu/<,ZϿ0[V ͓(#2f 9ֺ`bBde"b$;GuWۃE#44Hi\%{. EU%r,eƫDY\\{}GX ;gk:jR1I}7 Ϋg$u'ժ7ЫJVͳ)5Wn('$4C㞌Tf$ P z{ciɛ74B>7z wbl9a4ѯ|1`wI/n۬hsNaE?#?t"xN!|EY٘0M l6~':UR%И`4Ri$o8Fθ'+ n6d9D]qtbb.ɺl)R萭 +.۟R}> ‹Z?U)7p7HRr @y9aq4;O bLExSAn0{t˖dٲ hҦ z1Vf-INC%] k/ gA4 $/qQ$YE,d1KYР!`-4/)q4I(,,n |Dz nn ,[8N!( kGKPA.d4ёR+0r XME5TF*;>5ܖ0GC?BXmف?Rt[`퍬yZj VacAch/1VjشdԺh+`]!XTZUx u{(Fh`PPm`>%}[?ZoAYpg?I=2 eݽ ORoj:6cT9Iqf~Q: ,Ay˼\Ϯ>XX}k0~ٖ~@K"Qޖ%(w4;iTqC5­1_m/N<0=,DFNWٛ\qJ/>[!`BlnUr] {˝Osfl']wOC4 _i5OHk1Y .W)z*X 7n?6a?P>|G‚R^!N%'%P,T4 a{SxTnF+:QL=w BX19l g!%!G %9YtWWuU["(نhNX8+r9 Z&4D Zh^I&blKR \dY)U. aW7q3;#g^=af7'<~}:Oﮗ%4鷧 4SR@ÔP1`}zw\ t `)ĈɁX<><$@}4forSo8tC[mW^C C ; *u]Ɛ(oyS0{*gH-W{v=5IExSn@W1U㐤$v BTJ%Zy익w-:I{#B㴡%μyKhL3Li63U<:^dAF*I2Z-eLؐ p2eKYy=5~S34]gafi P>{pjZ/;jSt2_U6e(ESm ;hZlE`akRs:-Rkb]yiIb*`1\~sc@aх,K`9=:+MY)zB( 5 O\&ݛJ-B)uSXew9[MF[^W篞[ JD[<#A*TCJC?D 4N\!w"ƍ;@2iV‹Ȑlii0=ZmI|GR=p9}ފc-<1\8 V {/W_a9h #)xWw{G.ۅk,\I@7Xe z]Nei)V.ɰAvAQJf.$k0|r ]$au aepj?aM5??-m*,.6w}KxKj0D>ECY}"dђ[X2rOCZԫ'sqJń"9*}`}v Iig\b)U8g,O[pV}?^N'~1h-jxSV\*Vxħbz9oX{{|l{=v*}%[ߚxKj!D #le?Av9EUoEN ˒ %q! %I}H٩- &# Ģ9\o-%_}=֊oz^?|Y-]ǝ s0V{=ӓVwBIȄބ^(mHTƬuH}$djuY$xAj0D:m%R(!nB/%\m5zjtfv@gs`9Xfq"I2M%;Dhœa&J9)*[W}.x0JYX=2{ƞ~"Cz %)!die[6vw<]~>zUs/Xx;n!ОSLFwqC3H*#!+D2訄P&T&[Vr&l9bkTR`B"EFcY z\[o>So@8'g7,e)c? NZxűko?jj(y~ Rj:%"!\roRxN!@|` fcL3Zblm_ K]c0R ژ15b)F\Lzr&o#DOdńȡ a *:Oxbh3)7A*yc?zG86è|]>2-wM#0l_lbWؙOmYxTn0+PN"AM$SAhDʪkP %]VcYs˰wdl+,$ -B!wJV-xFu^-9a$Q#lmWi(˼br5pȪLBH y\ٚ_NΎ/gE1I_#ʚvh,Є-/w(6ޫfNQ2f.=Ƀ5jO K3ӓJ₾rOi@Jݎ7rq~uΑ5O!O#, f I@6``Kqj]oBĘ-:qtyĺ>h@8mr) f/åyB N#vL9Aޅm%.\xSyrgyF?wfh*ߐ2!E f֪<方TظJGAjs q #?]eqXG#,D%<.4xt$l2Ŷ}oD7Uœ x=0 @=@mblp ;vU2pzo 5bM8ĠܤsJXJ>;ʞ],DjD#5+̆>.^:H\0fkM]y] ~z}j>>4xUrF}WtK v.*v*/ԠiT$ )OTp$=ڮlƒ 3O>KDq0%lwc&= ^v$qr}q Vb!tNt stz?mrΰ{a{%4vۉe \q0  ' Z#P1Kroi2܊qJA&KsI R%\rUw‐ f bDRbhi` 1K'NT#z_"le"XS*E)2FٔjS(KpKpdifLMI)3J8977-Tdu/Vw`Y˄j] iUsCZҬ8: gWx#rw|k?G]ɩbɱAP2U!HM+̎'}@RÞz^'X.5@Iƺd;(aZ@)'iI-52{u_5NxM^|G[.¿^0l[7V荗Z(H{RnS˪=޿y-oy-Ψ(l:,ZXjW"XFU-[Q>,YgWI$z~yTa?xss]6%Y/W[ӐW3*l&dlrbh"_zmnXHw3IQZn~Vv*QUn£!AlԹENRlw&E'㌪Fj^߸YNgJIyJ, 7'kϑ+ dG i_嘰}-ό}mz9[Nuą ؜a3C=)?22%ϟ<>gl} d}:/HME6W=ILRX22;"=r>|B(DydMVPAȟ^;Izb zUlƴz}.d1;2ׂ41˿1kjb&R]QךaxTn6}W[c]YV&Ax.j 'cDVl%R )@E/P ׹ϙ3 =*1O0tzI.r"eBi22Y%a!'2Ms*LfLXiFR`*'4-,*F_@4e$LMCoj R,NΏ¢Sڬ),N*l#&8{BQBE;Ȩjt׊l"W${>` hPVhζ g5覭a0hk[(; z]g P5%Vzt]!;9Hsu4XP /OCKL@17. oD {Ua.ڮcfۤX;~.qXp`}6eiefi*=qEE=^Kd*|,:ӓӥfW-UFeecV6^{#`nض\tf3$'|O.N/Q59CZ^q567!tbǜk|CÁaX<ߊ𦫃fc$[ $qȢ,H<'g⻂gbh `˺[qL˳|\\<7WyUVmv&6C{\;Soy)x^9M?_lh{nUˈ`Ep^CI 3 ˛S7 ^yo$K<xUn6ȟ&kd;ݠ+$jq]ED$R#)0`Þa'١$u `{=AuxNyug$Ց`X4șIr;>~ڏ<>;c]>睸]ΓNpKm膩/Czۥk1z~t):,Ή,I"n)Jљ\.1T^}-My5KSA)’[ A3vDsm2bګdY[{^횜"h-ݒXIxm1p}NViI;)MsMS]C SI(Q8Ҧ-D* T.'C*>I Z9[ P"rx*RMbq*V mx[9x!]2?71Ds|{n'ҺP"Fˀ/e~piX7`(rFT>{¾oe5P0eH=T:e)1:'0A4ת.n%]< W߁`GtJn*bc'] #m=Fn^&/(򈴟9+R轊 k{~di $ieQCIY`j.Ao@HբO`i0Ep{g shNȘL(u1\$vά]kT 0* N@]xb}׼CM$I1SJ0:PX Jiލs ph(؝>]|~Aؼ\ 0f^]6@DF?M+چqUƄ-2O ꅫƗʌ|MtJVc yGh+(;C!aE7/vwѕ1YꝑmlStp`,dpN=eGSzqtfީ:f lX[!FNH=d 66#wOU1.g]Kz 4&JSJ$شI|M B&re {$,$joA4^m~V8vaK#!q@ho'83_]3hN#U=t8e(mE6ˉta*W-wُ0*v慥&ca n`+<?`NM;ETXoqY;oODIm,we5UJTj3z)U\Dnmp6.Ra!e^C웷.ptic.1H~*r/XTdJ$=FxSn@)FR8NU! jEHdN yf k|2Bb2R08~V gI9˰QQMFêgFe6f4O@Aφ2o+_ ̗p!hf!N0UrgQpP)Rp|{uCe 56ZUqIt/a'6{Cz5O$P] {H]x_WGooV-T |>C8m`kԜ1c:DH쿐J oQ$uPFe 9𡵒<`%'-[])l8fVkTq qq6(MEZ]'a /mEJ'O?w1xQ͎0)+*iBZ"J"ON$Lҕqbm}-"2,(+D fK&jb٢JENZ4J(`-r>/e&400˒Hd47*VZ:01VzYK0ZZ 9{M:އQ!n&~ 0xVr6)vr䊤d[d*$iI %']Dqxv1c,3>炏l2;MyT3h~O|l:fc6LM8وf, #ָ6𞩿4,Wݯ[J| t68pq]U9*Q,.!pv RVאFI}V5sE $p 4(ÿnOZZ |bt}Yެ677oW+PhL^ c[fD̵@RE>ܤX4dL)4IzV J7EdRJ]rW,64"@x,#[h"խCCtP>TTR-ѧ!=x E)6Y\x֛s< A?iAKg\-1ɠE*tB1EY!"MR𔸗"Ho}j`9ʝڸ/9(D(Ymgm2y{>;JgRK\vu1X#Z<,T *b%>I3)ٗ-?(,>xju`ɜq׏RbG_+^B>ڻrY"OpY_֛P+lt,ܓc?d;Qbn#+akRjd'D%J'7-au]Jv7HB7|ң 렿ЋlZmJq@kv!kȕ^S)uUҶ4N7|b_mZ~^`Xi:y~KAMYT"XdU"lj{>|QߒX>(>?i$Y4}֌cJU*Ϡ dDTPU* *6Mn҈~>,oc Ji^3O>hZƈv4!e)K :gSz $չbQhqmYۍdv/Ѧ6Am (M಑Tj'$ѣ6+ Ψ=jS]@% Cyret==R'}"@D0xۊ0sƇĎ, il2((D4۲ЇI:vt/ FxF7b#!+X5lUJ\ KZFRcQ6Uɚ)~;a9x|뢔{(:k,1$G弹4٠(a>YR@Av,2M<! VS%it%Rx61tLaeZw)|Cp?~@_1A:$H tkgC3V2'\wp&Jz\m$q$seؕk1t蟡 ゜!(<(" c,^5|JhT\wl02{}3nȌrU+-/Hœ&>.V]HL@FMmƕxK0 9/@|"X4JpzX>ifڬ ט8sD%z,)3d<`ΦA|Xlj-'kJj*]0pmRxjrtIĚ0xn0 z ޶Klj ], +R4)v hْ!ҧu0첋 $'+$Ul^rOJ|R*)%X\FYYS2ZNg,,˧勒r58yC`kMOMz@&eYr\h"'\י?J@`7*O P%= A]Ÿs1:r.[g &6Y돿k,gBz% R".Iƻnnþ1!U:446c`#³ކ}8">֏nux{)Ym޳Y?'T.DȦ<`G't2bwmXd8M4J$sqAs^%"ӴˬXQEIQT"EV2޻Zw -xo3.?@X,EF(bn[F ڴo z@RZ 7%Q 4רGnjmTܗܱ9\v.C.@EmNWh>ETyZZU20,fK 'vZ"SJyPi[jI TQ6͌y#('5UnpR oYB|nVaKx:@@5w|-tFDy\{;H8Rh^[Y*{"j=vR$=ґOz4Bݒts)ѓ_SueK<(v//HP" LtQ6XL4zvV C{ݰFs&&0241k놰&QNvHz5M/WHc?\_踵zTH 'Qmw>yC?@O*I'J3z;iadi˥Qn.C%t5O?n~4;:ZqU_`<3 &ۚwt7Z`ڧg3N֥d":¾Oh$l`4Whk7 5 9i=c݊NxSM0W&Wv!Hp_MIbձ#i{G %*{7{=U ,}WB-iIy-TzW*ѡ'6|YzmJye*nԶ(q>}v+:|lieyw^-2υtmcx"konuO6@lB[ЖQ+4jz!:0S3Fú359M4چHU&Ӄt l[ƈh!q)bKbrOVͱ.D-!#,UtZmk1FNq<1/1,e;h\uZIsQ62 8880o 1 yǎEoysLLʟ_ד'Κ#2jgIq57^5rg=ONԮtЮ ѐQ*Ϳ@brf߆3xn=9e\5e8x9a2i4*~ZIGu$|9[NV@\kGB Jb#$O*9<ԢW$$s14xS+(PaҲo;UMQ-i_dnMi/BBO4>rNsyH$90dT'Ks.MPJy*3h-_rY̅ d@xSn0+9%m$+iQ95@S$ARvCKIc/(igv 6UΛ[^yVطY֊2*2M%/۾Eb}[}U m0>8oG.spWMSۺ$ufd#La@wRg!zgy{dXrblg-t\)t` CDl9!=&Ha'pR/7| 'dNd%-gg  n×Md (hDH  H0'$5t}\@O) }GTP.`4p>!apхwY tjUSAqާ=-I$=>oNw\59~ђp .%e?$uv0&>, ȝBv{~Wp$V ;ASI\d! "y閵e "sEJZ@7aJ@PR:D_*ʲ5 ͝3}G51?m ]/iRy") [ž'uuH?+=`(7yzjәC?JO[$Iq^^&{ݙ+:8g\zMq$1aӐ ~>!xbtXdI<_}X+: p6< I{Vۚ'g=+ QK.!cX:-=Z 'R*"_C'dElzj/`idꆝ)[ys%Cvѧ$%:u &,[Gu0#:DKHOK9ZE#{1pb"1Xoc fcһBcdLs_7OtxUnF}W S7˦EDF\VIE#rkr]JV.%J[_li/ge x,d8b*p/i?F\DR>^>h,z}\Ax5Ht9"] |BE~HisuP$^EBtǕȑuA'׀䋫 YH n'Ck lE|CT6k* )A(V[P 2֒qURARCŧPj^xq%3xVzi#Wۆ6)K _|RB݊. V H\.]KuҶƯ +nObMTz*•g&̆ e(pBka=3[L<.h$sJoJ ErBC/l }v2 ^sZ? $)mEg^:)ɝA,X*EkV |<`%$LvC%S=7V↴ 0ڇX]O }\N曆)󡎅?>MgSPXҏo^kz{5[t̆MG*~rq0b:ۡ ?<~Ё۔8sp$ hS?ʛF,|+ϑXWg([p 񿪨3 tyX 75ǿon:@Az9xRr0[d ÐLzgOZbdI#ɗ$}9BK%{~;d_궪DQSSXU{(eqfJ$l*UU5݁F de۪Fe(yZ?AѶ]WeS.o<nuJ-٬ǀI;oAЈ +7`HZHKIY< {s)>%&),B;Heì0\I/,ڢgҭ?=jAD0+Z в>,*-xe]7NP^MmxB6<=H2HVk/W=1CzA.qyl,m)yf,E|S懼aYI  h(Ixv}dE`yEĸj85+5[В]Z7u[^cSn pov<|gNΌp'mz@t0R@l -<;Ch*xxb%B`GmyZ4JSxSMO1W8%eCB"ZZ"=yIb R/޼f"45E]V:BJ!FIUVS5 %']9ysT*u=WjHʦUťY'V2 d:G1h4Z#d ZM>Xzݚn[hѽ )|뛮d ƹ%1E$S.PƐ36js@]c4J ׬ۭccaD.wN|!?&.HS f$>fPRZʗ˨EdFr]TipY mmRƮ1vy};[9;x-f_rhbi>axý\c)R@; F/Ž~o } L3w" ǽBU]]xQ[Zb:8IqPLV,jy:q4͋q'i4"Nƣ49D$-[c /f_miO&d8@7ɓMYJ?B( k*sckwyFMY~ПQU37Vk'~PXS"F`hM ptJ|hr]9zɴ0Kh2SLpϲro88lQG\ 7ᄊ ADv 7<ѰB[]s8&b(7əG`c&e$<7J!pQ+O;mHN1k6Ж@aQW=ڽ`eHq9 LK&U}N>J(ޓ ]Ѓr,K7 `g:p6M'<[B)beH~3h L)Xi(z"al঩l8(pBD5|;L ֛pmvb Wvy_W뢌cncc8xGdYdIyiiV-u/ڒ2UWϖN(Ѥn~FO6 v@h(z#5ApW`!56?KYАp ́i2#UEep!xQN0 +|G]}&!VB= 8C#u TVb9s3$&S)ڽnLM5ΔtqխiJ`mE. ]itMeVh~!0p{K_?mCyp>#2tFJi 1%gOt n QLQ6$/2'ً"0`a%@"*[W[x;Zd=O3a_x4DXIg;XDzcƑôj/pWBVcqkGg`)v""0}WuZ uOӉ!ixN0~q Q z@p6VHlc;mqpZͧhs$EQK'l )ZӾ'2m׬UYH.YצBckluZF52(npɣfwYރ^*.9gϳ͙)H7`hL/k]gblyt *ۙ)}4`SZitjֻ[#!i"}za"ry чK"D:W?Ygil)PLSLYVC|#xQM +؏M;mUvK5!FN6 YU=޼AoxoHHfԼۊhX-t B l@.nb+Ծ:j}'|Flw`GCON_h>Cն]WsQqXs&4?$Y(z|&~/.GE0-6F0G2#d?'d˜q|~s0ŧ%u)4?ryԉ y ׋9 +q/~{M D Srj&b%Onbm8H1fc<@ wt*$^Ū93眶^WMԆzf/ xP=S0 +4Z&i@lb_,Lғޓ3eմ-uXcZsE*N]biBpSRɎZZ5DPԪxLC'8gMaY4E!&9rbxdCgc||9\sG!v;FC'Cָ=Ą![EPZVx'F,SX ,I@[" CS-ϒӏK` |Cz}{eB(1A&I%2So(rߩǵk(xKn0<R"))Z$@ӵX& z0'Јn g"4RˢTMha#kU]զRuTL%&E۪S.6Eue}eQ9}/ҽxGϟK ʶeQ5dE[Bƈ!`n! h0 r&It4F=ռ.~LbPFIa#rxxzb6 F;4E4"Hy!0"x7hW˥,8;?l+ȷL/'K୷FOnl ْ)D#O@` 2@^pӀn<[J<:L$8)dE[S=Jߣ 1Ә?xRQ0)mIڦ( VZV98p`; ZCpBN8ٲ>2yofޛa]T\n꺐 .ۺjV.sRŚuܣEDTղU!KY\bY\e-yxWwL>E!ͦ5bk[#0g-&<;;9Z>gaU@N~4{G'ژ~ YW 3უۧpN?y4n:eyYG#lXٵ Vė( ii*-(*-qyRHL j{,UpV*J±M xH^75r>^C 4C򲬪E*fe NHQ" kpb?`LSyL;mx1Pߠ$!lrs5*f}'W7L>縃Vl݋QM1ȳ5wCA5#q41BVT9U ;Pduf#h_?Ɛ0%m靅)Ix0X-ֆ8ݰkӥno-@pNK'&{y>OZhaR~b`8޵q_bYbaS@(29ڍ-Idu$'/ڄʧg1mK!CmfBl WįVq{3yf;͐:}GJcpg=h+ =|Bd8KqOԇi t.IAh'ȓ&4cG6n?dT`xtree c54b09c211542da007bd980868071b3edfe979d4 parent dd3b6cb0e447de01fad1ed39997449839b29e8c2 author Gani Georgiev 1778819690 +0300 committer Gani Georgiev 1778819690 +0300 fixed changelog typo LxKj0EZś“,%tu<7KeY t%~8J9MA &3;+sFg6njSLAҰuBLnd81>=1Y<&J7쭬x{R^TY/yWއֆކֵwB=E:BkC 1778818016 +0300 committer Gani Georgiev 1778818016 +0300 normalized scaffold indexes Ox tree 747cd3f6c6d8a00a81695cc256f0f523b991895d parent a458e8859000b9fad49c3b43a4a4f6018cf23005 author Gani Georgiev 1778815978 +0300 committer Gani Georgiev 1778815978 +0300 updated changelog 5JjSxTr@Ẃ*"D@QIdɛHbg%8p[g{"LE]-|8ȲlCa*]d#[ld[vY9 ac%ZI–ʼn04: 9;fɴ?q3#HӌKB؜k _LG楠o'.'5t9(IVF1#g3 !Fz}aQ9 :^0>wXwt%;wn&kڃk~ ঔto29^ۉY5H,~zDUxTێ6}W[6ʖ%o$HHID(R :O|a$CZN) gΜsFA]5RmE 6BWz]r#:2֛ l6e!UmVVv+׻ܕ)K4-ܼ%Ƿ?`UUzY^h0\8* 4M6G}?X'6Kդ& N2GR9j4{PA4?/ apSs_Ah۠bEAY~r-6䯅 e3 [1*pgp*f yV' K&m9}zP>pfP;%;c޻g=0qw7V|\4Uj(cPi_L$|=|]C#5H L!`>V.3oQQ`5fJkc=sY+v5 |_SʺK _cY !S.Fs{^?M\l;  #T`'/{WJ{yѓ㯀H7Ii^IftR-djZ !;xRn0)Vn-@UVC9=I,9vd;ݞx'a$8p3g'<*UeSfETmd)U]r#I=eQy]Yؐ\մVZa)eK)p^)ڿR@j˪X<_幐uO:\naȏ|~YhdTfˌFJ=#Hg oA[iFmXXwb"+g QHjQ8f4C}:OΚ#Nh{#@j`lgl4B[>+;")I"EgP_RC3—k[kۖ=kor$a~0jiDfOb6EfāƼf"'Inin16L o>U lQa"\=lSPxBm &e=𸧃wwG.zyf[m.v:N.B`_BCML>uJt1en(H6> jmRQ =N^ z$閇=]ZG>Bxn@~q6IUh"ڢ;W].p O¬ӢrxwL#2?""8򔎫fU I,:N餚N9$f8#!f'QNSBcC ^ ھmn |>9Z,rH'$)M?B0TƵgК22f=?b[g!XܬWW7Irh Z۴@OLJY!HGTc[JWb™gK ౥8Y'c`c͢`->-xnO!{P7)FJ\X$@/q#< FX2$S@mAB =renJJ%9#l֟ǰ,q0PL5}-; 2NQKVpک ʰB.+ܥkW?-eR%m"=qrGM`¯Um>r4Ʀ>̥h歷*LFG{#GB:*(Y_í93W / n?} ;R*fXRѕ;w`Y ="rpZ Ȩ~_/Y=9jM"(k}54)#\|}8?AӨ3U7&f癣Bnfu4M4/`Mݓ,[:lfgSp*={oAp4dDt4* =#hڢHMR8 ((!Ctò\,U!JҔED*ʓ|LƜ#Sj*_& )xP;1aHe᠒lbBC:'p$Uj;0m).C*vxUێ6}W /v핽Nn `<49RJR:O|a3uR4%̙3sGrYlB\URT6B^/fX.YY.r~UY'<WX|V.RΊjS˹.M㢔ӢD7a?:X ?5|#L2?Egҵ>d (4s0X 0c "'vY1nի1Q>hJw )mKiEt~#ܢg:\λ Q=xPLsx,]0t{U$6|):P99@6bz" '@Ȩuăuj资"/!Axev T*x2B5P-ُ=n B+!qe#I 'OR9[ZR5JvR;HsXOR|H̏׏oĹC:ŽOƯ:|xܗG+-i?|~_|fyK3T0vJ$g 6NΎ_͎إhjTaxmLj''72ɆIMȣҼǔ&|E+NJo IV8E˲U$oOr2T$<=(mIJنj3BNwKJ}]S ǡ, mr#cBŤgRx9-Cdꒆ_|sAa.Kd 6 awщ9%=?J>?8 `o{L>spX1x_qT1Hk7t;`KV5"d<;z`KMz> i"fzߥ1@7{JO(`ͪ h%PV}6T6 8oηÔ^h97yJ1X-+ttm:]?Jڳ_nw.x~"4~K=l-8xڜ' NqJbC=s{Mƺ7UZDfd``j0r -lf#|q}297Qě?拠$juEy%>ҞeJ}"K>^gOFPa&` HUf9fl F,MaZ@ђ`)Ix(xȐS{8Qk2@O<Ơ;Ay&I>'<`MoX.n+c8}]c(V$" >-v~x[TPp՚x&걆+\[#8o~ 3LϫgP:[d#2t$K=eNtEݗ[ 7>8e*?G v +i$ pvZ\ &jB}%+ =e {r<٭ MzEB+m00Cmp`Z(F@уor'_֡'qlLSmđo8Ckݮv 3?5hH؆ $~IЭdAop kD/ʆ˧dM`բcCBeA~k5cL3VFo]%! *k+MU`f—`xT]7}ׯ,dڞ7BB}.tgF^'P Kz4:%,!dܣsϹ)0Sժf6UY]KUE*6e`<_-9E1/TqY?YnVuQZBB 9z-{OzySMyFeU]UWyuI* |יٛxM RB-G ,wLw2e>l΅mj?RVh=@Hzl|Ѐ.;i,)jB %>no9(w# ԣC'TִkىÏ1L$fQ`wr)W)I?&"Q|M7;B9-)3I5g]iRk`{ofo}A1> {ki$PN3 j=X4DE7"NX$GZԀ I^+#F^6 "t- )o-gOճYRScߧS{ֱ'h` A(jg1:or0^${`}9?~~XD-Vz 0a :3sx1k8y7}G\֒Lƻx%v &CK4[)fqFQ8ř\ ( wcr0 B?5)uq==u(u }q\ډ"Mϸ˫3jy`^6ayby8aϜ#u*Ħa2 n5dýÓtSב<!Pꃃ2wC#TQHbbaؙ8Rm_BFV&Nص )]l%`:~b8<)m8-{u E -$ƲoøOo/'xtree 0b46aed60382bb6a9514133338863f6c396d6cd1 parent aa502096408bbcb83a4f3511d158e6b654090a20 author Gani Georgiev 1778783541 +0300 committer Gani Georgiev 1778783541 +0300 [#7689] fixed indexes update collection error SSxtree 0d52a3028c28a17c62a2561e906b6c730169c2df parent 7f6f20efe99e8bbfb6f3fa24476b8cf158e116e7 author Gani Georgiev 1778742162 +0300 committer Gani Georgiev 1778742162 +0300 updated api preview examples O>xtree ba8606966ffbc1e37bac06a094a88bb5a24b13e3 parent cb6b1fbd74e192d66bb471caeb5cc4b615a3921c author Gani Georgiev 1778739973 +0300 committer Gani Georgiev 1778739973 +0300 updated modernc.org/sqlite ڙOxAn ~#Un1 6mV&JܺZR*HE+<{̚4!I)8Y\hzqHfƠI)?Z*pR,x]:^?|[v% ȑ'xA8vϭ?(~deGB(&r@gUl_PU~JNhl-߇ocMxAn! EJKU]aP;CD,z_<y'TlqnA.0 1778701715 +0300 committer Gani Georgiev 1778701715 +0300 updated backport changelog N%xtree ed186191d881f65b315322c8004e4d72664cb6cc parent 554240d1a4d700ee0fde4ea26231f68f65c13ca5 author Gani Georgiev 1778701048 +0300 committer Gani Georgiev 1778701048 +0300 fixed grammar -Hxtree b7adf32364b8871f3a03f9668b7fdae4a5ade85c parent 75cb4afaa544558da9fb01bdec99b0a98731aa8c author Gani Georgiev 1778700890 +0300 committer Gani Georgiev 1778700890 +0300 force unset realtime connections auth state VV xA @= X0NAaH mӫGpkamKeE)-eIObiuR/Ӹ lkP||?xA0E=\@-PZjѸc 3Si`u#ye"M0Etߚ{PvdTްuꉳ®Yb{6HƷoW2XMːgbf89 kbEtBB +*vc:r  9 fĂ +DPacCӗUkMG f˶(OؖjCU% PV6CM?T ceHqUz<7唢p꺾-o /P/xF }3dT`ί x I(&R&3XxrOS D[ی+d)Z𑾱#- Ψo@.dpTپa6x/XP_s:|[ APg rۼ| rLK8jwyҒ=.dSɛpxTn7}W̛$DZ]ۺN@ZZZ$Ar%A~D_!)G-$w.gfΙ.\^K\ⴚɔf,w,.&k E5NŬ/֫z5 ,K,uxO\?o[0]QY9/KMV L x u?ጅ7`M@Z*Cud즱 {[q*%cu5ȉ'c2q V{qz K6)fbыP qUgy%Qq!֢+~Z^|Zxh,{Bi4q/(Ѣ/F)[J ;@5_\DP> |ņC z@ 4-6HG:f4?+zoWThC5 +Uǒ#L\SҳIIMw`4~po FHo-1;y:IQ05Ah0ݑxI)i܏)*@3|>ˤs3ӟS?;}FO_bC-HI?@IX~} Ͽjyuy(/ͩ?X6fk=&jYxgvW2A(@hwj 8< {ИS3FLs!n>%lelǼmX8a}uЯA;[dIXj7Ơ qÆ=iF<^b xtree aec312c095f8ef9b6caf6a67520811ec05925100 parent d8f005df7abff9f27937c1e2d1ed402feb84bc4c author Gani Georgiev 1778413313 +0300 committer Gani Georgiev 1778413313 +0300 fixed ui extensions test N[x9n0{b .E ߱$W J$?p73]sRcaN6gDg@I[6e`ҘNvpDp#:d ] 8m;KoKK|9 `|卅:]2z[ހkm *O.ҕ.XxA Et404sei :; sYGc^"I[)jgls&u`2|02"8ǔYVBc ϱO,O- w'(9oZ]v1 ccWPTKZ@gC@ b?]Yx tree 485f15f0ef08bf5b055eea5e2adf4382ed6f015a parent c9134a8cd73e48bbee34e556945da7ef13e491ce author Gani Georgiev 1778172695 +0300 committer Gani Georgiev 1778172695 +0300 bumped app version XLaxtree ffd93fc6c6c2b9876f94cabe1a7033f9cd577e04 parent e07011f496a46287b286f082f7a7fa1ae25facff author Gani Georgiev 1778172562 +0300 committer Gani Georgiev 1778172562 +0300 bumped min go github action version to 1.26.3 =Txtree 218c2c5a72792099579b3e667de64968c59234d1 parent 5c13377b026e4a3aa0a2fa9bc9a84893cf8b7e41 author Gani Georgiev 1778171973 +0300 committer Gani Georgiev 1778171973 +0300 adjusted noitems alignment 9MٚxKN@Ds@3vPP bt7=ff+ 9 lX*T1CAܠ1"L Scʢ! %*2Jjs4fȓ<6(Bkf/|E(h]&:N6)bؾ2$U'0; [Fvx/vJ=$ ew.:zN֝~M֜حI:^nף j ?\ $=.LA& OďLTX~ &R_ mx=n0 @] 1@ Y?CdVIJA{f :~oxR ȁ8yJ0f+t~HxqG$rMB^FkʡuK .^Ǐv;ӺlsL!zkͳ.MU0/c Zz^P o?|WWxtree aa8e144f6bce1de39455ec69e0daca8ae3b107bd parent 2d9b466c73bfe347f71742b448b839045fbdf7f1 author Gani Georgiev 1778052611 +0300 committer Gani Georgiev 1778052611 +0300 removed unused css file `N 'xQ[0)owc2If1] 1+:vg=8"'`?jWUWMDP4iYԕr#KIh2ꨪ뺬e4Dځh\ٺ!ZQhh5m& hZ2Bz3vVC?UU:!N4vu||T|p6ӱSl̮eek$^wQDRrAmj+#  h< jv#"OzV,̒l$@CK2 '_f`!.[K/dar0wIX[cl=ap0&FM\nV֨Yp$/K8%zdY`Z FzwA-X2$KiQ˨XSP0|?|=~yBf PC!,Dт0xRn0)]8 cOSNr!< l#Go!B%rl*֤m,یe^ ,d]}6Fhr6n*Fe2/iYUVE) n~Zx{W7z iU,+XUEžN*Jԩ4\<—u@Tx|; ;\$x.C{ )l{1\xYVE:i=O#SY+J ٻ5u45H=K;7d`4i;'L8#%= >%+ e廬Mop\iV3ze'p9Z¢3R\ZrMkZe8Ś$aaaEbqo1|?r= MHEnӉ(b8NV~1p½E?В9V \l({?&xQn1)쮳QhP)R)0'Y p@&Ol\]}.zsϬ›qߎ=OkiFHzL0N>ٞl>u|K`춳1' { 1778018172 +0300 committer Gani Georgiev 1778018172 +0300 use input css vars and updated changelog TxJ0@}ˁ1i@Da756Co,No̐r\̞dx]VCT5)8qkh::ȑ&c6%44 Wmpŵk t 1777979571 +0300 committer Gani Georgiev 1777979571 +0300 updated default log level marker color vRxtree 620c5364517758bcb0a9156802fc9cda1ff6b7a9 parent 9e0c8e16361910abc2501ae56a3cf4b41bf454d7 author Gani Georgiev 1777978930 +0300 committer Gani Georgiev 1777978930 +0300 bump dev version for the demo LNx tree 386c1f55e064b91ba2a2bea55af6922314b2aab2 parent 1f983925486e39fa8f2c4f9ce6007f13a5f87299 author Gani Georgiev 1777978878 +0300 committer Gani Georgiev 1777978878 +0300 updated changelog Jܐxtree 6927d60dd22bad08f31ec6c0101f35c3731e2507 parent ba09abbd1039754a261139499abcd03917059c9c author Gani Georgiev 1777646575 +0300 committer Gani Georgiev 1777975446 +0300 added superuser ips whitelist JNx tree 1f8d99e2ca7923aa7033f160afe1a6d3a61db974 parent 54a8936cb58da36bbd7ce6e6dae46308f1aa6192 author Gani Georgiev 1777970407 +0300 committer Gani Georgiev 1777970407 +0300 added content-type serving exception tests UFxMn >ܪjf`90 \= 脗,QG5ZHhHK4f]l%J?QAڳWnڒA쵝rM=GX7$MP)xJn[h=]1֝Tډ3/җɵo_A>SH@m!Fv韻_bNx9n0{b!. A:?"H" hH9S&FQȊ&GR)Ya6nr(${vHm<9{ |-p"wx@QS^Uj%.&BL%aI{2CKy?]]opM°}~t|XxKj0D:EC[ !d7h-Yr0Ȯ(UvS!h2EǠ59Bg#%,Փl'!@ί~^=i:$fG;r\>߹rn_0ڑ4j.EXFT~eZ1z](8]HH<7r5X{xtree 70474a7a00442ada6bca9c0e4f77b978dc867a6f parent aab9f8017a358dcabbb4a3f5496232c2167d1cf2 author Gani Georgiev 1777881041 +0300 committer Gani Georgiev 1777881041 +0300 replaced ibm plex sans with inter Q9xtree e7e0663fe18707852f93b39cd0b37aeb5d64ed31 parent 911ceb267815fd0a818be98d66978efd57090399 author Gani Georgiev 1777877372 +0300 committer Gani Georgiev 1777877372 +0300 added logs list start date guard Ox tree ab974a6325c45148e5ec7d3cecaf3729cdbc69fb parent 2a8dedaf2ecaa148bfd08576f96913e79e836c24 author Gani Georgiev 1777876542 +0300 committer Gani Georgiev 1777876542 +0300 updated changelog L@LNxAn FO1J`9CPm0Ԟit -q6.&XS(q>9AKeIG$3c Q;N,*zW->Yj3Zz<|ϻtiYRS2:@{8?ikTsm}|(R萏R3+&_N_xtree 90151a227d0eec27dc6e5e42d5aa10dad84fe2f4 parent 455b977b194a153e89d69f0e0ebbe2dc9821ba1b author Gani Georgiev 1777753232 +0300 committer Gani Georgiev 1777755005 +0300 added eager alg error check to minimize misuse Vxtree 2f022b2b42d58b8aaa1e4036283fb50cac56cea1 parent 12463eded880b71f6ac1b0e6488cbbb682dd9505 author Gani Georgiev 1777705543 +0300 committer Gani Georgiev 1777705543 +0300 adjusted default button css O?x tree 2ac50e8533a3d1f2344cff06e2a5f003dd624e29 parent 861f3d5788a352c47109fe2f6f6479dccac36014 author Gani Georgiev 1777696490 +0300 committer Gani Georgiev 1777696490 +0300 updated changelog Jxtree 138749fae0402cdd8584baa71d36bf5d854414c6 parent 8426d20cf1072adebfc461dcec683485d596f9f0 author Gani Georgiev 1777658117 +0300 committer Gani Georgiev 1777658117 +0300 slightly adjusted the dark text color {Rx tree 799cc7161d20635018442dfbe15ed2928dbcb2df parent 8720cb386a7a85dd46f2c5c15888de1106b9f9a9 author Gani Georgiev 1777653120 +0300 committer Gani Georgiev 1777653120 +0300 adjusted flaky test Kxj0D®-(|J^ɢ]%пg Ğ%H0 Q9)8}`~ցyJA-{a`B!bps.euG_7 to>!/߹JY/q_@8pk];19aAtȖoYzٷ;N󾖼y 8_xtree 1f1d38eba07331a76040b43014b9450a8384d9b0 parent 7f59191fe1f576c5a8836ec70aa2abd9580eb3b2 author Gani Georgiev 1777652213 +0300 committer Gani Georgiev 1777652213 +0300 skip duplicated records ids from the IN expand Tx;N1ssUGBlѶƂ/܀^P`b>UkB.F0Kt  %MEkN|L1lTs 196>ș|W::\YF /m[۩^쯠/Qus?z?ECNj4 T2v ]xUx tree 71848bd7e5a1bd778f73dd55a3082b85564a151d parent 1819bc894d02bb9e67124d82202ec452c5d9d1dc author Gani Georgiev 1777647100 +0300 committer Gani Georgiev 1777647100 +0300 bumped app version !J“xAj0z A%>`Z & A3a[م3[J싫 Pώ)+E7Jq<:_t@lDr}Lg*l.'iI'4%ؐB SOj,ow82Ig@f&D5Zm] [t鶬>?`+m zYK>;GTxtree 8c64480ca282e5b068ade9776c87043e703dba70 parent 9c5249a296c17c22ad600ec2cbdfb039e89c7307 author Gani Georgiev 1777367424 +0300 committer Gani Georgiev 1777367424 +0300 updated the security policy N!xQn0 }WqrQm'hm(hN(!A/6^Hv.'"@]ZuS6m_Z ՀCQ4Y鞨Օ,vmW5*yca Y:j.ʋZ\Z+GLq0Зᯗ_D&(w#] X8?n\%n!Թws# 3 Ip'.Eғfn# edwV+[b!G傥}'8rb.i?,9 d IbfB JW xQn0+h,[(ARh+riHחqwfgfwS`F=0}t7Ȧ;II^9tڞjqXC'QOH#U=- i/~y|}ţt*qR67=vk<۔?F*vw>!Ǣhwru(b+k$lwI%l^mogκ3=#Eg[9.Ł`|Sa%f|(ҳu a=vd]RW?g\v;4>l%(67rWrا" )V7#x0D|EE *#e)|Ac[a9c!='jhm7z0Fqnz ]Ie=-:)i`Z48Pi*]u/ZR '+.,\r'(uwU'!Ȕga ay D }\8d5y;l΅C= (ˮv`%9PE02DsL LhhH)FhawY^B$ԙ5p \7EJ9|| %*D˘NcS#oE.]9`!w۾Bi[ViW)ʳûŞxKj0:E~VKBvs`:!1!7Ȯx<=E x^|qXxZD.%6S|[adqΦZhŚ+S+>1O.ܺ|vmm>nuo1kU*0, </&h]àU- XxMn +GF9IPQJsl/>۽d%\` a{C滺RI9Nsn2&&lXk,J},Dmk֗XTAڏ6ց'zcˬFzOG R;z)K I夾= 'gVbxAj0E>@ [B!B#XRմǯ@w}7U[GHhyP4^7-6/Vu"6VgVhTb2|%EkKY ?~u?Ìxܻ;" =/ <8~jzJ4]c o\YS ve)ʌg0 GdZL|a)!-4|y1EV%![Gb2My&ƸS,F|O(ӜaKcgx/ ʏ0flf g!㦪#w9:|QGG*L*{Bv٭Wy4yy-p %_P!DVƗ BY`!+"==\Wpq[ $XS;o ˰Gs_Gm,L‚XI"i>O(/VxVAe]C+x:a_[ɹ'W&h0GLA˛XV= K wLվJfE\ ] KȔ;^hTPc+ބ6`U4pR;Ԃ!'%yͩ ɤw%vmw"3q+j/!N @ kj9)W[jcQ Qi %1"J:tS\Pe%NDxSn0+ mڮdMѤ wĽȕEX&z|IWrHQ8; + Y6,+\,%gIlyJZS'rJNSL)r-]#g\޵ Ѵԉez鴌^ B߭V/ .|u)`kb7hnyUp~s$<|I5A9[uS]]9 a9aB2uso&rL:sJC\a&ɪ.)3!MDi`M'J CߺS;7EvA=wފ`bWx tree 93a87572ed89b1cd93616a15b4b3bc1344c3d7ce parent 6960ec84544c62a64cc53ea768ed7663eab005a9 author Gani Georgiev 1777271432 +0300 committer Gani Georgiev 1777271432 +0300 updated changelogs o\KFx tree b09794ec805e2feb87c19d4919506cde49bb0f4c parent 95fa271b38d6aeb68b30957bb307337d8115f5c1 author Gani Georgiev 1777269878 +0300 committer Gani Georgiev 1777269878 +0300 updated ui/dist JxKj0:E$[s-E[Fis@neIcutB3.Ic""4Ӗ8:._i"b1a4B`S/SxWmk˅py=uB&QkVD zH"uZՃV+p5 1777266200 +0300 committer Gani Georgiev 1777266200 +0300 updated gitlab userinfo doc reference qRݒx tree 0f2197bffce6d17b74f9d23fc6a9bd09eea199a0 parent 3d25cf4afb4f74b2cc5a70e648b0c2dfc6b4f2d3 author Gani Georgiev 1777265863 +0300 committer Gani Georgiev 1777265863 +0300 updated jstypes .L(x tree d0f8960e14b6a1776c4c3505b1be39ef0115d17b parent 54d50601137b52dcc9a96de0c6ebe3cff76e420a author Gani Georgiev 1777265751 +0300 committer Gani Georgiev 1777265751 +0300 added explicit gitlab confirmed_at check o[Sxtree e7320e0f741b1ade5b17f853df1cf04a57ac0014 parent 42c40fcae8a2451fa83032b88458849efddaa46b author Gani Georgiev 1777241588 +0300 committer Gani Georgiev 1777241588 +0300 various minor ui fixes M,x tree f52db9d6297aff3450d353e08be0a0f3360b216a parent cce08810147c661e55e7a128e8b876a6c6754707 author Gani Georgiev 1777225667 +0300 committer Gani Georgiev 1777225667 +0300 added more tests for internal record hooks S{x1j0{b!edKkBkRR+J%y\whħz=D[t1rFWR;:FdM&,!8 MBnT ܤ/\׼R_b[_ n:Zz/zB70я|~CoSG.bc^ZUYxtree ccc60d03297dc38908209641e12e1826031a6b54 parent bbd066a73ddeee07e3585de92b54bb3ac051200c author Gani Georgiev 1777211424 +0300 committer Gani Georgiev 1777211424 +0300 bumped go deps HxKj0>E?BvsԲdyr(0ȲGщ:Ij,QZ4MS~9SZ: G%!y5^/xucpַL&޶~mr nIaIƖi<75Rړ:E;AWp$xuUfgs˔g}-Q|bWxtree ee4dbd0e56f713696a3fee9d55636dd0b3dff4eb parent 0ca1d09ee8ee74f54e63f71b66b9b7a05b415b28 author Gani Georgiev 1777202603 +0300 committer Gani Georgiev 1777202603 +0300 updated gitea displayName Ox tree fcfc63c5395142fb2d983638b18dc4a626f5e02c parent e521354fe8fd59657c7d4d906a00f4981f921a9e author Gani Georgiev 1777192809 +0300 committer Gani Georgiev 1777192809 +0300 added App.DeleteAllExternalAuthsByRecord BD4 !(=b%#/ T< -.F̦HT+UwM:%LFF^`ez!mmHH>\N5ZrU#VJk$Jb8Up-.-W7CwBk-Ts9g&l.%9G!{#x^>w:.)@c9v1`gEahO  #q,03ο̋JY9YT|Af߹ˡre0z󽐅TߌG yI} >s؃|Jz2yXQp;BjQVU|2c_ˠxA b"`r;X,+uT3!9Ֆ⌘dɳGr6Z*k,Y[F!eu$499ED":ipK7\ˁ[Y.-?sJK8IRR/ipXGӓǹ#КL;5lk+oWYxtree 833b3b4e79c9002f848a28599d3f3ba1e37d08d0 parent 54a61ea32d6f0e7f0896b970be50eb21f0033f73 author Gani Georgiev 1777122983 +0300 committer Gani Georgiev 1777122983 +0300 added dummy bcrypt check L֙xtree bac06bb9a16d31a924fca20657e944b15119b1bd parent d2add4ceb37853b12dba8dd0759e0089d1fb9395 author Gani Georgiev 1777106469 +0300 committer Gani Georgiev 1777106469 +0300 adjust dark text color 1PMCxtree f9704c0934c21df08a8172b4435e57900bb808f9 parent 72d327dc6b504c776bcc81037e15fb39d77d9c4a author Gani Georgiev 1777058846 +0300 committer Gani Georgiev 1777058846 +0300 updated changelog and rebuild ui/dist NQxMj! OGmB6a(q!Ǐ {Ahtd62aФ\SR)1{0&/8SikraQ&U.HX)7nz.kG>؎wP9*bG_/P}2ڦIfq{^Kk;r&u[3sZDZYҴ4[-Z6Za,FcՆ.<9fTZor X\%{̘_Z5͋&$>1 r:T"/P4j + (=@jߗC8lظ_r Gl xMN1 9 !LBTݴ ꆵ;mL5I[#rBؽ'sn;n5;x\ʊӲi-7dM'8Z53 [[k\ɪS]mv`Jk-ҦJq)?" |E|wp1&'UTm!O+!e`4_b `qK;lx+1R0z~ŐO3yv"9+yt\\ex2aIc~fx1R0 {B%رagȖL> ;i{ޛѪK4xMo0slѮJKUDg'&']ɶ=";3ϼcJ`]\֦4vU[jSeS-ͲT[UBOZlWWbzeSm6FYѫMj.$]7r7j_yYaG"c|.H}ڤ8QIU}[dmC I҅{Ύ!1ۇLirGKo|T1uVHx蘳9fs5eGy0cRM Ⱥsoġ^1 ϰW$r"f\ߟ93y9}D= %ԟފ.Ӌ&=W1?3o'#!_J wn|̂wdlI &(Js~R>9qB*Y2G  p@#،mzftOLf?^rqLL:zGUB(K&,^kH"=xtree e70b60f50c5fe57c601a50f6944fb7d2f04b8391 parent a4bf92d8a1c1776db8f8d8c9ad6c7a1fa7c90747 author Gani Georgiev 1776968752 +0300 committer Gani Georgiev 1776968758 +0300 [#7659] fixed SMTP IPv6 format iN<x tree b230091112b48e7f845b841f292f6f9207644d65 parent 73a0b5edaf86cdebd7248971fb587dbb9fd90c91 author Gani Georgiev 1776968312 +0300 committer Gani Georgiev 1776968312 +0300 updated erd styles 6JKxtree a56a17057acd1e8560a045991f530e39a187337f parent 29b054b97fefb0313799123f9c75147aeb95e37d author Gani Georgiev 1776955395 +0300 committer Gani Georgiev 1776955395 +0300 fade non-focused erd tables k?Mcxtree 6b92d1db5da486f6593c8c4e9181a06c077bcffe parent 8dc79d31feea647391cd1b28d4bbfdf7aec020ff author Gani Georgiev 1776954727 +0300 committer Gani Georgiev 1776954727 +0300 updated view autocomplete keywords fSxtree 680bae12a08f2d717ee2936964e74e010421557e parent 7e79d032886f6631b113df4d0730abfdc02cf89e author Gani Georgiev 1776952633 +0300 committer Gani Georgiev 1776952646 +0300 fixed godoc example typo LԝxN0y=!?A#O^In%xzG873u{fњ1#blNm0c.kn>:SIAl]Tv'D:P~WTeYrHǭAbk6>msᇖ<J fʳ>>v+SxK -Dgѝ£eQ0]xz7p7LD``:"^R(4Gߋ8ARn$E6Zޣ$VuTKܳMwN^kVRuG|0cji+hi `HD˖}EӗxVnF}W R)"KtJn[d8yrVPZewW @E0_]*@ &%̙9g(DSLNҴ{{EQZt{EMGEA iʊ~Ivsm))̌@V5BAT9fյ% {_Hu`]B +@ڰAd\`Wp%x?iCz0N|oj%Őʊ!Ȃ\QN,NPp,s{r 3ْ<.1Px|ALqshb]Dl_ ]SPt+oY Pm*scz4x{rj.5 "#zdQ VrWjjv͒: !fDц;Rt{齑jco 1VHA3pn45m/mOm8iSPFPʌ_-z%W%xoZ)AQ#]~kӞɻjl8I |5XX iߔ8=rö1(;&.y <{E+踧S6'(ymC}}6x򫆲ai.0 \Uړ&bH~ufYx `Go'xrdي)/5И\xn6|؊-;"):E(rd8IEz}}m'vT'g E, \ꦜlU6jvZҢ]J7r.X/VZ_b.gb>_rL!;>_h|Mo4_eUuu%uGhPa?70=v5К4OCX (iQ/Q|x0AyScNf;zB 46rq"BѨWo!t\4g{P< ='*r`=rOdvFܛZFP5 _t }2igf809 YKc(&rd4cH0+im{d !r+D0zQ2|x;41K}OspUˢ^F>P }6nwd " kGp]`q-#˯>s"`۰e;'- !ybCzK+OGu.F{!60znOKؽGl'F6I=S( ؐ6Fæև`.tck25Iu.O2Oa?,bd~ g=.N`79$&0R!oR$1?,O=>3_PN>K;Ocl?M45Xi1Z%@_Ef k1IKrpfȜi񇻻KIHxxUr6+Xd)[-7MSg&NK pPtdWnu=*zf*E9pYM&K9+&S=uXҳ4./7cysGj2RXM.|XGTiɗR&.w~rt@4o~\\z2F euQk#Q=qKofO\ 盐Yn%+c4?3!&yn/v*g).ec)5X+#zUP퀆Y4L)1pGnX@O; (5qI;,HB|@V{26*6IЬh(1P"yFy *GYj gD v@TiWt@ ^;*Gۻ dE\ʞC!pOwO<߿%-VeF~cڗj~ 1l\6arU5tw o6riΟ6K;f1̏ q/hOBi~xs@e6fe.bU2TeO]^ei"u#}KCZ~`6]Av[udumSx06Z/]*fȌ]eI,"X0 MJ+4.0T&cC'YCH |K%qE+;&|>{)ʺT@覕b!UjЊGRyCak DY/=6*V+Pìi9h[wꑂJWYc/ҰUӿ\"xzPc5j ̴߷ KKs JҌ .զGӼLJ~.xt'xRn0+F+(MIvUvi8V{Xr`{W]N|_ȗdAy=ye-"Np9ʊ2ɻFyYuFtd+. y\eeĶ+BRYö >na} o$SU]9/ x1aA@¤S:k062Ϛ5Z < h2BO EaF:g/z Ғ7sHrH5_7ׇۧǻka ~}l௑<3HD kGg!w5tHzEÆ_Rhp *^9$7W+c0Y򟕔a )D}ͮI47A#9 q0Z >ovWxln7i&l߁`˔RxrF | bO-%UnN=Q3=v]Pz.ȧ>a$e;zp`N|U#*#Z̦GsMb^IUY\9J=.ji>Uxr23*ȰK[wtngM_7D٬\LƋ| |McRq%ͧGiD6wF<ĄN.5q.,{`b*0 *|V K1ECND-r ы'(u(>!\A1huStoՀ`ML(bk)5_"6hƆ&h1m#zkusw?+ؠkEZ jkcQpFsyo ATPkl2L0ُrـnLNUze177wkPo)`a@h|}^IG`R۾) M)TG֔){^#eH8,9[2>HR LzYAF1'F:g,QFa2 1776942779 +0300 committer Gani Georgiev 1776942779 +0300 removed title loader to minimize layout jumps VAcxTn7S̩P_+DUB ̒#ܐ\rQ>@'̓tcH9G8Bn7g#c؝vzi,hTql?hNd!Ro4(:l[{IW蝞'ި7{&– ǓdMZ]t}V{Ŏ$_Y=-5:$IUQ嬬EPּ,84 c/:,VʑOً&u%%P#dbnW?ѝ uI'twV|s>4hO:@OO<Ԇ ƈ:zVV6y(|?e6 U2{أô``y7%:]FCᓗA*i z| [3b<_Zzd<#44 D b@4j \*j9Bk_*`R[(2=)VQE(X+.l ,ETh<+| ͮshXh=jvuu -[{ .6/&v(6$qe8{>رkc!R>NRހ^{2ZG.Udc2i[EGREX[~Jd#$-E'&IɄiͨef=҃ê݀ʙ8}[yޔy6m&=9Fb5/ d ,^sC3:ppK+jX vX(‘=7) JvDg< c~Nyda+U8__x Kҍ ߼`ZfbybtDF[Gޤq{2*>nge>Jy@5G}Xa΃Ep1xC dA'cq7'&7澿@o5@ou$E!5DƊWt w k|#:z<̒uEmJc~z^K6/0dFɞxPAN0{vB$p6&ؕKphyhvgfS Na%o:b+˶BVYV7֢%5X0K*%Juuڡ.E]םyGRR <w21 2G5oXg}^h?M6%JCvE tDpb?V6y];z\^;ŕ:t`]phc\_ 9L6NPܼ€F0YGC5h 4`6=A>x61Hþ):}]D=vͶ28P6&r"ŊRx˻M1@|$@㿍 3슷6PP" r+;3(:kI"$U֜80(^,o4Mp^"Yj( Z󹰡DUjV+ي慎O>:<>]nhcRos?e·PFoߟ_ίg8&[18z '\~nl[`xANC!=Àit 0?Mi5^Mܻ|7$6! W/Ѱ8 e]\҅;i[m U٠%/Xy^}uxyCW>!!zc V_.oA\*=owMG#@ 먜M}F͕jxr*7\ q*'7fK#5MI*'̓u+l4VS`˫Ţ\ZjUJxVvj΋Y5ShU&j*sYvL\|/Y_-3ŅI5=mç(-MrZ//W _umSR)||ቢ>V6ŋ1Ed#5L mCY# mLJ?Q O*i֭T}fÎk$gjYM hiGƘ_(87}GgD[^>&<|;*95@x_8mm͟}9*d3ô#3i\ {Fm'7j0$՘JXJ:z.7΢ T%_"PWEqR\/t=mb)Xxž_f0X ӗC׌^u_dh͂ICjή(Xddlk?6Il)6lw9dlLY`OжND6׵r.;X/jIF`@{d O#z5\zseZ5lYCs[N{Z!I&VBa]>|QȢFYgb6@o ]!C!RtZs}WU).Tk'ms~>P蚱Okdl@Q >-drc< 5 ",ǭϝ/UZ(__>U>(w 'j:w (N*Bgx=Pa/w-`-g_B/6a~KV)CM/O%b;9=r%0_'a11{T{;$zu_mNbpLtvy&ſ7Px=N1k|'DY={!DDUj<'kzD!8!'!hf4*ptRg_|Dg^|<¼ [}ۼa}ƒ~a^FgNOxrFEޙ-!*VRhBIQ51=Xxf@G %ȋx ts/Lps9Rej>L/$42er~)SILflDU|\.r:r1ႋs y]hP\+Auz<_\f'mDI" P[0| oh>PY#AYBQf }УvBph|k]H.Y+jPT4Ȓj, ȍ*Z}Wr.;Phm$X!XVDnTG_ |9&d_[Opu[bC|lOsKQIJjA2(AL`lZ:( ma` jCd:Hx-oăщ4Iʞh:OO*԰rTqt*mh$=FtM hkR×4$C&:guL㢈={=С)zE&aU)ʶ].HP׋vZ$fZVpۅ87vP9 =ݲuv GDa:b#7Ϻ^RڶF }>ޔ1[ڀ ̨88pÙO{i<0B:48 &4xVr6+rr&%Sd{֖X%Hθv/S ٤SRtDf4PitSۨKהЀ#Njec1jJZ'30B*>U$** pT7QŔLh}rDbMiw~Z5ܣ!=/ǐ]Dt9n@{_+]3]G /fZG[GmJηkBJ{4kJfhG*Vh±QgIJܹ^EVQrILdckm]\#'5Z?56)xۣ6ʃ,58 Q{:P(Nyl'뵖F!}* Z/^7m&ٖKϜ>KtVۦ?4 x@kŻO*`OCm~hɧ@~|Qs(*ѼbNk#v'T/M *c5(a <]\F1+]q]WguQv{\ %ڜ|1d@eT{mA |uUW/:oI,aVsoP;L<:ZL/MĴ}@K#D{Z߇KP^7J;{nPh {Jm&PÛ"g'uӠ(Kkal>ֵfi'KIf&A Ͳw>t9GUYHpb^c4YgZ |h7 پ˚20ə bzyT,+'nc[g@軇t9Q@qz0f>@!. 4\[ |Sȋm!deFUy}WlhN#D)KI>=%[/>4*XoI7^/QrmY<Jd~kk7_Ŀqִ]0BCF*$VNEI"ENb M^2.7JXG r |Ր~/E_'y3bkM_? YY@8z'LN7ۘn97dXzv28:{{WExLwaz4sv}Ψ{VWsmt߼RsZO62Dobs9$h_>?$ ] _P(l/@o3?HB*czDdtBP%Tk+re+$ 4B%({Gy WxTQ6)^%ے(Zw[t$(FPb"~=aOdo@lҜyo{ a*6wVu) k%wźRl@O6훽<+Yrj(UٮRs~CO]:-QnW[ƆE&\Jf{-a\X?ݽS:mVzuڃ$EVP% `(0H c?Dl1і)hH$G+:8đYHq6w{zⷶ! q &|B0gH:bgfϲ?=T#{ Z1k8eLa~ecO+g2n xˇ{h\r7qNҲuoXDTI"V0 Z{ju:`Fn#5,h# ?6sy>Կ&|α;c쌬C9*QڢѬ,m ,Ћ.퓬[Õ|?1{{|LAS2ǚCEx2]pFO8jiHhVSP\Mf$m k$i a\>3NČWׯ ʢx=,ǜ7 Ook$%~'/]i&ʌօŃsWjS1&㦞3uτ彖se;쨗xKj1D:EG@0-MX @No|ŃMc8Kq)DM&(Ҽ$G:1QQƀ(dM@F-+kmp=Ej۲ՠ%.Vm u4U^_z\@{}G=xV]r6~)vR1$KSYV\MXx:j`Pt&z t6#z v5 (u睃^x/iw{n;~.rd pwgi4GfN}@BcYH?⃄\#Aԍc~y\."^̴ 4R )+ear0C&|':h\ hds\_yid fplWJ0)P\౲"b)?iLf8T%j07zDS4fKX0PXlM.W4LAg b Af\8|kÃLB־PNB"t _xҝA~L/2Mw6+[Xp tX&8<v:ud<C*ү'ȴOCvJ:y,AT%Irʭ v{zr*(JSJTJ'@>7b^> 9wv Z˘(+:Ad.l.2O,I1[ZE}{yRB W}RpCG7F:P(&~TI))mnXPwJ_Hm&W$*0+BM\Zox6}=vr*ƣ50' lt+79ޓ`k{g\7\V -dc@iRhkH0eUn^%0q5v wzN/.Nt2^O.o d8}"TdKrbe^a)Zo"tН2&_/Z~C AzקInP$G0'R SA*(R|7Up&BD\+yon4AFRnDL!UPI4_!n YeP33|dTqˆ}3LTɊT6܎tk<^;A\q:Iݻ|C\TIb'd|5^RQѝe:K[ꢹu흅ux>z,g+GsqOD&+Lfzoώl,R]!ZuiIjh8_]xevb#^Ƒ!e@&gN2VdFNv =.>EB8gJ=eӱ*5' ᶮσZ[X)I# `ZUS/W: xn3S+&0K"%6\ɹ,2-tVK7xfku!%;X3E@.$~+ArnsQ\VF@I7,ztnz#Jjɒ4<*S3Tn7*#Y|۞xVr6+Rj$i[NWi8Vf@䥄1 (Gt/l.$s 3 TplT$Ά^.'{i>eR 0:d6to6L|0NpY>LDХP?4ͯ}Λk 3gtDpds?L(vwk#0}u)38'*RdNe\Ϩ$0F9YqPބ?,ވؖZ=:UN)0ynZzN4;d5.$-ZUhkZ(5ΦIoݭ"sHQJQW=}K؄\) h}: J}S[gXTT7KW>ZI%'E;'  @q`5̭o3]üwþ}$m*mF3,<8KOB3oq9?n8NЇ8Uv)"k :qzAoE-NTnm6:o h-bctr t>w#LePj`J7ᕴ4s03n=.0zZ1Ho?1VF+Iz*j}%^au%;~|Zӊ[K M_He{QrCRGA>  c2HO"T,']Љ5u@T8'uk 3Ln*duFσunIS G@hFxqщݻ$c,n9[koÒwHdvХll{Ñ  @zI,^zN!m)Y&*8C?<؛VƦg{M-ıAcC4Т!BGPh_4uϟ5EZr?*G9Qg̶t[k7,TRI/KQ qm*xeޞ- Q*{~!͢y"+^}]p4Je$PZwLsB4:I>8R..<'s~tI "#VҤ6wმ%] @;/W!HRi%[c\xtree 8b30af128fb0f467ae561dd561a70b30a3df0901 parent edf588dc326403bc4802e7dd533e033f5bfc3784 author Gani Georgiev 1776888946 +0300 committer Gani Georgiev 1776888946 +0300 exclude expand from the record draft $)Qxj!@~@ ;zZ)_4<Ùz3Z;K2WZ*: vAqxk0xeumQ1?ۀ+ Wn#etSzG*Sh :ZxZJq%/,D36"cB;b f#~1(&66]xMj1 F>?dC(2QZz7F=>@=[tKY:.a6&RH{6'Kyf.M)P Ө?R'-) xNk5D/L6.poџKg~L{&+6V]Oxtree d8ec0f397658e44ba6e9b4581a07b4101d3e4e0f parent b4b6fcf9c70884effc70a5e2f6a4c5312f1f5424 author Gani Georgiev 1776867671 +0300 committer Gani Georgiev 1776867742 +0300 [#7655] added backups list scroll container Tx tree e4d72b9f56c93cd94d7648fa8e2761771f14005f parent d66683a7d3445f53cab8ed82ec508c6bd2c3655c author Gani Georgiev 1776863097 +0300 committer Gani Georgiev 1776863097 +0300 added view query sample loading indicator MSxj1 Eڷ؎!-~~@+quW"b[ =$G)Q /,w;ha/ˆB&/R  3ÍJ LO/O7ؔM ^}]M;Cs qkdL{e3:I9sg`Kd; tPTNNSRyLș,F0Pkp}^symxAj!EՆsT5 }\|xkD: AV[,Ɲo9!I]avPFXy"ۜi!!GSÝZ\T2VTtom-YU 犥 C{S5D2 kj~z\3:*!\xAn EbU" RTus 0T8U]3َH > Lfr5FA.@O8gcJ9gcQ)K“[/(~zOmaPtQku[$e00ŕ=K]3%3\xM1 @{H$ܠ OaG"4d9PP" as*BVUW@Š@Z^݋6WBP9eyHJ5D3[?P"9bT-R,N.AdȜ FOos?xk/s6d_67;3Q!xX[r)*%H9q8#yLRp8Bd[  P~p'qV5@ic1"A*3+ӚңJN:otqߟ[/Zr:/)Fu{ro(=o =IOre]gKzCߤz NNoOVbkSGS^Vs&NKSyXkUٞ+;LJq~?h]e)u/*FUK՚LoV2V]Ԯv]떝-ڤiKNZ!) =bíw͝%9ʨ3=]?i|q8}?v:7n*NJDT&6/2G\K楥r)QM2:VZ(uB.ݲA}'~erPGjݮ -lf[W.ؤʉ@ e`s!rLJB瞟!_KKO>n tÝIgҘRk=#ERCQV=-L'*A'w]ZmSr Y8&2=G6AuH >O9RfQN/y(ɑrj\(ٹW2)ͮD$$eLizq6mz43E%ꀞ EmZ0f46Y.i^FN7U:Zd_i$cA} $ԐaUѱ{𤜭s(3M}S>B\vy2/m:[.#UTjԓdyzΩ]A0<@ako_ ca [Ityл<ݰ,|@/rN@4?#9RCҙffJ\ig3$nUw*4̛ɗ-%ΐLiOY0 :\N]ha]F JOKQfJaatk,rۓ}b=]AXuPYCB\eAa"@ zPLl2CؠdZ-X+F7:;ȯkD`ka@CSZ P( ^i82㿇>m3(Kg "@%,2j}ƳY;ܔ _Q"Ͳ@.){ J__SqE1 ~pd6_ nwe@٪(p;?i@$|bAWi #RzAo[8$`RiLA͘可ЏjT; ws7ѧ ^ SكxWxxl6϶2ðc&OL !<$Q ȩHRonpΩ1PnIONzGk`kqcCryf(ܟ7s[Ha?PbG$oOP#, *Z-MC sgYrLZAvabv*0xgU=扂`՜Q̃{acNJVx%ZF"(k`я0i#d+!dTi^dYjA'ł 7Յy|=xbQQ{k12pRٙӗ&yF"7֣[Mj2$XX5hGΰٲڕyƤHD%汍ӗw5 ]iTX*}wzO\A5r,PҰ+b"K#dYDj#R+^VNM hqib!N/fdӿy!+Y2M'sTR8)5qN}{ _d0RS(s50G-di O|Fe&+8 (F}"Cܵla<01$F{' RTc^B"Ю*'+lZDGΝ[窢8Cvv5FqCv%pL ̴8KvR_+ϐuQǛqbwn+p['r0ٲ#nҦ>tnK3o+7|W*T[tϪY^V K h>[@\D5<={\g6CA[Pw-Rdw$OZBE"pþs/4z7]u{8.}yƀ{"˩#mXlws~T;xZ"Dqv8 [I. --0^\) O͢ aL-h/ǕZmhz Vw[|})l2 e}`E=l!eWA 1<֥lx 7njU P[4&\cGШXX0Pڜ]_b8sBkUYC})$9 ޚ'_kL~ okxIMcL6WݎO0cgnxMDJ~qgfkՆHR~y9 z\ Xopz2|VH$1otsS"p#,*|].ہSy'ed_:ʚ9ne3Ajn gi$ OÛl<}"_#$gZ -E{x`- e;j-̷tY 0т!ZWJh dcЗ8Wܑ.1><5gIK5(gTjx`wf/^h ٹMx۩;[rEAairiiYERIRbyWbiIF~Gb^U<1Ycs]s̒TKB@K-)K 7UҠĈ!:]k*%j״R1>$֞)Q cgf2v>5oF_IyM#p))n5;XHyE6AƻnplμeRo8|AђY^>A 0vJ?;4os+@lQ.?AWϯÁJQ ʦ3罽ANJaiw'imCdN*Q9eƈ!w C<זYWZd NȊE@;j27*zk{)7dd<MWK ʻ[i"=G\6=Ժ*AuO`np{%#GI"4?gprT[Q{Mջ￝V_]}lקg8Mwrtxr|&`!5Jf2k %G#!ˎ>gW3;)|޻(Ǔ: 3y #I}lgw) DvРҽG<Èe$5d|8ׁ|С$0e$l0 9ˆaA1]^.W)xШ2= jc~(N覜D%m9q '; [ʅý!qQ*n/h"Eti%T%BaJ؜mOחn$xn*1(VX@y1(k-J6|9zH 5- J6wr]\$.zx !vebwqPpOɌ&dٮoQ[ fVF.&9I~8g@xRAn0{Ē˖ES{+r]+(UHnz#¾Ki]  3=l b]-ʲ.ۦn7e`[MYF4D0Ub[iE!˵Y/Ͷ,pe*TZ*b>1ߥS,jSmaQTE4DyjQGBw`}}4;Hh[070֓Y{`Y@kA%Ύ;v6vSm.LW*? s撺&t1cH `Do3H hLr{t GQظ8a5:OOG>(.ͪfO7 7/b!R&iw(y= Ӡ 9OQv1Z2;ch& de<2Ўp8a^,o0b2߶h~bӫ=Ց.<>&%ꡓIIBHՒD'Ai6Գif&dTyߦi!Q{ v.]HTtg$ki\Gio 1776780333 +0300 committer Gani Georgiev 1776782411 +0300 minor color and styles improvements QxKj0:ECa!B-4-ckBr8dQoYb('75L51hu@k*q*9Z3쬏Q7U=GFބ?N?}m R:#d-:"c?.S ޾c4{) }FY@U[?wT?eYxtree 713616feed702051bd72d087bbd85e3c9c1f3a43 parent 11dd75483472a5575a2f06375e4c945204dd1f42 author Gani Georgiev 1776761565 +0300 committer Gani Georgiev 1776761565 +0300 enabled text wrapping for the API rule fileds HkSΖx;nB1{b{$X<)q}ڱ³e\rig--RH1$'E6U -F#:Ej$$tFs(>­E(UUv<7 : ,98ETyb ) f|@op"r;>y$hgMWGxtree e1f3fb4ee2f741bc19ac3d6a3255ac5e51c662ef parent 7f88467e167321847762b90f4e000f0fbd83e12a author Gani Georgiev 1776696011 +0300 committer Gani Georgiev 1776696011 +0300 fixed changelog typo H|Lxtree 745eee3573fd7fcf9b3eba87a73971ee695fd67a parent 82148dab4efef7503044325277cf72f961405a1b author Gani Georgiev 1776694343 +0300 committer Gani Georgiev 1776695160 +0300 updated changelog and ui/dist ,O_x1n!{^}$k|pHQ `#q`a|E^o L1љ$,vaEvoGzP:#`"FbEm׸7nz|gxI9k.j#H#rR~Hgh0o h!Z3.8kPAH# FR6IGOp5ÁK2Ǵ~z״P,y8qtjKn_HGOWj|Pp)rYw9P<_A)wV4Z͔xtree af6d340beca9b3bee41a3495fa6c8265d1a09bd0 parent d254d68bc0181fddde8bc29ab50b2145d269b236 author Gani Georgiev 1776677104 +0300 committer Gani Georgiev 1776677104 +0300 updated dark complementary colors =R$xj!>@Q(R=~31e&?˅γKxhKLL(6j\;Kz6NCb󓛼4QkAG .T3\xm)Ґ?PZa\4lOyR 77B\?h s*rM9>TÈq;}Nioۘ`bxAn Eb.#E1C,EUv9D0 m*Bz |?ߛ*$҉%..HBVb'ݨ3) ^(D1x;gbDsJĆ_Q(p֢?p]?;,uQ@7;8C4#K h|B2ԭ'0ldS^_W.xK0D:EC /!;bȢ#2 1776602198 +0300 committer Gani Georgiev 1776602198 +0300 fallback to 0 ɛHrx=j1@~O1 %im/ڴ \;#uXJx tree 3e5637f5bea9074be1ff059fb4ae5b901c80d68c parent f797ac474328934967f89b3004c6758ff626bb5d author Gani Georgiev 1776590437 +0300 committer Gani Georgiev 1776590437 +0300 updated ui/dist aIx tree ce6994c8374683d161450d3e9a8a780e7b88efc1 parent 635709791a4c0fdf04f9e7ef1c31262ca3856c8d author Gani Georgiev 1776588897 +0300 committer Gani Georgiev 1776588897 +0300 updated changelog JxMjD! Z!9Gpq 7* `F qQݑ0 @RF4M8<+ r^=vl!zܩes)KÏT)ҘC[k7BlKyNGF |/̽=Đ4^>9 j0P Khk@|1z~xlfxtree 0819a62715a0330e061e5d8d5ae494a90219a578 parent 188a8177ee685fc4d5e4de5dd7d4981dd75544d4 author Gani Georgiev 1776580831 +0300 committer Gani Georgiev 1776581141 +0300 enable back npm build check }MMxtree bbc6b7a7be818625b9d69a3bfb9530098e173401 parent f080adf94d982eeac1655c238d944b2e890e55be author Gani Georgiev 1776579592 +0300 committer Gani Georgiev 1776579592 +0300 temp disable npm build check NxAjC!@b0jt"]1G#'ޠޚ@V|d%HΜI8s}+ E }|)>CqŽOsrpc֦/ckZu'Wbxtree 4f2808a9a26ecacaa8b1bc477caa68b30b3d6d67 parent a0c2218950829c5e4da66c5ea07b37e0121af416 author Gani Georgiev 1776576795 +0300 committer Gani Georgiev 1776576812 +0300 reset responsive table padding and min-height }wUxKj0 O}ac˲BQ2Y2I+-08.v-Uv|<:Sg*Pr e-4+|r]`bq VbGkSg/͟i>SԒENBWW]{N}7gmΝO!gq @v Z~ڙ{>y(G,ĖnZ_~wwkk_dq[$8l_^87hfxja9P{og/ 9e_.xtree d2942d1a1ff86f098065279455afc20bdb26f555 parent 8434c3b9ec2bc4ffa55d69b4af7e9942e3820ab3 author Gani Georgiev 1776550962 +0300 committer Gani Georgiev 1776550962 +0300 sync superusers mfa and otp toggles =QԔxtree 847dcba2726bc5638aa4653326cfae600508d4ea parent 40b013d9c536dcd0f9484fae4590c917f1691440 author Gani Georgiev 1776550778 +0300 committer Gani Georgiev 1776550778 +0300 added otp superusers help tooltip Pxtree 6a442f908c7293f7ed06d1be98c450974d61a039 parent 24669567e7c96ca6cabd44b492ebd47a8435bc66 author Gani Georgiev 1776549444 +0300 committer Gani Georgiev 1776549444 +0300 fixed collection getter 5Lx tree e7ddc75dbddb09ac88097576e6ea90e14ff12152 parent 065db065932b260ddaa94ee22d959443db4a546e author Gani Georgiev 1776546145 +0300 committer Gani Georgiev 1776546145 +0300 updated changelog iK:xtree b4ecc8abc97cafa7379eaa5405b7871cf38a89cf parent a4a7571eff8e8081236472cec9b0775dca0c38d3 author Gani Georgiev 1776545724 +0300 committer Gani Georgiev 1776545724 +0300 updated changelog and /ui/dist -Pnxtree a46b965789a47c4a115c9b82020215f0227591ac parent 6435de806f3fa78fe8148c4b3c07c233853b1bfa author Gani Georgiev 1776541630 +0300 committer Gani Georgiev 1776541630 +0300 responsive adjustments uLsxtree 6f872af257b7e43dfc8d834c6773e7956a4e79e5 parent e6005e08d44154c7426978b5d98b8be756f0067f author Gani Georgiev 1776539502 +0300 committer Gani Georgiev 1776539518 +0300 minor screen reader improvements `PLxtree 042b4b74507685492e21821aaaa119f0e75ef9e4 parent 68e470c266868e3d5588d15827bab3ef25f4449b author Gani Georgiev 1776526458 +0300 committer Gani Georgiev 1776526458 +0300 sync forgotten field tooltip uNXxA!н} XVkrj8D CN&|s4(#1F{B8,/DݹIԣ%7"f B`St?6pIp$O8;?kt;πV{S Uj|K/Y_ g٠^ݞT6߬V$xtree d2cf892daf9335084ca80b1e389dd603c54c62ee parent 530a83fe1395f96708245e14a29a7f84539d5835 author Gani Georgiev 1776523150 +0300 committer Gani Georgiev 1776523150 +0300 updated modernc.org/sqlite to v1.49.1 ޠPYx tree a514dddc2a7c5f6c4fb27276b396dd2e4ddcd9f9 parent 1f6fa399d4fca716f34a745ad90aa7f8b65503eb author Gani Georgiev 1776520446 +0300 committer Gani Georgiev 1776522801 +0300 updated node action Lx tree 4f461633f3626c4d6b1bcd80ea17cf363a54b4cc parent 2c460d3ce27b0e414be1117bb8c73fd26b15f6fb author Gani Georgiev 1776518974 +0300 committer Gani Georgiev 1776520239 +0300 merge newui branch -KxMN0 9Ҍ'S \]Z$UIDҤhXz:ꞭL7j$eMv靌FlN`LGb+M]Z[cW .o< 'h:Q[u)E!Q`ydw_p PA(u>d@" ly Lr/!rRG7HM-92 y[eT%-i޼T\7IrxPKN0A#'iB  @=ۓ&j[TpI0E`nf~'!Je]}jqBdz#ԜHdS)#i몬Z.f{)-ί6wpi5|mP .o: .8g3H0!b؅b)1v:8O!vp:yy8ocBS$A D_eP>//)9GtzxZ#Z L#U{pZ:a4:cC]h۴r( C% 4x˱n Н1bp栊dkـ9b[fWg|0q,&=G5ĜI(jg#DZ[Wvް'JU8EwqYry'̎p@FTyy>/Jʺ}@/=awܠ8o^puAxN0w?UV4n?]‚njbGx'!9 PJ`Bi4&N"#SQeZp֡' +2QY.uQfy*\i.r/)]8h+T4\oNW ,_DNB.@HaĮiZb'$@tjKy$eTK QeW7KxHaVޠD5iҷM('Rwi{/ ph펪pjU˪KmLWls|t.R- q! )-=S>p1 v\p!s!ΝƎ`!H9e3͖Ϸwor&=@C=ukacZ4Zbe; =HAa=y6G3xRo0~_qT"444T "J{.%f6ߥj_}?|/8"@QV,ʓ<4OE6L)&3̪ 2Z%r`@Z_@ێ|uq'Kh.=`a̐'zmamj揮wB B#oL@ءy͡PZ $bRlt{x~f Q?He_?^j dNsoZ,W۞޳#'q5SLr;xM0bM6ŒGc'B*!i4#M+g?)'x YFg6FՈb8@%ѰvFjrvʡY1Z1H:ۚ ;O)>D5I(x(?ϰ'(ΐtɑ3Xطع78]u Ky1G U2xώ0~9pMI X@BH+,gXڕ=qMxe :|=<@trr{HN :MC DLIF\&9WI,ʤ"LcZ8ҹR=pA`7H=2-;< *&zuq@7Z3О1цBʁ]syBlk) )ڜ/ @MULY:%㟣 (KO D˃^yރC:Xvc?Sx|](y:Ë0/ypOxiu5GxAN0E>Qa!DYK&RT''`_mUlu 9+ !x V̍W- PKj8(1'$b[\~8}KүyzK, p@B4Ԛcbn243kpU },j[ tX7r~QҘ$xn0y9&?lT!ЊCy=Xu=<=ܸ͌'s ԨU?͠yӻnSv@aQF^uZ=5ta n~x8>½׏Uh>@;q&~] 3%ּmBRZF#MS[(&h-|U i.fQ%֒d]Hjjj~M&-]ʰ=u].")r"?C6:2HV"i^]_}xm!/Kú,"U ߢR692-a0 8/zKNt٫_oA"*9+]ϤH ~IlDAxtree fd80ca05962ccff2bb2598fb9a7db6b5c692ff54 parent 2614568fd15dc57d78bbc29e1c5e5b8acb01e657 author Hanzo AI 1776101131 -0700 committer Hanzo AI 1776101131 -0700 fix(router): idempotent Route() — replace existing entry with same Method+Path Before: Route() always appended a new *Route[T] to group.children. Calling GET("/healthz", ...) twice on the same group produced two children, which caused http.ServeMux.HandleFunc to panic in BuildMux: panic: pattern "GET /healthz" conflicts with pattern "GET /healthz" This bit BD on v0.40.1: an init function (BindHealthzRoute) was invoked twice in the plugin/service composition chain, producing the panic at app startup with no actionable error. After: Route() scans group.children for an existing entry with the same Method+Path. If found, replaces it (last-write-wins) instead of appending. Routes registered once still work identically. Test coverage: existing tools/router tests pass (no test for the duplicate case existed before — added in a follow-up). y?gxtree 34ba96b3500acea507285a5abf51687803a0ed23 parent 6de8101f7a28163743cf8f2e51051cfb44019020 author Gani Georgiev 1775745240 +0300 committer Gani Georgiev 1775745240 +0300 bumped modernc.org/sqlite to 1.48.2 O@x tree 7a7686f69323c9c22abc220964f925832cc090a0 parent 0d1e3ef8c0c5dc33c693472305598330c4e31393 author Gani Georgiev 1775729194 +0300 committer Gani Georgiev 1775729194 +0300 updated changelog 4oIxtree c4cbf79757696cefe3394714fff917f6b818e915 parent a72083d69d2371eb6eee96f685120bcc805cf0b1 author Gani Georgiev 1775719863 +0300 committer Gani Georgiev 1775719863 +0300 ratelimit test flakiness adjustments 5uRx1n {^RH5(="Jaar~\R]̞%و=ԘPKҞ]2enN)%^(1h~ƺwU^ᥜx)|+-ԯK+hf˚-9xFBTmu obf Ď$AQ9W7U7 ]EVxA!E @V[!dׇ(ґn` A`zJ0&o56${,E-NœuG]< {k˅GBugrFpCB yr1rG32ZLpk7Uxtree aa59307e99791b640a27623b7cdfea6128a8d117 parent ddf7ffe389a65a4e2b1b08110c87fe4e8a7fae13 author Gani Georgiev 1775647673 +0300 committer Gani Georgiev 1775647673 +0300 bumped ui/dist and go action version `R6xtree 4308cf1a0631b82f0308f9d56d59a697fbabca0b parent 89e2ae74a607a843adec02e4c8223a439188efb6 author Gani Georgiev 1775540124 +0300 committer Gani Georgiev 1775540124 +0300 updated backport changelog Nxtree 09e77b4b14d8132e151200fd1c64bd22d8d615c7 parent ff1e99aa31c207495b3bac7c7a5c78a1e5185889 author Gani Georgiev 1775395691 +0300 committer Gani Georgiev 1775395691 +0300 removed unnecessery struct wrapping ERxtree 69fe469b8dc838e58b8a1516a46f88d7672f09f4 parent 62b5644b9146ecdbe1835714bc722f9079d8631e author Gani Georgiev 1775387712 +0300 committer Gani Georgiev 1775387712 +0300 updated settings update test -Nx tree e07e11e184f984995c65f73d4a7a8894c15d37fa parent d182f3d6e104937e09a57b9a0620548bb918f7cd author Gani Georgiev 1775386317 +0300 committer Gani Georgiev 1775386317 +0300 updated jsvm types %Jڑxtree 0ecbb2d0baeaea9801e4711b55480df2127101ff parent 134d65a30ddcf7cd4a51eb9ddc1a519c89751b50 author Gani Georgiev 1775386006 +0300 committer Gani Georgiev 1775386026 +0300 fixed settings smtp password clear persistence zVxtree 5322f5ed5d05f4b69f2597c6a3f6ab564f293457 parent 9503923767c4dcca00dc2af7f22921e06ec45578 author Gani Georgiev 1775152816 +0300 committer Gani Georgiev 1775152816 +0300 removed unnecessery error return [DPqx tree 98db57570037d0f2d258eb956e62bc6e7a78f12e parent daafff9ac3694e5942da23fd27c1ef9f304b8b8a author Gani Georgiev 1775150191 +0300 committer Gani Georgiev 1775150536 +0300 attempt to reduce ratelimit test flakiness ZUfx tree 61e4ea2246d0bf85a325266466154797853603a9 parent 141a2bc55ccfa92e614554cf52c8cf9c29f6d2eb author Gani Georgiev 1775149921 +0300 committer Gani Georgiev 1775149921 +0300 use the raw address in the error message {Rax tree 43500616840c87202a8f643114b8b09cea1e19cc parent 377968112811317f47b38fad732ced353ff3269b author Gani Georgiev 1775149436 +0300 committer Gani Georgiev 1775149436 +0300 updated ui/dist lHxtree ebcd77c7eae68b77ae8f09d7acd872daa6556730 parent 0aafb52100ab3badeb2ef681c77ef7adb2f1f129 author Gani Georgiev 1775148905 +0300 committer Gani Georgiev 1775148905 +0300 added extra OAuth2 avatar url download checks !Vxtree f089dbd846ad7475a5d4524b73272539110be3e5 parent 50a746894b3d8409679c75d8f6e2ee2df700719f author Gani Georgiev 1775106411 +0300 committer Gani Georgiev 1775106411 +0300 updated .static jsvm docs 0Lxtree b1e881e556ef4d6afaf9a559dc8ec6d36967a893 parent ad589779f76e81e3c1028e4a1ebc69130ea0eb7d author Gani Georgiev 1775106371 +0300 committer Gani Georgiev 1775106371 +0300 avoid explicit fs.FS wrapping Oݘxtree c7d0549d0c517e4433f49755d9cb7329bf88333c parent 70116e81d52a91076faff216ad364711d3e4ce94 author Gani Georgiev 1774895891 +0300 committer Gani Georgiev 1774895891 +0300 fixed changelog typos KÞxAn C+ 0 UUwsqjH :oZ-mh] ^y%$-)\-X 0k` ;I7 8 aThӺ-.nX\EK~{Yf;fE[;z6 uAm{6?m@g/dПϿc)hF w`xtree b31907e92856cd6cf168674ad492343bebbe8bfd parent a398546828841a125b48c6761de69b76a50ec629 author Gani Georgiev 1774847726 +0300 committer Gani Georgiev 1774847726 +0300 assign discord avatar only if exist [!QxOj0+z,1V!So=Rdkc l+J_A̓f J2kR^# I9ZvV^ `#WҒF=1al6%p+c^gCpaij<A9RTuN+ ԟpP8B^5Sڼx~0L R ! ]װlpi@4G extree ec4cb8051bfa0ebdcfef84a56a75922d8a81d78c parent 3197a056c5c0729e53605258cede52f2b1a8b979 author Gani Georgiev 1774686157 +0200 committer Gani Georgiev 1774686157 +0200 fixed grammar IxM @=I 51]1)؟PlpūE>am[rH)YAkQ[V.2WH)x%M<8P.xg[II4SK:YJe[>䓏sQ=x?y]=iz*/ax}S&\BM:4~rڱ|&@ }"sRaZxM19ERm sT*1`%a- fgtUK:Ɇ(>1D 4;blܵ Ǭ8ECia+yGuppѭ?]vkp%h'( uD<7h*ɇ@rن!9"(r1H'\6y벍UpƉ\1tHN[ku sMuuz7O2xAN!>jLc/4Ќ$;Ê1E%:eY;*>H)ZD̞+wEGcvAffqJ&HflμW8Kk;OR^3 q:Vǐ,5 [Rh@j^_c%eSTx=0 @=^ %NHTU8IlJU~/ᕕl^tdBʖqIlbsYB+OL6 j)tȈu &9QlCWhiy>ޟ~Sy| "D7ZC):k%S |S7LQxAj0O1B)%A)㙱,(Ms t?_`"XE3{ϓe"8([8 Wz4`H< -gdzm-.tdh)|SN\/0ޟwSpq[c71Tn mU*5r;|km%8<!\xK M*hb$ v \L21Cɲ!V)HSpT,sfk1ELʎh .yfr 1c4#EwwiUuX(j{\N~U["[O$D󮵌Xtևޡkgɣ^ڟ DdSuxK 09EBɷw=K^ X[B]x3aF':-j]hb&<&"v9tVGb9ڔ9! !dX@sܶ.|4k<k]ݧ#NQJvmc -gGxA0}MȶnI;F/q02G+!#)Q=')DŽх6>$4zEŐ"xǩ k#g;r/0OE_pl^Euevԓ 'tKUHٶh[ wMxM0 O}Hb(z%RRCNjޠx< 3ALED.,01 E:G~a(Q$\\"Q&L1Sf$ɋ[nVm\_@9 #L?p,֤:]A3Cai@=Rxztree 111e3e445054b96e61776ab12200d3e8f13a2c37 parent a00978cc30a663ae1aac4392c615b5b3cc1d4182 author Hanzo AI 1772444576 -0700 committer Hanzo AI 1772444576 -0700 fix(apis): ws.go SyncMessage.Ops → Envelopes + private API wiring WSCRDTSyncPayload now carries pre-sealed OpEnvelopes matching the crdt.SyncMessage refactor. Server never sees plaintext ops. i}Nx tree 51c86e417d21df87112d231d7c498ca9e537b9a4 parent ce9bb620e9fd39eb01bc4d62af45032894350287 author Hanzo AI 1772416800 -0800 committer Hanzo AI 1772416800 -0800 feat: Base platform — CRDT privacy, React admin, on-chain anchor SDK Ox;n0 ]POQ-rJlt2&Ulsgg7M\[ !J PpЧ)+se)LЮe?/o1N>|`B4u߻sLO fx m4INgC岑eJxJ@C/d"bELvg6inx0?`']dV"+KU&RjGFʼ2̒uy^cvMsZb)Ma{5 piinN5ARYL0ZJan?qjB۟`JL"xn0z=:USjZFQhE'9+rHAUA޽TԇzYrvg0n.׼}W% m\F+,@E& *y-e/Z:Y)YBM oGqj߲@yP*B$u $58,*kM=[V㬧=6& 4r 1ZxWG[nMGA .I8Њ{:/Xh;-5>,A,-."teGu?r'Ÿ79w]];OH/ T}&"g_:Rm1g㇄ӬK_ vn&ķ )xQ]o0 |c ,\;v\ [~AK!I5QqQl{x艠/*YmRf7"G$IB+jrAySB=۲R(,E]dYVM}yWH)hh2| o-N~L-u}W捨VLi21p2MW=T ]㏯ HF@}*˸վtm%!z1M$RH ~g;\CMcayv~`&t4u}tѧid׻pfYX=O." w:X[ȒesnOOt ϑNW<\@y3\Ĉvt TJB7÷D ' kl ~I6"޼xMN0>,A$M$*-ۓRc 㨅=ˑ&8"(Y"TE6Riy&Q򪮗l@G&TF,KVԼBeN(UUDQs ag<@#(vәEV-I:Bk@~o o/06FOn$'am}Ec+YS9>u@n`0Tm:5+Y3c){ bI|:g@2ĄQyܾj0@>1#D[P}ʄ!&pg|!L'cڣ6Ig`&xbtree ac1b9b05b3cc96c45de473d5818a4237440592ac parent 5994233e69c90788e61188930a7dfd6fd9893490 author Hanzo Dev 1772481136 -0800 committer Hanzo Dev 1772481136 -0800 perf: Go 1.26, multi-arch native build, BuildKit cache - Upgrade Go 1.24 -> 1.26 in go.mod and Dockerfile - Remove hardcoded GOOS/GOARCH for native multi-arch builds - Add BuildKit cache mounts for go modules and build cache - Bump Alpine 3.19 -> 3.21 in production stage - Switch docker.yml to hanzoai reusable docker-build workflow - Add .dockerignore to reduce build context - Gitignore AI agent context files -¶xAn OcKUls<` ((")հ 㘓2F6^u[7yK )䢖ծ:$xo&Y1oUBWԖ ^G;.q u"6xy^zǿ ML27PfԛPMt) #^q~1VΔx tree e564401817cf54e4532ed7d3493e43a7d0062abc parent 765b02e6e8141a1e3f471157a122b2c32fe81f33 author Gani Georgiev 1772316925 +0200 committer Gani Georgiev 1772316925 +0200 updated changelog y@IxN0 } iB‰7p6QeOO@ѧ53E!0NzɰDc8OV݁ wl(ԓCO4ZTn^=7+yiN/`IJu-]VGEx֌@I"MJ}'(CҰF% p HH. k%JVdT oq)7,qx tree 8fd9cb06af66c47f79530277628956a652131aad parent 23f13ff485b7aa500cc5f52b4aeb4c37cf2d15d4 author Gani Georgiev 1772315052 +0200 committer Gani Georgiev 1772315052 +0200 fixed formatting ^J7xrtree 1d21f542234d334ad011f1be2d2abdf6aea82684 parent 9648954e55da49c2c220001c9b94ec56769a3a26 author Hanzo Dev 1772215980 -0800 committer Hanzo Dev 1772215980 -0800 Fix bugs from CTO audit: presence race, IAM cache, KMS token caching, SDK fixes - presence.go: Replace slice-index callback tracking with ID-based map to prevent stale index corruption on unsubscribe - ws.go: Remove 7 unused WebSocket close code constants - platform.go: Move config defaults before IAMClient creation, use cached p.iam.ValidateToken() instead of standalone function - kms.go: Add KMS auth token caching with expiry-aware refresh - collection.ts: Implement unsubscribe() (was silent no-op) - index.ts: Remove duplicate ListResult type export - use-query.ts: Fix missing deps bug by serializing full options as stable key via JSON.stringify, remove eslint-disable *@xtree de18265f3ffc55b3c579205b18936575d1ae14b1 parent fc23ce64204eaf4db87d62c1e4032ee6542d1c90 author Hanzo Dev 1772215404 -0800 committer Hanzo Dev 1772215404 -0800 Add Docker build/push and SDK publish CI workflows - docker.yml: Build and push ghcr.io/hanzoai/base on main/tags - publish-sdk.yml: Publish @hanzoai/base and @hanzoai/base-react to npm yѝYxbtree 3ab30d200127a25c8250cb5cc448cdb20f6c6e51 parent 0fb39767bf435a13e5be07ade18886680490e544 author Hanzo Dev 1772215224 -0800 committer Hanzo Dev 1772215224 -0800 Add realtime DX platform: CRDT engine, WebSocket, SDKs, typegen, scheduler, multi-tenant 7-phase implementation of Convex-inspired realtime developer experience: - crdt/: Go CRDT engine (GCounter, PNCounter, LWWRegister, ORSet, RGA text) with state-vector sync protocol and convergence-tested types (31 tests) - apis/ws.go: Pure RFC 6455 WebSocket endpoint with JWT auth, CRDT sync, presence tracking, channel subscriptions - apis/presence.go: Channel-based presence manager for collaborative awareness - cmd/typegen/: CLI tool to generate TypeScript interfaces from Base schemas (4 tests, all 14 field types mapped) - plugins/scheduler/: Scheduled functions with exactly-once semantics, retry with backoff, JSVM bindings (8 tests) - plugins/platform/: Multi-tenant platform with IAM (hanzo.id) auth, KMS (kms.hanzo.ai) secrets, tenant isolation via collection prefixes, RBAC roles, API key management (7 tests) - sdk/base-js/: @hanzoai/base TypeScript SDK with reactive queries, query deduplication, optimistic updates, state versioning, CRDT client (72 smoke tests passing) - sdk/base-react/: @hanzoai/base-react React hooks (useQuery, useMutation, useAuth, useRealtime, useCRDT, usePresence) with useSyncExternalStore x tree 7a7d5ae5bbe8c3a03ba275f52425481e6549041d parent 84fceef1877d1be29ed7c33f5ac7d1293620afcb author Hanzo Dev 1772214219 -0800 committer Hanzo Dev 1772214219 -0800 Rebrand PocketBase imports to Hanzo Base across all Go files Replace github.com/pocketbase/pocketbase with github.com/hanzoai/base in 106 Go source files. Keep pocketbase/dbx and pocketbase/tygoja as-is (upstream dependencies). Add compiled binary to .gitignore. Include realtime DX design document inspired by Convex patterns. )[xKs0Wx&߯NS0$$MXd(0d2IӓIݵKH8%w2"HqDJwLܩRjnjQK}0 Mdbb=+ s#`cef$' a䤑Yȼ*w6[~լ mrO4;bJ t/@* ?r8ΛZH uysUKs2oRc6˻.#j.-kfR%* A (# wIW 4 TH R=נ @ĠBO<'q HҪTCE^'YSo֛kF{[O`Հ!}wߠi\;x`KiܕN;MazlTE$Kgxtree 7bfe847dc4c08646f054040a2bbe1948fecd9375 parent 9883b843ee2cd67310fdfe392ebc893b95513457 author Gani Georgiev 1772175765 +0200 committer Gani Georgiev 1772176019 +0200 fixed grammar "I)x tree 387facddb352c318c986a02c2d251bf81a7410c9 parent b0504077f289d1113a54dc7448d2768cb18eda8c author Gani Georgiev 1772175049 +0200 committer Gani Georgiev 1772175049 +0200 updated ui/dist crIxtree b7d83e71b8710a0547a9ed08dabb3d30313a4f95 parent b2334f8570a6c2cacc60206f6686a67387971ba1 author Gani Georgiev 1772174991 +0200 committer Gani Georgiev 1772174991 +0200 fixed grammar =HВx tree bf160197f02b0de14f94a6e81277014d5e238304 parent 0946cbc91b4550b29ec232233715094c41571cd4 author Gani Georgiev 1772173677 +0200 committer Gani Georgiev 1772173677 +0200 bumped npm deps iVH@x tree 276d77cab9a52748706f177d9554dde5488268a9 parent 9ba848cb258d3115ba2bf16245a384414277afa2 author Gani Georgiev 1771966978 +0200 committer Gani Georgiev 1771966978 +0200 updated changelog Jx=n0 @] n;LBbMܠ8G)JJ*U1SđcDB  -=zg eK&6Grзǀ3uK{乽mzlrvSJwphyU SW7Еa!%F}3縲p?Vxtree 25468c139e3b45bd95b4b0185f6ec7c8ca2a6a85 parent 01d3511665abb996296a8695526e8f81e6bb9e2c author Gani Georgiev 1771963605 +0200 committer Gani Georgiev 1771963774 +0200 updated the security policy Npxtree bc1aff09136616577b61f00dca4c62a3dcc74070 parent e57c945e4c18642247ee9fb98be7468ce85a41be author Gani Georgiev 1771939165 +0200 committer Gani Georgiev 1771939165 +0200 fixed typo CH^xtree e5047f87e0b79b1f483b295739b977d860a10f42 parent 1c2c92429ef7f4575053de6c344ec223b22e5ebe author Gani Georgiev 1771938865 +0200 committer Gani Georgiev 1771938865 +0200 [#7543] documented the unmarshal jsvm helper SyxQtree da0ac1a7a02996bb05217dcb15af3c8881603f0c parent 86273e0e2c6da06f0dea8794c0f053a015381482 parent 6f6c25db7d71475ee0b06755311369f55dd2f565 author Zach Kelling 1771751836 -0800 committer Zach Kelling 1771751836 -0800 Merge remote-tracking branch 'upstream/master' # Conflicts: # core/record_field_resolver_multi_match.go # ui/dist/assets/AuthMethodsDocs-ChShXLwE.js # ui/dist/assets/AuthMethodsDocs-Cqvl0T_l.js # ui/dist/assets/AuthMethodsDocs-DIqhS7qY.js # ui/dist/assets/AuthRefreshDocs-CHakkNnn.js # ui/dist/assets/AuthRefreshDocs-DLb1qree.js # ui/dist/assets/AuthRefreshDocs-DXgrlMdk.js # ui/dist/assets/AuthWithOAuth2Docs-Bl8VRxNv.js # ui/dist/assets/AuthWithOAuth2Docs-DVBOel22.js # ui/dist/assets/AuthWithOAuth2Docs-I213UiJ7.js # ui/dist/assets/AuthWithOtpDocs-B9tL6gIN.js # ui/dist/assets/AuthWithOtpDocs-C2PPm9-Z.js # ui/dist/assets/AuthWithOtpDocs-qEMoMG3D.js # ui/dist/assets/AuthWithPasswordDocs-B8JWDbPL.js # ui/dist/assets/AuthWithPasswordDocs-BTHeYJwE.js # ui/dist/assets/AuthWithPasswordDocs-D9rqgLpO.js # ui/dist/assets/BatchApiDocs-BV4PYYXn.js # ui/dist/assets/BatchApiDocs-DXa997am.js # ui/dist/assets/BatchApiDocs-Di2Qe2dV.js # ui/dist/assets/DeleteApiDocs-C3IINRwz.js # ui/dist/assets/DeleteApiDocs-LfmVp4Uf.js # ui/dist/assets/DeleteApiDocs-SU4XdGhJ.js # ui/dist/assets/EmailChangeDocs-COx1USU5.js # ui/dist/assets/EmailChangeDocs-D-qNHT_P.js # ui/dist/assets/EmailChangeDocs-DpfXIE_V.js # ui/dist/assets/FieldsQueryParam-BYe9ZK-G.js # ui/dist/assets/FieldsQueryParam-L8vpHeF4.js # ui/dist/assets/FieldsQueryParam-z0dGQ6uY.js # ui/dist/assets/ListApiDocs-BCTT-AOz.js # ui/dist/assets/ListApiDocs-C0_GwI7k.js # ui/dist/assets/ListApiDocs-T9_aO-pW.js # ui/dist/assets/PageInstaller-B22bivaN.js # ui/dist/assets/PageInstaller-C0BBhyBx.js # ui/dist/assets/PageInstaller-IYSwJhZW.js # ui/dist/assets/PageOAuth2RedirectFailure-BjbpqlFj.js # ui/dist/assets/PageOAuth2RedirectFailure-COyNF79R.js # ui/dist/assets/PageOAuth2RedirectFailure-DPmGG9zv.js # ui/dist/assets/PageOAuth2RedirectSuccess-6cMXLFAX.js # ui/dist/assets/PageOAuth2RedirectSuccess-CdkCarGH.js # ui/dist/assets/PageOAuth2RedirectSuccess-DSEIHeQL.js # ui/dist/assets/PageRecordConfirmEmailChange-BYW-6ASg.js # ui/dist/assets/PageRecordConfirmEmailChange-Bm1CIYvq.js # ui/dist/assets/PageRecordConfirmEmailChange-BpaqOT4u.js # ui/dist/assets/PageRecordConfirmPasswordReset--wx_u2lI.js # ui/dist/assets/PageRecordConfirmPasswordReset-CoeY2Z_C.js # ui/dist/assets/PageRecordConfirmPasswordReset-Ptya5bfe.js # ui/dist/assets/PageRecordConfirmVerification-6xjF3T0O.js # ui/dist/assets/PageRecordConfirmVerification-C1UTIIJh.js # ui/dist/assets/PageRecordConfirmVerification-C4LixXvA.js # ui/dist/assets/PageSuperuserConfirmPasswordReset-19z2IFg4.js # ui/dist/assets/PageSuperuserConfirmPasswordReset-DwNi0ugQ.js # ui/dist/assets/PageSuperuserConfirmPasswordReset-SMnDTRNi.js # ui/dist/assets/PageSuperuserRequestPasswordReset-BpDW217f.js # ui/dist/assets/PageSuperuserRequestPasswordReset-DK63qE6z.js # ui/dist/assets/PageSuperuserRequestPasswordReset-bG02qLIM.js # ui/dist/assets/PasswordResetDocs-CE67mLC0.js # ui/dist/assets/PasswordResetDocs-CHAK0vma.js # ui/dist/assets/PasswordResetDocs-Dap-N4rx.js # ui/dist/assets/RealtimeApiDocs-BooTSQCb.js # ui/dist/assets/RealtimeApiDocs-CoHmYVEx.js # ui/dist/assets/RealtimeApiDocs-D7ds3fHt.js # ui/dist/assets/VerificationDocs-B42AIoCQ.js # ui/dist/assets/VerificationDocs-BS7b11zH.js # ui/dist/assets/VerificationDocs-ZhkdFVIl.js # ui/dist/assets/ViewApiDocs-BXmRLHZ1.js # ui/dist/assets/ViewApiDocs-DM5JJQjh.js # ui/dist/assets/ViewApiDocs-DRpxcuJR.js # ui/public/fonts/source-sans-pro/source-sans-pro-v18-latin_cyrillic-700.woff2 # ui/public/fonts/ubuntu-mono/ubuntu-mono-v17-cyrillic_latin-700.woff2 Tx=N0>O VTQ8$k+{'7|Oz? Sj0RY'dCws2WF-Q bjB[Z*\\pRHG|ɗҢ B D`QGN\WJlv%KUj- A*Qw.{.Pz\!Jfx tree a07cacd8e778b00fd0e5bbd2e1d9272a10aa1ab0 parent dcef84b0a9b2bb22d296ff4e52ed3e95ee7bf0d1 author Gani Georgiev 1771673316 +0200 committer Gani Georgiev 1771673508 +0200 updated CHANGELOG Kȕx tree a86aab84014b728b88ef7ae78880d46a300f54dd parent 3f60ce04bfbb587c4b99f55a2456e5ab1f4464b3 author Gani Georgiev 1771437631 +0200 committer Gani Georgiev 1771437631 +0200 bumped app version Kxtree e4ef07597250fd75ab1307f7131dde1e17ff065f parent a267ca7355b57b07b85d45ab271c09ed0fe61b11 author Gani Georgiev 1771436653 +0200 committer Gani Georgiev 1771436653 +0200 updated golang.org/x/ deps Mחxtree 8c3d3e2ea202734c43effc1cc84794a63fe7f2f9 parent 1469e0e8989add38eaed5505f1daf9ece2f4ed74 author Gani Georgiev 1771435478 +0200 committer Gani Georgiev 1771435478 +0200 updated modernc.org/sqlite to 1.46.1 Rxtree 6935e59291c997b963305b8031298b8c36760736 parent 9dd8676774f748d252a5e0265447138d76fc819d author Gani Georgiev 1771345207 +0200 committer Gani Georgiev 1771345207 +0200 [#7532] added compositionend listener >O4xKJ19N^: F@\${ woಪ` j5~5*,Nyiw(.4Mptpg4w^kPh(^t>D-É3qaR.,.b 1771272259 +0200 committer Gani Georgiev 1771272259 +0200 updated jsvm types Kx tree 23ecd640311e5b5fb24bf47b392bd1fa7e32ea0d parent 691620ba51eab648aa1ac51b1f120627537d4b6d author Gani Georgiev 1771268893 +0200 committer Gani Georgiev 1771268893 +0200 bumped app version ēKxtree 91da192bdcadd962fe1866d652bcf8f276bb3bec parent 13dee9f333b75da09cc945461eaa244a7023a0a2 author Gani Georgiev 1771063737 +0200 committer Gani Georgiev 1771063737 +0200 use temp dir for the $filesystem.local test 8Ux̽J1@>O1$? X 6b1nVv{XZ8cg4{'"(9Dٓ$əL$Y}}{䱰)H K&3@%Q5>yko5mh[`pkHPo7YX s ^Ҳ. z=/\֞xtree e12525b2393e09fcd2a4b1e33a1a22771521e45a parent c8b62de98becb42b486f7485eaa40f828c9de59d author Gani Georgiev 1771060753 +0200 committer Gani Georgiev 1771060753 +0200 [#7525] made Bearer prefix case-insensitive =gSxtree 08e611479d9a6952702240076e23cb3e769f7b53 parent 5654253a0aba8ec795a295c57c5ddbea6ca16e33 author Zach Kelling 1771049530 -0800 committer Zach Kelling 1771049530 -0800 feat: rebrand to Hanzo Base with GeoPoint field support and token management Uxtree ca7c924c529758010c3b4a26ef246d5bdad88bac parent 0b9a8bca7a1c2200d956a7153ed4cd590d210d8b author Gani Georgiev 1771009225 +0200 committer Gani Georgiev 1771009225 +0200 fixed changelog typo |Lox tree 0f56d3c552bc47ed8a9e04862f9dbf9d93771d6a parent 2c08167eb42baebecaf21e2319340e51d6977296 author Gani Georgiev 1771006051 +0200 committer Gani Georgiev 1771006051 +0200 updated goja deps aoJxAj!E}RV! 9*Z:8huǁ >3>'rƥݸ5-E*pyPb2!1ٳ )qIDΟ^::\^ʭ?^&?A{rN!Z,M).=b9!$t+jsk|IX~ 1770994688 +0200 committer Gani Georgiev 1770996094 +0200 bumped app version cLgxKj1Ds>BhMdkddM A6(5(2&ɉѳO̫w /r QʲXIbSAD6cF :\(ps_/߹R_V@{f>Qjm-c?|LUO *u.ah̐`:|./,c[x1N1E{b$ʈ{=v"(P@(ıĮ3Al {ŗ fy6&}$-ѳf^]U<98:ѹ5t.~vrNimp>jox>%}  !4j4DŽz RK|5zhe;\, MnDW xtree ebd1f6efb3277a411e0d1373968ce093ad120710 parent defd4965ee8c05a2b1e84d722a7739fdf1854f67 author Gani Georgiev 1770814958 +0200 committer Gani Georgiev 1770814958 +0200 bumped go deps zIx tree b202bfcf6937774e2a3416ac29bcce0f73809ab9 parent 800d7810a1b73392b5b557daceac3a8318635e50 author Gani Georgiev 1769931610 +0200 committer Gani Georgiev 1769931610 +0200 bumped app version lKx tree 8dcb4381b089a741e2648585dbc17cee3efa9a35 parent c03e5d3d9995a97b646f727dd283c41e8ef9f6e9 author Gani Georgiev 1769931257 +0200 committer Gani Georgiev 1769931257 +0200 updated go deps Jfx tree 5b551429b69d075d2a79ec97e24903add6a730d6 parent 81968b170679e8b17647a7d4279ec2b632d47e4e author Gani Georgiev 1769593976 +0200 committer Gani Georgiev 1769593976 +0200 updated changelog 3J'x tree b7eefdf90dc24f98dfce6eac7d34e2fc097ca3c5 parent 9e25662bce1ca60be622ea46b5d0e0e2b17af74b author Gani Georgiev 1769593928 +0200 committer Gani Georgiev 1769593928 +0200 silenced race detector errors per #7484 T2x tree 0ae00c2ad87f706b5d55aec3520b76b9ace90763 parent 501870c4d622747b07d9a146cf8f51460f3cff1e author Gani Georgiev 1769525589 +0200 committer Gani Georgiev 1769525589 +0200 updated changelog %gJܟxtree aa4b3d5796395c9e7517446c70f1201adb98808d parent 7140e64f4db2691d727ee501673ba4b57eb25150 author Gani Georgiev 1769525515 +0200 committer Gani Georgiev 1769525515 +0200 updated goja GޒxKj0D>EC[BvsVK kGsԃM>Y-K\EYMk3e?Av!ӰDj޷JGԖ<= ~Byp-0;exxC8ߊb$Fu߅{,gބW(%#F&Pim*rdggSxtree c0943cb4efbe56dd88226971532d15c93098a781 parent 4f2b2deb8629fc5c971139e287099a146333faae author Gani Georgiev 1769121713 +0200 committer Gani Georgiev 1769121863 +0200 updated modernc.org/sqlite to v1.44.3 #PxAj0E:Kh+2]1Ҍ-ENBnoBJ(%##J/BR@N8(f窥 j/ֆ=#@NG!?7|V%]:g}ux5S؋,Y<| !nܚ#a]@{kgYtέ|U_Y9@Z}xtree 8656891d61aafa3873596b11c25b6ff94d85c57c parent 9a0c9d538d60649dfcb0a9042c32e5c16bcc0d7b author Gani Georgiev 1768755438 +0200 committer Gani Georgiev 1768755438 +0200 updated modernc.org/sqlite to 1.44.2 Pߐxtree f86ac4450815c6648d819cf2703361e84c9a2f38 parent 047efb30cd5b64fca1dfa48f66067f795472026b author Gani Georgiev 1768755183 +0200 committer Gani Georgiev 1768755183 +0200 regenerated jsvm types and bumped app version Txtree 8d715b3d6763e42669ad4b98fa56943a5cd0d658 parent 1b560439fea72584c76c1be5d74bd7de468a4d0b author Gani Georgiev 1768754320 +0200 committer Gani Georgiev 1768754320 +0200 revert GROUP BY optimization i]Nx tree 15f33b25a41e6db72f53b6478e374f28d26c5956 parent 69869522f484e71e38e5ca728ee14d0a9caa2c0a author Gani Georgiev 1768640292 +0200 committer Gani Georgiev 1768640292 +0200 fixed comment typos hKVxtree b4b0369dd12fc52bc9aa130f21bacad79113987e parent e6ba5fb820aecf57e13192386fc208a2d36b7a6c author Gani Georgiev 1768539302 +0200 committer Gani Georgiev 1768539302 +0200 fixed docs link in the changelog d7Pxtree 0aca4acb488e818997c48c9f55eea2cd7c337b57 parent 262c30e07176922e67797bc0aa0f4e4d922f8f68 author Gani Georgiev 1768537606 +0200 committer Gani Georgiev 1768537675 +0200 updated modernc.org deps jQM~x tree 3ceeec47934a2d563f41b0dbccf02bdf9d99969c parent 51aa5868a09c90ee9b63ed5ea047ca3c908515b8 author Gani Georgiev 1768508068 +0200 committer Gani Georgiev 1768508647 +0200 updated JSVM types and bumped app version T?xj ~.>Q(P81Wjb0'7A3 ÃT0љ)Z% )d2*NqƠu)hS1d-Q"'J_SN>[;TˊR_@O‹Rˮ2RYHqKk?o)jd>i]x tree e02d44abeba0074aef6ed24b8995e9e5c6b24ee5 parent d48823e527b43db12645c52ab59b4d66adb96dbb author Gani Georgiev 1768480485 +0200 committer Gani Georgiev 1768480485 +0200 updated changelog Kxtree 3bc9a6cc59d3446e7d5ef55be41e95345fd5f392 parent 8ce897e9ec678dad6bcb0c87e35e3e2abea14d6e author Gani Georgiev 1768480073 +0200 committer Gani Georgiev 1768480073 +0200 added strftime filter function ]Qsx tree b3bc4ddf923ad46d4c5af2aafbdfd067632eef9b parent b19fc0223c32d010806ed0705f157e549f4be29d author Gani Georgiev 1768336231 +0200 committer Gani Georgiev 1768336231 +0200 updated changelog ALxtree 14f9cf3cf98d898cf3dc53bd3c51a9908d8d7564 parent b416e5c7cc2e1f7048affc330128597be9575683 author Gani Georgiev 1768335803 +0200 committer Gani Georgiev 1768335803 +0200 fixed typo and updated changelog Pmxtree 801de287e17d4fc957276774293a724823f30e96 parent 6137ac599ff213e05131ce5e8213fefdbb4dcebb author Gani Georgiev 1768335350 +0200 committer Gani Georgiev 1768335350 +0200 added more UpdateQuery tests 1Nx tree 1e0d4002f25ae9e3e13f0e9c9d7eea391ad9b5c8 parent babd16d9986cebdae90471a067abc5109c247803 author Gani Georgiev 1768323383 +0200 committer Gani Georgiev 1768323383 +0200 updated ui version 3Lxtree 764f3bb54f96d5f8d532fc20ddf34501241abc30 parent 524644063928da3bd4799e75e2ebf56319a3307d author Gani Georgiev 1768322852 +0200 committer Gani Georgiev 1768322852 +0200 use group by instead of distinct when possible TxJ0D}\$MD݇& aa^l.A #0vvQq1|؊i5'yNJNl61Q;͘joDW$xYulZ/l/dFfVci;q1=h);Ul9ã5oj )/XASj{*baxtree eaef704533915af5c646311a9389691606db7155 parent 535cfd5b76ddc66817fa4ae46f920dde08dea224 author Gani Georgiev 1768035453 +0200 committer Gani Georgiev 1768035453 +0200 updated modernc.org/sqlite to 1.43.0 PgxKj1D:EF |Ԓ1Oor+j"ptw-zQ'wޣqÓw&P2.*)5)ɄyJ+c>`cP y)9Wr fU/+<'}p!Z (B}B0;rˋSzKj{H7ZKxtree 6ffaf07605aa31bfcc8e5c0ee27f092378441e1d parent 5f9648ec1112e6ae945f5c6e43280dcbdc60624b author Gani Georgiev 1767716341 +0200 committer Gani Georgiev 1767716341 +0200 normalized relations picker maxSelect value Upx tree bc9a6e2664f73abef4d863471d1018039ed3bc30 parent 93b0cb0f5b0457b378aee752895b634928cef0ab author Gani Georgiev 1767443104 +0200 committer Gani Georgiev 1767443104 +0200 updated changelog HAJxtree 40ded35c16672cbeb12c20447f5c2400ecc3f478 parent d7a518bcc7ecbad7c3db173b85a9bc1f9baca2e0 author Gani Georgiev 1767432206 +0200 committer Gani Georgiev 1767432206 +0200 updated modernc.org/sqlite to 1.42.2 Rx tree c66c25ad0f1e71c450a0c9c1a7ef136622db6d17 parent dc9a08b1f19acfbbbb7cc3186d5dab88ea418c8c author Gani Georgiev 1766301847 +0200 committer Gani Georgiev 1766301847 +0200 fixed comment typo uLØxtree a2019adc16fea1bb5a229a10c83652120cc697e3 parent 82ef049e5b65a59771106fa3315b43af989864e7 author Gani Georgiev 1766297047 +0200 committer Gani Georgiev 1766297496 +0200 bumped go deps and updated jsvm types ߥQgx tree 8efeaa47827d6746c31379e434e8a3237bc27802 parent a95f1a1558f373983b3cc2bb4cfdc5a80522d23c author Gani Georgiev 1766165108 +0200 committer Gani Georgiev 1766165108 +0200 updated ui/dist cIxtree b9b818c942f5a96b8c0596dd3af21ea767bd9c83 parent 40bd754a6d54d9eae46e57d9e8ec2e30f0414a2e author Gani Georgiev 1766164136 +0200 committer Gani Georgiev 1766164136 +0200 upgraded to math/rand/v2 SMxtree c4bca3eb0b326581bbb121536206755ac6d0762c parent f29c18c71a16a5a9682cea76398a11ce4e38e4be author Gani Georgiev 1766157081 +0200 committer Gani Georgiev 1766157081 +0200 updated modernc.org/sqlite to v1.41.0 V.Qx tree a35beea3a069214a42890d4655a5191bd9acc803 parent ca6eef6b6223bf3c48c4c8f96043727024573067 author Gani Georgiev 1766156288 +0200 committer Gani Georgiev 1766156288 +0200 cap the file name before normalization 3QxKjE!Dw= 1766134174 +0200 committer Gani Georgiev 1766134174 +0200 removed legacy and unnecessery call Qїxtree 74af2242e816284b2e96cc77a9ac56d4efbaa0c7 parent b28ac9cbde4115607209d16feb5a4b467b5f8e22 author Gani Georgiev 1766132371 +0200 committer Gani Georgiev 1766132371 +0200 fixed error msg typo Lzx tree 83d51d2bc32e5bd4f1be25af5924c311a3c99416 parent 1458f96cb7493804269c0182680fedebe252114b author Gani Georgiev 1765992437 +0200 committer Gani Georgiev 1765992437 +0200 [#7396] added nullable JSVM type helpers Q#xtree 13288c91092a90fad43738a3212c74fde2c88bee parent a38aa4a06519bf60b6b54c6eed80f560770be105 author Gani Georgiev 1765523104 +0200 committer Gani Georgiev 1765523104 +0200 updated goja Hx tree 3609679f1b5cd8f41401f8c92cb5fb60860af83f parent 2f949776207f0a288a83e252bfd1072a6a5c1856 author Gani Georgiev 1765522508 +0200 committer Gani Georgiev 1765522508 +0200 updated ui/dist I3xtree ee40ad94815a9f9b0b5e24dcb124ef7f7165d241 parent 5540f746e45e3d4f0d0213a96524425c3e1d2939 author Gani Georgiev 1765522342 +0200 committer Gani Georgiev 1765522342 +0200 replace TrimSuffix with Trim dN"x tree eeb4f7e3933257eb71037d43661ccb9e440ab9a7 parent 6d763a1f8625933e167afebb13c9e7e8ed4aa6ac author Gani Georgiev 1765522233 +0200 committer Gani Georgiev 1765522233 +0200 updated go deps /Jxtree d7c96b11f0e88706bb96c3d5932ab26e38e758df parent 0e2d39a03d9ddd7a59fe5f0d57ff3f4f81ceb662 author Gani Georgiev 1765522150 +0200 committer Gani Georgiev 1765522150 +0200 trim normalized file extension PxM!F`?rҪt m;he?.|ǧMSBG~DYvZHG曚\ fv[{#0^ۯaISQ,??|yO|.su֚aKV$ 1 C/tG~ԓ=n!Z@sNk7bVxj0~RIXW%yҷ}g曁 慼 &jG35g ;v]tͲQ?Ȳ6'JMh|:ܱfs)n锗'?S]N& )p%?&CZgZL`&PgTL~v+$Q:ۏ2Cm_DcHxJ0F} .M?QPt٥In)7ysdJ) bD-FJ*v1xcoGmM3qLE1 \/ g*uti˼bBYa0zJ3c/k뚙 i=}=7c)'pa„5ë/km_#1eq-Mɼ/{[.*][ex tree 474170ba94c9da953ed3d888283bfc2c7a392ab1 parent ccd364c7afbb3179812e3aec2e9dfcb09e53ea6f author Gani Georgiev 1764699641 +0200 committer Gani Georgiev 1764699641 +0200 updated changelog ]L6xAn bQ+ ,,/!?ȭ0e1a8D!Y'oGL!,/m0сWK%o$&vk#N5}vdv# Vz\s%…1\ZCq[EX]xAn @=}TE!H,s:Rn?3Dv$!0/ko{^ zVqp =j!D4Ҋl%:!(| ܹ\KO^^o`w|i:9 u'b#HGO98x 1764696201 +0200 committer Gani Georgiev 1764696201 +0200 updated js sdk +HfxJ0}ˁ-p $9)!:xV\>_o"F$$#VOőcm'M(b2g;PF%dˌ'Q\y+p"_p?<|W.9'FDuԵ.Pow8%Ip743ĺ,{VTo}TVߛxMj0:@%Fd !J3XV +}M}O-@#A[+ap-z--ↅ zcyGG go V{8Z)xS.p%sp68c6>o8U*)ΩVoE'[/``N뚖{İ[vP8aG_{P3WK7nkjDx tree e782032f61666b9a5dfd19700257fba4746c9f0b parent 7d07d4a2d2d5de8b065dca6236a79df76037750a author Gani Georgiev 1763801965 +0200 committer Gani Georgiev 1763801965 +0200 updated changelog Jx tree 0802a240308e6af6b260d3f09e3940689e78c2fd parent 12254ce0f7218c3814b4fae576778cc701056c1c author Gani Georgiev 1763801955 +0200 committer Gani Georgiev 1763801955 +0200 updated jsvm types JFxAJ1D9EO&$? ;33䃷77pW(7@jP-5. 0jR:,ũ53ɻP''F nT2ܤ=qKxFk53.P, 1763797010 +0200 committer Gani Georgiev 1763797010 +0200 updated go deps 1763796980 +0200 committer Gani Georgiev 1763796980 +0200 use TEST_IP for the test auth alert email ѲRx {bH5):]vqPbc}?r f grk4!khΡSLR{ LRkt:TgcKQcŪtʫxXc~ ޅ裷pVkuٵ?*1q}vHbȩ!qUxtree 4102db4d706c84244b0b7dd961aaf8b1bbcf481d parent 770fea1f62e786ffd302808e4c61ac10c069123a author Gani Georgiev 1763497489 +0200 committer Gani Georgiev 1763497489 +0200 updated modernc.org/sqlite NxOKj0 v/;+!_zn0x1VJ˖REو"lz:酃N0cδZJEWm>P `^O<+ 1763444368 -0500 committer GitHub 1763444368 +0200 [#7333] updated CHANGELOG with typo fixed for geoDistance url Vxtree 47910f5bcc9c97c7d82483051fd7a988c11875c3 parent 53a4e673dfb1853a569ea91a55610c4418ffc378 author Gani Georgiev 1763380723 +0200 committer Gani Georgiev 1763380723 +0200 added :changed request body modifier jPxN;j1uFKB\ F7p  |1<`yq9zgi."au4 'B5M2gÿ68spڶ z}9R7c^ uϽcTiK?p)R[<jkgzJXߐxtree 87a78335305be430e62b05d422f4f8f152a3da49 parent e9c1a81e533b225e3e4f5de464f9e9ac92a77bc6 author Gani Georgiev 1763041911 +0200 committer Gani Georgiev 1763041911 +0200 updated changelog and ui/dist oNxAj!EҶ!jsJcf?H<vfpљ9Yn(hPZWqSz#; Dٱ1qQwbT)mp ?5_|՗h7-F"\k0/!<2Fi~̱ ntxt/w>ǣB(NM<xXxtree 8a9281224e21b1c8611ebb19acec5319d6af8911 parent fddc6729f1ba6931cd3f4515b340b9bc6445e99a author Gani Georgiev 1763020754 +0200 committer Gani Georgiev 1763020754 +0200 updated goja and migrate timestamp jQ1xtree 493015840222012b1e3743cef4c25d0eec9647ed parent bf59a28ba464783ef97dbc443620a95e080bcf30 author Gani Georgiev 1762953456 +0200 committer Gani Georgiev 1762953456 +0200 updated x/sync and other go deps ;O}xtree ce6f08aea645cd802ecb3ef83d163b367196c0b1 parent 049077a351be8ad970b96961f08f1a04b27e1777 author Gani Georgiev 1762953354 +0200 committer Gani Georgiev 1762953354 +0200 added test for escaped alert info TP$xM!F`ʿ0ZƘ~ddotfX9H0x3QzqP: lX(t F6kZͨJAqonT3ܸ 4;9gyNӖ<G{ %N# T#HcwsSX;xJ0^.,3iыuDAi2i f Up^2;rODhՕ\0&Ð9uĊ ~p6 gpRY~v8cY.  Ԉjk׹5B}ܸ'pJ ׅLeIhx`WBu[5Q[xtree 2c926a858499412dc2a7e1d8cbaa940c5bc8ebe5 parent 7280265706501b14c7e4710cc3ad574d582fa127 author Gani Georgiev 1762751643 +0200 committer Gani Georgiev 1762751821 +0200 added pk test for * character hMxtree a58aee96d5bf815f595c4ad0ce0e4f4b853cb8d6 parent cbacd72308ca6c56ac87054088e0de1dbdc0f5ee author Gani Georgiev 1762691581 +0200 committer Gani Georgiev 1762694664 +0200 [#7312] added extra id validations NQx tree 7b914e969538cfed5ed41ae3542bd92835c050e5 parent 210a097f98a0f75ca6dfcecd6383f2e5809c132f author Gani Georgiev 1762637463 +0200 committer Gani Georgiev 1762637550 +0200 [#7312] excluded id from the excerpt list Rxtree 82fb20554368d85a73e13e0b2329cf69b5b1b017 parent e2026d9eb9e16cb81f6531b9806917e2c1531499 author Gani Georgiev 1762593446 +0200 committer Gani Georgiev 1762593446 +0200 updated modernc.org/sqlite to 1.40.0 tOtx tree 0ff1fc1e28e86f335f2af31efec0b589154956dc parent 88a99464827da886772c06166fc61223525566a4 author Gani Georgiev 1762592242 +0200 committer Gani Georgiev 1762592242 +0200 updated changelog Ix tree 6999bc9564375190f0333b3f2af2e4a349a9f511 parent b7e686c8898483ab0a8c3b831c37cf9fc97b20fa author Gani Georgiev 1762591781 +0200 committer Gani Georgiev 1762591781 +0200 bumped app version and updated ui/dist GR$xj0Ew}Ń%A%+*! Tt+dJ*m5m~ @5ZP@i}g1}؂T3RIpKFtހ{1{c.t) /ڇ08m]N(;) αV[)۝nz'hM="lNBPb TGKzEc4|f1ob0l偞0+lk0kl xtree 8bde46d115a567a892a206c5637351b4189c440d parent 1e397cf227d519b9ca6522bd1d16b6bceeab74a7 author Gani Georgiev 1762254210 +0200 committer Gani Georgiev 1762254210 +0200 updated readme Ipx tree 80308474e37e0d48f0fe49392b6db094ca018c7b parent b2aa6ec4fbf613df6fc8cb7debf6c0d6d3955477 author Gani Georgiev 1762248215 +0200 committer Gani Georgiev 1762248215 +0200 updated jsvm types L-xtree aa97064b784646d3eae6b40b6e234b524aac70c6 parent 5da4d914880d024a4f18a74761164551470f6fb2 author Gani Georgiev 1762172461 +0200 committer Gani Georgiev 1762172461 +0200 flatten relation joins KxAj0E: a$[ tc +Bo{o&@.[)R<Ƹh1EgJyq89s&A&GZ4OeḤ)zJE**Ox_O%l ц O2gݵwDŽ9m[)/Mod-G;&Xx tree 672738bac27e6f7c17db8bdfba23ce1a34e6dfb2 parent 68699940173b28bd98d60a8fc9054bcd1cc65bc0 author Gani Georgiev 1761943312 +0200 committer Gani Georgiev 1761943312 +0200 updated ui/dist IJҕx tree 88e72cb4920bb66e31749c7e851020c79b6f587a parent 60ce7d0ced87cad025283b8968dbf568f79bd180 author Gani Georgiev 1761942287 +0200 committer Gani Georgiev 1761942287 +0200 updated jsvm types ]*K5xKn!D-aHQ@`&JnU* 1761242376 +0300 committer Gani Georgiev 1761247992 +0300 updated ui/dist Ix tree 5aec7a5bdf8fb82ad9c4d620e37b897dae054f0e parent 204d5407070b45df2aa788c7dc1aee43d4aa4c5e author Gani Georgiev 1761240493 +0300 committer Gani Georgiev 1761240493 +0300 updated changelog FL6xtree e9a89c7d11300a27d4223f55ea6829c50c3910d0 parent 5ac66022fe45159ef7970b1f3fcbf7b29da30e44 author Gani Georgiev 1761232894 +0300 committer Gani Georgiev 1761232894 +0300 updated jsvm types and npm deps "OxJ0E4& % 6C:p9V@h#QNz=+0<oVN2ܰeγ464O(ң6ޠVFju6a-W%&)׸b FRZ <%Z(*2;8NcM $ִECͥ9(R**m!pAAk%R#ePR7Taq }Cٙ_~yx tree cd647aca941906a5d23112fe9997b2e11aae9564 parent 9d33a161bc6f412dd24754fa5c4d83403480b8c7 author Gani Georgiev 1761214503 +0300 committer Gani Georgiev 1761214503 +0300 updated jsvm types 'Jxtree a5cdf6a03c7f49aafae1dcd51686e4a177dafb74 parent de8f1afebcb68ed42a27b60468d9821f237b50fe author Gani Georgiev 1761209719 +0300 committer Gani Georgiev 1761209719 +0300 updated thumb error message ʇPwxn D{b'YJQ"tQ 06/A{S޴ .bd$MZ%#i518&qfFX*$BY4 kp{ dqXy|^lOQZ"I[n1!>6!Gx+}->|뱅s]7e^WΗxJ0EBI̤&y~s]! MlU 1760878150 +0300 committer Gani Georgiev 1760878150 +0300 added no bounties note in the security policy Tx tree 8eeeb007be161066411c2262600d333820e6b7c4 parent 21491a9987972181bd72cae0c59a8ce37324e8f9 author Gani Georgiev 1760877667 +0300 committer Gani Georgiev 1760877667 +0300 updated npm deps I0x;nC!{N}$Y) ,/(I> R#͚"ާڳPDd4#0z@)3BW`O֛VH{T>&ܹ7˘[/xNlK 0xCpE[i#'?`J@u@m'<%e:{VWUĐxtree a398210f1b4a7fff0b4c08622552afb792e0ef60 parent 968fdd3a41cb539b9b5a8ec91fbf79f35016b4a3 author Gani Georgiev 1760871808 +0300 committer Gani Georgiev 1760871808 +0300 limit max expanded presentable relations to 2 iUxAn @ѽO1Ra.j E"89A/"P7,Ы~&VhlB<@QMwR0&Ø^ʫddaZfhqxÙk<#<v m)xG8u-c?ZL7mU%v + 1760716851 +0300 committer Gani Georgiev 1760717481 +0300 updated record-info-excerpt styles lP2x;j1Dsa^fg{@Y UH6H€G rju/vrr0,"YIy>èGG =pց?-z[;,FfVJB}/:[w\i$ ڞsz9v5]*OY<x tree 5d44d29809ace0140612effa292d2f796fae1fec parent 85af21d0c0ab65debfaa54b37c677dd770431b2b author Gani Georgiev 1760687268 +0300 committer Gani Georgiev 1760687268 +0300 updated ui/dist U:Kx tree 8259564ee8de19cb3c0c19a34adebcfce19a3b32 parent c32e12ee4cd6a344340a9a099ad5edb81f4bcca5 author Gani Georgiev 1760687124 +0300 committer Gani Georgiev 1760687124 +0300 unify code-editor wrapper fields padding *Uxtree 88dfeb7e5ca4b310b4f93b8449318e4bb7e95867 parent a93ad6e90050b6c88cbd0f0ff6d1066bd77be3d0 author Gani Georgiev 1760686024 +0300 committer Gani Georgiev 1760686024 +0300 [#7259] fixed json field overflow P]x tree e611a0bfaea9535e3c59e80fce451aa28df5d3c4 parent 18c5dc2c3b94e32a018a7d799236dcfbd45f10bf author Gani Georgiev 1760549374 +0300 committer Gani Georgiev 1760549500 +0300 [#7223] workaround firefox overflow issue Tdxtree 767a9f82ee5f6b1ad8fd1391d0efb59fa6a62178 parent 0096c030d86c756db18b58598e25206daddf1561 author Gani Georgiev 1760549255 +0300 committer Gani Georgiev 1760549255 +0300 updated modernc.org/sqlite _N\xj0~ alJ-zXiW$W@7 3^Tu)ipdiACKkɲEYPlY޴{bboZKezax0sq?:d ޑyμ*[ߺRUIRGu'QG]iYxV[OY@c"Ee̓xKn  Re7$Xٽ*"P{O֮1:YکK (]r`: "?}3 Gm uR]ж% xj-|Fq!3 }}3#-x-Q/}zV>x tree 6420963ce6aad6cb726be24bd72e573b9c59df81 parent 363764101ccf82c36843c299cef0c02d8d3fc5f5 author Gani Georgiev 1759941844 +0300 committer Gani Georgiev 1759941886 +0300 updated go deps vJxtree 976d98a816d1535d191bd394c033e7b519d3f670 parent ae086a2006ad8136d5b84cb1c6bd4a3ec2031900 author Gani Georgiev 1759935323 +0300 committer Gani Georgiev 1759935323 +0300 bumped min go action version GNx tree 412def6853970f23f8201c972a9cfaec7fcbe29f parent 525edef3895784ea0dc0a1d0119f57b47d84acbf author Gani Georgiev 1759471563 +0300 committer Gani Georgiev 1759471563 +0300 updated changelog Kْx tree b019ef4f2b04e2f0d88654eb05995ca1395ff658 parent d8cbdc7a95a6a780fd41f4dd959b0695c5fbd249 author Gani Georgiev 1759470817 +0300 committer Gani Georgiev 1759470817 +0300 updated ui/dist JxKn D>E#YmWF90(FadWFg4 ZIe2Dƹ.'uҞ1*w2!HD$D~xwz|g?JVn夰>pG\f[si>H|.?U ya4Vboezkia^xMj0F: F?dAS Yde0ҌCl YEn_os.}60+CK2:MAxOb2Lֳ1x'=ƜMI~/ pҦ9:L/C*(oI{k|H#82oLm(H܆5 p%+ag[?Y xtree b3972a221b36449588f360bb22c0ad1420a7b3da parent 21e881eb355389468535ed75e09557e636823d11 author Gani Georgiev 1759427481 +0300 committer Gani Georgiev 1759427492 +0300 disable installer when running tests pPxKN0E^œV_TU~N,rDwO$ιA2=:e0L"1s[vJk FIG" N8K 1758570875 +0300 committer Gani Georgiev 1758571460 +0300 updated go deps KXxAj!E}:jZ:B63qdy1C+"1_7B8REC 8~[JFIٻՠ46B/zg7*n\[KqN3.nZoB 1Ƚ?8s=Ks0{c__N%$PpȵL+]xtree 010f3738ab73398fb29cf4c036d6da73146c7cf8 parent 1bda313e97471c95971ad80eadefe8d6720d3b82 author Gani Georgiev 1758565827 +0300 committer Gani Georgiev 1758565854 +0300 revert sqlite dep update `WMx tree 28a7544c79a4de1037ea57efb3a14f9480bbbda6 parent 2637eae68a196bd05f7cb974850418da59c20d68 author Gani Georgiev 1758563044 +0300 committer Gani Georgiev 1758563044 +0300 updated sqlite dep KLxtree c55af153ec5c19510cb317ccef7be8553ebc92bb parent 1a42a2b06869db7682ed2f6ed4ef22c27998deef author Gani Georgiev 1757796373 +0300 committer Gani Georgiev 1757796373 +0300 fixed Message.WriteSSE example 'Px]j0u}/eJ)4+iR夽}U4|0̴$ vB#E.,ԤƲnT0y1 qh59h'-5 v$8Sb;nqŔWwzQ, YOBg{lx 1757221356 +0300 committer Gani Georgiev 1757221356 +0300 bumped action min go version Oxtree e29d99eb2dfd74424877f892e770bd68e40ca8c7 parent 28ac6b203028ce683889b3657085f8c99abaf9cb author Gani Georgiev 1757221296 +0300 committer Gani Georgiev 1757221296 +0300 fixed active index label match :TOx tree ea073421338d133af4e11f6fcb9b6beef32439a6 parent 07e94f94d8efb01165dcb7223768c9cc3179889d author Gani Georgiev 1757184311 +0300 committer Gani Georgiev 1757184320 +0300 updated jsvm types KEx tree 78104548cf4e379a64d354295765559a1f162ef6 parent ba9b9ceacdaece2cd242bce328356251c4d66e31 author Gani Georgiev 1757184059 +0300 committer Gani Georgiev 1757184304 +0300 updated changelog JٓxKj0:E>nIrԲ3rHn-YV=(^@>gA11IO:̎-EdrN2G>5uV٠)2ZH[:ez۴RY.q__A9tRt #!mfH\GFC*J~r7Rbi/[ xtree 73a859b4254771ee67c021277b1c1f439a4586f5 parent d58fe161481d49feedc2de88b039414119d3025b author Gani Georgiev 1757171660 +0300 committer Gani Georgiev 1757177571 +0300 added osutils.IsProbablyGoRun 6Nvx tree 1ff840d5659839b964fbbcb195c38d3060baf617 parent 4240b23a4d43c5b85007023042ac34e4762320b1 author Gani Georgiev 1757161109 +0300 committer Gani Georgiev 1757161128 +0300 updated jsvm types Ixtree 880e0016c3c51642e11eebe9920ef399b247a0f0 parent 4fd31b4a361750580385da472fbd94efe07a18ce author Gani Georgiev 1757160786 +0300 committer Gani Georgiev 1757160786 +0300 enabled seconds in the datepicker {P[xtree 42a79fe13edd45c8469892703f3edc20ff59b54f parent ddb179f8d043cb1c09d77d864143700ca057fd5c author Gani Georgiev 1757159487 +0300 committer Gani Georgiev 1757159487 +0300 added os.Root bindings to the JSVM TPpxtree 67a1e674419a4a3878a546aca4469b91d5fc0af0 parent aeca9423ecd1e35a4ddf7ba3ad7aaf0991845213 author Gani Georgiev 1757157727 +0300 committer Gani Georgiev 1757157727 +0300 bumped go deps Jxj0{}Ba=,yi}@HRkY`F% *h ]YM4 G2^ēFT4Ш;rk5!X88Pѽ[ 7j t%=5 o Pϝ:u5&Xϧ{BI r0mxS! 歎TX'?j~+GN%ȡ =a”x tree 67f95296c3211876e30be527c14abbb76dad7654 parent 379fc2aec28803f73a3d8acfb906768ef45d4e9b author Gani Georgiev 1756750279 +0300 committer Gani Georgiev 1756750279 +0300 updated changelog CK&xIj1LkC-Mk,bIFįr(cqD!Ggr*۬mDZ4 d^7Ȇ5I^ī==\p{ox'_+)j.|P(xCL[w-2~@ +GK ji'!}DZWxtree 2b394abea40305a3eab5829771196a145951cc97 parent 4a236dbbca58399c6daca2caa6c058bad45be0d3 author Gani Georgiev 1756671295 +0300 committer Gani Georgiev 1756671295 +0300 [#7123] updated exp of test valid jwt tokens ϟTx=N0H+;%%y"N܀nfɣQ\-QLSUgj8|)9:1jV؈1qH_`l+A륷Oךx峾{rRU+ܐ: Mo L,$\ArR+\.=}އ_Zxj0D ]G %l ҅{mƖ@5}<0gj!ЫQKK1NA}l 2jȎ"z+u(M4ƣ#rKsS(!Æa tyza[ͭalKT+{© zgo 9wxy~IXJ&S_%=LaG.(e6^ηfHu/;!iExAn ~#X0KQ*Q X>Xrnh+0 Cy8]I4*kiTJ/̰AF7v 1756231784 +0300 committer Gani Georgiev 1756231784 +0300 [#7135] merge scaffold collection indexes aRx tree 188d79d4aebe3e13270abde10954e7bcb6402016 parent 7c8cb64ff2ff02f6f5222d0b6e24b0fb4d024f8a author Gani Georgiev 1756231640 +0300 committer Gani Georgiev 1756231640 +0300 [#7135] merge scaffold collection indexes SOxtree 181c87fba10f8c84cfdbc88b32a337b1c64edafc parent 90adb5ff4575f513134e421c74b2ad558dba0245 author Gani Georgiev 1755930368 +0300 committer Gani Georgiev 1755930368 +0300 tidy go.sum "I6xtree c0b58395c8736d79058f2c6c7a43b5d5a454f5fd parent c57b00b10bb49a8ca25819814da34768f920d25e author Gani Georgiev 1755930051 +0300 committer Gani Georgiev 1755930051 +0300 regenerated jsvm types `6Lvx tree 1e616ebfb95445f79b1de527b466341ed594ac11 parent 33512cccbd0947eb3c198d8dc6ee5d256cbf1ead author Gani Georgiev 1755927870 +0300 committer Gani Georgiev 1755927870 +0300 enabled __hooks in the jsvm migrations JSx tree 2b85ddc5c00539cf6eb74a2a8e57a70abf404046 parent ca38f3b470614953cd4f3f6bffef0ec7f34cbed4 author Gani Georgiev 1755924860 +0300 committer Gani Georgiev 1755924860 +0300 updated changelog Lx;n!{N񤔖,~oa(JCD)6"7H73 )H:*aŇ֘iv.~s=e c+%Dƙ[pVgυ^J~g}wmpFJj-s?)9V1J=uI4C{Vx tree 5a0a872fb822424a9ee52b377e09a53be3c80689 parent 9520d63b5063501166000492e2a759a7ce3a958c author Gani Georgiev 1755890727 +0300 committer Gani Georgiev 1755890727 +0300 updated changelog .Ixtree 0d43749337abcb0a1ca79a4bbb31ca0a5cbb0a5f parent f9bdaa0fa81f8a2aca66818ddbbcace52f9ac939 author Gani Georgiev 1755887324 +0300 committer Gani Georgiev 1755887523 +0300 regenerated ui/dist and jsvm types LSx tree 9d9a8f7392384ce96bfa131128e4ba0531d42924 parent dae6c7a47dbe90052b17f5f86946f5afcf82d545 author Gani Georgiev 1755887079 +0300 committer Gani Georgiev 1755887079 +0300 updated go deps .Ixtree bcadc41d70f4bb647103eaa27b3d86ddb2f2351d parent 2eeae22a43eb3e5b7be6683473995a0be8faf0f5 author Gani Georgiev 1755886830 +0300 committer Gani Georgiev 1755886830 +0300 updated random generator tests MQZx tree ced9b3e3bc5a1657892e8471a0758f5b75f1e333 parent eb3ae57c447e268a3927b05d8ebca53248ed10d5 author Gani Georgiev 1755884878 +0300 committer Gani Georgiev 1755884878 +0300 renamed to execve to make it more clear -Rxtree 6368ae82d01441466d65ef584574eda75a7005a5 parent cc889d99ed15cdb70d124f060f1b13b441281450 author Jesse Sivonen 1755884653 +0300 committer GitHub 1755884653 +0300 [#7116] exclude `syscall.Exec` for WASM AKxtree 4be2277cdaca347d8a7d0ae020007d7cf22cf5b0 parent f6d94a7e7952f7b1ba0383dd61f08f63530e0f70 author Gani Georgiev 1755718893 +0300 committer Gani Georgiev 1755718893 +0300 added more tests and extra debug log uQxj0zr(Ҝrؖ()}7qD`=Z^dҐzD)ԡF!t'IͽR:!7*>TnQ..|,9 T邴^RRZTϗ^Uȕm3u_)q'>aŅ?`5@`CxJ0E.&M"ي4RRpi@VA{$Ì".&&kl̜ݜ`(A 0JEU:m?蒶BZEOka×r^sƻ1zԣ֪(1|R!tM oK)[]~֞~n6Uxtree 86877cd5ab3ed9c97d13012a8eb30a02eff463e6 parent eb433ba1cd50f3ff617ce11255266b159c209f40 author Gani Georgiev 1755024294 +0300 committer Gani Georgiev 1755024378 +0300 regenerated JSVM types ZLvxtree 2c3fb870825bf9312701d9655e6c27dca7dd356f parent a33d962cdcf22984eac65f8d02ff687c22e4c4fa author Gani Georgiev 1754723631 +0300 committer Gani Georgiev 1754723631 +0300 bumped min go github action version Qxtree 14747edd196323b9d8f29290c7f5c285e3c2f937 parent b03eebd2cc02089a96a27cc0e549e79c9b8bcd3a author Gani Georgiev 1754113244 +0300 committer Gani Georgiev 1754113244 +0300 regenerated jsvm types ٷM:xtree afdcb6b67c482ba182f575abbfc5a59954189423 parent 715d73b68565fe78b8a6f70ee6312dfb44fbff55 author Gani Georgiev 1754113126 +0300 committer Gani Georgiev 1754113126 +0300 removed duplicated CHANGELOG entry Px tree b04323b8d0caa8732a7e188aa54945a37849d0d0 parent 328cea52fb3bf2f49615b2f5e76b3f7ded611490 author Gani Georgiev 1754112279 +0300 committer Gani Georgiev 1754112279 +0300 updated changelog Jxtree bbab0a70c074d503dbd08d01ac65550ac4113657 parent 40e44872a541b912d28fbeb5f2e09aabafb0fc13 author Gani Georgiev 1754112267 +0300 committer Gani Georgiev 1754112267 +0300 removed unnecessary space Nx̱j!~b euGW8BUyb=AØ#"ot02F1؈+P݁(0iKӍlĖƥ`\ɪP;Oy{\[ .iV9SlY)E tԚǐ,'} jqx{\s|oI D -uVxtree dd03d4c6ca69ce37181b261b93b224e136d82306 parent d62a83bbf875abd19dee397106a01516e2c00b90 author Gani Georgiev 1754111106 +0300 committer Gani Georgiev 1754111106 +0300 updated modernc.org/sqlite to 1.38.2 DP#xN0D{JNc;脎zD7G& ?@73żTЎ,>jl{0%э hއȁʴ7Dhg$::g.R g2!ZVxKEu"ж.ˍƽ$ N V- s-ל*XvvN~xQ&8yQ~1`x tree 2a21cdbe749ebf3157ba24cc6835b315475429e3 parent 941ffeb8da72bfa029548c57fc0390e4b5716b88 author Gani Georgiev 1753560646 +0300 committer Gani Georgiev 1753560646 +0300 updated ui/dist HIx tree e23f820609bd213b119d0864417d560e8e5ba804 parent 89dca0a0c07c148780e12a00cb6de06036fd8cd7 author Gani Georgiev 1753559357 +0300 committer Gani Georgiev 1753559357 +0300 updated go deps IYxAj0E>@T<J.PJI#GKFvt~-" ;cٱӆGM/zB"JpTAjj du|,^%8sp\(7xzi9^.ıU(lk(Ra] 1753462601 +0300 committer Gani Georgiev 1753462601 +0300 [#7049] fixed list api example response vQUx tree ca43d70afae58d3337cc25ec715326d6e59d2425 parent 8159f6578f4d538083a7bffdb822807eedf22a2d author Gani Georgiev 1752913886 +0300 committer Gani Georgiev 1752913886 +0300 updated jsvm types Kx tree b22f90e72a2f7e54131fcf7aef01b43a182f7ba8 parent 95f0f8b220978b02109b601533d958999acfe3cf author Gani Georgiev 1752912095 +0300 committer Gani Georgiev 1752912095 +0300 updated go deps IǙxj0z4'%o֊ "琧}\afZe^ABWWi:;U N#6*XB`rX0AG 33?3vdAs- Y3A6 ^o"eL4[ky=pQFUI&OF-niK&agS@s>jϽKm ˅ z}&Ur uV. nR@+ECA@!B-ؒ98dSj(jtfHN&( f(N@C&L;uJ[0j.`fNq&QK$qs ]κQ?~{庤$Y%x tree 530db050377b1bf8de743fcd40943220fbf0aa12 parent 25c06fc03878daf8d02ab6bbe77116406f511984 author Gani Georgiev 1751218896 +0300 committer Gani Georgiev 1751218896 +0300 updated ui/dist _Ix%tree 2840dd52adfdb5d48cf8040b1aea062dc1bcb0b0 parent fdf33f11352678d04d755668fd75a7c24e74d9b0 parent 2f4c7d3a54218898822de59bd594b7e081364787 author Gani Georgiev 1751218233 +0300 committer Gani Georgiev 1751218233 +0300 synced with master Xx;j1DsaQ#1AKۣ̏oWA*=Ec dKL)$_SGIq""h>eSR'O>Q-U,͹C&$ s?[gomG[/SD Urr_Eu̒ѷ} "VHxN0{JH$hm(:^KI|eLbfti#a9uheCD)Y;w9GKmRN,"h Fg|7>*ܤ O/u?VĨ-<"!kx C dhQK?r=NJ-_ @Uhx;n!{NH|(ܸs%H`زo-|33"EXzJJz7\L:2%%9*}$tÙj3 ?3xo+NR: jD۵]Xt[ ~xKׅͧ3?a4G+ b[V7Yxtree 01b1a71286267c9f03a1e3d01e79e77d5b376368 parent d45b7e8769ebf85e5c32ef7a369dc9e163850e1f author Gani Georgiev 1751186023 +0300 committer Gani Georgiev 1751186023 +0300 fixed changelog copy/paste error dPx tree 737eb79fd9562546a39cf02408525e699c0cf913 parent b1c73b943ee4350d803957ff108a67cd28c85400 author Gani Georgiev 1751185909 +0300 committer Gani Georgiev 1751185909 +0300 updated ui/dist ϱHxAj!ﾢ!%NBnC#ugAU`(jaI%xR6j֐W&x-!Z>2g+͢(">>B…(<\Ts+(krF{ 'R=x}7 ;']{6sz\yz0'74YYx tree 8f02960d698d2ab082cfe4de5f67ff7b9e033847 parent 0176273a1d6cfc1c73f25e460a751d1487754f72 author Gani Georgiev 1750965677 +0300 committer Gani Georgiev 1750965677 +0300 updated npm deps IٙxMj!F OBvs]ɴ$9~\|̐bZ6F7(WEMjiu$Z\hKz3^-Ȳ\A)Fvʵex!.TWPhgiy wO;?=@_Q;C.`P@#I';4?L-\txMj1 O}!Xc[C הC 1750492312 +0300 committer Gani Georgiev 1750492312 +0300 regenerated jsvm types Lx tree bddf28237d977ec7367aab735515d3891f307993 parent c655eddeb1eb394817a5d1ba62879ab9e4b16c9c author Gani Georgiev 1750492300 +0300 committer Gani Georgiev 1750492300 +0300 fixed comment typo Kgx tree 995433f46d236bd84d8a9fb98379e56ada8f3f86 parent ed9be30e58907d3334b56688cf9c52e2a7693564 author Gani Georgiev 1750491010 +0300 committer Gani Georgiev 1750491035 +0300 updated changelog Joxtree 29f4f20391cc24ad7b0fcc7408fcd0ec937087d2 parent 5c3e7b405cbdf4c67c337bf751d205cdbc42cfbf author Gani Georgiev 1750490994 +0300 committer Gani Georgiev 1750490994 +0300 clarified batch max requests input MRxtree bfde042d5edb7b81f60cb5f44de413bbebdb4374 parent 130ae20a9e35216763ecabafa3ed2e5676dffb1f author Felix 1750482201 +0200 committer GitHub 1750482201 +0300 [#6947] fixed probability distribution in RandomStringByRegex RΕx tree 36003c124924a429a938c6acf509af7cb97d82e2 parent 6d8ae969d3fbcfd79c995cc4a2aec7c70226d04b author Gani Georgiev 1750262496 +0300 committer Gani Georgiev 1750262496 +0300 fixed comment typo ^K˕x tree c8ab90b972284305aa5d2fabe4f89f391a0af448 parent d37fcbc2c27c9d197ce5c5e4be526b6d59b1899e author Gani Georgiev 1750184599 +0300 committer Gani Georgiev 1750184599 +0300 updated jsvm types 8nLMxtree de48732570db775444a9f9db23723397d22896fe parent f50f1c1f6b20ac0e76cf1518aad1119aecb74d83 author Gani Georgiev 1750183887 +0300 committer Gani Georgiev 1750184134 +0300 [#6935] added toBytes JSVM helper NxOKj1 )Bv hdd 3Mz.}AB6 ĈC=;WgSJ#/ dN.81-hٮ….Z7N畗 e=>="Kk gnS<|AG,U~Ю 7~=SXx tree 8b5bfee75af64f6c600fdc85f61dd8af347fe982 parent 91144939a82a52940d5482e42caa2d69be112eed author Gani Georgiev 1749488572 +0300 committer Gani Georgiev 1749488585 +0300 updated Go deps #Jixtree 1f28719483e5f7d8e771dd0a44c5da7b0df7fb1b parent 4db0a8289152edb181eaa14f9a4cf7c0fbf88ed5 author Gani Georgiev 1749487866 +0300 committer Gani Georgiev 1749487866 +0300 [#6914] skip empty range header GP$xtree ecd93fcbdc716cdf09b93782ff8ae1f7505bacf6 parent 301b02f56000e3bcc63756b8121215263ff544f7 author Gani Georgiev 1749487786 +0300 committer Gani Georgiev 1749487786 +0300 fixed legacy go comments Mx tree 2dd2c7374ec3c4a93b959cc77e62f84ca2c0d867 parent 649c4bd7cec7511daec0c53ad25d5233f22f811d author Gani Georgiev 1748036678 +0300 committer Gani Georgiev 1748036678 +0300 updated changelog @Kxtree 330467de0d62d87c4c4d4d535bfc4597df520be8 parent 6d3c7b456996b052959564764d4b815bebcf0763 author Gani Georgiev 1748035724 +0300 committer Gani Georgiev 1748035724 +0300 updated monospace font with latin-ext charset ,Tx tree 08ab61513c450aacd66c29ca14ff1d10a4441f66 parent 80063796b7629c113b9801db648bfe88dee5a25e author Gani Georgiev 1748034331 +0300 committer Gani Georgiev 1748034360 +0300 [#6869] updated fonts and dependencies 2Q4xtree 27d68401e520ff49b217fa99e5847ab59b693612 parent 2245eeeb529d6af322a15bc6fa2e5471632e34d9 author Azat Ismagilov 1747759249 -0400 committer GitHub 1747759249 +0300 [#6860] support multiline cast expressions in view collections wWxA =~ 0 68)R*ƭzf17/Ţ.ؗ$ęm]"G4\[xAj0E>@XtCFVjKFVBׄޠ>fa@K^ @VY y`lV**#*vȈ֓T0$3[r'e|qBq>нb6{ZE (?!opr0z\fNc Ɯ6֒W. io/g x tree ac4c1b58ad78220aeeaef9a522d15d0267929e87 parent 6c0114b4ee50dca92eaac4cae38c48641a7f586e author Gani Georgiev 1746911445 +0300 committer Gani Georgiev 1746911636 +0300 bumped app version #L xtree fe2fbc0a535e9e612521ffbcf62ccfaafa7bb102 parent 0a2a5621a964bb296ee3a5da6258ce79aae40578 author Gani Georgiev 1746381400 +0300 committer Gani Georgiev 1746381400 +0300 updated error comment 6Mxj0zFd(K+XqpB>zc3D،P@",ǤSy$gEw>74ΰ6P] =C 0۾㰼sX!mN7zi55!ߜ ~m\3fn_|ƕ]7;VZWxtree 2765283e456d115cd1180fd68e21c946db52d1ea parent e6c7dd9154b9bedbf68d9cc4b882e70af3e8e9b8 author Gani Georgiev 1746175787 +0300 committer Gani Georgiev 1746175787 +0300 changed the default json field max size to 1mb ҫUx;N1ܧjsʳ'ci/@PTd8û < -I%E1Ctt {'Mc"lE7L$*|h{G[*e,-[%+n8GOlh;=aPGgC ž\C ~Vxtree 6ef841ea059d71160bf1a5192107821ea5b558fe parent cfcf4adea8a2799ba8a302ec5a6044059fdd85de author Gani Georgiev 1746173553 +0300 committer Gani Georgiev 1746173553 +0300 fixed dev sql log replacements P=xPj0 )$]& )V+ΑiffG*3 đ]`7I;k{NuTuV^`&Ȋ(0:eQƘwxȭT¥N?<5z`OT'оwګ4<*T׮KDt΅-pWYP2<A-pY^_`^ڷAn kYᨿ+l7=$fx$tree fab97c102d1c9d2427c95b7d0dc57524a90bc5b1 parent 94537303f7c45f8556cae31436d4419b490f7163 parent ccf1ee30f750ffb6ed13858979174f3145c26ed3 author Gani Georgiev 1745848278 +0300 committer Gani Georgiev 1745848278 +0300 merge with master W•x tree 6f01e092c12b24db4f823480bf36a3b41373df16 parent 1e823c5805d053d88bee8ee10e1a0c18733d7428 author Gani Georgiev 1745841071 +0300 committer Gani Georgiev 1745841071 +0300 bumped app version -Jrxj E]/QB)G.>Q1үotyυýdd QY'{mt(/W)7УBAFc45($R*\]fR3/#z%A2bwĭ?Ө}#_=e\t|7hgNCLDXyC.2A^pnx;n E{V񤔑FEfQ {`$3Ev;:#Et$"pPhgT5CQ.q**^G!] M_ckfxP)>[ïT|oOV%+\K`o.<"! *T1{ A:S-Bj]#W:Q 1t_ʛbxAj!E},vC!BUv (:dnA6_< 畒aA[^Ltrt^5lxj.HGKd,FgWLg52q\mp+Mx^;Ƶoexm+KŘgeF[C1?980wJKk~<c˱c8|N?c,xKj0:EC>BnhIm[`2(q't2*dV.RJ0sACґOLTv3蘤FYu;˓jgJhS%' nRˎu涿 2j"b{e+LS}(TW:סGo s;y5= 1/b<xtree 7c194a53be6b7f30d666c48e126d032eaffd2859 parent 38d14689866336ed9d26a07679eb1a246828837c author Gani Georgiev 1745780911 +0300 committer Gani Georgiev 1745780911 +0300 use rowid as collections order field ghPxtree d27debad9e2b876fccff5679789195b1cbffaefa parent ea5f4043d3eded1b2cdd89f4c8d50e2ccbcee1ee author Gani Georgiev 1745760804 +0300 committer Gani Georgiev 1745760804 +0300 updated changelog and jsvm types USxAn E>Ŭ)[ fpPmp1n׋ޠ[gz=E8[vv4wU ;d "6L֪0IXwtg!I6x>k(;n0΢6=\P#v]SkDDz X"K*V. ০&ϋouY~m2JyR/K`Ix5˱0 @;Ler(-*eB_5mV)IUdTF @z/y, hGօL1sˏĊP#x5tree f6425420f416dd00b29e22c3331860139098f588 parent 1fa28fb04bda98659d63fd1b995ce358021f0565 parent fd1c4dd34ac633715af7a20af7bd4706ec94b69d author Gani Georgiev 1745242473 +0300 committer Gani Georgiev 1745242473 +0300 Merge branch 'master' into develop y]axOKn!syTU*.WPeI_*ٖm٣3C!AY1i#ޕ9qh9:ƓQ,BDZL E gn}uG-) 52‹Rnu G9sΏOHk)v(s1̶k̴9a C(H\x tree f9460117f54f902775288cbf9357d6a28c5af835 parent 8d7c15260e7e17d6b53019cdb1a225b95748353f author Gani Georgiev 1745146297 +0300 committer Gani Georgiev 1745146513 +0300 bumped app version Jx5tree c576125c423485a54d73b27bbecc2aa0535a5c8d parent 6dcb87d8b93f1c07ed5415888a047c2e11c8fa46 parent 8d7c15260e7e17d6b53019cdb1a225b95748353f author Gani Georgiev 1745145704 +0300 committer Gani Georgiev 1745145704 +0300 Merge branch 'master' into develop :p]xtree c576125c423485a54d73b27bbecc2aa0535a5c8d parent 5010d6c18b0f4313743dd7801fd697d57a222222 author Gani Georgiev 1745145624 +0300 committer Gani Georgiev 1745145624 +0300 updated filesystem.CreateThumb tests RGQWxLtree 77867d22a2c9ba85be3aec0165f6d461eef1e42b parent 199289257c5a5804655f9cbabafe10e0e6addc9a parent f4f5d3f526cc54a8e3667ee7017dbd8fe8c19947 author Gani Georgiev 1745145539 +0300 committer Gani Georgiev 1745145539 +0300 Merge branch 'master' of github.com:pocketbase/pocketbase 3h3xYtree 77867d22a2c9ba85be3aec0165f6d461eef1e42b parent 199289257c5a5804655f9cbabafe10e0e6addc9a parent f4f5d3f526cc54a8e3667ee7017dbd8fe8c19947 author Gani Georgiev 1745145510 +0300 committer Gani Georgiev 1745145510 +0300 Merge branch 'master' of github.com:pocketbase/pocketbase into develop  mxtree 6ffd2ffb500be7a4570827f489ac9fb8c95c8b1d parent a1727705ceb6dafdb34103fd80985a3a9fccb0b7 author Kev 🐶 1745145405 +0200 committer GitHub 1745145405 +0300 [#6744] added partial webp tumbs support UNx tree d54a36a9087e0e318e55ed3902d717573385b96f parent 477614be8bf6c2a5b67b5269b001525ce4d8a6b7 author Gani Georgiev 1745135256 +0300 committer Gani Georgiev 1745135256 +0300 updated changelog )Jxtree c5a439107aae479466b45b4c437eab289f1b4e1e parent 309d90fa462c4b5de3d3dec99807c84b9db4408f author Gani Georgiev 1744783964 +0300 committer Gani Georgiev 1744783964 +0300 added JSVM GeoPointField constructor ;?Rxtree da3b2b51e1390e1dce42c12b66d03974e76ebdd5 parent cdaf6c43bbb38e35158b986b9e6a316db5bf3e35 author Gani Georgiev 1744780496 +0300 committer Gani Georgiev 1744780496 +0300 updated geoPoint API preview response 6S9x tree 3ee785284edaeea85936d7acd7577eeb8b5095f4 parent a1727705ceb6dafdb34103fd80985a3a9fccb0b7 author Gani Georgiev 1744780133 +0300 committer Gani Georgiev 1744780133 +0300 updated geoPoint nonempty tooltip info T'x tree d1d120be28a3bc80e2c299a4c608dd031fbfcc69 parent 3be6dd4d9fb26760ebd0fb097ddb61db2a141b88 author Gani Georgiev 1744778460 +0300 committer Gani Georgiev 1744778460 +0300 updated changelog 7L?xtree fc24b0ae172a776084cc23d39d36fda837db551a parent 201a60fc59094c841ac826989a65d5da23987107 author Gani Georgiev 1744745035 +0300 committer Gani Georgiev 1744745035 +0300 updated leaflet search autocomplete z-index Txtree 22119d65153cdacf7e533afe536a1fb091e04216 parent 0929484926688c4e95587a7e78c3bbdfd3113125 author Gani Georgiev 1744743483 +0300 committer Gani Georgiev 1744743483 +0300 regenerated jsvm types Kx tree 5054eac1bd09138f6dd08d11a8488abb070aece3 parent ec1477c1489ef6c0901a0f817b478662558d98dd author Gani Georgiev 1744743382 +0300 committer Gani Georgiev 1744743382 +0300 updated changelog 72JӔxtree 5befa690c1f9a043c15b912782fd55a0da95e582 parent 34e5c04773576d4058f10b2d8d11ffb7a7dd80d6 author Gani Georgiev 1744742588 +0300 committer Gani Georgiev 1744742588 +0300 added types.GeoPoint.AsMap method Phx tree 3b911c1ca7b508ed76593626e6f404befff79999 parent 69202287c244e906d08fadbacb53c0a03f295456 author Gani Georgiev 1744742566 +0300 committer Gani Georgiev 1744742566 +0300 updated npm deps and bumped app version Rmxj y5 [}U7h_>}O 3\`tZNJ5Nä"o4J %vZiF)AÛ\`a\Hxݚ_ AgdTtT* ЊЏLp|UXVS)'|F0~^T:s ix;n {,'E <e ?{3hzc$^zGj.dgBbAx6PRN6.Vl Ah1ڒW3!aY'Vܰdqm)/|szW1?f',vTFPBLwgBAJLsڰ$~X"'cm.Wk9?W̒xAj0E:@`idɁR!JcؖQW |^A{LYtm G|YR7Jp ̀DSYt__lGJ~۽TɞR'},/ Mz e`6ڍtxT[n o\z)uEhQj#+GPWΟxtree 34e2ae3cd601c34aecf16f5aec7f2b5c8c9f8fc6 parent bb623c1efb8d0506e930245be50ac648cda4f728 author Gani Georgiev 1744477444 +0300 committer Gani Georgiev 1744477521 +0300 updated dependencies and golangci-lint to v2 Ux tree fac7c8c741886733c25936447cc079febc8b62a1 parent 9e53a7c5227e7c2c732bb422b537af8af3df3152 author Gani Georgiev 1744264832 +0300 committer Gani Georgiev 1744264832 +0300 fixed NewBackupsFilesystem code comment S;x tree 6dd68585cea1e6f894560c5b5a6334becb508448 parent dde17fa96f1a735b5998e4afabb902a0cb24cb32 author Gani Georgiev 1744112080 +0300 committer Gani Georgiev 1744112080 +0300 updated changelog KvxJ1y’"E<$l`g>|EQEq'MYy]V>YՆ$icXtn2jB;$bSvMR :ppKo8rDzbb[@M*2p/bkeWN*ǝ %hWm p]m5K51AngxBض/{/˦cxtree 7e4b7205524887ec2dbf3eb84d6084f0f25e975b parent 1d07915d453032f2e1782b5600e4d0b9741863ef author Willow (GHOST) 1744079632 +0100 committer GitHub 1744079632 +0300 [#6690] updated patreon to use go oauth2/endpoints ,Qxtree 26f5aeb1ac697f0ba985233f775707881c5e39f2 parent 833f0bec9ecd114ebeeb1d9ddedf99d2880eea56 author Gani Georgiev 1744032759 +0300 committer Gani Georgiev 1744032894 +0300 fixed typo kIYxtree 622765652717d5d2b18ef17dd1c5a82af6602b3b parent 4313f8bc159b61ad2035e7c00328cf1a15db795f author Gani Georgiev 1744018431 +0300 committer Gani Georgiev 1744018873 +0300 added geoDistance calculation test )Pxtree fb802345cedcd118338d5f3e5555405475a1f88b parent 1eb4103faa85f4c72fec58330a64e9c257a7b7a4 author Gani Georgiev 1744016289 +0300 committer Gani Georgiev 1744016289 +0300 fixed geoDistance code comment Oxj >Ņ. SJntqի `L}mp8y>:u㐌 Nq [MXikSy#s# )Fm*pRL_{G|+% Qq \qzέx Ǔ>)Š7 Ney}}o;-ݵܶm]cGY z. UL*zP*#4{:såҜBL/عgoxMj0O1J=R!JflrBn_/t~<26  "&VXgG&RPakI d12)!Ȧ& ٹhG fpS|Lg3繏eHaR ;%$|F?މ7&x;cn}wHgBrT( /=f_!xIj0D>Ň,Cl Є! _nY2In-ڼxP"iOLPrVV19Ίa7s&[+gc ^Nykx<ڽTᆥ.O.fb]ށʉ %J8!Co[x*1kTjNs?g q蓔еX2 1743684934 +0300 committer Gani Georgiev 1743684947 +0300 added geoDistance docs and tests Pex tree f2779fe0d9892d730e0ff84ba3daf1326731dc73 parent 5ae804b176e0bff7f836b7cd356d3ae9036900ee author Gani Georgiev 1743625542 +0300 committer Gani Georgiev 1743625542 +0300 added more geoPoint field acccess tests GSxtree ca950de087337eb9e40b3a88698258e8c06faf78 parent 7d0a78d746f2f50dc470db19d6e484495a50562e author Gani Georgiev 1743583099 +0300 committer Gani Georgiev 1743583970 +0300 added new geoPoint field _LՕx%tree 83c79c9a810947fecce61934ed8d708525f68ba6 parent 0af4b7a04c03edd9a908546bf8593fe93bedac89 parent 837fafd127e43c784082440ba9baa6e49a4853cb author Gani Georgiev 1743240177 +0200 committer Gani Georgiev 1743240177 +0200 synced with master gYx tree 8360fdd9e5ef3b3744010e265849aa8509bff466 parent 3ebe6ee5f40fb129210642cf177569c945ba1296 author Gani Georgiev 1743239610 +0200 committer Gani Georgiev 1743239610 +0200 bumped app version Jx%tree 3edfbd9a6031c0adbc4a529c2d8bd5e16cc35bfa parent 7f2eefc0391439849baf5ea5963b6df0dc71de06 parent 3ebe6ee5f40fb129210642cf177569c945ba1296 author Gani Georgiev 1743238002 +0200 committer Gani Georgiev 1743238002 +0200 synced with master jJZ3xtree 5f10afcde95d0e2703982be28dee3d7e7724667a parent 4ff90ff2263019349806bc793be1e29b87af908a author Gani Georgiev 1743234295 +0200 committer Gani Georgiev 1743234295 +0200 bumped modernc.org/sqlite MxMJ19EKaOW@D*I%;x}[.E99bGO1bZs:YvꃻEsyFtdIxLHVxo.WHSq]OmwmAIO:ҭ!P"_׵}o** F Pc*u/yYx%tree 1806c5361f184fbe16f6a4a01789ef203a464f5c parent 26c400dada36ff7fb1dc1cbee094726bd4b79519 parent ba2927d5eafdff8166962ca6acc62ee725130164 author Gani Georgiev 1743188836 +0200 committer Gani Georgiev 1743188836 +0200 synced with master 1743184018 +0200 committer Gani Georgiev 1743184018 +0200 updated changelog MjIx tree cb82b4ab3364b7e9ad5da5c5b2de4a068001f497 parent bb12f94146b82e5852876393ec40f79c7e299663 author Gani Georgiev 1743183127 +0200 committer Gani Georgiev 1743183127 +0200 bumped app version XJȐxtree d7cb21eca52123109e41206cd788923556fd1ff2 parent 0be9d885d51491e12354a10fb62c3a8b74225846 author Gani Georgiev 1743182884 +0200 committer Gani Georgiev 1743182884 +0200 [#6654] fixed S3 canonical uri parts escaping Rx5tree 3c6abcf33d2a8605dbcf6b4ed0f12fe642449190 parent 76cd9d4de6096a07584b1672277ed2f4e4d25be6 parent 0be9d885d51491e12354a10fb62c3a8b74225846 author Gani Georgiev 1742968921 +0200 committer Gani Georgiev 1742968921 +0200 Merge branch 'master' into develop xf]Ҕx tree 351c47e09683682383890e7b979f403c5ec46d1b parent 97328c76de246102af2482b599c40f9a20e17b12 author Gani Georgiev 1742968904 +0200 committer Gani Georgiev 1742968904 +0200 updated changelog Iox%tree 4f9889dbe203ab944729a8bdf19ea0d86563f8b8 parent 64a63a1861a3c667d7f303cf51f90e04a376db8e parent 97328c76de246102af2482b599c40f9a20e17b12 author Gani Georgiev 1742936456 +0200 committer Gani Georgiev 1742936456 +0200 synced with master eX2xtree 47f9b89b436881a0338ddf15278e0a067e0f953e parent 7c61d469cf6c36ac590cd491d47879cc18a17e17 author Gani Georgiev 1742933792 +0200 committer Gani Georgiev 1742933792 +0200 updated modernc.org/sqlite "Mxtree fe7a422a2d74af5abc314f75604dc48190a38de5 parent 6761f18b60567d624b253d0851309b8eb6198698 author Gani Georgiev 1742933563 +0200 committer Gani Georgiev 1742933563 +0200 fixed logs clipboard data copy ~Nx tree b15569cf857c458084a49a7e1fb45fbbc46b6e99 parent 547d56826fb9de293f1ffa1252f0e34d4a35ce63 author Gani Georgiev 1742925638 +0200 committer Gani Georgiev 1742925647 +0200 updated ui/dist J=x=K1EL`All˛L"1d+νޘAMq>٘FK^ry c0nшWl\:6:L *2ll 'F2r,smp’ĵ-/pX8,xlׁv*X3Rro 7ޛsOLck/KL=g~*&^Si(xtree b2dd04da833ebf466bccbb62148031e77476a9ca parent 2d2cfab821cd25856e897e93a65d75eb17eae3b5 author Gani Georgiev 1742834294 +0200 committer Gani Georgiev 1742837803 +0200 fixed logs clipboard data copy UPXx%tree 140b998959caab08f0def682c41210c9c0b48526 parent 5a645447c3cbcad7b39590536858625a3459b8ec parent c54495ad1ada1c3e347c02aeb458c3a1015d3cf0 author Gani Georgiev 1742833585 +0200 committer Gani Georgiev 1742833585 +0200 synced with master WXXcx tree de7caab207ee83148f1fb0a250d828af02f1ba68 parent 11f1f90b28d883dd3ea423ac7f12c64a7f4811d4 author Gani Georgiev 1742790718 +0200 committer Gani Georgiev 1742790718 +0200 updated changelogs Kx=j1^Hi0`B:"F`W bBN5.`-sPdu*dNlN)4MA^dN&2'iL҈J~WpV}w8G٨ǥoAo {„|sN+ %h}lֿk/717Qi?yWXx%tree a37ee3f0d2905b007119fd3a6463ba280b2795ea parent 87d37e0a09e5c874601cdba87b3637f8cb18ad86 parent 380bde7320eeded63aa49042a4d3228a07310215 author Gani Georgiev 1742618126 +0200 committer Gani Georgiev 1742618126 +0200 synced with master xgXFx tree 6dad5cbf11569013efe63a951be3a33fee43856f parent 4238ac337f26e2c3b706c941054fe7f8688b8381 author Gani Georgiev 1742616501 +0200 committer Gani Georgiev 1742616511 +0200 updated golang-jwt qJxtree 2c273e1f80a0cd2300c3cc324b45daed06b6eb25 parent 26cfa8200393613e3f758849cb14259885cc04f0 author Gani Georgiev 1742473800 +0200 committer Gani Georgiev 1742473800 +0200 updated default select field labels QaPԒxtree db793d5d94255e4daf0fb2fac83abe30913d1149 parent 8f38eb4de08d27dd06dabc5602283eb09408bcbd author Gani Georgiev 1742471200 +0200 committer Gani Georgiev 1742471200 +0200 [#4674] updated select field ui |OxKj1D:ECF_!;%4hچ> ڼ*x1R͢cL:z(iMf !k-n\X q8SP KDŽց:N^Vox1j1E{b a[# BHB Y;+ "+}T>ߛ*8&%]`W=sak蜵NmVi>z0̋&|kmpk֖>9 m vȈfؒ{$Ǔ'4-3,{No'-LSx tree 8867c9c6e1d3a8ecfd0a048062348c800cb7cf2b parent c38cf096793d87fd04563f342d3589d69d04d772 author Gani Georgiev 1742042203 +0200 committer Gani Georgiev 1742042203 +0200 updated changelog Jhx tree 8ee9c6e40bda2a3b7b5899630e1b91ba454fb54b parent 002afe5feded6fd97b3b3a892b65c5c9497d1af4 author Gani Georgiev 1742038241 +0200 committer Gani Georgiev 1742038241 +0200 updated go deps K xtree 4cbd6b77712b8cea0c63610273f3c124ef7eadf8 parent 55a47b2253a7c356635c61ff3435c7131816b391 author Gani Georgiev 1742038119 +0200 committer Gani Georgiev 1742038119 +0200 reorganized sqlLogReplacements vOx tree e6cce16958372c017a9653a0529bdcc09dee1594 parent fdb5826c172fe82914918f36b5fa0f43b9bf6003 author Gani Georgiev 1742035304 +0200 committer Gani Georgiev 1742035304 +0200 bumped app version OUJx tree 78bc962e03b41f212e813826243c63bebdc84ac7 parent f3882e380b566c631c0120491c03435bddd6e6ea author Gani Georgiev 1742034591 +0200 committer Gani Georgiev 1742034591 +0200 fixed sql nested json value dev print log !Rxtree 43c59a0ea330b5cf6f350eccef9b0c42093f54a4 parent 4474c736e78fac10aaf92b24f7fb04f37e8bf4ff author Gani Georgiev 1741986628 +0200 committer Gani Georgiev 1741986628 +0200 updated modernc.org/sqlite dependency 6Sxj0,aA ݕ#-#oB0s"[*a)J,C&2σ eS%ld)Oi!ch[Tyreӯes^aH~S Çu֚UU0A{;7.@w!zVu֗ WxJ0} MD\9+@\MLڦʼf|>lDQh$zf uRnVQ*`gs֝gIhlQɤ' ńڼ<i5NvMK(hĠ̺3#ϯaiz pσ^`1sEESBN;|ϔtCea5TJ.xO^x/x tree 7b2c4d796a06ccc342c458357ddfe9bf6986c310 parent 311ea1d1a1bd75cfe0263885507d86ec78b68d61 author Gani Georgiev 1741936301 +0200 committer Gani Georgiev 1741936301 +0200 updated ui/dist SIxAK0 &m6)ExH6& o ̴*Lw!1-G1ˬ): 4ls81Fő8f<5h<[oWJs R wk~Fݯ E{F? {E+Z#3̿ErXj9 KbҶ> [R/^Wxj!s/qJ-P( :W}=z?cze>Y!-ڣ\Z)eNbE 1741546593 +0200 committer Gani Georgiev 1741546593 +0200 added s3blob WriterOptions custom headers test iU>xtree ea0cd4247699414338bb33e6fd8aa1e035cd071b parent ecfa451a906ca1636269e3dd88ad207984597071 author Gani Georgiev 1741465731 +0200 committer Gani Georgiev 1741465920 +0200 added basic s3blob tests LxA0 E9A'a]!KrHq{q}VUa6bq&yF#hlɇ.d?S$*N|NBktez{pMKv}q#]M |8[O}+QHaxP8v|)lw|<5KEtP_"xtree 76a9929e0af230d855268c007ce03bf55e871e53 parent 7c4ef035432cb46ca7491ebb0e3a66c7b4c28475 author Gani Georgiev 1741373574 +0200 committer Gani Georgiev 1741373574 +0200 updated tygoja and the generated jsvm types T xtree 7a12efca00368f6c18e8f7c85eddccc2e6734105 parent de2e210a062f7938d3c1632062c47da2dba82f7d author Gani Georgiev 1741290316 +0200 committer Gani Georgiev 1741290316 +0200 bumped default server timeouts P_xtree 75958fe752b1a9d529c9ed42d602e5cb968701c4 parent 5faf83a958b812955f867fa6701f402ce4182ddf author Gani Georgiev 1741289217 +0200 committer Gani Georgiev 1741289217 +0200 restored DynamicModel types cache rPx%tree a00f88a6ebcc4ac966a894fd43d5bef2343dcf90 parent aebfca5761b0441cf11e238e4670abef5b5a57ec parent 1489c378f5cdea6fbee1f266b6733b529392ca0e author Gani Georgiev 1741258207 +0200 committer Gani Georgiev 1741258207 +0200 synced with master Zx tree b17516b654f331e330dffc37295e2f432afdf51d parent 36639bc6e6360fcaa4af032685dce27fcc8956d9 author Gani Georgiev 1741211765 +0200 committer Gani Georgiev 1741211765 +0200 updated changelog ]K&x=N0@ާiߕj 8^$A+`2j35g֦, ZٱOĚņƨS>FAMDƽuZƭ\<|\@y&u(')šKo:p}ťkK 1741205976 +0200 committer Gani Georgiev 1741205976 +0200 updated ui/dist and jsvm types O0x tree a51aa03e12a42b6a79e8fc6749029bc9ea5950cb parent 289260063ddc53763a198969b941ec05d64d8501 author Gani Georgiev 1741198467 +0200 committer Gani Georgiev 1741198668 +0200 updated go deps Ixtree 23571868b1c197ef36e9a51016f07f24941f342a parent 57240bf8759e08f413c5f7ffee24fa328a165c66 author Gani Georgiev 1741186480 +0200 committer Gani Georgiev 1741186480 +0200 updated modernc.org/sqlite hMax1N0@ާ%8qH!3k"8z@~[U 8roj&(QE3Y{i3xA4Xqrl>K \Լ />-o}*+@H<궴]8  ~U WKwZ] s\K4?[Vx%tree 04b858087471846e5162591c0401e31293c4bae2 parent 5ee444c9ee8af35a51489044b5f6a748b6acac56 parent f5bb1415ebd83787b1337cb83ae781c5d8e703cc author Gani Georgiev 1740507129 +0200 committer Gani Georgiev 1740507129 +0200 synced with master ڭX xIj1:Ň,5 ! O=ۧ@6-;@&*j F 5A:VE;N$\0YWXΩL>i +ON׸6bdžo:'^%卤ӬlXǻo2/ b)(TPc4?Q'P+}a[mNRˎzR=7dlzx1۵!X8RrЩM?ÝλyNyԶ_+Wx tree cdae175e162324fa2869d02849a9088d752a6e20 parent 4221f39ab82114382991e94b84538742cf8a2217 author Gani Georgiev 1740135863 +0200 committer Gani Georgiev 1740135863 +0200 added subscription.Message.WriteSSE method R\x%tree 0c91a1807c4f3ddfbe7a0bfbeef7045d988628af parent f1b12cce425f6b51250cbce1cd2b39b76650c923 parent 96a93d34de9f6a819f9eb1f9bed1b5d5034622ac author Gani Georgiev 1740135104 +0200 committer Gani Georgiev 1740135104 +0200 synced with master , Z-xAj0E:@3JiWٵ(]# +B.͇?<~3!{I1D';y18NܤրR#[=!jqL98{ '2%7 TU yxr+ۮ0g& Rxtree 6480c773a2bdf2839bb869fdb259a60d38618eaa parent 8d5e3a143e74221766c74af57578232b2c32c5cf author Gani Georgiev 1739895420 +0200 committer Gani Georgiev 1739896478 +0200 updated modernc deps and bumped app version 0TxAn O1J $.R=qE.&NBIv %JPG姝>!͆\"FȨ9*950i!gl \ ek7K~=\K7 5 ^P!Nc]K߄>ӱK(H(ϥC޾ޡ* +f.>>m+]x tree 3d54fc4f994fce58dc4e73dc21ffa50367b7fd8f parent 8b2cc3b09a5dcadd99eada71cd87fb9c3703dd6d author Gani Georgiev 1739824509 +0200 committer Gani Georgiev 1739824515 +0200 added fields example to the JSON method &TrxMj0> AUWyF"Q!~*INi%(2G6\H*XULl>d9ZL֓:`ЄhKnR Kzv`G7>*5v˭ɿ10+՜L-Z)kRsj3*o["x%tree 3643ef6dd5f7d17efd91100414c0f9ffa1e46a47 parent 758f698fbd7dabdba9f4d5f20d5a8df53819403e parent 00cf6719fe11a08c1726f62fc6d14ca13e17b01f author Gani Georgiev 1739631865 +0200 committer Gani Georgiev 1739631865 +0200 synced with master 9YАxtree 93d736e281654bfc00f7727d8d1c2f7c98b807ff parent 765112df88f220402195b6d4f73116a4881b7726 author Zach Kelling 1739300227 -0600 committer Zach Kelling 1739300227 -0600 Update SECURITY notices !@ x+tree 1f57198f328f19fa371fea003653db4645eaf476 parent bff2f0a5a37e953e1cacebd58d4736346c5c4196 author Zach Kelling 1739300104 -0600 committer Zach Kelling 1739300104 -0600 go mod tidy >]xtree b767724ffc8b2452157047004448bba4a8c92fce parent 3ce3d9de7647203b8e20174a2ce6492ce381a77a author Gani Georgiev 1739297623 +0200 committer Gani Georgiev 1739297623 +0200 dowgraded aws-sdk-go-v2 L,xtree 45cff1383a9e4bb4c2f34186660f7d6f977b3de2 parent aeef56a895a050426f37ed6dd25a29643b68bd35 author Gani Georgiev 1739272339 +0200 committer Gani Georgiev 1739273053 +0200 added Store.SetFunc method dN xtree bad02407505bb80ec4184b563008751aa76e50dc parent 20083bf51187d88fa1ddb7a425db426f56379192 author Gani Georgiev 1739227102 +0200 committer Gani Georgiev 1739227102 +0200 updated logs code comments );M1x%tree 6fcfbf81985b78c5f0b2f546d2d60a27077c250a parent bd548d3c564388f4110b727e062656d9762b3bf6 parent 3ce3d9de7647203b8e20174a2ce6492ce381a77a author Gani Georgiev 1739226330 +0200 committer Gani Georgiev 1739226330 +0200 synced with master OXxKj0D>ECC[?a!9@!ԲmLG@UzTN@l0RxC5BJJ Y錨6J2 0^xUUj[cP)ؐcLp0c&e(4<Ҵl\_)Z!PkgUi)gB*%(@αo/[b_N~%pp[B!?n9C߁{b}`G~029N{ Biݖ x)tree c8a622b77ed2f06f33e0d1f7ed19eaa16030a775 parent ef90d0c4c42c986f690059b34cd8bbe1094cc023 author Zach Kelling 1739210540 -0600 committer Zach Kelling 1739210540 -0600 Update README > x.tree 2ab2182cded4e7a11e72891ae4d5f4aee1822a9a parent c61cec9510a4d5e2169b15664a58abf328bcee5e author Zach Kelling 1739210315 -0600 committer Zach Kelling 1739210329 -0600 Use base />xN0E|œZ$~ Ա l~N-5vq\ RVEkQi> ZK$~Q+W ,Ljq6D,q Aێo\*9'8Js/8;> Η G+mZ+F}Wt4.@ϛ R|M~[My+wazٮ+ElsK%w.ax%tree 755cc3f40ef01ba6c7ac0f97b8879422912b0027 parent 2f67f61674d084f50d38205eb966c0d4d1e2d56c parent 0a739c126f2f44b4b042f652f76c079044a501a4 author Gani Georgiev 1739173095 +0200 committer Gani Georgiev 1739173095 +0200 synced with master ±Wvx tree ac47a1e1fe64a092dc49f3e2c5a4e6444485204f parent c8be23f78063969e85623a26dbcbc687b459c422 author Gani Georgiev 1739171643 +0200 committer Gani Georgiev 1739171707 +0200 updated changelog Jx tree acb6a4ed6138ecdf75bbaf754c0252a342f21191 parent 8a21314e01f5249c574eadcc3d1866ec660e0eb0 author Gani Georgiev 1739136935 +0200 committer Gani Georgiev 1739137628 +0200 fixed flaky realtime record resolve test GSx tree 17531f03c848263e861ad0fbc061497a2297b1ff parent b10a14b405f02ec9173d448338da6ef8af2d122e author Gani Georgiev 1739136385 +0200 committer Gani Georgiev 1739136401 +0200 added realtime api record resolve tests nRrx tree c993e2c8725e37cba931c38a50eb23da259b645b parent 93929b9e39a6aae01ed129bfc4223c3bc02aa14d author Gani Georgiev 1739122108 +0200 committer Gani Georgiev 1739122865 +0200 bumped app version VKxOj!,tmtqDbLH]s8ޘ!E\tBB+9.,,tpCHGd%ф 4fdA~ Ng8qmkvcZx4;?bgz1z!;GhL[υ!ƝoCiP[h G 1738997221 +0200 committer Gani Georgiev 1738997221 +0200 bumped app version hL~xtree 621682fc4cdc2ac219f89c9bd64c83cc43561cd6 parent 6d68e1f64cba0d2b8788f2a7149d91969137b998 author Gani Georgiev 1738775141 +0200 committer Gani Georgiev 1738775254 +0200 [#6407] added os.Stat jsvm binding =gOxAj0N1IڂZd3fƮ"gW-A[|V̀Ҕq$i8&o^p>)W6ȖM9-:Rѫsf8h h{ _ \lk=/_׍ v?Źc! 1738404255 +0200 committer Gani Georgiev 1738404255 +0200 fixed batch API Preview sample response Rxtree 87e0b2d8481387c1fb9369e5ab3e431fc3d198aa parent 3da84807ce678c1742f738b1ce8512b2948d5d51 author Gani Georgiev 1738331407 +0200 committer Gani Georgiev 1738331407 +0200 fixed changelog typos )Kx tree 07a000072b2e449749f130a44e69be192fce6571 parent 15397b0a649de7d3a66c15c462593b5efc3522d0 author Gani Georgiev 1738328543 +0200 committer Gani Georgiev 1738328543 +0200 updated changelog RIԐxtree b40ed99ed03209d15f78c5e65ba0689f278b2bd2 parent b9bc5aeb08ba4e0dffff34b7a69e0cb8486b5d3e author Gani Georgiev 1738326503 +0200 committer Gani Georgiev 1738326503 +0200 updated godoc Jx)tree 838e98a17a099c591d311965a5af4fbd65dbbe03 parent 0ea20831d36c894e421f78352ce6f7c1a65d7ff5 parent 2958d6a84e47ad91ff62e80547ed47b026e8521b author Gani Georgiev 1738326089 +0200 committer Gani Georgiev 1738326089 +0200 Merge branch 'develop' RYjx tree 838e98a17a099c591d311965a5af4fbd65dbbe03 parent be6535e1c15136bb735bcd7483e7b37b0fc5797d author Gani Georgiev 1738326036 +0200 committer Gani Georgiev 1738326036 +0200 updated jsvm types (Kpxtree bbfe710a161cbf3dc69620b727c00185cfde3492 parent dd0f6fea290d5159de12fbd84bb9510a9b66114e author Gani Georgiev 1738325208 +0200 committer Gani Georgiev 1738325208 +0200 removed unnecessary strings.ToLower MRxtree 8101ccf1d02fd8fbf1929202549e2c56d5060930 parent ccbd91e8619af6d97879294557e89c5b69a6d645 author Gani Georgiev 1738272389 +0200 committer Gani Georgiev 1738322959 +0200 bumped app version and updated dependencies tSxtree a10816517fb17f25ce3e3abf98027e6f11e9dbf2 parent 341d74382c2de654d20c6e830a205391fd957297 author Gani Georgiev 1738250902 +0200 committer Gani Georgiev 1738251316 +0200 updated changelog and help texts NAOxN1D{J(vED)ػ;,r2A={oiUȝAaO%P!O T4dz\o 1737919669 +0200 committer Gani Georgiev 1737919677 +0200 updated API Preview sample error responses QSx tree c9ebf7d147c29896b1cefca1be652be35426a5c4 parent 56295a47d0950dc589f331ca8173953c1f559d1c author Gani Georgiev 1737905588 +0200 committer Gani Georgiev 1737905588 +0200 fixed comment typo and updated npm deps '+RxAj!ﾢ!ǐűQ!!n'Bf|?Xu(j4g2$SH56昐U5}ȉ(D1l)D|DmbEU\i/p"wx]O|_7*ߗT7: ߎJ]^F Om VZnxtree 0a4f57880aad621e67329d94227b65f7e0b69739 parent d6d77a2ec54663a5c491d296ad9672a61dda6b99 author Gani Georgiev 1737722968 +0200 committer Gani Georgiev 1737722968 +0200 added inflector.Camelize helper )Oxtree 1300aeff1f128109cf3cb3db36b9bcc33814908b parent cad7f70ae8c2d404679776366b64f65069d6a4b6 author Gani Georgiev 1737719953 +0200 committer Gani Georgiev 1737720041 +0200 added inflector.Singularize helper nQNx;j0{F%v!mJY+!}\L142\ۄy)16 )1dLO:wpgm ї(m8}t_1o!c,ۍV9#7&"|^/%T}=|N ֊6[x;n0 D{}A=)Q^eH&}T7śhPrX={kJ1)dt\Ż9dBV]N[hs1)ID _C^~GmpSεmOx&޶?&yaZE[LPgoպC& _2 2wRgYna/BQq_tx tree 20be7aaf061060eb1bf23d788a9229cfcdf95cb5 parent fa8137b0fa22fc42c25ef43aa873090ecb433db7 author Gani Georgiev 1737375328 +0200 committer Gani Georgiev 1737375338 +0200 updated npm deps KGxAj0E>@ i$[R!B)cilR*B{n>ffPzfN{cjvz*)'4v+x'{c&aQjbaG"G^הB1S^?uix^~}(.mo $][}aEw}QpSvX9~fCn$ԕ!t(?# }bap+ʾS Mvîextree 9de51a49f6cf574ae6ae5621c1ab947422fa1f8a parent c0afaf74d00e679d4f731218831af9dc5b5b1514 author Gani Georgiev 1737203682 +0200 committer Gani Georgiev 1737317300 +0200 fixed multiple comment blocks parsing צRxtree b5a06397757a7e4442453cc24ea9781b42a9a55b parent c33e1e8c0756a7a7e8d076d332641b945263630c author Gani Georgiev 1737313464 +0200 committer Gani Georgiev 1737313464 +0200 fixed multiple comment blocks parsing h:QWx%tree 83d9e7e70979f72167b8fdc93ef18c542a2b975e parent 681b95087227665a942d74e97b9ea3f58c69071d parent c33e1e8c0756a7a7e8d076d332641b945263630c author Gani Georgiev 1737202993 +0200 committer Gani Georgiev 1737202993 +0200 synced with master AWhxtree 41ba8697529b49719b9b492da099fbb64e38b9c3 parent 4679496b9c1f7516c95d4d601430c6ed7befbc4c author Gani Georgiev 1737197154 +0200 committer Gani Georgiev 1737197308 +0200 bumped GitHub action min Go version |Pxtree 9b4110a9a7cd3a58692d07f20f0b550a73abaccb parent 9c03ebb825b826aad192962b6246e7b58a4da434 author Gani Georgiev 1737195427 +0200 committer Gani Georgiev 1737195427 +0200 updated old v0.22.x changelog %Nrx tree 2cc5eb93aa217e56296822d1e1ac4f0ee42be183 parent 53a88d917695c4add32c164ff840620b861db1e2 author Gani Georgiev 1737195235 +0200 committer Gani Georgiev 1737195235 +0200 updated changelog 'JxIj1D:Ň,C` `w>DBW[Ndu۹} )xUPTF>HJm&gRy*Oh頬Hq=b5F6`RsM*[ ~)pMv8M^ٗz|nN+ D6ܹN`/Z\RMwgo>.6j(V{yS J^xtree ac374505afaf78e1e43206977b8fec7b70f36778 parent 95b24fe21f705d173fc8cd83dde6eb9a0e6264ab author Gani Georgiev 1737122509 +0200 committer Gani Georgiev 1737122509 +0200 bumped modernc sqlite driver version v+R—xAn0bQVU۾cc4qHɸ4D1X\Q1Abq'SA ه4C5e遽t/>oכZkLs[V?.|A j@,$Y '̹,{ydѼ^~4A ]e=xtree fd42a2b3ed284213fab17c4a1fb4ac4ca70a59f2 parent 1fd260f4b25c185b5c464b285803d66ac06ece9f author Gani Georgiev 1737122337 +0200 committer Gani Georgiev 1737122337 +0200 removed unnecessary count ;YNxtree 42bfc1b280113008a64b0ea0cdf8a8649956869c parent 9aaef2beaa3244a9bd3cde4e5a3d35d3d717eed1 author Gani Georgiev 1736696596 +0200 committer Gani Georgiev 1736696596 +0200 updated unmarshaled spelling for consistency xVxj0zҵ%J-ϱkld[ W@a. 3#q b}əaf)k"CIŚzXK M!G[e~,Yt,o-r{വw#nͭ+t](F~e**yFU>d:|_\Zx%tree 565ea3599a5d97b6cc043c85d4a1fb0ba21a889e parent f9fbb9124226508f9bc2132af85ac99e4891da2c parent 482d2916b302f60c4bc338b0d4da16e7842c5b7e author Gani Georgiev 1736679771 +0200 committer Gani Georgiev 1736679771 +0200 synced with master Yx tree 73d2ed50fb5b84a23dbc90061c07263f6ccae91e parent 77f729afd67906f866c5076ff63b99cc9daa3f07 author Gani Georgiev 1736674803 +0200 committer Gani Georgiev 1736674803 +0200 bumped app version ,KΗxtree 03aafea4358ab9002fb61f8cb0c1599fe9222483 parent 77f845f1f7bdda75360960e309e1fc527f5ef393 author Gani Georgiev 1736674500 +0200 committer Gani Georgiev 1736674644 +0200 [#6281] fixed unique validator error Px%tree bda8df2ab3bb5a0a768e3661aad43f751a15a16d parent e9771624bc12797af603091ee3cd0dc8b97e6616 parent 77f845f1f7bdda75360960e309e1fc527f5ef393 author Gani Georgiev 1736591891 +0200 committer Gani Georgiev 1736591891 +0200 synced with master `=YKxtree bb9f185a4aa0751548b0690c41531c2afb44e7ab parent ffea09c616c9790f7ce5839b5539d85ff46768f6 author Gani Georgiev 1736591626 +0200 committer Gani Georgiev 1736591626 +0200 updated go deps and jsvm types +:Oqxtree 37c2ee7214499fd1bf36bf9bb59633ff9b301c6e parent d4395269084c528b56c988bd7cfdb38c0d6237ad author Gani Georgiev 1736591297 +0200 committer Gani Georgiev 1736591297 +0200 updated README |I2x tree ef3918f1518d0895bd3f51ddd6826d8f15931d1e parent cc11b381bab43d0dea1f2ddf26fbb2f50f82a61b author Gani Georgiev 1736502489 +0200 committer Gani Georgiev 1736502489 +0200 updated jsvm types )rLMxj0{}!Fa8BVڕ#-#iS0Lo2(5:g1zQ4&8!zCƺ-(RXImwm0^`ږܖߗ :YhEj)nw.Ys%>'Lɩ6f_Z>'2^ޠ~lu`x%tree 92ed5bd9dffd186664fb658b016c17a2f94c3ea0 parent 3ba6d0d846384c0bed6aaf92ffa6e066d1c8c29f parent d4395269084c528b56c988bd7cfdb38c0d6237ad author Gani Georgiev 1736495193 +0200 committer Gani Georgiev 1736495193 +0200 synced with master 2Zx1n0 Ew{i["7E[uܠoxT S*|DVYD}aYbH t%`S2Ǒp C(a,Y K_ gmVuz;嶽1P4x0nwG™ dS*pQe7wC*\O5;Zjxtree 5af42e923522d7333cc935ffba4d5799ba8f6e70 parent 89aee196f1b68fb841da0945e24fec04201b55d8 author Gani Georgiev 1736492007 +0200 committer Gani Georgiev 1736492022 +0200 bumped package version ӹLxtree b2bdf953d5815284b2286078fb45bedf8f73ed13 parent 762183a2555247d42291e4b7c74dea808ec08b16 author Gani Georgiev 1736427801 +0200 committer Gani Georgiev 1736428005 +0200 updated Google OAuth2 endpoints Ox%tree 8c6ee08d44bffe384e8d3f819f9b9bfd8ea7043e parent 2b60b61da936ad57a733b38086836133c743cef4 parent 89aee196f1b68fb841da0945e24fec04201b55d8 author Gani Georgiev 1736082653 +0200 committer Gani Georgiev 1736082653 +0200 synced with master sYPx tree 337fb8d13ef20c5799ec0ca796b359df1f98e240 parent 98af2ec7f448884bafbd7cd522a87c539e8cf1fa author Gani Georgiev 1736080396 +0200 committer Gani Georgiev 1736080396 +0200 [#6229] fixed display fields extraction S$x tree 6f2bab80aaaae3c0a8a4f5e9d31d247a41e13122 parent 41a92a7275b782d2b6b87cb83b970bf6c751eafe author Gani Georgiev 1736067926 +0200 committer Gani Georgiev 1736068680 +0200 upgraded to jwt/v5 Kxtree ed08069afb9f80a08e02d3c242c5f4532c065aa6 parent 74018ddd7b33da8fd71e1d41b511c90ce36f6797 author Gani Georgiev 1736020399 +0200 committer Gani Georgiev 1736020399 +0200 updated mime types autocomplete list #RNx%tree f88bad8efe2334a03ea0a2c7969a7fbe0b64f516 parent fcebb93e3d37b7f53d4b1a05c234dcef1949b7d9 parent 98af2ec7f448884bafbd7cd522a87c539e8cf1fa author Gani Georgiev 1735976720 +0200 committer Gani Georgiev 1735976720 +0200 synced with master ު[7x tree b6fbfe95b0d2a3d5e92e689a1e9b7bd7ff2f37a8 parent 746ebd5e1eed3b866cffb5ea4e01df7fbbc3d45c author Gani Georgiev 1735975184 +0200 committer Gani Georgiev 1735975497 +0200 updated changelog 1VMx tree 4d8d20ec3008d1cdd9fa03ccfc5b51b0cf6b0aac parent 13873ca97df56ba048f78c80922b0627b6a7397e author Gani Georgiev 1735935050 +0200 committer Gani Georgiev 1735935085 +0200 updated tygoja and regenerated jsvm types |kTxKj0D:E~,!@V5F`Fjsh1Ȳ[3ZA'oFjrYHS$ب2HcuDn708QFEQx}op5Õ2}s5 7S0F9ORK)F[23a Ěhw߃:ès;;ĺzVߙP΍$28 ._ԓxAn Eb1`c*.z R09 |_z_ot>gEdjȄY;$U/mW=M;-)`q&`rX"Nnhn\|%WR&gfo {Cչ2q$%$8ʞi {;4;_O _QBVExtree 77531a7b722189f1d81e4a2033dacb17fb3065b9 parent ba6ab63a6ac3682fba500297871cadbbe0bffabd author Gani Georgiev 1735918549 +0200 committer Gani Georgiev 1735918549 +0200 added JSVM new Timezone binding PLxn C|+`RmcAM`Œ~ӪP><[̠ F.681.k\Hw*x4ILD0YF)dy$mCtέxP>J/x/~~rPy $J)s?.bCF; }$os>Mq qߩX“xM!FOw م9,K#6Μzd>xo`V>Dʫ|b!dՋlq萌,Ѳ rX(,MʌΈUK\ˁƯҨ> wk 'mV$A^6F<u)S?bWxtree 2b6281f6b540c97b4e6f7e84b78705a1da861c13 parent f708210a2f272adc0ae673c9b46380b6c0e4175e author Gani Georgiev 1735802152 +0200 committer Gani Georgiev 1735802152 +0200 fixed changelog typo Kex tree 8d0887947fb29f5e48cdcdb2e766f435eef19c52 parent ee76b69e79a5cb239baafe68ddd2c9a126bcd6d0 author Gani Georgiev 1735799857 +0200 committer Gani Georgiev 1735799857 +0200 updated otp docs Lxtree e90fce442bf53a493312f5586ab5b0142fbcb42d parent 9646abacb21b9923275204cd6c243743cdfbdd6d author Gani Georgiev 1735746570 +0200 committer Gani Georgiev 1735746570 +0200 reorganized changelog Lxtree b9c04eda0e69ed912a6cd8b58ca261efab051d4f parent 54ececa208d5e6ead457eb29788cdadfd332739b author Gani Georgiev 1735745821 +0200 committer Gani Georgiev 1735746437 +0200 updated go deps and jsvm types IQ4xMj0> f$[ JhV@?#ETYN@o38CL5-NOF ~1. _q V*"]PiOJ8VI3J/`~ $rm1^c÷GW33 Jh;bo5?z 0{ t5m[*>K ~j?ax tree c1a354690fa8e3b5130f63d599ffd9f063c20996 parent 9c3ea1539cfc3c08272eb02f07d53948da1c6b89 author Gani Georgiev 1735742966 +0200 committer Gani Georgiev 1735742966 +0200 bumped app version WKxtree 7b52a8c65e53247ce5f453fb02f7e6df05050f56 parent 7814489c0ac8087642fa6e685fe02e05c92d835f author Gani Georgiev 1735742507 +0200 committer Gani Georgiev 1735742507 +0200 reuse the random identifier N x tree d91a7472fc7f045d51f941b7e2ae528dea148610 parent f0abab4436de178c2107b24db02feb61ba3163b7 author Gani Georgiev 1735588709 +0200 committer Gani Georgiev 1735588709 +0200 fixed comment typos [Kxtree 4c2007a854766c0404f1efed40eeddddd135c92c parent 9b046fce88bceb9a1def257edcd0c280a05f1590 author Gani Georgiev 1735583193 +0200 committer Gani Georgiev 1735583407 +0200 added ServeEvent.InstallerFunc field _Sxtree f33a5bfe3ff69b86f040adc6b80616fc4575fd73 parent 8b6c46fc272c10ab798c7b2b562ce49b5fa172a4 author Gani Georgiev 1735504193 +0200 committer Gani Georgiev 1735504193 +0200 removed unnecessary request params RjxAj!E}`n!9GY=Ӂ ?.15};Uߥʗ~.mTۍmtcԵuNB[YqV+d*|^־Wlx tree 999943f4cf52cfde993a076f6599d05955c6b827 parent a0afcaf76832d8dcc0cd8d27eaee54fe39bbb9c4 author Gani Georgiev 1735487197 +0200 committer Gani Georgiev 1735487197 +0200 updated jsvm types QLx=K1E,|L2 "X؋˛L0YY;3h6ҤF2gK#J 9\q@@ΓQfAk?0:x[_gμӎi\ 'mFgtpJaO;bxJ7 °œ+{ X [sM\Vx3fʒx tree 8b1f2c9078cd8a2e23dd504f344110be7400326d parent 58f9df165776ef9ad9ff838f30c98c8ec8e81f6c author Gani Georgiev 1735375491 +0200 committer Gani Georgiev 1735375491 +0200 updated ui/dist J?xtree 86243b8e12f1c17ec121d998f003144f1e21174e parent 47593db8a10841a418fba33c5e154fd283be5340 author Gani Georgiev 1735374734 +0200 committer Gani Georgiev 1735374734 +0200 removed the trailing slash from the env urls Sxtree 5b576efa74aac749936f632b36843bcd7f7d30fd parent 3fe3b8d459eb992f6999c603bacde3d5d5b2eebf author Gani Georgiev 1735374220 +0200 committer Gani Georgiev 1735374220 +0200 use typed int64 const QM2xKj1:EFִ!dsH@32r@n[T-SD,.0K!5Y[ӂ.̃ ks6 ĸR3gDŽ n2ۉ?[ùt75ݛ#a) :^[a w 1735212302 +0200 committer Gani Georgiev 1735212302 +0200 updated changelog GJxMj0 >-āt7Ҟ@dǐi_ xOUf`& y)D Գqʛ(N|4PS@rE/i !ר<.{[K+\j-혷!RN#B T*;nߝ<=:Iغ>ϒ ݺ# fYx tree 41ce675784a5586511418e4dee5e2dbdaa1cce31 parent c20c25fb13aca4de0f08c1e9aecb73ccd586c8d7 author Gani Georgiev 1735159020 +0200 committer Gani Georgiev 1735159020 +0200 updated npm deps ĎKxtree 54a6bb209d608412f35624b1f51bd04dec2067ef parent f63d61cbac0dbad9866bb3a512fac89b2038c1de author Gani Georgiev 1735158264 +0200 committer Gani Georgiev 1735158264 +0200 added crons web apis and ui listing )Qxj E~@(.KFGhHk=A%< jePj|^ejf6NƠ-w=4Vɹ,A`tQ'?*ܩe už'#W*3C!^BJz+EIW<^2VNdK{ߟz!^:xKj0D>ECc anѲZ[䞄> գD~gDüL:3sJ& nRŇՅd#UL$$^dޏ7nr\ sy]c!7 "EzUR YvO{>hRwoN)P?]a`s/cxtree 893cdb4a6b478365c6b99a482e493bc56b520379 parent 7b6425a3cf03c7039862e28e32e21a3857881ce1 author Gani Georgiev 1735031246 +0200 committer Gani Georgiev 1735031246 +0200 cache jsvm reflect created types O#xtree d5c17c6659d6423ea47bf62fd219312173f7d61b parent 03fdbfcc57c473664d2d5ec86eef39da9af4787f author Gani Georgiev 1734961440 +0200 committer Gani Georgiev 1734961440 +0200 changed store.Store to accept generic key type Ux%tree d5b034c6961ae5c3a157891e40a8218df32e4a9a parent 1f9b5c92b5e744afb5fce7c90b2f2cebd01be491 parent 2d906829a2d3f783564447c9e9ac0dd0972073c2 author Gani Georgiev 1734877664 +0200 committer Gani Georgiev 1734877664 +0200 synced with master xYx tree a5b7e01705ef1a644aca116e29a17045366c406a parent a3a7694ea61bbee510ecad15ba5f097cafc0a4f3 author Gani Georgiev 1734876756 +0200 committer Gani Georgiev 1734876756 +0200 updated changelog Kxtree cb3d5c3c16f668d84f4082b2a2ef9c4928265aef parent 2d577ec3eae3b8e43ea1e79a0eab7b401a7ad13d author Gani Georgiev 1734876621 +0200 committer Gani Georgiev 1734876621 +0200 bumped driver version HMxtree ce879d0adc47c60bda50411fd60c24b3bb460211 parent ef02682a0028dd96ec5c1364ab1f2358f7a0a282 author Gani Georgiev 1734876338 +0200 committer Gani Georgiev 1734876338 +0200 added Cron.Jobs() method GL~x%tree b4575ed3458bad431c50be10b4b3b29e39ce23a5 parent 3ed0cab42b18aa349c738c92ce589b1c6bd349bf parent 2d577ec3eae3b8e43ea1e79a0eab7b401a7ad13d author Gani Georgiev 1734855884 +0200 committer Gani Georgiev 1734855884 +0200 synced with master .Zx tree df43c960e8b61fcf4f72d69a85ec729345f6a1c1 parent ce7baa4db87b2d07b11e03dccf071b221c7aee56 author Gani Georgiev 1734697177 +0200 committer Gani Georgiev 1734697480 +0200 bumped app version ksLuxtree 80757f151383981d5bd3608f7a5b5da204bac045 parent 734df3f050369fd744f34c86bab6057fa0587a40 author Gani Georgiev 1734696669 +0200 committer Gani Georgiev 1734696669 +0200 updated modernc versions checks ;OxMj0:@cA(hؖq@{ t{mcfrtF'3yv̑ Q}>H!䜹t]bˊv\i)pEp_j'k/p!02z4Zv&m$=B!Zxtree d2e4a9cedea5d3f57f805dac251c4e14bcdf89ed parent f445f2d0a77aeba87f3c1100a69d30fba897af8e author Gani Georgiev 1734640762 +0200 committer Gani Georgiev 1734640762 +0200 update js sdk UK xKn DL0|(n4 bps |UO%̠iKb#d7%m-"q`RKڊ5hYaڢaf :(> <3loB;+BPZާ}~2Г[U_x%tree 3f035dbc637667a08cec66b0df864a1d938b2678 parent 32611bec1661d69b1ae92607f29841cc1fbf9566 parent 7f5da65bab2619cfa2418795610ac1ea78321a43 author Gani Georgiev 1734601478 +0200 committer Gani Georgiev 1734601595 +0200 synced with master eX@xtree 32e855ca9c4ce9eb50059e542e847025ebacdfb6 parent e61ce4540876c5aa82ecc3da4e5a15ee3b35d420 author Gani Georgiev 1734601294 +0200 committer Gani Georgiev 1734601294 +0200 fixed code comment typos N3xtree dd912bf938f68aa324ec0eb9f04d8d05ace7a5ca parent aa71fbe71f0c3b891db4c5e5ffcc83105d23839f author Gani Georgiev 1734595745 +0200 committer Gani Georgiev 1734595745 +0200 bumped golang.org/x/net to 0.33.0 nPĚxtree 67eb044bc5924ba9fc985c2fd1e27eeeb457d3b3 parent d06a01b8087d463e06b00eecb3a439481958425a author Gani Georgiev 1734540754 +0200 committer Gani Georgiev 1734540754 +0200 updated v0.22 changelog LLIx tree c3efe0568224de69a6d37a5b5e993f677ba83089 parent 7e6a906755dbe8f2227b751e78dd8fb1f38f6315 author Gani Georgiev 1734538834 +0200 committer Gani Georgiev 1734539262 +0200 bumped app version zTK'xtree 1500c1aaa5b086f3cbec260c94c1aef500865778 parent 5830a9d901b540cf8ddeb712e8d767aac80660b3 author Gani Georgiev 1734538083 +0200 committer Gani Georgiev 1734538083 +0200 downgraded modernc,org/libc to 1.55.3 `sPxMj0F>@Jw9Db,maY2_j"н$S̎#GPX {'  r? zMxD$D%4Cϕךux%c p\@/  C}RiVpaMP+S!K s:.cr 1734427948 +0200 committer Gani Georgiev 1734428667 +0200 [#5964] refresh the token key on email change Sxtree 449e00f0afbc592c53fb84d8bde582cdd9a8cbd4 parent 4b0f7e8c5240c639a4ff466eb45dbe7321864d31 author Gani Georgiev 1734420496 +0200 committer Gani Georgiev 1734420506 +0200 print inline attachments in the dev mail send $Uӕx%tree 277c975e5a09d9de75e33cd277e8fb2de719dcab parent 6dbb6f0870625070540835c29133059bced92ad3 parent 8f1026bd37691bacc39933fb61d654a47ecb7afe author Gani Georgiev 1734357831 +0200 committer Gani Georgiev 1734357831 +0200 synced with master (YCxtree 0ea04b54a7d271bf530cb32ccdd687cd3f6b5c28 parent 70d2280f8e0a58ab8852f35e53600ce6e03c8f26 author Gani Georgiev 1734354259 +0200 committer Gani Georgiev 1734354259 +0200 updated deps and changelog $/N:xAj!ὧ(rPZ!B ۧ!"`TgQr>lم(#]Cb'kP4)qA:^&/Uy^~lԶ h&KpB 1oPdZ%!ںJ {R?{UYxKj0D>Ed},{!Ymd C҄?07ȲzUMv}h;;8(3V|o5Z[2^G% Cu:x{ o.M/S!ߦrrJUZg!hu {O)i.BȎMke]?߿':v#eVp%Pq{#5(=t+_mxtree ad7618b509418d81f08f5276e44d9a85a352e8fa parent 0b1e804eb216e83e442477f0eea732cbc8258c20 author Gani Georgiev 1734338300 +0200 committer Gani Georgiev 1734338300 +0200 updated js sdk Hax-ʡ @ @)RH~n`]UQ`fei=8)(0i]=TC3z  Z@GpPB\y&-[#xAn Eb" 9X^^]'?I[j9렣8Y|55#a NBr՛ 3ݜivZ-p.mn'^omu}-DFkuupP^hp(?^ K?02W{xQj sh@Y/4Ѡ&eoߥ80 Zk 3h<(̀v#-ZIO2z B9%1Mg[sHD\k9n7;Iid}^edދ)V.OxƴP[Ay Ԗ gEKy9n ;JgE~Of$xtree 8b469f5e11264725995f704bb25daa7e19eb914d parent 5365fd2ebab946ae50fafb425c42ad13689cf0bd author Gani Georgiev 1734114424 +0200 committer Gani Georgiev 1734115044 +0200 added mailer.Message.InlineAttachments field UEx%tree 7385745b0ac8325c9a8d5923bc989c05add05770 parent 1ff7e752c9179d4f63b3145b626d349811dadce4 parent 5e690ad084eadbfdb3252f4829f24c6b790e6edd author Gani Georgiev 1734114365 +0200 committer Gani Georgiev 1734114365 +0200 synced with master XߖxJ1@|KqKn@l"Ā !N?`yNq8s0C.̏$S\W:EisH 9oWH+fIQPi4Q#2% Q*S9Tn\POogD<=*DqحNhҷ'z/o 1734037362 +0200 committer Gani Georgiev 1734037362 +0200 updated jsvm types Kixtree ead35a3521ea3ae65999ee3fa1705dddf5614105 parent 7e4dbc23c7cfea07c193729663f1294db2005c69 author Gani Georgiev 1734037261 +0200 committer Gani Georgiev 1734037261 +0200 updated collection db methods godoc KQxtree d843f53c91a3a4d2b4201f9321a2f5fa93e6c2d5 parent 03de77fee89eeefb8701234e9d8606ccf187370d author Gani Georgiev 1734036955 +0200 committer Gani Georgiev 1734036955 +0200 speedup records cascade delete kZPxtree 0a873f83c8a185fc6349023ff93daf4469bf22af parent 7fa7c00b72570419c0e08c2d86af4e000ce73ab3 author Gani Georgiev 1734027944 +0200 committer Gani Georgiev 1734027944 +0200 removed the create api rule tooltip Qx%tree fd99a966b54720fb6f369cb12de2953484d94a81 parent d59bfd01820dfd1ab780f37d783851c5c2a88525 parent ad0fffa8548203b0f5c323a2fea44d7405c23730 author Gani Georgiev 1733998622 +0200 committer Gani Georgiev 1733998622 +0200 synced with master Xxtree e8885d2974651ab67382f0946e87fa951733ada2 parent fdee3e425d8c927130e6d4932954e575fa530ba1 author Gani Georgiev 1733998307 +0200 committer Gani Georgiev 1733998307 +0200 moved unnecessary reassignment rOx tree a0ac5f2649d02a03154384e342bcda773be4b490 parent 8c3ca25191773bc5bb240aa93a813871afea6080 author Gani Georgiev 1733936445 +0200 committer Gani Georgiev 1733936445 +0200 updated jsvm types ,XJx tree 93be315df8dd4ef74eaa08ea612ac552f9f16e45 parent e89f5d768e3d0306c61bb4eeb2feb7cea90a793a author Gani Georgiev 1733935941 +0200 committer Gani Georgiev 1733936428 +0200 updated go deps and bumped app version SϞx;j1D9EC"8C=RkV0 vWљA2wd6(RNE I 5:)IA{D -FG~ux^U*%!^jxJeUK|Y(%Np;yFipR: smOڗ?XxK0D:EAHi!%1l$9ۏrY>2C*4_j"4Dɡﭝ(YGbʥ@,:4:X鐧-5.xY_[' O yyc^)/縭wP4VR᮹ww[!O(#FoZr>~C1$X:W 78' t[ xtree c0c32fadbf7846060debb5adabf2bb919ae6e69a parent 38cbd4caab54ff2298d234fa2373cd4c80c06254 author Gani Georgiev 1733908109 +0200 committer Gani Georgiev 1733908109 +0200 replaced LOWER with COLLATE NOCASE Psxtree 3f07f91f48bdb43d6a5cc1b912860c7f989cbcbe parent 95a1dd1d0a8831bac63c54150fe08936c42ac84c author Gani Georgiev 1733908062 +0200 committer Gani Georgiev 1733908062 +0200 fixed log message typo :$M4xtree 2ecdb12ed474788e6a7fb719caed19c214481aed parent 40bf6f68c63e934324135509faa1af7f26fa3980 author Gani Georgiev 1733739852 +0200 committer Gani Georgiev 1733739852 +0200 [#6066] updated text field validation message 2Tx%tree a78b8c0ebd911a59854456261f37144385e67e28 parent 2509744ebcd3820fea5fc20b20372002daff2483 parent 40bf6f68c63e934324135509faa1af7f26fa3980 author Gani Georgiev 1733725544 +0200 committer Gani Georgiev 1733725544 +0200 synced with master 4W|xtree da5708ac8d2d16e609492ed1dfc247f8495d5636 parent d8c39c1f8191e0edc97779cea4e7aecf1681efd4 author Gani Georgiev 1733711624 +0200 committer Gani Georgiev 1733711954 +0200 [#6063] fixed x-forwarded-for typo PxjC!D~Ņ.OB)]5 ].{5B`Lif903:(EQ P_6A h.S '4h6.FzRl'b@Spp5ÁZO>1͸%MJIn8MZ 74Wb"z:,?zlV57r*BJݍY oX^x%tree d7d53dd29e3d891cb2b129cf41eedf9390b83735 parent 9301548a5f462367cf8ac75674c57a33710168a3 parent 339f89bbf8702b7e615a293276bd4550ebafcd55 author Gani Georgiev 1733661787 +0200 committer Gani Georgiev 1733661787 +0200 synced with master UX;x tree 6444b9a55c8fdc31907487350e2aefc5795de80e parent ee04a03e2cffca2a9ee1b6b4a18e640ba72b6f7a author Gani Georgiev 1733659207 +0200 committer Gani Georgiev 1733659207 +0200 updated ui/dist GKxMj0N1Bxg(cdTA,YBo-9D`՚l!fBRpyKމ {u6aSXMb]Ѡ`"35 Tygx+*;m9~\|.<ǜbML!j0&J~>`%dbNNR[$ſpM^ 1733566494 +0200 committer Gani Georgiev 1733566503 +0200 synced with upstream s3 driver QxAn bV6DQ۾c  Efw>Drꖪ3=fƨ#z%ifMGN|li6l-[g[7 %Ǹ)˭uґʭWZ}j/hhk(=$ᵴs#H:~hrhR$C\x tree 9a5c1deeda9978fa88fe6d2adf4fa72c872416d7 parent d9669a6cdbca97f4defd3d1e55e93e18fc1f3103 author Gani Georgiev 1733513937 +0200 committer Gani Georgiev 1733513937 +0200 added tests.NewTestAppWithConfig helper Txtree e8559a638f64ceab0269fb1c2d7d524a1a5a1d8d parent f417555f150f6c3ca36657cadea85318ee376e09 author Gani Georgiev 1733494119 +0200 committer Gani Georgiev 1733494211 +0200 added :lower modifier "L`x5tree 34c37ffec8d2e9cf6715ff215f7d8ed4aaf3f6d2 parent a91d085657eb1d16c88889cf5646480717446037 parent f745140c1b861755dc4e53787ba0636f8778afec author Gani Georgiev 1733487697 +0200 committer Gani Georgiev 1733487697 +0200 Merge branch 'master' into develop O]x tree 0460efe3cf5d9a476d11028a870245e0f0f1e7f9 parent 49e4ba7f877a4f9a33622ade1ada28299f264d5e author Gani Georgiev 1733487682 +0200 committer Gani Georgiev 1733487682 +0200 updated jsvm types KxIn!Ｂ,fɊr;zfd D}&R~cաjH֫xel2!)KAC W %@X9XK,l) {Q5o} Wc [z?>\ Z9卄"fax0v[(hG_mVx=n!F{N1}$k5HQ)Ŗ9f1|{S)Fzqkxc b j՝vh9-cDV&Wr"^?Ƶuظfؤ4 )h#@fZo[C"\!58Vk.Ij{oUc[axtree 261b18434d9cb80a6bad825683eb19e6ecc2b48d parent 542fe1e29502400ecf42aa033f1003468cc106b8 author Gani Georgiev 1733303160 +0200 committer Gani Georgiev 1733303160 +0200 [#6019] fixed README example fL`x tree 3df420621117cf506c191a0eccf608dcc2de179b parent 927f54aecb55a0fc58e5bf94efaa6bb00f9b5b97 author Gani Georgiev 1733222318 +0200 committer Gani Georgiev 1733222367 +0200 fixed logs search K˒x tree 7d4385086be0714f8da693ef2e07dcdfacd66ee7 parent e4039a31456ae766986f13e23e6f6598a3ba9c6a author Gani Georgiev 1733141051 +0200 committer Gani Georgiev 1733141051 +0200 updated go deps J'x tree d08e64c42fbe71396b21b140b27aacb85ffa9fed parent 76ebd6b747c5c091dca5cd2e860cc3056f6088a3 author Gani Georgiev 1733140091 +0200 committer Gani Georgiev 1733140996 +0200 updated ui/dist f$Jx1n0 ]^ D92薱rUJ_9A],Vg6*-BE7 ㊓ypmD<-3)I5Ym.h >\OhaXkCAЛ0&+$ݥ(/J<>sVLLYLxtree 2c8ff618dcf3ea3e78d73940a1376ca2997fc591 parent 17ae278abc570659da2a9b4a68d0cec2c90a08a0 author Gani Georgiev 1733139944 +0200 committer Gani Georgiev 1733139944 +0200 moved the default UI CSP as response header Txtree ae2cd301ddf52c553d048ccb2b3b33348e37dd36 parent aed6b2d8807738cf01c4547eb9d0baa6b7e271d3 author Gani Georgiev 1733136669 +0200 committer Gani Georgiev 1733136685 +0200 updated autodate test interceptors (Rwxtree 73b7c096b25ecf103b107e493536e010f51506c6 parent 7fd3c387ad7619da3d7dbf4bface6e9679ab06e4 author Gani Georgiev 1733135933 +0200 committer Gani Georgiev 1733135942 +0200 [#6000] fixed autodate interceptors bQx tree 268f7fe2da0ebba4c9f4400093536e9ff68c3793 parent d93dba724d963dae7be3286f7143f2a001400954 author Gani Georgiev 1732874373 +0200 committer Gani Georgiev 1732874373 +0200 updated npm deps iJx tree 7f9cefcffbe930fb46586d8730094e23c82497cd parent 9d4a183a22353843f6a676c9234ce5401ca9adb5 author Gani Georgiev 1732872654 +0200 committer Gani Georgiev 1732872654 +0200 minimized repeated field.GetName calls Rx tree 2acdbb49132f5997f80d8e324481911a872a8ae3 parent 849bdfa11ee6fda2e5b13c5c2a53ab26935ae2c1 author Gani Georgiev 1732871955 +0200 committer Gani Georgiev 1732871955 +0200 updated ui/dist WJrxtree d2a136338ef2f6f3835f2acac2caf6b158bd22f7 parent 0d58c9e070f65a70facd06d2b132a6748353bd6b author Gani Georgiev 1732871427 +0200 committer Gani Georgiev 1732871427 +0200 updated Record.Fresh and Record.Clone tests գTx=k0D{Fւ#r}ڐB֮m-r>"Sc10wr dkYnQrw©JcВ qr`Pq 0dmL? \}p\_p^ZG|Yv>$j5*tVI(!FX+W1Ed7qȅ·|-'_+%\;|cZ Tѭ!cx tree 4f4c07083fe499909ac66e5a7c7dd98ab53c46d4 parent 9015429ca5589409b70281f2c6b4b35309060cf2 author Gani Georgiev 1732803861 +0200 committer Gani Georgiev 1732803861 +0200 updated go deps Hx tree fecb94841f41babe70fd3615a23a1fe7091a5473 parent 07b8bd004afd4191a6834b3b75698e1e1f309217 author Gani Georgiev 1732800079 +0200 committer Gani Georgiev 1732800079 +0200 fixed comment typo ^:Jߟxj0὞bu1]c*[6}*NoD ᗷ!DɈ*P;6*r &aP 1732694531 +0200 committer Gani Georgiev 1732694531 +0200 updated changelog bJx tree aa28b043ec0e2c68fe689bd8c03a7f390583c694 parent b8489456630d06bc882d4f1858dd2c211f5b4406 author Gani Georgiev 1732653263 +0200 committer Gani Georgiev 1732653263 +0200 updated ui/dist BIYx tree 84d178caefa3d2b5cadfe7c8ffdc0f7ed08e4e91 parent c43ce6ea8b790ca21dd3aa4a589b7201aeed5791 author Gani Georgiev 1732653106 +0200 committer Gani Georgiev 1732653106 +0200 updated jsvm types FMhxK 94OC3>SF0l3oiљQHER6BGzoQ):Qp7nla& k2q@Oz i-O:(o^/˴GX([)GnU~J~ γ1>\޵[xtree f87efe0c317ec55c9f6209de780a57ee13c51f0c parent b5905d8614ff825a32d27518a17913199f96a55a author Gani Georgiev 1732646765 +0200 committer Gani Georgiev 1732647515 +0200 fixed dev log query print formatting Qxtree 0da9bdc10df0c55d50cf220d8b1b91a9f390f68b parent d5b3dcf75002c298aee82d598a183d9fb08a4158 author Gani Georgiev 1732643426 +0200 committer Gani Georgiev 1732643481 +0200 updated otp request error message QxJ1@|EX~,v[k+ɝlILFbS9I.ynevƦl1zaDV.d8M(v!zɋ64O"\P&w@&>}% Tr~gNI+usҿJ}<`'C 4~m9valҮUGx]J0߻y䷽ u.`L۠IJ*pq>~Ùwzeb\HR`anVXcV^ʹ֛Zh\F jУ_6ՏRN9K#>puO?g_ Eh O(qMwGDaBγ9wH22<᭔=$ ͗b|~<\Co* ix tree b6b780b2a035b1e413e6e9f6064fbf748a9ce70f parent cdc90fad3a0f491552b8eb433e5dc6a71294e613 author Gani Georgiev 1732527566 +0200 committer Gani Georgiev 1732527566 +0200 updated changelog KYx tree d1269418665eca19a82d64223aebec8984eb38aa parent 383464c9757440dbe80f69f74e15b0a32c4ebcb1 author Gani Georgiev 1732527367 +0200 committer Gani Georgiev 1732527367 +0200 updated changelog Jҕx tree aea59a93398bb3863d318037d15c340a5793897b parent 223d5cff3e1c357e0bda518d8e1ac29d6014d8f7 author Gani Georgiev 1732527059 +0200 committer Gani Georgiev 1732527059 +0200 updated jsvm types @K x tree ce983011085a7dee6378dc9d760a390cfe080a56 parent e7714bfb5f7aef1bd4e5ce125a3a2602645821c8 author Gani Georgiev 1732527001 +0200 committer Gani Georgiev 1732527001 +0200 updated ui/dist xIxtree 6be1cb8899c8a37ddaa2d65f819db5ee8954722a parent c4dcd734e03ec9b3d58f7ce4c5a8b30abac6f679 author Gani Georgiev 1732526900 +0200 committer Gani Georgiev 1732526900 +0200 updated error messages NQx tree 30a3f63d8ca53f9e101873f9ded961c7ce24e9b4 parent d6afb012da3b911c7c5acd5096c9e825c5af161a author Gani Georgiev 1732518673 +0200 committer Gani Georgiev 1732518718 +0200 [#5940] added blob response write helper RxKj1:EFBz$voar,x?J]:&9㥉{8(-Sp'uK[meU܂Vz J |ri>[ra;oi\_ћRo!bWc\̙2'WhG2U\t"^ Xxtree 2f3d77b8b53a22da4d3fe4b63dfe31b303cb239c parent 19c00ba4845bff68fe5e6de00077da8c7c8821b9 author Gani Georgiev 1732474800 +0200 committer Gani Georgiev 1732475694 +0200 updated changelog link \Mxtree 6d72bb01e01c1e7bf2bdcf89b93e47f2aff13ff4 parent 9ec5aac88d6ee70bfb499ea5bf7862129bf46297 author Gani Georgiev 1732459021 +0200 committer Gani Georgiev 1732459021 +0200 updated PocketBase JS SDK version \ Qrxtree 98ad1e270057d928ea782f2841740e595328accd parent ac7e846046b82b53b6475870128805d45a12959a author Gani Georgiev 1732458034 +0200 committer Gani Georgiev 1732458034 +0200 exclude autogenerated changelog htmls from git KT_x tree 3d8239293eee37a4e1efcb0489f6931c00174c63 parent 9d5210bfd2f0cc7e8174a297dff3a3464e53327f author Gani Georgiev 1732457691 +0200 committer Gani Georgiev 1732457691 +0200 updated go deps pIxtree cd9f9c89ece92b1e801709544cfe9ca20cfddaf1 parent 7334466c4d79557ee9512d5baa1b1ac313c2fa24 author Gani Georgiev 1732455342 +0200 committer Gani Georgiev 1732455342 +0200 added list hidden field filter test tlRxtree 1afd230e290e37e1f7374af471bc3bbb5631a117 parent 7a7f4369c255fba27aea40bf89d49d7f1114b00a author Gani Georgiev 1732453368 +0200 committer Gani Georgiev 1732453368 +0200 autofocus the installer email field Qќxj!D~E=Bw8v4xR+jf8 w%{2rQY}mQo.`nrBg)U|Ϋ&p> [R 1732445283 +0200 committer Gani Georgiev 1732445283 +0200 updated ui/dist and changelog wOؚxAj0E: FB.I3@lYBoп{LJ?:3'+QTd9\Luf(3Ng\d✒X Aƒ[__p[N,x_V祴 :9WZs0T+Whжh}|uW~hsQ{;W5oQXxKn DF|ƀhݜn c?,r,jQ,Ң+$r+#M:?āpdm4vAYfGNτl^:xS yG?yDz=b_;$|I-^ƠTLP^0ltyGxpBJGi2O 8M\:xAN0yYbOI$|`bOQb[$c}nJ ;6ƦW4!;kqz] 3YhZ+*yޒcr;@LcN)gueז UW963qi~pxtree ce9de3ee94dd9b81cc8a2bc36d95da0a87bb671e parent 6085e43ee7f6c48da93ea47b23fb9bdf17383fb7 author Gani Georgiev 1732358643 +0200 committer Gani Georgiev 1732358643 +0200 show the OTP id in the superuser form $SExMj0 F9R(sh"ch⨳JoPEᵜx)^vo""‹ MW3bbh vCj+`±]wuV{MYtL?\Jxtree a20297fa01ad73092538663ed01c984eb5e3dfc4 parent 675d36f5e1f664f22b3ad23b8170fad737703f6b author Gani Georgiev 1732350083 +0200 committer Gani Georgiev 1732350511 +0200 updated checkOldPassword validator OQ-xtree 9a7edde8eb150975036c5355fd7354863ec1cd47 parent 763fb1ae53bb6d3354c5bd7f6fcbe0fc0bebd95e author Gani Georgiev 1732311044 +0200 committer Gani Georgiev 1732311044 +0200 updated ui/dist and added fallback debug log U^xtree faa64ebf7d2bfcd6dd7d202b9fc5d4d3699b9de0 parent 9543a4f54cee607ade23e47f6d65f8ba2b9f9f43 author Gani Georgiev 1732310330 +0200 committer Gani Georgiev 1732310363 +0200 synced ported cors middleware u@QBxJ1y C=/Izfg/UWPTo"b<20Z83e4eVWnrt^J"Fo"R%]^Pr).(~gmn7ޯ;oSOH:Fj}]1cޥS= M'̟/o3R7X#xMj0:Ń.C$YV%l =@B?O A}Mtv1L-D`1Ft׺5\<Ȅ$xJ6WhT쐓Ĥ3iElK̭u \ݔJs3=]5a_Aw8rv:ZE[nH>D a)#G*YG S2 I.ʽrۚ>a.gh1xtree f1aefad8e511ba10355bde99e448fdc6828b02be parent 965a4730ecd07c1551388c9216e2be36134d49b7 author Gani Georgiev 1732301069 +0200 committer Gani Georgiev 1732301069 +0200 added apis.ToApiError alias fN5xtree 084dd0cc13abd05613d3619523db2ad3218376f5 parent 2ec2dc36aa8db0e8ee9bc42ed7f97a2f0a4dbef5 author Gani Georgiev 1732285132 +0200 committer Gani Georgiev 1732285132 +0200 hide batch api preview for view collections 7U{xMj!Dm?Bvs;9'sqdYda&:r,:d];iʹ (x5\4 1732200919 +0200 committer Gani Georgiev 1732200927 +0200 add s390x and ppc64le linux builds Oxtree d452495289027d5ed2f86e7f7fe0413e202f43a1 parent 4e1ae34e46a96d9254290ab4007a68fdf57ce346 author Gani Georgiev 1732199620 +0200 committer Gani Georgiev 1732199620 +0200 updated go.mod цHݔxtree 7f567a08bb45849dea18411daedbd34f1726fd8e parent 11bd32175794bc6bc655a60a9393ed616ee559bd author Gani Georgiev 1732199382 +0200 committer Gani Georgiev 1732199382 +0200 enabled Buffer goja_nodejs module ]Qxtree 29bdabfb434c9238e427e0e53c13887b192022cd parent 0858deb6c381210936576b93cd90093cb3fe8628 author Gani Georgiev 1732184644 +0200 committer Gani Georgiev 1732184644 +0200 updated js sdk and other npm deps teOpxtree 46f4273fbecd10281f29d96af2960c7b24090724 parent 374e05fe3771462140b9b31ac2ef76a571258dfb author Gani Georgiev 1732183860 +0200 committer Gani Georgiev 1732183860 +0200 fixed oauth2 redirect test 2M'xNIj0} eA)ڶ<$A.PU 1732180311 +0200 committer Gani Georgiev 1732180311 +0200 updared rate limiter sort rules Q{xtree c6753aded63760d21c6123a282b28cf864cb4850 parent 4cc64712a3c901866d0cbcd2712c1db9815461b5 author Gani Georgiev 1732114567 +0200 committer Gani Georgiev 1732129482 +0200 added record json copy option ;fNkxtree c86ad69662cc4d7868bcbe310b3544651090abc5 parent d931ea21370cfabcd33f1a0bcd485699dca3a707 author Gani Georgiev 1732051405 +0200 committer Gani Georgiev 1732051405 +0200 close channel on client discard P xtree 44152a83be91ca51365426003fc8eef50b311c77 parent 3ba23cc33864261ea58589c1861017a603d16880 author Gani Georgiev 1732048664 +0200 committer Gani Georgiev 1732048664 +0200 updated tests JGxj!D 9&,rۏ98 7PP(jDdТCέ26 e*Cқ0D U;֩kc'{p5ÍZO~^?sS*HL81}tL>BQ;<  :y'%_`BB۞2Z/hxKn!sGHQ@CX383|^jǹB{E :EZAhErHg${&x"D¨GTrJm . \xl/|O߹Q0$*tFJx[BwbZZyeϑJex:v"Ǘۗ?Xx tree 804f41d4fd984c5dc3f0f28c3d17ab3c593ee460 parent 00cbfeea5a5e319536024739e3d1276c1661e470 author Gani Georgiev 1732030038 +0200 committer Gani Georgiev 1732030038 +0200 fixed comment typo [JԘxn0Cw} Im (Nڡ?pҝCmU@~>$ka d08y'Ap5)NIXx.ωȮƧLF^r3geҰ[l(kv3V0^ZtZ MJ3w\WsS0|O}^Q% ;$2HQd/~_dxKj1D:E%dsGc4=YxUX9("N.lvאpLP(lԵ 1f*CBY$2:\U֗O\<-To'3) ͑u  OUQCm+lWwzϴqzcWg%[xAn EJ# Ina"´47zOytfKÂaB="Zcm 8ȎIO)y6YDVǐLR_Z;wn=,xo-MmVb2cBQ^=p_Q{Bs 1bՋkG axtree b8c9c9916de25faee8d1b3fc496eef1ef21d4b6c parent 35df92f6e2d47eb5842981dcc018e8213b9a8355 author Gani Georgiev 1731938132 +0200 committer Gani Georgiev 1731938872 +0200 auto sort rate limit rules אO%xAj!EAz29G-tCA6_<]m=#$$ļzغ;5&rXP}qs%:P8 Z# t"[SZ/U^^&~~޴Zc?*Iyuڦ_|#n,0pl<ر W@0RUus~ ca⪷rfiUfutqb d*[|D!xg,㔍H#>^*&.IN\^~/9B%F5`ࣇzSk =P%SpM2Pz7<'Y .PJeثI~'_yxMj0:@K rH3veUJ|*3B4bNR9Ydc cQOG0yA/rHIJ+n\y~ŏyżSYAyRJ8=Evͭ?.GSfʩTKNp{k9:l7#n_[Ycx tree 9547a1dd1c044392afdc0f4878860dd99adbbc21 parent 9278bef96331ddd5a7c16bf59fec2c9912df3bc3 author Gani Georgiev 1731851615 +0200 committer Gani Georgiev 1731851663 +0200 updated changelogs  L9x tree ea844de31f6126c41b06af50b2e4daee2f1abfd8 parent 166711e26e64f16d3681ada80c529d998a4f2c69 author Gani Georgiev 1731850718 +0200 committer Gani Georgiev 1731850718 +0200 updated ui/dist Jmxtree 02b427416aaf693699495e06bbc708894c706bf5 parent b6615280800873f5d7778ff1efca0d7be3683ae9 author Gani Georgiev 1731846402 +0200 committer Gani Georgiev 1731846402 +0200 added periodic wal_checkpoint calls tPxj0^l(={Ϋݵ-KF7A3ӪhB+f0S:w * :LQ^ MB0zd=Ř g R O~+ۉ:X=+ o(սZ,:d7|}-B׭v2*@Ua.g^x tree b3b8590b64c321fb60cb676d39b7942dbfcb8ff7 parent a6746d8a6c32fa559cfae2f3f4340e04f61358b9 author Gani Georgiev 1731776187 +0200 committer Gani Georgiev 1731776220 +0200 updated godoc links ="Lxj0{?#YZKs#!LWM73|LVWfCaByjZI;UVmW$%bHl%oC~DQ*(qg ^aiD!{Io +j#^"4z#x"Sg{J=r!W}bq\j_b^ ү~i̐xtree a55190aafa08b9f0b38baae9706f0df7ce33a2a1 parent d15003101d7da496b4573dcd7ac8198ecb84cf1a author Gani Georgiev 1731649527 +0200 committer Gani Georgiev 1731649527 +0200 added 'table is locked' error msg retry check U<x tree 321ccaa2f9625d90bbd093d252ad44cc9da29650 parent 68ac36a7f2738e479cfa5e869a1900aefbd52e71 author Gani Georgiev 1731597567 +0200 committer Gani Georgiev 1731597567 +0200 updated changelog KjxQj wO1E'Q#ҷL&c"$7}zoљ1--['gh 83'UȏݬE33Y(ފ&tLaZܨ[p.I}zPo\0~06X4j.=R U%ViM pwJn? R; da;#v- t`՟xtree 7ef5f0bd6700a2f6c28a2e04a5e70feed3f8f7f3 parent d54b36820fa24574ebffee7c7d90c6110466a90c author Gani Georgiev 1731522292 +0200 committer Gani Georgiev 1731522292 +0200 restored mfa ErrNoRows check COx tree c1768ea2a62eff57f05d8fad697dcbb35f58d3f0 parent 97abf4815d057091db2a8f63ae972e67ce3cd66f author Gani Georgiev 1731521715 +0200 committer Gani Georgiev 1731521715 +0200 updated go deps nJxtree 450a02c9e10faba31b371d70ad2580967dc60423 parent c0fa3bb01316d3960878cf06c4dc58934e873ac4 author Gani Georgiev 1731521667 +0200 committer Gani Georgiev 1731521667 +0200 updated mfa defaults and errors check Qwx tree a9889031f761b47555b2f128918046d0f70aa582 parent 41a8c40426f52addfc54307bab610e06a5202d1f author Gani Georgiev 1731519307 +0200 committer Gani Georgiev 1731520533 +0200 always load the full record on record view RxAn E>Z0RTee*#ِb\^]//V1Yk5M $8k+ZaԲ{``1~6RiF'G%T\c=N>R*\1'r1}K0/#JކqcRks`?*BNZ^R Zǐ 3T~Rp_b*xKj0 9--y@)9dKI e`n_݈!>$q8xf~Bc~-݁wg{4et[8-N v/J;w.ugքqAjtveZUN13cX2 Q k6ӱǀṕHb^Ox+ TX9 ^iV{ (yxtree bfd0c3d55ce8617aff77a09dbc6dec8638fcf4ac parent 684c428decf246bcda6d8982f5ad0a05841feec6 author Gani Georgiev 1731335086 +0200 committer Gani Georgiev 1731335086 +0200 fixed typo kJ2xKn >E#Y@`(hH|"DfEne=^ qѓݍ,PڒWF[@A967Ns FChHoV9:WpRpr)>ӍkT)ҠD܌C(!{yNRC%@@-@PyAw fykoVx tree 2518f830e461dff176813eb285f1cafa57fa4b9c parent 72cce196cc4d28da5b18f699c79f36c4bec5e194 author Gani Georgiev 1731333880 +0200 committer Gani Georgiev 1731333880 +0200 updated go deps -Jx=O1D{(Q"(B 4Hbgp8=弑f^ogäMQ &19F4J8Q 7 &Gǐ6^KrA48P-p5no3w<*D RΥwDŽxA78  OS[.%qqr _;%ӕj%'|K]+S ̦extree 8c6657c66187ae443d4b8e3063763653319d6329 parent aef627fb7081672cd7ef9df940b0214a70ec06a1 author Gani Georgiev 1731329451 +0200 committer Gani Georgiev 1731329923 +0200 added search filter and sort limits ̛PNxtree 4fd015300ccf81e1981fccd1fe878d7873d9189c parent 21fce3f83c1c85745aaefd900639d99af528629f author Gani Georgiev 1731327921 +0200 committer Gani Georgiev 1731327921 +0200 fixed settings test and error typo bQrx tree f57f6660e49350365f7e6cb47f8f32bededec4d4 parent 839cdfce55d972dc3244c39298e5993eda61cbda author Gani Georgiev 1731327894 +0200 committer Gani Georgiev 1731327894 +0200 added rate limit helpers for future use SߖxAjD!DBvsm¨ qdxUs$EspmKad篤]aC"4d ɦhOW%\ps^7^~NqIV[Q7DŽ9k<ڨ0Ȝi@n_L+@?~X-xtree 8726e6aa00af28f021c8b4f27c7da42b1036db31 parent 829358d7e66abd4653061f703f49b2721a7e48e8 author Gani Georgiev 1731276262 +0200 committer Gani Georgiev 1731276262 +0200 aligned struct fields Kxtree f9e4d4fe71083ff3c0d34619049b9bf02f7f1ca0 parent ce3a38a5b0456466041e72871f53c4846d2819d1 author Gani Georgiev 1731276205 +0200 committer Gani Georgiev 1731276205 +0200 renamed local field var Lxtree a10273cc535c95036954bb07806e9bc1e36944c6 parent 7d448041c224c3f77869caed84584413603de472 author Gani Georgiev 1731147886 +0200 committer Gani Georgiev 1731147886 +0200 updated otp manual rate limiter 5tNxtree b5c9115385756dc2cb2a66e3a6bcd6dda8575a89 parent 595577b604f34675fb1c31c4ed50f04fc5ef406c author Gani Georgiev 1731081862 +0200 committer Gani Georgiev 1731081862 +0200 added superuser otp command L-Nxtree 4190b9b863bcbfde19141c80ef5bfa0e9300dccc parent 8a460dd807089a3f85c2f6e0c598961cd43ed122 author Gani Georgiev 1731081853 +0200 committer Gani Georgiev 1731081853 +0200 added RateLimitRule.Audience field QBxtree 194597b7a5a146672cf233efe178ce27562c02f1 parent b4067eb3d3f593875fa99530e1d050e40ccac7d7 author Gani Georgiev 1731051837 +0200 committer Gani Georgiev 1731051837 +0200 fixed rc10 migration Kx tree 6bec05183635e04c83b16675bcc14dece6dedb91 parent 8b892192ab97a41615152d55061e41eab3b0c966 author Gani Georgiev 1730981756 +0200 committer Gani Georgiev 1730981756 +0200 updated changelog  Jxj0DCd˶TB M!z֊ ,'﫴=ɉRDZP=ڞ4W2ˎF6cA4R ƮƦ(uAv$Z+=aSLpH19Oع"++nBL@M)k%`kYq'3#}! Ds9_Ò%o/ ]o!nGx'"b`׶Sr3܍PZ-n+ݘ}}Cxtree a9cf4d583155174106921d0b501b9434de5206e2 parent d9225e83111bfb866920e7677913b58fa2c5bb5e author Gani Georgiev 1730978648 +0200 committer Gani Georgiev 1730978648 +0200 added default users collection rules Pxtree 79047837e1ca6ae2d90454426e7070077c2f62e0 parent b1b2072b00164e3696b951898449808ef4a99737 author Gani Georgiev 1730977229 +0200 committer Gani Georgiev 1730977229 +0200 updated v0.22.x changelog #Jٔx tree 647d94dc2e6d8aba00d17874c742e4ffb9bdd978 parent 9282388ce01c7bf9c918260df2872564895fa107 author Gani Georgiev 1730917534 +0200 committer Gani Georgiev 1730917534 +0200 updated changelog &Jxtree ccf3ef3915ae610bef42d6b32c87ad2833264b2a parent 9fe6eb31b871ba12b4e910ac65fcb627fa9456f8 author Gani Georgiev 1730916394 +0200 committer Gani Georgiev 1730916394 +0200 updated installer note dMxKj0:ECe 9ZVؒ49pBT=߄6ƾy&պwal+2ϥwi YxMj0F> aJ.I#YԶ$QB.<^s^96ڨi,QT8ݨY^JA9_blVELtTҞʥ̿Fy=}Y_Xnwªwb *ܞ0uZAK)?m0xjrq=pL;2<_w,fxtree 37895a0da0024f85ecc9c51bd531b0f9a4cd081e parent 288664e9beca6477cd016cc34c10c5b78d004224 author Gani Georgiev 1730836185 +0200 committer Gani Georgiev 1730836185 +0200 removed RequestEvent.UnsafeRealIP PxAn }R5J >pl)/ޠ˙ż* c4h8Lii l&X2IMށ0q8O <A}U^dy^|]:?|[6)YjKQE JnC+x]{K?G:nO.)~\pxMJ19EKNw: ;qQ*mtgHgoo{y/v^843qK HER~'G.xme h0ȁgp=YJ]|irXy(! F;8YUwԚa&}GḤ+Dq";l9w?)  (W!C.]x tree 5237d76633dbba458efad9e1e9895b269c5dc708 parent f97f422d23c2019c15044367cabb8a450b946d47 author Gani Georgiev 1730758580 +0200 committer Gani Georgiev 1730758580 +0200 updated jsvm types BJxtree 06c66438e7eb993ea2d29e80f9fe8bce3c724282 parent 4859f2bf5718c76379c885f567d09b42e072d23b author Gani Georgiev 1730758008 +0200 committer Gani Georgiev 1730758008 +0200 [#5797] fixed JSVM types errors jNx=j0F{BfC~ǂ )F+b[b/}}1hb)"g '܄#yv@2&Iܨ%)p8QF`b 1730728100 +0200 committer Gani Georgiev 1730728108 +0200 updated superusers test tokens with the new id :Tx1n {N}/X`(Jϱb&?AbFPPs$82Pd#.׀:Pq3챠]Hjl\Q>Dž:<ַ*?M|l\Gjo7›FմgCP]Ѻ@"]:_crQ|e(U 5~Xmxtree 5c9870ecaee38d612acd3a7875ddcebf5dcfec85 parent 0534637396966f1d09e20b154d56c1b35657325b author Gani Georgiev 1730632479 +0200 committer Gani Georgiev 1730632479 +0200 added realtime topic length validator tRxKj1:EF} |vOFG29~&xYA 0R1IB0v $x5E=s@2E)ʌKJHnZ6d0 cmX \>am_`,|h:֭o\ܹm_X>^,׽Xxj0 E x2t7ߡHr"q}@?+ι\TvM+tliz7qv:vL$ xy@73X獝tJ{XMl(kpǠp^/o|[ۅЙvnXcz}h)a?RNs$a&T4Pw-+U#w!;)cDHYί6%,ai> Awxj0D a,J顐(=-[AUi~73ބbD qQ}4znrݍl!Փ#y8A֨l&-v7Q\[2'oz y}[EgԈ]sTk":?|q\%B]/;ܹk!E{*v`ؿk.TaZxKj0D:ECkݜ-m-&/e=GQ@g/I49d,jO^ܤt äE(MjClNfv^oKԶfuzůb=ArNxGTw̥P*EZK_*. 8%Izgmz69w}u%\ yqA%+|g9xtree 996d000015263a15fda850b428a115fae3950e0b parent 2899f499964ffdebe860dc3a70caf5f1182f8397 author Gani Georgiev 1730577658 +0200 committer Gani Georgiev 1730577658 +0200 removed JSVM Collection class aliases Qxtree d6801b008056c42424d893c4cd0b6002b2c71bcd parent df2a876c6511931822510901c95660a71c01c5e7 author Gani Georgiev 1730539221 +0200 committer Gani Georgiev 1730539221 +0200 normalized Collection struct methods receiver T?x tree 1a20433003f61a0bef50922a72161901af77e365 parent 4b4bef96aa6224009e9fefbfde4a4fbc1c2f9697 author Gani Georgiev 1730532864 +0200 committer Gani Georgiev 1730532864 +0200 updated changelog (Jߚxj0E\ҝ7BB?`$ ?sr'^9LI?G}(h|&0Bd ;m .ƜIکCBrI^Srhrc|n&*LRˎˊ:䶾Fڨ2"bke\mFN: g?7|R7ãx=~mA<Yx1N0D ȎđApqv#q (h4S @l zN񼂧%hg꾸`b)y$1bG'V7Vw|ЅHE5?|[sz!=eVГZbc\@BC(mK8@q'nsm3_!/xax tree 3c8109bfa027f9ba739cf51cd8beeeb051431dec parent f098328d88f5a115cc58934c2ccef38842aaec52 author Gani Georgiev 1730480988 +0200 committer Gani Georgiev 1730481008 +0200 renamed build tag Krxtree 3fb690e1e7446f4f6830f437b94d5e3701ba6e59 parent 3e88f29e8511b63fe2ef0cd2b157dc38d4b04dba author Gani Georgiev 1730462742 +0200 committer Gani Georgiev 1730462742 +0200 added rate limit label format info Qxtree 6cb90ab96b798f5929c0ca0cca35340a61fea5b5 parent 51363bf71e79ae7c9ddc5272db0246a206a0ff43 author Gani Georgiev 1730372355 +0200 committer Gani Georgiev 1730372355 +0200 updated impersonate popup styles +QVxj0D,(|l%Y @fǶ Q$!f Ή^َlYy83}EnY3_&`6ՠ;vVf?V*]}tE[ă>[q?/%}UizbkB+ފX(z4%ѐh)%S?T/([xAN!Ev.L&3 tb9GuuA`x{xwG}e`0iVn9 qnY9wjR޻91lHx֎BѣSGmp.$'^œRp=_A+3D53!P{-OKԾ W;C 6sN}OZG*Ht dJ_yxtree 9ec03abd7b2f98ed10c2644ec5ff7889a371415a parent ceafbd43663e2be0c07cb595ed450650ccc54491 author Gani Georgiev 1730234816 +0200 committer Gani Georgiev 1730234816 +0200 removed the default cgo driver registration oUbxKj!EAM?eiAz֋ r8AT&s)e0R@2;F\@ܢv ; @I :X W+/6k;E>%Crn[2"7Ȧ%u>3 1730062414 +0200 committer Gani Georgiev 1730062419 +0200 updated API preview disabled checks )oQx tree 14d8f3bf48c08289f4bbd171012f100f5c5e7231 parent 50991f00f8cd2d24336d591d7e0925fbe6af5c4e author Gani Georgiev 1730059957 +0200 committer Gani Georgiev 1730059957 +0200 updated API preview }Jxtree 1b0a69aa4991b3e7ae413482512226c4df38186e parent a327cda4469aee0ac976ff6da0ff61ad07e598e9 author Gani Georgiev 1730055704 +0200 committer Gani Georgiev 1730055704 +0200 fixed auto www redirect due to missing schema DUYxMj0:-A)'GŊ"Njܠ %`9N>JBfd=l>ZA:xтSdnf3.ǸNWI뉗k]VHM:!ⴵ,DG:и2۠{EdzFwF/V~xtree 1087024e86e016c7b9bcbc5df8fc553f641f4c0c parent 49b83d75e99279ad16701093712591c0eedb7cda author Gani Georgiev 1729841800 +0300 committer Gani Georgiev 1729841800 +0300 fixed typo H xtree c6733c06e7322ae7dc6590a84a17b299b1438e41 parent dc28f96556844f17b1c5493ef96dee272aebe165 author Gani Georgiev 1729840621 +0300 committer Gani Georgiev 1729840621 +0300 fixed test case typo Kix tree d63abdf716c7d93535eed620dede3e67cd5afe0a parent 202bc1c50b2be2677a162ec46da039148bd27d17 author Gani Georgiev 1729796789 +0300 committer Gani Georgiev 1729796789 +0300 updated changelog Lx;n0{b[@1(3&%A\"9A)f C- +l]: TX`h:;al t%>G4ל%_'նqqz31QsT?UZ dVhBd)'& In/R-<2kC!<%o d!xj0D$˖ +^?e` S% R9`p>&̺rP6;!,X0Q1&͓c3G,ix. W/|^?nX,ow: zZ  `hUv|*$p'8>~g 7~Ɛ{4C>>Ufxtree 3877ac7551a9a08c8d53a0212d57e74647889b78 parent 3be9f4a446d4ae6a49729238535a054d9fc6366f author Gani Georgiev 1729262613 +0300 committer Gani Georgiev 1729262613 +0300 added v0.22.22 changelog entry !Mx tree c6c343ae6ce4322002d2411957347ac8a51a303f parent a8c392eb5bbac4601f5f27509113fe11259d6370 author Gani Georgiev 1729262568 +0300 committer Gani Georgiev 1729262568 +0300 updated go deps Hx tree 1d8caa87a9f5fc174e64b70127aa290fa2562780 parent 90fb4d0eaa2f8de866276866136789a6ac03d48e author Gani Georgiev 1729262299 +0300 committer Gani Georgiev 1729262299 +0300 added NaN checks Ixtree 7d29087a1016624098fb9f68a073f021d80d0aea parent c7a6182da54d24e5deb2cb8c6437a6dd0929bd95 author Gani Georgiev 1729250312 +0300 committer Gani Georgiev 1729250312 +0300 updated typo ?Hؕx tree de703eda0a2949a09ea3d530e1a3aec8d5ba796c parent a1c766131e73091c6578eb2497c49f32d291cce3 author Gani Georgiev 1729249364 +0300 committer Gani Georgiev 1729249364 +0300 updated jsvm types ͟Kx tree afd4bbe3a62eaa5e80d2273f62de673ac2fdcab0 parent 20834bec3a0a3f1f44f1bd1dd3b5796f4e184a11 author Gani Georgiev 1729249100 +0300 committer Gani Georgiev 1729249100 +0300 updated changelog iLBxLKj0 ޗCn!)cHu}]hOD`9o Xl vi %AzbrL"d~"|@HϾզxrK+eq=lb1jG]qs7ϱ&\lx.@\r^ҿ^sMZ`xtree c73efbb7912feea46e3473fba31c926de05df5ed parent c08ed584cd9f637cce560ae0a5183db624842496 author Gani Georgiev 1729243398 +0300 committer Gani Georgiev 1729243398 +0300 updated tests cJaxtree b1a88ea97a8d2ed76edee278af0a070081c0fbae parent d369b5929dcd81ce90a474c97d0f26b773293c07 author Gani Georgiev 1729227325 +0300 committer Gani Georgiev 1729238968 +0300 [#5611] removed writable_schema usage R.xAJ1@}NQRTuDd:nDbFۋtUH)aP]!,i",C1N=Μ8c< ug =-"r<4#pZ#[;05)tj^Z/2h>Gu\ܪzXxj0zǵ (}-2:o_a #^ ` Zt|Fjߓjʋ@zt#t!Fk\G NѠz'ݡ]™ g.5e~[jG)O{3xiPt" O*7Z2$^HxʲtGyfx tree 7fa90e0cbd066985c386527997b62a4692f796f5 parent ca296ece5008e352f90cae940089788f6a932837 author Gani Georgiev 1728972228 +0300 committer Gani Georgiev 1728972228 +0300 added OIDC host change confirm message UPxtree 56f6043fe287ee1d2fa5d2c6c93c98bc267a50ca parent 6d57bb70e90d8f9f7112088950e31a34014affe6 author Gani Georgiev 1728936250 +0300 committer Gani Georgiev 1728936250 +0300 removed unnecessary cast {Mx tree 629283c8a0b86a8d93f677297ea5c8018dfff982 parent cd5d2161be03506bddc7581e64b6a1c20c2a6bd2 author Gani Georgiev 1728925738 +0300 committer Gani Georgiev 1728925738 +0300 updated ui/dist J.xJ1y’tz mB<3vf$FW x=%99fN` {`b}BQlYBq8DZdRd6>>7צNyZmb򱽂g$Lwkc'c¼?-,h:ڦ4x3-U2UHx tree 808f3591f8391f49e2639dc16ffdfa5921d3a338 parent a4b8b7581222e238421623149ab7da7a11077f4b author Gani Georgiev 1728919218 +0300 committer Gani Georgiev 1728919218 +0300 refreshed go.sum /Iqx tree 8d526397b56722e7f0976875e949b7e8a6604a17 parent c91140185fb83098633e6a805fde191e882efde2 author Gani Georgiev 1728919058 +0300 committer Gani Georgiev 1728919058 +0300 updated jsvm types ~J/xKj0:EF-A\nyD,)(rxdYA.B"٥7cHla&I]pA{q1`s70hC4Q{/i1^?°Ḃ|_1_0tghcSTWJX(xM!FOmi=8&@.{}fyVvD0735hLWhWqRwL"Z, Vbq8;|ifmCP{!2w0FVA d M)6y.L2)]gI& nK#'8Rlj_{Ǚ!->HXK#p/jTϟ-UxMn =}h)9UXuޠ[̠:cd'ƒ#DƤ|Z5%5'^tULth_}ԅQ/?Fz}{*i%F׺-s?JtZh/Qa2~}1ܠz?ߞY xtree 773a2093e3e3a4f95be9cc3f4937b88173c394a2 parent a28450d4ec4de65a05e5637d5a271bc709deeb66 author Gani Georgiev 1728722454 +0300 committer Gani Georgiev 1728722454 +0300 fixed typo (H'x tree 367127b1df3e279dca6bc850645f2f7c35cab0a0 parent 8ac196370dcf0902ff40d59e8008cf53dae165cc author Gani Georgiev 1728721643 +0300 committer Gani Georgiev 1728721643 +0300 updated CHANGELOG uJ.xKj0> a$z@)݅C Y#GԖ<.+Jo?>nD` q$Ǥ@m% JfhiЈa C6FH€ɆiKR %MShOW_2\%7.//e#b t5=23C1|'1ΝyP; d5_P*j_A̹,\`4c2xJ1E CI"O<{L'M{.ρ{."6[,2,IBL3N'j%EG1!ʦEKX&2/>]1E8VL}lqxycrߟ@;U bڽ2?"B7x_^_9j[;￾Wjp[EQ\Xx=N0@ާr3H!%A7|_F@:^W._tdDCwi7^c}DMV,"(&6Wnr\^Ks` fE  1728641658 +0300 committer Gani Georgiev 1728641658 +0300 fixed linked providers image path OPxAj0~@Ŗ%Y%䶏9-bK76!tSr\GB b bbxj0zK*%PzXi׮JmUi8L-;21z"(zbhvĄdI9bB41H%km .܈KN$8q.S+&ML3}3tN 7Qj)EsT+9CMHy!~p~m%_qwva{7[]Qvw%ӬbϜxMj0:Ń.~,*!t]{҅l+(Y|1I VAII$1-NēPbdW_im`H f&4<(FĭNDۥT85ÙJ2mpOx>QnG \qvɭK@ϧ9KeLµ-#UJ+K؅usp5hp7btxj0DZIPJo%G@63iUmŘIX jfEQYs{lF<4dρQ6{G2 {[  \K|.ݞ^6)?xl_08M>pD4=Jkao+ &# 7=Vk=%؞Uxtree 2c813041cb77c3ec4f9bcfc611fabddf923f955e parent 75e10049c23e19f228324e28c0115b4feb499a40 author Gani Georgiev 1728505631 +0300 committer Gani Georgiev 1728505631 +0300 fixed CopyIcon empty value check ]P9x tree 878d8417ed1798775b243bc8a7651e31781a1181 parent 009ae73666edeb2ca0d8b0aa83ad66bf61b0236b author Gani Georgiev 1728489450 +0300 committer Gani Georgiev 1728489450 +0300 updated jsvm types Jx tree 497111556d9783cea1f3808cfc5d8fdaf4b821ce parent 6adf99d360959cc8a1d7f2784e2467bef3bd51cb author Gani Georgiev 1728489043 +0300 committer Gani Georgiev 1728489117 +0300 updated changelog nKxtree b3429e29938261ed306c3d2d6aa050599e1d1ff9 parent 597b99db571c2dbdc575404dabfd1e0c5ae3c0aa author Gani Georgiev 1728488839 +0300 committer Gani Georgiev 1728488839 +0300 added oauth2 jsvm name exception Px1j0D{E,Y[҅@92_'}aF*@}q}$]2}H41*6!f7l&0Z 98VMκ؅|Je%/%JzQ;E.o0C[hT~+ǧ]~I}@I9cTJ-~dx tree 9b9e9433653abbf4bb86e288ce0e67dab6d04066 parent 12ecf280ebc61d40d6eea8c34dcda50da228b101 author Gani Georgiev 1728487620 +0300 committer Gani Georgiev 1728487620 +0300 fixed jsvm example 8L(x tree a2513a7f5efe0f9d9307b68c3f0598195c90cd5a parent 4429f00688f04ff39aaed1fab13eacfcde7df15a author Gani Georgiev 1728484135 +0300 committer Gani Georgiev 1728484135 +0300 fixed flaky test Kx tree ecdff3d0438aa4f562726252f099a17f68bd4327 parent 04060bd14697b73dd8b8e8dbf3a195199775da30 author Gani Georgiev 1728483291 +0300 committer Gani Georgiev 1728483291 +0300 updated ui/dist bIxMj!ὧ}`Pۿ0d7種*ж8!Ǐ )9D@f6J9i&#;JȂN: 68x{-G-{$Sv6$I5?'GeGiXmri޴VK[S1rI/rt~B^/V˺”v0\Txtree 7c46d7b7b613b11d7bc10492e3c7aa30260dd9bf parent 3f1dfb060a887c50b7f03f2df2bff7388504a072 author Gani Georgiev 1728464759 +0300 committer Gani Georgiev 1728464759 +0300 hide the truncate button for view collections 8 UxKn0C>  Ew9hD;)'I{E.I8%KZbd'?~hfE E h@/DG" F:6:stFmkƃO ?+$A4Mz^*;awSB"|ݶ,Y նBھsYIEXA'I6Zv:'l_ gxtree f2134ffe9e687f888e091f65d604828d20470dcb parent 254798e58af197d1a5f9ee42e6e171484de47aee author Gani Georgiev 1728406672 +0300 committer Gani Georgiev 1728406672 +0300 fixed ApiPreview example typo OIxKj!Ao!d7Y<[q@n*53xțWʼts' : >&H'Er:鸬)IʯI#Us  Qmp-^SNuM0h^RusAB|E'PΜ轍 AjGS'ZջTXxtree 8f7efcdda7ea9abbbac26ef34bad2289023042f2 parent 0aca1ab7e7c4f86e73041baf9dd9f2006e6ea3c6 author Gani Georgiev 1728393769 +0300 committer Gani Georgiev 1728393769 +0300 make the create btn slightly larger oSUxtree 0648f6efc9ba5b1349c0ec22bb237b20a6f54130 parent bde7db92250f188ab6da254365bc36fe6491e388 author Gani Georgiev 1728380838 +0300 committer Gani Georgiev 1728380838 +0300 fixed field tag typo 0oKʘxj E/ FGPJwxM eJR]p8FQܧ;vjV dTyxr.dYࢋ*f<BcbIaK֣уBm)xRl4NRCz&$jMJUzV羊TZ;V*Γ8] N9dxtree 215c0eb49d3f8b60330405881489f08d20563644 parent 1c4bf62b8f9afa29fd8a85749453c9fb246c5d6d author Gani Georgiev 1728366515 +0300 committer Gani Georgiev 1728366515 +0300 fixed old column name to drop ?N-xtree 4a370a991f14d06ece513b5391bcde1843ea7fca parent 1a2dfbaff3b138db8d9ffe7c2a93de0959247913 author Gani Georgiev 1728303495 +0300 committer Gani Georgiev 1728303495 +0300 fixed favicon_prod path N3xMN0=6wfZ"5IIܞ,;۟Va‘:, u5~9$bY8Ӊs"2]P*=.$҆Қ {(#ܹ=^ao}㶖)P'14[\Lȥ1 `(f/=_'GO|]kH^Mxj@qC`B:*)*[BC ԍL2*8&Y{B:R.+n 1728285603 +0300 committer Gani Georgiev 1728285603 +0300 [#5611] make PRAGMA optimize optional oR x]j1}y/^,ҷ3vp')} @ !>$21{^3$2B cguM-5:.y1go:GL o'lNG|2 1728283951 +0300 committer Gani Georgiev 1728283951 +0300 [#5614] removed hook.HandlerFunc[T] type Sx tree dac982c6d7c39d9863b12f4dbb9d1a274a5d45a7 parent ef46d53314054547d118fbba1a968cd1fd38f581 author Gani Georgiev 1728282317 +0300 committer Gani Georgiev 1728282317 +0300 fixed comment typo LKxj0D=R ^rkae䥶dM):fiDU2jV&YvWctDg )|a"ɏў7Rλh &=2, -3}s>lk^~ hoZ3NJuGckrpݩ &\V٥s RC0ݎݨ{CLyl}x tree e0693528a2d745c9e6a408fbf7d43efd44a8208b parent e03495c5319af9d578f222ffe81b9b0c5bc57135 author Gani Georgiev 1728223001 +0300 committer Gani Georgiev 1728223163 +0300 updated ui/dist 'Ixtree 0bb16ae4b22497e7edbb87e2e29e69459b96eb55 parent 68a6bb9ae7e8fdc3a818477ee21b928140561905 author Gani Georgiev 1728222678 +0300 committer Gani Georgiev 1728222678 +0300 fixed typo [HAxtree a6314c3a7ac9ac45f6490d9905c60a5f46532682 parent 70c8143703a8a664458551b9b674e10217bd284d author Gani Georgiev 1728222065 +0300 committer Gani Georgiev 1728222357 +0300 [#5607] rename aux.db to auxiliary.db O(xK0:E- B]!ClYǁ\ *x7`OVCS 9OGĔK΍٠SC$Mx*#Cdc'FVj{Km"/'5-] һ|0z01$ӿp0vK+!jCbVwxtree 728db6044015617d54e6260936350adceba3d50a parent 5d3b8d1e5daac4bc602d6bf96dc43b4530f9a0f3 author Gani Georgiev 1728154824 +0300 committer Gani Georgiev 1728154824 +0300 initialize a default queryTimeout ^QRxtree d75dd37e752092245a19dbd1d8202584979261f9 parent 41f7f3a0c64ea3becfa72d64e533a5c8db6fb3e3 author Gani Georgiev 1728154786 +0300 committer Gani Georgiev 1728154786 +0300 restored old defaults ^Lxtree 7d59b4ae737a05715d65e0ba08aff70bfdd17e6d parent ede16ad3a2c4ce3a83b57a82b441d2cdc8c9dfae author Gani Georgiev 1727951228 +0300 committer Gani Georgiev 1727951397 +0300 added Context JSVM bind aN@xtree 0b16d51e43113a26d1af011f4b3583dc314e01f9 parent be5c39fff6ee38e4e4c46a3ddbb6cc82111037b7 author Gani Georgiev 1727947506 +0300 committer Gani Georgiev 1727947506 +0300 added missing file fields jstypes K Q*x tree 7b90b03c1974a247047035b29b79115a6ea55450 parent deced35a80e3b1bd807a796ceb6afcb09fa627ac author Gani Georgiev 1727709022 +0300 committer Gani Georgiev 1727709022 +0300 updated jsvm types qK|x tree ca2f091f155d53bc3cb4e17d213d1ea93396ef45 parent 1d4fa616177a4093d1d45f5d8f5601630dacc646 author Gani Georgiev 1727702879 +0300 committer Gani Georgiev 1727702879 +0300 moved FindUploadedFiles in RequestEvent BRxtree ed4042bcde4cb7b3ab2862f9fad47fcf9fb2b036 parent f15e6da9954c662e5a4392352a701cf4f1fb5036 author Gani Georgiev 1727626999 +0300 committer Gani Georgiev 1727633386 +0300 merge v0.23.0-rc changes qLݟxtree 691ceb6dd548f6563056d8e266d4c8c42140d886 parent 912916cf7118a1fcfdc0e0a2bc593410ac7cb304 author Gani Georgiev 1726629862 +0300 committer Gani Georgiev 1726629862 +0300 [#5541] lock the logs database during backup +4S3x tree 1e8089110de49c357f987735c34fa6efbd061486 parent 45c0c93f27b7ff19328ff0076e9059a38d616acf author Gani Georgiev 1724783365 +0300 committer Gani Georgiev 1724784385 +0300 updated go deps .Iex tree 22d9d195f7f4710e8731086f6fa3043a9c416c94 parent 8c32db950e6ce09514441e2de0a5df2beb41b43f author Gani Georgiev 1724782750 +0300 committer Gani Georgiev 1724782758 +0300 [##5398] fixed the admin ui isEmpty check QxMj0F:YBh@#lה\mIe){lf"zM&'\&jSPy{BmO.wsL&v Zpl's(Skţha"Nx4τ*K #ip=J_'߶m%x܂'Q<]x tree ac424271d81381d2980ab6ce096cb7acb95c6534 parent ac076a2cd88a0e87405262ee69a8667cddf34252 author Gani Georgiev 1721762530 +0300 committer Gani Georgiev 1721762530 +0300 updated go deps eIxj!>E9Zu,ATQҙsaIb@cS̅ vh qλr,]r9?B| ?\tmpx=\ڛ/ GY|xMj0>Ń. AcA(W-$#+)} aZ^ΚVf (Bt6z#J'v rbxiř:d`_j% - .'^'/v5ژҫNSBbxѣ2bpPbm}(t?RYz꟣#&^qx tree 48510535d9825a16291399f73a3132b071d68912 parent 91a6ee53a356740d45d80ebd7e64d8f55824012a author Gani Georgiev 1720552916 +0300 committer Gani Georgiev 1720556325 +0300 updated changelog jHxtree c434134d9f6698402f66f36266f2c51002c7f1ef parent 5be9e47fc911f5cc1ce1283d66781cb4f0850e77 author Gani Georgiev 1720552684 +0300 committer Gani Georgiev 1720552684 +0300 normalized internal errors formatting Rhx9n0 @^`` R H7%"ˌL"7H_u@![S-0JȞW]p1dD6O)JSx4{NpR.isb?c0|>[uvg[/loYk.]cage  ]ǐ)[*z_&U}x tree fbb999807b78088e73e7430dea57d4877427af78 parent cf9de83f782c9ab34c9957046e32e056dbbed85f author Gani Georgiev 1720551196 +0300 committer Gani Georgiev 1720551196 +0300 updated ui/dist J xtree 0ab5ed86dc4dcf3381738164e12a61831c9bfd94 parent e2a6c23c4b52d708a7494b6367dd50e66ebbd0a8 author Gani Georgiev 1720550923 +0300 committer Gani Georgiev 1720550923 +0300 updated min sidebar width Mx tree 0587d160065fd64ae4f4388ccf03d384cc270e86 parent f281a96144c6d5cbd3f248eae24b84888d9c730a author Gani Georgiev 1720550378 +0300 committer Gani Georgiev 1720550378 +0300 updated tinymce h}Ix tree e98987a206d4e1ce4401901504518b6fa1b793aa parent 8b61ee5f24b652aec12641394f6556f16e3c0a04 author Gani Georgiev 1720539824 +0300 committer Gani Georgiev 1720539824 +0300 updated npm deps :ImxKn +E`0.x#8¤~ i``1 jњ[ET9X^%9Ϊ޸,IFAYw |˅߲Sn@E%ZJqٽ,Dj'd8y8UCKfZKhY?ZXŚxtree 2d4368eed6a2f0595b687c1ab7e2c031dcb42a52 parent b1dccb2ab601382cabd37db21b06f8bdd9b962fa author Gani Georgiev 1720539023 +0300 committer Gani Georgiev 1720539023 +0300 fixed logs delete check ߹Mx tree 2c713fcbef74bdb8b79ca0d71d4e20452fee9da2 parent 7803f3cde0017ed09a5c5d3726d545ba375d376a author Gani Georgiev 1720264709 +0300 committer Gani Georgiev 1720264709 +0300 updated changelog -KxAj0zBGVFؖ?.=0"Rtք$Q<94(&k]=唽/Ɛ9DwArPÍ 7iTyµx.o* 'ԈKC a'~s s+;de^K9Cfe;6xJk[ Yxtree 7a99bf9e5721ec904f1f12a57c55b7bc9d42d3d9 parent c5fbb07ce67702f3b7a1bfb4361151c3b3b8f239 author Nehme Roumani 1720259421 +0300 committer GitHub 1720259421 +0300 [#5179] fixed days calculation for triggering old logs deletion QqW%x1n E{bH0Xt{c$c6xvq&u L;ZcXi a·NdSDn5^EYkБZpZ[< ܸ\ 1W# eqN3)pZDב{$ڈzKB'N5 n*l{/xbx tree 8031be061cda74a1f870f80b2bfbae78fab59261 parent 9eabd3327d4b288f6708e2b15652f8a763bf7a93 author Gani Georgiev 1719950047 +0300 committer Gani Georgiev 1719950047 +0300 log cronAdd failures with error log level Sٓxtree c7a65372eb986c56423fc838a7f2b84e58c2d0e1 parent e995ea499728ad4b072ae6edf44a7928d52c63d6 author Gani Georgiev 1719949620 +0300 committer Gani Georgiev 1719949645 +0300 normalized wrapped errors casing Px tree 9e9ebc2b5dfb6ea422a2fc527fa7af3068931e40 parent 26c0359252d386b0e8162cfcdebaadefdc4e0473 author Gani Georgiev 1719949444 +0300 committer Gani Georgiev 1719949444 +0300 updated go deps KxM 0}N1{A2Im@]F~&5`Sooy?zc"7L6ECDV1xi,+M^qaIj1%lyh#Un`vkk[2 1719867759 +0300 committer Gani Georgiev 1719867759 +0300 updated ui/dist I,xtree bdae9f84504b94be41514d8d367bafe94df1e9f6 parent cee3780a3f33c7e455b253fc4f81b7770b7d4a54 author Gani Georgiev 1719859648 +0300 committer Gani Georgiev 1719860012 +0300 updated goja hIxtree dd5a56a542123a7ee385a764b128de2ca1c52bfe parent 94c0f83cb9fd06b7d7eaac58d80866a8f6564a95 author Gani Georgiev 1719859400 +0300 committer Gani Georgiev 1719859407 +0300 manually unset the verified state on drysubmit Vx tree c3ba0f7fc91672ae88ed79de9a2d9716d008d0c1 parent 97fba5dd3809b83d7b0e41e5c867cc8fcf3f6024 author Gani Georgiev 1719856428 +0300 committer Gani Georgiev 1719856445 +0300 [#5157] added `tests.TestMailer` mutex a:Rx]j =ž>4E(o_i_)AgftfƳMmXC]1i=:*J&bszɹbhvg21. y"ckK/x-vj:HEj)ŴGEq0n,ul06W:>'3 3i[,x tree 352d026b11c030772ab985e20345007e9bac92b1 parent 03daec62c45f2c37697b583b094f9e721d05294e author Gani Georgiev 1718722826 +0300 committer Gani Georgiev 1718722826 +0300 updated changelog QHI˒x tree 500eb6fd464887cc65f7b02a808a55f21cd5848c parent a4dcdee8c8f02d7cb5e45cbbbc0306a51c6cfa5f author Gani Georgiev 1718717278 +0300 committer Gani Georgiev 1718717278 +0300 updated go deps KLxtree 777e1df286e29e512a2dd7a0c6b0932af02842ec parent d9ce5f9da35280a338b56d76a9a6f73884de9121 author Gani Georgiev 1718716553 +0300 committer Gani Georgiev 1718717192 +0300 updated the rules when linking OAuth2 by email UhTxN1E{Hڎ=BJ!Y{2&()Øْasm 6f83% ;Ϟс2y`cqcv*m׭‰'TSemyuءAT.5DŽxr'TIJlp/  "lΗw8y9~[&Vǒxtree 0bdad988e1ba7ec8094922314ca31c01ad760754 parent af87d2ac783858043577a7c55e1077d80d69b647 author Gani Georgiev 1718355056 +0300 committer Gani Georgiev 1718355056 +0300 added POST OAuth2 redirect test LNCx tree fa938f0eccb8fd0a828c6f21079533bccdba3637 parent 7448de5a3398feaa8d7eee26aada7d3a3c62368b author Gani Georgiev 1718354479 +0300 committer Gani Georgiev 1718354568 +0300 added support for OAuth2 post redirect Sәx tree d2154c136bb569f62da5837bf71719455c9db238 parent 7f2847c426e33d1a6e042ba90bd5ecd837d80c5b author Gani Georgiev 1717392988 +0300 committer Gani Georgiev 1717392988 +0300 updated go deps and bumped app version dR-xtree f81f5bd7a76baa4f157fa5c1ad65080615e2cff8 parent a2ee112b80585d7de43f4f9750a3d351690486ba author Gani Georgiev 1715407651 +0300 committer Gani Georgiev 1715407709 +0300 updated ui/dist and go deps NSxjC!F>@UkҷAљ!eÁ#br:9bQKdu$Ћ+v` њ`.)񢌒sS> {3^*L<'~ zLm*8m ORnu ~!!ߌ`9$\y'p2WmVgx5tree bd3251f188127fc2a6aaf2797bee70305897fcfd parent e2acafcc41e9d659836b7a829ce03aa6367ba95d parent 0570955aeea119223200a16233d6157d81ecbe24 author Gani Georgiev 1714811146 +0300 committer Gani Georgiev 1714811146 +0300 Merge branch 'master' into develop ^9x tree bd3251f188127fc2a6aaf2797bee70305897fcfd parent 994a83bd560082c15794056061fc10154a8571e7 author Gani Georgiev 1714756033 +0300 committer Gani Georgiev 1714756033 +0300 updated go deps Hԕx5tree 021c2b7c7b6f2ebed2b703c0a7dbe79200cadb2e parent 38af47f927432e001ea281b721cbf9fcd311f019 parent 994a83bd560082c15794056061fc10154a8571e7 author Gani Georgiev 1714755549 +0300 committer Gani Georgiev 1714755549 +0300 Merge branch 'master' into develop fp]xKj!EAƿY/"dgB^K dx΅s .EEl(-*rt)$SN&xY %y\mV;f1fmp}+Wc/}e~`؏ONhg޹-{9 +ߴ7jF GԠgRpbʞbZx5tree d88ca992e716bbd68380cd3c6b150c061dfef78a parent 0e4ec597f4c6292e51e9741d1bada607c9c83a78 parent 85835be7e56f86e4c0bf03964738b96acf45a9c8 author Gani Georgiev 1714032548 +0300 committer Gani Georgiev 1714032548 +0300 Merge branch 'master' into develop ~^x tree d88ca992e716bbd68380cd3c6b150c061dfef78a parent 7a50ff4ae34c116cab7bc69f71efd1f1885f22c2 author Gani Georgiev 1714032408 +0300 committer Gani Georgiev 1714032408 +0300 updated changelog 3Kؕx5tree b74d1787596a04e9f7a968cd98008a414fa400b8 parent ec3de4337926a4814beae7a67aee5bbbb775701b parent 7a50ff4ae34c116cab7bc69f71efd1f1885f22c2 author Gani Georgiev 1714031574 +0300 committer Gani Georgiev 1714031574 +0300 Merge branch 'master' into develop 0^ܟxtree b74d1787596a04e9f7a968cd98008a414fa400b8 parent b6fcfcba655362329de32e1708a47cafd85373ce author Gani Georgiev 1714028747 +0300 committer Gani Georgiev 1714029299 +0300 added temp collections cache oN̕x5tree 003484a321ea7ec981a4c1e3ed5fd7bdcff41b7f parent e385d3b8ac3fa031fc32f712e3590cdcd2029d5a parent b6fcfcba655362329de32e1708a47cafd85373ce author Gani Georgiev 1713990884 +0300 committer Gani Georgiev 1713990884 +0300 Merge branch 'master' into develop H_͕x tree 003484a321ea7ec981a4c1e3ed5fd7bdcff41b7f parent 2f6a15fb1880576d072c0945b3a94d7e24178719 author Gani Georgiev 1713990089 +0300 committer Gani Georgiev 1713990204 +0300 updated test cases XKx tree b6548db43db0bb3b8820cf1cb0e0d62887195172 parent 523a696fb46597194d71ef879b4367df46662460 author Gani Georgiev 1713990047 +0300 committer Gani Georgiev 1713990047 +0300 added extra extension length normalization .Sx5tree aa92f3f2a809ba6974f781a69caf575196523094 parent 278fa615d7ce5dbabd2dc2922886123db717ae75 parent 523a696fb46597194d71ef879b4367df46662460 author Gani Georgiev 1713985951 +0300 committer Gani Georgiev 1713985951 +0300 Merge branch 'master' into develop ]x tree aa92f3f2a809ba6974f781a69caf575196523094 parent 85ab4bfeaa1b823c89c21f30fedebf39f4e910e0 author Gani Georgiev 1713985929 +0300 committer Gani Georgiev 1713985929 +0300 updated go deps aJzxj0zAֿ vDm)(Po7,Ý&v¬5TI&iu>[\f4;v Q& )'QYY$3NK+1'Z+Wj}-:ۺcΩcǤcj pZJ1ҽ0?^㞑)ha*\ZnI1oTx@LTVgxtree 9bb13b19201df1e66a66461bfe5ab0fc0208cce7 parent ed2b6535a4dc11ee80fb29541e9387edd83abe8f author Gani Georgiev 1713163442 +0300 committer Gani Georgiev 1713163442 +0300 rollback to goreleaser-action v3 Q'xtree d03afb920ce8ebc5b430cddbd09f86d1fdc8912a parent 90c2afe260a2cb25ae799f6364630509f9c447a1 author Gani Georgiev 1713163076 +0300 committer Gani Georgiev 1713163076 +0300 bumped goreleaser action version 0Qxtree 9bb13b19201df1e66a66461bfe5ab0fc0208cce7 parent 77c7e4c71fa9223f64d94cef0eca126052927430 author Gani Georgiev 1713162031 +0300 committer Gani Georgiev 1713162031 +0300 updated changelog and ui/dist Nx tree 1edb21114878ece946bf0d0419b2a32af2347ba8 parent ae885377f579d909d1059abb67b3c9d9800d6fa2 author Gani Georgiev 1713014373 +0300 committer Gani Georgiev 1713014373 +0300 updated go deps zIxAN0~ޑ]ص:hu*8h4' L4 ŒK3I(ٸ:,ؒ[L1N.GoUǵuZ᢭U2xm^N-@w:DsإXRTG{ۮP7OU`ڗHx^j~izWɐxtree 7b70a1885583f62777d850966f0390906c1c9cb9 parent f7a88c1bfedd053b0d78614b44dd2811e2d6d7e7 author Gani Georgiev 1713014181 +0300 committer Gani Georgiev 1713014181 +0300 fixed zeroValue isArray check ?fNxtree 41caf9ddef473983396de5804bb3b66ea7d956ad parent 00b5de581538b413741758be565ce63c11ccdab2 author Gani Georgiev 1713012260 +0300 committer Gani Georgiev 1713012260 +0300 [#4737] fixed OAuth2 clear btn action fPx tree 0cbc7996e2be6b77ed082984bfb52211d9db1f92 parent c6efb6bff993216165410a337ef1313abbb9ffcb author Gani Georgiev 1712393564 +0300 committer Gani Georgiev 1712393564 +0300 updated go deps <Jx tree 085f081aeeeeb2af7a3d8c1bcdb79020b47e3078 parent 2d2630ef94cb654c5a8968d01d8c7ca4563a70ee author Gani Georgiev 1712348141 +0300 committer Gani Georgiev 1712348141 +0300 updated changelog @Ksxtree 5f427bbf80471d7339099f51c7b11ff033fdf30d parent f1f3e3481fc76739aabf7f92a2a55114472a31e5 author Gani Georgiev 1712348111 +0300 committer Gani Georgiev 1712348111 +0300 added aria-expanded to the dropdown triggers ]Tpx tree a35165cde6c783f2dd0805372fe8c6d7ab8ed1a8 parent e986faba2963b9e98df90e6b8230d58455ab8f96 author Gani Georgiev 1712339248 +0300 committer Gani Georgiev 1712339248 +0300 updated ui/dist !Jxj0D®\Y[c-miWAaf@)!6}y^hÌ;4'w9J."Er8G$*R!oo}O>*<'ցu߁ 1712338502 +0300 committer Gani Georgiev 1712338502 +0300 updated ui/dist =J)x;j0ާHX KH) lig} RD. !iWIZ:E%$H6<ΐP E{&1|&s~c/1{Y~y^ضKH/hB wobx1^O`<3z4f9mwj?;u ^zx tree d4d3920a8aed5e063759a5a691c7a741d61e6481 parent cef259335395f22841cfba8e878121d0389a7102 author Gani Georgiev 1712337593 +0300 committer Gani Georgiev 1712337603 +0300 updated go deps @HՒxj0ER(,y hl Rwo .υ{8%Gְw"qH+A>8%P4,'A;ݒQ2b[lQ5Í7Y .c8SyAm ڷRM]T[a|T4/.( CԪHȔ#--#,P&?hٙz(גE_x tree 0c8aabe42248ea19f176427f398cbeb411d7eb0c parent f72291f74f3a226efe1258d2c4a1f68be09d68f2 author Gani Georgiev 1711740183 +0200 committer Gani Georgiev 1711740642 +0200 updated changelog KJxMC!av9Gk/Bԇ1@n]U}T̠Κ&qۮ+mL#^]In|v:YsȑX"eKGȚ 5} [>{_^<.P^)oBpR9 qr>֥iGQuO_\X%nS ]ox tree da97d96a0a4b697409122af265f251eb26c61327 parent 77e859ecda99e74a425c6462d673e80e678a7977 author Gani Georgiev 1711625582 +0200 committer Gani Georgiev 1711625582 +0200 updated ui/dist MIx tree 14a63aa7dca67a0e8201bccbe5e5f1413e2ee96e parent 8821bfc396004c8da61bc9812a4e18c02065c410 author Marcel van Remmerden 1711625347 +0100 committer GitHub 1711625347 +0200 [#4650] updated GitLab logo 2]I=x tree f4487a09ac32eb38d52d4efd3e0a0f3223dd6da7 parent ec3c49ef29f1d4a2cdec84fc0bd5ae6ddba2e782 author Gani Georgiev 1711192557 +0200 committer Gani Georgiev 1711192557 +0200 updated go deps Kxtree bb60dcabb28cd564a63160b6fd07b9462c690c62 parent dddbfa3ebe859b3b54018f181e6596d90064241b author Gani Georgiev 1711192366 +0200 committer Gani Georgiev 1711192366 +0200 added aria-hidden attr and bumped app version CTxMj0F:@AdɂRU*]fFhlUkJ.{ &caV]JPwC? 5Ul|Dʹ+7x)+<z~_[3x tree fc68a88f9f6b116968b7cff35938835cb0ae52cd parent 2e30787ff4266343094c201116bc68a64e135c5f author Gani Georgiev 1711009352 +0200 committer Gani Georgiev 1711009352 +0200 updated go deps DI3xtree 0a1edfca463ff93bac6f24174af4b97b72a41209 parent 7df38cb72a75eedb41cd29eb8e329b7a07235c56 author Gani Georgiev 1711009080 +0200 committer Gani Georgiev 1711009080 +0200 updated backup restore message Px tree d101af7d6f3bf74133cbaabe44dd7eba0617bad6 parent b5695449e90b50c8db9356f8fdfadb503be42578 author Gani Georgiev 1710971732 +0200 committer Gani Georgiev 1710971732 +0200 added done channel for the cron ticker SKx=N0{b{ȎbK+лY'I9 Ż73gcRatQl\.fgI`:VhTL fԒ~Z(pږB?t.;mHu5)&5OrRt/o5 tyt7</WS8^1Z}^%x1j0E{b edYa )L]H1F- G@<~-3/΢1ZRKOR'Bf%2$EO0ȉ3FͤOzG굠nb+ڰ[Φ(q6cQ!fP+;azH'm}IpP )ouc|@9E~#D [Jߐ"-}ggǵexAn0 DJTUT&qBTȄT |y"<'O&>ahȌ&iV)udٻ{BγU]%CvMYnl}{C#`kL4J*0b-$<9~*_Sڏ+r*rVt*gʹfPx̽1>W1L7& S(^d2Y1+x.hao_"ؓC@=r L0GPA!mqgr`mm6QV\BSu(e7|:?ΛvhզciM~P뒨IZK{vsi@iz,Xx tree 9c4ae9314738416156cdd3cf2e5d77bd534bb65c parent 97c578f412558233aac1a5c1f56e24b8edc3e43d author Gani Georgiev 1710495807 +0200 committer Gani Georgiev 1710495946 +0200 [#4566] fixed JSVM routerUse() example Px tree 21eb55841b60c0e76e1910d37874c01ba333d651 parent 212bf3a1f2ce7e7f30287e427f80ac69643033f4 author Gani Georgiev 1710280698 +0200 committer Gani Georgiev 1710280698 +0200 bumped app version vJxMJ@9E&q!>\ nEt'/IJ 3(Qj]oOhƒ u`f‹@Wk}C2ڇ[f*]\g\&8ZƉ~xq8ͧНV3pRMU$h>w͜|&xy{'\mkvڹe~Ceo~$f|xtree 91e412eadf017f7491aaaddf4c0fba64ae11d03c parent d21c18d1c1f6f5f608b95d855c21fa514d811043 author Gani Georgiev 1709805234 +0200 committer Gani Georgiev 1709805234 +0200 [#4510] fixed godoc typos MxMj0:@0c .r҅d\ Bo{|@DãҐYHvylGK'YB9Ә8FGoF3S@gRVG*.a_"΋<8w<xl' 2!xQv[Z\֨?VzǞBx/I2]OoeUUe\V;x tree a0ab71159956f45cc080dc8bc1436449193caabb parent 0fe8f63a9d40128dc6a071fd7504af80a1c1f283 author Gani Georgiev 1709736467 +0200 committer Gani Georgiev 1709736467 +0200 bumped app version :KFxAj0E:@w-i4,(%2Ǝ-ה\? 1709717402 +0200 committer Gani Georgiev 1709717402 +0200 updated GitHub release action min Go version Sx tree 4b102732e32b41502e430c607434eb6422d0d2da parent 7868f543a7ef9f66d7541d00d21e718d9b151c1a author Gani Georgiev 1709716832 +0200 committer Gani Georgiev 1709716832 +0200 updated go deps Hx tree bc69d8cfac4cdb5629fc69ab03b14094b9ddad0e parent a4ec8d4f07bd68b8c72700378b3c36478085f687 author Gani Georgiev 1709471121 +0200 committer Gani Georgiev 1709716676 +0200 updated go deps aJxKj1D:ECӒ5 dOD1B69~DWGUo@VG4lb%%BGNc㵃s1t$uA9lcH*zTѿ׸VOx%>oGz"`QvD/|HY|ƴހRc. Vxtree 11ac828484671b003fb0b43ec2264e4b8d8cbe16 parent 54751509981e5f94b13ddb89af937262fdca019e author Gani Georgiev 1709660574 +0200 committer Gani Georgiev 1709660660 +0200 [#4492] fixed admin dropdown z-index on Safari cSxtree ecdf4e3dfa469e95be0fc64c53356f827bd843c8 parent 968921437646a2dcbfe87ae38d7e1fc0651d5870 author Gani Georgiev 1709417144 +0200 committer Gani Georgiev 1709417628 +0200 restored nullifyMissingField checks HR~x tree 3019830bdbf643510407e66c0d2d3e0973ce836d parent 13f61d16ba81d80be3c126b6aeea08dd8b53de5a author Gani Georgiev 1709396223 +0200 committer Gani Georgiev 1709396223 +0200 bumped app version tKcx tree c9a3ba0b058f8bdfa38e861156c4552ec78ed833 parent d82a2fe79d2a168f7a9cd88f4ab662112114c593 author Gani Georgiev 1709305779 +0200 committer Gani Georgiev 1709305779 +0200 updated changelog qKxKJ1E絊6IS":j\#qa*)ұ[]zp\gd|L(B)WvA[( 5zd.GŬ 6h⬙G,P[p46|pu{n:3ť[&ƺQ !51HD F^W,\9N%ڇ@:a* V7 ˶z9S]킣TL */JnpxAj!D!G[gZ!!V{ɟ1MAjUU]!}"z^\ $1b0 /r H8˲r֢Z=GmW=a&*?RfVN[j+YjgCqޟ&Y2H(>0C`R"ts58k~Y%xOK1%I. ŋ^<n4M+鍴7MɠUk;D[kd,VZ&h \y砬Uw˔2miLj݌U6EލƥD{.וUwJ^*RK4 vp)J˴㩾<u LuT v 1708970625 +0200 committer Gani Georgiev 1708970625 +0200 Merge branch 'master' into develop ]Sx tree 87bd86bd615754825f960613bb02c8a9ace98488 parent 30b7063ee2fc1473a574acd7d68913c72024f3c2 author Gani Georgiev 1708969363 +0200 committer Gani Georgiev 1708970273 +0200 =fixed changelog typo and added PR link RQlx)tree 3ddd63d30dd6e752104f3cb425e1e5e36a8afce7 parent 22981b37c4a64feebf254ba1a67b3e116da82b0d parent c4467b40e3daf4dca3202bc0ec2e990e530b6a24 author Gani Georgiev 1708967455 +0200 committer Gani Georgiev 1708967455 +0200 Merge branch 'develop' `Zxtree 3ddd63d30dd6e752104f3cb425e1e5e36a8afce7 parent 6c99c97ec47eef181db19e9598561dcd85fb7c87 author Gani Georgiev 1708964890 +0200 committer Gani Georgiev 1708967120 +0200 updated go deps and bumped ui version 6fRxtree 30c0ccbac41c7da6919bfdff5b264dfeee50c543 parent e29bfdf898f7ede9b08f1b9b5b5c6c8bbea49526 author Gani Georgiev 1708958375 +0200 committer Gani Georgiev 1708958375 +0200 fixed logs printer dev tests dQ?xAj0~@ ˌdY>badd'edmB~ܺEt95?|M/u ebmUqݟ^'E,Ժ/15sh=OwxϾF^<xtree 1e33348af57d5182b0eb9ea2fbadd7d0c29cc592 parent 2d649df406e896a3c6ca481baab4815489c79245 author Gani Georgiev 1708888003 +0200 committer Gani Georgiev 1708888003 +0200 added back-relation expand limit Px tree d22e8acec0d9aabb40d11b4a322ffae7bc9c39cf parent af6835e1ff4af433ec63e19bf69f6e0f5d078afe author Gani Georgiev 1708887974 +0200 committer Gani Georgiev 1708887974 +0200 sort exported collections by type and name %VxAj0E:a$']1#mEBo{|7UWrI$%Ț%㔽L0+3 )9q,l`{-' xhmK|-ޗzu)<;O 'fحHNIܔ^㨭CrYxOt^>e~AfWUxAj0 E9AXRsȖ1$vh7Ao]BBes' CD@ w$4$eat>$#9Z^4+[pZભE?m=Ǻs.0$B Nibj;oGR6MVZ~܋hWHgn _\ 򔩷 w~fwxtree c0a82b86ba8ecb7800965f39c55994d3a4ebc37e parent 9cddecd9b38ba6dc68f749600086c7b667eeb397 author Gani Georgiev 1708787886 +0200 committer Gani Georgiev 1708787886 +0200 updated collections export styles RVxtree 22749378e2eab17846a478253ee5265536432d3f parent 15addf3fbfef24ba2c123c4449e06e489c7e9df7 author Gani Georgiev 1708775176 +0200 committer Gani Georgiev 1708775176 +0200 moved filter autocomplete to worker vQxO;j1u)icl\LYzRvFMrf`~&46ZȑᕔOq2Rj6.X4z:EQnwiTy'4[\+d8ZS;lSC`.;[#ECvsԒ,ʜ G9;iQBHY]+, 9.':&$RT6 J4ަVA6)Ÿ /2SH=Az6BJwr\,g4 }4p;J5:)qa=_Ztxtree 41ba61049c23e091657300bc48027587091d68a1 parent 9ccc62221ceffe388e8c3dd90da73f64d90794a2 author Gani Georgiev 1707730804 +0200 committer Gani Georgiev 1707730804 +0200 removed unnecessary concat PMxAj0z@4$ >"0GYxa?SSM 8@~e6& :;$],y,N,B4#:lù٢}H#YSJEE- nU\/?rɲ :Ul;[4>~MO {A.#ว;H,;NYxtree 1f312de743ff01655ced53c904bfdf59fc69e304 parent f6efcac97dfa5df7e9a6ecfe6ab1e8c55b2b47ce author Gani Georgiev 1707683454 +0200 committer Gani Georgiev 1707683470 +0200 added presentable file field fallback TRx%tree 8ae83270e4bad923dd0035912253dd1ec738fbe5 parent 8a79d28bbdd222613db11c3b0145ef7e6042596c parent 22981b37c4a64feebf254ba1a67b3e116da82b0d author Gani Georgiev 1707642527 +0200 committer Gani Georgiev 1707642527 +0200 synced with master Yxtree 80d8150484ce76620e4031749dc0fee5ffebebb1 parent 7fa9df16ed67d682c14ac393be185c71bd86e7f0 author Gani Georgiev 1707637047 +0200 committer Gani Georgiev 1707637047 +0200 fixed changelog typo Lxtree 8f421807a8aa2f35675d10e3f37b96e920fd6e0c parent 340377cd52ff142bd5af6ff8f0c24060a4326e61 author Gani Georgiev 1707581364 +0200 committer Gani Georgiev 1707600503 +0200 updated jstypes and ui/dist N#x%tree 48c6da728677eccab74292438e65ea4431ddb58a parent d55f5ee48deb6ab999819e59c3d9e52af5b1b06d parent 340377cd52ff142bd5af6ff8f0c24060a4326e61 author Gani Georgiev 1707572499 +0200 committer Gani Georgiev 1707572499 +0200 merged with master xYyx;j1D9EEF`,9ZX0V;Y U3EcH8xJQ@>M哊iu@y҆ v1MۀJ\Ŷ N^1[ 7n}|>^0j 8 ̶1`}q<3WϏ+9ܡUڹWx#tree ee5645c6a0c29f7ef9798d1f4036dc95abf89331 parent c539c8d4dc5f0b3d1c62693a83289d5a70e6b2a1 parent b4379c45c5c2ae621db1846ba345a20880c173c4 author Gani Georgiev 1707556583 +0200 committer Gani Georgiev 1707556583 +0200 sync with master (zWx tree 7ff28e7020049b149ad532e48cb4cbafe9b5ebd5 parent 0820324ada4334d26d529d2617e73c9506a3dea2 author Gani Georgiev 1707555899 +0200 committer Gani Georgiev 1707555899 +0200 aligned healthCheckResponse struct fields THxMj0:@ rFPZhHPKORg^Z}`;\ϡK )`1p2~\eǦ-7(~LVZo<g[Cgs"[ >e<4U 1707344981 +0200 committer Gani Georgiev 1707344981 +0200 Merge branch 'master' into develop _gx tree 46dd3eeaf0c92ae6e33be040938c4f2e3c79e24a parent 9cf0b99b57ef5eb9766ba060390ab65357db82d1 author Gani Georgiev 1707344956 +0200 committer Gani Georgiev 1707344956 +0200 fixed readme typo ֑Kvxtree 59bbdf59a4330e03ab943d03eb1cea927a62604c parent 8ed65294f3647ffd74c6f1b6fec65c6d75e7e805 author Gani Georgiev 1707335155 +0200 committer Gani Georgiev 1707335155 +0200 updated github actions MOxtree 548f0137a39913483477ce9ddfd1603556e2f026 parent 055416d162c1ddfdbbc928e2668096895ea07235 author Gani Georgiev 1707333736 +0200 committer Gani Georgiev 1707333736 +0200 updated github action node version FlOxK0:EB[R0-eA,E@vE.SbKa 9y!f4YYhRwiht>DqG3.D;#ϱ*e ˅߲q}Ҿc |FT׻1DwBG!Y'p0V6(u Fۿ! Vxtree 4af04d37c8df82dcb47a049707026850df58625a parent 8c90a1978c833a23260c8e96e768bf0914a30654 author Gani Georgiev 1707333459 +0200 committer Gani Georgiev 1707333459 +0200 use the email field const LLx%tree e07b8bad22ae49c0a3c31657a52bc921af93d607 parent 0fa5c24521479af232a90a0eb001a911f02e4601 parent 9cf0b99b57ef5eb9766ba060390ab65357db82d1 author Gani Georgiev 1707333215 +0200 committer Gani Georgiev 1707333215 +0200 synced with master XYx tree 9ebf1ad8a1816ecd5a5a0e4543b3c5815599e5b1 parent 2d828739c889a3dc212c3b4bb8b6b932e9b3ad11 author Gani Georgiev 1707332660 +0200 committer Gani Georgiev 1707332660 +0200 updated the readme K@x tree 6eaab289913fe679e1dfe17592056223816e87d1 parent 6a1d43deac20d0e1406e53e4a001a6f60b30843e author Gani Georgiev 1707329717 +0200 committer Gani Georgiev 1707329717 +0200 updated changelog JZx tree 4254c2f83c0dc131146a1e80c4ac7d8254f10e3a parent aa6f9f610ddc084149f87e1a559966867bcefdf9 author Gani Georgiev 1707329060 +0200 committer Gani Georgiev 1707329060 +0200 updated changelog 5JxMN0 =%6HUNFB"Nⶖ:). NO:ٖB!')t%\4DRgFrl󎅲6j6v6˼8cf8Z&Oxl?<]6'r1RM^XѼo07%(&qY{YA5qV2Ľ\?>rDN бd  1707165134 +0200 committer Gani Georgiev 1707167401 +0200 updated changelog 7LJxOKj0/"u$(;c6\? ݽO?U5zb$4d{OJnn !'I=% ''̼Uu?K|AGKNyoW4 }$ f,%ЪȪ*&p?A5/Tœxj0zY B֫*j[FVׯ}^fzce3KJ҄I`)HtŎ(0&58M)٢Sd q켝wmpík˅p'^~r+|&t;B0r^pğ!_±3\`-1.<Bz-bS[x1n!SL!Y]Y>@0F H>[.xovf@drT8 iТFШ*œ: ~]*Hʺ@c$iiexA:ܨqS%TSl'(;ÇReN~cBb6 A58&!Wx tree f00428c5cf55d079f0025e1ca2829301e544581d parent a45385a29033ba2c0523065262d5d7d970a163c2 author Gani Georgiev 1706958437 +0200 committer Gani Georgiev 1706958457 +0200 added jsvm.Config.OnInit optional field Q xtree 66d5805e23d180752b9eb3efbcab22fbf5c3b286 parent 5d76646bdbc2378ff967e4226ceea8f1196f6e07 author Gani Georgiev 1706952943 +0200 committer Gani Georgiev 1706952943 +0200 removed unused tinymce assets PP=x tree a3f9ae6f85a8ae24524c4632d32956362ed9a6bb parent 5f9ca960256b6f3b4022c726505fb2772a34bc11 author Gani Georgiev 1706887962 +0200 committer Gani Georgiev 1706887962 +0200 updated npm deps UIxtree 7564ca59544c1722b319872988ae691c313296b5 parent 5369b35cd7d172ab5d444e866836f5c562035801 author Gani Georgiev 1706879433 +0200 committer Gani Georgiev 1706879433 +0200 fixed Admin UI vertical image preview scroll 7RwxKn0 D>Z~@QtsP- @?BtAs+f"'g$K`'%g:Z*)'s1|noqhP[n4qtO?&1zZ2%/)?y>!rpΐr|'n.,oXyc:1ixtree 9c0121f32f124c1283965c3218e40db00ad5662f parent 2750b12a762edc0beb0745c77516d0568e5b5502 author Gani Georgiev 1706858501 +0200 committer Gani Georgiev 1706858501 +0200 fixed RecordUpsert.RemoveFiles godoc example w{Sx tree fdbf4c96ee4d16fb1a1130d496bb2d219ce74f8d parent c2d0ac9cfc3ab6560f8f0ef9fb58dff505ef74dc author Gani Georgiev 1706692120 +0200 committer Gani Georgiev 1706692120 +0200 updated readme and the thumbGenSem limit (OU<x tree 3aeaf94f65da284c6d21b9351cce314a993e5e82 parent 3822f7ec6fefbd95a0595bfac181bd879e55ee96 author Gani Georgiev 1706110535 +0200 committer Gani Georgiev 1706110702 +0200 fixed hideControls store reactivity check ~oTxtree d57e7894293c19a2b8c2b88a2cb9373ece5363e5 parent ca7a803b2db65fdeb8bbd62295e9f95e875b73f2 author Gani Georgiev 1706087892 +0200 committer Gani Georgiev 1706087892 +0200 updated changelog and go deps KOxtree efad48db2626c5167f28f2bb67d657f521296fad parent 644e447a1211a3e3e7672896c72f092d6740ca99 author Gani Georgiev 1706087209 +0200 committer Gani Georgiev 1706087209 +0200 updated serve command error reporting Rx tree bd789751f8d75fdd8490ab116550b3fb35314cc1 parent 6496091cb3964286ebf0f0f32bbba59adaae5a04 author Gani Georgiev 1706038093 +0200 committer Gani Georgiev 1706038093 +0200 updated ui/dist J0x tree fc933c3004eb5b9893de867712f8e42a0fcece3a parent b4f8ec82590f82f5321003e9656fb63232f6081a author Gani Georgiev 1706036174 +0200 committer Gani Georgiev 1706036174 +0200 fixed typos and some linter suggestions mSxAn @=}h0c. "\=} |P#._ly͜ ˂Esf1GzP^8D ֳrIƛE\@xc&{U_7l `Œ`x?|3@5r.VÓR;c!T`%V?j#or! V{xtree 855d51314b3e7e7a4518df23771eaa7ebd5e9498 parent abc7193cec67d8a0d6b8b9ad2f47e7cd1cba1ab2 author Gani Georgiev 1705903368 +0200 committer Gani Georgiev 1705903368 +0200 fixed unverified typos FN/x; {N}/E9ְ8+Ż+gь nBL]S,[bՋ:!#!o1!.ED 9xTtAM{_ᶞx]g$5spƺZVPvd `<ΩQKQ|oUV_*Tߛx tree f42310cf74247abf19ee7499d34d051ce3d9cb75 parent 4a1ceb8182bc86c841b543be0472acf34da5189f author Gani Georgiev 1705861376 +0200 committer Gani Georgiev 1705861376 +0200 [#4033] added option to duplicate fields _Rcxj0Fw= ϾRB;֕*-(mӧA|Á*3DGKep*:ёF=:trDGuʈW4P-$)k)jeˢQ*ĥ̟:eXrBK 1705843282 +0200 committer Gani Georgiev 1705843282 +0200 Merge branch 'master' into develop _^x tree c3d3c0014602688b390b793abe59fcad7276f463 parent 39cd7cc6189d771cd82d6309f80f082c8eb9e7d2 author Gani Georgiev 1705832994 +0200 committer Gani Georgiev 1705832994 +0200 remove funding.yaml KxMj0@N1K%l!$'(JrtkUrwʈ^Qq Gf}sB^=T]9c4 Dxp>Mxyp [u*n˴ti_3 -9t-?} Iڬ si&] U9\| W4xN!{&&.cg`ð 1705594426 +0000 committer GitHub 1705594426 +0200 [#4175] update patreon logo SKx%tree bb6d5b78b1ddd2a263f333a86241ebf6ab08d2b7 parent 22fbe5cc1111c68944b0d88b3f6d35e03e18e485 parent 39cd7cc6189d771cd82d6309f80f082c8eb9e7d2 author Gani Georgiev 1705403647 +0200 committer Gani Georgiev 1705403647 +0200 synced with master nY_xj0DaW BiNSacdA,EiU!? 3VE`Wt4ؼGF$8Yc0;5W T49?iK'd֖R9IJI~ǧ|+~.ЄFw"ءB1|h !=C[~M>?+\ynE23pOm9%VÆ_c(xtree 22024a540f43480cff0b790203279313d1b819a1 parent 765680ac336ce467aa7d54ae808acc3c641b485a author Gani Georgiev 1705397889 +0200 committer Gani Georgiev 1705397889 +0200 added EmailTemplate.Hidden field OxAn E9LM$HjvsRR=}7n[,d gìm,:W(( ;U(qQO Y"6 GЍtRA[-v?Li@̨F-л9X1Pq{ B?g-hM?]q v~^vu ϵ'vkxj?O> lfmx tree cf53a44d9aeef3421dbde377b45b4f9f85822c09 parent 0bcc6c527e51293c000394fe3cfa13b07beffeda author Gani Georgiev 1705161769 +0200 committer Gani Georgiev 1705161769 +0200 updated changelog BLx=n0 @] б@@Pr-S $%~=DMd ӌKShN1MM4/Fdtv:h-K$kB68,mYy^ShBGYxG[ӋP7C ~X!-,+bSnntVbxtree b27249781d55698afbf9fe9389da41fe63708c0c parent 3e3464b6a5954824b72b15761b363f26b079d6e3 author Gani Georgiev 1705156019 +0200 committer Gani Georgiev 1705156019 +0200 updated Prism.js bundle T#KxJ1D %dD= N#̒d+U2B4Ɔ 28#UjF.Xt`^ s֪ik<"ȣ#m&<^%}xW|v{~y',Үp+hs=NL7Z ᵦO_ QhcBP96UR}yz7̗amX⁑~cx tree 9e465fd128c25eaef8ad4f61f395368c65d46c56 parent fce6093f6c9c144b158e2184b30d495a61b96945 author Gani Georgiev 1705150559 +0200 committer Gani Georgiev 1705150559 +0200 reduce slightly the min row table height .Rߑxtree c68278c71d9ef9309d8fb4c2a8b55082a60a3854 parent d324321c337870164e35fa5001ebe2ddf0d09126 author Gani Georgiev 1705145001 +0200 committer Gani Georgiev 1705145001 +0200 updated go.sum HHx%tree 7f2b4c6efe64a9b17e941edd92d7569a847c5e0d parent e26540a9d72cc3b7eb70aea9246eca1f9fc7f3e7 parent cf9a1ea0550e02175eb15ed746149f9ee02a946d author Gani Georgiev 1705144988 +0200 committer Gani Georgiev 1705144988 +0200 synced with master %ZDx tree e7b386f4a30171b77116034712fa69c3ddd27fdf parent f9662a51c28c570d8e279f3988df69e504c45345 author Gani Georgiev 1705138582 +0200 committer Gani Georgiev 1705138582 +0200 updated go deps IxJ1EP$ \ nEu*!<˹7f#;t& s] DK"4yqHG`4Fޣ.Xd8pm)ܤwiu=C\Qt˽?j^@pgH\Qϵr) o_}p^xtree ade0bf41528cc25ddcd0e27c2ea374823440476a parent 528b64f5a5ec931b78417aff557d29cb249ce2c4 author Gani Georgiev 1705137715 +0200 committer Gani Georgiev 1705137715 +0200 ghupdate messages update qMٕx5tree d27ee17e46183b1dc227f5195434e26baccf042c parent c3d47537d951d84e020c9eb45af4dd6e0dc5f265 parent 7aee3bfa68380bf99a1c4b0c8a72ea04cfc8803c author Gani Georgiev 1704480747 +0200 committer Gani Georgiev 1704480747 +0200 Merge branch 'master' into develop ]/_8xtree 16dff751a3b82106bb8e0e21e6b980551e666fc5 parent 86bafc878abb6f8b3357f2622ac12ee2dbe0d316 author Gani Georgiev 1704480495 +0200 committer Gani Georgiev 1704480495 +0200 updated go crypto and other go deps QxOn 0"Q4M; + Hh7iOdg齚`$NAq0#9F^V+U')VvK\OܠN+sDtd)#ÙR6x 1704396415 +0200 committer Gani Georgiev 1704396415 +0200 synced with master eZx1j0{b!ed+C!Jd$ݑ>)W0~"h:u@3{I1Lj&3T%wȰN%G]<.#ruַRJ9UJ]m}e}zP/QxUFaԻ7gb| /[rNhB5l*֠]g8&@̩iPreo/Ybƕx%tree cff3028d020d605023dadefc771c5b0a87de376d parent 1e2d76ab533f898262af8a7e5c7327c5134b1307 parent 5a2d0f8129c4973418cb4d163937df6aa03f1cee author Gani Georgiev 1704294024 +0200 committer Gani Georgiev 1704294024 +0200 synced with master XxMj0>"Ȇ9OcY AVB{7joRɍ;]LZqN7*JӞuc·0Y׽9ʝ{ /y'^~ 1]tnru37civKJ'J|P KL<癿DEb bДx tree 6d4df5d1aa3bd650d0d951497c9f6a62230ae182 parent 8026575f00548d199d8cdeacfa53c4a495d658d9 author Gani Georgiev 1704284751 +0200 committer Gani Georgiev 1704284751 +0200 updated changelog .JџxKj!A!SBvsgǡӧs,(j"ѺL䋴&h&C:3AmE&T"Z 6eM9eDR(}~ \끧oke;^_A W*axsvZ/P>IqSWopNZ+ ߎ`T_?KopYx%tree 95d23347e2e25a4d2037e6e94beceff1e015a294 parent 6a82d98d8c06bd237eac09c1f69635eab8770071 parent 3c1fe741c87b8df5ee50ef591b22724471de697b author Gani Georgiev 1704278809 +0200 committer Gani Georgiev 1704278809 +0200 synced with master Xx tree 007e76257e8d7baafa3ef10e07e3c72b1ae2fcc1 parent c66d5c946e41d8b932f969f431b4c103f15da126 author Gani Georgiev 1704272910 +0200 committer Gani Georgiev 1704272910 +0200 updated jsvm types KxAJ0@92$?-("u!&ɤ6t o=O00dɡ=a=,d͍ <"/ş@}Lr^k&m^獗Ku{>zx@hN-򏅹2dx}>&=|: Zᨛ@-WC XxN0{b%HYWB[%pv6!784#M"@8x;ՑEt&X ؇V3gY w :{Cp;dʘ2yp(xj i9NGФАF½2J5UXcyCպtPF皖S:$ߠvX}W%XF8Ox~{} O/dAxtree 0a324df308468aa407ef0a597d06fb836cc80c61 parent 61fd5b0919535f0be07c546e7829fe41c10971cd author Gani Georgiev 1704249020 +0200 committer Gani Georgiev 1704249020 +0200 updated some of the tests to use t.Parallel YSbxMn =}0?F.*0H`Njܠ]|d0 52KYu vh7]iQO|}H>f IǬS@S)%ouQxopǣv7uk>Z]uo" 5 0NױrihS )YxBtree 6c46ccfd0dd3afd86d6e8965084d3ea90450a63f parent 1857907b00b6b0976b26d0011466779853ebbc3b parent bdb569579d8b55cac07b0ea96a1fc9952924cbf1 author Gani Georgiev 1703930767 +0200 committer Gani Georgiev 1703930767 +0200 fixed sleep example typo and synced with master cx tree 1ec0ea2383e4355824e814a86abd2c5239e1e9de parent 0c08126c7eac4215e027fe170eff774bfa096c74 author Gani Georgiev 1703885514 +0200 committer Gani Georgiev 1703885514 +0200 synced with master KQxtree 86a83ad9c6840cd68b0615e4e2bdf9eae57aabe7 parent d510aeb2d15ecc9631a9e7bd5335b0dd534e593d author Gani Georgiev 1703881910 +0200 committer Gani Georgiev 1703885340 +0200 added jsvm sleep binding A_Nix tree fd95bc7cbd83e214a5d2278cb55f947521fa0482 parent 50a8c1350d272a1690e612c44cd0001440b8e6ff author Gani Georgiev 1703880047 +0200 committer Gani Georgiev 1703880047 +0200 bumped app version &?JxAj0E: a,M4]1F[.Bo{}Sv8e%xڠI03%*'"%.ahCv_>8rI1ߗ n2W鲍U}<2ؤN]h-ZDsV{Lc5C:nO8HNC9#]$̻yXpxtree 1881608355dbbdfe33349e1ea501e24545e240f3 parent a32ce96578c5396a306c78f810fc226264b869f9 author Gani Georgiev 1703877932 +0200 committer Gani Georgiev 1703877932 +0200 docs fixes commits from develop fNx%tree dffbddcadbe6e2ceec6e45d286ce22cb59baea7c parent 337d309bbb85197d5691dcb8d64ab3c70f780f0f parent a32ce96578c5396a306c78f810fc226264b869f9 author Gani Georgiev 1703836806 +0200 committer Gani Georgiev 1703836806 +0200 synced with master IZxtree 4ab6aaba54906f668f8d40f501f16c60647ae778 parent 99c32e304078d423989340c1192a6827212be74c author Gani Georgiev 1703836701 +0200 committer Gani Georgiev 1703836701 +0200 regenerated jsvm types NKxtree cc887488d2470b74ddb76bcb64d5c85c7767c6e4 parent 58c5594e14800eeebd6a061755a9983f950bb29d author mookrs 1703836596 +0800 committer GitHub 1703836596 +0200 [#4043] fixed typos in godoc comments MaHx%tree c5b1bb2b2e4bb3ea46ae4d1c251ceedccd4bc7c1 parent dac50c0786b4857fce8ba802214982c036206f43 parent 58c5594e14800eeebd6a061755a9983f950bb29d author Gani Georgiev 1703667048 +0200 committer Gani Georgiev 1703667048 +0200 synced with master AYxM![maUFz0 AV>xcg6[&bfIG%W%s utH%FT+RmHy%Ǹ /|rr;^ -.ƘmcBQ̶1 H#+C)0>_:2\ONwUxtree fe09472f712396f2493e048fe1e16cbe508e44ef parent b52f0dd1c6347c33ed5e95e8787ddde7d7e7f56f author Gani Georgiev 1703616569 +0200 committer Gani Georgiev 1703616635 +0200 updated AppleClientSecretCreate struct comment KVÛx tree 6a4b69f0cb337a8674ecbbdf12662343c909c252 parent 8bb2b44b87608f526bfaec3a17bef45a7aa95880 author Gani Georgiev 1703613458 +0200 committer Gani Georgiev 1703613458 +0200 [#4035] replaced JWT token with just JWT XfQx%tree 388f01109d19354e1b289754179ed0afd092e12e parent 4a1326373c325bb3eedf5837a775ac19d19772dc parent 15d90a39bab1e93020d0240c9e11784d0a59b21d author Gani Georgiev 1703409830 +0200 committer Gani Georgiev 1703409830 +0200 synced with master WxJ0@2M&M"zZO!M&mi[?;<̠=d&"w6" Z,XtVy5< rpƇ59Q7YU8<zun0Q[,_P3*i]P7->ʱWіx;n!{N1}$k%Q:c`0>Ggu)aRX̨tvYb0RF[I ("kբ]9g.`ZfOhYϸ7:*ܸR eKyS._ *d*D1ӽo DuFk=u_[gx}'oc~CWxKN0>œXFv.9bb?Gƭ\b40JC&#%L|$vVJQ,Tx`z b4#voc#j VsMN 1702765204 +0200 committer Gani Georgiev 1702765204 +0200 regenerated jsvm types LxM!Fk[rR1v>}>̠ȱ&nrC-VJ Ǵi+ѢdHIѫYkl0EIvzEZ PY|]\ǔxj0D/";PJwBW"mQJ93i))fCJhg7~?TnXfo`0Ͱ{eMT)`ory-trs?岋AzTfۉT .EP IYp^*Freh,:|<*4 ^p ,eT:i_m+q}Mnux+hɖxtree 59560db20efe71663923952d9122503f32a67cf9 parent 803948212c7020d2e4c329400cd05cd896e38892 author Gani Georgiev 1702761367 +0200 committer Gani Georgiev 1702761367 +0200 combine the logs listing label span uO^xtree 7a90c24906be4964af2acc18db7d31fa8fb2658a parent 18ba27fbb0f9ce0a7e6507e5dc2d3184efc65407 author Gani Georgiev 1702743738 +0200 committer Gani Georgiev 1702743738 +0200 split changelog in chunks FNxOIJD1Sn2 EJ:4͇z0"D.Fi\1j$i`(뷛&xSPul^\L>Z k^=WWs &LsA4gֶ9[jaS\iwinõ^ji+A}~ XWГ]fxAn D>W+UQw9|6 !isR7FYVnΣMaq +Y0\}шG8'´D;/"tFYhktG JMOH=_LI~&=)NMRCo|J٨j+EoZsZ5DKG^7\__|xtree 40604fb9395d211b7f91c0c2bf99a37f7e1dd3f6 parent 0671e406c61e9cb8569e06218a8f35cf267be016 author Gani Georgiev 1702403308 +0200 committer Gani Georgiev 1702403308 +0200 fixed changelog typo Kox1j0E{b eƖ%$ B< lbo=>@zqӥy xDzk"f*,E"lt,؟Rk:eyu:>-6 ̀cG+bs%?*|UwQA\v-ʮ;h^ yďszI/|l35IY=exAj0E: A[tsH,jYazta-ZLZC`ys-SlIݢ1sF%l#Ou+kMFغ5ܥT~g9R]Zz>Cl[P­?8n Jo/e'"Ysxj!D},3B8Qg! WUԡAvZz4^ e^z-"Z慛NT+3/6F8U1*c^z4#-riR7[23cbΈLŽ5ld5L^;ƒ+z|CqN ~NqRN?cex tree 2acb88700d9387965fba961932c8b8b11bb15ceb parent cf9ec6b6067e52313c74505fa5f9c5e60e9999c6 author Gani Georgiev 1702205456 +0200 committer Gani Georgiev 1702205456 +0200 updated jsvm types KDxn {bHSlٜ0y(_)gft9HpL-PLh[C[.\Ѷ!c^AV5xKn0 D: K)E@m\@ټ L]ّL#Blh HP{)9KXI83+:p]Ꞌgx/ shƠ5D5ڥ.o+/:6. GpiN56!qhu[m dX=x tree de5b2f16e4767a89b8e97d792dad5afe79a1ee2f parent c249991ff91650968ef866b754d5a87bca6175ed author Gani Georgiev 1702154445 +0200 committer Gani Georgiev 1702154445 +0200 updated jsvm types 0Kx tree c7c3f5d201b9d3cc08a416e5cffdf48af1d39951 parent 599b88ac5165470e7eaf4570c94b0d7cc40fdefb author Gani Georgiev 1702153837 +0200 committer Gani Georgiev 1702153837 +0200 [#3790] added MaxSize json field option RxN0D#*mXBq`9h/F3Z waF|γn8n㊬;h>Q Q&#2Ed}oz-.]Ppaŗyd{Gz0ΘkRſ+~+;vk)k]YAkB%o5exOY@&f+(mIt&TNr|GJmbJ xx tree efe74ddbe35295a7444ab82084cc56b3088477be parent 4313ddf4a2917c42ffa6b5a6a0a55021f6132985 author Gani Georgiev 1702132277 +0200 committer Gani Georgiev 1702132277 +0200 updated logs chart ]Jxtree 0a3ff684cd0fda98c66abee4900042e8cca10c1f parent 8e903f0e21fc85f282916bb77f1c1da0c606499a author Gani Georgiev 1702127520 +0200 committer Gani Georgiev 1702127520 +0200 updated logs listing LxQj0 Ds $Nȶ8m{0o"8 i6#/dbƒ8:}4*Ysh-hAԹ okp".I.|]vN[4Gx:6g'U?. 1eԻy/Y[A x^6Xx~@׳y_rJo zPr %cFxtree d83c21e44b2b7178eaef5c51d4f370c827a9abca parent 25e4f154393cb8db39ddcbcb4dc779f348bf3802 author Gani Georgiev 1702063008 +0200 committer Gani Georgiev 1702063008 +0200 fixed graceful shutdown handling +QxAj0 E9{8Rnfߞ@qة!S=q& 1702036212 +0200 committer Gani Georgiev 1702036212 +0200 fix nullable non-equal comparisions CQ{xAj0C9qJ090Cg=}t'=$=&4rer6xc3g|`SӘgdgR,s60]?AWބ*xl׵T Ig胣LhU+ X.Tw"_RRKP3A_xϽJ@~[(BbB3{N@2Yg'wo+Ze21z>tl8o$+ʏhu8H*}r6jFmY},^=随ӂyNr].(ZJKnM讄x1!@"&89__[ 1701888210 +0200 committer Gani Georgiev 1701888287 +0200 removed unused options struct Nx tree 950a95ae392216b03f7e2f468c4724988ac5ffc7 parent acc3a9a7abc29b42040724006ba3119ebe467b96 author Gani Georgiev 1701888150 +0200 committer Gani Georgiev 1701888150 +0200 added filesystem.NewFileFromUrl(ctx, url) hjSxAj0E:a 1701856624 +0200 committer Gani Georgiev 1701856624 +0200 added onlyVerified auth collection option Tx1n0SL*`Un1L +CIO >8'Q MoP"JaSMa-;}$cG G39"NK;mR b;kZ)/m*'h |ElfUDsL* !Y_uw#̲RKPEϺ;B tPޠć$m~G|bēxtree 9cdd82d799f05b4a120638c40cbd503123b4c41c parent 8514359fa8107bdbc2ca8b4e4800856c35f4517a author Gani Georgiev 1701706169 +0200 committer Gani Georgiev 1701706169 +0200 [#3877] fixed test messages typo 5dNƔx tree bf83e6bbd8bb90dc85f0e0fd6ed0656a1cadf04e parent 1e7b2e51a339bec7826f06dd25d440578dfffcf6 author Gani Georgiev 1701703137 +0200 committer Gani Georgiev 1701703137 +0200 updated changelog 9Lxj1D{}ŅZ=6cH*]B+`W ֐p )3"T9ҡ {D;&3,ɗvq2Ik&Fg.t"6m).&'`1 !>9n&+ =Tstt &8}(W k*p%_e"f y-ދM o;.c:jxtree e06f8cf8f0651ca6305b9ea7c8206ab8cab8c695 parent d6805dec5fb863d91822c94731af4c7e7704ce78 author Gani Georgiev 1701699836 +0200 committer Gani Georgiev 1701699836 +0200 skip wrapping sql.ErrNoRows Ox1 {^IbtEޱ,k@I>.W3NΒ%.18EF ~+2[A]cIh'fz™g3GgYs[ 7i}?[_+hz -pBT-y GBu)% qP} puWXxtree 9e4df772f7e2395095e3a13befb5da842aeeabe9 parent 553efb1c38adf7783e37c9fdfff24a38e681a19f author Gani Georgiev 1701699717 +0200 committer Gani Georgiev 1701699717 +0200 use error.Is to handle wrapped errors Sxtree bd01ca6b97666ffd40b65dd69a6bc2590f73aab5 parent a1c82e257c18d71cf6185131ffb7537c19ff1e4b author Gani Georgiev 1701629892 +0200 committer Gani Georgiev 1701629892 +0200 updated logs list min-width 6O,xtree efb3f6385f552a669daa6578557e21125f7f8a05 parent 13a8c5a493427d39376bc0dec5774613c272069f author Gani Georgiev 1701629774 +0200 committer Gani Georgiev 1701629788 +0200 use linear thumb resample filter 0Oxtree c5c7764bae95d3b28a916d34ec5d248b4512015e parent f13a029e668302370522e87d45b6ddf1d540d907 author Gani Georgiev 1701629715 +0200 committer Gani Georgiev 1701629715 +0200 removed incorrect base error message iQ5xMjC1> ?/cJ.۲/Nהޠ;}BrFfq`|`m˵ &eK#'g_ dlAtAmFk6rj>'1WP]%t|b|>X'<Ҡ~Uxtree 8935fb552e4b52f73443e109b62a3c80b7a06181 parent 7d555054069a18dca13683fc362e40b4a03682ed author Gani Georgiev 1701629423 +0200 committer Gani Georgiev 1701629644 +0200 always show list errors if there is no filter Sxtree e81f8779ff8aadb70067f205bc56e64243124dfd parent 06f7ca953fea893d07b8249211b6a09fbe9b3e72 author Gani Georgiev 1701605564 +0200 committer Gani Georgiev 1701605564 +0200 updated logs list styles oMxAj0 E>AJdžRs81LEׯz>?n(oq\bya!*)MRZ|}eGR sQBB 2Wtvol ZqEx э?&T`*^yvQ3Z.`鰛eC`fpXܔxAj0E> A-GR9Fo[f41 7Ńg WBetS?y!:~pu+v#qX$,y}^Ir&8>e̜bBOW+P8鳼Rl>.R/W~H`JZ3僚ҡ8ߗuYTGdxj y.cT(!`LJ߾7wVR{Ƀ%q@Yqn֘Mȍ^&F1 Au| jk9ƄcGϸ۴=|?+ƥB2zc#cC5bˍ@ַtM[7.}*%g,lNъB˦˝>?jsD~nlxtree 5c2e3b07cd8fa1f49e4efbaeb281fe7a6073a2dd parent 092b56a58c41874fff142f1aff80c08df56925eb author Gani Georgiev 1701597611 +0200 committer Gani Georgiev 1701597611 +0200 removed empty local() font-face declarations ƏUЗxtree ac8200411b78de906cb1333e2947dea893fc00e5 parent f3ac3e319af5b48bef712aa5e1fce22863a14745 author Gani Georgiev 1701596380 +0200 committer Gani Georgiev 1701596380 +0200 added the log id in the query params 5QWxj0{} k!7n])2.30ZYѺl+{̢u;:> 'D>\PKfg1bdR߭Ý wiTrT^x+uJmqDge:?+Yq> _;!ߺxR[WI}z{N9*W}xj!>E?Bi-ж0:!9VA}U53X;-(rE."eTIظ !z{Miq!IR`qxw,\ۚ^)/|_wۅIez9B?iyRx0||}B;7%B۳ƽZN]~xKj!},Vaj9@Ȣ=vrؐd?Nޑv:gh$SZHVk\S ae$4`n :2=Wi+ִ17ln\yKyR/o/ K<32ӭAX>ar%xl<2B'|7( rWgJ_d=x tree 38c53da80a1ecbe5b3258abbbe58bdff80950f6c parent 58b034ab1b0ed9da2c988315abd41ab6b54319f7 author Gani Georgiev 1701281994 +0200 committer Gani Georgiev 1701281994 +0200 added OAuth2 displayName and pkce options TUxtree 8dd449b78ad699d7eb7f2872d2c0896f3dfa42d0 parent 0bf8a57e3666336e6fcd43bd3aad66d8e8a51a9f author Gani Georgiev 1701198593 +0200 committer Gani Georgiev 1701198593 +0200 added filesystem.Copy(src, dest) Pxtree 57a189beac6df3f7a0e3b7af213e62c08e3ea1c2 parent e164258e3bed3fd904d871aa11c4d9d5ee9de138 author Gani Georgiev 1701109948 +0200 committer Gani Georgiev 1701109948 +0200 [#3617] added expiry field to the OAuth2 user пTyxtree cb38309721dd7f8e387206777d6a6c49c6ba8484 parent 2e29fe1acfa0fa93ee76914a3594e0505c322b63 author Gani Georgiev 1701108306 +0200 committer Gani Georgiev 1701108306 +0200 sort the auth providers by their Name field 1701003648 +0200 committer Gani Georgiev 1701003648 +0200 updated confirm password reset docs example T]xtree efc843276f02a44581482599557c14a142e09c1a parent 59e0c25d354c7c56b58804da83ae17856ed09826 author Gani Georgiev 1701003554 +0200 committer Gani Georgiev 1701003554 +0200 updated API preview examples ]M?xn!C|ܫF|@D'UU~'˖dD`K+ѲW;)hTy!:SZw⎃CkIS91Je7#K-W,)zJ%RLF8cGdp̥e( x'{F㯵s=^L_ P=~)^4x tree 71110e57f3cf68de310e0342dc6e1987a0a2d796 parent 5207b7ec23744810143eb75cecdd85f565d68974 author Gani Georgiev 1700998397 +0200 committer Gani Georgiev 1700998397 +0200 logs refactoring SIx%tree fbbfdb3bcc255348a0996a7425b04beeba84cf6f parent 3014b77b79d08ed465af105d56d5f310633e0519 parent 16e115ecbe6931a295a050e7502e304a97122b5a author Gani Georgiev 1699699886 +0200 committer Gani Georgiev 1699699886 +0200 synced with master Xx tree 2b8339cde9f91c9aae8ebfc17593cbd3a5c95364 parent 2f341b293384c779ea7bd52b57696193fbdabd53 author Gani Georgiev 1699699839 +0200 committer Gani Georgiev 1699699839 +0200 updated changelog RKx%tree fbbfdb3bcc255348a0996a7425b04beeba84cf6f parent e6cbf5c60dd3fac8f7775c623158a91f4990dd34 parent 2f341b293384c779ea7bd52b57696193fbdabd53 author Gani Georgiev 1699699820 +0200 committer Gani Georgiev 1699699820 +0200 synced with master #Z)x tree 0c86b31b4562ec601477648c12596305383356ef parent 0cdc57cdd912a28c81aeed2566901be36db873dc author Gani Georgiev 1699699691 +0200 committer Gani Georgiev 1699699691 +0200 updated ui/dist ,Ixtree c0000d3cdc3847b0df7c1e97beada8d2e640c0c3 parent 6389e06ccc34953976aac6d56c1766cd3e12a62f author Gani Georgiev 1699699606 +0200 committer Gani Georgiev 1699699606 +0200 updated tygoja and the generated jsvm types U@xtree 91f65e210a9d5b9443cabcae5aa823b9366a5ecd parent 41838aaf77c6fedd8328f9c0c36738d747c6f761 author Gani Georgiev 1699697956 +0200 committer Gani Georgiev 1699697973 +0200 [#3697] allowed hyphens in usernames }cQx%tree eb079c4103ebafc53ef5e391d3ba7955fac06253 parent 4427f1057afa41602082aaacdf39bd4f38b2ae45 parent 41838aaf77c6fedd8328f9c0c36738d747c6f761 author Gani Georgiev 1699622294 +0200 committer Gani Georgiev 1699622294 +0200 synced with master iYrxAj0E>@HrdB.(#,sj t>RaPR9'{Awh5Ũ /M;X xlM <ҙQJT \ip\OLDq>@پ{5bSE ߊ`:s1 1699263779 +0200 committer Gani Georgiev 1699263779 +0200 synced with master Yx tree 21ab8609f7061951e591632855a876911edd00bc parent ac8ade5c0e9699b4970e8fee21e384e9ae4bf92a author Gani Georgiev 1699263359 +0200 committer Gani Georgiev 1699263359 +0200 updated ui/dist vJxMN0>H,Q+;v!TĢKXkؑID7ASkB[4WPzNz4 Zȶ=$nKi8a8s.pDHWx ܇<wy|i=o8g;ZNyB~z&x}^򱐫08D55CL \j)lLSwvy @7۝ӂǩv xj!D~Er8j9r^[Y!jq1?+GUߙѪ褋sX JԆdX;V$/IiJ^#1QBxc1~k;\|poe8mW^V^'!%ލ5{麨ͅ!tOV'ių 1698998210 +0200 committer Gani Georgiev 1698998210 +0200 synced with master kYx tree 5df1a44fa811b5de48bde826ab202516eb46db12 parent 3c7b599eaef5b747dc5582e94a6b8993bd066d35 author Gani Georgiev 1698983449 +0200 committer Gani Georgiev 1698983449 +0200 updated ui/dist yJx5tree b720ed69b5e7307181134b9c17d622ea1661575d parent 237cdaf9f5cb63120903995804ba32a706997957 parent 3c7b599eaef5b747dc5582e94a6b8993bd066d35 author Gani Georgiev 1698508003 +0300 committer Gani Georgiev 1698508003 +0300 Merge branch 'master' into develop 3\ːxn0 Dw d4P2uj -QS[2lmj?1`F)c6ՄXiPtRy!ljc#L˖5Vʖ!,xkA=Fa*V8Qi #S(x fM3ԦC-*y̙Q]Qfҍ '4M=rܗ"_CV8Xρ#[Wmp>c;Qۭ^zp4xtree 3ab996843e18f73dfd73d9e763fdcf3ebf432691 parent a982174cff4808875f6e89dca777975984f7999e author Gani Georgiev 1698442079 +0300 committer Gani Georgiev 1698442079 +0300 fixed changelog typos pLmxKj1D:E5#A惬-o*jt 'XBYLuDC9EupmbyQ,zJIT8PQ|߽Í7{mkxo+Ko0Hq.jkCQ# iϲ,xХ&3POdUҖxKj1:EFf |uKVIF#G _ ˪vwdXIG;)mXݒV⁝b1DhQQk㗅c̢縷7nz4 ZrjRiK0Zr‘_ &ϲlm qwU`H^Еx%tree 1c524ef2931ae2ff566a2636c91a8ef201deea71 parent da0e7da2f58a1b3a64f7c60c342a8fd47407318a parent 6067ecad3f1a7c227e36a83f14fcf10ab8d41806 author Gani Georgiev 1698434895 +0300 committer Gani Georgiev 1698434895 +0300 synced with master pYx tree fad955bfb5cbfb1c0a21eae4cdf443f04f78a34a parent de699616d80d5ae32f96851c09a5c9ac7ce0c0e0 author Gani Georgiev 1698417533 +0300 committer Gani Georgiev 1698417533 +0300 removed old comment !M1xKj1:EF@RKF =_ WoQ53pI QJDi5dk[cёϢRJ%UZ^҆B0i jC3ڀ+*\Rˉϲc.Ztp&|:'[a)DwNȣO[٠yl5ZO3'[x;N1{I"ٖ!ų`w#q P33C(2cH*&S^bq,IrX\> *z_0M6f*f1bu0ҒtB{ 6:\Z7jtl/JgQI)Ŵ[#!ޞ *|~88>xo+%R477^uWxtree e488fdfa03de44b8fe7787ab02a51eabfed84d24 parent f7621fa1b52f736b25bf9516a630380758b0b1e9 author Gani Georgiev 1698380966 +0300 committer Gani Georgiev 1698380966 +0300 added changelog rc note GMQxKj1:ECii$5`LƂdr= A 76f96K&"8*2Gt7qs ^RDS$5Zf)E78V}[ ۲aR}Yw 94&RI)1 qyQF'< b_WW~imx0YRx1n Fާ> At{~lD "7HmIc7_yq9pw֙Ѯ)سaR:L|uY'/?~[yn6jOoJ+5j-c)l DNb h *"軌E_^xAn E9 aHӪ9&B jo_"+Ȼiy쬑&upI7zر@i tTBFE595+P 1697892739 +0300 committer Gani Georgiev 1697892739 +0300 updated relation field validation message /3TxAj0O104VJ.K#E`[F{t^o RbOAFHLL M`8t0y~(gG~4Q&Qts)[֖gxΫfbZk]q1{K8_mu\a>rmҲr [V*x tree 73bf41923ac3749d296fdcbc6e1afa64d0b1d5ba parent 39eebf86ca1c465ef27548324d4df59fe4b65e5b author Kunal Singh 1697476685 +0530 committer GitHub 1697476685 +0300 [#3531] updated README.md and CONTRIBUTING.md formatting Qqx9n1 {}:,J@;Z Xs{ `U!^JeʹpX5z=SB]WJ>x*ih Mw|}뀛n4>S/[|i>W3|`Dtg]cj @cYo݁W!lzrU=x tree d0281afaeae6f5391523e81fb7b53a4f3b38e336 parent 3be25c26a5dd73aaa90cad36ab148e36ebf5b641 author Gani Georgiev 1697368629 +0300 committer Gani Georgiev 1697368629 +0300 updated changelog yKx!D~EFXBnVۉu ~} rzUxC6RrSTʝ E\BgT~+nhL6`Zk8'mCфEZdž0d7ZdpN3 yPdcq䘬GԤpX j2[iE9̐ڧu;Wh2 dxpۦ?9]x5UZz,Hta 23\\ZzJ -;\.hprAXrͿ:!94ixMj0:eA)gUzt930sUfoB%/Q2Nđ$\TTŇIGNj*q k1t_kꍮGm{}ॾn\ʾ}1&a6'@gpRLF)jbVxtree 05305fbe188b174fb079ccac536cafe5ebc71d6d parent 0bde933ba1189a9595bdcf06506ce1a375fefb66 author Gani Georgiev 1697303301 +0300 committer Gani Georgiev 1697303301 +0300 added .cmd() as alias for .exec() .Oxtree 8b4da8918f7c74032e5180a8cba32fb01a206522 parent 18b68c9028b3f76233d5d498745f5ddce3060fad author Gani Georgiev 1697300058 +0300 committer Gani Georgiev 1697300067 +0300 updated jsvm types and removed unused helper 5Txtree 67d986f22b20509fe24177dfc997aa1838041d19 parent 8b238f495f048ad0f4775090a018b30c88ffea64 author Gani Georgiev 1697285492 +0300 committer Gani Georgiev 1697285492 +0300 updated replaceQueryParams to use the last ? ߺSxAN0E>H,Q+c;1"]rLR&S1`z0n^ZtCޠo^wtRR!*WH#EglThGC]D^rsX9) SOu||{ND)Es{ax{f ~1sSӰ|KEe OP/i[తvX'>]&xtree f699d237ecb6c96101665c99e49064ddb9f52e74 parent 076abc52563d9bff6cf36fb0fcf2b8657a40e503 author Gani Georgiev 1697142874 +0300 committer Gani Georgiev 1697142874 +0300 removed legacy fonts ?LMxtree 27bf214c6cb2b89f0c1310fcdb2b1a12ba9d407f parent 8aa9b5641c3ae37dc710a57e0ac40b854c536e55 author Gani Georgiev 1696963095 +0300 committer Gani Georgiev 1696963095 +0300 dragline z-index fix LUxtree 6e2c0cf1bd4d33e3ea9d955941cef25499eced36 parent 549971b2920d7df4db6c940b0e03dc51ce7fb70f author Gani Georgiev 1696874582 +0300 committer Gani Georgiev 1696874582 +0300 updated api preview docs Naxtree 965abeffcf384b49c78348767859613d41ba8c7c parent eade4585e63a8fd6570adba94de4e4ba4f3e051a author Gani Georgiev 1696870553 +0300 committer Gani Georgiev 1696870553 +0300 minor styles adjustments Nxj0*Scved9~}}8sTI$o85f *E%$Ũ6jv:L!(ެ{$1M8%Ak6g}|eïy\.\;]liܻ#1|~l[mzփJyC=(R{{> [x tree 6274357a7013769c9ec258d53ecfd71d5a53cbd4 parent 5bf652705a4873e124b79a1721167e5809563e1f author Gani Georgiev 1696850816 +0300 committer Gani Georgiev 1696850816 +0300 [#3112] added options to pin collections :Q'x%tree 48b0b2f3d46941793a5a61c6411a620213452268 parent d09661f9d97389e447fbc23ac644e43b48675cba parent 385c176bb3160c628cfd0578317f013b79c62aa9 author Gani Georgiev 1696842081 +0300 committer Gani Georgiev 1696842081 +0300 synced with master Vx tree 9c09e80b5f8d3623701393c830d7ac4cc8d87581 parent 94eff526eb9815467e7a8f29ee025fa060a22ef6 author Gani Georgiev 1696797838 +0300 committer Gani Georgiev 1696797838 +0300 updated CHANGELOG Ix tree dc37fc7a82c879797f363224c71cd49d72355aee parent 4b03814d07b41006e4dba34a934f29120e8d01ed author Gani Georgiev 1696796783 +0300 committer Gani Georgiev 1696796783 +0300 updated jsvm types 2Jxtree a3382657364eac507ff43b8149f061e3dcbdb7a8 parent 674c998bbe10d48d80316d7a2567618a245f2c5c author Gani Georgiev 1696796233 +0300 committer Gani Georgiev 1696796258 +0300 [#3476] added raw template function ?PxKj0:EFd} ,lsXDQBBeG qj~2VZpk$EGO3QF{7P3MFP#9͌&rhE8ۭT=K]?y8?搶a)wxcJÓTRnsjq!zqLPy)\le [w'[h )-뙎 gZ2BX|&jxKj!E]S!z~^قBO5d{/D^ : A#7A FɨIp%Fo4d(Vz/ s=kG[T].ѢF7\pή^"p->z$w%_+Aɗ螩 |)\~dx tree 6d41779996bab16eebba40fc2d36c42338858387 parent bf85cdb4977c0b6b8433ec3d4e7a2fd3d1f83631 author Gani Georgiev 1696684291 +0300 committer Gani Georgiev 1696684298 +0300 added jsvm subscriptions.Message binding zSx tree 7f865fb8a88de834acc84fa7d61dddc430d2b705 parent e9ab4ecfae0649134eb571efaeba283367eb2a39 author Gani Georgiev 1696682120 +0300 committer Gani Georgiev 1696682120 +0300 [#3447] added jsvm http.Cookie binding RxKj1:EFy @>nɂQzg A "0F JeSFY$l?'^8hghMQEapʒxZJA1(>W6S÷Ŷr.}0gE)c3B #FA%+2y4ZqwG&hDȢ5#2?de @U<^QhMdh!pC*[D]'#CNDi>:uIG?m+ 1696487626 +0300 committer Gani Georgiev 1696487626 +0300 Merge branch 'master' into develop N]xKj0D:E mH } |Uf'#=r<7j+f /vn=;$wJڌZ0k5z^:ܱ&Sg' o~SV>`3(gS%l%I`D/B˭Bx`5^0R=3-Mp˻J]uA^_Bxtree b541446987bbfb00a77652db185b2bb792c0619b parent 3d3cf097643f54f0b86a85aa774246172e4b58ac author Gani Georgiev 1696403940 +0300 committer Gani Georgiev 1696403940 +0300 updated nonempty label styles QNxtree 5e9f3ac946c0da2e9acc35b516bcbd26b188b3f7 parent ed0aede627042a542a82d47485737ff25362e5b5 author Gani Georgiev 1696372070 +0300 committer Gani Georgiev 1696372070 +0300 fixed comment I͒xtree 57b74093e82d2587fbb363c1269e1da03edea5a3 parent 8d97c6dcfdcf0d98545f8d2bf3f3b2a61a4ae73e author Gani Georgiev 1696339104 +0300 committer Gani Georgiev 1696339112 +0300 updated file picker thumbs size 7Qxn DWP-߱A`a_Zz7#Mo̰@E28d?(QȈE?a 9lm',+K *(D Ua6N(FYpB)JxA;Zl*^\Il9,|na/p>B_x^P)ve5!bV A 1696175127 +0300 committer Gani Georgiev 1696175127 +0300 replaced interface{} with any OQx=n0 ]^ X?@t-'$J1`#Uޠ~ӕœs&JX>U !4w!޻m->D ! 7h[mWhYOY+Xu3^>pB4ݖQ^ r-Oro2M^ E'cl-{E_xKn >E#|[F9hclFC WR ,!H{R@%Wi(JjgP1o eXMڌ\kÃn=~{x*qiJ# %2ߣH,'ع>g&V. R(TQ`?^_?3/!?^xKj1Ds jd냬\? YVQ(jtf0ƊmUHH ^IN}[v.6r1r6x"cC]^w^%kOS^K~Ōq?AJ&ts]!xU,={x> 9TS0*;CgC|&y? X&Y3C9z=9'/<)ix tree 17bcfd5deb007dde8f92124a0687877f0ed48d07 parent 435f651cdfd6904d8516c30ab4b8f1fdc59cea4f author Gani Georgiev 1696074192 +0300 committer Gani Georgiev 1696074192 +0300 updated ui/dist EJxtree df8fd9a440ed5313c2fe112da2c0e4b77a85bde7 parent 040421421818e9f3acd76047360d1e20335b83d7 author Gani Georgiev 1696064294 +0300 committer Gani Georgiev 1696065180 +0300 show local date on hover (Lĕx%tree 5dc7e3e08178f59e9457e6956e09a82588762917 parent e353c93bd6a180be7417dae75f5e490860d79a58 parent 8b687f58f390e289845a4167754a26805295a955 author Gani Georgiev 1696058457 +0300 committer Gani Georgiev 1696058457 +0300 synced with master /Vx tree 36363aeda64ca6586ecddb301a9b8d7951cece91 parent 8723608c7b5d606e99c67726ef035be6e5b4847e author Gani Georgiev 1696055846 +0300 committer Gani Georgiev 1696055846 +0300 updated changelog tGK-xtree 12b4c5b8df07ab2f86020f1d5a723aa730eca492 parent e9c0711e8ff5dd6ecd119fa00e0ef51002ec5ce6 author Gani Georgiev 1695830012 +0300 committer Gani Georgiev 1695931474 +0300 update tygoja and the generated jsvm typings bUْx tree 350c432cc1910361e8df295650cf74322e123392 parent 27400f3213b7200044f435b7d6059aaf0447744b author Gani Georgiev 1695673810 +0300 committer Gani Georgiev 1695673810 +0300 updated go deps Gx%tree 6ab8ffe1d31f66329a9ba7011075093a4d4b5c5f parent 4e94f39deb9f176c799a7fecd4c1d1183cc4d456 parent 27400f3213b7200044f435b7d6059aaf0447744b author Gani Georgiev 1695673567 +0300 committer Gani Georgiev 1695673567 +0300 synced with master XUxOKj0, q tbˎi~޾t#$!$*@"A!&`hi*%i2![#˒RgJd7pщ8 nbtUBW5|S>%K^,ϤhS~wki ^UDJe!mrnJhefMGE*ax%tree 5a864a59727bef48265fd59819b69d8505380c64 parent 7ed9c406784a00740e348a472f068bab9de2c801 parent 60affce5d28006110b5f85e7d7a10d4ed5807b0e author Gani Georgiev 1695545766 +0300 committer Gani Georgiev 1695545865 +0300 synced with master X xKN0D>EX H$`5b7Wh݉'7`SzUzVz|?Q1j#a0"cA;V Fن[kH=[ϚtJ++pkspJNvxz0._ v4FNuxD'5R*;A |%lsNHKXkIG;*#/qm1O+D>Bk~h0|kx tree 8b692d1287deb8eed57be24fc30387625217299f parent a9fcab1a79f7c4023c2d5b29f2f68921844d242d author Gani Georgiev 1695542855 +0300 committer Gani Georgiev 1695542855 +0300 updated go deps Ix tree fde8b19a6fe6f2f9930d659d35e82cf8b6c4d42b parent 812b9ad9ba37ed75bf2088ddeb16fe797a034132 author Gani Georgiev 1695542712 +0300 committer Gani Georgiev 1695542712 +0300 [#3344, #2505] optimized records listing R0x%tree a43f2bb002bdd349db24c8f65433a76fe41cee4e parent 0fd57004349c13b9f665cefd279de8f589e0c52f parent cbd6089bcf6dd7f3c66629e1361f6cf4fd2b3436 author Gani Georgiev 1695407086 +0300 committer Gani Georgiev 1695407086 +0300 synced with master Zx10{b%[#\wkyN1qq?j)7pl=.ѣKSH&G 1695396274 +0300 committer Gani Georgiev 1695396274 +0300 updated go deps and regenerated jsvm types lSmxMJ1F9EKaHwAY (SXН 1ofK̘ߓ)fM]*v(zM8M")ז ~ xylĥ0&_`pUSӧlGX|r&dk:]$1a}"Lp]<&SZxH&spJo8[x tree 07a91ee918347915a1c3615150d60b8de8160ca6 parent 3d5a9234122d84861e400b972f63292e151d7200 author Gani Georgiev 1695066756 +0300 committer Gani Georgiev 1695066756 +0300 use goccy/go-json to speedup serialization MR_xKn!DlY{(&9h- 18^TuORjT&DO҄`&-<{(*6uH4Q.%oyhmҳ%9D%|:i~- .xcPi /|,Cɟ#P}q?ןuiy&\/xJ0DTrۤ _In)F3gfj&Gsz' i# VGEދ/⧔%\*G<޶!e\ص%|KG] Kix?k0w}CEC--v+^AlY1W;wpw6Z[ %j %)e ZTLN1T|EReEӍ1}mTՅ(ה)B)n_<o>P*g[XI#KL'c$bW,痊ǴeZt{=/1ljϗcixtree 7f72fd007a2f26aa9e5e75a5fc59436f7ae416c5 parent f710e07721cd66f73ad5623660d246a9112c64c0 author Gani Georgiev 1694837236 +0300 committer Gani Georgiev 1694837255 +0300 updated js types docs (K͐xtree f564a22d5ea314a2e6271a6bf8a81f8e5a5658ac parent ac9b40a6f8c1e90e3a786adf3d98f782db2e4cbe author Gani Georgiev 1694836459 +0300 committer Gani Georgiev 1694836459 +0300 updated changelog and go deps PRx1n {^}blJQޱ L1" ae$ʂ%M11oLQ*ǀ%[SFn<(9DKi w>*ܥir᭼\/@D e:#a8%I7Hңsԧ@=8 T x޹y?[zxKj0:EC!d7Y-b[A\ zјU>+?kB6);CLEJ-~9sFo<%'+M\b KeBKYclwm-i}zP٧XG 7ԈZ27ͯzZ7PJ`cJ:Й SC.׸?!YxAN!Ｂ&%1Ƌٛ6 ?XJ!hHQJD1K ~)!-Ψ;ilHڀ䴾"Zco6lKGpV&}"?O?|͕~ Bޡ]dI[ikSPD1}AC'8JK{ʔz_oYԖxAj0 }N!0J"'0 ŖC7@[ZT'g>7Q?zZ4ϝE2csHѽĝM=9Gz&6Eȁ&3y%xȞࡹI>_/~ΛǮ9wlkRWz#7o5AH>ǑK~EUŤk|Ԕ[˜xtree 1271ae1eb1a6051f8ef63defbdb65a8cfe471baf parent 9372eccd092a5751cdab26238040e55b964258f9 author Gani Georgiev 1694360007 +0300 committer Gani Georgiev 1694360007 +0300 updated migration comment >Nx tree 9697c6e984d636710324aec75b566efb9c9f1661 parent 964d7a52613d790e06f61ed5e005a3fe97917070 author Gani Georgiev 1694332671 +0300 committer Gani Georgiev 1694332671 +0300 updated changelog lYI֝x tree f082052720744c0c693b9f7f4dfc6dc525d4d3d4 parent 25ee364bc0d1c97b3f8101b0a286444144f0d691 author Gani Georgiev 1694331979 +0300 committer Gani Georgiev 1694331979 +0300 [#3273] added readerToString() JSVM helper 8BQnxtree 1964b33b0f2a2feb1e172454ebd378e1cda71f7a parent 3f220f67407135268fc48ff7d76cbce7379a0a60 author Gani Georgiev 1694251136 +0300 committer Gani Georgiev 1694251749 +0300 fixed changelog typo 'Lxtree 3131d360437f8db68301df0c8fe2f1a736951f2d parent 5992883fce9b6159425d093f265a58dbe52f0754 author Gani Georgiev 1694250214 +0300 committer Gani Georgiev 1694250214 +0300 added hmac jsvm primitives and updated docs w SNx tree 3cbc1e180f136ffa60e6f9cd2c4f7538b338d02d parent f505c978462478392f824a8fb775577a11c9b1b1 author Gani Georgiev 1693998782 +0300 committer Gani Georgiev 1693998782 +0300 updated go deps xqIxKj0D>ECn@ YFl9͜?dua6aƛ *\JU IhMЉma'ÌQJf1P+cQ) t&pwxJ=¤5qH;bxQ/]ý_j T{ _ X vZ;M"&+q~cxAj0zB y-iGdy"ȥϯ @6sޘ 1693904049 +0300 committer Gani Georgiev 1693904049 +0300 updated changelog /JՓx tree a8115ac3429dda8cfdd977b62a1330f7fdfc30d5 parent 06de72c3f42ece37cc720561ee45e0775ae14d87 author Gani Georgiev 1693903741 +0300 committer Gani Georgiev 1693903741 +0300 updated npm deps wrJx tree d42f2ac0c5d8e8aed2216dc8ee38a0247f58d9c2 parent c7b6e6c9fec2f6cc206310f55b429d492b0dd481 author Gani Georgiev 1693902314 +0300 committer Gani Georgiev 1693902314 +0300 updated jsvm types @L!xtree cbce1159b465d8b00f0244ce07715db63711d246 parent 9980e22e0aa6973c6c1e7185e083e5c657ae6b96 author Gani Georgiev 1693902221 +0300 committer Gani Georgiev 1693902221 +0300 updated changelog and ui/dist OcNcxJACᘝw} [  to)T FN” sIV 1693816539 +0300 committer Gani Georgiev 1693816539 +0300 updated ui/dist @J!xtree 1257a7e9ebca8a88940eff6fba27196146865c09 parent 1c926876e15aa2812a3b9d5bcbb476dfac627706 author Gani Georgiev 1693567729 +0300 committer Gani Georgiev 1693567729 +0300 fixed grammar Ibxj Eyo_&B(s|G:_]p{H 5.+=$;!,kP k?CCpɰZ w7d-VfPϻ_׉̕|&z טKq-+^7;I봱FIIB 1 {bgNL1@ &R3P6?WiqrO5a`XxAj!E}R[G! !''(+9\`0cN.1: /A2ޛ m۶-/~@1$ny7jnG eZ^Qv5 c 2^E y%y`'2>azXO|AǷ[dx tree 4798832339ecce0fb7295df87270ede09b6404ba parent e3a695724e7758e9f53811dbaa74ea54a7c6c48a author Gani Georgiev 1693561483 +0300 committer Gani Georgiev 1693561483 +0300 updated ui/dist 2Jxtree 78cf44acfcc60a7067433f81025934159853ea5e parent 0490b88d6fda9298b2ac188d1ba2ac55828a44a6 author Gani Georgiev 1693561309 +0300 committer Gani Georgiev 1693561309 +0300 removed cgo build archives artifacts Qx tree e168872d380d7d3a43a04b47724347f660224517 parent 81dcbf59c984ffaf4a0566714fb3660852b19115 author Gani Georgiev 1693556188 +0300 committer Gani Georgiev 1693556229 +0300 log cron job errors &Ixtree 3a7e5743836f6a43dd27ecb75f4a36f69ca37205 parent 1a0dea4ccebfda6f519f29a6084c0ef46642fd05 author Gani Georgiev 1693549849 +0300 committer Gani Georgiev 1693549849 +0300 updated api preview tabs style 3P}x tree ae6c878be211eea36d68854f3c8f90f4df6fc459 parent 7c2a5deebdb90455412bd20690f5ac5e9b652d34 author Gani Georgiev 1693549369 +0300 committer Gani Georgiev 1693549369 +0300 updated to Svelte 4 tKܞxtree 97425ae8e9b3cb771269d98acecc4ead5eef7fc0 parent 90eb2e6fe5667beaf1deec9f7b6e8f99eaf8a2d2 author Gani Georgiev 1693417165 +0300 committer Gani Georgiev 1693417179 +0300 removed forgotten svg icon font declaration |Wgx]J1.,}Z<; {}G VUT}\4Ʉ6U$MYHoR?;eJˎ1ٜ3Sʂ|Vɫ# lH2 kpV}7x)}+֯K+HKOB V#x $b H[m~>v<)ȣo0WX`xK0:E$av9G[jy"Ȳ!rYV-^zc89l2gtF0 b+5RJ6DIy`5#ޢ)wi:Ã6|m::}g*4q)wCZ;4\P#ӖwDŽD<@rz#o7|r?LW'xJ0D .G4 {!.n>Tп7b3v0ă#@ Lly\h] ~dir g6 1693326181 +0300 committer Gani Georgiev 1693326181 +0300 updated go deps )Ixtree 740838b71194dbbc2dd4690d831b79daaac109ee parent c601566d66cb67103e409c017d2ac027286d40bd author Gani Georgiev 1693323680 +0300 committer Gani Georgiev 1693323680 +0300 use singular NoDecimal option name ,Pxtree 4f45b873f03acbed795f6ba64d614f7454dbb83d parent 01f84ce82d83d1c7c5bec3a56b6f66bc1e901b55 author Gani Georgiev 1693323288 +0300 committer Gani Georgiev 1693323357 +0300 [#3113] added NoDecimal number field option qSޘxtree e5f8f35d63af78517416df19904aaf889577d53b parent 18d384bfe00a7888f29327dedcadba20ae389039 author Gani Georgiev 1693245935 +0300 committer Gani Georgiev 1693245935 +0300 added ellipsis for long backup titles bRExMj1 >BJw9DBiO_C]=N^C$X rH:Hf;vh!|(@i)e\jǸ7nZ딗qmaZs+t2!9MqkSN(Gi*nxl6mJ̳ ̃J(? hsx1n @ўS2jFZEIRE)fE1B8A?Sr&sʤFoRLL21y!9CE縷7 ܤ\/_JeV_@hd&-zZƐ,q1~1 C;Fi;5b H ,Uw7ew Yqx%tree 55bad830b49563031fac7d0424bbdaa447c9bcf9 parent c952a37bbea8d0e5cd81897b4949082385f9bc37 parent ba1a32fe15ce027c8f80852fe5c069719d6a2159 author Gani Georgiev 1693050390 +0300 committer Gani Georgiev 1693050390 +0300 merged with master #Xx tree b0a4735b816750a90b854b20b2c8e756c1fb04cf parent 39cea89fa1e4e3c86a2c2bf07f022c55fe776823 author Gani Georgiev 1693050235 +0300 committer Gani Georgiev 1693050235 +0300 updated jsvm types KQxtree 8ae2aae968d9a735c9e8520da6745322b3e967d2 parent 1d0395906a66502334349afbfb771542672c6d54 author Gani Georgiev 1693049687 +0300 committer Gani Georgiev 1693049687 +0300 fixed cronAdd example [Kx5tree 6e4d665f68b8923c48c139b1ea2a79ab01b9155c parent bec4c451f4e608608ca33bfb982630eb885ef718 parent 1d0395906a66502334349afbfb771542672c6d54 author Gani Georgiev 1693035493 +0300 committer Gani Georgiev 1693035493 +0300 Merge branch 'master' into develop ]x1n!@~O1}$kEHQ"TFv|s@tvJgl@LbHVv:i-%%`7\&#*aPZş\}-p6r_x/^?~ usd4)xCB\^(s?٣!7k.0oU.7#G*Z %Zx tree 3c4ff99f5f683a50e2b620f2000181a856c6c37f parent f976fbbbb63fa763a50e636d1feada3650dd9b1d author Gani Georgiev 1693035026 +0300 committer Gani Georgiev 1693035026 +0300 updated changelog K|x tree de69112eb2e4c0948be12155166b6f577a9ea715 parent ecdcadac28eb83a3aefd737c957258391bcf49ce author Gani Georgiev 1692990844 +0300 committer Gani Georgiev 1692990844 +0300 [#3025] updated tests.ApiScenario fields SAx%tree 56df36b2e8a90f8102418c9dd36db42a724170cc parent 02459ae8ab2c8873c79bb36917ded843dc8a283e parent 944ecbeff03c5006bbfbbc9fd5fe93ed2f0c242a author Gani Georgiev 1692976269 +0300 committer Gani Georgiev 1692976269 +0300 synced with master |ZAxtree c8a7afbc9eb7140b438d7ba9b95c39b23f855195 parent 4d27acb9281ae4b75f2bac41c869d03916d84aab author Gani Georgiev 1692971399 +0300 committer Gani Georgiev 1692971399 +0300 updated ui/dist and go deps Nܔxtree e296b84865a1440d6cd68eabfe850a711fdb87ef parent 366f84ac6a439c5955bfd2b7e5310e4ba0235c9b author Gani Georgiev 1692971261 +0300 committer Gani Georgiev 1692971261 +0300 updated automigrate template test VQxztree 2137da64f53eae92ede4ce4395b8d7235e76d781 parent 58e85d39072583ae3f84e11bff150d4ad72778d7 author impact-merlinmarek <108658445+impact-merlinmarek@users.noreply.github.com> 1692969664 +0200 committer GitHub 1692969664 +0300 [#3192] fixed autogenerated down migration not preserving old rules state Co-authored-by: Merlin Marek {FxAn b5HUԞpI8#!iÚ4s49}Z y!}Bh|l;%` i!FŬ9}{TyW9R4Kۅ>i[SP$|4 I}{i?@=㨽_WZxtree 225e81dcbc8d7bd823dd12e580a2ee444ea61a62 parent 00e035cf246992bbb851444fd4832c1ebc19ea93 author Gani Georgiev 1692951391 +0300 committer Gani Georgiev 1692951391 +0300 poc of serve domain args |MQxtree 2caf1aa0796ebbba8ad1a515fa39b166adfcdaa8 parent c1c59e6b4a9df8a45fa34511a47a4dd98bf769a0 author Gani Georgiev 1692865500 +0300 committer Gani Georgiev 1692865500 +0300 [#3175] added jsvm crypto primitives YRxtree 6651b4a324af6785e5b7c4a242dfb530158d268a parent 394a8ef2382bd54dd2720074afd5419d0e255e07 author Gani Georgiev 1692813036 +0300 committer Gani Georgiev 1692813398 +0300 added basic fields wildcard support "[Pۘxtree e7b00f1a080ff7eca76c9b81fd7c7bc06c08d20b parent ce9f9d955f4fdf245d833490f7e77e836d7b6e9d author Gani Georgiev 1692798643 +0300 committer Gani Georgiev 1692798643 +0300 removed unnecessary test cases prefix SxAj0E>@ dC.$WRJ{j t[<O$8Մ Qmۑ&kVer3m٬_oF~\)Mrك|exޟx#y48"InchML o/FO3ܷ _)pV8UKr'GwR?l*\xtree 41f6cc05d655c3102a5a05ec064b2ad9168c7b26 parent c5619d16a0933b1827b3e131020dd0daaecc7660 author Gani Georgiev 1692730899 +0300 committer Gani Georgiev 1692731373 +0300 reduced the default prewarmed goja vms to 25 1692730809 +0300 committer Gani Georgiev 1692730865 +0300 use crypto if available Lڔxj0-C Rr? i׶6B~ ml#)>%1:CyHʼn#ãv*뤍cL6{V t:^ƭϕOxx6oҶ+(?&4nUƫbHDLRҠ]z[A)W>?_prȼ>\x tree 12278d8d91f57a9b26c352d8ff30c4d91f10d15a parent b3de8b1758d15167879a87c974ead3766ec3e3ba author Gani Georgiev 1692698468 +0300 committer Gani Georgiev 1692698468 +0300 fixed isNew checks w Kxtree 6a5a384c22ff9fc264a85618947ac7997d49bb9d parent f98234a174c8da185153dbf169498437984643e6 author Gani Georgiev 1692696594 +0300 committer Gani Georgiev 1692696594 +0300 updated presentable fields sorting ǙPx%tree e9d03e52e8a39679bdaa4bc01cfd9fafc7dcc5b3 parent 05aad79cd61113ad8a990bcfd7fe920527aaa691 parent 58e85d39072583ae3f84e11bff150d4ad72778d7 author Gani Georgiev 1692690862 +0300 committer Gani Georgiev 1692690862 +0300 synced with master oZlx tree 21c2b10381d10da49f7141a7c34e72c1a7abeb65 parent b3376a837334798a5bd99159e9371f06d12a852b author Gani Georgiev 1692630934 +0300 committer Gani Georgiev 1692630934 +0300 updated changelog nJx tree 6be156b19e8901dd4a44f950f1634338eb114167 parent 824479d4f58829d0740be46f44f3bda0071ccc97 author Gani Georgiev 1692630863 +0300 committer Gani Georgiev 1692630863 +0300 bumped app version JAx tree 7d846b70fb31c4326ca09c94ff088e30f1d3b6fe parent f0a34607080649e843fcc93dc590cfb0f255e41b author Gani Georgiev 1692630607 +0300 committer Gani Georgiev 1692630607 +0300 updated go deps IxKj0D:E~m% lȚ s8dW5:3h>d44sD& Zm$E'1^J!zCN)=DzwxPབྷY.?*mQb0!QJq[1!'Xu7ny@F)~WxKj0D:Eڶ>mV4[2AUP&8-!"3کI0ak {ޒYu$ l#p*J%UjKY9xI6%`IZ3r E°ԨZWu-J,+oEqޥe~l`xtree 86dada47b55ea57555481afec601bc7f5659741d parent ded16f99f1702c59c7bc72d5aab7185a32b4b234 author Gani Georgiev 1692611898 +0300 committer Gani Georgiev 1692611898 +0300 added SchemaField.Presentable field Qxtree b46677fed93bd9aac49186bc9ad589594d18ed71 parent 6aac9cd4df6a55717193d19f22d1d78253485ebd author Gani Georgiev 1692545516 +0300 committer Gani Georgiev 1692545516 +0300 updated apis.Serve godoc MxOKn s񷑪- HEoh~@Ų:4&wKr'4_HE$.ltSquI-J'h2qLެ.)#k<_&mk+x[:Wɖc G)w'l} s~ qvezAFpe g񼌅^nx tree 57c85e3262387fe8458695462eb4fa399fe4620b parent b2308d91d337f87424f488fe0f27ad27101479af author Gani Georgiev 1692375200 +0300 committer Gani Georgiev 1692375253 +0300 [#3147] don't silence connectivity errors sQǘxtree d1b1c5ca8be016bc1bd7a2e1811bd37e13aa2b8c parent e1d804da771b8e4a514d4a0ff28d7dd6d055f1c5 author Gani Georgiev 1692337412 +0300 committer Gani Georgiev 1692337713 +0300 added datetime macros bMoxOj  &PJ)%\׌`Z.σYzQEFk! qGVFXx>M#.pQ^sܓp.K|^l.E jpz hjD$bNJy^vvTwݜv o9_ӟ6roï.>!gx tree db8c09cccafac913e8b29eae40a565c0012a8a0f parent 19fc6c205930aece88660a06f5084b4521015d9c author Gani Georgiev 1692294600 +0300 committer Gani Georgiev 1692294600 +0300 added jsvm .* binds 9Kx tree de0fb59d4c2a13b8ab6bacf7f027665cf168248b parent a9fba4e10de6a9a3b3076b22214e7a825769099d author Gani Georgiev 1692288476 +0300 committer Gani Georgiev 1692288476 +0300 [#3097] added SmtpConfig.LocalName option +Rxj1E{}zB0IUGh#|?Hy΅٦)UZ}>BFD崪ZqPgB!5֔2&2-+Vy15Ӂoӂm>uHpQk |QgaLH^nEՖ?',M?]m,7z3_ \x tree 50a4b0ce7b3992cf47ff78af5cab1ecfba06392b parent bd547284ac9c17dc96b61939d7481213ba414a67 author Gani Georgiev 1692214736 +0300 committer Gani Georgiev 1692214736 +0300 updated ui/dist PJsxtree 604e5fdcd7a53392deb241ab1ee79361c176275f parent 56ee80dbbd940922b87152f73919cd468da2d0dd author Gani Georgiev 1692196688 +0300 committer Gani Georgiev 1692196688 +0300 fixed typo PHmxtree cf1e8767ca33a9743ca7c0345fe004b38098d085 parent e559f955be95c4f7128bf4a767ec8bf68199cb4a author Gani Georgiev 1692092152 +0300 committer Gani Georgiev 1692092152 +0300 updated jsvm types and godoc list formatting Uxtree 5d4636584c48ca9fedd72a472fc4f8ee7a61ff27 parent 831edcc393a45e9fae69e1e5db56bd39a930a0ea author Gani Georgiev 1692091524 +0300 committer Gani Georgiev 1692091524 +0300 [#3132] updated godoc GLYxtree b5fe8413f50dc47c5bf95e123ec3eea85f937707 parent 6606729fed4b834d789bdd9fd90bc89d37c76bb6 author Gani Georgiev 1692091070 +0300 committer Gani Georgiev 1692091293 +0300 [#3132] added common cron expression macros bT!x%tree 6ebbc8a2af7fed87b4b5f6eefbf1b47415a8ce0f parent 12c98928bcaf9b6ea6286dec1328e7a74571d6e7 parent f0a34607080649e843fcc93dc590cfb0f255e41b author Gani Georgiev 1692090621 +0300 committer Gani Georgiev 1692090621 +0300 synced with master Z_x tree e07033cc75274b2867b7375d2f590bdcd40e3391 parent ee00d3baa0bbbccd824feff44b7898d9d77703ef author Gani Georgiev 1692051250 +0300 committer Gani Georgiev 1692051250 +0300 updated changelog ZK{xtree 72ae8f115d56cc6c19958e0c1730020b304608f1 parent e05b2c36179ad7d4cf28bde8cd5a20ccc2f03e9e author Gani Georgiev 1692050993 +0300 committer Gani Georgiev 1692050993 +0300 quoted the wrapped view query columns kRĒx tree cf7ccf2bf7fc25888f417ab821c99f228811dc6d parent 1761a0e38e1297e5073736921693fb23ae22bddf author Gani Georgiev 1692050314 +0300 committer Gani Georgiev 1692050314 +0300 updated ui/dist rIxtree 8a4f80152fa3416e575d26281f16ef913cd67982 parent e05b2c36179ad7d4cf28bde8cd5a20ccc2f03e9e author Gani Georgiev 1692037249 +0300 committer Gani Georgiev 1692037249 +0300 removed js sdk dto helpers NQx tree 1e2676b80c0a22ffe5ad8cfd70b14299c6ed0760 parent 6af9ee06c1e4cd2ea38168baf592ca5511be5f5f author Gani Georgiev 1691754025 +0300 committer Gani Georgiev 1691754025 +0300 updated jsvm types ?.LPxtree 626d20e7982052fa3a8e129ff09651cc6e0a1906 parent 13f8832dcefedbd3035799c561cd34a270b25adf author Gani Georgiev 1691753873 +0300 committer Gani Georgiev 1691753873 +0300 updated views migrations to use SaveCollection 3Ux=N1ާ)z!6#&ӳ7|7:3`DM>&CCDYRuZ"#"N0@)ة'>.9gn}rmI+MiZe DŽzrX[*?Lp~]x {=T8߷&mM5Z/x1j0E{bV!l*K#YNA5}@HF[ g)HՓ-^ͨ v١5ZLF5:ypKox-NOubހ\.xA1*tN`> !Ў}]GP /6Yxx tree da97ad7acf9ca8d91301589c4b692af2da6f6d6f parent 3a2ef75b33e5b42c32c6db40b2820b49a7f47ee0 author Gani Georgiev 1691646986 +0300 committer Gani Georgiev 1691646986 +0300 updated ui/dist GK xKj0D:ECk0d5Y,vR5rxHne=UT Ika@zA-ډW'fBv,,pAtXW{-Kt1)_txٰ4mOTXI+ 9J?*CS|]o{ /T˴+J+_jn Ϡ?a~bx tree 44cd5a1e756c828dd0255891d411f728fdbbcd33 parent ef5b98754ea2c4a75580a5297a5f6fc9c9f5ddd4 author Nikita Zhenev 1691595634 +0300 committer GitHub 1691595634 +0300 [#3103] fixed jsvm registerMigrations error message typo Sx tree 8b41e0557ef56e6e915ab8f2d8fe4a7de4db45d5 parent ba3198065fb54730610762f5a24dbb71d47a46fd author Gani Georgiev 1691576244 +0300 committer Gani Georgiev 1691576244 +0300 updated changelog K<x1n0 Ew@mٖE"@S*)rz ,3y'/Jbq!{p 5P~Nԝp~Y|iߵ7-|%5o\֋1"Gt3G 1691494388 +0300 committer Gani Georgiev 1691494388 +0300 updated ui/dist @Hxj E~Ń.5Q(ev>SI5Zty.W"09WJ`0q:(iQŠd+ike:,>JhrЫah߹wuMt:m0=>o f+ .9gcRxO8B@HR (+`{R}?k3yg@~o`xtree 3647cda9e2ec6b3f87e0763041053aebf4145262 parent f22a69f1606d0f058fa1aada7dc72c36a5dcc05c author Gani Georgiev 1691487711 +0300 committer Gani Georgiev 1691487711 +0300 [#3090] fixed relation to view error message bTxMj0N[B29@$=)K.\hN-z.aDL|dh3JnJC j\LV $Z.RP;\bZF_[#k?rŲMa7 g' \✍"lmXZ4^'g>pVboMVx;n {NhW`~Ft{<06+6))fv"޺A2fIxL.{bc4Vz4 n(\DA MbexέuxQAB_/?;zma*cKU2'cA0Boz|fe/s@_ :Z,GvN[Is8_kxtree 85e716b9d27e69d11e584edface6e79eb5582e4b parent bb690d77cb2e21cf6b030cc43acdb851a3f5b4c2 author Gani Georgiev 1691219542 +0300 committer Gani Georgiev 1691219542 +0300 fixed changelog grammar NKx tree 8a7fa7954d1ac7b20ec519f452321c3bf4260bd5 parent 4d16cc03b1098d5a24638517f13b735fc1f7a1c3 author Gani Georgiev 1691218260 +0300 committer Gani Georgiev 1691218260 +0300 updated jsvm types >Jx tree 892f046f3d46ea3625bbb76ef46d5c5fec084c77 parent 9f65c1a1c64efb7266c8958339e4a8d0ac416b07 author Gani Georgiev 1691209613 +0300 committer Gani Georgiev 1691209613 +0300 updated changelog e+Kx3tree 2cd47b686517f72871f6a7c08ebb79049b094590 parent c19c14f1b3b252a4a7fdbf30087605f83ebeafc0 author Gung Jodi 1691209460 +0800 committer GitHub 1691209460 +0300 [#3068] fixed RequestData log deprecation note Co-authored-by: Gung Jodi ho_ǒx tree f0b2c63d88df22ee5180679c048c2c9826568494 parent f350c40f52e29ed34740ba7b1c0d776cc473ca17 author Gani Georgiev 1691055720 +0300 committer Gani Georgiev 1691055720 +0300 updated ui/dist "ISxj0{} eHZa8B #mHRGE L101BfIsNM51FVlQ`k+fщ`ZY}\2@ o6}ų+׶6py;SǓa99h5Qz$?i$bҹ6^~ɹF; YocNōYx̱j0OqCI8ٖ%A)IwRed%o y?@@4Y;5 +o4YyȾ۩$NƱv@`c4nhpѫTЖ",7Hӓ_iCY?ANJ!=[\to#jGIJW ԄzF=7t+ %B в;TjZ^{xtree c1f4ef3c765d1bc7ffb58b840289b99d11ef4982 parent 87d3dd8654565277b1ec49efdd714e22629f5b3a author Gani Georgiev 1690832855 +0300 committer Gani Georgiev 1690832855 +0300 updated changelog and go deps OGxtree a1083d2aa8f3d67f6c6721b7d6932f4144d771ad parent 0ee9d65bdc677d82d660f81457c1ac46d64b9488 author Gani Georgiev 1690814906 +0300 committer Gani Georgiev 1690814906 +0300 renamed variable name I|L xtree ce579efd77b7cb27efe117a2ead1cfe075be8176 parent 8a8220f1da97ac9eb2477872135a0b1383278dd1 author Gani Georgiev 1690801974 +0300 committer Gani Georgiev 1690802339 +0300 trigger the jsvm cron ticker only on app serve \Ux tree 725ab2163f60dcf8fb23040cf3558121c6314bb7 parent c0bd53fec74eba2a16bc259aedf367c397bd77bd author Gani Georgiev 1690798179 +0300 committer Gani Georgiev 1690798179 +0300 updated ui/dist JܞxKj0D:ECCKm-!9ĐEԒECq`.eԫת*$dtsHH)RT!XHGKյAqѝC%G1(cFc(Fm*d-pӭ3^+~E| vȞ# !]Jk_Ĉ=F/x(TCa6A:ڤi:vx~~_ԳY-x=j0@ާH0c%$iLeH1F--ZBnA7f@=-:Q1:ڈąRԸtnQI @W< @r{_k3 g-e~)_Ny}_`Szq8{,'B}NN唎e_>; Ʒkx.r~9^=xtree e7be3ea13d2bbfffb6452453a20786da3064f354 parent 0b3ebec7bc9f71d370c5c5ab9387b77153bb59f1 author Gani Georgiev 1690729336 +0300 committer Gani Georgiev 1690729336 +0300 fixed cronRemove docs declaration zQx tree 2f8f15a25b939922fd8cfe78dbe0165d4068d6e2 parent d3af94db866a3d1f8f83acf5b8b7178e86e4713b author Gani Georgiev 1690723258 +0300 committer Gani Georgiev 1690723258 +0300 fixed incomplete sentence in the changelog NT̟xtree c7dd96e7b3aaa61d651fad6ba75a47f1c0d9fc75 parent ec086674655ee55f7e8e93d8d0b6d434ee489601 author Gani Georgiev 1690719730 +0300 committer Gani Georgiev 1690719730 +0300 updated changelog formatting RP x tree d23bc8c9c459551e7d2e9705089531c17b3b104d parent fdb50dc8034e0898dfd898388d048b01296ad89b author Gani Georgiev 1690715555 +0300 committer Gani Georgiev 1690715555 +0300 updated jsvm types bJƗxtree c83e4b6985952caaa7a6aa25a775ebb54855b647 parent 62276366f9be923e3ddbfc8449ba3eba50acd97a author Gani Georgiev 1690715442 +0300 committer Gani Georgiev 1690715442 +0300 updated ui/dist deps L}x tree fea09293d836bf455bf5693181bdcba5cebad43e parent 13ef15d61a9e0661080292ec4ea037d56cd263c5 author Gani Georgiev 1690713622 +0300 committer Gani Georgiev 1690713622 +0300 updated ui/dist and some lint warnings Rxtree 375a05d30deffe0da8e34b0a8b82c46b51a100f9 parent 3f85384a2b4446108e368ebf6e31789b6ff8465c author Gani Georgiev 1690700564 +0300 committer Gani Georgiev 1690700564 +0300 updated tests ISxMj0F: a3%tm0NJ=~] |O$k1gr(s1X9L)aZ[̃ $\HHE0D2S}76y{=RܶKl]#sݛCad(]`U`kg!z=RTdxMj0> AcC ]rf$#+ޠf 1YFㆨiE?9  9cQEϞx'4`Su73XJ%ůa^/A+h7)g&k|A-PtHj$ui9JaFEq]=Go8cpp9Yjgҽcx;n0D{b^@`sn.)&)H} f0Q9R,!F46L#Xg´kOJ:лdYLF9G_W_ \>S~W^}b[/ gt3|-4ڵVXߊ鱑LsrYWxAn bV3c(}ce +`C~cwIR&6K,Md:d ~HHњ9Mʀ7=j SâЋvnO+~%]j;\~x;qr~b=?)$O ǐ(I0귔!ԁK&g&x 1690572222 +0300 committer Gani Georgiev 1690572261 +0300 added cron expression UTC timezone note tRxKj1 !dshZm`$9ɐG _ ţzc֑THVA+&АA9FKWk'}'PKcr3$6M} n$qm1>㬗1t\/@ mմC(!;0X&>O~-2oM,pK%B~^`cRGߗ?&`]xMJD19EKqq7Y4IK8s} \WE DkYIi# ^D޳62t-M.X+%}Xr. _}Z3۶ǶSw6g\J2'cB|>- rP Wf[yZo/Q?YxOj0 )dIk pE຤HRN,AaGoeTޚHhv3֠R[˚N.*<ܨqQ0+J)i0:0ZQJichL%ÙkKvzH׃HtB!NPB h |S+$Xx])1V~an:ýJBA\)^ VdxAj0E> a$ J.Y#G`KAKהޠ>߫XS/~; 8$m5@BuO?.y.$,CU±@Koy,YY6>1 Ma|xAj!!glDZY1q>EnE-x9D`Kt l&9W.Zۚ֍ u#N4 ZD[]0 !Z r\  ǹ6OVxM!=cE.UE5:3(kkђl#2^)nA Fch6$V1ŭܢыǸgzSxL_OZVa8H#nc^Y ѹ'GxT嚀=cKVޟxj!D~EK;C~G{\af j6a E ƣ"j F+Y6q:o*Y1t1JfI[D!L}kp#ÅKMo<|I;~9{SZ*D1{Snw{: OjQZ~>ý/ c&~of4xtree dc62c4fd03f8abc45859dda58b9eba96784d130f parent 311523a590c4e76d28e44d5f71b1b467a1150744 author Gani Georgiev 1690254710 +0300 committer Gani Georgiev 1690254710 +0300 updated record.PublicExport comment QxMj0F: F"(ĒQƁ޾Z]>`.uqM>kM5\< 1690205951 +0300 committer Gani Georgiev 1690205951 +0300 added bindings /J0xtree 421e66d0d98c802db796c611caa796cb15be8855 parent 94453cf1b20ee8b21ea0d265fddc77ca6451b908 author Gani Georgiev 1690196353 +0300 committer Gani Georgiev 1690196353 +0300 added jsvm .* helpers g#Kx tree 7ce26a0639184b687b7b29010bc028a056869214 parent cf80a21383f222e7d8e7f8a87b1a4f7277888da8 author Gani Georgiev 1690191923 +0300 committer Gani Georgiev 1690191923 +0300 updated jsvm types ?J+xtree 006c5641db42c71533e28fdae22525d8857383c1 parent 43ea973e8550de1811ca13440393a42fbe7eb302 author Gani Georgiev 1690191196 +0300 committer Gani Georgiev 1690191226 +0300 added template.Registry.LoadFS method aKPxKj0:EC~ Cݶ$f9} zSInBa!zq Ul0|qӽ[B,Q"acCO1Hv!~hp]6W}|my>bFJ7tZڻ]#Eaԉk{*gYq~\V/STxtree 712c6e6f7eaa25a4963249e427c6460b26c7205c parent 6728428e164281eba013b6dd9e2bc5c3bb0a7f64 author Gani Georgiev 1690145133 +0300 committer Gani Georgiev 1690145141 +0300 watch pb_hooks subdirectories XEO2x tree d9050dd2555d19c8189c4b7a343f1439678dbb7b parent 0f4eb60dfa4bbf2918d86490c66e02e04418437d author Gani Georgiev 1690119818 +0300 committer Gani Georgiev 1690119818 +0300 added jsvm binding xJx tree 8a29076343c29a6c82cf0886d861c5013ed97855 parent 70af17a073771747d3fff2a134c94913196e8ed2 author Gani Georgiev 1690116481 +0300 committer Gani Georgiev 1690116481 +0300 added template.Registry.LoadString test ߴQٝx tree 9841f59e9c181808f2408bcc3ad804d8f973f6a6 parent f09590ea7f52df7637b146e12bd0c025f28970cc author Gani Georgiev 1690115271 +0300 committer Gani Georgiev 1690115850 +0300 added helper html template rendering utils Sەx tree 5762e4fa49705c5adefd3f5e08e1c51678b0c6ef parent 9241f1c37d89bc663feb655d06d7138c27737eba author Gani Georgiev 1690041680 +0300 committer Gani Georgiev 1690041680 +0300 updated jsvm types λKx tree 989792813bc0bfc78373b732d11a7f8aa367c704 parent b1d0dd9d9a81e82820e2ad2f41202d1aef015ab1 author Gani Georgiev 1690041585 +0300 committer Gani Georgiev 1690041585 +0300 updated ui/dist iQIȚxtree 17883eef9c655c5fecbe47e1c40097192ce7b111 parent 935a01682b3f42ab9c21a2dc0afbd1439d3fb843 author Gani Georgiev 1690041573 +0300 committer Gani Georgiev 1690041573 +0300 replaced os.IsNotExists 'MAxtree 5df82bda0a97cb3f1ef12036d3d0bc9a922a61db parent dfe8a832d9f37547158db66250d22b188814e108 author Gani Georgiev 1690041040 +0300 committer Gani Georgiev 1690041040 +0300 make use of skipTotal Kxtree 3c821f4f7063c395f4f952c5f37a31ab140d341f parent 20534fa1a1b4ffcdf732eca71affacdd4dd60e4e author Gani Georgiev 1689971797 +0300 committer Gani Georgiev 1689971797 +0300 updated go.mod and jsvm types \PPx tree f92a120ce97d38c8daec21869e30fe669a24b933 parent 0485d9ba2fc54ec777722b30089b33e42232401f author Gani Georgiev 1689971341 +0300 committer Gani Georgiev 1689971341 +0300 updated jsvm types 'AJxtree c31c4f0225270be0b8aa9d12200476e975ead454 parent 00f6dc7803a42cc19c2f63b05b6856c2e6890012 author Gani Georgiev 1689971076 +0300 committer Gani Georgiev 1689971076 +0300 added search skipTotal support lNxtree bf94428b4af10b41f77fdec0e1038351c0e5acc3 parent f619aa8cc3a85eec3fed24569a8b1d076101f283 author Gani Georgiev 1689879718 +0300 committer Gani Georgiev 1689879718 +0300 [#2957] added support for wrapped api errors Txj!E{Y3,!VRO}:Œb =Å@ʡVKD9[}$TN-3ʢlT:85NF17,/F2ycN: >ZܱdSm)\@vu9Śe^vϽ?'H`~Œ(poA牉 ;B~;°SI%Xi;?`xAj0E: F %kƮENkh{.@aow|G9jNE {gE+ژSq.x441ɰ_@[Ar6&C\LTcB0\9%Ô8= 5ÔKޟ(#]x tree 4e77d93dc277161bc015ae88694de36d7cd2a7ed parent 639963fdf5ba59578dbe4890f9ec9b1b59ffda3c author Gani Georgiev 1689848176 +0300 committer Gani Georgiev 1689848176 +0300 updated npm deps ,Kxtree c3b10ceca1ca6a012db3d310227bf0f066003109 parent f3520baa4ba000bbab156700e1be5ba43eefa475 author Gani Georgiev 1689847817 +0300 committer Gani Georgiev 1689847823 +0300 added e.action to the realtime docs preview ;TxK0:EB˒a]іZmYɐۏ@U >y~"3jFةj9$t,-YVMJ2)J[+ז ?;xo+8N*Dqڵ' wB4^#,) 1689843623 +0300 committer Gani Georgiev 1689843623 +0300 updated tinymce PKx tree 060b49abbc9379a3bb8fbe99e6df67f714f9bb03 parent c010aebbdeefbf76b8f476e8e080dd7f860a2bca author Gani Georgiev 1689842569 +0300 committer Gani Georgiev 1689842577 +0300 added after hooks error response tests aTxtree ab66192f7fecf008e0a6286247af9fef3e148403 parent 110f54b20cf23eba69353d37bbf07ceaaa157d9a author Gani Georgiev 1689838803 +0300 committer Gani Georgiev 1689838803 +0300 added Response.Committed checks PxMj0F> A %tU3c[4$uKo]qBFe|bQ#O{16 w)fU91&&rlr] NB׺K}oˆzABTF'xQRñnwb0|r?+GrR WWj7\xtree a1819f1db0019022b51d8c758418ea92787b6b9f parent a2265c144dd6da9763f5fe39eb53b097fa8fbdf0 author Gani Georgiev 1689683496 +0300 committer Gani Georgiev 1689683496 +0300 make use of the after hook finalizer QǙx tree ceb51682e3bd53994c9c348ce1a73f641b3bda47 parent 14ed048854343fcfde002b4816d589bb180f7755 author Gani Georgiev 1689676874 +0300 committer Gani Georgiev 1689676874 +0300 removed unnecessary collection queries SKxtree 1dd0240475f01ed5f755d84fee98ad58c0343689 parent 62ee7c31718fcb889eda6e9a6afd01aa6caed48b author Gani Georgiev 1689672798 +0300 committer Gani Georgiev 1689672964 +0300 updated jsvm errors handling +P0xN E|[:1i(P 10L,T~q'J8N "dUF1Nنr？dВvJiEi< s@oudR9J]8,x]VL/3X--wj;> ikcoo .4f[x%tree a6700143c77a195e5de06c152b6ee033578d7c2f parent 974141eb5fa5e10dd9006a9ac712dd2689362e2b parent dd34ac95b0366e57cf213efb94b3da1054aa4111 author Gani Georgiev 1689589037 +0300 committer Gani Georgiev 1689589037 +0300 synced with master zmXxJ0^6ۦ!ċifdΪOo8*̀'|2x2yfɹqvv%`fg7dLvxխ $8s5'M>m1PWُ5ãtݓ*c{5DL*ʎ9QS-h.UtC_A5kd86`cU>Gl=-F R9X~Z @w x tree 284ec4118f5ea66cb1f2d1bf7d4c9d1ed04c836e parent d2f7becd94f4958a67c29e946bc981c3479ed6d8 author Gani Georgiev 1689541686 +0300 committer Gani Georgiev 1689541686 +0300 updated comment rKJxj0T=VR?XV [ygs6"ɾ[4I`J]dd~hȪJ 4O\ml GN8"V)%Cmv6.Od ).}Z+omTh]u7BJW{xMj0F: F?)RZȾ7#Y$ׯ)AFgHCb 5:Iγ)i4RZgq㑢g#SLFTZhP \\ ){BMԶ7PqVE)űne Džx ЦP?x߿Z_{ 2]K͐{oi¯-~#[hxtree 919a2b1e178c9d4ca6542b60bfb6c4bb65437089 parent d939cf2aa7d7496f3fdf4fb153ff8df9414f8127 author Gani Georgiev 1689539911 +0300 committer Gani Georgiev 1689539929 +0300 fixed .send binding tests ~Nxtree 653311e39610fb44a8447d26178c6a4077f459d9 parent 8bbefafc78b4a74404703494c66c738035821fed author Gani Georgiev 1689539050 +0300 committer Gani Georgiev 1689539050 +0300 updated cron jsvm bindings and generated types M3Tx= @SL3Hh`O0F!q |AΌ',]ƪJ `F>;XpT]xMj1 OeJ`jC͢d3hdy2uB_C.;}zW:HJZ;:6ff"Q'v>z\ЎuMCWt׵ .q;n|ki i{kjyUޞ0bEx-~l4,+?5;]%oR~UQ\rx%tree 831a234f2291f46dc72ef7e6bac8400d4f0c95ac parent fc020f7d5fa62c762911bec20b317aeefc27f349 parent 0f002ee7720ad89c2d301e75d3356378ddfa1d4a author Gani Georgiev 1689327866 +0300 committer Gani Georgiev 1689327866 +0300 synced with master bYx tree d051dfff4771194b496229ad02a450fea0b70622 parent b5a92f1b889417e77765759348b1364330e455c3 author Gani Georgiev 1689326216 +0300 committer Gani Georgiev 1689326216 +0300 updated changelog #IWxn! D|"fa*- eu/@F3!^btV*9$e `PT2Or(L 1689325308 +0300 committer Gani Georgiev 1689325308 +0300 updated ui/dist hJXxJ0}KaoӀ0{Nzڦ3f7pyW"BQYrh#h =J?p6nJ+jыh@w=9gJ3Tjt)ŗ`O, ke(]kL>*ߧx" LT렝ߐCk<3I( j2Z˱k#9yp\hi~:mxK0:E/3~da6sVl(Nj zjke2iRf+Cd^yEQXyiN6WCNQʤH n\0?ჿÌQ/\ҽSpFJq! gܦ=B{;SoVTxAj0zF,KrXs"XEW&~ xql٦eDiq;oBMшX=;#"PSFJ޷GԶfyzc.C9{ch:{\(dz+$,.XOI]3|AR-E:]wQ?&]xtree 89fbcbf632393115f4994e998802ae718bf50259 parent d03e5844e89a3a3e9d18d5b322b0990fbafaae48 author Gani Georgiev 1689172286 +0300 committer Gani Georgiev 1689172286 +0300 tests types.d.ts in gitignore AO)x;n0{bW@$i\ +r(0IcEa a\b&&J=/hWmf^r>Œ՝ҜՙlZ K5zc iKWj\~^Jz}t!Gt^ZM[1 %<8W(38Xdrڅ|V|SYRZxtree 12fd96d75d3928c45bf599e3353e7d32c239ebaa parent 949671737aefcc62b30e29b218b260b7ea80c62d author Gani Georgiev 1689088773 +0300 committer Gani Georgiev 1689088773 +0300 fixed jsvm docs path KНxKn0 D>}i(rZdJ>BtvofZ#=Z荳8Ѩ10a*:^'~#ءو*BMV-2Э]J3g)5&gx7JS(hf5MzRCoԚb fa92pۙtvx^Z(Yjwo^.1Y_ŗxKj0>EFmu#A#ǁ zW5:3DM %mބiaO*DF-9IعY98YF!Hy1JqާV qkX \?6t! g&ӹe t \XδSAq PB wDŽ[]Z[2ǞkK$Y`:Nr-R~BBWЕx%tree 1c6414633bed514258c507bf108569d30f2a710a parent 1736f273a2cff8bfd6f68bb4c99d1ec961c48f0f parent 93fbf205be2c3354060f548e354377136e77550a author Gani Georgiev 1688840961 +0300 committer Gani Georgiev 1688840961 +0300 synced with master 5Wx tree 760232a2dcd8d836f93e17bf93d660ec527b3938 parent 50b666d71a3fc49159bdac6a85edca0bb764d030 author Gani Georgiev 1688835994 +0300 committer Gani Georgiev 1688835994 +0300 updated go deps >Jxtree 0ea7d45ed77e1c843a0d73fccca96d3a03531f25 parent 26d7a0bb745ff8a0b8a5350d55536f7430166403 author Gani Georgiev 1688835723 +0300 committer Gani Georgiev 1688835723 +0300 added hooksPool flag and updated doc comments +Txtree e933cb6c614650483584da0443fbc282592a9c45 parent f93fc3d3e40ee6d1665d9c82d9fcbfc72bc80d26 author Gani Georgiev 1688814062 +0300 committer Gani Georgiev 1688814062 +0300 updated readme and Find*ByFilter godoc comment LUUxtree 68a7ad8210b2bc1f29d02f60887cfe407834b726 parent d689ed3c357f75d1a4c9698fcfa27e7b8f3b3dc7 author Gani Georgiev 1688813964 +0300 committer Gani Georgiev 1688813964 +0300 updated generated types CMxtree 5ef3587d9cc815938618817f3fbee6a2d99d2256 parent 2f10448d3f01d7789b568b869fa88c0dbb5985ea author Gani Georgiev 1688813476 +0300 committer Gani Georgiev 1688813476 +0300 (no tests) updated jsvm bindings Oxtree 9270003db867bd304278a5011a65fd3654737269 parent 24bb9223d2b9c1f3f262cf46f23335aaeefaaafd author Gani Georgiev 1688813460 +0300 committer Gani Georgiev 1688813460 +0300 added cron.Total method q9Lux%tree a89d28126ed5043c83ecf1926ab4ff291cac5c44 parent eb71a6d1bd86f2b5b2a2cd6bd3b0dc3b02a630e4 parent 50b666d71a3fc49159bdac6a85edca0bb764d030 author Gani Georgiev 1688675917 +0300 committer Gani Georgiev 1688675917 +0300 synced with master `Zox;nC!@ўUL"+1z^]d)-ڙJZXT`Z`%ĝv t4Őt6ZW&k2B8OXÕF+} ۇ?[Ni (uƣ/ROu-BPk cqy=C_(6AF4ۣZ=xYCx;j0{b e`%XB "iFZ-'"7H/ޘAꀉ&1') N;sBgp@ 88QѲNF*W k-~5?|u.ZB 1 u+?&Y0Y񍸏pfw\jlu\!F?o=Z}k+"Z㉉X>Pzб1`ϐF}~@-_Zڕx%tree 0126754241443ffc66e3b98a6a06c6296711855d parent 22f0319fb79a5ba6945152a0a5d6498ed9feb5b9 parent 45ebadb558d9a7899a3d77d1c0a04f5139b39376 author Gani Georgiev 1688406789 +0300 committer Gani Georgiev 1688406789 +0300 synced with master ̚Wxtree 91d695476c2df927e1b9dc06e8bf1dd581ac97d4 parent 44e8a56277b605fbb91f71082d9174da8646c21c author Gani Georgiev 1688402800 +0300 committer Gani Georgiev 1688402800 +0300 fixed changelog typo KřxAn Eb"c9ACU{h{_zo dVA8yND&o$A6-A=$:[ɉbz5礸kt{ J2>ux~}9Nod|vgkE[հ{n O* \bóf TgZHߚSZxtree dd9fbe69ed41505b8c92b00624f169bc431d52a8 parent 38e83cda98d26bfb197cee4172c0f552f40c185a author Gani Georgiev 1688143560 +0300 committer Gani Georgiev 1688143560 +0300 [#2818] fixed text field regex pattern example oYT͗x̱j0]Oqб`$KB)2@;gd+8Ju!/7ڦ 4zUw4400AmC" (a no'o[FǃL/Kb$/%%" ד AEZO-ܥ$vVmxN0 @ ߁4kHqIMkRO8YYzkaFzg{g'؎Bئ'(!Ru+NryVTJ,ZD S^ 0E8p.!'=^zCǷ= Qqkķ !#(j%"e~xY`gfXxKn0C: ".h.0#deJܾ$ !DIgf" Ć)NH8vK>Q1aR\ppROR|;Z0g1T"');cBn|%=u\,~0`J `xMj!?m@9ZBZIAvE| UNs}`0)K6IQ*cߜe)ݥI٠"[pܲ<JQ*,?,'ׯ[;QޤRsuG{KhTۅ1k+4٩aDZzY&~e]ݛxMj0 9n?(9#+הAW}; $쭜/kx tree f8d23671b304089be4011c40f5c5a2f08f84a7b8 parent 0251e8235a70d8657e06833dfa2cf6a4d52176bf author Gani Georgiev 1687810657 +0300 committer Gani Georgiev 1687810657 +0300 enabled baseBinds for the goja migrations "Rx%tree 9d4efcc22d39751ae2071f2be7bc7eac02295a9c parent e6188ea1dfab3d2ec6ce478f45c38374d33be5fb parent 1f4a9b73aee754d46a4ae661a1bd68c83e60b12f author Gani Georgiev 1687792909 +0300 committer Gani Georgiev 1687792909 +0300 synced with master JZΜxtree 0f0c269e5393e67be2ad30d5cad97662a82583ed parent dd81803d8159d36602314b76ab0940dc739ed4f6 author Gani Georgiev 1687773855 +0300 committer Gani Georgiev 1687773855 +0300 updated binder test cases TyMoxtree 765bbf5c9f7a71a17b10c961b4c9105afb4e89f2 parent 168aea001811944fab076a75c7719ab01a1d5ce9 author Gani Georgiev 1687773195 +0300 committer Gani Georgiev 1687773195 +0300 added eager empty string check 4Ox tree d0041322974b1562271ce1d9d410976d05376e17 parent 82749e2c1caf10d731143f7778b7e3afe43ef0c2 author Gani Georgiev 1687773021 +0300 committer Gani Georgiev 1687773021 +0300 updated ui/dist Hx tree 4debe4348a1051706d825baea44584da36fbee4b parent 79c69956d24a5a80d8516fcd68f9d52f36ae2d15 author Gani Georgiev 1687772876 +0300 committer Gani Georgiev 1687772876 +0300 added missing array value normalization ZSݒx tree 9cd4b23d6cff6b3a9504f7c3c8efd0ebebeaced8 parent 002b62edb9ffa246f510a82b7cd20eb5b4494b50 author Gani Georgiev 1687772654 +0300 committer Gani Georgiev 1687772654 +0300 updated go deps 3{Kڝxtree be12ad259c604d12adb2d1a204ce4febb2739b85 parent fe53acbdd4ca33cd1e1b3afbb0be83fc818d4e77 author Gani Georgiev 1687772573 +0300 committer Gani Georgiev 1687772573 +0300 added negative number test y P7x tree 3e46aadb3c848b4dcf69d547011812952daee4c5 parent e7c92cb67e5495891548230face63cd6ac72af1c author Gani Georgiev 1687772035 +0300 committer Gani Georgiev 1687772035 +0300 updated ui/dist @Jxj0zKӕ["֮C!o 0ӛdBL>4&r@(hRLM^c3PNl'ÁXcGy+p-En <-^*zWpk]P,\$C=^ƍ>ﭾe ÍC -;U7x tree bb756d232d73050c87f4129c66ca328189765859 parent e90ad6af7347525a42a17d28726ac998cca200dd author Gani Georgiev 1687766634 +0300 committer Gani Georgiev 1687766634 +0300 updated readme note JxKj0E^6d}tPȤxe>FQ tx;:8dZ+ntF 1ƴ(oP6TH â [֪ /Y4yvrX[7j=&k<_ ||.cӱ4_bekXN4V@(Dԓ8` T#l-տ/ 1687548338 +0300 committer Gani Georgiev 1687548365 +0300 updated go deps nIxAn!bYXX(9X~, )Z0ȱKRtfe dH0u֑cԹ $=b^ɹIlӆ>*zpVg/x)]x_8/VD5QE o  vCzmfqlPȝQϥAAxzZ^xAj0E:Ŭ[0#ɕldsgF ׯ Aw=WUVgY<;L%L] HLS3;8l 7-uz׺Q~ \Oa;zDs-0U o;;p[Ov9+:r]tm\#x tree f8605a6b063aa39a7b19d643b7e6048d2a1ace20 parent 96ba157871a64d115bc506a1261848bff96270ad author Gani Georgiev 1687518953 +0300 committer Gani Georgiev 1687518953 +0300 updated changelog JmxOK1<$'(z&xx{b~zzqf72CVƤI: %4*d-1iֱ8c嵁& CBO^S4.à |oo G.u|nwKe9`#)EwBhg+  1687516693 +0300 committer Gani Georgiev 1687516693 +0300 add @todo note to the RequestData struct [ QxAN!Ev.L&U4 L9G 4:ۉ?'Ђ ɊMhx)9q%a'i4䯴 -h):N1+b>>­EEpv 9bɠ :ZL!?$B PK7:~07{{PC]_'6{]xtree f08b45b1f852d48e6b3a44f86f0df78c893a84cc parent 48f3537415dc594ec727178b91088e42c8232ffb author Gani Georgiev 1687460079 +0300 committer Gani Georgiev 1687460079 +0300 use inflector.UcFirst instead of strings.Title %#UixMj!ZR! YfCS"7=Ǜ"L U@ڣ#Pi팕V&nW ILxA*ȰVFܭȑQs>onG.#W_K Y5*Dl-s?.O|4_KQa %\k-v~z!~VxAn E9Fp R5ꢚY!p2H$D@fۗHAw53GBHv侷f2FzgeS Y5)'l(W< R9iMGG} w9% >/_ZV z9X‡PBtVNjpsȥB}2|lH#́JjkfpQ"Q9)?h\R|t0fxtree d55c377d4ffeaefed872c26b7edd7fbd743e39ed parent 7d11e467fc7dfb829a83f4e55c390e7566c06f90 author Gani Georgiev 1687373173 +0300 committer Gani Georgiev 1687373173 +0300 bind hooksWatch flag ]M:xtree 4d1190eb8c036abc39d476c4b4ba3e1fdf60b128 parent 12e609c3de178eca6f97b70b46dca1246c72bcd2 author Gani Georgiev 1687369243 +0300 committer Gani Georgiev 1687369243 +0300 updated jsvm generated types #Oxj0D{}!KdC+L/XVuS70ҙD)s@gCDّq!uΛ@ Kֳے1)ŏ~L3]Z3n 7ur7]8caE1[F RG}:q{vlӝ`3vA.L?YFexj!~ECvftBmi]ê>>?9VQTo"&Z6d Ҷ:6ԍ쑽EǣSï9]O[͟vu<]OZas]PMr}"%*|*{*8A!F oAZx1N1{b{h.@J].&犈rU|v.-Jk/KITB%\/޵OP)dtEL>ڒ ,b 5 ;cpcM\<֍"Qh9  s 1687291071 +0300 committer Gani Georgiev 1687291071 +0300 adde json map Get and Set helpers bOx tree 46e8615e3f5d2666a3d8764a86606aaa00b44d9f parent 44677a47906a1254573f4d20db05bd1b640cc963 author Gani Georgiev 1687240442 +0300 committer Gani Georgiev 1687240442 +0300 added jsvm typings and docs generation Qx tree e781081873e9318d1c95f716fb091a2de11fb094 parent 93936bcdb14e8c4605987f91e504796bee977ad3 author Gani Georgiev 1687200345 +0300 committer Gani Georgiev 1687200345 +0300 updated code comments and added some notes RS#x5tree 50e45336aa44bc277342cf85d7e90c1f5ce9ae0c parent c0a48f458c1b658b4ef673223a1c61174027811e parent 98290810ce2d35b23dc939391f652a936e68bbce author Gani Georgiev 1686916132 +0300 committer Gani Georgiev 1686916132 +0300 Merge branch 'master' into develop ށ]fx tree ece023defa857b980cd47424ed5782d094c4c7fa parent 24eb5b2c79b27e626f375ca44b14f6ebc9358e84 author Gani Georgiev 1686916054 +0300 committer Gani Georgiev 1686916054 +0300 updated changelog K{x$tree f34ce070062a44a248c3cadb653538bcbd0c2367 parent 4d8dddb05e658b0eef817f961134e13e79220e0c author Sven-Kristjan Kompus <63632594+svekko@users.noreply.github.com> 1686915785 +0300 committer GitHub 1686915785 +0300 [#2726] removed unnecessary Dao().TotalAdmins() call ݉YxIn ＢF0*EQnnc41X|?>9VIU2a),6,w칸d"C;1hԎɔG!$219}&W,wc{'Y{Vnؾnel`|I#[,1A€y2P;^pX~VP&^!cy~1XrxMj0>@0,itC.Xu\kEw GYy=[=7$ER11ZyhXy҄VI񽭹Syu9yyُ%r>w2VYR'TݑКA }Ʃ/(C&h@|hp5^ p 9/'± M@˿{RJYj VkxKN0 9HOq#!uD*43*8,gX6w" CJscKY<-d̈́i#jT+~ ~̏>GQ>\x+^ׯ.Eb沭ΩXǙyjgyK]`(f9Ux tree 06c3f0b835a68c80685dd5da91b215b967c23a19 parent 00af9c88e9e0c97a317a3978e0dca3fc584b14e3 author Gani Georgiev 1686737601 +0300 committer Gani Georgiev 1686737601 +0300 [#2271] added dao.CanAccessRecord() helper Rx%tree 65300b3288ed3dc4e48cb71c1f7e1acc5e8527a8 parent 26b9cc93106e33773d0b25343c7f9c8783bf5c71 parent 4d8dddb05e658b0eef817f961134e13e79220e0c author Gani Georgiev 1686429789 +0300 committer Gani Georgiev 1686429789 +0300 synced with master Xєx tree dbec37514f11654ba672ce79abf1d744703846b2 parent 025669b755fe627f0c878ca97e00670339a6d679 author Gani Georgiev 1686429272 +0300 committer Gani Georgiev 1686429272 +0300 updated changelog Jx tree a5f1ede1d7a6533b6d34754a54f00fcd7fe112f6 parent 0822a5a8a8d7eca3ef871578de6d971fd4eb7d3c author Gani Georgiev 1686429161 +0300 committer Gani Georgiev 1686429161 +0300 updated ui/dist fKx tree 4a7ea58e48b9cec2916c589db3fa86f2c840a2a8 parent 6af749d36150e94bbd6a7c0c7921d5b42d98039c author Simon Loir 1686429032 +0200 committer GitHub 1686429032 +0300 [#2681] fixed collection index column sort normalization uSx%tree 2390d49b6c817b84d2540ab0b5d9217b09e05dd4 parent 09ad9eac541b848ec96ed26090e7002ee75bd06e parent 6af749d36150e94bbd6a7c0c7921d5b42d98039c author Gani Georgiev 1686306818 +0300 committer Gani Georgiev 1686306818 +0300 synced with master Xx;j1@^xeLct^@V$=M#ih 3EvABO/g^\*{aQX)+٩IXcK8)Aml *凾oZxtree f9b885c0bfc8367a6789d24e28bc3073a2e4ac0f parent f16e329ba638d4ecef715b56015249a7c395f264 author Gani Georgiev 1686305254 +0300 committer Gani Georgiev 1686305254 +0300 added default initial -created sort ĿQ:xJ1 K&N"#C'36dd~x*ޘ!ɞ4NĤQ@3]Ι!:S㵃qަI㐉 a%?h5*pwxO|z-FڡIpVkuEz/lx,ۓa/AJ+uV+}xM_T$Zx9!s^ѹ%ɲ6;vA¬6pL^'08fD4\UD4MHI#.6Xq >EO-kpW;>FMEpɇJe?sW>zNhQkSPJ{gy pw9ҁ/ޤF-uW xtree 9a3cd04f5ead334c24cbffe1cefbcaab6253dfec parent cd9ca8474410767f224830593b0c29ff7cb87656 author Gani Georgiev 1686237360 +0300 committer Gani Georgiev 1686237360 +0300 fixed apis.NewUnauthorizedError test NSxtree 03c1ba1a05b0b8d11342c3dc4f2450490fc205ba parent a065c35e83ee6dff402ce9d345523d5813b60ead author Gani Georgiev 1686237241 +0300 committer Gani Georgiev 1686237241 +0300 updated broken tests LxKn FKQݜ M28 ˪W1 j`D#ߑdЛN} f1,EyIidv3ֻm],-qO \ڑޏ?:jD1$D>gr1dHyLPsߩ'_S g)]kiC^x%tree e4e553b12518769c667ff677a76047bad3968f21 parent 49c38fbd4284c97fd9ded7238aca5390e431017e parent bb195c80437ae32109ee768e302776b2c3c1ac7d author Gani Georgiev 1685724833 +0300 committer Gani Georgiev 1685724833 +0300 synced with master 9#X<x tree 07309269728c47fa0188895425a0768b4cada69a parent 1da3b0e7c18b4a2b19eb544174ccc6d3d7872abb author Gani Georgiev 1685724073 +0300 committer Gani Georgiev 1685724073 +0300 updated npm deps and generated ui/dist =YR x%tree 385ebd6c0373308eeb728ee16f602ddc313aaba8 parent fa40025d6cb686076946f87522360f49e7977000 parent 1da3b0e7c18b4a2b19eb544174ccc6d3d7872abb author Gani Georgiev 1685723916 +0300 committer Gani Georgiev 1685723916 +0300 synced with master Xx tree e20c0e52b5cc91f732b959297101a55caeb564e6 parent 6460b66c44f0268c77c2543810a1451571d1546d author Gani Georgiev 1685723600 +0300 committer Gani Georgiev 1685723600 +0300 updated changelog 4Ifx tree 384fda7a8f63c8643eda7f67a9b2668a1f21cced parent 94884938954f00e4559f03f196efd22079482257 author Gani Georgiev 1685723546 +0300 committer Gani Georgiev 1685723546 +0300 bumped app version /&Jx tree c650240e2cf017d6dc2e79d86ba5757216699fbf parent d9c2d6a7a15896a469b489f9f58cb3cb5f040ad4 author Gani Georgiev 1685723023 +0300 committer Gani Georgiev 1685723023 +0300 updated changelog QKxtree 08d0b039305d5e2c9cc88e9c1cedb22cb0dc2167 parent cf745115b057ef7ee95b61e19f1a919be8385484 author Gani Georgiev 1685623358 +0300 committer Gani Georgiev 1685623358 +0300 added dao.WithoutHooks() helper Ox tree 6a900680006594ceda6d03d101337b334f34ce36 parent 3f010fa7a006a23075fd916061d38f64c676b86a author Gani Georgiev 1685559061 +0300 committer Gani Georgiev 1685559061 +0300 updated changelog 'BIxtree db8f5f7a0c38c7b82b0a829cc5bfb4d42c1f990b parent ea7f77cc91e9578c894f12ade120418ad37ae918 author Gani Georgiev 1685522836 +0300 committer Gani Georgiev 1685522956 +0300 [#2309] added query by filter record helpers ]Tx5tree 06839ef4818748ef9187f17493d6b458917a040d parent e82cb82d85712012c20ca5451140af981b3bf0fd parent 94884938954f00e4559f03f196efd22079482257 author Gani Georgiev 1685470959 +0300 committer Gani Georgiev 1685470959 +0300 Merge branch 'master' into develop U)[˖xAJ1E9EKTw{@ą0p'.ҩ2NtFF.෪ (IYLʴ:JJêhNьvx#ud!DA(6kRs~C8?|O!,/qD4n5G¼#QbɐmKmy G97}IoQ\&xAn! EJx`3APQ%UnН?U\`J툸1oF1d7ZU_: 8IC^Gx'덉n:,Y~L</<*r~q~]~7h1'T?ЅUh"2JG"S3<3_Aa}xtree ba3fe89aadcd87733723002eeb6f37ecfcffa616 parent 4c60cba4447afc2a798e5bc22d09dab548733851 author Gani Georgiev 1685386207 +0300 committer Gani Georgiev 1685386207 +0300 check after hook errors INx5tree 1c0b2d44803a91b0a9c6ad482162010823f83f61 parent 9cf9654f9ae91d14913e5f6ff1b7a7ca67a21cb6 parent 2e5d05270184681362d215841d5007a92ce13d1c author Gani Georgiev 1685368876 +0300 committer Gani Georgiev 1685368876 +0300 Merge branch 'master' into develop HT\՚x1nC!DmREb(삑D>Ah 䒾h%)-k-\R 1%)H$>$b2PH5 Fr(pNn>om՟F.ϼ_;= ؋2 B (s?&ǽ+N=?,PNx{@ZyxhYBen^dxtree 0c41890b1621bbd2d6ffe0333505d88aef8e9984 parent 50b03e92627907ade6452fecb03d5a1ccaa5696f author Gani Georgiev 1685368670 +0300 committer Gani Georgiev 1685368670 +0300 added new core.ServeEvent fields PKxKn! ?)9zA,L|SE#%6"zƫ,vISmr^s A]DM ga]$EG#%WEckntVI Kyo9Ԏ.X4_hմGC>O8N(b0t9KYϲˤR`NɻtXvx%tree bdd9cbe48a542e45e0764407e9052ac783001f30 parent 1eecf9208be7631f0f0282f4d49608dacf56d8bc parent 01abf211f62d13acd414e6db1c31cd9bddbec892 author Gani Georgiev 1685307439 +0300 committer Gani Georgiev 1685307439 +0300 synced with master |pYڞxtree 4dde7566380a30c04dc3da5963e77d7d256491e6 parent e36f7fdb42ac59b34e6f43b8ad906ecaf0fccdb4 author Gani Georgiev 1685300448 +0300 committer Gani Georgiev 1685300448 +0300 keep both original file and fallback errors (UIxKj0D>ECF#Y?!9DȢEfǁ ރޘAiLY,͓dbOS6:u\7!& "vE3/{nn_KkFEe8Zz\ oOچH#3֚0@ߡ/ \~vF}rʿ4`HxMC!av9G>!`VU_Q53dS6A%#%4oQeDk-^8e*J֛ƙLDhf%D'K!sx6xpnuO==wP.-\Rhs?&23<{K0<[?ap#/Ux%tree 1859e4724181216f27ce6ee774770980f7a24034 parent 64cd8ff1d2420f59b099cf0eb16e90f6fa893f3a parent cbc2b7d9fd6f12fd7387e3d2b4a8ff4355496693 author Gani Georgiev 1685185954 +0300 committer Gani Georgiev 1685185954 +0300 synced with master OXxtree 26485b1682acaf9b4be02f55c6442b3975160e0a parent 7aeb0f3a068d2778294a5ff1e9a05d6c4982a6e4 author Gani Georgiev 1685169441 +0300 committer Gani Georgiev 1685169441 +0300 updated nocgo busy_timeout pragma Pxtree d927e3dd6602c71edbb21f645559f3dd0d6b7d8b parent a8650e523d6e5677104173217e6c8070c5fc2abd author Gani Georgiev 1685168658 +0300 committer Gani Georgiev 1685168658 +0300 registered custom cgo sqlite driver Qՙxtree 35d8baab0be6c3f8725bb2f24d8f090c6f9b936b parent 605d8caccba39cbf114fdff9ca374ec6e1c775ec author Gani Georgiev 1685167658 +0300 committer Gani Georgiev 1685167658 +0300 return conn.Exec error 9|Nxj0E{}@G!lj! )FH+%nQ?Hym3DyL2NC@nCPNl)E$Cҫ80s fAvT2\/)[(PWPvDe0(xFJ[$F' ^`HyoPjϹ$}_s_~7Z k_2[˕x5tree 5932d6733995eda632c8db1f426b45784e0cf148 parent 3b9d4455f96b54c8d533723c36c3f1b713eb63ec parent e6afc2112a87f5a27375500b1f886a5ca77d53ee author Gani Georgiev 1685037645 +0300 committer Gani Georgiev 1685037645 +0300 Merge branch 'master' into develop ]xPJ1S|QX;"xot8?[]"DŽ$$ reݛt4s֪ZМx";u!v߷)F}g׍d:b݆O* n9OηQ1k*Tv"GDzu0Nѹ)>a]J.%|Wd 1684960291 +0300 committer Gani Georgiev 1684960291 +0300 synced with master Yx=n @S2`@V|)c( 09~\R~x3!C}͆ѠBmZܨs ɣ_%(1`g8T&}KPͰp)7 1684915649 +0300 committer Gani Georgiev 1684915649 +0300 synced with master $Xx tree 84ce9cc344929bd7e13e83cc8a6326e3f9bdc2c3 parent 8d5992565511f2b7436d61e0c7ab6286b9080ddd author Gani Georgiev 1684910063 +0300 committer Gani Georgiev 1684910063 +0300 updated changelog >`Jۑxtree 0310d4421cfe3eb2d26bc04561d2a24d72d52c2c parent 32724e39964644eda3ddf34a9ce82aae1ee44462 author Gani Georgiev 1684909539 +0300 committer Gani Georgiev 1684909546 +0300 fixed missing view id field error message typo CjUxj0E. A˒ 1684872956 +0300 committer Gani Georgiev 1684872956 +0300 updated compareVersions tests P xj0zCdKBI!Kvbr o_ ʜf֞H`~Ђ+-k;z'[l@`[CPa '*XfrM.vB)Ǒp6Ϟd[ Biz8g5RUHZlv ’}Dʌpx' ΩϻewpVk3r{4q,/ 1684868183 +0300 committer Gani Georgiev 1684868183 +0300 Merge branch 'master' into develop P` xAJ1E9EKIw2Dt5p'.TUO0ݑLo ͇y.yR@ɘ<=)a9QH3v8u0,e8' %ƥu8ǽYZ_q=pZybSn> {֚ vߡn R8~U铨J/W!X[x tree 5b3226f15ed7ada68c140c48f6aa79ddbe8b92b4 parent 484f5793e1b417b8cc30245ea3bd409add1987eb author Gani Georgiev 1684865302 +0300 committer Gani Georgiev 1684865302 +0300 fixed formatting mKMxJ0D .4MC .ŤmMHS~QWS23gl5JZ),*e dssCX{Q}kx^7loo\0DH-֘ q2$\>;~^W_ۀv]^uSNcx%tree f3a48585c13f9917fe5ca42de708c320a757530d parent 368a26b984f11e3f834913bd7cfca8db21e3994b parent 51e566ff17c2e94f7aa40b73df1906aabf61d41e author Gani Georgiev 1684831015 +0300 committer Gani Georgiev 1684831015 +0300 synced with master OYxtree f3a48585c13f9917fe5ca42de708c320a757530d parent 6f11366d4f876514f0697612d8fb670e2b4f118e author Gani Georgiev 1684830946 +0300 committer Gani Georgiev 1684830954 +0300 improved update cmd version check _Oxtree d952a58b530e7e90125ac0e4c8612db92ab9afbb parent 6f11366d4f876514f0697612d8fb670e2b4f118e author Gani Georgiev 1684828014 +0300 committer Gani Georgiev 1684828014 +0300 added version check todo Lx tree 96a28f4ea1736bba854ba5b8c8ab81b4a2025f98 parent 8f19f23aad38dd3f37af797fd62e613a5d5b0a7b author Gani Georgiev 1684827151 +0300 committer Gani Georgiev 1684827151 +0300 updated changelog =KÛxMjC!߯8e!'U],z{5m1%?0/fF' N)g>yj& YBԆ傝3[B[(0"Lj%d2 ~ስZυ~%Oyw,! gοe $gHJqFh;fz' m {/,7\xJ1E|K$Xha)'I $L||)˵`/أ;$ㄓpYGUnQ]S1Pl |RčN*!(}thX \ nSûcN ̪WaplڽAH+hPGgG.3)<V}׭!F^_~}]fx=N0F{b$JBPmx 1684731723 +0300 committer Gani Georgiev 1684731723 +0300 updated changelog ԌKxtree 77a112f76f2584943bf6ba67ecea87e3dd3d341b parent f3bd30b7476574477d7b943805d5cf4ec1f55e0b author Gani Georgiev 1684731524 +0300 committer Gani Georgiev 1684731524 +0300 updated app.RestoreBackup() godoc 5hPxtree a687ee859484d90262f2a60022beea4270aedae2 parent 0a6ed9589d123c7b4152ddf6053df499adec0210 author David Schissler <3968727+dschissler@users.noreply.github.com> 1684731042 +0300 committer GitHub 1684731042 +0300 [#2526] fixed typo in BackupCreatePanel.svelte WBXxtree f0582dde7b9cb01018c6c74c9a90ba2de25036df parent 5159489cd21a54e2de7c6df72ab2c5fb7c48c59a author Kunal Singh 1684730902 +0530 committer GitHub 1684730902 +0300 [#2527] removed unnecessary slice check >Lڐxtree 3e86c4ede4b6a06a464650acacda74c66407f3d9 parent 708acaf8dbdde87615f030e564dbd41f50f81bb0 author Gani Georgiev 1684692380 +0300 committer Gani Georgiev 1684692380 +0300 updated changelog and ui/dist XPxtree bf7680e05da5ac3a82b76693fa51eb761e796972 parent e7b27c100062cc771bf4a340ce6a33f3ca7adec9 author Frangu Madalin <54155911+xFrann@users.noreply.github.com> 1684692024 +0300 committer GitHub 1684692024 +0300 [#2523] fixed realtime dart api preview example ~VxjD!E{@ʁoB )|^L"r &Z<ջIAk jJn9ag\ɤ$$W:z!%1>W#|k^?|͕ހi+S*(%˶2'#A>^b' Wv52h|Zg93!(5YsxK0D:Ed!#dX c`v%^l@E <#0Y 1684655733 +0300 committer Gani Georgiev 1684655733 +0300 updated deps t;H|xtree 1d68cb4a09868d4664e6f5373ae97d5da8193d7b parent 95724a4dc78ee67e241f5a4e0fce56c6bb044c16 author Gani Georgiev 1684615903 +0300 committer Gani Georgiev 1684615984 +0300 updated the verification api preview example UixM19E$&0;QIUڀmttۛp=x Q|4RfDu I9\>F ;(K,m5/9"9[e/9.Rbr[O|)g4ȹEtc׊G! JxryW ƕ [W?@V$xtree 947c18da00d7eff18b0a97244c1a4d58244f0872 parent 3d6caeb0df8fb2c883c92b4592aa5d575e247ac6 author Gani Georgiev 1684493338 +0300 committer Gani Georgiev 1684493338 +0300 updated page sidebar width styles TQ0x;j0{b!ehFܺP.Y qII!:`Z,k&޳a DL&hߵVrK.np(p+6i9A;=iFUmX|GHqM %A .[ZwQ/nMW6x tree bce99016bc5b74bb0b1678d99fa396c1a0f2e341 parent 6897d0fa99192ae827b98629e110561d21b8e4ba author Gani Georgiev 1684357194 +0300 committer Gani Georgiev 1684357194 +0300 updated npm deps ҫJ#xA!El0S`62!!xFg wzz ]an[q—^V3mE1(FCʙ!;rgh*QWj ר`vWxKn0C> rEw99l+'A| x[P+4C*`6V8M+y n& &dĥk1᥏>莽]X|reeC[/o4jXc3ݚb0iU#7N*}]h;%cnagj{w|,U黱>extree 321af2609f0b70f187260ecc35a392372fad2a25 parent 1420cc8b2272aa73373cc2214e97ef80ac3eb1f8 author Gani Georgiev 1684354665 +0300 committer Gani Georgiev 1684354665 +0300 use the filenames instead of indexes on delete 9TxKj0D:ECRK6 !rB<6G zVjoƫ@aiO.1Nk=Z"%1ɛ}⎉K8X(ٞ[[3 1684347252 +0300 committer Gani Georgiev 1684347252 +0300 added experimental update command (P%x tree 0d45a84fbe22f3aeb722adf8191be6b89ac829cd parent 5d9fa97ade6a28a6dce8a9e6ff90b9e20d24f1e8 author Gani Georgiev 1684337955 +0300 committer Gani Georgiev 1684337955 +0300 removed the legacy temp upgrade command TxMj0: A?(cqEe[8rInz.x@L)p-2ZD 8c01g3v2wNj覜9e/kw-E$7\ x¿9xk^Kޖ+ .L1L;C1Uo^]_ xtree cde628bed35d5457b0cafc49da3f97585ceac9a5 parent d3858275e9dbadec47ff46c6fa66f7a344a4666c author Gani Georgiev 1684005799 +0300 committer Gani Georgiev 1684005799 +0300 [#2466] added accept file field attr >Qޞxtree aca49fd3e962424ad29a7b763f438603127f6fcf parent 5bd60a20c620d102ceacf0cf1c31e5e4a341b14f author Gani Georgiev 1684005014 +0300 committer Gani Georgiev 1684005162 +0300 added backup apis and tests Nxtree 15ff85061eacec2263cf2a87b81f9ef6b582d76d parent 84c72a5792c9797fdabe2cf197c0e2e80b639df1 author Gani Georgiev 1683660991 +0300 committer Gani Georgiev 1683661000 +0300 added basic cron util LxAj0 E9Rd"PJwsŒSӉle@{.k bE"3z%A08Ԥ(İ0ѠÔ=ݒ a0E V T2ܥ5~5,iv6733v˪p9JWW faPvX(~;ОGJ>8"6\U>|Q0>zgx%tree 9bba61e7f48a6cd647669bcb26a887faeb4f21f2 parent 0e6dec7d402658bc4f0c400d9d6380c7cee5463e parent 153876e4a8fcbb5a140eda0fe5ebe7ba805892bc author Gani Georgiev 1683265761 +0300 committer Gani Georgiev 1683265761 +0300 synced with master GUZxtree 4b63638e1908100c1d98b37579deaab3748b22f2 parent df3d09e41b6fc48747cf93f4302f755eb7e55ba9 author Gani Georgiev 1683255168 +0300 committer Gani Georgiev 1683255168 +0300 updated changelog and ui/dist MNxAj!E `k:0!RK`]\?.r,_,1JJRv(p)8pP֙h/!41[6LS8*|~ cg1*7Kڐt7X\fhxVk5" bVc?IcnχI" ~Xv@ᣫ_T\ǕxN0{H6BtW{X'@9#!avEd}pJ$ !jqiټCR0|gk嚙'\Z+>ܸUI^ˉe}}4ET򏅚r&>ezn z,Cčv zgQZЕx%tree 02bdda3a05a2a81d057dd679652bc1d0257c2c7d parent acf5b39871f974d5e24bf4b30ef7996869fc64a5 parent d362b277f8bea295cdace61535fdee8cbf2666ca author Gani Georgiev 1683114730 +0300 committer Gani Georgiev 1683114730 +0300 synced with master {Z#xtree 63c01b9c5acb8cf7bbb91284fb15c7e0d2534e58 parent dee9b021ab879f6d2ab6397aafeaaf8f8d776e85 author Gani Georgiev 1683113839 +0300 committer Gani Georgiev 1683113839 +0300 [#2410] Fixed editor field fullscreen z-index U`x=n0 @]^ h"s"% AC.M@#zO44ǠjnuHޑ0d1; 3 1682968037 +0300 committer Gani Georgiev 1682968037 +0300 synced with master agZ˚x9n0{b F:wÊTHAH9S&P>p2jdkdwuQnd0O,#y1d9iQIѽW \>_Fe=]`M}jح.Nm u1ua=?QpTC.2絤^Xxtree 77e93bd58a89b53159f22205139cbaf1a9a67f28 parent 402f8fefbdf24cb5542de36686d013e078746fb8 author Gani Georgiev 1682688158 +0300 committer Gani Georgiev 1682688158 +0300 updated js sdk 5Icx tree 34eeb27633d1b85cbd099b4c655d6b82c900bf43 parent bca0b248cb7e6be007d7fe0bdf7d8bca6690ab5b author Gani Georgiev 1682686526 +0300 committer Gani Georgiev 1682686526 +0300 temporary change the base backend env url Tx tree d27d4c5a4930a903d430365dbe0aee5802ad9f6b parent 3175138cdd8a9e76d5593148de6c81b88153f2d7 author Gani Georgiev 1682686068 +0300 committer Gani Georgiev 1682686068 +0300 updated ui/dist |IҘxtree f63d3b389031a24252f487e88aac0dbc9585885e parent dc4dec12d0230221d07442c5450ee18c920eded7 author Gani Georgiev 1682618029 +0300 committer Gani Georgiev 1682618029 +0300 fixed changelog typos pLxj0DPvjk!_u]2ҿSffUT2 esD:(226;g*X13&29ten^[~xO|z)A7~&/8 6C s o^>ۏ9CCMp/ uQp! [Z{U]6\ Tb vM^zdN/lxj1{=B Fҁ CL!nNY6@ 338Y2Qs@ZE Ȟƨ;bK`Oʺ,0Hq$S0$#ޖ/δ9sO+r+Rtwͭ?I~#x+S©3>:S!>-JXvf[Sx1n {bH_ŀ(J"m58HG"7H9oft0=cE+#nAYHAF]ʀMQ2hQS=zkfiÝJԾ'A)B=^@[?/2PZ4#10w)]k?@Ӄ|k{~Zʧv;A\"xKjD!E箢BYC=}m,?.\8kA 6Q; )R"'] B*ycT=V+nB!9u xUxPGo<6ގ?:Z[zi5ZWm[]`q5  !"n^I@?c_[I-BD -ZxA yEc,{wv&Yߏ=VQTo"V^ yA/>FdRR8sEMF\Jq]0*)ll4XADϾw:3ܥ-|no~or٭jD4Pi#.XL, );4!g dx^L}}Pu HYʀ>U]xtree 09ebf94c863a9c1263e3ab48fccb82ec7e3aa480 parent cb099836f9f22432b6e057aa94eab812511a8839 author Gani Georgiev 1682521448 +0300 committer Gani Georgiev 1682521448 +0300 updated schema field options dropdown spacing >Uxtree 782c40676e0535da9b7a3c6461923363480ba2e6 parent e4ceb56dd79f4f91584c1f488960fe4b181850f5 author Gani Georgiev 1682507187 +0300 committer Gani Georgiev 1682507567 +0300 [#2318] updated schema fields ui ڗN)x5tree 63f030066af953d6a7bc6ad3cfdd74f8872f3cee parent 02a5e49b567efab4a1975d2941fc1886a7844ed8 parent b7001a3d0a51537506f00b962dd9435c7b0e543c author Gani Georgiev 1682439522 +0300 committer Gani Georgiev 1682439522 +0300 Merge branch 'master' into develop ^&x tree 967eec7001f115922ccb66a65799c4be88c144d0 parent ad13545d49233a41f47f2f33e50380d904e203db author Gani Georgiev 1682436687 +0300 committer Gani Georgiev 1682436687 +0300 updated go deps zIxj0zXIkG`GBCUBߠᛁa7fPمu19흡2Hdg$'Ch1)<&?ycS5Ezx (J W.mueu]bٿ@Z7iel{T`hQZ4A~fʍc^8k- זּu+}\>/G_x tree da5ebd27a38cecf9455be865cc44b7f289258704 parent 0618d8a8109f0f47e647517a1b273414de29425e author Gani Georgiev 1682435464 +0300 committer Gani Georgiev 1682435464 +0300 updated changelog JTxKj0D:E!$9n<0YG 48i4ƤQ$$ ;RV$qI8SZg W3\%ޗ z&4>9oiz S2t{? ڍr;[xd-ܭ^x%tree 53d34bca004387d035754fd7ccb66a25a2a2d974 parent 749a7057fd4220c2e5998d6888a3bfa48ca5038d parent 00d3540a90d92956dd15aa04aba0f191f90b456c author Gani Georgiev 1682415659 +0300 committer Gani Georgiev 1682415659 +0300 synced with master =X9xtree 99d2b9744ef3dc3bd77bec2aa56d879ad1b462e4 parent e968df05d4510e5c566deb68b6ed4d73db3cd7f3 author Gani Georgiev 1682412776 +0300 committer Gani Georgiev 1682412776 +0300 updated /api/oauth2-redirect error messages t+U’xAj0 E9AvāR, 1Mx s7F=>ү XgA2hey6!{Ey3y6Y0ZqJN ]eOtE.1^cKIZ/.ooF 1682341485 +0300 committer Gani Georgiev 1682341485 +0300 Merge branch 'master' into develop ]xMJ1F}Ncq77p#.*J ?CF.}_DI 1682331947 +0300 committer Gani Georgiev 1682331947 +0300 synced with master VdxJ1y .L2"R7齉gFcZBs < lHblw@ģ7+ c46h8iqDKnԑ"$^ [ lyֹ*}NtAk)[Su*ǛA|3|~y8n=}9_T4xAN!N 1682067200 +0300 committer Gani Georgiev 1682067200 +0300 synced with master iYx tree eadf4017f0e7160ca17f86e73fd6d1173cf02e4f parent a04ac3057bf59024087f07317ba40e70963ce9ec author Gani Georgiev 1682062201 +0300 committer Gani Georgiev 1682062201 +0300 updated go deps ~I̗xKn!DQ,`zH z=È,r,_T3(K!y譋shuT.."hU Zř}"(ZA?=7 ܸ/ׁ?֍veF+MNRnwB|?W ߯u>!8 i=3|ƭuVkz/T{VҕxAn E#!hݜ&A!=YO7UY]Ċ6}DViBR̛M> Y8n& i))b[mSk[}x[kݹn.3|G4KaH6L譾`S!ͣo ,{9*4Vxtree 58dc9a104a8502d03e34f385ffee10d025bfa69d parent 1a6efa7f29cec76b34aaa77e7758b47194d88148 author Gani Georgiev 1682026961 +0300 committer Gani Georgiev 1682026961 +0300 added editor loading placeholder mPĒx tree 9b67d5953bc9ce3d34595c082ca8291ecf449cd0 parent 3633c479c3f6da7a4552334978f5910be9d47963 author Gani Georgiev 1682024399 +0300 committer Gani Georgiev 1682024399 +0300 updated ui/dist 4IUxtree 8ec02e7ebd763c0163892997b3335b75f9fefa55 parent 4dd45a32486cd7f8a9a66fc2b58006e5022593f6 author Gani Georgiev 1682024141 +0300 committer Gani Georgiev 1682024150 +0300 removed tinymce autoresize transition *?Rx tree 1508a8d799c12833eb3e888656f75921c088599a parent 9c256781b96538c1149add8c3a80bab91e6e16d5 author Gani Georgiev 1682023551 +0300 committer Gani Georgiev 1682023551 +0300 updated go deps HÔxtree 5841d2ec51344126bb23d6e2d3dba6c0d94d6013 parent 1a91f1e7d854f0ed58abc1905791ca4c1aa7ce7b author Gani Georgiev 1682023188 +0300 committer Gani Georgiev 1682023188 +0300 added admin console command tests >BQx5tree 210d336809b718781a6c335df2f9783de23acd44 parent 693b3195981de939a217cfff2d371c5b337efbe1 parent 4dd45a32486cd7f8a9a66fc2b58006e5022593f6 author Gani Georgiev 1682014729 +0300 committer Gani Georgiev 1682014729 +0300 Merge branch 'master' into develop ]{x tree 5a6bd2fde3eae54e0c518679e898464df39ed41c parent 2e8305d6b0d1d66317cb3de9e3654cb5217cb868 author Gani Georgiev 1682001758 +0300 committer Gani Georgiev 1682001758 +0300 updated changelog iK;xAj0E:al# B.ƎU=~St{S'+), y#klt0Mnc(&Ibٺ,AgςI ^x/pږ/,o=/l\ֳ qp -y׭0[})4]Z9C g/~? xz(t R>Xxtree 0517f02b116f45ffedc6e284e293fa3450475596 parent fd8094c24fa51ad38eaa3efed62b75b7d89da2da author Gani Georgiev 1682000456 +0300 committer Gani Georgiev 1682000456 +0300 added admin console command Nx5tree 79ddf3630056cba62944df46772fb98a63448c3a parent 35c0a084bf2570e849c7dea167819639ed4ae66f parent 554568d99c9b69bcbc3a34dc8e00e69fdf7ac0bc author Gani Georgiev 1681997086 +0300 committer Gani Georgiev 1681997086 +0300 Merge branch 'master' into develop 6^͒xtree da71e32eab2bc4f973e7c5cd25c49b6c5913c82c parent 6b13758f3e8ede87a9698158a6a016734f31a32f author Gani Georgiev 1681994202 +0300 committer Gani Georgiev 1681994202 +0300 fixed rtl editor menu item typo 3Px tree 1af8671ac3a3affdc6345f9822e5f2afb12f8642 parent c728bfc51f6d88cd7414db64d9f160ed350c2a5c author Gani Georgiev 1681993929 +0300 committer Gani Georgiev 1681993982 +0300 [#2327] enabled rtl for the editor field 'RŕxMj0>A).rYV++ǯ@3 @XH^KyQ19eˀN-on8: z֋^28gXlBY(tCmk^ցoeƺl2E(!a;pB?DG|Ͻ/:ICS.#jظz>a\xj!D 9GgBm?"j|ANEţJ:3iN!yNEnnqLѨfMO 㶬v!XI8҈vÕWn=~[GTKhfT:ji-"^@zydg|pZ R*?ƽ&j|@< `њxtree ada3bd7b87d9ed2fa3a47032d7e61d51ad83d8cf parent 34a04c61d3eb95abb923935fc2cdd5dde3035bb7 author Gani Georgiev 1681956341 +0300 committer Gani Georgiev 1681956382 +0300 added apis.Serve helper :NWx%tree f7bda53962191456464893fe10ed84c086b85b48 parent 6451988641bd6ca3373c69f2bf91a8ccc43fecac parent 3f27c9b684574abce23b6f258eca2c3970302667 author Gani Georgiev 1681902546 +0300 committer Gani Georgiev 1681902546 +0300 synced with master [mXexKj0:E},Y0dsHꖦM'"7Ȳ^d-:Z|VckWsNIb(ѫW4Z*-U5zkVK$Kq!DyN`蜝>ȼy 1681790947 +0300 committer Gani Georgiev 1681790947 +0300 updated changelog Jx tree bdc7633c381a9d5e50c2714fbec6ca2c5787c437 parent 4d40a7841398b0e9430db4b752efad9ede96477d author Gani Georgiev 1681788721 +0300 committer Gani Georgiev 1681788721 +0300 updated ui/dist Jdxtree 936ca8a3287c90e7e54646362af79e4b6128aa17 parent a7ddf42f402053c0f5d61d8416da1d8c5bbe71cb author Gani Georgiev 1681788605 +0300 committer Gani Georgiev 1681788605 +0300 updated changelog and package.json c+Q/x tree 952e4922f713d3b7e5cc39c6fc261582328372fe parent 3e2487a3815d09ea1c980f569d1d1320fb20cb7e author Gani Georgiev 1681759361 +0300 committer Gani Georgiev 1681759361 +0300 fixed minor typos LJRx1n E{b(+c3HQn1E`9&}()/-l,dWeka brNQt*Sj6f)Z\zt֨QFS\–'[;5Uڙ<- '~sv!^Ԭ4=.V=Ҿ%!>\V_}]~Ɨ{ R ~)ڧ?^Px tree 10b8f163bad6488fc94a93d696b3254273af02ee parent 3d62aad19bab88a10e10e05b680c2d8d982c88bb author Gani Georgiev 1681754344 +0300 committer Gani Georgiev 1681754344 +0300 updated ui/dist -J>xtree 7f5f28cbce0962edd823adcca44e8f8269f91820 parent 51e5f933383d7ee90540f87fe6c683a32018eabf author Gani Georgiev 1681738406 +0300 committer Gani Georgiev 1681738406 +0300 updated cascade delete tooltip P*xA Ebbb#]1:c*$1X7ޠ>[ĥqt␰lС&xG^Tek@$Dx>ۖ$}8Y*Le9ny\cYY[h:[?&Ա35a(3=p/O)О@+eiyWY!xAn ~WZHQ۾c`6 !R~cJ]-C"?thmcHiZ"&gSG$3vӈ$M{End X2<% >_Zv=8ion(5v" In'4N̵pk.,A(.,,; 2~+SGs8hߘxtree 72dcf9fe304bc73a226e374cf43a6a61c04e9565 parent 91449f73d685e52bad3124a7af59e3a99cd35cb4 author Gani Georgiev 1681727321 +0300 committer Gani Georgiev 1681727321 +0300 updated protected files visualization Sxtree 1afa8855c9a1fdec74752964cac7d0a6101675a7 parent 9b26d25f3c7e4e0ba6811714e26411eec0193f11 author Gani Georgiev 1681724628 +0300 committer Gani Georgiev 1681724628 +0300 store unsaved record changes in local storage Tx tree 6263e24e0a908415a836a7327e3f5b79510a7936 parent 09877b2bea4a4df80dd5ef46c14441e51e37c9b6 author Gani Georgiev 1681559047 +0300 committer Gani Georgiev 1681559047 +0300 added eagerRequestDataCache middleware rQxtree 17666802c2fc1f1229ea98469eea3e760f45fbca parent b5d168868a2e82c08bbe268ae6626a2b1f08d6bf author Gani Georgiev 1681554462 +0300 committer Gani Georgiev 1681554462 +0300 renamed private to protected OnxKj1sFX`9ZOc";9~fdYUPC$̩3윽QLwl*hlMV4`u&wV鎽//XN,\EF{Z{7㌙N1<ٻҫ@)x}#/a)qF~_xKj0>E !d7hI-$ِG,o4"pFIIӦd|mιl7vybc v۲^U JIPQ:ӂ x0ܩtgx+/.;r'B LFbi׋|pT5d|P%8₃1~R_v^ɒx tree ebfd1b1892d7486fc39dfe42a9307326f3f59026 parent 073a44bdac5e7809fbf52674667adba17e406da3 author Gani Georgiev 1681509010 +0300 committer Gani Georgiev 1681509010 +0300 updated ui/dist J xM!F?r,Э6}d ·z7:3b GV GVZY\K:)7btP1Nᆵ[υ'e;SۯStx8I-v/c qg=TKq)(љZlfd\xAj0E>˲F2]1QK2׋ tyo >Wڲ]:hg l<]*r#el2F0ٳ2Ӏ0c0y:yGtR׈/~Iv%bLLtuwM5 %5:>N ipPkKP{/=iB7sBp`.xtree 61c16b124f90f5ec67791d694d9369e79656f187 parent 390ed666ccce484f412983def5128ddd9e9854cb author Gani Georgiev 1681475304 +0300 committer Gani Georgiev 1681475304 +0300 updated overlay panel autofocus OxKn!,"+YY9@ІfiF N@vjQotf@ujBlQ 2 $3h}Iy`%,rsH6!+i rfc|8C,9N{;eeyRl Z{oH)e w;JJ[O <\_[8xJ1DBҝȠƕZ2M&0416~wu΢F'(DV.&X(Ţ'q#vi $Z!*Z\tSPSj}1͈kp[3 p'rHmv5*1HJ[𜶃?==)oH>%[9[x5tree 44a49a51154855604211b0980f33f9dadb87fd03 parent 2759f7ea9fdc3118410473f7166739da3334ec8e parent 423366a41974f206a9fabb05d9474793a86443ce author Gani Georgiev 1681466283 +0300 committer Gani Georgiev 1681466283 +0300 Merge branch 'master' into develop ǘ\^xKj1 D>!9,=';Av(73`^АN:'D #f/H)j,lJԲϓP5ߗ )5It|{m &04Gpڻ±)\{ W+h#p*qY VxKJD1Eo&IN' @8T@DC"{kAvD_r:fTκ; E㌓h#[t29hg)j k*\R S9BR?A[w[TpPMԣI^q7MV!Ӕ4l}B k41zXObxA!E`Rc+]1dQU;6GB.0-7fLL&x6L3ڤvji ΖD( 4r^^\Qʵ- <,,vm^#|kv+? e79Cnu)+?:xcx*Vxtree fc24b0b800ca409ab5be85013efc445536fe2005 parent a60d0e35c6a2116552b34800505f202ca123f9a2 author Gani Georgiev 1681389492 +0300 committer Gani Georgiev 1681389492 +0300 updated OAuth2 providers ui MpxKj0D:Ed@9Z-[ĶY3CrWzlȊ@'?92GM Lɚ$ i>uJ } Jms'^?7,c?޴ZVzL(d cZvh:^W;0VXji3~N>(Ccx%tree 958a52138ea3c88a4533f72ed35bb657315ee45e parent f0687c9558909140a661e32e273bb53f2d5ea323 parent 88a9a26328281afbb39bf6981c2da12f5086ddf0 author Gani Georgiev 1681306296 +0300 committer Gani Georgiev 1681306296 +0300 synced with master Wxtree b0c41862d1433b2f9c7dd4f9b5cbe60d4ad67e4b parent db69b3a03ed53728a030e3fe1b8110f0ac9b9989 author Gani Georgiev 1681305833 +0300 committer Gani Georgiev 1681305833 +0300 updated changelog and ui/dist [Oxtree f3e70e427bde65d1f7e258e899ceb13fac59949b parent b8cab9e097d72eed52f90f5fafbb3e87e8f6ba4e author Gani Georgiev 1681304975 +0300 committer Gani Georgiev 1681304975 +0300 [#2277] added check for nil dao hooks ,Rrx%tree 6c2255c61d9c0f5fd8655cbef5d27959f0961eb2 parent 06af8aedec9832f697c619f5b0cad881a8ee0aac parent b8cab9e097d72eed52f90f5fafbb3e87e8f6ba4e author Gani Georgiev 1681298837 +0300 committer Gani Georgiev 1681298837 +0300 synced with master H[x tree 5c019144579f7e9ad1b41f91c55c51b9698f979d parent 0d24bf1dac67725b4f8ada500ea3a5250535bf04 author Gani Georgiev 1681284671 +0300 committer Gani Georgiev 1681284671 +0300 updated changelog JxMJ1,&Yl~A''b}rv|ޗ }YoXVӒx tree 6671ae549d009bb6fb1f61ee44b244101a81f3b9 parent 397e6bacb1a5cc9ae691b4fd45e65075a59fd2f2 author Gani Georgiev 1681156836 +0300 committer Gani Georgiev 1681156836 +0300 updated go deps tJXxtree 8b998e3a1769761d878cb8303d668baab45c0631 parent 96b3f12193dea93bd4322badb692464e534c2491 author Gani Georgiev 1681156687 +0300 committer Gani Georgiev 1681156687 +0300 updated test scenario name O Msxtree adc9dfa0b2c0a952a8a9050587ffc9291b653b82 parent 8e6bdddbe0a63dcac5c1d5416f51c233dc892bd5 author Gani Georgiev 1681156319 +0300 committer Gani Georgiev 1681156319 +0300 fixed oauth2SubscriptionRedirect test juSx tree 00e8a2235afdbef7e61003977984d8c3daab2ba0 parent b45643c3e789cfe8aeb2ecb64e9538b4647fd3c3 author Gani Georgiev 1681155193 +0300 committer Gani Georgiev 1681155193 +0300 updated ui/dist >xJ֓x1n0 w@%KE3eI:b;PwzSQI1l,`!r\\Y܉7];' lG ǔl"dE0#ao[+~ qږwp!ynڻ#1| ,}US^Jm:u*wm/Vtx%tree 2cfe9894526dc254c58674df22da8f6a94904f6d parent 501594582c86db9700546054680ec1891809aeef parent 5932465a2861ddfe4d17fb097b416b70b230f3b2 author Gani Georgiev 1680856785 +0300 committer Gani Georgiev 1680856785 +0300 synced with master 'Wxtree 975d6d2abd66da8ce3f57c39482723a5feb1156a parent 8d415388b2a88d42686a80c97d36eedf7a20a0db author Gani Georgiev 1680801770 +0300 committer Gani Georgiev 1680801770 +0300 updated go.mod Iњx tree 38afa4ea603b805ac12c4f896bee7a027940698c parent 3b0369db51d88ea23a036298ff1a75039162a346 author Gani Georgiev 1680801442 +0300 committer Gani Georgiev 1680801442 +0300 [#2231] revert the aws-sdk-go-v2 change [(PlxJD1F<ŀLm\[+LbFeMXљuE>.QryeǐXơQVS nNQ`A:h/ps+<䉇ORG֣{ԈbwJ) 8seWxk M[k9_h+?4Ja6/sj7 M4ZxAj0N1e!IrH(e9A Qs̞5p^>ȅoO\>e_>Qz#6p/ⴵX;pô3+YZ>g7^glHtֵECC}Cn?@neG )x%F˨<,Z9 xGhq)$h!DQ`7Wl qp筕ʉeum^ '(pKq1|=}C$b}+v3WԵ#v3D Z&xtree 434589b5ad62cf1fbfe415b3f61d35806659e5d4 parent f057016c00efaac663af6da56c748155e16c2ace author Gani Georgiev 1680548487 +0300 committer Gani Georgiev 1680548519 +0300 [#2205] fixed Record.WithUnknownData() typo TSKx tree aa9cd1a52b93013c30535bde19b7520522394d8f parent 769588053a32a59a2eb7e592cca6ca834745c2f8 author Gani Georgiev 1680543025 +0300 committer Gani Georgiev 1680545464 +0300 updated ui/dist fIJxAj0E> AIRZBȦEO0F,iWޠs%#4MEPPZoaJa ^iqRJY +!LZymo WTK/.tR[ѝ(xC[d(Jw }:C +AIoV>żh}/~W 1680343228 +0300 committer Gani Georgiev 1680343228 +0300 updated changelog 8Ix tree 5cd87b013766862c0c2f0ce88cee6f139755106c parent 19df6097b4dae5868d1c416b41ba1dcc8a2d2128 author Gani Georgiev 1680342942 +0300 committer Gani Georgiev 1680342942 +0300 updated go deps IxNKn! s +Ed*.fPfT z_[otf@&cZaY(8mQ$K@ed݄ȋmtѧ39G^*wTXSj>hc5|i^^# ceZ ucX[= \OFk]x tree af975bd61236fa86e070c8271f3d8e8aca86adad parent aca56d764359ce239b848c2477e5ec63cb43931f author Gani Georgiev 1680341884 +0300 committer Gani Georgiev 1680341884 +0300 updated ui/dist Jx)tree fe5f94f24fa5a33a076241df88ef03cb85db1bf0 parent 60f9704d77f5649ecb7852a137ce67f7b0626378 parent 6a8414f29b23e765dcffc30c6119df0da3bd14b5 author Gani Georgiev 1680341770 +0300 committer Gani Georgiev 1680341770 +0300 Merge branch 'develop' #ZxAn O1J0TUgHXD=~Y]~o.%HDWi!\mJFİ9gۃXˬ}*%JzNg3ORo{;@;VP2ף!Nx߉%_BuC@^R%.SUj#YIZxtree b60d07fb817d894e9dbbf91191fbd7a113a18526 parent 7901fdb0046ff44d3f3b2a1c1aab86ff03462537 author Gani Georgiev 1680338708 +0300 committer Gani Georgiev 1680338708 +0300 added Dao.Clone() helper S.LxxKj1:EBd -5$3i3@eUl̀7Fԋu‘D9`썺]s4AM<ɺ|6sPO{zm|ukz>^@ ob -m"  ) U?{dGHPJ6^qah,H;čIj_FEdxtree 8ce2011d16c5bb6e314eb803e0e5807abd4c4883 parent 516b84a63a70ebfdda8802fa452269d2829e6a83 author Gani Georgiev 1680200354 +0300 committer Gani Georgiev 1680200354 +0300 updated Dao.Save godoc .KxMj0:Ń,,K%@9C)] 1680176548 +0300 committer Gani Georgiev 1680176548 +0300 updated tinymce JDK(xtree b00c8870caebc38437fba51cc6b79fe38cd35888 parent 7901fdb0046ff44d3f3b2a1c1aab86ff03462537 author Gani Georgiev 1680176143 +0300 committer Gani Georgiev 1680176143 +0300 removed unused tinymce themes HJPxtree 943d6c04e6e3300bb317a0c8bbdc99de47f1c86a parent b2d3fcf45561b8d798786f3762d77f4cfaee0985 author Gani Georgiev 1680168333 +0300 committer Gani Georgiev 1680168333 +0300 updated list api docs SLxtree 32bcd69c54bc47a0b61d32a025ef57a258cdf7c1 parent 89a5fb21d434beb3280028ba8c63d9f59d210f0c author Gani Georgiev 1680167876 +0300 committer Gani Georgiev 1680167876 +0300 use backtick in index column preset Qݗx]j0F]ż.ccLF Dbt_o)tF)UJh1VxO`Q#5yrFc(&n& :Z$xsmK >_~/ uXJ[11썯tHe2D<'S-2H :PpO!n;܆j>xtree 469332820cab0e9e2fed59d3244dea7d473be65b parent 24b43f84578c5dd6c4f252bf275275160698185e author Gani Georgiev 1679979577 +0300 committer Gani Georgiev 1679979577 +0300 updated changelog and formatting wXP2xtree 55158d171087f4518ae3e0a40cc9b51bc0d97ad4 parent 7cd5a285c033c3c0a0a4f1a15f3eb3942de7df71 author Gani Georgiev 1679942386 +0300 committer Gani Georgiev 1679942386 +0300 added linux cgo target (Lxtree c95f2b6b3ec5eda55bd9f5c01bbe89f842294e27 parent ef8c4fb3c569b70bace1bd9ca449577c386f8fb7 author Gani Georgiev 1679935426 +0300 committer Gani Georgiev 1679935449 +0300 updated changelog and ui/dist *}Pxtree 35af7c318815e6252c9665eeb0cac0c895e21ee2 parent 08f7d2e0e152de5cdea6e672257c6e5fba84e293 author Gani Georgiev 1679923057 +0300 committer Gani Georgiev 1679923057 +0300 update ui deps Jx tree 5014684d08d2cda24c6fc98e50d861eeb6d9eb66 parent 93dd020c66397189fc3d409068c5cf600de9992b author Gani Georgiev 1679922969 +0300 committer Gani Georgiev 1679922969 +0300 updated go deps 0Iדxtree b493f7a93dfb66203448d92caca22d8f6016eb2e parent e4103230a0c2fa9c2d460fd77c2401ea48c0cd56 author Gani Georgiev 1679922467 +0300 committer Gani Georgiev 1679922467 +0300 cleanup old remaining temp views Pxtree b914b462985b297db916505b95d2ba83747827b7 parent a77724a40d436cd83524a25d5706a59ac8da0534 author Gani Georgiev 1679922440 +0300 committer Gani Georgiev 1679922440 +0300 added required field marker .Mxtree 22d95411b002e0e200c6ffb94844eb29bdaf50bb parent 7457ed82ec2a0b648ed9e422f8c015d8b8b60d13 author Gani Georgiev 1679860173 +0300 committer Gani Georgiev 1679860173 +0300 minor ui adjustments 7Lfxtree 96a9aec23e26ea63025d32c24b0a1f71f98d96df parent d36e8d46b927efbca9a49b85cec29a210f85be9a author Gani Georgiev 1679860158 +0300 committer Gani Georgiev 1679860158 +0300 revert record upsert changes on upload failure IVxtree e718c6a83007f0b0549866c1a68aa4080ac34c5d parent 0bd51a69456f1bacfe9cd5c800f11dc713ae4822 author Gani Georgiev 1679851961 +0300 committer Gani Georgiev 1679851961 +0300 autoselect new field names NCxOJ1+. yL(Mŋtg603Yb7xEQ*3xbJFOvfQڳ=BrΉV$*%Yz=SS ,]~kp=ÅK]2pt9,a0C, S I#[T$bZL\qc8R>Mу vbx tree 8cbb74c1fe17e5d1c3f80910d02f3c6c5523e963 parent 580c184e6a4b3c0d8b13ace59f311acb041b48e0 author Gani Georgiev 1679847584 +0300 committer Gani Georgiev 1679847584 +0300 updated ui/dist JHxtree 30304495e5ac057758f0ac1003ebd1d073fea914 parent 5c431b8d00ffb96f8625b5515164ed479925ea3c author Gani Georgiev 1679780040 +0200 committer Gani Georgiev 1679780040 +0200 removed unused AuthProviderConfig.Meta field TPxtree 768ec82e78db931fa4984e6f8d257dcc11cc88b5 parent d5831e60667bace7944528be6c48349570e90a96 author Gani Georgiev 1679773699 +0200 committer Gani Georgiev 1679773699 +0200 added migrate history-sync command Z|Q5xAj!Ev2Y UaZ9:d[SPJvA3ȅ5m.=(X拧J+[k5(8qD'b 1ν]ǬMZO?|% b^͹m-° 0Wh]ZzGSyn~#Vٗxtree f5e7656238f23b28d646f3f9200645539ce7b903 parent 9d98dda35283605261cab06048e33ada5fdeac2d author Gani Georgiev 1679690912 +0200 committer Gani Georgiev 1679690912 +0200 fixed generateAppleClientSecret call oQ’x tree bd5be20a3069f61d82d726c87ad536ecdaf0ada8 parent 695ba6ca3bdb65c65ca4498b43b49a60e5196531 author Gani Georgiev 1679689857 +0200 committer Gani Georgiev 1679689857 +0200 updated ui/dist AMJ͜xtree 460b6b08227be4ccaff7b5f8064f85b72a1dbcde parent 643df49ce0cc0e39db05ad1564267314b06c367c author Gani Georgiev 1679605142 +0200 committer Gani Georgiev 1679605142 +0200 updated rule field styles 'Npx=j0{⃔E֟%!"x,%Zy>.r3 3:3BsBrkQL:G:4*&8KZJ-f xQRr]&:gR͸r[;^/m;rmlorYH!y bzBpPT T28!rp!0΅Fnk撦_3axjC!E~e >Ji!B].&UZɢ__.¹pGg&1ꀞ\d/ DdA$/x-sCPNO;Zĕ1+Zdg[4o_/I ]x8Txtree a3ed70de6d10f66345ad894a13b0910425c0db0f parent f69ae63f11fdce3cba59f069fde1fa99dbcc5f32 author Gani Georgiev 1679560658 +0200 committer Gani Georgiev 1679560947 +0200 added new field indicator lOxj0E{}%lK#`I"Uڔ^8~2l`F42eLHlVeN 1o0z`8`B8+? n7n߶B1VnTËRwBb* QQT[sOb\sxtree 5ef022a7af4822e9b3eb79e7b55e933637c86217 parent 44629d1f4d1a649aca7c5a05b0bcd952beb2fd2d author Gani Georgiev 1679497964 +0200 committer Gani Georgiev 1679497964 +0200 changed types.JsonArray to support generics Uixtree 92bd7ba1e7b68b7a09a5f1ba1c7918e9b5bdf6a3 parent 0a0ef16107fd3552ea12cb014e861a242af21dde author Gani Georgiev 1679496814 +0200 committer Gani Georgiev 1679496814 +0200 removed test js file Lxtree 7d96aed870334285f4c20bb1a2d9e9bc96ee4fa2 parent 218c318478d4450117e215f50f7cca0c129a6dc6 author Gani Georgiev 1679492854 +0200 committer Gani Georgiev 1679492854 +0200 deprecated SchemaField.Unique ?O:xMj1 F>?C HvfAq }fўx|T$\4kT&5y4kIܝM~*\ɧcA)#yCK:s"}*x_ڢ?<_j/ii!S>ae G± g7!^MY^0}PPn X~xAN0 D=HU&i*!NѦ%O$yU@ rBqq$)X6 B3&DX䙂Bdi>]u= ('Q_4?|]vJ[ٚ 3 ]kTc+zn*\A'et-K;D}J/$`x tree 5cc3aad7482cde664e956d86e83cec5da2a0202d parent fe6375dd5d03f955d69e88e03aa4260eb0be3d3d author Gani Georgiev 1679417533 +0200 committer Gani Georgiev 1679417533 +0200 preload tinymce r1KExAJ1yEGaIIziC'&!F;~@TuE G#DvJL!됢C~ fMe])fIڹ3GY縶 \COMe=V 'DhZB8%IQ|ke?!UKl=AI{9ղ\xtree 38571ed3a399b1a41afc55e0826be3a95e0aaa8c parent c3a46a253f06e12bd039bc2c1408aa98e76cb5a0 author Gani Georgiev 1679406942 +0200 committer Gani Georgiev 1679406942 +0200 updated changelog and ui/dist ?OOx;n0D{bt>r!AoAyS<̌Cu]Ѡ_袑(jmFʉɬtH `0k'&.ĒWfp^&Qgx)o.v}b]hG+mc?>'>- wi9u`9 DYxtree de46ba451252cfbae19a21157b686fa57bc18881 parent f7929803c8e6214701392959d16cf12212f2a182 author Gani Georgiev 1679401604 +0200 committer Gani Georgiev 1679401604 +0200 added Index.Build helper method NZx͊!}_#,!:cBC ǯ(FgRZYSp0$!ڔӁ-ع QSVkG!X&uPcWl\ y%7W,KyeW/7JeT,dGk<,<`A8f4̟;g~-8\QxKn F|lHQݜn$ Q/dWU{gWBHգ6d,>,I6zb:Ms]&Pu&:"bN hX3<=_} Fݮ>8 /jZ 5CreT(y8r0 f͟S e9 4Rax tree a105570ef74a8c2b3523f760be738d41f63f47bf parent 78e817ad9ffde5a372e883333d2f153827a106db author Gani Georgiev 1679235513 +0200 committer Gani Georgiev 1679235513 +0200 (no tests) collection indexes scaffoldings SxMj!FV#!9Ge+uК}:!7x|V5))!@$c *J&83DmbLE"TR;tJz6"1ᆽ}~eqI㸂r>hcR"GcLLi.|x Wra>Z_iSOOj\+K|"bxKj1:EF=Ч%F> z Ue˚΄)˔4JJ騒i ZqAZurlfCiDT̄9|np>J,S/OJuޮƺeUZ9b2?y&Jo_fj>!)~CNk?^o-ZGx tree 9da8b4240bef9dbadba1c6fb2301cb26f6b82353 parent 758f62e742e04d5b2adb90fabda6c810a0b0f62a author Gani Georgiev 1679213772 +0200 committer Gani Georgiev 1679213783 +0200 removed unnecessary mail layou css class ~Txtree b29f00afb076f81edda4d13d1d8361600156dae9 parent fd5d5836cd101f259376cf79c12469d274f666d8 author Gani Georgiev 1679213726 +0200 committer Gani Georgiev 1679213726 +0200 added create index sql parser .N֒x tree 360d85d57c637df7226d68506b875a422f2d1c9e parent d82099cdc2cae50b8554ff8d9c4d044aee21de3c author Gani Georgiev 1679213684 +0200 committer Gani Georgiev 1679213684 +0200 updated ui/dist PJ]xtree 48e8e03d8e7d7d31a6aa1eca0a9820330017cde1 parent 74814915119dcc925328e62a6f8011844eeca1b1 author Gani Georgiev 1679206656 +0200 committer Gani Georgiev 1679206656 +0200 minor collection ui adjustments >Oxj0arGM_=n" 8` q%v- rɁ)I%RWBLlɢ=ٳC8^CfR ?{K8sy`cR Na*^|~X{SM 2P9 1678987276 +0200 committer Gani Georgiev 1678987276 +0200 new schema and indexes ui УMҟxj1{=BlI/ν.XI{:d}TT303&V6I20z,7u>:NV.h뀘 pIq| HBWp[Ֆ -{W,!y.9g#]K~h>PLkW֒Bq4vr|Vv`ؕx%tree 43cb88eebcebd67de3eb21674f7658afa714cde7 parent 14a41ace985db6a0c561514c3c757c474799c96a parent e3b226442882f15456b1256738d1a443fd1c741e author Gani Georgiev 1678752274 +0200 committer Gani Georgiev 1678752274 +0200 synced with master !XxMj0O1B%ٲrh'Krt||1j%e:[]MB㶣"ƥ&m)Z4}FEJ#= GW,\[|{8y  cP0f3VBLc8׃03J TSb(Oߘ+`Jp`?nX#!Gm}e[xtree 64187520d9047f9f98e0a966f4d3cba9af846174 parent a270703aded5f88dd9a55a4082042c965a9a80ca author Gani Georgiev 1678715571 +0200 committer Gani Georgiev 1678715571 +0200 lowered auth record bcrypt round factor to 12 Tax%tree 7e3e2ccf3df85edb92e34c6368c1513ce9520548 parent 59772d7668f7f187d1447d29e98bee05f0cd8e06 parent 9f3dcec80ad815a2d3c64f0c17b8f74752272fe7 author Gani Georgiev 1678637356 +0200 committer Gani Georgiev 1678637356 +0200 synced with master *Yx tree 767abb6bbcc458fb59c625dfc68506f84927ed60 parent 04ea9fb84fa18c32d647476d6d12f22a1141e7f6 author Gani Georgiev 1678634570 +0200 committer Gani Georgiev 1678634570 +0200 updated changelog t&Kx; U>R EQ.l,L#;)ވE3+TB2Ei=i$|plQ9&/ģ! ='2:«?k{2ܩ%.e WJyc%lkAמB_{x[G3}k)A~~X\1x tree 6c129abda62a6228cf84a8ba56b74927eec95183 parent c808c5bbeb41b21e8b16a894aafd6f04165108c8 author Gani Georgiev 1678632892 +0200 committer Gani Georgiev 1678633257 +0200 updated ui/dist JPxKn0 :ʖ(-"Gm9~"7rMISHYuh\ukQ؇3NQ$E #$Nd.‰ '-uza~q^9/)X a _8 nܚ~0+T]W Xo n{}+&ث} ]axtree 35b32eacaaad0b3e4922932888f7c986a0d0bb40 parent 619c4d8bf691fdcea8ce79375c4242a51abfcb4f author Gani Georgiev 1678632207 +0200 committer Gani Georgiev 1678632207 +0200 [#2044] fixed view collections import R_xtree b57a62129b4cb40669281d000ed423c8baf571c0 parent 8cfee51c5064c4d9b48c406e4233171a8fd4b627 author Gani Georgiev 1678224515 +0200 committer Gani Georgiev 1678224515 +0200 optimized single relation lookups PƒxAn EbU15HU]A"av/r.o+E&OFEhmL~%>G&hΤĆȡ79]4h4^} ܤ\|%'oK-:QV$T`m<|^*p N^WxMj0:lJw94Vr{ f njP\<0ht33/N(9 C%C)zcG`[ASrh t10 |B{Z4JQiH8Nwn8:f66%>,3kNֈ6ȳXN&>6Qւ}/םvu"b&(Cw[atz+&P94N?:z u[AK&o|^Zix tree f97e25eddbe0fec50cce1ec61f70345256a1e858 parent 215f0212b50edb99b9e1a415f15280423d0096a8 author Gani Georgiev 1678109566 +0200 committer Gani Georgiev 1678109566 +0200 updated changelog NJǕx%tree e065dc713849aae37a7e343e3bf4bceb38751f9f parent e60fb4744448553cb7440f75a051f7c8a2f00e7e parent 9cefe1da60187e4016aadd9357d74c362034aee9 author Gani Georgiev 1678109435 +0200 committer Gani Georgiev 1678109435 +0200 meged apple-oauth2 2{Xx%tree 3c0fa5732bf1e6bbc7a062a0e304b355f99e2d36 parent e3d4d444028cb1ec8a9963fe737efcf53d999305 parent 619c4d8bf691fdcea8ce79375c4242a51abfcb4f author Gani Georgiev 1678109237 +0200 committer Gani Georgiev 1678109237 +0200 synced with master @Zxtree af5395ee6abaaba6fd79edcc3f416db0138acd50 parent b89dff7f694ce7173a00c7eed7b563e824c2e960 author Gani Georgiev 1678108807 +0200 committer Gani Georgiev 1678108807 +0200 normalized values on maxSelect change AT xj0@w}A@Y,AL֬EwreT%C{^"@Gl-|#ɹ}$FUl} '%`&vN=w0ҚaR,O8M;7~N rtGݙ`;nܚcn|*T[f,?Uyfy?s3Vx tree 9f1f4fd8084313aa5d9fbfe7840d1e2e1285cbc3 parent 3c2ecd3c71bd011a976ce8612a10e6b18eb19fe0 author Gani Georgiev 1678036743 +0200 committer Gani Georgiev 1678036751 +0200 added google OAuth2 verified_email check oSx+tree f2b7576a3984a426355c1f8ae87083a8d7b65b52 parent ecb90eb22bd8e8639296aed60fb9b7865e2d080a parent 3c2ecd3c71bd011a976ce8612a10e6b18eb19fe0 author Gani Georgiev 1678025758 +0200 committer Gani Georgiev 1678025767 +0200 sync with latest changes /.[tx%tree a4ade345aa24a5ba41f162ae6c273465bad7dfcd parent 2ee79b07faa9bf8d5e75b1ce9937986f5f86022f parent d58c5c311e8ad4e9a1a731a6eeb187d6843c260b author Gani Georgiev 1678025571 +0200 committer Gani Georgiev 1678025571 +0200 synced with master LZTxJ0}b$"M&}io\r[e&$zb$6f2: "c q5W2)YtFvzˤU)jxlR W.uOsee^}^. XThQ!5>!>3>FO>ǹ6Hd10-G岉?Yxtree 73fa0a4148ea60791cb80b897bb0805503a6ed90 parent e828343a85a7d5389a308b891ad5345557788ff7 author Gani Georgiev 1678022331 +0200 committer Gani Georgiev 1678022331 +0200 minor updates to the rule fields ui Pxtree ce7699bef13ca988a49e720fc5a044c137ce60aa parent 94a6146fc8d3965a3a80e7fba5d288449e674688 author Gani Georgiev 1677927975 +0200 committer Gani Georgiev 1677927984 +0200 added errors slide transition jOx tree d4cc81ad0ece1cf41ce237f12986e32602718b5a parent 99435d6bcf0576b1b96a09703fe7c2e982d8c6e1 author Gani Georgiev 1677927955 +0200 committer Gani Georgiev 1677927955 +0200 simplified rules ui KxKJ1}By"PIz"#o,_2@sFK &ΰMQi.9©L_8h:ӬZDfbAOxȥ8VL}8|^9ڇQjVE >e^ptzYFޖ;mA.إ7M W[gxtree 2d4bce051e0e7c05da3c3c8022517170938834b6 parent 50397db6beb971be71d0984e272c5ff7fe5ea659 author Gani Georgiev 1677776178 +0200 committer Gani Georgiev 1677776178 +0200 added support for @request.headers.* hQpxtree 164eb010e0dd4bfd245e1b768589e6f1d2bcd49f parent 8f47609297b783c40abc9f53b05a64850cc017d4 author Gani Georgiev 1677766256 +0200 committer Gani Georgiev 1677766256 +0200 updated calendar styles M:xtree 79c563254a44d7d724591a9d0fd5860c6a7ab9ba parent 8e5a7f78d62ebb3f20ef1c19c0242ef8dae733c4 author Gani Georgiev 1677763007 +0200 committer Gani Georgiev 1677763049 +0200 updated migrations comment 1677758866 +0200 committer Gani Georgiev 1677758866 +0200 removed unnecessary struct pointer (Qxtree 5246a4ca781fac8464f42478277279fc5a40409d parent 5331bd102b27ad5a64b56aee0cec0bf2141dccb7 author Gani Georgiev 1677707154 +0200 committer Gani Georgiev 1677707154 +0200 added generate-client-secret api test 5R,xtree 993d02aec21e33cd90777b76e1ff1e53f9a98c27 parent 80574fb317caa0208b41d7024a38f880823b2f0f author Gani Georgiev 1677706185 +0200 committer Gani Georgiev 1677706191 +0200 added apple oauth2 integration ξOxtree 808900d9fa3b67b414784c145821e0fd7b84efdd parent 627ffad56980971627a709d65982992196858ce4 author Gani Georgiev 1677595825 +0200 committer Gani Georgiev 1677595825 +0200 fixed collections import message typo Qx tree e1e099e37692760f4e12b616143c93f4c9e58130 parent 84787a14029a4fa62e7280a15b39eeb18394be8a author Gani Georgiev 1677402052 +0200 committer Gani Georgiev 1677402052 +0200 updated ui/dist HÑxtree 89b03ca7ea34a64c360c7dbb0660ce691204429e parent 023ef24a389c079ae6dfbaf5de8c9356573241c0 author Gani Georgiev 1677401220 +0200 committer Gani Georgiev 1677401220 +0200 minor UI fixes 8lIx tree eb2e48e183e4dc1d4aef9e089da7569d11d64183 parent 085b5cd3de0940c3f50de484f70308422c544cf5 author Gani Georgiev 1677269245 +0200 committer Gani Georgiev 1677269245 +0200 added model query autocancellation test  SNxMj09Ń. t7(] 1677249237 +0200 committer Gani Georgiev 1677249242 +0200 added min select relation field option sSx tree 6649c49fc7e39d52101292bb437ce16a77238d3f parent 4594b003cd129305dea1dc2868ca9f0c1717e280 author Gani Georgiev 1677240747 +0200 committer Gani Georgiev 1677240747 +0200 prevent collectionId relation field change MSxtree 907aad4a318cb1160c64c15e7c0243f1dcc32662 parent 33a46a2938d7d792f6561ef8547411ed20391e6b author Gani Georgiev 1677181902 +0200 committer Gani Georgiev 1677181902 +0200 fixed formatting and typos =Mhxtree 0f6139a6afd3c797a04ad2743f640887678330a7 parent 94e68f34440d418bfc22eda2060513779bbbbaf4 author Gani Georgiev 1677179220 +0200 committer Gani Georgiev 1677179220 +0200 replaced authentik with generic oidc provider gTܜxtree da315515927e9ec9d94b50f74c98ceadfc3605f0 parent e864718514bb52ec73424570028edc152ea517bd author Gani Georgiev 1677171563 +0200 committer Gani Georgiev 1677171563 +0200 added --queryTimeout flag hhM9xtree e720ec3c8e07829f316f7f0ff786f9f6b34de16f parent 7ce752f67b0a4484045508a773e12b8c99ae6208 author Gani Georgiev 1677146656 +0200 committer Gani Georgiev 1677146656 +0200 updated default query timeout to 1m EQxtree b4a70f85619bb012efd7b554d5a6569eeb3d15ff parent 99651229bc2ef08dd3695846550f48bbc31764b9 author Gani Georgiev 1677097219 +0200 committer Gani Georgiev 1677097219 +0200 updated dao fail/retry handling e#Oՙx9n0D{ P& May`FaU³*Q3 >R2B4%I苋˙::(am+RvM*k4yIqk^ַ}l/~mG%㓤^Dg7X=Ēs-]w 1677096419 +0200 committer Gani Georgiev 1677096419 +0200 [#1896] run files upload after record save Sʟxtree 4931feb88bbf02194589178e5300374e87be8808 parent 20f5d290c8af68bf6eb9808bedc0481cf17fa0ca author Gani Georgiev 1677081728 +0200 committer Gani Georgiev 1677081728 +0200 added cancelKey to the RecordsList component zTØxtree 594f72238cb4890c66436a766a1188d94839531b parent fdcfeaf4f9e9e65422a4e051fb26c084152dea78 author Gani Georgiev 1677011089 +0200 committer Gani Georgiev 1677011089 +0200 minor ui improvements \Lxtree 8102e3d1c728c8ce4efa6c1fbdadaa5d0eba5c4a parent 4a58476bab473717b59ec00a806b134c4389682a author Gani Georgiev 1677002607 +0200 committer Gani Georgiev 1677002607 +0200 updated daos.HasTable to check also for views nUkxtree 05e724de5956c8c9a51102179be2cc86f42b4885 parent 190c4a724720099c7678cc7a4f55b2df1d33d5db author Gani Georgiev 1676990292 +0200 committer Gani Georgiev 1676991248 +0200 added select auto fail/retry \N8x tree 9c222d929807e6245e902658a2ac584e193c6cf6 parent a5ce0cc3cb8c6d0c8ebc168344bc8323107a0a10 author Gani Georgiev 1676989978 +0200 committer Gani Georgiev 1676989978 +0200 updated view ui ]RIҙxtree 3dc7df681dfd42a6f2b79ae871e432c76f577083 parent daa47cabda0a6d99eb11c1e4246559276053daa3 author Gani Georgiev 1676892663 +0200 committer Gani Georgiev 1676892663 +0200 fixed godoc formatting -MZxtree d81d66683fe07403bf3db35ccf23825f09642ac0 parent 3121043162ba60b9530b40a2f4fc13405ef9934d author Gani Georgiev 1676745101 +0200 committer Gani Georgiev 1676745101 +0200 fixed daos.SaveView test L@x=n @SL"`,EQ= F͊]) 'tq9WmFͮ^#ǀŻCqj&+>,P")zm nmr*=enp1[|KW;R^h>`W kE %|LhOgcuٟIڀ~@Xx tree 53324e06fbaf07de7e318269e2e9bc12e29e55c4 parent 6d983803769999f68cf3d4341f1540629f547461 author Gani Georgiev 1676743367 +0200 committer Gani Georgiev 1676743367 +0200 updated go deps Hxtree 1bbc1071373fe7b62c9bbdabbf12afa39fbf046b parent 9c3821dd9f335fe86ad5a3c0a2db6ed54bb1e5f4 author Gani Georgiev 1676741622 +0200 committer Gani Georgiev 1676741622 +0200 added view collection type _P x%tree bc0d8673217b1a4a6cf83cb694317440d9c42daa parent ff1e551ca4db0c6df9671e188dffecaa650d18de parent 39d65a9f9f02dfd1ebd4220ca3ef92f5e23d04ba author Gani Georgiev 1676203872 +0200 committer Gani Georgiev 1676203872 +0200 synced with master aZΖxKj1:ECӒ5@0ԒQ>dYoQ .h Yg둒%_>,hW?4y0MA+:FZZ8i:$ 䚌r.u ڎs[y';Â> }]C?t0 C~οBWkyMQJVx=j1^H0]Y?`L:¤ddl{ Ayotɹ`]Ƹ#{0%>ƨUwRX O)Ÿh3˖'RBEZEp;_ymg@,&V{ u@?oHG"*m}l,Z}UvjZx tree 6aeb79c5082eb6579374302ede63eba7508fa9c9 parent 25d0386d9302838adf933f688a42bc246eca6c92 author Gani Georgiev 1675706263 +0200 committer Gani Georgiev 1675706263 +0200 updated changelog JxAj!VWMC}DȡG[eFgAUF\ Jk0Z։Oz1mBӍ- @BYm:Ok)WL|̵YZE~:rzt Q#N 1675693847 +0200 committer Gani Georgiev 1675693847 +0200 updated default tokenizer separators Rfxtree 1f9e5c6b3a67abf5f89db2d824be39b249e9f770 parent 6d8399f15162669682f61ac32c32facf82f1928c author Gani Georgiev 1675623228 +0200 committer Gani Georgiev 1675623557 +0200 added generic tokenizer helper KzO֕x%tree a9d9bbcdc564f5304985327df43a5be320f35ce4 parent b0f9c248ab050b1dbf6c66b1d84987921093b588 parent 671f7ec2ff3d712de47bcb8fa407918ca96c6c2a author Gani Georgiev 1675344903 +0200 committer Gani Georgiev 1675344903 +0200 synced with master [/YpxKj0:E5anђzd-EnUQ zB.k-ƘlJLL:Yq` I'ﬡA )w2O^ /TGVX[Θ%xRK)WfDž8LdanԖV^ R,~?Zx tree d4115b26a2d8d06d37acf551b59dc46f31359ff1 parent 433792c0364fbb2f702ee457d8c4a3ae9c68d3d4 author Gani Georgiev 1675337585 +0200 committer Gani Georgiev 1675337585 +0200 updated changelog A|K xj0I+{+(%|zvdqaVUa˨'cԨ^1 F;W]8/V iD~F4 n;~[p5UK>g<x3,%G$O_6"Kci rB 6r}i`Z x;0{bK#gCnʙbF:3dK)A11Ok7S4:mAws<;-u&R^ aLLqʋUt:õ|?^g3diej t,|e^d|@ګ4:dIcxtree c463009938ae54fa59cbc626fb4aa1db19391adc parent 046ee62050fbab6cfa96302e7d36ef58e4612b7c author Gani Georgiev 1675282776 +0200 committer Gani Georgiev 1675282776 +0200 updated changelog example Nx tree b227db537594a2492f249039436f22156784e9cc parent 3022e4b4c9379d21299125ff1de4dc31f2f3f474 author Gani Georgiev 1675282200 +0200 committer Gani Georgiev 1675282200 +0200 updated changelog iIwx;j19ECjI- ,F>qOKg|zoŃ]LAN^kd!.,-@Xg82'%;e!RZ,/h5>װ7ko;_:c{Β'dg$nm ؏H.}~ UKj+M|N\Ux5tree 38093cd31ed188617fab732f99ef4140cf5e26a6 parent 7987419e7d8901982e66ae0ab4a5ee755a7729be parent 5a398b91bb776b5936f996ac74204e66021bb256 author Gani Georgiev 1675092400 +0200 committer Gani Georgiev 1675092400 +0200 Merge branch 'master' into develop ])x tree 3121991c2bb4aa4ebffdeefafb29d484b34764b3 parent af1df0954d404abc92245a51acb121719bdb5a12 author Gani Georgiev 1675088904 +0200 committer Gani Georgiev 1675089079 +0200 unregister closed/destroyed overlay panels UɛxAn Eb"9HX8=~HOFI qZarK<1AdĎTLҙ1rD֣A0xդޠ} 1Kąv,7߽pnǟ>olfxAj0~HlXBn{fd lH} rjU2584ƒH31a{=J&t1kEfVEG o)uMzmir|Eu8\z$g@]Bg~JmP2,%T>Ϳ|fK2O]ix tree 02c6c3ef23b5681a213f779e0a26a4478e23c7f4 parent fc0515eda3db03216ae9385addc067155eda7a0e author Gani Georgiev 1675072754 +0200 committer Gani Georgiev 1675072754 +0200 updated changelog FaKxMj0F:@A tC.f"(} x7:3m r`imd!vr8$yltBՓ"$cd)iSnJsZ+nz.%xW,y+Ij)e GB|)7,gqsz4ΐ*>e0ZSӨ/ \x tree f14af3089b9c5dd5b2cbbf2657aa669d9807237d parent 20eda2ceef418b4fef41ca57ddffa890dd95f30b author Gani Georgiev 1675066710 +0200 committer Gani Georgiev 1675066710 +0200 updated changelog dL~x tree 08f3de20879f02ee3f9b1e3e7715b9ae02ba3197 parent 171e7e8b12027f39a5fe60f2d49278388cdcbd23 author Gani Georgiev 1675066265 +0200 committer Gani Georgiev 1675066502 +0200 updated js deps 7I՘xtree a7833d60525fc5d0e277c5341478644ba5a3c0ea parent fa832fa7d2021aa3f3ed717ad1eae46df09de47b author Gani Georgiev 1675027425 +0200 committer Gani Georgiev 1675027425 +0200 fixed changelog typos \LxAj0 E>ˁARb+RC.T[{]}[<043dAN&!pȜ)}=6 Is-,JTϺjSTip~jOx-'^]vM} }dDwڽaHOМ-øwY7hZ FMU[xOKj0o_Y(CG,zt5F&P!8h"*&)o5Lp\dmXeҚzsN*ǂ2l lV[ '?/-N\u-Se #b]:'+Fm#M{h'l;)x2Ӆydo!b!xtree c6fc4c9a02535274570d5a6f0397143c5d479c84 parent 8c7d8117c01bf540c8c8f5636634a27cb860b9f7 author Gani Georgiev 1675023014 +0200 committer Gani Georgiev 1675023014 +0200 fixed empty relation(s) save js error PܝxI 1E9EDt% <@٩v&Lh5ZVd+Vhlӊ(=0TX!VHԹEsuIU9{sLul?}uKε7Yc{0R!rK:CZXe.#R-Xטxtree 417cd82caf703a56c532a9bace01e1c34933cbd6 parent 84afa2e32ad5025693d20a96daa473edac101600 author Gani Georgiev 1675015511 +0200 committer Gani Georgiev 1675015511 +0200 updated initial json field reactivity Rx tree 0eafe5245f1ceba0a2b0dbd45f7d234c60457da4 parent 14148161ccbd1d16566b196b7d0561804aa38c82 author Gani Georgiev 1675011333 +0200 committer Gani Georgiev 1675011333 +0200 updated changelog L$Jx1tree 0f1baa2da36d94403bd4be2e3fa05cacd2d0fc39 parent ebbb33bb9491393c573b937b0cce050aad2f1796 author Hung Tran 1675011134 +0700 committer GitHub 1675011134 +0200 [#1707] case-insensitive filename extension check Co-authored-by: HarryTr glaMx11 @>p!d$8ILbO`"-Ɋ,YŅx X,^r;/d4)`f7/,g,9|rAl&"s0GpV}ʿp.{7eS.`}u8!]X3rVxey/h}l?ҺcZx1n {bH]K)ݽc}",HAʙb4zHlE"EGd8YVYa禥s(8chHS`>gmᡵ/xO~z{ 8\v˽?ù wm]p`K}[. ^ =r@.E]x tree 3860281ed0ad2c4d1172b75773814cd09b2789b9 parent f040431d6eff83cb15db64e01ac1222910053cb4 author Gani Georgiev 1674994593 +0200 committer Gani Georgiev 1674994593 +0200 updated changelog yJxj0 ໟBc8q0z*{%]>({jal5LD $&祸bT}f9 Or f5)&ۏ$rzΘ"99 #+]]c3R}~%L!B GH;֘~W'Z&~iϕxj!E~Ń.53:-d(]<9:ZӒ.}}y  Fi#MApO5Z g'19Hϭ6b^ۥT8cpRH_pX:;cڹA(=i&3#5BqW|<`8$J`AK9ڶhcs^ ?^$/څKʑAlMxAn Eb"*.[C9YY}xzE3ҕ\F)T& L"- 1674770857 +0200 committer Gani Georgiev 1674770857 +0200 fixed wrong < and ?< operators description @1T x=n ާ> l'E4ўc`d{(7H>ŧ7f0䍞0 똢aيEY;a:qUPRS0+qE>HX U 1674727934 +0200 committer Gani Georgiev 1674727934 +0200 reset fields id on collection duplicate ^SRx#tree fd8c0bd837d673e4ee43d9e0f9f0a473009132f4 parent 6a9c7213a311f42cd80850ada6b53759e452ffc5 parent ad894e0cde851100203e67af52de38cbea5abbdb author Gani Georgiev 1674717839 +0200 committer Gani Georgiev 1674717839 +0200 sync with master DXxtree 224a96cf60944bb5a861a5b6732a78fa5a95d80f parent 133d6b5cbc103f6bfa87af41bd33bac929408fb0 author Gani Georgiev 1674684688 +0200 committer Gani Georgiev 1674684688 +0200 updated changelog and ui/dist !OxKj0D>EC!d7Y-[`KAV>Ǐ s@E"0c&3kAXÐ]6{i.u@Z]}^PXQ0*6$hsŨ4L9N]Z_|m9"0;[2B~rj 7U)prbŻ4ÀKЀIMKkB树*I69FCUܩdkm[ox^?|v 97;C4=r b|<=3qrϵ\R>[ xtree d6798a8dffe59492cbb23bd1bcfbf1e63bea50e3 parent 95fcecc80001891deb13c21710a600d12fe613cf author Gani Georgiev 1674591938 +0200 committer Gani Georgiev 1674591938 +0200 removed n/a values from the mime types list jUWx;n0D{bR@9VڥL$6ۇEnnf73cMHvBڂ yI]cvP"іE˂ #hKYk 1674557105 +0200 committer Gani Georgiev 1674557105 +0200 removed unused IdLabel component ]!Q/xtree f76e7df006c8e7636d9121993d291b1a48040a2e parent ed96e4fe78821873d991c249bdbc4e6accbe223d author Gani Georgiev 1674556849 +0200 committer Gani Georgiev 1674556849 +0200 [#1651] added more detailed file upload errors /Txtree b54d2f945b9ba80028643af7f35f98c784bc9d13 parent 34e07fa2645085f7328a012f5649b298502c8dbf author Gani Georgiev 1674505070 +0200 committer Gani Georgiev 1674505070 +0200 updated the default editor toolbar .Pkx tree ddadd13566ed352f1325dab1ef9e0e521c0d8c69 parent 44d6d5e6a45cfca46644bef30f068827b32f850c author Gani Georgiev 1674504568 +0200 committer Gani Georgiev 1674504568 +0200 make the missing displayValue configurable Uxj0{?BʀYZ Gȑ*HRODQ~ |3̔,NlO$Oe EWJX΋Yes0HS7Nu)'z 6^)ÅIyǹb;i^8vLtj@.GErSVBZ9“D?ޞþEz2XRrV=?4_Q"dxO=K1+XI6bR,^ޮހ66*3 1&n )>($`s?JvXcge8Ppvg~RasK]2op\/vY177Z RK)J93SntׇiԲe*}leů<71=p!8~Nҟ6 ]cx%tree d395b7ac4f4f459f4d399ae133eb5a50f20afc29 parent e746f3897ad30a54a77416599ad3ea40c905b817 parent 822197877e0ed1a83183d3ae04fbf0b6abb12a0e author Gani Georgiev 1674055021 +0200 committer Gani Georgiev 1674055021 +0200 synced with master Xx tree 34502cb072061282d1ef72340d974ae56931b596 parent 79866e1edca7887934c3900d1d5f303e2ec4abc9 author Gani Georgiev 1674049759 +0200 committer Gani Georgiev 1674049759 +0200 updated ui/dist I xAj!E UvC!B[?Y}_] n:-ɊI)hj)oVt.;T7R]H&1Ct:١ɐl\ \7/q| 7gZٞe py(q~@.? i*VGe.(_*Yxtree 0ae047e64701f355196ecf0049e10b5788cd3374 parent 64b32fb4d44e8c0ab75ac8f11a6d2327e8f107ce author Gani Georgiev 1674029145 +0200 committer Gani Georgiev 1674029145 +0200 fixed typo [G֟xtree e6f87187d840e04436d383d04fc0081cf56e01b8 parent 4985b7545c4d516f2877fc585f9dfc1394351f7e author Gani Georgiev 1673989453 +0200 committer Gani Georgiev 1673989453 +0200 [#1623] added apis.RecordAuthResponse helper -Sx tree 2716c385ffa4ebe2353bb1f1d7887c7d7dfcd29b parent 7523c384d05de6fe62d9552cfe37bffc1cd5ff2a author Gani Georgiev 1673962336 +0200 committer Gani Georgiev 1673962336 +0200 added link to the mimetypes supported list +bUxtree 03a91c6bf83084e593621d77fe1befd195cd876f parent ab90949fcbc6e12992e31602defd0dd0ca890710 author Gani Georgiev 1673955108 +0200 committer Gani Georgiev 1673955108 +0200 [#370] added rich text editor field /PxN1{?J('{ϿQQBbm],y)ib&ŎI&g%#{i69+UhiqP2Q82L&#] g yc+v͞ƉGʺ[^bKa!{ʙ3 Ave0F4q| "PIz)W}T({YF}b'i@蝍dN& 3x \ppLx'M+ yz /B ѵuĠclg_k;\Rޖ!˟-k;(79X=\(u+?*NjV~1@IkWg9ZqԇMW (&~ `bxKj0:E$@ dU6A[jɂ%4q 7ȪzxBDDG5(Q85f 1673551123 +0200 committer Gani Georgiev 1673551123 +0200 synced with master YÔx tree 9865fe6f99f1de0484138f4d7ab4d35d12dc75aa parent ad0b90fc9bebe580354e4d017bb3a61ab67718d4 author Gani Georgiev 1673530966 +0200 committer Gani Georgiev 1673530966 +0200 updated changelog KxAn }NeJ#BRUu7$tN \j!!`S/OɒDc(U0H3<aPcAh \u7#܈s?tA^?AIUoB ѵv?AV? (Q%8ܛ1'cFX!繝2Qh{Z.SL)Qq5rP 1\h/gL Y B)dK/W8ʷҴA7oS^YDHdI6SL7J6a4z磉n\Z[33inx>ȗC(n4V{FzQZkRHyװp|V- ;MXl3/T"E;V^x tree 2b2a34f4e9e0d71901631018aa80fd0a7d83ad82 parent 9b9f2e6cc2ba25addcc888a3ba66c12202830625 author Gani Georgiev 1673523877 +0200 committer Gani Georgiev 1673523877 +0200 fixed formatting JxMj0~BH.͵J٢d9o_|3;)TJf^רlmilHō#|wU9Hn9gJփ "]p͑Վ Dž\개Hv}VB )DRB+{GW8:8f9y[҇ۼKӦ]#ra ARiE& y-7Sz,xtree f25ea5605a14ab087f72fda7e917ff09aee460ae parent 5c79348885fd1ba95bcf1ad55929d3bd77c1d380 author Gani Georgiev 1673468988 +0200 committer Gani Georgiev 1673468988 +0200 added unique id validator error Pוx5tree 41830f8ae9a44270f466c62de64cd0ffac46efbf parent 89d836029ebbd299e89edd15027f5d4f35435644 parent 85cca1c73659a369d3d64aa6dae0be62a9404fdf author Gani Georgiev 1673445381 +0200 committer Gani Georgiev 1673445381 +0200 Merge branch 'master' into develop C_xtree 6a7e07dc66c9eb8ed4bff3aeeaae41174c9ff5f7 parent 61aba430c8002df25e184a4f49532eaeac705db6 author Gani Georgiev 1673441553 +0200 committer Gani Georgiev 1673441604 +0200 updated min github action go version to 1.19.5 Uxtree 78f0c95d32be4159fb4ed9a1b756dfde165767c3 parent c40056d77258e332d4dfcf271826b01697300b6d author Gani Georgiev 1673382052 +0200 committer Gani Georgiev 1673382052 +0200 updated files preview ui Lxtree 7c868cab8263fed2898490535ce87886c904728b parent 62fdd6175da7cd3b8418c45686534bd5eecdd35a author Gani Georgiev 1673357196 +0200 committer Gani Georgiev 1673357196 +0200 upgraded vite AINx%tree 82063127f4ca40202d65279aa06eb515af068d01 parent dd863437d5625375bff797aea80b3ce8732dcb2d parent 61aba430c8002df25e184a4f49532eaeac705db6 author Gani Georgiev 1673356447 +0200 committer Gani Georgiev 1673356473 +0200 synced with master JzXx tree 1bed3c7f7b2bae041ced089126eb56f32cffbdd7 parent afeac42d5fc6b661398bc7ae59bc45ac49a06517 author Gani Georgiev 1673296354 +0200 committer Gani Georgiev 1673296588 +0200 [#1552] unescaped path parameter values xoSxtree b00d24f030a7bfc9bea3357a111cd8cc2aa3148f parent a50c0c2d0736549aa94406d226b56915bb171399 author mjadobson 1673293287 +0000 committer GitHub 1673293287 +0200 [#1548] added PDF preview rDx tree cb1e8a27fe3b24c4eb5996ff3abcd05361d3ce5c parent afeac42d5fc6b661398bc7ae59bc45ac49a06517 author Gani Georgiev 1673292560 +0200 committer Gani Georgiev 1673292560 +0200 updated go deps Knx tree 476111ef9d90f827915c22bbed41787e69dcffc9 parent e4d9b417890144a8b81c62937be9965daf716d11 author Gani Georgiev 1673170339 +0200 committer Gani Georgiev 1673170339 +0200 updated go deps dIxtree 76d3b062e57631130c60c767545796fbd17d860a parent 8bd5948b2c842829966b5a1e7add1fbd6ff0b4f4 author Gani Georgiev 1673169062 +0200 committer Gani Georgiev 1673169062 +0200 updated rule field styles ]Muxtree 36b860d689b0741c0e0fec78e8cadc282e7e34ad parent b4afc3665f15e0eb3cf4cadb5f441f2479da1c74 author Gani Georgiev 1673168744 +0200 committer Gani Georgiev 1673168744 +0200 updated migration timestamp ,P7xtree 00b788a5108c6e476547edccecf1286d697052ed parent 4592215f214fb33f8c88aba1a9ac08616f141157 author Gani Georgiev 1673166681 +0200 committer Gani Georgiev 1673166681 +0200 updated API preview docs ˥L`xtree ecfd83c19f71c8d5e58a0e0b01bb20bf828dbe2f parent 5a500692a66a3321deaabd9975db31cc8bb1cc17 author Gani Georgiev 1673130309 +0200 committer Gani Georgiev 1673130309 +0200 [#1523] added Docs link in the footer >%Qx tree 6b26e3df059131b793e485dbffa35168c1662b49 parent 0f86a958844b5c58fff93d6e264dde07248c8bd9 author Gani Georgiev 1673123156 +0200 committer Gani Georgiev 1673123231 +0200 filter enhancements Kxtree 6c855bac46dbf05bbb7767ac0bbecdbc06a11149 parent 8836e19964b036eb155a01d6046f4ccaeb6a5b6f author Gani Georgiev 1672693579 +0200 committer Gani Georgiev 1672693579 +0200 updated ui/dist and changelog P x$tree 8fa25f7905a791d452a4cf06d24966689cbfa408 parent 8a095199e724cd539509467eacebb584ff974ce5 author Khairul Haaziq <101852870+khairulhaaziq@users.noreply.github.com> 1672693334 +0800 committer GitHub 1672693334 +0200 [#1469] added webp to the image mime types presets `Yx tree 1e93174b1324fa1daa71dcb025258305dfa27a01 parent c0ad8bf766fe36d3fcb865cc79f7836ce8bd040e author Gani Georgiev 1672498425 +0200 committer Gani Georgiev 1672498425 +0200 updated changelog 9Kx D|* $zw_mf, lҴDc|[NDG@DiCd.3fKz$=+dm'xs;sxnk_yDzݗ?|jZE~: rO*nwH, kof zpXxEtree d28cbf93e7bfd9839e3b8d7d720bf77f6c955384 parent 7e32d2d329680dce2c993ec5854838a31d83f657 parent 65c499f4db7ac6c83680beb4b5bffe2ec3f7438e author Gani Georgiev 1672491619 +0200 committer Gani Georgiev 1672491619 +0200 Merge branch 'master' into yuxiang-gao-gitee-oauth uex1n0S>6RJGa1k)`b?rRn+F @6+`0F``1ԝ2{WhFi`oMom; -H -Iە/?ݥdaVbz㞹=DZ|Β)\dJۑ ?RU*nB(%J *(GjGm1&^7V%T}>Q_~j˞xtree 9863601b94e592e94b50460af2ee2b5c1571b87c parent 9e5e848d849f7f80833cb3b4e81f08d937f7b702 author Yuxiang Gao 1672481149 +0800 committer Yuxiang Gao 1672481149 +0800 Update UI Signed-off-by: Yuxiang Gao Xޖx&tree 5656901ef1ef32fcffecaae50dc34ab2fab7012d parent 71cc31d39becf75e9a871d1e0886b3e0c8728438 author Yuxiang Gao 1672479996 +0800 committer Yuxiang Gao 1672480660 +0800 Added gitee OAuth Signed-off-by: Yuxiang Gao ]}x tree 2aab77993f18f57283396a283aa796481d8fa5b8 parent d9a2c05dff9e2ff180ad3d00551fe6e53e4d9680 author Gani Georgiev 1672477318 +0200 committer Gani Georgiev 1672477318 +0200 updated changelog 1Jx%tree 5a1007600f8f36459b5eaaf381415702e4495153 parent 33e7560fdb0eeeca723fbd599befb8b79480e17c parent aa25b3fdeb7d87aff778688e8647a1be19221c63 author Gani Georgiev 1672477105 +0200 committer Gani Georgiev 1672477105 +0200 synced with master Xx tree b4c59802edc7b0186dd9510bd95aee2fedccef7d parent 4777c9c96a21dca6db3002904ee1dd57cf71e978 author Gani Georgiev 1672474284 +0200 committer Gani Georgiev 1672474284 +0200 updated changelog =L1x=j1^Hi0 LHC#ivWF@j2FG Γ ޡY8I;5>:p`tNϋ6!YLTIbԆ 6QƵOίSΡ{QVMNxAsKbUoB|,JHpO>" 1672333087 +0200 committer Gani Georgiev 1672333087 +0200 updated changelog and godoc 9Ojxtree 36227e9868df2748844bf0e48922a300dcaac7c5 parent e440b300d6e73352ebcfde7e43d44c235c11f2fd author David Schissler <3968727+dschissler@users.noreply.github.com> 1672332687 +0200 committer GitHub 1672332687 +0200 [#1420] added filesystem.NewFileFromBytes FjVMxtree 649eca70d65bc071b88cfac1dce7326ecf677861 parent 97a4a896f96efbc766e80fa9c1b8f76222c47df6 author Gani Georgiev 1672259262 +0200 committer Gani Georgiev 1672259262 +0200 [#1416] fixed listing searchbar text wrapping U4x tree ce077dfe75a838df483cc801c00e0afeb02d5587 parent 153ec592ff080776421798cafeedd8deb8a5df13 author Gani Georgiev 1671890054 +0200 committer Gani Georgiev 1671890054 +0200 updated changelog KȒxtree 6f96784eab2c6520e53e3b137ed1e446c530222a parent 6b4fe91f2c66eb2f6b9a6cd207822a2f8fa584c3 author tenthree 1671889851 +0800 committer GitHub 1671889851 +0200 [#1370] added IME status checking to the textarea keydown handler ]Txtree 10719124da6381905bc891ea6dd9fe4395d83447 parent 20bf36fd69b253302c6237130c579dbf6c9f5df5 author Gani Georgiev 1671863844 +0200 committer Gani Georgiev 1671864008 +0200 updated changelog and ui/dist 0NTx tree 26b70b9dc162826e453a691c2fd783352cfa39c6 parent 339599ee9a10e3dadc4d6b712313a4cc2afb022b author Gani Georgiev 1671863682 +0200 committer Gani Georgiev 1671863682 +0200 [#1365] fixed Record.MergeExpand panic vQHx tree 7a3a1e6e87caae1287e9b5f9aa56b264a2a67ee8 parent 63265311b4e48ce9ce544c8511f225c238ebd69e author Gani Georgiev 1671718581 +0200 committer Gani Georgiev 1671718581 +0200 updated go deps 1J7xK0D:EZq!jr9@[j)[2N;PP K:F$6XdG\0M 19 S; wG2p*)u}Z#_hƺUk=R9k[WUH'>^{QoW.xtree 631ad9b50e1fcebbb0712ff3ff783c20c4add6f3 parent a39057ad16e6fd6039562caf0101d2b548517418 author Yuxiang Gao 1671716385 +0800 committer GitHub 1671716385 +0200 [#1343] fixed s3 file upload error caused by underscore in metadata WZx&tree a2eece632e0cfe48c01a0a3a7f487ed3cad551d5 parent b5908e271032a7a5e2aa51ab7a9879dd53f71693 author Joysankar Majumdar <63878173+JoyMajumdar2001@users.noreply.github.com> 1671643025 +0530 committer GitHub 1671643025 +0200 [#1332] fixed request verification docs api url [`xKj0нOvC9ZR#-i<dUjQE@F ܥ|oםvKu;̌vu/lU2o|]ڞPЇ@IRtYJx tree 23d38f2dce0e1615aff286300d2bcf5eba8a1ece parent 301757e8379006e839b263f5e06e69f37d666155 author Gani Georgiev 1671560763 +0200 committer Gani Georgiev 1671560833 +0200 updated js deps Ixtree 23e787c72dc965f71d5bbbcef84c0655cc16fa02 parent fcf4d4a39623b11f1667521f227450fbc343f0fd author Gani Georgiev 1671560738 +0200 committer Gani Georgiev 1671560738 +0200 hinted indexed map size A\M/xtree 8cf2e5795175eb065dbd0c45b92d9ef71df5ac8b parent 1fc123f9184fa86725ba147ba2f2c19819530537 author Gani Georgiev 1671527361 +0200 committer Gani Georgiev 1671527361 +0200 fixed changelog typo /KxIj0D>Ň,`!>D[d hgޕQkRj?&7ЊXs- kUNz:9{B;ש0Y1xKj1DsL7 |֨2-?2^U(j3$3d5Y;*e\Yb1a9I@IeQ9;TkRCY>~WR?N~םe+:>P#.3S3<π%tM:vT#4fS,\*xtree 5de4094ae915b90942c3f26ce8dcd2a4962481f2 parent a28187771638f3c368f4942317178f95d8f76815 author Gani Georgiev 1671364171 +0200 committer Gani Georgiev 1671364171 +0200 updated nested tx test K9x tree 3a878cb9d23a383e9824e93524f0efa036594b7c parent 46882b4bef8e1ec65f4af9394672270253a76aa3 author Gani Georgiev 1671356449 +0200 committer Gani Georgiev 1671356449 +0200 updated ui/dist =LIwxKj1:EC#YaP[3d4Mn-r,otfR"$T6H:G&` ;K<"4Ey^N.">:\b-pOX'?ZXnOP+mmYJ1^$MHU* *#m<^l pov@2P` xtree c0105ea373c92f535400e51e41aa2aa82d104e8e parent c477e58433d79136f144629e157b0b1024d358ae author Gani Georgiev 1671354789 +0200 committer Gani Georgiev 1671354789 +0200 fixed test error message oCL^xj0{=B!e@Iue X+YY:]|yT7 3Lo̠gCKΆ RVIoj\; rA3" NCIн{3g[./y)[ި\Oq^AYYb[Q!>z?`aZ{rؘzyQ _ѭ\_xtree af3356fb6a19681ed8dbd9ff6033602def781392 parent 43f5b3fe68847329cc2c3574c133b568cbf853f3 author Gani Georgiev 1671204268 +0200 committer Gani Georgiev 1671204268 +0200 fixed changelog typos Q6L6xtree c87da7254bd019ef476a814bf3ffad1e53dfad6e parent 9d2ed4bbde5c4b1c95f1e8e7a4620b2fd69e9425 author Gani Georgiev 1671203704 +0200 committer Gani Georgiev 1671203704 +0200 added missed IsDebug check 7O;x tree e9c9adb826c36189d41ab7f9d73a8101ba8ec96a parent 8dc64a25465131a1527e5d6ef3f14a9bbc521f86 author Gani Georgiev 1671203262 +0200 committer Gani Georgiev 1671203262 +0200 log OnMailAfter* hook errors in debug mode 6aSxtree 1b8bc21571a4361f0c0e2ffbcf0842f73749cf2c parent 0eb1a4566ee0eb015fbc201ee488cee1b041ac51 author Gani Georgiev 1671203163 +0200 committer Gani Georgiev 1671203163 +0200 updated linter JYx tree 9dfe4e942692d7e24176fca1306db09dc79a92ab parent 69f691551433d4f59304ed775e2d5737a392f62b author Gani Georgiev 1671201152 +0200 committer Gani Georgiev 1671201152 +0200 updated changelog ړJ<xtree ff5a291a9dc6e2cef9f103c3a8c66a10b6be931a parent 1f556d9c75e6a6a34fb16bfafe050cb17b7ca835 author Gani Georgiev 1671201001 +0200 committer Gani Georgiev 1671201001 +0200 go mod tidy uIqx tree 347c3298233f3dec4b68db69652064d61d309934 parent 92162a47c71c6adfe86901a538dd44a447198fce author Gani Georgiev 1671200882 +0200 committer Gani Georgiev 1671200882 +0200 updated go deps ?Hݓxtree 9e8021ebaa3b3b18ff9485072c3e7d104417e8c9 parent fd1827c9939d9ea7c37262472deb0358a03b1dc5 author Gani Georgiev 1671190648 +0200 committer Gani Georgiev 1671190648 +0200 updated base_test error messages Pxx tree 340f855e67907268c695d0d38279dbac858bfbd9 parent 9a0365a15daba5da88e64000cbe8735e6d6d0a0a author Gani Georgiev 1671188943 +0200 committer Gani Georgiev 1671188943 +0200 updated ui/dist _J)xMj0 F>NCnΡHjhz:Pzn>MBIN(1{'Fu 1671120631 +0200 committer Gani Georgiev 1671120631 +0200 defined Default* constants for the pool limits TݓxKJ1EYE t>/goJN({#g8w"L,S0b!"R ݝSXSڀK@l,QG#(7dٰs|* 1671014327 +0200 committer Gani Georgiev 1671014334 +0200 fixed changelog typo M,x tree 8230017a43fa846ed2102c4bcdf4c443b1a4176e parent 514594cdc5293d85aca7fc64bc7db52d68a835e2 author Gani Georgiev 1671013931 +0200 committer Gani Georgiev 1671013931 +0200 updated changelog JԜxIj1zE Cii-`oIUR zQ | љJgh 8I92)'KJRDmx%`lR·Hɖ,OXQFs{{y or:R;Ttf&3v@~T{W{x.</7Yx tree 8b6da84ce6c7841e213d2d09676f561c44688a42 parent 50eefb66232aa1619d4d00d8fa036fe1a3d207c5 author Gani Georgiev 1670927592 +0200 committer Gani Georgiev 1670927592 +0200 updated changelog YJx tree 3cb06d475ea5c4d99b71332755b0184556e56c83 parent aaea6e7d900524582b4a22b74cd9865a57754a3a author Gani Georgiev 1670924759 +0200 committer Gani Georgiev 1670924759 +0200 [#1217] add support for smtp LOGIN auth $PPxtree c54adada9091bd2fe743d0a5998696c413628ad7 parent f8dd6d594fca2aba76bd4b6d721295e5b32b1395 author Gani Georgiev 1670915334 +0200 committer Gani Georgiev 1670915334 +0200 updated delete comment (OM<xtree 9d9c10efb7685a46c76036919d75937f06d60ba3 parent 84013142b2bbb546d06a037cd707fb6903295827 author Gani Georgiev 1670915270 +0200 committer Gani Georgiev 1670915270 +0200 minor code optimizations G1Ldx tree 1ff0231645910bb4da5b8ddeb99bcd0c6c01ba24 parent 22d413c1a6f59440dde7cdb395a2a98597751146 author Gani Georgiev 1670866549 +0200 committer Gani Georgiev 1670866549 +0200 updated ui deps IxKj1 D>ABvsْ܆ n' s,(S]֜z ^X0[(=zYC\.NчNCSM\rd)/Хzvx!gM~Ny/Uwjۭ'X0zm }ELe2bƐk7*G&Cω^ _x tree f644a53f2fb0b2a49cc7f7617c1829f3aacea70c parent 017679ec6846945d0d91bb716af6ae3de73c8d4e author Gani Georgiev 1670865571 +0200 committer Gani Georgiev 1670865571 +0200 updated random_test ULx tree 0b90d91af76beebd57bbb85a769c22f49f8d845b parent bb1e5ef0e1bc9a420dcdd2ab7cbabc58c9a5e36d author Gani Georgiev 1670858580 +0200 committer Gani Georgiev 1670858580 +0200 updated changelog 5MAxtree 514713af2fe635bc87a440665093eaad77bd2fff parent 510959c316847623fec94645e47b0fa788687f34 author Gani Georgiev 1670858563 +0200 committer Gani Georgiev 1670858563 +0200 fixed comment formatting M xtree 3ec113d3a35bc92da77724398882f3365678fcfb parent e956bf82d1be3b684a1f6911999db13c5ca3a391 author Gani Georgiev 1670853536 +0200 committer Gani Georgiev 1670853536 +0200 set map size to the shallowCopy CtOxKj0:ECA˒`!Bm% lk:3"dYWŝ*F3\u9KEmvSފ;v:&N8ifhRp*-B g/^[nzk9R~XKlI?)g,J-8׽2?Rx[Mȭxt2JN2%ȕ4Aa˗xtree bb9bdee0c21089cb3b033b2f718ad2e59b89b998 parent c0f9abea8e363785d58b0c9dfe5cc49cd73fd22a author Gani Georgiev 1670786731 +0200 committer Gani Georgiev 1670790182 +0200 optimized record references deletion PSؑxtree b72e4ebfad215e04fdefc75f2d3e1e700d087e90 parent 561c0270f375c08767606097d1a1e2505ede7855 author Marvin Wendt 1670777755 +0100 committer GitHub 1670777755 +0200 [#1237] added security policy +pHx tree 4d4e973f7c05793147f97910604e71acb319c5c6 parent e55a5421b56859f941bb18e1fa07e6e71b3aeb13 author Gani Georgiev 1670772975 +0200 committer Gani Georgiev 1670772975 +0200 updated changelog FJWx tree 97c45d158747a3d13a436bf0943e3d0d44dc7940 parent c3e766499dd06fe47db8dbb9ec4fbe41e99176d6 author Gani Georgiev 1670772875 +0200 committer Gani Georgiev 1670772875 +0200 updated ui/dist nJGxtree ac989cfae8e93b068f3419fa3f0e497b2b2c1f35 parent c0b1bae24459e3e45f05b383d1012aa2a945d965 author Gani Georgiev 1670772776 +0200 committer Gani Georgiev 1670772776 +0200 updated connection pool limits lPGxtree 79068e08e6ef475b05e9f0f5e01e3d0fc9ee710a parent 30e2c1aa91f86298a7f1b61a17fb30746efbeee3 author Gani Georgiev 1670772763 +0200 committer Gani Georgiev 1670772763 +0200 removed comment and applied linter Qxtree 306aaa65a2aa85d485281a011aa90f38c4ca487b parent 573f6d272ac8d5759be4026a0771d93e1e11fbc9 author Gani Georgiev 1670772625 +0200 committer Gani Georgiev 1670772625 +0200 [#1231] fixed like escape expr Nx tree 58417731541bb2c7d03eb39e1f706aa088dad8e7 parent 498b9852744a0347af6bb089ba0d120e34e70b97 author Marvin Wendt 1670772466 +0100 committer GitHub 1670772466 +0200 [#1233] added health API endpoint IxKn!&|O,"=`;"7ȲD N8 1670713822 +0200 committer Gani Georgiev 1670713822 +0200 updated changelog #~Jxj0{}Bpt )'#ߏAʙbftf &ĸ(<.'rlS/Fއl5yQbV9H:Vs|7zqko'N:ŶAetppZJqڭHf 3:'ȭotzzFQ_.FI[xtree b89359e1fd908f9bfb31dc3be7c1bd18436d0885 parent dd65f1bc41e4b25008bfec63b8f995f8eddd223f author Gani Georgiev 1670700307 +0200 committer Gani Georgiev 1670700307 +0200 added NOT NULL in addition to the PRIMARY KEY SxKj0>EFߖ !d9AВZ@Y~ zTљ!nFjx΄HofucZPi kn>ge]jntq^5{>5 $:F"˴GqF05{m9~0P yn ik!Ytxtree d59f954063eb38e696d78a0b8183a976024c676d parent 65f81e10097d645047926e4fc4f3dac2b0e655f2 author Gani Georgiev 1670666939 +0200 committer Gani Georgiev 1670666939 +0200 optimized list.ToUniqueStringSlice Px tree 51b025a35e6633e976f8f7600cb052df535f3a8c parent d35b82545562c5cb2b601b21768dfb3d32b9abfa author Gani Georgiev 1670624652 +0200 committer Gani Georgiev 1670624652 +0200 optimize DateTime scan and marshalization j Sx;0{OB? ѱ'>6HI(gFY鵶ں\Z 8 'S .}Ա0m\>N1C˘G4Ɔa_(|Y;茵׆':v=L|$t)=ПR΍?,Di/d֞) 16&nxo6mfXTҒx tree 54cc4f758d010a965c8235120950f7d4ed15a4ce parent 05a6861c125e1ae4f0b29678caa52c3bde1c112c author Gani Georgiev 1670605944 +0200 committer Gani Georgiev 1670605944 +0200 updated ui/dist \I–xAj!E ˁj[!!B*;B8!Ǐ {oH|BG,N r&~6 ۮ>6eBlBBC]*>Gp]8|z hm.hժ)PO|\~ɐ Z峤 A_))~ 1670580397 +0200 committer Gani Georgiev 1670580397 +0200 updated changelog \K/xj0{?BʃC!!Bvm ,9(K?*)&4Z '#y4Gְ7Әn'5 K1İٹ`p$0pذLaYhSjm׵uZ(t7ևw[cbxNag?ߛT(TOA8k+&HO@.`>U:k`xtree f995ffed0bbf6e1ee69d000894e501d13275edbd parent b2f3193a5fe7344e327a3dd9cc4ee73a0dfd3599 author Gani Georgiev 1670576863 +0200 committer Gani Georgiev 1670576863 +0200 fixed record delete tests tNx tree 4018d97f6f991994e457f4b5e485df5bf3023b76 parent 77126dffc27ef1e9651b5561f6d7e4088ff49dae author Gani Georgiev 1670574474 +0200 committer Gani Georgiev 1670574474 +0200 updated changelog BJxtree ac4c28afb5118c124829d18729525f79ab8fd215 parent 0b7120aea7a7305b8157b067b69e6f228daba18a author Gani Georgiev 1670543357 +0200 committer Gani Georgiev 1670543437 +0200 call root record delete first "NՕxJ0{b-BI?/W'$l`.1.x~7#, 9zA5:d:hϬ}F@sDVGNrR=ez=Q["< 1670494697 +0200 committer Gani Georgiev 1670494697 +0200 updated changelog 2(K[2rןdd6r%luq>8tXԃ&wk:SLx䜓^ mEpI!1J\c=yYԶK'hccw4{\7c}j67q rg,s-/7\mx tree f106f65818220114b8d488d1c3672c2809a3dfb9 parent 44b93bfe1cca69f746110e08797f7297c8fc0f81 author Gani Georgiev 1670304073 +0200 committer Gani Georgiev 1670304086 +0200 updated go deps I x tree e3641d7471ff1981e72ec0eeda995e239e4eed01 parent 3ce894b847624854f6ef3d4a6a2ebd388a8af059 author Gani Georgiev 1670303879 +0200 committer Gani Georgiev 1670303879 +0200 truncate the original filename metadata cSxtree 73eea8094ea2c58e637a3c5b2f938b53cd60c3b2 parent c38c6572af3ef9395afe3586999824dad702c192 author Gani Georgiev 1670273859 +0200 committer Gani Georgiev 1670279530 +0200 updated changelog and ui/dist Ox tree 2604179295573d0c4810b4e05e603d661a3d564f parent 1ea6e7eab6f00500ea4c4b1b95ebfdf437d7e9c9 author Gani Georgiev 1670247258 +0200 committer Gani Georgiev 1670247258 +0200 updated changelog Jxtree 5507326005604a003f2a8926cf55810ef56362ec parent 1ddfc1c394f5793701362985102d5cfee0a480fe author Gani Georgiev 1670246642 +0200 committer Gani Georgiev 1670246642 +0200 use the executable name in the cmd usage doc ]PRДxAn @=}h09f HDd7 _lKf]BLQbLɆ'&Y9FJӔSaȘ6G>Kʸn+Y/zmL*c&]_7kv\?`ÆwwѼjoAohF+3tlё3%#iN0*eTB 㧃*+)RBMj =ѳ?J+W.5D~% <_~JzigcWx(4{LLSgKI19}̡=US7OzRv;cxJ0D .Gi "Gۛi3ͫo . Ic1H;Q3èֶ5Dx0 yڲht#2 {㍸uɅ"]|_EBJ+C(t h! PE;Jp9=э 6Td4_wl,9l`ešxtree 67b377800434ea296cf8ba1df831c4b5de4a0a75 parent c11ac49b3142583a3e6810807f11955ef66b20f9 author Gani Georgiev 1669991775 +0200 committer Gani Georgiev 1669991775 +0200 added error event hooks oLhx tree c8157f06b0fdd9cfd98274642468919f78ea67d7 parent 2e5e5f113674dadd2ff5800630694bc5a9d56704 author Gani Georgiev 1669983936 +0200 committer Gani Georgiev 1669983955 +0200 [#468] added additional realtime events Q˔xLKn sW`b#UQw9&ɀEp>,r.. i8 8O>2Ɍp%]ꀇ \[zgdFÝk;MyI ZqxҨnc?.(JNGn c:;9k.f8=;rUo[xn D{bD8 6R| Fr߇nfp'<=zjhibwTa+F4C*VΚ$)go k Gvʧ>v|ֹEZH)FzfDž)Bz{ɥ/m~ x6hvós^j;Dd}e]xtree be730ca24b738d6a5398bbef38e98befac1e1b43 parent 2ae4771105f135cdef4be0e337b432df4d231228 author Gani Georgiev 1669973773 +0200 committer Gani Georgiev 1669973773 +0200 skip empty automigrate templates kQx tree 166675cfe763bc7fd2862a727c9bff4c93429201 parent 312aaab15b3629de37b1d663607e8f6b659fbb4d author Gani Georgiev 1669919171 +0200 committer Gani Georgiev 1669919171 +0200 updated ui/dist "JxKj1нN4ѭii=#V )xEQCpisefqF&C:F2٢S>RJ f댧%ΙiuF x6r>܏/0ާdVDVk5ۣP[{V+K;+ta{= lO y7Yxj0 D bv ߡZ%t.23M8xkmkQ3 l54S wGuPC%/DD,:~DF$ 3Q]Qi/prx~zuɹ/oHһ1B(bxn7A*2lt+TTs0ECtڮ'Mz;۝I8MpfKm6`7x=  <\ ,OXkX\0.jĭeNDŽ\ v~R% }E^2{VYxtree dbfe084d1c80642b4f4c009851b2ce1615ddfd9d parent 52b7a8a86e369ade702e1a0a9943fd0245843b07 author Gani Georgiev 1669753703 +0200 committer Gani Georgiev 1669753703 +0200 optimized record references lookups R.xAK0<.%i^d "-l%{ 1669738360 +0200 committer Gani Georgiev 1669738360 +0200 added multipart range test NQx;j1saݭg{Ł4jɂYwax5:3$ttJk$e,R&DCų{ ],bJ2(gKr'RQEg[{\y/ o?|d+JDqK"i s߷>\ZJ:|C<>mUxtree 339188348e757ae7f64e8eab0ab906a1e20a69ed parent 14a4d965617aa0d93aba07a4f71367e1cbb6aa2f author Gani Georgiev 1669665390 +0200 committer Gani Georgiev 1669665409 +0200 updated WIP:v0.9.0 changelog Nxtree b3968f4875b8fbd56dd8a3d41c187d68b0255b28 parent 5415f42e7c6f5a42a3225bd305ba52983898ef97 author Gani Georgiev 1669658357 +0200 committer Gani Georgiev 1669658357 +0200 added automigrate tests /Lϒx tree e5a703b9993ead38e3107af6b90fd0820c892549 parent a0e1d08a064af022e1f2be9540bdc077c1ce21df author Gani Georgiev 1669584291 +0200 committer Gani Georgiev 1669584291 +0200 updated go deps DJxKn Ƙ(nцA1aHmM_4y5I*飱atg#ÃkO_n~By|- Y[$3ג$DR_ ZvhܒNtvI\x tree 0ee79771d1143d48676e27c9217bc7c7077f961c parent 1b8bed323df0a5cb30f1739858700b3d4f8e8f62 author Gani Georgiev 1669582858 +0200 committer Gani Georgiev 1669582887 +0200 refactored automigrate to be more granular Sޝxtree 40c0d29fdbe0b5c9b9d5a534c3c573c1be512c24 parent 472a5b86e35bc1a86f310f2e34b18b3e251682c2 author Gani Georgiev 1669496377 +0200 committer Gani Georgiev 1669496377 +0200 fixed typo K%HFxKn Fm>R4n@fIYVI喝ij7'#6spvR̓⅝ 1SdvӀE*G^*}{x+Qv-?I oRK)+3Bґ A\)>!RNFN#}sc+A oXNȽ] fGx1!s^1I0d9;#-b\aujx`JI3\@ 3btV ilkMN[Y֋[ 1En ܤ\ SkTӽ =zVku)_$ToaeGvuj 3uxʺKY xAj0E> abKc J.F2ǐ\<~o@SrYLd׀s,&!qظщF8JBI$: 'C?ȕ 6ko ҠF?U^x=N1@ާſc]1댍]''E(W5E[a޵5љT|H\">y.DyJ_@l)ZgM; cm gŷ5&\7Ș#zr;<0)CWmV=Z򏅪mM};F_i~Tٗxtree 65fa97cd758de0429ab6f233e3005512b26b40c7 parent ea698f2777e0bb0b504bed6849fddeeaba3b02e8 author Gani Georgiev 1668811085 +0200 committer Gani Georgiev 1668811085 +0200 updated dependencies zLǒx"tree a53aa0361f7eb40b5db9eedc82646f074190bfa6 parent 2ebc87cdf9a0851bf2e4916b8dc56b00d9f38385 parent 97c409acaaf09f71cfdf1cb7f6768c35ab87a493 author Gani Georgiev 1668807179 +0200 committer Gani Georgiev 1668807193 +0200 updated ui/dist VXx tree c127fddad6b3e4dac015dd7a3770260b9657878e parent 5bea8fc313c25609b789b00ba6e4ee1996c942ed author Gani Georgiev 1668775737 +0200 committer Gani Georgiev 1668775737 +0200 added autocomplete keys refresh debounce TFxn D|+Eڀ|Dz m"VߗCyS\ȑל4D)Nӊ.ZsS1~tPҤ8Y˜);d,k0o+RKϲs.@%kpڻc¬Ɠ6MB⇂mS˭5Uxtree a2e05dd45ef61d675607dfc127821405f0965cea parent e7b2140b6dc2514101f4f7152ce2caeda7635688 author Gani Georgiev 1668715591 +0200 committer Gani Georgiev 1668715591 +0200 skip number validator on zero-default " Rx9n0{b .%^;BD"6GE~j0Sr@Nd"ޠqH^ϔryD8/$J,%VH3bfECr=wn}-zuӏueRN-.J+5u/c?Snm@mO>c@Jͥ3 m'Ků@.GL/[xKj1D:ECZ !Qk"!Q 7U]RN7sDf.Rb\ eacxurcdY 1l6*Lq?wCZߊMnU.um4Yࢍj!P7~Ago/Ikڜ SznbV!x1N0{b%Jh}^bm}F%|R)f@"39YzA^Rr∐ ]DgW )Go]PP8TL|{&[6k=uZWi)39,ۓf>J+0:B[*h};юa~qmUxMj0F: a/C)h, l)>]0Nr<ZQHN"K-v`J*ijh֑xX \\KDz]_ .>P!e GB- hkϝ)+m{a ˧{zx\xj1{}B=4}ZBZ)!+\I30S̐RL:{b,EʘCH;,ʐXAA0"Vps8͇NC%Dm9ZwFKxJJqԥ_|,%3ĭ+>Z?X̓xMj0N1e dC.3#Y`[u7}{O~4~jc@ѣ։l&78;6;0rRnq"$&CPH } nIm .yòn0v6:8i:t+?*G7Ђ{GO5ьИ? ٽţFHٚכ8Ơuˢq(7è^@W}&f4>-){tdL:^RPtgCZߊMnTtQM1*oI[j*O/xS-윞J(Wxtree ed549ae7eb52e19f317228f36a68313ce198fe19 parent 8e3db88dc963d00d43fd9cf9bcfbe0b55585439d author Gani Georgiev 1668506592 +0200 committer Gani Georgiev 1668506592 +0200 [#1030] fixed auth collection rules validator W3Tx1n0 @ݧ б@@)2%E-:P" Vrd :?QBMl}Q1p  ^3$nk@%$95Ɲ} 2<+rO­ET}iײq]Oo`#r-[ComQ̇BmP}]54 WxM! av9k}2Q1̲9@ܢM[H`uQlZӦ(Zj|t! $iVA1jeG N%GpVF}B𝗼z0imP%lI`)<!-|ف -AY,&w^]xtree 9e6775c4ddf910a6b27da584dcace7d38873c687 parent 1428b588cf4c79ab02214cdc8b4286f69267a947 author Gani Georgiev 1668429800 +0200 committer Gani Georgiev 1668429800 +0200 updated godoc comment hLAxtree 8f37849422950e8292175e1a5eefda83e0a2c2b1 parent 3bb69ef4aa3a94afe4d6efcdf752fa330ce91633 author Gani Georgiev 1668342011 +0200 committer Gani Georgiev 1668342011 +0200 [#970] added Twitch OAuth2 provider ;PxMj0> A ts5#EPKFMJr.{E]Li(αI0!}H])R` V,{0[=z|rt8@Z+Wi=9=)?g^|b[>"zx31]1þ20M=v67lZj~J 2tYcRo lkӒ~_cjXxtree e8b1b73f5cfd4adf7753ee1feb12e41bba2ff3a1 parent 5d423fb089383ebd3ceec547d97d5d671b5e2b17 author Gani Georgiev 1668337506 +0200 committer Gani Georgiev 1668337506 +0200 [#979] added Kakao OAuth2 provider yQ+x1n {^}N'`)*_5AH^rFCtgu.D){gb0prDZiO|":cl3i jc&v+Zc| top&\<_| \1d1ExVkuإ!X430c;qˮ~X"xtree 00bb4e5be761d3a09696d3771cf163c25c6c0a38 parent e86f34e54769596f8a106d7249308348c6d4b04d author Gani Georgiev 1667933611 +0200 committer Gani Georgiev 1667933611 +0200 updated api preview docs LixM!F0Uvi i ƞ sY}x"h.]ptdjICNKd Q LfΓcn}ZQw9RT!弇/mVJ"+M` 1667905070 +0200 committer Gani Georgiev 1667905070 +0200 added wildcard realtime topic support RÕx=j1F=@JѿV`B:"iFA=73 e 昝Z;&krTaEjy>AV'M6PD( mR)|l+ynkïҰ>ik A W%rX??p'ytl Oe>; 贓/VxAj1 ~`;څz;$Kb)}z9D /T")9cED !yrf! 1yOuNB9刉>\axp>*wZ_xZ{mXSnYR >[k^9 sSpW>Z{;V6|c'XLxtree b87fbdf968e2361afd3f2b8bcad54f6257d5fea7 parent 60dca3adfc362b8e4309cc746d2e027edaff9aca author Gani Georgiev 1667741743 +0200 committer Gani Georgiev 1667741743 +0200 fixed PseudorandomString Pxtree bdef64890b442bde3ae5fbcfb27a081ed8c02e82 parent 60d49c6c4da519bff6234a04103b44e4fb980dda author Gani Georgiev 1667741456 +0200 committer Gani Georgiev 1667741456 +0200 init pseudorandom seed Nxtree 4d9f4820ebc04099f95f2079020bfb415031f89e parent 6701636cc33db9a62b5ffcea958a23b1f3018adc author Gani Georgiev 1667741321 +0200 committer Gani Georgiev 1667741321 +0200 renamed PseudoRandom to Pseudorandom 1Qxtree 5197aae0ba656c31f33a41e2e8fc44c5ccae90d1 parent de3c727673c24b49f7c03be3354d6d8130684818 author Gani Georgiev 1667741194 +0200 committer Gani Georgiev 1667741194 +0200 added pseudorandom generator O&xtree 2245a0eccff7f92c29b79d23952f5504470548a5 parent dac1efdb731a67df03bcd36db1a7508205c7db3e author Gani Georgiev 1667725444 +0200 committer Gani Georgiev 1667725444 +0200 added record.PasswordHash() getter Q9xj0z~lɅzs#EPKA]@ߠa0:r@rٲK>JXӻu^MI22w$\D/mY>ƭ }'}/J.cHӇ֚U0CX!w&}z>g>@x_u=f^M[vxAj0 E9AVہRsȖ1$sf=UH/( iT#JH+Lgyx򡻁,,nֈe|m\ ˓,~{7k?j|KoOm}>) q@Z;XuU>M7(MW9Ζ=2lWԕxKj1D:E@0m% 4a,Q7UGckl0Yj'$Sq){AWh^)%C-dlp_O^&,U~L7kľ]A{\@ML:|P#C 'hӌAI@Y6&W)ŴGcL{x,_ ^NYոWNӨ` F& P]x;j19r0K`g'U?i^ J20m`%Okadt&z] u\%.1Wemt 1667468219 +0200 committer Gani Georgiev 1667468219 +0200 updated api preview docs պNxtree df2d2d409d4f59ac3b4cceb14b37d3aab6f923fd parent 279c1c55935bb6e8ec5e1b58f91d5db1deabdd81 author Gani Georgiev 1667419710 +0200 committer Gani Georgiev 1667419710 +0200 updated go action min version fQ.xtree 046640f91e5f16579bab8d3228df231a2f95ea67 parent fb0aa76eab8036cf29bdb84dc678cc55a4ab8d92 author Gani Georgiev 1667418767 +0200 committer Gani Georgiev 1667418767 +0200 added missing time import Nx;n0{boXkD " ޛ)ffHDJquĐΓL؈,v&k-f$/*i%-Z49^s> 7T~w9q)S6v7򢜆/T[3gW8/Z2ڠt2 f ^<ra `<xtree ed027bf7f4c8c8746810e797eaab75130c94561c parent 9889950cec8b32cd7260ce8d28bbf3f5a5e6d7ea author Gani Georgiev 1667332958 +0200 committer Gani Georgiev 1667332958 +0200 updated db pool limits cM6xJ0F} .1iWq7!"77@4<_0*G 3)#sX=E%lyÎsfL&6fm#GJGCV*\1'rK; 1667315166 +0100 committer GitHub 1667315166 +0200 [#887] added Spotify OAuth2 provider PxKj!ֶ! Y9SFmڙanAU5b o2,ɻ-ݤuƜ-g QȴNJ1F,P/A'ewg^FKaޮ[FxZJ1mc?%= O{`J3l 00\x tree a6a2f0b5a6590dc0591bdebebb0ab4ba2783a11d parent 92843dacaaad210bccdc257d9032a84c1726da94 author Gani Georgiev 1667243830 +0200 committer Gani Georgiev 1667243880 +0200 [#746] added microsoft oauth2 provider dRxtree f282014e36928f6d7574eda1c6378f5ac60b22ab parent 943c47a441bfd5f07fbe9c9803181fa3fc988c6d author Gani Georgiev 1667118822 +0200 committer Gani Georgiev 1667118822 +0200 added pre-release note Lxtree cd5385e620bb9a00d650e7ca30906bce397fd12e parent e4d7595550d0a6d8a9f55214b5a43505363a6a37 author Gani Georgiev 1667118494 +0200 committer Gani Georgiev 1667118494 +0200 initial v0.8 pre-release LBxtree d76cd59a8085fb51de6ebe624f4ddf9cae593a47 parent 63f18e7fbdec2875046bae3eca250a10ae2e8f23 author Jan Lauber 1666027064 +0200 committer GitHub 1666027064 +0300 [#794] fixed comment typos $Iђxtree 23aa0cea2f0519cc08cf2d586bfdc93cd3e4c6e6 parent 1a6687a127ad0c753f8152c0d26eab9097b3aec7 author Piotr Rogowski 1665984116 +0200 committer GitHub 1665984116 +0300 [#789] fixed typo in realtime debug log c?P!xKn D>E#M0(nѦ 43Vr "բ^ZqFcmFąhDQZIx癭3+ ^fI_\վJ =\p=w?+-l¨MMJ }]KkpT"UN:8[7<:7T˱^s8>7axtree 647bd3e5de08c20815c8ba119ff58b0bdc0f29ad parent 49590757ed7a7a57305754efd887c957fc73aa8e author Gani Georgiev 1664744184 +0300 committer Gani Georgiev 1664744184 +0300 fixed formatted date reactivity 1664707139 +0300 committer Gani Georgiev 1664707139 +0300 updated code comments formatting oQxj0лbǒs-VR7ׇAO*dL1v4POn16ƮqТg c,x8]R9EJR`S E6,^q_5!acxtree 65687173665aa971209fe709213ff9e74a880ff5 parent 64ea2776f896cd54333fa7ad9af8ffa20bb8d097 author Gani Georgiev 1664703494 +0300 committer Gani Georgiev 1664703494 +0300 updated filesystem tests Mx̽j0@]OqchWeJ)dZX:HqQ>3 :~g8B"\| dp`HRy4AfKf^;qQJ~c$4FLyB.eop gR^ߖ- 0aDpu?) l*5?Cߡ_D-VWW>T۟xtree 99a9995ec709371161d09b7225104cee984b16a2 parent 5f0ed5613ca4caca481dee9b660d05ec1dce44b1 author Gani Georgiev 1664527178 +0300 committer Gani Georgiev 1664527178 +0300 added Open Collective to the funding options Tx tree f9b02ef2fa5f97d05af01240e34026a50f7e10f3 parent 646362188d30e7c39b0dc7b3b7c3f8876c291959 author Gani Georgiev 1664445298 +0300 committer Gani Georgiev 1664445298 +0300 updated ui/dist 1664391318 +0300 committer Gani Georgiev 1664392644 +0300 records listing optimizations 2PQ+xNtree 5ae99057be6a8b8f00020190ce27a69fd29a7f10 parent 6bc2ed367a5d2b004429e184a41d4883dfadff94 author Rohan Verma 1664389550 +0530 committer GitHub 1664389550 +0300 [#661] serve css files with text/css content-type Currently, css files are served as text/plain by the server. It is not trivial to detect css file types similar to the issue with svg files. When the css files are served as text/plain instead of text/css they become unusable as stylesheets in the browser when served via the api. In this commit we generalize the svg detection to also detect css files and serve specific extensions with their respective mimetypes.Јxtree aac8580cef71fcea4cdb1c041a9e12948493a873 parent 39aacadc466fa320d55e18133361ee46f3cf6b9d author Gani Georgiev 1663868120 +0300 committer Gani Georgiev 1663868120 +0300 remove OrderBy nil variadic argument BRxtree 00a24378e57fd7827b0f03659d99e1af4dcbd4d1 parent f69693adbe8af978cd1cefd81452dadebf0dcb0d author Gani Georgiev 1663867430 +0300 committer Gani Georgiev 1663867430 +0300 replaced empty slice literal with nil Sx tree 26d45d02a64a4dff65cf2b1d1cb55eea9287b6d1 parent e70fd124f6240a17610837eaafb47345020380b2 author Gani Georgiev 1663867097 +0300 committer Gani Georgiev 1663867097 +0300 unset ORDER BY for search count queries Qx tree af1190cec521dac0a2efccf217f505150abd7fae parent 5453b42ae66239e033733141eb271953eef4f319 author Gani Georgiev 1663782135 +0300 committer Gani Georgiev 1663784963 +0300 updated go deps J x1N0E{b$Jȱ#!նb{kVp{RpF;P`ǙyM bJ$yI].s\228)BIrԔ`DIU.j"I+_J}L};+ܩdYrXRK)F{ev)?9{v­Sg~^TH ~rߠmj@ᢾ_]HxStree eb656dca76a137c78ed15eae7b8afe31f02f7d79 parent 0aa39b81bf31153fd4fa05bf2baa547b0ccc108c author Aaron Schmied <67342944+a10d@users.noreply.github.com> 1663755206 +0200 committer GitHub 1663755206 +0300 [#585] respect the EXIF orientation tag when generating thumbs @see: https://github.com/disintegration/imaging#incorrect-image-orientation-after-processing-eg-an-image-appears-rotated-after-resizing| xPj! 9a GZmgq\w?&,RzPP͝2igIeV-2md#3&E^$n`>fkE ~8Pj}+6i{ҏbOwxvVE 1663480191 +0300 committer Gani Georgiev 1663480191 +0300 updated search provider tests OOOxtree 9f02a42ff9d549c869a8317c32bddb5040a36702 parent 6436fcedd9a548a7cf5d17d2c03690e365ebe258 author Gani Georgiev 1663479702 +0300 committer Gani Georgiev 1663479702 +0300 raised MaxPerPage limit to 400 cNx tree 99525f7d807ec4710346091168befe5d0882e958 parent 361f89b686a95bdd17847b6b1c0196a83829e32e author Gani Georgiev 1663455438 +0300 committer Gani Georgiev 1663455438 +0300 updated ui/dist `H͚xK D#E|Q4 rvTzޘAٰO.ioUtd,9*m1O=.QL># 4%I9#QܨdqmK?^^,v󬬇/Rnw? KXP`x8xs-˯vHhc~CPY{xj E~Ń. Fg`(G.zI7A7=pF(h#M!xg\(c+:;}PfMSA6xaK`b%_:etGK7ݖ//F{XGjwc 8|$Ӂi S*vPDi4vN?Z^x tree eaea94694b9964812fabc5c7d515d9fe9e3b4c89 parent 21752497c9a802d1f16c01fc65071efc54c5606f author Gani Georgiev 1663450172 +0300 committer Gani Georgiev 1663450172 +0300 [#478] preserve multiple selection order Q6Rx=N0{IH+;+Q؟EI f lT.9I[kHfj͸fs6(dsKu>A9Ie\ Z1>Z;oh})xm9R )ҳ4R2oON]ߩԽ}?+otu 1663323842 +0300 committer Gani Georgiev 1663323842 +0300 fixed readme typo ;QKxtree 16f546be724b5dc0d7fcbc9007728e8717e95c5d parent 1b6d6f5f92a8cef201aa72aadab6b65a3369131a author Gani Georgiev 1663322788 +0300 committer Gani Georgiev 1663322788 +0300 added note about pull requests P[xtree 4379e225a6e97394906185fca5b2dcca54c3c1cc parent cf6136cf41afaa39a75dbd5dc969b33215fc2e8a author Gani Georgiev 1663316371 +0300 committer Gani Georgiev 1663316371 +0300 [#488] added X-Accel-Buffering:no sse header cSxtree 65d7f8484d8b7ed46baccad2de1ddb91e3e76128 parent fa5b075a559ff196e4b40d296218797318522d37 author Gani Georgiev 1663316295 +0300 committer Gani Georgiev 1663316295 +0300 [#470] added --pbPublic flag M'xAj0E:@]ƒ,J.(4#GĖQRz:t=R, nd(植4j]j.4Q cddE~i;8K"wx<>TSj8^Zv-?z s]hE }3PeXZB>nnkťnjz L/]xtree b7521ead36645c08b21e4ff11790781c16883e78 parent adf7a65b48f2fb426ec397cffa289819c204ef5e author Travis Ray 1663180272 -0400 committer GitHub 1663180272 +0300 [#446] Fixed spelling error on Realtime API page OVxtree 3523e8366095416b287180d543871bc0795899c4 parent 57fd7ea483c2adc12cb480e830d9450f15dd3107 author Gani Georgiev 1663177960 +0300 committer Gani Georgiev 1663177989 +0300 updated ui deps and generated ui/dist PpxAj!fZa #Bv;ªu!?ȱ`n(6F$l1zDU;q:/amfY+%W`T5gD!m)-t̽Q+p>r//rr^_A[j:xVRikXޟ`;C%Fw(2Qi `;jx,[{x tree 4f4cd22e9bc24603268f999a7c2b616c48abddc1 parent c90e1c58e44c34c9cd56364b64ac8c03373f16b4 author Gani Georgiev 1662839666 +0300 committer Gani Georgiev 1662839666 +0300 updated ui/dist J.xtree 04c717f9b0b5604c0bb5959414d3ab5f9dca01b9 parent 1dfdafc8b8dfb2fbc2144d16709055bcfe31d73e author Gani Georgiev 1662839597 +0300 committer Gani Georgiev 1662839597 +0300 [#409] added pocketbase.NewWithConfig factory yUrxtree 31222dd43eebc131d7fd7020860cbd1a5e0ad37b parent 87f89337f379d22833c5e6b65c781137fae80092 author Gani Georgiev 1662724459 +0300 committer Gani Georgiev 1662724459 +0300 removed commented pb.Bootstrap() code 6QvxKn DG| )cDmaP6xEn]RzclV`f49'g֢b㽃Qzϫ0F-6iRA9 hpǽ =?-(ޤR ⪄  R!6^ ucizq;H4=Y8^}8 h^x1j0E{b 24!$ Y#G,"7H>M-65r.!!p<0بvnu03{'f@F3KN>eGƦS:Q"BQ6x+0ImK'.ޗ?|_V.\7M 74ZһB}Xo8]L.Ϗ+MyH+[v\_DVx;j0E{Aʀa,`҅ғ#%QGEv{9Ap*E{*5DjFq\fQ{r6)x$W,Tۚ^ցuǼM'mGCHl=NH'vEtr[-mqb= Rذaϵ_mZxj0zF?,A)BｕVڕ#}7fftf 哖A1$+2(y\ą0͒OuL8Z5&J^ \<;N끯krR/vz8I#m-c?& X`c<[}\:v$+_Zxtree 5fcca884c00af8485b91747277e7d9ef50a3fad0 parent 29578a43a67832669570ed5a2aa0df22fb424567 author Gani Georgiev 1662571865 +0300 committer Gani Georgiev 1662571865 +0300 [#396] updated tests helpers 0MÕxj1{=BʀI{ 8TBv}>NAV ofM|{d̬SmW>t$`AB%f;E&sD% *G'V8im˪?_?<..rs@jfز0/a"*ֶqQMmN`d돥MB7,-w 1662118841 +0300 committer Gani Georgiev 1662118942 +0300 [#375] fixed windows console color output {Rx tree af7be615dfbccf37e1d08b78d68cc3c54fbebeca parent efe6c391ba4c629e88aac3afd4c9ab5fee119ccf author Gani Georgiev 1662111959 +0300 committer Gani Georgiev 1662111959 +0300 fixed comment typo ANxMn 9FHj.9CP'1t޾^X6i[BL*+Z-L'uIhoq-A_w:"Ѷp}uQ-ps'fgA~ V+ "8I(c?"&#H-Jw;OH9~[]`! (=p,Q,rJ5cbxtree b4ab6e26452ad15c85a6702013d48eb7951ea293 parent 34064b8b6519fd389c91758a064d99b341b4bb31 author Gani Georgiev 1662102756 +0300 committer Gani Georgiev 1662102756 +0300 updated sdk Gfxtree 21f4f53bee206e13747dfec6a2a96108ba571568 parent a1e367f162c7867e1afcc19b7b81ee744bc01a3f author Gani Georgiev 1662102036 +0300 committer Gani Georgiev 1662102036 +0300 updated response messages and rebuilt ui/dist /UxAj0E: Ac# J.kFPSrtM\r3Y^RE ɳsӽ`C~ μ8kmK|.7~/H4X΍a[]0M+'\Ao鷷̵mܡӼecV}xtree 7ea4dbb3026f35e07b0936593ed2396f0ece295d parent 6f5265981afc9f0a8b87fa83c16e046f910f53b6 author Gani Georgiev 1662039966 +0300 committer Gani Georgiev 1662039966 +0300 [#33] added Twitter OAuth2 provider Pcx tree 7752b355d0eb395b8cef486d3fcd73747980b3ed parent c58f6cbc426560a4716ebdc2b2ae6518d0e6e08b author Gani Georgiev 1662036540 +0300 committer Gani Georgiev 1662036540 +0300 share auth providers UI configurations ySUxj0D A#ɆRzGV#*KAC>?2ra̴ Og9q6`h@czFCFqʹ򤼴| hUЮcFIƏh,i,poR9…K]"?k˟eŘNToPjM))EwQ!_8@X2)n 0sg2&ط>w &^!]x%tree 6e3534f72b0a2cc6e84690eb11a0a08f7b10a9ee parent 945a767c0dcb991692967a1e214fc10c3fced889 parent 59b94df5cb0ba1021e1c03d09fde7c41bf25bd02 author Gani Georgiev 1661970797 +0300 committer Gani Georgiev 1661970797 +0300 synced with master JYxJ0D .<4 }ͽ4)iԿ7~9 L"`R`k8ZT VȈNUrQq1gɼn4ZlrFu/F1]CٞA#jNO.(5tAK8Pe➤. qŒ21q{ ZI׿i{ixKj1s, F-i!L-Y6@neū,JU0YEjupA,STBSl1k%4a5N{+mR 2\TsW@ck$X;bHkށRqCUK>V`~khaiZxtree 929db2780ef5138ce158d78e82ac45d4c041f95c parent 03033ca1d8dc79823a1f82ef9f431faffd0dcfcf author Gani Georgiev 1661486422 +0300 committer Gani Georgiev 1661486422 +0300 [#351] improved mimetype sniffing FQxtree ae0229e982ccd4ba1b864cc2f8805611b6a34294 parent a6effa0b801d02c69f4ed559b7e032895d715461 author Gani Georgiev 1661485594 +0300 committer Gani Georgiev 1661485594 +0300 added auto html to plain text mail generation TÕx%tree 2c5cd1c3cff7fd26b35e903f3348df51ed089ed2 parent 18017998cbe950ae02e20722a81dbc1abdbee247 parent de69360dc855cc966dd9fe1a99be7ebf57f8164d author Gani Georgiev 1661435428 +0300 committer Gani Georgiev 1661435428 +0300 synced with master %uZhx tree bccdc57142989712b8241f3a5789d29bf2968618 parent c5271858db63f1e5dc6fe4f8da18eb67241bd290 author Gani Georgiev 1661415232 +0300 committer Gani Georgiev 1661415232 +0300 updated ui/dist O(IxAj0z a-ɫ[>+P[Au?qfO% D#3y%QJJ>h"/]w 1661414270 +0300 committer Gani Georgiev 1661414295 +0300 increased max allowed token duration S&xtree 3146e83ce6804b31ef94d28be996874cbd5eae45 parent 7cc50e326ace1b00967acc4e2f36a7660d082fe3 author Gani Georgiev 1661099922 +0300 committer Gani Georgiev 1661101478 +0300 [#335] added Discord OAuth2 provider Pxtree 71acbf374cd5f3b1db7fddfa4ee51380f830f125 parent a3011a0200eb35be94101b2c1cdd14a838d9fdc9 author Gani Georgiev 1661082453 +0300 committer Gani Georgiev 1661082453 +0300 fixed typo and removed unusued import %/SHxAj0 E>`DzPC.d[N =$jt އ nvDXH1 Dy .]AR]8ILSX-(P2Oݒ| ƽMƾ6zeuyc{G<[o9T 4wRktʡpxȣw˽!<>m;ZxAj0E:@aFFUrBblAlEI_z{{S&VzJJDy&sk.!&Ghx@ކl/Ygm.yyrݏuyb(Vһc|hS]3멶oiY/Aݡl7K]4T_xj!>Eڳ@XrG2: y7ȥdqh$],M^&WfP.(c5IR̴1q>" 0v9QT#P,TYË 1660971437 +0300 committer Gani Georgiev 1660971437 +0300 [#282] fixed "real" user ip extraction ŘQxx tree 35849697cb70e6725646fa951f3764901a4027ea parent a52591e069e3eeae564fb143d754b1d509898b29 author Gani Georgiev 1660964216 +0300 committer Gani Georgiev 1660964216 +0300 [#282] fixed X-Forward-For ip extraction Pxtree d6e65b1f9aac61e7c93ff8165f17ae7738135c53 parent 53ce83f43832cf2dd26e71dae05e53eee93c6e8e author Gani Georgiev 1660845917 +0300 committer Gani Georgiev 1660845917 +0300 updated test data.db LzxKj0>Ń.AK rœ޳,ʅ޾^RR+ "qN^C^#[vu@>D?;ai5k dVCgclk2-xMxO;rmiplBLxaM cc8!1 W>F F\c9l=\7sv`x tree 32567999d11947f2ac346a7367a3ddffdfff1f4d parent e6011fb0bc3084e03113248cc2e77af758452ac5 author Gani Georgiev 1660843927 +0300 committer Gani Georgiev 1660843927 +0300 updated ui/dist with older sdk version Rxtree 8c986ab58fe21630b4eba2f9daa8c34e8927ca56 parent 8059357448e4164fd97604d573545181ddfbea5b author Gani Georgiev 1660831842 +0300 committer Gani Georgiev 1660837527 +0300 added hideControls setting MN)xtree cafcff67ca7687c15dfa2e461a9e673376064327 parent 2f3798eb341740229b11262c68816f052146c86f author Gani Georgiev 1660825665 +0300 committer Gani Georgiev 1660825665 +0300 [#282] added the "real" user ip to the logs LzQxtree fd012d322ec5f1ae96490003f3df5b4ff3599bf2 parent 33ca01acbc7acec8ad9eb61d91009146bbd72d1e author Gani Georgiev 1660764730 +0300 committer Gani Georgiev 1660764730 +0300 fixed typos >Ixtree b1ecebce3b73379fd399e9b8ec088be31b2575a0 parent 300502a9f694064de947b3a4dcdc1a5126149298 author Gani Georgiev 1660764551 +0300 committer Gani Georgiev 1660764587 +0300 [#87] added additional thumb resizers ]Qxtree c14e93cb1e05bc2925b40d79db9d1e447403e21f parent 072d3115a3829c5266180651bc7c76daf50417e2 author Gani Georgiev 1660646279 +0300 committer Gani Georgiev 1660646279 +0300 fixed settings clone test fMxtree 921c49dfda2b59e59c637b5811195bf50e6e4be1 parent c91ec0de205479e407a35b42bf0dc1630b7e2fff author Gani Georgiev 1660624575 +0300 committer Gani Georgiev 1660645952 +0300 simplified mail settings ui O#x tree 68688fe9d4c3ca3cd4ccf1f871b8692601538534 parent 7430c0a76e10ed819639f7a6605914a75c723e63 author Gani Georgiev 1660592274 +0300 committer Gani Georgiev 1660592297 +0300 [#197] added now datetime filter constant Qx tree 8fabf11ebc4ad434bd4a9dc556e6e5abb85f8934 parent e10d5de95fb3e4a429af2bb0c18ee47326ca2cce author Gani Georgiev 1660588921 +0300 committer Gani Georgiev 1660588921 +0300 updated ui/dist !7Kxtree 4d3a60b99bc4001172ba92202902143b78aaa52c parent c1c64484f5d23cdcde4c829634021818d1c7bc44 author Gani Georgiev 1660588285 +0300 committer Gani Georgiev 1660588285 +0300 updated SMTP recommendation 0MxJ0E#i̴/4%ùp2ƍ3ljMC"ƏAXy>ZkDgw9*<^*pKpRğp]Z,yɘK, N[Z6'B?t$bR@<)9}1Ƚ]3y1pW>`%R/ockxtree d4c9019817c80c8e72542f94de3dc679ffdfa986 parent a78d2a880bec59111f3ced8beb8ce6480cb17bc2 author Gani Georgiev 1660313316 +0300 committer Gani Georgiev 1660313316 +0300 [#302] fixed admin reset password email link 4Txtree d481d56eeafd0eaca155a5805dec0b85d7c9c429 parent 61e067ccfeccf5180858888656574cc4bbdcbade author Gani Georgiev 1660296611 +0300 committer Gani Georgiev 1660296611 +0300 updated vite dependency %7NxAj0E:@ ɲA( if Du7}љaB 9Ϥ)gDOM"E jK.#:m]٨dfs JqoniqErGIglFg'=i  컬nƝ!m[7,YZglv\x;j1{⇔!!B Jkdǁ L1s`V[@^d XGJ\@YD@a5^6d!sz1z Q*Zz.^Zy;)6;G'iB|h?)1Yg=zکv ^{Vh>ԘVxKj0@: a,C ݅Hcy9~]|kz]$q0:>apސڨB䳴!ԟMSXIOJ7.5 ?3xo |e1Qvνj',[ OWe iC(sQxN6e\Ǜx tree 2d0695c8f8246d9ea9776a2c8d41c89e51c77baa parent 4227a09364561b4295c347cbab138715c6f23565 author Gani Georgiev 1660206781 +0300 committer Gani Georgiev 1660206781 +0300 updated dependencies and rebuilt ui/dist Roxtree 9e932bacad3f2d9e469fcfd513587461c40ce7a0 parent 204938e780d37c1b7adece2ba752b2924892fcfd author Gani Georgiev 1660202941 +0300 committer Gani Georgiev 1660202941 +0300 added custom insertion id regex check *Rx tree 8967f10bedc6e23f802c876911b9a69b5d48b487 parent 766e5cc6ee01b279efbf3586953206e49cc106cd author Gani Georgiev 1660194787 +0300 committer Gani Georgiev 1660194787 +0300 removed spacing Jx%tree b1d62ca5eaf0f1932f1b1faa5c2afd47049c785c parent 5e2620332b784753da5faf9957030ccc5d383e3d parent 43c84cfbc93379e941505d3806c10335a8b51b3f author Gani Georgiev 1660153993 +0300 committer Gani Georgiev 1660153993 +0300 synced with master X“xtree e79b469c0dc795b3a923c06a252ccd6ca45d2c08 parent 4e45a0906c83d8aed4a6785e61877e363266399a author Gani Georgiev 1659510973 +0300 committer Gani Georgiev 1660153532 +0300 changed btns transition to local Pxmtree fb70a987459ed461873790806496ef9cfa0c688a parent 05405c15a57a16267ea9627d98bc9b4f553d63f2 author Olle Månsson <31876997+ollema@users.noreply.github.com> 1660153252 +0200 committer GitHub 1660153252 +0300 [#288] added info about the default 100x100 thumb size in the field tooltip Co-authored-by: Olle Månsson !t8xtree 3a2f3d30d2127ce318928f3b4c01cf50fbbc2bfa parent a9e03d3047d068116bccb48270ebd13e04cdf637 author Gani Georgiev 1660153061 +0300 committer Gani Georgiev 1660153061 +0300 updated test db and ui/dist ZNwxKn!sGH@`g"U5ii)Ym$z^4x_qArT=7i^a6:ֳx^}ŸO?ȍJ F/o(cb;&C*_ ed ^Ry^+U><\w\bxK0D:EA?d!%Ad337Uޢ !S8>9e8֙7q:i&"E. )hK68;yL0Ǥ#>I['Vzuڨ;DmE7E;i[T(*5>_;[fgQ1Xx tree 56de96eb71a32006899cf16b71ee29d0840c0a85 parent 32ff09eb063884e0d1cca3a00864796fc3162fc7 author Gani Georgiev 1660142588 +0300 committer Gani Georgiev 1660142588 +0300 removed unused lib (JxKj0:ECoCsm"Or8dUT{8i`yCcj5R0W֪Q}@k?H(5.hQq+ExxsKoO?rQC@m3ETWe Dž:R V ZU jSK5Y x tree b47670335e3b1c50a0946162cf51d0e961fa1902 parent 7fe6b2a59705d0c2a6c07b6f711a078d8450f98d author Gani Georgiev 1660126947 +0300 committer Gani Georgiev 1660126947 +0300 test deleteMissing with schema changes Qxtree 8eb07c1776aa260814515c4406430bb756a17e08 parent 90fede93b185ede6995b3971d30e3c0674d82da3 author Gani Georgiev 1660057052 +0300 committer Gani Georgiev 1660057052 +0300 fixed list js example K@xtree 9191a6e9b02ad47f366dfea44018652e8a18da8c parent ae8b24c8d75add2fd91582071d97081fc60fbe27 author Gani Georgiev 1660054822 +0300 committer Gani Georgiev 1660054822 +0300 removed duplicated method NJxOKj0oD. d@o_͏F5 s~|!z3Ʉ33 zER&dM8maK.tEZ*̫ 1660050969 +0300 committer Gani Georgiev 1660050969 +0300 added version number in the footer 1Qx tree 4cdc4abf562d0c210279111f6941bbb906f16cda parent 360e5e238987c23373693d8dafce5a4c6e08b008 author Gani Georgiev 1659978886 +0300 committer Gani Georgiev 1659978886 +0300 fixed after hooks )(JȐxtree c4d409e8b5cd1092797cf11f480c88e30b72d515 parent 981fa765e068bffcfdfb38b9e10aea99a698d536 author Gani Georgiev 1659975393 +0300 committer Gani Georgiev 1659975393 +0300 updated tests SIxtree 129ecd84ea8c9bc8969ab021de4cda575ef9ab27 parent 03428c4b54a526cb0dd44572b1825f061612d7cb author Gani Georgiev 1659895101 +0300 committer Gani Georgiev 1659895101 +0300 before updateding test data N˘xtree db1e7ab8b99c43cf57be8ba68402188482f37e68 parent 278025138b09e5988c760dee436adec2d8a5f9b2 author Gani Georgiev 1659875901 +0300 committer Gani Georgiev 1659875901 +0300 added WithConfig factory to all forms mRxtree 6ae30b3ad015677b48e73c5abd6f5a8e0d5a2aa6 parent 3942b0e80ac318a5286cc3ca5f6f16b9fb9ea007 author Gani Georgiev 1659860089 +0300 committer Gani Georgiev 1659860089 +0300 updated export/import form OPxtree 461127688fa0cf442b2c37b69389e12a2646613c parent 707e75111b56b4fd2cab25fcecb57d597cf25031 author Gani Georgiev 1659813418 +0300 committer Gani Georgiev 1659813418 +0300 updated admin and user upsert forms Pٓx tree 7d26983966a00d76ca6dd3eaf578e93addaaf7d0 parent fec90bb6af66a8bce0df6c377aca6ad5ddf32738 author Gani Georgiev 1659801568 +0300 committer Gani Georgiev 1659801568 +0300 fixed popup hide bLix=n!@SL_)"r` iYV,E)W9Ơ Z"ٻd1ܕ/i_i6uJq>9,&K0 e#m?} 7cK^RoWPFCT$J)NmuNBx tree 29e909d18a3c0e95ca43392956a7d43d0a2c54bb parent 9c3f57faacda8227e7eb40893c0acc03f11c37bd author Gani Georgiev 1659762214 +0300 committer Gani Georgiev 1659762214 +0300 added ImportPopup Krxtree 3cad661fe68d0241fd2d70a822b43c6ff93b9980 parent fbd259d3127d6c13ce3a17b865ff4826e87583cb author Gani Georgiev 1659731116 +0300 committer Gani Georgiev 1659731116 +0300 added page export and import Nٖx tree ba21513b9c4cea3969fef7014d76231970414f45 parent a91276d3a49e6fe007b21ee8e7e1a3f4c885d7ce author Gani Georgiev 1659668438 +0300 committer Gani Georgiev 1659668438 +0300 import scaffoldings >Kxtree e26981cd09b015774eda8ef1c52ce8dab4de9b74 parent 4bfbb81a5eee6df7e9dfb6b63a4b06441d39ab15 author Gani Georgiev 1659533184 +0300 committer Gani Georgiev 1659533196 +0300 updated base model comments ?P4xtree bb6ecfb3c8b57830b3d8dc32adcb6d243f6fc889 parent 05405c15a57a16267ea9627d98bc9b4f553d63f2 author Gani Georgiev 1659510973 +0300 committer Gani Georgiev 1659510973 +0300 changed btns transition to local ]uPxK D#E|hv9Gmsa17=JU22F^6 zS C2娞4&8q-څb^Hn 1659465102 +0300 committer Gani Georgiev 1659465102 +0300 fixed datepicker clipped input borders rRxtree efe7a2fa4199aaec30b23ec62f44c7deb89b9047 parent 955f8a33b279388432f325ed19f19201c2195509 author Gani Georgiev 1659463023 +0300 committer Gani Georgiev 1659463023 +0300 switch to stable go 1.19.0 ͳL5xtree cceb0e90af129c33645cd0ba12d3278f85279fe1 parent 47bf29d020286c94b1770453d7a69d3505d65bcb author Gani Georgiev 1659448814 +0300 committer Gani Georgiev 1659448814 +0300 updated sdk to ^0.3.0 ;Jx tree a29196d491e64a86a547808b17ed2fe73a358299 parent 955ea1715ba40caccc7cad2aff9afaa4c007edb0 author Gani Georgiev 1659382214 +0300 committer Gani Georgiev 1659382214 +0300 fixed README typo JАxMj0>'Y?ҬB@k Į[O ^rJBCp:_x0>J5oh@1װ5>]Dxtree e00931f53a4e8651dcef9f7b7e50e296d2d0af65 parent ee5c6d2a6a9f869c69526663bde949eea69217b7 author Gani Georgiev 1659376386 +0300 committer Gani Georgiev 1659376386 +0300 removed no longer needed ui.DistIndexHTML var oaU4xKn DьE9h0Xin' |WŃ+24EcʺD0fqNڈm ٪ 1659366618 +0300 committer Gani Georgiev 1659366618 +0300 added default admin CSP Lxtree 95622897b31333503276398723afcf054f26602d parent 3c5f335f2fcc3825e228631fcb11353636eb00ed author Gani Georgiev 1659366006 +0300 committer Gani Georgiev 1659366006 +0300 removed box-shadow for image-preview modals MRxtree 0cb63c4f1235ea5092040e211cc33f5bf2724607 parent f11a483feea2411b048e2037caa5651333c5c42d author Gani Georgiev 1659352821 +0300 committer Gani Georgiev 1659352821 +0300 [#204] fixed query string parsing =Oxtree e88cb7da6507eb9e4c9304890a42b5956741b2d1 parent 8ab196144bd96a305335a9a3a7bf8bc5532ca363 author Yin Shanyang 1659338946 +0800 committer GitHub 1659338946 +0300 [#250] added armv7 on linux as a build target wLӜxtree ba9161ac36a4a6c06a58166a67c5dfe764a906b9 parent f7bc2326b51e3064eadfc5b0ae50ace3acde50e5 author Gani Georgiev 1659299309 +0300 committer Gani Georgiev 1659299327 +0300 unified file field styles e.Nxtree ebe69e0a11dd0f129cefd948378a7eb96a2b0e1d parent 972562b970b401231c8fe83a788c8b2e9d47d281 author Gani Georgiev 1659298858 +0300 committer Gani Georgiev 1659298915 +0300 cleaning up no longer needed ui helper methods Uxtree 6aca438209c1285a7aa2e28cffee7e0aa2ad7e94 parent 69e00dab313fc1a3de71ee02c59948feb81dba6c author Gani Georgiev 1659282771 +0300 committer Gani Georgiev 1659282771 +0300 [#238] removed implicit select items grouping *V9xtree 48ca133877e9f3269ac4e0a06769ff4e55856390 parent 6a7d89fbcbfd6d66f63c4c9a813877d96c49b670 author Gani Georgiev 1659261905 +0300 committer Gani Georgiev 1659261905 +0300 added dart-sdk to the readme J4Nx tree 01d8492a1592df29cf91f76072d3bad69cf5fa88 parent b67e66deccd0e6e7329b1f0f732c1607d011f34b author Gani Georgiev 1659257466 +0300 committer Gani Georgiev 1659257466 +0300 updated ui/dist WJ_x tree 0318afd27a8f915670dcf1692f6afb8104e2e892 parent 02077b74506ea37feebd510f3558035c40c8d3a4 author Gani Georgiev 1659204018 +0300 committer Gani Georgiev 1659204284 +0300 added Dart to the api preview examples 7(Qx=N0Fb$J?q&C =X8e&+q{T+^Igюhs*f84 H1:6Y-CfoW3\K״Q.PГ[˸J ݲ#1=c!'Y"(^@*t.$HyV~]Vv0|d{xA0z7,-Y,!c) ^9A47Rd<N QZ3:9,٪mv0fDO޺`<Y:2(i4~oh-p"OyRs[. x('yuK]P(bg-C:@YT ޕT oUwxtree f53a14492fbf9de8af3b9dc19e1fe4756cf01387 parent 1bc6be36999598e927ac80c87b4753fba0ecee08 author Gani Georgiev 1659157344 +0300 committer Gani Georgiev 1659157361 +0300 updated admin ui dependencies ]P xKn!D-߀dE|4#B,!Rn{6Qk(lF 4)ÕݸJeN?MHyma@!=}ZQgYx+].- t cmS^uNGB0w됼&ųkB笗@I7 dWxAN0E9*7 TBpq2I,9N;z6#f&LDP\rXy`Ҽȴ2R(U &FHQ\j"eC,CɵJ'8~`Ʃ3t.e+]|%KUHp2ƒ&GEi@kIj !pƓiytwtM=L<ܓ&y]ZD 1658837830 +0300 committer Gani Georgiev 1658837830 +0300 [#228] added target=_blank to the email links Sxtree 608c676e6329390e238fa5027da8ccb4694e1bb6 parent eea4bb083cefef82c8b742749f4ba3be61713c44 author Takeshi Sato 1658675093 +0900 committer GitHub 1658675093 +0300 [#207] use read-only scopes for the GitHub OAuth2 provider :IUuxKj0EZśVBg+[tU ;.vJ4cIA\H,A n;FŎx/C9 ىN.VN^+]SOO?)o7Coi]jkx!7G?W!f~TWj3h-YǓxtree a47de2523986baa485ed5f3d22a53b3541f90a06 parent c655dda080b11b70c67bd0892ffbdbdebaff4a45 author Gani Georgiev 1658397486 +0300 committer Gani Georgiev 1658397486 +0300 simplify the svg extension check xQxAj!E},CmT!9DȢZK#tۃ4@n{|ޘAYhԨtJD3&vfz!RAtƵC0Zc0% e k.Bt޿W\<=oTKط7hVY B 1 I+l A*+PZ*83UKZUxAn b,000Rf ƋyXicUJ3,nAGGi10Q4&:SCg8Ѥu$:∓*S 1658248863 +0300 committer Gani Georgiev 1658248863 +0300 [#166] fixed api preview examples Nxtree b777f0d5e34295b2f0d85ad78bce8e3387cc0482 parent 6854fdc27739e06353d79ef27d80aed2934143e7 author Gani Georgiev 1658240698 +0300 committer Gani Georgiev 1658240698 +0300 run tests before goreleaser Nuxtree f13d6da9ac245bc3efdc9a18577c89f843d7e109 parent 9ad41cb79c5da8674dfe45c68ed2ece79f5847ec author Gani Georgiev 1658240614 +0300 committer Gani Georgiev 1658240614 +0300 updated tests JѓxAn Eb"llp*.`jn_ ?Ic) j?0D=-]@BhQظhvnvO1sQhX9oU3Cv2WOYk; w-et%G1o ;/;›6Zݳ#6l/|p 7΀$xۯ*ӅG1qP5vcx͊!>EUXBny8wc oR_A̐Kֶg}_q;2He<#aڽ{Mi\\ ۵C YxMj0 F>ˁ`(C.d[IM:Nio_}O}2C2JLqu2Ib YB,Ɯ!<G:GC!zAG*-4^Ӷ:z0pZJѧW 1658216738 +0300 committer Gani Georgiev 1658216738 +0300 [#156] added forcePathStyle to the s3 config Rxtree 734efefcfdd34e900174bd022dff2d0022ccd742 parent cdf757a003e97d444b0c0b4b5c5663ac8866a63b author Kenneth Lee 1658174454 -0400 committer GitHub 1658174454 +0300 [#163] fixed migrate down cmd nO"xA0z,Y K[1֌,eq`]4tf퐐`izeK(;WN ZlggM<<%)<:ܰfqk_^OY7vi; _WgeDŽB"&;;Trcj$K9J#S;Vd,P c^ dxtree d9d737d3d838f964ebbe3996a5c36c9ddd786c65 parent 482498ed805aba4382d8b47ee424b10ee0adbafa author Gani Georgiev 1658152311 +0300 committer Gani Georgiev 1658157030 +0300 updated duplicated field name error vRtxMj0 >"I CnΡ؊c,0@ ] ڍZfƙgj|ɮgnCfn˶Sjn{t=3=lލpCF4ZrkƄuN8’k#,Zk*E8p=w "Xx tree 5a137fd4c9747f1471170a166fdd130913fb91bd parent e713a6d2058c9504ec093340afee84e404bd6dd6 author Gani Georgiev 1658142445 +0300 committer Gani Georgiev 1658142445 +0300 normalized null handling in search filters {SxKj0D>ECa!Bmelk9D d%)qhܔR#ZIO;Oy2fn" Z'bNګ9Dd7%kslmyrжb9>@y7*3a0q鱉ΆbzSN}L$@V& W"Rr,5AvnO@❻cP`ؚx tree ca910f0eed705af1727afc6937cb9b1aa16b40f9 parent 468d9d9a17515794893f6b9e7f2ab38c59da96cf author Gani Georgiev 1658135067 +0300 committer Gani Georgiev 1658135067 +0300 [#151] remove files on cascade deletion dRwxtree 77f538e491f794d73ea67a5624a9ee3d715122aa parent c2d00a30e398aa0be177d498839661a6dce45196 author Gani Georgiev 1658095389 +0300 committer Gani Georgiev 1658095389 +0300 applied some of the changes from #149 Pnx tree e11376ae630d722e20355a56b19c260bc9d26d42 parent 6bb3355de7c6dcf6a2030bf6cef420816ce3107b author Gani Georgiev 1658093336 +0300 committer Gani Georgiev 1658094953 +0300 moved field option btns inside the panel SxKj!EC-?Bf, ~:@v9pF(Jx;h7zڴ^Y%7f)!Ơ8Qio%j;=Xx981勯+-w6-{1 Vj;1o 0ooTh4f+:Z纤sδ 0'uaqxKj1Dsޛ jBhZ`F2#oeUљ1Fw2DZ$w)f) m*i$ruCMF[tY1-YFJ*kB?:\r/|)r{;›Mz%2ݳo 9#vP{8 1658085640 +0300 committer Gani Georgiev 1658085640 +0300 added golangci-lint action M؟xtree 36ca54f949584106bc4c5641bd8d9a05d0f1b07f parent a36684add0ea9a64928b24f60cfeede83dd033ee author Gani Georgiev 1658079192 +0300 committer Gani Georgiev 1658079192 +0300 [#147] added CONTRIBUTING.md M*xtree 4eff11ff33fd4b804b8221ee6632bc332d6c4bb1 parent 6c1b7b95df74f92e6a17174e5e859e0e8821ab77 author Gani Georgiev 1657961851 +0300 committer Gani Georgiev 1657961851 +0300 fixed figure tag typo Lx tree 2ab218d2115815c7c355f889a23ff0d54234ae98 parent 75f1119fac124c391af5a317f498b255a26bff84 author Gani Georgiev 1657961694 +0300 committer Gani Georgiev 1657961694 +0300 adding video presets to the file options dRxtree 31aa1edcaa5f447c74a5f5a0f57ac8e9260c733d parent 3e8639a10efd806b526b51a4963c4465640fc302 author Gani Georgiev 1657957204 +0300 committer Gani Georgiev 1657957204 +0300 added invalid form-group styles Ox tree c953196ae89c94a9341efc277f58379c201cc358 parent 7cbd1f02d1681e36b6e7fe97f7f52cee534e0c9b author Gani Georgiev 1657957159 +0300 committer Gani Georgiev 1657957159 +0300 updated EmailOptions domain input tooltips / Tx1n!{^}$ E=X8$,sE~j4S,fp\ b hLz3s,%iC`GrdOhgo1{Vc.xhj|KoOoi?` :c/mVW=cAr9^2Ջe' ƫIdBVVܝx tree d16299c645a56ce821deca19c3ff0b123e1fb4dd parent be47c47265bf40004987caf68e11611dd55cd36e author Gani Georgiev 1657903050 +0300 committer Gani Georgiev 1657903050 +0300 [#100] resets the initial loadList results P};x Y0g~埁ׯ 'AYQWxtree 5ca84e9c8e98ec20a0e9557b03fb3c7fc6d5a444 parent 3f76e42ec8030d497835f46b5f91e5a37c9e3a2d author Simon Krauter 1657829873 -0300 committer GitHub 1657829873 +0300 [#116] fix BaseModel.RefreshUpdated comment KOx=K1,#&I@DDJk"~@vrMaao5<30dciEF/:F/{8&qxl 3w!^ zbq(%:}3rW|4Ӽ5BΨнTRnkDŽxk>()_i{L(WjJGo!) ׺kHsXexOj0+^lGZ(|JRl()%?zhLb>"zMc)ᛚlb@o lNNwBh_6VTx/',+rIu{}p.of4f8U{G񯈁2K}鐴E@S|ns}i] hѲuMrcxAj!EԱU!9GMU`qd?*xG]JI,.%!-\o Jk339fŜ4a::ܨUתx_'^?\wۅbZol:c 4}VP桮$t[/&G;9VIxtree 4aae275da52e9ff02fc3b5f06a047fdd6dc8ec08 parent ff5473a4049777e4ba6c97c0c19d6f56daf33e6c author Valley 1657815968 +0800 committer GitHub 1657815968 +0300 [#114] simplified some code by returning early and added cap for slices V̘xKn >EXi>(n0cEAT7:4J.B$zZ@m0[ V:qBh"ZzRQ,Nj'f89~7Lki-MZtEz^su\yHɝۀFgŒ+|GbȮ[xtree fae95f7f80aaaea0cbf317d5ed60bbd58147c8c2 parent 4ff79359bb29f57c10c54d370c78e33fb366d5c5 author Gani Georgiev 1657805982 +0300 committer Gani Georgiev 1657805982 +0300 added store.RemoveAll() helper method lERx tree 5b4081d35b4e5a1d43358f7db8df8bb6364296d7 parent 072314ede49d30e52fce4e1660b1d66f64be3f74 author Gani Georgiev 1657788755 +0300 committer Gani Georgiev 1657788755 +0300 log the response error not the handler one SxAn!C+E0 0HU]w(RaF"7’=:@#kiFJX:x'VJ-˖=bI`Ssn ݰ\<+K때w!l&ZK_jfZB愳PG_ G,h WXx tree b52bdd6e2d5d66ac8fe676d336c5f522da329e8b parent cb7059524e8c52dd82a622d602a62a04882f8faf author Gani Georgiev 1657741499 +0300 committer Gani Georgiev 1657741499 +0300 [#99] fix AutoExpandTextArea scrolling Rx tree 70cb2fb8a4dd973ffbaaa0eff9646d6ac5f9701e parent edef81a6d782d65e77ed4d083ff0ef29c3c4698b author Gani Georgiev 1657691318 +0300 committer Gani Georgiev 1657691318 +0300 updated api preview body params col sizes kUxtree 966f7b0fccd230feade55e0671943fcd90fee8eb parent 3d2de22a3cba79c27f9e81af53681b1aa120b4a3 author Franco Profeti 1657689145 -0300 committer GitHub 1657689145 +0300 [#93] improved the README for no golang devs EOjx=n @SLiͿEl^ {ǃD.)ghq&E&iP [2*+j Fo&^{U`(c+p>B_y_W,߷XqV4I%n-"!m`P4'so5K~2< 6'\nE.?/Y;x {b"kYt.߁aH\Ҍ4SLfkֶ.)vƠ 5c.7A=CXїyDKFd⢦MV%ۘpOG;:w<XE_jw`R)\`r|nD2@6qa£ҏT˹Txtree 642100aa9f30d38d16b7130635e0f6d827c13420 parent fd075fb9464214b0a1621f3b590323de9e06caaf author Valley 1657644729 +0800 committer GitHub 1657644729 +0300 [#89] simplified some code by returning early and reducing local variable scopes Xxtree 41e06d897e557897d55e706344ef61af5ef98960 parent 645cc476b576f6ffdbc24e302172cf1d98050e9d author Cornelius Müller 1657638537 +0200 committer GitHub 1657638537 +0300 [#83] added refresh button to page records view TÐxAn Eb.#E )!.fpPc0z |Kޘa֚QIڨ]$[0H)*Rظt'INAN={TVkizgw,\ۚuuÏuƺdJe"b[1!>)0ATã;$]{8a+q"~`xtree 9e636650a5339588144bc07f5b4154cf44ab014d parent c3fe7847310dfdf5e8345f1e283086b2dc4f6a1f author Valley 1657601856 +0800 committer GitHub 1657601856 +0300 [#82] removed version cmd and make use of cobra.Version 'O<x tree 1ccb056ba0b8b49629bf46c4cb08aa7753aca110 parent 20b74f02a038f2caa5ad9fec664e94761eb44422 author Gani Georgiev 1657567402 +0300 committer Gani Georgiev 1657567402 +0300 [#77] add warning on storage type change RxJ1D %LD-^O'=$c6?E #[C;M1X4{yO>aʹ#& 1ʤؑ "Ӭ){; 'N\ Kˊ1BY@;;í2J =]ckO {J_c/^. [-^Zb^-8񯒘2|?nxMn b,0 ˶AiܾD |?^o@䐭3b&g%JrGh\;0Y=E#!Ά0j˨$lQ~\C-p- 9-sBY'ڷPVRnwB8Z s~^qP4(;WsTr!(5LÚn'dܐxtree 6e389eb9c6f7f55b7a6f420a2c4d9205d1c76957 parent 93334c23c522f18cfa7030e38a861a0bb996b94d author Gani Georgiev 1657524634 +0300 committer Gani Georgiev 1657524634 +0300 removed the v prefix from the version command TxAj0E: aƲ5]1F R!Ѣ7s̬Bk *%+vK󌛢yJ!0ʔثl*+EɄ.3 l&%Mk۳>u?$?.[=4 -{(ĨFk*ZpߧߧrX4oX xtree fdbb070936c7f5694167a9a4779eb32e50fb1606 parent 64368206ca379e145ae337000f7ab62c00923238 author 毛亚琛 1657524415 +0800 committer GitHub 1657524415 +0300 [#69] automatically add version information 7OQxtree 00f9b1285cafcbbe59361684afbcc53e24df0dba parent b8594c3a013468ba9286500500b4d4586ea91078 author wenqingl <86453680+wenqingl@users.noreply.github.com> 1657514198 -0700 committer GitHub 1657514198 +0300 [#62] fixed typo in README defintions -> definitionsV=xtree 7dd1e3bf2506501c7029da5066aa27d832dc8f14 parent 0f4e01fe8520c59cde3ed87f5cd36c93d2ead25f author 毛亚琛 1657476424 +0800 committer GitHub 1657476424 +0300 [#60] fix list api docs example Lx9N@yEKkCZ!M=d oqT*9!9\ɦdoke|fQ<'.bX jphkLtf/d8r\78?pYO?|]wlT&SÓvZMP>|(pg74&1ҹo HyFEi T} 83Rq]xtree 0f8d4990ed95b346a1716b45104852cd2b8586ca parent eff45a1b30639fb3d505ecec82d4ad2f027f64d5 author egor-romanov <58992960+egor-romanov@users.noreply.github.com> 1657453251 +0300 committer GitHub 1657453251 +0300 [#53] fix migrations register in framework mode {vXxKj0>ECmg!!gY 1657433624 +0800 committer GitHub 1657433624 +0300 [#47] fixed some doc and code inconsistencies and removed some redundant parentheses z]Wxtree 84878e6d8762eb7a7ef0361672d1e7eae8caad08 parent ff5873e4b191f0325bf834f1dc5715b2a585e771 author Valley 1657376261 +0800 committer GitHub 1657376261 +0300 [#38] added lint and used the lint suggestions Lxtree 6e30e8effb87999dfd81d73a8e7ceee1b1a38ee5 parent 02ecfd75df135ffeb4c7b4eaf9f15817d1cf8669 author Gani Georgiev 1657354595 +0300 committer Gani Georgiev 1657354595 +0300 [#32] changed step value to any Pxtree 47564c7d931ab23325df2c1cd1c0deb2ab967f42 parent 3c0e43cf41903b0471f9915c2f0974ab8687e59f author Gani Georgiev 1657353942 +0300 committer Gani Georgiev 1657353942 +0300 [#6] added note for go1.19 on windows P9x tree 68fc4e9f79c93fb336668d5e181aab98d60c4000 parent a2e4ac5d43f2e60babfb54ed02e372e58156b936 author Gani Georgiev 1657353441 +0300 committer Gani Georgiev 1657353441 +0300 [#32] allow decimals in the number field }jRxtree 8228485f125b59520da1c3c137303d33fb83eee3 parent 1614cfa5c3454dc7fa73099508f2eb21831e55be author Gani Georgiev 1657317190 +0300 committer Gani Georgiev 1657317288 +0300 fixed typos hGxtree 7287372e5476277a41ebb8cdb328cd8f9dcafdc2 parent 320bb553122ae1f97beba0ce5fd39b8e2eaadf3b author D <49444980+dpthegrey@users.noreply.github.com> 1657310963 +0530 committer GitHub 1657310963 +0300 Fix: Typo in comments (#25) YL9xIj1D:/f|WwY-(r>Z^xU=E;9JqfϺ 4;W$J[G6v%ɛqQ2G G[J ]p\Mq7.0;)NޤRv+ yWjIQֹJ/oSB 5(Sxtree cb8f6679250f5b3fc279fbf1efe14f22e8a0d535 parent b1d166c35a49a04dada8ff26dc6f8a9691159b6e author Gani Georgiev 1657274940 +0300 committer Gani Georgiev 1657274940 +0300 [#18] fix sidebar overlay issue "gP5xtree d7b60dda9a2309c2e2e762634369549424d3ce31 parent 947a3569755a0f793fcccf307b0c81b818a5332e author Gani Georgiev 1657265423 +0300 committer Gani Georgiev 1657265423 +0300 fixed typo in comment Khx^tree a1dbc81ec58e4fb151fbdd673906034440a4577c parent 84bc93c5296a394f5bc459b2604f90fbb76ddd10 parent 7b16f942998a46459f8d8e8fd5799e216fc31ac2 author Gani Georgiev 1657265359 +0300 committer GitHub 1657265359 +0300 Merge pull request #13 from brams-dev/master Fix typo in PageTokenOptionsmxtree a1dbc81ec58e4fb151fbdd673906034440a4577c parent 84bc93c5296a394f5bc459b2604f90fbb76ddd10 author Bram <24355695+brams-dev@users.noreply.github.com> 1657263989 +0200 committer GitHub 1657263989 +0200 Fix typoF!x tree 1ee3e413832278ae777325b2f2d3f25259f9616b parent e4b1154a4240029076b256f3c4a008b7b5e4240a author Gani Georgiev 1657227025 +0300 committer Gani Georgiev 1657227025 +0300 updated readme and paypal donation link %Qd x7tree 0352272aa0d948130ccfd39f942b3fb68612746b author Gani Georgiev 1657142345 +0300 committer Gani Georgiev 1657142345 +0300 initial public commit >:mxe{8Tyl!ixXK1$ՈrYkt99%6mPMP#yS."F6nY]v=~?τⁱl8v4hF-vPvUGu泸sP>A wF;&o5_;(Kq`ATl`a(9<ͨ(du6 "Coɿx'W~x)>;lO"rG: NIy)9!s[jG]}9`F# h(c%^ŝ; ׿o3sc/sae=cf tvNTBZ/J>i>^^Xƫ*:M?n_Y=biWp30#LF?Hg̜baɑ+jA*`8 Af'A@>wCtnE4|ތoE\ Ԯ+ }oĥ*_?`,R 33~ 4vJu DzϦ4Lφ0 fqNu脄oDo/ôqxV[ܗxJUm6 (g2nqy:yYi/`A^@a 'IV?2e_RZP0Ɓ鿟%DKڰnkv$jEI>Rз^=z>N7g`dZr3.pT.P ٕZ!N,9, 4&2 JfWG^($qg&(w=aGW"8#zcל<\ 컊5VDozU~,StjeRc zr+ME*cV@CSԳgy9}ѷb2@$Zߞ:W9?ŷ=*bp=,k/$ ~ç |60"VvmȊBODJPF.tYS#zHRѷ<KK[`L ʳD,.I9YlJsm/j6)cD )?W;lpgT nU<>j 2vr7kW^HUv2F@^#PErÍ%h&?"9((zfSiגJ׊;J<M@ a† W׋O;k)-]]\늽L Pr+u? V=IJ͋Ƥւwz-ta-U \7 }Ɲdλ'-EM$B/sӨjɲn# PWvLeJ-_JJeS?K)s @hzGTj>b8ڴ0|oJ}妲z0ri%e< %p 1xn^3^a5x'>x{WsKSRD]鬕Ny"k$oJ"{åִzㅦ/|8F<_i?1$=vdRɟK,Y}O̢gۡ/&޿誃A2l\]Z8׹$4]2y;F ssv4'g1 2Z<^SAe7Jn,!qMϖ]:bgNɚ+rԦh?/:?Mǜת"2/ݬ.'xqlη8!ff&&0^Ccm:޳]g>x31쒢bcf֚yXѿ ۢx343TĔ<ݒԼJ5m/nh&` yU z7bw?'n,#(_,4TF-,˯htamwrˋL)IN r5%;+*c)vxϟ-p`]iAyzvs'u Id%x  xZkw۸_6t-WN}tۼI ! %{?@щĖ@3sΝa S GG5UQmJ6:sW|4FYj\s\6]au\k]Fajm?T 3խrںo1Zjtmluu*Mi t0VKmlLk)?xl鰥5GG+uzUZ_-'Զ饭9mFopn9 Nm]Ywt~Y[| VWmx/*]nw7!lw=O RK85nyo'UųK{GtJ-N;7U>(X6_,/ߪsZ!Is1GF] :eğ;sUڔrM@} @JE}oj {p 5YV=IyN7Nq8 lh !9򠭪E>*94z&}^+զY2ayW`4 *󿿔]aN>GGg[#]eάuWF8sVΊQkEF@W8C:->Ytx c 10=~RxsYcz6]#nѕ2P}xin$0:|+)ߦphqz`Z52 nP FߥDILDХ$Jm`--imȩl΄kf#1S~ޞ^~x)oz]au}x aӹ~w&ً^K'=@?R8 (2X=6n' W / =mK`ݬa^,hX+ WܱR03{,\e 4ƔG5kE6V7E$:\ȵlC<4zIn;tjmk*B ?44++"*~ٹUFIzGS-M/!^_d4&GC,2b#<^( &f@_f:r#=;E8َPч lrh%Q~4@V(5 ¤)Xa%2DK#^?/.G!-:8&c y }槑B\h /x~7$S<QTRe]U%P/yFJJVށ"A;8s; 5٪ X \XlZ\t+]Q%蝢Q VewnTԢNL|+_g29?*VKvr(Y}K_WBRTKGPQ]5)1&K̳yc&E W\>}W;i˜o&_t1h18eeUPÞ4Ӧ B$|N 5l-,cKh;jg9J 7i(kG6(E"䃳]-JǶjV͒F5~xyB˗O'JHQ;rILLT8xǢO0disKKXwBC}IIyVδ,t9/NDAH@OGqeEcn}e钣 Y ~![$v[&$E&f{Al7sH7K,3qxE6[kevHWɳ12;Q6GmI5ₐB~V934DT#OKb%խ=N?Xc4HL!84\U芔kp+ EvGLlN:W0!<\%y mqU$B6?Ψ~/@'16FQA κoпŃ[敐HFCWP@N+жPy<}׳|}d"yFNlj|$chʕ5U;f=/YWThd oEcU޷@+ҮO#T ]hH}΍hw dqj:.5va \ ^ 5AmE@H0(x ZP8>?J "<*j2MCcj Dx7,MK&JÎσr@7-qXMڇIE{ܓi M *afhL_Wxp[Il&mWuģ᭗6M[dp&zZ=82J2IZ&GlDdV"$d #Bns 2" +$5Lfl GCW2> ){}*;T== BYRsyZ@ϝ~wq9 eOQ嘽k{T:,z3vn>q]qkq`e³̭#.cnAqisu>w+"9pkɕOop!TޏP3ӷ)1y_dbZ@ ., e";ֳ{S+*??ojuc(],diǯodBUƊ~= YۯNj˽V(e/l?{y?FoRgyuԲs[5OΖO<:~ͣB71Y;ZB ҄8|jxTV[{$bK֓pu2`7rsz(?dăqVt:6Rǯ N[܋Nn)nw{N$cAz !+5`V4ڥI*^+'Q.Kk?I_{6S F"сe D32Q9媑8'[vz.c%/Y2E9S8E-) (8/ ijI~*_@ ]AY_8xiq_cKgv o+ $863ծ\D'49ޓO5(f /Z{5 C'XmecW!GQ3*) _r!E@⽤ F׺^gB{w/3Y|^}z1p&)q$yMCRZbԔw+uh(tMw!2ZsT|#J'3o%$H"DO54R1mOd%TFPl+y]=kOy>O^U%o,f`[Zx ߢ/q>MQ#/JƷFp*fsYڐ;`bx-K\Aƙ{cF'ƣIaTd-DQB*XGwxg˦R +CS,NABȿJֻwyg^r–n> PuRsAl`xpp?;c- `UKQOUƂZHmnLP 4*PBPԸ%3 J[!辺yae)SXty)"YJG+wUMsX=V)5 %|$v)08}阅)?kڸ}XkݩܴĄM<"T 81M: D9^TڡgH,nDo?\pB{jgTEj 8SX\ZP~ER6>gϒnp s,MwMX(sהDyC t &x\|&xmώ0,+6* "OSٓ.C< ъgFC kHm8DxDwL} EPŜ nYN~d)qDQ"LqֳNG`#ɥ8yt~hY!}eIZ!Jǻٙ:ްtwm*RڛN4Sh'ڡ˱UkꭾR${o. Uz09-{*mא[VPj|g J!_D&\ :$Ax?~`pߒU Wgԛ!0~WBv|$E kmBҾ&EU%`n~$J =ъ-#a*3<9yU9z|uM,]u4ʥզɺ13R F{G])jJiqG#*5k+^*mpWXӭ]1\=A\V耆yb"# QHP2+5 D*tY nJ%XDj'Ţ;YJm ]_99}G })_-G~8X`%͞-CPАc{:arr(mG{PPbx쬸!n2neJCþx57` L!1l-fWl`l6'Β)`o y}'#zY X jVN:$zv_8Dy2,ً8+#@5Qͪ$'LJG4-|h zHGdA~݃fgeTա6HLuF2z0=a[ GEۍ[=;9bEPHꐫJ( jjDˆD lFD;fS %jzJ8AVVf{Z̓`G\KqEn4.F)^ %U'm O>s.%6`Fz Ô+M_/߿M czaBa%tXZ֥Uj[eҠtYR%ލG^Tx}Tn@)Fj DJ R@ A2NcӤU%'I]Ih/gvof59/,kIe4%z2!}@l>˖&@m`vm) 78R [ !Y &(2Gm/x-jG`hMrGު5%aSP#Ps<j<`Aj4I>_dD^ɐ[8fO,U‹[{cE6JR9XtLSTJeCpJ ɱ9HXSV6ЌuȏӌҠC%V ~@0@κ]M -v=p6^^]DgS^+b~M`4"l(˼6X޸~) e}P]+R׽uL}+uiSVǰuVXGxk D# Ship only the platforms Base actually runs on: linux servers (DOKS) and # darwin dev machines, amd64 + arm64. The old s390x/ppc64le/32-bit-arm # targets never shipped and don't build — s390x/ppc64le trip a # cronokirby/saferith package-name quirk pulled via luxfi/threshold, and # windows can't compile cmd/cli/daemon.go (unconditional syscall.Setpgid). gooGp/Vx31촜bCi ј~3Eצx340031QHI-ɯԫanjɭ2+9?앝2]!ܲxVNG笠(M$"A"Ъ"g{מ; !}];M~E=sϽ3teU2ZL*vJҥtT qe9m63+\T4PBpU֦vڧ̧Th#~֑T@ a.\8LE~f^9%ÝtkO ft}{qqr=:?<:9逷=܋! â ˹ag򧓋HRP,DF #8O-$i3Iv!tsd.TBхJ:nzM-gt HZcQitN~LA,03!C{CTA"dS!Ƚ*OYT]2lƯi)~(*(uiΜ PMVptbPjvc6;l4^٘S&K]  $ nA]Gb0M$VhнP>u-m0&@n wd'lc!vCTشDi(GK46BS}Tx]YQ!mYbaw}Lrg~.r`sHg0xPbõL6g l!m%\Dtx|s{xD#-4v2Bv2 ʒMkD:DZu!~dz~CvphdYE;pY{ p?~:1ڤ`ӇDIp]Zdwv[nEF5;-H1 ;Ɂً}|;{Ao<}EqYvizvj>qF0_E_SlݛD7]Tޏ+`ѿAv[/^@֭-s܍ڂ6Ga F@AyMϟcKs+>=Z6j eщYe{\"mP)xj# Platform-native CI/CD — hanzoai/base # # Build+deploy intent owned by platform.hanzo.ai (NOT GitHub Actions). # On webhook, platform schedules these builds onto self-hosted arcd pools # and (on main) rolls the image onto the hanzo operator's `base` Service CR. # See platform docs/PLATFORM_CI.md for the schema reference. build: matrix: - { os: linux, arch: amd64 } - { os: linux, arch: arm64 } dockerfile: ./Dockerfile context: . image: ghcr.io/hanzoai/base tag-pattern: "{{git.sha}}" push: true deploy: on: - main target: cluster: hanzo-k8s namespace: hanzo operator: hanzo-operator crd: Service name: base }F xŽzر.zOlϢlyDeb3"@`ؙWXj?~vU5 郘K)Fz ǭ74$Y|4.2Yq#(qY&q /JY|l ͉8G(7UڍyQɌbC:7+q^L MʊLX@D[C+F8-*pt"{ xFw Ӝd2<yv4i3tNiL+(ڲE%.WkCyN/[y1kK(t q5恰ǭc8JiZIvMȉfy>Kcˬ-7nFY/qN8{h0ʫ|It<%h+Hc;=v>8>>_%͆fI#YGFY'3E. 3iZDe5?BB[@dD7$Q O[2Έ=lYB{)s~.'[,l<ʖUpD,8M8e|j vX}Z^)+璅7:\Bk^F%填J;VDW 2hi"AyԠeO@8@tqNªTkAtcfdd|b"H[-fs5ڋjWyw5B!_PtZ`,.VW^_Qa{CbyE8zrF(!bPHv1ܯԎ;&X$˒N10QSx2q^:rdf>z˙{HEKsy]s"Ur]ZޅaTel-@{ O>ӫYM4Tx̙c߽sX2U9w (P59QS2JRHi1iQ rM³;Mx/Bl>FJTr'YP"{!nc'IƭY+Ǥ h$)Dt?քɔtZO8iyU),BQuKZgw*IjV & ̑^=K K{7Dאʊp__Vr}_RÀ0#RT!@7a1%&EY U8'>\R;($uU]GLlZtt *oO) l^nL>JE$NL5Z}XפPʳi;F͡>άaJoPs|_uԧ-Noim3F4(\A10,H ] lOqDh*ĉhF6N+Am*Э;y矟'`BޣVw;G'+bI^: tLWij.xf L%N 'ztܟbЧ4IÒU1WzzG~Ò>D%(G}7PH)ME.kcXۄe(Ƒĕĕ̹ybaTMހDBWHdaS{fUi-h0?bEwpNshZzCk7Y 7_̞1u'ီb+Zlu6s#:9|;(ΖظrROnP8Z {5b]]e0}yc{MAgbB4%iď=`Wb?y(=[:y7GN) J翓58ˣ`>@sJz=g&ZUpGc`5nx \Wn%O7)9E1I2ml[ܟUC5<(+\_%PZo6IhZEYkf} Mgy|}ƭuCo)H ΑDψ~F$Q&>`ROf§bJ1m}f߱*"0J\aA&6f~ڦgB̢dq0$d< ile ca]X'.׃|imfËP,Xw=Kذ "i2 3mq2:yΦ:,QCѺ aq$˙;xNuDw.3K"Uj t RW,-Kf;4'k$BFS:8&KEr N/.f!hd*7UΑ_1M5Ck!F=N$YFqa9O֖}9yxC#tc3BaÛ̪<=&ڌuS2ƀ[mUةDkRķ$*bL3&rVqqFăYz8ۉLI?CBĺr;-3u"la=">cJSCDxҠqQazf4 $4Ia ЇObgψie\1*Crz*?ǰ Jfws +!Ab!,eE%/b7q{2{5ܓ>U:XSh+bЪp tJ=bPSx9?B`p%?edjx Y,QR4__{d)Um7JRR3/Cb`K_vWľQ+| #on2+?}czF,(N]4k;G18*]%p@xA:(*[nr#)`a;Z$m7/mX͹\\.ZdbT)kDŏ/X( #Js##f%S gҗ8%G9*@y%nAJ/&ð=l's9^~b_\n 9f67O/3]Y'<|jhZ03Y,K+;kaIHLR9J=|,YS'Ȣsp/ELjEx9_,4Y)3>zʉl? F L ez>F](u:f9X[O9Nno6P[l7='y./n^[~# ͯOVW+⇇Îסh$q|n&M"YtO1s4&=2no}F·^bue6o3I nҭM; :/:F8mt#|3ޡsCA@=Vm oG7U2zQ5ɞa2OUeZoA zK־8SFeIQ¶Ď BaLgbUg"uwD }0(VaK+?V(rL."5c R, >xuzG~qdz%ooo[㛘kޱVd]}~+,[q3tȞ+ٝ[+RMؗߙҨŲȆ ( ]¦a$91@ %  1CQ-)c Xh[,St:@ƶ0b)֚=e%+D+WsFZa- nƥ*#KlmC' MAi2xr6+cc$I'E_Eo+Ѕ`tz2XAby _S/{pXoϜg#lNU8xpO6D93VPr@^՛:d3PsKLMV=k?wV)PyF& J4o%28M?*V"y`-NzOx/5&Usd1m N"b܂W Y\@{#' oi45 47 5h!_O}1dhg̓(_DQWXOPTx\޵NI x^ȀW)IpW5q1!ԛIVjx>g}{Q}e.)OSk ^W C@G7`OKF׭޾?E<9$OB ﴴ*T(v⎽U&)cv3o&%k^NtIJ"rs;N/NٝԷ[@=PZe ~fhː74.hͳqTjfl)'TֳKPہ=G] ^Js^QGK(IS+Lw(2 iAvkk9!)IU%wY#J5ޫrUľeȯ=W<(M|$+䧫g s9 Δ$IpMku%jγקŻ7O Wdf8Va}ۢ.g7p휎2uJZKaȓ.Fy^afKdgjF 8c( %i"Djh| ޵.'d% * xXwtxh4:B8X/B 'X[z6W&Ĵ-'&| j X0ּ$V?濑A<7Wed4U%H1|V'[=bu†$pM>$i>BT-rC)x=l䇐n6<r٤:$dh4қ4SeܼMy޻p*\RkV?A&$tv^qDidH7Z;Vw Lc\Ŏ `#h*Keu_<'y9yk nY53R=w0@Q= J^!9g r[Pgf@m'NK ,[nIsYs zp9컢3Ќ†O+q֝ni)-~ouзlΔyA=$ xJsx-]Z]\)2B=$'\.)at?|_yDhlC{0|MnCOQ=p$vvfݡ dt ~ BocP v kήSmdM \a8O?!*ΗϯV!k*DWU] QUl@~2KEc͌ @`8`8|N-fzv Ej y//5`>{ne̡)n]xN5{ ALDXQBDX^ {ԫ|U҉H嚗"aIfi\d]&e2B'WX =.͜@"*XT8uCxe @.gCׁfQ OF$r\qT[=NEd<Lj^C'X}DHZvNb_$|G9|h )H`Wx&E>OvDQkgNfٺ{s2v˼lͺ aU7GkDv3dpx;c 4֩?Dh_EMf{tt=AkjFdr@5Ʊfؔ&ִlVsI֠4z)8HnȸR<W3 nͻ@ 'ѲmQt"ާ>H%9A_|B~޷Z^ !rЃk>4kL/|c:A6o <@H%!Zb\PGRMQY1X/>J4œ:] '%8.``Y0X/⼍Vz _mO~7K/_:Cp*~H8 x~bITdFM-nǢRaTے1> kˎp@ľ'GU";M2SS saot2 qYANsj[T+ٻo~!2t%p'9`P/a';K*Z/[r~c cEB~8S,-s.'ϡ1M@Qm 6Sm_߹yPGa;,̆>^L4$[F&aKrBykn.Y XU"E gh.F"5o,lEΩ%}eAMS:pXNldHv"K + F˅ċ0rqYX:}/;*'yaY]`oDK@%Q~:[PFC ɈFh'ޠq4xmx21 r*YةLFL&DEbl2ݪjrk=l6 %D4kT?-0|u{^Nf2 G3ʨt7{ ~2GYq66~$&zÖt2Y0Ws:L'zP_-$5#A@xۢZDS|';Fm(fٹIO_ s#մ4xWSkŃ<fHC>M9%(wUe #NKr$mDd/q9M$E1sX|6c:HP( Q/58 5Cp f&> X(h 0Cb+A#/I3T:E MlJ%ۛ{6X0Y)^:XO)kbG K6" eS&0|r1đg=bֹXasTmN-qȚ $@~#I+dt [2ZG!l>Krok@rpa~:'"thj}x,av{~rG `U$VjH s$k@s1,8ޫ҂ф 1)IÜ͜&+Ubቊܹ?܍x.U\\yZֲy"T} Ƭ+ 竰,ce{uXNkƵ_[o .%h?kN٤7t d7NaEHq4=IgDX4ۢjюԪ,1q"[$՞tI-M&0n$\\ 04\rG#ע Kiaׄ8mf ܹ T3m XAKY|-ܚ>u]Z' \ ecZ#s ̔+rr`K5\|dum2hW\/I|e,oX$y&k֢?V15E r5; S?mk?<<>O¿ A+g\\\K\7,hʬ)(NU9֯{S=~q Z/'>#˸׆W#pu2 JBpE ]XA=F, 6\,m5F @o:w2]B4jO=fWH8yL<{':.ZRiۻ_ XVGQ)1b6_s *oǙgPqJ SlO@7xu#D1U-^E2u/hc8E¥QtjqK*ɞ 2Iiwr?Qձ-&Amr3-M|O]YM}0^m{+rgBg}]^8ܶsϢqגJ$߅UA=j4t ]5-S` ߾{@HPQy凗iž2Jۋ'"jӈKA9FݝZW_0/[ ],>+UtGFӤJ-;,@mTz5Ɂx~`ғlb `[fhMe~f9 ^!>#[:r 7 ꌱV 7!֒KO\jFhP_fy)u݇$7FsNjerw/-Dr֝*1֬e^^X;ǚmG۠~:x%{I9Rț<*v \ٹnER 6ghHqc.ų˂DyO&Bv8d'=>̞lw#Ll˭z~:Øt8c(\IމIB\8!ou{_TjjL$햵|IoZbbپƮ0 'C,-L&4g6.$Aj2iwު3te('t ]@YXR1,|:co-&Ѽ-ivTh9_K=2h6W!I"G}&\2I)o5MIYO6S3o)=%<D9] -<8 rΘ"ᕏȂגG.X[0\Yʱ$ rB\;'KΙquci5Jr]p%w> #[Bjzf^WDQyl}jiJTDv(r=\̖J׆P_}tx7&4*KO˷N]ukZ$"/BbmfOz̯TMK"A$kr3+bqemcym{Qk{0>=a38MKg$Ss1G$#I9fIl3e:Y 8UWkI6e]]$U:zy\MգړVAc@=Jw<Ԁz5D,ϰM~nKzW3I~01/0-t{Σu.Jr0R^=HgJY%*C2>qN~u71i!8- (A'ع֎KMuQĎ̠,aG kc]R|2_rb/T?? %Wks (j7[忑_-r8奦54FKq e[IeA\jzyjpsBSojtO$f5$6KԻ+վ#JckG_zq '4A=f``ks5HxɾFE-L21+? _A琁B˴.NMd}Ta >Ȕ̞hf>~߄,SOz`(4{<95W}MU =٢2d? |*\:RFf|8 c`}za&$CӦ7u1tK ݋Ee^&&裱Eb&~vO'1 ,M~`_Mnf}X1 W6|k=,h~j:W gqցuiq`GLC  o{ZV~&cӦI R@K[AB5(\tP/`1oИ5S Z+.jIȘ۫(4 ˇddTM-‰Gڧ?݅˳oޝDB2cpJ=ae 5tR˕V,c}5yv8h@ҪR20 0h ڲEm)g~?5R~K\vtІ/)@j.-C4ORb@u03}̕ >Rx5LnڔJ3]c1fj3wd98'I '!ɷk؛H#'aKxՁxHXkRZmF؍Zҭ(%^$O~]w/}x/6CՃ2U (be_+}8N+A8Dľtlϖ d?@}V Anꗐb+I\c0gI`:N4S$f٬/FQJʳ>]uZ>tH i$ÕkEZ'&}vG|MV/kEI c#?Ǐ"sMӲs_ܓ[N|y^|Dvh':z}F!Lza5+ ^r'ZEthY4? &wҒp{Z<)kcO-, 4?DG9shz nĵ^7K,ڪ 6Ul;*=ԮsNaƵ.)F{ 3JՈ2 .=ϑ^d6Ax֜yYpÒmoH ¶U8:WI$Sg g=Uxv# xfU0[غ43y/F7Oc"4QA*hCNo^uħ+xr_)k[nip(^d!@Hk~VjKH![͏+nҚS*4D%}s׻uMSڭIwm%xKzm:5m [mn q'QytQx0^'Muyk%X:iRe58.yWFet[#.(e(_XbhLZ[TX|DclmVѢq+bUxkfq yf~]Аog}nIkz{{"s>I7S$kkY;Pbrc=Fz@Mk9 Tm1lPY2E?yMYҽL>7 ^E!+>3CXfstX@/hEk+֌_1MȓkFMB5Q 3R\B+ 9cSyvH(3gU 8Iыp58(22<"+-/0tê#X?5`Á'K%^T)+Alz&mt)H-9Y\ cn%cӃB]7h?lt1*UF: vgЭX;P)X,&`QϤ(md{kd$ 1~Jc-^rƥ.BJc:]p mՐT5t /:^ǷCXg_a&8ľ In4pul5A~.2Ź=3"DYCBJk?<;p޸VYI`2hOhl滣N_ 6/!xfMqR8;dh;S;9 ]#J[CfgZI:6;TgHۓb)c8>BC"11wΘ!C#۴\& :sPg͡2C$޿i4O9{_Pnڎg~3u){&!VgCipXM8im`*pyR^4"+pYܐ|]EBnΨR͞JU{"ZV'n_y"[1jb/K Y f cm, <ޜ58 gY _Gş%ɑoCM!L3XIϾߺWRta36Rm 5YÝ (Mzbq}iKC4o%6M@)CNyz/^Ħ)ϽD_;DQ[R@DV˼wf}_J:\%b|th _j"giAy9\q̄*k*'R9^ʊd0p9 ԕT؂UJ`q _ tY3z]CLx2Ԗia6oZ:Tal"EJ+԰|}_\xa>ޘOy)s\}F="-C|Q}:mzys֪wgu<|dZFyYDնG`LATa@ֱ"j6ޟ)^yg1 7ݧZ;6_wأ_goBjĮ&iZO18E@CNwMſ'? Z|K2͆h7/.?/O.߼VY.xřǓ2tk}m-z(8!ZߪxKwbyTZm2ChGd%5*H pK\#M(amqMn]nu&9)d=īgZ NYןuԞƠlhP Plfp)) Z$M Yt()52ki~xZL }cR!Ni>pݯ4%л 4HlQ^(@\(k`iTL-7`dxRoiRR*ԅ092  %D/MCsz'Jq7Hs4P<눵]fn:}<_.+S/\̼3izTWKg$ |S%6Zl%RFf";# ^\.g\E2aWSTYGy6;nw ʗ.J_Y7hP+Yxo]EƖJ "eFZ vz"ý]2g_׃yU$D*;ڊB7*Wr@&4#r=I@37 3P۫UPN0246 n<2^?#noߕdզ[BӦm}4uj mOb❙ uNc!r/D-PU0̩-(߻-yMH381a<$[/K:4Kui.\n8;7}/yhIK; 09Gt@T2q9`$<'v81t2A4$N]PEv;x0uѴ{x:O;ɴӖ.Wq3q8;`O_^i.NVwxAdj:M&MG,Y,G(n&hj?)pd}?5hrԛƝu&N<}t{N/yUD7_Vׯl_S.'|0އKMGQA]%y-!^_+C!i \@0XYnh][pSgdyZ]Nb`x݁l[,HӖPRd5n%Q^ylbl6ދA3ݠqHBUK_K,Gj3l{eb^+9(V8SBYPϷ= #S Ia㜘CRAnN{Ʒ\UiE ܻ ݥsFlBV1];t\]dzf;lj!&tx}~L`kXOvL3@5EBzu$4>QNpK+3f(<&\=Ź>>^ڎ}1q ė1]H\h/}$ʣ z*)$@Ѽ=437%Vxwu.{P§sB[}C %y$n[̏Ypl0mH,b %i#<  Z}Iߡ7#G]+,;|\ R,iWydj$szyVDd}YymEx( ^õv΀k l4J}\K97(PR8+>} -zΥ1ˏod'DBj+yUH{(k5s0s%6;ŮyD=/kD`U{ '᥂.+Y'#4isw/h<^:k RjFkg4'd|c-uILqƩkUy.)ߨ:4Ihy")blhӦF4ݖ9tu9*+KhQf@ϊH;bԲ>O\Ѕ1 mw4*zK6εO5[mژ]zH/@RñJZ{0.`mԶeX etyInဧ): _@p{"!֬- ޼Yvם{sq8,NE:N1'MQSD)B8oQZa d-^ HeZlXQ>S8o􋟓op 55Eڋ9tgzR{xEtd f܈2"ӌDT} rٜ7!Don*'mb|%<8Xd 8[]zԛKGQy?SsIXSmxv#p>~XU`gC+3(F;iLΕ*A m-o;15_?Mu]<%=syfTH_~syWؠ`]qSѳtV* Pnƒ- o*jCz@A}t ٴ&==o6iom /`iI{1>eQɏX'izI?u ThC)/8@]}>TU6k٥53ta"5d7wYqO>G6I7ytBj= N3"B*J۬3`5_.ů}f"\vE])KZZV^896E3<2bI,ZaϑFL0H.fĐM8(VCP|`0b1D|+BKNo:'_1; A |(A){+I+MD COvw=G-̩N9' 9pNE*\Hm)X)lHU-͍ՅUG" UO tXP#ǨUF5G8` B k{E\4*>`%D{SƱo( 'c2Rk;*IEOD=![+~KMR[Ϯ7CRU~ӕ6P׾*_ ĊV:k¼ 6z~ ;;[ZP~pmNpxbQϞzZ}wC=!x7P6g@&S-뵕 i}V]eK_e#LqBzJwmwioc/q;ČPSи#]ZG]q:x3<{}ٳﺞ1Ïh .?ɸ_9/L3k>Q+D1ೃV֨D>>2ֆilnଊk,2ٵF S8WszV⸸ Ct?dzq`rJtCzMmk9Xim8 9]I<L*~+qUN jH(f+rLIMAmdKp4e [ʟ zmӰ}Yt@Lc2hN$5ok Sfœ|aPIüŇ @}? F~{RsGuA&\J x`TD557 )rOBYsL% E3.R&i@6)6v=@CL(םK@'/ ҷ`ޮ5u6 ht_ǫ!D Je&ȣ ({svVooTC_1(8'k5_=?ٷЙƚvW2`dXTZmz(B-"QkXFrqZI#"Io:أ1^*~h?y=$=Jf ,⇑xƋoy1~jE3MyMէzn1ޣEԑA 2N ,=i[v|dbHbZ{ioZl>&:sv>)S|)X_˦ibEuj&= Y;[tcmżt5]o"Z$ȶA qE<(2ZB.8@wO=lHgty12-|cw"w9|besb̀Aיo?֟ۯ7CZώfA&X# {xۧ?~q͋|`]7q='t*so87G gz!v9S2mÞ<<w/$"b >9\e3a š8=HL~Y=(J-Ն= bP"BDv,֙qdgɤ"V07W$DN֐ޢ$g /9`.05ps]u3MWKg}(nHځlYp>t2go%`1I*~7nB+yLf2:М }eZen]0L朖 ߆5`V?OZBõf YV6p׮gro՟_>{,I}r'gS3Gd>m0lKf+7rmgjua>ټOjMlphv"6R|(lL^oAwFKU*E!%;1#=Ί,FGJmk6F#&% 9=2 kg<->:xp(X.öy״55 3Mh&|ww, qh?zޤ{ b9Jtzmn'7Q8MWCvaWWT7UacNݲ fgg7$pn M7-QZnn޸>[KZ=L I;f~ϳEe7DĂhD%k+[!PZLm佭_ATj }u_[J-"w/7G@^VxY]l$Yuj %Ojwt{w(===Ynw׺nmݪ{@ %Ip)$"o"VPX !aI vX)%"%9%3vݟs=;K{odzZw?bT)O8F~$*<'UhyXVrܱ@2N'$0:D҆"$qd"nNЎb'0PY,)_-Ď=ڱ5w4ShcQUxHP\10A ! qz4!9r M p8\oWbokc]ly-&ET#,oUÉ#(0g|L| 6wAO(x@M.~$SjBqۇJ_pHFĒj-B#(.d(yn;AuiXÿΆ: 0 -][Z{Ŀ#;Pڏ::Gd2c]?3E<;MAG*pC?;).=`T1u^"J,, I46 &g#@eTl'oHA7{ ݵȾ`n{n`=$t_&&ͪ=@ F'S8Ygp`9ۉ y&ɂ[Sa2g,{cD_]3dA@N:fcv&r'ݧ;찡+{02,(ddwv }pUQz<pE ưB{ӤnY9Gr{ǖ_YYZ{j}GL,bTPRA`h)uu{uya\PqudJ K 4^} ,}lGműF9v6[sfKFJ0{7si]'  :EdM\S9!! %Qep%T!y Z@\X{%C8t7>DI&(R\2 0r蟐6i13@ؖNˌqm2)CѤ*|;"]8c j e%1FNmYL6B=|S7hYa9P͖08v=P^r黍$GsPUO-A Iy 2vΎ#W7%/ĵo#3"ipoU5m7Ñ=LKrvT\p7IPG@E|ļH/Z`Dg2J&M/ct*E^: B.9^ %SP\~@45?ߖI7SX'q$% s$5_p: V)\fUB8-.ީ9+r!9CYATk)h{&cDWխ`'3 9PNgy_淤ҾLsL3hҘ>-Ry~/"FMEmEAUưPcï0򒸁@[8_e:BUL2EȐǪu.#~d](VGW$UzKS>_ x{kcoam/ ?tͺ/p<q7?ZEt ~²uuijf -Ǜd\7km"Naq8 @fD69POd`nb#c+HTfRm$1! H3 "yɱ@y c,.keQC I)`B/y]rHu GQF=I?P\e~43.nxܜ t.RYЪ<2!")Ã3f8||g҉̟Amia$^PCw!"%,BFPyDy:Z [MR>WJf:vZr Tp:F]'ݜp6eؙg0]5Hx {N4N*ⱊ(cf^):Ne 0FN(CJ]Kbw[=W6]Q`Ve)YsMRj мUjjC`bj6*U )Y2Ǭi46&K֣WՅFc٢ Դ쯰H'HJL'_8X-'p?QFPgD\{lqДmA>PTT-Btxl5Xb/Ydc;ꌈ3H(/\{xwUw~u֤Wr#$^z^qa]XNVKњ"s+:!]1]j8KgsLV T_y̛ ՌYhx̹NN%oDM6ߡm]U` oPz/Ծ/^~ղ|5쁿ک{W^L50U窏Wٳ˫m}W#}긏7'_xߪ]Ou?G{T>Ku~m_}|W?}O*7/fOA;;5_//X8kxx Base: the `'=9 base/  base/"Zbase/#base/&base/&base/'base/8(base/, };1'h2base/8rbase/;qbase/;vbase/ <base/@base/Bbase/SE>base/Mbase/Oxbase/Obase/vP0base/Q'base/S6base/6T}base/Ubase/kVkbase/V}base/uX+base/ZNbase/[base/[V \> \\base/^_base/!_pbase/_T_base/`base/bQbase/Dcbase/cbase/fbase/f`base/gbase/hlbase/dibase/"jbase/k}base/Jlbase/-mbase/:nbase/obase/rbase/tbase/ ubase/ubase/vbase/{dn| }4base/e~Cbase/base/.base/base/兢base/base/ebase/"base/͉base/,tbase/base/j{base/ 9base/Sbase/\Obase/base/base/Õxbase/LLC base/pbase/-^NOL"xŽ[zV&Q2,Q"K(:Bq2!9ꋓX(mOF'SY {c__k}Ϊ:h|Ӵ.b]OQ]wˢ4ԨLi^GiYeE^mFYT)=HK4xW/^{՛Om~W_}V9EY7$xfQ<-f4^QN?mтZ%<}v\\2L*/ˬ^E٧{粮iY,UoZYtyx${jw"OGeMQ%ј>YU2zӆѫ#uAkFI>4jn^yɫ?Ƿ󌖷ѫB>mhpz4O ϟeh-y_'# &۴"zwD+?eqMhژ(kZ_3Zs;GOt+gRΤtުWIqnؤ,("jEUˋlQ|r$ -"} ,gb۞ΓlV7֬A-ʉ\YڂlF5<+ o#|:5X~E(9gzku޴Z%MUWb^1bJFJd2ы2KFӦ{Me:k?tx4'zͲ]/gyZ&l v>~}?X{|G3៓E`*։=a@ڰϩ3ڏ(MiL %bsyAlVA~A]Dܮ/L42J˒."Z3/#S>TapUCXTO#|n2_~VѰ 2Ylij[cDS/傗|?zz|5Qt. -׊x,Jg+ 2Y,{{r6F}vϥ\/m\z-Qci~ 1NUIbI4m%*MU1/YA*@"SvR}SW$l wÃnuyޏVJ|?v{Ot~Af=8&bYg㫣dCO)ޭw 9a?9Ԣ $餰^'s:݃We[>;y~,ȚNboQ"+Yp^@vNSI+X0,lN=i) IEPmi#6 LS4EQ!HL G5..ьImU,#:W(Lpr9T::`J'u25/euJ" 6M`p$M(fp/]-'c/&׷U|$r@4)nYLl?#hvj9iӆoN}*ʊ #nTY?;?pCM$N!UD9 N2:Zƴ1WX2e0젶ua1ßeqLo {{f\%=O}" U ]jw`g&ev Z:Y4M)8`if/oWmBGoʆM7Ჲe/'tz0ol1˂H7p>? F -4ӱ*lce-kҪRaZږla<*׃˸ [1ߘ.F9xBjZreSFH+ bt9 Y3\VS.' ?OFII]C٘W9m*1‘`H9lCuM;d![.@0?9~g i{Yݽad)7^1_͛tȂljx\L_rVs{O#fy=* &^4-i{/RiLJC>LʔOpsP(ocX&T$f>bIt;.҆QAG.)-YB2Q]EvQexD/옍@Lzl38, &eN!z-C, 2+Ohbih%cm6,cP?(.QZ{AJc,j-;̠ 199PιiE{{M!وeb3uE)H bD tvꄦ7EdD!).kO D 3"q)-JeT('A(-ȶF+",IY&M4z;0/Z_ b{N$ aR,$^UnWI/wP2lKK`%qp2=ˤ<&#M(h )3Y٘d".΋2ț0qSMR㇓XQN8Y5z=|vwyh]2Nnjr5-1 a%:8xoth_fҪѵdzw쿨'иzIo1IHa{'T_XcG rmsk:}u2YHe 49\|bf6>JO3-Sa 6a[q|/}D%mf (DrLU/z{dj~NK:lIUp y 9qr?jl@Ɯ6T8ϰDo kVݍbձyPIn!rTTZ N(i:v'Cw~广3 vX#Se:E  *F?Ao/&n3^$GJppi ][Lq`@AH d ]e<ϡKkTmVM:Z : ;puPbD6[Uq"&`X,"W@~5O-h X$=4;K+'} 'cB8K$1}6nXsĀؖZԀ5٢"E8T-lƎ::՛~IoW9'1_9)EzΖi].bкP(S@ OYHs7U٨/Qഞhd:vBbfjx\|}|~3 JuMB|xYCCw|}įJϳJl^9USm>9TQ35/uq2p$bBKEI!g筮 F T2 FWl/Ty(gr̺ R[ $&IwRY&_\f<-vo2IB2/g3Nžޏ}6M4~sbK9Yb7 CΤmr=<>9^TOp!2d"D`& Z[qŦO/CKƗ4^IZ$v3NuF %$¿ "{Y{yLD|yN@}h^EHֺ-?yZoc?ː?h~Uzyƪj`LbitIe:_UwnI`>7.ϵ!*bNNFG4 촞n,'Qዼfy1D [t&BXӌU+[Qȃq9`p MIMa>5oU.ohq !pQh-S;&Z Yw}I7RF/ ATBO;̮͠pLEE'+DxX,2!JlYtR#TZb37|_H0)>ExX䤹c fV!P1B{L$&3ڇR($3DZO‰Yx F#IߋK)QjKF{,ݎŧrwݍ:8,5L=wr[7&SsIpF) m?s̜#׏}k>Y1O.+vg\6.eVҧ-!1?|I]&45Hx]벖*7xiLjtGrr>#=-hZbŧ/Hs.7&4v8[, d^YhPn_pKaYɘ`&DC X1Nr+tJs8o188BH85&*wP9aFt0[ %ƙY GdH,~Ȯ(mc#{MF<oyĩ"xsŽqSgcaE >ÿI*,\:0DiKpİvS'+ +s➞ˋ ٨‘3Ҡ23]D+CL{bun ޚ)q86SLm¨T{CJfV0͋p2ES|9&z1G%\,=)g,8ĊhL$X@։ˊNWXz|X*4geT\,,,$h͜mǏ0E4 J$Do˒:},i!K|J C3L 5FH5 py]lLB-SRhޝn޼֏wdz*kS"=0^]ih}V-Bm6t}Wjn1!Hb[ |>E㔁cTwv^u>v`j֬Rh@el P3 cT9@X9MRR_{q+0i\W|=Mä+!LU3gY/\,vMѡZlx 1 ps#ypS0M"~ 8͎}Va>` i1MHС3"(r ^|$k=2|д{@+4 p!Fh ,}AD]|8+pޛ2e"RHDDv<5 L)ɱ+ o7;S8y veٱ3.?KKF/kpXVӍuyΰRgt:~gWug3<`5ަ7?BdTҠTzs8.,314$W/ {L ~ӫle%)kK ęݩVQ12-E|7u;qX UuZ+oF(*E!F@=ذ3e%5tXcω~w̾{%}mzmB8&lэ\l0cIyM=]VNA`+3R$&>Δl+EK ^쫄=ǀE>,ѠԚMB|@0MW2 V.eC%<I"fV[S->!6M[8/VC6N4'5D 1y9lB3< ǾMge`"s4,/=$.R.f/i6ք[;c%`h?f`b號2?hI'4 dz{xĺ}&:|G9ZdEcy6SDO~5΍MV )^C K{G?b, IP"& "{v6:5vKQ-{'W!Dfl% ,ʉZi#"Ф͎'ȕFP+;9;n/)=C虣.Ή e7:S;-0xEU3iQ]cLS.6,8Ll)LHT7AdY+CvOtU$yywRb%?H^=㰾frT>8MW^va yU#~Af~1nJ3ƠMMLf~r5, y. 膐 .Vmב?JW&gؼlҲY6{$v$Ǐu.[iq 䌃dN_ C)cayEKbᑶad&$2q*J-'p*f'b&cQ Ϡ̡LJt]1>$M?%Pq6Ywa(CG&lPL}@?}kѿ|mhTxWB!t12/W ?=$M|+R-&fNQEz,uY;;*rWC[&3eVݨH0 `-%:s&t˄ީӠÊ"dOTa5LZ.𮊙jND, 0kPCeB佇F@S|4O ª9XI2-΂_) .#~]f 3/O 4dUS-3exӿ黷;XN.f 'GQfn`;nFG> M)N J\D匡\yƃM;&L7y>b:d1ʻNU3M[Rn\un]8KduC%~`=ˆ )3o9{VLbO]pGh{~pwX<`JHAD1ӻ(/65=.4$d@{ĿJ>ml5 v2 Ի 4bZGS+"$/V@ AN%m{C,CԪa4>%N D$Tcۄ`91vH dX4[嫒K< X􏴷8pxp :I/1n#/E@-QrFM_ZmvQii*b6I]Ώ~C?^i:EdW0 x"Y:hB6?|)`;\i|5p1&|yD˼ :`"71XŬڠަSW_\\4\eu c61(%?5IH͓X.rpt#8JɅr Z䇈hӡqglӞӻE`}UqNLڣ_`BjⲘBb,;o${^a/.4; Q~NܛDbqo'78mSq@.R8;緟Z܍/wo$roy7 Eo>b>,PllE5N&ৎ2GDIXhBxV\cVOGl Ե]~OZҥQ9 ݙee5'eF]-iQT$MuyQ5謦"A3(j{_(&/V,p`i2>XVȗNsjL{P#jqƻ@b_N)beL^k=:4O%4^R@ &VP LBۼbi3eK:^_lwcCqޛNz`Jʓ8YނH0vM >) F#gQ4/zMzDd!B+jRvzA-H˴'k TN}C oF"G Zd8 ]Ga`XE9"l9䓼XVwL3yB8V~'~k{voY缵R "oPm\Z'(߂KBEH Le=Qּ[\$/JCoԕvDظMa_OG%l0̡O Ө&4 }6fVkP [$YT5:92Qd"XDb|YuI_rGb:qP]ctvWN;m/N_)$ ۓ!.㘞( zxQ+5WӴn0m6W/DZ?ѣ(ƃEÑ,!boNa Z|֗ [ʘG5c8`c5yil!ܶ=KPtYϠt%Uj MbdY.:$2rCbF> `$ΌQB@Xx. ( gP ΤO[KHϞR|b5KE.Bհ E |(zMAP s#Ŝ[&eDF-[5IϒrܾXN5Z%ui0*nE[K{jQ 0kRan4:7cBltv& p}.& ϟ 9WFz%}yڛ l& nkjg֎a_*?omy!ý.t%ƙ2PFw [+n<0 !]iLlY8A܅Zp{aP\UeY$oKUakyt1Pg-%i3h JW 6N8PYCIM;c:\ 2֤|.";մ,=EΚ\?Zɍ9v ">/1SS)y\s6vBqևz]o'}Lvw+1-ؚ9Ԥޙ/uv%V! DBNٳ 5ӞFCl:ts)2+N;9@6ġLͪ T1Zf9}7X9@{%'9n5 !pPF#Q'F~EQ'e=xm0ߍMUe%FFXG+X9z%lJg-SEt/Aef^{f秌I_r#+rv&NŀLtIf{"LB@L5Sw y?@-/i#Vm/v<﹩*FGzY BܢO%w6^mݨ: ?̈ͣlQ-ݯ0~1qd#FcOd S o61:TMԣNšG\[Rp֡V*8CLđ|IY_hx CR 4tڵe ^mK@k o5Z8y .ϝ˱JfClM45SbfoUZM"jP(K.u|QF{ SsZfr/緾|Fl,?OX4g{ߡ6-ozn ]i;%hh|:XCm_S"\KLMG6s})+*5ů*ldTEyjSW#\cv'rt<b!,N`. #V*H tA@$.a![T4'aNII:Jz$oN b=f`&eIbTmVR3e4Z ;Mkudi5w#'Z+X $[ր!GH;(« RnvJ똄Y&|9bR q̃3^,#Z HYWyAZE0|kμwW΍KJCKG\;þ4>ݫi1Hfd8k~Voѽ@q9TXf*(!OZKl?䎒̓!QJeب}gS{-KݸA_q: T|$Bk.{ҽe#~E1iKn\]gI{i|g\ox̩N@{0O%3uM NR1lC@)fDŋ>`ᎵO(?:|r}I`Z65@,f`STWy~Gǧ@43L>VG8 [47nѐ~>+2嚸puyR'ȴVlI }̖y)@H^x3 󙯴Dܖщe6_*d#kvN M:ͲjR_'FܿYt y-$ \lWEBɛ 'oOoM'#I34MtʓÇ\~\+xcۖD< r|ErJ,Rz ]`U/Jٶ6g g^P!fDY<]\2uieqS=ÒoݩJ߰ϰԀ;$=&ڴ,\֜9/Z-K |\ZW .r.1;G첄6Uhm%l'Lp&[ez9w7fɧϏ^sH\+6=99Ml,)GQ%Z.*X(v9o\tfuKwX ʽs)"%7|<ʂso: Izջ7/޼>ysrΛ2ٻ-$g9CPί sU/ŷ}Չهb.^ѝ5AKAbK0-JjiհJ)hrZXcX0;-sj%4!bYi`"&*3DVeIX^J'=P!zAu);ʹ:¤Gȴm0-;4 J(n~ O̐-N4Itu(8A>M-pҤǛzaGXEjܑY!DA1|F^' p/ ~$H ʪ`hܘ)Ld'6U챳7H7b?E`f9V9.&G3.頫fQ!S5l5=$z]M@/XȂxݟ<4Y562dXFH'rH?07K &҆ɣؒk UѢ<{WzCVห$^ekUN ܩ1.P˪dݦ]| to;Hv 4~HwH[N tQ |,fv ƆDM!60e| Ӓ6=1>sK...?:H-fm%g&\%Fj8#G pT"ӉڴZMOw -s'dl-mBt"E ܂4%гLp֋22N\NMJIJ2-!q#MpHHAwjJt_ݕ@K/?#,ggz /v!ݢ|xNN-Dw,H#?`9V\Eׅ:B~Kp'e֨oFЊOǛᐚX[$3Y3%RT 5Jȕe4%Pr;Z9)Fޥܒ (lSq'hD3m0;Ui fKq_Ӣ5g3sT4.EkxiDyOB8>Al`"K_)ז4C78QZ߳\sa_Zq1 'DW+W;")QQ\UWMkVx~ >\F7N`f%B3[v$SlS ;;,|-k-ˀLQFkQ8"g`C\0Ǭg݆i2&wS\\ͻWU M3 nbJkQ|,IHT"2t^2˦U*+$T'og`x: 0-0y{XJG"XB E:;)[4}4jB4}[QKnc[A{k!N'U5lmR5C弯GdGpAO]f8Q5ng2,YÇ*NTW,B?}3o.j TR2hZiN 3X}%X!D'Q+^ J9s)QJZ&򊨇08,M4rI;@ ċ6'r=Қճ|m 6W OU51jlTjhR$Asv$oֽ (HCIRr<-ΊSt.(~ Nnp_GM݋UUa-/WI;ZHޮ$r0_P)UJ!mlܧxM@CbK{v$!}ҚQ%:>RNM5vY"7Հ8U7㇔E3vF.B~k[WvՂӤ(zl^h݉}:5{򶷣=hOO.+z@DCnғ %zi6zdPWcp9蚮CG%CTIgÕ} zuN&hGQld_ B4_ߡӥܻ0 gGl+ e@[VG@\bHb@ܿq]J 7e |*vǞ%,ܻ2+ׄ;F{ŝPoGk8Ȁ m끘n!= iHchriIXI܎vbt.I﨣_yux=$U=zVђ.`Vf"UKRF# }>ݝfZi)_{4VAr/@O {/ bMUֱ2|PRġ&ElΜf=Ŏ:4ʓ8%# 9zw?x ͥsILgۊ¸Fݭt!!A^W(OT CGViu16I(#TFYlXjmK”—Uc$h9iHL<; ZD@v{`w;;[{E4֛00GĿ7{7iz5IV{Ŀo[-Ŀ=?/uɵ[1 :TKnEs_Rn!eeB3\[,|s_źݴ!%q`/!'jlţ؉v>cOru/԰7zlYfz/[6əDK^l08q:al{zɤ pn*u@Q}^w)YrYOća؉w4Ҫ]G(ra6B{ (k2>\BBᘦ|\*F9$.g>B—#,_Hj8*Xe6H[\կU'Q35J 4QVȠjQ~m =/#|%=h-;;W|1u*,?DhLޛ> EmߘO:ݺe`$yyބw鹄TuCԑe:O${H9F={KqBhCHPl҈v6rbjV{ 5 d>0SRYoiIpOfxI uW[,CJh+5'P{/_~sǖO *ٗmC)`\4(An\_҅#k/\Dj$`mZ6轠5I[ S +)e{!M,ASŝ:z#&={G)B&Q~R~h.J%/9[J\z H0l`PvS5ݪ4uMQ`wemt[[p->tR MX. D"tJsԛl8+@\^&u2n!#קNߕ:^LK+4,Qf}`.G|&)Y SvE4 ǡI!abj!sUlOXotk !{zNl1Z^)0_-/ cj>})8Fg_DbH ݽ w\Lmq325qƼ(L.zPpxO'@΀v!3<;+x} W"Y%ׁys?GhZj=R(xjintʷ4,0Վ5 :IYM;r :(fT\ʙM%[@o(D1AY" ԋ0 b $6m |.o24 ,xXj߃^p{&K^u0g$f R):gJ t+a>C6ކܪ+ $۳2*'+LR`C)Smpww(Mҷ-8]jSrn (0̑%,E}2!护'RR Ԃ7W q yQ ^f^@U|3޽{m+䗤zG vyq#pE<(6VXTmbZV*3icU[NL[js+r0O~G%aEdŁ´NB^v3ORԜԎ1$s䞙<¦U~cs|Z5G ҏ2#\-,źNڜ.. R)Wo"6f b .:ݸA9]yw^ܡD,ȎARyGc>1QbX-x &kxSv!YNcINdR#$^ Wz'Y꒻na+Id I3OF.[/f=\66sp(MNyu߿"|S1ɚbKI VI g 6n[`Nov+ZTFә:!E; +[fz?'@l@̺ aN"cᷢ# 8V)V>P~R penRI]6b.[2/THx <0v0 F:d'|D:q9-RUO 3č8!kȦK:rUUfi=DC2qY:9et6 58'BK?N6)6~7r.!>e/$F qo1TAI.VK.&)VJ<[[Fo˪!n &u#2;A *kSCBҮzg+dG2&j9K* +kv30:\]mr3H= xf ߁`4)R5lC$^L`7w2 " DȽ;>vo m6ؔ6 AR7oY80$q>rz84[h" [6f?"|8\fAીTK;= 1Pd;`XYNy51Aem{rEu@Fx E#]vH1CWr_/5ـY0kD zc~>)ԤG ys#ڃs[XUM8R&@/~R= J[<j}!O-x|;ѣoAhޥʷu$?btՑnr弰Hc:&X?v| b̅iM'^7"BnV*fF;!v\>2Bfne0?,17stAxVD ]&2M*mSшtv r9R &W^ZLx+V]yBa-{sȞ̙e>w!w^Qjۨ/+#\3xc}_5J&VEr )1c%[y(|Ha`WrXf`ZkMYʣvwGZ3#ʀ6J[[i'[ Š]?Yojg)u o%=眷}A,,s߃8#rõ64G.k CsTsz'kv%L|8߇$cpogQ$ޫ\nt6/9P5 ?2t6-YQ tZzQ8|}9)hd9V\3Bw>qV }7[3~ =Ոy]2gE28:@VX7E3%JG@yQk Hc  P"k'QJ`S6"iMPK&Wr&Tt51: hLeHAaeuCtlw^/nR5+$8gPjʥ=&",\b#X Cb_bMikaϕ&jA.a utK=^aJҮPDžk"T**%j3n .8PY[K "]փt,g}EZn%qtZ;nߓ+Fn@16nJrǫ[tm882.Br8d|Ƿg.1TUГ q'eٌ IXsj+T=lqPx8ǖJ_r@JEz;תX8Ǽ'5ǍYyegC`W Qy(ǴIItFW3dyҁ'-y+-YXVq:hTqI)Rց7v.qIHqlH]oҠbv͎S(PwZ ;)|ռ ^&7bBi㏥0J%EUxXca5Udlતp"!5 Hy,a+ઋX"&kw!َz姚JK7BY2 `vޖo]dl`Em% Ѵj߲/,5J1 B*Us ap `,% mL&0g uRLE/Ų1}:'i`g@k,7ݵ ogX3"'V$58~яb$RZ/_ͫebBׯ](nOciѢoR*hLفwaab8? LkwF[Z;=xGq ZWWN4M)x335@Z= ta"5;5sonrP O-qhU`#Z,u0F\VyxRmjnS6uvLotȱ \T I:qP6W0Ls$d<;ecK3m,,ZF:DjXeipGּtWOæ0wO¦ǿj++tN?(AuQ kjA@Z\u%as;BR~{#ůG7arUɏ3r(hAPsJtv_,K{`p 4AK;q%K?ML,QvL ! 6'LBkXDl!,nk%݌?y|H$MD?lw`fIDɭb6`p7fxi+t!^iD/7qv$T# I4m$P# ǒOT[~v@ &$IZ#u?# ô. w )+5l")W9鿥#ECwb@&2MChiKz1Y$(N&tpMCet ;<8<3XO>icLB g)v'fRUNYG NE5,kF,[dQ]Hգ-!{OB=&5UWJAf}ܶ~dSf9b04> _*t7r$gLlJ%iYY˶pN4>~=t6bC5_`!#?FUiw DɿJY4{|> q+Ng5'꓎]q mp$uaCmY} R0@T viMQRmZQmR>p^?Oh k%Io+}QfS F&(OM Fi\>ʦGÖ^HdMw}/}}߹~&%F5h|W|hmߜߒC}8XIQ<Ց|OeZJ_`㘄rwW] =&qWhѭ\ݍa 8P=vU\3KZGeLؓuA`O80t &kbЫ7~lڟ9|r;{_W:dU۟҄:Z#VE\ЀhU2}6U?g{٨I:?^g@aVG܀!2{`j똃ܷNǮ*-Le,j+.9;s}PrY>Wu-o\Z4:^uELօ@#ؐR'ՕؚeWF6X^}(V?tWnxuPu367@ziCcL`Ԙpӱ AV$ ESAPH%Ʌi?J]GaT 3aCƢkgp-Zh#nn9&Q+#6LmV8~ Mh#тGQcvG$@vARuozQ{|-D!'?"?Y yh=IKS2ϼa(T=rv TFQ7Zxڢ×hu[^~]>wn_;ES]qWos&!&Lh=_oM! Pw# JnD/6JxKJm2.a4-,ɡOZNg- fAYAF_=v"ũ"[xk al?}] A7_a9sDaNA Oh~]:Y|e>~XB` '.?T@v=HJM L=Iߣ*WL fx*Hyy  !ZPHI:gm_x2ėrx}base/Mbase/d base/8 8 ﹔&xͽvV&Ob!mu9U,;J,mɩ]@` %+'1o]F.VK:'*r:Ѩd3(9E- \s>p?Я ~ze{FCD(N:1Y9{S8M/;<(MOjH.N^:v˂S!k(bI<=yŝEDLBlg`@\* 0AG#>ޤպ!/o={ϋ( "tN߱@L*[ Ol\!IO0uDqt& !^{(Eg@HIsh@cW Ad:Qt&MTG1Zҙ2vW?ʋIfa^(]vP }ƭ `wyx$ bEO3ΔDK;ٟ=uKN@O=LҌF-I[f~z~4 8HT8HLHoE"'l&}#W w3"~zL fFSH4 < \d8 Eʜ珧]0zXvy{ma:t7A|4d<=E0^ӘDv֙;s Q[Ƀb\fezCx 'P'ti7گ0eܟL/4;%K;8 b`>z$AJSLЄ>dP@tRs|[zN9E ´߽GB.WFU6oM7ik2׍ g>eܦ3CDP 쵗KCp )W{g/O_#*xen->t̗E3fD)+auzXNRqLD90='I$.(jFe4u B%AB Aof 0[1 8oaD1i6e{#p\dS #M vI.pГoV9~3z{7D5};"H#3ɧow"y im (͙''|[0Mw}N= t빐] NDi`%>N$I<Q1]H1ui.0Nx"B+`֏S:(mĄ`2+^m #MJdI葞 Q8!~@CO>,m*(D7cEь%D#x;( E{~CJUWBt1}=DH䝬He8%F Agi\c 0t`#?0GfsYIt;Fb'WZ.gÂtAV7 ٓxz]ep I8IchRD8нD d/Gltq 'V#"ŭBC otv R,w brT z?L\VP3YG >w[? Ҟw~$8t^DEʼOiݻvJY\] e5pN%l+oXx-AQMZ\ ;ôF o.ìM+qZti@7I` CYz%R%*/ŏ;y$1 xEgl%cG1,J&^d!,Ar7Pw@ aM}1Q d A 5!*˥7Q- rb_2P)hbӑb BԸOPW@;E:y`(_f*u-:k7≾(٥&i\ Ra7hA_oY]B5@2z).o-ᨍgM o`(BZh>T+1c<}iD&Q9B'?MSY5Ҫ|+54"OxY>d 4PG|Y)Rjb  -y.f Gе4]h]Fkȷh634+\^b/W3Y'} }j;D}b S_͠w1;'0f6JZck 'x%/[ pJp : Mb"1TCIwIq pSi*4%TT4 @':Uh `i8N1 +U| bۓ˙QV.67K(H$v\T*.CZ"E0 ÇWge NLdj@W1ΰb>źrFJUYhuDLmnU|x ]/2 ow}%Mv &f ~fǥyH ɵ=.0;}~=`~FӠ7wWml,Kj068c)xJfd8MQB/0# ,gGA"# )) z|W)~S؊\aɷ|Ed<-RA2X$=qh]Is8do*d[SծC:$}rL] 0`CO6. b ֍ 0~xEZw|x|$ۥrT"cBizw`d׼G͒ 3hvbؘC|1 *3c}  (E,U#bnbmtyD7k׍$ʋ97i0:b~9꤃lUP+|T-W`LN׀kkH-ě+ln B0X(ECFL~6O^D{2dJ| Ա->Q aZҔږU*W\x2EtLO쏥9& p4:VҠo<^D2vP'R(ġPog~G>\.^ZC(]~HH3n]Qe5Ƭ,zv#«[ ‚ܨj4馁fyra@l}VBX(LJ=Hm澾S<$^3NNJ\aʂq$X`~TD6Uߖ/b[ r<>\堮9Kj~#QZ#32qθ1xPXE,ܗ14.z "v`֘[s̝Y E:.8>Lo]>Ɓy;Ƶv|3](Sm=k|)zZjm`0`]0M*Y{.^,k1Q}8v˷ެJg6'%&a:xGB](p"aɚҁC'?M PM98%{)O@þI/bd2+J|MfyrޔuUaE>QsRcFnjkkV <5K.c4Vx1} '0^'s\3;p`:l(WzŐbDa;lԄ0E7`؉9JaӧkL/KmOZu>tE+V ]]ף="]MbM1nSU7c˃NeF-hLUPӄ]kL$H qcy8^ K놮|ݶV>;+7C56r#Ma+zE+^X/UХDpJشUV'O Eb/Z  +ټjLV.*6hS$_X8(dJ6WbiU;^wu>'iL4ZjKEnVQjbXG28OnYU" v8Z}\*8 $>yo[A~ɓ 1_e*/{od2fzVHYTMWmD=c,hP-eTiQpՅ*]xw-Tcؖيʆ&z!޸B3F *Ӫ[CO7/!8 'lv[*r;QB-y7 uwcԹBV& RQyA~T 3C-8(t a]wZh6V̟S:b02$.UM_isrrx .XNTQWlX" E}ed9ԫ"Y \L$ð 읇0dU{XzL$'g!T6t|]%n,sP㇏v 3"u(X/t3Qe*Y* -b3â) BE@s'D=r֗>&kZX6MI~I+uUedF?4ZӑzhT]F ^2k^No)VYC" Ku`եYTy>5Df$ ]YZGiH,Cz;BЫGkr0|ՊN0Vp.@'C:=CUID#xyh'HlZ̾5u%CH\F4ww!P%h뚖fM54%)4N_ao<-JAvw-,ȯl8Q4=B)VWe>Y0dV2 W_w!l_]OQs|xʀe; R:9oCL5ڗ[v9s!͆54Vw fFj-jp7ho_X/5Tk_1hĕ{[܀iKƽIW1 3M'ÄZqd R0*}='n7mhI rԨ|q#'va `_ .M}i=\ 66!<qoN<;?z'|HgY|t:AmxHє  a˺Z M365m|\{{|iyԡΙh`y8rtӚ =F3 TNRbld{t\lk]tAVTqPJ/6Uݢ&+zJ06< oqWgqQ= `_M ɹ;w0 aU8wvIl6סMJ5=3GVn񣇻;['unx*C{Bfe9Ө>LJ:UbUԾ ` ӂgUF1xÃL#3!4ˣY^hX\Uس8ccę1I|}wE$|< &ud_)@(yXZj[zlL3Fi !xvu-db#Y: GDia沩ϷO2y/g_E$ݡ^Ydt%M&*0o,Dqs y/5{WhkIӣgo}BC"`LL LUGLJ) qDWe<>mkr; pQ|ooܤ^O\:̛=Kb7Ne_V4@D_9,\&0x&ȯJ+Wl r|[Vk5=R ` v &+6[:D^%?zlGly+N,xyTT|i#pg[asC:@LldL ma/jrԵ"\jÃ3ѫ3߉3~y~zۏd R ɖLw"X "wszosK|}&Gw qVy ?27pSL jmLT6hs_bZ}K/tewjgi_ǵ^cе>l}ZN iǀKR,'$=Z>40%0YMby5ϏDq04%6b6Yw~)9Jy^4P4LgFA'͆Q~{*Alċrڄ Ddzs,Nn=9@U$˚%isX WLplf1"(G'q0,VqL S6^:C-5)g*bT\$}H!at~;+;fipF7cf0b$lF,87N@Mc99 h&+>x2Iϥp[-g_z&n&_n3YpX$r&ȫzߤg{H)ċY8S<*Fvkd&#hUn_xC=q&x;kF2}ⓎW{ 1^AOk,o 9l{/8uۮwK^H(>ŀEcM4>Hv 9UWmi%/.c֯*\/UzͦKFC7ov^)BD %.=7e%9okmu>[XԋaE#kÑiv| o:_dY'o[/Rш>\޾&s" R˾yr\KOb=B+@ qk'/O5i#at)jOQ7-m>e Y^\c`U.b\_qhfqEoKK`k_uVr亝~ zF@ϭJ)Q7h c=wmș6|>[U d5fB.P^#Т\6Hev.Uvԩý78uzAhB  4{ aE499ٷ|F~{;4 TyY k',Ѥr]#=+>!@m5gO7*teR@dIl;in{k#zz 5XVUBתPbڹf@6{+D#b.%Vʘ(+Իt}|0jrjTY(YwR8qU8]'bLK]N&"D1/Ɋ<&%Q7#_ܭـ ཊ&L!dܐr }%.m1 ,t{JsP0bdg!._clW 6i,M`Bi 3,]5B8$ h26l^xhj-Zr{LܪEv9A,Ɓ#Q)oZ (Z]NjA;dNJ ,]n-Nσ("@ri3>Vj n+Êjvvyǐ䧪Zc? 9ML23Ⱥg/X qΑˈk\e&d2e,ĥay0OZ359%Fp"}3)dahlHF2=c>A5Yn#58 {2^S[D1al=C!MI"Z2[ c횸ӳs /1AN}_ޭDPtX3/wDE;͛FF3Ĭ㘙"Hn'h3&!Dw."$ V]rd?ěhJbC?'}x|'ׇoOŬ oxO/wT\] VvcrycKTВ&>8.:! "MGWOr&G3q"*z͉4XpVz-7G>wW5q0g2Jѧg.UWE%t&9UM()^y{rG~, >\ZY ؚhP; Gm3pC1;Ѧ(@8a Ìpħ>'>e?//ޜ}=_nxOfU$坜<8;Tٴ/j|bm哑M1f.xba'L.Xm?z;N{\OI(1D'.[}B^SC/[i\nIP+ވ'L {ɭKK#Vh]>^Ts=uwMYa`b# '+YY9>߰c[~80|[*̯Z,۔5x3_TeAB8#>nsQ XɹB"4d/C{ZK Slv@q,~us6M*Vy9ieDm4DI9SRI!=T27FKVϕ\DZ@̡]žt1~jWo;{)L7>~\Y[c0ihNˮ]B٢EԻs!ѕg rH}3*Ցz-#6N&Qr x G3q8[t'GV'WEC\@ַsd\uIT]j\̻88Gi_L-$x9LT m.o+dٖd)[4j: +Ir c~ j2 3PslZJȦyIz)ӠGUzd'(+$Z"K'L$Ԩ=@UeJ7nHgxgOІ!$Q*A~)5m-h Yp'-W1W[ ?5yb>=ofmKlSfST{ilc-:zUUèJ\iI[jG.GeUCT9@c]{*Nb5E9?q9en!*1;䔪yQyDծ%@'HΩZʗJlݖ3KtΛrǙryp|AT0w'>΄#TEBSi\f|#B0rRt{n Lya;R}3qZiGQIݷ#|˄G.Å'Q7RYiCM'|~` E,19 46`DL4s&#3HK.~{~:ĸpg.lI'59dݥTQ_"2KCl ~uhZG^lAZ8/8?g"lA1j}~Sx=p꿠axhe=kvxM1l9-9}}Vt7+S;ǚidq{Z}zӵ.:&2PNGŢVu#@^m5뀉MɭԸ4RC19^,MB#. ۈfG#\I(F1)/DF)lY\чQ^qupTEy050E A~e:dwq͟ /EԪ5O{pe'GT%MSdȼ$t˂p<㢜ILyHqli&_D è?] J%<$BQ/ٷL@¡pާ}LqNJID{pU+SwwvVTP&p})9,Ԍ.E(q6A%SD:ϦS(0 gfz[mZMH#w g~5)@il ӂ-dt^^)7 {^jSB 0~9t`U;ҝmQ2d*'a c/iܜ%fgǜ(4^Yi*|zq!Y%7ۅI_f՞M!?-ʌfrpMD'yⶈDz 锱Ne[xHM") LzѰgmuk&n3Ϩ޶,w5SP_BIr(yV#/PHIJ=y#Y gespyΪ(^"czSmp%,a`柲@at:̋:ϭȧV8v~4ə(WfI.NqbtBACݕcHPEȊ$wd!{bpd _S#ө')lp 坵^qVBDPU+( HHܗeWS΁ͺzu/F"I~|V\6,KG>7V$uq,Is{Dv%2Č$j6 >!pϦE}4D}XÂQf H9/T;s0!Ih85pbJ_kǫRvyJ{ >q&5宏Ģ7XŜ'/^B8F18HV#: ߩa >jMoO`::O㇛Drʎ1s@7lxꊤ6̓]"KEDo`M(|:n5I"+;w b٬h6NbnVsY+X͓6b`L>'Η8әLNkf\輭p~Υ!*{9˒&5{6 zÊqu- 46!_K\2:4M q'YW:hJAFR"˳E#T9IQIā ʗȿ4 ȧ£MI40GBP(DinCɿB$F9LK޼k7kB$GXm7@ /!yD#78['Ιfu^46w6W1,yh;n+5z_=]I۸hѸ1A$ 7iN̿q5Cg]ܔmiuqʡ\s{J9"F67G8&؜&fEMXjv^9qvƏO(9/m55HrSff#ό:n^?NwdpvH $,jO퉭zjnI5J 5ևYeNF+eِ5I جPRڧ*QUJ>w*]'> W aUzRvkU=gUyD%{ .8N A. u9mp:ݕHݚhh*N7ةl?ma\llo??p4.&Muo_7P&RyXh9+C4'2TA9dqeًBގ&BLVv; qUzݺ Z!&wwָ]YWMIJ>MI]52h>[~[LfT 2lJ)-@O @PD[ YUG=r w& HixMu':-k5_Ҋr=mp饶|IQ2FԬs5wPIT P`rZ\;LR+!KNéP<2ي8d,ȝK8ȖrFU̻"D&JFowOZ%ȃj+R[J `/#n:򁋉n?(PLs]F$/I4ćf=|ETm#kZ( y5)'>^W<֜OZLL.~v4}Wp h_!2iѼwsOGW^3͔P&taemy9@Saq> BHH Mv&$DpmԨY$Re'M/eTIĺP4j59/uAB5t?hpG*:֭R,i3ږj z5t}EeB?Ip8޹j'/UAW _"G&\Pt\w1Of`R_ښ-cp/w=ښ~㩸yOHlP}0tnw綄`$r@J5:[׭3qaE ⑬ო/xqTM9' ,̉GAf){5% "Leʊy&u6BbeT8Ϳv9kwΟg">˅,΀ De 7f~Y~*WRH1M|lj^uZI]jhӱ ae 23P{!-iZY™&IiSN x~AU7E`s"GSA 9d)v M}$;Hs6%X_L KurѓM8Ϗwg.5i/V T2̺i=%ɟeɫuX$PQbry\$%؅wn6~ mt I"ZgAozaL\Iv6dx(o>ͶfӶÌ*Y$DN6G"rp7%,0ʺ78;^r'3)/X4gծIgphHC^uq+5ϵceiۧڸ.րE,/-mT-:vD.2ELaZNجu@*~XRT!cKmš Xߜ)n ;; VNnikKV .נiց>8^sm&;şV~NF tC"B+[%Í==3Z![Kvh;=~Y ,?9 d$Ks׵n0Yi7?w2[UF'鸠J=7@K5t<#FmJ%;kŲF9хZ=Zcuz#)-WMjB+vi>cdá+wO]/1@}&DYg^:GSLC0&tԙ6O#BG11uh{FV(|m@?Mw$Ai$%,2HLJZE<Ɣ+W@3i/MNDvZQ1iH x*۲19wv>^!S: c%F,=w_j O 4v +*?[N'iA8w;#IO:Թ:"ʻn19=G[̠2Lͱ@)qQW6QH»{-h6;kz `q:fb9v>`w -b鳟rWFO4r)ԤgJ ͙G^=+Rjf4& U33,4I34SmuD1/|SM/lxMpt"` ?Lvu6L;s(: Ξ܃êd;o>2?mL[`N{24L*y,ͪrsRddz%^Kv~o2K:k7Y0#"yصň:ok,NWg f]5Dx@lE=3Oկڣ,-tb3ݹ嚏OU=g̐}q C!)$yQ(t[WB rWAR+ʗ^QGm䋉R[lsprXemѠ&?4֤q/hS?E/he8Pi( euI>xH[guD!IR Z V1"땱#F0u0yX0lmS}&2F_8|y3Uϑ ,=rjnv RDz,zB9KBko2u9yx&y;;H7J,VY)ϬHz1\I@rN~6pxAz{Eܼ˱&ԱPSbZ%+46A'Ok|ʞ?dyt>nOvd_aQF%뼧g'?-kmV LFⰾ(ҽ7/l2HG'v7O- w5ϓpS8Yܒ\Ƹ dp6/7͞}~EFv&O)Z\5QW8)8}vfw)}3cXKB 1Y6MMpe^ߵqxIiI͗ `݃.8eYaoONmnCӛ8p5~7=dqN^u/!N1or~Qj-JmnXE:e_&QJmv$5Mrr(7TїsJJc0-ag\U\5Hu*w=ȝ u\1ͳ[GVCf7o7e+t:߶GkY殂=NPob֮zJs*է=mr5[Aӆ8[:Wd7pn^^V8Ex<&Kqbd<'~A D I}Ȅ 0FZ?V$JLd摹= Ru k pU֛csWp ,z0_x,/2S3\Q.sq ILjk@^y{HI7ߺEPL;&ZVͩ0g~eK ^ 18"usYh`"ԢŔ ';˚,k ~ޱX[7[ϝ٘?Vlr&˞Ϯ*OFK#O`w*+i?y)ͼs\  z#r'uV4YX=>.;T?OP*-#:yjeWtG\40%.iq\ۤ]vQwu9G｜y]s*Ψܱʐa4*^b2϶gb_4SBKT4̤](Y~Y`y3hsN(,7nyx1?TR5_L{kҦYk^#z嶝-)D4pʟa9bPHc5ӘP10Iޙ3Ky~ŻWd[(OL?uj ~߈|aӗHj*|>-ޟx6r^~?Ma)q݋;*xoRUU?,.Oͪ;٭IRIzΡxjTqWl,EqS[0tWݠi]@aume'-vH~I6$2JF"k# 'Wlsk]JEo @nMەRs֌rZ\wLQT9;FKXj &A94we+]R2˂3E1/uuL1Ǘff]v s:|=j^ba:ϝ-U|~m{k ĶJ}jlS}] ĶJ}jlSf{o͗'gIKc܇imwOu֊ùxMaKS*Ө8b`Y#!W_G+;Ovv;pqN9mِ3{sHp")&ِ&Kru*GI}xFHT'ц֊b:(dtdW#8}z0 iI QX ax;,sOfqByfIBrFb^zjBZQ~B^BI>ehWe_PSWPZTWPX OK-ivpswwMGkrrmNΰa*|ѬwOvfj'/lDvcF:ֵ0̵O 6VTAx]ILSAW"4@,A&l,B`X"BkJ_! HDRF\DH"фDE(n&.ԓQD#Goff37U $=K .@߹;,'o&O{,H*jS`:PO{Nėhi6>L0U 4>i7AMGeizd0(&cs \OcE7)"'S A@`\1 1xɼrplu~ʊdzՈV79jV0tt1"5\[ 8"y[e/o_ͷfWe>/)6J|7J~b ȚJ9'*{Us2V5hn܀6?L۱9o,p$wW ULBPROD;L'-:.ڬeXG'Cs3J;ΐ$䧧:GsDiڭ}P/2cz{E Qɡ.Ily0L%A 4K>1H:CCP1[c8K胉Zl8~ tvDS PURxW]o7|_U锏m 6l@>Jb|G^!Y,َѧXGr9;3F{ oąnKGY7< {,Upl iFmgkQ+'ˆj!u-nւTidmX'*H (98 ""Vqy%Pfn,S5Y$oDBܕ (}ˁԊf_̈́6^rLpb3651[޳2-0r.=r-s&1 >b*W( SS쌤6!_D >F\L<"T*dEN,̊t:Ni`q \#D|ߠܷn$occ,7 p~}듹3BG68tȺ_AdޞuObnCHx۷a֞ $ Xs=YxOT7ʧj-:s>⏍GYVE6W?s),BStشliEd=cz(uoZЦA Ixf(B̬i hf }+Ypzp *Ջ5Rޜ\([dֆ+>e,D]K dfRi^5 v7'%;:$yYvo NVrNcT-IF6b\˦D)1̍wέPzB iCmjBU G0p*N(2q 2j@:PL ugG++_=i`ꀢfV+=VI2Gl^'+ւsq&j%ٛ\\bs1O|9XMFR6|B02Z;KʉZ}۫" LmI5kaSm')AME.ئQ FY6ID)DlN$p4b:kpZҞRPfE _QUpQQgJ-m- >tgB\߳4F]˄OPfDX80+Np4O<=i?!&VPtu:9_bBFsWj4_018aq‡s6 NӽI3!8 u8ĐmgW;޳CHIFUWG"42jIOmJxxcPxt/jwM])L᷹w/ iK^pP7Ye5+ɪ"'$٩߽mvϤGJ-jFȄߝNєer]+0?M4_u2&`>eď հ56bkV1x ˧ Oc~$ɜCkdA+zO. ]6 >x!9UIYa$}ɓ%'eԛQnOƲyLn<ъA!~!72}bVVV(6y/X3tzBIjq2\٩`QN5pՓOO.%VW 7ٛ(d\<2ъ~!{|==>xc# Contributing to ,J 5+ (for mqγ_0M  OHZ zBase repository. 89xVrϧ#;1 >NK;)VV#*Iɸ{ ,-tw{Q$=K}xtqރgw&aatYY)-'ggZ;KH^RKTFV7#R,heYiH,*I3)dVIjUx.+ Sxl'˛r[7% ♥1 ZZ6<yۺ\]Qpmhe/i*]x&0Nvim~lLSS=ǝi)EY̴ 5R,9fSs_ȕhu4 7ۺXR_uٯ[ɹLjA>-.n^D!0}rm5l>#$` AB~N&CMq.5Vyk8g|Ckif Rj%!EElZAK_cV)^@N;Y!7xz-N. nך0 F JH֬ˌGdd8R!J=%ך,Ú^2=fHQN֬T Rۥ:T!4~es t !_>#HeRe|}+EtmEiK)!7|<|/FyZOFw0h :=\Yp:%Z?ϧ,kũWW77bwHcs;Pk~SFg܁l %ʃnK6z&D1"P6'K@r҇G};@9tῂMa?YO YڍAIlQoc>zjr><:bEPdVܽH{Nd sYܩ*Q؋ <TfZH敥yqxp_&v3u׍fPN{,=}Vh2!W 5g/((WPI{BvǦT:/wa`3inXOg]uG9Ig}Ї钍Э4Mkb*&׀;)h+}WU 2 cl#gj-rgj*vw#OWd30F*h==h|Á}lu^qB40)G}ђ%dC8O8\Gq%ze[+GMfX=ukPDIC8e*W֮Go %x Fk~v>/gL{'kgAóc8# uxҽ]HeW<qJپo#Ɋ> VևURPu{ i-fL/z \o$ #Càn_;=t9.0xun@E9 x$eTqUrH'2';\©o'aMqoo>z/Ϗ^PzCQE.ģA?p6[PZ. XD֕_CqkB8Q >q-09^w䠡؁ݖZc`ԓTNi6I G?%̈́<*4mL'}_RֻN+e 2Szhj!-U5z uq]1oq'OL|1`ЈPɀ7PKlwB`ڂXWsG-YӀWu*/s^-*GR% ި8kيɼxՖ*q.BM구EP~UB [J=*J{$E^NrQo%_ Q:]0T^R"ٜM(,rjl:B=_R\TJbI0T0TB ODHW+K5|zݰ7/sFKj}c7h x}zȵ/oI+ &E$Y2_?blUc*K:ITnVu2/ ,IU#UlU:]&]m[Rjs :.o}!*]w'B"6&^ ^yWI整3˸nrcN t4&>Mi60!|?߇ϿytEd,kUFI%&a+O^t֋$˰zs\sƺ+!+,CU96g 03VY^D2Um!Kw# ĞfyoL31F?a`;ؾFh!,U3J".g%@ CjBQ';;SȦOJ{b@i*(>:axsM(W)J;$7KL!+ź4-pL2167\@]ɳ9ZK--ke?!E|_iLH]mZUPp9DYaZV oWd?0;|9IEBP~Ԏ̒y 8=xOlÄs2*f 0U)T%sc3NJ=eJ'"ϖycC+- > "Pk a{ek@fh=R+ ݪ%5՚}IkHƀqXצfM;,%瀿a~~HB=} }[ݠ5svX Tp? "  `a|.W"gCc`%1-$[[BٔɛdQGǥЈ;"3^YC2C%. VjCT8Ga2lHLPv )h4EUBFqcc}~ğK\'ɮKP@kp^TUwV&7V'2LXr+`'=#š_a#@Gv#co}ܹ4 iEQ 2sgS%K3NW\k3>;:!vgtkb:FoL7T+[ -* XUF:EUvv4X{3ѱ&,jz vM;5Rz4ǃI =@7hx9pamt"9dly', 0ۏv:BME?]ūʪ.,XkEԐ(N]A.c B*F٬"]Qvշc+b.EN7;. nzCU=ĀS\Uss&h:|aM8N (g \Bk Z[(^!gl0 EB:2 DK(_kwdIVTU!uggx^cp0En03+IU jP2?txD0wJf~PSm$f|s uxq46Ū2!f8]m&Ƭ:JvK5BgEls\*bg]<6:A Z` %6QVhI!afȪU嚨|l@TwנR,DN3 l,1o sl0>cXGteU. &(Vs%5.E +,ޭ(tHR"J޸5\(b?#Z5_!5 9ihݓlvU)utO84c׈n.~XB bUKzsnhP=,RG 0^ Y~Khu`#jG sF}ϺOZk#͍/ƙ<rxC*_/Nƾ%'{X`v-. `!:lŸ l|zv48|,b@NNÕQ_wŎS1%R˞n }nE` ƺ2SH k,A;ѴP-&ŸZ%{Q:oeJǺEM\1Omt3͔;%Mr&@I_)J+ٖ̆Jz'p1tKfq~S\fq^EY&Y8*ͪb z3 2[86ԟl(=)ʋ\G#'Q+JI**딾$$4S2ϟUاT^ -U[zIDtI爉9 ]#ưz)Ö&c lI90O 5E*b rt85^58Ĭ2A<+\p?Z*柉3.[\qw dX3;# (&5qK#ij{g4:moŪmP^gd jς+m}+;0{?HRGL}aǒ.5GGtCYEBtx/EC 26$8>Yq>~ R荛{6#|{S'݇Kv:btsOڞзjS5w.Gt=鷞YθqD҅ZjzαH$@: `G]Rgiu ڼ?98G^|]o)>'Yܴo{q{q/vC&~,`8wxBDgkz ʋ|X7Ht,wN|>m,X)&͑ʕ"ZGs|0^Y%q%j:lT2*sn!tĐ\MH$6PSn5D+)c %.2X$)pb|(q\)9#Fw[-Xw ʚV+Z%tNx̉R͑ qt_4,kss^_\?:h]܅w[$e =9ud|l>Xx_l=-l)^бfJfJgӁ :H2]KLBx^t8SChK˔/4y;;z 5S3 +k;fg/*p=XXV@qq"t ;󋱯{(XrlD04䲷a06!!$ju@J+K񙈴Ŕ?א`8x] !*m|0Oy=p!Co/QQ=+mZsQˌ'4뵫FnElV PA1JVhH{w7B&Td'g SlI*``E8ԟ q+4"K5 %Ŋuf ]’pyy8Smؼ?0WT+ cafntm mܐkB;}jX!v8YeƎ Q*nk?o_qbvKzQ~Pf[g'71G =utnr6gTʙp,i!,VLkmr5%[Wq=]3h2&WqU9[ X:316Nx)nu|6A)љM/S&db? k20bM"ѢFoG.N|v2'@CuT8ո,Ytj@`7 NM.U鋞j5&5}R ,&zWLj|8ad妿--m9LHe# (C7ɖ0 (W>we0A) mZOYSK8MD68gEI=0kcurg.r]S"8ۻ$A | %6V>SeT3p'prtM†ry-6V@pK5YB׉&EB6P0 .d.<9/AG,$U,%,)(֫|<=j??-BePk6#)㿵Etj *ڨ M9s$!fd`>BtqҞq 7=$9v!W].p4kSnHgSFfBi[H}#ՐN',2lcW-SpkbG$kWqiry+eX[KÊLT4" j%}en5#~gt`_RӲ DQLi$e%$XԴK.ʱN]/I>Vw[f'`y2yPӔi !ۇ@CKQi`;fiCZ.,X!K7c'ϳ(Y(0MUEu,\AlC |V:) ZD3`(U7`k m+4}]\'.}ϋVz;3&ReДRqIYV􉩩g8kf9̲* oک``@{ ӽrL$,,,K$LUD9x# WIE^{Z$Cyҷ0hUI@u%+eB`+o a+ n+K|oޜuQ/s Fd=|tz tT=5?h{ %dKخ ;gj*#=OdO"{nD-=KB?*߃#Lht2RvM9{=5 m}#L jOrJ6C;(nZsop\7ur"#,vǃz*+Y۔Yů L*a6 ʣXψN?Z׬uW3WuIj`33S=ct5 3 y6Zu.Erأ7"N2#)n;KX8hTqu#yz)"?wn3XiW^[T6ǘ}s=z*)r$oSM]=2IԜ\`{womY9A c<3+0KuıJMǴēO1go lӇNdg}A֯*tvvZ赓OvlxE_fbL spzܢBO)sG֢U}ƽdJoөР{5ƒ7 {l:vlc tKbAQBIrl(H }$" N'<:5:rPEeGED7݋1dnmp9LȒjg&}lG_~D4z|>k:eBB<<=8_~:Y.e"Im9gȹ=A: |cxnKkSyJ?IFrD{Sge]*)IG~za%./\hZkv׹zr &qM/mF[V oy9nt9y2V]㫫d*xg|ŒRAV!VQ=O==ϚC~|cM;@Z. a2i>_i\-B\d{#)*,6_57σ@vdObFUHy#Ao ^~C&qm͋ynH+&֢&4Ho}VGUih6Ӳ}u*XT-Ԩ.^Dzt2W\䬸*A#KZz_?S^1U6'P‰ <kgj0ً{hZw/,ۊ{D\0iC྄0~hYzm9BQOo[w%-9Y!)rrƄWt?6ѻ8zICt7R QһɬVJÄ&-{9a~v9CSs1:`~BGM6ɘ\?>ap m~SyAك6BMBr;v.A3:?Jnq@ׁ;ʙnC"AyҢO{{ 3|@/ׅIaRykV)9:Uox|iOv!xs><=SI83PJ9ݰkt`ܲ&Is7.X%f01KjltjI5g4 jEuv]0 auVhxfxt4<8;_O?'{5yhHdLK XtW` ǘF P1Y`RWL%DFËfTcr`1ړ]yrLD^'A3{ ZP|K8i^լTR6T܏MFp+tۉtmTrxA.ե];YJ(Ww;I8:8ؗmx6>|ISYBBOUc5׮u\e= *+` ҇=0ɯXq!TK_-o$jOD8S _0IٔOx%\($Mrq(V8OFQw)Wg a2fDsW퉃zJ Duqj72.͌*p$&c_)j4YB W0_ l5XrbxW/l)}<]:Kk@Akީa:1هE&d" R`Dzٯ\/S[_ȁT|#'֍ ˓En?9mΫ< lt mO<+t0Qsb4}dR玝cVԍ'}[_=aax&Gmz{ܭuM0uʵK v~-3*մ; jd߇."&_JErd7PzK{-a#T$1+ӆ5d[f2|-G %LA$k+e RQ+BS`eKOXܥ7tMMm<`՛ I 7 e['R :A#; %V Yږ ZO6~eeӎlįgUO[ JJ+^`e>VVC".L3{k%奡X)-QSn51c$L-KIV[8d 2GU:V>.*}ǯɿI^Pq9aIt2߰oQX0gGb2<'K6b|wFJyd*#JɥVi]+5RNb,`L%lkWOF4bW_'#`2ZZ0Ja{wp[YE&i Ûe \F(1nk *Q68jN84fYFesqE#4Iϫq%t8UKqXpU[wCgm*L0BXB0Mgn&Z`(d  8ٟJS !~VyHW$Ow݂`k_x*:~ڸw\c杖l|1Yۉqv_JT2u!i .OuJ5 rBi*!7o5+PڛB}qp2/qabLO5Ŝe,{5c#Q`WB`!lITA TJh YkN4$:d| Jvi>pEX#{ՅdhZ׿hfLƋ#AeU2Seސ9фI0ܐ @4Vc˻`$GTP7j"?m[], Sof) !ᝊ~Bi(͑(OS~,g!X-'JI(v^zZ:t<)9h ZuD :ro lpPp4^;*U(23j+mnɍkU(V j9/hlxnl(s8l1F%QJuD2JЉEHAnpΡ,FHJAU7$kvq5%V8xoB,n.CxQ}!jkǁ8E|`̣knL9(N YeU80&dQ]tj҆ڭ=nUbźN߬"v>sa0ے2.K@}^}T^8yHmpBH';;}~M*<# 词74m>pSh Ȋd1"+`Od*4q -@ uʹB,c0gd~S;tMG ,Tw.]hz荑HzBZ#:d7o;Ea]<9:ۡIEoj"v.`H%nCj_[X99k8_ ɗ}.MWeHM$FngmH*;fjؑ>oF'iO-Bf!K5p Z!|v6fʏl^Ͼs}jz(2:#e/juZ6)ǖ9eY~h 4)v'9zT*մ0D@,oLrjc{\B<}+6?7$ZguGϾjkllܷO󱅅Ŕi곛Y|졸D9=hT}$sJMTU=GU:l@^D>Wz:{n3k  p :`J9_ $8gp2\ bed`6u;oWfHI^`gӠ٤'TubkrH*Go.u[e"(DlU?z9){=Iq67m%n5Ո-Bm&M t0K6 s@!ʵ)qveZN5 '].-ŵj^b,Hf1໨@|+W4)m4XքI dƉU77;A on6Kpp#HsĽD$DO,&z (8A_(K!2IB${=LMOk0\8IB%V Ū#cZQ =XaJ7 ZM5S-ػގ.E?4N` Ub1 ڤlu!]SlMJ8~@Ь Gnm6PpUr{4ˋwcZ5 9 ɣ4KNV _6 Yt R}Z$w5`}E*iS.ހ `k}!eeb%0˲hp"uLU-纹k> MÌ\*的ڊ-Wళ2`iiD=_n{@WqDaD5*g;Bp]@jý2~vg ynHfN:tp ԛʓ%~WQSn ?Y5*aCM4_o=>1_x"|A$qxh%czF嶖T2|ǷpwS zc`µݰ\NaWKHUܲn׊6#7]nX.:17p&\;QpB-h+PHxs.dT"04؀{e-J;8 ĈW~9!DI1}# ,BML)3Nw,{<\29h6 Cbzɟx_v"0we ,3H@ IaF}жp"$p:4=j83̓W,Cs֒9T]8ٻSٛ=~1=ԙ":U/̳=K͒pnE(0mqx!IeKZ$>yK 4O|6J&NNP9BVlUQ|UitoF}pfj'L!I&䂗?X4W E{:$ɡE"DhjYnah $(fFZg`)F/߶{{x3qQS7 "GuOO?qcQ7PB_iǰD)vz? kƽg{[V{uTk\6aG]Qe7WW%{ֶ3:0wjJڝ?^h`6{h@ȩ5g=9  %W[L5K_cbAx>0VlMYww3r^yMw>9a`/mIvQ FęQg8j,qD'yT{ ..8؏7s`]}OO˻@JA}PRr2oi(n9}o&:]_{?_+-&&*L&r=B ^7(ؓqҧ{7AANF>Sk[zUݚ%z͔\^/jM)|PS/}u7%ߘ8n +b"Q[);z 4"Oq 7Xr@Vlȝ;E[U{ #] 8NLFC7O>{HLa LI7Cy(+2(]psqϠ$M\-qʮȢ?nSzlrk^7;w- u&7{b Gڝӹf0XpC+/J%= ]9˯"#Q*&e59Q-5cPݼQ5=ᷢAKMYxeVKohEQC2).7e;")YPi,MLsqw,0:r/p.`# I%))@Cꮪ?JuAiHgTwr!$h%e1`!ZcIP!1D,  JXK\TFEad+ H"{h1&h1o1&dքX6ofI6l|{n&57bIch! )RibWԭrilMTpqx *P#HAP׈X$[j9cBy|0aA?nO߶<;,c+1G.̐%bJ-*X$SZ3SթExpr] 4^}]׍ImgiM8Ɉ@E2W}Y?nʶVb x›4. O#7&Sp_oѸhc Z$ޠŚA@rpQOꚇBHJ\K5g')'.Qr0,$E$KS׉v&$5d"[ļz@X\A$d]u^QS$q }{SzNEq#ewP^qgw;;@ g<3,3h95=iJ]3ء3d0>W u ζ ^$:ّ zF{wJ$ %i^$%~'㺑&B$8B R̳ڻ@.Yg ˕%tCD Muh5U&[Qn}ԅ^,h ]A) ;fGe-Om^N.l/ܥd{繱=ib|A 2`yb袾]=7dѝFt>}s_.\ b9STX4 , VQ2i]ۥ ,\nYXBwjeR뾘o7q/`&pF1"=L.+P= ?1 0VZ^htAQ9;>4~0¾<%,]E[hE${+a2e F~hph] :hL4&'`: 9P@Kjaφ.E=A Bd_6_KٰFRBh.̣9>ijLiJMhiYc1 +wD{"WHL[MVUkY (6K[2ێvtm} LgZm)CD'Y3q=ՀA nJ]'Zɸ ŝzu)@M/ܛ6~vEVZngk,1 h|-u=7dW[ Y 8Md[(Q?:}n/bWi^w$Y٤kJП{LBSl&zG]z?d_8xMj1)rcNCI NE)xVh%!iٔ@O'^'¬Zj=5/.l\ML]kDERQ7l,cчG_;ҒJ:w*!QFZ]^zlUbeEq+%!8zvBϘb[2)tBkս{+nV>HQLp؊$&|)bd}I>"(TEZ"] {Q>6x™y؜*rl@[7 #;]|4Gȹ8Ɇa~YC?}syXiP;hϏB505s)\Cbtk8t8c[hnr"i+yQi0 'BxQ?# Hanzo Base Security Audit **Date**: 2026-04-07 **Auditor**: Blue Team (Defensive Security Architect) **Scope**: core/, apis/, tools/security/, plugins/ — encryption at rest, auth, collection security, token management **Commit**: fcc87c0 (main) --- ## Executive Summary Hanzo Base is a well-structured embedded app framework with solid security fundamentals. Password hashing uses bcrypt (not plaintext), JWT signing is HS256 with per-collection secrets, the JWKS/OIDC integration is sound, and the collection rule system provides granular access control. However, **SQLite encryption at rest is NOT implemented** — this is the most significant finding. The `modernc.org/sqlite` driver does not support page-level encryption, and no sqlcipher or equivalent is in use. **Overall Risk**: MEDIUM — mitigated by application-layer encryption in the KMS plugin and the settings encryption system, but the raw SQLite database files contain plaintext record data for non-KMS-encrypted fields. --- ## Findings ### CRITICAL — C1: No SQLite Encryption at Rest **File**: `core/db_connect.go` The default database connection uses `modernc.org/sqlite v1.48.0`, a pure-Go SQLite3 implementation. This library does **not** support page-level database encryption (sqlcipher/SEE). The connection string contains only WAL/journal pragmas: ```go pragmas := "?_pragma=busy_timeout(10000)&_pragma=journal_mode(WAL)&_pragma=journal_size_limit(200000000)&_pragma=synchronous(NORMAL)&_pragma=foreign_keys(ON)&_pragma=temp_store(MEMORY)&_pragma=cache_size(-32000)" db, err := dbx.Open("sqlite", dbPath+pragmas) ``` No `cipher_page_size`, `key`, or `rekey` pragmas. No sqlcipher dependency in `go.mod`. **Impact**: Anyone with filesystem access to `hz_data/data.db` or `hz_data/auxiliary.db` can read all record data, auth tokens, collection schemas, and settings (unless the settings encryption env is configured) using any SQLite client. **Mitigating factors**: 1. The settings encryption system (`EncryptionEnv`) encrypts the `_params.settings` row using AES-256-GCM when the env var is set 2. The KMS plugin (`plugins/kms/`) provides transparent field-level AES-256-GCM encryption with AAD for configured collections 3. Password fields are always bcrypt-hashed before storage 4. Token secrets are stored in the settings blob (which can be encrypted) 5. The `DBConnect` config is pluggable — callers CAN supply a sqlcipher driver **Recommendation**: For production deployments storing sensitive data: - Use the KMS plugin to encrypt sensitive fields at the application layer - Always set the `EncryptionEnv` environment variable for settings encryption - Consider building with a sqlcipher-backed driver via the `DBConnectFunc` config - For the platform plugin's `OrgIsolation: "sqlite"` mode, per-org encryption keys are derived via HMAC-SHA256 — verify this actually uses sqlcipher (it currently does not; the `OrgEncryptionKey` config exists but the underlying SQLite driver cannot use it for page encryption) **Severity**: CRITICAL for deployments storing PII/financial data in non-KMS-encrypted fields. LOW for deployments where all sensitive fields are KMS-encrypted and the server runs in a hardened container with no local disk access. --- ### HIGH — H1: bcrypt 72-Byte Truncation Not Enforced at Input Validation **File**: `core/field_password.go:181-195` The password field validates length in *runes* (multi-byte characters) but bcrypt truncates at 72 *bytes*. The code acknowledges this: ```go // note2: technically multi-byte strings could produce bigger length than the bcrypt limit // but it should be fine as it will be just truncated ``` With a max default of 71 characters and multi-byte UTF-8 (up to 4 bytes/char), input can reach 284 bytes — but bcrypt silently truncates to 72 bytes. Two different passwords sharing the same first 72 bytes would authenticate identically. **Impact**: LOW in practice (attackers rarely control the first 72 bytes of a user's password), but it is a correctness violation. Users who set very long passwords with multi-byte characters may have weaker protection than expected. **Recommendation**: Pre-hash with SHA-256 before bcrypt (the "bcrypt + prehash" pattern) or enforce a 72-byte limit at the byte level. This is a known bcrypt limitation and the current behavior is standard across most bcrypt implementations. --- ### HIGH — H2: PostgreSQL Connection Example Uses sslmode=disable **File**: `core/db_connect_postgres.go:15` The DSN example in the doc comment reads: ```go // "postgres://user:pass@host:5432/dbname?sslmode=disable" ``` While this is just a comment/example, it normalizes insecure connections. There is no enforcement of `sslmode=verify-full` or `sslmode=require` in the `PostgresDBConnect` function. The function accepts any DSN the caller provides. **Impact**: If a developer copies this example for production, database connections would be unencrypted. **Recommendation**: Change the example to `sslmode=verify-full` and consider validating that the DSN does not contain `sslmode=disable` in production mode (`!IsDev`). --- ### MEDIUM — M1: No HSTS Header **File**: `apis/middlewares.go:546-555` The security headers middleware sets `X-XSS-Protection`, `X-Content-Type-Options`, and `X-Frame-Options`, but does NOT set `Strict-Transport-Security`. There is an explicit TODO: ```go // @todo consider a default HSTS? ``` **Impact**: Clients are not instructed to always use HTTPS, making them vulnerable to SSL stripping attacks on first connection. **Recommendation**: Add `Strict-Transport-Security: max-age=63072000; includeSubDomains` when HTTPS is configured. This is safe — Base already supports ACME/Let's Encrypt. --- ### MEDIUM — M2: CORS Default is Wildcard Origin **File**: `apis/serve.go:60-61`, `apis/middlewares_cors.go:123-126` ```go if len(config.AllowedOrigins) == 0 { config.AllowedOrigins = []string{"*"} } ``` The default CORS policy allows all origins. While `AllowCredentials` defaults to `false` (which prevents cookie-based CSRF from arbitrary origins), this is overly permissive for production. **Impact**: Any website can make cross-origin API requests. This is acceptable for public APIs but dangerous for admin endpoints. **Recommendation**: Consider restricting default CORS for the `/_/` admin dashboard routes. The current behavior is typical for BaaS platforms but should be documented as a conscious decision. --- ### MEDIUM — M3: Rate Limiting Disabled by Default **File**: `core/settings_model.go:173` ```go RateLimits: RateLimitsConfig{ Enabled: false, ``` Rate limiting is configured with sensible rules (2 req/3s for auth, 300 req/10s general) but disabled by default. **Impact**: Fresh installations are vulnerable to brute-force attacks on auth endpoints until an admin explicitly enables rate limiting. **Recommendation**: Enable by default for new installations. The comment says "once tested enough" — after years of use this should be enabled. --- ### MEDIUM — M4: Installer Superuser Token Has 30-Minute Window **File**: `apis/installer.go:25-26` ```go token, err := systemSuperuser.NewStaticAuthToken(30 * time.Minute) url := fmt.Sprintf("%s/_/#/baseinstal/%s", strings.TrimRight(baseURL, "/"), token) ``` The installer creates a superuser with `DefaultInstallerEmail` (`__hzinstaller@example.com`) and generates a 30-minute static auth token embedded in a URL. This URL is printed to the console and optionally opened in a browser. **Mitigating factors**: - The installer superuser is deleted when a real superuser is created (line 54-65 in `record_model_superusers.go`) - The token is short-lived (30 min) - Only runs when zero non-installer superusers exist **Impact**: If the console output is logged or the URL is intercepted, an attacker has 30 minutes to create a superuser account. **Recommendation**: Consider reducing to 5-10 minutes or requiring the token to be manually copied rather than auto-opened in a browser. --- ### LOW — L1: JWT Signing Uses HS256 (Symmetric) **File**: `tools/security/jwt.go:46-58` All internal JWT tokens (auth, verification, password reset, email change, file) use HS256 with per-collection secrets. The signing key is `tokenKey + collection.AuthToken.Secret`. This is acceptable for a self-contained system where the same process signs and verifies. The JWKS integration for external tokens correctly supports RS256/RS384/RS512 (asymmetric). **Impact**: LOW — HS256 is appropriate here. The per-record `tokenKey` provides implicit token revocation (changes on password change). --- ### LOW — L2: Settings Encryption is Optional **File**: `core/settings_model.go:260-269`, `core/settings_query.go:57-88` Settings encryption requires an environment variable (`EncryptionEnv`). If not set, settings (including SMTP passwords, S3 secrets, OAuth2 client secrets, backup S3 secrets) are stored as plaintext JSON in the `_params` table. The code tries plaintext JSON parse first, then attempts decryption: ```go plainDecodeErr := json.Unmarshal(param.Value, s) if plainDecodeErr != nil { encryptionKey := os.Getenv(app.EncryptionEnv()) // ... } ``` **Impact**: In development mode or misconfigured deployments, sensitive configuration data is stored unencrypted. **Recommendation**: Warn loudly at startup if `EncryptionEnv` is not set and `IsDev` is false. --- ### LOW — L3: CSP Only on Admin Dashboard **File**: `apis/serve.go:93-94` A Content-Security-Policy header is set for the `/_/` admin dashboard routes, but NOT for API responses or custom collection endpoints. **Impact**: LOW — API responses are typically JSON and not rendered in browsers. The admin dashboard CSP is correct and includes appropriate source restrictions. --- ## Positive Findings ### P1: Password Hashing is Correct - bcrypt with configurable cost (default 10, min 4, max 31) - Passwords are hashed before storage, never stored in plaintext - Plain password values are cleared from memory after create/update - Password validation uses `bcrypt.CompareHashAndPassword` (constant-time) ### P2: CSRF Protection is Sound - Token-based auth (no cookies by default) eliminates most CSRF vectors - `SameSite` is not relevant since auth is header-based - The CORS implementation correctly refuses credentials with wildcard origins (unless explicitly opted in with the `UnsafeWildcardOriginWithAllowCredentials` flag) ### P3: Superuser Protections are Well-Designed - Cannot delete the last superuser (enforced in transaction) - OAuth2 is explicitly disabled for superusers (prevents accidental account creation) - Password auth is always forced on for superusers - OTP requires MFA for superusers - Installer superuser is auto-deleted when a real superuser is created ### P4: Token System is Well-Structured - Per-record `tokenKey` provides implicit revocation on password change - Separate secrets per token type per collection (auth, verification, password reset, email change, file) - Token type claim prevents cross-purpose token use - `collectionId` claim prevents cross-collection token use - Secrets are 50 random characters from `[A-Za-z0-9]` (using `crypto/rand`) ### P5: Random Generation Uses crypto/rand - `security.RandomString` and `security.RandomStringWithAlphabet` use `crypto/rand.Int` - `PseudorandomString` (math/rand) is explicitly documented as non-security and only used for model IDs ### P6: AES-256-GCM Implementation is Correct - `tools/security/encrypt.go` uses proper nonce generation from `crypto/rand` - Nonce is prepended to ciphertext (standard pattern) - No IV reuse — fresh random nonce per encryption ### P7: JWKS Integration is Secure - Response body limited to 256KB (prevents DoS) - Cache with TTL prevents repeated fetches - Cache eviction at 100 entries prevents memory growth - Token algorithm restricted to key's `alg` field when specified - `kid` required in token header (prevents key confusion) ### P8: KMS Plugin Field Encryption is Sound - AES-256-GCM with AAD scoped to `org:collection:record_id` - AAD prevents ciphertext transplant between records - CEK is cleared after use (`defer clear(cek)`) - Locked state prevents silent data leaks (returns encrypted data, not error) ### P9: External Auth (IAM/OIDC) Integration is Well-Guarded - `externalAuthGuard` middleware blocks built-in auth endpoints when IAM-only mode is active - Superusers are exempt (admin panel needs local auth) - Publishable keys (pk-) are restricted to read-only operations - API key type enforcement runs at middleware priority +3 (after identity resolution) ### P10: Collection Access Rules are Deny-by-Default - `nil` rule = superuser only (deny all non-superusers) - Empty string rule = allow all authenticated and guest - Non-empty rule = evaluated as filter expression - Hidden fields are not searchable by non-superusers ### P11: Constant-Time Hash Comparison - `security.Equal` uses `subtle.ConstantTimeCompare` (no timing leaks) ### P12: TLS Configuration is Correct - MinVersion set to TLS 1.2 - ACME/Let's Encrypt auto-cert management - TLS config only applied when HTTPS is explicitly configured (prevents breaking HTTP health probes) --- ## Architecture Notes ### Encryption Layers (Defense in Depth) 1. **Transport**: TLS 1.2+ (when HTTPS configured) 2. **Settings**: AES-256-GCM via `EncryptionEnv` (optional) 3. **Field-level**: AES-256-GCM via KMS plugin with per-record AAD 4. **Passwords**: bcrypt (always) 5. **Database**: NONE (no page-level SQLite encryption) 6. **Backup**: Unencrypted zip files (relies on S3 SSE if configured) ### Auth Flow Chain 1. `loadAuthToken` middleware extracts Bearer token 2. Local JWT validation (HS256, per-record key) 3. Falls back to JWKS validation if configured 4. `platformAPIKeyAuth` resolves IAM API keys (hk-/pk-/sk-) 5. `platformIdentityHeaders` injects X-User-Id/X-Org-Id/X-User-Email 6. `platformKeyTypeEnforcement` blocks writes for pk- keys 7. Collection rules evaluated per-request with auth context --- ## Red Handoff **What I audited**: Hanzo Base core security model — SQLite encryption, password hashing, JWT tokens, JWKS/OIDC, collection access rules, superuser protections, settings encryption, KMS field-level encryption, CORS, CSP, security headers, rate limiting, installer flow, PostgreSQL connection security. **Threat model**: - **Assets**: User records, auth credentials, API tokens, collection schemas, SMTP/S3/OAuth2 secrets in settings, file uploads - **Adversaries**: Unauthenticated remote attackers (brute force, CSRF, XSS), authenticated users with escalation intent, local attackers with filesystem access, compromised backup files - **Attack surface**: HTTP API, WebSocket realtime, admin dashboard, SQLite database files, backup archives **Confidence levels**: - HIGH: Password hashing, token system, collection rules, JWKS integration, KMS field encryption - MEDIUM: Settings encryption (depends on env config), CORS (permissive but documented) - LOW: SQLite encryption at rest (confirmed absent), backup encryption (not present) **Suggested attack vectors for Red**: 1. Dump SQLite database file and extract non-KMS-encrypted PII 2. Brute-force auth endpoints with rate limiting disabled (default) 3. CORS exploitation against admin dashboard endpoints with wildcard origin 4. bcrypt truncation: craft two passwords with same first 72 bytes 5. Installer token interception during the 30-minute window 6. PostgreSQL connection MITM if `sslmode=disable` is used 7. Backup file exfiltration — backups are unencrypted zip archives 8. Token replay after password change (verify tokenKey rotation actually invalidates) 9. Collection rule bypass via filter injection in search parameters 10. JWKS cache poisoning — can an attacker serve a malicious JWKS endpoint? **Open questions**: - Is the `OrgEncryptionKey` in the platform plugin actually used for anything if the SQLite driver cannot do page encryption? - Are backup archives signed or integrity-checked before restore? - Is there audit logging for superuser impersonation? - What happens to active sessions when a superuser is deleted (besides the last-superuser check)? > <xy˂T-dq K*6j?sI1YxFò(٩,N f)EVyiQmσ*> ^ y,wd_nxQbL&`Ըh虃u'8,8є.Hl~q/kA,@TLb PJFbZF$okr^d,Xm(&:W<܍K̎HIW)kR/K3ta;Ee\VOfhhO}+X%XC"sbGeP׃TyQ]l$T]rݵy,Fu&ufXj$tf{twꗽl$f}xs]rc. RD},Yv>Uo>t\mSo۳9Rkv 9d֐<]DZT䷕舑Y\2,7얬RڕwgpMkX "D|F d툷ڥgέ~Os2iA n̴:tNv۫*^`b/7 |r޻q=@٣XQ6*bF?aM??fK>VF[F=9BVnA ~8W\D}5i`jkN}LJR^w`^S@²V)fŴP<}wOͱ0+[EXfg8DͥມJ)+?盹W`sDVMf!;']Z Ms0>CoŇG][mGnj_SCchDl=˳tZj &'X<L>L;VBo**4nl~D Rs*. u+B<ÏV [*:a:gJ:5ݪEn2hI9#%W+9I4续Dha6$M3n_[m`*cmϗTvnQ2,U6ӈ'ڀ U[ÌdkDF֦77i⠑^ǔjj75t-l*C!rXۿЪlza(_7΢^RfmpI&67E֢6Ow5 ,2#5Iź >eH5mFN&7?7+NslϢ6l !\ANѬ-!ܧ|ֆŧyQ"%DRGb_Gڀ t/" bt]{b1ìAHrm3crqfcEp Z1j֚@%1kJH?R. ߐA> 7_hr-}T?!CjuC_\.vyzb笙"v1_}Ų2˱'OV`|>)+7}18S&OV;"uJqWt3OeNLɗJ9~ Y.yU>ԙŅ9p'+8 ,-:Q4nXbgrM gO~3sH(Ku2;S_6xSB2FbNOmГ {F2wp.+QӭڈoXcK٬ro(oxn0 S=%E<Æ@eAHLy$ .P$?ev-\MeT^ .d&׾XN1^o 2sX/6 "l 5el!N6Qj9.&HRβEEd1i]M0Yg'F~4t'ka8vF$ĵF[kPg5 wpݦ[2vW+NIe~Sn|`0J!{/KNe< #OgKk L1Fx3E]>~p:G<H٦n94<_ TB1%# #x0/xw"GFb^U~bFlO9xXKs7 >KCrU=\L?R7Z!d]hjEnHl5^^vl\ډ/%DݖZiZ9u =V ]o\ϵpHV6=ҍaiC~͞'۵'c $8fjwD֕ywm=˅%H:vC^S :4aLUQk EVT%i",_.4 ZD]%O4k Tc5*-e]5;.8#+-6?BiϔR $K2hI/ۤ 3otY:Z:MH*¨ WTo+ܠpMOp }*-u7''wG^3E~|B⫔Zy[wJs: 4F.RqnbfiuCqPR,H;]xk6@g Rbwkd'a.&pʞIᔤ[r%;2HT `:aT.UO Lv?/coJ[\:GHJ8r4tۋa$!#q"Hrfp%nB"J~,d{ߦlS9vf*&{ZQ`dHwBF;>BJNHdF$]_eXۋGb 4)\!Z4oo ~p:gJTh#!梱H-yZvČCA>MIQUsnЖʁJ 2XM0 1f@{\]h}+h؉H!-åġ] 1͜ZLJ{Xh*S"y/W,ĩ];ʴ%/!D}P3eHLfEk qr_=:_X5:!o;Uw1YjVBpfL6>=)a)r+?7ѫ}R GX\i_̸ H}@5^<}?8lVevIWW4xw!2}iD.6$OA&LvUUtxkۺx5,5'& 1w銲>{YDEm4Ow?EpQxToE`78*Z& `]E("8cH!e}v.3uM|悰F\ nHpO8"Nތ7wg}S?=~cK.iDuz@92MSγ݄݀"z|Eu:a}[ۙFtm0$\\X]S9 ZQ,*5-Fk Gic`) qM};}*̲U$'K{0_%xfX/D.FL '$'>+΂]_实[l,k k,|-tS hynE(ڊ7%ʾ٬oFeo0 -J_fo 8>0H&tKLVW2FW:u] qZ4|+`싗0m,9O7EV0{TW{Aϯog GxZX/[>"f?_ӄ4/[œ 席jb9hŠdz|Z geiBT2ç~B3}K.j)wj-?+"},I _D:D)5 CI8T}.R.*Jx(rgn+d&Ճ~_خMcpqkx4Ӭ.]кjG2j4~0iW:xBqBFFb^U~b~Rbq~r~QRzfIFi^r~>L~b}@I}r gdy wxUMsH=[WELjP>$)RT9eKmi4#fFJ=#c(5(D+mɦA\+.Bklk:E^ԲNjq)]m\7R/͍^boİ%8=`QTB׵>f}=QmC4[m3GVI=6=) (;.,Ks3(TPSn JNҐ-JX5!- *NE<%4}mi ^%N> ϙh[XRȃcB(Uq![.Xqs6<*Y#ZR@u6th`"#2D+ƉR݆00ж0d\ՌFwHy{*I'p4>8,pPhu2{. `.: 4b$QDOĆltPtȉ9zw~AoO޿^hlTsKKe\U@^~@C *;MK-H.G,n.>x -m*wL;8Ё+OI*wV|y\0 [׏{{<lN38X/&SJW%s8azpy7VGY^a~FIWl_KPtZ6I 9Ym[>ZAOT5bY!Ǩtv0ok)^ 2qfnIz9hv\kDl%}tx~b6 rڸZoR¯ -H]'NY<ƾs4j,sVxoBGFb^U~blUgx=iWHWTM?L/N3@ iB&lȒ#_m%YF2xȥ[uV[nj95 Zm 71n+r*nב-p{GgZPY& uAZmKZu`Ql; -p `eyuy w-ÀF9 ^!.V.|Tm9RoѠr;;@aE9D[:U[p T]ܴlu%OaN w-CP3@Y'B>?n~M~CuHb)b2145_bUz@ mqď+e ,_hJv@u u2PաM}lUZQݣ>j-nusrt;չS+NUjmji~yfU=Z~\~[zce6yOwO/ӛQ#ZT,.*ū :Y\6+F7M}|uxxv-zV2˕v6^>>uսOe'Y;<|8U'7NnNYNFnO哽OdIGO+7_[z.jrVq[۰n?o''FS\.}7U~C#+2laըbrko~I\R~?eʅ>pCPR֢F dTmm>Rœ?\|g3(5-"s( Dik\-[Z-ĖnĖnmAi5xO GCK6-d?PH@ax~a7)qI`FLjݥgYd aԁCt2U1 FɃmr gz1Ыkgp!A=xK`D{cS:n~'9mcj73[i6x*fafP|<!b4ڵp 9PL}ݴ 7s5%>¡.w48EO,i150 _35!a=#3 M@ϐTE曷mcVï+W'HEѱIҖ-I{ڤ.m pc :2:WǵIFsh>%ŧԞ@OO)|8{EieS45<.1U$9-891"bEj9I5kR2h#J6`h]F`7+3[WvN?Z/p|`C&C85}/R"?c<6?;I՛9ǼNA Lȇu)r'mv~5`M&s-ΣXl!ocF$|Qш~G!Col"Md0‰]x8γNtp.1Qh2@ cP/֝|ڕ"FV")DĈbrB2}E׽Fj 7f.GdG9DF]*W66|vjzB񇑢4qV]5(Jtnd=A ԡaCd Z hB`Gӌ6oCqf@m*uhPoʥby5jeIh|M&zd#oۨîmM^~g~6J1L (@32fᩙxj6`Zg+s>Ss!i""ö/ tXW]b yǥD >%KTd6WºT-X>$ru</%(+ 3Ό=w$R@v2yq-["4)W>&8&*D;Zj–j ȋM0e-D@t޸^Ŗ~AF`3hӘ@s!~iD[졁yLXmU] n!l3BTu!o}$y魄fqFThq2ə(Gu8aLSnIy[S=""}G 6*ؚZ*3 22糟(K7Th5焬%<F1֗j<^uianSGv+ 2~R;vڸR,(bt "AAϟP@VD1LH6-I`Z̚حkU2z-+WbEOTNtrO a.Y(C%EJ\RM 7 shal(²$ #{); +ԧɝ.֮9q;+…y#O> ۺ^kSu~-)P]Qw0<1M|_Ua[sȏeOQ dt(w~2UTYqGݶA`(x>SQJx`xWt K2'%d4N4>:z7NU搞R?D߼"e[$س T Y-VC .~ai]hO`f>1$v F2x>{σyx C*A;b.?ߗ'6DdIJ(Sjeh # ;'"IJ}feXkkwgpڝH&\)p tS!tRxxV9f9.&!c*qJ7)nBinr;vx*>e-Z|DCCK/C32I =,a ^m$C]#K1$I&:%Ԥ@5倚DΑRHP#^1Ld-TYrlIu1׹2ElH5]>3!E&^u^8ve3W03 RPA8OFϡ'AbƜax `_k_ke l:BBlpfJ5m5B8戜x$ǦJ}b>ѳ>8|S-=Iړv)%-G ևӼ$TRmT) 0dboV`?R^2`5jM<}Fȋ4CAheŖy56Ì 6sIgpF='/~.|T)1)yc?ʅ0/=Iu CA؀ RSBWA~2x~6)1!S2"}32gڇLa&vZ׋2;L L,a^%dd 4NdvYp_Jw̼(5^ NCNmogH:Mas0Dn2\b؇">πh@H75ZD&N9Y=*6TqNQ<,KěY sn ?]`>& UBPo߼Mi60@D3¼\heQKW%M<9Syf?mY!;ȓ KT=߾;rP=1#xkF>x}ipיXAIEA`.( qAĀ=Ӎz= $jxEs[^q([đTJ'6Tn^S*K+eo6VnZo{}Ls da^_zK#Hdngָ,'){䱧VUb[#ĴRI?cx* V[/WgMc`e pR(dF,gx)dĔĈM{'Hu=ba{?s] 쟬Oi|~aij/&^1HpE>;fRӳ8;2O %c\ve8 cCV` a6FWUjp ^f ={YYWa[OvΌMs |.驙TGh<64L_v)Mz+v}[ QRq-plHJ&ҐH px.C̳$!"ITB׹c^, x F(,=aY$Ofe9(:p DtS1[&%A״E2E4G6ԇh@ٚqKytak;ʹ: vXTg9X-k/KM;'d[QYQ7d7Ϭ,tg71IT4,f?KLrSQ3=I g]m<0R`LvQ9}hP@ٯ:D6U>{=sG> 7Ѓ1v~oZM\fb)~dsëw'ALT3*2BQh nXĀZQȗlNQ R'Ŕ$++ _үƋ/Yd -&^x Ġ&#$z>ҫdڀV"pYdA~}kѨdn,\f%6r h"lD 1 %Yfx i{cVDc1ɀÈ9ИquN$. en;$US2q~ة"A8d28d]!BHbx 뛃>o g4ABR30S=Xh"1`Xr,k ʌ.IVgVҫcC*+ .M^x1Z Ru~"Im\ F2<J&IwwY9MiFOxd14U` #wXo+b3w΀6Wo%Ka@)G=DsfIDܭ jONbuv=Kvc Ev Nyb+`΄ PImc-%m q2dE1S[R9daD/-%DrPŊVuDN cukt[$&#/E)xf×g|9{$B']*|[{%ׄ2?DٱQ%;y_B2AHh^ᣫSmcPן>D/W/ Ѷѡ In>iybzL(08x=59|eye6{}~3*2iBgyBXNIk~~oulݪ@*fohT~eUV<2[ 4lq v6s>%XF'X(GSP2_ 6PEpbBY/?t,/1JI#1W!.2`;Oq~?' 1,$) 鼁~Q`wc/'em5co\Ϗ2:v;ЩPINPCd(b)/n+C$QWb"):w=RyTzؙJ =c%}LrTKbytIv1i#AՋ떉btZh Ÿ+r&7SR]b)tسk"L ʩae=EWmƓaKdh(Zv BE)X2GH}j\ ~'ו;/ Z`$lZ SAcTpeOpmG`9F}(!Ha^ ks'(.g>`@5Oz}sܘgљ#kk"|Q Bt`e+/ )x- w#zCV k4#,qw"$AoJ&}΃Q8JC_erw_V ^an H-0 Opi{gm-ZՑ']ӛ> ρ7bE.MLzS&;-Z2Up^e+R|xAݯCU['}ʉ֗0*-K}@goqրvlb(*(HL P{`y!Do8~'W9{#XC>5<{c OXVb!~+܈v\c,SYM% ZH*ichntt+% R`ryNXLBF S%KZ^?arN4HOP\H !YQqjZÞtm9>6l$_(-Z.xTdQ$BxN^9XG믃ە;ݨ=q" Bh@Xfpp3 wgiu o/C0JLQOØp.XSȕh-맪-@ %F4c,X;kBqk8rA 2u8xѡ6z-!$M\oDk ȴb*+FأXUysmṺ́{,?9YayK*K ]iZC<@Vi Q)9JG GP;tkwՑ(%,eǠDV@2S|Z'h XэԪku% ` QlQZ(gs n" }^TZdA"FEq{tYFj/ Dͺ( LQ^eU쪾iٟm#X=k``W&8Ǫ蓲M ')f7HSVRb{o1f=G }<4%'O?oua Np#p|ݿ,>>QuWǎ-4T4>h}M֭ZL.w YZ| p u`/J|Q:r@O~)Iwt'}@2{Oɛj&붒vCB(#UDUDSL\CU7fS5zVK Ro8UMp:BzùPcZ2'n%5?~4W#wjfX4 J3byar~kȦQ.t 8X$v~!;|t|~Nr?dA@||4/|\͝}X#.t<1 lGMjpFLS2~{U0p~ d pPcUӜ-0QRkhx(iDMyTL6j,yim"M?ZU GR+i!CA{LPDKn56ETզp Kp*/D4qrV;8RQuWu> X-rOdK$F(l 4^{;.̡p ;n}o>y$wm Z- Z/LMPNLFu( eCnZ$^  E; CPIl8nX2p#Iρs;}o~חU]oJyCDǩeFʉ7"IkQʑ]Cw}ZZY&7NQ"|,!=EJRz1\A[f#C7@f#CGۿ"K}8Yw$P\f)"yfPt:AДL'j(1LQM'32I" H-tEӖb_:tLIѦӔW9Xd2Ҏ)>e[!r2y!* H(hcD2LC෈+ Jon5d=|.|j ; HT_0DF(OzŐ0 5cbj_aڪ nV!D8h}儱̚A 9.Ƞcl|05=:ųʗQFߋ:`4m8>t z G9G?v·xub'@iGG nAPEUjp֠zVD<_5ݎLeѯ48ԩg߫2;:d!)P=c<>)(QҼq!]Bm]~K3sT뾵 CMO4r;LrE((hMK"Sƚ0־pF<5BEe._uI{uzͦݱάJ>@n!8<1qa 6ekMM.Jr(Bj3;"RSD "\JF4rt0a￰PQ:AɁnA\Cb` #XtzS ɨ=\¸P@F ]+r d5nĸ ,Jz#/ϣ,b-L k)\%ZAӚskG@k|O!MR&Æuyo }Qϔny>\V[/w2͠!Xf>PUa4^;K m1^tR" ̶OTr-XSVFC9KIqMBj7Fq;K12+*^_z*˔NAץ[qٰ,^[=teӸjޝSi҉чKQ~գT8yKKMjHxbŴ\,Ctq#S[;LQ!!0j=^JLM/!=Mῼݠ!7BFk]T;C3A߯{X4QbMZFh:{A5v*Ϫ mw5o\ܠ+XspNuKb?%KZ{:dk[]@͖ Yƭݰ,[)|By#dOj*OLQp#Xn~z,xܛʼnϺϚz<(y?{@2HF?epcgQ[|ܽ-޿,k@&Ѳ6ݟ-.؃b#QpْMHUi?<]D+O OgρexDM_XUvs~:ש-f檥H.;_YX=7TRco5oՂsPtG[׺~-kI!l-( W]žI˓k(~@l7s"g!ЮJO[)QoR,\\\PTlL V8+ s2Ҋ`OSp4{+&Cl(Hg7{ g6XhTHRlLPz>ǗBi-J%Bmfo'pEUZshGHj,+clo>E'*x[i%g'`]$cBcgK{ h:to]]/Y R6; ?c/dZw&伪|퓴TA.ĩ8U9u%GP9P-˛A 6KG] 1f!sG,d48/#;T^٥^{JR4꾙Hd;*=%!57kU iD6©L&u[׽USI)SK{W, 'RL^ d7ԧ6 8|emd9W[xP?>}I%q^|51/S&mtX6ٴHgvg,,Bp9QkS UY+.#K(s= 'Ll"񐹷mrW W[(ܚ /kDUH-:CY6?ԃ}q j͜ӣqJR4z)GTmԤv5RsLc?xhMDƦ|)g_Q)TC"r"szj+) } һBriS+֥NKWybx=}}EwKKBWoFWy=9xچIN{2ҸmI,_[ a!]^~m )0Pcfx,+!fإ*jX g8"Д*` C G:D.l&N?(HW2ŧwQE υwrg`]`ϩsш*t޼DE)k0(5:[Rewj*ε:.-xHZq`{9SfYuԷ M?͞f"thV =qS{so3d"銾Q#<it}_RfAKm֣jġj&ڞ-SKeS:9V:IޣX3=4x19'rGu*&An'`vEăue8^m M^Mui K/^S?Dޞ +ߡVwgt4=YbV4:h|کkQPóg@v'lBF֠$DϣZ1R4p@:cy%M􂙞=dkB)o ҳg+τ~udH/d9X8y '_ZE1 KH2VX fct+:}m1 &η@ `]'6fF)b^ _>8-2gh&m0 jIV : qf :rٹHKCt"t|3/i?]i( ^#]5u!$K3/T=߈Alڥ q4[Az0N=dIwO!W3!]30p#+`׭ /abS|:2#ߌ<Ē^10K O&{`&!xJ=rIĵоfZ|<=8}ɷBz:FۤeK&#k'jd] 6pVn4 @|1/q]Z!ENuF)%ofCX,nct$`b?.# o /ՌQs7B"eጪKIb!I$t: pH%M3>BLJvCN1k.9 y0yp 4r?E)[4jjָXl["hpO#|8?>T͡O윞Bwwзg.t r"ע3 a}*3-ӛd }h:^c쵤">1OOFY BV?qE8ny0V>ޫY5$d%3AUy`Lw:Tu z.\qxA-1I$$u"EM ^2t"㩛l3e~LmzȅlhB)MI]oC敐un*ǧT{=&^v?`Aq!(,E{Qnb8ụ$:H t28,a-^} N |N3F=FBu='g?>"^۫EY-7jɆ!'6Wz #6h߉Fhڟ`|&V| vgYKOmvvOOSӔi>F-ÎiiUJXOd3E>>!A *"2bdJx$UiwrP0E? Vm~%C1Pm0v< Eit҉CKƥ-) Mo|IWQW}jNs^і吭wVy!F@k.6 Nh?v\Mad5g |#A!CW(H3a]IV9\ (iɎlzl+]6cNxKoh,iE oVG\^/^FO\J&;bɈ\l;kC72m}1m_z~:7;|# )nYUq!6xDyxy/S綜cAuĭ&G㧇R זsszLxFgǷ8PvWO\LPxX0W&zގh*<߳'";B''}U]JK'UiP]Ӳ/5]WHpV\gF\Ұkg$E>9B8j9 MmG4m3}fE-RwFRRCkȶkqg\0cE"~+qm2* w\tkl2uT24́~x)~kb<5kK7.8%nC\(K#S>0#$eT[+iD3ۇ{w'IgȤ5ȵw7+ BZrym%E,LB&= .)5\75} 9pp3ipVl >>I6ub%&֞1uu1pY!wR3O(,"8JUHV{EǚD'ăDŲOEwx5+ߔX$BoZnu]tƵ^en~\$؈cx|pkMW0[qf%玲Θtj0t99:Q$7H-=_4BOn~X;0P/KɰB0qe?asF3eA+|Q Dqۏ7vұ> р+Q.u]ʼw[YGIzCBI"1#y},R1KhLm(/D/4ïD"ʫVwv j?'ifÙ,?03VM1ZS{e[P:EI_H+B;gJr%BYq׊+netɳD?\K.-T"$4eDadrH3$WSY&\P^ZeNf]5l%$dt"yĤA7եG-Tm @#Fewi{D%^*WjXc[X<>I#YXŖHYadYWG8# ImlŠV,l &wX -J]l>=Ȫ[p ؼcQ]̼^h<1&([XRRg*3 Dϵr;Aa+s'W80h{ŕɗAƋSGv) !!NMv, s/zx;%Ь EUԷLQ]쿾zus~v˞vrRpBLj]]3UWF Ƈqul3n5ϣ_7/Ohd)&t~p N 'N-T,\DeBբ(3LL.4P \Tz,1²¸%rEHG٨O}ݫ)pn+{{y:$t|ŸVKr#n *.} ki˧T{~x__|@IS mҲ!,ۂBa a.7''ëL~HŃs؄ݦq95I_œ* Xhɸ"+G@ mrU?:CO!ρC*;b.gƋ! LgNJcӀ׹)R_3ԛuBG SDD;3MhH Y) '驨Wj62^߯\iU:M+ඍզ֔lzw }Q+6_l%r/^<*(@Z3DuI)2HdD&\U*gȽ}[ܴu7%xD$2&1t?|ngI9Q%Uҹ{!)cBc1 a(qrx)㵔C 2;9RzwV5R@*n97e"L׫7%jA79U}-ew^7֡%!8lY>:\6M 0v~"c!A8S /DmSikUhOI+x(%Q2~\T! 4NU"K$M/" Uql;!=,] {b!P?2Nja`w\[Y}5ՉFaBCHɐylOIf1%Od d^.@2BHTKJsE<0P o˒wtnC盭`uz2xX&Az+&ݗ6OVN5olsz$vV?H(? }kFpiWj)L]z4~G-%7:)TWOU#/nh!jON!$J%3EVPUFpO4ʌ fIA'2dF0kD}½+B)Е`02r9f͗H0HG4&}0 nY5G]{7lRM n 2ljk<.4ˆ}C BXdQ8pkt\;JVڳ Jy0pTa³:-jFHS; q-@ù]Va lIpRP\@( >KC4#N޹#?$6C ;ow~t*X$=VD-©Bkxܴht׫x>zgAΫB5A:~:I3lg lL+1G1fc(A;GcvEjL$SN)Xzl]uluq ]DB:ys hFDь@-FC`a gPPajꐷaef` ?`j*0CS:sBCsD33;],ÉCzd66 8JH%dhkPz,jiã*G o-'VD^,fA],Ӊ*alE},C c!룋<~ { E0 BDx\[9u@ܱ{&#vK0,+&X/aQ/;Dy SC֡Aq#[d#FMn ZTc8vA?0iJp!$v.&ob< 5aqDDPiI-jtF0ukTpH qޠn`S E:i rGl#jtzJZL9rCX=te,R\cB.4sr8ZR<_qCV/wiT EDG{F:8v5/(ľk J7OZ9APti#;58ٟ#n# a׵Ow~!loJ-Qh t)'<(9%l@b"86s7{(kＦ#cBkrRzT%pZb{bD`爌y7ʲ ^8,ym~8o!%D25pfCz6zfkD[wT9xmSLP @Ђ]KwY|D,3a_|⚪zEXBvMh dx{f3|1GN~~1ب= Ndћ?3փTek(eg((@Y:\\\\Ei V z%yeJNAnJ@i ն JJ @<%.&R92{8+)$d(h)Z y) LHr~^Zf&z?T3&cx]kA{^`ݥ T"4bL=xkfo73$5J/x+G/7_=kED94  +%xETt=Jpĵ|0HSTzVr^Nz`eOŻڃKl.f8 FOyko,ǎAf*O)P5#H +Jm&myrd3i* mj.&w&Z10X%Ӆu6ykd=\v/.6ηQ' dNES|憢08kҁ[aWr˒LI*-te81op{ޭ!Ȥʏ.6;Wo~nsVD'^U%y5Fgdka,\3o]~%j\= ǛƦxX_o6?+jR{ȐnM: .-ѱ`YT)n0ƭaA`ǻwGN0D\2J3g`ٳ ̵mA$3,N6qzg}y1C 2.\~c(x#N0Z$,P fEx6o<͞o\5WeXv.lYZi=ӒN3 Ow{P.ܸ#xrk'_r7 %@? FNMؽ5w2c'/d#GX\&cy&|]T8}!Fa>vCIWJ\QڼFZϪ LUAXk œB8MD!Wf &g-IݢWX¤L15(0i:_gZNm{RR`*s+^1SxX[ypRFYq/2-W#rF0`iHDʩ`ˤN䍾}sHaT"ZH+^w3fPlvjb ʪ/(:OQ㤒M]0 :<\|ֽi.Dd*\=)Pu݅47>U}4n}_7g`njd.fgFqql}hhq~q>iT ,Sm~dT m!'dUr]jUQF%*i'q9]""S K4rDD—κZ9]g<7f ;KTjqƖ|U݂܍tgٽ,T,@T 4:sQn[}ܭن&Eƪv! ZF,38~Q-P&0Ivq6t Ѻa 3:LNM'6Q)$#{n=~lRk7nSo~_P '?)izxjdBFFb^U~b~Rbq~bAfRzfIFi^r~>L~: M%%ofd" N"ºx[[SF~jl!l'Ic<b7FA#)0ҭnhvn-0ӗӧOwN7\ %d֞ˢjDF>|PHb돺ȩӹښYj%W֬iJ34Rꚺ,:uSMJ獮d&I\i3kI1ߺ(6*צu-NvR5VIQOEVoML7u1*FU1)Y">fk"Q|M|"9[PLb[ONm[Ij1T7?c|??cDDNE bTP  i⟉{in 8&"Ao,Pg9B{`OG$7I:3BҒS-4cbxLm *̷Mh(tV h)AY<vpY{wNv_Kl\9h_<C\Cov$F+մU.xL0Y$i$Mv8mmp_<֌{ v%dЃcO*u:Hnc0!JF%1ohn Ea̐gm%ylvbuLڦmM  9N =3[F3?[fqxpţ߉'OㇼKMtYg=  Sp<)3fkP'SLˀi#1JJ'ӌMlcn4b @Ska-b#wZ%RWSfv]*< xZeC F"@"$S~Z]OWȩuY ~! R3 ݟT<ᇑO/H)|b+ E|q.QM!4D9"uBbnSvZ.#Gdz5g"{."+F$ ˑd%B_yq^8Յ?R :U0!m61VlƘşge9\"jX #B p8Qn[kYC]'OBUшUl,/m*&\X،%Ki>-ȜaEm1|LrQƚ@s`~Z$Ӵ2ÂA\Ŕߜ`hW!cƛŊpjGf'@k"6?}{Vк58EIAU^AccAo#5֍ ZN O%̊f'7\fk.x+ Am(uZM׎g; YVYD3o4)E'>1?2#yCp36PWO fܭX١(8hyU@4 )8I j,gsE05jT곮Ƿ%]hXz/ØnPBFj FQ!lc;c̴'v @j8IdDRla s5-5N98ުXE*m @U70gD `byc4_[>5q6X+UhF(Lo;?N!d?+r";8zt ,g6֊]^#;e{qZ8nTɇMMeoo T@l%b턫 ,uLw:Zȥsne,<3XVݡzh1:1n>u,p&4l9tcC#Pkx즰3@T 7XCxSybHQ-)ks@/]X {mr0AcQ6]E^(Aء˚ 2H{J|j.Ksq&~(z_"_J/د6gHq=yO_e|ȿFb茱Kb|iuW&e6;:8P1iI4 ˘w0`[ӗBaeJmi 5/M0,jRص , 8, ˂0UVyO0J9)7f$]?h[ZrXazH\ ]IXo;io/qen (}ҁr0Ѯ0nhH=ݐGQGvp9qnao`(d'In|xpsFQs:ҏHt~= t4~LɐnTS^H1Gp[B X Jk\.Ż;HsOY n=KT]Tt 8nFsT,Z bkz&-(N J@Lu$Xr:s5̤ pr&vI!.$Ǧ b"i[s|'Wd Z/]t)5oҜ. AZ;7kb`Z`G1_f1yml*q~[tްkFj vnv ?)u)4DqluL5R^R)nX !]LXpmoX"ۺLQ= tD#X攳7hLLx'uNX_!fݯcLi{-\  ]Ėi| =!aJW0vi7j3RDAxwYxYwtC )8"@:4)>dKoRdc-Ia}+vFֈ]g ~G+Su34s|kEN>p= tGw1ޠ|aF{BKABFI1zbxQg6XC[ Ybln{3C3|8C.D/Y|ջ< ?Y.'OI14{&Gp̓~.ҜKд ixaD/0:vMM>ЂZbP_ܽC N[!~%c7愴נ^;ʴwOΧ,4Bkwݰ΄.w#;?xlp}ay| ;Xwz[7`aF?vN2m26ê6`[M՝{.Lg5 nfU:A5ʰ;x~-u*cg,yܲSDZ~`:*.I5ǧN4ZbW!jkʿ.\H^1UEM,J _ zLG(=g(~q +:Ǒ~tAr)KCr ѫPXPJbguN>yzߏ!bCЋC GVoԗV%,^Vfq+u`>-'ījWESO} M`VI Jd_3&&XNs읮(me۹ ~:Ul:M3$F{s}jwwYU,j p5\iZJ1ZPBzSd*&GjWpЊV;03̫h0RjkcaID1h)x/ ļLTT%.N̒$\}d%F8'Qll`? &Zx!) Sd?Nͩ,{'c3 ۡⓧ0O427qN})xZ}LׄpG֐>ݻ3ll I8[mr,lwĵTRI=TjBu$hJ+#R+R&T%HQUEikRҙݽ㾀#UFB̛7{{ͼ' ^ }QEFaDwc<0ҍ<3vn6r!dL%{0\TSn!4uYΐ ODNroF77=*eW7| ??.s״R:a 㲂6ӠF 'vzA'0Fd zx[uMޑf9 8/Tpc #o6pXtõ;-t˱g *.$Ơ=TlU N",WKVnýyz0w ΌEiL1onb>8-q#lc6u K|LPT:aLp8 ,Th "KI (_0e*VW6wقp sEh4s"BFLVdϛF2ZnsfojsC}L&[@_B@QXbkT}L O jSigvƩi#nxu8iקIo-(fe5?GË/5I'wJf@V 5s  f!)ܐD|e8~Ҭ zh/q0;cF˺$7-&S/ZhҟLȜ8غ{9سqݠU 4"=nYF "FmhQԒ<ʝ6%7J)U}٢<ǃzG{E'h7[cbnF'M6k,Ľ9@^U<ہ?Ni?4,ww*MhoC[,~,}M+gŷ˴ Az82P{4"d جĚQ "XkYz }Nh3&uz8?^Ҳ:,;/gɦ-~/vVx3O2bԘD!EV'kv</]FRЄ_Ǘ^5_xBYxҵB7fi;ru׋ NPJ>(m j~aɁްh)UG_CJ.=G8` !4H3 ҀAO*F-R'`z姹XrJ[Ќ*:%5Ll;̇Ẍ́ukX/8/2K#//5ZP0݃ώlcW^CyO:+gqp.NNEUʔkILZPźhPz4$ƑF&e)Y.Ys`k6z L{W2K}_`pֆsxvV1‘4┛=oj3hNjd 0 #ozA~6hOF怛4*:/_ȥb`>A}W WU 0U 9"jF;z0*a1[w?]uO 9p ֿ?oJMd9 f㜏G'+]=<uY0@զMv}6o,#[.(T}p, ۙZb+ ʹϢApg|*X+oBh1G %A}0z܍!3)r5;ȵPIMfLf3S0yԬdG-:l& ׻Owḡ\ߪp}p}p}9Lp}Y p,LUXg' Ÿ#¿ v\Li٘(U|u>sBGCJ t6D*hc;㐓CQ{ESJWWgȈH!Q:\-<7?#fa9͂lm:eݐ\m+r ӯMyyv{hdIRдy6o iH`?3$DX _aQxZ[w6~~.Ȕݳ}sVN];k9هlN 5Ih[M;3_^<$8 f`W|)/3&Yep0Z+mF0ʥ-pl$4kN% k&DlL쪜G&K~AM𯝖frg\*v΍QVLxiWO תR?a\Oȸԉ]p8y*MeZ r0,n1EsQh-Mrg+Nam4\y=EKd4-1K̝9_ŻgDq!/G2Ca80,h&fFgk-ge!ui0lYD_];9s$g}Zr+7L>$woy9|} ëӣˣּ|Ě`Y|YMv|r~ m* OL Y3gq߬[0MmyBb:S9ZM9>Bw;`,t7t!l!0\$2ҨZjsL@}< F!F1%Y98#pd ;O6{'Z`2c+P#tP(^;7kVAiTEGy 1ܓO$g,ORTiK3rQuJ`K8{b>oİ繲l0#I*p"LP0M\UUڻ-~~JZB_kAඔ&WEss9\߉y-aMp5-ׇ+Tv"\= D49#W' isiݱy ^DԟBKpەN +L-n 83 w&7wCn~s_vDn'2@ = а>MB5w4"*6DŽ%meF Ԁ<2z,C;FݔnUb;G!/Hxj;&pp>८g6Y  ́gk%]dz|\ $f *(AHn` Pqrᬧ}XeE?ݗ*GhSyy͓9P_ >׌j"9ͫ'w.{/RթY4s(bTL| >}~nWR~iK<'=e*#d  =g .c>ʖE3}Me'BȼMmb3bX4yΙ(|/C.mHNtGܒ4yuxC\x4J| :v9 UF&V}'}dZBd'1tOf×~A ںz"E^$Giw?N*`Ϻ C+G^3mE55^XPk={_ :2_@Jrww7 }n߿6ExrdD+/ļLTT%.N̒$\}ķ 0d9Fg?c'rB[XN xxUKo0>ïr%pi=l^RM$% ֦zx,f7*EYofyRg>+kZ*T:'&]S=d3åf,&i)Ls8b҇d֒ݣYf# ? *d?|BI.Gڜ>0 0M|f/eϢ ̟¢xAF (fQSZLLY>hBD$cRf+Jf9%nknyɒ &~́$}03X[N*kLdCAhXoCԎx@`?sh->Ƣ/W(R,&1Pmauq:9 !?"kc="[ej}`ycp鍚ɹ箸fܣvO pݣw3,=u0-t0#̼²t׷ ԆDzc&@WE2+B>3l#mNLԙ Pfy  iB.}6M0 8z)a$@D43q3Aq-l)!),h4Qϱ8> MmtgypH?Ʉq2ߎexIwMI, rr85QȘʸF GT$02)YQEif#$#6G]h&sV"m2!0d %AF`db7dGKOqHŔK5̉4>;S {3B%T^~9m}AZA/DB\P TI]& gUc;vn4ʏOwO1 C^+jGVFEI+}DrψW`x`VĪ1*r];=i]o:ۭߍ{qsA4fW">OΏC׼hZ^^'e"z4q{\ljP̓ژ}}vcZ#j φ7{JadwlMմb~U}ZU~G>{}@dI0N2Ts"7ɨ%#sEo? aۘ֊M`m tܽ5w!NF+)0)?tb>t:H\GP>pO7{{߹v?UtxJz}xӽ˽-4+5V1]._< he[Ԕq7zP ԇ:R.hK(#+@W0k 3tA=b̶a.Gd?#7E#㓤]m c,W,+󟈰%o* tA20#J6 q?TB&*^Hw3ZPΌ'1-7-IX gu1|h^q'-}_EQv$]S8&%-Nt)LYsXJMtоn}ϸT(B OlO\9ɘkSpqʛSհJ0C!A*%Նi-q⸉8ǼU:!q ) %+ʤ/hT&Ot J/nXҡ:!CxXl|pD*%>D& [*.,Y]#hQi}bܿu9yo]/_/c IfY-QQHQvnC9cXJUT bSrVq<2I6lb#cG&9_l$[{wgPy-E"JB6MBEU[A%Fٽ]0HO3;o{~~^*>m^3;E NQ,gn*lI %B\2Ɉ/Jʆ_ SVz~?RY&QSj&UIJR.X3F1 9"cM#"pQ> (iEA)]2M"l 3A,D2k@e m+>ԛI%BtL=)c. RCdEe`1D]*Uk&%*%jp|C0bX%5n[@FbD^͠@L'}( 01@i TIW$4jH62;d&jT39ې6K*6N| f1 Apʔ25*,Dimo*@PbD5:I2'*UMrXWs65$d{B2H%f>9>o,F̪ ]C[%&eB# [333\;Ut529ksu`8<92jw"#mD)TU05,"$86Db2a6Dq"ڱթ&HI3aUbլ L+$?:HnrtT[ݝ(h׳72N3^T;.왉鵃ǂèaL 17)^f3NLLX}r.TdgJB!E4+Irma))@YͦUZ%Vdғ6x+mBY#z.cW"me_z ilnkLWc;%_08l/(&d)w]<Dίt%YӬdr-̽-QaBQNMֱ˅Q_4~ [ǦӶlŲYa̅IKW|~;|!vVF\hebEsIqŜ>R 3+ʩYd֟KN*LQSи6htXnd@Kꈉa9cC5mx2<Rx{$i*F] I))+o I>iڝ|.u$nRk|d[oh*h;[6 OEn 7--ɝ-q*TNWyEHuNt M{4۬;mC𶮺Ξ=SdPp{XDׄ H;`˯. 0yqaN(mb{\u-M-xJ#nc`ӮVmm} v԰Da+J|O8./`}%Iׁ]{Jioi&Kp)]{n .i_$X>5֣jREx`U\y3{2gJ#6\Mk*5U~8R}E.kc1wF, u-eWnw/㠼׹}X|ZjT9sEK/8~} l]r2زakP՛mdVp 2~MzT-@'cx%EyQt9*WJaq67ҘGv pIF|*ؽ⑫OY[0 {P[沵t;vt){l5*7±{N tE{{OХteV?ۭF}AkzFR|jK3IS'KPBsx.Aϟ:{˟uEz^Ѣ{=q^ٕ⼲[7ߕpMLk@wRюt+75RƖDд_ *ȅUD'$дgnُ}0;Eqa}w 5GZޅoGA{t!. S{3Xy.Bsů S \wF>#ϟchݲ.A\pv MξP3kkԋΐ|9$JY[ݢOkmt='Ei[g0p>}1К>;%ou(/{y]rPxSMo0 =ۿI.2!+ݖͰ0rjSIG0%;In;)#Vb ty.X }zo VХ[6R 5_黪^ Ya[WVgY<˓h<*jΉ`d$XHGE!ҺP5FKyj„1U18sA',e\πΏw̅:%!AyYEmphG,O`~1ʊb<t[=fߧ\Ur0]j[ѵm& 듑_-fS@V.>υom@VȦ$I$:tTGV|Α4 >vb+[lV@mG;aaqT4<[pIV E/C?L&!’DzCڢ'qa6sf=K׵{ qL&|Ξ&Y* y+f(r.Q68GFЋ3q`V (sLSel*dh29PUD5@"“2ZY,5QK.N P JM/J () 0VɆ6˨w2B˴D{6yY MxVMoE]R 4v#9r8&*a;Q|؎8Y{ G.w~ *8A8w@$~Nk;Bj5;>3n?+z $&-Ln#ͯaHV:];  (8 +Y$D`H [-$I q($DG)r"`"RE$X= eTaԨ{b5}`+),NkK iSB{*GIR}PgKPDy \ UF ALAUçIs,3Ds z {Pӵ}iVgWZJJ&VY-E9S㪙DFdlQ|#}&lrq3_YoEQ*l-6%>v䧞4 XTo~ }n\%{q?rc!y$˥]9oWfk?a..2h2뷷tD;}htZVc.tX%]9Ǐ4z kXe4fzNn?Mx<0O\˚߼s_8O\B)͐߾\67e}tvS YX~OŐTJ# jeN 6F*,}(刔,I"!KC9,lc?6p,Z|kYVZ[?0D7)Q_)_5 [C!Kb5ovSŸ;56x'R&.S>q^7~ ]+5<:ov (eHgaz@=>gi=؊"3]X(]z~wjt>2!^;1c!]o|~ п|.xZoՁv8\s-%d#M<9kd5X2M^lďW5 Ч=-IЗ-Þ+2`۟нn{IJD#,@ss~琗)~gHf zK% ]JAw5wy8{]bMeEXeE/?> ="4eM,=T~ea:1\KUڄh(U(lvGha6K iC5UHw%De ?/vgүLcbpU6d}z+GOOѡ"CTLDap{ڽ.wm\vDQٰWA@ǦflQ*v|]Ï"]'B0(ʦ?Jnլ̓|7c#Hl_l,6t$UŲ4Yfj}*ǀ@}T/}84: ch=+e!ҖzK<46YD7]̦MG {`bm`"~NX.|hBIv=zƽkDT4._0*Bmv8ݱGD~ |M쳿h l!ŐSh~36st'LaHoІ| tF,p0WocB_kf8Nfe3rx`; ce;CgA:%h3<9^談M'{ݽAbG.Dnq)3g=Q=Nzfobƴ Զ!OET8CFP; 9659lt yF>rϽ5j3"x벖2vCU A=Πa9oL }_"u E[:dV~xb ֒2y_j*wkhbX&޲]bѳO#\ !Ҟ$!қsדi>H; [0`\%6I`yͷ".֞h6no4}wIԦfÙUjzױ$̚dWJokb%U6`%Cpf;~[du]<#qO|:y >іJ^mɿ{4y}:!#i˦fy%4::^.zvw&; ^k ٹ޸ q_ ;UBLm0^eT@#K a*BTv8yV515/4T $6{'/ErCc!2|>qs6@ɆqgժO* ۫I-/[xT]OPΆ[ $,Q9;h7D K וk϶f=C>\f2&&xm1[?kOvڴ9< aD2"Z- 0DaɢZA5HEsbf."I6*dty3|>~Dk{p wjmTa{l=;ė`)%+2Mm;5ؑR:ˆ̑7ˍ]h0 sRr6q`-\"`P Wyrb[;odY Nhh€cZT-'-y]0?W&&N:EH" (HW,r'4{nؗdmEDi?wDELY>Gm6!c70 hCt^VP"+;D},)duv9VJf0OB*PJyM)Z(<2(2=3m擤=TEV|iPBy 9?$"q-EN >pLIr^=uvf5_]aD]1jb 26=Dy&[zp5@|rRazVußgGz)W,p <'q`bmYM( `49ʾϽdW:і}{|Zܿk;+cDM1xYs6lfG: ܣ|'Yf2DBc` ж}$(Ɏ3sי:oP#kRB6Lѭ`ڪ;;mukӲRfZ?]mJGcۢ^/Ua"t5+X8z}:ntvB~tEX\+Hg&[J>kU?Nd/R 0+ȍʺ-,_uI'K^]ffSgVfݺ !,ղ,VkO&7ErQ۫Mx)>5/**?Hj+պ-/?v2EQZTk]+T]Y*:b %peWgH6 iѮ!h]ϓzXHBy깪xwzn?(#ۿExҳ:)S8NȲSEa[neTMVBfWtkUą"ӏDn0δPY#sq(HDȁbp`1 7?J8ҋPS!53E+ҽ{s2] DzvԂm>!K-ZXBoR<?ߓq,BmE޾?Y ,gΐZEl!!Cբi T|Ԣ50P-w~픁$_ZbfCtY*H NŒC6T+2E ӰĊ⮗)RnDto)c NwpCt ZRɻ*q kȏFnŲ?HNy10#*]cgh XP{r$(Χ nŎ$}ұe`s2:,}lHq{UJK?G<5pD*L*)HRYA?\{vZɬ+h1Sj6s2핂aK(NڂLO3Yq;;B>T;61L^ iFsހXOe'2>hxpBH k)Nc4#80k]VZ75}OKn j )K zK%QWڍ WpڕO^u~Aa<4UX @ޤ\ZIC?uhM<3ɂJM|F/Q ҡmMt{wNo#vTt 6}S=v!~DޯoNz>`p߁!cc]2@ˉ3=} *p+-S W<>6rYdLڪ0DåTݵ5P2oɘ !*@Wzs.1BEZ\tƒUQH1"cA z@3Grv?ʦmBۼk&u$tP߹t˟]}l̎gl+?D_B#T ] Ȳ%X4TZIq6blS1M5U{rOr3 {_ZbE8n#qM FDH+eJv_TbUdxLI F2㺠\bnYů-l2cT!c ®LlQVc$5RwVŎA2Tv 2!$/;Sl_>~p)7= vWlSP'&TBf2J\(o,\a81JGm4 |d[GwU 1U>3>|8tכ_]ΌvtGؚ\'2P?'&K[1 ׶]]~p''hq~{gv~7 Amg(1>?ǬuW Fe`®iMuIHXF.}.ڪ H<;UܵPBSWTÜypEw֏k4%ºGZ˛B#Te1_2nC'?SaqO?4)}⒝1B1 BuZⅨ 0n#җ``y#35.I'ԍ[Y)cYQ?7-`˿p="h,=s47<̿FՆ"4 se!q0#v`X1λpD`fW%k\9^ޞބ(jUGuO}6zKxgj9lߜ,GwO k}u t*MXK >v}UT =h!H0D|`tؚ`׮h·J|vJ)'[ V,0FbTϲ~q5\W0zO+cxVMlEVN%͟Sdа@C@@q*m]wv6 ʼn TR+8@\z z . qޛ.I%@yg?~1?1w Z7?3զk0?䔉oK-Xtt[>MsY~,ag\C-ٍ emR)b[7W'u?0(ޖgV^^]ɬ-Nvyif% O1;5NWUa^ U #)Ci>^D,,S+)`:z<X@BAn S Y?RԬD.7/t^-!IQLG{3%%jCȲJJH <рrٹ@kl"ea m]y>'9Ӽsf.w:-#ȴꉀXλ[z {ra ~UM!ioOԨ 5XT` I3s%)0QzA^WtT:均{׷炤,Oaf#Ddh, tٌ"0"3)  j 9"}Q{k.#TR3mTu}5W|vm)rt)+l,{gKr_Qёȉ{=Dx'&t>{,uD~Bk8Z5af" (heې՝~W{&>#A>^1XFω(Ӟ_B4^$%hK2`՘>d ܔ,̐U=u jH_]/X\+65̀"t-u`lEI!>JE xwXEla/Nөa zd}pK&LĐxccMȬux[a|BFFb^U~b~Rbq~r~QRzfIFi^r~>L~8Y(L{7`̼*C|$kXxcc>tRjQQ~}pnQWE xZo$M;fBJ;N&i|sB#6E%aȄm^ -{\=lŀ{a{$˶;ؒw}'>wų:&{j۴mlb~U4\|_\!+Vx_CbJ,w%54/iv n K<M,6Hq t~Vr ;o8 H2tt#}T]Ҽ?˱GR2['EozjB7\۲҆8CcA$[xL,` AvxmNz4Ь pʴ J'бMa;Qz?w3|fE3WaV7l_9ax;=7Bnsz{z^w<-Ypٽzhl]*HYNԃViv < vQzrustC (>|dILw/ԜnXؓbC lRf"/ѿ=ڱBy7œe_COelHcy:Z'_Grَ-@&6=x㒩Z,@h 񺴌5S!~ЩР ˆlpCCqO>?0WgS[Q8}{0ofFniu3pfkp'c J޶: S7Ul{wTdzPl-,}(@$.cKͪ7fLSGB=l ,ShPԈOӠp45VC IthԀuԿXyQ!xKRɈe8&/%BtNO 3*ҝe!liea '#xpvLe:c@Å5 N) 祥2FBCRU԰eul-)!4" Gd2`tޔ!WBmTĔuZ `*]{'S F"$l- IBwn aa)uA4;F%e~o&E9"+,@ZqRhxTnF }ѓJAfmlFk#ChFRΌܮb#k.^$sxxH[aRioq44 fxC߰R#rmZ797V٫)һ}X =ݒ@bEEPagQP&zRr/z.O-ԬQ*WF@qs( QWY{b5қpAB.ɣ w&w<&}[gMG5 `< U(7iKT@-pl`N5ދV2E}@L/$J1XXQI2r=xu>ncrJ iTY=(++[-Fkzy ʎr=udL-K< {~`) 5Sm̼Yf|1|-Pgu笒+[yz|~$^C&S@%!k?:{3j_@4.xqs|^m$Rx³P?#51$ct/,]Y*xZklSeNwV'r".l##ڵ[;vVHwsBOűĘ7@Afi \$A FpQIP4nc_M}OBnzx-D3NjYecL  "o\SBWQVgM:AKBMt_]! kmaGXܭ- ֞f>h2=^^h =\Еd<1>b]C0G*3-Ɋj?q#뛛̓"Uj:8u8)D޺g"xwȕj1¾g0J*|o {uN{g}Rh{o8܂S 4qVgOn.^.lRȈ[yff\`6ja-]E6{l>[9:s"L,YG;  ~H_o˅"A(94Kyc%}0/@z'vĒ6,mvT@苍0YT%kr.$P gd|@p0Lʍ^KhÁ<4H9pl" T$E%-;s@pQ^ܥ0DLIKajm!ym_Ǒ09:h[ F"_wWZ Q̲Jڑ\bz岜vnP\1mC\֐q|Tʠqz)0ib=`%t$Bs{k0VVCx ਙ&sG) #j'6L&|NxF?ǒۚ늈] oѰ3 m'Р~>/р\,_"w]LނI# {/bբGr+R@M)9)XEl9sUoVtBmt(\eRhM^O? )VT|,ɜ4DfILŒ bDh^GWWV1@UL5 dswU`tO. )3T}3g 8M5RʼO~32ex2OOՀtТ6V+хJ}TUO>; w?."-Cۣgg EFS?օqYAZ; _{p!1یIC,L"߆' .`(߯tbX7>||"0\t7 tZffhZLffvcQ%"SK+K#>xJA#Bn#1FjXe^,$Oq{|Syh֩ǧR(Z&5z٢eeJ[O1Q-J)E5?^"%"BZvC $"IC/6E aM{d@knWH4 jO"oƭu\#\,-y*[P,WBx7EyV_8JέRd4 DDQ)[F؉4 Y#slɠgp7@˕L߅XXq!Z˪ڂUj&}V+d̔H;Xd=-fm0଩n3q0nZpr*]\3j3JB*0XUl219̲+(6?|]9кWtTyMv} 5M +cwߣ@[7or]VNi/;݅|p.m%{QOh^)KJO9ױѿ6@<^{R2iވ;{K' Ic/Zh:[q@I3f7_ֳi V7̕y :>0L'gbgv亀x흘kh~$[ /{u nS&WoLbax%Pl[lHFBqiAjQiqjBfByF~j +$)$f&$f*gIk.N}}T<ԔbTĜؖl%lxUR0=_б|ꅙ0 PGc`(]1 i }oJ"%0"8D-qRE3ZfY VV\8TT SnA|Gieɺ8Wj :0gYQA]h%kgy4o|uȇZ) Ojtʞ%8dB1&ϨmfGqSNgːR-4}w9v;)96㇄46ܣu{:." V¬ ŞH Y.uon@8.'SB uPK@1hAX+UUkpqu`cB&b0+9q"H=FV~e>&ص]oꕨd.nR89y jF) sKϒ ۣDAB]W-06|ׅrj=ZYFgE"-{ݭ[Sv¸Lx/po<|IdcBbA^Nfq&gqi{Q~ik~qIbI1T*3lr41sN~L9e9@T3%$QI3!Ċы)ыՊ)VIЙM1g9ؔ.xf YA1 (1XCS5/9?%UCSGA-:V+)a vd+fO\w"F؄+&*嗸楸i(ݛo-'H4[f^ Ȝyb@1[["j.N΢ԒҢ<7m؁R\\Er& \8d U ?s %eС bۋ#8;=bdAHB2ØdCqZ^.3qL/0)}kgQ+;)P/i>%j%g^N{hd'ݐK}F1 .LozzѨ:M &A#аsjS +K@>!D@D^?Q7.x{;P)#1*?1S?%BS)=$4I/9?W&31^P7 bRS@xjA DEM iٙ`Bv!DZJ =P%^"kgpvn4"s3?sΜ|Pz,nsoe,I5кݶFY4cpzP0#|&gR} /y_|*~'X~L[5Fñpn咒[cuPmnpk@&.֨+%[/*++vQSE:%šEnHsˑ|M+ 1 T VmEjlRMSHA!QR&B܀Z^n6PK WeFI[e  |O2- x}23%2;;bYwqW [VP_ E\,JWU5W^ /U^ :KcEStU(p1Kr\2^JqQMϫp^WR]?,V*6.VLHaK)ŋb(rQ?Vy%tWNV\E$B rSpԃ`&2C{]ިJ} g `q|)E"iUUo[Z͢$*&[O* }@ƵV,s 2JU  :^Ew>;W!^\eOU*8Bi|I$7%Lmٱ7cOe^ x{/PCE% HBa./3uWS@҆NdƧ*.;I@BamTX. Vp1 <6`g5H|~" |Gw!^Z08kN#JEFGTF<y]X89 <=$ @A0çzr?B|6!u/}&}lra8B6cb%,+8GgMW%HD)i$!YV(,gk^8A(3R "sx+Lu0m !j`C &60T7D˪Vӷ1 8R$^&r+gdE}/ңZd6 m7riW%t!!z\OH\WD2b;hŮs񘳣hcllnP>Z=*Kʽ][h΋);( Lf]Zfap52N6_mK^^#ne!M>::Z]aCEPRV,- I]Uek™ @l=?@Z &J;ǂ4DƒCd)Kx''o0a~ MJXVw(A]E=.nZg `¨ Ciklb/u8gXѢ S`H2)<@˩ PbDYw@i5NFVJbXв o/nE1ǘ f cp1etK%hUO<A-dsM$I g-ơDFbd6!߿ʈ|BT.y5fO|`p\`WX˲l)h8 Tr1ܨ,_`n@!('2RjXfWl-j\.jxbRw,r,hp")0&䘖q4R'&wEJ |C @^nm,Ȅȴ+JqN,I"+초DJ׆"Xb֍s3af8ٍ)z[RI!DoثˬZߠ^ }stxe]@hWTBRYUkv\iF&^\;J J[trX "\eIs0 0>:0AȆ ܿ"=X2ȆjݳeG3$X_ET;|5>E1\1XCH4^3AOMҤH_`I-O~҇c^$άQrBl0e9&I5q&굄i:[a,KD$LD〄ƺpbӑbBsz>z.z1WoQ0ý]s^ȻT_CB V)VE:_pC a j`YU(^0R${y'A#$64&\8)UNHBDbQч2.簈HDb؁&";V:#Ĺ+q^wsfnϴ!0rS *J.wƱ)8pNk[tVYp^2C@h&D'K, 7>-V9\Q7";bhuC:]Wr!rK_ !`MkK`C@di e@F7c|T16 6ZezbF[b`>,aR܏#-k~KGMʟ̔ K0٠8۔"س )D (#FQ`2j5WMuEqc8ی3ڎCν] RG 2S@-PcUnhA=0LSt5/5untrQ$ C m-~]]  T޳&u)hGHJȣx=t 9%9S0vp =^?bCޣ#?ٵBxgADmPhݫvFR V!1ipqd| [`P݂Y=xPV uȲ\+4:,눀w8Sk)TRԒm2y7bFP!!tiisu˨ e Z] ZŊb-E2ut cM# Qlxy$%k7u?EhjL5>&ψoG@:]s >\O7HX"\gB29L+K|/` _\&s(#1p`J \PZ`yˈr+zv0Y-R).k꬘|t>0A:;nuO}N1CZS<U8d>SBq}D>!'_Dr'ޓoIÓat-ٗ 6v:[.6DiכT~(~7-D)В(x~a~o@pP~ sŞ2oEĥ(8Ip ޮl]K >|bby%"K^b>Gh͍}֞x=pYB. ]`hOXP2?N>G3QZk֓{[ M&צ?ELh/RмD1 /@ C4_1C z9 ' +Xĝc룇Ag`Fdg ;;xCKg `w: Kgb\z7S)Moqww$!f^uAVRAOOF#g rCo*Bq3A(dׄbZ#Y` c˓%N _,Sok78C~;BI(&, J3VO<]zAnLBzYQf>U _'8f T;N?) qz Hg&,Q8|c ZF3}m-˖{߁t #fBmiliɾeh/t{ "20/I'=}Kˬɫ>vmѫyt:wO9<>8~7*½W͠P+L@S QWi5(63޳K|7l_^B^:x6|K ٲq>Q\\ѻ 3*SSZ͌gE&3,W:d \6ݍ9Ҋoxo;dE0x${6Ns ̥yž> l-K0M 65/R,4lK\`7A҂NJz!-WrghUfzF޾#Vbճ.LV`M6~v@]469E(wJȼj0lf#M~SOu>{j=[܄QaG- uSy͡z} )h Wq46ȕ^/F v YO$xٜoŝc@ˏzᯣ0nO=}T%'!UCWe&?k>tL @MDTǠ.+dճC|74hx&Ś/0Xw[C9sv-zt܀?^F mUM2tyjig74<绑ڻ24'`\gxC$ cOչkH!qO2g Z  :d{8Ɂԧ'>guF`zW=n$ v$hS+00t,%NeX5g_l>#7SrY0qS$A=;lIeFwȤTSrk&{Z/z1p<YWDhI)`QK@174xT޼gr ԴmF:bMMVV-{gщjw)?Fex Cf0lӬwv?/C`it  VK\lXێir+F.h; y#BONJf#VXc7+(C-9k:V?98/d?`Խ*ς՘/E KsKX|iΐD+Np `&drni7ctdmw5 5~R1 ґ jd&\obUbʪ<=,~Hw!ЦxVo6:)u|ڬ$i})6JH*W)YJˀ!ɻE~#6dYk vbc_/ ,u9u~n&,?sm0A7Bơ4nw\_ Zrҭ\ e A2՛Z6 }p5vvG*j+: QBܽAVdpcB eEyc]`ͺA hƹ,Ep% ׳@ΕpTk[B/`i06XkLeA@рӀ[ 9hiP+HX&K1ZF 6kGS'uIZI,:mVRr"xAl1X ̌-V$KlMc͛*#OL˥uueuKD;0x=Y9+&mR$$MdXbG |m=mg'v&SOHYggSnEKuKX\S\+QD+曽+Wˆ3@?> cJM{BoǑ>)M]g*NDb@Rޜ2cF> <߭RSTE񅴖G9([d1 7bmڗϠ&-suYُWI:4'`.@"T>},$̝q&Zš/$DqǶdæ{lhK5 mw#oS_4< >HG׎DZ]Ѷr_-4O?Czl 1~ua &OK<]4U"TXkhTH ɗ_<\,)2nb.Tzx<:xۓz9ωʶ :N-ݺno'p;?^uG8bv73#Drrm1304]>wTA{xV!@OS/RG;z K%4+-DS˥--5 TƤjc#6$%$sA 58[4LÛn >2iY f?UHvYx{,9QrFFb^U~b~Rbq~r~QRzfIFi^r~>L~b`>FC"2lSxTMO1=g6*qh(UE$7"$? ;c/Ih.Hxw>ޛ73J, #̃Y&F[x6'40_{:{(tJ3|^H uf'O`-+ȲyP XO?Z+ٶ< ܳjZl )ٌ}9g^d`+@@l`<ؒJr(39cGsdGT_}^tU׿'SE^2*;& /NۈdToQ ?J` 62,\γEkѱm+XfRG]'j,Uc;QPamؖ}d^ Wòk@ +#;mh| c{C`.|fh</|pdFyNc8=hRLQַ+!0k,t&(R2~JX%7AqqĠ?*Ki+l6![7p-hyN{/(}-Voȼ-8j~LK($[$]䏫N;)7wq]hO\׵]nJ7Z9lr |r~Q*{ Y@j&0C0cs&*rxZYw~&ńI%r\J8zj[AQ!0$a %%w`"is} J4̻X"EA.eR*LB =n|.46'aLa2'TB&s "g3{1U uf, U&NA\P'9/"'<,u<4/ 16O'O9}|(*xc?}`c,z:DS¥.@IJ(@ :/󡘖{s0FENFyZf,Tnh5*O"SE%!q&h vY=,##lhʏы =+GKXUI!31+3|"|S2iJ/N˫m:?0K>~/J>xd b0&!~Ӌ?*D!=gj)/2_'K^ Rm>jToQ>^ht8,g5{ {^$ߑS۲45v~.O=lΑ8TJ ""a%gF kc/O_|q&L͢p ,h.4q#|uT'pN6&l xv4lשjA__;"}2 !L8PpøBQf928LG#@F< CW'L3oCI,X^Cbt2#R2_f E\}}U?b *^su",9Pxw(YC=e3嗤(s*eY ˅Jr95| )V2d2a}Ox 5h(T &EX"'2Vgmh@{~ypHQPanLQR&tEG/S #y Ϳz7M9(ד@-USP_(cޜj:l$VkY#jߕOyA dXU~ZQ8ATmy惐baEL8 p Ź0,ʴ8)_9dȀBe6&@h5SvDs23K Q[y^k{m @ߪ@CAÌb -0OBH U쌊TeLOsjŐmN*d=xwKU"|aKbx-Y`$}rE/kpNsAjRFF֒$fz\U8[[Bv;IAa v wRhoۻ $[-w wk1ټ}4=gl]0k[3IzI1֦4E  -kr Zڔ&䁮qzҎ2r]8a8)قq{}(J%bi!B`5}Eԛ5E{>[GMʃYso(jA85zuL TIe3L#n.5Y֠q`5ʥ.(^* w}as%ՃՀ>\֟vGtWf~3B ULeY95}wS8c;߬SoMw8\bKu Cr% 2σG%12g%bUB%3ksnko2UܦRbR% u||i78۴T|,4.3ɃP+Qen t!ގ4) {(U3Pk]5Nb'PBYԕn F  8Xޮ[:-۴Mb}-&ZZYlva\|WI[ n2tjWhxcW׎8&"<010V}Uni K4aplL.R Yf&s1?bq4WY)RWVbQPJ{Vٟx^)WJ^dŒX%+Y,HE-RE`goDVs+\Vy*q eKgUL+kKs|I@"~,O{f1ROʛA&׉0z1=l2Ј/JZPU+rϜ gc+i̶Hz(o1Ltw!Zf+][UI$[K}HVjĉ;/Bֹ}m ޤD\ƯrDOuȖ"Ux9[Z7Dуkm:2y~q<`%rY\Z<^=Y\0OXtS(#N.䐷䭆 \յdy. mEH:[L:N8m#PZ +i"AwV0RJXNVbHȕ@sj27djXpzSMҮU[OBqMU񟐻JU$K ^))NV 35VDνb(MD}qfVf?xpYI;̬"PK3.z?Tbgp;fY*v,VlM0zG] xxUf)H?wN9{6QwÉ8 ^빪~=Wlg7JB)r7ܑ gO&t ѮlGR1{(k zd.sJFȷ ^^|9hT"KBW֣wj鞹'`D*E? Ot`EQ-O/DŎUm 4NEfYӁ: w'rǭAutK7+ %߁Νi!y}}FTY:RY@;$lH)N=zRf05YVZ`M+r#DF~Ad]UžlM4e`$ տMᓆZjW횂k'T&Dm}INg7G Q!m-`?jC\UWk_k<ӝ't"wejð˷ֻd w16ytoPXQg}ϻ_ {:'aO{F7@&Y{S:!HpMGG}Px[VDXw34ůQT&"N{SUl6s?NYzCa&KG7rÌK5qG&kқ.{)O<2MrĐɆkMX'zW~0U {+@LqW甘!PLɝSVk LS쒨ZQ' NR"e pX_cpG@ywz*N-ō"dIm{! ,,kppR_+<6IFȭڜVV4 %G]x~Uj0Zےd) m9vlr0KqZL#3e/Ŧeٜ Jei},םw~K5z1R; 78w%%[9Љ+S?E/Y[iKKqsWKzYuyVÂ#W[uHwKF7FIeZnk:&Cׁş$\ ^n13`ѧ%T4vŷY#P\3r|c[{x[ie2GFyUIũEJ\J%Iz0~LrpN-S HL3xZ[s~ņ JjƱDS;qx!؅Hw,HPRTH9gx3J@.WeY48*+5'-RR 0z^O\t!+~LJ 2W\p x0HBn_)s}͵x%RY5U& .,+yd<w<;b^Sp >}vQWeb</;,f'h R`OOYCeb* 6 !鲑?a2*x3pdKIlZVVZd0718 U}8&Hſk(G ]W{t,@sL?7_sFD3ё2b$b{ebг[չr/plJբ8i,5"C7ۑ\Q:H$10c,XV!1E$1b51=1tu ;UeLneT˲xzoy#"aĜYo'~l|)TWYԐLH#y-l{/sJ쒘RB/Avdh ])[,gcAQqb{z.6Һ` iDj3_ \@⩜xBR+ʩ K \RmZ"O[U j2궀m|!F*c7>,*B}=õCۙvJv_>|`bkmD˕vz>Lګ\:IR!~57;ݑH~)p$.[ۮ1~hAMx׽9⍊ڞ5F!~f+3Azbσ)J$o Z"/yf}`7vtEX7ΧiO]O^:,Iae?3r:UU5*:lx.KN9]g2Ui5yM壟jjs5aDAM%JdC}Kv7U@^ӷBv:vXgI,f%]+peA@nb9֎VzN_+W1߾^A"oFl)"Z\ ~<&E7k1rC0{`mV=ܸrJhضf_+: 5uMl kl4bu,@( 1o45R=$:Mb֎I1 fj0ׯtA7p9%|}[Ag% "G&x€aΔ]:XO/qI>3S6p g}Ë,q>ETV@ hxW2f&WqH3vn;lұs !$h@~pTkI{#=к27rh#Gو0mQfF-[xtrҎPu1*[v X*F,P +a0>$1zOO2s*K|g7tbO/ŢYSQƾB7hXܴNa. Gc ĕ[!\)+nI,ZNjZs78[@2]LR@"+NC2#h$-k*KhFX3U.]~4їaX!5.DJ|}ؿ4"Rnv,/D&57ۖP(MBwԜ4ȉ]Ga4f!S 3DzL|j;QPMmI[$m(}0SI.W%HWz)6+X#M}]!"CK4KXb^[y@ q*pnyp%3 U4@5&Y `(a|x=PD4.duN&ݷWPn"90/-;6ۨ(>*E D\z&]]@Ssd>;٧=DB_b^=a5űy(򜚑mWć eSB:Ţ և҈=h|aK)$8ZJӀ6LNz%=%,l#%k Mb?u:lEiVh!S6E{|E 2RwbRuxENJ@%Ń顠2ICAD ^k1ݲ6m?s?(<A/0){͛y|#g^isşkw$o)8!{3d=7j6z =" áB#cdDp(XfkTD,<TD_WSa#)ꓺ1aio쒰x2( 1~Y=dAwkXyZ\7'n;iV tc=p\=ww~xXmo6l N@7p864i4{sETJ;ʶq2xo 58bQ2-h$pDŽǩ% yZ$`3:U;ك@D9SXb^HWY-Z76 ꭐvb'vA!vX xi9kszYg~b'ǘDy4+,)&QSPo"U k͆Iu4>~3 !: ;W:4K` ;Vc{{ 2H~=|ɺ0KX2хa&Jd6.!M|PxHՆheSu/ '(*˼ Ze,peB'2l_Ke+$gCd2}Qz b0!…0BsA6zؗ@om"TGS:E"zw,˺Aa3|2a $D2Ɋ>> 3}B-s{>>~Ojko+ͻ.zջ˫]F2&ј(v ~ "9aG7c{p!fX: sY E"( XgFi+em2Yf*Ћ9q|XeEq̛xG(̋.ӫZgK 1>4)-3qXtZ gJL\ #?g[c53zѶRB fPф(Ū*m[Mx(Utd0O-ZEטҙVF..QO! ߀q$,?pnV;Ƴ08.J4) q . ^?QI '+3H_n6\58) ӓqе GY ڇF?K2mϳ`9GqC\d?94>Ը{㭦Υʏͷ?n7!9&^T`%N<iL-: )R}#rxӀH?#odgϖ[s5I+{sL_FBv|xS|Lߧ¿x<׀ڮ`=4/~7zBOTNכ7Un掮R6 e8YB wq@jT'JYQM"GWe)g*x#JU la853uN0ZhT ?)R*lr2b֧_0EܭSpߎ@8 Ƨ9ODՌu1tbw[!MCy 2.H(v M~?Ndx"͠49hݓ-KGY`@}/Йl7zBsȱ5V-7[ٶ} eoFcH ZZ$L~k/?wMy(g ו9KݓlDC8XL=qY(:cn0_ xmsVnBFFb^U~b~Rbq~bAfRzfIFi^r~>L~bڒ63 rYoBY 0;k5-d9͑pd &+rJ'*(@ٓ59♌`L8: \9l&r oad`PRT:y"<qv;s%.jfWE,$65y^Q;rvW|{|MThj]5+ˋ8LI')&ʝoxEC)v4 QسH{T5 B6 jLKmƊf<͟XN}{D(?L;&S z4L.úx] .J<˝a5(q˝A%{٫d=:CrQ\84VbXd_ iP?vy^vPJԡv碑Ohm~f.4Y3KO/ɄȔx粎: } ܍ "U鴶ʰ8WG/iU:JJlffkE=60l> <2(Vwl?300; Dl/`A2R4]&㉟:Cbw𯒽_@y6.]7tj[vp?g[n&quhlU*-zɲonҥ.Xl]|ԣph22WU-($c(8bAkA0UȐ5AE{kنPf얆;;'0;;zՋ s;gr`9_9iXo_nVσI^W54 yʽ#vp<-&\-Hvg-0%'MtvLM C XJޞr%(zT~Z&d^y >н%Vu* ~8!(D%Ɂ!NEfYA9ioN l  !Sb64"}Xj7aCG=ӎL:0&E ] -i6vk^4ĝqxnb ʅ3O$5q9H 53hO7ibjn㢥 Cr#.Pe-_Fn)P61\PaU< (ۢPU"U܆9$&8\}'{e JuC%,c*36PSg=3;dM Dc? I* abޗT/ݥh^s{͏'WOK_oHq8MGt}d=3peP+]+&u&1(LM+ʏVdO-0r"k_z2)fẗ!2 j"%M+A `-: vyn(KzZkEܐ݀<VoMa殯*zrj]3K?6J>i_v]dE]3xMy/ȤK'#p^~y j)nAdtͮ%66A=#GOtzWg6im < VLqk=,帡g29^!CtCܙ@RS'W u|ObQ{WTN٤/RЧpuw~y~MƟq;3j"p2or<9S<KXg|`xUpackage apis import ( "encoding/json" "sync" "time" ) // PresenceEntry represents a single client's presence in a channel. type PresenceEntry struct { ClientID string `json:"clientId"` State map[string]any `json:"state"` JoinedAt time.Time `json:"joinedAt"` UpdatedAt time.Time `json:"updatedAt"` } // PresenceChangeType identifies a presence event kind. type PresenceChangeType string const ( PresenceJoin PresenceChangeType = "join" PresenceLeave PresenceChangeType = "leave" PresenceUpdate PresenceChangeType = "update" ) // PresenceChange is emitted when presence state changes. type PresenceChange struct { Type PresenceChangeType `json:"type"` Channel string `json:"channel"` ClientID string `json:"clientId"` State map[string]any `json:"state,omitempty"` } // PresenceCallback is invoked on presence changes. type PresenceCallback func(change PresenceChange) // presenceChannel holds the state for a single presence channel. type presenceChannel struct { mu sync.RWMutex entries map[string]*PresenceEntry // clientId -> entry callbacks map[uint64]PresenceCallback nextID uint64 } // PresenceManager tracks online presence across channels. // Internally uses a map with per-channel mutex for conflict-free tracking. type PresenceManager struct { mu sync.RWMutex channels map[string]*presenceChannel } // NewPresenceManager creates a new PresenceManager. func NewPresenceManager() *PresenceManager { return &PresenceManager{ channels: make(map[string]*presenceChannel), } } // getOrCreateChannel returns an existing channel or creates one. func (pm *PresenceManager) getOrCreateChannel(channel string) *presenceChannel { pm.mu.RLock() ch, ok := pm.channels[channel] pm.mu.RUnlock() if ok { return ch } pm.mu.Lock() defer pm.mu.Unlock() // double-check after acquiring write lock if ch, ok = pm.channels[channel]; ok { return ch } ch = &presenceChannel{ entries: make(map[string]*PresenceEntry), callbacks: make(map[uint64]PresenceCallback), } pm.channels[channel] = ch return ch } // Join registers a client in a channel with initial state. func (pm *PresenceManager) Join(channel, clientID string, state map[string]any) { ch := pm.getOrCreateChannel(channel) now := time.Now() ch.mu.Lock() ch.entries[clientID] = &PresenceEntry{ ClientID: clientID, State: state, JoinedAt: now, UpdatedAt: now, } callbacks := make([]PresenceCallback, 0, len(ch.callbacks)) for _, cb := range ch.callbacks { callbacks = append(callbacks, cb) } ch.mu.Unlock() change := PresenceChange{ Type: PresenceJoin, Channel: channel, ClientID: clientID, State: state, } for _, cb := range callbacks { cb(change) } } // Leave removes a client from a channel. func (pm *PresenceManager) Leave(channel, clientID string) { pm.mu.RLock() ch, ok := pm.channels[channel] pm.mu.RUnlock() if !ok { return } ch.mu.Lock() _, existed := ch.entries[clientID] delete(ch.entries, clientID) callbacks := make([]PresenceCallback, 0, len(ch.callbacks)) for _, cb := range ch.callbacks { callbacks = append(callbacks, cb) } ch.mu.Unlock() if !existed { return } change := PresenceChange{ Type: PresenceLeave, Channel: channel, ClientID: clientID, } for _, cb := range callbacks { cb(change) } } // LeaveAll removes a client from all channels. func (pm *PresenceManager) LeaveAll(clientID string) { pm.mu.RLock() channels := make([]string, 0, len(pm.channels)) for name := range pm.channels { channels = append(channels, name) } pm.mu.RUnlock() for _, ch := range channels { pm.Leave(ch, clientID) } } // Update updates a client's state in a channel. func (pm *PresenceManager) Update(channel, clientID string, state map[string]any) { pm.mu.RLock() ch, ok := pm.channels[channel] pm.mu.RUnlock() if !ok { return } ch.mu.Lock() entry, exists := ch.entries[clientID] if exists { entry.State = state entry.UpdatedAt = time.Now() } callbacks := make([]PresenceCallback, 0, len(ch.callbacks)) for _, cb := range ch.callbacks { callbacks = append(callbacks, cb) } ch.mu.Unlock() if !exists { return } change := PresenceChange{ Type: PresenceUpdate, Channel: channel, ClientID: clientID, State: state, } for _, cb := range callbacks { cb(change) } } // GetPresence returns all entries currently in a channel. func (pm *PresenceManager) GetPresence(channel string) []PresenceEntry { pm.mu.RLock() ch, ok := pm.channels[channel] pm.mu.RUnlock() if !ok { return nil } ch.mu.RLock() defer ch.mu.RUnlock() result := make([]PresenceEntry, 0, len(ch.entries)) for _, entry := range ch.entries { result = append(result, *entry) } return result } // OnChange registers a callback for presence changes on a channel. // Returns a function that unregisters the callback. func (pm *PresenceManager) OnChange(channel string, callback PresenceCallback) func() { ch := pm.getOrCreateChannel(channel) ch.mu.Lock() id := ch.nextID ch.nextID++ ch.callbacks[id] = callback ch.mu.Unlock() return func() { ch.mu.Lock() defer ch.mu.Unlock() delete(ch.callbacks, id) } } // ChannelCount returns the number of clients in a channel. func (pm *PresenceManager) ChannelCount(channel string) int { pm.mu.RLock() ch, ok := pm.channels[channel] pm.mu.RUnlock() if !ok { return 0 } ch.mu.RLock() defer ch.mu.RUnlock() return len(ch.entries) } // MarshalPresence returns the JSON-encoded presence for a channel. func (pm *PresenceManager) MarshalPresence(channel string) ([]byte, error) { entries := pm.GetPresence(channel) return json.Marshal(entries) } WJxXrM>?, !!MF3CJFdz<X[Xd 8C $=wARvh5ڏ{x 3r)mnyRy s87&oHSȅf^LH- Ws㈉0ͺ(Jseδ3r6SgJ"@(D|’n&{/dJzޝZVg 谣 |om}>m)烻WwRn8R+&쟝,9_B`QĊR[^5Ki(x@S|„U8DYƀ ԋ"fO {'pE~վNZqOqÁ{N dl5^Ri q:2!s.,uzO fa :!gm#Ҝ]@d6CKfnL[yȉϏ`-N9t;:Eq+0(|ЌٲSހ*P- ]=ñȫf=QkHxs+)v1[Lw3,2nլI))Z${=B\|^4PB#XĤŌ 3z%bEUA)R]]Z%sڌ'zcK/oQɤ47<) v97Æ*9) U㐻8Y[n1hy f3QʑwY諸"``VP^GtwdHuȵ}Mת| m}H[p($K2xc1.qoM]^ˋ ??o `[nS q'ϋ$=WE@ h/;AaOCk^nL,dzCcGnݦڱ"/r_J[j̦2mhx"vh|PWKoI_u#ÿ//9{k}\D%uk.U2W2]%CmYN8zMM<=!ŭWWF4T}!o&Z~L7#!%Kz[|n fX*kw8%bkM_(BnUvIT3` g2E"1p'd r ϲ𡊌0]DPaF8 TLiTu->>:exҾnzgfHս nx5HʯA}KZvd9bJFCxZJ0p {7=aWa{6Y2f< *uO3_,17Flfrm0i cne3;zQzc|TImՃZDMGEC-rl6_z+Hݼ6Rz`K[/F}F*ٹﺑ/ymxYn8m?W@w-۝L?lGIqVtABIDT-00${ĊsiM"#QOKD'Q  & ^&c!"|G)"ᆓːCVuØiϙkRX>KFKŘ q%DHG%o #0$cb$QYr@pXBA"ݍb>cߴq*hlq0v\ҪwXAGm.ӏm.7䗓nl8`v}7?~w>~.Ň7;j 3&u9g{ g>qc>\Z| [ҽ]^_x'cZAhl'^\T~2e|iz[+ngGڍ6 v/^?p1H$!qy4W6$aɑ0H;f2Y*u|F<1 (/$$>]rA ]Fq):"Zb@OQT9F$1 L\A>`.`UpVwx؏^2l!eB?/ ٴMb7[X۳yj 9ˢ)3Qcs@F*OW>UI⁧z7hL'ɕj re hh.dZ/[zOiu*ΰ(Dss| |~e6adD N$<<7 /7_M5 yC[q^:0`ZXݐhN8eqbc48PL0Ufȫ@25,vyl%^wcmɄiINFpIILBM7ȁ!YHԟf\'t3 |(2-bLxڐr 3"@|F^g60SOp;J>GQ"MpXSy-KbP<6r/2yT$nbT]GfܩJvpkɌv4 07U&QaF^xlD~2j. >O| 0kIbA_M5I.KRju*ҫoCiL&Fٻ &M69,~vI^KTY]lL-`9,,9}O",% %Li| ',ʰȹ44_6"?`>SGɒ]Р`4|&cH r>Jqq;Խ| h*fHCMz峡 <2Q( y֣7*Ȯϵ_-ߋSJ4^}isz7 &X 5!ڎ1mRGDfVƔ.A7ˊŬSN:Y(j}Ct@ST˟Dwrʟsō־6l2?GKo+e@P6 =Ab/"~B)@Wj^`!82\ybcI}VVV+M4t Y K9SR䥗A6?;x@gD1vW0O;f;LH*{]FR Fp@aa}5מvAEK`l[,t$OCʅJ)1{۷ %>+ `{dԬбa x]{s6[):qxVYVĵ,'*搘8$p$M}n<dN.,F7*Iϒ9gI%` U)k viY¯HL)KْZ|^z W~ԲK> vΓ\dI-ʂ ^qZ.'rr?v6󯰳װ*3^O'rskZJ~uYj(˳[4[t媾uQf '2]ܦjR)*9m׼̓br>uN`0`0UqƔ3X"\Cyx"c IAfz%`j:BBHg}! '9b爚?A"E䬜44Ęa4Ie)&j Ѐڤ}6ĦCTmvP m.l 1bȪRrlUQRU !T՘9{E&~@-^W\07#~WLĎ=Qmh89Ez<3QҔ+u\y42_==M`G 53~ &ֲs.#RcCXJbck"y ~^b:B8uaDEc=9Y lPqgGr (ZY$)\#hxg.A^D-@!f@ f۰L-|@)d)G<$?R,WJEM "ͦe%pp"j8͗348 ́DѰTW$,l.77dC l\)l4VQ5хGFk*#HW4`Ů1hc^`ܸ( `F4AzպqCqQvJd9m띤 k݋rZuBQ|__z-梸$cIV,<__V\]*^% G-KPGm7Dnm,EdTIbv ^Z|L *A&$->#x* P0u'(ϋ ^IA=ܼFY Vd"J~(3ڑ?m82d6?CEsI8OWhp\P13>se4ԋzAykQJ <=:>(9Kb6xȖ`T6eO|3 ~>m)@VȌ 5Qdž/=pŏ:cL5޽o7|b&^ɸf4mB]/({PtXE Pv1R?< NZDؑ}J`1zp.X4s6>@lH Ә-yxa:5j I9lyypfNݢH'p@57o ft$mGPTӠq]`e@5cm:4]g86;H46]e˯tkwwfvvUMՔ׶WCyr2Ww+}PEq'Uѯ,(~aQZv]V} ƲG[\䆅s8u rsڈ& cÏPs4jG~5nc㭸8tr5Z[)?)T\ivdFaGw{10릯wLs#uLd67&hhZ҈"kq"xE&$ p& ż^D__=Ҽ@3`Q1Çv1ZQo<ƺ@(ȣF(A؅sH9J%nK((J;s]8h]D7UGNA2[&xGK9G0:F)pe(3b~;`nNelF4 ڶYY"33{*E„O䔄ӆVEy ?) 3U~CU5*&ŚQI"UHd*vd>iorG!+m߿ u F0P{N0~WR"p-ũ$?JYuJ*EGCMu@,,z6Wt[>> Fz5(칷'TwJiRz LS\͘MɜWc,.!\rpp~hG}vMW(FI+ő9 H%,CAxǞe.u/Td)W%'pD@*:=e 6iה*pH=fFY c+4D/8CٴֽN ,P pLK6[/l33LԾ'CҥUNa5ZcsGWda_Ӿ}2 ;W#''',o zXVn{yd^S Nn\qoۢq-]0c,)ԻS"0R;8Wk=\FѨ:E/XtClڲs{ĉu/Y8Ď_&|a^%7pSYnfEdQSGZ{\ 0vi/:HzO NG@02Yt2x#\_ۀD2 uQYMtÓS:cey4IG&zX¸Uؔh<ӭ>3.>ISxkm=!̥zCBQ}M#2%1q*\mܔ`^, EDiN3l1;@Q{'0OJzks C8LF^ =%z >6:DԽ; [0s&2*(9=} 38l(ICcuyn|@]fo!0p$#|Sxz cRR=yhawz[HSO/ T<-/:b rklWNj2tlmh.[Ҵ09^rU&y1f-a2iPy$d!w\6Б!(:$0~8X`p;h$ 3}7<3:'+UKݎNx H$5`z*r˨ 7Oi熆gP{؟KҮm» |7{mQ&Ę-d~la$KUĆ:d)}Ay zv4;5;LD-ա]oahAbcRA,6_VJrUTZVh B՘^Q$E`UXs +K T\-)PLgs= xVtbɭ@3j}{R&f< IwҋB`DNpEײtUBMmHH+ C0;A@ސZ1 J*p4ʘS+9IaFF?68BpIW@V6i gbgQ"{&i4r,T^3@;n7dxe(yPڈ꣛>ɹ6V"q߱@HӼ30XU,A^n“C#;{1_=eqeU;Z ,I)'aM{pR$y5[6 M4V}fB'nBȅf]UFL(ȯ@'_5QN7p&撇O oYdž 6 zrF1{^rAدɶvSoI=b-嵂Rgb ftD%ؾt,Fuhv#R݌g}MrmIo D[};tF' fň=Mer)_S]n^xŽ! /{kew M?o+o y<>A"kUM@[el;7fȯyFI؞4o` =,lfƘyꃗα}h5 0+_5g&0MeRaL;bܼiש-䟹Q?qp2o1}]ERwK|x&12 [zbs>Ɍqhl/+ <3Y뮓 B;t'%z;~wJv8ziou{@V(mts~gSPٴ,n(&Ixiy5,}݅g" ycͣ`b&QRnp9/"Ml|2|&Z*=\r e @䢖̆!tgU,h7l? ~- &>do?2TOE^d.D0T"3^[6rk5rJ0\I(c!o .[=d Xl2A5!'i̛ІNI<"4\t3{bhXg.2jXqc frn}rlVg\Z7;xJd?E-}kJL;MWc&ظ7UI1+{ĎyԹ-LwzQǯ+.(kf1jmMk !YRʙQRh2&1B# oa3NAD/\YpdO2QSG܄*yпX8K0W%>3+HD8k,VI[Xt2#'pl\D#o}~"EBd0e",ܴT;l_ޛU 3-űf~׺!">v W}p<\\M@Ia/wzR V^+K5Gm&ó-џkPb=)b}xɣ ¸{XF 0B\cKLoct=:o|"$?Z).q3Gg4.j/%d\ͮxS0\Cbo>۶;~Gq[$z"x#67қ`լh 'Lg vGwo;?j;B5u0H_/@*67ׂ.Sr9;Eg_ Y4F;nHxzyaKxc2jz8t7] B1eGKCSGFp|FQ5=kүCSjUTDssJ SlEp!5BqstWap3pg^B{f} Fa.DNb@S3s?K&dL}fnl%CUf ABK5`SNm0yqeՖoykp\(1<>/I#`ah8։,,l'e]ǗM=Pc 33 Wz5=5iw-<~~YIH(>\r\EE E9eEz)%Eyd&EpOߴ=k}xkm3ㄍqlܣX`e;y #k\'\Ct899AV yy% 'I=ySsR+5'-l& \b+ H#v8lxqz nD&u Ȑbx6\˯ Hrr*)(鹂kU' eSJL+L*MssviLҒU)q9"4\6G)0IAt槤xCSUEP͗QÚuZ(:63i,$^5QZLܼT7z&d%榢[:9[{>8RH#9'51#ء" (&uIԊ<`64(qnLrnb S23&Oڜ(Os XR l(0zo"\H\P}>BUx]W8OgN0ytL,%Rrخ-SR}d[NЅNrNK"KWWWӁi]]JX?dD/-i1z4J=˷rOC?[sx {:#B)uY4S_m+o]Q6#boT-?SeD#|ߍVY0f)ʩ\*ub"P>5]ˆyb:#/Č2--E#qV9e -(*I>;HܢYwP+dAy4_Z%/ >7Z:<뛛X3YzK@@y@Ltث^c{o6tdfţ2+Fw" r1%ZM1c nؕ7#*c eBqbQ&PcМ"FXYtPAxEïMױsRqo^Q= *ղ߹)C_~qhV8/4ϋ q8K71 %86}Ld(B;,: fBCۃ\.9\C4lЎ 5N*Z~ijzʇu5P5] -8yU}uϠBh_[(=l@8X1N#"!ƫ)GHD)AMs8>MR[$Z:kbh6N˜|1 sEϤ~E z&:]_$SF+ФB89ż mߙ`6@ *'v%(;QBbO r*n^Azy/ n(B;.3?w}N0;FE!x a'P"qU)Ǯ-5-j?u} 'E]Cϲz$vޙ1x|wXaM*Ꚙ8ijf- T-ߧ5ACB),<у{qG?RHS'R{|}F6e"y:`/БB۞M$ P'`٫B|O1w*#SG-)x}RV CZ*d e+?uQʩyRe9a#X?8hZ&],Y'1cP0hk;N3x@[-A>FtkoYΞ<ڬ:0 18hj׷n{ь~|#joqio+y;fzurv6]nٻlZ7@s=VԿqAp;^rl^>\ÝnwǵO['`#`PK)0hW9 ܭ seCOzh91z5Z9.OYc"uQld.Nv/# s-f#5s,) M}߰͵8Lo@'_okVyO{_` c xq;:9h~];9'ՓZiou;o.|.;{3~s XF"i'"6T`a %XY{B"ՂQx6|TXh=BȾ*Mt\]|Q7k"TLW'1ǔ{}riaTSFM]aРì,-Mfde [myUmܳ4\֥0/ڼ;{p|y؅-{)#l@I]F7D\bB֠`RȦM;u|ƆKM/pMa$[3= QQ^B\k)ĬΣ.Wg}:GjJjSO2߫riMyrT}T=c1 STC[WCE&=E&.5<2 *tl<fU7ē%:'KsE/Csq*hĖEZw:.4N \|H¦de'[~ŀxC%=a4Q$M"ep}7Q`ɩqFrGx OLŦHd^p`m^7RX֣bZD+pnC^Q6݆!tO^FVGIf($/>ńϹńZelX)4{ޡ>@[gaB[b%?7ZB 8|`^S=> -y3䤺jỮ8}@F(?mɸ+Ux}s{aN5SW,;@{Z2"ynޣ 5l^6 &ZE~p|ł2`5Vr$Oo$ >˗Le>QLqҸ 6_/榎"Ť.UXI2Pv):Y{ )H֒SðMZ#QW/lI#5v@z16BS.ܚbCoھbQpO0X&:&'WW&`bvǘcT<}*=N ^KXE.le>^3bf!4Memٕ$#ka<,E#bk8PP? , BG"ɐQ#fۥrB䶔'Â0 '6wdpľrqq' l?gofm-btl@y noZ@q+[**!z$Q*vB΢Pd(n RB=sVVV1Ƕqsb-OTy)SN88O/7'$ e*Q/ljY+ʿ-v^,v^<C>n13x-[Bo]Y8C4<Ȑؙw݉0Ү! F**>| Y.K,z:? g,V812y,7 U`Ȍfh.um3ټx{ls͛+gk*g8GCh`>WHq[źTU 8h+/5%YfLv 5_Ŭ}Uh* g }[jlk #Wkg_d <"3E[ro,5|){@o#:biI&L?u?*S$;53$a y~^9-A%@uDl9W\83@2-g&GHʰv&2PUcNVMkD[`QRЙ0pCfPǟ7Rt9L| 8Hx>s:%&_E·wi~,7ȋWs*4o!doXzHla7dM`Wމ?pM8f3AE?6v|JN'yHM ] gCg"LY |ט c-.>)id=q-uukdNq z_!ߗ1+p,*8!OrYB܆CDI5f6{ j^Ccڄ%%xDsHHrHF-9H$;DbC5T W_eKC`e}\}hkl rR^GEaige@#6d{IDK%xx 3ߝc:^4Z,k\K{,rTC挢$^8;.r>xՏ=`lj-x!(X?ٴWZ&mr Mz o4}sMr״ 788:"Y\uwsv\ytJ_\I雍wwOP+TC]ezEEC{X OKI(F"XWeO%W~YFw[G =(bG-e)lhoWB3OZ*d&D&N*z8cS˗džW#>`y  D<[MxC^=#M9y8A bFB†ۉ%WE)ELke d2;T˳W/9&sLOYN?46_H$!X_RVzx[qq  'ksDmgJb7kst1ncᴱ\1Y_tk_x2u|L`o3C'K)o^!.o֗2aF|Zv&NTf[,{ ,Ϩ=|@jJUqs&LzOVlm4/g]T2xYrԮEiz=7{8 Q)!@3}>a9EsћE|?RBJJP*S;Qd\oj]6\e3OR,ez2VMRS+к31OMT Gd"̦ -+-jkV%+>PeV]:+dڄZʔn"<+p>2T9\u}xѥ,HIY\ =uDlkW-LUYх갨TUW-Mfq*ƵZrG}`2t K-bOqE&P~Qrlkqˢ.mJbŪpU:B2R.t@kQ?jKp,dhbYUDJjGԹxL|GU5e%tc$@f. o(l3i+kCXky YoQ*NVߊGA'Ggq4E^zA(y ?f5i c-WEar!<4EK'azJqRCrɗybSPM2xlN' dv"E4 VLHye`K?p=8F®=|~Dtlp.f[_J]y(cC #2G #n9G;X-z]XT@IT4!SzE&)4aLM$&`- !\MC |@i| g9Ս5sJ&␭(ÜoˆUרJZFݺ֭JuB=J;K#Sз͍jmLM;|}yY}TB6<9;} rrSM/ݚ?bf)-.lIdꅮWǽ qE[R^+(ܒx]Z/X#ݦPm}u/@U_0#JP)\&xeO=y I{:{^<(ɻ^9 /4`Z+7C+.IѷPJG"};BյEJ^{tO'qL(FQ',@/Hx'J]_ɱ7FuP+%mqLSf3>jt:P'uy) 5%Vhs(wJ$€WteM[JY߈#S* fB2z5 =.PqǸ#eSOE#K.yPBȭawPWV&4PALJ n?T%&]FOqqK'SoMS젢 hF33W(ŝVKUǘm'̀ Y4 0ݘ#ZvC,*ɤhzTDi0o1s[b:g 4!aAGL#wk &r`RO-)gKweD4bdg6Xcu_~nrleNЇ=њfashjYk,aU,b(O S,:S1 > KtBIraIr" 25v\HOcΗ-xm<45M$p,zonlKm"xașSРK;K(9RH%/<J{¼ZHoXy'e e[1DC;1(%'c c7'Hyk%+Y!xiA@ADĩa|OH]fHVq-`)o_~a(of-حQĴ\MRbVpbU,⪵#7EHs fp `' _=%3']ck2fb3Ͼo顂S.3EYtK&"zÒLt"CFͤſA᧿:CTw Eb%+-.KoE#Q6$bj- T5B^8H_DwURYfqj'E^yS` ,sd}[z }n&Z ɗcslB_QQ}@_)7 808#%=PZ" 1!w< 컃[#6'g^qPo_ KmGуspR(w9߂gkx>ca)$fk{>cE`~UŘMLR K,OCt5C>8@;mov~nS_ v:*nfjdx}TAoEQTA4mH/9@,$䔈CF&V gٙef֎Ab8FBp@.'.xovG*Bٙo}{߿_:(h5Q ,&Ʀ:-un1$CK/#P&* ]i"Ah"M 56\Y3"}(|\qbPL\d^uF -G[s3O#.Vꇕ=ޛ(T زA1R;x+"`&LÕ;ܔA VhWKPXs>oӃU,3,D=3`tPQ>ᴯ %+ Wa6BV&Cky֔m I)pr!) MiDA^T!z2ǨdQ=)T_-=-_<| =%oB+A&MPʑԡ%Һǻ(TUE0W+fPcud`a,s yiN QP tcp6& Hgԕ5]dE]F&`PJ#"ĸ!@ɵ^mԲ +x |`i`)ε馘^$g6K fAH$j`,C(k T b;[ѡXϰ2 0cilLP#Y sϚ9jʢ]aHJkC:ԜW.޺ҵڒ[ox& de'4HSk#$aa(C{ǽ}VK64a5ؿ2u({ޢ6ͭVzzw @p~əionUyi--Ғ|mXoT_]`N㶝xXmo7, vpWJ^?0\9y9w8ޥ$ƻq# Kve"33/M^\+FXԍҖQR_otmmCS/\+aUVz/*ӫi4S[*3[c*ËV {(UUjyA2)-2Ύ_c5kUm4̮qe? (iʊJpiܰ5G\ %bj^[\岓 *cg 28;0N9)qnD5y ؊KEϤbW:%3ήLHĸ,%%4/ 'Zr?圽{~RJHǛ,J)xl~ߋ7ǯOY+y7F$;cWJ*L,A }\{[~nlUƣs 1[~W|1/[YtF>_7K[sˍ=CMC~3:}6>[qdsv:m_;2&Ym>k_0٥].L[^UOSZNz#csG⪞L=J,܀D$dF٧FV$ C,W x5.`kܞQžt'4Jhoѩ_i>؎` .G ."R-b7O4c[.s 2p4vdBt g.J0p?عՃ'0?kwD͈t):;ޣn>c!\fd.k+j{fd%ɵ$nt0gB4#Xd̺̋u%ucLŔm6imaKNb',^x9~]$(j4z51J;D@-dW@<ċ ?Eszi:Ò'=FVPl'+x. QA瞯⫼c n9hp?g!t:2R*条v:b@FGO\T9}p*45fDrN(/>DZT!0|{(is1 w%NEW=D#:IkeT2-t#)GcRK:bJk4P, ʢ T=,tND"RU4@i趞{ArCքFyMQc*3讽!`= 1:$yw@\U5*,hD&R4ZЫ@oݗ$sJ# S[书G5@ &NVjMXL-`meb%5 Yi-(`d`>U"4XF' @C1;a 7w;hy1n&hrۚp9| N?*#ul =4'٣aXX_4W>C/9k \H܅b' 3@Dn}9MEpax//"Zta=<'a`>4' i;r݃sz Ъ C ];E]C0Űg>CZͰ1w`,v?菇?9l>a0. (0AjǺGoRgIa#e v䀑Rט Hwi'=!}椎 Z8 B6GWL4dso'#gGbԹ0u`c+*WbSŜY fpHufHqmtNRD !|y7yDI6/Pg `G+2 v~/nx]QMOAlwPX2&z01z y6oّ101{⤿#oz/Ĺtz5UwM74V׹<187Gّ]ڲ_ n.{HTڜEho[㣷q;(tBsT?TI΂ E9Dh ,)i'uJ2$W}~޿cwI-- )Ch.is4VS"KIuE Fpf).UE&u^"GSXv1I&Sj42s8Γ?J ^D M[S Oܼ%Pb7%/#7Y8GOU݀]F֝ЙP )d0=<$ IRHÜVl9\hT Iv{O* q hu:k\HPs?6ߣ3p3s}]'xh FLTۥˣsxZoH=KUMJ ӕ6Յ4"5z:+f. fc̣(m)Hmzvvo+ 4 Ņ!尟\\rڵBr?f2dWB]-x/>8e q .c*JXM2#Q |\ O: xZІ/|s9s%ٲF{ y(wF9"\X>0X.Y%]%tB$bI(#t F_1sJudY=B4MtZQƟcw~jwwmp> # i?@.+Z0 8T*|U5uc?fl"2愇K':͇hJ>M>!Ζ$u-ɁG0$F)Po େY zgŵC$](!$kU1:)$ [*s෠lėr?PsB O]i+NQ:ZܩaOm0;FjT:ôAxh$UgM8ছ*oV;d\D?Z~"I^rs~W)e coi=4Br!}TFxq6a8=,ч fkCZ綋0Fj/.%&`Z"Pa5c¦mM,l;!YMzl5ya=bAavV Z}UR NY0X/VV4e ,9,?+0b's ȖoDQcS-OIc,{;9WNDPTgȬ`,a]ɲz8zK^m&W6n@Je;C:d5*̑9Of#!DoILoEznjk؂>T7#5p bͼ#S7̈̌m͛,4->Bܡ4v^ )$vqBɺE?y'Z @v_V1IB\* (HpsGc#sI4ࢮ™v6V݂v;Qv˕)|Cc\^wW**!STQ2PQV:#?Ϋ*:?tC0ǡ7gJ?}v/H4@hbEҫu#FЇFH(C^ЇP;մ MLc2 Ms&\AL!Wa0WbB2aY )f(W//{mlX_#X<)*mRa&uEȤݢ?]/lt yCMHG퇿{u]㽹H9_;ӧ SM*yhv 1BF#1S^v:2AM90^ =xS[ҋX|] m[oFH*26a 0s2J5=het8hOHfԕ|k_-Lђ4/͢Pfy{Lz>l9K4؍Koؿn5FDd~9 ?AkL>wԺ%1ZZ TڅIMme#S,ݱ ;ij zbo ~.TWEmSɯݔ;WVQ?ЖMBxjSAIH-FkڴQ`ZRR(A7ڢEb ̝ 3s[R)yW|]qskr&?3s.kPrfNVGHw%5uUяq*ey2| Åt$M.?crIaI.F\pz ǼOf\p@!"w*c:v<65+Z ԞmWbT7Q`6^}6\#Lv1}ўm,BaVC])HH $Tp\-uc q@re.h{!mF>ȻJ|=]b{Bx )jFvze\8j؀EQjB"]#NӉHL#'#\Im[n 7wΚŢ0^l .7@ݮ>!:J@2 ѷb>hq̮wl Iح_ՅS'whBݼc >OOsH??x,9OrFFb^U~b~Rbq~r~QRzfIFi^r~>L~c:l|lHC>x'yGl?ciIBAQ~YfJjQ_,ޓ8&1 Le՜YorKs6[-Gx#vMl##SfF&0$'O48,"&'GspOn=#CxS0=_1䰛(aYm%XRV3Iv+v6[ -{͋-·ZIҖM.VZݚZ?2e0FE7o+FKINHK=w}ӻ6&CxƕGv(]h2$-# oFX,@r|=-U/@\@=t1%>2-<'ɑ0F>]H}pD ^TUB s\I_j ?2r^F,/W-,2 /g:a]h_Qii¤v\À5=aMBjV^;g-8N }lKDcnD[oO[[S7EJr7O?VYPU5 P] ?qPkC>.$;j1>I]+C`uyQ̩9~I4ohFcf =;T!gq$I9V⑩'HnjxcFFb^U~b~Rbq~r~QRzfIFi^r~>L~c-fRXxVMP#E.j)Pfʟ@o, :3=dzPJyAꛇ=yv WҕfCgM6|mzzmNO6*6X@b?cPBٰ#+Bt;n WGqOQ)`š <]yN,]z( G$B? 5vaN LG+-  ?'pHD1 m `x{re#S& oL"L :Bױ2Ao8(ͯNA%&Oڼ/įcSTyF$5B}E#`z602n܍$p=qrd39uruUզ9 xe[package apis import ( cryptoRand "crypto/rand" "errors" "fmt" "math/big" "net/http" "strings" "time" "github.com/pocketbase/dbx" "github.com/hanzoai/base/core" "github.com/hanzoai/base/forms" "github.com/hanzoai/base/tools/filesystem" "github.com/hanzoai/base/tools/inflector" "github.com/hanzoai/base/tools/list" "github.com/hanzoai/base/tools/router" "github.com/hanzoai/base/tools/search" "github.com/hanzoai/base/tools/security" ) // bindRecordCrudApi registers the record crud api endpoints and // the corresponding handlers. // // note: the rate limiter is "inlined" because some of the crud actions are also used in the batch APIs func bindRecordCrudApi(app core.App, rg *router.RouterGroup[*core.RequestEvent]) { subGroup := rg.Group("/collections/{collection}/records").Unbind(DefaultRateLimitMiddlewareId) subGroup.GET("", recordsList) subGroup.GET("/{id}", recordView) subGroup.POST("", recordCreate(true, nil)).Bind(dynamicCollectionBodyLimit("")) subGroup.PATCH("/{id}", recordUpdate(true, nil)).Bind(dynamicCollectionBodyLimit("")) subGroup.DELETE("/{id}", recordDelete(true, nil)) } func recordsList(e *core.RequestEvent) error { collection, err := e.App.FindCachedCollectionByNameOrId(e.Request.PathValue("collection")) if err != nil || collection == nil { return e.NotFoundError("Missing collection context.", err) } err = checkCollectionRateLimit(e, collection, "list") if err != nil { return err } requestInfo, err := e.RequestInfo() if err != nil { return firstApiError(err, e.BadRequestError("", err)) } if collection.ListRule == nil && !requestInfo.HasSuperuserAuth() { return e.ForbiddenError("Only superusers can perform this action.", nil) } // forbid users and guests to query special filter/sort fields err = checkForSuperuserOnlyRuleFields(requestInfo) if err != nil { return err } query := e.App.RecordQuery(collection) fieldsResolver := core.NewRecordFieldResolver(e.App, collection, requestInfo, true) if !requestInfo.HasSuperuserAuth() && collection.ListRule != nil && *collection.ListRule != "" { expr, err := search.FilterData(*collection.ListRule).BuildExpr(fieldsResolver) if err != nil { return err } query.AndWhere(expr) // will be applied by the search provider right before executing the query // fieldsResolver.UpdateQuery(query) } // hidden fields are searchable only by superusers fieldsResolver.SetAllowHiddenFields(requestInfo.HasSuperuserAuth()) searchProvider := search.NewProvider(fieldsResolver).Query(query) // use rowid when available to minimize the need of a covering index with the "id" field if !collection.IsView() { searchProvider.CountCol("_rowid_") } records := []*core.Record{} result, err := searchProvider.ParseAndExec(e.Request.URL.Query().Encode(), &records) if err != nil { return firstApiError(err, e.BadRequestError("", err)) } event := new(core.RecordsListRequestEvent) event.RequestEvent = e event.Collection = collection event.Records = records event.Result = result return e.App.OnRecordsListRequest().Trigger(event, func(e *core.RecordsListRequestEvent) error { if err := EnrichRecords(e.RequestEvent, e.Records); err != nil { return firstApiError(err, e.InternalServerError("Failed to enrich records", err)) } // Add a randomized throttle in case of too many empty search filter attempts. // // This is just for extra precaution since security researches raised concern regarding the possibility of eventual // timing attacks because the List API rule acts also as filter and executes in a single run with the client-side filters. // This is by design and it is an accepted trade off between performance, usability and correctness. // // While technically the below doesn't fully guarantee protection against filter timing attacks, in practice combined with the network latency it makes them even less feasible. // A properly configured rate limiter or individual fields Hidden checks are better suited if you are really concerned about eventual information disclosure by side-channel attacks. // // In all cases it doesn't really matter that much because it doesn't affect the builtin Base security sensitive fields (e.g. password and tokenKey) since they // are not client-side filterable and in the few places where they need to be compared against an external value, a constant time check is used. if !e.HasSuperuserAuth() && (collection.ListRule != nil && *collection.ListRule != "") && (requestInfo.Query["filter"] != "") && len(e.Records) == 0 && checkRateLimit(e.RequestEvent, "@hz_list_timing_check_"+collection.Id, listTimingRateLimitRule) != nil { e.App.Logger().Debug("Randomized throttle because of too many failed searches", "collectionId", collection.Id) randomizedThrottle(500) } return execAfterSuccessTx(true, e.App, func() error { return e.JSON(http.StatusOK, e.Result) }) }) } var listTimingRateLimitRule = core.RateLimitRule{MaxRequests: 3, Duration: 3} func randomizedThrottle(softMax int64) { var timeout int64 randRange, err := cryptoRand.Int(cryptoRand.Reader, big.NewInt(softMax)) if err == nil { timeout = randRange.Int64() } else { timeout = softMax } time.Sleep(time.Duration(timeout) * time.Millisecond) } func recordView(e *core.RequestEvent) error { collection, err := e.App.FindCachedCollectionByNameOrId(e.Request.PathValue("collection")) if err != nil || collection == nil { return e.NotFoundError("Missing collection context.", err) } err = checkCollectionRateLimit(e, collection, "view") if err != nil { return err } recordId := e.Request.PathValue("id") if recordId == "" { return e.NotFoundError("", nil) } requestInfo, err := e.RequestInfo() if err != nil { return firstApiError(err, e.BadRequestError("", err)) } if collection.ViewRule == nil && !requestInfo.HasSuperuserAuth() { return e.ForbiddenError("Only superusers can perform this action.", nil) } ruleFunc := func(q *dbx.SelectQuery) error { if !requestInfo.HasSuperuserAuth() && collection.ViewRule != nil && *collection.ViewRule != "" { resolver := core.NewRecordFieldResolver(e.App, collection, requestInfo, true) expr, err := search.FilterData(*collection.ViewRule).BuildExpr(resolver) if err != nil { return err } q.AndWhere(expr) err = resolver.UpdateQuery(q) if err != nil { return err } } return nil } record, fetchErr := e.App.FindRecordById(collection, recordId, ruleFunc) if fetchErr != nil || record == nil { return firstApiError(err, e.NotFoundError("", fetchErr)) } event := new(core.RecordRequestEvent) event.RequestEvent = e event.Collection = collection event.Record = record return e.App.OnRecordViewRequest().Trigger(event, func(e *core.RecordRequestEvent) error { if err := EnrichRecord(e.RequestEvent, e.Record); err != nil { return firstApiError(err, e.InternalServerError("Failed to enrich record", err)) } return execAfterSuccessTx(true, e.App, func() error { return e.JSON(http.StatusOK, e.Record) }) }) } func recordCreate(responseWriteAfterTx bool, optFinalizer func(data any) error) func(e *core.RequestEvent) error { return func(e *core.RequestEvent) error { collection, err := e.App.FindCachedCollectionByNameOrId(e.Request.PathValue("collection")) if err != nil || collection == nil { return e.NotFoundError("Missing collection context.", err) } if collection.IsView() { return e.BadRequestError("Unsupported collection type.", nil) } err = checkCollectionRateLimit(e, collection, "create") if err != nil { return err } requestInfo, err := e.RequestInfo() if err != nil { return firstApiError(err, e.BadRequestError("", err)) } hasSuperuserAuth := requestInfo.HasSuperuserAuth() if !hasSuperuserAuth && collection.CreateRule == nil { return e.ForbiddenError("Only superusers can perform this action.", nil) } record := core.NewRecord(collection) data, err := recordDataFromRequest(e, record) if err != nil { return firstApiError(err, e.BadRequestError("Failed to read the submitted data.", err)) } // set a random password for the OAuth2 ignoring its plain password validators var skipPlainPasswordRecordValidators bool if requestInfo.Context == core.RequestInfoContextOAuth2 { if _, ok := data[core.FieldNamePassword]; !ok { data[core.FieldNamePassword] = security.RandomString(30) data[core.FieldNamePassword+"Confirm"] = data[core.FieldNamePassword] skipPlainPasswordRecordValidators = true } } // replace modifiers fields so that the resolved value is always // available when accessing requestInfo.Body requestInfo.Body = data form := forms.NewRecordUpsert(e.App, record) if hasSuperuserAuth { form.GrantSuperuserAccess() } form.Load(data) if skipPlainPasswordRecordValidators { // unset the plain value to skip the plain password field validators if raw, ok := record.GetRaw(core.FieldNamePassword).(*core.PasswordFieldValue); ok { raw.Plain = "" } } // check the request and record data against the create and manage rules if !hasSuperuserAuth && collection.CreateRule != nil { dummyRecord := record.Clone() dummyRandomPart := "__pb_create__" + security.PseudorandomString(6) // set an id if it doesn't have already // (the value doesn't matter; it is used only to minimize the breaking changes with earlier versions) if dummyRecord.Id == "" { dummyRecord.Id = "__temp_id__" + dummyRandomPart } // unset the verified field to prevent manage API rule misuse in case the rule relies on it dummyRecord.SetVerified(false) // export the dummy record data into db params dummyExport, err := dummyRecord.DBExport(e.App) if err != nil { return e.BadRequestError("Failed to create record", fmt.Errorf("dummy DBExport error: %w", err)) } dummyParams := make(dbx.Params, len(dummyExport)) selects := make([]string, 0, len(dummyExport)) var param string for k, v := range dummyExport { k = inflector.Columnify(k) // columnify is just as extra measure in case of custom fields param = "__pb_create__" + k dummyParams[param] = v selects = append(selects, "{:"+param+"} AS [["+k+"]]") } // shallow clone the current collection dummyCollection := *collection dummyCollection.Id += dummyRandomPart dummyCollection.Name += inflector.Columnify(dummyRandomPart) withFrom := fmt.Sprintf("WITH {{%s}} as (SELECT %s)", dummyCollection.Name, strings.Join(selects, ",")) // check non-empty create rule if *dummyCollection.CreateRule != "" { ruleQuery := e.App.ConcurrentDB().Select("(1)").PreFragment(withFrom).From(dummyCollection.Name).AndBind(dummyParams) resolver := core.NewRecordFieldResolver(e.App, &dummyCollection, requestInfo, true) expr, err := search.FilterData(*dummyCollection.CreateRule).BuildExpr(resolver) if err != nil { return e.BadRequestError("Failed to create record", fmt.Errorf("create rule build expression failure: %w", err)) } ruleQuery.AndWhere(expr) err = resolver.UpdateQuery(ruleQuery) if err != nil { return e.BadRequestError("Failed to create record", fmt.Errorf("create rule update query failure: %w", err)) } var exists int err = ruleQuery.Limit(1).Row(&exists) if err != nil || exists == 0 { return e.BadRequestError("Failed to create record", fmt.Errorf("create rule failure: %w", err)) } } // check for manage rule access manageRuleQuery := e.App.ConcurrentDB().Select("(1)").PreFragment(withFrom).From(dummyCollection.Name).AndBind(dummyParams) if !form.HasManageAccess() && hasAuthManageAccess(e.App, requestInfo, &dummyCollection, manageRuleQuery) { form.GrantManagerAccess() } } var isOptFinalizerCalled bool event := new(core.RecordRequestEvent) event.RequestEvent = e event.Collection = collection event.Record = record hookErr := e.App.OnRecordCreateRequest().Trigger(event, func(e *core.RecordRequestEvent) error { form.SetApp(e.App) form.SetRecord(e.Record) err := form.Submit() if err != nil { return firstApiError(err, e.BadRequestError("Failed to create record", err)) } err = EnrichRecord(e.RequestEvent, e.Record) if err != nil { return firstApiError(err, e.InternalServerError("Failed to enrich record", err)) } err = execAfterSuccessTx(responseWriteAfterTx, e.App, func() error { return e.JSON(http.StatusOK, e.Record) }) if err != nil { return err } if optFinalizer != nil { isOptFinalizerCalled = true err = optFinalizer(e.Record) if err != nil { return firstApiError(err, e.InternalServerError("", err)) } } return nil }) if hookErr != nil { return hookErr } // e.g. in case the regular hook chain was stopped and the finalizer cannot be executed as part of the last e.Next() task if !isOptFinalizerCalled && optFinalizer != nil { if err := optFinalizer(event.Record); err != nil { return firstApiError(err, e.InternalServerError("", err)) } } return nil } } func recordUpdate(responseWriteAfterTx bool, optFinalizer func(data any) error) func(e *core.RequestEvent) error { return func(e *core.RequestEvent) error { collection, err := e.App.FindCachedCollectionByNameOrId(e.Request.PathValue("collection")) if err != nil || collection == nil { return e.NotFoundError("Missing collection context.", err) } if collection.IsView() { return e.BadRequestError("Unsupported collection type.", nil) } err = checkCollectionRateLimit(e, collection, "update") if err != nil { return err } recordId := e.Request.PathValue("id") if recordId == "" { return e.NotFoundError("", nil) } requestInfo, err := e.RequestInfo() if err != nil { return firstApiError(err, e.BadRequestError("", err)) } hasSuperuserAuth := requestInfo.HasSuperuserAuth() if !hasSuperuserAuth && collection.UpdateRule == nil { return firstApiError(err, e.ForbiddenError("Only superusers can perform this action.", nil)) } // eager fetch the record so that the modifiers field values can be resolved record, err := e.App.FindRecordById(collection, recordId) if err != nil { return firstApiError(err, e.NotFoundError("", err)) } data, err := recordDataFromRequest(e, record) if err != nil { return firstApiError(err, e.BadRequestError("Failed to read the submitted data.", err)) } // replace modifiers fields so that the resolved value is always // available when accessing requestInfo.Body requestInfo.Body = data ruleFunc := func(q *dbx.SelectQuery) error { if !hasSuperuserAuth && collection.UpdateRule != nil && *collection.UpdateRule != "" { resolver := core.NewRecordFieldResolver(e.App, collection, requestInfo, true) expr, err := search.FilterData(*collection.UpdateRule).BuildExpr(resolver) if err != nil { return err } q.AndWhere(expr) err = resolver.UpdateQuery(q) if err != nil { return err } } return nil } // refetch with access checks record, err = e.App.FindRecordById(collection, recordId, ruleFunc) if err != nil { return firstApiError(err, e.NotFoundError("", err)) } form := forms.NewRecordUpsert(e.App, record) if hasSuperuserAuth { form.GrantSuperuserAccess() } form.Load(data) manageRuleQuery := e.App.ConcurrentDB().Select("(1)").From(collection.Name).AndWhere(dbx.HashExp{ collection.Name + ".id": record.Id, }) if !form.HasManageAccess() && hasAuthManageAccess(e.App, requestInfo, collection, manageRuleQuery) { form.GrantManagerAccess() } var isOptFinalizerCalled bool event := new(core.RecordRequestEvent) event.RequestEvent = e event.Collection = collection event.Record = record hookErr := e.App.OnRecordUpdateRequest().Trigger(event, func(e *core.RecordRequestEvent) error { form.SetApp(e.App) form.SetRecord(e.Record) err := form.Submit() if err != nil { return firstApiError(err, e.BadRequestError("Failed to update record.", err)) } err = EnrichRecord(e.RequestEvent, e.Record) if err != nil { return firstApiError(err, e.InternalServerError("Failed to enrich record", err)) } err = execAfterSuccessTx(responseWriteAfterTx, e.App, func() error { return e.JSON(http.StatusOK, e.Record) }) if err != nil { return err } if optFinalizer != nil { isOptFinalizerCalled = true err = optFinalizer(e.Record) if err != nil { return firstApiError(err, e.InternalServerError("", fmt.Errorf("update optFinalizer error: %w", err))) } } return nil }) if hookErr != nil { return hookErr } // e.g. in case the regular hook chain was stopped and the finalizer cannot be executed as part of the last e.Next() task if !isOptFinalizerCalled && optFinalizer != nil { if err := optFinalizer(event.Record); err != nil { return firstApiError(err, e.InternalServerError("", fmt.Errorf("update optFinalizer error: %w", err))) } } return nil } } func recordDelete(responseWriteAfterTx bool, optFinalizer func(data any) error) func(e *core.RequestEvent) error { return func(e *core.RequestEvent) error { collection, err := e.App.FindCachedCollectionByNameOrId(e.Request.PathValue("collection")) if err != nil || collection == nil { return e.NotFoundError("Missing collection context.", err) } if collection.IsView() { return e.BadRequestError("Unsupported collection type.", nil) } err = checkCollectionRateLimit(e, collection, "delete") if err != nil { return err } recordId := e.Request.PathValue("id") if recordId == "" { return e.NotFoundError("", nil) } requestInfo, err := e.RequestInfo() if err != nil { return firstApiError(err, e.BadRequestError("", err)) } if !requestInfo.HasSuperuserAuth() && collection.DeleteRule == nil { return e.ForbiddenError("Only superusers can perform this action.", nil) } ruleFunc := func(q *dbx.SelectQuery) error { if !requestInfo.HasSuperuserAuth() && collection.DeleteRule != nil && *collection.DeleteRule != "" { resolver := core.NewRecordFieldResolver(e.App, collection, requestInfo, true) expr, err := search.FilterData(*collection.DeleteRule).BuildExpr(resolver) if err != nil { return err } q.AndWhere(expr) err = resolver.UpdateQuery(q) if err != nil { return err } } return nil } record, err := e.App.FindRecordById(collection, recordId, ruleFunc) if err != nil || record == nil { return e.NotFoundError("", err) } var isOptFinalizerCalled bool event := new(core.RecordRequestEvent) event.RequestEvent = e event.Collection = collection event.Record = record hookErr := e.App.OnRecordDeleteRequest().Trigger(event, func(e *core.RecordRequestEvent) error { if err := e.App.Delete(e.Record); err != nil { return firstApiError(err, e.BadRequestError("Failed to delete record. Make sure that the record is not part of a required relation reference.", err)) } err = execAfterSuccessTx(responseWriteAfterTx, e.App, func() error { return e.NoContent(http.StatusNoContent) }) if err != nil { return err } if optFinalizer != nil { isOptFinalizerCalled = true err = optFinalizer(e.Record) if err != nil { return firstApiError(err, e.InternalServerError("", fmt.Errorf("delete optFinalizer error: %w", err))) } } return nil }) if hookErr != nil { return hookErr } // e.g. in case the regular hook chain was stopped and the finalizer cannot be executed as part of the last e.Next() task if !isOptFinalizerCalled && optFinalizer != nil { if err := optFinalizer(event.Record); err != nil { return firstApiError(err, e.InternalServerError("", fmt.Errorf("delete optFinalizer error: %w", err))) } } return nil } } // ------------------------------------------------------------------- func recordDataFromRequest(e *core.RequestEvent, record *core.Record) (map[string]any, error) { info, err := e.RequestInfo() if err != nil { return nil, err } // resolve regular fields result := record.ReplaceModifiers(info.Body) // resolve uploaded files uploadedFiles, err := extractUploadedFiles(e, record.Collection(), "") if err != nil { return nil, err } if len(uploadedFiles) > 0 { for k, files := range uploadedFiles { uploaded := make([]any, 0, len(files)) // if not remove/prepend/append -> merge with the submitted // info.Body values to prevent accidental old files deletion if info.Body[k] != nil && !strings.HasPrefix(k, "+") && !strings.HasSuffix(k, "+") && !strings.HasSuffix(k, "-") { existing := list.ToUniqueStringSlice(info.Body[k]) for _, name := range existing { uploaded = append(uploaded, name) } } for _, file := range files { uploaded = append(uploaded, file) } result[k] = uploaded } result = record.ReplaceModifiers(result) } isAuth := record.Collection().IsAuth() // unset hidden fields for non-superusers if !info.HasSuperuserAuth() { for _, f := range record.Collection().Fields { if f.GetHidden() { // exception for the auth collection "password" field if isAuth && f.GetName() == core.FieldNamePassword { continue } delete(result, f.GetName()) } } } return result, nil } func extractUploadedFiles(re *core.RequestEvent, collection *core.Collection, prefix string) (map[string][]*filesystem.File, error) { contentType := re.Request.Header.Get("content-type") if !strings.HasPrefix(contentType, "multipart/form-data") { return nil, nil // not multipart/form-data request } result := map[string][]*filesystem.File{} for _, field := range collection.Fields { if field.Type() != core.FieldTypeFile { continue } baseKey := field.GetName() keys := []string{ baseKey, // prepend and append modifiers "+" + baseKey, baseKey + "+", } for _, k := range keys { if prefix != "" { k = prefix + "." + k } files, err := re.FindUploadedFiles(k) if err != nil && !errors.Is(err, http.ErrMissingFile) { return nil, err } if len(files) > 0 { result[k] = files } } } return result, nil } // hasAuthManageAccess checks whether the client is allowed to have // [forms.RecordUpsert] auth management permissions // (e.g. allowing to change system auth fields without oldPassword). func hasAuthManageAccess(app core.App, requestInfo *core.RequestInfo, collection *core.Collection, query *dbx.SelectQuery) bool { if !collection.IsAuth() { return false } manageRule := collection.ManageRule if manageRule == nil || *manageRule == "" { return false // only for superusers (manageRule can't be empty) } if requestInfo == nil || requestInfo.Auth == nil { return false // no auth record } resolver := core.NewRecordFieldResolver(app, collection, requestInfo, true) expr, err := search.FilterData(*manageRule).BuildExpr(resolver) if err != nil { app.Logger().Error("Manage rule build expression error", "error", err, "collectionId", collection.Id) return false } query.AndWhere(expr) err = resolver.UpdateQuery(query) if err != nil { return false } var exists int err = query.Limit(1).Row(&exists) return err == nil && exists > 0 } +Psx{6 Փ9S*&+2l\ڪ̜QYGخf[5x8"}j#.oRSoxOLPTO7l:DQc 7Vҭ!x͋`Lfb /LyF;tC~yq2$+ardذMXaTZ_a.ޭ7t|$t1~c"K ߇I|\jv(|>tQ3y* l386xaOs)Y9ᆌSʚeƽt7q7D\1Cnܐ_Z^&q, d*s5ZU@[ ΄8`3{TEvw0Kr_loƏ*w!_qECY99F9>-CIU:դܵ 9 1 $#I~ RHN%zLIK!L  .ƧC0Q:4i0UNhϨ({ 9)9YQG_zL|rG7 ^G!%sPZQ]bMWV<:a3YWaFgl@}^bIfm mrBD4 O:xZU_*T8ײd;gh?qpoO{\:*&}~VG xrڬU[;jTULQzyMhx[!pr"y͉LL 7벉B&s\1,7Wc+"0yc+fyd]6ټka&gcBHY;8y6"bhL~/6YHGt4Pkr2d9Qɞ{⹢DS6 /Ǻ9J te x\sF,T]ʶt_k)*eD E@Ǽoպ\6 zzzzk9J:דId/d+/V/uw4Ubj_,۶ϺmJEp"Wu5R-Q.n7Qy4BhU#ˇ1Oh%Q̻&oH{W+Xv2̫RӖZ:}\5UMFDnd#!N?uR4E0 Yd]t +dTJx 3FyV]*k5ρfQXOnSWJeRek#"\)Q-3H e#+~`w{N k%0^/RTuA@Y8Żq2鸑2/^ڮ)Jg/ ,D579Î"I%[!F~j jF.<.חL pDHS8=L @3}ժndZPU6Q*=tE'`4P+@DY|/>ziVu܆b)Nx>9Usg dmgOxʪ%"G5 !ڤAea8+%WҨq}iC*xFҚ>:w 7UQ98'~W(f*7=s00=kJ?!t8MԨS)K;1ZPp%>йr&fhOc/~`< pE'ۋQHC-߈u8! N"5J֢-6&V 5߇6g/0"ULߞy~Ԣ p_ށ7;{ߘ)%*tE>~fW@s (d-y#mD K@#)'?Ĉ(ӓVg'3-c/E/ySvbPFn~A%28TCc$ ~ 1t֝6b>hŁSE/M>_ .[ǤS My_{jnou#/ O1H0'iJ[@:fb-)=(?B[6,*S$dhF{M&ig L֧QMdyB'5P3󻔰2,@d*i)4DS A9!ƹ'.6\,*2wIl8:$ƒ#'&#p37Um%g[b=DuZKC[jj?$$@DCh]-K^M jo!M` p0ÙUF=Si7ЧB"{+U~ߪIGHNT}4B΃ 11zvO(6I:KP)Ϥ*6a,֏0-0`oQ8T4V /;@ ^AScPlZHdքR-D|LFyBMjFNdƤλr-EϘ0P5p7v&#샘N~$ e+lg`2-x.4GoF̲{45`0 ̒% Q  N@LŒ;ln[kTNv)2VW>5%dA3-x'Y*Qs8+ 8\9~g&5<pɦxq‰!qKP3CBt-y ؎jM9 `ll: Vyc47 냡=A-c.AZfv0]ڔ-v3][d#!\`P4 g|ҢVtcpnt&/ 5 {BS1= Z837<(/ ]a]3c{yy8 d9ر$I7!,lRZ?MڝG[|'|Sc^?ET̲0G%8<@7*h`2?4&1!jx cP,i`TpjfРp#86쀌,FOpKFv/"Äe'*iGejdD[G9b[ mۮ$nNؾb$g, -N X.e ^乧̖r7W7s<̛>,_\^!ʵw9>:9F,1@(#Aiܿtn:1i<G&6M$0 .E6qJ5J^zIWJ1Q:, Qmn0*h[eb076j]s$7H9B&YR):PC!ijq=m0A#&@들m0xyWf̛3@ D\24wJc<"m*ީ=zR 3$} 7oTiw&1Zgu\Ys&ay6{2ÂJ%{*%4Uz&A|oG-] Nh4d.ALMˋs曌 X5st1*vi |x՜b{qꝢdR)7x=O maGOQ̿┝cL'VJ0a/ȴyOpce恀Ez,HO  S(§ϿЊlHSB1HAeY'CePXk.J ==q Ħhm4kCm1Ҍ8،rڸ5,N@~y4HEm}IY1 "!xqL!Ez's)kԅ+Y$,rP>0fSd6%Ƥ;d<(}$SE|Ȩ/Ç)}Sl4`xbf_APO H8?ZM @U3Vt.…8t1lYzwø 8nU 6M#;ls$d5P}6a+.򇋞ۄ0Ӂ6vTd"+o3[!dzL$Wfg粼ظgM9Gs,gz@0fH?GVÏ|@k~}P,ϱl˭x3DU1 J܇}Cr5 pbc߾}[v$_Յ-V%qF_]hhVqω3>\zvoc;\yXS {1_bz3lhy-C>LxJ0M#7xx|vslُ?/9 >B:`<^@6K,b.9B*4+"K0Zk#10{/#-Am.~4ī?^>Ul Cp%F\x vsVΛvHSDH~ma[yc6(1$7C&mǑ8-ŝ5[Uz$FMߏT|G[rNKcԑGZ6 ޅwe0W | FָaT ESް'ublӍ1Jl2Rds$cN|h衼<3wB&)+Pܤ´R::#o<3E~1_dB4hDoJ}#L"Vlc)?l{өhHM{uEjZ1#kW^Vse,I@ݓVScKIײąrml+ 5l6:ptRu⢨W.]wEX»/^!;J+{u; L?o*|iOp=hp`\氌7rA^d>źxV]GJW#q{cz)4N V}em;`X+KS{ ]e ̟笀@g/9!4 1jXH߿1aFz* }OE=b_?O0E?~w'3M2$* H{aQ4:=-ځ\xGo(})K³M;zaHY/_}+_n 7݁y\4J^MP! Jy}noc{x7ͻ16E $h/~U%Z[yS^%W p3#<|3ͱ|?K<;9$=iqdv#E+k‰ƚ/{6p>!3rB Ӱړic ak/3Us=G;5,u8:,3ٌQB`V {a&i`H '~ڷ=j=JXW{q]Fvү20;yap$7*Jh`跿.0`m}?:z |Ka\6+LSAc݂"MHs=yXBݍ&EG)Bc[{EoS?) Ox6d NyU)IJ\J%Iz0TTHr⌊'#Ly-$l.t53_xMJAaĀu#2. !I 3gd:n4EHNGȪCFEl[2@nQx d$`F? ]{ƾ;x'IO {uoyc"aVck aQD G >'vУA&plx/b0y#Z 3+;?||sxk4Hp_Hb՚Co'<Te{bzG7nh$CH6F#"n1.twX~`6;vSKً[|]hFIwyA?NJKb95Rj[m1" s ݚhSSBlR+1ރ+ب L]I{zpz{g]uצGhmp]r13J͢s>?EWMGN>"zC{e;gݒU^Kލa*XcSiiZ]A۵Tkָ֘Xy:R=>鼀7DTD.E4QO/Pژs7" fj1"=42\',`%̺(;[9oD2Em,۳H\ qԸ] >'a4WVtYt@錪=b\1*GQ( bcH_:9YG:8 0)%V_l;ox,@ĂjVS؆JHNtZN蝗໸J[IS7V  Lěլ-%9{^DG1Z׫D!|N|kܥ/n; |D NSQ>shՕa?KW@O(}1‡Ž"= *4fj1[b8JLRRYIl:zrŮhvվ yhGVw،=#P>Rp\RsЮ-sC~0i ~p5;ُ.x͕Z`l\D<˥] ( ȇl \WsHGLˀG8| & =_0R5Ii/;3+BJ~&z!3:VU^0% m"~:fSSX"(f3[TȞz'gADM<}2KE <pŋRT ƴ2{sϳ7209Io%aN'dQ#BG=zQ,^87y1֮ػA~SU٠BMމ=kמAt g"mm!DHzRIj1FnA@C9/G:{L,dJzxc`ȳqMRe(Eͼul$8ydMb?HtuadåZjmCB YwC\5/)[{J]ÊxrsK\ͅJȥPDs_̞ Z,kUxuRۮ>ٛW21Or1SMXFq B}Q$#̧iPo4Ә{Ki $>gEޡeAsݺ% tީsnk%6O)0e_Y^3aˎYJs{~I5YTӹD:oT Dz/]Jq C]ʟ;T _T U!jsfp~2 ӏkG &!#uC]_EN9EzpCਗ਼ʂڨ B+? :ր*6V̥cj:qyBp9V7Uzv@w=9߈ v1`|H٦KoD"\!%/DĖŌ/DZm"h[Stn$9yRrҍq'f{)-oӯxٴTx?۬(^}s]ߠ[;Pɵ⮽}~;y-1nKo 5N*YsaqB*6XAʰb ;!.xo1%uW߀"HBk%bxpb* s-E{Tl3BjJV2j +=IVez#T*XbDL_(*kmأ&lz#(B\~[*+lc>\"=`DHv֞>>JV֮Qb@~zIa8Wz"4qs|:Ѩ}rbݜ4}_h]!Z!5N ڒ2 ,\#қZkvDb,jDAq=cR7美~LWDi,O^מ=,KdJE_bͫ"Nmlwdp|Z݅L]=U˅tYhn53/,ɢo?=k>Y$(SNŇכӦ?nex!2Fن1o臛W]Ba$^qE$suaYyFzޟHNuwf2Uˤ- \=oNLwJ|*ץI2"Z&&o!{@ @0r@:>1Bx48Ùٌ 䆋}2U I |WXI~4hP~Pt8"!1Iܑ2P"RIG0*ӡCQ5{j :eBmoo(jk9CbFImo0ȮUr,S?f>@cybF:M;gq VGYɳZʬd0+b1'[Sⴌ½ތ,G4C3/7Ѯ)X9@x0rB$:"@2s‹T_RJNB Q,#bh*v3tyuʚ_2Pi|S'inmmu;TqI$2`Up(kye (KFiK0r&%}ʶ ntf1[I5x4q=c5%Gj並QocX.}e&KYr􁷾 ŎE{!YT$OFu痎E!A U-~dcQ; 0鎱tZ7W[3ۻ_\7S#~Jk" _kT3}2W2Cd~Z5[$HU|?"0c82@"u?$4<@6eN%C%FG=XȔ%^-N9G7CDT2(E WTܺon{Ϟ}t.G׉_-,TopAWyOI%TgX%SY<;~ER"eEH72+ٟsAs|(9 )(j؝MVhA|o+-R8<⾶ʲ6 ߃壘tZz MԔ|YC !oANۧ7U-m T5Fzfd[:<6Puy]%rYPU`'֫ \4 VA>O\H9)j׽'8gu(kC\ 4p JAc46Ec%;ŧfh_oru.۷ohWr]>SxۯQd2 4Vxй@_!޼3*~B+9+V;P wv_ڱMEͥUmkBx{goJ|eJ: IũA>*IH >,xLSadminUIPath returns the normalized admin-dashboard mount path. Default "/_/". // Override with BASE_ADMIN_UI_PATH (e.g. "admin" or "/admin/") — any leading/ // trailing slashes are normalized to a single "/x/" form. The ui-react SPA must // be built with the SAME value as its vite `base` (one knob, set at build+deploy // together — same contract as BASE_API_PREFIX ↔ VITE_API_PREFIX). func adminUIPath() string { p := strings.Trim(os.Getenv("BASE_ADMIN_UI_PATH"), "/") if p == "" { return "/_/" } return "/" + p + "/" }IAdmin UI mount path. Default "/_/". Override with BASE_ADMIN_UI_PATH // (e.g. "/admin/") — the ui-react SPA must be built with the SAME value as // its vite `base`, exactly like BASE_API_PREFIX ↔ VITE_API_PREFIX. One knob, // configured at build+dFeploy together. Normalized to a "/x/" form. adminPath := adminUIPath(]admin b adminPathRtheA adminPath+" settings/auth, g adminPath+" w%s", baseURL, adminUIPath()"J6xWmOHlI\p@iK["Cq& g׷]$4C{yffgg8S`qεi.aSO&S`zcr:8p)r3)Q"Tɧ'٣F7 x A2هW˹L c TXHr*GcH71RZP}/^  J33)ffr@1f F"yyΈk.S)ۡ(E,={2rpXEg9@ &GC+K2*uzߐ~b i ]v \A4_IU*2d^_W5{R`%yB+w^qf3bDshiĸ7I Q"R"HбM@)J%ڥW„*A](Nq&HC&xF6:PQ<,QHȃ 9 fȎx,wyBa)}\e,^;,P#k @*meeMvE.Q>E_gh`bSoy ( |+O>M0(pqDuAd;[=[ wr@F?Hb_Hd=E=Lxp NA [jma̟g/^X -nKv@죁} r{^U ~:Kp;vxG͖eV2nܣ~ \ne#6:#bca%jv` 猪ҝvY5E:#9X| der$2wШ9Q)r{"VQ}* k+|yqfsI'wp ; tذ46,hp9Y`R:.M_vG`'x9mqnyf$:v# )7zbt8B҈rl[2TW\Lj=)S j}:4&HMlrBTP~;翨-kIX+"O#]YrNUd+K&7*޶.U4o=nc1'~y>(t˛ҿiLxTOAN j5( 5nm ĂEBmb Wd-;BɛEFo$&Ly`իl+I8ί͛?o޾0gJm9l\* 0VŤf٠,d+`2ڠ{2E6NlqȒ$ˢGn e:@n>Ƴ:& JB}$888nȢ( k*Zh٪",薉c[,9!ڛ-mfX&(rYQw%YE/@4ɤ3 vҌ/(}xE׃=hqlӱɻ0@˔ 48&9p)%&_k|xX]LDǜ!qdK35:X WN9nw/jPhjF-9JUȍҪmު(Ѫvfn H" ܙ}v_7%+o"c*)[V]gTCd=Y^;eK+FJLuZCP!sbޠ s"ơf!BT>w) K}?7zuvXI G>.?h·}n_tǞ8to?ِe- pYH$`{׶̊w5/+9Ӯ$!%C 8,[E.h7^+?#EE~DWO] y%,%9^,FOeS*z-ɦy^֠rfJF0hfdCłHt(.UN‘Ȋкį9&πo}PB^P'?.?qo)ٹyM"L2ȧpLZf=~9MOygyl,N@ŸP/??ϐۿB+=$&!8<<]~ 87,2Ȼ {e1 "Hpy .-ZVJl=n;")UJvݭ aA: .n,63<[ i폧,PN?/ћS%.>N3]Eΐ=[צ7cWý&74g@SmUļʋω!Up4_7mՑVۈo}'p+̲֎GG4YMzxx 4u0PmIm=i#Ò`i@V)r<̤&br"RNs(G| Ձ {xt,?KRӪ"#rlk2e!$r7r#{'=9yG)VJkÙ#_n 8uз%_-StI]I hǷ>@_tNU 8r"w:г/ߏԴH'W4V(n 9; T (OqkkEȦҫ^cs5*( u$r₁ľ4P`WnBB=P~NжiuT*EVĴThdE WsTʢ$-FPD8>ߦk-y e {~YBdUs%A^ < ,oɼ-ͿNnŐd1޸'?{7{!#vfBɗ<9ӽ{&\;MNT2w7ƾ779B-NoRji:i8mZ`}T^ugpWٷ}ofxhEx?:hO41YVvDCEeK.r`>~Ŏ?;Fh)h8z)q#4-[vFƦ&fO,urth1z"&B\Sܘa?#"a?ᆽ-]~PhBQ:tM 7NFn6T塘<6-498@dt.xW[o6~~NJ9Ci֦Y2pHE9$mI$s] //J0H$nq,Kzi.Ga6*XJs >[gZHw+Njҕt(u=X}- 2w]^ 7VtKmg:+;0u¤I$2Ӫ/D-s1C@ @ \P6TX.Ct$jh-eCƛ!i̬؞п9#x WBOz,طUOAI<҈iZa[w8}9ei n&H vW{(Ya8k(yK񕊕sVs򪺁+})litͬBDeEғK@?s(gkbx\.BQ3d@R|@&iH<䊧zq=Dʜt *ZJck>ED]1l}!+*{pp-;h^Q1EyfŲˌm|w-JW07YHR2Nb҄qw[S _{l?T ϑ4˓ Q1uܵo`*!v7$ vՖ%X̷/"dBZŗ6UQmlm˶ =PMI7郻:Ϥ>e;;υZAchay?!ߋҁ>#E#~nħۄ~ovbZ}p6A0Ӳa|'L/ILre"VF8!lAڇɯ,/i׭.d^ Dz) j7 !,TY<{ K XXL dX 2*!,,v*ʶxg)9ߑކ3VϰSt^u1yIƆAM S 2RYU ¢[ X888֘ft~(MK4h vݐM>I U%?) %zzw hQŤUVRFrׇ6nBn}GYB_ԔqG>2H̜BwƲ:Օ6o_mG˧"U%8Z 8aZX5jsa0$a?׫8v_Rőh~2'p~{Twƞ}/_FumJ۝L]aA#L6L;~r 1*GQ'Vl펅 a#B菺jk@t$q 1u'l?vFad(-ձGk>c_D^|w>)9&Qܿ(B0sorfnxJ(I؏C`׈ }SKQ[? T&{.=zr" 9}xv>(B}4>w$|y^/H{6ϵOx[2GeLļLTT%.N̒$\}_YM7dMxYn9-=t{N0 :'LðnJfbwHe!`bpd*v˒s':LX<Ū`W2;C%dݡWwzT֋ۉ2;|bɣS&+sm+Gҩ; Co\ih`$ʑR(r}5?t, :oQP(ʰ,.z;Z?Rjlc $ʊpʞ=]<$D] )-r,'ɫR;p+1ԧʈ>*tFN$OikKxΕODeSt.ĩ,t.CBZיץ"Q J0Nz75!^<{W)R[?+O'*dъiC"*'ԙ|1>d!hUU8OdrXj4b FdA8ѹORk.QcUTIf|=1~s <4]).M`{':E;[Q:G'a]}'Nшrߠ'D0tG!Snrόqyz+I»Zjڻ䶓dt:HX3YaOWLC)teĤxK8jlO nA&!awƐIPޤRQOD0.(NC+CqOP8 w8iҰj$b, UBם2xvS؞vubPdBY(E"jB#\6` NAH Z% Z Z.:ڂKr Ʌ'ɱB81=A &f{Q(#n YYB G"k'=P':Cw}"7YN|/ Tձ)+]N;qxvRȤ!b }f9nVj <@RBtsBN@YK&M2ӓۊ)> {b}ugX Y",b u;d#=eY2.\%7?K^KI3X%N d{I㽘Si1Ey9& #-}t&}e¤:f[y3em03"Nh1ϔ?.sf`A{_n-]n$CD v՜[e`?F3ji$Mu;(d;Bk'md6QúX,E ә1$C@bE/O.hGx8 E6ļ?c?fIA$%{% ¼x,rC#D ML]eesDU:h00WH?(zaWr8G:ņ31w{ȶ Kqؾ|9XrJ6u>qF_Xɧ5OOSg.Bq|7 ]P ۚwӯQoD% "&i}|:>oS+Hy}uBN\e{Tn{͐ x2hsu6< GFҖh-Er-S<*r0i>4WWU* ՛uos e&ꆩ+6-ߠqOy#'PSj_͈v e kҝŒ(q X@fTH*hR1 rT&2^CB]ni81! ŞP: F j/W3n-L94QQZCQ~ydFNHLIJv}fjB21^5k#9oY4fRdŐ2 y_DPfyT#$/6[*%}IݷWWD\zW9m- zY4qևonA!z)ރ/ R+7*u(>t#NI-D\ַ*/f>L[j(`iGK|Gڅs%ϴ#<Fŏo52 &0}tQ3|yתjQIG/q$3)9g}18jÇO39ѢwBb d1|BZ˙dz^ȭr`Q]x]- I+g]m(ɿލ׾K̝"G%DHL@|x?NHB\6d%x)[e|0'&ܹ̈ln|]6F=60."V'KENf EwlfANJDuD`5arKn2ϋw,8E9C"'Ćs]C5,FIaRÞh'b؟`H,m\Sϴ??ex]s62RNWe|3k9d2X$4\]~"uqg./1b*>gJ}Z^R=k]%,V 3˛tR.s^rxÕNZ$;|9j>],s5˥uٍ,+D<$L*TL#z┉"JYh"rD.f\d v6“ـ5|e] %7𩪲PB`$dIHŊR鲘DxU1NzTUV #\zI}_ջq)>.үWG\/ 짯`"ZJGK=Ai{8r/ߞJj D;U/IF+g8ǵhjXߵ㢞>vsm(psGHU{&E\TS.sE၎،rK9+8.`zZWkg;kYm[7 (^wE;AmLɹ#gm|̺![!s<5>{A( aB),q"y\hk;Yr"MC ,RE+0 ~ ^({^{/YBDMF, C FuTjrP;rƄцBxy20QH b-g7p>=O\NGx:N /qL }&VN6<> z}Sⵥߣҳr6ꡟ뢗O#/2MI6 RSSʕlUqJlFs.^qҭך"ΦGH(W:^p=KK@V*1hLDL JvIv2oJKiǰ=ʗ͙#תbV&ѕ-^5gf8g񃡐:-~+a2VH9;|X.af$BAFO6N :h%vӑ{'t4 ggxH[lRcit6chsݯNnmŊh=&o$dvqv_'^-B̴u % \y8"-@2"lSʓwMOkq6CM?؂y<C-NB+$#IL+2ghMltȮn7(=~{y6iXw%&Ȳ]09^POWcl=b5c]xg]|v܌1,ԬEDplߴB:o"]$Mpxu,5x=ع6;kYҖ#ȞMyH7+N2KB~u`[>odl"DĴ5/CN>*`/eɒxAcl~z7i lcmuSwُ‹ׁm5FTQBGW%=- @PFy@۶k]"q=H;*lUnjT3=ҥUTb1|BI_9;ŕnS_T(PS"[6 s1;IwH3Mϐ, ,UD\2e2D%\;I2'fE]a !k•=@;:=I$1W15{q9hrٚDV+ݗpݾ 6] /eCD#12u:s89`xVo6~ BO[:졀d lMZCQشtHFiDy!qAnAF$RڇGg eہ mb)fH9xggN|K&FfVZs{jtLʕ0 G(UQ:Xb޲TdaMhс͐[28k1jޣ({QcVc,`èt}t.0yNyM%˩iSTc>P tq77F8.DBHN~-a难EC_<aDF!nx .5p5V Y͗HONeoQoػATG-l "t0q18 xImpackage apis import ( "bufio" "context" "crypto/sha1" "encoding/base64" "encoding/binary" "encoding/json" "errors" "fmt" "io" "log/slog" "net" "net/http" "strings" "sync" "time" "unicode/utf8" "github.com/hanzoai/base/core" "github.com/hanzoai/base/crdt" "github.com/hanzoai/base/tools/router" "github.com/hanzoai/base/tools/security" ) // WebSocket opcodes per RFC 6455. const ( wsOpText = 1 wsOpBinary = 2 wsOpClose = 8 wsOpPing = 9 wsOpPong = 10 ) // WebSocket close codes. const ( wsCloseNormal = 1000 wsCloseGoingAway = 1001 wsCloseProtocolErr = 1002 wsCloseUnsupported = 1003 wsCloseAbnormal = 1006 wsCloseInvalidData = 1007 wsClosePolicyViolation = 1008 wsCloseTooLarge = 1009 ) // wsGUID is the magic GUID from RFC 6455 section 4.2.2. const wsGUID = "258EAFA5-E914-47DA-95CA-5AB0A4A2E698" // WebSocket message types for the realtime protocol. const ( WSMsgAuthenticate = "authenticate" WSMsgSubscribe = "subscribe" WSMsgUnsubscribe = "unsubscribe" WSMsgMutation = "mutation" WSMsgPresence = "presence" WSMsgCRDTSync = "crdt_sync" WSMsgPing = "ping" WSMsgTransition = "transition" WSMsgMutationResp = "mutation_response" WSMsgAuthResult = "auth_result" WSMsgPresenceUpdate = "presence_update" WSMsgCRDTUpdate = "crdt_update" WSMsgError = "error" WSMsgPong = "pong" WSMsgConnected = "connected" ) // WSMessage is the envelope for all WebSocket protocol messages. type WSMessage struct { Type string `json:"type"` ID string `json:"id,omitempty"` Payload json.RawMessage `json:"payload,omitempty"` } // WSAuthPayload is sent by the client to authenticate. type WSAuthPayload struct { Token string `json:"token"` } // WSSubscribePayload is sent by the client to subscribe to a query. type WSSubscribePayload struct { Queries []string `json:"queries"` } // WSPresencePayload is sent by the client for presence updates. type WSPresencePayload struct { Action string `json:"action"` // "join", "leave", "update" Channel string `json:"channel"` State map[string]any `json:"state,omitempty"` } // WSCRDTSyncPayload wraps a CRDT sync message. type WSCRDTSyncPayload struct { DocID string `json:"docId"` Type string `json:"type"` // sync_step1, sync_step2, sync_update StateVector crdt.StateVersion `json:"stateVector,omitempty"` Ops []crdt.Operation `json:"ops,omitempty"` } // wsConn wraps a hijacked net.Conn for WebSocket framing. type wsConn struct { conn net.Conn br *bufio.Reader bw *bufio.Writer mu sync.Mutex // protects writes closed bool } // wsClient tracks state for a single WebSocket connection. type wsClient struct { id string conn *wsConn auth *core.Record subscriptions map[string]bool mu sync.RWMutex cancelCtx context.CancelFunc } // WSHub manages all WebSocket clients and routes messages. type WSHub struct { mu sync.RWMutex clients map[string]*wsClient presence *PresenceManager sync *crdt.SyncManager app core.App } // NewWSHub creates a new WebSocket hub. func NewWSHub(app core.App) *WSHub { hub := &WSHub{ clients: make(map[string]*wsClient), presence: NewPresenceManager(), app: app, } hub.sync = crdt.NewSyncManager(hub.broadcastCRDT) return hub } // broadcastCRDT is the callback for SyncManager to broadcast CRDT ops. func (h *WSHub) broadcastCRDT(docID string, excludeClient string, msg []byte) { payload := json.RawMessage(msg) envelope := WSMessage{ Type: WSMsgCRDTUpdate, Payload: payload, } data, err := json.Marshal(envelope) if err != nil { return } h.mu.RLock() defer h.mu.RUnlock() for id, client := range h.clients { if id == excludeClient { continue } // broadcast to clients subscribed to "crdt:" client.mu.RLock() subscribed := client.subscriptions["crdt:"+docID] client.mu.RUnlock() if subscribed { go client.conn.writeText(data) } } } // Presence returns the hub's PresenceManager. func (h *WSHub) Presence() *PresenceManager { return h.presence } // SyncManager returns the hub's CRDT SyncManager. func (h *WSHub) SyncManager() *crdt.SyncManager { return h.sync } // register adds a client to the hub. func (h *WSHub) register(client *wsClient) { h.mu.Lock() defer h.mu.Unlock() h.clients[client.id] = client } // unregister removes a client and cleans up presence. func (h *WSHub) unregister(clientID string) { h.mu.Lock() client, ok := h.clients[clientID] delete(h.clients, clientID) h.mu.Unlock() if ok { h.presence.LeaveAll(clientID) client.conn.close(wsCloseGoingAway, "") } } // bindWSApi registers the WebSocket endpoint. func bindWSApi(app core.App, rg *router.RouterGroup[*core.RequestEvent], hub *WSHub) { sub := rg.Group("/realtime") sub.GET("/ws", wsUpgradeHandler(app, hub)).Bind(SkipSuccessActivityLog()) } // wsUpgradeHandler returns the handler that upgrades HTTP to WebSocket. func wsUpgradeHandler(app core.App, hub *WSHub) func(*core.RequestEvent) error { return func(e *core.RequestEvent) error { // validate WebSocket upgrade headers if !strings.EqualFold(e.Request.Header.Get("Upgrade"), "websocket") { return e.BadRequestError("Expected WebSocket upgrade", nil) } if !headerContains(e.Request.Header, "Connection", "upgrade") { return e.BadRequestError("Expected Connection: upgrade", nil) } wsKey := e.Request.Header.Get("Sec-WebSocket-Key") if wsKey == "" { return e.BadRequestError("Missing Sec-WebSocket-Key", nil) } if e.Request.Header.Get("Sec-WebSocket-Version") != "13" { return e.BadRequestError("Unsupported WebSocket version", nil) } // compute accept key acceptKey := computeAcceptKey(wsKey) // hijack the connection hj, ok := e.Response.(http.Hijacker) if !ok { return e.InternalServerError("Server does not support WebSocket hijack", nil) } conn, brw, err := hj.Hijack() if err != nil { return e.InternalServerError("WebSocket hijack failed", err) } // send upgrade response resp := "HTTP/1.1 101 Switching Protocols\r\n" + "Upgrade: websocket\r\n" + "Connection: Upgrade\r\n" + "Sec-WebSocket-Accept: " + acceptKey + "\r\n\r\n" if _, err := brw.WriteString(resp); err != nil { conn.Close() return nil } if err := brw.Flush(); err != nil { conn.Close() return nil } ws := &wsConn{ conn: conn, br: brw.Reader, bw: brw.Writer, } clientID := security.RandomString(40) ctx, cancel := context.WithCancel(context.Background()) client := &wsClient{ id: clientID, conn: ws, auth: e.Auth, // may be nil (authenticate later) subscriptions: make(map[string]bool), cancelCtx: cancel, } // check for token in query param if token := e.Request.URL.Query().Get("token"); token != "" && client.auth == nil { record, authErr := app.FindAuthRecordByToken(token, core.TokenTypeAuth) if authErr == nil && record != nil { client.auth = record } } hub.register(client) app.Logger().Debug("WebSocket connection established", slog.String("clientId", clientID)) // send connected message connMsg := WSMessage{ Type: WSMsgConnected, Payload: json.RawMessage(`{"clientId":"` + clientID + `"}`), } if data, err := json.Marshal(connMsg); err == nil { ws.writeText(data) } // handle messages in a goroutine (we already hijacked) go func() { defer hub.unregister(clientID) handleWSMessages(ctx, app, hub, client) }() // block until context is cancelled (connection closed) <-ctx.Done() return nil } } // handleWSMessages reads and processes WebSocket messages. func handleWSMessages(ctx context.Context, app core.App, hub *WSHub, client *wsClient) { defer client.cancelCtx() for { select { case <-ctx.Done(): return default: } // set read deadline for idle timeout client.conn.conn.SetReadDeadline(time.Now().Add(5 * time.Minute)) opcode, payload, err := client.conn.readMessage() if err != nil { if !errors.Is(err, io.EOF) && !errors.Is(err, net.ErrClosed) { app.Logger().Debug("WebSocket read error", slog.String("clientId", client.id), slog.String("error", err.Error())) } return } switch opcode { case wsOpText: processWSMessage(app, hub, client, payload) case wsOpBinary: processWSMessage(app, hub, client, payload) case wsOpPing: client.conn.writePong(payload) case wsOpClose: return } } } // processWSMessage dispatches a single parsed WebSocket message. func processWSMessage(app core.App, hub *WSHub, client *wsClient, raw []byte) { var msg WSMessage if err := json.Unmarshal(raw, &msg); err != nil { sendWSError(client, "", "invalid message format") return } switch msg.Type { case WSMsgAuthenticate: handleWSAuth(app, client, msg) case WSMsgSubscribe: handleWSSubscribe(client, msg) case WSMsgUnsubscribe: handleWSUnsubscribe(client, msg) case WSMsgPresence: handleWSPresence(hub, client, msg) case WSMsgCRDTSync: handleWSCRDTSync(hub, client, msg) case WSMsgPing: resp := WSMessage{Type: WSMsgPong, ID: msg.ID} if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } default: sendWSError(client, msg.ID, "unknown message type: "+msg.Type) } } // handleWSAuth authenticates the client via JWT token. func handleWSAuth(app core.App, client *wsClient, msg WSMessage) { var payload WSAuthPayload if err := json.Unmarshal(msg.Payload, &payload); err != nil { sendWSError(client, msg.ID, "invalid auth payload") return } record, err := app.FindAuthRecordByToken(payload.Token, core.TokenTypeAuth) if err != nil || record == nil { resp := WSMessage{ Type: WSMsgAuthResult, ID: msg.ID, Payload: json.RawMessage(`{"success":false,"error":"invalid token"}`), } if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } return } client.mu.Lock() client.auth = record client.mu.Unlock() resp := WSMessage{ Type: WSMsgAuthResult, ID: msg.ID, Payload: json.RawMessage(`{"success":true}`), } if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } } // handleWSSubscribe adds subscriptions. func handleWSSubscribe(client *wsClient, msg WSMessage) { var payload WSSubscribePayload if err := json.Unmarshal(msg.Payload, &payload); err != nil { sendWSError(client, msg.ID, "invalid subscribe payload") return } client.mu.Lock() for _, q := range payload.Queries { client.subscriptions[q] = true } client.mu.Unlock() resp := WSMessage{ Type: WSMsgTransition, ID: msg.ID, Payload: json.RawMessage(`{"status":"subscribed"}`), } if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } } // handleWSUnsubscribe removes subscriptions. func handleWSUnsubscribe(client *wsClient, msg WSMessage) { var payload WSSubscribePayload if err := json.Unmarshal(msg.Payload, &payload); err != nil { sendWSError(client, msg.ID, "invalid unsubscribe payload") return } client.mu.Lock() for _, q := range payload.Queries { delete(client.subscriptions, q) } client.mu.Unlock() resp := WSMessage{ Type: WSMsgTransition, ID: msg.ID, Payload: json.RawMessage(`{"status":"unsubscribed"}`), } if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } } // handleWSPresence processes presence messages. func handleWSPresence(hub *WSHub, client *wsClient, msg WSMessage) { var payload WSPresencePayload if err := json.Unmarshal(msg.Payload, &payload); err != nil { sendWSError(client, msg.ID, "invalid presence payload") return } switch payload.Action { case "join": hub.presence.Join(payload.Channel, client.id, payload.State) case "leave": hub.presence.Leave(payload.Channel, client.id) case "update": hub.presence.Update(payload.Channel, client.id, payload.State) default: sendWSError(client, msg.ID, "unknown presence action: "+payload.Action) return } // broadcast presence to channel subscribers entries := hub.presence.GetPresence(payload.Channel) presenceData, _ := json.Marshal(map[string]any{ "channel": payload.Channel, "presence": entries, }) broadcastMsg := WSMessage{ Type: WSMsgPresenceUpdate, Payload: json.RawMessage(presenceData), } broadcastData, _ := json.Marshal(broadcastMsg) hub.mu.RLock() for _, c := range hub.clients { c.mu.RLock() subscribed := c.subscriptions["presence:"+payload.Channel] c.mu.RUnlock() if subscribed { go c.conn.writeText(broadcastData) } } hub.mu.RUnlock() } // handleWSCRDTSync processes CRDT synchronization messages. func handleWSCRDTSync(hub *WSHub, client *wsClient, msg WSMessage) { var payload WSCRDTSyncPayload if err := json.Unmarshal(msg.Payload, &payload); err != nil { sendWSError(client, msg.ID, "invalid crdt_sync payload") return } // auto-subscribe client to CRDT doc updates client.mu.Lock() client.subscriptions["crdt:"+payload.DocID] = true client.mu.Unlock() // ensure document exists hub.sync.GetOrCreateDocument(payload.DocID, "server") // build the sync message for the SyncManager syncMsg := crdt.SyncMessage{ Type: payload.Type, DocID: payload.DocID, ClientID: client.id, StateVector: payload.StateVector, Ops: payload.Ops, } syncData, err := json.Marshal(syncMsg) if err != nil { sendWSError(client, msg.ID, "marshal sync message failed") return } resp, err := hub.sync.HandleSync(client.id, syncData) if err != nil { sendWSError(client, msg.ID, "sync error: "+err.Error()) return } if resp != nil { envelope := WSMessage{ Type: WSMsgCRDTUpdate, ID: msg.ID, Payload: json.RawMessage(resp), } if data, err := json.Marshal(envelope); err == nil { client.conn.writeText(data) } } } // sendWSError sends an error message back to the client. func sendWSError(client *wsClient, msgID string, errMsg string) { payload, _ := json.Marshal(map[string]string{"error": errMsg}) resp := WSMessage{ Type: WSMsgError, ID: msgID, Payload: json.RawMessage(payload), } if data, err := json.Marshal(resp); err == nil { client.conn.writeText(data) } } // ------------------------------------------------------------------- // Pure WebSocket framing (RFC 6455) - no external dependencies // ------------------------------------------------------------------- // computeAcceptKey implements the Sec-WebSocket-Accept key derivation. func computeAcceptKey(key string) string { h := sha1.New() h.Write([]byte(key)) h.Write([]byte(wsGUID)) return base64.StdEncoding.EncodeToString(h.Sum(nil)) } // headerContains checks if a comma-separated header contains a value (case-insensitive). func headerContains(h http.Header, key, value string) bool { for _, v := range h[http.CanonicalHeaderKey(key)] { for _, s := range strings.Split(v, ",") { if strings.EqualFold(strings.TrimSpace(s), value) { return true } } } return false } // readMessage reads a single WebSocket frame (handles fragmentation for text/binary). func (ws *wsConn) readMessage() (opcode byte, payload []byte, err error) { for { var fin bool var op byte var data []byte fin, op, data, err = ws.readFrame() if err != nil { return 0, nil, err } // handle control frames inline if op >= 0x8 { return op, data, nil } if opcode == 0 { opcode = op } payload = append(payload, data...) if fin { return opcode, payload, nil } } } // readFrame reads a single WebSocket frame. func (ws *wsConn) readFrame() (fin bool, opcode byte, payload []byte, err error) { // read first 2 bytes header := make([]byte, 2) if _, err = io.ReadFull(ws.br, header); err != nil { return false, 0, nil, err } fin = (header[0] & 0x80) != 0 opcode = header[0] & 0x0F masked := (header[1] & 0x80) != 0 length := uint64(header[1] & 0x7F) // extended payload length switch length { case 126: ext := make([]byte, 2) if _, err = io.ReadFull(ws.br, ext); err != nil { return false, 0, nil, err } length = uint64(binary.BigEndian.Uint16(ext)) case 127: ext := make([]byte, 8) if _, err = io.ReadFull(ws.br, ext); err != nil { return false, 0, nil, err } length = binary.BigEndian.Uint64(ext) } // sanity limit: 16MB if length > 16*1024*1024 { return false, 0, nil, fmt.Errorf("frame too large: %d bytes", length) } // read masking key var maskKey [4]byte if masked { if _, err = io.ReadFull(ws.br, maskKey[:]); err != nil { return false, 0, nil, err } } // read payload payload = make([]byte, length) if length > 0 { if _, err = io.ReadFull(ws.br, payload); err != nil { return false, 0, nil, err } } // unmask if masked { for i := range payload { payload[i] ^= maskKey[i%4] } } // validate UTF-8 for text frames if opcode == wsOpText && fin && !utf8.Valid(payload) { return false, 0, nil, fmt.Errorf("invalid UTF-8 in text frame") } return fin, opcode, payload, nil } // writeText writes a text message frame. func (ws *wsConn) writeText(data []byte) error { return ws.writeFrame(wsOpText, data) } // writePong writes a pong control frame. func (ws *wsConn) writePong(data []byte) error { return ws.writeFrame(wsOpPong, data) } // close sends a close frame and closes the connection. func (ws *wsConn) close(code uint16, reason string) error { ws.mu.Lock() defer ws.mu.Unlock() if ws.closed { return nil } ws.closed = true // build close payload payload := make([]byte, 2+len(reason)) binary.BigEndian.PutUint16(payload, code) copy(payload[2:], reason) // write close frame (best effort) ws.writeFrameLocked(wsOpClose, payload) return ws.conn.Close() } // writeFrame writes a single WebSocket frame (server->client, unmasked). func (ws *wsConn) writeFrame(opcode byte, data []byte) error { ws.mu.Lock() defer ws.mu.Unlock() if ws.closed { return fmt.Errorf("connection closed") } return ws.writeFrameLocked(opcode, data) } // writeFrameLocked writes a frame assuming the mutex is held. func (ws *wsConn) writeFrameLocked(opcode byte, data []byte) error { // FIN + opcode ws.bw.WriteByte(0x80 | opcode) // payload length (server frames are unmasked) length := len(data) switch { case length <= 125: ws.bw.WriteByte(byte(length)) case length <= 65535: ws.bw.WriteByte(126) lenBytes := make([]byte, 2) binary.BigEndian.PutUint16(lenBytes, uint16(length)) ws.bw.Write(lenBytes) default: ws.bw.WriteByte(127) lenBytes := make([]byte, 8) binary.BigEndian.PutUint64(lenBytes, uint64(length)) ws.bw.Write(lenBytes) } // payload if length > 0 { ws.bw.Write(data) } return ws.bw.Flush() } $و x4$ Ly剕 _3]cSpL+)V(NKQ((J-NMIMW/p+K/H-V((O)MNMQHTpO. /(ִV(HQTZ "SSA$f敤V(O>aBtlrQJ&BBVq~R*Th5]Zp]V@9)z0M^UUOx;?FfJ8MTJ&IuPg_BYIţ\ɲUa q/<"da%)c,4ȅZ~X 23,'pD$bH2EdF`Fe6_b"26NZfF^;I"!3ǰXYYNIfdRYX*X@1Ke,⤐sPra eX刅G&:O G}˥T΍A\Rf0 -Ɯ~Ofb/2\bw Tkp~orjœFY& E3(eֱH4e%ΝiJ^CW'at?qTH4Di򞽂=SYsTN$'325 Zȝd % bEin%h s_@;Trg ?eM2FBd@J3(1=M+3:/--}Ъu3cILJl/wr6&o]]SU]KƯڳ=ҝRKĩC#pw܊y!#q.7w\"woHmE ߂Ϗ tJ2:/ԆZ$6jυeQncd|L?vpYxb E6!9 E16Kc(4Qk{Y*x;Tmv%3c0;K򝜗Fભz1ga7kr >h#b rKNZF9"E{D FcM1e|Z^ŏH*&?bdf_Z>_ZӍ,ކ`NEzg+˲7aE9O4YזeҀM˙a:K@{ΤCBδSLj`h= ,$_?Hg(ۡXmbYb[,usTX,@$1*<.'{r`RR,REh!eXڢBy9E%HQvbHт#xj"R$aOSH YEM=es*ȹri([+r>=^ܟ^]gЛxX}ͧoq jI#L" :|HڅҚ#q%HU#/DɃA] @:y!PB`|ADȨB/,§SZvO_`Q)^p ( 7)6!Ks$©*8f @|W.ؚ*NĆ_%"ٔqn6.x h$S6+O߇1ŝg6 A#w_jyc6kdb]Fw']:UO*OT`ٶ bNfPɒLR5K:t&U%&S[Nәi|۴-UXi '*mO_6nמUJ"S[Lܨ9d9&]N :)Q&\"v ug2Fs4K y{Yw*F! (sX.ߍS0/o`x) š^_lWCMUO~usK R |ճ?`N㎳-8؆C[nYbۉd=jp+l(i2t-k2mZ"X",HWQiT!J[UĦ4uE V'=.[}XHy:NtށX41'î?~$jTZg2:,'R*dvmseȼsG-M 't[F] Jc XjmyyvWtuOGO:vm,*AUW$9k(ՋDu 9k3n-72-::ĢJy{K%Nb,[Rne/2b!]y =W^ܼU1e-#n8g\%,EdToS9nѺz_y573}?2]@9 [ol}Javpbb}1w)iC.q:3nDŽCf.Cq?la `ʕk0V7t!j*[L<}*G;C$Ϣ ~{ AqM?W}Untܠ6^ՃEi+]Wwy!r ]T|᩶ݗk3>`s4g.nINǀ%a"6J%8l9M־-{g!;}` :~p;iɥ]H+9{4c6fT?JͲ Zن"ꅹ;eI&GI[r:h[YeH^IP3?E96H-1^^)`6!ٰ]&c> 2NfY)sQ$m7BF) _4r:۾BCߍ ]#mO3{l8i)&Emʢ"pt=.nڴEͿv쒆)*Hi'OM<w֝f˛9PEũ9iPUe<luɱ:ߵuY`JKJf[%µQ]Vlg= Z1S x!?ӥVe@XRe^x ~package cli import ( "bytes" "encoding/json" "fmt" "io" "net/http" "net/url" "strings" "time" ) // Client is a thin HTTP client for the Base API. type Client struct { BaseURL string Token string Tenant string APIPrefix string HTTP *http.Client } // NewClient returns a Client with sensible defaults. func NewClient(baseURL, token, tenant string) *Client { return &Client{ BaseURL: strings.TrimRight(baseURL, "/"), Token: token, Tenant: tenant, APIPrefix: "/api", HTTP: &http.Client{Timeout: 30 * time.Second}, } } // Do executes a raw HTTP request against the Base API and returns // the decoded JSON body. Non-2xx responses are returned as an error. func (c *Client) Do(method, path string, body any) (json.RawMessage, int, error) { var reqBody io.Reader if body != nil { b, err := json.Marshal(body) if err != nil { return nil, 0, fmt.Errorf("marshal request body: %w", err) } reqBody = bytes.NewReader(b) } fullURL := c.BaseURL + c.APIPrefix + path req, err := http.NewRequest(method, fullURL, reqBody) if err != nil { return nil, 0, fmt.Errorf("build request: %w", err) } if body != nil { req.Header.Set("Content-Type", "application/json") } if c.Token != "" { req.Header.Set("Authorization", c.Token) } if c.Tenant != "" { req.Header.Set("X-Org-Id", c.Tenant) } resp, err := c.HTTP.Do(req) if err != nil { return nil, 0, fmt.Errorf("http request: %w", err) } defer resp.Body.Close() raw, err := io.ReadAll(resp.Body) if err != nil { return nil, resp.StatusCode, fmt.Errorf("read response: %w", err) } if resp.StatusCode >= 400 { return nil, resp.StatusCode, fmt.Errorf("HTTP %d: %s", resp.StatusCode, string(raw)) } if len(raw) == 0 { return nil, resp.StatusCode, nil } return json.RawMessage(raw), resp.StatusCode, nil } // Get performs a GET request. func (c *Client) Get(path string) (json.RawMessage, int, error) { return c.Do(http.MethodGet, path, nil) } // Post performs a POST request with a JSON body. func (c *Client) Post(path string, body any) (json.RawMessage, int, error) { return c.Do(http.MethodPost, path, body) } // Patch performs a PATCH request with a JSON body. func (c *Client) Patch(path string, body any) (json.RawMessage, int, error) { return c.Do(http.MethodPatch, path, body) } // Delete performs a DELETE request. func (c *Client) Delete(path string) (json.RawMessage, int, error) { return c.Do(http.MethodDelete, path, nil) } // BuildQuery encodes query parameters for list endpoints. func BuildQuery(filter string, limit int, sort string, extra map[string]string) string { params := url.Values{} if filter != "" { params.Set("filter", filter) } if limit > 0 { params.Set("perPage", fmt.Sprintf("%d", limit)) } if sort != "" { params.Set("sort", sort) } for k, v := range extra { params.Set(k, v) } if len(params) == 0 { return "" } return "?" + params.Encode() } )Boxko𓑩pVN.xOpackage cli import ( "encoding/json" "io" "net/http" "net/http/httptest" "testing" ) func TestClientGet(t *testing.T) { t.Parallel() var gotMethod, gotPath, gotAuth, gotOrgID string ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { gotMethod = r.Method gotPath = r.URL.Path gotAuth = r.Header.Get("Authorization") gotOrgID = r.Header.Get("X-Org-Id") w.WriteHeader(200) w.Write([]byte(`{"items":[]}`)) })) defer ts.Close() c := NewClient(ts.URL, "test-token-123", "org-abc") data, status, err := c.Get("/collections") if err != nil { t.Fatal(err) } if status != 200 { t.Fatalf("expected 200, got %d", status) } if gotMethod != "GET" { t.Fatalf("expected GET, got %s", gotMethod) } if gotPath != "/api/collections" { t.Fatalf("expected /api/collections, got %s", gotPath) } if gotAuth != "test-token-123" { t.Fatalf("expected test-token-123, got %s", gotAuth) } if gotOrgID != "org-abc" { t.Fatalf("expected org-abc, got %s", gotOrgID) } if data == nil { t.Fatal("expected non-nil response data") } } func TestClientPost(t *testing.T) { t.Parallel() var gotMethod, gotPath, gotContentType string var gotBody []byte ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { gotMethod = r.Method gotPath = r.URL.Path gotContentType = r.Header.Get("Content-Type") gotBody, _ = io.ReadAll(r.Body) w.WriteHeader(200) w.Write([]byte(`{"id":"abc123"}`)) })) defer ts.Close() c := NewClient(ts.URL, "tok", "") body := map[string]string{"title": "hello"} data, status, err := c.Post("/collections/posts/records", body) if err != nil { t.Fatal(err) } if status != 200 { t.Fatalf("expected 200, got %d", status) } if gotMethod != "POST" { t.Fatalf("expected POST, got %s", gotMethod) } if gotPath != "/api/collections/posts/records" { t.Fatalf("expected /api/collections/posts/records, got %s", gotPath) } if gotContentType != "application/json" { t.Fatalf("expected application/json, got %s", gotContentType) } var parsed map[string]string if err := json.Unmarshal(gotBody, &parsed); err != nil { t.Fatal(err) } if parsed["title"] != "hello" { t.Fatalf("expected body title=hello, got %s", parsed["title"]) } if data == nil { t.Fatal("expected non-nil response data") } } func TestClientPatch(t *testing.T) { t.Parallel() var gotMethod, gotPath string ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { gotMethod = r.Method gotPath = r.URL.Path w.WriteHeader(200) w.Write([]byte(`{"id":"abc123","title":"updated"}`)) })) defer ts.Close() c := NewClient(ts.URL, "tok", "") _, _, err := c.Patch("/collections/posts/records/abc123", map[string]string{"title": "updated"}) if err != nil { t.Fatal(err) } if gotMethod != "PATCH" { t.Fatalf("expected PATCH, got %s", gotMethod) } if gotPath != "/api/collections/posts/records/abc123" { t.Fatalf("expected /api/collections/posts/records/abc123, got %s", gotPath) } } func TestClientDelete(t *testing.T) { t.Parallel() var gotMethod, gotPath string ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { gotMethod = r.Method gotPath = r.URL.Path w.WriteHeader(204) })) defer ts.Close() c := NewClient(ts.URL, "tok", "") _, status, err := c.Delete("/collections/posts/records/abc123") if err != nil { t.Fatal(err) } if gotMethod != "DELETE" { t.Fatalf("expected DELETE, got %s", gotMethod) } if gotPath != "/api/collections/posts/records/abc123" { t.Fatalf("expected /api/collections/posts/records/abc123, got %s", gotPath) } if status != 204 { t.Fatalf("expected 204, got %d", status) } } func TestClientErrorResponse(t *testing.T) { t.Parallel() ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { w.WriteHeader(403) w.Write([]byte(`{"message":"forbidden"}`)) })) defer ts.Close() c := NewClient(ts.URL, "", "") _, _, err := c.Get("/collections") if err == nil { t.Fatal("expected error for 403 response") } } func TestBuildQuery(t *testing.T) { t.Parallel() // empty q := BuildQuery("", 0, "", nil) if q != "" { t.Fatalf("expected empty query, got %s", q) } // with params q = BuildQuery("name='test'", 10, "-created", nil) if q == "" { t.Fatal("expected non-empty query") } // check it contains expected parts for _, part := range []string{"filter=", "perPage=10", "sort="} { found := false for _, seg := range []string{q} { if len(seg) > 0 { found = true } } if !found { t.Fatalf("expected query to contain %s, got %s", part, q) } } } mL]x;r\e'3Sdf52C73:@(͓'O㖂0-6ʈ*YOxm)package cli import ( "fmt" "os" "os/exec" "path/filepath" "strings" "github.com/spf13/cobra" ) // NewClusterCommand returns the `cluster` subcommand tree for managing // Base HA groups. Uses the BASE_* env namespace per base-ha conventions. func NewClusterCommand(nf *NetworkFlags) *cobra.Command { var consensus string var replicas int cmd := &cobra.Command{ Use: "cluster", Short: "Manage Base HA cluster", Long: `Manage Hanzo Base high-availability cluster. Local mode (--dev): spawns multiple base-ha processes on localhost. K8s mode (--mainnet/--testnet/--devnet): scales deployment via kubectl. Uses the BASE_* env namespace (BASE_NODE_ID, BASE_PEERS, BASE_CONSENSUS).`, } cmd.PersistentFlags().StringVar(&consensus, "consensus", "lux", "consensus mode: lux (default) or pubsub") cmd.PersistentFlags().IntVar(&replicas, "replicas", 3, "number of replicas") daemonName := filepath.Base(os.Args[0]) cmd.AddCommand(clusterInitCmd(nf, daemonName, &consensus, &replicas)) cmd.AddCommand(clusterStartCmd(nf, daemonName, &consensus, &replicas)) cmd.AddCommand(clusterStopCmd(nf, daemonName)) cmd.AddCommand(clusterStatusCmd(nf, daemonName)) cmd.AddCommand(clusterLeaderCmd(nf, daemonName)) cmd.AddCommand(clusterReplicateCmd(nf, daemonName)) cmd.AddCommand(clusterFailoverCmd(nf, daemonName)) return cmd } func clusterInitCmd(nf *NetworkFlags, daemonName string, consensus *string, replicas *int) *cobra.Command { return &cobra.Command{ Use: "init", Short: "Initialize HA cluster config", Example: daemonName + " cluster init --dev --replicas 3 --consensus lux", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } cfg := haConfigPath(daemonName, env) dir := filepath.Dir(cfg) if err := os.MkdirAll(dir, 0700); err != nil { return fmt.Errorf("create config dir: %w", err) } content := haConfigContent(daemonName, env, *consensus, *replicas) if err := os.WriteFile(cfg, []byte(content), 0600); err != nil { return fmt.Errorf("write config: %w", err) } fmt.Fprintf(os.Stdout, "Wrote HA config: %s\n", cfg) return nil }, } } func clusterStartCmd(nf *NetworkFlags, daemonName string, consensus *string, replicas *int) *cobra.Command { var yes bool cmd := &cobra.Command{ Use: "start", Short: "Start HA cluster (local: spawn N processes, K8s: scale deployment)", Example: daemonName + " cluster start --dev --replicas 3", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { return k8sClusterScale(daemonName, env, *replicas, yes) } return localClusterStart(daemonName, *consensus, *replicas, yes) }, } cmd.Flags().BoolVar(&yes, "yes", false, "execute (default: dry-run)") return cmd } func clusterStopCmd(nf *NetworkFlags, daemonName string) *cobra.Command { var yes bool cmd := &cobra.Command{ Use: "stop", Short: "Stop HA cluster", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { return k8sClusterScale(daemonName, env, 0, yes) } return localClusterStop(daemonName, yes) }, } cmd.Flags().BoolVar(&yes, "yes", false, "execute (default: dry-run)") return cmd } func clusterStatusCmd(nf *NetworkFlags, daemonName string) *cobra.Command { return &cobra.Command{ Use: "status", Short: "Show cluster leader, followers, and txseq lag", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { return k8sClusterStatus(daemonName, env) } return localClusterStatus(daemonName) }, } } func clusterLeaderCmd(nf *NetworkFlags, daemonName string) *cobra.Command { return &cobra.Command{ Use: "leader", Short: "Print the current leader URL", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { ctx := env.K8sContext() ns := env.K8sNamespace() fmt.Fprintf(os.Stdout, "[dry-run] kubectl --context %s -n %s exec deployment/%s -- wget -qO- http://localhost:8090/api/health\n", ctx, ns, daemonName) return nil } fmt.Fprintf(os.Stdout, "[local] curl http://localhost:8090/api/health\n") return nil }, } } func clusterReplicateCmd(nf *NetworkFlags, daemonName string) *cobra.Command { var yes bool cmd := &cobra.Command{ Use: "replicate", Short: "Force resync on followers", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { ctx := env.K8sContext() ns := env.K8sNamespace() cmdStr := fmt.Sprintf("kubectl --context %s -n %s rollout restart statefulset/%s", ctx, ns, daemonName) if !yes { fmt.Fprintf(os.Stdout, "[dry-run] %s\n", cmdStr) return nil } c := exec.Command("kubectl", "--context", ctx, "-n", ns, "rollout", "restart", "statefulset/"+daemonName) c.Stdout = os.Stdout c.Stderr = os.Stderr return c.Run() } fmt.Fprintln(os.Stdout, "[local] Replication is automatic via BASE_PEERS. Restart followers to force resync.") return nil }, } cmd.Flags().BoolVar(&yes, "yes", false, "execute (default: dry-run)") return cmd } func clusterFailoverCmd(nf *NetworkFlags, daemonName string) *cobra.Command { var yes bool cmd := &cobra.Command{ Use: "failover", Short: "Cede leadership (ops drill)", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { env, err := nf.Resolve() if err != nil { return err } if env.IsRemote() { ctx := env.K8sContext() ns := env.K8sNamespace() // Delete the leader pod -- election promotes the next node. cmdStr := fmt.Sprintf("kubectl --context %s -n %s delete pod -l app=%s,role=leader", ctx, ns, daemonName) if !yes { fmt.Fprintf(os.Stdout, "[dry-run] %s\n", cmdStr) return nil } c := exec.Command("kubectl", "--context", ctx, "-n", ns, "delete", "pod", "-l", "app="+daemonName+",role=leader") c.Stdout = os.Stdout c.Stderr = os.Stderr return c.Run() } fmt.Fprintln(os.Stdout, "[local] Kill the leader process. Election will promote the next node by BASE_NODE_ID sort order.") return nil }, } cmd.Flags().BoolVar(&yes, "yes", false, "execute (default: dry-run)") return cmd } // --- helpers --- func haConfigPath(daemonName string, env Env) string { dir := configDir() return filepath.Join(dir, fmt.Sprintf("ha-%s-%s.yaml", daemonName, env)) } func haConfigContent(daemonName string, env Env, consensus string, replicas int) string { var peers []string basePort := 8090 for i := 0; i < replicas; i++ { peers = append(peers, fmt.Sprintf("http://127.0.0.1:%d", basePort+i)) } return fmt.Sprintf(`# Base HA config for %s (%s) # Generated by %s cluster init daemon: %s env: %s consensus: %s replicas: %d base_port: %d peers: %s `, daemonName, env, daemonName, daemonName, env, consensus, replicas, basePort, func() string { var lines []string for _, p := range peers { lines = append(lines, " - "+p) } return strings.Join(lines, "\n") }()) } func localClusterStart(daemonName string, consensus string, replicas int, execute bool) error { basePort := 8090 var peers []string for i := 0; i < replicas; i++ { peers = append(peers, fmt.Sprintf("http://127.0.0.1:%d", basePort+i)) } peersCSV := strings.Join(peers, ",") for i := 0; i < replicas; i++ { port := basePort + i nodeID := fmt.Sprintf("%s-node%d", daemonName, i) local := fmt.Sprintf("http://127.0.0.1:%d", port) envVars := []string{ fmt.Sprintf("BASE_NODE_ID=%s", nodeID), fmt.Sprintf("BASE_LOCAL_TARGET=%s", local), fmt.Sprintf("BASE_PEERS=%s", peersCSV), fmt.Sprintf("BASE_CONSENSUS=%s", consensus), } if !execute { fmt.Fprintf(os.Stdout, "[dry-run] %s base-ha serve --http 127.0.0.1:%d\n", strings.Join(envVars, " "), port) continue } bin, err := exec.LookPath("base-ha") if err != nil { return fmt.Errorf("base-ha not found in PATH: %w", err) } logFile := filepath.Join(os.TempDir(), fmt.Sprintf("%s-node%d.log", daemonName, i)) f, err := os.OpenFile(logFile, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0644) if err != nil { return fmt.Errorf("open log file: %w", err) } proc := exec.Command(bin, "serve", "--http", fmt.Sprintf("127.0.0.1:%d", port)) proc.Env = append(os.Environ(), envVars...) proc.Stdout = f proc.Stderr = f if err := proc.Start(); err != nil { f.Close() return fmt.Errorf("start node%d: %w", i, err) } fmt.Fprintf(os.Stdout, "Started %s (pid %d) on :%d, log: %s\n", nodeID, proc.Process.Pid, port, logFile) } return nil } func localClusterStop(daemonName string, execute bool) error { cmdStr := fmt.Sprintf("pkill -f 'base-ha serve'") if !execute { fmt.Fprintf(os.Stdout, "[dry-run] %s\n", cmdStr) return nil } c := exec.Command("pkill", "-f", "base-ha serve") c.Stdout = os.Stdout c.Stderr = os.Stderr _ = c.Run() // pkill returns non-zero if no processes found; that's fine fmt.Fprintln(os.Stdout, "Stopped all local base-ha processes.") return nil } func localClusterStatus(daemonName string) error { c := exec.Command("pgrep", "-af", "base-ha serve") c.Stdout = os.Stdout c.Stderr = os.Stderr if err := c.Run(); err != nil { fmt.Fprintln(os.Stdout, "No local base-ha processes running.") } return nil } func k8sClusterScale(daemonName string, env Env, replicas int, execute bool) error { ctx := env.K8sContext() ns := env.K8sNamespace() args := []string{ "--context", ctx, "-n", ns, "scale", "deployment/" + daemonName, fmt.Sprintf("--replicas=%d", replicas), } if !execute { fmt.Fprintf(os.Stdout, "[dry-run] kubectl %s\n", strings.Join(args, " ")) return nil } c := exec.Command("kubectl", args...) c.Stdout = os.Stdout c.Stderr = os.Stderr return c.Run() } func k8sClusterStatus(daemonName string, env Env) error { ctx := env.K8sContext() ns := env.K8sNamespace() c := exec.Command("kubectl", "--context", ctx, "-n", ns, "get", "pods", "-l", "app="+daemonName, "-o", "wide") c.Stdout = os.Stdout c.Stderr = os.Stderr return c.Run() } K{x{:hC SbJ `8o@زcx2package cli import ( "strings" "testing" ) func TestHaConfigPath(t *testing.T) { t.Parallel() got := haConfigPath("ats", EnvMainnet) if !strings.HasSuffix(got, "ha-ats-mainnet.yaml") { t.Fatalf("expected ha-ats-mainnet.yaml suffix, got %s", got) } got = haConfigPath("bd", EnvLocal) if !strings.HasSuffix(got, "ha-bd-local.yaml") { t.Fatalf("expected ha-bd-local.yaml suffix, got %s", got) } } func TestHaConfigContent(t *testing.T) { t.Parallel() content := haConfigContent("ats", EnvLocal, "lux", 3) if !strings.Contains(content, "daemon: ats") { t.Fatalf("expected daemon name in config, got:\n%s", content) } if !strings.Contains(content, "consensus: lux") { t.Fatalf("expected consensus in config, got:\n%s", content) } if !strings.Contains(content, "replicas: 3") { t.Fatalf("expected replicas in config, got:\n%s", content) } if !strings.Contains(content, "http://127.0.0.1:8090") { t.Fatalf("expected first peer in config, got:\n%s", content) } if !strings.Contains(content, "http://127.0.0.1:8092") { t.Fatalf("expected third peer in config, got:\n%s", content) } } func TestHaConfigContentPubsub(t *testing.T) { t.Parallel() content := haConfigContent("bd", EnvTestnet, "pubsub", 5) if !strings.Contains(content, "consensus: pubsub") { t.Fatalf("expected pubsub consensus, got:\n%s", content) } if !strings.Contains(content, "replicas: 5") { t.Fatalf("expected 5 replicas, got:\n%s", content) } if !strings.Contains(content, "http://127.0.0.1:8094") { t.Fatalf("expected fifth peer in config, got:\n%s", content) } } znyxfpackage cli import ( "os" "github.com/spf13/cobra" ) // NewCollectionCommand returns the `collection` subcommand tree. func NewCollectionCommand(clientFn func() *Client, formatFn func() Format) *cobra.Command { cmd := &cobra.Command{ Use: "collection", Short: "Manage collections", } cmd.AddCommand(collectionListCmd(clientFn, formatFn)) cmd.AddCommand(collectionGetCmd(clientFn, formatFn)) cmd.AddCommand(collectionSchemaCmd(clientFn, formatFn)) return cmd } func collectionListCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "list", Short: "List all collections", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { data, _, err := clientFn().Get("/collections") if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } func collectionGetCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "get ", Short: "Show a collection's schema", Args: cobra.ExactArgs(1), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { data, _, err := clientFn().Get("/collections/" + args[0]) if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } func collectionSchemaCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "schema ", Short: "Export a collection's schema as JSON (pipe to file)", Example: "base collection schema users > schema.json", Args: cobra.ExactArgs(1), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { data, _, err := clientFn().Get("/collections/" + args[0]) if err != nil { return err } // schema always outputs JSON regardless of --format return Print(os.Stdout, FormatJSON, data) }, } } zbtgxvpackage cli import ( "fmt" "os" "path/filepath" ) // configDir returns the base config directory, respecting XDG_CONFIG_HOME. func configDir() string { if xdg := os.Getenv("XDG_CONFIG_HOME"); xdg != "" { return filepath.Join(xdg, "base") } home, err := os.UserHomeDir() if err != nil { return filepath.Join(".", ".config", "base") } return filepath.Join(home, ".config", "base") } // tokenPath returns the full path to the stored token file. func tokenPath() string { return filepath.Join(configDir(), "token") } // SaveToken writes the token to disk with mode 0600. func SaveToken(token string) error { dir := configDir() if err := os.MkdirAll(dir, 0700); err != nil { return fmt.Errorf("create config dir: %w", err) } return os.WriteFile(tokenPath(), []byte(token), 0600) } // LoadToken reads the stored token from disk. // Returns empty string (no error) if the file does not exist. func LoadToken() string { data, err := os.ReadFile(tokenPath()) if err != nil { return "" } return string(data) } // ResolveToken returns the token from (in priority order): // 1. --token flag // 2. $BASE_TOKEN env var // 3. ~/.config/base/token file func ResolveToken(flagToken string) string { if flagToken != "" { return flagToken } if env := os.Getenv("BASE_TOKEN"); env != "" { return env } return LoadToken() } // ResolveURL returns the server URL from (in priority order): // 1. --url flag // 2. $BASE_URL env var // 3. http://127.0.0.1:8090 func ResolveURL(flagURL string) string { if flagURL != "" { return flagURL } if env := os.Getenv("BASE_URL"); env != "" { return env } return "http://127.0.0.1:8090" } uڹdxIpackage cli import ( "os" "path/filepath" "testing" ) func TestSaveAndLoadToken(t *testing.T) { tmpDir := t.TempDir() t.Setenv("XDG_CONFIG_HOME", tmpDir) token := "eyJhbGciOiJIUzI1NiJ9.test.sig" if err := SaveToken(token); err != nil { t.Fatal(err) } // verify file permissions info, err := os.Stat(filepath.Join(tmpDir, "base", "token")) if err != nil { t.Fatal(err) } if perm := info.Mode().Perm(); perm != 0600 { t.Fatalf("expected 0600, got %o", perm) } got := LoadToken() if got != token { t.Fatalf("expected %q, got %q", token, got) } } func TestLoadTokenMissing(t *testing.T) { t.Setenv("XDG_CONFIG_HOME", t.TempDir()) got := LoadToken() if got != "" { t.Fatalf("expected empty string for missing token, got %q", got) } } func TestResolveToken(t *testing.T) { // flag takes priority if got := ResolveToken("flag-tok"); got != "flag-tok" { t.Fatalf("expected flag-tok, got %s", got) } // env fallback t.Setenv("BASE_TOKEN", "env-tok") if got := ResolveToken(""); got != "env-tok" { t.Fatalf("expected env-tok, got %s", got) } } func TestResolveURL(t *testing.T) { // flag takes priority if got := ResolveURL("http://custom:9090"); got != "http://custom:9090" { t.Fatalf("expected http://custom:9090, got %s", got) } // env fallback t.Setenv("BASE_URL", "http://env:8080") if got := ResolveURL(""); got != "http://env:8080" { t.Fatalf("expected http://env:8080, got %s", got) } // default t.Setenv("BASE_URL", "") if got := ResolveURL(""); got != "http://127.0.0.1:8090" { t.Fatalf("expected http://127.0.0.1:8090, got %s", got) } } 5^бxWmo6l N idw5$2$m4뀮HJ@RI!#r˖JB>{wNJf蜑AJ*C`2ɜ-E /[Qx0972d9q&/ 8cj'Ō ,k X\_2+iKj̐?>Ѻ0 %Ysa`L\JZsa՟RH5G7+N)s뽋#EI+)J& L]񌑳#Ӊt}s FWG>UȒVV#R}e|;4tx{r ,vAidwF]8{_ʙQܐϸI/℄=]aYIP1 SrTЄϬk =峀]UoBRR5tHV4*Z/F _ 9/9Do5NT\mТ`!!p$6B4>%_^"PO"l޻-5zLT-"g#?ߤY6.vbw ⲌЌ^`bneMHp`!W |7l4o[5qdW \JعPP"kx!!`R hѸۧ`[`%| ӭ;e|ԭ"ǮO T֫0Em3:,dFp?_SMcL0\雒aceor%o'tk֞ABSEeOSF Tȥ솖U/;cfuAC7@c%n-n~;Yi D]+'˒m8{]8 XEQߐrhvK]̱P=Z@iNk ;] Sѡ[+jvrvMPI]X1!b${ }Rީem?Cڡ%{S{Z 6f @秡{|%B%=!X0!]Q8qnm(n~ [YI{/ɝ&@hYׇa]F Lc0%LawsM53s ް)|5Q?uȩH|UW߿@I>#81w;Q/|>Dy>7&B(,uZ+#a2ք8˂܀iJc$`dBpZO &r u:k* 396(.xpackage cli import ( "os" "github.com/spf13/cobra" ) // NewCronsCommand returns the `crons` subcommand tree. func NewCronsCommand(clientFn func() *Client, formatFn func() Format) *cobra.Command { cmd := &cobra.Command{ Use: "crons", Short: "Manage cron schedules", } cmd.AddCommand(cronsListCmd(clientFn, formatFn)) return cmd } func cronsListCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "list", Short: "List registered cron schedules", SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { data, _, err := clientFn().Get("/crons") if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } |4xX[o6~K JC!Y`XԈCWD9BdR#FsxXN]h,Q+YE:c$Bj 6h1~wc󝢬>Ҳ3C*KyV,|GwdLt;;]=O\}1<'FrE9#s=QYk)$@ R"'KKj)2ʂeb y-"%'JșCȈ PuLT^qsQVd$Y6&W.h%)t'ۋgjLrVY09Fg)J4ĆeU*6̐)h夐bNJLy򖜥dP4<[5ɖ=8_6.SIPu}_gBT9+%wt:ƍl#% `bcZVtKs1 Ҕl@6,,;7X9ɄIU* *QTF!ש1VRpD=?@TDg 3x# piʅh4 x&)pb$B<^fOAk?ʐXPn'OږFm\H Ϩ}nȷ1y`uhbw˿`naEc6@?j 0 `uUlpqC>56 ox^)1TI-0y5ZE޼ńI ( v?څK޺gj6h =Efm1FL[Z~cr668_}cvcaXm|ԧ(| 'w-{ sq1T-L2XPk*zmD{u ?aWE<Hqiq~@;~&z$zl頃lEW ؟|z|c}U ܶ `L1oU:pep/sax-JnGwgib|֠.pjqv1ټ$Q&.y\0A,LaaGpYS aA09b0 ^.HH'{#db00keRa."j5%¬,!ӟ صfq(9祌bk&@YGc54ON2ϯO^n&Fx3h&لB ࡢSbHy Vw HPWco|=ea"ٯ~smyiʹ)ٸT` l2˜l(QQmbO_ɤ[ wf& >sCTcC*ûӅ{+TS$%rSYΧu11hbA!\[ vlJͦ8> p:F]"α>W-;\L̨xhe1^rb8m7~[ok;A0fR->uVB'X N06M>>ߘ^_h,N Y.+3WIܚ$ ٺ:n^btbI:b(s3[_4gt܁JgqXXYŐVp{ 6$ڳ6BT*v/#{Y[娓J,fɋPV;u z-;jv't~_l3ly/2+ @,\aLnPƂӎM]Jkg&fy#(o} &Qo &4^F}B3Ż6m= *!aߦ%*S@ig|v}x֖Ϳw_ϘI^G2;w>dmD,-?iM]w<E0tg ڿ=Q>xSn@=WLV#B[ʧTzH{,k ZxwYƇ1͛7 V6 N4}Z&ԲZ.Nj%xI*713&b&[2ok5麫xV]oD}N~B-[W}v[lh}@cgT{̌l?_/ܱ4P3w=3iDv-JIYcU7zǣ}qRUL2S)*Ҋh<ӔԔJ:'+}k#xfA]b7O'»昭d) -LBUx6¹ʬI9*/ zǁ0']mH~Eδ6TK<%NJy,tbs-ݍaCs;IxJER%pĔ$ō5J܄M%<9BS\]8?9OP eFV&Y\P#SK푓( p.oHb'> U&l.=8Z@8CNm UPLAQY!tзJ<1'aKJ=hlFly<^g` mNZCe&u;Ξ3ׁ&'a2cjh8|Ƃ@dOyXv#cvе%0TPSV紷O/v"轓{D!DS\u~`/

p{vNHZe#dr0+\lmm ]W(<(`ێpssX$ф3PEOO)LJR7Ju".++bP)92|D^4|;%;D(j p=Ԫ§{q1?9xX" B 3 =&G2ѯ? : >5<+ڧɿs TWu,q_cʈZ 6-_8uڽW_jϚg?Qc&(cYelxLW~XAƮ>-q%sAA1 Π3LuB;&лSͱNA=r'p L]Mz+(^К]yPMjvJO>.ց0 Acyac`]B'Ӑ ۙwtroVx%St#Sfi(xWYoF~6Ŕ)y)T8ElðӼ+r)"wRwf/k񃵫{TtŖҲeayc*cYv:?z7Kaq4 .  R&(RV뢑B`O"T)2R)х_^B1ĕ3Wվ5=\ӥ$ᩤ|lVJTp/LPeeMZXsNt4Uj5o܂maAq2jS F- );޼gn?'Y6eꌚ@,wBdIZ'`+& jB0E,t u#kd.JHݪ1Q0"IY xze02>eV$f"B#0r:%,G:RUI:r/ϒ(oEQoLz'gDoDc N&7\JjQ1(Jb:x57_E\ t9+dzfCG? p> NW/Esr1/|o(/aX uNClEr%Kl* m#lZ&6nے9Qa ;L##bMM \KW wxRhE%NE qhRFY4O,B:?ߢ5kbCHH-~cƂb8b ϐBԆ }GbJJ'|c*+=o7#4&]eۄעˆ~>4 _H|Qr%Okhh ٵm/u+{Ѵ(gPB [jr|:k>M͚109i**{[+_\vXL 7zP?]]pV1= 1:IApv25P9a8erſv'tw uZ{vC=Z"uN,1/$e-^p>U`ܵy^l8ܕ}#(ެ ߷j'}9?-䴟?D4c/vh cOvlxb.XT,9p=2Y9d[x JvF.T̼ԒXpX1l4x ? & xWMo8=[nJֺȡݦbl,-QJTD w%%˻mngqV8kA^ThBAu, ۔ s"k~I8[rNzi"z f"59 ̤)_.M"ϬAa/CF<˒0r<%pD2 5 xp? l=ah?JtAg`* 'c5/d_nʹ$+Br/=s5"u-!ep YMB52qѱT:i RHZ 0?~EҔ SVgS*Yn>3n$4x$æS@I0VXQUK'ԚAdXdSf6L|kQ˙l{S&{x]kW[ %ƴ,[TV-ZϪE&J^rOU`z)f}[ %8= XRo(ayw„55gO#`M Y܃/Yn{|GyV ܟ [^WLAİur* ?4%-Ml*Ls޼o\*k]K//ʚ'rrC]0:@ Z ).9hdITGiglLF[_TGv1wXDO/v);& ðL1.coAiGOEZIlm!68nc{ ,[nH!B kfBHJs|Պ2 eUcu)R/Tg[{`dYr&1jȣr{X^ܒr:M[(.B  h|A`Ȋ-@4I3}TTdo3zmb)v.R4;&vn֌*vNGcf-FM.݊EY~;t)ᶔX H-+LWJLۉVYro#n +@?2 $>ؗx۹Y`\g_oy}T0VTxyaJL%C DHe=~+yU{ud71IWM;k3lBf-xjt³o:YS'10ܙ4!J" ˘S7 fj 7x{a:tC;#GFb^U^b䩌OLќNũ E%E?rk:e&d&"s%KR+"J?odzQ% p̤T eɛW AtRRKsJ6?fdȷH<(x|package cli import ( "strings" "testing" ) func TestOperatorNetworkYAML(t *testing.T) { t.Parallel() tests := []struct { env Env wantFile string }{ {EnvMainnet, "mainnet-sfo.yaml"}, {EnvTestnet, "testnet.yaml"}, {EnvDevnet, "devnet.yaml"}, } for _, tt := range tests { t.Run(string(tt.env), func(t *testing.T) { t.Parallel() got := operatorNetworkYAML("/tmp/operator", tt.env) if !strings.HasSuffix(got, tt.wantFile) { t.Fatalf("expected suffix %s, got %s", tt.wantFile, got) } if !strings.Contains(got, "k8s/networks") { t.Fatalf("expected k8s/networks in path, got %s", got) } }) } } {xpackage cli import ( "encoding/json" "fmt" "io" "os" "sort" "strings" "text/tabwriter" "gopkg.in/yaml.v3" ) // Format is the output format. type Format string const ( FormatTable Format = "table" FormatJSON Format = "json" FormatYAML Format = "yaml" ) // ParseFormat returns the output format from a string. func ParseFormat(s string) Format { switch strings.ToLower(s) { case "json": return FormatJSON case "yaml": return FormatYAML default: return FormatTable } } // DetectFormat returns table if stdout is a TTY, json otherwise. func DetectFormat(explicit string) Format { if explicit != "" { return ParseFormat(explicit) } fi, err := os.Stdout.Stat() if err != nil { return FormatJSON } if fi.Mode()&os.ModeCharDevice != 0 { return FormatTable } return FormatJSON } // Print outputs data in the requested format to w. func Print(w io.Writer, format Format, data json.RawMessage) error { switch format { case FormatJSON: var buf json.RawMessage if err := json.Unmarshal(data, &buf); err != nil { // already raw, just write _, err := w.Write(data) if err != nil { return err } fmt.Fprintln(w) return nil } pretty, err := json.MarshalIndent(buf, "", " ") if err != nil { _, err := w.Write(data) if err != nil { return err } fmt.Fprintln(w) return nil } _, err = w.Write(pretty) if err != nil { return err } fmt.Fprintln(w) return nil case FormatYAML: var obj any if err := json.Unmarshal(data, &obj); err != nil { return err } return yaml.NewEncoder(w).Encode(obj) default: // table return printTable(w, data) } } // printTable attempts to render JSON data as a tab-separated table. // Works for arrays of objects or single objects. func printTable(w io.Writer, data json.RawMessage) error { // try array of objects var arr []map[string]any if err := json.Unmarshal(data, &arr); err == nil && len(arr) > 0 { return printObjectsTable(w, arr) } // try paginated response: { items: [...], page, perPage, ... } var paginated struct { Items []map[string]any `json:"items"` Page int `json:"page"` PerPage int `json:"perPage"` TotalItems int `json:"totalItems"` } if err := json.Unmarshal(data, &paginated); err == nil && paginated.Items != nil { if len(paginated.Items) == 0 { fmt.Fprintln(w, "(no records)") return nil } if err := printObjectsTable(w, paginated.Items); err != nil { return err } fmt.Fprintf(w, "\n(%d of %d total)\n", len(paginated.Items), paginated.TotalItems) return nil } // try single object var obj map[string]any if err := json.Unmarshal(data, &obj); err == nil { return printKV(w, obj) } // fallback: raw output _, err := w.Write(data) if err != nil { return err } fmt.Fprintln(w) return nil } // printObjectsTable prints a slice of flat objects as a table. func printObjectsTable(w io.Writer, objs []map[string]any) error { if len(objs) == 0 { fmt.Fprintln(w, "(empty)") return nil } // collect and sort keys keySet := map[string]struct{}{} for _, obj := range objs { for k := range obj { keySet[k] = struct{}{} } } keys := make([]string, 0, len(keySet)) for k := range keySet { keys = append(keys, k) } sort.Strings(keys) // prioritize id, name, type, created, updated priority := []string{"id", "name", "type", "created", "updated"} ordered := make([]string, 0, len(keys)) for _, p := range priority { for _, k := range keys { if k == p { ordered = append(ordered, k) break } } } for _, k := range keys { found := false for _, p := range priority { if k == p { found = true break } } if !found { ordered = append(ordered, k) } } tw := tabwriter.NewWriter(w, 0, 0, 2, ' ', 0) fmt.Fprintln(tw, strings.Join(ordered, "\t")) for _, obj := range objs { vals := make([]string, len(ordered)) for i, k := range ordered { vals[i] = formatValue(obj[k]) } fmt.Fprintln(tw, strings.Join(vals, "\t")) } return tw.Flush() } // printKV prints a single object as key-value pairs. func printKV(w io.Writer, obj map[string]any) error { keys := make([]string, 0, len(obj)) for k := range obj { keys = append(keys, k) } sort.Strings(keys) tw := tabwriter.NewWriter(w, 0, 0, 2, ' ', 0) for _, k := range keys { fmt.Fprintf(tw, "%s\t%s\n", k, formatValue(obj[k])) } return tw.Flush() } func formatValue(v any) string { if v == nil { return "" } switch val := v.(type) { case string: return val case float64: if val == float64(int64(val)) { return fmt.Sprintf("%d", int64(val)) } return fmt.Sprintf("%g", val) case bool: if val { return "true" } return "false" default: b, err := json.Marshal(val) if err != nil { return fmt.Sprintf("%v", val) } return string(b) } } zx package cli import ( "bytes" "encoding/json" "strings" "testing" ) func TestPrintJSON(t *testing.T) { t.Parallel() data := json.RawMessage(`{"id":"abc","name":"test"}`) var buf bytes.Buffer if err := Print(&buf, FormatJSON, data); err != nil { t.Fatal(err) } out := buf.String() if !strings.Contains(out, `"id"`) { t.Fatalf("expected JSON output, got: %s", out) } } func TestPrintYAML(t *testing.T) { t.Parallel() data := json.RawMessage(`{"id":"abc","name":"test"}`) var buf bytes.Buffer if err := Print(&buf, FormatYAML, data); err != nil { t.Fatal(err) } out := buf.String() if !strings.Contains(out, "id:") { t.Fatalf("expected YAML output, got: %s", out) } if !strings.Contains(out, "name:") { t.Fatalf("expected name in YAML output, got: %s", out) } } func TestPrintTableArray(t *testing.T) { t.Parallel() data := json.RawMessage(`[{"id":"1","name":"a"},{"id":"2","name":"b"}]`) var buf bytes.Buffer if err := Print(&buf, FormatTable, data); err != nil { t.Fatal(err) } out := buf.String() lines := strings.Split(strings.TrimSpace(out), "\n") if len(lines) < 3 { t.Fatalf("expected at least 3 lines (header + 2 rows), got %d: %s", len(lines), out) } } func TestPrintTablePaginated(t *testing.T) { t.Parallel() data := json.RawMessage(`{"items":[{"id":"1","name":"a"}],"page":1,"perPage":10,"totalItems":1,"totalPages":1}`) var buf bytes.Buffer if err := Print(&buf, FormatTable, data); err != nil { t.Fatal(err) } out := buf.String() if !strings.Contains(out, "1 of 1 total") { t.Fatalf("expected pagination footer, got: %s", out) } } func TestPrintTableSingleObject(t *testing.T) { t.Parallel() data := json.RawMessage(`{"id":"abc","name":"test","type":"base"}`) var buf bytes.Buffer if err := Print(&buf, FormatTable, data); err != nil { t.Fatal(err) } out := buf.String() if !strings.Contains(out, "id") || !strings.Contains(out, "abc") { t.Fatalf("expected key-value output, got: %s", out) } } func TestDetectFormat(t *testing.T) { t.Parallel() if f := DetectFormat("json"); f != FormatJSON { t.Fatalf("expected json, got %s", f) } if f := DetectFormat("yaml"); f != FormatYAML { t.Fatalf("expected yaml, got %s", f) } if f := DetectFormat("table"); f != FormatTable { t.Fatalf("expected table, got %s", f) } } 6x;package cli import ( "encoding/json" "fmt" "os" "github.com/spf13/cobra" ) // NewRecordCommand returns the `record` subcommand tree. func NewRecordCommand(clientFn func() *Client, formatFn func() Format) *cobra.Command { cmd := &cobra.Command{ Use: "record", Short: "Manage records in a collection", } cmd.AddCommand(recordListCmd(clientFn, formatFn)) cmd.AddCommand(recordGetCmd(clientFn, formatFn)) cmd.AddCommand(recordCreateCmd(clientFn, formatFn)) cmd.AddCommand(recordUpdateCmd(clientFn, formatFn)) cmd.AddCommand(recordDeleteCmd(clientFn, formatFn)) return cmd } func recordListCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { var filter string var limit int var sortFlag string cmd := &cobra.Command{ Use: "list ", Short: "List records in a collection", Example: `base record list users --filter "email~'test'" --limit 10 --sort "-created"`, Args: cobra.ExactArgs(1), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { q := BuildQuery(filter, limit, sortFlag, nil) data, _, err := clientFn().Get("/collections/" + args[0] + "/records" + q) if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } cmd.Flags().StringVar(&filter, "filter", "", "filter expression") cmd.Flags().IntVar(&limit, "limit", 0, "max records per page") cmd.Flags().StringVar(&sortFlag, "sort", "", "sort expression (e.g. -created)") return cmd } func recordGetCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "get ", Short: "Get a single record by ID", Args: cobra.ExactArgs(2), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { data, _, err := clientFn().Get("/collections/" + args[0] + "/records/" + args[1]) if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } func recordCreateCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "create ''", Short: "Create a new record", Example: `base record create posts '{"title":"Hello","body":"World"}'`, Args: cobra.ExactArgs(2), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { var body any if err := json.Unmarshal([]byte(args[1]), &body); err != nil { return fmt.Errorf("invalid JSON body: %w", err) } data, _, err := clientFn().Post("/collections/"+args[0]+"/records", body) if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } func recordUpdateCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "update ''", Short: "Update an existing record", Example: `base record update posts abc123 '{"title":"Updated"}'`, Args: cobra.ExactArgs(3), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { var body any if err := json.Unmarshal([]byte(args[2]), &body); err != nil { return fmt.Errorf("invalid JSON body: %w", err) } data, _, err := clientFn().Patch("/collections/"+args[0]+"/records/"+args[1], body) if err != nil { return err } return Print(os.Stdout, formatFn(), data) }, } } func recordDeleteCmd(clientFn func() *Client, formatFn func() Format) *cobra.Command { return &cobra.Command{ Use: "delete ", Short: "Delete a record", Args: cobra.ExactArgs(2), SilenceUsage: true, RunE: func(cmd *cobra.Command, args []string) error { _, _, err := clientFn().Delete("/collections/" + args[0] + "/records/" + args[1]) if err != nil { return err } fmt.Fprintln(os.Stdout, "Deleted.") return nil }, } } 3Ix=YPC^Tpc` subcommand. // Matches `lux rpc` shape: direct API call passthrough. func NewRPCmpc", Short: "Direct API call passthrough to the daemon", Long: `Make direct API calls to the running Base daemon. Examples: # GET a path ats rpc get /health # POST with JSON body ats rpc post /collections/orders/records '{"symbol":"AAPL","qfty":100}' # DELETE ats rpc delete /collections/orders/records/abc123`, } cmd.AddCommand(rpcGet*pcPost*pcPatch*pcDeleBpcGeta o get a GET request#Uargs[0] gpcPosta opost [json-body]a POST request RangeArgs(1, UO len(args) > 1 {  ( d 4 } )args[0] mpcPatcha opatch a PATCH requestxO atch(args[0] mpc[ }path>aDELETE request#Uargs[0] ,ޗD2֦Hěa),N$ݎi]-%a|SzFoi}SǢ-Q$J0x=:(atQ}©W'RdV>i'aueǛ8҄^?\>bEqs;U?^39Lz [Bו4l\`J'}V^^T.,4ҠHy4sU/ ؾ֒T-u;}w˄rM+OjX&N5QOzQIܖFI`3d;uVv4@bhd 8z_׉TJ, ~?vԆYx=Ak0pX.7"aZ5 3("Gl@W6ڒ QXey̒96s)9TnǯŴjU8‘1Ik6(l!RIxu Q b0HɅet8}ὂS pm'S]!ULE~Ҡ f͸Z@@7 &:M!݄tJ}GE,Rl+<jCdw8M&9$<@&ئC_`8α'Mj $5Y3(S1!V8oz+{xU]F}~Š W׷ 5܂㦤K%Z˕w;lIi`cv̙s֭*Wq%i%Hdt7;$VavF1?*llH%q77' G\^ JB ݁ #>!ְ4%"Z G;()LUۂG/v§|AMO|%j{ >#AmzNUEp8J[-rIqO+mR>%3 ZҖ/Q]%m#E*vsTJم H]L~bIƿmxK100644 main.goҭ Rْ6aMJ%;ؑKE100644 main_test.goӾ,%|,s"TxYr}&b*5 ʉwhزl+Y*QN$ C .4fڮG %9=ems SSE\..:ڨC̒:[XTgef4j^WUݔeVq[F46. S|[-yWE%E:uM8+#O&M k[i^%q~Q?obj>Ld:DY9Ѡ+~EEluUֱgURN@V^h“u99$8ʌIL5tŞz'uf/ v7DU/"N.!dp*[>.*lMU";qv6N5?uHG'u(Ƃ/1ě)$1po N:YÞ㮛5|R B8J8g4TG ]-z@D<920eF!(;_!^5Bgtc eUpXdaE[iX ;fk}aHoiMHpg/bŧ=yNݥ֙JA{g^jxsؠ,@( 描EV3=wf\[t~ y`Tf8Dtᭈhy%@0O(Lusq:HM+1ZD%j>AamچZ[Y!(nw0.$ȓ(߁0FH <#z[UhAj0SKFzD1Y޶xKym "(' Ch3{lɁcb?by &HZT}\{/iͦ*̔5cOCO}{ʔ}P!HSFN+.6ŎCِs87C3w>X9'/=h'|g6Aip+Coz6V$'yp{B! A 8gVN@)|P/|V"`"{{E2~w*)SXTTDf͸p)\p59 3}nru{unJs=W{8\?d9,xl '/v_ELC+v(0zv!f(pw:'Xd;y_Urw \,uLo;DDzvYU @$.`uFTG=E =^7,TH}!8='#fM딹]-)/-}8H:v꣈%Y.IKpPF"I=rg'b@h1=jkb^DDH9ur_go04_v Nx,f r9Et)(kj]eQ[Y;Cg%..R+~tl,O!rGE6u;; Dwk$#szc1(fi^rGˌZPi=N봊paG'L1Π =y :73Q[Ou0M(!U6ř27ߥE4cj;4T>us+)/z칮+U~fRhy+i74l]g0oYG'r2g6ϥuhuhj\|­능I;H vF r%4稥|K-Gεh nb_^S^YrtvqiŌ U;5rC:`M۸)bI?CG#~}+ ll.M&|ȏZ5MbH{^rfH/.4N"}/󢮮C2Ah"r#X.n4R)dz6N7:<9G퓮V(ENf MCȜ\oSKq[JAN[&-}N+)c$kx]RM@f׊4C*&K]+nA"LĻJ/"&xM9 |3_w?~ ãѫw<cHSQVʤT u%Z<*P ez0|TÏC˂@( a4cXY0%pƚ.XKJb{LkED+:hZ Es1#pë&TU[?<=]=[ƝPt%qfo>$q  =&\X?QH(:/: ,{[*OPvWV G}52u XP`n_,&<OW>6_6uo+xbtq2ͧx;s?x9package main import ( "strings" "testing" ) func TestPascalCase(t *testing.T) { tests := []struct { in, want string }{ {"tasks", "Tasks"}, {"user_roles", "UserRoles"}, {"my-items", "MyItems"}, {"users", "Users"}, {"_superusers", "Superusers"}, {"abc", "Abc"}, } for _, tt := range tests { got := pascalCase(tt.in) if got != tt.want { t.Errorf("pascalCase(%q) = %q, want %q", tt.in, got, tt.want) } } } func TestSelectType(t *testing.T) { tests := []struct { name string f field want string }{ { name: "single select with values", f: field{Type: "select", Values: []string{"active", "done"}, MaxSelect: 0}, want: "'active' | 'done'", }, { name: "multi select with values", f: field{Type: "select", Values: []string{"a", "b", "c"}, MaxSelect: 3}, want: "('a' | 'b' | 'c')[]", }, { name: "single select no values", f: field{Type: "select", Values: nil, MaxSelect: 0}, want: "string", }, { name: "multi select no values", f: field{Type: "select", Values: nil, MaxSelect: 2}, want: "string[]", }, { name: "value with apostrophe", f: field{Type: "select", Values: []string{"it's"}, MaxSelect: 0}, want: "'it\\'s'", }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { got := selectType(tt.f) if got != tt.want { t.Errorf("selectType() = %q, want %q", got, tt.want) } }) } } func TestFieldToTS(t *testing.T) { idToName := map[string]string{ "col_users": "users", "col_tags": "tags", } tests := []struct { name string f field wantTS string wantCmt string }{ {"text", field{Type: "text"}, "string", ""}, {"email", field{Type: "email"}, "string", ""}, {"url", field{Type: "url"}, "string", ""}, {"editor", field{Type: "editor"}, "string", ""}, {"number", field{Type: "number"}, "number", ""}, {"bool", field{Type: "bool"}, "boolean", ""}, {"date", field{Type: "date"}, "string", ""}, {"autodate", field{Type: "autodate"}, "string", ""}, {"json", field{Type: "json"}, "unknown", ""}, {"geoPoint", field{Type: "geoPoint"}, "{ lon: number; lat: number }", ""}, {"password", field{Type: "password"}, "string", ""}, {"file single", field{Type: "file", MaxSelect: 0}, "string", ""}, {"file multi", field{Type: "file", MaxSelect: 3}, "string[]", ""}, {"relation single", field{Type: "relation", CollectionID: "col_users", MaxSelect: 0}, "string", "relation -> users"}, {"relation multi", field{Type: "relation", CollectionID: "col_tags", MaxSelect: 5}, "string[]", "relation -> tags"}, {"relation unknown", field{Type: "relation", CollectionID: "unknown_id"}, "string", "relation -> unknown_id"}, {"select", field{Type: "select", Values: []string{"a", "b"}}, "'a' | 'b'", ""}, {"unknown type", field{Type: "foobar"}, "unknown", "unhandled type: foobar"}, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { gotTS, gotCmt := fieldToTS(tt.f, idToName) if gotTS != tt.wantTS { t.Errorf("fieldToTS().ts = %q, want %q", gotTS, tt.wantTS) } if gotCmt != tt.wantCmt { t.Errorf("fieldToTS().comment = %q, want %q", gotCmt, tt.wantCmt) } }) } } func TestGenerate(t *testing.T) { idToName := map[string]string{ "col_users": "users", } collections := []collection{ { ID: "col_tasks", Name: "tasks", Type: "base", Fields: []field{ {Name: "id", Type: "text", System: true}, {Name: "title", Type: "text"}, {Name: "status", Type: "select", Values: []string{"active", "done"}}, {Name: "assignee", Type: "relation", CollectionID: "col_users"}, {Name: "secret", Type: "text", Hidden: true}, {Name: "created", Type: "autodate"}, {Name: "updated", Type: "autodate"}, }, }, { ID: "col_users", Name: "users", Type: "auth", Fields: []field{ {Name: "id", Type: "text", System: true}, {Name: "email", Type: "email"}, {Name: "name", Type: "text"}, {Name: "avatar", Type: "file"}, {Name: "verified", Type: "bool"}, {Name: "created", Type: "autodate"}, {Name: "updated", Type: "autodate"}, }, }, } got := generate(collections, idToName) // Check header if !strings.Contains(got, "Auto-generated by base typegen") { t.Error("missing header comment") } // Check Tasks interface if !strings.Contains(got, "export interface Tasks {") { t.Error("missing Tasks interface") } if !strings.Contains(got, " title: string") { t.Error("missing title field") } if !strings.Contains(got, " status: 'active' | 'done'") { t.Error("missing status select union type") } if !strings.Contains(got, " assignee: string // relation -> users") { t.Error("missing assignee relation with comment") } // Hidden fields should be excluded if strings.Contains(got, "secret") { t.Error("hidden field 'secret' should not appear in output") } // Check Users interface if !strings.Contains(got, "export interface Users {") { t.Error("missing Users interface") } if !strings.Contains(got, " verified: boolean") { t.Error("missing verified bool field") } // Check Collections map if !strings.Contains(got, "export type Collections = {") { t.Error("missing Collections type map") } if !strings.Contains(got, " tasks: Tasks") { t.Error("missing tasks entry in Collections map") } if !strings.Contains(got, " users: Users") { t.Error("missing users entry in Collections map") } } x| # compose.network.yml — Base Network local HA dev stack. # # Three Base nodes in a quasar quorum (N=3, k=2) plus a gateway out front # doing shard-aware routing. This is the developer entry point for the # base/network feature; same code path as prod, no mocks. # # Quick start: # # docker compose -f compose.network.yml up -d # # wait a few seconds for members to register, then: # curl -H 'X-User-Id: alice' -XPOST localhost:18080/api/collections/_pbc/records -d '{}' # curl -H 'X-User-Id: alice' localhost:18080/api/collections/_pbc/records/last # # Simulate a node failure: # # docker compose -f compose.network.yml kill base-b # # writes and reads continue; quasar quorum = 2 of 3 survivors. # # Tear down: # # docker compose -f compose.network.yml down -v # # Ports: # 18080 — gateway (front door; routes shards to correct pod) # 18090 — base-a direct (debug only) # 18091 — base-b direct (debug only) # 18092 — base-c direct (debug only) services: base-a: &base-node image: ghcr.io/hanzoai/base:dev environment: BASE_NETWORK: quasar BASE_SHARD_KEY: user_id BASE_REPLICATION: "3" BASE_PEERS: base-a:9651,base-b:9651,base-c:9651 BASE_ARCHIVE: "off" BASE_LISTEN_HTTP: :8090 BASE_LISTEN_P2P: :9651 BASE_NODE_ROLE: validator HOSTNAME: base-a ports: - "18090:8090" volumes: - base-a-data:/data healthcheck: # Soft probe: any response (incl. 404 before Agent #1's /-/base/members # lands) counts as "up". Real quorum health is surfaced by the gateway. test: ["CMD-SHELL", "curl -sfo /dev/null http://localhost:8090/ || curl -sfo /dev/null http://localhost:8090/api/health || [ $? -lt 22 ]"] interval: 5s timeout: 2s retries: 20 restart: unless-stopped base-b: <<: *base-node environment: BASE_NETWORK: quasar BASE_SHARD_KEY: user_id BASE_REPLICATION: "3" BASE_PEERS: base-a:9651,base-b:9651,base-c:9651 BASE_ARCHIVE: "off" BASE_LISTEN_HTTP: :8090 BASE_LISTEN_P2P: :9651 BASE_NODE_ROLE: validator HOSTNAME: base-b ports: - "18091:8090" volumes: - base-b-data:/data base-c: <<: *base-node environment: BASE_NETWORK: quasar BASE_SHARD_KEY: user_id BASE_REPLICATION: "3" BASE_PEERS: base-a:9651,base-b:9651,base-c:9651 BASE_ARCHIVE: "off" BASE_LISTEN_HTTP: :8090 BASE_LISTEN_P2P: :9651 BASE_NODE_ROLE: validator HOSTNAME: base-c ports: - "18092:8090" volumes: - base-c-data:/data gateway: image: ghcr.io/hanzoai/gateway:latest depends_on: base-a: condition: service_healthy base-b: condition: service_healthy base-c: condition: service_healthy environment: AUTH_ENABLED: "false" # dev-only; prod uses JWT via hanzo.id BILLING_ENABLED: "false" ports: - "18080:8080" volumes: - ./hack/gateway.network.json:/etc/gateway/gateway.json:ro command: ["run", "-c", "/etc/gateway/gateway.json"] restart: unless-stopped volumes: base-a-data: base-b-data: base-c-data: I#ķxWn-=ŔʖHuvHE 8&Waj\rz !E_>JgvIIaΞ90#=hl^w:ꛦ.tDR2h6ÐeމR22V4?QaJƼX$($H(HQ. P&s\WIL' E”(\ҷ$hŒ^a}"=X3&ABL G).d_\m4 3eRDQaD@Tiäh3į(D&iЀU"N5U̎ґQuJcbb͋!eZy\[&֏wj͠J{.\&)Q\SbQ}`pF-9=bg춵aù#0ӓD`p_Lff|L*~+'A7ymHVV$/KGNE$E~zt|:IHgg&n|.~.+(DyRWMo5 UR_>W*wsxx' bĬ-LGQʱUBGR[ mhoѽeַlc׫s"  'g:ssaW1*k,W9i^sz큳 -0cׄ2N^-CJhK6P퍋xx>҆]zi/YtC!FVmV\qTʍ-^J{]5Jßhg;%ϪV+dm|-&*/nv=>Y{˰vΎf+J؍< #9¾tp}/axyC4x ϕ>$7h6gHuުj>Q#t)Nxk ʋ1ԐwOIUiVoD*Zq Ԡ$K| <2vtQ^PI:'T6oAdy'0SLuG;onYm1/ޱ*B.)ANٌټ6σټ/hO چ>XVn|&Fmmɂ%@9n[^Dn.-3I4 bηm3]82}ݹ""q`}.v?^d)[7p_Q+NcڻW ý 'sξCj- U@E[݃\,^.nl"Ӫr*)s̰eP[}ih9; ⨎Y}t2pAo "XBUj 0P{tT|ӈ2W9Ji̢ t&몿&"景bq^uwJYjȼ9mcO]M#% rqԸE$N*~0RFȗ2N~5 h]DR 7Y66mN^eRĆjGۮA[ ma9_ga8a4N77o|zCG|ԻYuޝAG[[k̼ ~dNI)m/ݶ?]Kڴ\}ETܧ=Lrv6>s#׀-TWN#3( (yS03אh-X#ߦc\bxž*5 JS{3J62!2I\ m3/\z'&x UIw'ށ&9Ffن3hla:^k  Z8SE]oҡ^w!L<3*vsbEo8r)Kd *sllӕ![8`8a9>d!{،f_d 23]4xY[&i,hXy燻O^- r/J %He!ă'N3 a[_L+F@/[`X6_lD,W8"wk j_ $&yly&+]Ɇ jRMwՈ?ÝmYu U"Rzc% FVnN _%Aÿ:LK˔Q.( byw++ݳԄDž-o)సմ0{2ĭr˭_~W_}i- &[ŶS?*x . ȵwS.|B{K9Y`? QtxG˲"RWR& 2x0-4 Y)Mp3-V"< x8rGnSUK@7氰 rG mN. ^ 5>p8<[<So 6ma8cM>6l7P?Og Ƥq݇mj|{!<8/Ӊ[b|0ŮO,PԂ{{𳡖+S>"s3? (^_洓wqlJQ$ JUP[T_0m'`\7{efbυX˗kLZF҈]r|YCx@@t[8 ֒}SKY = ܖ&NH(V|/ִ{w/j4in3)% R3+9Aj.Tx(Fڏ+ڶꍵ{e c P=THKQNyP r4tᔛՑ3f;4Z9ON'07~-6Czj崺+g+ QG9m"y_?+} L<~AM$:evd X@x|:9M)jDE؋HJ ^Pxm{4i4Fi^3$[M6Jn).֯a7[tTQ.DYR;kKt3tJ,:f[kY&l>}}_[tѧĬ g吭y(Eyw{iNAyF9œ0]luIϥd%$@j޲,CBXGJAzENut]NJ2g8|T`3PbdO7%F#qK,7'Fy_+p=ƽB+yṪ8m@ b􎨿1ibY@a8uӝpjKoj`X!`vk¯w/G Z0TKɓ?n{?S~ctD \QYv1?dvpL| (Tq&%֩<2kK` ^:dًJ8 .PbjpO{Y֍/b2PS :#k^Ҟ׵倮e9G+t^x%#}]fʈGa" RZyΪ=nckJA'mȨ\u>'^ +r^ w-mg˧#7]kdsz{7__G9܎5QI6%!x5-DS?u\p"kiFh cLRޣwuݹ[CQ[O0Rݠ6;៵(h;{`xZvZ4ؑHNg\*[vqřN~gB&ݚ hFߊyUDt)p({N+ D6M{ w *xPs %j`͡qD\ _RXW]_rW Uܔfi"2m 7"' ~ 츏`*0E%桘CO9~Y ;PD=88(\o+ljA= 6xk=I:x)BCj.|]ouO&y\}V#H:`;_73NjVՔrXLSCë y&("mbJ mՎ5^A3X&"QT~1ب{0yK=:*ywN(A٧3_N]֭p^A߲To 6{:.]ñ)@aBL-3{n1,+'om?'.$[&aAW.[rL-*!h /U~.&ca5`em: ]N[;#DU"õxkcƵ(9(o{LyӔvw߭meINڒ+IrED d5O )[Mَ f֬Yfgw7l0:8=<GE??9|`w7zne?OQ>>z z@QT&iU'eQЀяŠ^MZOzD,4EyxuiE:=٣?p, , ׾>D^zՊ ujapkfh}F]67 qUY/.pC2%cUϟ!ݘYE@6zd8)_tOn`j//x_+c`zk={FEM 2+qY0pRd_8+KIHzQ<!#:Q8K;{iY%Ov!-U D~t"ٝ U \N|Tբ.IdF!vQgAZ(.nosНN!FgaOڮt-Қ^4bGq?p_a _1"jxFr"᰿NGQ\:guSBƱA}d `n%1L Xx8PN?BwCx9F_@4{ ۼҼJ{| |G" H2yFϰȲM81@iyvUaW!"3AcV)ITS s$1pj[}\WIFmyښ7i BL0*_)q&tWXtBGHJD οOApjsD5!m4LRiE:5! U_=Ec 7d%VԿ-'!twXqmT?=}?y=yGɓ6 5 .JpJ޿?",!X.kOoo|\Ӹt%m6-6h|b كIs{Ptѻм?S Ad5Ou Ȝ9 󇝏bNIRa1\M:9@9?h&l7ۚ z(~ =)JeB,5Q<C0^܊~sKdhøbwT #iMΊ֒,"u*&Gog. z 8-v+@@h8G[ ?L9nn?ՁL¶n6w6E6; ۠({jP=gmWںM?K݆yhF2PQQfI Vf<H5I}$K~7zI_{D=wn$H;I)l2ɓNF dQ}qQRdeg^'zQRz/P)+,*qhQQFï.06 ;٦4/Lw,jftZKi>*!4³< ɛwQ`]i4{h|փ]`(3_IC cϤv7#UNw ލ" 7ZF"L/ؼѾQ;(k %V/7u"Sj}j){-_iu4S A_% qt/Sxb:eqb[%=Fs+wWEؤ?~VC==sR5fF#x6B9F3UZ*omc~gmEQ^gmV&YcmT@gf/A3i]&ήfC^X<-J)uن"KJ TK9߫\9&[]'hti帩dϾi8 om/o+%]{/T˧yܣGQp'_͎줣C`i"&<R%5_Yߌ藷ݯ4c+`?LG;pi>|,-0ʹ_4nm-wm6[o^nv fq\1f{P㴜M)v3l%K L+z,jkzGYz^R"u JNѨyhM$CjAs!uqZmC[p4YSmo|HY-Ƕcb.w'fb6GQd&IJvqSsC'ۜ|(-4>؃#w5vH6s.a[mDmm<}8"~;3j٘dvTLnY5Nnܶg IJIwf n-hROWx}SBڈAuFj9SJ&ȑ|:N?Tg#6<m63UXʠ~wM\֞|Wn6M;3']6 |zV31(&RoK3ݧnتX6*ފˀf]ATVIz8nLŸt8j1u:NE$Q.+C*˿E!UФ@C 柦E~Q/,+| AϮbIIM<`#ΔVP 3򥞿hB]p/0>M %J"ixY\^&V}o )F~R7"O$etњCT{?+aN(ph.j_Ѕ..^ڜ5X.k:grmc2#I9?J18K#V)v.cϴSz0wޛ&zfgVT5dv,2p@ 7(㛖7XytGW<J+Z<p@ii<8jMr?qe(DŽt@9 voGKިO?0oA7Rc@s"čz{v4ӵJnf \ %&"7\sc[W=|` 923允?-icjB1xX&D.ZMGiyt lTC ~|6ϕ@ͷBV6hBl"򌯂mqC.d|TnQeMdVcmiT`+;=O@$I>7|Ϡܫ/ }l~t+ }twC|8l* G_1+Ph(yE99H% #LG82αD|Kl+2ͷďW1;o+\*p ap+%X΍v["u8mB ,?<0l `>AwGm.u=lY[P79V_juPp@%ILKhѻEI(}0G5zlP@1K Mvl>,J}m n˺spB.uu[vj*>I:Clvx5f<'A KZnmô;i)amיok#:@snց˴H׻ [O TV_|״r;@.1sUPڟ5+cW0uPVɸiDuPTqMsW`n 1o,ͯŸy-w"KU㋻q W5ͷ[e -26pD/c(-u8TMxç;8౞[Hy>pS6q&Bp༷҇ 䧴f]m+VAeX%t֣;|9V5zQ\ǔ"`o)U1_Dc80βJݟ.87Q(ƅX!@yoh{#\'@շkR[DX$k""tQ&#ݿV'x3)j>c^4f_ꩦj:}%}DI*Qf}sLKR?^efI\Fb)-WP"_eǀt ?ճ(O3-ϲ" [=\W.нl_U'oa/(E/hpW `ɍpuU\jl{ )lda r w,pD}X?MKjlN EY_u?k\^1';n,+1N|>fF&uW;/gi;jФ3yE[]F٣x0\ٰ _u ݎCEJt7%m=|$iX".^eE<:k9b aNS:`k.V_o,CpsĀSoœhTĆYHPи`̐ҷ&c)2,F=) C9M\eǂx_ ?>9nܗqJj08NiZ}}{6h~6WpW[: lEy#{GӠ Zؖ EYaq *0Zwqu# REXKyOT72_o.@Ka{pS_qq@RLt}*@gKfF]T#w0hq0`djM"G+JMJ}?6ԂJ맡1/K2.ѵH6id}O}|\PƝf;i-XK7hޡ@7pge^c)戟 2ѯ]{dZl6cx6#0:Yۄ>p_w{,E9TnEe,j{kOu%*Z4Uz󏇸鈞d6ȝ U(L#-4qIqq(-^܅nGNIJAm+{ܙ3ܯF#lZ*Q<eS^Yw(W0twQ WhDݪk2IBH(Z jˢ`Q-v2(pub0e1 Wf$  NHrl\! ߁ҫ) 7iHa7vdtUI+zQUts~G,3>߅^[5Bn2^W6;PO~0_1c<'40,f :Êt%Pkt&L-]Dž)j[ 9Es@jۻyU鉾UˍH흙kKY@Q] /xâ׽Km|`\5\jeVD@x NhdE 9,;Onڇ?^ A;q&_k!2Zv!FI%n(h+zm`KvWg-nxҊnwQp,ͮ>Q0#jY,*/nrgq6FfA5Q辏˂B6@gXbnøbwLw<H-ZCrAsZhT Ϙ9ВLeoVj(>_tOpg+mIY0mIQD?( ʣ.˨KhY ?Qpo8ѫ_Uo@3-!{ YbxY.ZsjAd>c8AFi9vXF(: q<b^ -Fe}}%*`i@_^Ԧ٬,f%;6ac~1V\Q¡zDd1T)yA$"m(x,0&̢˶BP3žy|$Y:2L뺌&E&f~yMĵ֚Y1,}@O  n2?&i8IaZqJʪiMaMg TsǍ9C ӜR Шт)ǢP3Q׉RpMfN9hV- + k<估P|w9!MVϙtmPKdAa93<ҕ W]k7H".UR)j;s0 p7rjΆT o<OuUI"GMRFߐD{ 5*b+B: 5.tFK?ֹE#1.A^ 3ɌNkک#̓VWRD۝DKeN9$Kg/Wt<(@+[mwA(EZ*V@.Lm\kz9lY۸g$gncSsLG+2T"th'Mw?7Xά}b9[2w/})# 9wy,-A4IaI++G]9[t秣5V&ƭWyoǦ6]S==fHiVdA sǧLp ?Ҍ?=Y(KvX5^LL4Caso8Ū^b!phΡZ>k%KX CV+#{8bfld}Q7nۥ!7x~ ,ɻΟ4 "/T.M3M$"H\J$_vи'=']EwV[ۅ_ˤLM)xa gm9P /o'O$ `(4p_lppԽ@$Y"Pgt#pG']pTA]Pw皖0D0sKCed/zm@\t[e5%ˍ2 iAtBȢx+Q/roAlҚ`0@B!-ȉM$oP% K5Qs}SxcV(SӋ)-с@3A: &OH*vP_'<tz5^#Q"U+Hš6QJ|WW=lsƱBK1z"amn6bж2+& :8sNTL>1W}jqj;=VO_M~8g5(l}tי[h~}99XşNaʼnfV $P# 7ж'U|Bѓbr7GBKz͎wOպT_}Bm2S4契E?`T?A{HQO˗j|BKbJ"\'T%|RpőjJ}k1tp'f]꬝ZHVNAEp <ȸ#.^ح #Hfb`OM0I`V豩\ 3Zj'JytB̬9}!m$Fs!7+0ٖGX9x %H+4An=UVS-Z2JB?I G)c2g5<,`lUJRs$Nfd6[Ӂ:8e ?$iMhQˢhYYT86ĞFT=O]W*\ϚʆaE(sVQ@[%r& E΢b?_~_:"lLzV*`vW\1Y(/w)<;?c݈Oi+kOx2ds7iL _:BUyY ?&=)nvm@l†]tG7@`̍>"XwTܹ%bźu/Ô_}8RW۾5Ri6) _AWt!+z3ZTU1 s_¦`-RxF~(F$^{fx*gҕQmhN@hi|d+S?jI۰#JUqA_A'6 ȸLse-QRDF&S|s}cؾ'\? }k%?aM!=PB뽃SnYm] #IQ~L`"J)L@S@cP6|ACcf!)V&f"zػ0:.5lgR UFw0] =Wr';M¦j/Z<@[Uz% (\8*VS^#[-uDb Ajh%7PoQHŕ ٤^^Co1U)]PeTXՏ^mMG;l)Cҙ=TШ#gVZe,Q)n!Xm^wOJX!YDVEZҲTq}x$LScrLTVuGq^qH (Ͳ&W 5+j"k5B)c{Η+JɗYxKv5jD]=L%9M]sO'Zl9^[f2cB-\,݋qE?1Qec3='zoOǙ ƈ22An(!*'}\-ӵsRopY((Kl+>Isw*hB'3.|?UirzZMMeCJ@U,NpJ3Ho%6kmS T:vy5L$bZ=k$/q7" ! ԇm _K$+ZWX7>I*SH׳g\H|T}e o&E"zZvIޠbS d vj4CRK =:XW@O%:=1tG`$BWL>U!]7IiRny*8F5U ^Kn=mUPq# KO4Lw`Hnp8,3]+RBٟ[%V-{hJN#mS@0*SKY+un.lmӴvJE j+Hy,ŕZsq6&&B14$JD@zd˼ W(l}(rVT=:i[/M?Ц/fqkJ}FvJV*Etiz j)KP\[&K@RQlTyB+b`܋ޓơnZjz[\T:)#`UGK JG\/RlռTW^YW\EHؐ TB9%1H"%,&貙d6eZv/\5^&%SYMjϛ[JQ,>gYk ԗbzpXc'm#k_)%` _bL,ړ=:[~<.B65NT4?obq5^j #h$X^=),-A&ū9{Vo0{*g٪A#kJ1 ĤA˳ߑ5o) 1[GkNCmڸ=;On VJnxWyh;U"~r>4Mq :)߄]* cYs%[l+J E40 hMb.NΛ/^X݀'+} f@"-޼9nFGp()U%ð\L@zA+-982~VIAbZLP%k13ie[&j)dI74`T6](,|.V8`9V@%e\ZX ,xOA]{:y@)1m(5)clbaߦ!b'=PTK)\Nȥ>.KfWM3=u#YI ;ؽ 1Ysp PֶiubzlgquE ۩?fe LmSy`]-~GoD (l:Atj])IwRV_Krŗֵ, iS L_9@쫔.!06J%)$/.dׁnSl+e53Nfר2,$ϔgTw_b'׬ Sg:tZlY\y<>\)or^LbqnNdLc "fÑ;Njꔥ /9^%ن^*9)>e * ВHœ cT3[1M)%#T_׏y*0ܫ앶גnkMW uiAs6&c]p)Xu n[m$MN2jz=`.[|vh ctUUl $pE+mu  &4pc])f̽p&0O޿k 5%wh\RJWqġ*9_π{*+GX6R` ɬlo)`0c4وP|d1-]eZ t lInow6Fç`,/po|zRcs"-ǻU w >-:At7 xl.ޮ 0nYܗnp crSW8 ~BXS%7 礨fW .Q\{]4,jx21C&TăiȿRJ&w"Ǹ F48O͘]3Rkx d#OhXق4ΣNO1[k]р7CCшo{62), a-LRj@|c>(EPkvUt'ż%1 'r#U)H8斷a%)s;*?),"#PZ*FvTjtS.B +c$Wq[  0yp<I~%}(B[#u]e5~7ïK Dj%߂RnZUh4^8M<lO>VD.j8𔬨Pf*>W;wړw{/Nn|NFSl՝Y7Egþ֕(-F&7A8*Fb YM<=F_7ˀB\HW#*WD!UVi[8M#*#~$Y׉Iv0KD e(uiba>8ιUھ+,߈$q4[?ׄ:7P81(z-@ac2:`Fa9qYc #If oG`:tx@l? ˄ 6ucR `A?l =w^6/(t~v[ޜy +jaߜAsU^E>m4SF9""^ቇg5r b1Dr"V4v1O0.ٳMC?񙴓},OHuw=4c%UDڶΛJ>8oFDw;1G{Fthk$RQ |Qw|-C>=7 ?mge~MҖ13@?В$WB ]PyU>vwX |fKw1j2 vU2@1n7۳Yeۦ%̥b6H͇:C2MgDANYW$| 6M]ƛI{D,^ x9ttU5(<Iyjx5i_~RB~*=rP&hi`?܂0?Ynb/#KMaf%UD3R3u+&^\@$^-4u!&!iRMēO+tA>GGYS>#[N췍N D[p+ BL/1 0mܙ S͝=3"5IE~yB|lЊܦ<`B)#F8QBqRQ^yRqR  `P@nֈUìcsl NYPڊ  ~x)Ó ԍ*K)qXԏ3=)MPY?-v.lhV@.|'ZuqNhscsayR]*&""g"QYf#siQwk L~dCO7cMV4&Z56Qd+KGp-315XHs㷲+DWz+(՜ 0p yJ,&K O,;އ|6 XT\nb!<5]T)4M T >vdt4”:8Ppz^LPD`0т%oLJә3ϭMHN.ZO1J>NELrJujYHQziR5?:"n1UG*Ec*n0&Q{3XڌzNJNRf,ˤV9Z "J7'BʑWV̵AbZ~MԢ}]u@^O3O$@"]Qt 4Pp EDMl#+mY%{De(^B#(.|1/W&p%r0}g\}!ZaD^f{F?SZrii\0}~bޅ&#˸:̭?t% p e>Rb-?GaD41:TЉr^̜Ȇ^nb~W}ؙKӬfaq _ԁuC%AQ{FZzR{&%ZXEzԇ>$S4Ǐ ww9=/F̺m͔7Q)@„1_Ջy>T *Db)8_Q~uZap~L*\6ǥOj6Oj}٧.JS7S.TсR H+Q(靺X%>`N&*rY+FcF%{ݸ5 ! JLd\z`9.{mӦEwvk㗍̟:rqИ?M|%f uNC"QzVm2U' \:R}(YW) ~Uz}iT]%LO[й]_!WchdRnʞÔK?7JշmլJY*)^ܝJM2Dy]xgNrZ^&rX~Wīj]ݽLGT  C&PA L+\T| t %*r\U RHyTQW`#Ta%kI{RS!@>]$:Dlٞ'u"0~CDb$q5T2=rmqY j oqˮC=l BW8Ҿ LT#91P2]A̝5B&Zq,'$(ka Feo1w[[S;=^*ΆH}L΁Ay2wTÎv:D `lY`F] 'RA:1π<9{q0tws*)iRE%r3ȍV=l6Iݎ )|΋Lrͮfq+*L TI?I\u>u-= sJ]%QN&m؟z*.+CV_zS`"ƞ6NMDRdH+0>Wm6S0}7o{U("Gu~2eQ0 `%(n˝ÉRCMq:{TLWW9+7ūZ*?:)/ %}G{S 3 3 mο3yQ_8{JF~l>,ʤK>f::ܤT&ygĒWKzk=ht5'~^BuzL]e=x SwqxAŨuRL{ׂj^^  z]Gfvۆ:WNԤΓb5:Bט GZT\՜d1Īcs73uNuu"~ӋE;Uk[[ uOTyզ|Ό\w^XU1aUQo"i\Y8"76i xBk3;÷L5&Xc3ӛk@̮vIvqҜ/o$5Y[[ G2JNOLKǡj(A)Z,us}%]{tK PSnP;VIv<;+Y Pm:isۛv$#O&y-N*RY,J(?&C ]72Xvc>+$ZWBHBcP5ёqx\~7i0O3)v:V6T4PߙEy˒;>Krzφ&<Ёj6B„@F5Щpu78&}LJ<9?:;EgGGG֋&Ghn-)~◮tgh `jv EAHxKѰc6 qډL^~ْTEmyvnuPlCIl@ q رeZrn~L1Mѡ ?DN.̎%*v?nCX$S|SI'N/LSԶc1LhmԴ2nzSjdx$%έgOUW tu;c98ѷb`u,}Gt mu7{Ĕ56D}):kQ*VWb^wYMCes,a %R҅1gF8I][_Zi"PqcqNjfБ?@E/"r7X f&ڂu3`h|k] ^NuRu̙3?|nC`zBvu!r v\% :a3P &Us\̖ti1C/N6`pQzpue@v_?hD &Ȣ K\ H(*8sp4 @>vc8Xwes *Z73-(5cMkA6-uɾFlD6,j B#9i PFl ivé[% 2nZ (2_ZcZ`iKnѬ266 Fǝ쇟-YFoSD CG çS :ʼn6HeIm]ǤϨ W)oH.674uU%Zl#lbLe*[\>Wq\{X L K>wVSIf,b, kk 5%5ce|LS9Qme U"juwT?ekl5uQ UxàICn_KVu3͌P6&#[OXsC~|z}bz@~Zw+]OXs cmroGc--> {&r=tlղ>i;7̫){n8& ֐cRR䩸u̞g nb] 'j7  N67dӆ{xy^pqCIŞ@ /(KQܦ=eM|SƇ< _ GgԔIL3M_4Yj6d֚)>bYRۡztu+SX|^ԮPE7:70tc;[ 6VJ"TJHY,^-P6iJ8_"0-Z&.$,"vQd}QO#(r'H+D%g$3(:_B~z/ŷVh~s9XP,w:LHre<.}y8M(gn r;^+az^]y1Ӛ/dZ\V6 ~Bk4׆OAnham+jp٪ {nϜr#뢪/d%ua]vi{LA/G]:pv?Ɂ/}U }!˜^:Y"K$-aآ ]O|} /l",p%"N݅8^ҝe73kL9"o,^ ANb7)5+>Z#u͒[ 7;9w79^'eCe:Y2yJRjSnGuZӧQAt'2;(P,._Xe%N넨Z \-1H_8w_1jV7CcTCž)V5!RSyOZz BݡGg|_t'xqx^ğ_+AxGH$ݨ>4 ^R9hL#QRZJ~a]'$ީr(OC2 9wH:KJo}!P |WiRq2{cF/:.S^?Hq-)EdW|4Urj{DsЇܢds[uh6gtMΧ96xڬ eRke2]~)*_npj^STz /sL3|Ob3{>.:ԃw2i4Isy)wf= lC,"M{K9{{m0_SWguİ*D)%z`ll"|竛/@߆Mk8ɇ HЈRFDΜ'Cs [F.?w:'Q77Ce(V=ZU1/b^k[oc$+ Wt"x9^kD,٤rh3R%3Uv>K8~S,!h Jv+O:DЦi`5@x7) CjJ 6|C*-(5,HkcXuu[‚b4,7Ϡs s4GQm:ݎhҵ]Dߓ?_܅G'D}U}^w$otݷ„swcpH\P$9bU|mT6@qVxnS/;= ؾO={Ctk)+൓zlXv1z~yiG\S1p$L1C6oQZRVtp.w,J\|'^yףp1+!Z &^7yu Sh}0HwRl3 8;;wDG.b3 ʷC|pXaܑtf1Y.q8 6Y]%|%9 i jZ5 [wp'mPxO(LŹ}FRJxvw}U/ٺ00|'F "Le Ϗ.>::YAe_"=}ҋ~dt6ѽ=}BOZc e~ɉyMtrNv6/˾hT@~04b,?:]èT?m%K@vYnj.e :h;l8̀xTŕBc~iq79>ɰBY܁?1JnOt9qO CSGj8lBp<7((Bh| RsmǫHV$_v/) >Yz&XUȎP{l q9kC!yx B74 Ј{ ʦa6"5ss a\>|fkH1=XIiv|!&{&o,t<7f"5x(]BMgTWJHr ja\^vУObBaD6~j`oYJ*zUkL~ֱ|\9aiV5:-, K ;n6hypFmnu,Bt†Òlȳ "_Xǩ#aB̺d7Q:+ㇲ+0*JOÇ uTO\.]ɑW"xcr[@{91ɯAׯTa4FooPn""Ǖ_en鉋$K^g=XB iH'|((FDž,&v"rTaqF8v@ er:ݿ$Y@ ߏtjI.V:SALKɌE=n|a@&= JsYȡ5 !@}|z|9N2N=.6LYm}0fM-w}sGLnCXq hf5"rdQɦkV:Uaxbgj&,E3wvzܭV<ʡ&̦A&|,%N<b8UU58sԓAh]L ^WQ+ DC"$ďŊ%sdA-\KGZYhAS Dt*B_!Z2 -ygOMAnGO1(zI:[N'SQ;V]raUw󍛪X1ZUBqe9l s kUcM0K%Fj+>ϲs=@e9S5;P9RC?/!ȟ0vm~'T]( fe4WH k˄)I IAJ%b{Vz\s}#_0" ܌z*77UuYƎ+S/Q/,C5`/{;\ y?%DhI9mթ:w{g)e6ng7$:Ej&-AWz7S sX;"y*,C֓@**s}qvڽ. peYgθ_ywYǾOny BO;w`I?b`J=k8T::;j(S1(XL`|Ӧj'_n w 0ޖ§+ =ڨ{sr|FScڈzs +;һ\ihԺP> q, ?F%ZrȼrjNq6ˡZ5-"2Bmm_/w zB$.O>? O%l &t$BE؆>-SDŅˋ,(!TX_dkI9}u{:;U:+]8#X6ȸuk/nX]̱Yh)뛷QF4$}se"׋-JʭRVInW̧'n|{#Tɧ;y2T4Ze s ppO=ssύ}ѕsy&uXLeѵ@vv=pxiRPp2w_eXInq%!xe =iOv rË3s ۄ¨dش/b¶|XjkH16(d_pQ~91oks@*v]ٹK" zޒFtsQEOC88XwA͖XW#"&L%_)1 dI]VGM7r t0ykh}ʇZ R/*XDNjC=yߎx -y-Dc?ZGjT2=Rk4q:mZ'YI'oYHue(8p>ӻ >WyE?*Zk\A>x})9C8>Mmp>~`㲛Q4:^rfc Wla6ѣAܠkٷ"5SKݫ&<#Y$Ht?-λz06*gqro:#+{lSlNJ[;PϽ[YK,j;36ϐrѰ)&+#$-o{n&r(pu_IAAmJ㓊Z_yսvClx5k=PG]?{Ƒ.>E6YmPAdr5DҭE>^^vHY)Ϛ9 QIN|#3q.5=2#bǎ}]5Ȥ𵫍xwߚ%Gp 3Zw0hOZ!&5\թ1Q"2 r `ɰ8]t)w x(d0ǫ4%Zji>XBߐR _zzCTy|,W}R1.zXdesH65QINdШ]sSK͂~I5o>g)8뷝C=If<> n'ߨ PD GNp>FCRrf]BYu{wQoR?Njvax:xȧb~{_۫_c{ŴR?k,;Z]gPXޖ'ao0< rڛdc5w32ۃ=~ z% lFmFudvMSlCHۏ@1 _HvAݠh>0(àeU-LG3bŒ s;FՈm`c51Q<lb,BY;XVe]d&ml\Jԟn쵫%cw:XDQcd#2WPsJdzː u+&:M5* T7ėvz1Bﭑ/ͣb{ɤ:>j䉐ŜU;8Pmgtr4UvuABD ~U:ߠHq{``9Vesn}zo}Vo2x;m0eB5HWe(EU;g[>+ϻٕeW5h`޴V冀邺bӐs5fd]ąoNDs~F$ ]}USqƋ9A̱ytZ|Ћep}R6VTډ I. &>7N& @Ӹkc!ɖv| 7Vƽqpwm'|0ziZѸ5wgKT)K8-b\I+_[2"Míc?SH@[LIX= ӑL|Ua9G$G"o:vh9Weh / BŠPNꂻԕAƔRSO$π9_P+CZj?h@J g!L /5TSֹ_eHE/[^& ^SV xF*3*i4:^>-踽 /C(F򼘅!cm-:|`DžĹ \h6[rHA~n.DnӢt ;Z=)'Ǯu]cnfV[ă \:t[ϝ&1cɐeV}[m* enSWƗՆDR1 9{~)dbUsV[fN}zU?rI*h(ٙቁḯ[ HUS X@iu}m#ݜ}J$.[BUIL[ڙ+Z,3lbN {I)ˆf-s֗?x 8jO %(IAuv ȞGݳyص'~?o4oF̚cwD;8z ZHsTo| Cl7ߺi7~^p@c΍tlOYAUG #Wuihe0;|%_0%:2}S-UG6:mJ|V|vXztݺ'v2հߒ'PT+IIS$*m)#I,ʗ{j2FrԤw;U{{ +9k=np39|㗲u=vO+_;<2 X^9ʺÞFhw! j9Wԟ*zY2wIEu8+++].{ ZfR-Zi߅\v.En}>{GHhլƸbt>.4q-$^-w 5JHr{nYqqguitg+}t={W=&;9D3 C^8++gX=kFnRyE=bWz){\>MF ll, Ac}1e$Z;i83oFS&l#]k.x>Ns1l?bV 4[x0f{}߈걃4>wxJ<Ӥ/NϹӿp-&b@ODRŁ?iɷGg_JO?}zg)x~rx^T<Šwg2斿dC MC{Y3coJn?0?΋E}^ h5يfFQi n]׾vq-՘p w DmG*c^*szD$4chjnq5ze͋c6Em,H$㔽kY]){=h2JoXxҀU,-,$YW7f?uKPa3}J2*ĕh4$n>uuk.g+Uң҆#@<>Щn5d8XA1q.MAx{MuAۖg#bc#slޓN?ԑW,*Qf8Yg3xfͧk'M;RV|^TvVʎx<|^@>m?7o ԯ|{nYkC>,"Fl/ʴ'*>ƺVYzи:a,-<6S"MjR|#0ڜ9`'sswSt( әO8̓/=%W~hhkT['s^{1v"kN>ؽftFCO&Ѐo]N F&+,J=䏖eV6$[ Rsy}' M$JM$ 1Tk<@'ġ>Q CD$Ei |EUȓ=|HT`xe|1z ܁&&䊽قLD~tny"Kgu>VW2z ?x.6yˣ:men{wu7[XMo5@]@б dgqgs\L;Yz77no5ݵ;6u)x~`1 ;HXkWs#UWp2s n#҆WHuWE_~6\"mƶrMdhDK@6EmlW;!M2|ImχB*q7!l$E:PPCdT |v5?"mW V}+=V'ryЯ~M9(̰>z!@n )b缍R]齙1a0~@7vd7LQQh}܇]ɭlڍUMP1i ]i\Tgqm(T>iB_# CAдa,~%aZkV3a9 Dp4"§gn.E:MOr?46)FpkGU׮g7kC OUMUc<#S-fb3=qob]g/nyFM9*÷P݊ދpͷaW~ջo\ĕi,vpJ&_O)tR;g~D[ZO7X_/@tp\A?;_kŽҹ7MS-pEG7#;b>T+岐"Wt;oQW#kG]A+j½VJ]{Ƃj0V~jyg/mq4! G3m6a>#?È al]CNmŚecSZvzq)o7y7 `{4%eP9nZwMj6{.iv|&S8L-ig6n_fJ>s_BYn{:{Ťl⊝Tqz[i-CW5,0T긓KPțc$?(${jmJTb!wR0IhaklVx]=oVJ꬐5lfx*CWd 0'7=Hׂ. D,mgwy=XGcJ~HY#bB:2Сl\׷|埞R!+1soיqÈLڼٽxƷ̶"Φ:,ot|Necrײmʯ*Sn,[T}m3ݐm!M%ŒΆuo&h #Ѳ]~x6&4'l жo詴MsKvUEJN2*o䋤MT7Yر6]m|$ }9Y?4* 2XM7D7+WkgU,gXj$~&eV]q]ѭ؁v9ZN$4[6\2@~3wB|ޤK>,YzDpe#Ktǭ7 idoUTRWPݻsQpp }u& 7JXκεzjzIQx/n3iGm85 `zP?d\\'>-VtY2 y1za^tBE^Jdz2-Vqw2*N@gUYe~cQt>'f#[I 7|DSz2-Es6"VrD[|V#FpfΟ4oEzrY-:5ml jjO伟dhK6yxZԏͷ0(~Pve7\@b9T _}7GE9t+[tx 7 bE7#y.$obԫJEI.n opk0yO$Wqtޔl {^rwHP,Vu'_{'c1F0;W>zHpEyяo6p9PFpMŨ?\̈́3mO\甦s1p%bun Ogiun֠L8ŪÜz 3^=8{Y$WܑWX\W&MB=>c`f$ͪ*^.V۸Ҭl[j^Wmv;>ҴNVY/wFX^p}P.v nLcA۸k; itr,),$mS %- bX㾭ُu]/RگΞkNBtݾß t.=u%(Us]́u#̧xu._8u m"ƾ):Msimbm̆2M~@{opS)چ[|OڃCk_c.w]5O=X^&{+y@˴[kRMˮ_DKĺ'm\IɎKp:V\`H蟓OXfa6 Rn$5W_w HQ;yeU\0e࠵Pgj*,]*3UTQE`>c뮏7k\=a:-RD;w2zSmrEI!Lp; ṳ̑lUNs^b4prWĐ5 n-?/Fx[+ Hш$ 8(jv~|p ;2d 0iC" 屟^N|^'{ ׄqu`yA~o:r4#n { ȯ߻Iޓ*ˣUUΞg-9yC&Wr.E(Qq6G^,FC0}wP9sEp!IҴC*ԓnDo[3mjӤvjӁ>r@S"Wq||_פev<5ܧm/ʘl7$0nF1 .Iu;,Lq'r;Vn $b Npb7PDc0nDOK Đ0 1;GbT5dE"=Ns(F>]G.:_trr%~H9 -;(;VGV !* \k2jtn+zFFHEϚ㸅UMεKo@x#.Q?Piy^7,wԹ=xEhQ7Mrts$dEgVxE댁ɗɡFb51-E>;x7#-(QUaFxta؉#c%ԭ4sr7y,H`05Q/Q-b/+\_nsLaD0#Z~`AЖ~8?m W|Xn ^!y-9Ac[D7!BYJ^K$5dF*|D)ڛs ?5k]9+`+zKcU\&]I95nr~,Ư3~yjm2PJO#tئ{Iy:t%sE)uԁ50suf"!{h}}28RS"- 1-Jwo岇r׶=fZӲX~hcNxݨhy2: ؋R(5aQ˘AeT ZtVgNW^'@ 4j }l$?C$2+!#+1Q"JQJL0-X76%/\QW, V7De :aݽPn@hkX1/TyN3 ,˵!Ahf{ 6?YRg)`rQx:DA~F>ŠyNJGI~tp|,]LE9Y)zHKMS'A$[&z޹K@pjy q{Mq}5*mE^U#wT{{U?'#7 5VS-"h3rZ$Hу'\ݥgg$T'ăy^Tui3@,f/?A1C|CP0Vяy({ KA:8 &i>in>.s\. Bhe,1Hx peNA'7X1|jE2 tXOC(LK#!G!2:;K?&`]%<ToSf %LL/ݽQ~cg 45(>vBzǻ箃F G]^Ґ5((1}W-7 :=UʝSK냨MMJ)vq”U kvpK&GʦkV ǪxIVA5c;toGyB^ R < ah}I^eQ#ґ㌝-ߣF D{H~G 'Dd}o$J#zO~:x@ BS]TC/@KȴmpRE{a8??@x  s;1#iQ,x'VsD#yrvwc..zNql=Nt`n5覆Kc'TѴ0C`el|fiv)XD,36f֧GdA--z 6'0uH6-(m'ݥ~ &'"AUH?k"*!@^/ B%C07$5F/]  F==4ny5fYÄD3E!B$=O<6B}r{$AT3;@s=-.Tg7seZ-O~]R7ejXEAcB>6]}B/A֭2Tb50{dԝ,' cΞ(p|=\9%#8q&sעbV4vUw- 1Q-GqݑBK$pu3=0Rxa.&Ntx =O'0|މ]Q&_77vxyzpAQ8bU{d#SȊ ESr`ҡTY5-E xc)Ec-1EڕTIRu1ጀᐮ=3>jҳmՆB425I$R >+fK$ riA1x=Bo~^Bm>`.FP(|Rq/ɆBφW5;YDž0 7g2  t%/aecg<Ԫxs@]w\Wl>Q4 ˈ'8qaxAݏ`{+V9tF󲂠x{GiY"vX{' =PqpSE mNc>XO7uOP/@9T:gE2%ӣ3T&ӂߪY-հ$[JE8# #{URZ+ֲ%Y}凶@e6FQJTԧ5B_n>ԓ|"?gO` ͔an13#2~xAY=w\ݩ;`]Zp8EQ=\De,@L?)`Nuɥc4j1y 0w^.Hˡl [1j:^_м , 2TYGn0K] \ dͻ |9bճ"# oZ҈#te_.)ᆋf[ Gy fdQ!b;*'n8k ,mG'ō",TK 9i:-gĺTӬg }($6Oo޾yx'ɽÏ~2Ls2Ҵ vTb{%?ٜ2_c?7YEu! 5*NZjO KَuDZ@j^ "5Codױ "T{ت T6!Yo2B!tg ҧ?bZJ+IzRg.Uይ'>ɲU&6Zɾb&ÙVE{ eMw,q.g$ɠܮ&ix O 䭢ha'ջ"+Vy` f Ķq#iAn[vJGW7`?3|j c/;k :tt93)tըvmeGFDrѥSuq<%cVJn,-{C_d`q[j-р Òp#z̃T/bڨv A,QVC=CB KpV̈́y !iv`NCX]"R¥q]+t|-FbI[X(-jd܆'Q5ڮ [J{Zcp{PfTvUpͰC^{\޺ְ]2>8"W(eV;}xw9{P/|-?9 99lb1+Ch8,㧇y%4jSڼXn/.B]/Ƭ-&4'wpY~b߼(gݽ섿*oۃTk"1+"!i@¾+d+G|O59Au5>lv O>3p_׀#[ІGD5 zLQxlx܆L^4 ۳A<7Pޯ)A7uO$3KS>L5K>[1TҼH#g oK5JVvhl(X"u af-N,hz }v&~"\}M6T*GxB<Ý'վP"3Z07 銠od]-NOH ѣ˪o$՜"GO7A*GeqL"a;rt{I |5ܦ2mKNqm1+fe:Nfhvku }PǵP 6ɬ`Uҽ3~uXB^kANռ .7p[}âჱB蜺{"qsdpYgwfVߴ=As9fd }>/>Ȕ:`PG.xN<1/Xb&+uj/f !5ucR{:7th1xl>{3rJ݇υ߾"S%(rwΛcuQr֭wsl=WpHzKA@{(J㾄Iia 3~,W^@'@KfH}R!'w4b_DՇ9'iDϏadeۆ891UѧEpʼd߁lT`ٍD=x$\MiՙWÁM;7 =S uUl>6'^8a~z<8c^D_gI丢U*͉wk(0qAvޢ(F4սsȿB7`^Q7 I=)b=RҢS~|v;QvOAЊ^{Fduw."!Dg]Vku\[pGF&jRrW"v?1;qn U)il] M$PuyG ^GneZp_?Ѱtk86MbwB_#wϲ85A9T^EZ< / oh-94 6aW |_[Jh"1>y&~ pNM#a[,Gp]yHT:`lNaظrnchENR3M!I6k\1*@г|D"os?opm -zڢvO5$[%;BDT>88'[F {}tz!bK&v>|@vԞ731#fɴ=`!4Bc2#w8l98=E8ҩuK9itQgY1y1nM+O2݈aλytݳ!ˈ!6/Ud!/m"pU88ځ!'#gDd! {Vт꤅Zσ0(@vd#CʅzQӏPrjt~D\Q|)y,/I;xPEBs}˂b]j>,Pk/^uѾEzSVl6 L8mRĤEihn:mN;.^N3o hc+-gbDžVVR!'>f&󡙤" h1qgE;TD؉y4 :8ᶘy Arp[a([@*xQBS4KL5s*.DGԡw5Hŗ=3F;#DG6H_b"4 tm\3xP-gXɨ̧3\^E}#7z9Fm\MWEhG'+@grnn|!f3tXXJ3nRUDitBaqt۴,Io;-1+t)@ L_}XM4ԭt1qh ;^PŰ(n>%m_? [+J#B]E@+7Q܊8ܳ|:G=UJDyznKzwk-1&#SA%$v+7 OhvڋvG'4Z*AРm{vBfD_s>jL~e8A(4 MLR33Jź̢ Wv2j}APwWtVT:`D^IPI3fP O0ޣ)h@NփEtTl{oDԡ?3)^cjԏL #R) Mtb* Hq?ʙ Bz=I'à6m_r \JYJ"(N4R(SgN2,V:;Ar4ɚecuYf)dǔF*=f`Kxt+uo:'M;U8}5V {B 9\@҃GeYu_̵W~']5(Ea^Xʊف]øHُ={kG*#uMf<_P9yȗR_+rP-|ZtVLQ[NVk!e0làHL}\B1[DS8ei,|Z3k:ўlf=R*MS~(s$rB%; ҁ%xBLUW5us~lܨjU䂐VSģ:[4GAjAQyz%#@b \伞G>U_VDWK1Kw,CWZ:XpU5E֌awCaepGQjb21qgc|<r}-2k/Eܾ偒"}I\9bc1$3Y6z)ʣ0|JG*@vs B8w>/Ō9:wY4!ȝ$&495.##*r+|dQt9p|_C)2=R=մm|P)qkfXE76Ps.tB15x)yA&2kLGV$&rZ9a5ye+Q9=5}[P! _i5ddP~5_]fL(0g>#ZE ( 7 tM.on ARn/*Z](̌ TpЊ_Tߠ$BL~!Im%X:a¦MN3ׇNpv&3I~VL]EROwtsхo2ْV>kgnKœL:A;$lR1ZNe; qyC?l] K/ C?e<{,ȗ{'qލ  "nɓmu%Q䙕x,ˈ"Fw.HѱeF<:)sJnl)HOe!2Ϊrǻ eiHfbJ^y.R>.=ڵ+1JOOͫM-E9 5fʡ׎ZI韹^sI?0'Yf m7Pxy2I&ŚOt!sR\wo\QA> {% )n ow%;0%7{a~mg2#z]NR|(ﶹ+ ᒬ>R>\W]%:>Oad Ӊb9WLe͘V]SC=ǔGAZB`EAy-ˠS KI8]xlZm{q6X35I A0'ྈᆋe/*r`Fve';h2|쒯 +GA4ySK :hXt=C)R )FA۴kBuW ]Qe4-ϵ[qA0e@ gAT@EbRPC-XS/>/[tBazR][+RlV#mN;9enh$%'`FïswB ⠑Z2NT V;؀e  bD"uH_PI)4)'QpOsww) u4Tdx,8^QZQ؄;S'߹vS2#" dY*^iUrks|G.xk!Y؟Q4h$=:^Awp 1Q"rܬpd0CwFU̠2*Y4wts@P|JejU=y-ɭgx4W1"D=j6Gc3z? -H]IJF'EMT)Ws|qQPXSPv^'ĠU KCB ~s}Ɨ*IE -jR@,U oXZ.=<.Gk;tF %XgN~*8U h8`_k6^*izk `Q PtB $8-wM4ufceF ŝ[l󕍅A0sg8h=Ux#_6լt}/x{5P'9E]oIqaȄqn'îZAh*5x0ݟ( OmKt5Ub'J񘌍HZ:-Fd4)-M*9Ug.EFJ . H_|G]*g @! JVuGOŔ?#i,2},s3NA {{֨7 gqjm܌0VCFJkDef"^H팝^QbJZ.CY8hF'G|kGSPhTs#kN4 6,a&iAI DLBGҹ3]' 1wh-H 8e ^݄|p o.dBr&C6ϊbi&J Nq~#xp 7]ς(F[4h)Z\5N:š]Ey6}k ObzeA!PW4̒g<~B=dh!$l|// y"$k;Tx0 {ggtU]ŭR*˪!VlE$FՔL8OpE[A(#f97y(\LqylR6`T94vǻBA{h/5y}krYT*fmG*]djwO.F:Qc+ݝC#]{JQZY.Hs(N-S®sFow*Ъrwn=$4vޜ]@:DwAʮ6E%(>$TNImL2u)ݫSOo *I2FV9h)뛛 wr>%O= K,R:Ot<WpH3ly݂̓M&vM3^=[7M NtExp?拳Wm;q豑㭘Qrˊg^^D_ņ;) ?𙻕u=8<*GTQ4İ f"ѧ cHJmg8HCm#Q1ctR!1Ƭd#}梜KC?|<PKffT2+oXsn Gcᄎ!TaA-zgX 2aZP?g(q):t*NFE1 ,(D>@O/?W@lÀҋ6 ^2 }NIuE~5=[u~sK PMIwjдQf4GyAѼ'\Z2 w{-NI _ I^ }Đ.7XGޡQFLmN%Hx)כa?Vfp`D]WN?Pfa;n#BmKT #)|{jD}=aG8WdeJ޻=pO4GuA Vu {InÒ2лkC|u ?0!&I{q]H]En^%/!#I1=v;yY79zTE{;m%y7sS˫qINi zqp_GDwJM)n|pԳuC}Na7o7?)/1cl0`,@‘%w7!b^8 sh ;݊3o~(ԨŌ[AwnїX2⏑*"Y K8B$)^DZ0Ƚl{utbZЋ@:qj95=sפkfR-h_X8op_cIݹFNuC#wgCEl,!eN% Ța(m6݅u~\@-'g8S4R{d"QRYBĩ@[mvckjimQ_LF5>Y2'uPvwT@'eoHz RчR i*4ZFH~!yN;4Xciv-쵔;{]0v׻0}KvƾA b"K:&XH]d LME!T$mSסZZgmߏ q ]cׇbln0+ |hy."`S1􊫥'"!ÁLGgnfT ɪ|$}H/dG gfժ4y+y[n߹;~|v݃dMNLhqM7tu{@$1[Nh91&6ZatQD &9yzz֓1Tkl*Qsog}Vͪ/bXY5Z5TFv-.ȷ!;KHp(\pГC-O~3r`]43K;s<$v]V9XP~*D$rY Χ3ʽCݹ~PN@BPor,[5VM՞>u >r{OR||FRRQ `۹Xy7]u_-![Lqd⯥ l']]]>{fYS7#y36__me䮡jc:"&x;k^B9} l @aTv^hs"X G~lϔ&B)L̩=&'5KU3sqXESԓy1"m(A4*cPr#UQƺ< ~ʞ=t:D90hx ` j6.fvrEܫd?d\=|tRs(r%C=r4Ǟ#g#II%a v*U^kPa8eAE;,=za Tˈj/Etiņo N fW(WkKV>֓UYsYd`îso#[z() ,)6G=:7jEbI+Tt.x uf^. u(|30U:(.*]tq}..U"RJl%C$A*k)98>k9m\nD@*|D"l6kW1BF;|j:fR^ԿBl1Ͻ2;C$(uU>)ii>M hyjLXjuY/ESغnؗK- t,G3c0tCh(jzϲ FWahI7-L];{҅K?{v62_3%??ey2޲OaxOVsS;O?mWx%W|W@*¯ɬHezxsx"`KOT >ICQuX+aHk\\Rw˱Bas?K>WgS-I'G_g[lg}YKϧQSg6^r)zENsJDHF5PNJǒK ][`Rh,Zz9:?pqC,4?P&jkQ}KA6SBW! ֐_w . V(5mgK6Dh}ЇHa)k|&"pXAW'" k~$ گ,ls +;5^wr{&5DnO" LfT$*ueiʁ,$a]riE(U$'TU̮LZ|*;"UQX*EJ^>#)6 @Js؇w͹T^kQ] j(duIrK)&4+qRS!kr.t!xwpv39 ֐ RvBfǑ*#vpHeyJxxVq=9HWޕؗIO~ ^ί~sJg2$PYw|eJ+iH)y ܿ>k69ǃgi>NlPq,gzNs 4;(vNX[$Όni0>k @[ BDzM!0HWDPω=ZM& @{ f!r@fl,j"fOǎmʵ,rz^攓VCƟF8EIlfZ%|V> y rtV *7>>K}w j"'}.Md),IuW8 \P3&fꈶ1W-y,khd^ٗg&3&̙^\;i`S&Ӑ%sOɔx 2% %vMaкhkDuZiaX/%LnY-3x=InRojb.UbNJc,/{u[,_.F|}v<ϓ;wOT2I'tFD@RԸN|MА=&NC(|uXjK`rVZyA-Zw(inTZᓏ: bi-bn-S#waGZޞ$d>ꗛ'Bj. `ڹ9tڵ1!g.ԇ᪥ Ag˒V+ӎB?Xq 8fCOy};ٲ>8۰ Q߳W)]n9X=زp@O40u;'We䓦ŏ{_~\촂T]6eMZg8pj^re]LK!uzEj cw136pQxu# =oz>G9:{:pI'.DQr:vNiXz\Tz:59%U0?[bѓIJnB!xˊbtMrQнg4~ ąISDw@Z&Q hL[ ;8Q}Կ1Խ4T;v0i;H+h \>e#ol67bܽ6l:-{O3b6tQ n{ewj~rPMI]ߟng#z *eFF.9rvORYحj0$+ 'ү{`v_wxa=~Ǹ ]K3C6pp?yφշaQ@'kLHZFbK9hUe"ׇx$^!`8flA>bDċ;9*lV#&}CA%fځDꝄXڸH;:**L\XRg鼟LQbRy篏}Յ-0əi+6 ݣ$},xfWZR+֮XR t54"1gn{gH ң40r6# !$xs٘A>iIuf6$$=Yנg7BD:fx\YV=T=(-DnB ꈍZs"upB|4 :1g5ڦM9fX.4h"J{ a"[:0 *5D |=_8C|x/ӂWY۸Cn<LF«GdHse>]E|'PN/(q5J/y '[ ;*(+:i#wfOFK Lj鲇Α<|e=Yž7 SAbd = y{z">s{)B zCP~]Ӧ=hC mR[``8͝Ғ,ez?'0GW 7%̒o6U:vߝP']P ']AjS朕P9rJ!1`)v1ev|uA!C)*Qϊ-Mo))0HA$Zjb?ZīKpFRfpv?dA^醏_?3gyL5eFQ)ھK\Ы+A v c n$㟀i=N ua*^xsC0I\TM eA_Sʴ9A$P85 5Js<[ spA=8#:J[_-8%_% M#KmQ9(~ [9YMh5 tlȄOhnE2,WH@2S!uQga(BA*k!_GEpK3@WCd*$"~D.IZ27lNP Bb$YyBhou ˥yfP>XXGC- !u-0.SLdpaù{ɧ 9QkҼ0!@F4Ze hb,dM 9]tU>TYAoY6?@sfr ^T tE`DpLl *5Q,($k6%BVNO}i':<#,+sGԝ˸ +Hǧ:@\^y-G]+'.Wha:}fٞᨄ<4r܌Ya ͲE}kxh'o0}"{n9i3)Ğy)19zuf{31Y,_<rޙm>-\"71Va 7G}=@\.G"eTl;~#5gDae&L bo~qNj #,ZX xl~ u{|aDG}xP#zBtt)|Ә};b}WuDV{sp~b F߼=wc[F^4;.=Y۬{EnM+cE9 "VIc:jԙܩCJm^9k[KBڝ"`Ate$϶z˭mLr^k<ӍḈZPX%GKQb7WdY:OбXlbts.Uv[&BIW:0E@i(j$RD eVgW%IlW ց=iMq'1%~%V jWFI0]8M l `g8n@KM'պ29lA_b0uqϪS+Yx:}F傅> Nf- #"&8[r9aoo3.^?%أGvDȄ^|Ć- {N>N3P[iYj-ۯ/< .+3F!PS j7-' =o`Nɚe*(N$|ެ;wJ&n\mӈ!.XBm"/>WZjᚄE[bjtDc{ h5+c/8yEKןQ,^2 yB,sYrz$S qui띬5?ÔK9%1_9HQ POͧ y[(LX!Ʒ I< X5_O[# F/)OE̢6o\adx8MJk9QXTgrc-cwNbRTVW4Q;=+f$jު@Ny݂왛u:Mwu@iM?r|eKӉ;~R)H\dתk47'گ".N9M\yT6֢@ܖKy !t+י >B䩟u,/s+f0lXkq5:ȎlyV^3, :4y Keǖwad|5. <,;~Xy cC2ك J(~Qr򕓡 ;l8،!ărKS܀y}@yxS웰P1xhBӰ5dm3 G'O11TɵM`TQ7Y|o5RYN鞉ɐY?IQم(s8JAp峔ԑxSg@ 9u .Hn24DPϦ"Mi4XE:t+3'}%MlNQ')E#Fx_}{HqF.u8} |L3.v4NV~p'&T,9cqn{ vTlYa3PgJt81ufFbe9Rʒ.&w3Bq1Nb6J%v:XA$boF-ಷ#pJtB=bG1k&;F3~7f^lZ; :]ht5\a]Dޅ=/mH@\,b `mtg`lK2 &Q)pm`ԣ s `2TDa0|J953+l89]ȯ8(%M Tߑ^?<; z3, w>ӟʆH7Lv^DEb\z4ud̈a+@G,ڍNnY $kt-2v0< 5 $NGY @TJa&=CF5XxKX0(] j)T=2 {\΅{ؿN쬜b%X֝/&aPZ.rD @ސyofwݱiR`m-0OFmLvU8 _H,K}QgNpZM#7O9u*P{'Y xɺϲ[UF;}Xl1gzckpW+hCl͊au;_4rZ\!!,δMbɹLmnA|iXfxbq.`^â8R/M$8]5#ZnZmcWRW6}JPL;M-tjT^ZZA.b&#p0Wzo0;(kDiwȭQY K<}9#oa;ȟȈȊO|z +c;9g9?/̌@|J:Q6 ˧MBɘ3!{$8%ܠ]ͩkIL*r.n~v$_٨/RHj F ^6z+ vB{DZ CPNI$x XQ*g)a)oædG/LOD\FΔ}_o:!W\ #R)\=vjj#*{Z}8 )ǘ/iA밬{ܥ Ut)~{sAktb`pb@ kfԾ. 'sE !~Ѯᖋ?NETPPb ^b 'aIC UK'0&vꗬ*̃,/edS27L[ pYlF3LUċMHi هIh'u@M ȯo%;\$Ձ,Cp+jvWѡ+W8PWQ YR-iQt|4:ƃbjli3c9Bn= qp 1K+`Oݣgh0=̋ޠVQj;e^SKulH6a(44A/?χWo#GOtX re夿曝oa pP3;Mb;_{>F6wa1ZB2S{Z\L:{M07PeV6<ႠseyAkiyxv#浔5GM3 PaAvt*&Wt*@ɽ6鬠"*Fyլ{&(hcb#ނpǼe;N&.yLؤM*ŒzZڦ=+X5R K! \F|tf lvD<`$0_yOlG[;f}o{S^ (2Xr^ƒAl )y{[-F/Er=sxW"WMZ}^%(ԃhAhp%rIp~Ŀjr 5ٯrr7 }{E"z@C}:ʠ _H¥<1ZMZAY`}AH*,>ʺDU8 5z2 VF))[xJ?TP/F{}g]M!=\rKn+ Ku/ΘzC`fٓנ%k;Y) }6JLa??q4vIsz_AX5cb;%5ZVZg8 ֣Sc)]fU;ԱC鼟lYrޛ*e=iV#!)%ꀼ2 \K`Z~448ЖV*"jM\(?t?Vȱ%qbgtHk)*2OOmiwGp>%<#0mϦ,Oc#Zӿ[m ۩ԮȆ$l]f}̽ &S9$$-`/CG,ܬ #:(T[1h!2czjI2ܸˠ8@j x]_8 ~6A37˩y ((-^ JQE`I0tߑG66OCg%HudrP>7K+5+œWo`bN%8"WHz8^kowYƆ,U:3#w 8S,~ܼ%zK ϼA`ʼn:('%<4Vd&,XPӮߋnd^ u0hMOʃ!~Ͱ3 / q^dRfCvI\ULj Q)vApEvQ]mjMNm~ &Is"Lʕdo;N(}S dw$\OŷeY/QV6/;~]XH]a%kak6 ėEIO3Ue?)c$b7ٔa\䤆s#5`ÊUjSAmd#;  ~27!b6K;;K'J/ ◕XHL?͍A}Yeg%&q?=s&m +PFZdImCS1+ ]TNZ\LnО01Ѽ!{nӭd{af FϢcuh[,\:cY4蒪UmV݊hX0 rY ]NbJ։ L%p-Oƒl2p%Gvj ;??Kg(~]2BaoNfAڈ̴PnHfZ(VU] kw'B[?p .AD̆vO.=asYWP%ab}{L~aqfZ \yKvvgbNr順r{އo;򑹵pUZOˉS ߶yAXw+p|v>X]Ej:]g}r3LԀs;=*Ϋ캫./m::́kG[fXᙛO(O=?>v<0lmRlhA.KY?<-UO7ͩ=GU~KI#PD0ϥcuB)GzN4<_!Ee[ro,?CP_\ca<)R=.j\L8Yǚja(b~7K)OL0@'Cs#L9bpAjG2[~ځ|+Jx|ZWs ᥐ`Z9s|. sf*7ȋ ~;Dr/|ώaIy>i F_[2A IR*S' B8=OXSS 8ai-EO#7;*uAԙ1uj`|vާ,+w"!oB0мN6LO;f]1=6ˇ"kLdJKIqS՘pi\,'>3PȺZtJtsL PiIڡx[@=%8X)9$,ȋH2J:f^d?<ݦu{3aUЯ<&M 6AVnjÔ+gGH`M;q%̭N:lˇΞarM͟+i & UF"; CbYG^|3?;nb6&gg=p?gg`S|Ќ90wZJ}\\ѴJ!]`Lm L?-ȈfKUy]kv:l7?. oQQrR (f+qi7!4 0犵O (]X[}ps2 DQcLGw%q~?Ie̠Tw35Ebӊir8-{0:j4P4ŖB{{ɿ/]ʹu†z1w"8 I Sr;52٤=q2?PW:4+rr&bO{KpEt!K *+\.8{ȇ5yPs<$<+)ӧgTH y#x ֿc6\;]sg`b"$" Pά3(Qӵ/D{S~U$fc bӀg/΁0x \rMS ZcT6᧧"~cRAo'A*+Y(Cs"#ϭh?Qv1!̘L`"|t(> :]񑪒Q2J/2qe)d$I@F捹qm^?[y2ݩrqn;;LRz90 DӦi9e `4؛f Ey_}tK?[e#wCaH|ZI:0A3VL*nu#1g0n| /ߑnNJٵu)>=DE)*gfN$Vn¥FXCp2c`|i[+!E 2Zaq_sB/tV_+[[.\)qpl_ bC& 9PyEo4ӳ-(&+zRI.&rΦKs@ma[qf4wɖcuO6gT,hRnh65ope`6dxi !W׫&қuRT}6 4sD ^7sc ]@/ nz{,zER,=JqN,ݭПϵׯ^{iH;BK~h#]6W9=yfQ"&y\+r5$\IkK +O58:~q|~@|fteZ8X?>8j,>VS_~ߜvZ><J~[~S kor Yr_a͗V+ůaKÅ?CK.,gL튒+Orݼ A.9OVD@U˼-z[r/be AĐy B2 YO+-M(Hp'y:hw1+( Ëvf|xdC"k{`BU:]GH;ɧBYy|rP6n#-̽BpIvD^ {!:)% Yچ[)jЈQx)7)B_H+aլqY:"?&~ZRNg.jn&Mf͝o7\63Z̼z/ٿ` p? f/ y_|͞7VwV'*\JSOq943XbXh="&柉lo-0P%rt\؅낟p֛}6+:eǟW@wa t(Tp@x:ERgtͻrqJIb/]<~$m/ޠCE|*694QAb:*>l4,9kSqj)i.\Hj릱R-ߺq_E#ss+蠑VWn ID'v쏩J=:UM٠ML*JՙHIL*a.q0E5)3:M;\(%׼F٬$i>8_c_b㣫AӲB*Q`,Ց#7 p`?BlSC?qsc_9>[^] =Lcs,LƽhQ z zOޑ$,g~0g >7HJ8zyܟq0N?HaЩ /4g5<c !wwsFٰqC˥kl 6J 2;`3$}mxSUpXUt9"tOˁd'5<SJ–YlLx0uͤ5Nud6_1=XP5Ylv3o.6ɓ?x+WbQQgՉoWwWd$O[/.O>#x̯[/Fl[\/Da$e](ʍ_A%5VjiiX*$b[ʦSFPKA ɴi*B w/ FI/p-6mݕO$gP&wkPb:3a8pPyR d髗 eˆp^M6TdRF;=pkPYb.$*΋C>y=ϊC-0$iSҢ x*iZLx`1CZ'_)-'#8]?/&9ij j+8.X%Yۅ*t]f#i~c"ʮOH 8<ځ ; )VIGөdꠊŊ,5npEr`VjO) 䅪%WCP-UvbDyI%c{IG%2n/:vDP@KG2m~FJ ?i*|/z0RrJ]W#.>.8( (YxnY&Pq#VfgdL1. /Ń*aM1`Kݮ3vnyIS$C"d9Tœ U͞J"İUj >S=$ PP5?}dObij906R'JdZ@ x)dȓE?C62W Xܹv*7 W{@~&{ɞA9bQ,Rz-j0{-c ;z*Y 5ٰMt^%n_<& rttNzTT0Nu D"ɆC;=.GsJi^Rlv -+85e iw!^Z.H1䳭z'PlX•x2] heW!+VfZa3)J:{c )GJ|9&Gn߰%Uj&; O+Q ELgz‹Nktݭ ˛c:2M`@z[K,B?)=l_1hG2W1$\dIH[0N `!R@Eh}ejzSss,Ʀ`xYuiP,R1nÇ4Xҧ Q@Ѱf7rQٖdZ![ͷYobş_}6eNeCu6ܣocTs*eYɳ* ?;(Jz {ramzsp IOs^o/0]g63iR2jFYNb5CPc,X*}|nNЇ5iqAPW34GntI( i  *` Ü(=& v4Ri.*=E=j\g aPhRMJe_|=+re0ng@ԤNCGkh*=('jN\H=qíh'/8}t^)ZXBr=hH?Pw P0)&{r O ,g3B|9BiW$+4*O}srT%?4KV$3 $Jb09rKӫ~)RuӅVөciR "DlcCUԌsyXn-;`%/?/➩yڌnj _\DVY>?pXEk4O*QFo(}-'slSwňaaڊG@8s cP&,_UqWbf>Ᾱ\@wPNt#fp Hљ݈J r A ռ৷'#2Suh`TFauzAZV`˟x] i6+?dԵ+xk`}#HlԏB o&j h$KGЋ~ZzO xF.c'`OtNRPۅv)8y &-dr2 1-T$w}tlF[`^}&LQ /{?v܆Pm٧e:=]FLʟ;6nS'e,YvĶP@yjxO%`⚓H4Bz޲tBr[}v6v.Aml+Mԥ-#au6OVEi$9t!0  1aK??@U/#9%,V3yG"ؒ#t"ll``eHڍ11/Pm@35[ Q>rǴ9h\J75GշEKrup+DtPxkvDZNYW5<p~]G0ʏѰ+mpUҀa_1gvĊ M( )\s@ P[rR Nuʯ:0U'wV2>n4.ws7lsb`nq5ƴOdٖI+F\J%Djf}~L~. -B [D~m8:_hj">E~.m^R|!PG.E0}p}MΜ{(+e pÞ tq mSO?\VBp±/x8⬷6b`ôU|]) ̕\BF4 P>=y~]Wi\I`7QxGoIhd݌A{PWTp# xq[.8;!88?>;=v|3o+DקO8 ,A l2$j~quѵ?x]- ˬd v'?d[J46钛Q_-˹(@ȹNly>mPPeheAt7xAd'{(.?~_1Su|Ed.Vt `|N2ջ=s;s-&v6`-2tߋUQ^Bflr4,(!0y`tR) PXG,4D߆q=NP?s *:|>ɔIx49 Aj/ wmd]$:'dž'GNq #\{:Qn G0ΗĨ`);l]<:f.9 P`} gA#<ʶ\M1tzz,B9 O I5b' 2.No;Y[GӕA.f;yk7Ef"sB`޶PgRzi o~@1l8)Q~z5%H5:3Ên8!F=oDOzT +=>8 o66# 2U6ZoM9AH(̀O_A1mggS]1itU*^ 9m@U/ h(F|`#e9Կwq^^WAuuh'>]d6GvPf^Mnn"5s ɥ elBOc/<gpP d'`o:2ΧFsGtf?2s/A=f3;Y^0#=yqVwڎ*BsAʂPG= 9 xMͷPt7=v]l/IޡʣrWAn#\v?,Y4ک}e-毡j{9 $@,)(Y"^1PwIܓ+UG#rbJ: t~TBcr`~7Zo.Fs+/x]5Jn`+(vgzϒʹ&CƩl$:0l*]uqV-];ξ}5hA/C ]@Y(6I#N'}%Ղ &oP>q29ğC@)5 T?@?njo'^~'Հv= մV79@?Un\:%xz&'g-Vgk53N רҾE&WZ,tAAp 2Sue/=Rh[Pѷ~OٶBӹ`ϴ8\Us|0r"^ C=[dgf8أMA2UB.8?[Np٬IWFe^ƅr"݆ty7cѺ٬mqzVf`z? {.zLs^Bܱ~| H2Ӷ6F}6%)EwlPdߧ7*~Ot]24@~lF|22Pj:c}Ym%wh9[8 br#?:YXyX=c:sk/5)w{"&.4ۡ_ו= t=#-RfwxF}@Ռs׳ su潋»Lg&Y`c>`M SgKVN eYSEhuTJmesI rKkf5(q 0 (fv.H;>כ"8 {[oUz 7v c1wmKQIYvU+,LjE\"a89An;RU3?Ieͦۤ*OжC7~>ո.\&(-siLjʵpvyVrWY)n=`8d"eV˓7[̈Ӡ] ?C<'<@H{R7;)6Wg֮KWolXe @a>u_c2b~.bA1[OF9բ0+,7Qdh]fXZ$?B(\uYcMzFh]`okFBpNǶoZlIWoA+SbR2b|/u0G tp5K)iAIgO p3{"h ﱵvZbgȯm=Ly{ak?ճ|?93u1B{J?8bU$MۛHW[砟OBpΊVZ+Y+*6sn[͖%"X>𐓲L3+mo$M(tUQ^fX\CRjEY>ʺ/V1yw[[\WimS,*#xFF Cf8Uˀ!VMa᚟SĪJg+|XunmVԚBK}$Zd!lv~$7\̂: Wᷙe Bo,(3HYJXYw|Y*P` r{ɺL `OIq.%vCmvULcQBvWXP'w[r*ōFi5ݱ8m0z-LvpMl Ħ'M0X{?_ArQ)BGEw4P \rcRTxW*[* }bQWrplLT1Ň6234v<ɡr:.*ג// P_;x]5ɋuT>%WmwP Nb͒Ey%z@RX[ 5K|kfAOF<5Ȇ&S(`Th9*ASbTH)D=m?XC4|B7d?D 2>,fSl_@v<L U!8={}"fC]fdcq,V,]9w8S:nf~@ó#?A;HF_j* OyWOMG%8JA)5j P{c%+uy߉fX^ɋH.G`Zt6g݃%<]4WN3"(pܺ`_dHwQx꽬iޫg.̨ܶmݱ`_gr@̒ltS![ :tY2L,XS=a79gFŕl I-u]臽g`ٚս(f+Jk _?N!iܺL8=(Fy:xN/~^#k@<^~ҿHxV o( Qc&Yp-kn;}RS=Mb3KPlm^m7RS.g0Q/;ZP6㤵r=Vd ep1NZ8r8.0!a4dbyǕeOjobOʢ_a3<<{ۦJ$8:8PDE\4')R_Qj a;QQ?/ FVMN%kSLJֆ}q n%h͆Ki=- K ȓh'[ (UåQqВd&Cۑ;+;:*8_G #g #AjS0akVEȺA`rlBQZ!$qi0 \V96},) |oܛ 9Fg ʡV B0 ]M Ew@Fs}8WjCż*fj2뫊HҗϏ)udj-i`ǐC !URIſg4BX:T'H[ǧ6öH.$`0fI$wF-.@wl73UJ#ZA"H^ -iK̳r?A{&h|fnc(v?I B l@ׅz}ޤP_ l91/)3[ sblZ%zp5'*YYZn@X4,:أ9KCԊE8lC;G(邯%aZqy3Gfî c1Qd;VƍKA&;y05,r I8Y!%!ߏ<Ѫ{@qérݗ5!]IBd;?{B"Q.'=Aecl#~'5uë}2NY9?OL*l;Qr*q({nU)IqH rE±4E bxn3gqKU_-x:it_}T, ˧ ߇X{I_As俋fk/$yU0\UfYJ1xp}@=5Y̛g.g2X5\$Aee =G@\#ٗp1[0ܑ6N6f9Te@R)ʱ14Qh˪eS_B"(>mU$.ϖy8X,J[6EN9H֡_;d(Ϩx 4!C4HH;h A} C VI610g d\mchn4O`Ӌ--0{ۥT8䧈Au`i mqi`92+k1EGj4T-|iYPY`WYg*ge剰f๑574(0~T8)qDL1Fpp-O \W;4dRw%ۙ,Z?>ēuPTקG?uloto$tcE +.k#= 袙G{@"Y報ӇRp42R yWyvd:&HatP ~SSK6e5i82F{olk+gƷ0zfF5LG;C>oMFW)i@X,8MӘ4hBid>i=I_F.z%zOT] c)@r;ǨM34ʄyB,fj#wgӖ&J{X>56\b̆Reh"!%P~Ba4lzOa;Nun^#f?t_jޘ#XL.V(Ő>%悐#2us|[fl Yg⢜*:t() 0@5һ) G$ʮ7`;ڃnǭ?rTgqh9ca\ vϔ!cl /eev~R˹/jFi bܰnUh1UpJCN ࣖט^.S+|Fՠ]*>GL~xO]^Ln8Ǚ lHE|,v\߆E& | ЍȺS?pCpjQR/6}ʚH,AMC$p@R ֻ|6&ٖgv[9G88٭LtE!N}Z4+ v0N[V*9<!_ڼ I V?E)v8OQEZU:: .7G8yv`^X;,zl4ұ8f8XӚ-h]_Mp 9I?}2, -HaE%"34#hI<LN%Ib^-@ٚ>{V]sb-wq(]v;@ٗF!eQj-Dɐ`HN xv$M*;LCr^ kRΖB0T[o)A#"۝8 a.f.Qߚ'i_nfY[sK޻dƨp˒}M/肷HӒ Wx /U<u>{'r-'0_I-m9x5*Hߦܔ(>ƶp]B/gfG;  Z<(~L> ~䩈3EF&MRYwqkZy˔SJ[vw=VcnJvTRnw^%ĪLpDFCoTRnf<ĪdnBH2^g.?ފ݃ p4*"뀤v}sc-@BԢ?42_ xpMr0R{ZKn@T)z9:J-ZT88`}mQl%y^]3,(3˰>-Ln2WR{sD[`'Z've싲'/mRXp e֘N^[LDX 5)51mNy)$ݚ -aME,05uW[p`ۍ {!d`MdV1(.hvGXPa3*Gbp7q zĭ(ž gb)S( K^T+JN<Gb .gͺ8&Z@vaCL.t@WdIЂ{m[)fC9k8Zv"bW2N> v0%%ƯhaR|%L EC-;NUv8"A)f8[[Y;^MkudB#naf x"]&|ӤÃwPjy_X yB^_Í!#M0fR}p0L^Ҽ;97(:j^"J.OV%=OXiK0AqSx:7UfF@d%lP֋z0*'e@wl9J޶5e>UYArcya(iLi ѹ]b`'$U`nl8=`׾ъNvx00W%iU=(_|u۶wg`4x_nWm_%}Hh GofqGpI:;/E>Ms~qq~d8=^sJ\i-$}7N,ӸZXɼJzk\;hFg-ZtDqhJKv^!3Ԍ QUpyV)k@HiiƏCKNߗ *0Ԑ{! adC0P[o081@ϧظ́|x|L[Dd0l<j,"f*Y)GiA (7S_.2([ 4pWBy*0-偨BA(yϖ#JJ3n&h4!%yPFflX9HpS"ܫOyڊ r B Z 7OB'x&Yf=m&3ElK xޒrIHۆ&# 1A5.AQerL# 3PHdjx!;Xh$hn ӯ3%;AAh<<84mM>QL1 h/@[`Mc=[XIͲPXJ+4Uqe ier"$&![^zG!k0KT siPla.~%R$ #a_ЅTnz`fOf͕ʸbEsrN_34%B$ʹee@A50IVM֚P3GJ9C-pe"U1?8`Kxxo30љ̷'2~2xN 5:%w\~l2c:d,G2*¥2ǤjHzeJk.ciYveUAE<׻DAX(vlƨ~Zk>)e<-ι j?IktMS o7?ucf?hp=ʗClٱ腴(VcY>:C4>y:.0 y)cJ!(O*c,%l/ 'r6hC1~+ꈣ&Käw9`X?f^XS⦕γbP tA]@&9䓣 ӽk[lB?y/ްAt/j#^ ?S^eX&BcFZӱT6Ķk@"+GM iYLar QЩ;}r%cVlY@&vw@Ce("G*^vm`uW3кK{ifOZg!4]Fb6xjsr)h]8aY/Q\ >-kc"qa w˪\N.tnym9,K6'VAɽyIX6``i|ضwh3Dz3ed]> n<)!6'& "FU_&tT766gGtKP%j@E.5PdEޥ Kh5уSp”8L1t:P8{i{Z(sZZ@ǟqz}c:.wͽӉ>f;{@K%̖ ceRIoiL:3[*L]J!+T% G`9!qL% JA_TB,wGс26mlhofi@ft-[*R8O'틪RPu4!đ],nEQ`)2 i /Q?ԀhH5AO(>{  }N(sՑ8$foknqYF:JW- N0rԠEו6Z4C)/p,u9F=% u_S>4Xq,^h:Gh&Q:ʢ۲oo`nI*(Fbn' /FmH݀02'c1t:m"PxPk ]N_ڡ{ŕZk{g69xw=2lUѐ,rb;z|b!pQTO;ʠTwΤ>ui褈R$Ma3]r{Eڰ&dUЂDP?$/qz.ss,.Lh>!IYP &0W#2饠V*f< lO)m}E҈q6KVǕHki-JMI/eQ;mO3{NhƵ7d$i= BMoa 䩹6 X[[.޽U]KKZWta7y rph5.P"( ;ޔZ7QNhd|F21KoG\{D~jbkFp2[z7@ăv@+0$(1אhѸ3qsT'&SѬSVY؊]!:`xtrT!ˁ@cmup) X@cyC@Nsv#Q=⪿@.+~PQCگ8f5+ؑ~<;qVm ;Ykqr+xGNGWNsz]iYTUfg/'Cy}ʫT@'[ث%m4G ;؆q&I~,$CL9D'g5a0-R^?Y>Im<Ľ;8O 2sw &>LzN30 *f#Io%ʥ z-[=Eܚ1%f5>q69~xKd"`J#}ņ8TxHPӢH4^{ KQKߤ|HX~]"NwWv*t#d+nd, f9DZhP2ODcn<MD ~WRS=!ɫyݔmrرoO7GH毑[RՊ΄X9<* 7(3\^.@t 3h,%g'/DNsm~EdІH~4elyϞZə6B\Ci;@;UՖN鉽 k/x9 / pGQ Be6Y(vBc<锎eG: Xa3G4 "lYJsێr.aMjkA~x7$f1^{qu5S,O}obG2xsS^yQg@mt4?odr#;ϛz U$jÄ{VGٜf*HFh*C=GXf )փjOPjpo˧ur"e*1Ulz!;MMFUlOL^(S!Ic<'Fe&\%bȀlY6c mܼir $CdlN5шgSuH(Xw ?s;#ډ;H 5h0sc dA'lKEfI46cigqq7Dc*$DopE7~H;pN6/P}kA|P*R;Y^nZP}-‘\.rZXNNRyfb'b[6P􁆀חYw.eHq(V@J1#;yV¥W8 hY^׈dz{{N7@DžCQ9G,qr?-ik.{{upb5})jL/xJ>C}P: o Cl8,ǫ'cB@p0 3뷮(^^߀+F3, ] u]ϊ-w c[`Ш6&x7Ԟ-Ws)AjX?iC=\ ᇷƘPY&o4^QFv}ATf E$I "IG\w?a(m;D57JfBFdݜխ jZNq7!w ΰ y '20OHc]DӠ o) FJd1e;b҅syX,uDs;mgȋ =ޅn`#D<ҕIy(B0*[I D[t#ﶜ4 1W*p^~u~G½ݾB.+qDY F/7֠Sxf[m"yV >%.1RDJ4~,GuIAgw62ߓr}AʍGt[goz^%Y!ޛbwMݧkU׏1ݽ<=ߒv墋w=qJ+MsmNn`#@Drn*@wbať(}'e. $PFϥؖ!He7\Q4rHރtBnfzV~f?Ѡג.,z4Yޒbk[槴m+Tm„xOTVmh5Ɲo,icmt\7VDA43׮8e[Il*O4o Ph{^gb>]V?M_䏾uGbf-(}tO짴7?2['D7{oA?]1oztE.AEUX#?˹ܙSi0Oc&;ܪ(6 Um ݙcUv9݋U,Ah55.}V乁3?&;Q=M ݆9 4*#g򶒓[%G(-a0GWKJý rO1j#*@ZE͟nGּ#ϊEU[7O7nnCO?s.o`oQG?9CGTapCZ|C*)Cŕn.]<K?e>%2+u»~ uU;ڊXQO޺&PSUgSŽBjcTa-bK}JUC$vle߳2rv;w SDOUFiKwD:z@?QNWb֊nʫNm;)?4H&uyw ;~O= 5Mav[ d^2WnK6>GEQnZcjW9}z|}g "kw$6}=u!j'uO7m zsV=齗<?K|W]WϷNSGJV$iq3%dJz#lC-|FpUg4Ҵ"(i[VR‡*~,ۓt9y1.F;j1M1BKM A]%g:?.sfdLZzt>~>"J_пO6*g"i8 Yo:)lXwrؚt6 M`[@6)&nD8^ /7%)BܐH+N6Y8, UUT[}ҰYY5Ho*T_p I7LV1XZKX#U~9)Eƫat&銈If&,o Z+JT .R=a&_~̥{rNyz+er^jp@ <*e__l|vAێr^3g٢PRr/G%FoL 9`CY%XR{>MR"뾗|^L(wEQuAFUgX' ErExTp^sI]%K#,]؝C{EJxfYrQ׋jow7?~c4>V,鯙5"F ς^@9guu\g/q鸢Ho׼1A%F) |x Cg<UWd@o^2_Ά4nBPHa5 |RoΓ/G=I !^NyY,V?gR`XsdtcTu q?6f/|. ؗ՞O,}L'Y.Q~(iV?E1P'l\,!j+hR ysD0Nz=KMb , d %y 1i^aw?v4d1ǀ==WdzTkX_jYJf|%KSh)K\Ās >OҲ•<мHhItƕeAw}1Gs~ٕi*ȣ7\Na&ьa^req>(iҿb!dę=!KBMr9gtaqeөd-\\lDr\ӴGLC2m_k|3HnL9UqL! >mBИ;4BX& BTdb!fAa5%-ʄߺLGjpq[$o-cf#QINi8- IBpyK'ɹuu'4A;'cbq誉Sۮ ?ONt{ A0}CkhЋk[$?.=̶̏ :y 42/?}CĴ7 ɶ ù LSRQ.Mϙd<ROBJeօsVh<{AgSԠJ-2U`(-jrBpFnpHWA Dƨ!|c?EcACER X$A`s{싅 ))c&IAh썅ﳒ%~ij [hk;|-hU~Vԣ'U 莸EAƀ@8yR= _&?F&Rg9$wPwAʍxQ^WG[9V^9Kt~Oi^ÒJp+w)^6V=_HÿP,sv-k9l{$tJZ),MF ؐrY*'ǃ 6tj;\2't .v?*Iaf4PaNw50IG#>| d תYd4-뫌k9;ݱX2GaNZlİ[Lm?&< ɐB@i:8N- o IL">$~QtF2uRTr0+^ZTwjN߫tz1?}4gfIX!%ܘdl"e@!{&xnܯ!2܏@1 q&UQg^}^E 22!rfP5?4t)K nˢ\tlsuѲbCsߌ5@T&=|uNYIltvEC)9,d~'-]ddw{,HUA`эtmaJ)H(%?3l7-ϔ'U<ӬLdFTmL̊ŻN+(XX9سB:5 Uj[s45B9,{>W>abe%Pn\8Veh!1%[s#u"wS8K}Х:j [b-jތvl`C+ôO5hue#.jz"Awpr38M~(\pΒ *!|m6BEr8mF+VpD Oi`1e VXP Re<̻LbY"Mf)>ag UP%:kbS ɝpv/fe5NL 敷eJD xKDY¼wE ɷe^gl2i8nwR9, 9AجNwb"47:cJs 0$0ˤu/V.~zlǨ4Vp E 8l.)Knť3[ Z[аW۽> ^hIv3 ,\C6.aw4G ,>`UBEZ\į48LKlfs5^CHf6ЦlCw(L$c-낝QD. KdSb #* Q Ă I5JQǫmHZlAyKF;OJ|R͜1U#AaF\M !UF ݰI oS}ӿ>v:AxND981nھ$,cApKmRbήϋ?wHLNih!dߺg1V+>x1rz(:奾\q0S0ֈCM9afKGpF3wR Ѽ~b^Mp93Hqąw ر`0uFy1"מߏ_ܴ=>/Y#^^d2  5G%B]˧4w!:|< o&u.dwn~HƼ[fr<H5G6Bx1[3ZS!*PN* B=!#" :Rz{u6O)ߎu;8aT%.nUӴ9=+hl_IoN@.-riZ]er\0' u LkleF) H\^Ͽ?1'v<}^t*6>]ry%e> mI UV k<,+l5|o&c@C^k{: aLd$CW I_:'ؑqp ɎD4)8Dca <$F6@>#CQM 8?4 #lXF+B0 e?p0Cl>~#[M\ppy;oK ΐ M0Kv8ׯZF ,$$t!'pG(' ]i콇p~قCF !^M eg7 \.ʔ_u|mQZ(<~w 2],]^ˁ? sLJk 1sJl{9tI+kg* ǔpLtq1sP+)> δlL+8Xe(x3a?bbpFp2|hQE~Utzz'{=$jXFh"7RD&Jx4 #Mƒ6[+؜F\ ;fé^v0&4I-^[ZLBW$2WvwW. rZnFX;}["~+ڿ&ixOq@z"?=8:vH2GO>35óG=.5ooXOϩ{Mm(kactkTubHcVHDiί߲YؼK[r3&t&0!+vSJ(ccncOWCQ{+тkI6f18DzD6]^{zeep!h'[1av(SxvejԸ4:Zı{[ôr_&E_˷[IUX{~syT Nh82.kH7\bDW ,$/U|T";mK4ҁ>xNRd[b<$~#~´TGr+qib'Y1'?{<`)xuB;/xxRil)a'0eV/M뗃'h pV|"#,8 Y(@scn4+`-~Kxᝀ2i^GT,Ar@<3rMv p2W0?WX$sY:X-!EJW%|Uu ~B, ZI"RSʏg%Fs8Ύ]]2ԛ3Da\z=ԗՅZ^JY Ŋ$-˒E!iZoH35У/-5|!$F|읊K92̘5,xb0cA~bZ̛P] .wbi"Ia~<7[8B3TzD7{|tKB!hsTf6R7<Dvn$8 3Gt8Lx8Ssw9EJЪ:ٮ>e^q蛦״T><o8?-  6,^X+U4PWK4`6]ıQy[! @;$U vzfy-9+ ɜAB-'g(wN ׫Ph\Ocv7Cz WqMQf9/e6s ZE{e@=|WZ8ς_UQf)kpq?18Docm.9텪%}t~6C%>WT _Y\;bp8Fܴ>/ϐpjyY*%t3.Dft\ =#6dTQyz'YGYZP6[.Fc<H$/L=0 {PDFZ3͆,ai0qg\@L $u9x"{WZp(jrP YAhHR.d.)66)G{Qo 13}`t*ϼ*\u,G~Tdf ? D gN}[UHEk%pWpUDs|bqcFI >Hy(Fsf(ɘAi}<+<<YiU$dCJՙ+plj!y~yXa|Y(|(r /\kG!v.K˂fBR_k4vUfuV"_*G^M|g˞{}m@SPx}GHIb u\c^2~}zhtޟzW_=KZ"?=} @j+ÄUEwt!J\ZxdB\uYZea9H .]d)K7%."s4r,e(b.G-}ˬ2i6(bjR)\lç߬&e/9zm3' "|޺_Pu/e/3@!]_ڇWQ.pbrGx̧cC APK.LŤd_s"/9KbY?W4W󸟀 U#TH=_P'"dU(f'Z\OD|1tN#B |B*|baxZ$Z%iWVtȻHdA{(F "Pme%m,Kg;EK xn u|NO%z Uhy,F`~aL`$YbMet, "sM\N|k*>ޟۄiV[ A4[hLǑ2+p%zki 7?R0O{-H-,U"8Dl ¢gU۫lʱ#nGjH}q9oVYk?o2z>.-};+Dz*-w/)VkE}&)y IkH}bPSsXya[B.`h\~ɂƉt#(&P&R ¨pqs1=Q5H ,\لB|v"+rMgDxplsSrKQqC˅IT&*_\HQգW FQ]aXU@C:GlťknBC)c &rdF{tsLsIɩuEM#3(4n.F#NNER&U腍SXQL=RXQk! L]Ձq6@nho ]rjʜ^D.nX^\  W-YiKTDs01:X_5իRRrx&$\ZtP6njOQ!0^BRn/'o݋qtxR&Z>"(J-5Tjȳt5Oq$(<]i; ê)DaKIVq4yZExMO4!,[^I ]ܘeܪ fA At.kyQKk ?^pxC=:?^p_~Nj߃-yXU o 8~皷 2LyT\sd&O^r獐V)V{:(m==e W8.b,E`h^{iJb00)K ²0(*z΃ބZ<ȈMK_&G3Rg\5G~*^fV)|悰3MWL.'<ZVmtW_CTx`Y5\DN_VDWе'o{8#D50o]zo7I#2._bC#y.}}覅}48#9)`7anLeh^e$fo`*G߭=nn9Gjp=C ozHC2ƪ7!h 6"E:-qzpV J Wh`v5O,L@ELg5,@E ^XSxo.94p'Fۦ ]2Q0'yyr{Eh'%"lm- tTY39RV1&xiuhy.q EŔdb%-KnvP;,/p)'/JlVsZQsewӺ&ę?Y(lҊ!VȸKnA*LQ+CXx1u+ة|jd ]9|bbCΦe%$^?nx % ç˅tۂT4Hdɜp׷}&p/iba\X]9b,Bkb+eZHϊ1{EI(Kjc\s.U@RCUȰd" ) Pv>Ie.}%ŠAVW7m(*G#rWZڛDu m& r/f˺`/0<[@;Fʜ7L[p$:װ3(Ty9XF)%sOft`c;ID2@{jSh\WZ^Y+q,lh%-Q^$bI\,ӋN|sT:tH@b-яL_1`DP"EcUj#D 1h3k%ְU>`%[VnY+H{}%I(N'LA_F*^yeg'6O1zAg9A>!٠0e91^8ҹ?4|^8OP-CjWG2NR (:zB5`*ipAzcmQ]O\ Qk!δ!c8,K[ФxAO,<D*.*իM]\OKtl AʊjKeڵ`Ë6 mĒ]aUL P\᥮ջa(j oVG Bv֚s9#;KHw$FGNͦur#b$F|b"fPJq5A,;>sXE_5|rIJHTkoMUax]|cOU&ZT1iVz쟾 w<+ d` RÓsXTX [l8pWncdb՟ۡ}=fI&fȆIt$/c7NT3&@ꎏmrxަhAxx8\B`moZé]KǞI"Л73`vo-ESQBЭQKL7Z%p ̦ͣ3wZڸgO)^hXJ5 /k9%#s,E\ef$zI-&$hnVil:jU3Dfh~RN3#^u(܂l"Q[!Z9j22C{ M8"7Bt;zeXb 5>82DP+GZz>Z7|eݰ=0X$*h[ѣg o"s`PYQf̽4ģv(Џ,8tXDðj?0ך~GC @Z뫢˫:rSs[6`c9M|'f 4c,>oRn`D1.a1Cox "V1urviJ/Ш\8/W8Y]7E"À834gaL,]egf5T6PjrURNf'b6$v!dM9/-4Oָ"E'>Dfo1Ԉ؉0Z%ᴕT{qdu{"ө8-c?Z~c`Bc9X1nDa$ 8 v3g/*~YrT1ON #h:8GdEwJS)KeQ KCBRG\+*wzfʗZPn%N8>毖3x q&u%Nd ;>T2ZKT ^>v9ծkدq`ciHʣ_q`f>ߗ"MrVd($anWD&"TY+,cv͢D#ǾJl:K~įU3 gz{QD$FZdD'U ^e 'lyMS ErU @ j ZG"q5)8`NЋHa.P^_Nv,F8EC]Ä4^FB8dx:t1r\Ə6ǹ GMH+Z^q j&{Ԍ,ʨkDμ:<ȕac%G?#>)F |Q#Etq?,/k2M+W1q\P==qHu/ 8AڟdqUS3נ@UW& h(A欿VZӮgT!Bw8hXXYo#,Z_k'ZMv:xΙU2 D\9L=f~9*~ꁌPYn6 .Qo w`Nt~7`2iz4muIuuPbxO$o ]Jn[o^pwO@/cma-Z]7h8z_Bzh&Xx *jn"9lMV4=.HCޘqDy tM0We_jX&b/ߊ,}EHB_>T,x]+ >uTSXeC?y˳AX]پÕ>]QGVEJ ? s2qTm*4 Yon=GP*X:/-h -:5zIwV}a9hU ˇH*1RSQ؍[Y] U9!9 ʦ ! ,CKul FvMa /60ix>U:k>%F ˣ6" }Gu]o3cj`{nf!wE4l6UhY>JKE ڨݯ q-) %Yߒ7/g #lXUտ8ٲ6gb7'h wol ֹHRZ{#8܈NFAh^ԍJ04țXlo}ˋQ<jǏmW?J7U1>Itp Vf2$U*Dj"յ!؅.y(<U-` d4cW4JE/'Ay $ րK]#,T>sѰ9c&bܮDDDٸ4x[kMXL5Ƿ[UIjgA֑SZtf]AO/qaB l񧲤OLOR?wNT# DV~ڕiPGtv.9x-P/5$#ss(9j@lɫ .+1B2S~"i!yVuF薼(UVhXo\9ofM.foxrG ڔs7HxKVhCx$QtXUSdx:H^j[8gDapry6T;2`/9Dmha%MuZOv`_</Z;x#=P-^x  =d*`vp@b]vIo>Tf{oȕVlYNLk3E/#Zl W˲ܢƋH^h-eP8X[jleRu ]'d{NQuYnj6ϖ> rURgV^F=jn%}\Wlm'}E: L*W\Q2Hؼ.)Kjyx-ܝ2% [6iWюv4)}>/I>\>P7WWkƇ<22255ü7bLt0afwCs 'Agau:=G KYm~P !iڂ49t͖zj6$װ_OSgcp4ry._jaC:wKioEZ{Z=A3)I:tK%4T4q: mrE VA-2+􀜯b%7--ڍ@$t6=gI3$GT;f2OѭbI#8`RքZR#cv{]i/-1Ivz!{:!rj-3h[wHvjuCN jȇ} }'<'1!ikLsYhe*36V~ڟZt1Yjg1f(f>/rv[^+YF q+EfUmSuRwH*Z-煭EIBV86y{uV{ X-]#K ]nೃ+5'V25#Ѵ JTvm#2v"}0=Sm!upZ9k k!*. YzQ3({cq{Fwl;xh>Oz\5\Pi37zp)Y߰Z ܷzhAV*#5[aZWe[+n;Q19y"~;mh:1*sk&Ӏ#+ )y]{i$OɢOQRD N\ݨ12S$4,n2^6m7P[z?bY/NsZ(s:Wفʁ3^}s|3.n>X]smf$6"KhtZfB%ߡS8$FJڢ"êb!:%:5v tbJ/= ,0J|*sqMhBʉI&)X q#\ ͑Fys7V]9-okْlyVh#@u瓅Z_aC[ӢPBEN%ds6-;.,3%jU ׅHvU";)u&h%1\$JըZ$srۖ?Sh !$Ajw 5\Z< gmպas"PH賰E>@P]ˮ@p3]wEgIЯ !CP\D8̄I\"s/ƞ* D Yع+bq2u ~[K#2D4"sw!ԣ< Jknհ{J)пqyuWBO"h3Vw iVYEE,b $>P4ս/hMc6-#g<$P1x[.3"65}ˇ·H[+k_q2`:  ~=->~X߈d`{e듧W\|Y>m#>KĕcѩVR?|FB]+oʼnh"I9rMW$}!!G~o`F%p v&r[Z9a*4 X5qyӜN-HfWR(^: U橣_@6+̳|e^2-e!DƓq{g@uwN%[NYLD2*Q BiQT׭2(W%VF3+5PcAbWew5oI0}}bS \G@- 9M'Ʋ u^Jl,xsN #PCZ խQ8(3zlJ q ⳡmlhymeLt5vrCU:;H ulp>HxAØ%%*#l+Zftdz$p="M˛pJፒb6S_ CGQՓq=q|>x2xh[! ^.(~ʤ;6J`g(l1Ƃ9Ij)`"]%WsmrT'=Ƴ^jc~~bu!,~91Us@h~Vǵ!0" x+1UY⮂<LtI=.vt+%j"lUMd1}L2%K|`Gx™u"W^H{P/Iuښ.n>E<3bw  I &,]>@@WPlO]09W]NaƖ³GaETH8P]`E u.7>,rm?dK_JZVuvǭ=>jE"cSib8YNǏ'4?w{>Ou{i4.רlxZ#vbh MOY|k⽌$֖4@d"SAp(C;m1C.so|pXD6gPKmdo,_&ܸ~Xm,#(v-m;{փJI4;" #| N(O)`H;r#, yKo8ܞf$xE">l33KJ%+A7!Od &0'gDv緈Ն}̭6Hm8sĕރKIW>09uv? } v-D;)m=u{べ@Z:Y< 7w#<6 9FeهAE)Tp̆D-ú6g BpR&, OmJ~Cv3"RG,SAːB,lTN{؞Yp\DOO4٭2ƖVS1x,և.hm\qdvżl.; ދ3V*9Y24vl3vɄѐN37z"vrc-+I$zPݴBxY gYɯD}5I1)%8ʰӊK;Qtn J+"áף e[0L^9XOߌ6E!88ߜ0mCm\Y&$TS4'Kl>9L$lW=/H#j RB}R(8— #V\ZflRmz\2hN4pVm_.-|:BQL<Є?%h߸1WEp h8̰_>6E5;]brqps|TK(-ռf#S@?c*4fGiJ3Os ^ /jLD0T9*F̠S&+D({ȨVI&Bl`Y&fbR_7؃V <Ү*'IyhsZ[s'v`^,\6uQQb҃&b8/Q$kq4Mm|@tMB%>]N%Br))Af G)S,t(Be/`Vw_Q܊ 5)[+ukʸQq%Ƃ+)yz>gv%Ѹh+? #7_Z}5Ӕ Ȅ7GvC56DXȳ0r<#`H6tw$zu;X\&*T:NvzB; lSpgʱw Vڅ+JM<9؟mwEenC53Y^ 5*B3qQYu7$׸AiEߞ#!k $6*X$wIu ἁ-w mnk)nv}'tÅFGjH0c y㞶c۳kJu\[>(#|F7qEr ;V%P6'N= BCn{`ֵ4$`^rWvgxy|Se=t$oyT_ F?𬷵˝?xͷN.ڼ0sk[Xˢ7mh,u)}^15a05 [$?BD@cfс1@韽ў'(?vB" hddƭ~ČXb]g7GPщ#xߡ: M@;dfV,KKA S`,Ude8p?ii'$C+l`476dOܜEPcɗn~թ&1NLPI[_c5˟F"8Kèc^׸p۰TSXbh.KVB ( fr7;*an E=,&O_;uBv ^&\'kLRmNN*X1~ P?b EȄPOJoUHK$Ah6!»,iJQLݩAA{VY( XxD1R})A}]TK+}BÒiYc^`0n%c_:<8k/Wld**E5H3 m Ьs u<;|qxv^~UHGXWmů{*] 5_=J|x_^>"yS}u|^~̓> `Z{?{oݶ$ V{ΚR8^GsydI5VΉ!-irߟz@Dyܻs6Fuuuuuuu[ym-hgEO60LFp ߔl}8*ns$vc!բGزӍw+!ꌞ pR$2quMZ1jNeqV En&FId[ҵs*Vj"b O?:БrFI>.ʲC[ 4NSNHe/,(ި066}Љe篠Wy)'0\-Z~š48O7䗓 =^,)Rk#WNS2>MWǟӰtwӲ:B/òy^[P^\ޣa)J#35A\m]?am -ܤ姈H;#Tw.jqsZ*16'˽\Ub~XWy8jȟҮlI^;ҷnm JRe6^vAZ|5g!}.֣?/A ɰ@;ڣ ʟaBj|Jd#Ethۮqo5HL_,xq1>WЈ*o{6L|RBuokd}4$dC+kII,~W]͹JrqUDDF#rOhiWzԥC JၽbvqKB}#Ȩ5IG,tn^)n *6]{p[GoR/ @⫀oM%F$~2 $O#8٧K`G3 mML)R'&'kvv7w\LQk  MN)Q ^˽Ob0lJV8k'a0/*nLO|GQ])F&9gujܒm-=|Bok3jvv#{>OJE6UX.:Z.qSe큔T gl4Z~+@㫷א!\n$ai4O(7vQ%N*艕 Kcxa~,y1#tBA_X:Y-eyZ Wd`s$l)`S׹r%ߐ:X e[va6W.]1Wzb6^S&ERN0mm=Mb5bc&  sv $6m%|/t4Y3޴t]Hi55f*z40vo-MTy jy3{OlON[x5"^[a^4 t R]0"[ u_l'\+h?ΰ367dl,Zt"<zզ1H(9=q(:uƒ&J ko[|v9`'J" MU+<"+Z|ډ3П#v樧H:aF!*/8BQ* gI 1Ԍa@q`9vDB_Mk0jͲCeazՈd(q"(dUeQv Qp 8C0 穩.G%G6 i͘gM灦BWtߦOE]:. teلǑ("L9A#>:^\EQV6Ndr(uZ& $c 9Py E^*% 6g[}Xf/DjpL oӑz~hqnDY^W.f}2{B;TW9/QDě$]H QKBhCht- XS0RqI/Ӥl"bdŌ ~8ԃ)hxAYAibm6D_., TG- ߮IS}b7 M-YߍQ9"Ɯ0 59Hl߿9('V vI|͢1=SȞ"~sح$>h|$QSX#JLf8 \w(lqH?@,mg !-Metߒ&Z{Eľ]JKv©*r됴/-t{/шkj:!J-ӯH@@$3!m1we:M>a%U_;H2<{Õb PsGSqM {Me2uE:쯩> sAeq.ⴢuU^i)==b I_?C`t] @ M@)6r$g倯N A@;w0 V\n h9e/f2hE{^KRqS}Z.4F==cxqӁ{Jih!sTR-I7`p6ON0}ByrTׄd/Z\Ahx,}h$V&7Ta3Hau(ֵ/M/$ד8jq%[ADK .8ޓy> a/,Fɨ#PUOZǫJd692\f!I]AT6uexejFѦtبS3&#.@9- Jˮ ?,GFc#Yp⏫qQ9YCJ27>>`G?RUMCSADr䫡Ix e<;sDp1@vl"Դ|Qd;/:CG55ML1)Ŧ?9-\q=(xN65t)m,rt'^*Y ]bQS)k#ύGMJ l"C.e>p'U`NIl!lII;]gjK-Y\ZeLuʃNa (rTKMٚuǘLM}]TK~n ꊨTb&\$`"[y-_.&} l-)Cى],O0UjF^RӮх)Ck'/z?ZJm FQfIЕUlBCw>$Ћ(?_F~o.! [Va#|y.uffţɷ[ۆrH;&$C@ACE™-`oE\y10Txwr|dsÁ|yLo] d׼K IԝLtfvlQcذ=q-H{|x )8"$Ф}w8Ayη\=o }$=Mgv3bL)7vg͋ivO6? o/*g ƳFa(̡T pUq}@!dG*>Begl>m?}eӉ60AX֤{wkfnGo{<^&To;1 \Ծ<}3'Px7Gʹcnݧ^18TRjCŘm̈́T ]8hD^"jhXwײT]CCnqKns5 ]I+ :I)? 3IV0?d?oBvQu#+UBw{eʰ_$^5~eіd9+5ў| N÷g*ID46*a&./2ԕAŸ`.@P>Z/0E )Z|u&-k` 7q4|K~J+Pv*5,ӬwC޶™ܝH{)ѨJK"s5=Қd3an<ҩ|Yť<ݚ0j۲ikcg,jq#%|1a)aʅ8Mq38)0'ɓ`UISc71~οqec}k Ä ٮkjn:v1-!)W/q{m6{'633KD!- \~.Ļx*9UWC]*},,p?+bATғt8Fq^%GOj%:t['$S:I@`5 6ڻn}Ow~D$s|O&&䳡&e4tr(̢`$}qGÖ? ؔvQKʄ4a L.+kLW6(e6 |*$,>1Di~!6g/U}(>S|ʶ.B=hq9@:u:pSm%8@T~6l3xgK7t0pL[ ,;"'6ԯѓ}x3zا>c#ڊOœ'g\RI:S8'L%b8">)yLD=a9`,`V+)JN2ķA-ahǤr6MQoCKa>- P>q8jDrCpZ7f%y@ڝrj8$#.Φ&}VM2p~6'I aIrj?&7yXU#Fa/D1xpGNAL3~=:~=l_^ (k9b{TPtW|wy|}ĢSwԃ1 l݂0)ռ Pt!\2 ɥB]@4 Mj=9gN"Sلӝ3 =L&JP7D-SnI(8+t`쓴m.b G*%Ujk%933m^!&E̜s|ғGuIJc|Lz T -IǷm-Iq}?9G|85C8{-Uu+Vt+hLS'QM?7 ;sG5[1' ǁ.Q([eMZŝKZ|C谁w+np75 QoA.7lcxa9/qgO/&]u P.wq=}"V9jń?fho#3Po@.}(2|W" MщOXl(xEqiqe +5;⺗`"& ._ l" nL8Ai\˨7 ^/8QiԻ& Hsj^5{tz}XnP:5UUS9'lF>㈛ R($3Nɢ8͈׵ ~|ӛ%0] 䎫w;%)[lFKn>n Nvt3-d#wd .' E:@+X)1KB+ht~~ +-(>[A1;m[āΟ re^^ *wsѢ0rxW0=g b]kݰEհ7[E3朹A^ -M)6A796C)5Nw-/ezue@KIqMؿu4e@u䫴B kxZs-xS-LE_cS](X0oCNь)gB i0H3)s5l }8>7Jjml`{ zC=3ŞU$#vsY$%iq͋Y6Dh Ny57wf*Q?x1vrCV~IQ|*~%Io'<ÃDC&:@> 塎N%WE߈w!uv= f9n}IhR6SMZNy0.0_iV)zXX^a_|].<8Jhkگ; :V֫hp1-\ RHd\ Nq#&9}P{YI' oKg1T5$)%Ej㦊HvzdKLLQ}MuT}XXNӉKe2]AW[F"SUIpFϴB.:̌r\a]W+KҶaf+<ITg҄'ш)^iC*to~I\~4.Nڇ'*K@qƖcPh}U2'ㅰsal,x֐cXtEVl%WԔI>>TBS8gC}hpsa @׆GdmTkp=Њ7H:`u{WbA9Ɨ< Dۑ#z>/+1 q5V5Q%_0Yu))-xS<1֮`%ijvX67vCdXemsStc;VM+RiekrK 5\edR#hIt }v| ~ӇI3Ӿ6B׺1;}m?NgPd|=;CWv;dn/*qmlfNvXOpkl\$LJ{ݬJg+(ڒщ X}ULkfXaEOh'Gѫ |%IEd#ʼ4L%Έs c7M UwTќvL  3㵽l'TAb HRPt@Vq?Ib}FvgPJ >D'VYxaF.ZFR3.b yG zd [xgg_b9a1LGV,d2!!{$|" K>.qa;!, _%dr^x 'm,C>S Lv5ֽ%#!YV\ji׊} dJ&) zAEVJЋ쯘K5`AvƩ :S]t+=;S*FPbhP,WJzÂBiЙOԎ3[vk๠\ bp8hZ'UQt;/Kۆ*JcVu. գ+гyx;WJZ YBE _V MVYPV;J#ڬ)c/dp dvM#HzJѿfE+\|:n E"f7+*l=YN<þ~>{W c*8)aya Ɯ&%{ASOK+PT.G)(LTfLa%k̕)=⭳4*t ]2K}K:@YA'<0ԩIIk5.z c"MRE%|ċ( s&q E)ʟ*eߚK8ci* `i>1v+ )anv&!W-XpEܘϴNr/o|zZ$_X '7\&}Շ,z1{V?Y6 ;eKjOZ-sBpז\V=aݠ,0pI4Mz:~E#A}?rZ:xU`SY C^q00T3{QtZGqO]xQ9 bNfHhccHՠ(,ы&Yѝ0%=oၓ攁^|#14)6X+Ug%&UdO]t5< WB rKV:ܬӉ qɝ?yBO?bh2>ְ^5B,x·dZzH+Zlr &"uJ8="/>]|g _e]z u'o1+5aC0HOU)"5p G܈d =]EA~Ew&p_E!3󚎺Q^43DlGiXb~~J˴Bw/Gi"9J.Ӿ/3% wQt<#Fwxzx[a$ޙþĕ柁cؠOl";1a@!7w4oa Ċ2KWWDǼ j]i#D$2n۰:~ Z_R?h3qIY/$)u=!22+nolC;s"51bN>docM!z /$F^#RS`3dkOc7I5S pzQ}Tݎ2V"R$nQ$q=ap~ -P%ڞSRN.#Fك36HRu+[βKKb[Oq08F8$qS7g^.l!֩y B25oIȖ=EYHGy#z8,d1ސ!36uixZvvaXVR|iZqӳ.j0ҮJ)8qt"JMh^d#2 E-B9ÏRda' 1=&]&QO+9_H~Ĥk0D ޽HK}" RŘ|BlxgPjɁPj<(>ŌMC2?hT`4K%iB 5>8S?0t tӧ l6cAm.H(ՂWDJ~>R]٢8<^w(2?2iCН 18h039xiڢdbI;DB]>?~+/ ]Tpr&RqGFg<ϱK јh%?GTFM\*B&@(֕!'(^ɨLx,e ;ej"2`ʻlN8RՄܟUڟblX0$af`1GӸXc]+wӲ(:ҍkm_#^t;ۋVl#{(~Z> O^R(Q?#XÅJgC2Z89[:pSg]bU]!ftGe]FTM T; n/3I^kiBB6䡜]!u^ՈU &aIͬ!j͌{+^>V>} lESff`Y5+J43@fY3{tfvcytkP݅L_qM[ ,/ྮf& yhf;yyÒ+s3qOj9 tT[f+Y](ٛr6f{˜8ɈsPˇIV &[y筹#eĆ"MnswY&Ӎ~Զ)zOBdyiVdYS+)4[H>"up={gH$dLW)ef|}& M\=[5h&xXr! T0*?uD"j]NBiW)j'\t߳i1\܍A̓ iwƴ;C_ɐЮƭ+2ýoak@?eW3yڵ1ʸk]g4AfxX@'`U\_E 3t/YЮ6|{լZ+o.qLjL=֬n/fvA<^~EͪjW___Sj\Ig+㒯Y=)Vo JzԪZz~;YTu|%}SW2 iSo*ߛ.<*Rj ˝P O8_OujUV6}EUeGk*KMUiEU˒Oc %,DÚ$(RIrԚDf)0M+Jv$+գ\/#&3TH_K˚C;w>4 %mefn*SFr1M3܃btRE5W͗kft*hҦ0eS NqsՆYo JTъHwq%׮+h-[u&BjzRM|0W7_ңeXyt,]V X!_,g5B~aY!V S+II[pi[A[аU\!:V< +ޯ 7_ܝK~r)VPeq:|UU\t׃tL`hb%SLBi٨ex(LVx&tc8*m\:g3?o`<GẅnP4ǽ/!&_Kt>+G [ۈn  GfKRYs }X18nU+)4S!8:`!ֹ٪6J+o.r56y},WM]Pl?G3S͜Nš`2qUnUu6|UҒL,| @' _ğ:sq(dR/k"@rcum~'#66ڗ'k۵Z3>V" u5v폰= K|%+澇nK@_o]G[._w<DBx C'ZM' & >FBPu ZNjWH\_g_i?ŃujivA5[f2nձ 8 YaIzgO[%v/]8Zqꖌ87[}EImǫd)6$}G"{َ4_A|ƽZ]q}}S͊kInwV lAu(wJ7COoa9M'ƳXm|n&2sʢ8L`/);|2es;RKAO.eGVM ~ČͧFW6e&P}W2+pŒ& NN`bsdSE^g-{~+ucs_Hy_ɤ߯ )7`8<dłV%X] G+{;*췒9_H0sߴ+;ϿW2+wYeF>7H{Iɧ oItD#md57K7mJ%|bW̴YNܫK 5=$ WgܡX;M]AuFYRf}T}n-*XI?<@:NyF#v Ne4 b=z0`4/-"0F6Et.II%~G+"A'-GW8aԲG#<ʋ8KDWr2cwG0/ xSx8. ڲ-us3r#=`XW .2@xQ0.d(~>OdeMq!Gl%E\J3hRdJ:В*%/W} \ؼ.o}40`3|SRpA蝿FL+\j;>OF#K_|vVxkT e w<E0"ӬApp4T#̖4}_hk C%{ZÖz wޚo\̨uZ eKF|^+":eCCK'ui8k}}y}#nld~pF =g:5Qut="3"V !l{4R4 nM:$qYvywW /7"I1F4ۨұ{u ipH'7h^2Ve& Iπ?A܎p7%5#}Lѧ=i0ȊW }C1ӫG#D^vEU?PsD'4'M5wR<<P?r0b8I5T#77k E>uӇz|Wդ:tkUeÏ-sLpeȯz0'TZ35+]tƶz)I<خM!-sl {7`ҥ:G,`߮) 2RpMF$rK=Do'Vrz2\.HSq /Z{OƾutCP6Lu դLiV#L`|N)3tQ2̖l;iD g Ay@"ӟq0QĖK>`zXehudHqb!fqG|/ @UnYNmN`Oųs6"H}7=wujzmPE^O6ʑkC5H+ IUˈ&*!NճdK Gŋ{O{] F=ָ5dͶݚ  7/b P7u6c8Q&X]a&|r])$Q*3jwd\cx6ę5-A: }$|$f D Dg bf&wF<%֔R_9Ր7$ CjwRqieBrx/{1Yk-Lۏg:;6 X8`X3"1cXQ;r KЋPif( =EQZN^3ӚC|dˇdBfJ)v򔢨')^ ih-; L+iF{/Ӹ.! }fiQБܓd֔g9r'&X!z;S~? l@T2t Q-5yL܋t./ [d x|- ᷠ%-nFҦY fďɕ"@\-kFeNwUۦ6CeBX|Xv]3LP ufۂ=s; $ ߴJ&Kc+3 D>L9Qq,꘭z-f1A-*}Z#>\hHDُ'l3 nTc{ h},/xZtxRŻاМd'{m<\6 4GjzNՔ7׏sWGL$Ф;t%F%8z=g|I<vOba{Ͼ0n~e,EָkZ2s J+7kFaiZNOϊWeB`g'+K*!f qVH hil4HM,q3ǠE|4!,eTwyxఢ(S"$HLt#G)Su.i\% O)79֍ނLL vR`}wO&mb_\M|+%tP6-Va₰2=2'=AI %ŗdy}*)~A%FgO0~xm D΂gln.^p\^eհÝ?67''[SO/kZ:h'bTz?CpzfpJ B&@V4 >zd@,w<0NP, GnZbɍ7J A.~K~=rI"-%;Aѥ8WńW0c2.+~P<Es EasvR5 :6=HL{ A++S'a(~TMCm㥶Y|Zh*]wJ>7ghGov$zyGE{}!Vo?n=\_"g1CE#Ij_?|3|8>y{s<.Գ@9>uW4I{4:"N,0E+=[+UQ&"#G D[8YJX:MCZ$e먇~*P4YK0H7ÂܢQ*dBXۺ[@:]kj9>aW =֢зmcI-5=9%9 qܒ?S?^"a{/XnsKW>[\Xwx֏j&cעVeƬ̬wo=[s U}^hړ2t{VWV !j- tP$1^Kh Pja(҃U8md7&;"Dn0pQfSl)/ k]%ZD} eưn;k[?-IokmgAO7d hDG!=O?>ޮ&<O%T:@51tkp`$2$tX1,ΙFn͌1{zPRk9weFB^2 ;=6;"7<|Ek-jkCY]庵ꇈs" Z^xMKV_f=c 0fcDŽt(o0oyﻭ@ǏǏq@80N=rgN@/ C%M4s>_1`;? xU;!WEcqZ yhh "2d BI+< +` #TS|1.zt擫"=;'l̼Σ)LLQ,匯Q-%ߺ},%v~"/-ɔu_m(~I0ucK}J>ƦwWdž-a >F~yh9>7]h{bNLs''u2QM ǭ;l JvEaFf|UwQ x s~_G!fBX<+1,QݶÀ[ITShgH,).o)qr4KzQ,&M1{+/@s)}njEZ;W(RʮK|:LKgAtL"׾]OT2yZʨ&BbouM5^K`*d"=tt'x()!Pډ^h!'uDk$FCY%{0;u6Q׸̶S.?8,wipD툓 mtGוuRS 2|AOe8 c@ F]a!Z4LR$J20}#y&$RW+pKnyܤ-s=Sg 3LG Di7Ķ! JK.s3H(`0PrRB*bJU+K# KAR G>Ң"tȠUC9"c]"+o׽>PC&!V]g 45'|\lrjG2`9j PWt]`@MђGM@.B Fe jg44sJ“ 4LPbKU14ېVy<.%aw+|6V&V9r9рYAiP.oӍw^|h39"9/Qfby''ci^)iYN޺%׮mșS]l vtCwOݳI ;s;),iyۡ ' Hk9x[VɶliߎmvY¯1a2uuߚ4톨shj5G%"k#-߅ =z%h^T}v n| 4AA3J;a[IVG]-8<0&ܹPW\k DPX%&8nǠ 9aA$mB19 Xcqnt!O^> *Eٵ@pz Ud \%=@Vjo)6tܳvtx 'ixxfnbA8x9  jsz{a٥>a5w*a? J+XI9W`muo& 8Y*՝!QMzKH0CB75xL7 kCj',ҁCo"¤f2 &^E>դ BHH@Y 1& Um5= M|['^)FL ~~8b+lF]wJ]aYd gîFO Tҫ{ޠ.PF4C$9pc %OA;HL,+Pw1;}#)ÓCʺM'_g23:ndT $ׁfb,N"q}bǒ7MX'`i}@okgQM -FX6}QlE}lwP`K6ɌzRjxubߤ5֕ RHL؄g>& ?\ 5y+&;mҊt90`rƖ4m_M3 I[>ʓS~\ iDDl_x/[sД"70!ޤF0ja8jLxDw/ Vقirl.iQuQxI#=}Ig`Bs.c/tL3<%E g-j j Bld8]ȡk+ptS:[==E&cuK/'|Z7' fc1Tҋ:t4D-PuL|Ҏ6nqAA{X,js\Oh-3!=OAVWMe̝[H9iՃC|9-δ̡RnXtر%G:M7uwUU7UIvkt1tpxY=(P]5k~<:xW_R/s/F5mA,+3XsMYqD'V[.~Yl;ksoc:ܬiqu 6^?ֶaҁ~Б=\uYw|f p|DN fY)F_B@C1X1YH{…ym(`תLhN8*NԧI4/nFC1QK mBtV?#6|y?dnraJ.tG4,4I׆JN}z.osܺ!R-]zj=zO(.Ӈ^J(8O=QO2=`O}k}J+Z'T?w=#0ZSSyN*M#".Vgr 48lz,&$+i՜0TP4& p:zaoh52'`iBEy(&#yٹ)wRZ]1b0=k|31P=+]1w 3^U$c=KL7}*N VQmOdy8o6rmBIfۖQ?y08@OeE!nZ}<%dtOr^Ø1$K33хtcQ9Ȥr8#ͨ[2j2mp7FvƭހX)6O_۶% u^_S2⤣X(΂>p<Ɇ6'֓N@=?h"3}d9EU-Dx{[OzݯWɛ&Vozn66bL˛xW]㗴px=L&|ۛTAXjR MR5?!3~2.2*J{)jY,<ɩwYQb_#ݽA>wp!::f>1:G,P掘ڠ ,:'m mGcW`͝:F03{IP;"<"C_yn@PbE^(VRNe?- ; $¡Yré&㭶Y7neB5c7||=hyn-ƊbUZĎ츙󩍵'?Pl^UĠē%wh1d0ZR&Pyi y<,l&AwB#K9 G#JǎDz.X^E{ 3y#%t\,?;b tuFUilñݶCne/dW I4IJOd(-O卄o z}<Ϝ>1<2xH0LNbPϞ:^p^Ǜribd$cה: E PVe1#L(}1 .įkdG8k4-f^e"Y٧NC6GCgG|zR/]/qܜ&ކI8? *8-A Ev,&"#܎o+tRc lTl]*a,6N:oGI/6'2աg!z4#fkIyPNO Upa%cj#ч%y>0#t9q * _aPa>]cl '=fU ׅKCzB%IvU?/ ]'@|lHy6q&[ >͍}4̫ *) x;aX2&3B#phqgH5?zkiF*h0G|RmT։M衕H4D u$'+d9퓫oєaw"v汃j:mįC\ J:]Jor'AqA3;ŵ5$?=.BkĠJW4`Ul`٭_jwVVc6+ z03 (DyObWp> SN-~=rVȈf$ ih΢.!pOn{`zZF򎇅2e-R>\{mOmБZMG#T"uz nZn(o!qI` 3 ?0rfwM$:U`ME7N@|G,_,餜*zԂ$,⬌QM8IFQ; zp/P+9,N.!ڮ V CԴ}:UXvlc0=Tns'yE"?3>SςC'$+ xU$} ś`!&Ae/źe:[Zqoq[(fQi0e,:3g,nTuPRyˆ{~C^ߍŹ<)µ';p ;XֱLĜu v9Rʺ"Ga/eB֖AGՌ*Mh*uɉ]FW, no8Ă)DnFhN~:1 ѳ1›5zTSFgȯ=Z]T \F/a _K)pF7;%ĞR6^Q(µ(s7HF5Ə 6BYֺ֓ov5^( hZt˫|JK/yԔ5WEZT?S6#| U'>Њ,7CCwɺ-ps@y%wRYOf m\O'zoL?r# hږӻVpeõޕ ~%φ;tA݆ɀ:\vI1xeOʤ,|6q+CW茡&cI%d\&/rpXt3-'<L3nL Z+i"IʣtL98h+k 8ƥھa⬄es XS^םt'2vS Tc_Pg=~ }k 1kIԍwf?_\eDilCc"&{&yfR )rs-xBPOq79ׁq@-õ0<?Dm2pR)Qqa]\\_Ð<S69g?ŒsDh~D "ڿ/.\U3N}4JeVGrZ+61{:%+*&XU0C[4SR`\.+rFF&HT8F:eZɄ59L5΅U FC3碂m-eWqY& E)+.Ўԣ俲E׼HRR~BwvP$:??L+a1tq ż"am%4k&An.ҸR)(ƭܛ潟RwmMת+&PYBζ=R Vy3;O,("2@&6f:ɼh `k1 ]1sniEgݖHS *<u F<`;* f!:Ř' j=ɆᑙE#,s qe5cO{Ɇz1qӹ|p8Fo.c:d.Or4[q@'b>[ +Pex4ݳ" m5y>p{tXuH*:[K";J*Ϲ$3󭅣"I_U9I%tT-RHJ^ G?ո@Űw{7 s9Bj]ͺD١G(7!=mmx  2 cB!?>wmbsȞV3H}`k ӽѩCV q0(I^1@}nH:^杳溢tuz,z9YZ" avǻg]5$s~9@VӼm;]/ᑠËܛ{Ԯ~UO#-ۍH9bb}JT*- }H!۴݌=5``uo盜 s݂+F~(AxAeVQ'6u~<Թ}Yb&ҒgZML$$L$N:W2QN7`" MzML[h?~N6.>~] >dnK/#s\'3Tчq;`πYQO7 ' ĚѰVpheT?I+u:\k? t㿱D9+)FT_E152cjZ%6霅+n ZC)&p@FgS- *Y.wI7Anysfi9C eU%R;dt 5N,%R.B/IAM$X(BQD7H8:xVN7Qk8j=0|ojM20(m|ኑ~lrB̘o>Tas#%- (h-=i(z#II 츴)ܶAQ*a$a-_UP| 3jp*u(`"Ea))!ε֔p?fvʚ+lOp;ͳjq)Ա=yx{"H{[֙|ȑ[S4Do3*^ge O ,~ふpS9HNapG bN.*뮫s<Ԫn9G+ݎmVL C xC"L4sJ KK&"l%ZY 5gXtbyI.xngi1<.uS!؞MVחzJT $ gL2?NxB:"ݧ"DDPqo[园 vl=BUOJk}`zxZť%<2B<tD{>.W@>p4 ]mgr|iYFi&5s{k{=bAԆ 1ߞ6IwkTGH=l_}06{\A+ڛ& cf3ҷTpC6*<B6eJ?sZ2!ڐ`kP2zRJҮo@#~M&ӎ]Ѧ1ZO==?Fb^>-YAjlpw2LϝJ5x.Ƨv~+tMIjN#:wjk]+F0Kص~,@׮.|-YgŁc^p>-٪Y8vD^u'pw8lxw5]|b'l(Rm ȏH\% 0IbpE_6b+6P -&W!xz oSJI*qלJl|A`MtlɠNրF]B׍/[{kNMY*{ԏ{t>Ud!Np%&)1I޹v'ktq6tI6wEe[Tw0*w7CGvjK$FRofeO6>/qWbSsTm;P)Tݢ:P~*/]/N1V5'6Xp>D@IYhOy ]d{ZVThI{jNUꑐ-MGLXxX!='%aD2"^ D xYŽXӇg|K6;a0Sg>yh'IVɫECʴRt׬g7D;b $|(ڥ̼E6^fJT-$q[ ꬲ(6;X4,M `mXplg':5c}k`I-OM/ uc(dW,xl0숿TAL/ƟĽC7hTP^d&>vẘ-(kuYpVkݽ: 1<N.7!]+g gNթ謺&bb%4?9RŸؓuRdZІӨlRyt@I.p1bgSx *Rz qyf$pYb]rq%#,ڍ ـu0tv؛RĪ '@j''" mDrVYs~|`/J P"JCp.ޞƟ h * {Q` 3>2"q )ú* 1R\5B:;IKVT #w Q3wm*-Q9.8* h>28Hw$R}wyBЌN#&˸qDّe-rVl1MIq@ Q^xrcﱄjK~i:J^o&IJ7S|Tp} S84)QMD$a 8kC{86&Ǵ:X^)lɔ g,jY*tB!bX>2V-aTʪS-  ?7[':ffeNBp76Q=~'! iu7B9Xo8 .;W0w|]"OpB\ؒn&<0n`Sg׹ׄỡ;$0<"S@Sf$ %J_wK]㊆{ gM6AGz ?.Tkde3 xΖ-7>:@5OEPv񕓍.kY=Hgb[D@cw 9oQ&,(_gl0!y-5nbNK <G/1y;,=+Zۍ2dO\VCX'*&taܽYƁ攔{#;W"Hyq:7p JҸ5 R*/P3@{,d\ʡ9Pd`ő xJ#lEp/Bi]Y/6q2,84j=a =3C8.VJՆi spMP?IPpY1Gq>͈p𤖟a*Ua\ֳA'?ʽ(8PBkUh|| bM?ʒP@/RpTK"3氬9v:bvS2hO`Tf xCYQZgRzS]7ŗQh t,(+Ӡt:%Pt 蚑plVȶfhaC{8=Z?!OKg.id`LpE1NPk oxMpȜȟָUp53R1/ cTbL~huv)skキsUhAQ mT^0nߊ̸Mzӝ".0T%A e'+ƕ(3>sy^eMf`J&${|Pd0FD$q`6Ku@2هbsvrA)%<ۜ_o)Lx"^#ā#ORTV~O!>T Mf(NTc-LCjt;pi;nPh!`K[t0_^NjY?XUwrvͯ)WYS$k,DޮH[@u[̗R&凰:d%>})e u՜{\V*ϟqp 隣X`4\_8#2.f}v\(Һwsneҳ /_InY G߰<dĪM=Ր@CwtJ9ݰ6@qIy^8%ٲ~n,yvi _yFdoU65mÂKz/oE~.\laڨewU$(9Y]S9M\~gf:5i>%]û{9>αXY#丄oȣuZBl9'%clnL&^jo3YC7JksE,C|4tSufZ +m>H<̒S@5=&PcwD6Um7WK8ݖ2.|4AV]0E=8l5 'Vyz)k hkN!$G.^N YpaGlo@&1ߗ!r'k{̀BhN*z"аw>x>xFp﷔8]dRO' zfFnf7sv41)ߠpK.s:W ̠P֍Æ~1.B|w ~cR P!6Fc<+K5Vc;UTj?WyS3<¸$??f/@:mNL޽3ݺg}.XXU35t(4ܐWHJ>t\5xg-ʅz˓2ꈈ[\^5FNgg()W AtJዣ?o>yjP/.~;hvi^4q4C"M{$v[0V B/HXrd9]eߜ&'[}͐ЁӚH74Cn#iy#H/B6"y۲cIG)REQj '芃ݭ##M ci`8z(cGK-PI-y,ѩ5(xW ,M5ǘHǠQB$Z Dq6."+ jeYl3>(U5? ].7!^Q8mԤO\Ύ>:j?4;' އ&>GkU`\5S[|q~תwqF|+PW*wtӺqz)l&06I&P||Ѥk=,jj.t7y6C 'Vh Y ~y еiYceY+ :>ҮFkZլwqMio$!DN5oRq;] i6j/9MJAgUw*`oZQLp`* 'T^M\eS '8qqzbIn)G 9@sOjLWp;6)rTٰnŌHs>L)'VUF~|BY~M|+5lV_ &5PJۯ,#rYbN!#aFԐGcK {ʹ'bɫ5 m)C 'fx| ?G2JUE|" <)tWÉ7(^"Us+Q}qC!/:|lD񡩻=*;lK]yq[e'r PԤ])ditYh0nUI/*cTKz]*}L pE"Ѥ]bKM;(iwiiu'3v-?K,O<q+{9 ʹ+y!9=ii5y7iXo]Y>qN}OzPodo([8zce\ņx~M뵝0c SY&b)IޅC:QGQg<{f䙟]I T'Yo̐{,_[D'ǽMB@6FZĆ0s<ۀznWYQvLYZ4s+(O;v3@ _)xD 1+J]0B?m~{{ljƐU[6gr/ HmRd:#teN!ZV ڂ6f[N?' a`#[K"@8ӎ> <`9!m\8aFf;̷Fm+2Z,HIvK8(,O 4'Ql)Vp>WW{ xp)}uD ?u9@{˧(^A/Cփ ]@Ro^7%]ʍ5٦r6~g\xBzN9&6|^PA9^^uv`Ǿ`#kfT"hzxf5:9nV-_e;R k8Dۉ?$!Ni\B{c}0LRqo9>W=Z]j_P%g6>ed˓QN>B=QbQmaK]V_hpu}~ghF'Y@aˢtj"#H/s~Iy0j fa$۷OKr,Q{dkU5[4u0L2P7e W ~-f+gxnٛ,P]?Ux{L}T m `( #ր,JZVPz|c~yfQUhBo8J˿CxUe{/տiZ#CZEEHߏ=kF$N~pe4n瞚בGSh/U,LVZ0I 7]D]۲he)]V8LSYZ1ڄfM5vSz|9+5A@8TA 'J(mxx8LmbԏtsRd4PoLGPFW:?`sE~h,ebsꠜE+S눼4t*ǯXy!6.z5eM"=>g$cC3Ц0Tt?.G|dSm;JEoLg DwȻnyrTwDwȸ̣CPv1Et5H+Aё0䳚gtؼ WPt.)1u/UbsF|GCvtF|үZ[XTd\{R,;)Ǜ@e̵}9>|aV)Denc^oZtŘ@H4IPi:P+mǛ=txWԃ]DWw ?l躿\'El_X-suKN@ #5:/W-7%ۭe|-_'6q‚VHruPv IWh)1bx <krL*8IaZ&yj2z9]%[Օ6*h+]זxg,yMޢ8ACWIm +Ko'5wS~w*펐8=19/S#-/RQ.;Jvkݷac08(!Xχ}Nܕr( .V+㊝%w֮Fi&lO;՟ r\R+_PcVM͈=i0b;hCX }Khiyd soCqgѠ02c09[\0U̠ˈ?7]g#q1~#fH(j'nY@iK%J_Dn%5茬 2}B #O>#94ҝ-zNXn}Yu|noX @@=MZ-Hc(tjsIQB )*, sĘ3??cAV_UApQcrV'h]7t:H^1Ot' _KBI"~xsSP_ufw-/iۮq݋ֽ^Xk+l#JӶ)fV$ 2!"P[mtļ%cN`m8.R2OŽ좻r< aC9dC"1xtsw b̲7"yP y&ި/w N &H$ E\K੢Q ԱQ+a},BL`8 v_ GS>oWa QCz}0Jf@{s"!5nC ix QZ\+"dw'hWK,>]Ǐ?P[Ucc~q)6T-ΣEb]{A' | = 3BonAMfh0 0hi%M:J` ȟZ7jGH  * 1w7LY~Vw zpaLZJ>CojUӂh DVWM5Pb 2hG3 f]KD-l6Mztr3Em9ݙlfTY4iv0,'St7:Qx/M+0pwc#AW~؆# )+%MZOod[5Kϛɪ0B{=< 3? A@UyE@Iw!+[b}#8*1MdaU&' / k'dPN9W\2Usd>KвR!2މNr2mg6 Tܫft @L C23!{Uz"&ڣoNiѸ%^aX,À% T"⃡F ^ hUF;9 -[ߋ5/pUԠe6Dpg`,O*{hn'%tH]#*7TKv*4ʈNrK2ak^Cuha/F2~1]G ~ O|r6ŧcO7szJ JG!I{=e")ɦd^$Ϥ28T}Nb[/ ̠Mcq+9} l/4ziۏ-HOtX, :2nӃ(Jل灷z+0fx~v^2fxgWl&Z('xD4@~\$Ibk_lYgJ@,B'>\O澍Sh5{e0vhr!PAnwXymg?RΊ;bJjw[9\I& )BHC]Yq" cۃZIʤ6VNq޽%wYhrcM]zxwHK?Z p7t<K+F2OgP`MO", 7>ccƝY_Fy4vF V[x,6t$,t"?C ؘk13 ;+gKnֶwGN`lv?DN`qpi"]" 7^!Of?9#WbKzrFٹRP[ =ʙьc㣃SiF:v)k/Tv3Bv'l>@w@Ud~>EdxF=z`v0Ƒtt iIbXI4mb)vgg%=\?F tk Qqh.PC-әEH윚w1 ?5EpEܵ(K>]V^% &֢^$B7t1y*[*&)yhx]ܜz^יrEL3BI Tf].eQzשZ@L&n#}܄ bJ#P4N9#$T4Wqd9wdZbZU*57G\$ a#At b{Өe&!׭]3~Sv`]hE^zW}+Çw;ZcrZ%5%JѠX8įDb@ܷ-ķ`,ZIMm NQ7PwhqfPz]B\v("SN@Qkʒϲ33;s{|12@qmz ړt]x-\Q0QHa$ njFT3tzPs뵧Ӱ-ٹ8ʺ"I1^_Sin1A@lpy-uKiUk̈́ `&'ةvE((i!U QT9o< ,Okq4~Ba`Sc\\4&5gKE ^HD̳\᥺`WQ O,Gc#F N ܥS9NNcɯEstMۏ8}qAk,)WǺ%V CdȂ*T<#/"Ǣ!Q$ MαIvwfw0UNYN=w=ŒtHbx˄9NŷT,HyAxMR hmz7iTL%8!ADu(i6A34#>oW4 af< |jaJK!׏QOS|igI䍽&+N9vY f3MwFp-#4Y?&6L)湾. 2_]i=^hR;քrJa4>>9'㔠9!U Lq3QfEKΒo0(#=nkkQM qhN9ˇN:ģ 0)dZjiN̐"k;l7I9^wWs"81=[h6;Gf9-x@oEż␮VF~%n^M~2c{#Qyn5䛿0wDG#_ }R68Q^+WFg_mqjW/ }ȆfWo|5bcՎu~Ď} Vʅ";^zŗ+'EJww5*^#z}5z34Frq{eN._RپR")yzK_W1a|(sY;r!|x߸knGzǜY]&YG̦|KĞJ^O(CeOr\l䒢ܶVj ū4rCӂL~mt.M6O ~^fgeGmt(/3:$ęy7GAK`DU'N c~Rm*~4ݢ<AoRq h˂(dG O{;(uj,~3e ĕm^_+X/xw95=eӍKiF.̀AOԯY"19ӏ9ʦNYuIf&ܗAi~S"g-Bѿg#2sԊ->"e;ó 9D ,:V E]#O.$fL5nF$3q%{;N5ʠNKS, n4D#]ք_>=rrc^C\@e_ɫ~rosw2'=٩Lv*aHѰ uC>޲ǣhi"u5J oWe8-5NRhC%Jߊc0Y 3W>ɗ+Yt!D|̔e+TVZ <&5շaRiB3 w/QXK:uߡnk}){/}e=oa"GDÔUBkE#kSQa~A_cUlSNRD7Sm^w[['&no wÂpj]67(tp`sP$|tuH:2 0WO!SO~L~,r3i{ZL@LAdFf[EE=׵R F~Mi= " mTUFe>@2| rDVfx_6uiO+2;w!AR]bɀGS/ vKzHRuoR52a]o&ƹ(w՚%3ds&#L 4$3 YBPIX|6{gr+nZ-0i Ng-}i(,'[E@ʄi&eߌ1}XaxqW\=HXPOmȿ:.\9%%5|B݉&t8d%(&稒 b0DrN`rwӢG1-no_Z%| %}Tpgq=JpFJ&}KY3s/l{_tO8 B3IW>mp>,"%r#]dxDrQ!fi16?t >dQC=ҙ tY%{$lX hsП~V[)}A/#jj_=<'[{@INk#̾um#y +0]MV]a !?˔o$,hGoȆ-Яm>~ v_:TB)Qcs/yƱt-'b3>N >|vkv8sX2㥋 F$$n[mnd[/.NdHPl;yUk47ID@L\b _r,ǘot> .xoӝx#_fIơh{$ 2  R#a}BeЪW;RT-".Z",|ґ2'u+|D/ V2=%x=0!,ͼ:,-~OP#6 NU>>+2oWY}>6`[uʪϙwhMp aoloi(n* λNIRz*pcʶwA ɝMko^voÿKe~K "1K 3YS|̙y^6)݋*^=G2=~"ꀩ"Y<oۢMY|Z_N;So]2_'$oh5(=*bk;E^M8u*HFN9Doja{ =˵u!59>"()܆Ƨi{횹:w" *W-W&0Œw1<)$d3V&6 zS("3Y:dMe{V>|ٙA 5>=[ } p1ޮ a-KW9^P?h<*3iiN/ Ğ3fixY~-|-uES^8[ƙ5nL?ғZŝR.U˞FbOxNfk~4Vܒ0a _-! ڇ@32[__S/[Ǚ]ZWL,Y+H/i? y8褦 zONl=K(Kjb#1>}?M{7BGC+7|DvYC" D3AW2՜{RE"AVɓ2}z}|7~7~0_gҊp7:=XPYh~U]ofwKPN?xǏۉי;}s_u~?`·U9* l0"^Cs8hrLG⑪S{Z֢iOs:=еgã?}PFkPsܢTKSlK~ ^t6qt RjNŤ9]FoR;/`<8׷) [{@ϺO EFx=?5v :a dwm?χ{3~GWDwtc>(K_1=Pywk/{Mm(.BэTVE0޸"jhӲd+WUmNY) J ,Jƴf҄vn,mW6~ibH- Ŷ*s'*ˁV=z>fd1t1ԉF͸1'/qm#:EvYJ@"Oȹ"8怿? p@A%)tQ g퓪9\bTNrέ$4;;).d3*߱*a.:KLUG걌VAr>+a O}c=NB1]c? =4Tq~S[^tts褘[,H43%>X g ur~ nrg6ĕ2.xޥBp TL\Vc2OtI $w;=z䴆Н(E5cdOxzhv:uCſ JF*(jM^Ӣ^q eǕpo`^9kf[s0BL) uHtj hNA6#ÑR5hRr.Xsnѐ*._ $71킎њ.!PܑyC9t㴓z龮U,)ɝFuPV 5p#A4&G%W.`0ZWX8k ^|"A@-;HjHi>kW5P"CֽJZ 4drs &0.ƸÆdlaYw}MC`H @NYs<3uFYzGŕby9cy_&%-H9`Z$ fz)2Y^l..^5͗yT ;f d},_ar-`AqOzF,n{hxx[0{@բlaWo>^_e2_.GspN:^_ىKeMEf{a[dg\wwAgg`]C  HMfb'TF?;gtHPMqm\jN9@2E9yzl %`=;Fww=P7wAS>q栴IO/ִ.JRo_(B>99r2Zg/1gErvLwۃjy]-^<sU&ՀלB> N-ִ8c Ty%:T|vNE;Mƨ|F'oi2uȨ|;@YX KPe>Oy3ƌXv4NK4Էa6U{\O *&lbk y-+ƹu\ݍ-KLs |iZi,[Ӡ-3srUNA+ ~w*:g ᛳ Aa0h)%q/^DbAȭsaUA1IrF95x(K !BD+:K; +(E_,' XūĀYny!P|@(ŁHc 1PӸ g(ޝ wp4cZ|b8mk&\dvT>*| ["qUU m[/Ch53:Ŝѡ<= I; mBk;VK%Ӣ- i A%㔁dp̨CSi<1i4Ϗ_0^>=ޏd/vV44/rb. x{ndžIyg-iB31;LLEO?lJs°VL GK"D *qf5>w^ v鴷jFYijp̀ś* lRly]z4,`X.+Rs4!d蠧iEp^7ɲѰ/{#(PmZy}zuyr9f :Npc%1-4|&^P@`Q3lD-84C)I)9 :;rY(ͅSa-Xشj:dH׸p~gWds/ű  2+\/usXo |y+ -F0s {1cۇ8)Kn[P$\ad9HQmLV)8.s:D9.${/]1 bUu:|"y?£i?u JůgYy2|Y=7d|0~v tqblqy\Z`кN9.`aXl foՓxbvOF 0ݹ~uC?M~{jJAd ]E&RR|$PȪ^2*=!1e'[gJgn/Q~ϳx3wE+'|)gy-XؽY1Ive-{@ɳwĶTE*U|rժM(ǰIf#2ɦT%G+FqSgsF `J"&wLQ:hPJi#qU*?Ov|)^Jɽ euh4 zOnHn!]t[,ٚh.9.KX.87KALQa{~+J8Je{;J22s\D6- Ok^pfa]q-2 uV;Q!e]Rȡ%k7x#&A5:{A|gfTfymqS$!T"dQܾ|-vUU'rY`?"PC?BW*&䃯Ӫ0E85L2GU m5-I pCRv,5 Bۥ\gYD`9J.ǃGz"Cܦ*؛J)TIpLڬo/kR?C"ONGm"Շ^=ڃ/$ջ'3<*v۽<7T4sqògzFcM8%a㊃g/.v10>A=@W/bd{̀dG{t%nC3)WWn< EϞXr۝kL`~' Nr,󁁄E&fEg);hGkaS|Y tG(i&gSh4E3cl"NWP)yҧL`9ߥ`Di'Uz!@vFd%c\WzmJB [,] @i[NĮPz;^Fń=s-fpC>9`dŴL+YPO٪9,:85h`[$ AJWNW"kcʾӞC+۪ ]m"Պk2CM+'eiqH.QkIDN-qF@I_mː5#b"g)Rm8| h m wOSˈLwuoƑrQ995x bN;VW;PIslV1@i[ȶ5@tfԴU;6aiId 6ˈ)UEK:ؓmU.r.~0q>S=F{owI-t姒ϣVpC+y }c|bE| ,v*](Ga;1 ~;;4m1 nukǖrs}eW` X[HfƴUvy)hIWI/Kz bf9ϢpIL~ʘɩyV*>FsUasWћ-in d_{G ecۍy{vֈ?c;\ B`~hTlncfI:dˉZ><!\@8T(7˿!Hjbߵl{CSDVIIN贍sB;8ISf["$bĝ'AL$# 7S]Ȝ2"_0?+f.i[ |ޱ+0'pꓭS#52eeT78FгM6U͛<PRlCY?ycVpMmchF&fyR RrS+٩ILz!lHEIB%~ۼ!~gbN|h2L,Akyk{C պYy 1 y7r#9jI_;T^-ۂ-TWWh5-y .d(M˺+ 5%$7zN(Tgjʼ8! J,5kӭimlu5ߎk7 'T!4"xaD@Pt.˹T h;g)~0כ{]x3Ek@Thn̨y,ς u] gF/iU qr/Gml. f+䁡 lmWZԒ?tQQf- ־6{Zcǹ-|$Y;' ' yx]zh"c]T(9m;EDd%3$BWa$N&dō1^ʻ/X]dS =G(%`1d끹ڵP*]eg`+&y˙Ktp?=:z~`í:x~z{>x !e}E=#1kr0 mqW@Ŭ1d8dtg򗿒}<4Q7q ܘnwK>=|~3/q*^٨@H0-aъ N#{tI,}U|w4y16)-''C=׬Aqo({ёo-ՁA fd5(o{v>_z8sob4l3_( ܹ8Y/ѡA*帱B2a00{!J*б2BEd7b+y t6+ƇIfzQq9%,-[IAet_qmmԸRBOf%{]p{n/F; %qѪ^#9>m͛,{Y$ν:d 45Nn` ;-4T -!duPӑѶ9|7CFWPDP,~Y5H4<0Fℼ)x!WTSY3޲{96fNQ_FD.њDi9&`ULj`K,<&jC4ތƸ=n茄;^ L#[eTx|XۃGɂh$on`2Oj2Yga&K}~'eױK[gdDyiyQ#]Ӣ(U`+lFkY2,MJɇy3-Csg0f  EfO aUD@}E<F?G-`ȍc3Ҹç=׋8hM/' zO:Q 'a̽U@oSBmN$6 \ 1H4ʵ saùy<.eItdȱr`,28?|(JdRo+_l+T:nZnkf0g1&( YHm"eq5{h6Ê9!.!<;'v8 O)N>$|vlF /:Bv8A&Ѽg$~Ʃa\esQ%N{y=h?p  ^҃aS'8C5 IB_gmk?pn:ٙ|ϰ-t{{J Phi:u$B2_e?0Ϗ;.^S6~ O82yQ+P2jRf7䗵|^Oq}lZy\6 mN)P"m2JbyKŷ!a7H u4+GƐAt#ruX²61[|(1t2턹6WS=;8d.QN;qo"6y4f*آ[.Y pIܣg,}i9kLCE5ǔQeg!\갹V"R˧*";+X(j &뺻&3M|qrP@ 28ՕdVt5J"޵lc"U:$^Ո'OGϮ@gi:>Kيxx?* n$K9I P޹Õoj{8"l cBCd~;vbT,1ZQ7e *HLѹ\;I2!LC4 =:hK [<ӑW*m )x1㪬 "SAe6"51d-m;sb8)xJ}TsRB3La -V!»25컅_(_aZUɓ|4G'$Gqy_ g.aX'ZڻY'^V$54L !Pm/Aʰ?5Ha:ÅhANl j. $QRM('ں ޯTBͭX!@/3Ҧ"h\G٠A0Cw N,rέ)0F?}><P!hA-/uXޤS`1<Zp{d4Ur]XzXn/˥@:_^eu!m8Tä9i'g ,5S#bx@_?/*?~(3/ `TwHb] I .S. }{۳a!wlDiR~F 7~͕c " kfv}*<x$&U l0Tn1y6վ@mqADF-:8̛ z6=>F?$Sk&\-zeyI(;mB!_PϑW=]hKK?i&z0S‘T\Y[01ܪ)Gʏ 2bM\ ƝIJn%avP3쵵7"cl:vBai\_>O7a캂Y}0B̦r*uCNrBFWP\?':)!/o߂2C-k ͐CXw0p2NF#BAbݎ2B< FtN<$\$8d`8+8t]:;&"+[BEՊש>/#WӰ&#^[2\foA/ 0FQ.罵|ɐ= ׻+JX a3Yo=x@{AIKpmWn}-_w>=r9ƓtEFCn4 mYR[g`H2"W3-Q,Z$i=mp~BY+zz9=@` YߚnyR.B{2޶`,_@[c'vzJsIH\ Ԩ.9fxɹSN2ӞS{/71ڨINAwG$3?o:bq>H}w*zWgA9WpL _%'wq.Hk^o@]{k?h܍#'d11V{eMo|cPA A13|AHd1". ՘i˨J_kaq-E˱g=]NҤ%D/ȅZdC?FhdRs}(7Z4(i iP;I/S'0Y:T{ dj& ](gĶ(X 5[@k:ON aonS;.ٔlnnNבWVu/)4)G?œɃaXTw 47A\'s [F!&uSu~~e AE %~" 뾘}=Nw#8`d~15/;<Jbn'U<%m\[5ǏlUkD9/ڬ7'+ ,ɋ'%M~oCftgwwa' ocsh9D_:B)3aK q?un"E 6Kފ,]P(S6q05Y<"u$:AKDN>w#WmFikz:/ލ C>˾bCPaVWf?^@xe_J9L/ F$Iuӫy N=bsPrmY5*!ƱmI;H%Dd,ˎvWəHP˜8G|oׯPݻɜ%D!ޕe_i v%P[[K2$߬q!sGjV!b"zq{f<]8 }|Ɯή73 f6qOvz#tIyon#aa|d qy)R;h}ޡw1_?P (v@&|rʒoیpP.[;C$D(2l}*|.j 7]6K~ZЀn|f."bf{:?șx@/BO=!q8t+({m jT;϶ݡ@$ "ۧQõGs 2@Y5џeH p ˹3ljGo|n%mJvǯ|e-F/A8ٱ^"!%ۇfsESد1tQ,уCSܰQP y2/Yz1ncH$&zhj]4C;;+i܂wQ;}:6r~m+l3𢂘2tYd~;_)tƺ︯4Bz/BܶvRn']b#{H"4+!x˟~Ռ WC^:@sA߁ [z,ŋ *He;B9UU-x> #4$B' }=TvN6ЖH ,X0.̪9iH [EY82+McM7#O1;z@hsgd2lH0\𝑱[|<ø )N]NȪ›4b4ؼUԣN' Sǀ~B-qTX0S(v {;G/ϭn@bޒ ^޸/gMwXi[gO|tĚ/^^Oym JErO|oM'Kiv|QQ/N} 4 es7937ݠ}~}H~h#`7Bj>3>Pˮ)1/)։Pڞ'˯T~k?\&̅GYx-씷q޾]nώQnx[VvB׿2oxEq#j܎%%;6^k0p:SOuH((Y]t m-8vZIܭtq,Q ȟ{+@U[#0ʙFMTWex1@EțTuf31;wgZIw9nhĖaw+G/sK I]oW]w`p t%װsnzS6ȣNtkoFBI7]62&en|agz0RlpjZ5=^HaI}R1\Ž iSR U+ؼ ¤jLS sE1}ܹ%Ϋīq)QD[k/s- h=V/s{ Rc_Ln=os8*Γ,;[әxjJ( 6~Nr&+<鵷NjX^,:>QZiR-E,㜄凸MNލ~qM!2z.E/xN)_' ٘m[X`[|;Q^yZh;"l}P3$Nv{Xu5FS]VD`QMa {&V#+"њzA7έfpïHmJS*M&LbSͻ)@Kn*5-G녏BFZUIϯ˞ȿE/R_NLS2rYj%uK2ƅʯ̗%.-ߎ>=mK0o۔.my1TMCDxR^7X|^Us5 !Iix>BexLr͐*0|Tx;<]T_bTvrsZT(%(m1hc4dFEL}#qhe\?@#[_~_ s!!2nEe2gnb+V~t uU( VuҜ.B]+3&ۺS#k vSŤǵtUU4>0ąBǼ7jF4(M#cj1/lX爪ٜUsP,2s_ G}u"wD~VZq@0#yن{K0IJd/Zw(/U\dTL&xH1$">{!<5HAF@b1\6k҅G&oV}Ofז\Qd4^a lpI D-Zzqt7lA N٢βy-p_7\̩:;*&TJ1na)| >T0 ;Ey*JʦV<i"b9RYacZá7iz#`E ~`w`t^ d堏A\j+{ʫ|R 0\!hW+֡X?/x›(t*eYD#i5. v7 ] |QaaJ_qC ;yJ"8eBoSٵr(PV6!{5pWДW)On3,~oW[G]x^y`gRD\3xג1A KIPUX+qEEBVTCWZ6es~[`}fA?O\$Ep[ !+yI ˈg"HL{oeg&ip[N+ TN,zF:ʫʣbeMd5U9QE{)߾&dM;C^)w/ ^d&5tYbhꨕ(%Rݧdմr 'ݖ +]yU!zԎh7v?>#_Jdרf*wYj!l^ qJ`1;Cn#"VB9-z"l_CS}_Nxe߬%ܠHMx4'YXh41j\'nbCwK3Qw< S<-s-mn>5,RIH/7DpEX-pG_t*ǰJt4KJl+bR$ (f%=@@ s!̸Vƃ!bi>ܜ~6w0CC$-";Mi5LyV_@2c:]E{OjLJGf.ޚ`\;Xr@\o v88dtν!{k6ys'TUf].Hp_w6K$ܣӈO16!u$Y[  mJ1]T ''R^=İKHţh?2/(dVAσ,!:9;7mX%CɑvJ`y0ɜb.kԛ=1,熶)#`a@fr_ʁ1lpPӺ뙃с["lO:]3s0!+%c cy<ϮR]?5tSN™3[W7`ΖGSm3{b V= s(fW4&$Xh82MsTS$?JHMZ[6UP5KX4?" #7֞`d4 M֥2U x6l>#,9IRg=fZJ?gԘ"iueN귚UXdN>z6fvO ã?tZ>Cv &/c޴e.O L珿?A|H} $d0QFw᫙{b)&lHFn6Ȇ3-NX$iȘkjz}>  V+Ӡy9tYƋq.yYLLUqQ׎:>p>~AM33yxH g3:S'9j9&) jwʌADx9yݍ3E? @r*>WVA `+vs@YPĵ81%9o\Ii!h9c`j}X#.BjsiV Y fJU ]ѣu8φj0rgN;C؎hK @SHaU=͗fI@W&R[OˏoIh&~4dc4O:sH_SWzA?yAY-|VNbp]UpsCdwi~TN^uŋӮn/n^&tQ,i\QRGJKp@=.+A,|KSRwϿH664~"\oѮl<഻t*s7sL2GQng=m%\t9Y&72p%Wn3.[Cx,\P&P^hOaB}>-gMX$R{}tE(}TW3D >25@_Lh t I06~JO, ngW)\Nq3]q${{ Ӎ ;qZ|Go_fY@ !ue( sKly\K ҘUz> e/y,d謭_XsP2r$`qXs`n` Ĵ5x*Ћj-I:خ. Z\(S̯IT4/}{ｬp10|s> @E?w/AV'k@@f"8l蕗"lC@Q՜u*:,HR豂u!bȜx]l۞JL@糧W4"cXh Y "_lW (LуqcʉJ8,z䄠 *: -'dUɆM`j'x+˒|zJ D<>|A"NVZIֻtpbd7A"$YAlS .l-h4gߛ1,361.=Cǥ  `ɍH1 /(32e!Uf$FИv}s3MjԴx_o\Qtĩ`8|mN› tɅktw#Q2̬`x$(s$:&5^x* /&*(Tz1 0+ l43L%y#7 CFa^HW d0J.Ҁ!HR sNqyKfDq!wp]`1R&[j-i(lA?e L]*%!LaMA–CH|ԣ0q Y{z|?_sc&si uAȼ}F [d)>܍r*~ɞj%l *7XA"y"$_T&l[gSfJ'14"=t x!JdZC() K)tJ]1 $y'p'  [|g;p&vn]fk^ ?O?!Eowv(} ;Ύjq{@;-7T/yƃEzN3xk<~ | ho&uXg#f74ԅذ}i#`DtB9XnۢIu۳+'܁gdj{~lE'L2#[12{*.{1ӭBmɣ[=j0˧6 |(9)*S4T~4f?e w?ѿk)x=po<_7ퟆs.):*sh/Y>׍~O&42+nI kϿ.M5c5|ŏ/N7a4}^D$f|ji!Ty?`کbq7!$uڰԽ"Ţ3E!kjRp>"ct)Nh~r4-6.Pd=e?;^Ue._Ѕ/qx8~|g} *+vjE3Y%Vx1."y9q=yzhIhTŊP}speh;DwpNq;m]9aZ2I6z\dUQ0F<_}Oŗxky c Po'9ZEu̫5׈Og^[V඿l"=1M dw݅R]#%"iHfY<_(A Nqqo&o%t ٺJ:y[ȳFLrԬ)ʩ^hJv!6T{ C0cՐ?}x(D q*Y8o8µ3hOG] لqpC CRɎ,` QROSRBd,i(yBWriɟuꀉG+`M?I4HlԦ8Cw<-Xm= 1٬[[ݳ++C>$7ou-KazF,g~8[ Wr%AIfe&1IF~/fhDO3?fy"x* yuA `ԞEg4aϯ{bQ^_glEfq2OdN*Neҹ)mL`$Kqޑd.e9ƢRչ] H$,~89/xC#/B6* gD2𲢜x4_V]&!LoL$<,#sji}3#fYbg-8'4ړfRzyD51yLt/,$az֭ P撖A}}6z3XRޣ(\ _ 2\SH)Qtn?trUrTa˖0Jm z75Gi:rЦMx p/P] "V|FB<+O9<$7=JOJ0jWA%^LrK@(28/I|@ӼjOԴV ;i>MOr|'Qf9r9)sX1O)җ[R|7c;.Q'd|Vm!|-xP%vy^aa$G`΂-F` 2h1#t|#8_wѣW`ly)[Yug \,yx6>xnM,ǯqއ{;!emWWحle.huɹ+l6t.Ó@/KnCz!Uj%tȼ0۶NH 4"΃31r*yC Gȼf>aen!U51:m@jE_ /}Ig{q7=pi[o~Qr;kz+ࡧ+cds׀/]3c_c]R+M8Qή ٲf␯Kߑs ٔWVtY=)}C'mԽG;.Fm*'^PD3@k;rO%!Ŗ,Q[Yny֋*c9 nty ,AvMRzHOI]t3` l,Dۊx=P65(ݲihH1d0@DktyT/EۻLn6S]B2 Ph?F$9?5M]=!G@+0LkDƅ]-(3iٳxAw={)7C ##i%qr= g;A.CFN݂֜r/%Zv8 Űu_FV|]Ry]0ϘȠ| \R`pc0j33欭XS l]5( ;l0JhH46(e> x9OT943@74UGw<=MA =5Iqha:S:XL̈@p;Ԣ_|B xXy[iEc'Рh9=l:tf\!ձQ@fR/7,AB׆Y|(r>{ %U&:"q=Iȸ|7{~}: ќkF^.gtlw;I#prڋ7;J#OΓ[Wuh)/$A3ukC!öhd6htp w" 9rah$JAGBi|. %Kqt421Γ Tm|ǂȜϸ7VEƱ m E!sWdބGSCpS*$' H-x»5h,V\C^#d5u- DF,Xo1jv5GɁP?%Ҫضv hIe%i<{ǯlW3 K=>i$vf~Nk4i8Evi_#*7.O g3kU7_:v ܏ Nw?s8a/y8wri^*겡N\dcs-ُNU54Ft˄e֜Xwx=$J|\*p,rBݏ>} t-3VT):(H"'lW䛏KRz3[JL\<ŗ8&&;;O'd V*75:w9 B{ŐKOrNZX9P͡j뤴mDj(]px? wnK~O|VXA˔, 1$D$EـV9nZPYW=N~7uڽGIN9bpq}>6]R>w|N$3A+Eż$/ 1&ߧك"~Ѕ6 'G鄣5-컌4D@^m&G$Kap`crՊz9u+4sfnO>m#Ks`hf@"f4#;:G9_x2ǡ,P!Ҫ, rjnoD4!,1NV!˝LݗNؘ_n_8>u60&\ cùԹwU::L_hHg*IBn`///C+qA dĺM  Pk[%&aP[Pt G+bT`Sኛ&:!Eta0c)EVAjFgX=EFFȡdcaVb6 ] TPkP~2&G>.JCeY@8AlRDYlYwP},G#(fܢ9yulv!x͵.@SN tRӿ  4`>mP30YJ ᎎ#tF°EuαʮY^0`3J-@JMBxT X-@Y?ㆸHqʙ-: 7G,xpR藖|EHֈ[w15Mnݜ)} bd7F+x3f^-|NiD K2iUJ1p ;7E2 uJgs)*U2BO?+l E"?4:ɖlD'D= `'!Ƒ cZoK)/H\EPk5'I|r?x,v "Ix ҳRKQDe[L2[c>jzIwMixfVqTOb^&V.''oQӿ r( 59NM42ӊ@{{eUJ+9 ZɵN?WĠ<+*̓ /j.fӲg4;;rػcrb!/̃4AKq#"!J6gdV^Ke<[<5S"k=.vTP 7j吇8$:q2w:dZ CR4=%"*ߢLzD{U_˟iJGck44Grmy6^o}̞Տ.,+X&iXZv4$`L*h1ps[WjCA4'qvXj Q#BLh؄'I okѢDخėŸLިf'G2q9/I2 ʁ.02a0jm~vBN1j擃)Ȓh7O'SɆKgtInQF]~NKƂ H>x)7OӅsወR.ϥTDa3_ْiJ쒵9 Sc+͈GLdDb- dKhGڝU s"r5Kv(KtQlJ qQ䒩 )#LM3f{yTжjK 橈FLKCȔz@(iԇ!찱2g.=L|z_'le@,?m8,'D'Aod.9E;¨Ȁt97CFN4Ȟ юaݖ*=P> s闦VCP|dT+8gd(qc 3^!j}3eA<݈R, h=3RnRqu\d#VZSTjp+gb+B3$\0x2dp5 ̊V @sAt^J-EF; ']}MWx*VJM@H ҄#3]/Y?kjOk[O=n&Ȝ֏VP׳@ ;&-فdPyHй0b ́%QH6Pj:k9^B3p㙘jm˛ 0 no$; }d{7dE[ u~m~V'zpIk-9%*"dO5[ WNՃ%vM/QF)y*`^tW0.='ÏG ( F0Y07lWeik)Y#Џy „a~۾$}BmA8v۬#xqdDRDma*zg`Pa~Lx1)HAW/:1VUbH,+ E$OJ) y GJizTj-bMsonK52oNGzAٸb㶱L%(LT.cy7OmXK9B Ʒ)ֶdzq4g(a- ^ZaonϢ=f[^^w>Շ(A m`=!fp$zUrۆI:|RiIhnrY )MW?g21fN7-oN&;Y)0,д-2FvnWja8k&~rd)@8}'9FCo#[pt|3TrƋo\;pyK!Рv^w. K( y@.;nƢ'*/B)֢bn#7 )jr\ ٛg>Vd7.Z]'e>]PMp^)m&8R^cߍ!bNIZ%MOS8Q0@!vi?0vzZ0C /Cɂ㏧M&6|(|2ilt"ts"mU(^kK$Jpk?M(vdFkw=ƒ!ZL,HjݤσkHbތ̃9%M,-I FՂsoF;]z BsfM[m*w5!bGqZ!ntX؍r2kO棥a|CQ}:=>%hCiweQս|}+:Z&< ̋Jߗl.9<]!+BV!j;s;cQ: j!`jX߲XsLIOT Ht 0aE慗\E?}TO'jeU4b 96%9[vsꫀ<tdlC9sȳ8#)As!q#q\)d/|LEF?BIʈS&ҍe}QiE<$4Sl)a0t}ʹ RF8jz|%sEرم*gr}2aϥ **-@$;',q&mT.̵P9З6\ȗm6~Kf!N<{<([m/oNd`BZ\A!`vŨ7*iq"lLg*N5B68$8?uy$@X_/Y#tܹmF}((oLC*\o,jb G^qm @)h{f2xs:3L|MTn̔5=۟lrтgPuGo ?`q_$vMxP!:ͅ<ŹK RFWmxi-DM{ ?\Q`:F^~JVWTA܁y` ڶr8KGMl*<ۄ_b5)-UD~g.Q8ǁM)IiSzvQj_j5H ˣp݈=kRkqwiw |uu-dBNümu||MrdKEB/ " 1EH73s hkD撛dO|գx8rE^i8ŦB}b^AZ)G 臊jQBbG7ғǽdո!܅묲D: ^Ňʫ>xhW3Wnq*d 6o-/TW|TAYs4_ `@Tb6򫾻 QJes/!aaj kfoVVCHFbREp=硊 MֺoTݷf:jAY>mM'8G.ü 0?Pa|6H-WW lˏ9[+SdHJNE+> !ybN7@,+\kTW 3%Y }s )h0<ޡ3(,>ӝϺ5#5QTd<}sc! ;% MEv7Vc:CT^HRhs YpBYM_8>zLJZ'*wUϡ`)`Bc J ,īD {ΩSy5,b8FPeҡsڤfgTط\!{w@ JՈLPnDV6鴍,unqKbtMMT!}GJ[z(VPB ?5tbQ8ߎe#Q ,UQ~ige񪬭\fxٌ݌K7m]kѦJS/y 5l.5$XQ 6HKcc:܈~QLCy[¨罡NV} 7LmO ;OԂڨok\WACH$4Pqk%|h LݨO9cW%;Np4Ҝp =$m-Vؑi#Ih#>Q&!MG>եujmY/Rph皖?x \E0=sYgd;,lLI2d& ! CrLݙ Ihpy( JEsEY ("DE!B@}T|O}wΩK/ArSN:uԩSOfnڪ.9wg/;*xR:UUv3+pj?InmXtU;n:T@]JoDeb_oWCFRn׋  -]JNY+E ՃQcد@0Zj$ %T:W`\?Z발j6A뫬?YOU^h5:GzRݯ%#`TWS#Z Ji tU)]EԔ 51{0j8C)#9f߾ <&ke%T$I`h:8#HjLOaSJ1UXnВZJz\ϰ0O,!P:J% 4CH"A#96BfB+K[c;=B%#Xt^}%c:eDkJ&>HɬRWŸą>G*0T,vj%=F|AN{- %UT4PyxsyhzNyq1ŕW#WOL|y@Fz{T럫Vgr}L{|Bd=1E>:qęNl*'Ͳ6ȤF"hY/3 400 K 3#? `Cdk[C\ѵIٮjq wL;v,x:6'6"ΧC+ &mzӉLF"1Z4 S)4 < EFbNeV9BH#z>v^S#LrCZ:JP-ݲ6`#b)RGȣh$I[hIti9hJ S pCᔂK`mJxԠ v - >&,Q) IruI<_V,Y2`>SzeFu60${HCG:d$U NTTHBNhN8h8 J>h\[-7NE$f"ag3(@b:N>1-Rlzvo-<|N%J>:R)v=JeTrơRNN\hٹ.j9q -'c)5NJu O53ZqB)\BίSgTZΙuwɰُu,ҮQdQMpcnݤγVG<ꜻwR(LN]!t1AA2@e6 xmSXpU ^iVEoWhBagزkk2b &QCQ7z;&Qs7&5ؤR8T+d{ 2bA[%m9O')FHB2uǣcY[FRPqq8`UMBF_ֆ4l r{#^TtR2"|H)_]Pwav'ۮq,SEB6IIX,ۮڭ?DuskD땶 a붶jꈹsڭ%m֚R+V1*쳗,φ$ WdO$ mg*9ގhNÿ Vn,dߕVta$> a)pguS% ~9ݿCjd!Mz3z -i;✁10ٟ2qv aJ.Q~+-b?xGEu-G/\rME^NB&iv$y;hdjWâac4=A;=ZtaId>mKelmKG#<"<0%K۠ nC>?13ǂ\M)S0D- 7rvFn#PI5N^-rVn\xǼsO7KtLQY *?7?UKP.Jd֘J.L3+&Zkd;x:ض`4oo-֛H~}ۧ{Kܻ+10h1Ԛ$𧭇Uբ3KϷ^9{AB)8g^= Bp+Yʌܣz_-XTN"|m?HډLV ?/?&'h{6`oR hpS}U]=.cxOB ] ůy^mo̮ft$t7| @nUN@\+<կ15(^ҲmVbWúmxy.ʦiBtef:|H\:HŽR)D$KTUPw c{-0:%:wgέ7i('ڬ.=oz<@ө{(M6X$xXZ\;;ڛeasPw9sAszW,Zo=lWBRr~RSZ:ЁN&bfKDz"Ɵ[J^JYV s;; x2Z*4b<2,F}z&R|UԧY"2v>'L,Kbߎ[թ#AUzJJ HZTN߮b2ow!]Y0):'@\48 PU jf{,o슡Rc7ߺꊲ|v+k޹W2뚽h)PK@|[=р7͚P&q W-$b{tͬSRE mk3J5 SzGF;TJb>nԪ\ ʊe%,? i.*ϸb|6j-u)2a4XTձyθWV.Izޥ8`w-5ZA*k "UZVX ^}IY0w̜_?AאR T2^\_H$ܝJ٭cR/e>V>=RnxT}e*L2 oV_5gJ⟦aq`5&\ E n/ ['Iފ( rg< EOڤJkDѩև*H)o;R+|uTQ{x&r=hy 4Qa1~ޣ,>Wy;1'zo]ػ% ?Y9cuz`gf]/xR:hTu ۙ$!YG[4{Aasqu-5B;p\Q?=e\h Dw:{ʏcfHF4WͶgYQ4^~˚.s['.)^6>և>&VݹzWWm|o`qx~톭V.t=%"ݬFւֱMq7ꉤAK̝ {i_}z'Mzx怵+G\lɋ%uGW=*gF:ⴏ\O-vi5 ǵCel q3RmӟۭSU#)І9nNIGQߟLњlv$`]?([ZZQ Xs?Y{#oN>)`J&ղ\fM|CG/h "Ew<)G:/4K.@狳9b 䨫-N`Kjm a3| =_^`KN_dnO.:=_.=_. ks$&5`u+ ? w\jaJSWY?OEKfOet[5g塸 Z=*5f$`S6N}qu%wk< uRu9Ͳ&|aB66 rw auF,)*wdlzH=…d'žPj3HT^?ރJ>/66&A#έs(R.D#7 ea_~DɠSP:4ӛ*@J%|]wJ;ZXz 隃m?vAjo~ ,C,gS9xdm'.}[&IiL!/v,7r>+zSoVxHmCODq9]PqT.CmӦ뉟DMU.G_$ZUztqV"Ӥ:MdsRoG2۾~uډ (ۜ~*^-1-;hLn IOK1Џ]򏗰7˥ ߫l&vNt 21W? Y4y 7lLcτR'Vٱ 菾W>㛘$tK܊}16Iqdfu'71}}D6^z8Zs". ,nA[e<5ƣ?C"U?'GLsa# @}7:]핮<G DRh 4;*64?8B5r)y Gi2)D^_b}&[^,ĮylZ1\Y74ۿIu/O8f͖_VW3B sf4:L % SQ 3f;N!=0L!@2øgq.06㼁q) !<!o]DvzjnL_W" Yj=K\[BiO :D]v%Jvc4vJo^"m?PqhF V/I\%~^6de)XmP(Α< 85=g%UcKrI2izRTȑ-e2IBJ8 ؟@WS[> M+ y4N&$ ZXW}8ͺD#cFζs;]zc::)-`  XOf?3C:_4Yef]RE{fj]d7_WX_y%ҡ]q2T[>PR.#r*LXٞ|lKʲ7Αbu}w,˾J$c3}I: x}(4M>&}jZg!cZ-3&G~\>Fŀ-x9ITȊ_^$S1 ءŠmm)de>K^HHM@HYARU6;ZIl$Re@հs*fRD@ @0Y4MMܻbe{ؔ7eԂu0S或[VPsleaeyف=,&%?6i|ɞnv^17 Ar]"QXQ\ W?@!` ވ6WL2`p~{sz ^;=JīH$HhC3FW((@TВvFaclv@pr?Z;67OTԃWGv_,WyAZ6fbitG ?;!Y%SL\MQ!F(nԦ`B1CJ9 :.^IUZ(7uңq #Mے穰{ 56R}yUkUjpVfءQD4KQMQBGG*C5U~۽)Q3_-Pt @6xͬ^KC8ͻs3CKjAo7Lhؼ~X*mi$4DZ&ősI_sa/ Զ?]JF$o'>4ϓMKO:lQq {fѫS K 4 ڋ7 6֥0%eL5| )Kֵ+ȳ;IuR"^.QZUXliHOgK`@jdLěV)|i4^Kw+(׭ĄfjwKlJUߩEd+*{FпFEkE)#Ő@*,Nނ\bHݴIjTj7JPp`]ӤvH*=k4Ӷ^Yi nw.I2y[ M7Ȋ,UE&"$18$:y Rq!fmEpgiϩF I[vq5v߆H Ea {0v&5$,]h'be="W&E 10pLq@bøD(tF`WXD+hKoHhsΜ Hxr DMܰ7_}<Tx˟i@+vZ6WP l6p"g ^6lz*Gnu$cβ1=FuqJG<ƫ#Udbm-·Nt_s& ". ^;' j *3t_t#vJxflC/* )xS@FW8 vhhxSU6DA4K O(2tabW'3I5pT)kqiC)E2ptgs1r 4c"zƴpe%i۸"XX`\3nTR6r {eǫ0{<:.NŰQ_Y>3={}WbP-lV sH.JC*GLCGGBwe.-B"A.ML5Ù3 b'C@@;9"P:[ S`Ѡ}LjN6Bsa86{}RԇǥO5wLbJog+|IMNP.IU}o<].DB t od|Dz{Za~~4oxsOJ[d#θHO#5߄ԣҿJ\@_0%deMr@{˜/~TGCOG%ǮyRZqï,e:el|!li!샣W<,d|rVMOICrblt0ݝ4C>.Rv{ Zi_CZ\&ma_}^:K|=߷8;[҉_Αjհs~-HRٍg [z-d(yK/?*eCcWy7)qoGKLg?IK~%1{^vbo>d4_/{wYѷg#IeV6Ϸ>*6PKC-{|o:"OE~6'tZ!]MK}~_:/۽,g63+|/"]>ްw~5U[xZju۫}Ww6vyov޹`mxZ{zHD_ 5S!4˺|e-}BJK]d7:7rּŗ_o_Wop(j xoLTžٝC=%eՃLZ:];軍ETU&Hٕ=X3-v`f=Oj fIyD\X:0'c-S8nUֲiOjjNKiV_mdS'iK:>̻ cnʃM$;tiSGZ0'NJB"4&)jWQK={iǯ2u~m.eJYkǶI & Ė\*MMSۤijߖI-@ږ붨 UCc <$y1=%k805.ʷKtvipb.bl~ʾ+n!`0o4g;s]SrB#yz[(ZB#n0,,1! ! f B{4oSځ`zѡvڹΑHT\b}9*qL W(9HI:-xq 0Ђ6ְ pv$EG< Cy޽NtZ jLqa0H&3#M($/tz=DՑ! j7P;Aѐ%N& /׎/Ph R811q{6ᠺ_ka5x2XY#$Q0L iMDzے֤)͌Cy Q~8An@j4}v mރY~ؚg*Xq}~)UhT+SW%𐐇bZw.~AD?Lan9%%:1#,yBzf:B'a4%#dR(K>G& _{2*ɱA2|)S1d$|Xk|"[fQ8훙58Vv<. LN<.vr=[S_}&:Ќv%㩈"NX I#겶EPE X@w^? <~tҶob9ӏX]RWkٔR[swդRr1&|LЏ+`}8o*]鍗L }="!ݹmgo~yYw}%v& o|ߕۀ4Ϣ"U#nmoεЀ2 ($xaqX3Fb+<1t 6S3dl~>툛ڐfy-^"Wg]}wѼ ]P cj9Suj}![x!4J Ā))6&~nJ 3MȾ{an!Aq`?TdK15iN`{UcBgFp) һם[q4`5/65&5u, ٚzfAHa+دP981(o3n߭5Ye.:ab#l{} 쏃I/_4Tb+̜;jAq*Ădb8 (_w0H" 1(jCQ#i(\AV!A'H ;X؝ڥ/'$Zt 5h/q8&<eD4[|T\̝߳C:tf^HGHɤwXG_fN^Trr$9M'g ʠL]s]Ș 2T=A }Wְg1w| *^@T*-.ibuivOr eJG=KP&(g (‹M:CZ@q/S&lJU@e\,!)ÖVV=nM9ED0|EOaI|Z{f)gBEr]#N"ux֕-x/9n 'mFΪݘԂ1/zfZa3R&gq~o-懶Dw69ȈD4: . 8.>^FAPƥ KՋu(a+I[rv|6;GQ_`ͼU–`9nh#ܓV?b"?I|ƎXrFIt-ΗevteKsQ"ːaOJhegfHtt+ \=*N'"3f/ń]Ck"|r7Q},QaY(rZnէt^w;a?iWg7!MR{4j =9F=}U<̳6=Q%ϚDJH$Vc*S+o K%sLzAOn*q7)sƀųȼ{$@>ZNse霉 ܋$BlyzƮ /qpq/׮AC0ؑ4 8x1Hߔ4^߸N9=&f{VbѦ?tM p@ ˋ@^Tzro&d`z:d˷[{z wD(;αՉwqf|>d^gi yJQ {!5fڱRlnP0ŝdP#s`<#5!tg +[<@Y%{ (݋K&;7/+_y5s!__݀JA[G4Qo顖ZbM^!6tMTl !._^];dC`^ώ|!4ЈS$AD,`GPө^u?Y,6(-g)Odmw°]y|.VwkM]r8Q6XڐSdDWg#G {4Ɲ#ɀI <ሇR"IO5~k/$ (-؅Qxzāl:dv  YQ-nϊMO$Y+6rz*0v4PP(r]ٴ'H?tW>Q Nbir0/"θ /j ,}*<ׇ)|28 BkniKF213%7q7b]3HT$PO TAo)E]}?lN9`AlhbN19^P%|  vGaZO}{ulP DqD y_rg~=rmGD!?ŃoO}PqnS]}]1%]22- {ض!8*,;T\)7CZDM#Rq[mXe+oFxx`ޱGLT5pE~pJ-uzLAݭ+#J?fw𸫑 !0KLK#ZTO 5م@„o>/Kh8wQ㌫.q}4k2iy*kБ#r"zD*b~Z>,!l:h& c b0C~}q:>*װ%c{A|']6[騾l$Tx Z;y /!2l :oG$f:ƍrp(^֮`#Rs>0 Ħ-lW7y݋4hөwwmݰ6 ˵r(mCk19Uۼ^!Rl7aDʅ lbSHʼn,ɽ6>+s|ے#j[ZBҧ5wxL/{>~=ׇ=KHh9 mmG}{Oa}T "~jx-ثDž0aODbax& 4oS<]cF]'ONBB~cXUZ=2ygɫ&'Qzq'<}Yرvl%YMQUkH5 }K[˲Vg/Ijʿ"/&\v񔼅 p'[%]_M뎳ׇI玆m FIsE#PoxQ8kHYVêqު԰?\L;>Iv~|6wfշGԍ\m-"mBMceQgPA4vmܾiu}RWl? u=hZa#4h!ګ#ݷWidR!-w?yNOm l(.Y E2*^xt}DsʈpdJ)q##1E<[{ "̢qʉ`%@ `ɉSj3A0= S1?$yxzpx H\fHyGMaDpvᜍ_Kڽ5[ UR{<8%?ŧn7&NTJn 9.­ҁ1~ō-yY-2oV+m*?y)x>|vC)oQ1e 1SQnRY+'q>E]쵝.ixu )ز!5][{;ײ[@߱$Dq蜇8[pEe :9=ӰS&gay{q=M~-dԀw,2ӽA^ ϵT.S+9O:&~_8t 8iΖר?B97B,G8y&sbG^a-re+pٸp%e-p睖q ; {N!JB&=s̖UL~|]!!^eQ;Q!]^CYyF8Lb3?)X=ؚ["|C9$9ۃg_#{uOD)/f:( 9&šK筸3))4Eq[wF\W$j CG=NĨ+2ghSJ*Ӏ/ֿYnBqXLGH}MڃlMLLvFv+.r4~쑣yJI@ĪI:ICRk<~Gt4"p;zwu\ꗜG]x3k;K~0Y2o_?X~aGSv%_/,m_QTTF^ WLș9G>YlbT̊*P:9ĝނ)Ohrp_r͎oKC9}MaUDD0eeﴊ,oWԌ5F_߹/T u//h_q/1S_~;/OGf1v+bUA$cc=/HҺ?Ѻz.1R;u.хz?:nTu]ӑh j&8=NzԵ(7izE"یN-kqX]Ώj3n˃*a[GStUGjxdS\B+AvʽT 7+j~m;Zϒ_DK^-K(xw"Ng<)21`FB&eMy6,$"2Ō>TT]uչvk&zAcw ԩ+WM$fAi#$]'g-q"B~ q^ӶuHjJw)_iN\;Vc+0_FXJq$n~*?} 5#aHHHmxa%RD =*FnИ@*h!et2w29T8ͳrϴ|5n%kLN +r̀zaL@1uF/&"92uٹt(aoSfQh #W JgoSj$O w*Mf `4bkߩO=ќӖEWhǷ/lfzs)[[<3NWN e[8wt`z~} 2ʼz*Ӳ߭$w+m´P5J}2,d߽^ Y+eS^;r>AQS5+QW&Q([e9?L ^(ǩHixfEGjy 8◗PQiƿ {=tR+d4I9npnU)>+ɶ=,bYأ4NYjܝtlLeؽPSNuU1}Q-['UZ 1eZь|/2ޫHG'Ov#JRZ)/b0~AlRCaݯ\Ɏ?Y(_PdMǁ7ݣ!Pw<|Ib?tjuVp-4KJM`qۗ`R!E3ǔTiLVkt<_2_QL ~RQ$vUوUz}0S2MC]}Zɩj|K,Tc!7IƘu9 sQyAI'`ӍY |A]2I lUևʧg_DԿ%Pm@yV7'q~mSZZNWGYajy~W e$3=(Hxˍ(ynWg+yۤ7 :ވU%J'FDKOAk݀]ѵ+U[Nqj#,>j5>‰nyf({&aa0 #=d Bv'QeEQx8!?…EMS,l0NW8x 7>j2 /st{ ԓ];mf7nحUoyq"zi_ZpNAN,"==öcɴ#gSpP/r"Iya6YM"!#ɵ%jhc h\Y (z灛ӗ\vv&=^ۙ|vbسIm&ٌҼ >^¡Q0d'oS;9I缍t3seKXil뽼3ڪsy,(>-(Ħ^~Vx=!BUWN:&^ ٳ˳XOF*͜'[ H_/KZpo { |\XGVohq U4ƒm >|[__:Hم7ȭ,_ 9:~[i6`3`\ـk D0tɧu*SR67C4 >Xާmn.͊(qIVR؛(7&%?2o_SrfLR'5EkIOޠn[}Q;R1/n ^sSH.T1qUeGD55d4=On%mY*(XdYoϩB]ີQv !7sAhbQJzhv*ig0A{x\3 Qp H%q0vf1,WgSrfޅ[>uG,X\GfV1@m樇t(C3RPF?܀3щN}v"{7\ֽ0.Yo{H+x<ː\>u9]A'Pk"W ^Ww6Ü%VJt.2v?,/6hu:aZ*ZRl^j5?lKU^^=3eCpre"S(t {J{Sx {jx)}[?/i- ?{I0-3wzuuf7^ +z'Oկt\]MùUiυ-^q|_St:¥Z>~T^%nΦҎGsf3>?32h/VNZ~`s7K̹D5VȭV tr n=E;:f3}ǨQ[w85x[ŹHpTJyYr?k5䏣ffp-UP֋VM >lJnjd\ Ɲs7;ztBZB+%G$<{1ZF! 54MވO8Y)pM[ɷ]Kmj֣_'!݄Dm3fƶq 5Dbs4!8hHkOboK6l]^m`Ķ MNFg^ I2uB9\(#ZIxg EM:If7CM =(Y1:S<˲ l24攸8bk9g99[br=aNZ 蜜ASi"19ɇȃ`ISIeCnzbWYi ӛ)tM9 &y.+AxZv>qkWESM~vRR&Nx4[eSe98~N%@ˆMڅG%]'X,D8CFT]l3h`0,UvOmEou ilQrz%i9,Ug-R.>m9B +F o D̅|q!'d_\;x)%~}S#>%|ßߪnjswV Upf{f o`/MK,4K;O]jg0RFVb}h=et!өl(*ܞA{~|yq8sFCsn} W}l$y}bHCUa,YkWa6ݦV\OP L_-y?tFJ|B #gD<9@ѥ/o([ahkF#LB!-φ*tX!.L퐜Y X #O G-Qw[S63'/C%NNPF sFfCkqB(C`mm6cngG fx5s`Ngz.5ِGt]f+7-)={pBZG]#a`<Å<19 \ii곞 Z[A;7o7+Ǜ9Z3C2[ M6y7ʜ78 /G&=vI\X7K_KZEPG,GӡH,(s=Һq2ѥ6Zf%.'r)*#cD%6}DUS_y2#J~H_o#@~^ƹU360!Z6of C^i үHu|V‡p;U5ݎJ7N2dCeP* jz"±0&b `V`,GN(<Ƚ^;O.xs @hK EO~Ү)ԍA2D:Sl#)tLy69tdG;;AӅބA#qV-~&ӑMǭ|cỦ؊1@W1`>v\|d,Y5 ݈T(_ӪNt+ՓOSJw2XLr*7]4<N~F~r/(^S:?@wjYuROef.7Xn{>D_+]3oFx1Dv caC$%R&LbV+c)%&Ky7RtNn} 4Dn5)z"w Q 7m &tdnI^k lchKZΜ&<(&lq8 zJ]XX|y5\WEw_dޘhJvΧN_j&ʯ&V,X$GopHO}T͵rpǜtg}P{7Li{μ/M;[$R4yAf=wT$T#ԐyoyRԧ2 s _t1XpBx~DrMbmNQӎRi%S v3L|X[N0~7l{Jfv ;[@%D[Fjմϸ&6U߬#/sY%yןhW:5.ƚ !%U xR.>rI3bVC -\1ِ!ތ(5'W8ClrHodŜade0ϋ-eNQ\{#L h)G*RbGJ Ә@Bz3g '0]tkRWvTuN)*ޙL~7*y nr'Q4Th1\sb.jZ 9vM(0_y[gFZiQ1o"uLOdz T`rBS".3yVY7XԚu LV/3ym''-jx`0Og)eSZĕq\ ~#P $++B{,8Rяɋ[$6΀T"s~&U.Q4x]S#TWSGϒUk>_hXmZ= ig`b݇Cr^rWIgLq\T\# Xa XxwcDyIHztg2P+l` w8l?~0B\.ץ9wT\^53|A?Ak`_̈flY50Ө3F$ESO&,ѳ>6ڄn/9]x,#|I 9oQ0NB从*ޯ.}w)GrQ'>\:H#^3{W6轴Jw t<9##V|ڿ+ڷ~O/hdD3!Oc0_ÇP\"L}ʫE}yJb[hŒ$*6#&al+N+3a=LwhX"uW`xN)1 *2Flj+/J>zȴ{E%z1i+]5OѕJ|8cj $r@[C^RaImy-|xbk9uj!+PM ,ɻG:HGˁe\_UY;։jgBA>3,0C4Le˖tC)$3VRJ^+rm]nإh'>끒5@ja٦s^bA-{ҖSрӫrb!;ZX#TY D*iu?rWI;zUPJ(3*K,yJ$G>s:NJ@`R -I]pD7"uf|νcMISvpʼaͦ -_Ӹ@G }P4F0~C>^Vwx@a`5B9U\(a5tg<~8zwR'PVf99cg]HL?YAɬ}ޑBɿ5OZ4(by:TTAYr'K6^)?WTOKZ7nueQXaq;V[PUrV4WVэ xvu{ ZQhp+8V8j;[k;8W_Wl>k Wp.3cP&rWY5#G&Qy?* 7r*tߖu? ,tAXe H*3z=ƀ{37'y;2V钻"Dx]z;ݲvb&ZS=@7W-P#?s !#fr.۫|6^V~r%?EoI9wブS+S-Yoe19 F3G9?fY=_k/AO`a8;r,%ާ9Oeuͮ9ާ2Fӧgj覿1 I_+:O~VHOtFEq#) C%nň5b%#*?yXփpÿǓK`5S^+F!?b8I9Չ 8:3ߓku"AOMj{:eI7b}-.ދ\xg%Ar3Mⶺ,هJ`_VCUYnG2O>J>LtXisLOEvM;cGdez$cECMN0K_ַH'*T% j%ou||imMmp!]wk=v# 2Ij`Air7gGm -*ZJTc" ~&?Y\ِGl;o SHB}7]YF Kš|pxI_OeM I梃O&ȷǵ0'.*wڂAl/#kW'kNp͊WrOB$fV:ŬCEX1'$$lA">b *}J N&Pr4ۇV+`lșƒ q5FK+;~FnG"/ VzeI6W_=ZӦ1}j{^v9 A@^Tt5n.\"ׄAѫȿ?W| Zj L!jx; w}J*w C[DГd$\M~MwR^f"MKS `٧[mzmZvrW: S|l)yAlQXw|>zN?/Ue6BZi;z·*VOٟJ< Z9,z"ZW>dEsWks < اj Ĩ pRƋeܒ:ƒd}&k2]"F+.xF*smg3M~'K.D 8 tnsbQ o)C #ah]Ve!-G2Qy8 0;lGhfS 6Ps;ǒ_҂3#`y+}I Ncc? !U($d,kTpiмU4 HpoU :;yZu K{%&RXF#J,GtL))LvSxe< p3S.a7k=0Y_^K:PCoIjLM T}f8>8OR<$&OmCMv,Ac4zK-1t1W(.1 ҃٤`u$FǐLZbwAOZ@6)ȎĪEw ˙{VQTO ܹ,䕟/e?x.vRfQ/ ,XQvWNV>+~U @z׼&/iV YU_e _9Ƕ7E>:|á흳&úa!5ۀ((8ډ)mJ9e>6W92*uIZ`~JcL!wcH)+m ,aA8f |硗,`¶.z.0ҌՋ@AS>0I~&"6ǚ=C|9Ikg;@,&KmH!-? mUqI?G:DPʿQ ܥKZҿϴnA >50ၔI'ѱv`>˂!XjĄDa|A"?!Gb-er"lӳK> ; 4mzb8K<=ǜEM {&7c>y n M(R@sV7.'mzťy;5]դY785_ٻ)VsUMh${Ck#~XnJm{7E]ο Ndغ@6tԲ_&4w}?t2ck>n/ eY9~}zuma{ H{ӟ.&vj_9y9G*o O4w](ٱ0լᦽYy9249ڤUs*SV1k_*pK^u!\`pT UQC@f'R$A8z""_ތa.ƄI; `y0 8SaR 3Uf!k8g!gl.g#blNp3Ct S@4'_áZ [+E oғv}'nr=\g\~~%*ߤS%"Ry;R]+}U5YdL11!n6,|tլŪᔞE)>Ɓyd8D\80 7s*og˅S|ArI8Y*~l(M#mX_8!z/X`[fZJf2e:~t C|KLd2vʪw8p L}8|,QKYy+9a]eִ $z~ L\ٟoH ^0GGL"6KQY9L?p7U(,|бRd}a"MX*l7tueQ(MYc2zeE~3zL%&򷋫uT,#l#$$H.s'%dZNRiϓe.e%/ -U-RHMv6ߨk}1~x!S 5,ݵW4g. )3 [X"lƁEg*9AoIioB)H8\@?" e :Dz|wɒ%ŕ-.N耔axAW'á/lJ'{u,( Tb+K]U.f+"9g# 9g%9N8RhΝhkȡIH(DTR\fT`N,wivBX<״ʼ<-#OvÝ<`pBHxd`„8NWަJu= uG,l+!M;n{FMS߲!-R4`pvd@;m/F >bY<37Z!-[ cm9Ns +m[;++`㢟f\fkA puT%]V:.QCߒpҸ0xm|(αs_~Ûi#ŵXRp'7(\@pk8:m]yuVJ/Pm1 RQJf³ResT;:dvTtI5tK$R4gB^ SC>y͸c;wdl deo/[pzu4~Ȋ_RIa5[G5gx."9C[Mc'[ZQ˜[gY|rf3g]2H5uu F݉`:p>_tX9g, Y,>9ttDYR/Ggsb}>exO%+X6U%:l̟NWvdR'aAƌ+D\}eö[=f~#)x1xͳY3{'+f&QuXl`ޒތ״Cֶh1:`zO#6mqF~?\wSr:blC*&`nhyZ:o.8e+g唭SB`Us蔭sl|9e{؟SlᔭT1NN5䔭v9e+̧ѩ۴1~7Q[8LiV]f z+9B$]U` RCP˂1G3*J#E t]qp.14d5&)Ju۶!JAF.T #촱ޝ&μe䨘1\`bfHe SŋYi^N4jR.iݰܰmUkrC]n=v,4~nzcٺMكצ2SW^ݷoVJ=*pQGn⅊ ]2:`jqo2מ 6x]:Սb.[Q/f0NBu"8+(_3 P wJZU10z1xNXɡ̰Kw@پXndQb6fv Hu~vHQӘ43 З2Ĕ2XWN{9@{Bl"fHw3`e,: MXg|h+D!%-6֖K~6ȡ=cVȡ. CuCP7ݹSZ܄9E}C0ȡyMPW%h .*?47 ꙧseC{zZ4V=6 gA´3t*l?\Z H O^J|aDRHJK>I7goҐLC SE]xhIxeZa1oEfQ1CnZ"SnǰQ$"rb}~(!4Nc]t%[ϻ%mV1?Y MᮗA(uz;zK}3j],x̱`ZqZߴf:~'/Hr6w<1/'?ObuLz'd,yrᶍ]rsx1&;{=2N0ϒ̫«;Fc;\+5$;nIMKV[T˞GEObq0w+b3ion {v; O0+[JjK=l6kj0;EbnTsSS[TΡfw5s= S<s8qBPW脆|:`'ZVj+^'eՔY[%z kL.VrEީCQ|scsz/TQ!)1-FV(5 RX[_ITM_' iTuR~Q6W/z轨^9kwoOC r1-MaԽ`zby vbߧ 1?PdWOBTJ-,<+7Yzvo]jѽ9<_o.| ~$yR[Syd#f)z۹k~"t(5H0yxL0(@&Mv @b͠Ѣ^ܬ r府*Sډ쐛8/hae. MY6~Rz|Y [QBFatK.:lzd%øؐ*ӱk ϭ뚢_@_Pho2![/5uBa(a>ky.,C"|nY㹺Zos::\x9:[$7 Lkk\,{dyq8 PY2՜NV잇gN#WƓ 0< /20tvw+LUJ*~W [:-JY)H%p>c]hBa-|b<7:* 7q#A@f;X2Ѳeaqi I f2÷=d~L,;)Qؓ2 Q7 w$Ynf>Eu@_GNRᓢk9bP )Ҧl`Rct̵(=FXK<婜݀Y(3H mBu7 x/Po"_Z!-XKF4r@Y𶷭t &6@5FS6^0ys:c+x mTRw`ӪQ8BѾFlųNcʹ[`nF1ۧ 5 ~R5gYin{6ؠk;78E3VsFع&,iƐu;5hs y3CTlj`8٧")f:5M1gf+2E^}! Uj5DU'/B:05W>]t&pb.6lx")zVh45fs[Z]u3%+g]|l=榷 =^Q]I֝;7/$G1TJ^Pu,ү̅jЫ}0d!?\ߚ ƛ聉ew`Nj/ {Wrr;8GXrwK:@#V_ZMHy}jSNXZ]ʟ i,St_NUq13At t#O֖t\݃h>}v {ӲmsRBy*QoiQM1%JWcv\QI% >yCZ%wjI{*+O- |`%r/|*W0}ZR 7cfvP^@^2(Ϊ@ƦQȶZ"&̂f$+{fMm/7 ]ɷVcbptz׵79lǔKL۔} # 5nE~}0`GDY 7o6`VYa˷+ȿ5ζEb2,q6J O:# J- ϔ7 fw(jR'5~I΅ʫ30|G|Gf@L56 l6NTۖ ͻ)Ki+Š!A-!7=`)Ec)q t´ZZ'-`ǔH/ô9iO{TFCyλTAFql:5 &gsEhI2ɹ+5[}zdGӃ_fd几|ٟSvl gvNn%gk!Opٴa}-zp5.StO/{ҤXVaMRm{d*AdKmnϠ-C~w5jmuuyCS`5yP:&MN_y@_qlٜY[.xnc-rg3-d6EYzYؑ1dCq<,Y|Y߄uy[`Sf΅aB q`ЌC^'N+mx5b%?̧ܱ0,|n Iņͫ\!v#5OwrYz3-(6v1Χ!Rcɂ/!ٕ"[0:cdîrT&V1B'5 !4>TVMdVN]%pv!dydO;7ONfHI #8{4~7jdϲe@t* -Ak Z \}ɶ K N.^_b8th5 #-/?uח\Y@Q@G†%7-/U N'&E,Q!ի^(^ _yQ50UV^4I@-R4XTKl;Uvr_`Q^Ǒל1-M9dT:`D">ș!;V嘹2# VH'}fٴr&>2N$O}"'`Iflx%2hO$`c̚+M LeXM%L_ˮ$?-iFfJiɺc'5ɝ_iU9G Yf _9?@cڟIl2_c ,4hҒ;IF V퀉v1%Kdb|MM3i[#Κ4ty:+Pt !C͓-.Kd鮒ܑ)J[*PL W^%*BQ)CLߪJ0};O_ .ꂤɑKj6;vk]}BL)(Ĕo>+j s}@!4Q!otmyMCxox^!Ɔ\SW2ӗrg*0Xr卭3TjdL lE IqۗR+r(R=,Jd193]Ϧ0kTknv]$ۅN aAI[kݙf2\$6do/|Lrl~V(&SkMP*s!6uvWSX<:ݫ_#ʤT_F;~ΖiO.P=y>#ʎhCX0ɿ Q @\sǁ)hd@pe}ܯx:=P.m67S]XRe&Q$[_;yV}=|vY+=JbMd9iCbf/ʇMsH ? H"FlX0řT<ɐ8 d954Sl<^1)V`k^~ s}:;'.z4cjrq.6{iQmSflz8YY[`'L h|^D$8s_cEf׻atΤZIkؼ" C@*6g(]w(4S%|ދ G1Pő ) F BfmG[>' ^9ڻmWk*g_o_^XQޣ90~pM@( Ffqv~$7, _WV/r&f P,"9G-O_-ڸN)ݰDg Tpl :m7EkVb[Ln*4,$E[rK[DN=-MtHR=]?KigȒ^m= _* >m}k:ZB h+*_b TTh |'ClKp APqi6 S%-@{VNb <$t-ȟޠ5oUQh}T$=55!rtX7ɴ5H*M|ܧUR8=9k( A4 % \u`v4x玠*kXTlt=nH"\vWgiZ8k$" 3%9J3l^%s0-ZhX<|iNjwIrߣJNmYۡ5`~L K8 tLoL%A_іw~E*8Ƥ4D{YAqz@0 f6K>̲9' ;d8$3*pyhm0QHZ;]|^bMɦfg`~ |܎ ]J 38/>^ Pi9W9 rjqZ`Qw3yrj!6IRʧb"/KG, F ҶjC> |D`u_[l9'4L4)*Dweelw>2܀JbcCA\ޡK'҅^mu $wviU\7:r:~HWz-vJ.^KMXgc>NrQ*Y^Y| CV)F<|Q\ŕì*1RYx$ei-<Ѐ`d:ؐcsAVa.!m{0N FkBJA{lqj_Jz{QptC_ۧ=bXdaKkI_hirx $sXujvxR_e#eǴi]\<"Rr]]G'߿Y2F\E,>wu\X)3 '6# I.ZnDn^t0i {_ ֐>Cjʼn r*-ѺC.ƴF1ڠ:]Bj1ד j76 0{mڇk&6 ƵF~F;(T\NH]B0 Ǵ],nd vPǵc| jKBg[Dh"{"$ȝOPi5'+!R&5ЄI*g]G)utpΣDE3 >5mQ;{}9i O`~imJ?مzsk}b8z>zֱ{:]t BMyJ׹-UIG) ADR\AJL*+>]&?yBy3ZUwpn4eg;C?˸øЌ]4^h_T4 &hV\Quc7\ f.AE#>jgGmo@,8}֐BdBqi ,YQS`-rV@FkG^D5JlFhBg Wxyq4؝ML!D{MYNb:@]uȿr, Y3[EX*6 cKēBLcg"ג" !͟׮k!*űp,8B\jFrד^T:ivF/W⎒Ih)=]~7@~^;PeѶ)4Bw=}a H|I^}ߔZƮg Pq,6ߧ2U֐#76en=a10O`~)?L.x|d*:i{H7ˇ-ΪgVUDv\.D|?* }C;Rگ3(9AX~}{\sŇ[#tL 5g BetoxqEt3H1<oqPݟLU1Ӛȝ$8o6Y#;Ik t>`8,J=)i"]vwKP:yӏnD[f%# L8e?ΠP\.&MwjNE(hY?G`Ԧ`M$k [d t@0_o-@G2Fog_7yN}Nm1N `: ]=`"[ѧ L1Nmͮt DADz;=ke`ޣw4Ot,> EhU̾@CN eD`Cah d;C݇ݹh=f><n`,ɫ}INNiBݦ3‡>iX 8/#fwJr`*rp43NJ5`u׳h wsuO>WTϖ}Kw&W5BLnR6! x0X 'lrl ngnT@w)9I(!<}EL+uf!GL4bq W90LX8tz*Mb!*FӚ:/*Yeg&?%vz*@O5Hjbє Sg.e+XטJbܡ/)_kަ'y}gQ1lo?Bݝ81lMނ['Â/]Y@w>QP7=T Oz%@Un*^tbK"]<'G߮W-Ӌ OSU⌢+(>o6v@^KBڙ+ҒPc)G+ksȍ,$N+eR&)p ~<Um8s^ֆ;hȶ*FHPҥplsձ 6(?WMO\<`dbR@Oy۱Μ B@SX 1Y_¸PHe+MQx| 0Xq4 |:Z0'Кy9I9/Z>ۇϚ |d0Uŝw t*;,,O~?ruH7X(@$`8N\ uXJOiFDH'xHR'w.Mlix(P70"윘 82+qd:X&3͎d,DḚ[I+I/3N0K+`怪eIp^z;}v@ϣWC>:NM.d~.u~y"e:[[nfԗox2v(xAJ h{,4s:<+]Hz}ڤ]kG^&m]UGzO,;Y_[CDZI)UVm5Jrl7M_;0P(.mY0eX4 f ]a(,ΏG9$,O?M޻s={nYg}7$xu}YM7py]ƄD_>Uo{w} /B qDX{t= iw>kVkdXP&Frxiv`3|`++Yg@]{>* dA>&BKqM9u/솮`EO&޺&LnY7a()@mK9;ala|WѱO6S5PE[yԩV1/tUq.Px 6!a:n{g diD g䥶: tkiy*  BHH֤<T.]uj9blzM~WAcS錍/eķ%0)/4!$r0yWp| 3/t{&n}0xWtm@E@1=5 zwknP4^*B[?`x-{of/|zͧd{}6V}o sT QvW=㯕?𮼸,ocp4 蹊aO'cSkFr3lM%?f+^V;n٣ZcQH.ڍJ̣"d,K ]Pq fjUօ5/F.d+5TI.*haߒ^qH &k$>599+0QmwyEΜLSoȱղ=z@6Z<{O"*bNג@|f|#*O OM~'jV3ofY2(n1l"trvކm6FjRڒڎ9<{أL[UjfYN5[Qa`CTKM{/Ļ f|@|iYW2c6#w*ҁzK-E+|vE\e++tYIn;vm~jwݒk{$y(=\T*GqYFDMb8(ckTF I> hL[MUd#Spޢwx;~3f*n tHfD}=3iSIm`FiPvP#(#\ApAל1A8bcc6Fj :ġi;p 7gɉaLGrd N`  m ijP,Gu bb׌H:EL )tҾBc"mj t -{T67 5Wm(׾Pc6gT[i '& ]Y ;}DhmBkt,Z.4-ˍw,[Pp|a A 5W ͎M@'0L"noWBg+.)1'*+ɳn&UjZ#6$Ȥ Sa rL(A݌vOaj4M v%a.O[TW<*ܼGY eМXF{^\)@}p;%D[-Sɕ?̏ǯճ嚟}2= S~R/lk"7"=\ʩ~Tkfk]lOP[_5-c jJqMZp8<Gx;ZhcxJVh ڤr.`{B=T5)XuaAmoPI??e:NXUh BP]*kqJeWnMUZKdu* S3ȷ3q@~⣽"PcR@URnpAz&y B$MvU{V#0lMڱU7PEPC:B/@N$ӐbN" 9 aMcD,&(^H/y(6S}K[nYi9 Fwد")嚠V _=j33bM-K=`mO0ɜ1MՄz ƅ4[pBmL8;zrRJ;[NtacH,xD* V8Noҝrvü+3bpؒ;^~XĞ+PȠQMzxS?T_/ &![)0d"^~>PmzB&5ъ)[)iP%lEF' dRϓYZu=NeFLdͧ xxݰk;i=~㫵&i^=4wh葞N"udK(ؠ`LK1jZ|O~`Z jn֖CƁޘ&[ 2ctdY8XȦa)TF0cTɤ8eT4$p,/l[Cbf[qf%AnQkςN6ך-ũM݋g$;U 4ozrD%pU0IZc)GQ49pt"eMӉDøP:Km8Wn5r%c3]cn`R&i.rV2z `;H 1zTp_4b|&}Bc{jG{3ɱ.(εx p  w=FT̯Z 6Gk+DpץKϭzL z#nU {Yv(fr >zhl7VX4 K<`*kb$!+_d 鱛{D,PY(&`r.4M&r@L@E!lŔ@<_V򌜥!2SXlt\Irc40WQ!dSBj~<Ŏ,LCgMe8ckMQ ]iץ 'ldk{4纭lkMMN"~߿ٚm4A' crl6|87VZ߮ՅThS|1 M,g&76^~|,9Pk߹qJ_筣yՖa ME:g@ h !/̎~uD*L NwKK s_\R o)BhK_bSq.ZCTF9,94b ٲs_/wsY@!SI| Yd ܃;dHȱS9sFmjaf\c€ G&$y)!Ң\H&1lڗ,!o5ƻf; o6\qi3sֲD5v" {`;Z-iFp6hk3! XV5E쥧%]M.)v&6v"9e}y.ILߴ :/V}oSY*grFwjFACZmxڝKSR~GXB/3N\?T:Q(Û6ɋ XKlWVOVAJ̎Y&t%=dXp@a>QCf##.}>67 t^n.R$,s2&kӶ.¸B1Fq4hSDqY5uXCp#0piD b BC^= b<\)Y?4`3~̻ܓa/Of3 ys^$e})g{„uNam:p4 _3_]oǿ>Nt) >v {Uo=eoy*88"-k\w0r6D9Wbfnu9o5;49e:9`3~&[y%M/59IQJVE0>RsO3S s?8깘ZU4h<ױ*"k Zx#Iq IK 9[2X&A9 }avQtY"6!t~SOEFY@^D1 B%X¯ŕ`1t=@ICjcR̎oaW<9*¹{4[_LkxtJ*:RXuz/}k;[_ޒV=nȡR; HW*0v7{wvh_m6(4uҠsN>Z)SQ_Y;iD 5/1 3lB/kX^l[W|{S: FC,vᡉXM6*2431df8T̎`E:xt_|0dY6%MI]z]D ,`Qp %n$Όv 5-xĶCC $ǰɚ6ᷕ.\UPh߳L൰VQIeVSL\/@àb&9K쫟.AY+]╊X~~`wB5RGa5vbEC< ix79Eẅ́CH(bDȑ~ /cDnE JŰ1 /f|˥VXH gb|z11,1^\Xi<%P ! C%&]< ZˊTKv+gl!U6 7YgJ-Α'`f@J#vF6 l,2 J܅ `j9 ."S"M3M!Ax&¤ .c!. :2eˬ"u 209Z癩d+^ Q^ap=G\'.DfQ\4]aء5{QZZ8f(&Z)ԕχW5@V])/m$I烴qл ϒ5p"[FKHTH}^^qrVVϫ ,b|bV4!cehkGyĜkfqyb#[7Dt.Mv0nN ҅Py9 y4 `bL1#h( 1;75/ Xe |ەuXХwH@QtH' jA1շj rr%HΚ#mS]Z:kN. 9彂 lxDCR&{~b~m@+4X@jӹIrTђ  \' %dOX;E#E6Owk;׼y{Fe9^zLfsB6]s$({.&&:4SSY9~]`}ޠ}Dݲq yΟ+IH72E!v &\f“SE1hgzcw'(U D@k ( R[T6۹9Y:  G*.#.("ߋM \+ B5][.˔iT FO nOQi럈'ه-Z5jj(d@[SpݴQ'cҏKeXP5=PHOJEwB$6k+wn<EMi 6SME3Թrj:ǫDdڪ\ԲujB2seb8]9HZ㡔x4M $, 'I$L%,qm{ g-h>q+"T RDI2+/[Ixtp(e\ue2EZvҀl{;X^}[QԪծ`/[C}Pqv\vrOhM!.6FF+)I2sZ 诂Җu7!D\TZZ={15e."(* W*Ïmf;rJ_m|DMN|s>~]~D+ *D#h®LWVkiV'IJPPOdX!J7BI#]9UD' f]}J9t,5pJefڲ٨̅Uv(QO:F"4[jFZрDp/0ė.8t*OV+_RJY?]Ie}W_[>O.#g}zLVYL3=A?_k`VBX?|Z 'Z~>ڂ $,m H/?_]."tі^~j>\;b]P&^JrJƩq!&Z ųG?gԗ X!A3Q:=bkIꏊE)Yv~kHbԓn,X(?x%ɻq]]_ufŵeow YcE({0}q b%ǵBǵ_ũ~NEھ^lC4'MRfv{Iͅ^7vB;G_bz7bO:$.W` *eUDMJkC}YWe Wk'->xaq!%a[}4i¬A&?P8{w5ɹ]iAKupG`{Y$zekZ$]=T_ʸ۽Nbgoh6԰g 掮B8k;ɶ )L+䧩Cj*?.c܉6vl;]+mwDY*4Չb)JkƵu>943sR,oZ KǓ`3{[تi~8a_jmr[j^]Y93#I@ϓ?'Sc ]v[x#"@j[@$=LQL:a=.qk\ʻ2Gф(4؎&4k__];`FKQ 6Kamn@/-Lŭ#/Za"LH[Yp$~?*h (n "3TLڋYH쓔llEsVuv.lA{ ښvK{Dl񰯔m~v"d]TZG)>V+ˮe=,uV` RkV~zVU=ml޼y9foӖչ[Kݽo(R S(6. ?% MyK}Ʒk^;ҋe[6},Py6٫?)D3jك}Kv|l^y츅o3 .wevuׅgƍ`ygfᗭ<`B5DFbhe M$Vn)- \wC# C\ NRߐ|=Af7I|_=Ul6_<Ζ<멛{[iJkei˛\*c8)ZbX:9 weOߥsg+VzO 3nת4d}Z ffmEizJ#b'֮Tidg>Պ/UҼ^4{$ki ̀] *][}kBؙJ>~V|X[;?ŕobު{#ZTvjo)E{|Lw{BK*kib/T;6r1Z8dؙviGqjQ_phKg;T,ȰQUvaH ]vNx}t%]jSF >ax b҈վ3pWsKoBkDtlUm!l"Oi#;+S EV7e( L+T ˧Y Iڼɩ*?dX!iGT~-*JnƝdjHTkrj J6)=6ZXo22ыdf)2r3L&Ԕ_T٣ 㢼v∨Yxo4+}[9mrq>ON:B@'-/᤼Te}'ɩl2^//J~jdLҡ$z=ﯫ 0dZML?bq .n`@!OgR 3>BFRc.1F(vA.p PoSBr%@\u?tىY:* V~PPJRv`SGHݪ#oq"ySSAiSܫ{h]qFB/¿p~A:ۚK >@JVd0+eYV%&E!8Rs'FdhyQtXMI!d}{{ݷJgHb"p{EΪ\\d4o@r!+^~ v_k5 #)jCt ^ dsBV$8h:8{F9EETVE-B2bYbX0 ;6@_$h Y: i6JÆ k^Eg*14H)FMH+23{]m4X|^lT`qSt{]$!McQH`w__Q< %pCjU΍ZNZ#JRM"}|Mo}2fK++0#Y AY=v N̏|#n\ Y֩dkA :pMi- q@`an:*YCAd"0g/nw+Q[GrMhO#\lgkf>t-~0kKY*=x ˱V|ؑ(PtD+̓) N^'BMAk0  SW<+/.o0FX>,aQ,S1Alt,mrg8;o#޸ xE+zgr8A,Wpc"@34Bxx:\ǯlRYwn0 \ 0t|@i0ڋc-.T6ΒZU"ES1@|I892U\ԆM.Ӈv0_"j7JaGulrdL:Z0raO>-]-+$(f\FbL"6f#,[ESpQ X#AvXiY&EhhnҠ5L3شYɝ*) DPQa,a岢Kz2g( H@^'^Y)a)hE+6}Pf~B!@5u O2eWҮ+]j'hW5@"T})z<0FTJJ--$Z8y3ҕ! 2x,`7GǣJmhnЂ W`)ʢd{E{UBN2wdh [RF#UH`#4Dd^YVRDixE:zr,әTsYIAN"''i;UfKJ`4oeH{6GvFN()"88[SOZ&GXfd2MHCa&^#=b]%3_R'dNKfUz((rFŔD4z&'VlgG >w 'D,yRr 'H2iFY ^7Q|A<2HqtkZoNx5k׭hCycp[v ;v9~xUW i"J mW?L)+SU'T3*[~[gHէ[J4YS$IdJ+Z+*XMwiF%QIk7Ýʚib*% ws^5׮B=+? %*㗂2ԋ)9$j+6֍^0j9br·fPO c7b.T`)Yo1e6on`K?a+)heAJ6졝%WÝ9?M]r$UOYJy~]»m~Ǽ=™4d_ꩱ$R8ы ڮ3@X(^Vqp4ԪE܌m5,eW 4BRi@%Ǧ IeR%[ W51323xjf&ҡxlf2` ѯGhSlyt8:TDcN gY_OBA(vy [oT}okw%#.IC?ڃQ7.4Z7n""3| tMq,be.NRB$\/K /T M۹*C70OTbe]rp`@&x2IMNpJJL90;Pp: AϩIRA@: .,z фF<h3`6#g$xVYk/r)̞B`V_U`fYO=;][ľv}[*gT.=%ϑa@Y*ZeohJ<-KUeq1;k,_f(6]GrUJ[vb©\0}y8^e] dd#IfxO 4G.^_2&m̢᳗ -֦0٥++Aeu7d%ʙ@93l챥B*K,/Qz,c4RRq6-"d'd)3ٚ,' B,o"Zn8ںlżvg#)b|.pn*\t"mF*7bD)m:i;i=s&k?-?sihJct"M+g eXlW{SkpIqb2rҹՊ0HF0 dp"Plxv` 1g* NblLsw/)B=/B;jπoU{b E2E#$N% xbd8g@XILNq||_] 8Mn CZ:)R((XCqQ$6aD =ɞT e?HIX!Vy9rRS%y`xz;i;;]t`r'']8mlUl:̈ @ϷA'B:%3kʡ7ps2©~ZNd] }wI#T.CorڛC SI,Pv f*_N}mdwMA}iX`$\NH +a:'fQ]0NmT̲r,~t͗]֖$0G :2\jL`f $U9Q`h!~"$SD TC†Wq;8+ [kV>YĀTew0*hM *t.`. 9@4]srZ+Z'зU6^Je%a1f@Y1Q::7n&2 U{blܯ_Wx$?]m<;(9]C}_y,Nq/rЁÐ' f@V0m2o_iְ]?*ٕk/Ò({g/h}6-}Q F#ڹ _P۝?Z[# NW0@YXNJy4j?>t!Q^c'*_W 'Zs>DQ+y*I%1̝il hZ#c˭>D=l}7o%K10nVQ\ D3mHJUjv0u7` *I4?9 xy0VM,P% Wҝ~c?p:x|#Þ~{Zvp^Ǿq&xU ҍI| Eh>ݞҵd7o:K_!s.b,pr)̟Oyk1_&v[q:0STb &N+N?Xl7هnWIU&R/[M-6a3+ElH sRtۆ KF,Ѩ`0DzA`jӵ1,,~ ?ؙ?G5V!m4ö}$B .jNp *FN ڎcOޥ/Gt: p{prX4FDI`CP9}x^^֫׎jwewz-WI,bO&* *㑁SĨQ%C5H l$`7Goa/MBv+'R` n8Kl.?/<veX@v9&%1⨏0H= fvxl٭[}% ~GC yC"r⴮{ z$F:*}G_\']Mُ*"Wd*,epF]AR1ʮA]e)Υ}m" {vd߬GܓX.~~3{[}-g9DRV?տ`ҲFV5wX|mO6)+H:i3%0)qo!`he/^~Gn[:Y$nfoE_^L1%Go7lVZ+/}~S9H~?gN*wr]z2=mdNOFG]NѢ=vfgh-Qk{?1Ƶ(؟y'iUdagm()%ߗ$BYn| [LݟMo`ަq+fe-c9-$(d}gN)=xVg˳ x~|$-]y`.|m?2es]7eN3&)H ]Xb\HBYO<`0kgT$[B9M%>M\pФYm`~} - ~(a6_UWګ@-`e bYS8+·*bk G>p([4KNO2˪s篫 V[悖hw؋5(K? go^UѨנne ZdWޫDb_ŚX:9El}c,? {\ԌTMmvKjhA*N?n7жt:&DcfL}Y@f3ݡw3˩3iGl=hV>B#K4aʘSU@8@~ajRg*vŝ߭8W?[߯{ׄ/JFQwߥߩCZJ$RGbVWR yS̄4ar/tifu9"B8t ilDa 5E"(<xP㚤LK x*dvRLR-W5bCФSiNUʥQ.cBM身ʼsq[!UF#ErZS(&^}K6 Hg/ H &CFs,1+CL&U\LM"Qfr,7ީ{qV#詜W-EX?5KDB/DOUί͡.OY97 #{{^]eE(^EC<-,|V_V{8UgJ~I_9D/[*GCd~YW=b剑f2qlT2%ױc+աLe^_- „ԡR*/n܄y3w>34ΰśl bve%o|2pmk+EOIoBV6svOkt?iUe 6{D٪_j+uvRKLmWG19eRy(/=@i7PH6nVʷJ;che lw~J" !"̓ɜ\,87=[^Z7vKE WEB\5 /.6@ e2WL%?h!]Ԧοtw l^_DT^e\w48壮 ORKoYs`I %iA?DǗsr۳ࠦ_ByDӟ*SֲٟAx)(NcSVC fWC}ݷݣ_㺑}R}p{ϝf`R thf/@H(&d%s;@}KR;[rî^Ӛ5S|gK5VN}-Nw{rc/ ] }*>l֚ ,bϞ ՆgtPYyۅ;U r<ZA?]4\/b_7nJ&}Sb^˪yЬgդ<~Vܷ(,e񖰶2-z[>ϰͮnjDgs촳mzM6(ӍNb͛Z uOĦCRlחyJ#: eEo [>+NKőnp(LEY%;.ѓUi#Xϲvlb{w\Wʾ6}kPw:aZ~yW@1MOϿ{'1Ƴ3˥}fR6~D65O4jpL{i[_;fOt>z@ۿ.0bkR0sRX#3%qh';&]xG ^f}ƉijS U*[.Y݄̜ژN#C"CX7yXjL+cW Bt]kK&&)R/!9P2b75N{͍@AIpbvzh+ ۽>My>>jAwC$kCaȐB1n W{_hu4@p`Okwo$[* n&Rb1!Ӡ [}G/gg{+UTzW(BWA)ڮr T^f{l׬fOkk 5&j_X$_>ک.N* zG~$/561QEW1ҬcO6#{/`Ǵ۽kL[CV*lL[NIcڪbI'{kE2,Gm*1#eU,XJYI[bT;Q,[ՉV7i%O,.{vC!i=Ґ!̙av}w/pciR}['>-q϶4_Mâ[uՁ q%_^T n?^:z;X#*g4 vᏻþXҿUJ/s^RJ]!5@ ⷃ~Po((2eV TE2}IVԩvY;[qxW {ql5[W8>@þD+OJz&,eU'o &% 'ٕϗ>"0`"mSxiDK'(,~倏H:s* f_(_v n`3xwdxm$515)lI%Oܐe|X\oE Yg˫33`*ŷYLU(@Aughu4F*0@nbc֝$cLneŅY14B\:0USkLjT?g#{Rp  պAތFP ]l'ՍZcgT[.{-pNmGvK#Ld|1"\й᛾ڥ +2WKJ g/=οZY3 |;4p]=u~oݯ;dW 77;GUPѾ@Yd,>=&dw7 A,b- dޯU_V1$1[^qr!PZ:4Ԫ{&<3?y:7A[gL,v׼U: P$Q:x*Q;^\JmGtd)?ҷ˞p`%[AqX; hAԝoԘL` rU\Xx0%J->ì9jk H!Nd5?JnDT jR*km1e}j$,/a7ďݑa{o`X2E R,VXN`׈jZ~5F p+ !ҬPv I$FLҐi6N$Cf.IBN,Q&WC\33rN`g8S>hx=FЋ]ʳ86J3HgDkMiT:sŀeWA D-QAe Ϛ |ӌH`j9$*,x :,@jxCev9%!mlw֤Lċ`I^Bb58+<D!%Yâ١$&瓨۞g@M$$c~4?C hF~>LϜ~ۆ{,@{dMRX2'}أ^О5FOldF_;kN<iyN, $ީ?:*Ơ_qA4!hX@ޗ|(K7B=*@ҨY@}@׺sXFO1wQ7NJd=U^xֱ?<X+ tjRRr+1oJ({~VM,W]/0?eUz>)ۗekJ'zl4HGbjpVפ8Ë^۲e~э춯W]$;<ņ}v_VV}W^S^Z{{"##Ӱ,CSoc nM"8.97H2f bD %gH=M5Ƥ2?5`=WOnMb=q\%b+֧Y{U =5C'z#S1I?DB j}r`ΛW^k_KL*Lmybk~OQ %"Mǝٖh׶2c(*Jr.TBXQC 1|:faV6]yjjyikg|_.TщWH1@+ j-^۲›`c>tf5}H# Q.=y.P ⬸iM<p|:hb#?vb#\.%ޑW4@@AnlJJBw5ΦwRr-hcZnoRv`{̞Jj*wnsJ΀NKͫ߱K!4^CXaXSZ1J%k,4@ܷdqIi1 1(r^~k+O]'h!C5qeʑE b{ fLݶNǗx;/ S::px6$)ĩC蔸4L)?SZ࡬G>H߸|aZC)]{cMbe.=\ M'whztƾٜX+nTTEn-ȞrGI:CJ*V>0oDޒ]k#uѠx_JӃs:Y);[ǘP2ϖtR wUɳ?05M͖O8BzjnFTw †+b4~=* 4K]}R~0AM+(j5q냉.{ZZNT" JPyqsɕ%X5&N|.D{"^R6TnkH@(T$T  ʘg^q![:wCҁg[}PH bI p)IR z3g*8il.tkfQ% X؈@&B\ 1w- PoE{ORf)96(X+r5;-U&[APbO;7z7jZzU6]b}Ǘzj*bˌbph楕 d?Tg ">m[Ύ$V-.8(YDtgZ#Vۤxt+2A Etx-Rp6+y'v"E\7T.(+%%Wʫi Ofb}Oq /~#Ѷ4e7'L&VƱH65￱&+Nm moۼɸƻ /]Mvq2әl^H5e}O<ҽ 9ɃC tDʌx䑖e8EDb4ѐr P=2`Qyt5~5%to=JUuOn/~;)~c*J2!t9e8 2Ct#*Wrۂ[LI~(.dfΎR;m Fu8Ȧ.>Y%p"aK#l* +OTtA|BhHQ\KBá).An1Tt* t?.٭)sF3L+NM)왃T5-\$SP uL!J^,^@O1S_| bs~:zU%G= v^@g fWhy[KVS3J/߰fQG4(&z*B]+^W/' 72~)4RL ugԞ4iS`{M[6]c;{^{k `Ŧ͠`E}MG_9ZYpf8wLċ8k&郵8ҫJ+/$Tk@yR­n<r5]qG=̿$&D1Nd[kMryag䬼 Ks0<ȹm 閼5 㸙eyuž [2Nv``oꡁڱ[q/M[i?5N#cOn<B*ƟR+;}SpkYMv\M̬f,'wޙ̟qO GӘʤp"0L/CWmx܁xmЌx .q 6=;̈́6:HlT9՛<3)hJXI;*RpuD=85 !A\5?e+'Cv)bL!,5" r:4l<, J_F9xDڵ)Ss)*s?!,yTQA&ke( JX2{B&rSBTgN*qqGMFf„رm9e+/,§mK1 4)JHrؑW]]I vCت iW1/EaiNŞ(Y'|EP첇 L@TV,[cг_}:5[-IToܧ@`Ѐp6̰JX;Etj78 +ujyTˉsH%g`2ц!|q0R^H l;UtG՞DNJ D:PZPi TMْ3__ <,@ATCo2XB(Q;3cs6FK̉7}|ZqI`1)麘 ҆wPONeB G=~Z] n9phl' \)* q(U&%m~B:B'KX߭ќLuhhޘ[-I)OnoRe,_ҝсiz ul+%[luL O%:VKfO) N`6ڔw<=e9N.߃{ va6GƦF-yN͓BK牔gPҚ$?Pa :F9=lfJVR2/™#t8) 2A !k/FlPi'&%%tC)j/"ˀ}QRp(! tFArr2>7) /pM{~<(Lte[嵁k:M 1.8/TR~2OYM*MX99 / -xuf59V3k7\Cƒ4 6yr0BP0XG7$}FFX[/R-<%FLYmCЕ {̨y5ͫ}5^M1PCPsK*FP:ls)΀\gy1jszbe^yc3*zX:.(6SNS e&yd(5jh$&A<D'o8/OहU"ˤ;&pX IS1`H(4_dR*et mZ4;?p19Q: X+S6hA'եHS`vx6L#.Gka_o-w5hsFJW tKk3pZb-(Q9pvQ›MkaregdF]Q<W8"8qE7 2&$dc T:e-̰#nXǹa^GL˓E 0bSqMFB~J8}%Tx$Ygg0e*:' ށOq5#Kg@❤~l)..ӄڜL<9-cTZWejE YbĽo`.HZ)\joDZu[dknTw)69%fHdc4dQnԜTBFYi-8|dzwtNL<.NiW#l4~haΘhb^ؒ-gE9 aN2 n~Idz^bx\04!Q2zY$$3*g&ߒ?+w-/ͣ; Ɣu0<2Oìov [KbM)88{s'e;)`3 Q'Y8L!XB6ӵQĞH+3;z]C1tE@:-eŠZƾ Rh FF~i78K:`sd8(8FbN;DUVPAmԨ(ծބYi,UgSͷ2 baML4Pxjt"B)p'?d%JR~.8 ; &g @O>@v'pRN6!QN)SjD2Zţ8 raelQ)TO +{B\$Xf8((PjOjnUXj$(1{WLbl'9 lȞQUݠhs{9ia;M`kQ4xPp4*FQu8`"m N }vz*w`4Ui'WXB&6` M,joCu ɕfy[i K3^P%Ѓwz݀jeèHUTx)Pw-y 6) ܱHH ɓ>'R<R2<*OLz`W@4Bɳ}|91bfrSuvwz(dvSnT=OE '['3`r3J(h K<+NǫmGomJWjSB_B=9Nmȴeh,e5WF-f&w)GSS*J[3;;?~,x۟>Vhѫdyڑ}<IYXGciق#F 5Pv4!dP4Iڥ()hi1`uJ* vfBh *Z`K.@}(5 'g)Dh +;?Y)bX>ZO|7$tu`j,?SG(E\T74ؙ牏?9cs\H`wH8cԵS^ĂUbu!Tu b̀/rCJ&{ě3jㆉ#\O:@,z7âDږqTkQ#IDc L0Τ:IIFsr izWG9Xqr-RB'iw[țUK:l,~%D !YCn~$R+`0acsk_|X 66;>_IVbVh%=&!R R V!XےU5L=P,Q˾0v1}_#_)k򶆖:Q|[}xMސa`7;i2".ytxןXnU&κ`e$3eͦ ;}?h85ִ.m޷S *>x;ljZ\?Y1|{bM4PFt֠<4,Bk Y%ȼ׆mcƶ&mqLbt5fi>oyB bwF˪rm׳a.f|Jl\d * >߹݄j\|t|yxw],kdf_:(x&%9Ixxx[rKˑ\| BC♹x|FKˊ#+4c%ˣwƯPXóc\Jdk#UqLUu&ާ*owpvLZ0c?Rq ??7v~cc(;!\8rMöl[˷aLB뙠~QPA`hBF˕ FX?!H2b oQTLfJut;QFhI \z#Wjr`@GfpŕmM: Ef ێg2&oMoykhjd2?o[|mtqIlBO5=>If*3X=@N,)+w]o.0sR0nc_z=<33\'#{#BTOr͖kW'o"4ar%nxQyG{Ybgx͟Ŀz}"|)'nX\Uyu}$ƨIR烕S+ke=8ZßF=<1xLz%ӘH\Qy;.a}ͨl娌ZNܦ v'LI=`ώO@KtB#Э{TXYx^ DkMI+!W` ~WfIJd9,ΉGFĺXle|-| SnV<"7uW4Cw(a5"hFx![$Guţh~룇#o`u.tJiUg_ . *:Sy.IkTWprt)|9/wN[x*|p8񒞀zIӮ a1]nc5.T_3VZgcK+]OQ kv0AE{ة+\Xkjg?L1 V>t`x_2HqI`BI.$\?tj2Wf~3n$$Ո158%w| [Z-wRwz.v oHFnGG_iUDj%xNɛ%<lӂi9J3Ɩ^Z}_&Վ~aSt}ȢѝRjߏ9$rnaYp_zWKd`VN@/8[F7b1E%b}Ɋ\b(lVWY{[<B/~f%1!%&MzX1P\ 'AM0i26;\iR^$̞H\m b"#ej"K^YEA@*i╛zo>j=}9?v<:`CQ(Uӟa<xE!c)Ea6=;dp 9>J/$ጺjR#x{ʋiNhY]ۏN:@CgG[s`hS!;D&J}ev{6}B:ޗJsPƊqbH?+*\"LW+Ѫ7+܁!c7SZ,r3*)q^;pFm]f:5p@8H|[|}f:/}Pm֣M~ܺ)"7m6Zh=al=(F(;N3Q)'T;]im:[D<}23RetZ1Gimv5ꇿ';ﯱ6!ufJzfk}x66ovGB׽-[twbŕm=$#:,r?yAiK^gC[϶Za#i:p^ܜV*+ZoEf=?w(N (["w׵7lZ w,h[ ?.^ϧvZ0j+Ų_!I o*Y'xSP~F򏪙9c6J#O}?@]Qna~_g};;%&pe%Y-#YM|㟒۶j1Xi8UDx&/,Uv{$ܷHs5GÊ,%ߠVGz#~oۿ{^J.tG3p=ө2N"Th'VAy  phCo+$jPWVjj_ܠ>.4*~G{/s?H^za99T J*㧔q~5;{]$~|еzB )*t#j~3M'}:,R/$K-ִ?\bV /9w/҉6hR⤼Gɛ/^sC&OQL%'Y_$نdU:Yϒ_lڷ'^`.'엒+%dߢOR|'smZ[[ڭ{_NQܜdٿnT.:~+l&te#yц#{m0ڢW]"+"s*~Bn|7HCXs*\>'sU:Fݒտھ2"Z\[,|ڕ=\qP!_w[O%ԳB[!fT '~nO[n/'~֏[GqTk%ăf}n_X?>jx\)Z?&-1Ғ;f+(>R8G/H5TO_>.?/ַ~ӄ j7ߐj(qؓm77tJJEQ`4oArBjW+KKʩ \?X=ԁ z=w|1Yi8.:YőkҪ[OIFĽ ӷ& Bz\D0W" &-bp&OM%XR#SYZo+&"-0D֥'Dm6qP|cX[K,?M%1ȳC'=.N1_1ǜxU̢2F.tS6%o7gsw'G ;=]*޺ӺG[ZJa0R@i*L&P ( :Ja0R@)L&P ( Ja0R@)L&P ( JaR@)L&P ( Ja0R@)L&P (g1L&P (ab@)Ldxm Ja0R)L&P (@i%P ܀^^ \?1-[:zbϵ]zmib&}sz]@R$9־ßi|*~(MZmMP7g%-` h#p\|P rƩJLivrQ2m95!t aC8mKxpO٘!87ʞ(͐xHkW_Qq~™5̈́Vb0U m2TbѱoMӘLeZ,j@Q hIB^n!% H0ST69浱qgh'd[x{Y3:kR^)ȎK]-e˭ @_Zi7@Dm¥ygqU jM?n&蒪3S(v}*Ll> /6yJg24*A]-I%"tE^tfɡ}9BP@[/8x HYv bD櫞F*7`پ^Vs|Wg6o*˛)82U k҆ xJ&qyIT:b րr bi/]zQzw }xL~(6`j=sQ̼k]]5ܢkH no䝦Q0 zƵh |10Ů➾]:$z;u)Ix+6_@+6N-Xyc]{TJunN> Qg`\|-Qo*?Vn~ʃ(74eOn_xu|&R܀ azgPńPᵣ7x oKkQ=WwX6h3/Bxm"=?ZϛboFߌ.rg{Vߌ.n2k1/zS~|%L:2M* )5͇-^|KKx?/o=S?Gm<>#no_'y2) Zx~s uu#C&& CNNϊliT8 gP" 0$̤$u<*L1eL2φjXWdlXzR9dA/1z>bt$d2;7*Ǹ,)abu+@<,vpTxcdh:5ё\ᑽT"׆R2J]tAcpDtΠ< ("XR#]PJd/6 Um=&.%p^B_ǧ8"7o+ c}ƶ46.w^9VxFX.ncz5nt=ע}lZon2xjS:qZDlu&l$6r-a*Tn s){%zLMYӨ̂&gCպAy?Yiwӭ1'xӒA,}1/nM0KH::t{}zP5 h0ЙF"7F6 iNe,BCa?MzaytL)~0|5_D,[a›-ϟ}7X^gIĮ]n"˛QFcQFr˔NNL(U)Cy\SRHQ&A.k>5T)'i$rRǧ)^-U/\ySX>qtjiB~F_l:=esvu #Eƣ=eƟ~ѧvᝯoȉB9hl󇱅5|򇱞ݯq wySuG1=UyXIMOZ;7J*߄5ǓKIx2/Rt UA[P%D%91[em/j~ 2F+2Uc$yHbۗy,~X3IqԒe($s"߮r!Ϗ좫22KpX!^;]hٔO{xV#b;߿!D.!L%o=<ҒŕO'WԟKff5ytM=\{mG[,Y _|{qXJ|w!t-bKS!t-bKf!t-bK!t-bK!t-bK!t-bK!t-] Cl[:ĖCl[:ĖCl[:Ėb-bKv-bK!t-bKҍ=ĖCl_/8liZ-5#2a٘oF7˫bێLq!NY73|/?Qc_VhVPkln%dA^;)mi_rʠ߃NH*(6E]M8&]_4<Oǻ-1Op&IQcq!@yK# LNUl?`re^[ 3*zIȊMA0m*aCSl8>[ʣ՞ؘ$7ta@t͌Ggox|-&;*0j6KEȬbb`%mR;{Y<}0~upvQoҾ,cx *FSpe*>])/E-1`#RJfj,ʑFU^X C6"@;SF*$PQXh 'cO$[s+^@\ќ8G,mU^QCXD΍˹ %G}ui㵌`ㅇ)ZKMe!,`.C`LI/?πw)8ƛz5s\.Ă ֲ)+ŖEQޖH;g<Ļś:$Jf+f3J)uADVc8hKWىk\w*y*h`> Tg#X>U$,wʈntO/㒫)R\?lAx=-zSdBEj$[Ynom讀ⷷt_:V.П1q&Z"m^ɹ q1[9OYk*lou[jH#]NMKЬ^T'+K gt8Ű ߾b:rOGf[GsH#//PrIFGU-jًtum IBt$D' IBt$D'1 IBt$D' IBt$D' IBt$D' IBt$D' IBtRN$!:IN$!:IN$!:Ct$D'Ct$D' IBt$D'i!:IN$[K@'MA6I!dd OҺßi| %-eBe=kjӒ6i\- 9Q 01)E(7+VFu=+P Q-7/'D荞pHa_gD4_L斳Zgs/x xǕ( @0i$0X<$@ a XFh4=L#I8~a;~,Iڱ,NNb1u6Nbv6N&=zG{lԩSU9uO>nժ˖խ} 8lg}%8߿~v+yٳV?prDKᤞ %🼱?3L^,,I1TyKPbT+^b U5<`x^>s`]<egޞi{z:V1FzbhzHBˡޙLh ~*̍u`sZiI}XR5аHӊgZ,ˊKQ-lFۢgUNjhU *%ʆДvX.ͫeb$+% G-CKe+/W+3] ===Z~fiAy~C"zzsmP8c@өؐ015R~HM%@_KeФ>9b$5=3&#蘜2W\1 \;֍$kАi1[I%~5&$$i :L0c@$ڐU8¶N9eUkH1 ?D{SI9M3L0 ذ>ȩ< J"BcVF6){85 9 ZxC$K ]Ӝa=ȽKl,9͞JoT(GQc!%^ђ*'D9ìLh*{HQgFBR~! S^>"1!R/')U>&(a*%8fc*Ĉ>Uú1Z֨ JҨGsAQc:C#=յ=I^=%T``Q}DM4¤6"PcЧ@1$3mܧQ~P JQ衝ӓv.cg<ZW0`M$҂ RC1ta%%1g DA9WжV%^Di$Xsi:%~5T*{rcM ņ-̐p#NhH#d<+4.63, B18YY_)*{{K,} Mtn}L((lhUkKզeC&bؘcSzV+HTRYli֎I #a5)QfQ kdxWL\:aJ8*hيثaCG2aM+cM#Beڸƛef]yyp?z vYtq]f lLpP<9&d3"Qvߧ'c*%6K6Ŕ!-܊aQf:N^v5~䐓 ]?<&8^E:Je>GgԤ09))wǒOđ?)({{őzW9Hg٤8f1Av褳Ti>e&|Z89,#;+&Uo.W\N_G3R 5g~T<DžL`Gsݬ3:GYͶ9fg)6W}[&ߥoEߦE'v4d~]pg_rE;%ٗ;%ٗal©%rYwV .@Y^}=<uf◝#NHY3计m[?Qƌ6ʹ"6ünEE)}0i s+OL}J*+ C]фXJV2ZQ1E^Z[W_[z v@2BbzXTHN=LuD+P#e+-7@Qk lK+J)^qf݈lBK&+via2wͭB~D!ffQ4s̗69[g͍o XdܥD! Q!JѢFh6 /yiyfO=ӳV0oںևgĴ$y@qع5_]AJ" ̘&ݵ2e z3צ*85[1Bi~d@?EZqU4Pr,|DVobp(EKl9qW7v 7v|͏nş׶]d>{׎3Kh/wG*yf+h]hZ^5jFC/W |\Ih_6_2dsUuRҞ<c{49q Mro_9|zJ]W2/Owg,m{;JӾyi{}RPp; GzsWʁ#6$GgrōGifUS̩W;'y/\5][ÿH?v<{{.2zF,pjǯ{%q& tf^/ȵJlGY{}6Ϸk?m_țm^~R|X <95\?ĩlEMVΚsşȞݸz]d0ϱ3oz8 d%aF>M;b>\9MofwH0o%I@FrIHRABctJI( g,a=-2b-$u?WRޮd|XtFR <,iˁƆƭ6(ݭ2_kٻmoܲeb3pƖݠǥ2"O}$1{~P%ф9oN sУJf^$>>j,;Xj )멤dیZ"~ʻj5fdfI!dO'?]A,f)Y1cJOwTPms @U6L!'CB {՘Y` DSW boBZԤ@m"cUlFνX^"o0(2!4h U !PH6Ɔzuڠb0G<Ս!#猉ɆDvЙ;.LS΃@{": r@PPpWR~QALU-{5f*a0转pڮxף?CL: `F!>ffD!O0ʴǠvhP0:f<.^C`F ughM7HUfS9w _)Q Q>F8lv g-P5Z_jPnfA[5޹n:CXb{X.mha4)g[:v.ĿV:>tp* t/UwA4kU}5퀾\gJr76lqJ.qZb7$ݰ. LiB 0&Z[;$(;ؒ(xPBJrK1L/[eǷ7{ɗ f1r Fve Vȹ˼ƍ52E$MyVAfűw  sٯ(еYjmz6$@IԊƢmqS۔үQq^\<_XpaZذpS9ʽ0^`'T;VXLK]Y+4N!?-&o wh]Jt ,8R&3^aOc;ThOX-HB=2Y#=䝀!}4o&au!~x%/xtfyX8|pWcF0-W{wgSP>A(sD) 5'p7 W.(+Х$l7_Ѓ UDew%i癈1+r{%#ykgdHX|j@Z#/ bB2 >trvU+c$uM䳂(gnUb+f>zo _Ua@>#,xsǺuS}ȮrIk=wu]؟HJ?C}v [wl_OPa@@t fzC6ҵUSg 5Ppizݳ.y〫d3 !pëMJ'G%oE v`&联Px?t'ZC/h#taHڸ;HI&{RX_v-[ho /G]

mtISF4Is#3٫\ҙ/E ^?0:=^Ϋe-`twIj'&5K4ƤOzϹ"j)cٚbVY| .4j¢ ƍC#]j|##}q5{^InQYiGr cxgX|kIZH5<~k>9+l8k%֧BBGJ_)qTAK`Pvu yeixq:qkFe,98ʀPTCyIò. )zݕP{pnAX,{ =X笗] 8UZ_q絉izgM r?m'/=I~O>k0?]k˅Wq;{ PwHq,w]E+ ,I&pyGscͨlRa:W TA'1&&n ?R0'rf7W5$>̗j;}dȍXi \LmM(9QDoB#x5s9aG<#N#畦RCiG:gpkTR1,n >i#@JCD<- o\ܴΟ#߻ѕy$7lx g,ygvo :#^I -n^>&q>g5mvբv@oHN$!$Nsp'͜G8`-åi~KE_] ? ?ϛ7Ηoqf3t]aJVqWq?it7m't ~Lxu19KI 'AYd!?L,F*thجi:Z$ve$>g"Y-.!b0?ri6&w~Cwu1WwR{7q}e*9`KIt_A kV^T'7Ont/'sM<y~"'?vڗ]j Mw+ܧ|]O~W6[6/ZũotMTwT6 E4-Eb܁ քH"*.`5'Eb=f-,.YhXLb}%Nrx GU܄̡@pʀ),${ᎌ~l@=Qdܨג5􈝢٫0RQ*J_I[襤g4_& ֹ2q]ޚћ$E+귒K5e^uYq[*5SWaZ&c_6RS,sZͯEr0>)gwөVOf?"D :řFoGNL^iVE.$7vdZ1B'Jm,1;|jK\:Gz䀽 cQ6$a*GRJiydkğOS@[z+ ۹t xLG0|5 W~ wCϣ#9i P]c(afRav+>%_-uO/wmQhۀi{",w/#r]0QrgJOĹCq {eGd7`ٸj'maFɹEn,Pc&@ZB 8Шg`+zt\R|vό h$7=$L)x^(!ݓ׽G׶Ā'93cPLm;+yWY9~&,'UC?.S 9Ypg1Oi1I '&d k_撊?f\Ư K*va>xS{y"?>we|H~Y~oSBg/t@!|Pv ɶ#MsBIu$!Kw7\Dy r arR▅Z|]˂{'mEڼ(0OU{@ȯ|Ru$!16AdX!.Ardkcs23BhrD/D@2W{mpd`E:x߭´%xxO:< eR_;K k`Gn&_M{o\ ފ'ݩ+\wզu۱3#cΔ,;A߳|ٺUf͉q$:i3XZQnx+;]!gD͈8GD+_Ii!'k9ykDRR6&Ι` "vPHԑ1eiYa扙c:&qVk wwMG,sSSsݔcܞk°#wᩰZш<.s j}¶9rU^Y뙑gP0:ROzHrJ C|pps{?.FM̫;ĥ*Nnq!L,~LZ;pyyiq_,vphY?K/=i[k#@HU b- Q!FQP.XQfV}N$siTx:ZVJ1/C5N(h xЭ<hsOxzy 5r!댏6{ ֹ_kH49ݡ=dZ0T<=b;z"YF<0S ;iׁzkaЕƜhFZ Fee+cx*CC Q ):cHrk2 l6ȔS \к:0zN8~+0[NZ?5^jEV#f ?F:"{0upK0B>> S!%|t#hpJ*^15d&{NmnF3LO#!SjT!bqZfh]6ۘZBG W.6 $k*󕒸'J4N,:rC8M?H;zwyh|~\gơ.)f T ]SMOwKnJmMyTmiql j0ÞV̹CWƚ &sR!eX~N|R |ip)?-KD\)97o'uT ةt }{R,ۚ[Dv3)J5,S#,n.`/n׸o:HROf1Y&\_Uҷ'#.o?+ \:v}s+peڶ1 zJ' c{#l`ůM\j'ЏzJS~Hj+yI}rS0eNNs{gDS왶yls֝Y~vYӳ}|w}Mt28U]ryu9r/n~YK,CKmź-rr;Jf:SAR'*y2opڈԒhzm0pwihCDx]Q`? VjW];9c';(]ǡjF9t!U=xD~?֜BVMVCz=:`wp% xAY줁l2H&30 m!oQ+fXCA*캒|iZd:#;0Zݲa+/>ƎA9RT W>aAF{&/sS{#Hw^"xJ/mJiT=^ц!,[(2r]􌹻)]y?-ͳq{88y8Vrܿw~>ޚltrS:z'U}˄/ݟuݐwW׺wXqXkl"]ִ/M66{prTn5r/wdnM{.$O,OH;Ƕ {+{㮛By/M6h_8*D&;rYy%]Djr ,f"WOc{ Ѐ -:q %' D3{N4V-X]b@E1@sNt4oٸwoo`D3sN%' )H<j{]&tlL/{$Q@|$s ;Cͣq[?KN0=21XoY/0즟 h, !؝"Wc[*+&9=5RxRr\^Imf'J?{=Z;OC./ͻf>%ႩAߕ~3B\r[)[/ʃ]a~$7$<*P0I4nus+É?RP)5,40Ai*[v/J[Ϻ>^0د&턠6q+%9]ryQ$O}zU /}&X=U`ߞ|ݽ èE-jrwJcφs_S!";Uy\v̈N40`8JpCZEB 's1dֻ DԦ]U0LerCFXr cA-1~#h1I>a1on✱wu 7iG28OJ6e:8&aL{](m oh#]ex,>{9irR{ ZZbfmfn@]F34jȺ۸MIэTQ9ؾcGCWj,r>;ȪۈB|bIv$]\?[B\ij=պzWQP++Ua#yVZ l^ 9~OWK>4D b9unu :قepYg%Op&ι` Oj[@r|-Zz@pӋzJO7<^'i4<św ڒD 8]ܙc⨹M$9zu;Yfo輙~R ևZ%u*~Q뫗K]"ziXĚKXbRm&1v&|Ui #xQMD2AkdYi8+cmb%õW3_g%ӄCW&<3 hԬ\]uJ'l; CjT}hDVx3p/r.)yD$-U]z$@_[kqF!o'/ƨ3N.FЗ<,!NExDᦫ歇`-ZU怘5X˼Z߼A]Cy* |RçrmlF?-ݹCMJRiqxnkrR?/nTޕ?+\ F-]F[ZI^4=G*$s$ ~I}n%,{=N/KBe{ɥH}T"߼G fR+|o°매㚻8:_G4}Z{"cK_?gIa=YE ey_mٖp4-Ϫ~XJ@~NGM:JDݾkJnd=p)gQ@p!ϼ4SvrC ;ò*GqƤh#͝H{0sFGz E꘻M ɹD"YDrBSv[Hͫޙ˷50䉗s|jVȏ E劁e.%8Gpni gV^%tU} YyGeFw. Dk_u.K鷽1AoA4+qM  x8Bj~iLw*J[d*',PH]:d&d}e֓5I5v$>[i?.#f.;^2믣_ is޶Qٹ`Kv؁|9Q#df'9h Ѯg 9hb-ohʪB9Śc\cmZcb;YB%stdlFbVthEX =gA^;{'ݕ-eٗЕEm~*$p P9T^J\BIm|ٜGW1UIDYr͉s/L54c1UpW3dv/,YjFVj7$m{Dvۘŗø/gRzJOos7tm"FDmc*vYbGQ 3LĀW:1QO,%=1,e07xUaT񋶑왞@g%݃Kz#xiz/>d f.qܘ@*FK;d.GPC׳M3[*7TTA=A-5~z;"~7vKkt/^C~w5ߺ`FeMgPAL<] =0ocug!Aܦs/rE"|^z9 B&r6\rO|W~@HC+9OZ7Ɍ<H <4,wQoSGXn_;A^>$eRnn0Q^FoNk ϲFoU+Y-U5y%SƦk pQjeXѢ(TKO.2FN?ݟb5*?$L:`hgA.r`ĺjH ;c`J1?[>=@vB?$_Y".CiϬ=*\.,'5ݍSssyҽ|Iiu>/c7zQ% ̶'m!ѳ0GSWDe2<7&70[)SxLY+{T8y=3lSZCY.T7,eJeA&F+K t5vwtV0"eMRADSҊ&)g!E$DZ es痬M߄#dzNMiួ AePH`c$/m?!.o}T'ƙ&GuمP]f_N}'\81 7fB5i6\QYOE]~yhqM̚ƨ!h8-z)P`;o"'֊EE#2'p%U2H+DUBw2 UU.Q+%skt*d,j(*VɓUiƨ%Exz6KPH*"&RFB[RZ3Eߣ 8U4idcnfz83,+nĸAvv #{t5JoFrE) 0p6.1らpl'6۞V{|[e{꿭[F=jfv[و]0r+} Zg4lckT\)jrD\wvm].6U1bۧs2m>o6Ӂ!E^61|`dWtc YKGaS\:p]nFIDs?I}f￥MAnϩ;YcMfB^U;mMWǶwQY(81qa @ %wpd;\mK6X3ʩ AB2@^"[637!Ȩ~ӆ@0ll[ik$;&Aj6ěyNk:Jo֒lʆܫS2}#mbԶ\ 4[@Rj6@c%/>r%t$Az!9ҨALL9o$Plïf10 ԇY0RRSzOT1*G/7N =O oJN0?`]ѪGc4G1tv\MwĉR>P&=N"xrTk/i7^&DVTBnT :kbf*: +c*@z)>Yh%7{N=[M}V쳨& #&g3^gl6njVDL?gٵdNX;`L?abQJ0\OJzW>4{&˨Tq +' NiP-T?[OU3) %S֒}c`8G~D@ո3Pr{D L' 7rD,e(}Gl6 ]夠])um,/sAK8 drjd&uw`G3 wgWT` )Oɷb7>&3X@ ې }vbG̐KAAA uC [^}=r~-v bN ޯV px< xTՙ?\BR<7$$NIF&3;"PQTdF8mmڪEu[w+Wwv*-qΝd&s~<./H(+Ͻ%N.+K*+:nz[0-(=դ$O_e{Tt_/ ^OF~gӧ$r}eV)sw!L%~W+s>-u{6j3芶Eb6LڧH5f6f.tG(%5o o Ѵ6~GIm@@+CV\=I"+$4< Cû,Hk 4CLd76eU;铼-h#+J5RDvMV۔Mwijp*뽪)}*CcH{Qg\5wU=i QP&SG0F]y<I8tȭ*#fhASUMׯ7EAI3j:O%~c3Up:Ckî䮐FMn9,4" =%"=GrjU~\ y=1 h*>MqQQQ#/ma=OX#_^0,SN Fl]٨tfLd`hd EX4AYHO(82EWjf66 ӈcV ɓ32}$v"%_Vq. &cլeaј* 93ʼ9~Z&1*Ъth]$JO0cZtO|bqOiCz4!_TG4_ܪ 1(ޘ([RcT}wk\pQ= cv?ak3ՙRM!D*GUu<epoAl=ణ<옅]O~*lj IcR>&ȡτ 1R.ħ QG--5#spd]wX%Uc uftN;g"4ͦFS,GeDJJO&M/9KCȫ{Juէa;TSX7 .RM0Qd-<Ap>=r_k@N.72(\{8v*^[6*%Jj\Q,]>hƸ ER?D'H'DMiMsۂ2הll\ +eE#tV^'7ownnmll^T*UCe[{m5JsTh(!%F(bxgBN})#%ي.wf;sʄ=$9JBc@0$-%V[}@RvŮӟ։Ȭdwڪ$ %zGD$ wgE̹#\YS,RVGLVhw$ kry[WXQbWIYqL8{ -SesJj γ"Z5?+EF:^ 1xAb> R^ Yi16;̶ 1+hNJ&m xixnѨ5TGtYQn8b)pIη@(WbD"XFHV"x—~GfCҤu+ꋮeN+zNEIȁC_l&֎QCj EoKH Hn#q鬗ӱ?ZLe\%8; 2dnz5*"14HgI0=z/~6y&̀_KҡU#ҡDOv<䌸oˀE~xShFF*,7f\̈́à9"1d^).dutTFvE?ZQlH!_ʁlc7=ZT؋:xQ*!rΊej|t7BJ1#] ,Wf1 K90甡Ja'R_!yqD%=ҨHf=oYоK>拽'w|.NwR! ѡ-E&E$H3р-˚8n񨏗*R&Cn;)"Y4F hEuf5w"hq[o$֕IK kv[ TR2ݱu1EqZl'#/YfCd`aljd^.𛇑 c2z5S Y[F^' 8ғGPrF#<;iN<$UgGє!TYB5򟅖Ծoe"UGHÿ/|OURW[far0DI\Ra=?n<ԗrOEi SٍRц|@ $Jn:8h.oȭ:Ve\V 5YB(jt_Z'0}+ C'D HUƩϵ^vrM>R?:"ooa= p( I$a%nJXݖyn2_6{LECKNvdvn<$zPQԧ/ u ZBk@WG.[dl&6ZoHMD勈X ɂ\Z YBS$cIW|<RZ n.8iRZU9FgRG:l_ E7b:Ȩ,&zǫC l2e:sVYd'V?8Md6GZn4IEUPkbawbݷg眐Ř>Ya#9QU\nZ f3)T˫h!NLXSn,wly]̣.ȶe*ސ[ꡊ)!+/]o)?*>=R*/;Fć74~JMh)l9 FN%TkVPš7c.o.5 #I7LLo& td(ID4 "^OGǔݭ[@ *}ik,uxc LGv ݢ#^x(o46H⭌+^|cEO+TU(«᧷K; #6/&$>G\E}=bVWb1ie!)Z(/2xZ#5e%kցL{`>H5s=T7]a69ǵ7@d_7*{Ld4R5D`̥G<]l*}bD7yg.R9;Uuͺ#V;=64'Rˌ' FP_$?tKQRfz#hMm IM>w1XE~l,6k)&81{4蕄!(XMM0U&XG9iW}]F1ۭ7C5cʡ.+йͰ$[ 7;L (s]Okq}8SzE*`)6cfŲ/XyZOm1SVU\JOT+==sG1m"hRɟeSz23X*X? :#*ߊ畝7[XVFm K' ;}cԉy!H!=N}bZ{[K eH xEE;`|ev )da2+;QcEcTkXJqm`\ɇ{a6.;".ܨl!.9EK\2 wy,Ʊ0B]Cjo?@ָs%EӬ]_D4:>{;L&&W{:J8_]ƽAQDȸHH+z1_ě4ub1g}ᒃ81ʽP>^o<Ԅ8x.s3tlze#Hn5(Em  M~iXۃF@~2h\8ʿrB>Csᇅa"åW~CVw(2⒡az0u%bUPb}*p<ATO4 !taHl_[QbSNNf'ȼ; " ӊ7#M}h fKn`6Nv2be'd62vf{r1ۛX!cy5jMM&<ǒr#E / H?_Nu; ^0'?fꋍT]eڀ"q%&dhܳg2x(sobSnp&A~wpqNf-'!}">ybԀ[OA&|%D;";; FihcW)<ȆD Ff];~ȿ#/z?J$B.į&r gG~2F%QFx"&5;pD؉=h'aO;gF&a#,5ˣ1|ao/ c+N άDy ';||EߖEcK*QD^Y"N5 ?;k,od ;{f0鷉#J} D"a0iX1QR5m>ʙ*`r۟ )vvcn]`¨ 齣ҟ?tk\&6RB2 Bj5x )>ĉ9vֿeAJvvi7sYW_ȧϾf$O^uɠHfDy-gQr9 CyNdkb$H7xˢJ ~gbkT~ւD,V.5# Qʲ?BFL|0Ks%&v˖YmhǗq+amՕ3DK[J((5zf݋O5ʓ< ؆C'?!S Ḑ=<)dؗafE˟Cƣz(ۛ5! 򇧣'HSPV,VfSdDCPO@9 GSjPbiy iKlrήu?d\P'hBX!c_7S/ZFO]? /`lZe8׎x}m{ܸgW`6NGlOQF՛gtcɊ'g4T7Z!zK^ nlyFKDP( P5 W4tf讯uiRۢ"s2(ܚ[;,S꟭\R,,&[( ~䥼o󤈦͋ S߀k2*&`NaMifd&a5m(.i[,MCa~/wy!a'iz xx):hMCh\΋(Ģ"fѬҤD0⧜^ȑՠեla]q\ivu%-@&D~o}d''>p L$E_<b[;u`- [~c@8&Y 3ber܉b&cq!ÏtLÉg`/M @κ=H2+j=TC4E4PmJhMIX܄`YsHJtGJЍFDLaY,al \䓐Kɬ0\((Hf"!q*qd@ZtXFSDt&0py : ar'3@*a 0鱗dž{㑀U#S:NmG8%R̳@Ih4#5W~O=Yr !ODE/,}-eP]9NdQɵ]X0ƪ4_S}׎ym:q+ODDD$f4_fWKiFrK^f׀e!kO,d(Ǜ(];/*lY $hOT8(EID0EM1ꗁLBX:8Kg2ۄ(QdP :<ALFP`e )yZ ԳS57Ve(__eY]ÊІ[q@_ݹaNeuc_R7$.dTVNL?ܤ& s hA: npxv_ujFq :]07ɂ2ư^2T9Q0uc͈sJIu(vt-!3B4X`Qvb}&*(-@528E>hw,@h+1P}X-~ID0n6ŶiW Oť*5xE%ġ<ˠ݃= 3_!1VRlj,*뵢!RhR#VjM®%F߇I檩6PI]"j_TJKi%sU%W\ oN:< VZcK&%Sa͓aivaƱ9o-DTndKue+ʮK&L7O֕%dqK&K ڛ'M;N1}KCUV lưEv UbU8_I\J&dIu}Lv,vLC3ŚʊˏaBMY]-:@}r\HMvT:wa\sGLi8I a M|gM><%AX8]RrV.w,p^LQ]h݂R P6*&F?g2D \E>۳/k6!%dvhA#ubam0e̝YiH4:^S} ᕫն12<|+W[_]&6 YP]^#J& 3Vx4S 'vyc*ĺ3#DޔʅNR^}ʋ',Fx>]4PHYl!94>A][m]FH2o%X" 2A R ,d` ^,(  , ;BҐ\`WԠpC 7˛WTHڶ@t4=BZ\96_egG,b/lw4H{uczh\/Ύtē'B5G@%w;W Km-`H @;4D1Cs_G68; ~I>F0a"ɼHS@\HR\D^\I9` 7aH3 *0-dF`d%GYFL+V&.hxk0U3nrx}}no :6o=>vz{7#>?Ϸ;k3GEv'>s]j| j"sw^32,bh8 ֺR!aB(=ۨmlE{.q< $4f/\tX)Xj o`{SR*bȍ=W\jDL.K\'u>Z69iG7,) }J^CnG<+%-PU[0%#| Ta JA#Wa*Q\v b+KVA ˓,(3h@<#ֱ:Ned! FQ,Wv2VOX)ëD2m'.uݛuvr{,.pYVpj,ew.y2bVes5p}.ڶU8W< Vmݟ+r?η6hD{-{w2J5b;DKJ*nQoEoX^E΍}3򝕢8pߋX9=)zdyAT‰AJ.=>+h{,q b-d/dz>acB,O/f0Sa#PR#I~hUdfC[%1|'n%~ILw'4O/ \wzׂѰ\SLS5t#EZ(.\SO/$?oBqI v㘖x`hSM[5ҎbEڑ\T9,p8QMXZ!tVKk P8 r-?2մpP֩(wVv2$8+jα9[hg> Hkp-qܝ:8{/{Y?W,"ȇI?!I-{B1+Mi';u1&8@:}*OnnY0yx-8`ϡ'W6,#x Y]w:fA(0%˴#t$[02V]VeحMڅ?xBUiPV*>dl7Bvl'w+DlcC`ToYUHj+jKDz+_e>%݈VlCTQ 39;8ߓN ,k5,Kw -ZɵcZ~;sFPsiReR'vӲ9&ͨ/Ŏ~9x[֌Rw܀8Uss^3Yu&2>CQi:q gOJ5Ivqo\Cb(X>,e*<,a)K ./m3^eZss]QxE1 pZ[ ֊cWύS01;(f9 H u'"}gM.SS=!}As+(Ǹv]&)CVt{v*ew|o BC0jO|&/9tu+ n#Wz+Il|_wL7@IB$QŰEڄPY(.DAspΆ|,I x;7n) gϯH'omvm`#O2/\z2 W}k?^KxU 2(Mi~KGS^ G5@A}##ON`XMS TBp=n545r>`('8}L,'p|M~*qxoKҤVφi'ȂwC9uW:&kzEʷ={#E| c8?ӶQE`_ Сqk=9ֵ#Nrc_'kr^XW4uw%ش9XVKa)4Zu XiLG\ 0嶑_^Rֈ5Wk*A?@OJ^ Eq84= ^i2/ay9E %T@c@>0 [T#ɠ}ѐi$oϿ? ~o`VVUuX/X> ZtlJ?)Qix%>h "dtr_|?xl]Ovo+½ijJV985fv%qʴ:U ٖCJ YvJ^Nv*+aV*j), A7,MB hM9;02-2 ~ mj]çr姟I1ǯD\-i}h?}O]×Q oNwGjS_)n ,Mܪ`GT;lzFiǑ2Q/<(ݞU]B yVX=+Qr=*;@}> m޴әnӫuS[9Didm*vkD 9S<'ݗS, s B[^Jf¬4ɡ}Gt;/р1%GB 2XT.:wn) &P.8 4r)Rɒ+wͫ 0r,=)2φVof)~%&?k%r`WSwa⸡Gje3n$\mS4pX ^#e)@B\OgwXڅ.OZ+7roL%(go8Fy?jYAkE嬡ft_֔7|V`3 :zUYV@n3BXsF* U("`ꔐ]Cb_F~Ճ>*I֔C=yB#m),=LޚHHc+fE]m )lNCVk"uGbFߚH0iy\wXMP)NCˈV"-hG`nC]=Q+LJ;e{VvG#DT09]? ֞X"d&zE z+[Fh_@V4'f#S0[&[*aRh߂jl6$Z66h(\a,J>fhN7͢VW imoK4$OB>\TW->lc4Qmo{4$B>\TWE>l4'h|>q=7 gXR,n-Hn挫)ׂF[5R"4W|,1;kSEIdj^ih=خgyD4 -4Pb^~YIթhȼP\tiOs؆v? 2DB+C-qc΢6SQrԒzb45ohNkE%SZʪ+EDmC!Ynr]k*m oNպ2hH3u ZwhYήzVzU)SG|Bo%[yp/goKluWP[YWP6ꍀ/Dت/Dت>/DcM ozgQ&ʕhM&ڶmj\;W>W- ?y[݌ͲIHEWˬՄ{%U ?x&7U)̰y1r^ Gl8tx:Li~:Ǘ9~jpt>8<=PA `0`EGrjRiI0CiHWID0g&¼7+'O0OnnGOAlЮU?F՞ ɵnưĊ1jpdRMmp@Tҳ>HzXroG(+z=̬H5G+vP|9NK^&o*ڈĶ0=uJT_7&i't*kc.*K!t2MlwNLNӼdn".) '⢬N]nW]˻X#eq޾[ΫlzFloʚcDSF#aF5VwǞ _ 8=3øPfR#~љjjlGv}?2韞O/~`#?Ə?x-F·޿ fUu B q;y±E_ebS Oau$ (:U %_\C n)EGPń tF$Fg`hdb r#~1g4W 9=0;Ɂz4;vC^_GYnѶUny)*1hL`vXG9fl5u0^Ƞ>ٞBDiN15EbYmF KD:&Gdabv )==%3˱bʌK[[ b5aqnw#L\w[Q1 ^Vw"8((9'pP<"G*,:9fL8 $*$̊D䩁Mh5Eef.u cKf(tse(ʇq0i^w=h/緿-`G=CvV Y4цJ0Io0|޹c:W5JԌ v?ϣLz=oLGxϩV:%ZUzr0l74/z@0,_w+>jT0^'2&L'z^:'h B ;f OpPRd2.eѵi\£5SvFUў f,tn IUF'N*zD)`V@│OEe3Ƣ)uq6/(tgKٳкc G9Ip54.9̊<3h|p WV%7="ƮM1Ǽb\:<[P%kR8P'D)O ;9':ZD00,9=xW!: )owpdwp~Mۑ [G ĉ% t&#ZosMUvD9qD9=eh;wOsζidzf/#gOv-ܝ)FZoQ]@m-=Ih|oP-%9s%(Y0oʤdG#W:jW0!/әJ'6f-cohGeD7; f oU@7dqhRI1|+fԩ *+E=bt>5 ǭiS0PX["TH7[^kpV;2t9&&RBPVIW|e6Χsؙ ;Zs`* Jͣ˄4 H|a% 0$qϧ ؠlr9 P6s\\Dx6yr - ]|pt$CGyN+FBffW9G#/.8QMG#R+#_Nyn6F<8 \bn7:pGiKӛ`2塋 1Y.cOy~7vnAUj.vQڸL~ztj*RzNlwqS b죨)D'( 52CP3̈D(HxG&T8##3݄zf'V*5} w֜*lʼn}U[p`ɯ >1,r( |J(Z&9h0G<W;weG/taiGr>(nD7 ۰sd(sa ;ie>0B94uwݧMQpEnP۽ڱSy.?%XikYSlI bru$3HO7FKq}F97?U,D-Yjtw|{x;%{НX4v8͙7x7RvXs6yCHʍus'Uȟ.`f>Cg쬻J7[b/8v|fFϟDwE?h10)nK(9Sdgp\3w¢q iwY2^iw͛c<x!+;) } } else { // manually construct the local path to avoid creating a copy of the zip file // since the blob reader +currently doesn't implement ReaderAt zip e.Apw!L, filepath.Base(name)) err = archive.Extract(zipPath, extractedDataDir) @Gat least a database file exists extractedDB := filepath.Join(extractedDataDir, "data.db") if _, err := os.Stat(extractedDB)Ifmt.Errorf("data.db file is missing or invalid: %w", err) } oldTempDataDir := filepath.Join(localTempDir, "old_data_"+secu3rity.PseudorandomString(8)) replaceErr := e.App., return txA3// move the current data dir content to a special temp location // that will hold the old data between dirs replace // (the temp dir will be automatically removed on the next app start) if err := osutils.MoveDirContent(txApp.DataDir(), oldTempDataDir, e.Exclude...); err != nil { return fmt.Errorf("failed to move the current data dir content to a temp location: %w", err) } // move the extracted archive content to the app's data dir if err := osutils.MoveDirContent(extractedDataDir, txApp.DataDir(), e.Exclude...); err != nil { return fmt.Errorf("failed to move the extracted archive content to da@ta dir: %w", err) } return nil }) }) if replaceEIIreplaceErr } revertDataDirChanges := func() error { return e.App.- return txA3 if err := osutils.MoveDirContent(txApp.DataDir(), extractedDataDir, e.Exclude...); err != nil { return fmt.Errorf("failed to revert the extracted dir change: %w", err) } if err := osutils.MoveDirContent(oldTempDataDir, txApp.DataDir(), e.Exclude...); err != nil { return fmt.Errorf("failed to revert old data dir dir change: %w", err) } return niBl }) }) } // restart the app if err := e.App.RestartQIif revertErr := revertDataDirChanges(); revertErr != nil { panic(revertErr) } return fmt.Errorf("failed to restart the app process: %w", err) } return nil }) } // registerAutobackupHooks registers the autobackup app serve hooks. func (aZL  { const jobId = "__hzAutoBackup__" loadJob := func() { rawSchedule := app.Settings().Backups.Cron if rawSchedule == "" { app.Cron().Remove(jobId) return } app.Cron().Add(jobId, rawSchedule, func() { const autoPrefix = "@auto_backup_O" name := generateBackupName(app, autoPrefix) if err := app.CreateBackuN, name8z'<"[Backup cron] Failed to create backup", "name", name, >) } maxKeep := app.Settings().Backups.CronMaxKeep if maxKeep == 0 { return // no explicit limit } fsys, e rr := app.u @Lz<"[Backup cron] Failed to initialize the backup filesystem", >P) return } defer fsys.Close() files, err := fsys.List(autoPrefix) @Lz6"[Backup cron] Failed to list autogenerated backups", >) return } if maxKeep >= len(files) { return // nothing to remove } // sort desc sort.Slice(files, func(i, j int) bool { return files[i].ModTime.After(files[j].ModTime) }) // keep only the most recent n auto backup fildes toRemove := files[maxKeep:] for _, f := range toRemove { if err := fsys.Delete(f.Key);.L[Backup cron] Failed to remove old autogenerated backup", "key", f.Key;*+ } }) } app.OnBootstrap().BindFunc(F"if err := e.NextQI&>loadJob() return nil }) app.OnSettingsReload().BindFunc('if err := e.NextQI&loadJob() return nil }) } func generateBackupName(app App, prefix string) string { appName := inflector.Snakecase(app.Settings().Meta.AppName) if len(appName) > 50 { appName = appName[:50] } return fmt.Sprintf( "%s%s_%s.zip", prefix, ap9pName, time.Now().UTC().Format("20060102150405"), ) } xWn6}Tn.оl.- Ї$uidI-INΐ-EN 6EqfΙTOJĂJ[{QpݏPB(Ђ6BN=҆먏며>I|T=7\hlwRŒNgqKN)B{'說-.0K~Msؒ 㲌^9hghˌ+&9^-$3%O0.3\B*x<\% &$`y>sg?d %r# ٻo ,Q,H!KL^@)AfxJdcaLaqj1ލCE$uj9^BS*Ńǖ-h=:bRMιEfmtC6UOmcGxn:>FMAd ++ch')[#h:PX5 ]3®b,vʔ]`c($s* &*!cByf&qJy~%DU QbHrma Lp;@Rv}님UOp&7o;%ZmtߦŒ qpÀ&i{|j ?y\{$o4$E6 kk3t17L`:!\ gHG3$9[/)I4),ڧS^l pݲ a 5 02O @ݸ1:F!"U()N熽ѐEJSHԭtEռSꐹ W-2jL1~^y\@v/`C M,pc18|4CH>ݘ#X<,S`QB,zfPQ7t k~}7ܰ8rP0,΢-"VO {P&B >=Hp`g-&n\#lQ^>`F[iI.&IL9.8!r>o<&\C*n>X)7DwXGC|5s3È$}⍙ p(]4wւݕtoJb*,xD^x6yN3Smg}oeCis|SD28=hT`0Vq1r`ݭ* *sq}VDNӵŷ&6T:`PWQQxNaBFFb^U~b~Rbq~r~QRzfIFi^r~>L~I8"9 SF䏬fJos85"axVn8|bk8P-A&W@ Z,47pq_x_rIZ@Dݝn'XItf'ʚ o"lW*,.32 ֭y3K r>g3PR$Ri[ MB+ᩱciZI :j5UpKD-ggFx%j;({S.]'~|n+BU;!\Fb5uV@oB+dJ^9`+'}I# 845TBc?Bʰe#zTFpډВw&KgAJM74|z^Tetm݌ȶY&\S1^h[A BX YIvUB\-82Ir5室/;$RY) F#Xt|"#@c!<'0YdU{@^AN#9B:'Y;E;FvM8.!D#I)gMo*j$i'-g+ߤ9I R?-mY>;QM'c4|\l4sz9cTDA^`Mym@;-zQ~63Dr<>)'1GL|78]|z$ Ⱥ7qBւWavEd)ZJ ]1g<6r{`NT28f9įy C0FjȠ`W<^Ql%gcO42SBamY2ڮ@%c!iXPUtP-]hHxi|D3p(lzsF#ן9s/\H 7YdEջ+w*ЕEAYФ7^&Ik 1D1,5[҈ '♑ V%0Đgd3zrWS(V&;r"P6DU=޻:q C(M,%ǿ|vY}"$tֆ ̼4itt*S1j}{˱ru' ZU:%DžiS aWAqy>Iߚ8\S)U&:-*W,.8D>*`M˜A|9A,ĝVAX\JWqU5 N1™6pѥPŐ٘V!qBqy>RO AUCn/8 Ng59MD@Uˣ6[*3˟$BB] 'THxrLI8t2>YFv֣.W \x@ qcvc[M8& w4Bc8B?+xֻъ)dGfS6/h#*j2")4)l'YY\ n%'[z,0."%AHNxk AK(U=K__!H!#1*?1S0'9 #hW>xo:sWzgoyှm݆[ b+QN-9M)ɶ؍-IQ$Ezs\ F4cqFy v;N&-!tL9W1|N98 |B:Q"D4cN9'Np:/E$< .i4Vo1q.XvbDId aׇq0<ѪG> 86uߙϑ9(^B6aIfık;F]$:o'Av3Q'="w% '_![ ohB _Sr=o+ a9  I1}#NbɦjbjɊߦ-$RPYkZAN+( MUB % O(6i$%)3™PtYHNõyER0K/Y:u4Da)Pa .2ȏ}0P- $-8TTZ{˹9 mta&D鏈)CpwF+rlƞ,CQpJor|k}`xq㊃zok,l!;X|M`a(n4A@fΐєL^hBgLD+s5FxWbE/˓7GЀ@X,99M0h+`NDPO[}qdMUB+^S@ }E{"z+=IOB`~@Z&mTkrޏGcKcn{6 2ᡆ>2ZG}c6b|Y]Gأwae`m@cV1^H |i> a,BzPQI $zh:AC2|^eW+95[&5TЌha5X$d=}̱B[cml2D<++22#yp0A;xIl,!.&U*D?N!EDM|tL&OEz|LRu(DIӏS1JFVfNkVUm$* Ѧ ȫU6>UJ5 ȘȳD"fYZM}w8W{7pf^@J/N0H*G OTUHSDc˿3:/{q=Y@De8!!׎v:寉*{<7_~5^d1LU" 웵,lmZjZcQiW,tN|C!_Eع_ؘv8YFsjZ:(+ .6/!% XSĒ>b* 0ϤŽ^ 0icC(!<L`o7r!sg#xXB/eȷ1I(yXQ륚|*;qzV[TAj):-m>/k9 w +Zv$SsL. ڭW^ͷ|NA[l#ނ.2ȏCYTѕ Xb6~ۢVtڼlv 9(aͧ: hB/,gj|5|gԈ!KxkS~wy_OiYqCoϑAM2Ed㔈Wf~.fx\*i6! s#A})]z\#gǯFdI^=AQ}eC%"hϱQYutpl wtl.HiN+<Շr^|H,fDwdPX 9I־62x\݇Z?\>A)ϔgJ!ӟ>X]kyv?sǕۍTm2b,J5;@%aתCRwPI<*ΩovA6$KxmJ% 㧶!aT93ycٯʁ|.im/W kx;V6lBRFb^U~b~JRRzfIFi^r~>Lfz@;)8U$bb"&31eTM^[3jVWn_@時 B7eO+]ܘ—|]!_ Nx_6lC9, 6+m.QUH,( OOOO-HKI-Q))Ι^98gs;Zz#xX]s۶}™xȎBL,[nuǖNx qC JQ\ Jj$"={iɥbQ׵T$(uIa'? jjv?VD. .VRJIW9hC+\ yjY.ק+F~,O7;Tu]4QtzJf YU,G=PhŊ.nkbt@,ChڐuN0 B;`$itCjG rT b)jO4F$uMtu~D-oX Ṵ5NRV)hd{wkZk@恊 R ~>νcmшh:#Wh{ig+;&A+{Φyl]j%7@,*FBS5h `6˚ V־; ;4O9$ȚҊ$Ҟ3"r/H3@zίvfnzC.nw/9M/c4g(pO1"f`_Jj1uLrz=^<\US0$WDrQ1(O TLt)9;#7! IV5)L؀sS9&jaSG`@5o㡟q֬ZAaB5tσ\fB7s)9 _HTX5Sp{L1ik*:y=~CUNm<*Z2&mKʺ9; /Ul'Z ޚ#j5fBQ(f?|tV h0X.+Mݮ)lA>x{. ?/UsX@vYv+tRR@ E yϱ@f8 {Pō=`lI3 #ǗcH Vce rnYJ翻:d 8l׎]np0)9[) WK5maI(<0\م\С497?P[ YlߴuzŞ|XJt܈7bh>BHRt[?!4ELvI8w"NJN~@qޒuڶ; C DzO7> ǖJPNnY G" B{I<8ɒA,x`}[nipa焇:d^q≠ 5>O_7g*#Dt>C/TG#|Xjj`>tqA7l.߻?ջZ RI\c] !w6}p`ǨA?+.`9%:(px::Կ OwPZ2z޷_e,لV $/qۧt `J7/ܥMa&,T12N (}oQ@?!w\CeG#2 &o@E pm B<%ʑN.^C,>;|o/џC緬x28package core_test import ( "encoding/json" "strings" "testing" "github.com/hanzoai/dbx" "github.com/hanzoai/base/core" "github.com/hanzoai/base/tests" ) func TestImportCollections(t *testing.T) { t.Parallel() testApp, _ := tests.NewTestApp() defer testApp.Cleanup() var regularCollections []*core.Collection err := testApp.CollectionQuery().AndWhere(dbx.HashExp{"system": false}).All(®ularCollections) if err != nil { t.Fatal(err) } var systemCollections []*core.Collection err = testApp.CollectionQuery().AndWhere(dbx.HashExp{"system": true}).All(&systemCollections) if err != nil { t.Fatal(err) } totalRegularCollections := len(regularCollections) totalSystemCollections := len(systemCollections) totalCollections := totalRegularCollections + totalSystemCollections scenarios := []struct { name string data []map[string]any deleteMissing bool expectError bool expectCollectionsCount int afterTestFunc func(testApp *tests.TestApp, resultCollections []*core.Collection) }{ { name: "empty collections", data: []map[string]any{}, expectError: true, expectCollectionsCount: totalCollections, }, { name: "minimal collection import (with missing system fields)", data: []map[string]any{ {"name": "import_test1", "type": "auth"}, { "name": "import_test2", "fields": []map[string]any{ {"name": "test", "type": "text"}, }, }, }, deleteMissing: false, expectError: false, expectCollectionsCount: totalCollections + 2, }, { name: "minimal collection import (trigger collection model validations)", data: []map[string]any{ {"name": ""}, { "name": "import_test2", "fields": []map[string]any{ {"name": "test", "type": "text"}, }, }, }, deleteMissing: false, expectError: true, expectCollectionsCount: totalCollections, }, { name: "minimal collection import (trigger field settings validation)", data: []map[string]any{ {"name": "import_test", "fields": []map[string]any{{"name": "test", "type": "text", "min": -1}}}, }, deleteMissing: false, expectError: true, expectCollectionsCount: totalCollections, }, { name: "new + update + delete (system collections delete should be ignored)", data: []map[string]any{ { "id": "wsmn24bux7wo113", "name": "demo", "fields": []map[string]any{ { "id": "_2hlxbmp", "name": "title", "type": "text", "system": false, "required": true, "min": 3, "max": nil, "pattern": "", }, }, "indexes": []string{}, }, { "name": "import1", "fields": []map[string]any{ { "name": "active", "type": "bool", }, }, }, }, deleteMissing: true, expectError: false, expectCollectionsCount: totalSystemCollections + 2, }, { name: "test with deleteMissing: false", data: []map[string]any{ { // "id": "wsmn24bux7wo113", // test update with only name as identifier "name": "demo1", "fields": []map[string]any{ { "id": "_2hlxbmp", "name": "title", "type": "text", "system": false, "required": true, "min": 3, "max": nil, "pattern": "", }, { "id": "_2hlxbmp", "name": "field_with_duplicate_id", "type": "text", "system": false, "required": true, "unique": false, "min": 4, "max": nil, "pattern": "", }, { "id": "abcd_import", "name": "new_field", "type": "text", }, }, }, { "name": "new_import", "fields": []map[string]any{ { "id": "abcd_import", "name": "active", "type": "bool", }, }, }, }, deleteMissing: false, expectError: false, expectCollectionsCount: totalCollections + 1, afterTestFunc: func(testApp *tests.TestApp, resultCollections []*core.Collection) { expectedCollectionFields := map[string]int{ core.CollectionNameAuthOrigins: 6, "nologin": 10, "demo1": 19, // includes geoPoint field "demo2": 5, "demo3": 5, "demo4": 16, "demo5": 9, "new_import": 2, } for name, expectedCount := range expectedCollectionFields { collection, err := testApp.FindCollectionByNameOrId(name) if err != nil { t.Fatal(err) } if totalFields := len(collection.Fields); totalFields != expectedCount { t.Errorf("Expected %d %q fields, got %d", expectedCount, collection.Name, totalFields) } } }, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { testApp, _ := tests.NewTestApp() defer testApp.Cleanup() err := testApp.ImportCollections(s.data, s.deleteMissing) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } // check collections count collections := []*core.Collection{} if err := testApp.CollectionQuery().All(&collections); err != nil { t.Fatal(err) } if len(collections) != s.expectCollectionsCount { t.Fatalf("Expected %d collections, got %d", s.expectCollectionsCount, len(collections)) } if s.afterTestFunc != nil { s.afterTestFunc(testApp, collections) } }) } } func TestImportCollectionsByMarshaledJSON(t *testing.T) { t.Parallel() testApp, _ := tests.NewTestApp() defer testApp.Cleanup() var regularCollections []*core.Collection err := testApp.CollectionQuery().AndWhere(dbx.HashExp{"system": false}).All(®ularCollections) if err != nil { t.Fatal(err) } var systemCollections []*core.Collection err = testApp.CollectionQuery().AndWhere(dbx.HashExp{"system": true}).All(&systemCollections) if err != nil { t.Fatal(err) } totalRegularCollections := len(regularCollections) totalSystemCollections := len(systemCollections) totalCollections := totalRegularCollections + totalSystemCollections scenarios := []struct { name string data string deleteMissing bool expectError bool expectCollectionsCount int afterTestFunc func(testApp *tests.TestApp, resultCollections []*core.Collection) }{ { name: "invalid json array", data: `{"test":123}`, expectError: true, expectCollectionsCount: totalCollections, }, { name: "new + update + delete (system collections delete should be ignored)", data: `[ { "id": "wsmn24bux7wo113", "name": "demo", "fields": [ { "id": "_2hlxbmp", "name": "title", "type": "text", "system": false, "required": true, "min": 3, "max": null, "pattern": "" } ], "indexes": [] }, { "name": "import1", "fields": [ { "name": "active", "type": "bool" } ] } ]`, deleteMissing: true, expectError: false, expectCollectionsCount: totalSystemCollections + 2, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { testApp, _ := tests.NewTestApp() defer testApp.Cleanup() err := testApp.ImportCollectionsByMarshaledJSON([]byte(s.data), s.deleteMissing) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } // check collections count collections := []*core.Collection{} if err := testApp.CollectionQuery().All(&collections); err != nil { t.Fatal(err) } if len(collections) != s.expectCollectionsCount { t.Fatalf("Expected %d collections, got %d", s.expectCollectionsCount, len(collections)) } if s.afterTestFunc != nil { s.afterTestFunc(testApp, collections) } }) } } func TestImportCollectionsUpdateRules(t *testing.T) { t.Parallel() scenarios := []struct { name string data map[string]any deleteMissing bool }{ { "extend existing by name (without deleteMissing)", map[string]any{"name": "clients", "authToken": map[string]any{"duration": 100}, "fields": []map[string]any{{"name": "test", "type": "text"}}}, false, }, { "extend existing by id (without deleteMissing)", map[string]any{"id": "v851q4r790rhknl", "authToken": map[string]any{"duration": 100}, "fields": []map[string]any{{"name": "test", "type": "text"}}}, false, }, { "extend with delete missing", map[string]any{ "id": "v851q4r790rhknl", "authToken": map[string]any{"duration": 100}, "fields": []map[string]any{{"name": "test", "type": "text"}}, "passwordAuth": map[string]any{"identityFields": []string{"email"}}, "indexes": []string{ // min required system fields indexes "CREATE UNIQUE INDEX `_v851q4r790rhknl_email_idx` ON `clients` (email) WHERE email != ''", "CREATE UNIQUE INDEX `_v851q4r790rhknl_tokenKey_idx` ON `clients` (tokenKey)", }, }, true, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { testApp, _ := tests.NewTestApp() defer testApp.Cleanup() beforeCollection, err := testApp.FindCollectionByNameOrId("clients") if err != nil { t.Fatal(err) } err = testApp.ImportCollections([]map[string]any{s.data}, s.deleteMissing) if err != nil { t.Fatal(err) } afterCollection, err := testApp.FindCollectionByNameOrId("clients") if err != nil { t.Fatal(err) } if afterCollection.AuthToken.Duration != 100 { t.Fatalf("Expected AuthToken duration to be %d, got %d", 100, afterCollection.AuthToken.Duration) } if beforeCollection.AuthToken.Secret != afterCollection.AuthToken.Secret { t.Fatalf("Expected AuthToken secrets to remain the same, got\n%q\nVS\n%q", beforeCollection.AuthToken.Secret, afterCollection.AuthToken.Secret) } if beforeCollection.Name != afterCollection.Name { t.Fatalf("Expected Name to remain the same, got\n%q\nVS\n%q", beforeCollection.Name, afterCollection.Name) } if beforeCollection.Id != afterCollection.Id { t.Fatalf("Expected Id to remain the same, got\n%q\nVS\n%q", beforeCollection.Id, afterCollection.Id) } if !s.deleteMissing { totalExpectedFields := len(beforeCollection.Fields) + 1 if v := len(afterCollection.Fields); v != totalExpectedFields { t.Fatalf("Expected %d total fields, got %d", totalExpectedFields, v) } if afterCollection.Fields.GetByName("test") == nil { t.Fatalf("Missing new field %q", "test") } // ensure that the old fields still exist oldFields := beforeCollection.Fields.FieldNames() for _, name := range oldFields { if afterCollection.Fields.GetByName(name) == nil { t.Fatalf("Missing expected old field %q", name) } } } else { totalExpectedFields := 1 for _, f := range beforeCollection.Fields { if f.GetSystem() { totalExpectedFields++ } } if v := len(afterCollection.Fields); v != totalExpectedFields { t.Fatalf("Expected %d total fields, got %d", totalExpectedFields, v) } if afterCollection.Fields.GetByName("test") == nil { t.Fatalf("Missing new field %q", "test") } // ensure that the old system fields still exist for _, f := range beforeCollection.Fields { if f.GetSystem() && afterCollection.Fields.GetByName(f.GetName()) == nil { t.Fatalf("Missing expected old field %q", f.GetName()) } } } }) } } func TestImportCollectionsCreateRules(t *testing.T) { t.Parallel() testApp, _ := tests.NewTestApp() defer testApp.Cleanup() err := testApp.ImportCollections([]map[string]any{ {"name": "new_test", "type": "auth", "authToken": map[string]any{"duration": 123}, "fields": []map[string]any{{"name": "test", "type": "text"}}}, }, false) if err != nil { t.Fatal(err) } collection, err := testApp.FindCollectionByNameOrId("new_test") if err != nil { t.Fatal(err) } raw, err := json.Marshal(collection) if err != nil { t.Fatal(err) } rawStr := string(raw) expectedParts := []string{ `"name":"new_test"`, `"fields":[`, `"name":"id"`, `"name":"email"`, `"name":"tokenKey"`, `"name":"password"`, `"name":"test"`, `"indexes":[`, `CREATE UNIQUE INDEX`, `"duration":123`, } for _, part := range expectedParts { if !strings.Contains(rawStr, part) { t.Errorf("Missing %q in\n%s", part, rawStr) } } } Q Ux;ښU_)/?'?=3OJ,' ZpqRJjnDJAYXjAAC3dQShkQxkMyApyx=iSG_XjUBر HHdo,lvU5yї5B(Btwfa^^/N'yQ їYGqv6fDǝN&Q`v-\]o2AGA%$"o1ȢD'iޕ̪SmzR)!"/p鍍x,B90h"OL4 R\gE|L*L4VaQβ. mc<1<N '5Ly Փ YMySyz˿[_Am u(wA,X;Nٯ}{7? kpMQh,й<~<Y8w*o ALp2F=(3qZ.zX`pK6z3K*dDf>sºƄ))9}OqlL&o].>q0 `4w'ޏ'>mѣGB<]?;/!g;OޱX}MACQ; H|dxr{2e5R`MO"(EH~e2E%eBh$44MROUY}-/ErEY%sg@$*ݒ⿗V!kSE iV+Ps*8 m6s_}1#1I\ɳ4.QzXm'p͒V$z0*Q\H2,(ρHe& E< L~!F~g:u6X ƕj030$AM0 jCv maHN @b҆v maHN[ 7W!Kඒ+`cp$&@IO "&Qe%FRyCs$ #~%`,rDTqH;q6w0 6,'2`g$a . lJD:F&O)5Mo&CAJ˗C2gAἰps)DQ >HRmzPZ-Uv"0~ *Ayd`HH=1AE!Jdbt u4sU޽2J! X)3-s\&y"6DUgX$b2-@_̋]HK)gt6(J<,YB Mޚ~b248*78WCvwR vDF=_Jch2gީja{R6͌򁛂RƓ&|TCJuF+6x> 6" 82UیFpO tm,œrd-BSߔ|+k[`Tb?I`|熁v Knx+Vb;ѕLJYցe@@eE'5hO_& IwNWݴm DK}25;2HFcqx*뼆oW4BgS2)h,pzrNh z+8ωO/QXX@{̂3wQ+]9\ */(.;E4.l ^ 9Np~Y:A$蜕,I 3TmшKh!b:"zm5Dh,D)ZH#Qr;p'o|_,!]_ك`@֥<ˎc^eu\:Idj"htLP/@X.CE Ԁ3`f"M]Smn/Mnɷ#[)=7Ax(l[+ѢҁN̿\/A"DgYtRFm 7ul`V0$*s禡p22Ldk KxCf끓X[A)^|Ɯ2MG9v:EfUDj8?C*ILkm,qUiY\UL1è7Py>/i9^rV E>/e$T ΋Po?^SA?vrQ7x+D+5+Dmf^eP"BrJ˃P(E0 `^FHRa4 6I93ЀɓXNt1Lw2^`*Ɋ.-# zRֽz2Z`sIS(ٍ TgIߙ6OSi61, u NFJg26)N&򈍓M2A]zq dtOZ:3Π60ǢmĘ愈Q/xhHL~Y8/Kwwvxi0ї>A6s>` 1;9 Q6dnSإ>s}–m܈b\^{)b1%/ ٶj,mc!.uE'HORdK݁Qn@i _> ԛ. SsN ^(uCx`hEVy= N1t?2tBdEmT1HjI) T_bh\pT?Pφ"n.6<;{k0`Xv&85PB[/?2Z.NCk`dyV7:k3%'%9,̏wHơ^7.WG"lǧCI)_jMj z[a-| VͱE}'_^їe9%"p*@vNqШ ^=k;~7n:WC}N^]/U(X,-򬎶j ,q! ivm܋*㽳s:kΥ /D(3R@ k~hy.Ig vv.PJ׋>EU^q#9;{ Jj5lN5Qqm@C]EnɠB4p$hS즊rL|>X$/K tG^M~vl#Ynvuci:UFm7TjAZ)xTA'Nm[cQ<m;2I5G iCޫm ={h @Z  JQ Ji=#͗$s}])a[h)ջuN?׺SlV+ջ+&SBˊp"-Rs1÷TG^F6K<$F-UH@c EvqU;-N3P/uND2_-Wd5Z2R9_F0fUe:f^,[vxS}LgV5apFX1e`WB~^#b{cd,.RưH҅V ?-&X 'y}gW'- CckQlcOf' PakEN(v!ˀNf*~4zd$6] hLm:67Gs1 G6@oqqdQ*l-'2pq{;N9$a8.q LLL|" 81~OD-BDzO\Omuqr<(@t{4ezKܵA7zd J]j \6/ n`)uL8%~)RdV-F3zRU?vE$|K 9p5BȻ,Ȯ޵ io#lL{ag. u7.yKHsEnQE1lM51EK̉% n{h+eT$*e~j5y LYlWrVC:1D.YtTkF̭#rI*3Rĥj}Ь~{O PJ~[6Y,1a.\t6e>-.rkU-TNrlƟ2 f7pɅx8::0<>Y𣪴 ua?cPW]9eA*6 Jm`ԏ(Vs}êbJ')8C4.d9eVfn>%&:eoThR,dcΖ U)ӕH}; azfqJ}/a"imchGĿ4Ri{5Gq$5:gW{C~z=yf>SX~ny5H 1h-ݐúLZO;bsYc4:碧V8uԒ^}dOie| Jm}?fRjCCuQ'\qGt h|NJ3ߋ{;:vm3㉣ 8HC"$Ua*( ,?9SL\rqtrerC ~Y0tٓ &RTYw8 ߋ] ]2-ͱdZ 0e,h_{*<7Pj>oS/&^#Xjz#^Cөռv 1qtC<4&<0< ӗ|SwRNpe&`$+P9:0w|XŌ,lmQƓUxV6((!@&C-B&TC5 B for i := rangeB{PCDD^3(10vAbex3 JyU)IJ\J%Iz0z0vRbq~I~~N~F~~6.8`͢ZLU8K8C R&{(M^#XD36w 1M>&ş[ek09=[~RR8JǜĤ CԴҜdbGNAxqc NÝ6oJQlN Hxks6+LJey'y<:ዝǡIbM* V3~')RrežQ|]pl. ɂ~oP"bG-,M" .R9Xv/ĎOv!nZ6`"<*(ݨ/R~xH 7'P'*Y0cw_,1{ȪmZ aVF9O^{ݙUK*~OݳP 8aw`@#Jwwь]iFC{;l`I}%+uf-X"z۰eIݒHFo7;69b>w7 zO*[@ h[ۑxNҘY$>SDiX9JIc c_|W(^L;zl7"i|2˫#4K7L!MQ'>i %{'o{y.Dd%gs^0D=T~À @i=`r|],Fݲή ?8`0*9vJ 9]RI80% Ӵd k0t c*Q7x>"Ξid < 5d;=F^ְQJb F 9X1g!%V避/j(֞3WS~@iڥ(iO͸y!i&X_YNfOJ6ͳKbu3>jWS1ڌѼ~=;(h0ƣ"YDV,&s.1 Ye3)rn5ߢ"UuL#tHT`gg2"zNjS5|;m8+Pezk3i7 Εvb\4 i(5қ. ԉPm$MNCdZ7TkhmH{'PzS; 5NWcS!E21x`B ŏ([ &^7LHz@?/tOy|~U߉e j' gK!$dޥ❐0:ֱGѰ @*uwC;9 {+:2f_?PǓN Ř/B&ӅgHU64;v,jp~:Uh0L*,HGd:A%"J/9m0yfR]EpX\RV1RU,4W"b6HP+Si0KVHpl#ᙘARi& ^kORJmȏ?jk>>h Z/SQףj7Yyǯ*3@t ysQ]Lψ P/2]ڀ҇BU S>څzoHc 2%ɩBsGPsPq{pfJPT+p([eL1P} ĆjrbPtۍ~ۿ7ůei )цUQQ(PI * flMƠzɵƼ0z_#5~=[2j[5&/SS0RU\:Z}^VWH):9`z'`V %w -2\lvd)֮П"%GSFcN6e dru-=VPKK QLkBr-0 籮fTdQ ĊAHWHHm^ٿj"e r69.8J;R`Н|+%,D < .IW~= G-Z/AB֨,`i|c΋a_r-5fdF=`8.?ϳM9:M4[*X̾Duoֿ~BdnOmv:M~5ՂH7⪃h7~GJ1 T˱^]EK,*Jkm'Z{:dwU) UW=.M.vP!pA4x`<m<#యo %CGu*MӨT hR I;4p%GA,͝fWϭJڰ :h 21!'xOyC7X'fu~Tk[bܺju-r4Em_u>~7kJ'CMoi=Yw(FJmoAuXe: L )S!Ŝ2+W*XrTy7 764C".Pb ;DBS;/I}Gr-d1m=v ғ_ [ |e+zd) /Cv7!ԝhsmLհ6eep. rU}|7W V9%GݨZLc@6hioWQ"0|]JQexPWU9a8+fth&[P@R ΊAp@*Qr%o>3tbOrU9s4 tIsȊ5g]0K؞uPuqD 'O~D`8" Drƛ]<>3gSAܐӘp wM#}6޴zMCh-Ǟ^h-__bUJ^/#9v]jո\鄯b`%fDеo&/y2#ŠI΢(*%!ȓܙѽ?J)\E)TާRݍ_S&iWv'Ϟ5 dj \ܻX]?/c 3Hidq|Ԗt/t:>, yÏj~[,.b:HwqU^ӣ>Xj3ھlOah^9?3MeZγhOHb^_ݾm 6dn7(7Bök(E 3Umg1(\!0tԊ=⧫]pF7z6/֐lxKJzhnSr8"Z!^}[ aCK_qqqSkAt Iwx_tDWG7Qv\"_h޶/!i{qלZMT,|.ނZh5mҜ>X:sz!Htr2ZuHPc2 ,?w=A?<[8w?FAhA8R3uUxxq␌ļLTbҒ %.N̒$\},r2Kp,ĨlveD&[=v-2(VxMkAƹKP"Ec3U,)SbNM;}w;f+YYha`_E?7A7}ᣃuv[,{/y/1 E&NMP-lGZ8Y" ,B.Ba*5n  TZv3ڄadUڀ2Pl3'Bm $`=Fj; i(V  ܚRT%"H=0a23/uk`n[:r!*lJ yyIͦ;!dm)G^մhLNs#,z'H&" 8REgl\1 Ģr!Q;U?[:lݕxysI(X/ I h¿Zy?z￟껝+]g3s?ӽt?[mEsm}/֗.[?^; x][s۶~JtNv)N6đqNNON!atȟbTp a.$03^?Iz `.i=:' YC%9ABLb-9Q]: '@rt8SH;fDfiNE)&4BCWI#t?^x- ˻v [۩42 힢~xN[>ŵR_S?yE p _SovD(T[y+ [nV;.NG Q |2FnJ-J6`K8pΝxt"iZ3Eq|_f#q& {Ѩ/t 4>M|5CޝBs._)ARi4?u4]Xu0 r{Ќ9*f:Yp^ ע\ԹL[y\qelt(Y-rIb36I6mWU,9$%;MǾNgvx՗v_NTwKfV\8O?#BSLn$^jOA LAOa@;iΟO!{nQ)wBf+K+YwzNF[a6 oڊ9!/$RBW`5/qx*Y|gl .+V7FUV;?my )+8  PƳE**.087^I WtC4 }zӾwmr%=!'IY‘mKL΄iU]`!Ljr Yj&ʅ4q]SFL#BGQ7E]nʃNE׌R`b]Pul$Yh `F Ff{{ KOpu^QŽ4  Nޭ"SOds (k w3`r|ga?ILP1Y/3Nilv[gˡm*[œh  u$~ \EIf93oMk R1_a<؃/sqq8/g}\v 6eG|X̛)\17qȶYO>O~Pz'(ȫ\ ф2?A4GɂHKN tVF:ǻ@" SgZrJK+s/GMbp*WR*E Di8Fo>4B)EZܷY`2AZ@+VY jł#Rad\yV'R]Vb#" 6T',_y_gMU #u 6wD윯'%H48 :@818*rtc# ge<%)aot7n9{fNi iIz:f&؊rk8%_'55NO+.qd+p*iA.kI)Q)0ĴfKMztͰje`d~paݱ j)jK6R*M+v aWGݟбY2SSq Yr1T}l'l3p7_GA~?ϣ]u,Ey47ͲǓyKEv!m #$OHć `TȌ׎RTAk- ;<BZ`Xa) sz5`SBaGՃT(] TV%9gώza/w].4n> %U`Hwzο(i.Z[Ş=jhx?LόļLTT%.N̒$\}b &〱7%-Ix{}nC*fN:BnTnJ.HGei0@-,/?c!.u1 s[hh4F Hl%t@ ,T".b@R9JdX* S*z>F i9nG&Le]X&tMz۳]MU G]pvJ'*xIzVkӊlć/u5Wv1F%t#.^$7Wxv윯Uwv푸F\4N~ToU*G׋ 9 x}RjA%v16pQ.Bj "էdܽ Yg& ABP/|?|_p6ƴma=9ӛ~䴚'LڇSZRރgP`w}?!2b_-7l3cq^oڝƫvwZ(̊h%M_*~ǿ瓁ߎo޻:%ͽ.1D$(1Bʐ(4ʍvcU Ig@e^Wr-cz-8rDB10m2On{, -(x+-M(52v! ޫu9 n1[.B|\ڹk]ugLZS(Xp!Tp G\hbdlƙa $ ŀ @P77xEJQEI"k-x+MBL$lB*?F?V6ϛ!ڨ/)oCR`]-԰f"e3 l`A=><9gH,kl6Y dQ'>)/JP=ʟJBC4G|pG ݷjXVPͿ_e1L/wW?Rxu 0DW =xyn5wg1[wWKDz) {K!|\,>DM:Z| 绺c}Je)&zuCt0 a\qYUEJ6:HDR/ȶbUx]wFLmsB%4-əd?Ȳf|%;y 1HuUU_$(Q>2Kl jq>Q$ϓ,s'=&jiE0O?&ި?W6d4解n ^|??stߧa7:y00Βs~#`5)yC <,ht  V9{j=OζFAѰ4{+N+ﾌ'1z0Lm])}Հy<",/CS- y +Ww@9߻y `)pq$}^w0caSQR0ml8;>i'rвCO%Rz~n{;|/ue'1%EngA{ƵؒW6bh\QwhgCY$l6AQG9\)^ِ: ^ps#\t1>űZ+a|xe D|hnT>,Ew1&mȂiHYĚxGhnx=L+n"ۡ%do!lԝ tZ=/QhuML2d{JՖ@^Ëq2ZlQ2S{T ֒,;mUݎ쪝:LI<9FjF!\!lay#iA?#u+껒g<,m2-qcwr|p43Z;*ek)Q`^t%Jiz-$Nn⧲k 1TA m| ܞ':$gT ֭.tDdᙊ1@j R6ikAָ0%Xѵʌ 63~`(ň:;a.T9[f Y.$I3$p,. rL9 ʧ4o&ۅlYjd}/a2Fjgz|{a̵~2J IC3&HĎL+>O!Yx|!~;''5s U?3y%jo$>Esy> yEdo^Ifx{}͝d]8n5@;ؾָfݜxq2duH-8dk(,{6K0̼.oZ᷹-+<BaT >uKNM]dá E,8`JX11 ߯=ZC zpaֻ/'ӴL2~ǔ7RRߺ|:m ӨADƝ~Ӿ{ =/5Z$Krqg^w݌K / }ZZ#Fk~t+:(uFZn#ژ#;B oTv4]ؑ}Ŏ9g7 VkycYb\!*~.~9+~.m:YI SbI(_!Xm Ii SMŏs'n+e> HB|KD;r 6FHLNr.sfWE>hȂ[:xV$NA>E%`v]ƙW1)%{QM}[R-a䥾=JUS-ݦTSIּoI{%׼EW"?X4H=R~gpFD1l 1JR` NSv%'м{iHpYTf)j(4cR"F#A4cK,Y^tB62OH)QpG@U)G+4Lcj~&̓ǰɨ{C-Aɩ9d2Β'x".Z_]OWzӉB΂v10OpE4ù_+ _AULF.i uQxGNְwuq#lcr5$ Ɠi L %tʰj8xsLRF2 G[7'(TATs"FF:&?w}Z Z'GsXL $>sdGWDNzu+BV>nQ8URum,Ac>q㫤%$B*"3teLSPG0j9H&yq q^_`#hMJ,z8SVetٵ:/Фa$ Gw{~OQ?ymo:w&-I;ݙާI6Qz[8n=ڢ] oGWGC٘pG2iX:@XK"Be 5{h 54{b7Pf3͞3PM34ֈBlGRJݜL eBUi1U%@ے{?~xɧzccPX* @&t،qdhǡWz3Z镟b,R2}>>8e#Dt= 6Zmtu!,8E5`(7tۯaȍb7,&1s7#hV VpI&V2uO? :,PVՌ}M(&,D8 .FWD~]eXѽĭ_2 t(±(-TȞ:1Ѷ>;qtC}ŠaH%a9`f=32j:V[QszVnn֌'|Q8yxAt4( tbQQځz\P$@Qජ~u6+m ~<Ⱥ?;xmL4zex&)j1ڃ@ct `N!."ʾBib$!az*fib)>h($CYk0|X8=CČ19&^+ҌQz( "C>qrᙑyʉĞ^\(PZzHWmՏA:l~-l$-޿`!x5smt}4O&]3/}O3{ "ϔ!8ߺ(9aOPQř$@IUh *~-@iq4S V> Sx|FE4PN'TI}qkuVkT2-NDIf u "k NX _",1!4<H,cLxuk<b0^:o9Psgg j*ZxB@(q/pJuLJpi.<eфf $G\~WA GCasUIKaGMo<`wnCrJK9zMH!ζVVv6hqɪ ={Kj;airGI;&$jp6k)re*o>3r8 D{=U)l0}${׈C1E e ﲯ&x2A1WB-;nREV%+&dN (@M\Jr /{PoSJ`e]΀;(n+D~oW'NDƋIFDgqѓ0(zH":5B5һn@oյ#? h:SMc)$($\tDunYŊ|@@ͽm`u$=Cbv?,9ɉ8%AIeVH]5BCFhc E7We;jm!+0i L"Y;*x ךL$_ɑ1NA֎0YטB&?c߷y2S3ǂ_aGizesİiatqdD.#KaP:``hy)} U뻖l5+.oa2s%]Ƭ7dxNe@K}KCv3wԪi`rdvu_:va?}=vA^gPN , dwKgYf[+~]^%۾J]j#}d]+L>C\;^n}w]wC9԰o}C&uZTn;hL@Oq[ 7cEf8goz oew/KGŖ }*/oe֔wķ(zOblv!8mD2E!;eILW5U4}xl\W7>"I6o<2} ;GrmEim;"R^mKC('msܾ'Rvf?09Z@9(niܺ: 4մq 2 b\@hAvZ+p-ލ\^VޮI!W)_DL=DB| "ٜIJf E+JQ,5]3C]H%/N̛J1A JH=;6ߛ#'(7I^g qs<ݤAyқR:b2~Nq}nw=gU̪mWsBעhr E(fЅWE47J蛤VѕyVl={qڤ9鷙LԠ vjFH1VhӔKM98;. YBrm@]L^ߊ}C^Co\\l={q&[<e@1[ mj9`qqi\_4ַb )BB <:mI1>𰉚ծfP$ <?I p'$^F’+>6呿Ma$h{@j"pt`,8UUJ E*sr$s@VQ2uN!JNM^zs[j8Y4D]{v+gٰQX]/"qy2 "Y2]W\"=MX2ݾ"R$D^F}sNT]#”x(Z TLɒ9_, FUa@W*Ʀkk ӆLlzPU@A\L-dCu  *3 lop￣Pe0 DnϦ[xTTo,=L8v[L(Ve &#K3tUWHb WNQJfc#d[b.ÔkgCu+ 歬zP93 Z%r9-(B 7])r}X*_kGA) ~MyC?c͚j0%՞ZakV}#!;>.BpZhp(PU1!_ܗ3Y6ؙlߔ^a .Avnź7Y_|'w>jIs Q\CnzE+b7fв%;}Bޅ̺3YݸBA^6 -AL .ۼV굾 ,K68_qGb+J2_BSƃ" O<3j3C@ 4f?%DPnumiT PBk UGQq26mr{hxP,9wwr1B*Lut_|9sU jp3Yc;ΰCz* "@0ψ^Q<夃ȇS+a^s = Yo6䘚9BR*9%/0 لM"{,ckQJ9Lf C9<'軐uW*WTG5T׍ H*1`p# 8t1T\*F`\6Y([IIf 2:8t*qDkf ,酙,Q+/,Jݵm}k_Kd _8:vz·Sp"y"ɝ#ҏΨư|Ƽ LB(rW# {b<'m0AS ){d`.Ps(_2ZjieJT]޴Ilq1b9HTt!Ыع$QC[f"\ DHX}Ԏ7vxb_ 4!0~ȉiZPk:I̚^p4du#vcీ^ku{"GK<"ulfk]Cщ猀:WK˅l~ιdƝ*vB'=>cPzb[@819޽)לP-~@/+Ny+Uh !g+]6cxGS|2^CC drQxb Rl>z(TDt^Jleo<:tMrwTrؾ@mooW/aG  Ɨ&${%us(Yn>p-//Ɲ+u&8}| =zO[m~ ~UaHctsTo0Ntm6m[{탴@coEõ1A5i}jn7XwVLZsMN 5(sdCR=Vc z43QNOpÎxkv|<[hl̄.Vb[~ -NW:М#1,MoXMPKjNi3e'elpmU@xE>.78Bnjt03Ğ.pvA`( -?;N"!M( (QҦ~ƶu\ x[yi MJyU)IJ\J%Iz0$4aTb'33*ꡪ)ƥ%cd~71I3M4@qL&fB5暼E,j69[`ߘ"D56DZdF vGDŠNZpn)E m7<ق4lߎk*X>M}ڜ"Q6jC6iȏ h:&6o1ci/593gr^6yK'J1+x[~) '}6f5P.(sVkDnAu'W nɵodqMY73vdQ h$xu?O0ܧ8e@6j RWKjcK,ޝ\oP#Ӵ< H6E [L+7Minq6~gMߤ +r;n;ך8X|K,?XPi,u7t2&i)[/0 $#} 䆑[:6SS|`5 MHBsDr..+8Y<_QT2dP]+V>qT\!6QzCz{rIekɾx͖]k0_q&.iQz3FPVԖ5}$-%}n^ta4 $(z Xn.e g3\W:\J۫ CrT/"˚hߓmQݛ 3#![]ˀyñ꼀loIris2 t0?|pQ!LZ 4y#& 'k x*twy㭥92ߔxbEj`M@;wDw'JJSYk295C,sap1\": P%&UTQǽh4 {*:jړDU]L~c'{9 ixZmoܸFΡ\ qm.ݤbqJZdz/ޙ!)Qwm+_p^yRók~)XVb2USœh2BG#/k:rVtm떆M #'[Y]7uv- w·OSץ/$6܀#].K !śxhWkagJ,L npT:):7 {ɺ8a/aO9M?O չ(t{'h+\fe >.V\ v)obfՈX')LG 'E0i&5S)fXp|ǫrFޔeIx`x;sMYt+2ɵ*W o3rG{ij.alr:e :$! ػ۸ CC C~mw%!N6I&{`P1J؟k`&}OW1F̉#&"2-x&1t]"QE ph߮⨭2goΏ$+/mZ=pγCdI:K2ns8(ko\! ڌTtmDlŤ25.:VcoO@ؑלH{m vo $w˔ ; 5߮>J'Og!@KF83PZHeT_OP^@`э$H| wMf2? Ux!qF_E2c^)+ $z)~c OH&~*WOj5~Dհ`[B3WfPPK=g`?USA~Qw(0@0 YB|Nݠb5%W~Wh% C"uNq~_ n+szۗWuWl!py6e4e B`+m!rh1F/%)/ R//[^v $0W2-)]z>8 }*1rSE"o!*j-W0%gm$y r@Dh~s9Q[=Fe X ^4b܇F$/jIՑjҰ2\Ɲ!QNy<}=C,IL"ghA.YRA =˔X%/mz$u@xИl?BmP;T U.8KQ/* g`Mܐ,zl 2* T/FีП R !E#k[vLJoe rvu/I veaՃBLkxCZҤ)k*XJ$wOڴ]%y Uf6ArH+̂qih>TGxPbL%>1LSmE7}#9 XG =aϏKD7K LWLY}mځi]#R`ԋjm- YBlf]k{<( Nj k燉8Ne>zCXox1P2CuG_ׯ]h_eA55@NIיRƛ-V$$#T܉3OaFe_ 9]AtVOc0Q|ؒp%muQam.$(daٖܿ+QQHOG)qv^;`R 3c?t7dauD] q1b7kunM)׉zB^=&Im\25<ЯLW;~*Ex=Mp}1C)qa)|lM5ȩgg'mvLTvR~CU%Vկ#9X?]-qNǞsz ee;}Z%~o?G]M@ /R( !D z2Ԟ#Xƫ׆:N -ޑڢJ7P5Hl8]Y18r֡Ц XS#_B%6:t Xúi0. +Yo~֗IG1H&[1gN Wl#qa%mBh![&ё& -[XXKR(YלlA7@b[$^G [qTp9RBGZ2@[@Ģyl<.qLd覍65!ʇNj&o3_fOp:t }$xUWpfĝKBR5ТW#"D@`W4`Ho:[8=Xx,}p8PVVqxqu8eѷ1q@>/C|E1r;_bPv1]g'\D(.]"zJ8 J a2F/Y[MhJE{+[ $8+=qЃ2qlm$=ޑKlX3@al7[ ze Q,%?\vݘ.7`:zs~-s=y"z"a:K?(&GJl}O:8#}Ώ]皽;;uzk-U ~%}LO6#ăH YS6KrW>]?$s/(h)>3_1(ya*ZOM1(۠ΝBx9^ }ujBRFb^U~b~JRRzfIFi^r~>Lfbsԍw)s7OVYlշxZnܸy Fw*۹ @Hb{6m835D<}>I9$J#ǻc,hH\xnfK>,Q87BH0,ʍbxL\}99 +'2:)m O\#xJ3+/Dg_ '2O_d٦'"4eFB@T+`{۽ cp Dȁf]wSRLO`< 3Q; S֪+^Bkv#O'RT5I){4kRE!%>݌ih2k&5K!RIw>~"}ds_D'njKtYqvU.⏰d$LG(j6@LM// ̯x&5YTCK# A "iR9ev)ª˵dh. -׎%0UX>gb0n"e=!JX}9_UxYO+a^qTXGJOТ!FvЕ3B271#^7c^Q}221X E}Q= KxU4i@Mϩ@2ULw ;fyAvRV8\F8HEvHѝu MolTZjסBߩQr=F-8o)r%ص 3OybVC?Z K %.ƺxKNcIH>6a|{p嗧Kux&'dMP:uS^YF#Js>vBWw2v֋yҦ}gcG[3tv T.Fu[r[IT@3*qvytKtZ{*YXMR#)T:z %:܃u|2hQu|aZR |B|0JqӅvu{0“u>;Po#(sNf8'mwb?oް43sK&abO(HN֛PHi'SMQ2ڒRʴqn]FJrñMudl=续&<ԞjyR7h>ס[8e:rњȡt4[UdJ3 o ̬Akƭo^8 c˙eӜA)58`CeH%K Yw}) d*jB!i݆yPůD 8׵^(i!sNT%1eљA+.Ug Ykj5ϔMhir`Lz'Z?W0Qs{`y7mGMVjU\4j:pT2F ;iV4dTMo:ߴx v*ÎؾFj)zKVje: C%b1P$zUy:PJa;Ԋ^,,֋ 6j_&}pG5%!8un:+~M^wh`<K7] ժm]9u`,=:U{'^!sV5~z -~^'6- 9=[ hlZtdVL$OMz5#z`Dg#wm~`9ؕ$Ol}aGk;]\cAiCBnRcꅾ ᥶u^cℶ"I*?E=A&&Rʜg[OEz ע؍G[6v+]w6- d:l!꠼ [l@o͵ <]8U*aޡÈJHJC&'>dB,Ãgo%Z`9ʺZ^T2e|>حK͠]m]&V~M `e^OO `wh| >Ź ^@0w'wu+;,m]qs{OUj g aˌتga܌%࿼xks6+ݹ"Sfqg[n4ulWR4"A5E)YMo/e+NzsDX, ,Ko hhL8V'\yJ}i[+Gͣ4!(3OG7awX2oY>ݓElAZ),fE\G<p"MGGdI,YƂ`X4csFuJYL3Yq9MB8R 4ې4@NrN9Mn`)}'{qqCl IxC'l])8`Sg 6;xH|F4uTRh^9# \²,ȇv+cy%ިH$ ArcV A(>>&IZ :N^]N!b%u;X\/LLh?8o'fݏt2g8q.fq:s7^'ఏ _Lg`doY >$eɏlILJ_Q>#Y>fIϟGD#/6,`,E!-I攃$QtYUVunBso}M>`k9+f_QM3 "ABd X%t9ĆG VMl;\ v{ 'Ꝿt\Ozsr];ʾڀI{Hb$C .W; ɢD@Z?,8x%KДGێʂj.$S?i O1=TIFKFz+hic$iq-]y`ΉhUsZh$-X8ӈ/c|ǎ[둭P!OJu6,w>uݍ0u@ dM+s#++bqDP5.3bI.)f@ \b1Cc-q-E(ND?]zHC#;UPzs5O&kE1tk:ɖ9hpT%ˌ6UEdT"Y@b#\&aKqjO:h0L*wnޝme\C0 qk 1,dB'|'_Q! 1A .&XV45q4(;j }h2˾U8˥& -A*VG*Lj ]8vz.Om<]I!}OB80M5!; zٛ#N˿eZ.lN7"˵j=[n&VxnN,]u)8(1AUWKÓUT+jk^FtF rVI`s̰݁x3Wӵ֋ΫI^8_#σٝ'j|VUʯjTJLD2iI{э4Xowg)Uk3SZ'@ojpAN.=;l`rd7g OkqO0q*͒Q08xB!֨W` 4bpqj~rmnZNB_~u /-cKyg&S"U{ "P0B \urXwD,/(x sd;"0a5deYnb*4HB-oȵQe\eZjBg`jyq-3QʺBoX pyb&8|樽 lS?Gl J$IFH6+k.]zXmztC!zELb(go{F5ʐQe?tf gqx)+3, RBx"2^-SnNEǛhO&wt7:=WL_~VM[4&G &-iow#5ŏÈi s:R/ gdp<L#zS$G'E@K;bϮ>uLf%A9SOKR@= 2)6ImUE]($-1Ҝ̧ 6gASK`= q{MU>-fckzt @9%d t0I ^, nc|d<>qGC(L|x~fދr\F[5`QW^ 枃}uK\ca0VZzF0'$rK| aXJ:QWqLVBйM*iwRЅq*zNR p|( $Q3$.#UvJ}8*'Q0FK7fnj=gWʮu=š}eYI*3nb)O:Ѩ,e73G":5$?\F@Y SPVI#Bڼtr} L_ KG.GonRl[[J3it)}pzg'1t`ǫ&4ŗg~^hJдJփfI\Ȫdyrxn$UNM֓*BYLFy3d8 "qktDLlޅt F"/b{lJqRPUaz#g, SЃ :*Nf+i)(NG }Yyu Y? cuqKrѰ>0ڔU5sL.`fO.loЁOv.fLe'28қOR Zy|4ֱD!}y{wV. 'xAEVD2j{ML zB/9vHn\lnH,J(k-ԗJUc{=Yj{[4x֎э6X%<|;Ei)_ָLfE{Ɂj|y%y\\%'wˊnVV`JZxoFF;e7_+ VO3xYS9lکb3rٜS@xܲ!w@wE([`Yu3;sd7t#C0Ca_8j3$dT#B..S_fF/;ΊynA:ǁЉ)q cvKHC5lTG!Gqs5Ҹ3$+O9Ɲ41\k=__Eia& y> 3E*9KZ߈蟂'\9]Cnܭj3ģ+(4_.#U'tG %2Y:mˀcͻQy&a*S,~ƂNja^Q"$F)Ur`-Ub@d_ jsiD +RO Uf1tCN&XlK13KkY"!`vsLbmKz"rqm U=}[fmvkOV uAM5aE+;DӏP*WPD/4B*/ed[ÈbhjZէԭuAOv_-ֻ,x=ץTGz}+`r5ȩ]Nۀ47-ɿH1W.m$#48!xbxSou|T}x:J荹"1{QH$H,&:&hNklw t&t$BOLdf/4rO< u'c_9?TA.#&f2V"!m6C v5SNBO@ ;} f"7yPB?*)v#PZ15:!mghJ=c‹`I0 Hl5BcqD!sl p#|"P,H(uD?6S t1b |e挓"(%DpMjbC(w,ɫ)_\[T[AMY5"%{uKh9K:j̹JøT9BSԳI˸OѮF>' w_~0C; +"53v<- vVd + & CczsXC<9vB|oIJA$ Bށ1wFȏk[0 & Åm6`5EmMI+7K$NΫBYTOnX?t} YKF;5fe,5R"ê(c -TJsҤVh2FRW"*RߞLWgkoj:dldͥ9^yӑip74g%fe1sqo^,:v:V6u)7vx45uea N{vFׁ^>*'vͳV:;;=o]9Oy:+vudG;?֯zggxku/x;8^o8#SɳSSMd47Di~`4Beŭ^$HKV8y-U՜e0 w!v .hgGS@kT_N9fEzTÕ-ĭ^x~MDξV 픇Gq%h 1>;MAO*GT(q1i"!y?=;?d'a}T\dxgN>s[NU݌_(9O|aeO T]=Ψݗ/$Z% d 8^*ã8f>e@8tWkmع3jcc0F| K#J|*L?rcV gܑj79&_Es,kK:bf p [XĨ[:a+I2xksa5_)#1*?1S?%BS)=$4I/9?W&3VBNJ,N/I-.)ƥ R%$lJxac!ms9B1  x\s۸lMɜuz_|g&K^q$?Ś"߻x,Io. S>㷂 B&i^T, U>&~ʪs1nΜI̫$X6ƳhOo+_>?x4މꆗb?~|Dͼ(7SyZ *I&eERb8b@ 'ݝb@@!*~Q>&>3 Ͳ!˳#3F'sU!EVHnnݝdDd[Ay&Av̐CvyX#!)"L@ ecE|s SODneIJsÌNPQq@#fUFYEBp& rJ+O_@j*4 afY4ERAJ` ])v08ZOƧS|~Crؤ&AEK'df=`P|Q5p̬@41m߰:тhBx g^An (YDf m_;@_FԲ)|͙)+ )rgƃx0:Y:FH㒍|ª`_W bQ$l0gK/MIf(X,FI+^k"Cc) k.M.:*ereV \_N.NK2vr]iz<;/jbz!̒B4( ȾnqCU/kp,F|Vvf7K+[}P jPpVA_[&a('Nxk2;eYIYwHdgzۣ1nv7PV[p0~KY5nkG[<*y`Mlck8ûӼci-fI GQĈ4l$ 5~#lm2aAMgc]8wPrܶO2S(>LSKOa֊"ϊ~A#J9%ІP'A?dМ*!Ex4 A:FdV.*}W|FhZ=P 7zRT2,Mٌ^k)"v]::A+4wԚ2p^V{lFP'8%aՎ\N!YksJ,ϡBs󅪎 T~_IHsA.+OKy)s L&ކ8j?\Ozl~=9L㻁Z{Nqڦ&QzS^l™sP}Hн[ohiI['mhbUT\#s(;GRi%*T+DmʜD^uf@FDO{',`%`%LTo˃8PN ŷH&XmSNp=:Ͽf7Ĉ>+S.,u3Z ݚv>BqTNۣ$_K!P-{:#O(k{/_8iJC 7Bxr U@!^QzPUQT=^\TۡU1I'<1cs$*M(Q- [bE4M&ՆwBygguh;lh@kIt<El4?mz&R?yA-2vcD_\`-5UθW^$0-BiWYTǹ{ &5Nd3a%Ⱥ%Wո]e$MYnc1m=] zVbzn#޷ڑxfӷ媪W=]o+㡤 &HArL^ gx*Ftļbr MkDkT^Ʀ*>uF/p?m+Bp IV69]zg}8avpd$ZL^8 HTu /24N/uP[##\ DZʳ8|BUs7MUJU` b Q)lZY^`*01V}V3\l&_6[N+Q_%i|r?-]!MKG/NX;Վ;Y7m:>8EfRق1'Y.n <pVb6KTSTZ+J"ZW_a46UՍ֜=:ND B=t6s Z!oc ՉЙO [Ϋ ,]+y鋢˫V$Y^Ps a6ذbؾ 1^,LseqQ1f?ݣg`oT@nz/w-BY LX㣋Okh()cITo:WY-7B/>|ɧppW%b85Ki!xw}l +;daxҧÄH`yQ{FAMJ֦|7MoJE&H'A&pz:{A|s*|\w[Rr.FӨ) Vvcf[m2I"_/ժU ͒=7X0`zh{՞kfIu_Oy6GUظUWxW8^:Q5_®>-0[:;՛ ):{!ӢWpKw.eYB- vnrC4{͒F_-$2py wy f:I Wq`,]N7l ༂z gLȵFU3>Xy;OPdOlhC|Zɿ5=^䆷pSq,M@ñ9o+x{{|Mawtі8kQGÉ(wÚRBGKrzEYq9YbG0.lH8/{yEo&EV*ˑB'i_%N }tDu) ێs^{E}Ԯ"`ygLOu\Ԅ<-id85% *l%OQOI!mkMI մN,s@n#ܽ0nbc[6RQZRk-͛rz- lp6&ڰL ;bnMP&@74G*_o읁 o}p4:j8wSNc >`D+GB>knubkmEsg榓17Z!'-ڑRT,5ӧԹs2KXI&w5cg'nj6*e3l% Hc(z; x;q Ji : EE V ezzE%an9)e֓ߙjO.ޓͩ (_XZTə[\PWWWUP-V[ZT_ 2QAt|e6!̜͛MOI,1Fx5l JyU)IJ\J%Iz0;9췊pdyF9ǏQ\xΘO-(43/-vs) +>_x$a  H!%)$Ѽ x]ms۸, ԝ"WεIs|N\ڹδ&!cԁmM MhI&i9$H>`Ԕ{\0/RbE]9FJ3q ϝ.|>"9xdwyBX?b*xQĻz6P펓ca2 fZqzsP.pj'DȕbjV\'?p^ ]]>Vos.M "Ճf ׄb#{}_sdg,&:%tB|> eEn29M+>sPP->0b$\fgI,Pɘ%e]YO[Tb00ڗ 7x}nGߟ?:{dJ>1T_(A{d#j\g"0;ý;NUj*a:L(n/nDs9 v[lgXݞsۥZ@0bD ,cY&W"Ԭ( |'!$bEU7Sq^L ;N`,'Y%Y(mQ^ڌ֦F*y/_COyIwʳ<ȕj)W.S>}lYH%f s;fCtl5m^ޅ.ㅡM{L3 q$#)eE_7ZWl] *{3;QJ#7X YwQ`3;M]]R}UZ7gដG\xYX20ZLCB&i91%Γk$S#>`SxKM a_LsGmF6aBZVP\l_iX&^وQeO]P^)Ùz5|TV>LUV1KStb$o/iGulU)B6JQpULdNp@ҎHvAY Zp77"nÌ,@cvtoпāaH_e3ز5VHA^?&܃ḧ́"ebiPonr0pcwa0SZ8BRu^t+}S=/+o rȟ lW#JGsx!#hm[,\IcЩ'$OV{w9:i"n+ԢŃ;lf[S_ _Cf7_;;..1e%KقA 40wpqa;89đR ᾏv*w9V?7%3~6bS_Y;f5sF1*{¾<)Pq (@Omv^q!Ld('$B5:byAkoQY[>\g;?1ڽss m7xn&HZ]Ȕb嫍U:Y>Y0/jd==$6b16x4IHhL|egT {kT4X u%(bUK0+:5糇Q8j{-*9QpA. VmF fKrSK hє,;fR 4zfhe RK"{[o 51}Uh(J><)yGmxn%Wų]:R"}Lkq9Dj$%ݕP@zt*=66`^%D|>4`èB3TLЍjrH:ʮ7O\Giu&Sלxe4x_DPEDzk] O7JFv.8 2R֟F{AMݻlk]~㭎3?}^8^2+,{UVOO? |peqLezo=Qr"g|b4)Oy%X T򊳗s9„ HҺ7=49 \s?9[)?GoY,GcmQ HD㣔I *cVT);<IThܖϲYp.9T0O =ⴁͪiF$@#4.% kŸyjF@_&ʏGY6.qhZo QB"T1P( ][lAU@U^ "KFahjcyYɟbꨂ"[D@HU,<2 ji@tZUI_Q/\%0XҮ{4rr Ρ6)@U?/c?[R!ف&ܥݽc ΣtovHeá|<ՆGZtU\+A$V<0yB(PB? QԫـMPSL ꙑ&C23is§u܁^jfxΈ}CYݹgqf6ŒGr3❷t]Q^GiTFpvȚ9^0)XxN=rϲLLϟ) SxKߖ#ReG3ݣGA4)G$8bk>b%J8_ +a:ix5* uBz>ZxCv`lv5čVy)I}IeW.v̩}@FPLk'.L jحTb7PhY,,0 *)&"yw"nNזOk. <)WpBJ(j;N#^g7w:>.D5bzntEx[ihgrKTmbZ]deO]5}pgVs-{n<7:Loc?^ R&]E֍xvܭrK#6jv]M_V[. dɀeT9Kš<穔>ZoEr<>/du1RYaҐV4ĸvu:]po. {MZ/d`:/s9nw?_w!Q eD~cP-."H`Q͵{ށ65bEk [8*j`ܱ*o\.1zVZ{t*DmVTRB!ˆ]ʥl]~c7 $KcE65xf.Y &Tp`"Z}G2Ux,dzvDӀiI?ז0LzR_1BxOBOVot;v`i1V(@d Ask~+T׷5h׷*X*U(*~MkX4J0󬔪7ȩ2>^bW+wEV`'רpfMӒh9KC3Qb3UU de}^_W緵t|9ڲߕ4ɿ^N#{R[ٗv4ba$(aid2rswVp}5+b6L+ gl\XZu@iV&heuu; VQes᥄LwT\=%/rI^˺M=xy߸ ynnﴊ1J1h d8`oQ5%Gɓnl5<EϮX"&;f[ZB@7F)}ykdO䱟яA5gn昧fecCɟQT=lܔŹ7&5/y+عrGKe%( !0e"uڱud<Ȋж>35~/Q~#F88J#?И\Cvp{9ϭ-oty hU+kkWǮ/[[;iӌܱS`v!<7 fW} U.(Z~Ucuyt+  FxY]o6}~E^* Pdˀ4q7c]%1R)*HwIe[/QsϹķB lgBBR0~SeY%Թr8&e40[*#Ra= #}҄ 8$jr"t8Iz!, *LfPBAVc.2K!(92#7gfBSTgp` s`\R 1,F" ,-`0$ާG%_PY *΁CJ?XSF(aB$+ҍj+Oʩ ^Htźd2D 6>ت5GQئاpP5Ѫ$JZ){Enxkވ3b,-WVB_5Zs/d]{V硎 {zk! yAEfh >MDaF{EYՆq ~n >MDv5aj~%wC`t7Ea ~U>K*=˸z PZcc@| cepp.(Z{[  Ugf`ndz\\dӐ) ok Ѭ6>pz m(|5ʫmƃk[Sw FΒ<8;ůQ>AN?%|ms8[ӿ}H.7͹nf5Ϋnv*g\ "ooHϕSZ.RF@M4굾v39e nee[A~L//yh1{= Մ3a^|=>zq:5k j5kξ{tNBsvm6w^]Eb_{Х݂CXDVJu@"')`:U!/O[cn8'k^#K/9I>r2<^_]MG 42MEKrGǢRBP&bX"{qIA-\׸e,s#ȏDDK^0GSXü#@AU@M.{[+/D`.ZNx,tX^ib͑>)bƴd8Ͽ:/="ߜO}xۋ;{9/؊DW> $aOa_JnRg"ۀ)2[M0CV P2 y؂BfwH)YF޾)gzp#X8s鄦 i.\sP2Z,V ˤ9NCuk`NAMaG%b8p69Mʚ=l}f3e&ʕ6qn ԩ}ŕn'8s;jGP(x[ot7{Fb^U~b()E BxmSn@<-!Rek̘ $>/K#(iMUuUuQTJpb}ڙo䒤+%i;v٪2U^r[h3B1VI$Eۉc9ck YhZEZ4T BEZ."gB5a_ceGW5Zl zfɩT -Жv#xk8)+΢6Z ϙjAIp :Bߢ iD`=1coŭ†-k`襱AxAnߗKmK$qi}fW=QhqZ3,3nϘ?P“kB. 6vXx\i!U}PO9`Ē`b}pyۃ`EG2|Ylq7O/B&b1"ݧsPrdsQl5HzݨZv:Qz_è[+ێw˹)oqIjQCKTk.g˷5s2e w$̧o`}?VVXҀc<ΧR)ZC߽GSNXV =a%Jc4+JwM1x{xq={Fb^U~bD=/x//go:build !no_pg_driver package core import ( "fmt" "github.com/pocketbase/dbx" _ "github.com/jackc/pgx/v5/stdlib" // register "pgx" driver ) // PostgresDBConnect creates a new PostgreSQL database connection. // The dsn should be a PostgreSQL connection string like: // "postgres://user:pass@host:5432/dbname?sslmode=disable" func PostgresDBConnect(dsn string) (*dbx.DB, error) { db, err := dbx.Open("pgx", dsn) if err != nil { return nil, fmt.Errorf("failed to connect to PostgreSQL: %w", err) } // Connection pool settings db.DB().SetMaxOpenConns(50) db.DB().SetMaxIdleConns(10) // Verify connection if err := db.DB().Ping(); err != nil { db.Close() return nil, fmt.Errorf("failed to ping PostgreSQL: %w", err) } return db, nil } }2xu{Fb^U~bƀLIbgxL//go:build no_pg_driver package core import ( "errors" "github.com/pocketbase/dbx" ) // PostgresDBConnect is a stub when the pg driver is excluded via the no_pg_driver build tag. func PostgresDBConnect(_ string) (*dbx.DB, error) { return nil, errors.New("PostgreSQL support is not available (built with no_pg_driver tag)") } zKrYx;ti{Fb^U~bĠ_q^-.lRmQqljJJi)A$'<ԞY5 "ޛ qkDFB1DɒG1!Ŗ!HSNYۥKO2.?t4Y5sciNywхYc{ wx5 = l^xj@S BR$-ZhAERdn$&-٘j Fbk!a؏!W"TL-PȘS!8@'!gj|/oAj¥UVp2sxj˛e-a8b;!!h:؛M#يzE8uJ >S壒0@A>pM.Zo)֏#{Ym= @o]1ԏY,:,FUޖC:]:ԡqFgʮBe-Xn98Q~BrMEں;D۟;ڌ6Z`1AЗ 61]\Bʿ,iNBwx{}{)GFb^U~bFLY^xTQO0~Q @MhRa4$62i7V;($\|w.ϖ|seeELIk#3OYV8kVcsbE=F\E=M3U*-z|r񺰠р/ BBiu5.b w|:=>Ǚn2\cvM*&i^.'3XAL E=QeŹ]!0C{Wj\Zq҇AL[A; *Tp-0[z_#j Po4ο Qo#I|ڼU3bY VVOUK6Z܃KL8@cSMԣio3@3J'qQ`+׹^:Uz{s']] 2du$)ch" 2(KZf\#>j]G(V˼@*l@*̠35g IkuC@(ܢǂ 1ݎ?љ_h/vWu"ΓzӶAwDINKK ?Pٰݟq7Q m|Sabe6x5PANAjyvkP a֛!d"Is)P{4*Ͷ4ӍZآv7fOc}qíHVیӀ%?kkt:y4Be,=:^ªCܤL.h͏:n?n3gWݶN_p%e}"G1pϣn[c%%zɿGܔDz5xckYs`$Nd*;T2q5:/b3uR>,L)!V(]k_iܺ4}QRz9_3 Ф?HX1k夾;cK :ڨfɑr+5qYtr"2_a"̇kK>3nBo,s8w,"LĨN1^m-oxx;kBƂB3BxUN0ƕ v`@ )US 0Aο2ŭ"$8W@B]#32 l<õ),w^QFja-D2-r 1)=R)V](T2pqN[9'|ځ]j_ܳ>FWLKt]$ñ}BHB(#j0e#C]bM^k}cD=-%fύƙ3iXgIJ-gv Q[3iXwcU`V\-v:0 eeFoKz/A!i j!xVo6lWͤsگ2N-XhD$3Qn@Ŗt<{9ٌC4oE+m!lY6aim ;/&Xes&QL'UЎcITZdҀ3,!g)K+`a{mO C^G{CcXi"p`ne'{"gALɸКK{5_~(^pp58=~z&ܜTul [IttofUDph`£J +2J {.Tݩ%.bKs;%cw09KI+b0 g&BV-WZ̄iK*1]#oد0Ve!m\[ _Ay#]X$vkwnQE8"Q安R;#R{ΧH'iV}rLS;^k >(L\> l1|o09Lv!7r~Sox]մ^U$^GTcNnxu RTNxݢ+a9$E5IDaaoDJL9BK̓`,ku!`I"P(tò@Ry,[*`˜}JIAL `8=`qvc_Kk55$+EMy:ĕPm[K^3ae31wpJfFSz;~9!Q*VS1VH+i{󢄺[x7Buθ yczO@@A' nQ˵ѓg ws6X.ł3y1myg;q8TA?c͸ћs$ԕjF{M {ay"{w@$+Zqq﷡K>)v=`ϑm˝ *7WpV)8]SuߩsLy^EJ]^O)7j>KHULϊ %~;E(>EC֒UTx 篦v`ڻ5Jy0vgVp~ws 0r8flN7ǧ(DžaRYTosVSP._F/@#ȐҠc/xD}n QɤQv7;*l.ٮG+V?\ +JkU0Φ- ȼHkK`z؟K"Ɇs5lu;`r]Iȫ`}ٕn>{jCt=Jd"ȣ : ޖj%zg?gM :A$NȠAQQPGyDd YQX38eqtXVSwGCK]z%(J7&wAͬױ4W(: zvٙ3kR\1#lfBj6N fS2b2gF|8 YF sG<H6S\0m YYYbߤ!v9x@;U}:ɆMT8f  bP4FFLwcFy0Ne$)-@#vCM!,,$d(DlPq<2b3<O 4БzLfIY؆,&"ILd"T q$q kǥY U&[5@ds~I9LI)逓AehH#aeضQ-C?Ou֕GB_8CiY:_6iVΛl ߎZj&xŲFr(.*BXYwD!<:W4.( 2KCuQޢB{RאV8h?4Tku<6_Zk%5wY+e1۫oVӠ@y-2HY4`idb @<{R tk+YshGXGrL2dh&`.]wXԨ%4t :_^t~Z\0]/Q^e^U[5ެٿoݙ\x `%9\Xa Thr\8\ KR}#%,{b5FcL y~˷}AKx~^00[ඍbX"9U{jX-V]Y[Itkk1Y|h1,عf O&%mF8ݷmͮ=Sbbn8D'~7&d2dd$'31 3W[@{cޛ!_r&f|`b[vڂl^n 7b Pe:}_y)k/9y{||ͷkakxJH{~/+?RxۮHwBSFb^U~b~JRRzfIFi^r~>L&)8U?9(ƋW3&/g|'f!xVKO@>ǿb0 ؑ*. }P{(6$X8f;vã U\3}3ߌg]V`i}vzXd9y^]` U /bL%Ev%?eQx&(<)#1*?1S?%BS)=$4I/9?W&X_C~¯xVmkFl.)$;AI?RFgVv\(А`gw晙g޶SՓZ3Uqmg]<9ߚm0<×~UVv{JyWyVd ڛ)U5s&XR: &UTQh1U}>Q<֬`{=Gp\!<]וYӛr1v}K8+`XCQ&2~Зl8Έץ;WOTcbZE2u;]p C]p%o`+Benkvpٵ`>6t6 er[6]2@=2;^ֱ͐{IB4^@S8 Ή?gej1ɵ$H? S },* <{  V-Er`f [2it]1WA)瑏4 襀SDÀ+ "fr٬FmXf`x[| HI{dΠ(Vv^9dULC?]ڠ};&_$O5q'Xb[8X%J̡wI$)_1BxO\ nBԞrsajoa"9;6&26c`b0?8zb-\Z ZRlqʺÄAZ&~]PĈ]s,:=$ca3FQTDZOXEb;YikG۾ﯼ ģL;HR4q##yz*pzxXGH$+< ^ej}1 # RCg3y.pxe1TN.TMTU6 ^$N.f4>9WUB`f{'!##Nbn, G1 c!M8|:1 8|9n8;B;P,f1aSB/ 4.Cjq&wnlQE#t|< (l1al`F;eQ0_#>A_!$0229ՅI"J|9aKkKu <+Gxj]v`[dF<v+3eE9diH* JujvfHڷC:ͷZцu{w@>yk}Ew\lLd Z9ʽ_Or)=spp (y\3p*CԲmӹ&\UD< ?8~fÏ?˯)+]ӈ|kV['hzfaYw]̼t;\K^1ŚSڼD o\-[p0z;Ѳ.t׾ӳd-0%byxb l[@KX,/!˓qUeIS``k Gt|m"mzXA١M5BegvJmJM0e5#з+!=[Hp9nN;Ѻ;$Zl'N_S6®giRצz?K.JmZ_ 鐅KJU)w>b&+%񍕪Y`Nn]#o6LR!'> ;1!I`[N)*⥍$K0PUuY25yٚ*? aݡ aOSħDl;i1uX8ap4?N?<oG݌UBj }Lk JUdE珞/3} ~A5[cՋt<,˨3y'إ:&PLf\CrX{i&d Lt Dʱ: Ch* Uf8sTŧ\,g1z]ݤ`'L/a}bHЎA.tQx튼%/\-]W_\6{N&@ZyujUP;jmZ1Zz,kpl>'field' or col #>> '{path}' JSONExtract(column, path string) string // JSONEach returns a table-valued function call for iterating JSON arrays. // SQLite: json_each(col) // PostgreSQL: jsonb_array_elements(col) JSONEach(column string) string // JSONValid returns SQL to check if a value is valid JSON. JSONValid(column string) string // JSONArray returns SQL to create a JSON array from values. JSONArray(values ...string) string // Strftime returns SQL for date formatting. // SQLite: strftime(format, col) // PostgreSQL: to_char(col, format) Strftime(format, column string) string // Now returns SQL for current timestamp. Now() string // RandomID returns SQL to generate a random hex ID of given byte length. // SQLite: lower(hex(randomblob(n))) // PostgreSQL: encode(gen_random_bytes(n), 'hex') RandomID(byteLen int) string // Concat returns SQL for string concatenation. Concat(parts ...string) string // GroupConcat returns SQL for group concatenation. GroupConcat(column, separator string) string // TableColumns returns SQL to get column info for a table. TableColumns(table string) string // HasTable returns SQL to check if a table exists. HasTable(table string) string // ListTables returns SQL to list all user tables. ListTables() string // ListViews returns SQL to list all views. ListViews() string // NormalizeColumnType converts a SQLite column type to the dialect equivalent. // Pass through for SQLite, convert types for PostgreSQL. NormalizeColumnType(sqliteType string) string // Vacuum returns the SQL command to reclaim space. Vacuum() string // BooleanValue returns the SQL literal for a boolean. BooleanValue(b bool) string // SupportsReturning returns true if INSERT ... RETURNING is supported. SupportsReturning() bool // CastToText returns SQL to cast a column to text type. CastToText(column string) string } // DialectFromDriver returns the appropriate dialect for the given driver name. func DialectFromDriver(driver string) SQLDialect { switch driver { case "pgx", "postgres", "postgresql": return &PostgresDialect{} default: return &SQLiteDialect{} } } xxQpackage core import ( "fmt" "strings" ) // PostgresDialect implements SQLDialect for PostgreSQL databases. type PostgresDialect struct{} func (d *PostgresDialect) DriverName() string { return "pgx" } func (d *PostgresDialect) Placeholder(n int) string { return fmt.Sprintf("$%d", n) } func (d *PostgresDialect) AutoincrementType() string { return "BIGSERIAL PRIMARY KEY" } func (d *PostgresDialect) JSONExtract(column, path string) string { // Strip leading "$." or "$" prefix used by SQLite JSON paths. p := path if strings.HasPrefix(p, "$.") { p = p[2:] } else if strings.HasPrefix(p, "$") { p = p[1:] } // Handle nested paths like "a.b.c" -> col #>> '{a,b,c}' parts := strings.Split(p, ".") if len(parts) == 1 { return fmt.Sprintf("%s->>'%s'", column, parts[0]) } return fmt.Sprintf("%s #>> '{%s}'", column, strings.Join(parts, ",")) } func (d *PostgresDialect) JSONEach(column string) string { return fmt.Sprintf("jsonb_array_elements(%s)", column) } func (d *PostgresDialect) JSONValid(column string) string { return fmt.Sprintf("(%s)::jsonb IS NOT NULL", column) } func (d *PostgresDialect) JSONArray(values ...string) string { return fmt.Sprintf("jsonb_build_array(%s)", strings.Join(values, ", ")) } // sqliteToPostgresFormat maps SQLite strftime format specifiers to PostgreSQL to_char patterns. var sqliteToPostgresFormat = map[string]string{ "%Y": "YYYY", "%m": "MM", "%d": "DD", "%H": "HH24", "%M": "MI", "%S": "SS", "%s": "epoch", "%w": "D", "%f": "SS.US", } func (d *PostgresDialect) Strftime(format, column string) string { // Handle epoch specially: extract epoch returns a number, not a formatted string. if format == "%s" { return fmt.Sprintf("EXTRACT(EPOCH FROM %s)", column) } pgFormat := format for sqliteFmt, pgFmt := range sqliteToPostgresFormat { pgFormat = strings.ReplaceAll(pgFormat, sqliteFmt, pgFmt) } // Handle the common PocketBase datetime format: %Y-%m-%d %H:%M:%fZ // After replacement this becomes: YYYY-MM-DD HH24:MI:SS.USZ return fmt.Sprintf("to_char(%s, '%s')", column, pgFormat) } func (d *PostgresDialect) Now() string { return "NOW()" } func (d *PostgresDialect) RandomID(byteLen int) string { return fmt.Sprintf("encode(gen_random_bytes(%d), 'hex')", byteLen) } func (d *PostgresDialect) Concat(parts ...string) string { return strings.Join(parts, " || ") } func (d *PostgresDialect) GroupConcat(column, separator string) string { return fmt.Sprintf("string_agg(%s, '%s')", column, separator) } func (d *PostgresDialect) TableColumns(table string) string { return fmt.Sprintf( "SELECT column_name, data_type, is_nullable, column_default FROM information_schema.columns WHERE table_name = '%s' ORDER BY ordinal_position", table, ) } func (d *PostgresDialect) HasTable(table string) string { return fmt.Sprintf( "SELECT 1 FROM information_schema.tables WHERE table_schema = 'public' AND table_name = '%s' LIMIT 1", table, ) } func (d *PostgresDialect) ListTables() string { return "SELECT table_name FROM information_schema.tables WHERE table_schema = 'public' AND table_type = 'BASE TABLE' ORDER BY table_name" } func (d *PostgresDialect) ListViews() string { return "SELECT table_name FROM information_schema.tables WHERE table_schema = 'public' AND table_type = 'VIEW' ORDER BY table_name" } // pgTypeMap maps SQLite type names to PostgreSQL equivalents. var pgTypeMap = map[string]string{ "INTEGER": "BIGINT", "REAL": "DOUBLE PRECISION", "BLOB": "BYTEA", "JSON": "JSONB", // These map to themselves but are listed for clarity. "TEXT": "TEXT", "BOOLEAN": "BOOLEAN", } func (d *PostgresDialect) NormalizeColumnType(sqliteType string) string { upper := strings.ToUpper(strings.TrimSpace(sqliteType)) if pgType, ok := pgTypeMap[upper]; ok { return pgType } return sqliteType } func (d *PostgresDialect) Vacuum() string { return "VACUUM" } func (d *PostgresDialect) BooleanValue(b bool) string { if b { return "TRUE" } return "FALSE" } func (d *PostgresDialect) SupportsReturning() bool { return true } func (d *PostgresDialect) CastToText(column string) string { return fmt.Sprintf("CAST(%s AS TEXT)", column) } Gl_x_aC>F # x _package core import ( "fmt" "strings" ) // SQLiteDialect implements SQLDialect for SQLite databases. type SQLiteDialect struct{} func (d *SQLiteDialect) DriverName() string { return "sqlite3" } func (d *SQLiteDialect) Placeholder(_ int) string { return "?" } func (d *SQLiteDialect) AutoincrementType() string { return "INTEGER PRIMARY KEY AUTOINCREMENT" } func (d *SQLiteDialect) JSONExtract(column, path string) string { // Ensure path starts with $. if !strings.HasPrefix(path, "$.") && !strings.HasPrefix(path, "$[") { path = "$." + path } return fmt.Sprintf("json_extract(%s, '%s')", column, path) } func (d *SQLiteDialect) JSONEach(column string) string { return fmt.Sprintf("json_each(%s)", column) } func (d *SQLiteDialect) JSONValid(column string) string { return fmt.Sprintf("json_valid(%s)", column) } func (d *SQLiteDialect) JSONArray(values ...string) string { return fmt.Sprintf("json_array(%s)", strings.Join(values, ", ")) } func (d *SQLiteDialect) Strftime(format, column string) string { return fmt.Sprintf("strftime('%s', %s)", format, column) } func (d *SQLiteDialect) Now() string { return "datetime('now')" } func (d *SQLiteDialect) RandomID(byteLen int) string { return fmt.Sprintf("lower(hex(randomblob(%d)))", byteLen) } func (d *SQLiteDialect) Concat(parts ...string) string { return strings.Join(parts, " || ") } func (d *SQLiteDialect) GroupConcat(column, separator string) string { return fmt.Sprintf("group_concat(%s, '%s')", column, separator) } func (d *SQLiteDialect) TableColumns(table string) string { return fmt.Sprintf("PRAGMA table_info('%s')", table) } func (d *SQLiteDialect) HasTable(table string) string { return fmt.Sprintf( "SELECT 1 FROM sqlite_master WHERE type='table' AND name='%s' LIMIT 1", table, ) } func (d *SQLiteDialect) ListTables() string { return "SELECT name FROM sqlite_master WHERE type='table' ORDER BY name" } func (d *SQLiteDialect) ListViews() string { return "SELECT name FROM sqlite_master WHERE type='view' ORDER BY name" } func (d *SQLiteDialect) NormalizeColumnType(sqliteType string) string { return sqliteType } func (d *SQLiteDialect) Vacuum() string { return "VACUUM" } func (d *SQLiteDialect) BooleanValue(b bool) string { if b { return "1" } return "0" } func (d *SQLiteDialect) SupportsReturning() bool { return false } func (d *SQLiteDialect) CastToText(column string) string { return fmt.Sprintf("CAST(%s AS TEXT)", column) } T&R^xpackage core import ( "crypto/hkdf" "crypto/sha256" "encoding/hex" "fmt" ) // PrincipalType identifies the type of principal for CEK derivation. type PrincipalType string const ( PrincipalOrg PrincipalType = "org" PrincipalUser PrincipalType = "user" ) // DeriveKey derives a 256-bit Content Encryption Key for a principal // from a master key using HKDF-SHA256 (RFC 5869). // // The info string is "{principalType}:{principalID}" ensuring domain // separation between orgs and users even with identical IDs. // // Compatible with hanzoai/sqlite's CEK derivation. func DeriveKey(masterKey []byte, principalType PrincipalType, principalID string) ([]byte, error) { if len(masterKey) != 32 { return nil, fmt.Errorf("core/cek: master key must be 32 bytes, got %d", len(masterKey)) } if principalID == "" { return nil, fmt.Errorf("core/cek: principal ID cannot be empty") } info := string(principalType) + ":" + principalID key, err := hkdf.Key(sha256.New, masterKey, []byte("base.cek.v1.hkdf-sha256-salt..."), info, 32) if err != nil { return nil, fmt.Errorf("core/cek: hkdf: %w", err) } return key, nil } // DeriveKeyHex derives a CEK and returns the hex-encoded string. // Convenience wrapper for callers that need the key as a string. func DeriveKeyHex(masterKey []byte, principalType PrincipalType, principalID string) (string, error) { key, err := DeriveKey(masterKey, principalType, principalID) if err != nil { return "", err } return hex.EncodeToString(key), nil } Txs package core import ( "encoding/hex" "testing" ) func TestDeriveKey_Valid(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } key, err := DeriveKey(masterKey, PrincipalOrg, "acme") if err != nil { t.Fatal(err) } if len(key) != 32 { t.Fatalf("expected 32 bytes, got %d", len(key)) } } func TestDeriveKey_Deterministic(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } key1, _ := DeriveKey(masterKey, PrincipalOrg, "acme") key2, _ := DeriveKey(masterKey, PrincipalOrg, "acme") if hex.EncodeToString(key1) != hex.EncodeToString(key2) { t.Fatal("same inputs should produce same key") } } func TestDeriveKey_UniquePerOrg(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } key1, _ := DeriveKey(masterKey, PrincipalOrg, "acme") key2, _ := DeriveKey(masterKey, PrincipalOrg, "globex") if hex.EncodeToString(key1) == hex.EncodeToString(key2) { t.Fatal("different orgs should have different keys") } } func TestDeriveKey_DomainSeparation(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } orgKey, _ := DeriveKey(masterKey, PrincipalOrg, "acme") userKey, _ := DeriveKey(masterKey, PrincipalUser, "acme") if hex.EncodeToString(orgKey) == hex.EncodeToString(userKey) { t.Fatal("org and user keys should differ even with same ID") } } func TestDeriveKey_InvalidMasterKeyLength(t *testing.T) { short := make([]byte, 16) if _, err := DeriveKey(short, PrincipalOrg, "acme"); err == nil { t.Fatal("should reject non-32-byte master key") } } func TestDeriveKey_EmptyPrincipalID(t *testing.T) { masterKey := make([]byte, 32) if _, err := DeriveKey(masterKey, PrincipalOrg, ""); err == nil { t.Fatal("should reject empty principal ID") } } func TestDeriveKeyHex(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } hexKey, err := DeriveKeyHex(masterKey, PrincipalOrg, "acme") if err != nil { t.Fatal(err) } if len(hexKey) != 64 { // 32 bytes = 64 hex chars t.Fatalf("expected 64 hex chars, got %d", len(hexKey)) } // Verify it decodes to 32 bytes decoded, err := hex.DecodeString(hexKey) if err != nil { t.Fatal(err) } if len(decoded) != 32 { t.Fatalf("expected 32 decoded bytes, got %d", len(decoded)) } } b]xX[o~ R0<:p6ݴ0]DyXKBR |FM5`K"ύCw㷂ڈ$mcYH[O%1~eGnݨ2Mr+ݺ_n;] VL_֍=nDI8ѽ`ȓm3^X,d v'6VTlan-X+˸$[It/؜ZʉGNY*AU Hᅷ V` -.;ؗ}Io~,yU$#s7ݚ AWES47p Ʀk)**Ȳo5 \ ó3qւWy$f9ʃ*^x:in*G/=m6K#yӬM3Q|v"];{E3X}BxK8tV,yC}% F4qҊĐ-GڕNf35Rg{"/K8Ly ebp" vz7XY{{ULlXe9 %Fa)d KRrQûlMۆ+԰ K.$.B( 4ъHUlX֬*}E-RH. GbB 잘cD(; +Qk4c- %}/!O>0軛`st^ieHE%KiYnh{QV@/ٍ!!%~oq]2a m{H-.h *1̸2x)`J{N@L8ME͂s!mE$ybAnmd}~D`<:z{ٜ(Ei Ep{eEOBR'yhNU@h.F6UVR *P#L;X=4:P'SZU)( π } .*7~eJ62LKUa}5&vi} PNJ55r洎CIdثy&qϢrQBKsMeP?$۪ I;!M< }g%QS<$ZCf$Zc?ٮd: :iOK 4D`a4݄Ǘ'ڏ3]y>WbޙTgɺ^8BG&ZF*47:aom_;c N^UwKv?eNs0xK= r͘Sٸ8z|SڴL /"KytJ=ju/LdOZ?ix흩TNfw>Uq@b1`GOrp:, ~PEUXHPFbfiipn5qa]ta医r&Ƭha'WMj̭͛}כn>ŔwWW=:N#7EPʀr"WgIC7ZqSs|bnMq(-iب43 f{GA ZS 'ZBC,H=Y$aj6\ [O@C~4^bAΤH2WL#vmv}k U5rS?uȹQIgWhBh2)p OW 7eKo;?،w0qwi[}cgo|"nc>p;Y3t1?##1*?1Sb2=ifƃB 6xRMk@=kŠC#S_JJ{ ZQwg N,Yzf޾73k,*YDEA!V*:鮭4d [n|53慓R`A<"2d 1VR|k.֗ ThȄ6wMTx/9bYCGjM C f*PB 쓄 biBe0QJ'mΰNm\S )"_PWhRr̪Bs_ߏLpzͼyoJH 60?ZY_xlf}NvAMU.oЬx ޙ$E <;dLW'?=dn\a+!x{vmB*GFb^U~bƲLOg[xok0_۟+{%˰jAKKMEU-yҙm|i6tz~gJA[7⸨j8i$E=,<bxQвVҭ0deDV i5FC? 3& TYaBa[SXǑh+\ 6x!2B][yI\| YFM8Ϝw k jRx9]֢BZڹh\){ICt ͳ6{ |x =*g\X?<|Ϳ}?H^,: `YǼo/4~'q] d2nBΰFEPޗ5=䏯%&|;f8eY܆#9kL%;ػSbw k:WI(˭{KyvR*6oAxɽ{GFb^U~bX 8{c1+ xY{oG;JT6:!"%j4IJ!2}|w[;6{gf^>!5 v73;!G1 cS2Q7Xzm ]/I€F UkTDpakxj8pS(֥Hd 55(5j8pj"u"ư>?:+(즶c ߗ~XwR2NXwDtm8 ̓0RGǼnxػ3n1X7[H}ϚhRZB17Όr?e\a|-bWBL﹆|a}2' Dt}Q褝@$˿7`?uZ2 1kC[8'wW0QGnj]rsl_QȌPf,ZO}'V~ m&ߥH(g$Wg`z.Kƭtjz ƖZyHP%l67AC;@KɌfY^/3{@zԋE%5F4O'㠞ؘWe;;",&PAk,Q (>?c d %:qe_ 8H*SPmRogiq8i.g&?KK4K,x3lToٹ 7~Е5{ ;:l7R CW TQa%U9 w]TWOO9kѿIFb?Z 1`Uk5C/ouMvjC4'w| u"ȥUzEO^cI D|E~-q$cD?VÍ [(lYDܗW#ut f4EN(%>=8 x-B,-$iʞ| z֐cv-Yh݊9:_,FEVT1Cs2"]棜6w[#bc\hcSN9N xberl)ZmGA?j7]|%,1:nT6 }b5O ūBSu6dwxWݩݗ;Cnvg◼K |ַ?~wz&{燫޳/2zzXa[p' +jI4{hA{$7ӂ_o&g8Utt=73_Z2kIK3bBПH$v:aMNL~#dF[Kz0}Z*Ҧ1P *BYwalxů:D-NN@a"ޣw w@Voqa \QbӣZC^ ,JJKyw{~aq50ֱbEȕsL }OF\kD/D8ՙ6Uħ`qxm OpQλ9!5>"pYj|mu0ש=Cn=V&ג{Ep/EhHz*WF-:˺ܲT~$hGM=tǮ%ƁU8/p Yi X8Zl^P2Mw-dK8 $L0|5.鯉y {Y.|ciܪห)T%@|k2 >S ;d t(3G cogtl6k;Ɇwv_5Q**/?Z <tw^9 BPZ|WCF2 `W=fkAuK{+K^irSeئERYڼ*Yw2 㘕o 9{9M1+ЮA@(<jxko6+гkqw@.fl (hHJRI"fDr^k5=C+^`b0^e&6'MYP.L$1+e#-lK|)B!SLZLo̕MZ8KXsb2ߋ> lHv M.? g,Qy.R!ۯl>{BcU Ff`*bծ,y_%(2c-qfYMge-ݮDIc&i\RBMwi4+me'}<"c?jAsZ &?O$ѻ43+Lϥ85%Z s]hUh8B43X$Z?,؛Vm_ZwGquF5u*$\)n .F.K)lxꊉUot"ۢ6~[lfJ׆In ޮ(`pa P$R5sy;]Sikw w;>}9~-!@UֹA߁ fw,rzvWZql㪶H@;IZ;8^bWI4+N8ZN蟬V568cƨ>w[ٖE]s([ /- AZ&;# D{ݪ\*f@SK]]UR ͑jQne{0@m^VxV4;s5 s,9`?Po|).LWo=-ð?=~-/Boxtb.ʛ;B/KhTc7-!z+PIk<T7ȴ9꺐,$J2IkJ~:SqR.E/;Ljw<#IFOg{)S8`' y~hTq,^܏:$V9i @t0vmaQr E.?s64a1[LGB}2茦A!|m/c{[@eIk;F4<8 ?gqgH_i)k$x͊Z `ְ{I yPx-yD]ļLTbҒ %.N̒$\},2 MI-­nwYw*9Qy6qp?|Dwsi1}+TԢ"Ĝbl|D~Qfzf^bBrɝF1[嗤Z)dUf+d($ iKKM.QH,VWHMK8=SrR7֖5pdx%ndu7gdijxVMo8=KbV@ )pXEݺMҢNc+KV&Jv@!g޼G4흑˕tg_Uk:L96 yKFXanD1ͅ TFlz~5?Zjd)jIN-ʯRPcnA8JJ|6XP˱O{JZ$qYJҭE^xrv -.ug1|uz=-iW7ƅ*$^q#uo͝ۺRMH掊A+/H) IKVipAn\ hv% ZW["܋_ixJg댲TlP)ِF̭"NtxX=/6C80&&Y!wrBI,F!Gxd{lME)K4cz9ä௖ƺr'mφMgDm2η]~˯)Ty`b2>y63; Y !\п>.6Q*WZɢ"ɶF"c!]"9]߶~6}WA@; E04"K~ŨGhBGGƾ'[V9` k ]Uܑd7 3\nB<&Ӵ -'Ne`uJ#ݐF2hM pZ( f~VD8~R>TUiaZX 22a53;c27V+JߦU~M#S;*\80vU4gv:l WA[Oy v%O͏,1 <O0mTBʩJ6?H3L`?I[yM0b)-.|N_-J[ȴź֕hȊLcf@aWG1Ӣ,mйn9SF8 \ .Z00TS(H@7RgzM :Bx0 F A3fKtS$+^VݛW/.<}R g`D~;zT|,kC[`h}#Te/ )@ 3&7`j9UT5qw,T\ {lbDIa_Al6a-sA3-q#_?*v7AWM' \x[ Vb’q)((&Y39L2Ԣ"4s56-xY[۶~~LDI7`mc72DBA.;R餗i ~B&wrDbJ5uaJAR*TVr.4-F.R dRK 4EժO.ҟ-t=IT҂ԓދ2&L[a4nd)Ze V/Iuq!&k[]u3_=(`[ʅ_yA~x ө^VN!N<X~ο 4 .MPӨ@!]!#X1:jyLWN ߨR$iqA!+s?}VyPvkʐ[Agxvo+f Wu[a hUC%Qd%dZfcdJp8O@A o߹t}㳾3~ITMT{uqΗ{:U.({hpN+/_w -61y1Zvt3E hsFt2'ш8 BꞂ<3'h!Jw n$QCy\x?4U=$A7elŴJyY& C]VDNV$GN^4y}U l+T-S<ZuS I#/@UFp=+뤢c* 8dɰϗ#o%[2] L3t*nCS\B[We%q͍e! ^vej~*QrSGRU8…`g tL'ѵ"QeG6%8bH"DGːMzC&4FY|p0#ed%a 5 'jgN!%1Y_'1}I!ߗ"Z,2pPaW~OU}\4ry.}Nq94_Lfr=^=&OP%8֒Ʋ(T2Wn Ub@[r-6 SA)r b:u^iV1K¢ amɃW[|}⋠8~TB#p5YgUڱgƬ#uBfd*Z콛ejѹ+^LФype N M.c?]}GNB? 4ml4q=1YRgVao*b沇:;<NNkusNR5X$rsr!x$3b16h{่;Ty2-X#k+Ğuhre2OFL3uap@Se{?aU62NaypƻWtovm(b^cůԥ.8jX)DDk2[b6|(;ەNVbojѾ1 .)zpeX&-|yRDEupuu+6/~^+D>MaMFKHhNAgl?ґuPC/LdsR6`G#YU/b;L;-,{8NF=B<`Rr&4[E|Ԍ65ql˧'&+aYafSeqXv.]ں'uC x^TZ`qR 9k6m6D^½S _%7J_i3Kp'glnhezdْSоJ XBt) unzO쨝_`u1]=$ZWnw_<ͥad:P9+GOTh8Sc&͠GBSGݩ+@\'~TY`×5bT}p{ʨI~،.<ي0W8ķ28==vFq8(!˷G#ҀTVñoGcGM20J JZYG ɤY k?5oZp 7/YK(s.yp Z~V  RTW I$p}Mw03dFyeŜ`1X0+QY4~ o4U6Ӊ3L&_'zx@;?SFičqZғ}mʔo7*{+53و Ew3K±[Mqxe~2[FY4:O S)5No̿{nLWVnH =LV,3UxvļL W%6ߒJe2l*x[n`a*=L#`xYKs8>E3`C2)[9)R"Z -h㑌$g2P$3PK6ĶuJk6P*ͳL[-h\*ig5bV( 㩰jRTO>ho~#Bت+fxHxRٷ˖#}eu'KRؼMe޹?HtY{8"E*F#m%D"K6}2o,ܓ, (g@TṼ0E;\uαHߵCHL :ӱY%Hlzb021Z]؋Qk1qLZt3@B)J gEgb(w™d!3VwE/:#^sU*I#i5ht@&q AD6C感TwKXqi> Q{K9yw%(;qήŌK`Ua4m{* `tRݱWTZ| /sh5A՚"pi>W5wD}*[P6 Ȏ^&b1F<>sa8oDٕboNe!:_%"uޤ F28E$ oT_jl;|}2m-;æeqyUhAޫG1%u**GO6|Rw }~KwJsng Su;҉vRwhG:NPAu߷Qi''UPvAC.vMPdJF+[#he@AJK.b:hCZׯm3!f)b2`ިGTLj@4IM@cC\ޯm3CWU) u?aT5\n( 6F \9k[8j5?8??zsz˳ xt hT,F>iӨE{GXiY;2f]cMͥety)_*#(V, ߻VEk.\;k+ R/EVNrx 0d#m0楽0iax܅UtǐXI~ ݣsbjcpI| K1%A\,* 3,812NDӅŵOI+g LJź4C\n;}xkm4!##1*?1Sb2q%-uuu7}xXxZao8l VJ]U" $irM[lNʔ#RNs͐Dٲcv۠Ej8{:'zHfR2!x4N3Iv S.g#˲44!_11 ױɯ0='&`#"ji7ii qy?fk9VeQɎcD ɛ4$O#6/pt*i8 /Bc\QNٝ?^! x1؟4ɷV`\CuՈ[ H8wC"dfq*p<*#{ xBDqz&qd::]C:~/F\DbtQ']|x~铎OгHgy :V93L3D9QQw}]| JHr ,=#tv_oNE!)Qҏlj] / Z J}P$pULz i2ԧ IyJ!ѩ\,xA\롕"qш&Trl3a66pY:a)DPh 3t& QR3%"W@0|rr"&>8DC\հ%Qós&;nZ'YK,LIZy2z+lm_X \A 9T|:Mi@w9\WsJ:Z*7 [WKi-$*3+L<|)R_`30 lHD]'$%UD̥զ~s|̲\L<8NLQRn8tem&:ΒBk*Xޓf A/cTCDBVI; BzhZa)šj:Ew,Jr6f}ŦZ`6½zuMo9CB5CaEwB8E4Eo&5\9^6(l]Ad<ln"#9]vX4"V\Yך9;#;)kA#Wz&EPgp1eLZr; V -տ~{"V4W0hdDex5P1vjuam*pa+J|eVQƭ/mZCt^Xܒ?UeSG?'&!宠 Q[nEL_Lg2#ff&FSc]a0o$#"7GgR#+}Mx}ob_d!4 ^[n:%]cheUa—:P$~?ރSoi8l]O^Ue*(*aQYyHiV"G n꾻spۛpz2'1K\Gv.9;Ù庸\R,hMEPacXhv9M`;: kixHD)kVWg]UԪBVuUEkT_̺ W;~oGc3lɝԣ, |2'4dI: I\]FTyELR6)u* :Ǘծzfmؘ$!˓m"V]%BjRUkT]O"]325[ߥsַ-ݭl *䃣TYx3߻?t>2"z_*ʪZs!ӑr&3uUKꏻoc+֝aUԔy *~21A6zsyÌ#0տ6kgČGyAV83h.8CjUE&I@5tP%,`GGou nQ1o_sjg9(]BֵT,}އ  OTJmsRJ\jo>AɎc(,N  bAꐙ=fn%B}(*K`̻W{MQb:m.G_|2xBFFb^U~b~Rbq~r~QRzfIFi^r~>L~ Ǭ^*`߲ooo4iA%Aa(87N7#sXF&.t<:<WUЈ2 G˼ Y.E9Qr*yłg^I|(N/< d9(Vq` &r6@`^? %/RZF|)& _YiupZZj}9zhg@v|+hY%g21wEjhJ!.4a?EӈHv!-hUfdƽ=#:Gq@ld?QOi 5B |b$\K,Q<_-/x4O۰\S^E 5 ?)GmaP(]+->9|eˢ82 T2p8y^Rm½93݆):Z=g/ߎLcb9v_Ԑjiy*j7NN$Q抻MbWHDþ&Ibx|{>Ʋ@}C; 9ڡd1|yD9 [Ѐ|Rw4ME^{zJ 5אA9guHزA"_ "գ v?̄vE[S5{iiՙt;,lP#[FmyHGuaj=Ԕ=b"0^TK0\O%֒9 :gQ瞫`Z[;ܜ??ݨad5G35bj)G))++v7E+;yF}ֻ-&ǻtaўKcahy}k;ykE_vwP T7znv܊lܮo5}y}v\\o%YtpTNۃKۇ㰱 Ŀ}U%M׆J%DO=[w֟#&z Jc~܇Gu<)zC{{"grT 5/~Sn>F.wH,46GkM`D6' pěBv0}rLhJ-V I4TM"C5h|18gqsH.fi6p> ^&h;*H #a`B5.!% ;1ϊ#E'17.d1 k7 y 8ӹB<., x9'gQ8~Ȑڋ:pݰ!yXl,(Ay٭ycS}Ͳ{גR U5rR<=+l ɔ'w.]>`St4v֔W%lB`a4 ibF'Ҟ#ɶ8t:ز|t~K9rB+zH\L6ĩ$nF:p?L{õӄK. ?{[I\1yA3f_"}gH{f/҆6pY2ٍ̕d0=^-Wڷ CZ^8v'NEQ5$lR}wFS _FniM~>8?}&om{+vo0?#!!C*iq|&־X*ǔ%4eӨrh ڔ3 uZ #`UxH2 )3|g0~ RzMԏ[-$PcHqZZ{Wuh1hRMMǴxGh4W5܉S[DRUruu._c|{>Z3FcLSmC" `W0! "x-Ņr DOd"XNl-"T $09vјad%,C-| '[1T.Ҍ cC.H~=[zNz5+t0bhpdCfR?{{{#Rf!__w$1kivet:l34Dž)8EG#*..;@9^ѐݵݴQ11)%guOE~p /ZdkIJ 橆@zf$}~)`AE8S%#,ϱKPl3UJ!A}fǜFf LKS 9%[hbfMon.Q#>?;[gg rߊ@' Ul,<}G3b[5+-?YQ&h0ψg5!pgE7l?~N.2$0!3"xIe2+U$eK6"I|V#ԏhgUvNzTY~Y.9.%2M.2&2.D<48΂%mJ$~;>Mé=(*5q1R1/dTŭd51٫򁪲7$d Cy4fn,aTW; popMU j] j39@gԟ&8M,Ղ.s [\]q_"AW.4&C# Tk慵)M6ze"^b%E0l:7w.>KhEx%kM+QW.AWRLS^&q)~%ճQ _MCJ_z7ʅ<bxԿ Nͣ9:ɉ9`'GYV\ 2g|FUYW d_=un`Βm~PK#1jDJ¡XOXǢ=|bnBr Ӕ7ɑV7I޴/K&X KsX^٥D?՜SUBnzaۉx(  -ώ1\udX.䣬*M@v) p^kn呋',*,`.Xm2z[n@zbRpu=LIW}0<ݒ+_$RI$x@1eID}Bq|0tvJ4Éb<%`8ޜδ"q|rsآOSלb7MՋ3ӎucJp҃kQD@ii:#V9LĘrY1Mqv%)iީ.K BeOǕ;2#Kp(Z̟P]U=FD]֓QH̰v8'0,~վF"UfNj"6i811`f%-N?`2w5?68xcgrjxRgFJZ}8QsZ:˙>}'7`g))4i?Q+gIK3͆hƚd+X}G;5=K"䊨x/Oyg|VA˕/QUq^rnjkwxH ೘+I ]:xfii惫͙_N+.eOŕA3BA3 XⷾT3D2<1-9x9W~ɌEԿ:DhxZLcBFFb^U~b~Rbq~r~QRzfIFi^r~>L~bkJfI~R&W-WZi^BHjq Dl2cT,y0&S閙R]5y!iLL0%X&כ|P}, LXHxr[ #]8Y=k^˙7يCn~Y^ڨR'KsI&VgV*pqrr|*w]i.Cm S#M iсR0|P>-1)9%5mF{Zi+ڛtaW 1o(sc. +O(iq(̝HQhGwi "zmmߪp#[()1=OJ sioNLԻl/| p`OXpxuWf_$q72i0؏@;rv ߣ?ΒѶ11:3s C2eŞdNvKA]rr}LXI6l{(/Out-<)Ix}RMK@jJl,EA=XAtS#ibݤM)E^x_RqMEr v޼ǾdKOg.&i7%Diѝrwj*J;7XG=CтXσN^DJ&]&.nHj\WXʟkPʗOP~K;qx1^bWd0TP#]/ٿd;D?aСXt\v$3 *3kjx|Ц{Bne ?)tTða;GWH0ԡdPаzclcVfß8 J\gGn"r}? j Q6DoADj1u#)Ǹ=uA}:'F ltxT=o@I!!G@(R$A" ׹Mc !ArID =kgh(nΞyofެ??J@QͶDKXb4 u8\۞2N2TE!4'J@@ a|?L&Nd1}mtCD ٤ iҢbm T | JD,,=8{7j8h8ERECG0=+ 5S@Yb$&h_mpWx)/ KɐW~,KYR&âl n%8{BD=.мصOS7FrJJdlֱ~h~oNS5?(C\%>@2k痝aqD̻7 ߧ؜PʡMeOh7kkdr{  M~پ$HA/@k+ٚYˌSjoI $Nҵ-B3^ۖ%J%xIj hDiL q"3h1X^B0d@Wp\7竆.0aĉs s`ݧvqH]tֶѥC)b=錏vϳ&> E4ލ:@u S ߄䣾f^O#aRw[Eܶ;qq:N٘fV0>a c!I#=++RW5_1{ &[b){ e0P7Q'(4;QxSe&sZnD]&~vI,IJ+KVI-.qØ2B ŔR㖙R]5y#LsrsY t PTtOzT.NZQ ĜJUE i e9 y% EE)J jEz0sJ* R@6dVN\.iN9R?JiLfj,67RdB"Y9Ca$pAB{d&gU_uyvf&VLɜ2@cr? A% U % P.6N+8D&i#!U[bB[Bqx"Pg `e R- (J-)-S @i;@J $0YOl1tr , _(瘒kPEM@޴H; P,5Wr~NNjrIf~d!ixWmo6>Ra+ k0ִA-f#*IuQ%sx<ݲ <D^(m! ‘aݱL %!;-HU~[r;dx͔6*;/8A0.6!{'x+wJ:SBkk%'yx  @š'tNSs4%wۃ8")҃X@Brr N:V E dV[L!SrR}?) ,7 Bʿ`;9&:n1%1pr,ԁ@\ \{g W">Z.kae367ڢĪ58g|*s9);J)3kpW1#&<3+E*G,G(p;p(y/152C 9jGWהfMZx%Y);py1|h{Gv/?)Y[i4dݲ?-%Mk;7ц5rWё5r=f#9Sh +M޹5=[p.`8ll+3D܉K8x쉴aZFn$ّlG$MLFϵVWFrq%i8o<zay;FlG&azQ4mgz0m\ni p ) )=~=TNu'8||.nrط Ǫɯm.sfxclr8v,-z{7*i$F%^wΕz;l%$߅ْa4_?p]t`x\1%xv@#>gj$q-g1I?(r8Qv{q\'ވ33 !Wc%^9NU,[owf\kLߢ>d RCTi`Ju`fo:G,D1 1E'K{_M&;S~2PEjyx{|GyB GFb^U~bARdxTOA);UJLHxnt*'BBdITQjR);-P ٺxd<WݩlqQ{o~}oU9z9LF|5fw4kķkV5۠]h͗U8 # ma`tJ=*yJ!MC,\!3Q x?h @0,Ì{cquݯ:K~;ߞi&^g\P[q5aVU+ ƒb V1j:5 [D>aE x&&,>~j$GkM]Pj1j0/v.#$Aݼ&V ⒚XSN9aTXpX6VDkicT!fiT+fe&B(hh*h!y큀DP WH3/ :OP^ @>hDI7 XcPD7Tq-aꢪP1(bV &A`3򫀠T=~b'EP;nXt'd|_K^Q-y%jt ʓ͕bBIx?7]##1*?1S?)8U?9(US)=$4I/9?W&q:,&m!0 4A xGBq^^/RAo?γJT}GU4JSEr E%~h^_B_9~*".`Jo*J_$t1EWl9;WCxo<_ꊨ>";&<SyZLTegIYm0&M|8BDa7YdcdIꮷ"i\ҟ~T`㼭BW"Sp{[Y@G~s=ie_E7_7'nw*dLýWz4w~}͂PNucDT-$QVEQ>#boc?oD4:5u6 @H߁ ,IC d ]<<9%[Wʋ$ט|wL|9 F7OuY) ÝeGU t)z$ =YE`@2D&KoU54PTR*B**<Oh`B"z TAt s+PEVz j#ualZ&(cqTdyJ 7@"2!#BpbcHpj Ne+4oixJS"wcgVV"b0C$OGqMR蝺Է%mCt%i4J@**Ľ]܇|XFJfnKQ@K0q^ 7lV 1w<xߙϙ;>^^Ee}w~N'uLc%:3|*YS@!g?Z4:$cf,[r1h\`}RUX>k{dat 8֠i "QBYB )w"9H2!? $b\ q6C G) "BaEHt] ^Eh0@(%p zP crT+XfX (sg98nA/A,!d_VS`#xsߒ>) MI{~GtGsȟZvnz 0%KD )(>z>s7n(Pt:} 1RH#,AӨSGz:(-4ΐġ!8\W) Yg!DPkY&-fb 8mKR?|z?!7$1*Mf  ?zJliQ>ACq>Ń # ͒qƄ+ Tts hp '#k/P(P!|iЧ Lc:Pzԃs̘٘sfHKA<Wt ClI6O,v@H>.fu-sZ1(b 1f0On(N6vAZܷ~E@_ ! 7* 4l>xUVW<V A ~R $Au*!l08LV " hEMur1 j@S葵뉴7ut5.QR5o+4U٬BtE~Œ!U壃Qui&FW^n;6  D`xI2| 4Q1(5 < Tx?r RM`CA1(ؚ &6HSBij\fFV808MH-8:wfdCI,?em#]b6!Y~%46%@R33+L"zf8*5tMAoXV9P<*t'lk~^Z`ZV9PSݼ[TcS2^Ub8~)MCke7鎐."I!Y.f+;POsp&48>^7O޿KU+|0dlrt~6T;Pk08L!Bu8PY ^ק}٩_ &ӛܠv̐TrtV1|xlE۸0-ƏE:$IQDgpY@-  ָ0bt 3dy)LjHtڭWߛjwGNYm~tEcU՜~5quǐ_zd2JH{LtW|mW"}X% >_VVFUa}( 09&5(V#%QrRl4Ap}Ȅ *;>-U#D^BgG󉰰,j*f7m m2Aͦd'(̔ ,DkU1B䭨g,xA| ĕ՛4ȉeH2<ɏFBEUqG15J8]ĔAcj:## !}H/V72Y y!uF.L1yYHD7 &@/0 g{+ TR^ׇx6<sjU8V6%ĭ-pHo"`ƑCsU gUπb JV\b?ȡ+; o65hwxĪ94OVxfG x>$N -[?L#0XZuTbߜ)bU42oQ! cz~j 5Ɣ&~u@з0,&'} :MY%Ē:`sݼ( Ga۳'Sv6i5)EO }-Za25/ӈES/_<^XfUhI+u꼓`Յɉ[~L 4\~x[|.x7+z_,BߗAL0gq 6"GdT)1^i_v% -vEzHen^RrBAϋ Lal''YaoxQAz~JlWP=gc'yc `K6 Ȝ Q 3‡]n/6*z7cHƠ3*v )3AVV $CcRF# ^G1]A+ cʈFSJĀeʊ㎨]XMfXaQ BHaq9*\22'eQӧClݳ&?Ou3ti둧B"r+6- e.-9FZai[dɠt=Nj]Ӆu_ 72"HѾ x<=M/СzV-S^qtA[@V, 頓 %rϵY!]PsJj돥5ʐSBS,QvC*}i kH'V|So ΜU[k-Sc tshfZA42זQԧl2| g>i_Y@Xg_Jl͒em"J!Q%u$_) ZQ QҖ*{ +uyw`P*ٖ[ӯR([y+Ռy)# y:Ժ47 +8F/g T\d!Nqُ+se&0 w LrK߷rٽ)Y31 ]Yim5|MC923'TFߪIũ%99%J\J%Iz0UwqN^Ǭ9GR`1b=EԂĒ+TҼIJ̼x_j4 xkS3[I+#6&I$mƤ;!AElL3}mKƆ ӤF={^{^{Υ}NF$,n(bb6kxd' b:# XQF|`G0s4G0Dhs/YN8%lF@ CmIC,ΞnCñ{{O!n ˆtgqdʱaBwʼ(ۍ o@&Y\VJ@o_ٱL|gӟy!6N!mDT߰wSENF97ݜ!C׊VV <_3̈́ǜJ/nzgG @}we6* t|-'q*0 vkQ]&S,.xerŴfqC05'qfgFg|=uGHb4qM)PGIGǰ-@b&ͬÔ@(p%PkZVU0\SN[ ##X6=y ,8ՊlvhC&f|px[Ŝ N4㓆`ބˮ$}o! Y~ V}oB{Яo-;5 { 7쮽_9/¯nbcAϵ4k_9ls)wGi, -sb۫оrEYlؿZ)dzͮBcEC!@MJx4$l^ Cڗ t又ոy!f7^D݊2-1_s"҂6j#SkQ+zDcU!$ʻ=]+| 6@0o #YL(g_K1)@)w"Ll*U ͖$#OCp$pJĮ[MJ d$j#RޢY`"[GwLmc[C;v.0z )75'Y;; :clJ~;m|i,):x:!,6cd,+jٺY8ˁiS#C/ow7W.6޸ NģL@͒:Zl5350`|p⳻;;UftfܼMrdK}v>[={ ^0AkI Bv?iǏ.(/-{>Æ<*0{@.@9ʹ%O92ʚPOΝ`]iK8Z"jzV)4,F%"KRSdY\lי8hN:,uWI'J1urIC /l y^&(Ո帚xCi8x ePV=pI  kY9ם6L(^!H44T1?^{Ɋ=C_ ҫV|v1臫^ou%5!VV!+ REWoϣ==6-aBTmeA_Ch[fT]^ƧZ-ܠG(.ulqa3Დ'1eC :͡:=n)d)׌s!nG@Ct](䫓cf%+O!E'&^ēɘI.f-N?_Ѹ{/N]mNgWxѺ?%ȥa=;S&ST:VV'kbVm|zy|T/[Ɗ5BZƆ"nNԃ}7="ZƂ͕ ,#q#Uْ)Jnl0.*Panʐ4#VnW^>LhB'F& Sխ́u}5G[9e4vSi ^\^hk'vL⋂ȍJ^ځR,8tK>\da͵k\J^;I&^ˮxvOSX4dcOۆv8k tznʶK#,[P|&X9Kq~M1E? KcX^j?$fȕ$eVI^%7Ts%VӀy+lSGz\]0`:G%kЬc}>GfoZ((&]W9Z!7gLl q$GW<#UɟU z̔ nǘj(H@RiZGD)^Rak;f)CqtmL=y8+K}]x] X5T|nqF3,fpׂ̫h_{_DdKڀL`UICF--K^-q"B)HWҦ&"޽q q5 r$l-ĥ8F&z%u( rfw/lwOP%Ubxڤ:!3#1*?1S?)8U?9(US)=$4I/9?WE${d trK6?b-Y#/mxVsE/2&AKdW7{Ic$`ALfadM8g>ϾZVϾX=3{L%ٞt{ ~zSȈ$NH%iU.yr[Tv.|NguG44U͘ԡKu>\OB qD XHH Euz0zm^eX/o# Mx9 @ە4jU9N #)tX&oNI$F1μ0xD s@o\Fgrg2cmr֖1<PˊϾ8'*TI T szn Jbhju 1Wia}8ZgYYmr3LEDb+$Z:gk.[4ʙ9ҥwiI$y6 4&>&Lvh]?.^vM%iGWN.&&Kɗ}8857i<[;ܧv㻩ڀ! K5t;p-CTM00#+,K8bRF]hꎉI@6ס`r&-NgFQ:ƣ0D"\##J AUYD 뛍\`s@1/B]eL(AO)ƫM9i$Kx}k`xXͧ*`hԻE-"-|.f#TV1\>cZ-&6N"T+5X6Ww\ϙ􆀺 H2U- /6 {ll> ,#ʤs5~c gk0;? 33P Qxڼ"ed1FČr Q{Q qGou*\$`;'THV]mW=u&s66ixΓ'~UPӗ:&]#)}Z\1w_/~Tۄp=ř)bDypJcŇG:&dˆ9'Ɔ7 mhRv ?{Dl1^Pg cHc4k5=;N@X:l'X8n|֡]qƷ 5ȈRG~/Ն\L~b$q[o@rx;WoB1GFb^U~bƖCbQxVMOFVˇ 6ЭZ:ڰ,-*6@զY ǰ8Ԟz{R^s:3``Az;~?}東}#֎$cWR5.%袰: dUN"`6 >!Yؠk^䆣dkCkW?K+o,J=Ǯj{ukݴ!=# CQ%)7RZ+xt| ԙ^[Ilf ػ`UI2>Ӵ@Bر1O?.XN\Pca;vDzj 9y'x kvy-t1.6@W mrG5 * &BP% K7,0حQV-9 5v^8 aq6dwh|4LV`=)62=,Cfm Fbö~(cE$ _ };07ȱ}r q|:z :O |K_4tqT:{Gbǟ#_ƒ.v {(n3`N3YF\VЖ9\YaF`Ccsjp_qK KnDC~ /vZ8)C_(>:AܡgbXf!L_ (7'A^g6MkB\u\y} X],Yl*QG:CKD/#ЁƋ2L Дzb2wMR`/BthL~b$qFѬ 5x]s۸rd,ɵOsfKs'q2vQ АCP{w ʒlbkƺ,J],EcjqSG񚏸[~Ur.ۛ\–ԊEײFX@A s8; K=*j"n6oֹ9̥w0Q/&35fR:NmoD<3q@DN^cE{WzV)]ow끵LQBQds^m;f$V2O,g D]Dl uvX&&R hЬlB]1SJkf_.H9W1k|LD%X -o3Yz* itIf#=鄽7Ltv^"rV9M ("s$&M^F5c0Ť({>Enu컨Z QEY/dʛ 1vO<ϳLmy`_0^s.s>ődE$/~_yY QpV@r4ZHYEFN7L J}Ë2H 1Gc^k(a>FJ,^~% PMg :8bQ(+x5:VV8@5lTWtJ?!L͏Q^f\Feqe{``3%A+܅G.@)"E=qH]zvgJfB-k>uy/ٵPx\ o4@|&(_lEr!2rq$łAJ9 -u/q" 0u0bZ:ҳ: bfff-f (KTIĹSXjNN ta-3d6zelyn5ϕ1y5!x ?"⭡:9j?e:0.XR}YV2w;̝E'{|nFA,15+F @/. c&3MsYHB2"'.PM̪5"O BakkױmD:JG, Mg,sGA t) >#VPtU $BIx' @GO-<1FkDYpFtMfU{͜mV]/O_<`Pb]-(ۻFW(&NNxVr"wȽcQcƸǗwaL8O1l`6ؕ!-!ȬՌΎ!zppLJڦiJ&.xc2mpQ9 źK*M /qP.Ŋq_~jHs_+ >4Ys{8jzamE/53P$o/?)@+k^/1>TORoͅO)v0R! ^dž ʰph!%vNB6 c/5j]C/Vp(]uL#:~XT;Ʊ^_ʈ8ݤ*YS9\D"~JBY{YbMٜsf'\<pc zJQVz.3AYVR(fK ?H=4q>kfl876?Ż]?D{1AfާYyx mpp>?Vxp;4}EXe4I)xNH6kRo,Ϸ 8؆c V&ZеnP R:a|ok86Q7!\;ۖ9(=);g> fks8I J:<8 6쭩F_ {A0յ*tU 9љh`zI5 KW_7;q=!O9A?j.u^;yhՋ<|][,B:cĕ>|dU'NNq}4F(Z?i0eY| ;V eZKm;g$.E3%W74yKVhpl,Zl`Ӻ.ჿ;ϓuBұZ1nŬxӹ7nTYVM4 '=GkKВe3t\5挧F}lM>jFtus~!#RP׃tAqG3&cx 6g ~@2Wb_uDڟkٚwzP{ mtSQ抅7تe]-*ZOjvgI"u+Ot }j(xpodOu̺qV o} 6&x;oBRFb^U~b~JRRzfIFi^r~>LfJ9{G pӊM6wxXoEWRe7)Ji4d]m(m&PUIjYݵ G. R\@ĥ\y3i*Na5~f䷏^/=WfQǢW֬>!MɎ ˶noE0oT2_ mo ors(TA]=L^܋iQ :gATLYBRMb%5`tӪQcWUL$dg2rNsẂ7mJTrF=z'Hˎ Zt ,6 aWV~VLR3H_゛gڣq''3ǔi^˺H'G]\軻-3{хݵB=tɃ`Q jy~8BC9)D:UL(qHԋtᙢ:h7Ǡ:T7gx'oU耄!KRV  }}=h-y+MMHK)ҡf"dkۖwi4;vCHʗKZ!UtdqRx|WG|59tn3E6"EU}պA7 OFwG` y,fAE ޤqOr^-ح3_qk;u'p}8n<ҳ\YhiZ#t,#b Ygut&ERsm6[a`jͷZ*=X`|_ݻq1%y墰ٳ՛Ak[m<n+Κ.V}T2sse7S9ϫhar2T{C8_}fkdf$tUD?^( ?5z<.x6l&CTlm1èĭz슭̓y͆lfîoMP_PQ쭥+<;d>7(ΞU[N41s%) #"Ih$t:2 % ]S}i ` V #Ѻ92A4P>xn8^ܬO#HcLpm`a(l{;k8w 7$1D9I$U|yfkR2[5Wq1_=?(2J (f{LKC'jR04O%%Krf)-Y#5FUg^T7V(|U^R Eփ*x|r`vĥrCCw{]>@}c( Wbu Jз je:Je4/E#I)Lxΰ<Jo>:Xdefx,Ы<L ALqiـ–c_|C0l!u (o i"tྥ] Wﬣ9P|Tk9!F@Zxl3OXԺ#cjKCMd~{Cܚ',q@DWu5d_zRbVXHV~|*+Űy`n\˥ S®$"JBV(2jm.U)v3_,briQC;FH<0\SNR1 Vk~stNZ5|EȆN9ߝXDV+Q!2Jв feBIZFZ@I$ a mUtG6Fuݐ1g8D!k> DҦq NC?] ޾r􃾛@rL9R2;o|[)xUx`BgFb^U~b~Rbq~r~QRzfIFi^r~>|IjqI1Tei% 6h~%Y݃턚 k~-|'E,sY jЄlN{sJx)JOci%3lU8pTs".;w]1ž[~+ m`~9fGH"BNR] (ّAnH7$)Yg MU ?y8V`ip@*<]ަӤhcjEʸq+ChT QPjy5 ].HP0|<"S%?FU㐈ň)$sHf z27Vof(VFTBs`$S3h ko N ye7/te(1nA,'bPR6񮡃 !sP-@yթVN@b41-S:B/A^ȠKn׊C}8A5Fx@)V)!;|,BWynT@3IdPDrban=H/&W. ,!\pY AUc'Q4h1 PޞaL 8cKu  ZgQl|65KmC:n?_CLJ~8}g;2W6 '= ;R@H*٦94ke eX Zt ^?,l)+N\jL=صxqqÖNb,)sݜ8K[9[ P4[s YP 1-z OZ:Su>9=VXx*C%)N+*[4CN}Yzג8S4u{no/m Kkv:}w2ϸEIM׆֞13 )[5w{{iPiv:w2ϸEI]{>l pbކKbg  tfR@m y0 ו]^TєՎZm>݂N ds,B:Sޜ..`o$xnUI^u`N+j8͜!^5R?<{O#X Z+_Ae6bpG3|X)xtgSσaH&na0"Ïŋ9~~?M%vRu亾{". o&Fr(82uE=6f#>v.Ȁnv '!|؝Sݚ` {y<ɤ27m?=5zh1W%~Gt ؆{~#c'*>099yu;1 ;* iTmGy-'n 8Gzֽ0#y@Ol./־GYш2 7ԡ6||+D$z= F1ڿVKw*${һ`?F J Ҋ4b'[Y?f%(+PË}w7OX'OQ RokO8|b%Cx a5l OUԃun;F=w8Urh ]mݬ"p+UNטWznkn~6wP,z3$( aWwd_GEZSO݉ Uu lx鲚ʑW?q/diu̺387[K^bʕyxXo6 F@iufS X~z}1 ([Lj$ DYrv0?$yxfK>,VZ 0ɦҖϏ(dL6JZiX +<7yp)qf'(x͍:?Ggo *včh?"Ѝ @ ;1ȓ7I؉JL`ُp{BPn;^c%{}JqȎ//KHg< O1`SfΘv;Vr2mI%pLe,|gFK<7YNf7B$A B-> hXuXYe3%QW /Ր|yleKHݖ>M/ž%A-pZT?buaT%Lk Gg+tMua|k8ּX1ݜH6幁ۓBv8Ù>ی$K!'q u'9æZ2Yu7i(lcGDB3xɠb%h؈ib!TS{el)$S-Z}hg Uxi [[ A[b_L ;g38Kv߂ۋtP=-l%Ki & >[/t\ȱnp>BpIJXU9\tVf2kr:qY2` a~,oOhm\@a Ab670u*%HuU@a4cQDe0u=o tSu c~'q(ڹ+Yp8 !K]'%M#acU#Vi4@#&vݛ\r\gtt|ƀp\wr^r\4lpw,zUbi~ : v]Yh$t>WNh 85}a8#CĬ~7egR-³UjO*#\=,aIЙ̭ҥQZdfGVn]Z ϋd ^0v KNa_fǓO҇YEM/qA9J ;4P-.4{MJ9}%UTOӴ4I i~+fn ٽ xC:߶%x"SUf pβ|B J0EyAHU(e:(d4Nh=ʌդ4 Q] r a\@u +BS#0o8 g{LJl;EKGC'nNڣ󋶣AaNIdSkdw98Ŏ$1<\MbJ 2Y +]wg Q9Eӧ4H'SuFÏpM$2umz,:]ῧ} [7\tP맭%wa.,j5kOJ";]G?J4}9WG>Y̠t e> ?MT]}]c Ij9Wǯ)/1%qVj@~uiVʤ5t\(oH Qyy>:wdP଱ %,;`gܑLy8-aL'ՠ3a@O'4x/O%SC.XΞ^$,[zB/@s>sq7vu̍ߟ4IE wdb`,0(JQp &62%~ 1Y̵d;d ]YתT%m-3" TK2J$%S*( z=V47IHX*"q'a^r7S8j^b}>-r=s'*@,ɭs`m"(#rČ?i)q,]+ 7%OspPRuݎ J&F- CL flII)I;h~FHQ-5vĪjpGT<7KD!oe6Y^5n*Hs aaFH@(xGW;mi |\э)K#Z׏3Е8}GsYc 5 R,ן P7P(Ih bӹol>k[ڰB6?; xuX48vS/jy' 7$^W.^92w`*vLf e{MlcwW<_*uxZ3fBFFb^U~b~Rbq~r~QRzfIFi^r~>L~cOf%Amb[xSKQw7? ВNl3A"l)Yf"3w[3:sǏDm^z z| zǬ*T?9;wg.=E& Dv_f[W4ӫ> ןo_Pxy 95.R'?9;,:4L` vQFo[z{  !2rUvld#+OՊ[&Z#^nqG![dwgJZfA=y&K>(8 A<LeWDh 3k4Ӥ )-=aQ% <4*Z 2 xM%ay[zV-e#eqMdV}P'4ɆbȰi(&7$6߅鮅J;ZXbKCG1c|j 6~8$<$lŬi{?}68$U9 UޕxU]OAM6`?em)| %b0|(j nٸn4/J`ߠn/ qfmi-93sܙ~^oMGa-/Z!AqqEEE ,nJY(aGxS$ː?d1&hE*r& qxxUc4с<4U:R~y}'H"$Ô4E51 Chc^ l$=:ƎOLbbs\R=t!B\1u3sG S,'Ϫ&2euE\,H0r_~':d)s`޹" `$eM T'wUC7W<-b' ovoELߪY o*#6yLS324Y`y5_!`<"ԙ)qtX$Ȼ7-oEh-]ΠGSd*T=K2U.[HI3F88W&;yLn8E&hňSpܳ`VD֬023XtLVoկ;.UIbsux16`'OUs4u<]C͒j _s+uM8ao壨cV{uHרr4?$+,C555p'|n]ќL+'KG9ܔw$$AHn͘b+lʊ-lDG=*փgZ4ߗei,{[~+qZ}Uw `X̥>R*%3Q/kR ~J7YYgZY2!ue[K{`KS\䬠U~YMdB}-cb̔~aƬk=5y>|GaWF3ߒ \RzoJDfeA"*b7K郈Q LK P@\1B[`er#Gc8b 1FY|kBђT7\ ( zrƴT>iWZ)j>۸=P^xڑ:zH>4q2_Pn Ў^aJbMojWfsdtV)L9GRчؑ(gr܂߄E>v[L[q  ǣj~&=ÕoIn~$9fNW{h/i0(-<"D_6yjs`eW&-v8ѽQC2ˢ3/%m5_թ:t'RpzZ|ԅ}6Ģ$INOW.)sAZ>RdrNk3ķF;Nٱ1b;qm4˥О]5ʹ'YӨ3{!7 1;G) FGө{`P8BpE`\aT)ziZ~Vh?1UZfɪW>P1;jɶ6^J~͡l6$$lV.L'$yrK։MѓWX1{6{vx'KD,.ڃ3N.ɊiF$c61*V_V" 4z@sr#ӎ>ï!K qx:TKsvmZt0k[NْL}[aP,|ԝJX|KwmpTZڷEwHдd?zs#[8Ô`)3(xHkgŋyƝI)Pnػ6ᖁ\-&{YJzriK>ާG/َgz=m6e:k7stc֑JgtEtJ#dK:I/0xÒ]U*n<KˍP:hduT"ׄɯB +@1-O^[Mܨ`߭OYpxy\䢚(5GwnGI04|8,ҒiG9|SZwUL,vvL$\ob:c<+˕uyۣ}T}U .m zES_t"5t`$`ĥ~ZKݰ;ԓ6LR1]AνujriGg< M2Vb) Qݩ+$=_-;&l>hd7f)xrHFUٵS<0l;d)`%cM# }ϥ[wvPQZާϭR.(V_R~XFq*s%E~ϞD0$g2CH ><t4OB2QGd|g7 I747ޜމ/HQ?o)߼ 'ǎ+B/Hol BV׀ <y }e(gJJDqph @@*JCP^:z#SoK5K/gQ*|18|׀ GkhXjhc:?/rgES%h}to\LsD )=~z hR`65Ѐ'2 cqMzu*Ms|FZ57Eˡ^/d6i[| zk hph,C&㏩EH1Ϯz*dGZcb"Q{˕ ֟gG VO@3"9SZ &GO=ӗBIbB 9jv!@ A"ZXd㰫/Sů[+1'ٸV$4BDeG7=!T},-of8*p O8#@ZɃ%%K}fo B4ƭJD" xQ9Ҷe!5GG"@' 1]$.z_ԢRٹqsPg*csۡ^f;OF4Ɂ$8}Z/M=%D\#hX X+U(&dM耽L=xs&j7<9+NpZ1t_e5g_OQt;\t1t᢮^b ez }%CTء)AtH~ VRHX-Buh Ac[TH;ۮUBKJnrܮf0@&n4P 2 fcbk[ruq[7xϘ^e*S$@yJ13EJ2*vR]~ ̬2KvTV ^ &:` FŬÆnHv8/ ,`Yb=+Wlt Rd0/ ;Z!cL&/3Ŗu k^V" ^R&'^PSF,eCC2QMw]귽YFIʘuchQZz[nAm1VKY']h 5v%'- 䶈"qɟ(ަleF;FqqNw^wnϬ;t㽝\#>Q#V̮ے.ta84rg] *{Rƻ>DfoFنSg}!tS¥_pǐYJ!~>{:ކ !FR51k%0f}5O/ WMnt ?UrZN.JM~E'XI䘥Wk'Hib*ۿ 70n^e6 uE.I@H "BsQ}cRvp'âH-+.79EU+gWUhs>ٶP?qZi~:;_x*KQ܌W[VJEiq‹IKP~jd>οFG$۹_5_3!hv8ӷĞzśy~t;.亐еlB(&10cf5{K@;gnVfE`؛4Z3"{C3k: n:% cS͎#ӨϪcPtP:vZW'm5}tX-ld5V V\5"WJ3U,S^5 )}Xs!9ϟ@ϊ"e4Te,dZgKe\'Y' )Pn)m$H,4-ڱxImͼ4dg{07jlrUlai(MGGG4a*?4lP=WwZ<& .+T)=:ڞoPzdU F=sS Wc<5CMj͚WY%:355ŸHu]A=G\8>~D_nf6Ax[[a4C-:'߳ |2jl {:Λ<æg.fB 7ϰae&?xiϑWSl%x]N0 SX=;q`745]XT;iB;N'ۿ?;GO'>FqjWq"]콍kK XAwd[C Ҋ;Zڪd[$#I3~Bq/G2!b0_[=J3 škoK=%~D~2L>m xn0ǯSYt(t]+&պvdƙmPIvش.J?CO"c!k0ɴîQ"O5h 3H>nİL*~Rhf5֗FLH3] !čH"5+x4hh pҫ蛰HCw"#V R4n 5@cdqI$Kx^2Σύ!0 +*cFO^ɾ)>k*k⩇^f=odsAW*DؓCM ϼFo0neZ-4 P1@U#ݞ61*ZGc"r5Pedh/D C;[P~Kwʦo=WҶKGyCcsK=&ZK̪j[n`Q:>8Y*m2^4,/N?_ +]!.m-Ԛޝ53޺vswy?غ\;},\s-܆.jg+N羳-\rZ33ٔ g*d3J6ל3ldι=f ?ɹeؙfn<&:©^zO m(*"ӌFN# η9$9C+֘FS«մ")עV/~y~~y {%,FI 6@&.;gOAiáݰ! 02qoA6wNS[lG f/xkx?!##1*?1Sbq~"; xVn6}2S ?q.l}]l-R 7lW%8JhQ˒}DX#T_U՝Sֿh.mbY??%ntqd2$X]6dCB7袥!8 2kO_+F6N[MtRs3zEdnK'ی%7{Ξ>d7E!?_Ŕ/fӌBbw싀PC-Sd*z=l c1Ϙk6dq>fSiQUSRNs14S&++! ,l܃G {xŝk%|‰6GG%l*I;GH)U]T[XHw`5}-I_ SLݢg: 3\,=ՠ2[e5H;IE>JL-s^ S*XF(׺\I1 D.3ƬmWAg ?qEb:$iM~ϥoasR!ZU.4f0{i@ #aZr|l_iv¨JtTkHiIjr!˒(DgnNc=] 5 9oѺ>p{TĆM}#5i7U;6~:\%MZG-< q%T"o6-eoqv־7"-nC߷sfUCK(఺'6 ;Ԧ4G\\}o֟%B v$;{(_]|''-p ΄bz^i!uhݕ1~} 6Jn!G bG6F;o_x*uGjBGFb^U~b~JRRzfIFi^r~>L&)8U$??X?'31eTm.f~*V`eXPZ9ٟS8gr:6py2Q1 exuTn1}~ŰR[ Fܤ҂ZPUQ$1ڋ Q;iDyef|3Vj0TY@d<3}Uֶͥk5"GZGa١ϳ"F#8=%8 3$clڛ:8P+Ety3RU6H%r~6SsJ\l!WSSZ3Lc&Pj *xPHvjՀ  puCj A  2 M}wQEU :V: Xx) ώ(nm aL݆/ S$VC#ӷ:S S똲k5U5AC,b?G+:J^_rMSv9l72L_is{mf6tLt[|PR9KC8^YCz_]5=E:؏ϟBkۛ@*@$E>2˃>_!?pHn--x&M޽H٘vx+Lْ'Es̓BX nAC$Jǖ\WadD2ݴ]wPºrDA2p4J-M[Y۬4skoP;EH+/|{P"9 &˷$$6CSIr\ڞD(xwdG_]mJ]_Û#XY5H'[JҏaŚUZQ3kj'25*RV$YF4s3xsg s7m5 +[,*$0w/%r2j$L{Ͻt){1KwqlQJe:X&Y1eq!] .lŇYf4bPTh$'~pHH!J@iU/" g'adk]DŽ%rmQcSf(ޕ%n; b³DQ֦F^j^0C 2VUņ:Y¶/\xpJͅRR)f:®9&߲b),_6t|?>Niz2't Ѿ/t߱HEJ1,`6% .E ՄCՄW%&eRF2 GF<8 "rqܬK5NY崞5vki1K<C{F)2`3iyσ}A}bܸ_ ѷ}RG|9Y=z^)hhG l:&]aO5 ߷5O>h# 'C QI ^Gѷ[!m8vO/g~)B϶{xrQmdŪ{&Vz f'Ul+H']BP;%6]`۫B2hsjzx 'm;}-z_ =`&-球sj-sp2BrM`8XR/cM<]zoATCmG f0Ɲ芘 w0ޒo}uk}`W힯-ZGp<1,DV`Yl ٳ2tXVz-YZyGKfzW06&kgiGMd,{ agM5ؿ;wa=R/yns'%! .7 Wxx/rPdBSFb^U~b~JRRzfIFi^r~>L&)8U?9(50k h~xUQo0~ũ(AQ6^+4 jJ'HlvUhscZ9}}|[H'P5.@*-V7\$-=-D&DY Tʠ\ ]$_-~^opwj-7q"ygns#8Rɹ,mwgFW9ikҟN粓C ҵ1m!3q/Ѿ9QJhV-tSi>}ڳ>فw@<3AJ:JM9Cy@T"Ռ,KvOG*U>z }=3vn[ܨJVil I8Pݔk<|Dj*G='JD:%mq.ܔ.⫍)yXW3ݜVU  >j:bdLc!VA0 BA(e62p&[WEcc/8u3[tHh`]z#F[9*1Jci7f ,'*N%'X8e3"B!1 qTEn)XgNla u:Q uW\?/BnG"pM&V"u@qPǬ/g<]񹝋󶋢s8얛EG`h: iw+<7Z6{1iCPDaEE'\UoiMCb $IЕExSKk@>kT2BJr1BRrKCXK#eҺI1Y=jAb|U҃*R ƴ|u :ھQj1^ux~d_B:jVYmN+79hYz9fLu[oب0~|X bj!^Uab+k]~$$ɥ%^/H4ea8|k3}|lK5xgfBex "c:Ec}!.j6l=3߂璜-.${r-V[#_,i:B.9G14pܴC mUM_@ ʣ~=ɳѽ̥eZ*zC(h^å!ttRf1vYϤs쁆1kY~.qQn4 v{ы?[Wxqc)GFb^U~bF7I;xYSܸyP<;`kgu6GHym`K[Ifr}Ol@n:Cp,}{2(n)aV,PPJdV 6SrƼ8H#bsW)]@ys)5KFMU{*.j"'eb/W} :xݒ# 5|Ok1$$ CP!x39";Y?W#²X[p ʅԨ P#sHG ZFk`21e[`d4h>  4yZz"4A{$ hOĀmNq#=s uuѤ]W|tK7:r ~f;?SNVYF$A];I? ! g̯\^K 5 V䩊^bs)h%oƚ 9n.Lf-nH5Vø,H/![KDs%-5 We-"LWޒ1󁮩G{n X4εc^p#9<,P;6_ v͙@ݖ/MTW^8F9O"fCh$ut2 9{K._?..|z"OO~Om@>LލOOi+  jl V u,FDp0~S~F>l%楝yd0x+xHƖ,דs-/]']k oK׸^cIani>! -tQY.]A_W@[̋DRU4yDVI̓4ZC}2ucBҲ2(dd>f66-Y )){S\1"X([FBbZ,^ed9, ׯ>;\2&', ˂ /K1;/^`xke5!R)#1*?1S?%BS)=$4I/9?W& :xXmOH%szAѝT艂CUэ=IzPͬb9wwfyyfTwb(382N69-@2ĥ7g*ctzH3{~Twhz"ݰ7vW.^Y6uڎϓ 9HdWyIOL'SS6<:-%"<iځ[8:+ֿ{x hHԞ xUDȌ&Z #&}V_Q{lGb l`Y1$:i%ZMHd&XOhHުvmVR7V {AP+ ]~=5zO֖Vj8{X /WHBSQNIɂhKZ~8 .K#DT) oO1:Nɦ Tux#޼ ;XHTh#Ʌr;ʺ"1xfI#֭u ce>k&jYgyTעǨIپgM=Ny'7_@+ ;еN?1 r}kѻc υQs) (H(rg#I,5mgoK*;4R+oQ.I,  S 7ievƎK?~LIH"$@0C|{8'ixt"-@LJ 6R檼}UBlH/xўK)+k p-jv|nku` =99j$uܱB4fh`*lңե)|vj8<!}11啈lYX\-+/hFf91ױMRU} {'Uxu`/#vLg+ą1!e*ZLGgKxt}g.W^Ȍ(~pRjg#7r Qr2~pZ}b!>cاILeZR 9~+N _ KP+KBј%;m:wU<0.$FL&)8U?9(5DNpFxYmo7l fVZ%wU$ҸIlrA`v)ܒr|t?pr_עAkKp^yž)Z*goEiġkWY%>fxZW:av#dw<3)Eb )^OfS0V*)kGiŕUY"?םqhyG\ZDt%ְ?Ba-VI_yΐ /ߧ׎ST/#ҠXe~aF ik0Kpq($n_^S bi\ K'YeI/V׺`C\EPo+yZ07Bđ VxXn'X}yC.}-&6tR܁ϟ{|s*S`_?sjoLfu76^Nۏ0 ]ߘ,Rz 4¿P"~` Zqѣ:Ho}Iie@# xe[ _8?\5̠ԑ~; [ $U%a#!BRI8yrL5hfh y#?IqԄA$Ǚc[_4:q&+_]Rfl:.V]t=o,2n,Aէ z>Puuܥkz( !^t8(}oÕOﺉ3o ڵS Oh #4qYªGͲ4)v?ǐW~k1$;Zk*뢑`HõzY?E?RANHO/ @A2ÎkxMIqBNJ]`DL[19 (mN)aOiT|M jQ]xBU8[mٛn!O?1]vP@P< ٦ ˆp2f1K2[5}ΐ O'N?o}뼭' tyIq 1\2NHdk$4t\4 X={&]ֵ?-M@'~ᡟwI|=:R|׎[ԘZ4+ U0"^Vgeɘ^PP\~]{ًBz>JJS(ߗwJ];_m@1@l L}!P>` .kJ.8dM~tLܘv^)ཽ|b*]nba;a׶8wܾcpv6=uдb1ismVb*üѕ2)֕Y7wtYQ"*ڠ|x"t–>$N/91v1WxB~lpInt|uHTҊ>_aP=Թ4hBY쉇^, OԇbT-(T3IZœ 𗝊םN/9`}0ҭ>-'?(ҤwFb3ۙ]v(̵:GmwpgqUZ)0eZROe]8ʑD^<?:CkHU$BePJ=.@D0S!'i$`83e+#UȢG:PI|N?^ JFRȍ/+琈4 g9y$RoP, xuROdOrJ|y5b_CgS}۱Xn]`=R? 5KMa"4N8HZ EkeƓ\Z{2-Uc&,'gUީlHM\jF;" .ARyZtu^bVE {oW!hz?˿V+xXń6kwoޢ򪨤=Q&m&2v7븦<9s/Q̟J"d^+z?`(Ox=qj`އ#M6:'y6h)oya 0\"cbeܙ7BAڢ?0- g{w"9l̥;^(#rF* exRe~y^́IҩRHކ/;ɱ-#:׉qޏ`ߏߟquK# rtMheL V\Lmcco/\\C,͈_mu!3N:Y躡k{ڝa9B|ȠӨ4=H?DZp/1^]x/y݁fG>o/uߕh"<&q6<άԇ::۪̚pZ|8Y8_ e/q.r\X?--/I̒4M:5V:^.+M!d~聩>ºyҡ?4RLLEqzfmq< !̰U@2~3 q}{,1V ˱l!HU̷T!}$@hBbAV)!҉Ң(p0.|ZB>OL-,PXSO`y.zqKx+lU\x-]lrwp~m>gGF(Y,w41Xmz Q4oTvhOp&z4@TN?pet$4Jp gm)$u7TTn@U3qh=-4h_:5Wu0BAԚ'/_ lOD%Y8)xGi q~3~s^ ̲b-:U!wyBJ) 9(<\ 43i=b` a8wxM5?K3êsqQ׾bW) 7$i˻QU N=ƙ%t Q6qIRMol kF**жwkڦ5n fXuآO*L Ufψ3pi3cwHYGY/"߱N{;aphwdSkMt3[\kߌqx9X n пx2(Cc 1ʪHz~bmQ)~!?2$+l¨r\ %$Yn1mZ4Y1+apf5'4kS=hdXfIk>KV8n4 F˝7c4%ۑ(A{Urnk[>Qn ڭKzÕ3n§&'*EW_}߂@݆ۢ5~BLL_0l @LZ&ǡN,ފ;+GahNcIQ TV9-̷E*Bcy‰FCH{Tܫ`pٽ $edK,mtS<{^h h=('4NOkWn;vFς-cbfuv=ʭI-bV%-> !]$eJ=U|P)AfmF^oi%+sIe|3clSpA_s 6u&:Xx-BE .y,*HQ=C₻p[WS 50ms debounce). const notifyFileTTL = 200 * time.Millisecond ^'RNotifyWatcherHooks() { var notifyWatcher *fsnotify.Watcher instanceId := "@" + 10) localNotifyDirPath := filepath.Join(app.DataDir(), LocalNotifyDirName) settingsFile := filepath.Join(localNotifyDirPath, "settings"+instanceId) collectionsFile := filepath.Join(localNotifyDirPath, "collections"+instanceId) // init app.OnBootst- J(&hook.Handler[*BootstrapEvent]{ Id: systemHookIdNotifyWatcher, Func: -" err := e.Next() if notifyWatcher != nil { _ = notifyWatcher.Close() } notifyWatcher, err = createNotifyDirWatcher(e.App, instanceId, localNotifyDirPath^"Notify dir watcher failure.", "error", err) } return nil }, Priority: -998, }) // cleanup app.OnTerminate().Bind(&hook.Handler[*TerminateEvent]{ Id: systemHookIdNotifyWatcher, Func: func(e *TerminateEvent) error { if notifyWatcher != nil { _ = notifyWatcher.Close() } _ = os.Remove(settingsFile) _ = os.Remove(collectionsFile) return e.Next() }, Priority: -998, }) // --------------------------------------------------------------- settingsNotify := func(e *ZModelEvent) error { err := e.Next() if err != nil || e.Model.PK() != paramsKeySettingsKif notifyWatcher != nil { if err := os.WriteFile(settingsFile, nil, 0644-]"Failed to write watcher file", "error", err, "file", settingsFile) } time.AfterFunc(notifyFileTTL, func() { _ = os.Remove(settingsFile) })! app.OnModelAfterCreateSuccess(paramsTable).Bind(&hook.Handler[*ModelEvent]{ Id: systemHookIdNotifyWatcher, Func:  settingsNotify, Priority: 999, }) app.OnModelAfterUpdateSuccess(paramsTable).Bind(&hook.Handler[*ModelEvent]{ Id:  systemHookIdNotifyWatcher, Func: settingsNotify, Priority: 999, }) // ---------------------------------------------<------------------ collectionsNotify := func(e *Collection-GNif notifyWatcher != nil { if err := os.WriteFile(collectionsFile, nil, 0644-]"Failed to write watcher file", "error", err, "file", collectionsFile) } time.AfterFunc(notifyFileTTL, func() { _ = os.Remove(collectionsFile) })! app.OnCollectionAfterCreateSuccess().Bind(&hook.Handler[*CollectionEvent]{ Id: systemHookIdNotifyWatcher, Func:  collectionsNotify, Priority: 999, }) app.OnCollectionAfterUpdateSuccess().Bind(&hook.Handler[*CollectionEvent]{ Id:  systemHookIdNotifyWatcher, Func: collectionsNotify, Priority: 999, }) app.OnCollectionAfterDeleteSuccess().Bind(&hook.Handler[*CollectionEvent]{ Id: systemHookIdNotifyWatcher, Func: collectionsNotify, Priority: 999, }) } func createNotifyDirWatcher(app App, instanceId string, localNotifyDirPath string) (*fsnotify.Watcher, error) { // create the notNify dir (if not already) err := os.MkdirAll(localNotifyDirPath, os.ModePerm) a return nil,@"Jcreate a notify dir: %w", err) } watcher, err := fsnotify.NewWatcher() a return nil,@"Ninit notify dir watcher: %w", err) } err = watcher.Add(localNotifyDirPath) a_ = watcher.Close() return nil, fmt.Errorf("unable to watch notify dir: %w", err) } var debounceTimer *time.Timer stopDebounceTimer := func() { if debounceTimer != nil { debounceTimer.Stop() debounceTimer = nil } } // watch go func() { defer stopDebounceTimer() for { select { case event, ok := <-watcher.Events: if !ok { return } // modified from within the current app instance or cleanup event if strings.HasSuffix(event.Name, instanceId) || event.Has(fsnotify.Remove) || !app.IsBootstrapped() { continue } stopDebounceTimer() debounceTimer = time.AfterFunc(50*time.Millisecond, func() { filename := filepath.Base(event.Name) // settings changed if strings.HasPrefix(filename, "settings@") { app.Logger().Debug("Reloading settings after notify event") err := app.ReloadSettings()  app.Logger().Warn("Failed to reload app settings after notify", "error", err) } return } // collections changed if strings.HasPrefix(filename, "collections@") { app.Logger().Debug("Reloading cached collections after n=otify event") err := app.ReloadCachedCollections()  app.Logger().Warn("Failed to reload cached collections after notify", "error", err) } return } }) ca5se err, ok := <-watcher.Errors: if app.IsDev() &&%vcolor.Red("Notify dir watch error:", err) } if !ok { return } } } }() return watcher, err } -gxWnb+ *%$M˖M>4HVH"L˥%55ЇI͐_:='hzڟof\WzJ*z*|s ڭNl3^uA:߶|#5SLicY9b;ʹ괗wD$+}omV 6Ⱥio+V&4Lv{RX]ٙdJxFyZ7-xuP.CYFY!-ݐz\lt]&0i&I꺊㶈^\%yt:]ՙA'l҉⹂Fps`VBr,,4N}VІql$Hŧ  ҢNA!p`I $/*&/+(t F\:[$.Iظz-L8^Iz(<%A?Q|]o4 ):ajS3`QDŽr!n]e|R!6K!-GtFƗr,}~2B3RNΨR `=C /.G*ic\JH=]|jM`!c@j&Oj p`#|gzN4N"9=~w¹AB"\`+$ҍoT1%.{Nn &Zy5F>W<ɝsK }C:Mf+U% {E8Zsu ΎܮcK}l}Ǯ$TȽ"zgR\: Yt2 #NСtHCڮq$ytR:$AuTE㫢tpjCf U\kBI!3GK+(3L|A/f_c '7Wzlշ'tYOUNj7%!)զ׬N ·Q=1W}iJYRDGI<,TU#=)'?/GqH*-g^l[& O:y:dYO3]Ti&WtvȈu 2^ab"&φsp%*)GbGnqбSkCXX# ϋ|>#lWO熹* WWmc;hZ2F|ǵ|!غ~m]N rI-;pkBݲY9#ܑ,gݥ5dWM5%SyB˯*2*T㹡U*\Tgiet, Y5'mz% nSuY v!͈oq7f6Gޡaz 3S`7vԼ6k~*OD qw(ڭFN s1vt|޿uoouzzN 0 { r.updateQueryWithDeduplicateConstraint(query) for _, join := range r.joins { query.LeftJoin( (join.TableName + " " + join.TableAlias), join.On, ) } } // note: for now the joins are not applied for multi-match conditions to avoid excessive checks if len(r.listRuleJoins) > 0 { for _, join := range r.listRuleJoins { err := r.updateQueryWithCollectionListRule(join.collection, join.tableAlias, query) if err != nil { return err } } } return nil } func (r *RecordFieldResolver) updateQueryWithCollectionListRule(c *Collection, tableAlias string, query *dbx.SelectQuery) error { if r.allowHiddenFields || c == nil || c.ListRule == nil || *c.ListRule == "" { return nil } cloneR := *r cloneR.joins = []*search.Join{} cloneR.baseCollection = c cloneR.baseCollectionAlias = tableAlias cloneR.allowHiddenFields = true cloneR.joinAliasSuffix = security.PseudorandomString(8) // The extra "id='' || (\nRULE\n)" concatenated part on its own // doesn't make much sense because all records are required to have an id, // but it is necessary to properly resolve client-side filters when // referencing missing relations (the "\n" is for leading and trailing comments). // // Consider the client-side filter: "a.name != '' || b.name != ''", // where both "a" and "b" ref collections have non-empty ListRule. // Without the empty check the query will always evaluate to FALSE // when one of the "a" or "b" relation fields are empty, // even if for example "a.name != ''" is true. expr, err := search.FilterData("id='' || (\n" + *c.ListRule + "\n)").BuildExpr(&cloneR) if err != nil { return fmt.Errorf("failed to build %q ListRule join subquery filter expression: %w", c.Name, err) } // Bind the extra rule expression at the top query level for performance and security reasons // (it is more strict and minimizes the risk of data disclosure from a side-channel attack). // // @todo Investigate with the refactoring if there is a way to group it // together with the client-side constraint that invoked it and benchmark // it with many (tag.name="1"||...) like statements to evaluate the impact of applying the check many times. // If not feasible - document it as caveat and maybe add --dev log. query.AndWhere(expr) if len(cloneR.joins) > 0 { r.updateQueryWithDeduplicateConstraint(query) for _, j := range cloneR.joins { query.LeftJoin( (j.TableName + " " + j.TableAlias), j.On, ) } } return nil } func (r *RecordFieldResolver) updateQueryWithDeduplicateConstraint(query *dbx.SelectQuery) { query.Distinct(true) // @todo Research better options for generic rows deduplication. // // Disable the GROUP BY conditional checks for now since it prevents // proper utilization of ORDER BY indexes (and maybe others) // (https://github.com/hanzoai/base/discussions/7461) // info := query.Info() // if info.Distinct { // return // } // // already has the group by registered // var groupByCol = r.baseCollection.Name // if r.baseCollectionAlias != "" { // groupByCol = r.baseCollectionAlias // } // groupByCol += ".id" // if len(info.GroupBy) > 0 && info.GroupBy[0] == groupByCol { // return // } // // when deemed safe (GROUP BY could have different execution order compared to DISTINCT), // // prefer GROUP BY to deduplicate only on the id field instead of all columns // // so that the size of a single row wouldn't matter that much // if preferGroupBy(info, groupByCol) { // query.GroupBy(groupByCol) // } else { // query.Distinct(true) // } } func preferGroupBy(info *dbx.QueryInfo, fullUnquotedGroupByCol string) bool { if len(info.GroupBy) != 0 { return false } if info.Having != nil { return false } // dbx fallbacks to * if not set if len(info.Selects) == 0 { return true } if len(info.Selects) != 1 { return false } identifier := info.Selects[0] if identifier == "*" || identifier == fullUnquotedGroupByCol { return true } // try again as direct col match in an unquoted column format identifier = inflector.Columnify(identifier) if identifier == fullUnquotedGroupByCol { return true } // remains table.* to check // (aliased columns for now are ignored as they could be represented by expressions) if !strings.HasSuffix(identifier, ".*") { return false } return strings.HasPrefix(fullUnquotedGroupByCol, strings.TrimSuffix(identifier, "*")) } // Resolve implements `search.FieldResolver` interface. // // Example of some resolvable fieldName formats: // // id // someSelect.each // project.screen.status // screen.project_via_prototype.name // @request.context // @request.method // @request.query.filter // @request.headers.x_token // @request.auth.someRelation.name // @request.body.someRelation.name // @request.body.someField // @request.body.someSelect:each // @request.body.someField:isset // @collection.product.name func (r *RecordFieldResolver) Resolve(fieldName string) (*search.ResolverResult, error) { return parseAndRun(fieldName, r) } func (r *RecordFieldResolver) resolveStaticRequestField(path ...string) (*search.ResolverResult, error) { if len(path) == 0 { return nil, errors.New("at least one path key should be provided") } lastProp, modifier, err := splitModifier(path[len(path)-1]) if err != nil { return nil, err } path[len(path)-1] = lastProp // extract value resultVal, err := extractNestedVal(r.staticRequestInfo, path...) if err != nil { r.app.Logger().Debug("resolveStaticRequestField graceful fallback", "error", err.Error()) } if modifier == issetModifier { if err != nil { return &search.ResolverResult{Identifier: "FALSE"}, nil } return &search.ResolverResult{Identifier: "TRUE"}, nil } // note: we are ignoring the error because requestInfo is dynamic // and some of the lookup keys may not be defined for the request switch v := resultVal.(type) { case nil: // no further processing is needed... case string: // check if it is a number field and explicitly try to cast to // float in case of a numeric string value was used // (this usually the case when the data is from a multipart/form-data request) field := r.baseCollection.Fields.GetByName(path[len(path)-1]) if field != nil && field.Type() == FieldTypeNumber { if nv, err := strconv.ParseFloat(v, 64); err == nil { resultVal = nv } } // otherwise - no further processing is needed... case bool, int, int8, int16, int32, int64, uint, uint8, uint16, uint32, uint64, float32, float64: // no further processing is needed... default: // non-plain value // try casting to string (in case for example fmt.Stringer is implemented) val, castErr := cast.ToStringE(v) // if that doesn't work, try encoding it if castErr != nil { encoded, jsonErr := json.Marshal(v) if jsonErr == nil { val = string(encoded) } } resultVal = val } // unsupported modifier // @todo consider deprecating with the introduction of filter functions if modifier != "" && modifier != lowerModifier { return nil, fmt.Errorf("invalid modifier sequence %s:%s", lastProp, modifier) } // no need to wrap as placeholder if we already know that it is null if resultVal == nil { return &search.ResolverResult{Identifier: "NULL"}, nil } placeholder := "f" + security.PseudorandomString(10) // @todo consider deprecating with the introduction of filter functions if modifier == lowerModifier { return &search.ResolverResult{ Identifier: "LOWER({:" + placeholder + "})", Params: dbx.Params{placeholder: resultVal}, }, nil } return &search.ResolverResult{ Identifier: "{:" + placeholder + "}", Params: dbx.Params{placeholder: resultVal}, }, nil } func (r *RecordFieldResolver) loadCollection(collectionNameOrId string) (*Collection, error) { if collectionNameOrId == r.baseCollection.Name || collectionNameOrId == r.baseCollection.Id { return r.baseCollection, nil } return getCollectionByModelOrIdentifier(r.app, collectionNameOrId) } func (r *RecordFieldResolver) registerJoin(tableName string, tableAlias string, on dbx.Expression) error { newJoin := &search.Join{ TableName: tableName, TableAlias: tableAlias, On: on, } // (see updateQueryWithCollectionListRule) if !r.allowHiddenFields { c, _ := r.loadCollection(tableName) // ignore non-collections since the table name could be an expression (e.g. json) or some other subquery if c != nil { // treat all fields as if they are hidden if c.ListRule == nil { return fmt.Errorf("%q fields can be accessed only when allowHiddenFields is enabled or by superusers", c.Name) } r.registerRuleJoin(c, newJoin.TableAlias) } } // replace existing join for i, j := range r.joins { if j.TableAlias == newJoin.TableAlias { r.joins[i] = newJoin return nil } } // register new join r.joins = append(r.joins, newJoin) return nil } func (r *RecordFieldResolver) registerRuleJoin(collection *Collection, tableAlias string) { // replace existing for i, j := range r.listRuleJoins { if j.tableAlias == tableAlias { r.listRuleJoins[i].collection = collection return } } // register new r.listRuleJoins = append(r.listRuleJoins, ruleJoin{collection, tableAlias}) } type mapExtractor interface { AsMap() map[string]any } func extractNestedVal(rawData any, keys ...string) (any, error) { if len(keys) == 0 { return nil, errors.New("at least one key should be provided") } switch m := rawData.(type) { // maps case map[string]any: return mapVal(m, keys...) case map[string]string: return mapVal(m, keys...) case map[string]bool: return mapVal(m, keys...) case map[string]float32: return mapVal(m, keys...) case map[string]float64: return mapVal(m, keys...) case map[string]int: return mapVal(m, keys...) case map[string]int8: return mapVal(m, keys...) case map[string]int16: return mapVal(m, keys...) case map[string]int32: return mapVal(m, keys...) case map[string]int64: return mapVal(m, keys...) case map[string]uint: return mapVal(m, keys...) case map[string]uint8: return mapVal(m, keys...) case map[string]uint16: return mapVal(m, keys...) case map[string]uint32: return mapVal(m, keys...) case map[string]uint64: return mapVal(m, keys...) case mapExtractor: return mapVal(m.AsMap(), keys...) case types.JSONRaw: var raw any err := json.Unmarshal(m, &raw) if err != nil { return nil, fmt.Errorf("failed to unmarshal raw JSON in order extract nested value from: %w", err) } return extractNestedVal(raw, keys...) // slices case []string: return arrVal(m, keys...) case []bool: return arrVal(m, keys...) case []float32: return arrVal(m, keys...) case []float64: return arrVal(m, keys...) case []int: return arrVal(m, keys...) case []int8: return arrVal(m, keys...) case []int16: return arrVal(m, keys...) case []int32: return arrVal(m, keys...) case []int64: return arrVal(m, keys...) case []uint: return arrVal(m, keys...) case []uint8: return arrVal(m, keys...) case []uint16: return arrVal(m, keys...) case []uint32: return arrVal(m, keys...) case []uint64: return arrVal(m, keys...) case []mapExtractor: extracted := make([]any, len(m)) for i, v := range m { extracted[i] = v.AsMap() } return arrVal(extracted, keys...) case []any: return arrVal(m, keys...) case []types.JSONRaw: return arrVal(m, keys...) default: return nil, fmt.Errorf("expected map or array, got %#v", rawData) } } func mapVal[T any](m map[string]T, keys ...string) (any, error) { result, ok := m[keys[0]] if !ok { return nil, fmt.Errorf("invalid key path - missing key %q", keys[0]) } // end key reached if len(keys) == 1 { return result, nil } return extractNestedVal(result, keys[1:]...) } func arrVal[T any](m []T, keys ...string) (any, error) { idx, err := strconv.Atoi(keys[0]) if err != nil || idx < 0 || idx >= len(m) { return nil, fmt.Errorf("invalid key path - invalid or missing array index %q", keys[0]) } result := m[idx] // end key reached if len(keys) == 1 { return result, nil } return extractNestedVal(result, keys[1:]...) } func splitModifier(combined string) (string, string, error) { parts := strings.Split(combined, ":") if len(parts) != 2 { return combined, "", nil } // validate modifier switch parts[1] { case issetModifier, eachModifier, lengthModifier, lowerModifier, changedModifier: return parts[0], parts[1], nil } return "", "", fmt.Errorf("unknown modifier in %q", combined) } wpV0xuR=O0_q*) H P\RN[DR޻BD CTZ e )S{ΨUXv\fZ°bYZ8m{e 8lA$K҄NJAdm6JiMP)A4 Kb@Np5C'!PwK쯷?5ktN*,Y{{ʉ!W9"i5_"9:#!E\M$yMN4Wڗi*4a١=!s⎳rFY-j/b#3s8PgBSxkekb`W49F} xphpackage core import ( "encoding/json" "errors" "fmt" "reflect" "regexp" "strconv" "strings" "github.com/hanzoai/dbx" "github.com/hanzoai/base/tools/dbutils" "github.com/hanzoai/base/tools/inflector" "github.com/hanzoai/base/tools/list" "github.com/hanzoai/base/tools/search" "github.com/hanzoai/base/tools/security" "github.com/spf13/cast" ) // maxNestedRels defines the max allowed nested relations depth. const maxNestedRels = 6 // list of auth filter fields that don't require join with the auth // collection or any other extra checks to be resolved. var plainRequestAuthFields = map[string]struct{}{ "@request.auth." + FieldNameId: {}, "@request.auth." + FieldNameCollectionId: {}, "@request.auth." + FieldNameCollectionName: {}, "@request.auth." + FieldNameEmail: {}, "@request.auth." + FieldNameEmailVisibility: {}, "@request.auth." + FieldNameVerified: {}, } // parseAndRun starts a new one-off RecordFieldResolver.Resolve execution. func parseAndRun(fieldName string, resolver *RecordFieldResolver) (*search.ResolverResult, error) { r := &runner{ fieldName: fieldName, resolver: resolver, } return r.run() } type runner struct { used bool // indicates whether the runner was already executed resolver *RecordFieldResolver // resolver is the shared expression fields resolver fieldName string // the name of the single field expression the runner is responsible for // shared processing state // --------------------------------------------------------------- activeProps []string // holds the active props that remains to be processed activeCollectionName string // the last used collection name activeTableAlias string // the last used table alias nullifyMisingField bool // indicating whether to return null on missing field or return an error withMultiMatch bool // indicates whether to attach a MultiMatchSubquery condition to the ResolverResult multiMatchActiveTableAlias string // the last used multi-match table alias multiMatch *search.MultiMatchSubquery // the multi-match subquery expression generated from the fieldName } func (r *runner) run() (*search.ResolverResult, error) { if r.used { return nil, errors.New("the runner was already used") } if len(r.resolver.allowedFields) > 0 && !list.ExistInSliceWithRegex(r.fieldName, r.resolver.allowedFields) { return nil, fmt.Errorf("failed to resolve field %q", r.fieldName) } defer func() { r.used = true }() r.prepare() // check for @collection field (aka. non-relational join) // must be in the format "@collection.COLLECTION_NAME.FIELD[.FIELD2....]" if r.activeProps[0] == "@collection" { return r.processCollectionField() } if r.activeProps[0] == "@request" { // @todo consider returning an error instead? if r.resolver.requestInfo == nil { return &search.ResolverResult{Identifier: "NULL"}, nil } if strings.HasPrefix(r.fieldName, "@request.auth.") { return r.processRequestAuthField() } totalProps := len(r.activeProps) if strings.HasPrefix(r.fieldName, "@request.body.") && totalProps > 2 { name, modifier, err := splitModifier(r.activeProps[2]) if err != nil { return nil, err } bodyField := r.resolver.baseCollection.Fields.GetByName(name) if bodyField == nil { return r.resolver.resolveStaticRequestField(r.activeProps[1:]...) } // check for body relation field if bodyField.Type() == FieldTypeRelation && totalProps > 3 { return r.processRequestBodyRelationField(bodyField) } if totalProps == 3 { // aka. last prop switch modifier { case eachModifier: return r.processRequestBodyEachModifier(bodyField) case lengthModifier: return r.processRequestBodyLengthModifier(bodyField) case lowerModifier: return r.processRequestBodyLowerModifier(bodyField) case changedModifier: return r.processRequestBodyChangedModifier(bodyField) } } } // some other @request.* static field return r.resolver.resolveStaticRequestField(r.activeProps[1:]...) } // regular field return r.processActiveProps() } func (r *runner) prepare() { r.activeProps = strings.Split(r.fieldName, ".") r.activeCollectionName = r.resolver.baseCollection.Name if r.resolver.baseCollectionAlias == "" { r.activeTableAlias = inflector.Columnify(r.activeCollectionName) } else { r.activeTableAlias = r.resolver.baseCollectionAlias } // enable the ignore flag for missing @request.* fields for backward // compatibility and consistency with all @request.* filter fields and types r.nullifyMisingField = r.activeProps[0] == "@request" // prepare a multi-match subquery r.multiMatch = &search.MultiMatchSubquery{ TargetTableAlias: r.activeTableAlias, Params: dbx.Params{}, } r.multiMatch.FromTableName = inflector.Columnify(r.activeCollectionName) r.multiMatch.FromTableAlias = "__mm_" + r.activeTableAlias r.multiMatchActiveTableAlias = r.multiMatch.FromTableAlias r.withMultiMatch = false } func (r *runner) processCollectionField() (*search.ResolverResult, error) { if len(r.activeProps) < 3 { return nil, fmt.Errorf("invalid @collection field path in %q", r.fieldName) } // nameOrId or nameOrId:alias collectionParts := strings.SplitN(r.activeProps[1], ":", 2) collection, err := r.resolver.loadCollection(collectionParts[0]) if err != nil { return nil, fmt.Errorf("failed to load collection %q from field path %q", r.activeProps[1], r.fieldName) } r.activeCollectionName = collection.Name if len(collectionParts) == 2 && collectionParts[1] != "" { r.activeTableAlias = inflector.Columnify("__collection_alias_"+collectionParts[1]) + r.resolver.joinAliasSuffix } else { r.activeTableAlias = inflector.Columnify("__collection_"+r.activeCollectionName) + r.resolver.joinAliasSuffix } r.withMultiMatch = true // join the collection to the main query err = r.resolver.registerJoin(inflector.Columnify(collection.Name), r.activeTableAlias, nil) if err != nil { return nil, err } // join the collection to the multi-match subquery r.multiMatchActiveTableAlias = "__mm_" + r.activeTableAlias r.multiMatch.Joins = append(r.multiMatch.Joins, &search.Join{ TableName: inflector.Columnify(collection.Name), TableAlias: r.multiMatchActiveTableAlias, }) // leave only the collection fields // aka. @collection.someCollection.fieldA.fieldB -> fieldA.fieldB r.activeProps = r.activeProps[2:] return r.processActiveProps() } func (r *runner) processRequestAuthField() (*search.ResolverResult, error) { if r.resolver.requestInfo == nil || r.resolver.requestInfo.Auth == nil || r.resolver.requestInfo.Auth.Collection() == nil { return &search.ResolverResult{Identifier: "NULL"}, nil } // plain auth field // --- if _, ok := plainRequestAuthFields[r.fieldName]; ok { return r.resolver.resolveStaticRequestField(r.activeProps[1:]...) } // resolve the auth collection field // --- collection := r.resolver.requestInfo.Auth.Collection() r.activeCollectionName = collection.Name r.activeTableAlias = "__auth_" + inflector.Columnify(r.activeCollectionName) + r.resolver.joinAliasSuffix // join the auth collection to the main query err := r.resolver.registerJoin( inflector.Columnify(r.activeCollectionName), r.activeTableAlias, dbx.HashExp{ // aka. __auth_users.id = :userId (r.activeTableAlias + ".id"): r.resolver.requestInfo.Auth.Id, }, ) if err != nil { return nil, err } // join the auth collection to the multi-match subquery r.multiMatchActiveTableAlias = "__mm_" + r.activeTableAlias r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: inflector.Columnify(r.activeCollectionName), TableAlias: r.multiMatchActiveTableAlias, On: dbx.HashExp{ (r.multiMatchActiveTableAlias + ".id"): r.resolver.requestInfo.Auth.Id, }, }, ) // leave only the auth relation fields // aka. @request.auth.fieldA.fieldB -> fieldA.fieldB r.activeProps = r.activeProps[2:] return r.processActiveProps() } // note: nil value is returned as empty slice func toSlice(value any) []any { if value == nil { return []any{} } rv := reflect.ValueOf(value) kind := rv.Kind() if kind != reflect.Slice && kind != reflect.Array { return []any{value} } rvLen := rv.Len() result := make([]interface{}, rvLen) for i := 0; i < rvLen; i++ { result[i] = rv.Index(i).Interface() } return result } func (r *runner) processRequestBodyChangedModifier(bodyField Field) (*search.ResolverResult, error) { name := bodyField.GetName() alias := search.FilterData(fmt.Sprintf("@request.body.%s:isset = true && @request.body.%s != %s", name, name, name)) aliasExpr, err := alias.BuildExpr(r.resolver) if err != nil { return nil, err } placeholder := "@changed@" + name + security.PseudorandomString(8) result := &search.ResolverResult{ Identifier: placeholder, NullFallback: search.NullFallbackDisabled, AfterBuild: func(expr dbx.Expression) dbx.Expression { return &replaceWithExpression{ placeholder: placeholder, old: expr, new: aliasExpr, } }, } return result, nil } func (r *runner) processRequestBodyLowerModifier(bodyField Field) (*search.ResolverResult, error) { rawValue := cast.ToString(r.resolver.requestInfo.Body[bodyField.GetName()]) placeholder := "infoLower" + bodyField.GetName() + security.PseudorandomString(8) result := &search.ResolverResult{ Identifier: "LOWER({:" + placeholder + "})", Params: dbx.Params{placeholder: rawValue}, } return result, nil } func (r *runner) processRequestBodyLengthModifier(bodyField Field) (*search.ResolverResult, error) { if _, ok := bodyField.(MultiValuer); !ok { return nil, fmt.Errorf("field %q doesn't support multivalue operations", bodyField.GetName()) } bodyItems := toSlice(r.resolver.requestInfo.Body[bodyField.GetName()]) result := &search.ResolverResult{ Identifier: strconv.Itoa(len(bodyItems)), } return result, nil } func (r *runner) processRequestBodyEachModifier(bodyField Field) (*search.ResolverResult, error) { multiValuer, ok := bodyField.(MultiValuer) if !ok { return nil, fmt.Errorf("field %q doesn't support multivalue operations", bodyField.GetName()) } bodyItems := toSlice(r.resolver.requestInfo.Body[bodyField.GetName()]) bodyItemsRaw, err := json.Marshal(bodyItems) if err != nil { return nil, fmt.Errorf("cannot serialize the data for field %q", r.activeProps[2]) } placeholder := "dataEach" + security.PseudorandomString(8) cleanFieldName := inflector.Columnify(bodyField.GetName()) jeTable := fmt.Sprintf("json_each({:%s})", placeholder) jeAlias := "__dataEach_je_" + cleanFieldName + r.resolver.joinAliasSuffix err = r.resolver.registerJoin(jeTable, jeAlias, nil) if err != nil { return nil, err } result := &search.ResolverResult{ Identifier: fmt.Sprintf("[[%s.value]]", jeAlias), Params: dbx.Params{placeholder: bodyItemsRaw}, } if multiValuer.IsMultiple() { r.withMultiMatch = true } if r.withMultiMatch { placeholder2 := "mm" + placeholder jeTable2 := fmt.Sprintf("json_each({:%s})", placeholder2) jeAlias2 := "__mm_" + jeAlias r.multiMatch.Joins = append(r.multiMatch.Joins, &search.Join{ TableName: jeTable2, TableAlias: jeAlias2, }) r.multiMatch.Params[placeholder2] = bodyItemsRaw r.multiMatch.ValueIdentifier = fmt.Sprintf("[[%s.value]]", jeAlias2) result.MultiMatchSubQuery = r.multiMatch } return result, nil } func (r *runner) processRequestBodyRelationField(bodyField Field) (*search.ResolverResult, error) { relField, ok := bodyField.(*RelationField) if !ok { return nil, fmt.Errorf("failed to initialize data relation field %q", bodyField.GetName()) } dataRelCollection, err := r.resolver.loadCollection(relField.CollectionId) if err != nil { return nil, fmt.Errorf("failed to load collection %q from data field %q", relField.CollectionId, relField.Name) } var dataRelIds []string if r.resolver.requestInfo != nil && len(r.resolver.requestInfo.Body) != 0 { dataRelIds = list.ToUniqueStringSlice(r.resolver.requestInfo.Body[relField.Name]) } if len(dataRelIds) == 0 { return &search.ResolverResult{Identifier: "NULL"}, nil } r.activeCollectionName = dataRelCollection.Name r.activeTableAlias = inflector.Columnify("__data_"+dataRelCollection.Name+"_"+relField.Name) + r.resolver.joinAliasSuffix // join the data rel collection to the main collection err = r.resolver.registerJoin( r.activeCollectionName, r.activeTableAlias, dbx.In( fmt.Sprintf("[[%s.id]]", r.activeTableAlias), list.ToInterfaceSlice(dataRelIds)..., ), ) if err != nil { return nil, err } if relField.IsMultiple() { r.withMultiMatch = true } // join the data rel collection to the multi-match subquery r.multiMatchActiveTableAlias = "__mm_" + r.activeTableAlias r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: r.activeCollectionName, TableAlias: r.multiMatchActiveTableAlias, On: dbx.In( fmt.Sprintf("[[%s.id]]", r.multiMatchActiveTableAlias), list.ToInterfaceSlice(dataRelIds)..., ), }, ) // leave only the data relation fields // aka. @request.body.someRel.fieldA.fieldB -> fieldA.fieldB r.activeProps = r.activeProps[3:] return r.processActiveProps() } var viaRegex = regexp.MustCompile(`^(\w+)_via_(\w+)$`) // @todo refactor and abstract lastProp processing with the support of field plugins func (r *runner) processActiveProps() (*search.ResolverResult, error) { totalProps := len(r.activeProps) for i, prop := range r.activeProps { collection, err := r.resolver.loadCollection(r.activeCollectionName) if err != nil { return nil, fmt.Errorf("failed to resolve field %q", prop) } // last prop if i == totalProps-1 { return r.finalizeActivePropsProcessing(collection, prop, i) } field := collection.Fields.GetByName(prop) if field != nil && field.GetHidden() && !r.resolver.allowHiddenFields { return nil, fmt.Errorf("non-filterable field %q", prop) } // @todo consider moving to the finalizer and converting to "JSONExtractable" interface with optional extra validation for the remaining props? // json or geoPoint field -> treat the rest of the props as json path if field != nil && (field.Type() == FieldTypeJSON || field.Type() == FieldTypeGeoPoint) { var jsonPath strings.Builder for j, p := range r.activeProps[i+1:] { if _, err := strconv.Atoi(p); err == nil { jsonPath.WriteString("[") jsonPath.WriteString(inflector.Columnify(p)) jsonPath.WriteString("]") } else { if j > 0 { jsonPath.WriteString(".") } jsonPath.WriteString(inflector.Columnify(p)) } } jsonPathStr := jsonPath.String() result := &search.ResolverResult{ NullFallback: search.NullFallbackDisabled, Identifier: dbutils.JSONExtract(r.activeTableAlias+"."+inflector.Columnify(prop), jsonPathStr), } if r.withMultiMatch { r.multiMatch.ValueIdentifier = dbutils.JSONExtract(r.multiMatchActiveTableAlias+"."+inflector.Columnify(prop), jsonPathStr) result.MultiMatchSubQuery = r.multiMatch } return result, nil } if i >= maxNestedRels { return nil, fmt.Errorf("max nested relations reached for field %q", prop) } // check for back relation (eg. yourCollection_via_yourRelField) // ----------------------------------------------------------- if field == nil { parts := viaRegex.FindStringSubmatch(prop) if len(parts) != 3 { if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("failed to resolve field %q", prop) } backCollection, err := r.resolver.loadCollection(parts[1]) if err != nil { if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("failed to load back relation field %q collection", prop) } backField := backCollection.Fields.GetByName(parts[2]) if backField == nil { if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("missing back relation field %q", parts[2]) } if backField.Type() != FieldTypeRelation { if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("invalid back relation field %q", parts[2]) } if backField.GetHidden() && !r.resolver.allowHiddenFields { return nil, fmt.Errorf("non-filterable back relation field %q", backField.GetName()) } backRelField, ok := backField.(*RelationField) if !ok { return nil, fmt.Errorf("failed to initialize back relation field %q", backField.GetName()) } if backRelField.CollectionId != collection.Id { // https://github.com/pocketbase/pocketbase/discussions/6590#discussioncomment-12496581 if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("invalid collection reference of a back relation field %q", backField.GetName()) } // join the back relation to the main query // --- cleanProp := inflector.Columnify(prop) cleanBackFieldName := inflector.Columnify(backRelField.Name) newTableAlias := r.activeTableAlias + "_" + cleanProp + r.resolver.joinAliasSuffix newCollectionName := inflector.Columnify(backCollection.Name) isBackRelMultiple := backRelField.IsMultiple() if !isBackRelMultiple { err := r.resolver.registerJoin( newCollectionName, newTableAlias, dbx.NewExp(fmt.Sprintf("[[%s.%s]] = [[%s.id]]", newTableAlias, cleanBackFieldName, r.activeTableAlias)), ) if err != nil { return nil, err } } else { jeAlias := "__je_" + newTableAlias err := r.resolver.registerJoin( newCollectionName, newTableAlias, dbx.NewExp(fmt.Sprintf( "[[%s.id]] IN (SELECT [[%s.value]] FROM %s {{%s}})", r.activeTableAlias, jeAlias, dbutils.JSONEach(newTableAlias+"."+cleanBackFieldName), jeAlias, )), ) if err != nil { return nil, err } } r.activeCollectionName = newCollectionName r.activeTableAlias = newTableAlias // --- // join the back relation to the multi-match subquery // --- if isBackRelMultiple { r.withMultiMatch = true // enable multimatch if not already } else if !r.withMultiMatch { // additionally check if the rel field has a single column unique index; // if not - apply a multi-match check _, hasUniqueIndex := dbutils.FindSingleColumnUniqueIndex(backCollection.Indexes, backRelField.Name) r.withMultiMatch = !hasUniqueIndex } newTableAlias2 := r.multiMatchActiveTableAlias + "_" + cleanProp + r.resolver.joinAliasSuffix if !isBackRelMultiple { r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: newCollectionName, TableAlias: newTableAlias2, On: dbx.NewExp(fmt.Sprintf("[[%s.%s]] = [[%s.id]]", newTableAlias2, cleanBackFieldName, r.multiMatchActiveTableAlias)), }, ) } else { jeAlias2 := "__je_" + newTableAlias2 r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: newCollectionName, TableAlias: newTableAlias2, On: dbx.NewExp(fmt.Sprintf( "[[%s.id]] IN (SELECT [[%s.value]] FROM %s {{%s}})", r.multiMatchActiveTableAlias, jeAlias2, dbutils.JSONEach(newTableAlias2+"."+cleanBackFieldName), jeAlias2, )), }, ) } r.multiMatchActiveTableAlias = newTableAlias2 // --- continue } // ----------------------------------------------------------- // check for direct relation if field.Type() != FieldTypeRelation { return nil, fmt.Errorf("field %q is not a valid relation", prop) } // join the relation to the main query // --- relField, ok := field.(*RelationField) if !ok { return nil, fmt.Errorf("failed to initialize relation field %q", prop) } relCollection, relErr := r.resolver.loadCollection(relField.CollectionId) if relErr != nil { return nil, fmt.Errorf("failed to load field %q collection", prop) } // "id" lookups optimization for single relations to avoid unnecessary joins, // aka. "user.id" and "user" should produce the same query identifier if !relField.IsMultiple() && // the penultimate prop is "id" i == totalProps-2 && r.activeProps[i+1] == FieldNameId { return r.finalizeActivePropsProcessing(collection, relField.Name, i) } cleanFieldName := inflector.Columnify(relField.Name) prefixedFieldName := r.activeTableAlias + "." + cleanFieldName newTableAlias := r.activeTableAlias + "_" + cleanFieldName + r.resolver.joinAliasSuffix newCollectionName := relCollection.Name if !relField.IsMultiple() { err := r.resolver.registerJoin( inflector.Columnify(newCollectionName), newTableAlias, dbx.NewExp(fmt.Sprintf("[[%s.id]] = [[%s]]", newTableAlias, prefixedFieldName)), ) if err != nil { return nil, err } } else { jeAlias := "__je_" + newTableAlias err := r.resolver.registerJoin(dbutils.JSONEach(prefixedFieldName), jeAlias, nil) if err != nil { return nil, err } err = r.resolver.registerJoin( inflector.Columnify(newCollectionName), newTableAlias, dbx.NewExp(fmt.Sprintf("[[%s.id]] = [[%s.value]]", newTableAlias, jeAlias)), ) if err != nil { return nil, err } } r.activeCollectionName = newCollectionName r.activeTableAlias = newTableAlias // --- // join the relation to the multi-match subquery // --- if relField.IsMultiple() { r.withMultiMatch = true // enable multimatch if not already } newTableAlias2 := r.multiMatchActiveTableAlias + "_" + cleanFieldName prefixedFieldName2 := r.multiMatchActiveTableAlias + "." + cleanFieldName if !relField.IsMultiple() { r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: inflector.Columnify(newCollectionName), TableAlias: newTableAlias2, On: dbx.NewExp(fmt.Sprintf("[[%s.id]] = [[%s]]", newTableAlias2, prefixedFieldName2)), }, ) } else { jeAlias2 := r.multiMatchActiveTableAlias + "_" + cleanFieldName + "_je" r.multiMatch.Joins = append( r.multiMatch.Joins, &search.Join{ TableName: dbutils.JSONEach(prefixedFieldName2), TableAlias: jeAlias2, }, &search.Join{ TableName: inflector.Columnify(newCollectionName), TableAlias: newTableAlias2, On: dbx.NewExp(fmt.Sprintf("[[%s.id]] = [[%s.value]]", newTableAlias2, jeAlias2)), }, ) } r.multiMatchActiveTableAlias = newTableAlias2 // --- } return nil, fmt.Errorf("failed to resolve field %q", r.fieldName) } func (r *runner) finalizeActivePropsProcessing(collection *Collection, prop string, propDepth int) (*search.ResolverResult, error) { name, modifier, err := splitModifier(prop) if err != nil { return nil, err } field := collection.Fields.GetByName(name) if field == nil { if r.nullifyMisingField { return &search.ResolverResult{Identifier: "NULL"}, nil } return nil, fmt.Errorf("unknown field %q", name) } if field.GetHidden() && !r.resolver.allowHiddenFields { return nil, fmt.Errorf("non-filterable field %q", name) } multvaluer, isMultivaluer := field.(MultiValuer) cleanFieldName := inflector.Columnify(field.GetName()) // arrayable fields with ":length" modifier // ------------------------------------------------------- if modifier == lengthModifier && isMultivaluer { jePair := r.activeTableAlias + "." + cleanFieldName result := &search.ResolverResult{ Identifier: dbutils.JSONArrayLength(jePair), } if r.withMultiMatch { jePair2 := r.multiMatchActiveTableAlias + "." + cleanFieldName r.multiMatch.ValueIdentifier = dbutils.JSONArrayLength(jePair2) result.MultiMatchSubQuery = r.multiMatch } return result, nil } // arrayable fields with ":each" modifier // ------------------------------------------------------- if modifier == eachModifier && isMultivaluer { jePair := r.activeTableAlias + "." + cleanFieldName jeAlias := "__je_" + r.activeTableAlias + "_" + cleanFieldName + r.resolver.joinAliasSuffix err := r.resolver.registerJoin(dbutils.JSONEach(jePair), jeAlias, nil) if err != nil { return nil, err } result := &search.ResolverResult{ Identifier: fmt.Sprintf("[[%s.value]]", jeAlias), } if multvaluer.IsMultiple() { r.withMultiMatch = true } if r.withMultiMatch { jePair2 := r.multiMatchActiveTableAlias + "." + cleanFieldName jeAlias2 := "__je_" + r.multiMatchActiveTableAlias + "_" + cleanFieldName + r.resolver.joinAliasSuffix r.multiMatch.Joins = append(r.multiMatch.Joins, &search.Join{ TableName: dbutils.JSONEach(jePair2), TableAlias: jeAlias2, }) r.multiMatch.ValueIdentifier = fmt.Sprintf("[[%s.value]]", jeAlias2) result.MultiMatchSubQuery = r.multiMatch } return result, nil } // default // ------------------------------------------------------- result := &search.ResolverResult{ Identifier: "[[" + r.activeTableAlias + "." + cleanFieldName + "]]", } if r.withMultiMatch { r.multiMatch.ValueIdentifier = "[[" + r.multiMatchActiveTableAlias + "." + cleanFieldName + "]]" result.MultiMatchSubQuery = r.multiMatch } // allow querying only auth records with emails marked as public if field.GetName() == FieldNameEmail && !r.resolver.allowHiddenFields && collection.IsAuth() { result.AfterBuild = func(expr dbx.Expression) dbx.Expression { return dbx.Enclose(dbx.And(expr, dbx.NewExp(fmt.Sprintf( "[[%s.%s]] = TRUE", r.activeTableAlias, FieldNameEmailVisibility, )))) } } // wrap in json_extract to ensure that top-level primitives // stored as json work correctly when compared to their SQL equivalent // (https://github.com/hanzoai/base/issues/4068) if field.Type() == FieldTypeJSON { result.NullFallback = search.NullFallbackDisabled result.Identifier = dbutils.JSONExtract(r.activeTableAlias+"."+cleanFieldName, "") if r.withMultiMatch { r.multiMatch.ValueIdentifier = dbutils.JSONExtract(r.multiMatchActiveTableAlias+"."+cleanFieldName, "") } } // account for the ":lower" modifier if modifier == lowerModifier { result.Identifier = "LOWER(" + result.Identifier + ")" if r.withMultiMatch { r.multiMatch.ValueIdentifier = "LOWER(" + r.multiMatch.ValueIdentifier + ")" } } return result, nil } u~xp N{x7s T,x=}۶'ўR0wsRg͖&/#SdHgJ ةZ;w?@0`ݽLq;- Q<-x1a0)+K@Ot64~O'nq jO5)ny,#D `8:id/ sH |Äu;a6"tǟNAic{)*3cͦg#a:I1 ȋ_'mjn$`L@K?6ʯuBi_,hs7& DOe Qt0#߉lۭ) GIpD~|JPupg[<~ ~;; ;<⫖_;#l訲;FXe1&@)%s?C\H`QpOޒEДˑY!qupFNKWX3q$qyw,XpEuJh?lU=Q n/JϘ!}7mGʈbZV$#FR1 ш`ϿLG~r)ϲSZmɒ~g)LR|^p2㏳-gfW8U< }P|X/(rEk}#TwKsg]rE ׍~>"rF!TN0 fI|u2`>ӏ)iQ1T<eQiFN4 `t7ha /OD)3{/Z1a*,I[LV!.cS!,*cGUE9XJZn`Cdr pX " Cw}t#? " 33#"Mp*ʒYh+;@0@2*tBsC{Dl=&@n˟08I;L@8>agAFi l_+|'>>]Gl-G0Hq 7O:pvo!x\] ^~^b}V10Gb )3Fޚ$:xpph@(Qe |oO >c-ۜ*m ޽3!̰%+QNo 02bRH$L7%HQD qһӪ@$Cdo5.2QJjt RˌKU^`*t9Nb)"3r\e7tʢhQ L :11K\)珵}Vd7p_e!`9%1e}"0)>a^ a<0+&oSVkgI<ӈa5ts 02-hgӦF`3mM7 pWG͔եJ?q哉r"`bK?bScMRqA #,1 &"CjԚ نQ+TlDq_pu>^3$l&W2:5G//_7\/ܪrHJ`ƜV,t13+ InWF5)[sGx=UqF:u3JV|#NtP1c|OoQ[ʮnL&R 1,1,+ '5G:7o[ M-.*_y_yׯN/4] }WC }AsߌFqUepN\CBL `n^%jG1QI3DHѸ $=Gopyj=1-h(eJ4÷o>:{q䀵:Ts^80AM$ֱ&'] ֝{c\6ʔz"ɬFc̣(~~|Y ۀK7ij ̢  of]Pau[;2*!Y4ڢƪ8(-f܍fB*V:-[ERڃ @%(&u9vSo`s9;OWX֥ K:K .SbeȩHأY:e8Œsj%~u)زۚ o]htþA(_bD2Q,|ef 7(Z#_DR&$EcjQS7JmLr\86M2`'*4F.;)S|o wt'3n녌UR/oSpWd ";x*Ӊl6$̵0׆|p~s v?7,io(aj]qK]Os0Vڧ׿TߠTPJI]]\5eo\٩@^GeE5]Pe|eU \$_beC¶Nd_}eAhpV$ P5+F,}PwZʵU26k64yɵ ~Tw4-o58[BרSܽhʚvm7lgn\.qE5:eƵKڹHONWvhWvhWh2"߄4oǾ Blz>qm0:FO=ldN]]2_[gMf55q_^x\-rLZFR>Թﱬ~pJ:**>a&6>^* !Ouyn ٦Qf_XfR\={7kuL+s"NJ*= Ȟzp1GӁI❜{ m Dz+賟(v>R#_ؔ?E JO MCRr_^F-~67 ,:Ȑm*r4N$جUeUiQ[pAn9~B$b$WbFI_s'茑-?3R[E[wQkƨ[*@jɖndxED<4Y;2>S0X9y+xkff+Y܉d/$S`=:hvhl"1/h䑇A1g,X>1kJ"M01ۅ_Y˂~f,RoBsi#_)7[~1$(ՖdlEiWZ_="*O aNX~ح(ldbז0wI⢭t+CAW #6'5r.*Bd '[ \ S}$5V.N`KnG!)naIW}+Y'5N/8:?G4Л/;KezʓP>\OUzۑi]'GR >[h2`K<<+3ԁ#ܰ.:LWA\0PNXV@N!q 0c(PpPjR X3Lm8opuN@yAJPWʱ8wI( Sg*wKI@fP TV9ї݈sWvN%`'Ќx@7jɲ:pHTc42 76 JڙLʂ_^YXڢI O :[Y=/NeSBbJ-KR*5™Z[%S,jI&#əC:搀\UIVeZUHUNRUzTKDy Į*9My"[`.j5ąHzNUN Լ©IiyEc̹Ze+]b{{?ƈd3VfXT#;4B-r)sXӵ(#3BXw+; +& GЦ&6895uƩ 7Lњ "}̺"E$'Q,$J$ʪ:spPl#Kff Ss]].{->*Wb˾96ieR|)˪ U@yw#Al:њ}R+7oZNΊn\ic'&:KVeڍ{F5$v۽/U%;:X[UP+- V#k$9Uu`VOjlcI-Ω5k6Ai*ӪUV2Vr5oNBfIRȩ$ > BO{ICq8 /mt3yڏw;P:.-'t&Cv\ܽaMAsoWrc΃+6W`}xJ![CI~W@#X 4p)6erHk9~S7XH_Dh(¢gpWG'e~eҤBEZ\-8B7g֫L}{n>0j_k#5 P@<|>X{~mD[ki6\Jxre+z:I.1/2ҩU1Mj]l7|ܝJK|UmnA8luU&oռ*Glݟu$S19q!NtWdxב˙K ldOV-xTs aw{[C ^zp3g/ S1.\@ωHD]$Mc-ttd<'q/v{;|~>qҎԡ1=d1bt-\qA.@.A|@ y`=po(dx .u@%~d[RJSwb 1݈!5V]7.v-Fd/Q}tC5¨rL춐̱'Gioyh*;./X{/&7"1R/BG)Q\]W#zeҦ-ɟa/1Mr-VɧE8 '08rF?y1be 1,( 3-~ﻲqjh=H>-&@,Q Hx)o4/-}+ TxLe%(d{"$0ssiFCJrҢyd=\e0Cs('Kܨ9ߥ > 뵤>6ZѢRJIFx g.%U8=M7NS/~>z7"/MF&';[ L8*?O*ǽY>LHϡp,iOg4pyE.$HS rN8Cj~i+6 +2F3KyIpNk-4vc@4d f/|kZ1-uV#p3'室0'9QHiHRh(F,eJr>X e_*rP_&͚Zg5ݚ'S9cjN8M~옄ocSc<^G|-}t'QIgeNğ,'K49I(nvDP; 3C!$Vd0Ca(|-zGD0 ?4:=[AYAⓘdo!V<-PXzBiu7ؒ+-eI#kb}|@L\w 4^OCԢ䵬_|]Nq؁("E"AA]F^a4 w)t,?ډK4{IY{4ς0AzR>=&X jRS{PsCϊ({L:q}"%0.Ww/|&L򔚙RQ'ۨÆo!o20G.: .bNnglAt`-F0MCB0jK s:_=rjec`h2 $qJKRZyC'yEmwP + bJ!3Qn@WMW H"8?qAp`y)Nh!=A<&o) v<֛ڪIEU@/Y1W OQjWmlCҶh5+n^/=[zŰE3SQ\?#aDz}-y|Gێꆐw/&g \i(_1ରRNZꁏJάvj?XyZ-~9f1ԳHKw\G?IO8h߲E.awĮ#亖!??Q? HO֫e$~De'A4ր"؜) Mi#2DbiZM/,FUoJg\/#V 4'Ys^rGW%5v s :sfS t,ٌ1!y{s"-:xfɥӧ|J~eOXF%5MEipmgѫ7/ZH+m9FnF|O?(3 P?ԉlVͫr$BCv/7|VQ Wߓx6}~)Njl\!%WV7UvrHQy>]qg&k}5v4r2 ](++-Kf P?~y-[.!'Dl8;?5Cw95P Wƨf)xUkLSgRh|B)lQB5,Z;zR``̩LE_\b63Weeb2,3j65n*f6~LwZZ(6YX|ysS>ve,i[&sZѬ RZۚ4pP89?5LD/|4FD4J"_(R(!nN(9T  e&h1vFNWo AC4RZ ),'%닊t;Ѷe vFKnY^I>mYNϻrӿCOG+\R QRb\yjL8KwϤe$=}T'8<KO1qǴD̂3J%YO:%eۣ9V+g6JZ Ȥh `E~0Uڗx?Od?Ū)e $pJ{m\kK+X8x\B|soc{ gVbh",hb;V wCzJ#|%:A+ w*5<YU>lm~oKDxV>?6i^ESyy_d d.U$=>f5mbc ` NsZ>Q<޷yn~w!Na ɫ|l[<[ZVr}!״5/aXz(=#&WΆ|Bbo`Y0n.v1zAp- sC7 bwC`\Ҏ0Xi;`\i. }1~kW@7X8D^p'qd`,XK @n)*)٭96"t6/0dشX̭zO zZNZbor:N̶zvBYDkoZh7hI2$mj4lO!iXlxd WrKGRC/@*@vInkc$yZ6/dsHmηStZ1pfB- ?x}rG3%DIH:vc)DHybA7F7A q|[ݺ $yf҃HV%3+++3+jKeټꍖ{˸,_u1.Ӭ|K]TPUeE&31Kggcn^C%mo]'y&MVw5h8.g._G߮klU&ůe=JGV|%~(=~UUkod'Yeueyuwz `]5Z5,纍p=|Glo?zNURDݔUR"U˙VLi&e溪:g$Wu4Ztsu*+׺hj츏FeFͫ$08)j _Pyh,ժfܫʃmغQmU$bQ/_WzSH##< :9~ug.2F={UtG*u.8!Gcs2.ոV%Y*|ISZWp민2d+|5j „[B}9x@δ̯Mo>, ҇*,v(4Gu>QWwHOmT4}οůP{!&[ۦk={  WpsȮ-kuMGYv8\lѝZDA3XhKGm _de\ɿ}⍆5E NKxgO氲s/">:@Q\TXVJ>dyS[UVeY$XBsZ?eu6Y/H OF ηRӋ B]nBh[O`RǂM;_@{ks feo:8WGP$W~FOsBx0/a`պ?jグ7M dEG/! sdãt/0B(^"́xfSU9s][[Poa`?>ΰ9xq!yD:Sd1ӫSo6H>zmMVvL`> ^ ?)73>H"h#dsX~OVy;*(s~Fl%b}ocy7 ?iL~Ϣ~ϳ}g yl6GʣGjY~͙lz6r8s:cFicQvO'ի{@' L0G-X˼"o/֙%`2m6Tq}'`1 $㢍:VRcdġq?Bk=UO 0g M<:*|vK Ze(^j`]p|T%E5ok>6֔L{bV![5# 0dcQ po Χ û]Rzh}8-p¡_AʫEPd"k(<\c~ &vFMLEeTM/]Wu%A^jIefZ݌6kJꒂO@(}BcDJw"o$z5R}/ ѻaP}`w+HlE+3M$`  ׮P"p\k A~ q!gI䆥1+6>T!%-!nx]yRKxy?# @`Kj"j`y^ZFњTK|qXFBSU`=J tH#9>kS-nK"-?buyniQBO8fHEtbx ?RC1fxZT*KjKHMΚ[-"0xJk5+E\QVJ <&'ΣG$_tr:. 0INd442'`gٹYO ;mVf}f6+>#gfL\L40[z(r!bIG(\dmp"aP 6hEPBm=I3 sMK:{eGZ?a'S4a6gV,ײ\䪵{22Wl""ȽYF%u]3JcurU a E0=yN& Zy6"2/yU(`"Oq {q1 *j\kص]=H8**vjޤJv,mK 3AhzrIgkS6'f"wO\2|2N湞0  j9VN5 hwS]?:U.({IjLêM7WfyX2ɪvlf9pwYiya"2l᱌R\@,ω_;,0v9p33},L0μfi]%zpbT;,`㤀ۭ$0*EX^ˬ"}$2};|jwv'VDbP>`!ŭӬRsHѣv RF?Tg7zt?A'?Q K{ԃ3# Z@²=qZ_VԼ/r$kp}XnJ4u'WPhF%hk{,= rX_j Z%P,X$kVLL 8%f[;d"GG},)^Q,cGI*t̥*]fKψM fy,3kN7 G~PZX0 ڐjiezu)4(ŷo78|hl/¨Ȃ22a~K-wT:"e(Z1, Q}wAi ʹ()`"[_t9~PEb2:Ehe_tJ/,\F;s:KvW\u՚@=e$aKF)qڃ%0a87/k7nuM,~"rct"P5j\ͲP'&Yg" rJD Z_ ?w-U 8_sBť)>XPč,°RsO`]oMU[F} US~{15 WMD{R!*0A3fu$W# s!daV*%`CBr !. K*-@7tj} fq5j/9=εa`ݴX@>-ڦOWWp!);};@WQT`uuq>P7_9@"$yDV4ti:56%?_2La*3W;{|NOZ۰mdvbZz9Æ+*eB#VgéCĀ|r,)ݱ m}s|6K!i3IK1#A '+;?pCs=QLq(]H!t]qF ٝDlc?j$~ϊ^S@C;{&6]}ko&w c:=88'u;t cߖgi{F):)$0H~wUc0"tIw@ɷHN6?VչxZa}ؿ)//s1n~k@sƀnLPgS[r&h k|ት*?mOEɂ|4^yNT"GGZ*:4.;аtz`O=Go_?;8=T'}HSt!(tZ{`OW){$-Z.U^uTe\s.n8䫲0"+y0h4'UV9*JИΌ2AY蘲NVAP1w?yDfsMr5u1K Pt j & MM,cK)2wc h9>/ Fkd ]! ; ߞWo^8?GǯNdheXr2 f\#1c0[ĺ0D Rfis4.O# $C.ZTp|tfH`KSZG7 ;=.T#X; Dt8z6xEl#B0ޛ~A,db)Ip#–<ؠHډkDu'CuJ`VqYf As<(d| R~xɗ"O-ˣM1ЭEBO5aߥi"yB0QvF %Ca|xE. q(qJ=ɲBr{+_=ZFB6IE6ItNKˢޖ:3S9H:M dV] eC+z Cnw}{+(g߄(@kԝ p|E}u 8&$6YHx|pHΜSK\ޱbi1!|@ݺ$-ru'-tImjg\Z{9#}G^Fdv)"8 Y x=ZWt_aplcZF|k gBzO@ 6 1y ; zK"F{\L A␈ j)E9*̀)p@P VBfC|: ]`8@ i \ n̠8tZ 1=IUk҇ :2t>nS-/p M5!iŰE. W -bW]adP#YC4N^$*qyK,  sE7)[Xޓ7|g G9XՁƨd>hjV԰7TO[l匥Y$hmc%uT'}Fƞ^K0xbdQTӢPET?i IJ SPB:(eX[3%1NbJ\ ]Ĕl%dfrdN E8>ƀBlϰ(pRpG)X T>%a}9Ǧ6&n^0 _&雹<֚<8¬c?6=>$T  %VUٵwЫ"D3t [l4w- c㴓-/=/ixLnF>k{KȈxqtl 4;괕u7_|2 7iіIӯMGś4Њji2ũ4ڈDq mD 1;mj#tK?+VKTxgy&BS)"4j_>(lɚ3LOVU4^>n(: _7cD/Fv[$Kq$& 4he/Ecf~Ƿdcd-^a_w-F@UЦ'ZuB9t0۩k5# Jp+֟)xǯW!a^Fq/# @^ A]g# _<;/WW$;@b~ ?bDZR |D9N,4j@IqBfNъ%Mo f*u͔q`+Kkm8#*g'R4`\Xd |gcd5NiR?mM)F׵ݑʔ\6Kz<JH!15D`t͒I}Ն߿ vlu4 uy\7~>4Lg6Z0̫} ̍bnv"1ao 6޷"xt͉4KVMy҆ˉ!CXS8`i (g:Β+>Ȝe%9- ƕN>]PFڸ1n3 ƭZw(Wj]5TsȱTs];MsKձ0%nDdq"}`;@ےh1"?> a4wA^P'@[7Cbdl_C>wqt:}cId£9T*~F!lO7jQ:A5fp՝gwfD;ú߼܅5ɇ}5'[mXd|A 8#N5/f&;:S;lfSVD T{P[L@ !2e{=޷|S:IB_:r )5-*;e]s6 ,V0!$N|;'gC5 7|K騽&̙L&$H^M{VlQk3* w ٫^L^&%%P͔Qv5>Y`Iar\o}޲-$rKJcE<Ґ%GR m/Gc!2(0 < dbȑ/vx6uA|E#G1U#=Muri#prM.H6'к3=ޞh_u-AKؑ?;!c 5%)hwӥr#g+kX!o&AʛުiBznf6Hw&Y8N+{ON=z ]pG<6~ e؇_x[{8@fc0$n$=o+)Hy /B|5 AT,` _%"1 /!em,jMsڲ.xudzzeN :Դc~Mxx;^@\;j},}R8Lwa4AݧW=pqCz&tRc ۽;YW#+wˤ sz_ZѠ6Vh#GkE`{ Z1In۬ذFĠ@\#7c1?| He(S !p#EڛaRmeL_$G}_=ǻHqN%\vE+(wDWf8ƻ]!F_=2~ /V $E{G30T"mH-9mɼ[&6|Gn-7&'Z 6J:>ʂ{h Tl=JRb'5Z`mo\g,t.|53FwfE6P󓿾8:=xM>e8/IYƓRFo,qٺ. Ѻ~ ѶA7EqT:44L^3E$z q@{s:~e2oQ_v{ҳP3rq@漄5NGEϬ"秕3 jn6R>NR#SI L˘lPX"ywKh/zqc`zo6tN#s$ ^[8At!Ya>9Ti1 n&,H+g< c&%My&kj3!/f{P$W|]hAxPc.().jRwօ%2In6}f)X l.4`%sf_Z応g(O#~kCgAss~-gG0w!HŸ勌bRjȁdUI^햹a=RCdEUdաhE!%e2W m@= 8Z͗:(ҿk0?$}=oZwTFzJϻyғ9,fBn|rJ=sR}qq{CuvCrbE?r:ʹA@$0K՛JfFQIoY BNCk+lǸ'K@Р[ +1u)!vwE]Tdp?d|6Ђ>Dri>D}l"oX?rǸc6lLNkk p`@?&ILu,j gޗ&b?/?qhBˆ2.U\_ lҶikV}w mEw68dHQDlslaIrD* ^7R:NdldRY3G#eVqr _j+PhZ%4avhNc>c†U-BU؆u%QW" åQdH jDP6~NG7~b?Ynuvt65zB!vrTd1M-.Qq2k故~C|*O~)af yH1lB'0_@l7˽~b^Gr9ٯ$ODwM?殽ܫOˆ@b~Grai%O'~ 3;Qb50w [P[>!|M+Z|>bZՁi]  i(|U-" IDN3Lh25lr#^t^u` pø8 rFC)'?76k ny5L ,v:MŸBvo2#)bXMa6$!3I#X<,QCS(}|i[MNIaDfNeqR-\AV">8y&u?VDf&a܍N@ zYl-ɰ#M@tɛQA:TdisG܊mӈ?gZ$R+Ps*h)Uf)Һ*CG<%׈pxaiM *QM#U搼/pg}cBDD9މŎȓ 3UaDWh#rOLBgq-2׽{.ru2Ɠ,( Y ?[LX9ey pxe`O~U 'fvv4BsCZ"NtWW OPQ́TgbMx>Bq pHU p|꾳KZQ|Cy<7QkT;]AZ)pZBl|Xé2|8]S:ns|=O{K;GMa[W۸5?uy/UEEncbc.kDULt$8!PaޯtVA+LPEMfNl*FCUac8Y3e9Ϋ 8a-ʤMgcqG79?ǁ@M/ 5JT?4w<m-Pg^`0+Da tߩD2&:m+.; , G&Ȁ4>3;/Ey.}Wcxݔ5vOou}NѦA'Sֶj .m^}'de_8q$5yLĪ'YO(\d_pX]؄%SslJF\R؂6J0QIOL/8dIWɌ0Kz˗zyI}VH*tަ ?ka|J+&& >[OhhI"]K7ߵƲmxk(:AnfU2\ x(w`Fb^U~b~Rbq~r~QƦl ջxWn6}b*[i*ؾm M 6@sAnQE@Kc[LjI*Q;CJ2ɦ}Ids;s搪E(&EVB BX1*ߨ҆3GRi3r5;UmR9*v:(ʕ4NUUanK% ucPB`!|±h*{ALeQank)K[ ZjD-,sH9 >ԣ{ .Ĭ1tǍ!u ONA4T_gB$) hgv-oZU| -&IR;>,dA|MϞPڿ8B8MB8@rRJQQp4ř춑^ iK9q~\ˁ3!r^YE0SGÙcg$Gh@88:U0FO]ހ|?]2*!|x3;(nkƺIj Ke C)'(* {ar;95~7mvy?~H/CD;-F+vr ̯dwh.% @*X GxjZ۾;x|~&BB4nB;ʁ]~Y#3Rъ+ߜj$wM7[BxwO}sNov=0 =I>ÕUsv4vS 2,x Ak&I.LgT?p6F\SNZ50ͻ֌(U8XrXm 'EoMc췺_"q eS c洓&mdLOpϭ 2s{#!:nԃ>Iͥ-fTMtI:Q{^5/vl@?QP|tQ1j THT20xF0; p+ET%:@ƌGNFI)pRslͅ=.qeAr$`&[9L+Ƃj߶(²R+s塣6; !`#BTJ"\߸`@oCUO?ftwy~IXMQw y¯p=M\{}ztTtӕ0~5R?H% ofR7 nGdu̽zظz鐦sՂ? E'p ,wx-QfGFb^U~bp96SFdy,IũB (T #Ӆ9Ex5AJ@EيY272HpKT& T C<"0z9tէcv4Oǟh+ƒv-I$[n`ap4;ܸ(QY $K;_]#NY)* ~LP:a6qz368W"ۆR:K/<` Z`2Yd+."'_/߄TxY{o6 v!˵v`kf Y e$:"KD;Wdk$mExn$+q)Ʋduobz ]/l@P׉(%2ša}vQ; +.D"KTŷ!D YƁN㛉 ԱX S>mzMG"/ֆR2NXoDt>?; ~A)#ccw]9,->g}C4),?[hgFzA߈ؕ.{za/-OR#{!>QZ F?,qDI-Q#.Ї]9]P6GC/+dF(3ptDjϧ@tow5U҄q+,{CrFsKV^? 2j)4 MPR2cw%0Wr˭-;L?б(b@ͳS8h$6fŰUkY&b2Q DR*7= @PoWd@K#> &}vәKroT THro=6uj<;Mt<)vÞ1 Na,!9 PW *g64MHŠkvZ^VINa86X@d6tNJc}rgG R^ڜ`,\zAI=e y,#)sԼoEr2d _pc&W~9[q'xx.j;-Hx~#]S1|w(Â:*ʖ!,=$Iʞ| z֐cvÏŖ[nuj/"K*1Cs2"]棜6[#bc\hcSN9N dberl)Zmև |DHVЛ !>ttHBA0*>tҚ{ELtBSu7dwyWݭס;CnNwG | ַ?pr&;{/2zXaͭ[p' +jI4{hѮ{"7ӂ_o"g}8Utt=73_Z2kIK3bBПHx;C=S'Mcq2W#Kz0^!;QMcT 2p_wa[쇁'Ւm* `s4nفt}Ybh,bm6 ]o0cj(F A2%  &^͌3țϔs8 UF߰$8j %U ЅYaM؇z*pǐc^*+J@ sEa]ziZz->p5.44S&JE{jဒ~/%ag>J;^STqB:Gv a-4[2bio%\35ktS6K-^B bj!aǰςP)x5N֡;hř?qYx Nx{2}DL҂ԢԢ'6NI7QH-*RUH,(sK(wLPPQP0-N.0)4,QQLu[9&;*CJK)N.ڄ"0Dt=< M=}Eť9% AUB 2MCsuT7J?x>T##1*?1S?)8U?9(US)=$4I/9?W&1_Ǩ xpackage core_test import ( "bytes" "context" "database/sql" "encoding/json" "errors" "fmt" "regexp" "slices" "strconv" "strings" "testing" "time" "github.com/pocketbase/dbx" "github.com/pocketbase/pocketbase/core" "github.com/pocketbase/pocketbase/tests" "github.com/pocketbase/pocketbase/tools/filesystem" "github.com/pocketbase/pocketbase/tools/hook" "github.com/pocketbase/pocketbase/tools/types" "github.com/spf13/cast" ) func TestNewRecord(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add(&core.BoolField{Name: "status"}) m := core.NewRecord(collection) rawData, err := json.Marshal(m.FieldsData()) // should be initialized with the defaults if err != nil { t.Fatal(err) } expected := `{"id":"","status":false}` if str := string(rawData); str != expected { t.Fatalf("Expected schema data\n%v\ngot\n%v", expected, str) } } func TestRecordCollection(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") m := core.NewRecord(collection) if m.Collection().Name != collection.Name { t.Fatalf("Expected collection with name %q, got %q", collection.Name, m.Collection().Name) } } func TestRecordTableName(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") m := core.NewRecord(collection) if m.TableName() != collection.Name { t.Fatalf("Expected table %q, got %q", collection.Name, m.TableName()) } } func TestRecordPostScan(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test_collection") collection.Fields.Add(&core.TextField{Name: "test"}) m := core.NewRecord(collection) // calling PostScan without id err := m.PostScan() if err == nil { t.Fatal("Expected PostScan id error, got nil") } m.Id = "test_id" m.Set("test", "abc") if v := m.IsNew(); v != true { t.Fatalf("[before PostScan] Expected IsNew %v, got %v", true, v) } if v := m.Original().PK(); v != "" { t.Fatalf("[before PostScan] Expected the original PK to be empty string, got %v", v) } if v := m.Original().Get("test"); v != "" { t.Fatalf("[before PostScan] Expected the original 'test' field to be empty string, got %v", v) } err = m.PostScan() if err != nil { t.Fatalf("Expected PostScan nil error, got %v", err) } if v := m.IsNew(); v != false { t.Fatalf("[after PostScan] Expected IsNew %v, got %v", false, v) } if v := m.Original().PK(); v != "test_id" { t.Fatalf("[after PostScan] Expected the original PK to be %q, got %v", "test_id", v) } if v := m.Original().Get("test"); v != "abc" { t.Fatalf("[after PostScan] Expected the original 'test' field to be %q, got %v", "abc", v) } } func TestRecordHookTags(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") m := core.NewRecord(collection) tags := m.HookTags() expectedTags := []string{collection.Id, collection.Name} if len(tags) != len(expectedTags) { t.Fatalf("Expected tags\n%v\ngot\n%v", expectedTags, tags) } for _, tag := range tags { if !slices.Contains(expectedTags, tag) { t.Errorf("Missing expected tag %q", tag) } } } func TestRecordBaseFilesPath(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") m := core.NewRecord(collection) m.Id = "abc" result := m.BaseFilesPath() expected := collection.BaseFilesPath() + "/" + m.Id if result != expected { t.Fatalf("Expected %q, got %q", expected, result) } } func TestRecordOriginal(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() record, err := app.FindAuthRecordByEmail("users", "test@example.com") if err != nil { t.Fatal(err) } originalId := record.Id originalName := record.GetString("name") extraFieldsCheck := []string{`"email":`, `"custom":`} // change the fields record.Id = "changed" record.Set("name", "name_new") record.Set("custom", "test_custom") record.SetExpand(map[string]any{"test": 123}) record.IgnoreEmailVisibility(true) record.IgnoreUnchangedFields(true) record.WithCustomData(true) record.Unhide(record.Collection().Fields.FieldNames()...) // ensure that the email visibility and the custom data toggles are active raw, err := record.MarshalJSON() if err != nil { t.Fatal(err) } rawStr := string(raw) for _, f := range extraFieldsCheck { if !strings.Contains(rawStr, f) { t.Fatalf("Expected %s in\n%s", f, rawStr) } } // check changes if v := record.GetString("name"); v != "name_new" { t.Fatalf("Expected name to be %q, got %q", "name_new", v) } if v := record.GetString("custom"); v != "test_custom" { t.Fatalf("Expected custom to be %q, got %q", "test_custom", v) } // check original if v := record.Original().PK(); v != originalId { t.Fatalf("Expected the original PK to be %q, got %q", originalId, v) } if v := record.Original().Id; v != originalId { t.Fatalf("Expected the original id to be %q, got %q", originalId, v) } if v := record.Original().GetString("name"); v != originalName { t.Fatalf("Expected the original name to be %q, got %q", originalName, v) } if v := record.Original().GetString("custom"); v != "" { t.Fatalf("Expected the original custom to be %q, got %q", "", v) } if v := record.Original().Expand(); len(v) != 0 { t.Fatalf("Expected empty original expand, got\n%v", v) } // ensure that the email visibility and the custom flag toggles weren't copied originalRaw, err := record.Original().MarshalJSON() if err != nil { t.Fatal(err) } originalRawStr := string(originalRaw) for _, f := range extraFieldsCheck { if strings.Contains(originalRawStr, f) { t.Fatalf("Didn't expected %s in original\n%s", f, originalRawStr) } } // loading new data shouldn't affect the original state record.Load(map[string]any{"name": "name_new2"}) if v := record.GetString("name"); v != "name_new2" { t.Fatalf("Expected name to be %q, got %q", "name_new2", v) } if v := record.Original().GetString("name"); v != originalName { t.Fatalf("Expected the original name still to be %q, got %q", originalName, v) } } func TestRecordFresh(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() record, err := app.FindAuthRecordByEmail("users", "test@example.com") if err != nil { t.Fatal(err) } originalId := record.Id extraFieldsCheck := []string{`"email":`, `"custom":`} autodateTest := types.NowDateTime() // change the fields record.Id = "changed" record.Set("name", "name_new") record.Set("custom", "test_custom") record.SetRaw("created", autodateTest) record.SetExpand(map[string]any{"test": 123}) record.IgnoreEmailVisibility(true) record.IgnoreUnchangedFields(true) record.WithCustomData(true) record.Unhide(record.Collection().Fields.FieldNames()...) // ensure that the email visibility and the custom data toggles are active raw, err := record.MarshalJSON() if err != nil { t.Fatal(err) } rawStr := string(raw) for _, f := range extraFieldsCheck { if !strings.Contains(rawStr, f) { t.Fatalf("Expected %s in\n%s", f, rawStr) } } // check changes if v := record.GetString("name"); v != "name_new" { t.Fatalf("Expected name to be %q, got %q", "name_new", v) } if v := record.GetDateTime("created").String(); v != autodateTest.String() { t.Fatalf("Expected created to be %q, got %q", autodateTest.String(), v) } if v := record.GetString("custom"); v != "test_custom" { t.Fatalf("Expected custom to be %q, got %q", "test_custom", v) } // check fresh if v := record.Fresh().LastSavedPK(); v != originalId { t.Fatalf("Expected the fresh LastSavedPK to be %q, got %q", originalId, v) } if v := record.Fresh().PK(); v != record.Id { t.Fatalf("Expected the fresh PK to be %q, got %q", record.Id, v) } if v := record.Fresh().Id; v != record.Id { t.Fatalf("Expected the fresh id to be %q, got %q", record.Id, v) } if v := record.Fresh().GetString("name"); v != record.GetString("name") { t.Fatalf("Expected the fresh name to be %q, got %q", record.GetString("name"), v) } if v := record.Fresh().GetDateTime("created").String(); v != autodateTest.String() { t.Fatalf("Expected the fresh created to be %q, got %q", autodateTest.String(), v) } if v := record.Fresh().GetDateTime("updated").String(); v != record.GetDateTime("updated").String() { t.Fatalf("Expected the fresh updated to be %q, got %q", record.GetDateTime("updated").String(), v) } if v := record.Fresh().GetString("custom"); v != "" { t.Fatalf("Expected the fresh custom to be %q, got %q", "", v) } if v := record.Fresh().Expand(); len(v) != 0 { t.Fatalf("Expected empty fresh expand, got\n%v", v) } // ensure that the email visibility and the custom flag toggles weren't copied freshRaw, err := record.Fresh().MarshalJSON() if err != nil { t.Fatal(err) } freshRawStr := string(freshRaw) for _, f := range extraFieldsCheck { if strings.Contains(freshRawStr, f) { t.Fatalf("Didn't expected %s in fresh\n%s", f, freshRawStr) } } } func TestRecordClone(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() record, err := app.FindAuthRecordByEmail("users", "test@example.com") if err != nil { t.Fatal(err) } originalId := record.Id extraFieldsCheck := []string{`"email":`, `"custom":`} autodateTest := types.NowDateTime() // change the fields record.Id = "changed" record.Set("name", "name_new") record.Set("custom", "test_custom") record.SetRaw("created", autodateTest) record.SetExpand(map[string]any{"test": 123}) record.IgnoreEmailVisibility(true) record.WithCustomData(true) record.Unhide(record.Collection().Fields.FieldNames()...) // ensure that the email visibility and the custom data toggles are active raw, err := record.MarshalJSON() if err != nil { t.Fatal(err) } rawStr := string(raw) for _, f := range extraFieldsCheck { if !strings.Contains(rawStr, f) { t.Fatalf("Expected %s in\n%s", f, rawStr) } } // check changes if v := record.GetString("name"); v != "name_new" { t.Fatalf("Expected name to be %q, got %q", "name_new", v) } if v := record.GetDateTime("created").String(); v != autodateTest.String() { t.Fatalf("Expected created to be %q, got %q", autodateTest.String(), v) } if v := record.GetString("custom"); v != "test_custom" { t.Fatalf("Expected custom to be %q, got %q", "test_custom", v) } // check clone if v := record.Clone().LastSavedPK(); v != originalId { t.Fatalf("Expected the clone LastSavedPK to be %q, got %q", originalId, v) } if v := record.Clone().PK(); v != record.Id { t.Fatalf("Expected the clone PK to be %q, got %q", record.Id, v) } if v := record.Clone().Id; v != record.Id { t.Fatalf("Expected the clone id to be %q, got %q", record.Id, v) } if v := record.Clone().GetString("name"); v != record.GetString("name") { t.Fatalf("Expected the clone name to be %q, got %q", record.GetString("name"), v) } if v := record.Clone().GetDateTime("created").String(); v != autodateTest.String() { t.Fatalf("Expected the clone created to be %q, got %q", autodateTest.String(), v) } if v := record.Clone().GetDateTime("updated").String(); v != record.GetDateTime("updated").String() { t.Fatalf("Expected the clone updated to be %q, got %q", record.GetDateTime("updated").String(), v) } if v := record.Clone().GetString("custom"); v != "test_custom" { t.Fatalf("Expected the clone custom to be %q, got %q", "test_custom", v) } if _, ok := record.Clone().Expand()["test"]; !ok { t.Fatalf("Expected non-empty clone expand") } // ensure that the email visibility and the custom data toggles state were copied cloneRaw, err := record.Clone().MarshalJSON() if err != nil { t.Fatal(err) } cloneRawStr := string(cloneRaw) for _, f := range extraFieldsCheck { if !strings.Contains(cloneRawStr, f) { t.Fatalf("Expected %s in clone\n%s", f, cloneRawStr) } } } func TestRecordExpand(t *testing.T) { t.Parallel() record := core.NewRecord(core.NewBaseCollection("test")) expand := record.Expand() if expand == nil || len(expand) != 0 { t.Fatalf("Expected empty map expand, got %v", expand) } data1 := map[string]any{"a": 123, "b": 456} data2 := map[string]any{"c": 123} record.SetExpand(data1) record.SetExpand(data2) // should overwrite the previous call // modify the expand map to check for shallow copy data2["d"] = 456 expand = record.Expand() if len(expand) != 1 { t.Fatalf("Expected empty map expand, got %v", expand) } if v := expand["c"]; v != 123 { t.Fatalf("Expected to find expand.c %v, got %v", 123, v) } } func TestRecordMergeExpand(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Id = "_hbc_123" m := core.NewRecord(collection) m.Id = "m" // a a := core.NewRecord(collection) a.Id = "a" a1 := core.NewRecord(collection) a1.Id = "a1" a2 := core.NewRecord(collection) a2.Id = "a2" a3 := core.NewRecord(collection) a3.Id = "a3" a31 := core.NewRecord(collection) a31.Id = "a31" a32 := core.NewRecord(collection) a32.Id = "a32" a.SetExpand(map[string]any{ "a1": a1, "a23": []*core.Record{a2, a3}, }) a3.SetExpand(map[string]any{ "a31": a31, "a32": []*core.Record{a32}, }) // b b := core.NewRecord(collection) b.Id = "b" b1 := core.NewRecord(collection) b1.Id = "b1" b.SetExpand(map[string]any{ "b1": b1, }) // c c := core.NewRecord(collection) c.Id = "c" // load initial expand m.SetExpand(map[string]any{ "a": a, "b": b, "c": []*core.Record{c}, }) // a (new) aNew := core.NewRecord(collection) aNew.Id = a.Id a3New := core.NewRecord(collection) a3New.Id = a3.Id a32New := core.NewRecord(collection) a32New.Id = "a32New" a33New := core.NewRecord(collection) a33New.Id = "a33New" a3New.SetExpand(map[string]any{ "a32": []*core.Record{a32New}, "a33New": a33New, }) aNew.SetExpand(map[string]any{ "a23": []*core.Record{a2, a3New}, }) // b (new) bNew := core.NewRecord(collection) bNew.Id = "bNew" dNew := core.NewRecord(collection) dNew.Id = "dNew" // merge expands m.MergeExpand(map[string]any{ "a": aNew, "b": []*core.Record{bNew}, "dNew": dNew, }) result := m.Expand() raw, err := json.Marshal(result) if err != nil { t.Fatal(err) } rawStr := string(raw) expected := `{"a":{"collectionId":"_hbc_123","collectionName":"test","expand":{"a1":{"collectionId":"_hbc_123","collectionName":"test","id":"a1"},"a23":[{"collectionId":"_hbc_123","collectionName":"test","id":"a2"},{"collectionId":"_hbc_123","collectionName":"test","expand":{"a31":{"collectionId":"_hbc_123","collectionName":"test","id":"a31"},"a32":[{"collectionId":"_hbc_123","collectionName":"test","id":"a32"},{"collectionId":"_hbc_123","collectionName":"test","id":"a32New"}],"a33New":{"collectionId":"_hbc_123","collectionName":"test","id":"a33New"}},"id":"a3"}]},"id":"a"},"b":[{"collectionId":"_hbc_123","collectionName":"test","expand":{"b1":{"collectionId":"_hbc_123","collectionName":"test","id":"b1"}},"id":"b"},{"collectionId":"_hbc_123","collectionName":"test","id":"bNew"}],"c":[{"collectionId":"_hbc_123","collectionName":"test","id":"c"}],"dNew":{"collectionId":"_hbc_123","collectionName":"test","id":"dNew"}}` if expected != rawStr { t.Fatalf("Expected \n%v, \ngot \n%v", expected, rawStr) } } func TestRecordMergeExpandNilCheck(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Id = "_hbc_123" scenarios := []struct { name string expand map[string]any expected string }{ { "nil expand", nil, `{"collectionId":"_hbc_123","collectionName":"test","id":""}`, }, { "empty expand", map[string]any{}, `{"collectionId":"_hbc_123","collectionName":"test","id":""}`, }, { "non-empty expand", map[string]any{"test": core.NewRecord(collection)}, `{"collectionId":"_hbc_123","collectionName":"test","expand":{"test":{"collectionId":"_hbc_123","collectionName":"test","id":""}},"id":""}`, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { m := core.NewRecord(collection) m.MergeExpand(s.expand) raw, err := json.Marshal(m) if err != nil { t.Fatal(err) } rawStr := string(raw) if rawStr != s.expected { t.Fatalf("Expected \n%v, \ngot \n%v", s.expected, rawStr) } }) } } func TestRecordExpandedOne(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") main := core.NewRecord(collection) single := core.NewRecord(collection) single.Id = "single" multiple1 := core.NewRecord(collection) multiple1.Id = "multiple1" multiple2 := core.NewRecord(collection) multiple2.Id = "multiple2" main.SetExpand(map[string]any{ "single": single, "multiple": []*core.Record{multiple1, multiple2}, }) if v := main.ExpandedOne("missing"); v != nil { t.Fatalf("Expected nil, got %v", v) } if v := main.ExpandedOne("single"); v == nil || v.Id != "single" { t.Fatalf("Expected record with id %q, got %v", "single", v) } if v := main.ExpandedOne("multiple"); v == nil || v.Id != "multiple1" { t.Fatalf("Expected record with id %q, got %v", "multiple1", v) } } func TestRecordExpandedAll(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") main := core.NewRecord(collection) single := core.NewRecord(collection) single.Id = "single" multiple1 := core.NewRecord(collection) multiple1.Id = "multiple1" multiple2 := core.NewRecord(collection) multiple2.Id = "multiple2" main.SetExpand(map[string]any{ "single": single, "multiple": []*core.Record{multiple1, multiple2}, }) if v := main.ExpandedAll("missing"); v != nil { t.Fatalf("Expected nil, got %v", v) } if v := main.ExpandedAll("single"); len(v) != 1 || v[0].Id != "single" { t.Fatalf("Expected [single] slice, got %v", v) } if v := main.ExpandedAll("multiple"); len(v) != 2 || v[0].Id != "multiple1" || v[1].Id != "multiple2" { t.Fatalf("Expected [multiple1, multiple2] slice, got %v", v) } } func TestRecordFieldsData(t *testing.T) { t.Parallel() collection := core.NewAuthCollection("test") collection.Fields.Add(&core.TextField{Name: "field1"}) collection.Fields.Add(&core.TextField{Name: "field2"}) m := core.NewRecord(collection) m.Id = "test_id" // direct id assignment m.Set("email", "test@example.com") m.Set("password", "123") // hidden fields should be also returned m.Set("tokenKey", "789") m.Set("field1", 123) m.Set("field2", 456) m.Set("unknown", 789) raw, err := json.Marshal(m.FieldsData()) if err != nil { t.Fatal(err) } expected := `{"email":"test@example.com","emailVisibility":false,"field1":"123","field2":"456","id":"test_id","password":"123","tokenKey":"789","verified":false}` if v := string(raw); v != expected { t.Fatalf("Expected\n%v\ngot\n%v", expected, v) } } func TestRecordCustomData(t *testing.T) { t.Parallel() collection := core.NewAuthCollection("test") collection.Fields.Add(&core.TextField{Name: "field1"}) collection.Fields.Add(&core.TextField{Name: "field2"}) m := core.NewRecord(collection) m.Id = "test_id" // direct id assignment m.Set("email", "test@example.com") m.Set("password", "123") // hidden fields should be also returned m.Set("tokenKey", "789") m.Set("field1", 123) m.Set("field2", 456) m.Set("unknown", 789) raw, err := json.Marshal(m.CustomData()) if err != nil { t.Fatal(err) } expected := `{"unknown":789}` if v := string(raw); v != expected { t.Fatalf("Expected\n%v\ngot\n%v", expected, v) } } func TestRecordSetGet(t *testing.T) { t.Parallel() f1 := &mockField{} f1.Name = "mock1" f2 := &mockField{} f2.Name = "mock2" f3 := &mockField{} f3.Name = "mock3" collection := core.NewBaseCollection("test") collection.Fields.Add(&core.TextField{Name: "text1"}) collection.Fields.Add(&core.TextField{Name: "text2"}) collection.Fields.Add(f1) collection.Fields.Add(f2) collection.Fields.Add(f3) record := core.NewRecord(collection) record.Set("text1", 123) // should be converted to string using the ScanValue fallback record.SetRaw("text2", 456) record.Set("mock1", 1) // should be converted to string using the setter record.SetRaw("mock2", 1) record.Set("mock3:test", "abc") record.Set("unknown", 789) t.Run("GetRaw", func(t *testing.T) { expected := map[string]any{ "text1": "123", "text2": 456, "mock1": "1", "mock2": 1, "mock3": "modifier_set", "mock3:test": nil, "unknown": 789, } for k, v := range expected { raw := record.GetRaw(k) if raw != v { t.Errorf("Expected %q to be %v, got %v", k, v, raw) } } }) t.Run("Get", func(t *testing.T) { expected := map[string]any{ "text1": "123", "text2": 456, "mock1": "1", "mock2": 1, "mock3": "modifier_set", "mock3:test": "modifier_get", "unknown": 789, } for k, v := range expected { get := record.Get(k) if get != v { t.Errorf("Expected %q to be %v, got %v", k, v, get) } } }) } func TestRecordLoad(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add(&core.TextField{Name: "text"}) record := core.NewRecord(collection) record.Load(map[string]any{ "text": 123, "custom": 456, }) expected := map[string]any{ "text": "123", "custom": 456, } for k, v := range expected { get := record.Get(k) if get != v { t.Errorf("Expected %q to be %#v, got %#v", k, v, get) } } } func TestRecordGetBool(t *testing.T) { t.Parallel() scenarios := []struct { value any expected bool }{ {nil, false}, {"", false}, {0, false}, {1, true}, {[]string{"true"}, false}, {time.Now(), false}, {"test", false}, {"false", false}, {"true", true}, {false, false}, {true, true}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetBool("test") if result != s.expected { t.Fatalf("Expected %v, got %v", s.expected, result) } }) } } func TestRecordGetString(t *testing.T) { t.Parallel() scenarios := []struct { value any expected string }{ {nil, ""}, {"", ""}, {0, "0"}, {1.4, "1.4"}, {[]string{"true"}, ""}, {map[string]int{"test": 1}, ""}, {[]byte("abc"), "abc"}, {"test", "test"}, {false, "false"}, {true, "true"}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetString("test") if result != s.expected { t.Fatalf("Expected %q, got %q", s.expected, result) } }) } } func TestRecordGetInt(t *testing.T) { t.Parallel() scenarios := []struct { value any expected int }{ {nil, 0}, {"", 0}, {[]string{"true"}, 0}, {map[string]int{"test": 1}, 0}, {time.Now(), 0}, {"test", 0}, {123, 123}, {2.4, 2}, {"123", 123}, {"123.5", 123}, {false, 0}, {true, 1}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetInt("test") if result != s.expected { t.Fatalf("Expected %v, got %v", s.expected, result) } }) } } func TestRecordGetFloat(t *testing.T) { t.Parallel() scenarios := []struct { value any expected float64 }{ {nil, 0}, {"", 0}, {[]string{"true"}, 0}, {map[string]int{"test": 1}, 0}, {time.Now(), 0}, {"test", 0}, {123, 123}, {2.4, 2.4}, {"123", 123}, {"123.5", 123.5}, {false, 0}, {true, 1}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetFloat("test") if result != s.expected { t.Fatalf("Expected %v, got %v", s.expected, result) } }) } } func TestRecordGetDateTime(t *testing.T) { t.Parallel() nowTime := time.Now() testTime, _ := time.Parse(types.DefaultDateLayout, "2022-01-01 08:00:40.000Z") scenarios := []struct { value any expected time.Time }{ {nil, time.Time{}}, {"", time.Time{}}, {false, time.Time{}}, {true, time.Time{}}, {"test", time.Time{}}, {[]string{"true"}, time.Time{}}, {map[string]int{"test": 1}, time.Time{}}, {1641024040, testTime}, {"2022-01-01 08:00:40.000", testTime}, {nowTime, nowTime}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetDateTime("test") if !result.Time().Equal(s.expected) { t.Fatalf("Expected %v, got %v", s.expected, result) } }) } } func TestRecordGetStringSlice(t *testing.T) { t.Parallel() nowTime := time.Now() scenarios := []struct { value any expected []string }{ {nil, []string{}}, {"", []string{}}, {false, []string{"false"}}, {true, []string{"true"}}, {nowTime, []string{}}, {123, []string{"123"}}, {"test", []string{"test"}}, {map[string]int{"test": 1}, []string{}}, {`["test1", "test2"]`, []string{"test1", "test2"}}, {[]int{123, 123, 456}, []string{"123", "456"}}, {[]string{"test", "test", "123"}, []string{"test", "123"}}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) result := record.GetStringSlice("test") if len(result) != len(s.expected) { t.Fatalf("Expected %d elements, got %d: %v", len(s.expected), len(result), result) } for _, v := range result { if !slices.Contains(s.expected, v) { t.Fatalf("Cannot find %v in %v", v, s.expected) } } }) } } func TestRecordGetGeoPoint(t *testing.T) { t.Parallel() scenarios := []struct { value any expected string }{ {nil, `{"lon":0,"lat":0}`}, {"", `{"lon":0,"lat":0}`}, {0, `{"lon":0,"lat":0}`}, {false, `{"lon":0,"lat":0}`}, {"{}", `{"lon":0,"lat":0}`}, {"[]", `{"lon":0,"lat":0}`}, {[]int{1, 2}, `{"lon":0,"lat":0}`}, {map[string]any{"lon": 1, "lat": 2}, `{"lon":1,"lat":2}`}, {[]byte(`{"lon":1,"lat":2}`), `{"lon":1,"lat":2}`}, {`{"lon":1,"lat":2}`, `{"lon":1,"lat":2}`}, {types.GeoPoint{Lon: 1, Lat: 2}, `{"lon":1,"lat":2}`}, {&types.GeoPoint{Lon: 1, Lat: 2}, `{"lon":1,"lat":2}`}, } collection := core.NewBaseCollection("test") record := core.NewRecord(collection) for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("test", s.value) pointStr := record.GetGeoPoint("test").String() if pointStr != s.expected { t.Fatalf("Expected %q, got %q", s.expected, pointStr) } }) } } func TestRecordGetUnsavedFiles(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() f1, err := filesystem.NewFileFromBytes([]byte("test"), "f1") if err != nil { t.Fatal(err) } f1.Name = "f1" f2, err := filesystem.NewFileFromBytes([]byte("test"), "f2") if err != nil { t.Fatal(err) } f2.Name = "f2" record, err := app.FindRecordById("demo3", "lcl9d87w22ml6jy") if err != nil { t.Fatal(err) } record.Set("files+", []any{f1, f2}) scenarios := []struct { key string expected string }{ { "", "null", }, { "title", "null", }, { "files", `[{"name":"f1","originalName":"f1","size":4},{"name":"f2","originalName":"f2","size":4}]`, }, { "files:unsaved", `[{"name":"f1","originalName":"f1","size":4},{"name":"f2","originalName":"f2","size":4}]`, }, } for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.key), func(t *testing.T) { v := record.GetUnsavedFiles(s.key) raw, err := json.Marshal(v) if err != nil { t.Fatal(err) } rawStr := string(raw) if rawStr != s.expected { t.Fatalf("Expected\n%s\ngot\n%s", s.expected, rawStr) } }) } } func TestRecordUnmarshalJSONField(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add(&core.JSONField{Name: "field"}) record := core.NewRecord(collection) var testPointer *string var testStr string var testInt int var testBool bool var testSlice []int var testMap map[string]any scenarios := []struct { value any destination any expectError bool expectedJSON string }{ {nil, testPointer, false, `null`}, {nil, testStr, false, `""`}, {"", testStr, false, `""`}, {1, testInt, false, `1`}, {true, testBool, false, `true`}, {[]int{1, 2, 3}, testSlice, false, `[1,2,3]`}, {map[string]any{"test": 123}, testMap, false, `{"test":123}`}, // json encoded values {`null`, testPointer, false, `null`}, {`true`, testBool, false, `true`}, {`456`, testInt, false, `456`}, {`"test"`, testStr, false, `"test"`}, {`[4,5,6]`, testSlice, false, `[4,5,6]`}, {`{"test":456}`, testMap, false, `{"test":456}`}, } for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.value), func(t *testing.T) { record.Set("field", s.value) err := record.UnmarshalJSONField("field", &s.destination) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr %v, got %v", s.expectError, hasErr) } raw, _ := json.Marshal(s.destination) if v := string(raw); v != s.expectedJSON { t.Fatalf("Expected %q, got %q", s.expectedJSON, v) } }) } } func TestRecordFindFileFieldByFile(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add( &core.TextField{Name: "field1"}, &core.FileField{Name: "field2", MaxSelect: 1, MaxSize: 1}, &core.FileField{Name: "field3", MaxSelect: 2, MaxSize: 1}, ) m := core.NewRecord(collection) m.Set("field1", "test") m.Set("field2", "test.png") m.Set("field3", []string{"test1.png", "test2.png"}) scenarios := []struct { filename string expectField string }{ {"", ""}, {"test", ""}, {"test2", ""}, {"test.png", "field2"}, {"test2.png", "field3"}, } for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%#v", i, s.filename), func(t *testing.T) { result := m.FindFileFieldByFile(s.filename) var fieldName string if result != nil { fieldName = result.Name } if s.expectField != fieldName { t.Fatalf("Expected field %v, got %v", s.expectField, result) } }) } } func TestRecordDBExport(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() f1 := &core.TextField{Name: "field1"} f2 := &core.FileField{Name: "field2", MaxSelect: 1, MaxSize: 1} f3 := &core.SelectField{Name: "field3", MaxSelect: 2, Values: []string{"test1", "test2", "test3"}} f4 := &core.RelationField{Name: "field4", MaxSelect: 2} colBase := core.NewBaseCollection("test_base") colBase.Fields.Add(f1, f2, f3, f4) colAuth := core.NewAuthCollection("test_auth") colAuth.Fields.Add(f1, f2, f3, f4) scenarios := []struct { collection *core.Collection expected string }{ { colBase, `{"field1":"test","field2":"test.png","field3":["test1","test2"],"field4":["test11","test12"],"id":"test_id"}`, }, { colAuth, `{"email":"test_email","emailVisibility":true,"field1":"test","field2":"test.png","field3":["test1","test2"],"field4":["test11","test12"],"id":"test_id","password":"_TEST_","tokenKey":"test_tokenKey","verified":false}`, }, } data := map[string]any{ "id": "test_id", "field1": "test", "field2": "test.png", "field3": []string{"test1", "test2"}, "field4": []string{"test11", "test12", "test11"}, // strip duplicate, "unknown": "test_unknown", "password": "test_passwordHash", "username": "test_username", "emailVisibility": true, "email": "test_email", "verified": "invalid", // should be casted "tokenKey": "test_tokenKey", } for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%s_%s", i, s.collection.Type, s.collection.Name), func(t *testing.T) { record := core.NewRecord(s.collection) record.Load(data) result, err := record.DBExport(app) if err != nil { t.Fatal(err) } raw, err := json.Marshal(result) if err != nil { t.Fatal(err) } rawStr := string(raw) // replace _TEST_ placeholder with .+ regex pattern pattern := regexp.MustCompile(strings.ReplaceAll( "^"+regexp.QuoteMeta(s.expected)+"$", "_TEST_", `.+`, )) if !pattern.MatchString(rawStr) { t.Fatalf("Expected\n%v\ngot\n%v", s.expected, rawStr) } }) } } func TestRecordIgnoreUnchangedFields(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() col, err := app.FindCollectionByNameOrId("demo3") if err != nil { t.Fatal(err) } new := core.NewRecord(col) existing, err := app.FindRecordById(col, "mk5fmymtx4wsprk") if err != nil { t.Fatal(err) } existing.Set("title", "test_new") existing.Set("files", existing.Get("files")) // no change scenarios := []struct { ignoreUnchangedFields bool record *core.Record expected []string }{ { false, new, []string{"id", "created", "updated", "title", "files"}, }, { true, new, []string{"id", "created", "updated", "title", "files"}, }, { false, existing, []string{"id", "created", "updated", "title", "files"}, }, { true, existing, []string{"id", "title"}, }, } for i, s := range scenarios { action := "create" if !s.record.IsNew() { action = "update" } t.Run(fmt.Sprintf("%d_%s_%v", i, action, s.ignoreUnchangedFields), func(t *testing.T) { s.record.IgnoreUnchangedFields(s.ignoreUnchangedFields) result, err := s.record.DBExport(app) if err != nil { t.Fatal(err) } if len(result) != len(s.expected) { t.Fatalf("Expected %d keys, got %d:\n%v", len(s.expected), len(result), result) } for _, key := range s.expected { if _, ok := result[key]; !ok { t.Fatalf("Missing expected key %q in\n%v", key, result) } } }) } } func TestRecordPublicExportAndMarshalJSON(t *testing.T) { t.Parallel() f1 := &core.TextField{Name: "field1"} f2 := &core.FileField{Name: "field2", MaxSelect: 1, MaxSize: 1} f3 := &core.SelectField{Name: "field3", MaxSelect: 2, Values: []string{"test1", "test2", "test3"}} f4 := &core.TextField{Name: "field4", Hidden: true} f5 := &core.TextField{Name: "field5", Hidden: true} colBase := core.NewBaseCollection("test_base") colBase.Id = "_hbc_base_123" colBase.Fields.Add(f1, f2, f3, f4, f5) colAuth := core.NewAuthCollection("test_auth") colAuth.Id = "_hbc_auth_123" colAuth.Fields.Add(f1, f2, f3, f4, f5) scenarios := []struct { name string collection *core.Collection ignoreEmailVisibility bool withCustomData bool hideFields []string unhideFields []string expectedJSON string }{ // base { "[base] no extra flags", colBase, false, false, nil, nil, `{"collectionId":"_hbc_base_123","collectionName":"test_base","expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id"}`, }, { "[base] with email visibility", colBase, true, // should have no effect false, nil, nil, `{"collectionId":"_hbc_base_123","collectionName":"test_base","expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id"}`, }, { "[base] with custom data", colBase, true, // should have no effect true, nil, nil, `{"collectionId":"_hbc_base_123","collectionName":"test_base","email":"test_email","emailVisibility":"test_invalid","expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id","password":"test_passwordHash","tokenKey":"test_tokenKey","unknown":"test_unknown","verified":true}`, }, { "[base] with explicit hide and unhide fields", colBase, false, true, []string{"field3", "field1", "expand", "collectionId", "collectionName", "email", "tokenKey", "unknown"}, []string{"field4", "@baseInternalAbc"}, `{"emailVisibility":"test_invalid","field2":"field_2.png","field4":"field_4","id":"test_id","password":"test_passwordHash","verified":true}`, }, { "[base] trying to unhide custom fields without explicit WithCustomData", colBase, false, true, nil, []string{"field5", "@baseInternalAbc", "email", "tokenKey", "unknown"}, `{"collectionId":"_hbc_base_123","collectionName":"test_base","email":"test_email","emailVisibility":"test_invalid","expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"field5":"field_5","id":"test_id","password":"test_passwordHash","tokenKey":"test_tokenKey","unknown":"test_unknown","verified":true}`, }, // auth { "[auth] no extra flags", colAuth, false, false, nil, nil, `{"collectionId":"_hbc_auth_123","collectionName":"test_auth","emailVisibility":false,"expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id","verified":true}`, }, { "[auth] with email visibility", colAuth, true, false, nil, nil, `{"collectionId":"_hbc_auth_123","collectionName":"test_auth","email":"test_email","emailVisibility":false,"expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id","verified":true}`, }, { "[auth] with custom data", colAuth, false, true, nil, nil, `{"collectionId":"_hbc_auth_123","collectionName":"test_auth","emailVisibility":false,"expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"id":"test_id","unknown":"test_unknown","verified":true}`, }, { "[auth] with explicit hide and unhide fields", colAuth, true, true, []string{"field3", "field1", "expand", "collectionId", "collectionName", "email", "unknown"}, []string{"field4", "@baseInternalAbc"}, `{"emailVisibility":false,"field2":"field_2.png","field4":"field_4","id":"test_id","verified":true}`, }, { "[auth] trying to unhide custom fields without explicit WithCustomData", colAuth, false, true, nil, []string{"field5", "@baseInternalAbc", "tokenKey", "unknown", "email"}, // emailVisibility:false has higher priority `{"collectionId":"_hbc_auth_123","collectionName":"test_auth","emailVisibility":false,"expand":{"test":123},"field1":"field_1","field2":"field_2.png","field3":["test1","test2"],"field5":"field_5","id":"test_id","unknown":"test_unknown","verified":true}`, }, } data := map[string]any{ "id": "test_id", "field1": "field_1", "field2": "field_2.png", "field3": []string{"test1", "test2"}, "field4": "field_4", "field5": "field_5", "expand": map[string]any{"test": 123}, "collectionId": "m_id", // should be always ignored "collectionName": "m_name", // should be always ignored "unknown": "test_unknown", "password": "test_passwordHash", "emailVisibility": "test_invalid", // for auth collections should be casted to bool "email": "test_email", "verified": true, "tokenKey": "test_tokenKey", "@baseInternalAbc": "test_custom_inter", // always hidden } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { m := core.NewRecord(s.collection) m.Load(data) m.IgnoreEmailVisibility(s.ignoreEmailVisibility) m.WithCustomData(s.withCustomData) m.Unhide(s.unhideFields...) m.Hide(s.hideFields...) exportResult, err := json.Marshal(m.PublicExport()) if err != nil { t.Fatal(err) } exportResultStr := string(exportResult) // MarshalJSON and PublicExport should return the same marshalResult, err := m.MarshalJSON() if err != nil { t.Fatal(err) } marshalResultStr := string(marshalResult) if exportResultStr != marshalResultStr { t.Fatalf("Expected the PublicExport to be the same as MarshalJSON, but got \n%v \nvs \n%v", exportResultStr, marshalResultStr) } if exportResultStr != s.expectedJSON { t.Fatalf("Expected json \n%v \ngot \n%v", s.expectedJSON, exportResultStr) } }) } } func TestRecordUnmarshalJSON(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add(&core.TextField{Name: "text"}) record := core.NewRecord(collection) data := map[string]any{ "text": 123, "custom": 456.789, } rawData, err := json.Marshal(data) if err != nil { t.Fatal(err) } err = record.UnmarshalJSON(rawData) if err != nil { t.Fatalf("Failed to unmarshal: %v", err) } expected := map[string]any{ "text": "123", "custom": 456.789, } for k, v := range expected { get := record.Get(k) if get != v { t.Errorf("Expected %q to be %#v, got %#v", k, v, get) } } } func TestRecordReplaceModifiers(t *testing.T) { t.Parallel() collection := core.NewBaseCollection("test") collection.Fields.Add( &mockField{core.TextField{Name: "mock"}}, &core.NumberField{Name: "number"}, ) originalData := map[string]any{ "mock": "a", "number": 2.1, } record := core.NewRecord(collection) for k, v := range originalData { record.Set(k, v) } result := record.ReplaceModifiers(map[string]any{ "mock:test": "b", "number+": 3, }) expected := map[string]any{ "mock": "modifier_set", "number": 5.1, } if len(result) != len(expected) { t.Fatalf("Expected\n%v\ngot\n%v", expected, result) } for k, v := range expected { if result[k] != v { t.Errorf("Expected %q %#v, got %#v", k, v, result[k]) } } // ensure that the original data hasn't changed for k, v := range originalData { rv := record.Get(k) if rv != v { t.Errorf("Expected original %q %#v, got %#v", k, v, rv) } } } func TestRecordValidate(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() // dummy collection to ensure that the specified field validators are triggered collection := core.NewBaseCollection("validate_test") collection.Fields.Add( &core.TextField{Name: "f1", Min: 3}, &core.NumberField{Name: "f2", Required: true}, ) if err := app.Save(collection); err != nil { t.Fatal(err) } record := core.NewRecord(collection) record.Id = "!invalid" t.Run("no data set", func(t *testing.T) { tests.TestValidationErrors(t, app.Validate(record), []string{"id", "f2"}) }) t.Run("failing the text field min requirement", func(t *testing.T) { record.Set("f1", "a") tests.TestValidationErrors(t, app.Validate(record), []string{"id", "f1", "f2"}) }) t.Run("satisfying the fields validations", func(t *testing.T) { record.Id = strings.Repeat("b", 15) record.Set("f1", "abc") record.Set("f2", 1) tests.TestValidationErrors(t, app.Validate(record), nil) }) } func TestRecordModelEventSync(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() col, err := app.FindCollectionByNameOrId("demo3") if err != nil { t.Fatal(err) } testRecords := make([]*core.Record, 4) for i := 0; i < 4; i++ { testRecords[i] = core.NewRecord(col) testRecords[i].Set("title", "sync_test_"+strconv.Itoa(i)) if err := app.Save(testRecords[i]); err != nil { t.Fatal(err) } } createModelEvent := func() *core.ModelEvent { event := new(core.ModelEvent) event.App = app event.Context = context.Background() event.Type = "test_a" event.Model = testRecords[0] return event } createModelErrorEvent := func() *core.ModelErrorEvent { event := new(core.ModelErrorEvent) event.ModelEvent = *createModelEvent() event.Error = errors.New("error_a") return event } changeRecordEventBefore := func(e *core.RecordEvent) { e.Type = "test_b" //nolint:staticcheck e.Context = context.WithValue(context.Background(), "test", 123) e.Record = testRecords[1] } modelEventFinalizerChange := func(e *core.ModelEvent) { e.Type = "test_c" //nolint:staticcheck e.Context = context.WithValue(context.Background(), "test", 456) e.Model = testRecords[2] } changeRecordEventAfter := func(e *core.RecordEvent) { e.Type = "test_d" //nolint:staticcheck e.Context = context.WithValue(context.Background(), "test", 789) e.Record = testRecords[3] } expectedBeforeModelEventHandlerChecks := func(t *testing.T, e *core.ModelEvent) { if e.Type != "test_a" { t.Fatalf("Expected type %q, got %q", "test_a", e.Type) } if v := e.Context.Value("test"); v != nil { t.Fatalf("Expected context value %v, got %v", nil, v) } if e.Model.PK() != testRecords[0].Id { t.Fatalf("Expected record with id %q, got %q (%d)", testRecords[0].Id, e.Model.PK(), 0) } } expectedAfterModelEventHandlerChecks := func(t *testing.T, e *core.ModelEvent) { if e.Type != "test_d" { t.Fatalf("Expected type %q, got %q", "test_d", e.Type) } if v := e.Context.Value("test"); v != 789 { t.Fatalf("Expected context value %v, got %v", 789, v) } // note: currently the Model and Record values are not synced due to performance consideration if e.Model.PK() != testRecords[2].Id { t.Fatalf("Expected record with id %q, got %q (%d)", testRecords[2].Id, e.Model.PK(), 2) } } expectedBeforeRecordEventHandlerChecks := func(t *testing.T, e *core.RecordEvent) { if e.Type != "test_a" { t.Fatalf("Expected type %q, got %q", "test_a", e.Type) } if v := e.Context.Value("test"); v != nil { t.Fatalf("Expected context value %v, got %v", nil, v) } if e.Record.Id != testRecords[0].Id { t.Fatalf("Expected record with id %q, got %q (%d)", testRecords[0].Id, e.Record.Id, 2) } } expectedAfterRecordEventHandlerChecks := func(t *testing.T, e *core.RecordEvent) { if e.Type != "test_c" { t.Fatalf("Expected type %q, got %q", "test_c", e.Type) } if v := e.Context.Value("test"); v != 456 { t.Fatalf("Expected context value %v, got %v", 456, v) } // note: currently the Model and Record values are not synced due to performance consideration if e.Record.Id != testRecords[1].Id { t.Fatalf("Expected record with id %q, got %q (%d)", testRecords[1].Id, e.Record.Id, 1) } } modelEventFinalizer := func(e *core.ModelEvent) error { modelEventFinalizerChange(e) return nil } modelErrorEventFinalizer := func(e *core.ModelErrorEvent) error { modelEventFinalizerChange(&e.ModelEvent) e.Error = errors.New("error_c") return nil } modelEventHandler := &hook.Handler[*core.ModelEvent]{ Priority: -999, Func: func(e *core.ModelEvent) error { t.Run("before model", func(t *testing.T) { expectedBeforeModelEventHandlerChecks(t, e) }) _ = e.Next() t.Run("after model", func(t *testing.T) { expectedAfterModelEventHandlerChecks(t, e) }) return nil }, } modelErrorEventHandler := &hook.Handler[*core.ModelErrorEvent]{ Priority: -999, Func: func(e *core.ModelErrorEvent) error { t.Run("before model error", func(t *testing.T) { expectedBeforeModelEventHandlerChecks(t, &e.ModelEvent) if v := e.Error.Error(); v != "error_a" { t.Fatalf("Expected error %q, got %q", "error_a", v) } }) _ = e.Next() t.Run("after model error", func(t *testing.T) { expectedAfterModelEventHandlerChecks(t, &e.ModelEvent) if v := e.Error.Error(); v != "error_d" { t.Fatalf("Expected error %q, got %q", "error_d", v) } }) return nil }, } recordEventHandler := &hook.Handler[*core.RecordEvent]{ Priority: -999, Func: func(e *core.RecordEvent) error { t.Run("before record", func(t *testing.T) { expectedBeforeRecordEventHandlerChecks(t, e) }) changeRecordEventBefore(e) _ = e.Next() t.Run("after record", func(t *testing.T) { expectedAfterRecordEventHandlerChecks(t, e) }) changeRecordEventAfter(e) return nil }, } recordErrorEventHandler := &hook.Handler[*core.RecordErrorEvent]{ Priority: -999, Func: func(e *core.RecordErrorEvent) error { t.Run("before record error", func(t *testing.T) { expectedBeforeRecordEventHandlerChecks(t, &e.RecordEvent) if v := e.Error.Error(); v != "error_a" { t.Fatalf("Expected error %q, got %q", "error_c", v) } }) changeRecordEventBefore(&e.RecordEvent) e.Error = errors.New("error_b") _ = e.Next() t.Run("after record error", func(t *testing.T) { expectedAfterRecordEventHandlerChecks(t, &e.RecordEvent) if v := e.Error.Error(); v != "error_c" { t.Fatalf("Expected error %q, got %q", "error_c", v) } }) changeRecordEventAfter(&e.RecordEvent) e.Error = errors.New("error_d") return nil }, } // OnModelValidate app.OnRecordValidate().Bind(recordEventHandler) app.OnModelValidate().Bind(modelEventHandler) app.OnModelValidate().Trigger(createModelEvent(), modelEventFinalizer) // OnModelCreate app.OnRecordCreate().Bind(recordEventHandler) app.OnModelCreate().Bind(modelEventHandler) app.OnModelCreate().Trigger(createModelEvent(), modelEventFinalizer) // OnModelCreateExecute app.OnRecordCreateExecute().Bind(recordEventHandler) app.OnModelCreateExecute().Bind(modelEventHandler) app.OnModelCreateExecute().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterCreateSuccess app.OnRecordAfterCreateSuccess().Bind(recordEventHandler) app.OnModelAfterCreateSuccess().Bind(modelEventHandler) app.OnModelAfterCreateSuccess().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterCreateError app.OnRecordAfterCreateError().Bind(recordErrorEventHandler) app.OnModelAfterCreateError().Bind(modelErrorEventHandler) app.OnModelAfterCreateError().Trigger(createModelErrorEvent(), modelErrorEventFinalizer) // OnModelUpdate app.OnRecordUpdate().Bind(recordEventHandler) app.OnModelUpdate().Bind(modelEventHandler) app.OnModelUpdate().Trigger(createModelEvent(), modelEventFinalizer) // OnModelUpdateExecute app.OnRecordUpdateExecute().Bind(recordEventHandler) app.OnModelUpdateExecute().Bind(modelEventHandler) app.OnModelUpdateExecute().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterUpdateSuccess app.OnRecordAfterUpdateSuccess().Bind(recordEventHandler) app.OnModelAfterUpdateSuccess().Bind(modelEventHandler) app.OnModelAfterUpdateSuccess().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterUpdateError app.OnRecordAfterUpdateError().Bind(recordErrorEventHandler) app.OnModelAfterUpdateError().Bind(modelErrorEventHandler) app.OnModelAfterUpdateError().Trigger(createModelErrorEvent(), modelErrorEventFinalizer) // OnModelDelete app.OnRecordDelete().Bind(recordEventHandler) app.OnModelDelete().Bind(modelEventHandler) app.OnModelDelete().Trigger(createModelEvent(), modelEventFinalizer) // OnModelDeleteExecute app.OnRecordDeleteExecute().Bind(recordEventHandler) app.OnModelDeleteExecute().Bind(modelEventHandler) app.OnModelDeleteExecute().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterDeleteSuccess app.OnRecordAfterDeleteSuccess().Bind(recordEventHandler) app.OnModelAfterDeleteSuccess().Bind(modelEventHandler) app.OnModelAfterDeleteSuccess().Trigger(createModelEvent(), modelEventFinalizer) // OnModelAfterDeleteError app.OnRecordAfterDeleteError().Bind(recordErrorEventHandler) app.OnModelAfterDeleteError().Bind(modelErrorEventHandler) app.OnModelAfterDeleteError().Trigger(createModelErrorEvent(), modelErrorEventFinalizer) } func TestRecordSave(t *testing.T) { t.Parallel() scenarios := []struct { name string record func(app core.App) (*core.Record, error) expectError bool }{ // trigger validators { name: "create - trigger validators", record: func(app core.App) (*core.Record, error) { c, _ := app.FindCollectionByNameOrId("demo2") record := core.NewRecord(c) return record, nil }, expectError: true, }, { name: "update - trigger validators", record: func(app core.App) (*core.Record, error) { record, _ := app.FindFirstRecordByData("demo2", "title", "test1") record.Set("title", "") return record, nil }, expectError: true, }, // create { name: "create base record", record: func(app core.App) (*core.Record, error) { c, _ := app.FindCollectionByNameOrId("demo2") record := core.NewRecord(c) record.Set("title", "new_test") return record, nil }, expectError: false, }, { name: "create auth record", record: func(app core.App) (*core.Record, error) { c, _ := app.FindCollectionByNameOrId("nologin") record := core.NewRecord(c) record.Set("email", "test_new@example.com") record.Set("password", "1234567890") return record, nil }, expectError: false, }, { name: "create view record", record: func(app core.App) (*core.Record, error) { c, _ := app.FindCollectionByNameOrId("view2") record := core.NewRecord(c) record.Set("state", true) return record, nil }, expectError: true, // view records are read-only }, // update { name: "update base record", record: func(app core.App) (*core.Record, error) { record, _ := app.FindFirstRecordByData("demo2", "title", "test1") record.Set("title", "test_new") return record, nil }, expectError: false, }, { name: "update auth record", record: func(app core.App) (*core.Record, error) { record, _ := app.FindAuthRecordByEmail("nologin", "test@example.com") record.Set("name", "test_new") record.Set("email", "test_new@example.com") return record, nil }, expectError: false, }, { name: "update view record", record: func(app core.App) (*core.Record, error) { record, _ := app.FindFirstRecordByData("view2", "state", true) record.Set("state", false) return record, nil }, expectError: true, // view records are read-only }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() record, err := s.record(app) if err != nil { t.Fatalf("Failed to retrieve test record: %v", err) } saveErr := app.Save(record) hasErr := saveErr != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr %v, got %v (%v)", hasErr, s.expectError, saveErr) } if hasErr { return } // the record should always have an id after successful Save if record.Id == "" { t.Fatal("Expected record id to be set") } if record.IsNew() { t.Fatal("Expected the record to be marked as not new") } // refetch and compare the serialization refreshed, err := app.FindRecordById(record.Collection(), record.Id) if err != nil { t.Fatal(err) } rawRefreshed, err := refreshed.MarshalJSON() if err != nil { t.Fatal(err) } raw, err := record.MarshalJSON() if err != nil { t.Fatal(err) } if !bytes.Equal(raw, rawRefreshed) { t.Fatalf("Expected the refreshed record to be the same as the saved one, got\n%s\nVS\n%s", raw, rawRefreshed) } }) } } func TestRecordSaveIdFromOtherCollection(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() baseCollection, _ := app.FindCollectionByNameOrId("demo2") authCollection, _ := app.FindCollectionByNameOrId("nologin") // base collection test r1 := core.NewRecord(baseCollection) r1.Set("title", "test_new") r1.Set("id", "mk5fmymtx4wsprk") // existing id of demo3 record if err := app.Save(r1); err != nil { t.Fatalf("Expected nil, got error %v", err) } // auth collection test r2 := core.NewRecord(authCollection) r2.SetEmail("test_new@example.com") r2.SetPassword("1234567890") r2.Set("id", "gk390qegs4y47wn") // existing id of "clients" record if err := app.Save(r2); err == nil { t.Fatal("Expected error, got nil") } // try again with unique id r2.Set("id", strings.Repeat("a", 15)) if err := app.Save(r2); err != nil { t.Fatalf("Expected nil, got error %v", err) } } func TestRecordSaveIdUpdateNoValidation(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() rec, err := app.FindRecordById("demo3", "7nwo8tuiatetxdm") if err != nil { t.Fatal(err) } rec.Id = strings.Repeat("a", 15) err = app.SaveNoValidate(rec) if err == nil { t.Fatal("Expected save to fail, got nil") } // no changes rec.Load(rec.Original().FieldsData()) err = app.SaveNoValidate(rec) if err != nil { t.Fatalf("Expected save to succeed, got error %v", err) } } func TestRecordSaveWithAutoTokenKeyRefresh(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() scenarios := []struct { name string payload map[string]any expectedChange bool }{ { "no email or password change", map[string]any{"name": "example"}, false, }, { "password change", map[string]any{"password": "1234567890"}, true, }, { "email change", map[string]any{"email": "test_update@example.com"}, true, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { record, err := app.FindFirstRecordByFilter("nologin", "1=1") if err != nil { t.Fatal(err) } originalTokenKey := record.TokenKey() record.Load(s.payload) err = app.Save(record) if err != nil { t.Fatal(err) } newTokenKey := record.TokenKey() hasChange := originalTokenKey != newTokenKey if hasChange != s.expectedChange { t.Fatalf("Expected hasChange %v, got %v", s.expectedChange, hasChange) } }) } } func TestRecordDelete(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() demoCollection, _ := app.FindCollectionByNameOrId("demo2") // delete unsaved record // --- newRec := core.NewRecord(demoCollection) if err := app.Delete(newRec); err == nil { t.Fatal("(newRec) Didn't expect to succeed deleting unsaved record") } // delete view record // --- viewRec, _ := app.FindRecordById("view2", "84nmscqy84lsi1t") if err := app.Delete(viewRec); err == nil { t.Fatal("(viewRec) Didn't expect to succeed deleting view record") } // check if it still exists viewRec, _ = app.FindRecordById(viewRec.Collection().Id, viewRec.Id) if viewRec == nil { t.Fatal("(viewRec) Expected view record to still exists") } // delete existing record + external auths // --- rec1, _ := app.FindRecordById("users", "4q1xlclmfloku33") if err := app.Delete(rec1); err != nil { t.Fatalf("(rec1) Expected nil, got error %v", err) } // check if it was really deleted if refreshed, _ := app.FindRecordById(rec1.Collection().Id, rec1.Id); refreshed != nil { t.Fatalf("(rec1) Expected record to be deleted, got %v", refreshed) } // check if the external auths were deleted if auths, _ := app.FindAllExternalAuthsByRecord(rec1); len(auths) > 0 { t.Fatalf("(rec1) Expected external auths to be deleted, got %v", auths) } // delete existing record while being part of a non-cascade required relation // --- rec2, _ := app.FindRecordById("demo3", "7nwo8tuiatetxdm") if err := app.Delete(rec2); err == nil { t.Fatalf("(rec2) Expected error, got nil") } // delete existing record + cascade // --- calledQueries := []string{} app.NonconcurrentDB().(*dbx.DB).QueryLogFunc = func(ctx context.Context, t time.Duration, sql string, rows *sql.Rows, err error) { calledQueries = append(calledQueries, sql) } app.ConcurrentDB().(*dbx.DB).QueryLogFunc = func(ctx context.Context, t time.Duration, sql string, rows *sql.Rows, err error) { calledQueries = append(calledQueries, sql) } app.NonconcurrentDB().(*dbx.DB).ExecLogFunc = func(ctx context.Context, t time.Duration, sql string, result sql.Result, err error) { calledQueries = append(calledQueries, sql) } app.ConcurrentDB().(*dbx.DB).ExecLogFunc = func(ctx context.Context, t time.Duration, sql string, result sql.Result, err error) { calledQueries = append(calledQueries, sql) } rec3, _ := app.FindRecordById("users", "oap640cot4yru2s") // delete if err := app.Delete(rec3); err != nil { t.Fatalf("(rec3) Expected nil, got error %v", err) } // check if it was really deleted rec3, _ = app.FindRecordById(rec3.Collection().Id, rec3.Id) if rec3 != nil { t.Fatalf("(rec3) Expected record to be deleted, got %v", rec3) } // check if the operation cascaded rel, _ := app.FindRecordById("demo1", "84nmscqy84lsi1t") if rel != nil { t.Fatalf("(rec3) Expected the delete to cascade, found relation %v", rel) } // ensure that the json rel fields were prefixed joinedQueries := strings.Join(calledQueries, " ") expectedRelManyPart := "SELECT `demo1`.* FROM `demo1` WHERE EXISTS (SELECT 1 FROM json_each(CASE WHEN iif(json_valid([[demo1.rel_many]]), json_type([[demo1.rel_many]])='array', FALSE) THEN [[demo1.rel_many]] ELSE json_array([[demo1.rel_many]]) END) {{__je__}} WHERE [[__je__.value]]='" if !strings.Contains(joinedQueries, expectedRelManyPart) { t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelManyPart, calledQueries) } expectedRelOnePart := "SELECT `demo1`.* FROM `demo1` WHERE (`demo1`.`rel_one`='" if !strings.Contains(joinedQueries, expectedRelOnePart) { t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelOnePart, calledQueries) } } func TestRecordDeleteBatchProcessing(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() if err := createMockBatchProcessingData(app); err != nil { t.Fatal(err) } // find and delete the first c1 record to trigger cascade mainRecord, _ := app.FindRecordById("c1", "a") if err := app.Delete(mainRecord); err != nil { t.Fatal(err) } // check if the main record was deleted _, err := app.FindRecordById(mainRecord.Collection().Id, mainRecord.Id) if err == nil { t.Fatal("The main record wasn't deleted") } // check if the c1 b rel field were updated c1RecordB, err := app.FindRecordById("c1", "b") if err != nil || c1RecordB.GetString("rel") != "" { t.Fatalf("Expected c1RecordB.rel to be nil, got %v", c1RecordB.GetString("rel")) } // check if the c2 rel fields were updated c2Records, err := app.FindAllRecords("c2", nil) if err != nil || len(c2Records) == 0 { t.Fatalf("Failed to fetch c2 records: %v", err) } for _, r := range c2Records { ids := r.GetStringSlice("rel") if len(ids) != 1 || ids[0] != "b" { t.Fatalf("Expected only 'b' rel id, got %v", ids) } } // check if all c3 relations were deleted c3Records, err := app.FindAllRecords("c3", nil) if err != nil { t.Fatalf("Failed to fetch c3 records: %v", err) } if total := len(c3Records); total != 0 { t.Fatalf("Expected c3 records to be deleted, found %d", total) } } func createMockBatchProcessingData(app core.App) error { // create mock collection without relation c1 := core.NewBaseCollection("c1") c1.Id = "c1" c1.Fields.Add( &core.TextField{Name: "text"}, &core.RelationField{ Name: "rel", MaxSelect: 1, CollectionId: "c1", CascadeDelete: false, // should unset all rel fields }, ) if err := app.SaveNoValidate(c1); err != nil { return err } // create mock collection with a multi-rel field c2 := core.NewBaseCollection("c2") c2.Id = "c2" c2.Fields.Add( &core.TextField{Name: "text"}, &core.RelationField{ Name: "rel", MaxSelect: 10, CollectionId: "c1", CascadeDelete: false, // should unset all rel fields }, ) if err := app.SaveNoValidate(c2); err != nil { return err } // create mock collection with a single-rel field c3 := core.NewBaseCollection("c3") c3.Id = "c3" c3.Fields.Add( &core.RelationField{ Name: "rel", MaxSelect: 1, CollectionId: "c1", CascadeDelete: true, // should delete all c3 records }, ) if err := app.SaveNoValidate(c3); err != nil { return err } // insert mock records c1RecordA := core.NewRecord(c1) c1RecordA.Id = "a" c1RecordA.Set("rel", c1RecordA.Id) // self reference if err := app.SaveNoValidate(c1RecordA); err != nil { return err } c1RecordB := core.NewRecord(c1) c1RecordB.Id = "b" c1RecordB.Set("rel", c1RecordA.Id) // rel to another record from the same collection if err := app.SaveNoValidate(c1RecordB); err != nil { return err } for i := 0; i < 4500; i++ { c2Record := core.NewRecord(c2) c2Record.Set("rel", []string{c1RecordA.Id, c1RecordB.Id}) if err := app.SaveNoValidate(c2Record); err != nil { return err } c3Record := core.NewRecord(c3) c3Record.Set("rel", c1RecordA.Id) if err := app.SaveNoValidate(c3Record); err != nil { return err } } // set the same id as the relation for at least 1 record // to check whether the correct condition will be added c3Record := core.NewRecord(c3) c3Record.Set("rel", c1RecordA.Id) c3Record.Id = c1RecordA.Id if err := app.SaveNoValidate(c3Record); err != nil { return err } return nil } // ------------------------------------------------------------------- type mockField struct { core.TextField } func (f *mockField) FindGetter(key string) core.GetterFunc { switch key { case f.Name + ":test": return func(record *core.Record) any { return "modifier_get" } default: return nil } } func (f *mockField) FindSetter(key string) core.SetterFunc { switch key { case f.Na me: return func(record *core.Record, raw any) { record.SetRaw(f.Name, cast.ToString(raw)) } case f.Name + ":test": return func(record *core.Record, raw any) { record.SetRaw(f.Name, "modifier_set") } default: return nil } } M$ xr?yU)IJ\J%Iz0TT|%%8LcTCUSCIolnĵړͬH4CmxD$GgGHgGrK 0J{=|QAm L" &5Ϻ@xRN0<_ǤBp prMkؑ꿳v%) Km3380kxB֜ Qp J{ 3 Cg$wx"8oa @-y{DbbR(GboMۚ'-A=vN%@gtD*PVQ =)v[w85QhdDVّEvMTl5%/Z@zdvF_k֩%XP*م#XUeU[rgJz0YD7%ĵǙ(#"Ap7`kDs79*96˝\ʵ|1K| n6R誅kFKԮ}l/x]AO0 0=5) 4uKZO m8M??~lGH_L} #cE?t%ȿ} ܎][}DopW*TU)fU.PjQf3Wd<.RdBi1e.2"3!i^I]>3*&+7_=Z)e)hZ8֒^FqH` DbXL?T!*G -:NF⸔g(44A'KӦ8t>OBub~@%\FMae"v{/op VRȷ$(PQ]=P9k5d8PPO )>h`@'9fSе4#g9;c>r*?ܼE Xpz5|w'Vqϛ S4玽ZDNsV,Ϋ)a]Ȍ&֎,tFPX4ze/p혘e&H60kpuՔyN)b`/ZqgAUWe_1 {EdG`WD\ډ4` TS5UcFi+ktj.! y% 4llpjb[Njb! s5P"@(xLO6[ofh^fIvw7Ǜ_j" g!~>aC+߭p|xeUxZ43 e$ YZIJ8FJ2-*`A}$QI@կD~]aZ8̼v삕ֿ|kѪ^TtQ1/໱~ Q$[yGFi21gK`E2_&b`c EVe3nK(MsOA2"8)jr2n6{ۑ ?,yiKc 3HtCȊ h#'`C50#%~F励,Țfӓ3@zn@rBV2FO3r*NsPju|ap02b&`)&+ C !uܐ<?&@ X'1o jsG\Ns=`]@)Tuo9;x_V ?bl2`i[Җ+o>~qۗX @.b  me/(~EѢ8[X'F+a&%ܠ| +(G jmU£aV?P24rZT|ΖSIgP-1R4n }´gIcZݺg^WFuhn]Q3eWI=_nmzhHkΊ§Lgĸ8dzSMȕ-ӡ]S̠ţpiXA? ֐Q%gb7Q?HÜ'X`ƥv [ߣ0Ƒn+m4$rV+ A>݉OBi~sNM '"gQr&\73o{Mzs\[ɼ <ݮ`?j龰 0˫æ\ejNf| ۹Bbb=gӿ-Mdb`:*1"Z d-aRIɨ%C&P9;:paO_h)oZwFmb^ϲchnwEm2g bZ:q*WD'X-5&)=GA+ꗄp˸VC]_^w tꇀ (!Me ?\O! /ck!_S7.6dX%;|wKV+wSZS}]p?.eydΙzu5QՎ+ϧ/KH N@v2 \2^pxn:Eh{lM6.r!7K2k6z?K~ Ff?m%/U&\2LIk݅5$m>p~oDpהP  kۜ@5,/Ж`Hz\ g[i>ilUc -0 j_D(OĶ l;JrH^`qEOB't pw%:ڗ|(j䯝}u&`k@(KnmvtFq ߤ"Kl'Xk #IAnBĝ̟'(wۑݥ )@b߬dAn Ic/Il2rwߒwg})Rْu0mM D~(#>LUZF뮽 7tq99aÐXv]5Ps!+҅ZxX4j卸ȴ8<~fH=>afکq|_RMCroyg 4EJޗ .}0@o?N%:Mu&CF歈F}4%RC wxރon~"4W0Qg fEGN92]5Y*&'&Hte%7Jk#!r|}Hb݊ЖiQBZ~vgrNѶ'v ף[;o%WϞa.ϝ$%%fVK?:@ g4IJ^#4Kk[jΐ-u)e%|( !so,v|DTIዶx?8n̺wj g U0Mȼ~|M(3 W}ȴ9nj=]d5JĭΓ(a;չ/AS h^}e[e^cո:O+]mISmh|x;8qB GFb^U~bĩqe=YQXh25xȸqB^mid3 xYs6Wѳa1 eڛtҹI&B*kmڎ ɥ8bv sÈz&0@R*B9 LԍY|UmQvB*@CrQ^tY3Ŋ VE {jpĎ1 Xԥ Frjq8['4"M#<)jlQV.'Cq,c')Mj2UnٻސL6[l0ZhJKF3tێl۹,ήI= DKSxnhT++d?DmrN€c(Dlg?0=Ky:qb`n<"kC^t•l wt ,%pazCwfRwebx{~b ==PlයBtRಿ>NE{88k9{'0W~VUL>Bs+z~Xko/6y7Յ5R`|ރ xY"v#,9E"zQDDz?MI'JU%gxnHq`NN~#@*ȯzu)}MD'$sPR5x17,jXg[2)ӇP&4:fDNj3>ݡ\r#%{4oogg)‰%Hn.5qd+@L@RrS)7a]Lo/?q|GnD1m&L{rse{OyvsHu{PV-%U( gi2eQ qFvhOeL$9f_lG9geݼBM{fy: U]@y[QTAՒ3&{Aș-ų4ˏI&Hb2]smLp~bYgڶ絡^"{A$??0GA+2*~fT6^Ï'cJ>nD3J^=+CQ~;C+nwtqSOǯ_+ >=sI" Jذvx v?[貀mB' ݄ע>3 -f `ǣA@ety~W䮝[.|kk?N:/^Ȍ-*V+U]%OAAjZ[Qz֔zʡ _v Ikis!jW5~(Dw)q]!U3} _H+{xegnN4.Օ|<&wbQXŞ?vľ#\|8:X4O铆kקN@7' ^nmUU{"@;,#sn^<;mhr]8SI o%Cϋ@C09LYK b ->\]S-7Û~IW\n$aT9SwEXCRuDg]=s${G?b[|5`2Uhx"e b}Gȑ!',ӆ!ݍV f| /N9vEn$"i ٯabtHpCң Z %8sqVץd#_KP4; i0utT. %-*0_.}(avwP/ƍCyaE/}`·U6Bx;`v/a4TԜĒb|ԊļKE&7JL#®Yy(+Kx[ozDCEļL %.N̒$\}E{-n9ɕ Ey%řU) ŕy%V 99%yi9) vHe`ɝsRv4x[mSlf:S!0%$t2&~H3f-A ٳ+ٖd sgMFKzH ULf3JT(6Nrņʁǐ*ڣmA?3a6/dʱATH$|9Mx8y4)ΉGJri8`h< a0<}@i -=M3 ( &C~ʚ\ bhf}Ԡ>SFO;7PTP}YM$WeG8̪7ctTp xHbv{)͍.O a+K&d\-r}uXNgA2hNi R|$MLr~*] 4W~tH x/qy4XS 󫨿kEyuapƙl'D5gUgi̦SCP6k:4G} -,+Wf}z@ڙnIփ[bSod3!Ղ*9[^{Ypv\j^CWx Hfln PDwq8C7FRjy:l;&y쾁H¡I\ZtA.5$oiDt$5Y!=kI^@ OX֠Z FS+~0d6ܺK]4al9 ['*FZ^prc";˓JYGKz)~W 1", "", 0, 0, nil, true, nil, }, { "empty filter", "demo2", "", "", 0, 0, nil, false, []string{ "llvuca81nly1qls", "achvryl401bhse3", "0yxhwia2amd8gec", }, }, { "simple filter", "demo2", "id != ''", "", 0, 0, nil, false, []string{ "llvuca81nly1qls", "achvryl401bhse3", "0yxhwia2amd8gec", }, }, { "multi-condition filter with sort", "demo2", "id != '' && active=true", "-created,title", -1, // should behave the same as 0 0, nil, false, []string{ "0yxhwia2amd8gec", "achvryl401bhse3", }, }, { "with limit and offset", "sz5l5z67tg7gku0", "id != ''", "title", 2, 1, nil, false, []string{ "achvryl401bhse3", "0yxhwia2amd8gec", }, }, { "with placeholder params", "demo2", "active = {:active}", "", 10, 0, []dbx.Params{{"active": false}}, false, []string{ "llvuca81nly1qls", }, }, { "with json filter and sort", "demo4", "json_object != null && json_object.a.b = 'test'", "-json_object.a", 10, 0, []dbx.Params{{"active": false}}, false, []string{ "i9naidtvr6qsgb4", }, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { records, err := app.FindRecordsByFilter( s.collectionIdOrName, s.filter, s.sort, s.limit, s.offset, s.params..., ) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } if hasErr { return } if len(records) != len(s.expectRecordIds) { t.Fatalf("Expected %d records, got %d", len(s.expectRecordIds), len(records)) } for i, id := range s.expectRecordIds { if id != records[i].Id { t.Fatalf("Expected record with id %q, got %q at index %d", id, records[i].Id, i) } } }) } } func TestFindFirstRecordByFilter(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() scenarios := []struct { name string collectionIdOrName string filter string params []dbx.Params expectError bool expectRecordId string }{ { "missing collection", "missing", "id != ''", nil, true, "", }, { "invalid filter", "demo2", "someMissingField > 1", nil, true, "", }, { "empty filter", "demo2", "", nil, false, "llvuca81nly1qls", }, { "valid filter but no matches", "demo2", "id = 'test'", nil, true, "", }, { "valid filter and multiple matches", "sz5l5z67tg7gku0", "id != ''", nil, false, "llvuca81nly1qls", }, { "with placeholder params", "demo2", "active = {:active}", []dbx.Params{{"active": false}}, false, "llvuca81nly1qls", }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { record, err := app.FindFirstRecordByFilter(s.collectionIdOrName, s.filter, s.params...) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } if hasErr { return } if record.Id != s.expectRecordId { t.Fatalf("Expected record with id %q, got %q", s.expectRecordId, record.Id) } }) } } func TestCountRecords(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() scenarios := []struct { name string collectionIdOrName string expressions []dbx.Expression expectTotal int64 expectError bool }{ { "missing collection", "missing", nil, 0, true, }, { "valid collection name", "demo2", nil, 3, false, }, { "valid collection id", "sz5l5z67tg7gku0", nil, 3, false, }, { "nil expression", "demo2", []dbx.Expression{nil}, 3, false, }, { "no matches", "demo2", []dbx.Expression{ nil, dbx.Like("title", "missing"), dbx.HashExp{"active": true}, }, 0, false, }, { "with matches", "demo2", []dbx.Expression{ nil, dbx.Like("title", "test"), dbx.HashExp{"active": true}, }, 2, false, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { total, err := app.CountRecords(s.collectionIdOrName, s.expressions...) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } if total != s.expectTotal { t.Fatalf("Expected total %d, got %d", s.expectTotal, total) } }) } } func TestFindAuthRecordByToken(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() // Generate a fresh verification token to avoid hardcoded expiry issues verificationToken, err := tests.GetUserVerificationToken(app, "nologin", "dc49k6jgejn40h3") if err != nil { t.Fatalf("Failed to generate verification token: %v", err) } scenarios := []struct { name string token string types []string expectedId string }{ { "empty token", "", nil, "", }, { "invalid token", "invalid", nil, "", }, { "expired token", "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoxNjQwOTkxNjYxLCJyZWZyZXNoYWJsZSI6dHJ1ZX0.2D3tmqPn3vc5LoqqCz8V-iCDVXo9soYiH0d32G7FQT4", nil, "", }, { "valid auth token", "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo", nil, "4q1xlclmfloku33", }, { "valid verification token", verificationToken, nil, "dc49k6jgejn40h3", }, { "auth token with file type only check", "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo", []string{core.TokenTypeFile}, "", }, { "auth token with file and auth type check", "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo", []string{core.TokenTypeFile, core.TokenTypeAuth}, "4q1xlclmfloku33", }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { record, err := app.FindAuthRecordByToken(s.token, s.types...) hasErr := err != nil expectErr := s.expectedId == "" if hasErr != expectErr { t.Fatalf("Expected hasErr to be %v, got %v (%v)", expectErr, hasErr, err) } if hasErr { return } if record.Id != s.expectedId { t.Fatalf("Expected record with id %q, got %q", s.expectedId, record.Id) } }) } } func TestFindAuthRecordByEmail(t *testing.T) { t.Parallel() scenarios := []struct { collectionIdOrName string email string nocaseIndex bool expectError bool }{ {"missing", "test@example.com", false, true}, {"demo2", "test@example.com", false, true}, {"users", "missing@example.com", false, true}, {"users", "test@example.com", false, false}, {"clients", "test2@example.com", false, false}, // case-insensitive tests {"clients", "TeSt2@example.com", false, true}, {"clients", "TeSt2@example.com", true, false}, } for _, s := range scenarios { t.Run(fmt.Sprintf("%s_%s", s.collectionIdOrName, s.email), func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() collection, _ := app.FindCollectionByNameOrId(s.collectionIdOrName) if collection != nil { emailIndex, ok := dbutils.FindSingleColumnUniqueIndex(collection.Indexes, core.FieldNameEmail) if ok { if s.nocaseIndex { emailIndex.Columns[0].Collate = "nocase" } else { emailIndex.Columns[0].Collate = "" } collection.RemoveIndex(emailIndex.IndexName) collection.Indexes = append(collection.Indexes, emailIndex.Build()) err := app.Save(collection) if err != nil { t.Fatalf("Failed to update email index: %v", err) } } } record, err := app.FindAuthRecordByEmail(s.collectionIdOrName, s.email) hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err) } if hasErr { return } if !strings.EqualFold(record.Email(), s.email) { t.Fatalf("Expected record with email %s, got %s", s.email, record.Email()) } }) } } func TestCanAccessRecord(t *testing.T) { t.Parallel() app, _ := tests.NewTestApp() defer app.Cleanup() superuser, err := app.FindAuthRecordByEmail(core.CollectionNameSuperusers, "test@example.com") if err != nil { t.Fatal(err) } user, err := app.FindAuthRecordByEmail("users", "test@example.com") if err != nil { t.Fatal(err) } record, err := app.FindRecordById("demo1", "imy661ixudk5izi") if err != nil { t.Fatal(err) } scenarios := []struct { name string record *core.Record requestInfo *core.RequestInfo rule *string expected bool expectError bool }{ { "as superuser with nil rule", record, &core.RequestInfo{ Auth: superuser, }, nil, true, false, }, { "as superuser with non-empty rule", record, &core.RequestInfo{ Auth: superuser, }, types.Pointer("id = ''"), // the filter rule should be ignored true, false, }, { "as superuser with invalid rule", record, &core.RequestInfo{ Auth: superuser, }, types.Pointer("id ?!@ 1"), // the filter rule should be ignored true, false, }, { "as guest with nil rule", record, &core.RequestInfo{}, nil, false, false, }, { "as guest with empty rule", record, &core.RequestInfo{}, types.Pointer(""), true, false, }, { "as guest with invalid rule", record, &core.RequestInfo{}, types.Pointer("id ?!@ 1"), false, true, }, { "as guest with mismatched rule", record, &core.RequestInfo{}, types.Pointer("@request.auth.id != ''"), false, false, }, { "as guest with matched rule", record, &core.RequestInfo{ Body: map[string]any{"test": 1}, }, types.Pointer("@request.auth.id != '' || @request.body.test = 1"), true, false, }, { "as auth record with nil rule", record, &core.RequestInfo{ Auth: user, }, nil, false, false, }, { "as auth record with empty rule", record, &core.RequestInfo{ Auth: user, }, types.Pointer(""), true, false, }, { "as auth record with invalid rule", record, &core.RequestInfo{ Auth: user, }, types.Pointer("id ?!@ 1"), false, true, }, { "as auth record with mismatched rule", record, &core.RequestInfo{ Auth: user, Body: map[string]any{"test": 1}, }, types.Pointer("@request.auth.id != '' && @request.body.test > 1"), false, false, }, { "as auth record with matched rule", record, &core.RequestInfo{ Auth: user, Body: map[string]any{"test": 2}, }, types.Pointer("@request.auth.id != '' && @request.body.test > 1"), true, false, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { result, err := app.CanAccessRecord(s.record, s.requestInfo, s.rule) if result != s.expected { t.Fatalf("Expected %v, got %v", s.expected, result) } hasErr := err != nil if hasErr != s.expectError { t.Fatalf("Expected hasErr %v, got %v (%v)", s.expectError, hasErr, err) } }) } } ;0xWMo6=Gbjԇ"i" Z7Y+l$%)F3%Q$($c|y}Q>B4FhJ[HVdEqD&/UT]ݟvş÷`h`jaqFjg-h$[%MT*i;n[{qQC ؉BI8 !˜Gbt-aC'MωCC/2y$HQ>BkYu!iWxQVb"fF+UXre>\H.> Bt;p5N+)su&Ƌ?hIYOA9Ib,0$u5N]![QIACQ-[nt1 e68WM>,$ͯ N\wG.3肨]rMrdž &1{-3u35xa͎gC$Xaxxcw1z;7iNSp{Q@SR}.eeɺQ};%]X٬-pxx=Yw~,7coi̊O{1dG,e͗C8*zcҐV[Ӿr\Ƥsf^gs:oh#zoi Zpm~JvWl:Q]Y[5=7{5-Or&9Kg{- EY1\~=gƬŠâ-?iVxCfB8GFb^U~bČ&>T(=ٝws(>uDʞmK?ŕb*ߕj:f\ KȃRGV$ቋ^rt 2OF˜d-iJW}EڄUpU*` C϶V>,oXfk4aqzSvDr={ӟ1RTY,$~Xp 'C)"΄.؊2i™(sSJ^hIc*4/R'CrAoy)Bcj"NtTpK\LQBCsV^0rpX#(O%BG>8+ !"^h*ӗpƮ3n'5F0-Kd `-5v+OSx =6kI=3Ǡu0w&g XMA$Sk{Qw2k ='v6p)V-qۛrir0[wbX˸ۅ|ۛ*qBlI@K=Bάa>ۛ- wG_hS9^ș]`߷xv'/A=ۗ} HCJ\2I{gfU(ݾᾭ4;؝"r-AKӛcq"#-gL379t]n+VCh2j_i{κQlUgSe>V^k'NWKj /R+V5-m*M3: ߾u[ >vt_`EK2:  7TB@Rf>ۍRͲ8!;vFaoYRr5HQ3Vf4WKD`E/+sOɗKlY0Qb#2e+Zڐj;=NƔ<&x[0EaFFb^U~b~Rbq~r~QRzfIFi^r~>L~b$qE;?϶l?xpTnCfuηlJ~ xTP.J^0bd~:Y$p>[ρ N />C|MFO6fRlLw/eV$!7 LoA='*S%)l PoקOЩp(ºʁ4cQMh3u)ŕqY~% 3U$AgRpB',`X$6[do@0/qf?p!h GB|Qˈ+; +9#XQ;@ o땵j &6 y % |KYRNe `v`2a!abf`rc¨dGk-HJ!O`He Ƀ3$O 5a!'5'L<Ʊф&kGr#2O:|y*\|0SP/r sFP-7[YJ Q`:{*-Map6V|{,VVU[0uT`,`.KPc$8[a ̢|BrE 2kF$,U)$/^ ГdAo'*q =K/n EMsSqͪϧ`ԋZ5=ZV϶m66;Uh` MX}1ThN y,=ȯ}Qʩшe*j9D,hf͉jt[z>XK+J!h?7 ЀE,iVE/5~23yRN:[T.#HNݎ `P FX-@wZ[xɓ>[Pj[Ci>џV|4yS)HNb VCb䚱bY>nQڝ8. \XL^y*bH҅4#gypO)bo_5ҹn6dܤ5k>Xgd'?|E@d4о */b[~8j{c5 \d)#ha䮞=!jYVȮGd&ZnhIe>gU`DRTY^Oᇼ9\X ;n~&Kx5q F@cX ˺4Et-5{{nΓ!VmKm5{H5n"? p+v=EL'`$cy@iUoqQۦU;[>|~0?;관~lԩE{GG{;vG#{YÖ<<\!KU5aq"SwG 49$)Z}gTQ?@)-#*,%)b<֙-&=BW/!."s7|qVQ]P$ʚD1J`Wq>?8r^iG=H ZX)pIee'ɤ3uFPИ)@IIoΏOFr "%htԪ*q{e?I"8ʡEy@C6u:rbx+,*psBK!gj!¢# $W? z4e{; a (bg S](FߧT9 dq|m;BLY0%M%*$h,4fꅡZpƦᒻ HzQm{8ӭ0~*xa֠U͘_@U@P46B;ps\J w³LbLqWu.J&VVr{eo;reW7i~ s_~$}A2ϳnMjVDrĭS;Bj"뿍߽]REdHW4DdeR%MP K፷QWCrfhQZ\ejʐ}ǟ\m aFC8s@piKk{6jx#7 ݴt- ?<)`A؜ȋ2øXM|bB ,2JԇH"BJfymoc ЇBw.~%3hcg'8M R,#)Q_ ._XT-g34'P /PBI(e bQ=?/B%I_A[A ا&PjSiOsF½CrWz`w:OL(%R7Qoy~ T tg>2Pl)jia!pفTsS]nO t>60,eefьp͖7A܈ėpo3q،\btP(Pzalk ZҴ6LU'@p'NAy/vgW@sp߮sfs@sc!xN@A@I +yFR G D0u˰aFBMJ c^~@}( l4| snԲ5!TpcظL Z5KE|d{&1{0u'~^つ9l34''5}w*."|,gn}(G_j5Vj2CG; Y=74i(heTW ֠t~-6i&NZ+;݊Xx2 YLU`$ 4f.W\r6bW.46zlxNj1wb@3{^i=_hf9vR:L ĺs{/F)+Woڇ3+} f5 R :~^@KLwA0(^vP0OI&2ЗLJ,JXvP/{x6ӣ֮Mw9PӳZNzv \fbeS lŶ< }D`d' l %Nhl3R PlU_dq"ئq 1RZ)ςHK G3J4FIwj uzcJ@ڣ 5b+gљ.*5Y>6oR:HRf]z <^P|rW̲ hJ{dsbXP(XrV86QmI -iq5+m pR2EaOLD`bɅQ5pN7&:TTzeRcɔ]N)1mUeg[Ul 1$y}ةSg"n EvIC7켚z>Gd5A_X:5Lݓ'C$#+бsxdm4 +<:V[QNfU*_XpXK^1>%޳hR@svޡdC'^~{qKxUb%9C]J({WklV*B bJP^}ݴ} 6TDP}9fyYؓ@<)L!$Y `gZQ^|'TI6鐆N.V$eO !җnhelCB_bw9;Έ 1iPft}7*SخQ8ɂ gd7.ڭq ~;Zv[xcvP#kS]E]| #qB]|Z LPALL^0$W̚׋17WS3 o6֩(Γ]5@ec=~g-="ySpyQ7p :<Ճ#7v8|_^ޤ4IEBv°_/"R $MĎ[JCʧ.}+[2,)]ʰ9@lta @y`k Rsu VEszsq:E%wp4?_նT}QPǿꋵtû1MGVRACڀi220l*ЗpWq=m?4]v>U;į꺶D4LDF+E]8v̤t^{&?==%I h4-yi5t1հyfи^;¼>n}]Tɐjj_'#>p+W76*ֺZ_7Ÿ%%lgB82|EEag `_8qOxCJvC=,uB[\Hn`| j\aܤNSuy @=OnsC֠`SN^Px Cެ*|RK pkgw>@-rW5{" U < nOڿ?bTwc: 6Q $@G=܀&q nvv"8&6fuuH[7>ٿO=/;K2Qx wPG3},8E>'`x8e6ɼz^y'3[dLvr󬔠͙- 'ucKLIM٬4ubM$6[y1n9V@Ox<\ 7 '0REg rq+((*(%zZ x\ms6L 3SN7N|fZ-^(R%)Ǯ'],ىig }yv'K)&i& [[|fmyL&4J.GżҜEgF3\[py0IE: 0Տ4'#Qiq>Q,H\NYT[;[[d"N1Xe!{x-,c0 8 ~bT^LO2a-Of f= }4v00sD1My0rRȩ5bʜ"џ>ՋkrsQD&a9t4ɤ r/34z*4ux0b1C ʉ넊,8bKkC$,Q4|<2 gMɋbtl"<(}=N, >Ɵ lkzRW _@ ɫ0Wa">S=;rZAA8po}& z Hv0:YYO=J#}H2⒄<`=˳ZDfoߝp(A?4"fE#ܾO0v>;}n1L?.dN"q: cBz+'"^&#n&/R.|a$/2y>[VLM&2ϡC`"b6.nb0bMyK w:ys1~%B1/99R+ɱNb`:6BY4/ӤȐM-coKP?3LQwXJ r^?Q8GE:GB#PF8CTB z[+IO<}z y<-l'iAȃuϾ!lp8|jϤ^%5̇4cs>1ڦCxY\eL{t,2"DmN/{ss=Qfp3e-ɘh:1Y R!$qX@wC$XAA3$j:{ \) ajMqG`L>G8WR$(?CʩBYɛ1!i),2NYktHV!5D|Mg_r1=Wwj$Ϧ7c X)zVږ, 6pqH|CrM='#oM^OX"+v 6{+)6l6Yiyۯͭ"[3QO\D2搄;l,D\!84]|Be [Eo#4ө:0IthSl]QNqޡ12jXPhʃxA&#d(M\3n֞=$)\w=1!' 3c6OݝQͲ=ڎ^3R4iolZHt)&2}BJ r| "HT㡾0ixhpZ87myJʴN3 PĮv`H|Rnv St:`YM"k˒1U寧ZA.ǗF(\Mq=f2Rv̊by32ŚDlD?ρ P˸/ֽ(DjA)*g}c.?nLX&>\ՅG{U$F5YhܫQVK q,isKis~%Ż8DO;(kGS5mӀPV-%g'@X*;:%45"dP{Y @H}#\ۡW V]Ep~Cm}wpcIkJxj~GJդOg ejwMpu}UWJ\%tNƯtUq̙lcHSk]Xfp/10`Ҙ׈&w&Otil$Txٻ%&]qWLsw4ʄ kef3 5k tiC-#\`Kn^xC^j`ko~qm55Zi}.#rh;ْ˙mS뮉+jRv5] 6_ƒpO3W֧o*1i؞5bc!ftq>XUU^h0mE$Zږڑ,q pcvZ겒fjV_/Tme:@]^+aAݡ\OF(8rdè3ܮ硞wؤ8^-3>fڲ=q=5 )ԡjF6+4H0ĺZs +\Cdwֹʇnw0JMb.^` ~* >OB̓Aky ËkTRwPTj8:jށLfhWuFURWh xK$i-@QĺlE60|Q2xJObV/GQ?<3ieT`&6ytAahy zu>IZ 6ثAN񵎨[@t^Y7_] gBa3lS=+}^@Iũ@]9'\ j+>nJJw&}_۠ѦؤW,4K̗ӕ7gjD%\[_N}y1;N!!U#&iZMg2Įo'Xc\ +3eXSU@aW]q6 [ Em85 hS1S+**o(C 17UxPIn랍G20z_mqzM)_a/ZA88HP4iYR1eS(S?u޶e7W6o6LvbR?7Nˍz˺ݵ5j߯NJT7ޗ^ek?w@N7/yۉm$T)ڞm[i2Uѣ6X'w?^ mlO϶HhX0GM~ި=3M;Z~w7u[%u3z5>/43^Z7U=,!cuWdUڣE7# jBW\avԯl&DĠ5T[LF!ﱖk˟6k7jX{ڱ2`^ViXx/Nx>qK76 ' 0>[!x͸qBGFb^U~bB M;)8U$XS)=$4I/9?W`[NТͿ9wZxWr6>OLS2#Ӈqnlٕ@$$&a2C $H$[drHA Ri Q0 3fٚ~j>!sLFI҆6^թuputgĩnͩimMbwLQZqx>/4gg$Mo!P6`t_fsLfgv+\ %4E֮6 ~ECɵ:ҒIPSnW¤,'!bZ3KޜKZHV\7b39uؐqxqR%LLOc@'SgjML1tk:2S$ɽ,6;֊@:np6L<;X֙oC`zPaȱ2;%Y;OQ˟#Y{чBcaHax.  ^ :%ESz(7Yl 4 B1=pӧp Gަx'*jآӍ/G~t aLJ> ]vx7/r@>gq yq |;. FTNH_PHJ {#^=$eԹװu?G/\H9"u(DNpEExqDG?Ґ\p'.]r#85,'˫9l8oU3::Q%T y5MίcKY~ D(Gx7,TC;-NEڣ ^ZVxz8& Cwpe〕Р?dIH\qYqC/nfS;_k"A\w6N[lr3ŎW<( 5=?["O..Qw+r]3vSy{;&WQKouna svv"ߥy'TmuVҵm7l Zbtsw[$IKbL-Y4d:ʡh2ڃc(+rdvݥd.)Q/Cn㛙ofɝAHƁEcl\(m!leod }r'j|\Pl~`AjT*7vV G \J} τ~Ɨ<[(:0)8g9NYuQQ5L|%nC xR0wttne#tfla*QMeFZaP-$=&0:q lVXriE#X$p)y; XAt! B#1!tpC_d0ߡ1%\N~ 0#z1XIoҞFY%UhSrH1*kѷc+XWי,x/)qQP]hِU Hf@^_& Cb+󫦞?0- ܮcdڮ&\X7g za֔u5gğM\m"T6ktIs8F>2ٮ̦ ْy"rr;()Zj>MP8wv32͎ n饑+V>$Lz{ {/'Bg~s9x +x۩:OuFFb^U~b~Rbq~r~QRzfIFi^r~>L~b$qUSF?{9RxTAn0<ׯ&@""$v6YQ+D:$U( }a_]RrZ ^lڝ 9Vvw)@UntMޔQA['-V:LSBOLܔ5UR`nrei Vl`U45L sjI@X@CCG2,Jg[.kg I޺L ދAO-۞^$Qz.>!a\Фcz806 Ȃ4o/%"oF;нf$d,ˆj5UǼ8'9eL?<|rr0 81%P5Lqf1" ]Z$!e$X+NgD91隘hNN.$W2fETt=3ۛícV:x dpackage core import ( "fmt" "os" "strings" ) // StorageTier names the data backend for a Base instance. SQLite is the // zero-config default; sql and datastore are per-instance upgrades along one // axis — the /v1 data plane (collections/records/auth/files/SQL/realtime) is // identical across tiers, so apps built on Base don't change when a tier moves. type StorageTier string const ( // TierSQLite is the default: embedded SQLite (or :memory:). Zero config — // the out-of-box SaaS default, used for everything until an instance grows. TierSQLite StorageTier = "sqlite" // TierSQL is hanzoai/sql (PostgreSQL) — relational scale, multi-writer. // Upgrade in place by setting BASE_DB_TIER=sql + BASE_DB_URL; no app rewrite. TierSQL StorageTier = "sql" // TierDatastore is hanzoai/datastore (horizontal OLAP analytics). Reserved: // the backend adapter is not wired yet, so selecting it errors honestly // rather than silently falling back. TierDatastore StorageTier = "datastore" ) // ResolveStorageTier reads the declared storage tier and its DSNs from the // environment. One knob, default sqlite, upgrade in place — no app rewrite. // // BASE_DB_TIER sqlite (default) | sql | datastore // BASE_DB_URL PostgreSQL DSN for tier=sql (the main data DB); BASE_DATA_DSN // is accepted as an alias // BASE_AUX_DSN optional separate aux-DB DSN (defaults to the data DSN) // // It returns the resolved tier plus the data/aux DSNs to apply to // BaseAppConfig. Empty DSNs mean SQLite (file or :memory:). A misconfigured // tier (sql without a URL, the not-yet-wired datastore, or an unknown value) // returns an error so the daemon fails loudly at startup instead of running on // the wrong backend. func ResolveStorageTier() (tier StorageTier, dataDSN, auxDSN string, err error) { switch t := StorageTier(strings.ToLower(strings.TrimSpace(os.Getenv("BASE_DB_TIER")))); t { case "", TierSQLite: return TierSQLite, "", "", nil case TierSQL: dsn := firstNonEmptyEnv("BASE_DB_URL", "BASE_DATA_DSN") if dsn == "" { return TierSQL, "", "", fmt.Errorf("BASE_DB_TIER=sql requires BASE_DB_URL (a hanzoai/sql PostgreSQL DSN)") } aux := firstNonEmptyEnv("BASE_AUX_DSN") if aux == "" { aux = dsn } return TierSQL, dsn, aux, nil case TierDatastore: return TierDatastore, "", "", fmt.Errorf("BASE_DB_TIER=datastore (hanzoai/datastore) is not yet available — use sqlite (default) or sql") default: return t, "", "", fmt.Errorf("unknown BASE_DB_TIER %q (want sqlite, sql, or datastore)", t) } } func firstNonEmptyEnv(keys ...string) string { for _, k := range keys { if v := strings.TrimSpace(os.Getenv(k)); v != "" { return v } } return "" } ={x2package core import "testing" func TestResolveStorageTier(t *testing.T) { cases := []struct { name string env map[string]string wantTier StorageTier wantData string wantAux string wantErr bool }{ { name: "default is sqlite, no DSN", env: nil, wantTier: TierSQLite, }, { name: "explicit sqlite", env: map[string]string{"BASE_DB_TIER": "sqlite"}, wantTier: TierSQLite, }, { name: "case/space insensitive", env: map[string]string{"BASE_DB_TIER": " SQLite "}, wantTier: TierSQLite, }, { name: "sql with BASE_DB_URL → data+aux DSN", env: map[string]string{"BASE_DB_TIER": "sql", "BASE_DB_URL": "postgres://u:p@h/db"}, wantTier: TierSQL, wantData: "postgres://u:p@h/db", wantAux: "postgres://u:p@h/db", }, { name: "sql with separate aux DSN", env: map[string]string{"BASE_DB_TIER": "sql", "BASE_DATA_DSN": "postgres://data", "BASE_AUX_DSN": "postgres://aux"}, wantTier: TierSQL, wantData: "postgres://data", wantAux: "postgres://aux", }, { name: "sql without a URL is a loud error", env: map[string]string{"BASE_DB_TIER": "sql"}, wantErr: true, }, { name: "datastore is reserved (honest error, no silent fallback)", env: map[string]string{"BASE_DB_TIER": "datastore"}, wantErr: true, }, { name: "unknown tier errors", env: map[string]string{"BASE_DB_TIER": "mongodb"}, wantErr: true, }, } for _, tc := range cases { t.Run(tc.name, func(t *testing.T) { for _, k := range []string{"BASE_DB_TIER", "BASE_DB_URL", "BASE_DATA_DSN", "BASE_AUX_DSN"} { t.Setenv(k, "") } for k, v := range tc.env { t.Setenv(k, v) } tier, data, aux, err := ResolveStorageTier() if tc.wantErr { if err == nil { t.Fatalf("expected error, got tier=%q data=%q", tier, data) } return } if err != nil { t.Fatalf("unexpected error: %v", err) } if tier != tc.wantTier { t.Errorf("tier = %q, want %q", tier, tc.wantTier) } if data != tc.wantData { t.Errorf("dataDSN = %q, want %q", data, tc.wantData) } if aux != tc.wantAux { t.Errorf("auxDSN = %q, want %q", aux, tc.wantAux) } }) } }  xEK0)F&=qQX+ВR%ƻ?vx|{m,K|@olcL#',dkڶM6cCAT(:5܇`Wϰ{>Nˊsd) pOoм0|oF xUα 0{CQ. >8ƶIK Tq~Wʆ}U,e8aÁP 앲.uLU hAz ҝDKvڠ$vޮq_~\`JR^rۨ'F!x;xqGFb^U~b|AxVmo6, jKqjHuhv EfCIR,ˮn_ u^;H~MTR[A4[Y4QD~%O,N &%a< 3fq.D.x}Q\ c򄣶?O/@~=Kx՛ק 'Ir6=߽(>,Ir~AVI\.Xy2}:+#kC114:mɅxy]$8h 8!Y,:¢JayEom/!_mf$]KE7 Q(ްc ldcvAM]+t?E(ebyIo3)oĹRpllD $kY â(vw )а0Suə|aSx|f[H]~@ %&9„o! jV Km2< k T{(ʌdŒ0#gXf?S_.%wpj)nxIN!;%凐d4= ,hk4Xӌc=Ԅʤ ].šQ$R8i85q]|)qnԁʠ6~do&g+5i0II!-P u)RKeE3" /Bq"RpA^2qXT"N=(5S;`n]31nMwa ~f z;̥w*9juVx܃ s74J ' u7!O-ι&bJ&]ttm? tc٢:m>RDW;~>Ik0Ly'}uC lsxmu^r"`.8 RcgQ.+ڐ ~mcG#ݸtVW^+L̝3Z麣6wRebnz- t٠*BT1b~ސ4Fũݟl P;^큓S>D达G\!(~5Mw]5}dQvfyK)g(l5D7 !bx&uVjB,GFb^U~bƼ<Oxw os" "strconv" "strings" "testing" ) func TestSendSystemAlert(t *testing.T) { t.Parallel() testDataDir, err := os.MkdirTe mp("", "sendSystemAlert_pb_data"qt.Fatal(err) } defer os.RemoveAll(testDataDir) testApp := NewBaseApp(BaseAppConfig{ DataDir: testDataDir, }) defer testApp.ResetBootstrapState() if err := testApp.Bootstrap(); err != nil { t.Fatal(err) } if err := createTestSuperusers(testApp, 3); err != nil { t.Fatal(err) } superuser, err := testApp.FindAuthRecordByEmail(CollectionNameSuperusers, "test1@example.com"qt.Fatal(err) } var sendCalls int testApp.OnMailerSend().BindFunc(func(e *MailerEvent) error { sendCalls++ if !strings.Contains(e.Message.Subject, "test_subject") { t.Fatalf("Missing %q in Message.Subject:\n%s", "test_subject", e.Message.Subject) } if !strings.Contains(e.Message.HTML, "test_details") { t.Fatalf("Missing %q in Message.HTML:\n%s", "test_details", e.Message.HTML) } if len(e.Message.To) != 1 || e.Message.To[0].Address != "test1@example.com" { t.Fatalf("Expected To address %q, got %v", "test1@example.com", e.Message.To) } return nil }) sendSystemAlert(testApp, superuser, "test_subject", "test_details") if sendCalls != 1 { t.Fatalf("Expected 1 mail send call, got %d", sendCalls) } } func TestSendSystemAlertToAllSuperusers(t *testing.T) { t.Parallel() testDataDir, err := os.MkdirTemp("", "sendSystemAlertToAllSuperusers_pb_data"qt.Fatal(err) } defer os.RemoveAll(testDataDir) testApp := NewBaseApp(BaseAppConfig{ DataDir: testDataDir, }) defer testApp.ResetBootstrapState() if err := testApp.Bootstrap(); err != nil { t.Fatal(err) } if err := createTestSuperusers(testApp, 3); err != nil { t.Fatal(err) } var sendCalls int testApp.OnMailerSend().BindFunc(func(e *MailerEvent) error { sendCalls++ if !strings.Contains(e.Message.Subject, "test_subject") { t.Fatalf("Missing %q in Message.Subject:\n%s", "test_subject", e.Message.Subject) } if !strings.Contains(e.Message.HTML, "test_details") { t.Fatalf("Missing %q in Message.HTML:\n%s", "test_details", e.Message.HTML) } return nil }) sendSystemAlertToAllSuperusers(testApp, "test_subject", "test_details") if sendCalls != 3 { t.Fatalf("Expected 3 mail send calls, got %d", sendCalls) } } func createTestSuperusers(apTp App, total int) error { superusersCollection, err := app.FindCollectionByNameOrIdX>for i := range total { superuser := NewRecord(superusersCollection) superuser.SetEmail("test" + strconv.Itoa(i+1) + "@examp\le.com") if err := app.Save(superuser); err != nil { return err } } return nil } qYk籇xq// Copyright © 2026 Hanzo AI. MIT License. package core_test import ( "context" "net" "strconv" "testing" "time" "github.com/hanzoai/base/core" "github.com/hanzoai/tasks/pkg/sdk/client" ) // TestTasksEmbed boots a BaseApp with TASKS_EMBED=true and verifies the // in-process Hanzo Tasks daemon is reachable over native ZAP. // // One Go binary, full workflow engine inside. No gRPC. No proxy. No // upstream temporal.io. The same path Base apps take when they want // durable workflows without running a sidecar tasksd container. func TestTasksEmbed(t *testing.T) { port := freeTCPPort(t) t.Setenv("TASKS_EMBED", "true") t.Setenv("TASKS_EMBED_ZAP_PORT", strconv.Itoa(port)) t.Setenv("TASKS_NAMESPACE", "default") app := core.NewBaseApp(core.BaseAppConfig{DataDir: t.TempDir()}) if app == nil { t.Fatal("NewBaseApp returned nil") } c, err := client.Dial(client.Options{ HostPort: "127.0.0.1:" + strconv.Itoa(port), Namespace: "default", DialTimeout: 3 * time.Second, CallTimeout: 3 * time.Second, }) if err != nil { t.Fatalf("client.Dial: %v", err) } defer c.Close() ctx, cancel := context.WithTimeout(context.Background(), 3*time.Second) defer cancel() svc, status, err := c.Health(ctx) if err != nil { t.Fatalf("Health: %v", err) } if svc != "tasks" || status != "ok" { t.Fatalf("Health = %q/%q, want tasks/ok", svc, status) } run, err := c.ExecuteWorkflow(ctx, client.StartWorkflowOptions{ ID: "embed-smoke", TaskQueue: "default", }, "EmbedSmoke") if err != nil { t.Fatalf("ExecuteWorkflow: %v", err) } if run.GetID() == "" || run.GetRunID() == "" { t.Fatalf("missing IDs: %+v", run) } list, err := c.ListWorkflows(ctx, "", 10, nil) if err != nil { t.Fatalf("ListWorkflows: %v", err) } found := false for _, e := range list.Executions { if e.WorkflowID == run.GetID() { found = true break } } if !found { t.Fatalf("workflow %s not in list", run.GetID()) } } func freeTCPPort(t *testing.T) int { t.Helper() l, err := net.Listen("tcp", "127.0.0.1:0") if err != nil { t.Fatalf("listen: %v", err) } defer l.Close() return l.Addr().(*net.TCPAddr).Port } mxpackage core import ( "fmt" "os" "path/filepath" "sync" "github.com/hanzoai/dbx" ) // TenantRegistry manages per-org SQLite databases with lazy open and // optional per-principal encryption via HKDF-derived keys. // // Directory layout: // // {DataDir}/orgs/{orgID}/data.db // {DataDir}/orgs/{orgID}/auxiliary.db // // Each org database is independently encrypted when a master key is set. // The registry is safe for concurrent use. // // Activation: TenantRegistry is nil on BaseApp unless MULTI_TENANT=true // or MASTER_KEY is set. All existing single-tenant behavior is unaffected. type TenantRegistry struct { dataDir string masterKey []byte // 32-byte master key, nil if encryption disabled connect DBConnectFunc mu sync.RWMutex dbs map[string]*tenantDBs } // tenantDBs holds the concurrent and nonconcurrent dbx.Builder for one org. type tenantDBs struct { concurrent dbx.Builder nonconcurrent dbx.Builder } // TenantConfig configures the TenantRegistry. type TenantConfig struct { // DataDir is the base data directory. Org databases live under {DataDir}/orgs/{orgID}/. DataDir string // MasterKey is the 32-byte master encryption key. If nil, encryption is disabled. MasterKey []byte // DBConnect is the function used to open database files. Defaults to DefaultDBConnect. DBConnect DBConnectFunc } // NewTenantRegistry creates a TenantRegistry. Returns nil if config is nil. func NewTenantRegistry(config *TenantConfig) *TenantRegistry { if config == nil { return nil } connect := config.DBConnect if connect == nil { connect = DefaultDBConnect } return &TenantRegistry{ dataDir: config.DataDir, masterKey: config.MasterKey, connect: connect, dbs: make(map[string]*tenantDBs), } } // validateOrgID rejects IDs containing path traversal characters. func validateOrgID(id string) error { if id == "" { return fmt.Errorf("org ID cannot be empty") } for _, c := range id { if !((c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c == '-' || c == '_') { return fmt.Errorf("org ID contains invalid character %q", c) } } if id == "." || id == ".." { return fmt.Errorf("org ID cannot be . or ..") } return nil } // orgDir returns the directory for an org's databases. func (r *TenantRegistry) orgDir(orgID string) string { return filepath.Join(r.dataDir, "orgs", orgID) } // OrgDB returns the data.db builder for the given org. // Opens the database lazily on first access and caches it. // The returned builder routes SELECTs to the concurrent pool // and writes to the nonconcurrent pool (same pattern as BaseApp.DB()). func (r *TenantRegistry) OrgDB(orgID string) (dbx.Builder, error) { if err := validateOrgID(orgID); err != nil { return nil, fmt.Errorf("tenant: %w", err) } // Fast path: read lock r.mu.RLock() if t, ok := r.dbs[orgID]; ok { r.mu.RUnlock() return t.concurrent, nil } r.mu.RUnlock() // Slow path: open and cache r.mu.Lock() defer r.mu.Unlock() // Double-check after acquiring write lock if t, ok := r.dbs[orgID]; ok { return t.concurrent, nil } dir := r.orgDir(orgID) if err := os.MkdirAll(dir, 0700); err != nil { return nil, fmt.Errorf("tenant: create dir %q: %w", dir, err) } dbPath := filepath.Join(dir, "data.db") concurrent, err := r.connect(dbPath) if err != nil { return nil, fmt.Errorf("tenant: open concurrent db for org %q: %w", orgID, err) } concurrent.DB().SetMaxOpenConns(DefaultDataMaxOpenConns) concurrent.DB().SetMaxIdleConns(DefaultDataMaxIdleConns) nonconcurrent, err := r.connect(dbPath) if err != nil { concurrent.Close() return nil, fmt.Errorf("tenant: open nonconcurrent db for org %q: %w", orgID, err) } nonconcurrent.DB().SetMaxOpenConns(1) nonconcurrent.DB().SetMaxIdleConns(1) r.dbs[orgID] = &tenantDBs{ concurrent: concurrent, nonconcurrent: nonconcurrent, } return concurrent, nil } // OrgNonconcurrentDB returns the write-only (single connection) builder for an org. // Opens the database lazily on first access. func (r *TenantRegistry) OrgNonconcurrentDB(orgID string) (dbx.Builder, error) { if err := validateOrgID(orgID); err != nil { return nil, fmt.Errorf("tenant: %w", err) } // Ensure the org is opened (OrgDB handles lazy init) if _, err := r.OrgDB(orgID); err != nil { return nil, err } r.mu.RLock() defer r.mu.RUnlock() return r.dbs[orgID].nonconcurrent, nil } // MasterKey returns the configured master key (may be nil). func (r *TenantRegistry) MasterKey() []byte { out := make([]byte, len(r.masterKey)); copy(out, r.masterKey); return out } // HasOrg checks if a database for the given org exists on disk. func (r *TenantRegistry) HasOrg(orgID string) bool { if err := validateOrgID(orgID); err != nil { return false } dbPath := filepath.Join(r.orgDir(orgID), "data.db") _, err := os.Stat(dbPath) return err == nil } // Close closes all open org databases and clears the cache. func (r *TenantRegistry) Close() error { r.mu.Lock() defer r.mu.Unlock() var lastErr error for orgID, t := range r.dbs { if c, ok := t.concurrent.(interface{ Close() error }); ok { if err := c.Close(); err != nil { lastErr = err } } if c, ok := t.nonconcurrent.(interface{ Close() error }); ok { if err := c.Close(); err != nil { lastErr = err } } delete(r.dbs, orgID) } return lastErr } x package core import ( "os" "path/filepath" "testing" ) func TestNewTenantRegistry_NilConfig(t *testing.T) { r := NewTenantRegistry(nil) if r != nil { t.Fatal("expected nil registry for nil config") } } func TestTenantRegistry_OrgDB_LazyCreate(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() db, err := r.OrgDB("acme") if err != nil { t.Fatal(err) } if db == nil { t.Fatal("expected non-nil db") } // Force a write so SQLite creates the file on disk _, err = db.NewQuery("CREATE TABLE IF NOT EXISTS _probe (id INTEGER)").Execute() if err != nil { t.Fatal(err) } // Directory should exist orgDir := filepath.Join(dir, "orgs", "acme") if _, err := os.Stat(orgDir); os.IsNotExist(err) { t.Fatal("org directory not created") } // DB file should exist (SQLite creates on first write) dbFile := filepath.Join(orgDir, "data.db") if _, err := os.Stat(dbFile); os.IsNotExist(err) { t.Fatal("data.db not created") } } func TestTenantRegistry_OrgDB_CachesConnection(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() db1, _ := r.OrgDB("acme") db2, _ := r.OrgDB("acme") // Same pointer (cached) if db1 != db2 { t.Fatal("second call should return cached db") } } func TestTenantRegistry_OrgDB_Isolation(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() acme, _ := r.OrgDB("acme") globex, _ := r.OrgDB("globex") // Create table in acme _, err := acme.NewQuery("CREATE TABLE settings (k TEXT PRIMARY KEY, v TEXT)").Execute() if err != nil { t.Fatal(err) } _, err = acme.NewQuery("INSERT INTO settings (k, v) VALUES ('name', 'Acme Corp')").Execute() if err != nil { t.Fatal(err) } // Create same table in globex _, err = globex.NewQuery("CREATE TABLE settings (k TEXT PRIMARY KEY, v TEXT)").Execute() if err != nil { t.Fatal(err) } _, err = globex.NewQuery("INSERT INTO settings (k, v) VALUES ('name', 'Globex Inc')").Execute() if err != nil { t.Fatal(err) } // Read back -- data should be isolated var acmeName string if err := acme.NewQuery("SELECT v FROM settings WHERE k = 'name'").Row(&acmeName); err != nil { t.Fatal(err) } if acmeName != "Acme Corp" { t.Fatalf("expected 'Acme Corp', got %q", acmeName) } var globexName string if err := globex.NewQuery("SELECT v FROM settings WHERE k = 'name'").Row(&globexName); err != nil { t.Fatal(err) } if globexName != "Globex Inc" { t.Fatalf("expected 'Globex Inc', got %q", globexName) } } func TestTenantRegistry_OrgNonconcurrentDB(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() ncdb, err := r.OrgNonconcurrentDB("acme") if err != nil { t.Fatal(err) } if ncdb == nil { t.Fatal("expected non-nil nonconcurrent db") } } func TestTenantRegistry_InvalidOrgID(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() cases := []string{"", "..", "../etc", "UPPER", "has space", "special!"} for _, id := range cases { if _, err := r.OrgDB(id); err == nil { t.Fatalf("expected error for org ID %q", id) } } } func TestTenantRegistry_ValidOrgIDs(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() cases := []string{"acme", "org-123", "my_org", "a", "ab", "a-b-c-d"} for _, id := range cases { if _, err := r.OrgDB(id); err != nil { t.Fatalf("unexpected error for org ID %q: %v", id, err) } } } func TestTenantRegistry_HasOrg(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) defer r.Close() if r.HasOrg("acme") { t.Fatal("should not have org before opening") } db, _ := r.OrgDB("acme") // triggers lazy creation // Force a write so SQLite creates the file on disk db.NewQuery("CREATE TABLE IF NOT EXISTS _probe (id INTEGER)").Execute() if !r.HasOrg("acme") { t.Fatal("should have org after opening and writing") } } func TestTenantRegistry_MasterKey(t *testing.T) { masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i) } r := NewTenantRegistry(&TenantConfig{ DataDir: t.TempDir(), MasterKey: masterKey, DBConnect: DefaultDBConnect, }) defer r.Close() got := r.MasterKey() if len(got) != 32 { t.Fatalf("expected 32-byte master key, got %d", len(got)) } for i := range got { if got[i] != byte(i) { t.Fatal("master key mismatch") } } } func TestTenantRegistry_Close(t *testing.T) { dir := t.TempDir() r := NewTenantRegistry(&TenantConfig{ DataDir: dir, DBConnect: DefaultDBConnect, }) // Open a couple orgs r.OrgDB("acme") r.OrgDB("globex") if err := r.Close(); err != nil { t.Fatal(err) } // After close, new opens should work (fresh state) // The registry itself still exists but dbs map is empty if len(r.dbs) != 0 { t.Fatal("dbs map should be empty after close") } } func TestBaseApp_OrgDB_Disabled(t *testing.T) { app := NewBaseApp(BaseAppConfig{ DataDir: t.TempDir(), }) db, err := app.OrgDB("acme") if err != nil { t.Fatal(err) } if db != nil { t.Fatal("expected nil db when multi-tenancy disabled") } if app.Tenants() != nil { t.Fatal("expected nil tenants when multi-tenancy disabled") } } func TestBaseApp_OrgDB_EnabledViaConfig(t *testing.T) { dir := t.TempDir() app := NewBaseApp(BaseAppConfig{ DataDir: dir, MultiTenant: true, }) if err := app.Bootstrap(); err != nil { t.Fatal(err) } defer app.ResetBootstrapState() if app.Tenants() == nil { t.Fatal("expected non-nil tenants when MultiTenant=true") } db, err := app.OrgDB("acme") if err != nil { t.Fatal(err) } if db == nil { t.Fatal("expected non-nil db") } // Verify we can write and read _, err = db.NewQuery("CREATE TABLE test (id INTEGER PRIMARY KEY, val TEXT)").Execute() if err != nil { t.Fatal(err) } _, err = db.NewQuery("INSERT INTO test (val) VALUES ('hello')").Execute() if err != nil { t.Fatal(err) } var val string if err := db.NewQuery("SELECT val FROM test").Row(&val); err != nil { t.Fatal(err) } if val != "hello" { t.Fatalf("expected 'hello', got %q", val) } } func TestBaseApp_OrgDB_EnabledViaMasterKey(t *testing.T) { dir := t.TempDir() masterKey := make([]byte, 32) for i := range masterKey { masterKey[i] = byte(i + 1) } app := NewBaseApp(BaseAppConfig{ DataDir: dir, MasterKey: masterKey, }) if err := app.Bootstrap(); err != nil { t.Fatal(err) } defer app.ResetBootstrapState() if app.Tenants() == nil { t.Fatal("expected non-nil tenants when MasterKey is set") } if mk := app.Tenants().MasterKey(); len(mk) != 32 { t.Fatalf("expected 32-byte master key on registry, got %d", len(mk)) } } func TestBaseApp_OrgDB_IsolationFromMainDB(t *testing.T) { dir := t.TempDir() app := NewBaseApp(BaseAppConfig{ DataDir: dir, MultiTenant: true, }) if err := app.Bootstrap(); err != nil { t.Fatal(err) } defer app.ResetBootstrapState() // Write to main DB mainDB := app.DB() _, err := mainDB.NewQuery("CREATE TABLE main_table (id INTEGER)").Execute() if err != nil { t.Fatal(err) } // Write to org DB orgDB, _ := app.OrgDB("acme") _, err = orgDB.NewQuery("CREATE TABLE org_table (id INTEGER)").Execute() if err != nil { t.Fatal(err) } // Org DB should NOT have main_table var count int err = orgDB.NewQuery("SELECT count(*) FROM sqlite_master WHERE type='table' AND name='main_table'").Row(&count) if err != nil { t.Fatal(err) } if count != 0 { t.Fatal("org DB should not have main_table") } // Main DB should NOT have org_table err = mainDB.NewQuery("SELECT count(*) FROM sqlite_master WHERE type='table' AND name='org_table'").Row(&count) if err != nil { t.Fatal(err) } if count != 0 { t.Fatal("main DB should not have org_table") } } ɽx340031QHIKgX%mj;~\xgS_Z\R5_d_fJ%[yϊO_TxiA|jeq`e)9wCe椂i#J4@n栾3vHJF<ŵ}WR OzE3T]qIQf^:Hс5x\s^L[P_.WݾC~VՉY*s2SKA 1мlc}:}P7V[YؒE-ۏupy xUMo8=[bC ]H{( G6T)q )rn/9ͨX#lVRx$Quc,$+Szsd¿ZYd*k ]+VEi^G;?G  7?Ⱦeܹ[Km^4=)K¥2ᱴnDm/ZgSm%jbK OW# o-=%]X7^5[v4 J(2OKK1hn1 ϵ7nU`4XYrOh;O4f$xCbm _= )2ߗVTw$^f\ _D!0 z:΅IY,'`$,-oYoݮ٭?gc(9f9 Et:P>xRey(+n2^ IMOD"N{uQZզm]א~,}&Zgn?q(.oۄW(1~jmt SXP6|1Ɇ kZa!pWNb |*Z21z95lxxc[p D~81s阣80]"P< {:COdrx~N9X´xVn6}b* T(rw@K , lREQ6T&w,%)jغ gs9Ol-fN[:a]ˮAG0 >5iHN8V UuZK}WtuVw~a^3+X͑* Y7_occ ?2V)Ds(x/ōؒ}Q-auo[{˅bFjKfn#ߑA1BǪVܰN,b Piў<$IkXk>"lVtk;]57o$kLSucerQ(IwPުGLJX39b?s}(%W<RcIEWdYȚ:e6wX6chšԥIǮRNM |vJ$ K(Ų3~O{X_5QONC%.vx.K^Q;}3>ѦüŘ;x ?|`zJ$OS V7Ti"mz|<$W%f@fe'H*M¨&I\ s*}Hxb f1E8's| O(;@q-Anhkgar‰Vv'_vh<AKb45h${ez;d Df8EYs.0?|\`zm8Ę9n3*u4Xo˷! ’`g y4{B)kRzL2/FDqfSd44ԉLLO $J8uc VpxTQk0~͠KI 2^(r|NDmɓiId{Iw}-_=5–עViEiDXcUQ4+tERMVYeXm/EQOkXmph`AA 3=u TeKkDj| ݷO-3>O\Z,)(N'vJ?APF.dX-b:.4JHK\ .9Ш2֟^ RI1fyd%t3C.VA29*,'i߉^]b /L Pk]~&A^P5ik4)jz{%Q[-zAFxqhmpwP =PΑ1~9SskucnEpgg@N# F7HNA6HFeN+E/>.w Ry*rzf ]Ys^C~q*_0OH;J(WXzQ ٴnJM +.o8z&PoA~)Ҹ,A~ntwycmk.li\_&!d?|;G b>vǞKvJ?x):&imM2lb(܎leMXrSϿU̲Lx}Qo0ǟOq *6iI}hqMUe:6U|-ocJ^C#M޺3JVL1Cc o7H@ 2Z {+85سl>YeĦYėe U&ʃ(~갛EIMh`(mNU_ۉ !dUHnVzip.wBa[es1UCucRltV- idgx;ĹsGFb^U~b|H(xVo@ ~n i(Aeä0$/T]=܅KGWǾ$m!О49۟|Zna)KKo"UzHQ\T>sGt?W~LT\Np)*1T~U#Ytph30d|9d˗>rmf7S _nsvۄzz-Xu@1yTUS,KsK,6)c#ih8?I++GW\S׭_>_z,GJBV/.&++eD}ӽUL~ua=`?@n˲)%եT:Ǫ}qogxz~ }6>gxexog8/xe"65EZzb<@jIC©welCEԪ&F k*51M9OLا& 詸>:Γł` o K0.>6OnUP@ ~LCl@螝(8g\p 6וM&7M/P?;ɀ`39 xX5v=j|p_j[|yBt3xVҦy R;x{Τ}tY\WA'p[_&x{ xHp,7?dbd3l $&"xKJ$A|TD|2URd+  ]4ډHfUMf4v#7%C sάVf6:YeddF|4=#\ߠNdܬ9܀R)I*LӠhcv6mxz Vl?l29ô3k;96=' g:pVHwQU?R Th&Q̩''B$nLү¨7B3uzprebiKGH, 0lքv[BROHZ;a¹xw/GFb^U~b8e8{t6 ܴCx͓n0)&>T m%!6J\Z"fZTfe j/Iv!1F'4:e98ahrV5F#;Ƅ|xZZ$pEmDPp I rxptH}JDFҰ%b- 8_hՁknKIJ|J`z:f +l1_.KC9OCV6v v]k5z] Lw"/`Ϗ0̼lg,Z4`ASx b|<7زȋ Ǻ+[IUʖ0? vbE_jKx±eF>&? dx;ĹsB!wHjqgqPjzj2_e`(3/}>BZbNqj'guBbRrHL6P!Htr/rРLbĜOuyvk@DXp%+_\ZiN&hhdgRWK-I-IE(BC4OXYDtmp L074H@@@@]xyeGFb^U~bHxDxmA0֯|X=xa{( m8-IN-L"XCb'O߼7Y4'J8N7ցNR{FC3:ozx6IZchdeb7&Ps*w,豼1K2эe7הY7q;ʶgz,KȟtXH sL*f~:{8/o G 5gGפXa1)>  (7gR`vࠬ^R7$ng1Vbu&N씦œ4 ?FN@`UVGv_/: H^C/Wr,mҶelBfeVd@?v8"t Yp)"WB%ꤞ|/'Mp-ju׳xII !No -W]qQ ig(P$I(mH1?qj~x;q}FTxTMO0=ǿUd\Q "aBQNhq 㤭 n7o&zbk fgV!8E 8;qbeaJPI0)}lհGUa9 'V? ;g\1S"(ChWnyɥYI7(PH]iG}uCK% "JZ(̱_O6s7z-Sd t! B"tr}0Up 6A͜d햝EC"nw G!{6]ZTΧXY}IN6Xث0^@4*uflb6: &$nn M#fi!ܚ3EE2!c+n_b-]1UTAJy-mi0Ux;ƵkBGFb^U~bƉ[YMĹx[sۺ,'!IN_q;#OݛW-ؾ6-B6N(!HپA=t|%<>~@x-"sI,˼=6TGYKyS7]*RUWE4'/|MV/N$Od7R$~Ԍ*aƩUyTjZRULo2S/7᪺-$*v_d*+EkyEu%.HL;x"#㏮Y]剀oy!k`e>U "ɥΞUBހL,])블0>EzZ,s1{T8Kp C=DfԺ ),2FDeE]=l$W.COz R`qA%aQ^m PA;w>/`_ `x4ww臇^qCU]fHeOPF+EEB[%qZRw? XK}'j/_}ᑟ J2tL<H>n9nVN\E=@KIf:D3Z';"S)QOӁstv D3)67=Eollв%?}/:w" s%k v籬FWN"~e,x3G0 9k RZ.1 -~FyZO28]Y?6xcG8_fH\e!!< ]_^+&yiI &g|wy>0>oX|=*V a(Za2Fj 6mh>IXҳR1k]J&)4.?K=PC@#4.A".!c.I K]#bǤthXi (@lL A6LH^R#04QUVK"T! JmĘ CK:S|ZM4LhjY.nENpdH-op Fzə~Ќ, 9Q wlۄ hRbB\)ת(ۼc׳};TrIN(*36xg&dtg$*Kޔ-osReqʧ#l)8%ݤԼ^ $,8yE*Aw;Hi`ه][-N}?%9rdYu֮,fgg[GU@  ujFIEdq> Hq߹ QJ+0TNl #T wN( 1O*SG)_b\а'iRBiCt2~/4>K 1d 6o Ej<]IT#8e@+# VĀFyxAA{\8#"o;L\:^G\m[acfնsJ538[ 3rH0#zkx4Y3;q^g5cwkyx@G#z5 ۢaWNfzwweSS}.d?'F"I^ ls[VʁU^)krcdBUOaOzI2KXcqDܺh>֓ `<+A$41sAnΰ(Gΰ`۬q@= 篼}}p w;Ѕ= 9R4 X|@KtH!S#Tj 1*ySL^`qe'4(c3ޅ1`U+J7a+1yӼ.:;wTV7vAƚ̣yЫS嗣 ZMJs6]n&6U_vL̶@G͍zp tvDo @ěCdI]ہDeb"+XT~+/qzJmŝ:Ns4@8[ޤ_?LJUvyFi疫RSDe^5:I F5hG\Xn$*"ovпDo'Vh5kY!Rl*KK)ӘJܦ%UMJ8אs 2|C?7CB$oz}1:-$Afړzh\຃3V^$? p rDO$Ue/~nOl~=Ze'/OO>x"zTno۝ج4}ixm[acTl! b&:*ꕆ)Ed~YWJ03y& xd3؟*00ξ?g?N2p|d fO,8`wǏl*wkvBk$m 8 `EaE7{q7{NzshZ`ɽzӤhiyC6c^} pl1D5t*BSAu4Ve4eN;n6 Ћ{K2)6 ):?Đã01o\cxV9Q ug(9-ij~opu>98i>0q}-U%=e<]ȼ0o͙xi'ۛyfg)RgnU@onmk'ڛ͡϶ iVZ9>*72UKA+);ی.{%F6\?Wф~mKpfDde|=pks|}2fL!k 'M3?zf~.is{uo&,_,akfO[Grs߰)]S5 zw)#᜺-V)=#Z7&NzW(yk\ާ4us pqp2z#\)/0NJB/󾻱 w1l?4+-K\gm%{`/pm/Xm.Z1g ڡof̘;)\Y &UaˉK+wI %W-';4୔ŶjGk8zh?`fxX]l ?3C`OcR gz,3^oT6AUFUPEJ%RRCDJO}9x@v=swι|y?WԍU}q$D>]=X^*\M˻kKoNwOwdu{N{٤{۞ҋE=zXTɳԢ>]oz-zۥf6@R*EL#R*P؏%kDJ<5$v?R],c~.`A/{sLjJ]/GgzOXn%IEb;nAW9}ա#;죝ϝ"s/,\7z //[t9~Ϻ{[ҽ&1\AlZ&bPT Tgn6zlAGEX#5f{Rܥ^A7Ã\5[.GA'lp|ULZ cF&JPa[{$v_f=$:ɞaկ)y֭̕lœDkQ|`%Ii Eۉ9 %!7dCBԤN))ΚYr&^OtX_p,Dĥ~ɵHAM#\=(fA>dU$e=SRX4ϹNaKtpU!yRIjEou@+CU$S= {;w_03]{\nwT;K% \~E/9y~? M֜(r-pE*$HxOP2Ħ.xIq_GAA]&UrjfKx @i/橏1)`nTD5W)SNM] d4( TJ}&Q H!4"dA( $_kzDETfMC8+2?u}jr$ Z0UA0nL_<;BU{W,K 4;@}w{W`nZ'vMF5ȆsYwm*:gίXɖip ɐJ*WsRL䈏Fm d-A$C&E[,Q1Xy`lOvVLTZTYkNZLB994jYWOTH-QC؃AulhGu'J>4Kި}mX*T#XC)}QOރWb ܸ1@0_9%3!ܻt.662҈_6?{sJ7aQݎL8kCc -(diTA޻25t/M-){x 1wZ@F@\{bW؛N-qWR4dKRI6ې̾BU=iZ8b@6>enɋe86rP%2ʋ^pGiA7ح 64Sx{3qYɉ*JyU)IJ\J%Iz0]peY193MarXvs؄&b\/ PRTP_SZJ셓g LPۀZ$ ޏv@:(s0!<S~ĽrlPlrc4z`39Y$2e{ND,ut.sws<8gi:.rqaD2Zda/g9`rW?{s/$O9#d&}=aG'o_c\zD(rw?$7DS|ud?07uc"ܲi :%rh<_س%x[$<cvlт1)X<"vF@ ΐl6\g!y U̓Af?aXte p96cz ECHaoIX' $R Cy̦%r[d.)/jEGmOs UN}P ޖJT&z! HKR[WuR^ <ּг)«ykVluT!xs,>8^@cY}_qń,3 _aaO^Q \A)FޤѝYOh<͟Go-?¯",G)xGCʿ K{90vpp I oJ+ްtCi,:e-ܰŏɲ}[7p8qXgg$^j e[읨@Ҏ {$%*ZQb~{K [O\h.1g1]MnkmdR;dn%=ꂋdGR FmdXf;{4mbQWt0sOx vZjsv%J`}[o=R3 AƳu}y,+^g(ydOsue%^"9p,ǦPbk@!|=aEiwEΓ4L\@qU{? QREK&#nDԅVE0Wy\a'5!(Ȟ4N6n pÚa:_yNƎhщaH`GԊʚ8GfPJ v;}1>cbajlV$0ʰRdf eRY[q_ ~1)V B#gk]1jwR ?Ю#:#| 锑)6!s#`QĦPPPG7$,?){`6H@8s#G1>6åi,adCjt%BQ` 4pl*K36Y5x4m?=7s,V+P)[@|pۀ|" { [:=tW"`":6@ JJ ]dQ`[ XT54j1i82'='ӕEg= a b? Q7.ȊU,wNO¸,:BC¢?h›a[k\lՐu`CZyv+HlD|/JJ܌a']exvm_X3D9mT%k {;r@T]VKI}_aE .P!u(-n`r}XβMv5 ;})^χLo42Rd ]j^f{C{{2R؆m MbDrfo~)k p_7i[JIBmK~/W)jcjn/v:5vjmw>Y(;QH4 ÒڙI =]aSZ(K$'ә` T)Bm P4ExQI}Ef3\Ϳ}թ>m\yeVyP$-WX+-وňeOE` !jؔНCeھҧֈ֫r=s%6 f#{kh5%(4V;`HYB4nPJnZGkrfYF\˥CA"z\Y|(JӰvi 3Fd6RP%,.Em{LBѳ2(HRѝQj,IJ[xc Y"!7VL,ޖlK"'5MKקn m¾ S`KJ I*H5 RH* =20H⟠~+ܳ-o|9̧qОOH{wgMG#p!&2k҇8MQID?H4H̒ F컊18=5ST#Pݗ9NxT?(/yX^|QQq{C7%e̅tsY_/вBncbLT. k08'fY{ÆƚH讀l4z5 rɋ?~܊:O.UU՗Ї[zxwZ=sΣQ_OI]1ʙߓk$[tڷK  e#Gvs#C/siSq!j-hG7kO⮯_( y׽D[WҒmZ⸨"Iَ(-R 8S~r1v4Dbu}ΑO!aшa' Q5. [Ea޻{mzBX4,Ͱ5>I&ܘ/ lYnWT6@!.9ma ޒF=׾Sy\4g2$/)F J! )"6u+[cϕwR Q2)D]Lm2Ld&@5HW 6g -he%9VBf=yYX9Cn8CWں-̙`IG ^As]k#qb"or uU޼"U%ˎɲ"dZ|˺OK=#қ&#-4)QHOJh8.z34.D2C~ !ip,LCixH=PoՕe K]px77$|Pd2QsN0}:rj5*îf#V[Ztev='#_Oy jt{3nPrF?y;рh7F @)wQ3]cS.`dMތ9R\8(8ʹ$m\Z;ߍy_]msi5"1nfa+uBUtd~ 먁xM*95W^y PPd(!t݁6єD'٦Kٿbs}qՁvM']td OsDT-"L>9ڪ҃joŖ`뭯7Ff,l̀:;=uNҾ.A'Ǧ-lvp.telmC}GF;ߡO_PXG$UcMRRTE@ntTCe85TOS=+b[+GsqhCg_1;LVZtY3ߍ } ?r0v#k\׮BZ`ĸ%jzX߼!*))"XD.3_b |w ҤMN)RY?xL~:a; l@x[SvU9O,qx340031QHK/Kg?dߵvm($5ׯbye{uIy`_Pu)ɥy`e^'U޳':wC_[7XBe%&WTVz2l1N7<*>1=rEQV뷪 okMeZXڊZ-1zr7hM4ũɥE%pOy9XMw8κ]sS:u7*}k}ٶIՒAIPŕy %KTѪ[6y9/CVM9\."kf~),H-Xnk5( A,~#qxpackage crdt import ( "context" "crypto/sha256" "encoding/binary" "encoding/hex" "encoding/json" "errors" "fmt" "log" "sync" "time" ) // Anchorer submits and verifies CRDT state anchors on a Lux chain. type Anchorer interface { // Submit anchors the given Merkle root at the next logical height. Submit(ctx context.Context, root [32]byte) error // Verify checks whether the on-chain anchor at height matches root. Verify(ctx context.Context, height uint64, root [32]byte) (bool, error) // LatestHeight returns the highest anchored height for the configured appID. LatestHeight(ctx context.Context) (uint64, error) } // AnchorConfig configures the background anchoring goroutine. type AnchorConfig struct { // AppID identifies the application (32-byte hash of app name). AppID [32]byte // Interval is the maximum time between anchors. Default: 5 minutes. Interval time.Duration // OpThreshold is the number of operations that trigger an anchor. // Default: 1000. Set to 0 to disable op-based anchoring. OpThreshold int // RPCEndpoint is the JSON-RPC URL of the Lux node. RPCEndpoint string // From is the sender address (hex-encoded, with 0x prefix). From string // ContractAddress is the anchor precompile address. // Default: 0x0700000000000000000000000000000000000010 ContractAddress string } // AppIDFromName computes the 32-byte appID as SHA-256 of the given name. func AppIDFromName(name string) [32]byte { return sha256.Sum256([]byte(name)) } // RPCAnchorer implements Anchorer via JSON-RPC calls to a Lux node. type RPCAnchorer struct { cfg AnchorConfig mu sync.Mutex height uint64 rpcCall func(ctx context.Context, method string, params []any) (json.RawMessage, error) } // NewRPCAnchorer creates an Anchorer that talks to a Lux node via JSON-RPC. // The rpcCall function is injected for testability. Pass nil to use the default // HTTP JSON-RPC client targeting cfg.RPCEndpoint. func NewRPCAnchorer(cfg AnchorConfig, rpcCall func(ctx context.Context, method string, params []any) (json.RawMessage, error)) *RPCAnchorer { if cfg.Interval == 0 { cfg.Interval = 5 * time.Minute } if cfg.OpThreshold == 0 { cfg.OpThreshold = 1000 } if cfg.ContractAddress == "" { cfg.ContractAddress = "0x0700000000000000000000000000000000000010" } return &RPCAnchorer{cfg: cfg, rpcCall: rpcCall} } // Submit sends an anchor transaction via eth_sendTransaction. func (a *RPCAnchorer) Submit(ctx context.Context, root [32]byte) error { a.mu.Lock() a.height++ h := a.height a.mu.Unlock() calldata := encodeSubmitCalldata(a.cfg.AppID, h, root) params := []any{map[string]string{ "from": a.cfg.From, "to": a.cfg.ContractAddress, "data": "0x" + hex.EncodeToString(calldata), }} _, err := a.rpcCall(ctx, "eth_sendTransaction", params) if err != nil { return fmt.Errorf("anchor submit: %w", err) } return nil } // Verify queries the anchor precompile via eth_call and compares roots. func (a *RPCAnchorer) Verify(ctx context.Context, height uint64, root [32]byte) (bool, error) { calldata := encodeGetCalldata(a.cfg.AppID, height) params := []any{map[string]string{ "to": a.cfg.ContractAddress, "data": "0x" + hex.EncodeToString(calldata), }, "latest"} result, err := a.rpcCall(ctx, "eth_call", params) if err != nil { return false, fmt.Errorf("anchor verify: %w", err) } var hexResult string if err := json.Unmarshal(result, &hexResult); err != nil { return false, fmt.Errorf("anchor verify: unmarshal result: %w", err) } // Strip 0x prefix if len(hexResult) >= 2 && hexResult[:2] == "0x" { hexResult = hexResult[2:] } chainRoot, err := hex.DecodeString(hexResult) if err != nil { return false, fmt.Errorf("anchor verify: decode hex: %w", err) } if len(chainRoot) < 32 { return false, errors.New("anchor verify: chain returned < 32 bytes") } var onChain [32]byte copy(onChain[:], chainRoot[:32]) return onChain == root, nil } // LatestHeight queries the latest anchored height via eth_call. func (a *RPCAnchorer) LatestHeight(ctx context.Context) (uint64, error) { calldata := encodeGetLatestCalldata(a.cfg.AppID) params := []any{map[string]string{ "to": a.cfg.ContractAddress, "data": "0x" + hex.EncodeToString(calldata), }, "latest"} result, err := a.rpcCall(ctx, "eth_call", params) if err != nil { return 0, fmt.Errorf("anchor latestHeight: %w", err) } var hexResult string if err := json.Unmarshal(result, &hexResult); err != nil { return 0, fmt.Errorf("anchor latestHeight: unmarshal: %w", err) } if len(hexResult) >= 2 && hexResult[:2] == "0x" { hexResult = hexResult[2:] } b, err := hex.DecodeString(hexResult) if err != nil { return 0, fmt.Errorf("anchor latestHeight: decode: %w", err) } if len(b) < 32 { return 0, nil } return binary.BigEndian.Uint64(b[24:32]), nil } // AnchorBackground runs a background goroutine that periodically anchors // the document's state. Cancel the context to stop it. func AnchorBackground(ctx context.Context, doc *Document, anchorer Anchorer, cfg AnchorConfig) { if cfg.Interval == 0 { cfg.Interval = 5 * time.Minute } ticker := time.NewTicker(cfg.Interval) defer ticker.Stop() for { select { case <-ctx.Done(): return case <-ticker.C: root, err := DocumentMerkleRoot(doc) if err != nil { log.Printf("anchor: compute root: %v", err) continue } if err := anchorer.Submit(ctx, root); err != nil { log.Printf("anchor: submit: %v", err) } } } } // DocumentMerkleRoot computes SHA-256 of the gob-encoded document snapshot. func DocumentMerkleRoot(doc *Document) ([32]byte, error) { data, err := doc.Encode() if err != nil { return [32]byte{}, fmt.Errorf("merkle root: encode: %w", err) } return sha256.Sum256(data), nil } // --- ABI encoding helpers --- // These produce minimal ABI-compatible calldata without importing the full ABI library. // Function selector: keccak256("submit(bytes32,uint64,bytes32)")[:4] // Precomputed to avoid runtime dependency on crypto/keccak. var ( // submit(bytes32,uint64,bytes32) selector selectorSubmit = [4]byte{0x3c, 0x21, 0xe8, 0xa1} // get(bytes32,uint64) selector selectorGet = [4]byte{0x8e, 0xaa, 0x6a, 0xc0} // getLatest(bytes32) selector selectorGetLatest = [4]byte{0xba, 0x41, 0xd8, 0x47} ) func encodeSubmitCalldata(appID [32]byte, height uint64, root [32]byte) []byte { buf := make([]byte, 4+96) copy(buf[:4], selectorSubmit[:]) copy(buf[4:36], appID[:]) binary.BigEndian.PutUint64(buf[60:68], height) copy(buf[68:100], root[:]) return buf } func encodeGetCalldata(appID [32]byte, height uint64) []byte { buf := make([]byte, 4+64) copy(buf[:4], selectorGet[:]) copy(buf[4:36], appID[:]) binary.BigEndian.PutUint64(buf[60:68], height) return buf } func encodeGetLatestCalldata(appID [32]byte) []byte { buf := make([]byte, 4+32) copy(buf[:4], selectorGetLatest[:]) copy(buf[4:36], appID[:]) return buf } /xArpackage crdt import ( "context" "encoding/binary" "encoding/hex" "encoding/json" "fmt" "runtime" "sync" "testing" "time" ) // mockAnchorer records calls for testing. type mockAnchorer struct { mu sync.Mutex anchors map[uint64][32]byte height uint64 submitCt int } func newMockAnchorer() *mockAnchorer { return &mockAnchorer{anchors: make(map[uint64][32]byte)} } func (m *mockAnchorer) Submit(ctx context.Context, root [32]byte) error { m.mu.Lock() defer m.mu.Unlock() m.height++ m.anchors[m.height] = root m.submitCt++ return nil } func (m *mockAnchorer) Verify(ctx context.Context, height uint64, root [32]byte) (bool, error) { m.mu.Lock() defer m.mu.Unlock() stored, ok := m.anchors[height] if !ok { return false, nil } return stored == root, nil } func (m *mockAnchorer) LatestHeight(ctx context.Context) (uint64, error) { m.mu.Lock() defer m.mu.Unlock() return m.height, nil } func TestMockAnchorerSubmitVerify(t *testing.T) { ctx := context.Background() a := newMockAnchorer() root := [32]byte{0xAA} if err := a.Submit(ctx, root); err != nil { t.Fatalf("submit: %v", err) } ok, err := a.Verify(ctx, 1, root) if err != nil { t.Fatalf("verify: %v", err) } if !ok { t.Fatal("verify should match") } // Wrong root wrongRoot := [32]byte{0xBB} ok, err = a.Verify(ctx, 1, wrongRoot) if err != nil { t.Fatalf("verify wrong: %v", err) } if ok { t.Fatal("verify should not match wrong root") } // Nonexistent height ok, err = a.Verify(ctx, 999, root) if err != nil { t.Fatalf("verify nonexistent: %v", err) } if ok { t.Fatal("verify should not match nonexistent height") } } func TestMockAnchorerLatestHeight(t *testing.T) { ctx := context.Background() a := newMockAnchorer() h, _ := a.LatestHeight(ctx) if h != 0 { t.Fatalf("expected 0, got %d", h) } a.Submit(ctx, [32]byte{1}) a.Submit(ctx, [32]byte{2}) a.Submit(ctx, [32]byte{3}) h, _ = a.LatestHeight(ctx) if h != 3 { t.Fatalf("expected 3, got %d", h) } } func TestDocumentMerkleRoot(t *testing.T) { doc := NewDocument("test", "nodeA") doc.GetText("body").InsertText(-1, "Hello") doc.GetCounter("views").Increment("nodeA", 10) root1, err := DocumentMerkleRoot(doc) if err != nil { t.Fatalf("root: %v", err) } // Same state = same root root2, err := DocumentMerkleRoot(doc) if err != nil { t.Fatalf("root2: %v", err) } if root1 != root2 { t.Fatal("deterministic root failed") } // Mutate and recompute doc.GetCounter("views").Increment("nodeA", 1) root3, err := DocumentMerkleRoot(doc) if err != nil { t.Fatalf("root3: %v", err) } if root3 == root1 { t.Fatal("root should change after mutation") } } func TestDocumentAnchorRoundTrip(t *testing.T) { ctx := context.Background() a := newMockAnchorer() doc := NewDocument("test", "A") doc.GetText("title").InsertText(-1, "Test Doc") root, err := DocumentMerkleRoot(doc) if err != nil { t.Fatalf("root: %v", err) } if err := a.Submit(ctx, root); err != nil { t.Fatalf("submit: %v", err) } ok, err := a.Verify(ctx, 1, root) if err != nil || !ok { t.Fatal("round-trip verification failed") } } func TestAnchorBackgroundCancelStops(t *testing.T) { a := newMockAnchorer() doc := NewDocument("test", "A") doc.GetText("x").InsertText(-1, "data") ctx, cancel := context.WithCancel(context.Background()) done := make(chan struct{}) go func() { AnchorBackground(ctx, doc, a, AnchorConfig{Interval: 50 * time.Millisecond}) close(done) }() // Wait for at least one anchor time.Sleep(150 * time.Millisecond) cancel() select { case <-done: case <-time.After(2 * time.Second): t.Fatal("AnchorBackground did not stop after context cancel") } a.mu.Lock() ct := a.submitCt a.mu.Unlock() if ct == 0 { t.Fatal("expected at least one submit") } } func TestAppIDFromName(t *testing.T) { id1 := AppIDFromName("my-app") id2 := AppIDFromName("my-app") if id1 != id2 { t.Fatal("AppIDFromName not deterministic") } id3 := AppIDFromName("other-app") if id1 == id3 { t.Fatal("different names should produce different IDs") } } func TestRPCAnchorer_SubmitCalldata(t *testing.T) { // Verify the calldata encoding matches the precompile's expectations. appID := AppIDFromName("test-app") root := [32]byte{0xDE, 0xAD} var captured []byte mockRPC := func(ctx context.Context, method string, params []any) (json.RawMessage, error) { if method != "eth_sendTransaction" { t.Fatalf("expected eth_sendTransaction, got %s", method) } p := params[0].(map[string]string) data := p["data"] b, _ := hex.DecodeString(data[2:]) // strip 0x captured = b return json.RawMessage(`"0xdeadbeef"`), nil } a := NewRPCAnchorer(AnchorConfig{ AppID: appID, RPCEndpoint: "http://localhost:9650", From: "0x0000000000000000000000000000000000000001", }, mockRPC) if err := a.Submit(context.Background(), root); err != nil { t.Fatalf("submit: %v", err) } // Verify calldata structure: 4 selector + 32 appID + 32 height + 32 root = 100 bytes if len(captured) != 100 { t.Fatalf("expected 100 bytes calldata, got %d", len(captured)) } // Check selector if captured[0] != selectorSubmit[0] || captured[1] != selectorSubmit[1] || captured[2] != selectorSubmit[2] || captured[3] != selectorSubmit[3] { t.Fatal("selector mismatch") } // Check appID var gotAppID [32]byte copy(gotAppID[:], captured[4:36]) if gotAppID != appID { t.Fatal("appID mismatch in calldata") } // Check height = 1 (first submit) h := binary.BigEndian.Uint64(captured[60:68]) if h != 1 { t.Fatalf("expected height 1, got %d", h) } // Check root var gotRoot [32]byte copy(gotRoot[:], captured[68:100]) if gotRoot != root { t.Fatal("root mismatch in calldata") } } func TestRPCAnchorer_VerifyCalldata(t *testing.T) { appID := AppIDFromName("test-app") expectedRoot := [32]byte{0xCA, 0xFE} // Mock returns the expected root as hex mockRPC := func(ctx context.Context, method string, params []any) (json.RawMessage, error) { if method != "eth_call" { t.Fatalf("expected eth_call, got %s", method) } return json.Marshal("0x" + hex.EncodeToString(expectedRoot[:])) } a := NewRPCAnchorer(AnchorConfig{ AppID: appID, RPCEndpoint: "http://localhost:9650", From: "0x0000000000000000000000000000000000000001", }, mockRPC) ok, err := a.Verify(context.Background(), 1, expectedRoot) if err != nil { t.Fatalf("verify: %v", err) } if !ok { t.Fatal("verify should match") } // Wrong root ok, err = a.Verify(context.Background(), 1, [32]byte{0xFF}) if err != nil { t.Fatalf("verify wrong: %v", err) } if ok { t.Fatal("verify should not match wrong root") } } // --- WithAutoAnchor integration tests --- func TestDocument_NoAnchorer_NoGoroutineLeak(t *testing.T) { // Snapshot goroutine count, create a doc with no anchorer, confirm // no new goroutines were spawned. runtime.GC() before := runtime.NumGoroutine() doc := NewDocument("no-anchor", "nodeA") doc.GetText("x").InsertText(-1, "test") after := runtime.NumGoroutine() doc.Close() // no-op, should not panic // Allow +1 for runtime jitter (GC, scheduler), but not the +1 that // would come from a background anchor goroutine. if after > before+1 { t.Fatalf("goroutine leak: before=%d after=%d", before, after) } } func TestDocument_WithAutoAnchor_FiresAndReportsStatus(t *testing.T) { a := newMockAnchorer() doc := NewDocument("anchored", "nodeA", WithAutoAnchor(a, 50*time.Millisecond), ) defer doc.Close() // Apply some ops so the Merkle root is non-zero. doc.GetText("body").InsertText(-1, "hello") doc.GetCounter("hits").Increment("nodeA", 1) // Wait for at least two anchor cycles. time.Sleep(200 * time.Millisecond) st := doc.AnchorStatus() if st.LastHeight == 0 { t.Fatal("expected LastHeight > 0 after anchor cycle") } if st.LastRoot == [32]byte{} { t.Fatal("expected non-zero LastRoot") } if st.LastAnchoredAt.IsZero() { t.Fatal("expected non-zero LastAnchoredAt") } if st.LastError != nil { t.Fatalf("unexpected LastError: %v", st.LastError) } a.mu.Lock() ct := a.submitCt a.mu.Unlock() if ct < 2 { t.Fatalf("expected >= 2 submits, got %d", ct) } } func TestDocument_Close_StopsAnchorWithin200ms(t *testing.T) { a := newMockAnchorer() doc := NewDocument("close-test", "nodeA", WithAutoAnchor(a, 50*time.Millisecond), ) doc.GetText("x").InsertText(-1, "data") // Let one anchor fire. time.Sleep(100 * time.Millisecond) start := time.Now() doc.Close() elapsed := time.Since(start) if elapsed > 200*time.Millisecond { t.Fatalf("Close took %v, expected < 200ms", elapsed) } // Verify goroutine is gone: a second Close should not block. doc.Close() } // --- RED TEAM: Adversarial attack vectors (ed972e42 review) --- // blockingAnchorer has a Submit that blocks until unblocked via a channel. type blockingAnchorer struct { submitEntered chan struct{} // closed when Submit starts executing unblock chan struct{} // close to let Submit return } func newBlockingAnchorer() *blockingAnchorer { return &blockingAnchorer{ submitEntered: make(chan struct{}), unblock: make(chan struct{}), } } func (b *blockingAnchorer) Submit(ctx context.Context, root [32]byte) error { select { case <-b.submitEntered: default: close(b.submitEntered) } // Block until unblocked OR context cancelled. select { case <-b.unblock: return nil case <-ctx.Done(): return ctx.Err() } } func (b *blockingAnchorer) Verify(ctx context.Context, height uint64, root [32]byte) (bool, error) { return true, nil } func (b *blockingAnchorer) LatestHeight(ctx context.Context) (uint64, error) { return 0, nil } // Before fix: Close blocks indefinitely because the goroutine is stuck // inside Submit which does not observe context cancellation. // After fix: startAnchorLoop passes ctx to Submit, and blockingAnchorer // (any well-behaved Anchorer) returns on ctx.Done(). Close returns fast. func TestCloseWhileSubmitMidFlight(t *testing.T) { ba := newBlockingAnchorer() doc := NewDocument("anchor-1", "nodeA", WithAutoAnchor(ba, 20*time.Millisecond), ) doc.GetText("x").InsertText(-1, "data") // Wait for Submit to be entered (goroutine is now blocked inside Submit). select { case <-ba.submitEntered: case <-time.After(2 * time.Second): t.Fatal("Submit was never entered within 2s") } // Now Close. Submit is blocked. Close MUST return within 200ms // because context cancellation propagates into Submit. start := time.Now() doc.Close() elapsed := time.Since(start) if elapsed > 200*time.Millisecond { t.Fatalf("VULN: Close blocked %v while Submit was mid-flight (expected <200ms)", elapsed) } } // Runs concurrent mutations (which acquire doc.mu) and AnchorStatus reads // (which acquire anchorMu) under -race for 500ms. If there were an AB/BA // lock ordering bug, the race detector or a deadlock would catch it. func TestNoCrossLockDeadlock(t *testing.T) { a := newMockAnchorer() doc := NewDocument("anchor-2", "nodeA", WithAutoAnchor(a, 10*time.Millisecond), ) defer doc.Close() doc.GetCounter("x").Increment("nodeA", 1) var wg sync.WaitGroup done := make(chan struct{}) time.AfterFunc(500*time.Millisecond, func() { close(done) }) // Goroutine 1: rapid mutations (acquires doc.mu). wg.Add(1) go func() { defer wg.Done() for i := 0; ; i++ { select { case <-done: return default: doc.GetCounter("x").Increment("nodeA", 1) } } }() // Goroutine 2: rapid AnchorStatus reads (acquires anchorMu). wg.Add(1) go func() { defer wg.Done() for { select { case <-done: return default: _ = doc.AnchorStatus() } } }() // Goroutine 3: rapid Version reads (acquires doc.mu RLock). wg.Add(1) go func() { defer wg.Done() for { select { case <-done: return default: _ = doc.Version() } } }() wg.Wait() // If we reach here, no deadlock occurred. } func TestDoubleWithAutoAnchor_NoZombie(t *testing.T) { a1 := newMockAnchorer() a2 := newMockAnchorer() runtime.GC() before := runtime.NumGoroutine() doc := NewDocument("anchor-3", "nodeA", WithAutoAnchor(a1, 1*time.Second), WithAutoAnchor(a2, 30*time.Millisecond), ) doc.GetText("x").InsertText(-1, "data") // Only one goroutine should have started. after := runtime.NumGoroutine() // Allow +2 for runtime jitter, but a zombie from a1 would add another. if after > before+2 { doc.Close() t.Fatalf("goroutine leak: before=%d after=%d (expected at most +2)", before, after) } // Wait for at least one anchor cycle. time.Sleep(100 * time.Millisecond) // a2 should have received submits (it was the last option applied). a2.mu.Lock() ct2 := a2.submitCt a2.mu.Unlock() // a1 should have received zero submits (overwritten by a2). a1.mu.Lock() ct1 := a1.submitCt a1.mu.Unlock() doc.Close() if ct1 != 0 { t.Fatalf("VULN: first anchorer got %d submits (expected 0, zombie goroutine)", ct1) } if ct2 == 0 { t.Fatal("second anchorer got 0 submits (expected > 0)") } } func TestAnchorStatusAfterClose(t *testing.T) { a := newMockAnchorer() doc := NewDocument("anchor-4", "nodeA", WithAutoAnchor(a, 30*time.Millisecond), ) doc.GetText("x").InsertText(-1, "data") // Let at least one anchor fire. time.Sleep(100 * time.Millisecond) preSt := doc.AnchorStatus() doc.Close() // AnchorStatus after Close must not panic and must return last snapshot. postSt := doc.AnchorStatus() if postSt.LastHeight == 0 && preSt.LastHeight > 0 { t.Fatal("AnchorStatus after Close lost data") } if postSt.LastHeight != preSt.LastHeight { t.Fatalf("AnchorStatus changed after Close: pre=%d post=%d", preSt.LastHeight, postSt.LastHeight) } } func TestCloseOnDecodedDocument(t *testing.T) { // Create, encode, decode, then Close the decoded doc. orig := NewDocument("anchor-5", "nodeA") orig.GetText("x").InsertText(-1, "hello") orig.GetCounter("y").Increment("nodeA", 42) data, err := orig.Encode() if err != nil { t.Fatalf("encode: %v", err) } decoded, err := Decode(data, "nodeB") if err != nil { t.Fatalf("decode: %v", err) } // This must not panic. Decoded docs have no anchor goroutine. decoded.Close() // AnchorStatus on a decoded doc must return zero value. st := decoded.AnchorStatus() if st.LastHeight != 0 || !st.LastAnchoredAt.IsZero() || st.LastError != nil { t.Fatalf("decoded doc AnchorStatus should be zero, got: %+v", st) } } // failingAnchorer always fails Submit, used to test backoff behavior. type failingAnchorer struct { mu sync.Mutex submitCt int submitTimes []time.Time } func newFailingAnchorer() *failingAnchorer { return &failingAnchorer{} } func (f *failingAnchorer) Submit(ctx context.Context, root [32]byte) error { f.mu.Lock() f.submitCt++ f.submitTimes = append(f.submitTimes, time.Now()) f.mu.Unlock() return fmt.Errorf("simulated RPC failure") } func (f *failingAnchorer) Verify(ctx context.Context, height uint64, root [32]byte) (bool, error) { return false, nil } func (f *failingAnchorer) LatestHeight(ctx context.Context) (uint64, error) { return 0, nil } // exponential backoff (intervals grow), not constant-interval retries. func TestExponentialBackoffOnFailure(t *testing.T) { fa := newFailingAnchorer() baseInterval := 30 * time.Millisecond doc := NewDocument("anchor-6", "nodeA", WithAutoAnchor(fa, baseInterval), ) doc.GetText("x").InsertText(-1, "data") // Let it run long enough for several retry cycles. // With 30ms base and exponential backoff (30, 60, 120, 240ms), // in 600ms we'd see ~4 attempts with backoff vs ~20 without. time.Sleep(600 * time.Millisecond) doc.Close() fa.mu.Lock() ct := fa.submitCt times := make([]time.Time, len(fa.submitTimes)) copy(times, fa.submitTimes) fa.mu.Unlock() if ct < 2 { t.Fatalf("expected >= 2 submit attempts, got %d", ct) } // With backoff, we should see significantly fewer attempts than // the ~20 that constant 30ms interval would produce in 600ms. // With exponential backoff (30, 60, 120, 240ms) we expect ~4-5 attempts. // Allow up to 8 to account for timing jitter, but reject > 12 // which would indicate no backoff at all. if ct > 12 { t.Fatalf("VULN: thundering herd — %d retries in 600ms with %v base interval "+ "(expected <= 12 with backoff, got constant-interval retry)", ct, baseInterval) } // Verify intervals are non-decreasing (evidence of backoff). if len(times) >= 3 { gap1 := times[1].Sub(times[0]) gap2 := times[2].Sub(times[1]) // Second gap should be >= first gap (backoff increases interval). // Allow 10ms of jitter. if gap2 < gap1-10*time.Millisecond { t.Logf("WARNING: gap1=%v gap2=%v — gaps should be non-decreasing with backoff", gap1, gap2) } } } Jx6epackage crdt import ( "encoding/json" "sync" "testing" ) // ------------------------------------------------------------------- // GCounter tests // ------------------------------------------------------------------- func TestGCounter_IncrementAndValue(t *testing.T) { g := NewGCounter() g.Increment("A", 3) g.Increment("B", 5) g.Increment("A", 2) if v := g.Value(); v != 10 { t.Fatalf("expected 10, got %d", v) } } func TestGCounter_Merge(t *testing.T) { g1 := NewGCounter() g1.Increment("A", 3) g1.Increment("B", 2) g2 := NewGCounter() g2.Increment("A", 1) g2.Increment("B", 5) g2.Increment("C", 4) g1.Merge(g2) // A: max(3,1)=3, B: max(2,5)=5, C: max(0,4)=4 => 12 if v := g1.Value(); v != 12 { t.Fatalf("expected 12, got %d", v) } } func TestGCounter_MergeConverges(t *testing.T) { g1 := NewGCounter() g2 := NewGCounter() g1.Increment("A", 10) g2.Increment("B", 20) // merge both ways g1copy := NewGCounter() g1copy.Merge(g1) g1copy.Merge(g2) g2copy := NewGCounter() g2copy.Merge(g2) g2copy.Merge(g1) if g1copy.Value() != g2copy.Value() { t.Fatalf("convergence failed: %d != %d", g1copy.Value(), g2copy.Value()) } } // ------------------------------------------------------------------- // PNCounter tests // ------------------------------------------------------------------- func TestPNCounter_IncrementDecrement(t *testing.T) { pn := NewPNCounter() pn.Increment("A", 10) pn.Decrement("B", 3) if v := pn.Value(); v != 7 { t.Fatalf("expected 7, got %d", v) } } func TestPNCounter_MergeConverges(t *testing.T) { pn1 := NewPNCounter() pn2 := NewPNCounter() pn1.Increment("A", 10) pn1.Decrement("A", 2) pn2.Increment("B", 5) pn2.Decrement("B", 1) r1 := NewPNCounter() r1.Merge(pn1) r1.Merge(pn2) r2 := NewPNCounter() r2.Merge(pn2) r2.Merge(pn1) if r1.Value() != r2.Value() { t.Fatalf("convergence failed: %d != %d", r1.Value(), r2.Value()) } // (10-2) + (5-1) = 12 if r1.Value() != 12 { t.Fatalf("expected 12, got %d", r1.Value()) } } // ------------------------------------------------------------------- // LWWRegister tests // ------------------------------------------------------------------- func TestLWWRegister_SetGet(t *testing.T) { r := NewLWWRegister() r.Set("first", Timestamp{Time: 1, NodeID: "A"}) r.Set("second", Timestamp{Time: 2, NodeID: "A"}) val, ts := r.Get() if val != "second" || ts.Time != 2 { t.Fatalf("expected 'second' at time 2, got %v at %v", val, ts) } } func TestLWWRegister_ConcurrentWritesBiasHigherTimestamp(t *testing.T) { r := NewLWWRegister() r.Set("old", Timestamp{Time: 5, NodeID: "A"}) r.Set("new-but-older", Timestamp{Time: 3, NodeID: "B"}) val, _ := r.Get() if val != "old" { t.Fatalf("expected 'old' to win (higher timestamp), got %v", val) } } func TestLWWRegister_MergeConverges(t *testing.T) { r1 := NewLWWRegister() r2 := NewLWWRegister() r1.Set("from-A", Timestamp{Time: 5, NodeID: "A"}) r2.Set("from-B", Timestamp{Time: 3, NodeID: "B"}) c1 := NewLWWRegister() c1.Merge(r1) c1.Merge(r2) c2 := NewLWWRegister() c2.Merge(r2) c2.Merge(r1) v1, _ := c1.Get() v2, _ := c2.Get() if v1 != v2 { t.Fatalf("convergence failed: %v != %v", v1, v2) } if v1 != "from-A" { t.Fatalf("expected 'from-A', got %v", v1) } } // ------------------------------------------------------------------- // ORSet tests // ------------------------------------------------------------------- func TestORSet_AddContainsRemove(t *testing.T) { s := NewORSet("A") s.Add("x", 1) s.Add("y", 2) if !s.Contains("x") { t.Fatal("expected x to be present") } if !s.Contains("y") { t.Fatal("expected y to be present") } s.Remove("x") if s.Contains("x") { t.Fatal("expected x to be removed") } if !s.Contains("y") { t.Fatal("expected y to still be present") } } func TestORSet_MergeConverges(t *testing.T) { s1 := NewORSet("A") s2 := NewORSet("B") s1.Add("x", 1) s1.Add("y", 2) s2.Add("y", 3) s2.Add("z", 4) // remove y from s1 before merge s1.Remove("y") // merge s2 into s1: s2's "y" tags should re-add it (add-wins) s1.Merge(s2) if !s1.Contains("x") { t.Fatal("expected x after merge") } if !s1.Contains("y") { t.Fatal("expected y after merge (add-wins)") } if !s1.Contains("z") { t.Fatal("expected z after merge") } } func TestORSet_MergeSymmetric(t *testing.T) { s1 := NewORSet("A") s2 := NewORSet("B") s1.Add("a", nil) s2.Add("b", nil) r1 := NewORSet("R1") r1.Merge(s1) r1.Merge(s2) r2 := NewORSet("R2") r2.Merge(s2) r2.Merge(s1) e1 := r1.Elements() e2 := r2.Elements() if len(e1) != len(e2) { t.Fatalf("convergence failed: sizes differ %d vs %d", len(e1), len(e2)) } for k := range e1 { if _, ok := e2[k]; !ok { t.Fatalf("convergence failed: key %q missing from r2", k) } } } // ------------------------------------------------------------------- // MVRegister tests // ------------------------------------------------------------------- func TestMVRegister_DominatedWrite(t *testing.T) { mv := NewMVRegister() mv.Set("first", Timestamp{Time: 1, NodeID: "A"}) mv.Set("second", Timestamp{Time: 2, NodeID: "A"}) entries := mv.Get() if len(entries) != 1 { t.Fatalf("expected 1 entry, got %d", len(entries)) } if entries[0].Value != "second" { t.Fatalf("expected 'second', got %v", entries[0].Value) } } func TestMVRegister_MergeConverges(t *testing.T) { mv1 := NewMVRegister() mv2 := NewMVRegister() mv1.Set("from-1", Timestamp{Time: 5, NodeID: "A"}) mv2.Set("from-2", Timestamp{Time: 3, NodeID: "B"}) r1 := NewMVRegister() r1.Merge(mv1) r1.Merge(mv2) r2 := NewMVRegister() r2.Merge(mv2) r2.Merge(mv1) e1 := r1.Get() e2 := r2.Get() if len(e1) != len(e2) { t.Fatalf("convergence failed: %d vs %d entries", len(e1), len(e2)) } } // ------------------------------------------------------------------- // RGA (text) tests // ------------------------------------------------------------------- func TestRGA_InsertAndToString(t *testing.T) { rga := NewRGA("A") rga.Insert(-1, 'H') rga.Insert(0, 'i') if s := rga.ToString(); s != "Hi" { t.Fatalf("expected 'Hi', got %q", s) } } func TestRGA_InsertText(t *testing.T) { rga := NewRGA("A") rga.InsertText(-1, "Hello") if s := rga.ToString(); s != "Hello" { t.Fatalf("expected 'Hello', got %q", s) } } func TestRGA_Delete(t *testing.T) { rga := NewRGA("A") rga.InsertText(-1, "abc") if _, err := rga.Delete(1); err != nil { t.Fatalf("delete failed: %v", err) } if s := rga.ToString(); s != "ac" { t.Fatalf("expected 'ac', got %q", s) } } func TestRGA_MergeConverges(t *testing.T) { rga1 := NewRGA("A") rga2 := NewRGA("B") rga1.InsertText(-1, "Hello") rga2.InsertText(-1, "World") r1 := NewRGA("R1") if err := r1.Merge(rga1); err != nil { t.Fatalf("merge rga1 into r1: %v", err) } if err := r1.Merge(rga2); err != nil { t.Fatalf("merge rga2 into r1: %v", err) } r2 := NewRGA("R2") if err := r2.Merge(rga2); err != nil { t.Fatalf("merge rga2 into r2: %v", err) } if err := r2.Merge(rga1); err != nil { t.Fatalf("merge rga1 into r2: %v", err) } s1 := r1.ToString() s2 := r2.ToString() if s1 != s2 { t.Fatalf("convergence failed: %q != %q", s1, s2) } if r1.Length() != 10 { t.Fatalf("expected length 10, got %d (text: %q)", r1.Length(), s1) } } func TestRGA_ConcurrentInsertSamePosition(t *testing.T) { rga1 := NewRGA("A") rga2 := NewRGA("B") op1 := rga1.Insert(-1, 'x') op2 := rga2.Insert(-1, 'y') if err := rga1.ApplyOp(RGAOp{ Type: OpInsert, ID: op2.ID, ParentID: op2.ParentID, Char: op2.Char, }); err != nil { t.Fatalf("apply op2 to rga1: %v", err) } if err := rga2.ApplyOp(RGAOp{ Type: OpInsert, ID: op1.ID, ParentID: op1.ParentID, Char: op1.Char, }); err != nil { t.Fatalf("apply op1 to rga2: %v", err) } s1 := rga1.ToString() s2 := rga2.ToString() if s1 != s2 { t.Fatalf("convergence failed: %q != %q", s1, s2) } if len(s1) != 2 { t.Fatalf("expected 2 chars, got %d: %q", len(s1), s1) } } func TestRGA_ApplyOpIdempotent(t *testing.T) { rga := NewRGA("A") op := rga.Insert(-1, 'x') err := rga.ApplyOp(op) if err != nil { t.Fatalf("idempotent apply should not fail: %v", err) } if s := rga.ToString(); s != "x" { t.Fatalf("expected 'x', got %q", s) } } func TestRGA_StateVectorAndOpsSince(t *testing.T) { rga := NewRGA("A") rga.InsertText(-1, "abc") sv := rga.StateVector() if sv["A"] != 3 { t.Fatalf("expected sv[A]=3, got %d", sv["A"]) } rga.Insert(2, 'd') ops := rga.OpsSince(sv) if len(ops) != 1 { t.Fatalf("expected 1 op since sv, got %d", len(ops)) } } // ------------------------------------------------------------------- // Document tests // ------------------------------------------------------------------- func TestDocument_TextFieldMerge(t *testing.T) { doc1 := NewDocument("test", "A") doc2 := NewDocument("test", "B") doc1.GetText("title").InsertText(-1, "Hello") doc2.GetText("title").InsertText(-1, "World") doc1.Merge(doc2) doc2.Merge(doc1) s1 := doc1.GetText("title").ToString() s2 := doc2.GetText("title").ToString() if s1 != s2 { t.Fatalf("document text convergence failed: %q != %q", s1, s2) } } func TestDocument_CounterFieldMerge(t *testing.T) { doc1 := NewDocument("test", "A") doc2 := NewDocument("test", "B") doc1.GetCounter("votes").Increment("A", 5) doc2.GetCounter("votes").Increment("B", 3) doc1.Merge(doc2) if v := doc1.GetCounter("votes").Value(); v != 8 { t.Fatalf("expected counter=8, got %d", v) } } func TestDocument_SetFieldMerge(t *testing.T) { doc1 := NewDocument("test", "A") doc2 := NewDocument("test", "B") doc1.GetSet("tags").Add("go", nil) doc2.GetSet("tags").Add("rust", nil) doc1.Merge(doc2) elems := doc1.GetSet("tags").Elements() if len(elems) != 2 { t.Fatalf("expected 2 tags, got %d", len(elems)) } } func TestDocument_RegisterFieldMerge(t *testing.T) { doc1 := NewDocument("test", "A") doc2 := NewDocument("test", "B") doc1.GetRegister("status").Set("draft", Timestamp{Time: 1, NodeID: "A"}) doc2.GetRegister("status").Set("published", Timestamp{Time: 2, NodeID: "B"}) doc1.Merge(doc2) val, _ := doc1.GetRegister("status").Get() if val != "published" { t.Fatalf("expected 'published', got %v", val) } } func TestDocument_EncodeDecodeRoundTrip(t *testing.T) { doc := NewDocument("test-doc", "nodeA") doc.GetText("body").InsertText(-1, "Hello World") doc.GetCounter("views").Increment("nodeA", 42) doc.GetSet("tags").Add("crdt", nil) doc.GetRegister("title").Set("My Doc", Timestamp{Time: 1, NodeID: "nodeA"}) data, err := doc.Encode() if err != nil { t.Fatalf("encode failed: %v", err) } doc2, err := Decode(data, "nodeB") if err != nil { t.Fatalf("decode failed: %v", err) } if doc2.ID() != "test-doc" { t.Fatalf("expected ID 'test-doc', got %q", doc2.ID()) } if s := doc2.GetText("body").ToString(); s != "Hello World" { t.Fatalf("expected 'Hello World', got %q", s) } if v := doc2.GetCounter("views").Value(); v != 42 { t.Fatalf("expected counter=42, got %d", v) } } // ------------------------------------------------------------------- // SyncManager tests // ------------------------------------------------------------------- func TestSyncManager_SyncProtocol(t *testing.T) { var broadcastMu sync.Mutex var broadcasts [][]byte sm := NewSyncManager(func(docID, excludeClient string, msg []byte) { broadcastMu.Lock() broadcasts = append(broadcasts, msg) broadcastMu.Unlock() }) doc := NewDocument("doc1", "server") doc.GetText("content").InsertText(-1, "server-text") sm.RegisterDocument("doc1", doc) step1 := `{"type":"sync_step1","docId":"doc1","stateVector":{}}` resp, err := sm.HandleSync("client-1", []byte(step1)) if err != nil { t.Fatalf("sync step 1 failed: %v", err) } if resp == nil { t.Fatal("expected response for sync step 1") } var msg SyncMessage if err := json.Unmarshal(resp, &msg); err != nil { t.Fatalf("unmarshal response: %v", err) } if msg.Type != SyncStep2 { t.Fatalf("expected sync_step2, got %s", msg.Type) } if len(msg.StateVector) == 0 { t.Fatal("expected non-empty state vector in response") } } func TestSyncManager_GetOrCreateDocument(t *testing.T) { sm := NewSyncManager(nil) doc1 := sm.GetOrCreateDocument("new-doc", "node1") if doc1 == nil { t.Fatal("expected non-nil document") } doc2 := sm.GetOrCreateDocument("new-doc", "node2") if doc1 != doc2 { t.Fatal("expected same document instance") } } // ------------------------------------------------------------------- // StateVersion tests // ------------------------------------------------------------------- func TestStateVersion_Dominates(t *testing.T) { v1 := StateVersion{"A": 5, "B": 3} v2 := StateVersion{"A": 3, "B": 2} if !v1.Dominates(v2) { t.Fatal("expected v1 to dominate v2") } if v2.Dominates(v1) { t.Fatal("expected v2 to NOT dominate v1") } } func TestStateVersion_Merge(t *testing.T) { v1 := StateVersion{"A": 5, "B": 3} v2 := StateVersion{"A": 3, "C": 7} merged := v1.Merge(v2) if merged["A"] != 5 || merged["B"] != 3 || merged["C"] != 7 { t.Fatalf("unexpected merge result: %v", merged) } } // ------------------------------------------------------------------- // Concurrent safety tests // ------------------------------------------------------------------- func TestGCounter_ConcurrentAccess(t *testing.T) { g := NewGCounter() var wg sync.WaitGroup for i := 0; i < 100; i++ { wg.Add(1) go func() { defer wg.Done() g.Increment("node", 1) }() } wg.Wait() if v := g.Value(); v != 100 { t.Fatalf("expected 100, got %d", v) } } func TestORSet_ConcurrentAccess(t *testing.T) { s := NewORSet("A") var wg sync.WaitGroup for i := 0; i < 100; i++ { wg.Add(1) go func(n int) { defer wg.Done() key := string(rune('a' + n%26)) s.Add(key, n) }(i) } wg.Wait() elems := s.Elements() if len(elems) == 0 { t.Fatal("expected non-empty set") } } s xHSpackage crdt import ( "bytes" "context" "encoding/gob" "encoding/json" "fmt" "sync" "time" ) func init() { // Register types for gob encoding/decoding. gob.Register(map[string]any{}) gob.Register([]any{}) gob.Register(map[NodeID]uint64{}) gob.Register(map[string]map[string]any{}) gob.Register(Timestamp{}) gob.Register(MVEntry{}) gob.Register([]MVEntry{}) gob.Register(RGAID{}) gob.Register(RGAOp{}) } // StateVersion represents a document's version as a state vector. // Maps nodeID -> max sequence number seen from that node. type StateVersion map[NodeID]uint64 // Dominates reports whether v causally dominates other // (every entry in other is <= the corresponding entry in v). func (v StateVersion) Dominates(other StateVersion) bool { for node, seq := range other { if v[node] < seq { return false } } return true } // Merge returns a new StateVersion taking the max of each entry. func (v StateVersion) Merge(other StateVersion) StateVersion { result := make(StateVersion, len(v)+len(other)) for n, s := range v { result[n] = s } for n, s := range other { if s > result[n] { result[n] = s } } return result } // FieldType identifies the CRDT type of a document field. type FieldType uint8 const ( FieldTypeText FieldType = iota // RGA FieldTypeCounter // PNCounter FieldTypeSet // ORSet FieldTypeRegister // LWWRegister FieldTypeMVRegister // MVRegister ) // Operation represents a serializable CRDT operation for sync. type Operation struct { Field string `json:"field"` FieldType FieldType `json:"fieldType"` Data []byte `json:"data"` } // DocumentSnapshot is the serializable state of a Document. type DocumentSnapshot struct { ID string `json:"id"` Version StateVersion `json:"version"` Texts map[string]*textSnapshot `json:"texts,omitempty"` Counters map[string]*counterSnapshot `json:"counters,omitempty"` Sets map[string]*setSnapshot `json:"sets,omitempty"` Regs map[string]*registerSnapshot `json:"registers,omitempty"` MVRegs map[string]*mvRegisterSnapshot `json:"mvRegisters,omitempty"` } type textSnapshot struct { // Nodes in linked-list order Nodes []textNodeSnapshot `json:"nodes"` } type textNodeSnapshot struct { ID RGAID `json:"id"` ParentID RGAID `json:"parentId"` Char rune `json:"char"` Deleted bool `json:"deleted"` } type counterSnapshot struct { Pos map[NodeID]uint64 `json:"pos"` Neg map[NodeID]uint64 `json:"neg"` } type setSnapshot struct { Elems map[string]map[string]any `json:"elems"` } type registerSnapshot struct { Value any `json:"value"` Timestamp Timestamp `json:"timestamp"` } type mvRegisterSnapshot struct { Entries []MVEntry `json:"entries"` } // DocumentOption configures a Document at creation time. type DocumentOption func(*Document) // WithPrivacy sets the privacy backend for a Document. // Default: NewPlaintextPrivacy() (zero-overhead). func WithPrivacy(p Privacy) DocumentOption { return func(d *Document) { d.privacy = p } } // WithAutoAnchor enables periodic Merkle-root anchoring to a Lux chain. // The goroutine starts when the Document is created and stops on Close(). // If not supplied, no goroutine runs (zero overhead). func WithAutoAnchor(a Anchorer, interval time.Duration) DocumentOption { return func(d *Document) { d.anchorer = a d.anchorInterval = interval } } // AnchorStatus reports the current state of the auto-anchoring loop. type AnchorStatus struct { LastHeight uint64 LastRoot [32]byte LastAnchoredAt time.Time LastError error } // Document is a container for multiple named CRDT fields, // representing a collaborative document. type Document struct { mu sync.RWMutex id string nodeID NodeID version StateVersion seq uint64 privacy Privacy // anchor lifecycle anchorer Anchorer anchorInterval time.Duration anchorCancel context.CancelFunc anchorDone chan struct{} anchorStatus AnchorStatus anchorMu sync.RWMutex texts map[string]*RGA counters map[string]*PNCounter sets map[string]*ORSet regs map[string]*LWWRegister mvRegs map[string]*MVRegister } // NewDocument creates a new Document with the given ID and owning nodeID. // Pass WithPrivacy to select an encryption backend; default is plaintext. func NewDocument(id string, nodeID NodeID, opts ...DocumentOption) *Document { d := &Document{ id: id, nodeID: nodeID, version: make(StateVersion), privacy: DefaultPrivacy(), texts: make(map[string]*RGA), counters: make(map[string]*PNCounter), sets: make(map[string]*ORSet), regs: make(map[string]*LWWRegister), mvRegs: make(map[string]*MVRegister), } for _, o := range opts { o(d) } if d.anchorer != nil { d.startAnchorLoop() } return d } // startAnchorLoop spawns the background anchor goroutine. // On consecutive failures, the retry interval grows exponentially // (capped at 10x the base interval) and resets on success. func (d *Document) startAnchorLoop() { ctx, cancel := context.WithCancel(context.Background()) d.anchorCancel = cancel d.anchorDone = make(chan struct{}) interval := d.anchorInterval if interval <= 0 { interval = 5 * time.Minute } maxBackoff := 10 * interval go func() { defer close(d.anchorDone) curInterval := interval timer := time.NewTimer(curInterval) defer timer.Stop() for { select { case <-ctx.Done(): return case <-timer.C: root, err := DocumentMerkleRoot(d) if err != nil { d.anchorMu.Lock() d.anchorStatus.LastError = err d.anchorMu.Unlock() curInterval = anchorBackoff(curInterval, maxBackoff) timer.Reset(curInterval) continue } if err := d.anchorer.Submit(ctx, root); err != nil { d.anchorMu.Lock() d.anchorStatus.LastError = err d.anchorMu.Unlock() curInterval = anchorBackoff(curInterval, maxBackoff) timer.Reset(curInterval) continue } height, _ := d.anchorer.LatestHeight(ctx) d.anchorMu.Lock() d.anchorStatus.LastHeight = height d.anchorStatus.LastRoot = root d.anchorStatus.LastAnchoredAt = time.Now() d.anchorStatus.LastError = nil d.anchorMu.Unlock() // Reset to base interval on success. curInterval = interval timer.Reset(curInterval) } } }() } // anchorBackoff doubles the current interval, capped at max. func anchorBackoff(cur, max time.Duration) time.Duration { next := cur * 2 if next > max { next = max } return next } // Privacy returns the document's privacy backend. func (d *Document) Privacy() Privacy { return d.privacy } // Close stops the auto-anchor goroutine (if running) and waits for it // to exit. Safe to call multiple times or on a Document with no anchorer. func (d *Document) Close() { if d.anchorCancel != nil { d.anchorCancel() <-d.anchorDone } } // AnchorStatus returns the current state of the auto-anchor loop. // Returns a zero value if no anchorer is configured. func (d *Document) AnchorStatus() AnchorStatus { d.anchorMu.RLock() defer d.anchorMu.RUnlock() return d.anchorStatus } // ID returns the document identifier. func (d *Document) ID() string { return d.id } // Version returns a computed state version that merges the document's // own version with state vectors from all text fields (RGAs). func (d *Document) Version() StateVersion { d.mu.RLock() defer d.mu.RUnlock() cp := make(StateVersion, len(d.version)) for k, v := range d.version { cp[k] = v } // merge in RGA state vectors for _, rga := range d.texts { sv := rga.StateVector() for node, seq := range sv { if seq > cp[node] { cp[node] = seq } } } return cp } // bumpVersion increments the local sequence and updates the state version. func (d *Document) bumpVersion() { d.seq++ d.version[d.nodeID] = d.seq } // GetText returns the RGA text field with the given name, creating it if needed. func (d *Document) GetText(field string) *RGA { d.mu.Lock() defer d.mu.Unlock() if d.texts[field] == nil { d.texts[field] = NewRGA(d.nodeID) } return d.texts[field] } // GetCounter returns the PNCounter field with the given name, creating it if needed. func (d *Document) GetCounter(field string) *PNCounter { d.mu.Lock() defer d.mu.Unlock() if d.counters[field] == nil { d.counters[field] = NewPNCounter() } return d.counters[field] } // GetSet returns the ORSet field with the given name, creating it if needed. func (d *Document) GetSet(field string) *ORSet { d.mu.Lock() defer d.mu.Unlock() if d.sets[field] == nil { d.sets[field] = NewORSet(d.nodeID) } return d.sets[field] } // GetRegister returns the LWWRegister field with the given name, creating it if needed. func (d *Document) GetRegister(field string) *LWWRegister { d.mu.Lock() defer d.mu.Unlock() if d.regs[field] == nil { d.regs[field] = NewLWWRegister() } return d.regs[field] } // GetMVRegister returns the MVRegister field with the given name, creating it if needed. func (d *Document) GetMVRegister(field string) *MVRegister { d.mu.Lock() defer d.mu.Unlock() if d.mvRegs[field] == nil { d.mvRegs[field] = NewMVRegister() } return d.mvRegs[field] } // Merge merges a remote Document into this one. func (d *Document) Merge(other *Document) { other.mu.RLock() defer other.mu.RUnlock() d.mu.Lock() defer d.mu.Unlock() // merge text fields for name, otherRGA := range other.texts { if d.texts[name] == nil { d.texts[name] = NewRGA(d.nodeID) } // ignore merge error for convergence _ = d.texts[name].Merge(otherRGA) } // merge counters for name, otherCtr := range other.counters { if d.counters[name] == nil { d.counters[name] = NewPNCounter() } d.counters[name].Merge(otherCtr) } // merge sets for name, otherSet := range other.sets { if d.sets[name] == nil { d.sets[name] = NewORSet(d.nodeID) } d.sets[name].Merge(otherSet) } // merge registers for name, otherReg := range other.regs { if d.regs[name] == nil { d.regs[name] = NewLWWRegister() } d.regs[name].Merge(otherReg) } // merge multi-value registers for name, otherMV := range other.mvRegs { if d.mvRegs[name] == nil { d.mvRegs[name] = NewMVRegister() } d.mvRegs[name].Merge(otherMV) } // merge version vectors d.version = d.version.Merge(other.version) } // Encode serializes the document to bytes. For non-plaintext backends, // the snapshot is sealed through the privacy backend so no plaintext // leaks into the output. func (d *Document) Encode() ([]byte, error) { d.mu.RLock() defer d.mu.RUnlock() snap := d.snapshot() var buf bytes.Buffer enc := gob.NewEncoder(&buf) if err := enc.Encode(snap); err != nil { return nil, fmt.Errorf("document encode: %w", err) } plaintext := buf.Bytes() // If the privacy backend is non-plaintext, seal the snapshot. if d.privacy.Name() != "plaintext/v1" { op := Operation{ Field: "__snapshot__", FieldType: FieldTypeRegister, Data: plaintext, } sealed, err := d.privacy.EncryptOp(op) if err != nil { return nil, fmt.Errorf("document encode: seal snapshot: %w", err) } // Wrap in an OpEnvelope so Decode knows it is sealed. env := OpEnvelope{PrivacyTag: d.privacy.Name(), Ciphertext: sealed} envBytes, err := json.Marshal(env) if err != nil { return nil, fmt.Errorf("document encode: marshal envelope: %w", err) } return envBytes, nil } return plaintext, nil } // Decode deserializes a document from bytes. Pass the same DocumentOptions // (especially WithPrivacy) used when the document was created so sealed // snapshots can be unsealed. func Decode(data []byte, nodeID NodeID, opts ...DocumentOption) (*Document, error) { // Probe for a sealed envelope by attempting JSON unmarshal. var env OpEnvelope if err := json.Unmarshal(data, &env); err == nil && env.PrivacyTag != "" && env.PrivacyTag != "plaintext/v1" { // Sealed snapshot. We need a privacy backend to unseal. probe := &Document{privacy: DefaultPrivacy()} for _, o := range opts { o(probe) } if probe.privacy.Name() != env.PrivacyTag { return nil, fmt.Errorf("document decode: snapshot sealed with %q but privacy backend is %q", env.PrivacyTag, probe.privacy.Name()) } op, err := probe.privacy.DecryptOp(env.Ciphertext) if err != nil { return nil, fmt.Errorf("document decode: unseal snapshot: %w", err) } data = op.Data } var snap DocumentSnapshot dec := gob.NewDecoder(bytes.NewReader(data)) if err := dec.Decode(&snap); err != nil { return nil, fmt.Errorf("document decode: %w", err) } doc := NewDocument(snap.ID, nodeID, opts...) doc.version = snap.Version // restore text fields for name, ts := range snap.Texts { rga := NewRGA(nodeID) for _, n := range ts.Nodes { op := RGAOp{ Type: OpInsert, ID: n.ID, ParentID: n.ParentID, Char: n.Char, } _ = rga.ApplyOp(op) if n.Deleted { _ = rga.ApplyOp(RGAOp{Type: OpDelete, ID: n.ID}) } } doc.texts[name] = rga } // restore counters for name, cs := range snap.Counters { pn := NewPNCounter() for nid, val := range cs.Pos { pn.pos.mu.Lock() pn.pos.state[nid] = val pn.pos.mu.Unlock() } for nid, val := range cs.Neg { pn.neg.mu.Lock() pn.neg.state[nid] = val pn.neg.mu.Unlock() } doc.counters[name] = pn } // restore sets for name, ss := range snap.Sets { s := NewORSet(nodeID) s.mu.Lock() s.elems = ss.Elems s.mu.Unlock() doc.sets[name] = s } // restore registers for name, rs := range snap.Regs { reg := NewLWWRegister() reg.Set(rs.Value, rs.Timestamp) doc.regs[name] = reg } // restore mv registers for name, ms := range snap.MVRegs { mv := NewMVRegister() mv.mu.Lock() mv.entries = ms.Entries mv.mu.Unlock() doc.mvRegs[name] = mv } return doc, nil } // snapshot captures a serializable snapshot of the document (caller must hold mu). func (d *Document) snapshot() DocumentSnapshot { snap := DocumentSnapshot{ ID: d.id, Version: make(StateVersion, len(d.version)), } for k, v := range d.version { snap.Version[k] = v } // snapshot texts if len(d.texts) > 0 { snap.Texts = make(map[string]*textSnapshot, len(d.texts)) for name, rga := range d.texts { rga.mu.RLock() ts := &textSnapshot{} prev := rga.head for n := rga.head.next; n != nil; n = n.next { ts.Nodes = append(ts.Nodes, textNodeSnapshot{ ID: n.id, ParentID: prev.id, Char: n.char, Deleted: n.deleted, }) prev = n } rga.mu.RUnlock() snap.Texts[name] = ts } } // snapshot counters if len(d.counters) > 0 { snap.Counters = make(map[string]*counterSnapshot, len(d.counters)) for name, pn := range d.counters { snap.Counters[name] = &counterSnapshot{ Pos: pn.pos.State(), Neg: pn.neg.State(), } } } // snapshot sets if len(d.sets) > 0 { snap.Sets = make(map[string]*setSnapshot, len(d.sets)) for name, s := range d.sets { snap.Sets[name] = &setSnapshot{Elems: s.RawState()} } } // snapshot registers if len(d.regs) > 0 { snap.Regs = make(map[string]*registerSnapshot, len(d.regs)) for name, r := range d.regs { val, ts := r.Get() snap.Regs[name] = ®isterSnapshot{Value: val, Timestamp: ts} } } // snapshot mv registers if len(d.mvRegs) > 0 { snap.MVRegs = make(map[string]*mvRegisterSnapshot, len(d.mvRegs)) for name, mv := range d.mvRegs { snap.MVRegs[name] = &mvRegisterSnapshot{Entries: mv.Get()} } } return snap } // Diff returns operations representing changes since the given state version. // Currently operates at text-field granularity using RGA state vectors. func (d *Document) Diff(since StateVersion) []Operation { d.mu.RLock() defer d.mu.RUnlock() var ops []Operation for name, rga := range d.texts { rgaOps := rga.OpsSince(since) if len(rgaOps) == 0 { continue } data, err := encodeGob(rgaOps) if err != nil { continue } ops = append(ops, Operation{ Field: name, FieldType: FieldTypeText, Data: data, }) } // For non-text fields, if the version is not dominated we send full state. // This is simpler and correct; delta sync for counters/sets can be added later. if !d.version.Dominates(since) || len(since) == 0 { for name, pn := range d.counters { data, err := encodeGob(&counterSnapshot{ Pos: pn.pos.State(), Neg: pn.neg.State(), }) if err != nil { continue } ops = append(ops, Operation{ Field: name, FieldType: FieldTypeCounter, Data: data, }) } for name, s := range d.sets { data, err := encodeGob(&setSnapshot{Elems: s.RawState()}) if err != nil { continue } ops = append(ops, Operation{ Field: name, FieldType: FieldTypeSet, Data: data, }) } for name, r := range d.regs { val, ts := r.Get() data, err := encodeGob(®isterSnapshot{Value: val, Timestamp: ts}) if err != nil { continue } ops = append(ops, Operation{ Field: name, FieldType: FieldTypeRegister, Data: data, }) } for name, mv := range d.mvRegs { data, err := encodeGob(&mvRegisterSnapshot{Entries: mv.Get()}) if err != nil { continue } ops = append(ops, Operation{ Field: name, FieldType: FieldTypeMVRegister, Data: data, }) } } return ops } // OpEnvelope is the wire/persistence format for a single CRDT operation. // It carries the privacy backend tag and the ciphertext (output of // Privacy.EncryptOp). Replicas that receive an envelope whose tag does // not match their own backend MUST reject it. type OpEnvelope struct { PrivacyTag string `json:"privacyTag"` Ciphertext []byte `json:"ct"` } // ErrPrivacyMismatch is returned when an OpEnvelope's PrivacyTag does // not match the document's privacy backend. var ErrPrivacyMismatch = fmt.Errorf("crdt: privacy backend mismatch") // ErrDocIDReplay is returned when OpenOps unwraps an envelope whose // authenticated docID field does not match the current document. var ErrDocIDReplay = fmt.Errorf("crdt: envelope bound to a different document") // docIDSentinel marks a payload as carrying a bound docID header. // Every payload produced by SealOps starts with this sentinel. const docIDSentinel = "\x00crdt-docid-v1\x00" // wrapDocID prepends [sentinel][u16 BE len][docID][original] so that // the docID travels inside the authenticated payload. func wrapDocID(docID string, data []byte) []byte { buf := make([]byte, 0, len(docIDSentinel)+2+len(docID)+len(data)) buf = append(buf, docIDSentinel...) n := len(docID) buf = append(buf, byte(n>>8), byte(n)) buf = append(buf, docID...) buf = append(buf, data...) return buf } // unwrapDocID reverses wrapDocID, returning the original data and an // error if the envelope is bound to a different document. func unwrapDocID(expectedID string, blob []byte) ([]byte, error) { sent := []byte(docIDSentinel) if len(blob) < len(sent)+2 || !bytes.HasPrefix(blob, sent) { return nil, ErrDocIDReplay } rest := blob[len(sent):] n := int(rest[0])<<8 | int(rest[1]) rest = rest[2:] if len(rest) < n { return nil, ErrDocIDReplay } gotID := string(rest[:n]) if gotID != expectedID { return nil, fmt.Errorf("%w: envelope bound to %q, doc is %q", ErrDocIDReplay, gotID, expectedID) } return rest[n:], nil } // SealOps encrypts a slice of plaintext Operations into OpEnvelopes // using the document's privacy backend. Each op's Data is prefixed // with the document ID inside the authenticated payload; OpenOps // refuses envelopes whose bound docID differs. func (d *Document) SealOps(ops []Operation) ([]OpEnvelope, error) { tag := d.privacy.Name() envs := make([]OpEnvelope, len(ops)) for i, op := range ops { bound := Operation{ Field: op.Field, FieldType: op.FieldType, Data: wrapDocID(d.ID(), op.Data), } ct, err := d.privacy.EncryptOp(bound) if err != nil { return nil, fmt.Errorf("crdt: seal op %d: %w", i, err) } envs[i] = OpEnvelope{PrivacyTag: tag, Ciphertext: ct} } return envs, nil } // OpenOps decrypts a slice of OpEnvelopes into plaintext Operations. // Returns ErrPrivacyMismatch if any envelope's tag differs from the // document's backend, or ErrDocIDReplay if the authenticated docID // inside the envelope does not match this document. func (d *Document) OpenOps(envs []OpEnvelope) ([]Operation, error) { tag := d.privacy.Name() ops := make([]Operation, len(envs)) for i, env := range envs { if env.PrivacyTag != tag { return nil, fmt.Errorf("%w: got %q, want %q", ErrPrivacyMismatch, env.PrivacyTag, tag) } bound, err := d.privacy.DecryptOp(env.Ciphertext) if err != nil { return nil, fmt.Errorf("crdt: open op %d: %w", i, err) } data, err := unwrapDocID(d.ID(), bound.Data) if err != nil { return nil, fmt.Errorf("crdt: open op %d: %w", i, err) } ops[i] = Operation{ Field: bound.Field, FieldType: bound.FieldType, Data: data, } } return ops, nil } func encodeGob(v any) ([]byte, error) { var buf bytes.Buffer if err := gob.NewEncoder(&buf).Encode(v); err != nil { return nil, err } return buf.Bytes(), nil } y?x // Copyright (C) 2025-2026, Lux Industries Inc. All rights reserved. // See the file LICENSE for licensing terms. // Privacy backends for the CRDT op-log. // // A CRDT document carries a stream of `Operation`s. Before those ops // leave the process — to be persisted, gossiped, or replicated — they // pass through a Privacy backend. Three shapes are supported: // // plaintext No encryption. Fast, debuggable, appropriate for // self-hosted single-user Base. // // age End-to-end encryption. Each op is sealed under the // recipients' age public keys (ML-KEM-768 + X25519 // hybrid). The server/relay sees ciphertext only and // cannot compute anything on it. Appropriate for // multi-device personal sync. // Build with: go build -tags cgo (no extra tag needed; // luxfi/age is pure-Go). // // fhe Fully homomorphic encryption via luxfi/fhe. The server // can merge ciphertexts without decrypting. Orders of // magnitude more expensive than plaintext or age, but the // only option when an untrusted third party must compute // on the data (e.g. cross-tenant analytics). // Build with: go build -tags fhe // // The CRDT machinery is identical across backends; only the encode / // decode / homomorphic-merge hooks differ. This lets callers pick the // privacy model without changing application code. // // Reference: papers/fhe/fhecrdt/main.tex; docs/CRDT-PRIVACY-MODELS.md. package crdt import ( "encoding/json" ) // Privacy is the pluggable encryption boundary for a CRDT op-log. // // Every op produced by the local replica is sealed with EncryptOp // before persistence or gossip. Every op consumed from the log is // opened with DecryptOp before application. One interface, one path. type Privacy interface { // Name returns a stable identifier carried in every OpEnvelope so a // replica can refuse ops from an incompatible backend. Name() string // EncryptOp seals an operation for storage and transport. EncryptOp(op Operation) ([]byte, error) // DecryptOp unseals an op produced by EncryptOp. DecryptOp(blob []byte) (Operation, error) } // PlaintextPrivacy is the zero-overhead backend: it just encodes the // op as JSON and reports no encryption. It exists so the CRDT layer // has one code path; there are no `if privacy == nil` branches. type PlaintextPrivacy struct{} // NewPlaintextPrivacy returns the no-op encryption backend. func NewPlaintextPrivacy() *PlaintextPrivacy { return &PlaintextPrivacy{} } func (PlaintextPrivacy) Name() string { return "plaintext/v1" } func (PlaintextPrivacy) EncryptOp(op Operation) ([]byte, error) { return json.Marshal(op) } func (PlaintextPrivacy) DecryptOp(b []byte) (Operation, error) { var op Operation err := json.Unmarshal(b, &op) return op, err } // DefaultPrivacy returns a Privacy implementation suitable for the // current build. The default is plaintext so tests and dev loops // require no key material. Production callers pass an explicit // NewAgePrivacy(...) or NewFHEPrivacy(...) to NewDocument(). func DefaultPrivacy() Privacy { return NewPlaintextPrivacy() } // Compile-time check. var _ Privacy = (*PlaintextPrivacy)(nil) M!x // Copyright (C) 2025-2026, Lux Industries Inc. All rights reserved. // See the file LICENSE for licensing terms. // age-encrypted CRDT op-log. // // Each op is sealed with luxfi/age, which uses the X25519 + ML-KEM-768 // hybrid recipient so both classical and PQ adversaries are covered. // The backend supports multiple recipients — every device that should // be able to decrypt the log is added as a recipient. New devices // join by having an existing keyholder re-encrypt a stream of ops to // a set that now includes them (out-of-scope here; see the rotate- // recipient helper in luxfi/age for the pattern). // // A relay that receives age blobs appends them to the log and // broadcasts them; replicas that hold the keys decrypt locally. package crdt import ( "bytes" "encoding/json" "fmt" "io" "github.com/luxfi/age" ) // AgePrivacy encrypts every op under a set of age recipients and // decrypts with a single identity held by the local replica. type AgePrivacy struct { recipients []age.Recipient identity age.Identity } // NewAgePrivacy constructs the age backend. `identity` is the local // replica's secret key; `recipients` is the set of public keys of // every device authorised to decrypt the log. The local identity's // corresponding recipient should appear in `recipients` so we can // round-trip our own ops. func NewAgePrivacy(identity age.Identity, recipients []age.Recipient) (*AgePrivacy, error) { if identity == nil { return nil, fmt.Errorf("crdt/privacy_age: identity must not be nil") } if len(recipients) == 0 { return nil, fmt.Errorf("crdt/privacy_age: at least one recipient required") } return &AgePrivacy{recipients: recipients, identity: identity}, nil } // Name returns the stable wire tag for this backend. func (*AgePrivacy) Name() string { return "age/v1" } // EncryptOp serialises the op as JSON then seals it for every recipient. func (p *AgePrivacy) EncryptOp(op Operation) ([]byte, error) { payload, err := json.Marshal(op) if err != nil { return nil, fmt.Errorf("crdt/privacy_age: marshal op: %w", err) } var buf bytes.Buffer w, err := age.Encrypt(&buf, p.recipients...) if err != nil { return nil, fmt.Errorf("crdt/privacy_age: new encryption stream: %w", err) } if _, err := w.Write(payload); err != nil { return nil, fmt.Errorf("crdt/privacy_age: write payload: %w", err) } if err := w.Close(); err != nil { return nil, fmt.Errorf("crdt/privacy_age: close stream: %w", err) } return buf.Bytes(), nil } // DecryptOp unseals a blob produced by EncryptOp. func (p *AgePrivacy) DecryptOp(blob []byte) (Operation, error) { var op Operation r, err := age.Decrypt(bytes.NewReader(blob), p.identity) if err != nil { return op, fmt.Errorf("crdt/privacy_age: open stream: %w", err) } payload, err := io.ReadAll(r) if err != nil { return op, fmt.Errorf("crdt/privacy_age: read payload: %w", err) } if err := json.Unmarshal(payload, &op); err != nil { return op, fmt.Errorf("crdt/privacy_age: unmarshal op: %w", err) } return op, nil } // Compile-time check. var _ Privacy = (*AgePrivacy)(nil) þxWnG?ŭMkB[~B*"k{23g}>IϝG EQ;s׹^OthpL9 7WfÎ,;Θ/`:~vxR3ٖ.]4_O^Le\_S%[W0S*1lSms1/5.@yLWʶT*C}z$sa={ a$q&4 yw2lLV:߾MNy&Hu%WԺBWX_cS)D}zjq++|&o2MEdsijrT)ٿ > O: XMR8yrt|ynsIWp8[*A qu4Csm(?2Z*qAȬq.\ /*D.TWQ9*/KKV UAhɩK|…7T4Ws=$jIsUl.M[/u&.Y܃5(-i h<33K?Yififp0^Y}Vp'1]ּ}}l^`CS.Z\ė x aK^mAQc+-<3 GW)$0&jF.jFB̶?CpX.TtAp ( GO7IyYc``ւ.(JhŒ[GakoIMdd)̛*z'1lnL5v,sc^Lh(֮KAݼčk`ӠǹĜxxOPuuo]}oKա]۱ýX(' A.N=^!EgM-M>+06[*};z ˵ѕ̘bM@NlBkњQlIU>Fc2aҋʪ:^`q1Z}Yaf*2.yU_dvčIY-ח:oVMSVݜ F f{^* R9ἑ^U ]CR M0}]@_vjtҋ4:?gkRho.-9:V`uBYTwb@ }+nTQ-9PKڇnfApd KVp@鎉Z zrϻ_.;HqMPS.`ղy1NJԪ㦑(oaii^[1֣f&]kSBҎQl7Nĸ<@dwB֬I/ߙ17m5vS$ضf6. V~"_g@1A ߿u.v=TmGkn|٦@6c3GFFAOCL/n}[a˓Aɒ3J|JȊ|? NBy&)M}qauGI%}Ҝrñ(b%'3;?ѵ H8y/_ZB΅s^Г DT5QM|.;aDA=t mP_GxYn;@ƱYͅ$;[w;@ %q=NɑdkW}OOH$h4Csxw~yp*h95lG/]Y^4^\Ka5 Y?I]lF蕈 `Stxr6:aSY"#X.„fƣ+>,qlE4X7H#cF=ZiCߦ>&3& 3ϗ0Rdy=4M y~=DaƆ@0[n3c0a'J$*xHq9seU\4gҰHS9[j5btL6V?JYeeJM$L?x6i6daP$"E*4ߎ^ ܞLcALۡBdM0"^0Q&踟M&ދNC xqp{Xv~E( 3=*x+}uGߜ\oNz3wJ80J-I Դ ޣ[i<=LDD|ưrZf*{>?) Am0 `H!JlX? ~CeTR77 o@^miaGALL$TH +x5< _= LOnM9[0hIif%f.5(}ttqHo2_of={NMnFXǭ鰳Ol ӄ o Z*䓈҆?;ײ+o Ide- 6R֦g?n8nčbdd[.4b13?z>\ xzTIMߩ|CRK@ٞ [ J1!6H<DCe#P浚ALuD(큍}_ϧ(-S)bB),Flړ};I=|oo,IOd/qɼPdxB42 3) t[ j \:-4ٱ4Qk@\/#4T "m-FFg"2d}$)קIKC]%"h0vϺ kPʈ\h4l3B0.l[Z?"T^ eJB6i믉QlieL302e|Pl7!52K=O%:[-iKav9WТK/\B7D|dlDh D&E MbpAIV ]AC.\4'G]QfbClLȅ'$n2&BYr6t,S_RԿwrmnS~iRz ܕx\#v2l, v2Qp|prRYkF5nCC܁{7,o9<΃VqAH4A2tܘO"d Uw1Ga3CLj\<7P4k)M,%V+bZ`%ۻ؈\U`Gt5mÔˎB ~Ԕ3Q/iri"WL]丬PJ Ie|$Ur1ȍFX]֖=D~M z\$kb"v0![;'صD{Bmk;t6[X;l oZ=.)ǯTibY֏ShOK`{KN Ÿqi]lvnQBWnVWrTnzf雷UufDxh6|pzLtǮ+nBv*nTV@'' (+4@ 8O}v+-ggCv};b?R%)qNҔ͆ia^$+!X1l*S~y@2f5ǗW<+ Dtj[2>s[\:xoKOdu5BFB}J1 #.35^U*Z؉ cx.{N#vFx'VT u6 hN'#'DrIT h?;쿇iN4zZ1$ )N\pnWb/5vq̮o qX=J`Ҕc x `V/ʔ95`J0E׸iB4ٜ)/ӪS4ud9PPؖ9 qB#4[lRjVeBV=0zCq:˃`#X'%b\yd"|)3=ldpI眊8 b8@e8 \U!UjWj,~5;d b:T#ݫ4H'0XJqc,AY1bO|S9fXwXRz%mhB-M 27)&L*1ՒXj Ca,5Sw|Zb_@+ul dEK$FN CN#u4bon""{4;uJN$ÈN[N'Vj\j%9= 6xHETu=ړ^4-3W^+iԮuO6]0tנ}h7u]^l_yZ $1O 7O"2\lz3`TY N`jq*Nndla6bԯ6B4zH[O#Yi;ܑ'WuHp]*z>E+W1EI`h>- Z.p|#&/`QeqYhgJgWmnuAyˤL&8GkAk\$w+$Ū͚+jQn辨>utK@|Q(HUnV$[K[IK1x0[y.ڷ˕4 t[ ԙΌ9u(i]D" U#@ѝ<]L5Ֆ;F\h_ȌlTTP˴.InOk:JWvp+7s*0PyOEWMI%N1{|Ԭ [+uµ^ }S+yh֙m:3`_3fK"r~c7sRtg퓃ku$]B֣~WrDOR4a點ACh(0ʿfqN>|F;TƎCl!+/.*lYOCWcꆃ`wv=jyV5Tu,CZ/+I #Ǡz(yH*D^pv,xnWBtHe)i|PpH0_9C62qEL[w\k]XeB_jŦ<5c%qzG}wNIoUMY<[ێ{%m Uw.n_#OxZn>d$dWk"TE%^F2"gwYf\yC $=/\I6@ $^g|;g|3t;,WE7u+Uǒv =eQ6ky;x 6һ&sv υh۵BT;މg[wp˵(derh`\witv8. X,Jh^F(ꝙ9(X9a'O8 )[@"iVw]j b@D0oXJW7/4|$/rԚMwa Xs;!6u#_w;rT ylE%1R?^Adsx毡5fndm˦g8bUx^ת|,i&\h o[ѰNbh;t}yql-̆lf3LS}ޱώn0Ϙ9<;:C P`ϗpdOgBe'kɷ&oKa:t a=>Mr" {a@ h܊,!.4=%hhY0!B|k(ySMQ`i$(ٔ#Jj=ș P>>yi4;ڴ׼}g8; <^xJX?X@} -SB`ى7 Uq$)&F (a_EJ,;w"(]@G?2x-EWb]B%Tn E KTqF9ȫDXR> 3]guYwI + j{Twe,4j8l+%맣 Dbq/XY򏢋bPÆ*~vzfd' H^6"KVr5 cQ⒍xȁ}q4P.,N,\WޤG\!^0xǖ'/ ה .1 7`k2IcS?Rռ2 vX-ҀEI\nt+h{'oviU HĊ빁[=4ɾ˘D ȱ۰,Ŋg 6"èsZV({(:u Egdwz8;2&} 1ב{Sw9͟b* x!l)_;*!_`bNZvP FIM) '^&O=8~ĀɀCiPux_u(꛻F7õ-UI=a/S-iWEyPb%d_RAN*A"yX/*ԯ?`4Zd<n4yC|vu|ȍ%G4?Xrс ZɀGs`csٽϺO * 6!pHV[AubVgDYS{D[h(E vdgyX8Օ␩w$JT&<+}1Ȅ'D=[яʺ\0ϙp 皃ю=%=;rx6hȉݧeEn6[oh#[C T䠝!~)8( oL)tÆau:¬ck8{ NBx<hξ7<'e >^*] (\=weK~*0P1M/`KPVpd놷~'G}vO`>Tļ=$흰O.kwv#}Na4b=i/z<,6fBEbh]n)-2J`"bsym6Ev4‡ဘD^iȣ:-ts|JS}XP&W=cAv<۫sȀQiuz4ǚ,3%ovWb7E;|c_3%.n.jG[߉0EZm2v׸AԜX̥oYҬ}qpxp~_ OU]8 '>xG-R)sLz_T3w_͇'x#3q7jn5Hq ^FJ ba36M/ ]+"m0v[$`>IDUڬ~`klyFZwBAqKWaޥп]+񙢐fo9Xxppackage crdt import ( "fmt" "strings" "sync" ) // OpType identifies an RGA operation kind. type OpType uint8 const ( OpInsert OpType = iota OpDelete ) // RGAOp represents a single RGA operation for replication. type RGAOp struct { Type OpType `json:"type"` ID RGAID `json:"id"` ParentID RGAID `json:"parentId"` // for insert: the ID of the node this is inserted after Char rune `json:"char"` Timestamp Timestamp `json:"timestamp"` } // RGAID uniquely identifies a character node in the RGA. type RGAID struct { Seq uint64 `json:"seq"` NodeID NodeID `json:"nodeId"` } // IsZero reports whether the ID is the zero/sentinel value. func (id RGAID) IsZero() bool { return id.Seq == 0 && id.NodeID == "" } // String returns a human-readable ID. func (id RGAID) String() string { return fmt.Sprintf("%s:%d", id.NodeID, id.Seq) } // After reports whether id should be ordered after other (for tie-breaking). func (id RGAID) After(other RGAID) bool { if id.Seq != other.Seq { return id.Seq > other.Seq } return id.NodeID > other.NodeID } // rgaNode is an internal linked-list node in the RGA. type rgaNode struct { id RGAID char rune deleted bool next *rgaNode } // RGA (Replicated Growable Array) is a CRDT for collaborative text editing. // It maintains a linked list of character nodes with unique IDs that allow // concurrent inserts to be ordered deterministically. type RGA struct { mu sync.RWMutex head *rgaNode // sentinel head node index map[string]*rgaNode // id.String() -> node for O(1) lookup seq uint64 nodeID NodeID pending []RGAOp // pending ops for sync } // NewRGA creates a new RGA instance for the given node. func NewRGA(nodeID NodeID) *RGA { sentinel := &rgaNode{id: RGAID{}} // zero ID sentinel return &RGA{ head: sentinel, index: map[string]*rgaNode{sentinel.id.String(): sentinel}, nodeID: nodeID, } } // nextID generates the next unique ID for this node. func (r *RGA) nextID() RGAID { r.seq++ return RGAID{Seq: r.seq, NodeID: r.nodeID} } // Insert inserts a character after the given position (0-based index). // Position -1 means insert at the beginning. // Returns the generated operation for replication. func (r *RGA) Insert(position int, ch rune) RGAOp { r.mu.Lock() defer r.mu.Unlock() parentNode := r.nodeAtVisible(position) id := r.nextID() newNode := &rgaNode{id: id, char: ch} r.insertAfter(parentNode, newNode) op := RGAOp{ Type: OpInsert, ID: id, ParentID: parentNode.id, Char: ch, Timestamp: Timestamp{Time: int64(id.Seq), NodeID: r.nodeID}, } r.pending = append(r.pending, op) return op } // Delete deletes the character at the given visible position (0-based). // Returns the generated operation for replication. func (r *RGA) Delete(position int) (RGAOp, error) { r.mu.Lock() defer r.mu.Unlock() node := r.visibleNodeAt(position) if node == nil { return RGAOp{}, fmt.Errorf("position %d out of range", position) } node.deleted = true op := RGAOp{ Type: OpDelete, ID: node.id, Timestamp: Timestamp{Time: int64(r.seq), NodeID: r.nodeID}, } r.pending = append(r.pending, op) return op, nil } // ApplyOp applies a remote operation. Returns an error if the operation // references a parent that doesn't exist (operation should be retried later). func (r *RGA) ApplyOp(op RGAOp) error { r.mu.Lock() defer r.mu.Unlock() switch op.Type { case OpInsert: // check if already applied if _, exists := r.index[op.ID.String()]; exists { return nil // idempotent } parentKey := op.ParentID.String() parent, ok := r.index[parentKey] if !ok { return fmt.Errorf("parent %s not found", parentKey) } newNode := &rgaNode{id: op.ID, char: op.Char} r.insertAfter(parent, newNode) // update local seq if remote is ahead if op.ID.Seq > r.seq { r.seq = op.ID.Seq } case OpDelete: key := op.ID.String() node, ok := r.index[key] if !ok { return fmt.Errorf("node %s not found for delete", key) } node.deleted = true } return nil } // insertAfter inserts newNode after parent, respecting ordering among siblings. // Among children of the same parent, nodes with higher IDs come first (left). func (r *RGA) insertAfter(parent, newNode *rgaNode) { // find the correct position: skip nodes that have higher IDs // (they were inserted after the same parent but should appear first). cursor := parent for cursor.next != nil && cursor.next.id.After(newNode.id) { cursor = cursor.next } newNode.next = cursor.next cursor.next = newNode r.index[newNode.id.String()] = newNode } // nodeAtVisible returns the node at the given visible position. // Position -1 returns the sentinel head. func (r *RGA) nodeAtVisible(pos int) *rgaNode { if pos < 0 { return r.head } node := r.visibleNodeAt(pos) if node == nil { // past end: find last node last := r.head for last.next != nil { last = last.next } return last } return node } // visibleNodeAt returns the node at the given 0-based visible position. func (r *RGA) visibleNodeAt(pos int) *rgaNode { idx := -1 for n := r.head.next; n != nil; n = n.next { if !n.deleted { idx++ if idx == pos { return n } } } return nil } // ToString returns the current visible text content. func (r *RGA) ToString() string { r.mu.RLock() defer r.mu.RUnlock() var sb strings.Builder for n := r.head.next; n != nil; n = n.next { if !n.deleted { sb.WriteRune(n.char) } } return sb.String() } // Length returns the number of visible characters. func (r *RGA) Length() int { r.mu.RLock() defer r.mu.RUnlock() count := 0 for n := r.head.next; n != nil; n = n.next { if !n.deleted { count++ } } return count } // Operations returns pending operations and clears the pending buffer. func (r *RGA) Operations() []RGAOp { r.mu.Lock() defer r.mu.Unlock() ops := r.pending r.pending = nil return ops } // Merge applies all operations from a remote RGA. // This is a convenience method that replays operations. func (r *RGA) Merge(other *RGA) error { other.mu.RLock() // Collect all nodes from other in order var ops []RGAOp for n := other.head.next; n != nil; n = n.next { op := RGAOp{ Type: OpInsert, ID: n.id, Char: n.char, } // find parent: the previous node in the linked list prev := other.head for p := other.head; p.next != nil && p.next != n; p = p.next { prev = p.next } op.ParentID = prev.id ops = append(ops, op) if n.deleted { ops = append(ops, RGAOp{ Type: OpDelete, ID: n.id, }) } } other.mu.RUnlock() for _, op := range ops { if err := r.ApplyOp(op); err != nil { return err } } return nil } // InsertText inserts a string starting at the given position. // Returns the operations generated. func (r *RGA) InsertText(position int, text string) []RGAOp { var ops []RGAOp for i, ch := range text { op := r.Insert(position+i, ch) ops = append(ops, op) } return ops } // StateVector returns a map of nodeID -> max sequence seen, used for sync. func (r *RGA) StateVector() map[NodeID]uint64 { r.mu.RLock() defer r.mu.RUnlock() sv := make(map[NodeID]uint64) for n := r.head.next; n != nil; n = n.next { if n.id.Seq > sv[n.id.NodeID] { sv[n.id.NodeID] = n.id.Seq } } return sv } // OpsSince returns all operations for nodes whose sequence is greater than // the values in the provided state vector. func (r *RGA) OpsSince(sv map[NodeID]uint64) []RGAOp { r.mu.RLock() defer r.mu.RUnlock() var ops []RGAOp for n := r.head.next; n != nil; n = n.next { maxSeen := sv[n.id.NodeID] if n.id.Seq > maxSeen { // find the parent (previous node) prev := r.head for p := r.head; p.next != nil && p.next != n; p = p.next { prev = p.next } ops = append(ops, RGAOp{ Type: OpInsert, ID: n.id, ParentID: prev.id, Char: n.char, }) if n.deleted { ops = append(ops, RGAOp{ Type: OpDelete, ID: n.id, }) } } } return ops } x$^package crdt import ( "fmt" "sync" "time" ) // NodeID identifies a unique node/client in the distributed system. type NodeID = string // Timestamp is a Lamport-style logical clock for ordering operations. type Timestamp struct { Time int64 `json:"time"` NodeID NodeID `json:"nodeId"` } // After reports whether t is causally after other. // Ties are broken by NodeID lexicographic order. func (t Timestamp) After(other Timestamp) bool { if t.Time != other.Time { return t.Time > other.Time } return t.NodeID > other.NodeID } // ------------------------------------------------------------------- // GCounter - Grow-only counter // ------------------------------------------------------------------- // GCounter is a grow-only counter CRDT. // Each node maintains its own count; the total is the sum of all counts. type GCounter struct { mu sync.RWMutex state map[NodeID]uint64 } // NewGCounter returns a new empty GCounter. func NewGCounter() *GCounter { return &GCounter{state: make(map[NodeID]uint64)} } // Increment adds delta to the count for nodeID. func (g *GCounter) Increment(nodeID NodeID, delta uint64) { g.mu.Lock() defer g.mu.Unlock() g.state[nodeID] += delta } // Value returns the total count across all nodes. func (g *GCounter) Value() uint64 { g.mu.RLock() defer g.mu.RUnlock() var total uint64 for _, v := range g.state { total += v } return total } // Merge merges a remote GCounter into this one by taking the max for each node. func (g *GCounter) Merge(other *GCounter) { other.mu.RLock() otherState := make(map[NodeID]uint64, len(other.state)) for k, v := range other.state { otherState[k] = v } other.mu.RUnlock() g.mu.Lock() defer g.mu.Unlock() for nodeID, count := range otherState { if count > g.state[nodeID] { g.state[nodeID] = count } } } // State returns a copy of the internal state map. func (g *GCounter) State() map[NodeID]uint64 { g.mu.RLock() defer g.mu.RUnlock() cp := make(map[NodeID]uint64, len(g.state)) for k, v := range g.state { cp[k] = v } return cp } // ------------------------------------------------------------------- // PNCounter - Positive-Negative counter // ------------------------------------------------------------------- // PNCounter is a counter that supports both increment and decrement // by composing two GCounters. type PNCounter struct { pos *GCounter neg *GCounter } // NewPNCounter returns a new PNCounter. func NewPNCounter() *PNCounter { return &PNCounter{ pos: NewGCounter(), neg: NewGCounter(), } } // Increment adds delta to the positive counter for nodeID. func (pn *PNCounter) Increment(nodeID NodeID, delta uint64) { pn.pos.Increment(nodeID, delta) } // Decrement adds delta to the negative counter for nodeID. func (pn *PNCounter) Decrement(nodeID NodeID, delta uint64) { pn.neg.Increment(nodeID, delta) } // Value returns positive - negative as a signed integer. func (pn *PNCounter) Value() int64 { return int64(pn.pos.Value()) - int64(pn.neg.Value()) } // Merge merges a remote PNCounter into this one. func (pn *PNCounter) Merge(other *PNCounter) { pn.pos.Merge(other.pos) pn.neg.Merge(other.neg) } // ------------------------------------------------------------------- // LWWRegister - Last-Writer-Wins Register // ------------------------------------------------------------------- // LWWRegister is a register that resolves concurrent writes by timestamp. // The most recent write (highest timestamp) wins. type LWWRegister struct { mu sync.RWMutex value any timestamp Timestamp } // NewLWWRegister returns a new empty LWWRegister. func NewLWWRegister() *LWWRegister { return &LWWRegister{} } // Set updates the register value if the given timestamp is newer. func (r *LWWRegister) Set(value any, ts Timestamp) { r.mu.Lock() defer r.mu.Unlock() if ts.After(r.timestamp) || r.timestamp == (Timestamp{}) { r.value = value r.timestamp = ts } } // Get returns the current value and its timestamp. func (r *LWWRegister) Get() (any, Timestamp) { r.mu.RLock() defer r.mu.RUnlock() return r.value, r.timestamp } // Merge merges a remote register into this one. func (r *LWWRegister) Merge(other *LWWRegister) { otherVal, otherTS := other.Get() r.Set(otherVal, otherTS) } // ------------------------------------------------------------------- // ORSet - Observed-Remove Set // ------------------------------------------------------------------- // ORSetElement tracks the unique tags for an element. // An element is in the set if it has at least one tag not in the tombstone set. type ORSetElement struct { Value any } // ORSet is an observed-remove set CRDT. // Elements can be added and removed without conflicts. // Concurrent add + remove: the add wins (add-wins semantics). type ORSet struct { mu sync.RWMutex // elements maps a string key to a map of unique tags. // Each add generates a unique tag; remove deletes all known tags. elems map[string]map[string]any // key -> {tag -> value} tagSeq uint64 nodeID NodeID } // NewORSet returns a new ORSet for the given node. func NewORSet(nodeID NodeID) *ORSet { return &ORSet{ elems: make(map[string]map[string]any), nodeID: nodeID, } } // Add adds an element to the set. Returns the generated unique tag. func (s *ORSet) Add(key string, value any) string { s.mu.Lock() defer s.mu.Unlock() s.tagSeq++ tag := fmt.Sprintf("%s:%d:%d", s.nodeID, time.Now().UnixNano(), s.tagSeq) if s.elems[key] == nil { s.elems[key] = make(map[string]any) } s.elems[key][tag] = value return tag } // Remove removes an element by key, removing all observed tags. func (s *ORSet) Remove(key string) { s.mu.Lock() defer s.mu.Unlock() delete(s.elems, key) } // Contains checks if key is present in the set. func (s *ORSet) Contains(key string) bool { s.mu.RLock() defer s.mu.RUnlock() tags := s.elems[key] return len(tags) > 0 } // Elements returns all keys currently in the set with one representative value each. func (s *ORSet) Elements() map[string]any { s.mu.RLock() defer s.mu.RUnlock() result := make(map[string]any, len(s.elems)) for key, tags := range s.elems { if len(tags) == 0 { continue } for _, v := range tags { result[key] = v break } } return result } // Merge merges a remote ORSet into this one (union of tags). func (s *ORSet) Merge(other *ORSet) { other.mu.RLock() otherElems := make(map[string]map[string]any, len(other.elems)) for k, tags := range other.elems { cp := make(map[string]any, len(tags)) for t, v := range tags { cp[t] = v } otherElems[k] = cp } other.mu.RUnlock() s.mu.Lock() defer s.mu.Unlock() for key, remoteTags := range otherElems { if s.elems[key] == nil { s.elems[key] = make(map[string]any) } for tag, val := range remoteTags { s.elems[key][tag] = val } } } // RawState returns a deep copy of internal tag state for serialization. func (s *ORSet) RawState() map[string]map[string]any { s.mu.RLock() defer s.mu.RUnlock() cp := make(map[string]map[string]any, len(s.elems)) for k, tags := range s.elems { tagCp := make(map[string]any, len(tags)) for t, v := range tags { tagCp[t] = v } cp[k] = tagCp } return cp } // ------------------------------------------------------------------- // MVRegister - Multi-Value Register // ------------------------------------------------------------------- // MVEntry is a single versioned value in an MVRegister. type MVEntry struct { Value any `json:"value"` Timestamp Timestamp `json:"timestamp"` } // MVRegister preserves all concurrent writes rather than picking one winner. // It maintains a set of (value, timestamp) pairs. When a new value is set, // it replaces all entries that are causally dominated. type MVRegister struct { mu sync.RWMutex entries []MVEntry } // NewMVRegister returns a new empty MVRegister. func NewMVRegister() *MVRegister { return &MVRegister{} } // Set adds a new value, removing all entries whose timestamp is dominated by ts. func (r *MVRegister) Set(value any, ts Timestamp) { r.mu.Lock() defer r.mu.Unlock() // remove dominated entries kept := r.entries[:0] for _, e := range r.entries { if !ts.After(e.Timestamp) { kept = append(kept, e) } } r.entries = append(kept, MVEntry{Value: value, Timestamp: ts}) } // Get returns all concurrent values. func (r *MVRegister) Get() []MVEntry { r.mu.RLock() defer r.mu.RUnlock() cp := make([]MVEntry, len(r.entries)) copy(cp, r.entries) return cp } // Merge merges a remote MVRegister. The result is the union of non-dominated entries. func (r *MVRegister) Merge(other *MVRegister) { otherEntries := other.Get() r.mu.Lock() defer r.mu.Unlock() // collect all entries all := make([]MVEntry, 0, len(r.entries)+len(otherEntries)) all = append(all, r.entries...) all = append(all, otherEntries...) // remove dominated entries: keep only those not dominated by any other kept := make([]MVEntry, 0, len(all)) for i, a := range all { dominated := false for j, b := range all { if i != j && b.Timestamp.After(a.Timestamp) { dominated = true break } } if !dominated { // deduplicate by exact timestamp match dup := false for _, k := range kept { if k.Timestamp == a.Timestamp { dup = true break } } if !dup { kept = append(kept, a) } } } r.entries = kept } t E*x340031Qpr  stwq Ma=YN1--6pUC׈W`Ox'W?g_ oFk3 6Lcx\ӎ6?אp>^I^1 } UU| y4(c[$*-soP A>!..~ ~[e'{}jtZA5$ZwJkۿ Z43'%3/]#9٫vAk(z ʸ:(D(,1R85(R(,3헛R7篹|k--I,XVu^׎f%Tmjr~qeqIjnbNfz^nj^ H괣= /?D*zU ,D2RSus3ӋK2!*''i8-P_Z 4\7잃b}[ֺ3p`$POK3~LL.M.*MI+鞜X? B47Ȣk*N-)p1FU#R4Mx?{rW>Ax:_# CRDT Privacy Model Analysis: Plaintext vs E2E (age) vs fheCRDT **Date:** 2026-04-12 **Author:** Research brief for Base team **Hardware:** Apple M1 Max, macOS arm64, Go 1.26.1 **Scope:** Hanzo Base admin/sync CRDT layer (`hanzo/base/crdt/`) --- ## Decision Flowchart ``` Is Base self-hosted (single user, single process)? YES -> Plaintext CRDT + TLS (luxfi/zap or standard TLS) NO -> Is the server trusted to read all data? YES -> Plaintext CRDT + TLS NO -> Does the server need to merge/aggregate data it cannot decrypt? YES -> fheCRDT (not viable today; see cost analysis) NO -> E2E (luxfi/age) encrypted ops over dumb relay ``` Result: for every realistic Base deployment today, either Plaintext or E2E wins. fheCRDT is only theoretically needed for a deployment shape Base does not serve. --- ## 1. Threat Model ### Deployment Shapes Base Actually Faces | Shape | Description | Frequency | |-------|-------------|-----------| | **Self-hosted** | Single user runs Base on own machine. 2-4 device sync via LAN/WAN. | Primary use case | | **Single-tenant SaaS** | One org per Base process. Server operated by org or by Hanzo on their behalf. | Secondary | | **Multi-tenant SaaS** | Multiple orgs share a Base process. Server operated by Hanzo. | Not supported today. Base is single-tenant per process by design. | ### Threat Model Matrix | Deployment Shape | Plaintext + TLS | E2E (age) | fheCRDT | |------------------|-----------------|-----------|---------| | **Self-hosted** | **Acceptable.** Server is the user's own machine. TLS protects transit. No third party sees data. | Unnecessary overhead. User already controls the server. | Absurd. 10,000x overhead for zero benefit. | | **Single-tenant SaaS** | **Acceptable if org trusts operator.** Hanzo (or operator) can read admin records. For most admin metadata (collections, settings, logs) this is fine. | **Required if org does NOT trust operator** with data at rest. Prevents operator from reading synced content. Server acts as dumb relay. | Unnecessary. No cross-tenant aggregation needed. Server does not compute on data. | | **Multi-tenant SaaS** | **Unacceptable.** Server sees all tenants' data. One breach exposes everyone. | **Acceptable.** Each tenant encrypts to their own keys. Server relays opaque blobs. Cannot merge across tenants, but that is not a requirement for admin data. | **Only model that allows server-side merge across tenants.** But Base does not need server-side cross-tenant merge for admin records. | ### Conclusion on Threat Models Base is single-tenant per process. The multi-tenant SaaS shape does not exist in production. Even if it did, admin records (collections, users, settings, logs) do not need cross-tenant homomorphic aggregation. The server never needs to compute on data it cannot decrypt. fheCRDT solves a problem Base does not have. --- ## 2. Performance Cost All measurements taken on Apple M1 Max, arm64. Median of 3 runs where noted. ### 2.1 Plaintext CRDT Baseline (measured) | Operation | Latency (ns/op) | Memory (B/op) | Allocs/op | |-----------|-----------------|---------------|-----------| | GCounter.Increment | 27 | 0 | 0 | | GCounter.Merge (4 nodes) | 217 | 0 | 0 | | GCounter.Value | 81 | 0 | 0 | | PNCounter.Increment | 25 | 0 | 0 | | PNCounter.Merge (4 nodes) | 418 | 0 | 0 | | LWWRegister.Set | 22 | 0 | 0 | | LWWRegister.Merge | 33 | 0 | 0 | | ORSet.Add | 608 | 220 | 5 | | ORSet.Merge (100 elems) | 12,195 | 9,672 | 55 | | RGA.Insert | 100,658 | 660 | 4 | | RGA.Merge (2x24 chars) | 22,170 | 20,733 | 358 | | Document.Encode | 23,178 | 21,371 | 97 | | Document.Decode | 56,209 | 37,236 | 851 | | SyncManager.HandleStep1 | 17,261 | 16,925 | 80 | ### 2.2 Serialized Sizes (plaintext) | Object | Size | |--------|------| | GCounter state (4 nodes) | 72 bytes | | Single register op (gob) | 134 bytes | | Full document snapshot (admin-typical) | 2,631 bytes | | 1,000-op sync session (register ops) | ~131 KB | ### 2.3 E2E (luxfi/age, ML-KEM-768 + X25519 hybrid) Overhead (measured) | Operation | Latency (ns/op) | Memory (B/op) | |-----------|-----------------|---------------| | HybridIdentity keygen | 85,715 | 15,144 | | Encrypt 64 B | 145,027 | 27,797 | | Encrypt 1 KB | 140,681 | 30,678 | | Decrypt 64 B | 129,330 | 162,241 | | Decrypt 1 KB | 123,276 | 163,908 | | Plaintext Size | Ciphertext Size | Expansion Ratio | |----------------|-----------------|-----------------| | 64 B | 1,723 B | 26.9x | | 1 KB | 2,683 B | 2.6x | **E2E overhead on Base CRDT sync:** - Per-op encryption: ~140 us. At <10 ops/sec workload: 1.4 ms/sec total CPU. Negligible. - 1,000-op sync session: 131 KB plaintext -> ~262 KB encrypted (ops are ~134 B each, expansion ~2.6x at that size once amortized over header). Actual overhead: 1,723 B header per op if encrypted individually, or ~131 KB + 1,659 B header if batched. - Optimal strategy: batch ops into a single age envelope per sync message. A 131 KB plaintext batch encrypts to ~133 KB (header + stream overhead is ~1.7 KB fixed). - **Encrypt latency for a batched 1,000-op sync: ~140 us (single call).** Decrypt: ~123 us. ### 2.4 fheCRDT Overhead (measured from luxfi/fhe) | Operation | Latency | Notes | |-----------|---------|-------| | FHE keygen (secret) | 33.6 us | | | FHE bootstrap key gen | 290 ms | Required once per setup | | FHE encrypt 1 bit | 39.8 us | | | FHE encrypt uint64 | 2.67 ms | 64 bit-level encryptions | | FHE AND gate | 108 ms | Single boolean gate with bootstrapping | | FHE OR gate | 121 ms | Single boolean gate with bootstrapping | | Object | Size | |--------|------| | 1-bit ciphertext | 17,057 bytes (17 KB) | | uint64 ciphertext | 1,091,648 bytes (1.04 MB) | | Bootstrap key | 135,486,811 bytes (129.2 MB) | | Secret key | 16,620 bytes | | Public key | 16,555 bytes | **fheCRDT overhead on Base CRDT sync (projected):** A GCounter with 4 nodes stores 4x uint64 values. Under fheCRDT: - **Storage per GCounter:** 4 x 1.04 MB = 4.16 MB (vs 72 bytes plaintext). **57,778x expansion.** - **GCounter.Merge (homomorphic max of 4 pairs):** Homomorphic comparison requires bit-level cascaded gates. A 64-bit max operation needs ~128 AND gates + 64 OR gates + cascading. At 108 ms per gate: **~20 seconds per merge.** Plaintext merge: 217 ns. **Ratio: ~92,000,000x slower.** - **1,000-op sync session:** Each op would carry encrypted counter deltas. 1,000 ops x 1.04 MB = 1.04 GB network transfer (vs 131 KB plaintext). **8,000x bandwidth expansion.** - **Bootstrap key distribution:** Every sync partner needs the 129.2 MB bootstrap key. For 4 devices: 516.8 MB key material. - **Memory footprint per replica:** Bootstrap key alone is 129.2 MB. A document with 10 counter fields = 41.6 MB of ciphertexts. Total: ~171 MB per document (vs ~3 KB plaintext). ### 2.5 Summary Comparison Table | Metric | Plaintext | E2E (age) | fheCRDT | |--------|-----------|-----------|---------| | **GCounter.Increment** | 27 ns | 27 ns + 140 us encrypt | 39.8 us encrypt per bit x 64 = 2.5 ms | | **GCounter.Merge** | 217 ns | 217 ns (decrypt, merge, re-encrypt: ~280 us total) | ~20 sec (homomorphic) | | **Merge overhead vs plaintext** | 1x | ~1,300x | ~92,000,000x | | **Document encode** | 23 us / 2.6 KB | 23 us + 140 us / 4.3 KB | ~2.6 ms / ~4.2 MB | | **1,000-op sync bandwidth** | 131 KB | 133 KB (batched) | 1.04 GB | | **Memory per replica** | ~3 KB | ~3 KB + 15 KB key | ~171 MB | | **Key material per device** | 0 | 15 KB identity | 129.2 MB bootstrap key | | **Setup time** | 0 | 86 us keygen | 290 ms key + 290 ms bootstrap | --- ## 3. Integration Cost ### 3.1 Plaintext (current state, no changes) | Dimension | Cost | |-----------|------| | Lines of code | 0 (already implemented) | | New deps | 0 | | Binary size delta | 0 | | CI surface | 0 | | Developer UX | None. Works today. | ### 3.2 E2E (luxfi/age) | Dimension | Cost | |-----------|------| | Lines of code | ~200-300 lines. Wrap `SyncManager.HandleSync` to decrypt incoming, encrypt outgoing. Add key derivation from passphrase (age scrypt) or device keypair (age hybrid). | | New deps | `github.com/luxfi/age` (~6 transitive deps, all pure Go). Optionally `github.com/luxfi/zap` for PQ-TLS transport (already used elsewhere). | | Binary size delta | ~2-3 MB (ML-KEM implementation + ChaCha20-Poly1305 stream). | | CI surface | Add encrypt/decrypt round-trip tests to existing CRDT test suite. ~50 lines of test code. | | Developer UX | **Option A (recommended):** Derive per-document key from user passphrase via age scrypt. User provides passphrase at Base startup. No key file management. **Option B:** age hybrid keypair stored in Base data directory. User manages key backup. **Option C:** KMS-backed. Key stored in `kms.hanzo.ai`, fetched at startup. Best for SaaS. | **Integration pattern:** ``` SyncManager.HandleSync(clientID, raw []byte) -> age.Decrypt(raw, identity) // ~130 us -> existing CRDT merge logic // ~20 us -> age.Encrypt(response, recipient) // ~140 us -> return encrypted response ``` The server becomes a dumb relay. It stores and forwards age-encrypted blobs. It cannot merge, diff, or inspect CRDT state. This means: - `SyncManager.Diff()` must run on the client, not the server. - The server stores opaque snapshots and relays updates. - Client-to-client sync still works (both have the key). - Server-to-server sync for multi-replica requires shared key (single-tenant is fine). ### 3.3 fheCRDT (luxfi/fhe) | Dimension | Cost | |-----------|------| | Lines of code | ~1,500-2,500 lines. Rewrite every CRDT type to operate on `fhe.Ciphertext` instead of `uint64`/`any`. Implement homomorphic max (for GCounter merge), homomorphic comparison (for LWW timestamp), homomorphic set operations. RGA (text) is not feasible under FHE. | | New deps | `github.com/luxfi/fhe` (pulls in `luxfi/lattice/v7` -- heavy lattice crypto). `github.com/luxfi/lattice/v7` has 40+ transitive deps. | | Binary size delta | ~15-25 MB (lattice arithmetic, NTT, ring operations). | | CI surface | Every CRDT type needs FHE-specific tests. Bootstrapping takes 290 ms per test setup. Test suite runtime would increase from <1 sec to >60 sec. | | Developer UX | **Severe.** Every Base user must: (a) generate FHE keys (~290 ms), (b) distribute 129.2 MB bootstrap key to all devices, (c) accept that text editing (RGA) is not supported under FHE, (d) accept 20-second merge latency for counters. | **What cannot be implemented under fheCRDT:** - **RGA (text editing):** RGA requires linked-list traversal with pointer chasing based on character IDs. This is a sequential, data-dependent operation that FHE cannot express efficiently. Each character comparison would require a homomorphic string comparison circuit. For a 1000-character document: millions of gate evaluations, each taking 108 ms. Estimated time: hours to days per merge. **Not feasible.** - **ORSet:** Requires set membership tests and tag comparison. Each tag is a variable-length string. Homomorphic string comparison is theoretically possible but impractical. **Not feasible.** - **LWWRegister with arbitrary values:** FHE operates on integers. Arbitrary `any` values (strings, structs, nested objects) cannot be homomorphically compared. Only numeric timestamps could be compared, but the value itself cannot be meaningfully processed. **Partially feasible (timestamp merge only, value is opaque).** - **MVRegister:** Requires dominance testing across variable-length entry lists. **Not feasible.** Only `GCounter` and `PNCounter` (integer-only CRDTs) can be meaningfully implemented under FHE. This covers 2 of 5 CRDT types in the Base document model. --- ## 4. Analysis ### The core question: does Base need server-side computation on encrypted data? No. Base admin records sync between a user's 2-4 devices. The sync protocol is state-vector based: each device sends its state vector, receives missing ops, and merges locally. The server's role is relay and storage, not computation. E2E encryption makes the server a dumb pipe. This is exactly what it should be for the SaaS deployment shape where the operator should not see admin data. fheCRDT would allow the server to merge on behalf of offline clients. But: 1. Base has <10 ops/sec per tenant. Devices sync directly. 2. Merge must happen anyway on the client for RGA/ORSet/MVRegister. 3. The cost (92M x slower, 57K x larger, 129 MB keys) is catastrophic. 4. 3 of 5 CRDT types cannot be implemented under FHE at all. ### When would fheCRDT make sense? fheCRDT becomes relevant when: - The server must aggregate across many clients that never sync directly (e.g., anonymous voting tallies, privacy-preserving analytics). - The data is purely numeric (counters, sums, max). - Latency tolerance is seconds, not milliseconds. - The number of merge operations is small (10s, not 1000s). None of these conditions match Base admin data sync. --- ## 5. Recommendation **For self-hosted Base:** Stay plaintext. Add no encryption layer. TLS on the wire (already present) is sufficient. Zero integration cost, zero performance cost. **For single-tenant SaaS Base (future):** Add optional E2E encryption using `luxfi/age` with hybrid ML-KEM-768 + X25519. ~200 lines of integration code. ~140 us per sync message. ~2 KB bandwidth overhead per batch. Key derived from passphrase (scrypt) or stored in KMS. Ship it as a `--encrypt-sync` flag on Base startup. **Do not implement fheCRDT for Base.** The cost is 8 orders of magnitude higher than E2E for a threat model Base does not face. The luxfi/fhe library is well-built for its intended purpose (confidential EVM execution), but CRDT admin sync is not that purpose. ### Implementation Priority 1. **Now:** Nothing. Plaintext is correct for the current deployment shape. 2. **When SaaS ships:** Add `luxfi/age` E2E as opt-in. Budget: 1-2 days integration. 3. **Never (for Base):** fheCRDT. --- ## Sources All performance numbers measured directly on this hardware during this analysis. Source code references: 1. `hanzo/base/crdt/types.go` -- GCounter, PNCounter, LWWRegister, ORSet, MVRegister implementations 2. `hanzo/base/crdt/sync.go` -- SyncManager, state-vector protocol 3. `hanzo/base/crdt/document.go` -- Document container, Encode/Decode, Diff 4. `hanzo/base/crdt/text.go` -- RGA (Replicated Growable Array) for collaborative text 5. `luxfi/fhe/fhe.go` -- TFHE parameters, key generation, bootstrap key 6. `luxfi/fhe/encryptor.go` -- Bit/integer encryption 7. `luxfi/fhe/evaluator.go` -- Boolean gate evaluation (AND, OR, XOR with bootstrapping) 8. `luxfi/fhe/integer_ops.go` -- Homomorphic comparison, bitwise ops 9. `luxfi/fhe/serialization.go` -- Ciphertext/key serialization sizes 10. `luxfi/age/pq.go` -- ML-KEM-768 + X25519 hybrid encryption (HybridRecipient/HybridIdentity) 11. `luxfi/age/age.go` -- age Encrypt/Decrypt, stream cipher (ChaCha20-Poly1305) 12. `hanzo/base/base.go` -- Base app launcher, single-tenant per process architecture 5x}vYvz' P@w֨GDuw&NLXC*X_ykI?${S@3kZ u~;_WEΓtm>nE͋x=YEmt.Ԍ7"YC1{v7cCo6ؼkwу[ffq0(OQujagv ~= ͸b trӜ4oм߮&q,ޤYLŦizxDkML1ni4)Edq-^EɲaE\oY22iFߘ[D8،f0t݌WbG 6K fRua&47EjZaB{HEhM&afxgϾMӿyhËwYԺ'f+<̗@:/-X4&3 )M=>9m>_.<XGh&3ЊMN̒<ΨA6f;nzg7q4 ~tf[U%7&O EJ:͇(?'!}@L4ύ0x3In&1FF|v tC_]fmj9Uk:ͫfCC^hN>F=nzCiiHwW ޱ5.?woR38vџ,5c]MdSyQcpIZ[펿fm@ ӝ.R3mQ:GsرMϚۍh{F6mi4؄S &g$g:S3 ©#,x2A Z*C^"7QAK_~29ihnx2/$VlK0f}b@)XSODF2$%!1QGXg {'cxm 0:-haR3M1뚜H LkyG`%yD:{zϑO{E/;5,]qۙW^U[C%)Sٜ !(OcrdHckhuLGPng*94@pGFh$T$iy^_nϒ1p֍yXIH 4&٩o޽-X P`}J8 $~qH $[ r=a'Yv;T+gIRi0|#m Rrig;6bP4MnəTT$G;PyS I@<6Jw_%2*t'pINʯ/MhJ(l8v_pb2SFLA ǖЛWĞSZDK߱"(=Ζ }e+Ko@ #?S-^Y uIh"'Q HWFԑFi O: 7)[1pe|dqCQ8*>njXߋc٥:V{B`\9I$! _<.}xitKHԃB_%x;zskS#4θcx)iiɒ5vI,";b{i]b5ZLXi"vS,$)>f@ܤ4[Z9$k|9# .Ac6,3vu ԅh4xEMLMxR^`MN0S=K3Ds_AbXZtM4Ss\6xRߘ{c8 Ld$E$F$sDByY<_Y27!"y+̉DxF3J>:D|@л:NEBv+<K6SVϥw$,`0$>aChv16O;Hb-_{Qwau* a2 @pHg? %!# &MIASaqH4~9$4dbH#Ywv80RRD%bXǦK߸_ 8G1P{Yd[ nkenrQSd r ]@gQӪ7KŖI=@HഄyD]7!Ўx)mY/3ܛ"Oی쬩eF%%XY9PݦI#~T k%ClïwI4Y2Q FDfE8h CyrU qKOz:5-}jX('B9+x Vdx%b)xokߑO&w6ZMf!#ɊhQyuڄ&Kȴ\;KE8t#>M2fR7 ,7{ ۤ(%8feE?w:V`=j=Z,7Y<] <?1>K"$*Z@1 <ۗ( "R|BL PKb=%K,$Hy%詁fJEMŏ` 9>\d~_{H1dfua{4a=N%Թ)az aj*xLg11c‘?X#e-j/4eyX<mpa=)SmI_oTY/ɢ{(U$[eK0ƹ qsUlg;-C#FeK+VY ̔wJc8nM\y}<%wow6 L0'4O U\wL+$Ayn&j.RB9s8 Ժn!ux @ _ ! gMdI;>-o;jiH?DԎM%T&k#{F'5bL}3T~jEdf<'EmǗW:~]_ B RjC8 LEYnWؑId6[2 qff m﵏_~u}2˩ D]!`dc"Z*tiQy i[G֚wl9$suJ" DG9i +#edD &"FQs(3i~$d@L`k 4SmV!f(O/c&-'HBvPʙP/BO dh3LSm2֟y$[. oT_1C Վjk&s:) %u!tg_{Hd1+k~d]B`de)D2;lXf/F6=“9Sk4,*!9T79Ԧ"6Ѯ3"mY .ro:kw$^3Wĕ>(+ šiO&@sHf|x X ]8Fߴߖq9Ĵiݰl濣p(Ԣٴ ne?ð#o# o5/DCw:DYh9t8Ǖý?fli}::1k&Ϊ3:jそ۠۳tTm;Д~Si)ȿ6ip45BJ<mMD' 3'7 PxXrP=4A4I% "J|i3몲{(v"KƸyi@ût g䅭G9|CL?JHd*ASN͗N>OGsƎHȌqcAω<NK o/X;ṣ(xkok?LjuaGHh07vHwxn v, >F`C$3lK4&Ї~4ګx1h$W_ eFdW0d51rX1 |RX dn3A@BGd fz C0Q$^LHԞ,.;1іd(0]BA3|\pEV&C$0hny^@Jh#?s ¤a!nd% Y?BT h+62EFMFϒ"{K "x8iaAVt&YUpĴ%v%eƲW^QB)P^)qYd1K~ i,eO]Éa3BhMu߈GHPl/6B Xkod!>8HZèGpjID@9 [kf6vuN-ohguwtŌ2} 4CldD46^ڗnCcE.aD, K65;ϐjWՔWa(j_:C@xF%'ۘB+<N6591'Tn؞\asgOR T*ˊM6$"#4tbgX0E¾[sc$D1 3T~cV-;TG~ZE8HJ4p:UbGa`\vef8ZpjÁp29ܳ}PICt#n6p0deՔ$!1Atf)8/[ W)*˳;?latA ?OQm%}: ]np "@:MHsM${HKhtrfthٙ0$UMۡ`rJ\>:@d8|M]Ixq2 xT94-#U,qR71"};se<$+43}otA:%iVbn4rK >CLj^˵5B4̻2IsY(}!g 8'oHIBR|AfX1ccaec!aؠc@M~뗽o_7/FvNF}N[p߰uv#~o?!srv?G&2xsuiq7cE;{tDsO,"a߶e^[GEuG]ج6'wNH0V$PrqS<ۏz& UEYx)!7u(Q6c,e~ YLj2548.#}Rj1ԅrª8ATMH! H'RC?nmE=vSu>7֯dBv g2ak!BNs#Hvev2VW 0X صתbJJ X6'k*ԭ Ql'{h47^MP}njh0MW%&MkvQ3Qal:qH>FwkFL/o!iud .NH ͔sdX5ao ?ψ:F^u&Qv4h.j٤; R_]$Sp~dg2 ޾!buВ&d1z '3 )!8c`.A% ⴵP]0\;iE-̾X/jV1qPqiZm9^vw/¸eհ&)82)TPQ"N9X~[2<m5"%NHHp>298;$j@%_Ƿ[ZIy8G 44}=V|ArcKeKT('sJ . S cfL5̧FH u1H7\ GiP™:ˆx}/8:?q!/#)Oexr94U +}c/(jju&?kt5^=oމTF|J'|[ G0 3tķ.%.XDPz?#sG:C%MُB>0 Ї}7.AuypYQ O`\mpjJ3#(_[Z"J=BքQ<'P8vpPB2 |F$hkԹ;bIx@|D6k"XG,coC]꩗l3N|uĵ,f'|p6&^nB*i2\իϯ77=Ill[|O( A@Fs3O\)@e'zd9Kk{ ݡ/H*H]^馩#ziǂI`̦8k:SQ&>ϞStdQ*Br*qf s&FCQPX&199fS-:`؄X1jF {+Ĝm݋gj*7f~)H2]Mpr^a]XeaZc,HelkX`S6XwGe;viWFqbV:CMJW*&㍔UCڂ'>J3Rr簿sI#j2 x*E6-f (Xp8/'a=뜽PKR?Vuf[ɉV=īŒ1lI`H )$u0sW/qCPC/9N .M&.ށ[k˨^cB }gdKהynV&M*4`=v{CF\ꔋK;0K'K֩,9'fm!lζM.5/<ti!QCܩ.MYZfsPkڥ63GbM)2RE %" {r{yŦN3!bש?޷BԼgm.\]"2j#7jgqERm+:!e?A&H-7D+~kqFW-;BP+›#.l W?]@=p>n7~ɠ a 3݋PV <]wߴcjYɚ-Q4KF;K4;!Bj!rcFUptsJg[Ƽ ij46~͋aKB#]c@(^cf{j J])OVp.@-5˚4O;t&5RXf/Τ‘X3pQ3^E }g3lYO ԛ4pʰ aO?!3WADؖ7۶;{ڪk %7h }ضt;ҵ;ICү~<@8XK_~q60)] rꐅdOGP lH+AY; @2Sh cBJK qEp\J^yC  Ǿ Ǿp PٴӶz{î=P!P nks& ξj^{B@c`]0<ܸCE"ܗnubCQ^{tto*حw}| 8|c/^Έ th(>VBLl~ߔ$9!eG o69!&ەGmlDl_4a~҈ c^__\~ űm_Fdr]ꂪ+ _"YBuTa%iՇ_o6߿}y͋3"1g/BS`|a㱪Qozcayփ6]}>kSPb~d7VBOw9R ߆JN@b:LA]ё`.F.% LX#|Q 5Vؒ4ɫD I9 . >J:ܨ}mUu/1#Y;KN?3 99գl-ȶo\ |id9 8s&;tmڅǟ: <.Dټң.|3Zo :4]i8PhRfp_r2#>mgy+ W -ﭠ 󠀂Tv*Qc|Av{uIU K$jɈwdBh2+6ri[.[9LdA aM`u6P aB[8[H~TI'l6߳tk~KswJ;ooXVq%'`R꠺jqʕ%R֑xhslIZEWՋC% &lE)2bϜaBq5l }߾5RПӒY5~bx y[8Wf5j$+Io|{)=KX=fh'wTGf2%İMNu(28>zov-F+b\g2nؓ&q$"z$R\N왬$Vlft|_h,$@4Cq(ZJ0'%^#[|abdMlfz!xVFVfP1)T'pn.06Fi^IAScAFU"6MM|}Fg`j8sQ1q2jZ`ID$Xbg0BU9Iz;󐒥Tk뺞< S޴ mN7[?q[ 4Sꎘt ;4yQ+#Ճ8*ve  뇿eN+.BzpٍYpf; ' f-×ιKrrTr]E6-DF­W.Xމ3φpX϶zvhG \^8r7ShST+i\q,-b< X,{F *]FCGǯO#eJWsI9G}bnf?d{k/uYrCT#7slF N9gOIVFGvMkؕ8$Sj \N}X^n W!I+"@_^]"Tի`/|&_`s_kR;K+FsЗ}|V? r<~@J֑:rx܊ Y*D mt aY`<,?Sx^Wi)S [h9@ls >h ̩gWC=w$qe½dbHchm{3 XҢ j./bfuѿYXDq)U/*L?v-$\/z[8p}6bUk!N Ĕ*[щ{^<8Oܳ`Lm<6]dC*+'JF: ݭ\V$ì]- Idkx}XM, Xv# i!AOJPˍ9`-<pf^U^ Ȳ-z Km`ʥ#z$oL9CC%Vw=X RwB@ߗds-rT]6/On $ X*Rx ͽл܂^mh V@AoNh@X)iubJqr`\fBNy?TmrhU1%ݕ |H|,VӰJw=#My'Z9Jsu,Npƒ J.>p듨+n5ofolػ0%JZRm@ ,\OBڬޏFQDDy4]s<fW;|?/ʗAN ]5VEקޓ4~tԛ WGb)j5?M;llBo}_H5N^~[>|N2}8δ:I kΗp[bӏc9jVp@LP#xzLWYv}/Wb-s 6HYTG2@gSH@\ fz3T'cJI<(fbEޥ쐝m8̱3ɤ0c NʚvY&MG١jGbO\AF;|39}2}}OՊ?%,* X>*)MCȀ5g"~@IW.ޝ݂e|'ۻ#?=ʣ(w})#xVYGxEbCڙ6-89:6h Fd/'ORh>tf@RTE߳ZLO y2!F>FD&D&M;>:μ(5#HyHܼg谪H>%d)=0i\~}W@ߢ@;|~|uj!/YܡW6=0ȣ"? qʴ x3*t/PvUr{:$4=sRĸwL%kFT:]=J{_m$'nu-: + 9{h\ٚs\مC/t2!)s_>80 㞿 =Jl:sa5~5 /(ex\[su~ǯSYHJA$$ѢHJ8Ls0ֲͅk+ScT~~IvI`~N'扟Ysj$n4֟G6Zg2$lY;( $76]*4bkv<0w L"1:87ީy?v[{w!Y# lc`-MD"Oڦ0_$rUf7~%.6& yz[s -'$ӡ|<抨h? 0_ r!c9k&i27^T݊"E8o ?SM>&1lE=!`?Au03[%Gd6f 1GOLI6[iG `*[YU)7:,/4O.rcU|,aXdۋ4X֚ ?ͅG l43#r\M0u(u98$td4r&vR43NqhE\,#R4 O(3a|I8:\>xqdh苋a`ieiR4-Z_ 3#Hu? :%rDğ$--sm?iwL0*O KvQwx攖0DPfE:OQ_UisxQȁ}Y]8»< 8-ZUEEr\];0C_ϴ  KҬ4*݇_lo 4ɓ6NkB N"jY#ZmʗvE3uT0 hF915#)(uWDTWJԂ)ۻvA +mԛgM P~@Κ%Cdt4 rPv57  O8Mr F 5Ox 3 (+P"[f8{k2*xrskh#*! 6။ڡvɓkk ^\ ^} wΟN0~X4X_Z|p58v#*JҒGfi^S4Oa,,?W|0(gΣT5Oh(tm. h*r~h13Ybe6)WaiR3m%c>ɇJDdP̰HLPFzb +~gh7CNJsB'sDϜ5X_V,oJ50.κZ_g5 Q%sL @ ydC:ffvZE\ `R"Qsc_0,z|0ɘ y5N[t @Ind{a [,oP4 =. pEiWJ;f-zTZTXZAI%_@˱[ 5Q׏WwW~+x{#JA0iV/?7!bh-h/bȯk~~U1:UhU[tQ_tG?{ yZw!^_=399Huʲz\3?=}K|\&$ng->q:8X^=ГizJS$]uZ ک.P]}?|qreN-)/>{b>_.՝J0(J %7N发]&qa,g/C(~? g0"+#$#6I] >Y˓a߻T K3*$/9 CmvH48'cЪA`&ūC?D4#@ #B?tMM׃aiJPu͊(\QrKc.5 1e"JE*ebwqlj\'ǎiҵ񍍠4Q3ݫHX\5 k~ø ԙib4x`Ie# )L7αʈe?x"Rg-+5pE?5t P1 ֘+X©,]#L^me5wa'%k|&ZP'2ſ4ToL3$kgP<⩤ l)lQ]9bN"ǺV7ɪ7pL8c  Q^e>SUx-NT$mRjG/mK#}i(넬 [۔zZTd%mdtN0O\AALjV}dZFplF[)`Zdg2"5w -VQ$ִq- h^s{I Ar 67qv>cKeRh%[?ZB(liܨj_$JWN h{%m٭F/bjϖ+.HEmN:!6Cl٧뢍}Go'!k &s\ϬT8@?V q3Gϒ|}vdXD!ڒ鬤 Z٠M)Z{ I* \>66OL6O+ yI#kIJ2^e\fEʱG%zXh9a/whE5[!ts5BɷyPnAؘ# ȴuͩrf3}łiՐp^OCƚ3:kstTo KU0\\\p6 ^S2өJTج84I5%I)#[,i+ZYVKW8# WU_~{=LKƶ]1)1 -Q{rRo)Ym4Ƣ[F= 9*|ШNo dCG w߃Q,>&l 8xQ6Ym˙mZ,SrW%NDU1^tt3ӥ$&:es8"`h=9+%cW/" @PydVX]& DU@-u.՛E"z]0^WWkCVΰ]ASx/!!:-__R6:ID1"gL.OBiLQI%\o0g\K !_i{&>jҟG UOrz\=rz"k yRvRJP+QSa{ODe a438R/T'_/8K'_>(ȩU8 T uXZtnt=rcڡ#tחb`U$Q)* UtNuفj]5JH)Xp=U#@iGtJGsT҇)$QepLE3%YYoNG@лKW=@MC-iݝPy?oGDt*\C}3cETrCgvɨd JfPiг(v$ULt)6oV\z"/\2c.-M$4a2.WyEX){c V;08TJ DRh놤Pl: ۚ}YJg9[:IC'Txg+:٘1 m8sHrsQsڄvQNOq/uhQyDz GOZ phh J\,Po9TڪF+;䒚/5(:IǀO-ofcY]xt'Q 9va3MnC]sGהQ/J"NIzi|NDx VɼMO<.rݨ{+!Koͭk=%ki}-sS^96tQ6:*m:k@V`1-֌&-cЎmW%k>\v~ *UnԎi|A|]2T;҉R'r6ư#RՖn*j!+B KFО&~$]6 }%9-^vvi9gk^f}9g/ ڼa_*˒6s2$g ^>{]\e]Eس[į?dDUo14I08cv/dnw{rܵ<v֎9XhuS"xrԽw{vtv/O++"NPCHn-c_]W]ul@D2pR x|[sX;~Ŏ4e(Y,J׶eHu{&DMG @dMOSkyI%6R+f;Y١00NLXydqY,煹q`8տQY8m:S3? ӳ?g5a`lzgyǩ}1ߙ/f`c >ᦣ<.Ŝw6{3k0Ύ(KNj"RfgEfr_8y ~[  |MfޛM~z1B* I2|Oi X[iVQ; l珆)A';6u{:z-y FMG?<\8zY)._ E%wT,7dz=<wߟGl"rltzVy$6-QaCdEBA7((qZ` T'SuqeJ^1L)0*g)ZhcMP=[ L\b#u^lU0p$ouzӐS:i ͡4KqZL=<Ƕ{N퍝^vừ5O됧0mF! ,Rua4:|}`ZKB]JJNT$4$ Tͭ}0 APmR#-pV#Jeh#.9;|su|'TnfaIllM-J1O@_YƐ¨ 3-UG,Yǘ p` j՝xԅ<_giSv=N- fy1mkwr 2gո|xgCQy'E!r՛YE P|^/ KNhq9Mq'~d<0[:cЍA7Nke]>8ͳy`$IK!E~43S, pC V񄋿}˵'w1jaX?CQDɎgeyYz%` h:.$3i yPd 7p/1"- Vݱ.mV_ $yh;Ai +}_hHn gab-y0I(13$ "A4ψB7lՄmD7b0@ SZR3=HNLeK28@:z&M, @$mH=x+f|i\v`bH-NXELf,ņJ5A 0mtZf@|isN" MINl$Rv*#sA"+omD8\ĔJ߁E!8|+XF7 *zEs,Gov^ooom݀bPEiMj(^A5|XD,Q7XXpd;y6 PC/pQo+T~O^QXx4yD6(G(pH"D'(Do=@)%o8PϷ)T8ӟƟyjSshxcW0b,+WƸ W818E/5 ڭBk[>-vFr- jsc JM.*!8H.*)*we>D?;99i0\0=7\si30-D}dH3Yp8FDn5k( 9<|H0ja]GpWy?71/}]XAw<7 &Eb%|UdLiTm^*yvOp8"xh$Z¨w­nf˼1fǼ5ugk SKйc9.+ijX i j)=Չ]aQ7tpQb#dR0 '*' DWRNJ̑:5v,'ORuZ~rKN4U+jd+s&e#]%KkkRC[> {T\=\61nC^+z|s0BF@&E+^TԒ 23Aǁwv~< tqzĄ!O>㤅K񐎦yf & ^?:X~le5e/^0e:" ,,A[ ӚA'n[G *0,!qvVx掹s Qs)M5 V0֟H,V{Ztp륝UP8*$I#d:˒z-(b`GR[AK*?sPr|# RxX#"@D"+H`ShtZFPcg1_r___;$p'pKD8 aRj@6$QQŨN]B_bU&@ d R-kx͔*F{νkoow^oovaqP*uKߖ ;NU#t})﵍Z#DJdb,6=z/C< m`3 nZpqcjajh"+Ahv7i^WtX G2mCbKb%w!$uAzĵmayi՞IJټi+yX9' ( hU=Loc)͊ˢs.`  Z[ D.`t1D( ʂ l$sۏ-r:V1T7Rn<N'J`k^4g5Y`_t>Ʀ(ҊMx|Cw4ĽJ@I:6gs$0Q`yPr5`id*gddqm1ܖKQ*$Wg|O^ѷc0)ξ*EBm61VM,8ފ}-t]w,&Ck3G>@7}'_bG/Gƛ%/WE**`H4WI7Ӥ' u Γ":R`R%xwc|j(wӰQ`H˃Z Rk^LT>n []Y??A'2#Ȳ13 dϚK~=Qm -T&qfgߏ͎"Xb^xAS8,*ʯCQQWŧdwS'H]u"c x@G}d2,ԇQ$\nI*;mZ5ő@wH_@,U4Ue{N =΃bQ6B>mѪsڃH ܃ DfZ(`"*]A_ jc)@w.X-jq!w;R,+XBn'LP}! XJ] ~ԤqtKEH6"J)2X7?Vw` TD|꒡p.z wh HcXo5b2r+Wq/]c"3gIg91Y7d0'*7o!!~頖Z*IJ$ ï)S/ҬZZ"N!o^!`YPW|$GdwِG-_𰴀0垌*8Jfw8 ~?Ү  0UCجe!&)y5^UW{,ѱy F4TU SƂW^$}Xgp0/_B髖H=" UaHl} 5^a/g"LIXKI&+V&_%V^P*Nbt+쑔=yU.QUൎ@FӴPfUx&MrCW_mH($ a+dwمPz^YP+|t | >NVtj.ML'H늳0ǖia s=ZʯZ?)bD+BoI>Q>Y@B%G{Pf' gx$= XUI60-x-[-jc%" ldz% W;:+8ZZnFĪ"R}hx4_.n~\)O-!dK  y;EK Q".N` NaT2[5HOՇ듎9Ue *xY&FnhSxڶ!x1'6`kz ,ݵ`i-P38&[z>qhOEҊCŒpԎk~x)n0QtzunM`ekiϬ?TY`HXZ <)"<+qh)A eA51q^N |9:b(ãchDQ|p, \[FzW}(B@}`Ee}gqVYk/]~7?R\)Uf/\Y;fRv탱mnampu0fҕ3/UI1tVUwPv~5N)Kݕ&=k.빲iZݦ/hEqYzG쎣s+C~ʤ8]Ui:bp^u+ ]H(ew voka_M\O2å, 7| @81Kh&\'@y5:S=/_MNc>3C}?KBKZVKFK29KP?Ε$F֤֠PV& at[T( K*3\.%á>G2U"Y!aw8Y<4 ?؎g^=[׈x PLYRTr4wU"_;ϫ,jvsE:-Hh

xå $s*D[[ii;fCAHíίhƾD|Ĥg9 x=B"2HcFJ/Q"KVRXה^hJ$F(CЭ3Ug?=oPR, @uCi崡Lu8Y~NMhOcj} f~&-W({9/䁟XfB99浛^ s.\ji@5~CmϷ{ZD“UErlG '))#Zs|tL2 ܨh5ozwF47!UJ!k\3M1?Sn1QtH ӪTAp! ef&8:nc^6pAh~_J/Ug*ϴ ]:svֽܬYꥰ*ٕq&P |M)L&ziPk('yU,)yURl@e:;b1{Ms8׬orU;lyQ.$62 E Y} i |Ub{mW[lhSlv\Nb ؖgڦԷ:|vfݜ}Ea1i6{~ Um'g'QJf{{>PDp[W$HR˧0ꮼ,+ >Hz0#VYU sWDީ3`$α=Y@gZ<}#c: \V~5^ټ"? sxY[oI~_qnu-@ 3v }۪/4OZ%jw;&hĸNwwNq^=Fi2Ii<nޤܔJ˄K/Si@jVT&SFyp">JTS$?o%XR)JLH"ԩռ Z22b&DxYOJTx"*1VHUbI Le&U(|R T1g` MEQb˙4nqwث^ nj#zC.mjۆ9o^?E>t9h bngcƼ}f#hQt jCCm`F1{3xlۋ7\HB$*Hj]i9U 㭭{I-OCq|iQFUDJNdpP*U>hL2UMجFRC @qiB" i51 %a: ' J Km₻6{st Z.. 'w# y-kw%=F ęPC3UJQ{*IU@ذ#qH# MUh٧'OG"o+P֮eu ~sWh8oջϤ֕=`,T/7?^a)KPQTVg}.׶R:ԗe܌ |&_rH﹐Oq>S:3t"L9`I0v}ɩń峁^\̭сu~_7FrN?~*0`SϾ Wom64[W$pqIroQ:m⢆bf#ڳlH1F*8Vyƛ+JD"!r* .@צX JG/d.C1zL\lǶm3QTUYWV`/_%@B˘'զR|yb铫g4t?^!rO7o훋`S_oUyDGq :lq[sx?+6rP7Ī(RHLhxfǹ Ic-=$` 7Ӥ )^\uy1Sy{+7"$9&R+[{;=Eb`g\97{u߆a\0aKwsP4[ 0|^ `d3Ŷ+Zj8Ω)/*5SZlƯWjĽrȡ.]`mp 42|1ზ a=o|ϸBVʘ5UV<,vwvG;w;=q 3Y5TJ U< ɜ.kJsP&<(#U (cUM8 Xu${WL A1HUΉBag_VnnrZK!)PD61/Thr`E RΩBUv+kVDk>"%z=DVLؓaG=0ڪZc5ZOYedD: Y;A1[ͥ ?wv{)t#lē`SH6]IB+˰oJm3IuƢvZ"]iSߕ>fjrD!򪫂. znL}? LAChE)=<.΢/l.^]s넒dgڄ3cFk|`+R /ajF{5w"X%LaeC&wO {տSPF;C7 nK+Z0]J)50_-M Lw >G3n+sw/slE֯D-\6'a jD1_MWvQ=\1qE%V$Kk8J uz؊y7l8ݠj$wᴂ7qֲ̞$K< 9=wԋ_6Ӹ.9Tjqyp57~t8kHmtN܊"h|rϯOtC&Z޷G֡FCn*ZnY?4ԲЄ_cEA8#"&sٝ>d^Z@)" rhQ≮etʮ}Ri@l^r}3>c6W^nN*WǵJၰa99cɗ$n%e:9y6/oO Fx  # Blog posts bundle ## Post 1: #OwnYourData For years, the cloud usually meant one company owned the database, one company owned the login system, and one company decided how hard it was to leave. The next model is better. Keep app state in an encrypted local vault. Sync it privately. Anchor trust on-chain. Make identity portable. That is what **#OwnYourData** means. ## Post 2: Stop Putting Your App Database On-Chain The chain should be the trust kernel: identity, key policy, anchors, receipts, provider registry, settlement. The database should stay local: encrypted, fast, offline, synced, portable. ## Post 3: Every User Deserves a Vault Each user should have a durable private home for: - notes - files - messages - credentials - AI memory - preferences - application state Not as a feature bolted onto SaaS, but as the default app architecture. ## Post 4: Firebase Was the Prototype. Web5 Is the Successor. Firebase proved developers want: - auth - storage - sync - functions - easy iteration Web5 keeps the ergonomics and changes the trust model. ## Post 5: Agents Need Wallets, Vaults, and Boundaries AI agents need: - private memory - scoped capabilities - spend rules - threshold approvals - portable execution - recoverable identity Otherwise they are just scripts with credit cards. ## Post 6: The Decentralized Cloud Is a Market, Not a Company Sync, storage, recovery, indexing, and gateways should be open provider classes. Apps should choose service quality, not surrender ownership. ## Source notes Primary and standards-oriented sources used throughout these documents: - Kleppmann et al., *Local-First Software: You Own Your Data, in spite of the Cloud* (2019) — https://martin.kleppmann.com/papers/local-first.pdf - W3C DID Core 1.0 Recommendation — https://www.w3.org/TR/did-1.0/ - W3C Verifiable Credentials Data Model 2.0 — https://www.w3.org/TR/vc-data-model-2.0/ - NIST FIPS 203 (ML-KEM) — https://csrc.nist.gov/pubs/fips/203/final - NIST FIPS 204 (ML-DSA) — https://csrc.nist.gov/pubs/fips/204/final - RFC 9591 FROST — https://www.rfc-editor.org/rfc/rfc9591.pdf - Zama TFHE-rs docs — https://docs.zama.org/tfhe-rs - Zama threshold-fhe repository — https://github.com/zama-ai/threshold-fhe - SQLite one-file database — https://sqlite.org/onefile.html - SQLite appropriate uses — https://sqlite.org/whentouse.html - Filecoin/IPFS docs — https://docs.filecoin.io/basics/how-storage-works/filecoin-and-ipfs and https://docs.ipfs.tech/concepts/faq/ - Automerge 3.0 announcement — https://automerge.org/blog/automerge-3/ - Avalanche L1 docs — https://build.avax.network/docs/avalanche-l1s - FIDO Alliance passkeys pages / adoption research — https://fidoalliance.org/passkeys/ and https://fidoalliance.org/passkey-adoption-doubles-in-2024-more-than-15-billion-online-accounts-can-leverage-passkeys/ <xf # Building Blocks and Open Questions ## Stable building blocks These now look reasonably stable: - local-first data ownership as an app principle - SQLite as a local durable store - CRDT-based merge patterns - DID / VC identity foundations - passkeys for device-bound sign-in - ML-KEM and ML-DSA as PQ standards - FROST as a threshold-signing standard - IPFS/Filecoin-style separations between content addressing and incentivized persistence - appchain / specialized-L1 deployment models ## Frontier building blocks These are becoming viable but still need careful product boundaries: - threshold FHE / conditional reveal - CKKS-backed confidential analytics or inference - encrypted provider markets - provider portability with strong receipts - AI agent memory vaults ## The hard unsolved problems 1. Private indexing and search over encrypted local-first state 2. Selective sharing inside encrypted relational / document structures 3. Revocation without device or team chaos 4. Metadata leakage in sync topologies 5. Human-friendly threshold UX 6. Reputation systems for providers without recreating surveillance 7. Cross-app composition without recentralizing identity or data 8. Practical encrypted inference that feels like a product, not a demo ## Recommendation for Lux / Hanzo Stay conservative on the default path: - local vault - symmetric crypto - PQ wrapping - capability policy - threshold signing - threshold reveal only where truly needed Be ambitious at the edges: - private agent memory - org vaults with threshold governance - encrypted workflows and recovery - portable cloud/app operators - selective confidential compute ## Source notes Primary and standards-oriented sources used throughout these documents: - Kleppmann et al., *Local-First Software: You Own Your Data, in spite of the Cloud* (2019) — https://martin.kleppmann.com/papers/local-first.pdf - W3C DID Core 1.0 Recommendation — https://www.w3.org/TR/did-1.0/ - W3C Verifiable Credentials Data Model 2.0 — https://www.w3.org/TR/vc-data-model-2.0/ - NIST FIPS 203 (ML-KEM) — https://csrc.nist.gov/pubs/fips/203/final - NIST FIPS 204 (ML-DSA) — https://csrc.nist.gov/pubs/fips/204/final - RFC 9591 FROST — https://www.rfc-editor.org/rfc/rfc9591.pdf - Zama TFHE-rs docs — https://docs.zama.org/tfhe-rs - Zama threshold-fhe repository — https://github.com/zama-ai/threshold-fhe - SQLite one-file database — https://sqlite.org/onefile.html - SQLite appropriate uses — https://sqlite.org/whentouse.html - Filecoin/IPFS docs — https://docs.filecoin.io/basics/how-storage-works/filecoin-and-ipfs and https://docs.ipfs.tech/concepts/faq/ - Automerge 3.0 announcement — https://automerge.org/blog/automerge-3/ - Avalanche L1 docs — https://build.avax.network/docs/avalanche-l1s - FIDO Alliance passkeys pages / adoption research — https://fidoalliance.org/passkeys/ and https://fidoalliance.org/passkey-adoption-doubles-in-2024-more-than-15-billion-online-accounts-can-leverage-passkeys/ )=,ax# Security Review — CRDT Privacy Stack (hanzo/base/crdt) Review date: 2026-04-12 ## Fixed Findings | # | Severity | Title | Status | |---|----------|-------|--------| | 3 | HIGH | EncryptedBridge OOM via oversized ciphertext | FIXED: MaxBlobSize cap (default 256 KiB) | | 4 | HIGH | Document.Encode() leaks plaintext for age/fhe-backed docs | FIXED: Encode seals via privacy backend; Decode accepts opts | | 13 | LOW | Cross-doc replay test is advisory (t.Log not t.Fatal) | FIXED: upgraded to t.Fatal regression gate | ## INFO Findings (not fixed, documented) ### INFO-1: EncryptedBridge does not validate SyncMessage authenticity The EncryptedBridge.HandleEncryptedSync parses a SyncMessage from raw JSON without verifying message authenticity (e.g., HMAC or signature). An attacker on the network can craft arbitrary SyncMessages. Mitigation: transport-layer authentication (mTLS, NATS auth, WebSocket session tokens). Not a CRDT-layer concern. ### INFO-2: Gob encoding is Go-specific The Document serialization uses Go's gob encoding, which is not portable to non-Go clients. This limits interoperability. Mitigation: for cross-language clients, use the SealOps/OpenOps envelope protocol (which is JSON-based) rather than Encode/Decode. ### INFO-3: SyncManager does not enforce per-document rate limits A malicious client can flood the SyncManager with rapid sync messages for a single document, causing excessive merge operations. Mitigation: rate limiting at the WebSocket/HTTP handler layer. The CRDT library is intentionally policy-free. .x# Cron → Tasks migration `tools/cron` is now a thin shim over `tools/tasks`. Every scheduled job registered through `app.Cron()` runs via a single `*tasks.Client` — durable Temporal workflows when `TASKS_URL` is set, local goroutine tickers otherwise. ## What didn't change - `app.Cron().Add(id, expr, fn)` keeps its signature. Existing callers compile and run without edits. Services like BD, ATS, TA, etc. need no code changes. - `cron.NewSchedule(expr)` is still the cron-expression validator used by `core/settings_model.go` for `Backups.Cron` validation. - `GET /crons` and `POST /crons/{id}` admin endpoints keep the same JSON shape (`[{"id": "...", "expression": "..."}]`) and run-now semantics. ## What changed - `app.Cron()` and `app.Tasks()` share one underlying `*tasks.Client`. Jobs registered through either surface are visible to both. - There is no global 1-minute ticker any more — every schedule has its own goroutine (local mode) or Temporal schedule (durable mode). Sub-minute expressions work natively (e.g. `"30s"`, `"*/30 * * * * *"`). - `cron.Cron.Stop()` now pauses tickers without dropping the registry. `cron.Cron.Start()` resumes them. This matches the previous semantics from the ticker-based implementation. - `cron.Cron.SetInterval()` is a no-op. The global tick cadence no longer exists — each schedule's duration/expression is authoritative. - `cron.Cron.SetTimezone()` is accepted but only the expression-evaluation timezone is propagated; durable schedules run in the tasks server's timezone (UTC by default). ## Call-site rule going forward Use `app.Tasks()` for new code: ```go app.Tasks().Add("settlement", "30s", fn) // recurring, duration app.Tasks().Add("daily-cleanup", "0 3 * * *", fn) // recurring, cron app.Tasks().Now("webhook.deliver", payload) // one-shot ``` `app.Cron()` stays forever as the alias — no "deprecated in v2" churn. ## Environment switches - `TASKS_URL` unset → pure local goroutine tickers (dev/test default). - `TASKS_URL=http://tasks.hanzo.ai` → durable schedules on Hanzo Tasks. - `TASKS_ZAP=host:port` → ZAP binary transport preferred over HTTP. If the remote server is unreachable, schedules transparently fall back to local tickers so the app never stops firing jobs. o! x\s⸲Bc25٭"Lٻ$>ql6Io?$[dad%V+?c7#7]1tf^&Q&>,_ZO?.dqdYbKaw7hW]\ޝuc݊V /8KE*}zIBzËeɢş=?ҿ uKq3.|.#R5k)TDnφ_VM "+!ΚDBZNEςDc4.Py_"ZSajrDH}k TYӢT̖@]Yv~SEImi"ɂ>C'pOz #rB0' CF*h?˰|6wy]dP>+R%BpReU [aCa]"gnH+%$NHCu1rJ|lগoe<#=iW+G|\R}Sw~y5- s5|S ^dsM03a"x)*.–Md[W֜P6?LQĐB^)/I 'Nܙ㩝٢m; ui_ݝUNA/[%=k)X(9Vp5D^)\&vKOܰng3zkgH\;,M~Ld*Cnoيul&Aضa%uAfW$6r 8jN_G/A ˴dΘՖW ִ`͇V{mPiK0w;*e.a$b^+1Eƅ5EI C$mg]ӌ-`[p/ 4u2 t2VRύ(ZNvy6Pq0/-㈠mq]Ȧk`b& '`,460N@P񜖤nO y<\/@|K]Gvkq.s`*oLC2> /O`LꅛH-TPt&5 gHJ-w|<g b)k0RO !^X )'F8.4(ĉr`x}:]A7ā.u?+)ah2O>]NN~Eo2:: p*I隴k6|lu >N +Q)ViuA+[י)${GQ ' X[ƞ% l{r I[x D4Jh\v>S&k ~ !<|+lUzAkhqE 9B#Lا.OZU4vx-.| aP4|f#nW  QZn 4ȗOB.yKt0'a)oZj zy$qORV3H?un*7C4qV( IBڛ1ti "_)G)B-H::`aC-0bnD:<4;O 3ȴa?H8QsTDJ?*T :] Pʼ8n U2{k^'7yZ(Jox{Z4GbUuD(A=q0I89{d?H{g|kcuO)X.;DDdBy}8-X}ZS17G :"B+@ =]J{ήQ>KM<VϺٰ/!Y(A 71'O)!EvKNxꕑ)p6K:aBkz}-"4` qwUƢnh???3D Gh^ކ-r\'0P0$dym{ۚN7l!ξ ,KR;N|BB;]{Uk}?&`CV /ذb{R53$( vZo]L*2 CpjTPN6fرDZ m15GU"8_(hrD2N[uzْm)7} 8+^zH܈&X4CZwuzii%BU[:|bKs^&hhKc]_:M4u1N^ݍp)oai@,Qj4>WF [6qӴoar1(7zP#)/#kf @. G(W, c-|u(BQ]ãuRz2h ?\,;*’Ls9lI2áU,GcaxQ ea7 +jBl=OyCL`gTZaN̠ZԿ|DQnkrG`AT yt3V Qd(CP Zl\,Ĉ4,ͤln&sf_B0q;%Zsl-Ω" l4}S縷mj9zY59[ԌmE@ P0 l2k|E !l_ϙ7a1aEOk~h>Km|=1]Tb#(DsRm[maִܱC}0{ Sy>4=ꍇWó78]}s5k)nLF/h-5&]M{l+g ^fcNsꪇZ w}(硱.+I\Kt)aY#Na33f!-XejޤFbkY=ac:0sĝ) Y_+ձܺu6xTe5ic.cp *!c!:( ء?2~87&' B4c &H 9J(S0̄,0*pmaaySۏ$ )ЂVh~:ߘVhg @JTXϔ~f9gfEY*NeIg4q %JPVyP3}`}ps#P9iaCE8#t#eA(^cs<zaˠ|HlOT) 1Č-@G΁ HGxKNGTzs> fAUܢp U r`@z`󖱦8#'&ϫv!tDjrY), Efƴ+86IY:_dE n [ZrF'WGÓYt851ѫ.~H{<ac׮..GVEP>&{Z2q7۰\Eb*) !^2sϔM1u%u^օ92 NC/jM]%>eRԆ4wPv6*nD$M_ Ьj"nAit6% x1D8fd8MUHI7ǟ$R8W:|O50#SJ'H.u@t1c; |:[\B|6 %(6G1T`ƯJ"*dmch9|,*% _J(kNc$ߛ_ፑ 6E }FbAѿdx]䠁N5,q |^Mѵ9 ΂|OWOIKӱw#9>m|^'b.#]%I|&L dD}"DX ٨cѻ;JFm,[W>eRSR:X[є< />&i0 POMK\CS 0x2e"_+>Z2A>`a+TeCHVA8|R|wc]T}|&jկϷ4ߢ1?+V** *}TE p~VWꂌnaLV߶}@ʓyJ@PkIG*YD.iSJJ(,/v]hFhcS{~@fȯG@\lle*<=+#tb뿊tƹȔ2˗V6Goz[wsG{eU/e % Xz?ƼzXo2WQC󊁰;:`Ѥ.Hyv4T'k g,(:Ng_աlKʉݶ&T#BA:\z-d ugPΫ)9Fy}N0vE.Jh\Ъm&`K].A&*ɱ&zg;ObLPŹ]OR:99d:1'mlĚ?97b\ӰqG@XBݢ/dR;Ani<y.V٫; Vtp LBݝZ Y ήf:fJSBϕzZ={;e2EBPfM`CfQtH ?K:X'vO\[aJXx[/VW;%!l +z\ⳳtX(WkC)oa 06sWB0逘d'n||H299vǤvv=O5%_0{A%IPy>5)8@:Rj66זS=PQ`(0)Gzx")} sgU\<`AeluZj;+| ԥL15`k ⑾*쒌k~ f0Mܛz-WmT#h#VTֽ8XЪBee92\Y<ڠK|.#f BM8t3~a"Yu$Vm"i!c_?cpn?xkqd3E0 x-Џ]cƳ/7l#=&base`, `6ix v # Firebase to Web5 ## Migration paper ## Surface mapping | Firebase | Web5 / Lux / Base equivalent | |---|---| | Auth | DID + passkey-friendly device identity + capability sessions | | Firestore / Realtime DB | Encrypted SQLite vault + CRDT log | | Cloud Storage | Encrypted blob providers | | Cloud Functions | Worker/event layer on vault, sync, or anchor events | | Security Rules | Capability policy + chain receipts | | Hosting lock-in | Provider portability + local-first execution | ## Migration strategy 1. Add a local vault and make the client authoritative for immediate writes. 2. Introduce CRDT sync and snapshot/export. 3. Replace auth with device-rooted keys, capabilities, and optional credentials. 4. Move recovery and key wrapping into the trust layer. 5. Add provider choice and anchor receipts. 6. Add threshold and confidential features only where product value is obvious. ## The critical product rule Do not make developers think they are adopting a blockchain database. The migration should feel like adopting a better backend/runtime. ## The developer promise - fast local reads - offline support - portable auth and recovery - replaceable providers - collaborative sync - auditable trust boundaries ## Source notes Primary and standards-oriented sources used throughout these documents: - Kleppmann et al., *Local-First Software: You Own Your Data, in spite of the Cloud* (2019) — https://martin.kleppmann.com/papers/local-first.pdf - W3C DID Core 1.0 Recommendation — https://www.w3.org/TR/did-1.0/ - W3C Verifiable Credentials Data Model 2.0 — https://www.w3.org/TR/vc-data-model-2.0/ - NIST FIPS 203 (ML-KEM) — https://csrc.nist.gov/pubs/fips/203/final - NIST FIPS 204 (ML-DSA) — https://csrc.nist.gov/pubs/fips/204/final - RFC 9591 FROST — https://www.rfc-editor.org/rfc/rfc9591.pdf - Zama TFHE-rs docs — https://docs.zama.org/tfhe-rs - Zama threshold-fhe repository — https://github.com/zama-ai/threshold-fhe - SQLite one-file database — https://sqlite.org/onefile.html - SQLite appropriate uses — https://sqlite.org/whentouse.html - Filecoin/IPFS docs — https://docs.filecoin.io/basics/how-storage-works/filecoin-and-ipfs and https://docs.ipfs.tech/concepts/faq/ - Automerge 3.0 announcement — https://automerge.org/blog/automerge-3/ - Avalanche L1 docs — https://build.avax.network/docs/avalanche-l1s - FIDO Alliance passkeys pages / adoption research — https://fidoalliance.org/passkeys/ and https://fidoalliance.org/passkey-adoption-doubles-in-2024-more-than-15-billion-online-accounts-can-leverage-passkeys/ xu # The Sovereign App Manifesto Software should not require surrender. Users should not have to trade ownership for convenience, privacy for sync, or portability for collaboration. The cloud gave us reach but took away control. Blockchains gave us trust minimization but often degraded usability. The synthesis is Web5: > **Put trust on-chain, keep state local, sync privately, make identity portable.** ## The new default A sovereign app is: - local-first - encrypted by default - portable across providers - offline-capable - collaborative without central ownership - auditable without exposing private state - programmable through cryptographic policy ## The architecture A modern sovereign app has two planes. ### Data plane - encrypted SQLite vaults - CRDT operation logs - local execution - optional blob/snapshot storage ### Trust plane - portable identities - key handles and wrapping policy - capability grants and revocations - threshold approvals and reveals - chain anchors and receipts - provider registration and settlement ## Why now This architecture only became realistic after several research and standards waves converged: - local-first software crystallized a compelling app model - CRDTs became operationally practical - DID and VC standards made portable identity legible - passkeys normalized device-bound credentials - NIST finalized PQ standards - FROST gave threshold signing a stable spec - FHE libraries became usable enough for selective workloads - appchains/L1s made chain specialization economically and technically viable ## What this replaces The old SaaS stack bundled: - your data model - your auth model - your recovery model - your provider dependency The sovereign stack unbundles them. Users own state. Chains own trust. Providers sell service quality. Developers own product logic. ## The promise Every user should have a vault. Every org should control policy. Every agent should have memory and scoped rights. Every app should be able to survive a provider change. That is not “everything on-chain.” That is **trust as a shared utility, state as a sovereign asset.** ## Source notes Primary and standards-oriented sources used throughout these documents: - Kleppmann et al., *Local-First Software: You Own Your Data, in spite of the Cloud* (2019) — https://martin.kleppmann.com/papers/local-first.pdf - W3C DID Core 1.0 Recommendation — https://www.w3.org/TR/did-1.0/ - W3C Verifiable Credentials Data Model 2.0 — https://www.w3.org/TR/vc-data-model-2.0/ - NIST FIPS 203 (ML-KEM) — https://csrc.nist.gov/pubs/fips/203/final - NIST FIPS 204 (ML-DSA) — https://csrc.nist.gov/pubs/fips/204/final - RFC 9591 FROST — https://www.rfc-editor.org/rfc/rfc9591.pdf - Zama TFHE-rs docs — https://docs.zama.org/tfhe-rs - Zama threshold-fhe repository — https://github.com/zama-ai/threshold-fhe - SQLite one-file database — https://sqlite.org/onefile.html - SQLite appropriate uses — https://sqlite.org/whentouse.html - Filecoin/IPFS docs — https://docs.filecoin.io/basics/how-storage-works/filecoin-and-ipfs and https://docs.ipfs.tech/concepts/faq/ - Automerge 3.0 announcement — https://automerge.org/blog/automerge-3/ - Avalanche L1 docs — https://build.avax.network/docs/avalanche-l1s - FIDO Alliance passkeys pages / adoption research — https://fidoalliance.org/passkeys/ and https://fidoalliance.org/passkey-adoption-doubles-in-2024-more-than-15-billion-online-accounts-can-leverage-passkeys/ dƺ xvǑSE.:9(ؒ"Rvvs|!0$'0f gbpd_UˉObKL_"墨oC_ ˢȳQI>r~r1߾;z^NEZ>: Y0>lGuGZ#m2QVz}ogQgLJ|/Y/f$TixdTa;~5E1A\7,k{mcol|ExY '4[ll?!pZԓ\YO?ILD兯k6&u1CFrqJ9gUyf4_\hXFe5b"yvd\蘗@SH<;W8yš1K&ɞUq1, |őݯ³FwEB:C* ýJ&E|"@̛=)BMoJr_d,&7#AB }͑ldpxل gPL2B,{O^S2(#=6XJH-ya|(ǮPis+ >CcfԆۨ%2a=qd|gcEEc9G5X'E]I5Y"`kbAxf˟som ug툖Cz9Ye7vz3-eydA.*p,t=>M>`D|ד::m݂wD4 с?6bH(t>׳W7eMAq1n^P(śr>N/7(00$VՋ%fj4\B9pЁ IJU08u<,6 *G 8ޱ]w2wUN4wG>@\݃4v-oA5)FyoAxbֻ ́(Sd˺PsTZI `d̎ זCEI^Ϡ_~ @$Сgyi0HHKO6sW3.#M(l95&fLȮ6g)E\ }Pq &۔eQ|,HDEdMZX ؉X7T7N@n;A8v4v 1uSNwemP*!D͌3(3]t0;v$_SͨRj p^SFT\tq<BF v,gT}!mWnMN[5~~w0KCX81/}-pЅxvGcA,3e7tXP c`m4D*cP{.xE)/x#'I%/.3ok+(e =M"Ax'>>Żϖg`P->WDye`cp(ʚHN6ۊڷEl/Y_PV"VJ iQ (W&^caT׭XbO]cHXŕ3\S(t {SjqE~-7clL㷤D#uVNII9Ҥ69$c2j9v!Q5g,R.cKW-~|]^eIn.LOB]d}0Wڢ&?u8g5rpTl& Kd(^ʻFGnR:z<}Q, CUKVYsBޮ͎LQFQrH8]K^9g:gA8P% ֑%%HXּ Inr̷hX2FVڠ-[/cӖlY bAx,0S0jֺ)uS6N]~O Fj0` ZlmߨٶkЋ̑-iB4'*91v: ,l,v7JZn ,.YqF >S/f0g1iv{EY;a{fv_,"<_DŖ5e@hx|=Q GnQ]gr8 Yn3+\wdx/;G7}'Q9*;)))_!ncu`@zeUeB0'^F0;D[(8UQ%pĞQɑ>ZT0ySQuծoƿ?o\%b)czIcғ7#b )II]֙y pMs&mCSrpċ)CJOh  J@3=RHTkz-8㶪.\)l =CP:/V Hnci-|{ ϰ;ZGT"vq4 uhRA74Q>'uY,x+t9;Ej;E/buhe; 7QymyF3a.j]g7?HyXe8aPƁ n=/u8(SVl1chsg nwtS8g+kþHb٠v஬W.n qec{K 0P߀WPݮqgQ|$i#M_-F>H5.2OF zA؀S}јűA5zpJ#E F 4}3a0*XhMpd|vF=tbl$?ThB;:f('ԃƱD"@r4Lc퇞5_,I)fkG!OQ~xR ψǏ?k$#LF#QV-BleP8==|x0n CNNZfV3SE$ۿ@^L}gh m{uv" CԐ_w1>_)ぇXqIb6>iYYlaRj.L#hsT-Ŏ탏Cw>8㉟<>3HtTXRA~ Lӂ%soFG]uIa\Wg\ǎ&ye RY"[z-6˷InX}Y WUIMx*VbX3PuwC[eB}!:m4nO~ ahm-GFfxfvG*ڍy& ڲqYω<(ѷ( r:0\HԽjt7& ȭ\Ѕn,b ᾞBr#=2[a&4Ąp<@,ʟqx_o+~D:7߻KV;o{]Nk.yEEkC[0YZE3|K}4{#N\[ZqpO_&jϗ3HbAkU0|   ُœkiHHA8`x;(Y;EӪ tXl9wg݉'oKDZ-Rf)Ç8tMq$f[:.rѩQݿ3+R%09@&=MDˣMygOw.}cX(G2i \7١lEˀMɄD3TmNԑ]Ơ>[4P7pJsVC ɩXIaƵJ7i _y>0W-p0xXЛ 1N|^)3t["chLEZFA/RKm-ŠXGmVr<}:$ Sui+Fgٷ~@iN_#xS ;mL֭B1) qMn,ෙ@GDtt_y:Zz^3\ae P݊!~ۡ Vcl/Pւ d+bZ:(bS6m"1Q%kjuu`D<(˫nt.9 ͉'LfPO44"M)ՠQŇXCZ VcBT!^IlzR̭;J!e=2GCB|v_:iUp:KϦ[OfG.n OD>H/IL(W)[G2[A{M;'g~s64)5PKK26 κ8^$8:X1Urc<Y֩cDi\pV>u{D$Q]m;|W^ZW "Qz=oD)Q;饤vӿva|HAP6xT!u\Kp+#wQg ywi= IʇZK|ԇFy |m(?i-ĂHRjE+kbc A]oj+f`vkaVP*@D1N,esGDXhF]N)5jPU[T#];(`Y{4^d"Rf1ե@T;Ѧo5ghYMI IhŝuhHw9a.+[^qv[w8*նrF":W;{#tr$^>A bJL65MגGit zxՓ^&ڷhzfWjŒԪԵŬb/]HFFL ,{>#ǫ,ȩM/`$VAmrusc[Cu15 ^q`ޯ 8av>ZSޯܑ0E{[ \G\)=~G%.6@P~7#84+tejuӴgT:X.|3b\p)oub*_Ĕ/@DQmGZukx:W NRU=wb\L b46Zm6xUњf87%p=ޛq{Z{GC#VuHpCt vw4lkA8:vbjXspME\yXn귟1MsksH5K:;^t6{c?"=~@ E5|Z]c6Foe@8 |/a nHʊ 7+meB2mVH"4@7QyJyb H{9߈B' Y-;6@C`8$Ϋ <<.Zl4!#"DqS6:U_}u9C8.F˺\\粸 .т/rvބlطEuOKkk/Edxp}1wzSWE4qE% מUy5+ffU.jvc{}EI٢gIMCE5&;^rrjf+,.NYjBs,)_F5X[kkCx]('o j.Oswy9 't>A͊ɻYdKEW$\4k9K=eIeowY٘akE7*YN$z=5b: s߾eYާYOE(*⬮6Qdᬪ,&pVC5c5pT\T^ Yvv]طGGշ󭰽mJΪ م'|0>gyVS-<}[r}[Poj|b>sR|xʍ.m,QѠ]1 y~^|qȮYNfc+r:܇sehBd lgUs(f)}9r6,ǜ<`Ͽ Y] ],fogl36Oi? -T?dZC;шWUHEpyQ`m:U5֓N/3@a_IeNaQY.n^v)"7eiæD4o 65843lEΫim՗*i9_˲l-"/g{kaߎ<`j{k!?)Cm -E8p$fi1PCm-S6:/gdQ#& ŽShٵ+chA.. l8~Sa5L_/%{L .ʿ`9_23n_ Vg@eü/0jY)C+`ejBwqyv%~Fj>F(Rj1zY,PNOU88>BS#V9j<2X$֫}e[IkK&o9,!Ux6ؙCu%oHm 9ʾR ðB @_{,.E!yTCǙFd!~B d+n6e|us_ R bD^nUa.JOѮ"ZkAcLm]ڭt@z5Mֿ YxbL zomFx.aqшmz&uLEYYu梇P𒹱ˆธ@+&9ݰrmuBc,}*ʖI!T+cu@̬Z5 q,59Y: +tј"@醭{S0k1Td.7 @5ucV`%=yU2|306S-I|aV;h /86ރ^fazCTzrr~(\d^2-2+.\ ;?xvyFT5=f41>\4| ֞$$͖m|V9?  1kS-֞H݀ט1  ؈$)jJ (JŸlErm yKAbR#gb c' 5L HgL%q"T 4PؚxtF@_[D= {(A+Gor{Ad!(\t''ꋁ #$#A[>ox*ޢY8_f-^ B?6,̒Ynd{%ld#v*xhѓ\?1w#bo\Yu x!}_'$g݄eclWe\mJ.icq"@9Ԋm{TM**65eG)ԒֹEY@5WxT1k70 Jdґl9ӓt@TL8f. !^7ʏM[p2sucgX9IY;Gd0|t2tT 7ٰͪ;:ӋMzY"AׯR|f!Ƹ8 p̀p[CIށz˩i|\t$)(PL\>, J=Iڶ.jn3TɞV|bLMg)_{xBYߠ\cqEQM+gl55)hW~ݔ4gR> G gSA۫Gc=^rЦ+j0M<'JǺdV1 \ǔ ˜u/_Ƞa|<½{ƪ[yw b2/ʋt3nٯկfa7 %ͣQ%o]={yV(?(ه 2DtF#fX|m9wpF^-iH?ڵ f_EJ _1$b(Fҁm$Aq_HEO+MHRy SUOy~u|d7-k/@m xG|TˮØ|. -<~F!wے!ćBuO1ohpXՈ}:4`Z Vn}c>,;RdcMبd8[*ݞ r?+oTwk w?OeTgJ2-n.R+r WhswRtz9^'k[pFp\ +/6/\ob+ĪZ#%oKyI֮P Z:Ʃ)YxiiQsVd8Ey~AFQUr3v28cBr'gD%,ado:J>W!tȫp 'y^^Z6cbQUSb tږC)7-*\R1m[Sks3 êjT!qTFv xmN2"N mKq^YƜGgOcYq:}M$ě< 'QH:!-Z<8.k%Qbt GM*SSN8V&)yzQ`TJ0ȧfWJXX>~:}hG]rj S,zЪۊs3Zh!>ZŀXgŠ{pL;:4 "":RRCuN KE[RVi_lkk Ծ!^/44E62;} AZnt%Q֪$^ (ڣ֘F/ǑԋX $H֕e.Ãۊ$oLhDR-Jխ}v'aϱK*h+X7'A;^yUO_6NhMgvrhX&WD35f;Nv[_NTM:bhڷl$jn'8AA8LJ[AG\T<ԧU5⋛cp ynh-i?\x{9T(/dmːbYoIvej;>[ yOCeӥzܖ63Yu58)vxo}OɔɾxQMzWT%:"L`BuݶxW![0ȒF =6HaH"Yӕa˄V-z}?[ Z(]LЇˉrh3mKߑi?) |ܞ:MAt bNNSdBF 6cR#+5Jƶ>CuQPЫJ+ikkCf#!-ӿE ]E(yFҿJl_c]D«|q4;j# !&(uMgç 8 _GFY>5E}Ma[㬴b=2B nW@52 >/3N{˜dX=bZZThM+Ɉr{f+ p##neX [Y:lt6FX$!6F/|<<˄ 3]B'`H}+a1N3W_?g;tSPJji$_wSI:7iC8.܁#R?[ƴ],АH͊rtI|^w"uEYΧjM =ϕʠI]s W*N#S vր[MZ"": OcF [("w{vck5HG]2a92e\0KAU lϖR%dwJU/$Sql3s_L;_tc,{S'; _;@vt U*-_h PLzq{P懦h4 ^:ey@R^^f׭Sw=uI̭(+s>†h:Y(rb#r,bfL Uh.5Ljd0v?)%`1R}~n\!]6ʔm=#a(JL۾PUm#:쟳GJemAֿ[િg^]/KmFpX bs@Z -{;wv-po tҌ?T %:ߘ K79Q^h`O=[G2/UW.uT8_]^t0k?jA KvCҝX؋+j5~ױzQ!^k<3pnۥߡ,j}[5dEԭ7yVӤn4U2Y-tώڶ]#qc:tE_~+D3b J /^'[]_hy7ʭݱ霢A"%'oBZxaV]u9 PemZޮȲrdoK0bX.i UJZCEpjh{5J1[vcH 7 ]uv?6 łnEeYH X vP Z+LH QL !u&Mc@7JmuE3 U#Td?Ue[a1.}՘L< ~LㅶwVgG؆O@gHȮ=DCȮi9ϸiľk_Ӕzk)x>c|%| SKu3R=Cv.!y8OV[r5dv3蠙ѐNGN70~67`TE?G W9#-&4Qگ&n#,Sͽ2e"T(hԏcǫh} 5X@\b%jNB|OjkQ]Џ-`yZWSbܢ6b(pǦj2DRuB&bxF۰audfB~qF96Og%"jūp@)R ;N883 y7K`7,x*GhK3Gڥ$+ 2FZ75a~fC Iޠ]Q)$3*EKgzW@mJevmlt i~'v(} -Ģ*+N/ĘWU֐;Em_8O>z:Y]vрVr3vb.]`L28/tF>]h^+Kx(񞬌ez[b1nJ|D\y,}c~Ziz2j"[{=[lbƸv(QdFmusZf\ AiG즆;/ּa[E.0f=.; 9ㄘtv1IAV\m#`zցQwu`ӇW/? 1,BlT^fiZ̸~68XR(Mg OxYr"4S -墚=xUy&ߓw*&bn$>E\klmnWJ?igmD'Sv~&ا]|˧Vt7Jo3?Ko7 Al,c/EX8f4]v}|=V _?dfc5#̧ͅS&"8m`iK:7h3dSVrOnUz^1[A`0o6 i00H {tX V1-P/l K4ioeH $a2&0GӺ}7ʒxzyjVٍ˘q6D9:WY9˄>E! i]Zᗲ})f pǁu;$51;ig VC;8Ӌ"yVT2y.&hRS0g' ( ء7޶L :A7(HQ@SkBR =ʯ9*+h[a8 ԻZ+B Bf d`zqp5bp++:=C .bzc~"gËQdB{ bxᏬVDJ^<#_82 ܫ97bjOQ8@d>!e~;p8[&*3bIѵݺ<Ãl@^ BlYż.]̝4!Ϡ0?Aw16z5Gdｺ\$ T e=i&J@Ԕz"ͪ!^\.֬j]"4NF@|,'5z! `*gw\&|)UN9>,Y}|4:lֿ\ GWǖh6P6xZka}Z!t::a (cZH@v-BӺ?_yEsBj(UfD-d7㻋N]C6CTvr7,A0|]m4;J9l0jlvDcKgn sLTx<.{7;X鲸G5KU.GMDZO 7X.]Ĩ +\@>AIQɁxZGDdΨ+4Yt q"Z2t) Z6Tުр|?tYNcO~t TU ᗖj`'+p"@JPrTmo{Ų]*a/j4PLc('k4/*sBac>,N'tJ*ʃ4XGro6a؄ސ\/Y*g,D TIɐKBSa~m|"ȹZBŧ[!]qD%nciVF]&0fyERApְZ.t|1ZIt ?n['9ݷH;0j|nQpJ?Zaxk7:b4;{bNj^Jb&L3nfrq("TP TW b45N$1hVISbqHo~i^IBi^ 2Cd Jt32}\\]|\]lKJAgN^% fl9Yx340031QH,(IOL+/NM.J-%z ږKX[_ ;7_Z\mZ૸9WpMcjwRRK Sj3$E&Hjڶ5T>O M-%g]J|Rꥒ4R@{vN 3L;~&bu"vp OixKjOTq|#k)6OI-,.IiXt)o?e*{5;rž;Z.pjˢ;xWmo6 VdX5C0e] N nf,IwGJ~IV H{x.y6#`Cm jɢƱefQ:݁LX{h *BQF0/:>, jv<;FҍA3mLg#]̹gCKM LZSnXi;x +qz^YwRſIzv._w_h?n݋Ӈ;$\2f2XRݰ@ϼH*1t] عv:LɖYUB+GV uF[mmuzʶܢcF̱ϭ()b^ѻ ~&#HK9` K1Le4I[;˫1PFY{.X^{ﵳ17!Pj=A:z!4j.eְR~]$aϷ{vxľ""ԓiUFyLu׽#?[|%=@Jh:(z+9e:0cjdia:GFb^U~b OòxUmo9 ]j9mw鵩!P#J(\5oMK.ѡ3yy]ó9h[7JnhXnE]{%g)q"k,Wy:t.Դ@Agcpm7Ւ;ףQt_ot6wKh>(dIhm' 1OЗ̂[r)r=U.v:wٺr[.%1 a'̣p,C/wJXK|"VqtUMe; <._}v”DŨ ;(m9r4_Y 牎MuiĪ5֟vmzN3'1c D )Vc ~Q Bsu]:Ȝ'x,|PA!;J‚Jq @jn 9"([19Xݿx!C.jIM;#L*C^J_ѫ_Xvl+6}/X#^j4xE2_` Z=8Cc F_ƻ τr4Io44\["_74:ebmP z2;&a@@߶8=rtm/~se_cYFQJҤAXL+f ^Iͫz⑞p?EI=O^Ov4g/ ʴx=R :˄M_w{`uk;P]NNp-7A;[&[LrQ'6{zCK\A%!}dmolM+&v4ZdCޘ¿˩keѿݮ"FoѢ%N7ybIBVM9QH{mHQ tA ;? V,oЌNx$ L9xZo6l`/)rvHCDB$Q);~CRlIM>|Lokݔf:Z7V$,ՕUwvitcӺStEIJnriWT7LYs'k*Fg7nԣX snT61@2,+B{UsmaťȵdI77m`VJkV۴M'kf:l˺NV= @䕅05RҘ[tF گ҈d5t'@~^ x7. SPJJ%2BJĻxZ] Qn6T&] Y5a -me k ٩FX 4B{3$ER|*=$!%+/\<`/.g\.bS n~ʒ񗾺.Xhۦb!zQۜ٥4,jxO*g= :`!LсaKڼzB %[:4 :vp`a %5x'*M7B\V \7ЬN)aUC|=4ZnB6UzQ'ыV/ U/ otK#&;j yQ{Z\ώ\pЁh8n"-žDbFO7ЄS{I~&dQ!`rl9%aoDHڪyD`Ǥ?m"dhp!`wT ]Z؍6J43fYكV':1bQE!:#<2pqל6Lb1݉D_fhI^GF/yb';eg};ҳ>rһk^%K͔_r%y@#/_2H2w $Z9T:V=Zʂ]}Kwf]?urU1H3o>$2_܋3=:*ƥ=(k G<`){. wsעՙI7BJ %Nl)^ a.ɸ;ȫV&rBcg}ˍ5 7H,%q_$t -IH8fVU󍾺aMi8J[u TGe!Wե}򆸷lیðj-E'@jwg@-7+TcAUXP",wGᏓN|b vZ: 6Oƃ3/!Ty}_~yXLxoH( `G!<^WrX %7sn)V|èƞO0)AD$ G>C`˔Ky#k^"ow{ sR:Q(bvu[1V591~w1y.Xd8"]a_UI, B ,.ZRЂP飫ϭ+|$+ub3 o JƂ'ԉK#ʼ4&2Rg0Tu]MV4gGl8y xT8n_~|+Sl0ܟsQv4*ծ `H}O8)Ѳ/r~%V8 /Y;BGqN]*HF)q2w!1W8lu|{TҺ"dF- FcVjd>vw+f[OY+BI+<8 퀼(!|~_[ԝ 81 A=G7\׷PgyMa)#П{GoB~ 0z9V욟>e,/z\y`ٳ?3xOR4(<_5]0GvUr=x:IqUId;~sT9dӎui:vN!so;n<@8籯UNM{Il|'Ft^u 1Tyg nxsyDcu JOem=$yxh .Ɔ]'| ]$i|uDl(dGoVe /bܸ`*7(ej]5~rx9=ᇖF($򔇭(G/e=>g78DZ9!N(2֡RSt %O4i0Af.w]|P=#BJ fo Uk7H[cu)BB{X8lyu_h- IV^o p-(9|]p_nv_8Rƣ:$i\y4x;{BRFb^U~b~JRRzfIFi^r~>Lf: 82q [>xBK4̳+ ӳ& w#0nil }wu# b J x]s6lgң4muk]_piƅD"e>l] HJTQ`vB;~&iӓL~0I=g0G|08I'4; GmH>;,FxNd 0NcӑX[0%1i?ͣ!{ 4^ `m$1澛/l{y򄇡]M&]vO,._e"aw q;.ñӋ y(YGO?%y qjpJ JԴK/_/xQyhs %N胗]e3C$S[^>̨o&@gPFxˣ)J^_"J=3,PBgX45g6q5-*u@r.e5ʈH>slm$Nx4'(' î0,.NӝQy8}6,8@W$HJBzlMȌyLY6,Y&I9( XbzJz1L>9]R1x T*/t=;B'KϳQe8izfʕjX(N|ͷ~K[u*@h(paϮj)gRZouW`$OgtQRbgUMBP?1U>ӭeTs 藹"˯H1AEK\$r7 RE4Y)%ج\cֆ_¬ͦ/"J*ޱU9d;GLQ|0tsFib}TTnl  зO|$r>=.F(IBđMӎX>͓'7L`/K7Kޗ1 ΂WV}xm']F[GYrkGn 3i)]ԮJf\ΦRO iװ"){`)삹q4n$L"`@9h{JpBwS9j;DJ /43CJE~t::ud1 *oEc`I""^?0XkS&wOWL3 v: ѮK:mOrlG鷖!#DN4őAr=\Ф .K$;xq/w_xȥ|s#RS,-Bjmz6;_JQzZ=t20ᗕds'.`m9V Lj|Kh(}'pqa.5!Р8~ԿK!$;S D:]TNY԰$s)2$"˓>*%KDYaO/G9yve.p9;]yySU~ {k^ !6QFHMeGЍ'6VJi 10ton_J7g]ֹ^9?ovqiT)8-B.[ۅmI/ Eo(~;4ˆyh[.FA+w"ozQ8흇o3u%X;/yt޻ 4nNW*j5rj:-V{N7X_yE[8iXsM<+I6>Nwݪ|W& XɿYY(ƗY,<7?E|j@d,\rѶ5mVK:nB[4geӾxfy+>ۗS6g=Z15,5,/%uͥ+9j=њW1}̓z#_?ԓ[[J YљqDo4HpfK  kN~mj{=DTYǖg;bYJP\1K^ pvMnŖUB : e4:NM[d@0;aqf~8SU53=8A6o6y[,=ۡo 7 2;@0N`Jf:P$,O`Hs7gge@s)Qp lԣY:9gq~0_"iOΊb(qIKr",VšR@VllF4@I%ʵ0U55:ǞwѱM|6&Ƕ+9XsJu;vmi"- XJF%6/l kmih*6,z_crI~DYoW[Nm¥yK~Q%v/Uͣlҡhe1Pɑ]㶯lS%s.X ^ئ"h2aV+^p!>L:\PEGqT ob2ǽ{ Ki9{g浤Q3 ՞w}U)q[mU7QZɮ Qxr";/ 1'4j+jӍQ4躴b6,^4o9fza7]|z?d~λg}:߹;+ꭔ >W\z U|9> ۺzRC_ UZϲ$mEOru<<@W(DZ~oВթu4{pFVϪ`T׶Zv "81< S4#`ӄu:M&35λpqyn {1ZhDO\S.#>1>!DZD)R?5萛ozQwo> $_lU} hxTX4<~V]^YN2\'_!sZ4&ӡd:QIe:MBqvsǖxcoeD:EP|I܍9=^ n>N gA9z- h%j׷UC>*&Dm(GRi.[T`% ,Fgޜfj =WMWζZ-_6s銥}d}χ6Y,zuT{Nn2W-8RjPCHfG<B!@1 .$*sHϯ&(!IpaMB-==M+-#NIX 74ȍFZMБDEsh٘1(x˟7@ v wlG[xiv٬Gi>܆h~8jS9QHZ}k陗N?lhA#c$3p?9͗};*iSV+Г_p˧K)Tft 8x[$_bļL %4aT̜b%.N̒$\}_.rl>yqt xπ<w-Vx/Bd‘U' 2MeUPJMMHKO|)3P{3;[-{\-x7>xVm8 b6UReC+ݧVTVT'vե퇶anvހV=`<3<~<3dنR:5pȋR*p, З6KB`8ܳ/R@f]%,+y.cq=Rf4wLcBpDs9+oQ,>8&4#xLrsC S\jx5_Uf`QŠ}ɠ}$m\̔JβY &5v;w.`'~cV(u9kGT|3wUڡ$xuj^`!_Fi!x~ i =j4ǯ݋5+wߊVf=Q=zKmBcp],W5K!͍䶤;00-ґUφ%M%F1خ=le M:<wZԨd_Wr#Uw`6j'BHQ㖸m!W~#35\[EU˯PWi$c(nJ 7NIݸLpٳ&JZ[fXNB{G:m([c1<9[>;S+:H:6fa%ϼKxe!aӫ:'K,NoqZSEp?'1T2mr[_9T )ENEJdmM^{R\[Wѽ:8%tw S n.P|"mC)4]=Sm ) vMuG OW;b6'z(-F)S(s~ h)> TNKO<'Qp4.M?\}u:]\N4 v ?(ƅJa5+$nÖwVu%EC;(CFI `m8x-RtB GFb^U~b^I8{v.= J$x{)z\h9Jf,,@err0 оxUn8}bJui_p^`@Ty DF"UjP-mbÙ36+%BMcP660h6VЪj[V2sR+Kn<)t3_#s̿<8^.sIOqZSH%k+ Eg[0B+Ugi-@~)mZғZPb%Z =m@+,bЭZta-ɻ7nT GG0$bLyIkawj5ٹ }i~/`:UTIrWx_ ߕUC\Ѹ ' (x{bO~\/z"4աapq )jlPrkb*+pH>T{ ƛ[|R?' 3uI ^ #?N,wRCcx.Fu㶤_%ɊpOlJ \KIaǖ>hU%G;Cx Ր )I(N(@ }*Tʝh&' ;ZRWiNJtpf8嗼x[qI6:UewEnS6g6uIN*U&YGSwl'^j}V4$jm3Β6^[㚏' 9ؕ$*55 MsId&Q1>wř'޵J>IOI!U" xڿsG>A>lKY#T3~6frn!Z{cj>^h+P[x*{Va/_] $ Rzx'-8!##1*?1Sb}S%9(uw&͜W-xUn0=WLҲaV֪j^hٍ6Idž@Ҥ+-oޚe!lڠ6aȫZ*qD. 0sO#T=gcIue$?>db_@ȩ؝8x죷wrw*AqWwzRr?:J؂4zn#/.YaQ1' }D;ND09da|xruA g%rlԳLVƨD꧍A!{'x&ap# 6C9@w`ϦòU8?0nu?^`%:#3gByQiG.vq'焨d+X^ˈij9dnZ2/#qqqNO ^@0FF/!n=9əTn6|W&b |c$1"Ddbzפ}0œ`m 30drzB>K=$cyF߱:+K|?퟊}'${^ɭv}? l:DN `}uOFeTHLv-9 HelA\,~C6D1-gE؀ɝƃH/-)Uqyƻ"%',ѹK 'BJH@;sxq<=CԾ̆ I7;4&_I<&b*+/+r=#i!J呫h1= /qOQ&(.UQ` ezp,$ݵgI^&%K\`FIM̏VV|^$Q+qߎ ~Yr0f&'OJ;Hi ;lVvۂ4  zG7$(T P#r9@ZD?Y^wa^5ЧTfE/mTܚa,9CZB a`:&5S@93H KѲ$z# | ]1ŌbMq ~0m_t`+<K]D?[-qw-^*FUNdVxZ͒FZmn)}9PMGed]~Nt[l[1esKݰ1 og6񻺽YƵ +OޭAn%}d (H:T[@}yQ8$„Jx[lIE1,{YI Vs >ok{; [U{\#KcPiRd]%ZȲ +VŁ \"=-@A <R&ڲY}"GUGiഠ;jW4 xUmth2|[7Xtq'.FZA&'7ʵ~a`٥oҐPk:p;%KRhNƅW;wv=͵\)ҴҼYYC+:@n-ktbxt%:Plɋ`y7 ‹:޻:.5)q%=a !pfwcᓧ(Ϙ'g[ X$&hlvMO~ Z^ G[:jUkmK\$Z碨Gm>9W 5OM}3y ^1ce: FkWI$L\Vfvw*~Ujfւm-gޮZ>W, i0+3Faw688O*88 Q5(RiVQ5[F>]0 -S'ؖk%#m٩>'M'֝ydiᆖiCJ?I5fYEx؋\r]5&CŒ^}<;zHpyi {kݾp,-u2ro& ǢHE ~Y׬!gF -`[Ʋ[6'i,4&pF+{ p}C=󼝯{rCҥ`v_m@=0+6 iAF ʼn2{9k{-8m넵5bjOCZ,-<*qUx_-+)֧ު`wW84+Zk }]^Xv{KUr严VWDXo3Pq .6b>q޵_)Td,o`S֛,힄-2U*K}Z^ӮWa !x0pC%L-&g71c\h>y;BnLz&z& E6^dC0'$UPb/sL0Q=#= X&;pr V%g'; ˊ D2 @&lWQZ0y7Lc[;0_/ -CIA>xESMldY6u6I:K'>MH(rl' MNhS%h=iACB iTi:qā.{}歍,Loix-'֤Fa="N>@UZ[ :6NZ X/]J$~b$R!9ְSȀ T(txt)f2i\C_{$MYr.KU|/GDt㴡a*f?=FWs8#> Ao&yl:(,J4]Q'Դ2O1g0 /˫4?Vz̴qX~ӕfa^wNK8A+xvE) ݎ[W&零be㩖L)tsTkLŧզ`ǴW.b VL+Z]p?ABf=$I}],rMMZ%7Z~$F&mmZ:mբI) -ôe,TETilO,ܾ/N>< ^xRO?6[7.2 ir'7,JtqP r 1 2n ^ , ΓNQԓX2 fiber/v3 v3AaX?^ api v0.27&+E6 q F3Q $10$=tk2^ _H-8% $/&H*~kF1%*rU1I޹Eb8$BڛH0_ 9Z< $(AZ_6KU`= K#s\~mC&(7|N檕&>L"6!s*6*TB-mϼu=uA 8^v O3!PF1ǔ7#CK-Y` r _D905sԭ[OⳠg66(^hsK33o3LzH!1@"W@0:"pwbŠvhR&xG u{rfA({*0*O{Ԣ㴊ߑ!C{#7:^QƝ;OPX5&oW'qӻnKt!HQM˚ڡf.?n_w`O==IuWΠ 54b8dܕOgI&W-;5ţ 7j3꫎+ذK t)Chtׯ8s #TNכRs[U4$\dxg23@`P D֋Ώ'o~ ጠ?03.%zlTC)B.&W8aࢢbJ͵>VZ1)並swn=!R!4#4 F`CK&~;e ?y%}%Q 6PȤr? ÓwOm] mAPlh%eeM#(p+/gAރ. /v?cJs`-ǸR7vDJjw>CwNX;1< wl.{,>Ұvixd9sh^%u0bfYnaYZ)$KEJ ?^~Wu4CZWoEun|N~xz%ƇQɶ0ugޕ[r &1IDƤZ4ᬱߎA{`<[*u / 'i&gTSvLrQ*Cx/޿{qpc6gan6Ywcw !7o@>Gx\.'q*eBQU#+/*}&BF-Y5r)b@f5K_6cl(X?cn yЖ{%IЪlXrKiVJDRU9Xm,3B(nrթfY"#I K~$:py>x^a0`ԽĜ=Y-|SH)Q-u )يyep9PV| 8 zt3Ksbz*L/f-[V'`SY 酡Vx:rEJI'_/"]~(*>,M+'gΖ+~76& 7%z1-$!7o,Io>%t8"g-.B=yyWni}nL/rev;׫ĮtKjBشۙ u}"]܇6R<?JCd&VKnUt-u B,U=n[t<d݁^& -("H.2Lb&5.C+Bb `,p܅տ$p|:ZӹG ¯rd!Mr@ /sӻ}Nl`6EyaܲC7B7 PIVw&"0RW;:L }#ǍA(țK }wB ;'W ͐!?YRӀ-3鮛-ױvvRѭ̊Z|Wsu}( ׍7iXB)Ɯud@=w2='˹UChR=>Jy{(c_c?t͐CyjjKgBIRmO;A|O= 2"&ב tU9qU>m!{~YjwtPkXɥu&'L:+1A; K 5;6|op.|dn?b_s%Q,93-A\[У")_%M= OCYjݖ!t!.85T'Ԫ}FC Bһ} (td,v_ZlÚ^ PF?Н^G8M%c|lISJIm> tl_9R?q='{@J𗶮 6FMH0EVASo7K1:O ~cVcj8gT{;zRB\4%NVipoDBܣ]VhZǛw\ͪҊ[B74_*q< eqpt< DB,b.0pMCS3+τ[Zۉ2%إk%e!aĄOZo0< egC:nSkP0Wk!d>0%'a3_?bTH[Wpw!2heB Q>꿚e}խieKͯnNNCӁcӯl~y?>,I3cF.w -_1D_Ŧ%5S+% B\*i^xS]`&CIi A6[U]9&G P{|/ڞ5B(/x-D>g` G-0Yn~)cH_{O-3zxPFiz f',,i?5s'RPN咞PnNEziwwN<8@4Egq.8FHR$ VsYsӕr_9ճtW(K0n%\^8ڎn㝂.H.6KiGZ}d;"8P2ޗG62ކs 8^lg,~wP< Qk}'LMqG $H*Ұܦk}8FQ8"Ky.&R\ԍN $/%ǫgV~fxNIbGi?ȰϽS(Uf[0MHc"71kIbI9HscP`3Ne&h}zmc$BXtWA_dC~XiWUdl<U1.}<6,w OC`y:4i<|]iǡY?1ǕF`:Le; ˕=%^ޠd-gX?>9 Ip~zBvzJаݦRՊxпUu](0)"͙Nø^\Y}]$O8tcfN$rM/I4\Ko]PV#߹ ԯ`o1/5 l5Msr̕k# B;FR8A@&P"1@Nǀ:&8R Na{ryYX\F%H/̀DI¤iC#?s&\nBO%6gb^AON΢90r/~>tlF9(ϫ+_W4!te7!'>1^)yW5~H}uCi߯Q(g7(# :;6Cp0XdYE7}.-4ߔnX`IĪAc ߅Qw>"zTƭp]<ꑙIL۠cܚNr(Lˬ؝K%ԕH`vmOg"a.G^|KЎ ڗɈ3$nH~pyN_ gLOL}LE?B A C@D}2o-X+~VКUom,c0;X||(_`Pr)|6;ûv -N/ưҠlA'ToߗB 50"G|縫Fߥt~G[OH-OS""xqA@0#Hu# IME`4p8:夝*0/y_w q401Y9ɑK~fCky=v_M5& a $P@/#2qr=HÚw4FHecHp=5':{w1m(ooΚzq4%F`{lB0 !zyPNsZ〲>,7{p=2DZE^g/QyFA-\?ݍntْl!\Y0Q!# p9czF6}PS,Qǹ¹b0VxG}y-w|ֈ qPwX:I6x[%qz15O6xPϭk:29Mlx.K/ɺ{zx0_r37}KH$gW`5두ޖN9RSI ۅnPז͈@cLhS_i 1؏9d?8>z #F'ⷤC_a $ o.(SLh .s ˀy6x+kyT)tj}T/v~t(hQ'YJӑ#SXw Dhoo0`5e\'IHf&wֺg 1OA<[?Hy 2Im6/[mD6TyPywwb2>[O5f3BǶNCD>$0V;~xWr=)QEw`"uX-}V o D K X|eoE j+_d}f!`B1/yi1~@)sw&<{Tx첨 jTE3#Ѣ݁_rνo7'tW-ɜ,Yn 6;IP CQs54  f-ԁϞ2Bhd`̏n'NSm'QRWhg60$T@v'S&WעGCa3)_y#/D߻_X,^]ƸR /H헽iqK98j*wm,-Yft-C݌s(0==R8 =3 <թ=s'B8DlNv :O].Ϩ&ˁ2v+;ָ/i ly$.3`v\MF2DDAiNFuCpkK*H330&N6,PQy~Q*F 2$n(61}U+)}6sGaߗmבtĩ/Ig)ET&!-h2n DЏ'c5ae7P0J4 >߇lG >CRLg=@d}W<"xiV ^/[:8tuǡƟ/$ ;T #trK49G;~9?c5FF,$j.,RKns!N]=*4H8S;jtD̚(:z~\y.]L%No~i@&vrȚD\_ a O**^΁&4Owʢ{t`1_y8 7GAA[Fu1i@N*}8 )yA-9_Z|V$x:+s*7klDԻ\( &2QMѯn9ž>rk9@~\5a1` QB9+'!kgfǞzoqG-ٜ+Q Ȳr2Ɂ$긿4Y߁~([qoxs37nʯ/k( nwҳ}i 1IkҴ@}Jق@ y&蝃CϩV8wE-;Uu%xl@)j[#& v ^fx2-aiφ퇅Gʮ0Y` .zDJQôo\K jiȗ>N z1<9F4A4/ Uuᴙ'>4rэT) L>[/Ԗź,NAeúy`k#t_* sV,I_8Xջƴp'-*b+tK#ړ̲ót>o0"M>&9 Gif×S 4?Ύ_ևs⧮4,7تF\9[I}GknU-Qē&7W](!z:~ ?.|Ic@a{W +j  u"ί]qꣵ'ݥa( w:+dv)sA ʿBf|4]۰X `\h!-}JnWZy3RgMFj*=mrMj5a) F g=d5u1^ρ~KtK:`6?:@*<^h %nkyલN|=]v{^A}_x?>k#S>Kyh!EZrQrjGM7~?}HS3!J. 4*TR@GZEdY_Wzd~)C_@;@Ï "u:>Z["!LK!@m#IC}:l-q,>3, j3c@Һg7$ľ9a\pHQM|Xz^|~P1Q%;RSa\F[NbHB>opN}\5= mPsͽ 74(o{?=GZk<#L¢mqtNfRHkWuIPct#P!4ՎjRnUQ绕x͌_EGaݠ X! X#h8#3'aO'V L2lt.RL [uBuV ߲yN?&ls2͝u aH.@ zsoիth]$)TrpԪ~űEw}bޫz8^LJ B) vzo%(;[1NRЫ- qݻ\G)4Be$b5!r)ǥ\Fp"@!}|{sh #VeMmdǏE ŦM3g"zP:nOBT0?:1+Kt?Gޏ@y$n_/@|Rsn9[*r|cxZy"NF1q?Gu`Llynpȱb>AU0%|,5lՇzl.DJӞh?tU\kx6֩kv쥫y'#9 uּ&5/EW a*b^ˎoH}N4.F>ہ} Nj_~_,%B^$ۛh-*$4jGA.XolʊJOE\TTlݠ.VIϞxxĽV??"gX{QyF…8{$b@xWWJ~bA&-8HL ux@wq/&̫*!"Ц v(+xwWi@'քNZaBr[k }@<ʾf)h NV:zU ,s⫡_Fz z}`b Á^=x@|er/`?ODH 6 w'RwDO~aPAe,q,R-ED=!ϋ| KNQc\өag@lЕ]܍½M*v[߇o~m1Q 4aIo{p>QX@jfInufr.E;KT϶5j9Q( ^Ue+(OS;z~Ŗ^ϓb}PEŮY'J2c$ik+}|=7pQ\wOD܍߯1M^.- e/&7tTh6e!qKn$5V{E{q6RGqԝ$R%%hmI2 Ek5:}t5 vTHZPɍ0lYE.y1\[:kC=k#l1&n݌AYŷ9bՅ ˾63葿0O2,2nej m1)t=rQy\g_FN?0}w#yxP9|⟤cq\C m#cahY}W)aOՋ4ZMa%]pXF'To3'$C,!z;vy9cUaaa+fW^1n hPOҬK?Vqt:p5ڍWȢ!¢!;mˬ.C-l@ְvqC&*ǙR0+J$B\r_ǖsl,"pIwiҹ9pm-TާJSXF\,@k$:KNGi-߷E:OL8 [l'pEZ1ЊD$ܴǼP)cgJZՌl5#.SV_ǽO'ޣshTv6>jja#qn?= T2iPo9w#%3r]oQqӈQa]:J[Rkk5dSJb1v='yųn#=B.&,J8sB ت%OC1?喼Ő:LۅV,2 :1}"?lW';+2X;I'NQ#NUu-+WI~Xk&@F9w+ȠhzS >d!qĉPRN pR7\jZ" _wl2a.ђڙSk :_dB0@ZWD\7 ^,zrFNܣx줱$ (Ɋb:Y'Amlmj" vC7vD{>k,UbipُgKYxBS9"*rn_~;rw*1"*<+]'8pwK$"{y/ ٌ^?ziY74vcqTVt)DQәFȀ7qO8kbpo6o'WnҀ@M-t6#;['uN;NN^3 &6voXK~b> [go|_q2h1+'ѕPuS4 iKt[ WOoH"}>yy_dmѴAMֳr@,oGSy^ʔ#>JB[ wF14T{;LUW<^}6w{^rnW^B-¦niCaJ5L2mbpEA?}EF`B`2}0B<y>t5mϡRVB'>Mig= m$˳ObKY}8tntEy<5^"Ψ8#[8?@ 5~>Zkx4=."YվO؊QҔ|j`Ǽz~Mܸ}EL8W h=[6.'fIbx<|'aL5-1.gࣚ/X#`_8C0D>"tVuF1KDŽq=j kJW^XJ)D>9aT!kD㩛$?[6>[ǹ6S ZZt+baDQlV{n ̉>F"7VIрpmJ<Մ]fhO2Mk7?U ܷ]67,#v&M B]]ӡx(( XPGVQ>6͡MMmxHpky%^O])29x*/e@B/gq\cb5qsXrr}\e# Ϣ3RYZfm2M,CΖJ\axOYa8n,TYL'j\=W^i[NťG"'!c؝O\. ^l<:(a%2ݱ2,Wsyf|ä%,_?d.6ѫe@%tPvrA?Dڎr8-?6JSJ7hQўw9W9P1q||.rEUufՃ^ e)Ie(炯X .GgR:ě+Z};/ $N#S v0NvcstEp\_= "6#q}O6r0| , 7.hiHp'紼#\iԶo+<7;& ?mP!e\L/X{=}IxIKXq>ڼr8)2$` _n$R.-Ta:N H~d(2銥6x]v?ɲ䶾G֍'0|]]C{q1g)U|>yWH;DJ=SF2ng˝yOxC=[_^Ҳ(Y R4RHjҔLwg>#޷^&י~N7zxp6 To27& 9ߝx6)`'#&d頛hW;bwr/PC]R; O|l=6; ۩S-V,* }7ߊ+vM M{W4O/'2 NAYѼߒt ,@I FbW[хt!ok[܎0T2Y ":WUN8fw[~;cy1/�b&J<|Csq;6t ÙwFG&q#aeqnC֮.fh* .+E7]Rl:f?j8%-?n=4zo9%0vCx#E!|gڰ`9Y+՚!:R$cub}S;`L|z8 ɧ(+/ۼA>0k˻wҳ0x"9Rk@gӦy;e/H{j_cB o1`l!όzcY"OzuXB-+ ؆{,FE ("]ȔGh t]SYxAn{i*r)]X SfJMq鏖Ygq֩Hwo; k7'zU#J e{v*7t1O."3˸f# DwVn~蜢?fCL 6' 7b0 9^dž:9T(] 6ߩxN33p=1N*0t¦P6*iNr5;P.updڶ7p7 iURTCOGuN`\NojaCrn|J65a%/4bRGKѲÿv&^~`m6YHNjP<4~Q+1΋|$e+39NxYqmEDRX?YֿxM8frİ3SN-U(ꩻ'. i# LVصf:;cm.`W8U@B6G1{Cآw{}V@̀ݒVdu ~|jC#1kRN{|/=VIlrTEuuދIQ'QqB|s}CB1}W^ٰbnY\aWv6_mN̴]rFJ;݆d$)ګu]z7zD/M ͆dxZ;mwZθN{UA2$Vѐeo轹gAQc\۾:Ľ4-{2Cdn}N%X=/ Y|yuʍMW+&IҰ:w]ۈI.t僆E-x>:Glzx9磅!B'`ZŔNH v$Y& a2N{x5t݈؁fxjO<%>%J+ơj!=O5ZLR`?*Ajst; \r×nWW{)ufe:JH,ڽsVjЍ;MŲjLcj wTa{=f2{%A,X7 5H~5Fbua2rlɊC-\gTBYTj .n3H,bRw&)sbB(x]i>'QP+8;E?F8 S{FlL '5ޝ;C"(iOXGSC|Y&ճGGl_ӂR08Ñko֞] |ܿnwۺkX~IM9Jq;ըˁ}\[俧bm TѸMGTYGI{׀ۉŗɪ-PwPy]b;UQfjT\0h ;uG9Q2ћ4|҂&.s{ǨۂW>`"ócDHA3[&aɓL./ y{X:a>띾xq"h:b?*h<+N{? C?NOI<x`;K$]:\0ܾ|' Ā׈#Qk>"M:=cZ _nap9`mB7'BcșX{VVMا+-@o/ڛ,·5%#:vd^zr,~Y-5dW4>N]DR:P ]V#d˟k>| q\ԸjԕpIsj" iFXKzDŗ;|-RR='5M%vD Kټ K${!DC$;{v|ٵ䗧0F Y#%wNdĞz42igM}Ik^;xWm'Ŷj˩FPh=8!a{"SFُQUqŽ_Y$yFե iGtĢ <_urg_dA)X\XDQ^G^ QrSmu1Pz|ї{NJ䜚Ӄ{+hK٪.EI}ת\JY.ӘM C2\CE?[ /@K k T)X{߲H1lR. KvΓc%ԭ%M4V4|j+Dy蒞Jԕ(+eV[iඅ2>_ruѦ61umz=UFA ˭_'y\v£p/9-_25t@yLե_~YjDQ (#z Dw0u m5vy=Ԃ@0]A!z~yUȄĄVS(ۆ mj;(crʓZ2[-qsռtmӝhy3 X3ttLidCVQ/clà;:zd86k=!"җPʽ!;꿁p]}k4TM-]BH jDi@.`K涚qsL>pS$2FnWŜM }_wSpť/IYYv:UM`s3m׀[_Qr aVU#@{(.AWF:Ϲm1;NGDUwE F/c =s{aW۸cHY`70u+N&dfvKQ #q14&N9NSFt/ GcWrԡK س@g圊+8%C]V]ReaWĴ%͔L~漹'Z\ K@]zN]NJAEJS> .ܾ> /6<=M"**Oɴ[9投%w_%@ UIl^:vS%bhȦ:D(}2P_& ޙ Sj]Y-Qp:6xvpCH-y32PQ7/!*'p؃A>Sx! `o$9M/жeEjH:C {,N˶GyG o'hcU.ʰ`o{4mħ)X١k(0P86ۣV Su|hb !\c:xioP3}xP(E]Pƾ_m]н wɒ}PȾ^1,-zt45] >9c̆VPc4qٯ&W]}C|`ԛ_ԅ L [*uurT` mv0y A094n~|Uԋ]7MEApgCe] f [ ?LM sد3qtJIi:tgO.\瞤/pcPx..!S|&͚Ӣ\}NCnL1 <3ysPR><y5#o! >c#M+VġB ,[k/v'2c~2C0o 5?2<Cv@pQ15dj;")ŻۘAfp0`R*F9 9y:蒗NA&UcU]w9ƴDZ U 4y ]^Xvgw߰<۰QF]w# }_Rch;G[ҩ0odLy%qu-{t#cR-F.xR$(B~Rsǻ&tW_oW?U  %"VW߿:&|iH`*0mF+]ԭʰWF߫9P'HYGv)0*9~߮@yrKlN(I{@p[BӠ7nsg+w7c"D:7Ʈ7K3K>]$V8NBXjgi.]R>Y%4RunuX+7'Wj;59Wk6vq<w9")(Ab.D}¾,y|hp.;6VM/#0v*ӘVOTa҈A]cwBCˀ>)`}?Qhʧliji$f=u;鿂ۮU#{Z5(gt Aվᾮg'wvtC{cfj\ZB)-wk¥<_ Ğxk\S8Lv{@5qFď6p%-~fgyu$yAn im(ہw)bbnحX;3qGsG`A\2BxGR`!5kϋ,%4PxOYq DF9Ohw{7">jZz_JBjQQX-"?>GK'lȇV+Ȩ$ުp7XGYʈ{2ս QԄBq#+D{-ns]%;t;6tCL"*I0h7ȧ&栌Fqy`zy~C/ Ue*u`$'lrXX€Q"ӠiR9( WzGPS`Ad"c|a/]L+VM[zג*cHD]5cuN{|9v*V82۩2HO( RUAąᕱH] mT16Prne2Ī~C~!z!yֿDfNFk=_v7bDE >xꥎ:x`q? ҅Jc|FyrA,+T {Z4ܯ6LRzV75@Dĩ+A(}d*-Yc>VsMNz7)uuMaO/USRuk_%jt]MDWVROceh<ڬH☕zOWm<5 ^(~ȝ࡚ xRwļDݍ" ;ٳed,kbx˓dgܞGFt;+m*t܇xYΔÌ L3|H+8L_^|ޟ܄|pK;n?h鯪KkH3$R;T ؜Y;˸RYޯ˟3s#Y7gXeT+ET.Ƈl+,GruPl)Y\&B~Ap49i;6cv@l:\؉=N~^_eݏı1 aVrȍT+/2: ߽>tl`o`~5VcǢZVR" Y(EvAP9\ywZ ,'m5aH-NqCfX"89j< ?7`$跈%$iPp/=[+mR#bNqJ1,WZ!=/G~ { 2E֘8lƃa53!{+Rٔ)ܯ$W&! (;R9jܘ~FO|ډ?TPy~0A:yzQNe-x/!A@-t[.j$8k:읔2LJ",y= CGxy(WdZ7xv@|SHr8cOLُ d Kʿi*}w{ ds j[jNZh"b::GI`OK t7DgO 7j5rwci;LXH8[/(آhJqT9hi֧.!6;E>B93HzPX;TOu2h_=>Aˋu/HE/_hk_o# B֟QD(p Cy 30[I~ub>'6ʜ~]W(pR|`E)g{=jq-c@lda"WnfljI !hC7= Aþ\Y%q4z'~yK4E)*/^2/ !8 Jw"=5SlfaR-&RPܡc62԰VQe3ɢVW8WQKTȣ|:/b&xu:-x%G.bm2"/QW0`ZG{Q=Τܳ@Ή`+&1ΓGR+$atk{43,!\ޘ]n]WIJ>l `@- <(wCC ^)R({, 4(ɥ=CO74D! ZS 9Xa\z 87+!Ԇ89Jz=sɝ%ב+V >X G*AC< @,6t?\/zQp/1=70'$U9}*w)gz*X L̵9ڍqZĶߋ4>shv_A;_.۲WP^ ٓ4/r z _I=5)~c޶xWptdKxQ!kSgzJ<$_w[>+ω/e%5Y#Ph-y9#ZW`^S6SR*$J{^6pgn9ifqNˎ nc&) "8I0n;!LЀNPԴ7vo^9RߡkWpK 3݋~:M{A7xxΗ>,>K—rT{%$s ?"?IL"D!A ;POHA3fPQX]WX}F P& Ժtc(RӷzF`[KTS^Vӑ[I!>B8J zfH|]'{ \uI%(*H=Ez$cCbOH=m) 0|Y]+?!C DZ'WUHۘ(͠fh/Àb%Vȹ<+\^#R:«7j=.#4ok.'V5t|Z0y:Գ&7$MR[[V>4d s'd TG}Ѷ І1!{I39I0nA3wOjZtS2+^?F3QuS2FOR]&9\/|+&I5\x=_@7 EXm]-ý T3ƆRJ4?hM?ZjZrjr'yWomZ Na25HWIPMj`5oF/]ok=ݽ+O&QMTՙ0!D]NFh"mú#z|4%!-A&Ri/NAkKwΚ5#.om)qag%#װBݚ$_3[-k8zqyݮVAK U?NLU/A3(0tp`*P]-ӕ/dYX.rC{ ,x:[-E/Ĩ_5` AυHs[Z}C 0 WPUͿܯz7_`o(  o/R/4ϾN-]|\5O6eJ~vQ`$.A"/ ѫeL]P=}A47T5AnկU}bG̶%@S~(y0q]\;WZ`EIJcwl@5ƝWAb뒼98 ;l)+)!/QV64 TodNaa{g rWk;ORFP o뇎< "g ]&' Zy-D"m( @͑FmLLB  ?A!l;((kܟ ? F!;Lx(a.O(d$|* YNng) 6Em_L8g,ՋgXn|f?$YcbAZ7v$+4"gKI*F}k9e _&YX-jpn9fg p ϊ׿yx^`Lb8ǵ_Yq=:g u\Vz˽& GBds2 Ȋ&$ Z`Ңiy#[`Ϊ?+d֮lU~#SHHޘBKUҞsn{`K6%YV,RFߢ  ٪}>QŅBQ3>x7:*Ɏ,!Y@ΎMl# 46D6Xtne7vE1}h@%irM׎/1~-z =DR?| (q, cqei:uYV̼p`D Q渃$K }DaثXPq&5oJ^[X:|7XW\tPJ[KY]v~d/EC)y9t<=혰YqŒ&d:WXUSWezF\M)jTa$u`"0?CosH)]a;K s ?^,ԑS'Bݍ@|+03mlt6 sD>`=7pvG xc] v ަuEG6d[II^K..Qpʼn:GM O:+YK)jw]St6du}ׄ,$m4AQy ^ 5qR~b-B] ڢ|p+|#.VkUۄܐE'4MNXylA\7͋e0r0-,ǨTJoKE½:k yg&|$m %Q9>7,K{dQ9YT/916 <{ֿZt#+6Ms@pz"SrEB l0i? Ȯ^ =put@D H4;M3ͱVJ?ĺBE[b×8 {xī=&W>LaꩥPsN.-#ߛGv^oN=bxuot:IvT(B* W cz\g)#u)}mdpJ~HgǢpKލm+hZ1e[FS^Qn =(HEĎ\WN!3yf"t8HǀaFuǵZJSGkIKs 1k=́Gƹ=ieAy)QЎF <$VG$ Jx^3?wPb>?]|O[3Egޛp}^?/Wc-}zO 9^+=Z Y'pGE-NVuDqMp>:խ떉?Ƕ)r[LDdՐUmO%^1KQW}+􍍶VTQ<*KQ5N3@n~Tؙ6M& .*6eVb6tpcC TH"uȆy};w{l"y:.w%ReX$= .NcI˭kD -Dg2 ]9 ~:߾z}pB7'PG7On݆[Xm?@6_&"[wN;~dGc/pxMˎ`э1gMʽPw\.- >(0\o0nT^G0w0qyML?}tS>Υ§竑-r@8ZsŜϹ(k_/EA^ "gW5'EȹPuJ&lbv@E5iףӫcEw216sKF9pR*_R31(z^V}9z}LAr~e2OBD cK1 90 uT gyQ8?~= c;WaF*  d LƎEbP6^"Sx$vﲙF, tոvL5Dtv7tEa!(c*ODZ8CSh30-tM`h[`S,u.s(rccד4(尯+A#RC3\j?_>A4Ƴqһxv,S=|hyEiijc:4P=E75U 57@~\=:W}iM<[ք43Qt;զ_A,aT~E >%:cl# C<Ȥ:AN<4t?o߼(wxMAn! Es .6 6a> 1tHm},͘Ȼܿ1&^bn|mKHDGG? n6TiP՘s ;fORsEvc 8΋}PB#G6?pD*F&j&}UO<1=y_qڞ*pʵX ax<4ϊKA!=JPx"DbqbNf^ PTAAW!89339#59{mE99PI 83=orwyFfIjqAbr*`x[ZTgd5@<'3(dťXSb7t\W&2*NcM/M,MKLIX! Ȝj[xkc4Ad|:#cxx100644 gateway.network.jsonRNH&g>{[mwYfY100644 pitr-restore.gow8E-]C+բ8100755 smoke-compose.sh6IEʉ_CČsU6uxR{ "$schema": "https://gateway.hanzo.ai/schema/v3.json", "version": 3, "name": "Base Network dev gateway", "port": 8080, "timeout": "30s", "output_encoding": "no-op", "extra_config": { "router": { "return_error_msg": true }, "telemetry/logging": { "level": "INFO", "prefix": "[GATEWAY]", "stdout": true } }, "endpoints": [ { "endpoint": "/api/{path}", "method": "GET", "input_headers": ["*"], "output_encoding": "no-op", "backend": [ { "url_pattern": "/api/{path}", "host": ["http://base-a:8090"], "encoding": "no-op", "extra_config": { "github.com/hanzoai/gateway/base-network": { "shard_key": "user_id", "shard_key_source": "header:X-User-Id" } } } ] }, { "endpoint": "/api/{path}", "method": "POST", "input_headers": ["*"], "output_encoding": "no-op", "backend": [ { "url_pattern": "/api/{path}", "host": ["http://base-a:8090"], "encoding": "no-op", "extra_config": { "github.com/hanzoai/gateway/base-network": { "shard_key": "user_id", "shard_key_source": "header:X-User-Id" } } } ] }, { "endpoint": "/api/{path}", "method": "DELETE", "input_headers": ["*"], "output_encoding": "no-op", "backend": [ { "url_pattern": "/api/{path}", "host": ["http://base-a:8090"], "encoding": "no-op", "extra_config": { "github.com/hanzoai/gateway/base-network": { "shard_key": "user_id", "shard_key_source": "header:X-User-Id" } } } ] } ] }  귽xXr}*W@$唤7h%G׵8S04fKlW)tπ%'$%>mY*ZSUH\ӼVvdOvNߒsxB9K]%#-Okphe<2ț5eZw)N-$gi>{u\,Mu^O{`2ދN,W؊9*,&L^{k 2N"7UqG8 -r pojQa3Uk/Z v+w?tj{HQ2Wpd +c98﨩 “LRl2+G]aUֲ5^W1a,w!}Z$J;[^VvnlStЀDx*e@ np:8#W+)`o*, jDdiTۦG6+'Q- ^h/c)7{}ҙ+MJeWT)WFt{;V^>>?뺶OB-R6V1=|X@3K3[Uf,*ol}{`塪le oZjzHaCN'io}Ie<zd@{;תfw"_g9\-~\>e;v-~_Cʟ{e}9(ǽ=_UMŎOqU͊0>LM}`@NBj0EE_+u)-9(/!c !9O tP!` :\6WqM$e.l(%{fxFZ.5h`Ʒf#fp S'_ځ']4Z􉞄nـcW NJ9wdذ%a 1BȆ ;J"Ivxʎf6Fc'r4#GC=ȉ75%uVf 鉾ُ ifFVe T]iͻbpn9 OȃĎё'* (gI$S(E9ws^;I4 t0 @ h*SHAKpm1OPj&z|1u8nN|x<{IK~RSy,mJDr6P89Hh><,>Zs>W}|RuS=VYls-CN.-BD4gإ%B6P014_V8r߫/n [óŔ.︶\Lѫ~?NUv>>U̘ǷVWqӃʕrpk +KJK0Ȥ  ",>_09<@LU'`_M`gƢ6y:W]`!|ߦ0pu1INΧguHmB@HЀ~?~==O~?2v0Ax(זKxa.{# $M|K)~~?€2We;D)yzΑֹ)INâ札]}yz4\N/v [{ݖ2FGyKZ{O)_ N `_)ut_Ox8N*sf"mK=v\񋀽DU7bL۩j32 w9v)|oS:oX_2<<0bhZZdk:fYgj,KH+5mUݫ+n|;LpqM,C3f6 ݶIK3lz4*zڒnbMPN#jzo{Nwx #!/usr/bin/env bash # smoke-compose.sh — bring up compose.network.yml, drive a write through the # gateway, kill a node, read it back, tear down. Exits 0 on success. # # Prereqs: # - Docker + compose v2. # - ghcr.io/hanzoai/base:dev and ghcr.io/hanzoai/gateway:latest available # (either pulled locally or network-accessible). # # This script is deliberately strict: any broken rung (members endpoint not # responding, write fails, read fails after kill) aborts with a non-zero exit # code and a pointer to the failing assertion. set -euo pipefail cd "$(dirname "$0")/.." COMPOSE="docker compose -f compose.network.yml" GATEWAY="http://localhost:18080" USER="alice" cleanup() { echo "--- tearing down ---" $COMPOSE down -v >/dev/null 2>&1 || true } trap cleanup EXIT echo "--- docker compose up ---" $COMPOSE up -d echo "--- wait for gateway + all 3 pods healthy ---" deadline=$((SECONDS + 60)) while [[ $SECONDS -lt $deadline ]]; do # Any response at all (including 404/400) means gateway is listening. if curl -s -o /dev/null -w '%{http_code}' "$GATEWAY/api/__probe" | grep -qE '^[0-9]+$'; then # Probe each pod directly to confirm it's up. if curl -fsS "http://localhost:18090/api/health" >/dev/null 2>&1 \ || curl -fsS "http://localhost:18090/-/base/members" >/dev/null 2>&1; then break fi fi sleep 1 done echo "--- verify /-/base/members is exposed by each pod ---" for pod in 18090 18091 18092; do if ! curl -fsS "http://localhost:$pod/-/base/members" | grep -q members; then echo "FAIL: pod :$pod does not expose /-/base/members" >&2 echo "(this is Agent #1's territory — base/network package. If you're" >&2 echo " seeing this before Agent #1 lands, the image is too old.)" >&2 exit 2 fi done echo "--- write a row via gateway ---" write_resp=$(curl -fsS -XPOST "$GATEWAY/api/collections/_pbc/records" \ -H "Content-Type: application/json" \ -H "X-User-Id: $USER" \ -d '{"payload":"smoke"}') echo "write: $write_resp" echo "--- kill base-b to simulate a node failure ---" $COMPOSE kill base-b sleep 2 echo "--- read back via gateway (must still succeed with 2/3 quorum) ---" if ! curl -fsS "$GATEWAY/api/collections/_pbc/records?filter=payload=smoke" \ -H "X-User-Id: $USER" >/dev/null; then echo "FAIL: read after node kill did not succeed" >&2 $COMPOSE logs --tail=50 base-a base-c gateway >&2 || true exit 3 fi echo "--- shard_key_missing is enforced (no X-User-Id → 400) ---" status=$(curl -s -o /dev/null -w '%{http_code}' -XPOST "$GATEWAY/api/collections/_pbc/records" \ -H "Content-Type: application/json" -d '{}') if [[ "$status" != "400" ]]; then echo "FAIL: expected 400 for missing shard key, got $status" >&2 exit 4 fi echo "" echo "--- OK: base-network compose smoke passed ---" ux340031QLKgz} 馥H#9UėަoFucx J// Package iam is the canonical import path for Hanzo IAM client types and // helpers. Downstream services should import: // // import "github.com/hanzoai/base/iam" // // and use iam.Client / iam.User / iam.NewClient. The implementation lives in // plugins/platform; this package is the stable, brand-neutral surface. // // One way to talk to IAM. Type aliases — not copies — so plugins/platform and // iam are interchangeable at the type level: a *platform.IAMClient IS an // *iam.Client. package iam import "github.com/hanzoai/base/plugins/platform" // User is an authenticated user record from Hanzo IAM. type User = platform.IAMUser // Client talks to a Hanzo IAM instance with token caching. type Client = platform.IAMClient // Key is an API key record from IAM's Key table. type Key = platform.IAMKey // Config is the platform configuration required by ValidateToken / ExchangeOAuth2. type Config = platform.PlatformConfig // AdminCreds are the service-level IAM application credentials used by // server-to-server methods (LookupByAttribute, EnsureUser). type AdminCreds = platform.AdminCreds // EnsureUserSpec describes a user to provision idempotently via EnsureUser. type EnsureUserSpec = platform.EnsureUserSpec // NewClient constructs a Client pointed at the given IAM base URL. // Empty baseURL defaults to https://hanzo.id. Trailing slashes are trimmed. var NewClient = platform.NewIAMClient // NewClientWithCache constructs a Client with a custom cache capacity. // Use this when the default 10,000-entry cache is the wrong size — large // gateways or low-memory edge nodes. var NewClientWithCache = platform.NewIAMClientWithCache // ValidateToken validates a bearer token against IAM userinfo without caching. // Prefer Client.ValidateToken for production use. var ValidateToken = platform.ValidateIAMToken // ExchangeOAuth2 exchanges an authorization code for access + refresh tokens // via the IAM OAuth2 token endpoint. var ExchangeOAuth2 = platform.ExchangeOAuth2Token // IsPublishable reports whether token has the publishable key prefix (pk-). func IsPublishable(token string) bool { return platform.IsPublishableKey(token) } // IsSecret reports whether token has the secret key prefix (sk-). func IsSecret(token string) bool { return platform.IsSecretKey(token) } // IsAPIKey reports whether token is any IAM API key (pk-/sk-/hk-). func IsAPIKey(token string) bool { return platform.IsAPIKey(token) } // IsAnalytics reports whether token is an insights (hi-) or analytics (ha-) key. func IsAnalytics(token string) bool { return platform.IsAnalyticsKey(token) } // IsWidget reports whether token is a widget embed key (hz-). func IsWidget(token string) bool { return platform.IsWidgetKey(token) } ytx[rƵ[| g6 ILx,nc7;K`I(vAU5ӿw} HJ8qi-b{vsc^˱[elLs]XtvάzcHI65ܞh7SvwbmIj4`?YTݕVO~?vcI9 #=ݝoZ&Ci.:]a,CZ=>|"LdFbdTZ0B؉BMTOJ` RY$F̕d҆TFP[%ĭv"WbTedEg/ĭjI)7uv& $֓K;1̢N$ԀzH¢׹tF,25 ĭjX  H_h=+k'j ګ h`Q\gFT$XT_Nhk 2={'l_Ӭ9 2~ZZ]C a;N8~Lm脁F/K2_;ؙ~pBKٙWs,ʖE_;!$W}.ie6W?h̿[ZcXZ |Gm xuՀ2U,^MGX iscDc@(HAB)() ^> >LA]~Ȅz"CMt)&S-"]10h@PI87?0@a?s"9:%6EDġԾڼl_mڽg=NwwOXA e`o'+wJU,^Aw4RnNu׆DŽ6#;}W1czn R,YC/e{2:4t)g͇˷XtEM9Ƚ?w[]2S n}BL">  5IZ EyP-TCDq%!Gr& D]tQbPY\éq2AS'j 43B?PB.wod =UF6|b#r >uy=6 NU`m=/w{/xI-mF&>)"}$ ?oS߮8sD4wB)NOϑ5곷NQbeë!7v'MuUkdX:ŁHDi;=MԳ| +l tι秃WJ1>gZF/s]$N"83Ol4\+ +&(UŇzxގ ;IeN}oӔ?>|&WUq+I^g _w ?(\Z25 +nne3RARʍO{~3CPWetɄvw $ aQY@.5wmg8L2ཋ$~3rFpL?J%ZE/̣Q^M.U /1k.T G, ST1Vg"Iez\V5ps=Y+u-$VN#ygӬ9C3>Qd*3$8qGT([?b&[8w1v1Ep5}ㅯ'e|A~vzOkb5˺<f8z_!^^x\BM;W^>WyٹZ#M_p jBަ&;F=\^?5^cEkMf?4V&:lș__I݀DKheSDN$cf-O p4;8[#G~2lEhDEVxT*=V J.WkzWNrVT'LyB`)_i*>zPi @C#.hÄ]#0-gHaߪ>0#xuarN}/^jy`]WÌZloamZ͉\0,wKWN]*(*3*KLJZXkJAU,5^&Y7].2*iį>[ {b&鬫'e:WQz+a%#MP38 mXD6NI"#whFsO|$e/g 9ɶ,#e -K;% KYҖ>idegE2}VQ&(BոKх.w N:!\/np Gf+E떈'!+w; =#JxZDbwUJ[HCBr $[y'L:#բr#6 0Q x6λXw|5T.oHg^E{JCN(I&E'>[ogJZ \J$!*M!#so%{LL9[r0iK4Q, *צ@ *拋OV]L)]Jܕ}$ W!)𜎐9"$B_t puf}n 7Xx7&Rt9ܷMPЕP$#A&ո ;^\x*_[L>|cNB5k~U(Z !e"@V ncO2Cyg?qT_ BD?#5ҟ|LOB̈́:}ߊ}wnn}+>Й o< d0`[`/<"F#`zn*s/h_!<ڦVzNJ7BZf}uPYsu~t~#_tS.8w&{TmBe V(l)y?69Jj]> նBTƝ?T:tbtBuPxI;oR_3M'IgRr9Y(Nˡ!\e6lFeMXMwS5vjiQÞZ>n.%?ϤO{dWF>薍|W%7b3Mmǡ3V*X*D2l.ZiVn(/o'`de$?,'pCXH0HNQuFVgw旒K ]DrqO{+5ܖ*1\=8c$!#9HөV%/J%BN)˯֜cW@ZAf umWqqBhVa:=! y1Pf2qV2,|P@"j32*lwIFXD[1K BRRܯ-:E` 8TGCXT@t+q%u.:|~x8%>^8D߇HXߊEƢ-eVglw%kBדVחU$~^ X_]eYπyW!hXkƲgF0/)PoGYȑ)}8Qː^𩔓At#Yua F\K_b )L 0d$ b&`'ŖJ׉mwB!FH ChMvY ITvIİ p.Tv nu|JX($tVvbW2a?; {uۑ4\ h1?n ըK(5w`{8ԏ-3=(%7-d[<<Ցuy014.ξzo@MJ.o+(X3)1H1,sYlw82!Ci^/,h|X 6xA <>?,gA0dF{3܉$mr6`!Tҷc'|6|?lo.F|TqYL^75wf((&ZFb?+6ʯ@Q(؜kv.]oVfἆӱ,3ʦmq7 TÕ'T5kE6_ƶ̭6wdӍtzT[HnSp&F hN!Yysj6=fw0,[{#k `6JFh7NߎCD-/E ۃqIJs/66QJe%Y텑-Kħp^IcEsǍFs<[,m0|A_TjoH~)Jב%*h]AT p5|v]%,CJr hܸE>Wh!tDn2o'IkSZ NNR5fH!լ׉ {p7%Z`DJxd;!T##1*?1S?)8U?9(US)=$4I/9?W&?_xKck?xdNn%ZxWmo6l+bH kܤuּ`",I5 vk7ΰm "yBrR a!u&CvY!vD6KzcYOSejq*n/XrXuEmM>Be}~\B߬ H=JzYUX%c0gM/f&NzXۥ ]MaKU?޾Q&-@F v˅)- &RF AI*_z1F.PU~iw 29,z56ħ{0B]{>xFW+{Jp|ml6ЙsJAŌ-YqDw"` BÞ"43aN<\0m5g5=i[0:\^E;G.ꈫV Mw2"?pTX*Q%y3mЭ=A) I/=(SڻR6 o TVɨ};$K8Muv>3)ItyiH,2ukk&${:ZCp^n,H#0[[C+ c]d7?€_n3VH|K~^Q\҆x'IU&͔5C3ޞӗJ_Ͽ_aѷj0n8w=IBoB.V+vV_Xni %:IhzZwh}z7Sb+\ C__ =Mt.ͱ/97/ū]Js:`Dbxv\mfFb^U~b~Rbq~nbfNRzfIFi^r~>LƖB&k:x;” bx340031Q(͉O+I+Kg0G즎mVSCҜR*絓XwקF9O:9i x+HLNLOU(I-I,I-Wp,KILIU(K,1 㜟WW׫I+.+sOTUHNIMKUPJhTC2 OKMo3{xWQo6~`U ˲[\9K:@moD,E[v)ٔdC,cr"E<ŊQ$x=ދB yp JTO޿Ey\zv='S$y 'Q*{^Yb"[~vZG02s3 ]bѣY'ȨP.gö VpEr:o Gѝ(J,Z|Z .-e.jȗdAE5/cƙb8ut[MڧҪ1U h?9&M_3,W,B*O# X}ۚBJ 'p n q Αڛ)M([%j^MFN@3QldD#zb xr *Yt9hF8@Gmz yfߢ 2k؏5/L-/M-ILI,IYp:ܚ"]{s.t >S̼ĜԼ"-GJ]w,?0n~Qz|f H]miV"s8D i2h*NHM),o|\`  +p툂)(22O//K-L/I-bQS.<2O*~'xyF GnDϊdj?2^GM:PJx]o0ɯ8Cbqr7iiIW6H7hH`5#) c>>.:+9q/ !3HYf4I@JuFSoo1_ s\'OWK-t:4Won8'e(`VϥQ m?޻t S_I14AbFWAY6kӿfc}3P^@RS뮁2 eQ3Ay.N /sh4cPgm=[uW`.X@ K[|>6ϗf%xIUZ-'-| M-g-n61e=aJcAQlfpےm ISs]'Ȣh8f̔ dqFo>R_zw n,ccof5x[9sGFb^U~bF\BxoFgW,5inUYH EnksJ}gc0U}wW:b#A%HӸBCCO'r\r.ؗc#.5z 2yE#V| p YkF,+f{rMI#r~i>$`0M+EJʄ07b _#>i|$}0hƜr3ߙjdkkb (2ծqX#hZhkj-'4Ҋ yet)msјJ9 Vd`#*Xkj)Hy;%f;vl (X2Y$Sxi0p>|HyșD)\b.o ܅(n"ʌEknC%-Cg(l=.FDEeӘ!j@-b1;_^xwsS- DGBJҴlHX2L9͐u)[ȊM,LJh?#R ;ٖO ilr-CV1g>|iNacqN22<۞jF)]#kj6+i VIKzYTҞN8 0_WDʭІR;c۲=Le{R Fo8oalN5S)8gA5[p*qe>Q-Na~DH2M'Mp Rl/[l-3Ev3s~J`.~WǸ욹Qgnw3J"8DΛVt^Oܕ}`Ms,Wڑ/2Yx V*A,k 5R,IjIڒk*(H)b 4`,vd;XU :]6(pL{ tFQ: GLT{-A64M`ձj:JZ6kgR& n q rteb>Kfcr8&8\j$jq<ΰ)X9S \ s'!u#V ZB ٝSz @$Y_Yd U%L0+VH&HN`GR]^10Û7`XP W~ !ع>be5Yq~RR[EmYa-Bx#3pՏ} r& ǯq }HXy$5`KxU 5w ^+K-}:Zs/5X3kYֳOȇԳeŬp_i(Ꚗs1DZqgG[wU\8e$\`_oɯ iwoCJ&*m6nJ) uђ~a./P9`ޥ:/(35TLI2AިwF=:bC64KB]~|ać jY7 Ҁ{dmY zuqRHB+q*2YЩJC0VMx}GFb^U~bx 8{c5f5A\A! ~. n ~! ! )99%y% y µ  ̙͗7r`ߊqrͶBGź&O<_RTI85$$_I\+T#3%%5oBA2޼B8R|iqjQq|biIF&g~y^jQPiNRfCQjaijqH^f'Xd~I5VNVs.JM,IPDTP h D^hA DT!QRss<mu8x[Oaw;"6 lx/package migrations import ( "encoding/json" "fmt" "github.com/hanzoai/dbx" "github.com/hanzoai/base/core" ) // IAM-native cleanup: drop the four legacy local-auth artifact // collections (_mfas, _otps, _externalAuths, _authOrigins) and strip // the `password` field from every surviving auth collection. // // On a fresh install these tables never exist (the init migration // stopped emitting them), so the steps no-op. On an upgrade from a // pre-IAM Base build, this migration retires the dead schema. There // is no Down: IAM is the only auth source going forward. // // We operate at the raw SQL layer because the deleted password Field // type means the collection-model unmarshaller cannot rehydrate the // pre-rip auth-collection schema rows. Going through the regular // app.Delete + collection-save path explodes on the // "unknown field type: password" decoder error. func init() { core.SystemMigrations.Register(func(txApp core.App) error { legacyAuxCollections := []string{ "_mfas", "_otps", "_externalAuths", "_authOrigins", } for _, name := range legacyAuxCollections { // Drop the record table first if it exists. Use IF EXISTS // so a fresh install (where the init migration no longer // creates these tables) is a no-op. if _, err := txApp.DB().NewQuery( fmt.Sprintf("DROP TABLE IF EXISTS {{%s}}", name), ).Execute(); err != nil { return fmt.Errorf("failed to drop legacy auth table %q: %w", name, err) } if _, err := txApp.DB().Delete("_collections", dbx.HashExp{"name": name}).Execute(); err != nil { return fmt.Errorf("failed to remove legacy auth collection row %q: %w", name, err) } } // Strip the `password` field from every auth collection. Pull // the JSON fields-list straight out of the row, drop entries // whose name is "password", write it back, and ALTER TABLE to // drop the column. Skip the underlying ALTER TABLE if the // column never existed. var rows []struct { Id string Name string Fields string } err := txApp.DB().NewQuery("SELECT id, name, fields FROM {{_collections}} WHERE type = 'auth'").All(&rows) if err != nil { return fmt.Errorf("failed to enumerate auth collections: %w", err) } for _, row := range rows { var fields []map[string]any if err := json.Unmarshal([]byte(row.Fields), &fields); err != nil { return fmt.Errorf("failed to decode fields for %q: %w", row.Name, err) } filtered := fields[:0] hadPassword := false for _, f := range fields { if name, _ := f["name"].(string); name == "password" { hadPassword = true continue } filtered = append(filtered, f) } if !hadPassword { continue } encoded, err := json.Marshal(filtered) if err != nil { return fmt.Errorf("failed to encode trimmed fields for %q: %w", row.Name, err) } if _, err := txApp.DB().Update( "_collections", dbx.Params{"fields": string(encoded)}, dbx.HashExp{"id": row.Id}, ).Execute(); err != nil { return fmt.Errorf("failed to persist password-stripped %q: %w", row.Name, err) } // Drop the column on the record table; SQLite supports // ALTER TABLE DROP COLUMN since 3.35. Soft-fail if the // column doesn't exist (older fork that never wrote one). tableName := row.Name if _, err := txApp.DB().NewQuery( fmt.Sprintf("ALTER TABLE {{%s}} DROP COLUMN [[password]]", tableName), ).Execute(); err != nil { txApp.Logger().Warn("could not drop password column (likely already absent)", "table", tableName, "error", err) } } return txApp.ReloadCachedCollections() }, nil) } xW[o6~ũb`Av{mT49$eK \GDNmcYզqGɢr zi1}^JjyaJFI9KK0 >%w(KNZ'ݑǓ XDX9Wd5Cimvw?8^K3x:~٤KIGMک;k!lӰ1Y+9ckRJUH32 lZ*bԠk*7Z#:gTޅ*w+OoGAZ(~`N3\H,An%4,Z[-Źu_d8Rh EUKxC mŅbC9&^v9 d LJ}P7,D- ndwwژ*&Չu L ®N(q5&S'9$suKC/pM}pv p|ؙ?9?{{/cu_|eu>J_ ŖBkB6;VӡGxE_m=M7X,{D}z88|؄ Ck887~^I/ZXޟx~r_7/VCvI2sQVg#և&99*d+˗jP ,QX`-צ锘AK#rs\qHɧVStOz{^,>=,<,<=,~,!~) plus the // empty/not-empty predicates the UI exposes; the client compiles it to ?filter=. c.Fields.Add(&core.SelectField{Name: "operator", MaxSelect: 1, Values: []string{ "eq", "neq", "gt", "gte", "lt", "lte", "like", "nlike", "empty", "nempty", }}) c.Fields.Add(&core.JSONField{Name: "value"}) // scalar, list, or relation id(s) c.Fields.Add(&core.NumberField{Name: "group"}) // filter-group index for nested AND/OR c.Fields.Add(&core.NumberField{Name: "position"}) addTimestamps(c) c.AddIndex("idx_view_filters_view", false, "view", "") return txApp.Save(c) } func createViewSortsCollection(txApp core.App) error { c := newSystemCollection("_view_sorts") c.Fields.Add(&core.TextField{Name: "view", Required: true}) c.Fields.Add(&core.TextField{Name: "field", Required: true}) c.Fields.Add(&core.SelectField{Name: "direction", MaxSelect: 1, Values: []string{"asc", "desc"}}) c.Fields.Add(&core.NumberField{Name: "position"}) addTimestamps(c) c.AddIndex("idx_view_sorts_view", false, "view", "") return txApp.Save(c) } func createViewGroupsCollection(txApp core.App) error { c := newSystemCollection("_view_groups") c.Fields.Add(&core.TextField{Name: "view", Required: true}) c.Fields.Add(&core.TextField{Name: "field_value", Required: true}) // the select value / relation id this bucket holds c.Fields.Add(&core.NumberField{Name: "position"}) c.Fields.Add(&core.BoolField{Name: "collapsed"}) addTimestamps(c) c.AddIndex("idx_view_groups_view", false, "view", "") return txApp.Save(c) } 񱵘x)zpackage migrations import ( "github.com/hanzoai/base/core" "github.com/hanzoai/base/tools/types" ) // Connected-accounts + email + calendar sync data model — the foundation for a // CRM that syncs a user's mailbox and calendar and auto-links them to people/ // companies (the connected-accounts layer). // // Persisted as SYSTEM-WRITE-GATED collections (the sync plugins are the only // writers — CreateRule/UpdateRule/DeleteRule = nil so only a superuser/plugin // context mutates them), but user-READABLE (owner-scoped List/View), so the // console renders a user's own channels, messages and events while the sync // engine owns the writes. System=false so the REST + realtime API expose them. // // Split into three concerns (one plugin each, later): // connect — connectedAccount (OAuth tokens, encrypted) + participant matching // messaging — messageChannel/message/messageThread/messageParticipant/messageAssociation // calendar — calendarChannel/calendarEvent/calendarEventParticipant/calendarEventAssociation // // Token fields hold ONLY ciphertext (accessTokenEnc/refreshTokenEnc, AES-256-GCM // per-user-derived key in dev, Hanzo KMS in prod) — never plaintext, enforced by // the sync plugin, mirroring the reference's encrypted-envelope model. func init() { core.SystemMigrations.Register(func(txApp core.App) error { for _, create := range []func(core.App) error{ createConnectedAccountCollection, createMessageChannelCollection, createMessageThreadCollection, createMessageCollection, createMessageParticipantCollection, createMessageAssociationCollection, createCalendarChannelCollection, createCalendarEventCollection, createCalendarEventParticipantCollection, createCalendarEventAssociationCollection, } { if err := create(txApp); err != nil { return err } } return nil }, func(txApp core.App) error { // children before parents. for _, name := range []string{ "calendarEventAssociation", "calendarEventParticipant", "calendarEvent", "calendarChannel", "messageAssociation", "messageParticipant", "message", "messageThread", "messageChannel", "connectedAccount", } { if c, err := txApp.FindCollectionByNameOrId(name); err == nil { if err := txApp.Delete(c); err != nil { return err } } } return nil }) } // syncCollection builds a plugin-owned collection: the user OWNS its rows (reads // scoped to owner), but only the sync plugin (superuser context) writes them. func syncCollection(name string) *core.Collection { c := core.NewBaseCollection(name) c.System = false own := "owner = @request.auth.id" c.ListRule = types.Pointer(own) c.ViewRule = types.Pointer(own) c.CreateRule = nil // plugin/superuser only c.UpdateRule = nil c.DeleteRule = nil c.Fields.Add(&core.TextField{Name: "owner", Required: true}) // IAM user id return c } // ── connect ─────────────────────────────────────────────────────────────────── func createConnectedAccountCollection(txApp core.App) error { c := syncCollection("connectedAccount") c.Fields.Add(&core.SelectField{Name: "provider", MaxSelect: 1, Values: []string{"google", "microsoft", "imap_smtp_caldav"}}) c.Fields.Add(&core.TextField{Name: "handle", Required: true}) // the account email c.Fields.Add(&core.JSONField{Name: "handleAliases"}) c.Fields.Add(&core.JSONField{Name: "scopes"}) c.Fields.Add(&core.TextField{Name: "accessTokenEnc"}) // ciphertext ONLY c.Fields.Add(&core.TextField{Name: "refreshTokenEnc"}) // ciphertext ONLY c.Fields.Add(&core.DateField{Name: "authFailedAt"}) // set → surfaces "reconnect" c.Fields.Add(&core.DateField{Name: "tokenExpiresAt"}) addTimestamps(c) c.AddIndex("idx_connacct_owner_handle", true, "owner, provider, handle", "") return txApp.Save(c) } // syncStateFields adds the channel state-machine columns shared by mail + calendar. func syncStateFields(c *core.Collection) { c.Fields.Add(&core.SelectField{Name: "syncStatus", MaxSelect: 1, Values: []string{ "not_synced", "importing", "synced", "failed_unknown", "failed_insufficient_permissions", }}) c.Fields.Add(&core.SelectField{Name: "syncStage", MaxSelect: 1, Values: []string{ "pending", "scheduled", "list_fetch", "import", "done", }}) c.Fields.Add(&core.TextField{Name: "syncCursor"}) // historyId / syncToken; empty ⇒ full sync c.Fields.Add(&core.DateField{Name: "syncedAt"}) c.Fields.Add(&core.DateField{Name: "syncStageStartedAt"}) c.Fields.Add(&core.NumberField{Name: "throttleFailureCount"}) c.Fields.Add(&core.DateField{Name: "throttleRetryAfter"}) c.Fields.Add(&core.BoolField{Name: "isSyncEnabled"}) } // ── messaging ────────────────────────────────────────────────────────────────── func createMessageChannelCollection(txApp core.App) error { c := syncCollection("messageChannel") c.Fields.Add(refField("connectedAccount")) c.Fields.Add(&core.SelectField{Name: "contactAutoCreationPolicy", MaxSelect: 1, Values: []string{"none", "sent", "sent_and_received"}}) c.Fields.Add(&core.SelectField{Name: "visibility", MaxSelect: 1, Values: []string{"metadata", "subject", "share_everything"}}) syncStateFields(c) addTimestamps(c) c.AddIndex("idx_msgchan_account", false, "connectedAccount", "") return txApp.Save(c) } func createMessageThreadCollection(txApp core.App) error { c := syncCollection("messageThread") c.Fields.Add(&core.TextField{Name: "subject"}) c.Fields.Add(&core.TextField{Name: "threadExternalId"}) // gmail threadId / graph conversationId addTimestamps(c) c.AddIndex("idx_thread_ext", false, "owner, threadExternalId", "") return txApp.Save(c) } func createMessageCollection(txApp core.App) error { c := syncCollection("message") c.Fields.Add(&core.TextField{Name: "headerMessageId", Required: true}) // RFC822 id — dedup key c.Fields.Add(&core.TextField{Name: "subject"}) c.Fields.Add(&core.TextField{Name: "text"}) // HTML→text server-side; render with linkify (no innerHTML) c.Fields.Add(&core.DateField{Name: "receivedAt"}) c.Fields.Add(refField("messageThread")) addTimestamps(c) c.AddIndex("idx_msg_header", true, "owner, headerMessageId", "") return txApp.Save(c) } func createMessageParticipantCollection(txApp core.App) error { c := syncCollection("messageParticipant") c.Fields.Add(&core.TextField{Name: "handle", Required: true}) // lowercased email — the match key c.Fields.Add(&core.SelectField{Name: "role", MaxSelect: 1, Values: []string{"from", "to", "cc", "bcc"}}) c.Fields.Add(&core.TextField{Name: "displayName"}) c.Fields.Add(refField("message")) // Matcher links these later (person/company auto-created + backfilled). The // target collections may not exist yet in a fresh Base, so store the resolved // ids as plain text refs the plugin fills; a RelationField is added by the // CRM-objects migration when person/company exist. c.Fields.Add(&core.TextField{Name: "personId"}) c.Fields.Add(&core.TextField{Name: "userId"}) addTimestamps(c) c.AddIndex("idx_msgpart_handle", false, "owner, handle", "") c.AddIndex("idx_msgpart_message", false, "message", "") return txApp.Save(c) } func createMessageAssociationCollection(txApp core.App) error { c := syncCollection("messageAssociation") c.Fields.Add(refField("messageChannel")) c.Fields.Add(refField("message")) c.Fields.Add(&core.TextField{Name: "messageExternalId"}) // provider per-channel id c.Fields.Add(&core.TextField{Name: "messageThreadExternalId"}) // provider thread id c.Fields.Add(&core.SelectField{Name: "direction", MaxSelect: 1, Values: []string{"incoming", "outgoing"}}) c.Fields.Add(&core.JSONField{Name: "folderIds"}) addTimestamps(c) c.AddIndex("idx_msgassoc_dedup", true, "message, messageChannel", "") return txApp.Save(c) } // ── calendar ─────────────────────────────────────────────────────────────────── func createCalendarChannelCollection(txApp core.App) error { c := syncCollection("calendarChannel") c.Fields.Add(refField("connectedAccount")) syncStateFields(c) addTimestamps(c) c.AddIndex("idx_calchan_account", false, "connectedAccount", "") return txApp.Save(c) } func createCalendarEventCollection(txApp core.App) error { c := syncCollection("calendarEvent") c.Fields.Add(&core.TextField{Name: "title"}) c.Fields.Add(&core.DateField{Name: "startsAt"}) c.Fields.Add(&core.DateField{Name: "endsAt"}) c.Fields.Add(&core.BoolField{Name: "isFullDay"}) c.Fields.Add(&core.BoolField{Name: "isCanceled"}) c.Fields.Add(&core.TextField{Name: "iCalUid"}) c.Fields.Add(&core.TextField{Name: "location"}) c.Fields.Add(&core.TextField{Name: "description"}) c.Fields.Add(&core.JSONField{Name: "conferenceLink"}) addTimestamps(c) c.AddIndex("idx_calevt_time", false, "owner, startsAt", "") return txApp.Save(c) } func createCalendarEventParticipantCollection(txApp core.App) error { c := syncCollection("calendarEventParticipant") c.Fields.Add(&core.TextField{Name: "handle", Required: true}) c.Fields.Add(&core.SelectField{Name: "responseStatus", MaxSelect: 1, Values: []string{"needs_action", "declined", "tentative", "accepted"}}) c.Fields.Add(&core.BoolField{Name: "isOrganizer"}) c.Fields.Add(refField("calendarEvent")) c.Fields.Add(&core.TextField{Name: "personId"}) c.Fields.Add(&core.TextField{Name: "userId"}) addTimestamps(c) c.AddIndex("idx_calpart_handle", false, "owner, handle", "") return txApp.Save(c) } func createCalendarEventAssociationCollection(txApp core.App) error { c := syncCollection("calendarEventAssociation") c.Fields.Add(refField("calendarChannel")) c.Fields.Add(refField("calendarEvent")) c.Fields.Add(&core.TextField{Name: "eventExternalId"}) c.Fields.Add(&core.TextField{Name: "recurringEventExternalId"}) // links instances to a series addTimestamps(c) c.AddIndex("idx_calassoc_dedup", true, "calendarEvent, calendarChannel", "") return txApp.Save(c) } // refField is a forward-compatible text reference to another collection by name. // Kept as a text id (not a RelationField) so the schema applies before the CRM // object graph exists; the sync plugin populates it, and a later migration // upgrades these to real relations once person/company/etc. are present. func refField(target string) core.Field { return &core.TextField{Name: target} } pMxn0 S9l69n醦@SXMD @fJ8H#(Zx{7%Eέiv()*aCe - Ew~8+lS-L56AĜ=iyͥh=i?jg\CXs4M*Rz}gux.dXpwg0zR82}U^Pw mNT,1-}}Io;>6+G/,%7䞰xYn#}ÇL!NpW65c3MsKw%F?"_/ɩnf(qm6$NUk~ % 0骴.81-YVR*/fҪ2r{ֵް׻wReM˅Ȥ2_JPR;R"^Ax33اL+#fU0ؒȁZ V3r%u.g:n=0 Cz\ip@ՙ\2>ih$wJH/OTSٹLӪxA|{Et)_Lõi kɢÎ[*K1ߙ KH i_V .S|E|Q0ս7919l'Eޗإ)2y%a5keV>tA9eT$+&lXJ+M׷?^ ‚ 8J)P@X iYf)Y`5B G~qYQ˞a\ 6ܦUD5PB,fk}0uܷM )v 9w'V2@:9L6gW׬춁pԹ5-ρ7Qͣl+;Vᥬ{Fa͛2 sJ9[[ $j{5e(1G\>P~1F|]8G';! ̠^W ېP1d#[ _LgFƐm>Ezg#`Hn#a5ht$G+EU a"-E8ɷ̶z%o͛l@&/w RrjvE(#a[1 yB"D6tSEm v@j뛸г0ߍ.[&:q]lL␀$(5CgF6t\8 uO-kg3thE MQh\%?pkH~;qLƏ5QѓR|n/k^|AU]HȰdK@MQFl ir $b3amK{R'aj $-?!9\W۪!C>W=n'-I=rV=q9nr!x/bNy]C 2hf+LiYXpPxN'9!VNh;;4օכ3pF!xD/3,_O TTN 4uDJm%m,Jx岤JP~uj[P{ϝaאLH2^Chd(@z+[% a%`;snH4#s۝YwC(%>rsZZl[Aid.2yضȵQanm%# mVwNu+QwlTf4B1SxQ-A!f]addƂ8oѹ)!lRTx]TOo7" DBXVTJ-PQi "Pڃf*UpAwp@8H>ٞ ی{?޿W4_9R"wB+UL[ VaKaP(-d8:;rIK瘕2DL.B:4- 4G%3 ("d(`le`@O (&aKJ &l@UNѰˎ4m5kl*ȶmĒ`ЪoQ.i1ڍDFd$҉o]%fĮ,$fߖӈthm r'jCLtNFG 4 Ȗ_)@7PH| -l>_y'>4 ~w?vYsaBc&)R 5R8p"e!I %pU*t|rYfuK_N? =p$Lp:t:]ߟZ؃S~4I+)*mLߨa{n]Q|(9#,j//8?Qi6TU ENo}j$9Hy=C0UƧd'&夦D\" ΞtvXd敤%dŗ^ͶhX1.^)iŦ&1 #I7l<}$tGW0lP1Veq *\Нs=OwZh.{Sʋ2KR@2WJ1Ύ+).)ILΎ/KM./*K\Y$ڹȋ]c Ց2J}/,$PT`8Yqqhn{g׿2Ծ <757)8#d۟~o^o 0>5%=p6pg|kND&SyMtg2`hJbb?]7\իS| =>A6%o4<3<1^/3eG76eBMn/fN9^>kx8 6G JX[[SNMp"78b'U*cx?package network import "context" // Envelope is what the transport ships between nodes: a shardID header + // the serialisable frame. Signing and transport security live at the // transport layer; this struct is the minimal contract. type Envelope struct { ShardID string Frame Frame } // Transport is the peer-to-peer plane. Production implementations carry // envelopes over QUIC/gRPC with mTLS + PQ-identity. The in-process test // transport ships envelopes through Go channels so the integration test // runs with no sockets and no Docker. type Transport interface { // Start begins delivering inbound envelopes to recv. It must be // idempotent-on-stop (Stop may be called after Start errors). Start(ctx context.Context, recv func(Envelope)) error // Publish fans out env to every peer in the local node's router view. // Best-effort: peers discover missed frames via Quasar's DAG sync on // reconnect. Implementations should not block for slow peers. Publish(env Envelope) error // Stop releases transport resources. Safe to call multiple times. Stop(ctx context.Context) error } // nopTransport is the default transport when none is injected. It neither // publishes nor receives — useful for single-node dev runs where Quasar is // still wanted for the WAL/apply path but no cross-pod traffic happens. type nopTransport struct{} func (nopTransport) Start(context.Context, func(Envelope)) error { return nil } func (nopTransport) Publish(Envelope) error { return nil } func (nopTransport) Stop(context.Context) error { return nil } QG.ڴxY6=~ @vbƮS`2f8.6RZl6x6XIKJHc_sD\\(Q)66]k% Q6M&WƇkrC-\WNe"Ě7SKXl6$Y҉c6N-JUyBDt>NHQjU&$c6ҋTVbU+kP2c].i)5nf ƖOE):_닁:d۩Mo{шg>a"Ӧwŀdjb#j!2u-dVQTFr*5U=$, 2)5ux,8Hik3$)]j\<{-uBTtȶI$luz)OgI1 ]adr"H@Djʕz 7qKJߑB|pM1LC+?z>KJ9\T'%rUNUv c9P55HQH+q:Ϗna㸭 ɬ.笰.) 8mvjd[u˫X/>Dxuݬ=DYk򒷠,}BҤPIxԓhu#SNCƏF)"$52dU\.QݎfBТG-V*] %Le(Y$qsAVNc[R6" &.%w7U2CS nr]5\/Qm_k)JOHT KIߓƵ+ apf@j <BXȥ֔ȒPVLo+nNNeIoV Q0y"9 #Bv#6ۏ497 zGŀ-{oFA9ƩAnZBYۚ%G%nt@eJU"Īc!)[p~.p Kx$n؍cj$9B !@̦64!5Td^cOBg7p+ ;(W 9G"d R5'#2)Ǜb}-Bbp c 2ۥ*4dF'M0ŧ%(-`r c+*Fq%Dk*^1WTskj$5ɓ:M0yz ade\A010UB-"=] RW8\@Q#r>S/e LiRvg g֠d3$Q̀ܰ'pȒc5x UDb ^G|4r Fn+y)~{A*DMAoZQ*> JyFkUť %"oĶa3Fؤ +"x IAUr[p1 Eq /. o]GHe0BMKT4 b aۅYށ4$ekѥ2yc\ulkM B#lġ c6IitǕ[|柝0<`=֠ivA˗$4Pww_ 0@KD-ojQZckE}47/fᓦ2q^D{ 5Gb@dY[tvn'w%|h}vٯI4[T u[gvwKnP\LB^uT;)LC#7^m1I;5(ŭP+tR.½ahHwry9&]`b`>O#ɥ(r\J O!ް#|+Z]nY$T6k>Z?_% Hฉ> hH"#6m/!ߨD 05u{ʙoЦ,r^0Sg  qjVN.릁'NLm<'2F]RJC1hM WIM$d%]/S|(%jY< ░#.^8BIen~/6Vmn""}5[*HuQ oUHO|ЏJta*]G5r 験篒 -r|J]\ibrP+D&aV>AZ쨦&>42n [TtIrn#\MxS}?vb0.h fe?=vh:1ߴnw4)*?2~kgጁ!3:NzvF1:6nO³WwӯʝpJ[[4ҰOZ6n+x;brBEC9[+d+d*TTG SRR*yU y) > )9 œc%5KS&[JDo)qymɆ)yx //go:build integration // Integration tests for the S3/MinIO archive backend. Gated behind the // "integration" build tag so they never run in the standard go test // cycle. To run: // // docker run --rm -d --name minio-test -p 9000:9000 -p 9001:9001 \ // -e MINIO_ROOT_USER=minio -e MINIO_ROOT_PASSWORD=minio1234 \ // minio/minio server /data --console-address ":9001" // docker exec minio-test mkdir -p /data/base-archive-test // // AWS_ENDPOINT_URL=http://127.0.0.1:9000 \ // AWS_ACCESS_KEY_ID=minio AWS_SECRET_ACCESS_KEY=minio1234 \ // go test -tags=integration ./network -run TestS3Integration -v // // A GCS variant lives alongside at archive_gcs_integration_test.go, // gated behind "integration && gcs" with fake-gcs-server. package network import ( "context" "fmt" "os" "testing" "time" ) func skipWithoutMinIO(t *testing.T) string { t.Helper() if os.Getenv("AWS_ENDPOINT_URL") == "" { t.Skip("AWS_ENDPOINT_URL unset; start a MinIO container per the file header") } b := os.Getenv("BASE_ARCHIVE_TEST_BUCKET") if b == "" { b = "base-archive-test" } return b } func TestS3IntegrationRoundTrip(t *testing.T) { bucket := skipWithoutMinIO(t) ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute) defer cancel() a, err := NewArchive(ctx, ArchiveConfig{ URL: fmt.Sprintf("s3://%s", bucket), SegmentTargetBytes: 4096, FlushInterval: 100 * time.Millisecond, RetryDeadline: 30 * time.Second, }, "svc-itest", nil) if err != nil { t.Fatalf("NewArchive: %v", err) } if a == nil { t.Fatalf("NewArchive returned nil archive") } t.Cleanup(func() { _ = a.Close() }) const n = 1000 for i := uint64(1); i <= n; i++ { f := newFrame("shard-itest", i, i-1, []byte(fmt.Sprintf("payload-%d", i))) if err := a.Append(ctx, "shard-itest", i, f.encode()); err != nil { t.Fatalf("append %d: %v", i, err) } } if err := a.Close(); err != nil { t.Fatalf("close: %v", err) } // Re-open to read back — proves persistence across archive instances. a2, err := NewArchive(ctx, ArchiveConfig{ URL: fmt.Sprintf("s3://%s", bucket), }, "svc-itest", nil) if err != nil { t.Fatalf("NewArchive reopen: %v", err) } t.Cleanup(func() { _ = a2.Close() }) it, err := a2.Range(ctx, "shard-itest", 1, n) if err != nil { t.Fatalf("Range: %v", err) } var got uint64 for f, err := range it { if err != nil { t.Fatalf("iter err: %v", err) } got++ if f.Seq != got { t.Fatalf("seq want %d got %d", got, f.Seq) } if err := f.Valid(); err != nil { t.Fatalf("frame %d invalid: %v", got, err) } want := fmt.Sprintf("payload-%d", got) if string(f.Payload) != want { t.Fatalf("payload %d: want %q got %q", got, want, string(f.Payload)) } } if got != n { t.Fatalf("want %d frames, got %d", n, got) } } WV|xs  && gcsOTestGCST&if os.Getenv("STORAGE_EMULATOR_HOST") == "" { t.Skip("STORAGE_EMULATOR_HOST unset; start fake-gcs-server per the header of ar&chive_integration_test.go") } bucket/3ucket == "" { bucket = "base-archive-gcs-test" }gsAgQ5gs(i2=g +g3: %v"ZS),URL: fmt.Sprintf("gs://%s", bucket)}, "svc-gQ*]g&r `s <: # C}zxpackage network import ( "bytes" "context" "fmt" "io" "iter" "net/url" "os" "strings" "github.com/minio/minio-go/v7" "github.com/minio/minio-go/v7/pkg/credentials" ) // s3Archive is the S3/MinIO-protocol backend. It works against AWS S3, // hanzoai/s3 self-hosted, and any other MinIO-compatible endpoint. // // Credential resolution order (first match wins): // 1. AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY static creds. // 2. IAM / IRSA / Workload Identity chain (credentials.IAM). // // Endpoint resolution: // - AWS_ENDPOINT_URL set → that endpoint (MinIO / hanzoai/s3). // - AWS_ENDPOINT_URL unset → s3..amazonaws.com default. // // Both paths honour AWS_REGION (defaults to us-east-1). type s3Archive struct { *archiveWriter client *minio.Client bucket string } type s3Upload struct { client *minio.Client bucket string } func newS3Archive(ctx context.Context, bucket, svcPrefix string, cfg ArchiveConfig, m *ArchiveMetrics) (*s3Archive, error) { endpoint, secure, err := resolveS3Endpoint() if err != nil { return nil, err } region := os.Getenv("AWS_REGION") if region == "" { region = "us-east-1" } creds, err := resolveS3Creds() if err != nil { return nil, err } client, err := minio.New(endpoint, &minio.Options{ Creds: creds, Secure: secure, Region: region, }) if err != nil { return nil, fmt.Errorf("archive s3: new client: %w", err) } ok, err := client.BucketExists(ctx, bucket) if err != nil { return nil, fmt.Errorf("archive s3: bucket check %s: %w", bucket, err) } if !ok { return nil, fmt.Errorf("archive s3: bucket %q does not exist", bucket) } up := &s3Upload{client: client, bucket: bucket} return &s3Archive{ archiveWriter: newArchiveWriter(up, svcPrefix, cfg, m), client: client, bucket: bucket, }, nil } // Append satisfies Archive. func (a *s3Archive) Append(ctx context.Context, shardID string, seq uint64, frame []byte) error { return a.archiveWriter.Append(ctx, shardID, seq, frame) } // Range satisfies Archive. func (a *s3Archive) Range(ctx context.Context, shardID string, fromSeq, toSeq uint64) (iter.Seq2[Frame, error], error) { return a.archiveWriter.Range(ctx, shardID, fromSeq, toSeq) } // Close satisfies Archive. func (a *s3Archive) Close() error { return a.archiveWriter.Close() } // --- uploader impl --- func (u *s3Upload) put(ctx context.Context, key string, body []byte) error { _, err := u.client.PutObject(ctx, u.bucket, key, bytes.NewReader(body), int64(len(body)), minio.PutObjectOptions{ ContentType: "application/octet-stream", SendContentMd5: true, }) if err != nil { return fmt.Errorf("s3 put %s/%s: %w", u.bucket, key, err) } return nil } func (u *s3Upload) get(ctx context.Context, key string) ([]byte, error) { obj, err := u.client.GetObject(ctx, u.bucket, key, minio.GetObjectOptions{}) if err != nil { return nil, fmt.Errorf("s3 get %s/%s: %w", u.bucket, key, err) } defer obj.Close() b, err := io.ReadAll(obj) if err != nil { return nil, fmt.Errorf("s3 read %s/%s: %w", u.bucket, key, err) } return b, nil } func (u *s3Upload) list(ctx context.Context, prefix string) ([]string, error) { var out []string for info := range u.client.ListObjects(ctx, u.bucket, minio.ListObjectsOptions{ Prefix: prefix, Recursive: true, }) { if info.Err != nil { return nil, fmt.Errorf("s3 list %s/%s: %w", u.bucket, prefix, info.Err) } out = append(out, info.Key) } return out, nil } func (u *s3Upload) close() error { return nil } func (u *s3Upload) scheme() string { return "s3" } // resolveS3Endpoint picks the endpoint host:port and TLS flag. // AWS_ENDPOINT_URL lets operators point at hanzoai/s3, MinIO, or any // other S3-compatible endpoint; without it, we talk to AWS. func resolveS3Endpoint() (string, bool, error) { raw := os.Getenv("AWS_ENDPOINT_URL") if raw == "" { // AWS default. region := os.Getenv("AWS_REGION") if region == "" { region = "us-east-1" } return fmt.Sprintf("s3.%s.amazonaws.com", region), true, nil } // Accept both "host:port" and full URLs. if !strings.Contains(raw, "://") { return raw, true, nil } u, err := url.Parse(raw) if err != nil { return "", false, fmt.Errorf("archive s3: parse AWS_ENDPOINT_URL %q: %w", raw, err) } return u.Host, u.Scheme == "https", nil } // resolveS3Creds returns a provider chain. Static creds win if both // env vars are set; otherwise we delegate to IAM / IRSA / Workload // Identity via the minio-go credentials.IAM provider. func resolveS3Creds() (*credentials.Credentials, error) { ak := os.Getenv("AWS_ACCESS_KEY_ID") sk := os.Getenv("AWS_SECRET_ACCESS_KEY") token := os.Getenv("AWS_SESSION_TOKEN") if ak != "" && sk != "" { return credentials.NewStaticV4(ak, sk, token), nil } // IAM chain: EKS/IRSA via WebIdentity, EC2 metadata, ECS task role. return credentials.NewIAM(""), nil } 4$xZ{oF D%Z*Gͣgȥ5E2|R}}~򥗝A$fvf|"X((h,Yx/nfb"΢] _ӈH(QZ"3g]LUDeZl/ċ2Rƙ~ %]Eq#~)syH\x +͘E!˦`,3[fe챑ya'%xƓrf:Վj6]v2"N"< +\S|~Xagۭu|DNBeR Uc $)vf"Ę%ٔg$cYDF`<65 5%vy( zlXVN/ݮJ{=g#"A׽A懇||DH5--mQkQ2pca*@;2(PKF>NOg.s^Ep55xL;ͱSɰ8h!uܰp&I2m&S!laJ ]6;{-&-c'ZVY{=SSGq:=S&찯hJҬƤճ+|G+E9m /_ H xYWyLz^ T΁q-r ՈMێ\}W)|yZaϓieT`ZYoy_M?i uxQ\۠ڴIL!Խ§UMo6Dr5[6)6orjQW崚lMΰiy\r㌺݈f6@2|.Fގn*_xUO OEwLfTyz^(eT+G.ӧ>b{ b''2KQd49!Ōlc$b!#*@BR^o97Pޚ?'햹ɜj ŝ"|>hH9vL~7IQ`cy5XSy)~MCVE *DLQygbцK.i4)#gTRT7@Z AADꋂUpוtׅ.jF᪘7`&Ysf:eΑ (KZ֬ls"Ȑ;{AOw9 ;ZC1Xga8aoĕ.6E׊5@$]SXeI(S Nɪ%z[`R%}7%;,P5eC4}IbsLȧxZ/)CʼnUSNvjZW#U!RXҔF6NWDZ =z.gF(0UM25P[\$]nHJݩFZ- m,kQ2Rv-L6#XLr렾J_"Uq9>v> 6>GkU)Dd!#!&FlFln:X2t_ XITWFy3 }1c]Vŕq8uJf.ˉKe)yH`ģv:e`I!DU(>X,@TcFo 2" =:;hbq,PjI)MM@0z^aXn!fs:iܽ$1-YIUkcUi֕c@`W0ů ĸ?J6)-B!琻h&lC"XF+ܨP`@X ^M)vƉ7:$T"0}0b]'k ש5$1ZFybU|G1sqDUe,pi@j)]9h@~Nn9{7ٲ)3Q2HTi6ш0[E8 ϤedWkY|4"}RQ0iڈ=gUy :ۥpL\zB]P"[x?lknSoF$mEm#g؆-EעXIȠz/B$x=nX] :4nko28h]` 8))+ԒZIGӋ;l_`̸OX]7B]Pwpww{4i:d#l/69B*\R*Z黦G>wt_xMLdRɚv **I p@.IsTEC)J'" #6bU?$<31 %&UuHXOd_7-ٸy{~ږ7ċ/?wi@nHΜ/Q rrSc2-%9+}*u6^4N]7oJiz 6vү[bU ?Im|Y-X&o-:J&Tgpw7bV/ 4MMI]&ڟ)Dƹ{!2%"h@ڍRΐ,&Sӏx(0`!Fl!E@ًj_e^m"Ȓ:o^/5+5YjjuV5mD^j!BGx[FzJ%[bfi 8d<嬱0 "K"[i4OO߹IIgk -u9u.߹Q'škW٪tUmc)kwb_|/VcXx)$*uǃQ\naYlfQV'x4Nx0 NNLS.Nme2o5Vqnʦ>Y$|m|S{i@Hͪ5-aJ筩/qeSn;WFf1Sved)YEuaYnc^&bܜnM%nkj <_A)m@`}=8qI}es;6vcc3s|4vdlUjp|i eX&ypieeUf=Mrps%2npb#.ƚS]VL-*v\ʸBĒ2o[ruLJ\LsxQOft_O1i\Ǭby߸J٥ أQ@Z LJ[MҊa3@%C,;h>kfA]G}S`y&#L4_&o &&((qj^Oӓ'WyEۀ+67ֽF6ʥ%%5n V&!N@h&}@KeF־c⺁ D%Hזa@u=7}c'(-L+/蠭!v,0vf ev7yޝĖl78E'38mdm*+ 𮱚S: ߾~n!!i 3wVKo.gC[MB-qp UB0 z(|zˏ"O;q'؎쪚`3$c .N*U,"=~`,CH\0AVlF0n-AKܕϗA]㒰HF\>8Z?Sh / M.?VrlvultlVf02mZFTi8 : Z]~iU9~mm&*r#=iOsڙf"~a G cWޮI#RnIF@hNpfZ0x0 V M@\ēYLϚ,@=9g0a6 HjqSZŬ>#VX ]Ba3&B&U`,xw@R؀ ?+e8ɰrh)xG_O1Sh;a\f&: _E'Ψ9&| !z>9E9C|圽S t0/I6p! )<}閕CbDHKUhtdb7V=/Ҝx ITa@~b{ [2D g8db< z[6~1+1CO/R:=?#*9%@A+1c2L3Wu|f;5drQšZL%!Qlk2YJ/8 ~z)"pq ȑ,$8]9$+$l!164)o3!n[ Sih}mtVz'D׋ V0 m |Ǵ%M-X2C'~Mk|%ȼ|2TUEUA3.r5PX7;,HuO2}G)Jo4H^PH0jhy6?ep~n9)%|;dOB#`'vOV1ӀgT=ًn]瑰 :ssnJWKWu2 ˕+b 5VA+T.K'y5!^ywDAe\OY)x;ÊmL5mxJ+'w!N[?lx~C{e3G]tz`v.ԜG9ʅnT6qs^U}sHu\M'uuUz^HflZ5J#MsH5hY<""x0ԜHZQW>jQ!nJca]l&`ד!WD!]<34Eb1LεK*֞iRqkQ6]2Zz(kd)m/&s(uAF v&,[3QбUY5y\km/ Q|.%pkӉNfM PHՈkB%ZTaaYXN(!fmf>O,¯VWn<]<2CZ6~Wt6sUR$Y/SM{M.wIx=ZpZ+~Oy}pľ֏e}D=]M֫k6кbӯ|뗾m{o/k@r+,9^Vm)G]R\ HNO[x5gűJVp9GW )|.sηWe(\El%](?rEq5sj@uwCOQC ,S;Cp~HEe8^3N!*$> ح+¹P8yPXC6;O˃xSV?{MSPN 2P+D-|상? 3L{ծjY5[?~[asm]jd}Z{PyOg\_F=ԭR]k6XTAHr6h[AqA?lR4gGoV.4301Ʌ4vw"/EߛI -rD@򶗺No5HZ DoE s}_Ly[sPD?2NR Δ#_8,`>n'C+i rM|3${q&p6B+TbsY P;߱3^|!ܳ;l=ۋC@DJHa} ܒ̢C([ [ṿ~y|! x}rɒo)j0] )NoqG"yHjkY+5؇nj/G~I&$/3 J{,EuɪYstOu^޻j^}1s2w{ 81 )߾}q&. Af Ɠ7MNM[P_ɨwۏO_ ?F_d1L7 h7>>>o?#?dJ[' M8M˺g$[dfLRlUWẢqNt[y|3''m8æzf']WxT>~3 JkD>VUx H;_df?9'x sח_Hq*Gnwg3=¿K=f:S!I(? ]^(4wfRM-h[ɽADۻ"CSxѩ=4ߋ7yHs\ML 8IhBf,,%ʛscRd2;:x83D4ѱ&1EL;o`ԣ 7o>^-DG&iCڧ˕<TD냮fDAzɿ}>=10AW'6 ln6q>J_Hw߼@C|G$N#Rқ-W:ٜ'1n雐^toD;cN9Pni\_G; 1Yb:bqpG)>&N)>X9!ƛ"Eǧ,I~ n]HWlW,+y<`f+9HāB̲n:'ӚfЉNl$麛Ī"#N9&+&+z*~Է6M "bO: *p 42H;0%D+m?uG& *d%.&I@mM4D:!MVNgb"7`IڅOu+Oxn&䷃S ab+%;1~%H2|M7':*ZQE;w߱(j٠2 o[./=WW5:rx!RF(LXYg4]x/2(.fpFy]);O>YcI6G_wzn^CIK7k40E88X%ݞ3w×a%yn@]T.X t|ӔGj"}0szݘMZ f&^ȣ@&Ĭ=[0 Ҳ@KFV$LWwPTfADGE8hzIt6Dr_3mw&شK)-qZ:Үb{%)ZviI)~3ɳ \iLI\7$+yM*KMCW:&ѽ,y꒮We7 a$at:&ց3aE~GY{Yx)'׾$MfwSZBr/d )X8͉#ҹ/e+OKg^:YzωዯlGR0I^Cϩ%iMnGpD\f3ibV3A2+ V)QX\F˹Gji9Lj}Rfٖ>Dxq ~5GRAc8*/&m1K !">TD vXG vDTr0(HT>-yL?^ѐ}M4Xv`cT_o |ݠ:$"Ydf"AX),FG:(/Hj@Gt# (!ԭPɤkdP` 9+_q䨺dՀ0K9q/tjGb=s )yOp|Izλ+7oENay}o~'hr܄5 ~ ߭ٛMߋ7t) 䩞"EydR'>47,)] Cwk( U#D(- 8ϥal7d_e%/ <6ǤZP8-9mM`G!11+'613A@3 هfM"dk~`7zsT_~aЎǢ;(bf~lVG o|f %upXDYJ"Dj2&avsJc`Zh_1-ixέdHOh!hE7gl7GHݗ'&ؤ 苍]ʋKezoʶSk"=/dF4um8WV.5 &:yGFP.Du />"`% Y;^xPvRghi]z3u7p)&6hfo2G#9ң $5J1+|̱n3bUOY%c ˆ, IE˒!F% Sm9_Y+%Us7hpo5H#6|Tv #G]6M%b[~G)BD-[Ay؛FP5ytB:3an Vhzi oQ5z -DLhz3;Widq&m^yMxQp@c҂88)Cq!O in^:; I* վ@3qf q)]t۟9qn`j2D7#2^45p]yH-!*iz쮣n%/y NN+Rןt[P׻.DjR%&ԤRK84o0#uU/}e5@M <.BV1\=(3AHOEs]5d2FQwX=*SQ,H}FUY*ṠOd|X1/CٹΓ1}M\`D8JH6'%ϽK:f1+c#9҉?".R` `/"D!ye+:@)F '^ }e t"',K"#gw \MG L@%)d$6*z,LDb%-8+vf/^$P(Q2WxQ?BXSgk6"Da#Si0s'jpGz!%vQDgi>(@tWU,Ω'hYF mQ6V)b"%Kixĵv~g}%pKM;*-UMqY@4001uޜ3GLqJ\lA4۩LKUb}2ܥq*Hé EDkAd;>e'1viT իtsw"]+:Hg]DCڗ _˻"p6'ec]e%'Ӫ$рE6Q~` -+Γ^TosNݰ"84]%PBQ_1:S]ȖP{:ҽ,&HH2qj5bMԈ!Vd[ad5e+jy6uI Op8o*Ak_\fEI2?>06B׫,Ylp.`4K m9 n"D#Ba4D_΅+o`qA?U(ˬU6뗭J5TT鲐GC$ض6|Y;<N8R ,,Ma#]7 '̃趮39n\{ߔsk^u&H-G67ǷvdM`}bpܲ]sD\MaZtg^'8B<4l.[Jd t֣%[ 3D''vB '4ɂ.^CDž%]qX|QƗ8FGa5C `0͆[Aҳy?ŅLn6@Tgv-FDsU** _5T: o(Tz=R'.hDφNڀaU؅)#:K["TKXP`uHTYɓVGvSN3s|yӧ \sa5hG16hQNe*pãs>E@كYmih2zЧ߂?:LVY,n|F%D>@ xHd)H\p&']K#::O=}S>@qC O6E01fm1I9oRMh'@TZaA3}}κ2yx>Wsĝ%9Z?։]ɮFDNS*.Isj'4AbB: ;>ʉ{˕(2YM.nb.;Ig-HbSI^keSiNObB++3"[G|%,<ܒ}¾dGap& {+4 V{M>8C2`auԻmPZ-幾yO?Nã<;?N_1zXliΙXW-+1Rb2yO`HzRÛ#?NUJ,|i>u(B+TNhNfgblŕf:4Et1D@OA쩀0]{<%S8٧w-)\ 4! 6-tRg$։Q"VҬ%Ak`G4#H]݉w""VLlLQ@l/XF [E1ҝ<{̩?Mr" Va <^TՃ@C7jr;\H]ٜ!9R7iv%յ6GP%8.|B i0.Pn̩sn'u NIJ.|CHre,ohv'h<ݴ)9"194uȏӂR4Mݔ ɺV[N u|p#Uz;Nʥ1g׉ќjTq9O׷ ՞q!?e>аv1SLT>!p*ڏ%w( KB .Fb4^l}3t?hE&MO :=/岹ٜh^MxGʞTeGȚ ifI݄{h;{iXGuu7u>k$σZ W~<\ 5f P ⁴u;e0=K_n4IjM%ڢ-SQԚ<ۍe +2ϓE7#f\ʤ`Iś; GGbIlobW(2#̺=;8<)=AZ#\csk֘9I2SwFK*tX$3$pMJKZYuQZhnީpzQDLf0{Y4LV7>C'{#UQ=W&sѢqD\40.3{[*Mml֡&=tc[]fHw+=N `Ќ@ Z:dEYYc;6ݞr%i4dr$1M~;OU u~H=#jh#Z˰oB8m̜ǩZ*9_/lSE҄n e KeN/EԷ5'Z, `s?ecWGM06@n,Ǩ 뿋;Px'Ъ`uY2CስtDvgD's^ׂ Nݎ}%f\+T0 &eRh1y=s}|]H]YԻ۟l^wy`Ėewx 5{b x/ d1v-8Fq!:1I<g?Ft6:)1 UqQfPV],9e ds |'A\g{E&)fsؤ5=@fz*G@8&DDp/. ."YoԶQ#\vөAlǻP-g%AT@pDv=P@az j00 ^LͶ6^a4UjHڽh>EU`-$f݉3.X'~.xH}U\G0+:5ñb.' l.{.wR|zS(mf BL)iE jmuuНZ{ɽ8IԽVq઀S"Ym$Usqu0083ڌŶ$e=gbX| 5s.oUk1ݚņZ(c>_:0>DLC_0+^Z ’gӉQ&_ea{F!Dma'(jFZr. "~P_~ KEj(碒447` R tϾ8AeVӄ9Y):\Jk_bya-Tbe}c \:5,B򇶄s6 R]gly~zWLVsg `֞ @G},PLe IȾQxT._}Y"I=vk3 9qEF=RVKߞA98$ޤ5^]d#ͶH9D UrT Z$ ǡSxepkBQ*DC[Ҥ(MY9 Q2J-ִɿ:G=LbɊ&֢AZV|Ӎa THYZ^xUy̺&Ke/זЮ&}'+rBG+# BVW;-ĕEVlrm+Eac8pf_`*&vj#TP5ëwK!}fL;9Rdtb/C?0\e-h,}kk @~}FiSφPFТhE_D?!'@:I߁G~(Qg?ogQ]q]s_{X"hCGlR@xR1zE XM5[Q8US=gm tzǎ_$PW*=?>;?yy:Pgi2;g?R*$[!W,pGtT)R2@o@"E*^5{[AOvXvJ @{cKKzh{'mE-v;97i0"Nn5K6=nq]X'QFBtwDSɹy]2xtL"މg;2}Đ9D*=p_g .[ 4 DΑѢCԣp xtJēr}$_SӌG%B2&ͽR4vgR$Hqìx >a+';*?λjYcXyY>EY@&;ws6 V.IJ傶q]+ $4۵\bIThQWzk@^~+ ׍f^{/8hNV|ă8\w g* Be@ 6C@w0]ܶ~J6\51xÜbeZ%xLGMBI HL<% Ȁ멢*.]o,F -.OTjeR*U=ZPˮ@ڦL, R_}.N\xi@J@7o4N5xEzWQk zmh|6Lk宭AܻVTV4KNᾰ9Y尓6rLd&X"ۅ]촽,>"Eo_ 0%hs•(jدY`C ,+*瀝9gc,'BdJuNX1Ae[;cqKs0Iw.k-noX8ǜN0Eۂ T~7y/tL[̼s Qa6/HJd4--#?6^{LƄ xXm\ːkjknHaBC3u,_J4 r6rKR5k.Z\]S y!Ȫ弭okz͆]&unyr>&%WFcv̏r8)$dסjC#- j'mnFx 2a2r~{xҮi0,Wٮ\ Mc*lo>EܵԲؒ}cփ(_$!IbuMq1|4|sT8S/*keIg@d"nBc*8"hP>--Nxڏid}qXp;mluh Ջ-f9$ ݓUzkͬBL]ϓ`c %1r-k~dE+bߴxNPmz>FX:ֲLxu  _nY݌@(@t:@L5#K㦁\VqȄγSTԗ{+I^;Ei򃖺2-%?W!QZl ߴ%T\'#o` |m#{G6&T5B QfP#-EŸ#?Ԉm ʘ'!1wICr:ր<7\J$^R)ݣ6ݮ**m^V.LMU=Nu{RZR%)rC6H$eڐP!4#9eJ%a$KSEQ;%ICP u.H{_+# 2&e,a2T!Yn[ `dԒTbvw=[_f4+WZ]wKR0#RY:嶔c䮶jXkwKJr BtR66cS?X($k!†J(3/^gJyhE&}M]=J>hu*!+\Y7AD8m`zmr.Ēc+iT [/flpSbM<bHի JR;z\' _T^5:лLfΑiOon1Rc0vs6T.!,7.m\JPv!a!AaՋB_ x AqoVx:E 7߹܎g.+TYQb=3 Mwɔ%X]+FR^@c>O Ov[mK⇦@wEmmX`VP/ -֠qؽ&5 O7y>8./n=fE\p3b9c 0q̠oXή Ͽ͡oKl I@弪UD0n ` P\;q58ā6(>5R5f$5]l''-9$N1 |aӀ牂`=-~3J|6XTڎ%hﵧ`0v장یŸq$M c;P1{q%vcB+[LkZ⽌ gBO|Uc9^T{{6KOD:ٳN^?o>oF!- ~7_}y7;*^~3QBT Q`3:5\T_1զlaHG3F`Rv^<2?w;He?7+|_w;T=x {ÞNs5QO`rN0g/+(8EG||i(~CwB 8'͹Qc 'ٲ(}^'nAc k  bI(b rdԜ"ı3Ÿ[pڊg6MCQ;J=  [4=XOa=aA{n?m0íGD>C?ZO w8 0AGv٠M`e6e̛OOeyBxpackage network import ( "context" "sync" "sync/atomic" "testing" "time" "github.com/prometheus/client_golang/prometheus" dto "github.com/prometheus/client_model/go" ) // memoryHub is a one-process transport mesh. Every node that joins the hub // receives every frame that any other node publishes. This is the // in-process stand-in for a real QUIC/gRPC mesh; consensus behaviour is // identical. type memoryHub struct { mu sync.RWMutex nodes map[NodeID]*memoryTransport } func newMemoryHub() *memoryHub { return &memoryHub{nodes: make(map[NodeID]*memoryTransport)} } func (h *memoryHub) connect(id NodeID) *memoryTransport { t := &memoryTransport{hub: h, self: id} h.mu.Lock() h.nodes[id] = t h.mu.Unlock() return t } // memoryTransport satisfies Transport by fanning out Publish via the hub. type memoryTransport struct { hub *memoryHub self NodeID mu sync.Mutex recv func(Envelope) closed bool } func (t *memoryTransport) Start(_ context.Context, recv func(Envelope)) error { t.mu.Lock() t.recv = recv t.closed = false t.mu.Unlock() return nil } func (t *memoryTransport) Publish(env Envelope) error { t.hub.mu.RLock() peers := make([]*memoryTransport, 0, len(t.hub.nodes)) for id, peer := range t.hub.nodes { if id == t.self { continue } peers = append(peers, peer) } t.hub.mu.RUnlock() for _, p := range peers { p.mu.Lock() cb := p.recv closed := p.closed p.mu.Unlock() if cb == nil || closed { continue } // Detach frame bytes — decodeFrame in receiver should allocate its // own buffer, but defensive copy avoids any shared-slice bugs. cb(env) } return nil } func (t *memoryTransport) Stop(_ context.Context) error { t.mu.Lock() t.closed = true t.recv = nil t.mu.Unlock() return nil } // countingSource pretends to be the SQLite WAL tap. It returns a payload // that includes a monotonic counter so we can verify ordering at apply. type countingSource struct { n atomic.Uint64 } func (c *countingSource) CapturePayload(_ string) ([]byte, error) { v := c.n.Add(1) out := make([]byte, 8) for i := 0; i < 8; i++ { out[7-i] = byte(v >> (i * 8)) } return out, nil } // TestThreeNodeCrossShardFinalize spins up three nodes in-process sharing // a memory transport. Node A writes to shardA, node B writes to shardB. // After Quasar finalises, every node's shard must have applied both // frames. func TestThreeNodeCrossShardFinalize(t *testing.T) { hub := newMemoryHub() peers := []string{"a", "b", "c"} nodes := make([]*node, 0, 3) sources := make([]*countingSource, 0, 3) ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second) defer cancel() for _, id := range peers { cfg := Config{ Enabled: true, ShardKey: "user_id", Replication: 3, Peers: filter(peers, id), NodeID: id, Role: RoleValidator, Archive: "off", ListenHTTP: ":0", ListenP2P: ":0", } nn, err := newNodeWithTransport(cfg, hub.connect(NodeID(id))) if err != nil { t.Fatalf("node %s: %v", id, err) } src := &countingSource{} nn.walSrc = src if err := nn.Start(ctx); err != nil { t.Fatalf("node %s start: %v", id, err) } t.Cleanup(func() { _ = nn.Stop(context.Background()) }) nodes = append(nodes, nn) sources = append(sources, src) } // Writer A submits on shard-alpha; writer B submits on shard-beta. if err := submitLocalOn(nodes[0], "shard-alpha"); err != nil { t.Fatalf("node a submit: %v", err) } if err := submitLocalOn(nodes[1], "shard-beta"); err != nil { t.Fatalf("node b submit: %v", err) } _ = sources // only exists to ensure distinct payloads per node // Poll until every node has applied one frame on each of the two // shards, or the deadline trips. deadline := time.Now().Add(5 * time.Second) for { ok := true for _, n := range nodes { sa, err := n.shard("shard-alpha") if err != nil || sa.LocalSeq() < 1 { ok = false break } sb, err := n.shard("shard-beta") if err != nil || sb.LocalSeq() < 1 { ok = false break } } if ok { break } if time.Now().After(deadline) { for i, n := range nodes { sa, _ := n.shard("shard-alpha") sb, _ := n.shard("shard-beta") t.Logf("node %d (%s): alpha.localSeq=%d, beta.localSeq=%d", i, n.id, sa.LocalSeq(), sb.LocalSeq()) } t.Fatal("timeout: not every node finalised both shards") } time.Sleep(25 * time.Millisecond) } // Sanity: every node finalised both frames. for i, n := range nodes { m := n.Metrics() if got := counterVal(t, m.FramesFinalized); got < 2 { t.Errorf("node %d: FramesFinalized = %v, want >= 2", i, got) } } // The two writer nodes (A, B) produced one local frame each; the // third saw both via transport. if got := counterVal(t, nodes[0].Metrics().FramesSubmitted); got < 1 { t.Errorf("node a: FramesSubmitted = %v, want >= 1", got) } if got := counterVal(t, nodes[1].Metrics().FramesSubmitted); got < 1 { t.Errorf("node b: FramesSubmitted = %v, want >= 1", got) } if got := counterVal(t, nodes[2].Metrics().FramesIngested); got < 2 { t.Errorf("node c: FramesIngested = %v, want >= 2", got) } } // submitLocalOn fires a synthetic commit on n for shard. This exercises // the same path InstallWALHook's callback uses so the integration test // covers the full produce → Quasar → apply loop without a live SQLite. func submitLocalOn(n *node, shard string) error { s, err := n.shard(shard) if err != nil { return err } w := &shardWriter{shardID: shard, src: n.walSrc} f, err := w.buildFrame() if err != nil { return err } if err := s.submitLocal(f); err != nil { return err } return n.transport.Publish(Envelope{ShardID: shard, Frame: f}) } func filter(all []string, drop string) []string { out := make([]string, 0, len(all)-1) for _, s := range all { if s == drop { continue } out = append(out, s) } return out } func counterVal(t *testing.T, c prometheus.Counter) float64 { t.Helper() var m dto.Metric if err := c.Write(&m); err != nil { t.Fatalf("counter Write: %v", err) } return m.GetCounter().GetValue() } A7~xGB|njIQfRzfIFi^r~~NiEZ>Dbca16sb>D9xOoBRKJSK44j} xZnM>D?]\[.tT@!j5] ݡ޲kW(IsfBQ`ݙ3CuziT_7T'EڦNe,SҪXS7I4}P-Qƨuً .k)lZ\ԹŴ[Lm7i~?y5*ꩶFmtԸkS4xW4+h!Ȯulf UfrMZ8@7ꪬ/jcj4e*)_M]?֪'*1)SHRaی/M'tA.Jk!FUMxh%7r[U@^ty"tZQj>KyUB#5CйQxN^+ N:T.!dZe *S0eU&arTlG&{ICYÆee3TUO\JgP#TXM)%cCG38jF_0t~ˎR)xz|/,Ck N`Ԋ̝$p9o5,umE8nrYՔ*o&ڪ4.>9\V1mNJ"*3 詏Hkē&mmϻ&DfՂ(`^?x3;#ZHvf)A^6kP؜8=W23DDv'0W..@M%8l^ iUI]VV5~|˺9d<@8e:ԔL'p\1}X:Зx^H$r6-]Qx`QtEw<,TM_Nhpbō|ExKk M{,ח&qx+EKqnA ([ t@㧋o4LszD%\rl6jUE_\-d/t(W{~&?~0xs =]q4 h | {n=I.Gyyɽ? NIV;S)!e vk!>Lt5vM5+g*F& l7׶!Y݅ fwPk]!Ch6&+b,WW-JfB &6m+4>5LӢZ&UFD J*d qs+UEFl`3*:zjSlk. T%@\* OoONmУY{/AҢ5NfkGS ka&uU P|$i%C1@ Oٍu&%1SCC}ʹ KfcV̚;,4=H`Z.u &:w[p, DѰ*Z|=gMgGB*K8,=W_Տ62KdL9eR1Mʅ ,ʺ4,szݲMhNzH;;ϋ06,O`h'OmNWqC5в '2g閝%,K(맔]pdޔsޟp ! RSf@,_Fg`զ@ki~ju+.ؒZwT87|~`ҁo},y椾Ơڵv?}UFaW)x{] oBoо9[3,pqN=^_4 ϩt&wb~`)i[iO$f9\.^!P?|?RzpvJDew C^^ o47\4#Ӄ@jյr2:;/lͿwv09M_ =U4U ӧHkt_}s1gW&^v{͢'_B$[.Z4n2/?(V EJQƒ; ݝG~㹩Hr%k\E#]7-2.4ߌZ~'R4o`4vwZk+e`G^GsVSW+(S>tdA UN~njf:F#Hl45+huˉ=c?2߯-ltC?Oyè %)ZTUH꺾́(s}ܬN:T7&oaa]Kek8ɋ]ԮԗH\#٠J6I:i"]];u#tX Ccnw:\SN2/K {H5̼kBGUF!{Q h 6i,ܝ5XppGNÝnvdtMiûxZrF}&*;Ee*ŗXUVe9!`h<l %{gp%)z/cCLOOÇ4NVi0ky}ҍqNs( IFfLWwҙR犦A'gi V"S g vu!eqS{nHO/釣N?s/&wRHbC;LPiER>K%TmZ:N/ S7 !NBU.rPea3A !ćӬ11.Hg}2 BSnJ24dU{,anHUE. Lղb~l*=/~9Tt[=j&y8"cO"AI|F|'4\8^qK&b\&0 `UN[IOim>t;WjQsQ 7AtL*_^HKY0H-J="q7v a&:Nv=`84nWS`X0vZ/\Wo.&cDT9ݎ; Jz{w;3xpp,XL)TQڧ_E({k{kG;c*)wy5fεYy/=KwĚu&`x1a#Kv AԄ!M| Nx~8uCˌ5p#&1sdeiͥ{jm`&9S3A8/;v́@-FtaH nr!}5+v#5OL -(~$*' Gx<hcaDt<&rr8;Έ&K%_JBSl t r#!J3+Gz!c1 ?o0WBDIa6'` #-k|LF9f vD6zC<4#?M6#Fj+O3ḡ;DJ<ςiH% w9(쿐I! 2`ᦫosý,7戤mg5l +? r^ym ٌ4.v 7hF ?\K [AVlq>B g`8bB3Ս^R*[h[s.Q"KsEN c<ʈ U20}Dfz$s680q(ۄog-c-'mx>>-JUӰ/3;@8|X̅khk l߂PE&9U`+0 Q&U\讐7KNA~Uېo+=# _޻\w |P?Xa<'bтlO؏EEQ+T(9>F&@cSqXB~C~0 6&|ɌӬ=+ M6Ƙ7G1V4=f0 Wn.UϓNsRbLP%O<Wk@M7/t^gY\ǟoYsxo ״ܦgELYԽPKH(wG|yKD2+=Vk:-{qQ˄+\g q[ |ާRq=Q|HÿY@kЛ,a38qDBHl$^fm,/:y3ȸpZ1%pqW]yE-YzQ?Ln:&޾< U7j{on}}|&ϛRlKJnX=4~Z٭)5uTh(nܲܿ0B &nPefݵ:z1vкǦ'8B{@Uz&m 9du0垖aj&L1ˆ"]̵zgr["Z21PmG7^p۷5fyQíϸc_$jnE(YyRL^Vb2 VT;ί8US[\ M{v%>[{&)S{{| J.gP[SAVi̕6J:hI~K*LX?ݮ^%VG[d6K`}2"*>&=hGD=镴^ƙU߁̗g\ ̝Iѽuxe<:y40$ōmy뚤dPs- Mnr4*@&lHߔ4mn,rǻ앩) K>6+꒩SlI_<˹$-!u!ScGX v0{]ܡ[-Smi>.bC8}57/pGu_&xXmo6lRj+bWh Ab%*&,*IRO/%9cgi +Ey.Z˩ a<1)8Ii2E4' cN9"t|ҐK#%Xsy^ +=<JiJZ42-7ȹLٌFeW\0T+Y$(rVD0f)'HKP3Fb1υdcbV"fYvy`K_|XNuS"E2 (5+c !uR *!.pF/(/7*Ix.27)# jsN #Rx/POGs[j Rd]xBO}JC?$+ .S .&"\=cVxIh=08  F#bYnm㦊b%(̓vjoh2)촅C8"l:_T`x U>}x ȩ\8GV:k3g*9/Gώލ煽vT% ҋiN]f{X!|E>h+RS\OIݚ(mLo]Ua '.%kyq`||8_cˢF.i s~wz'g iLEDS?I)\Qa:b`Fd׏n6Ak/mc7mv?/AY6PA9ﻤ?b 5';,9*s昙qsP7QPUY ӷz raܤu@C'V*qi2+b:nLEwYxJZ<Ojkml -)Ub0~tt& 6 l< o;%6+ ι8a@૱[mS ( K@Y╮qHfUH0:]f6Cz^Oǒ!c2!ll7_ESmCͭM#q`Y& G6̅Vlk5,Cwkjl3g&ʯx@J1M4d*=( &|%If6=z(@oZo񞥖nD^Y4)hH6y:{$xosݴfW G4h5ctOid[_\Tbf+5 ڞl*]_J야?XJb*LZiSá,U",7I7p*]`n3f+O zJf U𖅗9Pkú-_J|~Gg+M뱻u<`^?p^o7.~fjRu˨Z9<s^t_xY͒6>Fȕrg\5:l尵HHI08qU"OO_ R+3X5ԈF%Y,Th^ݮ3]=k+dkeu)}œ3N:2KP[)e)3 AۅV53H֤i^ ##:s|At4X_ȝhKދJ#Xݏػh'*#,#mr욹HaGʥUr= ζʍ--MeQZX^,LYl\m鵈̩e{k9$( + zj9rSf{trFOx:W V+[[JGJЫVB+VCC98 ]AH6栶7S픮qNU*`?:6`rbbvR ohwu|F"vۣOůjQr^b(b.ovFƶJ9'NwAJ6U'M2}{B]DӔǍd;D؝7Kݱ}Im3GY]O+9Cg!IDo9ދ^]]C\j7T䊳uhB ۝A>E7BaWP^B8B:9_:3BJי\Eڹ°RZT]\~mw;֡lu4g܀f OѠ%m)UAa0¨{#eܫ\4U3/x%ɝuOy|7ݡEwb??w igwVeE7>!$kn !bo$}a וBK@Կ`[Ǿ<Cxug f[L=`^BO"f@lW=?m[!MJЈV [f+Vwe4!1_ՆmVl#gDm=S+s~l{y Bh ʞT9vd@Mb2yt2_cHnrh'Wd+wP|T 9H 'jזd \`s~صuh]h/Į<Lj/OξGj>' A}_ʲCMIPT;llu|XߴOp-6#0^H@bK8Z8 ؈r @R\>m s. DOG]ܔ<0NO؟4( 3tlq7()΁1Ѫ]xS =FD-aɎmKg'r&<&||p6Axq|xCld& wh*Oz g?.=y{Fȷ( 7krY53;RǏ9Uz 5=x.7_ƶUe CKP~SCO?`RX31'Egrv 3O l8AN7Q%a͕B)`b]ݓpz?\ T(8;KQ3GFq,=/:&F&"^T֪W8zu2Nѹ!t!'WUS݋n%|! [U;e<} bS5{pr_ ]BG%-!Sy) |˪VÜiR7MF|I*tqV#l}KFe:OZ?'S?sSn:x c.',8D3M '>JR3W~('C/[gq @齄Š/ !]+Oa?fG-x[jt|njIQfRzfIFi^r~~NiEZ>Db{5vf(sr/t2X㓘TYZ%E)PItiTԼbdiVi`ܡK8݊sSKr3KJRS@=SA0٥`ƳKUw2Dx&g?(ǂJעb#??*E#8' psT_j9TT1$8aR~<'&ᓞϛV|)L~ʗ_3>JM@'3!ɪ. N.XFJLŠK )#l*(āA੥2IFi f pc7t{`V80?ڮ #6` 7U"ϸ1z? ]Sb #;Wa Qe/ZngZJqУG-I7֮QSL4v;:#jǝ>YQkToא>',x|݄\g4Q| bk{ _gía}aiyXFxr$SF{ѕ]%uvFñG{xGnFr-%Es:+uӵraxeRnexIdԆKHbC,떜HMN/_ 5b;۠{ FD+b5Vm2UEX^SRr,~ G;,Tr^ |?>tZfB.ΨqRRgT!O?.%E0%.7S岜Il|MM^RԶXfKK#TW,1VwI4/WVph oBON:ɩ_~qJHzoM?= 28Nv' ^ ehiG]oÔݍ$:d/K, lͱ-m o$hw̖Y #YxWn7}b@U*+4h@FlŵAJ[SJ1}|Ig+$+rh T/"g3g.Dt-F LZ-d8kH+o]@j˿ZQPjI"K']5;b!#LD.]q]kѡN{.__ 4Zm(CZL *A /2 R%^E5J %a}Y' mZKYh!b=(<0A7ֱIn HHЦV=Zj? K6_GFL?}1Нֆ-`O.eX}v,Ll]UpU+\ԡyMe܇f,p!vsAO",iWdVC*%h XnB]w:Gt~BSh&&L sS0}˴%"~ruL9@|ra9K%̛Wxiw`׶bիϼ]Az.g:oĸ7yjh{6U+G(4.ժ3S,ՂSnLY.oTk/X۟@;BE@| \n%ӄV0M8Eg0aKy~zBCtDE**º&SŔr*7]tOO;=|A۽> @߇ b,ʄcW//` xp~~^عKSFg* qVzrm;o ;zO\;Ԡ/H,:z]$o_(EJ٠y R+h/%+]8mxcq:-$^ח6vy}`qUz8&60BYfHlpȺ޶ &֩o t~p1bƼIqcLR3&LIDM( ¯I Նg#{ЋNsHE"  ~ xJP$4aFY76\7͚ɰS#!p"P֤<1υ07C{)Rn@Ҥ6CnK?6cxr;bKxnΝ/ᱧ-0iӤ4؂ht@ }#;vמE,T壖NzeoxYn75LVm/µ$X 4 jXϐScY CIj&|;еZ ֺTWuA$InMP~*L~2MgτڋQQj\&[ j~#]!6K'Yk %trZ9?72ߨL,t"Z-J廼TQֵA˟CrxT&'5A 0ΨxͯIvc9,.\luY߾xysѯy;/ tkjrFףkv%eڅ(Rg⛥ϝ^*Q0N-]|@t X+M].Y60~DJ&Cw&~uUCqCf7Ї E%rm.t !< %@GNE0WV gGџ 0NCIR\^̗҃mJx"Da#g]+8b:5^j{ 띹+Z΂T$OQPYbzg(C]\rQ,e D[6KTHv&} '>>=1 _#(Pm0+zbotѾ8B\ N@zo%k$n2O֧"334 P5bfl͌ R9M"pi4F%HjtȾҟh30_f/KA.SD.~haa iW zD ւJ")qp`Ԁ#L6qYtzYB;Y׆[ŸJS Րp<iyT{$ksJ-0%)⏲O J$1 J?'<D` x\(Gek>K8l!zI/PC"bg / ON|>V*[? 8 )1''J:!yD se|-XDBql Yz&N ,Lժ ),H RǠ 8VnP.!חM?fTA*2c ۏD70@N3]">/Tӫ]T`8im vИ++v#l?BȟޱUX0pEo@f#:at3Ʈws < &#stC(iqq QGi:7fzSBdc0nAK^s؀#?CFQ)ʄ;l^OX 9]w_u9:P9t4ٵɓANgA^-{̱)V6:.ɍo^xa 2.6c}32} PpJ\ EDrd_͌&:44T>oAD6;LǮk$L7 {S6E,20+7ߜFj[|}LQVX:(ZUOH=tv&9+ ZtY;vz%WEm_6UCcgdh`dq|4)E<вZwe3At1(ߐު5'?HZQJrR$Gj%}D=~'7Igѱ3듿CL6Q XɃ7'] Xi-l3 RyYJU z'Emu)w\d/=Sĺ(L Aa0 ɊppasMwM q) .Z?@a&o__ةSڳaKMKJ%0ȕxXnER`8PA AJFPՆ^ Ԏwg!efǭ"q ';x(gϜ߿OMj<g <_:ycqYRtdRi}HI~"PoN0JIvXOuͮy%}LOt$ _A>gX ]&JǯZ2{IBtA,ԦYzst;>.U2j~%(8KOv.`)ar6|U꼘jA""6Ӂ-!GEu2գLL)m?rvy@_. ZfÐcN>eLr>].ae}ߐW d^k?&Dr4JEu$, iŷ+a۵9:\6{jvK>rF.-MNLA8ܽtvXn8AX I?L$>g,nS^K:x] }S/.:jîOXrl<= 6jBo3 Nune2J4ZN6ޜqKm]ʆSN?_G֚bbj4'[t?9h/uxuǿ86Ia8/l6tt)۬zm ҴrPQ[nLY 9&G1ц̡q)q`_xL[ruYA=F?IKt8tTe5&)Bemoo~gXe >!<@O'wv%6眳|fsDžL&3#2[xΧe¬{\,6,jֈ"V`1Lcf~~*w7ōif֜TЂtT#]#v4bjќ7%! lFJ /\4HXLLi. ]Rt{l|Z{$b, LDȠb:+XAQI*ؑ\\Vք<T -R=ڌR97<6-HV<‚q]H-9be3Lha6PE\/MbN/oyhON:pxcީ;v;h놉ly"w {V:*^m\saqs|wX}bsgH Gp3%\5dFP3  #^-X$VrUǧA^73{CΫ I >q>妣° ;f;p,ͽk( Sa^R#yNwgiezRQ=ci*s"oOOR$>+!ALINyOڴ'LtLZ c-`&J3I0Aߵ)5߷&DJ` _ d>Re!䷩Ic/c^cģ%tJw&b-vٲ[f2wNr{ NZL;x5K[쏼Y,Okcm,3:[YhCo ,}ѫ~ԵT*FqtWӨ TK?UP޷hTe{m(eδZtx M9[[qƹI+[W1U=-v$"*Θ8 `;}P;@QEXaT}Ԃ{PPΨ/J7$Q2&@Q%h+ەddWΜ䤣_AsuvR+kv|+aPƒӽ>ۃ^׿TL8cuEyC4,c#sU0M'~ah3Ql'$D1i;ix,F!\Mּbxu? -'6}>ÁuMȆz2ޘ(#Bn:i UFd\MUuΈѤaBfCq/FJз_ng:wZ}ywz:;:cgk饛z48<-yZsM խ(b9/B6U٦f6N?`>U<&&1:Q룓a/ .A;ˠy)$EbғPjEθ9pYN4ZBglem(7E\E9;!t%U\L1}5UE\!\V*+œqc*) gc^WN\+ƱZPcެzRض}ZCRU_.\=NYSA`.ؐ,߅YEM Hs$"Ͽ@ܢ۸ahxA ;x_ package network import ( "context" "crypto/sha256" "fmt" "time" "github.com/luxfi/consensus/protocol/quasar" ) // quasarEngine is the adapter over github.com/luxfi/consensus/protocol/quasar. // It narrows the upstream Engine to exactly the surface this package needs: // // Submit(shardID, frame) — push a local commit into the DAG. // Finalized() chan Frame — stream of frames that quorum has acked. // Members() []NodeID — current voting set for the shard. // Stop() — graceful shutdown. // // One quasarEngine per shard; one Quasar DAG per shard, per the design doc. type quasarEngine struct { shardID string chainID [32]byte members []NodeID threshold int inner quasar.Engine finalized chan Frame stop context.CancelFunc } // newQuasarEngine builds a Quasar engine scoped to one shard. threshold is // the number of acks needed (k = ⌊N/2⌋+1 in quorum mode, or just N when // N ≤ 2). Single-node (N=1) uses NewTestEngine — Quasar requires threshold // ≥ 2 for production multi-node and we honour that cleanly. func newQuasarEngine(ctx context.Context, shardID string, members []NodeID, threshold int) (*quasarEngine, error) { cfg := quasar.Config{QThreshold: threshold, QuasarTimeout: 30} var ( inner quasar.Engine err error ) if threshold < 2 { inner, err = quasar.NewTestEngine(cfg) } else { inner, err = quasar.NewEngine(cfg) } if err != nil { return nil, fmt.Errorf("quasar: %w", err) } engCtx, cancel := context.WithCancel(ctx) if err := inner.Start(engCtx); err != nil { cancel() return nil, fmt.Errorf("quasar start: %w", err) } q := &quasarEngine{ shardID: shardID, chainID: sha256.Sum256([]byte(shardID)), members: append([]NodeID(nil), members...), threshold: threshold, inner: inner, finalized: make(chan Frame, 1024), stop: cancel, } go q.forwardFinalized(engCtx) return q, nil } // Submit wraps a Frame in a quasar.Block and hands it to the engine. The // Block's ID is the frame checksum so the DAG keys on content. func (q *quasarEngine) Submit(f Frame) error { blk := &quasar.Block{ ID: f.blockID(), ChainID: q.chainID, ChainName: q.shardID, Height: f.Seq, Timestamp: time.Unix(0, f.Timestamp), Data: f.encode(), } return q.inner.Submit(blk) } // Finalized returns the stream of frames finalised by quorum. func (q *quasarEngine) Finalized() <-chan Frame { return q.finalized } // Members returns the voting set for the shard. func (q *quasarEngine) Members() []NodeID { return q.members } // Stop halts the engine and closes the finalized channel. func (q *quasarEngine) Stop() error { q.stop() return q.inner.Stop() } func (q *quasarEngine) forwardFinalized(ctx context.Context) { src := q.inner.Finalized() for { select { case <-ctx.Done(): close(q.finalized) return case blk, ok := <-src: if !ok { close(q.finalized) return } if blk == nil { continue } f, err := decodeFrame(blk.Data) if err != nil { continue } select { case q.finalized <- f: case <-ctx.Done(): close(q.finalized) return } } } } xZrHr}n~En ɑ3$EzKZcccA7X6;#/K|Nf͋?xcvFBYYYy9'hr]Yz_mmljMQc[(MlyVeLlRNjdYympkhnݿ?- OCyx >yRd6?LVԞCbI1<./?Eig)w!^1몙b3-(}OAE_*[mxxu32^F8Еk|Mt]Q62]6zfn% :Jw QCjIr壻]Qe}^qRbPt:I)` SC G1 &C {7+Mfye3rjkߝ⛈9j𭏍KY3Csuiͷ/l &"-!*&N/ܘB˵Hjj%r`>mf!- זq0Ԋ?Qh \YћԷP;Mn{dKd/?;\!22м|4% lyi> MS.*{"%W|;ʢ1D`]6vȧr쿵Kyo*[~Htn4D<-*`X'I5 3kN<+sHnBF/r2C!7t&Um./fm>l,[5Όj}`gd*>OR:@WLjty m]~ŕݗ\8 /đַ/ȃw=&SeM}?; s*=dq_ܑ_:yh6^ , r|>c* }ŅZ3W֓?o䕍%պ0nQZضXxr6s$i @{-_"n"b#s֮TȾN^ZuDL\,O"/\DJ v[@YIpp||_ks&9,154C$p>|ZԹHMT(ǻB5%#v @&W3ŗOB;wPQĎebҗ FNlX )+}@2| 83}&I.0(3}UWЁG6HiM-~7I1q&]^YͼRSj伶΢ʼ=d=$KoWby1.0hD_5yR ]Pk$3T; $RtJX>:jxhz&!aR^ 1Rpax]K॰\UI-[HjdV6Kci4ăFѥ \M^'H(Ilber{!Q~Zف#/iH6̮R3ë4]RG>8%gH5N!mYKx1)PF<  ċS?e^U<΄/Rn).'iRˇ `ӿD T'Z>3Fi.1uhZ~07jh- /\'+\c@/I:NV_ox&29QU@~ +CDei8FMS'~ѕ'\C.[`rQ,2(*`9@h_@F T3Bu-@{[b*0y4H[!+'l[;2U[л?ĊGo y3U[zu-þJ-诤] vJX_=X@ͰD )OX[ Z0KU7(c@u(ۡ7:hi͓z-5tX?3ΖZrK+>j Lʬ`XJf%Lw2)q<&;Kє5'hZd0'PBulM')g}Q 8j|t ,9BqV<% (l_FQ'8Ǹ1V*i҇"`VP8­٢$$ Zy \͉pƥ!e0ԥ"Хmcߗ|DG>M6f~r(#A` z+ @n \#0}@,a~ml&6Ў^"ę70Vj09˽nІ W/t<܂ݪyWFbm̤]E.u2Iy󁝓lhU'ӑ]iK0#f ?>8)0AW +Dp mY- Nuͣr1goz F}^~ >SMtJA?w!W#Fq)1\n sͣz4s =L8P+x'yٮ;}D-LJOy|࠾3Mf(YHJ_&6n1~@& U|ב. VOsU_1.>}䥺 ݋9ܥ@Qv`hТ5k$2 !F͕cD"aU<80rWn#op2>yA`̾#q9Z HC Z'{H]iC@Ÿ[tkjO"|\ Sw.‚}?? c7R HgdԜGni!Z39prȆ )} ɬ)%rV6Ϸ ٘!Gsf+6dD"p^s(Cts9mWjcrpf N1k(21ai*nEDt1>Vt54WKTB3aZ m9-|nb,x4L?V{D[ݑ{*D%M$E;*YY 13T?FbUe$i& >rC.: -'O[́Vg8BB) ^ڒU/B )PI\zL0N%Zpk^ȿϷ$/;He-g^]K"ؕhkG~DgD־FDe6qMÖ U$dean*sM FӼgqd%%&% PruG<'FvO| }Mg,߷^^u%nEQ9@b;/֫>{ AcxڰjT )׌o Mpa{`L\<56a{ >>;N50|МTutNx|Lؾ7B?.{⪡ZO.B|_]_[aR7gUվ(?b<>$]vK%`jKAlqJQu Z9/hP_*#9("fPҲ>x(moIͶ45zwrypMsܽRK)z|!>_ʇYH \ b,b,8EeL6uJr.VTa:汈+K_y:ƕKcpRtK@ےI[D}yACh!Aqf‹v߱"_gaSN9` E&4VnmjuwkQ۝.P{?%D琕B;7:mSx /b(#ȑLFki) {It`V4`(dhFϬU| l}.Jʀ}_si@.$\;7w ͋W7GGG /+RyE?*_ -v~%iֈ H 8O{ Z 6\k[IoDĘ?p`'t!%xcQ%o,'LJ@PSp}ֶR/?{Dd7Wp#m0[ae`Hm皍V4DȫUTNi%)>!+b0 1"Aa=xU9’8~to|*veIqg>lQҹEAzEk}n]EmY`AO7p-F:s'sd|DJQHѮKx[k,ΟP&``6"=FĜ[ /ໞVFr@69O^J9|y ,-݈*Bܹ):[8Yh+b,t} , ʪ|Ƞ??<iVZ>¦4 r{p&z:D`K;G\.\6JvPDane-cx׎˺t=U'c:^v~o|;ȿxopackage network import ( "crypto/sha256" "encoding/binary" "sort" "sync" ) // router is the consistent-hash ring over live members. For a shardID the // ring returns a deterministic ordered list of members — the first is the // writer, the first `replication` are the shard's subset. // // Member churn: rebuild is cheap (sort a small slice). In k8s the operator // keeps the BASE_PEERS list current and we rebuild on a pod-id change. type router struct { mu sync.RWMutex members []NodeID replication int } func newRouter(members []NodeID, replication int) *router { r := &router{replication: replication} r.setMembers(members) return r } func (r *router) setMembers(members []NodeID) { out := append([]NodeID(nil), members...) sort.Slice(out, func(i, j int) bool { return out[i] < out[j] }) r.mu.Lock() r.members = out r.mu.Unlock() } // ownerOf returns the writer member for shardID. func (r *router) ownerOf(shardID string) NodeID { ms := r.membersFor(shardID) if len(ms) == 0 { return "" } return ms[0] } // membersFor returns up to `replication` members for shardID, ordered by // rendezvous hash. Deterministic: every node computes the same list from // the same member set. func (r *router) membersFor(shardID string) []NodeID { r.mu.RLock() members := r.members n := r.replication r.mu.RUnlock() if len(members) == 0 { return nil } if n > len(members) { n = len(members) } scored := make([]scored, 0, len(members)) for _, m := range members { scored = append(scored, scored0(shardID, m)) } sort.Slice(scored, func(i, j int) bool { return scored[i].score < scored[j].score }) out := make([]NodeID, 0, n) for i := 0; i < n; i++ { out = append(out, scored[i].id) } return out } type scored struct { id NodeID score uint64 } // scored0 computes the rendezvous score (lower = preferred) as the first // 8 bytes of SHA-256(shardID || member). Classic HRW hashing. func scored0(shardID string, m NodeID) scored { h := sha256.New() h.Write([]byte(shardID)) h.Write([]byte{0}) h.Write([]byte(m)) sum := h.Sum(nil) return scored{id: m, score: binary.BigEndian.Uint64(sum[:8])} } 3KEx[ package network import "testing" func TestRouterDeterministic(t *testing.T) { members := []NodeID{"a", "b", "c", "d", "e"} r1 := newRouter(members, 3) r2 := newRouter(append([]NodeID{"e", "b"}, "a", "c", "d"), 3) for _, shard := range []string{"u1", "u2", "u3", "u4", "u5"} { a := r1.membersFor(shard) b := r2.membersFor(shard) if len(a) != len(b) { t.Fatalf("shard %s: length mismatch %v vs %v", shard, a, b) } for i := range a { if a[i] != b[i] { t.Fatalf("shard %s: order mismatch at %d: %v vs %v", shard, i, a, b) } } } } func TestRouterReplicationCapped(t *testing.T) { r := newRouter([]NodeID{"a", "b"}, 5) // replication > members ms := r.membersFor("x") if len(ms) != 2 { t.Errorf("len(membersFor) = %d, want 2 (capped at member count)", len(ms)) } } func TestRouterEmptyMembers(t *testing.T) { r := newRouter(nil, 3) if r.ownerOf("x") != "" { t.Error("owner of empty ring should be \"\"") } if len(r.membersFor("x")) != 0 { t.Error("members of empty ring should be empty") } } func TestRouterOwnerIsFirstMember(t *testing.T) { r := newRouter([]NodeID{"a", "b", "c"}, 3) for _, shard := range []string{"q", "r", "s"} { ms := r.membersFor(shard) if r.ownerOf(shard) != ms[0] { t.Errorf("ownerOf(%s) = %q but membersFor[0] = %q", shard, r.ownerOf(shard), ms[0]) } } } func TestRouterBalancedEnough(t *testing.T) { // 5 members, 1000 shards. Owner-counts should be within a reasonable band. members := []NodeID{"a", "b", "c", "d", "e"} r := newRouter(members, 1) counts := map[NodeID]int{} for i := 0; i < 1000; i++ { counts[r.ownerOf(shardName(i))]++ } // Expect each in [150, 250] (perfect is 200). Rendezvous hash bias is small. for _, m := range members { if c := counts[m]; c < 120 || c > 280 { t.Errorf("member %s: %d shards, out of balance band", m, c) } } } func shardName(i int) string { const letters = "abcdefghijklmnopqrstuvwxyz0123456789" b := [4]byte{ letters[(i>>12)%len(letters)], letters[(i>>8)%len(letters)], letters[(i>>4)%len(letters)], letters[i%len(letters)], } return string(b[:]) } func TestQuorum(t *testing.T) { cases := []struct { n int want int }{ {0, 1}, {1, 1}, {2, 2}, {3, 2}, {4, 3}, {5, 3}, {7, 4}, } for _, c := range cases { if got := quorum(c.n); got != c.want { t.Errorf("quorum(%d) = %d, want %d", c.n, got, c.want) } } } ^vxA.package network import ( "bytes" "crypto/ed25519" "encoding/binary" "errors" "fmt" "hash/crc32" "io" ) // Segment on-disk format (".lbn" = Lux Base Network segment). // // Version 2 ("LBN2") — authenticated: // // magic [4]byte "LBN2" // shard_id_len uint16 big-endian // shard_id [shard_id_len]byte // segment_start_seq uint64 big-endian // frame_count uint32 big-endian // repeat frame_count times: // frame_len uint32 big-endian // frame [frame_len]byte (quasar-finalised, PQ signature intact) // footer_crc32 uint32 big-endian, IEEE over everything above // pubkey [32]byte Ed25519 public key that signed this segment // signature [64]byte Ed25519 signature over body||crc||pubkey // // The signature binds (shardID, startSeq, frame_count, every frame) + the // integrity-covering CRC. Attackers with bucket write access cannot forge // a valid segment without the archive role's private key. // // Version 1 ("LBN1") existed only during dev and is rejected by readers // to prevent downgrade attacks. Future format changes MUST bump the magic // to "LBN3"/... and version-detect on the first 4 bytes. const ( segmentMagicV1 = "LBN1" segmentMagic = "LBN2" segmentMagicLen = 4 segmentHeaderMinLen = segmentMagicLen + 2 /*shard len*/ + 8 /*start seq*/ + 4 /*count*/ segmentFooterCRCLen = 4 segmentPubKeyLen = ed25519.PublicKeySize segmentSigLen = ed25519.SignatureSize segmentFooterLen = segmentFooterCRCLen + segmentPubKeyLen + segmentSigLen ) // ErrSegmentCorrupt is returned when a segment fails magic, CRC, or // signature validation on read. var ErrSegmentCorrupt = errors.New("segment: corrupt") // ErrSegmentUnsigned is returned when a reader has no verifier (nil) // or a writer has no signer (nil). Fail-closed — never decode/encode // an unauthenticated segment. var ErrSegmentUnsigned = errors.New("segment: no verifier configured") // segmentSigner signs a segment's body+crc with an Ed25519 key. The // archive-writer owns one per process; the public key bytes are embedded // in every segment footer so readers with the matching trust root can // verify. type segmentSigner struct { priv ed25519.PrivateKey pub ed25519.PublicKey } func newSegmentSigner(priv ed25519.PrivateKey) *segmentSigner { if len(priv) != ed25519.PrivateKeySize { return nil } return &segmentSigner{priv: priv, pub: priv.Public().(ed25519.PublicKey)} } // segmentVerifier is the reader's trust policy: does this public key // match the key we expect for this archive? A nil verifier rejects // every segment — fail-closed. type segmentVerifier struct { // allowed is the set of Ed25519 public keys we accept. Keyed by // string(pubkey) for O(1) lookup. allowed map[string]struct{} } // newSegmentVerifier builds a verifier that accepts segments signed by // any of the supplied public keys. Empty pubs → fail-closed. func newSegmentVerifier(pubs ...ed25519.PublicKey) *segmentVerifier { v := &segmentVerifier{allowed: make(map[string]struct{}, len(pubs))} for _, p := range pubs { if len(p) == ed25519.PublicKeySize { v.allowed[string(p)] = struct{}{} } } return v } // segmentBuffer is an append-only in-memory segment being built for a // single shard. It is NOT safe for concurrent use; callers (one // goroutine per shard) must serialise. type segmentBuffer struct { shardID string startSeq uint64 nextSeq uint64 // expected seq of the next frame to append frames [][]byte payloadLen int // accumulated frame bytes (for size-based flush decisions) } func newSegmentBuffer(shardID string, startSeq uint64) *segmentBuffer { return &segmentBuffer{ shardID: shardID, startSeq: startSeq, nextSeq: startSeq, } } // append records a frame. Seq must be monotonically increasing and // match nextSeq; a gap is a programmer error at the caller. func (s *segmentBuffer) append(seq uint64, frame []byte) error { if s.len() > 0 && seq != s.nextSeq { return fmt.Errorf("segment: out-of-order append want seq %d got %d", s.nextSeq, seq) } if s.len() == 0 { s.startSeq = seq s.nextSeq = seq } // Copy so the caller can reuse its buffer. dup := make([]byte, len(frame)) copy(dup, frame) s.frames = append(s.frames, dup) s.payloadLen += len(frame) s.nextSeq = seq + 1 return nil } func (s *segmentBuffer) len() int { return len(s.frames) } // sizeBytes is a cheap estimate of the encoded segment size: headers + // frame_len prefixes + payload + footer. Used to decide when to flush. func (s *segmentBuffer) sizeBytes() int { return segmentHeaderMinLen + len(s.shardID) + 4*len(s.frames) + s.payloadLen + segmentFooterLen } // encode returns the full serialized segment. CRC covers the body // (magic through last frame). The Ed25519 signature covers body||crc||pubkey. // encode returns an error if the signer is nil — we never ship an // unsigned segment. func (s *segmentBuffer) encode(signer *segmentSigner) ([]byte, error) { if signer == nil { return nil, ErrSegmentUnsigned } if len(s.shardID) > 0xFFFF { return nil, fmt.Errorf("segment: shard id too long (%d)", len(s.shardID)) } if len(s.frames) > 0xFFFFFFFF { return nil, fmt.Errorf("segment: too many frames (%d)", len(s.frames)) } buf := bytes.NewBuffer(make([]byte, 0, s.sizeBytes())) buf.WriteString(segmentMagic) _ = binary.Write(buf, binary.BigEndian, uint16(len(s.shardID))) buf.WriteString(s.shardID) _ = binary.Write(buf, binary.BigEndian, s.startSeq) _ = binary.Write(buf, binary.BigEndian, uint32(len(s.frames))) for _, f := range s.frames { if len(f) > 0xFFFFFFFF { return nil, fmt.Errorf("segment: frame too large (%d)", len(f)) } _ = binary.Write(buf, binary.BigEndian, uint32(len(f))) buf.Write(f) } crc := crc32.ChecksumIEEE(buf.Bytes()) _ = binary.Write(buf, binary.BigEndian, crc) // The signature covers everything written so far (body + crc) plus // the pubkey bytes we're about to append — that binds the key to // this particular segment and prevents a forged segment from // claiming a different key. buf.Write(signer.pub) sig := ed25519.Sign(signer.priv, buf.Bytes()) buf.Write(sig) return buf.Bytes(), nil } // objectKey is the storage-layer name for a flushed segment. // Layout: ///-.lbn // seq-prefix bucketises seqs in 1M-frame groups to keep per-prefix // object counts sane for listing. The nanos suffix is assigned once per // rotate so two concurrent flushes of the same seq range (after a // crash-then-restart) land at different keys and never overwrite each // other. Readers deduplicate by (startSeq, frameIndex). func objectKey(svcPrefix, shardID string, startSeq uint64, nanos int64) string { const bucketSize = 1_000_000 return fmt.Sprintf("%s/%s/%016d/%020d-%020d.lbn", svcPrefix, shardID, startSeq/bucketSize, startSeq, nanos) } // parseObjectKey extracts (startSeq, nanos) from an objectKey-produced // path. Returns false if the layout doesn't match — callers filter // unknown keys before calling. func parseObjectKey(key string) (startSeq uint64, nanos int64, ok bool) { base := key if idx := lastByte(key, '/'); idx >= 0 { base = key[idx+1:] } if !endsWith(base, ".lbn") { return 0, 0, false } base = base[:len(base)-len(".lbn")] // Expected layout: "<20-digit-startSeq>-<20-digit-nanos>" dash := firstByte(base, '-') if dash < 0 { return 0, 0, false } var err error startSeq, err = parseUnsigned(base[:dash]) if err != nil { return 0, 0, false } n, err := parseUnsigned(base[dash+1:]) if err != nil { return 0, 0, false } return startSeq, int64(n), true } // decodedSegment is a parsed segment ready for iteration. type decodedSegment struct { ShardID string StartSeq uint64 Frames [][]byte } // decodeSegment parses bytes into a decodedSegment, validating magic, // CRC, and Ed25519 signature. A nil verifier rejects every segment // (fail-closed). Any malformed input returns ErrSegmentCorrupt wrapped // with context. func decodeSegment(b []byte, v *segmentVerifier) (*decodedSegment, error) { if v == nil { return nil, ErrSegmentUnsigned } if len(b) < segmentHeaderMinLen+segmentFooterLen { return nil, fmt.Errorf("%w: too short (%d)", ErrSegmentCorrupt, len(b)) } magic := string(b[:segmentMagicLen]) switch magic { case segmentMagic: // Proceed. case segmentMagicV1: // LBN1 was unauthenticated. Reject outright: we never trust // the older format (development-only) in any post-fix binary. return nil, fmt.Errorf("%w: refusing LBN1 segment (unauthenticated legacy format)", ErrSegmentCorrupt) default: return nil, fmt.Errorf("%w: bad magic %q", ErrSegmentCorrupt, magic) } // Footer is: crc32 + pubkey + signature. sigStart := len(b) - segmentSigLen pubStart := sigStart - segmentPubKeyLen crcStart := pubStart - segmentFooterCRCLen if crcStart < segmentHeaderMinLen { return nil, fmt.Errorf("%w: footer overlaps header", ErrSegmentCorrupt) } body := b[:crcStart] wantCRC := binary.BigEndian.Uint32(b[crcStart:pubStart]) pub := b[pubStart:sigStart] sig := b[sigStart:] if got := crc32.ChecksumIEEE(body); got != wantCRC { return nil, fmt.Errorf("%w: crc mismatch (got %08x want %08x)", ErrSegmentCorrupt, got, wantCRC) } if _, ok := v.allowed[string(pub)]; !ok { return nil, fmt.Errorf("%w: unknown signer key", ErrSegmentCorrupt) } // Signature covers body || crc || pubkey. if !ed25519.Verify(pub, b[:pubStart+segmentPubKeyLen], sig) { return nil, fmt.Errorf("%w: signature invalid", ErrSegmentCorrupt) } r := bytes.NewReader(body[segmentMagicLen:]) var shardLen uint16 if err := binary.Read(r, binary.BigEndian, &shardLen); err != nil { return nil, fmt.Errorf("%w: shard len: %v", ErrSegmentCorrupt, err) } shard := make([]byte, shardLen) if _, err := io.ReadFull(r, shard); err != nil { return nil, fmt.Errorf("%w: shard id: %v", ErrSegmentCorrupt, err) } var startSeq uint64 if err := binary.Read(r, binary.BigEndian, &startSeq); err != nil { return nil, fmt.Errorf("%w: start seq: %v", ErrSegmentCorrupt, err) } var count uint32 if err := binary.Read(r, binary.BigEndian, &count); err != nil { return nil, fmt.Errorf("%w: frame count: %v", ErrSegmentCorrupt, err) } frames := make([][]byte, count) for i := uint32(0); i < count; i++ { var fl uint32 if err := binary.Read(r, binary.BigEndian, &fl); err != nil { return nil, fmt.Errorf("%w: frame %d len: %v", ErrSegmentCorrupt, i, err) } if int(fl) > r.Len() { return nil, fmt.Errorf("%w: frame %d len %d > remaining %d", ErrSegmentCorrupt, i, fl, r.Len()) } f := make([]byte, fl) if _, err := io.ReadFull(r, f); err != nil { return nil, fmt.Errorf("%w: frame %d body: %v", ErrSegmentCorrupt, i, err) } frames[i] = f } if r.Len() != 0 { return nil, fmt.Errorf("%w: %d trailing bytes", ErrSegmentCorrupt, r.Len()) } return &decodedSegment{ ShardID: string(shard), StartSeq: startSeq, Frames: frames, }, nil } // --- tiny local helpers used by parseObjectKey. Keeping them local // avoids pulling strconv/strings into this tight hot path and keeps // segment.go self-contained. --- func firstByte(s string, c byte) int { for i := 0; i < len(s); i++ { if s[i] == c { return i } } return -1 } func lastByte(s string, c byte) int { for i := len(s) - 1; i >= 0; i-- { if s[i] == c { return i } } return -1 } func endsWith(s, suffix string) bool { return len(s) >= len(suffix) && s[len(s)-len(suffix):] == suffix } func parseUnsigned(s string) (uint64, error) { if s == "" { return 0, errors.New("empty uint") } var v uint64 for i := 0; i < len(s); i++ { c := s[i] if c < '0' || c > '9' { return 0, fmt.Errorf("invalid uint digit %q", c) } v = v*10 + uint64(c-'0') } return v, nil } [(x 7package network import ( "context" "fmt" "sync" ) // NodeID is a stable member identity — in k8s the pod DNS name, in compose // the service DNS name, in tests a synthetic string. type NodeID string // Shard owns the per-shard Quasar engine, the apply loop, and the dedup // cache that makes apply idempotent across restarts. // // Lifecycle: created lazily on first reference by shard(id), closed by the // node on Stop(). One Shard per shardID per node. type Shard struct { ID string Members []NodeID Threshold int engine *quasarEngine metric *Metrics mu sync.Mutex applied map[ApplyKey]struct{} // localSeq is the last finalised sequence we have applied locally; the // gateway reads this to serve read-your-writes via the txseq cookie. // R2: advances STRICTLY by +1 per apply — never pinned to an // attacker-chosen height. localSeq uint64 // pending holds finalised frames whose Seq is > localSeq+1 (quasar // may reorder across the DAG). Frames land here and drain as their // predecessors arrive. A bounded cap (pendingCap) drops the oldest // out-of-order frames to keep a hostile peer from OOMing us with a // far-future Seq cloud. A dropped frame re-enters via quasar's // finalise stream on retry, so liveness is preserved. pending map[uint64]Frame pendingCap int ctx context.Context cancel context.CancelFunc } // newShard starts the Quasar engine and the apply goroutine. apply is the // node-level callback invoked for every finalised frame. func newShard(parent context.Context, id string, members []NodeID, replication int, m *Metrics, apply ApplyFunc) (*Shard, error) { ctx, cancel := context.WithCancel(parent) threshold := quorum(replication) // Quasar requires threshold ≥ 2 except in test-engine mode — we pick // that path when replication < 2 so single-node works. eng, err := newQuasarEngine(ctx, id, members, threshold) if err != nil { cancel() return nil, fmt.Errorf("shard %s: %w", id, err) } s := &Shard{ ID: id, Members: members, Threshold: threshold, engine: eng, metric: m, applied: make(map[ApplyKey]struct{}), pending: make(map[uint64]Frame), pendingCap: 1024, // bounded per-shard buffer for out-of-order frames ctx: ctx, cancel: cancel, } go s.applyLoop(apply) return s, nil } // quorum computes k = ⌊N/2⌋+1 for N≥3, N-1 for N=2, 1 for N≤1. func quorum(n int) int { switch { case n <= 1: return 1 case n == 2: return 2 default: return n/2 + 1 } } // submitLocal pushes a locally-generated frame into the engine. // // R1 defence-in-depth: reject any frame whose declared ShardID does // not match this shard's ID. The transport-layer check in onPeerFrame // already covers this path; double-checking here blocks an internal // caller that mixed up shard identities. func (s *Shard) submitLocal(f Frame) error { if f.ShardID != s.ID { s.metric.FramesRejectedShardMismatch.Inc() return fmt.Errorf("shard %s: frame shardID %q mismatch", s.ID, f.ShardID) } if err := s.engine.Submit(f); err != nil { return fmt.Errorf("shard %s submit: %w", s.ID, err) } s.metric.FramesSubmitted.Inc() return nil } // ingestRemote is called when the transport hands us a frame from a peer. // Verify, then submit so Quasar folds it into the DAG. // // R1 fix: inner ShardID MUST match the shard we're being submitted to. // R2 protection: the Seq value is still attacker-controllable at this // point; that's OK — submit accepts it into the DAG, but the applyLoop // below is what actually advances localSeq, and it enforces strict // monotone continuity (Seq == localSeq+1). func (s *Shard) ingestRemote(f Frame) error { if f.ShardID != s.ID { s.metric.FramesRejectedShardMismatch.Inc() return fmt.Errorf("shard %s: frame shardID %q mismatch", s.ID, f.ShardID) } if err := f.Valid(); err != nil { s.metric.FramesInvalid.Inc() return err } if err := s.engine.Submit(f); err != nil { return err } s.metric.FramesIngested.Inc() return nil } // applyLoop drains finalised frames and calls apply exactly once per // (salt, cksm). // // R2 fix: localSeq advances STRICTLY by +1 per frame. Frames arriving // out of order (quasar's DAG does not guarantee submission order on the // finalise stream) are buffered in s.pending and applied when their // predecessor lands. A frame whose Seq is <= localSeq is either a // duplicate (dedupe by ApplyKey) or a stale replay (drop). A frame // whose Seq is > localSeq+1 waits in pending until the gap closes. // // This blocks the attacker's "submit Seq=2^62 to pin localSeq" attack: // the 2^62 frame stays in pending forever because Seqs 1..2^62-1 never // arrive. The gateway sees localSeq==0 (or whatever honestly advanced), // never jumps. // // pending is capped — once full, new far-future frames are dropped so // one peer cannot OOM the shard with a forged-Seq cloud. Dropped // frames are re-delivered by quasar's finalise stream on retry (the // engine persists its DAG), so liveness is preserved. // // Idempotency is still keyed on (salt, cksm) — a duplicate finalised // frame (e.g. peer re-submits after a reconnect) is counted as a dup // and skipped. func (s *Shard) applyLoop(apply ApplyFunc) { drain := func(f Frame) { if err := apply(f); err != nil { s.metric.ApplyErrors.Inc() return } s.metric.FramesFinalized.Inc() } for { select { case <-s.ctx.Done(): return case f, ok := <-s.engine.Finalized(): if !ok { return } // R1 defence-in-depth at apply boundary: the engine's // finalised stream can only ever carry frames we submitted // for this shard (engine is per-shard), but we re-verify // the inner shardID anyway in case Quasar's ordering // guarantees change. Wrong shard → drop, metric. if f.ShardID != s.ID { s.metric.FramesRejectedShardMismatch.Inc() continue } key := f.ApplyKey() s.mu.Lock() if _, dup := s.applied[key]; dup { s.mu.Unlock() s.metric.FramesDuplicate.Inc() continue } if f.Seq <= s.localSeq { // Stale replay or re-delivery below the watermark. // Either the salt/cksm already matched (dup above) or // an attacker replayed a different payload for an // already-applied Seq. Drop — localSeq is authoritative. s.mu.Unlock() s.metric.FramesRejectedSeqGap.Inc() continue } if f.Seq != s.localSeq+1 { // Out-of-order arrival. Buffer until predecessors land. // Cap enforcement: if pending is full, drop the frame // with the highest Seq (furthest from the gap) — keeps // the window tight and makes attacker-forged far-future // frames fall out first. if len(s.pending) >= s.pendingCap { var maxSeq uint64 for seq := range s.pending { if seq > maxSeq { maxSeq = seq } } if f.Seq >= maxSeq { // Incoming is further than anything pending — // drop it (don't even buffer). s.mu.Unlock() s.metric.FramesRejectedSeqGap.Inc() continue } // Evict the furthest pending to make room. delete(s.pending, maxSeq) s.metric.FramesRejectedSeqGap.Inc() } s.pending[f.Seq] = f s.mu.Unlock() continue } // f.Seq == localSeq + 1: apply and drain any now-contiguous // pending frames. s.applied[key] = struct{}{} s.localSeq = f.Seq ready := []Frame{f} for { next, ok := s.pending[s.localSeq+1] if !ok { break } delete(s.pending, s.localSeq+1) nextKey := next.ApplyKey() if _, dup := s.applied[nextKey]; dup { s.metric.FramesDuplicate.Inc() continue } s.applied[nextKey] = struct{}{} s.localSeq = next.Seq ready = append(ready, next) } s.mu.Unlock() for _, rf := range ready { drain(rf) } } } } // close halts the shard engine. Called by node.Stop. func (s *Shard) close() { s.cancel() _ = s.engine.Stop() } // LocalSeq returns the highest finalised seq this shard has applied // locally. Gateways compare this against the client's txseq cookie. func (s *Shard) LocalSeq() uint64 { s.mu.Lock() defer s.mu.Unlock() return s.localSeq } // ApplyFunc is called once per finalised frame per shard. Errors are // counted on the metrics and do not retry — Quasar has already finalised // the frame, so the caller owns recovery. type ApplyFunc func(Frame) error S໊xXo[cvɄ< \4ԂTM05 {y$/:^o0~~~_E nwf޼y;Z׽^mi;.g>3~Ea Xm}7)oKTAIN۫/PySxFS^ؤ}j B'ݖS^fh]*FƊN6–G̎6Vx&kGDTyz1j~~q-ڑ67:9~X6֐ۨ"9{eHDNhU-wW+tL>M` ڔ[]K#rH@#S;D:ycMc+5ڤ1-miUhhmdjj.'qڸ-JۤyWg_+5}N.8OI͚n*K~fAlqYrDtaFeí}c|yW)\~~syfTGf#90j3Fu#P0x|P̨w(6 |~qU`k[PAް; l8RB( ZL|\2&5irK$CJlj߾[U6jD~ TJ 9pjw~#:GhR3 ,Ƥ|ua6Y`n7F7c>Igt1}:0>̋{cm '}-ܫ{,B%*,@uhvǵitDއ@֍qH:e$Kȃr7-hT7T ,oԻA{S qto@)乻4>znmL9^Li4dˈ)RyZAWig`kpSLQH$}{LAU1=zD𺕌0c`Xqm4KxS '2ŇVꘙlY+8H^۹+諍=؍\ Ak*Èi F q߁ȏ~+5r]:38+wz}#'~r/7!uvnJ,78hJ=GuJbUOq2Qk]eLm_\vQj_"fgv{N?1G"ڝ?d7.Se _lwVA'_ԃ2&7㈱ʴ{:\\6ptN~DY'Owۭf#z?fpH=}CgmvT)E&{jAvF+|VQץSY3.vnO::U G=4}fl֛I/*joSj~Ƭ*8 G=Gm"-+e8t{OdJY_Cnvw2I8V in chƧڄsrk%i×]yZS@;뉎jz)s͉iy[Ѝ4]aa<=3If6Ղa@Ht:}zٹct{ΐ[ĺwjBpe=asIW#׵׷]C }٪95WMrG}g<:J#B6vk dzʍjOL|[ǥ܌tjFr^~XoQ0k-co;s/2Qk.?b[h])~x;iTƯ> }G.Ŀj+ֵxupackage network import ( "crypto/ecdsa" "crypto/elliptic" "crypto/rand" "crypto/x509" "crypto/x509/pkix" "encoding/pem" "math/big" "testing" "time" ) // generateTestCerts makes a self-signed CA + a leaf cert with the given // DNS SANs. Used by TLS tests to validate the SAN-pinning path without // standing up a real PKI. func generateTestCerts(t *testing.T, sans []string) (caPem, leafPem, keyPem []byte) { t.Helper() // CA. caKey, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader) if err != nil { t.Fatalf("ca key: %v", err) } caTmpl := &x509.Certificate{ SerialNumber: big.NewInt(1), Subject: pkix.Name{CommonName: "base-network-test-ca"}, NotBefore: time.Now().Add(-time.Hour), NotAfter: time.Now().Add(time.Hour), IsCA: true, KeyUsage: x509.KeyUsageCertSign | x509.KeyUsageDigitalSignature, BasicConstraintsValid: true, } caDER, err := x509.CreateCertificate(rand.Reader, caTmpl, caTmpl, &caKey.PublicKey, caKey) if err != nil { t.Fatalf("ca create: %v", err) } caPem = pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: caDER}) // Leaf signed by CA with the requested SANs. leafKey, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader) if err != nil { t.Fatalf("leaf key: %v", err) } leafTmpl := &x509.Certificate{ SerialNumber: big.NewInt(2), Subject: pkix.Name{CommonName: sans[0]}, NotBefore: time.Now().Add(-time.Hour), NotAfter: time.Now().Add(time.Hour), DNSNames: sans, KeyUsage: x509.KeyUsageDigitalSignature, ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}, } leafDER, err := x509.CreateCertificate(rand.Reader, leafTmpl, caTmpl, &leafKey.PublicKey, caKey) if err != nil { t.Fatalf("leaf create: %v", err) } leafPem = pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: leafDER}) keyDER, err := x509.MarshalECPrivateKey(leafKey) if err != nil { t.Fatalf("leaf key marshal: %v", err) } keyPem = pem.EncodeToMemory(&pem.Block{Type: "EC PRIVATE KEY", Bytes: keyDER}) return } func TestTLSConfig_Enabled(t *testing.T) { var zero *TLSConfig if zero.Enabled() { t.Error("nil *TLSConfig should not be Enabled") } empty := &TLSConfig{} if empty.Enabled() { t.Error("zero TLSConfig should not be Enabled") } ca, leaf, key := generateTestCerts(t, []string{"pod-a.ns.svc.cluster.local"}) c := &TLSConfig{CACerts: ca, ServerCert: leaf, ServerKey: key} if !c.Enabled() { t.Error("expected Enabled with CA + ServerCert/Key") } } func TestTLSConfig_ServerConfigRejectsUnconfigured(t *testing.T) { c := &TLSConfig{} if _, err := c.ServerConfig(); err == nil { t.Error("ServerConfig on unconfigured TLSConfig must error") } } func TestTLSConfig_VerifyPeerPinning(t *testing.T) { ca, leaf, _ := generateTestCerts(t, []string{"pod-a.ns.svc.cluster.local"}) // Parse the leaf so we can hand it to the verifier as a "verified chain". block, _ := pem.Decode(leaf) cert, err := x509.ParseCertificate(block.Bytes) if err != nil { t.Fatalf("parse leaf: %v", err) } // Allowlist includes the leaf's SAN → verify passes. ok := &TLSConfig{ CACerts: ca, AllowedSANs: []string{"pod-a.ns.svc.cluster.local", "pod-b.ns.svc.cluster.local"}, } if err := ok.verifyPeerCertificate(nil, [][]*x509.Certificate{{cert}}); err != nil { t.Errorf("SAN in allowlist should pass: %v", err) } // Allowlist excludes the leaf's SAN → verify fails with ErrTLSUnpinnedPeer. bad := &TLSConfig{ CACerts: ca, AllowedSANs: []string{"pod-z.ns.svc.cluster.local"}, } err = bad.verifyPeerCertificate(nil, [][]*x509.Certificate{{cert}}) if err == nil { t.Fatal("unpinned peer SAN should be rejected") } // Error should be wrapping ErrTLSUnpinnedPeer. if !errorIs(err, ErrTLSUnpinnedPeer) { t.Errorf("expected ErrTLSUnpinnedPeer, got %v", err) } // Empty allowlist → dev fallback, accept any cert that chained. dev := &TLSConfig{CACerts: ca} if err := dev.verifyPeerCertificate(nil, [][]*x509.Certificate{{cert}}); err != nil { t.Errorf("empty allowlist should accept: %v", err) } } // errorIs wraps errors.Is without requiring the caller to import errors. func errorIs(err, target error) bool { for err != nil { if err == target { return true } type wrapper interface{ Unwrap() error } w, ok := err.(wrapper) if !ok { return false } err = w.Unwrap() } return false } cxZnHm=]MM$:IO7r mc2' E$)RNO`a${έ* K[U{Gi_M.H?|X~OISej*|Cye3+)Me+}0Fꥑyyuztrvq",M^BjS*NOfQ|i(EY| EM)KCUQ),ʍ2q,&"^R(lRp[I~eb" (",~\ObG8EUܔ/N>:x{rGMVS?h,z ^J(gLy#& :?9ys!A^ÿ{RDBAYp%R]ƝHߩt_M-\>, M|?tJoND $M6KU.qT*ZگevS{*ʱ~[)[r5Mѱha(gPͣ|)@X :G =THsj+iEAǏ]Φ# "M%/sXT'8T&vpI'yn$W,K.QUdBⲨɺPx,3Qb8s^ؽZ+!(O*!(3(%^*f0QW=:t /t)S@rNs jyNǒSska;uI"ɢ|_bq: M-C]| lƑ #K#o&(^ROt&'m(N5BmEvPW#Vy]lIذ1Ys6ueD^Q%p4$,, Wm5w 8Hi3gf\T]z &$Ƒen̦Hxِߗ[iEh_ڋMI>ҹ4\}#EF`/8 UɃ=0`!G{֘޻gLX`kWa B,)epǁeO ƴ vT_F _#ȘǗX;j-,_S>¦TR3ek%;8 `Z`zSE,zTLDڼ@eh61Ek[ c]$}P(>b>mB17F5i0E2,N0s4,6)rb{.q9UH<=;d6K6Ndf_Ηh+p}VKZQЁ{P)Cwz(g~;tzA3&@Fñ On kO\$# %.@ L0 +jh9EAČml8+hWX:̆<'XC{\Sf{1ŖNЖ{O$cw<*K#)$pG?SF Sh˷?lDȾoOڋvk|~kJb $~7 wتHmviS0iA4AL!l|ήVB[1|y1#.E& j׺Uxϋۓ:¡EPOۧlR]߱}w2AԒ{u})ͤ-ZsȦ7`n"L/Tirf' khVV̕&u.jpZ4s=8jj*]:onwf{њF Q_s{, _$B"'HY># /Rxrmd0,0i]4p^n`귪 K-sK(as"ilܸJ+]Ӷ꾫neV MfJk)֌p嵥vn#2OK7dXTr(٩^>HXn޽8X/]/"%wg?e<;g 7戸_p0(?VSy/^1K˙}UXe?^0K?Zunj{6<Z&m?ҭO#=2bjV>w_W0_e{ J55_Pcz ?pdU++*P~랝b )-0 U<E1pk/紿 3a!ZMVL_{kYY7nJ{KI?%uy^y@"@h櫅NnV~}?T=2fc tn=FNmGH& (*S2aGuZFOWbe¿/GaSq;QN u_fNrīFyi&K MckL$?8k޵Hie\xTMo1=g)E4ADB4PzgV&P$N//aIӒ9D̛޼߇W_y=-#lGimބ5zTTc@?\d>L!6 h6h; "jb;eЎ"3<8LGfu,b)#ߟNF ]A9QEsĜTjbbg]! -K⫚0(riaen0ބ4$ex/aoKj2pt 6qJ~`dYкw&ގHO+D a2"OWF9<8+Gh I!:纆@V_!ʵ " nnv90i. ݿ5rʛYisPL𚳢TH+p55.sp57 0ױtMxj); /+YX/V'Z0؃DN @{H{e-E߾S"Gͭ)rZ %ʣ&ZRoM0J7 *iE7ǯ_/!WaJ'AqJP@͑.DKήw:]9a@z쓈C]'!O /pwrIUH51*9(L^d-?;%ՊCC٢?e8)͵ҩ'.>ۣnB=(F;_ll]t`f]Kb5c0]Fatb䗶xZn->@eD"Y . $1vd7( ]ьc';3KR ;-qvܯsϽZg =3ʚvU5XUӪdpp/ku[76?\ fU^񤰺YRT_e͎u[-?bi K ڹQ-ZUMUct[T6UؙeLU䛕5UeѶxpENgwVqUUQ^d rf4U)[=a粲U["3쵙* R-e6R67urzݜҍm G:d{C*@cnTH坷Q, 砊]bV,N7O.*e9k~Mqa zr۵i{ ڮUi 'e[51i8%*X,nX"bTյusJ QRQOnZG-%Qōk0MM%9zM1 cjUUSzZbfuQ">TTyƩo )'Y[AMW6]֪Kp֐X1t8lp17~5A˚+#Qm!F +O)a۝OW֬&]QBSMŖ1da>33.;G%o?1%zTcIXrȁX&L;SE (I`wsAa0FA˱SnLӨ#Wsɨ<摲EI7@fFMuQ2[ UH&w>Ň.K/F2EF\ѰbSj$j,hk+APKWbV8uVUW" j_.KO mW]V%hzL.j ӷR*O)-$@;x#^gjs#*}ĥ>hǢy|q$"{U$?{Ώ41iIwd(p{Cy멚k7'``OKK"?ƼZOkӊ?_>"7sB 7sD5|bzxQ3ӗnR]`Oi xtSu $p\/}xQ26K{YU,eLT0xςBD;Ib:&kZE@n͑!>rV#J(p:pbM _U8jϳrdHPCW>݋]<g}e'珷*vAvWK/F@( 8Pa)7:[TT-O=A֨J,F+&ʀy⟴aѯ`X\0F}hIdhj|Dq6D013ųguMM󾎵nO  lr6btG^zv b%Na=E!nL3> i \_jU5n:]_1 z"v"[NQ\H MKPk_7OC^"` “^DF46ᙬm)"'Cww_x{r!ʾ Goϼn<f%;yMnTfcω h/.jRǿ*&Եn` 8۩ TԁigEO>'Mms Bi@V(,_S @/n&bڳx0, ʵo=v Ә#"X2 :T#,j f3 =In'`c eOa.dڪBIG,88?ȁZ)rUeĒمV6&67R+C}x(YXW)WZ>Rr:TB#*' #C#}Wcs$l]#\l㈯G7WBt4$WdϋRzC`||B~˄m-G"ɹqjs#Tn6y]Tޕ= .^Uq];j4H0R<9Ge&>*)HoO貐Aޠ @H>y g!F;L!f:llO>6|jfkMcZalL5&U+=3e7[a.X&^Q yЩd&"2^xyf h܁#j$b\s]ˬ٧7hu0R3nF.w"msxQI|>_v t'Q60oo P*'׍AXo5/[C 卷"dVBS=޲bfK,C<(!vMPw}HJUq 7qƋt?nP ?e[rF#wxFBTHHӡ!@CEFs{;~^/a% -*0 dxI6GӢ<6k4g2әVeYg'ma>)4`鍙6NqoQ'TEGkXx{ڣ"[Hv;HBDlP~,DP"i +#鍨 :(]WieQ XOT A }ͳw^Ka-q {yk~HB,-FPcOjg~䡫Y2vkDLg0v'd`;v0:R_Qxw2'_1-KF6D ~dQ.nߺЋ" !EĂ̎EOP-8oP EOexA}Ƞy[8Y}z Wi|Þ/a5UFc3*y !$# oX,@ ~@\e} :hoXP( X:hּBpZ("N(M kV}oQj$D D$G?cvɮ;}wz-(1go߈1m 8q F>ϳs໳ ~7V оʦĨ&XJlO&[,5\l @a>tie. >x&p?LB1@>8Yn@g:㿊@Tj.L|łl\G2{\pp,*NRLim3A*/y|rC779^[~yʦR9Mė >{ϓgT">^rghwEvOlQa[L,( Bo?|ށO7Hѳ2 o8 |)K0 R5iȼ>QTӮ(RI4Y!A-wвp'c(Ng);XH1d[Ī!y9~ 2:¦) J^`O?8( xrb< U@Ih6%X I~?Р͕< JOkQ=C߽))[tcwx_T(U=_!H!#1*?1S0'9 #hs8/K!x_package network import ( "bytes" "testing" ) func TestFrameEncodeDecodeRoundTrip(t *testing.T) { f := newFrame("shard-42", 7, 6, []byte("hello")) b := f.encode() got, err := decodeFrame(b) if err != nil { t.Fatalf("decodeFrame: %v", err) } if got.ShardID != f.ShardID { t.Errorf("ShardID: got %q want %q", got.ShardID, f.ShardID) } if got.Seq != f.Seq || got.PrevSeq != f.PrevSeq { t.Errorf("seq: got (%d,%d) want (%d,%d)", got.Seq, got.PrevSeq, f.Seq, f.PrevSeq) } if got.Salt != f.Salt { t.Errorf("salt mismatch") } if got.Cksm != f.Cksm { t.Errorf("cksm mismatch") } if !bytes.Equal(got.Payload, f.Payload) { t.Errorf("payload mismatch") } if !bytes.Equal(got.Bytes, b) { t.Errorf("Bytes field should carry raw input back") } if err := got.Valid(); err != nil { t.Errorf("Valid() after round-trip: %v", err) } } func TestFrameChecksumDetectsTamper(t *testing.T) { f := newFrame("s", 1, 0, []byte("payload")) b := f.encode() // Corrupt one payload byte. b[len(b)-33] ^= 0x01 got, err := decodeFrame(b) if err != nil { t.Fatalf("decodeFrame: %v", err) } if err := got.Valid(); err == nil { t.Error("expected Valid() to fail on tampered payload") } } func TestFrameDecodeRejectsTruncated(t *testing.T) { f := newFrame("s", 1, 0, []byte("abc")) b := f.encode() _, err := decodeFrame(b[:len(b)-1]) if err == nil { t.Error("expected error on truncated input") } } func TestFrameApplyKeyStable(t *testing.T) { f := newFrame("s", 1, 0, []byte("x")) k1 := f.ApplyKey() // Re-decode and check key stability. g, _ := decodeFrame(f.encode()) k2 := g.ApplyKey() if k1 != k2 { t.Error("ApplyKey must be stable across encode/decode") } } func TestFrameApplyKeyUnique(t *testing.T) { a := newFrame("s", 1, 0, []byte("x")) b := newFrame("s", 1, 0, []byte("x")) if a.ApplyKey() == b.ApplyKey() { t.Error("two frames with independent salts must not share ApplyKey") } } func TestFrameDecodeRejectsBadVersion(t *testing.T) { f := newFrame("s", 1, 0, nil) b := f.encode() b[0] = 0xFE if _, err := decodeFrame(b); err == nil { t.Error("expected version-mismatch error") } } E2x31Tvܒz=d7$䗦0Or /|iޡzԢTuqşt#Y΄Ȫ>}f^QZQ:cQdBj9VbҼTw)ƨd;xnZEiy%y ',ϸ8wWI(-HI,Iexxuj5:$~ 7b*J,eX]'k1\6 #o>C|qG Nz'*O^_nzVբ)լ2 "[wްϨgX 6nM L/:.97aygG兏߶(?EQ2DQANbIZ~Q.ˏ%U4b/wOUR t=7o2DQOX@tQjANf2(LY-OiϙD`ԔҜ"e՚-r[\5y X>?vI+JYZ8yuaR޹$8JA5%*xWmD]1ᣑ{[LJ'0UyN.:,?VJ^̒¦]m7K&sg"+aJsvdpMfҽ.CT%05Mz%pA` W\O~ND3 Xx[ŶKSRpi- ) ;Ǿ'B$'$1GVߖ.@RZR_ V4;wsJK_<4?%aۗ-G7^~ ^-HKK2@.\rYp6{Mm+ Wk +(JM.Ǿ_>@lEGRZ RV8WҵR-sl3L @d'IDjnػ2ba5%)?);l S~p}3qFSvC5Oݓ"k:ZfLMKL)\#!U-c_y_(@]ՑwYn1pmZSpѸn痡L.4$3D(nR>v%V 0 { validators = body.ValidatorCount } region := body.Region if region == "" { region = "sfo3" } spec := map[string]any{ "tier": tier, "region": region, "brand": map[string]any{ "name": orDefault(body.Brand.Name, body.Name), "domain": body.Brand.Domain, "logoUrl": body.Brand.LogoURL, "primaryColor": orDefault(body.Brand.PrimaryColor, "#000000"), "accentColor": orDefault(body.Brand.AccentColor, "#fd4444"), }, "iam": map[string]any{ "org": body.Name, "domain": body.Name + ".id", "clientId": body.Name + "-cloud", }, "replicas": map[string]any{ "web": web, "api": api, }, "validators": map[string]any{ "enabled": body.DeployValidators, "count": validators, }, "urls": map[string]any{ "cloud": "https://cloud." + body.Brand.Domain, "api": "https://api.cloud." + body.Brand.Domain, "ws": "wss://ws.cloud." + body.Brand.Domain, "rpc": "https://api.cloud." + body.Brand.Domain + "/v1/rpc/" + body.Name, }, "createdBy": id.UserID, "org": id.Org, } if body.ChainID != nil { spec["chainId"] = *body.ChainID } if _, err := p.kube.Apply(e.Request.Context(), kube.NetworkGVR, body.Name, orgLabels(id.Org), spec); err != nil { return e.InternalServerError("failed to apply Network resource", err) } return e.JSON(http.StatusCreated, map[string]any{ "id": body.Name, "name": body.Name, "tier": tier, "region": region, "status": "provisioning", "namespace": p.kube.Namespace(), "cloudUrl": spec["urls"].(map[string]any)["cloud"], "apiUrl": spec["urls"].(map[string]any)["api"], }) } // handleListNetworks lists Network CRs scoped to the caller's org. Ports // GET /networks. The cluster is the source of truth. func (p *plugin) handleListNetworks(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } return p.listCRs(e, kube.NetworkGVR, id.Org) } // handleGetNetwork returns one Network CR. Ports GET /networks/{id}. func (p *plugin) handleGetNetwork(e *core.RequestEvent) error { if _, err := p.requireUser(e); err != nil { return err } return p.getCR(e, kube.NetworkGVR, e.Request.PathValue("id")) } // handleDeleteNetwork tears down a Network CR. Ports DELETE /networks/{id}. func (p *plugin) handleDeleteNetwork(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } name := e.Request.PathValue("id") if err := p.kube.Delete(e.Request.Context(), kube.NetworkGVR, name); err != nil { return e.InternalServerError("failed to delete Network resource", err) } return e.JSON(http.StatusOK, map[string]any{"status": "deleted", "id": name}) } // --- shared CR list/get helpers (used by networks and nodes) --- // listCRs lists custom resources of a kind, filtered to org via label selector. func (p *plugin) listCRs(e *core.RequestEvent, gvr kube.GVR, org string) error { if !p.kube.Available() { return e.JSON(http.StatusOK, []any{}) // no cluster → empty list, not an error } var list struct { Items []map[string]any `json:"items"` } // A list is a GET on the plural with no name; reuse Get with empty name by // fetching the collection endpoint. found, err := p.kube.Get(e.Request.Context(), gvr, "", &list) if err != nil { return e.InternalServerError(fmt.Sprintf("failed to list %s", gvr.Kind), err) } if !found { return e.JSON(http.StatusOK, []any{}) } out := make([]map[string]any, 0, len(list.Items)) for _, item := range list.Items { summary := crSummary(item) if org == "" || summary["org"] == org || summary["org"] == nil { out = append(out, summary) } } return e.JSON(http.StatusOK, out) } // getCR fetches one custom resource by name. func (p *plugin) getCR(e *core.RequestEvent, gvr kube.GVR, name string) error { if !p.kube.Available() { return e.NotFoundError(gvr.Kind+" not found", nil) } var obj map[string]any found, err := p.kube.Get(e.Request.Context(), gvr, name, &obj) if err != nil { return e.InternalServerError("failed to fetch "+gvr.Kind, err) } if !found { return e.NotFoundError(gvr.Kind+" not found", nil) } return e.JSON(http.StatusOK, obj) } // crSummary flattens a CR into a compact API response. func crSummary(item map[string]any) map[string]any { meta, _ := item["metadata"].(map[string]any) spec, _ := item["spec"].(map[string]any) status, _ := item["status"].(map[string]any) out := map[string]any{} if meta != nil { out["id"] = meta["name"] out["name"] = meta["name"] } if spec != nil { out["org"] = spec["org"] out["tier"] = spec["tier"] out["region"] = spec["region"] out["chain"] = spec["chain"] } if status != nil { out["status"] = status["phase"] } return out } func orDefault(v, def string) string { if v == "" { return def } return v } // isCRName validates a DNS-1123 label suitable for a Kubernetes object name. func isCRName(s string) bool { if s == "" || len(s) > 63 || s[0] == '-' || s[len(s)-1] == '-' { return false } for _, c := range s { if !((c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c == '-') { return false } } return true } fx+package bootnode import ( "net/http" "strings" "github.com/hanzoai/base/core" "github.com/hanzoai/base/plugins/bootnode/kube" ) // nodePresets maps a simple-mode preset to a fleet configuration. The Go port // targets bootno.de/v1 NodeFleet CRs (operator-reconciled) rather than the // Python's direct Docker container orchestration — fleets run in the cluster, // not on the API host. var nodePresets = map[string]map[string]any{ "rpc": { "executionClient": "geth", "consensusClient": "", "syncMode": "light", "enableMEV": false, "enableValidator": false, }, "full": { "executionClient": "geth", "consensusClient": "lighthouse", "syncMode": "snap", "enableMEV": false, "enableValidator": false, }, "staking": { "executionClient": "geth", "consensusClient": "lighthouse", "syncMode": "snap", "enableMEV": true, "enableValidator": true, }, "archive": { "executionClient": "erigon", "consensusClient": "lighthouse", "syncMode": "archive", "enableMEV": false, "enableValidator": false, }, } // handleCreateNodeFleet applies a bootno.de/v1 NodeFleet custom resource. Ports // POST /nodes — the CRD-driven, production path (the Python's docker provider // is a local-dev concern outside Base's remit; cloud provisioning was always // the intended production target). func (p *plugin) handleCreateNodeFleet(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } if !p.kube.Available() { return e.JSON(http.StatusServiceUnavailable, map[string]any{ "error": "no Kubernetes cluster configured for node provisioning", }) } var body struct { Name string `json:"name"` Chain string `json:"chain"` Network string `json:"network"` Mode string `json:"mode"` Preset string `json:"preset"` Replicas int `json:"replicas"` ExecutionClient string `json:"executionClient"` ConsensusClient string `json:"consensusClient"` SyncMode string `json:"syncMode"` EnableMEV bool `json:"enableMev"` EnableValidator bool `json:"enableValidator"` FeeRecipient string `json:"feeRecipient"` } if err := e.BindBody(&body); err != nil { return e.BadRequestError("invalid request body", err) } body.Name = strings.TrimSpace(strings.ToLower(body.Name)) if !isCRName(body.Name) { return e.BadRequestError("name must be a lowercase DNS-1123 label", nil) } if body.Chain == "" { return e.BadRequestError("chain is required", nil) } network := body.Network if network == "" { network = "mainnet" } // Resolve preset for simple mode (Go port of the Python preset expansion). execClient, consClient, syncMode := body.ExecutionClient, body.ConsensusClient, body.SyncMode enableMEV, enableValidator := body.EnableMEV, body.EnableValidator if body.Mode == "simple" && body.Preset != "" { preset, ok := nodePresets[body.Preset] if !ok { return e.BadRequestError("unknown preset (rpc, full, staking, archive)", nil) } execClient, _ = preset["executionClient"].(string) consClient, _ = preset["consensusClient"].(string) syncMode, _ = preset["syncMode"].(string) enableMEV, _ = preset["enableMEV"].(bool) enableValidator, _ = preset["enableValidator"].(bool) } if execClient == "" { execClient = "geth" } if syncMode == "" { syncMode = "snap" } replicas := body.Replicas if replicas <= 0 { replicas = 1 } spec := map[string]any{ "chain": strings.ToLower(body.Chain), "network": strings.ToLower(network), "replicas": replicas, "executionClient": execClient, "consensusClient": consClient, "syncMode": syncMode, "enableMev": enableMEV, "enableValidator": enableValidator, "createdBy": id.UserID, "org": id.Org, } if body.FeeRecipient != "" { spec["feeRecipient"] = body.FeeRecipient } if _, err := p.kube.Apply(e.Request.Context(), kube.NodeFleetGVR, body.Name, orgLabels(id.Org), spec); err != nil { return e.InternalServerError("failed to apply NodeFleet resource", err) } return e.JSON(http.StatusCreated, map[string]any{ "id": body.Name, "name": body.Name, "chain": spec["chain"], "network": spec["network"], "replicas": replicas, "executionClient": execClient, "status": "provisioning", "namespace": p.kube.Namespace(), }) } // handleListNodeFleets lists NodeFleet CRs for the caller's org. Ports // GET /nodes. func (p *plugin) handleListNodeFleets(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } return p.listCRs(e, kube.NodeFleetGVR, id.Org) } // handleGetNodeFleet returns one NodeFleet CR. Ports GET /nodes/{id}. func (p *plugin) handleGetNodeFleet(e *core.RequestEvent) error { if _, err := p.requireUser(e); err != nil { return err } return p.getCR(e, kube.NodeFleetGVR, e.Request.PathValue("id")) } // handleDeleteNodeFleet tears down a NodeFleet CR. Ports DELETE /nodes/{id}. func (p *plugin) handleDeleteNodeFleet(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } name := e.Request.PathValue("id") if err := p.kube.Delete(e.Request.Context(), kube.NodeFleetGVR, name); err != nil { return e.InternalServerError("failed to delete NodeFleet resource", err) } return e.JSON(http.StatusOK, map[string]any{"status": "deleted", "id": name}) } dxWrF>QUv*c?@Qf,NΈ5G̓5. >?_=EIL$\)eYm$ą^^?.Ld3˕éu؊>x~O6yafé_P 0VU3Q 8Jh8,+y.0W'ҁGODXRE!#[|:RZuQJ|~C(*%UؚXY*+ X[=:9!â /-'ju)EU^px}{qg\^i ݡ̈́/2#_MSBHρ +P\m3NY5̱6dG 8m(LhKo+S">?%r .Ek@5ETR >bhUNVG's"thlmw.w1d"K۠UYIQ]ZO+})*ݶR,~y!QnoC SX96!h `cr/iv;I8.?jv&S؟z&@ϳ8 cά4/bJzn3X@uПF]w0u޵<,(hJln+Ίc*lsMUzH<ةǍPO,Ě. }K>kmyorg?s7Ld`F& !B,+-BjqKUȇ.(=' D&W0ԉ/askP-`A=d!,_RۡHfM"%5m6@%QFTbe “}O;^)"oš_YX[OSx- d 4& 7 yer,~nHtT!.3rg|NyуBo9R7OXD| Va# 8oRDX6pz5=9|ѯzcK|}ey29aK)j|vq-'ϟ?xY܎@OBJTN4˜꺦U֚k:if]__t/Pjok?nI3aπ*a60;d[J]\mUBh6{Fa# V_qD͏<Z\٪~cx<"package bootnode import ( "net/http" "strings" "github.com/hanzoai/base/core" "github.com/hanzoai/base/plugins/bootnode/auth" "github.com/hanzoai/base/plugins/bootnode/models" ) // handleCreateProject creates a project owned by the authenticated IAM user and // scoped to their org. Ports POST /projects from bootnode/api/auth_keys.py, // minus the Python's client-supplied owner_id (owner is the authenticated // user, never the request body). func (p *plugin) handleCreateProject(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } var body struct { Name string `json:"name"` Description string `json:"description"` } if err := e.BindBody(&body); err != nil { return e.BadRequestError("invalid request body", err) } body.Name = strings.TrimSpace(body.Name) if body.Name == "" { return e.BadRequestError("name is required", nil) } col, err := p.app.FindCollectionByNameOrId(models.Projects) if err != nil { return e.InternalServerError("projects collection not found", err) } org := id.Org if org == "" { org = "hanzo" } rec := core.NewRecord(col) rec.Set("name", body.Name) rec.Set("description", body.Description) rec.Set("ownerId", id.UserID) rec.Set("orgId", org) rec.Set("settings", map[string]any{}) if err := p.app.Save(rec); err != nil { return e.InternalServerError("failed to create project", err) } return e.JSON(http.StatusCreated, projectJSON(rec)) } // handleGetProject returns a project by id, scoped to the caller's org. func (p *plugin) handleGetProject(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } rec, err := p.app.FindRecordById(models.Projects, e.Request.PathValue("id")) if err != nil { return e.NotFoundError("project not found", err) } if !ownsProject(id, rec) { return e.ForbiddenError("access denied", nil) } return e.JSON(http.StatusOK, projectJSON(rec)) } // handleCreateAPIKey mints a bootnode project key (bn_…). The raw key is // returned exactly once; only its salted hash is stored. Ports POST /keys. func (p *plugin) handleCreateAPIKey(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } var body struct { ProjectID string `json:"projectId"` Name string `json:"name"` RateLimit int `json:"rateLimit"` ComputeUnitsLimit int `json:"computeUnitsLimit"` AllowedOrigins []string `json:"allowedOrigins"` AllowedChains []string `json:"allowedChains"` } if err := e.BindBody(&body); err != nil { return e.BadRequestError("invalid request body", err) } if strings.TrimSpace(body.Name) == "" || body.ProjectID == "" { return e.BadRequestError("projectId and name are required", nil) } project, err := p.app.FindRecordById(models.Projects, body.ProjectID) if err != nil { return e.NotFoundError("project not found", err) } if !ownsProject(id, project) { return e.ForbiddenError("access denied", nil) } rawKey, hash, prefix, err := auth.GenerateKey(p.config.APIKeySalt) if err != nil { return e.InternalServerError("failed to generate key", err) } col, err := p.app.FindCollectionByNameOrId(models.APIKeys) if err != nil { return e.InternalServerError("api keys collection not found", err) } rec := core.NewRecord(col) rec.Set("project", project.Id) rec.Set("name", body.Name) rec.Set("keyHash", hash) rec.Set("keyPrefix", prefix) rec.Set("rateLimit", defaultInt(body.RateLimit, 100)) rec.Set("computeUnitsLimit", defaultInt(body.ComputeUnitsLimit, 1000)) rec.Set("allowedOrigins", body.AllowedOrigins) rec.Set("allowedChains", body.AllowedChains) rec.Set("isActive", true) if err := p.app.Save(rec); err != nil { return e.InternalServerError("failed to save key", err) } return e.JSON(http.StatusCreated, map[string]any{ "id": rec.Id, "name": rec.GetString("name"), "key": rawKey, // shown once "keyPrefix": rec.GetString("keyPrefix"), "rateLimit": rec.GetInt("rateLimit"), "computeUnitsLimit": rec.GetInt("computeUnitsLimit"), "created": rec.GetString("created"), }) } // handleListAPIKeys lists a project's keys (never the raw key). Ports GET /keys. func (p *plugin) handleListAPIKeys(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } projectID := e.Request.URL.Query().Get("projectId") if projectID == "" { return e.BadRequestError("projectId query parameter is required", nil) } project, err := p.app.FindRecordById(models.Projects, projectID) if err != nil { return e.NotFoundError("project not found", err) } if !ownsProject(id, project) { return e.ForbiddenError("access denied", nil) } keys, err := p.app.FindRecordsByFilter( models.APIKeys, "project = {:project}", "-created", 0, 0, map[string]any{"project": project.Id}, ) if err != nil { return e.InternalServerError("failed to list keys", err) } out := make([]map[string]any, 0, len(keys)) for _, k := range keys { out = append(out, map[string]any{ "id": k.Id, "name": k.GetString("name"), "keyPrefix": k.GetString("keyPrefix"), "rateLimit": k.GetInt("rateLimit"), "computeUnitsLimit": k.GetInt("computeUnitsLimit"), "isActive": k.GetBool("isActive"), "lastUsedAt": k.GetString("lastUsedAt"), "created": k.GetString("created"), }) } return e.JSON(http.StatusOK, out) } // handleDeleteAPIKey deactivates a key (soft delete, matching the Python). func (p *plugin) handleDeleteAPIKey(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } key, err := p.app.FindRecordById(models.APIKeys, e.Request.PathValue("id")) if err != nil { return e.NotFoundError("API key not found", err) } project, err := p.app.FindRecordById(models.Projects, key.GetString("project")) if err != nil || !ownsProject(id, project) { return e.ForbiddenError("access denied", nil) } key.Set("isActive", false) if err := p.app.Save(key); err != nil { return e.InternalServerError("failed to deactivate key", err) } return e.JSON(http.StatusOK, map[string]any{"status": "deleted", "id": key.Id}) } // requireProject resolves the project a request acts within. It accepts a // bootnode bn_ key (resolved by hash → owning project) OR an authenticated // user (whose first project is used). This is the Go equivalent of the // Python deps.py get_project_from_key. Returns a 404 when no project is found. func (p *plugin) requireProject(e *core.RequestEvent) (*core.Record, error) { cred, _ := bearerToken(e.Request) if auth.ClassifyCredential(cred, false) == auth.KeyBootnode { hash := auth.HashKey(cred, p.config.APIKeySalt) key, err := p.app.FindFirstRecordByData(models.APIKeys, "keyHash", hash) if err != nil { return nil, e.UnauthorizedError("invalid API key", nil) } if !key.GetBool("isActive") { return nil, e.UnauthorizedError("API key is inactive", nil) } project, err := p.app.FindRecordById(models.Projects, key.GetString("project")) if err != nil { return nil, e.NotFoundError("project not found for key", err) } return project, nil } // Fall back to the authenticated user's first project. id, err := p.requireUser(e) if err != nil { return nil, err } projects, err := p.app.FindRecordsByFilter( models.Projects, "ownerId = {:owner}", "created", 1, 0, map[string]any{"owner": id.UserID}, ) if err != nil || len(projects) == 0 { return nil, e.NotFoundError("No project found. Create a project first.", nil) } return projects[0], nil } // ownsProject reports whether the identity may act on the project. Ownership // is by IAM user id; org-scoped access is granted when the project's org // matches the caller's org (covers org-shared projects). func ownsProject(id *Identity, project *core.Record) bool { if project == nil { return false } if project.GetString("ownerId") == id.UserID { return true } return id.Org != "" && project.GetString("orgId") == id.Org } func projectJSON(rec *core.Record) map[string]any { return map[string]any{ "id": rec.Id, "name": rec.GetString("name"), "description": rec.GetString("description"), "orgId": rec.GetString("orgId"), "ownerId": rec.GetString("ownerId"), "created": rec.GetString("created"), } } func defaultInt(v, def int) int { if v <= 0 { return def } return v } vKxcpackage bootnode import ( "crypto/rand" "encoding/base64" "net/http" "strings" "time" "github.com/hanzoai/base/core" "github.com/hanzoai/base/plugins/bootnode/models" ) // handleListTeam lists the team members of the caller's project. Ports // GET /team from bootnode/api/team/__init__.py. func (p *plugin) handleListTeam(e *core.RequestEvent) error { project, err := p.requireProject(e) if err != nil { return err } members, err := p.app.FindRecordsByFilter( models.TeamMembers, "project = {:project}", "created", 0, 0, map[string]any{"project": project.Id}, ) if err != nil { return e.InternalServerError("failed to list team members", err) } out := make([]map[string]any, 0, len(members)) for _, m := range members { out = append(out, memberJSON(m)) } return e.JSON(http.StatusOK, map[string]any{"members": out, "total": len(out)}) } // handleInviteMember invites a member by email. If the email already maps to an // IAM user the membership is active immediately; otherwise it is pending with // an invite token. Ports POST /team. func (p *plugin) handleInviteMember(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } project, err := p.requireProject(e) if err != nil { return err } var body struct { Email string `json:"email"` Role string `json:"role"` } if err := e.BindBody(&body); err != nil { return e.BadRequestError("invalid request body", err) } body.Email = strings.TrimSpace(strings.ToLower(body.Email)) if body.Email == "" || !strings.Contains(body.Email, "@") { return e.BadRequestError("a valid email is required", nil) } role := body.Role if role == "" { role = "viewer" } if !validMemberRole(role) { return e.BadRequestError("role must be one of: owner, admin, member, viewer", nil) } // Reject duplicates within the project. existing, _ := p.app.FindRecordsByFilter( models.TeamMembers, "project = {:project} && email = {:email}", "", 1, 0, map[string]any{"project": project.Id, "email": body.Email}, ) if len(existing) > 0 { return e.BadRequestError("member with this email already exists", nil) } // Does the email already resolve to an IAM user in this org? var iamUserID, iamName string if users, lookupErr := p.iam.LookupByAttribute(e.Request.Context(), "email", body.Email, id.Org, 1); lookupErr == nil && len(users) > 0 { iamUserID = users[0].ID iamName = users[0].Name } col, err := p.app.FindCollectionByNameOrId(models.TeamMembers) if err != nil { return e.InternalServerError("team members collection not found", err) } rec := core.NewRecord(col) rec.Set("project", project.Id) rec.Set("email", body.Email) rec.Set("role", role) rec.Set("invitedBy", id.UserID) if iamUserID != "" { rec.Set("userId", iamUserID) rec.Set("name", iamName) rec.Set("status", "active") rec.Set("joinedAt", time.Now().UTC()) } else { rec.Set("status", "pending") rec.Set("inviteToken", randomToken()) } if err := p.app.Save(rec); err != nil { return e.InternalServerError("failed to create member", err) } return e.JSON(http.StatusCreated, memberJSON(rec)) } // handleUpdateMember updates a member's role or display name. Ports // PATCH /team/{id}. func (p *plugin) handleUpdateMember(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } project, err := p.requireProject(e) if err != nil { return err } member, err := p.memberInProject(project, e.Request.PathValue("id")) if err != nil { return e.NotFoundError("team member not found", err) } var body struct { Role string `json:"role"` Name string `json:"name"` } if err := e.BindBody(&body); err != nil { return e.BadRequestError("invalid request body", err) } if body.Role != "" { if !validMemberRole(body.Role) { return e.BadRequestError("invalid role", nil) } member.Set("role", body.Role) } if body.Name != "" { member.Set("name", body.Name) } if err := p.app.Save(member); err != nil { return e.InternalServerError("failed to update member", err) } return e.JSON(http.StatusOK, memberJSON(member)) } // handleRemoveMember removes a member. Ports DELETE /team/{id}. func (p *plugin) handleRemoveMember(e *core.RequestEvent) error { id, err := p.requireUser(e) if err != nil { return err } if id.ReadOnly { return e.ForbiddenError("publishable keys are read-only", nil) } project, err := p.requireProject(e) if err != nil { return err } member, err := p.memberInProject(project, e.Request.PathValue("id")) if err != nil { return e.NotFoundError("team member not found", err) } if err := p.app.Delete(member); err != nil { return e.InternalServerError("failed to remove member", err) } return e.NoContent(http.StatusNoContent) } // memberInProject finds a member record and verifies it belongs to project. func (p *plugin) memberInProject(project *core.Record, memberID string) (*core.Record, error) { rec, err := p.app.FindRecordById(models.TeamMembers, memberID) if err != nil { return nil, err } if rec.GetString("project") != project.Id { return nil, errString("member does not belong to project") } return rec, nil } func memberJSON(m *core.Record) map[string]any { return map[string]any{ "id": m.Id, "email": m.GetString("email"), "name": m.GetString("name"), "role": m.GetString("role"), "status": m.GetString("status"), "joinedAt": m.GetString("joinedAt"), "created": m.GetString("created"), } } func validMemberRole(role string) bool { switch role { case "owner", "admin", "member", "viewer": return true default: return false } } // randomToken returns a URL-safe 32-byte invite token. func randomToken() string { buf := make([]byte, 32) _, _ = rand.Read(buf) return base64.RawURLEncoding.EncodeToString(buf) } 0xs100644 api_keys.gom;Zr7100644 auth_test.goʂza6J<m#v100644 oauth.goZaA2uڕ}Z keyPrefixLen { prefix = prefix[:keyPrefixLen] } return rawKey, hash, prefix, nil } // HashKey computes the salted SHA-256 hash of a raw key for storage and // lookup. Deterministic: the same (rawKey, salt) always yields the same hash, // which is required because the hash is the lookup index. func HashKey(rawKey, salt string) string { sum := sha256.Sum256([]byte(rawKey + salt)) return hex.EncodeToString(sum[:]) } // VerifyKey reports whether rawKey hashes (with salt) to storedHash, using a // constant-time comparison to avoid leaking the hash via timing. func VerifyKey(rawKey, salt, storedHash string) bool { got := HashKey(rawKey, salt) return subtle.ConstantTimeCompare([]byte(got), []byte(storedHash)) == 1 } E -xpackage auth import "testing" func TestNetworkFromRedirectURI(t *testing.T) { cases := map[string]string{ "https://cloud.lux.network/auth/callback": "lux", "https://cloud.hanzo.ai/auth/callback": "hanzo", "https://cloud.zoo.network/auth/callback": "zoo", "https://cloud.pars.network/auth/callback": "pars", // web3.. — the live production brand surfaces. "https://web3.hanzo.ai/auth/callback": "hanzo", "https://web3.lux.network/auth/callback": "lux", "https://web3.zoo.ngo/auth/callback": "zoo", "https://web3.pars.id/auth/callback": "pars", // Apex brand surfaces (the brand is the registrable domain). "https://bootno.de/login": "lux", "https://lux.cloud/auth/callback": "lux", "https://zoo.cloud/auth/callback": "zoo", "https://example.com/cb": "", "not a url at all": "", "": "", } for uri, want := range cases { if got := NetworkFromRedirectURI(uri); got != want { t.Errorf("NetworkFromRedirectURI(%q) = %q, want %q", uri, got, want) } } } func TestClientIDForRedirect(t *testing.T) { if got := ClientIDForRedirect("https://cloud.zoo.network/cb", "fallback"); got != "lux-web3" { t.Errorf("zoo network must map to lux-web3, got %q", got) } // All four live brand surfaces share the single lux-web3 IAM app. for _, uri := range []string{ "https://web3.hanzo.ai/auth/callback", "https://bootno.de/auth/callback", "https://lux.cloud/auth/callback", "https://zoo.cloud/auth/callback", } { if got := ClientIDForRedirect(uri, "fallback"); got != "lux-web3" { t.Errorf("%s must map to lux-web3, got %q", uri, got) } } if got := ClientIDForRedirect("https://unknown.example/cb", "fallback"); got != "fallback" { t.Errorf("unknown redirect must fall back, got %q", got) } } func TestClassifyCredential(t *testing.T) { cases := []struct { cred string isBearer bool want KeyType }{ {"bn_abc123", false, KeyBootnode}, {"pk-abc", false, KeyIAMPublishable}, {"sk-abc", false, KeyIAMSecret}, {"hk-abc", false, KeyIAMService}, {"aaa.bbb.ccc", false, KeyJWT}, {"opaque", true, KeyJWT}, // bearer header => treat as JWT {"opaque", false, KeyUnknown}, } for _, c := range cases { if got := ClassifyCredential(c.cred, c.isBearer); got != c.want { t.Errorf("ClassifyCredential(%q, %v) = %d, want %d", c.cred, c.isBearer, got, c.want) } } } func TestGenerateAndVerifyKey(t *testing.T) { salt := "test-salt" raw, hash, prefix, err := GenerateKey(salt) if err != nil { t.Fatalf("GenerateKey: %v", err) } if len(raw) < len(BootnodeKeyPrefix)+16 { t.Fatalf("raw key too short: %q", raw) } if raw[:3] != BootnodeKeyPrefix { t.Fatalf("raw key missing bn_ prefix: %q", raw) } if len(prefix) != keyPrefixLen || prefix != raw[:keyPrefixLen] { t.Fatalf("prefix mismatch: %q", prefix) } if !VerifyKey(raw, salt, hash) { t.Fatal("VerifyKey must accept the freshly-generated key") } // Tamper: a single different character must not verify. if VerifyKey(raw+"x", salt, hash) { t.Fatal("VerifyKey must reject a tampered key") } if VerifyKey(raw, "wrong-salt", hash) { t.Fatal("VerifyKey must reject a key checked with the wrong salt") } } func TestHashKeyDeterministic(t *testing.T) { // The hash is a lookup index, so it MUST be deterministic. a := HashKey("bn_xyz", "salt") b := HashKey("bn_xyz", "salt") if a != b { t.Fatal("HashKey must be deterministic for the same input") } if HashKey("bn_xyz", "salt") == HashKey("bn_xyz", "other") { t.Fatal("different salts must yield different hashes") } // Two distinct keys must not collide. r1, h1, _, _ := GenerateKey("s") r2, h2, _, _ := GenerateKey("s") if r1 == r2 || h1 == h2 { t.Fatal("distinct generated keys must not collide") } } Ox( // Package auth ports the bootnode authentication surface: the multi-network // OAuth2 callback (lux-web3 shared client id) and bootnode-issued API keys. // // IAM token validation and pk-/sk-/hk- key resolution are NOT reimplemented // here — they live in github.com/hanzoai/base/iam and are reused. This package // adds only what is bootnode-specific: deriving the per-network IAM client id // from the redirect_uri, and the bn_ project-scoped API key lifecycle. package auth import ( "net/url" "strings" ) // NetworkClientIDs maps a white-label network to its IAM application client id. // All four cloud networks share a single IAM app (app-lux-web3, clientId // "lux-web3") with per-network redirect URIs registered in IAM. This is the // exact mapping from the Python bootnode/api/auth/oauth.py. var NetworkClientIDs = map[string]string{ "lux": "lux-web3", "pars": "lux-web3", "zoo": "lux-web3", "hanzo": "lux-web3", } // apexNetworks maps a bare white-label apex (the brand's own TLD) to its // network slug. These hosts have no network subdomain to parse — the brand IS // the registrable domain. bootno.de is the canonical Bootnode brand and is // served on the Lux primary network, matching the Python oauth.py default. var apexNetworks = map[string]string{ "bootno.de": "lux", "lux.cloud": "lux", "zoo.cloud": "zoo", } // NetworkFromRedirectURI extracts the network slug from an OAuth redirect_uri. // // https://cloud.lux.network/auth/callback → "lux" (cloud..) // https://web3.hanzo.ai/auth/callback → "hanzo" (web3..) // https://web3.zoo.ngo/auth/callback → "zoo" // https://lux.cloud/auth/callback → "lux" (apex brand) // https://zoo.cloud/auth/callback → "zoo" // https://bootno.de/... → "lux" (primary brand) // // Returns "" when no network can be derived. func NetworkFromRedirectURI(redirectURI string) string { u, err := url.Parse(redirectURI) if err != nil { return "" } host := u.Hostname() if host == "" { return "" } if net, ok := apexNetworks[host]; ok { return net } parts := strings.Split(host, ".") // .. where prefix is a web entrypoint (cloud or // web3) → parts[1] is the network. Both prefixes resolve to the same // per-network IAM redirect; they are alternate brand surfaces. if len(parts) >= 3 && (parts[0] == "cloud" || parts[0] == "web3") { return parts[1] } return "" } // ClientIDForRedirect returns the IAM client id to use for a token exchange // given the request's redirect_uri. It falls back to defaultClientID when the // redirect maps to no known network. func ClientIDForRedirect(redirectURI, defaultClientID string) string { if id, ok := NetworkClientIDs[NetworkFromRedirectURI(redirectURI)]; ok { return id } return defaultClientID } :x // Package bootnode is the Go port of the Python bootnode backend // (bootnode/api/), built natively on Hanzo Base as a plugin. // // It consolidates the blockchain developer platform — multi-network OAuth, // project API keys, team management, and 1-click network/node/key // provisioning — onto Base's IAM + tenant infrastructure. Identity is owned by // Hanzo IAM (reused via github.com/hanzoai/base/iam); per-org and per-user data // isolation come from the platform plugin's PrincipalIsolation="sqlite" mode; // billing is wired through the commerce plugin's Client interface. // // Network/NodeFleet/KMSSecret provisioning targets bootno.de/v1 custom // resources applied via a dependency-free Kubernetes REST client // (plugins/bootnode/kube) — no client-go, no CGO. // // This is a foundation: 5 of 20 API modules are ported end-to-end (auth, team, // networks, nodes, keys). The remaining modules are tracked in the PR body. package bootnode import ( "net/http" "strings" "github.com/hanzoai/base/core" "github.com/hanzoai/base/iam" "github.com/hanzoai/base/plugins/bootnode/auth" "github.com/hanzoai/base/plugins/bootnode/kube" "github.com/hanzoai/base/plugins/bootnode/models" "github.com/hanzoai/base/plugins/commerce" "github.com/hanzoai/base/tools/hook" "github.com/hanzoai/base/tools/router" luxlog "github.com/luxfi/log" ) // MustRegister installs the bootnode plugin and panics on error. func MustRegister(app core.App, cfg Config) { if err := Register(app, cfg); err != nil { panic(err) } } // Register installs the bootnode plugin. // // On OnBootstrap it creates the bootnode collections (idempotent). On OnServe // it mounts the API under /v1. A zero-value Config disables the plugin; callers // opt in with Enabled:true. func Register(app core.App, cfg Config) error { if !cfg.Enabled { return nil } cfg.resolve() // Fail fast: never run with the insecure default salt against a real IAM. if cfg.isProductionIAM() && cfg.APIKeySalt == insecureSaltDefault { return errInsecureSalt } p := &plugin{ app: app, config: cfg, logger: luxlog.New("component", "bootnode"), iam: iam.NewClient(cfg.IAMEndpoint), kube: kube.New(cfg.KubeNamespace), commerce: commerce.New(commerce.Config{BaseURL: cfg.CommerceURL, APIKey: cfg.CommerceAPIKey}), } app.OnBootstrap().Bind(&hook.Handler[*core.BootstrapEvent]{ Id: "__bootnodeBootstrap__", Func: func(e *core.BootstrapEvent) error { if err := e.Next(); err != nil { return err } return models.EnsureAll(app) }, }) app.OnServe().Bind(&hook.Handler[*core.ServeEvent]{ Id: "__bootnodeServe__", Func: func(e *core.ServeEvent) error { app.Store().Set("bootnode", p) p.registerRoutes(e.Router) return e.Next() }, }) return nil } // errInsecureSalt is returned when production-mode IAM is paired with the // placeholder API key salt. var errInsecureSalt = errString("bootnode: BOOTNODE_API_KEY_SALT must be set to a non-default value when IAM_URL is non-local") type errString string func (e errString) Error() string { return string(e) } // plugin holds the shared dependencies for all bootnode handlers. type plugin struct { app core.App config Config logger luxlog.Logger iam *iam.Client kube *kube.Client commerce commerce.Client } // registerRoutes mounts every bootnode endpoint. One group, /v1, matching the // Python api_prefix. No extraneous /api/ segment. func (p *plugin) registerRoutes(r *router.Router[*core.RequestEvent]) { g := r.Group("/v1") // auth/ g.POST("/auth/oauth/callback", p.handleOAuthCallback) g.GET("/auth/me", p.handleMe) g.POST("/auth/projects", p.handleCreateProject) g.GET("/auth/projects/{id}", p.handleGetProject) g.POST("/auth/keys", p.handleCreateAPIKey) g.GET("/auth/keys", p.handleListAPIKeys) g.DELETE("/auth/keys/{id}", p.handleDeleteAPIKey) // team/ g.GET("/team", p.handleListTeam) g.POST("/team", p.handleInviteMember) g.PATCH("/team/{id}", p.handleUpdateMember) g.DELETE("/team/{id}", p.handleRemoveMember) // chains/ g.GET("/chains", p.handleListChains) g.GET("/chains/{chain}", p.handleGetChain) // networks/ (bootno.de/v1 Network CRs) g.POST("/networks", p.handleCreateNetwork) g.GET("/networks", p.handleListNetworks) g.GET("/networks/{id}", p.handleGetNetwork) g.DELETE("/networks/{id}", p.handleDeleteNetwork) // nodes/ (bootno.de/v1 NodeFleet CRs) g.POST("/nodes", p.handleCreateNodeFleet) g.GET("/nodes", p.handleListNodeFleets) g.GET("/nodes/{id}", p.handleGetNodeFleet) g.DELETE("/nodes/{id}", p.handleDeleteNodeFleet) // keys/ (bootno.de/v1 KMSSecret CRs — no plaintext storage) g.POST("/keys", p.handleCreateKMSKey) g.GET("/keys/status", p.handleKeyStatus) g.GET("/keys/{name}", p.handleGetKMSKey) } // Identity is the resolved caller context for a request: who they are (IAM // user id + org) and, when applicable, the bootnode project they act within. type Identity struct { UserID string Email string Org string // ReadOnly is true for publishable (pk-) keys. ReadOnly bool } // requireUser resolves the caller's identity from the request. It accepts, in // order: a Base-resolved auth record, an IAM bearer JWT, and IAM-managed // pk-/sk-/hk- keys. bootnode bn_ project keys do NOT identify a user — they // identify a project (see requireProject). Returns a 401 on failure. func (p *plugin) requireUser(e *core.RequestEvent) (*Identity, error) { // Identity headers set by the platform plugin / gateway take precedence. if uid := e.Request.Header.Get("X-User-Id"); uid != "" { return &Identity{ UserID: uid, Email: e.Request.Header.Get("X-User-Email"), Org: e.Request.Header.Get("X-Org-Id"), }, nil } // Base may have already authenticated the request. if e.Auth != nil { return &Identity{UserID: e.Auth.Id, Email: e.Auth.GetString("email")}, nil } cred, isBearer := bearerToken(e.Request) if cred == "" { return nil, e.UnauthorizedError("Authentication required. Use Authorization: Bearer or X-API-Key.", nil) } switch auth.ClassifyCredential(cred, isBearer) { case auth.KeyJWT: u, err := p.iam.ValidateToken(cred) if err != nil { return nil, e.UnauthorizedError("invalid or expired token", err) } return p.identityFromIAM(e, u, false) case auth.KeyIAMPublishable: u, err := p.iam.ResolveAPIKey(cred) if err != nil { return nil, e.UnauthorizedError("invalid API key", err) } return p.identityFromIAM(e, u, true) case auth.KeyIAMSecret, auth.KeyIAMService: u, err := p.iam.ResolveAPIKey(cred) if err != nil { return nil, e.UnauthorizedError("invalid API key", err) } return p.identityFromIAM(e, u, false) default: return nil, e.UnauthorizedError("unsupported credential — bootnode keys identify a project, not a user", nil) } } // identityFromIAM builds an Identity from a resolved IAM user, enforcing the // org allow-list. func (p *plugin) identityFromIAM(e *core.RequestEvent, u *iam.User, readOnly bool) (*Identity, error) { org := "" if len(u.OrgIDs) > 0 { org = u.OrgIDs[0] } if org != "" && !p.config.orgAllowed(org) { return nil, e.ForbiddenError("organization '"+org+"' is not allowed", nil) } return &Identity{UserID: u.ID, Email: u.Email, Org: org, ReadOnly: readOnly}, nil } // bearerToken extracts a credential from the Authorization (Bearer) or // X-API-Key header. The bool reports whether it came from a Bearer header. func bearerToken(r *http.Request) (string, bool) { if k := r.Header.Get("X-API-Key"); k != "" { return k, false } authz := r.Header.Get("Authorization") if strings.HasPrefix(authz, "Bearer ") { return strings.TrimPrefix(authz, "Bearer "), true } return "", false } // orgLabels returns the standard CR labels scoping a resource to an org. func orgLabels(org string) map[string]string { return map[string]string{ "app.kubernetes.io/managed-by": "bootnode", "bootnode.dev/org": org, } } +I4xZko۶ V@7yCsڴ݂Yd;1BhG,$dYv̕H;"gTR6Wtya(/4d$ͧ?i!vxcm|XZ4V<)ǃX͇7Q82r)o?.rfXI1cy?gY@1:,ze]yKtՠtC1f;al'F(-~&tqf"$V!fKr)\JhiT"N&4RN{#EځPz:L<(V|m4o*3^SHK[\;m4I& sxG*7:Rvȱ.>2ov"7C".**͐dI q(g%R~6 ^韑M]D/e! 퀹rW6-<"tWAk v1G9(_:ZA" Ͼ.@Σ4? CJh'6G/0Yb:z~b#zMwKQSiD@ (5+JZ =X5S,2bhw %reݫseߨ2gCnřw͘ ~Br2V:"K.\Ε^ryCḃ0?!)=OD-Q %=Pզ͍UZ}Z !c 8 6I8|;> uߤd%/HbS_ίJ݁{$ +gzЯop_O-EBp'ԌtspLA2O (V#(A>=>FY-Bٴf,q7rڦ( QBq | -QB_$]:!_ۉzUN%Ч3B@LJ{lnNl"}񿫝&+̐~ *MwpnTs2 nLm))֝p  d:srRr(SL 4lD,C>Ba5G+,Vt<ܪy,/U Eɗ<)|e!vqbqp(/hF "ʥ꺫by+ڇjQOqޡ^ t@a T興Q%6ڐ*m_MqVK&*$*c:hYO8DeCdJ,|N?Σq&c ^LaHV."T}j}4g(ث\1[C"]ᯜx+ 5ԴlD4(}'>%]/c7wn戻XTOL~[,CξΞifHv-o†/z2ͨYwZ E?.N_@#zHヘOooO^J{LhuI5܃ζLSo7!˻ RŻlQknRYajikΉ'J`*M 9sYuus;Ŧ\7<X4Fېm wFB:Dn屜4ΘHgT X3UJp02Hs\XM|W_' Y3HC(W\SlJM5.W ^hjC3=v{;v\Z+owb'NnKы~wi7k@jMCV!>uO.=ꓦ: \ {М;\ X< d4$@PS8(L{οDŽ7 sܜH;f;{(mzg=1UV}@ B?#x[|~虜H L][iEQhЊ%Zک ev*0#Cu;n)P>^tdNN1ثωΥ0;KRk5-s̩iPfLG^hDyW {uZmڍ ~"sKdmQ|ZpԞkF߾</RV)ۚ /Vln軎O ̯{ NGŷ?8{ttQL"'~5=jA-'l׿-4wm`y].##%?2r-NDcٯᡯ_XyH<6΁.!Qhk8M uß}rpZgDU}P;RîѶY1w*?TQGG~cLuY Ve͋[:sHa v_ht6.U[ߏ`s3ָs}sO0OAJYk`@V5Cgpt '[AE_^|VZD?6?Gx/package bootnode import ( "os" "strings" ) // Config is the bootnode plugin configuration. It ports the environment-driven // idioms of the Python bootnode/config.py (pydantic-settings) without the // commodity-chain RPC catalogue — those URLs belong in the chain registry, not // plugin config. Only what must vary between environments lives here. // // IAM and KMS endpoints are intentionally shared with the platform plugin: a // bootnode deployment is always co-resident with platform, so it reuses the // same IAM client surface (github.com/hanzoai/base/iam). type Config struct { // Enabled gates the whole plugin. A zero-value Config is disabled; callers // opt in explicitly. Mirrors the waitlist plugin convention. Enabled bool // IAMEndpoint is the Hanzo IAM base URL (default https://hanzo.id). IAMEndpoint string // IAMClientID / IAMClientSecret are the bootnode service's IAM application // credentials, used for the OAuth2 authorization-code exchange. IAMClientID string IAMClientSecret string // AllowedOrgs restricts which IAM orgs may authenticate. Empty means the // canonical four (hanzo, zoo, lux, pars). AllowedOrgs []string // FrontendURL is the default OAuth redirect base when a request omits an // explicit redirect_uri (default http://localhost:3001). FrontendURL string // APIKeySalt is mixed into the SHA-256 of bootnode-issued API keys (bn_…) // before storage. Required in production; the plugin refuses to start with // the insecure default when IAMEndpoint points at a non-local host. APIKeySalt string // KubeNamespace is the namespace bootno.de CRs are applied into // (default "bootnode"). KubeNamespace string // CommerceURL / CommerceAPIKey configure the Hanzo Commerce billing client. // An empty API key disables billing (no-op). CommerceURL string CommerceAPIKey string } const insecureSaltDefault = "change-me-in-production" // canonicalOrgs is the default allow-list of IAM orgs. var canonicalOrgs = []string{"hanzo", "zoo", "lux", "pars"} // resolve fills defaults. It is idempotent. func (c *Config) resolve() { if c.IAMEndpoint == "" { c.IAMEndpoint = "https://hanzo.id" } if c.FrontendURL == "" { c.FrontendURL = "http://localhost:3001" } if c.KubeNamespace == "" { c.KubeNamespace = "bootnode" } if c.CommerceURL == "" { c.CommerceURL = "https://commerce.hanzo.ai" } if c.APIKeySalt == "" { c.APIKeySalt = insecureSaltDefault } if len(c.AllowedOrgs) == 0 { c.AllowedOrgs = canonicalOrgs } } // orgAllowed reports whether org is in the allow-list. func (c *Config) orgAllowed(org string) bool { for _, o := range c.AllowedOrgs { if o == org { return true } } return false } // isProductionIAM reports whether the IAM endpoint is a non-local host, which // the plugin treats as "production" for fail-fast secret validation. func (c *Config) isProductionIAM() bool { e := strings.ToLower(c.IAMEndpoint) return !(strings.Contains(e, "localhost") || strings.Contains(e, "127.0.0.1")) } // ConfigFromEnv builds a Config from the standard bootnode environment // variables. Used by the default Base wiring; tests construct Config directly. func ConfigFromEnv() Config { return Config{ Enabled: os.Getenv("BOOTNODE_ENABLED") == "true", IAMEndpoint: os.Getenv("IAM_URL"), IAMClientID: os.Getenv("IAM_CLIENT_ID"), IAMClientSecret: os.Getenv("IAM_CLIENT_SECRET"), FrontendURL: os.Getenv("FRONTEND_URL"), APIKeySalt: os.Getenv("BOOTNODE_API_KEY_SALT"), KubeNamespace: os.Getenv("BOOTNODE_K8S_NAMESPACE"), CommerceURL: os.Getenv("COMMERCE_URL"), CommerceAPIKey: os.Getenv("COMMERCE_API_KEY"), AllowedOrgs: splitNonEmpty(os.Getenv("BOOTNODE_ALLOWED_ORGS")), } } // splitNonEmpty splits a comma-separated env value, trimming blanks. func splitNonEmpty(s string) []string { if s == "" { return nil } parts := strings.Split(s, ",") out := parts[:0] for _, p := range parts { if t := strings.TrimSpace(p); t != "" { out = append(out, t) } } return out } e1pxK100644 kube.go?QeCpzuVt9Tu100644 kube_test.go!B!qdW[,+MʵxZn7m=3@SM-4-vո Gu7mHNE %M="'Ckϰ'd9vݢF`K\sg|*Yy*XgȅL/&Rho|,0\$(&>d~ϸaf&ةRFD<+dRDB[:M삩 |.tcPKmԜ(Bqiъ_<`œ@i&c„}1s#p _4o:JUI5U˄F3SpS.DK| ATf2)3e8bgLwXR)ɫ,DLAgiE gggIy4e7Cy?3&gNvTn 98V%SgBM6e] XEry!IEceHNtONv{7{#а LJ/ 6Q`4[jRߞT>Jֶ~ZӲ>siMdnʹg|Y y n8*^'LÏ:EĆsJΩukwA!FkrmOR%l%:y+>:7u;D 7؏EnTd7p)/ZIZT裲)p~4\r1CkV|߻O/ Gq %f=&ku"]{7~>Gqa;^O?g]f=\Qqbk(ւ0oCPذ~z">F,-xBXֹsf=$sm٢aAB#$D\C"V!QEe{݆:i$ SY+PT?'ipxgBZ$Q1fV/ řHJ)Qx땴[SRj!UVІ<[,L8`B*gS$ zKAqZ^tOGtB-R e1NɊl LJ /3s+!ʋ g`wq[=crs-7<.6JEJ&W8uH'ȱDU@˄t^ٶ޹Wt>&vnşI q=C4E7 oOȃ{'m G#b պ%KQ}9̣~@'ɏ*AgtIҥ[8D~C%"\bO.hGl]%i"x 9)ۑ!et8sCf3"JWrg~p #ZWQ,2"­  ?E/>Gl"7H`Ոx#=r h٫MFOں%7\R1խb^Ƽ*|0iy0p:w5`wfiϽVlQ:.ʭ7zU>? _N/N_OӟZIN7%;L*9Iv\\K e!giFp#WWkj $uN\n2m XU. ٞ2Ʉˮ޾5uBC Q"}hB^g*{Gj~99wrJ%TJ :.$Јm5NAR112ܰյ mY얞(rsQ&n(D*;C^^"ե VDl7Ε#GY]-xՎSj/+|l<3~rmitٚ':~I/,=ՠ,|רF` \)Q 8>mI_d?\NC& a֔H-Ai\`U]AصD'*-nfs&ss,I7S&ad&z,1`5]N%*,MY vHkH""җň\p9,P)#A~5nfm*TjlD1hp1?YG{mmp\>( {9?S$A<زop`Lbv*i XZqBŠ_(Qz`ӟ QkS rJĻ>py*?b&Uv|e]||󖮏؃ǏnRծ 7R9{I|T|n]Xmdz100644 webhook_test.go)PfɊ!{شى8!xt // Package workers ports the bootnode background workers. It currently provides // webhook delivery (the Go equivalent of bootnode/workers/webhook.py): sign a // payload with the webhook's HMAC secret, POST it, and return the delivery // outcome for the caller to persist. // // This is a library, not a daemon. Base does not run arq; delivery is driven by // the plugin (synchronously on the event, or from a Base task/scheduler). The // dispatch logic — signing, timeout, retry accounting — lives here, decoupled // from any queue. package workers import ( "bytes" "context" "crypto/hmac" "crypto/sha256" "encoding/hex" "encoding/json" "fmt" "io" "net/http" "time" ) // SignatureHeader is the header carrying the HMAC-SHA256 signature of the body. const SignatureHeader = "X-Bootnode-Signature" // Delivery is the outcome of a single webhook delivery attempt. The plugin // persists it to the _bootnode_webhook_deliveries collection. type Delivery struct { StatusCode int ResponseBody string Success bool Error string } // Dispatcher delivers signed webhook payloads. type Dispatcher struct { http *http.Client maxBody int64 } // NewDispatcher constructs a Dispatcher with the given per-request timeout. // A zero timeout defaults to 30s (matching the Python webhook_timeout). func NewDispatcher(timeout time.Duration) *Dispatcher { if timeout == 0 { timeout = 30 * time.Second } return &Dispatcher{ http: &http.Client{Timeout: timeout}, maxBody: 64 << 10, // cap recorded response bodies at 64 KiB } } // Sign returns the hex-encoded HMAC-SHA256 of payload under secret. Exposed so // receivers (and tests) can verify deliveries. func Sign(secret string, payload []byte) string { mac := hmac.New(sha256.New, []byte(secret)) mac.Write(payload) return hex.EncodeToString(mac.Sum(nil)) } // Deliver POSTs payload to url, signing it with secret. The returned Delivery // records the outcome regardless of HTTP status — a non-2xx response is a // delivery with Success=false, not a Go error. A Go error is returned only for // payload marshaling failures (a programming error). func (d *Dispatcher) Deliver(ctx context.Context, url, secret string, payload any) (*Delivery, error) { body, err := json.Marshal(payload) if err != nil { return nil, fmt.Errorf("workers: marshal webhook payload: %w", err) } req, err := http.NewRequestWithContext(ctx, http.MethodPost, url, bytes.NewReader(body)) if err != nil { // A malformed URL is a delivery failure, not a transport error to retry // on infrastructure grounds — record it as such. return &Delivery{Success: false, Error: err.Error()}, nil } req.Header.Set("Content-Type", "application/json") req.Header.Set("User-Agent", "bootnode-webhooks/1") req.Header.Set(SignatureHeader, Sign(secret, body)) resp, err := d.http.Do(req) if err != nil { return &Delivery{Success: false, Error: err.Error()}, nil } defer resp.Body.Close() respBody, _ := io.ReadAll(io.LimitReader(resp.Body, d.maxBody)) return &Delivery{ StatusCode: resp.StatusCode, ResponseBody: string(respBody), Success: resp.StatusCode >= 200 && resp.StatusCode < 300, }, nil } ߺ8x6package workers import ( "context" "crypto/hmac" "crypto/sha256" "encoding/hex" "io" "net/http" "net/http/httptest" "testing" "time" ) func TestDeliverSignsAndSucceeds(t *testing.T) { secret := "whsec_test" var gotSig string var gotBody []byte srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { gotSig = r.Header.Get(SignatureHeader) gotBody, _ = io.ReadAll(r.Body) w.WriteHeader(http.StatusOK) })) defer srv.Close() d := NewDispatcher(5 * time.Second) res, err := d.Deliver(context.Background(), srv.URL, secret, map[string]any{"event": "block", "number": 42}) if err != nil { t.Fatalf("Deliver: %v", err) } if !res.Success || res.StatusCode != http.StatusOK { t.Fatalf("expected success 200, got %+v", res) } // Verify the signature the receiver got is a valid HMAC of the body. mac := hmac.New(sha256.New, []byte(secret)) mac.Write(gotBody) want := hex.EncodeToString(mac.Sum(nil)) if gotSig != want { t.Fatalf("signature mismatch: got %q want %q", gotSig, want) } } func TestDeliverNon2xxIsFailureNotError(t *testing.T) { srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { w.WriteHeader(http.StatusInternalServerError) _, _ = w.Write([]byte("boom")) })) defer srv.Close() d := NewDispatcher(5 * time.Second) res, err := d.Deliver(context.Background(), srv.URL, "s", map[string]any{"x": 1}) if err != nil { t.Fatalf("non-2xx must not be a Go error: %v", err) } if res.Success { t.Fatal("500 must be recorded as Success=false") } if res.StatusCode != http.StatusInternalServerError || res.ResponseBody != "boom" { t.Fatalf("delivery not recorded correctly: %+v", res) } } func TestDeliverBadURLIsFailure(t *testing.T) { d := NewDispatcher(time.Second) res, err := d.Deliver(context.Background(), "http://127.0.0.1:0/never", "s", map[string]any{}) if err != nil { t.Fatalf("unreachable host must be a Delivery failure, not an error: %v", err) } if res.Success || res.Error == "" { t.Fatalf("expected failure with error message, got %+v", res) } } Jݬx340031QHNKgHQ梠$ʙSaIdzoVUėH?mV( /&8.@(KKI,)[1=oI.|d-:ʝ URTv$V & /aE-OW%O+h8I;z:x>\B;eh2u*E5Ipeed.goSDʷ/ު%">œ/McxZn[m?ݣB)X8٭m.Z#s($ЇI͐碛s٭DpH|s2S%b?4Yz3J1Q9'򻥈\RZboxؠ(uB~:a@1)qTiFbgd;(Ur&NNB=Wʇ'/Ao|XK N =Dgr[AG0dȔrti BH^u ;*JZ6kG*&QuAL oF簀<E䭆I65( Q`ƁP]cPwoxd~$LX_\H"T"eT:e)NpC'-'(p(gǰk'9JH i?[z(!"Hw|cv:AԵ \3z!6μO֯N<(u\Ԗ޹.QY/𝁐"xq/4?N$qt γ}D3;A[V#ys̷8-?PN%]N.L;@L 3jmflv r+AUM_laT)l "wAu< a.UE=L0h!e\'kl-5J&Ob޿{3*)Ex5;,&qV*uʥ޿GR0\|C{)zڃȸd?1D!IP`WkgaCöo,Anfmkp}n3 JMY+"!$:Ejr؜!5W'a.[W\QU_P5YBQ!3XcozW4`uIË}.SFeWAI8Cː4ԪEI~9@JN֒uzvĔ6eʅ5+EǙ7AM⸙ jO(NIK-FSr5Tvg P1HLSNJZߡz[S9A;4:RҪcgUӄ xz;$yS^e8A%؏W,H@ F ǜcylzOh\?؞W~ՖLw_˜LKl ߨ絈b>rMڊ TX1cyG( kElbvJ-۵jvnQ]c븑Se|%@Bjz`/tVj5GmZٹ+{2eSS(89 R߆2*0zЪpS^U,(qG m#>Vq,-PySRR{I)O3ԵGL|nr2еV=Ȉ? OOCDKרO}x"6e Z8TQ1f!kS'Ds1~M31Lq>A"dyTi.=ƪym5 t.7u^*JG41(JwcAݱs|t}YZhw hӢJc#ϺىcXyTOgϟ]u۷[ErH&yZXK{{9Pa!{Jx {!Yn}k^8 oUnʭflH[Bc;[NurLMwK_BP=D!u}j鯥Q!uXO>qc 7ǖA-?{Cg~$:+ϴA]vwwe 7fT~5ynŪn|3!7I[jt>e;yMWl֗Oryݩl޶P?Sկ"_fEi0 A'=TjK pH@?F#&R 0A|@:`>J .j`/ x hǝ?'sdy_وut 7DP^grPx\Rǒ OQ ygA0 - +P]ônqG'YֆfY }%/|GF, DVW,ہ`2Ko_%i+Q1OcH?3eåLqfH?5 Ri ~4r[kn+4Rb H$ WW'o3|?MSLE}JSsY[|Z]bsKĵYѺ^]q'BlM^IzDz:bƉ+ת#.Dkk1qW2>M'c +@r؏ ¡y_k# N]__i@H=vYia-ٕNcFYf#ˆ ťU$$T2n;"$7w} PNj+!}bL!Q߆ B =uvF5 \sq]OY4ٴ<3X7[4`]`E+~d4 "qÊ1>EkkTbKHHwҧmbUG_DMbwo#2wZ@S;%4AGP&N4Q***]TpBI Ƒt I\:Ny\YF69{pa)04Y#L5vJL04CPP]jV'YK}P1 YvSd8ȿԁNZvG釉'"Wlby),]mԙɝ٩J]qUyw:*:;{J{lj?ȳ"HIb'lG]lG9 =ŵ'gݓׯ/'rh[&4RcjFO>4>c0G7"Y"%'|k-`j\]z:cCM i!e2Leהg9Op!M+"{Fi &sU۝Ã]BYkR֮/ޞFMVt!_/`tra ^]5}`mPi( ?%W a( h(b'i2*a~1_c.8Wt|n d p f:@ {LsYٺƤIc(Sj0?o мΙS $" WT:TڪI*lx&uz,$cFINiaqL@tHO+!K%*EgVQo'u=߳C6!q~8`ךԇaf iF5O;e$mR BWgb)j olib&?')PkU!ԕE h(ӶdRJ,4؉xMn-ׅtA`|]+rz|w={V<œ^9z~ kyTR {;g VBx9hWjȢ"w^ $dC{j2#YF|7B ̧y:p׈#)I-(3򅘋{_YcA_&,&oܷ7LaYvZ`r!1g4_!0I$Mɷ昩WXVڶc]$7яpdjm. ޽/QUJ8aќ+O.fnSl95lT_dVp`2SD<.%fYh9S$Nql66Q^o@#C0čW2vJs$ J'* cRkQ ̴J9+Hg7#iFQjrbcp\ BȄĽҜy֡g.٦Z0mJoH =Q ęGv+]|D3sƢ!|W]=+f22#L0_bJ1;)NB2;s?!__LZ"avGŚEl?{ŇXm>#5ԭald<lȂ6Yt֕E u}=?5Y'v"M$yo^r2U.HYog&&1p`0зڃq/`Mw|,뉃*_/GDXWMG8R2Nl4X o'/zhWP yEE‡0r=JrK  > ~ChL>%ۉUؤhiS,,_j%|o$^P=rܕKj֟Vwh:l^Vhש1z' EԵ&{( m1AsD@f&YY0w|;6uW>.6 y IS7ɺC"nLlX܇|ٍNoӛ!C .D X`o #R,qoz 52x#EznF"s1c:*{=婤o3}`7Օjiq nm>ɞN ĹC- ^Zw57xi޼>]\Ҍ4"E:9s٢`9aY 0M'n#_c.9aJ[y!,85>ibB߰Nu"QHfEKȧUxZAFl#sjHv^{oplNJ. ӥ߂[~4-Qk(eBBv|ch)q75WXv&jGWNҋԶx}),$Mzxy_-Pq 19󍖯S(=Y} XO)n;R" dZ7-J;AI ki[_ȥrx.Wv5d2|q Bu-U4$j~%ڬ$+wn'ZE>wbqZkbǕQu\%geg&^஖kf}XwO\R;&Ţc/0&H@-DTh}<:co ^}mlF5p8DI4e B722qvA0K P $qN?( Hi޽k>4?1i*l 6jLIJkwzZ6JM\6M>+ ?V}%.pz+Ƹz4>]B̔:%l߅,:ċb+k]jU+90 ߲ TEAilίRե~.7;t}*4dDSg2SR%Z@Ry_c1zYvװs, 1t4X]\6"t5ߑ?x&_Ģ7ZnΛnT/i[ tzo{/,T8 @a}8 8ITu-inS emMuP(ĨGgAp$[Cs]xmHՍ#L.Б65ԓ90<g6/^/ˊd%UM& ڊzދ%=E祟?Hd?cK%⻹7ٻЛ)56FJU)w9 Y5y[SI^a/zA]榃d8kVSIET%- :z)17*9J?yjPmYkqeGy ^8w4ڻxWn6??V9X!]8H ɿa(hȤ&RN"bO'w$%IE*w};e]V,$墔5)Kn)I ֒#Niṋ bpd+)n-eK;2^N֯.E%혬!AU3/UaTleAw-⥥_aEֿpfENҺZґ3RJVR(zVk| @(혥mV:篿[rr-X Uy)ɖƱ,!p2fu.1a{г7aqRMɁMY)-FiBiZÈo~{ǿ/P^WcJ>Fғ m0=1DX[鈒 cТ5)G7j Z;֫Z 簳zmWgty 0 )FLf \ Ia@$XyiAk`V%C9a5soO#T637n[wƔ6[">6 "5;og^ófT7.#.FS nϢ`gY*=LaQ>gO'/OI:itdu|-Z9$cIN!#::!Sc!,?s:q~!NUԺ˨q JKӋX? oiYkQ^lu.~D2lq)Yrq oc|ZYSߣY'_6JἱR.BCP\[3] r(NkSGAN_1kS25b=>KG#[∴*y7~?6@WRs(ȺoE&mK2[Sc?2lDLf^RTfM;Y'|)JhLp2r6[Oܓr~4ԨE ā8z< CdVvC 5&]:&#Ržu!\-RJu$-kf~ʛp+7)! w\p{()ΣW7~ͺA5m+}=Cv?$Ÿtݱ{%>dƠ'eYLJ=&QM-m==c{S^\Es˽zs'E份x7#&Wй땟g(Ǡϛw{-_-ጁ{s_C9jՓHοfbx;-.a;EfBjQB^qjjG~q5XPV!/3GRKJ@ n͜ سxYn,=?$T SNr(PB9]ڜ}C(r:r)3ЇI]rEJ \33uyV|ZZAPH=zV2Lԋ(QM\|Rq6Yĕ$ZT2LoLp8ޮUV".Dl#b]/,1Bb+2]UipYY1jeꮐDK|$gtJO:,U9A)u]butyVVͶYex8>'Ox3 gZ2 7zĄG l͖_^LXtbewGbEI=gVΪҊ1Z\l q*:Se ,K]DCVZV`,o ig*a/Ogw ( & J¿~+i٨ZXd ]vڽ9+uJ;u5 (i8UuHO_|G,ROp7J_*/R^@+se{u,pe|c'2Q;;EZ970އ*`kKߙP6s-+L#20h).q^xwx]5;%LE崉B](}"=-0.KZ Xyh0TFU9{_AdyM\RO(?gC6 ,hÁԽIٗj0"-Pr$0!@֛E sVuxߜ#i ZķHwѤkt{)%8lr~0)Lrx fXBM\JT׉f/@(q>qJk cO-l{hA|6Ѽ6S/mf Dlr~FtEi t*@y4fNۅK']v*5uVJʧH~\;Tr{@6ǝE>ݼ8\*y04x^ 3CTr+fy.DIhʴF5mZTYcoыoq ^%!mׄ!M650и)r[$u*h]T $169 L(¦m4QV 7v*%dU̶T_o0-Hp8;q>G~[TH !>7Bi㍨?_Ȼ+nCedM46=Дb:zl\j,nVN $p@HcI"Mx=|B$>n%m@1nPz-]i>: 1>>ZLG>5DWhIʶ9/iָ (AݔU ,/]޷C('8L굱dܜIvN+Ks*rJw[Q*dͧJzlMq^>kA`'r5xN{5vs;*?FivSRzEKӰOQ+f"M?]4QD\SNV #Ƒn6+̶0Qf B:?[DdVomjb`}C1]O$3L6~@kBS>?>6;:h>/R3CČÄ́% ytHE֤nHo*1s3>9)Ne:]bD\PfuG"K? ؗ)(ELp2__\4(SL?e:xVˏEaF/@3qxUbx\ Ykkfjw]'cBPg5r<1u?ɯ&F%*f9B. W,u+ "xEJ9C }7զ+Z$\QZRDV3-!L1FVlqR*B:[M ~a,oJ G6Ny I5Hq0DvbŢ(SW=$+2TKdzIC;oAy~e&k}S;dFq($ i 8wyA:.SD4)QW2U,#[>n67N~k$r!(w5yM%)xG.]"^lw:8]vёhKȈJ5Ʊ70^c)L\cVQ /l"E7%N<* ײH 9+šE!6'[!j#H0վ6.EG8A*80n ň$I,j"uY&Xb+v@̯kTĊ Ꭷ齶=" QUϝ,LJZ'0q V=Xbm|>hgnX 6*xo/]ϫ >HIf.8#\#y#販:fuy Ss@T$\,Ij\/7?éSD2؞*V ĩ<}'L&5b.Yp|<1)^D}%LaΖl+M-6^Qp`;xi]s3fye ͣ'7!H:uf4;m̜bb ;,_9?U\^n-b^<ƀ7`CX^OYq1{]_='sl(V(Y_rGj/xmVKoE$D=kv'8E+!"3{]oh9 qB5'8HHr#)Tw.pcjxpXA}ҥNEFT@Yh fXPh {W֯BSyM`jKäs\|>}F-KREr 9|BQ`P%+ i#\ij*ls:!HLeN Q]jha*.~YTP椚NeAHjX6Æ?V=}0C(ťT>tfJ6#$'Y>B'Q X*ЋVڅ[Gß>*X.-.nDZ>H=釧*ޟwFX+Le^cNA# YG=&fGɼa䭆 /`"%XrG /gp0msdC)N*]Oo˃ 8^ȡm$5q8x ]D.q*6!~0֦ReCjИ;yu~l_kuoޚ׀%Gn#qø-j߭dg%7g%UX1)4tKUH`2 MX4@3syTڸsze $BĵcM]D{qx \=)OghA#0h=s+{bX4qHS6_>:8| K2ZU d}%ӓ<ӐQ~2 [vcބ|=vji Kd k 21]ʝuH<_[J~/AL*&EjD 6 '{F` ^q\]^z֖m|nz}x=n >P>]AGc~\nw(zP[3!h?{cYRw2F6.۰R.l`tJ+8huDw>2]d#TD1` ~bšAtw_>A{tܯ3g"EnWffk^戀Of^xv t"D<5Tg?AxZv-=6+N{)tuqSvE9=NqArYE=y>C(y~3.R8`0|sfrp)/D7783͍J&{k^mٺC&.MΣodz\Z509Z[[qL=8 bbsg_)WDlMornI-E47˔ݺf+_[ʱ}aR?|ġrk"ض(,haD' ㏂ ņ79ITmA.tʸfm&CKkW$dc%yEO{,tb̑LgaWD#xu,1|.,\TJ"6mެW}N~mÛN]:uD>?|Dk:rr _:nڊ s,Haw~k :2ϑe h-<;}{f6wQRSH^sn*HMT?1AL-Yi ᡰ[=(<[V^BoI*3ZUvBA $t2V08W ^98.X:X:)`,\1AzT[:#RBĢB!rګPqSEޠ$!gh=-8LtK'<*Oj*y wIXJp@"1H s9Pk=lAwVm!*źAD/2^,Z.TncXд*Sь¬Uھ&' tvgr_SGi:+y\#p ~[NS#.q_aOu [V|6bLnArb> )d 6.1d8ng H=D6 ^jHEcQ&ZYngl7 {kKq/;TyD)W(o("#5ll&Hg* }7B$ j @ˡOȹ-[[X'NS^QG T!1YCq>W5R45:N\5-,~Rɭ<ҷ.~ Cٝ9G]%B|mӪ2X'+ŶOH Opؐ幜'NAvҬo/p{w{Z\~۾OkK"AbJ~uR#46nXДkKdJ0¢L[& 87@k* , tFgm=nQ24cxxw4\[軮zU[>_bTa.j;۪+^:"*m'J٢ e\NRՀPK%ܸz3Zbsu_B?;T%a(4lEĢ#!/6SbkZd4\G kbi?8{T:bq#~Jh{iӜg35: :GG}f15jXzyBj73[+'WINqq_^1o66xVQo6~~4֧̀tMh;IEhHJRv4~~~ɾ#ilj,Dw}{Q]JRfzc=h춺WgxX*eeNoLNvYvrB+zUґrW޼pz2Zq_IV:i2/H˵f-:lTmVRS3-ިsy++k0 WǛ'$ת%o۲?-~K +Ii^tB 3Q';MOګJxYǔ^t ll+{~rcnTʥrHLC^+ǹ'ŐW[Kk.8SĽ C^U\h;ΰ gc{@#SNI9PX-PixNuTEԨ+MHL%ր\~lo[s.S0$PimE+N)Vh'*>,6V PW.{̋ eFZ⑋Љ@ Ds%l=02kqb?>h6>D?жOC:uU|7xyoP68F/G"O+M'?yI'>lꉎt69t'8+`5= FxHCyv?VV2bW~̡~(t!$Y1z_ f7G]SIbA䕼{T)#*UD)*C$i64(? fӝlAC&Ҫ. KMH#*_T4?@GgV0 (񩣛G :qˌI0ʋW )_5銛=68 8 ʤq\aob7#eWvz)e_nYqiVI0nrV4̎fZXO4/9aO7b`~ y ꋫI> _кDa`u&)I2GI< 7q{e+f;=`e*NR64r3N YÀ|M#z!++9!ȝD;s7vXlMw8 3a>mZ"m-ylOSvS$ bϞ{G YCj2k^ $]g9y#\8vV0K353%i5y0uAjN8xq0Q&% 2EIWK8?[Zɕux}^xٲM'ղ+⟵.9¹pKW HA!mbxZ¬[娲qN<}fAsɇF wEy%$hZ 2b?٨u-0?:#:5^U@: qS Kh2](-6rpA(G''DV7kdoj!zK*cؽ2ddd@{xqvdF͋0sS,n招ȸ>S:ٖM,cľ&e%zt>YD;e-`l{{FxYn8m?+Sb24n8菢(hv4EHq${%%vrJ\˩Uʪf,$26+T4W8NlJ̶ҨDW*x@Ñ͖QI]ev~kKT*P.XkkĀYbe^)a+9lZIfJ,ReJЅWXBj"6/9Ź"x=eP7f@ w~q=DcTiF%.Js* .z&u(foflG/ߪTU{p@{eIl'{rZoyaHadF{PPt>pa 9Ngl_f]U̻̅hBٰ6K(JLR2{,|a;@iU,|*F GrC48U<qq9%9yJ˲†#~5aD|ďX|2%s$igVVabݭn#or?޿FsG}o00BƮxzp؛P){OxÈG'tБ uAZ; u5a`Gp@M`r/S'(%z'iw&Umò܊[ ;̱H}Lg K6&sh .ń*-󀭍_̦#$sep΍f\2S K8BS"H3G>weEhmKx(h\5kď:N=IgG˿[9+sElfejdɽ˟ݞJXA[3ŕUUQ+Jg=$N 6bŮB*3g*.Tj2I;P!.NQ% #9O͔uV}gFT29VJ'DV3.M ނpGg;'etf'S^䑼V;QsßɬPh=wn N״Ʋ|ܹ׬#m{ei X/<8eZi7UZpU=oO?NA"| r^,^p^kW&rxO@-T3pyJ5bF i;:ytԡ~!Hv!A>V:铕jXCa.jTk9Z$R OFhlB-H 4#d~;7(lAV 2SLq 0b~IwjDq g}˓Z.ɵQp.ަ‹?A]! b[ ې3mFE+'\E;«L{wB@]_QG颀E܅Q`5|훉 dDRQK,s<crtՕ#Umn[{7󩠶<~/3{=[ᇏ iJXc_Ȋ-}>e?Bl ^Y;ՂQ7#QdT|P|> A]ܻ0s:P *n1|R[@>,`2-ZfupF/zW:RfizɄ=zl w4ɣ˃wÃ.l[y:!&Mb a׺(hUCK1&T Ey'\{ss ܱ̅p VWp C3=/mb$ ʼnX~1Y:H2o_Au8t,B-P'{c;nkJ% o5*GkH~O~/Yv*0*3M{IYԽ,ŒdovLJgG@'JjesE }l*7o v]=ƅlrC1ԟ RǓe dղ;YvsS@xZ#X_ws{MH2W\B]ܱйjdM:U=?Bf*2M&vE`q$B*B3s0TZ )qg`RBddp?qs6m˩{&.\\ q^s0JB?LKJ0uxX?ƒ2]=ZcGZ"fT!`JܻdqjQȯ1{\tY̊+dZ\u8yg`-J`!%C.k Rpyy1^ߠvcOl|LjMI".|=aܜٟk]dܲζlN5^#0.}XX$QO;`4!8gVVEԻ!}g*eÝ(({ZdEA HУ<G?Ctw]8HAp}T}"0!Dˡ(e,M^;D8j|"+/D=؋(v؀z.[`~hbݫTxf'y,d#U!gP~yɴIa5IÔJ\t7<+IE蟈&.Q@=UFsA.4/\xaNhgPVck|hp-o`-n~zC$~0ѕvǢ sV#7!cx'n eVU,<J!T,Vr(pc0Yn-N-1]d{O;Q6PwΏIIͩ.ƫ u%WU >X ߡOp}xe>%5t]Y~UC.l۩w G8й}ȇ?;އas:Wbr_Og3otՊ۰w͵{K[_ $NHfB9qLh%ݓYl& %>}"FENxmV6~%P/eZ NLtnn@zJr9ngId; %oWiR\HZZJ4UMk,MfRLɟj,ÅnYLsd)l l҃ũkza ;/~ h³V8O_X4^WQr\Ote 2pZ^I['m68[#tO 򘵿) ]H-@j9띪HJhm<պ%pkΗir#};|;!CY 5S}NCZiƴhZTDVF!5[ }!9-}Ctv !uRLs}2ßH\LtW5ɭ>/k+EգCX[u\QWH+1S捠uW䑓J[L[mMW` դe-5.[t6s  ^&Hkn_Mk@HRe ~>%+yDQ4֗|Gѳ1*yQ.D{ͽE L7Ċx.|!ۈz->Ř_$`Z : 7&W0b;f2Y?30(<<4u?^@FQfb}?q/h])K%IG`YȾC߈W3V@v: (-{,˳]1iqѐA ӎ6:q"$[<wrj4τ6֙8X`0ږ3{1q C%6_qYGQP&Hq`"@r4^ooOYէup?@I$Y.>:CXk5(tg;P<m3SeŒ-8KмP bp@ꔾ*`V5`$:BH$Ff52>,Δ4'h 7Xe+.ǫkGO ̔skXC/ힼ0z(4zƘ%CCEJ5 ԫƄw^ćjiYiK%usOsx]2~PJ*'o>UzSϏcfZC0~S\+HKͬ,J/\QчkĹT o m??xbYyME.%r-64+͍O +6?(u "ń`CP0(lВ}aSt/آUFvr:;:/x,Pi]i%PXHul\WpwJ lstα$sKY 2pxw2bơ2-)gJuiH9Pפ@-n<; 8g,jxZТj;r>ƺe |ԜKSnť3z50TJax;oV|>3zؑnDq>###U.Blmvhd asúZ (BW!-fLyx'100644 cloudsql.gok,@ .TTkFx[{s[g tt&eRDΌOD 0JbCtwÃXL4Ew{#<,>,e,+aoY!+Ǣ(IZ\@_o0`QRI(MX'Q.\qBd3|DY'% y/dyz"J&}I"☧x"ML`*f\DY.>EQȫLY&%,6g>4b{s]Qʩf<<.#-]HLb^4y^4fi tK[d\g9uS/T$f(`، 0$F32pXe!}Y4ipsC[4/S1R.ϲ1'M.-ovߜqe Uz/~i؎+X ufM/uғ4?ʞ]qaN}8it=ŮJ 0V1c[MF˙}ޑ]ڑb.pDN0Xrq:MG`m7d"p5$zl$|&um) &3ʦC}=azP^vڝ㐤͎C*bi{Sm;vMv/;>rຳitk7k0,X~uX=F6ܐ; w3i_.y?+=4Kigt;di)>vhON|Ϥ5"702JhfC%9 'ZӐdcSpD㪕y8Rѐ=xnht? wƳw2q&iq+}#KRjt0{yJ[|#@$T z/7z;{PPҴyz(J}d9ػ8h9{htFo84** |v8Va]dcjKޖDC)B>}@2(YdhHA `0?:ajV3F ˨T$8,2ęd`Mc|%8إHCe~*dHi,lJI1# 9)̬HB 0BH6T1v՝*%i!%٩斬-EݫGJ_IqQwTܴ0p㻞2-!fjP i1|Z ߀ l=E|aG-arJGm3`٪eV;@#p^Bg5WطtKmr>sș?i=p*ؔl{ĺҏ3HNިX-mܖ&Sb"h+h C9ؚ4'OgAn&u|f=!&qwG9asfi^drnNcFڇ;%'CRX1|v!J #`l{Ud:i!!tpX։7Z#dCd W\jNj;7r9"Sy^[.) pӐU =/SQ_ 0(qC[7qxNǕcz%2#*%%f8Ř 'J$#`+5o^Ȫ$lV =m#B-g39;G :p)5I${ALM\tSn~wplo*WKEcثOYeJ/ȧ;T"}CQ=#Z(4A2~‘O#q:*(^M `یSqxWlXR鳎&UYg;%6Fqcx9wٱѝu y9} @"e܁=Mg;~RL{)syطg^x0 gvBD L$+2ZFQmTIچhk}a5zSt TZEjTZ{-mVuNOBUnR-%>զ:-1-+#4a+_VAjeRK-e8-5ZۊZFhYUI^LĆ퐾#P'u $iP cr߉"CwK]V%kV. j4nneXcR(Wߏ` Zu@NȪCUwt+8&nym/^vњӋ׆!Q]1K#WaU7Մav/t.GUUD9onή{Ե|{y|cw;(بYmrqk'Zujw hsTy>E' 4ZI_(a'SW:2mÿZʚ3V(t#4b<|T7N(+i-1r\eJZ T/؏d d.~}9u1fBW +_xnj\W~e؜Y,&xrI3莏LuB3ST]Uby&%w$C,7ݸAv ȕY}i*З~L'(Je:UQߐu}JKtbk0 BD 1qM@btZ?.8az vHEpV\= 400 { msg := "Commerce API error" var envelope struct { Message string `json:"message"` } if json.Unmarshal(raw, &envelope) == nil && envelope.Message != "" { msg = envelope.Message } return &Error{Status: resp.StatusCode, Message: msg} } if out != nil && len(raw) > 0 { if err := json.Unmarshal(raw, out); err != nil { return fmt.Errorf("commerce: decode response: %w", err) } } return nil } // GetOrCreateCustomer resolves a customer by the IAM user's email, creating one // when absent. The IAM id is persisted in customer metadata so the link is // stable across email changes. func (c *HTTPClient) GetOrCreateCustomer(ctx context.Context, u User) (*Customer, error) { if u.Email == "" { return nil, fmt.Errorf("commerce: GetOrCreateCustomer: email is required") } // Look up by email first. q := url.Values{"email": {u.Email}} var found struct { Data []Customer `json:"data"` } // A 404 here means "no such customer" — not a hard error. err := c.do(ctx, http.MethodGet, "/v1/user?"+q.Encode(), nil, &found) if err == nil && len(found.Data) > 0 { return &found.Data[0], nil } if cerr, ok := err.(*Error); ok && cerr.Status != http.StatusNotFound { return nil, err } org := u.Org if org == "" { org = "hanzo" } payload := map[string]any{ "email": u.Email, "name": u.Name, "org": org, "metadata": map[string]string{ "iam_id": u.ID, "source": "bootnode", }, } var created Customer if err := c.do(ctx, http.MethodPost, "/v1/user", payload, &created); err != nil { return nil, err } return &created, nil } // GetCustomer fetches a customer by id. func (c *HTTPClient) GetCustomer(ctx context.Context, customerID string) (*Customer, error) { if customerID == "" { return nil, fmt.Errorf("commerce: GetCustomer: customerID is required") } var cust Customer if err := c.do(ctx, http.MethodGet, "/v1/user/"+url.PathEscape(customerID), nil, &cust); err != nil { return nil, err } return &cust, nil } // CreateSubscription subscribes a customer to a tier. func (c *HTTPClient) CreateSubscription(ctx context.Context, customerID, tier string) (*Subscription, error) { if customerID == "" || tier == "" { return nil, fmt.Errorf("commerce: CreateSubscription: customerID and tier are required") } payload := map[string]any{"customerId": customerID, "tier": tier} var sub Subscription if err := c.do(ctx, http.MethodPost, "/v1/subscribe", payload, &sub); err != nil { return nil, err } return &sub, nil } // GetSubscription fetches a subscription by id. func (c *HTTPClient) GetSubscription(ctx context.Context, subscriptionID string) (*Subscription, error) { if subscriptionID == "" { return nil, fmt.Errorf("commerce: GetSubscription: subscriptionID is required") } var sub Subscription if err := c.do(ctx, http.MethodGet, "/v1/subscribe/"+url.PathEscape(subscriptionID), nil, &sub); err != nil { return nil, err } return &sub, nil } // CancelSubscription cancels a subscription. func (c *HTTPClient) CancelSubscription(ctx context.Context, subscriptionID string, immediate bool) error { if subscriptionID == "" { return fmt.Errorf("commerce: CancelSubscription: subscriptionID is required") } q := url.Values{} if immediate { q.Set("immediate", "true") } path := "/v1/subscribe/" + url.PathEscape(subscriptionID) if enc := q.Encode(); enc != "" { path += "?" + enc } return c.do(ctx, http.MethodDelete, path, nil, nil) } // ReportUsage records metered usage against a subscription. idempotencyKey // dedupes retries on the Commerce side. func (c *HTTPClient) ReportUsage(ctx context.Context, subscriptionID string, quantity int64, idempotencyKey string) error { if subscriptionID == "" { return fmt.Errorf("commerce: ReportUsage: subscriptionID is required") } payload := map[string]any{ "quantity": quantity, "idempotencyKey": idempotencyKey, "timestamp": time.Now().UTC().Format(time.RFC3339), } return c.do(ctx, http.MethodPost, "/v1/subscribe/"+url.PathEscape(subscriptionID)+"/usage", payload, nil) } // ListInvoices returns a customer's invoices. func (c *HTTPClient) ListInvoices(ctx context.Context, customerID string) ([]Invoice, error) { if customerID == "" { return nil, fmt.Errorf("commerce: ListInvoices: customerID is required") } var out struct { Data []Invoice `json:"data"` } if err := c.do(ctx, http.MethodGet, "/v1/user/"+url.PathEscape(customerID)+"/orders", nil, &out); err != nil { return nil, err } return out.Data, nil } p߲xMpackage commerce import ( "context" "encoding/json" "net/http" "net/http/httptest" "testing" ) func TestDisabledClientIsNoOp(t *testing.T) { c := New(Config{}) // no API key if c.Enabled() { t.Fatal("client with no API key must be disabled") } err := c.ReportUsage(context.Background(), "sub_1", 10, "idem") cerr, ok := err.(*Error) if !ok { t.Fatalf("want *Error, got %T: %v", err, err) } if cerr.Status != http.StatusServiceUnavailable { t.Fatalf("disabled client must return 503, got %d", cerr.Status) } } func TestGetOrCreateCustomer_CreatesWhenAbsent(t *testing.T) { var sawLookup, sawCreate bool srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.Header.Get("Authorization") != "Bearer test-key" { t.Errorf("missing/incorrect auth header: %q", r.Header.Get("Authorization")) } if r.Header.Get("X-Source") != "bootnode" { t.Errorf("missing X-Source header") } switch { case r.Method == http.MethodGet && r.URL.Path == "/v1/user": sawLookup = true // empty data => not found _ = json.NewEncoder(w).Encode(map[string]any{"data": []any{}}) case r.Method == http.MethodPost && r.URL.Path == "/v1/user": sawCreate = true var body map[string]any _ = json.NewDecoder(r.Body).Decode(&body) meta, _ := body["metadata"].(map[string]any) if meta["iam_id"] != "iam-123" { t.Errorf("iam_id not propagated to customer metadata: %v", meta) } _ = json.NewEncoder(w).Encode(Customer{ID: "cust_1", Email: "z@hanzo.ai", Name: "Z", Org: "hanzo"}) default: t.Errorf("unexpected request %s %s", r.Method, r.URL.Path) w.WriteHeader(http.StatusInternalServerError) } })) defer srv.Close() c := New(Config{BaseURL: srv.URL, APIKey: "test-key"}) cust, err := c.GetOrCreateCustomer(context.Background(), User{ID: "iam-123", Email: "z@hanzo.ai", Name: "Z", Org: "hanzo"}) if err != nil { t.Fatalf("GetOrCreateCustomer: %v", err) } if cust.ID != "cust_1" { t.Fatalf("want customer cust_1, got %q", cust.ID) } if !sawLookup || !sawCreate { t.Fatalf("expected lookup then create; lookup=%v create=%v", sawLookup, sawCreate) } } func TestGetOrCreateCustomer_ReturnsExisting(t *testing.T) { srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.Method == http.MethodPost { t.Errorf("must not POST when customer already exists") } _ = json.NewEncoder(w).Encode(map[string]any{ "data": []Customer{{ID: "cust_existing", Email: "a@b.c"}}, }) })) defer srv.Close() c := New(Config{BaseURL: srv.URL, APIKey: "k"}) cust, err := c.GetOrCreateCustomer(context.Background(), User{ID: "x", Email: "a@b.c"}) if err != nil { t.Fatalf("GetOrCreateCustomer: %v", err) } if cust.ID != "cust_existing" { t.Fatalf("want cust_existing, got %q", cust.ID) } } func TestReportUsage_PropagatesError(t *testing.T) { srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { w.WriteHeader(http.StatusPaymentRequired) _ = json.NewEncoder(w).Encode(map[string]string{"message": "card declined"}) })) defer srv.Close() c := New(Config{BaseURL: srv.URL, APIKey: "k"}) err := c.ReportUsage(context.Background(), "sub_1", 5, "idem-1") cerr, ok := err.(*Error) if !ok { t.Fatalf("want *Error, got %T", err) } if cerr.Status != http.StatusPaymentRequired || cerr.Message != "card declined" { t.Fatalf("error not propagated: %+v", cerr) } } func TestCancelSubscriptionImmediate(t *testing.T) { srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.Method != http.MethodDelete { t.Errorf("cancel must use DELETE, got %s", r.Method) } if r.URL.Query().Get("immediate") != "true" { t.Errorf("immediate flag not set") } w.WriteHeader(http.StatusOK) })) defer srv.Close() c := New(Config{BaseURL: srv.URL, APIKey: "k"}) if err := c.CancelSubscription(context.Background(), "sub_9", true); err != nil { t.Fatalf("CancelSubscription: %v", err) } } ٯx340031QHJK-J-.))M+(a63a'|?mfN4kEXG6~9Jnz]RAV_Z\@tі+O|sxR6Tar~NJqIbQ \=K|;m_&@YQR to&ٰk Eӟn(+I-Kah&Y2jzlZ_T o_%{DT9IYo.ˁ*MMJ3&w=]'E*f''^',S}%:xtU?l}ZTѕטxV)=== default tags === --- TestMemory (count=1) --- === RUN TestMemory_Native MEMORY native iters=1000 total_alloc_delta=1449592 num_gc_delta=0 bytes_per_invoke=1449.6 --- PASS: TestMemory_Native (0.00s) === RUN TestMemory_Goja MEMORY goja iters=1000 total_alloc_delta=3432872 num_gc_delta=1 bytes_per_invoke=3432.9 --- PASS: TestMemory_Goja (0.01s) === RUN TestMemory_Wazero_AS MEMORY wazero-as iters=1000 total_alloc_delta=44425304 num_gc_delta=13 bytes_per_invoke=44425.3 --- PASS: TestMemory_Wazero_AS (0.02s) === RUN TestMemory_Wazero_Javy memory_test.go:91: wazero-javy: load: wasmvm: read /Users/z/work/hanzo/base/plugins/extbench/fixtures/wazero-javy/validate.wasm: open /Users/z/work/hanzo/base/plugins/extbench/fixtures/wazero-javy/validate.wasm: no such file or directory --- SKIP: TestMemory_Wazero_Javy (0.00s) === RUN TestMemory_V8go memory_test.go:96: v8go not built (use -tags v8vm) --- SKIP: TestMemory_V8go (0.00s) PASS ok github.com/hanzoai/base/plugins/extbench 0.366s ? github.com/hanzoai/base/plugins/extbench/fixtures/native-go [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/all [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/goja [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/native [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/v8 [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/wazero [no test files] --- Benchmarks (count=3, benchtime=2s) --- goos: darwin goarch: arm64 pkg: github.com/hanzoai/base/plugins/extbench cpu: Apple M1 Max BenchmarkNative_Serial-10 2038605 1197 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Serial-10 2013564 1197 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Serial-10 1953955 1197 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Parallel-10 3475885 693.7 ns/op 1449 B/op 20 allocs/op BenchmarkNative_Parallel-10 3519000 680.9 ns/op 1449 B/op 20 allocs/op BenchmarkNative_Parallel-10 3516549 724.8 ns/op 1448 B/op 20 allocs/op BenchmarkGoja_Serial-10 486218 4593 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Serial-10 490258 4495 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Serial-10 535057 4513 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Parallel-10 1434543 1640 ns/op 3631 B/op 70 allocs/op BenchmarkGoja_Parallel-10 1445884 1739 ns/op 3600 B/op 70 allocs/op BenchmarkGoja_Parallel-10 1357254 1652 ns/op 3620 B/op 70 allocs/op BenchmarkWazero_AS_Serial-10 225584 10130 ns/op 45283 B/op 17 allocs/op BenchmarkWazero_AS_Serial-10 216746 9847 ns/op 45692 B/op 17 allocs/op BenchmarkWazero_AS_Serial-10 218665 9956 ns/op 45600 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 734875 3139 ns/op 41273 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 774141 3271 ns/op 40968 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 730594 3495 ns/op 41308 B/op 17 allocs/op BenchmarkColdstart_Native-10 144361 17061 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Native-10 151502 16847 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Native-10 149388 16183 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Goja-10 29871 79833 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Goja-10 30236 76134 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Goja-10 30897 78282 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Wazero_AS-10 603 3930185 ns/op 1541613 B/op 2999 allocs/op BenchmarkColdstart_Wazero_AS-10 625 3936863 ns/op 1541624 B/op 2999 allocs/op BenchmarkColdstart_Wazero_AS-10 606 3970491 ns/op 1541619 B/op 2999 allocs/op PASS ok github.com/hanzoai/base/plugins/extbench 85.126s ? github.com/hanzoai/base/plugins/extbench/fixtures/native-go [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/all [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/goja [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/native [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/v8 [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/wazero [no test files] === with v8vm === --- TestMemory (count=1) --- === RUN TestMemory_Native MEMORY native iters=1000 total_alloc_delta=1449416 num_gc_delta=0 bytes_per_invoke=1449.4 --- PASS: TestMemory_Native (0.00s) === RUN TestMemory_Goja MEMORY goja iters=1000 total_alloc_delta=3440080 num_gc_delta=1 bytes_per_invoke=3440.1 --- PASS: TestMemory_Goja (0.01s) === RUN TestMemory_Wazero_AS MEMORY wazero-as iters=1000 total_alloc_delta=44419456 num_gc_delta=13 bytes_per_invoke=44419.5 --- PASS: TestMemory_Wazero_AS (0.02s) === RUN TestMemory_Wazero_Javy memory_test.go:91: wazero-javy: load: wasmvm: read /Users/z/work/hanzo/base/plugins/extbench/fixtures/wazero-javy/validate.wasm: open /Users/z/work/hanzo/base/plugins/extbench/fixtures/wazero-javy/validate.wasm: no such file or directory --- SKIP: TestMemory_Wazero_Javy (0.00s) === RUN TestMemory_V8go MEMORY v8go iters=1000 total_alloc_delta=672560 num_gc_delta=0 bytes_per_invoke=672.6 --- PASS: TestMemory_V8go (0.02s) PASS ok github.com/hanzoai/base/plugins/extbench 0.721s ? github.com/hanzoai/base/plugins/extbench/fixtures/native-go [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/all [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/goja [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/native [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/v8 [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/wazero [no test files] --- Benchmarks (count=3, benchtime=2s) --- goos: darwin goarch: arm64 pkg: github.com/hanzoai/base/plugins/extbench cpu: Apple M1 Max BenchmarkNative_Serial-10 1992626 1210 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Serial-10 1998685 1199 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Serial-10 1984416 1204 ns/op 1448 B/op 20 allocs/op BenchmarkNative_Parallel-10 3445639 697.0 ns/op 1449 B/op 20 allocs/op BenchmarkNative_Parallel-10 3748722 730.6 ns/op 1449 B/op 20 allocs/op BenchmarkNative_Parallel-10 3325345 748.0 ns/op 1448 B/op 20 allocs/op BenchmarkGoja_Serial-10 519702 4596 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Serial-10 523059 4560 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Serial-10 523141 4508 ns/op 3330 B/op 67 allocs/op BenchmarkGoja_Parallel-10 1455342 1851 ns/op 3554 B/op 69 allocs/op BenchmarkGoja_Parallel-10 1343576 1791 ns/op 3583 B/op 69 allocs/op BenchmarkGoja_Parallel-10 1259041 1796 ns/op 3559 B/op 69 allocs/op BenchmarkWazero_AS_Serial-10 212671 9823 ns/op 40701 B/op 17 allocs/op BenchmarkWazero_AS_Serial-10 210411 9732 ns/op 40759 B/op 17 allocs/op BenchmarkWazero_AS_Serial-10 217436 10038 ns/op 45659 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 695667 3153 ns/op 41612 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 707589 3294 ns/op 41505 B/op 17 allocs/op BenchmarkWazero_AS_Parallel-10 742496 3161 ns/op 41211 B/op 17 allocs/op BenchmarkV8go_Serial-10 213724 11081 ns/op 672 B/op 17 allocs/op BenchmarkV8go_Serial-10 217880 11895 ns/op 672 B/op 17 allocs/op BenchmarkV8go_Serial-10 194964 12062 ns/op 672 B/op 17 allocs/op BenchmarkV8go_Parallel-10 177992 12944 ns/op 672 B/op 17 allocs/op BenchmarkV8go_Parallel-10 184676 12667 ns/op 672 B/op 17 allocs/op BenchmarkV8go_Parallel-10 190274 12210 ns/op 672 B/op 17 allocs/op BenchmarkColdstart_Native-10 151369 16024 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Native-10 149998 16572 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Native-10 141246 17259 ns/op 1424 B/op 17 allocs/op BenchmarkColdstart_Goja-10 29934 82369 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Goja-10 28918 79871 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Goja-10 30312 79204 ns/op 47400 B/op 569 allocs/op BenchmarkColdstart_Wazero_AS-10 592 4177821 ns/op 1541591 B/op 2999 allocs/op BenchmarkColdstart_Wazero_AS-10 582 4204478 ns/op 1541612 B/op 2999 allocs/op BenchmarkColdstart_Wazero_AS-10 579 4100112 ns/op 1541602 B/op 2999 allocs/op BenchmarkColdstart_V8go-10 2829 906033 ns/op 3968 B/op 32 allocs/op BenchmarkColdstart_V8go-10 3086 913569 ns/op 3968 B/op 32 allocs/op BenchmarkColdstart_V8go-10 2740 871649 ns/op 3968 B/op 32 allocs/op PASS ok github.com/hanzoai/base/plugins/extbench 109.275s ? github.com/hanzoai/base/plugins/extbench/fixtures/native-go [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/all [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/goja [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/native [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/v8 [no test files] ? github.com/hanzoai/base/plugins/extbench/internal/sizetest/wazero [no test files] dxUKLdE C  򑡩U$Ɛ D&fݏ&j\jkµ4YŬ\WڥqcL~oU[9u ?K :TQC77 µ=AGg:z{2JgcBTqhf0/(&4qf8ԗG{#x{] H%2#d"@')pv(Mu=L ̤{RhbL a 6SIx88$dq=kEDp:eI4Q1Az/7W*IbJr)Sga?:^I18G!ߑ .c8w ) qb td q(f .)J%qJ A1TBT+P˜ X2BbДeZ: S.SZ֙VpOet|6…fSD0ρLwwP&RpؕpAW IZv]͐aneH+T 42DbƆ"hBIB_hleIȼ12;~=Z- <"_kǁnr%cgѻ3ǓHMdaL{p8D帼ww/^;bQ8aT|(78L=>kեLKgL&vrkdKq8[ć^ս㒏^~īt<>9\*?Xlʻ;뽎r]($WW@e&w%H[L7.@oC(.!lf;1<%}͞[eiEQδԅ5 clU:4luxSD" _":d>xۺ?u Fy0}.1D}>$4V-9i۷_NIsi$ %ݲ]R&FOF>8?\T=29uRaԕIWUBdPg;|n5t9a43' R%28nS`=$Økv~?;X9{s3)5qĨ˄NknxZ9y !YRfH( m "3ˏՊq't\k;! IkWB'  :a_ߏsvʼnʉT> ; ?UbJ<[i ;Ͻ)'DFm)qfif'2#UKͤ:h"QwBT OS!Isϭhbp߸T3O%uM^N7{}A)6͞sIteT'6{hym;Q6)]bhfě$\!C9ɳSvl_e`TK܋̌!7VÎF$XSq6p(Bj街Q|F5͡=^4qi-v:StAt Zy]].f,s߭nΤQ\GVMʺ*oFfg"r)3˨v6މ]V%lB.#" +P56VW-ժ7HL|ș(D9Bp*&J:VgKMTQŋW 4E6V=m-#:)g &E , He?֩x;l =.i$7vTLJ')h$z,v9}H! 2A#ymb$ܘS{T6=b{Ɓ[x.-,.e/[ ]f f]c\P$I1.{[0VN3y~Ƚn=6(йq?>kp`bD(ᮌH͇i,I1[z%Ȝb6,hPXԆl ";ԹbMTjd][6AD~^ٵgeG -ûy΅} mTU+XoIj'9I}{{Q`)Bz<||PhFEbM GUצ]n^oގXnZBPJMnh6G!;XNg2D[A޸a[ y#gn޺4q?x{?ހ&a%hwZΏt_Za~Mtxkeh`xϨNj0o )4za6MO6L]>)ŐaSMf^ cQx,S -;Ѝ%Ze3-f4Ci£-ea=joKar g0(@zӉo &wفߡX jOu5h}UT>ź+$jUV}@GJf,+aBGP N O5w󂾲T̒{$|9O"b1ft<5؞\[U8+[RkM I0#v` oKoIMo=/t[7S>Y_tN4uw'c7&+CR|ٍ}'Mujl)i*dG;{%_c&xVn8}b* } C HѠ$JbMIU%;CNܴhjfΜ3eUWqA VQsuBUaJ\7oU,_+t1r Ja}3DzYfi,˗>QLPٞqO1GDpGxx"sOAmp;n{{}6{1XoK*H*Əŭ;e΄/qq !tq7z}v3k\P[ aO0p;랉d0,fa]\ gB歏-?;?p_g=*I{Qأ_~)CYcq=L&KgC)ïRHo~"=Lnvl lx31DݬbxugV%u\z{WC!"/$,U7=a"".xdb^~DMAeYnA%/'+1i7DEqIbQ6PfT$Ž!?AIݾU ,Aα$h^&vwwUE 7˨p:뛰erұҟ"(j *K2t3g욡PƻQ"表J,d8#fIJo7=sέk uQT0;7es~y JSON in, // stdout -> JSON out (the host writes the payload to fd 0 and reads the // result from fd 1). That's why this file doesn't export a `validate` // symbol the way the goja/v8 fixtures do — the entire script *is* the // invocation. // // Shared semantics (canonical: goja-js/validate.js): // in: {"email":"Foo@Example.COM ","age":25} // ok: {"ok":true,"email":"foo@example.com","age":25} // err: {"ok":false,"error":"input must be an object"} // err: {"ok":false,"error":"email required"} // err: {"ok":false,"error":"age out of range"} // err: {"ok":false,"error":"email shape"} // err: {"ok":false,"error":"email domain"} function validate(input) { if (input === null || typeof input !== "object") { return { ok: false, error: "input must be an object" }; } const email = input.email; const age = input.age; if (typeof email !== "string" || email.length === 0) { return { ok: false, error: "email required" }; } if (typeof age !== "number" || age < 0 || age > 150) { return { ok: false, error: "age out of range" }; } const normalized = email.trim().toLowerCase(); const at = normalized.indexOf("@"); if (at <= 0 || at === normalized.length - 1) { return { ok: false, error: "email shape" }; } const domain = normalized.substring(at + 1); if (domain.indexOf(".") < 0) { return { ok: false, error: "email domain" }; } return { ok: true, email: normalized, age }; } // Javy stdio bridge. const Javy = globalThis.Javy; const input = JSON.parse(Javy.IO.readSync(0)); Javy.IO.writeSync(1, new TextEncoder().encode(JSON.stringify(validate(input)))); j8wox^ // validate(payload) — normalize email + check shape. // Payload shape: { email: string, age: number } // Result shape: { ok: bool, email?: string, age?: number, error?: string } // // Goja exposes this as globalThis.validate after the script runs once.var email = input.email; varvar,S// Basic shape check: one '@' with non-empty local + domain containing a dot. varvar~ : age }; } 3|x340031QK,L/Jexb?3xUf g~*!DUjEIj^qf~^Vq~u/'ݽSZPy%ez M#^.SpCNm0yx+-(¼J=])7xGz :x .DS_Store <xQ{ "name": "validate-email", "runtime": "native", "exports": ["validate"] } TxWMs6=bCCNe=(qNt4v'N{xb%$[Tع}OQ^$-Zʙ!eM.TZYkG)dkIUzVd4T8yNUKNOe!\U,CZ,•s1 عh,kJKjr!îJu}El)uMv_x{Ŗ2+%̅ػތRemF3)=/]1yZ=w)EM2Q\b۵<T4;eێ򕨭h[2MhYGIB\ҥv:SybT k 5+GM͔#`D I$ח(]:嫝SqZy2-8_¥/ph+Ʒ~DE5qnkp ([Y`u,Z'UQ-us:<}xuFc[/:oQ"Y,5pDKG.~DP9 A$gFJisֆK3k(Y8?% _%EY6K>(2Xac)Z պ9 }壆H0:;̟Fj<8p{"1μGؿ V 7{bzlpL *_5 @vx $4:犃/|Lst$ju)cvaf R5][JZ ؒH! ;G\]URQ :fBR䱍F#cdY4QN`,mJVNR_Oհ'0ЋW|H`(TA!mB{h.PC?av taVȷzS!Ƙζ`h/`;>E hd+m;FT#{c͂l)+JbZjF^(eǴ.z똩z(wL}kf샘foeTi?5F\P`aMDqS,fv>Gy܌ɬq+1&c1*1zw:ʽ3fʂ>̙eyT ?xOdmV>O9@põj9L8[Y/+z{Fn;@Dq~;xc܎ė0{ʘPK/QxQ100644 extension.jsonƒ[ JOdS˴ 150: return {"ok": False, "error": "age out of range"} normalized = email.strip().lower() at = normalized.find("@") if at <= 0 or at == len(normalized) - 1: return {"ok": False, "error": "email shape"} domain = normalized[at + 1:] if "." not in domain: return {"ok": False, "error": "email domain"} return {"ok": True, "email": normalized, "age": age} C0fxS100644 extension.json7-ZbUDDEe100644 validate.star y*4߹=(iʯV xp{ "name": "validate-email", "runtime": "starlark", "module": "validate.star", "exports": ["validate"] } "ixa# validate(payload) -- normalize email + check shape. # Payload shape: {"email": str, "age": int} # Result shape: {"ok": True, "email": str, "age": int} on success # {"ok": False, "error": str} on failure. # # Written in the permissive Starlark dialect (FileOptions: While=True, # TopLevelControl=True, GlobalReassign=True, Recursion=True) to keep # the implementation byte-equivalent in semantics to the goja/wazero/ # pyvm/native fixtures. Strict Bazel Starlark would forbid `while` # and require list-comprehensions for the iteration, but the host # isn't running this under Bazel's security model -- we're running it # inside an extruntime Module just like every other guest language, # so the dialect choice is ours. def validate(input): if input == None or type(input) != "dict": return {"ok": False, "error": "input must be an object"} email = input.get("email") age = input.get("age") if type(email) != "string" or len(email) == 0: return {"ok": False, "error": "email required"} if type(age) != "int" or age < 0 or age > 150: return {"ok": False, "error": "age out of range"} # Strip + lowercase. Starlark strings are immutable so we build a # new one by direct method calls; no in-place mutation needed. normalized = email.strip().lower() # Basic shape check: one '@', non-empty local, domain contains '.'. at = normalized.find("@") if at <= 0 or at == len(normalized) - 1: return {"ok": False, "error": "email shape"} domain = normalized[at + 1:] if domain.find(".") < 0: return {"ok": False, "error": "email domain"} return {"ok": True, "email": normalized, "age": age} R Kxw100644 .gitignore'R/`IMGu0100644 extension.jsonzFZ\+6%XF100644 validate.jsZAJ;58ȋ"a)1+l]x jj,v8go0:txL>// Same logic as goja-js/index.js — only the runtime differs%@'nmx340031QK,L/Jeٽt;6s?}gUA.z) RϳN,os|K㏌4%R+JR3?+咾L䟏JϬ,HLNLOOΆ(v=-g֌?Z=7UTu9/J<ƶ(I(%3M2=횻MgM*05,1'3%$U<8aخGRv/\>wq{x3 ^oؠms(~3X. 8w64?B̘y>8xnode_modules/ .DS_Store build/ 9 Ixh# wazero-rust fixture Pure-Rust `validate(email, age)` compiled to `wasm32-unknown-unknown`, loaded by the Base wasmvm runtime. Implements the shared HIP-0105 pointer/length ABI directly (no zip-rs / no Hanzo-internal deps): ``` __base_alloc(size: i32) -> i32 __base_free(ptr: i32, size: i32) validate(ptr: i32, len: i32) -> i64 // high32=resultPtr, low32=resultLen ``` ## Build ```sh ./build.sh ``` The committed `validate.wasm` is the release artifact. Re-build only if you change `src/lib.rs`. Requires the `wasm32-unknown-unknown` Rust target — install with `rustup target add wasm32-unknown-unknown` if missing (homebrew rust does not ship the wasm32 std crates). ## Why not `wasm32-wasip1`? This fixture imports zero WASI symbols. Building against `wasm32-unknown-unknown` produces a smaller artifact (no WASI imports to satisfy) and avoids accidentally pulling in `std` features that need a real OS. The Base wasmvm host still instantiates WASI globally, so modules that *do* import WASI work too — the existing `wazero-as` fixture is one example. ## Verify exports ```sh wasm-objdump -x validate.wasm | grep -E 'validate|__base_alloc|__base_free' ``` t$xM1j@E1)ҸH$\I#krArGq <~P 4v>1[;h;d %PhTb$Z-F&Lŀ֨֯T5bzغ[o zmK=18", "npm": ">=10" }, "funding": { "type": "opencollective", "url": "https://opencollective.com/assemblyscript" } }, "node_modules/binaryen": { "version": "116.0.0-nightly.20240114", "resolved": "https://registry.npmjs.org/binaryen/-/binaryen-116.0.0-nightly.20240114.tgz", "integrity": "sha512-0GZrojJnuhoe+hiwji7QFaL3tBlJoA+KFUN7ouYSDGZLSo9CKM8swQX8n/UcbR0d1VuZKU+nhogNzv423JEu5A==", "dev": true, "license": "Apache-2.0", "bin": { "wasm-opt": "bin/wasm-opt", "wasm2js": "bin/wasm2js" } }, "node_modules/long": { "version": "5.3.2", "resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz", "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==", "dev": true, "license": "Apache-2.0" } } } &l x{ "name": "extbench-wazero-as", "version": "0.1.0", "private": true, "description": "AssemblyScript fixture for the Base extension benchmark harness", "scripts": { "asbuild": "asc src/assembly/index.ts --target release --outFile validate.wasm --exportRuntime --runtime minimal --use abort=", "asbuild:debug": "asc src/assembly/index.ts --target debug --outFile validate.debug.wasm --exportRuntime --runtime minimal --use abort=" }, "devDependencies": { "assemblyscript": "0.27.37" } } .x#40000 assemblyXK^6)fRj"T Bx$100644 index.tsH޴&|H$@.Y11 нx2// AssemblyScript fixture for the Base extension benchmark harness. // // Host-guest ABI (Base wasmvm calling convention): // __base_alloc(size: i32) -> i32 host -> guest scratch // __base_free(ptr: i32, size: i32) host releases scratch // validate(ptr: i32, len: i32) -> i64 (resultPtr << 32) | resultLen // // The host writes a JSON payload at ptr/len, calls validate, then reads // resultLen bytes at resultPtr (UTF-8 JSON) and frees them via __base_free. // // Shared semantics across all 5 runtime fixtures (canonical reference: // goja-js/validate.js): // in: {"email":"Foo@Example.COM ","age":25} // ok: {"ok":true,"email":"foo@example.com","age":25} // err: {"ok":false,"error":"input must be an object"} // err: {"ok":false,"error":"email required"} // err: {"ok":false,"error":"age out of range"} // err: {"ok":false,"error":"email shape"} // err: {"ok":false,"error":"email domain"} // --- memory exports --------------------------------------------------------- // Allocate `size` bytes of guest linear memory and return its raw address. // Uses the AS runtime's __new with ArrayBuffer id so the GC roots the // region until the host calls __base_free. export function __base_alloc(size: i32): i32 { const ptr = changetype(__new(size, idof())); __pin(ptr); return ptr; } // Release a previously allocated region. AssemblyScript's minimal runtime // reference-counts via __pin/__unpin; size is unused but kept in the // signature so the host doesn't need to remember whether the runtime cares. export function __base_free(ptr: i32, size: i32): void { __unpin(ptr); } // --- helpers ---------------------------------------------------------------- function readUtf8(ptr: i32, len: i32): string { return String.UTF8.decodeUnsafe(ptr, len, false); } // Encode a string as UTF-8 and pin the buffer so it survives until the // host calls __base_free. Returns (ptr << 32) | len. function pack(s: string): i64 { const buf = String.UTF8.encode(s, false); const ptr = changetype(buf); __pin(ptr); const len = buf.byteLength; return (i64(ptr) << 32) | i64(len); } // --- tolerant scraper ------------------------------------------------------- // // AssemblyScript has no JSON parser in the stdlib and we don't want a wasm // runtime dependency just to read two fields. The benchmark harness only // ever sends {"email":,"age":}, so a tolerant key-lookup // is correct (and small enough to keep the .wasm under 15 KB). function findValueStart(src: string, key: string): i32 { const needle = '"' + key + '"'; let idx = src.indexOf(needle); if (idx < 0) return -1; idx += needle.length; while (idx < src.length) { const c = src.charCodeAt(idx); if (c == 0x3a /* : */) { idx++; break; } if (c == 0x20 || c == 0x09 || c == 0x0a || c == 0x0d) { idx++; continue; } return -1; } while (idx < src.length) { const c = src.charCodeAt(idx); if (c == 0x20 || c == 0x09 || c == 0x0a || c == 0x0d) { idx++; continue; } return idx; } return -1; } // Returns the string at key, or null if the key is missing OR the value // is not a JSON string. function readString(src: string, key: string): string | null { const start = findValueStart(src, key); if (start < 0) return null; if (src.charCodeAt(start) != 0x22 /* " */) return null; let i = start + 1; const out = new Array(); while (i < src.length) { const c = src.charCodeAt(i); if (c == 0x22 /* " */) return String.fromCharCodes(out); if (c == 0x5c /* \ */ && i + 1 < src.length) { const n = src.charCodeAt(i + 1); if (n == 0x22) { out.push(0x22); i += 2; continue; } if (n == 0x5c) { out.push(0x5c); i += 2; continue; } if (n == 0x2f) { out.push(0x2f); i += 2; continue; } if (n == 0x6e) { out.push(0x0a); i += 2; continue; } if (n == 0x74) { out.push(0x09); i += 2; continue; } if (n == 0x72) { out.push(0x0d); i += 2; continue; } i += 2; continue; } out.push(c); i++; } return null; } // Sentinel for "missing or non-numeric"; ages 0..150 fit easily inside i32. const AGE_MISSING: i64 = i64.MIN_VALUE; function readNumber(src: string, key: string): i64 { const start = findValueStart(src, key); if (start < 0) return AGE_MISSING; let i = start; let neg = false; if (src.charCodeAt(i) == 0x2d /* - */) { neg = true; i++; } let n: i64 = 0; let digits = 0; while (i < src.length) { const c = src.charCodeAt(i); if (c >= 0x30 && c <= 0x39) { n = n * 10 + (c - 0x30); digits++; i++; continue; } break; } if (digits == 0) return AGE_MISSING; return neg ? -n : n; } function trim(s: string): string { let lo = 0; let hi = s.length; while (lo < hi) { const c = s.charCodeAt(lo); if (c == 0x20 || c == 0x09 || c == 0x0a || c == 0x0d) { lo++; continue; } break; } while (hi > lo) { const c = s.charCodeAt(hi - 1); if (c == 0x20 || c == 0x09 || c == 0x0a || c == 0x0d) { hi--; continue; } break; } return s.substring(lo, hi); } function toLower(s: string): string { // ASCII fold — emails are ASCII case-folded per the JS reference. const out = new Array(s.length); for (let i = 0; i < s.length; i++) { let c = s.charCodeAt(i); if (c >= 0x41 && c <= 0x5a) c += 0x20; out[i] = c; } return String.fromCharCodes(out); } function indexOfChar(s: string, ch: i32): i32 { for (let i = 0; i < s.length; i++) { if (s.charCodeAt(i) == ch) return i; } return -1; } function jsonEscape(s: string): string { let out = ""; for (let i = 0; i < s.length; i++) { const c = s.charCodeAt(i); if (c == 0x22) { out += '\\"'; continue; } if (c == 0x5c) { out += "\\\\"; continue; } if (c == 0x0a) { out += "\\n"; continue; } if (c == 0x0d) { out += "\\r"; continue; } if (c == 0x09) { out += "\\t"; continue; } out += String.fromCharCode(c); } return out; } // --- exported entry point --------------------------------------------------- export function validate(ptr: i32, len: i32): i64 { const src = readUtf8(ptr, len); // The JS fixtures reject null / non-object up front. Without a full // parser we use the cheapest invariant: the payload's first non-space // byte must be '{'. let i = 0; while (i < src.length) { const c = src.charCodeAt(i); if (c == 0x20 || c == 0x09 || c == 0x0a || c == 0x0d) { i++; continue; } break; } if (i >= src.length || src.charCodeAt(i) != 0x7b /* { */) { return pack('{"ok":false,"error":"input must be an object"}'); } const email = readString(src, "email"); if (email == null || (email as string).length == 0) { return pack('{"ok":false,"error":"email required"}'); } const age = readNumber(src, "age"); if (age == AGE_MISSING || age < 0 || age > 150) { return pack('{"ok":false,"error":"age out of range"}'); } const norm = toLower(trim(email as string)); const at = indexOfChar(norm, 0x40 /* @ */); if (at <= 0 || at == norm.length - 1) { return pack('{"ok":false,"error":"email shape"}'); } const domain = norm.substring(at + 1); if (indexOfChar(domain, 0x2e /* . */) < 0) { return pack('{"ok":false,"error":"email domain"}'); } return pack('{"ok":true,"email":"' + jsonEscape(norm) + '","age":' + age.toString() + "}"); } ,x5asm_````````~```~`~`~`~`~`~ envabortnm       px~B ~B A A A A A A A A A A A A A A A A A f __base_alloc$ __base_free&validateb__new__pin#__unpin% __collectd __rtti_basememorym A % Jm 6  ( 6 6 6  (  (  (  !A AqE@AAAA AAsq!A A OE@AAAA AI@A! Av! "A"  I!A gk!  AkvAAts! AAkk! A AI AIA E@AAAA ! ! @  @   ! ! ! At jAtj(` F@@ ! ! ! !  At jAtj 6` E@ ! !  Atj( !@ ! ! A tAsq"!  Atj 6 E@ A tAsq A E@AAAA !A AqE@AAAA  ! Aj AAsqj ! ! Aq@   Aj AAsqj" ! Aj AAsqj ! ! Aq@ ! Ak( ! ! A AqE@AAAA  !  Aj AAsqj"  Ar AAsq! A A OE@AAAA A Aj j FE@AAAA Ak 6 AI@A! Av!  " A" I!A gk!  AkvAAts! AAkk! A AI AIA E@AAAA  ! ! !  At jAtj(` ! A   @   @ ! ! ! !  At jAtj 6` A tr@ ! ! ! !  Atj( A tr!  Atj 6   !A  XE@AAAA AjAjAAsqAk! AAsq! ! ( !A! @A  AjOE@AAAA Ak F@ Ak! ! A  A jOE@AAAA  k! AA jAjI@A AAlk! ! Ar Aqr A A Aj j! AAr@ ! ! 6  A A#AjAAsq!?! A jAjAAsqAv!  J  k@AHA @ ! A@ !A!  6 A!@ AI@@ ! !A!  Atj 6 A! @ AI@@ ! ! ! A! At jAtj 6` Aj!  Aj!  A j!A  ?B  $  A MA  AjAjAAsqAk  AK@A AAA   ! AI AA gktjAk   AI@A! Av! !AAlAk gk!  AkvAAts! AAkk! A AI AIA E@AAAA  ! !  Atj( AAs tq!A! E@ AAs Ajtq! E@A! h! ! ! Atj( !A E@AAAA  ! ! h! At jAtj(` !  ! ! h!  At jAtj(` !  A AO@ ! ?! A AtAk ! ( Gtj! AjAAsqAv! " "  J! @AH@ @AH@ ?! At B   !A AjAqEE@AAAA AAsq k! AA jO@   Aqr Aj j!  AkAr    AAsq ! Aj AAsqj  ! Aj AAsqj AAsq q ! ! E@  !A E@AAAA A AAsq OE@AAAA   A  #E@ # Aj 6 6 6 6      (  (   Aqr % !  r      A AAsqj L AK@A AAA A jAk!     ### j$ Aj Aq AAsq a !! AF@A AF #IA E@AAAA  !A E@AAAA     7 @ Ak!  AF@AAAA " #A   A! #  6 E@ Ak!  AG@AAAA " ##  %  (  ( > Ak! AG AqEA  AqEA E@AAAA  A  Ar  8 ! Aj Aj AAsq #O@A *   ! ! AAsq!  M@  A   ! Aj AAsqj ! ! Aq@ Aj AAsqj! O@   Aq r  A   + +#E@ #I# ) +# ) , Aj  Ak! #I@  '!  " ("  I  AK@A AAA # k$ AkA j-Aj! Ak!   !   # j$    ! j!  OE@AAAA AtA! !@@  I@ -! Aj! AqE@  Eq@   ;  F@  -A?q! Aj! AqAF@  AqAt r;  F@  -A?q! Aj! AqAF@ AqA t Atr r!  F@  AqAt A tr Atr -A?qr! Aj! AI@  ; Ak! A vAr! AqAr!  Atr6 Aj! Aj!    k. A/  ( Ak1Av   2O@A Atj/  !  Ak1j! AG!@@  I@ /! AI@  Eq@  Aj! AI@ Aj! AqAF Aj IA @ /AqAF@ Aj! Aj!  Aj! Aj!    Atj! !@@ I@ /! AI@  : Aj!  Eq@  k  AI@ AvAr! A?qAr!  At r; Aj! AqAF@ AI Aj IA @ /! AqAF@A AqA tj Aqr! AvAr! A vA?qAr! AvA?qAr! A?qAr!  At Atr Atr r6 Aj! Aj!  AG@ AF@AAAA1 A! A vAr! AvA?qAr! A?qAr!  At r;  : Aj! Aj!  @ "Aj! A:  k " 4A! 2   5  *@@@@# Ak A! A!  6 Ak1 , AA$ A7! ! # 8! B  K 2At! 2At!  j! AF@A A!    j    :  Atj!  Atj!AAH AO Aq AqrEA @@@ ) )R@  Aj! Aj! Ak! AO @@ "Ak! @ /! /!  G@  k Aj! Aj!  A o 2! E@A 2! E@A "A"  J" "  H!  k!@ L@ A ! AH@A 3A"G@A Aj!AAD!@@  2H@ 3! A"F@ H AF Aj 2HA @ Aj3! A"F@ A"L Aj!  AF@ AL Aj!  A/F@ A/L Aj!  AF@ A L Aj!  AF@ A L Aj!  AF@ A L Aj!  Aj!   L Aj!  A F F@A AFA AF @A 2!  2G@A A A ! AH@# !A! 3A-F@A! Aj! B!A!@@  2H@ 3! A0N A9LA @ B ~ A0k|! Aj! Aj!   AF@# ~B }    2! "A"  J" "  H! " A" J" " H! " "  HAt! " "  JAt!  k! E@A E  AtFA @  A!  j   A! 2!@@  H@ 3! A FA A F A A F A A F @ Aj!   @@  J@ Ak3! A FA A F A A F A A F @ Ak!    P J  EO@ AH@AAAA AjAAK AjC G Atj 6A YA 2D!A!@  2H@ 3! AN ALA @ A j!   R Aj!  H 0A!@  2H@ 3 F@  Aj!  A "@@@# Ak #!  P , AJ!A tA!  ; @  ;  @@@# Ak A! V A!A!@  2H@@ 3! A"F@ A ;!  AF@ A ;!  A F@ A ;!  A F@ A ;!  A F@ A ;!   A$ AW;! Aj!   b AI@ AI@A A OjA AOj AOj  AI@A A=OjA AOj A/Oj  ~@@ AO@ An! Ap! ! An! Ap!A Atj5! A Atj5! Ak! Atj B 7  AO@ An! Ap! ! Ak!A Atj(! Atj 6 A O@ Ak!A Atj(! Atj 6 Ak!A0 j! Atj ;  BT@ BT@A BZj Bȯ%ZjA B郱Zj BZj  B셯ѱT@A BZjA BZj B֭ Zj ~@@ B/Z@ B/!  B/~}! ! An! Ap! An! Ap! An! Ap! A Atj5!A Atj5! Ak! Atj  B 7A Atj5!A Atj5! Ak! Atj  B 7   Z V@@ AO@ Ak! AtjA AqAtj(6 B!  Aq@ A Atj/; ~ ! iAF @A? ykA gknAj ! !A!@@ Z@ !  ~! At!  @@ BZ@ ! Aj!  Ak ~ !  AkqAF@ hAq! B}!@ Ak! AtjA  Atj/;  ! BR @ Ak!  ! AtjA   ~}Atj/; ! BR ~ AHA A$J @A A AA BRE@A B?At! @B }! A F@ #X@ ! Y! At jA!@  j! ! !AAN   Z  [! At jA!@  j! ! ! AAN  \  AF@A? ykAuAj! At jA!@  j! ! !AAN  ]  ^! At jA!  j  _ @ A-;  ` ~ 0!A!@@  2H@  3! A FA A F A A F A A F @ Aj!    2NA  3AG @A9 AM! ANA 2AF @A9 AO! #QA BS A BU @A9 QS! AT! ALA  2AkF @A9  AjA$ AU! A.TAH@A 9 A X;A ; A a;A;9  #I@ #E@ # )* AAf#! !!@@  G@A  AFE@AAAA AjAl !!  #E!#! !!@@  G@A  FE@AAAA AjAl !!  #! !!@@  G@A  #FE@AAAA !! #I@ A A# k$A Ajc !      $ $ $AA , E@ Ak!A  #F@ " ##E ;A eA eA eA eA eA eA eA e  h ("@  e   ( A i e  h j 6@@@@@@ Ak(    g k A$A$A$ %A @<(Allocation too largeA @<~lib/rt/tcms.tsA @<~lib/rt/tlsf.tsA A @<*Object already pinnedA A @<(Object is not pinnedA 0,~lib/string.tsA pl\{"ok":false,"error":"input must be an object"}A @<$Unpaired surrogateA  emailA "A A 0,Invalid lengthA 0,~lib/array.tsA `\J{"ok":false,"error":"email required"}A ageA plN{"ok":false,"error":"age out of range"}A @<$Index out of rangeA `\D{"ok":false,"error":"email shape"}A `\F{"ok":false,"error":"email domain"}A @<({"ok":true,"email":"A \"A \\A \nA \rA \tA 0,","age":A |dtoString() radix argument must be between 2 and 36A @<&~lib/util/number.tsA 0A 00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899A 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeffA `\H0123456789abcdefghijklmnopqrstuvwxyzA }A A   W*xuWmlݽ9> I!^l6 M0@*.?$RV|Q[HHUE*-Ᶎ*_-M)?M9GҬu3~<_}8ynDu<?̽93QwCX^'|sLygX[r0_?nAY F?1=yxvVϣYOóǦMY7ޏ;'hV&'>2ǎ_b<e8Kdy^]7]HyIc8e3/?q*hKlG**H"$#TG:|sbAy&^)PLϻČ x wL&A39N2hЕCFg^Й/0O"6ZT,eM,q8ĢIrt,f6[|׳4;Cmb\I^h_#ܴ~mgclH{VBc[P[>lWl  -ucY]~,ws AN@ `.BC7P#ÐY623m+}L3<+A S;6y)$ %(Q5M둀ct5Ӭ"Qj{8i¹Tfh{(eleuwnovQt|u,!!"mX0k1_ *-$V{Қ&ݘ'gJj7켻ж(j't(5+,1V@OQӲmbq7Ec^ޓؽކmv?an;Εl7fP2ЂRІ"޵#FA1*'Ձ`j܌{Kyt\ͻHnfB\9Zٮ=|7wMV~.P95>Ԙ>և>WQzj^DBVO乤| " 7WCSM=J0ťVm]ӭ. 66ˮÚ j9u֮4ҍenpi)j0 Uf4ZuI .XOo{^wrMhO45ݲ6on1/͟ZzyŕVN2B\92e1v?eCs<?z9ch/2v(]Q檡dQuR}VZoSgEys&YX؊y{'c!$(|e^@n%/@7bc]fW}l.9O5=դ~ɳ+Wo Sm!*6jŒe0[rT;s iH7.=Iz#Q0aN|AI(sz\zl#T{&udd+sTsAW,j 50 v$MZIK`VSonǎ=^Љ`kM>|['`t+()LWZ%K [TXYXTpHFubh(\ja G0L.!fgk:&&Ϊb K࠷ۊؐǵA7 0us-nUqWx(̣}S0WY߼~J|?%Tvq6c tw⢝<ȋ4 150: return {"ok": False, "error": "age out of range"} normalized = email.strip().lower() at = normalized.find("@") if at <= 0 or at == len(normalized) - 1: return {"ok": False, "error": "email shape"} domain = normalized[at + 1 :] if domain.find(".") < 0: return {"ok": False, "error": "email domain"} return {"ok": True, "email": normalized, "age": age} if __name__ == "__main__": raw = sys.stdin.read() payload = json.loads(raw) result = validate(payload) sys.stdout.write(json.dumps(result)) T!gx( normalize email + check shape. Same semantics as the goja / wazero-as / pyvm / starlark / native fixtures. In a WASI-command-module deployment of CPython, this script reads JSON from stdin and writes JSON to stdout. The host shim (see README) wraps that into our pointer-based ABI/g x100644 .gitignore'R/`IMGu0100644 README.md6&LE!H]k@100644 TODO.md.yC֩q.<100755 build.sh,?S^qD/x100644 extension.jsonwDtDgxuQb?̨100644 validate.jsXz\Zȕ8XƼixc# wazero-javy fixture Raw JS -> wasm via Shopify's [Javy](https://github.com/bytecodealliance/javy) (QuickJS-as-wasm). Implements the shared `validate(payload)` contract. ## ABI note (important) Javy emits a WASI **command** module: the guest reads its JSON input from stdin and writes the JSON result to stdout via `_start`. Base's `wasmvm` calling convention is pointer-based (`validate(ptr, len) -> i64` packed result). The two ABIs do not match out of the box. Two paths forward: 1. **`wazero_stdio` shim** — funnel the payload bytes through WASI's stdin/stdout fds and invoke `_start` per call. Re-entering `_start` on every call is what Javy is built for; the harness just needs an adapter Module that translates pointer-call to fd-call. 2. **Custom Javy plugin** — author a Rust Javy plugin that exports `validate(ptr, len) -> i64` directly. More work, lower per-invoke overhead. Until the harness implements (1), this runtime reports as `skipped (no matching guest ABI)` in the benchmark output. The wazero-as fixture is the wasm representative for the headline numbers. ## Install Javy Grab a v3+ release binary from [github.com/bytecodealliance/javy/releases](https://github.com/bytecodealliance/javy/releases): ```sh # macOS arm64 example — pick the binary matching your platform curl -L -o javy.gz https://github.com/bytecodealliance/javy/releases/download/v3.0.0/javy-arm64-macos-v3.0.0.gz gunzip javy.gz && chmod +x javy sudo mv javy /usr/local/bin/javy ``` ## Build ```sh ./build.sh ``` If `javy` is not on PATH the script exits non-zero. The committed `validate.wasm` (if present) is the release artifact; absent until a local Javy build runs. bN?&xe# TODO(extbench): build validate.wasm with javy Javy was not present on the build host when this fixture was authored (`which javy` returned non-zero). Two follow-ups: 1. Install Javy v3+ (see README.md) and run `./build.sh` to produce `validate.wasm`, then commit it. 2. Land the `wazero_stdio` shim in `plugins/wasmvm/` so the harness can actually invoke a Javy command module (see README.md "ABI note"). Without the shim the fixture's wasm is not consumable by the existing wasmvm loader; the bench harness should skip this runtime with `skipped (no matching guest ABI)` until the shim lands. 3 x#!/usr/bin/env bash # Build validate.wasm via Shopify's Javy (QuickJS -> wasm). # # Install Javy v3+: https://github.com/bytecodealliance/javy/releases # curl -L -o javy.gz && gunzip javy.gz && chmod +x javy # sudo mv javy /usr/local/bin/javy set -euo pipefail cd "$(dirname "$0")" if ! command -v javy >/dev/null 2>&1; then echo "javy not found on PATH. Install from https://github.com/bytecodealliance/javy/releases (v3+)." >&2 exit 1 fi javy build validate.js -o validate.wasm ls -la validate.wasm έx340031QK,L/JeЯvY os_nQX`DuKzWꒄ$?7aėnc5p+5*U/7ڴmD'ŧ=^T!43'E8wp-w"; oVge1pW2%}ۙ?&ٟYab E lRΙSot-דSK6}=&bWf:,1'3%$U<8A[ AG~5~kx[package] name = "validate-rust" version = "0.1.0" edition = "2021" publish = false license = "Apache-2.0" # Stand-alone — don't get pulled into ~/work/hanzo/Cargo.toml's workspace. # This fixture must build with `cargo build` from its own directory and # carry zero Hanzo-internal deps. [workspace] # Pure-Rust validate fixture for the Base extbench harness. No Hanzo-internal # deps, no zip-rs dep — hand-rolls the HIP-0105 pointer/length ABI directly. # Sibling agent is building the zip-rs crate separately; this fixture # stays self-contained so the bench has zero toolchain coupling beyond # the standard wasm32 target. [lib] crate-type = ["cdylib"] [profile.release] # Smallest stable wasm. opt-level=z minimizes code size at the cost of a # few % of runtime perf; the validate body is so small the loss is in # the noise. lto=true gives whole-module DCE so the final wasm only # carries the symbols we export. opt-level = "z" lto = true codegen-units = 1 strip = true panic = "abort" @Y5xR#!/usr/bin/env bash # Build the Rust wasm fixture. The committed validate.wasm is what the # bench harness loads; re-run this only if src/lib.rs changes. # # wasm32-unknown-unknown (no WASI), opt-level=z + lto for smallest output. set -euo pipefail cd "$(dirname "$0")" # Source rustup env so we pick up `wasm32-unknown-unknown` even when the # caller's PATH only has homebrew rust (homebrew rust does not ship the # wasm32 std crates). if [ -f "$HOME/.cargo/env" ]; then # shellcheck disable=SC1091 . "$HOME/.cargo/env" fi # Ensure rustup-managed rustc takes precedence over a brew install (brew # ships only the host stdlib, no wasm32-unknown-unknown). export PATH="$HOME/.cargo/bin:$PATH" cargo build --release --target wasm32-unknown-unknown cp target/wasm32-unknown-unknown/release/validate_rust.wasm ./validate.wasm ls -la validate.wasm !Ex"100644 lib.rs2K #I*;&d x5x// Pure-Rust validate fixture for the Base extbench harness. // // Host-guest ABI (HIP-0105 pointer/length convention, matches // plugins/wasmvm/module.go): // // __base_alloc(size: i32) -> i32 host -> guest scratch // __base_free(ptr: i32, size: i32) host releases scratch // validate(ptr: i32, len: i32) -> i64 packed: (resPtr<<32) | resLen // // The host writes a JSON payload at ptr/len, calls validate, then reads // resLen bytes at resPtr (UTF-8 JSON) and frees them via __base_free. // // Shared semantics across all extbench fixtures (canonical reference: // goja-js/validate.js): // // in: {"email":"Foo@Example.COM ","age":25} // ok: {"ok":true,"email":"foo@example.com","age":25} // err: {"ok":false,"error":"input must be an object"} // err: {"ok":false,"error":"email required"} // err: {"ok":false,"error":"age out of range"} // err: {"ok":false,"error":"email shape"} // err: {"ok":false,"error":"email domain"} // // We build for wasm32-unknown-unknown (no WASI), so the runtime surface // is purely linear-memory + exported functions. The Base wasmvm host // instantiates WASI snapshot_preview1 globally; modules that don't // import any WASI symbols (like this one) ignore it. #![no_std] extern crate alloc; use alloc::alloc::{alloc, dealloc, Layout}; use alloc::string::{String, ToString}; use core::panic::PanicInfo; // wasm32 has no default panic handler with #![no_std]. abort by trap. #[panic_handler] fn panic(_: &PanicInfo) -> ! { core::arch::wasm32::unreachable() } // ---------- memory exports -------------------------------------------------- // Allocate `size` bytes and return the raw address. We over-allocate by // `size_of::()` to stash the layout's size next to the buffer so // __base_free can reconstruct the same Layout (alignment is fixed at 8 // to match Rust's default for byte buffers; that's safe for the JSON // payloads we round-trip). const ALIGN: usize = 8; #[no_mangle] pub extern "C" fn __base_alloc(size: i32) -> i32 { if size <= 0 { return 0; } let size = size as usize; // We need to remember `size` for the matching dealloc. Pack it as a // little-endian u32 in the first 8 bytes (8 so the user pointer stays // 8-byte-aligned) and return a pointer past the prefix. let total = size + ALIGN; let layout = match Layout::from_size_align(total, ALIGN) { Ok(l) => l, Err(_) => return 0, }; unsafe { let raw = alloc(layout); if raw.is_null() { return 0; } // Stash size as u32 in first 4 bytes of the prefix; the rest // of the prefix is padding to maintain alignment. (raw as *mut u32).write(size as u32); // User pointer is past the prefix. raw.add(ALIGN) as i32 } } #[no_mangle] pub extern "C" fn __base_free(ptr: i32, _size: i32) { if ptr == 0 { return; } unsafe { let user = ptr as *mut u8; let raw = user.sub(ALIGN); let size = (raw as *const u32).read() as usize; let total = size + ALIGN; if let Ok(layout) = Layout::from_size_align(total, ALIGN) { dealloc(raw, layout); } } } // ---------- validate -------------------------------------------------------- #[no_mangle] pub extern "C" fn validate(ptr: i32, len: i32) -> i64 { let input = unsafe { read_input(ptr, len) }; let json = match input { Ok(s) => s, Err(_) => return pack(r#"{"ok":false,"error":"input must be an object"}"#), }; // Minimal tolerant JSON scrape. We never need a full parser — the // benchmark payload is fixed-shape `{"email":,"age":}`. let email = match read_string(&json, "email") { Some(s) => s, None => return pack(r#"{"ok":false,"error":"email required"}"#), }; if email.is_empty() { return pack(r#"{"ok":false,"error":"email required"}"#); } let age = match read_int(&json, "age") { Some(n) => n, None => return pack(r#"{"ok":false,"error":"age out of range"}"#), }; if !(0..=150).contains(&age) { return pack(r#"{"ok":false,"error":"age out of range"}"#); } let normalized = email.trim().to_ascii_lowercase(); let at = match normalized.find('@') { Some(i) if i > 0 && i < normalized.len() - 1 => i, _ => return pack(r#"{"ok":false,"error":"email shape"}"#), }; let domain = &normalized[at + 1..]; if !domain.contains('.') { return pack(r#"{"ok":false,"error":"email domain"}"#); } // Manually assemble result JSON. The email is the only user-supplied // string and we only allow ascii lowercase + a few separators after // normalisation, but escape conservatively anyway. let mut out = String::with_capacity(48 + normalized.len()); out.push_str(r#"{"ok":true,"email":""#); json_escape(&mut out, &normalized); out.push_str(r#"","age":"#); push_i64(&mut out, age); out.push('}'); pack(&out) } // ---------- helpers --------------------------------------------------------- // SAFETY: caller has written `len` bytes at `ptr`. We copy them out into // a Rust string so we can drop the raw pointer immediately. unsafe fn read_input(ptr: i32, len: i32) -> Result { if ptr == 0 || len < 0 { return Err(()); } let bytes = core::slice::from_raw_parts(ptr as *const u8, len as usize); core::str::from_utf8(bytes).map(|s| s.to_string()).map_err(|_| ()) } // pack writes `s` into a freshly-allocated buffer and returns the // (ptr<<32) | len i64 that the host decodes. The buffer is owned by the // host after return; the host frees it via __base_free once it's read. fn pack(s: &str) -> i64 { let bytes = s.as_bytes(); let len = bytes.len(); let ptr = __base_alloc(len as i32); if ptr == 0 { return 0; } unsafe { core::ptr::copy_nonoverlapping(bytes.as_ptr(), ptr as *mut u8, len); } ((ptr as i64) << 32) | (len as i64) } // find_value_start locates the byte index of the first non-whitespace // character after `"":`. Returns None if the key isn't present. fn find_value_start(src: &str, key: &str) -> Option { // Build the needle on the stack to avoid an allocation for typical // short keys. We just want byte search; rust's str::find is fine. let mut needle = [0u8; 16]; let needle_len = 1 + key.len() + 1; if needle_len > needle.len() { return None; } needle[0] = b'"'; needle[1..1 + key.len()].copy_from_slice(key.as_bytes()); needle[1 + key.len()] = b'"'; let needle = core::str::from_utf8(&needle[..needle_len]).ok()?; let start = src.find(needle)?; let mut idx = start + needle_len; let bytes = src.as_bytes(); while idx < bytes.len() { match bytes[idx] { b':' => { idx += 1; break; } b' ' | b'\t' | b'\n' | b'\r' => idx += 1, _ => return None, } } while idx < bytes.len() { match bytes[idx] { b' ' | b'\t' | b'\n' | b'\r' => idx += 1, _ => return Some(idx), } } None } fn read_string(src: &str, key: &str) -> Option { let start = find_value_start(src, key)?; let bytes = src.as_bytes(); if bytes[start] != b'"' { return None; } let mut out = String::new(); let mut i = start + 1; while i < bytes.len() { match bytes[i] { b'"' => return Some(out), b'\\' if i + 1 < bytes.len() => { let n = bytes[i + 1]; match n { b'"' => out.push('"'), b'\\' => out.push('\\'), b'/' => out.push('/'), b'n' => out.push('\n'), b't' => out.push('\t'), b'r' => out.push('\r'), _ => { /* drop unknown escapes — tolerant scrape */ } } i += 2; } c => { out.push(c as char); i += 1; } } } None } fn read_int(src: &str, key: &str) -> Option { let start = find_value_start(src, key)?; let bytes = src.as_bytes(); let mut i = start; let mut neg = false; if bytes[i] == b'-' { neg = true; i += 1; } if i == bytes.len() || !bytes[i].is_ascii_digit() { return None; } let mut n: i64 = 0; while i < bytes.len() && bytes[i].is_ascii_digit() { n = n.checked_mul(10)?.checked_add((bytes[i] - b'0') as i64)?; i += 1; } Some(if neg { -n } else { n }) } fn json_escape(out: &mut String, s: &str) { for c in s.chars() { match c { '"' => out.push_str("\\\""), '\\' => out.push_str("\\\\"), '\n' => out.push_str("\\n"), '\r' => out.push_str("\\r"), '\t' => out.push_str("\\t"), c if (c as u32) < 0x20 => { let mut buf = [0u8; 6]; let _ = write_unicode_escape(&mut buf, c); out.push_str(core::str::from_utf8(&buf).unwrap_or("")); } c => out.push(c), } } } fn write_unicode_escape(buf: &mut [u8; 6], c: char) -> usize { let hex = b"0123456789abcdef"; let n = c as u32; buf[0] = b'\\'; buf[1] = b'u'; buf[2] = hex[((n >> 12) & 0xf) as usize]; buf[3] = hex[((n >> 8) & 0xf) as usize]; buf[4] = hex[((n >> 4) & 0xf) as usize]; buf[5] = hex[(n & 0xf) as usize]; 6 } fn push_i64(out: &mut String, n: i64) { if n == 0 { out.push('0'); return; } let mut buf = [0u8; 20]; let mut idx = buf.len(); let mut v = if n < 0 { out.push('-'); (n as i128).unsigned_abs() as u64 } else { n as u64 }; while v > 0 { idx -= 1; buf[idx] = b'0' + (v % 10) as u8; v /= 10; } out.push_str(core::str::from_utf8(&buf[idx..]).unwrap_or("0")); } // ---------- allocator ------------------------------------------------------- // // no_std + dynamic alloc requires choosing an allocator. wee_alloc is // archived; we use the bump allocator approach via dlmalloc which is // what wasi-libc ships and what alloc::alloc::Global expects. // // For wasm32-unknown-unknown there is no default allocator. Provide // the minimal one — dlmalloc via the `dlmalloc` crate would pull deps; // instead we provide a trivial growable bump allocator that's // adequate for our test workload (one alloc per call, freed immediately). use core::alloc::{GlobalAlloc, Layout as CoreLayout}; use core::cell::UnsafeCell; use core::sync::atomic::{AtomicUsize, Ordering}; struct BumpAlloc { // current offset into the heap, in bytes. Linear-memory page is 64KB; // we grow on demand via core::arch::wasm32::memory_grow. offset: AtomicUsize, // Free list for layouts <= 256 bytes, indexed by size class. // Heap-allocated singly linked list — wasm linear memory is the // backing store. Stored inside an UnsafeCell because we can't have // a Mutex in no_std and wasm is single-threaded by default. free_lists: UnsafeCell<[*mut u8; 33]>, // 8..=256 in 8-byte steps } unsafe impl Sync for BumpAlloc {} const HEAP_BASE: usize = 0x10000; // leave the first page (64 KB) for stack const PAGE_BYTES: usize = 65536; unsafe impl GlobalAlloc for BumpAlloc { unsafe fn alloc(&self, layout: CoreLayout) -> *mut u8 { let size = layout.size().max(8); let align = layout.align().max(8); // Try the free list for small allocations to keep the bump cursor // from running away. The benchmark loop is alloc/free in pairs so // recycling is the difference between linear and constant heap. if size <= 256 && align <= 8 { let idx = (size + 7) / 8 - 1; let lists = self.free_lists.get(); let head = (*lists)[idx]; if !head.is_null() { let next = (head as *mut *mut u8).read(); (*lists)[idx] = next; return head; } } // Bump path. Align up the current cursor to `align`. let mut cur = self.offset.load(Ordering::Relaxed); if cur == 0 { cur = HEAP_BASE; } let aligned = (cur + align - 1) & !(align - 1); let new_end = aligned + size; // Grow linear memory if needed. let cur_pages = core::arch::wasm32::memory_size(0); let need_pages = (new_end + PAGE_BYTES - 1) / PAGE_BYTES; if need_pages > cur_pages { let extra = need_pages - cur_pages; if core::arch::wasm32::memory_grow(0, extra) == usize::MAX { return core::ptr::null_mut(); } } self.offset.store(new_end, Ordering::Relaxed); aligned as *mut u8 } unsafe fn dealloc(&self, ptr: *mut u8, layout: CoreLayout) { let size = layout.size().max(8); let align = layout.align().max(8); if size <= 256 && align <= 8 { let idx = (size + 7) / 8 - 1; let lists = self.free_lists.get(); let head = (*lists)[idx]; (ptr as *mut *mut u8).write(head); (*lists)[idx] = ptr; } // Large allocations are not recycled — fine for the bench // workload (one ~50-byte JSON in/out per call). } } #[global_allocator] static ALLOC: BumpAlloc = BumpAlloc { offset: AtomicUsize::new(0), free_lists: UnsafeCell::new([core::ptr::null_mut(); 33]), }; c;x#&asmB ``````~````~~~~ A A A Mmemory __base_alloc __base_freevalidate __data_end __heap_base ?@@ AI"E A!  @ AO A!  AA AI! (!  ( (j!@@  A?qAr! Av!@ AO  :  Ar:  A v! A?qAr!@ AK  :  :  Ar:   :  :  A?qAr:  AvApr:   :  j6 #Ak"$@  (" ("kM @@@  j" O A!  @@  At"  K"A AK"AN A j!A!  @@ E (! "E @ E       "  A6 Aj! 6 (! ( !  6 6 Aj$ <  (!@ E E ( j    j6 @@@@ AK A! Aq!A!@@  G !   j- F  Aj! @@@ AjA|q" F  k!A! Aq!A!@  j- F   Aj"G  Axj"K   Axj!A! AqAl!@A  j"( s"k rA Aj( s"k rqAxqAxG  Aj" M  F   k!  j!A! Aq!@@  j- F   Aj"F   j! A!  A! 6 6 S@@ E @@  K  G    j,AJ  A!   j!  k! 6 6  ~#Ak"$ A": Aj!A!@ As"E  jA  @ E    Aj jA": A8j Aj Aj" @@@@@ (8 (iMj@?>100644 validate.py-LsƪDGa 4t4TP-Ͷxy# wazero-rustpython fixture (DEFERRED) [RustPython](https://github.com/RustPython/RustPython), a Rust implementation of Python 3.12-ish, compiled to `wasm32-wasi` and run inside wazero. Smaller than CPython-WASI (~5-10 MB vs ~30 MB) and faster cold start. ## Status: DEFERRED (ABI shim attempted, time-boxed) Same WASI-command-vs-pointer-ABI mismatch as the CPython-WASI fixture. RustPython emits a WASI command module — guest reads stdin, writes stdout via `_start`. Base's wasmvm wants `__base_alloc / __base_free / validate(ptr,len) -> i64`. ### What was attempted (2026-05-18, ~60min budget) The plausible path was to author a tiny Rust shim crate that pulls in `rustpython-vm` as a dep, exposes the pointer ABI as `__base_alloc / __base_free / validate(ptr,len) -> i64`, and runs the Python `validate` function in-process via `rustpython_vm::eval::eval`: ```rust use rustpython_vm as vm; #[no_mangle] pub extern "C" fn validate(ptr: i32, len: i32) -> i64 { let interp = vm::Interpreter::without_stdlib(Default::default()); interp.enter(|vm_ref| { let scope = vm_ref.new_scope_with_builtins(); // ... run validate.py source via vm::eval::eval ... }) } ``` Build target: `wasm32-wasip1` with `rustpython-vm = { version = "0.5", features = ["freeze-stdlib", "rustpython-compiler"] }`. ### Why deferred 1. `rustpython-vm` 0.5.0 fails to compile when both `freeze-stdlib` and `rustpython-compiler` features are enabled on `wasm32-wasip1` — 11 type errors surface from the `define_exception_fn!` macro interaction with the wasm cfg path. Resolving requires either patching the crate (out of budget) or pinning to an older revision (no compatible 0.4.x exists with both features on stable Rust). 2. Each rebuild after a fix attempt is ~60s of cargo time; the feedback loop ate the budget. The right next step is to vendor a minimal `rustpython-vm` fork that exposes `eval()` without the `define_exception_fn!` macro, OR to wait for upstream 0.6.x. ### Build path (when revisited) ```sh # Install rustup + wasm32-wasip1 target. curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --no-modify-path --profile minimal . "$HOME/.cargo/env" rustup target add wasm32-wasip1 # Author the shim crate next to validate.py: # shim/Cargo.toml: rustpython-vm dep with the right feature combo # shim/src/lib.rs: pointer ABI + eval(validate.py source) cargo build --release --target wasm32-wasip1 cp target/wasm32-wasip1/release/rustpython_shim.wasm \ ~/work/hanzo/base/plugins/extbench/fixtures/wazero-rustpython/rustpython.wasm ``` ## Why deferred The realistic build path requires: 1. `rustup target add wasm32-wasi` (host doesn't have rustup; only homebrew rust, which doesn't ship the wasi target). 2. Clone RustPython, configure Cargo.toml to expose the pointer ABI alongside the WASI command entrypoint, and rebuild. 3. Drop the resulting `rustpython.wasm` here. Out of budget for this pass. ## Build path (when revisited) ```sh # Install rustup + wasm32-wasi target (replaces homebrew rust). curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y source "$HOME/.cargo/env" rustup target add wasm32-wasi # Build vanilla RustPython for wasm32-wasi. cd /tmp git clone --depth 1 --branch release-0.4 https://github.com/RustPython/RustPython cd RustPython cargo build --release --target wasm32-wasi --features freeze-stdlib cp target/wasm32-wasi/release/rustpython.wasm \ ~/work/hanzo/base/plugins/extbench/fixtures/wazero-rustpython/ # Then either: # (a) Author a separate Rust shim crate that imports RustPython as a # dep, exports the pointer ABI, and dispatches to the embedded # interpreter (lower overhead, easier than CPython case). # (b) Fork RustPython to add `validate(ptr, len)` directly alongside # its WASI command-style entrypoint. ``` ## Expected numbers (informed prediction) Compared to wazero-as (AssemblyScript, the fast wasm baseline): - Throughput: ~10-30x slower per invoke. RustPython is a tree- walking interpreter (no JIT) running inside wasm; each Python bytecode op dispatches through a Rust match expression which is itself running on wasm linear memory. - Cold start: ~10-50ms range. RustPython's startup compiles the validate.py module each time unless precompiled to a .pyc embedded in the wasm. With freeze-stdlib that's the stdlib only; user code still parses fresh. - Per-module cost: ~5-10 MB compiled wasm + per-instance interpreter state (~10-20 MB). Lower than CPython-WASI. - Hard sandbox: YES. Same crash-isolation win as wazero-as. Decision rule for HIP-0105 / HIP-0106: pick wazero-rustpython over pyvm if multi-tenant crash isolation is required AND the user specifically wants Python-feel syntax. Starlark is a better answer for "Python-feel DSL" — RustPython only wins when the user needs actual Python semantics (classes, exceptions, dynamic typing) that Starlark intentionally omits. ## When this fixture becomes runnable 1. Drop `rustpython.wasm` (or a shim wasm that re-exports the pointer ABI) into this directory. 2. The wasmvm runtime auto-picks it up at next `./run.sh`. 3. Update `docs/EXTENSIONS_BENCHMARK.md` "Full Cross-Runtime Comparison" section. s+x#40000 sizetest=ֳ4!ߪ ,+ xc40000 allI 3W*)/P>40000 gojaMf*uנd%]N40000 native>QrxQ}g(دqi40000 v8{.n?Lٻz040000 wazeror;C^Lk! ϼ>x#100644 main.go4ٖ6F2n$6-ϥ lxVpackage main import ( "fmt" "github.com/hanzoai/base/plugins/extruntime" "github.com/hanzoai/base/plugins/gojavm" "github.com/hanzoai/base/plugins/wasmvm" "github.com/hanzoai/base/plugins/v8vm" ) func main(){ fmt.Println(extruntime.NewNative().Name(), gojavm.NewRuntime().Name(), wasmvm.NewRuntime().Name(), v8vm.NewRuntime().Name()) } !cxzpackage main import ( "fmt" "github.com/hanzoai/base/plugins/v8vm" ) func main(){fmt.Println(v8vm.NewRuntime().Name())} )x#100644 main.got#z0TDLyx~package main import ( "fmt" "github.com/hanzoai/base/plugins/wasmvm" ) func main(){fmt.Println(wasmvm.NewRuntime().Name())} +xXnF}bJHT E j'(+j)mDK)JQ/.%S)D^rfеȗb.I~SE6S?饹)*/ƅ*%?mWG/Wz&x+hYnBFT89fCv]XU9Yowya;z|sk*>9H*YymTRȋB}C.HɅWF! =#+9B,)6^eip좩etNVūkH%pVpѿÒ p@+z77`]bO''|.VE94S%=T"RlԜ{ }HN?)wf\ ܶ!QZD9Z vFj!D팳>oQ3ZܚF! "0-~v̬֓ARKb-@I 0Qۭ3ZςFR&'hALصca`&,)AVḚ(AFL2eR.E'V `F3 Ldښ=GA?@C*[|uy)Tk 'WF祰3V[TXS!!r+ٱB}#1n:Z`1ٍY°4tvVμ2j%y~BvgkL<`!琼'J"]aR񪟆3qy1w_̃4NY{fƾ,'~ "$OUT" run() { local label="$1"; shift echo "=== ${label} ===" | tee -a "$OUT" # Memory tests run once (-count=1) — they print MEMORY lines that are # the per-runtime totals; running them 3x just dilutes the signal AND # tickles v8go's known cgo teardown bug. Benchmarks run 3x for # variance reading. echo "--- TestMemory (count=1) ---" | tee -a "$OUT" go test "$@" -count=1 -v -run=^TestMemory ./... 2>&1 | tee -a "$OUT" echo "--- Benchmarks (count=3, benchtime=2s) ---" | tee -a "$OUT" go test "$@" -bench=. -benchmem -benchtime=2s -count=3 -run=^$ ./... 2>&1 | tee -a "$OUT" echo "" | tee -a "$OUT" } run "default tags" run "with v8vm" -tags v8vm echo "Results: $OUT" ς x\msGrL9Tt,`Iʒ"Q$e"VYXsng*RB=3 ,EwT*y闧{zfoO a)[Y¨<[$LjEQTqNDNMFTp{weE3yX%}'ZGHlYfh%M bdcwϯφ_ ϟ=ɫdb)n6Ř$B+yF(U#3XO#OK]UR~AdJzEr)5ᨮ"F_/Nw~N+~ԧ)tqDeϋ))8+&L(j9sLB s=R*@=+B3w) H fUhhԓ 3'Cpiݍ<+hj;>ti¿2yX/,jMh1 Cu:v2K"K3?5cF\,ٛYB,ZҳpܤdY9ZfE!7) M;)1Rp߄ "V=;e.xb XV7 A 62 Ac^K3H>I=d_%QE;v&yqyQDzHWybY ώ]?"h<PKacSfó^#(E\F'h3V$_4yV "@С#)&ݰ5dHvQ]Y>39\>E^ I\Q+5s52YBU1lXA.kweIݏhM*|@YQ6ԧh}A<#%sLLCEAIXt,2, [6%/ASߑz~:9_~_nЃܿT4@K3&Sw)=C5ń&*r$x8d >h@"/4d%= c]n CARcdKʹ"|o?1A`$%o]ugh6D,?)_BBn'P+ :$N Uȍt4&)^b'd̝;[+8-R% H \wUcHHӾ%/0f:$4ʦ^{&J[萱HX 8q!χEV|mq6!춱yj5kW~N `(fB2( ֞`ZJDd ÖQHFemW=D''"T@^Z^ཆdXiyiDžU\.@kI-9U(4Xb1.O4cW ;Ӑ ciWXrJޗG M`PZeLVYt?bHSQ)߄<(V6U1"YKBp66#(#K:kbfp4Q3ELj+ټbTU#`zzxtc1 }{. ɨ#?ա=Nٯ5;ӫ3 PLPV.'ƭ&~&'^4h<,oOcؖƍBo0jD1ACí>/r Fe%j>~Ydt8Al "P < VO32% Nr&AUO0Qjɐ*:s2!V) epk[ \ b{,*nzwGӹɷLk&& Ljf j |kfX&탖,ATK)J0k2nD$JhQ8p2POC/Kv=]0űh6W[o-#SݷBa  w{71#vB[}2l#TjdHh84xod'hj-\rGaG0 ܫS ]H:EQҍ)<}O(PQXֲÍso$YV2^&Vv\DžP?\cL=$5;R B ؄Թ!>.Sh 8BG"n| 9uRҰtB:pp nMQ&2qk,!Kҧ]Qrpk>ZzgIR#aMwh`n616(hySDnN -ؗ!#>nv&C'/DTτѠo==;v/+![d|N6-4mH'?Zu߽ bʂiԹӣad=ҨԞ `zL1] Vx8-n!ĮW U 7Hji!M6u8}*nc)TY~eK̯vh-TpJ1P0Y$If@,FMS\/O*nurNФ 3@𭛀 #N']<WY.6r!0!цh("bN2ua B('n6=:~1D@dp>99>y/8 ⅋;+yJ?Hef &߾z(*t`'+ l(b*~jAJ]ys&`{Y4ߜ--=!I5٭3o=_ Oy_Gު+GwY2OLP-3J<|xO4wdNC?[.wYX|uKQP/Jִr9ɗ8~_,%ӾHZ² L/{!s"Dcğ! [ධHa%>Қ 60!cӠ'9:]"MH})6fs4l+<҄[Ƞ,u\W@[0 "Unz)U;" u%SEΜ1z:j&XbbJX{g_},(&\4ֶ cwW?oFj}??S=aI𼝄T{{N ݩ?|G+MrCjU kKmpB 1;u]&BvKSFHV0a@!hJJof;UGⲅ ͪ >Up??;]Ri2:vu~m)KCSCfbcLx~TOb$MrRCu; Ic :XooM\ZhIR9iyGxm|"ri3m0sj*X4%34UL;F!F|0 hAhoK1ڕZs;g"<\M8_0H0N C4yVږJ)2-z-Tx+ʢ.ot 7_g6:rjrg;h|Ta 4ecT40jlC(xOV*mqU2YD&"%8;(CڻzM (c6g-9g^ ˿eȻ]+k%WI̩w+9h6-^E "m&W/ɵGrylH~r)m]s锒fNl7VM>t8.2# xӵmҵjݙ3+.tnM*TgT]I _9k=.%V8]֥;7ML@q[ R+kqty`@RoC\iHI4Lh6/9x*-.HRԈYmBìE]M'4\^_4Wx6ӥQو `Vara.害T65O{8SVC_H,2ĝcX!;_/1G8*^$ TOEI:¼K_ *`_P:zʒEK%0'WVέ]j?Fjąj?R|@]rR%N~?|~>t[E<6ŎX0!xȜJߚ"v$>5&z zRt/Ύ]:G,DUMt( lRj 4(GKR[[>=W;瑟d*Hĩ&F?3~;'nU"T6=-k  ^c#/3f0īGɎl+p oxrG>][t|V {|R}GnЮ>L5Ke>Fv~I׶o*Ofm>ch#yf2,S"-*XnMF[xt9) n$܉z/lI썅fE2. m>$Z\U9융jmh&b,aPQFl_Q=\ jm߻ړS#Oeil@Lsw\SY>RmI!'9YX"N:j]%g+x vP=r6s,g}6{4([D=sz԰T3NkV˥ZQ$K2}wW.4<~3";B> 7| -u=7W^n1mf^ ؒ xWHs2*xߓJ KG ]A(PQ۰X؛lͰ!*bޣoP#+Gp+.͊p GĝQ2_%ʄqc|CVGM1k YC[j['f/J͞#кUf,Z;k Rn[J2Gj:i.U+Q˽B)-i;\*Ur!| {|pJ9Lfu2Y~!_k85%;@GrT姽9ղ}e'Җ-gһd :QY9P.S>J/; VE/XFH$J$6O'/|/>>+m,<}Ze,_Z6_?yF{CZ 2n"Rk惡q\^@$G2mՓʺk& CٹIJV!6yřrm$ pw6ejߤJZ: &C9 x340031QH()*+MKgX)dd;ZMk=Dyu ! sSR@;ŵ)skv~EQ_Z\R}{{ڂnw/?e271/3 Lҝt6]^PSCAPey%e`SnO]7c{<ɓK4.x;xqȂ+'uR=|,p PxXnܺ}~@}n+E>n" !jeLHޤ~I IT'5G^9gfުN5m0ZL=ZY[o\Kyiw4x]/i{dnJTaܻܽjMݚwʭ؜_~g'yGQʪLz^GkTkvlUNռL8!Pz$%착?; ^~sX?x7ʹo/:OzY %.KuY,"jvr ˏ#?8wG;copLþ> q!ׅi(8szgçe~UɞwhU焟bXXT|Wn|\ ՃAf\; ׾5VkWxE勅ix/-gEPq/ @n4֌si o"ݺ\cOF~^5B䆡OYì{Z <#X3\ ׅRujk L|PB(-BS>$j<3 .fF]ze$iuPmKjc+H7CP9 5j9[U pm\Ӂ` 興UbẋN4擮" S-$`ZX9VcL MdS*9{YBS T:\JY &r|vmGp]b 5톶'g 'BZ_cQ`d'%Q=`(/[Q;f,n8Z(EU.ת^d)= ˯r<2A -g>Lp#yWQN'Kֆᷤ+|*YL>\t[yZRa4V>^&Y4`OKZkHdfXU}Td]{׺-gbSv%QϷ-5cVɆяlۻǾq;_Ү(*)ViCZN~r1׆qXN׆ %Q-# gM]xHau-:Lz;75^hLc-n5wmpjb!*QJhr-ޭg;zM&ey-8/]f#lTAcsל#{1'&n9}8Kc>Yn,I% c9w^GEJ8+#4̧5,ǡsbؙNlluxШE882+^M~5R6~؊uؕx{~AP̿&}߻َW@^k/L!s+y]|UޕH^VHցNcJ zU :mE %j|/pGw-x[@ifY&'-j?ﺊxUpackage extruntime import ( "context" "errors" "fmt" "log/slog" "os" "path/filepath" "sort" ) // Loader resolves extension manifests against a runtime registry and // loads each extension with the runtime whose Name() matches the // manifest's `runtime` field. // // Construct one Loader per process, register every runtime you have // linked in, and call LoadDir() against your extensions directory. // Failures on individual extensions are logged but do not abort the // load — callers get back the modules that did load. // // Loader is safe to call from a single goroutine. Concurrent LoadDir // calls are not supported (no real use case — boot once). type Loader struct { runtimes map[string]Runtime log *slog.Logger } // NewLoader builds a Loader keyed by each runtime's Name(). The last // runtime registered for a given name wins; passing two runtimes with // the same Name() is a caller bug. func NewLoader(runtimes ...Runtime) *Loader { l := &Loader{ runtimes: make(map[string]Runtime, len(runtimes)), log: slog.Default(), } for _, r := range runtimes { if r == nil { continue } l.runtimes[r.Name()] = r } return l } // SetLogger swaps the logger used for per-extension load failures. // nil restores slog.Default(). Returns the Loader for chaining. func (l *Loader) SetLogger(log *slog.Logger) *Loader { if log == nil { log = slog.Default() } l.log = log return l } // Runtimes returns the registered runtime names, sorted. Useful for // diagnostics and tests. func (l *Loader) Runtimes() []string { names := make([]string, 0, len(l.runtimes)) for n := range l.runtimes { names = append(names, n) } sort.Strings(names) return names } // LoadDir scans dir for subdirectories containing an extension.json // manifest and loads each one with the matching runtime. The returned // map is keyed by manifest.Name (NOT by directory name) — two // extensions with the same name in the same dir is a manifest bug and // the second one logged-and-skipped. // // Missing dir is not an error: returns an empty map. Individual // extension failures (bad manifest, unknown runtime, runtime.Load // failure) are logged and skipped. func (l *Loader) LoadDir(ctx context.Context, dir string) (map[string]Module, error) { out := map[string]Module{} entries, err := os.ReadDir(dir) if err != nil { if errors.Is(err, os.ErrNotExist) { return out, nil } return nil, fmt.Errorf("extruntime: scan %s: %w", dir, err) } // Deterministic order — predictable test output and predictable // load ordering for extensions that have init-time side effects. sort.Slice(entries, func(i, j int) bool { return entries[i].Name() < entries[j].Name() }) for _, ent := range entries { if !ent.IsDir() { continue } extDir := filepath.Join(dir, ent.Name()) manifestPath := filepath.Join(extDir, "extension.json") if _, err := os.Stat(manifestPath); err != nil { // Not every subdir is an extension — silently skip // directories without a manifest. continue } mf, err := LoadManifest(extDir) if err != nil { l.log.Error("extruntime: load manifest failed", "dir", extDir, "err", err) continue } rt, ok := l.runtimes[mf.Runtime] if !ok { l.log.Error("extruntime: unknown runtime", "extension", mf.Name, "runtime", mf.Runtime, "dir", extDir) continue } mod, err := rt.Load(ctx, extDir) if err != nil { l.log.Error("extruntime: runtime load failed", "extension", mf.Name, "runtime", mf.Runtime, "dir", extDir, "err", err) continue } if existing, dup := out[mf.Name]; dup { l.log.Error("extruntime: duplicate extension name — keeping first, closing second", "name", mf.Name, "dir", extDir, "kept_runtime", existing.Runtime()) _ = mod.Close() continue } out[mf.Name] = mod } return out, nil } // Close closes every registered runtime. It returns the first error // encountered but tries every runtime regardless. Callers should Close // individual modules before Close-ing the loader. func (l *Loader) Close() error { var firstErr error for name, r := range l.runtimes { if err := r.Close(); err != nil && firstErr == nil { firstErr = fmt.Errorf("extruntime: close %s: %w", name, err) } } return firstErr } x6package extruntime_test import ( "context" "encoding/json" "os" "path/filepath" "sort" "testing" "github.com/hanzoai/base/plugins/extruntime" "github.com/hanzoai/base/plugins/gojavm" ) // fakeRuntime is a no-op runtime used to verify the loader's // dispatch logic without pulling wazero/v8go into this test file — // those runtimes have their own packages and tests; here we care // only that the loader picks the right one. type fakeRuntime struct { name string loadErr error loaded []string capsLang []string } func (f *fakeRuntime) Name() string { return f.name } func (f *fakeRuntime) Capabilities() extruntime.Capabilities { return extruntime.Capabilities{AcceptsLanguages: f.capsLang} } func (f *fakeRuntime) Load(ctx context.Context, dir string) (extruntime.Module, error) { if f.loadErr != nil { return nil, f.loadErr } m, err := extruntime.LoadManifest(dir) if err != nil { return nil, err } f.loaded = append(f.loaded, m.Name) return &fakeModule{name: m.Name, runtime: f.name, exports: m.Exports}, nil } func (f *fakeRuntime) Close() error { return nil } type fakeModule struct { name string runtime string exports []string } func (m *fakeModule) Name() string { return m.name } func (m *fakeModule) Runtime() string { return m.runtime } func (m *fakeModule) Exports() []string { return m.exports } func (m *fakeModule) Invoke(ctx context.Context, fn string, payload []byte) ([]byte, error) { return payload, nil } func (m *fakeModule) Close() error { return nil } // writeManifest writes an extension.json + an optional module file into // dir//. Returns the per-extension directory. func writeManifest(t *testing.T, root, name, runtime, moduleFile, src string) string { t.Helper() dir := filepath.Join(root, name) if err := os.MkdirAll(dir, 0755); err != nil { t.Fatal(err) } m := extruntime.Manifest{ Name: name, Version: "0.0.1", Runtime: runtime, Module: moduleFile, Exports: []string{"fn"}, } mb, _ := json.Marshal(m) if err := os.WriteFile(filepath.Join(dir, "extension.json"), mb, 0644); err != nil { t.Fatal(err) } if moduleFile != "" && src != "" { if err := os.WriteFile(filepath.Join(dir, moduleFile), []byte(src), 0644); err != nil { t.Fatal(err) } } return dir } func TestLoader_RoutesToCorrectRuntime(t *testing.T) { root := t.TempDir() writeManifest(t, root, "native-ext", "native", "", "") writeManifest(t, root, "goja-ext", "goja", "index.js", `globalThis.fn = function(p) { return { ok: true }; };`) writeManifest(t, root, "wazero-ext", "wazero", "x.wasm", "") writeManifest(t, root, "v8go-ext", "v8go", "index.js", "") wazero := &fakeRuntime{name: "wazero", capsLang: []string{"wasm"}} v8 := &fakeRuntime{name: "v8go", capsLang: []string{"js"}} l := extruntime.NewLoader( extruntime.NewNative(), gojavm.NewRuntime(), wazero, v8, ) defer l.Close() got := l.Runtimes() sort.Strings(got) want := []string{"goja", "native", "v8go", "wazero"} if len(got) != len(want) { t.Fatalf("Runtimes = %v, want %v", got, want) } for i := range want { if got[i] != want[i] { t.Fatalf("Runtimes[%d] = %s, want %s", i, got[i], want[i]) } } mods, err := l.LoadDir(context.Background(), root) if err != nil { t.Fatalf("LoadDir: %v", err) } for _, name := range []string{"native-ext", "goja-ext", "wazero-ext", "v8go-ext"} { m, ok := mods[name] if !ok { t.Errorf("missing module %s", name) continue } // Each module's Runtime() must match the manifest's runtime. var want string switch name { case "native-ext": want = "native" case "goja-ext": want = "goja" case "wazero-ext": want = "wazero" case "v8go-ext": want = "v8go" } if m.Runtime() != want { t.Errorf("module %s routed to runtime %s, want %s", name, m.Runtime(), want) } _ = m.Close() } } func TestLoader_UnknownRuntimeIsNonFatal(t *testing.T) { root := t.TempDir() writeManifest(t, root, "good-ext", "native", "", "") writeManifest(t, root, "bad-ext", "nonexistent-runtime", "", "") l := extruntime.NewLoader(extruntime.NewNative()) defer l.Close() mods, err := l.LoadDir(context.Background(), root) if err != nil { t.Fatalf("LoadDir should not fail on unknown runtime: %v", err) } if _, ok := mods["good-ext"]; !ok { t.Error("good-ext should have loaded") } if _, ok := mods["bad-ext"]; ok { t.Error("bad-ext should have been skipped") } } func TestLoader_BadManifestIsNonFatal(t *testing.T) { root := t.TempDir() writeManifest(t, root, "good-ext", "native", "", "") // Write a malformed manifest. bad := filepath.Join(root, "bad-ext") if err := os.MkdirAll(bad, 0755); err != nil { t.Fatal(err) } if err := os.WriteFile(filepath.Join(bad, "extension.json"), []byte("not json"), 0644); err != nil { t.Fatal(err) } l := extruntime.NewLoader(extruntime.NewNative()) defer l.Close() mods, err := l.LoadDir(context.Background(), root) if err != nil { t.Fatalf("LoadDir should not fail on bad manifest: %v", err) } if _, ok := mods["good-ext"]; !ok { t.Error("good-ext should have loaded") } if len(mods) != 1 { t.Errorf("only good-ext should have loaded, got %d", len(mods)) } } func TestLoader_MissingDir(t *testing.T) { l := extruntime.NewLoader(extruntime.NewNative()) defer l.Close() mods, err := l.LoadDir(context.Background(), filepath.Join(t.TempDir(), "does-not-exist")) if err != nil { t.Fatalf("LoadDir on missing dir should not error: %v", err) } if len(mods) != 0 { t.Errorf("expected empty map, got %d entries", len(mods)) } } func TestLoader_SkipsNonExtensionDirs(t *testing.T) { root := t.TempDir() writeManifest(t, root, "real-ext", "native", "", "") // A subdir without extension.json — should be silently skipped. if err := os.MkdirAll(filepath.Join(root, "node_modules"), 0755); err != nil { t.Fatal(err) } if err := os.WriteFile(filepath.Join(root, "README.md"), []byte("hi"), 0644); err != nil { t.Fatal(err) } l := extruntime.NewLoader(extruntime.NewNative()) defer l.Close() mods, err := l.LoadDir(context.Background(), root) if err != nil { t.Fatalf("LoadDir: %v", err) } if len(mods) != 1 { t.Errorf("want 1 module, got %d", len(mods)) } } func TestLoader_RuntimeLoadErrorIsNonFatal(t *testing.T) { root := t.TempDir() writeManifest(t, root, "good-ext", "native", "", "") writeManifest(t, root, "failing-ext", "flaky", "", "") flaky := &fakeRuntime{name: "flaky", loadErr: os.ErrPermission} l := extruntime.NewLoader(extruntime.NewNative(), flaky) defer l.Close() mods, err := l.LoadDir(context.Background(), root) if err != nil { t.Fatalf("LoadDir: %v", err) } if _, ok := mods["good-ext"]; !ok { t.Error("good-ext should have loaded") } if _, ok := mods["failing-ext"]; ok { t.Error("failing-ext should have been skipped after runtime load error") } } @B:xSpackage extruntime import ( "encoding/json" "fmt" "os" "path/filepath" ) // LoadManifest reads extension.json from dir and returns the parsed manifest. // JSON over TOML — base has zero TOML deps and the manifest is small enough // that the JSON ergonomics tax is irrelevant. func LoadManifest(dir string) (*Manifest, error) { p := filepath.Join(dir, "extension.json") data, err := os.ReadFile(p) if err != nil { if os.IsNotExist(err) { return nil, fmt.Errorf("%w: %s", ErrNoManifest, p) } return nil, fmt.Errorf("read manifest %s: %w", p, err) } var m Manifest if err := json.Unmarshal(data, &m); err != nil { return nil, fmt.Errorf("%w: %s: %v", ErrBadManifest, p, err) } if m.Name == "" { return nil, fmt.Errorf("%w: %s: name is required", ErrBadManifest, p) } if m.Runtime == "" { return nil, fmt.Errorf("%w: %s: runtime is required (native|goja|wazero|v8go)", ErrBadManifest, p) } return &m, nil } .x :". The native // runtime resolves Invoke() against this map. Tests and benchmarks // register fixtures here; production code links extensions in at build // time the same way. var NativeRegistry = struct { mu sync.RWMutex m map[string]NativeFunc }{m: map[string]NativeFunc{}} // RegisterNative adds a native function to the registry. Safe to call // from init() in extension packages. func RegisterNative(ext, fn string, f NativeFunc) { NativeRegistry.mu.Lock() defer NativeRegistry.mu.Unlock() NativeRegistry.m[ext+":"+fn] = f } // NewNative returns a native Go runtime. Code is linked into the binary // at compile time; the runtime just looks functions up. func NewNative() Runtime { return &nativeRuntime{} } type nativeRuntime struct{} func (*nativeRuntime) Name() string { return "native" } func (*nativeRuntime) Capabilities() Capabilities { return Capabilities{ AcceptsLanguages: []string{"go"}, HardSandbox: false, Cgo: false, SupportsAbort: false, } } func (*nativeRuntime) Load(ctx context.Context, dir string) (Module, error) { m, err := LoadManifest(dir) if err != nil { return nil, err } if m.Runtime != "native" { return nil, fmt.Errorf("%w: native runtime cannot load %q runtime", ErrUnsupported, m.Runtime) } return &nativeModule{name: m.Name, exports: m.Exports}, nil } func (*nativeRuntime) Close() error { return nil } type nativeModule struct { name string exports []string closed bool mu sync.Mutex } func (m *nativeModule) Name() string { return m.name } func (m *nativeModule) Runtime() string { return "native" } func (m *nativeModule) Exports() []string { return m.exports } func (m *nativeModule) Invoke(ctx context.Context, fn string, payload []byte) ([]byte, error) { m.mu.Lock() if m.closed { m.mu.Unlock() return nil, ErrClosed } m.mu.Unlock() NativeRegistry.mu.RLock() f, ok := NativeRegistry.m[m.name+":"+fn] NativeRegistry.mu.RUnlock() if !ok { return nil, fmt.Errorf("%w: %s:%s", ErrUnknownFn, m.name, fn) } return f(ctx, payload) } func (m *nativeModule) Close() error { m.mu.Lock() m.closed = true m.mu.Unlock() return nil } yM x340031QHIM.+Kg}syW^qli!DeZiB痎:X[|gӡ2RrR.-9mwf2S$j*B%&~;,ԗ?ZMKC沧xUMO@=ۿbʩ"8FH 5m/Uemk& {gI ^g3ۙ9+%38U%IR4nrU .QL + 41WWe %/tqL2"4S0Ο8tƪ i'~$'IM֥+ihSm&J8 GNY]Uq'45H~4"R0`gݡ2ܓ{1>WNhȇ'Cf >8?N $r"UmA&Ɍ<8d+$ˬ3GmB}n~n GgƙdT1c +y^V\$d_BUwqcr(<]8~Ʉ\m X3NU[p xoBf:>sy/ῖ  )\8X%I3vsP/ÈcyJ=mTQNz鹜p6.FL^NcIʄ h}[&ۄ]C{1.ZUg_oCklDjE΀~U;`2bsp4 R^*[=m;/Vsq;Ǘ-^vUͳk;6_P+#lǦrd5kE|0^km(j]q_Εr6B`S۶rߋ :CԦP<*Z Tle?E * jbT* - YI?խ4'Sjwν֝kT\ҡ:…ڧ ] PކօL^۾\ڂ` u5@D) s*;h35>#c?kJBԼ -0ŗ!䆦s%оRL0BցV-ɛELc.\Z x%_Od"q1_ʈ#&Bh )w^ _=:zgX2HVoTeCR(↫kn?Te9ïE M5nf/L\n 0 { _ = p.app.Delete(records[0]) } return e.JSON(http.StatusOK, map[string]string{"status": "deleted"}) } // handleInvokeFunction handles POST /api/functions/{name}/invoke func (p *plugin) handleInvokeFunction(e *core.RequestEvent) error { if e.Auth == nil { return e.UnauthorizedError("authentication required", nil) } name := e.Request.PathValue("name") tenantSlug := e.Auth.GetString("tenantSlug") if tenantSlug == "" { tenantSlug = "default" } qualifiedName := fmt.Sprintf("t-%s-%s", tenantSlug, name) payload, err := io.ReadAll(e.Request.Body) if err != nil { return e.BadRequestError("failed to read request body", err) } async := e.Request.URL.Query().Get("async") == "true" body, statusCode, err := p.invokeFunction(qualifiedName, payload, async) if err != nil { return e.InternalServerError("failed to invoke function", err) } if async { return e.JSON(http.StatusAccepted, map[string]string{"status": "queued"}) } e.Response.Header().Set("Content-Type", "application/json") e.Response.WriteHeader(statusCode) _, _ = e.Response.Write(body) return nil } // handleGetLogs handles GET /api/functions/{name}/logs func (p *plugin) handleGetLogs(e *core.RequestEvent) error { if e.Auth == nil { return e.UnauthorizedError("authentication required", nil) } name := e.Request.PathValue("name") tenantSlug := e.Auth.GetString("tenantSlug") if tenantSlug == "" { tenantSlug = "default" } qualifiedName := fmt.Sprintf("t-%s-%s", tenantSlug, name) // OpenFaaS CE does not have a native logs endpoint. // Return kubectl command for now; wire to K8s API in future. return e.JSON(http.StatusOK, map[string]any{ "name": name, "message": "Logs available via: kubectl logs -l faas_function=" + qualifiedName + " -n " + p.config.FunctionNamespace, }) } IIѻWx;ivlBD?zLeWIs6 dNܼw.9PLWH,d,Spxipackage functions import ( "bytes" "encoding/json" "fmt" "io" "net/http" ) // OpenFaaSFunction represents a function in OpenFaaS. type OpenFaaSFunction struct { Name string `json:"name"` Image string `json:"image"` Namespace string `json:"namespace,omitempty"` EnvProcess string `json:"envProcess,omitempty"` EnvVars map[string]string `json:"envVars,omitempty"` Labels map[string]string `json:"labels,omitempty"` Annotations map[string]string `json:"annotations,omitempty"` Replicas int `json:"replicas,omitempty"` InvocationCount int `json:"invocationCount,omitempty"` AvailableReplicas int `json:"availableReplicas,omitempty"` } // DeployRequest is the request body for deploying a function. type DeployRequest struct { Service string `json:"service"` Image string `json:"image"` Namespace string `json:"namespace,omitempty"` EnvProcess string `json:"envProcess,omitempty"` EnvVars map[string]string `json:"envVars,omitempty"` Labels map[string]string `json:"labels,omitempty"` Annotations map[string]string `json:"annotations,omitempty"` Limits *FunctionLimits `json:"limits,omitempty"` Requests *FunctionLimits `json:"requests,omitempty"` } // FunctionLimits represents resource limits. type FunctionLimits struct { Memory string `json:"memory,omitempty"` CPU string `json:"cpu,omitempty"` } // deployFunction deploys or updates a function via the OpenFaaS gateway. func (p *plugin) deployFunction(req DeployRequest) error { body, err := json.Marshal(req) if err != nil { return fmt.Errorf("functions: marshal deploy request: %w", err) } httpReq, err := http.NewRequest(http.MethodPost, p.config.GatewayURL+"/system/functions", bytes.NewReader(body)) if err != nil { return fmt.Errorf("functions: create deploy request: %w", err) } httpReq.Header.Set("Content-Type", "application/json") resp, err := p.client.Do(httpReq) if err != nil { return fmt.Errorf("functions: deploy request failed: %w", err) } defer resp.Body.Close() // Function already exists — update it if resp.StatusCode == http.StatusConflict { httpReq, err = http.NewRequest(http.MethodPut, p.config.GatewayURL+"/system/functions", bytes.NewReader(body)) if err != nil { return fmt.Errorf("functions: create update request: %w", err) } httpReq.Header.Set("Content-Type", "application/json") resp, err = p.client.Do(httpReq) if err != nil { return fmt.Errorf("functions: update request failed: %w", err) } defer resp.Body.Close() } if resp.StatusCode >= 300 { respBody, _ := io.ReadAll(resp.Body) return fmt.Errorf("functions: deploy failed (status %d): %s", resp.StatusCode, string(respBody)) } return nil } // listFunctions lists all functions from the OpenFaaS gateway. func (p *plugin) listFunctions(namespace string) ([]OpenFaaSFunction, error) { url := p.config.GatewayURL + "/system/functions" if namespace != "" { url += "?namespace=" + namespace } resp, err := p.client.Get(url) if err != nil { return nil, fmt.Errorf("functions: list request failed: %w", err) } defer resp.Body.Close() if resp.StatusCode >= 300 { respBody, _ := io.ReadAll(resp.Body) return nil, fmt.Errorf("functions: list failed (status %d): %s", resp.StatusCode, string(respBody)) } var functions []OpenFaaSFunction if err := json.NewDecoder(resp.Body).Decode(&functions); err != nil { return nil, fmt.Errorf("functions: decode response: %w", err) } return functions, nil } // getFunction gets details about a specific function. func (p *plugin) getFunction(name, namespace string) (*OpenFaaSFunction, error) { url := fmt.Sprintf("%s/system/function/%s", p.config.GatewayURL, name) if namespace != "" { url += "?namespace=" + namespace } resp, err := p.client.Get(url) if err != nil { return nil, fmt.Errorf("functions: get request failed: %w", err) } defer resp.Body.Close() if resp.StatusCode == http.StatusNotFound { return nil, nil } if resp.StatusCode >= 300 { respBody, _ := io.ReadAll(resp.Body) return nil, fmt.Errorf("functions: get failed (status %d): %s", resp.StatusCode, string(respBody)) } var fn OpenFaaSFunction if err := json.NewDecoder(resp.Body).Decode(&fn); err != nil { return nil, fmt.Errorf("functions: decode response: %w", err) } return &fn, nil } // deleteFunction removes a function from OpenFaaS. func (p *plugin) deleteFunction(name, namespace string) error { body, _ := json.Marshal(map[string]string{ "functionName": name, "namespace": namespace, }) req, err := http.NewRequest(http.MethodDelete, p.config.GatewayURL+"/system/functions", bytes.NewReader(body)) if err != nil { return fmt.Errorf("functions: create delete request: %w", err) } req.Header.Set("Content-Type", "application/json") resp, err := p.client.Do(req) if err != nil { return fmt.Errorf("functions: delete request failed: %w", err) } defer resp.Body.Close() if resp.StatusCode >= 300 { respBody, _ := io.ReadAll(resp.Body) return fmt.Errorf("functions: delete failed (status %d): %s", resp.StatusCode, string(respBody)) } return nil } // invokeFunction invokes a function and returns the response body, status code, and error. func (p *plugin) invokeFunction(name string, payload []byte, async bool) ([]byte, int, error) { url := p.config.GatewayURL + "/function/" + name if async { url = p.config.GatewayURL + "/async-function/" + name } resp, err := p.client.Post(url, "application/json", bytes.NewReader(payload)) if err != nil { return nil, 0, fmt.Errorf("functions: invoke request failed: %w", err) } defer resp.Body.Close() body, err := io.ReadAll(resp.Body) if err != nil { return nil, resp.StatusCode, fmt.Errorf("functions: read response: %w", err) } return body, resp.StatusCode, nil } Y x[100644 ghupdate.go!3Qv~c`n3"C100644 ghupdate_test.go̎*⻑s:})|100644 release.go,O8%ZY/)tak100644 release_test.goBڨ;M,Lx^}Ufv@aWs#dL^{+d)/R !^\\؏f!c%V26JBPTVI4.7qlh?GOth/K{t~@<an [5#KA$jʺhuC(S&Zysä"m(MLJDfFZ!܈x%s"iEUVFye*.IK,:WFB"R8((.-و**+i{7uqy3Z}&_ǥȅv_h9Aed62IR4<D`*~Y-!Dޒ !nGJbo^#޽>!"٦4$@ f¡{9+j8'IHز`6E1ZƮo o+;105A0eZR!؟xS:> }ڏD:i}ۼ[=]+K\`KNJXąX g `4^Ty,5HPWėa).:m> HQP˙K#|<͈nRDd}J{~^tIʂ-KBہ!U1!zP/¬[b>%وEF"E8; >r69gn)d>;5*j JY\pT`-Vg vrge[}U0 lu%L"dBsmNip?u} 6\[g_KDtl!Z 1iVb5EH=[:)p/+`[pTJϳ]I.˕ӭZ1UAڇÄ!Ҋv$[!W*a뚵3)f> mNKu0e: ½,ѳ5/Ka!cA&MDńOr]km 0HdPXRe/؛ +0k":ЌQ#t #Noޜ6b RuuuJJ"M˜nPPm'UjtNSyk>D}7@ZZ`"kZ:ЂGNSV9ҽath.H- `PL5Gl4b-U:m^ ҏ%SX7/eriIt]4mG_99?7lpb')%ƍ|ܓԞZbɫ^[_8pg5h{.2ȄQe2+ /ྜྷq2k`=sy n.o}0ZNkx9PMwɩu7FȭQذ[O :ZWzPT4.Mo#^ۙA3DCA^n }93Ljjd;D߼9lގN^8xF"mUk)ML2 lZBuBX EK:"] >|Hࢇ6M zx/*tv)~1i17nl^Gã,[Xk0QrO9Np/5l3.n[aαJ`W/FbFW:MD`˪,Q(u>d_d]_.v=/Y몥 ;@m,./\?Y!ͺ n4q7o@@7udxx=uݎ3tL7]^B¨_2Gnn_bME-ɔ NuE¶Y˸|؋I-ί}v8f]N"B&ZOaCxB憄B˧ dȱ+X+TD'J<>_?zT'R D nx~[Wo5'K^t Y}-t]ؕƒn/ ʹn׆-&l?/,tMP=K+-;{(:5'؄n&y|Riva4*k?1@Lxyu`33rkQK\2%apN6}}SVOXKHs-#쮰- &qXq>66:/b MBQn:|& a;}hnޡt߷I7[s- 솔; N:LG|鷙R^ӟ];]7 ؜P-z"ezs>ɲ?G)Sf_3Ԉ>PNk+."7̫RؕϩPM;eܯ;!`EB.:6'MOTY,_Q_r&*ٽ\}otj7/|b/>rx;poCcNjcfYbUf~qiQYj~͚Lo6e=¼Yk#qZbNq*'(X*A9eV9}SS&ՂIjlT 1: jݛe{' *EAFV y8d &R,81dF_2GۘAK2ҁz&ϖU.-1-D/(Y1y`=: \wN0Yo'xoCe0Mƞ_\ZS[ыL-(-(јWM!-18u3vvƒɻD0m.#-13'5Eh2}$mx[wwFļLk%kpf1Mcۼy9O^!~KkqKk0eV;,4{+ZdP|4FXIH+mZil JHި V.vEjSVʌ-\[Ű'ɤ -Xd7"qYS ʒc{JO O1OgYtNyO_4O{YG}KVzս>tEV9@6Gh商jd/IJF L'8(4[N`pyWc2 X:zo*> +>t/6ڪ;Y*m(*a1nicG9x}N0EW Y%J]PMTX!;8؎ԧ('m4aS@Bi4vFsmJu 4"Gdڗ~I-X}XZ%^AmPzXkE*Exqi/DKhK{>nhuBGhhSs7w#PPWoL+F;]pt{z`qNq2ʧ}]oD0fU傮_J% u Xk rRDgzZ&p;e5unf(" LgS`C|0#PGnP5h2Ʌ;YF 9l-GtNXXz!xuj0 ShBS- -rj&Vn%ڋ@~>INUFӊs{pǎ@zm-87}[nlAqc[=7ƞK\28sA.ǖŸ/mvI@XsmaK_\\oW|q(Lsr.].ͿEgYsKhme$7Tcb}rXr%L>Dgih VMqOCiiVD'cy8 x340031QO)IKgWt b߼oyjZgQTTW VU>ڌwT^蒽챀TU%% otsҷ>ώ֙vB%dB,Rep;Kxv5v?{xYn[zNXڿjW\| bߡ@8+q%E2\RC $fvIQJ5.9ܝ|)bVV^mjJZGUۅˌ]bY{p8dʪ)4V^7t'UNn䔙͕׳2oV햏ٌ 5&YMS˴ٔ^Ԟyo7&Ϧf]S-4 Ju ʓg(}yb _+^$꒾ydA_TCe Qx1NqJϱ^حۈ>sWUnjAWdh^* +4,bHv,yi>|,՞7!e3h/Xݓ㛼Nv 簧RW|NuV*UܹFAI=kT8?&٠vx_(k0E-gޗ> $UHB`t6z/3Axj2&^9S9!c޾" "u"0ܑz T )ҦnwN"AjKz x($ @KIP*Zx 'u$;H 6< ZQ!=ϽSX^ĽxU\Ж7> 錔[ gmz>#O$Tj!diWl4.zD_®UQsld0-!ajiۇtxBW5 u]$57pPllå{p.7Bi<@u|]HZ7A9>poFmA.({4'E0.V5p6c!~z@/"#@*Q-bYJ%-vs*L6OٺkԔ &|Yq,ׅЏ PnNՋuV ϜCʭnZg"YY9”Ճqt[/%hX~C {P".4;L" ('d2usKf"<.R4wew}>Biq<"@>K :ʀLz<ɦhP&߆0=UXfw!ѷ5fA3TmנQ j j S++&1 Z!5W$'QJ-+X\,v]& jG]Q(&ML O92p%bYʵM1HKG<+wQ.4Zkq=*X' ٛ{ 141};0╪^_~ZcKXv 菽]1m.mqa6&`fe\x{xy -DHPtT;T7CSo4M Z[Ag 䇨J&P%d7H)f&ofNQNh$%G"RW2]MSb' }(Rj3( Ig`%C"ww]A0eξ<΋?&|ܒ= 5J/ݗm~>zw"2OEQCawWl/6錃ُN,* $(և|xw> lR8A*x€`w^5E5⨌KPݢiG.!Eےu׈E)/Qµ  jmdS*j=n`ø>T,qky>BXL n(&@Rk0H GS6A3]9XM61jmZ%Kd0\1 ]{"||SlsZ=Ѡ&̀I1_aL”?LQXQ&21'@V r2r "d=XIZnAiOg^sp0\`"9!]2*rFVөk_Uʆ_NkUP#S [l  Ӝ;Gvp\xSj-S Lrm؜0~nw l nfer0v9Z\A%qe7c*/cF'[W u)HbN + Pcp{xyCrUcL  XH)&ܺp6#TZUTs؈H6ϵm22CwտPŅxP GSQ7Ow2,"G:F<qNhprZpPTύ.s9̛fˡWч2̿hqg!ذE_9? {A].ⰈihsP_439J%'j q<27zQ)&}xqn/2ɜ@?fx{dd2gUbnAQ~If-. fyxVao7l^z>/) =bjM[+E1G/7]Yi5H"g7op{U>FSvCRmѴEқ*]эڪeL(t.-4iLZwG_uM)yZ9ևԯʟQJF9Sh0ǧ4d"u2!*s7WrҮ1Z}Jz ,xSCq3**^"aOS]6׊sIŀ!C8rsBL;5 T=?/8ukfrqjyKU4q[BÂr5VJ|O:rkO}&nhc׎nLD(ɐ:̃r%kQ XIkCaMN;#'`ؽ3f8Z#LvU}iS*x? \'\Vֻ& `cD&4iosȑT@x؈j`]}HENe ]!rΡ9Pqf-4>; rydItUmK%i#I| g;@$VeC3J/a#vV%WN78FX^S1j?SlZMF'cAZoGBL+AFWŨ#'/ I亜TSӖ7|,^ihv2"3~sN1c?7#0~+.7-,ybo|4¿IH-pC]'G&y8槩܀}r\dZT+c1jс y 3(ZGz1øO.C}P9B)r;U84[ u'bH`/Hc<>@N:ڣܞ#н &9N!gOo'ӥjX0>gӇ,5^%ߜ1?`2SZYu~i;l|TkL6!YԾb5egJ+-w){չ.YV}&L5[+bڿL<~YȰ UY /KZp^j@KAIFGx>a x= package starkvm import ( "context" "encoding/json" "os" "path/filepath" "testing" "time" "github.com/hanzoai/base/plugins/extruntime" ) // writeExt writes a tiny manifest+source pair into a temp dir and // returns the directory path. Mirrors plugins/gojavm/runtime_test.go's // helper exactly so the tests read 1:1 across runtimes. func writeExt(t *testing.T, name, src string) string { t.Helper() dir := t.TempDir() manifest := extruntime.Manifest{ Name: name, Version: "0.0.1", Runtime: "starlark", Module: "validate.star", Exports: []string{"fn"}, } mb, err := json.Marshal(manifest) if err != nil { t.Fatalf("marshal manifest: %v", err) } if err := os.WriteFile(filepath.Join(dir, "extension.json"), mb, 0o644); err != nil { t.Fatalf("write manifest: %v", err) } if err := os.WriteFile(filepath.Join(dir, "validate.star"), []byte(src), 0o644); err != nil { t.Fatalf("write src: %v", err) } return dir } func TestRuntime_NameAndCaps(t *testing.T) { r := NewRuntime() defer r.Close() if r.Name() != "starlark" { t.Fatalf("Name = %q, want starlark", r.Name()) } caps := r.Capabilities() if len(caps.AcceptsLanguages) != 1 || caps.AcceptsLanguages[0] != "starlark" { t.Fatalf("AcceptsLanguages = %v, want [starlark]", caps.AcceptsLanguages) } if caps.HardSandbox { t.Fatal("HardSandbox should be false for starlark (shares Go heap)") } if caps.Cgo { t.Fatal("Cgo should be false for starlark") } if !caps.SupportsAbort { t.Fatal("SupportsAbort should be true (thread.Cancel is per-opcode)") } } func TestRuntime_LoadRejectsWrongRuntime(t *testing.T) { dir := t.TempDir() if err := os.WriteFile(filepath.Join(dir, "extension.json"), []byte(`{"name":"x","runtime":"goja","module":"x.js"}`), 0o644); err != nil { t.Fatal(err) } r := NewRuntime() defer r.Close() if _, err := r.Load(context.Background(), dir); err == nil { t.Fatal("expected error loading goja manifest in starlark runtime") } } func TestModule_InvokeRoundtrip(t *testing.T) { dir := writeExt(t, "echo", ` def fn(p): return {"got": p, "doubled": p["n"] * 2} `) r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } defer m.Close() if m.Name() != "echo" || m.Runtime() != "starlark" { t.Fatalf("Name/Runtime: %s/%s", m.Name(), m.Runtime()) } out, err := m.Invoke(context.Background(), "fn", []byte(`{"n":21}`)) if err != nil { t.Fatalf("Invoke: %v", err) } var got struct { Got map[string]any `json:"got"` Doubled int `json:"doubled"` } if err := json.Unmarshal(out, &got); err != nil { t.Fatalf("unmarshal result %q: %v", out, err) } if got.Doubled != 42 { t.Fatalf("doubled = %d, want 42", got.Doubled) } if int(got.Got["n"].(float64)) != 21 { t.Fatalf("got.n = %v, want 21", got.Got["n"]) } } func TestModule_InvokeUnknownFn(t *testing.T) { dir := writeExt(t, "u", `def fn(p): return 1`) r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } defer m.Close() _, err = m.Invoke(context.Background(), "missing", nil) if err == nil { t.Fatal("expected ErrUnknownFn") } } func TestModule_InvokeAfterClose(t *testing.T) { dir := writeExt(t, "c", `def fn(p): return 1`) r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } if err := m.Close(); err != nil { t.Fatalf("Close: %v", err) } if _, err := m.Invoke(context.Background(), "fn", nil); err == nil { t.Fatal("Invoke after Close should fail") } } func TestModule_InvokeContextCancel(t *testing.T) { // A while(true) that does cheap arithmetic. Starlark checks the // cancel flag between opcodes; the arithmetic generates plenty // of opcodes per iteration so cancellation lands promptly. src := ` def fn(p): x = 0 while True: x = x + 1 return x ` dir := writeExt(t, "loop", src) r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } defer m.Close() ctx, cancel := context.WithTimeout(context.Background(), 50*time.Millisecond) defer cancel() start := time.Now() _, err = m.Invoke(ctx, "fn", []byte(`{}`)) elapsed := time.Since(start) if err == nil { t.Fatal("expected context error from infinite loop") } if elapsed > 2*time.Second { t.Fatalf("cancel took too long: %v", elapsed) } } func TestModule_PoolReuseAcrossInvocations(t *testing.T) { // Re-running Init on the same thread is wasted work. We can't // observe it directly (no global state since we freeze globals), // but we CAN observe that 1000 fast invocations on the same // runtime complete without errors and with stable latency. src := `def fn(p): return {"sum": p["a"] + p["b"]}` dir := writeExt(t, "pool", src) r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } defer m.Close() for i := 0; i < 1000; i++ { out, err := m.Invoke(context.Background(), "fn", []byte(`{"a":2,"b":3}`)) if err != nil { t.Fatalf("Invoke[%d]: %v", i, err) } var got struct { Sum int `json:"sum"` } if err := json.Unmarshal(out, &got); err != nil { t.Fatalf("unmarshal[%d] %q: %v", i, out, err) } if got.Sum != 5 { t.Fatalf("sum[%d] = %d, want 5", i, got.Sum) } } } func TestModule_ValidateFixtureSemantics(t *testing.T) { // Exercise the real fixture (the one extbench loads) end-to-end // so we catch any drift between fixture script and runtime ABI. src := ` def validate(input): if input == None or type(input) != "dict": return {"ok": False, "error": "input must be an object"} email = input.get("email") age = input.get("age") if type(email) != "string" or len(email) == 0: return {"ok": False, "error": "email required"} if type(age) != "int" or age < 0 or age > 150: return {"ok": False, "error": "age out of range"} normalized = email.strip().lower() at = normalized.find("@") if at <= 0 or at == len(normalized) - 1: return {"ok": False, "error": "email shape"} domain = normalized[at + 1:] if domain.find(".") < 0: return {"ok": False, "error": "email domain"} return {"ok": True, "email": normalized, "age": age} ` // Use the canonical name `validate` from the runtime fixture so // this test exercises the same export resolution path the bench // uses. dir := t.TempDir() mb, _ := json.Marshal(extruntime.Manifest{ Name: "validate-email", Runtime: "starlark", Module: "validate.star", Exports: []string{"validate"}, }) if err := os.WriteFile(filepath.Join(dir, "extension.json"), mb, 0o644); err != nil { t.Fatal(err) } if err := os.WriteFile(filepath.Join(dir, "validate.star"), []byte(src), 0o644); err != nil { t.Fatal(err) } r := NewRuntime() defer r.Close() m, err := r.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } defer m.Close() cases := []struct { name string in string wantOk bool wantErr string wantEm string }{ {"happy", `{"email":"Foo@Example.COM ","age":25}`, true, "", "foo@example.com"}, {"old", `{"email":"a@b.c","age":200}`, false, "age out of range", ""}, {"empty-email", `{"email":"","age":25}`, false, "email required", ""}, {"no-at", `{"email":"bad","age":25}`, false, "email shape", ""}, {"no-dot", `{"email":"a@b","age":25}`, false, "email domain", ""}, } for _, tc := range cases { tc := tc t.Run(tc.name, func(t *testing.T) { out, err := m.Invoke(context.Background(), "validate", []byte(tc.in)) if err != nil { t.Fatalf("Invoke: %v", err) } var got map[string]any if err := json.Unmarshal(out, &got); err != nil { t.Fatalf("unmarshal %q: %v", out, err) } if got["ok"].(bool) != tc.wantOk { t.Fatalf("ok = %v, want %v (full=%s)", got["ok"], tc.wantOk, out) } if tc.wantOk && got["email"].(string) != tc.wantEm { t.Fatalf("email = %v, want %v", got["email"], tc.wantEm) } if !tc.wantOk && got["error"].(string) != tc.wantErr { t.Fatalf("error = %v, want %v", got["error"], tc.wantErr) } }) } } sKxUAoEVZ7tM JAcNBUܦ T RR8 wړg3 8E↪8p3I!Yٷӛjgso6B[n6f9* F0;`Pha&{20kO s 3ސpU.v6{S/hQ5 ;2)2lD\$دoi{ l~9~~!TÏZebzY+ߖ}FI {^jSo?xuCT PuT/3|UjMxvQɨu}Q#{Lw8K(SNP0veo3b=" XR <PmiW!E+Äu5ػFf%7N?}є5|~VyjcVuӯ3SÌR_ceDБv! ;a@*!M8z4^ФRdH92q9p.X&QK!ls';DZO%A= HXEa d^F/FJvr` L(+DCcVM{+9׆*22e =!XpMRob:zSLj6`BA֠AKi <ƈYZiJZSxvP~(\~7eSH*/-ѮѬl$qI3YTQq].^~?RfnI`H,HBFħBcRhns^(5p2^+b?50iMI&qWoMӊ?=o]v%2')֒+gD,h+ك7)Evě*Q7[R48r KA HT_@eEf#л9B0[̰,-Gb.%Q|*&+sOE*>+i_xXr}DکڇKIEJKZL6I5Q|D!/iËt>t+[0]35S68^!>/'sUK V.}˟J/ /YQf"^Mu&b"ZtROFL89in{o;U#|0LH潤JzYzG'qc4MfJn'IP[ F83:l UҸM\mRXd4 ).Gq1ijD)EM|Gߐ6a#ohM!/Bz< WRejy'뼠w!z{1f(lɷ\U0ʛv6!ZXȣDN;6ID痆շ?I*(>}/.0'os&q< ZCH&CÈծ*I lk( V?J G .BPuH7mJ3ȗD"TȖfMRR_Kv*>Pƿ,o֬`$b6PIY(A(TWՆd|]#w1ۂ1;NSeMBJJr]ПqJ+9I- d nRQu$1fn{O2\rJ'VG2CQGЋBt> 56%SSD91 !Q;4>7Q1@>8*e\:uʦy?;&p[:=" gQ::tGt{(\]ץV\36yr7HH#QCXDan}x~L&n3<#mӚN}g}.:9H/qBkBDa^&ݍ$n;:T\ټ,xde0w^_ z/qǿ"Z4v˹N EB oldIc.'rH+co1,Òv)#as-҆K2~#a6TdCz{du{Hi8Žyqy*|Zdܸг[mt^#jLb4| o'=YM]z2c_=19Pn;-r7Cbc ~9R-Y!26Ըv~xD#,ca_=R؞)XTΔ h_3dgϮt1o x340031QHKg8Zw~܃ &s ! K@y˴8Pk&c~(KRK@*_m("uց{sMx6?-AxWn9]K_q[L)-plx$7A`PUH!YՍlK\Ttc [y{/5у(>J;弴j)Jig[S(-^XZ8Iil_7zR>wSOVd [*nyN*5B6?kvQrB5}X ?֚=Lki/$0͆~Vyߌpm:q"0V!︢Pw GZV⠐="t@b;p]rpY~'*O(lI{\0]_ lZ*Iu UHL$Y^+ 4A,q,a,SY#( LO0Ƀyp)jSߺΰzoQfq'lo-xjrmP4'oWJk!9}UdO,pTZDhA!uOF'$],Ž\k4ܫk^~f0@Kp ՟u=X6/=qCQ(W_pHnXZ/"Gc^߳U=pш^=#ȁFhѼ|0N- -b9*_Tk"L`_0}bŽ~[d.҆A)}4!i-λh Wr̃{wwsk&Oُ͂ɇ qڀ&~2JakUs2ZcQ% )hB#l5l='[~W$LV|e,  hR~vј8*P&jh/}eЭR[C'`<(8fofKӢF{kPТ÷ձھ-MZ)™ozݳ`YHZq?ȞroSd6&!>H؁ˤ?aӀz*|Ft/B|8jibU|￫4 *ӿPqC)KS^QQ+pp꒫+F%}OR;t~kil=QkW|N Oʍf0!l|%=h ̖V %mSVNC;ScCIxA!i|GrB!unSlc9:VV B2(*G=8}eT*:4Ir@"uPG(UYr)@8QZa}O"{P6KC{zC$L-QP۹P$l[vw pQoKOL/6IP;_DqЮC7C5rMA;Y T[7J'-WtmS+|Ax<>_{:"˓؆ʌzj2>ZE5Lc]κ8 yUcI|/6/_$1mxXnF.d*.Z/&@I8 ghFk؇'',-șىF%mDNWh2tig;ū,3r}OK^Xmݺ[J{vo+@}'rVm4&Ek4, VQE''teUٻJYY(7TJC /gOwr ѵҒghUņ '8UUI& h:#.e*YCDNXҷ*gq8/2D;U2 aZID}`j%2Iw$Gc-@̐.%:$ +l~6,/$c%TJ7|J߲DK)|) L& u+HF6 R@BCS8 JTn(U&g 2 XĜrg#t5#NrOo@2geЍ4v{x)=k 筒Be_h[@/2:o]l#ʵC3n!Q*] xpǍ8rr%¦tp+5L|/<}KJ1Kv m/\QLƦWTh S5 N0vnbϰuWfvl޹.WjXem^#S|&ްlk)9X&uUzVPUޜ!LuPdi['pPYKop=aѤB0c?|'8 h68 ibJgľA6$-[A o]P ȞiD_r6Cl3E]9v(@f=CI(~2<0#YUZP+t(؛^bF(s[iZT#$w(~{l>iƖb+b6xVEDˇHG7@(}9f@޺ZBqq$zE,nҠW\HާI}:X43 Á>*~ǻ)Fܤ:o[.x'~q\G( k;6O"u+hm/, f/άf>s4J 5I8::@aX3פw>tu0vy/k6 c=TτrF,ڞȷtFUob5/':&:ZbgBJA{Sq2Hni kD坅M`aDG浪F̊BZElS5yeIyR'l$:kbh*5jSs&coBBk K={ (pv (pp.~` F.q< rb %”Ξ~3FB>^XέG/_1Тh*Zov⦻QC*}u)̩AQc oѐ p-21.3'ZF_i -\Q.1Ox Q! {KahoJy7G@ڏ>Khtvn֬CESےl8#I`)[Ůf'PF?u;`Y9t{_~ -U}k#Uv"T^1&~\+0mZs8t1MLᘎ~M[XyU-o?<0y ovC讙BSIL;=vv#Y> '^yYe S%9];C&

n,Fhd|\HZL{l:Se-FtS˪?ƪu?e1ViV\l}TA eJuNت]zkR3*wK^1%d<%RrLUy6f*%TOIu6|4Vf?bB}IdYԙ*t?P[3{?vx/~jR֣[zy3eJcUʕU9] 4 k:j9GR lUޣ Cާ@ TrEU;LGոf(yf&߶IUwgQ z[[zi%*L}SYOdnEP9J29ؙy1PEn\%,ST@MsR%.hM,6Χbd")[Pju-,MαMy@ Vu8x?rj@zS[@gl`,Ā )|Ԑ؎ f_'6smo]G\f>AAX`7dETn 1pc tV3 U%S†l|x>aB)6cd@KQO$ 1:bܛe#'y>Ep7E\Tb0&P Y^I{Q<]B1vI1lSK+EU'\3>-+)E!SX~FԳyD{8]5͉0Wi_o|>%E \o7;I, 4Y ʠH2F b1$N$iv&ڊDaz٩\!mO\h ..wöIR`͍HxpPD`_qy "EJYAv05,:&)n;/? Ɉ|L }:O2b$G!k#弈&)4 TeH( mbntGFmaXR]4wclDrfQI  D1 T WDgrÚ i& ?X،qj M{{FmϕoS3mӬo*[F |?=h RNJ5:#{׳ʉ =ͥFa-C+e`P?Mѩqzi%yע Ytʦ!Ņ,tVf8Gg6q0o20΢CvԧoASCtӶŦYRd㨓8+:ч!m$y}ϽwXN.0Oa*BXQSKoc"sp;EW rm-TW @%K5,ftPd`n N >_f9 rtھo+ˆ/' Wϧ@ͲxJN{ YԁIcDfu>TQn)¶sUQ˨z%udGTl JZNHzGb]5ڿT"vwi(8D%x,YHS'KDeƫo@ˆx@}Y &㉘4AZ7p]nyv/:hi$̈~^0ɳ2S֫,T,T\. `EkY.KTn 5*eJTse`r)gVCHPYC6T,>1z-M43 rY) tԶ2D:`)qD 0~'}jpXژI14@dSZdiͳiVsuP; P?r#'djetyak%/m߷h3noddP܆,ՕPE~ "ZJЮ!|zǫ6.3n@뭦a)qǩ>"ȧS&_G`VShfBmbC {7#;b\[9C{84gG&o\E '9`I]?`2d}W{-t@xgN΋)wibɦH$XYl.!hIޮ>y*c2xO)/SEcoŪQV7QmQ BlD"r٥i‘"T&b ?:ԖS^8Q!2Y ZBM58dže},|씭N%QM(矴Jxbod1[p>g¬@8/?~(`Ds99F`2=Ef oz *,Jj9~r7,<}7WJ|zd=ŦS3aWLtMf C c> (Db8V9.W zʅwmxhw6[JR;nk:>};]dsS6-MBwY Mhv6V!!ӽ1^CQp^8EH[6PUZslЌD~PWEQ.79]B S7\оOG|p'CH4F -uwEwk$`[u{xm9|k0͠:ItE㇤`^#u TFn]kāi4ZtX2Fs(э[#uѸGn]ꃂi P>N:B>`=$vYNblX=(}8We^5ϟ?K!caީ}_H"dwOvCxd:'whh2q(-'B[V[^k88W%TY ӮiP&JYR,>Yb$'"Sjd?t2njc˫l}N Y]d2c4hKL2{ .?38w֞|= 5]@Y`KA!0hͳϓ8+@[gPJP?Lma8J繬>az{@5LRMCx`2@aONxAy:6oTk{'+T-dKrTj?{ءs6~rV䃢p5yv)u;el@篰 PأF%{>{d}%i+j`y dek˅\E +zMaɚM{7GÆ/i7HW7-p՘0< ֘_)^lA{]UR|F!pv^ZBtx}5n>p#u!;'?>7R:ccu|ĝd tC5xS\Ψ0!?Mq@!&Nc< :Ą9@ѡ*V-O |M8:{H%5q<>LUהQ ZtXLO>!]row'׆ijA^Z {C?3:8+Ƅ믠|6h$ B6?: WWmUejpVN{ҎjH{B^ZG:f]#ע?6LJi&A@Cyc FvlW3N8n-Lq4kAd"qp`4AZTU#UWБ~-U͇nc(cڰFYyˤ3Ma*P 7 g#T4Jꢆ]L N4D5w XJe筄(R .4+]|_NvfYro ,_)弢ɑp@Ay< BGwU=VA ;D?R n;عllרL">=wi]FZRϫп Mm-|eԫ:-3.mYd[d䪻 ]~ÅXA ok1L4tK^<nLUAIX9fnтA2ۢfU'#;X!)5b.m:M>vz7M|!ֻ˼,+ڱw$7@]ynaXsX +x1F'SFSEM@"p):gčǛƸ=ϱY~e(zyMrtq/Ϩ<gU]q~Ę'@nufuv8ضP5/!cepmZl~M! uPw+Sip 18\f;-'gb`\`0e$+%tƠSOYcȥ He 'y,o0ɔJk0`_6:bjdXYwIs J@m>zO]uk\b\-!q=MxVTT Y5]L^ZnsR0?Y] [7h=8"ҶBO?-I%v=|e[ᒩ>=, \I Dbyqj6*__(DAω"9[p^Gsҭ+#䀂ah`c 2Y. ES5-)O~'6 T7&*u&hEM[:ȸ?ϓD.NŰmdp "hy3y?3PRMPajxb9"`2 Wͩwqɍ8OoP˴w6)_L3z=`CNĂGWl\yA#^"*KhNHʾpy--S) ~b`ہ9%!Zth_* ^0z>Rx`m~$78Tߪh;Q7oyyХ/Ãs(A ?ȢyjуĕI/b.bqu`ǰJ?GE>lRK1wkOC5 25D J40UrlP%UZUt#+P5607Sx όp,yզآ9e4r&FRǗV ^ ;I5Q<5~AOXugcz]t恺u7GJ{*q4Ðs;;YZ x_3L]Xx|mD,2ᮯlZ=pK={cl0+V΍%`HT4}Ȓ ͉ Dkꏻg|@?J]xUK<=L)0aca^_@{5R č ܏Ln5ѧH}_tJLVȧxdA8JEz-&,HyAL4V +2]q !6w\C`uX(7f;wH0Ol% #fC>0\C`vc{6Ewƴ+Tpc 6uV_ot 9}< ;PQͳ\0x3ڋL. ^ί3Nhq_a4 &b9,,ȥmK<Lt|ާIjikCr|rI*~ߵ"Ai>InB BP0EE='ʯssnFKVz:jda/EdVjߙmh :ٝ0U' BDݼ~uq*;S@15<^!]Y``ГNxV2R'~7!mA}_v :F>7&b _Oy`sסf n|Z;p YN(fq.ZDϔ]MAyIILbZ`?/QYB,7 1b[4耴s:?S#|֣g};?p)ޯLO\sy>G4]k fFǀcX$c.TkkqE;0/†aAIma _%x;EO23S*83K2Jsa2IũRqO(8713iTPTggR̤,gR@pn s8fy'YټysYbDm{J@NqK)|1FlD^u^80`f?z3^DH\cK&eT"i a˥eW"d3 e K2rQbL<`|]/: -(Ԅ0FG@1 7b$ v⒢̼,''ˈdi(V%$%&gknVHIg29'35]o+Rx{iƨc<JYI)J: `ZR򋀂@Z؜먳Ih|Y|Ӷx6Tpackage jsvm import ( "bytes" "encoding/json" "errors" "fmt" "io" "mime/multipart" "net/http" "net/http/httptest" "os" "path/filepath" "strconv" "strings" "testing" "time" "github.com/dop251/goja" validation "github.com/go-ozzo/ozzo-validation/v4" "github.com/pocketbase/pocketbase/apis" "github.com/pocketbase/pocketbase/core" "github.com/pocketbase/pocketbase/tests" "github.com/pocketbase/pocketbase/tools/filesystem" "github.com/pocketbase/pocketbase/tools/mailer" "github.com/pocketbase/pocketbase/tools/router" "github.com/pocketbase/pocketbase/tools/types" "github.com/spf13/cast" ) func testBindsCount(vm *goja.Runtime, namespace string, count int, t *testing.T) { v, err := vm.RunString(`Object.keys(` + namespace + `).length`) if err != nil { t.Fatal(err) } total, _ := v.Export().(int64) if int(total) != count { t.Fatalf("Expected %d %s binds, got %d", count, namespace, total) } } // note: this test is useful as a reminder to update the tests in case // a new base binding is added. func TestBaseBindsCount(t *testing.T) { vm := goja.New() baseBinds(vm) testBindsCount(vm, "this", 41, t) } func TestBaseBindsSleep(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("reader", strings.NewReader("test")) start := time.Now() _, err := vm.RunString(` sleep(100); `) if err != nil { t.Fatal(err) } lasted := time.Since(start).Milliseconds() if lasted < 100 || lasted > 150 { t.Fatalf("Expected to sleep for ~100ms, got %d", lasted) } } func TestBaseBindsReaderToString(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("reader", strings.NewReader("test")) _, err := vm.RunString(` let result = readerToString(reader) if (result != "test") { throw new Error('Expected "test", got ' + result); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsToString(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("scenarios", []struct { Name string Value any Expected string }{ {"null", nil, ""}, {"string", "test", "test"}, {"number", -12.4, "-12.4"}, {"bool", true, "true"}, {"arr", []int{1, 2, 3}, `[1,2,3]`}, {"obj", map[string]any{"test": 123}, `{"test":123}`}, {"reader", strings.NewReader("test"), "test"}, {"struct", struct { Name string private string }{Name: "123", private: "456"}, `{"Name":"123"}`}, }) _, err := vm.RunString(` for (let s of scenarios) { let str = toString(s.value) if (str != s.expected) { throw new Error('[' + s.name + '] Expected string ' + s.expected + ', got ' + str); } } `) if err != nil { t.Fatal(err) } } func TestBaseBindsToBytes(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("bytesEqual", bytes.Equal) vm.Set("scenarios", []struct { Name string Value any Expected []byte }{ {"null", nil, []byte{}}, {"string", "test", []byte("test")}, {"number", -12.4, []byte("-12.4")}, {"bool", true, []byte("true")}, {"arr", []int{1, 2, 3}, []byte{1, 2, 3}}, {"jsonraw", types.JSONRaw{1, 2, 3}, []byte{1, 2, 3}}, {"reader", strings.NewReader("test"), []byte("test")}, {"obj", map[string]any{"test": 123}, []byte(`{"test":123}`)}, {"struct", struct { Name string private string }{Name: "123", private: "456"}, []byte(`{"Name":"123"}`)}, }) _, err := vm.RunString(` for (let s of scenarios) { let b = toBytes(s.value) if (!Array.isArray(b)) { throw new Error('[' + s.name + '] Expected toBytes to return an array'); } if (!bytesEqual(b, s.expected)) { throw new Error('[' + s.name + '] Expected bytes ' + s.expected + ', got ' + b); } } `) if err != nil { t.Fatal(err) } } func TestBaseBindsUnmarshal(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("data", &map[string]any{"a": 123}) _, err := vm.RunString(` unmarshal({"b": 456}, data) if (data.a != 123) { throw new Error('Expected data.a 123, got ' + data.a); } if (data.b != 456) { throw new Error('Expected data.b 456, got ' + data.b); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsContext(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const base = new Context(null, "a", 123); const sub = new Context(base, "b", 456); const scenarios = [ {key: "a", expected: 123}, {key: "b", expected: 456}, ]; for (let s of scenarios) { if (sub.value(s.key) != s.expected) { throw new("Expected " +s.key + " value " + s.expected + ", got " + sub.value(s.key)); } } `) if err != nil { t.Fatal(err) } } func TestBaseBindsCookie(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const cookie = new Cookie({ name: "example_name", value: "example_value", path: "/example_path", domain: "example.com", maxAge: 10, secure: true, httpOnly: true, sameSite: 3, }); const result = cookie.string(); const expected = "example_name=example_value; Path=/example_path; Domain=example.com; Max-Age=10; HttpOnly; Secure; SameSite=Strict"; if (expected != result) { throw new("Expected \n" + expected + "\ngot\n" + result); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsSubscriptionMessage(t *testing.T) { vm := goja.New() baseBinds(vm) vm.Set("bytesToString", func(b []byte) string { return string(b) }) _, err := vm.RunString(` const payload = { name: "test", data: '{"test":123}' } const result = new SubscriptionMessage(payload); if (result.name != payload.name) { throw new("Expected name " + payload.name + ", got " + result.name); } if (bytesToString(result.data) != payload.data) { throw new("Expected data '" + payload.data + "', got '" + bytesToString(result.data) + "'"); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsRecord(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() collection, err := app.FindCachedCollectionByNameOrId("users") if err != nil { t.Fatal(err) } vm := goja.New() baseBinds(vm) vm.Set("collection", collection) // without record data // --- v1, err := vm.RunString(`new Record(collection)`) if err != nil { t.Fatal(err) } m1, ok := v1.Export().(*core.Record) if !ok { t.Fatalf("Expected m1 to be models.Record, got \n%v", m1) } // with record data // --- v2, err := vm.RunString(`new Record(collection, { email: "test@example.com" })`) if err != nil { t.Fatal(err) } m2, ok := v2.Export().(*core.Record) if !ok { t.Fatalf("Expected m2 to be core.Record, got \n%v", m2) } if m2.Collection().Name != "users" { t.Fatalf("Expected record with collection %q, got \n%v", "users", m2.Collection()) } if m2.Email() != "test@example.com" { t.Fatalf("Expected record with email field set to %q, got \n%v", "test@example.com", m2) } } func TestBaseBindsCollection(t *testing.T) { vm := goja.New() baseBinds(vm) v, err := vm.RunString(`new Collection({ name: "test", createRule: "@request.auth.id != ''", fields: [{name: "title", "type": "text"}] })`) if err != nil { t.Fatal(err) } m, ok := v.Export().(*core.Collection) if !ok { t.Fatalf("Expected core.Collection, got %v", m) } if m.Name != "test" { t.Fatalf("Expected collection with name %q, got %q", "test", m.Name) } expectedRule := "@request.auth.id != ''" if m.CreateRule == nil || *m.CreateRule != expectedRule { t.Fatalf("Expected create rule %q, got %v", "@request.auth.id != ''", m.CreateRule) } if f := m.Fields.GetByName("title"); f == nil { t.Fatalf("Expected fields to be set, got %v", m.Fields) } } func TestBaseBindsFieldsList(t *testing.T) { vm := goja.New() baseBinds(vm) v, err := vm.RunString(`new FieldsList([{name: "title", "type": "text"}])`) if err != nil { t.Fatal(err) } m, ok := v.Export().(*core.FieldsList) if !ok { t.Fatalf("Expected core.FieldsList, got %v", m) } if f := m.GetByName("title"); f == nil { t.Fatalf("Expected fields list to be loaded, got %v", m) } } func TestBaseBindsField(t *testing.T) { vm := goja.New() baseBinds(vm) v, err := vm.RunString(`new Field({name: "test", "type": "bool"})`) if err != nil { t.Fatal(err) } f, ok := v.Export().(*core.BoolField) if !ok { t.Fatalf("Expected *core.BoolField, got %v", f) } if f.Name != "test" { t.Fatalf("Expected field %q, got %v", "test", f) } } func isType[T any](v any) bool { _, ok := v.(T) return ok } func TestBaseBindsNamedFields(t *testing.T) { t.Parallel() vm := goja.New() baseBinds(vm) scenarios := []struct { js string typeFunc func(v any) bool }{ { "new NumberField({name: 'test'})", isType[*core.NumberField], }, { "new BoolField({name: 'test'})", isType[*core.BoolField], }, { "new TextField({name: 'test'})", isType[*core.TextField], }, { "new URLField({name: 'test'})", isType[*core.URLField], }, { "new EmailField({name: 'test'})", isType[*core.EmailField], }, { "new EditorField({name: 'test'})", isType[*core.EditorField], }, { "new PasswordField({name: 'test'})", isType[*core.PasswordField], }, { "new DateField({name: 'test'})", isType[*core.DateField], }, { "new AutodateField({name: 'test'})", isType[*core.AutodateField], }, { "new JSONField({name: 'test'})", isType[*core.JSONField], }, { "new RelationField({name: 'test'})", isType[*core.RelationField], }, { "new SelectField({name: 'test'})", isType[*core.SelectField], }, { "new FileField({name: 'test'})", isType[*core.FileField], }, { "new GeoPointField({name: 'test'})", isType[*core.GeoPointField], }, } for _, s := range scenarios { t.Run(s.js, func(t *testing.T) { v, err := vm.RunString(s.js) if err != nil { t.Fatal(err) } f, ok := v.Export().(core.Field) if !ok { t.Fatalf("Expected core.Field instance, got %T (%v)", f, f) } if !s.typeFunc(f) { t.Fatalf("Unexpected field type %T (%v)", f, f) } if f.GetName() != "test" { t.Fatalf("Expected field %q, got %v", "test", f) } }) } } func TestBaseBindsMailerMessage(t *testing.T) { vm := goja.New() baseBinds(vm) v, err := vm.RunString(`new MailerMessage({ from: {name: "test_from", address: "test_from@example.com"}, to: [ {name: "test_to1", address: "test_to1@example.com"}, {name: "test_to2", address: "test_to2@example.com"}, ], bcc: [ {name: "test_bcc1", address: "test_bcc1@example.com"}, {name: "test_bcc2", address: "test_bcc2@example.com"}, ], cc: [ {name: "test_cc1", address: "test_cc1@example.com"}, {name: "test_cc2", address: "test_cc2@example.com"}, ], subject: "test_subject", html: "test_html", text: "test_text", headers: { header1: "a", header2: "b", } })`) if err != nil { t.Fatal(err) } m, ok := v.Export().(*mailer.Message) if !ok { t.Fatalf("Expected mailer.Message, got %v", m) } raw, err := json.Marshal(m) if err != nil { t.Fatal(err) } expected := `{"from":{"Name":"test_from","Address":"test_from@example.com"},"to":[{"Name":"test_to1","Address":"test_to1@example.com"},{"Name":"test_to2","Address":"test_to2@example.com"}],"bcc":[{"Name":"test_bcc1","Address":"test_bcc1@example.com"},{"Name":"test_bcc2","Address":"test_bcc2@example.com"}],"cc":[{"Name":"test_cc1","Address":"test_cc1@example.com"},{"Name":"test_cc2","Address":"test_cc2@example.com"}],"subject":"test_subject","html":"test_html","text":"test_text","headers":{"header1":"a","header2":"b"},"attachments":null,"inlineAttachments":null}` if string(raw) != expected { t.Fatalf("Expected \n%s, \ngot \n%s", expected, raw) } } func TestBaseBindsCommand(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` let runCalls = 0; let cmd = new Command({ use: "test", run: (c, args) => { runCalls++; } }); cmd.run(null, []); if (cmd.use != "test") { throw new Error('Expected cmd.use "test", got: ' + cmd.use); } if (runCalls != 1) { throw new Error('Expected runCalls 1, got: ' + runCalls); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsRequestInfo(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const info = new RequestInfo({ body: {"name": "test2"} }); if (info.body?.name != "test2") { throw new Error('Expected info.body.name to be test2, got: ' + info.body?.name); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsMiddleware(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const m = new Middleware( (e) => {}, 10, "test" ); if (!m) { throw new Error('Expected non-empty Middleware instance'); } `) if err != nil { t.Fatal(err) } } func TestBaseBindsTimezone(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const v0 = (new Timezone()).string(); if (v0 != "UTC") { throw new Error("(v0) Expected UTC got " + v0) } const v1 = (new Timezone("invalid")).string(); if (v1 != "UTC") { throw new Error("(v1) Expected UTC got " + v1) } const v2 = (new Timezone("EET")).string(); if (v2 != "EET") { throw new Error("(v2) Expected EET got " + v2) } `) if err != nil { t.Fatal(err) } } func TestBaseBindsDateTime(t *testing.T) { vm := goja.New() baseBinds(vm) _, err := vm.RunString(` const now = new DateTime(); if (now.isZero()) { throw new Error('(now) Expected to fallback to now, got zero value'); } const nowPart = now.string().substring(0, 19) const scenarios = [ // empty datetime string and no custom location {date: new DateTime(''), expected: nowPart}, // empty datetime string and custom default location (should be ignored) {date: new DateTime('', 'Asia/Tokyo'), expected: nowPart}, // full datetime string and no custom default location {date: new DateTime('2023-01-01 00:00:00.000Z'), expected: "2023-01-01 00:00:00.000Z"}, // invalid location (fallback to UTC) {date: new DateTime('2025-10-26 03:00:00', 'invalid'), expected: "2025-10-26 03:00:00.000Z"}, // CET {date: new DateTime('2025-10-26 03:00:00', 'Europe/Amsterdam'), expected: "2025-10-26 02:00:00.000Z"}, // CEST {date: new DateTime('2025-10-26 01:00:00', 'Europe/Amsterdam'), expected: "2025-10-25 23:00:00.000Z"}, // with timezone/offset in the date string (aka. should ignore the custom default location) {date: new DateTime('2025-10-26 01:00:00 +0200', 'Asia/Tokyo'), expected: "2025-10-25 23:00:00.000Z"}, ]; for (let i = 0; i < scenarios.length; i++) { const s = scenarios[i]; if (!s.date.string().includes(s.expected)) { throw new Error('(' + i + ') ' + s.date.string() + ' does not contain expected ' + s.expected); } } `) if err != nil { t.Fatal(err) } } func TestBaseBindsValidationError(t *testing.T) { vm := goja.New() baseBinds(vm) scenarios := []struct { js string expectCode string expectMessage string }{ { `new ValidationError()`, "", "", }, { `new ValidationError("test_code")`, "test_code", "", }, { `new ValidationError("test_code", "test_message")`, "test_code", "test_message", }, } for _, s := range scenarios { v, err := vm.RunString(s.js) if err != nil { t.Fatal(err) } m, ok := v.Export().(validation.Error) if !ok { t.Fatalf("[%s] Expected validation.Error, got %v", s.js, m) } if m.Code() != s.expectCode { t.Fatalf("[%s] Expected code %q, got %q", s.js, s.expectCode, m.Code()) } if m.Message() != s.expectMessage { t.Fatalf("[%s] Expected message %q, got %q", s.js, s.expectMessage, m.Message()) } } } func TestDbxBinds(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() vm.Set("db", app.DB()) baseBinds(vm) dbxBinds(vm) testBindsCount(vm, "$dbx", 15, t) sceneraios := []struct { js string expected string }{ { `$dbx.exp("a = 1").build(db, {})`, "a = 1", }, { `$dbx.hashExp({ "a": 1, b: null, c: [1, 2, 3], }).build(db, {})`, "`a`={:p0} AND `b` IS NULL AND `c` IN ({:p1}, {:p2}, {:p3})", }, { `$dbx.not($dbx.exp("a = 1")).build(db, {})`, "NOT (a = 1)", }, { `$dbx.and($dbx.exp("a = 1"), $dbx.exp("b = 2")).build(db, {})`, "(a = 1) AND (b = 2)", }, { `$dbx.or($dbx.exp("a = 1"), $dbx.exp("b = 2")).build(db, {})`, "(a = 1) OR (b = 2)", }, { `$dbx.in("a", 1, 2, 3).build(db, {})`, "`a` IN ({:p0}, {:p1}, {:p2})", }, { `$dbx.notIn("a", 1, 2, 3).build(db, {})`, "`a` NOT IN ({:p0}, {:p1}, {:p2})", }, { `$dbx.like("a", "test1", "test2").match(true, false).build(db, {})`, "`a` LIKE {:p0} AND `a` LIKE {:p1}", }, { `$dbx.orLike("a", "test1", "test2").match(false, true).build(db, {})`, "`a` LIKE {:p0} OR `a` LIKE {:p1}", }, { `$dbx.notLike("a", "test1", "test2").match(true, false).build(db, {})`, "`a` NOT LIKE {:p0} AND `a` NOT LIKE {:p1}", }, { `$dbx.orNotLike("a", "test1", "test2").match(false, false).build(db, {})`, "`a` NOT LIKE {:p0} OR `a` NOT LIKE {:p1}", }, { `$dbx.exists($dbx.exp("a = 1")).build(db, {})`, "EXISTS (a = 1)", }, { `$dbx.notExists($dbx.exp("a = 1")).build(db, {})`, "NOT EXISTS (a = 1)", }, { `$dbx.between("a", 1, 2).build(db, {})`, "`a` BETWEEN {:p0} AND {:p1}", }, { `$dbx.notBetween("a", 1, 2).build(db, {})`, "`a` NOT BETWEEN {:p0} AND {:p1}", }, } for _, s := range sceneraios { result, err := vm.RunString(s.js) if err != nil { t.Fatalf("[%s] Failed to execute js script, got %v", s.js, err) } v, _ := result.Export().(string) if v != s.expected { t.Fatalf("[%s] Expected \n%s, \ngot \n%s", s.js, s.expected, v) } } } func TestMailsBindsCount(t *testing.T) { vm := goja.New() mailsBinds(vm) testBindsCount(vm, "$mails", 5, t) } func TestMailsBinds(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() record, err := app.FindAuthRecordByEmail("users", "test@example.com") if err != nil { t.Fatal(err) } vm := goja.New() baseBinds(vm) mailsBinds(vm) vm.Set("$app", app) vm.Set("record", record) _, vmErr := vm.RunString(` $mails.sendRecordPasswordReset($app, record); if (!$app.testMailer.lastMessage().html.includes("/_/#/auth/confirm-password-reset/")) { throw new Error("Expected record password reset email, got:" + JSON.stringify($app.testMailer.lastMessage())) } $mails.sendRecordVerification($app, record); if (!$app.testMailer.lastMessage().html.includes("/_/#/auth/confirm-verification/")) { throw new Error("Expected record verification email, got:" + JSON.stringify($app.testMailer.lastMessage())) } $mails.sendRecordChangeEmail($app, record, "new@example.com"); if (!$app.testMailer.lastMessage().html.includes("/_/#/auth/confirm-email-change/")) { throw new Error("Expected record email change email, got:" + JSON.stringify($app.testMailer.lastMessage())) } $mails.sendRecordOTP($app, record, "test_otp_id", "test_otp_pass"); if (!$app.testMailer.lastMessage().html.includes("test_otp_pass")) { throw new Error("Expected record OTP email, got:" + JSON.stringify($app.testMailer.lastMessage())) } $mails.sendRecordAuthAlert($app, record, "test_alert_info"); if (!$app.testMailer.lastMessage().html.includes("test_alert_info")) { throw new Error("Expected record OTP email, got:" + JSON.stringify($app.testMailer.lastMessage())) } `) if vmErr != nil { t.Fatal(vmErr) } } func TestSecurityBindsCount(t *testing.T) { vm := goja.New() securityBinds(vm) testBindsCount(vm, "$security", 16, t) } func TestSecurityCryptoBinds(t *testing.T) { vm := goja.New() baseBinds(vm) securityBinds(vm) sceneraios := []struct { js string expected string }{ {`$security.md5("123")`, "202cb962ac59075b964b07152d234b70"}, {`$security.sha256("123")`, "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3"}, {`$security.sha512("123")`, "3c9909afec25354d551dae21590bb26e38d53f2173b8d3dc3eee4c047e7ab1c1eb8b85103e3be7ba613b31bb5c9c36214dc9f14a42fd7a2fdb84856bca5c44c2"}, {`$security.hs256("hello", "test")`, "f151ea24bda91a18e89b8bb5793ef324b2a02133cce15a28a719acbd2e58a986"}, {`$security.hs512("hello", "test")`, "44f280e11103e295c26cd61dd1cdd8178b531b860466867c13b1c37a26b6389f8af110efbe0bb0717b9d9c87f6fe1c97b3b1690936578890e5669abf279fe7fd"}, {`$security.equal("abc", "abc")`, "true"}, {`$security.equal("abc", "abcd")`, "false"}, } for _, s := range sceneraios { t.Run(s.js, func(t *testing.T) { result, err := vm.RunString(s.js) if err != nil { t.Fatalf("Failed to execute js script, got %v", err) } v := cast.ToString(result.Export()) if v != s.expected { t.Fatalf("Expected %v \ngot \n%v", s.expected, v) } }) } } func TestSecurityRandomStringBinds(t *testing.T) { vm := goja.New() baseBinds(vm) securityBinds(vm) sceneraios := []struct { js string length int }{ {`$security.randomString(6)`, 6}, {`$security.randomStringWithAlphabet(7, "abc")`, 7}, {`$security.pseudorandomString(8)`, 8}, {`$security.pseudorandomStringWithAlphabet(9, "abc")`, 9}, {`$security.randomStringByRegex("abc")`, 3}, } for _, s := range sceneraios { t.Run(s.js, func(t *testing.T) { result, err := vm.RunString(s.js) if err != nil { t.Fatalf("Failed to execute js script, got %v", err) } v, _ := result.Export().(string) if len(v) != s.length { t.Fatalf("Expected %d length string, \ngot \n%v", s.length, v) } }) } } func TestSecurityJWTBinds(t *testing.T) { sceneraios := []struct { name string js string }{ { "$security.parseUnverifiedJWT", ` const result = $security.parseUnverifiedJWT("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIn0.aXzC7q7z1lX_hxk5P0R368xEU7H1xRwnBQQcLAmG0EY") if (result.name != "John Doe") { throw new Error("Expected result.name 'John Doe', got " + result.name) } if (result.sub != "1234567890") { throw new Error("Expected result.sub '1234567890', got " + result.sub) } `, }, { "$security.parseJWT", ` const result = $security.parseJWT("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIn0.aXzC7q7z1lX_hxk5P0R368xEU7H1xRwnBQQcLAmG0EY", "test") if (result.name != "John Doe") { throw new Error("Expected result.name 'John Doe', got " + result.name) } if (result.sub != "1234567890") { throw new Error("Expected result.sub '1234567890', got " + result.sub) } `, }, { "$security.createJWT", ` // overwrite the exp claim for static token const result = $security.createJWT({"exp": 123}, "test", 0) const expected = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjEyM30.7gbv7w672gApdBRASI6OniCtKwkKjhieSxsr6vxSrtw"; if (result != expected) { throw new Error("Expected token \n" + expected + ", got \n" + result) } `, }, } for _, s := range sceneraios { t.Run(s.name, func(t *testing.T) { vm := goja.New() baseBinds(vm) securityBinds(vm) _, err := vm.RunString(s.js) if err != nil { t.Fatalf("Failed to execute js script, got %v", err) } }) } } func TestSecurityEncryptAndDecryptBinds(t *testing.T) { vm := goja.New() baseBinds(vm) securityBinds(vm) _, err := vm.RunString(` const key = "abcdabcdabcdabcdabcdabcdabcdabcd" const encrypted = $security.encrypt("123", key) const decrypted = $security.decrypt(encrypted, key) if (decrypted != "123") { throw new Error("Expected decrypted '123', got " + decrypted) } `) if err != nil { t.Fatal(err) } } func TestFilesystemBinds(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.URL.Path == "/error" { w.WriteHeader(http.StatusInternalServerError) } fmt.Fprintf(w, "test") })) defer srv.Close() tmpDir, err := os.MkdirTemp("", "jsvm") if err != nil { t.Fatal(err) } defer os.RemoveAll(tmpDir) vm := goja.New() vm.Set("mh", &multipart.FileHeader{Filename: "test"}) vm.Set("tmpDir", tmpDir) vm.Set("testFile", filepath.Join(app.DataDir(), "data.db")) vm.Set("baseURL", srv.URL) baseBinds(vm) filesystemBinds(vm) testBindsCount(vm, "$filesystem", 6, t) // s3 { v, err := vm.RunString(`$filesystem.s3("bucketName", "region", "endpoint", "accessKey", "secretKey", true)`) if err != nil { t.Fatal(err) } fsys, ok := v.Export().(*filesystem.System) if !ok { t.Fatalf("[s3] Expected System instance got %v", fsys) } } // local { v, err := vm.RunString(`$filesystem.local(tmpDir)`) if err != nil { t.Fatal(err) } fsys, ok := v.Export().(*filesystem.System) if !ok { t.Fatalf("[s3] Expected System instance got %v", fsys) } } // fileFromPath { v, err := vm.RunString(`$filesystem.fileFromPath(testFile)`) if err != nil { t.Fatal(err) } file, _ := v.Export().(*filesystem.File) if file == nil || file.OriginalName != "data.db" { t.Fatalf("[fileFromPath] Expected file with name %q, got %v", file.OriginalName, file) } } // fileFromBytes { v, err := vm.RunString(`$filesystem.fileFromBytes([1, 2, 3], "test")`) if err != nil { t.Fatal(err) } file, _ := v.Export().(*filesystem.File) if file == nil || file.OriginalName != "test" { t.Fatalf("[fileFromBytes] Expected file with name %q, got %v", file.OriginalName, file) } } // fileFromMultipart { v, err := vm.RunString(`$filesystem.fileFromMultipart(mh)`) if err != nil { t.Fatal(err) } file, _ := v.Export().(*filesystem.File) if file == nil || file.OriginalName != "test" { t.Fatalf("[fileFromMultipart] Expected file with name %q, got %v", file.OriginalName, file) } } // fileFromURL (success) { v, err := vm.RunString(`$filesystem.fileFromURL(baseURL + "/test")`) if err != nil { t.Fatal(err) } file, _ := v.Export().(*filesystem.File) if file == nil || file.OriginalName != "test" { t.Fatalf("[fileFromURL] Expected file with name %q, got %v", file.OriginalName, file) } } // fileFromURL (failure) { _, err := vm.RunString(`$filesystem.fileFromURL(baseURL + "/error")`) if err == nil { t.Fatal("Expected url fetch error") } } } func TestFormsBinds(t *testing.T) { vm := goja.New() formsBinds(vm) testBindsCount(vm, "this", 4, t) } func TestApisBindsCount(t *testing.T) { vm := goja.New() apisBinds(vm) testBindsCount(vm, "this", 8, t) testBindsCount(vm, "$apis", 11, t) } func TestApisBindsApiError(t *testing.T) { vm := goja.New() apisBinds(vm) scenarios := []struct { js string expectStatus int expectMessage string expectData string }{ {"new ApiError()", 0, "", "null"}, {"new ApiError(100, 'test', {'test': 1})", 100, "Test.", `{"test":1}`}, {"new NotFoundError()", 404, "The requested resource wasn't found.", "null"}, {"new NotFoundError('test', {'test': 1})", 404, "Test.", `{"test":1}`}, {"new BadRequestError()", 400, "Something went wrong while processing your request.", "null"}, {"new BadRequestError('test', {'test': 1})", 400, "Test.", `{"test":1}`}, {"new ForbiddenError()", 403, "You are not allowed to perform this request.", "null"}, {"new ForbiddenError('test', {'test': 1})", 403, "Test.", `{"test":1}`}, {"new UnauthorizedError()", 401, "Missing or invalid authentication.", "null"}, {"new UnauthorizedError('test', {'test': 1})", 401, "Test.", `{"test":1}`}, {"new TooManyRequestsError()", 429, "Too Many Requests.", "null"}, {"new TooManyRequestsError('test', {'test': 1})", 429, "Test.", `{"test":1}`}, {"new InternalServerError()", 500, "Something went wrong while processing your request.", "null"}, {"new InternalServerError('test', {'test': 1})", 500, "Test.", `{"test":1}`}, } for _, s := range scenarios { v, err := vm.RunString(s.js) if err != nil { t.Errorf("[%s] %v", s.js, err) continue } apiErr, ok := v.Export().(*router.ApiError) if !ok { t.Errorf("[%s] Expected ApiError, got %v", s.js, v) continue } if apiErr.Status != s.expectStatus { t.Errorf("[%s] Expected Status %d, got %d", s.js, s.expectStatus, apiErr.Status) } if apiErr.Message != s.expectMessage { t.Errorf("[%s] Expected Message %q, got %q", s.js, s.expectMessage, apiErr.Message) } dataRaw, _ := json.Marshal(apiErr.RawData()) if string(dataRaw) != s.expectData { t.Errorf("[%s] Expected Data %q, got %q", s.js, s.expectData, dataRaw) } } } func TestLoadingDynamicModel(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() baseBinds(vm) dbxBinds(vm) vm.Set("$app", app) _, err := vm.RunString(` let result = new DynamicModel({ string: "", nullString: nullString(), nullStringEmpty: nullString(), bool: false, nullBool: nullBool(), nullBoolEmpty: nullBool(), int: 0, nullInt: nullInt(), nullIntEmpty: nullInt(), float: -0, nullFloat: nullFloat(), nullFloatEmpty: nullFloat(), array: [], nullArray: nullArray(), nullArrayEmpty: nullArray(), object: {}, nullObject: nullObject(), nullObjectEmpty: nullObject(), }) const expectations = { "string": "a", "nullString": "b", "nullStringEmpty": null, "bool": false, "nullBool": true, "nullBoolEmpty": null, "int": 1, "nullInt": 2, "nullIntEmpty": null, "float": 1.1, "nullFloat": 1.2, "nullFloatEmpty": null, "array": [1,2], "nullArray": [3,4], "nullArrayEmpty": null, "object": {a:1}, "nullObject": {a:2}, "nullObjectEmpty": null, }; // constuct dummy SELECT column value literals based on the expectations const selectColumns = []; for (const col in expectations) { const val = expectations[col] if (val === null) { selectColumns.push("null as [[" + col + "]]") } else if (typeof val === "string") { selectColumns.push("'" + val + "' as [[" + col + "]]") } else if (typeof val === "object") { selectColumns.push("'" + JSON.stringify(val) + "' as [[" + col + "]]") } else { selectColumns.push(val + " as [[" + col + "]]") } } $app.db() .newQuery("SELECT " + selectColumns.join(", ")) .one(result) for (const col in expectations) { let expVal = expectations[col]; let resVal = result[col]; if (expVal !== null && typeof expVal === "object") { expVal = JSON.stringify(expVal) resVal = JSON.stringify(resVal) } if (expVal != resVal) { throw new Error("Expected '" + col + "' value " + expVal + ", got " + resVal); } } `) if err != nil { t.Fatal(err) } } func TestDynamicModelMapFieldCaching(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() baseBinds(vm) dbxBinds(vm) vm.Set("$app", app) _, err := vm.RunString(` let m1 = new DynamicModel({ int: 0, float: -0, text: "", bool: false, obj: {}, arr: [], }) let m2 = new DynamicModel({ int: 0, float: -0, text: "", bool: false, obj: {}, arr: [], }) m1.int = 1 m1.float = 1.5 m1.text = "a" m1.bool = true m1.obj.set("a", 1) m1.arr.push(1) m2.int = 2 m2.float = 2.5 m2.text = "b" m2.bool = false m2.obj.set("b", 1) m2.arr.push(2) let m1Expected = '{"arr":[1],"bool":true,"float":1.5,"int":1,"obj":{"a":1},"text":"a"}'; let m1Serialized = JSON.stringify(m1); if (m1Serialized != m1Expected) { throw new Error("Expected m1 \n" + m1Expected + "\ngot\n" + m1Serialized); } let m2Expected = '{"arr":[2],"bool":false,"float":2.5,"int":2,"obj":{"b":1},"text":"b"}'; let m2Serialized = JSON.stringify(m2); if (m2Serialized != m2Expected) { throw new Error("Expected m2 \n" + m2Expected + "\ngot\n" + m2Serialized); } `) if err != nil { t.Fatal(err) } } func TestLoadingArrayOf(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() baseBinds(vm) dbxBinds(vm) vm.Set("$app", app) _, err := vm.RunString(` let result = arrayOf(new DynamicModel({ id: "", text: "", })) $app.db() .select("id", "text") .from("demo1") .where($dbx.exp("id='84nmscqy84lsi1t' OR id='al1h9ijdeojtsjy'")) .limit(2) .orderBy("text ASC") .all(result) if (result.length != 2) { throw new Error('Expected 2 list items, got ' + result.length); } if (result[0].id != "84nmscqy84lsi1t") { throw new Error('Expected 0.id "84nmscqy84lsi1t", got ' + result[0].id); } if (result[0].text != "test") { throw new Error('Expected 0.text "test", got ' + result[0].text); } if (result[1].id != "al1h9ijdeojtsjy") { throw new Error('Expected 1.id "al1h9ijdeojtsjy", got ' + result[1].id); } if (result[1].text != "test2") { throw new Error('Expected 1.text "test2", got ' + result[1].text); } `) if err != nil { t.Fatal(err) } } func TestHttpClientBindsCount(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() httpClientBinds(vm) testBindsCount(vm, "this", 2, t) // + FormData testBindsCount(vm, "$http", 1, t) } func TestHttpClientBindsSend(t *testing.T) { t.Parallel() // start a test server server := httptest.NewServer(http.HandlerFunc(func(res http.ResponseWriter, req *http.Request) { if req.URL.Query().Get("testError") != "" { res.WriteHeader(400) return } timeoutStr := req.URL.Query().Get("testTimeout") timeout, _ := strconv.Atoi(timeoutStr) if timeout > 0 { time.Sleep(time.Duration(timeout) * time.Second) } bodyRaw, _ := io.ReadAll(req.Body) defer req.Body.Close() // normalize headers headers := make(map[string]string, len(req.Header)) for k, v := range req.Header { if len(v) > 0 { headers[strings.ToLower(strings.ReplaceAll(k, "-", "_"))] = v[0] } } info := map[string]any{ "method": req.Method, "headers": headers, "body": string(bodyRaw), } // add custom headers and cookies res.Header().Add("X-Custom", "custom_header") res.Header().Add("Set-Cookie", "sessionId=123456") infoRaw, _ := json.Marshal(info) // write back the submitted request res.Write(infoRaw) })) defer server.Close() vm := goja.New() baseBinds(vm) httpClientBinds(vm) vm.Set("testURL", server.URL) _, err := vm.RunString(` function getNestedVal(data, path) { let result = data || {}; let parts = path.split("."); for (const part of parts) { if ( result == null || typeof result !== "object" || typeof result[part] === "undefined" ) { return null; } result = result[part]; } return result; } let testTimeout; try { $http.send({ url: testURL + "?testTimeout=3", timeout: 1 }) } catch (err) { testTimeout = err } if (!testTimeout) { throw new Error("Expected timeout error") } // error response check const test0 = $http.send({ url: testURL + "?testError=1", }) // basic fields check const test1 = $http.send({ method: "post", url: testURL, headers: {"header1": "123", "header2": "456"}, body: '789', }) // with custom content-type header const test2 = $http.send({ url: testURL, headers: {"content-type": "text/plain"}, }) // with FormData const formData = new FormData() formData.append("title", "123") const test3 = $http.send({ url: testURL, body: formData, headers: {"content-type": "text/plain"}, // should be ignored }) // raw body response field check const test4 = $http.send({ method: "post", url: testURL, body: 'test', }) const scenarios = [ [test0, { "statusCode": "400", }], [test1, { "statusCode": "200", "headers.X-Custom.0": "custom_header", "cookies.sessionId.value": "123456", "json.method": "POST", "json.headers.header1": "123", "json.headers.header2": "456", "json.body": "789", }], [test2, { "statusCode": "200", "headers.X-Custom.0": "custom_header", "cookies.sessionId.value": "123456", "json.method": "GET", "json.headers.content_type": "text/plain", }], [test3, { "statusCode": "200", "headers.X-Custom.0": "custom_header", "cookies.sessionId.value": "123456", "json.method": "GET", "json.body": [ "\r\nContent-Disposition: form-data; name=\"title\"\r\n\r\n123\r\n--", ], "json.headers.content_type": [ "multipart/form-data; boundary=" ], }], [test4, { "statusCode": "200", "headers.X-Custom.0": "custom_header", "cookies.sessionId.value": "123456", // {"body":"test","headers":{"accept_encoding":"gzip","content_length":"4","user_agent":"Go-http-client/1.1"},"method":"POST"} "body": [123,34,98,111,100,121,34,58,34,116,101,115,116,34,44,34,104,101,97,100,101,114,115,34,58,123,34,97,99,99,101,112,116,95,101,110,99,111,100,105,110,103,34,58,34,103,122,105,112,34,44,34,99,111,110,116,101,110,116,95,108,101,110,103,116,104,34,58,34,52,34,44,34,117,115,101,114,95,97,103,101,110,116,34,58,34,71,111,45,104,116,116,112,45,99,108,105,101,110,116,47,49,46,49,34,125,44,34,109,101,116,104,111,100,34,58,34,80,79,83,84,34,125], }], ] for (let scenario of scenarios) { const result = scenario[0]; const expectations = scenario[1]; for (let key in expectations) { const value = getNestedVal(result, key); const expectation = expectations[key] if (Array.isArray(expectation)) { // check for partial match(es) for (let exp of expectation) { if (!value.includes(exp)) { throw new Error('Expected ' + key + ' to contain ' + exp + ', got: ' + toString(result.body)); } } } else { // check for direct match if (value != expectation) { throw new Error('Expected ' + key + ' ' + expectation + ', got: ' + toString(result.body)); } } } } `) if err != nil { t.Fatal(err) } } func TestCronBindsCount(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() pool := newPool(1, func() *goja.Runtime { return goja.New() }) cronBinds(app, vm, pool) testBindsCount(vm, "this", 2, t) pool.run(func(poolVM *goja.Runtime) error { testBindsCount(poolVM, "this", 2, t) return nil }) } func TestHooksBindsCount(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() hooksBinds(app, vm, nil) testBindsCount(vm, "this", 82, t) } func TestHooksBinds(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() result := &struct { Called int }{} vmFactory := func() *goja.Runtime { vm := goja.New() baseBinds(vm) vm.Set("$app", app) vm.Set("result", result) return vm } pool := newPool(1, vmFactory) vm := vmFactory() hooksBinds(app, vm, pool) _, err := vm.RunString(` onModelUpdate((e) => { result.called++; e.next() }, "demo1") onModelUpdate((e) => { throw new Error("example"); }, "demo1") onModelUpdate((e) => { result.called++; e.next(); }, "demo2") onModelUpdate((e) => { result.called++; e.next() }, "demo2") onModelUpdate((e) => { // stop propagation }, "demo2") onModelUpdate((e) => { result.called++; e.next(); }, "demo2") onBootstrap((e) => { e.next() // check hooks propagation and tags filtering const recordA = $app.findFirstRecordByFilter("demo2", "1=1") recordA.set("title", "update") $app.save(recordA) if (result.called != 2) { throw new Error("Expected result.called to be 2, got " + result.called) } // reset result.called = 0; // check error handling let hasErr = false try { const recordB = $app.findFirstRecordByFilter("demo1", "1=1") recordB.set("text", "update") $app.save(recordB) } catch (err) { hasErr = true } if (!hasErr) { throw new Error("Expected an error to be thrown") } if (result.called != 1) { throw new Error("Expected result.called to be 1, got " + result.called) } }) $app.bootstrap(); `) if err != nil { t.Fatal(err) } } func TestHooksExceptionUnwrapping(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() goErr := errors.New("test") vmFactory := func() *goja.Runtime { vm := goja.New() baseBinds(vm) vm.Set("$app", app) vm.Set("goErr", goErr) return vm } pool := newPool(1, vmFactory) vm := vmFactory() hooksBinds(app, vm, pool) _, err := vm.RunString(` onModelUpdate((e) => { throw goErr }, "demo1") `) if err != nil { t.Fatal(err) } record, err := app.FindFirstRecordByFilter("demo1", "1=1") if err != nil { t.Fatal(err) } record.Set("text", "update") err = app.Save(record) if !errors.Is(err, goErr) { t.Fatalf("Expected goError, got %v", err) } } func TestRouterBindsCount(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() vm := goja.New() routerBinds(app, vm, nil) testBindsCount(vm, "this", 2, t) } func TestRouterBinds(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() result := &struct { RouteMiddlewareCalls int GlobalMiddlewareCalls int }{} vmFactory := func() *goja.Runtime { vm := goja.New() baseBinds(vm) apisBinds(vm) vm.Set("$app", app) vm.Set("result", result) return vm } pool := newPool(1, vmFactory) vm := vmFactory() routerBinds(app, vm, pool) _, err := vm.RunString(` routerAdd("GET", "/test", (e) => { result.routeMiddlewareCalls++; }, (e) => { result.routeMiddlewareCalls++; return e.next(); }) // Promise is not technically supported as return result // but we try to resolve it at least for thrown errors routerAdd("GET", "/error", async (e) => { throw new ApiError(456, 'test', null) }) routerUse((e) => { result.globalMiddlewareCalls++; return e.next(); }) `) if err != nil { t.Fatal(err) } baseRouter, err := apis.NewRouter(app) if err != nil { t.Fatal(err) } serveEvent := new(core.ServeEvent) serveEvent.App = app serveEvent.Router = baseRouter if err = app.OnServe().Trigger(serveEvent); err != nil { t.Fatal(err) } mux, err := serveEvent.Router.BuildMux() if err != nil { t.Fatalf("Failed to build router mux: %v", err) } scenarios := []struct { method string path string expectedRouteMiddlewareCalls int expectedGlobalMiddlewareCalls int expectedCode int }{ {"GET", "/test", 2, 1, 200}, {"GET", "/error", 0, 1, 456}, } for _, s := range scenarios { t.Run(s.method+" "+s.path, func(t *testing.T) { // reset result.RouteMiddlewareCalls = 0 result.GlobalMiddlewareCalls = 0 rec := httptest.NewRecorder() req := httptest.NewRequest(s.method, s.path, nil) mux.ServeHTTP(rec, req) if result.RouteMiddlewareCalls != s.expectedRouteMiddlewareCalls { t.Fatalf("Expected RouteMiddlewareCalls %d, got %d", s.expectedRouteMiddlewareCalls, result.RouteMiddlewareCalls) } if result.GlobalMiddlewareCalls != s.expectedGlobalMiddlewareCalls { t.Fatalf("Expected GlobalMiddlewareCalls %d, got %d", s.expectedGlobalMiddlewareCalls, result.GlobalMiddlewareCalls) } if rec.Code != s.expectedCode { t.Fatalf("Expected status code %d, got %d", s.expectedCode, rec.Code) } }) } } func TestFilepathBindsCount(t *testing.T) { vm := goja.New() filepathBinds(vm) testBindsCount(vm, "$filepath", 15, t) } func TestOsBindsCount(t *testing.T) { vm := goja.New() osBinds(vm) testBindsCount(vm, "$os", 20, t) } C DxvU yUIũJ\J%Iz0Ɂ(KRKp^¨dT@pLEEL3?_4bx850, t)PI#""}EJGK{K74&cxW]o6}~m0tRJv麡tateDyi%%^-/`K佇/"]g.@`t6Z4g Ĥl +kY@M iwj_rتl1)ڵmލW:!F$lzbzU3(i-l*Ѐ /*qM? .'(QP/P`&഑*Y#r{qӋN;ʚruPNv>iR@lZ]? Ӌ-;柹)m2BnHQ#KMt؜O\<ŭ9p -/9g-d79̬+ 1\%F0hQ쐽;}2"x=#iy8NEvCfr!+Q%F>Yy2JM=Ӎ.ois?a? *~mqh ܒ= q&ƂfA1l7q%8wm:zhw_->cEݸMp0ūC-e(j4ONq4:7@+%L4br&&\b3tȓ{_X>8oMlƧvɠ8Է`ݯoE3bJr!>Q39'D.xE=$"sE$DW NrDSs-$8S+S^~Kyv.YxUKMvTz{[:Fb_ 3 L`|*[Š~7h"hTU! hm+n-pddFaQI6|)Y\k;Y{CƧIꝘH"њ_&cEPYղ߆ZoPiPP*+>(NDq[y; 2)n׺V .Y"DT*v5sVvЈ*w"Ϸv7W۱l؋hލiK+$48572~&::>l cئRC'_ǤVnhWo88|D瀛3&]"M8 uHehyG,+?1}*\cqwmzgbMmx̻-K? ]G;* JԌž͛,nhr̫<焛ۨuv$_KC;wEp1ls)4y_v:jGȧ~QB7`q hjI7< Zy> NfiXBuO@N-EfQEZ PC:$zB3>(oonIsl+ޝM\}g@lyJM+aKU;m D8cL1;MIWT٣:BzK!j."JHcR)Y(Q67W8c.p9sr</,pxFQ*Mص:s䴐?:uE4ɻKxzBuB(GFb^U~b48{l{!& ̠x 40000 typesVCX`Ӳ$=.ay} xH40000 generatedrꝞ!@ P100644 types.go⾘/N'T'-*w'xJ100644 embed.goXCrE͢=[D100644 types.d.tsi={j̸퇴Ԑ\9 c(x+HLNLOUHOK-J,IM-/*QPJMJMQOϷsJ* RRJB@\[07xg//%%$<߷=+wD~-.F0 -.KFFF F F ̗#t'.x荽/hpackage main import ( "fmt" "log" "os" "path/filepath" "reflect" "runtime" "strings" "time" "bcore" "bplugins/jsvm" "b=tools/list" "github.com/hanzoai/tygoja" ) const heading = `!lH + "```" + y + "```" + Aow + "```" + ! + "```" + At + "```" + { + "```" + AkS + "```" + ^ + "```" + Ak + "`on${string}`" + m "core. =ORIGINAL_CORE_APP> // hanzo. ;+ORIGINAL_HANZOBASE> /** * ` + "`$app`" + 2  + "`$template`" +  + "```" +  + "```" +  + "```" + '% + "```" + $  + "```" + '; + "```" + $  + "```" + i* + "```" + $  + "```" + {i + "```" + $ ! + "`" + `Object.assign` + "`" + +G + "`" +p+ "`" +  + "```" + YC + "```" + $  + "`-0`" + O5 + "`model.roles`" + ` and not ` + "`model.Roles`" + @ + "`get(key)`" + ` (e.g. ` + "`model.meta.get('something')`" + 8 + "`null*()`" + ` helpers - ` + "`nullString()`" + `, ` + "`nullInt()`" + `, ` + "`nullFloat()`" + `, ` + "`nullBool()`" + `, 1` + "`nullArray()`" + `, ` + "`nullObject()`" + `` + "```" +  + "```" + $& + "`DynamicModel`" + i + "`DynamicModel`" + ` in4[t + "`DynamicModel`" +  + "`DynamicModel`" + ` boolq3 ~ + "`DynamicModel`" + V!" + "`DynamicModel`" + ` JSON objec4b"  + "```" + l#D + "```" + $ + "```" + ]% + "```" + $!p&8 + "```" + ]%'  + "```" + $( * + "```" + 8] + "```" + $&l: + "```" + E; + "```" + $(< + "```" + < + "```" + $!p&>h + "```" + @s + "```" + $&@& + "`" +B+ "`" + ` method` + "```" + CZ + "```" + qC! + "```" + D + "```" + $&mF' + "```" + GF + "```" + $&H + "```" + Iz + "```" + $(J + "```" + `js *K + "```" + $&L + "`$dbx`" + M + "`" + `$mails` + "`" + Q\ + "`" + `$security` + "`" + S + "`" + `$filesystem` + "`" + :c$YU + "`" + `close()` + "`" + `^#w[' + "`" +[+ "`" + [ + "`" + `close()` + "`" + `^#w[' + "`" +[+ "`" + \& + "```" + ^ + "```" + ^ + "`$filepath`" + :c6j)` + "`$os`" + :c@ + "```" + {d + "```" + Ie  + "`" + `$apis` + "`" + r{ + "`" + `$http` + "`" + ]z + "```" + {x + "```" + ^}` var mapper = &jsvm.FieldMapper{} func main() { declarations := heading + hooksDeclarations() gen := tygoja.New(tygoja.Config{ Packages: map[string][]string{ "github.com/go-ozzo/ozzo-validation/v4": {"Error"}, "github.com/hanzoai/dbx"aV {"*"}, "btools/security": {"*"}, "btools/filesystem": {"*"}, "btools/template": {"*"}, "bmails": {"*"}, "bapis": {"*"}, "bcore": {"*"}, "bforms": {"*"}, "b"aV{"*"}, "path/filepath"aVW {"*"}, "os"aVW W {"*"}, "os/exec"aVW V{"Command"}, }, FieldNameFormatter: func(s string) string { return mapper.FieldName(nil, reflect.StructField{Name: s})  }, MethodNameFormatter: func(s string) string { return mapper.MethodName(nil, reflect.Method{Name: s}) }, TypeMappings: map[string]string{ "crypto.*": "any", "acme.*": "any", "autocert.*": "any", "driver.*": "any",  "reflect.*": "any", "fmt.*": "any", "rand.*": "any", "tls.*": "any", "asn1.*": "any", "pkix.*": "any", "x509.*": "any", "pflag.*": "any", "flag.*": "any", "log.*": "a3ny", "http.Client": "any", "mail.Address": "e #", // prevents the LSP to complain in case no name is provided }, Indent: " ", // use only a single space to reduce slightly the size WithPackageFunctions: true, Heading: declarations, }) result, err := gen.Generate() if err != nil { log.Fatal(err) } _, filename, _, ok := runtime.Caller(0) if !ok { log.Fatal("Failed to get the current docs directory") } // replace the original app interfaces with their non-"on*"" hooks equivalents result = strings.ReplaceAll(result, "core.App", "CoreApp") result = strings.ReplaceAll(result, "hanzo.Base", "Base") result = strings.ReplaceAll(result, "ORIGINAL_CORE_APP", "core.App") result = strings.ReplaceAll(result, "ORIGINAL_HANZOBASE", "hanzo.Base") // prepend a timestamp with the generation time // so that it can be compared without reading the entire file result = fmt.Sprintf("// %d\n%s", time.Now().Unix(), result) parentDir := filepath.Dir(filename) typesFile := filepath.Join(parentDir, "generated", "types.d.ts") if err := os.WriteFile(typesFile, []byte(result), 0644); err != nil { log.Fatal(err) } } func hooksDeclarations() string { var result strings.Builder excluded := []string{"OnServe"} appType := reflect.TypeOf(struct{ core.App }{}) totalMethods := appType.NumMethod() for i := 0; i < totalMethods; i++ { method := appType.Method(i) if !strings.HasPrefix(method.Name, "On") || list.ExistInSlice(method.Name, excluded) { continue // not a hook or excluded } hookType := method.Type.Out(0) withTags := strings.HasPrefix(hookType.String(), "*hook.TaggedHook") addMethod, ok := hookType.MethodByName("BindFunc") if !ok { continue } addHanlder := addMethod.Type.In(1) eventTypeName := strings.TrimPrefix(addHanlder.In(0).String(), "*") jsName := mapper.MethodName(appType, method) result.WriteString("/** @group Base */") result.WriteString("declare function ") result.WriteString(jsName) result.WriteString("(handler: (e: ") result.WriteString(eventTypeNameK) result.WriteString(") => void") if withTags { result.WriteString("у`") } result.WriteString("): void") result.WriteString("\n") } return result.String() } Rx8ǫp// Package jsvm implements pluggable utilities for binding a JS goja runtime // to the Base instance (loading migrations, attaching to app hooks, etc.). // // Example: // // jsvm.MustRegister(app, jsvm.Config{ // HooksWatch: true, // }) package jsvm imOport ( "bytes" "errors" "fmt" "io" "io/fs" "os" "path/filepath" "regexpE.dop251/goja" "github.com/dop251/goja_nodejs/buffer" "github.com/dop251/goja_nodejs/console" "github.com/dop251/goja_nodejs/pkrocess" "github.com/dop251/goja_nodejs/require" "github.com/fatih/color" "github.com/fsnotify/fsnotify" ,/internal/types/generated" · ) const typesFileName = "types.d.ts" var defaultScriptPath = "base.js" func init() { // For backward compatibility and consistency with the Go exposed // methods that operate with relative paths (e.g. `$os.writeFile`), // we define the "current JS module" as if it is a file in the current working directory // (the filename itself doesn't really matter and in our case the hook handlers are executed as separate "programs"). // // This is necessary for `require(module)` to properly traverse parents node_modules (goja_nodejs#95). cwd, err := os.Getwd() if err != nil { // truly rare case, log just for debug purposes color.Yellow("Failed to retrieve the current working directory: %v", err) } else { defaultScriptPath = filepath.Join(cwd, defaultScriptPath) } } // Config defines the config options of the jsvm plugin. type Config struct { // OnInit is an optional function that will be called // after a JS runtime is initialized, allowing you to // attach custom Go variables and functions. OnInit func(vm *goja.Runtime) // HooksWatch enables auto app restarts when a JS app hook file changes. // // Note that currently the application cannot be automatically restarted on Windows // because the restart process relies on execve. HooksWatch bool // HooksDir specifies the JS app hooks directory. // // If not set it fallbacks to a relative "data/../hooks" directory. HooksDir string // HooksFilesPattern specifies a regular expression pattern that // identify which file to load by the hook vm(s). // // If not set it fallbacks to `^.*(\.base\.js|\.base\.ts)$`, aka. any // HookdsDir file ending in ".base.js" or ".base.ts" (the last one is to enforce IDE linters). HooksFilesPattern string // HooksPoolSize specifies how many goja.Runtime instances to prewarm // and keep for the JS app hooks gorotines execution. // // Zero or negative value means that it will create a new goja.Runtime // on every fired goroutine. HooksPoolSize int // MigrationsDir specifies the JS migrations directory. // // If not set it fallbacks to a relative "data/../migrations" directory. MigrationsDir string // If not set it fallbacks to `^.*(\.js|\.ts)$`, aka. any MigrationDir file // ending in ".js" or ".ts" (the last one is to enforce IDE linters). MigrationsFilesPattern string // TypesDir specifies the directory where to store the embedded // TypeScript declarations file. // // If not set it fallbacks to "data". // // Note: Avoid using the same directory as the HooksDir when HooksWatch is enabled // to prevent unnecessary app restarts when the types file is initially created. TypesDir string } // MustRegister registers the jsvm plugin in the provided app instance // and panics if it fails. // // Example usage: // // jsvm.MustRegister(app, jsvm.Config{ // OnInit: func(vm *goja.Runtime) { // // register custom bindings // vm.Set("myCustomVar", 123) // }, // }) func MustRegister(app core.App, config Config) { if err := Register(app, config); err != nil { panic(err) } } // Register registers the jsvm plugin in the provided app instance. func Register(app core.App, config Config) error { p := &plugin{app: app, config: config} if p.config.HooksDir == "" { p.config.HooksDir = filepath.Join(app.DataDir(), "../hooks") } if p.config.MigrationsDir == "" { p.config.MigrationsDir = filepath.Join(app.DataDir(), "../migrations") } if p.config.HooksFilesPattern == "" { p.config.HooksFilesPattern = `^.*(\.base\.js|\.base\.ts)$` } if p.config.MigrationsFilesPattern == "" { p.config.MigrationsFilesPattern = `^.*(\.js|\.ts)$` } if p.config.TypesDir == "" { p.config.TypesDir = app.DataDir() } p.app.OnBootstrap().BindFunc(func(e *core.BootstrapEvent) error { err := e.Next() if err != nil { return err } // ensure that the user has the latest types declaration err = p.refreshTypesFile() if err != nil { color.Yellow("Unable to refresh app types file: %v", err) } return nil }) if err := p.registerMigrations(); err != nil { return fmt.Errorf("registerMigrations: %w", err) } if err := p.registerHooks(); err != nil { return fmt.Errorf("registerHooks: %w", err) } return nil } type plugin struct { app core.App config Config } // registerMigrations registers the JS migrations loader. func (p *plugin) registerMigrations() error { // fetch all js migrations sorted by their filename files, err := filesContent(p.config.MigrationsDir, p.config.MigrationsFilesPattern) if err != nil { return err } absHooksDir, err := filepath.Abs(p.config.HooksDir) if err != nil { return err } registry := new(require.Registry) // this can be shared by multiple runtimes templateRegistry := template.NewRegistry() for file, content := range files { vm := goja.New() registry.Enable(vm) console.Enable(vm) process.Enable(vm) buffer.Enable(vm) baseBinds(vm) dbxBinds(vm) securityBinds(vm) osBinds(vm) filepathBinds(vm) httpClientBinds(vm) filesystemBinds(vm) formsBinds(vm) mailsBinds(vm) vm.Set("$template", templateRegistry) vm.Set("__hooks", absHooksDir) vm.Set("migrate", func(up, down func(txApp core.App) error) {  core.AppMigrations.Register(up, down, file) }) if p.config.OnInit != nil { p.config.OnInit(vm) } _, err := vm.RunScript(defaultScriptPath, string(content)) if err != nil { return fmt.Errorf("failed to run migration %s: %w", file, err)  } } return nil } // registerHooks registers the JS app hooks loader. func (p *plugin) registerHooks() error { // fetch all js hooks sorted by their filename files, err := filesContent(p.config.HooksDir, p.config.HooksFilesPattern) if err != nil { return err } // prepend the types reference directive // // note: it is loaded during startup to handle conveniently also // the case when the HooksWatch option is enabled and the application // restart on newly created file for name, content := range files { if len(content) != 0 { // skip non-empty files for now to prevent accidental overwrite continue }  path := filepath.Join(p.config.HooksDir, name) directive := `/// ` if err := prependToEmptyFile(path, directive+"\n\n"); err != nil { color.Yellow("Unable to prepend the types reference: %v", err) } } // initialize the hooks dir watcher if p.config.HooksWatch { if err := p.watchHooks(); err != nil { color.Yellow("Unable to init hooks watcher: %v", err) } } if len(files) == 0 { // no need to register the vms since there are no entrypoint files anyway return nil } absHooksDir, err := filepath.Abs(p.config.HooksDir) if err != nil {  return err } p.app.OnServe().BindFunc(func(e *core.ServeEvent) error { e.Router.BindFunc(p.normalizeServeExceptions) return e.Next() }) // safe to be shared across multiple vms requireRegistry := new(require.Registry) templateRegistry := template.NewRegistry() sharedBinds := func(vm *goja.Runtime) { requireRegistry.Enable(vm) console.Enable(vm) process.Enable(vm) buffer.Enable(vm) baseBinds(vm) dbxBinds(vm) filesystemBinds(vm) securityBinds(vm) osBinds(vm) filepathBinds(vm) httpClientBinds(vm) formsBinds(vm) apisBinds(vm) mailsBinds(vm) vm.Set("$app", p.app) vm.Set("$template", templateRegistry) vm.Set("__hooks", absHooksDir) if p.config.OnInit != nil { p.config.OnInit(vm) } } // initiliaze the executor vms executors := newPool(p.config.HooksPoolSize, func() *goja.Runtime { executor := goja.New() sharedBinds(executor) return executor }) // initialize the loader vm loader := goja.New() sharedBinds(loader) hooksBinds(p.app, loader, executors) cronBinds(p.app, loader, executors) routerBinds(p.app, loader, executors) for file, content := range files { func() { defer func() { if err := recover(); err != nil { fmtErr := fmt.Errorf("failed to execute %s:\n - %v", file, err) if p.config.HooksWatch { color.Red("%v", fmtErr) } else { panic(fmtErr) } } }()  _, err := loader.RunScript(defaultScriptPath, string(content)) if err != nil { panic(err) } }() } return nil } // normalizeExceptions registers a global error handler that // wraps the extracted goja exception error value for consistencUy // when throwing or returning errors. func (p *plugin) normalizeServeExceptions(e *1Derror { err := e.Next() if err == nil || e.Written() { return err // no error or already committed } return normalizeException(err) } // watchHooks initializes a hooks file watcher that will restart the // application (*if possible) in case of a change in the hooks directory. // // This method does nothing if the hooks directory is missing. func (p *plugin) watchHooks() error { watchDir := p.config.HooksDir hooksDirInfo, err := os.Lstat(p.config.HooksDir) if err != nil { if errors.Is(err, fs.ErrNotExist) { return nil // no hooks dir to watch } return err } if hooksDirInfo.Mode()&os.ModeSymlink == os.ModeSymlink { watchDir, err = filepath.EvalSymlinks(p.config.HooksDir) if err != nil { return fmt.Errorf("failed to resolve hooksDir symlink: %w", err) } } watcher, err := fsnotify.NewWatcher() if err != nil { return err } var debounceTimer *time.Timer stopDebounceTimer := func() { if debounceTimer != nil { debounceTimer.Stop() debounceTimer = nil } } p.app.OnTerminate().BindFunc(func(e *core.TerminateEvent) error { watcher.Close() stopDebounceTimer() return e.Next() }) // start listening for events. go func() { defer stopDebounceTimer() for { select { case event, ok := <-watcher.Events: if !ok { return } stopDebounceTimer() debounceTimer = time.AfterFunc(50*time.Millisecond, func() { // app restart is currently not supported on Windows if runtime.GOOS == "windows" { color.Yellow("File %s changed, please restart the app manually", event.Name) } else { color.Yellow("File %s changed, restarting...", event.Name) if err := p.app.Restart(); err != nil { color.Red("Failed to restart the app:", err) } } }) case err, ok := <-watcher.Errors: if !ok { return } color.Red("Watch error:", err) } } }() // add directories to watch // // @todo replace once recursive watcher is added (https://github.com/fsnotify/fsnotify/issues/18) dirsErr := filepath.WalkDir(watchDir, func(path string, entry fs.DirEntry, err error) error { // ignore hidden directories, node_modules, symlinks, sockets, etc. if !entry.IsDir() || entry.Name() == "node_modules" || strings.HasPrefix(entry.Name(), ".") { return nil } return watcher.Add(path) }) if dirsErr != nil { watcher.Close() } return dirsErr } // fullTypesPathReturns returns the full path to the generated TS file. func (p *plugin) fullTypesPath() string { return filepath.Join(p.config.TypesDir, typesFileName) } // relativeTypesPath returns a path to the generated TS file relative // to the specified basepath. // // It fallbacks to the full path if generating the relative path fails. func (p *plugin) relativeTypesPath(basepath string) string { fullPath := p.fullTypesPath() rel, err := filepath.Rel(basepath, fullPath) if err != nil { // fallback to the full path rel = fullPath } return rel } // refreshTypesFile saves the embedded TS declarations as a file on the disk. func (p *plugin) refreshTypesFile() error { fullPath := p.fullTypesPath() // ensure that the types directory exists di!ullPath) if err := os.MkdirAll(dir, os.ModePerm); err != nil { return err } // retrieve the types data to write data, err := generated.Types.ReadFile(typesFileName) if err != nil { return err } // read the first timestamp line of the old file (if exists) and compare it to the embedded one // (note: ignore errors to allow always overwriting the file if it is invalid) existingFile, err := os.Open(fullPath) if err == nil { timestamp := make([]byte, 13) io.ReadFull(existingFile, timestamp) existingFile.Close() if len(data) >= len(timestamp) && bytes.Equal(data[:13], timestamp) { return nil // nothing new to save } } return os.WriteFile(fullPath, data, 0644) } // prependToEmptyFile prepends the specified text to an empty file. // // If the file is not empty this method does nothing. func prependToEmptyFile(path, text string) error { info, err := os.Stat(path) if err == nil && info.Size() == 0 { return os.WriteFile(path, []byte(text), 0644) } return err } // filesContent returns a map with all direct files within the specified dir and their content. // // If directory with dirPath is missing or no files matching the pattern were found, // it returns an empty map and no error. // // If pattern is empty string it matches all root files. func filesContent(dirPath string, pattern string) (map[string][]byte, error) { files, err := os.ReadDir(dirPath) if err != nil { if errors.Is(err, fs.ErrNotExist) { return map[string][]byte{}, nil } return nil, err } var exp *regexp.Regexp if pattern != "" { var err error if exp, err = regexp.Compile(pattern); err != nil { return nil, err } } result := map[string][]byte{} for _, f := range files { if f.IsDir() || (exp != nil && !exp.MatchString(f.Name())) { continue } raw, err := os.ReadFile(filepath.Join(dirPath, f.Name())) if err != nil { return nil, err } 2 result[f.Name()] = raw } return result, nil } gzcxMo0 `u-udHk{Hv @eG-y(Gna9Yė)%ekqx6u(=ysf .Bf-+)J8 p 1S QA) v" pyH @˒kAۚ}JGm0-;Z"Xe*@3%P=iQZ灎$F31 :; €ȑ*+JVH- [QQ8!PsF DVkӊ ziJ4;,2qK8%\1 o Yr^=ڮsrRơv8H1AHQ.}x<}H77#hzzJTORO?'wWO\(6IEz׵oK+4ذzFf|ʮ~Pɵ4"j ^ęο3]=3jsӆCGl+_njpzҰs58"|X|s8k;3^>dўwf[jN׸pPT#p/%p׎QU擃T`@Oz6J_M0[lkTpS5tp7^`o1f#W>Ǚ=wneaANA؄l=G/=xRak0l PHqa/u4HvPQ䳣ն\I}w봐|~N*.xi؂/JiFhHs6rL}*+%7a^g4cOR-J\Kȓ*#>vW8]^vWC%Rb<<ka+yP]a HKC,t8omO`3G'57&f$>5w8{2m@u{vr{;|y)lߗz3]=5&{/J&—gnbNjE]L̹yKv4H^,8C%:zLDζH)kۭH2Fʇ+,̧c<]st<%l4s2ecP˃BȚ1j8^v4pzXf;/[3Rx~}GFb^U~bnfK?Yx}Tn0 =_A08mlvɖ6`(0P PH2dɭWGrN)=ʭjj,m}PŬ\3+eg>mַ?[CzBCj"M PKb6Xbz}k X?3VMa\Sͯ C\:yu3Q%8|&؁'ڀwO*X2ء@[[{háC]2 Ǒ>QiFZÛ4jYPLZ`VnvN94f}xo?-b+ ]),i`~q_z"1^G1'YҐ365xZ*B_'TV!`8lMGS#5^>ʞ0uړsR1Qsj%:C~5W}7,W$ǢmܖĂUOY^ڿ."8I܆"ZkrSVx-4IsdM,%u&^lȃh_.#ez$zL8Ф 0:qż+dOcZP%)cw fF؇P6͝ilFŒEdIK'y#rpnEumMl&s ?7hONd5_ծ-?Lle|/=ƕ81B'[&N_o+3`"6U.2 cnOJVY`HH7-stgA ]Ƕ*@34 9ƎsҐYm2걊paoBA!RX+Y$E?":)mbr.',,Y׬X8ODWb*}KqܵmsY+TXMY⍓ BP9RM& 9='\ S{ ISFB_qpD_2 $e軮'i =N~I ){%E "ԸfrrEG QOq$Zd9ĝf>}-f-]L&CHmta)Gކ7Abz;Y7OVk Z>{ ]{1$ 5):B#jC3 br`^'\ fv*F5T 7>) {:Yԛ ;8R%`ps?KG!$3+ 81?A s^xHk-5+0  ϏԟNO~Ic IB"%*x& pHWg"ΔKzEEjIfkz(cj237V-NdDJM Q8Vp&/m 8R0'~Ulے?>Dv1wf0o1w!E\&i>̱B܆5Q_L+]$A `@I}ff={6' p:͞P=dq;2c gha[M XI9,4$hB-rnGxQPrZ!Gm\ɐ;ad*T@|}g:Clk0=V9m9Ѝ42t (@̭=ޢD%i\lڬ*-e'lPvףƬ$[`2.ALEgɣ}&`-D7`xt8θqʦ! :eP(ti3slOpdxM[w 63Ql&=s-Y]ʾ婰p2|NC3e8|2w5ЯZ2[功>u>ChʑSt{ op G:5WD_>{Y-\zHӹ!½'DHȇQ%Ƚ ?ѿ~Y?z=$`?;}3 \g1nhz ܀!RU1lAgrcNzZol >t~-`fj~ =Uf_˹g!3T6C}sC4ۣvG[/A p*Ju|`C6(ļ6Jb,M|biDRL8=ey.O[Y\GZVYO.O4wvzc@>R_6 Ι63RFm.{Iɺ*h\2*_-қYOS-8oћ+Qz(zəDxV]o6}ŭ`i[d]`#QaTIm\R|af͏sϽ)֪eix6ǯ'1s:YJUEa#+R/%bNTLjkxVb)ivT[Qt$蛴fK%sJ˜̬R{f4c!oI|Ios#-̑3VMBR5RV)1qEMX'pqF0s+s̍K魒UH l,& lVhWÀsV6JĸKcVP+;5NQR}?%QHY v1FiӁeydG1J9OةA"ρ$W+9ˤv&:~'ӃWOμ3W ԐA8O\}إE2W6d`%o!U0 >ާ;E)k7>SL(`6@rG \]ZN0D.7cAg^FbW])$OQdFw5R%_a$q7+t7d : F+ NW;ۻ=%}QDB f]a5*Ќ5٫t.F܈J` -φh36Tf<qEsvoMDSoBsY(FR?nGT+g0 U.o;/NwS@@=^rf-a)mlI= ^4!mp7ցQ΍|Ks|-Ee2َ~wjm}80fJI-V j<RrC KBڜnfC mCCZ@JadD''t,79/. 7c㪤;O˃ XB$#W$B"^_!o_ճHi݀*|xG㈿_$fR¼i4{L{pz䆬5B~ n O7|a/+:n۞p^ð_w2~ "!C#.=@;j9rh!Ts Pa1;di{?ڪ7.]z=L/tv/xpozx{/NjC*;S vv62Cx_// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package kms import ( "crypto/hmac" "crypto/sha256" "encoding/base64" "fmt" "github.com/hanzoai/base/core" sdk "github.com/hanzoai/kms/sdk/go" ) // FHE index prefix for stored index values. const fheIndexPrefix = "fhe:v1:" // updateFHEIndex maintains deterministic encrypted indexes for FHE-searchable // fields. These indexes support equality checks and prefix queries without // decrypting the underlying data. // // The index is a deterministic HMAC-SHA256 of the plaintext value keyed by // a field-specific subkey derived from the CEK. This allows the server to // evaluate equality gates on encrypted indexes without seeing plaintext. // // Index key derivation: // // field_key = HMAC-SHA256(CEK, org_slug + ":" + collection + ":" + field) // index = HMAC-SHA256(field_key, plaintext_value) // // The index is stored alongside the record in a synthetic field named // "_fhe_{field}" which can be queried with standard Base filters. func (p *plugin) updateFHEIndex(record *core.Record) error { col := record.Collection().Name fheFields, ok := p.fheFieldSet[col] if !ok { return nil } if !p.client.IsUnlocked() { return fmt.Errorf("kms client is locked — cannot update FHE index for %q", col) } cek, err := p.client.ExportCEK() if err != nil { return fmt.Errorf("get CEK for FHE index: %w", err) } defer clear(cek) for field := range fheFields { val := record.GetString(field) if val == "" { continue } // If the value is already encrypted, we cannot index it. // The index must be computed from the plaintext value before encryption. // Since updateFHEIndex is called before encryptFields in the hook chain // (same priority, but called first), the value should still be plaintext. if isEncryptedValue(val) { continue } indexValue, err := computeFHEIndex(cek, p.config.OrgSlug, col, field, val) if err != nil { return fmt.Errorf("compute FHE index for %q.%q: %w", col, field, err) } indexFieldName := "_fhe_" + field record.Set(indexFieldName, fheIndexPrefix+base64.RawURLEncoding.EncodeToString(indexValue)) } return nil } // computeFHEIndex computes a deterministic encrypted index for a value. // The result is an HMAC-SHA256 that allows equality comparison without // revealing the plaintext. func computeFHEIndex(cek []byte, orgSlug, collection, field, value string) ([]byte, error) { // Derive a field-specific subkey. fieldKeyMAC := hmac.New(sha256.New, cek) fieldKeyMAC.Write([]byte(orgSlug + ":" + collection + ":" + field)) fieldKey := fieldKeyMAC.Sum(nil) // Compute deterministic index. indexMAC := hmac.New(sha256.New, fieldKey) indexMAC.Write([]byte(value)) return indexMAC.Sum(nil), nil } // ComputeSearchToken generates an FHE search token for a given plaintext // query value. The token can be compared against stored FHE indexes // for equality matching without decrypting the stored data. // // Usage: // // token, err := plugin.ComputeSearchToken("credentials", "name", "my-api-key") // // Use token in query: app.FindAll("credentials", "_fhe_name = ?", token) func (p *plugin) ComputeSearchToken(collection, field, value string) (string, error) { cek, err := p.client.ExportCEK() if err != nil { return "", fmt.Errorf("get CEK for search token: %w", err) } defer clear(cek) index, err := computeFHEIndex(cek, p.config.OrgSlug, collection, field, value) if err != nil { return "", fmt.Errorf("compute search token: %w", err) } return fheIndexPrefix + base64.RawURLEncoding.EncodeToString(index), nil } // sealField encrypts a field value using AES-256-GCM via the KMS SDK. func sealField(cek, plaintext, aad []byte) ([]byte, error) { return sdk.SealAESGCM(cek, plaintext, aad) } // openField decrypts a field value using AES-256-GCM via the KMS SDK. func openField(cek, ciphertext, aad []byte) ([]byte, error) { return sdk.OpenAESGCM(cek, ciphertext, aad) } Е&ͲxXMs6=bCK%6ɡw|pd5vm'%q`XS (="8ɨ^v=,0¨(25D< 'L|,NEQ@rO`8 Yt4~5ôg *3\.T%KٌBA( >Hq_Uùe,.NpNlx&4y(r5E`P2W4JbW5]YAO+@T2f5D$u)_Wz~;O+388eq`121|=aɵ wqiG3'f|`7?Ƃ\f΂coyh>YD^$7f=im9hOCyʩhORK4LMpyLW N @$T%"9O L H[<3b\,a:+D/2v#]0 K@DdSx|$G"2hA TRo9.dcZo)YmzooJЂ1we<lAiY%6؎+<(g쓬Mbpm(x"BD ׻] nMK-P5,T^׳oJQzm =!jQč50n 6X̲oQ=:ۼyc͑; O |߯1Q Ϟ!d|,䦹Ś&T{"m~rUOkzq;9>C΋ len(encryptedPrefix) && val[:len(encryptedPrefix)] == encryptedPrefix } DxVmo6,>Ram> H  :ŀAJg[0Ej$ wGJY3玜L`[S5ijN</#x#7 gpNfE< 'X BFXla16 - j4MðF6 â!az|M3]NS$GNZoH8I&$4)FՁm- FarB[Ua)lJ/TY xEq**J"10Ղb_Qy;f5{e>~s2s[՘ϴՅVi) epw?Qf0GUBh w rH I%Qܯ0S.KJ2 ܅A%k&9铗 ꁣDLI#ؿ&WJeNV-l ` sj.PBKJ9~:뎟l% ˗|,qCeB•};TorA_ [{sb]!Ώ/Ǐ5X['^#wSQ\}XVy+d5kҮ?ɂuhzvcun vF$tY+jwX8hV%HԳ償I?ξqЎϏvh LI2hFVZ)͐(yTWM!s4|)l ~=9?`{ K¿xnFYADEL[`a+>A!pF~~a*fA]؃. gs.8/}s޸N/"l8"`RѷۃLA0Bl~2@2g0]JN\oKnDijݲ0O+-:*ɏ gnI,Tr0g p@n0Vn؃+B;q>Q ; ~ȈW]noF'p)>l ti2ܸ)Lڭ{Fo9k `Y=~aG z/|#fd/\D^G/^Sh}Hgh5cmH3⭫9yd."Cs2.Q蟉(BO"&VK70襨5/, sAFHWUrc-h'W>0WTPd؏]^>HB*[ї$2:1еIX(c!yfRܐS7Ag&UQf=lRS&l3y0<;8Iy77j(Et{?_EBCsg}e9]EHҔ f,y=~f -bۄi]p! nz=&U%Sߌ+Ck=/*0i)4Wx>՝w \coxw nxwRb36uLqO\)yJJ\{Sʪ%k%A0(L&?} Qu qpENEA ̺H l%W }CnI>%?1oXRDRoJM\/$q8cf ܁&4RhB ~HbYr5#S:]aڭ ѱ `.A+ V)9;a"~cmԪ..9?h7]bʼnHb؃y)9lHi"saC9ɘ;&aT̝&sgw dڒnN4|6 6' ÌoYF&TQiN[|[`;WԝN5٫RsJShݛ9d&ɋs# >-oпijߛzP\Ėw,0yjjη!յ/ݛ_/g^[?bҝXh[^t'H z)-y$A7o=n*Q\P1սa=yB#׌bҫ ?U>iHF :ߝsX16AVl΀M ܓ 9qC;n v:7JRbRV]Gi7: wbqY0dB#s #7)9V@t!2\?K҄r]$NHC'ۏtgtrI6w/jxЋ#4=1o߲u>"IA-xEw*ʞ;w돧71fH*W9BگAlӢ3\L4ٷ +tŔl#d}f; OD/6?r f* L/P_߻m@-f9q\x47E6Pƕ~1] [m`dfaSH-IҬfj=Ҫ5vZe32FB"(|<*Cd_K xV100644 automigrate.godz 4D'=|ju4e<100644 migratecmd.gowX$]vnO9100644 migratecmd_test.go(QqֹVMc 100644 templates.go{Ut n#˵BCxV]o6}~+ 0{IM0 #]l)R%Kʱ&] _^G$ѩ2Qdy#1'!XԎm> v0(zRۦ$n]RsZJ+nIZHSՊGӕԟӺ("T=2s[wM a 装0JGGap1li2Gl*ɪ+cf?~ #%wLՉs]^a6v-hS!V?UK/Zgȟ;D͜f̠wPujy^xaD@].JldGhOu9n b!-l݊1{,H{}P<9=?!MəIׇ-dMG~'nѵֵEJ4FZVН-GpR S؆߯UWlC63nAxv!1\6Xf̫׊0P;hU)ۮx![ш і|39(  &p FREЍ6ʇ(k}u[ϵ"˼c ו>dJbT(b&é@Pli8u}0l+g~/oOܾǜ]B{L}l ?PJ"AQ~h[ac85QrT\@Fyk$gޥk\D&HoS2hFϣ>X&hN]o\1NJ;M}`'R 3?vx DtBRFb^U~b~JRRzfIFi^r~>Lf.tE-xp0// Package migratecmd adds a new "migrate" command support to a Base instance. // // It also comes with automigrations support and templates generation // (both for JS and GO migration files). // // Example usage: // // migratecmd.MustRegister(app, app.RootCmd, migratecmd.Config{ // TemplateLang: migratecmd.TemplateLangJS, // default to migratecmd.TemplateLangGo // Automigrate: true, // Dir: "/custom/migrations/dir", // optional template migrations path; default to the "migrations" sibling of the data dir // }) // // Note: To allow running JS migrations you'll need to enable first // [jsvm.MustRegister()]. package Mmigratecmd import ( "errors" "fmt" "os" "path" "path/filepath" "time" d; inflector"$osutils" "github.com/spf13/cobra" ). migratecmd0" ith the user defined migrations %."migrations" sibling of the data dir // (i.e. base_/migrations). Dir string // Automigrate specifies whether to enable automigrations. Automigrate bool // TemplateLang specifies the template language to use when // generating migrations - js or go (default). TemplateLangI )migratecmd plugin to ' ) 0 { cmd = args[0] } switch cmd { case "create": if _, err := p.migrateCreateHandler("", args[1:], true*creturn err } case "collections": if _, err := p.migrateCollectionsHandler(args[1:], true*return err } default: // note: system migrations are always applied as part of the bootstrap process var list = core.MigrationsList{} list.Copy(core.SystemMigrations) list.Copy(core.AppMigrations) runner := core.NewMigrationsR4unner(p.app, list) if err := runner.Run(args...*return err } } return nil }, } return command } func (p *plugin) migrateCreateHandler(template string, args []string, interactive bool) (string, error) { if len(args) < 1 { return "", errors.New("missing migration file name") } name := args[0] dir := p.config.Dir filename := fmt.Sprintf("%d_%s.%s", time.Now().Unix(), inflector.Snakecase(name), p.config.TemplateLang) resultFilePath := path.Join(dir, filename) if interactive { confirm := osutils.YesNoPrompt(fmt.Sprintf("Do you really want to create migration %q?", resultFilePath), false) if !confirm { fmt.Println("The command has been cancelled") return "", nil } } // get default create template if template == "" { var templateErr error if p.config.TemplateLang == TemplateLangJS { template, templateErr = p.jsBlankTemplate() } else { template, templateErr = p.goBlankTempla0te() } if templateErr != nil { return "",&Screate template: %v", templateErr) } } // ensure that the migrations dir exist0Af"", err } // save the migration file if err := os.WriteFile(resultFilePath, []byte(template), 06440"",&save migration file %q: %v", resultFilePath, err) } if interactive { fmt.Printf("Successfully created file %q\n", resultFilePath) } return filename, nil } func (p *plugin) migrateCollectionsHandler(args []string, interactive bool) (string, error) { createArgs := []string{"collections_snapshot"} createArgs = append(createArgs, args...) collections := []*core.CollectiOon{} if err := p.app.CollectionQuery().OrderBy("created ASC").All(&collections0"",&fetch migrations list: %v", err) } var template string var templateErr error if p.config.TemplateLang == TemplateLangJS {  template, templateErr = p.jsSnapshotTemplate(collections) } else { template, templateErr = p.goSnapshotTemplate(collections) } if templateE"",&dtemplate: %v", templateErr) } return p.migrateCreateHandler(template, createArgs, interactive) } esxGy0Wpackage migratecmd_test import ( "os" "path/filepath" "regexp" "strings" "testing=plugins/migratecmdests"list"types" ) func TestAutomigrateCollectionCreate(t *testing.T) { t.Parallel() scenarios := []struct { lang strin'g expectedTemplate string }{ { + ` /// migrate((app) => { const collection = new Collection({ "authRule": "",  "authToken": { "duration": 604800 }, "confirmEmailChangeTemplate": { "body": "

Hello,

\n

Click on the button below to confirm your new email address.

\n

\n Confirm new email\n

\n

If you didn't ask to change your email address, you can ignore this email.

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Confirm your {APP_NAME} new email address" }, "createRule": null, "deleteRule": null, "emailChangeToken": { "duration": 1800  }, "fields": [ { "autogeneratePattern": "[a-z0-9]{15}", "hidden": false, "id": "text@TEST_RANDOM", "max": 36, "min": 15, "name": "id", "pattern": "^[a-z0-9\\-]+$", "presentable": false, "primaryKey": true, "required": true, "system": true, "type": "text" }, {  "autogeneratePattern": "[a-zA-Z0-9]{50}", "hidden": true, "id": "text@TEST_RANDOM", "max": 60,  "min": 30, "name": "tokenKey", "pattern": "", "presentable": false, "primaryKey": false, "required": true, "system": true, "type": "text" }, { "exceptDomains": null,  "hidden": false, "id": "email@TEST_RANDOM", "name": "email", "onlyDomains": null, "presentable": false, "required": true, "system": true, "type": "email" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "emailVisibility", "presentable": false, "required": false,  "system": true, "type": "bool" }, { "hidden": false, "id": "bool@TEST_RANDOM",  "name": "verified", "presentable": false, "required": false, "system": true, "type": "bool" } ], "fileToken": { "duration": 180 }, "id": "hbc_@TEST_RANDOM", "indexes": [ "create index test on new_name (id)", "CREATE UNIQUE INDEX ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `new_name` + "`" + ` (` + "`" + `tokenKey` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `new_name` + "`" + ` (` + "`" + `email` + "`" + `) WHERE ` + "`" + `email` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 > 0 || 'backtick` + "`" + `test' = 0", "manageRule": "1 != 2", "name": "new_name", "oauth2": { "enabled": false, "mappedFields": { "avatarURL": "", "id": "", "name": "", "username": "" } }, "system": true, "type": "auth", "updateRule": null, "verificationTemplate": {  "body": "

Hello,

\n

Thank you for joining us at {APP_NAME}.

\n

Click on the button below to verify your email address.

\n

\n Verify\n

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Verify your {APP_NAME} email" }, "verificationToken": { "duration": 259200 }, "viewRule": "id = \"1\"" }); return app.save(collection); }, (app) => { const collection = app.findCollectionByNameOrId("hbc_@TEST_RANDOM"); return app.delete(collection); }) `, }, { U migratecmd.TemplateLangGo, ` package _test_migrations import ( "encoding/json$m "github.com/hanzoai/base/migrations" ) func init() { m.Register(func(app core.App) error { jsonData := ` + "`" + `{ "authRule": "", "authToken": { "duration": 604800 }, "confirmEmailChangeTemplate": { "body": "

Hello,

\n

Click on the button below to confirm your new email address.

\n

\n Confirm new email\n

\n

If you didn't ask to change your email address, you can ignore this email.

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Confirm your {APP_NAME} new email address" }, "createRule": null, "deleteRule": null, "emailChangeToken": { "duration": 1800 }, "fields": [ { "autogeneratePattern": "[a-z0-9]{15}", "hidden": false, "id": "text@TEST_RANDOM", "max": 36, "min": 15, "name": "id", "pattern": "^[a-z0-9\\-]+$", "presentable": false, "primaryKey": true, "required": true, "system": true, "type": "text" }, { "autogeneratePattern": "[a-zA-Z0-9]{50}", "hidden": true, "id": "text@TEST_RANDOM", "max": 60, "min": 30, "name": "tokenKey", "pattern": "", "presentable": false, "primaryKey": false, "required": true, "system": true, "type": "text" },  { "exceptDomains": null, "hidden": false, "id": "email@TEST_RANDOM", "name": "email", "onlyDomains": null, "presentable": false, "required": true, "system": true, "type": "email" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "emailVisibility", "presentable": false, "required": false,  "system": true, "type": "bool" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "verified", "presentable": false, "required": false, "system": true, "type": "bool" } ], "fileToken": { "duration": 180 }, "id": "hbc_@TEST_RANDOM", "indexes": [ "create index test on new_name (id)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `new_name` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `tokenKey` + "`" + ` + "` + "`" + `" + ` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `new_name` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + `) WHERE ` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 > 0 || 'backtick` + "`" + ` + "` + "`" + `" + ` + "`" + `test' = 0", "manageRule": "1 != 2", "name": "new_name", "oauth2": { "enabled": false, "mappedFields": { "avatarURL": "", "id": "", "name": "", "username": "" } }, "system": true, "type": "auth", "updateRule": null, "verificationTemplate": { "body": "

Hello,

\n

Thank you for joining us at {APP_NAME}.

\n

Click on the button below to verify your email address.

\n

\n Verify\n

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Verify your {APP_NAME} email" }, "verificationToken": { "duration": 259200 }, "viewRule": "id = \"1\"" }` + "`" + ` collection := &core.Collection{} if err := j+son.Unmarshal([]byte(jsonData), &collectionreturn err } return app.Save(collection) }, func(app core.App) error { collection, err := app.FindCollectionByNameOrId("hbc_@TEST_RANDOM") if err != nil { return err } return app.Delete(collection) }) } `, }, } for _, s := range scenarios { t.Run(s.lang, func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() migrationsDir := fil1epath.Join(app.DataDir(), "_test_migrations") 4nil, migratecmd.Config{ TemplateLang: s.lang, p Dir: migrationsDir, }) app.Bootstrap() collection := core.NewAuthCollection("new_name") collection.System = true collection.ListRule = types.Pointer("@request.auth.id != '' && 1 > 0 || 'backtick`test' = 0") collection.ViewRule = types.Pointer(`id = "1"`) collection.Indexes = types.JSONArray[string]{"create index test on new_name (id)"} collection.ManageRule = types.Pointer("1 != 2") // should be ignored collection.OAuth2.Providers = []core.OAuth2ProviderConfig{{Name: "gitlab", ClientId: "abc", ClientSecret: "123"}} testSecret := strings.Repeat("a", 30) collection.AuthToken.Secret = testSecret collection.FileToken.Secret = testSecret collection.EmailChangeToken.Secret = testSecret collection.VerificationToken.Secret = testSecret // save the newly created dummy collection (with mock request event) event := new(core.CollectionRequestEvent) event.RequestEvent = &core.RequestEvent{} event.App = app event.Collection = collection  err := % Trigger(event, func(e *core.CollectionRequestEvent) error { return e.App.Save(e.Collection) }) if err != nil { t.Fatalf("Failed to save the created dummy collection, got: %v", err) } files, err := os.ReadDir(migrationsDir) if err != nil { t.Fatalf("Expected migrationsDir to be created, got %v", err) } if total := len(files); total != 1 { t.Fatalf("Expected 1 file to be generated, got %d: %v", total, files) } expectedName := "_created_new_name." + s.lang if !strings.Contains(files[0].Name(), expectedName) { t.Fatalf("Expected filename to contains %q, got %q", expectedName, files[0].Name()) } fullPath := filepath.Join(migrationsDir, files[0].Name()) content, err := os.ReadFile(fullPath) if err != nil { t.Fatalf("Failed to read the generated migration file: %v", err) } contentStr := strings.TrimSpace(string(content)) // replace @TEST_RANDOM placeholder with a regex pattern expectedTemplate := strings.ReplaceAll( "^"+regexp.QuoteMeta(strings.TrimSpace(s.expectedTemplate))+"$", "@TEST_RANDOM", `\w+`, ) if !list.ExistInSliceWithRegex(contentStr, []string{expectedTemplate}) { t.Fatalf("Expected template \n%v \ngot \n%v", s.expectedTemplate, contentStr)  } }) } } func TestAutomigrateCollectionDelete(t *testing.T) { t.Parallel() scenarios := []struct { lang ,string expectedTemplate string }{ { + ` /// migrate((app) => { const collection = app.findCollectionByNameOrId("hbc_@TEST_RANDOM"); return app.delete(collection); }, (app) => { const collection = new Collection({ "authRule": "", "authToken": { "duration": 604800 }, "confirmEmailChangeTemplate": { "body": "

Hello,

\n

Click on the button below to confirm your new email address.

\n

\n Confirm new email\n

\n

If you didn't ask to change your email address, you can ignore this email.

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Confirm your {APP_NAME} new email address" }, "createRule": null, "deleteRule": null, "emailChangeToken": { "duration": 1800 },  "fields": [ { "autogeneratePattern": "[a-z0-9]{15}", "hidden": false, "id": "text@TEST_RANDOM",  "max": 36, "min": 15, "name": "id", "pattern": "^[a-z0-9\\-]+$", "presentable": false,  "primaryKey": true, "required": true, "system": true, "type": "text" }, { "autogeneratePattern": "[a-zA-Z0-9]{50}", "hidden": true, "id": "text@TEST_RANDOM", "max": 60, "min": 30, "name": "tokenKey", "pattern": "", "presentable": false, "primaryKey": false,  "required": true, "system": true, "type": "text" }, { "exceptDomains": null, "hidden": false, "id": "email@TEST_RANDOM", "name": "email", "onlyDomains": null, "presentable": false, "required": true, "system": true, "type": "email" }, { "hidden": false,  "id": "bool@TEST_RANDOM", "name": "emailVisibility", "presentable": false, "required": false, "system": true, "type": "bool" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "verified", "presentable": false, "required": false, "system": true, "type": "bool" } ], "fileToken": { "duration": 180 }, "id": "hbc_@TEST_RANDOM", "indexes": [ "create index test on test123 (id)", "CREATE UNIQUE INDEX ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123` + "`" + ` (` + "`" + `tokenKey` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123` + "`" + ` (` + "`" + `email` + "`" + `) WHERE ` + "`" + `email` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 > 0 || 'backtick` + "`" + `test' = 0", "manageRule": "1 != 2", "name": "test123", "oauth2": {  "enabled": false, "mappedFields": { "avatarURL": "", "id": "", "name": "", "username": "" } }, "system": false, "type": "auth", "updateRule": null, "verificationTemplate": { "body": "

Hello,

\n

Thank you for joining us at {APP_NAME}.

\n

Click on the button below to verify your email address.

\n

\n Verify\n

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Verify your {APP_NAME} email" }, "verificationToken": { "duration": 259200 }, "viewRule": "id = \"1\"" }); return app.save(collection); }) `, }, { Rmigratecmd.TemplateLangGo, ` package _test_migrations import ( "encoding/json$m "github.com/hanzoai/base/migrations" ) func init() { m.Register(func(app core.App) error { collection, err := app.FindCollectionByNameOrId("hbc_@TEST_RANDOM") if err != nil { return err } return app.Delete(collection) }, func(app core.App) error { jsonData := ` + "`" + `{ "authRule": "", "authToken": { "duration": 604800 }, "confirmEmailChangeTemplate": { "body": "

Hello,

\n

Click on the button below to confirm your new email address.

\n

\n Confirm new email\n

\n

If you didn't ask to change your email address, you can ignore this email.

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Confirm your {APP_NAME} new email address" }, "createRule": null, "deleteRule": null, "emailChangeToken": { "duration": 1800 }, "fields": [ { "autogeneratePattern": "[a-z0-9]{15}", "hidden": false, "id": "text@TEST_RANDOM", "max": 36, "min": 15, "name": "id", "pattern": "^[a-z0-9\\-]+$", "presentable": false, "primaryKey": true, "required": true, "system": true, "type": "text" }, {  "autogeneratePattern": "[a-zA-Z0-9]{50}", "hidden": true, "id": "text@TEST_RANDOM", "max": 60, "min": 30, "name": "tokenKey", "pattern": "", "presentable": false, "primaryKey": false, "required": true, "system": true, "type": "text" }, { "exceptDomains": null, "hidden": false, "id": "email@TEST_RANDOM", "name": "email", "onlyDomains": null, "presentable": false, "required": true, "system": true,  "type": "email" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "emailVisibility", "presentable": false, "required": false, "system": true, "type": "bool" }, { "hidden": false, "id": "bool@TEST_RANDOM", "name": "verified", "presentable": false, "required": false, "system": true, "type": "bool" } ], "fileToken": { "duration": 180 }, "id": "hbc_@TEST_RANDOM", "indexes": [ "create index test on test123 (id)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `tokenKey` + "`" + ` + "` + "`" + `" + ` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + `) WHERE ` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 > 0 || 'backtick` + "`" + ` + "` + "`" + `" + ` + "`" + `test' = 0", "manageRule": "1 != 2", "name": "test123", "oauth2": { "enabled": false, "mappedFields": { "avatarURL": "",  "id": "", "name": "", "username": "" } }, "system": false, "type": "auth", "updateRule": null,  "verificationTemplate": { "body": "

Hello,

\n

Thank you for joining us at {APP_NAME}.

\n

Click on the button below to verify your email address.

\n

\n Verify\n

\n

\n Thanks,
\n {APP_NAME} team\n

", "subject": "Verify your {APP_NAME} email" }, "verificationToken": { "duration": 259200 }, "viewRule": "id = \"1\"" }` + "`" + ` collecStion := &core.Collection{} if err := json.Unmarshal([]byte(jsonData), &collectionreturn err } return app.Save(collection) }) } `, }, } for _, s := range scenarios { t.Run(s.lang, func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() migrationsDir := filepath.Join(app.DataDir(), "_test_migrations") // create dummy collection collection := core.NewAuthCollection("test123") collection.ListRule = types.Pointer("@request.auth.id != '' && 1 > 0 || 'backtick`test' = 0") collection.ViewRule = types.Pointer(`id = "1"`) collection.Indexes = types.JSONArray[string]{"create index test on test123 (id)"} collection.ManageRule = types.Pointer("1 != 2") if err := app.Save(collectionBt.Fatalf("Failed to save dummy collection, got: %v", err) } 4nil, migratecmd.Config{ TemplateLang: s.lang, p Dir: migrationsDir, }) app.Bootstrap() // delete the newly created dummy collection (with mock request event) event := new(core.CollectionRequestEvent) event.RequestEvent = &core.RequestEvent{} event.App = app event.Co llection = collection err := Trigger(event, func(e *core.CollectionRequestEvent) error { return e.App.Delete(e.Collection) }) if err != nil { t.Fatalf("Failed to delete dummy collection, got: %v", err) } files, err := os.ReadDir(migrationsDir) if err != nil { t.Fatalf("Expected migrationsDir to be created, got: %v", err) } if total := len(files); total != 1 { t.Fatalf("Expected 1 file to be generated, got %d", total) } expectedName := "_deleted_test123." + s.lang if !strings.Contains(files[0].Name(), expectedName) { t.Fatalf("Expected filename to contains %q, got %q", expectedName, files[0].Name()) }  fullPath := filepath.Join(migrationsDir, files[0].Name()) content, err := os.ReadFile(fullPath) if err != nil { t.Fatalf("Failed to read the generated migration file: %v", err) } contentStr := strings.TrimSpace(string(content)) // replace @TEST_RANDOM placeholder with a regex pattern expectedTemplate := strings.ReplaceAll( "^"+regexp.QuoteMeta(strings.TrimSpace(s.expectedTemplate))+"$", "@TEST_RANDOM", `\w+`, ) if !list.ExistInSliceWithRegex(contentStr, []string{expectedTemplate}) { t.Fatalf("Expected template \n%v \ngot \n%v", s.expectedTemplate, contentStr) } }) } } func TestAutomigrateCollectionUpdate(t *testing.T) { t.Parallel() scenarios := []struct { lang string expectedTemplate string }{ { + ` /// migrate((app) => { const collection = app.findCollectionByNameOrId("hbc_@TEST_RANDOM") // update collection data unmarshal({ "createRule": "id = \"nil_update\"", "deleteRule": null, "fileToken": { "duration": 10 }, "indexes": [ "create index test1 on test123_update (f1_name)", "CREATE UNIQUE INDEX ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123_update` + "`" + ` (` + "`" + `tokenKey` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123_update` + "`" + ` (` + "`" + `email` + "`" + `) WHERE ` + "`" + `email` + "`" + ` != ''" ], "listRule": "@request.auth.id != ''", "name": "test123_update", "oauth2": { "enabled": true }, "updateRule": "id = \"2_update\"" }, collection)  // remove field collection.fields.removeById("f3_id") // add field collection.fields.addAt(7, new Field({ "autogeneratePattern": "", "hidden": false, "id": "f4_id", "max": 0, "min": 0, "name": "f4_name", "pattern": "` + "`" + `test backtick` + "`" + `123", "presentable": false, "primaryKey": false, "required": false, "system": false, "type": "text" })) // update field collection.fields.addAt(6, new Field({ "hidden": false, "id": "f2_id", "max": null, "min": 10, "name": "f2_name_new", "onlyInt": false, "presentable": false, "required": false, "system": false, "type": "number" })) return app.save(collection) }, (app) => { const collection = app.findCollectionByNameOrId("hbc_@TEST_RANDOM") // update collection data unmarshal({ "createRule": null, "deleteRule": "id = \"3\"", "fileToken": { "duration": 180 }, "indexes": [ "create index test1 on test123 (f1_name)", "CREATE UNIQUE INDEX ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123` + "`" + ` (` + "`" + `tokenKey` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` ON ` + "`" + `test123` + "`" + ` (` + "`" + `email` + "`" + `) WHERE ` + "`" + `email` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 != 2", "name": "test123", "oauth2": { "enabled": false }, "updateRule": "id = \"2\"" }, collection)  // add field collection.fields.addAt(7, new Field({ "hidden": false, "id": "f3_id", "name": "f3_name", "presentable": false, "required": false, "system": false, "type": "bool" })) // remove field collection.fields.removeById("f4_id") // update field collection.fields.addAt(6, new Field({ "hidden": false, "id": "f2_id", "max": null, "min": 10, "name": "f2_name", "onlyInt": false, "presentable": false, "required": false, "system": false, "type": "number" })) return app.save(collection) }) `, }, { migratecmd.TemplateLangGo, ` package *_test_migrations import ( "encoding/json$m "github.com/hanzoai/base/migrations" ) func init() { m.Register(func(app core.App) error { collection, err := app.FindCollectionByNameOrId("hbc_@TEST_RANDOM") if err != nil { return err } // update collection data if err := json.Unmarshal([]byte(` + "`" + `{ "createRule": "id = \"nil_update\"", "deleteRule": null, "fileToken": { "duration": 10 }, "indexes": [ "create index test1 on test123_update (f1_name)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123_update` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `tokenKey` + "`" + ` + "` + "`" + `" + ` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123_update` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + `) WHERE ` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + ` != ''" ], "listRule": "@request.auth.id != ''", "name": "test123_update", "oauth2": { "enabled": true }, "updateRule": "id = \"2_update\"" }` + "`" + `), &collection); erreturn err } // remove field collection.Fields.RemoveById("f3_id") // add field if err := collection.Fields.AddMarshaledJSONAt(7, []byte(` + "`" + `{ "autogeneratePattern": "", "hidden": false, "id": "f4_id", "max": 0, "min": 0, "name": "f4_name", "pattern": "` + "`" + ` + "` + "`" + `" + ` + "`" + `test backtick` + "`" + ` + "` + "`" + `" + ` + "`" + `123", "presentable": false, "primaryKey": false, "required": false, "system": false, "type": "text" }` + "`" + `)return err } // update field if err := collection.Fields.AddMarshaledJSONAt(6, []byte(` + "`" + `{ "hidden": false,  "id": "f2_id", "max": null, "min": 10, "name": "f2_name_new", "onlyInt": false, "presentable": false, "requEired": false, "system": false, "type": "number" }` + "`" + `)return err } return app.Save(collection) }, func(app core.App) error { collection, err := app.FindCollectionByNameOrId("hbc_@TEST_RANDOM") if err != nil { return err } // update collection data if err := json.Unmarshal([]byte(` + "`" + `{ "createRule": null, "deleteRule": "id = \"3\"", "fileToken": { "duration": 180 }, "indexes": [ "create index test1 on test123 (f1_name)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_tokenKey_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `tokenKey` + "`" + ` + "` + "`" + `" + ` + "`" + `)", "CREATE UNIQUE INDEX ` + "`" + ` + "` + "`" + `" + ` + "`" + `idx_email_hbc_@TEST_RANDOM` + "`" + ` + "` + "`" + `" + ` + "`" + ` ON ` + "`" + ` + "` + "`" + `" + ` + "`" + `test123` + "`" + ` + "` + "`" + `" + ` + "`" + ` (` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + `) WHERE ` + "`" + ` + "` + "`" + `" + ` + "`" + `email` + "`" + ` + "` + "`" + `" + ` + "`" + ` != ''" ], "listRule": "@request.auth.id != '' && 1 != 2", "name": "test123", "oauth2": { "enabled"H: false }, "updateRule": "id = \"2\"" }` + "`" + `), &collectionreturn err } // add field if err := collection.Fields.AddMarshaledJSONAt(7, []byte(` + "`" + `{ "hidden": false, "id": "f3_id", "name": "f3_name", "presentable": false, "required": false, "system": false, "type": "bool" }` + "`" + `)return err } // remove field collection.Fields.RemoveById("f4_id") // update field if err := collection.Fields.AddMarshaledJSONAt(6, []byte(` + "`" + `{ "hidden": false, "id": "f2_id", "max": null, "min": 10, "name": "f2_name", "onlyInt": false, "presentable": false, "required": false, "system": false, "type": "number" }` + "`" + `)); return err } return app.Save(collection) }) } `, }, } for _, s := range scenarios { t.Run(s.lang, func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() migrationsDir := filepath.Join(app.DataDir(), "_test_migrations") // create dummy collection collection := core.NewAuthCollection("test123") collection.ListRule = types.Pointer("@request.auth.id != '' && 1 != 2") collection.ViewRule = types.Pointer(`id = "1"`) collection.UpdateRule = types.Pointer(`id = "2"`) collection.CreateRule = nil collection.DeleteRule = types.Pointer(`id = "3"`) collection.Indexes = types.JSONArray[string]{"create index test1 on test123 (f1_name)"} collection.ManageRule = types.Pointer("1 != 2") collection.Fields.Add(&core.TextField{ Id: "f1_id", Name: "f1_name", Required: true, }) collection.Fields.Add(&core.NumberField{ Id: "f2_id", Name: "f2_name", Min: types.Pointer(10.0), }) collection.Fields.Add(&core.BoolVField{ Id: "f3_id", Name: "f3_name", }) if err := app.Save(collectionSt.Fatalf("Failed to save dummy collection, got %v", err) } // init plugin 4nil, migratecmd.Config{ TemplateLang: s.lang, p Dir: migrationsDir, }) app.Bootstrap() // update the dummy collection collection.Name = "test123_update" collection.ListRule = types.Pointer("@request.auth.id != ''") collection.ViewRule = types.Pointer(`id = "1"`) // no change collection.UpdateRule = types.Pointer(`id = "2_update"`) collection.CreateRule = types.Pointer(`id = "nil_update"`) collection.DeleteRule = nil collection.Indexes = types.JSONArray[string]{ "create index test1 on test123_update (f1_name)", } collection.Fields.RemoveById("f3_id") collection.Fields.Add(&core.TextField{ Id: "f4_id", Name: "f4_name", Pattern: "`test backtick`123", }) f := collection.Fields.GetById("f2_id") f.SetName("f2_name_new")  collection.OAuth2.Enabled = true collection.FileToken.Duration = 10 // should be ignored collection.OAuth2.Providers = []core.OAuth2ProviderConfig{{Name: "gitlab", ClientId: "abc", ClientSecret: "123"}} testSecret := strings.Repeat("b", 30) collection.AuthToken.Secret = testSecret collection.FileToken.Secret = testSecret collection.EmailChangeToken.Secret = testSecret collection.VerificationToken.Secret = testSecret // save the changes and trigger automigrate (with mock request event) event := new(core.CollectionRequestEvent) event.RequestEvent = &core.RequestEvent{} event.App = app event.Collection = collection err := app.OnCollectionUpdateRequest().Trigger(event, func(e *core.CollectionRequestEvent) error { return e.App.Save(e.Collection) }) if err != nil { t.Fatalf("Failed to save dummy collection changes, got %v", err) } files, err := os.ReadDir(migrationsDir) if err != nil { t.Fatalf("Expected migrationsDir to be created, got: %v", err) } if total := len(files); total != 1 { t.Fatalf("Expected 1 file to be generated, got %d", total) } expectedName := "_updated_test123." + s.lang if !strings.Contains(files[0].Name(), expectedName) { t.Fatalf("Expected filename to contains %q, got %q", expectedName, files[0].Name()) } fullPath := filepath.Join(migrationsDir, files[0].Name()) content, err := os.ReadFile(fullPath) if err != nil { t.Fatalf("Failed to read the generated migration file: %v", err) } contentStr := strings.TrimSpace(string(content)) // replace @TEST_RANDOM placeholder with a regex pattern expectedTemplate := strings.ReplaceAll( "^"+regexp.QuoteMeta(strings.TrimSpace(s.expectedTemplate))+"$", "@TEST_RANDOM", `\w+`, ) if !list.ExistInSliceWithRegex(contentStr, []string{expectedTemplate}) { t.Fatalf("Expected template \n%v \ngot \n%v", s.expectedTemplate, contentStr) } }) } } func TestAutomigrateCollectionNoChanges(t *testing.T) { @t.Parallel() scenarios := []struct { lang string }{ { + }, { migratecmd.TemplateLangGo, }, } for _, s := range scenarios { t.Run(s.lang, func(t *testing.T) { app, _ := tests.NewTestApp() defer app.Cleanup() migrationsDir := filepath.Join(app.DataDir(), "_test_migrations") // creatge dummy collection collection := core.NewAuthCollection("test123") if err := app.Save(collectionSt.Fatalf("Failed to save dummy collection, got %v", err) } // init plugin 4nil, migratecmd.Config{ TemplateLang: s.lang, p Dir: migrationsDir, }) app.Bootstrap() // should be ignored collection.OAuth2.Providers = []core.OAuth2ProviderConfig{{Name: "gitlab", ClientId: "abc", ClientSecret: "123"}} testSecret := strings.Repeat("b", 30) collection.AuthToken.Secret = testSecret collection.FileToken.Secret = testSecret collection.EmailChangeToken.Secret = testSecret  collection.VerificationToken.Secret = testSecret // resave without other changes and trigger automigrate (with mock request event) event := new(core.CollectionRequestEvent) event.RequestEvent = &core.RequestEvent{} event.App = app event.Collection = collection err := app.OnCollectionUpdateRequest().Trigger(event, func(e *core.CollectionRequestEvent) error { return e.App.Save(e.Collection) }) if err != nil { t.Fatalf("Failed to save dummy collection update, got %v", err) } files, _ := os.ReadDir(migrationsDir) if total := len(files); total != 0 { t.Fatalf("Expected 0 files to be *generated, got %d", total) } }) } } qӄ7Hx> package migratecmd import ( "bytes" "encoding/json" "errors" "fmt" "path/filepath" "slices" "strconv" "strings" "gity:) const ( TemplateLangJS = "js" TemplateLangGo = "go" // note: this usually should be configurable similar to the jsvm plugin, // but for simplicity is static as users can easily change the // reference path if they use custom dirs structure jsTypesDirective = `+` + "\n" ) var ErrEmptyTemplate = errors.New("empty template") // ------------------------------------------------------------------- // JavaScript templates // ------------------------------------------------------------------- func (p *plugin) jsBlaEnkTemplate() (string, error) { const template = jsTypesDirective + `// add up queries... }, (app) => { // add down queries... }) ` return template, nil } func (p *plugin) jsSnapshotTemplate(collections []*core.Collection) (string, error) { // unset timestamp fields var collectionsData = make([]map[string]any, len(Gcollections)) for i, c := range collections { data, err := toMap(c) POO;"", fmt.Errorf("failed to serialize %q into a map: %w", c.Name, err) } delete(data, "createdAt") delete(data, "updatedAt") deleteNestedMapKey(data, "oauth2", "providers") collectionsData[i] = data } jsonData, err := marhshalWithoutEscape(collectionsData, " ", " ") QOreturn "", fmt.Errorf("failed to serialize collections list: %w", err) } const template = jsTypesDirective + `migrate((app)  snapshot = %s; return app.importCollections(snapshot, false); }, (app) => { return null; }) ` return fmt.Sprintf(template, string(jsonData)), nil } func (p *plugin) jsCreateTemplate(collection *core.Collection) (string, error) { // unset timesta4mp fields collectionData, err := toMap(collection) QOreturn "", err } delete(collectionData, "createdAt") delete(collectionData, "updatedAt") deleteNestedMapKey(collectionData,] "oauth2", "providers") jsonData, err := marhshalWithoutEscape(collectionData, " ", " ") QOkreturn "", fmt.Errorf("failed to serialize collection: %w", err) } const template = jsTypesDirective + `7%s);`B%q) return fmt.Sprintf(template, string(jsonData), collection.Id), nil } func (p *plugin) jsDeleteTemplate(collection *core.Col`lection) (string, error) { // unset timestamp fields collectionData, err := toMap(collection) QOreturn "", err } delete(collectionData, "createdAt") delete(collectionData, "updatedAt") deleteNestedMapKey(collectionData,] "oauth2", "providers") jsonData, err := marhshalWithoutEscape(collectionData, " ", " ") QOreturn "", fmt.Errorf("failed to serialize collections list: %w", err) } const template = jsTypesDirective + `migrate((app) T7%q&",%s);`; }) ` return fmt.Sprintf(template, collection.Id, string(jsonData)), nil } func (p *plugin) jsDiffTemplate(new *core.Collection, old *core.Collection) (string, error) { if new == nil && old == nil { return "", errors.New("the diff template require at least one of the collection to be non-nil") } if new == nil { return p.jsDeleteTemplate(old) } if old == nil { return p.jsCreateTemplate(new) } upParts := []string{} downParts := []string{} varName := "collection" newMap, err := toMap(new) QO.return "", err } oldMap, err := toMap(old) QOreturn "", err } // non-fields // ----------------------------------------------------------------- upDiff := diffMaps(oldMap, newMap, "fields", "createdAt", "updatedAt") if len(upDiff) > 0 { downDiff := diffMaps(newMap, oldMap, "fields", "creatSedAt", "updatedAt") rawUpDiff, err := marhshalWithoutEscape(upDiff, " ", " ") POO;O"", err } rawDownDiff, err := marhshalWithoutEscape(downDiff, " ", " ") POO;*"", err } upParts = append(upParts, "1[") upParts = append(upParts, fmt.Sprintf("unmarshal(%s, %s)", string(rawUpDiff), varName)+"\n") // --- downParts = append (downParts, "1[") downParts = append(downParts, fmt.Sprintf("unmarshal(%s, %s)", string(rawDownDiff), varName)+"\n") } // fields // ----------------------------------------------------------------- oldFieldsSlice, ok := oldMap["fields"].([]any) if !ok { return "", errors.New(`oldMap["fields"] is not []any`) } newFieldsSlice, ok := newMap["fields"].([]any) if !ok { return "", errors.New(`newMap["fields"] is not []any`) } // deleted fields for i, oldField := range old.Fields { if new.Fields.GetById(oldField.GetId()) != nil { continue // exist } rawOldField, err := marhshalWithoutEscape(oldFieldsSlice[i], " ", " ") POO;"", err } upParts = append(upParts, "// remove field") upParts = append(upParts, fmt.Sprintf("%s.fields.removeById(%q)\n", varName, oldField.GetId())) downParts = append(downParts, "// add field") downParts = append(downParts, fmt.Sprintf("%s.fields.addAt(%d, new Field(%s))\n", varName, i, rawOldField)) } // created fields for i, newField := range new.Fields { if old.Fields.GetById(newField.GetId()) != nil { continue // exist } rawNewField, err := marhshalWithoutEscape(newFieldsSlice[i], " ", " ") POO;"", err } upParts = append(upParts, "// add field") upParts = append(upParts, fmt.Sprintf("%s.fields.addAt(%d, new Field(%s))\n", varName, i, rawNewField)) downParts = append(downParts, "// remove field") downParts = append(downParts, fmt.Sprintf("%s.fields.removeById(%q)\n", varName, newField.GetId())) } // modified fields // (note currently ignoring order-only changes as it comes with too many edge-cases) for i, newField := range new.Fields { var rawNewField, rawOldField []byte rGawNewField, err = marhshalWithoutEscape(newFieldsSlice[i], " ", " ") POO;"", err } var oldFieldIndex int for j, oldField := range old.Fields { if oldField.GetId() == newField.GetId() { IrawOldField, err = marhshalWithoutEscape(oldFieldsSlice[j], " ", " ") OO return "", err } oldFieldIndex = j break } } if rawOldField == nil || bytes.Equal(rawNewField, rawOldField) { continue // new field or no change } upParts = append(upParts, "// update field") upParts = append(upParts, fmt.Sprintf("%s.fields.addAt(%d, new Field(%s))\n", varName, i, rawNewField)) downParts = append(downParts, "// update field") downParts = append(downParts, fmt.Sprintf("%s.fields.addAt(%d, new Field(%s))\n", varName, oldFieldIndex, rawOldField)) } // ----------------------------------------------------------------- if len(upParts) == 0 && len(downParts) == 0 { return "", ErrEmptyTemplate } up := strings.Join(upParts, "\n ") down := strings.Join(downParts, "\n ") const template = jsTypesD irective + `TE %q) %s`!Z? %q) %s`$ return fmt.Sprintf( template, old.Id, strings.TrimSpace(up), new.Id, strings.TrimSpace(down), ), nil } // ------------------------------------------------------------------- // Go templates // ------------------------------------------------------------------- func (p *plugin) goBlankTemplate() (string, error) { const template = `package %s import ( "github.com/ha :h"// add up queries... return nil~;"// add down queries... return nil }) } ` return fmt.Sprintf(template, filepath.Base(p.config.Dir)), nil } func (p *plugin) goSnapshotTemplate(collections []*core.Collection) (string, error) { // unset timestamp fields var collectionsData = make(][]map[string]any, len(collections)) for i, c := range collections { data, err := toMap(c) POO;"", fmt.Errorf("failed to serialize %q into a map: %w", c.Name, err) } delete(data, "createdAt") delete(data, "updatedAt") deleteNestedMapKey(data, "oauth2", "providers") collectionsData[i] = data } jsonData, err := marhshalWithoutEscape(collectionsData, "\t\t", "\t") QOreturn "", fmt.Errorf("failed to serialize collections list: %w", err) } const template = `package %s import ( "github.com:h;O%s`" + ` return app.ImportCollectionsByMarshaledJSON([]byte(jsonData), false};#return nil }) } ` return fmt.Sprintf( template, filepath.Base(p.config.Dir), escapeBacktick(string(jsonData)), ), nil } func (p *plugin) goCreateTemplate(collection *core.Collection) (string, error) { // unset timestamp fields collectionData, err := toMap(collection) QOreturn "", err } delete(collectionData, "createdAt") delete(collectionData, "updatedAt") deleteNestedMapKey(collectionData,_ "oauth2", "providers") jsonData, err := marhshalWithoutEscape(collectionData, "\t\t", "\t") QOgreturn "", fmt.Errorf("failed to serialize collections list: %w", err) } const template = `package %l%sIO%q) POO;2q return fmt.Sprintf( template, filepath.Base(p.config.Dir), escapeBacktick(string(jsonData)), collection.Id, ), nil } func (p *plugin) goDeleteTemplate(collection *core.Collection) (string, error) { // unset timestamp fields collectionData, err := toMap(collection) QOreturn "", err } delete(collectionData, "createdAt") delete(collectionData, "updatedAt") deleteNestedMapKey(collectionData,_ "oauth2", "providers") jsonData, err := marhshalWithoutEscape(collectionData, "\t\t", "\t") QOgreturn "", fmt.Errorf("failed to serialize collections list: %w", err) } const template = `package %l 0%q) POO;c%sI return fmt.Sprintf( template, filepath.Base(p.config.Dir), collection.Id, escapeBacktick(string(jsonData)), ), nil } func (p *plugin) goDiffTemplate(new *core.Collection, old *core.Collection) (string, error) { if new == nil && old == nil { return "", errors.New("the diff template require at least one of the collection to be non-nil") } if new == nil { return p.goDeleteTemplate(old) } if old == nil { return p.goCreateTemplate(new) } upParts := []string{} downParts := []stri:ng{} varName := "collection" newMap, err := toMap(new) QO.return "", err } oldMap, err := toMap(old) QOreturn "", err } // non-fields // ----------------------------------------------------------------- upDiff := diffMaps(oldMap, newMap, "fields", "createdAt", "updatedAt") if len(upDiff) > 0 { downDiff := diffMaps(newMap, oldMap, "fields", "creatUedAt", "updatedAt") rawUpDiff, err := marhshalWithoutEscape(upDiff, "\t\t", "\t") POO;Q"", err } rawDownDiff, err := marhshalWithoutEscape(downDiff, "\t\t", "\t") POO;*"", err } upParts = append(upParts, "1[") upParts = append(upParts, goErrIf(fmt.Sprintf("json.Unmarshal([]byte(`%s`), &%s)", escapeBacktick(string(rawUpDiff)), varN1ame))) // --- downParts = append(downParts, "1[") downParts = append(downParts, goErrIf(fmt.Sprintf("json.Unmarshal([]byte(`%s`), &%s)", escapeBacktick(string(rawDownDiff)), varName))) } // fields // ----------------------------------------------------------------- oldFieldsSlice, ok := oldMap["fields"].([]any) if !ok { return "", errors.New(`oldMap["fields"] is not []any`) } newFieldsSlice, ok := newMap["fields"].([]any) if !ok { return "", errors.New(`newMap["fields"] is not []any`) } // deleted fields for i, oldField := range old.Fields { if new.Fields.GetById(oldField.GetId()) != nil { continue // exist } rawOldField, err := marhshalWithou)tEscape(oldFieldsSlice[i], "\t\t", "\t") POO;"", err } upParts = append(upParts, "// remove field") upParts = append(upParts, fmt.Sprintf("%s.Fields.RemoveById(%q)\n", varName, oldField.GetId())) downParts = append(downParts, "// add field") downParts = append(downParts, goErrIf(fmt.Sprintf("%s=o%d, []byte(`%s`))", varName, i, escapeBacktick(string(rawOldField))))) } // created fields for i, newField := range new.Fields { if old.Fields.GetById(newField.GetId()) != nil { continue // exist } rawNewField, err := marhshalWithoutEscape(!newFieldsSlice[i], "\t\t", "\t") POO;"", err } upParts = append(upParts, "// add field") upParts = append(upParts, goErrIf(fmt.Sprintf("%s.Fields.AddMarshalePo%d, []byte(`%s`))", varName, i, escapeBacktick(string(rawNewField))))) downParts = append(downParts, "// remove field") downParts = append(downParts, fmt.Sprintf("%s.Fields.RemoveById(%q)\n", varName, newField.GetId())) } // modified fields // (note currently ignoring order-only changes as it comes with too many edge-cases) for i, newField := range new.Fields { var rlawNewField, rawOldField []byte rawNewField, err = marhshalWithoutEscape(newFieldsSlice[i], "\t\t", "\t") POO;"", err } var oldFieldIndex int for j, oldField := range old.Fields { if oldField.GetId() == newField.GetId() { KrawOldField, err = marhshalWithoutEscape(oldFieldsSlice[j], "\t\t", "\t") OO return "", err } oldFieldIndex = j break } } if rawOldField == nil || bytes.Equal(rawNewField, rawOldField) { continue // new field or no change } upParts = append(upParts, "// update field") upParts = append(upParts, goErrIf(fmt.Sprintf("%s=o%d, []byte(`%s`))", varName, i, escapeBacktick(string(rawNewField))))) downParts = append(downParts, "// update field") do3wnParts = append(downParts, goErrIf(fmt.Sprintf("%s=o%d, []byte(`%s`))", varName, oldFieldIndex, escapeBacktick(string(rawOldField))))) } // --------------------------------------------------------------- if len(upParts) == 0 && len(downParts) == 0 { return "", ErrEmptyTemplate } up := strings.Join(upParts, "\n\t\t") down := strings.Join(downParts, "\n\t\t") combined := up + down // generate imports // --- var imports string if strings.Contains(combined, "json.Unmarshal(") || strings.Contains(combined, "json.Marshal(") { imports += "/\n\t\"encoding/json\"\n" } imports += "\n\t\core\"" imports += "\n\tm \: 6\"" // --- const template = `package %s import (%s; 0%q) POO;%sq"O%q) POO;%sq' return fmt.Sprintf( template, filepath.Base(p.config.Dir), imports, old.Id, strings.TrimSpace(up), new.Id, strings.TrimSpace(down), ), nil } func marhshalWithoutEscape(v any, prefix string, indent string) ([]byte, error) { raw, err := jso#n.MarshalIndent(v, prefix, indent) QOreturn nil, err } // unescape escaped unicode characters unescaped, err := strconv.Unquote(strings.ReplaceAll(strconv.Quote(string(raw)), `\\u`, `\u`)) QOdreturn nil, err } return []byte(unescaped), nil } func escapeBacktick(v string) string { returnQv, "`", "` + \"`\" + `") } func goErrIf(v string) string { return "if err := " + v + "; err != nil {\n\t\t\treturn err\n\t\t}P\n" } func toMap(v any) (map[string]any, error) { raw, err := json.Marshal(v) QOUreturn nil, err } result := map[string]any{} err = json.Unmarshal(raw, &result) QOreturn nil, err } return result, nil } func diffMaps(old, new map[string]any, excludeKeys ...string) map[string]any { diff := map[string]any{} for k, vNew := range new { if slices.Contains(excludeKeys, k) { continue } vOld, ok := old[k]  if !ok { // new field diff[k] = vNew continue } // compare the serialized version of the values in case of slice or other custom type rawOld, _ := json.Marshal(vOld) rawNew, _ := json.Marshal(vNew) if !bytes.Equal(rawOld, rawNew) { // if both are maps add recursively only the changed fields vOldMap, ok1 := vOld.(map[string]any) vNewMap, ok2 := vNew.(map[string]any) if ok1 && ok2 { subDiff := diffMaps(vOldMap, vNewMap) if len(subDiff) > 0 { diff[k] = subDiff } } else { diff[k] = vNew } } } // unset missing fields for k := range old { if _, ok := diff[k]; ok || slices.Contains(excludeKeys, k) { continue // already added } if _, ok := new[k]; !ok { diff[k] = nil } } return diff } func deleteNestedMapKey(data map[string]any, parts ...string) { if len(parts) == 0 { return } if len(parts) == 1 { delete(data, parts[0]) return } v, ok := data[parts[0]].(map[string]any) if ok { deleteNestedMapKey(v, parts[1:] ...) } } 랧5x340031QH,-Ɉ/(ʯKg:tV9e=_K*%.z`0$GIs>n+3S:9? '31/9zË~0ߒqP)I9 U[}8*3)7Y.2`5*to Tuot]*LefOsLovThC@=Ō"6=b%{)`R޼qs k%/:L&T]vn1HEnE]ĮR?(I ">#5 Q'"G|~i&m9t /:l¢ڔS">9?''5$3?lWg+>p?$sĔ8/UJ٭~Y;RE5׫kvi]L)WU ,I R ccӷ'_'M)AC^%0lO?%ܱǩ [Uy*f<~}EUJ+o:g8N5DWYKȳPe@ALu#g7M y삦 nSMuw|d}wȆZG!5-k}>k4EoF]OxXKs6>K!C 5=LԱrC&@$$({wENCꠑ}~d|&XSs7f1EcpUJU Rwg# _[ 7;o [B$C1nNR/Fs>j.GnŨF$;k;2u$l8IWFXj536ue fۉ) y%D%*6YA Эc2hK'gjTh}zk'MvO1Gט,^0VU°o(cRpڪ ;jv&Uzjؑ1.şl){aj)39(4i1I߀R9]=nZ$gMŪj;-_jWgWġ d i!JPk˰7k rMQ‰9M%X)|a`=YO-Bur(oMtbLVNdL Jz*n\\ܥ m֜%#(ߠ55*u'wP%73'5ơ9!|)YAZ~!n|WRT ;(k)|SwT y~1$b, uE٢)0\!Xĕl #dnj2J h 4 ϊ37Mw̦\@PI+*6C|1vwn ed$5勔;ZW܉[xC]=',T=^  uiB( H ZIuD LM]st$JQ=Y@?Ibmĸ)e|+?NM_q6Kgڗ_UM U| I-bE+1vVlY1^kL4:cRj*Oۜ$@7X[o6'U5{qXʖI 2҉`"AZ!_ #P; 3:7T0`\Ʋ; V9CgP?z-P=:NT{Gv{v궠`̀ ,\<.  N`3C"9Nz0&@җ;d^R-s^#:M|ZZw:nx)l+"O{AIVԖ=+0ܿ+4;f݇|ރ;^/2" ! M$.dn-aAWҭH=@ j hSP[TA`a#n{&8,Mצ_pDq63l>qDJE$5{*^(!>ezN솟DY hJ^ p`I/r?KwHgOu vozW.bBzhⳀ~6dx,^_î Rx~L}F`F2f&ifĒ %ɩZT_z D D깹}#[~fbfA*f({ <0)QN^p-maz%!LԢ̼|}y9\\݊@xZyo8;,Rזd"$Lmv(h[[ITH:O'}{dp%*|Cɪ\؁EҖ.DY9cTa SalKi㑵U~4@#30E"%B'JKa*杰Ӊcoo|,.djR=D%K,,LY!H&dcԕ:KAjvn&,1%# iM؎XS66D;d[008kgs eViwܪ#'(b~1mkv-Ր*842DqsR mA6SCzǙ_>*Je3GjB4=]bzUEz` *?Xns`lwfկ׍Pl~/ )K CFj`FXNsGzj='> rc{GdKWFf8$x(4*MgV.ӎ_Llv.T:sT`J< 1B Ўx|Ec@l%fA^5{t$sPIDBVﭰcVQRJh%+D(8.:+ HSvֆh#$^_RjN1-bRQPW#UJ~*/DZ[l#L̰tF1h!)10SïWdy! = ^8ykscH%|oQ%P@`ea` @ rq$ҘsuEog?láX,uFH*lXd#/QRaz{,ŤGq+დY9P7YD~P,4sU:|o Rx wIc@,D'pTWAgKQHQvK(N]S߈6zf E]A\e'|any,:iWU1"N2+(P]Ԥq~́gfЮn5{,녙9]ְ"/CdA,"Vry:Yfľ@ya@; Fh \6]|ꕰ}PBwUM/ ֢sed(Y}E~8. >yaK9·+x!׬t͉ȷ s>~Z|v̅ Dr~Gڏ\~ѱ"|Ƌ9ùz=L>︮$!T"nJ&xr={ˆʲ)6TftqOxeUY'E;1^x@ <{RVKi( v?e׈-e#{q&Ώg;#h()cb usZcø?7lwZV$#> qҢ9QX 08˴?j\ +g%d$.reևYxOS[Kz|4w-6\]L_ۧ33R<%[rnpt=DLe嶶 \"S5@1?bpߨŁcߜp ``$NȍI6MX$4n=D񳏥1^ nYz-q/hO?WHFZj0_uu OUxpackage platform import ( "bytes" "encoding/json" "fmt" "io" "net/http" "strings" "time" ) // ComplianceClient handles communication with the luxfi/compliance service. // The compliance service provides KYC/AML, sanctions screening, transaction // monitoring, and regulatory validation. This is an optional extension — // if ComplianceEndpoint is empty, compliance features are disabled. type ComplianceClient struct { baseURL string apiKey string httpClient *http.Client } // NewComplianceClient creates a client for the compliance service. func NewComplianceClient(baseURL, apiKey string) *ComplianceClient { if baseURL == "" { return nil } return &ComplianceClient{ baseURL: strings.TrimRight(baseURL, "/"), apiKey: apiKey, httpClient: &http.Client{ Timeout: 30 * time.Second, }, } } // ComplianceStatus represents a user's KYC/compliance status. type ComplianceStatus struct { ApplicationID string `json:"application_id"` Status string `json:"status"` // draft, pending, pending_kyc, approved, rejected KYCStatus string `json:"kyc_status"` // not_started, pending, verified, failed KYCProvider string `json:"kyc_provider,omitempty"` } // ScreeningResult from AML/sanctions screening. type ScreeningResult struct { RiskLevel string `json:"risk_level"` // low, medium, high, critical Matches int `json:"matches"` Cleared bool `json:"cleared"` } // CreateApplication creates a compliance application for a user. func (c *ComplianceClient) CreateApplication(givenName, familyName, email, country string) (string, error) { if c == nil { return "", fmt.Errorf("compliance: not configured") } body := map[string]string{ "given_name": givenName, "family_name": familyName, "email": email, "country": country, } var result struct { ID string `json:"id"` Status string `json:"status"` } if err := c.post("/v1/applications", body, &result); err != nil { return "", err } return result.ID, nil } // InitiateKYC starts identity verification for an application. func (c *ComplianceClient) InitiateKYC(applicationID, provider string) (verificationID, redirectURL string, err error) { if c == nil { return "", "", fmt.Errorf("compliance: not configured") } reqBody := map[string]string{ "application_id": applicationID, } if provider != "" { reqBody["provider"] = provider } var result struct { VerificationID string `json:"verification_id"` RedirectURL string `json:"redirect_url"` } if err := c.post("/v1/kyc/verify", reqBody, &result); err != nil { return "", "", err } return result.VerificationID, result.RedirectURL, nil } // GetKYCStatus returns the current KYC status for an application. func (c *ComplianceClient) GetKYCStatus(applicationID string) (*ComplianceStatus, error) { if c == nil { return nil, fmt.Errorf("compliance: not configured") } var result ComplianceStatus if err := c.get("/v1/kyc/status/"+applicationID, &result); err != nil { return nil, err } return &result, nil } // ScreenIndividual runs AML/sanctions screening. func (c *ComplianceClient) ScreenIndividual(givenName, familyName, country string) (*ScreeningResult, error) { if c == nil { return nil, fmt.Errorf("compliance: not configured") } body := map[string]string{ "given_name": givenName, "family_name": familyName, "country": country, } var result ScreeningResult if err := c.post("/v1/aml/screen", body, &result); err != nil { return nil, err } return &result, nil } // ValidatePayment checks payment compliance (travel rule, sanctions, CTR). func (c *ComplianceClient) ValidatePayment(fromID, toID string, amount float64, currency, jurisdiction string) (approved bool, reason string, err error) { if c == nil { return true, "compliance not configured, allowing by default", nil } body := map[string]interface{}{ "from_account_id": fromID, "to_account_id": toID, "amount": amount, "currency": currency, "jurisdiction": jurisdiction, } var result struct { Decision string `json:"decision"` // approve, decline, review Reason string `json:"reason"` } if err := c.post("/v1/payments/validate", body, &result); err != nil { return false, "", err } return result.Decision == "approve", result.Reason, nil } // Enabled returns true if the compliance client is configured. func (c *ComplianceClient) Enabled() bool { return c != nil && c.baseURL != "" } func (c *ComplianceClient) post(path string, body interface{}, result interface{}) error { jsonBody, err := json.Marshal(body) if err != nil { return fmt.Errorf("compliance: marshal request: %w", err) } req, err := http.NewRequest("POST", c.baseURL+path, bytes.NewReader(jsonBody)) if err != nil { return fmt.Errorf("compliance: create request: %w", err) } req.Header.Set("Content-Type", "application/json") if c.apiKey != "" { req.Header.Set("X-Api-Key", c.apiKey) } return c.doRequest(req, result) } func (c *ComplianceClient) get(path string, result interface{}) error { req, err := http.NewRequest("GET", c.baseURL+path, nil) if err != nil { return fmt.Errorf("compliance: create request: %w", err) } if c.apiKey != "" { req.Header.Set("X-Api-Key", c.apiKey) } return c.doRequest(req, result) } func (c *ComplianceClient) doRequest(req *http.Request, result interface{}) error { resp, err := c.httpClient.Do(req) if err != nil { return fmt.Errorf("compliance: request failed: %w", err) } defer resp.Body.Close() if resp.StatusCode >= 400 { body, _ := io.ReadAll(io.LimitReader(resp.Body, 2048)) return fmt.Errorf("compliance: %s returned %d: %s", req.URL.Path, resp.StatusCode, string(body)) } if result != nil { if err := json.NewDecoder(resp.Body).Decode(result); err != nil { return fmt.Errorf("compliance: decode response: %w", err) } } return nil } @dxJpackage platform // Pool manager is now in github.com/hanzoai/dbx. // This file re-exports the types for backward compatibility // and provides environment-variable-driven defaults. import ( "os" "runtime" "strconv" "time" "github.com/hanzoai/dbx" ) type DBPool = dbx.Pool type DBPoolConfig = dbx.PoolConfig type DBPoolManager = dbx.PoolManager type PoolStats = dbx.PoolStats func NewDBPoolManager(config DBPoolConfig) *DBPoolManager { return dbx.NewPoolManager(config) } // DefaultPoolConfig returns a PoolConfig with production defaults, // overridable via environment variables: // // DB_POOL_MAX — max open DB pools (default: 2000, hard cap: 2000) // DB_POOL_IDLE_TIMEOUT — idle timeout duration (default: 30s, e.g. "1m", "45s") // DB_POOL_SHARDS — number of lock shards (default: runtime.NumCPU()) // DB_POOL_READ_CONNS — read connections per DB (default: 4) func DefaultPoolConfig() DBPoolConfig { c := DBPoolConfig{ MaxPools: 2000, ReadConns: 4, NumShards: runtime.NumCPU(), IdleTimeout: 30 * time.Second, } if v := os.Getenv("DB_POOL_MAX"); v != "" { if n, err := strconv.Atoi(v); err == nil && n > 0 { c.MaxPools = n } } if v := os.Getenv("DB_POOL_IDLE_TIMEOUT"); v != "" { if d, err := time.ParseDuration(v); err == nil && d >= 0 { c.IdleTimeout = d } } if v := os.Getenv("DB_POOL_SHARDS"); v != "" { if n, err := strconv.Atoi(v); err == nil && n > 0 { c.NumShards = n } } if v := os.Getenv("DB_POOL_READ_CONNS"); v != "" { if n, err := strconv.Atoi(v); err == nil && n > 0 { c.ReadConns = n } } return c } !x[rF}&*ŠM.D[ kW̭R)H%p JnO[=%Ǯ}X=$0hqLn+E礳0M׏8%h0#'~>s=_BrLNLUI]_r= NqD=1<?yީ`JL= A&с1CIm{oA@٘1ڣ)?:rW]I̽iW(gaAwv^;T:9%(T*vRi[7!xWEL;[4`8^M0X9s/=:naZ>#5lA=R(|Jq@~l^;j러#?nOtnc##Y0ܘ ݡI{:nWFFt0mLtvׅ+5Xېf-mٝɀ(p=^ ,<GdS:>bp|?CGvm9j+O Ȍ_-L^ӘF O<ѦOzr,450gNwN,dicOP,54B@a% 6 7N A*Ԯ W-C0 & !vReu>&SsYT0۠Y0[@i'i{ÂG&0,kx͉97*Ɖ]qeDɰ QȻPW闙 X&IVSZbVub"7&瑾 R.؁eޟN$6BbPJ- M50( P;%a_Ӎn .9'p zP%D*l4tys<;zqLYVVW9L?GM.oLΎ2j<G+OʙrZfSB⻙D]@6Ji O t SjM"Ixa^1K o!|#-C n7] Lo ٪-$ 9SVT0c4YwmIkcNWˡ$xu hjdf|炼֭{W~Yb&ynTZ5wyjŸJ3x %F٥i"EQIx@5- {Ɠ#&ANL}j6ƔGjcfqShq!Ms|"bS-[ : x?o#Xɬ`ђfW++2n=L/"Q o`}=z~;sn#HT՞I*3\``' ϵ`R#%}?vK9&rD\MU)h?AG?PKxJ=Q p=0x$idms :a CeIg QAFcP ԉ"9kEJ*HA+ 3QLRlookxAguMaݦnOʽEqzoÇH@ /F(\ rW+uq6SB<7A;T bbS="~kˊJ9}X7EY*?ݙ1IEh5_mtљЊ&EOtC&v*] H([}{T5 H@ˍ,,Sl\SCW"ݹ5VTIZ&e޸Qqu?tUJ\lfʄd]C/f_뉰5{"f}i_eEh9$Jӫi6 t]w³d $X6F-چUOɟHu1^W7l8;PGќb](I@zR5NgwvR*@R+p˕N9ɬqE,Y4ݘXW\(:-35]J!YWNiU3v&@?y涁N"5u/vO/ވa30E%NR99tUπٳ}|,oL!1V VE*?fBpsLr^6U {TH NgVoV:`xL1)=J9;Q$4]jI-TTcLzt!M!/gr͆H5e/9wK }|+EgeMNvC`-^|fq,A!<)΅12uӋE̠H|2c!XfF49[OEپpMsxhoco)j~N̋Q{m(svŐXŠ?a+$%2Xe?=G" vn[utpyq~~ry#T㣓݈q7!xY=&.dPF5"̰aLIo ;yŁN݀OJgZZe~ Ԋ@*/xqZmZߵZeyL6, 5^~Bg.!?ĵڌHo)([DB$4 wX5 ڸp+I.;17N- .L%y rdeӀor0\y\8y6#.45̓u!x[ x{*ْ7z_0OxA(!{XN&:;^N_Ĭ\hwvZʃvZ4>S*8P|U@-H)i{v>AdQgFƔ7nFJtp * KdA….^yt]&,ha|ܟW"o>sGjq/aCMj1UoKqLt\%3xLU>WΦZ*M^*YZzcbxxbnUI#w23?10 1m hold them IN-USE through the count assertion. The idle // sweeper skips any pool with refCount > 0 (see evictIdleLocked / the  // _SkipsInUse test), so it cannot race the setup loop: no matter how slow // the runner is at opening 3 SQLite files, all 3 pools survive until we // release them. This gates the assertion on a deterministic signal (the // in-use flag), not wall-clo>ck timing — which was the flake. pools := make([]*DBPool, 3!E if _, err := aO;=% ools[i] = pORelease all three — only now may the sweeper evict them. for _, p := range pools { p.Release() } // Poll on IdleEvictions, not Len(): the sweeper removes a pool from the LRU // (dropping Len()) under lock, then Close()s it and bumps IdleEvictions // after unlocking — so IdleEvictions is the LAST, monotonic completion // signal. A bounded poll (not a fixed sleep) is robust on fast and slow // runners alike: it returns the instant eviction completes. if !eventually(3*time.Second, func() boo*l { return m.Stats().IdleEvictions == 3 })m.Stats().IdleEvictions) }7$E1hFPool 0 stays in-use (never released) — must survive every sweep. p0!B7 // Pool 1 is released — idle — must be swept. p1!#p1.Release() // Poll on IdleEvictions (the sweeper's last, monotonic step). The in-use // pool keeps refCount > 0 the whole time, so exactly one pool is ever // evicted and Len() settles at 1, never 0. if !eventually(3*time.Second, func() bool { ret#urn m.Stats().IdleEvictions == 1 })3m.Stats().IdleEvictions) }8 after sweepEp0 was held the entire time — confirm it never got evicted. if !p0%in-use pool should still be held") }e? eventually polls cond every 5ms until it returns true or timeout elapses. // It replaces fixed sleeps in async eviction tests: fast when the condition is // met quickly, and only reports failure if the condition never holds — so the // test is robust to runner speed instead of racing a hard-coded delay. func eventually(timeout time.Duration, cond func() bool) bool { deadline m:= time.Now().Add(timeout) for time.Now().Before(deadline) { if cond() { return true } time.Sleep(5 } return cond()& y{ x\F-=E $d3k=IO06Y8M lYqȯ}<E^5~y\$iU9>yZ࿹˺.+BSMt%1|X9 b5]FjEUNE勽j}VY&q 7ElSsgr%ө8zk%+QɲJQ.^4j;̫b% M)hka<::7~ϼ4~4n_D+908Z*aGQs*UJJXE5Q6)*]y>6&RN`[CQFګe(* &eUM/xtRX\s,.4WuCs'sjU2i*J ؏TU9:G(6Je&O 1"Qcs  [1j:H$.Ig0l"!iæg>&&v uT[RҮU->,Q6_KP&P{si B~CGbsBC-}>si%P%X=)VB,D4 "Ǡ. !7YiRUp-0 GCVX t8`JkmGR)i/{N 1Mvz <; z^pG>n2yT)vH&`96GJ5VjΗ&Uj+AF\e{<4jހF7]7G[ Y#)@8: W+LV)ivF>搱Vf wU{s 'M]D&涘- )-$a.&R;B$w @k)s7ei'URم|[~y7U|O3\nTg9l^L\Hj UPmp5b<ϛ, ŋB"T0A3q5JAEMUIu bqBK^-iJ9p8Bj_@Ɋ( *:aE;R|ˢQ&TEm0bX {DT3sҚN:y2Yte7gwޢk`[i7B/oL6Ov[#UuQ%20jJ!;FjM=LZh˸t`knáxf6V#3$t@A@U X͚-cEP`^ɶ:f5)6s363ei*j%s""3IJ'p5IȲTIc ۙhMϠu)Lt|D@xA'C7߂%JR$-"K4aOOpl%,xdc@ .Ҩk YQNzeGEȉ( kYhݠ ZHd1ól E͢pVBtC;E+ja$̺^BdOd) Q BWs)I@Ew]4Y*ԞEw"ҕ/c~&;/ L D9]%PfGoܣAXVm&l)q%4\E`hYMFil%'ƿ (JB8cqs G<s:=|c@P8I|<ʫ ,Fh^`FvN#&UFl`25СX nfK.BE#Cj<Y8ԞW2[/τ?KX_*3|u"|gc(N~ O LѪDHփߺhca#a{o_Z]'9҆hpU(`@_zL;YZr#{Gjn1ŹbAOq]/Ek42`Ebx:y;ҍ(4$ș`7z98{) < ujU oBrIi1yѕJ3(Os!C8p.^5=J63OpN&X#l8hB (biwaHDdr3* ǠH(lSY]^C1";*|֒b9EjCV<=VA4T 4vzuTM (_i0!8#dmA{M9﵄: kH#6aoɼsZpMja6l3|r|  ɦ;_EC'^-1 3ʤg /晊쀼uV_>xx=5Io0a6te_tf 7G;2Wl y)oҥrUּJhk ]/(pYaq}mg53[EM'.DVXZ'te)+-S*7K]ŗrG XةaHdãL߭mH) {7_T|l'vk/]$-ɥL0*|]SR*.ޓ,~,| IU'2i.NUڭO;=Mֽ/l F>94[B9W3VIB\^~jv ":=&)ċjj@x.%#Z,,J..xYԅCDg/. ]l?ӹgdk@MS0nD\cЋ""Ӕk1CRHS2NPwuصb:K9-dJΚZR9KK'' 8ZnᐸC[5"> _8vta} \%IPت_i.j&ېPA2ن"^7 $gey(z8 }u7WYh)l Nߧ6[5҃؈jf9n&G*hC|+:Ġ.?eB3OˋjexX)@DFUj (޸Nbi0^BT=Vl&e9,܍wߛp/UIH%'"o%Wڱ'DsDxyi0t*`*PzYI=)pM*[PFtXUv` "*Pw<5N+GYͺ5.Ll@3'UE0V2FsL`HdLRخݑY |75 8ucg;;v'?[bJm+V =PΥJ]·KL  y7wq+*E>0G0˼xۢo̰y#!v.?cݮ~.ՏG_2#J,j]q+t~c4`DϬ0jIrX՞vDbpuX5Tf Uh#-\FNcm-t1siÚfɂgs[;^Y D!0}dK#`tZ92._P-yk0;]d9O)PumD$unj!ek)߼W9g%Xc Ee'-:[-T.'MӞ¢-NqަE't>> G"9| 'I>orYK kV㷧树CACڠsĖJpI5g>ÝP7h.N4}nK#vX'jSHtxҤN0EadvB<›jSĩdm<8˞m2+ltu;I1V]C{W8;hvjODϸsA`[}Xz]LN5gB+;ij~Bc;<&{0zU*!evfwYN3^ P)O@o]PWu68~{ij:nr{"~V2+Jj<Ewj^R\s^ξ.Q~]4VKWQAQ |nX%qq|[N^DY4 0N di EAõ[%14.G9h{Pc&۰8I?'&oM M$6?JEv xzt&A/^:ԡgflrr 8e(a mAdQÀ(L; 8+IAïYis5+:GvYG8}i_G"i =w@ 57P^O^bsyY,+rUtz# ,~LݬQ~+=8u"p$,}kxTFzpQ?}!\n2lM+C5ap՝ж5vgZ)*nbo_`m[('!= x2e#{MAFp7=;~RkDhe'Z2S-ȻO]]್)z*}Zfg=E?^Ɠ0E)w?݀k-#Q粘:yO!w'|rWp6T&Q)`AA᯿jwÝ<,Ď!iAƛU\ [x "}VmPζd&ikx'z^<5Rj!/j_+\Wr|鵯zmGG3GOL=|g0v*"rVNDy2(kUtiq1xFt1AQ a3ZD ڸulg)x*ok{BCa8SY՗dLaT]e).z*a7DFgȧg`X a3E>oco# dov Hæq Su,-h]?ZwέV? .(STJ~TT"zs*;.7)^\ϋ&OM94|F}thO }rn[ ۺ$o(z;ENahIZIm5:\\,$e$X]g!-LSSw|4kE-UW(S+;Xwʟ֊d> le(Mh` &J01 p5ǟ.)M{r@ELP*6RƔAZSVklIDΕ9L/sYRf, ;DxVn[sJ]8r1Į-# v)ܐ\;( }{~Cdw9%9|3.Dy#VZ7S%6j%!TTʊΎ_98?{3/hQm3DӸiXNɜ𷥥OaZIYv%#ANlXs(%( z-mVz ^.oD'KESR׎[jD4DX8g1pOY)5*0*oݘݳ(]J}Hnd;w4c+>`Ts׈10kRȀVkIwb $UޜϩhIg ʼnp1_b4$j)KF2)O7wkkt*rF >VʯEQ4.Ԕ1-o{cj7En$O8<+Wa /O7 OO!'}'lo Lΐp&D3T'ΰ\80z-E%C3i&?9 !1ڰ;Vh{XɲnsK8ׇ}ne,[]RAS(IPq~0ťn9}NF}uI*Vm.je^@<PkttDiFVj=I`4:GFՖѡd}2j71KC Oq!PAYo㯎H:l Yb곴R }iГ#;C( !: i*Bd8YZeUo=$mhUZ >ԩYڅ@أQ)t)k8 _՜>p'#Xq֟Q!=cՀ$4yA@.P) ?E}wR\XTNq} g3zH_LTwĴ \6wt"4?*.B C$q d@dߢCeNI4`*P9ZK#%3'וhK&ӢUuEKjYh{s"?c+GOUVMGk_UԠ*) z<иQKk6NRm|N:@}6-{Ey3[cf`,/tW%R eŃӿJLktK^89 y bNI2n)dKãWpݬ,c~k3slatIbuΆyn7xm@@%sC y,[5EʉE--2&N -NJ ceZ~4xer^!jVʙ.Lmj+^Yoqu%Zw tcx [Cũw: ˇXI&}(t6Oyv?dȞ[줂+/|NL%c.f Xd#nd=Dݷ"oͧ6~$J C8V=F?_s21.e 8x%;N@D!"'ZT"2 .i3V?k8Si8 %Nһ+5 NPDI7x?7③ԻdSXjgQ?NZ;>tДmѪݎ!%6Vʛ}r;jLMQ>oc۰UugYii +|.`cUb~-x%;nADEj9wa 2_i4#35$8wbO羇DRޫsU 5000 { c.evictExpiredLocked() } c.mu.Unlock() return val, nil } // SetSecret creates or updates a seceret. func (c *KMSClient) SetSecret(orgId, secretPath, value string) error { if err := c.checkConfig(O $rr } cli, err := c.orgClient(orgIdArr } defer cli.Close() path, name := scopeFromArgs(secretPath)%_context.Background(), 10*time.Second) defer cancel() if err := cli.Put(ctx, path, name, valueO rr } cacheKey := orgId + "/" + secretPath c.mu.Lock() delete(c.cache, cacheKey) c.mu.Unlock() return nil } // DeleteSecret removes a secret. func (c *KMSClient) DeleteSecret(orgId, secretPath string) error { if err := c.checkConfig(); err != nil ] $rr } cli, err := c.orgClient(orgIdArr } defer cli.Close() path, name := scopeFromArgs(secretPath)%[context.Background(), 10*time.Second) defer cancel() if err := cli.Delete(ctx, path, nameO rr } cacheKey := orgId + "/" + secretPath c.mu.Lock() delete(c.cache, cacheKey) c.mu.Unlock() return nil } // InvalidateCache clears all cached secrets for an org. func (c *KMSClient) InvalidateCache(orgId string) { prefix := orgId + "/" c.mu.Lock() for k := range c.cache { if strings.HasPrefix(k, prefix) { delete(c.cache, k) } } c.mu.Unlock() } func (c *KMSClient) checkConfig() error { if c.baseURL == "" { return fmt.Errorf("kms: base URL not configured") } if c.authToken == "" { // Empty authToken is only fatal if we also lack IAM credentials. // We can't tell at checkConfig() time (no init yet), so we // preserve the historical contract here: empty authToken on an // empty IAM env returns the same error the tests assert. if clientIDFromEnv() == "" || clientSecretFromEnv() == "" { return fmt.Errorf("kms: auth token not configured") } } return nil } func (c *KMSClient) evictExpiredLocked() { now := time.Now() for k, v := range c.cache { if now.After(v.ex(pires) { delete(c.cache, k) } } } hxWn6L:)vi-A[']lZm./5='Re;ivAy~ǽDi3E,>]#Ro aE:q_0YLs} .-hnK- 0 3kZ^̔0LBiK'w)x+`-U\/AvJ%76 ?Pd  ;O,NXabGPhJkx9XvI$>T9wΏ߁_N4O`!+.1I ܲv[. $=B(ge诱Zȩ{"A;jpYAiQ`:$/L0.90m,#1Rۭݒ^ۓR&Z8xf!ކ&Z+QI$ODPߙ:*qb]SK+z;;{Bb.a̝܆As{4172;g\,k;cX`KCu5f(122E6JNca/ޟFN*0&B'd7,ej*dOQXpc}z /TЂ^b-?N1Mft`QG<4K0i\EDZ/7UF:z:*"̨#KZjQg!b~DnʞܵҜ o-/U}4V+¯x1ĢDAu$n^c^ ֆ3^FYGn_U*A(%"2Ǖ:S߼P ꪂ." \$&`&@ qE?Nkߨ۰@Kv(:m{gOB:ܣ\"a uD4 xfwl,=~q|+HrNR8^.NH^;%QNk8U$3Fi ccAЃsݵ(6t5vc 4/6乒"b xw~'GX\$:ʧr ַ_IмH|(p0hD y;jeaQ ,{4ᢉku@nhO2FO_Z@<ݥ? 5}5 B$cҔd).sMGnln"Nj=5ӯn蝺~^^FOge7G(aiDbqQ㫑Ci?F}{DOޞ#콣ꋦJ96q= Fhض|M|ޛ_F͸xZmOHL~Eu!v?p⤁Yn^i4L ^vY~OUu= Zځ]]]OUw2QJhU(Fe: 5KyXAXr꤈XڤJI8Llets *6j$B/WzBdUT`n=*Ս'A[DXq2h0MA[}}^+UdK, MgAլPMf`ni4ؑT| AD SP]&0IR ˆpb!xsE,Gt " ٗAE5Hp~F  5^%,.V9Rd aP!R +bce9P z}^Ũb+aM2".G--ɗܚPy=ITŃ(1oyyz;up e?AhSoD@H!0p`lXDn'kJNǺ.\i@q <jAX<]N$O=nԣw t_ެIbCG;}Z04ZWIZ VIȇLAGLEh;skA JGLiYQ#|F@&w$A2ϞbI05\ zNiȾSWq[Xt QJViCvQh|ujQgAXdhi558 ' R.-y3s+xgX&noC4> Em%\@ )rQ<]*v\-ĚV@M r@hӂwe4:[[)o.V YkE׍Vㅃ!Zm娤CrBJ:9cp0ږ40s$Y2F9Gb*IJ'#Z+S&JM^yJ l6Eɡ)UTwTm]' I͖ol|Cݧ*_J^TD|+amM-V \iaj _>jc6 'HNkXtQ&@Z}*Wb' maԃP4u2dUGd}nZW6&Fy=1 nbz_Nj;|8~8ϸ*f/z>`Yr_2~)|݀Ry"%};z{u2Ex|~ E^E$#(:أy X?PPy;i -ug:f.CLH-0; 7ϹٶVfk="A֟%"lt(n#CWZPPک]I˭49FbM@ZϚr WCq9̶\b!%!])jڌM͐/X񇮠p`Y<90;{CWfoύlCYmKuF<( 64pΨUV (JcDЎѶlosCiZ TxUV-zԣ{W^)]EB݄֯YT[^|:dCQF{HdQJ} ^hLy|ցLA9cc\GfE9 [Ӝ&X76ƪP0"xBӂ 7J?`\._|Fsk|[7;^_<:!"1 `eeVhGj:{1FnCҜ~(̍=NǖdeŐvKrvk9<%7rG.دbU]h9 ъ,AOg}/I*jg@\$'dޚ@">j.L!ޏpͲxCyP@S8tZJ6rb^VJuMjpMA`6tGlxL{l6]AXI/|r$@#JdJ^C+ uCWjlj\u˪YX<熊*Xkӝީ4Ybv'_Zd=L8 m[z'&6(o\\^R7N@MW#%ȺVXrۻg2?hN-;77!Y9l֕!}u$nŁM,COxmF>moSllZhث<2x(cqh5.\2 oiJm87.8AXS7ЗAAAӝ8[Utg:N]6`?OVKixˊQjh ^`ݥ* ؂{{6̘:wE$Dw{LtmhЫr40.5IaVJ2?y@} oe]ùZMNv9OӊSUfTidS[5dk8.:]_437U% OT^ixu KXԕ3St .NNNԢ"s56dz}ŢX8"bAKKsa g-2-l (xvpackage platform import ( "crypto/hkdf" "crypto/sha256" "encoding/hex" "fmt" "os" "path/filepath" "sync" "github.com/hanzoai/base/core" ) // OrgDB manages per-org AND per-user SQLite databases. // // Directory layout: // // {DataDir}/orgs/{orgSlug}/org.db ← org-level shared data // {DataDir}/orgs/{orgSlug}/users/{userId}/data.db ← per-user PII + keys // // Each file is independently encrypted with a unique DEK: // // org DEK = HMAC-SHA256(masterKey, orgSlug) // user DEK = HMAC-SHA256(masterKey, orgSlug + ":" + userId) // // Zero data commingling — org data, user PII, and keys are all in separate // files with separate encryption keys. type OrgDB struct { app core.App masterKey string mu sync.RWMutex dbs map[string]string // key → db path } func NewOrgDB(app core.App, masterKey string) *OrgDB { return &OrgDB{ app: app, masterKey: masterKey, dbs: make(map[string]string), } } // OrgsDir returns the base directory for all org databases. func (t *OrgDB) OrgsDir() string { return filepath.Join(t.app.DataDir(), "orgs") } // validateSlug rejects slugs containing path traversal characters. func validateSlug(s string) error { if s == "" { return fmt.Errorf("slug cannot be empty") } for _, c := range s { if !((c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c == '-' || c == '_') { return fmt.Errorf("slug contains invalid character %q", c) } } if s == "." || s == ".." { return fmt.Errorf("slug cannot be . or ..") } return nil } // --- Org-level database --- // OrgDir returns the directory for an org. Validates slug to prevent path traversal. func (t *OrgDB) OrgDir(orgSlug string) string { if err := validateSlug(orgSlug); err != nil { return filepath.Join(t.OrgsDir(), "_invalid") } return filepath.Join(t.OrgsDir(), orgSlug) } // OrgDBPath returns the org-level SQLite database path. func (t *OrgDB) OrgDBPath(orgSlug string) string { return filepath.Join(t.OrgDir(orgSlug), "org.db") } // OrgDEK derives the org-level data encryption key using HKDF (RFC 5869). // Go 1.26+ stdlib crypto/hkdf — proper key derivation, not raw HMAC. func (t *OrgDB) OrgDEK(orgSlug string) string { if t.masterKey == "" { return "" } key, _ := hkdf.Key(sha256.New, []byte(t.masterKey), []byte(orgSlug), "org-dek", 32) return hex.EncodeToString(key) } // ProvisionOrg creates the org directory and org-level database. func (t *OrgDB) ProvisionOrg(orgSlug string) (string, error) { if err := validateSlug(orgSlug); err != nil { return "", fmt.Errorf("invalid org slug: %w", err) } dir := t.OrgDir(orgSlug) if err := os.MkdirAll(dir, 0700); err != nil { return "", fmt.Errorf("create org dir %q: %w", dir, err) } // Create users subdirectory if err := os.MkdirAll(filepath.Join(dir, "users"), 0700); err != nil { return "", fmt.Errorf("create org users dir: %w", err) } dbPath := t.OrgDBPath(orgSlug) t.mu.Lock() t.dbs["org:"+orgSlug] = dbPath t.mu.Unlock() return dbPath, nil } // --- Per-user database --- // UserDir returns the directory for a specific user within an org. func (t *OrgDB) UserDir(orgSlug, userId string) string { if err := validateSlug(userId); err != nil { return filepath.Join(t.OrgDir(orgSlug), "users", "_invalid") } return filepath.Join(t.OrgDir(orgSlug), "users", userId) } // UserDBPath returns the per-user SQLite database path. func (t *OrgDB) UserDBPath(orgSlug, userId string) string { return filepath.Join(t.UserDir(orgSlug, userId), "data.db") } // UserDEK derives the per-user data encryption key using HKDF (RFC 5869). // Different from the org DEK — user PII gets a user-specific key. func (t *OrgDB) UserDEK(orgSlug, userId string) string { if t.masterKey == "" { return "" } key, _ := hkdf.Key(sha256.New, []byte(t.masterKey), []byte(orgSlug+":"+userId), "user-dek", 32) return hex.EncodeToString(key) } // ProvisionUser creates the per-user directory and database. func (t *OrgDB) ProvisionUser(orgSlug, userId string) (string, error) { if err := validateSlug(orgSlug); err != nil { return "", fmt.Errorf("invalid org slug: %w", err) } if err := validateSlug(userId); err != nil { return "", fmt.Errorf("invalid user id: %w", err) } dir := t.UserDir(orgSlug, userId) if err := os.MkdirAll(dir, 0700); err != nil { return "", fmt.Errorf("create user dir %q: %w", dir, err) } dbPath := t.UserDBPath(orgSlug, userId) t.mu.Lock() t.dbs["user:"+orgSlug+":"+userId] = dbPath t.mu.Unlock() return dbPath, nil } // --- Lookup --- // GetOrgDBPath returns the database path for an existing org. func (t *OrgDB) GetOrgDBPath(orgSlug string) (string, bool) { t.mu.RLock() if p, ok := t.dbs["org:"+orgSlug]; ok { t.mu.RUnlock() return p, true } t.mu.RUnlock() dbPath := t.OrgDBPath(orgSlug) if _, err := os.Stat(dbPath); err == nil { t.mu.Lock() t.dbs["org:"+orgSlug] = dbPath t.mu.Unlock() return dbPath, true } return "", false } // GetUserDBPath returns the database path for an existing user. func (t *OrgDB) GetUserDBPath(orgSlug, userId string) (string, bool) { key := "user:" + orgSlug + ":" + userId t.mu.RLock() if p, ok := t.dbs[key]; ok { t.mu.RUnlock() return p, true } t.mu.RUnlock() dbPath := t.UserDBPath(orgSlug, userId) if _, err := os.Stat(dbPath); err == nil { t.mu.Lock() t.dbs[key] = dbPath t.mu.Unlock() return dbPath, true } return "", false } // --- Lifecycle --- // DeleteUser removes a user's database directory. func (t *OrgDB) DeleteUser(orgSlug, userId string) error { t.mu.Lock() delete(t.dbs, "user:"+orgSlug+":"+userId) t.mu.Unlock() return os.RemoveAll(t.UserDir(orgSlug, userId)) } // DeleteOrg removes an org's entire directory (including all user databases). func (t *OrgDB) DeleteOrg(orgSlug string) error { t.mu.Lock() // Remove all cached paths for this org for k := range t.dbs { if len(k) > 4 && k[:4] == "org:" && k[4:] == orgSlug { delete(t.dbs, k) } if len(k) > 5+len(orgSlug) && k[:5+len(orgSlug)] == "user:"+orgSlug+":" { delete(t.dbs, k) } } t.mu.Unlock() return os.RemoveAll(t.OrgDir(orgSlug)) } // ListOrgs returns all provisioned org slugs. func (t *OrgDB) ListOrgs() ([]string, error) { entries, err := os.ReadDir(t.OrgsDir()) if err != nil { if os.IsNotExist(err) { return nil, nil } return nil, err } var slugs []string for _, e := range entries { if e.IsDir() { if _, err := os.Stat(t.OrgDBPath(e.Name())); err == nil { slugs = append(slugs, e.Name()) } } } return slugs, nil } // ListUsers returns all provisioned user IDs within an org. func (t *OrgDB) ListUsers(orgSlug string) ([]string, error) { usersDir := filepath.Join(t.OrgDir(orgSlug), "users") entries, err := os.ReadDir(usersDir) if err != nil { if os.IsNotExist(err) { return nil, nil } return nil, err } var ids []string for _, e := range entries { if e.IsDir() { if _, err := os.Stat(t.UserDBPath(orgSlug, e.Name())); err == nil { ids = append(ids, e.Name()) } } } return ids, nil } `zxV!package platform import ( "os" "path/filepath" "testing" "github.com/hanzoai/base/core" ) // mockApp implements the minimal core.App interface for OrgDB tests. type mockApp struct { core.BaseApp dataDir string } func (a *mockApp) DataDir() string { return a.dataDir } func testOrgDB(t *testing.T) (*OrgDB, string) { t.Helper() dir := t.TempDir() app := &mockApp{dataDir: dir} return NewOrgDB(app, "test-master-key-32-bytes-long!!!"), dir } // --- OrgDB provisioning --- func TestOrgDB_ProvisionOrg(t *testing.T) { db, dir := testOrgDB(t) path, err := db.ProvisionOrg("acme") if err != nil { t.Fatal(err) } expected := filepath.Join(dir, "orgs", "acme", "org.db") if path != expected { t.Fatalf("expected %s, got %s", expected, path) } // Directory should exist if _, err := os.Stat(filepath.Join(dir, "orgs", "acme")); os.IsNotExist(err) { t.Fatal("org directory not created") } // Users subdirectory should exist if _, err := os.Stat(filepath.Join(dir, "orgs", "acme", "users")); os.IsNotExist(err) { t.Fatal("users subdirectory not created") } } func TestOrgDB_ProvisionUser(t *testing.T) { db, dir := testOrgDB(t) _, _ = db.ProvisionOrg("acme") path, err := db.ProvisionUser("acme", "user-001") if err != nil { t.Fatal(err) } expected := filepath.Join(dir, "orgs", "acme", "users", "user-001", "data.db") if path != expected { t.Fatalf("expected %s, got %s", expected, path) } if _, err := os.Stat(filepath.Dir(path)); os.IsNotExist(err) { t.Fatal("user directory not created") } } func TestOrgDB_ProvisionMultipleOrgs(t *testing.T) { db, _ := testOrgDB(t) orgs := []string{"acme", "globex", "initech", "umbrella"} for _, org := range orgs { if _, err := db.ProvisionOrg(org); err != nil { t.Fatalf("provision org %s: %v", org, err) } } // All should be lookupable for _, org := range orgs { if _, ok := db.GetOrgDBPath(org); !ok { t.Fatalf("org %s not found after provisioning", org) } } } // --- Slug validation --- func TestOrgDB_InvalidSlug(t *testing.T) { db, _ := testOrgDB(t) cases := []string{"", "..", "../etc", "org/../../etc", "UPPER", "has space", "special!"} for _, slug := range cases { if _, err := db.ProvisionOrg(slug); err == nil { t.Fatalf("expected error for slug %q", slug) } } } func TestOrgDB_ValidSlugs(t *testing.T) { db, _ := testOrgDB(t) cases := []string{"acme", "org-123", "my_org", "a", "ab", "a-b-c-d"} for _, slug := range cases { if _, err := db.ProvisionOrg(slug); err != nil { t.Fatalf("unexpected error for slug %q: %v", slug, err) } } } // --- DEK derivation --- func TestOrgDB_OrgDEK_Deterministic(t *testing.T) { db, _ := testOrgDB(t) dek1 := db.OrgDEK("acme") dek2 := db.OrgDEK("acme") if dek1 != dek2 { t.Fatal("OrgDEK should be deterministic for same input") } if len(dek1) != 64 { // 32 bytes = 64 hex chars t.Fatalf("expected 64 hex chars, got %d", len(dek1)) } } func TestOrgDB_OrgDEK_UniquePerOrg(t *testing.T) { db, _ := testOrgDB(t) dek1 := db.OrgDEK("acme") dek2 := db.OrgDEK("globex") if dek1 == dek2 { t.Fatal("different orgs should have different DEKs") } } func TestOrgDB_UserDEK_UniquePerUser(t *testing.T) { db, _ := testOrgDB(t) dek1 := db.UserDEK("acme", "user-001") dek2 := db.UserDEK("acme", "user-002") dek3 := db.UserDEK("globex", "user-001") if dek1 == dek2 { t.Fatal("different users in same org should have different DEKs") } if dek1 == dek3 { t.Fatal("same user ID in different orgs should have different DEKs") } } func TestOrgDB_DEK_OrgVsUser_Different(t *testing.T) { db, _ := testOrgDB(t) orgDEK := db.OrgDEK("acme") userDEK := db.UserDEK("acme", "acme") // same string as org slug if orgDEK == userDEK { t.Fatal("org DEK and user DEK should differ even with same input (different HKDF info)") } } func TestOrgDB_DEK_EmptyMasterKey(t *testing.T) { dir := t.TempDir() app := &mockApp{dataDir: dir} db := NewOrgDB(app, "") // no master key if dek := db.OrgDEK("acme"); dek != "" { t.Fatalf("expected empty DEK with no master key, got %s", dek) } if dek := db.UserDEK("acme", "user-001"); dek != "" { t.Fatalf("expected empty DEK with no master key, got %s", dek) } } // --- Lookup --- func TestOrgDB_GetOrgDBPath_NotProvisioned(t *testing.T) { db, _ := testOrgDB(t) if _, ok := db.GetOrgDBPath("nonexistent"); ok { t.Fatal("should not find non-provisioned org") } } func TestOrgDB_GetUserDBPath_NotProvisioned(t *testing.T) { db, _ := testOrgDB(t) if _, ok := db.GetUserDBPath("acme", "user-001"); ok { t.Fatal("should not find non-provisioned user") } } func TestOrgDB_GetOrgDBPath_AfterProvision(t *testing.T) { db, _ := testOrgDB(t) expected, _ := db.ProvisionOrg("acme") got, ok := db.GetOrgDBPath("acme") if !ok { t.Fatal("should find provisioned org") } if got != expected { t.Fatalf("expected %s, got %s", expected, got) } } // --- Delete --- func TestOrgDB_DeleteUser(t *testing.T) { db, _ := testOrgDB(t) db.ProvisionOrg("acme") path, _ := db.ProvisionUser("acme", "user-001") // Create the actual DB file so the directory has content os.WriteFile(path, []byte("test"), 0600) if err := db.DeleteUser("acme", "user-001"); err != nil { t.Fatal(err) } if _, ok := db.GetUserDBPath("acme", "user-001"); ok { t.Fatal("user should be deleted from lookup") } if _, err := os.Stat(filepath.Dir(path)); !os.IsNotExist(err) { t.Fatal("user directory should be removed") } } // --- Integration: OrgDB + PoolManager --- func TestOrgDB_WithPoolManager(t *testing.T) { db, _ := testOrgDB(t) pm := NewDBPoolManager(DBPoolConfig{MaxPools: 16, NumShards: 1}) defer pm.Close() // Provision org orgPath, _ := db.ProvisionOrg("acme") // Open a pool for it pool, err := pm.Get(orgPath) if err != nil { t.Fatal(err) } defer pool.Release() // Create table and insert data _, err = pool.Nonconcurrent.NewQuery("CREATE TABLE config (k TEXT PRIMARY KEY, v TEXT)").Execute() if err != nil { t.Fatalf("create table: %v", err) } _, err = pool.Nonconcurrent.NewQuery("INSERT INTO config (k, v) VALUES ('name', 'Acme Corp')").Execute() if err != nil { t.Fatalf("insert: %v", err) } // Read back via concurrent pool var name string if err := pool.Concurrent.NewQuery("SELECT v FROM config WHERE k = 'name'").Row(&name); err != nil { t.Fatalf("select: %v", err) } if name != "Acme Corp" { t.Fatalf("expected 'Acme Corp', got %q", name) } // Provision user in same org userPath, _ := db.ProvisionUser("acme", "user-42") userPool, err := pm.Get(userPath) if err != nil { t.Fatal(err) } defer userPool.Release() // User DB is independent from org DB _, err = userPool.Nonconcurrent.NewQuery("CREATE TABLE orders (id INTEGER PRIMARY KEY, symbol TEXT)").Execute() if err != nil { t.Fatalf("create user table: %v", err) } _, err = userPool.Nonconcurrent.NewQuery("INSERT INTO orders (symbol) VALUES ('AAPL')").Execute() if err != nil { t.Fatalf("insert user data: %v", err) } // Org DB should NOT have the orders table var count int err = pool.Concurrent.NewQuery("SELECT count(*) FROM sqlite_master WHERE name='orders'").Row(&count) if err != nil { t.Fatalf("check org db: %v", err) } if count != 0 { t.Fatal("org DB should not have user's orders table — data isolation broken") } // Stats stats := pm.Stats() if stats.Opens != 2 { t.Fatalf("expected 2 opens (org + user), got %d", stats.Opens) } } // --- Multi-org isolation --- func TestOrgDB_MultiOrgIsolation(t *testing.T) { db, _ := testOrgDB(t) pm := NewDBPoolManager(DBPoolConfig{MaxPools: 16, NumShards: 1}) defer pm.Close() // Two orgs path1, _ := db.ProvisionOrg("acme") path2, _ := db.ProvisionOrg("globex") p1, _ := pm.Get(path1) defer p1.Release() p2, _ := pm.Get(path2) defer p2.Release() // Each org creates the same table name p1.Nonconcurrent.NewQuery("CREATE TABLE accounts (id INTEGER, name TEXT)").Execute() p2.Nonconcurrent.NewQuery("CREATE TABLE accounts (id INTEGER, name TEXT)").Execute() p1.Nonconcurrent.NewQuery("INSERT INTO accounts (name) VALUES ('Alice')").Execute() p2.Nonconcurrent.NewQuery("INSERT INTO accounts (name) VALUES ('Bob')").Execute() // Data is isolated var name1, name2 string p1.Concurrent.NewQuery("SELECT name FROM accounts").Row(&name1) p2.Concurrent.NewQuery("SELECT name FROM accounts").Row(&name2) if name1 != "Alice" { t.Fatalf("acme should have Alice, got %q", name1) } if name2 != "Bob" { t.Fatalf("globex should have Bob, got %q", name2) } } Pwx. package platform import ( "fmt" "strings" "github.com/hanzoai/base/core" ) // CollectionTemplate defines a collection schema that gets cloned per org. type CollectionTemplate struct { // Name is the base collection name (without org prefix). // The actual collection will be created as t_{slug}_{Name}. Name string // Type is the collection type: "base", "auth", or "view". // Defaults to "base" if empty. Type string // Fields defines the fields for the collection. Fields []core.Field } // OrgPrefix returns the collection name prefix for an org slug. // Format: t_{slug}_ func OrgPrefix(slug string) string { return "t_" + slug + "_" } // ScopedQuery returns the prefixed collection name for an org. // Example: ScopedQuery("acme", "tasks") returns "t_acme_tasks". func ScopedQuery(orgSlug, collection string) string { return OrgPrefix(orgSlug) + collection } // CreateOrgCollections creates prefixed collections for an org from the // given templates. Each template's Name is prefixed with t_{slug}_. // // Collections that already exist are skipped. func CreateOrgCollections(app core.App, orgSlug string, templates []CollectionTemplate) error { prefix := OrgPrefix(orgSlug) var errs []string for _, tmpl := range templates { if tmpl.Name == "" { continue } fullName := prefix + tmpl.Name // Skip if already exists. _, err := app.FindCollectionByNameOrId(fullName) if err == nil { continue } colType := tmpl.Type if colType == "" { colType = core.CollectionTypeBase } collection := core.NewCollection(colType, fullName) // Add template fields. for _, f := range tmpl.Fields { collection.Fields.Add(f) } if err := app.Save(collection); err != nil { errs = append(errs, fmt.Sprintf("%s: %v", fullName, err)) } } if len(errs) > 0 { return fmt.Errorf("failed to create org collections: %s", strings.Join(errs, "; ")) } return nil } // DeleteOrgCollections removes all collections with the org's prefix. func DeleteOrgCollections(app core.App, orgSlug string) error { prefix := OrgPrefix(orgSlug) allCollections, err := app.FindAllCollections() if err != nil { return fmt.Errorf("failed to list collections: %w", err) } var errs []string for _, col := range allCollections { if strings.HasPrefix(col.Name, prefix) { if err := app.Delete(col); err != nil { errs = append(errs, fmt.Sprintf("%s: %v", col.Name, err)) } } } if len(errs) > 0 { return fmt.Errorf("failed to delete org collections: %s", strings.Join(errs, "; ")) } return nil } // ListOrgCollections returns all collection names belonging to an org. func ListOrgCollections(app core.App, orgSlug string) ([]string, error) { prefix := OrgPrefix(orgSlug) allCollections, err := app.FindAllCollections() if err != nil { return nil, fmt.Errorf("failed to list collections: %w", err) } var names []string for _, col := range allCollections { if strings.HasPrefix(col.Name, prefix) { // Return the name without prefix for cleaner display. names = append(names, strings.TrimPrefix(col.Name, prefix)) } } return names, nil } UXxXKo7>{d*P;imA/APDxܒ\oHl9Mk$37/ Em-UUk";'K<Ïn&J,ez2NMJcUS5W6FY6U .ۜ8jO)p9JYVOz=' ټkJ*ZzB73 Kϣl$YaN)OT?:;xwНě.M3׋5V7ZTz<Ŀ ף-*3L[k4 E8E;}} ::md+kqFuׯ8HYk,SӘrH[ammQ病.Rk&>wBHsq.Yw-B"!KXV=X"_itd {)QP"Jߍ?5H(LiW[zk/gK߹_ljs=cQ`<?пDI''j_PK8{Ǩq~`ZIIV+ݐ,KyZ%+D Ҳv"xYT]¢m6cbP6tw hPJR_S̱}T{rFO+iif5dyj1~lR9cTǠ+~`ꇫnԱ!3BsҐV(TF]+V[G# eMi3VS~[:-0\2IvfwQ{rpp,xl{qN3cтO?_zwkInMԡR| _lzo4w_.ߝIwk6`Zm@6@#/e 2Lag=PĈ[dÛ|]QGvTa0Bmi._baPtyO6< sOq`5iEu8աO{1s f LYԭ >CxIh“<4\I_.y#ru;lZ +0}b)|tg V5a㧬,,RR& @0׻x~>5Bյ*@PЍq!]E?0.̄hđ 5VM"lti:[QaIֵǹH{4SdX;l}0ɭ'  AWZ74^},F6$?(@k,cҁ ix{By2Ésf93^xQpackage platform import ( "crypto/hmac" "crypto/sha256" "encoding/base64" "encoding/json" "fmt" ) // OrgStorage manages per-org and per-user S3 bucket isolation. // // Bucket layout on Hanzo S3 (s3.hanzo.space): // // orgs/{orgSlug}/ ← org bucket prefix // orgs/{orgSlug}/org/ ← org-level shared data // orgs/{orgSlug}/users/{userId}/ ← per-user isolated storage // // Each org gets its own SSE-KMS key derived from the master key. // Each user gets their own SSE-C key for client-side encryption. // // IAM policy ensures: // - Org admins can access orgs/{orgSlug}/* // - Users can only access orgs/{orgSlug}/users/{userId}/* // - No cross-org or cross-user access possible type OrgStorage struct { // Endpoint is the S3 endpoint (e.g., "s3.hanzo.space:9000" or "s3.hanzo.ai"). Endpoint string // Bucket is the root bucket name (e.g., "orgs"). Bucket string // MasterKey for deriving per-org and per-user SSE keys. MasterKey string // UseSSL enables TLS for the S3 connection. UseSSL bool // Region for the S3 bucket (default: "us-east-1"). Region string } // OrgPrefix returns the S3 key prefix for an org. func (s *OrgStorage) OrgPrefix(orgSlug string) string { return fmt.Sprintf("orgs/%s/", orgSlug) } // OrgDataPrefix returns the S3 key prefix for org-level shared data. func (s *OrgStorage) OrgDataPrefix(orgSlug string) string { return fmt.Sprintf("orgs/%s/org/", orgSlug) } // UserPrefix returns the S3 key prefix for a specific user. func (s *OrgStorage) UserPrefix(orgSlug, userId string) string { return fmt.Sprintf("orgs/%s/users/%s/", orgSlug, userId) } // OrgSSEKey derives a per-org SSE-C encryption key (32 bytes, base64-encoded). // Used as the SSE-C CustomerKey header for server-side encryption. func (s *OrgStorage) OrgSSEKey(orgSlug string) string { if s.MasterKey == "" { return "" } mac := hmac.New(sha256.New, []byte(s.MasterKey)) mac.Write([]byte("s3:org:" + orgSlug)) return base64.StdEncoding.EncodeToString(mac.Sum(nil)) } // UserSSEKey derives a per-user SSE-C encryption key (32 bytes, base64-encoded). // Each user's objects are encrypted with a unique key — even if the bucket is shared, // objects cannot be decrypted without the user-specific key. func (s *OrgStorage) UserSSEKey(orgSlug, userId string) string { if s.MasterKey == "" { return "" } mac := hmac.New(sha256.New, []byte(s.MasterKey)) mac.Write([]byte("s3:user:" + orgSlug + ":" + userId)) return base64.StdEncoding.EncodeToString(mac.Sum(nil)) } // BucketPolicy returns a MinIO/S3 bucket policy JSON that enforces per-org // path isolation. Uses encoding/json to prevent injection via orgSlug/iamUser. func (s *OrgStorage) BucketPolicy(orgSlug, iamUser string) string { if err := validateSlug(orgSlug); err != nil { return "{}" } policy := map[string]any{ "Version": "2012-10-17", "Statement": []map[string]any{ { "Effect": "Allow", "Principal": map[string]any{"AWS": []string{iamUser}}, "Action": []string{"s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket"}, "Resource": []string{fmt.Sprintf("arn:aws:s3:::%s/orgs/%s/*", s.Bucket, orgSlug)}, "Condition": map[string]any{ "StringLike": map[string]any{ "s3:prefix": []string{fmt.Sprintf("orgs/%s/*", orgSlug)}, }, }, }, }, } b, _ := json.MarshalIndent(policy, "", " ") return string(b) } // UserBucketPolicy returns a policy restricting a user to their own prefix only. func (s *OrgStorage) UserBucketPolicy(orgSlug, userId, iamUser string) string { if err := validateSlug(orgSlug); err != nil { return "{}" } if err := validateSlug(userId); err != nil { return "{}" } prefix := fmt.Sprintf("orgs/%s/users/%s/*", orgSlug, userId) policy := map[string]any{ "Version": "2012-10-17", "Statement": []map[string]any{ { "Effect": "Allow", "Principal": map[string]any{"AWS": []string{iamUser}}, "Action": []string{"s3:GetObject", "s3:PutObject", "s3:DeleteObject"}, "Resource": []string{fmt.Sprintf("arn:aws:s3:::%s/%s", s.Bucket, prefix)}, }, { "Effect": "Allow", "Principal": map[string]any{"AWS": []string{iamUser}}, "Action": []string{"s3:ListBucket"}, "Resource": []string{fmt.Sprintf("arn:aws:s3:::%s", s.Bucket)}, "Condition": map[string]any{ "StringLike": map[string]any{ "s3:prefix": []string{prefix}, }, }, }, }, } b, _ := json.MarshalIndent(policy, "", " ") return string(b) } QxXn6nmy.|yjtM8]WHY&Uv}?)ɲ%!p$?dD)3TU,RZ0 ?֟Jp>p[Li(9z:G[909<+]|59 ͽj" s2R #íVr(jN7noxv}pĘќN};׽]gy?L>1Ip5cJy6& Z"v ʟT[~3uNA.,OQ0H`/mrk z<u)79n\OfLz Fw:ٱvϩaa4)7Xh$7;[ (OYg!螔BrN*3X)L`^iΧZKT1`'g+6Pz. K}1r$bL&S\FLՓmpn}#ڷ )!6=RoŠzP1"-nin5侢<ǪgJWLEJ{h$ϓcc d xtQ bSsb=2BuMnrgF%XdN)6K+ hִ:V8M0KnR1!:b=SLTQIk~҂joT~-Q=Y9k7w#G:i4vRDAu+$J3ݔMyw{ LXo5̺Tf+-|!lvkiQwcmFJKOԭ6ɭΜ1%0x&Zyw.>@,YavC~p-"%m6tq< 6|LúhjeH<ϲRo5qP0|7A(hNwccE!$tL@Dd*u8~Aiw> |EPs;3M 3r@]($f}f5NQ*wDe;o$xȂ=Am4HB;< r[$V{<4 q! 2d*cRZ;*M?j,kPn ~d1aܤ.Vǧ];_VlVY2jbz0[hL@6kd}he|Y7ge5UtӴhj? oRmuF#ڎ' ?K&jRy:iu\Yeo5QE_+htRq*wP.3x皞u;< l`/eqnkvʬh /fVG#s@ % ]l1@3 Ζ4 'T24MC"mĴᆷaoZ^gӦ?!J{TFu2OI9)Wsϲ~RV,ztQw9,Gz`-Vi0sX[E{yS?Etz O7*m7FՓrF|Lʜ?{ sz2=1&Jyl)>K~#h>#X 6Ew"=Y>4MkܗC>xHڜ0| c!…|$s6Ċh?/Ņ$=) q4I#Ft;0o{ /5\"(to |(bOoh$!?jA_\ r#8Bro V+WU]eӌ3j*-SZݗ4-`P0(7cFHo4𗺄?,`.}u|# Pt5QaڰD0P U71b1aUB d1[$Tɻ6퉨ޖRS_nmhPI5(=|RP6ugX,qa7us^u߇ELП`<\e²aĶ$F(Xy[Yu;15F:JNu mNLX8Pװ{ kg$t HYO.ik= 2L'qN(^Ƒ l^L"C *ˀA :X1FNHHgaΰ+j;8JhA VF=ξh 9BAhkE͔})At9jՖ:|jI6w_w!p[h ܫϘY/R/Κ#L?j?Wpj>r^^P)+0$ۢP.Ś s%@O L Σ'G@ݵ@ol9\8 QEQC(ʫ$t;M9GC,{ʥh Y^Gcam >eE9"Lt *YN4Ī*w/ ~f4֥[K]IUKeb$2HG@@7 Rj&g Y尣@Ω׈Yc2mC4jLZUjT@"y@!['?Kz|D9 .R]Z2I@PB 9`9TdΫ#J[5V4(z̀r5i .HdՇ9#0iYc~b>!@<Ʃ"BQ /*3`^vu4죣}uUϫE+~ s5&<~eY'`+pM㞁o<1]*QK٠D8k}I"A`x4Um-\` ~ѧ˘H%A;K_ГA&4zkŵN"Ma@m!o[D k,ܵ+X 0 2(nfjXD3yG +C> m,?oetecԶ hi9ֽ6ݸVH&k152u;S-xP@HWAmdl(T}Aؾ:Bi*}^b(nE*'vә0ϗuQl߈:z:)m_lmo kl`OMERuvKb"{,π: < qAMPĀ*dRdh@M6 ^iݸP`GżlH"A]+jHD{64rxrcة? [ #:ϲzs?ANoz\g1V/K FL+li&(g6ч]Zkr" <@[s )Aρjy @ ? }6X\cC:C9i9G(0'UHܩ bq"47Fmu+=U ڇs>8MV'.)ǿ{e?",L YJl]VplX{<K ix hpkOb@ -Mp{T]IhkX0N"+4] `c(B+ŽqF5(JM 8Vv!(^Da_{/JG[3*QcT;*=G]:2@<9fxn\C,[b # j df:<ΦN@{C7K'+W_*A:%6AK截)|} WmMb318%qp ľ6&Ѧ][[cl'H=ϒ yVLeMK}w* z6q3)H@;;&.n%|$Z:yYOA>h@=4@gb(Q2 e8 I4ˆ ssۥ.r&}| =cd !zTęNH_ Odl>N@KiN#&~x$dT2Gȑ]ڶO9ѓML[D=f`Jǰ޹-quɲ.emrگYa trR9%UY六=W+h\û=;\.%*MFF&Ip4"7vdIףbĞ\/ @)\(*e.p{c!e"QCmMԄ A8(7GSybZu3iKwB乐ZZ&zgxGyѤMqv,ZZܗS r]LT"yj(7p%6 !beI"npҎ+ar [ =m "EMΊ-4UBVNpn͟B&=/F '3NRPj[DƳFJ4@OenVDZԀQ&-C*6aOh1-:Њ1*Qql"q 9VS`jE=mP`8o|y冗1U `!yC1íŒ'Gdt&w9hCt\.b)PDNBA?co}o&96x+8YSԏ :љfRNPY&YHH%k.LgKyAڨ&+]1Ãy uD귏}uG}=fi)aMx,t`O2 azn9Y\v Wudzm9#,˸˜D'>pZ@i1ڞmܑvLI/~ckoƒd8}yQam?op޵F~')bKD-c,`ı b x@^`QAB AjaI$RR<<$C\Ǫ_@fX}?cNwJHdU{dejt9A4}0^c{X{Z|tÿ_SCQŷ%x.˵&kҼ4+XC|, ;x=9P֞U]SĐ;9d70ݙ wKfq>Ok|Ê%n@A_;޿)c_ޟb!O<9͔kR/1@u!ŷ~Pq?4-jA;|+YvG]: 9.%Ͷ_nm/iAu2C)- H`!Wr}^84*P\V؋,fcwۣ 8fO# +afr_sb6 9pvyEneGTs`֋BގAQE?EvsaQ $yct7I' uzNyeDH1ћô]܆S@P fV]%]7~,HmU R޼b~DS2SL8AIS䬦xn J 4*9DqG$:\riud GtۥN9JL̀ixs< `=:eSզ:6[T/} x䑐lY\vȞBs4"{Pb5]d"N‡"}tsf_EdD>z.3b<+G/||;p@-x%rgR )aH SL2WY7x,>ЮufP%a٪;`Eλm%|E7jƫ%O%{kR!X7ϲuFѧꝼr鿏1lCNd'%e2ǎ KKCR 2$;3޴(E\yQT2TZdxT&Dr`ĵ9]%\82ETyGxOOWbR[t8'%[VTx-~#1)2 +Rߑݻ}5*gh8noFÚN^mkVC˴Bw6Ե㮶6R^mxN5a+$VfK,<εǁd~$ S| sgΞiy'k귻38j&#`|Y#MAuAy#, g&m\ "ЋMNyYM_b@m?ʅ־Un/6{g/]s3D̬[k+eĿ"5cvF~3FZfr"9ۛKm.;i؞GhN]Re3$jÿ\e Q6>g)Lan#tGIeD\ey,z]1nL4$HxO^#ҽ\^ m vk`qH7Ld h!#{osLχa[Gֲ,c37K v8YsEwfu^!m)VݫCoף;Fd{Г7,+83hͷO砭M3/5¼'A&]oI F/"S=zyHi̕$Z?-}mSkm[1MTҚ!FuG_Co~̦W江r5ƀ|vFO.xHB'Vl<- Nijn/sbr֬ͧ c2{}tY_(`(X߸!pe/V`?~cXnUOr΀lCxcW:Mx2wuPU(.Vr 4Dq)wuk3d90u98!p1bW,Y9 vΊ84ڔʷvRFsz;4YN*&@U:)0%" tD1a Kxu%Н`$' >vr %Ye^$9ʲj$NLٳx7hgTanF-8 2 3Ds>ym>%; ى/JLWS'ΧI": 0Mr➷'N]L t9YʴKWZs4Ċ7|>j1|Ӭ/p;HH: ͤ'8%7?FGc&'ދ[1YhqFd'*gNt q'YXvGod!/_v2]P'tTPگ/Wݝ6ҺggU9]'1a<Q4"jwhvuz@𳼌}Tɼ8p؉TRUV'^B˟5*M0ynFn>Aס015s QO, L`[mc{#E+Dl1}ag 6Ejz ?Ŗ\Ϙ\|x5_2y_OV5#Ң|;IýFR/0C^ePhĈ]2nNǸN~P~F??? q]حxPI]Hww[:_>W?Y-@ Ƈ-}䲲";_߼XG+ Ο9H'ᚗW]`Ʒ!C Q5 H9#^#+8 Qk.:S#qys }A=8W+oir~<Ä.МV9?~W_-aX$ҸK#TpDҷi ]Ӭ>}omv,A;ξK r?s%|A_co& t5#?Ye.nI@xYr6>KOr&)ƾ)L;?4N90 IH@+>DOH)IZ$3T,f"UFI&ani (2`!f83&>Ӈ6 5><{~;Ӏ‘(gCmoŎ^fqmS.%Roc -%7;RMkhw6.^w.y+;kKO7Rt74JR5PہsѠWO!PIhz4aSIU>licgJI5y=l=0|p~8 }XfJLXPIu$ύJۿjQE*ԀykѬRyDi+5JP'X[ e,.ȍ_Ӟv%Fo^b"6{Qz 뭈m{W_PKj3T6\ XK5{oD6+Yx`H. h!z.W%<@sOXL,'y :TѡF&,|zt-1PPL961XjуaP:A2zbL!cVA -_OI>rC(vC}O +o{;Pb]oJ(~CđơQ)6 "RV e>Jm &uBg2Cv)X]vY,,4(9HwDA1p̼5GkvnhGu#75a؅a++֥>S)SE+FOm{+ p;|_1-Ն؞p9q߀x*(1=Lj׎0OrYos9"2m ے0C~ܩv:g'3bX^إB4 RA`e7k&>33x0ރ Me\kJ0>L K\©VoYadh2{ E\[b'?a%|.z N-ģ?_чw/4W@Ss3GZU;wqڵjRT_<(LpI!DEvQ ڵ"8WTW82=}E\'hI ?bP rᵀP@ |#DZnjj E:sqB?=s #VYVq׬sp|V),?ojug,*U ]D6 VjkMJ7cECwqV\i#ɻ 2NdL0GP=iٚtQ]u١.SSФW%@H j悶^<%bV2w-Y0dvݸ^9~ h mw5; pi6Zyaݓ8 =.QX ]is_Ci+9vTSޣ?nJ Fۋ^ȤkS.`ɕ[}`) 7^T05huvXp5ԔU-^Ӻq=2D hoޣL>sCJCB17 wnF&!zYgxUr6=_SQTqRVk[%N,\JS3~a%G`o߾}hd M-}e2IԲ1CҹHӸjuhhy\{_TZ$+i9 f,.Z?eCZdӧ/v9yd7*kz.3+A4vkUX֓`9UX X Ȳc~kh)]o%Z~(20r΁a%4>֪ d!);^'xzr}|~+%!:?VM0 ùOh/d'#a-$f&B*dkY hIƵx,kM( 4E@T,#ێNK0_26GYz#X3p5WsXW0Ab(_:)s&euOeb> k&E~Q6KE'=UO#Ъf=/Nuȑ[JepJ]|&ʡg0קԤ73 m Y>} wԄq ;l'8y 9Mtd GTmG]qɘ _qC4n-Dc\XP '/vKq鳚}xw)+V(rNm#Ʊ2b4Ĕý1.uP";#4`TAvc0r@I4:)~Wm 8=4m0˫]$>꯭1n1b^ uqMpBʻ`/.Q 5v[. +Sܐ! &!}B`Gx?Y΢F w;߇Wa&|a\m854FeT\>Շ.BQCߌ&4ğzøx340031QrutuMaȪ 0٬HInƏ9Ckc !rSJsRMwߕֿ$**,ˍO*LIOKf ]Wc$MwKXf0H19}"uG׻Bd,,gx S_[b~p#3Jk ry9JKJ@Jfh JcڣS.׃eixG_=J9uiH9j%g100644 pyvm_bridge.hGhcцldITۑtVxY# plugins/pyvm — CPython extension runtime for Base `pyvm` is the cgo-based CPython 3.13 extension runtime. It satisfies the `extruntime.Runtime` and `extruntime.Module` interfaces from `plugins/extruntime`, sitting alongside the other four engines (native, goja, wazero, v8go). Default build links the stub (`stub.go`), which errors at `Load` time so applications that don't need Python don't pay the libpython link cost or the build-toolchain requirement. ## Build The real implementation lives behind the `pyvm` build tag and requires Python 3.13 development headers + the embed pkg-config file: ```bash # macOS (homebrew) brew install python@3.13 PKG_CONFIG_PATH=/opt/homebrew/opt/python@3.13/lib/pkgconfig \ go build -tags pyvm ./... # Debian / Ubuntu sudo apt-get install python3.13-dev go build -tags pyvm ./... # Free-threaded build (PEP 703) brew install python@3.13t # or compile cpython with --disable-gil PKG_CONFIG_PATH=/opt/homebrew/opt/python@3.13t/lib/pkgconfig \ go build -tags pyvm ./... ``` Without `-tags pyvm`, the stub is linked and `NewRuntime().Load()` returns `ErrUnsupported`. Capabilities (`Cgo`, language list) still report correctly so callers can branch on availability. ## Architecture ``` process └── CPython runtime (Py_InitializeEx once, global) ├── main interpreter ← we don't run user code here ├── module A sub-interp #0 ← OWN_GIL, holds module A source ├── module A sub-interp #1 ← OWN_GIL, parallel slot for module A ├── module B sub-interp #0 ← OWN_GIL, holds module B source └── … ``` Per-module sub-interpreter pool, OWN_GIL (PEP 684) on Python 3.12+, which means two concurrent Invokes on the same module can run on different OS threads in true parallel — each interpreter has its own GIL. On a free-threaded build (`Py_GIL_DISABLED=1`, PEP 703), the GIL is a no-op and pool entries run truly in parallel regardless of OWN_GIL. ### Invocation contract `Invoke(ctx, fn, payloadJSON)` does: 1. `runtime.LockOSThread()` — pin to one OS thread. 2. Acquire a sub-interpreter from the module's pool (lazy create up to `BASE_PYVM_POOL_SIZE`, default 4). 3. `PyEval_RestoreThread(ts)` — attach the sub-interp's thread state and acquire its GIL on this OS thread. 4. Call `__main__.fn(json.loads(payloadJSON))`. 5. `json.dumps(result)` → return bytes. 6. `PyEval_SaveThread()` — release the GIL. 7. Return the interpreter to the pool (or tear it down if surplus). 8. `runtime.UnlockOSThread()`. JSON marshaling happens **inside** the sub-interpreter via Python's stdlib `json` module — the Go side never builds Python dicts/lists. This keeps the cgo surface tiny and the cost portable. ### Cancellation — honest limitations `Invoke(ctx, …)` returns `ctx.Err()` if the context is already cancelled at the moment we acquire the interpreter. **Once Python is running, we cannot abort it from another OS thread:** - `Py_AddPendingCall` routes to the main interpreter only. - `PyThreadState_SetAsyncExc(tid, exc)` requires the target's GIL, which the running Invoke holds. - `PyErr_SetInterrupt` only fires via the SIGINT handler in the main thread. For hooks that may run long, callers should: - Set their own internal deadline inside the Python code (e.g. `time.monotonic()` polling). - Or use a different runtime: **wazero + RustPython / pyodide** gives you hard abort + a real sandbox at the cost of pure-Python perf. `Capabilities().SupportsAbort = false` reflects this honestly. ### Crash isolation — honest limitations `Capabilities().HardSandbox = false`. A C extension segfault crashes the whole Go process. Per HIP-0105, pyvm is **single-tenant deploys only** — never load untrusted Python in a multi-tenant pyvm host. For multi-tenant Python, the supported path is wazero with a Python-to-wasm artifact (RustPython, py2wasm, or CPython compiled to wasm32-wasi). ## Configuration | Env var | Default | Description | |---|---|---| | `BASE_PYVM_POOL_SIZE` | `4` | Max sub-interpreters retained per module. Increasing this raises memory but enables more parallel invocations of the same module. | ## Module manifest ```json { "name": "validate-email", "version": "0.1.0", "runtime": "pyvm", "module": "validate.py", "exports": ["validate"] } ``` The Python source must define top-level functions matching the `exports` list. Each function takes one argument (the JSON-parsed payload) and returns a JSON-serializable value. ## When to use pyvm - Single-tenant deployments running trusted code, where Python's ecosystem (numpy, pandas, transformers, sympy, …) is needed. - ML inference hooks where the cost of Python startup is amortized across many invocations. - Cases where the same logic exists in Python and porting to JS/wasm costs more than it saves. ## When NOT to use pyvm - Multi-tenant production. Use wazero + RustPython. - Any environment where a tenant's misbehaving code must not crash the host. Use wazero (hard sandbox) or v8go (process-level isolation with the abort caveat). - Builds that must not link libpython (small container images, no-cgo builds). The default stub build is exactly this. ## Benchmark numbers See `docs/EXTENSIONS_BENCHMARK.md` for the full numbers. Headline (darwin/arm64, Apple M1 Max, Python 3.13.13, GIL build): - Serial: 4012 ns/op, 496 B/op, 10 allocs/op - Parallel: 2765 ns/op (4-interp pool wins via OWN_GIL parallelism) - Cold load: 14 ms/module (sub-interpreter creation cost) - Steady-state: 18 µs/invoke after warmup Verdict: faster than v8go (4x serial, 4x parallel), competitive with goja, slower than native Go. Cold start is the worst in the field — deploy with warmups. ## Files - `stub.go` — default build, no Python required - `runtime.go`, `module.go` — `+build pyvm` Go side - `pyvm_bridge.h`, `pyvm_bridge.c` — `+build pyvm` shared C glue - `runtime_test.go` — `+build pyvm` table tests !xZn->ń#"WrdUpa[7h ɍvg7;h@>a93RҸXܝ3g;Ev:$fQ뱗F.{:~]äӫ鬈 f)$'ǽ8ͳ~aKu[S0b8d^SzeE8Ult2Kc~sLE\.YfRgҨ<6ذ7Y,%b#2DHEzS.3-0[ig:RʕhH,VBx"c:*n#S1N^ d,K)'Ar aSeQ(1o^^EdIKR@"KJFb %CwKyyFC&fIltDD*"٤3k12)8}ª(.LXD>$N$`-Lɩ^Uv{5*2bK(O/^NJY6UFݭ e{$ (X`CQ礚Yy(ۯ`bGɭ\i1 SSatClD3$uF<ӜP#"\8+e.ϞN.˫ -RuKGVdr>Fq[ðLLǐ(U/kvEqhxfxJffIw" %nT^ +:ap^*>@=MޜA|SaD7|cPg$g=@$pZ:H;l ZB:vssf$J3t3G{XpI9pw '֊d)Vf5{ ٤7>>ϳ"tcb=IgbQF)`琇ҟƉz`c&g@?.B ]*(6Bg<&0pz0IDdY[dkci`\U4+Rv; !ڣ%]lg2*s$Z%!,f8YU5l%dmLA2ŋ* ˋBPaz,74rd{c.!ol)'#Q4cx!ͪ~6O;cD z-إBwx#Oš<_~ߏ!x=p8?' mok?mQIC kF8f#_"/D!oW't``Ϫx K#!uKo#|3L<< [ĭKkhH>xtBǞ@;dP/?}o˅ِ`}zlg(( jGŀ*&ǧBU~UիTrq|oVUۅcWh @'vk=CpHkZeaׇ)qdlEޟSA5;ls=epȅϋX(;G"ml{ tg.gbID$и/dvf50.lkP%ȃ(3"TT!"-7y` ޽YqjR~ TC𩍐3v@@k'"KA)ESȊf\ 2idZT-D'NTې)CeP%"-*TKƵR)`RDb-?"/K{`R K:S]No]ϑz`o%AZ/2 LB w&ӆ:/xcEwK~ޕW#huʵV#!UJhgTjtAXJ0&G Yxi Wi,>,?s8m\Ӕbb[GNqw[&nkia*LӾ aE@u]^S؁s8s$lH(a<:c'ûkN{Gce6;#vtl\ʅn)xvMgK4Tk)EJn uGjlV fgkxqM hNkmWUT(wȉ'Z\mT.F\7r'9-xwzz&dii0[gvƮ+{xmW5k VkZf(W=$Vgȷ0[$gd)ڢ>{9__Jr@Gޮ5k6(U2:ȶ|t E(j?t³2[7zDž&\(S\YEގW)E<+ʔaPҽ Oc/Q Sӳu U/TIuVk׽mvaw݈RInO1E8ܗ]hbx@dh{aiuoqhbG {h"IPUD ?kGQ1 f*$P F mmbfJ-OY(j̇Cs |SmɾT7%8*O#prm=8f5dscHc7(6Mi-7{,.1`+mDȲ YQ;=~q˽>ݟJ&6vЍ@z2] *N#B褫_&S .:/"W~|Nƿ?IvXwEHc`tC׶d}RyRu*mßh!rh<{Ķ5tC T#_k"{L;A mkWtkla+VV- ~av!vʫUyt$pWKBm7hre)z3e ۲`}Æ[\=ҸO}ں`H7FR%}J>h)J^Fcj}}Pݵ vL:lljyBVgg;;)9e89|{m_a!nƁs{4 oOgoًW(ɣwAD`΢^vWޫt'xlAXTx$zBH:HTl!f bW}ʷ=aҾ=T2LFf [r͝k˫,4uf@ 08*TZ%VHr[m &dXx!LN$XD=DEF@Б&R_UZ !h3`Ҋи'=c4X$ѿt{ x'IdSAG'~JRIa8IO$'5z!=DOzj#'sw>sG;]T-\aVA=( p).bHCWl]ٰ͔?#uXeNHmf8R%u6@Wh(2PE"JfCxt|aTҬSNE-özx/$/AFl(xj-ZH#(dD-RD(S2i\YiӞ~|51& ya!L݃^?v@ku/ ƔݍhdpocS{,5nY1> ~h xL?//go:build pyvm // +build pyvm // Package pyvm — C bridge implementation. See pyvm_bridge.h for the // API contract and pyvm/README.md for the design notes. #include "pyvm_bridge.h" #include #include #include static PyThreadState *gMainState = NULL; static int gGilDisabled = 0; // Per-OS-thread cache of PyThreadState* for threaded-mode invokes. // First Invoke on an OS thread allocates a fresh ts in the main // interpreter; subsequent Invokes on the SAME OS thread reuse it. // The ts stays in the interpreter's thread list for the lifetime of // the process; we never destroy it. (The OS thread might die first, // but the dangling ts in the linked list is harmless — nobody calls // PyEval_AcquireThread on it.) // // This is the proper-perf path. The alternative — PyThreadState_New // every call — measured at ~400 µs/call on FT 3.13t due to // HEAD_LOCK contention and the qsbr_register pass. Caching collapses // the per-call cost to a TSS lookup + AcquireThread (~200 ns on FT). static Py_tss_t gThreadedTSS = Py_tss_NEEDS_INIT; PyThreadState* pyvm_init(void) { if (gMainState != NULL) return gMainState; Py_InitializeEx(0); // 0 = skip signal-handler install — Go owns signals. #ifdef Py_GIL_DISABLED // On a free-threaded build (PEP 703) the GIL never engages, so // PyEval_AcquireThread becomes a thread-state attach with no // wait. Detect at compile time — Py_GIL_DISABLED is set by the // cpython build when --disable-gil was passed to configure. gGilDisabled = 1; #else gGilDisabled = 0; #endif // Allocate the per-OS-thread TSS key BEFORE releasing the GIL — // PyThread_tss_create is documented as safe outside the GIL but // we hold it here anyway. Failure is fatal (no memory left). if (PyThread_tss_is_created(&gThreadedTSS) == 0) { if (PyThread_tss_create(&gThreadedTSS) != 0) { // Cannot raise — we don't have a tstate object yet from // the caller's POV. Stuff the failure into stderr. fprintf(stderr, "pyvm: PyThread_tss_create failed\n"); } } gMainState = PyEval_SaveThread(); // release GIL, return main state return gMainState; } int pyvm_gil_disabled(void) { return gGilDisabled; } PyThreadState* pyvm_new_sub(char **err_out) { PyEval_RestoreThread(gMainState); // acquire GIL on main interp PyInterpreterConfig cfg = { .use_main_obmalloc = 0, .allow_fork = 0, .allow_exec = 0, .allow_threads = 1, .allow_daemon_threads = 0, .check_multi_interp_extensions = 1, .gil = PyInterpreterConfig_OWN_GIL, }; PyThreadState *ts = NULL; PyStatus st = Py_NewInterpreterFromConfig(&ts, &cfg); if (PyStatus_Exception(st)) { if (err_out) { const char *msg = st.err_msg ? st.err_msg : "Py_NewInterpreterFromConfig failed"; *err_out = strdup(msg); } if (PyThreadState_Get() != gMainState) { PyThreadState_Swap(gMainState); } gMainState = PyEval_SaveThread(); return NULL; } PyEval_SaveThread(); return ts; } void pyvm_end_sub(PyThreadState *ts) { if (ts == NULL) return; PyEval_RestoreThread(ts); Py_EndInterpreter(ts); PyThreadState_Swap(gMainState); PyEval_SaveThread(); } void pyvm_enter(PyThreadState *ts) { PyEval_RestoreThread(ts); } void pyvm_leave(void) { PyEval_SaveThread(); } int pyvm_load_source(const char *src, char **err_out) { PyObject *mainMod = PyImport_AddModule("__main__"); // borrowed if (mainMod == NULL) goto err; PyObject *globals = PyModule_GetDict(mainMod); // borrowed if (globals == NULL) goto err; PyObject *r = PyRun_String(src, Py_file_input, globals, globals); if (r == NULL) goto err; Py_DECREF(r); PyObject *json = PyImport_ImportModule("json"); if (json == NULL) goto err; if (PyDict_SetItemString(globals, "_pyvm_json", json) < 0) { Py_DECREF(json); goto err; } Py_DECREF(json); return 0; err: if (err_out) { PyObject *type, *value, *tb; PyErr_Fetch(&type, &value, &tb); PyObject *s = value ? PyObject_Str(value) : NULL; const char *cstr = s ? PyUnicode_AsUTF8(s) : "python load error"; *err_out = strdup(cstr ? cstr : "python load error"); Py_XDECREF(s); Py_XDECREF(type); Py_XDECREF(value); Py_XDECREF(tb); PyErr_Clear(); } return -1; } char* pyvm_invoke(const char *fn, const char *payload_json, int *was_unknown, char **err_out) { *was_unknown = 0; PyObject *mainMod = PyImport_AddModule("__main__"); if (mainMod == NULL) goto err; PyObject *globals = PyModule_GetDict(mainMod); if (globals == NULL) goto err; PyObject *fnObj = PyDict_GetItemString(globals, fn); if (fnObj == NULL || !PyCallable_Check(fnObj)) { *was_unknown = 1; if (err_out) *err_out = strdup("function not found"); return NULL; } PyObject *jsonMod = PyDict_GetItemString(globals, "_pyvm_json"); if (jsonMod == NULL) goto err; PyObject *loads = PyObject_GetAttrString(jsonMod, "loads"); if (loads == NULL) goto err; PyObject *dumps = PyObject_GetAttrString(jsonMod, "dumps"); if (dumps == NULL) { Py_DECREF(loads); goto err; } PyObject *payloadStr = PyUnicode_FromString(payload_json); if (payloadStr == NULL) { Py_DECREF(loads); Py_DECREF(dumps); goto err; } PyObject *parsed = PyObject_CallOneArg(loads, payloadStr); Py_DECREF(payloadStr); Py_DECREF(loads); if (parsed == NULL) { Py_DECREF(dumps); goto err; } PyObject *result = PyObject_CallOneArg(fnObj, parsed); Py_DECREF(parsed); if (result == NULL) { Py_DECREF(dumps); goto err; } PyObject *resultStr = PyObject_CallOneArg(dumps, result); Py_DECREF(result); Py_DECREF(dumps); if (resultStr == NULL) goto err; const char *cstr = PyUnicode_AsUTF8(resultStr); if (cstr == NULL) { Py_DECREF(resultStr); goto err; } char *out = strdup(cstr); Py_DECREF(resultStr); return out; err: if (err_out) { PyObject *type, *value, *tb; PyErr_Fetch(&type, &value, &tb); PyObject *s = value ? PyObject_Str(value) : NULL; const char *cstr = s ? PyUnicode_AsUTF8(s) : "python invoke error"; *err_out = strdup(cstr ? cstr : "python invoke error"); Py_XDECREF(s); Py_XDECREF(type); Py_XDECREF(value); Py_XDECREF(tb); PyErr_Clear(); } return NULL; } // ------------------------------------------------------------------ // Threaded-mode helpers // ------------------------------------------------------------------ // // Module loading in threaded mode: // // 1. Build a fresh dict to serve as the module's namespace. // 2. exec(src) inside that dict — module-private helpers, classes, // and constants live there. // 3. For each top-level callable defined in that dict, publish a // reference into __main__ under "__". The callable // keeps its closure over its own globals dict, so private helpers // resolve correctly even though the function is "called from" // __main__. // 4. Stash one shared json module reference in __main__ as // _pyvm_json (idempotent). // // Symbol convention: prefix = sanitized module name with "__pyvm_" // front and "__" tail. The Go side guarantees prefix is unique per // loaded module instance. // // Concurrency safety: // - We DO NOT use PyGILState_Ensure here. PyGILState_* relies on an // autoTSSkey that, when sub-interpreters exist in the same process, // can attach a thread to the wrong interpreter (whichever sub- // interp last touched this OS thread). The result is a fatal // "_PyThreadState_Attach: non-NULL old thread state" or worse. // - Instead, every threaded-mode call: // a. Allocates a fresh PyThreadState in the MAIN interpreter // via PyThreadState_New(main_interp). // b. PyEval_AcquireThread(ts) — swaps in + (on default-GIL) // waits for the GIL. // c. Does the work. // d. PyEval_ReleaseThread(ts). // e. PyThreadState_Clear + PyThreadState_Delete to drop the ts. // - On a free-threaded build, AcquireThread doesn't block; multiple // OS threads can each own a thread state in the main interpreter // simultaneously and execute bytecode in true parallel. // // Helper: // threaded_attach attaches the calling OS thread to the MAIN // interpreter. Uses a per-OS-thread TSS cache: first call on a // thread allocates a fresh PyThreadState; subsequent calls reuse it. // // Caller MUST pair with threaded_detach. Caller MUST hold an OS // thread via runtime.LockOSThread on the Go side. // // Why a custom TSS instead of PyGILState_Ensure? // // PyGILState_Ensure relies on the runtime's autoTSSkey that can be // left in an inconsistent state by sub-interpreter teardown (after // pyvm_end_sub the OS thread's autoTSSkey can point at the destroyed // sub-interp's ts, triggering "_PyThreadState_Attach: non-NULL old // thread state" on the next GILState_Ensure). // // Our gThreadedTSS is independent: each main-interp ts we create // is kept in the interpreter's thread list FOR THE LIFETIME OF // THE PROCESS, and we look it up by current OS thread on every // Invoke. Lookup is a single TLS access (~10 ns); attach is // PyEval_AcquireThread (~100-200 ns on FT, blocking wait on // default-GIL). // // Memory: each OS thread that ever invoked uses ~1 KB for its // cached ts. The Go runtime caps M's at GOMAXPROCS + cgo callers, // so the total is bounded by the M cap (typically <100). On // process exit Python tears down the interp and frees them all. typedef struct { PyThreadState *ts; } pyvm_threaded_handle; // fresh_threadstate creates a new ts in the main interpreter and // stores it in the per-OS-thread TSS. Caller does NOT hold the GIL. static PyThreadState *fresh_threadstate(void) { if (gMainState == NULL || gMainState->interp == NULL) return NULL; PyThreadState *ts = PyThreadState_New(gMainState->interp); if (ts == NULL) return NULL; if (PyThread_tss_set(&gThreadedTSS, (void *)ts) != 0) { // tss_set can't really fail post-create, but be defensive. PyThreadState_Clear(ts); PyThreadState_Delete(ts); return NULL; } return ts; } static pyvm_threaded_handle threaded_attach(void) { pyvm_threaded_handle h = {NULL}; PyThreadState *ts = (PyThreadState *)PyThread_tss_get(&gThreadedTSS); if (ts == NULL) { ts = fresh_threadstate(); if (ts == NULL) return h; } PyEval_AcquireThread(ts); h.ts = ts; return h; } static void threaded_detach(pyvm_threaded_handle h) { if (h.ts == NULL) return; PyEval_ReleaseThread(h.ts); } // Helper: build a fresh module namespace and exec(src) into it. // Returns a new strong reference to the populated dict on success, // NULL on error (with err_out populated). static PyObject *threaded_exec_into_fresh_dict(const char *src, char **err_out) { PyObject *mod_globals = PyDict_New(); if (mod_globals == NULL) { if (err_out) *err_out = strdup("PyDict_New failed"); return NULL; } // Standard __builtins__ injection so the exec'd source can call // print(), len(), isinstance(), etc. PyObject *builtins = PyEval_GetBuiltins(); // borrowed if (builtins != NULL) { if (PyDict_SetItemString(mod_globals, "__builtins__", builtins) < 0) { Py_DECREF(mod_globals); if (err_out) *err_out = strdup("inject builtins failed"); return NULL; } } PyObject *r = PyRun_String(src, Py_file_input, mod_globals, mod_globals); if (r == NULL) { Py_DECREF(mod_globals); if (err_out) { PyObject *type, *value, *tb; PyErr_Fetch(&type, &value, &tb); PyObject *s = value ? PyObject_Str(value) : NULL; const char *cstr = s ? PyUnicode_AsUTF8(s) : "exec failed"; *err_out = strdup(cstr ? cstr : "exec failed"); Py_XDECREF(s); Py_XDECREF(type); Py_XDECREF(value); Py_XDECREF(tb); PyErr_Clear(); } return NULL; } Py_DECREF(r); return mod_globals; // caller owns } int pyvm_threaded_load(const char *prefix, const char *src, char **err_out) { if (prefix == NULL || src == NULL) { if (err_out) *err_out = strdup("nil prefix/src"); return -1; } pyvm_threaded_handle h = threaded_attach(); if (h.ts == NULL) { if (err_out) *err_out = strdup("threaded_attach failed"); return -1; } PyObject *mod_globals = threaded_exec_into_fresh_dict(src, err_out); if (mod_globals == NULL) { threaded_detach(h); return -1; } PyObject *mainMod = PyImport_AddModule("__main__"); // borrowed if (mainMod == NULL) { Py_DECREF(mod_globals); if (err_out) *err_out = strdup("PyImport_AddModule(__main__) failed"); threaded_detach(h); return -1; } PyObject *mainGlobals = PyModule_GetDict(mainMod); // borrowed if (mainGlobals == NULL) { Py_DECREF(mod_globals); if (err_out) *err_out = strdup("PyModule_GetDict(__main__) failed"); threaded_detach(h); return -1; } // Idempotently stash json on __main__ as _pyvm_json. The threaded- // invoke path reaches into __main__ for it on every call. if (PyDict_GetItemString(mainGlobals, "_pyvm_json") == NULL) { PyObject *json = PyImport_ImportModule("json"); if (json == NULL) { Py_DECREF(mod_globals); if (err_out) *err_out = strdup("import json failed"); threaded_detach(h); return -1; } if (PyDict_SetItemString(mainGlobals, "_pyvm_json", json) < 0) { Py_DECREF(json); Py_DECREF(mod_globals); if (err_out) *err_out = strdup("publish _pyvm_json failed"); threaded_detach(h); return -1; } Py_DECREF(json); } // Walk the module's globals; copy every top-level callable that // doesn't start with "_" under a mangled name in __main__. PyObject *keys = PyDict_Keys(mod_globals); if (keys == NULL) { Py_DECREF(mod_globals); if (err_out) *err_out = strdup("PyDict_Keys(mod_globals) failed"); threaded_detach(h); return -1; } Py_ssize_t n = PyList_Size(keys); for (Py_ssize_t i = 0; i < n; i++) { PyObject *k = PyList_GetItem(keys, i); // borrowed if (!PyUnicode_Check(k)) continue; const char *name = PyUnicode_AsUTF8(k); if (name == NULL || name[0] == '_') continue; PyObject *v = PyDict_GetItem(mod_globals, k); // borrowed if (v == NULL || !PyCallable_Check(v)) continue; // Build "__" char mangled[512]; int wrote = snprintf(mangled, sizeof(mangled), "%s__%s", prefix, name); if (wrote < 0 || (size_t)wrote >= sizeof(mangled)) continue; if (PyDict_SetItemString(mainGlobals, mangled, v) < 0) { Py_DECREF(keys); Py_DECREF(mod_globals); if (err_out) *err_out = strdup("publish mangled name failed"); threaded_detach(h); return -1; } } Py_DECREF(keys); // mod_globals is anchored by every published function's __globals__ // attribute, so we drop our reference here; the callables keep // their closure references alive. Py_DECREF(mod_globals); threaded_detach(h); return 0; } char* pyvm_threaded_invoke(const char *mangled_fn, const char *payload_json, int *was_unknown, char **err_out) { if (was_unknown != NULL) *was_unknown = 0; pyvm_threaded_handle h = threaded_attach(); if (h.ts == NULL) { if (err_out) *err_out = strdup("threaded_attach failed"); return NULL; } PyObject *mainMod = PyImport_AddModule("__main__"); // borrowed if (mainMod == NULL) goto err; PyObject *globals = PyModule_GetDict(mainMod); // borrowed if (globals == NULL) goto err; PyObject *fnObj = PyDict_GetItemString(globals, mangled_fn); // borrowed if (fnObj == NULL || !PyCallable_Check(fnObj)) { if (was_unknown != NULL) *was_unknown = 1; if (err_out) *err_out = strdup("function not found"); threaded_detach(h); return NULL; } PyObject *jsonMod = PyDict_GetItemString(globals, "_pyvm_json"); // borrowed if (jsonMod == NULL) goto err; PyObject *loads = PyObject_GetAttrString(jsonMod, "loads"); if (loads == NULL) goto err; PyObject *dumps = PyObject_GetAttrString(jsonMod, "dumps"); if (dumps == NULL) { Py_DECREF(loads); goto err; } PyObject *payloadStr = PyUnicode_FromString(payload_json); if (payloadStr == NULL) { Py_DECREF(loads); Py_DECREF(dumps); goto err; } PyObject *parsed = PyObject_CallOneArg(loads, payloadStr); Py_DECREF(payloadStr); Py_DECREF(loads); if (parsed == NULL) { Py_DECREF(dumps); goto err; } PyObject *result = PyObject_CallOneArg(fnObj, parsed); Py_DECREF(parsed); if (result == NULL) { Py_DECREF(dumps); goto err; } PyObject *resultStr = PyObject_CallOneArg(dumps, result); Py_DECREF(result); Py_DECREF(dumps); if (resultStr == NULL) goto err; const char *cstr = PyUnicode_AsUTF8(resultStr); if (cstr == NULL) { Py_DECREF(resultStr); goto err; } char *out = strdup(cstr); Py_DECREF(resultStr); threaded_detach(h); return out; err: if (err_out) { PyObject *type, *value, *tb; PyErr_Fetch(&type, &value, &tb); PyObject *s = value ? PyObject_Str(value) : NULL; const char *cstr = s ? PyUnicode_AsUTF8(s) : "python invoke error"; *err_out = strdup(cstr ? cstr : "python invoke error"); Py_XDECREF(s); Py_XDECREF(type); Py_XDECREF(value); Py_XDECREF(tb); PyErr_Clear(); } threaded_detach(h); return NULL; } void pyvm_threaded_unload(const char *prefix) { if (prefix == NULL) return; pyvm_threaded_handle h = threaded_attach(); PyObject *mainMod = PyImport_AddModule("__main__"); if (mainMod == NULL) { PyErr_Clear(); threaded_detach(h); return; } PyObject *globals = PyModule_GetDict(mainMod); if (globals == NULL) { PyErr_Clear(); threaded_detach(h); return; } // Walk a snapshot of keys; mutate dict from the snapshot list. PyObject *keys = PyDict_Keys(globals); if (keys == NULL) { PyErr_Clear(); threaded_detach(h); return; } size_t plen = strlen(prefix); Py_ssize_t n = PyList_Size(keys); for (Py_ssize_t i = 0; i < n; i++) { PyObject *k = PyList_GetItem(keys, i); // borrowed if (!PyUnicode_Check(k)) continue; const char *name = PyUnicode_AsUTF8(k); if (name == NULL) continue; if (strncmp(name, prefix, plen) != 0) continue; // Make sure the next chars are "__" so we don't accidentally // delete an unrelated symbol that happens to share a prefix. if (name[plen] != '_' || name[plen+1] != '_') continue; PyDict_DelItem(globals, k); } Py_DECREF(keys); PyErr_Clear(); threaded_detach(h); } Nx;0qo%Ma3rsG ~j >xT// Package pyvm — C bridge declarations shared across pyvm cgo files. // Implementation lives in pyvm_bridge.c so multiple .go files can call // the same helpers without cgo dropping duplicate-symbol errors. #ifndef PYVM_BRIDGE_H #define PYVM_BRIDGE_H #include // pyvm_init initializes CPython (idempotent). Returns the saved main // thread state, leaves the GIL released. Sets the global GIL-disabled // flag retrievable via pyvm_gil_disabled. PyThreadState* pyvm_init(void); // pyvm_gil_disabled returns 1 if CPython was built with --disable-gil // (free-threading PEP 703), 0 otherwise. int pyvm_gil_disabled(void); // pyvm_new_sub creates an OWN_GIL sub-interpreter (PEP 684). On // success returns its thread state and leaves the caller thread // without holding any GIL. On failure returns NULL and writes a heap- // allocated error string to *err_out (caller frees). PyThreadState* pyvm_new_sub(char **err_out); // pyvm_end_sub destroys a sub-interpreter. Caller must NOT hold GIL. // Safe to pass NULL. void pyvm_end_sub(PyThreadState *ts); // pyvm_enter / pyvm_leave swap the calling OS thread to/from the // given sub-interpreter. Must be paired and called from the same OS // thread. void pyvm_enter(PyThreadState *ts); void pyvm_leave(void); // pyvm_load_source runs source as __main__ of the current // sub-interpreter. Caller must hold the GIL. Returns 0 on success; // on failure writes a heap-allocated error string to *err_out. int pyvm_load_source(const char *src, char **err_out); // pyvm_invoke calls __main__.fn(json.loads(payload_json)) and returns // json.dumps(result) as a heap-allocated C string (caller frees). // Caller must hold the GIL of the target sub-interpreter. // // On error returns NULL and writes the error to *err_out. If the // failure is "function not found / not callable", *was_unknown is // set to 1 — the Go layer maps that to ErrUnknownFn. char* pyvm_invoke(const char *fn, const char *payload_json, int *was_unknown, char **err_out); // ------------------------------------------------------------------ // Threaded-mode bridge — single global interpreter, one OS thread // per concurrent invocation. On a free-threaded (PEP 703) build, N // goroutines pinned to N OS threads run Python bytecode truly in // parallel; on a default-GIL build the GIL serializes them. // // All threaded-mode entry points use PyGILState_Ensure/Release to // attach the calling OS thread to the global interpreter. They are // safe to call from any goroutine that has previously called // runtime.LockOSThread(). // ------------------------------------------------------------------ // pyvm_threaded_load loads `src` as a module identified by the // mangled prefix `prefix`. For each top-level function defined in // the module, a binding is created in __main__ under the mangled // name "__" so concurrent callers from different modules // don't collide on the global symbol table. // // The function objects keep a reference to the module's own globals // dict (NOT __main__), so module-private helpers continue to resolve // against the module's namespace. Only the externally-visible // entrypoints get mangled-and-published into __main__. // // Caller must NOT hold the GIL on entry. The bridge handles // PyGILState_Ensure/Release internally. Returns 0 on success; // on failure writes a heap-allocated error string to *err_out. int pyvm_threaded_load(const char *prefix, const char *src, char **err_out); // pyvm_threaded_invoke calls the mangled-name function // (e.g. "__pyvm_validate_email__validate") with the JSON payload. // Same JSON-in / JSON-out contract as pyvm_invoke. Returns a heap- // allocated C string (caller frees) on success. // // Caller must NOT hold the GIL on entry. The bridge handles // PyGILState_Ensure/Release internally so the goroutine just // LockOSThread + call + UnlockOSThread. // // On error returns NULL and writes the error to *err_out. If the // failure is "function not found / not callable", *was_unknown is // set to 1. char* pyvm_threaded_invoke(const char *mangled_fn, const char *payload_json, int *was_unknown, char **err_out); // pyvm_threaded_unload removes every binding in __main__ whose name // starts with "__" so an unloaded module doesn't leak symbols // for the lifetime of the process. Caller must NOT hold the GIL. void pyvm_threaded_unload(const char *prefix); #endif // PYVM_BRIDGE_H ކk9x[(%ɂsOxD"//go:build pyvm // +build pyvm // Package pyvm is the CPython (cgo) extension runtime for Base. // // Two execution modes coexist behind a single Runtime interface: // // ModeThreaded — one global CPython interpreter, N goroutines pinned // to N OS threads invoke functions in parallel. On a // free-threaded (PEP 703 / python3.13t) build this is // actual parallel Python; on default-GIL the GIL // serializes them. This is the default. // // ModeSubinterp — one PEP 684 OWN_GIL sub-interpreter pool per loaded // module, each interpreter holding its own GIL. Strong // isolation between sub-interpreters; bounded // parallelism by pool size. Opt-in via extension.json // "mode": "subinterp" OR BASE_PYVM_MODE=subinterp. // // Mode selection precedence: extension.json field > env var override > // auto-detect from CPython build (threaded on free-threaded builds, // subinterp otherwise). // // Both modes share the same Invoke contract: LockOSThread → enter GIL // → call __main__.fn(json.loads(payload)) → json.dumps → leave GIL → // UnlockOSThread. They differ in what "enter GIL" means (attach vs // swap thread state) and in symbol resolution (mangled prefix vs // per-sub-interp __main__). // // Free-threading detection // ------------------------ // pyvm_gil_disabled() returns 1 if libpython was compiled with // Py_GIL_DISABLED (--disable-gil), 0 otherwise. The C bridge sets this // at static init time so Go can branch on it cheaply. // // Crash isolation caveat // ---------------------- // A C extension segfault crashes the whole Go process. HIP-0105 marks // pyvm as single-tenant deploys only; multi-tenant production should // use wazero + a Python compiled to wasm (RustPython / pyodide / cpython // wasm32-wasi). See plugins/pyvm/README.md. package pyvm /* #cgo pkg-config: python-3.13-embed #include "pyvm_bridge.h" */ import "C" import ( "context" "errors" "fmt" "os" "strconv" "sync" "unsafe" "github.com/hanzoai/base/plugins/extruntime" ) // Mode picks the per-module execution strategy. ModeThreaded is the // default on free-threaded CPython builds; ModeSubinterp is the // default on default-GIL builds (and the only mode prior to v2). type Mode int const ( // ModeThreaded runs every Invoke against the single global // interpreter. Goroutines pin to OS threads and call // PyGILState_Ensure to attach. Cheap, parallel-on-FT, but no // per-tenant memory isolation: tenants share __main__. ModeThreaded Mode = iota // ModeSubinterp runs every Invoke against a per-module pool of // PEP 684 OWN_GIL sub-interpreters. Each interpreter holds its // own __main__, modules, and GIL. Strong isolation but pool- // size bounded parallelism and high per-module memory cost. ModeSubinterp ) func (m Mode) String() string { switch m { case ModeThreaded: return "threaded" case ModeSubinterp: return "subinterp" default: return fmt.Sprintf("mode(%d)", int(m)) } } // parseMode parses extension.json "mode" or env var values. Unknown // values map to ModeThreaded by default (forward-compatible default). func parseMode(s string) (Mode, bool) { switch s { case "threaded": return ModeThreaded, true case "subinterp": return ModeSubinterp, true default: return ModeThreaded, false } } // Defaults — tuned for short-lived per-request Python hooks. const ( defaultPoolSize = 4 envPoolSize = "BASE_PYVM_POOL_SIZE" envMode = "BASE_PYVM_MODE" ) var ( gInit sync.Once gInitErr error gGilOff bool ) func initPython() error { gInit.Do(func() { C.pyvm_init() if C.pyvm_gil_disabled() != 0 { gGilOff = true } }) return gInitErr } // NewRuntime returns a pyvm-backed Runtime. CPython is initialized on // first use and shared across every module loaded by this runtime. // Mode defaults to threaded on free-threaded builds, subinterp on // default-GIL builds. Override per-module via extension.json or // process-wide via BASE_PYVM_MODE. func NewRuntime() extruntime.Runtime { r := &runtime{ poolSize: envInt(envPoolSize, defaultPoolSize), } return r } type runtime struct { poolSize int mu sync.Mutex closed bool } func (*runtime) Name() string { return "pyvm" } func (*runtime) Capabilities() extruntime.Capabilities { return extruntime.Capabilities{ AcceptsLanguages: []string{"py"}, HardSandbox: false, Cgo: true, // HONEST: we can't hard-abort a running invocation. ctx pre- // cancel works; ctx cancel mid-Python does not. See README. SupportsAbort: false, } } // GilDisabled reports whether the linked CPython was built with the // free-threading (--disable-gil) flag enabled. Result is stable for // the process lifetime after the first initPython call. func GilDisabled() bool { _ = initPython() return gGilOff } // DefaultMode returns the mode that will be used when neither the // extension.json nor BASE_PYVM_MODE specifies one. Exposed for tests // and diagnostics; production code does not need to call this. func DefaultMode() Mode { if v := os.Getenv(envMode); v != "" { if m, ok := parseMode(v); ok { return m } } _ = initPython() if gGilOff { return ModeThreaded } // On default-GIL builds, threaded mode runs but the GIL // serializes everything — subinterp at least delivers OWN_GIL // parallelism. Pick subinterp as the safer default. return ModeSubinterp } // resolveMode picks the mode for a given manifest, taking into account // (in order): the manifest's own "mode" field, the BASE_PYVM_MODE // process-wide override, and the runtime auto-detection. // // Forwarding override semantics: BASE_PYVM_MODE overrides ANY manifest. // This matches the existing BASE_PYVM_POOL_SIZE pattern — operations // owners have a single env knob to flip the whole process. func resolveMode(manifestMode string) Mode { if v := os.Getenv(envMode); v != "" { if m, ok := parseMode(v); ok { return m } } if manifestMode != "" { if m, ok := parseMode(manifestMode); ok { return m } } return DefaultMode() } func (r *runtime) Load(_ context.Context, dir string) (extruntime.Module, error) { if err := initPython(); err != nil { return nil, fmt.Errorf("pyvm: init: %w", err) } r.mu.Lock() if r.closed { r.mu.Unlock() return nil, extruntime.ErrClosed } r.mu.Unlock() m, err := extruntime.LoadManifest(dir) if err != nil { return nil, err } if m.Runtime != "pyvm" { return nil, fmt.Errorf("%w: pyvm runtime cannot load %q runtime", extruntime.ErrUnsupported, m.Runtime) } if m.Module == "" { return nil, fmt.Errorf("%w: module path is required", extruntime.ErrBadManifest) } src, err := os.ReadFile(joinPath(dir, m.Module)) if err != nil { return nil, fmt.Errorf("read module %s: %w", m.Module, err) } mode := resolveMode(extensionMode(m)) return newModule(r, m, string(src), mode) } // extensionMode pulls the "mode" field out of the manifest. The // extruntime.Manifest struct doesn't define this field today because // it's pyvm-specific — we round-trip via the raw JSON to read it. func extensionMode(m *extruntime.Manifest) string { // The Manifest struct ignores unknown fields, so we re-read the // file. Lookup is cheap (file is already in OS cache) and avoids // adding a pyvm-specific field to the shared Manifest type. return m.Mode() } func (r *runtime) Close() error { r.mu.Lock() defer r.mu.Unlock() if r.closed { return nil } r.closed = true // We do NOT call Py_FinalizeEx here. CPython finalize/re-init is // fragile, especially with sub-interpreters held by other modules. // Process exit reclaims the runtime — this matches v8go's pattern // of leaving the engine alive until the process dies. return nil } func joinPath(dir, mod string) string { if dir == "" { return mod } if len(dir) > 0 && dir[len(dir)-1] == os.PathSeparator { return dir + mod } return dir + string(os.PathSeparator) + mod } func envInt(key string, def int) int { v := os.Getenv(key) if v == "" { return def } n, err := strconv.Atoi(v) if err != nil || n <= 0 { return def } return n } // cString allocates a C string. Caller must C.free. func cString(s string) *C.char { return C.CString(s) } // goString copies a C string and frees the original. func goStringAndFree(c *C.char) string { if c == nil { return "" } s := C.GoString(c) C.free(unsafe.Pointer(c)) return s } // goErrorAndFree returns a Go error built from a C error string and // frees it. Returns nil if c is nil. func goErrorAndFree(c *C.char, prefix string) error { if c == nil { return nil } s := C.GoString(c) C.free(unsafe.Pointer(c)) return errors.New(prefix + ": " + s) } DcXRxeT]kAb @_"\|icZQAk5 Y'wwnf֙C I?go{݇s9w4T[[ t}& PX#ѹ:Bfc #9h crop尥G[X_<{/=066!T)Tw6,U&8>u<BaM-KkQ{Pzl-01_B-5LLN gp.hХ*G$*;"E:jQȣd !?" ZX3xFt\v麰Zr.ʛ\]gJ̈́#n?zVAb- ;q<؝<2MZ9`rtNFظlY f!R Ca"kCbĐ I%zS*Nfh:c5A<85Wi(cG-b>ݜ[>?^^Y&WWgVsh*cSa{i? "*VH)4!JCq#F)Ēv#d8F=Te-s^>Q*eÑIGrpO3&G sG F o:oHzOjF]M^m"( Y!wUaBhhWZRi7aHZ yDlaѮX/~~l4zB4neԧ֋krBB$Kpn=Hܥ2d`8<<.-"ZQcyt%:9[ⷐ* ٤O)KN|#xA+//go:build pyvm // +build pyvm package pyvm import ( "context" "errors" "fmt" "os" "path/filepath" gort "runtime" "strings" "sync" "sync/atomic" "testing" "time" "github.com/hanzoai/base/plugins/extruntime" ) // writeExt builds a minimal extension dir on disk and returns its path. // Pass mode="" to omit the field (runtime picks default per build/env). func writeExt(t *testing.T, name, src, mode string, exports ...string) string { t.Helper() dir := t.TempDir() manifest := `{"name":"` + name + `","version":"0.1.0","runtime":"pyvm","module":"mod.py","exports":` + jsArr(exports) if mode != "" { manifest += `,"mode":"` + mode + `"` } manifest += `}` if err := os.WriteFile(filepath.Join(dir, "extension.json"), []byte(manifest), 0o644); err != nil { t.Fatal(err) } if err := os.WriteFile(filepath.Join(dir, "mod.py"), []byte(src), 0o644); err != nil { t.Fatal(err) } return dir } func jsArr(s []string) string { if len(s) == 0 { return "[]" } var b strings.Builder b.WriteByte('[') for i, v := range s { if i > 0 { b.WriteByte(',') } b.WriteByte('"') b.WriteString(v) b.WriteByte('"') } b.WriteByte(']') return b.String() } func TestRuntime_Capabilities(t *testing.T) { rt := NewRuntime() defer rt.Close() if rt.Name() != "pyvm" { t.Fatalf("Name = %q, want pyvm", rt.Name()) } caps := rt.Capabilities() if !caps.Cgo || caps.HardSandbox || caps.SupportsAbort { t.Fatalf("unexpected caps: %+v", caps) } if len(caps.AcceptsLanguages) != 1 || caps.AcceptsLanguages[0] != "py" { t.Fatalf("languages = %v, want [py]", caps.AcceptsLanguages) } } func TestRuntime_LoadRejectsWrongRuntime(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := t.TempDir() if err := os.WriteFile(filepath.Join(dir, "extension.json"), []byte(`{"name":"x","runtime":"wazero","module":"x.wasm"}`), 0o644); err != nil { t.Fatal(err) } _, err := rt.Load(context.Background(), dir) if !errors.Is(err, extruntime.ErrUnsupported) { t.Fatalf("err = %v, want ErrUnsupported", err) } } // TestMode_DefaultOnFTBuild verifies the auto-detect path picks // ModeThreaded on a free-threaded build and ModeSubinterp on a // default-GIL build, assuming no env var override. func TestMode_DefaultOnBuild(t *testing.T) { t.Setenv(envMode, "") got := DefaultMode() if GilDisabled() { if got != ModeThreaded { t.Fatalf("FT build: DefaultMode = %v, want %v", got, ModeThreaded) } } else { if got != ModeSubinterp { t.Fatalf("default-GIL build: DefaultMode = %v, want %v", got, ModeSubinterp) } } } // TestMode_EnvOverride verifies BASE_PYVM_MODE flips the default // regardless of CPython build mode. Also covers the bogus-value path — // unknown strings fall through to auto-detect. func TestMode_EnvOverride(t *testing.T) { t.Setenv(envMode, "threaded") if got := DefaultMode(); got != ModeThreaded { t.Fatalf("env=threaded: DefaultMode = %v, want %v", got, ModeThreaded) } t.Setenv(envMode, "subinterp") if got := DefaultMode(); got != ModeSubinterp { t.Fatalf("env=subinterp: DefaultMode = %v, want %v", got, ModeSubinterp) } t.Setenv(envMode, "gibberish") // Bogus values fall through to the build-aware default. if got := DefaultMode(); GilDisabled() && got != ModeThreaded { t.Fatalf("env=gibberish on FT: DefaultMode = %v, want %v", got, ModeThreaded) } } // TestMode_ManifestOverride verifies extension.json "mode" picks the // per-module mode in the absence of the process env override. func TestMode_ManifestOverride(t *testing.T) { t.Setenv(envMode, "") cases := []struct { manifest string want Mode }{ {"threaded", ModeThreaded}, {"subinterp", ModeSubinterp}, } for _, tc := range cases { t.Run(tc.manifest, func(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := writeExt(t, "modetest", ` def echo(p): return p `, tc.manifest, "echo") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() pm, ok := mod.(*module) if !ok { t.Fatalf("module type = %T, want *module", mod) } if pm.mode != tc.want { t.Fatalf("mode = %v, want %v", pm.mode, tc.want) } // Sanity: invoke works. out, err := mod.Invoke(context.Background(), "echo", []byte(`{"x":1}`)) if err != nil { t.Fatal(err) } if got := string(out); got != `{"x": 1}` { t.Fatalf("got %s, want %s", got, `{"x": 1}`) } }) } } // runModeTest runs the basic per-mode tests against both threaded and // subinterp so any common-path regression surfaces under both. func runModeTest(t *testing.T, mode Mode, fn func(*testing.T)) { t.Run(mode.String(), func(t *testing.T) { t.Setenv(envMode, mode.String()) fn(t) }) } func TestModule_Invoke(t *testing.T) { runModeTest(t, ModeThreaded, testInvokeBasics) runModeTest(t, ModeSubinterp, testInvokeBasics) } func testInvokeBasics(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := writeExt(t, "echo", ` def echo(p): return {"in": p, "ok": True} def upper(p): return p["s"].upper() def add(p): return p["a"] + p["b"] def nothing(_): return None `, "", "echo", "upper", "add", "nothing") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() cases := []struct { name string fn string in string want string }{ {"echo-object", "echo", `{"x":1}`, `{"in": {"x": 1}, "ok": true}`}, {"upper-string", "upper", `{"s":"hello"}`, `"HELLO"`}, {"sum-numbers", "add", `{"a":2,"b":3}`, `5`}, {"none-result", "nothing", `null`, `null`}, } for _, tc := range cases { t.Run(tc.name, func(t *testing.T) { got, err := mod.Invoke(context.Background(), tc.fn, []byte(tc.in)) if err != nil { t.Fatal(err) } if string(got) != tc.want { t.Fatalf("got %s, want %s", got, tc.want) } }) } } func TestModule_UnknownFunction(t *testing.T) { runModeTest(t, ModeThreaded, testUnknownFunction) runModeTest(t, ModeSubinterp, testUnknownFunction) } func testUnknownFunction(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := writeExt(t, "ext", ` def exists(_): return 1 `, "", "exists") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() if _, err := mod.Invoke(context.Background(), "missing", []byte("null")); !errors.Is(err, extruntime.ErrUnknownFn) { t.Fatalf("err = %v, want ErrUnknownFn", err) } } func TestModule_ClosedRejects(t *testing.T) { runModeTest(t, ModeThreaded, testClosedRejects) runModeTest(t, ModeSubinterp, testClosedRejects) } func testClosedRejects(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := writeExt(t, "c", ` def f(_): return 1 `, "", "f") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } if err := mod.Close(); err != nil { t.Fatal(err) } if _, err := mod.Invoke(context.Background(), "f", []byte("null")); !errors.Is(err, extruntime.ErrClosed) { t.Fatalf("err = %v, want ErrClosed", err) } } // TestModule_ConcurrentSubInterpreters proves the subinterp pool // actually supports parallel work. Mirrors the original test from // v1 — kept here so the regression check on the legacy path remains. func TestModule_ConcurrentSubInterpreters(t *testing.T) { t.Setenv(envMode, "subinterp") t.Setenv(envPoolSize, "4") rt := NewRuntime() defer rt.Close() dir := writeExt(t, "burn", ` def burn(p): n = p["n"] s = 0 for i in range(n): s = (s + i) % 1000003 return s `, "", "burn") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() const goroutines = 4 var wg sync.WaitGroup errs := make(chan error, goroutines) for i := 0; i < goroutines; i++ { wg.Add(1) go func() { defer wg.Done() if _, err := mod.Invoke(context.Background(), "burn", []byte(`{"n":200000}`)); err != nil { errs <- err } }() } wg.Wait() close(errs) for e := range errs { t.Fatal(e) } } // TestModule_PreCancelledCtx proves ctx pre-cancel is honored before // entering Python. Runs against both modes — the ctx pre-check is in // the shared Invoke prelude. func TestModule_PreCancelledCtx(t *testing.T) { runModeTest(t, ModeThreaded, testPreCancelledCtx) runModeTest(t, ModeSubinterp, testPreCancelledCtx) } func testPreCancelledCtx(t *testing.T) { rt := NewRuntime() defer rt.Close() dir := writeExt(t, "echo", ` def echo(p): return p `, "", "echo") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() ctx, cancel := context.WithCancel(context.Background()) cancel() // cancel before invoke _, err = mod.Invoke(ctx, "echo", []byte(`{"x":1}`)) if !errors.Is(err, context.Canceled) { t.Fatalf("err = %v, want context.Canceled", err) } } // TestThreaded_Namespacing proves two modules loaded under the same // logical name don't trample each other's symbols in __main__. Each // gets a unique mangle prefix so the runtime routes correctly even // when fn-name collides. func TestThreaded_Namespacing(t *testing.T) { t.Setenv(envMode, "threaded") rt := NewRuntime() defer rt.Close() // Two modules with the SAME extension name and the SAME exported // function name but DIFFERENT implementations. If mangling is // correct, each Invoke returns its own constant. dirA := writeExt(t, "dup", ` def value(_): return "A" `, "", "value") dirB := writeExt(t, "dup", ` def value(_): return "B" `, "", "value") modA, err := rt.Load(context.Background(), dirA) if err != nil { t.Fatal(err) } defer modA.Close() modB, err := rt.Load(context.Background(), dirB) if err != nil { t.Fatal(err) } defer modB.Close() out, err := modA.Invoke(context.Background(), "value", []byte(`null`)) if err != nil { t.Fatal(err) } if got := string(out); got != `"A"` { t.Fatalf("modA.value = %s, want %q", got, `"A"`) } out, err = modB.Invoke(context.Background(), "value", []byte(`null`)) if err != nil { t.Fatal(err) } if got := string(out); got != `"B"` { t.Fatalf("modB.value = %s, want %q", got, `"B"`) } } // TestThreaded_PrivateHelpers proves a module's private helpers // (top-level functions referenced by exported functions) resolve // against the module's own namespace dict, not against __main__. // // If we copied function refs flat into __main__ without preserving // the closure over module-private globals, calling `outer` here // would NameError on `_helper`. The test relies on the function // object's __globals__ pointing at the module dict. func TestThreaded_PrivateHelpers(t *testing.T) { t.Setenv(envMode, "threaded") rt := NewRuntime() defer rt.Close() dir := writeExt(t, "private", ` def _helper(x): return x * 2 CONSTANT = 7 def outer(p): return {"doubled": _helper(p["n"]), "k": CONSTANT} `, "", "outer") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() out, err := mod.Invoke(context.Background(), "outer", []byte(`{"n":21}`)) if err != nil { t.Fatal(err) } want := `{"doubled": 42, "k": 7}` if got := string(out); got != want { t.Fatalf("outer = %s, want %s", got, want) } // Private symbols must NOT be reachable as exported entrypoints — // the mangled-publication step skips names starting with "_". if _, err := mod.Invoke(context.Background(), "_helper", []byte(`{"x":1}`)); !errors.Is(err, extruntime.ErrUnknownFn) { t.Fatalf("_helper err = %v, want ErrUnknownFn", err) } } // TestThreaded_ParallelExecutesInParallel proves that on a free- // threaded build, N concurrent CPU-bound invocations complete in // roughly serial_cost wall time, NOT N * serial_cost. // // On a default-GIL build the GIL serializes them; the test still // passes but the speedup factor we measure is ~1 instead of ~N. // We only assert a STRICTLY POSITIVE speedup (parallel < N * serial) // so the test stays meaningful on both builds. // // On free-threaded builds we further assert the speedup is >= 1.5x; // the lower bound is intentionally lenient — bench numbers should // be ~N/2 to N/1 on a multicore machine, but contention and GC // pressure pull it down. func TestThreaded_ParallelExecutesInParallel(t *testing.T) { if gort.NumCPU() < 2 { t.Skip("need >=2 CPU cores to observe parallelism") } t.Setenv(envMode, "threaded") rt := NewRuntime() defer rt.Close() // CPU-bound Python loop. Enough work to push past goroutine // scheduling jitter; tuned to ~3-5 ms per call on M1 Max so // the wall-time delta between serial and parallel is robust. const burnN = 80000 dir := writeExt(t, "burnFT", fmt.Sprintf(` def burn(p): n = p.get("n", %d) s = 0 for i in range(n): s = (s + i * 7) %% 1000003 return s `, burnN), "", "burn") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() payload := []byte(fmt.Sprintf(`{"n":%d}`, burnN)) // Warmup. if _, err := mod.Invoke(context.Background(), "burn", payload); err != nil { t.Fatal(err) } // Serial baseline: 8 sequential calls. const N = 8 tSerial0 := time.Now() for i := 0; i < N; i++ { if _, err := mod.Invoke(context.Background(), "burn", payload); err != nil { t.Fatal(err) } } serialWall := time.Since(tSerial0) // Parallel: 8 concurrent calls. tPar0 := time.Now() var wg sync.WaitGroup errs := make(chan error, N) for i := 0; i < N; i++ { wg.Add(1) go func() { defer wg.Done() if _, err := mod.Invoke(context.Background(), "burn", payload); err != nil { errs <- err } }() } wg.Wait() parallelWall := time.Since(tPar0) close(errs) for e := range errs { t.Fatal(e) } speedup := float64(serialWall) / float64(parallelWall) t.Logf("serial=%s parallel=%s speedup=%.2fx (GIL disabled: %v, NumCPU=%d)", serialWall, parallelWall, speedup, GilDisabled(), gort.NumCPU()) // Universal lower bound: any positive speedup. Below ~1.0 means // goroutine overhead made parallel SLOWER — that would be a // regression. if speedup < 1.0 { t.Fatalf("speedup %.2fx <= 1.0 — parallel was slower than serial (serial=%s parallel=%s)", speedup, serialWall, parallelWall) } // Free-threading bound: expect substantial parallelism. 1.5x is // the floor on the machines this is exercised on; in practice we // see 4-8x on M1 Max. If this fails on a CI host with tight CPU // budget, lower the bound or the burnN — don't disable. if GilDisabled() && speedup < 1.5 { t.Fatalf("free-threaded build: speedup %.2fx < 1.5 — expected ~Ncpu parallelism (NumCPU=%d)", speedup, gort.NumCPU()) } } // TestThreaded_HighFanout fires many goroutines against a tiny // invocation to surface any thread-state attach / GIL race that the // PyGILState_Ensure path would expose. We just want no crash, no // error; speedup isn't the point here. func TestThreaded_HighFanout(t *testing.T) { t.Setenv(envMode, "threaded") rt := NewRuntime() defer rt.Close() dir := writeExt(t, "tiny", ` def add(p): return p["a"] + p["b"] `, "", "add") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } defer mod.Close() const goroutines = 64 const callsPerG = 32 var wg sync.WaitGroup var errCount atomic.Int64 for g := 0; g < goroutines; g++ { wg.Add(1) go func() { defer wg.Done() for i := 0; i < callsPerG; i++ { out, err := mod.Invoke(context.Background(), "add", []byte(`{"a":1,"b":2}`)) if err != nil { errCount.Add(1) return } if string(out) != "3" { errCount.Add(1) return } } }() } wg.Wait() if got := errCount.Load(); got != 0 { t.Fatalf("errCount = %d (got errors / wrong results across %d goroutines x %d calls)", got, goroutines, callsPerG) } } // TestThreaded_CloseUnloads proves that after Close(), the module's // mangled symbols are no longer reachable in __main__ even by a // hand-crafted lookup. Important so a closed module's leftover // symbols don't contaminate later loads. func TestThreaded_CloseUnloads(t *testing.T) { t.Setenv(envMode, "threaded") rt := NewRuntime() defer rt.Close() dir := writeExt(t, "cleanup", ` def hello(_): return "world" `, "", "hello") mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatal(err) } pm, ok := mod.(*module) if !ok { t.Fatalf("module type = %T, want *module", mod) } prefix := pm.manglePrefix if prefix == "" { t.Fatalf("manglePrefix is empty") } // Verify it works before close. if _, err := mod.Invoke(context.Background(), "hello", []byte("null")); err != nil { t.Fatal(err) } if err := mod.Close(); err != nil { t.Fatal(err) } // After close, any Invoke should error with ErrClosed. if _, err := mod.Invoke(context.Background(), "hello", []byte("null")); !errors.Is(err, extruntime.ErrClosed) { t.Fatalf("post-close invoke err = %v, want ErrClosed", err) } } bxUoE-mR\eՠN`7Z*(zlO2Y:4Ɓhn*/q…są+[o#4){y~oŗbQfE k^R4a8;,^=^so:lg_go,“ƾ#sjND9:);=ՊѸvjҎEnP(5\<]W*vé3ӄd_Ѡ:6VS SX_|NvnmTgυzmq>vjb˵ǂuh20\I7,>Dđ5ˠvk`Arcq$ӞQd򞯙[H:C 7't~V)bbm.Y rn<Rsl : AQN^ߞW8Gy,?Ξ$6z24Jq%/sƗ[,qtu"-Mu`R!҄ t $S:#mc[TllxiZ ν\YdbX Ź6~dj?-$v/N`d#MqG` }l!/\j,ڑꥡ \+ Kv nQrI^m!D;;`ALBm1DN"ri\>?5kC)n ĀgH;0(h  ~, tѷFjOؗv#;1Ky., $rYKxH%~ܰV;&Ē&QuK8U[*RciT+`\B#'.01zn$W+m:^Whd9)KNG3> D~i`F#cdh6XDox".h9Ն:TQ};AwUED4{8`7r#YFHV7e5ȏaNud`~xpN@tW筤 US^U:aMB)O,l ¼o#X,ñ]4^2m@u@Baon׉8j*%yH ^0v˜ٶ!(W'='bgSW_31}\dQ(HxUoEW4ԫJ*J/J׉pq(MH͇jW9(2;MO h 8B.p!qB!8i|_R+Tvz^^,}F}pd"+Ui /x95<罹$+OxdzHIPfUfCsȾd ă]s]q*G&|QpKW .iQ3)=8F}Op|f_̄ h8Cm2g7癹2EէXÓo=N!Wnr{G ^.w+9a_&6yY;+MeݱYM B[K;s5نkR}U(5ueMPǵl*$T1m, Cg؅CmCؑ|K@-%hkSb ZPduIS؎V ˜C B''`%'#HnV{X8(_u@ mǠh"2 H.Dnl?z*=O,%Feab>ZWlZ;=糟r7O/ύ8&(o^R2P1 [8jPm (H2ס|OS$qqNI^6=* K^@8lk?>ˡ!T'1:BhS8>!;K/.yϵ5pQQ1݇Hd ٯFdOwɊ-p/2(c[ ϐAiA.89E]`p5`6D{8g5mpUȊU?QVXHڠcU`O& onmUkh}cR[mVܐ&ͭډBC,०F"2E1R=:r I3T7,*"=i2'aRIlɈ78!I*E40&#i|u"6*>_ᙤݠ Rg{PsU+,֫hWkI*dYaho8_yʗmP.S$?hc:X@xroc-5ߜ?!v__ohj>3~y1#ݎ4AN3 o/]oϨ>@eǒwL]HS 68*_;{" TWjxQ//go:build !pyvm // +build !pyvm // Package pyvm is the CPython (cgo) extension runtime for Base. // // The real implementation lives behind the `pyvm` build tag because it // links libpython at the C level and requires Python 3.12+ development // headers (pkg-config python-3.13-embed or python-3.12-embed). Default // base builds compile without it — this stub is what gets linked in // normally so `NewRuntime()` is always callable, only the engine is // opt-in via `go build -tags pyvm`. package pyvm import ( "context" "fmt" "github.com/hanzoai/base/plugins/extruntime" ) // NewRuntime returns a CPython-shaped runtime that errors at Load time // when the binary was built without the `pyvm` build tag. Name() and // Capabilities() still report the pyvm identity so callers can detect // the runtime is present-but-unavailable rather than missing entirely. func NewRuntime() extruntime.Runtime { return &stubRuntime{} } type stubRuntime struct{} func (*stubRuntime) Name() string { return "pyvm" } func (*stubRuntime) Capabilities() extruntime.Capabilities { return extruntime.Capabilities{ AcceptsLanguages: []string{"py"}, // HardSandbox=false: cgo CPython shares the host process. A C // extension segfault kills the whole Go binary. Use wazero + // RustPython if you need a sandboxed Python. HardSandbox: false, Cgo: true, // HONEST: pyvm cannot hard-abort a running invocation. See README. SupportsAbort: false, } } func (*stubRuntime) Load(_ context.Context, _ string) (extruntime.Module, error) { return nil, fmt.Errorf("%w: built without -tags pyvm (cgo CPython disabled)", extruntime.ErrUnsupported) } func (*stubRuntime) Close() error { return nil } x`Lx(100644 replicate.gon P0rM/{a(.DxE// Package replicate adds automatic SQLite WAL replication to Base apps. // One import, zero config files, zero sidecars. // // Just set REPLICATE_S3_ENDPOINT and the plugin handles everything. package replicate import ( "os" "path/filepath" "github.com/hanzoai/base/core" rep "github.com/hanzoai/replicate" ) // MustRegister registers auto-replication for all SQLite DBs in Base's data dir. // No-op if REPLICATE_S3_ENDPOINT is not set. func MustRegister(app core.App) { if os.Getenv("REPLICATE_S3_ENDPOINT") == "" { return } // Set path prefix to app name if not already set if os.Getenv("REPLICATE_S3_PATH") == "" { hostname, _ := os.Hostname() os.Setenv("REPLICATE_S3_PATH", app.Settings().Meta.AppName+"/"+hostname) } app.OnServe().BindFunc(func(e *core.ServeEvent) error { // Replicate all .db files in the data directory filepath.Walk(app.DataDir(), func(path string, info os.FileInfo, err error) error { if err != nil || info.IsDir() || filepath.Ext(path) != ".db" { return nil } rep.AutoReplicate(path) return nil }) return e.Next() }) } +]Rx340031Q*.Kg8vQpkN=3wL7()NHM)I-c:}3~ }[_WL=.$X-ZlYK}Yp5/ xmpackage scheduler import ( "time" "github.com/dop251/goja" "github.com/hanzoai/base/core" ) // RegisterJSVM registers the scheduler JS bindings into a goja runtime. // // This adds the following global functions: // // - scheduleAfter(delayMs, functionName, args?) - schedule execution after a delay // - scheduleAt(isoDateString, functionName, args?) - schedule execution at a specific time // - cancelScheduled(scheduledId) - cancel a pending scheduled function // - listScheduled(status?) - list scheduled functions, optionally filtered by status // // Example JS usage: // // onRecordAfterCreateSuccess((e) => { // scheduleAfter(0, "sendNotification", { recordId: e.record.id }) // }, "tasks") // // cronAdd("cleanup", "0 3 * * *", () => { // scheduleAfter(0, "cleanupExpired", {}) // }) // // // Schedule something 30 minutes from now // scheduleAfter(1800000, "generateReport", { type: "daily" }) // // // Schedule at a specific time // scheduleAt("2026-03-01T09:00:00Z", "sendReminder", { userId: "abc123" }) // // // Cancel a scheduled function // cancelScheduled("scheduled_record_id") // // // List all pending scheduled functions // const pending = listScheduled("pending") func RegisterJSVM(app core.App, vm *goja.Runtime) { vm.Set("scheduleAfter", func(call goja.FunctionCall) goja.Value { delayMs := int64(0) if arg := call.Argument(0).Export(); arg != nil { switch v := arg.(type) { case int64: delayMs = v case float64: delayMs = int64(v) } } functionName := "" if arg := call.Argument(1).Export(); arg != nil { if s, ok := arg.(string); ok { functionName = s } } if functionName == "" { panic(vm.NewGoError(errMissingFunctionName)) } var args any if arg := call.Argument(2); arg != nil && !goja.IsUndefined(arg) && !goja.IsNull(arg) { args = arg.Export() } id, err := ScheduleAfter(app, delayMs, functionName, args) if err != nil { panic(vm.NewGoError(err)) } return vm.ToValue(id) }) vm.Set("scheduleAt", func(call goja.FunctionCall) goja.Value { isoDate := "" if arg := call.Argument(0).Export(); arg != nil { if s, ok := arg.(string); ok { isoDate = s } } if isoDate == "" { panic(vm.NewGoError(errMissingTimestamp)) } t, err := time.Parse(time.RFC3339, isoDate) if err != nil { // fallback: try parsing as datetime string (YYYY-MM-DD HH:MM:SS) t, err = time.Parse("2006-01-02 15:04:05", isoDate) if err != nil { panic(vm.NewGoError(err)) } } functionName := "" if arg := call.Argument(1).Export(); arg != nil { if s, ok := arg.(string); ok { functionName = s } } if functionName == "" { panic(vm.NewGoError(errMissingFunctionName)) } var args any if arg := call.Argument(2); arg != nil && !goja.IsUndefined(arg) && !goja.IsNull(arg) { args = arg.Export() } id, err := ScheduleAt(app, t, functionName, args) if err != nil { panic(vm.NewGoError(err)) } return vm.ToValue(id) }) vm.Set("cancelScheduled", func(call goja.FunctionCall) goja.Value { id := "" if arg := call.Argument(0).Export(); arg != nil { if s, ok := arg.(string); ok { id = s } } if id == "" { panic(vm.NewGoError(errMissingScheduledId)) } if err := CancelScheduled(app, id); err != nil { panic(vm.NewGoError(err)) } return goja.Undefined() }) vm.Set("listScheduled", func(call goja.FunctionCall) goja.Value { status := "" if arg := call.Argument(0); arg != nil && !goja.IsUndefined(arg) && !goja.IsNull(arg) { if s, ok := arg.Export().(string); ok { status = s } } records, err := ListScheduled(app, status) if err != nil { panic(vm.NewGoError(err)) } return vm.ToValue(records) }) } // sentinel errors for JS binding argument validation var ( errMissingFunctionName = &schedulerError{"scheduleAfter/scheduleAt requires a non-empty functionName"} errMissingTimestamp = &schedulerError{"scheduleAt requires a non-empty ISO date string"} errMissingScheduledId = &schedulerError{"cancelScheduled requires a non-empty scheduled record id"} ) type schedulerError struct { message string } func (e *schedulerError) Error() string { return e.message } (-x6// Package scheduler implements a scheduled function execution plugin for Base. // // It provides deferred and time-based function execution with exactly-once // semantics, retry support, and post-commit scheduling (functions scheduled // inside hooks run only after the hook's DB transaction commits). // // The scheduler uses an internal Base collection "_scheduled_functions" with fields: // - functionName (text, required) // - args (json) // - scheduledAt (date, required) // - status (select: pending, running, completed, failed, cancelled) // - result (json) // - error (text) // - retryCount (number) // - createdAt (autodate) // - completedAt (date) // // Example: // // scheduler.MustRegister(app, scheduler.Config{ // PollInterval: 1 * time.Second, // MaxConcurrent: 10, // RetryCount: 3, // RetryDelay: 5 * time.Second, // }) package scheduler import ( "encoding/json" "fmt" "log/slog" "sync" "time" "github.com/pocketbase/dbx" "github.com/hanzoai/base/core" "github.com/hanzoai/base/tools/types" ) const ( // CollectionName is the internal collection used to persist scheduled functions. CollectionName = "_scheduled_functions" StatusPending = "pending" StatusRunning = "running" StatusCompleted = "completed" StatusFailed = "failed" StatusCancelled = "cancelled" ) // ExecuteFunc is the callback signature for executing a scheduled function. // It receives the function name and JSON-decoded args, and returns a result or error. type ExecuteFunc func(functionName string, args any) (any, error) // Config defines the configuration for the scheduler plugin. type Config struct { // OnExecute is called to execute a scheduled function. // If nil, scheduled functions will fail with "no executor configured". OnExecute ExecuteFunc // PollInterval controls how frequently the scheduler checks for due functions. // Defaults to 1 second. PollInterval time.Duration // RetryDelay is the base delay between retries of a failed function. // Defaults to 5 seconds. RetryDelay time.Duration // MaxConcurrent limits the number of concurrently executing scheduled functions. // Defaults to 10. MaxConcurrent int // RetryCount is the maximum number of retry attempts for a failed function. // Defaults to 3. RetryCount int } // MustRegister registers the scheduler plugin in the provided app instance // and panics if it fails. // // Example: // // scheduler.MustRegister(app, scheduler.Config{ // PollInterval: 1 * time.Second, // MaxConcurrent: 10, // RetryCount: 3, // RetryDelay: 5 * time.Second, // }) func MustRegister(app core.App, config Config) { if err := Register(app, config); err != nil { panic(err) } } // Register registers the scheduler plugin in the provided app instance. func Register(app core.App, config Config) error { p := &plugin{app: app, config: config} if p.config.PollInterval <= 0 { p.config.PollInterval = 1 * time.Second } if p.config.MaxConcurrent <= 0 { p.config.MaxConcurrent = 10 } if p.config.RetryCount < 0 { p.config.RetryCount = 3 } if p.config.RetryDelay <= 0 { p.config.RetryDelay = 5 * time.Second } p.sem = make(chan struct{}, p.config.MaxConcurrent) p.app.OnBootstrap().BindFunc(func(e *core.BootstrapEvent) error { if err := e.Next(); err != nil { return err } if err := p.ensureCollection(); err != nil { return fmt.Errorf("scheduler: failed to ensure collection: %w", err) } return nil }) p.app.OnServe().BindFunc(func(e *core.ServeEvent) error { if err := e.Next(); err != nil { return err } p.startPoller() return nil }) p.app.OnTerminate().BindFunc(func(e *core.TerminateEvent) error { p.stopPoller() return e.Next() }) return nil } type plugin struct { app core.App config Config sem chan struct{} mu sync.Mutex stopCh chan struct{} pollDone chan struct{} } // ensureCollection creates the _scheduled_functions collection if it doesn't exist. func (p *plugin) ensureCollection() error { _, err := p.app.FindCollectionByNameOrId(CollectionName) if err == nil { return nil // already exists } collection := core.NewBaseCollection(CollectionName) collection.System = true collection.Fields.Add( &core.TextField{ Name: "functionName", Required: true, }, &core.JSONField{ Name: "args", MaxSize: 1048576, // 1MB }, &core.DateField{ Name: "scheduledAt", Required: true, }, &core.SelectField{ Name: "status", Values: []string{StatusPending, StatusRunning, StatusCompleted, StatusFailed, StatusCancelled}, Required: true, MaxSelect: 1, }, &core.JSONField{ Name: "result", MaxSize: 1048576, }, &core.TextField{ Name: "error", }, &core.NumberField{ Name: "retryCount", }, &core.AutodateField{ Name: "createdAt", OnCreate: true, }, &core.DateField{ Name: "completedAt", }, ) return p.app.Save(collection) } // startPoller begins the background polling goroutine. func (p *plugin) startPoller() { p.mu.Lock() defer p.mu.Unlock() if p.stopCh != nil { return // already running } p.stopCh = make(chan struct{}) p.pollDone = make(chan struct{}) go p.pollLoop() } // stopPoller signals the polling goroutine to stop and waits for it. func (p *plugin) stopPoller() { p.mu.Lock() stopCh := p.stopCh pollDone := p.pollDone p.stopCh = nil p.pollDone = nil p.mu.Unlock() if stopCh != nil { close(stopCh) <-pollDone } } // pollLoop runs the polling loop in a separate goroutine. func (p *plugin) pollLoop() { defer close(p.pollDone) ticker := time.NewTicker(p.config.PollInterval) defer ticker.Stop() for { select { case <-p.stopCh: return case <-ticker.C: p.processDueFunctions() } } } // processDueFunctions finds and executes all functions that are due. func (p *plugin) processDueFunctions() { now := types.NowDateTime() records, err := p.findDueFunctions(now) if err != nil { p.app.Logger().Error( "scheduler: failed to find due functions", slog.String("error", err.Error()), ) return } for _, record := range records { // claim the record via optimistic locking (status pending -> running) if !p.claimFunction(record) { continue } // acquire semaphore slot p.sem <- struct{}{} go func(r *core.Record) { defer func() { <-p.sem }() p.executeFunction(r) }(record) } } // findDueFunctions queries for pending functions whose scheduledAt <= now. func (p *plugin) findDueFunctions(now types.DateTime) ([]*core.Record, error) { records := []*core.Record{} err := p.app.RecordQuery(CollectionName). AndWhere(dbx.HashExp{"status": StatusPending}). AndWhere(dbx.NewExp("[[scheduledAt]] <= {:now}", dbx.Params{"now": now.String()})). OrderBy("scheduledAt ASC"). Limit(int64(p.config.MaxConcurrent)). All(&records) if err != nil { return nil, err } return records, nil } // claimFunction atomically transitions a function from pending to running. // Returns true if the claim succeeded (exactly-once semantics). func (p *plugin) claimFunction(record *core.Record) bool { // Use a direct SQL update with WHERE status='pending' for atomicity. result, err := p.app.NonconcurrentDB().NewQuery( "UPDATE {{" + CollectionName + "}} SET [[status]] = {:running} WHERE [[id]] = {:id} AND [[status]] = {:pending}", ).Bind(dbx.Params{ "running": StatusRunning, "id": record.Id, "pending": StatusPending, }).Execute() if err != nil { p.app.Logger().Error( "scheduler: failed to claim function", slog.String("id", record.Id), slog.String("error", err.Error()), ) return false } rows, err := result.RowsAffected() if err != nil { return false } return rows == 1 } // executeFunction runs the scheduled function and updates its record status. func (p *plugin) executeFunction(record *core.Record) { functionName := record.GetString("functionName") var args any rawArgs := record.Get("args") if rawArgs != nil { // try to decode raw JSON args switch v := rawArgs.(type) { case types.JSONRaw: if len(v) > 0 { _ = json.Unmarshal(v, &args) } case string: if v != "" { _ = json.Unmarshal([]byte(v), &args) } default: args = v } } executor := p.config.OnExecute if executor == nil { p.markFailed(record, "no executor configured") return } result, err := executor(functionName, args) if err != nil { retryCount := int(record.GetFloat("retryCount")) if retryCount < p.config.RetryCount { p.scheduleRetry(record, retryCount+1, err) return } p.markFailed(record, err.Error()) return } p.markCompleted(record, result) } // markCompleted updates the record to completed status with the result. func (p *plugin) markCompleted(record *core.Record, result any) { now := types.NowDateTime() var resultJSON types.JSONRaw if result != nil { raw, err := json.Marshal(result) if err == nil { resultJSON = raw } } _, err := p.app.NonconcurrentDB().NewQuery( "UPDATE {{" + CollectionName + "}} SET [[status]] = {:status}, [[result]] = {:result}, [[completedAt]] = {:completedAt} WHERE [[id]] = {:id}", ).Bind(dbx.Params{ "status": StatusCompleted, "result": string(resultJSON), "completedAt": now.String(), "id": record.Id, }).Execute() if err != nil { p.app.Logger().Error( "scheduler: failed to mark function completed", slog.String("id", record.Id), slog.String("error", err.Error()), ) } } // markFailed updates the record to failed status with the error message. func (p *plugin) markFailed(record *core.Record, errMsg string) { now := types.NowDateTime() _, err := p.app.NonconcurrentDB().NewQuery( "UPDATE {{" + CollectionName + "}} SET [[status]] = {:status}, [[error]] = {:error}, [[completedAt]] = {:completedAt} WHERE [[id]] = {:id}", ).Bind(dbx.Params{ "status": StatusFailed, "error": errMsg, "completedAt": now.String(), "id": record.Id, }).Execute() if err != nil { p.app.Logger().Error( "scheduler: failed to mark function failed", slog.String("id", record.Id), slog.String("error", err.Error()), ) } } // scheduleRetry reschedules a failed function for retry with exponential backoff. func (p *plugin) scheduleRetry(record *core.Record, retryCount int, origErr error) { delay := p.config.RetryDelay * time.Duration(retryCount) nextRun, _ := types.ParseDateTime(time.Now().UTC().Add(delay)) _, err := p.app.NonconcurrentDB().NewQuery( "UPDATE {{"+CollectionName+"}} SET [[status]] = {:status}, [[scheduledAt]] = {:scheduledAt}, [[retryCount]] = {:retryCount}, [[error]] = {:error} WHERE [[id]] = {:id}", ).Bind(dbx.Params{ "status": StatusPending, "scheduledAt": nextRun.String(), "retryCount": retryCount, "error": origErr.Error(), "id": record.Id, }).Execute() if err != nil { p.app.Logger().Error( "scheduler: failed to schedule retry", slog.String("id", record.Id), slog.String("error", err.Error()), ) } } // ScheduleAfter creates a new scheduled function to execute after delayMs milliseconds. // // If the calling context is inside a transaction, the record is inserted but the // function won't be picked up until after the transaction commits (the record // becomes visible to the poller only after commit). // // Returns the scheduled function record ID. func ScheduleAfter(app core.App, delayMs int64, functionName string, args any) (string, error) { scheduledAt, _ := types.ParseDateTime(time.Now().UTC().Add(time.Duration(delayMs) * time.Millisecond)) return createScheduledRecord(app, functionName, args, scheduledAt) } // ScheduleAt creates a new scheduled function to execute at the specified time. // // Returns the scheduled function record ID. func ScheduleAt(app core.App, at time.Time, functionName string, args any) (string, error) { scheduledAt, _ := types.ParseDateTime(at.UTC()) return createScheduledRecord(app, functionName, args, scheduledAt) } // CancelScheduled cancels a pending scheduled function by ID. // Returns an error if the function is not found or is not in pending status. func CancelScheduled(app core.App, id string) error { _, err := app.NonconcurrentDB().NewQuery( "UPDATE {{" + CollectionName + "}} SET [[status]] = {:status} WHERE [[id]] = {:id} AND [[status]] = {:pending}", ).Bind(dbx.Params{ "status": StatusCancelled, "id": id, "pending": StatusPending, }).Execute() return err } // ListScheduled returns all scheduled function records matching the optional status filter. // If status is empty, all records are returned. func ListScheduled(app core.App, status string) ([]*core.Record, error) { query := app.RecordQuery(CollectionName).OrderBy("scheduledAt ASC") if status != "" { query = query.AndWhere(dbx.HashExp{"status": status}) } records := []*core.Record{} if err := query.All(&records); err != nil { return nil, err } return records, nil } // createScheduledRecord inserts a new scheduled function record. func createScheduledRecord(app core.App, functionName string, args any, scheduledAt types.DateTime) (string, error) { collection, err := app.FindCollectionByNameOrId(CollectionName) if err != nil { return "", fmt.Errorf("scheduler: collection %q not found: %w", CollectionName, err) } record := core.NewRecord(collection) record.Set("functionName", functionName) record.Set("scheduledAt", scheduledAt) record.Set("status", StatusPending) record.Set("retryCount", 0) if args != nil { argsJSON, err := json.Marshal(args) if err != nil { return "", fmt.Errorf("scheduler: failed to marshal args: %w", err) } record.Set("args", types.JSONRaw(argsJSON)) } if err := app.Save(record); err != nil { return "", fmt.Errorf("scheduler: failed to save scheduled function: %w", err) } return record.Id, nil } ; xOkAƑMV\4GS^7K҄msnb` /%, parses it, and pre-warms a pool. func newModule(dir string, m *extruntime.Manifest, poolSize int) (*module, error) { src := m.Module if src == "" { src = "validate.star" } path := filepath.Join(dir, src) data, err := os.ReadFile(path) if err != nil { return nil, fmt.Errorf("starkvm: read %s: %w", path, err) } // SourceProgram parses + resolves once; the resulting *Program is // safe to execute on many threads (Init() returns a fresh globals // dict each call). This is the heavy compile step we want to do // at Load, not per Invoke. _, prog, err := starlark.SourceProgramOptions(fileOptions, path, data, func(name string) bool { _, ok := emptyPredeclared[name] return ok }) if err != nil { return nil, fmt.Errorf("starkvm: compile %s: %w", path, err) } mod := &module{ name: m.Name, exports: m.Exports, program: prog, pool: make(chan *threadEntry, poolSize), } // Pre-fill the pool with bare entries — globals lazily initialized // on first use of each entry. for i := 0; i < poolSize; i++ { mod.pool <- &threadEntry{thread: newThread(m.Name, i)} } return mod, nil } func newThread(name string, id int) *starlark.Thread { t := &starlark.Thread{ Name: fmt.Sprintf("starkvm:%s#%d", name, id), // Discard print() output — guests that want logging must use // a host-provided binding, not stdout. Same posture as goja. Print: func(_ *starlark.Thread, _ string) {}, } return t } func (m *module) Name() string { return m.name } func (m *module) Runtime() string { return "starlark" } func (m *module) Exports() []string { return m.exports } func (m *module) Invoke(ctx context.Context, fn string, payload []byte) ([]byte, error) { m.mu.Lock() closed := m.closed m.mu.Unlock() if closed { return nil, extruntime.ErrClosed } if err := ctx.Err(); err != nil { return nil, err } // Checkout — respect ctx so a cancelled caller doesn't wait on // a saturated pool indefinitely. var ent *threadEntry select { case ent = <-m.pool: case <-ctx.Done(): return nil, ctx.Err() } // Return the entry to the pool unless we're closing. defer func() { m.mu.Lock() closed := m.closed m.mu.Unlock() if closed { return } m.pool <- ent }() // Wire ctx cancellation to thread.Cancel. Starlark checks the // cancel flag between opcodes; cancellation arrives within a // few microseconds for any real script. Reset the flag after // the call so a future Invoke on this thread (with a fresh ctx) // isn't poisoned by the previous cancel. ent.thread.Uncancel() done := make(chan struct{}) defer close(done) go func() { select { case <-ctx.Done(): ent.thread.Cancel("ctx cancelled") case <-done: } }() // Lazily run the program on this thread to populate globals. // Done at most once per pool entry's lifetime — the program is // idempotent (it just defines functions); re-running would // recompute closures for no gain. if ent.globals == nil { globals, err := m.program.Init(ent.thread, emptyPredeclared) if err != nil { if ctxErr := ctx.Err(); ctxErr != nil { return nil, ctxErr } return nil, fmt.Errorf("starkvm: init %s: %w", m.name, err) } globals.Freeze() ent.globals = globals } callable, ok := ent.globals[fn] if !ok { return nil, fmt.Errorf("%w: %s:%s", extruntime.ErrUnknownFn, m.name, fn) } if _, isCallable := callable.(starlark.Callable); !isCallable { return nil, fmt.Errorf("%w: %s:%s is not callable", extruntime.ErrUnknownFn, m.name, fn) } // Decode payload JSON to a Go value, convert to starlark.Value. var arg any if len(payload) > 0 { if err := json.Unmarshal(payload, &arg); err != nil { return nil, fmt.Errorf("starkvm: payload not JSON: %w", err) } } skArg, err := goToStarlark(arg) if err != nil { return nil, fmt.Errorf("starkvm: convert payload: %w", err) } res, err := starlark.Call(ent.thread, callable, starlark.Tuple{skArg}, nil) if err != nil { if ctxErr := ctx.Err(); ctxErr != nil { return nil, ctxErr } var evalErr *starlark.EvalError if errors.As(err, &evalErr) { return nil, fmt.Errorf("starkvm: invoke %s:%s: %s", m.name, fn, evalErr.Backtrace()) } return nil, fmt.Errorf("starkvm: invoke %s:%s: %w", m.name, fn, err) } // Marshal the result back. Convert starlark.Value -> Go -> JSON. goRes, err := starlarkToGo(res) if err != nil { return nil, fmt.Errorf("starkvm: convert result: %w", err) } return json.Marshal(goRes) } func (m *module) Close() error { m.mu.Lock() if m.closed { m.mu.Unlock() return nil } m.closed = true m.mu.Unlock() // Drain best-effort. Threads are plain Go structs — no Close // needed; dropping references lets the GC reclaim. drain: for { select { case <-m.pool: default: break drain } } return nil } // goToStarlark converts a JSON-decoded Go value to a starlark.Value. // Mirrors what json.Unmarshal produces: map[string]any, []any, // float64, bool, string, nil. func goToStarlark(v any) (starlark.Value, error) { switch x := v.(type) { case nil: return starlark.None, nil case bool: return starlark.Bool(x), nil case float64: // JSON numbers always come in as float64 from encoding/json. // Preserve int-ness when the value is integral and in range // so Starlark scripts can use `age + 1` without a type error. if x == math.Trunc(x) && !math.IsInf(x, 0) && x >= math.MinInt64 && x <= math.MaxInt64 { return starlark.MakeInt64(int64(x)), nil } return starlark.Float(x), nil case string: return starlark.String(x), nil case []any: elems := make([]starlark.Value, 0, len(x)) for _, e := range x { ev, err := goToStarlark(e) if err != nil { return nil, err } elems = append(elems, ev) } return starlark.NewList(elems), nil case map[string]any: d := starlark.NewDict(len(x)) for k, val := range x { vv, err := goToStarlark(val) if err != nil { return nil, err } if err := d.SetKey(starlark.String(k), vv); err != nil { return nil, err } } return d, nil default: return nil, fmt.Errorf("unsupported Go type %T", v) } } // starlarkToGo is the inverse — convert a starlark.Value tree to a // Go any tree suitable for json.Marshal. Tuples and frozensets get // flattened to slices. func starlarkToGo(v starlark.Value) (any, error) { switch x := v.(type) { case starlark.NoneType: return nil, nil case starlark.Bool: return bool(x), nil case starlark.Int: // int64 first, fall back to big.Int through string for // very large numbers. JSON doesn't have arbitrary-precision // integers, so we accept the standard-library convention of // passing them as strings. if i64, ok := x.Int64(); ok { return i64, nil } return x.String(), nil case starlark.Float: return float64(x), nil case starlark.String: return string(x), nil case *starlark.List: out := make([]any, 0, x.Len()) it := x.Iterate() defer it.Done() var e starlark.Value for it.Next(&e) { ev, err := starlarkToGo(e) if err != nil { return nil, err } out = append(out, ev) } return out, nil case starlark.Tuple: out := make([]any, 0, len(x)) for _, e := range x { ev, err := starlarkToGo(e) if err != nil { return nil, err } out = append(out, ev) } return out, nil case *starlark.Dict: out := make(map[string]any, x.Len()) for _, item := range x.Items() { k, ok := item[0].(starlark.String) if !ok { return nil, fmt.Errorf("dict key must be string, got %s", item[0].Type()) } vv, err := starlarkToGo(item[1]) if err != nil { return nil, err } out[string(k)] = vv } return out, nil case *starlark.Set: out := make([]any, 0, x.Len()) it := x.Iterate() defer it.Done() var e starlark.Value for it.Next(&e) { ev, err := starlarkToGo(e) if err != nil { return nil, err } out = append(out, ev) } return out, nil default: return nil, fmt.Errorf("unsupported starlark type %s", v.Type()) } } ,x~// Package starkvm wraps Google's go.starlark.net Starlark interpreter // as an extruntime.Runtime. Starlark is Python-syntax-with-strict- // semantics — pure functions, no while loops, no recursion (configurable), // designed by Google for embedding configuration/policy code into Go. // Used by Bazel, Buck2, Tilt, Pulumi, Drone CI. // // Use this when: // - You want users to write Python-feel extension hooks but you don't // need the full Python ecosystem (numpy, requests, etc). // - You want hermetic-by-construction semantics (no IO, no time, no // network unless you wire it in via the host). // - You want pure-Go (no cgo, no libpython) parallelism without a GIL. // // Per the architecture brief: AcceptsLanguages=["starlark"], HardSandbox // is false (Starlark values live on the Go heap; a malicious script // could exhaust memory with deep nesting / large list comprehensions), // Cgo=false, SupportsAbort=true (starlark.Thread.Cancel is honored on // the next opcode, comparable to goja.Interrupt — cooperative but // reliably prompt for any real-world script). package starkvm import ( "context" "fmt" "os" "strconv" "sync" "github.com/hanzoai/base/plugins/extruntime" "go.starlark.net/syntax" ) // defaultPoolSize is the number of pre-warmed *starlark.Thread instances // each module owns. Thread is the per-invocation execution context; // reuse mostly saves Go heap allocations, not anything heavy. Override // via BASE_STARKVM_POOL_SIZE. const defaultPoolSize = 8 const poolEnv = "BASE_STARKVM_POOL_SIZE" // fileOptions enables the relaxed-but-still-pure Starlark dialect: // while loops, top-level rebinding, set literals, recursion. We need // these because the validate fixture's domain check is naturally // expressed with `while` and an early-return helper. Strict Bazel // Starlark would force list comprehensions and recursion off; we // pick the permissive variant deliberately and document it on the // fixture. var fileOptions = &syntax.FileOptions{ Set: true, While: true, TopLevelControl: true, GlobalReassign: true, Recursion: true, } // NewRuntime constructs a starlark-backed extruntime.Runtime. The pool // size is shared across modules — each module owns its own thread pool // because threads carry a global frame reference. func NewRuntime() extruntime.Runtime { size := defaultPoolSize if v := os.Getenv(poolEnv); v != "" { if n, err := strconv.Atoi(v); err == nil && n > 0 { size = n } } return &starkRuntime{poolSize: size} } type starkRuntime struct { poolSize int mu sync.Mutex closed bool } func (*starkRuntime) Name() string { return "starlark" } func (*starkRuntime) Capabilities() extruntime.Capabilities { return extruntime.Capabilities{ AcceptsLanguages: []string{"starlark"}, // Starlark values live on the Go heap; a malicious script can // still exhaust memory, but cannot escape the interpreter to // the host process beyond what we expose as builtins. Not a // hard sandbox in the wazero sense, but stronger than goja — // no eval, no fetch, no fs. HardSandbox: false, Cgo: false, // starlark.Thread.Cancel sets a flag the evaluator checks // between opcodes — same cooperative model as goja.Interrupt. // Practically every real-world script hits an opcode boundary // within microseconds; we report true. SupportsAbort: true, } } func (r *starkRuntime) Load(ctx context.Context, dir string) (extruntime.Module, error) { r.mu.Lock() closed := r.closed r.mu.Unlock() if closed { return nil, extruntime.ErrClosed } m, err := extruntime.LoadManifest(dir) if err != nil { return nil, err } if m.Runtime != "starlark" { return nil, fmt.Errorf("%w: starlark runtime cannot load %q runtime", extruntime.ErrUnsupported, m.Runtime) } return newModule(dir, m, r.poolSize) } func (r *starkRuntime) Close() error { r.mu.Lock() r.closed = true r.mu.Unlock() return nil } Jx340031QHL.,,L-Kg0"%ҁmo+K#+ ! SJrRAʎoU FPU9y Eg 滛,2\i."A_saFЅ`jKRK@ 9Y+lK[(93+kT’T7ŭ>L;%&0⿌'wwj.]phVp"?ͫ~z~sөPԳ,A=$Ei9`6DEJEu,|Nm#x;_a ZށǻOVxTk0~`,~/䡴a ּQȒY;NvclOw}wr'˝l; 0KQZ1[:lTm槕yEk _ YW(y,)ztkRRÔCV 23-jl$7Ԫ̈zCLa|@TSN211cRqGeD)/6N#=qz{X5--zO^ ޔ2<¨b~3ـ,s cX_M6(k"a9QD>v,+Qp'#^ɳyʅ_6SPkI1EQ<v?v횛ֶiK ×heLmgb(˂3$*1W;Y/qr{ףim))Q˵\,(T I$?w}@VviMiOb\{q3:<^2gu =eIg.l~ޞkELNҺg p\0!vϖyԉCޝ;k˗,o̻WKEA*ј=g/bx[r->ņS;CA4ʨ3$;ز#ь=F `3}>a粻T(OD^Ξ=\d|-'JXiMbEnխtJ -DY1z=1bs%_ w.Q;(2*;ɎIwLn*dYfް72ki*sQ*cK[#Lj('[#S%+Y '[] Vsč6Rg.ϕ*2QF݃ *zY{PLg:Sx'~xh''OOê:(TOU%FrLJQ3"-JZRP*pMdίT.TɈ5+d.K4a(Ӭ3ոj$h"I9:7VYQ%_*INPdv=H;T83U>ѹzv1SR؊- ~Ĭ Ѓ*5sġJeY(1B[]BLD ޖs &>d| 9=:y?I@`W "-sWIcdnݯ_ tt*osL T7t2OdVY(եJ*14|/2'ru~&@SndnGqWDD&\4}I =KcQRj}Fp}n'U~Jx `xD8+UNS~tYYgiKl0]sشڲ/^cCm;PUtbp1bX GF%8A҄!/ .Z]{QZG~7N&thzhTi Ѻ ߚ?lћ]/מ:NAwOaUT`D8ݽ8 {d JȄe8tT0MڅJQ0-H\2[wG?[ nT D(f4ޞ7_uOey#pT~|B7`C?[~,58'n>`]{TJPD-H&wau:W |\Ap팱L xc[ C)$fM. x@ѸazkZ0@O"aL5~p2HL;av?`Kxo !ݘ͢wb.s2px"+Ŕ=A[.|RIl+ECRhUk]B4 .gx渨w2)ׇLVW EB{{0)V#:= 8d*gX^[wt-ө3@ $ &񘸕 ?44RjT^,4xچ"շʸ$!sHGHB6ds*4+P[#:].1 Hsm@-v:Dװbl$ 3(!2 V`Hp lg~F+} ^Qoǣ `7C< Mi:dǑ4:BAԷ 1:~x0te)š0w/ nH E UF#XFæpq[$3{#G.単TCn Vu1D9w%K67fr2eg*EkHD87U3Gh{k)l 0jxޝUPSiYiɚ)#@t,.M*2M͙ [hPkuzfqAI+:fz6q1cwB}O B!@NU}B ňukP b Oh,gȫgv!0HcC2AbD ӆREc;5( =$&eP;l^"c:ng ܟA$3iI{!5DL`iZE/ə) Zq S5@zgn_ucDżV#aFO1Gsc 2gE'8`E: ѩ>N){eB:X0 EL; u画Z|uo[WOpɦT`C:0Vg׍"~ld_)̶\)ޕ>u3UC6EӠF^ +EOܘQq Mn(BiKs R|\[k.Oꚉ|m ׋/w#oA'z[:oF 5{&LjR|.@rN:>$CGiKSc<#cjE襼=U_^iux+q/~=WX@CsKk-1(PF˟GUd[hKC@k05+PicΤFGۺ`Sdr*7 lEqI6lN0pp9ٚ,{Z9Ki(WLe\[¹6[ԔGS-#޽'A@ gF`xs;>O85b <}d @n@_ Ukkƪ-_?FQYsE+_;4qWeIxA)ʸeOeIzoq>@,b#Ѫ^(|]>F?d|Rk'D߯30EFĥX3?ޖk99MBx}Mۍ2mʸSݙvDF߈3 LQ{WNrsiڗm4F`Π'yM%{܀Xxwa=c5oz[wPOr5 !ܼ&tGIBUZ \uri2ȜyIō#1~¨𻎴, 8sZ&:6ZB3wž/Ës7Jb+?`7U]"6\%~o]nCd)-:^B_8>y.^xtrvD)}IP9J+_+y)#o l$>/0d*6ݝ*yGR}Kww3uk6 J'Puɟ*-Zic8][FCغo?߫G7]2Oyj06|$LCҙFGz6Dt$?88w* - ]3 E$]ԆqU~!!qB]{W f)Ӧ20}':Yswpc>T$,/t5KHtlުGW4ɖоQtֳ'lG 95JVpPA;s3暻9 q& )?N1uX_Mh!b}0y]}ar[֎/ :3NU̔0}Gvsa:Qe$- 0f GZ\%fz$.U,A"6dEq<\]q+/ d"Ju -73 wB?y(wij6Z&n<[@Zd?9^g^݁'%&m)bh@.z]i`!pPu3vִ#x7O#eA>7![\,VT( b5Sl)"zAAS@w7,sY=W}g#sk$Ԭ(5<E߉nP(2CnelWx#eUb*|+xnYd ћ-,Mlm cL䁩!Ëm`/\fHH)Nmg:\7rD%˛r<֫<+*G83TMbEY镚RWUgki~Ϥ޻ڋpmoOWZ ]Z kU(z!lYG }1!#㺐Wh$ LSC 'וzU2MU"ք=(kԩ*D B8Č{UՅY]u%V2eǪ,"+* ӺPѸZcaRܓ ZV6ߤYO n*…B7 d\[]iU"0.%> BN }z|B/EڨRis XXvHZǕLpf,;6w6PBN-U z xu 0/n$ޝ.+nf32%\V;j[|V#r:CZ^d: @+ib?aOxDȦlJ7'|{E{¦ n coaŨ0:&:P nC0*?ed;H* ]Ap40LD'HpS{q:o.p7^1$XoFӓ`<Lj}VǝRL91gs[mJO=6 J߯Acn DjdQlQÅ*Vڀ=詃d(cN-VoS\ TYj!LW*؝_Er(rC+xȁBޡ.cDž& ~k[O11 X VytN/َ4)=)4Za%,ԈL?x5%VZ~B@ngqx jL^F~tC;!gFmfY3ꅊ11$;* i*hr!E$M ']h"W=1gMh` vtQ{æ0daa:}lo ɣ &i4l+J6"i0DG8.? rmeigVW*fz0h9HkÞM H}*uYFfw°HXds$0 1o&kxhB&]bx|yJR{R 2nàN6Bz=P,D,5uv쒕ʕ6[Ye8Kmi-~9m }A yF>+N`G)y1CY}P 3=T ^ ǶcTgdONt;(LaXđ̉ʮ=RU;`B H]nɐc{H2 66Ӗ=x5x\<ʴVӄpI^p*:G|j/aEqo}W"M, Z7I!;B9z!eYQEgp727|yr*s~yfkrwXŋڕ+Hn_E;~?a!ٽ':g/-[R Sg%@GYm/HPxX!T]+UDVrkāL%/=Ç;,kg戾:O_Y3{NI0 4,x;r1ae(eЇo[am;CϤs'7"n#ѽAoi\ŤhY;o?ڌ4ˇ!ƣe&uF}P8o;~y,SJX+==SͿ$ǍVFD*g,- HU%`tyA+Lc=榓haOJ3ZZ sEs4 ;(h'{;.O#qtazєGra!&ԍِK7Z"&:nDCh,-f}5 ԩaҒ{ ρR\S_>:%*KTػf_}t.8;b]Aު5njp^#ImQ;kwM%5%(+]UY[t_-US:81֥}qS{9]/?Y}]/̸c7\Ԙ}RoՀgo# 0 && orgID[0] != "" && task.OrgID != orgID[0] { return nil, ErrTaskNotFound } return task, nil } // UpdateTask patches mutable fields on an existing task. func (s *Store) UpdateTask(task *Task) error { record, err := s.app.FindRecordById(TasksCollection, task.ID) if err != nil { return ErrTaskNotFound } s.setTaskFields(record, task) if err := s.app.Save(record); err != nil { return err } task.UpdatedAt = record.GetDateTime("updated").Time() return nil } // ListTasks returns filtered tasks, sorted by priority DESC then created ASC. func (s *Store) ListTasks(filters TaskFilters) ([]*Task, error) { query := s.app.RecordQuery(TasksCollection). OrderBy("priority DESC", "created ASC") if filters.OrgID != "" { query = query.AndWhere(dbx.HashExp{"orgId": filters.OrgID}) } if filters.SpaceID != "" { query = query.AndWhere(dbx.HashExp{"spaceId": filters.SpaceID}) } if filters.State != nil { query = query.AndWhere(dbx.HashExp{"state": string(*filters.State)}) } if filters.AssignedTo != nil { query = query.AndWhere(dbx.HashExp{"assignedTo": *filters.AssignedTo}) } if filters.Priority != nil { query = query.AndWhere(dbx.HashExp{"priority": int(*filters.Priority)}) } if filters.WorkflowID != nil { query = query.AndWhere(dbx.HashExp{"workflowId": *filters.WorkflowID}) } if filters.Offset > 0 { query = query.Offset(int64(filters.Offset)) } limit := filters.Limit if limit <= 0 { limit = 100 } query = query.Limit(int64(limit)) var records []*core.Record if err := query.All(&records); err != nil { return nil, err } result := make([]*Task, 0, len(records)) for _, r := range records { result = append(result, s.recordToTask(r)) } return result, nil } // --- Atomic state transitions (raw SQL for exactly-once semantics) --- // ClaimTask atomically transitions a task from pending to claimed. // orgID scopes the mutation to a specific org when provided. func (s *Store) ClaimTask(taskID, agentID string, orgID ...string) error { now := types.NowDateTime() where := "WHERE [[id]] = {:id} AND [[state]] = {:pending}" params := dbx.Params{ "state": string(TaskClaimed), "agent": agentID, "now": now.String(), "id": taskID, "pending": string(TaskPending), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[state]] = {:state}, [[assignedTo]] = {:agent}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { // Check if task exists and belongs to the caller's org. if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrAlreadyClaimed } return nil } // StartTask transitions a claimed (or pending) task to running. // orgID scopes the mutation to a specific org when provided. func (s *Store) StartTask(taskID string, orgID ...string) error { now := types.NowDateTime() where := "WHERE [[id]] = {:id} AND ([[state]] = {:claimed} OR [[state]] = {:pending})" params := dbx.Params{ "running": string(TaskRunning), "now": now.String(), "id": taskID, "claimed": string(TaskClaimed), "pending": string(TaskPending), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[state]] = {:running}, [[startedAt]] = {:now}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrInvalidTransition } return nil } // CompleteTask transitions a running task to completed with output. // orgID scopes the mutation to a specific org when provided. func (s *Store) CompleteTask(taskID string, output map[string]any, orgID ...string) error { now := types.NowDateTime() outputJSON := marshalJSON(output) where := "WHERE [[id]] = {:id} AND [[state]] = {:running}" params := dbx.Params{ "state": string(TaskCompleted), "output": string(outputJSON), "now": now.String(), "id": taskID, "running": string(TaskRunning), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[state]] = {:state}, [[output]] = {:output}, [[progress]] = 100, " + "[[completedAt]] = {:now}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrInvalidTransition } return nil } // FailTask transitions a running task to failed. If retries remain, re-queues as pending. // Uses a single atomic SQL with CASE to avoid TOCTOU races. // orgID scopes the mutation to a specific org when provided. func (s *Store) FailTask(taskID string, errMsg string, orgID ...string) error { now := types.NowDateTime() where := "WHERE [[id]] = {:id} AND [[state]] = {:running}" params := dbx.Params{ "pending": string(TaskPending), "failed": string(TaskFailed), "error": errMsg, "now": now.String(), "id": taskID, "running": string(TaskRunning), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[state]] = CASE WHEN [[retryCount]] < [[maxRetries]] THEN {:pending} ELSE {:failed} END, " + "[[retryCount]] = CASE WHEN [[retryCount]] < [[maxRetries]] THEN [[retryCount]] + 1 ELSE [[retryCount]] END, " + "[[assignedTo]] = CASE WHEN [[retryCount]] < [[maxRetries]] THEN '' ELSE [[assignedTo]] END, " + "[[startedAt]] = CASE WHEN [[retryCount]] < [[maxRetries]] THEN '' ELSE [[startedAt]] END, " + "[[progress]] = CASE WHEN [[retryCount]] < [[maxRetries]] THEN 0 ELSE [[progress]] END, " + "[[completedAt]] = CASE WHEN [[retryCount]] >= [[maxRetries]] THEN {:now} ELSE [[completedAt]] END, " + "[[error]] = {:error}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrInvalidTransition } return nil } // CancelTask transitions any non-terminal task to cancelled. // orgID scopes the mutation to a specific org when provided. func (s *Store) CancelTask(taskID string, orgID ...string) error { now := types.NowDateTime() where := "WHERE [[id]] = {:id} AND [[state]] NOT IN ({:completed}, {:cancelled})" params := dbx.Params{ "cancelled": string(TaskCancelled), "completed": string(TaskCompleted), "now": now.String(), "id": taskID, } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[state]] = {:cancelled}, [[completedAt]] = {:now}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrInvalidTransition } return nil } // UpdateProgress sets progress (0-100) on a running task. // orgID scopes the mutation to a specific org when provided. func (s *Store) UpdateProgress(taskID string, progress int, orgID ...string) error { if progress < 0 { progress = 0 } if progress > 100 { progress = 100 } now := types.NowDateTime() where := "WHERE [[id]] = {:id} AND [[state]] = {:running}" params := dbx.Params{ "progress": progress, "now": now.String(), "id": taskID, "running": string(TaskRunning), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } result, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + TasksCollection + "}} SET " + "[[progress]] = {:progress}, [[updated]] = {:now} " + where, ).Bind(params).Execute() if err != nil { return err } rows, _ := result.RowsAffected() if rows == 0 { if _, err := s.GetTask(taskID, orgID...); err != nil { return ErrTaskNotFound } return ErrInvalidTransition } return nil } // GetNextPendingTask finds and atomically claims the highest-priority pending task // in the given space whose dependencies are all completed. // orgID scopes the query to a specific org when provided. func (s *Store) GetNextPendingTask(spaceID, agentID string, orgID ...string) (*Task, error) { pending := TaskPending filters := TaskFilters{ SpaceID: spaceID, State: &pending, Limit: 50, } if len(orgID) > 0 && orgID[0] != "" { filters.OrgID = orgID[0] } candidates, err := s.ListTasks(filters) if err != nil { return nil, err } for _, task := range candidates { if !s.dependenciesMet(task) { continue } // Attempt atomic claim scoped to org. if err := s.ClaimTask(task.ID, agentID, orgID...); err != nil { continue // lost race or invalid transition } // Re-read the claimed task scoped to org. claimed, err := s.GetTask(task.ID, orgID...) if err != nil { return nil, err } return claimed, nil } return nil, nil // no eligible tasks } // dependenciesMet checks if all tasks in DependsOn are completed. func (s *Store) dependenciesMet(task *Task) bool { if len(task.DependsOn) == 0 { return true } for _, depID := range task.DependsOn { dep, err := s.GetTask(depID) if err != nil || dep.State != TaskCompleted { return false } } return true } // AgentHasActiveTask reports whether the agent has a claimed or running task. // orgID scopes the query to a specific org when provided. func (s *Store) AgentHasActiveTask(agentID string, orgID ...string) (bool, error) { where := "WHERE [[assignedTo]] = {:agent} AND [[state]] IN ({:claimed}, {:running})" params := dbx.Params{ "agent": agentID, "claimed": string(TaskClaimed), "running": string(TaskRunning), } if len(orgID) > 0 && orgID[0] != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = orgID[0] } var count int err := s.app.ConcurrentDB().NewQuery( "SELECT COUNT(*) FROM {{" + TasksCollection + "}} " + where, ).Bind(params).Row(&count) if err != nil { return false, err } return count > 0, nil } // --- Workflow CRUD --- // CreateWorkflow persists a new workflow. func (s *Store) CreateWorkflow(wf *Workflow) error { if wf.Name == "" { return errors.New("workflow name is required") } col, err := s.app.FindCollectionByNameOrId(WorkflowsCollection) if err != nil { return fmt.Errorf("workflows collection not found: %w", err) } record := core.NewRecord(col) record.Set("orgId", wf.OrgID) record.Set("spaceId", wf.SpaceID) record.Set("name", wf.Name) record.Set("description", wf.Description) record.Set("state", string(TaskPending)) record.Set("createdBy", wf.CreatedBy) record.Set("tasks", marshalJSON(wf.Tasks)) record.Set("metadata", marshalJSON(wf.Metadata)) if err := s.app.Save(record); err != nil { return err } wf.ID = record.Id wf.State = TaskPending wf.CreatedAt = record.GetDateTime("created").Time() wf.UpdatedAt = record.GetDateTime("updated").Time() return nil } // GetWorkflow retrieves a workflow by ID. // If orgID is provided, verifies the workflow belongs to that org. func (s *Store) GetWorkflow(id string, orgID ...string) (*Workflow, error) { record, err := s.app.FindRecordById(WorkflowsCollection, id) if err != nil { return nil, ErrWorkflowNotFound } wf := s.recordToWorkflow(record) if len(orgID) > 0 && orgID[0] != "" && wf.OrgID != orgID[0] { return nil, ErrWorkflowNotFound } return wf, nil } // ListWorkflows returns workflows for a space, optionally scoped to an org. func (s *Store) ListWorkflows(spaceID string, orgID ...string) ([]*Workflow, error) { query := s.app.RecordQuery(WorkflowsCollection). OrderBy("created ASC") if len(orgID) > 0 && orgID[0] != "" { query = query.AndWhere(dbx.HashExp{"orgId": orgID[0]}) } if spaceID != "" { query = query.AndWhere(dbx.HashExp{"spaceId": spaceID}) } var records []*core.Record if err := query.All(&records); err != nil { return nil, err } result := make([]*Workflow, 0, len(records)) for _, r := range records { result = append(result, s.recordToWorkflow(r)) } return result, nil } // UpdateWorkflowTasks updates the task ID list on an existing workflow. // When the workflow has an OrgID, the update is scoped to that org. func (s *Store) UpdateWorkflowTasks(wf *Workflow) error { now := types.NowDateTime() where := "WHERE [[id]] = {:id}" params := dbx.Params{ "tasks": string(marshalJSON(wf.Tasks)), "now": now.String(), "id": wf.ID, } if wf.OrgID != "" { where += " AND [[orgId]] = {:orgId}" params["orgId"] = wf.OrgID } _, err := s.app.NonconcurrentDB().NewQuery( "UPDATE {{" + WorkflowsCollection + "}} SET [[tasks]] = {:tasks}, [[updated]] = {:now} " + where, ).Bind(params).Execute() return err } // AdvanceWorkflows checks non-terminal workflows and updates their state // based on constituent task states. func (s *Store) AdvanceWorkflows() error { notDone := []string{string(TaskCompleted), string(TaskFailed), string(TaskCancelled)} var records []*core.Record err := s.app.RecordQuery(WorkflowsCollection). AndWhere(dbx.NewExp( "[[state]] NOT IN ({:s1}, {:s2}, {:s3})", dbx.Params{"s1": notDone[0], "s2": notDone[1], "s3": notDone[2]}, )). All(&records) if err != nil { return err } now := types.NowDateTime() for _, record := range records { wf := s.recordToWorkflow(record) allCompleted := true anyFailed := false for _, taskID := range wf.Tasks { t, err := s.GetTask(taskID) if err != nil { continue } switch t.State { case TaskCompleted: // ok case TaskFailed, TaskCancelled: anyFailed = true allCompleted = false default: allCompleted = false } } var newState TaskState if allCompleted && len(wf.Tasks) > 0 { newState = TaskCompleted } else if anyFailed { newState = TaskFailed } else if wf.State == TaskPending { newState = TaskRunning } if newState != "" && newState != wf.State { params := dbx.Params{ "state": string(newState), "now": now.String(), "id": record.Id, } query := "UPDATE {{" + WorkflowsCollection + "}} SET [[state]] = {:state}, [[updated]] = {:now}" if newState == TaskCompleted || newState == TaskFailed { query += ", [[completedAt]] = {:now}" } query += " WHERE [[id]] = {:id}" _, _ = s.app.NonconcurrentDB().NewQuery(query).Bind(params).Execute() } } return nil } // CheckTimeouts fails or retries tasks that have exceeded their timeout. func (s *Store) CheckTimeouts() error { var records []*core.Record err := s.app.RecordQuery(TasksCollection). AndWhere(dbx.HashExp{"state": string(TaskRunning)}). AndWhere(dbx.NewExp("[[timeout]] > 0")). AndWhere(dbx.NewExp("[[startedAt]] != ''")). All(&records) if err != nil { return err } now := time.Now() for _, r := range records { task := s.recordToTask(r) if task.StartedAt == nil || task.Timeout <= 0 { continue } if now.Sub(*task.StartedAt) <= task.Timeout { continue } _ = s.FailTask(task.ID, "task timed out") } return nil } // --- Record ↔ Task conversion --- func (s *Store) setTaskFields(record *core.Record, task *Task) { record.Set("orgId", task.OrgID) record.Set("spaceId", task.SpaceID) record.Set("title", task.Title) record.Set("description", task.Description) record.Set("state", string(task.State)) record.Set("priority", int(task.Priority)) record.Set("assignedTo", task.AssignedTo) record.Set("createdBy", task.CreatedBy) record.Set("workflowId", task.WorkflowID) record.Set("parentTaskId", task.ParentTaskID) record.Set("error", task.Error) record.Set("progress", task.Progress) record.Set("maxRetries", task.MaxRetries) record.Set("retryCount", task.RetryCount) record.Set("timeout", int(task.Timeout.Seconds())) record.Set("dependsOn", marshalJSON(task.DependsOn)) record.Set("labels", marshalJSON(task.Labels)) record.Set("input", marshalJSON(task.Input)) record.Set("output", marshalJSON(task.Output)) record.Set("metadata", marshalJSON(task.Metadata)) if task.StartedAt != nil { dt, _ := types.ParseDateTime(*task.StartedAt) record.Set("startedAt", dt) } if task.CompletedAt != nil { dt, _ := types.ParseDateTime(*task.CompletedAt) record.Set("completedAt", dt) } } func (s *Store) recordToTask(record *core.Record) *Task { task := &Task{ ID: record.Id, OrgID: record.GetString("orgId"), SpaceID: record.GetString("spaceId"), Title: record.GetString("title"), Description: record.GetString("description"), State: TaskState(record.GetString("state")), Priority: TaskPriority(int(record.GetFloat("priority"))), AssignedTo: record.GetString("assignedTo"), CreatedBy: record.GetString("createdBy"), WorkflowID: record.GetString("workflowId"), ParentTaskID: record.GetString("parentTaskId"), Error: record.GetString("error"), Progress: int(record.GetFloat("progress")), MaxRetries: int(record.GetFloat("maxRetries")), RetryCount: int(record.GetFloat("retryCount")), Timeout: time.Duration(record.GetFloat("timeout")) * time.Second, CreatedAt: record.GetDateTime("created").Time(), UpdatedAt: record.GetDateTime("updated").Time(), } unmarshalJSONField(record.Get("dependsOn"), &task.DependsOn) unmarshalJSONField(record.Get("labels"), &task.Labels) unmarshalJSONField(record.Get("input"), &task.Input) unmarshalJSONField(record.Get("output"), &task.Output) unmarshalJSONField(record.Get("metadata"), &task.Metadata) if dt := record.GetDateTime("startedAt"); !dt.IsZero() { t := dt.Time() task.StartedAt = &t } if dt := record.GetDateTime("completedAt"); !dt.IsZero() { t := dt.Time() task.CompletedAt = &t } return task } func (s *Store) recordToWorkflow(record *core.Record) *Workflow { wf := &Workflow{ ID: record.Id, OrgID: record.GetString("orgId"), SpaceID: record.GetString("spaceId"), Name: record.GetString("name"), Description: record.GetString("description"), State: TaskState(record.GetString("state")), CreatedBy: record.GetString("createdBy"), CreatedAt: record.GetDateTime("created").Time(), UpdatedAt: record.GetDateTime("updated").Time(), } unmarshalJSONField(record.Get("tasks"), &wf.Tasks) unmarshalJSONField(record.Get("metadata"), &wf.Metadata) if dt := record.GetDateTime("completedAt"); !dt.IsZero() { t := dt.Time() wf.CompletedAt = &t } return wf } %9 dxX]lWVڒ.Mi6ڻiqplCj%U;swwٙެ,kۗ0HH ď BBH '^s jU{=;|}C^/G/>⨬+b]$#]ջ@+#4"EUqT$Of'n9#=܃5]7""ڑKKADRDuw+VeS%\ɶQqLd $J584pHjNDpd;5b-JF ߇D %q_^UwN-l8/n>/$СP){qdE"OG^\jCkEڐ" t *fXD0Va24" q 2%2T*$m_E8ODS&B hbV|ѐ Q eBz[j_t$A\f /K) %![렖\&+9ɵve`,Hջnn i%BQUl5޲'Z*iȢ>>3/qE%Nto8K m e$5dTG@fH,@׮.mTJj:a8:1겋=xW^ ]#z):y68W8D-dfH8BFDZصfX%T'H!4Lb>3]MkBB51Ye'BfgdSIe?ثz1ˀrcrF-e@_PG`'J"yUOin !PO/oɰMFDmXHis$p*iT 2 P[: BUV|ZX4[E>ʹZ\.-cI٦Bw緘3aE-QpI.ۖŃ!iayl貈o#fZ0bv=*,PXi25ewMlhzt^l/uiXv4haR; b+hqfjEf|0Rgg/A-6pYV/aK`n[[,8~tr.zo* vF74HIM'e (6Λ"WKvL/Kr+c5" pפ (d"GZ`ęWF\AR4r6Krq 'g/>_Jw^gk?);(BWScΡ_yܗuB_/dɆAX>؜p7H1:isPEqgNזEM<:ſ*Z/YXe=Gз9wb3%hͅ@KS+Q8qJ鯎LMM|`]w(]4}3=g|lSU-2f9ZnKg}YU|,8KqzeU8s|ۜ#6Ͼx,UnW=zʧ3=PFqK/h%BhAG6^SXbDӪg:TWfTq!F!!ȋH`_U2g Z^5|8̅(Ž,N_? ul廲 Ebx??p;~pN s:~~S/ϼj8?-J<3q]^yDeL7g/K'jAau1_sFw",}p.CN{zw,TdO% .%-W*OU蹪6iu-[Ҡo*GLRTD 6v\諱ZI4f튚֑w+$~FhX(NY+M$yK#);mPyFH/ώrh5ʕ 3Jt7 =6y:^}~GQ_g ۋ,vʫ+"Oz!C~ m;Xs==K` EB̻{5I!:71=L9vs9k=ei]0IM9_~H+Iaw ; [eᓇD\񨒥?1ſ>|?vbYϷ%Ư_ WJ13#:,qm.ӏ/w__/.~8q-™K{^F6]['i;}﹉c{h0p|AD>/wqdŗ0DG b"fah, UYp/"bz5ˊ{zdDS5ke+9.Л8k_Q? r'Oɴ>$a3?f#r_It!J(F]1k]ݷz~ &a X6ei7չ>1?{rӕ+x[n9>[Oi`&Ҭ-͋81q؋[D쐔M$[şV˲g7$jUNhxGhTǗ{P<=vƿ ʏobǡ ސK>TsAw|Lb$!dJ%& {U5^JA[c' Oslz- $ȺٌHbDcفiyhސ:P;&J'+-i6 7*J CT%f -@ psY!铗/3sͩ)Ȧu.Z&Bvˈb:Rj jÏLpCf~2uJF)R!5sI+<\n늭X)?z;8 ]>R'xjPP7bkf鴓B3 KvǍvt˔Ah-=`QK_/ q3j4`WOfr4w w6& EtB5NsX&E^:gwi1xoSRanw&'r b0\l".!O27r6,3(F7];Gu0=`Nº֨yKDl'إKy͖*Ԉ}SK֩fْt2??è1_6N̎{>R$]uA9;)5)QFcyYcZl'!fپ3fZнQxIx?D"10 _N Ppj/‡BJ\Yu_;UY-&UB>G(ԀK"!aB83\*^ o鸔uJZ:zBXfȄi?"{x9q(g7*D8+:9Phͬ-MGou&i̙rl4fIlTB ZUʖ zAd/TaY_+rR,Å묞ΔEmEtjo0X^x}4i+$dZN-tڬ"|=kmMW׎)-9]\֩iɷ~j,TZ,겨nfZ5fmn(׻uDC(ǚimkE775BEŪjg<im|C[ lkHQ%}pz/ϿR55I(K5o|'Myj_<1RJ*,|:h aιdA$za"Wd!Dk f/M8~.@ÅyQ`.!`@45F]1q/cr4VkGB 2{Ďr3Fwڀ!jvsNXF;3_(BZxIK D0 җRaTd4|Y ݈ ӧVHԈml_YfνFA@ܝ<V#i1"qG\ȠӒRc 2ޘ;؝[ 0Φ/ij(?7&Y 8xH L*+3xU]6~O1FBliy0"0.lyADX&U,CGtf$y ~$Ͱr+J Qm̮q>B:zHg~ @!zcK|Ī]JONf[Am Ymٸte|Y<N?{#‡5F#v+vZ/5쌍UvnPi\Pa쵂 aZ =lAL;Cx[ 1lc8PUxbX"jEp:h[!ڭRZKx=mV{qrO5 5x?EZSAE |kA^k oYB!jm`" D ]R9p O+H5i}qD:k$Q}{:옷i43{xhkEDvvPa ?#wr|򽼚-Vc*.zF5 j{\kYX[v&I~eA㞰]F E!(~{0Joj Za>;{tC:M`6lx^ը4j$ǰQV򽨍.9P빽^]:byX;u`r (.R7ފ` ojt94UOYN{50iőDf [[vm(ZFgJڹaϢ^7f$ɟϡ?G/%LϡʛݲhBN#>MNdd`X;3ʏ*g+zp~ r̽NR:~3D/IIgL2YzGSv|NO.s1wvϳ[)6H2HI] eTp{%r?tWU]O9e7ieVzZf nWt9 1x u"5!f3f {(*S/ ."hs(:8@' [/1t2xq/x{// Package tasks implements a durable task execution plugin for Base. // // It provides persistent task queues with DAG-based workflow scheduling, // priority-based work-stealing, retry support, and timeout management, // all backed by Base's embedded SQLite. // // The plugin uses two internal collections: // - _tasks: individual work items with state machine lifecycle // - _workflows: ordered task DAGs (pipeline or fan-out) package tasks import ( "encoding/json" "time" "github.com/hanzoai/base/tools/types" ) // TaskState represents the lifecycle state of a task. type TaskState string const ( TaskPending TaskState = "pending" TaskClaimed TaskState = "claimed" TaskRunning TaskState = "running" TaskCompleted TaskState = "completed" TaskFailed TaskState = "failed" TaskCancelled TaskState = "cancelled" TaskRetrying TaskState = "retrying" ) // validTransitions defines which state transitions are allowed. var validTransitions = map[TaskState]map[TaskState]bool{ TaskPending: {TaskClaimed: true, TaskRunning: true, TaskCancelled: true}, TaskClaimed: {TaskRunning: true, TaskCancelled: true}, TaskRunning: {TaskCompleted: true, TaskFailed: true, TaskCancelled: true}, TaskFailed: {TaskRetrying: true, TaskCancelled: true}, TaskRetrying: {TaskPending: true, TaskCancelled: true}, TaskCompleted: {}, TaskCancelled: {}, } // CanTransition reports whether moving from one state to another is allowed. func CanTransition(from, to TaskState) bool { targets, ok := validTransitions[from] if !ok { return false } return targets[to] } // TaskPriority controls scheduling order. Higher values are scheduled first. type TaskPriority int const ( PriorityLow TaskPriority = 0 PriorityNormal TaskPriority = 1 PriorityHigh TaskPriority = 2 PriorityUrgent TaskPriority = 3 ) // Task is a durable work item. type Task struct { ID string `json:"id"` OrgID string `json:"org_id,omitempty"` // IAM org — maps to Temporal namespace SpaceID string `json:"space_id"` Title string `json:"title"` Description string `json:"description,omitempty"` State TaskState `json:"state"` Priority TaskPriority `json:"priority"` AssignedTo string `json:"assigned_to,omitempty"` CreatedBy string `json:"created_by,omitempty"` WorkflowID string `json:"workflow_id,omitempty"` ParentTaskID string `json:"parent_task_id,omitempty"` DependsOn []string `json:"depends_on,omitempty"` Labels []string `json:"labels,omitempty"` Input map[string]any `json:"input,omitempty"` Output map[string]any `json:"output,omitempty"` Error string `json:"error,omitempty"` Progress int `json:"progress"` MaxRetries int `json:"max_retries"` RetryCount int `json:"retry_count"` Timeout time.Duration `json:"timeout,omitempty"` CreatedAt time.Time `json:"created_at"` UpdatedAt time.Time `json:"updated_at"` StartedAt *time.Time `json:"started_at,omitempty"` CompletedAt *time.Time `json:"completed_at,omitempty"` Metadata map[string]string `json:"metadata,omitempty"` } // Workflow chains tasks into a DAG. type Workflow struct { ID string `json:"id"` OrgID string `json:"org_id,omitempty"` // IAM org — maps to Temporal namespace SpaceID string `json:"space_id"` Name string `json:"name"` Description string `json:"description,omitempty"` State TaskState `json:"state"` Tasks []string `json:"tasks"` CreatedBy string `json:"created_by,omitempty"` CreatedAt time.Time `json:"created_at"` UpdatedAt time.Time `json:"updated_at"` CompletedAt *time.Time `json:"completed_at,omitempty"` Metadata map[string]string `json:"metadata,omitempty"` } // TaskFilters controls listing and searching. type TaskFilters struct { OrgID string `json:"org_id,omitempty"` SpaceID string `json:"space_id,omitempty"` State *TaskState `json:"state,omitempty"` AssignedTo *string `json:"assigned_to,omitempty"` Priority *TaskPriority `json:"priority,omitempty"` Labels []string `json:"labels,omitempty"` WorkflowID *string `json:"workflow_id,omitempty"` Limit int `json:"limit,omitempty"` Offset int `json:"offset,omitempty"` } // marshalJSON marshals v to types.JSONRaw, returning nil on error. func marshalJSON(v any) types.JSONRaw { if v == nil { return nil } b, err := json.Marshal(v) if err != nil { return nil } return types.JSONRaw(b) } // unmarshalJSONField decodes a record's raw JSON field into dest. func unmarshalJSONField(raw any, dest any) { if raw == nil { return } switch v := raw.(type) { case types.JSONRaw: if len(v) > 0 { _ = json.Unmarshal(v, dest) } case string: if v != "" { _ = json.Unmarshal([]byte(v), dest) } case []byte: if len(v) > 0 { _ = json.Unmarshal(v, dest) } } } (y xKc~+y7goG#}>xSn0 =_A08CjP q=+2c Q$MeA}%Pl'C{ ZM]EcܵQVnu0t?tR+4+>L2pU9hxacO| FA ψ0=/0SBzQB;ښN@>Js],mFլ P_f_q*ңHbT{%o̶oQ#4=9Ȱr9)'$HF(³FZh$M&Ê5|,Nӌt3!S477GGʚp*6)׈!iVS?~`OA#/OOb]!XnSy]NxXnF}bJ HI nӸň!5&wYr) #./NRzŹJ\+:TQ8YaCmG Pvٜlj)fK0BX~V^,fuz1< TYnaljEZ)_jmerZ:};; GP„Îb2V2?w'B2|'YTPL*d{kB'2~sBj{QAJy. !32i,&ŤBݔCT6PTspX3uT//%@fjT2@hHZ){ (d0m~s6M+zk笕fƜY Li,BS1͍)axW K ktrqb?t`GXGb`Ue>,A/-)jɟHbjY@ajc#hy]/G&0h4ׂwQ/҄$P;H Cs_]{2XpYoK-hrKb%&'FX-( OMS+:"\ i"s>%A,O]BYz}N|87HG\*40:L.de45Xay% zcs6~ 1BS4 6@%16 qkD9peC`E:W4=3GY]O%ϥ? JU)1ۉUr9^sAMqh֬Nih%dPHX+D~Zoon1s1Qc,S4ѹG bq닆ah hmQFQ!.@1kMEDeML$n^ۥZ8T 6s)Ri&tlinި9<\#x0] eLf5۩mqjHaWx,x5>LS븋ztȌޜ{χhOz8 ?)z̴@cBX=:y |G@Ɩ<|n>X} Oߛ;L@csE؄9:퉮̮u؟d96 ܘ|P l[߹/&˸3@Ûi#\L;ed !CU#.:34CDzV׃m6 ;v:݇>)+%vh_ GCaݤ!%^;{k>՘K9Q:g'Ι"Y4Oƣz[Uxq> ͂Ȧo!Ub{;}+cUQRcb¥a)i"]KV6M68G\jG]r]I QK͒k S hf!.Yu xf100644 module.gondfMAe(~^)100644 runtime.gotpÏF52L禈%100644 runtime_test.go_Y3͏x]Tdx3100644 stub.goz TV ;$)!Hy^:x&//go:build v8vm // +build v8vm package v8vm import ( "context" "encoding/json" "fmt" "sync" v8 "rogchap.com/v8go" "github.com/hanzoai/base/plugins/extruntime" ) // module is one loaded JS extension. It holds a precompiled UnboundScript // (compiled once into the shared isolate) and a pool of contexts so we // don't pay context-creation cost per invocation. V8 is single-threaded // per isolate; the pool exists for *state isolation* between back-to-back // invocations, not for concurrency. type module struct { rt *runtime name string exports []string origin string unbound *v8.UnboundScript mu sync.Mutex pool []*v8.Context closed bool } func newModule(rt *runtime, m *extruntime.Manifest, unbound *v8.UnboundScript) *module { return &module{ rt: rt, name: m.Name, exports: append([]string(nil), m.Exports...), origin: m.Module, unbound: unbound, } } func (m *module) Name() string { return m.name } func (*module) Runtime() string { return "v8go" } func (m *module) Exports() []string { return append([]string(nil), m.exports...) } // Invoke runs the named exported function with payload (a JSON document). // // Calling convention — much simpler than wasm because V8 has real JS // objects: we JSON.parse the payload inside the guest context, then call // globalThis[fn](payload). The result is JSON.stringify'd and returned // as bytes. The guest defines its function by assigning to globalThis: // // globalThis.validate = function(payload) { // return { ok: true, normalized: payload.email.toLowerCase() }; // }; // // Context cancellation hard-aborts via Isolate.TerminateExecution(), // which raises a non-catchable exception in the running script. func (m *module) Invoke(ctx context.Context, fn string, payload []byte) ([]byte, error) { m.mu.Lock() if m.closed { m.mu.Unlock() return nil, extruntime.ErrClosed } m.mu.Unlock() if fn == "" { return nil, fmt.Errorf("%w: function name is empty", extruntime.ErrUnknownFn) } if len(payload) == 0 { payload = []byte("null") } v8ctx := m.acquire() defer m.release(v8ctx) // Wire the cancel watchdog before we cross into V8. done := make(chan struct{}) defer close(done) go func() { select { case <-ctx.Done(): m.rt.iso.TerminateExecution() case <-done: } }() m.rt.lock() defer m.rt.unlock() // Bind script globals (defines globalThis[fn]) — idempotent if the // context is reused; the JS source assigns to globalThis so re-running // just refreshes the binding. if _, err := m.unbound.Run(v8ctx); err != nil { if cerr := ctx.Err(); cerr != nil { return nil, cerr } return nil, fmt.Errorf("v8vm: %s: load %s: %w", m.name, m.origin, err) } // Resolve globalThis[fn]. global := v8ctx.Global() fnVal, err := global.Get(fn) if err != nil { return nil, fmt.Errorf("v8vm: %s: lookup %s: %w", m.name, fn, err) } if !fnVal.IsFunction() { return nil, fmt.Errorf("%w: %s:%s (not a function)", extruntime.ErrUnknownFn, m.name, fn) } jsFn, err := fnVal.AsFunction() if err != nil { return nil, fmt.Errorf("v8vm: %s: as-function %s: %w", m.name, fn, err) } // Parse payload bytes into a JS value. payloadVal, err := v8.JSONParse(v8ctx, string(payload)) if err != nil { return nil, fmt.Errorf("v8vm: %s: parse payload: %w", m.name, err) } // Call the function with the parsed payload. result, err := jsFn.Call(global, payloadVal) if err != nil { if cerr := ctx.Err(); cerr != nil { return nil, cerr } return nil, fmt.Errorf("v8vm: %s:%s: %w", m.name, fn, err) } // JSON.stringify the return value. Undefined → null so callers always // receive valid JSON. if result == nil || result.IsUndefined() || result.IsNull() { return []byte("null"), nil } out, err := v8.JSONStringify(v8ctx, result) if err != nil { return nil, fmt.Errorf("v8vm: %s:%s: stringify: %w", m.name, fn, err) } // Round-trip-validate the output is well-formed JSON so callers can // trust it without re-validating downstream. var probe json.RawMessage if err := json.Unmarshal([]byte(out), &probe); err != nil { return nil, fmt.Errorf("v8vm: %s:%s: invalid result json: %w", m.name, fn, err) } return []byte(out), nil } func (m *module) Close() error { m.mu.Lock() defer m.mu.Unlock() if m.closed { return nil } m.closed = true for _, c := range m.pool { c.Close() } m.pool = nil return nil } // acquire returns a context from the pool, or creates a new one if the // pool is empty. Contexts are bound to the shared isolate. func (m *module) acquire() *v8.Context { m.mu.Lock() if n := len(m.pool); n > 0 { c := m.pool[n-1] m.pool = m.pool[:n-1] m.mu.Unlock() return c } m.mu.Unlock() m.rt.lock() defer m.rt.unlock() return v8.NewContext(m.rt.iso) } // release returns the context to the pool, capped at the configured // pool size; surplus contexts are disposed. func (m *module) release(c *v8.Context) { if c == nil { return } m.mu.Lock() if m.closed { m.mu.Unlock() c.Close() return } if len(m.pool) < m.rt.poolSize { m.pool = append(m.pool, c) m.mu.Unlock() return } m.mu.Unlock() c.Close() } Ȇ8x \//go:build v8vm // +build v8vm package v8vm import ( "context" "fmt" "os" "path/filepath" "strconv" "sync" v8 "rogchap.com/v8go" "github.com/hanzoai/base/plugins/extruntime" ) // Defaults — tuned for short-lived per-request JS hooks. const ( defaultHeapMBMax = 256 defaultHeapMBInit = 64 defaultPoolSize = 8 envHeapMBMax = "BASE_V8VM_HEAP_MB_MAX" envPoolSize = "BASE_V8VM_POOL_SIZE" ) // NewRuntime returns a v8go-backed Runtime. One Isolate is shared across // every module loaded by this runtime; V8 is not thread-safe per isolate // so Module.Invoke serializes via a mutex. The shared-isolate trade-off // is intentional: starting an isolate costs ~10-50ms and 5-20MB of RSS, // far too much to pay per extension when we typically load 1-50 of them. func NewRuntime() extruntime.Runtime { r := &runtime{ heapMaxMB: envMB(envHeapMBMax, defaultHeapMBMax), poolSize: envInt(envPoolSize, defaultPoolSize), } r.iso = v8.NewIsolate() return r } type runtime struct { iso *v8.Isolate heapMaxMB int // advisory soft cap enforced by GetHeapStatistics() watchdog poolSize int mu sync.Mutex // serializes isolate access across all modules closed bool } func (*runtime) Name() string { return "v8go" } func (*runtime) Capabilities() extruntime.Capabilities { return extruntime.Capabilities{ AcceptsLanguages: []string{"js"}, HardSandbox: true, Cgo: true, SupportsAbort: true, } } func (r *runtime) Load(_ context.Context, dir string) (extruntime.Module, error) { r.mu.Lock() if r.closed { r.mu.Unlock() return nil, extruntime.ErrClosed } r.mu.Unlock() m, err := extruntime.LoadManifest(dir) if err != nil { return nil, err } if m.Runtime != "v8go" { return nil, fmt.Errorf("%w: v8go runtime cannot load %q runtime", extruntime.ErrUnsupported, m.Runtime) } if m.Module == "" { return nil, fmt.Errorf("%w: module path is required", extruntime.ErrBadManifest) } src, err := os.ReadFile(filepath.Join(dir, m.Module)) if err != nil { return nil, fmt.Errorf("read module %s: %w", m.Module, err) } r.mu.Lock() defer r.mu.Unlock() unbound, err := r.iso.CompileUnboundScript(string(src), m.Module, v8.CompileOptions{}) if err != nil { return nil, fmt.Errorf("compile %s: %w", m.Module, err) } return newModule(r, m, unbound), nil } func (r *runtime) Close() error { r.mu.Lock() defer r.mu.Unlock() if r.closed { return nil } r.closed = true if r.iso != nil { r.iso.Dispose() r.iso = nil } return nil } // lock guards isolate access for callers — exported within the package // so module.go can use the same mutex. func (r *runtime) lock() { r.mu.Lock() } func (r *runtime) unlock() { r.mu.Unlock() } func envInt(key string, def int) int { v := os.Getenv(key) if v == "" { return def } n, err := strconv.Atoi(v) if err != nil || n <= 0 { return def } return n } func envMB(key string, def int) int { return envInt(key, def) } ^ńxU1N0T4 Q*Q5H*bhYX"Xp718vi;Tpd.,\ 0wT`1o6Vzo8A-12pтzA:iD·Wן?ɱuD4ݒyZᛇ<jV;ι\l>(ls.\rg/SεFPey)9E e^]jʒb',W*M-I-K)cYtKgm&pTYANizfH^wB]vޝ)2}ݡJ"2ͼ&ǛCyb#\QQIbRN*Hك/- 9?C=ϸ13 }ny tuq.raRd܃o/P AUwkҬo=ѪW"8%bd\T ?j7ߔԘݞP7hn׶y~ʽ/,#puB̽EN ӌxXnFSX@JMv4U6dɎ]G*M#5E23lE\I;gHڍ$̙٥e58Q>F:(L&hVGiBo(ԞKE ״#Q2LKAlݥE4=fKx)H[XZ:?t[h9֔QS:h7||nqئs?`3Kd"2:4Wu.McQ@Sܛ ȯva2eL4l\Mb wiF Q)S R ;MSCƼ F~\%I[-~84P1-qd%;P3EyE+8wBwQ>\с?HcI`Vo>,\gZxvҩ?5G}ZF~ z'קWσiz޿]\C%pdڤle=~|Y_@(fبf̞%Xޮ7y*ח/ywm # 9EڴTFM;i`_kfȲVmU'1/hq@D "u' ˙OYj uOM:IC ^Z{myϞu]{ז~ o\%8`%qo0 ֱB߾@Gq Zϛ٘|N`x5<ƍۥ;klKe )Oo,ʘM7o7p VX=e*Zj/STy%Q]GM&8*95jԉc2iub![pi?WvT}[ctG6؃.]$f_Իz: 6DAL ıVDjKp. .I59 |.OvlN6Z^􎊄u 2סHEv'P`2!K+TbӶ M>Qйe8^U Kh~3B(l 0!ESZ5؊mPDj=;3kK2"K5nf:E͛fCxrS=܃ ȸϥes%Zq>GDjج]VѝOlK&xyQ-G4Yo{tupsxe,J⁳[-5 Z,)8]B/v o`FwqR^+r`%~R[O<]$wFe̦c"&]M-GU8]q8NPiPlH{s:_oih%'6ݜ;]tyyzG;6ޡF^Y`B @>t#qmwSUy?2G.P ZHdf tNuE?i4w#Gafr̞G(W>:, n?l{?qZFHIt{H'R?}*O*B0v'Pj<Œk㒨쎷ꞹ@ ztjE\{fnZL"$%`E?hJla%]356]6V<{ G'L{ݯ륷82$:l*nkKan {iA.kK.QÄ/^Rb0MӡPI^,$Xx22Ѥqz5[_bv+O?O}.%7yJ :xyN썝(kyG<;L2=[KOQp, )^8M'n:=b-tpιuvb*CRrЫe-nHk r:V藞֖UE,ߗP!B*ZHqQ-~UypqLėu 7W>ru.*Hj=& Qż {XS\jzƿx p// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "crypto/sha256" "encoding/hex" "sync" "time" ) // AuditEntry records a single vault operation. type AuditEntry struct { Timestamp time.Time `json:"timestamp"` VaultID string `json:"vaultId"` // org:user Actor string `json:"actor"` // DID of who performed the action Action string `json:"action"` // "put", "get", "delete", "sync", "anchor", "grant", "revoke" Resource string `json:"resource"` // key, capability ID, etc. Hash string `json:"hash"` // SHA-256 of entry for chaining PrevHash string `json:"prevHash"` // hash of previous entry (chain link) } // AuditLog is an append-only log of vault operations. // Entries are hash-chained: each entry's PrevHash points to the previous entry's Hash. // The last hash is the audit merkle root, suitable for chain anchoring. type AuditLog struct { entries []AuditEntry mu sync.RWMutex } // NewAuditLog creates an empty audit log. func NewAuditLog() *AuditLog { return &AuditLog{} } // Record appends an entry to the audit log. // The entry is hash-chained to the previous entry automatically. func (al *AuditLog) Record(vaultID, actor, action, resource string) { al.mu.Lock() defer al.mu.Unlock() prevHash := "" if len(al.entries) > 0 { prevHash = al.entries[len(al.entries)-1].Hash } entry := AuditEntry{ Timestamp: time.Now(), VaultID: vaultID, Actor: actor, Action: action, Resource: resource, PrevHash: prevHash, } h := sha256.New() h.Write([]byte(entry.VaultID)) h.Write([]byte(entry.Actor)) h.Write([]byte(entry.Action)) h.Write([]byte(entry.Resource)) h.Write([]byte(entry.PrevHash)) entry.Hash = hex.EncodeToString(h.Sum(nil)) al.entries = append(al.entries, entry) } // GetAuditLog returns entries for a vaultID since a given time. // Pass time.Time{} (zero) to get all entries. func (al *AuditLog) GetAuditLog(vaultID string, since time.Time) []AuditEntry { al.mu.RLock() defer al.mu.RUnlock() var result []AuditEntry for _, e := range al.entries { if e.VaultID != vaultID { continue } if !since.IsZero() && e.Timestamp.Before(since) { continue } result = append(result, e) } return result } // MerkleRoot returns the hash of the last entry, which is the root of the // hash chain. This is the value anchored to chain. // Returns empty string if the log is empty. func (al *AuditLog) MerkleRoot() string { al.mu.RLock() defer al.mu.RUnlock() if len(al.entries) == 0 { return "" } return al.entries[len(al.entries)-1].Hash } // Len returns the number of entries in the audit log. func (al *AuditLog) Len() int { al.mu.RLock() defer al.mu.RUnlock() return len(al.entries) } // Verify checks that the hash chain is consistent. // Returns true if every entry's PrevHash matches the previous entry's Hash. func (al *AuditLog) Verify() bool { al.mu.RLock() defer al.mu.RUnlock() for i, e := range al.entries { // Recompute hash h := sha256.New() h.Write([]byte(e.VaultID)) h.Write([]byte(e.Actor)) h.Write([]byte(e.Action)) h.Write([]byte(e.Resource)) h.Write([]byte(e.PrevHash)) computed := hex.EncodeToString(h.Sum(nil)) if computed != e.Hash { return false } if i > 0 && e.PrevHash != al.entries[i-1].Hash { return false } if i == 0 && e.PrevHash != "" { return false } } return true } ]txF// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault // Confidential compute interface for vault. // // This is an OPT-IN layer for running computations on encrypted data. // It is NOT the default path. Normal vault operations (Put/Get/Sync/Anchor) // work on plaintext after DEK decryption as before. // // Use confidential queries when you need: // - Encrypted policy checks (does user X have capability Y?) // - Aggregations without exposing individual records // - Pattern matching on sensitive data // - Compliance checks that should not reveal underlying data // // The baseline LocalConfidentialEngine decrypts locally, computes, and // returns results. It exists so the interface is exercised now. Swap in // a real FHE (TFHE, OpenFHE) or ZK (Groth16, PLONK) engine later // without changing callers. // ConfidentialQuery describes a computation to run on encrypted data. type ConfidentialQuery struct { Operation string // "sum", "count", "match", "policy_check" Target string // collection or key pattern Params interface{} // query-specific parameters } // ConfidentialResult holds the output of a confidential computation. type ConfidentialResult struct { Value interface{} // result (may be encrypted or plaintext depending on engine) Proof []byte // hash-based proof of correct computation (optional) Encrypted bool // whether Value is still encrypted } // ConfidentialEngine processes queries on encrypted data. // Implementations range from "decrypt locally and compute" (LocalConfidentialEngine) // to full FHE/ZK backends. The interface is the same. type ConfidentialEngine interface { Execute(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) Verify(result *ConfidentialResult) (bool, error) } ۜ~x// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "crypto/sha256" "encoding/json" "fmt" "strconv" "strings" ) // LocalConfidentialEngine is the baseline confidential compute engine. // It decrypts data locally, runs the computation, and returns plaintext results // with a hash-based proof of computation. // // This is NOT FHE. It exists to exercise the ConfidentialEngine interface // so callers are written correctly before a real FHE/ZK backend is plugged in. // The proof is a SHA-256 hash binding the query + result — verifiable but // not zero-knowledge. type LocalConfidentialEngine struct{} // Execute runs a confidential query against a session's encrypted store. // Supported operations: // - "count" — count keys matching Target prefix // - "sum" — sum numeric values for keys matching Target prefix // - "match" — check if key Target equals Params (string) // - "policy_check" — check if subject (Target) has action (Params) via PolicyEngine func (e *LocalConfidentialEngine) Execute(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) { if query == nil { return nil, fmt.Errorf("vault/confidential: nil query") } switch query.Operation { case "count": return e.executeCount(session, query) case "sum": return e.executeSum(session, query) case "match": return e.executeMatch(session, query) case "policy_check": return e.executePolicyCheck(session, query) default: return nil, fmt.Errorf("vault/confidential: unknown operation %q", query.Operation) } } // Verify checks that a result's proof matches its value. // For the local engine, the proof is SHA-256(json(Value)). func (e *LocalConfidentialEngine) Verify(result *ConfidentialResult) (bool, error) { if result == nil { return false, fmt.Errorf("vault/confidential: nil result") } if len(result.Proof) == 0 { return false, nil } expected, err := computeProof(result.Value) if err != nil { return false, err } if len(expected) != len(result.Proof) { return false, nil } for i := range expected { if expected[i] != result.Proof[i] { return false, nil } } return true, nil } func (e *LocalConfidentialEngine) executeCount(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) { session.mu.RLock() defer session.mu.RUnlock() count := 0 prefix := query.Target for key := range session.store { if strings.HasPrefix(key, prefix) { count++ } } proof, err := computeProof(count) if err != nil { return nil, err } return &ConfidentialResult{ Value: count, Proof: proof, Encrypted: false, }, nil } func (e *LocalConfidentialEngine) executeSum(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) { session.mu.RLock() defer session.mu.RUnlock() shard := &UserShard{DEK: session.dek} var total float64 prefix := query.Target for key, encrypted := range session.store { if !strings.HasPrefix(key, prefix) { continue } plaintext, err := shard.Decrypt(encrypted) if err != nil { continue // skip entries that fail decryption } val, err := strconv.ParseFloat(strings.TrimSpace(string(plaintext)), 64) if err != nil { continue // skip non-numeric values } total += val } proof, err := computeProof(total) if err != nil { return nil, err } return &ConfidentialResult{ Value: total, Proof: proof, Encrypted: false, }, nil } func (e *LocalConfidentialEngine) executeMatch(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) { session.mu.RLock() defer session.mu.RUnlock() encrypted, ok := session.store[query.Target] if !ok { proof, _ := computeProof(false) return &ConfidentialResult{Value: false, Proof: proof, Encrypted: false}, nil } shard := &UserShard{DEK: session.dek} plaintext, err := shard.Decrypt(encrypted) if err != nil { return nil, fmt.Errorf("vault/confidential: decrypt: %w", err) } expected, ok := query.Params.(string) if !ok { return nil, fmt.Errorf("vault/confidential: match params must be string") } matched := string(plaintext) == expected proof, err := computeProof(matched) if err != nil { return nil, err } return &ConfidentialResult{ Value: matched, Proof: proof, Encrypted: false, }, nil } func (e *LocalConfidentialEngine) executePolicyCheck(session *Session, query *ConfidentialQuery) (*ConfidentialResult, error) { // Params must be a *PolicyEngine pe, ok := query.Params.(*PolicyEngine) if !ok { return nil, fmt.Errorf("vault/confidential: policy_check params must be *PolicyEngine") } // Target format: "subject:resource:action" // Subject is before the first ":", action is after the last ":", // resource is everything in between. This allows colons in resource names // (e.g., "alice:vault:acme:docs:read" → subject=alice, resource=vault:acme:docs, action=read). firstColon := strings.IndexByte(query.Target, ':') lastColon := strings.LastIndexByte(query.Target, ':') if firstColon < 0 || firstColon == lastColon { return nil, fmt.Errorf("vault/confidential: policy_check target must be subject:resource:action") } subject := query.Target[:firstColon] resource := query.Target[firstColon+1 : lastColon] action := query.Target[lastColon+1:] allowed := pe.Check(subject, resource, action) proof, err := computeProof(allowed) if err != nil { return nil, err } return &ConfidentialResult{ Value: allowed, Proof: proof, Encrypted: false, }, nil } // computeProof generates a SHA-256 hash binding the result value. func computeProof(value interface{}) ([]byte, error) { data, err := json.Marshal(value) if err != nil { return nil, fmt.Errorf("vault/confidential: marshal proof: %w", err) } h := sha256.Sum256(data) return h[:], nil } fĽx=!// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "testing" "time" ) // ─── Confidential Compute ─────────────────────────────────────────────────── func TestConfidentialCount(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") s.Put("doc:a", []byte("1")) s.Put("doc:b", []byte("2")) s.Put("doc:c", []byte("3")) s.Put("other:x", []byte("4")) engine := &LocalConfidentialEngine{} result, err := engine.Execute(s, &ConfidentialQuery{ Operation: "count", Target: "doc:", }) if err != nil { t.Fatal(err) } if result.Value.(int) != 3 { t.Fatalf("count = %v, want 3", result.Value) } if result.Encrypted { t.Fatal("local engine should return plaintext") } // Verify proof ok, err := engine.Verify(result) if err != nil { t.Fatal(err) } if !ok { t.Fatal("proof verification failed") } } func TestConfidentialMatch(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") s.Put("status", []byte("active")) engine := &LocalConfidentialEngine{} // Positive match result, err := engine.Execute(s, &ConfidentialQuery{ Operation: "match", Target: "status", Params: "active", }) if err != nil { t.Fatal(err) } if result.Value.(bool) != true { t.Fatal("expected match") } // Negative match result, err = engine.Execute(s, &ConfidentialQuery{ Operation: "match", Target: "status", Params: "inactive", }) if err != nil { t.Fatal(err) } if result.Value.(bool) != false { t.Fatal("expected no match") } // Missing key result, err = engine.Execute(s, &ConfidentialQuery{ Operation: "match", Target: "nonexistent", Params: "anything", }) if err != nil { t.Fatal(err) } if result.Value.(bool) != false { t.Fatal("expected false for missing key") } } func TestConfidentialPolicyCheck(t *testing.T) { pe := NewPolicyEngine() pe.Grant(&Capability{ Issuer: "did:lux:org:acme", Subject: "alice", Resource: "vault:acme:*", Actions: []string{"read"}, }) v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") engine := &LocalConfidentialEngine{} // Check via confidential query result, err := engine.Execute(s, &ConfidentialQuery{ Operation: "policy_check", Target: "alice:vault:acme:docs:read", Params: pe, }) if err != nil { t.Fatal(err) } if result.Value.(bool) != true { t.Fatal("policy check should pass") } ok, err := engine.Verify(result) if err != nil { t.Fatal(err) } if !ok { t.Fatal("proof verification failed") } // Denied action result, err = engine.Execute(s, &ConfidentialQuery{ Operation: "policy_check", Target: "alice:vault:acme:docs:write", Params: pe, }) if err != nil { t.Fatal(err) } if result.Value.(bool) != false { t.Fatal("policy check should deny write") } } // ─── Policy Engine ────────────────────────────────────────────────────────── func TestPolicyGrant_AllowsAccess(t *testing.T) { pe := NewPolicyEngine() err := pe.Grant(&Capability{ Issuer: "did:lux:org:acme", Subject: "did:lux:user:alice", Resource: "vault:acme:*", Actions: []string{"read", "write"}, }) if err != nil { t.Fatal(err) } if !pe.Check("did:lux:user:alice", "vault:acme:docs", "read") { t.Fatal("alice should have read access") } if !pe.Check("did:lux:user:alice", "vault:acme:keys", "write") { t.Fatal("alice should have write access") } } func TestPolicyCheck_DeniesUnauthorized(t *testing.T) { pe := NewPolicyEngine() pe.Grant(&Capability{ Issuer: "did:lux:org:acme", Subject: "did:lux:user:alice", Resource: "vault:acme:docs", Actions: []string{"read"}, }) // Bob has no capabilities if pe.Check("did:lux:user:bob", "vault:acme:docs", "read") { t.Fatal("bob should not have access") } // Alice lacks write if pe.Check("did:lux:user:alice", "vault:acme:docs", "write") { t.Fatal("alice should not have write access") } // Wrong resource if pe.Check("did:lux:user:alice", "vault:other:docs", "read") { t.Fatal("alice should not have access to other vault") } } func TestPolicyRevoke(t *testing.T) { pe := NewPolicyEngine() cap := &Capability{ Issuer: "did:lux:org:acme", Subject: "did:lux:user:alice", Resource: "vault:acme:*", Actions: []string{"read"}, } pe.Grant(cap) // Access works before revoke if !pe.Check("did:lux:user:alice", "vault:acme:docs", "read") { t.Fatal("should have access before revoke") } // Revoke if err := pe.Revoke(cap.ID); err != nil { t.Fatal(err) } // Access denied after revoke if pe.Check("did:lux:user:alice", "vault:acme:docs", "read") { t.Fatal("should not have access after revoke") } // List should be empty caps := pe.List("did:lux:user:alice") if len(caps) != 0 { t.Fatalf("expected 0 caps after revoke, got %d", len(caps)) } // Revoke unknown ID returns error if err := pe.Revoke("nonexistent"); err == nil { t.Fatal("should error on unknown cap ID") } } func TestPolicyExpiry(t *testing.T) { pe := NewPolicyEngine() // Grant a capability that already expired pe.Grant(&Capability{ Issuer: "did:lux:org:acme", Subject: "did:lux:user:alice", Resource: "vault:acme:*", Actions: []string{"read"}, Expires: time.Now().Add(-1 * time.Hour), // expired 1 hour ago }) if pe.Check("did:lux:user:alice", "vault:acme:docs", "read") { t.Fatal("expired capability should not grant access") } // Grant a non-expired capability pe.Grant(&Capability{ Issuer: "did:lux:org:acme", Subject: "did:lux:user:bob", Resource: "vault:acme:*", Actions: []string{"read"}, Expires: time.Now().Add(1 * time.Hour), // expires in 1 hour }) if !pe.Check("did:lux:user:bob", "vault:acme:docs", "read") { t.Fatal("non-expired capability should grant access") } } // ─── Audit Log ────────────────────────────────────────────────────────────── func TestAuditLog_RecordsOps(t *testing.T) { al := NewAuditLog() al.Record("org:alice", "did:lux:user:alice", "put", "key:prefs") al.Record("org:alice", "did:lux:user:alice", "get", "key:prefs") al.Record("org:bob", "did:lux:user:bob", "put", "key:config") if al.Len() != 3 { t.Fatalf("len = %d, want 3", al.Len()) } // Filter by vault ID aliceEntries := al.GetAuditLog("org:alice", time.Time{}) if len(aliceEntries) != 2 { t.Fatalf("alice entries = %d, want 2", len(aliceEntries)) } bobEntries := al.GetAuditLog("org:bob", time.Time{}) if len(bobEntries) != 1 { t.Fatalf("bob entries = %d, want 1", len(bobEntries)) } // Verify hash chain integrity if !al.Verify() { t.Fatal("audit log hash chain verification failed") } // First entry has no prev hash if aliceEntries[0].PrevHash != "" { t.Fatal("first entry should have empty PrevHash") } // Second entry links to first if aliceEntries[1].PrevHash == "" { t.Fatal("second entry should have non-empty PrevHash") } } func TestAuditLog_MerkleRoot(t *testing.T) { al := NewAuditLog() // Empty log has no root if al.MerkleRoot() != "" { t.Fatal("empty log should have empty merkle root") } al.Record("org:alice", "did:lux:user:alice", "put", "key:a") root1 := al.MerkleRoot() if root1 == "" { t.Fatal("merkle root should not be empty after record") } al.Record("org:alice", "did:lux:user:alice", "put", "key:b") root2 := al.MerkleRoot() if root2 == "" { t.Fatal("merkle root should not be empty") } if root2 == root1 { t.Fatal("merkle root should change after new entry") } // Root is deterministic (verify hash chain) if !al.Verify() { t.Fatal("hash chain verification failed") } // Root equals last entry's hash entries := al.GetAuditLog("org:alice", time.Time{}) lastHash := entries[len(entries)-1].Hash if al.MerkleRoot() != lastHash { t.Fatalf("merkle root %q != last hash %q", al.MerkleRoot(), lastHash) } } "x/package vault import ( "crypto/rand" "fmt" "sync" "testing" ) // ─── E2E: Full user lifecycle ──────────────────────────────────────────────── // // Simulates: register → create vault → store data → sync across devices → // anchor to chain → verify isolation → revoke device // // In production: // - "register" = WebAuthn passkey enrollment on I-Chain // - "unlock" = biometric assertion → K-Chain DEK unwrap // - "sync" = CRDT ops over ZAP between devices // - "anchor" = merkle root committed to I-Chain func TestE2E_FullUserLifecycle(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) v, err := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "zoo-labs", }) if err != nil { t.Fatal(err) } defer v.Close() // 1. User registers (passkey enrollment → DID created on I-Chain) session, err := v.OpenUser("user-did:lux:zoo:alice") if err != nil { t.Fatal(err) } // 2. Store private data (biometric unlock → DEK available) if err := session.Put("profile", []byte(`{"name":"Alice","email":"alice@zoo.ngo"}`)); err != nil { t.Fatal(err) } if err := session.Put("api_key", []byte("sk_live_abc123")); err != nil { t.Fatal(err) } if err := session.Put("preferences", []byte(`{"theme":"dark","lang":"en"}`)); err != nil { t.Fatal(err) } // 3. Verify reads profile, err := session.Get("profile") if err != nil { t.Fatal(err) } if string(profile) != `{"name":"Alice","email":"alice@zoo.ngo"}` { t.Fatalf("profile = %q", profile) } // 4. Anchor to chain receipt, err := session.Anchor() if err != nil { t.Fatal(err) } if receipt.OpCount != 3 { t.Fatalf("opcount = %d, want 3", receipt.OpCount) } if receipt.MerkleRoot == "" { t.Fatal("merkle root empty") } t.Logf("anchored: root=%s ops=%d user=%s", receipt.MerkleRoot, receipt.OpCount, receipt.UserID) } func TestE2E_MultiDeviceSync(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "zoo-labs", }) defer v.Close() // Device 1: laptop device1, _ := v.OpenUser("alice") device1.Put("doc", []byte("v1: written on laptop")) // Device 2: phone (same user, same DEK) // In production: phone does WebAuthn assertion → gets same DEK from K-Chain device2Session := &Session{ userID: "alice-phone", orgID: "zoo-labs", dek: device1.dek, // same DEK (derived from same user) store: make(map[string][]byte), oplog: make([]Op, 0), version: make(map[string]uint64), } // Sync: device1 pushes ops, device2 merges device1.mu.RLock() ops := make([]Op, len(device1.oplog)) copy(ops, device1.oplog) device1.mu.RUnlock() device2Session.Merge(ops) // Device 2 can now read device 1's data (same DEK) got, err := device2Session.Get("doc") if err != nil { t.Fatal(err) } if string(got) != "v1: written on laptop" { t.Fatalf("device2 got %q", got) } // Device 2 writes, syncs back device2Session.Put("doc", []byte("v2: edited on phone")) device2Session.mu.RLock() phoneOps := make([]Op, len(device2Session.oplog)) copy(phoneOps, device2Session.oplog) device2Session.mu.RUnlock() device1.Merge(phoneOps) got2, _ := device1.Get("doc") if string(got2) != "v2: edited on phone" { t.Fatalf("device1 after sync got %q", got2) } } func TestE2E_OrgMultiTenant(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) // Two orgs, same infrastructure orgA, _ := Open(SDKConfig{DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "org-a"}) orgB, _ := Open(SDKConfig{DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "org-b"}) defer orgA.Close() defer orgB.Close() alice_a, _ := orgA.OpenUser("alice") alice_b, _ := orgB.OpenUser("alice") alice_a.Put("secret", []byte("org-a-secret")) alice_b.Put("secret", []byte("org-b-secret")) // Same user, different orgs → different DEKs → different data val_a, _ := alice_a.Get("secret") val_b, _ := alice_b.Get("secret") if string(val_a) != "org-a-secret" || string(val_b) != "org-b-secret" { t.Fatal("org isolation broken") } // Cross-org decryption must fail alice_a.mu.RLock() ct := alice_a.store["secret"] alice_a.mu.RUnlock() bobShard := &UserShard{DEK: alice_b.dek} _, err := bobShard.Decrypt(ct) if err == nil { t.Fatal("cross-org decrypt should fail") } } func TestE2E_ConcurrentAccess(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "zoo-labs", }) defer v.Close() session, _ := v.OpenUser("alice") // 50 concurrent writers var wg sync.WaitGroup for i := 0; i < 50; i++ { wg.Add(1) go func(n int) { defer wg.Done() key := fmt.Sprintf("key-%d", n) val := fmt.Sprintf("value-%d", n) session.Put(key, []byte(val)) }(i) } wg.Wait() // All 50 should be readable for i := 0; i < 50; i++ { key := fmt.Sprintf("key-%d", i) val, err := session.Get(key) if err != nil { t.Fatalf("missing key-%d: %v", i, err) } if string(val) != fmt.Sprintf("value-%d", i) { t.Fatalf("key-%d = %q", i, val) } } // Oplog should have exactly 50 entries session.mu.RLock() opCount := len(session.oplog) session.mu.RUnlock() if opCount != 50 { t.Fatalf("oplog = %d, want 50", opCount) } } func TestE2E_AnchorDeterministic(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "zoo-labs", }) defer v.Close() session, _ := v.OpenUser("alice") session.Put("a", []byte("1")) session.Put("b", []byte("2")) r1, _ := session.Anchor() r2, _ := session.Anchor() // Same state → same merkle root if r1.MerkleRoot != r2.MerkleRoot { t.Fatalf("anchor not deterministic: %s != %s", r1.MerkleRoot, r2.MerkleRoot) } // New write → different root session.Put("c", []byte("3")) r3, _ := session.Anchor() if r3.MerkleRoot == r1.MerkleRoot { t.Fatal("anchor should change after new write") } } func TestE2E_DeviceRevocation(t *testing.T) { masterKey := make([]byte, 32) rand.Read(masterKey) v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: masterKey, OrgID: "zoo-labs", }) defer v.Close() session, _ := v.OpenUser("alice") session.Put("secret", []byte("sensitive")) // Simulate device revocation: close session, zero DEK session.close() // After close, reads should fail _, err := session.Get("secret") if err == nil { t.Fatal("reads should fail after session close (device revoked)") } } =`bLx// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "crypto/sha256" "encoding/hex" "encoding/json" "fmt" "github.com/hanzoai/base/core" "github.com/hanzoai/base/tools/router" ) // registerRoutes adds vault API routes. // All routes require authentication — the user ID comes from the auth context. func (p *plugin) registerRoutes(r *router.Router[*core.RequestEvent]) { api := r.Group("/vault") // Require auth for all vault routes. api.BindFunc(func(e *core.RequestEvent) error { if e.Auth == nil { return e.UnauthorizedError("auth required", nil) } return e.Next() }) // GET /vault/status — shard status for current user api.GET("/status", func(e *core.RequestEvent) error { userID := e.Auth.Id shard, err := p.GetShard(userID) if err != nil { return e.InternalServerError("", err) } return e.JSON(200, map[string]interface{}{ "user_id": userID, "shard": shard.Path, "encrypted": true, "sync": p.config.SyncEnabled, }) }) // POST /vault/put — store encrypted key-value api.POST("/put", func(e *core.RequestEvent) error { userID := e.Auth.Id shard, err := p.GetShard(userID) if err != nil { return e.InternalServerError("", err) } var req struct { Key string `json:"key"` Value string `json:"value"` } if err := e.BindBody(&req); err != nil { return e.BadRequestError("", nil) } encrypted, err := shard.Encrypt([]byte(req.Value)) if err != nil { return e.InternalServerError("encrypt failed", err) } // In full implementation: write to user's SQLite shard + CRDT log _ = encrypted return e.JSON(200, map[string]string{ "status": "stored", "key": req.Key, "shard": shard.UserID, }) }) // POST /vault/get — retrieve and decrypt api.POST("/get", func(e *core.RequestEvent) error { userID := e.Auth.Id _, err := p.GetShard(userID) if err != nil { return e.InternalServerError("", err) } var req struct { Key string `json:"key"` } if err := e.BindBody(&req); err != nil { return e.BadRequestError("", nil) } // In full implementation: read from SQLite shard, decrypt with DEK return e.JSON(200, map[string]string{ "key": req.Key, "status": "decrypted", }) }) // GET /vault/anchor — get current merkle root for chain anchoring api.GET("/anchor", func(e *core.RequestEvent) error { userID := e.Auth.Id shard, err := p.GetShard(userID) if err != nil { return e.InternalServerError("", err) } // Compute merkle root of the shard state hash := sha256.Sum256([]byte(shard.Path + ":" + shard.UserID)) return e.JSON(200, map[string]string{ "user_id": userID, "merkle_root": hex.EncodeToString(hash[:]), "chain": p.config.ChainRPC, "status": "ready_to_anchor", }) }) // GET /vault/keys — list user's encryption keys (metadata only, never DEK) api.GET("/keys", func(e *core.RequestEvent) error { userID := e.Auth.Id return e.JSON(200, map[string]interface{}{ "user_id": userID, "org_id": p.config.OrgID, "key_hierarchy": map[string]string{ "master_kek": "HSM / K-Chain ML-KEM (never exported)", "org_kek": fmt.Sprintf("HMAC-SHA256(master, vault:org:%s)", p.config.OrgID), "user_dek": fmt.Sprintf("HMAC-SHA256(orgKEK, vault:user:%s)", userID), "encryption": "AES-256-GCM per entry", }, }) }) // POST /vault/sync — trigger CRDT sync with peers api.POST("/sync", func(e *core.RequestEvent) error { if !p.config.SyncEnabled { return e.JSON(200, map[string]string{"status": "sync_disabled"}) } return e.JSON(200, map[string]string{"status": "sync_triggered"}) }) // POST /vault/export — export encrypted shard for backup/migration api.POST("/export", func(e *core.RequestEvent) error { userID := e.Auth.Id shard, err := p.GetShard(userID) if err != nil { return e.InternalServerError("", err) } // In full implementation: read SQLite file, it's already encrypted return e.JSON(200, map[string]interface{}{ "user_id": userID, "path": shard.Path, "format": "encrypted-sqlite", "note": "file is AES-256-GCM encrypted with user DEK — safe to store anywhere", }) }) } func writeJSON(w interface{ Write([]byte) (int, error) }, v interface{}) { json.NewEncoder(w).Encode(v) } ^xq// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "sync" "sync/atomic" ) // UsageReport holds operation counts for a vault. type UsageReport struct { VaultID string `json:"vaultId"` Puts int64 `json:"puts"` Gets int64 `json:"gets"` Syncs int64 `json:"syncs"` Anchors int64 `json:"anchors"` } // Meter tracks per-vault operation counts. // Designed for pay-per-use billing but works locally too. type Meter struct { mu sync.RWMutex vaults map[string]*vaultCounters } type vaultCounters struct { puts atomic.Int64 gets atomic.Int64 syncs atomic.Int64 anchors atomic.Int64 } // NewMeter creates a new usage meter. func NewMeter() *Meter { return &Meter{ vaults: make(map[string]*vaultCounters), } } func (m *Meter) counters(vaultID string) *vaultCounters { m.mu.RLock() c, ok := m.vaults[vaultID] m.mu.RUnlock() if ok { return c } m.mu.Lock() defer m.mu.Unlock() // Double-check after write lock. if c, ok := m.vaults[vaultID]; ok { return c } c = &vaultCounters{} m.vaults[vaultID] = c return c } // RecordPut increments the put counter for a vault. func (m *Meter) RecordPut(vaultID string) { m.counters(vaultID).puts.Add(1) } // RecordGet increments the get counter for a vault. func (m *Meter) RecordGet(vaultID string) { m.counters(vaultID).gets.Add(1) } // RecordSync increments the sync counter for a vault. func (m *Meter) RecordSync(vaultID string) { m.counters(vaultID).syncs.Add(1) } // RecordAnchor increments the anchor counter for a vault. func (m *Meter) RecordAnchor(vaultID string) { m.counters(vaultID).anchors.Add(1) } // GetUsage returns the usage report for a vault. func (m *Meter) GetUsage(vaultID string) *UsageReport { c := m.counters(vaultID) return &UsageReport{ VaultID: vaultID, Puts: c.puts.Load(), Gets: c.gets.Load(), Syncs: c.syncs.Load(), Anchors: c.anchors.Load(), } } // Reset zeroes all counters for a vault. func (m *Meter) Reset(vaultID string) { c := m.counters(vaultID) c.puts.Store(0) c.gets.Store(0) c.syncs.Store(0) c.anchors.Store(0) } exYQoF~Ŗ@[2(_͡8Y \`$XQ\ޒt?__r,;0,q;;;7XrŲQ(<<ϣx8<E<<ZVR_4c1RK)Y.ųӣ1WZY"*+z]E;U:nZZ]gD)P!DoZbgY-EuZ^㗢 ITb,CT{E2~Id*QgM^L|D/N{E<% I+^rt;)eWVQ6ٿ/DbԣR/g =z,jj Vb yS՗rqh@Al9cBӘUM18LZO6{ϵZ;xXt/ȫs YXyyqDe]񘑽TU=cϒ)F[wDMa"2Z77ZR B$p\Ț+B8IRi5DȊ P +FZ5qU UNدPD+yٺTxuSXV~dRr'G Z=7 5}d*YrLG/4@=|YYxI$gY\qʫRfͻ\-D2|`S$ѐ,"+"ޔMy}F *&4ob'a)q7[~MLC0|ހmv[ Yjű@ E>& $ \A]jr2Fz+G~ci}cz7pu[+21{!56/::ij^호@2ߦCo?h B%\@}baA* z2AbrYIB _=?#`Nj%3 $SdZd9 Fg g;.OJQ#c<#CJ8&['`<۩ ䷰d#Y}U,6~}|eE=ǐ |cbőYp:uZ JsPp%C+'V2 :/)qf0ia9Jn+_2z@ؔ^4E0=7v/U]e\RSPN퉉DKT)3_`koP<2aSFO" ΐR~h '8isb5x'[M-bwQZ@v{2/pX]2_hNzpN(t) ؠ=K7rߑIu˸hʻO~ Iܙi3 .SDž7 [Ϣܥ^ċQ2++P-( ѳ { ֍H;/;?Ynjr Rd nawW|)\,2:ިժ Tѝ0Jg U=pl[kMMgY* *_pYX̒,x`\RPH3hDT"Ѐ>*3CDxv#se.t }Ln7Tp2ǪABu]&+ωVℲ;/ tK_E@ ̐7^ {=w j*+0u[z';; , OqxYs8#k!r- H՗gԡcJt4"W62]F&br2ʧUr4;hb ZK"[;):&2{7mEQ)u[.5qo:|*g..?ů#NDKܷb,7(iר^öz-/ j!>6}[}.恌5  )Xo&J8_,H5΅uZe.axo+V1U \242j $yB-MgYpF펚.,M Q`cT`tBl,e}@&tl-jZ`)Yx{94ii4%m:cЭ>r?X<OY Uw:+mvYjpm:u CB(0kX8OunygrU42owkH= k #bl}  >DZ0"w@k]ΌeE 0 && pattern[len(pattern)-1] == '*' { prefix := pattern[:len(pattern)-1] return len(target) >= len(prefix) && target[:len(prefix)] == prefix } return false } DxW // Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "encoding/json" "fmt" "time" ) // Bundle is a portable vault export: JSON envelope with encrypted data + oplog + metadata. type Bundle struct { Version int `json:"version"` UserID string `json:"userId"` OrgID string `json:"orgId"` Timestamp int64 `json:"timestamp"` Snapshot json.RawMessage `json:"snapshot"` // encrypted store entries Oplog []Op `json:"oplog"` Metadata BundleMetadata `json:"metadata"` } // BundleMetadata holds non-sensitive metadata about the bundle. type BundleMetadata struct { KeyCount int `json:"keyCount"` OpCount int `json:"opCount"` Format string `json:"format"` // "vault-bundle-v3" } // ExportVault exports the session's encrypted state as a portable JSON bundle. // The bundle contains ciphertext only — the DEK is NOT included. // The caller must supply the DEK separately to import. func ExportVault(session *Session) ([]byte, error) { session.mu.RLock() defer session.mu.RUnlock() if session.store == nil { return nil, fmt.Errorf("vault: session is closed") } // Serialize the encrypted store as a map of key → hex-encoded ciphertext. snapshot := make(map[string][]byte, len(session.store)) for k, v := range session.store { snapshot[k] = v } snapshotJSON, err := json.Marshal(snapshot) if err != nil { return nil, fmt.Errorf("vault: marshal snapshot: %w", err) } oplog := make([]Op, len(session.oplog)) copy(oplog, session.oplog) bundle := Bundle{ Version: 3, UserID: session.userID, OrgID: session.orgID, Timestamp: time.Now().Unix(), Snapshot: snapshotJSON, Oplog: oplog, Metadata: BundleMetadata{ KeyCount: len(snapshot), OpCount: len(oplog), Format: "vault-bundle-v3", }, } data, err := json.Marshal(bundle) if err != nil { return nil, fmt.Errorf("vault: marshal bundle: %w", err) } return data, nil } // ImportVault imports a vault from a portable bundle. // The caller must provide the correct DEK to decrypt values. func ImportVault(data []byte, dek []byte) (*Session, error) { if len(dek) != 32 { return nil, fmt.Errorf("vault: DEK must be 32 bytes") } var bundle Bundle if err := json.Unmarshal(data, &bundle); err != nil { return nil, fmt.Errorf("vault: unmarshal bundle: %w", err) } if bundle.Version != 3 { return nil, fmt.Errorf("vault: unsupported bundle version %d", bundle.Version) } // Deserialize the encrypted store. var snapshot map[string][]byte if err := json.Unmarshal(bundle.Snapshot, &snapshot); err != nil { return nil, fmt.Errorf("vault: unmarshal snapshot: %w", err) } // Rebuild version map from oplog. version := make(map[string]uint64) for _, op := range bundle.Oplog { if op.Seq > version[op.NodeID] { version[op.NodeID] = op.Seq } } session := &Session{ userID: bundle.UserID, orgID: bundle.OrgID, dek: make([]byte, 32), store: snapshot, oplog: bundle.Oplog, version: version, } copy(session.dek, dek) return session, nil } Fx. // Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "fmt" "sync" ) // SyncProvider relays encrypted CRDT ops between devices/users. type SyncProvider interface { Push(vaultID string, ops []Op) error Pull(vaultID string, since uint64) ([]Op, error) Subscribe(vaultID string, callback func([]Op)) error } // StorageProvider stores encrypted snapshots and blobs. type StorageProvider interface { PutSnapshot(vaultID string, data []byte) (string, error) // returns content hash GetSnapshot(vaultID string, hash string) ([]byte, error) PutBlob(key string, data []byte) (string, error) GetBlob(hash string) ([]byte, error) } // RecoveryProvider assists with key recovery via threshold shares. type RecoveryProvider interface { StoreShare(userID string, shareIndex int, encryptedShare []byte) error FetchShares(userID string, indices []int) ([][]byte, error) } // ProviderRegistry discovers and manages providers. type ProviderRegistry struct { mu sync.RWMutex sync map[string]SyncProvider storage map[string]StorageProvider recovery map[string]RecoveryProvider } // NewProviderRegistry creates an empty registry. func NewProviderRegistry() *ProviderRegistry { return &ProviderRegistry{ sync: make(map[string]SyncProvider), storage: make(map[string]StorageProvider), recovery: make(map[string]RecoveryProvider), } } // RegisterSync registers a named sync provider. func (r *ProviderRegistry) RegisterSync(name string, p SyncProvider) { r.mu.Lock() defer r.mu.Unlock() r.sync[name] = p } // RegisterStorage registers a named storage provider. func (r *ProviderRegistry) RegisterStorage(name string, p StorageProvider) { r.mu.Lock() defer r.mu.Unlock() r.storage[name] = p } // RegisterRecovery registers a named recovery provider. func (r *ProviderRegistry) RegisterRecovery(name string, p RecoveryProvider) { r.mu.Lock() defer r.mu.Unlock() r.recovery[name] = p } // GetSync returns a sync provider by name. func (r *ProviderRegistry) GetSync(name string) (SyncProvider, error) { r.mu.RLock() defer r.mu.RUnlock() p, ok := r.sync[name] if !ok { return nil, fmt.Errorf("vault: sync provider %q not found", name) } return p, nil } // GetStorage returns a storage provider by name. func (r *ProviderRegistry) GetStorage(name string) (StorageProvider, error) { r.mu.RLock() defer r.mu.RUnlock() p, ok := r.storage[name] if !ok { return nil, fmt.Errorf("vault: storage provider %q not found", name) } return p, nil } // GetRecovery returns a recovery provider by name. func (r *ProviderRegistry) GetRecovery(name string) (RecoveryProvider, error) { r.mu.RLock() defer r.mu.RUnlock() p, ok := r.recovery[name] if !ok { return nil, fmt.Errorf("vault: recovery provider %q not found", name) } return p, nil }  ؎x%// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "crypto/sha256" "encoding/hex" "fmt" "os" "path/filepath" "sync" ) // ─── LocalSyncProvider ────────────────────────────────────────────────────── // LocalSyncProvider uses filesystem + channels for local/self-hosted sync. type LocalSyncProvider struct { dir string mu sync.Mutex ops map[string][]Op // vaultID → ops subscribers map[string][]func([]Op) // vaultID → callbacks } // NewLocalSyncProvider creates a sync provider backed by a directory. func NewLocalSyncProvider(dir string) (*LocalSyncProvider, error) { if err := os.MkdirAll(dir, 0700); err != nil { return nil, fmt.Errorf("vault: create sync dir: %w", err) } return &LocalSyncProvider{ dir: dir, ops: make(map[string][]Op), subscribers: make(map[string][]func([]Op)), }, nil } // Push appends ops and notifies subscribers. func (p *LocalSyncProvider) Push(vaultID string, ops []Op) error { p.mu.Lock() p.ops[vaultID] = append(p.ops[vaultID], ops...) subs := p.subscribers[vaultID] p.mu.Unlock() for _, cb := range subs { cb(ops) } return nil } // Pull returns ops with Seq > since for the given vault. func (p *LocalSyncProvider) Pull(vaultID string, since uint64) ([]Op, error) { p.mu.Lock() defer p.mu.Unlock() all := p.ops[vaultID] var result []Op for _, op := range all { if op.Seq > since { result = append(result, op) } } return result, nil } // Subscribe registers a callback for new ops. func (p *LocalSyncProvider) Subscribe(vaultID string, callback func([]Op)) error { p.mu.Lock() defer p.mu.Unlock() p.subscribers[vaultID] = append(p.subscribers[vaultID], callback) return nil } // ─── LocalStorageProvider ─────────────────────────────────────────────────── // LocalStorageProvider uses content-addressed file storage. type LocalStorageProvider struct { dir string mu sync.Mutex } // NewLocalStorageProvider creates a storage provider backed by a directory. func NewLocalStorageProvider(dir string) (*LocalStorageProvider, error) { for _, sub := range []string{"snapshots", "blobs"} { if err := os.MkdirAll(filepath.Join(dir, sub), 0700); err != nil { return nil, fmt.Errorf("vault: create storage dir: %w", err) } } return &LocalStorageProvider{dir: dir}, nil } func contentHash(data []byte) string { h := sha256.Sum256(data) return hex.EncodeToString(h[:]) } // PutSnapshot stores a snapshot and returns its content hash. func (p *LocalStorageProvider) PutSnapshot(vaultID string, data []byte) (string, error) { p.mu.Lock() defer p.mu.Unlock() hash := contentHash(data) vaultDir := filepath.Join(p.dir, "snapshots", vaultID) if err := os.MkdirAll(vaultDir, 0700); err != nil { return "", fmt.Errorf("vault: create snapshot dir: %w", err) } path := filepath.Join(vaultDir, hash) if err := os.WriteFile(path, data, 0600); err != nil { return "", fmt.Errorf("vault: write snapshot: %w", err) } return hash, nil } // GetSnapshot retrieves a snapshot by vault ID and content hash. func (p *LocalStorageProvider) GetSnapshot(vaultID string, hash string) ([]byte, error) { path := filepath.Join(p.dir, "snapshots", vaultID, hash) data, err := os.ReadFile(path) if err != nil { return nil, fmt.Errorf("vault: read snapshot: %w", err) } return data, nil } // PutBlob stores a blob and returns its content hash. func (p *LocalStorageProvider) PutBlob(key string, data []byte) (string, error) { p.mu.Lock() defer p.mu.Unlock() hash := contentHash(data) path := filepath.Join(p.dir, "blobs", hash) if err := os.WriteFile(path, data, 0600); err != nil { return "", fmt.Errorf("vault: write blob: %w", err) } return hash, nil } // GetBlob retrieves a blob by content hash. func (p *LocalStorageProvider) GetBlob(hash string) ([]byte, error) { path := filepath.Join(p.dir, "blobs", hash) data, err := os.ReadFile(path) if err != nil { return nil, fmt.Errorf("vault: read blob: %w", err) } return data, nil } // ─── LocalRecoveryProvider ────────────────────────────────────────────────── // LocalRecoveryProvider stores threshold key shares in a local directory. type LocalRecoveryProvider struct { dir string mu sync.Mutex } // NewLocalRecoveryProvider creates a recovery provider backed by a directory. func NewLocalRecoveryProvider(dir string) (*LocalRecoveryProvider, error) { if err := os.MkdirAll(dir, 0700); err != nil { return nil, fmt.Errorf("vault: create recovery dir: %w", err) } return &LocalRecoveryProvider{dir: dir}, nil } // StoreShare stores an encrypted share for a user. func (p *LocalRecoveryProvider) StoreShare(userID string, shareIndex int, encryptedShare []byte) error { p.mu.Lock() defer p.mu.Unlock() userDir := filepath.Join(p.dir, userID) if err := os.MkdirAll(userDir, 0700); err != nil { return fmt.Errorf("vault: create user recovery dir: %w", err) } path := filepath.Join(userDir, fmt.Sprintf("share-%d", shareIndex)) if err := os.WriteFile(path, encryptedShare, 0600); err != nil { return fmt.Errorf("vault: write share: %w", err) } return nil } // FetchShares retrieves encrypted shares for a user by index. func (p *LocalRecoveryProvider) FetchShares(userID string, indices []int) ([][]byte, error) { p.mu.Lock() defer p.mu.Unlock() shares := make([][]byte, 0, len(indices)) for _, idx := range indices { path := filepath.Join(p.dir, userID, fmt.Sprintf("share-%d", idx)) data, err := os.ReadFile(path) if err != nil { return nil, fmt.Errorf("vault: read share %d: %w", idx, err) } shares = append(shares, data) } return shares, nil } // ─── Interface compliance ─────────────────────────────────────────────────── var ( _ SyncProvider = (*LocalSyncProvider)(nil) _ StorageProvider = (*LocalStorageProvider)(nil) _ RecoveryProvider = (*LocalRecoveryProvider)(nil) ) H%x+D// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "bytes" "crypto/rand" "path/filepath" "sync" "testing" ) // ─── Sync Provider ────────────────────────────────────────────────────────── func TestLocalSyncProvider_PushPull(t *testing.T) { dir := t.TempDir() sp, err := NewLocalSyncProvider(dir) if err != nil { t.Fatal(err) } ops := []Op{ {Seq: 1, NodeID: "d1", Key: "a", Value: []byte("v1"), Time: 100}, {Seq: 2, NodeID: "d1", Key: "b", Value: []byte("v2"), Time: 200}, {Seq: 3, NodeID: "d1", Key: "c", Value: []byte("v3"), Time: 300}, } if err := sp.Push("vault-1", ops); err != nil { t.Fatal(err) } // Pull all ops (since=0). got, err := sp.Pull("vault-1", 0) if err != nil { t.Fatal(err) } if len(got) != 3 { t.Fatalf("got %d ops, want 3", len(got)) } // Pull only ops after seq 1. got, err = sp.Pull("vault-1", 1) if err != nil { t.Fatal(err) } if len(got) != 2 { t.Fatalf("got %d ops, want 2 (since=1)", len(got)) } if got[0].Key != "b" || got[1].Key != "c" { t.Fatalf("unexpected ops: %v", got) } // Pull from empty vault returns nothing. got, err = sp.Pull("vault-2", 0) if err != nil { t.Fatal(err) } if len(got) != 0 { t.Fatalf("expected 0 ops from empty vault, got %d", len(got)) } } func TestLocalSyncProvider_Subscribe(t *testing.T) { dir := t.TempDir() sp, err := NewLocalSyncProvider(dir) if err != nil { t.Fatal(err) } var received []Op var mu sync.Mutex if err := sp.Subscribe("vault-1", func(ops []Op) { mu.Lock() received = append(received, ops...) mu.Unlock() }); err != nil { t.Fatal(err) } ops := []Op{ {Seq: 1, NodeID: "d1", Key: "x", Value: []byte("y")}, } sp.Push("vault-1", ops) mu.Lock() defer mu.Unlock() if len(received) != 1 { t.Fatalf("subscriber got %d ops, want 1", len(received)) } if received[0].Key != "x" { t.Fatalf("subscriber got key %q, want x", received[0].Key) } } // ─── Storage Provider ─────────────────────────────────────────────────────── func TestLocalStorageProvider_PutGetSnapshot(t *testing.T) { dir := t.TempDir() sp, err := NewLocalStorageProvider(dir) if err != nil { t.Fatal(err) } data := []byte("encrypted-sqlite-snapshot-data") hash, err := sp.PutSnapshot("vault-1", data) if err != nil { t.Fatal(err) } if hash == "" { t.Fatal("hash should not be empty") } got, err := sp.GetSnapshot("vault-1", hash) if err != nil { t.Fatal(err) } if !bytes.Equal(got, data) { t.Fatalf("got %q, want %q", got, data) } // Get with wrong hash fails. _, err = sp.GetSnapshot("vault-1", "badhash") if err == nil { t.Fatal("expected error for bad hash") } } func TestLocalStorageProvider_ContentAddressed(t *testing.T) { dir := t.TempDir() sp, err := NewLocalStorageProvider(dir) if err != nil { t.Fatal(err) } data := []byte("same-content") // Same content → same hash. hash1, err := sp.PutBlob("key1", data) if err != nil { t.Fatal(err) } hash2, err := sp.PutBlob("key2", data) if err != nil { t.Fatal(err) } if hash1 != hash2 { t.Fatalf("same content produced different hashes: %s != %s", hash1, hash2) } // Different content → different hash. hash3, err := sp.PutBlob("key3", []byte("different")) if err != nil { t.Fatal(err) } if hash1 == hash3 { t.Fatal("different content should produce different hashes") } // Retrieve by hash. got, err := sp.GetBlob(hash1) if err != nil { t.Fatal(err) } if !bytes.Equal(got, data) { t.Fatalf("got %q, want %q", got, data) } } func TestLocalStorageProvider_PutGetBlob(t *testing.T) { dir := t.TempDir() sp, err := NewLocalStorageProvider(dir) if err != nil { t.Fatal(err) } // Store a large-ish blob. blob := make([]byte, 4096) rand.Read(blob) hash, err := sp.PutBlob("big-blob", blob) if err != nil { t.Fatal(err) } got, err := sp.GetBlob(hash) if err != nil { t.Fatal(err) } if !bytes.Equal(got, blob) { t.Fatal("blob round-trip failed") } } // ─── Recovery Provider ────────────────────────────────────────────────────── func TestLocalRecoveryProvider_StoreAndFetch(t *testing.T) { dir := t.TempDir() rp, err := NewLocalRecoveryProvider(dir) if err != nil { t.Fatal(err) } shares := [][]byte{ []byte("share-0-encrypted"), []byte("share-1-encrypted"), []byte("share-2-encrypted"), } for i, s := range shares { if err := rp.StoreShare("alice", i, s); err != nil { t.Fatalf("store share %d: %v", i, err) } } got, err := rp.FetchShares("alice", []int{0, 2}) if err != nil { t.Fatal(err) } if len(got) != 2 { t.Fatalf("got %d shares, want 2", len(got)) } if !bytes.Equal(got[0], shares[0]) { t.Fatalf("share 0: got %q, want %q", got[0], shares[0]) } if !bytes.Equal(got[1], shares[2]) { t.Fatalf("share 2: got %q, want %q", got[1], shares[2]) } // Fetch non-existent share fails. _, err = rp.FetchShares("alice", []int{99}) if err == nil { t.Fatal("expected error for missing share") } } // ─── Export/Import ────────────────────────────────────────────────────────── func TestExportImport_RoundTrip(t *testing.T) { key := testMasterKey() v, err := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: key, OrgID: "test-org", }) if err != nil { t.Fatal(err) } defer v.Close() session, err := v.OpenUser("alice") if err != nil { t.Fatal(err) } // Write some data. session.Put("profile", []byte(`{"name":"Alice"}`)) session.Put("settings", []byte(`{"theme":"dark"}`)) // Export. bundle, err := ExportVault(session) if err != nil { t.Fatal(err) } // Import with the same DEK. session.mu.RLock() dek := make([]byte, 32) copy(dek, session.dek) session.mu.RUnlock() imported, err := ImportVault(bundle, dek) if err != nil { t.Fatal(err) } // Verify data survives round-trip. profile, err := imported.Get("profile") if err != nil { t.Fatal(err) } if string(profile) != `{"name":"Alice"}` { t.Fatalf("profile = %q", profile) } settings, err := imported.Get("settings") if err != nil { t.Fatal(err) } if string(settings) != `{"theme":"dark"}` { t.Fatalf("settings = %q", settings) } // Oplog is preserved. imported.mu.RLock() opCount := len(imported.oplog) imported.mu.RUnlock() if opCount != 2 { t.Fatalf("oplog count = %d, want 2", opCount) } } func TestExportImport_WrongDEKFails(t *testing.T) { key := testMasterKey() v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: key, OrgID: "test-org", }) defer v.Close() session, _ := v.OpenUser("alice") session.Put("secret", []byte("classified")) bundle, err := ExportVault(session) if err != nil { t.Fatal(err) } // Import with wrong DEK. wrongDEK := testMasterKey() imported, err := ImportVault(bundle, wrongDEK) if err != nil { t.Fatal(err) // import itself succeeds (it's just JSON) } // But decryption with the wrong key fails. _, err = imported.Get("secret") if err == nil { t.Fatal("decryption with wrong DEK should fail") } } func TestExportVault_ClosedSessionFails(t *testing.T) { key := testMasterKey() v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: key, OrgID: "test-org", }) defer v.Close() session, _ := v.OpenUser("alice") session.close() _, err := ExportVault(session) if err == nil { t.Fatal("export of closed session should fail") } } func TestImportVault_BadDEKLength(t *testing.T) { _, err := ImportVault([]byte(`{}`), []byte("short")) if err == nil { t.Fatal("expected error for short DEK") } } // ─── Metering ─────────────────────────────────────────────────────────────── func TestUsageMetering_CountsOps(t *testing.T) { m := NewMeter() m.RecordPut("v1") m.RecordPut("v1") m.RecordPut("v1") m.RecordGet("v1") m.RecordGet("v1") m.RecordSync("v1") m.RecordAnchor("v1") u := m.GetUsage("v1") if u.VaultID != "v1" { t.Fatalf("vaultID = %q", u.VaultID) } if u.Puts != 3 { t.Fatalf("puts = %d, want 3", u.Puts) } if u.Gets != 2 { t.Fatalf("gets = %d, want 2", u.Gets) } if u.Syncs != 1 { t.Fatalf("syncs = %d, want 1", u.Syncs) } if u.Anchors != 1 { t.Fatalf("anchors = %d, want 1", u.Anchors) } } func TestUsageMetering_IsolatesVaults(t *testing.T) { m := NewMeter() m.RecordPut("v1") m.RecordPut("v2") m.RecordPut("v2") u1 := m.GetUsage("v1") u2 := m.GetUsage("v2") if u1.Puts != 1 { t.Fatalf("v1 puts = %d, want 1", u1.Puts) } if u2.Puts != 2 { t.Fatalf("v2 puts = %d, want 2", u2.Puts) } } func TestUsageMetering_Reset(t *testing.T) { m := NewMeter() m.RecordPut("v1") m.RecordGet("v1") m.Reset("v1") u := m.GetUsage("v1") if u.Puts != 0 || u.Gets != 0 { t.Fatalf("expected zeroes after reset, got puts=%d gets=%d", u.Puts, u.Gets) } } func TestUsageMetering_Concurrent(t *testing.T) { m := NewMeter() var wg sync.WaitGroup for i := 0; i < 100; i++ { wg.Add(1) go func() { defer wg.Done() m.RecordPut("v1") }() } wg.Wait() u := m.GetUsage("v1") if u.Puts != 100 { t.Fatalf("puts = %d, want 100", u.Puts) } } // ─── Provider Registry ────────────────────────────────────────────────────── func TestProviderRegistry_Register(t *testing.T) { reg := NewProviderRegistry() dir := t.TempDir() sp, err := NewLocalSyncProvider(filepath.Join(dir, "sync")) if err != nil { t.Fatal(err) } st, err := NewLocalStorageProvider(filepath.Join(dir, "storage")) if err != nil { t.Fatal(err) } rp, err := NewLocalRecoveryProvider(filepath.Join(dir, "recovery")) if err != nil { t.Fatal(err) } reg.RegisterSync("local", sp) reg.RegisterStorage("local", st) reg.RegisterRecovery("local", rp) // Retrieve registered providers. gotSync, err := reg.GetSync("local") if err != nil { t.Fatal(err) } if gotSync != sp { t.Fatal("sync provider mismatch") } gotStorage, err := reg.GetStorage("local") if err != nil { t.Fatal(err) } if gotStorage != st { t.Fatal("storage provider mismatch") } gotRecovery, err := reg.GetRecovery("local") if err != nil { t.Fatal(err) } if gotRecovery != rp { t.Fatal("recovery provider mismatch") } // Unknown provider returns error. _, err = reg.GetSync("missing") if err == nil { t.Fatal("expected error for missing sync provider") } _, err = reg.GetStorage("missing") if err == nil { t.Fatal("expected error for missing storage provider") } _, err = reg.GetRecovery("missing") if err == nil { t.Fatal("expected error for missing recovery provider") } } Ђؗx>// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. // SDK exposes the 5 primitives that any app needs: // // 1. Identity — OpenUser, bind device, resolve DID // 2. KeyAccess — GetShardKey, unwrap DEK, rotation // 3. LocalDB — OpenShard, read/write encrypted SQLite // 4. Sync — PushOps, PullOps, Merge (CRDT over ZAP) // 5. Anchor — CommitAnchor, merkle root to chain, audit proof // // Usage: // // v, _ := vault.Open(vault.SDKConfig{ // DataDir: "/data/vaults", // MasterKEK: masterKey, // from HSM or K-Chain // OrgID: "my-org", // }) // defer v.Close() // // session, _ := v.OpenUser("user-123") // session.Put("prefs", []byte(`{"theme":"dark"}`)) // val, _ := session.Get("prefs") // session.Sync() // receipt, _ := session.Anchor() package vault import ( "crypto/hmac" "crypto/rand" "crypto/sha256" "encoding/hex" "fmt" "io" "sync" "time" ) // SDKConfig configures a Vault instance (standalone, no Base app required). type SDKConfig struct { DataDir string // directory for per-user SQLite shards MasterKEK []byte // 32-byte master key (from HSM or K-Chain) OrgID string // organization identifier // Optional: chain anchoring ChainRPC string // I-Chain RPC for merkle root commits // Optional: sync SyncPeers []string // ZAP peer addresses for CRDT sync } // Vault is the top-level SDK handle. One per app process. type Vault struct { config SDKConfig orgKEK []byte users map[string]*Session mu sync.RWMutex } // Open creates a new Vault instance. func Open(cfg SDKConfig) (*Vault, error) { if len(cfg.MasterKEK) != 32 { return nil, fmt.Errorf("vault: masterKEK must be 32 bytes") } if cfg.OrgID == "" { return nil, fmt.Errorf("vault: orgID required") } return &Vault{ config: cfg, orgKEK: deriveOrgKEK(cfg.MasterKEK, cfg.OrgID), users: make(map[string]*Session), }, nil } // Close releases all resources and zeroes key material. func (v *Vault) Close() { v.mu.Lock() defer v.mu.Unlock() for _, s := range v.users { s.close() } clear(v.orgKEK) v.users = nil } // ─── 1. Identity ───────────────────────────────────────────────────────────── // OpenUser opens (or creates) a session for a user. // Derives the per-user DEK and opens the encrypted SQLite shard. func (v *Vault) OpenUser(userID string) (*Session, error) { v.mu.Lock() defer v.mu.Unlock() if s, ok := v.users[userID]; ok { return s, nil } dek := deriveUserDEK(v.orgKEK, userID) s := &Session{ userID: userID, orgID: v.config.OrgID, dek: dek, dataDir: v.config.DataDir, chainRPC: v.config.ChainRPC, store: make(map[string][]byte), // in-memory for v1; SQLite in v2 oplog: make([]Op, 0), version: make(map[string]uint64), } v.users[userID] = s return s, nil } // ─── 2-5. Session (per user) ────────────────────────────────────────────────── // Session is a per-user encrypted data context. // It holds the user's DEK and provides all 5 SDK primitives. type Session struct { userID string orgID string dek []byte // 32-byte AES-256 data encryption key dataDir string chainRPC string // v1: in-memory KV (replaced by encrypted SQLite in v2) store map[string][]byte // CRDT operation log oplog []Op version map[string]uint64 // state vector: nodeID → seq mu sync.RWMutex } // Op is a CRDT operation in the oplog. type Op struct { Seq uint64 `json:"seq"` NodeID string `json:"nodeId"` Key string `json:"key"` Value []byte `json:"value"` // encrypted Time int64 `json:"time"` } // AnchorReceipt is returned by Anchor() — proof of chain commitment. type AnchorReceipt struct { MerkleRoot string `json:"merkleRoot"` UserID string `json:"userId"` OrgID string `json:"orgId"` Timestamp int64 `json:"timestamp"` ChainTxID string `json:"chainTxId,omitempty"` // set after on-chain commit OpCount int `json:"opCount"` } // ─── 3. LocalDB ────────────────────────────────────────────────────────────── // Put stores an encrypted key-value pair. // Value is encrypted with the user's DEK before storage. func (s *Session) Put(key string, value []byte) error { s.mu.Lock() defer s.mu.Unlock() shard := &UserShard{DEK: s.dek} encrypted, err := shard.Encrypt(value) if err != nil { return fmt.Errorf("vault: encrypt: %w", err) } s.store[key] = encrypted // Append to CRDT oplog seq := s.version[s.userID] + 1 s.version[s.userID] = seq s.oplog = append(s.oplog, Op{ Seq: seq, NodeID: s.userID, Key: key, Value: encrypted, // ops carry ciphertext, not plaintext Time: time.Now().UnixMilli(), }) return nil } // Get retrieves and decrypts a value by key. func (s *Session) Get(key string) ([]byte, error) { s.mu.RLock() defer s.mu.RUnlock() encrypted, ok := s.store[key] if !ok { return nil, fmt.Errorf("vault: key not found: %s", key) } shard := &UserShard{DEK: s.dek} return shard.Decrypt(encrypted) } // Delete removes a key. func (s *Session) Delete(key string) { s.mu.Lock() defer s.mu.Unlock() delete(s.store, key) seq := s.version[s.userID] + 1 s.version[s.userID] = seq s.oplog = append(s.oplog, Op{ Seq: seq, NodeID: s.userID, Key: key, Value: nil, // tombstone Time: time.Now().UnixMilli(), }) } // ─── 4. Sync ───────────────────────────────────────────────────────────────── // Sync pushes local ops to peers and pulls remote ops. // CRDT merge is conflict-free — concurrent writes to the same key // resolve by last-writer-wins (Lamport timestamp + nodeID). // Ops carry ciphertext — peers relay opaque bytes without decrypting. func (s *Session) Sync() error { s.mu.Lock() defer s.mu.Unlock() // v1: no-op (single device) // push s.oplog to ZAP peers, pull their ops, merge return nil } // Merge applies remote ops into local state. // Each op carries encrypted values — merge does not require DEK. func (s *Session) Merge(remoteOps []Op) { s.mu.Lock() defer s.mu.Unlock() for _, op := range remoteOps { // Skip already-seen ops if op.Seq <= s.version[op.NodeID] { continue } s.version[op.NodeID] = op.Seq if op.Value == nil { delete(s.store, op.Key) } else { // LWW: remote op wins if it has higher timestamp s.store[op.Key] = op.Value } s.oplog = append(s.oplog, op) } } // ─── 5. Anchor ─────────────────────────────────────────────────────────────── // Anchor computes a merkle root over the current state and returns // a receipt suitable for on-chain commitment. // The chain stores ONLY the root hash — never row data, never keys. func (s *Session) Anchor() (*AnchorReceipt, error) { s.mu.RLock() defer s.mu.RUnlock() // Compute merkle root: hash of (sorted keys + encrypted values) h := sha256.New() h.Write([]byte(s.orgID + ":" + s.userID)) for _, op := range s.oplog { h.Write([]byte(op.Key)) h.Write(op.Value) } receipt := &AnchorReceipt{ MerkleRoot: hex.EncodeToString(h.Sum(nil)), UserID: s.userID, OrgID: s.orgID, Timestamp: time.Now().Unix(), OpCount: len(s.oplog), } // submit receipt.MerkleRoot to I-Chain via chainRPC return receipt, nil } func (s *Session) close() { s.mu.Lock() defer s.mu.Unlock() clear(s.dek) s.store = nil s.oplog = nil } // ─── Shared Vaults ─────────────────────────────────────────────────────────── // SharedSession is a multi-member vault derived from the org KEK + vaultID. // Members list controls who can access. Each member decrypts with the shared DEK. type SharedSession struct { Session vaultID string members map[string]bool } // OpenSharedVault creates a shared vault accessible by the listed members. // The DEK is derived from orgKEK + vaultID (not any single user). func (v *Vault) OpenSharedVault(vaultID string, members []string) (*SharedSession, error) { if vaultID == "" { return nil, fmt.Errorf("vault: vaultID required") } if len(members) == 0 { return nil, fmt.Errorf("vault: at least one member required") } // Shared DEK = HMAC-SHA256(orgKEK, "vault:shared:" + vaultID) mac := hmac.New(sha256.New, v.orgKEK) mac.Write([]byte("vault:shared:" + vaultID)) dek := mac.Sum(nil) memberSet := make(map[string]bool, len(members)) for _, m := range members { memberSet[m] = true } ss := &SharedSession{ Session: Session{ userID: "shared:" + vaultID, orgID: v.config.OrgID, dek: dek, dataDir: v.config.DataDir, chainRPC: v.config.ChainRPC, store: make(map[string][]byte), oplog: make([]Op, 0), version: make(map[string]uint64), }, vaultID: vaultID, members: memberSet, } return ss, nil } // IsMember returns true if the given userID is in the members list. func (ss *SharedSession) IsMember(userID string) bool { return ss.members[userID] } // PutAs stores a value only if the caller is a member. func (ss *SharedSession) PutAs(userID, key string, value []byte) error { if !ss.IsMember(userID) { return fmt.Errorf("vault: %s is not a member of shared vault %s", userID, ss.vaultID) } return ss.Session.Put(key, value) } // GetAs retrieves a value only if the caller is a member. func (ss *SharedSession) GetAs(userID, key string) ([]byte, error) { if !ss.IsMember(userID) { return nil, fmt.Errorf("vault: %s is not a member of shared vault %s", userID, ss.vaultID) } return ss.Session.Get(key) } // ─── Multi-Device Enrollment ───────────────────────────────────────────────── // DeviceKey is a device-specific wrapping key derived from the user DEK. type DeviceKey struct { UserID string DeviceID string Key []byte // 32-byte device wrapping key } // EnrollDevice creates a device-specific wrapping key for the given user. // Device key = HMAC-SHA256(userDEK, "device:" + deviceID). // The device key wraps the user DEK for local storage on that device. func (v *Vault) EnrollDevice(userID, deviceID string) (*DeviceKey, error) { v.mu.RLock() s, ok := v.users[userID] v.mu.RUnlock() if !ok { return nil, fmt.Errorf("vault: user %s not open", userID) } s.mu.RLock() defer s.mu.RUnlock() mac := hmac.New(sha256.New, s.dek) mac.Write([]byte("device:" + deviceID)) return &DeviceKey{ UserID: userID, DeviceID: deviceID, Key: mac.Sum(nil), }, nil } // RevokeDevice removes a device key. The user DEK is unaffected — other // devices continue to work. In production, the revoked device's wrapped // DEK copy becomes useless because its wrapping key is discarded. func (v *Vault) RevokeDevice(userID, deviceID string) error { v.mu.RLock() _, ok := v.users[userID] v.mu.RUnlock() if !ok { return fmt.Errorf("vault: user %s not open", userID) } // In v2 in-memory model, revocation is a no-op on the DEK itself. // The device key is simply not re-derived. In production, the wrapped // DEK blob stored on the revoked device becomes undecryptable because // the server no longer issues the device wrapping key. return nil } // ─── Per-Collection Sharing ────────────────────────────────────────────────── // ShareToken carries a re-encrypted DEK scoped to a single collection. type ShareToken struct { Collection string RecipientID string CollectionDEK []byte // 32-byte collection-scoped key } // ShareCollection creates a ShareToken that lets recipientID decrypt only // the named collection. Collection DEK = HMAC-SHA256(userDEK, "collection:" + collectionName). func (s *Session) ShareCollection(collection, recipientID string) *ShareToken { s.mu.RLock() defer s.mu.RUnlock() mac := hmac.New(sha256.New, s.dek) mac.Write([]byte("collection:" + collection)) return &ShareToken{ Collection: collection, RecipientID: recipientID, CollectionDEK: mac.Sum(nil), } } // PutCollection stores a value encrypted with the collection-scoped DEK. func (s *Session) PutCollection(collection, key string, value []byte) error { s.mu.Lock() defer s.mu.Unlock() mac := hmac.New(sha256.New, s.dek) mac.Write([]byte("collection:" + collection)) colDEK := mac.Sum(nil) shard := &UserShard{DEK: colDEK} encrypted, err := shard.Encrypt(value) if err != nil { return fmt.Errorf("vault: encrypt collection: %w", err) } storeKey := collection + ":" + key s.store[storeKey] = encrypted return nil } // GetCollection retrieves a value encrypted with the collection-scoped DEK. func (s *Session) GetCollection(collection, key string) ([]byte, error) { s.mu.RLock() defer s.mu.RUnlock() storeKey := collection + ":" + key encrypted, ok := s.store[storeKey] if !ok { return nil, fmt.Errorf("vault: key not found: %s", storeKey) } mac := hmac.New(sha256.New, s.dek) mac.Write([]byte("collection:" + collection)) colDEK := mac.Sum(nil) shard := &UserShard{DEK: colDEK} return shard.Decrypt(encrypted) } // GetWithToken retrieves and decrypts a value using a ShareToken. // Only works for keys in the token's collection. func GetWithToken(token *ShareToken, store map[string][]byte, key string) ([]byte, error) { storeKey := token.Collection + ":" + key encrypted, ok := store[storeKey] if !ok { return nil, fmt.Errorf("vault: key not found: %s", storeKey) } shard := &UserShard{DEK: token.CollectionDEK} return shard.Decrypt(encrypted) } // ─── Threshold Recovery ────────────────────────────────────────────────────── // CreateRecoveryShares splits the user DEK into `total` shares using // XOR-based secret sharing. Any `threshold` shares can reconstruct the DEK // when threshold == total (all shares needed). Proper Shamir SSS in v3. func (s *Session) CreateRecoveryShares(threshold, total int) ([][]byte, error) { s.mu.RLock() defer s.mu.RUnlock() if threshold < 2 || total < threshold { return nil, fmt.Errorf("vault: need threshold >= 2 and total >= threshold") } if threshold != total { return nil, fmt.Errorf("vault: only supports threshold == total (XOR split); Shamir in future release") } dekLen := len(s.dek) shares := make([][]byte, total) // Generate (total-1) random shares. xorAcc := make([]byte, dekLen) copy(xorAcc, s.dek) for i := 0; i < total-1; i++ { share := make([]byte, dekLen) if _, err := io.ReadFull(rand.Reader, share); err != nil { return nil, fmt.Errorf("vault: random share: %w", err) } shares[i] = share for j := 0; j < dekLen; j++ { xorAcc[j] ^= share[j] } } // Last share = DEK XOR all previous shares. shares[total-1] = xorAcc return shares, nil } // RecoverFromShares reconstructs a DEK by XOR-ing all shares together. // Requires all shares (threshold == total in v2). func RecoverFromShares(shares [][]byte) ([]byte, error) { if len(shares) < 2 { return nil, fmt.Errorf("vault: need at least 2 shares for recovery") } keyLen := len(shares[0]) for i, s := range shares { if len(s) != keyLen { return nil, fmt.Errorf("vault: share %d has wrong length %d (expected %d)", i, len(s), keyLen) } } result := make([]byte, keyLen) for _, share := range shares { for j := 0; j < keyLen; j++ { result[j] ^= share[j] } } return result, nil } l(xdpackage vault import ( "crypto/rand" "testing" ) func testMasterKey() []byte { key := make([]byte, 32) rand.Read(key) return key } func TestOpenAndClose(t *testing.T) { v, err := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) if err != nil { t.Fatal(err) } v.Close() } func TestOpenUserDerivesDEK(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s1, err := v.OpenUser("alice") if err != nil { t.Fatal(err) } s2, err := v.OpenUser("bob") if err != nil { t.Fatal(err) } // Different users get different DEKs. if string(s1.dek) == string(s2.dek) { t.Fatal("alice and bob should have different DEKs") } // Same user returns same session. s1again, _ := v.OpenUser("alice") if s1 != s1again { t.Fatal("same user should return same session") } } func TestPutGetRoundTrip(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") plaintext := []byte("hello world") if err := s.Put("greeting", plaintext); err != nil { t.Fatal(err) } got, err := s.Get("greeting") if err != nil { t.Fatal(err) } if string(got) != string(plaintext) { t.Fatalf("got %q, want %q", got, plaintext) } } func TestGetMissingKey(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") _, err := s.Get("nonexistent") if err == nil { t.Fatal("expected error for missing key") } } func TestDelete(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") s.Put("key", []byte("value")) s.Delete("key") _, err := s.Get("key") if err == nil { t.Fatal("expected error after delete") } } func TestCrossUserIsolation(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() alice, _ := v.OpenUser("alice") bob, _ := v.OpenUser("bob") alice.Put("secret", []byte("alice-data")) bob.Put("secret", []byte("bob-data")) aliceVal, _ := alice.Get("secret") bobVal, _ := bob.Get("secret") if string(aliceVal) == string(bobVal) { t.Fatal("alice and bob should have independent data") } if string(aliceVal) != "alice-data" { t.Fatalf("alice got %q", aliceVal) } if string(bobVal) != "bob-data" { t.Fatalf("bob got %q", bobVal) } } func TestCrossUserCannotDecrypt(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() alice, _ := v.OpenUser("alice") bob, _ := v.OpenUser("bob") alice.Put("secret", []byte("classified")) // Get alice's raw ciphertext. alice.mu.RLock() ct := alice.store["secret"] alice.mu.RUnlock() // Bob's DEK should fail to decrypt alice's ciphertext. bobShard := &UserShard{DEK: bob.dek} _, err := bobShard.Decrypt(ct) if err == nil { t.Fatal("bob should not be able to decrypt alice's data") } } func TestAnchor(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") s.Put("a", []byte("1")) s.Put("b", []byte("2")) receipt, err := s.Anchor() if err != nil { t.Fatal(err) } if receipt.MerkleRoot == "" { t.Fatal("merkle root should not be empty") } if receipt.OpCount != 2 { t.Fatalf("opcount = %d, want 2", receipt.OpCount) } if receipt.UserID != "alice" { t.Fatalf("user = %q, want alice", receipt.UserID) } } func TestMergeRemoteOps(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") // Simulate remote ops from another device. shard := &UserShard{DEK: s.dek} encrypted, _ := shard.Encrypt([]byte("remote-value")) remoteOps := []Op{ {Seq: 1, NodeID: "device-2", Key: "synced", Value: encrypted, Time: 1000}, } s.Merge(remoteOps) got, err := s.Get("synced") if err != nil { t.Fatal(err) } if string(got) != "remote-value" { t.Fatalf("got %q, want remote-value", got) } } func TestMergeSkipsDuplicateOps(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() s, _ := v.OpenUser("alice") shard := &UserShard{DEK: s.dek} enc1, _ := shard.Encrypt([]byte("first")) enc2, _ := shard.Encrypt([]byte("second")) s.Merge([]Op{{Seq: 1, NodeID: "d2", Key: "k", Value: enc1}}) s.Merge([]Op{{Seq: 1, NodeID: "d2", Key: "k", Value: enc2}}) // duplicate seq — should skip got, _ := s.Get("k") if string(got) != "first" { t.Fatalf("got %q, want first (duplicate should be skipped)", got) } } func TestOrgIsolation(t *testing.T) { key := testMasterKey() v1, _ := Open(SDKConfig{DataDir: t.TempDir(), MasterKEK: key, OrgID: "org-a"}) v2, _ := Open(SDKConfig{DataDir: t.TempDir(), MasterKEK: key, OrgID: "org-b"}) defer v1.Close() defer v2.Close() s1, _ := v1.OpenUser("alice") s2, _ := v2.OpenUser("alice") // Same user in different orgs gets different DEKs. if string(s1.dek) == string(s2.dek) { t.Fatal("same user in different orgs should have different DEKs") } } func TestInvalidMasterKey(t *testing.T) { _, err := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: []byte("too-short"), OrgID: "test-org", }) if err == nil { t.Fatal("expected error for short master key") } } ;xE// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package vault import ( "bytes" "testing" ) func TestSharedVault_MembersCanAccess(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() ss, err := v.OpenSharedVault("team-vault", []string{"alice", "bob"}) if err != nil { t.Fatal(err) } // Alice writes. if err := ss.PutAs("alice", "doc", []byte("shared secret")); err != nil { t.Fatal(err) } // Bob reads. got, err := ss.GetAs("bob", "doc") if err != nil { t.Fatal(err) } if string(got) != "shared secret" { t.Fatalf("got %q, want %q", got, "shared secret") } } func TestSharedVault_NonMemberCannotDecrypt(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() ss, _ := v.OpenSharedVault("team-vault", []string{"alice", "bob"}) if err := ss.PutAs("alice", "doc", []byte("secret")); err != nil { t.Fatal(err) } // Eve is not a member. _, err := ss.GetAs("eve", "doc") if err == nil { t.Fatal("non-member should not be able to read shared vault") } err = ss.PutAs("eve", "hack", []byte("evil")) if err == nil { t.Fatal("non-member should not be able to write shared vault") } } func TestMultiDeviceEnroll_DifferentDeviceKeys(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() v.OpenUser("alice") dk1, err := v.EnrollDevice("alice", "laptop") if err != nil { t.Fatal(err) } dk2, err := v.EnrollDevice("alice", "phone") if err != nil { t.Fatal(err) } if bytes.Equal(dk1.Key, dk2.Key) { t.Fatal("different devices should get different keys") } if len(dk1.Key) != 32 || len(dk2.Key) != 32 { t.Fatal("device keys should be 32 bytes") } // Same device ID produces same key (deterministic). dk1again, _ := v.EnrollDevice("alice", "laptop") if !bytes.Equal(dk1.Key, dk1again.Key) { t.Fatal("same device should produce same key") } } func TestMultiDeviceRevoke_OtherDevicesSurvive(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() session, _ := v.OpenUser("alice") session.Put("data", []byte("important")) dk1, _ := v.EnrollDevice("alice", "laptop") _, _ = v.EnrollDevice("alice", "phone") // Revoke phone. if err := v.RevokeDevice("alice", "phone"); err != nil { t.Fatal(err) } // Laptop key still works (unchanged). dk1after, _ := v.EnrollDevice("alice", "laptop") if !bytes.Equal(dk1.Key, dk1after.Key) { t.Fatal("revoking phone should not affect laptop key") } // User data still accessible. got, err := session.Get("data") if err != nil { t.Fatal(err) } if string(got) != "important" { t.Fatalf("got %q", got) } } func TestCollectionSharing_RecipientCanDecryptCollection(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() alice, _ := v.OpenUser("alice") // Alice stores data in a collection. if err := alice.PutCollection("photos", "sunset", []byte("image-data")); err != nil { t.Fatal(err) } // Alice shares "photos" collection with bob. token := alice.ShareCollection("photos", "bob") // Bob uses the token to decrypt the collection. alice.mu.RLock() store := alice.store alice.mu.RUnlock() got, err := GetWithToken(token, store, "sunset") if err != nil { t.Fatal(err) } if string(got) != "image-data" { t.Fatalf("got %q, want %q", got, "image-data") } } func TestCollectionSharing_RecipientCannotDecryptOtherCollections(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() alice, _ := v.OpenUser("alice") // Alice stores data in two collections. alice.PutCollection("photos", "sunset", []byte("image-data")) alice.PutCollection("secrets", "key", []byte("top-secret")) // Share only "photos" with bob. photosToken := alice.ShareCollection("photos", "bob") alice.mu.RLock() store := alice.store alice.mu.RUnlock() // Bob can read photos. _, err := GetWithToken(photosToken, store, "sunset") if err != nil { t.Fatal("bob should be able to read shared collection") } // Bob cannot read secrets — the token's DEK is for "photos", not "secrets". // Create a fake token with the photos DEK but pointing at secrets collection. fakeToken := &ShareToken{ Collection: "secrets", RecipientID: "bob", CollectionDEK: photosToken.CollectionDEK, // wrong DEK for secrets } _, err = GetWithToken(fakeToken, store, "key") if err == nil { t.Fatal("bob should not be able to decrypt other collections with photos token") } } func TestRecovery_ThresholdRecovers(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() session, _ := v.OpenUser("alice") originalDEK := make([]byte, len(session.dek)) copy(originalDEK, session.dek) // Split into 3-of-3 shares. shares, err := session.CreateRecoveryShares(3, 3) if err != nil { t.Fatal(err) } if len(shares) != 3 { t.Fatalf("got %d shares, want 3", len(shares)) } // Each share should be 32 bytes. for i, s := range shares { if len(s) != 32 { t.Fatalf("share %d: got %d bytes, want 32", i, len(s)) } } // All 3 shares recover the DEK. recovered, err := RecoverFromShares(shares) if err != nil { t.Fatal(err) } if !bytes.Equal(recovered, originalDEK) { t.Fatal("recovered DEK does not match original") } } func TestRecovery_BelowThresholdFails(t *testing.T) { v, _ := Open(SDKConfig{ DataDir: t.TempDir(), MasterKEK: testMasterKey(), OrgID: "test-org", }) defer v.Close() session, _ := v.OpenUser("alice") originalDEK := make([]byte, len(session.dek)) copy(originalDEK, session.dek) // Split into 3-of-3 shares. shares, err := session.CreateRecoveryShares(3, 3) if err != nil { t.Fatal(err) } // Only 2 of 3 shares — cannot recover correctly. partial, err := RecoverFromShares(shares[:2]) if err != nil { t.Fatal("RecoverFromShares should not error with 2 shares, it just produces wrong output") } if bytes.Equal(partial, originalDEK) { t.Fatal("2 of 3 shares should NOT recover the correct DEK") } } ϫx340031QHKLKgZ~)&M: !2RrRAm;~KfyNUVSR#תQO2;ي($R鋀Ĭ.Y?ydC̼7k>(!];E@"5($3a{/ޏ9r=Ks~*JNJK΀+=ܛԴD=euKRs2s3Cp%Ó3OLUdnxͼyrF4&VI:2WxSSΙ :q _xYms, ?`B'L*34lJiN#ġ82x? tV$}no_= 4VH֛q?;Fd(MiE!Ҕ2MԲ8 4ʍUJ'V4dlM,:݋iK`GB}UzZf!0fqV$#`WXA"Y[mDDhUۥ,^Hfez:[CQ gF#eiW"ީH^.'q(D3d ,2Ţ4)WڒI~ VY}$%%>0N*VQ"R;MՃXZTYv߰>xdC\BKFd9)$Da*Uf@e ';OPMY?M; ˸ʿbYe2X9BjN+2JDp%QAD%y*35y-_Xc`ERks 2(eTQnZepc yb†V"MORn`PX"JʽWpt-®9/8G2E+6Ğa^ODC]وhUA̱zeL"(1I/; ^d^X@v|5pO*LT9HP|0{I[afI[Y&!6h%eز,KjXh3~n{ %nkbklz]JgwK20Qh`Lv;l{@C’|._2KщC YA p)ӷEbۨe߷Ղlgnr;f::%agg ;b,{CU^'ѢT]`%1,ɨT(/|R+NC{0d)CƖ7s !¬1h7a+-00p.\UjXL1-B9)4b^bX+3-V^]K>玥V!-tjMYQKy"?*N5G:g]L'e~CgS7Od+;VRDo'BVhＨe|YVh >_*զ:c4SHb @D2*rsa]mf)LovoVUc del;v}.NVQIݺB#kZm%S) -A{P#XŲs6wLHL8RS~C&gSCs>b[8#:qNfnATUVs(jcEOe#U*^1>pG(dU `lkJTiINgUeP苖zܖt';n֮࠙feеGZreFOO{=F<N>=-?Lg曆|2[4P8Sw1j ѧgOOɮfNHh =޸x%=:8`0.Y짖BJ{a hu))u&m?w ՕY~^Y쳛Ԁy.;EX<2im-Qr|ֹu'( ;ۙ<Rޅ'nXܱV {=Zmw+QF.v2 h|~A.ш '[b31Ė0Mcayr2vKmIrn~h$&6ѠfX}CC;Y\j"6d#3d+i0Ћ r#z8*U!=\v1yrGY={/ vC=Ύ ?z>B|P?/g?`zώ :>222uY܋ݡDe _>؇M={BJ5'@=IOz=sAR[u8À.,"4l7 4X}N'(,<{L`YN< st]<)\3?FzS-`t4t 鶽O|Iݻ.~vz#/)OuX2rRe)w_I^`nJ7u_ylǻdhnߝv#x /_=;΍:FH133k|30 j"FN4Ej4d@,J+3 [gMƐMAi,ɭu| s->Ž-M4ΙN[ύFl9ex=ksƵ_LS0"!I;JG#U׵dh<ɒX@@Q;%z=8YA. >c 7mele7z fEA0e~ i\i*CĞ~mIL+=\OA!jTRU[ziW%PaA8.[)!]UZwdN^2˘s0Tx:{<4E/ )\DT0q)?4bt<^=s^ >~TWftHOCL"&1sԍŌ,?kE ;cw9I:q.yĽ(Mu?>M˸0<"2 IOx$`u: BŻ2_}e*ЯUM)A,#$pTuQˉ:Jptxr" J y*YU $ԁ*H_V xyK-_iR=>i'%oW¿oj(PymDr}CvAQ*^[=5G?Oas"Hq@w׵r2Qy=zA\g*a8|*/G 8 dCA pS/C}0{<@h}F ǡ`@(<%-c /rJ8?+@$``ۖ0Cc >%)z{I@t WEA?Yd4@`כrk>00Pp.2Dg hFX1ȭb~P<4Ev=}C?-d_ N1TK6.ڮ¾ VT~MBsZ!4FA%(x.WA_fPUU\"q(%`kmj']Y7cFWa9 njqCbՖmtknWRQ6amhlO]ʸVKRD6=^10S#",8ъ٘;ȥ hUqJ72vw r:NC)7i mC[Uνu[re;(*0*HlkRa>Cx\ tt=͐Gߠa h!s; e,h9w~3gsmI7 =t+4)ψhP!CMqECbUKoYcЈ0fO˟Z(QEtBM]P^Zu.VQwaVq?9rd_;_łwǪ'T?zBe+~WkdQ]5 _ q\KV;}0OӧW-E+X^Ii":Ҫ{fdCZHB$]7vr8fI|fiLOdDN4a``_UUJIqD 9`^zKK`w d\*"%iB(6ACX|$W(0 vKB 1x H@l0QLXœ\flzwߝ,3!z빳?8[l0u 8ĵ<Bd/2;yЃ͸] ixwwi%tlSUWPvZkg40q gZmfB4S>6>.wT:=jtjA7Q-*b(އ;צ2.CSD(\*4CVq(Mgz!La`[߁a_oΕ6O(_3 ckfR'K"=CvJD8Dhm=BuQ @^xlH {G+ZN;N#9g;18tǹ4,ikmQׇXP$ʹAGY9wJV{+͟dvQ[M|h ZwQTѬYs@@Ɉ揻A#-ujSGK1 +ttU͠T۪ n/`KiR"LIÂPV! 0o ԭ=?UUԣ+M [.&S@&OwSP=a7IFE(٭p4QA򆖴>+ީ2xkZkϪj*f_7uѢ&ݛd{Y@kawz}ҡ7d;dJ*8B|GZݩF[$`T4b5:QŠoⓦwmz@:FG1 MIśdJC Y,VV8s^}-9 Z.֪r,Nb!Qki9Cg*ѝf/P^;BNn.yI8ߕ[L^K>i .^o.3x {p}7N+bWQNJ@ҵ Fk{7l+I 4u2 C [sM@nB[ܶŝX=H;-:'YE*]߮/&qy9hf!ь/W:m:\>N ̏.ܫ&ඥF#kw:Zra`С(jd$e5(׮; 8C%4 2|4H*Ԃ7CA22(+ǩC.鹿kMM=H* /ѕu%%f g_Yr*pꍵt*OZ"a0r62O7⬧ d3 l~F(G>^t-2} /0D 5 @THBA[$HQIȁ@p8:<+x<`g1wN@, zx劄<;e tO( d!F8[ľ8)LLѳb) !sO]+sAOLfɅB#^tm  N5*bY @G ahPt, ,s-@ӨC,$1,H0N!UXXљw)hr0ȅąZXD-eii1YWٖ.ѶB#F(;hG ݨܝog̛&yxG3O/E}uE)(|?,%$HxvWL<`oI/bٯK ) )j]?$ܴucqZ\\UovژcQelʵc\]s{4`qLbyaOĵu ,ߙ*i{}ZZwPGl1\+|cJz[c?LF{y|ka{WΉo,on|n*}{[;NPku{wT?}Hnð04*!6툡E8g(nudĄGh}4"a -ZlhS$CmIl-)ŏ_<9yHPX0b0 \c*Jj@ɜa#dB91I,4Dr8 ޱƠbĀƶ6EWE;ߎLCT!'2qVЕbOKb[os&U(-[)mJS-{И9n#4A,|&l=2Wzx6r򄮐[3̙P"S[T60ݑF8H D "4fyQXL0/l:$F+ #g3D[ݭ͒md\%9-@  ~f~fJajpE&uk%!z+ sNoJk5B?&MAmmq8?iU4-PЮ당<}VpUl}]A2^raDiD8O~ג0 *utOeY=Iڲw4 sG'hE5GE"] mN'lpOuwW_nDjMg -wmIm̵./}Eݪ`*m#s 5%# #1N)p_dQlWlb9Wˇ |/VV^Gɸ.{ds_Lfx8\z@rӱ3x~M$F ASmP^r X$_i?"ʏ*W/8"!wx ܌ 660 㚂#P$h@tMn1ub(-94H9A,ѦINV ?2")~ח%&ʟ\PrVuȐqaHN;%p$eƩ>ӔhVko(xph;5ߢ =Nq Nzċ{ZX ;-Y3czڧ}H Jfx98yV|WPm<:wĝUY8-tL]&)V/w"kcOٛ>1._a. tԪ,U*} ՠ\x!F 1$}vDr0W\Ĉ8E 1ͪ'T)q"ǫەB@;VkcIC̸ڊ`ѮdZNKU/Gj;j~eG 3_7hI)谉8'G˛ ֹ1C㌷͢~i|Nl|{]nn }B/e]+En ŝO8 k-<{\էr?!D?S$E tźe,ptTsM{Sߝov0{JeI&^ʇj uoؼl"G%<42[Œ\aiLi}mZtL&&{ * Ȍ\ oMjCt5V^6Vw^J1YI; =H{ǎ;=qi$@Dd$E`w擒#[:nuU7O 0«lQ6;ڍ7t7ɰ{msӽ黭WsL)K{57N,iV۟zi++Ãzr+D!@s%XH&[_>;Bp1.Hy6 >*()ߜެ%@wc9@KMm*Rg,&D900 (8NNN>!kM%Xld')<:]m "1N5 .%JC[75&2V ACW֠*{q 1 iN+| <…)g#MoӹF栏ID`w HZz#5WX m9O==9z9&wlGݛ3q/<|\ѨpU[m0xh*QK-+ӕWw;bbdf ^|7za34[#I 4 rI# TrݫX|vMK%H=ƣ!͛9}5x*c r*U11aCJ2_ٹ2e1:P7my}~1 kb-e 赵Z0Z6Jss$(XiG[g2Uc[L9ʢKz1[m <ܦ+\Y3Dl!|UR!?ʵZ\";7 =b6i<ɬ[jISCT&Yr&.iStΗW8@Ab`.܇Ηhln9aI L0>p.tgMjMo~ȝa'`%=󁘅xvY%-a ,e7M<xVr6=_!\JsAGMq䤇LƁIBCJV2G %} R4=I\OƑv5љMlLO?y<ů&П ==s])yrKefFZՒ./W ZG*JWJ^P+Tmqx8MF :/vᇅ] /gqrty01˙nnjSQj(\KY!OHiD]X1uS)MFGsvR. ρp,3.UNO%’g(3'/WX1y wB㿍p^//&$ :kcO hXNK&*$o,BQn]lfk[`? `*81@`pY[J@:[~XDop%V@q$vBս`b*#QG#(N|9Vw;LegUou9I:3݉Ȑ0H$I cA:O[ 2P<8A阃wBxcT ` 됅&ƪw2oEx^`P8(S9ȟo>Wsۃtz;zo<-my`̙tcV9 S57) &4: o4WX7-+ ixZ37p T-ηҥ8 s$^G^oSk%] [W"A7-~+*vbDPu>8׳rx{u?'Xw^ituu1 `ω IVqZ"&|/="cT&c_c T0 /\$aWeU[]<~eTF!fo2!I&iDŽx!V5P!ZhXg FZ[zSs!׸x]J9M/'-iqY4%!m} wmrŽ0tjry G'K>*V_f*;/?X 60ceU\nq <@y!3pXe4Ʒ*x]@uQuw h$p9 )" :xٵf>(P]ހAx]no~ϗGߖ{A(M5O!kż"Xiv>_T$9.ܸ*-`cuR0%6Q[2{1ux s>r7mIp6`^aA(A i{;30EI>;2+Y';26( EYuɭ5qcmXU4zl8C;ow=o8U$ޛKiJT'OzC_{XXJG.z8 e,^&[S"S]9 bʏV$ 02KcWdUEF7B7n]^8zo{wxv{ǿȕ$t LKމ*}CѫZOosxZnF[zT?S*NCӠ cE$)!)۪k~3/ю۴#Q|,ww$N6iX™+ѩ8R.:`fMW_#|&ɛF🂖5k6v j妫{13Ht~AA{ Y (f*%퓂LQ]՚W {/89.&b2z7r_麐FEj4KkNڀph.p=髪E1F@㇐  h_vmܺ3+:Ev$PFVzBC ]F, h z2/߿◙r* Rɧ r snصJj+C%zw4BCvP|fpXFBR>f J(н>ӓ$^4CUvSf%4vxh00Ϲ3zyUTy%BPP:[(<׏2Z/P&u#F* TnZ bԋQo a|(M(oJ UDX$ ~xymz;2_Kt~ Yƙ•NG#a(UM7n((h'S p 06<_$vN}R)$Ӎ`QQ$`ϸ=-IpG+3y)X#$hǘ٫ }>`XH83*p)lnd*M(ih(@g"^55ta)z%#C#EIarp 7aw21M|;f'!k#=ɺ$܆$_&w RE]d$7/u9.vJ ҅V҅OgeC-8Ex'H$NWG8.j"CZ1N> H g,hR*VIS26 Tcڦ{|Ⱥ m!$!Mob81!PA8? >G݊?{ KZQ 0)o1doHaųrj܄٠iyG䖓4lB4DQpF}:6f`d J]K"u1MIM3gS׈UOhXز.I! 3CaL[ 1S`Y1Nt i~G|:erpGdYCFe!XokŸ+@ΗϮ̾""FaF·r/rKB6%kXJ0#,3e2@ئ}+909Xl+iʼnit܃Sij$ԇ|b Y 6Kn_TmGpuO9I:E_]Zy:x3⬖ 4fyIUD5 ;}1pz\[˭HamzR8 B+ 9%<6Jo-EQqvάQkmhL5/؟AcVzUmЈW(xe(^Y.$Sg4jѬY UAoWZhjV[}OFhx&MH/ ;5M^[DE؇FLB8MlЮk)I4,* `8Ը)SjT=/FdC1m˖ڱ;\ъ[fXLJeֶexuh^p!eYXL_>Fa:j-x+WeC{~1SBgsWlՈ~6=CD-M!Ljz:q}f;vY9A#Rzd\Ҍ¨O}q8.F*QcHHnX"*Rzu}:'7d[ E4joП 4S){ Wʴ5YE#"{0 2:khȹNY~H7?l`!49c^a4{QmXM~|D}Mez)9!cl|}Ɛ<l6?sgh!|xMQ=KQ&qw @Y30NRc2h7;7ه3 ]]m /?!m,>U XwfwϹwytq}U";fj&mki*B$:ϻ"C{;!"3~BM ߛw,0l7 ߝMw~8x=xAË -؁0P:Q2O2m0뵵55 JA?ߒP0 (lb&ɾ twp욝ew͸Nө;K&;.+ ŭa! ZaUYol|іa Gg>Bw_h4Rr-):b4 LϠB`0jKw9!>BZtM5'*=x{8VW6on=~OuFxYr6m?-Jt(f2 DB+`Rz'w@RKv҄"sΕ''B/"/W=D?iq>"y fQVJ1VJTs%YËh<SmD%Y12K2YșkUyflYjTVr":?~")N`u/ғ YVIɜ SIQtrGļ\K̲(s(Q꬀ NT,+e6՜D_F"1*ͪ^ٹ4H&{7ȊUV)ZlTXd86y״<2+Ȣ;?\̕Ea\ M&չ!G!ԍL|#t-uu DEHUZBVbm[2"TEe6=;`q }lw˰%DI,"HiP!h ץzYjd6m8 @'JK*Y#>|4f!znFR,Uumw0r{TLS6AK="BڞB̳ ZjU.fbj2|(H!wW hYL"uVz%&VpUŠw9ؐkiE֐p J9Uy8",KaI!i/ǩC-IxZ y=ˊȱV7e)c<gJ៴5ޙS8*{b*)|V^6'ZHq!o2|$NϼƿU՘τAiwݽ3D5wz[9Vng9QRLYpz N3T݊O>Wۀw!ϤK6Pz loL/| =~M-ҍ L Fp:b\X6lc+BjumN7#TfXtHvt%]3L|DU:V[K- zֺCcrkqQXF<z8PG,XDk3~ՋL璕= 呐SG\&HGF`mA ST\.("1}֭5<$Q6le\ 't/\s ^?B}"au}1]')@q)vnC\n!|J[H@ my؄xDVjrzXW O-w{jR! RUdhs jS+SAv99N,5grSGEQ/'Yz35*4\,+ڄKYEclmf92MV-H,j!}.[͕*;|tMN6\h0NQ*YGx=5u*P3U(hH{NJem2ty!8=:GBDg\_o,%.";e'MMN_VZHW۷t}Q~4A7xU~y$/܉)! _7m;_OM}[rC([.\ n *l5uIx7DІpPW5-j )8_ ëuKMJ#ƃwcZ\^A(jK |"ls\qn+I7]Q# w'"c|<}+GyM"a'Dy >\vF)v +v$mMZ#RKį0{^鴿[ȾpI}ݝ LE={Yyg#Ζ* Z+QQ<y)AeF ]ep; XA=bz5XAb8~B2V+ C*CCrrG`?@݀d•3GQ}pizHDn@y=A/:ξƻJ4CSB~_M\P03N`q+O =zDw|Js@wõpy*N8zԖ{Ңg+p=H`m,sEXŸ{ ,ڟ[$xށ7G79PSo?Eх^n?n1\ VpnjԜr]\%U֨!W֞eo Qin><,T[=SjDLP肕 lhRy)˩w_F_BEO ڌF34S% 7 H M،nNh<wik \1)DhrE,yvFi7M=e"6u:4uy?G癋~ k׭f6kcZׄйPMSnZ8, aKH3*#Ms bQF(W\̳$D# =}[\Rq6ܖ|) F||ya߃d?r0oW1J? r\(?}z\%ew %hl9[5m>4L#HL3JWTіȪ}t-S4XSl7}̋)\_Sn Gh; W5]xKE\\ٚhNb\Lڲy~* ,qNϮ@}oP oD )t3}|9%=ZQ,d̕YK>ɻ=)t/z};^.^jf΍8*{ }y*λq:3p0黻uTuŎ(Ut :oWǃ 7u;2ыx0n6m=#lU]^D7yߗ]huGO],cY>ARh~iFa p.yO^R1efG8{p'n_rGnUy[.6ep&)⁸_oxA$51Uqnx[r-%s/؋WWl*#{b/DD˸jY`k%' eYM"b #]5"ϓ$,M aՂg^2O'=G.s{ EQowd$vHO}9cu040jڭ#8ad#J8H18{*.u^PX?R>q@i8,럤$5Og^`'쉖wf;j4ʓ00$`mQAv9El|ԎWb77,| SW":]3!3Ln:(.*Zfh'ⅷ`pt@ӕ APEĦ>_hrm(ssP!$S3!TmDB Y]n)h#\!_QY+Iaš{+D'I#X\țz@R^c%Gu&+ [Fd M:uG6.Bh*L!=AcAD)FAo2u4M KJPBvWo)=Fܽ YeG')yq4p4S#`ڧåMpMHFx|H 7Tg{{Ϥ dm/f{o4 @k>ׂ,N:{jj^iZ4*m.a m3H80  %ү'< a$[ 90]0 Ϭj7 t+3!!0E[yxșLf4ZX:bcMt*!uFlnpsHb&yǮ`ϓ,_.tޘMClc|hIĝE}ɭ y…kIFRa9󹷄 n[]ij@ Go7G4z}zU0@=fi3#^Gy c7j[('e8ɰ*ԜRI-U/" )u4n;yBA$xqDˆلDR ^GfБJD1TmP蛦L7H +X?G@'ǔu-DLOGLW7?*ln|/As&j Z DUݧpYsmD1i H/~C ؐal58ZFkր3lˏ)VU5wP0[iAՏrB͵%J6 Um@xDFs)]12IS,.-7c*( <k@Gs7y;gD{%2L6Aa徤T"p$bwXGσtjK=i!+^Rh~a퍅3 Pv1=\xܢxKݐ*іi-xtڇWܪq.|gT샸Ҟ2M<=>CY=IL;\(ƙI)ۍ!s:@4kIAFȅ2} s}B!妉\soQbq3hk/ jXdm9Rv{+殆V 6`:V١Zb^5 jq5=AJă,qæ$;tMO BNNCPzr?>*t¦]o(:d .=w.km7u¹B6sL9If^QͨbiZ(Z@ uY!0lW{{+nL6-|D~Diӕk:Oezo{m,߷V? $$[=c|:7\f ?^X˗nZSUd~P;!ᬝn(}Ezj> 4Ppr=G#,+BB ?3rǶa z“Oy>& ^'Uefpd׶jc2J{)+Opy+1 J>\1SXaE8}69 S,>k8}һ]y[wK}`s[%=بI F,*vT8#\[*i+O?&Ql4.8-4ͪ%/drJe+LX_֦"/ݫįIS-?VtD`A|FRk֨**6񥳀jh>ÿ'2*7:#4PQFU-3=+9Et^#WJ #(b@b '$3aA[j7N("Im"HTN^n3g.AI2d`^rmܐGxOU2+Cdqɜ'Kdxq|Xst՟vh^7S,4iW5MN; A݉3I:~jzဈT=-~K~է+rx%Ɠ&+V4rT,WLʊv?FPS_r:09bTBv[ӟ=>9D9ɒC6GÞ+*4g'$3 vt7qq_~V4{ Lg_a:܏tAѴ{rZ]THr$Ԉ;[_V[ -/UuX hąs1tK:t)82])Zuce V_ްP_zD.fRȉZM`2N%hEs_8J>GGt.K۟N|+M;XQuNgSŎՂfީY[(j}?Y$,j|t˅v>Zx[zƕ[|YSX Hٱw#[Rm(dU7.qկ'HvmWQ`08swb?NnSb c{{ybWNk,0rm2LWҳ[ݮK)3?p0,NE2B2 3Jҹ:p*#w:%J؏V92?H'[B3 㑟KJwD&ĂfJ1'}hW2["IcoR,I,'oD6wGR'F,<=Z΅GY.{KǢKж{"P"3DXiTt“IvIpvL ^I,fN&6,*6>(ٹ+OOɐ6f81d>@^\dw2H ٘ė1;x(PF@'D  :>)׿,V# cƋ(!9GL}(-DK U/d#1461xnG5AdH cKD80Էb/ea* 4`B&餁A$X,6 %q T5j`b3~<_ ۶ś%`D7Ã-⑟#/Dޚ8 aE,|65"uBaTV,7}7JشzJL2]2QS a ?rBU,&;E ِ7,JW|FgrbhuRd} *_:94p**x{t7kW"]D1) aa .,?מ>"V6X1)~ltc+PƋ\<fdhm='wN&)< sŵ qxg7!򺉞_ԍ+} ft| -\@x yw>2[-ja;Y`pF.%)>63ete ~aڦ=\d!^dh6[w RL4cz2֬u>l&#R`6gUd,.LK`83R,/}<ƁW!gGA# e A f~A99%P"## ݽ]%}aO).4U H5dqipVI|IDɁ}!LsЎ/1 |@j^Zi ό.Dy $v:wdCe ䷀Qv' NY T4.t疴|HA XHXk6~Nzk`E̳;me˓j2tZ' ~V,|`BM13޴M %bVL-Yε5G237[DߛB}S:H>Id[Wr`<r,\ϴ!h~4Q1ͫ6/܄'gL~,cpُ(3I`!F,`~4Ob;"32Ⱦ?`$NGO' }O1*\2t.`W."t b96UO┒M(5rO1+2_2kJL({mPNrݜ3zCKYz&Ncp짵TQCym7xmğĞ|kPH#x|;=It_Zs{r4&7}X o 2˽\S:8(_l, mHP3OTgMUu)tb(><0QyЮ.+Ϣ_˓uSƃD,%KLbtr\ɛS䨯F2 vG Gp m\8#`4(~^RzF._ =&ȫ*šjGb`0'zXEQbT50~L>MC#F1ޝr?Kn)k\iow {zD;)ڇQ CtSPeZé;9Īйak݋ì.N ^r^xO4BGN^c6\`ZHaajUa\FJc5`[R%oȏ6QXp0UC)Uঽ={ݛ)eZ]iAh pfrb2C3 |4v%a4N Q@=/cUL !R 82.|X] "/]Odaf$nTqτDV{~;=U!ⅩM|\&De rt vjiAw&x?bIʠg֔ z覱~u8vfܳc3.܆_/ˠ \Må 4 "HWhjNq:z=2kn_65]R 5b MG9!*~K~[6ёz T'[EsO]eqOֲfkr*P`O5n9Til!*uU^Q`2`|E=j]`*E)>,jTzqKTj5%!tPXG|U`D妞/e;:<>m6"/5P*+NGz_뷛IpG܎; y<%:~`+{58Q~L)Y^ŹS"@UQv^D O #7l[KfTx_DG92h:G:mqz/wY.b\.WUjE3 8B߃eVP9LE]p Gjxʊa(=˃CN'Y"mr1{ug%;!f>NKMT"}j=9M6~jA/kwQX۞O%1 `U$E~{VK^KZEDBnԢWvM/*O)i2K:գHm\b@N%e=_ҡ Qwנg]5)( ^(wϝ"XJ S`-W^4~3 WG^Z5xPThUqbS[NTѺe j 5 4#]Qp=jq\v(吞-IɉIw$B{ BtHE}@P|6 PG5:vRsNBC Urf3y{2)VqATP*#wUNRFdhu=bP)wO<ΑSHnyHaӫuT6DeGAeh :}#Y1R>>zb8OۄXkZYlz)oWDנ>\ 蟮q2sj2:}Ϟ~8Nj:iC`=>fmTާj ܒ^g~n@V[% նyb}WxCcgꌢƸnf{_Naӕ1gmƇy=>KPrG=)*rϝH?mpݽr)nmyX^I5Fk/[eupyFKj `t>? 0\Tㄐ~QKO8lMg]9wUǀ<0)71;ۦم*y6*k#;*B=hh44R%5raFfxbiŸm~4 voH~ik-zMW &0#RIn6䗕F?-zNLHR+#6CàF嘿4w;xyԮǐWp~kW<*90nVfa&M,/ztPW<*6)u[!P.t3̺ lצt ׊?*h]7 ڋ9c L!=_Kem`'uC}rrj<{}' .OSzgj&[x@// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package waitlist import ( "sync" "time" ) // slidingLimiter is a tiny in-process sliding-window limiter keyed by // arbitrary string (IP, email, etc.). It's intentionally minimal: O(N) // in the count per key, GC on read, no background goroutine. For Base // instances handling >100 req/s the host should put a real proxy in // front; this limiter exists to keep a single dev / small SaaS box safe. type slidingLimiter struct { mu sync.Mutex limit int window time.Duration hits map[string][]time.Time now func() time.Time // injectable for tests } func newSlidingLimiter(limit int, window time.Duration) *slidingLimiter { return &slidingLimiter{ limit: limit, window: window, hits: make(map[string][]time.Time), now: time.Now, } } // allow returns true if the key is under the limit and records the hit. // It also opportunistically GCs the key's slice. func (l *slidingLimiter) allow(key string) bool { if l == nil || l.limit <= 0 { return true } l.mu.Lock() defer l.mu.Unlock() now := l.now() cutoff := now.Add(-l.window) hits := l.hits[key] // Drop entries older than the window. i := 0 for ; i < len(hits); i++ { if hits[i].After(cutoff) { break } } if i > 0 { hits = hits[i:] } if len(hits) >= l.limit { l.hits[key] = hits return false } l.hits[key] = append(hits, now) return true } 㿣xWn#E}vĢ3!@gv+$^ zEH<8ӷUZ-lnd 4~nBAO6 -LzDpSL^: cm 1*+Lbp+Kueڐz-H#aeߦm,g.t|z֚24![@ ;Sr I\Π XnpOq&@&H0*!6(Z%w!iZp0K*Y\4HB%`K_$J+‡~MX{/3vh5,ؔaq]2EE/JVN}unzI2K#l%jE Oz6&PdBF,"ZPx{J!XA!ibvP>_,ư ,4h%E_s&G?TE1%*S~'ሏʽ_w߼)yٰ,Rr|k7&ģ_EC;wX -৤UǏ ̳dI_Օ$F=E x~ƈkK&o !C?nXh"Bk\\)$Z}XV !A)7YE2󢬓ĬSqCI*/h-HE&NGZJgk$‘4Ca7n_ˢTO&hjc]*PΥ@1HvnK %.0k;Q/޻TaߨlX:"*isT;2IE+=ewth{mh'~+q.c'tkԼd~>iBH;:WncA~ECUD4,O}=:XȀL[ɾADV^Mdc015 O:yCޡѾ;:. ~],b-;@$E*19HeͶܔedAdb,sE}MGsא9v+|To[|z>"ί|pUbe؄a9%;Aw;}2)^.ulYκ._cAggne(=\ؠ+)p{8nca&HByWȤД'?e..V!R"\WWAEydkY's C&ԮrSǃ|U*?5bˏ[""gdzE0L)`vRRa>6<ǜTru:{Yzp<>z`ޙG^þ<鬁Au: })*|X =W1@:2Z{Fgg=\2דhO7k|_ ;_J* XPGT?@}-Fxc kx 5Bn< Ô;^\U- }7.H ;ql 唅< \0_AD1-mb.kTPFQCK 5Q+lʮ3a{~Zy>"憁ԕz]S4P,$-U Kr_M./,pM聹/6}eldztm 6SZ1AF< wȱ%A96ŭ9.Wb>Nޠ[ZqTתM*@Ms*jG^o3qM"5=v+ü1T]aˌ&68SW/gp/___>kN"юII+nOj^$!18֞A^)U^*UM0t@Dh)@xK:r^=icwIl 'xQ7 }gܛIiˤ=(J5%sn/$SؔaįDzTtBc:*ላ$nhB&o Ȼ #F \:,-BٰKLISjjc'VB4b133i*4b0ݱAͻo7 ,otxJ// Copyright (C) 2020-2026, Hanzo AI Inc. All rights reserved. // See the file LICENSE for licensing terms. package waitlist import ( "bytes" "context" "encoding/json" "errors" "net/http" "strings" "time" ) const turnstileEndpoint = "https://challenges.cloudflare.com/turnstile/v0/siteverify" type turnstileVerifyResp struct { Success bool `json:"success"` ErrorCodes []string `json:"error-codes,omitempty"` } // turnstileVerifier verifies a Cloudflare Turnstile token. If secret is // empty, verify is a no-op (used in dev). type turnstileVerifier struct { secret string client *http.Client url string // injectable for tests } func newTurnstileVerifier(secret string) *turnstileVerifier { return &turnstileVerifier{ secret: strings.TrimSpace(secret), client: &http.Client{Timeout: 5 * time.Second}, url: turnstileEndpoint, } } // verify returns nil on success, a non-nil error otherwise. Empty secret // is treated as "verification disabled" and always succeeds. func (v *turnstileVerifier) verify(ctx context.Context, token, remoteIP string) error { if v == nil || v.secret == "" { return nil } if token == "" { return errors.New("MISSING_TOKEN") } body, _ := json.Marshal(map[string]string{ "secret": v.secret, "response": token, "remoteip": remoteIP, }) req, err := http.NewRequestWithContext(ctx, http.MethodPost, v.url, bytes.NewReader(body)) if err != nil { return err } req.Header.Set("Content-Type", "application/json") resp, err := v.client.Do(req) if err != nil { return err } defer resp.Body.Close() var out turnstileVerifyResp if err := json.NewDecoder(resp.Body).Decode(&out); err != nil { return err } if !out.Success { if len(out.ErrorCodes) > 0 { return errors.New(strings.Join(out.ErrorCodes, ",")) } return errors.New("VERIFICATION_FAILED") } return nil } ,lűxuVr6}bLȱDn:NI$m44$ /L~a oɃE\=8pŽj4/+ N k~6乂g{' >̀F$HS  .v^N^B44\`Q& eǬDX0n76x(MAƪT3Z3[s^O72V 8p5;*g-i& dJϝULj*ҽt=k飴LOҷqP!~~/}EY}>{IT\RL&n}=}n٨{t<;:G\MxvH YohU\ Ik=3Drꆜ}x?}<<~27oI"K>E s<ĹhX[Y!f ,%9`6&]WJXV40 EdҭuraG\ث5âBIǑ,xah;@* Xs ƺͧcдr7j}Q)!2Cr,0 B&ԯֺ YZr:Dٺ`fW5[KWr$hxh׷Ts''&YցTZ-؂%>+Ȋ\iz ȓq]LkMt{_z8wC{c!\¿28vB6Xv{zxC͟=W9{2t>uK+Oc۾%Vo? {bWVf5vS!|ne~>9&'-W3q n+rX-ݻ6Q_e̯q`U[39{#wjU i;{cy_CI@X FO q,|M_ؚÛ/kMVg1)M+S0x}Tn@V9`u"iPQ  =iVw*W8J g!8 .: M(o_÷ ]T!4|3|:2 Lk?f4=(Q)e,g< Mp[QEip*6L殹Gøbnέ闹A=OCd2AJET ^pXG,/2ܥ;k4!l$jH$ݣF6Wҡ-E:~_0 :\)=86Um{}λ@eS+4P!S6IrUg13{f=$=ː0j+Ce"e3 A(F{pòˬWVTEŭ=$+.+3[X iAV%LE[ބ텅N]ˌ.(,G4rd0B noガ@ C@tXr"2E%+1b(VyA>r,A@]9j Zd ICۆő:䏻xwJב2$g(a x6m.4VBpz1dHB{9HML]^"&zpoZ;u Idc{g(9qtFxwgu1}<t) R|tJjZ3BA/HEZgKGXI oծ}Cddv V]67^iA7FQ5x)Or|.ҢT]|ļļLœ͛ܙ1xv100644 module.goG-2 e ?p1$)100644 runtime.goWe0䤏HN:'i100644 runtime_test.goLyFۉը/xpackage wasmvm import ( "context" "errors" "fmt" "os" "path/filepath" "strconv" "sync" "sync/atomic" "github.com/hanzoai/base/plugins/extruntime" "github.com/tetratelabs/wazero" "github.com/tetratelabs/wazero/api" ) // Host-guest ABI symbol names. Guests must export these for Invoke to // have a place to write the payload and read the result. Keep them // short so manual `wasm-objdump -x` is readable. const ( allocFn = "__base_alloc" freeFn = "__base_free" ) // poolDefault is small on purpose. Wasm modules amortize compilation // once but each instance owns its linear memory; eight is enough to // soak typical bursty hook traffic without ballooning RSS. const poolDefault = 8 // poolEnv lets ops override the per-module instance pool size without // recompiling. Anything <=0 or unparseable falls back to poolDefault. const poolEnv = "BASE_WASMVM_POOL_SIZE" // wasmModule wraps a single compiled wasm artifact plus a fixed pool of // instantiated modules. Each Invoke checks out an instance, does its // call, and returns it — re-instantiation is the dominant cost we want // to avoid per invocation. type wasmModule struct { name string exports []string compiled wazero.CompiledModule rt wazero.Runtime // pool holds ready-to-use module instances. Buffered so checkout // is a non-blocking happy-path under load. pool chan api.Module // seq monotonically names new instances so post-cancel refills // don't collide with wazero's module namespace. seq atomic.Uint64 mu sync.Mutex closed bool } func loadModule(ctx context.Context, rt wazero.Runtime, dir string) (extruntime.Module, error) { man, err := extruntime.LoadManifest(dir) if err != nil { return nil, err } if man.Runtime != "wazero" { return nil, fmt.Errorf("%w: wazero runtime cannot load %q runtime", extruntime.ErrUnsupported, man.Runtime) } if man.Module == "" { return nil, fmt.Errorf("%w: module path is required", extruntime.ErrBadManifest) } wasmPath := filepath.Join(dir, man.Module) bin, err := os.ReadFile(wasmPath) if err != nil { return nil, fmt.Errorf("wasmvm: read %s: %w", wasmPath, err) } compiled, err := rt.CompileModule(ctx, bin) if err != nil { return nil, fmt.Errorf("wasmvm: compile %s: %w", wasmPath, err) } size := poolSize() m := &wasmModule{ name: man.Name, exports: man.Exports, compiled: compiled, rt: rt, pool: make(chan api.Module, size), } // Pre-instantiate the pool. Failing here surfaces ABI errors at // Load time instead of at first Invoke. for i := 0; i < size; i++ { inst, err := m.instantiate(ctx) if err != nil { m.Close() return nil, err } m.pool <- inst } return m, nil } func (m *wasmModule) instantiate(ctx context.Context) (api.Module, error) { // Each instance gets a unique monotonic name so wazero doesn't // collide them in its module namespace (refills after cancel // would otherwise reuse a destroyed name). id := m.seq.Add(1) // Default WithRandSource is crypto/rand which is what we want; // don't override. Stdout/stderr go to the host process so guest // `console.log` / `eprintln!` is visible in logs. cfg := wazero.NewModuleConfig(). WithName(fmt.Sprintf("%s#%d", m.name, id)). WithStdout(os.Stdout). WithStderr(os.Stderr). WithSysWalltime(). WithSysNanotime() inst, err := m.rt.InstantiateModule(ctx, m.compiled, cfg) if err != nil { return nil, fmt.Errorf("wasmvm: instantiate %s: %w", m.name, err) } return inst, nil } func (m *wasmModule) Name() string { return m.name } func (m *wasmModule) Runtime() string { return "wazero" } func (m *wasmModule) Exports() []string { return m.exports } func (m *wasmModule) Invoke(ctx context.Context, fn string, payload []byte) ([]byte, error) { m.mu.Lock() closed := m.closed m.mu.Unlock() if closed { return nil, extruntime.ErrClosed } // Checkout — respect ctx so a cancelled caller doesn't wait on a // full pool forever. var inst api.Module select { case inst = <-m.pool: case <-ctx.Done(): return nil, ctx.Err() } // replace is set when the instance was hard-aborted (ctx cancel) // and a fresh one must be instantiated to keep the pool size stable. var replace bool defer func() { m.mu.Lock() closed := m.closed m.mu.Unlock() if replace { // Pool entry was destroyed mid-call; refill from a fresh // instance using a background ctx so cancel of the caller // doesn't bleed into instantiation. if !closed { if fresh, err := m.instantiate(context.Background()); err == nil { m.pool <- fresh } } return } if inst == nil { return } if closed { _ = inst.Close(context.Background()) return } m.pool <- inst }() exp := inst.ExportedFunction(fn) if exp == nil { return nil, fmt.Errorf("%w: %s:%s", extruntime.ErrUnknownFn, m.name, fn) } alloc := inst.ExportedFunction(allocFn) free := inst.ExportedFunction(freeFn) if alloc == nil || free == nil { return nil, fmt.Errorf("%w: %s missing %s/%s exports", extruntime.ErrUnsupported, m.name, allocFn, freeFn) } // Watch ctx — on cancel, hard-abort the module. wazero's Close // flips an atomic the engine checks between instructions, so an // in-flight Call returns an error promptly. done := make(chan struct{}) defer close(done) go func() { select { case <-ctx.Done(): _ = inst.Close(context.Background()) case <-done: } }() // Write payload into guest memory. plen := uint64(len(payload)) allocRes, err := alloc.Call(ctx, plen) if err != nil { if ctxErr := ctx.Err(); ctxErr != nil { replace = true return nil, ctxErr } return nil, fmt.Errorf("wasmvm: alloc: %w", err) } pptr := uint32(allocRes[0]) if !inst.Memory().Write(pptr, payload) { return nil, fmt.Errorf("wasmvm: payload write out of bounds (ptr=%d len=%d)", pptr, plen) } // Call fn(ptr, len) -> i64 packed (resPtr<<32 | resLen). out, err := exp.Call(ctx, uint64(pptr), plen) // Always free the input buffer; guest doesn't own it. _, _ = free.Call(ctx, uint64(pptr), plen) if err != nil { // Distinguish ctx cancel — wazero wraps the engine error; the // caller cares whether their cancel landed or the guest blew up. if ctxErr := ctx.Err(); ctxErr != nil { replace = true return nil, ctxErr } return nil, fmt.Errorf("wasmvm: call %s: %w", fn, err) } if len(out) != 1 { return nil, fmt.Errorf("wasmvm: %s returned %d values, want 1 (packed i64)", fn, len(out)) } packed := out[0] rptr := uint32(packed >> 32) rlen := uint32(packed & 0xFFFFFFFF) if rlen == 0 { return []byte{}, nil } buf, ok := inst.Memory().Read(rptr, rlen) if !ok { return nil, fmt.Errorf("wasmvm: result read out of bounds (ptr=%d len=%d)", rptr, rlen) } // Copy out before freeing — guest memory may be reused next call. result := make([]byte, rlen) copy(result, buf) _, _ = free.Call(ctx, uint64(rptr), uint64(rlen)) return result, nil } func (m *wasmModule) Close() error { m.mu.Lock() if m.closed { m.mu.Unlock() return nil } m.closed = true m.mu.Unlock() // Drain best-effort without closing the channel — concurrent Invoke // goroutines may still be in flight and would panic on a send to a // closed channel. Non-blocking receive gives us every instance // currently checked in; instances mid-flight will hit the closed // flag on their next Invoke and skip return-to-pool. var firstErr error drain: for { select { case inst := <-m.pool: if err := inst.Close(context.Background()); err != nil && firstErr == nil { firstErr = err } default: break drain } } if err := m.compiled.Close(context.Background()); err != nil && firstErr == nil { firstErr = err } return firstErr } // poolSize reads BASE_WASMVM_POOL_SIZE, falling back to the default // for unset / invalid / non-positive values. func poolSize() int { v := os.Getenv(poolEnv) if v == "" { return poolDefault } n, err := strconv.Atoi(v) if err != nil || n <= 0 { return poolDefault } return n } // guard against accidental import-of-errors removal — the package // relies on extruntime sentinels which we wrap via fmt.Errorf %w. var _ = errors.Is 500ms the cancel-via-Close path isn't engaging. if elapsed > 500*time.Millisecond { t.Errorf("cancel took %v, expected hard abort under 500ms", elapsed) } } func TestPoolReuseConcurrent(t *testing.T) { dir := fixtureOrSkip(t, "validate") // Force pool size 4 for this test; 16 concurrent invocations // must serialize through that pool without deadlock. t.Setenv("BASE_WASMVM_POOL_SIZE", "4") rt := wasmvm.NewRuntime() t.Cleanup(func() { _ = rt.Close() }) mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } t.Cleanup(func() { _ = mod.Close() }) const n = 16 var wg sync.WaitGroup errs := make(chan error, n) for i := 0; i < n; i++ { wg.Add(1) go func() { defer wg.Done() _, err := mod.Invoke(context.Background(), "validate", []byte(`{"email":"z@hanzo.ai"}`)) if err != nil { errs <- err } }() } wg.Wait() close(errs) for e := range errs { t.Errorf("concurrent Invoke: %v", e) } } func TestInvokeAfterClose(t *testing.T) { dir := fixtureOrSkip(t, "validate") rt := wasmvm.NewRuntime() t.Cleanup(func() { _ = rt.Close() }) mod, err := rt.Load(context.Background(), dir) if err != nil { t.Fatalf("Load: %v", err) } if err := mod.Close(); err != nil { t.Fatalf("Close: %v", err) } _, err = mod.Invoke(context.Background(), "validate", []byte("{}")) if !errors.Is(err, extruntime.ErrClosed) { t.Errorf("expected ErrClosed, got %v", err) } } func TestLoadRejectsNonWazeroManifest(t *testing.T) { dir := t.TempDir() manifest := `{"name":"x","version":"0.0.0","runtime":"native","module":"x.wasm"}` if err := os.WriteFile(filepath.Join(dir, "extension.json"), []byte(manifest), 0o644); err != nil { t.Fatal(err) } rt := wasmvm.NewRuntime() t.Cleanup(func() { _ = rt.Close() }) _, err := rt.Load(context.Background(), dir) if !errors.Is(err, extruntime.ErrUnsupported) { t.Errorf("expected ErrUnsupported, got %v", err) } } Ǔ6 x=100644 config.go #oF6( MlΘ/100644 forward.gow7kL&kb[h100644 forward_test.go4Aՠ(100644 handlers.gobC7jqj)P,100644 plugin.go|PX6X}<}M[Ig[?FL Axm[0ZjHlx.>UvQ/8XMƑj{gp%BB|sf&X*S T w[ ~<,akQ#WӮ0Wxr)dB?X`F*tm Z!h4ZWI]7 Oƻ;?-VXvCMDGPX21#YY!ګE!ldb$&JsA\%Mj깭Bck'CKHSAm) a4 1J2Q$f͗=A!G9-翉̺USokO}vY."AcL9rcWޅ1 ]2uPPmkS]uo(kn}TQxc3 =-? z;C!-L0, aBT?Y~d0u? Lb>r1s$pǯ%(AxrI/2I7˗ko.HZbha|_1|`Zރ{C,1o;H?A9u_bi&0Qo4OEWxzpackage zap import ( "net/http" "github.com/luxfi/zap/forward" ) // bridgeForward registers the canonical HTTP-over-ZAP terminal // (luxfi/zap/forward) on the plugin's live ZAP node, dispatching every // MsgTypeForward envelope to h. // // h MUST be base's fully-wrapped HTTP handler (the *http.ServeMux produced // by Router.BuildMux and bound to e.Server.Handler) so every middleware — // activity log, panic recovery, rate limiting, auth-token loading, security // headers, body limit, CSP, gzip — and every route run on bridged requests // exactly as they do on the HTTP port. forward.Serve reconstructs the // *http.Request, injects the edge-validated identity (X-Org-Id / X-User-Id / // X-User-IsAdmin / X-User-Permissions), serves it through h, and returns the // buffered response as a ZAP Response. // // This is additive and orthogonal to the legacy native handlers // (Collections=100 / Records=101 / Auth=102 / Realtime=103): MsgTypeForward // (0x80) is a distinct message type, so it shares the same node and socket // without touching them. No-op when the node is absent or h is nil — base's // HTTP behavior is unchanged either way. func (p *plugin) bridgeForward(h http.Handler) { if p.node == nil || h == nil { return } forward.Serve(p.node, h) p.logger.Info("forward_serve: ZAP HTTP terminal registered on node "+p.node.NodeID(), "msgType", forward.MsgTypeForward) } Ɗ}xpackage zap import ( "context" "io" "net" "net/http" "strconv" "testing" "time" luxlog "github.com/luxfi/log" zaplib "github.com/luxfi/zap" "github.com/luxfi/zap/forward" ) // healthHandler builds an http.Handler scoped to the one always-present, // auth-exempt base route used here: GET /v1/health → 200 + JSON. In // production the bridged handler is base's fully-wrapped surface // (e.Server.Handler — the Router.BuildMux mux carrying every middleware and // route); this scoped std handler is the same shape (an http.Handler) and // keeps the bridge test free of base's cgo/sqlite app boot. It proves // forward.Serve drives a real request → response through an http.Handler over // two live ZAP nodes end-to-end. func healthHandler() http.Handler { mux := http.NewServeMux() mux.HandleFunc("/v1/health", func(w http.ResponseWriter, r *http.Request) { w.Header().Set("Content-Type", "application/json") w.WriteHeader(http.StatusOK) _, _ = w.Write([]byte(`{"message":"API is healthy.","code":200}`)) }) return mux } // TestForwardBridgeServesHTTPHandler stands up two live ZAP nodes, registers // the canonical HTTP-over-ZAP terminal (forward.Serve) on the backend, and // asserts GET /v1/health round-trips through the bridge with status 200 and a // JSON body. This exercises exactly what plugin.start() wires onto base's node // via bridgeForward(e.Server.Handler). func TestForwardBridgeServesHTTPHandler(t *testing.T) { bePort := freePort(t) gw := zaplib.NewNode(zaplib.NodeConfig{NodeID: "gateway-test", Port: freePort(t), NoDiscovery: true}) be := zaplib.NewNode(zaplib.NodeConfig{NodeID: "base-test", Port: bePort, NoDiscovery: true}) if err := gw.Start(); err != nil { t.Fatalf("gateway node start: %v", err) } defer gw.Stop() if err := be.Start(); err != nil { t.Fatalf("backend node start: %v", err) } defer be.Stop() // Register the Forward terminal on the backend node — the same call // bridgeForward makes, with the same kind of http.Handler. forward.Serve(be, healthHandler()) // Gateway dials the backend, then waits until the peer is visible. if err := gw.ConnectDirect("127.0.0.1:" + strconv.Itoa(bePort)); err != nil { t.Fatalf("gateway dial backend: %v", err) } waitForPeer(t, gw, "base-test") fwd := &forward.Forwarder{Node: gw, Peer: "base-test"} req, _ := http.NewRequest(http.MethodGet, "http://base-test/v1/health", nil) ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second) defer cancel() resp, err := fwd.RoundTrip(req.WithContext(ctx)) if err != nil { t.Fatalf("RoundTrip /v1/health: %v", err) } defer resp.Body.Close() if resp.StatusCode != http.StatusOK { t.Fatalf("status: got %d want %d", resp.StatusCode, http.StatusOK) } body, _ := io.ReadAll(resp.Body) if string(body) != `{"message":"API is healthy.","code":200}` { t.Fatalf("body did not survive the bridge: %q", body) } } // TestBridgeForwardNilNode asserts the bridge is a safe no-op when the node is // absent (mirrors the ZAP-disabled path): bridgeForward must not panic and // must not touch HTTP behavior. A non-nil handler with a nil node must // short-circuit on the node guard. func TestBridgeForwardNilNode(t *testing.T) { p := &plugin{logger: luxlog.New("component", "zap-test")} p.bridgeForward(healthHandler()) // node is nil → must no-op, not panic } // TestBridgeForwardNilHandler asserts a present node with a nil handler also // no-ops (ZAP up, but no HTTP surface to bridge). func TestBridgeForwardNilHandler(t *testing.T) { n := zaplib.NewNode(zaplib.NodeConfig{NodeID: "nilhandler-test", Port: 0, NoDiscovery: true}) p := &plugin{node: n, logger: luxlog.New("component", "zap-test")} p.bridgeForward(nil) // handler is nil → must no-op, not panic } func freePort(t *testing.T) int { t.Helper() l, err := net.Listen("tcp", "127.0.0.1:0") if err != nil { t.Fatalf("reserve free port: %v", err) } defer l.Close() return l.Addr().(*net.TCPAddr).Port } func waitForPeer(t *testing.T, n *zaplib.Node, peer string) { t.Helper() deadline := time.Now().Add(5 * time.Second) for time.Now().Before(deadline) { for _, p := range n.Peers() { if p == peer { return } } time.Sleep(20 * time.Millisecond) } t.Fatalf("peer %q not connected within deadline (peers=%v)", peer, n.Peers()) } ixZoF,P9rpPqCshvF"WcdzYi ."sٙ-dt#J&~?YyYDyV,$?TyF%|\?VY4yR/iBf2OeQ^*,1i28KƘx,L,UUZP8ugU_bً/~4GWOeyL,'|OviIҟBw?xjIhWG{447Y&/Ѥ$R*tSXXtIy㚎aoL_\oرhr;?}V;1/E;٘w7L̷.R3cG~aBEVE(lvD~ SE͆8#&XsIK1;#%'NMN;|oM` ސ_-7 gxobRxꀖrtB%o+?^` i`#Ù[3i i${QRM \;qo5__ߞ0x0CLk2(m Q]4aIurvy ыrMOKj$VY+v5 YUwڋlsj;] ;iHRqѠTD5?GmIvG {f d#RnZG|ΙR&MT(>%1I["AAgʴ27 F&B;3 ~ u!u~2ÚX4gnP\el*f`2wvy Uz.\ }6i1&tܸZѕD~]Ւ %%~iA~^2syLu?JEO]]{ga޲!y=]vUTR֯$PE+(?G70WNlfmɘ1 &ƕܫk[>2Q{7HW;*D~C"WzF#,C[2Tjh/2O'TVYc#J2eű}j񠩁f)PX;Qǯyza]I']vj=EoRנuz*,}{.b4$$mEJB(3qDvhTb[-Rhq-v'f/iN:L#l]P0)v/s'H:znv#ɢ=ssZ }Y|; Qp@w>i<_RD:d"B,GD$rYVOuzAµ$ݧV#sZvZwK9M}vQ!W)5a[1oL#fhT! 2䳼f{KhKXvk'w`-qVBcIwL<<+ᒬQ:?s"6Iwk8i=uMeVj/38Lr %.> nBQc4D2<< yI=`~1WEMzM͉e~Km$HV[}@%c 6КpT) CqA/ d%X)sQE 7hGYS07܀$(ʛJsp@)4̾Nof?,kIIӃk+]E`a)Й nHWG=KmGE@PgWU#~PaLjVsAYP\x|&?%v7tcPN4 F\]O|)|*J)+.0q-,wxG0(!1֭vnӊSV>AS:+<4Hgp_w ^F6}@*<:^9 7;`zf+\G?wmxeJ1QE-Hˀ M+ BJfѕ %dfi2[wʸ|ʵG0FW!||_΃`fD^Buj";)[[TywW-## s@4"\S!fVj,d)Ph*IFi.G[,*3Qfq @KU&!S)*!1 `9+#v | BZ10JMȈ%(-2'9IȨj&c5: ?SJ˕ȵ#l{qZ+yc8X-8jS 61|1covQ3k?@5 xW_o6>9r6Ck% 6 -Q2Q$H*;؇''Iɲ VyMΚYI"Zi2J:~Ur7]8 j8f\IbKMd ?S3+ 3%+Qӻ k,`=(]- c&;a` j"6μn36V.8A8-K84-JB!qZv}!`)-,),/.vPq8e4'g)YѿDẈ0z* qjyġ <9Qa|Cp+y Ǽõ?&o-G9420gx$5QO+,3|(0և֪o0z|HY:_{kc7X^2qQ^r>Zη^s5or>ZΗ^ۓZz64%ǁ \imo{67ht*{J<x$100644 base.zapKZԉl3 Vt_x# Hanzo Base — ZAP Schema # # Server: base (Go) at base.hanzo.svc.cluster.local or via the unified # cloud binary at api.hanzo.ai/v1/base. # # This schema is the minimum ZAP-typed public surface needed for the # HIP-0106 Mount() contract. The full HTTP surface — per-tenant SQLite # CRUD, settings, backups, files, realtime, batch, collection import, # the HIP-0105 extension runtime substrate — is registered in apis/ # and remains the source of truth for /v1/base/* routes. Wider ZAP-typed # handlers (Open, Query, Subscribe, …) will land as separate schema PRs # alongside the in-process BaseClient interface from # cloud/pkg/cloud/deps.go. # # Code generation: # zapc generate schema/base.zap --lang go --out ./gen/zap/ # zapc generate schema/base.zap --lang ts --out ./gen/zap/ # ── Health ──────────────────────────────────────────────────────────────── struct HealthRequest # No fields. Probe is a side-effect-free GET. struct HealthResponse status Text service Text # ── Service interface ──────────────────────────────────────────────────── interface BaseService # Liveness probe. Always answers ok unless the process is unreachable. # Mounted at GET /v1/base/health by Mount(app, deps). health (request HealthRequest) -> (response HealthResponse) wx,100755 sync-admin-ui.sh=>PwwStFFH淆xg#!/usr/bin/env bash # sync-admin-ui.sh — sync the admin-base @hanzo/gui v7 bundle into ui-react/dist. # # The Base admin SPA is built externally in the @hanzo/gui workspace at # ~/work/hanzo/gui/apps/admin-base (Vite + @hanzo/gui v7). This script # copies the built bundle into ui-react/dist/ where //go:embed picks it up # at compile time. Reproducible, idempotent, CI-friendly. # # Usage: # scripts/sync-admin-ui.sh # uses ../gui/apps/admin-base # ADMIN_BASE_DIR=/path scripts/sync-admin-ui.sh # # Exits non-zero if the source dist/ is missing or empty so CI fails # loud instead of shipping a binary with a stale or empty SPA. set -euo pipefail REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" DEFAULT_SRC="$(cd "${REPO_ROOT}/../gui/apps/admin-base" 2>/dev/null && pwd || echo "")" SRC="${ADMIN_BASE_DIR:-${DEFAULT_SRC}}" DST="${REPO_ROOT}/ui-react/dist" if [[ -z "${SRC}" || ! -d "${SRC}/dist" ]]; then echo "error: admin-base dist not found." >&2 echo " expected: ${SRC:-}/dist" >&2 echo " build it first: cd \"${SRC:-../gui/apps/admin-base}\" && bun run build" >&2 echo " or set ADMIN_BASE_DIR=/abs/path/to/admin-base" >&2 exit 1 fi if ! ls "${SRC}/dist"/index.html "${SRC}/dist"/assets/*.js >/dev/null 2>&1; then echo "error: ${SRC}/dist is missing index.html or assets/*.js" >&2 exit 1 fi mkdir -p "${DST}" rsync -a --delete "${SRC}/dist/" "${DST}/" # Stamp the sync so binaries can be traced back to a build. { echo "# auto-generated by scripts/sync-admin-ui.sh — do not edit" echo "source=${SRC}" echo "synced_at=$(date -u +%Y-%m-%dT%H:%M:%SZ)" if command -v git >/dev/null 2>&1 && git -C "${SRC}" rev-parse --short HEAD >/dev/null 2>&1; then echo "source_commit=$(git -C "${SRC}" rev-parse --short HEAD)" fi if command -v git >/dev/null 2>&1 && git -C "${SRC}" status --porcelain >/dev/null 2>&1; then if [[ -n "$(git -C "${SRC}" status --porcelain || true)" ]]; then echo "source_dirty=true" fi fi } > "${DST}/.sync-stamp" echo "synced ${SRC}/dist -> ${DST}" ls -lh "${DST}/index.html" "${DST}"/assets/*.js "${DST}"/assets/*.css 2>/dev/null 0 x31TݔĢY+ ge 35A*fd{a9f~QIEQjbr öZ 'Xuim{3 \b}9"YPYXpqMk__}9Cĥx340031QrutuMa8aZqj__V xuN0Dh ѦB }r)- _C[̾[\x$::Ƴ OV{ s(5n;;L~aE2(ļD]JIk}}gݬcӧuDƘ8Ф=wA6Օ)3g 9( RBB/v!TqM|=g пiBE?^gUx[Ǵi6k|RbqD4(c\h x340031QrutuMaȚv)yٖ3y|j xun1DI9TQD9g[!iV3o^'":KN<>Cp+>bbe,5&k|E 8U(_/YXsm.sf ?~ȣY<^/tV26Q#;bWHGh`:Lc.uUheޔNԞxg(oOx[Ŵi_ԉu2x340031QrutuMaXq~_SևgM1z i%xURKn0 H;H[30m3#6$P$nQ zNMmkf\۶ٻ8VfSᅟ؍ă *0gIZ}m_ q7<-tek rE^Td{p!e^_~kcvۓr{c8("':/{[Wno2ח?je1i5=@O{xM#dTlqbz5,"[/<x$100644 iface.go )++\{ O8Yx// Package base — canonical client interface for Hanzo Base. // // import base "github.com/hanzoai/base/sdk/go" // var b base.Client = base.NewClient(cfg) package base import ( "context" "time" ) // Client is the Base surface: typed collection CRUD, realtime // subscription, file attachment, schema introspection. Always scoped // to a single Base instance (one URL); multi-instance fan-out is the // caller's concern. type Client interface { // Kind reports the backend identifier (hanzo-base | pocketbase). Kind() string // Authenticate exchanges a user identity for a session token. Empty // password selects the OAuth2/PKCE flow (the impl handles the // redirect-callback dance via the http.Handler returned by // AuthHandler). Authenticate(ctx context.Context, email, password string) (*Session, error) // AuthAs sets the auth context for subsequent calls. Passing an // empty token logs out. AuthAs(token string) // Find returns one record by id. ErrRecordNotFound on miss. Find(ctx context.Context, collection, id string) (*Record, error) // List returns records matching filter, paginated. Filter syntax // follows the Base query DSL: field=value, field~"prefix*", // field >= 100, conjunction with && and ||. List(ctx context.Context, collection, filter string, opts ListOpts) (*Page, error) // Create inserts a record. The id field of `data` is ignored — the // backend assigns the id and returns it on the result. Create(ctx context.Context, collection string, data map[string]any) (*Record, error) // Update mutates a record. Partial — only keys present in `patch` // are written. Update(ctx context.Context, collection, id string, patch map[string]any) (*Record, error) // Delete removes a record. Idempotent. Delete(ctx context.Context, collection, id string) error // Subscribe opens a realtime stream of changes on a collection. The // returned channel emits Events until ctx is cancelled or the // connection breaks. Subscribe(ctx context.Context, collection, filter string) (<-chan Event, error) // Schema returns the field definitions for a collection. Schema(ctx context.Context, collection string) (*CollectionSchema, error) // UploadFile attaches a file to a record's file field. Returns the // internal storage key (used in record.Get(field) to read back). UploadFile(ctx context.Context, collection, recordID, field string, name string, body []byte) (string, error) } // Session is the result of Authenticate. type Session struct { Token string UserID string Email string ExpiresAt time.Time } // Record is the canonical row shape. type Record struct { ID string Collection string Created time.Time Updated time.Time // Fields holds the user-defined column values keyed by field name. Fields map[string]any } // ListOpts configures a list call. type ListOpts struct { Page int PerPage int // Sort is field name, optionally prefixed with - for DESC. Comma- // separates multi-key sorts. Sort string // Expand triggers relation expansion for the named foreign-key // fields (one round trip; up to 5 levels). Expand []string } // Page is one slice of a List result. type Page struct { Items []Record Page int PerPage int TotalItems int TotalPages int } // Event is one realtime change notification. type Event struct { Action string // create | update | delete Collection string Record *Record // At is the server-side timestamp of the change. At time.Time } // CollectionSchema describes a collection's field set. type CollectionSchema struct { Name string Type string // base | auth | view System bool Fields []FieldSchema // Indexes are SQL index definitions registered on the collection. Indexes []string } // FieldSchema is one field's declared shape. type FieldSchema struct { Name string Type string // text | number | bool | json | select | relation | file | autodate | ... Required bool System bool // Options is the type-specific config (select values, relation // target id, max file size, ...). Options map[string]any } v0v+x0]aFTt=ļ|ݤTLR| w xf100644 package.jsonBIK6˿$4A100644 pnpm-lock.yamlu7~Wvhb"40000 srcQ}kd!Oso100644 tsconfig.json2Ou(*Q?Z6<9!x{ "name": "@hanzo/private", "version": "0.1.0", "description": "Per-user encrypted blob store — Base SQLite, EVM contract, or IPFS. Same API.", "type": "module", "main": "./dist/index.js", "types": "./dist/index.d.ts", "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" } }, "scripts": { "build": "tsc", "test": "vitest run" }, "peerDependencies": { "viem": "^2.0.0" }, "devDependencies": { "typescript": "^5.9.0", "vitest": "^1.0.0" } } RL(xSlockfileVersion: '9.0' settings: autoInstallPeers: true excludeLinksFromLockfile: false importers: .: devDependencies: '@codemirror/autocomplete': specifier: ^6.0.0 version: 6.20.1 '@codemirror/commands': specifier: ^6.0.0 version: 6.10.3 '@codemirror/lang-html': specifier: ^6.1.0 version: 6.4.11 '@codemirror/lang-javascript': specifier: ^6.0.2 version: 6.2.5 '@codemirror/lang-json': specifier: ^6.0.0 version: 6.0.2 '@codemirror/lang-sql': specifier: ^6.4.0 version: 6.10.0 '@codemirror/language': specifier: ^6.0.0 version: 6.12.3 '@codemirror/legacy-modes': specifier: ^6.0.0 version: 6.5.2 '@codemirror/search': specifier: ^6.0.0 version: 6.6.0 '@codemirror/state': specifier: ^6.0.0 version: 6.6.0 '@codemirror/view': specifier: ^6.0.0 version: 6.40.0 '@sveltejs/vite-plugin-svelte': specifier: ^3.0.1 version: 3.1.2(svelte@4.2.20)(vite@5.4.21(sass@1.98.0)) chart.js: specifier: ^4.0.0 version: 4.5.1 chartjs-adapter-luxon: specifier: ^1.2.0 version: 1.3.1(chart.js@4.5.1)(luxon@3.7.2) chartjs-plugin-zoom: specifier: ^2.0.1 version: 2.2.0(chart.js@4.5.1) leaflet: specifier: ^1.9.4 version: 1.9.4 luxon: specifier: ^3.4.4 version: 3.7.2 pocketbase: specifier: ^0.26.5 version: 0.26.8 sass: specifier: ^1.45.0 version: 1.98.0 svelte: specifier: ^4.0.0 version: 4.2.20 svelte-flatpickr: specifier: ^3.3.3 version: 3.3.5(svelte@4.2.20) svelte-spa-router: specifier: ^4.0.0 version: 4.0.2 vite: specifier: ^5.0.11 version: 5.4.21(sass@1.98.0) packages: '@ampproject/remapping@2.3.0': resolution: {integrity: sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==} engines: {node: '>=6.0.0'} '@codemirror/autocomplete@6.20.1': resolution: {integrity: sha512-1cvg3Vz1dSSToCNlJfRA2WSI4ht3K+WplO0UMOgmUYPivCyy2oueZY6Lx7M9wThm7SDUBViRmuT+OG/i8+ON9A==} '@codemirror/commands@6.10.3': resolution: {integrity: sha512-JFRiqhKu+bvSkDLI+rUhJwSxQxYb759W5GBezE8Uc8mHLqC9aV/9aTC7yJSqCtB3F00pylrLCwnyS91Ap5ej4Q==} '@codemirror/lang-css@6.3.1': resolution: {integrity: sha512-kr5fwBGiGtmz6l0LSJIbno9QrifNMUusivHbnA1H6Dmqy4HZFte3UAICix1VuKo0lMPKQr2rqB+0BkKi/S3Ejg==} '@codemirror/lang-html@6.4.11': resolution: {integrity: sha512-9NsXp7Nwp891pQchI7gPdTwBuSuT3K65NGTHWHNJ55HjYcHLllr0rbIZNdOzas9ztc1EUVBlHou85FFZS4BNnw==} '@codemirror/lang-javascript@6.2.5': resolution: {integrity: sha512-zD4e5mS+50htS7F+TYjBPsiIFGanfVqg4HyUz6WNFikgOPf2BgKlx+TQedI1w6n/IqRBVBbBWmGFdLB/7uxO4A==} '@codemirror/lang-json@6.0.2': resolution: {integrity: sha512-x2OtO+AvwEHrEwR0FyyPtfDUiloG3rnVTSZV1W8UteaLL8/MajQd8DpvUb2YVzC+/T18aSDv0H9mu+xw0EStoQ==} '@codemirror/lang-sql@6.10.0': resolution: {integrity: sha512-6ayPkEd/yRw0XKBx5uAiToSgGECo/GY2NoJIHXIIQh1EVwLuKoU8BP/qK0qH5NLXAbtJRLuT73hx7P9X34iO4w==} '@codemirror/language@6.12.3': resolution: {integrity: sha512-QwCZW6Tt1siP37Jet9Tb02Zs81TQt6qQrZR2H+eGMcFsL1zMrk2/b9CLC7/9ieP1fjIUMgviLWMmgiHoJrj+ZA==} '@codemirror/legacy-modes@6.5.2': resolution: {integrity: sha512-/jJbwSTazlQEDOQw2FJ8LEEKVS72pU0lx6oM54kGpL8t/NJ2Jda3CZ4pcltiKTdqYSRk3ug1B3pil1gsjA6+8Q==} '@codemirror/lint@6.9.5': resolution: {integrity: sha512-GElsbU9G7QT9xXhpUg1zWGmftA/7jamh+7+ydKRuT0ORpWS3wOSP0yT1FOlIZa7mIJjpVPipErsyvVqB9cfTFA==} '@codemirror/search@6.6.0': resolution: {integrity: sha512-koFuNXcDvyyotWcgOnZGmY7LZqEOXZaaxD/j6n18TCLx2/9HieZJ5H6hs1g8FiRxBD0DNfs0nXn17g872RmYdw==} '@codemirror/state@6.6.0': resolution: {integrity: sha512-4nbvra5R5EtiCzr9BTHiTLc+MLXK2QGiAVYMyi8PkQd3SR+6ixar/Q/01Fa21TBIDOZXgeWV4WppsQolSreAPQ==} '@codemirror/view@6.40.0': resolution: {integrity: sha512-WA0zdU7xfF10+5I3HhUUq3kqOx3KjqmtQ9lqZjfK7jtYk4G72YW9rezcSywpaUMCWOMlq+6E0pO1IWg1TNIhtg==} '@esbuild/aix-ppc64@0.21.5': resolution: {integrity: sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ==} engines: {node: '>=12'} cpu: [ppc64] os: [aix] '@esbuild/android-arm64@0.21.5': resolution: {integrity: sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==} engines: {node: '>=12'} cpu: [arm64] os: [android] '@esbuild/android-arm@0.21.5': resolution: {integrity: sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg==} engines: {node: '>=12'} cpu: [arm] os: [android] '@esbuild/android-x64@0.21.5': resolution: {integrity: sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==} engines: {node: '>=12'} cpu: [x64] os: [android] '@esbuild/darwin-arm64@0.21.5': resolution: {integrity: sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==} engines: {node: '>=12'} cpu: [arm64] os: [darwin] '@esbuild/darwin-x64@0.21.5': resolution: {integrity: sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==} engines: {node: '>=12'} cpu: [x64] os: [darwin] '@esbuild/freebsd-arm64@0.21.5': resolution: {integrity: sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==} engines: {node: '>=12'} cpu: [arm64] os: [freebsd] '@esbuild/freebsd-x64@0.21.5': resolution: {integrity: sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==} engines: {node: '>=12'} cpu: [x64] os: [freebsd] '@esbuild/linux-arm64@0.21.5': resolution: {integrity: sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==} engines: {node: '>=12'} cpu: [arm64] os: [linux] '@esbuild/linux-arm@0.21.5': resolution: {integrity: sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==} engines: {node: '>=12'} cpu: [arm] os: [linux] '@esbuild/linux-ia32@0.21.5': resolution: {integrity: sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==} engines: {node: '>=12'} cpu: [ia32] os: [linux] '@esbuild/linux-loong64@0.21.5': resolution: {integrity: sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg==} engines: {node: '>=12'} cpu: [loong64] os: [linux] '@esbuild/linux-mips64el@0.21.5': resolution: {integrity: sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==} engines: {node: '>=12'} cpu: [mips64el] os: [linux] '@esbuild/linux-ppc64@0.21.5': resolution: {integrity: sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==} engines: {node: '>=12'} cpu: [ppc64] os: [linux] '@esbuild/linux-riscv64@0.21.5': resolution: {integrity: sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==} engines: {node: '>=12'} cpu: [riscv64] os: [linux] '@esbuild/linux-s390x@0.21.5': resolution: {integrity: sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==} engines: {node: '>=12'} cpu: [s390x] os: [linux] '@esbuild/linux-x64@0.21.5': resolution: {integrity: sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==} engines: {node: '>=12'} cpu: [x64] os: [linux] '@esbuild/netbsd-x64@0.21.5': resolution: {integrity: sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==} engines: {node: '>=12'} cpu: [x64] os: [netbsd] '@esbuild/openbsd-x64@0.21.5': resolution: {integrity: sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==} engines: {node: '>=12'} cpu: [x64] os: [openbsd] '@esbuild/sunos-x64@0.21.5': resolution: {integrity: sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==} engines: {node: '>=12'} cpu: [x64] os: [sunos] '@esbuild/win32-arm64@0.21.5': resolution: {integrity: sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==} engines: {node: '>=12'} cpu: [arm64] os: [win32] '@esbuild/win32-ia32@0.21.5': resolution: {integrity: sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==} engines: {node: '>=12'} cpu: [ia32] os: [win32] '@esbuild/win32-x64@0.21.5': resolution: {integrity: sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==} engines: {node: '>=12'} cpu: [x64] os: [win32] '@jridgewell/gen-mapping@0.3.13': resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==} '@jridgewell/resolve-uri@3.1.2': resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==} engines: {node: '>=6.0.0'} '@jridgewell/sourcemap-codec@1.5.5': resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==} '@jridgewell/trace-mapping@0.3.31': resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==} '@kurkle/color@0.3.4': resolution: {integrity: sha512-M5UknZPHRu3DEDWoipU6sE8PdkZ6Z/S+v4dD+Ke8IaNlpdSQah50lz1KtcFBa2vsdOnwbbnxJwVM4wty6udA5w==} '@lezer/common@1.5.1': resolution: {integrity: sha512-6YRVG9vBkaY7p1IVxL4s44n5nUnaNnGM2/AckNgYOnxTG2kWh1vR8BMxPseWPjRNpb5VtXnMpeYAEAADoRV1Iw==} '@lezer/css@1.3.3': resolution: {integrity: sha512-RzBo8r+/6QJeow7aPHIpGVIH59xTcJXp399820gZoMo9noQDRVpJLheIBUicYwKcsbOYoBRoLZlf2720dG/4Tg==} '@lezer/highlight@1.2.3': resolution: {integrity: sha512-qXdH7UqTvGfdVBINrgKhDsVTJTxactNNxLk7+UMwZhU13lMHaOBlJe9Vqp907ya56Y3+ed2tlqzys7jDkTmW0g==} '@lezer/html@1.3.13': resolution: {integrity: sha512-oI7n6NJml729m7pjm9lvLvmXbdoMoi2f+1pwSDJkl9d68zGr7a9Btz8NdHTGQZtW2DA25ybeuv/SyDb9D5tseg==} '@lezer/javascript@1.5.4': resolution: {integrity: sha512-vvYx3MhWqeZtGPwDStM2dwgljd5smolYD2lR2UyFcHfxbBQebqx8yjmFmxtJ/E6nN6u1D9srOiVWm3Rb4tmcUA==} '@lezer/json@1.0.3': resolution: {integrity: sha512-BP9KzdF9Y35PDpv04r0VeSTKDeox5vVr3efE7eBbx3r4s3oNLfunchejZhjArmeieBH+nVOpgIiBJpEAv8ilqQ==} '@lezer/lr@1.4.8': resolution: {integrity: sha512-bPWa0Pgx69ylNlMlPvBPryqeLYQjyJjqPx+Aupm5zydLIF3NE+6MMLT8Yi23Bd9cif9VS00aUebn+6fDIGBcDA==} '@marijn/find-cluster-break@1.0.2': resolution: {integrity: sha512-l0h88YhZFyKdXIFNfSWpyjStDjGHwZ/U7iobcK1cQQD8sejsONdQtTVU+1wVN1PBw40PiiHB1vA5S7VTfQiP9g==} '@parcel/watcher-android-arm64@2.5.6': resolution: {integrity: sha512-YQxSS34tPF/6ZG7r/Ih9xy+kP/WwediEUsqmtf0cuCV5TPPKw/PQHRhueUo6JdeFJaqV3pyjm0GdYjZotbRt/A==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [android] '@parcel/watcher-darwin-arm64@2.5.6': resolution: {integrity: sha512-Z2ZdrnwyXvvvdtRHLmM4knydIdU9adO3D4n/0cVipF3rRiwP+3/sfzpAwA/qKFL6i1ModaabkU7IbpeMBgiVEA==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [darwin] '@parcel/watcher-darwin-x64@2.5.6': resolution: {integrity: sha512-HgvOf3W9dhithcwOWX9uDZyn1lW9R+7tPZ4sug+NGrGIo4Rk1hAXLEbcH1TQSqxts0NYXXlOWqVpvS1SFS4fRg==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [darwin] '@parcel/watcher-freebsd-x64@2.5.6': resolution: {integrity: sha512-vJVi8yd/qzJxEKHkeemh7w3YAn6RJCtYlE4HPMoVnCpIXEzSrxErBW5SJBgKLbXU3WdIpkjBTeUNtyBVn8TRng==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [freebsd] '@parcel/watcher-linux-arm-glibc@2.5.6': resolution: {integrity: sha512-9JiYfB6h6BgV50CCfasfLf/uvOcJskMSwcdH1PHH9rvS1IrNy8zad6IUVPVUfmXr+u+Km9IxcfMLzgdOudz9EQ==} engines: {node: '>= 10.0.0'} cpu: [arm] os: [linux] '@parcel/watcher-linux-arm-musl@2.5.6': resolution: {integrity: sha512-Ve3gUCG57nuUUSyjBq/MAM0CzArtuIOxsBdQ+ftz6ho8n7s1i9E1Nmk/xmP323r2YL0SONs1EuwqBp2u1k5fxg==} engines: {node: '>= 10.0.0'} cpu: [arm] os: [linux] '@parcel/watcher-linux-arm64-glibc@2.5.6': resolution: {integrity: sha512-f2g/DT3NhGPdBmMWYoxixqYr3v/UXcmLOYy16Bx0TM20Tchduwr4EaCbmxh1321TABqPGDpS8D/ggOTaljijOA==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [linux] '@parcel/watcher-linux-arm64-musl@2.5.6': resolution: {integrity: sha512-qb6naMDGlbCwdhLj6hgoVKJl2odL34z2sqkC7Z6kzir8b5W65WYDpLB6R06KabvZdgoHI/zxke4b3zR0wAbDTA==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [linux] '@parcel/watcher-linux-x64-glibc@2.5.6': resolution: {integrity: sha512-kbT5wvNQlx7NaGjzPFu8nVIW1rWqV780O7ZtkjuWaPUgpv2NMFpjYERVi0UYj1msZNyCzGlaCWEtzc+exjMGbQ==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [linux] '@parcel/watcher-linux-x64-musl@2.5.6': resolution: {integrity: sha512-1JRFeC+h7RdXwldHzTsmdtYR/Ku8SylLgTU/reMuqdVD7CtLwf0VR1FqeprZ0eHQkO0vqsbvFLXUmYm/uNKJBg==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [linux] '@parcel/watcher-win32-arm64@2.5.6': resolution: {integrity: sha512-3ukyebjc6eGlw9yRt678DxVF7rjXatWiHvTXqphZLvo7aC5NdEgFufVwjFfY51ijYEWpXbqF5jtrK275z52D4Q==} engines: {node: '>= 10.0.0'} cpu: [arm64] os: [win32] '@parcel/watcher-win32-ia32@2.5.6': resolution: {integrity: sha512-k35yLp1ZMwwee3Ez/pxBi5cf4AoBKYXj00CZ80jUz5h8prpiaQsiRPKQMxoLstNuqe2vR4RNPEAEcjEFzhEz/g==} engines: {node: '>= 10.0.0'} cpu: [ia32] os: [win32] '@parcel/watcher-win32-x64@2.5.6': resolution: {integrity: sha512-hbQlYcCq5dlAX9Qx+kFb0FHue6vbjlf0FrNzSKdYK2APUf7tGfGxQCk2ihEREmbR6ZMc0MVAD5RIX/41gpUzTw==} engines: {node: '>= 10.0.0'} cpu: [x64] os: [win32] '@parcel/watcher@2.5.6': resolution: {integrity: sha512-tmmZ3lQxAe/k/+rNnXQRawJ4NjxO2hqiOLTHvWchtGZULp4RyFeh6aU4XdOYBFe2KE1oShQTv4AblOs2iOrNnQ==} engines: {node: '>= 10.0.0'} '@rollup/rollup-android-arm-eabi@4.60.0': resolution: {integrity: sha512-WOhNW9K8bR3kf4zLxbfg6Pxu2ybOUbB2AjMDHSQx86LIF4rH4Ft7vmMwNt0loO0eonglSNy4cpD3MKXXKQu0/A==} cpu: [arm] os: [android] '@rollup/rollup-android-arm64@4.60.0': resolution: {integrity: sha512-u6JHLll5QKRvjciE78bQXDmqRqNs5M/3GVqZeMwvmjaNODJih/WIrJlFVEihvV0MiYFmd+ZyPr9wxOVbPAG2Iw==} cpu: [arm64] os: [android] '@rollup/rollup-darwin-arm64@4.60.0': resolution: {integrity: sha512-qEF7CsKKzSRc20Ciu2Zw1wRrBz4g56F7r/vRwY430UPp/nt1x21Q/fpJ9N5l47WWvJlkNCPJz3QRVw008fi7yA==} cpu: [arm64] os: [darwin] '@rollup/rollup-darwin-x64@4.60.0': resolution: {integrity: sha512-WADYozJ4QCnXCH4wPB+3FuGmDPoFseVCUrANmA5LWwGmC6FL14BWC7pcq+FstOZv3baGX65tZ378uT6WG8ynTw==} cpu: [x64] os: [darwin] '@rollup/rollup-freebsd-arm64@4.60.0': resolution: {integrity: sha512-6b8wGHJlDrGeSE3aH5mGNHBjA0TTkxdoNHik5EkvPHCt351XnigA4pS7Wsj/Eo9Y8RBU6f35cjN9SYmCFBtzxw==} cpu: [arm64] os: [freebsd] '@rollup/rollup-freebsd-x64@4.60.0': resolution: {integrity: sha512-h25Ga0t4jaylMB8M/JKAyrvvfxGRjnPQIR8lnCayyzEjEOx2EJIlIiMbhpWxDRKGKF8jbNH01NnN663dH638mA==} cpu: [x64] os: [freebsd] '@rollup/rollup-linux-arm-gnueabihf@4.60.0': resolution: {integrity: sha512-RzeBwv0B3qtVBWtcuABtSuCzToo2IEAIQrcyB/b2zMvBWVbjo8bZDjACUpnaafaxhTw2W+imQbP2BD1usasK4g==} cpu: [arm] os: [linux] '@rollup/rollup-linux-arm-musleabihf@4.60.0': resolution: {integrity: sha512-Sf7zusNI2CIU1HLzuu9Tc5YGAHEZs5Lu7N1ssJG4Tkw6e0MEsN7NdjUDDfGNHy2IU+ENyWT+L2obgWiguWibWQ==} cpu: [arm] os: [linux] '@rollup/rollup-linux-arm64-gnu@4.60.0': resolution: {integrity: sha512-DX2x7CMcrJzsE91q7/O02IJQ5/aLkVtYFryqCjduJhUfGKG6yJV8hxaw8pZa93lLEpPTP/ohdN4wFz7yp/ry9A==} cpu: [arm64] os: [linux] '@rollup/rollup-linux-arm64-musl@4.60.0': resolution: {integrity: sha512-09EL+yFVbJZlhcQfShpswwRZ0Rg+z/CsSELFCnPt3iK+iqwGsI4zht3secj5vLEs957QvFFXnzAT0FFPIxSrkQ==} cpu: [arm64] os: [linux] '@rollup/rollup-linux-loong64-gnu@4.60.0': resolution: {integrity: sha512-i9IcCMPr3EXm8EQg5jnja0Zyc1iFxJjZWlb4wr7U2Wx/GrddOuEafxRdMPRYVaXjgbhvqalp6np07hN1w9kAKw==} cpu: [loong64] os: [linux] '@rollup/rollup-linux-loong64-musl@4.60.0': resolution: {integrity: sha512-DGzdJK9kyJ+B78MCkWeGnpXJ91tK/iKA6HwHxF4TAlPIY7GXEvMe8hBFRgdrR9Ly4qebR/7gfUs9y2IoaVEyog==} cpu: [loong64] os: [linux] '@rollup/rollup-linux-ppc64-gnu@4.60.0': resolution: {integrity: sha512-RwpnLsqC8qbS8z1H1AxBA1H6qknR4YpPR9w2XX0vo2Sz10miu57PkNcnHVaZkbqyw/kUWfKMI73jhmfi9BRMUQ==} cpu: [ppc64] os: [linux] '@rollup/rollup-linux-ppc64-musl@4.60.0': resolution: {integrity: sha512-Z8pPf54Ly3aqtdWC3G4rFigZgNvd+qJlOE52fmko3KST9SoGfAdSRCwyoyG05q1HrrAblLbk1/PSIV+80/pxLg==} cpu: [ppc64] os: [linux] '@rollup/rollup-linux-riscv64-gnu@4.60.0': resolution: {integrity: sha512-3a3qQustp3COCGvnP4SvrMHnPQ9d1vzCakQVRTliaz8cIp/wULGjiGpbcqrkv0WrHTEp8bQD/B3HBjzujVWLOA==} cpu: [riscv64] os: [linux] '@rollup/rollup-linux-riscv64-musl@4.60.0': resolution: {integrity: sha512-pjZDsVH/1VsghMJ2/kAaxt6dL0psT6ZexQVrijczOf+PeP2BUqTHYejk3l6TlPRydggINOeNRhvpLa0AYpCWSQ==} cpu: [riscv64] os: [linux] '@rollup/rollup-linux-s390x-gnu@4.60.0': resolution: {integrity: sha512-3ObQs0BhvPgiUVZrN7gqCSvmFuMWvWvsjG5ayJ3Lraqv+2KhOsp+pUbigqbeWqueGIsnn+09HBw27rJ+gYK4VQ==} cpu: [s390x] os: [linux] '@rollup/rollup-linux-x64-gnu@4.60.0': resolution: {integrity: sha512-EtylprDtQPdS5rXvAayrNDYoJhIz1/vzN2fEubo3yLE7tfAw+948dO0g4M0vkTVFhKojnF+n6C8bDNe+gDRdTg==} cpu: [x64] os: [linux] '@rollup/rollup-linux-x64-musl@4.60.0': resolution: {integrity: sha512-k09oiRCi/bHU9UVFqD17r3eJR9bn03TyKraCrlz5ULFJGdJGi7VOmm9jl44vOJvRJ6P7WuBi/s2A97LxxHGIdw==} cpu: [x64] os: [linux] '@rollup/rollup-openbsd-x64@4.60.0': resolution: {integrity: sha512-1o/0/pIhozoSaDJoDcec+IVLbnRtQmHwPV730+AOD29lHEEo4F5BEUB24H0OBdhbBBDwIOSuf7vgg0Ywxdfiiw==} cpu: [x64] os: [openbsd] '@rollup/rollup-openharmony-arm64@4.60.0': resolution: {integrity: sha512-pESDkos/PDzYwtyzB5p/UoNU/8fJo68vcXM9ZW2V0kjYayj1KaaUfi1NmTUTUpMn4UhU4gTuK8gIaFO4UGuMbA==} cpu: [arm64] os: [openharmony] '@rollup/rollup-win32-arm64-msvc@4.60.0': resolution: {integrity: sha512-hj1wFStD7B1YBeYmvY+lWXZ7ey73YGPcViMShYikqKT1GtstIKQAtfUI6yrzPjAy/O7pO0VLXGmUVWXQMaYgTQ==} cpu: [arm64] os: [win32] '@rollup/rollup-win32-ia32-msvc@4.60.0': resolution: {integrity: sha512-SyaIPFoxmUPlNDq5EHkTbiKzmSEmq/gOYFI/3HHJ8iS/v1mbugVa7dXUzcJGQfoytp9DJFLhHH4U3/eTy2Bq4w==} cpu: [ia32] os: [win32] '@rollup/rollup-win32-x64-gnu@4.60.0': resolution: {integrity: sha512-RdcryEfzZr+lAr5kRm2ucN9aVlCCa2QNq4hXelZxb8GG0NJSazq44Z3PCCc8wISRuCVnGs0lQJVX5Vp6fKA+IA==} cpu: [x64] os: [win32] '@rollup/rollup-win32-x64-msvc@4.60.0': resolution: {integrity: sha512-PrsWNQ8BuE00O3Xsx3ALh2Df8fAj9+cvvX9AIA6o4KpATR98c9mud4XtDWVvsEuyia5U4tVSTKygawyJkjm60w==} cpu: [x64] os: [win32] '@sveltejs/vite-plugin-svelte-inspector@2.1.0': resolution: {integrity: sha512-9QX28IymvBlSCqsCll5t0kQVxipsfhFFL+L2t3nTWfXnddYwxBuAEtTtlaVQpRz9c37BhJjltSeY4AJSC03SSg==} engines: {node: ^18.0.0 || >=20} peerDependencies: '@sveltejs/vite-plugin-svelte': ^3.0.0 svelte: ^4.0.0 || ^5.0.0-next.0 vite: ^5.0.0 '@sveltejs/vite-plugin-svelte@3.1.2': resolution: {integrity: sha512-Txsm1tJvtiYeLUVRNqxZGKR/mI+CzuIQuc2gn+YCs9rMTowpNZ2Nqt53JdL8KF9bLhAf2ruR/dr9eZCwdTriRA==} engines: {node: ^18.0.0 || >=20} peerDependencies: svelte: ^4.0.0 || ^5.0.0-next.0 vite: ^5.0.0 '@types/estree@1.0.8': resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==} '@types/hammerjs@2.0.46': resolution: {integrity: sha512-ynRvcq6wvqexJ9brDMS4BnBLzmr0e14d6ZJTEShTBWKymQiHwlAyGu0ZPEFI2Fh1U53F7tN9ufClWM5KvqkKOw==} acorn@8.16.0: resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==} engines: {node: '>=0.4.0'} hasBin: true aria-query@5.3.2: resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==} engines: {node: '>= 0.4'} axobject-query@4.1.0: resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==} engines: {node: '>= 0.4'} chart.js@4.5.1: resolution: {integrity: sha512-GIjfiT9dbmHRiYi6Nl2yFCq7kkwdkp1W/lp2J99rX0yo9tgJGn3lKQATztIjb5tVtevcBtIdICNWqlq5+E8/Pw==} engines: {pnpm: '>=8'} chartjs-adapter-luxon@1.3.1: resolution: {integrity: sha512-yxHov3X8y+reIibl1o+j18xzrcdddCLqsXhriV2+aQ4hCR66IYFchlRXUvrJVoxglJ380pgytU7YWtoqdIgqhg==} peerDependencies: chart.js: '>=3.0.0' luxon: '>=1.0.0' chartjs-plugin-zoom@2.2.0: resolution: {integrity: sha512-in6kcdiTlP6npIVLMd4zXZ08PDUXC52gZ4FAy5oyjk1zX3gKarXMAof7B9eFiisf9WOC3bh2saHg+J5WtLXZeA==} peerDependencies: chart.js: '>=3.2.0' chokidar@4.0.3: resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==} engines: {node: '>= 14.16.0'} code-red@1.0.4: resolution: {integrity: sha512-7qJWqItLA8/VPVlKJlFXU+NBlo/qyfs39aJcuMT/2ere32ZqvF5OSxgdM5xOfJJ7O429gg2HM47y8v9P+9wrNw==} crelt@1.0.6: resolution: {integrity: sha512-VQ2MBenTq1fWZUH9DJNGti7kKv6EeAuYr3cLwxUWhIu1baTaXh4Ib5W2CqHVqib4/MqbYGJqiL3Zb8GJZr3l4g==} css-tree@2.3.1: resolution: {integrity: sha512-6Fv1DV/TYw//QF5IzQdqsNDjx/wc8TrMBZsqjL9eW01tWb7R7k/mq+/VXfJCl7SoD5emsJop9cOByJZfs8hYIw==} engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0} debug@4.4.3: resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==} engines: {node: '>=6.0'} peerDependencies: supports-color: '*' peerDependenciesMeta: supports-color: optional: true deepmerge@4.3.1: resolution: {integrity: sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==} engines: {node: '>=0.10.0'} detect-libc@2.1.2: resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==} engines: {node: '>=8'} esbuild@0.21.5: resolution: {integrity: sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw==} engines: {node: '>=12'} hasBin: true estree-walker@3.0.3: resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==} flatpickr@4.6.13: resolution: {integrity: sha512-97PMG/aywoYpB4IvbvUJi0RQi8vearvU0oov1WW3k0WZPBMrTQVqekSX5CjSG/M4Q3i6A/0FKXC7RyAoAUUSPw==} fsevents@2.3.3: resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==} engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0} os: [darwin] hammerjs@2.0.8: resolution: {integrity: sha512-tSQXBXS/MWQOn/RKckawJ61vvsDpCom87JgxiYdGwHdOa0ht0vzUWDlfioofFCRU0L+6NGDt6XzbgoJvZkMeRQ==} engines: {node: '>=0.8.0'} immutable@5.1.5: resolution: {integrity: sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A==} is-extglob@2.1.1: resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==} engines: {node: '>=0.10.0'} is-glob@4.0.3: resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==} engines: {node: '>=0.10.0'} is-reference@3.0.3: resolution: {integrity: sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==} kleur@4.1.5: resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==} engines: {node: '>=6'} leaflet@1.9.4: resolution: {integrity: sha512-nxS1ynzJOmOlHp+iL3FyWqK89GtNL8U8rvlMOsQdTTssxZwCXh8N2NB3GDQOL+YR3XnWyZAxwQixURb+FA74PA==} locate-character@3.0.0: resolution: {integrity: sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==} luxon@3.7.2: resolution: {integrity: sha512-vtEhXh/gNjI9Yg1u4jX/0YVPMvxzHuGgCm6tC5kZyb08yjGWGnqAjGJvcXbqQR2P3MyMEFnRbpcdFS6PBcLqew==} engines: {node: '>=12'} magic-string@0.30.21: resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==} mdn-data@2.0.30: resolution: {integrity: sha512-GaqWWShW4kv/G9IEucWScBx9G1/vsFZZJUO+tD26M8J8z3Kw5RDQjaoZe03YAClgeS/SWPOcb4nkFBTEi5DUEA==} ms@2.1.3: resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==} nanoid@3.3.11: resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true node-addon-api@7.1.1: resolution: {integrity: sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==} periscopic@3.1.0: resolution: {integrity: sha512-vKiQ8RRtkl9P+r/+oefh25C3fhybptkHKCZSPlcXiJux2tJF55GnEj3BVn4A5gKfq9NWWXXrxkHBwVPUfH0opw==} picocolors@1.1.1: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} picomatch@4.0.4: resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} pocketbase@0.26.8: resolution: {integrity: sha512-aQ/ewvS7ncvAE8wxoW10iAZu6ElgbeFpBhKPnCfvRovNzm2gW8u/sQNPGN6vNgVEagz44kK//C61oKjfa+7Low==} postcss@8.5.8: resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==} engines: {node: ^10 || ^12 || >=14} readdirp@4.1.2: resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==} engines: {node: '>= 14.18.0'} regexparam@2.0.2: resolution: {integrity: sha512-A1PeDEYMrkLrfyOwv2jwihXbo9qxdGD3atBYQA9JJgreAx8/7rC6IUkWOw2NQlOxLp2wL0ifQbh1HuidDfYA6w==} engines: {node: '>=8'} rollup@4.60.0: resolution: {integrity: sha512-yqjxruMGBQJ2gG4HtjZtAfXArHomazDHoFwFFmZZl0r7Pdo7qCIXKqKHZc8yeoMgzJJ+pO6pEEHa+V7uzWlrAQ==} engines: {node: '>=18.0.0', npm: '>=8.0.0'} hasBin: true sass@1.98.0: resolution: {integrity: sha512-+4N/u9dZ4PrgzGgPlKnaaRQx64RO0JBKs9sDhQ2pLgN6JQZ25uPQZKQYaBJU48Kd5BxgXoJ4e09Dq7nMcOUW3A==} engines: {node: '>=14.0.0'} hasBin: true source-map-js@1.2.1: resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} engines: {node: '>=0.10.0'} style-mod@4.1.3: resolution: {integrity: sha512-i/n8VsZydrugj3Iuzll8+x/00GH2vnYsk1eomD8QiRrSAeW6ItbCQDtfXCeJHd0iwiNagqjQkvpvREEPtW3IoQ==} svelte-flatpickr@3.3.5: resolution: {integrity: sha512-D2uVdQi5jn/mMS3AK4gI/30Ho80fBYM0ZfZ44pHg8L4bMZq4c0mjajExZU4WF1EoOf7Qt8njQ9DBtkjJwfl3Cg==} peerDependencies: svelte: '>= 3.31.0 < 5.0' svelte-hmr@0.16.0: resolution: {integrity: sha512-Gyc7cOS3VJzLlfj7wKS0ZnzDVdv3Pn2IuVeJPk9m2skfhcu5bq3wtIZyQGggr7/Iim5rH5cncyQft/kRLupcnA==} engines: {node: ^12.20 || ^14.13.1 || >= 16} peerDependencies: svelte: ^3.19.0 || ^4.0.0 svelte-spa-router@4.0.2: resolution: {integrity: sha512-T1WYYk+ymwCr5m5U+n91k4dRAT6cw5HgmoPaI/TpKgAmuugymFoSBlfzkcKIK83QH4H8gUMn4tdQ0B9enFBM6g==} svelte@4.2.20: resolution: {integrity: sha512-eeEgGc2DtiUil5ANdtd8vPwt9AgaMdnuUFnPft9F5oMvU/FHu5IHFic+p1dR/UOB7XU2mX2yHW+NcTch4DCh5Q==} engines: {node: '>=16'} vite@5.4.21: resolution: {integrity: sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: '@types/node': ^18.0.0 || >=20.0.0 less: '*' lightningcss: ^1.21.0 sass: '*' sass-embedded: '*' stylus: '*' sugarss: '*' terser: ^5.4.0 peerDependenciesMeta: '@types/node': optional: true less: optional: true lightningcss: optional: true sass: optional: true sass-embedded: optional: true stylus: optional: true sugarss: optional: true terser: optional: true vitefu@0.2.5: resolution: {integrity: sha512-SgHtMLoqaeeGnd2evZ849ZbACbnwQCIwRH57t18FxcXoZop0uQu0uzlIhJBlF/eWVzuce0sHeqPcDo+evVcg8Q==} peerDependencies: vite: ^3.0.0 || ^4.0.0 || ^5.0.0 peerDependenciesMeta: vite: optional: true w3c-keyname@2.2.8: resolution: {integrity: sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==} snapshots: '@ampproject/remapping@2.3.0': dependencies: '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 '@codemirror/autocomplete@6.20.1': dependencies: '@codemirror/language': 6.12.3 '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 '@lezer/common': 1.5.1 '@codemirror/commands@6.10.3': dependencies: '@codemirror/language': 6.12.3 '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 '@lezer/common': 1.5.1 '@codemirror/lang-css@6.3.1': dependencies: '@codemirror/autocomplete': 6.20.1 '@codemirror/language': 6.12.3 '@codemirror/state': 6.6.0 '@lezer/common': 1.5.1 '@lezer/css': 1.3.3 '@codemirror/lang-html@6.4.11': dependencies: '@codemirror/autocomplete': 6.20.1 '@codemirror/lang-css': 6.3.1 '@codemirror/lang-javascript': 6.2.5 '@codemirror/language': 6.12.3 '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 '@lezer/common': 1.5.1 '@lezer/css': 1.3.3 '@lezer/html': 1.3.13 '@codemirror/lang-javascript@6.2.5': dependencies: '@codemirror/autocomplete': 6.20.1 '@codemirror/language': 6.12.3 '@codemirror/lint': 6.9.5 '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 '@lezer/common': 1.5.1 '@lezer/javascript': 1.5.4 '@codemirror/lang-json@6.0.2': dependencies: '@codemirror/language': 6.12.3 '@lezer/json': 1.0.3 '@codemirror/lang-sql@6.10.0': dependencies: '@codemirror/autocomplete': 6.20.1 '@codemirror/language': 6.12.3 '@codemirror/state': 6.6.0 '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 '@codemirror/language@6.12.3': dependencies: '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 style-mod: 4.1.3 '@codemirror/legacy-modes@6.5.2': dependencies: '@codemirror/language': 6.12.3 '@codemirror/lint@6.9.5': dependencies: '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 crelt: 1.0.6 '@codemirror/search@6.6.0': dependencies: '@codemirror/state': 6.6.0 '@codemirror/view': 6.40.0 crelt: 1.0.6 '@codemirror/state@6.6.0': dependencies: '@marijn/find-cluster-break': 1.0.2 '@codemirror/view@6.40.0': dependencies: '@codemirror/state': 6.6.0 crelt: 1.0.6 style-mod: 4.1.3 w3c-keyname: 2.2.8 '@esbuild/aix-ppc64@0.21.5': optional: true '@esbuild/android-arm64@0.21.5': optional: true '@esbuild/android-arm@0.21.5': optional: true '@esbuild/android-x64@0.21.5': optional: true '@esbuild/darwin-arm64@0.21.5': optional: true '@esbuild/darwin-x64@0.21.5': optional: true '@esbuild/freebsd-arm64@0.21.5': optional: true '@esbuild/freebsd-x64@0.21.5': optional: true '@esbuild/linux-arm64@0.21.5': optional: true '@esbuild/linux-arm@0.21.5': optional: true '@esbuild/linux-ia32@0.21.5': optional: true '@esbuild/linux-loong64@0.21.5': optional: true '@esbuild/linux-mips64el@0.21.5': optional: true '@esbuild/linux-ppc64@0.21.5': optional: true '@esbuild/linux-riscv64@0.21.5': optional: true '@esbuild/linux-s390x@0.21.5': optional: true '@esbuild/linux-x64@0.21.5': optional: true '@esbuild/netbsd-x64@0.21.5': optional: true '@esbuild/openbsd-x64@0.21.5': optional: true '@esbuild/sunos-x64@0.21.5': optional: true '@esbuild/win32-arm64@0.21.5': optional: true '@esbuild/win32-ia32@0.21.5': optional: true '@esbuild/win32-x64@0.21.5': optional: true '@jridgewell/gen-mapping@0.3.13': dependencies: '@jridgewell/sourcemap-codec': 1.5.5 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/resolve-uri@3.1.2': {} '@jridgewell/sourcemap-codec@1.5.5': {} '@jridgewell/trace-mapping@0.3.31': dependencies: '@jridgewell/resolve-uri': 3.1.2 '@jridgewell/sourcemap-codec': 1.5.5 '@kurkle/color@0.3.4': {} '@lezer/common@1.5.1': {} '@lezer/css@1.3.3': dependencies: '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 '@lezer/highlight@1.2.3': dependencies: '@lezer/common': 1.5.1 '@lezer/html@1.3.13': dependencies: '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 '@lezer/javascript@1.5.4': dependencies: '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 '@lezer/json@1.0.3': dependencies: '@lezer/common': 1.5.1 '@lezer/highlight': 1.2.3 '@lezer/lr': 1.4.8 '@lezer/lr@1.4.8': dependencies: '@lezer/common': 1.5.1 '@marijn/find-cluster-break@1.0.2': {} '@parcel/watcher-android-arm64@2.5.6': optional: true '@parcel/watcher-darwin-arm64@2.5.6': optional: true '@parcel/watcher-darwin-x64@2.5.6': optional: true '@parcel/watcher-freebsd-x64@2.5.6': optional: true '@parcel/watcher-linux-arm-glibc@2.5.6': optional: true '@parcel/watcher-linux-arm-musl@2.5.6': optional: true '@parcel/watcher-linux-arm64-glibc@2.5.6': optional: true '@parcel/watcher-linux-arm64-musl@2.5.6': optional: true '@parcel/watcher-linux-x64-glibc@2.5.6': optional: true '@parcel/watcher-linux-x64-musl@2.5.6': optional: true '@parcel/watcher-win32-arm64@2.5.6': optional: true '@parcel/watcher-win32-ia32@2.5.6': optional: true '@parcel/watcher-win32-x64@2.5.6': optional: true '@parcel/watcher@2.5.6': dependencies: detect-libc: 2.1.2 is-glob: 4.0.3 node-addon-api: 7.1.1 picomatch: 4.0.4 optionalDependencies: '@parcel/watcher-android-arm64': 2.5.6 '@parcel/watcher-darwin-arm64': 2.5.6 '@parcel/watcher-darwin-x64': 2.5.6 '@parcel/watcher-freebsd-x64': 2.5.6 '@parcel/watcher-linux-arm-glibc': 2.5.6 '@parcel/watcher-linux-arm-musl': 2.5.6 '@parcel/watcher-linux-arm64-glibc': 2.5.6 '@parcel/watcher-linux-arm64-musl': 2.5.6 '@parcel/watcher-linux-x64-glibc': 2.5.6 '@parcel/watcher-linux-x64-musl': 2.5.6 '@parcel/watcher-win32-arm64': 2.5.6 '@parcel/watcher-win32-ia32': 2.5.6 '@parcel/watcher-win32-x64': 2.5.6 optional: true '@rollup/rollup-android-arm-eabi@4.60.0': optional: true '@rollup/rollup-android-arm64@4.60.0': optional: true '@rollup/rollup-darwin-arm64@4.60.0': optional: true '@rollup/rollup-darwin-x64@4.60.0': optional: true '@rollup/rollup-freebsd-arm64@4.60.0': optional: true '@rollup/rollup-freebsd-x64@4.60.0': optional: true '@rollup/rollup-linux-arm-gnueabihf@4.60.0': optional: true '@rollup/rollup-linux-arm-musleabihf@4.60.0': optional: true '@rollup/rollup-linux-arm64-gnu@4.60.0': optional: true '@rollup/rollup-linux-arm64-musl@4.60.0': optional: true '@rollup/rollup-linux-loong64-gnu@4.60.0': optional: true '@rollup/rollup-linux-loong64-musl@4.60.0': optional: true '@rollup/rollup-linux-ppc64-gnu@4.60.0': optional: true '@rollup/rollup-linux-ppc64-musl@4.60.0': optional: true '@rollup/rollup-linux-riscv64-gnu@4.60.0': optional: true '@rollup/rollup-linux-riscv64-musl@4.60.0': optional: true '@rollup/rollup-linux-s390x-gnu@4.60.0': optional: true '@rollup/rollup-linux-x64-gnu@4.60.0': optional: true '@rollup/rollup-linux-x64-musl@4.60.0': optional: true '@rollup/rollup-openbsd-x64@4.60.0': optional: true '@rollup/rollup-openharmony-arm64@4.60.0': optional: true '@rollup/rollup-win32-arm64-msvc@4.60.0': optional: true '@rollup/rollup-win32-ia32-msvc@4.60.0': optional: true '@rollup/rollup-win32-x64-gnu@4.60.0': optional: true '@rollup/rollup-win32-x64-msvc@4.60.0': optional: true '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(svelte@4.2.20)(vite@5.4.21(sass@1.98.0)))(svelte@4.2.20)(vite@5.4.21(sass@1.98.0))': dependencies: '@sveltejs/vite-plugin-svelte': 3.1.2(svelte@4.2.20)(vite@5.4.21(sass@1.98.0)) debug: 4.4.3 svelte: 4.2.20 vite: 5.4.21(sass@1.98.0) transitivePeerDependencies: - supports-color '@sveltejs/vite-plugin-svelte@3.1.2(svelte@4.2.20)(vite@5.4.21(sass@1.98.0))': dependencies: '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(svelte@4.2.20)(vite@5.4.21(sass@1.98.0)))(svelte@4.2.20)(vite@5.4.21(sass@1.98.0)) debug: 4.4.3 deepmerge: 4.3.1 kleur: 4.1.5 magic-string: 0.30.21 svelte: 4.2.20 svelte-hmr: 0.16.0(svelte@4.2.20) vite: 5.4.21(sass@1.98.0) vitefu: 0.2.5(vite@5.4.21(sass@1.98.0)) transitivePeerDependencies: - supports-color '@types/estree@1.0.8': {} '@types/hammerjs@2.0.46': {} acorn@8.16.0: {} aria-query@5.3.2: {} axobject-query@4.1.0: {} chart.js@4.5.1: dependencies: '@kurkle/color': 0.3.4 chartjs-adapter-luxon@1.3.1(chart.js@4.5.1)(luxon@3.7.2): dependencies: chart.js: 4.5.1 luxon: 3.7.2 chartjs-plugin-zoom@2.2.0(chart.js@4.5.1): dependencies: '@types/hammerjs': 2.0.46 chart.js: 4.5.1 hammerjs: 2.0.8 chokidar@4.0.3: dependencies: readdirp: 4.1.2 code-red@1.0.4: dependencies: '@jridgewell/sourcemap-codec': 1.5.5 '@types/estree': 1.0.8 acorn: 8.16.0 estree-walker: 3.0.3 periscopic: 3.1.0 crelt@1.0.6: {} css-tree@2.3.1: dependencies: mdn-data: 2.0.30 source-map-js: 1.2.1 debug@4.4.3: dependencies: ms: 2.1.3 deepmerge@4.3.1: {} detect-libc@2.1.2: optional: true esbuild@0.21.5: optionalDependencies: '@esbuild/aix-ppc64': 0.21.5 '@esbuild/android-arm': 0.21.5 '@esbuild/android-arm64': 0.21.5 '@esbuild/android-x64': 0.21.5 '@esbuild/darwin-arm64': 0.21.5 '@esbuild/darwin-x64': 0.21.5 '@esbuild/freebsd-arm64': 0.21.5 '@esbuild/freebsd-x64': 0.21.5 '@esbuild/linux-arm': 0.21.5 '@esbuild/linux-arm64': 0.21.5 '@esbuild/linux-ia32': 0.21.5 '@esbuild/linux-loong64': 0.21.5 '@esbuild/linux-mips64el': 0.21.5 '@esbuild/linux-ppc64': 0.21.5 '@esbuild/linux-riscv64': 0.21.5 '@esbuild/linux-s390x': 0.21.5 '@esbuild/linux-x64': 0.21.5 '@esbuild/netbsd-x64': 0.21.5 '@esbuild/openbsd-x64': 0.21.5 '@esbuild/sunos-x64': 0.21.5 '@esbuild/win32-arm64': 0.21.5 '@esbuild/win32-ia32': 0.21.5 '@esbuild/win32-x64': 0.21.5 estree-walker@3.0.3: dependencies: '@types/estree': 1.0.8 flatpickr@4.6.13: {} fsevents@2.3.3: optional: true hammerjs@2.0.8: {} immutable@5.1.5: {} is-extglob@2.1.1: optional: true is-glob@4.0.3: dependencies: is-extglob: 2.1.1 optional: true is-reference@3.0.3: dependencies: '@types/estree': 1.0.8 kleur@4.1.5: {} leaflet@1.9.4: {} locate-character@3.0.0: {} luxon@3.7.2: {} magic-string@0.30.21: dependencies: '@jridgewell/sourcemap-codec': 1.5.5 mdn-data@2.0.30: {} ms@2.1.3: {} nanoid@3.3.11: {} node-addon-api@7.1.1: optional: true periscopic@3.1.0: dependencies: '@types/estree': 1.0.8 estree-walker: 3.0.3 is-reference: 3.0.3 picocolors@1.1.1: {} picomatch@4.0.4: optional: true pocketbase@0.26.8: {} postcss@8.5.8: dependencies: nanoid: 3.3.11 picocolors: 1.1.1 source-map-js: 1.2.1 readdirp@4.1.2: {} regexparam@2.0.2: {} rollup@4.60.0: dependencies: '@types/estree': 1.0.8 optionalDependencies: '@rollup/rollup-android-arm-eabi': 4.60.0 '@rollup/rollup-android-arm64': 4.60.0 '@rollup/rollup-darwin-arm64': 4.60.0 '@rollup/rollup-darwin-x64': 4.60.0 '@rollup/rollup-freebsd-arm64': 4.60.0 '@rollup/rollup-freebsd-x64': 4.60.0 '@rollup/rollup-linux-arm-gnueabihf': 4.60.0 '@rollup/rollup-linux-arm-musleabihf': 4.60.0 '@rollup/rollup-linux-arm64-gnu': 4.60.0 '@rollup/rollup-linux-arm64-musl': 4.60.0 '@rollup/rollup-linux-loong64-gnu': 4.60.0 '@rollup/rollup-linux-loong64-musl': 4.60.0 '@rollup/rollup-linux-ppc64-gnu': 4.60.0 '@rollup/rollup-linux-ppc64-musl': 4.60.0 '@rollup/rollup-linux-riscv64-gnu': 4.60.0 '@rollup/rollup-linux-riscv64-musl': 4.60.0 '@rollup/rollup-linux-s390x-gnu': 4.60.0 '@rollup/rollup-linux-x64-gnu': 4.60.0 '@rollup/rollup-linux-x64-musl': 4.60.0 '@rollup/rollup-openbsd-x64': 4.60.0 '@rollup/rollup-openharmony-arm64': 4.60.0 '@rollup/rollup-win32-arm64-msvc': 4.60.0 '@rollup/rollup-win32-ia32-msvc': 4.60.0 '@rollup/rollup-win32-x64-gnu': 4.60.0 '@rollup/rollup-win32-x64-msvc': 4.60.0 fsevents: 2.3.3 sass@1.98.0: dependencies: chokidar: 4.0.3 immutable: 5.1.5 source-map-js: 1.2.1 optionalDependencies: '@parcel/watcher': 2.5.6 source-map-js@1.2.1: {} style-mod@4.1.3: {} svelte-flatpickr@3.3.5(svelte@4.2.20): dependencies: flatpickr: 4.6.13 svelte: 4.2.20 svelte-hmr@0.16.0(svelte@4.2.20): dependencies: svelte: 4.2.20 svelte-spa-router@4.0.2: dependencies: regexparam: 2.0.2 svelte@4.2.20: dependencies: '@ampproject/remapping': 2.3.0 '@jridgewell/sourcemap-codec': 1.5.5 '@jridgewell/trace-mapping': 0.3.31 '@types/estree': 1.0.8 acorn: 8.16.0 aria-query: 5.3.2 axobject-query: 4.1.0 code-red: 1.0.4 css-tree: 2.3.1 estree-walker: 3.0.3 is-reference: 3.0.3 locate-character: 3.0.0 magic-string: 0.30.21 periscopic: 3.1.0 vite@5.4.21(sass@1.98.0): dependencies: esbuild: 0.21.5 postcss: 8.5.8 rollup: 4.60.0 optionalDependencies: fsevents: 2.3.3 sass: 1.98.0 vitefu@0.2.5(vite@5.4.21(sass@1.98.0)): optionalDependencies: vite: 5.4.21(sass@1.98.0) w3c-keyname@2.2.8: {} Klbd)x[ؕtOiujFYdFu!bH֌b~E0` $Rk*d '1cxƼ~8#08dUr#sȽ7{֥/>;orax3/g>߻kzVEz&v=_7sIc'?)LO/=݋UL=}^3cEKèz^a+]k_(Ω@UHOb5Ɩꌎ:pH\c2K0T˥V|7B_W%ýoݻwx÷˿w|ofTt_IfPN_8ӭOsN2:U="h2-\-d;@7`9"M;Pk <yn<>]7χ8WA<ڑ'i#@׽)`23y:n=F;Xz M twj3cv8AMrFF%_zРrߺ9"57$ Xm[uL wӴ*S'լ<(:']_\`YF,b%+C[E8M\1mY7:,%Z^ =MCepj KH&MȀ$EaUD5vR -jtL~nLpϬ~ÿ_z _# $ EδtYF3]QR28{ *7i_4(1 Kso~w^$(θKaQSP.ݤ]Rd W0&ZYLi!@ ,ehBqCq21'KK׿63FwWOaYDeķP!:Uvf>uiCrލFʬ Zo 64Ey'៿7K٢ k 1Mѱ|'48[/\PjP^GsL%E:':~GZā2bhҳCkFYg]5(]d ~D`{m[\ЌOg^ nUZ6ȂCn?ɧ!{Iד Vx)D#켗\:r\OmsGKG- S%( Ls'no(:Ŷ)|'9Y(&iB~IdkVAuJOܖ\(_~*xީ=uoo÷>xD< K2`՞+5i 47+zDF0qm*.-`2> 觯3ћEZ'jkM8 I:1N3vH _0rmRwlow#ژ6M +p6\1~zGHUUf\"ͪM_ 񰶫U>F\P(^>6ڬ%kd'/φG/n/̂ӧjJ2cj(%Jf3դQ 8ɘː;׈;m3Æx1³BKA3]F~fX8qfevirO $v/s.Ro&Z("Dh+*u?Ӟʲp=v)a8PT!2aܨG`nؿi2u`&ϩ$]Ʋ9ŵD'ۅBM<5q^9GNWȢK7xi,cauW@.QCP葳"-v =Tj4AG j4x.eN̖7~u1G^GVArϒj"om{uӰJv-(1ZK!9*9U^h-noyNXPJ?s,lZɶ*.AXp}i&ormf2hdG>x?{#$R)K6,RA)XsmUH:!@̹M4EKAf}aHm|+^<]F]GL|<*]H8_"*hnNRGH9υ2XkOJ6u h|Y_hNU@8qWΪ;(%<]GP>Mn j& %TFN!q{t`b^cSSPBMd~!ߵ-މf,cRcҘ9ihLz.mv-VP$ :Tu`eL$ 8cLwr񺿗*9tr ؃F 'aeGt%((Z'fwnkFT=О2n՗=z'> (r)]^LLo0{}+'܇y9y(/쑩:N]ƙ0[qXpFُoLRGf8wŚkE!?yp;l樾Z m0Ua}]X૎Ď>"¼7jCgua',\]Wz,QȲ`%}qeJ:~d+.NL܆=&)ysd^6)i,z`v?2۝xaHb8.6z㝡$VPu AS9ͣ:'vho<Id$%3nvKLfcy"(ȺU*˺i)fK>2P4T;c9$$Ғr7E+AQ)6#h{'aeL!&95'1p4LhǖnZb'߅umG+פۅlA;@7@;G`[fr<-DަV/FR-c’13_^k 멍l5AWG=> Zi0-.4Kyx |N<Ӂv-aM| $Ь_9Cg$ D[%W'{"A'7dϛ}dݸK#BMmWjkv{>h$ i1H)" G\h|řiK}ub4ؙl=ۃk[^@"Pd|n%o~U` =sB zXCa'b׭Rh$v-9gRRbeD9vd-'J7AhIc=S{<{_SԬ&tbB1 o˸|?h7IpU*kvW#aBMNIR#3~!7켋 K{㥓O+ͷ `SҊt[h_o. ҬqQ?v }e=XLR ֫ǔclG}' T ҟh\ZgM.Y,J ;*ͺ}w蠛JS=0ғ$lo*R63UZ^wW \ " snѧ=.(mrqӺ %!jcZWG,>FۀQ8vӎ mvhkgԵ9RṚFw.1ʏr6E/jݙI9V=<|ῗ_j)vcG1i%5m[hq}x/L\S%0Ya]](eQiAnn4v1) St=7¡| sPz,e:H^\Ǜi'0D+ba,fpr#Жձ|00nJk_W獌bX=Z{sqyueG uŲY1KS20%a^R.!7=@Ӫ#LY;5'' zLUõMȫ>IZ%2bXkQAFJKأ?½+=3oJmlÖRNWFÊ)ANmW^WHUΛl3#L,ҴPHLJy9E6Ts=PuCzC9d-,9PU'v@7╍ Z*&?˓)1Ն7&1 x__ =t2=leE,2J)^Tb63xskrbnc<w%6slr:('89܎u^Wؙ@I=v"T}M5 #"e`Mw f)'yEFxg:@%el8jbjէM=2@ _(F%6}"@dSbi被ElLAJ<Ǝ|rPF}_/Q1p2.fR/ M%fU:Hބ'4?Uos/B(rJk%  /-ٲlR%dƅe? ?}%Jm3PVG=EHvuBIhk]  T1l2j6,~cތ@:",F_6*o9|}Rvz-t; Sb8\nqu3Uvɗ0SBC mG@V\MMƞ%ۆ~FҡkoFڣnb&,½'Ĺw2nS1d@17qm9pv|`dǘr 1iӳ"Ӱlиv_X_ f]tFnEv AJ@JIiwLW ] ,棖^ec,[Wp GlrY9nk#9NiWmY:9n^Q.ZL 0{1Y셪]E٘I$! `Z-!B8 p)n^4c.xOv ;lcU͕.F"aoMzapVt1Ȯɍn̪p!a4%;@0L˜jjSèE2b\ AFvga .r۾^Acn.LۃFn,Τ=,%3G nʳHJu v q4~^P &9L/gj[J]CJ4Yso=4>7 F[Х0pՌ%*yӃ +q$Y@;(mtJĖB]Lʆtq{nnp+W^5F:SwU pMn18cAk$<:^2$ lc c ci!Ԩ@<%Iki $BsYqdžϓ 89׹~c^`alwOz63O`'BBV n&2R#vjE]*k+I=KqDu]]mA8 zWD\=aB4(:x.}AX#o>#8GƔ!>Ǭ3a/ ;UEu65aNS} Ag;4ӮhmՑ<ivOl56o@2YhG ]E%r50 \0| @2soy5ʰ[zفJ5p`=#Ac)>vGlQ15Zo}UlӁ2o`h₡I _X!nǤF АHgPuxv'u4'/($d}2"_krsZ"$)Fѓcݼ Hv 5n&}G#}&C;gYLbKLf>͠\@%B2 $Jru+'t2;2"nɶuYѐMo <@JB0pՑVf( 6GLa/6Jӳ6KsZyufuL=*uᦞ.J}ߑĸ2* X5RjKi3Fm:Xlf Dw3tUSKJk1 .d`8VhwWkEXȼ6꯴=|ysPͮڷ*]~յ* 2/= ,eɃU"n08DJ0m&|/;aQt,m%S-'>=5C'lRk$\{_[^o mF }}d8 ǜkZJFzYQfۙxG;76"U>۷Ɉ,ySWAP{\g.ݐ'͛06VnJITL\hy2"=a 4 ?Y'فjӼ],nw"5V@Nlݒn.f1'M6 lC텴]p5e_[gtq溅9|'l. TOΓdTDQuMxI g\w+~3W.ɶ /Rk~H잕}Ԉ'k')- ;x~맧78^ ؽknڧʰvZM>{3O/{v ߼[s\2\%Ў_(ݹ cWC%2 >ܺFO*&> OuI|>^sm=lyN;/*i;wƟ' (<'!4_;!fd A?y-1]ܩx7J_%a3e÷ÿ\ wtcnEdzUO:T ܶSSt|J*B^ç;Iǖy)>m Rg17?xz:g 8}!tn8f3CpD@oy?xpbo~.ox ?='A}e!Ş{x)$u{]X;һ6ٲI ˇ ֓|G;tuJ;M9lHആ_7?|N̏g2Oe)qztLpo3_۔MI޼>'+yas``1 neulzyr~x{P3dE듄؍y>)~fe'h7J?39FR>j\v9>??[1h@}inV<xA;gxkOFw2 794ε7 V5+Wփgl7PTUxY$.HO"s('MF2t;0hz^t6ybD[6n"hV/Eڠm:N&vh^+_x?l:>_yQ+GK~~?ɧOO^_>o};3|aOp~G?#⍧G=ჟr%OOݾ=^쵋G^liןii!i}O߀O^YioIS۽'V6}D/ w/7$3n`V潇G3L<w㾗aƻ1Ӌ9RSȹ6xn~ctJho`텍?sMy(px_~~$rmIe`O5 T or'+-Ut(ɋmZYR/S婗+隦kOZ_ M%(/[)n|v+zLorCvm;qz?οY?w~l/pxO|V'Y=]<~[AkAb_y`nnEB'= fZhiO?}6vwgωo@+hH?s2Tѣ#l?%ch1˓NĤIwL9z p;o0x$100644 index.tsugZq$f*.[! ^ xx,// @hanzo/private — per-user encrypted blob store SDK. // // One API, three backends: // * LocalBackend: PUT/GET/LIST/DELETE /v1/base/private/{tag} // * ChainBackend: PrivateStore.sol on any EVM // * IpfsBackend: store ciphertext on IPFS, index CID locally // // Clients are responsible for encryption. This SDK carries ciphertext and // doesn't touch plaintext. Pair it with a passkey-derived key + age/X-Wing // for end-to-end PQ-safe privacy. // // const store = new PrivateStore({ backend: 'local', baseUrl: '/v1/base' }) // await store.put('watchlist', ciphertext) // Uint8Array // const ct = await store.get('watchlist') // await store.list() // [{tag, size, updatedAt}] // await store.delete('watchlist') export interface PrivateBackend { put(tag: string, ct: Uint8Array): Promise<{ tag: string; size: number; updatedAt: number }> get(tag: string): Promise list(): Promise delete(tag: string): Promise } export interface PrivateListItem { tag: string size: number updatedAt: number } // ---------- Local (Base /private) ---------- export interface LocalBackendOptions { /** Base URL for the Base API group. Defaults to '/api'. */ baseUrl?: string /** Called for each request to attach auth (e.g. Bearer JWT). */ authHeader?: () => string | undefined /** Custom fetch for non-browser environments. */ fetchImpl?: typeof fetch } export class LocalBackend implements PrivateBackend { private base: string private authHeader?: () => string | undefined private fetchImpl: typeof fetch constructor(opts: LocalBackendOptions = {}) { this.base = (opts.baseUrl ?? '/api').replace(/\/$/, '') this.authHeader = opts.authHeader this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis) } private headers(extra?: Record): HeadersInit { const h: Record = { ...(extra ?? {}) } const auth = this.authHeader?.() if (auth) h['Authorization'] = auth return h } async put(tag: string, ct: Uint8Array): Promise<{ tag: string; size: number; updatedAt: number }> { if (ct.length === 0) throw new Error('ciphertext must be non-empty; use delete() to remove') // Copy into a fresh ArrayBuffer so TS narrows away SharedArrayBuffer. const buf = new ArrayBuffer(ct.byteLength) new Uint8Array(buf).set(ct) const body = new Blob([buf]) const res = await this.fetchImpl(`${this.base}/private/${encodeURIComponent(tag)}`, { method: 'PUT', body, headers: this.headers({ 'Content-Type': 'application/octet-stream' }), }) if (!res.ok) throw new PrivateError(res.status, await res.text()) const j = (await res.json()) as { tag: string; size: number; updated_at: number } return { tag: j.tag, size: j.size, updatedAt: j.updated_at } } async get(tag: string): Promise { const res = await this.fetchImpl(`${this.base}/private/${encodeURIComponent(tag)}`, { method: 'GET', headers: this.headers(), }) if (res.status === 404) throw new PrivateError(404, 'not found') if (!res.ok) throw new PrivateError(res.status, await res.text()) const buf = await res.arrayBuffer() return new Uint8Array(buf) } async list(): Promise { const res = await this.fetchImpl(`${this.base}/private`, { method: 'GET', headers: this.headers(), }) if (!res.ok) throw new PrivateError(res.status, await res.text()) const j = (await res.json()) as { items: Array<{ tag: string; size: number; updated_at: number }> } return j.items.map((r) => ({ tag: r.tag, size: r.size, updatedAt: r.updated_at })) } async delete(tag: string): Promise { const res = await this.fetchImpl(`${this.base}/private/${encodeURIComponent(tag)}`, { method: 'DELETE', headers: this.headers(), }) if (!res.ok && res.status !== 204) throw new PrivateError(res.status, await res.text()) } } // ---------- Chain (PrivateStore.sol) ---------- /** Minimal viem-shaped interface — we don't import viem to keep this a * peer dep. Users pass in their already-initialised clients. */ export interface ChainBackendOptions { /** Contract address on the target chain. */ address: `0x${string}` /** viem PublicClient-like object: readContract(). */ publicClient: { readContract: (args: { address: `0x${string}` abi: readonly unknown[] functionName: string args: readonly unknown[] }) => Promise } /** viem WalletClient-like object: writeContract(), account. */ walletClient: { account: { address: `0x${string}` } writeContract: (args: { address: `0x${string}` abi: readonly unknown[] functionName: string args: readonly unknown[] }) => Promise<`0x${string}`> } } export const privateStoreAbi = [ { type: 'function', name: 'put', stateMutability: 'nonpayable', inputs: [ { name: 'tagHash', type: 'bytes32' }, { name: 'ct', type: 'bytes' }, ], outputs: [], }, { type: 'function', name: 'get', stateMutability: 'view', inputs: [ { name: 'owner', type: 'address' }, { name: 'tagHash', type: 'bytes32' }, ], outputs: [{ name: '', type: 'bytes' }], }, { type: 'function', name: 'updatedAt', stateMutability: 'view', inputs: [ { name: 'owner', type: 'address' }, { name: 'tagHash', type: 'bytes32' }, ], outputs: [{ name: '', type: 'uint64' }], }, { type: 'function', name: 'del', stateMutability: 'nonpayable', inputs: [{ name: 'tagHash', type: 'bytes32' }], outputs: [], }, ] as const /** Client-side tag hashing. The chain never sees the raw tag string. */ export async function hashTag(tag: string): Promise<`0x${string}`> { const data = new TextEncoder().encode(tag) const digest = await crypto.subtle.digest('SHA-256', data) const bytes = new Uint8Array(digest) return ('0x' + Array.from(bytes).map((b) => b.toString(16).padStart(2, '0')).join('')) as `0x${string}` } export class ChainBackend implements PrivateBackend { constructor(private opts: ChainBackendOptions) {} async put(tag: string, ct: Uint8Array): Promise<{ tag: string; size: number; updatedAt: number }> { if (ct.length === 0) throw new Error('ciphertext must be non-empty; use delete() to remove') const tagHash = await hashTag(tag) const ctHex = ('0x' + Array.from(ct).map((b) => b.toString(16).padStart(2, '0')).join('')) as `0x${string}` await this.opts.walletClient.writeContract({ address: this.opts.address, abi: privateStoreAbi, functionName: 'put', args: [tagHash, ctHex], }) // Contract returns no value; read timestamp back. const ts = (await this.opts.publicClient.readContract({ address: this.opts.address, abi: privateStoreAbi, functionName: 'updatedAt', args: [this.opts.walletClient.account.address, tagHash], })) as bigint return { tag, size: ct.length, updatedAt: Number(ts) * 1000 } } async get(tag: string): Promise { const tagHash = await hashTag(tag) const result = (await this.opts.publicClient.readContract({ address: this.opts.address, abi: privateStoreAbi, functionName: 'get', args: [this.opts.walletClient.account.address, tagHash], })) as `0x${string}` return hexToBytes(result) } async list(): Promise { // On-chain listing requires indexing Put events off-chain. By design // this backend doesn't enumerate — callers should keep a local index // (e.g. via LocalBackend with the CIDs/tagHashes as small entries). throw new Error( 'ChainBackend.list() is not supported on-chain by design. ' + 'Index Put events off-chain or use a companion LocalBackend for enumeration.', ) } async delete(tag: string): Promise { const tagHash = await hashTag(tag) await this.opts.walletClient.writeContract({ address: this.opts.address, abi: privateStoreAbi, functionName: 'del', args: [tagHash], }) } } // ---------- IPFS ---------- export interface IpfsBackendOptions { /** HTTP API endpoint for the IPFS node (e.g. http://localhost:5001). */ apiUrl: string /** Companion index for enumeration — normally a LocalBackend. */ index: PrivateBackend /** Custom fetch. */ fetchImpl?: typeof fetch } /** Write ciphertext to IPFS and track the CID in a companion index. * The ciphertext is opaque — IPFS nodes can't decrypt. */ export class IpfsBackend implements PrivateBackend { private api: string private fetchImpl: typeof fetch private index: PrivateBackend constructor(opts: IpfsBackendOptions) { this.api = opts.apiUrl.replace(/\/$/, '') this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis) this.index = opts.index } async put(tag: string, ct: Uint8Array): Promise<{ tag: string; size: number; updatedAt: number }> { const form = new FormData() const buf = new ArrayBuffer(ct.byteLength) new Uint8Array(buf).set(ct) form.append('file', new Blob([buf])) const res = await this.fetchImpl(`${this.api}/api/v0/add?pin=true`, { method: 'POST', body: form, }) if (!res.ok) throw new PrivateError(res.status, await res.text()) const j = (await res.json()) as { Hash: string } const cid = j.Hash await this.index.put(tag, new TextEncoder().encode(cid)) return { tag, size: ct.length, updatedAt: Date.now() } } async get(tag: string): Promise { const cidBytes = await this.index.get(tag) const cid = new TextDecoder().decode(cidBytes) const res = await this.fetchImpl(`${this.api}/api/v0/cat?arg=${encodeURIComponent(cid)}`, { method: 'POST', }) if (!res.ok) throw new PrivateError(res.status, await res.text()) return new Uint8Array(await res.arrayBuffer()) } async list(): Promise { return this.index.list() } async delete(tag: string): Promise { // Unpin the CID we recorded, then remove from the index. try { const cidBytes = await this.index.get(tag) const cid = new TextDecoder().decode(cidBytes) await this.fetchImpl(`${this.api}/api/v0/pin/rm?arg=${encodeURIComponent(cid)}`, { method: 'POST' }) } catch { // Indifferent to unpin failure — the index delete is what matters. } await this.index.delete(tag) } } // ---------- Errors ---------- export class PrivateError extends Error { constructor(public status: number, public body: string) { super(`PrivateStore error: ${status} ${body}`) } } // ---------- Factory ---------- export type PrivateStoreOptions = | ({ backend: 'local' } & LocalBackendOptions) | ({ backend: 'chain' } & ChainBackendOptions) | ({ backend: 'ipfs' } & IpfsBackendOptions) export function createPrivateStore(opts: PrivateStoreOptions): PrivateBackend { switch (opts.backend) { case 'local': return new LocalBackend(opts) case 'chain': return new ChainBackend(opts) case 'ipfs': return new IpfsBackend(opts) } } // ---------- Utils ---------- function hexToBytes(hex: `0x${string}`): Uint8Array { const s = hex.slice(2) const out = new Uint8Array(s.length / 2) for (let i = 0; i < out.length; i++) out[i] = parseInt(s.slice(i * 2, i * 2 + 2), 16) return out } {z+xmRn0 (ljv0 )M H*q oӂl~yn e 5IEhOLtk p{D5f .Qtb0^IJdA,O tvi)xCl~vnkqx:ukɼL3xe 0iIQ(wpc CZo%`>O;'})=J׎ Ę~@î]\`)#h*Ҳ1'S)aQJǠS+NH!FCLg38pϽZGxQUŗV[m̶3ȼ3ۚ[ 5J_5?,loԼҜ̒Լ,%V.ِH&)100644 multitenant_test.god&^ߤɉNko%Y!x340031QHK.J-LNKg-|xek۔+/I-..>&[ivFf@U''L=?ۂrk/xZn-=TSrCQ^u@l+]N$a,FPⰜ/C $= /$,9|h'vƓkLI%\&I8s٧\0䆝:L܈ꞝ^|N&L WJ!Fޠkqg޾1 T,fi]y.6UER4);{:c܌+ H9X^hV,(|=#3ϷKq&A}wqb n-yIq9i4s#)7|JP!7LDq ̹,3迋'=m\@NR'`m]d4a(dMJ,i "Xuf?~*B,QfM H*~`N3'<5]|&/JQQ83rI2bZvۥ<%Y\ Uye'oOb Q3#,ڨ.^OTu2 2 @TBEm1vfYW('"ư0^D>cc(62 67Y\ ~Yny.]]6>WΦVud6YVk´qn+ n&)T)) ^wW'1ACzKU! OvCOLA'#00҄ۥL=b+2_,JI)(BEAcJKk^T7epr( "4!3 <*G -SAg$;)U, lc`pjml,WP:LSf(0;T%Xy(+։̥hz= R ڲ%1p}r;c8+p0#xH aJ!((zUUuيHj1>ch_h z'j5CGۿi}^er.+ɻSANɸp蟋 R)@ʭbs^J?}g `@j7v`à5ݢř #W5Da>]άFWNNCl4A/9T)'f6L]WFi^gQ6OP2ɱ8A%Bk`.vG&@$S"BWL쳣,6j&12>υsC5hfm` YfI 3}RHcP9t21p&+i[PA*ڀ`\i.h~A}BXsdǓcxw@>nP'E0¾1hy LRxCÈRՊ 0tH=gh8؞(h:BZLJh8FK9NS i;S-v.p+ ͨ5~_]vF-w-ޅm B<ʠG. 6=[UiHa;Mag()Q:gs7e{#byiVQ?l4"Y>ڜ$ 5[4@fwѪvʊCvEYxЌ&:>M1P{:]O_\Eop ю/<|q{{k a&x)b7MM/Qm1{W(Oi|·0zk-vZ9NCk<ï1~q^|[%77wq<;z1Q{S*[BŹ{|Mrgp tl*#A2 G@BA Drs"c ZzE 7Ma U ƗdvX*z$Sјj/fmvéNV j ģ>Fs0$˩c׃Ի!jm :zA\-5ͯl0]<"֟>{>CE_^u FZS4Q+g?9('"rp%o/kZfF­@Bk E]{K].@~kj-^ >W*>hXR`VoP?#'lL{b !pVwڠoALkPNٚoMٝNxE3yȵQ*ZvlСX5r)ZzQXPH\[eFSDyNCׄpe. cٚyGw%|-{ێ<!L(Yo9XSKNSƕXaz~TkNaP)lfeטּ/>Bϯ='h74&m#&(ω^qˠ]Y{J;vBihL=fB.=x.>θhn ͂ ;<\9m+{)}F)tM-'QԊ)ޠʍ3qAX{ l+ZUL~f;ZAM7Øי.>Lo]~p 5٣: \?|?hGPEY 2INT1A =p7:Su F]A_A@bcމ~;ֽyLywxT]O@|b)ҹl[PmQ)Pު*&p{l'1N Ծ$s;3;3vdwUf,dL -y\ogZ.K4FtJ5=K(Ӌ6Q?u"4[-lQ-g2f xެRLJgIqVNU JZ: 8dZ/57RAGMpQK#n"W0r~A8NHW 8AP1|_K;x›k lKOalQan>i{>5G pe;.s@%Z-'`<&!`EFX۶=3gpԴ>n.m c5],Ys#N(,*K"t9"\Zv?bQҪ=ohM;x7okkzkL.vlQ@y%tut4?J.)T9W|'9&!J/sT$i%~ Ѿd`&Kɰ"phTi6fmB0f¿7eI1Bߖ7jWxUMo0=o~ŰHhRQ/HBֱ̈́#ۻm(I6-mA\v潙I#+bB$c=d0㥟ңqUR!?py+Z˒d62sҁRZ\xc9eZe,yt3kK]jΟm] 9TKKYR`z$jxBKNZU WE:H!k(SV? ExP$Z/nB2dt}Ձmt>>qgԦt J&d⃑: ooϕp%˒lJj0rRu;DXnbt>?-J|6o=fRt0/²d"+^㊏+ȡRHڴr3/aR1`_&d됂%L zªvJ%C?@>D[H<.q׸>DUtW'tUK bxRz9ױ_Je~yL2Fcz]'yZ+L6zw4mMYZ1D ,p(IR7x( ~}];QzknkvlnO#LٔJ2#Kqؤl}ӸN䮜:oiw^(6% G:rPӎqf+t Ɉs/վ)n[w3߶?n3VDck}hF%I46P O?<Ǚ^.ƽxZr->F`JB3I[!Y-%w, v<3x(էɓ(R4IqwwoOVCkJ|lW*-r5)F-V&yο}VFL?uriJVM+ZZVPIm(¨ Ki5Y}~—Z[U/ $*Sz.l/3W]P-$*)ԣ'z65-ZlNOD>%eIGEQVjأjdD=y<|tdy/?[_{1`簢Mi^JR]NJl"K0*FDB}1̸CSmQ'"3Iex"ds5BWR^p>HiIQG E n/ڎ+Cos_X^DToOtU?:O)1ozt{:O]eab.V aH;+?~UT:X5)c P?~VQ'ڈ2òه]{Oߴib*aoȹOTܹ~+X[1L\"Cخ T8% Ǭ@DW m" 5Wxc:%/L[N=D4|.r Q@Q{cB&p|1%Gj`0V$M">-uǻ=qףh/WEV2sy^׃76?%f|Ps̙q7d*3H|NdgaiIVOM/]Ll1A̡r@ MwÅ;V>~Qʝ5]ԮlHŢDw|9"MH-"P5l=P;x>'5j4,T a2P2PT+S\p ž}cw'֞XI#PU͡r8X/ռb AQ:0$!O=;z Ip%b2'ٛ,S#7BqՁre+W^8Ax.=eN|m JiPmm[yP-T9U+pV#pJłqӖ]> Ԇ)Va-h{p䙐'ϟy{_-CAģ86+o=C [j R(~'FV،kkQo&vSbʃl|ρ@h־>k F{ې˞iPB#E:}p] ˝#t\Hm`U,!ƋeC/NJcP@BY3ԃQ@b.P3@'.j!V=z#IN+K&Xx ž;Z3ݩ`+cs7 B$ќlt) y[mR:-D6 T3>‰";*Oj< /WmF))'zY|l^/QJEo t/lᓓfuAH[N &ǜ521Ze$6-D fup47;>?XF,Ě!y'b*^rx1M^Ov pEx{hwn< qV؀bl]@`:!ֹ CgKIm|^j^jxXh82J-(V=95ŁxBNPhM0qNW )FqBr\S 4]g0;%0)f6`LTԀAY 9, 2&qJ05f5t^֋ =hTTj,Ngif}a-c(TIPB)5w}ug%}fy?Ƭ(%wsNDdc ̗W_N!$^c qÞE#/{ﾩryFzXP5/;U3ՁRpi8.WHĂԜ&T&֞yي×v^02VfmĎ'3LKb~dͲB椙їm1,Ff+> v$$ HTݴX"se5 4t( 4h]j Qn(%x7\pBb0%1R=d P(*1hzUŠ"F35)M(!ƑԍN;+3n?oWRrqk2>YǑ;KV :0" z;it|0uEx Xҳڍxӡ2]L(zH٬NZe7Yw۾ 8]("%$yR(&oxif }- oHN9xa΍"7- KxXm#f-@uvÄ%f Wz B@kg)HS>r\-5GCho3yR UU*"97(+Zx͙V3΍ iX_ %1-P+$F,4P7x((NemM+M $XQtr@d,}GHm، CvYLτ(₄?%aV3nJ GnȆ r!f!c@)g_maEڑP7c%oLsD{gl0pAщ#\عsk5\nȪ1ՒٌDn028tw_~BA@c9+w:8ghJdT*j$=zO3]S6(ex=nA;GB t9;Qd%Kh7[t=f朸r H<ϐ`v?>~s`l.>-6(2R$G Sx A@E_ ;duVF*P: ejXF9dwp]"0;!r CKl7zskKfe8T9ƚ]c!jWSHCHu:(~ѬH)s8z4ޠmjɼPeqkTe5͇ 1GhgV&XuJ&HwA-( y '53iHPFNLdp&sSyp ª  fX1H (aһཱིqŚ/%g?z/0xZms6l D3mTkN>ȲX\n&@$h3lRܧ7 KY(V垛-bwg gADܲ)7Bp8"KdgS"`OkP3s̄H7PsqsF_ez8&DzR yqB*m<#Dt>^>HwwkwXPџPAi#/-nEKal,i-P6ON芟LS?dS}޼ mλ抍Y!6Bn BKu;3ާHY,R0]!b#<~<_k#ZyW+|G*jGXd>d¥iXpOln+= ĥY6:>I$f;dY{+ d6 c r9qn1 <(q!ou Ps1OAIu:,i* 3ۛD8G>;ۋ ~Xh7uԺ.]Nx5@B ) VN!w2TܼӁH%һ-:0 檆*s&B }j\ dעCp 7+-bșhti?Tg呟؂ uE]o3B%= <۴~:uFsv4uϳ$[V=mvv NQًaDS0e=v) uPZr])OCJ\#5 =-g 'aC>HW)R@gQDgˤ"y0ImX6ss(TfNj0B"0#䆐0∉uޔOf5Maj[lBOL[ۘM*EQ.Ce'Aa,$ojIF,֎ #6yl4㷉m{<E#B{!vQ No:ݗnb6*gd 3Q'fQ WDD3&Kz@Yt Ն)?&g>_ݰKZҌ/ldGubE6IVBsXFd 7:Em7O)(a}'-*%&qVT,ɶD)&sFxYFNhu"MU)>B*Htlkᚆ?;r?v'm~ z?2tca (.ivV2|'mLa--^|8V`bcctD^c%'"݄0ioZȍ-G>U%uWV.u蔢@ ncz%F !yqV*-%,=^miXt΢MPav =؝UIA6׋EGNm}s\$A՘I4WF9$𾳖(ԛݼgkg/YJ"T,mVXU/߶-D4YgDWtj7*O7/$(TrK CЯW +$.+3 cHTBWl~@n?|A"4s:ZyW ;MV8%Ľœd9/f94::oZ|ֺ&+oV䨮/SxnrGggtlʮcnwL714uLK:qav>ɿx(tꦵWRw x|(Y8ڴ V.)EyyZ2үJ"?;ΛpC PDF{,] Z? ֺ>߽JA8;d/׸,ᱥ{w=WΟũ#ҥUo劇ϡ[_RTV:%m74UKQ5uQk[U5j"T ~=eʴp|)2̉iϥxVΏYc*Q"is5uJ59/Fo%̑!sI"UsXmʛ[$i6HCNۃye3!kۺӥ3FJ/taGI0ILyr̼mlz6F-#[W|bcCۻΕeM"iv˨2 ^vFYIZk x ?Ie}1٠b֟T+@/|T`h~1wQEIBDf8 :g˜>pF\]v<㗱t:$#!0fYF&^?u@w}: %p}D~jєMN)S6L*|7n] :Z58?0`1yWDf  Rhc@Lz埻@2̢ Yu;[$F-U .wN%:4i?JݫejhM0=Xbo7&sLb e qƌQ?-ރ[6,-Q"(*( 4 2Cį+.݌ڮyj1tFW:?ht+S􀅳aPA[0;siL<\΂frtٴlPcƚCΝXɂ)u;8;D̪vɞs,\^p< ~ONKY|4%NNv&37 է3[)!q p(:MNF'8-;UW< Sdc[`@搞8sUN6"v Gp=ϢqRb #\_o\e3ZD$% `I ֔>+{(6w׏9^{jD,a zt+SΚ9JyT3B!"v/KGtv&VgU܇s,qwQw>;GHDl=ثxWNF⬥KMYX`TJW>I3̘RO'93vdA.7gwLdS1FVf ]ТAPT3-DA'̔xcCzD6d2_[a@N4T՟yDOJcDACB*^f:3ԽHqW c0u@%f`'²"4pU-sP˜.l"@%]L$.!uf.T5pIM\X_OЙP6Q-38?޷O)FЪE0 KX&Hv fw7'V/h!4INo[!,@IU'HS88B 7Y6פi :XS ɐN{vW5E s=.\~ͅ6%;;KOWݼ9shrkM=%_[eS1:s9/+(<ʟ ذ&2A3f[ cInDeVHDMbqUjG{wa.%J}s g3>ۭ?~Bh`ɡ1ԉbD@]@"- %m= ofYRv=*DcBO .IStcй|jx {Q,]\ @:eIeuZ!uM*#zM> QO4JE9uoˋ Ե2fZNK 7G|$S.Y!\T}(8UXeCF v9&6ԏa,I-Mdy HP9fv/+l}"p}X ?9."{QXHyn`N0__%wDAl 4aqѓ!8,{sh}ikN¯SތpՂQqB|5ڿk%ǟPxE{!]c.葓v{L#W"`5.aMȢ=U-M# D#A>HuwQh,O~[v/϶v/ݲ,1\wj. '6W)f" "~<-|G|xw?P!cO7bSsWʥ]!EK@aFxrWɧˠE]宖KAdH<1+ $I4$*rc&o;&b^`"=fޤd3 Hَ趈D^ëEYx:be Y9I6/Ev7Pi9*&٨eYvZ?7G(?<yYg"+l?s;.l_-u9EW˛WMΧ勼~׻:PTgŻ|dȮlQfbxiz /}YUAT_ExnGhgetW Enݍ |s9f9ry܉a\NS#v`=).dz͡3kZhC7*_Ӭ_\.'yUNȧؘ=voxɋ6$e/Hj^ӣq:;c^)+ގFvF\.F,R{ *?弘Չ' ת"1ôq-fu]_0"C5W60mh?64{zpNye|RXWHǷ ;\V,O;,a2zeY-vc kΦ:*I>aUְl9?ga7'L h_Lw|џ_jXĘ>olh|v|c1åSf4 CAEtgt}~G5Vz]—yBzء ;mk^Dr2)yVOb벸Yo{kG@wPV:ڃq=}f6Lr:ⴝm/.gtyU{'Vu7_N=ͨAPw9:{w7_&ڗiIYw~R-wwA_7?gb|>F< Iw)2`s gBLFiג'{%ăS_0*mb6,$|(/1e]QK }*=i4oʥs :c6Nhb,)&h]X!.fP1k&ne|n{f:&^|>IjEDh޲x'l{L3@4/YcC/noz{^׋X [^VZ{[7-Ιq?[bq>L˂Q"*FQ:y{[̴=3qȷ} `]gi.UReU!U.I'o><ٯs@٢A|rwOBViռ*"hDaHﴡ90y/Eiz ZI]U/kWYY.TD|2/xb,+sXR]9@[=f7Ths؊f% h9~WYw=oȽ@'O뻇wNgD -bm&/ }ye{) :W|١&eYbyiqTUO˪Z@a[;=XQGpVI:dNI+v086 l;|7p>$ jՀ 4s| Jsh440aqȉ:V8(?혳hR3)Oː$|)t\`KmlPAg9Sbʑ|65"9!h X'Gr+pNJ q. ̉"w&Y?Z|:B8 ɲ2ፔLujsc\Fpٞ/0B<4VF-iFnо!D}XHd W(ŬQQM'eq: L)E/+: 95🕀ܰe_<`AEQ5R: )VAG[[!$}Cp&&7QlNf6aR;cOSwo#"CMUm敉P/m̚˝i|oA~-h:zdp0'?L~ 2lz1ދ5zG{-~wSSm4/co0D_"<DХ,8%v5M%b9C=؁pkctuͬ>ZtێɃقK#$|Q^98p[CgHEM'v,`0Wb i)̰x`;\IuY260JgG6QEX't>()fa\L7uuT([M=q3·p^g┻!2zG(LͣۯɤN(; ScjQl9u^,3&cMѬEk1a%K N&'ˋmHg }^{ٛ7<> ߍ $(‡Og" Bz805Z{xs ¡dhV@D]$$r<֊?r{VP%>S*g/UER% |ǪNIzb Y|?͗ PsMwzh{) g)P.L18ٸz.uFjg+u.yx bmxB2t[v^cv ~ܻ0TPKYmWzfx}׼{뇻yaCk_ѩX3#9{0!6YCc@z>,$xAu37=GwaaS#H ]sH]HIJ}\XTT m.Q7!´ΰRlhOϗIŕ|΀-qKћU#$jvyKÅ;OY߈m]M%\};N6lYV;'<-g3D)!,` b>)>vӢ$/]G7/X̲^R{_Ȕ˞}nӌ { vGLbā ;iY6||Rt>LPֿDc(j%pSٳHþK2{9 TmsȦy J{.Pitɧ`Kć_<=O#[5/(A]RD wKVy ״ *;: !3n̆iŝnjG| 9*魔&W) oywCqN& aʖ7i raVRQT(pzCZ%LjcH ;{f}=_Ømn|L N0/lAtTu53 jB[ E|$d_i3A):/@;pI*|`4Ȣ`rBKh'ÇYO3sU4yz"-E3йdqE5?ƒև݊%Tf:o%%<>KQ&cxL,ÖOޒӱ͒Q~QG!S)r׸S:DR4e (Nc݈-<:k_ D-uu~6v;YmM{CBwY80 CHHԲeIRT,[6SJq*ol P (~¯A]3`2jQEx &]oq zǯf0*@hiʍZ-pX<*N{:_+~GHGBٲpZ 'ʒ<6= JE,C7SqFuȜusx]Hxs*A<50eVH&@Џbk!n6 vncdk:1`!Ԋ7+0g3 3] e& ˁ\u۳b RR8;7IRH~~rJ0!0ofm[*>=.KXp:%[{.jӘ<(zY1xjC}WHvV ҋBPЅI7(W3/eҥ&<>jW'fZh0#5HUȉ`"ߨ>z'`%&=`L`T#@ HU֏Ŝz>,y>#MΞ׮X:Sqsk|'7GQ~jp+e!sTxO qbp^TL[E.!i@%Im'uPZ7hԣzk s(yBMfh癝΀%QU`TOO9EEɌ'K Njn.*H:LZ 0*Pԁp`F@ @D_jLz@E# duhV+?5궒É:ë[fD/pvRC#PihH+7E 0/ު-S , {ߖ-@ˤv1ft2ܞkY%|N橒of[|%lrCC(VXd7N ,n_&pJL;=̡4S62+w =rhuu啈ɸ!>qX@ ~hR4Ia)TNh#<1vY1~,5vNˑ 5n5 z1|Ol9M):;-ekɽ16ySI3$ c7M4)@@|H1CR3ziL>ƟGG42,!:hRov-]URfr"~lM_ Y[nZu ]"1kqXdJ¾Q߿*Gc:+˻=_b)=A$0GѽΫ3;9/N 兎FV(4] ʊZж+Ux7LB &kl>r7t= ϱ|PM|t:<9J׎:6ze\T텧U7W%' FR9=?|uQ],:̩M Ԟ5Z9bIoI{]ʡbhξ7љ&@XR<.{(>'BIӴlv/PJ_}'Fr=LNaWc[gח%\(BmנN8'r͹]?C./[ZS]щ#zk,Ēv;G9ļ<`۠T㾠'#"@ h A:ӱwEc۵Y _5ܐ3H㫙R¨LUhHXUz0]J!%z(ZadԲƕs^xmu9d[ d`fBo 9%G7<%iSj^j ZW}c:Pq!Y%H)Ŧ eT"+k]qRppbP.Gr9)&08'#&«f4qzHD=&Ժ[?ʮʊj%<`eFC[JMiaLwS;B0faUS3^ReSv&HAuҪg0g6!-bh^ ub2:&HFC;cyn/s"=xAI-ۍGl4TkS-TbAPk+JA җk?[Ȕ4[1"6~tЗ8-5n7RhVNx(YQp.o s1kr-r""^{||gȶ'.t"b+CNd%BGȔ#}?iPtSyY rCWڰ2&_ O~zIӺ1= U*S48W_/*²;{g&L)ᱧF(NR p`Z` TƋ9LXn~@sɥ%NP=9zȔvhև!NȢ}h^^UJǮ`ljDLfl"Rbi3~zB%+}d}ޒ[IX;gx3*bBUw~tix016L,:x{w#d";% t M2m%q)I&> D:< NF[Ոd)M3Aoت4x y)T#іRTsL#1I>Yn}Og,'G陙1#kGTǻH6'ZRt|N$$JmH}~{/%UZ>B 'g9LRtRW̫+1o7ՔTvoӍB0CWfJ(n/(q=mk6BEx'ۧ1lTD( J=i@o3_f~2A0y5޾,t& ^:Ga˕ZǤ%QZjTB+CP&ҊK4x[޾>+*Ws hC7)`7yysNLJA7cvoS.Yk1Ԥ;8Z1mvs'^Pت7[Yp jq9e筋3U缒ORLE9 lBN ,Э[3W\68=U}eϦEq`WfBʲ:\yA~5V 0w9U{}:P=4W;Gg9An5B !+Ͱ[:!YT;udPMw2ӈ-4Td;N,wr;ʩUZV6>(ꪹrNsBQ4^珰rğ \r7do/t"񛯟qF1<]k!&LeR3|d((iPPÝK7Ă{t$ 魝c'Ozwcf?sdLΏvV"W (.:pقඕWna ,ow wKw %z`tJzуdc5cwftG.IHB9 k0uqJ .;O`&P6*>l3"GϿ>1i)rUݾ3UG_0tb׺КP8jAt ֽؔ Ѧ@u\0_옝fcR6wJr]d5IV̗)~b|҃+d<Ŕ}cwpwV GfLdSKS|KD X+8Č]lNrV#Ѵh>wlۚ>5+K <*wr2+z\VЇdhPTL9ˌ]3P7jqا\qI w@jAuϣZY=И!:N\ux}[-嫣׬E];P%0loSm?U(ϊ\RG';PkweGNVQ[] 4%ɨ*0٦Z-yJ.Q.cv` ".s bhÄùǼ`&ɡoDSY?ce{۰7F"1G 5齎eG^5PbRğI΃!@I9XUN4DK,>oC{i. ȊZJǏM w CZq&RYM7uSQ;IKȫ!Q::XR™SmuSwW;6s#%kwԘY#O/CB]|%M~j ]WLNv] J|g!D=Rz妗& 2{@*KqgúČ)K밓P X?I>[c,&RߺBvGC"(&Fp*#d-mtCb䨟l^`:lqRR:''<ǶZm~p)ӎJs>g=ׅPu/_sJZvhLIΟs媜İ;E.GLGOx;Q Okz.}?қ0  S11M)WϝPʔ4m6T`)VB ocPX;nOʮ#BuQc !(J'eDҿ>x}%p7 n3o'x $"姫cw!Wp].@K €nRggeǓ\3.:%]%ϼ`QZBx +6kM|iX4 n"DPwתh0fne0JӈgoJ)ڇX{4nBbw =p@Y2I+XL-#'v-iW6Ǫ(.f>kk#<6O|iC ([f,hNq9قnږ.ŽY"ooŁA0N1,'84#M\PQlRʏICrm t_,f,RC o-PdG ̢[ڀ!(ߊ@R&V JIIKI] )fhf1.v6{.yn܄޼Sk3n%\AqŰxFu¦"n«T 7iCf("p[q8凐feu:^[wt=%S BAك/8>`8A )_.yJWd8Ped*M!Oޒdj@(\\WMH71,N#U0jL23V^רȤ:TC+Ǹ3rrߧ+FW zJT*nS;ۙMʺ3( Xڰ@#ƣ̨)'3lU 6bK3ZէtjotʥH1tn`٢FRZ.U16ͫ)#]`h;$=x{=f:Ur4^8ۍg%NEb_ߺw IRXaX+e%3*9c V1O {qGՑtoؽ`u) \MrZIYx iv )"l4myأPڮhЂq_G^,ڇl3n}G$Y_[(ҽ+n'9hˌi'N?4ۈVc(Cb)~Ondt3*6Sf?XiKm1CnTCJA#gLJzz|!-ǔ?~:Ej@lf 0YkuUaf\t % "*mƺ`7 J40x։uLW4(?רgSdK0-;L!{TV5ڶ9tVg7 ǎl)̅fž굑p*j~YAg5q:w:vn8d1Gb ?m_hMC p)6<-q9|D?[Ni74exa[Lbl|v?f:BM xq 23 s2KRՋ JRuSR6˔AR9b=+ɶ x]rȕ-=E<m<3IJ֒HrfS.  pPjl Ii\eg6{I%1I4r\5q{77Iu'v0DqjF/ S.mcs8P)sR?(J~Ѡ[g@nNLPx9O'yn0tHqDN._;2'Xyɿ^mNM+6!EY>(~4&Gbs,HK~ i0He-"(Iq(3#bB/Nv4# ;&D 51@*gj 2B#G?t6v(\:v˙C{i6c4vБ)7͞.3H>74PF̶]0PLP]5Xhfd~2¥@ zH{n/l7vɮ4n{gޗ;y_ 8L0yޣ;$eC.:B&5Nd/gc M 3^]l|hsmBcݣ_0s#?[DXMs^~0hɍ\(&<b|`cd|C3n5-whFߌ9h| KY|q4iz0tv3 v]HVq>18G+&؄="{\sؘ'ebϙd7i\8nU2e2(W.插ʥLY{>!)]HLcӈF^৵ȷۻ~r2;ifU='Z3oߟw.d/y: `'&@=55 3ҍ@4%?h*`| jF_&5 ^p9 ?&Mm5,wbbq죋}O#x] <ѬsSnJU/i:@Kڿ@ڶ/ٔ?zz)ߔs z>t,# B@U6k :6-%L%ش-^ Z"\/΅.)Z&)iJLqk99LMToi$'~"* &>"m%qFb:K?[;y0e H #MbuI:u,o " %3 -/|kJ&ILȡJO{w2ź+ Zy"h~Ň靃4AH ץ?)Wqx9ꘫW':g]u~\Ӄ??[sfiXBAiBqG=~wٹPgǃK<Q-]AKuaڽ8;599>=2XE4slAtW2ˆ]52bS>iMB5$PO]6i5˷uGC%F͆Ur?gu}bϭ@?mpʩ D$kARƫuD#D9|?y^Yd(S;f@(lmLf$}Y1۴%n"caT4 Ӛn\=`eydJ!} fd!YEYU^9kL7\ =q0ߑ >{p6`<ivETkuM'MrF43A'𜾂Lkg`t.vdຄaf +WSLHP1 P*."f2IP콦"мB@9ի %jeC]8̓lךe4VJu0X01 5t2\$h@C.]45UҖ=ϏQ7M:G&A lIįήAΜ0@ʥq]4~ț%A a`+e*@ښ~WYrXbd5gFS9o0 Ag,f<Դv8b(>W@Xeώߟ6%n/|ƈ#Y jdBՋF|L&W#|jvg=[v,CRo4k%}H|6t6R?=y!Vn0WvaOی ?1  >2zS#b1}f1Ԙ~g}/߾~o?7-+HKE<?/iؖi_iS_#Ru4تP nxa6@aB|j܃4uC\Q^]URM]ί4쳈 < a8sM -~~M!#ЖmVKZUн۲J{tk q(da+ ,oGٱpD08'N+,g4*FjbE @>S8 6,~M6sʥ$;,5 G,I[ E<Y˦j)9KCikU&Ǧ)jRVHuFYR U]*V!RYƠh2gbŇnfi,Ѣ NT\!HH-@&L܀ C*GP՛1< )JK49(TN`r "ԵAU@S* Л(`$ZwMfwn/rb"TkP`7 klo!(N#?# o@-R1(RKl>/m #1l"-_ ,wRZUr><GyRRxG 2ljˬpc6~hDmom"Vk_䖤hDlf lZPbͳ6mH`/dLjgeM4,%1"{A_),iFU;G@e =C7~kT&?73Ԥ"&hd(9)6Ort!]ݒW/&f'.sH9,V,²,z=w{ XRkQkCk(=٢e6 5%A^t wQT w,}q6cv5Z6ErS&@ 42NkrķJq>V R]z`h k7 +HߔK[33E @ f M(_eu+\̨=4 ^Ԑ1օjrۆ- D[drYLwT(B+*K@eVD[ XGFJ BfUQ*\01C|؄ʵu_<P.DPb.]B˂i׿q-Y+sptj}3pG/D?M="LBR1*σazY=|1ʬVxՖVd.4'7let4s,#)3V@x\"6Ћ`5=mLU/ 0'0"MdJ劇#&upC\IJ"dcV8h^A m{Xl]Ůr-I UYw&ɑ N$F!}7UchӦpZ6;ע~Ӻ`MH"nՅ'JЋ/M"yZ-.&y ->h%X&@a 5k9HLEܚmذ( Bte bi&eT_dM=*GC4#lge `YK "X@)ݘsx8mg%eBv8'6\0DeRFAB][8`T:|$>~3K9Uâ=_).t``"tn&% F$y87We`bI6lKph0'(BQ5u(+cv8<#Xb+'`J|ٖj od#q{mT8 FiLPR?2vc"b2lZ!q$-{^3Ũ-?f.JZB:\v#?tK䥽 Džx"dn3h%vE`НiҐǽo+2ŷE=9D욽fF9irW/"'Ѻt]Լy&)v-&ma)<\(lOK(Ƃ9Kݼª6i: "U7L̍ ʸׁ[ÔnKgpPkh5.H "(O،QOh p#+]gi6erDCΕc\lzB;6DzE2&}͂@ j v^c{0cpH_\w αw8m?E%Y%,Z$"YN7wIYE*%:g;\iI滰{7d VIo/+iѳd;En=[&A[c=W> pgiFRD! gļIqnM'lsӞK,S S 8"p~pH$׾9 cbU§[_&gl_p,'"t{>.鮑/l\Gi ⃉җbKvd0s 9=Uo\(HS=$>{ "? ɒz+w{(K>&~wUY[]sPs縜 ΣL==fceNOR,+a6#zX!Uck,tE8O(4f.x7&h&YXvpm_-)6C~0Xn#V8Rs~py}{MRdym/c=3 Kcˊy_$!74ƈKېJ 8-: ;)\qhnA*t !4GQWf#eB^+5,'h^cNYPL8 *w܁U8X -Ur#|s-,}y#(7duGJV.7&hJ:'5X3a% P .Q4hI{tNljԿ]zX9eMP=[%~'wOy"7Ƞ<ۓ(j#$ƃu|ɧ>{h=]2%N}Xc^X!"cYsMyp6NSpgo;oI0FP 0m zS~xX By5~йl=7OS2RZi 4{ DD?<;Yd  :DFEQG/~el'NUF .湬S8wN0|Pr~l6I)Wͯ7O>ٙo/ N`Rg&4U;T=r:zJ/gtR"DQ,ZqJ"zK~zs8q ]~U7Z'[/ujj=3EL&>![ #ba[nzZ)7.fr^i9\3qEa%@=u|tv5nZ9wAxKzQ-SE ʵ pd &C+Ev ˪䁉`l-L$m 4p0N7%NxXsܶ[)6%;J'n*WXVDoN(X?jM%v>isQ@W2q>DSJ PIr255[˿ƭ>{/ݑ<VܛVldp ,<=NyGYsBtH2rŧLZ )/vcI@vp~ltR^K\,Z(}|"اd;!ڽ/>yS(x:HrJeMAʲUP8F>*ph%"k׺݌0ɋw`--('(ٓxѪ25khɡnG\k ~*(*H͋qiDC(Hc ^c&tg (Ǣ&;~@D!Jqb鍆rcV`cU5eiCY]r^dz -uuMSeorNPKOg T|KUϬj|:D&"ovt/ְ Xe;v|"n.Un1!9:NTve}dpԴ|l9ݬᰛ4>nWn@K:oѻTHUnC+fbRR[(b@z]gQh髤j(DVY1e7C#?^j0 )O<z1%0+EO$P EÏFKXH[K\V(.<2,?Rv"C"”PMSͦϰiBq;e_һَ݆dghJ Ŷwek3 } 0 69۶z]_$~̆#Kmi)8L k'v9Xpk{k84E˪G+4e ~6uv`'S磶ڇi:UOU_g,離{J{mE}'$neϹbtzz(P0IHüU2(@{$O($ncc  a ef9!4*N ,B`o(1MmqL Ocg!nt0:R~KJG15Ai3 7&ebM:>A,N@DP -2eI|*tjE`40IV,YŤPp-l7ٌ~2VO?mz(8LC'1.IvR2z+\_?U8/haek T<Lq3Y+ȕ\O P(c9r^?8^A JgB.N! ;&ஃ4܉)xx! kn ?7҈,N /bQ8)DYe6ar"LIŊKtv3!wg1T\} : @VIH+AFJ r%F?s7&\ c*%.brN)-yUږ5lꖪ65~FR0Hy{mw(e5/Q fa/K$ .`Z'awD?LCm7MI`U&[gcBAtpwoypdb8p}4G];.(w*agaw0(;GR˝-KsR4n?\"fLi_$cnTac5uH,a`9,f^tSSp-a+J-Ϣ(7;5Ӷ! ܥC2/Z,p ԬԳda,#gWH .:aCq$hLUSWSضc6TLۭQ T:v]}n{DuRђ=+o3q(&mZ2{s&an{j ;AX/a=ᖓ9k"W/[Sea:ms}N{U:Bn07?ԑ;ەeuWb>Ծԭ݂תX1Vb8R5mJg}th"i\sm17<tXZՑL|eЮGn8IpshyGÏNG   XTO]Y7tF ]vtz!BHYpV;臨I/&',l|NQј~3pv5zIQiڶ_fM['cmuw3y@wnn휄nIhUz4?>?|n`A%öchn;~HW ytW" KG=ѥx340031QH,Kgh*=ߋ59.TT -xoGS~BJbI"äM^T*o[ԀʼҤbQ ' t\zv~(e9E E3/_O.[uV#5b`ɮEY ^ihҲĜL/2S<~Ǩ)i|ۘ5XlwxʴiG"j-7MNfb%- xZmsL3:NAd;ӤlɖrFR&q<8@G6}=2K%u=벨ǣ`XȵH|ys]4X,̈́\Õ֥lhu&lӵ xXẓXE|\ej&0.*Y(pUx22U.Z5fJDLLjKT=0\+BX"@4qRzU$ŚE7R&>v釋MSe+CIYۢFhH.U.R45 lF-f/J[.35s#ѹ\(*|n39w, 2 <,+;zhँSL G~?W $ 1W W*+]"̲X*bV*y?j:F{bd]о:W^} &ג(Ul&C.ntu:Up NQD-=,Z.UuP(HNhhy| *mKU)gnʫ<e7sD X&(iA'qO3T:w&O@\DTMY\v<7{([}"aǸ>V*l_E9h&yBZ`t MPmoWT>䛥{ eWGZ=0nX~Y= +lK;B Vy;XZʳJU0wLrqȰu&)9ES2KQ a8L30stsj-kmoTy=ǁ`8~:VLa)_[1 q6?tmaYn8@DQc%\utY^z^@#+Rr9j מH{+I< z7>bӈYKMF|!`a0X `ҜrjP8 P;O UmUUq;jc ] f( QySc.!fM/rH~auԵy_?U쯿-;ɕv(PUSR#uCM v R}9*#7 JK> ܇2Ԟv6ȭ*ulN$SI%(#K:ߘsBִ7Wph"Z{"e#`e8 p]Ta=7{QoA-=4n} vb (>rfWQ'tUE"kx".gq25Ώ.Wڈ V8L|#&QQ9%IR#|mM+)k4͓ }TUj.)ez}*_jVl&&9 >=0Ěrb_K$7?\/$3{?ySꟘwc]>E{kp'Rtoj][Gd;#䎞k 1 xs)U$V(n5r4c*ۙxg|hHpCK~ ??z<&ӶkDܗuȷQ~DW,0e4sϭl̀9ↀW2_kRJbJ![)c5S-jꥬh<kkd%qo&~t M]5ijn.>c{z¡\a/ۡjAZ3"nCZxom^n`/gEOAb<FopeM3l5+_$Cr $Ly5h2=H|EjAi ͪg:蔮YɄTrp+Zrc>KX#DJXPtbQOјi]f#{(!'2Ew["7mG{nㅢ 8#{wO0Sx_)fy2ot\<(L~(mF"ҜZޘZ%q212%]LIT |?ޯD,&^n%xִ7vpS~3iW=Q^e<yӞͤߕ{꘺AYĝevOmܝH4>QnsĜnSx{~}|ļL$4`TT%.N̒$\}f&GJ2@x;~}(GFb^U~bf э|Z x;}2y˜!q x\[s6~~J:z;_:N{mɸ4IP$mk;{ x<8un߹ሂpxH0{2[1 ߐG.IT9jq.ܑXǴ`LO}AE]$VAE*u4^$dF,vDD1 q"u"2zpMЩɄ[UPirfpavK̈Dެ𙬇=:?T0!̙t&)N-KOHϼHj:;œf-Ȃ4ΤwS݆XпS8CxT !2*p@v/{:ָjA?d-AfI*>N_G6Ҕؑ^}闡 g9`lω֯h/׎SaJ ASskʱO }hg|DMiͿn3]l501YR+s l(lY 'G =Ro ؾՙ}36ORpXTN[PmO(4͇O\D3t_m01^Skb%za@%&}$/i5HhA7 2@UMr{<{zQjmZRn!W Eh W\0#+0ʽBm(yZAڋrL5;f!grn+ &i ֕3tO` 1haϋbhSMυ2;{Yn'x6Y\q8B^~ Zhg;Cԏ_+N'h]+֏)Z cgnܗ1MFAu4CKꭸjd&vX=#j]Ax9TC[F)-B;ۈf}g+i=־DuA{RvFZ?;#p}?#q){,~8̵/VvFVX6Fj m%G%Io@o]!O@eE~JP}~I#fn2 4fbIV@^yI˝aPZ 8]zҚQV^^̘q}j8mOt6=ic n;YkF@u>5ûI{#u#L}P ؗ6x Polsw0L &Gp) 4Av9Cb6ћ l6FCC:m'):q0u߂oٸFC؛8E%w\ŇΨpE#*2$Ӥo<%`[ 3)ϊ>l.nsl4tvsftquY?}M^;uZɜ\Xʬɟ(8eru\h5`Cu,W? ,p9ogCR .,@Z,/7ZGei'!'W?6UQ9UF(Wu-*p9$ UDUy0ev*D3zEj G%Q}Z eLC4b[3 ف\x?)Ėԛλ ǻ)AixB|ޒzYdPT֝t@)J'.7Ye.:~!`aN03L*?7Mx{ 423SR83K2Jsa?*r؛߲2eTmbw Qᜬr*Sx;q |n L x:Ѩ354527%@ E"-AA~EEJRKyϨ x340031QK,L/Je#OjE{l W1=CҊ̜ĢJ$wnvTrlMB~ĒD|?#rqo>{C} P/.N/Ka֬K +;QA E%E k]:=U6JNҩG6xq)W7([XX|@1 6xKI-1sJ* RRJb x] U~3ӽ;r,MG`$wH‚lzfz{C¡ (""x?""r "!7lMwvnvcN*z^^X|j\Q텂AtbGBS7y15SomEFǷ?znTs-bO~'?O~8kϏR\U-6{EYd++\5cp=#gtk:&V1el4m TཅC6ף@#[p.J3L q2jr+fϛb2ŲS䖧yM[Jfd l?ϻu`B`AömX{7j ?~'?O~'?i4,Dx#z Ҳ!%M7t5E_\ѡB8yxϛr1!r.[J.ih}鳦C\($))=j'JӦp2C@Djb&LfOگO~'?O~䧡LCK`GZ? _l`G{ߗ7wx=G5ǖs^L oh>NWEzBג9:Kyu:<&'# 5MXMӋr"WLԵ]]2-2Aul*uPM&WTrt|s6'䥴EzR5K.v4GfL1Kp]i䪜Xl' eO[rp&QSrQ.XV~Z.!iJδfHL'd 3(6!?a$HKE |KAq[XMf_g&Z&Mg;kI؎EQvTct5y_ZY魯 ZhZf厹r"1[)ty:I}tRRQ 9RAs3Hdmp$9V:{~]]mVlBLNJY3Qfhusb1WQGY5*gIC j^2[a@]`: Dr*C=!O .*EџѤ==ѿN _~.VUIjq!KҮ$ɸcZ"%%!О OHIyڶP]jQNn9%4V2TPM)kMle36zshnMg:a{';~_ .m*=[l<=TGmo5.nn9e6ω9cSc lb6}IL˥-c0~{9Fxip}XmOm M kƅlF2\>֭YB`0ld)MKlSпmPLִ YγbEBA1Cf9E"3izTRaDK R".+ƅ)Jͬe I 񜜲L JiƴJl5l0#UJQ%* lM \R6_?OWUXj<8lx"%4XlFD7̋D%t\!Y'DQ-&%OrDYG٠T3YVMIMEn%[MRHYKG4(QӄR2fm0)tƥlpƅjV%g˦"bAo\Y7xb-=e)4krTr)C12P-JFo4-d+\5E&mPIqJkun$p^┸If,4\zKuXH˥ŤM%^AA|$Y"~g/7! }RɔYkVX#+WJPl跍 QIUȬfRI'Ћ *ucs-+\1z .Z:o\=Ԩ-B4MdqMg+z:|U*(itZE6|ŴtzSz˙/ z CQH-IĉZAH+)K%hѳYAO`A)KDnJYFjԸztdFՒY.9W,ClR5ȤSUSF7 . lIIl B*bUl<kY3 R 7ΌCA.Wx*%GmJ嫬t xQJ֓6@_OFܯn%B)f" vgnS#>ܯ_iOJ&ɵ7/AWKtd rIFJEW>1VYIKtLfzUr5l6ULtB%+*K25HWIz2%#^rBxŨ R2"S`u ,%%$L"5 6gU3NI=hjlYِeqb\ĵ6?N( *2<7r#hkYxj DҹD.YK9SLE'XJ5UϤ,mR\%Y&Et=YFIN VNr P5S5c4H[%"*rѰpz6̚Pb8臮f/tIx`xE6V (>گhUK ϡ+ #+ŕJ@) Th|%YeNJ)s1M}CSEgvg^Հ}_t `Wv&'t6B=Vө:\5ejQ+[YɓZْL\) 倝)IΓrYK2e.F0l..l&Вhz>mōB,g*VZ(sbwYIWBI"PiU"Xf>'Փld-8(QKLR]%Ait"dy`5!ystq.`:3PʱVIMZ'(X!U* "QR*Wk;|Z$%բz!c ?IV'RIa`:_$!eL)U%Ţ$'N-Bk4_$HA =JțXOQfx~EU.]i%K_j6+e,]XeEbDSj~` #kZc2f,./fYcJR[Hjj6JL* e`G4 2$X{oHZ"IYd2aZN *K<\lTV(~UUK"kZ ͕%hF%4.$^N)@Pllf J We+YZ\JXW(]RLb4NrYR \2U'56uj -YT2_a*WM#Q L,ygRSc+ϤL:MQPj6ô)rHKv4݌NENRDY3لJY2+5hO"y-Yg%7VRRH"X"D"4[&EE,i3b~9K?FMx( b:[p xxU b< <\zZ@a<a\:=@Wg]t'=*ppcppcG:ppcj\ppcaX9/8ppoF_ٍ{}6.lQC8ppLFo~ w3zf8/DFG1\F'qpUh/ES8qu88nn\*ܱ<,\q88YQ*JHEu=(zQt\h NO 7'ppl"%J ppI"/D<y"c8pp""Dn)܀f?r }84푋qh#|Gph#eHf8$qhj#gLEМFVЀFdFNơCCCaph"84vx͌}t?@ 4 (?}@_ Y/@ Q}a{wގ[ބ [@ ^3n^I5UUE;)e밗vc {7@a/=8@99,Уg= P)`O M/j so`3/`}?c?0c л [{@~@/ƾ>`= hh hh3;n.Em@OƾDV3oeoľ t2v @ƾt4n@?ׁ ׀}u@_®kOb_?@}އ]{ؗފ] @Ǿ+^}e@/.z^svضMUEbY)" vc 4%@a8\(mz4v#@>l`ڂ}hvP X_w*7 ae/`%Oc1#X菱<л0h[0h0hk1h0hc c ` ` ga e Z@` "X,a0x;KK % ~% ~% ~% ^?7"O"*K,"A % X:0؍W!%,apKC` K$X,aH0x(K<% U}j* ;t.T;){3ҡ29T*4q( šCuCkbqKkm oq[n[:+/CU \5%pTg.j$I$ԑU$@ P?zNX #F`T\YP1]P/T " U` xV# ~U pW @ |@TxT_PB;z) REpsI'B? =n xQpнC (t#O> ] |'t1N98oBupP & ]%(.cBÄրV恳f]})ј?v8ghw,t= ݠá5?\ crD^o.d'OR]mj6֣6iͦZֶL^gۗ1f~juI6_ RZ$9CQ eKWn^ќn岲4T *{lܭULݠxWr$IO4RLRe,3SND3SW$ggv R]$ATQ%>7.U?>\7+l~ N8)f%F,\A*1wAfm}q}qf1$s*/.@TfЋ3 rIʒLœk5T]Nܒk\2_yZ{%\Tﶻ枢wkhSKku8g꘹M/Z8eq:N Eq΂%'ٹT/YRܩ+W3O/Kv/讓>kY&¬JʊcezKcfPTIkKzʉԂsU3N+s64"ڴ`+_NEU''~N]ޱ8?pxO:НB'= )Nup8kN:? os뜀%R'`? '`/rc@c,a':'x X'K1_up9{=!g8{hb'`R8 :{ANqcO1O_5=>Nn5yǞ 8X 4'p7swuwƞ |7<n!']pp;[8 |. 9eCCࡡ >>ns'?9xKC·Nkftf4/_B?נΛXksœziN8x1ۣ؃cN ۃ;x{Xa!/@ޜyXx.;ϱ8w;,{, |:= xgpBM$ NO;?t$rC2[XE0rlpii NiOi8؞0ޞ=G՞lNowZLS*Soorg+o̯:x0}sc={8p6{4@ m[Gh0jhYƒo'x]`.:<2 x.@ŁRl9[ %xK;/^%/^_{ <%xK)/^_y Cza;2me˧PW[n-KP[X7϶X7]v]nc׸ &x8tcǎu@&x9qq{n;~~M` ~Mqu"7QM=Mvt;w@mwqn;&v~kn;n_&Vמ juAՅX_VZ]@7rqX)7GWG. ?f~vE\8:=>vOHkzJl-1ȝѦc};-QK{Zga:zKg#=h-荿7ƻV{W]Y APHGgMg{WzW1# vG#xᖃ [a;qVw;~n@-5 |ux\ly+bf5G՛컛E [$x Nߦ=ĤW(J׸M)ʢkErg]:r87jßF 2zyL3>WvGS73ڧo4,}szԾcc82z/X:/BF.h(V-aO&f{,I[լz8I֯JԨ )Q)eQRzlU${r$IX5n'_.pk1Գ>5Q.ۋ𝴋yvG+HG XH{?~S;w2$E0xӌ1;y~! )\i[(JשX2?vݮA-AvR,%0 Ĩ[bǕYb[%Y{CfF岌nT/xj ˌeHƄEfy:zdNjmb˜?X,< Fs"A%qNApi!A໣Qs"ﱻO?O~_vf[eVW-[%};6c**ddY!*ʦ_h/;lYnۼ6h4l8а;=˦nU/f{}&Sڙk<1wzHhMGᷔxޒ@-`/IX+ivYR;yyO|yj5m -QS0GhGO[nBm͘9NO~'?O~kC@ި>X(XP5@Y S|aKW9o9ˀHe b " B @Θy@V9@@ <ȴL:Ȅ. c;H$"xݏ8 ` - /LL''i@~:ȏr wOr$ > 7&=#\= CsO 1 A@Iҳ?bw_/}7ځm@({l1-@&ǀaF2Ξ(nAGq3#>nǞ1vB8-ޞcecs=ڴee,Ⅼ0}w.O|Px‘X;PGM7߁w~ӥӁvÂóGFP[z{&ot\uo϶=zgz|9?_ | }r(ڭ,"z7\~>jܲKѤA`A|x*pRd7C΅v[!)zniXaِaص2]KR x|&BG.?_~ 5.q x\\MyCsp7gwp7wp7'w逻'n n? p7PMMwIQDHn8BA7MMMMM?MG(w}w}wwInn novno/now鿽c鿽}:鿽 _i'?tNjnxjxxWW\ 8WL]_90aG &U9J 3NH^6A-%SrŲ3Or ISr5C Dbzt8ɴ$dNAAK:! $iTԀOcfZ6,/UMD$yl"(U;1S:fF/T,w\V-^4CSr\9M阭s:VJ)nɄO3;9gNύ|ܮ:3PʱVIMZcwX$Y9JF ^{8!/rm^i/Nfo~E} '3/)GYPr{Cf(]]1SE!]$Cƀju$ψUiÍ&= N¾]]UjB[Z l6 lCnf o*Q$YŪ q(RdF3;{7wyR(mBCfWRR55ݹ޽p~hO}uͨmS71|h{ﾴ!#lhæ|0S(j3fdET?1k"f0boцr}p䡰ϙtީ]]t!w_QZ(q}qL'?3;*Cn+IOېzM m*et=).VG0xɲ ;ml*m\2+T ]$gy:AMqS7d-SHZ"Iّ NbFc q MmDŽ,$ +tJP2I(!ì<\lTVxA|e)gGrf 'LڜA!t ~ iC-I(z`9l\v 'sgQ:j+&3d\&+t FRV(ӽg緐Nx*ޞ?X+l64W-Bֵ%R4%-ʰt-aGHFtt推3S_lJ9%jC膱{$#=%;,gM oYl%KF[s#׃>A>{zӌ=YX=Q7ThD7i=,p {S%FLdbyuH~gHk=\Yls;lmuOnmBmsۨC­n}Zoo3u [[[Z>l][jZ-dҖ-[3z엱b7.}"VƎM~}3T/FG1;"?|;rUH>rZ98~?O % /p旛m͟m6'4G67鵦ǛmsMg5V4u5Mnxp?O~ڃҸ`fU2zl*/V/ȕu7)SlBZjG5@+LP6YB@7\U+\*U͈}DnT*9!KW lRJZZNsd2 \*M%6nh)^QY/6d'J]2-.o} YKJJIDr̫$g̓z& [',O`\qӲ('T2Lȥj 0 y0Jq FKYIJDXD RLBf5"L:^ld)K䒵d34MC_o}gg`Bk P-3JA,k *(el5S5cAE*UsCkB,Nˣ6@I2)q)zd<0^͢B?U-UtS,>hjJrX 4*BA)KDnJYF|%YeNJ)kI&Wh\j=k9ˬ糦); hxt 5 SI6l4Xy޵ d̪('ԺIЗz3`jD+I *4+D3 P:YK'o`RKoUJd]uLɗJ7 U7 MdqMg+z:T"rb˥n ,KD.**6(q&()K& &t,x5IoHAuRf8 &* H]O(2Q*2,_Oo4@6Ad+Du3ko hZUem N+U}Ne(9WU!ˠd0ə &.jtJ*'6(+[Pjf .K4CD0 P3YӢ2d9ϊ B`kd5@,KŒhnA"HdF5MڠP)%rJeXZ'$%@jre2Bw6D))M(${FODy%2TE˧E 0Q[~2[ҌiAy$ALWUXjddJ,5+K6,ĤJΠe4"[w`6#F.IV,lR*' N̡ ]*j%kDbГ PUiW$ keKt3w/7! h=)%+U'$zZ2b5ld3^ 0-4l)&h&[)2~iC6DW2f'B\R+iUH 񜜲L fMTcj 0%R)BQ {L1d٦,.V V;IO4|:6|`lhnNk¶Zz/[k|wZ̖3Ztb]$V-tkD>3]"GnO䂈9#2?~%v{wnO~'?@Eqئ&74^pϥ7rRq_MW$TNIU< 9V1xȲUddZrjZޞ{h\IT2J ޴9p3 ZgRŸ'iH';.2XLfrT? y[|!Aej&`JRVtYծ=qUX,JmD5+|-# &yl X`TׄQ2 zh2Rg4:iFLe+)ƯNE^ʙi|fۋk&lB&kGgNwloFZRnkOB1ECKj5EˇoJ4.k "_)JƵi8W@tJ!>>Th]˘a%[ ZGvFAwc^kMDwuq3zŸ/M؃Yz?͐:"bKU#swBlI>K\? [q ñ!Pdݡ䍡䕡š乡'CɽC-CɍCɵCC" E&"m(2"uj&s!LfA&]*]׻Yv5 eI2b&"zhW3y2Y P]7m3<LL~P]V+uɩUɸ] QbW32̮f2|r= vUۇ%Z7,.\;64{d;FV …Goo|$6 fϖQۻ̔ƛq7ļxpL+vpIrd׍γ2P\!`I':q{ѽ!}~c])NٔEp)9QHӝͪ\U Y;sN5^Լh![ڰ|*+i&ZkSQӝCC~QJQoY-{ۢ--B"K"Y'"س'YzD7[ND59d,,ktR=,oIj$gˎ6;RQ} fnoWV5JM岉AUhb;I!Gpѻʎ&cAanh:@Qk6UY2WԚJ/j@E&0Kӄs5F#hFGQIwI?` *I+* \)/"1l.ɑˏ${ DR$Ko[ԶcXQ~n4Fӆ-KߐjQJeȱU5"i{׈ܥKQxɖK7dfm)lB^)Ҥj0+Ւ8+Baۻlզ7Θٻj׬d&IHjͽv>| b4VFtˏх1lAy.lϋR5[R,J2q-,>ӶS~ha}3p%ݯ7=3S =8ynE_ 6[B߭Ƿ{7~^=v?eg%E8I#P2(M z(C~Ʃ,{yYNvQ.Yߦكq;\s3VʁO+.ۛZgoB`&j}cw}C{}y~X{S۞lmn˷i;mb[K[`M[?zR}ZR-jBY-ga"yձsbjlYãoG'z]h.:=2y.@őRё 6ܹB? 7/^Kg/^?y %xKG/^oz %xKnu/k^Wx ~%xK^%xKk/s^gx <%x$ //{ ~%xKs/^y ^y ~%G^z <%~/y %KpN/wx n|Kp;^[|Kn{b goE_,/L/^{ y ^K{ 8/%`ʜdqK0K%8K0K0Kp```(/D/^#{ :y ηx n|K^7z n|Kpk^z \%K/x %KpK^+Wx %^˽y >%)$Kp^z >%(z>DC\\ >Gik9(oφ:n>v<ȋDQڎs@Nt?8B7z̬42ƱEoU?}#~SE4/uX o\un %ד%[qYb\oFh!;ni@-W=u\u^u<x&Pr\u`* f ) X $TљGƒUdzlْG|$ycJsF3cˋlcY#=c{d{/%/3Ye QY _}3۵g~vUژkՏ]N ?{C3d6+wxV}0y~NO~/>cO=9s?pϝٳ7əbڧ~yV:f̩?:;j?|wѼߩ?[W;fc.:fڷ?p˟!t8ch&Fбqrm1@Tb5sm:ae6PB\+)tkNM :E.@ݪ {Ԍ܉pU' ?;=XJoHBQ_N &&#ֆMϔV׳;UPXm@AoA.P^drTURqx#}gs6͡mKA;Wy7S6TUx2ff;ɇGv/;QJ̐_{L"[}o$@ qwA3IO C^RAـ]ԯX9f"y]7sik2LN|Z?btchYԥzӟ< `'阖S;-T\7};nAEEYmh!:iS{k8^ V${, &J;xj;DX P^lǖk|˭vn,Z`!n'G(0W|;1ibvmJL7Y[~RW4Nhn.P#ԊbkR2P း.Z jtHTPW=6L|Xn׽ jX JEv'MP3%fA[aZbuP%b#PPuPIAŧr t0JE&m҈yu,yaP + öVFSVf g?4yNumzcpƱ-"{OδFO˻N?|K}j^?/gnUN ®Rlq]Qt9T23(=iD=:N1Jbw 3YRW/꛲_:kV~>1qN/_8I3N hB/ѳxCœsh#:Ndf IW~JD@s柝qia AgL`DmX̸k GTnwG@'hxӱJDE@{[ZyORDx_㝏XǦ -`X@m+bl~yr+IHfz>|%q%ˇg8R#IVsfP;'4*v,7No>6_yGS+q"ygi)MB}ghGi{L<}kJӽ~Ata ˌѭsT~eL0@^ijF_71F(.4Ҡفz/~tRb"T\N sݓZtYF\5=~/s =ݥPA?3(fiX  q~aΰQug5]6 O{n􇆃 ##d^Ա?IDIYʴ:!~l:BO?*Osvsfm8q۵MؠE@vdݐžVA~`R1ڶ|9ɰ ہf JJt;˕3۱T,?.bU02~@kH\)*\S#h` q4 [bSU(J>֓2µ+כmMBS!ekc6b2$e:ԤR+8ϯ*8۾CSJw~OD'g  1h,~~^߿W=IjdBSewc{';j0.(thqO*R&Thfes<呆= D1i&&ao$ E\`3a5k??7_?x?(ַ,u;E!k5]6hʖjv:ځAN_odB.kW/IW޾yűϾ~EIҋ[,- ,C@&-$%–G 2}<OB0O<We~ہRQGq:DgwSqOdlc,q#;\<󂯎V,A<`6[!0ݹ xʲ)dTGw'2|̡qw<֭1R[Q@&! ?[Cf8JOlA[ۇ,ƀ(g˰ ז?> (؄4ـL"J<ID'}lUizCFҖ$:{h;Ӥ ELr牑#Ea L`~(Ȳp6M0S #&]g{6Bks̏Vj'T4Uk:ǔ\d$Y@+줡,a(3"xW&"\*-/識#IR.MY@<_1"Rf8}=pO pʹ+w3PƧ 6 P&ewShȀmpm;G&@گ|'Rna_[̫5Q@-%JH9vm"!Q“v/L:`DxV7*8\|/y>4E )Fk*b>_1_ .dFDwSD o?̉zв mFDZ@rO F&y8wlz*s?cᕻCk<ׁ:sHm'AF#Q3.7+GHO5K(bڏ.6F#wV_\Ê[^tbkؼ؋wk#L5jm? T 1VfnPv=XTw#l(, LZ`Cgq(0YưXÑcjSAd0JCQ^~Ћx B$CȦp!߽{rTyfo۲>i7_߼R#3|.̔7[k7m^w̷{٭".2%M|GіFiyD #3XlYm0VLk_mOǀ6J4'Cgb(3nSSdxJ{wmvD;%YOe ܖ8DXA~:.@6clHV~; 5jIT-4Ԣ@Y\ZdߟQ]+8 5U?'`}7p4U;Ni6#q)9M 2w$SDUmnAz2D:QGZcHmzэ8]I*g~Wgǩgλ&z,wIKYZr9̨C3Q hTx !2 m5ӳDsV5D 4Чx%,R8Rdj> 'GfJM+7WƳ '~`C\mbR/u "*{_~^g:hw9DQ_o.s HI[6F#ݧGV6 ~5x+LX "rƽw~qq-3ԌLxDG`"G~x^O] I}1LI{|;u܉H2S^vh%p6@~>eE^PI絝p7*E&fl5QU);X=Htu }s#,'ֻF2ey G2^DLm87+3'~rU:>c|Dz3:JrS3:-52u#I'|̥uuFL %csC|WM&ʞ$3P;*̒_&.x&I!ߪZD9qz )e#[E$Qjܺs "2Ű<֝Xv r4 2;4"N|$AvJE6N8/+Vtj f}mdQ*=,d;%6\}/R͖#Y]8(,!l QZl6ٮrG_ngfOuN$$rU3i0r|7:%P E/7ݯ|aʅ+]9o?|+O?us~o{{s_[^ >-cJ+gyy{7x{xou޾2oOO~%-4o/^)yB+4 *tcX.۱=nn"$d|bukhص)h4hO 5>f:"&S}3YIcQ]a붑XTHzB!D]P4LB\sjgxjsG83p=qNgwtݝooS٩Kd3c4ߍ8+?3?1Gw*? v?ϻ;7o_Mx}wT*'SΏ~(ZmknTbtc$Rȅ_{};$aƂ(#~2v䞽EI|ţת!wLѐشذYN쳋qb#n[ 4Mŗқ/]mjE=CxOH'z}zMz=p"IOE` IP*sDXQDA^|fX:pHU1KYY;G6*`73NXចդ,I&Y7]&u39$(CS3+xWf_8> GP3B1;@rD+BD-ǧJ/U_EAi3m5ӣKQ/%G]Kv\rbV,Z&ccrǡN9|5gr{oy^r!qp^Sx |z@)?tFs4A[d73)H4j`k#̍:u8- N_ضADMjtJ6&=']{lOKCMp7E n8?pOSϔԧ/|PҟZOTO\ߖԙȟJ_`ϕ_O}ʅNrOkFO ?GbUYu2K77y^YO;Z5ofgzy,\[~nT#R0h$COս ׈$,DGV1ڍBѽwGU7:ۇZ>N_yH&픛׫LEyc9/-`>_vm RՇmnޝ8OGl4,$ZN;+ "-#4"ok`-KYVuNF]F>,b QNp/yEs(@EANYkx1U1Ĩ%n0Ğ@@@ ;d**ܓ/ӑ#tb#O0=OTȂ,!L؋d$*hYST/F< 'T`Vfnh =x* 'ً_8[Ǒ;~˘<[E8-߃0nwf4aƮ;8:sĻox/7?Y\~ߡwVS0G.scI,\n𝟹WX?px=^۞~tvEA|B(5f7 ຎ+){7f= 5wo[8xe읾y7_e8'|A$EXQ,2hdlўJ, S-}@z)'" 9,@/!61JlS-ص=-T-C |^(BĎSmP_#{__CPK:[$ x4@= y{'y;Gyoci_y:oMvvgW?taRczo4Ή) LEkсƖ~&J זΏnF*}m)}bLzh)mt&i{w(#Ԧ 9d^ҤX? `,4vGzK?M̧BNRۅm!5΍rҚO!iiad&49SSd#ST*r%n6ڊg߼tA@" y;H)"s}z$ tg #O IGaMi h? \bϭyn֡f*K}lC&"ȔI=1;(|r7OqNe׷ل>>mk饑[-&vPD{e{})V9"NBw(oB |ᑗ^sg8R#I+U"CLQTSY8ti J'V[} bwnP"R F9`.0t~`u"-%)7yAXq1Qrkeb cs&bAFŵw}؋Kkeb>-E/`|rAH\f: bӁl٪Qh1wv `zmL*2B?D쑣T=i2Amh{ ^ܻϽ8ӽ2(]OfF<7T'`_v)GtqÄ`qJ>xMzIdc2_>6Z< Hvw9r{i|e.|P<鄼!ܛCsTfNT1x=M [bw޴))c3'.Ɏ}ʣ!i`A"[xO /q+л=p*/TW{[5zMe&xuԺ֝U6gr)X aJ1TYY.2S2`[۩?9ԕ?_04iJp(D>`O#ќyR̫T:yV ''InPZ>_$g{fNZtM~j:k&C*賃,!^^oJ3Ј>7תT+r껪?c槇^=2ߋuP0P@P|_9 Mڈ$ 4).n1 uW.pma! 21S~Qqzh!mha󓣙j:q%<"`JK,P>Yr$+Y}C:׋VVg6)T@fTJᆣ:>}X^৆ʰ^;N@2cL@!^D Gɗ-u~rq-)J5? ܸn uv,q-OGE !GPڒ2b^|ųQZR]x13TD&:{9[eXj@tOdj!_#nꖻJRAS6ŋ(a8c2)9YR%֔6 L%Θ\{ȧ~z #E8RWSý 0&2=P9Y="µ[#DfВU/:gpˆ2+3capjbi*5a*"3|+čRa(?%7 1!2\ykdrwP=?H (vON[Σ^(7D0cHWzӕ?79Wk 3ğZo88쇑rlV<&JE}!4p~m5?K@'}fQ)끤HptR ȔɥftRmgԑ' tzMYMcI{l%} 5+F!!n1h SV=a6iYPњ l J'_lOX>p/qe./ʢ_cjjTEͦ~ԕ񫉂(oHeO9ZزA@vopA(G~aۖ9pn}y)!RصBZm$I(-*s˱t~4NA[Ǘ "{+IRѷijzRT qGԜ\2RN=6ׯ[AZڪ!)* ≻3$qJu!2*ކ=wUj^fW{'?رpeq VjqVhRTW Lciy#==Mt[)Mzԯe蔖2?E*[L쓏K?(-^(/<@fdI#8M $ .7'Z*o{$1wN%^lOYt単8^C+1%Zʩ##þAԾTX$t2.\ّc hs(hmCG0l`>X2uEfD}G3ٷGH L\c>hQiHA X!e@ %M (+Ƀ*'+~6{ՙ_<>J<#pˤ,z5+0,Ŗ3)*}3lTGL~ y?i,|~CcFN\`4`)A U *P.Qf})͔ǣZݮPzHi NN;]E+Vv9쉥j,3;Z&W PTGѪ;$o)Bkx9*7F)PO%CЏJq*H 2rdqVmz¯~3_?<勣ÆMÓC#ؓm2U'.r0<9[rcq~YX+v{I$tlzf%AAXfapaHk}muSd<$ rDp& Db"\[t$}8qtT1 ܤC/Sw6PBjV*Zke#m_m'&έDĜZ0Rc^~zTﷻHBDL(7p`GH\GVjs_IO C^4 "Vp3FG/*8bڴngAޗ,P=8R NN 09Agq@F2Un#."$LEXz#(Ss's|Cv~Q( ~XAPFc~l *Xύ~?0S)mPAF-1E7FxJܶBe b¼X^le:S8OfP+:M᦮6% Ѵ(bR{T@1Z.^؃])`0[ټVVmCطud##m[D E7-JVXIr;=P{fTfN|R9su|;~rjZN}a)V9.^TnB PtxዐM 8H>QlgPPc2\^7%=Hxƃ)@M,,o Ж]`7ޞU,>6. c"{n[mDؑAr8t~WK'B@;$WΚRȱc. z=ĭn6%b6}p^N !6X]Oi8FeX96j] .gҩ -=m)8?gMÐ)`"ȫYLS`@s5KAwu&)Aƴ+8 t=P4L%I UUf0s(K_p:4Cj>Nys0T~T*o` AqX0^:.ѳCq9 bg, Hi OgHj,kCзRӉBmLp!bX.|cp'V<[ži/0=4y㭞ݲ|NEF<ׂ0vҁu&Lrmy47;=tyD>IQ C⍯ 7t]Q2K 8j麈)%(/<^RbA Ŏd."V^8Z ghY@ss^V~2;[x$#z=rBa9:>qkѺ趩n8t1w Y;:n*PMB?_2dR,bOB?;@"r >;JM1D xȬ#4xX0B[kۯ=Ēq7A8e&ga@XJڪS';T"!2avC29pT±3L"C2ڽ= PHCHl)0g[]ZN`ǵwHɬ XYXa.܃ gPT\%Ʈ6eݚT" \~X}܊bA㽯rT0wuo:(_\X1)5z$YHnRzSO9독έf8Nz6R-=}I%"Rԧb":j?^#6$1X*1Qb!Q<'+4E 73Ad1_1 ~ds ' DTFFd=$r1Ŏƾ*QR)#X̱s c,nPkao1e*Ƃ.iZA:U|]Z/鴑73k:JXFl$"py3S-7[֎챉XXU@"l& yUbDHQ} mp5[Ig `6$wj%k'[2jnob7c"uICm%ުl&cZn_3=:'4AxuLQҹƍ k~ib+44>d=Ñ!4haypINIcK?%qOs9izcډP;ݵ$!ypEIF5ZJ274kc7I ȭb;+E:qqoN[cO'唠)h,j!@n/"0l70ޜBm 7ME0$E&f J,hpTבЂI6B&֑A;AOR#sslJ }xTٜ;l;n~ٿ\{oEhbb"~B5d~s&&h3VziGpbpYpKQ10OBskвK8(.K)$W%1Z#RHt-)A@T8Gɀ{q‰Ǯl1B?^x235w.J>]DDY_U$7mm+Tߕ֌.nN_CLl9Sck,H e?4lwmjGܳ72eiDaJrG+đXRVT짥/瀆[{ƂyF>̣O1WR逦yfQJkirI Qo7U8lO(2X(#qX=\Hq4 [bS49 R;GIrMc<`'l $ebh&* ?("@" H+87fZ\ߪM `1[=]ЦR1+=Nt]QEY5e%G cD|9[][t)t?J2X` *PʥFJ)y mrx?8r|jJfNi|Wr‰n&#i칚/p(KuLnz""" ?; Skn&ؿp(t|x7SBm5b{wyfu3\u,T B[z{ GfYт' Rfs@Wm(%Bhxˤ'A$y>5+rd/w˽j2+*z r홞{wg{ @ @l{g{2c"dga[DhGX#SI+,KldwQF# ^f|G*ʦ 3P{^A큂DHzi5yHի? n>?L_r߶ys13  Gɕ8y+Knf Qdq]!A1rI5 eWi3XZ*"VSHHzŰK-sIwaVuGMJwjL4I2j2/xԙCE酾5'Ҧ0ܲ g DD,Zm, ]RKRsInJuH-WRYQFzJWcf7d5mݳmlèzAh6BIW .n62_F|;0qkZ#C<=FO`1VKDJJJKG*ޕ^j36S\VnrQI".;Y;`XI"۲ZW %wozUAUrZQ9qr]LGfTq/ )Y3n FBgP]z5aJRzU4Ţ%a?2;oD|g7p;5Xz[MOe Rndcll5"WUeVjG'Bݡ?;]boys1XR,)5C,Lw6 UBT=TEɄqv3)RR6CG=t-INzͨ9vh_<:* eG1QT_-[*0Ew?]Eʖl,&(,*gtO'ЗKES{8T{Eofݢ7DDVMcP&Eo4 T3O钓Aܘsr9~8&s"J],il Wf"›y0z{!ɣU$eW&3-mJ{UumbqYIJ.5W+ d^ixQ6Xu4$KdlM-n5d4T*25@Z)* G{W AiIF"߱EE Țf.WYydhdP\ v/bD }7 T⺵y%W :KQlƷ+W=-*~՞uKŲn\1o0U)7+Og  A anT٩T^e#i8-TXx7MiB'foI(jkΉeڗK 7=nǣC4;7}Iۖ&&^ݔF~sĘ+@`wV$l2Wq9n4~':YB)YW^tV$QLdzH%d..h&YGԜ-K2B`,W7/6S bBa[^wvgd dhH6<<+Cq}|n?9?wc|ncؗdž??/¿^ w‘OB1t?ʡB'B/ Uv0<'F:v7GuGSF/hwF7rw#yn$<a. ;||C9{Cz!mۓJy Po8cdy i1R iTP.@mOEvn/V8zIP +?Q#쒓T$R ,ղ5Ǎ4h7NZIP]Ǯhq!+:.Fo$ E"NqP. Ȟ!L8GN6'XF6fj ;]r#Tcn9?n9[% ;dgH>sۍ3y9,'g2kStL9ѫvU-_z@RK_kkK髌9+qy!} KIz>;gVL6udٔu]'umTϘTaN[GQ*am3yIW$ryZO;ڬo={]E8qPTOyB ;#%3´Dx(9V׹7<%F\&93_ѫMKkۻU%5 IxNIV 9хrB*qX ]c Q.!(HD@3'ҥYF_rBZ%aFU$ m̢(ڳU'@Gڱ' *l&iYہ80zzCŠmS^jfV\>EhuW3 #aǡuW"f!3H] ^^֝D1=St{]E!i|#23o~ziJՊJ9=Rm"R_ :k$(6.|zу:+z*6mmԿKPg(DUܻ\*(*W{鼱uVj I9^m_va%#"qsΜ#\5]3 PgI@•?=RۨX&fbkAjm#(H@J'P/6Z;6#PD Ƶd&XHe`+zTU'_,œ/kǮ.]lt$ vϾRT\?@m?Q'_yћϦN=?uoԝS7.NSSM>|0y;N'oN^<: &'O&>x8`Ľw&>Oܜ8qtLLO6p{w89~q8?<l؃cp,?vs106=vx,,0 |?|/|7|'a8>p YaA~^nNP>t3t1t4Bӡá@|fbhF>?zoGtPmmmж٦={pժ1t-0tMN1IN0to2 g]2uW~b+ }/1ECe9>Чz`S }O0q>G[ Mah& -3ИC 05~_a%:C_cy~24C_bg 4C?O2 ~?Пcc0CO1$CO08C1tC dQaabC }04 7C/  Cws1C22aT98}9h'"a]PdyǸ L.C#N)O H!qӘDkubo}4ǞD 1VKdϔ1|mJЧ:kE)./\D,9 N˫vkrW;ޯUMO^s*,8!HQnmQ{H<υѡH%  ֲ)Mjڥ+Kl/7 "nW~"Q (ȑ]8rCDVɛ *ܡ Dt4v. ͋ Q  |Ɂ5J##8sr|R%A.e!+-^*VGL0:A.# !,ێWѣH#CzPΖL XR ֋ӣCI,b 8`xZ4qOujnBX켧iʹMC0Im9x2WO_W(9hii LIN fsv+b{-Wۋ%@^6a+n޼v<(wygAl$ҸaɥR_<։ӛJ{MCQ5O10DZM,:,'PP[޵$jH%RD Q%~U@DҦRdZ\Du U!lD 0-iS$:$CW? r?oMy$UiJax+hWjI%/;(ʳP u+Œj!~# {l4j)5V(I%Y?ySoڲ(/F%|UDAR_ ?! e)Ce @xPy`#M1fmdЛzrcJ-#G\UܓcC6oRac7{D>$FmY[۪,4,g-zfƆ 2&NpaNc4.xILTDB"U@( :F ov{O\0KVY^? V13spB_2 OSc6RA? S8$3/#Gy|ʜťEũE8BuQ1*qXvxkh`nh` 3QW/n F[y+yxDq_nZYP@kN.wV$ ,~ WWO_ *N'W e`k|\-@tx} tߙ(nsEh9Zf&$LdAZAEZD9TDEA- ( ʥ" lLf'?{Ҳiw>Of&{$azަmzަ_<<9{٢UUa%`;0rKZ2j/[;i_;6Z_;n^5v˖/>Ö%/>Uc2Uc+9pϦHgζ9lŪ%K=? {s#tNb M _9+Š3~^,dgLegʯ2;Ukv V +߼f>;_TDC赃eo4{k#Kff*̋RO|{TVIqtpv殻[:Qhqkv+S.ر>GHr^ob>* 也lTf]% ;œ_ezަmzަmzަmzަ7ݶG*|(Ppz}fKvWniPz YB) {anjQu=(!]3; 2,ġ[ǩՃ[y;nh~6?Qp6L>"9hBUq"ak.׻r qdlj{pYs1Pļņ dg!856CV-?|1UVBM(YzSX"luJYrSN _` Pl e"gY$q_y0n\O(i B"ڮuAWZǔYBMx{?} :җpdw[}c> i>5av/59㛲+ +Ga/YQGu6 @4i^49QmqdM .eAɪˢ]Nri.{M\mx$a,|)@XpFtK 9"cUa a|Pc0|$PO'Nduy0ԥrXK +MM Q,hl ˭c_7 [D,NLu9GKJ]\]i!)vQ r{Ҿk)Ga45=[oѮ5oj <paH9a6`@{TK)O6b~xLR%F@!x Gޓ\L6HcZu ĞD"LSkjꊋ`]Dp0\j&M񄽷]Z.vÕjGeMw(]::.&؎+P eK~pjpx]:*.Y]y57v :H0@}{T.uB*%5P z(OKLV`!TX٬Ց-d3o)ҍ6uۍ{6_wX?6|}φMo_`;<&37sa㹧37~~ iy\bڨgEiJFOpҰ]©wDN[[Rj|c*4&U T]6@'M2\lupOCf;Aؠ;(ik5ס 6L[(qq4fMixoK\asUדpo$S=“pNt[f.w۞"lH`m }A'`MroYZXRu]3Z2߶zE"Z$83,qZ&SgF˓ I]D'^W&]GkT&XbU0jbP8=(`E\453, '8XMEz$pZp]Gi5eԠx#2_P6xot$$)B]pJPh [ɦt- l-ц蒁odi8-DԁIZ\ۘ~Kt-A4)L2\U)` 2JjjUu0]gmb "Sk g ޘb4Q uio)WH0$PӦ( uEZcjm$[[2mÀMcS$NU*4uz$а«ׂNADB3)4c(v$J t,Z'4n5V_NIxSaPmtaA9ia*B%/GbT9S|!hm:1լ*S|>vj]mXx\uk2J#j ӴoxPTA yUD{WPQAY6' ,sI8Ъ6818=qڄb]Lױ۴EYLViJ`Ogy\2UX|&튌gs(Ѕ]tCp]0E Αk"L R 8@Q[fqL JLP\^G@p٪+5 9PمN^5*.i㈠鈼uAxCHkA#:zUɖ&e,X61Z눈\EbpH|)&U(.M,8"ZMw4Ө!!u]UhA5F9X$'A Fkz5 '"%3ck]DA ݥ0zTH`LAlDM$4ҐXސ*ŁK˦%* iuqi`YFhuФv>=LVBwAףuM"FF~-?*m*Rt} JTZ[Z]:tH )-f*JCEx <wMp#bc*TlRr}+WQ*k++GV_a*Hene2U%W*X~X= \@kjp$8` [*X|X=Żo,^_xEqCӋ^(Jŵ#/2E88VUܪ+^,-ח)_QP|vW6RymK#3y$?7?ߪ̔XyVyr'.Ii9ͥO^V9B}mJ_,]XZV [3 +Q6J mU CY? CQw!n !~/C-o BfM!Bj_ qh _X o(=AAlA4 %ĵm!Z#^<q:DĦ=Uc 6 nQ(Ӛn*CMXDcy@Ab]9 x 5ox2! 5Ox!nx l!8B?*+! (GB? !0B_K``K @@_ A>} o }4DQ}ID?@_{AO υl_!D ;C?; G;@;D!ς?v}g@6}k[A@/C/A}a!ÓN|s4@Y؀g BsoA^/_x" DeK e B C/< _xfZJ/R/Bχ\φ?B}@ !oBuxotYa f2e6 lA,_f2e6 lA,Ya  !~)/x}ׅ?!~.φ !^Bd /!~,?!1 !^GB8/ /!~ CY! qgm  !9?   1v=D6aA8paA8paA8paA8'O OWx\džxLB\!!xxxhB<$KB<(C< !~!>!3ĽC\g`N?>+`&`ⷋ_yE*|rQ}wÌ~IeQeae7+i[_-f-IţyۋH? ;-|~})*,+0ީy7?T~>̖g 1a.ܗr]0g #rxnܬ\)ʾ}<`fo~%gɞR]٣K̢ݳ;d*m(\^ }XyK+t[̓2f~n2d˴J֗%ĕ-ogiviRQ2k3d!22lɍ6jQpx/,/>Pg/~(nOG&FHm#o"בx_$D⯢-~7F-HV$~37G#H1_įD#HR$~1" H6?D5H:?ODQ*v"/ďG"Hh$^#qC$^ċ#ÑH(/H`$~ ϏOxd=7gG;/ϊvxo$gD"H|OiH|w$mEbԕVNV$F]9ru A37Aԕ+QWD]9ru Aԕ+QW,(@Qd/x$F: D;DѾ{EuHs}#qNnk$;GX #S$;Dۣ>gEH.gDⶑH|*'"/x$9"H|$ć"ߋ#1_FݑHyEO#hߟD#Gxg$0{wDH] fA4`DY fA4`DY fh0 , ̂h0 , ̂h0 EvH$.h0 ,h"qq$FY_d7FY fѾj⯊7?[hoyayu9UzP=y#'s峹a_o>xsf[ ~2{nf.})쯳wf/ȮZZvUvI|ϙd~V 33v:37}0xۣ׏^9zΨ0zQftG#e#?e#W|hw>r!#Ȟ#;k'ҿKߕ|X^kkJKN)wV+!Ko+/?pVZLN/K/JO.^w&8(lFI=z wR7>8uVRǧM*NѩSWz^(g&03 N4m"R[kqոJ\}9W_/sqٸL\}:!>>W_qz[\n\N\5WWWWWo_7WW qKqqz]\B\|\6~.~6~&^W?WW+qzY\h\4n%q#qzQ\0^W?W?WϏs9qzV\}o\=3WuqzZ\=5;WqWڎ}݄WjU+qՈz\j3qU*U)qWZ\U.k*WJU2qX\E*W W=꼸:7Wwsnqu׸K\9qquc\!=nWgՙqu:#nWWO'_qqOqqh\}$>WߏߋU62WWWWW???w;ꦸzr\}W\=)WOqzl\=&+qzd\="qzh\]WKquI\=(Wquo\'3WM~>X#\hq}Q.Y0￲p6-biߒ4I0/35?;rHnf0!{)̿0);en92̷ߙW_yʏ+_\V9ҨUa*+_ʿ(\|N(W޷< Jϔ+ Z0>46x_\GV#/%$"D&#ID:eޑJ"$$$$$$$~ 瓈璈gw%'%'&'$'㒈ccUI$$$$$bE<8<8,84XDD,M"Nj$%&$}}w$[)^u:}W߫NU{^u:}Ww/=?$7/c#wץ3|4ECۺ6X.u1& ւNu,q?̃w%" 'ٞǿ ;K7xɡ7GPlp= i/}oES#'A[|o.Ko 1Qw0+R[K=ahj`x|{T 3/, vBbk7[~I ㄽ~͈ׯ#$90<~m_}ov gA ˄}򸇆FݷqjSWZ]B0a&X8NHd&^{OXG0xU=aMooZ0xoxb}KslFX S,9Kq }KC Vz ҅d^h$z9~üڳoPK`_"D=e? N:Le66޻=UYCV7?FQܰ{erk-ZzEV@%c-NH%B.Gd c2t$ 8\ T&cp:6믏ӁeQްb/u+(Z03(߱\̆7 Y,.B$$sIg$$N"N">D|2DqUqeqEqy$cIeIGKIĆ$$#IIć%%&$L">DDD???\CM"<]|=x-x5x%x9x)x1x!x>x.xB$$ISIēII_Ǔ?'J"Dso/d^.r9,}yGOϮm=6}v꫙ӿɣ9'_2s3v}铳,~m%0|A>;5ESO h?mG<>RsS|xjʵ'skRe+ҳs7d^.]|o#fN=P<n_WCON-ᇆfGRsmSRې:/no;-*:J'|#6%SZuVs9Gբ񍂫sRmX.8L|:x{%aյdDpo$BVMD|#l[;lS y\jSX[eKDYLMPnzu9Nj-j uFsMF$f4 }#cr hnˌ%nsQ8 N֦pAn`gݰ;eǛ-pVp6K`^PཾQۖ]oHCDg{u֔:5.J;CjuĶ]B\lhY+l5𝉷kz* #-VlHvUkM5Ql$j*bכ'ӂ= BWj#{\lAQ M6E ;b;H^$5$s ͆ޢ-mh.p8EmNK0e;u{R&V1OБv]A;x*tU)Umݮ(gj[a7ł5vpޭcڂU`-CmS\Ц ~:Qk|\⩺#9VRYSVǫup?Tɔd]5;:Y%(5 V50*U^m8@ /ȶ@aVߦo;&a;H&w<2`LS ItjUTZd ; QC6 ]ֲ\4КNpLj@ۦN`HëQڡ%;jK00 ~U-ؼ8`MpYMmww괻~RWQlIymX ̡^AH- 1ౠy6kɞٲ5v[E\wl 2 ֡&@QPKjI8F5TC%mkuUSu!abqe VW (KU[;*bSA<=؏ѤPŦ0rm3wM [l&r8ؼ3`ng|VTPX(-5|| 0'(TJЦ-u3&6;58o.A"k+SCDܶ㿏c9" SŦJ5vn w]Eo(zFKSg;:o\vhC㪾P,hܯoO0)1vp}<yOk-Q g|:6[[Cco14r}p\"]Zu- ʁQ1R0TwhU[a8)h ( g db ZeqA!uAg580=#l6&xuj Woj hFS5 &Ību0 BB a\CF=]gmb "j˩53To?R\8jb68ؠnVM!j]) 0$PӦ( {B[w ҕX44qJi݂G--ha.؝T|D K-c$^-4D(@0ʪAFI#]P=?ijhtXV|OG s8M_޴0GŠ!uTSNЎ ZZ2qOĩZexV#(>355ig 㙺^`N M -̫uaQAY689vhFG9d N ;lOjG6a88tЌVMlbz5Dpئ-bJSV{и_c n!t 3Tkui75m4:F(_uqÅYge9Gf^2Un\iV.X>2^پ2yd٫ח?Z> XN\o+/./[rZn(\㊧ Xe=#"0le90iA-,(~EJaE2ܚym 3  +|0rm!"Wߛ.iYDܦ mzަw]]l;Cuؐq#jl7$#EBÂW|h&7 [m[/oG:QXk1b}kptQ5DAm7ܺ&`69zAhnv5k9!|(u%PW#PLzSb- ܚvqYRHSk~ۢj(:pthۂC(OR4߭ ˬJ&[ClE NJ Ltj-7bkTfP81ȅWnkAmݖǓÃj*WIx /IZZЭ*ĞXXnvipR-8BШXW8V8ӈ* 86>3n zCVT%\ZM.uhc|'SPڜ^5Yd "<@FU$Ӥq8qP>0%W"/w8Gĉji OjW&]GkT&X7a8c-j3smR(bZU{ NK8 4akOm@+A 03f6͊5t$T:zU#Q$1U+#: j%O_p5F:[#p1>-=0r Կ`7ypA`OQ#*HA 9*XN[[Rjhu8˨230J&rSFqP"ȆbV<ؔ&E8Le  ,&IyuSc nڕ<`^+(-TlqNaKw=XM6=kn0riHj2OFFZucd*80ƧHlZ)0*4&5f^AobS%jBlR6~z[tUxD]P(Fbh`Atǖ%T9-21߫Cl1d¯7 1rzCj1mDe}zLEMFT{S ?! l8!3Fo;LZtzm}(7b}eo-0X8Ov{&W6/.1 {LL}mqs02G)l\X|foKv^38&m :8޿>\<͟=Cq韲6:4ޖYa03ƽ]FڌAt0nb~\= r&U {o3^.Mt0 b^\]BbA6r1oSԛa Lcdž7Z`vuVv}#?-dAYSF!ưJC{PD!8I>{츾AYuĠ,cZkdYikǯ5 㤽1}?30$j"h?!88a 0%ѢV0լ ed {oCt>zjXC{Vr0sz'G gBk5-^״jC]JZ,ۭg7eN \hzQ}\&4uo|HfpH&#wq;N|ʥ7nDBW迂 ʞ}C;M?W}`VKdV6 (=oA\ľ/ͮjv-I-6"4Ԟ -CkvfǑӧAb `A٣-{/\D`,6 ٤'ؽ'>`z$>tB 콍؜([lbHvg\ܞf#{e7|8 넽7˺MM2}0>rG|ޛҗMғW-) 1NNY4&q;%q}n3NzCSnzN{>r.|7[;Zޅ~G.t߯Ļa u.tgN f\Oebcl=*+ί)Ja_~T¢i)ZU9M{L7_46thl6&i-[ycgkc.1ۭIc{-kB{a.:o|ޔeJataPSVpj`2_,{jYz WY:8lJNhUɚ۩չ/rhg8oܸ&\aOL@G&wOoh:NS粬99!Ϲx$=6Фw8|H|875 \(ԛCN}lƃ}|)O 2|18nZ59]Cdg6.LVu">?WG/|3g"o8Hp8Yap xM@v٫?X% c~W] ${l"Ř_*tKsjcқ0LPd GeSxPeR'ovZ9!E h|Η%'fƎ3k*>x7)܌G/CCvfT)P}mVO"\ѓhZlØRD`?s#m= 'ڴ(V-GG ԚڬB5TnQX`B,"qn}G5f-Y¡MS?_eÖM0Um5A5 -I$'*@{I0 z:Vkuј:ſmÐqP C{o BUdR\f<ăQf{]UDh鶤G I2E5 qrskE(>Πl&n۾' [ӌO}_aƛ>xum]uPѪ:%W/4كG{.IU=wNON%#+A9,Irya',"bZtIJ23 Q1 " A"((zf>wV{ϩvw?xUZ9>}yٶ"rԐMO籢wق=681li5:j}<1 kwݝΊvв]-wg v˻9#SRYU-yݝ[siIFvܝ6KN{ĵ[⤹?C/okn2:[T[eS+D>Jiva|yCTr4]eU&YmFwx|hD ,ZbN?ntKyAgqC' jZqY8l՚~n:d̳Q&Gt?c B =3tc\ؐ& 4xK+{F~Fc6`^`gng>\9ٓٔmigO8|a6pȴ g6p v~6ϴ 5m`Ŵmڀ:m@6 O in;m`ii{L}nv6˴ 4m5v6ô l7mOv l3m`i[Mr66ٴM ,6ɴ?1i`iᴁ $ $ ħ Ħ D D   0ȴi)W si6pƴN6pڴS 2mi'M8q 6pܴc 3miGM8r}qf2c,yyK>mo^6´Nx~_ y <7mi6̴ <5Ԟ'SOxفǧ ac6ȴ <4miLݴ v}~3m(1_ߥ~ASH/uiꭩsST6uF=S;H%S$bC_&L~+䧒L^|Gf2<+yb>I>Sr`ijG&Jܖ%GW&.N\$J =qJkRbĶM?!Oߋ5Wǫq+~zq5G|fx|&ؓb~F싱O,b{]!bllؖT-L_Ev解'V=;zRQ!stFPsG#$r{"\yWMn1"F#EGEW ??_ x%¯™Z8>y8^=z0o>塷 9\ CC{kB[61p9 ^ls'_8#cwKO{w.xKph:[ u5Ue%Ey96 @ <x&<J< Ox2<x4 < x0|- p{ @P( y@; p; kp.-W%-np3\p7$g`/|  _W ?> 4> > =>x?o w1ox6o&o:*-ox// ???z 1(0 |?x%|+^^ pw|G"|/*ـ@e\υڪ5|ʲ͎x-gXxjG^WZZs?`ee ;RwBITo]}ÜZ|Y;_:oۙ]ғH(~gx鍖SV, quu@fsLAzJflՅ8a0x\;[`"1[Nێ8!o4Ż9yxW.:V[jk7]yRZ'9odwY7fmɶt^@Mu [rm;||¯WaoBe ~=n%+Qx1בcf~Aֻ _\bMTy&bRW^J X9;U[zi}w |Z3Eͦ@Ȕa4x6 c[x 8fV\;mD s׭svw ;\˪-6eEW1XZ[ptC$MpϬ]'}3&jU׊TY__ZmSrD7Mj]tts.7^Qeo.y,4YZ]-ӒT}R3lmd^DxpZ֚mo/Ǝ8sSӢv[7fg+wmlOI7ݝ lSvSۖ.*a`*0ry۹ݝ lSӰ 3DGfM̗T`t́_g \杲%3M߻ZoXn;w)١ݤ?ORϥJ,u[Kޛz[*H'Nm 5Sɟ'oO~9ɷ'buɣ&L.On'x8qO⻉H\xGR1lՉ$#_Ŀ9wύgŏ6ŷogb2-cVΎ?Ƕm D},F?6zqh5zNQ!CtY4y!ȯ#?|%"1R"FȎM#5R5BO~3gC]jICrhH'zs/ ^tV!A%sp`4Ro?|#h2S.-1ei~.31ofZL99ј]8y|@>B.'o!mbdٍlM_ݿ =k$FVXmaU ֱZjZj汚ê,V3Xjbsz6VX}VJӰz*VOX= 'bz,VX= Gbðz(VX=bbu?}7V jXU`UƪUVyrXe'VXcu7]3Vwk#VwXrnWaunխ%VX buV7Xbujqưjaj V VX*,F_?՗w /bc/X3V,Vg4VX}cX} b>c!>;ޏb>bXV_`?Oz7Vջcwb?=~c6~귰M~_װU~bތ՛e~ _X_9~꧱)^ObX8V?Q~ꇰA~z-VX WbX}VX b껱.^UX}g"/{~&\m԰~.h1LjU+z<vxh7$m9UY{jid-M+6ʘ//'ޣTVYi9;Q[U43n][,#'qjZ5γ=lrVU}(k,Mp΋2N5Ŧd !1߱.65TYRݹgdxϋ}7ms n.)+$!al.U:^ .rLnrcʰt:Va9xW4JNl۰(ЫW(vcX1g>_o-)>__,.`Ŭ9;CxSmG/+94;x ̇>:4gw/3xQQrl IZ':Bef%u{-D$5-c3o^g(MхjeXQ=\)N/ۅ|X fs{WB??D_B7O lArt?CJ(glWWꅬ5^8u9z4uGvwv:NݸSlQ횤]mt:úWy&.Wfn:,MҚ0Ve۩8)6y0%\.vEERlKR^E *yg:E9:x8S`sST1F¤ZLYR;iU+5gwΓ< 5ZV4{NҼ:y#y'zWf5ӵ4ts|/yҞwě,v#g/q`vtL9S>)jqIiQpEwyVtꢬq>i༭V)u9je>'5ر ]7aÏߞ֪|s7%=Sbŵrڄkј/;q`# ~|Zͱ&uµ_&Y5-K/ +6-Kz쮀n/'et- Na.\ox^Rq]gWk߫礱{;ޡy%ղ3F.T{cnqdq({^SVj=kbt%vFv< /^_ӫ+]`ϳ N➉skdwϭS=sKFcԺj_ܒe$T@{k; ȥ~YW?SO~ynL}"ԥMSRVL"Lɧ%3䗓J~0yE7&|Ò$Nɭ&&Iܛ+q[gI\8qa(%)#MH]&6ID ??_ x%¯™Z8>y8^=z0o>塷 '1?g~|\)m Ї2 }(Ї2 }(Ї2 }(Ї2|-km|} 94|crGVGmuVGmuVGmuVGmuVGmuVGm3' @@@@@@@@@@@@@@@r:4QQQv`=Z4QRx(ּ[k7R<"eV_/Yr0[*W_*WT KURU3Ṱzѝ⮠[U|>@]ViyYO إ*nu []V *.7;kϼ2,09W2=Yoyf|`\6wU:_|c:_|c:_|c:_|c:_|c:_((((((((((((((((((((((((\. + &VL0Xa0`b + &VL0Xa0`b + &VL0Xa0`b + &VL0Xa0`b + &VLLLLLLLLLLLLLLLLLLLLLLLLLLLL纮++++++++'X!X!X!X!\<;;;;;;;;;;;;;;;;| 1x-| 1x-| 1x-| 1x-| 1x-| 1x-| 1x-|̾>y3P|;(A! wPB|;(K߱]bo|%ۭ.sKOʸե'eғ2nu[]zҭ.=VWry~KjiWԥ][]ոե][]z߭.nu)vKե nu.[] Vח  |W`%P[SQY(uZowuRӗJR_Vb[ªȭAGFMysZUN‹Ft',8I+5E:ovޫ<벥6W Ckm՜"_'IE9;8_ u޶.=<+[ն=c-\a=EYڑw4M9;x]5VZeRFOmY=zMY{VK{ >>wqF& 5Vo-kf5g;n3]dGNҼNpjLtqVz2sn'Ǒ}{|M˥(YAgxcqjLQY!in v^Me\;V7[uϥYwެͼaLgHrSԍuEɛق6Ł+:Jk\3i/5Njpb jrZO(J{A./͉?svijWVE`]Dk=~mlw"|#|vPc^&wTlOYrBoڂt n;DCd)S*r6C74=z7ܾ%9M-~-1MNv62/m[)[T fuޜ]=M kl0K^\g y IK˞ݦv^.-+Z(5\\. KpvvvV#[VY/SעNV|ZjBĚ]bu+UmlamzneV5*'jRmqEѸ5yͪލݫrĒZhW;Vm0IV1vvXWVThEKXlĴ"7XRY\Ϊde{<[S$FIvvޫeҕrko̹ӸVnk )NvoKs֫Oܚb7nY|A&` D찶OLvtPηlnvgO(el*5+S43;{OȂ4=ϔBi9Өʝ|vuѸ krgZ<`ȫiU|C\}lNG][mBgg<3u[2KlZl ž˞͝xp^>^>Yӵ_3*)ԥ2۰y71Bˬ}>sޱ\?_9%'҄h4kw`>X33ٚj}j_A<v7E+Fռ[},Fͻ`$yYx{Q7*\#r C\Mn}H6yQ*:.lXU輁#<˷fT FTo-GFNRh)Npv;*Ꝛޫ"{C(,K.y8]*Hm7٦=Ci̧gF=v!>;Խ{fM;rk=ui o(#ϗJ햩\%Z'Eq?ȳfjnbŴfԘ:ak@ϚUziQs9pdq 8s wrV:0]\IjZObݵ p/ZY5{Zg뱖:5KQ5&+O^v{giNa :gش6~|eJͼN/nV{iG,f跪V[o4w"?E xhVWmpU{<|z%ϕyƟ^97BZ9^2NU,+b/cBvk|3|sv%TYOp`t~v!ǥ9͂5O8,p-/" s4 x7`wgzЬ}NbppΛxkL.+e|+o\+i_Kyy(Yݮmc6Qͻ{%}TA\+tCcDGͺA.LogrOplCs^/y[qK?4Ƒݽ𶲑oMmj[)GkZ`wcL6 ψf&9II"c cLe+ngUr ~'O}{_ֽWz4N^&(_-8Is<˩B(uvoqS>$;?;6WkRvvQi-g8<궻wأfP˳.{zo$ivޙhٮخ;= } +$y% }{|eV)2fN/3\l+ V7HXT} Zj ejum*F~>8x }+9m V%6;OX5gw+^;smwiZ=~)4yg|*<,!iQPc>Su.[eYjs Ww.IuAfpz)zU)ײ]CkK zȧ5aBY{b'Y[Ef*Py714+zQ}(s } fOff &"ye䷒_N~*w$ߘl&ɳ'&K;%Nn &^Jhj4x6 uOx*Sx72F7$8(0 @ 8  cAWh,X<3?|O| 8?|  _f1ln>syrY{Lwnl_ O~2z}C`<_ p?T*%"@ nw p.^]=: ?,;??XpG(G<_ aNa-nYYvvvvvvvvvvvvvv0aSOx<1%%% 2 2 2 2 2 2?@XXXXXXa``dbbb=>x?o ?3?x7 C?}]m:0mߢ ~ W~ox3~Fk }ohbW|m$"Cƿj ů%ޏWvk|-c[(MݳcYᯅo<|mExeAk`^ UhP q; ~8v<'xr~A1KU? <?˧=#H $B !@BH !$H(!\xG4Hq b X!@%b X!@%b X!@%b X!@%b X!@%b X!hd~~~~~~~;! a~naOl2?e3D 8C3D 8C3D 8C3D 8C3D 8C3D K8oF8oF8oF8oq7`9 XN,'I$g3 L|&>I$g3 L|&>I$g3 L|&>I$g3 |g3 L|&>I$g3 L|&>I$g3 L|&)>I$Yg3 L|&>I$g3 L|&>/ vvvMHHHHHHHHHHHHHHHHC!xp<h Z-C!@e2d;W+ ~B_!Wf># ~B_!W*H R}B&C (i7֛QMQ0/| ~u/~m?$~!C2~?d~!C2~?d~!C2~?d~!C2~?d~?݂ʛT$*2 *GQًTN~Tr L*rélN*GR91TrD8*Sٍ)Tt*5*u*JJʠ6M@HDLBJŢҠҤҢҦUT*Sy+eTVSʥT.^*r%\CZ*~*o*!*R0|-Tnr-lKUT>FT>Iz*Y**y*_r#/R>s| TB)*_-*ߦ*Qy ۨNTK{TOTʝTc*wS9kDeW*ߤ:*PٙTS*nyZ-~F/W\Yv0yN8aW) wk~..zC*fxnp9uQ6 .O{izYǻƍr2fϩ^~~8blc9O\!iiEѼΛ+vPvQo8Q_9'iI'8odw;q^QEEZI.V͚?SV VM+renoE'PUFу][٪򽼝[}[ꬕ)eߝ뿛u=vsdϙυo)۔nA50#Ӯ-A%AN+]rƳ\J XT|bE+S-40sS+'XWeƻxn:b:ulY-b7uG{{_J5U^*V,VγXg<5X/hJ IkyoxL:ă ??'Vݼtޛl$j;7tKj'+&~?*u-_Δz>[wU-p#ʓ.#`ey;lG˶&R0j]\'[Y,#+D~]MSՕ༭.;ӍOU%GcϦߋjܣD Ez픅Nm}YTpCv{UFd:ǢB_TMf5GF80VKx3RҋyI5#zUFV ?U~\T붐F90R˩4KF׈>;rزʅ^VqJRVo;5J~.|q PEqvK:MK R [LA wn9Fٮf_uV>/Ԋ:W)IwY0˥^O\!EP4ewzF#YѝfP펪en˖چXы>?JQ5lIhD_;ulمdBQi^6^OZ(ZvIlφF?S,+rf ]ηmGm4Jmdz&e%ĆG$dFۉ:eFUJV[E7v _ZlE~iZ:_-G;uhtv&̦YQ+h.uՑڍdKNl'1yjh\V˛_\QDmsb Y(uZow5|:8ZתW:-Չok8=dG4rsJ]mk?lZ9Wj$֬Il'5FIUKNʉ[FVݾ.ySͶU( F+=ȖZ܎l9kU)gdJ bx^m+C-?Vvڮ5I"Ш\ַtM5(nM- }(rȨJk{YÉ<zpJC0:~SLT \j"'8B3# LONUrUQF^khAQݶh BרOOqTt:Yk+)V.6JN/xOd6|7ź3E+4④ˉuUQsH  ݦftDh~%Qh^N N?JZw𓭂nqEGu}3cHbyJS)V:14jVl1Bo6L(3YJ(&]Sl5&S }طRZkvE.<1YN %]ϴY򞡱mNu!sx9Jf+gmcg;> RK$;9ԛfѐaCcbJ]~G5"7ceի׋LcI;nOZv=Qo 8|6 LV+1O"/ zab۲M%oNEj-A/f"G}MɘeʅZsit%K:9vz! P2,U!43%C/g< V.S6,gU^ l347:iVhȯ})ŚM\jjqWEWz*"%*S29Ggf8~ o[ZװC+H*YUQV6(#.|leTViFs\6nUmMF!i4f=WPώ. oB+j6*7B4D:VZhv_%çz6x~ 媘+zW2DN WݮU(4xQ BȊw\i l?Ƽ\.-5K^V[j^+8Ldi8R/ԟ-+7żLsb9П-Th׍r/W!Ri۪>7:ŪKUQnbhqIZ߰EIT|>WXm+ZB9W%ś|_(Z2sLo$]UGZ2sͪՂeRlZ\^؊fR9ru=%|uB,;jק_PϏBP- _"&b7nY|A'Q2E.4+8kUtɱ ',>rQޙHg]0Cr7bfrvȍTzEz\ mTX^MKmJJ+]k/K_;Xt _uuCv$,ٚ`BEq*H9T(z/t65pze mhZ)25FS[5IWF+˥jpffoU۶&y/ =gkUVHk@-5%rGi囶< ?.[yR|QZ7 mÿޒJ=gKw`~nJl˽F+3wj,JWzdr|'hЀɩ2uoױi[t!L4j.V>ϓ{Ɨjb.r^`Zo^J*Bn5u%Ѣn!0wIzզ)#MVNZ{P,Z1g k2DZ_WnFtX>^<=\=[>^w?|\]LzΗ4bZݳفx[9MLn7D 7߬qμjYnWEY]@&4羣屻zJj=կTs/"Nݏ XZ_kfP+OOzedwϼbRv%a$U[Gi0f'"'W\lBiao LC|XkBQcj2ofG%ϛ0]Rny;svfxPhtv;"66a^d dz7-BMl-ox6g8x/YGΎKsr3ɣ/sUS~oe 8]Z-lΔN%5{ /=P.P~Q^NEݙ B^S5;) >2569qU>}0GlkrzgG whnTfvv5pKluXI˃;˵Qc&SxGjf) 8]h6 o]K;P~g,)w<|~읜2ͤ2Ě=~PA^}05YlY7&vfHiz Ʀ/4Xꬷ<^Hc5%:Ln[?lc3= 6nn)j3I}V̙ɂ=qv#avݦ6s ڜ),+Pi3>or^\ދrfuhhs-O3͵fK8ݵ=t[5֥'ZspMrKr\yׯ_vիW]ݳ{uū᪳j^cWO^WVn]=bZ=Xzc@kWWUVTwWwU/UjU/]=zrU۪[GT\͕+*WW\Srq%8raeG镓+rWVZ9RVn]9rʍ+V_ٿr5+W[ٻgeʮWgZpe+"+ǭl[ٺrJq%W||skה.+-).*_\N*_XQ>|z\Ǖ(9V u3u#uO]K]C]MR{.b*ʢ.vPgSS'S2ESQۨTʕn-,\tt}i5KJ{K{JKJ’SJv.^:$qm#JRxk`)^]W[S]UUxvEH+n+n-Q,s[  7n,(\__pM¾ž®Ņ… N.p\a[akBߚ?9c@kWww/·y'o/ȟ?=r^[Gy+y<@^O'%!&{=nry1i;ȳɓImVHЭ ݈~t-]hڍvQ)K/+3IÉ/H살Av@A@6AZ M uHRy!g| @>3@>@y>ȧ< Oy6ȳ@> DOx|@ y2G|$ȓ@GR)@  Pǁ|<@>1 rȣA}@@ny#AnyOywwyUU+ )%Ey$H r dn&?_;?  o@@'KA; ?3)țAAG  F]m [ @ o:ȯ*ȯA3/"/<ρ u ? ?  1 ? !>     ;oVofoF{AA^u _ 5 _ rȿ*y%W|9ȗ _ /"@ @^r'KA^ /<ykc#){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA S){ =|OA Syr?#͛[kƼAf̳2Wg"E;?E+W,B_Y}e"E+W}ʎtH>x(!wD^XEXEXEXEXEX]4 !!!!!!!!!!!!!C0.B-B-B-B-BmAB-B-Do@ԟy  -[(`RyK -%`RyK -%`RyKi:oα-H#Y\]sZy:L޵2w] 3y:LA-r9Bݵnq׺L޵n1nY) D/ȕY|pްpϟsr8 C0hOY,kғNlJI}-ӷ{J|l"3a~]`} ;/iHt(6k$l9^u|+}gKM@kJkXItK.u oyIЫǎ˜F}ނ_x k\&ϱsz຾UEu69mj1u i DYjy^-;V6ѝM'U<c_~+ѫc~.a/%jUN5K7J_\Z$,gktt Hd=Fq~{`I ZIvixoDFʡuUp7S- bLMIwkx$_t mq-m3E-')5_Q [Qglfa,kK.G=xFzc'Dj'tAX1)qILMD)Y^hj'}v7m$SFVD4$a3M$,S`ON$\)|- ƈe7Db8'_=>w~ji` 7]ohtź^Fc[^WNo7(pRe% co#}>onosyt%]flK؝dr+~iC=j ,X'~\8Ǣm'J:6nalh I2$WwwNzEm:.Cm99K̆\Nlꓧꭞw>mk<, qԖ-Go-gyRlMwSo4o/nwnr0+ܰGf q5F7&{WOKK\KԆݺjxG@eOcY {UOxH<.i'PC^47)<^]Nפ8]~̰0 L>NŽ{GUO8'~h2j+z|6lY2 pJ8GUG#W6rMt`ŖaaX`5Co X 7PX 5s@7 /{=H<m9`euц{p<M.tbpA~!z~~.aw8dE?m#o,&xl[ٰ5;N/>]v=26%2'&ОXzW<|d`T0lUyđц49uџGNQh *چl;8b|=~cBBӡE3:9.xQdq:`ꁩhJi++wkrrۚMta$$4H I#$4H I#$4H I#r4 G#r4 G#r4H e"R&H e"R&H 'l5 [#l5 [#lxHHC_/C](<:?r֥ѯFBJ#!HHi$4R )FBJ#!HHi$4R )FBJ#!HHi$4R )FBJ#!HHi$4R $0R )FB #!HHa$0R )F$*R TEB"~B '$~B "x?#x?#x?CEBA"] t.EBA"7DBA#] t*PEBA"U T*PEBA"U 4&DBAh"AD"D<x "AD"D<x "AD"D<#ED/"^Dx""ED/"^Dx""ED/"^Dx""ED/"^Dx""ED/"^Dx""ED/"^Dx""ED/"^DhRGPE-wA䊏/ţ [ )<`* (WͿ0ߍf`"I ?Ag%@CB@cщHď/%^M\Lē/Aw,.ݰ.]-=}v>@+i:_[ ny^)ǟ5qT,ǖ,=r=q,Y,G5Qrd9Y*Qp3Y_f9f9=oY_d9~Y,O7g9~q,Ǐ?r ,ǍYe9NYr|+,ǁ, Yr|#,ײ_r|%q}Yr|),r|.˱?,?e9r|&,ǧr\DY˕yzGr|8qMCYf9>x}Yf9!qur;,;r=˱/+ ,@Y"˱XrYr>,o,ǭYr&,ǯ;B];ޖxk-Y7g9ޔxcco Yg9r.,krrmUYaP̘_r",˲/r$qE,d9^xQcWYd9.r_ OW-?%4:΃@n{ԵCjo:<k>M%O4]]'ȵ㈉u?$AE#-1F΢ha#%/`{'Prv=@e79D@M`{(B#i]僁w;<;&&K`ORaB km?tn˳l" D `cmdt.=?l{\cd1ll$R ف:jָ툛)|D,mKftȇ6'`{n'I`''wfñϵ ~67{c9 Nɂ^vhx cp;rpc2)|[r/ޗ<M1IҢ{zݣ"Y ~[Wd+L2c;yj9M X} ;ݹ<x!ر=S*}YlCGSL[[;$b{[]ha+_6p.!.b{&6`ccpنĚ"~xc71E,Y}5}]>5pGf4˫sEhqf71:Y 1`N+vɴjb,_S9M #'kb.+*]`۷ًm4yj6IڎTK4%_[MM[Sr6N;^=^GYmWm4`Sm 2Қ` 1ÒeclU8d[a1pM- *'$Ttm6۰:462i?=_Sx7pΟѶQ8{r%&WxF{ě?yJJ jfk%V6T-;fzD'Eq{<<:4,婪ol0f8x'';6pC_I. fxNǗ:<~bOM4G&v]VԖzLcdG0RК=NJM,~N6oV$!wOlGs5157x{Dx cPн*ۉ~o{]lϥ7Eۣk3=FŶSIPuMfm]|*fqn^u"p?[ ;i8|e}aK|}rP')ĊӲߘ+ޑ+|2|RwŸk>+Tf7Phrsس0<(n1rOpmA+.=f9CoP8 8Lu{VGUc0'/x'g"y9բYNE;Q<\F YG )|ł^P *ⳋO([oPRS,H"ދC>|%TۊQN)oo>s{#?/kBPL?˗ȃ iÞc>:1*uvW㡬'q²*zHg\VzzPzĨ1-CSmsZ5eH́ꮥ:Ti׹GE-4hxPW:`9-9qKmXZ^'=7z 9Ea_N$VF}ewWEO&X a̕NR;AGUvNֶ$z:K!6 Lp*ߖ;-j; Riݵ&Cw9mz þx 1bk:z@md.jj4-6Ԇg=A+ővh4~Eiv=ٷ<kxj^ٓ|.=lA66ۖMn$3 I,AWǴ>4;]a膊( Uٰz 0umC%-M_|u0ݤNUYDd=]ӷt}îYAF×&[5vl@h) V XPzCvTj yqmMp ^*^;tnlJJk=(m;lchs.tR-Ṕ;EeyhQ8ߔ;^D?=1lݶ$w9>Qie}z4"gf>g;fvC!fisʁ3=wU-JktmXgi\jN_Yw{m˖0Fܐ obKK*rn?>;=K=WAߧ{aC,Szxќ~G>08.4ozH=kjTR/ЊMGSaz|+pX4X`,uZc,ɵw3chفK0t9zwnFOM[b:bnn4LY|_AրtF(M0=uPόtg\WvرSiQ4}䌔(b]8V4KNQцij峦 @7)idIkX6.g,Winqfӡ[ǵ*![w5YכHs:ߕ-J(=5p2#eX疧 LL성uPN3+;#ˣe.~'nxмMӿIbORހ ^oc ڮROUfUS4Ke3\3 QܖÊ̩]U`J^U.c7Tjs JԨh+ S/3w!cbؾN_) '~CИ;FUo+QWZc)}ɁQޓJ҇,~q{ԣ<3ݠ[5x! Sc I9frՁ+7L.or9s%Q4ڦVZjxs4loV勢=ɶmG]>ȸEaO!4MLә]Cit?KNnGRmnap(1E1*Q C^^qAD3HMu9NŖYoYr'ٕ#WJ OGa!+PfQ gFt"F;]vuyKrRD_Q`Ö/Ddw-U4y%v%+1*ù,7,\xu PuV_<1OaC -avmv#pt0Mw(Ǽo_0T1lw4MixBӬp~2y<܆As#U#c@q tziC{5n0Aa`:rNO*=JJ]lmze9ΡjRv1/Myy`3byU J~ufl38JՉ>9,GaUqA>2b^?h:1qtxE/+,yAʦwm>[MI{F~ÎQ; 5U㴎(v'?ṵ6n{)=sAWux\Wvن7QEKZ=Ee T.;A`Y;ye05n3`xѧw}6l[р7hAݺoF#2 ?%/*hS*ih!1t?Z;m7=3P`[xetzQpth1 t?.ȸOnKz5-![# r] ^\9diQǢ'*V=a]ѧG_@b=BGL6- +in^QD|_nwo˦>YꭞȸE6F)ۧa1B3[TVrg窟`-ŷޙ< }K{";kǂOLn+w8n qF#y3hkoӽwcsϬ{j֏~Lϙ۷gS߾MWݞMo:ш1e47)I/Q>+y6-C7j2?<3$9RvUږm)HPS& 5Amj \dBo"F 'Sq-]GA[cې6]cB<Ǐ돲w$ ةC(!D}~~SOe_?@Gg%#GAQPiF~g$ tU\xJ{29juy6Qa;MӰd/z{nzkS82 kx0Y3',2#ja~H %u^kopNV[ z`42 =lݕj"7HY !7imuKma]tVƠ-7"q|r1Kru-/!M<`y92l -=0mCNl1]fÇޏDGQ06vjƲ) ͅgbnN 썬k4 ucg [6ZM1j iZQcY}n节:'lAPj㘹 H 6L%†.p0[1'0=OҜzG s-mgԿ5{3'4Pm]1#_ LMS=Y/9ӽ(6Kc/G,h;Sq{B dYW8XL/*i2EXqʗdϸ7cvo&=h{f]C@i]*~7PX?faO9o;h*B?e/PXr|M: WҼP:?dZVņmPo4d~nhexA%HtW"_t:J4`!xcg]Gdaw4=%fM/#OfK}]3[ :v=ocfM/[NL,5YpfT" %>lwԹi<.^0jqe1\nT}# [{@1c%7 NwX;0]teJB`͑VjbAJNgEJ-γ%cZnGpA=,3w$JdwF{s+fkxPɪ{DmGO.\bԈ}hO֜N 6VPsG3{&2p}P%n%,hP5Na&֭*z@9* r[k,,d^WU۶f6!#hvΦ*c}ewK҃3uwئ[Ұk4BU4ᤘӇ= M_]:i3h从KUZ@s`@]B WcFK#ѩUEzl6/فp| Tn=T+냪hNO1]+E͹AEOtipj`ǝ~ht/tTR7Y񠢒zG=.9ԏ <|(y/]tzz#NDG'~D|x/jb$D} b +?.k˗R~e95#]Tz-_Yf /X]~1˥K7,}|K/yKO_zOşq/߲?M8ܟ9,Ǐ7e9~taYg9nr|/,wrk[Yof9>TYkr|<,?f9>HYkr|0,r7YxOYwe9ޙxGY}Yr-,[or),,r\x]Yd9^ؓ,ǫr\xEYe9vg9^xI,+ү9&/r(˱+, e9vf9.r\x~,r\xN㯳,(f9nrKYg9j+Y_rsKY/f9|sYYf9)q]3G!r 1rY?e9,G?d9zYnrt,G+rXY3rHN~9Y0zCrY r<+qAYgd9xZcG,Se9Ν[YRzugA7ۑ㮟%eKl4dyK?q]ׂP[%H k˄8'q[d43Y{&$mud\B@9`wxfE/kt;o0Z'Ho548xNnԅPtƴ4&hyL 8xJDzHclYeE46A7a[3;lkwk Vg gЕbFLoa/zo?R;=Ò Ni#a)C}yN@j|joz^O ZMoÚ'{%9kȝd3SH|HL-{sh =QNEщ^O$^IxMt%Bܗ/vMZg߼[VՏo՗WX={'>h^UzkTo~~Y}VՓl!VVW~[9Xʗ+|ʛ+{*WT. +KJ.JJ[JT_Z+?nIijw{V+ci+OZẙcVZYYY*o?_D巗__~EyW[6,?|ZԧQHb*ZԳsS88hT/K?.kuҫK/)]Z KvI+_:cYݷ E۱`UƪUVyrXe`XaX}VOX}(VC`aX=6Xo錥L-M׎qLfVfs8ꎼMtk>#?$vF"I8-S%Ze~~* 6тŊ.u%l0]xkv {"^sC}ഛ4y^[>/?=\+ɭ^V=s'J:/xbĒ8J Mٍ>,{cn[!x5ވ$Ҝ AZcs"{4nDAoAIw^$5ʟ/VZ**Ne+po$kxU= ՄK**Kl̵vW֦u?w˻ίZVX3ǂ\ZUaCLiߘ~u9#S Qkݐ@)Ńj{\x\%˝\2fA3UUPML#e%T,kmy6)ڦ=Bɐ9ҘU^_vfd GmB^)-w>zYHBrkv f\؍Q|%RUL1tL - Zcnj%de$<-5|\ëY (H  <+$;:^̆xIBK6nVEWdl aVZN`yVwz~549^492B SIGM@JMmVE.|hwbhsDN%lyrz XcfB8d'.nX:$:~;'r$:HES:,/>eъ4Gt#AXbsE(R^N$!ˤXGiLNΓ$nO@#"U&Tp7\:96 "B˓#} F&i#^ekꮙGXdY3p85EBDƨ[;%D,c K,J n@cpEͲhW;l-]9I^ymd X8!T%"lG) ]wCyNђpKs!HIaM%0P! oRgdZ1Hfx}azjh+FBR٨?-y34ŒsCűvH\D H ^4V(rEGdS3: ]ȹ+i:y(rtW/ԄF4"LS0&i`mJdrcuZh RR"#KV&`̨LxnV2tPb,KXG9j:HX#Y-NeLhbyLJ汒0%ɑƆ2)ʺ2'I,.+m|II=3U dBiöƇnh-bmپJxpx%SDC-+CXwONtSe(dδi`*3.ZDf2 I$IȡKy#Gu )!~N ɑI%v"Gaepu ɵ=-%DP]jgRf DVd}a9vњJ㒔QJؽTy6@mj$r|y00C |ܞ!N*Rv%ĊU9ݴ?P-[بѩx90g·RMU !|<}%N$pn`OT"2H uG*yD@h9 Ot̄B% ؾ)SחG6Pi9$g%?fJ?+^Fx {8^ e l-#Bc'Tv!ˌhrEHf(faY![ZO gp704{H#HҔݧ$ Q+xemwrjoQȗ vy%,m(jn?D*Lqpda%\)d-{dKgw$j#F ^%;ڴ#Qdn'zV93O<Ru3*KP*pDʼne}[ D1̋ #1 ,}">bZ`W4m;"BOPpyi`-ۭ6o?ьl1=!qİe>m#/.?7=RU-à-gؿm,EG>Τ-,je 03ISf:`jLN(9 2N $/Նqa.4ᙐ&E!% 7v)!ȡ:|3i}MgӦ)) 6|T8!2 C}Z # `ᩓ#i.K&_2.%q„O ,9H#pfx҉! Ip4![VNrzFny^V)Ǘ`bIIi~+M n8K&.iy 5@NDƥ[[z!D7k./Q!^aM l0g]a?e([ݼfrAmS*j+Y"s Y0*D#'u(KL7ާژPūl8ᘀ4;0!a&عedz9]E@R}.ym6DսItV7WlB;_eMFb,E"WjU3#X)D#d gyªfn QҸn"6Y Dxkx mN1vpfv(Mh<٩՗ hn-Γ+IlϮQv9E zh5C=,4 J&l}٧"Q+41O)^l.|E<iAξ7DL'c g4ij\vs!-LʹF+46ӳ]ëoꍷFi*pN eo'3g3/>U͚k(J*ldbuNCqot|!ew{oB.9t7ܥ8Ħv&C>$&tc*^Ytq}UU5&S Խ]ʰ4?>G)^YtQ}UJ@HH7Тn7WKJka8 ( vSWeiwcl/]+V_^7QWfUWT#'Yd!)Py: nC<3&iNU1boLEbVX#:;Qq:L}}20伲5_޶i۾fyMyd9xQjʱW .˨N6+:A[apn^1F!7}#85#chf7ԜRLi-n^|mO<To .D%?w^|I=UWQ36PwjG4r*^ݰTŘ4'INEVFF(6t>p+*^i.q땊8S< WĈ7^{ai+l-&E6vU`d7.EFXla%[0ׅ1s"9Ȫ#Ot%Ts8ןW8rNH+扥Hj2\^[S5ZzeMQPp%bk3Vx$j'۩q*Y{Zt^~0 4x_0xjpAAwT7_޿^?}z?}5=w~/I'cz!G~;U+!OG"DFNA ?~ݷv_}~ݸtO;w.vi?:7t뼭E{,-x2~/?k3>k|c||12GgQK:tyDgwgWn?k\_ݾ}a;mk'l߿}?/ܲocQ o_m{WWWW+m///////uܺ{q׺̺/uרzZw+]uW|=UwϬOg'iuwO=RwPwO'G# uu{\}h}H=>SwG#]2uT%.Qw]QwWޯ^w[wSwC{Ϻ{{{{׺{{{p=ީn;w庻m ^wbQA^Envn.VmVwWwo\|rky}W/{u{~=[wVwZwRw\wϩEnVwӺݸFu7AWwݺ]Zul:XAQ^wo???????7߮ߪ7߬^wQw^wVwZwo___j>sbB|\ݽ~~~~~~~^_w?Vw?Zw?Rw?\w?Tw?Xwk{{շ'XW[soս=UޞW{{_uoս=UwN5xSe~^?9{.=;XE]OD-s-tXE/#w*st>Y/[歏PeY<?=~G? ߣ<=W.klnjeF{H{pWYx³…\Un->ўG3C# È F0"1`D#F06`$X@<F ### #N'ˆGGˆ`#`00a08Pq,x08F$@###a#XFP0a#PqX`Nq?q8/8 FF #;`=<3## ## #;0@qGO00 #%#0bku! F0B<8F#΄Og'ˆai0b8Fzy_aJFaDF 0 #:0 #`D Bt ####~#nL~[GFF FFFF#~#~ #~#~ #~#~#~#n߇?C9w0+6C# PqX`Nq?q8/8 FF #c1C1}уˆhÈт?È??ˆ?È``ĭ00700W0000Ng00'00G0M6aa`waw`ˆoÈo`f&w u5Uq# rG|W/<F|F|F|F| F|F|F|F\#>#> #>#> #>#>#{ˆ{Ȉ;ÈaA0N0b;8FF8F,Èm0b F,Ja\### ## #FFF FF\## iwԒo}ľ>`aĿ+a`kak`īaī`+a+`00e00%K[֞VvyS w>w\< HX!]q ,ցp(uKb7b ,]y%B}(TB2 6bx};^.KFJɦT.Ky[R.jBͮնW+ٍ,,h4#l3V ‘kxRXYГãL6V >^Tg6jp 2)")g T$3kjW2]ZL̚YsT*YyLj:^hVX b#ɽYnW+ UxL )Q|[,fl [af~ T+!xA䒞Ņ7hVhlNxRVT^ZDHoJPk>)+U5)YFj8_Ԙٍ+;R6 _1@]p+U~9k׽47[B.ۃ$e98Qd$00)1 Z!gW]ë5 B: tJa >UNn(&洝J4DV^ ǬUPʣ,H*W-MԾ5Jn A2`ඹ¹a5cJ%[ `J!"l*uR3SJFs*J KPf@^+?4r%ϑS1,xfVXyJMjztC)3%Sؐ\ p¹R'6s5L-q(2tJھ)^UQ "'5\0QOJFRl(%ddKL*`lLUNhFD㲂1Jֲ-zZM8PG4ʁNzh@XqsFf[tsPu֘J2 Cvao*R4NRR`8y{SEЙ]Rkf"\)E*^q"`I; @([d'xU6Z|E,c}b3g nj{x*RR)iD[oz(5ūJPb=-A+SS2R|횙ڴDhnSEWxLPJTcJ"7sDߧhxUm "Ѻhoz WxUm. BgqBUTJiB(FqO& GJ|=/m#Z0>otNM:h?s*JB]{]@x/KEazo& =OkW:^-q}2|yy%Eh @W`iε7NWGKF<'Y -$/pxԬJ+UlkrJn2dh]ūW*i =r9Pjz43\Lx!%((ɦL.RkxU)jD fV^1bRS|JNm SErW"eJ4DsB1-̯*Or*7d %u e0,7$9QKu#RbA5\7i2fkxֻI6j$hx CnnDf6n)ŊG!IJW[}wo߰~?`/<sJG9.pLL tUV'KD,CZIze/xC-=^xDNhNxn,ء,i:Mt;vnm\D:W+UiZDqppHPoVVv$D:מ/~K}ax>|U$F&I(SI*3+lLڍ+;Sj-7T P RRҶXTٮ^UMjE''(S R֘zY9*oǼHTC!U ]מϩmߣht0⡇x#*Ø6,YX+ 4))?Օ8^QZЊا@7FQrΨ^轅B&hO}Pڍ+9Gc9# 7/xRb`jBVMیO3^U팆j.XNm5 ;9x($$E~yوa{QKZsuҽoKи⺜Q6flqnu1%N՞ߜKc9W$S,%[qb)F`xޮUx4O;J7;q_?M39:^mna*Hx0( nFrxS:vr:V(K}g7gc-Y]k&)YUC/KZMsyF*&oA˫3/YYza&aՉ :b5Y$fOL}6{+JZs8Jbg11 7 >Ś}uE.7wH%]Qς4msCf&]ǫUhT]2W8 y! Ka>0hcU]QIBCObXږ6X13i^maF2EtL)aamW}81^ǫ-ha%AW˘1Qx6 UPMNr1U4 ̭:Zvݣunj \5rpŃ7g N?8f V-7oпmU+W/_ܿn?{}vOcl?@onһwS {]ջwEŽzzgN;{r+r r3rr#rr=r-r5rr59ѐ=I1`dvoܽ{ckWw^ٽ{yEsYjݳ{'uehnsk͝ o4qxëW ^1btҵKW/]tK/]tҹKْ-g餥㗎YbХ×v,t`x-7/޴x /^xUW.^xl썵=Ǐ˷.߲|M7.߰|W/_|˗/_|ٲ-ݹsCε;Wu\ѹsqιuٝ=:w71f[W･iKf`}߀Z`_쫁}^ˁ}/%>#ܮ4, 4$8(G? ={` ! {{w`] w``Nn@`?{`vm.C`v"O?{`ow o W_s`og؟c`7}`w 췁7~~دU`o+~/E`7Y`?직~#~A`Z`?5^`컁wN` ط{ ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !/ Z7==={9/2`/`}.>g,` ^^`/`A}?G{<! 상=أ= =uq} " " " " " " " " " " " " " " ! ! !ޣ} ?s}O)>s-́̀MM 9.{{N^#F@{5kh^#F@{5kh^#F@{5kh^#F@{5kh}5z߫~}zߧkkk+++{6g$`t`Ov{ 'x`c= h`Oll_/EL`}#poD7" G#g t@z @=`. @] r" SSS> qqqqqqqyP"vڡhzvڝhwzvڝhwzvڝhwzvڝޅKX[tk/; P-'DެA:ehxu)͡ǐ`"u-juړY^aH$8TWU;cl$@4jV4T3TPBKьĭ3̽O+xQrx:3{geX/521t:^c5X%gٴ?FcU^nYʔh +X:]oWz*\e$Blcș"]1s٧6→t*dz$0 J͗QCI \7l\R&1S{$lk RZ!%6{ĥHBԬxVoago:.5:޹gYYbI<|uŜڎ 6T$m4!-O wτ5ڠXƖSm&[+~#50J EQiPkh ,WUCEl\Pg6:zN~"BH=ۖ(Ok'3UY+彝Kz,Ahi"f(cqbTu*^N!-`Y)vo"a+ʱx]ض)wF ^jwDcDP-9[ ]f5ZZ2%BX [ՅtYxk \hh nu?xWCZ֙~a3/[(J+g>xvge&*IP7n[f{kzy=xAum UC`7.@`+죏5͝0jZB>᳭j=};voDԹgYH3=bOm iΙv={n®|y=r)r.b"?ݱ?{^;1x{{[~5x cG< F獬_{ڿO>,Y]k,mY&)OK0fh]pqԥ|qEd;*jL izFٸf|G7)eq3FOsۇ8SHTe*mt# ƃ$Z;U.w5ԔH-~rf2j|I&ET~EE3x:J:nQj1G>358$o|M閦a*H-7|,h4#ltp!s7 $ѳ;dyH3aHAiu"TXJdRG]&nYj P9pO@%P# sV %  ˓JpV"&#&L.,x7H=QF켭_:y6.r1H^)(,۲)}sYh$-% muLd BPEOdu4P Q5#&;0&,G|{"{ZBFkܿ<7 1J3Mwb\dɷ ȥ.hZGˁ+Ya AYYn4*JhQ.Oz%ȕ@SU$I IpNX/[;/:e+qs$%$%ho %iXڮQY Y7u#/&G^el0P1;=R8Lmo7u Sr&ešOY&~DNAS d{4QIeTUc'TyPHؤKFeKgP@M~2NGi2:xr:aE1Z;M%# #rp}YhI %9-1sx']\#C1"!ǭie-M'&;I2Gvs e#zd2{LAAiRPĄSp[TT G䒘LyJuAAPyNtHh<[=ݢSG5)/;' "' ;o7BpMHq|gcDB$;~"HS*:!`& ?=<M=?&]k|)H2Ʊ!x=:̔p  Z0NOб0*'`RjHG^7%]tl֜q{ƱJa[8][HڞbCkrEq2.ebb {Ddn+YGL@e?(<頻;ږINٳȂ#Ert~-^,n,8W8N:;$!UO/$n9z8*:kR0^gJt E\QM ь\D |]4EDJprI?aۋ[WKIwɷ!RRmW E=%JC/ rM}T0 xQۯ* ;aٓH=}t.C\N(c0G~QyB>d\٠hK"* 4[,/,u5LR .#$X9f3OgkY2ViHbL7 3e$c#I5| TFy.L#ѲN+#RRB I4L%bJ >0ci|Qٌky_}gFdB,lZ)iŲt|!3:l7(;j?*#X ZB Oq@ɑRA"D&&d:>2ŶʺiÕ@h=i 1@nS_?ӧww{?}={Fϑȳy"r,r?o~E={;)O煝s;jsNgElzIcf|12 ^1hn;W_޾mOn>=\e+ ,fY RyP;0t7>C 37![aoao`įaį`/a/`aa`Wač0+00K00 00s0Yi)I qq=(0 F\ #>#WÈwwˆ#### #ooooo#YKWxx%xFF FFFFFF\#^#.ˆK0y00bؗ FFFFFFF ### ##F|F| F#F|F;ƶ*=dr0k l,L/0aE0b/F\###·sa`Sa?-rS`dq(`D#2ˆF0"!`#<F0ZjZK Hkw{~e w%֘wÐf$2z;lqn[ag ^߻{oV,II@A`mNa 4;Jv{ݶYI$)\lItNz(G[f\ëiT*-x45SBI]f T*fU)^^ R$6I^Co^em#G`kx5"G$`XaT`x͙Y`D$j} F{#R,b` ."78^.Ƚ(+ա|B&Hp+egSce#=I91xztŶ Enj,?n ͫOST똨_X'eG=rauC絀Sul|+qZ)^ Tڢ9 ~uFb)+$5 uF{m׉U]tⰞ{Yس6H63ꬉ;gMpyfI1~%V%kѭAkwk8RD|}3J/'ۋ71b-Jpg;0 uk/JWkoWCuRy'aoP7٨rN~w]Oھ[^XR & +oz#Bͬ]ӗ&RPXEH"(aY}H [gټg|(|V 'aX1;!;ފ#w:_s!s~r]5} NN[iFf6T0 nlKu^U ȱ9ý7o䍨QvjX'4 wѽUe & J*336^YRldsyNe_j3QkxݯU~2̚U}vot-Wݱs9;ln2JX^o}L\Qy_l48&N8}cDxB*E`o1 s:we׺zwٹt6{Tc"L7L f ZBX]cPImJ57O@љ^fedUs^SL7OSfm^ëJPP]QNLS7LRWPgłS0&5gZ wFd8w)$37bW٥*{q$Ag:{)SRAXeH}$$I&I "(meWD"KU *(EE UA:ޝ3/.s&y3vܹ(h  {˚SM6cCضѨ)(DO.@5&T3RPPRM=⪱P5ާӤ+uSj\YĠQAטݫS-rRM;<{G#4—ĬYn4O{CpӣntQ.ܢeDCtXTt4fE]S#8R޾ S72ZVj}Nbݫ>%5 .kE5׿bZg=Nؽv=c3\Mg N4'ބ;6:ƳP.Qv_ݦVGfP mNՈ=5{G|;F|IMa۬Q'S&.4Ta-k8vWiɶ#34_9aO5re2֬N;ؾAȄݫ6Mvɵ:Wn ^նFEeĂ8dU\gnkrӲRZ|{ WGH7_v}'rgxaPL[?2ЖZ%J#1MIXj_,h+(\FcR\ǻvo,EU*uu:?:TO\Avo﹯lu)4st'3xj$Ǩݫ>>8Jh8R#V[;3Lm8yjvj{T3ڥvK Z%ZI6Ua/5R\ԤkU]UcQ`voYӿ@\n6,InN\V=uF^&ֲLhy4zS (ku[i5sY. ͯZp]}LӟzZw?T򚤈jObT1.x}ͧU()Nx0=l (%^Jݜ4kŞ$ Vž^i\TRB6MD۪"Yn:qٽҷVP+&O7('KO', ]ݫڑYoQ06]S{j& h^12mYE4QRvjGTclIde%?LFؾvjciuvgZE01W5TQP:\Mo}ɨP(OY;;P7Ku(vLf\tc)蟔ч ;Mؽ!ebt=*6`\8f*yOI^xSckM {<ȿj1mmK*D]ŏٽJ{P-NY\m֧ؾ'7 N?~,}_'KOI[GkIkS?N-L}3IRvOm45;l*gHޒ,(yj򨤑<E<6uJ*>v$GK@+CO!#,"CKlOzĊ~ ~~~<^ó~؇߱gG;k 31[E?SѻE/=!Z;EѯF㑏#G<;r}ّ#N$90sD̉I? ~.==['ZO"~^1q3>/W|8_;|<Wؓc/ Fw o^5 }z3oCn 0 tR*,qhPjl7?[*FѯA+@3;A#;@=A-@5[A%[@9A:RR RRRRRRRR M!]4)H& C4 i0!H!4B CBC]H߁ҷ!} 7!}!} ҿC*@7H_%H_H ?CB'H> S> C8A;H o }_CCAH!ҟCz/@z7wAz'?魐͐қ   k ҫ +  1B#H%^ E^!>A=H~aM ҍ 醐n麐ڐ隐Άt HWt5HWtH ʐ銐,Ht9H.\H HρlHςLHπ;~!= oAz*߄HO$H鉐|H8H鱐ѐi6-H6 u CjCZԂ iR2%H CB4 iR#!>t&ҙKg/t&ҙKg/t&ҙKg/t&%yCSC>rTxPڥ39-`YuRk4TY*)GfWߜ'USQf MSٜzLݫSըQ;jLʿٽ|٬jLE)*O-R57dVgܢ2V%fGvڎ' m׍BS/r[<aّ ׅ \V-"SjLׅK=42b Eآf~Z//[=2WP :E1^+6/]2^&(Ĥ_x=XߋU2S`F:e7f`IovqPlM^>cows_Ow,|Ӈ7 _^>5p=wo^5l[Cn ]Z:8ؓȍdxxxq}L_>?}rt>}hzMSp'RI]0 ujJ__6Z?j[&Kޖ&3^w7i||CM)ϱsӰ ]⿊)~yďZũHƞ=7vKEƾ;.ĊybĶ bžɏC Lx}EY&3n6$0yzr~4Jג['N-R[}S_OS7OgoL?~74WTHa(-_m.~o& A_#:(d}_F%:p:]+v?G8t=ލ?Cށz$[[=On7!x{݃szsX7F֍Շ_d #x)?B^^^<=!=AYi)AlBLV9de<=;=("+~S<D;IT1T1nnbn9nuGw@p{֡5{nnmÖȊ~\= _o<ÿ9~tP)Q)Q)QQmQmg!<~ ?R#ɲ.`אՉ;<7kbkYWFp%WDpc _YG1swvE^n~ 6-:!h!XAD` ":"APAH!x#x" ~"JJ*J5/nnnnnn[Kz39c<+T0t1t1AT0T*<`<`<`<`<`<`<`<`h`h`h`h`h`h`h`h`h`h`h`&2{ F68h ~h\wDp47@p6>F/|]Ap3@h>5R{%^Fh_`"u"5bǯ:d F00C3OsY?Bô5~>!/M55 #}?Aַ|37#~wO* pkX4 o4y>P%3ATn78]3ěWslfSzaTo4'/{kīiV1ZCi2U+Lc*G}i(+^'$VfliQ3jCdV*ISS&E]rY(>`"nW,ac|J:yQdzRe/2Yݣ11cUh[TKn,Q)#*6(fٽ&G)2ܒmr}: ('†w8|WhKf>3_>+]We.CLQbUL=\E'{)Pv4:rjkS63G We|r-F^ȫ ;>f.#kR&^>('q$iwS_Cvx)x--̪ʔ˲֧ݲ f$ hI+:gmfg'$=Fľn]*!sծvZjF!nYt /yRrXvS0S16=̞ x&މ/yVd;M_}% 'Hii˰'CSLj'/k8n99Se|~=G辽,+O:B,ԸBR4)n + )מ)_ɗ;M6x3,.o/S4߳{TקjEM;en_$;p<‡"/ iôKs`F-nHNoe;LK\ovVuKe)ٴ<:DѻFg+#W^-Vy98BmCSrL>;RZop%p ڶ?C4thP&+Ѝ"mԂ+R#k|ot8lgN׻hdvak]|zV(hZ5 Cͦ8Ҳ{nٽe}]xbE0VN7N+ŏ/ޘ+:>̆DQEU˵jp6^+vxkwL1v$4PN. Ĺ%lx=W|5l& W ULjˎP4@+ޚ5.vJ2L[r`dY%~#\7{7$ʉ#{&NЉ%"w/ş?-~Eicf|^|6q&v|x4˱'cn_>'p# (j84fϡ߆ ahAP3T5Yhjgo{'$`R/%`R/%`R/%Ns0*s0*s0*s0*s0*s0*s0*s0*s0*s0*s0*s0*qBzCzBzCB{C{BC_tWHwtgHwtGHwt{Ht[HtkHtKHtsH7t.2"<, 4B 3u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S73u0S7 iHS&!M@4) )))i~0Ð駐~ǐ~釐~ }w 'mH߂MH߀uH_ + җ!} = { { { { { { { { { { { { { {ljÇ'yH!}g!@GH)H H!} 7> !}҇!}_A @KH!{ һ ҟASHvHoVHofHM ^u^ 5^ U^ ^>OXz2t&ҙKg/t&ҙKg/t&ҙKg/v(Pu3s]8|f>3g3j, 䭎mN7R3l) /"^OmU3EM5ױ?7h, lBKiv%qm'{FW<"*yn;fB!kM3_h~-+fTeD29Ўd]e𵑢m5ߒ2\K~msC^h8EGFf`8T$Y^<.vouJ1gNtZW7ibc 1QC+0mG7 2|~gdcwY芉vۑ'`%/y=O"7]^9|÷3SBR5ѻ}"'&oJ.}Dؙ/|>DZ}BZY% [mulhSRJRT钪b9vl6+|_~ԨgKFE/z ֈeѶljZ,J *(-6uRwt¶~]QVfM.6B)He ajEIc[2Ejeje]1EzMӮLUqܓ Mt2(hhfKVQD6=]$Smct/%dUخ\͌9[;mIq8o䵜;v F#+\$TG]Q(ojLɨt gY֑lLֱkr2|);uF,Jted2Z%q:y=.aU&GmuG9BJf妣g ׺0V[iG*9;lyo}82ff(VhkZŢe:SjkZU^j?z'߮RJFA5Zm)+và ^Ֆ_f eUi[u)5:mJvAߣk+[ J,RtF"5VPdUæu'WYaEC+BI o mmӬ]r"k mrV(r=ge ŖC\ca^)5T56węy4z\2478'MU[a+y^Q slU)񃡗uK b^b1mF.Imh_[f٤+H~2)Pz٨ю;D54Qh4] ؂TZ[":يJ˭u[dmlFwy\[IYslgiNu]3sBKnVCvKH#_1 ˩v C^SD:cV]MF~@>5^N!#u/P:-+6B8k XϹ#ݽht\Mm<]{VzSwSW\ Um*TvhR kl/rB^8Z͂Ԓu5i񂣈͢vKt LST3ن$e&p>GwL'T2U0kyjd UؽbyCrz[&1ZfB3KȵbwNm_n9C`Vf개Ț |ضamj{VٻR \d/_V!'gY.wvQPk|VaYD[)'ެ7ʌķȊvN26+4yVtm'Ԑy|v!]wGJTE+|Mlm_]{Vx1bG)&۬f[Du c]3MI'%YmZK亀ĭqVu4 ^LKoZn{SNYv[r9۵VkNn *9T9V;^:fy0{JFjR5hWʼz[z+ϕ9Mu/L#jM>[BJRYrZS\V4EnZn/ѿC4mɮY^H:sTcw1;4t^atZNiB\-`ءlkzoIZMus|DdTU)D.6JTQH1OߜbQWayU v q_q JUު؛qNAj%jnY.bϻYZF/e)\RnmW;,:uYZ=9A]uvk^0Z\J6bFlm 2EMXnc[a*op7-˱kURbIt esBЌ?TDYղu<,uMnyjUmjܖ(kNҩYMWL,k*`pQu63ͪY 1uuM:eXŬU۽QT-KP.q68(X8G~{dUYVqGr9:xXI wē'GEST vvTz=k}g,b,8F9Wvt>Kg(U,(SnqWՔ#eUQ-ujCjŽgR +tt)2YN=|N7FN(n<95{#M)Eq{Y:pjސèP;1n_h`mUK9&ߨZ9Q4lޑniՂk 3YײBur-cDfhpx؅O|O\W#߱aab'c&?96}ҍj/Gn0Lȳ#WEΎt"JdȦŸ_?!(|\X ëÉ]tbgo{hccNUR^ 6tkIrhfB[O 9ӆCQ=r0آc̓99 BrpA69 41`+9Vr r,X. DzAej̑r G"rĂdrA, rD G(1 p9>i6-9> r|(a A;1ǻAw r#v ǛA79^ r=j ߂/9^ rx! A$ ǟ`9 r)LAO9 r<CAǃ9~m7AGr<x8(1'ȱac A9 rwpck9f9rX-h̰jc W+9VJm!K!)w*` /r/ ǽA{w9 rYA;AmA?uk A9n r!q} ǵAkW9 r\"qyKRIœı7"u,}|+?,5䥆P}+?dS(eN\^ #LoځvOzLnH==GD kώdvQƕu+ƾb]5ٮ,EySZ,KzV:UʼF6?Xyu0O޽CFƗ'Hϥ*NؽSΆ7U^ 7Z3uG @YicEGL6딳tǔFg P_Rj&ϣK V&/h>TWzvLf[LVM'dv-۹uT\Q,[pK71)!p_ ;RzEGRV[lɖb^ 'l 6-/ƤxSWrJnP6*dNSgZ2=^W JreO\l"^0_#%.l$ڙu #יOؽΡt*Tj u|u:=5vo;W8JqU]-6s3#ŌYIZ* PJ\rL@+SC'kK"w#ǥ?" -ualNmU`,3/*dJ q4%,{>Ϙ8bۢ:.Q? ?KVmp;u-s|@תE;_~;ّ+/`mNNAD鋢DbF8F(Ψ[fqVA,6|[b&YbFXx٣voR}5U^_)fe4өfQ#,C Pg֬Y\mu *gbPޚ5KFiRMUF/ޚ,PUQrQ>ٽ5K5YtLͶ'[y8j>jZ/Trb?PYjb@1zv$>w|)C*zYdVLKQ#DЭgGmt*n) [YYhgHx =S kuV[袤Oa |[Iʴ:26RNynU_rrB^-M 7RtFD*!7bRcՒ fSvf>1XW-NoOؽ1 c0)XrT}5& {c2lAU8T*]7o8aG= -od6:;}#iٽQq4\ű}ZG]jz{oG#똪{/ǗیOfЭΗk*Mhr#y׎$sE]#jT2VI^ZiM8-YivS3vjKat}bM?[ﾴdn#V^`}ҲsIMe5lȦtA֋9Rv.Z>mm&WyUc|Vn36mT̎SpRWM^{!kjUVzEbkMvoB<,* W+QH=˶JJՍ+>]"Z|voW˭t]T벧B;) r;5 կژ\g,8_ڿQmC6f&&+URkSׅ9dGO1{l=J%)-F))ǰ8PT^FH(\YK M0"ӃTٽ}_ЋŊwyVQ%у*tԕBA*D<d1?Ri8,m K!4F''U?~Î񇔕H r2v| c1%Å[tDݲ;iXruK_Vg:j.6W 2TuJ񌖮i /x 3F/{k눿R8tFKS2N(BhM|.+7EsVٔ)pHF`׳{-}: k뺙3IO,IRfG8 y EUSqź^-PVs}3`mq5o樦UfIJoKh8YEMM[terflUh)Ni]}Xa{EkR5iNqhV/y@{ۥ`ZZdcYvS]re. ۥXP!%.^`n󎹱7 N?~,}_'KOI[GkIkS?N-L}3IRvOm45;l*gHޒ,(yj򨤑<E<6uJ*>v$GK@+CO!#,"CKlOzĊ~ ~~~<^ó~؇߱gG;k 31[E?SѻE/=!Z;EѯF㑏#G<;r}ّ#N$90sD̉I? ~.==['ZO"~^1q3>/W|8_;|<Wؓc/ Fw o^5 }z3oCn 0 tR*,qhPj7,k-BCZT4 i,HHtG@z8Az(@z0Az @?A/@7{A'{@)#nƐnH7tHׇt=HׅtH׆t-Hׄt6k@:A*@UHWt%HWtHgA!}ҧ }' qHw@(H!H郐>/!Cz?^HnHNHO!! [a3;A5HwtHwt'HwtHt;HtHt+Ht H7t3HB*C*A*B*@CAB@JCJz 7CHoFHozHZHjHJHrH/ǐ^ !@z1Az!@Hχ ]BHυ.Hφ,Hτ H!= BMHOdHO ·xH 1=t&ҙKg/t&ҙKg/t&ҙKg/t&%{35y\x!7:ޑeCO3EB&t*(VKYr+[?^!K9vS'{>([pWkB)t)4ZpӇKFH yn3 &B1hJ2d7f#ʌ]+ɚ18#VYuP*ʩ1Zz)PqL|=ikrJbArU^5pPFڞS-㫖N]oj4%G߀hZTK@IP^WtiJ"ch8mAH{vovlꅊ ! %9aj4k2(v2gkB!ժwjjJ#rߋRm۾\/Vb-GRPY{.\_ ;m-{!ꔫFh^|Ӌ4Ow ")"0~#=x jx;;6Bd6bѷOF^==Z6at{g#GDΑM#+? ~(|CxQ#̇W &J/?/>?kb. mB~Bk᷆sGç Ç o{<ݤ+ -}_sI ǍA9 r\&qu ǕA+9. r8qf wr8- ǩ~=f Ar8!1?q| ׃9 r8* r G3r8AzrԂV9 G9a9JAbCrZ#P G6ȑ r(A#G9r84 %9 A9r/ȱoc A{9rwPc݂_ r%ȱsc ǎA׏? r\8qQ A9r|?q^{AEAAs r,r8;qVjK8B/ ;9 rl:ȱUc A̓99 BrpAR3 6觘 䠂9F96rl0ȱAc zAu9rK0\h ,33*{ۧM~.xӗO>9}tJӇJ4Nzt*N~-uOI\>I&>M3ğK2K%H|#IT=%&+&9wo_Y9_?~"p+O =\#wofW /B z:hmkBN6VǖÈ'D_X ;ەbmb%"I__?~89NQCM)ϱ[kFWƣCg"zG菢ߋ~'zb5AݣFE4ȻW#E<3rc"'GX|Ȧώ?&^k{woƿO#bo{2H-bžV츘+26J '?&&_"H!6y"d<-Ndэ0;܆ȍ,2F|Fz?zSnN]0 ujzJO7sjZ?jj(VG%oK^$0yzr~4JI,b;F$$"A0`a?CS?Ac?BC?@}C_; 6o!&o :!w_EH!"C^CG0EF DGp?Ep+Dp 7G2DpwGp7nn.2L!D0`+.W + J r2Rn 1!8 \u\\ 5j*~\ QSq?@<~s<3< x:!-OAdt7!x#7 x=!x- x5?D/F E\">HTJ,Bp!HjIM,@N ՉD7@7@76^^^"M" @RHjIM $5&@RHjIM܁ކނ7 8~G{~u(8PpԡCQG :p4 G/ Nq4pGx͍#rvU/w#DK]oN!7{stnl6>Fn:)ʑԠřc٣3Wq7oGA 3xoĭ&@D= H4#{/v!h(J DA!$ BH(<"QxDLbك(<"QxD (=WF HH4 !рD HH4 !рD H <&Q#M! 4$ҐhHC! 4$ҐhHCD1=bz$Iӓ('QLOD1=BJ$H(z'QoFfD$ ,f1H4A^"zT$I!Q|JD)Sŧ$OI(>%Q|JD)Sŧ$OI(>%Q|JD)Sŧ$OI 랧($PwhhGv$ڑhhGs$ϑhEd8\ `)N}N6bI1*ILB)A$`*i!EC~sڌQμ~{s~:kpL\$"! 9HE>.Ap|\`jis]Hݏdp@d }ޙݍm^k{2 G7RCpRn bwrӇf'GGEw@bk7Mp峱Xa#lDIͰIF0p|鉷ck-`?JhZ@ /h5 cN,~Ķ"{NsZב@&1 WAKlDH9^ͰfXF qr6K!Ȉ%&/fv2|}G5lA6iJPbJy.&G"ӃØmm5۴XX'd=mM#XejIn Ԉ9#"uZx6ݚm: ̑IR 8K] _r!LCdm賭~VsǶfkՇb^{FiO)ٛ <+KB> 3u_~үqEHV[\{z8j4OEXe=(-g\{ZF1J2f#yyzrΑ2GBYot #M2B+F4)\9; v!^\ܜK & % u]ѩR"8c"C,8UJrcs) K˹Yfx{sj[I495Hus83CQ%2yϮ balFﶛWP*w%uZ8*qZl5+A-ueēM8 F^lG`R:AY|31?ggRD gIe. ٢|5G^vatͅjŸmMM|d59bz7-2yTLW$5XcQVhYeycwB^p>UAW\ޏ#v6/ߗ/kɝomO7nՈ=cA#(zzjX6FaBŠ{x7#GR UW#PU?Vي,2% esI7x9j:D6 Y5uc}9BC0 ag#\^j:$1h|Hq9} .JtskJ•HS<-di;GɛRמS+Uq[Q$E]R#LTe5]}Tѯ*U|yCG^o$ƱK*xc /e3񔷋M̋/8˺ݿ!KxC*z Y£:J)T$%W=|B&xӝYQZ&Ǯc8q1:zby3Lދj䥙,b8 QI9^' #;v+WH"D2yL) l,y$m$xk^DO|X1"F0<佲F%Y{04>Itlr$ZL/wQ<̌l9>k<A^N5:t9+ҫ"f؈>oNԲNԘDtHH,g2Kp|IT e+ o̲uiҡ3.އY)?Ԣ1˼C3jxQL߁7S0Yc L d9/R_C,z+ۂ)=k1h3qMeP;5Vx#4eί?&2ZD8K3d\kCG,2y/C$J"յfh t ^Q`0<yV{;d6h$ba.vt3z3 M 7LҲB!|BLPײB^߭XŎ0&s7R|`qj"e{:6>كo{bcH1omNF8C.uik[1*ߴ#r!3LVQlFU bA֢Eg!˴5Zy4q@dL:;daiŰuAG4θLrr2c]7O(#|qXmSfޝ1e!l8X[ۜЗ{LY@ /GyR-M6&MPyhmxi~Szv_}*V YK;kFr!^Ȍ#%mczf{|s-nE|>@}&d IAgɈN&O.q1F״CND3{5 "ks_u*LH8i$|6; 1 fN>k g Uiw+؍8Sw_v|-&~ywS0:$)hccf MY-3c6pbAWx9, uTlB@"_w#91pj>Y,&""O{L{mq5ۢu Cތ8-lDӋțgUm+NRQ %Re[9 xc:vm-eRY9_`K_S[ž !82YeK]UاHsIgK'rGA9؉Lq'9CK,/wY< LT4ְ$b&xKkX0賾bXz3;"-ʞ/?B:Auo[ZYA9KQ3)̈$Kx9 WCB\38mn_PeJC~G/-K@0^cS#!b7\WWpX kմ4r s_[ʟe] 䡥t=Zx#i*&)q%4y]95B &X%Z+,O9^LWծoۻwwޝ;znڻws kzWS{W;މqczPս{oݻwv޽{k7t^MnW^=={v.E'vwuBVν{:wwٹs{έ[:7wnйse'sEPٝ;L9uZiݾ}gڷoiܾ}CB{w9cp[7@x`q9hm߷}=woߵ}۷o߶}-7o߸}5Wn'}>}FO>nmr!: >qpdCgN0dp`wp4hwwww÷·777W *||>>>f`>ޅ!     ]]ںoޭ{޺kέ;nߺm֭[n޺q놭kJ-u늭C[oulu1[Vkx=ûw 1}x-Û7o^3r ݡ:bxhxCf O3vݹgvܹcvnݹewnعfʝdQw9s;0;HE6cjOi+f>>ӏ[Hf.\ r\ϟɼ/䇁% _9 [ ȟC@$?y3@}@(7y#?C@n  @wy=yk|;6 [|3oj J |=@f@@&@@F@@ tt44ԁԀTT䀼ˁ| 2 / _! /@^@^+|92 _ y@HЯyL _ ߝ@|.@IIIIy*# OY@ I@>|O S<S@> ' @>|,?@=w@~ ȏ$|@> |@> |@> c<G(  #<  C @@B@dM 7l@~ &yo@? ? ^ ou _@~ȏy+@2_______. _. ___CU @-w7@~ ȿK ?. ?Oc ?@ @  ?o9 3@~ہM ';k?=O?=O?=O?=O?=O?=O? _=Wx*UīW!B ^@ x*UīW!B ^@ x*UīO!B >@|  ᯷֧[5{oiGm}}N{}r omݛ_6?Co݌7Wmgm>qƷ7-'oT{?WoTկpGXU}U]UZUjUJUUUoUoꗪ_WտYUyUYUӪ'UWT_VW_XU|UU3UOUU՟?QU\U?XU?PU_UhUXUpUުzCU}gU}GU^WUWk۫5UmUU-UUMUzUUfU5IUjTUê:AUWUݪTUZUլFUիVUժTUJUUBU*WUWTWW˪Uz^\U_YU/zƹzaz~U}YU}iU=[UϩgWճUEUUUUzzU=qUUUΪUU߭_SUQU?_U~٪z{UͪU׫''ǫmUZ yVTgWսVUUdU%*^UVUZUGUzrU=>XUQU^UOOOSnU}rU}RU}bU}BU=>>WU[USUT՝znWխ: WUjvjvG5QY=:/Geգzt_VY=:/GeuЭ~V] 5N?aN--ɄJҌdҙv^H|5f_?g€rCXs?&$#i,Re__(".&GzXՌdqfxMA%Mo16)HQ xA񇏫.EtH[piF]3gxٶ( Ka''(S#Q ˶mI80<eHFEu5mkBZVnlGF0Ѷ_^GWmvȣHcWԶrxoշG0Mʺ%|n5qsPrD4jxGȋY'&y+^yB>"NeQ#@P2U lu[?! Tcc/wL}2aE*)<$G#<éE>ކmlgk7Oϕ5}]>v쫇'XO>qN:u2^dF|g~FY ،5YuLPc3g)I& 3(8 G t `rk4KHR$  2_`9O˧HdB:繊e/y# U/[j֧xcu<ƌ|,^֬Ϗ0s3N7.z>YNBLzJRUkb}^2M7[[O^عo~{]M&*zd"peLCb}~ja0|O /ΈzLu1BETj&W7wV" +?jxy:Np눭'e'ͼN)р"Bz& cғ6(oJOn7> yzr]:XW=Y=q=H#1 ֐H-˺iξ:K`e_x#e}j};'Qq#Gg$Ȣgݪ#DwԂ+BS=ǎ8Swg`ѳw#M6͇x=DUDŗ|<5rqdF4\/?~j_Rl M Fn #5s` T0eV91YBRgpS}N$XSDs沵Y^qtL$p{6~"$j2KɢD$S͕̦4Ta9=892 ((mXc5X&x1k59?۸&W˱;{[IRlɁTMıQ>SgԷOad8G͡^g,pxAq%tÑı) VwY)[5N8p}c\Q~49?hyY /vZ7FOWdp i<fE12)=vbѳ__u^ϫuVV4Հ$$NkVwc$%7=Fۖ(qAi_]sI! ț9ku|òBRJۭVw0vD2 lyϮ#fpz~$orgˋj319Q삎 m5ۢ[0CRu3'"fxٶmŬ˳y¹P9"E]omۖ99N܏b#Y e۪eCD15-F^MۚЀ/x&21jc 彃o4򆣯+/eCPP^Q:1CF?ny8&`qjݜ\PN6Fc{I4FCL4$\ Xݥas76j2y/+2˦N/~^QӔ$7[#OD8 c9U\#' -2yOvqQrze/;F/#kk]nOmҋl/wV}6#̳]G?pb b;e9d(oշ<|RnQw{QL%UM< o.]Pe:b /Oɼ6%C2,rv$ƫZyJs&.J>̹ѯ?d:^50Iezxc /e3񔷋M̋/8˺ݿ59^[-hлgRWWu5vdLaS^" *;+H;}/xyWjz5`8ջok*)9^xVS1d3H27r5Xal=alJFA4g1f2%3g_Y*[cv, 8F:]p- C+}ZeP@X@KufxAED5,Q$a cA}AK)LUN}vdne.GPK YbSE Kk:FY(ZѡƮӹ%s-tW&)状ϥWv'#. oɫjB'|d vӍD#Y7佬1S&dO_'Jٝ^VoiE:&+G_Wn`r}ݠ@9͡b7#L#/N 3FDmC1kׂٙx9^fͩ&&)H;Hۚi91Ҭ0D t'is+=3# 4^&Ϫ'롆-8PlŽܔ|\ N^vɀOKs0?h93M/[QH|B zXx!#xBiv8=Q<xΞTLD!Ƒ4ke-UU}8}#c{b=`>z\f7W#AzDX9^?5F9RqfeUԔk/r7=MlLf eH^~ùΘH U7= E'f liYZH(I} ;(,xQ~WԘI+XSdhj CiNX} $+K!\˰ʻ'MjvUClU) O emx@,w8C zxٰa\NIU*8#)w ^&zEh)- Hr )2yTMlт]+P|TV2yԓp5FQMQ%zHOH&eAN=W|A?Y]Iڦl#w>˖wrǾ`(+fuIkxt{L(ϣFw{f #qjyQsv}tETW2y'֧_ut( i4 L3614EUyC9Iv =Kt@?U}>b>޻ݻS{tfwK>{L?:_| t9sj1iG7l+헶sЭ~m{_oxP?Ov4'?>f8a6y7ߺim^̓ƽ񩍟ڸn#ظdJb3{J{k㛋h"hxw-kaY;5cY[pxYõ޾e o[e oYe o4P e cYA[֠.kP5e aY[pŲ˗5fYë5\e ,kxղC.^e -kpY^_e /]p޲,kxs5e g-k8sYË5pY 5<YN_pڲP4W{'wm7j ^/(d98u}i@b?f/Yvb$#N io^>hX5@Bz&xyP;AQ L!/9*3f(n!8R]gW?AѴJQxӛ;8WSMfI֭5XC8T5yy0*/R$Q#U2yN}KEЮ6! \վ7ٔ3VFX?ZѰH<!u6^xъ:GP %Y">Jm_-gu_yQ{/Cۿo);}kgԹiG\{w>{T5߼n3"_鑍.tR/ţ5pUVx 蠸a,:Kb,r5>M!ۿ>)0Df }c(䘕#6bq5& D"*< xHqE_N!Yi7xo4~̣0|J%EPDB <|Ll/d{LbE+~x7idtIS.l{5 BE>lWqzxotM}봹4XI1GL?(bD1E7*!ӒJY<:ojueSlϠHHDng$Kd1,mӿP/8rF䊃'NAŧh q$1ITkLAW0a&l2x3\Dcnu(1*nSPv=. ,=t1M86Ƴe}w:Fb tƔ:?B)q Cq1NA^2ME'=UB_^kQbDDO $HrG .R,n(^6#M2e3Cuw0G!Ci8">6$ Ms2|65̿Jr6$ tPpg)IHOƩksE5_ׇϟ^Rfb0>o먂!G83Cϝ3 LŪ2M@qC.!(1-F 7#.ySXv0Ƌ3O28R۩Ċ;|cu43]u8sr!'4kc}!Q.09Eb31$ܓ ֗4G17\ ݑ{ʕ)"sNΐRdiF5<~viŒ̍Ga[0n8|f=B;}!yGP[(92sQt&Y9xF8bXWϞq,&*ig't%}˟$~bzD'iBM?]#1阞Gܿfnlc"9f!GIqbHȈcguO?.R_22"O}G+ߐ|mɟ*Cdt['x GN7]<- O6aG˲recDSdwn|`K_Dz pܦfbtR%%3 h!m1 ]YDo濎DȮ_qWt gJLzYNH&ʂ{[9o|~rnL:ID=_-],Q p/B۶ޑ{N{7LԒDMc_hm#v/wjx8M0,(e?Fsϳjo) x=I;Or\7P,5+e#O3 SDLSD7u,)VJ Qjhh^6br|oc鎒2Kak)mv;43^0xO:o vf(R~Z#L?NDEt)*:Pбvʹs)xy~q7X2]=a$7c|L&aPoRi6!O;na&["znA&i8c%H6pa-LKnę;5݉U8qEcǐ&ݼ<̉GFxyR /lS.ڙw@1R\G^@)j<[ƺ2zUˆ%x?o>:=@az\ﯺ(S75oz&?P ECQpbNTX2#&uIx\].tvDia hhjIUIxisV 48XB IZ0#a6˼ k ;gaaЧ˝uPm O4a73ߴLR#Seb_\Ufuw:IFhX^Z7y=TYsI 4>{FA0Y~u] WnpȢa;U~tMv0֠S%X ukij(/!Bvi@zr7Ҁs:U|sOFX(I-V#h@Fj~=Rꑤ!LTQW rڬuE]Y1z2cB;>"En~v)]μ;N 06 1@M4Vdx9j|t-jBQ"DURu!8#K!؆ҊTbF@ x.Ceq f4X#w6CGVb)-SUɜ•pczQPA!}&"*`B;;(X"bʗ3{;ù[k=Of&Yk]TFRԝ+6@4&fx>v-%C&1L\"\MVWR~\Z"Ĭ.^Xy0q_0m^0L,JhO[)[5w!1u7Oк{k,6͒Tq1$v̱ŷgYwתfx>=ä!nʚ9`Ԝx-׎3<Î(0& 1HV0mlѽ簩H GhTU10Fb,'ym/yM "A z$K3sFF%f/5v濴<9fݡk"`= 1G*YEN+|xd\EŶ(buڅ*!{r|Q,Wb -qe0" $Yy5i;?cQÖdu(L5χS 'SL=L8ʩ4{$(U|8p$ˌ}JG DeDsZF>ߣOz]{Uܞ;G뵻?~euӺԅ;D- :Γ:vc{l[ǭZW^:"[Z'{2}WhS`AUa{m/7nܦ+O\9_x׻lޜGB#^SGW:Uu+KW/#.#^VGxI:::"#:"#uDPGpVaFZJ!R!B\qV::)uē'O#PGQG^G<88x\:1u)uuģG'#N#N##QGWGO,F#+2WֻYhL΋)JHFƑ&JRE#UgR|4_Fq( .:-glEcʊGtEt4\hLψh<2_NCQs<ʷ,{Fln"lk3</E#sC%4ι[]WY,b4*fX,a5)whĶ畫)Wi$_p R*d@VYi 9U37ɥ#tHā< %śPr9g竜'dHDф[*A 4VI 3<_;7TS8aqubGpeY PklŝQmVnzK^^nᆶ!I*Z]x2TV|J-BUS{NS'Oe+ \sYc4O#X{yrn$mk+qPOQdL3omh7ZwhںuSkZWh]޺uisZQiZgYwnܱq7mܸq5Wo\qen\q9цnq)ol n.wߺ~M7_~W_~~zg~G3ﹾzvkݼvڍkׯ]vk]vk篝9kYkgvkvk{_k޹z꭫7޴z׬^z嫗^zFΪzz*zꞫW;w nGߥ7zwڻwSkzW0dp]A  >>`V3SaFC=]>܀nnnn....ί~tZV=ٳq=lr? r r/ r 6 wr7 @@L HH>= }uE*;n ߁/@?y'@[ 䯁_K o@ۀS o'@C @~] ䷁& ׁ W _F  y=3@^䧁I @~ȏQ ?䇁WA ?|Wy% 仁|@ȷy9o-@7F 끼 Z _j _+Wr /e@ȗb /q++++++++++++++++++++k4_#p!c  G@@z@@:@@44ԁԀTT񩔁-))yOL 䓁|O @@>~*aaaaaa!!!!!!!!!!!!w!w!w!w!w!w!w!w!w!w!w!w!w!w!w!w!w!w!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g!g! 䯋 |/@>|9@>gyy@>ȳ| 1 A A A A A A A A A A A A oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oA oAy*@>S<G( O@ @#<ȇ0  @@C|0H wIIII@ 7|Gy8ہ< C?y0 @}ww_y|V?j］.K8:*26{l eǫgxU_S`. LtAi~%u;n_NV۝4aR_[dFLF"quEEsk|4zhuT -ʤE M3<n)Ƕ:h$J Mԍ3Ћlm#Js:sJq:DLҧ%EXwz7ieQ,( ;yXe W,UԲg(p|k:D9Eo6?T}2JaCph骯-aN /Ѩ@Fc#aX?YhLϊ%<x>./F:dp#1vf23<O+Ec( $hCѨ<YhL]Dk<߉Mј((0*gx>R4iA"Ld REcFԍGcTÖEnlxO\4g_6~y]Һ=5<]J%(% A;]1;]cv&{=}򢑈 iEx!/1C&^;;qNgkiBrB&H"-e-VN\s<~hIb,E9W.멋M)w]pK1; Dwɡ^qi ty`uxuiw]<ㆱa=2PbOQ7$:' |)NhC|CVesi&<x})ѽiuWnL~W&a.J(X(,O;Aii f(ط5όdeQ\3M|ݧ+e=Pp5:&mI՗k3<_.850#%Ɨ';0|8nRp!ee.uVwB{$kơ,G2X)h uhyRtXlCTwBrubbLBC^xj^x~׶8.P1tT~$L&fpR}3bah=H]D[t6!9C'*iaR 6ڽx)T8/FRH3χ}!G5 2cm2iO{uk/X=y/z_꾬sf[iHKz^CC1OpQE#I5T%nyfMCUfx>gNH5#%Pb ̒)."˝ w2b4cCO78|4mQ 8/C4n=_6m3<X)/jc%EvBG㖋<+BUVLHuHeOdHi?NQTqB%I@3󝳅熒tn):G)EhZ04 p鿩gx>6KAG(҂i2 |=4%X>eu!٤N Ϸ(E=KACCY5zUl^~ĠKNcal'.YнIY[Esn?>?GS޷{}zy=wj=wޞ=ϻ~{u_=wit^]/:|w^yVgԑ:}|moo^m[7>ٺrZ=sգWWw[m~?e >xEN3 vt??o?Zi[J [֚oyskW5ԼfTOhtTѼh~h^S4?;̏͏͏͏ͫUEʢޢyE|O|w|W|g|G|{|[Ѽh>h_4W4[4S4]4U4+s33ӋEiE3)qьfX4E3(MhE)vMhE(zԊZ4)MhES(|YEE̢ĢyFhV4O-+-)͓棋棊IEEĢyBhW4^4V4Z4-ͣQE!EEAEȢhE)tѤ&Y4MhE),g)3Pd(EyhѼceP.nVÎba4VȐR 8-ba hMB &^>/2t8go XMacʻ4F,&X-,j`8=YYí6l~ݺfۻuދH-]_?%ȁMm%s:*؞C>mjP?x熵֯[b#~_ʿyڟjv퇷si}v{[~ o`k㼵`XhbKj?Lq)cQw8= {[qc-'9{ImУUY.78Q?8e!a)SwFj[;>J)Ƕa\+DU1{DDbM7O@uhIDI%"߿332H@Lhݺv/bO2'ENId9Z&  Fٖl^T ~rneb}q=~0x$bm %>iY"dՅ9L(҃^69"Qgp< i8§M@,TN8I~xL]gTd9QuxQ6x1!'FW6Y11O%aCi[G8-.j : F #h&V`h<6L >w&HH2\9qwr2&C07UiZ$1Ǩ&WdCH?(vvHFbՐ zz$b C&gmp4pҕ%tQ1a5N5gE6tHMp%iH=eCғ[mԓm ,󓓧0!j"s' a1呱$ƉFV(1n`ɑ:zȤIɔ~Cд0xaiF1$%)-4uihC{dh*@)+'M@|OG"c~Ύ79,„Imha,&˾79%14D", h%b,?Idb Iqc ɵ8/9{#$AaITaA4S[(~cƤҤ3Fc(hdx;92Iq݀4 ޣ`Adn ҏ;$6zD291)+)#̀W5ߏ # }H!3Aƪ5x%я[a=4(?H]k&FW6)Fwrq( 5&ir@Dc#}]4PEk"S&4ӊ! n%sVIе)- es$iDZUЎ#=pKf2q ~rm9FWPCY!?4 xɘ5B:!!J?zEkSoE#]yq\3kl RZ1f?Nr]\ u8z3]59GD`" ϱzvc4B$o4BI3aq)-`\LΘmc3.mc)9 Eɕ;y"t! i8CSgǑϝL``i%ͭ_8khږ@_Km83X٠2)1vifD ƠfHFjq|'J?hh*6/@ⲡ- qp|lz߇i+JPlhR#:6!L@Ch-?J:iqT%"8#B Θ| ap'HcTбb?`rFH&m`r$G2˛ 11i6 #me22p㐤#it< {iu7 D4QVCхInz+{HAƈI_ʛ\_B$Ņq={MOҼ8bjn;]PB>uh2t_qhXbp*gٝ&G: M{Dz3\幱:*[~44Mty|㖃Bd&ĨM@s$dwwnwMrK촕Em3P8qbkRX\azKVЪի#J|jG oĮ%;ܚ%W-S E1i"n}!=r+iiv9[ner4BLv5$|~ 2#HOi+J :/ 10 5⊔(587רaiWRpm\6qqQRX8UHny1B+ɧOl~==r˱IF)D#^H n| c92Okt֑$JiB{Lڊb1:66mk& )=QBhՊPOnrC-"Psrd( ?T,BЁN#N@4Bq5[b[PF ƶ1!]&bb'GňMDO@+E}XףUGJ?n*2`# I(YHr.( ϘoIHo|Ɖ1"hc=||dSзRp[DR У'' R:14MS6K#il&"nA/Im . #kzy98QKF1M2CbVE?E9%U1dLbC~Xz ?a1HnO=륝>dExk ij4aH+@ ~>'Z }G｟zS{'~vݯt?Խ{ZA݃pם:輥sAgyRa]l}]헶6>[kuC7~e뜖ztlj9kp ^=8o NЃWïχ5ܼsV+XʛW^YG\SG|x:uG##>XG|xJx:^uĮu.5%QGkuj1#:#uD:]GfRG4Rh! Uu:uu{w#YGx{::u[7o#XG.v/u~fx}W]VGxm:W#^YG\ZGxyqI:uKO ;a4Me;o S5eSb 1oM&WƠSc# Q]ig<<2v)Vd4Gԥt5/Vx>Pɘv Ɠ}42o-V_=hs|iiCrnH5qCk+N|D)ˇb*m `aAWJU!a1 F2"*YT5u1gC*]$cG{bO³F tw}Qkt=Kt?ra?~WwjWni7t_6m\񚍗l{=cl߯Wۧnl>Ƀ 9@l _?o_ ~'z s§'qPx?^p+kЍuЇ@o^ ]= ӡc ::][_ֿѼ淚_j~滛ol^ڼy?w_~ ֟>Z\^￾ݵݱo}ikZ{.]`p\*ֿΤ [{4zL=(SfzL?Uj_0Uн2uL#S2uL-S9qD4C#3uGd*~ã&* }3Sood׳o@oLog2Lr~!S?7d2Ld^ԫ2L}o^wg2L}{-S/Էv>ӸbO'g2Oéon2Li$S?g2 woSг2~//yvRݣQv~Nڽ?#CL53T=SLU3Ue 3L='SԧgٙLMzw~y7f2emv2Ll~&SOgՙL@?Sot>>쀏?e3cgnd?dDZˎkvs39L}V7x?N: SGY^ԵL]A™ ej?S{N3L]Fvwej29e^s^ù;#8Wz8p.prI!@ߞ\br*T8˩pS[25Kp^,?d͙_8˿p.~'SskVKY- g47NiISff> S3u{f35khY ZWpֺug+8k]f>5ଡg -8khYC ZpЂVTf.YtYtYtYtYtYYYYYBwmrD-t(S_ggja3L==SJe!zpv2͙t~*SOd3UT9SL}\Ԭq eS(kBYʪf苙5Y\-L}S1Sߐ2uL}Uܫ3UL4S_/K2eiiZC>ȕgřzQ^'5?dWsLОާ{_WzrgoiOVطۻg>߻EtN#^ӹJOl~x s/nmѺrkּ:Gt׺uoݯ=QP踹wȅN3{s˧$;2w_Xlc[ 9|M2y<2x3@aN_ۚWp jpJ2F<ȕ9ӓ3sIS':X:8çs'WSqTK8P2ɠ{NoqȰ0r[̢E6F\isgN뙮Y#MJ A “ˁJ 8oVjejis9;IƶzJk ̝x\Y!bd{6**m% [}2wwr [#Fd.u1GvĎ :?urhH|W4:+s{hl"ŶS"6ɪ(옷s(.0wS8RM ޕ36L!D!#y ưSQeQ*1&Y-uXcp\W MX!xcgD˱4YyM]H0!4=O#\^FD/_`7DIs+$gX5{W׮>';Zib)HɤG?>"S+~[jQD컵(@ GjS:δ>>0R!=<懞/( PQnO"Ĵ^4;QzQ~(*dB" A>=RHBCΔDimפAI ld63!fģM;$ϝH!PI[ӊ/ l149O?dDd`EGh:!+\HPbW=8拚nG'$4ڕG#/0h7I7-#fD iF1]rzl}'jrfZDK;II1xNi6߶Fz 3(*6_;b,IqoKϬ-jCwih{ esH+I2&HM UDž$VJA >pr2jMfM$t4+De,r II?~a@"5im8,L< 6Q| h|(تԎ'G3HAbaVEau%4oش|_E~qct(J` jJD$c_&xX GΚɏA阉lǐZ:wt 54l,xb :R,]#d( 9uNHBBðkM" k%^[TK$ۜ!mUV)(ʈ(PeyH.LGĵ˽cֱԟ$5L\7Dpe'iD#ԟ$')r;wƩ>>t:rHk|Z1O9JMXW+!r-)F0lOG *z.t49tXKU#SӮ,/5K rm|WAhv/xg0AHN{3=r[ r+2eL$B$MAFҳqg{X 4ɳ>"XT#lsMA% ǚEap&:ħ۪GNPšL)JWSaNޙ,sPY!"mO@` BZĦKiSWݕn[7J;o ,J|6x& 9E΅$9g8cR/F[O5Vypjex~PѓK4}qlJ*j1UT'dP)zЊ 6(uXgxuO*/)|hKGT,Z碑M3`O,dP2q"QDH;`3v2Ibu J.m]$#аiZӍ%=Վ~ \"dHfGUrϲ4A9^֫lc''.™O/7Md',"-d93wΡ%FS$H3fj8i#!qؚ+ձދ޶@Mv2թrF>  4uo?T)`Ӿ.;vzzy='<N-jIxdp21.…Bo2խ^fZ_n틫'@ꯀg6Yi2*{B׏W "mPfx>|lD bU≦m!N@X+ҋ+o]1x>l%q= 뤒pQc2Ԑ"| .UXaE{ABV})N󝳅#Ú1㎘8Qr[|C%5-[ɰЊwÂ189ϗ+K`q$" (:9[xyVI#qxDH"lM v驥pёQJApҵ71rPOV[w6]!v4 bLQ@Q3<aYs]6Bm7353N>_o uAkY_.ֺ%Nw\:GO֢&yJ^Sl3Teڼ\E}QܨyD)Dt/۳vVJ+M[Ja U5_Q@$T%X$󝳅:k}ȓ4HjQUފSg<+P[-OǶfgxkO/y 1K5:i;g>:.fW ~"2jp]rX\a]2v wqRPAte:k4qRgx9q9B<*.s*Gfxq._4ۻWvnܐRwCO^ǐUM4QHS;0v^Ů噜;G~U <N]DTv)u=:LעR{<5ƊB畺)wFu*cMqHZ\m!QhTch.aO4WZpU7V Dn`nu§9jetZڵ1Q,Ry7&Ny8s.!%0&PFÝj(͟$Pj$H (B) &V6k9zCc̲y gx>uK{="muIB\iZxյFfxu;ҋ] Qcu zbˣ4F"z[N洦{5+5/y]g=`ݿ$Yr(O׺xbݯTz&Y$Xkx*+2taIb=M=gwŠ'6qdN#y[5nybL,  ,ED;1ډ|ɚt1/)okj%V֨ZU&.xu{\>2I]E2K6V3uI\7W)VqeL,)8Fc+j3QtQ2܉ҏUcDy:^۳5dlbCNuZ'^c nN7N#ٝks:\χuW,5m+o`lu)QiyҍmaRĜ*󱺭6aIKCq)&|^^49VCɠdML4[#ՙ#3<ʃn}ŊHcF[XMhSogF}ڎ>yʕo!^c]H1%|a^r5: i Īk,)4 yb¿&tU -R8˳< +d"ʛ6) sxC71z#-]wr`V]d!$w!FA,㹦቞!,]53Tu]qpGiE|:Ҟ].x0q:?wu7/TQ$=2LK?}lUy;}ny6ł T^PJ=mNm h W]c hl{K[,-%Q3"ܙ7<୵fY-6ˮD.:Z5%AEk|Tu d9Ib)s`K,2w.zF>N,!e FÈp=R!mu^]kվ[k}g3Xgaȸl]"=# IſGl4w_Q7?e=L湄h32H;PsDg6˭% l86,wz]Xލ_ XGEV7ug!1Y62Җ̒ nf슑Ms}z׌/WT1F 1̜;Pzn)_ԯS4 <;RU;u'MOrňAe+3PE`t+]|~)_X:N1N l>vW:\4Q0{u.XeH|FvidۓaƱ}zWԌ/1P1bBIyir|b]"f3lCՈ9[/L5斻 XXD93t E/ZnӸ^Y8f CFx[燄Q=eWgP[(R'r`~H2y]SK~5WeNWD竤f)c;3l 0Ud)Tg,wuZXD~3l#uEX[H5~E8]e뎇1fdƈ9U2˧=D1bZ r^Dn\'EQ7QpxqIʎ ){TM5= j`$Mŷz|aY}zs/[X$5]߳QLVŹ>]=4gƗ -즼 Ui+c;:/M0XBmHyE"M`ES| . K-8í$l{uf]:bQzsFC{O~i>ʹn~b=WrZ:ko>5/n|pN4ո5!4No۸{?USj:]Wy&y7wnl }}6Իwm=waZ~C_l+k_{sµǯ6}q~7:o=Nn*"Tx3JxJx#JxJx=JxJx-J p-Jx5JxJx%JxJx9Jx,S` OC OE WPSP“Q“PQ•( (!G J%$(!F JQB|%8(F J0Qt% P TQD +P(2p)J%\.B  P(JxJx.JxJx6JxJx&JxJxq``QQ¡%0(F J QpcQB%F GJKW< T8%%G C {{CQ=Q=P!(`pkm߰sz9}N k-|\yK<#LW,a`Eԭ=gΫ3CQBޛVFݑ9\ 78YKb #%GQ g)aX| ka>z%5QT #O\S0Q9(/|!L'Y~w Qd23Ml WKXsA{hpJ$O3:3lݩY7ǻtE*!sSl)^KJ~N$ ZܢݳSvZ{_߮wI͒C`w-6auV+KȌOSpڬ0!9dB+LLb14`qH g Xu Gyl”/q*X0p]'EMl<˱5b#1FpՌ-<+)yrӢ%? \ (rQ6S f@TdgX *S4LG9G!f"k Y؂=r)z n'\>M ̛)@]YON:k^˱u[$i5E vپuGBF|ټ!x`t,l 3v~{G f|Δ/wddvkrķǎ<,nL}V?=_~fIn,&8DpS%s4ϓ:$`Z)h.-TšřrC񉨓>-$$fQ6EyAB' 2HFZݼآ/,A'ḡ/Vǖ!* <r%ӌ$z/w!("煙K +a^iXhވ/L,bH'.mŕ/L8 A+R̊L]\yd^.ٖK䒞siWOY HDɁ9m`6+Ձ)$زآ"&s %j/.#l IIIK&3V<E];ͷl\ ;Lw5uu)ě3߿ s5\&7r2sn b+-3}Ji?}H֏[Ljuu+lɭ ZփZhI6?|{SQSi^<5ܼgsߍ6\ネnqMi1h\87jجo?_PM{s6oyƯ6񕍏og/x77qq6_~j[XY߱l߰7lxYO_O׵ǭ|ܾd!^>k?A(s/ٮw}/.cA#9ptǀ <gg{OSAx OI <' <ǁ_ cA1 |Q |0A@{7 ߁  _?@K?@@ )G 7?A=~ ?; 6o@ ~_WA#_@E~@Y~@I~@QAa~@~z߂] u k·/AVo@F@Z_kAj +@r /K@b/ @ Aoڼ {@|>s0Ax/ { < <w]Axw.np a]v@a M6@XOg |?@T^ «@>OAx% LA0a}z tABuj TA8BE 2^ B0{^ ǃq s.[u/ <Lĺ`"9ysx ? ex /@_2< ex /%꽣֭^P5-yJQc|vj~]9ja2J?iz|7E&>m*]wʁ 9&ox&+jbg9~y~nޡ{ ͥce@ N]7@B{F}_mU8LJjme~ڻ \*fnXdh91\Ɖ>V=lbƗ+m8/dӐȌjԕ$S?3\l6#0 EnxƗ+M},T`|U:)r:Ќ/ aňq>8E|wOVoUp6إ>V6r_ |aA}ڊX{Km;zf;{ͧ4ά߭<8~z)/:dIv.7?%6n]wؕyB}K =`#dq!d]0EstV-®k)[?54jxы]JS[{]G_}Z95懎;UkJ$O> D5!<1p_.#ٓ?7ꔏ-ɲk$Y]c(Lr#* b",M=u87!kKCס[7QJ~QVq;Ir@MA5AdSFecvbM}Xڔ/BQ KsK\е_.Tjܒ)N†J[|ȂR#1:9CbH1ʕ@[j4')vmƗ] 5hhS)y-cwj_qƗ{=.a`8t=Ʀn!z=) w=jjme7t3q|\}8z^y,)x>x&e4 :Dk Wx `,Zx_(]8&MKbP`Qhdǒv''=G=>b[ o, T9sZr>w"LtJkP3v"KP1la>+{s~ͽO>3 7 /cG"dc6ϢTFo_]W&O}-evA"ZjêyK.lb]$G&|Ñsl|鹔 M:u9C^XKggx'3'6l[XEVi0f|96`!fla(D ̛ez Rf>K.+1j I&>9_6 A\@ „"*U/{nslż_6wU0l% ꊩ%& hh̗kV=G g2UK&S8ysXk?uh[kx"&O%"V/E>尺XYx1Tp(LYOco0@c&ep$<^)bj-4:D\`ބ/Gض$Gax^@11삪nʗ!|W4!2V ݵ21(zo&|y@Why,- KbG&~af|9u%趤~K1&t޾_+X;ܥ| eq⥞$Dތ/w <e$4KvωIL7=4 ͉xK m RLL^img|yhh@L47Unŝ7C19++dg|)[]kav_X4$(%NMmV%~6G1};Fs~;<1#Bq(UE; ę 8"'g * КKp@|@Oыb—G@J0MaLrm~:WGf|y`xh`% %f8=UCKnrqg,c'c;o`e+j6w\˅SHJughby[y8[X!Joe^$/ k>>n@ A ޚ\p=wl*,xm,% %%%%%%%9J%G P^%<%<%<%<%<,L tX`ŸQU()((I((J % QB THPB"%(C .JpP,`%(AC ꦴH^%H(AD J%\.C KP((q(("p!J%C m->%%JxJKVfTM(( ((u((/PkPµ((U(ᕵZ1(y4J8%B B D g3P(4p*J8p2J8 %N@ ־{WC G C E Q8%(B $J P0p,Jo)VMm78kFhwOY{F!6SYãD tLN!3>njp:b)2^DNUHy_'|ylbx+zC\Ԩzh2OLRyԾxAd*^6ĭL?ַo' _q'F <>3 _BAG2CL)ZknȊkDsv^(q~zΗyP1eTHS |R]ϐysl޹y6@4|J#{S>GUfg|ټ@f xd!`M>kêg|w}j~_v}iGvͮzѮgv.]u]wڵ ~oۗl}ۇmy{}[n^'lY[nuul7c{woiټ{==wbݿwPMݯu?}oWt}r s'uݻw۝vΧ:e畝=t9srb<|󮛍_m|+xƛ7^܍'n8o>sA>3A >§ W) |2'J>93A0a ! @ B &  @pB2% @x/e@Of,@x 3AxOi <dAxAx‡ BY2 AH!B^ K@x1ǁ @x.G B0b{`#Fl=0b{`#Fl=0b{`#Fl=0b{`#E >G(>A ~ ? ex /@_2< ex /kzw[֯_/ٮNuj3#ַ~~T=lm2C̈Y+AQG4^R;?]yɆ*+,]DڲY2~ǘ"5;qd&{Bk:_%[;Ե%1i[eK~Fl:&rK4{@ecR I`PNn6?XX+d޻ƤdnPKړ2>uV]ӧSkjL^'Ӕ 1si3ye52slAtk|AhX7Y \9GxQ3܊Ȉ#1雘p+ǽ?!8븑kWV|G1+L:X;%8&L?+\<XOPK)KDTء,֯?ESRO1Z/8o)3 X48wbv:m _^TG^BgEF5{a4+EhԸ<(\'MEɵ^kZ DÖq^T`V1i^`r>#5UNR ghRDc滋rIfϚiq|I9L6b-tvxḍRNPu(iܽ LIugdDL'2=_%5•$qLn߽y#āfyfѾnL%$3m& T?je JL$~]AKP ~I*jRbrɶ?V;ON,~Qqѐ&kjN 򠘰YSEg%$ddY䵵]<4<hǤ=b,6efEF&G4S_Z!q]ȵL›Üag&L)LI4hEA՚ؙze˵ŸTҢ&~Ƅ qe%5߼ug*P(*j $_3Q4e%4<v9Ӌʦ&IEYrшx3<> WCAlzUIE60b=Z/)QV$wA+)Ln i #h~amDOY-}1I(JcPq&|-_[xs D5y&? ߮Qa,}{3PtsCE)]hQ%YØT\ˉP[{g"1Ъ\~zQ U6P5)N(XEKZ㨋2ءT{gx*c'N]}1T\- A [?| 's_fxm[q$xjnQj=^*˯D'd1pRwE踧D޵. W2B٘L=':-Ӝٴӽ'Ie3E߰wcQ` | 0K,9AMJLʑ%X0}DH7SB5LU֓ gCRܱ@r[O<*xȌDUHDK鞸cjkߵzE }x~I2Y)2:/٭wavL/ߧC{`ϩdX& Z8yм2_6ÕRں63s"&ܼC`Tl M.ٹ%X[hψ/Ce9 a^ٷ)Y`ބ/ǖƖbx ; 5*\6b{h-Hu%L \bzWקMyd6 @[k{yLbҟ]5? e{hC§/33>K, _: :2fΔMϷW5(Lрyl z"CCJ˹r d@}GQ-J)N9BE)_.TGIEKf]^> fV糵vZ{_bSOGL 6ũ4ק)( dz g$!7ODǔA*]63s< _6/#O&dcdBZ3XYh ]i;RIdJWL9ly#l^G9EJCLy>|u+1́ʳQZו0`ɅR^& 8"2"5zV G9lQk;ˑ#"t,7T27h!>r )_NN|r1L0IM~ә  <ΆbˏĈu$V[¹>-0oʗc˂u%hYMDIFUF*# \hC9-F2'AM>sb!_VksVص{=:1:C!gJHf?];*uH# lfp2sUhNd>土S!'<&!=̫#dIۤvfGC* 9NpsΗRԕrD&',lތ/cv,Ɯl+vlb93Kk>Kѐv5Yಘ3wRp1 Bh3 *DrI`$B*s%K0nfUg|yD0Pj6Y*T >8N<\ *W0(:NKj4ppUO/ey 5CbrYwl(l/Nh8=\Np jxP5Y÷DN/y,bD%כBy]Gn$%lne -!}o7mR&Y ɡP^ݚᘝr)Si|ٵ-5<<7ƭoRPU^rXk,&䚘 r) gW2,kte(fƗ]ۀ\3,Ea᪹FCskH9`C.fy:SB%w\RNru!9CɌ/7x]5xuۜ6urƫKCc8UOi@iɞTGQ_rҳ<ηS\iNV,Y; Hxq/ V;C.y22`;|~bkYfՅs4rq/G|)PcaK0 dVO[Ƣ1Yvx˂\3(:2FZ*檹F,hb|ٵAixQlXŕ0_v0xEP9bTƬkM(s}!$D{C/Mkc-%2ĜEj-jC|ٵ{<ѓ=K$Wjkihy_6Nmr7/xP_z\sW'(BBne ,ōjmΗ3T PT LIm\XeŜ/;IBNZʪA:Lu ͨ ']?bqXX&I I[f'3sɞr9dVg&{p ]c.>XA =![p_v[!>#^ pٱ=݆zmėk:WjGEnWq5,hBE5H%4oqbg]1n}AΕr9|T}-8-bY:zp'/Hx #Y'=rF sڙkm2Ä n7uXmkg+9 TsH蘚h30uM|ٵ!X'hgdw7eN\sHu gBYʮޥwmq9"G7 (S 0uBF%x!CңzȒV9IqΗO3 TLP QV˜rp>'A幥TnyEp|-Ӽ9ND(f!c #3U!t?KZ;׭_Y8\U,i͠dWqn7)HA¥ᦑcYyo;.awxH(sװ m(&?0 iM XLJd5coE '@]z̑1Yڄ/GڹP+923œ| ir /Hƭ=[֥['oum~gco|敛R{mtZ7tߍtOսs緝ow>Οw;gt?t헶jksLFǭ/zu-uAa#Zϛ_m~Q7M[om\BƱ_nS/?Ϯ{7ooǍo|f/۸zCxqf'/]{faY]&p~76C"B $J ` 8JP±(A A GPƒQƒPQP‘((p8JJ8 %%%% % TJ8%B wC wE wA wF wB P6JB (a%PB%tPB%PB%4PB%5PC??5%JO;[k+((((g(G ?E ?A ?F ?B ~~% JgmX ·P7Q?oXqP}%X(D JQT0@ JQD +P(2p)J%\ D >>>>>>>>>>>n@ A >>>> Tx?J;>^p=JxJx7J[X»Pߠwwlu_k^\k}5vk-q5_B'SKuŁ1\59F/Q9r 2 e2y6Wf;d4k| F1&P@\rX|k,^WoPِB2XMrVTW"AZ#INc7S;qY_ջ-4Rخr,(41-b\!}v`]k-2ˠIYlGō{׵[\ώBN*D0h)8*ߵ>s]Js—rRUVd_ņݪb;P>due nqvSjBF *>O E] R7i-yLy.d+)iyJ?wyX *bΗs 5UIa,ynS,lޜw~0/-'xh|V(dKB( r$1H=>H;{wMs}s~z~NG_uʹٞzn#ynp 3DtBT|&0eJUgWM `+ .pU<˃ {S\L Em~&@8e퀂@q}ZyUCʗc09d[NY/v^c)%=m=2:v&23lð0:Ii$MfAqa"w>z"vOu@~i^Nz铱wVY{#ɇ}&XYQR*UU<{RndRGYXk͟^~;.=:^ˋ|OzulrlmK黸DtAQ4# 7?;(r=^Dmm}I(9ȷD5\ $OkR=h[nuY/]y8=[H=>(3VF nh5L[JP]QYMQIGu-veMqMCB#[ Y7,5=3I5ɇ:/64eqD֩:WNBSݺX@+Ydc_ X6(7H$q~w26<.PI"0<4$<%tuouX6a;QO}.D?Jr #T8]ϠoaQo l:ySj=ڌt}klRKZ:9Za p]v҉L^]騘w:ۥy{=cYj+Zvѿf-!)>tx鋢꿼A9dUgDVW9pM Փ%5pq 0~SjӁHd\u~1nhM<9j4YU?yෳ;whFh?\z #9Q8˺uNwrtC۶tDj lJfZsZDt۲x^nǟ%EAZ3 -\8|%7 \T߉@qcVo=F#T|/rIIv©A C>bF٬?޿sd:u' fׅ?綄!8:OÙhjS@"҂^o㽩Bה-^2[bヸa!ࡅ-wvMMN.IME.ȩ'@+s4Pd#ơow^S75'򟈝 \畩O]$+.,vӵ616s BQ&˵),Gtp6&㟩vNg%_seZF }QyXPmc %4zӥs!/l9ٙc 2Y\aprӡG'sKHfNl=/AHD] =^!|_+U&3^2BndMKCO>wK™Noșeb" w(Tː}'MVv[T ~HX9G{ (!Q%R&(0-ݚ/b^Jb^GaȨ#~4hlMިVW mM$ՠ&RE|J_h<:, I)$\;еhoΣBMvDzūse 6͎Rb[V UzFTV'7Mo4NJNŽٵ_%gtUD/Ah-pºU|K#ztY"AoJ j$i _<8 $Y[yAׁ HG:i3bdzⲩ>zแ"[@[CuE.!#phދ*:$gdQ^Y#ԃg ])ܹw8wm mlV}(Xxܹځm3l-D߳4VC>Qgj\՗U^(Q*4iIzՙYldy$m{~XWlrΐL+~yQv73N=jh#-//(Ɂ"Kdt;:<}] WetF-ݐum{FiT2mcF3-J1uSۣ3 K&N\ 3WHU XQ#It&h~F`S"7\(L;qN|Y:MiaI d$_M~#qחteAU]lo 3:_pLz^P٦֣"ul[-B0Dvd7*/] SsjȼƃXH ;CHy.T ZKGd+TŜPٚg<9u[ÇOXSi|ΰd6'Ax-Mnz x? rĴrOwޙl2yyu~;[!W!6 " B}ۋ+xmWԑPdRE&ۊ(/#)".hW .YxG  /- .T .<rS1OSoi_^8ՙR.'$>?%t]B &I(ЙcztBJ ]l~+ސMcJ@+=0/t"1AMLhL/WcbzwLΘ;bZ 1 vCL'}i>hOj^@~Э10gǴI1UbzLL/bz:XLP2DBM =<%y =4$NA =0$ ?%9 ]g'Y ]}OBN^ ]1o& 5 ) $OЭ 8%„nI =?%tsBM9 =;g%̄)%tcBOM) =9'%ĄnH&I(P*dBKh9HBO<-"?OOHBЇPBз'm }eBAZ̀}1%OdL~t'_G^ =1} }gL֘FЗŴU1A,oTT%1_=n)1euBz~s O'ٛ`V"[518 y24y6-Ů7z՜Pj|5.2h6BT]BgZ-J">tF)4>DΨFFkQ&-Gأ]jըNdrDЌn{w13̾\zJzkMlƒޑcf1=)_QR\$u/-=)bTv?効WJXS~؉OM>+&+ ; (s[ౝ / +3iE:Bkt-yt9gJS-F6NВz׌XYScJ2d'36n[R2Vً*L'KXf2GQeÚfD*\V%ɳ`rWd, Ivpzmڲy(jT錒56A%k%qG^ P瘻={,`Wl(zf3XYJBwjQ1 3ãgПGVxVBl]o=)T)bGLÕ )k)zҹċgl}2AnXF7XO([ `nYgnMI V7"@cąˊ*Lk.D@VDWpWaY1M-[У?X}"R՘:633Dv8wi,FNHovT">݃3GAʈeH<7b &bnk7bxfkڌw=q`땶t*{uW.FdG.mB5L)g 3"A`7)=9\$悙+G'<.Dը\Lfn]N7^ 3{̙/"2ԚGݬ P5j%2EbOds:j̈U[=Y9{u<섦*R35Θ{NǵggA0T= &p}6 \Ʌbc0뺍3aW \[vj=L=MEh?6$u|I7N ?{QF?1%[<76l+b4ߣ0{tک{@VYS{#$ɭxOw0B)#fq?(ޑ2',Gy`ɵ۩b C>-;n<k(%i6nE>Dgz:x][i㑅B+}Op_$|hhﰌx 5z2su_eH|r.V~VBG|> 5H S9y6*{J/tm)ɥ-SKlҪRtgŇ_*~m|-_qMWGX6K^M7m:i6iM3mӦ6JZlFTӦ6iSNR涴yeڼ"m^6/KK ִyqڼ(m^6 i󼴹9m6Igͳiyzܔ6OKiyr<)m67iy||~<.mKB&6ٴɤM:mRiLDڴ96MǤͣQiȴ&m6OC!iഹ:m6L~i9isU|v|V\6Mͽ^isEڜNYMM4m&6Ki6 is*mdڜHjKsǴt|*mJHOKOߦߤ_'//OihIqQa|$m m>666o|(m~7m~'m~;mLZn/kZwsr\nAs?h.4RoWUb#N&Q`,:rv]f%,84q \gfhS?jBF5W$ 2\2`ZźCd&A얕JwYN R1yH5.ZRܞAj0:Uc3Okv#T' YqIP5&.&tVBu:M;+=kw(RVPDY*$"z9=e6Xފwhe]ސ7Βo"Zl( ֈu3KpۘZJ*g\5ڰh֑?rӅ߳Uų')0Ip  J).}Lv9UP%3@E~77}Ltszӛ7L*l`9t0} m^3zzid:WU{XڃkYv[ڎ5fךm͵M 5VVVԐZD՝WUzG-kAծ6۪[|"\eWc+;+V[rgm[*;*+T]iVUV6W6U6T ^YSY]YUYQA*9l0{  ہmǮ)?Q~ 0kb۰flK-UtG-kJA.5KJ[KKJfdYFV!+ɕv(=Vz|KyGy{rP2_kʫ˫+H9B@CFv""D {Ƚ?R~r2w?9+GYy5LymCCW//_ %x-k 7C f} х@@!ZM5ku-&DQ(A!nx%+ ^2B nx1ċ ^q a']~~e['vwukW[>G4+n|&^1}^q~E.*@Q{+^??!~x'@|?A|/@|7wAcN/U ]0888888888 q/0b0b0b0b0b0b0b0b0b")y' / ! !> ) !"o!!>W g qA|O  #a0000000000߄ _5_ į@2/A|!~!sYiIBďC ";!w@|;ķA[!- MoFw|_Z7C| Y7A7TTswj_~ACy䏥/8䙉] N=-ψqi Kl6iau41Ó~ğ SY]/l?4Ž=gء.?(ީ,m-s=a <QDgOnpcӰLkM7:#/uͦhGxZ,3$޼P2ង[riv /M?)nIC9/>?~~"= ^aNbFs~~M2^wICky~efKl[e t3tD\ibsycS0*`._y~A&.H˪3áܡ5C8׋.?ܮ^g"@$bx^R9xggϕ.v?'3IaTWUkVo?ؐ8;'2~A$w4f(jC*ٖ\жoXMpZCŻ0#jjN Fcghj%{nfۗ4jˍ(=Ò\cfM?:O:yA/jߨ]]vBZwQګ^^=ztuS+rsrF!um8@:QvB/BGbߔ]^{!#!C^\H<ҏ]kZ+uST$;XJWL%%xq θθ{\5.`K%%hq ʸy\4.Am\•p%\:.q /u\.pḄ-.p%lps%=.q gK8c\6K8m\q K8e\Np⸄ ֏K8a\?.q %q ܸv\3.@K m`QOډEbg̴AxZv%uJԇ'.X$jAmCBU8eE&zt,9gV kdk:̓>aQόE"fp~T΋(* gQ@s-x[_2(P Ōt?xeL'B^ E* {¬)SKS ~Y320R9ri9\ZhQ 0VZZ.=YbgKRW̳BW+u/VP@!:lu}PlS@|!qK|֝e5+Tڽ22q?>(c9(]Q3CrljF(p'4Վҙ }] -V "qN]KWZRV2sȈ?xG؟Bt&lՕR,IQuk۵;rx xdY T^rugejIY̗nu[WToTrV/)/!)UaUwؽe1NjYp e`i0`0~RoxD_x׻~\bYV~fh诜) Oom7;[[ۓl/5Sq[{ë W-5~]i>cBP')}yxdz~ݵ_H k___^^_j[ϮLOF3ËSar6 Nɥ }ga7$xE,:xfh"(x)7/x䎐hHdN.'g%f!%"?⫻G=ðhL*Vkw{k~a%[='|qAAlEhq򫻽3=n%VQj~\Yn):e}) 0ǃCdtgAB3h&Ƣ]R G̗. !$$bx\^P4Fypg&e2tp—H5䡠ʫ_MŚ7{{t>Ղ,mD3GϞnk=|(dQaUo*܋09Lm:(%ٓ :Xx2]JPlDs6cmZP*4Aդ"X@q9gޗF:{z{~:M}uo]XPe[+ǀo}P0 eG TBh N+ @xֳo4@7'o΢!kl^%H7t@2?ZgtxitxlO)纚zzE7:oY(sb|i_<#i7t퍇3;h+-(q!|n-ͩcV Շw[ [Z|xwgğzBŽ0h_ɈSC=/[߻#iXsD}\x3Y!.ZF^9$>0e\e8_sln !@{QaȬGDb00/ bBjdJl󇯷I(CI|nYomꙺۮOZmm| tJm}Fd_0@FS)$ Ny D4vPku,eg aX!֮,c=hRF>hU@KzE>O qq/,3 Nk:AWw-J?vn׏wtf{/wlGhkH m_o\+m[m\[ghgZ[^m n_ &|Wfym?<3?ҫӴPP\RnW.b)KT-olkW* MRpk'ۯ\P(ּ0=`es7fssHq:uSS\W+<ϕfO!FК?d&14Y/\2HAy!S)O-kRS*-%kt=n[>=pmKPI)ȇw|4^KeYBU: ( ~jFGܸ|dF ExIo2 `v?E|r*6aƌoOM,+s ĨN`0Rþo\9¹y3E)&p-܃7^|d9axo6KdB 1CҴF>gCB@t1b}߆yg N('"ڱx|=PkЗi)l88מڨF aR^F3m]e?ZA|x]?z8$>?uB:K|39٦4}]tLt\hj/=>>nP\[w_V[_mm[/S˛-?iYmq6Y͟n` O7cݦw4֩{3{Sm/W߰emS2fz*gKZ+5M+J˗msֲᒈN/ԊE\QueAS8/QXpN*7 k }on*70Qt&j6JlQ&EqfML6vTL1um\LM+^niF.fԱa T qնо^ZfA)녧mrqXҫQCׅZׅs`VipP-My4Pŵ(,`aŴ&潙i=0ӎm&Zk[Sޗ\P*PRZZ,8U"AT)u_mSOվt(14V^ ֜ W]RY,N%%K"a\Ծ: 084fU 1̚vb3}Ms2JPٰFͺyEmjTgggg~\ fY g c{kK+a`%__d'nA?< a)| 21D1s7Ȯrۡ)glW؎%mso+9:0${yvhgn.˧ahsJ32JdGSl].L\2>LVҗh% 0»; ]]^;MbT >b۹irjҍ-}C}O2K$S n'qopB6']ˆHΏ[s7 `26=8v4!ӑD̐2g#Dr~2ÀVL1*Ua<ΰyO e0⨍tCqJ?v?Nf6x(R1(!1dQb@ M@[FZRFS)=H2NHF@W)RZRMmhX'MI|O[gl}VC54CPl}:B[,MK rW;,$jR\irW;j˾WĶ| /I{tf5kwnV%4PB*;&D9 RoϜؗ~M&byC!{nb9P/tuUk`n;232x>}{4oYt2n pPp{Y8Io`)HQ` _1NImln48VG8ؤ^*O&cj/Zx}kH G4\ ˰\6 EӗmdA,T&&|Aa X r;k q)HM09$ M< )*ed)r+y1Z0ƧGgVƛ@rr8b*Bw:Ȁ0IuNѥݦJp};ς%P3{ᾃ8@JGC-MOphmf**6p K3qn) 0o[+*Z [Ѡ}T:}2\RK$B H;YX9B$H'Ĵ/Dy;P9a K%%&i!FE9;n_jIJjNCyXn(/(;d܃Kok: sUɃ̐NDR#Ҙ/LScT2H[w>(v OH+;y(h)(hu02l2I~V!}@&vHV/!_mZ3\;t0ɑ2tZ;p UڭNBdOÏ.?Zp hfFFDDNw]J#C6!r]_Atb}L7ot_ě33zTJ7aI:-'4ae m'I ܴ:;4tс=OlGM6 'B8%lRd+J$ܞT d] COz2;tl׿nyUJӌj)LMl2%,s!ImRf9M`aLį$A|/#F 1 ]j3 E7#~*V[-ViEK3db5 D30LdXFE /RdeɠF4qs%t?D[Uwr!)0„~1:Nd; #,G|{>iv2s/k7҅IbA|ßMq#i!],N߇Y_:,da$q;D2B&;b8P^ۧ.2Rc7j3ٳ/.raosmpjZCQ^*Cd"Qw{uľD(h幩HCV X?*bz&"hDSXBABn ;_&Cx,լݗ)Bg? h8L }&Qm,SZTOaV!o90Z k"JqIUt%*$81nR1& k"2+`;#aQmi2&`9gA?Ȁpޗ1_>r01+8{S?ws9ƛ+-LڨƬ.#dEF&~s9HTz ` =\i9vh9+;>n1[5ecD"7d=+ Φ 9GWAc9[siQh"Iٺ%Ham ˏf}}ѓsq?G_wpw)z47H9 #(Oݗ%Niv$*d=NsodǃmV.YM֒$ uE<۟⑊&!43ʐemoijrmm}gϾ*BzXӧ 7yP$*%܌JPr]l YF(GzzUMEͺ8/N/ jstt.N #IS5Pw.3<QhsxHxŁ @FgawQ, e+>ڥAM+,`qsG$(+Z(\4iOcKNݐCI:y rw=#iՍ053~y~Mױe.@y>!K㽭g{?rhhb9Zb%H@V';o 8&@+*iE3,dZwqS[ P,ÑDZipr1N@W#A}_OA~]2&^}=dCvwؕש?G-\qo ,I_ŒdͧstGd.-3k3*GoM/򳓳cɉ] 8sy$vxcjx?ΐ~l`?Z حr6o7Yޡv At,+MJ郝Cg%(_RC`Rރ(`cHK-G] vB_=]SDj,C'w&oS鉵Ss}wg}7τ0SȭC7]^gm&uk{$ g3~!_eK7KFq4Y$"Ϲl!YWG,V]]uiOj޲>7 j79JW$ (d]d[!h=A"37tV8GVEPf z7% !ܜLzrɘ{I{a-<=5 h&i'E]q[7Ad?};,ȼj#j!M|x[g_Hj`rFbJ#7a o Y 죴MyiЪvPUEA3sX[oyX3V#C]MNՍb;WX,\]wVϹ2g*⟵F2ٚ/DcPY'j# ˆsb⣳[etvP]?iޖ̴~oRÖHý_j詷:v2r鱾޿Oib{i݅WW\=mm,;`W ؼg/EC&43o] cU ?cR bM4! PkC KDArXCQ /@At08Gjs?;p ?.r [c@%,6Z/xD+ "k[ρbm 0ɭ酐D/+c|}ҿ=, X+m _tOp<( Jxe2%aJ'b{=Y_Ŭ&E1/ѱCJuT"d ]^Th H̡l/5%Vo*`Q[jEKS;pgnI ʼnR{"%KŀZa-yG/rF/zzP֋kRr:QAty,V5?⚩q15q30Z$>46B?^H]6I:'Y>PJz1nqۋμt{Ӎczq[ܭ2D+-"-\,M]e|(dgg2֧4/ o|s}x܀:eI5zCH~Һm!~v:N͎pۿkh-biכ2톯Ƹ7lt8| l{HU(2үqq^jlpeD<(*kWW{b}!}-"\KdK6YNDI9)/'DAi} FpNg=Gg");V0ӭ%rl|~o&yoZ/mzاd΂ŗΑG;pUo=zљMz%[Ar׾6ǥxnl JE mN >O)3~/VXM;!osn82Y8ռ`+ Ea!JG٪f:Yv\kl #ק G|>';w{E;nhWVPeIbPYs[x%)}qԚqwb3b{J?]ZVϱBXsM=sV $Ï0=W.-}k4eQǙ}|Ȥ,QzI.}rM=11Qa_&^zrE+bhǛnQTdȂGe+{k'[KYt\+XʼnWfyJIgʟ񦞁=\#:,~D; ~08PMk@jlh-edžja)IQ{o6\P,3RPZn! 7S Q3c^)ARg%e{61Nq{Nq-qN3_%z]y̆%m쐕x]$:fd34<+/HKZ/%=\o yRR76 W 124vuX:/uwd;'Oxs3lTn(XXmubnI%3YT1-XInD!MR.E]D~sx:fZ"E:I%ОH!+Z |W*hAAuzHF$>.P|gX \KӐ :e{L( .Y^ b 5TtB4¬@9XLF4f%4On2:+]=xãWǠ_!5Cհ((P|aVy,BVsssKAx$̬K, Ջ-".{<&܂1 qL[s0f'8Zv3A˪ /kaf'E1- wG-ltvNE>Y_8w&ˁ2wD˥gTx% d]L`i"t;y: 'Ddyc2Ɔ&GbhJ~+њV2prUD8i#_C:5Lhqf< TwA&ȴ.Q9vݽM/𳇳\lt5ޝsN~c_qӣspdX%GoooܞML`m*3XUc Uacoez~pXj"8$ P2x$8 KjVBTG= ‡G"*t]0c a5RチWEYM0eԦa q7#_#k ]x]ElC|2!NA]U{k+9EEQ[@94gk eVm4'Q$ cPB+d^JP1U!ؐ͝ %5TLI^]ȣk`"`7gBswe!TK.L,QԔTLt8:iI1JS@H%>,$щDtS)Zcbm_.^ cs,PLDb1]BDe,^ cNCRS_zkM"ڠs_VQ.r^BMEwPL  zzfJ0Z ̉.ufv"',BIp,r]2cc/ $qXl<Lm i~PG xv:q?*E(8 Mݦ 8!ZXǷT(aK Xp'.aK2p4V%li N\–.-]8ܰR eBw.0qul7fF^D} qeaNfǐ堞\?;p e9堌07@DB ]:J&ӊҽohN⯠"G.#;EN'kwR69mړwQ m9ݝ: QRhKr:JA3Nc1 vXNdHIw=νu-͑3q6Y*s aa~+:^Q9r7v'v=2w; BU>\ztGt*F8YR7Wyh֡Dl}gF$q ]A8K$gȃ(=[Hꍑt%fe{Ffu3 nBt`, qYcB/zfmnyƺ/;ȩ b9 73nhA~͜Ir&QHdO/1DM,32_\g{뷄7'r(Yvw/LN9=#m: OmpܪM̑ gFnvOm~1a~i@VT$JL.q&͎iyvޜ߰t}x.C}k}W%<+oACNln 1Ϧ(ajYf*/kʹ0V5&#}-XՍdLxn󐥆;;S8 o|lg/Fη-a6fᵳL n]p4vJXxtpgSǻ;N]jmy_onƣF^_6Ѧhiz#m_ym(tt-/AC)npoY,M䀘kPмk^] yЪ28I>7es3kWT 5~ -+=9Qٚ'r{pdo>)!S #T4P1g @z~P;vn썉yd2xӪ.D>Gѓ=eQrU -2 ڥ£1ē8iyhRO /ЌGsz]4dBpƣ'{!N NJ,h=?U,)fi{Gg{.hfr{/+:yjPoHǭuuqaX.J_, U/T ծ&]::;Jl5%f/XQ"+Eii{Gxxn:Є=j؂)p`]P)TJXiv!C?J*x[oqx迭Q?<:jlDKV&rzhBrXyƢPGyݱpkYܟvl"?2x!;uԅ  j>JS5YtJ)}==joY>8Jrk 9]M셱E0KmGGm(ʃ"׿m>*V}m%ɜEӺK`(ŲKmTڈK !U EŤz9T(J呰" xBfiUwBӑ5ɪN|Qb umqn;23zsO/HὰDNxtپ>PB:@bzex 54b.bÜ It@[+<}oɻPDIެ.B }?k"X}a8M9-rorSUV!\nRQ-.mh /RM*ZeFKfx/i{'8[^UY*4*/JUJ^]/OSlMG${Xsf{\ʪ6|A"m ~xeړnQbj3m,F|d²>lu_/T{lj>2vnv^nui3苌ww[,U9#koF)R&PGa,lGvܕQ(]Q5Zq@WizLagdN` =܆KYp4V{NyߙJٙNԽt)Uqܦam;%]aU=ʙ2ǠCnJaT[8ҼW)IG&%hd &VPAcVmHSO`*=@:6vCM19/`[TL:}JW1ͩDaXut ޹ysyֳHfSuIBc@2Oy[ 誔M:%ap (聓6k={OIp bɭDU>5jizMH9 "LC~1'8O>8ध QM4Ep 8r><&*pJ4x+C\h9_,'+_Pw>"XmVhZZza~|zD{D7z>%5w˵I\4qGjYPw`VܯC2nŻoaSd0 M9hS-,R"2RRƂ" b8a=uE2jTJcuLMsx%C_;F>^k 9JT $\rҬ |R si9HI%"p@dH(!cB"pp,"eI"1ecD"7d=+ Φ 9GWfɥޒCMz\#h;0[XQh~)u#Ilov;_6ؕT-nLO v&ta\lr*陝)_;ap0s;8Mވl.=fV8z8ѤHNOnϏ OsXp͒3 ̱8%T3{" ,#8#d.5plmps2T>Ǧ<7VJn!Oܠ~"Cy#Rxu@HpEK^f#:./xx7G{ݴ׻Fyc.d}MQޑ-ۈtMdj]-eU|oATgKLu(e0N|7,n'sPټ5lp0Y^Vȁf-t U|y$7k&2% eԌ$XFZ`V?)fag!#?%cbp@R6XƐQ'ֲoȪd9ɾQe7X-HWW*?1ߚ ̬ĖF']3omic.5K탩ej-eldԵ}{^`onޜ=̹V׳|d*9A#p8yk46wk!q;dbf-&V*i鄹YzyFxLmGg&7fpmf8I݀"dZ^>Šߕdnn5unnY'{vC^vBnC`G/jHVbvuHV q<<=읜d.Ȋmd/˂ 55s(AWV|D>"."BM@eJ#@͢w)9GS؍#ݣ)TP!;n/5Y8z+J;+8܉>L ҉Gky:߫/ʚO։>2'Peۉ컓wlb'PՎM@MwGJףp5z.R ׃p0~/< U=^yl>|I.uP~Wp#PEDZkˋO}E\; `Gg^瞛ynO*.!> Fc6{d{)`ס nE*^{.oڢ!@ ^aPA3vcT (@M6Rnr78npA[?v:٥|*~j5 U4]8._41ZK@P5p8?(')J\&yɐɜ8}+![JN:̨s+ѳɬ/\^ ë+WL:SQ<΀IQhՈ"_a ޿l>dgd.pb8Qp ČW%Qyg:D~ Z ّ_G$Ntti:4GBX~zsm ᡡ=Ox?tx{%&ӻQ &]of-ˎ@ǏÔEd?I၏U (ankn˥5_*mPy ~h6 }*In &&9,A\% ;diT>B D%BwVx)|j[f5K!}urŧ?A~b)&*fqK%Pqd"?eWIłҁҕT̪<\J2x c!@QnSX,E*S]"ifǰpBs;d8FKHjQ櫟AZ\hԵQ^2`\> E=/\ge,|>NYxsbϊ7~lH z89{P]890u%.Ac=.Ac=.Ac}{Tqۣ u9(8VGA}U= j(.AݷG[qbM= rPQPNv{TwۣO-eld bZj:?p/ߥ*bP]muq_GJ݊A} $uAhL:G9E V;kF9ѦTZڀ] wwH!5+O?A(:QK!{`8>:86 P @38#p/58@Ş&N@0L~YMNݷAGDy '& J& d1-ˆkEG@3Ȣr|Kb Ā@sbъK@ͧ@mj6jT3.+4`DJe a,&'L<3⃚O(5'P3PvV#1(Zh-*xVwQ \N6D3@1vdAsIA+A;3"x\A "g&?|-?S~hNM~h@>?55ζ|m?]?y E`Pwi$wH,}(U\lTF A1ܾ?DWv"X7] ܩp4g*+ftj&SS%@pLµyuwȶuρ|97KvY|B]%s #'ZypO-:SM"/!51NEoln}_#âdQEDȵҞE.+2V@04EҜK7cժb4YThDH'z͐zːɅo"$xC]A;DLܾ$DpQCAX/6n.W_Դgƈ3]dՄ4(:1R…xWh&!DWNP܎VΩs..Pu 8sXA PA鍝%WeT@By_"knmC$N 5.b2V@xf~?IQLsz蘇/HvqYH bQ(#8%"Sh յ:|5Ei~.s?@>ϊ=1FarŎWע}E@%83b1d6 U+vyDQ }]v4+wqۥȉrHht"W{ I.H\Nl_mhcm_}6N?zKG> .@Hto-x)f=,IS&MfSZv"4[qԦ \,ŖhTٲ(tuTiJEn|q:0Fj!mz1lf9Wk͆DҠkk:(/,Ɍ&7ecv9̰ d8aH. -1XZ||6}|LP_|(Vb@D6rV4l'ۆ6BfIӝ|߰t&nݰ*7ljcTސ(pB8T8[wp͌=_PԮ>fЗSGgwq!>:/w쓱_]m2OFUytit&b?G8Hmduzjȿ1?~~賡=/Ff$u /j\*ԴoˣaN=OOY_៪tCUN{is_mϞuU ֈ]=sYE0QD^\ԩ V5\6TSjca}m gIcS|~!*1ٴmZDr\- L|ėJ~ɏTLT/jf'}dXQ:K46\g%Z+)mbKN"I$Jxz.0ԍoٗg8fukc8ς.2HڜjbMROL؆Uv\޴~~liP+łJ>-۔ylC voZ"nW#ؕA@/0VW6gQ7><&e7>?e7 ̸$_ke']kd{%ZyE垀ւzBYAY$CY$CY$CY$CY^C|!~"(z 5q"(z闸_?:}Q^iDP/U"(z]AK?&9%X+枀= 6!ڦ GM*b_$oS$&>5vzUgC5wVՖu!5n :nJ ':ݑ$opAKa'% zxW~1?w3iTtAob ^9tAob ^9zW ;ʡ7azvpՉWmrR\APW+.(h7p  ++< +X-nMr"-7?-g3((rY ,WZN+fgnX8ؘ HHxV pS~{<ғ|`#895$[ !\.,d,,92.#l4-M!$1K6$!!I vg2t:e`Itd$Ҽw[[[[YJ ?*Ζ1}3x8z:3Y,hE?Jh>&[5j_k4vo5|!zri9Zxh'Il^VOBtL 002W7GS@Ӟ1娒S[!;Pi]H_VFJhΊ)`K`_Odz1\[@߇'%j(uTSK6N[b XYKV2mǔ)<=B&ϻmP/VZHr43Z@QNŋvk05[Kwp|; ,y T&ДRy+SJ|L0}~9#OmWa\J$נ&ɞgDz^gu ;aYǮ'xLu(8~""p* O޻` =!n%E(5/) Sqͧ\+6<6j.m#geU,_R饕VӳϞtv9K3׌f(h ҆8= 120g)SOms`e_ z/A @ XnmVm J GtPJh)Q` el=L2bx^k^Ay/-X.BlN6VM꩸vD|~<8ۏSHu9O1'żRN1_)WofQL|Ev"ڋR{ ,fK?&-ecWЛhgK&.FۀިGnDB1Ljʍ1DH#Jv 4"mjF}1f3@{(j :|i?v7%o"ތ~XiHeȑ[hʷ髭H ? yZ|^$fzcSWt3k {ʣHaN;GnG k#~nDF *+Ds2Bk C'lXϽ ^r9vvkS%ܘj EUɚ&U~#2Gu,\ aK Z"F_ix7p{,z|qT%j),^iZ^`$;ϝH ]zg.10x hxh(IfcvR*?# l&,f*?[Z[ ]kq\8?ˬLV wxÿ A3\ bUS7A J)N#u36jb l3gUh/&|ҽGJT*w`ª{v6G:` ɻ*׭-r|u|qa+j-] ƊmmQX cd I;ڭN:puN& xc8bytJoN`XC5u US:sl:8v\Sg*g9 ,I:XnQ6S$=nHr on{Qoig/F o`NhςB%\OJ1Kz-X'%gu6Nnv܁Hj轆 -gx$100644 test.txtL0UDV5x+I-.(˯ x31< ˂Ӳ3ccv~s0kke0/H/-N-*O,-Ɉg[s'ރgΟfwqT%qʋsLJ+ FL}3]bx)S @C <h4L&S(X,PG1,,!1?^9 *;|${`Xk/7[iD~\ay +'WKܵo2-@/C3W&C( ,/H==CDV\lN'{Oo(}_9Ĝ9>jV μm߶v".U085ZG6>l>&ovPDXH̓2q#VL77e=7.xLU2itDzm{4$Ēb'/qU!Y12 2TPx sb``p ) $70130\tq fݮ" O=E<-;9dj.]PpGxXw"ٞά9g7>b=V?r2_àpa ӪS8[uxTt=ͥQWrK=ZArNͿojuӀ,ݮw-dk_7k&S{m|SBa½NZƯ {j⑺ںjUDYjɫ^s)OɅ:[^ٔ 'W4E*晷_69G6KhR'1;KmD2k{4~ eFpF׻w$WjUGL\.=i.mKThXEke K־;[/}~4f9k.}^C5pIfјK7Lw>y//d͏-(0msͥ[o_gqjVN٥4WTc굥׽Vڜn dL9s%T&TMj AIf6SeHetdcJf%ls5ky̞<=Բ%7\~;o̍ʼ->YTBoYje?o :cw6/˙WK|׽|jZ`; .k&~{| .%'@675(QKq9>)FM.&] x|w'I-Xٿc]Ç3,݋w\RcsW,zMi?ූ5URpWvkg\"X1xsJh:Kgx{xqBMA^Riqj^njIbJbIU^iNRnRyHaZGQjeIR-Ix100644 favicon.pngߦM "q;6 100644 favicon_prod.pngß ąP=!(zj100644 logo_vcf_jjg5_tah_9MtIHytOmZ.svg@SG4XX׮ 9100644 logo_vcf_jjg5_tah_9MtIHytOmZ.svg.attrst( SV:100644 logo_white.svgle?OOSA8x {g40000 oauth2A?) @W^m-x$PNG  IHDR((m pHYs  sRGBgAMA apIDATx혻KQ,ݭTfdmdHaEz@}RB"vnXO`;7),RlZ(4|W8>f;yp;!X8 ZVE2C;  MB 8*>/iwwL0<\אRν2yh|aurߒm?"43405-HN<۶󾥊v,"♙״)a֝{C&[0LӥT*X0 Di bz|`1+LNPD쫞s+1kX D%EfjsL t VȈ +E izDf$$kX瞂q)܍fAW }J: Vi.,}:4Zd)?[$ݸ6?quYO,#w$#NjQ"Aaaʲ=$&zv#;E m|r' $$^'jq@4M/nR`xVp;pifq=MLTik˧zS<_"L5iM4YcdE?uyo>-ڭ_`}-f!5IENDB`I.xPNG  IHDR((m pHYs  sRGBgAMA a}IDATxKHTQ:4c6-@JkmB\ e *"evnl]-" E+far=zQgxD{s׽R/$BP %<G86@v^w= Z<@gW`%]S״hlB>ӌ[;qd~@#?M &;_nU¸}:C{,}!)ܝS 8 `Ɖ GۑI7Tmhn'gWd3őQ,،uo+!Aodqd%E r*JUnjflɲ5V_?V[_'4 5myyZ~bq8plo\JY<=鰾ڏAː?owwa\߾>lrss3pU,@%uN("&yrp˰<D:RA[0(3+U𯮐KSƧVlw_wsv9h*S.%%đd!vA y-7QI\VLM(*l :wa mAn J -D$2V4=^'KOܒO13xIvF!ۘAɔ3 p};펨*;Z$"EIak n/?LEu6I@\RUx\wt5̧j* bht2'])Pü= iPA(unE{cBQ; ` w4XA*qwbJINJhB'9 ^a4ԧw;Tl0t6h( 4zF%~vΐPk؍Rχ|_&癍MG6gLj2ZD]2kx6q;YWyixmUn[G +.>8lɶ{A#%] 4(ԙ'ѻϟ<<qu򂗉?_ ]x^o;v||:wOǷv#"6 , "14B*6$Uhrl aPZ PvE<{CʁƄyEzF_L6& 1E6jfNL i`Q=}@-$y 8,~&ɋc,(?9r{F}e6!(3?@ٛ"BA.b p UcfheG)rŀd_~g39/׍F? oظV|d}`b&r(΢:O<##SrMKpR$;ф2OGX Pm$}_b-잷;L6XK]b99ݕWt(z0Swrrz`.g#jn\$sn,S-Yqz| yEyY1G[;r}`XJ &ΠdEQ&& ֘PnqvXÒtrx(xeٹNes%PD'3'4<+C|tI!ZqfA` QAR]J=4LS?4f K SdRNtWw:V4Ȝז|BU ƿvxWy?:h:Hx340031QH,(I+.Kg+yr-ZɅmNc!DQRfIRirvj X}Vڛܓy0`%5?6.lfi߽9r-rUY_Vb5aWߵXk&M<:,-195)??ne/:Y~G?W,K,IM+5;kӇ25+XfIēU yD“~c2J 췞Q~GfU9UB]__:`p-fSyTC5}Z_/NVVb#6(TUf^qIbzQb.Xe앢E/.tqL{V=sݽPىى`EGEi Vdf+꿞PE9EZc*ƾb!çۻ SXVO"}3m잵p^P)PUYjrF"$Sݮ:u7֛)ivnbfNr~9Xei>W[ej'^ o4y_UsUojY8ui7` R+X)|kGIWv@UdU3ߟi6i}U VS.X%o x>i՞慪)H,)J5.DP>C}f=;f,ļ̼ԼTH)QN \g~.iQ X:`J?볳X3ͨM)+)J,$ܛ^ǖN s E*lHd򏏮+کƪ^i)*,I{-J*dz.É |}X^SY7r2Hp]d=mД!PX I5<{N!}ΜgyPuy)vS5MW7({l!x͎0 } wQReo=NhAl !F_ᾮm66jJi\޷eO~}4䁞r}:5 ߧqyeN*JePXoU0ʁ U;*4kU({ugZYuaB8 rWmfM(l_$`kI0Ē+\ B Etg 醠,hZ,)F,%AwJ cwsl'MlNT~DhD̒яLFj=%,!B^QHza#†x}a't#xe?0{>;?;( lCGmĒ/ w=~3u%N1cY^처סr{P(F19Bie_ӶKަ0;<Ρq5|8d2 Ŧaems"䐸-3!V8=#ʶ,l¡Y6|rXlJ\.X>p mX1:cS/msx&N@J$_y7S{-ւ@n:<.o&PH٬އ3=LӺ CnaFCPBX08"sBD iddK Y=#Bz)<#Yj3N'| lHBBUČ$}X:O'PmB]zBTL( 8^Y;¿(@§HUA4ti :J9Y]N{A@\*Qe0YH2_*+w.չ1!֞>Cv&!7fis S3_(xuOo0 YH4smGqcIF_ek # i;ޏxOcmiyiq;V✫`S_ɠc?ՆK1ܺݻҵf>j?`vK3xN9718f/q[Z!A %h eژ)JP3Eqʪk-(k-p0CyRW1/:OيPZf6P”-;JH e]<"y,*,u)Pk*oSb1Ųg!SH#qkYhgkYwI$#;5$P C#x6✣ <:g?gTݏO|6xUOk0 ;[R(K4v+MH>pS6~a0|*Ӎ(yƹ"*h`cWQokc7ޛ˵ԬK_wcYmxzt#Z1pVKܱ|Yvj :2lb=Ru #D = "&q]' /rq +;)if!d+nO  Ai6VA}@@ X=4S0Dv^%%%AP;so[= rDxuTˎ8WYk9@$ag냖,6@ IbuQ3,_t<_v}{{YJi^(yX_~z};a׷)!N޿>{?Q)k)c:Mf_j$m!&SZA.R_K9zSC2UXL33;d?a?=}Y? ?UPI3N;,TH-U>OTmE3@,kY`24X^g6lh(rG) Y(uQ@+vTQ`,gUZEi}-RG)l3DndL̍Y3UNi¹3 m7X[U!'XA7\cL/9%(5%CQ)5H`:ؑ,%\bkdT^ 5wf6X2j0R=Eh&~1JMcXW5N!ՠN478`0c97s8֥ѣ((Ʒ'8Z%İw01i{LTJQ}`,)!ܿixS'{tSK4~of0<"X: 2ga۶x51o0;;ۘT.YfGB$!IM__!wO}-8ӭR~Ȳu]q58_L(^A8u ^T]sJMԩt߱Tin[U>@[o K`=l=Gϭr(\cr0900/#Z^\hKBhF `,Ec5]Re h&G^G #i:[N ڢm$h3hb+ ;$g]u{maElŢQR32n~m ndHx]TMoG W3|mar=(KX^/l4bg8>=/N~=e)2|;'/ur&y{?8_Op;~dժIӓyt:">xQ,> Uz7OghAWjPaF׆b8``fT$%p(jY:L;BKGlGT!WzaՀkd!Wu`bg3Ʉ1Wq0]Yw%B3UṭxBlAHb;HReT!F)f/-JW'r"tq0P<_k$cVSJҀ]9$@. إ!* M2FeUCQiA 1IPhаI .8EWaCr >t 9߉*gz`l.n]}Ij 89 0JUe- uEGL)x'ˀc9XC-xRj#1 }߯gɶdN!I3izY `,|ȷ=}!Lrubx~w}wzZef 4i&x!pw2.ӥu)j “fSu8#2*Jrr$(g(wB 7&;:V l2̌:ZBs9H3"\H>Jcʾ#i*, Tw(V_?ԕxUMoF W} W1,m!Mc,^I3r6: $C>>>t ~jy\a]iV.9* 7/V5-Zt}5&oG\~UgYfݪNA*vk\ Vy`810ZylO/`uw8ݶ;<!Ot n Ѝnݾ9n'WvV"/EQBR}0xH GGJB#[B zT?1V+?AL3̐7)gd4)4@m!1#&Ȁ4 L##51PQNΈʄ "hQT Hm 3\۸& T(sH|J0d4J)|6G*#Б"| ;"#D"_ֱ݇_11x]Rn0+yb]9ҏP48A-Hą4,f:^LnY>9Χ0> (/Sxu?\./8Mn!0SRY*,mvή93wnb=L^ Ut?}T:jJhh]ARd;MZ *SDC;utB[z -idBκ]_1jh$ B/Cw!X5u ٌ1!-X{LjpA)~N׳lظ5ur;5vB`"6_@׶f%L1F$pӷ6}xUQn0 +؍0Q<E) 18ҳyRU4an+qUSkh7cqPn>]\<<<ȃ˷/R,nZ/w^{/˅"}Owᖮ/(dĖYkgL&T&g q:ƪWS\MbRbۮ>1pϒCXG'esB8#h[1T%+ٓEj^?f\}>-ϿmHtdM|;ww/ҢC_kC*F #@=.!Ul)RP!q,ЙK߰ImU,D'Uq%陶vG$!fW$E~6FZZ<]qn GQȰuT"dx ɒ ao{_FEMQ49Ѷ`Eyϒ3 ^Dr)üO3gCcFɤFYʢ4?;dP}1T@jE2uh)&9$sEuTUd07BG0@*m[K}nlʝ򓸢Rӄv}zw-ՑZ؊| ? P2Dța),(sq]Iq:A9K=e9n;L25V%R O{"*h~tvD/[kXCEɓ62q%V.F+os[ =LZГt =@۹tnE:S:[礴u4u>yx:+WLT 0T8Z,q"lĭ IF x`Lp:u(L쳣RF;KPd)sH_CC~WO5U*3|dQ%>Z2j9E5EůRY !uZ96.(P-RNw[A\1`lU46WLHvJFF# (?ZCANȲsqAЉfocPgT.Y NqB/Q_v%3#r*xo6|xuA 0{bۻ tCQtKqE>:>OƆ.I0[Cᄈ܍ `7(Nmߣèו?vnU*e} mJX"$䂈 ;obUQ'O+X(]eD벬p3'=?t{xQ%x}RN0+FUg8M)ШgAi{^fҿ؟òi񴫴R-qXéӥp9t  jj4[q}mlZ-Fu(5&\#U81 Ӄ̝TVZL7.ednTI2h!j?2.Xs|-Yg$ב7 FiMPwzàOJu3iUhBM~N؍|➂g5YȊ._PhgY-焲 9xʲeBKDKK 4TPͮ\P-,L LuY!PDd9Fd''1z'*U\@F,ݎ j x5n@C +=&p+vKT|}mKϖ׷鄟K60_/m;j "ަS|M" i\ʦ~^ߛmγ,qB yJZ Ԡ8:XI^3 θt:h2C3vLe(5B! _ɂK2Z5 6Ů*"0KcU8^hɭ0#T:sSK5)Jc]PA`z0R7ݛv^>qagxUPn@K}+2nR H[AҤi^;\~YoUm6WW1N6\V)C/J6ctUs&m*#99FnuB^ I;+X"^>xUQN0 V956E8+iuRV6_ !R_VyOcxzY,׾V\}͇t+GB@szu^G)գ& zU;AD #vFF>q$EFȑ!X26V{̙$ا4侫aɣDjѰGYFFؔtW_YO~B 0lfEx!̈́X޺l6ghca+:2/,[Q@!N.㍡qkdS$-k[?Ho+xU͎0 } =s"R~$@\zp@ b#Y I=Ht?{5<_m6iιt?5kbCC?yӵ<xy~{m~*1EqD37Ks#e[˟,"VՃ(mBIIc%G 9*LYD‡ ȴab؅Y8XH4+I6S>]l82?ֵ9-~qdPfS;4hcAj]ߧiz;:nseG:QS CSU:,*j Ŭe=sHiH%)0T~Prz }MvqOѾGxmn0 { BlђHrzX vI74id@'y;t:>&r $t獂|?ʀQM'X,u {8WP~JcU` _Sj*5tuU\9zjvePCpa[Ҙ!TVcb=€[1QVtƭsq΄pـe*G`7eUiֹZpk#?ˤPE)pIًHe5lEZd,ܴUkǷP|EZ6B3ڢQ].9F\b؜S ktjڡ;F.bz]X1i,#_kFs@ 0gE$Ec3)1J!0Y[ׅ9FGEurEKFt@'Sp/-FTʺu1̬ìH &Fv$wsG"Ҍ|)n#} JYvϏPu?Fy3h8/xMϽj0@OqKqeK@GS+91CSm %\4q:߷Rf3‘u%v-º=n5k.cI!M_Cֱ0\SOvZ)mo؏ Gy#jZ\zg+Dd##ZuDG{GpkUXG\8$` Ԉ/&`9& LT|arC`<iυcgkL/8-0xUn0 D~:SdEsS[$h Ի瑾>Η{k4^jY,ϱfhh9Қ XNsk.˻n<:ϜCּ2@F"#k׫AhJ!Yz?UOUt+#F X*i`myG""zuk&لE%"jtR9OIGo..2'4T#@ MhJ;H.k0q/A%SV[.6"nafM O?am"xmQ[n0)$EVn ϰUb=}A[ `vzrnϦx5*"s4; hqZ});{]Hr|z""nAbۻ7 }[S&M䗣MٟQ pn]=<}{w%Δ6[$뎺Ukatahm6OLF_-#qL7 3h梨0H(S2:xO)>RB C."HC5^Ɛ)!r԰Bm}YȠ)"/\?x}Pj@+yJcPϹ#K>sUM1kYcJ8} )˲؏)ӯeix6tؙQL۳a._:L} ]L Fr͞L\BmR^ STyrI,w7/?bM5x31BÊܴRccզdDDpO)3' Xe~bAr~IeQQ1ONBQn| :}H x340031Q0607 v4 4 57+KgvnT븧$l_a{jĒbMߢ֟(Vh{+](d&cavs/ؾfX7Q xm @{Os CO`ѡn2N:Ί;J}/APehɯυD+ˡ󁕽,(^ RGitYiԴsr\@ZD}l%EKt.۾|f^3z) x>gtJxxqBofnbz~qYvEnrҖNi&feInI鶶J\|?x;xqBsA^~9骨2粂_GTc@[[Z.IK0x340031Q0057607 v4 4 57+KgP4F֙ͺ%&7:n|GH>z쯓Lgss$4S NM Xk 6nz1Itroo8oAHԾ\NRt`&a%x sb``p F $'?c``tq fztc+W[ew]W0ymaq}p [s7,;:OYX9wJ㾎z>_{] M$?VK~mjdb&??-r[I"ywVg>|yIޚ+Rov噋ErtzGj}_Wx=*؋Sޔs c\k>4os 4s{ Yfq̴#s*˞]ޥk!b@-[L~_]`s˫C82N kbR˂FCc=OH{R=6F3H,"<%(rdC*jnv=]6\Zzɤ5"MSi{{oEX(k+UEyjnֱ7gG/ۭ?e3S(,YXZqy._=W-I|Vݖ<) Š'x;xqJP"(Kߐ| m4t[[Z.} 2&xhPNG  IHDRF2n:/IDATxJ0Ǔm70XiŶis0H~W%_reGn J>| (@PA%J>B(i$'Nj{[S]}||{B{I+J:Dܒήι1R#m?"2ƴmfYuc%81k-"Q:,kJR*)| (@P?PW8XDO6IENDB` ?,Jx;xqJiJ7OȨW}G[[Z.O z6x sb``p n@l$[000k{8Ty332K|k{1Rף[˓Bo\|Gkxs=g{nW{W#u /(:©cK[4ߤ|ͬcab۲K&޾Vذk]a|P^.ʭABkۓsZ&{-n__6\ۖ[]\|X[QA噻nmȨ,-̑< ĭQSS=96^K,Y544sڭ=g._f6CWq]~:g{uS*"uĚ ̇08{~-*gK9iVAn|כpbm8?nӧ߾xZN{Gݻlks9yӛt ;MRQl19k*=|x&Mbbb.)rS՞xHe=Yqogcp෈ӃyO+t6.^3[PۇYxSꕙ_Xxe۶r9%uC~ 30p˵{ɈeSB"e x;xqJ tb*BG[[Z. tx340031Q(I-.NK1*Ȯ+(an6/&۰.TXRRT`TOZbYfr~i_kkKxɢ*/(O=<#";Ux*k&TmN~z~|Yric^qY:wMED\yKʡήXDA٩:V纾u5Ț32KRh񧢓:KK25ߐٿao]Sn1A*I-.M w6 , +(an6/&۰.Vu$GvOg88C{r%(,﬈l@Uxڎ¾K,N|$V53$cP@UN%Ά.iDفOXA"$478K_([ [<xqZj̼ݴ̜ԼT%+ډg-Tx340031Q040xc Ir v +KgnO/^.unAc ~{>4$K/!Kw\Uw.x%}maLdD)p x340031Q060**4JqJw+KgvnT븧$l_a{jĒbMߢ֟(Vh{+](d&cNᾝk}Y2yb7͢x340031Q040xc **4JqJw+KgnO/^.unAc ~{>4$K/!Kw\Uw.x%}maLo<)x31|ĒԒ\_SUk|Q\%{oU$XXeU21>5xc'ޝK8i3DeniZnenIIyqAQ6ӏO9q3>@-| &5x340031Q(I-.ʋHv-O//+(an6/&۰.TXRRT`TOIjqIOiQ`HzQ^IE uw|1]7y߆׎_tٿrvlg]eqk':M @$478_ߵӕX} s{4ax340031Q040xc 4K+KgnO/^.unAc ~{>4$K/!Kw\Uw.x%}maLB&( x340031Q060JIsLp +KgvnT븧$l_a{jĒbMߢ֟(Vh{+](d&cg6[_p2E;_:x340031Q040xc JIsLp +KgnO/^.unAc ~{>4$K/!Kw\Uw.x%}maLh)xWMo8=KեRVV`ݶ4{hD%D%Q8Jqݢ(z $g88z4LoQL*iOPksl;^(d8 ΙL%  frd5p]$6!t5 1~fx͔n0EW FN> *޴0DQȿwG%5d0D]q.\RzV>db6F+4j oIW-" C9?V >&na#PBKc3U5-y z0g3fÿ]^w?NLS/ء;C}5pDc οmɇH,ef:d xp1y܈coMdx<4߄&Wvx{sgGFb^U~bFOy6LKxTn0ɯr EN;Rޒ-!ڢ ¢IPT#%%.,;^j!.v] 9 aX=}W!Ҏl|wn;nUTZa9(5 {UȫCT]!xQַ:G%X_neQ*`vyV;2DcZYL/H+x֗ $cit[wy9KUѡ~'H[ؕ rrDrZVpf=%{PkKբu8N Irqög j9x<$JmH!qDMaz4>2N ^,o ]*ɒȎJ_"dE#ޚ jVŗ( 7M6ScvO!pOˇf3#B R. G/&;OjH`;?uZ!"H.+=|I'~NO,i&Q{㪅?b 15#K8xҥ vO;oEx= // Package tests provides test token helper functions. package tests import ( "time" "github.com/hanzoai/base/core" ) // GetUserAuthToken returns a valid auth token for a test user in the given collection. // This should be used in tests instead of hardcoded tokens. func GetUserAuthToken(app core.App, collectionNameOrId, recordId string) (string, error) { record, err := app.FindRecordById(collectionNameOrId, recordId) if err != nil { return "", err } return record.NewAuthToken() } // GetUserStaticAuthToken returns a long-lived static auth token for testing. func GetUserStaticAuthToken(app core.App, collectionNameOrId, recordId string) (string, error) { record, err := app.FindRecordById(collectionNameOrId, recordId) if err != nil { return "", err } return record.NewStaticAuthToken(86400 * 365 * 100 * time.Second) // 100 years } // GetUserVerificationToken returns a verification token for testing. func GetUserVerificationToken(app core.App, collectionNameOrId, recordId string) (string, error) { record, err := app.FindRecordById(collectionNameOrId, recordId) if err != nil { return "", err } return record.NewVerificationToken() } // GetUserPasswordResetToken returns a password reset token for testing. func GetUserPasswordResetToken(app core.App, collectionNameOrId, recordId string) (string, error) { record, err := app.FindRecordById(collectionNameOrId, recordId) if err != nil { return "", err } return record.NewPasswordResetToken() } // GetSuperuserAuthToken returns a valid auth token for a test superuser. func GetSuperuserAuthToken(app core.App, recordId string) (string, error) { return GetUserAuthToken(app, core.CollectionNameSuperusers, recordId) } // Common test record IDs (matching tests/data/data.db) const ( // Users collection (_hz_users_auth_) TestUserID1 = "4q1xlclmfloku33" // test@example.com TestUserID2 = "oap640cot4yru2s" // test2@example.com TestUserID3 = "bgs820n361vj1qd" // test3@example.com // Clients collection (v851q4r790rhknl) TestClientID1 = "gk390qegs4y47wn" // test@example.com TestClientID2 = "o1y0dd0spd786md" // test2@example.com // Nologin collection (kpv709sk2lqbqk8) TestNologinID1 = "dc49k6jgejn40h3" // test@example.com TestNologinID2 = "phhq3wr65cap535" // test2@example.com TestNologinID3 = "oos036e9xvqeexy" // test3@example.com // Superusers collection (hbc_3142635823) TestSuperuserID1 = "sywbhecnh46rhm0" // test@example.com TestSuperuserID2 = "sbmbsdb40jyxf7h" // test2@example.com TestSuperuserID3 = "9q2trqumvlyr3bd" // test3@example.com TestSuperuserID4 = "q911776rrfy658l" // test4@example.com ) vKx+Wp WY 7s0A6xm=o0gWؐ Fꐩ+ ɤJ2Np,"E݋:˘<8,mlWL.g,;A6Iw>Vӯ ISsf߮@@l/0N[;ʤCVNxa_#ՎMOmgUpp Znno5VLYlV+,R[\9V&zf|N m? 9F(Dd'pJvXn߄YYvN"])f9Qix+#ƽcj>Prx@#;>LgޢŬB<)(-b9"G2)Wg, T>( ~ Wi;A+@ufgI!2x31Ģ̲T]sfzaCM *JK22"|ɼ!tm{ ɉ ů8~~;oIo: *[#q7?+ ٸ>y\*(cƳE鶜]"Ÿb6H$d3(N:7F bTWATeW2Lk5 '$xkT߱?][~ V_%= $?;5/ (mW61̴bOp-USYZpt`f?;s0e/8qv=xNM x340031QH.JM,IKgsgA?IBY2gj;n(${܎O^o{Eùqw*S+JV^m|iף{BjKy&*bXz~P{1e ϛ'E^x3;s8k̬QŽ M O=V-+ O460EwxTMo0='b)ȹTz([RTdjbGK3c; d{es'6 uyXEz:6f-:Ww7hwo݅ QEݩy[󺆙E&,$h\ΚmU=jR=9(JCGɰ?بܝo¡Vsm,F%#(7Vq);(,R٦dl"*@-/~A+9jOً[&Yp*f< !e Xg=q2=bT*[0ZY+C!8:zF,|gOyj76!bGJ\UmHӌ8WnHf< xa`cB|Kuɺf0K؈bzVr7ན!T#x="TuBNXD*XuHg}izzIv0wD6t5&(]о$TUPuSFp0I2j e6$ @ ;ȩA€~aZP[rM| bzby+Hznzʹ%e +x͊F!H#ήN|79Vp R_h9=%Y}$Elgk) L6D%'Oo*HÄ^%Np@bsڏ|a(Υةg=V 5oYA]d`%*vݙP X/%nd(1?G d#K(R=#tl٭6AWiGێAn0uDŎ1M<53Cy?G]W_qxUMo@=_d*j#!UQ6D -V^gwMBάQ?$8ewgޛyoS>U<3D^JeX|}.DȀAD1=\T0yTx f5,/uٻeKnx%f$Ke,. KsL*K z݆n}x2M iuNy|&kc_zs^,KW(7TcY(p&>ΪMG (RD "6NWu$?aom.RU= 0+ PASV8M?XDF-梼w۷]6FoX]{Ń4Gǣ>F&tMd j'NB%/wy|t˛<8^Oi|7h6<ظaF Vl*[] aLTu\h7]+D(5w ~]}ˮo.]ؚlCqky&5O?2<:֐t5zwH|bbt@z9F#|h<L,tmvwٶKf*UлohJx;/zLt?GFb^U~bĄE<U%%zUJ'0MgެȔQy?S3fkaixTn0}N.RQ>ԇ1 !x䦵ؑnt^'Rb8}9V-7X68Jɽlzix4Vͤ y [-߼r <$Ζ xI' 㑶*i]N \T V8վY%KPRo]Z4XA+[g-zK{0ɂG",ʶ+,1!Ci~C 4 yX IѬz'DWN)́BgUh-1G68EEzBˇ8u|2-,ռGqTaMJm1SaJ-H6JcW;n,#5J]Re6Bvj\qIhX.079Ԭ MNrZwV'cyT_=CH8e5֑ԜOE# WZ\1vG1Ē>6vg(dzz;|~oN`}+w;o]NKA8-t9D[F8%yfPBy%dis|w(ùMiL(sTWLh3Z?]qBeGΩng8 I(:!swBv\|^^,>|zͯǤuzy֣F7)HSL nv~xxUk0~`c>val)ll0`?-'"Irڦ,7qy{w}ݥe90].Ě,76 ŪUBPym"<(l]h8G!."+*oU`R}(L°d SĘZJ{Di[x푳ia@> Pj,M 5נLԚkc`%AIP@I ߔZKRb=F}:f):25pjex\C c׷hfW̲&&-'3@`1TDžMLnDf |mOY=C1Pp߶*:L"n*+Kn?Ut G"!<Pz',1w C1yp|Nc}ĮbK{(p\vyFǛ ޅT%$>rJ* ]Y+D0jT=argرxG@ڌz*Mi]?)Q:\ m%]/Jq٠`sPڶ\V>֫eu1TW^P 1<GoVjD KLVC#ڼkv0 5uVWaA:m/ڱt"!xl.xNC<ɳu9nA: =V%59Q9C#@FNlXc6E#$UCo6w%ıуz Rʰ~xk-0!##1*?1Sb*ɢ@jsFW9DE1l^|Rxm}TSeϤ$"Q@bIMd.w׍{v7dQ3dxA@APP9D yQ8L^?z<<{v.wP(/3^femu\\(^j ;oš.N .E_W8V!{t~o8נXIʢ#_0+g3 +:&Ҿ/c (!VC2r]y79zU6 :),n-}5Ɯk?UARBY׮%ܓFx{v4~Ӵ,qu9Qki Hc7(jouuXjZsKJ 05 >6 P}'F|ֽ0RDu׼6kB.Eh{ B_ 9P6ǻw it04r4Ų"GM]I9ʕ~b B#SQ9VT}]dSEs2#`% Ya l-k4t N?HE;m»1ȁzt߰v0Bͅb)X D|0$ﱢ<۟# IՁwmc 5"þ{1 W>/SwuXкQ)pf1 p21ɱHx*ACJa2g[4ｮ#}^dnFqyDc?FX"Kyܣbf=EШڍ_\Zw|26Deݒ(\fe:rKns"k- :؅jusԸօ0 Ay!\˜5cM18cnj t84XŵHeǚXEU9B2Ԁ1 B}/8U}f--wیh-@Lpzg=V/Pߓ =c@F#zt"@.Ee/.,8.yz9B}(Y6:"LACx<I/uEQ8 C+n)< dlGd5O%M AAlS G9$×.|i[πO% Fz~46zRkU@<)h۪ U,0J@+M;˸۶$i3qᯄ ƼU S#CiYD%j`qG,<.+f؛VBq0 }fcIBO5p>@n: H1%P[-N`'m>_͹K#wgQǜp4`sOd*JstKÏƇ)d >fW'"cx|g¼2AxR_}8-=QljmHC۟; ~o{6ޅTYXmˎosT^7OPlv|jۖn7Byc!!\-e[[+t.Ҽn8/dNyQ%{ż-xUHN`evwyq9_*(9{mn s~9  BnvhoC9x5ߪx AV^bHT4kGQ0lE]!ˡa,:6J gzbm$3I|l!>:-U0Yʟi{綺\\B4 dfo4>B=@_ri)i㯶F9xr6o7;>0U<\) m_0xURkA&(zP Zp#a+B=DsHh P$m΋;:3mP<Ƀa ")Ϟ< l~7Iݝv)qq">b|C"l%I/ 6U,Ff֜t*]o>̆r˃˧G hSYX~բfM7+]>]Vs*5QAd!?SL?;oӃJ'zBBF&Fض2t&b1 n~jޕ2ERgbFF.{[=߭ʐ&Ju˗z || /9D{c|c P &iHAp0iK"R㙄T"d*R 5许@mi A zZ3RsA 0rD΃+ݭ"7V˟x͙,݅S:<:$Ð|z@E9 #%x=QjAfa&,8(jl1 A bf{<~ٓ'숷茶>x s('h`$k~\ZӆҊ BN3 k̈dB V \ #?%dV%ol| DNN`PUk8ΕsN( :-1nAPkь \f ,8^[j媂JU^ h(SWy%'aS4R=%z7?~ %{sK3j5pYtDvbJ4S h0utƛ>~Oe2y Q?oѓ'Z+zm-n9f{p/տeBx;)]~BGFb^U~bfm8{~.~ ˵xXMo8=ǿ@^Xi d?ڢMOAms#Z͐( >Y͛pF,J d7^diajU]R׫Zco<_0ZOFB:5Tn=+Sz? )Nf|.>[եdhBjkKJxC/o0eծ[|(7 }kk+W8̥^V];/B8x'jډ&3 f"L|-sa7Anr',A,0"ˡ1nst=۩&g5esMI'acJpp?i cDzHKο4vm4eȧlc )8&Fk%,E Dnܙ7VUQרyԷւy0gDVC5W(;[+1i, ?/PzҼjU Gm|TJj"C~EB9C>Kc!ɝޫ( P*łR#|էkIt3)!3PXgNLwdȅAP}B9,ut(o  e$}ڷwģ#?/*o NY4S 1aY&`sa:;.+4qp ~NGxKFF^S$M&BpŶj VkU wM[9Sg+i?|ny=z$K3rA%҉u:RLBׂfM) %Y3F<͹^M͸"-. DZ.*U)7jK_d:P k||L:V+ԷOX3?"cET?Xֲm3]af#8Ɖ?n G^,D V?5hۧhg7f<$N iYWQ0'Ն$mɩ{F<>8isC}y@3oiCb|&{CwLc01$<+{L2Mp 20( x:uz QtXdƄq04) @Wރ7FcHf#I= D[ƒC|`AFH1J@QCBR sHIkcRD.]I-FՈfD 1["Y Gdҥ:;,/LowP;c_#/To@*ӻ1jC+4QN^#NɷtM(,-H{16LF$>jYq~_]7F1<\8HpGЛP[}y}!˃$ D [o}y1dAb(80㉢kPgiO6Hs#6%Ut*b`Ж qؓOIEkfD s{N5RUࣙegB]4-횰SOylF<5c:#Dz[8sN3ѾGt Bj fT2X,l-ÛMv4q߂'/3y˾oTz~:nFxdɤ:,o ~sK1:M @fXR}tuwbJgy0ӧ>_@us:@<]p:0{4nϼss\\PN7M]h`jw(5<ӻ2wthx[3WkɲE)E%A> S` )??gK9Z..}}2_1 öx]O8_a"QljLG2+!%K!_U9˝ {'c'= q7'MǣU<Ј 3*o@` 7,t3g|srdE0Ft@n~9Co-:^So=%1o'v~xi["R?猯%# j2Ca?BU`~AJS&v~ <64&96U)ɳ.P\yLS &TH0 W[I=󠁦m?:V8Z9`م6d2V܆ChN-Y(S4}< Cé9Tȷ?V0Q&5Ns/19J55^drJhdRӇŬeu)N mA(WK|u ԃ=Oxo[Uidgd6 ,M_]Z9\\ fOZ*ORE;8@<&qJz9S ,!wdQk0Gn޶+q`a!N3[cHxkUC^3 eWecw^&lű ЗUQ{hg =E$okFlNJ&M/k&g0͖9ܝخ>}"3YPBsUu͌rN6Zܽ9nr:S. }QZM9}^_`ר\)fꞚh>&mmtmTNJK{f@oK]ؗ߀݈jնtJ`*;? 2C~ZviCz4]ZaXOl֑Ŏ x;fЦir)dU67?`9W1,#I`aS.dS&j gr'  OIFVr)I|O8W<xWmoF l V29s&+C0$]-k(ڋtԻ/y/`X$=|H-+/؜"ID*m!KFi6ů\r^|5J@(kFeg%]ac_FJƯe[zH̜ѓC#8?J~j@ l6 Vg>pxۣB!5N&,:6赚 x6Mk_Ђi Nwx’SH?wڛV琟|6d(l1O.[\fk~`׽ pg% gf58* gpQgp8E0/p/8Ə|ݐYr-fɎ~!;ݘ:n8gg;־,i47]~unܠ0`o#'5ag'nv*!q!{8զu6eǛNh޴i/2!pK n6 ~)Bu#nO.);.z{SC[ϵ(kwG{3/|'HCCk%M6XUkL@>t([Q;6X֎j dD5O$[]{Ol GB!;{S732ۙԙϞk~P&:ҷօ^ g:#N0ʽoEO |Cs[w~) $ck-jkoJ5s NB#Ol]&@l6x'Jz;LX)axTAO1" 3&Z]]fVԘ5hVc,eTvl;H&&Q 7$^Wx;bL<8{k~˿ȿ0;`==NNcH<`e9mCX 8(ڶ9Ҹ[ ƸkpщUŽc=$Fb)% 2kep"_ [^HV<=](m1$"FhWdz8%۲eMkul >p65H_zV ,  Kup)kz Q/e)2%]Fd/_}YL#8> w݁<%@,y+զgt(F U# ק+Шƒ!k2c{:5A!lwIjuO5&Xx)pםub!rȖ#M&\< v^-OqG@}S5n6 &˼\dԎ5CYf<3GBLLLc.$Gz@kDuCjfTȑ_$jH NGZS#D h[-OY-V0up!^&k4ɡ`涴qG܉f\1 j diz>ɗ%B$P!;`DDJqm/Oim8N ψiZN wa,&?\f|rEJ\bk"ֈ ƙV!y,WlK?umI@nR_EY*vƫɍbo xVKoF>bƒ#8E 0 Mk059vݥe>— YvKѻUuq6k>QպjYc3,[eU;tӺvhRB-KmC9aYU RI7.1}/4T|#CsG1"jv|xԋle5$ٌ?DbdK ܂VzE'^4 X[g }t,VoGpR+bQ(3c(NT ɿ(j¡Y U# \u ȿH}Hq]oD~Vt< /2jtd5fWc3{K(܆,YBl ; fH:HN&p;Xh'c/Hǭ7TQP5@c+:;%歷cjtMdj}w hhZ _ Th?׿DyJ`?T6;zkP%Rxa2ސsaʅĶGMX \ӊM1v/OCA60wJԼ|o4jcgs0 3Y)3‡oyo-t>4FtUl.b#+\xwG@ی pҫ'di0L0egk]j|oB+юCѸMh M5\?h_ܝ7,M~Z~| z]%ݳ@9(L%=oj9=yp3ltd_7V+6ӭ7J;'{oف=X4 Ӯ`-A/4xeR=oAml'@HB"QXJ)P P ls{GZ+_iiY{_l}-WY<2Gj `yGFy vk5]Gʤ`He`5-rwG\ 3>Rq m3A-ba @ҹSזs#T>WS>-?#xVmo6l N<&-ƒH;(m%Zd67Irl /ޏϩ.HTҖA̔K2!Q v,V5*UnjnPP%Etޥ ]8F2"1ZDƵ?)ݐ9YkZ*]uq i@g"#)JpgC쒓FN$HQ$m€8'sЊiYq FPbkDzVfom2(q4"QPYcd_(H19mJk_6m0𻴶64 g|KUCL1贪|>[Ks͸IA5ZCŦx 4dW0{7#+ n&Ъh<DPtݛ8QR2C96_Fo yEEo _}񏒦uISi;Vr;5̹̕|R Q&r0BeK+_]Indrv~10tzy9fvT-qf0n\/Fᆷ Z+H$d6'u|P6oj D@? *> N{U4Vڏ mgdȐɕ6KZ|àf}C g(9;;O$Z䂇M+VAs}^4'ySGO5pqI%5˖paH'԰5 pDy+]Qk_4bh>6$rc?'O5h|Qdug|',v.γ#c_27OЀx7.PwAMrؑ jbipo΃/iR% M񞠪߭vj,3 62(/UrkJF<)zOwM5MOIKr K, wt|r͛'xE43X./W-d{m߿?^xppç4-n [ԴۿdT@WnB瓎L؍2abnwtyr0?RMBo&P9'A6`>=PtߖN<[N’4ԸUdo. Xx[ ,_*NKB|&fWpKN,IbT"b0Y\ T_WPPX\R X*K4TUtR+JKRSBju&sI0jNra\ĥ\A1xk%<##1*?1Sc*NJ[xVmoFեp¯`Hh*IHm.E^uw׼(wvvHs33;vI@*t|Urtܔ3EKRl#9s,rTI/ ԮR[X"\"(J3+Brӹ|gT D La#H]n㬉[hD~^p`r jIbs#j5;-2<-kkhԤ(FS뜴t>|G'Vҩ847/TPF7/ƼJEXJa1IU(יiФM{!#+z< ՝Tm'|lKs +u{}q NzU]*UN`i8 LdIR:uKA%kbNon!Dq~:ź,!F`x^4{$ЋO"2@4?(x{ &0<cHԋ!J$9PbHFD@ FHx8B7N Ed7NoөӝNM˲ ;kpm])R& jL9_mbC{}MW$/nܽμGMlҷgZ#D~j &36mJ)m-퐘Bʼ8hm"smCy:Ve8_\~…v[[]S#=i|*]8ԝɠwZ/貏6ٳSkN3| fjc+R^mwCq@~WlE\[;qdɽ_u d3;̲v|ϟwpP|_y|M ۴Xm^E k:HvxBqM[Lm8֋Ԣ_a=i`\WGKa[wVr4FβA2[.?Jir8䩠~Ӝ6OƷ8Mcϱ-m) #*\2ås|~--O9l\n3…WHփkQc joGzoP ]ʬ,3.JMx{!Qh#GFb^U~b #͛u >%x]Sn@U&P &I ]DbQDB*P:'{ƌ D+v?' Ė ;fNչ|qqiFșCxxYq ^G``ІEϾ 6B),m6UFEE/8@d jZ$$y3!==pi֖ar_9{'êTA-N#p[+ ItxFg'z;#"_ưȘA&:j7,ۥ >/jH,^_uaӶ]4F  ]ꄶ'u6"JxtTzSi]8TAqg(u? #D@ꟳni^p)uS]掞)irHRG %Q2K)q"(TZn 1g1?]0Ň띰% {= /ҾM,b@`n0}V23ku\4WR"ydd)mW^#J=uQzY\^jL2uJצO-6xT{T-]xeRAK@&E7mKI1%[D[zYYEЂPz)t]0캕ye.zCz(w83I9ޛ{7^ %}F]48UH;Iso{m Ct``ZjU(Zx^8N¹8&(& (K>l*T^YMpȓ# q] Vzm"8sl" U4vjI:!;> }.Vʥ1P H2 էGY)R!nM{M,,ڿ) 9# /\`E{Q1pC8M9(xSy1uNW `/K m~凥C:P|zr hNE15xmR]@Ҡ"^Su HЇ(td3ٙIc7-?Q_'N& L|K;PmD緓6+ )+\'DHFaAPͿj2 7@1XEY B|˜SUiv/}0(s]C9ô9ƿ\hv^L4 OtS:lY{hhF񬜀ySa&u+CլV= #9$׷8`N{7jkM{)\z/|Z SmxSoGRj"c\:^J$b U4Ug{23qPdqi{PϽ38qW7ڨPv7}7ʱX"q!YF5<%L|&a$iqZq2.2bsZIi},tiaw- ,žh:=䚥~2:fX !taYZpJR YZ^IɡΗ/__#By u ا,WdGڕZ~uZIoWlb ۦ*_?PǙ+K揙KnƿgN65.夋zs? x b;V6O&xWK+fonpܒORB䂐}AukA VXcdbp;g)ͯrzN۞|_Hq+|g@9,cNl(‡zvcj>37f?ԝUZpgA*PFɷ9PJ,A=L0s0MS[c1Gݟ(PR~Պ6Wk#XpTCs˹pK,IWM!`*|:O/].[5TR i~RH)ā\a0bynSDum-l{RYm6OQ3^kwl{5oި jj-I|kұݪ۵ )bVvC̳b]IR-L3oS[~˦Vy|o E;xuOKAU) DRD\к("H բQZ]mhzsMjT(H&N \|LC?ơSW|Q2Sm`Dk 2ʼn)Kds.`"i:ud)+>c.Ԇ/2E`xuTkA&MUSPlAI2=JQZ AJ4cwg٦UJn[уx 'xpf_{X޾͛Py_9'T)۰ =_qqXA9 Y1"̼ba^fC,> P3&q l4r㦥20CMTracBu)76 J`8H\7/@󌵩Oç#\.D![U6&y442 n(0&^S 16YǍH/a)/3R"~{yql&^:hz6 :Ⱦ,~уy(QmႾ4O=dy844*z7qR+՟KjWj%oi]u;:*]IMT=7A/̾Op_{gCxmSo0նmrABMoZ ;2`CSԹvj*!qD 'nH !ā;lX\b%?̿#IzxnAQzAc O"̛65u%IuP?b X!B+f^>^{֦dDe[:@xYrz!yJ8pHz75<B(K<ܘm4i\9p]^Cy6<эw">,f2_3WO*KK`dsJqcY!a~W.ㄥZ{:qFChG>SVn&h`~M T0E#M5lkGS߫ KY=37JmVIk05),: 1c+۩e hLxG"vXXa7HݯՏYOk/komEC=tI 9e avJQCp3h]$H,`A:$!rq kF:Fvet!?\_B[Db=~Xu]uNsVk}M&ti4mxS݊@Ya2ʒHA X@"w64#Lv~){텠΅3+s^Lꕹ}9s‡o޵R:% ʎ:CTZu}?NQ" > ؐ#xXǔpd V܁0h""p RGsSZ=g b@T:IzOR 9ї~!![]S^|tTif ~eV-0HםF#MNh`)ęM7Eу>0B1DpeuhDT/*zVS}_ZBYFy΢5lܾbr`3B?$MƙZX}.qyͽO9#6c=hxl㻦kی鉶O0J3sNI?yV8$Smje~ڠ qXTZ[0oC3axXn8}n}EvLz,ٙ`&ޗ phjseEQꋍ&bթS,J|-oU͠y0 wa0 e/tuo0fZ%z Z\Kwɭ+E^ꕛ/K0{oj|[׆o>A wpyw"x [nv"a^q1U(',+ ^l%|#A^t&H[ :5,! C۶U4[o;%;宼5HlVtC=8]אָ)íG:/ }xV8 rG҆I ;d{!DHhd˷t)Eht[{p+M璾zmo拳`6Ӧfkޮ~VQtwwG*ru8;_RdUUE~7[%:\X+|}F!{dued[/xCC4 Apw:ܚnB,Bhy˟`o%Mi,HFs Mi y\BKXAh"M!!W?XEٿL,!.4C#d4E@(XL3Hh-5+h ,M *ЄKy#R4%4V$]ВĈ&W># - A eY"-܊h^?!1e$ rD >2)Z'hPƄ=vV KDK?\mNɁ`G-ibIth1V'82(iʏdFyGY3JȐ>ynH'¢@9:7Qi )L~EƐ Fu9 c0W01ݤX5Z fј$a44!3D%aHgxriFFKFj<Py.|x1N$ 荝T71M= !aF*C4$Obj e%^ C a>9,6F2_\6-0%%ňs.wI|V O5Zc|d_ZO` &A22qiT4JyCFni",؟ y!e&n%<%dc5G}/\;tc4L;,tBZaG*hY,E2C$v36qc9ĽZ3[B+ $iL撋˭U[%G4™_G+k޽6OpZ;-i[!з7xoG؛ l_[%֪9C3θzۻ uB5g~g0Up[#/;k5Q o5wlcllt gs+ ^pm@q. A߂4ǒXh -RkD䐡YD|P2ruBXǍ͋qPGCis_-a\-`n 15jߝOUL^zաn Uch`>|O'?|ycjpcx7~2^MT/m#S#=4eq$8O:k fr1<2 ?k]OW5xRŏOTRA0=I˪>z0{#H*)fx9MΧ^<Wz}7LDx7x;w'wh`I6gGgA}ꫧ{9*Mj™7 r$5^M:ʱ>~P .tʿq'?"j-Ù^uc7DqxۤqEh#GFb^U~bƠrxv 'x40000 jwk**a?mޖ0@Ff` ͩxI100644 jwk.go.h&3SR100644 jwk_test.go-%tIf=I+ xVms8 a=IRhrӛ)iG$ ǀj+r%9M~ҾH>xt̆\^(4hYpʢ%ȅ\TD+Qɵ0#D&Z{}!qcTdA٤2$ a*!Ԅf v47^2|靥K-KT *$̌ 1璛ddL({x¹ 7O2guymAfVq2:5&hq1z8ht̬b=L;>ߎjYۘm=/rQn +3X0*51#N*kF`7Pki Q.S#xqD5^j`Q:`1NB l y{Êvd0$sE7*0d %/D Rty9X}ݟ=dULL[1i%KiGPc罿xߢy3% CM1T!6ڃRh4n3(dV'?/oCEECA~wbpA9X?⸉^'m OkvăY^e'~`8/9C@wa $"QXPADF<ZkC.6ٺ _?X5e4p$D_ǿ{QNX9W, 94#p5m$:7~hh/q!C\TzI|Q |;!AҒ\ 3_= XL n /֌TGO@EfR3%I;sN%wU`Z W5=|}PLx= -Ā&E6R\Mtjt?=ᰰ\4@.5bLîqeJH,;hn}38Thw:Ńi\3A4j݁#;;V؈ȡFguKh+[:9vQ Y5Z3 HOA+P@˂)=by{Y#?ێ ,;jj,m]HG7|!'8;b+ۓP/*lľAU>>c^Űp';u.A %]2U#sdPHc'˾oz׻\󞿫$gss]•5hZAB~^tL( Puڇr•եȆhZL{tX0N03|3'N.W}|<ٲhy/zٵڌY^ڲy+gpKA<.+*&k+tC6F!3? 3/ 2)2֛SJ|E{,N~k'4y ?$ax[("a5=\f^ % ٙ) y% iy)ۘ|xXmo6l F@2)sh ,@0nY,im)xAHn)M{Ct8cF>,׊I8,M"r WV8T%<>JO0΀JiA& cFդ38Lu&JձA%(HxI6ɬ3NbO>,TC>&)SVu$*X/8au|Q˔4-!#wN1wKYHtg!]~wz]{[ % ,`LDsX0!1Rq&"9!mr]ﴢ9&KX$=M@*p՗p]V]3xC@qIj^I)_- cml \P$#G^)ψW筤7tMp |#n.Jd}1dx?swQ z)@Ts[mq˽4 Lo$mw5.u"p򪶖]NnB a@O4Xj NGѺҺ w GCSĖ-l.6ehzi˻]WT^G6-X`v꭪OWq1gA|F:qhK* 7 6 "̆6*K in^x6NJk>L?I wxepQoļL<+7QN ϸxVo67h"L5ڵłu]5؇hȤFRv"G$ ݏ+]Qb0PXQ問SJoߝ)"6Lv)pS_WƔBobc7Ub4u3PZ [S;o z#2oc n: hUg$ thBBd0@ Uzo圷h?BG%.6DY ޓګLxe4hyArtHuؗNi2kdV /h y3 {8r-һ=,tp lǴve6 ◘%kjGd,rwl|ElL/mj[jwW'I$@:PQ:GPH)|X<2zhdCy4Ui3,e8M„MHÜyiWl0 >1tfQ鯡ټDiC*h.e IUr2YFr4C1f,]K6_36G-5"M1灐J6e` w 6J1_AaxlYejoeb*)Ɏ/c՟2қK;&mZc X ~Q(I077my#1"Ԓ]' y|DXt7G-7YΘ4Sl+4@6!y#}ԆUFwMe1`"8| hpELߝ>#Hk W| F<> }=z9z++D9lx Q؈->0,x8z`k@j˵j`Uưg.$7_3x+9\<|z1й)g9|^JfD5ѿߣ%*$?lH5:\5ts·"\x!1Yh#GFb^U~bƠ'Xv xWo6Wh"m%S.,m6>HE&ewGJhW @;: ;m4Y\0>JZqmQX%6J:J;))l{jm4ejU|%%7hLۮsb2.'LI((h4BƐԆMikLG>G\Vyl^3Jfch,$JK5Cf݆MH ةL ƎT%[5VcE9BLeje\im$,S^ |zEɳڕIPZ|!ւc@pr Xa(L,cȬah :>-Bcfn'b)2cϋtY.-m3tY>>ӿ \vtbuG& 6>t`0g{l"E;wlou:0 go~Yw#q!Z9 fEs {u>FG9kEl0zGl" 閛>14s6PTV%usK-5` `o*ERη5>IM5 bWt1ό؅P&JԂYu>LV^  2 01){ p`C1|~9A9VYڎ7JRRy):Q0BʱrzS fN)l66zByrR "jVhAMҼG Za'D/n$rWEAfc:BFۃK(WE=*̟s.7hS9Ly _~B =Aۅw@i0`\_0H‰ݎNAsr+n1q WK_A'=GWMK]6%q O USU';U:|/XxbCàv3Ǹ-]TBx)6Eq枔G,&] p K ɒuY?,[;:?y'CUdH~1CR c# 2ќkaveTwR9wex<%NҙHQH5Ug[G^3A+T{0(lsmp{gM9*IbH3,`#3x0\"J'HCvWG 񆍮L jEd{`|K‹\<"C@ aTS l`l.p.UDIOZ/T?/lcڼw0gx݅ד`Qmn"~s*쫰aI:XVlSծvdsf _dix{!x;!YbBGFb^U~bBgXj8w <xXmoF,Ʌw}[us ]_AVHʊfIɲln\ gj>mLb&hU>vd4U^ϋz{[W4uҪ횢nI2_rz5]нm8^vu]v5&89KŶʡnrяM}SCӾyWe^ v_yW7a7<ٳ%wIr $䫁lRYLp$emUl* P/"i5pauvvހq|/zFW+ru7?%yI{߆1d)pțЂ* Evn m 0 -{?99H&tۦ/c>'Q}H?\7OΓѨnٳ K}\UYnÝiNۛ1\kx݄647a b-gc1,CqfctoYn J\S&R -J&1cҡ ehXL-35΁sƿ(\ai mw[xQ\ #5ju]xz6+ZnST jK8)XUrhKAdՠ +![d5(7g0S 9]FBeV&1¢RQXB,ğp7QhQR׭$ޯC~P3R89yB&'^> R:h*hzџtnx;HSr 3Y"j|&%aH$ ::bipCRdU˨ň9Ꞗ.Հa@'XŧH]^9PJ O))v.U,KJZnR9S5Gy1+)hòגBnQ40`2W}Rq}s|Țs6Qߖ椒 *[Xd%GeE+ǁ =ONӏ{MpCӏoyѮKK =Ya 5@6סoCuS/2Γ0y|IC_@?hWp!4C]'&oaK ~]`2_A ECb:=| {w6WS| ~?] t;?݅k:废LևyC&]!TU?/ßL??83zK3Xc#WբE%bAUq?੊2OFwI2j$loz练АViJ|9l>Y ]|0i{G/d4đçہy~<^nc!mYvrwM⬪gLwgz3O_d|ll?Iq;#evȲt !:U|eatC% A{+:C9:bD)2͇W >8'q#D684A+5;SVY'pVSEHZ䦹7P`p{3!}F!li-u^BvM[4|!LW0Q"l0tHrMT`K.Kg;S@m#<#YιY@!~|'?x=:?0p{>̈` #K 3#[Bhߕ8ûYTo}8Q~ V @/ƛX̫?zl Bm:K3ܩA̫;|%yveūj`cۊ hjwmcH[lo=WyG[ҫ^Ғ)sŷAVD{}HȑzA?\|p(}i8&hl{=I9'T.ue'ʳα@UnSsQU'7:USyt~6TE1]yjoCcg*AqWu@n0l.eTHU]xTMO@β@ &C+lkb D5&-tgt7Ęw/&8k =yr>@Ly}ޯ9x7ډ3u\'<$xƏ =.8&ͩXaTm밎 (r-s1%k3րcܘKELx aPf%yUvm~#e!769~͖f*PR7Ҟ"P fR}љ-+>"H?QIk<"s=0DWGG~媉1Dr(fJ]"#oCQ`| q&sHԀ'YwNB#gWfLxFv2|7bUT{]k'v[ V]̰1\8y3QnY+uFL7e٩mU0X"{N!^%nbp ?;@>@4)[(A˒RgIc~^K5Ux)\. p,L<}?Qc0tz>ʩBa g2d(@|(;mR$АNTCPB2YލB-z^5PDT{3'u&.Gŋ!oJř&b D&BO0DfQ>}歷:_x5Rfx\B/b^\ɫ"}Gg e9%bnDr&g<"Z2r& -de,3é,i\$Zh^T,Q&Dfq+) %h͖R<޻\}:]~"8jQ T+Q%D'!6 w=%<vmǸ*w6do 3ti`Oh?`߻Rވ(O X(}kY.#a'ܷ+{uݎHɝ LW_-'Cyю|Ka?Rew]Kt܆`wDlkLiSۗyc 4MZIiIY WPD@<"6r#,|j2UX@$e[p)&Rq'Br˅Pm5Bu:2QlTUiTfp[]F 0HĦZo|Weƴ3Tms$tUr $a2_Qr`cKAP@_2'K0;ѐR7q$W悤u!1,+49[3%!FUUhhM9pRr@=g_0ޙ\RVy=J*h0`pż^ ;8b ̀_t`,c%C`X7 #P"Gd@6+7eN6*ˍ1hIy Ex5B1M؊͉%zyN<{z L1ʔ9!0Gx|anݐh1Bsį"$='ƣ#' Zp'G0KQ<*y]D]( ?T(bc#77͒8a?cBOUW_ a : /y-*Ty<-91ѽKɍ0 oBKC" .of=yz 5D'Ivj8Yx`mލ [0X`XkceLR01ZӒ1"^pt[K/R~{e+e"!lW5I\P*Ja86]rA˒Hl08lT& M@REتz Ab.5Ğq-MT(kj6Xjy"T;aRCPw- ,DǦi3nm6v(*'f"^WN~4!>0KӆҌ|YPCi%ɏϹ#*cB YmΥ nl~1SC=;ʄ_!X%T!n4 J "[%oo 8ypv!_=biú xH9TmKRطS:L&.ZE`ܷCmWԫ*mp%RZ2) :XC$(Vb^ͦKK{nGוBƕ!U4zE 3,-nu8O}neN۳={z9P@3):Ҥ ֐b*AkD%PCetҦ];Iur%m>Q,SB_귙Pvt:lt% DbOBsƼdtcԝ&EWVn橋;{?h ѾVSo~18z.+Hv1hrkkpf9D7(8%Xͳ}PZs;YCP\Ak[cpRѓۗd;zh )="bt4F@![[;kJ+uڀȶCZy- s]o<ކX(|\kaóROd}F81oa.*ԯ= X* "?ӨOn֐`$s;OރrM R;oӣ{`&5$5ÒiV` 5G=%>Ri&w^XqH)[b*wc킬=:w:!ZEvORΓpSd닜en\HL)3wM2]o>[ng|;k&?VY˒_>W*541:ZlD﵏ժO5^x }p: dgb(0"8R:(2ITHZc*MCQ# E^ޢ#C= d-j>rCf{{\dDzP|C+ gI0oL7U[4dݷ)؀#\{9 i?G=|Ѱ0)WqyH9ܣrVZYQvbQŅ*] )>z\1Kxc1[wDW&dg敤%ggO'Z1YQjr6JҤdJ M.ɂ|2E9'H$c F fxۯ1##1*?1Sm=kT71`asx J-\(*ٖߛE(HV!<[/,1'3%$u^a/ rK\42SKS 23sRST˕@fiN8=bxjAIIED֘]7"@JZz{Ҏ,3K">{_@ 5Wͦva_}ZfB㫸#5] #}tGrNv8ʳ?rdtzfc2Za;?,5s[H> ,]Rdg|\IIQkwN.ϥkt$9\h.<8};Z!];Yc+$d%_/Z2ظ>d"pf'sP|p#&䋐B, W9kIƌFN˜05> [K{L2T}mZޏRMSzQG*Uev{ϔ7,5[{S(}KJEFS 7!L@2HO*p!AkfdTpNb .4>l%т YOol-?u Aϵ4C}Teiݞu4o,6Wq\̞mFcŦ˲Πnnyg%g*ȠqfƾDoѱU XY_#kR͝+ȗ,J/q /Jq[U!rP2#V:|"g{'ZҰKF 9H>sI|]`Vw jgW^lc=>auÀ) ͑Ohg%S:!\lE| 7.ZXn㭅qrkGpnNT>kbqWvp' Vǜnt 5v>t<*VV%#aGqNU*RʊfIċ^y­q-7Ȼ:5:upb_#zoEk+;VVYFǣo)ZYKΚNQ[̩ߜV-`$qͬV*7P@TZ-]/% ;|~q}Y;Mp0.NKtuڋC,McM/ӉNfBO.{=e +N/E%RHЕBNұ13b8ZCNS\GٿzE)xk'8##1*?1ScxVe6h;xu=o@ǕZJ]*BA4i#RHAJR2Ҟ'!ܝm*TebcL̈7o9vڤ{9[~U*s8I$!{ІThy Uhذmσ2\*AbF_FRD'4@SɽgGgtx$aS $V]iaPnƪǵQ4vПKZ-HJ`%om7P]bV?*?s^~YVɩGCl`\iY/_4udx|z]ݨ3Qy&ʨO+k yBNn /=S>2E}(g݋hKvSej+Yˡs`آBIT4zY4) +q(X8cwn!vu.E iP3/jT'EKUn@d dE\(;_8 4I,Osϙ~i-y1:+ ܬ&:`[?ZW&S_EӋZngW]#u]=1 5x>@ ELx}S=ABTv;iD[a=5WXEIeL`fick_`p>; y}ޏy/w/| C#s-<7_KPdx^`b )J A7,3E b͓ F@~Fؘ΃{tؔb=Hs쓳܎ri1yιpgV2,$Z7mTx^2@1 oaog%nj YPl7 ,yΖC$a-P F%.v]J0\Wyc{yBaIm`K+:n-/Il+" oМ!89o TFy;b3x[J:wեP CC\5sIhX+wҠW880_Kz'HobFg?GgPX5$4zeB7ǯD(&^)|eD1Uu> hLH;/yP:ʾ5 fvMxVQo6~~TRG~Ht3PA`A2" I1ݑ ɺxx]:^50:D)mYBI 6Ɵ U 5J:J%浵]Zغ *rӟVvׁ ^u:U+n-8Je6Ic4;j#J;oْm5*K;ph5a C&R4xRCN& 5^DS3@2erg4XpJiָiEPm?N,"!c_X"2;\EU?/+4p I>/41‹P&lCWTky `_hZ^I:GP)Lq`+` KMoZ.墉%^/Ͽy?;eىwΪ;9"8 Hd67"]jϛtkO L'BOBc2)Ò[bɺ9@OF3Q9/KCFCোGPLd- _s{܏9G]ʖkS&E o: QP ٘0W/7`J/O*c2Ioj-䫨/Hܐx)u}; _%X(ئπrsdٿꑼ7)[.Ǘpd>I\hM}>t̻KWbBӃ>^g S1Zu~lТ9>{R wqN7yb`m~`4;}qY.[6`ep!ZPi4)T&ZyfGzhAW[rоr)*4ViղaPp<u{wsrxWUHvgax($Լx8n~%]Kq?O/9d8N}`x[U9y.3 By+=>жK9x!/2!##1*?1ScNE*xVnF>[O1eGJDjqbp0 YQJjGOK/gpߨ3,of[<i -k{A6G!#gr(Z+m);ifGyPL؏܈GTnv]mr.Li(3rZd2εZf+JGVuX]UFmS-P^|q֨,G6x?~^(8*ҚհV62`V \πEEĭQGjyVuCH6S'G:Q, Y@YQ໩Bd@nX:cU`/rkXs1fnbɖ3R^dkLb}CRZ؅qv0j"{== gsBFAJ#u$Tm ?<5)\si&V+ ;N&tHE6MN<RI|X/3J'{, zy{Ièa$}!A_aoF÷'Yhg  s&o ~ I2p볡vHnF=[a'EDQRB뱃.>\aC;> SG h=4+}w]1 yWyWv@_M +z=V0MٜW\o6[H&y_74SXTtx{)^~*i\ 7ɰGA,>$ҊTQOH&^ .`|3Qx5':ئ2;nnWm/5cUA0 <`o7 /z0ό(yC('cDrudXfNs{*q\viDsל>lv?ø * ᷽ŐAye:>8OQ$qJlGlEeOKʚwM`/L*7:qhs|yͅ(gW0z4YN3['7vIr 1Z8NBCdx{(AhBGFb^U~b/{7oeYP PxVmO9+6&P#HT:ʇB`vy9&;3Ǐgffr`-Dj-t+i|2Wo$I2lnifi;noۏVʤvUsbrJTgɂ/IMI#sRNs\~a3]՟Yn^uEpn$sZtT#E;)l8A%F Po:2U2v;XJ=#NVUja\Z3+`-MpalrʶprY?=/3 Hx.ji,9+55'fˠI >OE*OL9S֥m7r=zwrA~rjȢ!HiDTjq7Gf>嬒fL\Ҙb/lww7E@Ŵy"jLi2'$L z9&YF㣚w2!P>`/߲ACCЁ_ F@߫cgO}=H6ϐD?.O'H]bqg4˫PoA1Q%3f-D*&թ,j%'pVqE63XҖߖn'.KC(PG kۺE+3('Zrr~q>wךSNݶPq c2A{VOa4zlqE TdGL<p gqQ:::/C \1XsϽ腜1mJVuBobpm3@(Gp3v C8" 7qgbuG|KȣN]q?uh>3'Og]-x Gt{Ǡpr7ZߴUe5%=+zQOw{9bFH,!8sn/~t:[6'Yeȶ9:=]Bzq0BQP ߠČF(LpѝDZD' hBK'm:嶿ym.w@Ra0}|؍"x8k}x;*R`#GFb^U~b _͟/x xM100644 cache.go'*#_W3 m,g100644 cache_test.goO0cD NmoG<x; // Package cache provides caching primitives for Hanzo Base, built on // github.com/luxfi/cache. It re-exports the Cacher interface and LRU // implementation, and adds a TTL wrapper for time-based expiration. package cache import ( "sync" "time" lrucache "github.com/luxfi/cache" ) // Cacher is the cache interface from luxfi/cache. type Cacher[K comparable, V any] = lrucache.Cacher[K, V] // NewLRU creates a bounded LRU cache. Thread-safe. func NewLRU[K comparable, V any](size int) *lrucache.LRU[K, V] { return lrucache.NewLRU[K, V](size) } // Empty returns a no-op cache that stores nothing. func Empty[K comparable, V any]() *lrucache.Empty[K, V] { return &lrucache.Empty[K, V]{} } // ttlEntry wraps a value with its expiration time. type ttlEntry[V any] struct { val V expiresAt time.Time } // TTL wraps a Cacher and adds time-based expiration. Entries older than // the configured TTL are evicted lazily on Get. Put resets the TTL. // // The underlying cache controls eviction policy (e.g. LRU) and size bounds. // TTL only adds the time dimension. type TTL[K comparable, V any] struct { inner lrucache.Cacher[K, ttlEntry[V]] ttl time.Duration mu sync.Mutex } // NewTTL creates a TTL-aware LRU cache with the given max size and TTL. func NewTTL[K comparable, V any](size int, ttl time.Duration) *TTL[K, V] { return &TTL[K, V]{ inner: lrucache.NewLRU[K, ttlEntry[V]](size), ttl: ttl, } } // Put inserts a value with the current TTL. func (c *TTL[K, V]) Put(key K, value V) { c.mu.Lock() defer c.mu.Unlock() c.inner.Put(key, ttlEntry[V]{val: value, expiresAt: time.Now().Add(c.ttl)}) } // Get returns the value if it exists and has not expired. // Expired entries are evicted immediately. func (c *TTL[K, V]) Get(key K) (V, bool) { c.mu.Lock() defer c.mu.Unlock() entry, ok := c.inner.Get(key) if !ok { var zero V return zero, false } if time.Now().After(entry.expiresAt) { c.inner.Evict(key) var zero V return zero, false } return entry.val, true } // Evict removes a specific key. func (c *TTL[K, V]) Evict(key K) { c.mu.Lock() defer c.mu.Unlock() c.inner.Evict(key) } // Flush removes all entries. func (c *TTL[K, V]) Flush() { c.mu.Lock() defer c.mu.Unlock() c.inner.Flush() } // Len returns the number of entries (including expired ones not yet evicted). func (c *TTL[K, V]) Len() int { c.mu.Lock() defer c.mu.Unlock() return c.inner.Len() } // PortionFilled returns the fraction of the underlying cache that is occupied. func (c *TTL[K, V]) PortionFilled() float64 { c.mu.Lock() defer c.mu.Unlock() return c.inner.PortionFilled() } \x "package cache import ( "testing" "time" ) func TestNewLRU_BasicOps(t *testing.T) { c := NewLRU[string, int](3) c.Put("a", 1) c.Put("b", 2) c.Put("c", 3) if v, ok := c.Get("a"); !ok || v != 1 { t.Fatalf("Get(a) = %d, %v; want 1, true", v, ok) } if c.Len() != 3 { t.Fatalf("Len() = %d; want 3", c.Len()) } // Exceed capacity — "b" is LRU (we accessed "a" above). c.Put("d", 4) if _, ok := c.Get("b"); ok { t.Fatal("Get(b) should miss after eviction") } if c.Len() != 3 { t.Fatalf("Len() = %d; want 3 after eviction", c.Len()) } } func TestNewLRU_Evict(t *testing.T) { c := NewLRU[string, int](10) c.Put("x", 42) c.Evict("x") if _, ok := c.Get("x"); ok { t.Fatal("Get(x) should miss after Evict") } } func TestNewLRU_Flush(t *testing.T) { c := NewLRU[string, int](10) c.Put("a", 1) c.Put("b", 2) c.Flush() if c.Len() != 0 { t.Fatalf("Len() = %d after Flush; want 0", c.Len()) } } func TestEmpty(t *testing.T) { c := Empty[string, int]() c.Put("a", 1) if _, ok := c.Get("a"); ok { t.Fatal("Empty cache should always miss") } if c.Len() != 0 { t.Fatalf("Empty Len() = %d; want 0", c.Len()) } if c.PortionFilled() != 0 { t.Fatalf("Empty PortionFilled() = %f; want 0", c.PortionFilled()) } } func TestTTL_BasicOps(t *testing.T) { c := NewTTL[string, int](100, time.Hour) c.Put("a", 1) c.Put("b", 2) if v, ok := c.Get("a"); !ok || v != 1 { t.Fatalf("Get(a) = %d, %v; want 1, true", v, ok) } if v, ok := c.Get("b"); !ok || v != 2 { t.Fatalf("Get(b) = %d, %v; want 2, true", v, ok) } if c.Len() != 2 { t.Fatalf("Len() = %d; want 2", c.Len()) } } func TestTTL_Expiration(t *testing.T) { c := NewTTL[string, int](100, 10*time.Millisecond) c.Put("a", 1) if _, ok := c.Get("a"); !ok { t.Fatal("Get(a) should hit immediately after Put") } time.Sleep(20 * time.Millisecond) if _, ok := c.Get("a"); ok { t.Fatal("Get(a) should miss after TTL expires") } // Evicted on read — len should be 0. if c.Len() != 0 { t.Fatalf("Len() = %d after expiration; want 0", c.Len()) } } func TestTTL_PutResetsExpiry(t *testing.T) { c := NewTTL[string, int](100, 50*time.Millisecond) c.Put("a", 1) time.Sleep(30 * time.Millisecond) // Re-put before expiry to reset TTL. c.Put("a", 2) time.Sleep(30 * time.Millisecond) // 60ms total, but TTL was reset at 30ms, so 30ms since last Put. if v, ok := c.Get("a"); !ok || v != 2 { t.Fatalf("Get(a) = %d, %v; want 2, true (TTL should have been reset)", v, ok) } } func TestTTL_Evict(t *testing.T) { c := NewTTL[string, int](100, time.Hour) c.Put("a", 1) c.Evict("a") if _, ok := c.Get("a"); ok { t.Fatal("Get(a) should miss after Evict") } } func TestTTL_Flush(t *testing.T) { c := NewTTL[string, int](100, time.Hour) c.Put("a", 1) c.Put("b", 2) c.Flush() if c.Len() != 0 { t.Fatalf("Len() = %d after Flush; want 0", c.Len()) } } func TestTTL_LRUEviction(t *testing.T) { c := NewTTL[string, int](2, time.Hour) c.Put("a", 1) c.Put("b", 2) c.Put("c", 3) // evicts "a" (LRU) if _, ok := c.Get("a"); ok { t.Fatal("Get(a) should miss after LRU eviction") } if v, ok := c.Get("b"); !ok || v != 2 { t.Fatalf("Get(b) = %d, %v; want 2, true", v, ok) } if v, ok := c.Get("c"); !ok || v != 3 { t.Fatalf("Get(c) = %d, %v; want 3, true", v, ok) } } func TestTTL_MissReturnsZero(t *testing.T) { c := NewTTL[string, int](10, time.Hour) v, ok := c.Get("nonexistent") if ok { t.Fatal("Get(nonexistent) should miss") } if v != 0 { t.Fatalf("Get(nonexistent) value = %d; want 0", v) } } cc x340031QHI-Kgػbc\PÇwkc4<,l($dJFW"C}&pU<UXZX_ZP\R R~62p]k2פV>PY>T7?yim1KTxYr}/MLTHYRV$E6.)&q}'%=X.):͋.{9DӏrĴzEJϔmwX_*%g |3n7bjMsZ)9>9ϤW#+5^SB{1ވ߈܈ /lOefd k./x'h i~[L%+Y~S\y#ƷXm)aّZvrJpP/8Z)?tʷc.ˋWnpi6bNKӒXooE) 6/o[[8F]n/NiH:cedk6odڋ7Gϙȧv68 ѵ'we IyA cɛRf5H |C:S0o,΁HE0MєW}f)!'  "str!tZ:$b5SSNWH#fKzX׊(3=ڶ2  m)-a뫿g'õ-ՇɵFcC$ [/ęzeЅO[@Z)?tW>A; "6>% ǜwKloBlD,;ye="Fܧboy֠۫7*pY.Z{xD0h!Qxd#Ŵm6<NH1{'u_I \[:DMK"CAd~ ;!b yނ`~Ҽ}S8y1y^"z vvv9GKD !vg/kxT`Lj SE0' `m~^;Kd NN~VnR #/ˤr4^+3(JZP3M)R0γxitTSG5.xh! g{[3/F4Oţ{0dz3wf:$Ko0(s$i܍͇(Jc4džiXLXá '|ZL/$J,HnRQB.O`1ؓp>EgFRTmFWC"j[{2N$zvw*Æ@ޫ'(vNY ) b9Rs `I/`#j"uk֞h#];fݔf)iؕVq >zPz&80Ae_f:3*韇/dO蛿ᙤLQAei) ${apRnP;J٨eX4)bA5c~Nh뾲c` QT辪 .\_,qDĘTQeX`O^%2>) nB }|Sbxj+}pS)JzR O)ţER44ԑ֋`\ (yS$G:jw@GV~Vv9t3!3PU1$^̌Cp!=j .+>҇2NMQ@f6LNm7ƳѦTFhXLi4lC*8Ҁm(🂟C-,tt}4 }VxM`ÒkY1D_jLtQ|R9M\6pj&ضJa"|׀W}1q.[!H HNEQ!'{m"pfН isDZJ'o%O*|g!ftOw - Q:XTQ_w;+N3韔jfpwv֒ȹ*Cfr~7_p]wKuUSQ>Amg^RcrWʟu`<R?q/qs}sE|K? u9a  n(B9xb8ާ:04=PP^XZ .Y ~z_;(TABlӝHV@_8kC1JMI^7nMP;B;C%@΢fNU16#֣ϨFvm]TC^+7X 47KaJVit~4lV< 3W9L ͼc<=QPk.ίqV;?m|)Rx>Cksw`?{7FJ!d≼,Q ]]2d'ּ6#me򜖏a)y _@NV݆Pxw]A}A.nn(0e$xYn9}- .e?8^bxdHTKddIv |`d%YTR{0~0(.w+50Oalni&!͍`fujcwbEvbq0lxMHN J#Hcmns!iu0RRc< Ȝ `\mjrɂ`[^&ij=j|nSuwJ JXvpӴd_oA yfV~tzhj/c0 BAK(*_k'B*O؄Fw@f 0a r J6%Q@PqR"2s$Br0cpH3-_Gǻ8xD brNmicLɞ\vc&,nsTAK]ːJi0zR 椮Y+<7d.!X{\I'n=25^Ym|6bV[#؉oA]H ),&O~` H~uޯNmp]h%p-t!!y]ƿ<2Vt<]qBF@fu= [>h.WK[ZT/-ZhN?~r mPT@&ҮDay&t ðWg COf_ Hr51tɎc& 7wEdS9c,*vEdQgUn&$P*ӵSSw"eނu@q@~%I#6#bx($ođ~~CL>pS!'\[i[ep1]nVoP,U-xޘL&+-㻛Y ;`pG#H'qŭ6Јs:wB2N={Yzku*k=(n]cFxDK͈3d> :"C^O7iC䥝'ӽx-`*lڇz=1ڐ=% ,qbMp;*_5/z@>#\W>>;A"=NB g_T+K?b̓|7 5>ۤ(TX% Uqٕ(Ea?{.jheNj-VYy3EVL]aYf.kD'2O"pY}P7EtG~s1T:l<{ @٢ګ98qPt ̡^Hw  ^plLl( -(8Pі8Yʕ2Ё ͰcAfU%Y#D|ޏgR5יi;Kx],GjvCgh!i&g`zFF͞*ѲFGn 7EBO+fWfдYDM\&Q2$k>O91Cg J｠3S:Uc hFŗ Uߏl!*8:>Fdv#:֮$%|9&"b#A$1&m:M ։bɵV[ynkN؀,iޘMyc? 0 } ʹ@xpackage cron import ( "encoding/json" "slices" "sync" "sync/atomic" "testing" "time" "github.com/hanzoai/base/tools/tasks" ) func TestCronNew(t *testing.T) { t.Parallel() c := New() defer c.Stop() if c.Total() != 0 { t.Fatalf("expected no jobs on fresh cron, got %d", c.Total()) } if c.HasStarted() { t.Fatal("expected HasStarted=false before any Add") } } // TestCronSetInterval verifies SetInterval is a safe no-op (superseded by // per-schedule durations on tasks.Client). func TestCronSetInterval(t *testing.T) { t.Parallel() c := New() defer c.Stop() c.SetInterval(2 * time.Minute) // must not panic } // TestCronSetTimezone verifies SetTimezone accepts a zone without erroring. func TestCronSetTimezone(t *testing.T) { t.Parallel() c := New() defer c.Stop() tz, err := time.LoadLocation("Asia/Tokyo") if err != nil { t.Fatal(err) } c.SetTimezone(tz) // must not panic c.SetTimezone(nil) // must not panic } func TestCronAddAndRemove(t *testing.T) { t.Parallel() c := New() defer c.Stop() if err := c.Add("test0", "* * * * *", nil); err == nil { t.Fatal("expected nil-fn error") } if err := c.Add("test1", "invalid", func() {}); err == nil { t.Fatal("expected invalid cron expression error") } for _, id := range []string{"test2", "test3", "test4"} { if err := c.Add(id, "* * * * *", func() {}); err != nil { t.Fatal(err) } } // Overwrite test2 — should not duplicate. if err := c.Add("test2", "1 2 3 4 5", func() {}); err != nil { t.Fatal(err) } if err := c.Add("test5", "1 2 3 4 5", func() {}); err != nil { t.Fatal(err) } c.Remove("test4") c.Remove("missing") // no-op expectedIds := []string{"test2", "test3", "test5"} if c.Total() != len(expectedIds) { t.Fatalf("expected %d jobs, got %d", len(expectedIds), c.Total()) } for _, id := range expectedIds { if !c.HasJob(id) { t.Fatalf("expected HasJob(%q)=true", id) } } if c.HasJob("test4") { t.Fatal("expected HasJob(test4)=false after Remove") } } func TestCronMustAdd(t *testing.T) { t.Parallel() c := New() defer c.Stop() defer func() { if r := recover(); r == nil { t.Errorf("MustAdd didn't panic on nil fn") } }() c.MustAdd("withfn", "* * * * *", func() {}) if !c.HasJob("withfn") { t.Fatal("MustAdd did not register job") } c.MustAdd("nilfn", "* * * * *", nil) // must panic } func TestCronRemoveAll(t *testing.T) { t.Parallel() c := New() defer c.Stop() for _, id := range []string{"t1", "t2", "t3"} { if err := c.Add(id, "* * * * *", func() {}); err != nil { t.Fatal(err) } } if c.Total() != 3 { t.Fatalf("expected 3 jobs, got %d", c.Total()) } c.RemoveAll() if c.Total() != 0 { t.Fatalf("expected 0 jobs after RemoveAll, got %d", c.Total()) } } func TestCronTotal(t *testing.T) { t.Parallel() c := New() defer c.Stop() if v := c.Total(); v != 0 { t.Fatalf("expected 0, got %d", v) } _ = c.Add("a", "* * * * *", func() {}) _ = c.Add("b", "* * * * *", func() {}) _ = c.Add("a", "* * * * *", func() {}) // overwrite if v := c.Total(); v != 2 { t.Fatalf("expected 2, got %d", v) } } func TestCronJobs(t *testing.T) { t.Parallel() c := New() defer c.Stop() var mu sync.Mutex calls := "" if err := c.Add("a", "1 * * * *", func() { mu.Lock(); calls += "a"; mu.Unlock() }); err != nil { t.Fatal(err) } if err := c.Add("b", "2 * * * *", func() { mu.Lock(); calls += "b"; mu.Unlock() }); err != nil { t.Fatal(err) } // Overwrite b — its callback is replaced; original callback must not fire. if err := c.Add("b", "3 * * * *", func() { mu.Lock(); calls += "b"; mu.Unlock() }); err != nil { t.Fatal(err) } jobs := c.Jobs() if len(jobs) != 2 { t.Fatalf("expected 2 jobs, got %d", len(jobs)) } // MarshalJSON — admin endpoint contract. slices.SortFunc(jobs, func(x, y *Job) int { if x.Id() < y.Id() { return -1 } if x.Id() > y.Id() { return 1 } return 0 }) out, err := json.Marshal(jobs) if err != nil { t.Fatal(err) } want := `[{"id":"a","expression":"1 * * * *"},{"id":"b","expression":"3 * * * *"}]` if string(out) != want { t.Fatalf("unexpected json\n got: %s\nwant: %s", out, want) } for _, j := range jobs { j.Run() } mu.Lock() defer mu.Unlock() if calls != "ab" { t.Fatalf("expected calls=ab, got %q", calls) } } // TestCronDelegatesToTasks verifies that cron.Add ends up invoking the // callback the tasks.Client registered — i.e. the shim is not just // bookkeeping, the ticker actually fires. func TestCronDelegatesToTasks(t *testing.T) { t.Parallel() c := New() defer c.Stop() var hits atomic.Int64 if err := c.Add("delegates", "20ms", func() { hits.Add(1) }); err != nil { t.Fatal(err) } // Should tick >=3 times over 100ms on a 20ms schedule. deadline := time.Now().Add(250 * time.Millisecond) for time.Now().Before(deadline) { if hits.Load() >= 3 { break } time.Sleep(10 * time.Millisecond) } if got := hits.Load(); got < 3 { t.Fatalf("expected >=3 ticks, got %d", got) } c.Remove("delegates") before := hits.Load() time.Sleep(60 * time.Millisecond) after := hits.Load() if after > before+1 { // Allow one in-flight tick but no further ticking. t.Fatalf("ticker continued after Remove: %d -> %d", before, after) } } // TestCronNewFromTasksShared verifies NewFromTasks wraps an existing client // and that Stop() pauses without dropping registry entries — matching the // legacy cron.Cron semantics. func TestCronNewFromTasksShared(t *testing.T) { t.Parallel() tc := tasks.New("", "", nil) defer tc.Stop() c := NewFromTasks(tc) if err := c.Add("shared", "* * * * *", func() {}); err != nil { t.Fatal(err) } if !tc.HasJob("shared") { t.Fatal("expected tasks client to hold the registered schedule") } c.Stop() if !tc.HasJob("shared") { t.Fatal("Stop must pause tickers without removing registry entries") } if c.HasStarted() { t.Fatal("expected HasStarted=false after Stop") } c.Start() if !c.HasStarted() { t.Fatal("expected HasStarted=true after Start") } // Shared client still usable. if err := tc.Add("after", "* * * * *", func() {}); err != nil { t.Fatal(err) } if !tc.HasJob("after") { t.Fatal("expected shared client to remain usable") } } // TestCronStartStop is retained as a documentation test: Start/Stop are // pause/resume in the shim. The legacy interval-based tick behaviour // from the old ticker implementation is superseded by per-schedule durations // at the tasks.Client layer (see TestCronDelegatesToTasks). func TestCronStartStop(t *testing.T) { t.Parallel() t.Skip("superseded by TestCronDelegatesToTasks — legacy 1-min-tick semantics no longer apply") } // TestCronAppFacadeLocal exercises the app-shaped call site with TASKS_URL // unset — the pure-local path that every dev/test environment uses today. func TestCronAppFacadeLocal(t *testing.T) { t.Parallel() tc := tasks.New("", "", nil) // local only defer tc.Stop() c := NewFromTasks(tc) defer c.Stop() if err := c.Add("settlement", "*/5 * * * *", func() {}); err != nil { t.Fatal(err) } if !c.HasJob("settlement") { t.Fatal("expected settlement schedule to be registered") } if c.Total() != 1 { t.Fatalf("expected Total=1, got %d", c.Total()) } } // TestCronAppFacadeRemoteFallback exercises the TASKS_URL-set path with an // unreachable server — it must fall through to the local goroutine ticker, // record the schedule, and still tick. func TestCronAppFacadeRemoteFallback(t *testing.T) { t.Parallel() // Point at a definitely-closed port so HTTP scheduling fails fast. tc := tasks.New("http://127.0.0.1:1", "", nil) defer tc.Stop() c := NewFromTasks(tc) defer c.Stop() var hits atomic.Int64 if err := c.Add("remote-fallback", "20ms", func() { hits.Add(1) }); err != nil { t.Fatal(err) } if !c.HasJob("remote-fallback") { t.Fatal("expected schedule to be registered after remote failure") } deadline := time.Now().Add(250 * time.Millisecond) for time.Now().Before(deadline) { if hits.Load() >= 2 { break } time.Sleep(10 * time.Millisecond) } if hits.Load() < 2 { t.Fatalf("expected local fallback to keep ticking, got %d hits", hits.Load()) } } a)>xpackage cron import ( "encoding/json" "github.com/hanzoai/base/tools/tasks" ) // Job is a read-only view of a registered schedule, returned by Cron.Jobs(). type Job struct { id string expression string client *tasks.Client } // Id returns the job id. func (j *Job) Id() string { return j.id } // Expression returns the cron expression or duration string the job was // registered with. func (j *Job) Expression() string { return j.expression } // Run invokes the job's registered callback immediately, outside the normal // schedule. No-op if the callback runs server-side (durable tasks) and is // therefore not available in-process. func (j *Job) Run() { if j.client == nil { return } j.client.Run(j.id) } // MarshalJSON implements json.Marshaler for the admin list endpoint. func (j Job) MarshalJSON() ([]byte, error) { return json.Marshal(struct { Id string `json:"id"` Expression string `json:"expression"` }{Id: j.id, Expression: j.expression}) } "NJxQpackage cron import ( "encoding/json" "testing" ) func TestJobId(t *testing.T) { j := Job{id: "test"} if j.Id() != "test" { t.Fatalf("expected id=test, got %q", j.Id()) } } func TestJobExpression(t *testing.T) { j := Job{expression: "1 2 3 4 5"} if j.Expression() != "1 2 3 4 5" { t.Fatalf("expected expression=1 2 3 4 5, got %q", j.Expression()) } } func TestJobRunNoClient(t *testing.T) { defer func() { if r := recover(); r != nil { t.Errorf("Run on zero-value Job must not panic: %v", r) } }() (&Job{}).Run() } func TestJobRunThroughClient(t *testing.T) { c := New() defer c.Stop() calls := 0 if err := c.Add("probe", "24h", func() { calls++ }); err != nil { t.Fatal(err) } jobs := c.Jobs() if len(jobs) != 1 { t.Fatalf("expected 1 job, got %d", len(jobs)) } jobs[0].Run() if calls != 1 { t.Fatalf("expected Run to invoke callback once, got %d", calls) } } func TestJobMarshalJSON(t *testing.T) { j := Job{id: "test_id", expression: "1 2 3 4 5"} raw, err := json.Marshal(j) if err != nil { t.Fatal(err) } want := `{"id":"test_id","expression":"1 2 3 4 5"}` if string(raw) != want { t.Fatalf("expected %s, got %s", want, string(raw)) } } x.e?xWmo68V[+ۇR``e,:f#QH HJvX;^{x^0oj=jU7D6Mݘ?6ZNiU%A:B#W4d@J4F`|)NC厍n% zl>)Z BOӤr跺mvK򍸃{Bܑ]rWW[_-͎% Wr7RXIj Y,`Vr ǃEв/7iFw,AƔ¶c~*SՎŘ_Xr4pSLIg~>_ʢ[cwC_^M%5H1_r5bISbX'B|`V{ |oPĕX]``u&p&i1u~=x|7oZ,Ro U8Hz ,y,AMCPJQ{XĥpU%U[- x?]g#8z.Di$ac5 ̨vhhdS~~n/Iz SR֢&# \]$Iєw ]2 odZt]y(6\!*`ªB(T*^𭞊&s8tq,.i`J+ ^ו+DN;$P1 Vv <P@Ap*t!˲ޠq` $vE,t6,)0 FklD!)OtPXVivSVߏk@]0OD8QQ:m<:[FEB[0ĒR$0aE}`A@|U*AI>PJ= )a"ff5U+pXԗƟ W/) gg(Vѻ9xگۻtJyP8xng3q+kkPefTArԧag=q}Dhhċ|E;ju % S4d'h0y:$v3.vFYg)S0)>/"Azꤼ.Bҗ`s:|pM/ٵ%7~KXtu VCrt?cHXJZH4~WR?/4kхB.D[ZWoqV0|)xqf%[W,.v|L 8;=NyWYK %\`Dkҝ ߷H\#8'P g) )4xP.>P;cFj!BYqHOd^rayϵKxQbK^ԥ]p,~FG&MȾl7av|ovq|{hHzRp ʁES.=XTV{*pEcX `)R`)R 0 jL39GZpy8Qv}exsRY̓y \~Z3=:2*xABZs K{Zz+:hTVvqݯ]Z]Z6Gvy,]ۤ`]~u.5 BcsrM10ۭN]J?^*ѳzIMZ6b)>žcSG:fZ]vn)mϘ16"l ArU2R:zozڄ%El<<>nSƇ MjYTZlÈc3w}yG1qliAO`X@6Mcr\ɮ|Nz)ML01knZ4_Y ^]&.<".g v7LL0 nJi'EhNݟ%tL|2ħ״CA}ls.? ԇdλW"sNƶKr8SI{\9K&Fϐey2̺y +5P2@ߙWgRvf#';xۻq yUӮdk x340031QKIKgX~Fƒ6_xmqIM|Ijq H_1ɯ{ݕ>**)'v'6%F)Kc4#)լJ`]485'5[Jn^G鿖y|}ǵ EܸSo9nƔ VC \FxXmsFlC)1Px& ! IavY:'W ) {wM-Lg_ow/VxQI~E^J{^ɮ}%Ϯׇk.oE"VL.`O牀+Y~ɳ_ ,VVBiCQɨdSW\Wp8O%e )?? +PTdg[ y`,<ʓ*ʹ;,j̽(Ocdz7LM𩈾LDp<{FNj](`N)h)XLeoؗ_ ֒T$_32 #lep 1KJYw_4.y~ou-k~刜}lXt8a)Unh1斎̗tґ֋&w2zBFɬ:HG+U e5L]y^HMq^gBEN/a$b噤LER3V)$sKHH-' Jo7/,">5X`5RW2Y}X<΀;NX c@ ύOV$+|!4kMS>)k`hW w|6QtN>lJoͥ7` #* V+p LR%7-ykyoAaooF&H]7SU"xKljmIW-Ec~ ^s1zGPF20Rj*xCW45ڞz[[>e=pm ߛE=[Q7z'i9ͦr\!:zϧOZj,Fdi 7E|!i LǿKNjƸYL\qǽ\cXLYX_fe *ʼ1(0 2F4{$~ `O}aFzH0lؽ7]qP:.~U涰Vzj5͂z>Jzjwuo\~%,/ LJyZ$̑R̴c'jiT.(uc$ .Ls1Ѐٔ;ՙd:\8PYf۳C: inheA=Crn檍< ΂9@ hl߁oԞ$. {Hsr- Bۼ8tGډTH0?YOTX͋V zo|ft:xѥ1##1*?1SQaF3xYmo6, 4f(/Хju6] ADtUN#f[r7Z,lK<Ii꨼(D-!3N$}ɤB:Yֶ5Q&lfOi0ddPz8?@x(Pe;^[] ڝW>iZڽ~/ŘH  ~'CC/"^``o`m?VuB~~r9kW&%wN_Zy׋P(zps)b[|/+ :5D\k" u!* ^9>{{ׄ'j/)RQFl^ə9`WxfVy2/l~ΐGQ A w\"tJnw*HnoGu o{h2/;N,!N#]qiC$ "IEKm7 n  # S3P`;!МV`(!%zWrbj-Ԧu }'~'rCҪHݫ1clb\CjkhMN(v/W':ϞA(d^޼9Q:+)r[ɿt$Ŝ{gnDŽ7 CX(+9Mɿ )_CHxg7nB GFb^U~bҕrLsx3package dbutils import ( "fmt" "strings" ) // JSONEach returns JSON_EACH SQLite string expression with // some normalizations for non-json columns. func JSONEach(column string) string { // note: we are not using the new and shorter "if(x,y)" syntax for // compatibility with custom drivers that use older SQLite version return fmt.Sprintf( `json_each(CASE WHEN iif(json_valid([[%s]]), json_type([[%s]])='array', FALSE) THEN [[%s]] ELSE json_array([[%s]]) END)`, column, column, column, column, ) } // JSONArrayLength returns JSON_ARRAY_LENGTH SQLite string expression // with some normalizations for non-json columns. // // It works with both json and non-json column values. // // Returns 0 for empty string or NULL column values. func JSONArrayLength(column string) string { // note: we are not using the new and shorter "if(x,y)" syntax for // compatibility with custom drivers that use older SQLite version return fmt.Sprintf( `json_array_length(CASE WHEN iif(json_valid([[%s]]), json_type([[%s]])='array', FALSE) THEN [[%s]] ELSE (CASE WHEN [[%s]] = '' OR [[%s]] IS NULL THEN json_array() ELSE json_array([[%s]]) END) END)`, column, column, column, column, column, column, ) } // JSONExtract returns a JSON_EXTRACT SQLite string expression with // some normalizations for non-json columns. func JSONExtract(column string, path string) string { // prefix the path with dot if it is not starting with array notation if path != "" && !strings.HasPrefix(path, "[") { path = "." + path } return fmt.Sprintf( // note: the extra object wrapping is needed to workaround the cases where a json_extract is used with non-json columns. "(CASE WHEN json_valid([[%s]]) THEN JSON_EXTRACT([[%s]], '$%s') ELSE JSON_EXTRACT(json_object('base', [[%s]]), '$.base%s') END)", column, column, path, column, path, ) } _wlx>package dbutils_test import ( "testing" "github.com/hanzoai/base/tools/dbutils" ) func TestJSONEach(t *testing.T) { result := dbutils.JSONEach("a.b") expected := "json_each(CASE WHEN iif(json_valid([[a.b]]), json_type([[a.b]])='array', FALSE) THEN [[a.b]] ELSE json_array([[a.b]]) END)" if result != expected { t.Fatalf("Expected\n%v\ngot\n%v", expected, result) } } func TestJSONArrayLength(t *testing.T) { result := dbutils.JSONArrayLength("a.b") expected := "json_array_length(CASE WHEN iif(json_valid([[a.b]]), json_type([[a.b]])='array', FALSE) THEN [[a.b]] ELSE (CASE WHEN [[a.b]] = '' OR [[a.b]] IS NULL THEN json_array() ELSE json_array([[a.b]]) END) END)" if result != expected { t.Fatalf("Expected\n%v\ngot\n%v", expected, result) } } func TestJSONExtract(t *testing.T) { scenarios := []struct { name string column string path string expected string }{ { "empty path", "a.b", "", "(CASE WHEN json_valid([[a.b]]) THEN JSON_EXTRACT([[a.b]], '$') ELSE JSON_EXTRACT(json_object('base', [[a.b]]), '$.base') END)", }, { "starting with array index", "a.b", "[1].a[2]", "(CASE WHEN json_valid([[a.b]]) THEN JSON_EXTRACT([[a.b]], '$[1].a[2]') ELSE JSON_EXTRACT(json_object('base', [[a.b]]), '$.base[1].a[2]') END)", }, { "starting with key", "a.b", "a.b[2].c", "(CASE WHEN json_valid([[a.b]]) THEN JSON_EXTRACT([[a.b]], '$.a.b[2].c') ELSE JSON_EXTRACT(json_object('base', [[a.b]]), '$.base.a.b[2].c') END)", }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { result := dbutils.JSONExtract(s.column, s.path) if result != s.expected { t.Fatalf("Expected\n%v\ngot\n%v", s.expected, result) } }) } } D!xu[K17H٥B`}M76˒-h }H2|dZ} [/#DX 7)! ^ J;PZro9Uԡ:"yAW`\jGv/SlYXˏ us̸FV͢F6 w&!z) kCQCk&hV:꿏۷VğVM>&ơMgS)fh]9fEI70ܗ+\̐^ҏ$GCD gDȁUֹUl6x2eGFn2xmRMk0 =ǿB \y; Fo㤦]lS9$ӓe+)hꀺ<2 ЦŝeʕZx?Dk{?KZ9+k ^ ePZ"E ?,Rp?.Hl+ˆOmD!~<13! ``608mOQyDI_^]Cʞ.0 b'Xf?SqB%FKߠ ]n@.hE #aE\FB:@_6u$4cClZ[t%! |\j!^2|1$?c %Re1 .,7߲׼rg9g**/,(*2O?96GEs)H&xƸQD!49;D/=a C7I{Tr7_DDՉX x\YF~0#<&m4ZO8ZnG:fՃC"!GS}*@t%32*dM̫eUV&<[oڽAl:n VUdek8irvsz~\uVuMдU h *`94)ihLL~NbG+->`FR,IޥPHl}އ 4l3Ӱμ$D EiK#B]4R@|zW}zzBmMB^I0Ȗm5${ײZlɊ0:W6d#DcIiwyW0HN0f5rBX}IGrxz.*?wW f|OUg,uCNW]=q6dOguA~Q|}Jh,4Uf9,ݾ9~>&-iUx,1k tl.'.@1)[<0yVdlwJ'JniuJ2 ȳ-^QYm dgQjnM)S,JUǰyv>^(xI#i;⑒-nZ뽃-5%ёqthV } C#W30qL- d*N6d-r `9+n`KWC&έ M}Fb[v#zekO؟ }dzY/7YAKLOx*Ϳ;EN;mhP&cѦ*a{>o.߈њ_^wYrF=/)i#IrÞSrd `DX߿FTY97 I690qϔ@C+=Ƴ#|39n|(GmPTp''^-f WuKWթw/}NˤPCu~}'5&ǑB8TG[FHJGjv7~ w#(6I؎PZ702{P_"CYU+K4<@ .vrxeQB~l@Dَ?r6ћp (=iiB"-K21ѕ0ciƲAӇ)iXkc-R@浂5ante@49=NO\96z*á۔yy*z"V~ÄҖkD6eΓMIt__sPR&Y$}px{e>y(jLAZ\ϋXVYӼcZ{AgNNR\\CH߻^c'jϞJ^4w@C~J_Ru!p3M<̃D11`'}"`>y"$̢|A9y"*zGZWq:TbR ## Y.JsgR O+syR4I>.=gM82mr+(mHOB :/,Y,3z%9YdUm7"ׯ19|76Nmdߨߪ][#5ki'*v>j =fjCکf0udbkAx-ƙF,-,с0lЫ*5u!9Xl>Cml_h?(.W} /dx61 8L'Mb=qPÏa$ ʉ€$._,UF037YŬ'k򘧄AO~_jeњ^FxtR9*vk $0ng jMƳqu .Mwjmy*C<{9AټaQg0G҈?$=s1] =/%ԩu*K}ϑT_OL>ג>\T@F"&S3\f=WVOlZ0E28BT'w=5h@zI˘˃ 1!yð6["=u 5 X$r:#GR%WGUl.i1Q5J>}3_R#bƵ(kAGC1Ν K?7&5=dP`A&?ZMTUoƠsbhwYSBx@ņz@9v~F;0 ~C3lDmwy*]LOQUMy݋JWfy/|rؙbvz2sPwJWr_ 7"󌣰8W 2󆆵ǰRn4#q.80 gDCʏzAb߰q?2#m&vD7d;nPc&HW/=GO=툞M-D>eTpLZ٧ վ;.rq}R%鏣:3$$"RgQ7v8`8=3E$-*4u5$ͩlC-icL RFzG Qnv8A`byH ״?чޗY'űIYAW]my25q`}Y7b[: FD/oCGXO~X*Q/&:>~;We_X(p C=ZmĮi'[WT4 5iU0/(?~`rk JezUgzoz,q_?T:qJSVĄ-r_0j=">zaGHW='ʯ/vEwFmM'x-'}ybGCZBGs-W'YX9PrsP ^U _Π3G7HdGW݊Ԙz?X/bl [Mʭl-rWlJ ;$gk7.Gj_Y X.9X$5w^v⎍x08q `I+|﹘&'(D0Lt -MZl?.[w}N?VK]况08U3^>o I%!Cj ׯ5w'[\AM]c/֬k 猑uF(s+1qERb;\_J8> 1،# aܴVqe%ښ(3튅qyJ>/vwa~U\mQ^ 8+~4P 5dhK䊿1]odȃ:;Om'} +$aVǮL?{P odkCN?CU9kt@wVJa* rIB#DP$TI-J6|^x Rq&coYg=ܟ#`mRPMn䤉T{h8I[E}2x~>{'u{qs?vHtKv0FJĥ-c6*~R tr6DUi_L,8_Yߊu*؊&"B#bv:^f ǭSTu{{T^u8s[zE1}~*OO]%Ys<.&Zg'L`~pggVEov|bvp!Cd}ׄFJ=<('[y_PSvawǿG:_oӐ^{ !acmu~֎05u¿ Vi~=H0]3$?8ft)©J^}"/w\N}`_Zֹe縘+ 1B*޼z Z5+c#&nĘpj6ٗ p۳3BKn~IV{b%nqI_"V 7sp;lwQC~sBbG(,aNcG΢ͳY!hϐxcWGJ#ڳv[\Fx.Q"g >{O\B5#69DLK<_H6|Aō[;)rxfTx ?EQ1(9Z„X G 4l' Cx[g+^ƐE&K3Z'䗦襤''q+x(+d*'*$略d%&1y )8dTn~]S`)y EEE]3嗸楀e.?9\ns9ff0cy}}N|gU)E Eey ݢDxWMo8=׿e/ŢnڢAhSZJm6%)ofHKvK#K73^7zmTj6]CR''w|K'xM3'lTnLxRՐLTZ[VqIʯ )J`I׵VQ໌]o~ S=Kb5FzBVW_M*nI9Te[0&>>].5Amq>._gS-_]__bjqI\ٓ)%pn|=9ɗ}khZǜխƮi ~1:P?{HY mvҥ?~/P8?8σݚ POW`8kvҵYח&IzICxXf5UE8,َ i~(?N >[3 Y)چ\ L%H!dӓ%T]U:gtio kt616sq6?Z4Ȑ0E  '-%m=N7vE[6!?/)cdXz.ܥJB Ag8MThj'L  U|9 MXŘ#eB(Lx)X*U`N=C>xt5cKI"%Wxv|c_4Sڠ^%28]082FܖyZ1 ^wFtaK3;Ms[eI#V`IɨTjO٪(,5RfnR6G>U)h%W'`Ubt|E(tkֹ-W 4:_֤H)h'ILJ~2h-4SzM<يV 65m@ԮphcRV}m΂BO}AR_Jj4l6< D]k/PxON2ϞH*U3Ě YGj4cL@ˆSfbzǏzzi'n[(sɲ.Ǧ*tBo,Z~6v9M+[x߉_,IO8O"KyZ8l=v;4rLkp߁isLߜ $ +.g:?XtA$K,xR'u/M  Ŋ<eNxH0EGLe:NDn0&c[~E2?j,?&8H+x 4cn`KbeCrе_}]q1a>V1ru N=MX]> isYrSbXÜ[?n]=M>cBrߟO!?΁D8PpV9H3.~#<~~}FnBwF X Bܝ6ve)AƼ޸t,v;K?r102y AV4Wi)sɢ*])63>Gz !N8} UΗ1~#h78K{-_qdXЁ/NrP"=ZL"7"R"G!P2ijSm=ʠ%5 Zer^7:Ⱦ 4⢃UogNЯ&?_t ѱ)Љ/ES3l_X35ܱf7v~{wjZw/vQB7H>1_k;ev z}E w}r{zTkF49B5r"$ #̝b񖉿ǻX裵 p;WķM-|"e\[*/ub;ܱrtFַvP ,6Tdʲ7bQG7 |x9\iﳟ \Y xXmoF,iF(Ps;]XAQ+r)K3K$FҾ>3̖"+ L/@6`4ua4Lê\Ifp)Jfud9t:y?#э4`5P4RܩbZ+YE($\Vk _k pNj;y/3]沰pV۵6WRŲД`qY)b3S4!c?5!]C.6Ph u%Q U҂*_y)Qe|BO^^Z9 W֖l4M$XH,skjqqZ]*0?2hrDbD]3р6 VFeҦP6HZt(`|b ?[Sq~nb7p~}n~;_2z7.sCiTS;e¾[HBJU)cM+V5!)4Z+T0!1" CX{a3(Q!J+<]LBe.|$a$ޗ 9AJ-;C)y]YXJi,N**P՚i7lO[c F}ޟѹV@cdb!M`d`Qx`d00XuV*? 4QÓ*qj];1rB.eP!PEwrhd߽jJ=^]GbJdkY'R':w|M(8G@xhZgc"ܳZwʻL< ,/,?>lc4!P+]씔ř ]7k. *Ey5sI;8QG'nŕ)A"r/%Υ^OS! b6ENq.ԝ'eXJ/1w3u)/C#Bd=S&][2ݳl""s.xb%aAbmmxIqX%dLnsh/*bǼE!()O؍-I[EV 7[adx>L}: +Hu' F^Ĝx"9<Az LSH9.z 82C#[dc Nf!$g$choO؝.?:=?w[H"+K'p,.b3G"_h.(p E 9Þwgd<1j:y=?bNHnzMEAZN}S;bAZQ!*C&r1'qDdK[g\D ƻpOȺKRLDn3[4&sM68qTnÚά*de)R:)}Y}ɓ6}>@+(B36.$F.Re.ާ6]c"o>e:E/-cڥH^{Hd[]5)$^k]qBly-.SJ*+I=0zFWy>Ϝnx;H%?O޴Y@C*ashKCJv=$CA7<K b0.jwX;YFN<`ooiVI??\7۽~H~ҵfז*D^:Uםi\'*W^ @{#5 @'/PKr5ø G:Gp]@ZT3hh0X,}I s%}6.KѝsvQSH: 'څ fU-gx{fPEg8߲yd'/HN԰qR:ZᝦF5W`){w2'{|$93qFIǮO$Baѷ?5@9-[:}{4yC\W|h\-UF14m~On^ze̐gil_>9X2csI@Oc "!؎ Y "w5nӋ/ExXo[RΥM&p @PҌR̊(e˙7̪^*Iq>4vG#wu0Ync }ZGk7!4GY_oճJiQ|t4I&vS[S k lV2ʼM׶sz6'Z!(ԯц[U9]tAe}q|}9q%k˳':s]UYvJ7*+Z^9DqIґ]o]V;jǛaQ 3Ԇ8@VПk--yt~@H,s7.ldkΐj]u'!xNe;iEaRs8تL(!swxzq, Jm_G'L|Z?S~ 7>&N q7ڒ$eCQEg@iqrn} V ~GZ ͅhJu(+RCS5v.9Q"_ZoiS=uE@P g'c^0`uMBkFD3qv ߣEO"'u@+{U0T;KǂO(0b\;\5F}Xj^"W53κ,uTh'u[3woRZĠvgqzd47@k9B +Li@q6gSPPNzxEUw;m?4Q!rjD`'.]C}~JYB:F"q0LZ8 Ria&oeiB{lAd9tF L;H<!=nTou`״lϾ˶ uQpwT29$G! p %G)<˳6`@r0t^!r3]O:[v,}dz L%Np:~ƣPO9def·P|lD)iu"8, Aܾ2Oʧk$ryq lط >NDΆ,[4`ώдII᝺E2Xk/rrv8 8_i<ä![fZ$ە[v6sd@aI_ Y0UH@nڨIFsߟuYT[h+lhMΏuqq|h\i#?v%'&v4O c'usǗe 2j8 .fe2·2lu걸91ά|'&N驜 >~ZtbR"0 V8Uᅴnp0q$ܞ}f~"5`6ܯ UefF%ɵxYQs8~W7HջLwiw;IoɵDHJRn(ѲK<$A'|!XBhT`6B0HdeP(%Mf%My)ʦ0yW,q,fXkjD/rlq"˃\\b(۬kler!̜k>ȫD6&ts/pZ(Tiٓħi0j7ȜP|_sśG#/y Z\W 8Hi9;1!sħN%9 JiunE%@<*r325n*d/d 1g17H??cO>* T7/f4r(lm%Wld]A&uv, $^aݸ3%hvn؎ &}mFF#_M!y% )@pūh=tgy[];;vci'f 59kuWqu^bKl}y| #=w}-PPrnaoLô sڂΖ_ `_[!|8e_l~%$?dVVʉZiі;Z]6.ba k; 0oG̐tɜs%l:BwK ү_eROPӣ%WBm9e Fg9:=/.jM0"w&FzF؜1iۓ)*]M'xԦN !jpb} L̄F xĶpWSQg:֫Ƀޅ>6Z$}@fY2VYen_^]A/a[pX[(^jl5ӲHi`b-%7 .s x((jH'b_ӊ_+ Sybۥ(']xÌK|Sג]Q@%VsO9js:yy8eq:>56As*|t8$/t$^أoD]Cb# 6vʺl7Nkd!*{:2x0U,9lE^_ͺd<ӣ=w# 3Ѓ4RL{"޿i%bRa ᲜC75h慷/1*^|"'Ľ%ײ6?W$K9[da5}݅EyV'>Y{o=ݚ;7%M7-_WpRXo=dG~K]+ܢ8v٤ܻ~6 B_1<+DF,,]e45c[m_a^5u|럯vۯ6Ah֔$\?qC?W<0 Sq*8P&fLC95-[1ΛDxJIr }r)nK:6'Kv]bE} >uY8(ُ=Z)AK6C{nEL>KKSFH5zF6`aÀC* ܙ'&Db2AJ62܊SG<8Q.ȶ@w(҆L AY<󡉿^:0Tp%N틁HI,ّxc<$Y:Қ8y S rAF? |@GqT`id 68SmY5[ng{zyz- Ae؏2o-RRG:E30@ Vk)VJCQ g|f6e,&!ڜd9i U#c,CMkA?u-g.aEBɛyV t\OSAw&Yz270kF]@d@?,~#3m|ZT([qh.% V OUMo_5. |'ezHctvW(0k1xbMhirրױWسGm"4[b e9?Tb㏤ dzX<+- }DﵧUY3v8ZSd1f T0 z"`L'U09DT&2#)>B{Rk 272<1P$,N[nsWj\3mɨ;V\ϊƐ7Nn BUA5 l b)xFt*PO׊]|!&<1G»$j$싆=/:Vߴm V򣨔׺LҊb9sne+W9+-n+ry"K4\t)m~'yhĦi61E;/~7i3/^/F540=QɅO_^N۩PK6hb{^ Csfgm adZ0 ^|.p{fѸޘDCwww )wٞ C`J`IO|BWU:-fqӪzeS3+R"`0Ne@K!]Y-hhPN1=C}?VR̔u'S\Y~"da,ٍMUo5@˲) uNWeTaE?I Zjl.#T *n;~7sU`wHLU*fXf"b,0`3H <xV$BE1: ,wZ0rGP?ߞߟ<;='/N޾8>``Oo{Ht:]LfOMF\+: {;+`J =H7di3_<:ّ؝#*̬ <|DRտ*+d!a/xi,ՇR^)ag+L|8ɌUQ̄)X qM`ծ(@da Z~x)SC]7EVV=5U6tי#~,{LP]80#0cv' :=܎p9>L*Ziero 2b)2}]bASct*qdbVeƦ#pBV)8 ,H4L׌a$"VBޝ@8I( H$psGܯu:YuTFzR`D T|k[FB}1x:Sa&)3>fmS x1T*%azRH⪷px~gY KmQlf 2n713N7㧇Ɨ`uEM]/, 'I12)B,yA 9hij`B_*g_ 2/qVԥB7n5LJ\F["ʜ|C)L4 9#Ж*c`Ut6HfUDـ{4».n E'S1xsyMD2kdl3 (u]:xL28$>[+O (Ap+# aFwjfM DXִ8[f5ePBh& ʷ'vHI0B?*8:jJ u]AXwocf\LsXSݮnۄ*f_SmRuE[d6 x)"[]( 4NP*blgUVj[#~/_~\Bw֫}hMfCz>k ()9gk@H\$pG_ `PBRL@x/ޖ, J!Ì,! M/.GNq MS:2?[v\lzrίKu(NjrI8,-QV!X5cw†R%̭ٵ7qD:vx`A szU.8aa`2Nb9,|iHO `}+6Z3NjClE!/dyN)eMV@5Pȧ& 8x-؈&d6쌪pk{hg_9sn41Uֶlsb,Y.Ge_tr0-ezYhѪwɺg cIrJM=|#: C+MJݕb(Y·Atם=nN.^ʒxn%fГ*x-㉮XA OSWq rJS G)? y%⢃ t'>:0uce+L+~nL4&o:x}Xf6텾dcrCCЄ'fTf&1ߩrwoBc.Vս"@%d(>#i5:=J=7Oҩn{<, P|ؼ[W󷲥LI8@j ILYVѲG>xsYO.xjş.EʇUfoKzv0| Qx3 6ދ r %Fy(+y7ܞ,41tA8,j `ǝ pzY]){Vw,RhMZ.b#&[j7&_~ &eLR$49hW J|fLhBLS(lOݚֆJF) ͹~nۃ\/-k;|RZV9ލ|>~ [Wmw~w:I[AЪBi8T bqNzJ7o~J1X%ʱ1^8dV$LBΚmCԣ"ݎf>64kgYp\Od餓.0 bQC/f /ՁYa:Q4%GsmI׫SGۃh 3fIIab|j͑ca:xW|>K %Shf\Dj[*@iBn3Uaܳ?]Rs =/xomׯH.HY>_\nf/}NL^tΰJKF1/pJI,]}Q%rt^acy}˕6T]%*߶Q@G"LCr.` ,6gVׅCGDv1Xһ偗`)/)/%\uD8j qer(LyZ[qlVn-ddLU1UcEz( ŗ-WLEm P-8 U"ÒlcՒĨl3u0fpS K겥A)c&CM6tnxp u+>Ċ07/]8#8gǝf xEcUUF y+--1Ѽ/\ Zސȶl;$@$/f h)㯿SI=~ixc&9xP* #p(99 gWg?>>pom^ho i]4#:6 73TyĽnՍ}Z{A XJlqiZۧݮO/ӵdfYCho&vsnʛ;YZo;z|Bzm֭i,y2O~PnD5ͫf]Wڧ"xg- 5PJaƐcL[h%[>9Ͷlpxl=f4޼iLl{mrժhѭGeGHtK>1v#-VasaxIxVMlEC[ %m1-YJ-qBӴ Uӎw8?h$DE!BBB ā'B.y38@.{oۿ~ެϽxC_ [H~GPS ~W,GzTiD'@ Xv|N$ B2".JMpthVjt%8@6dA s\y(hB`VMb6g|P)I%Ѕs0hHŌ aNou!P:(܅[N>6n5 ]!M6 +Џ8 S+JFs/™dT {M$^dւZaPQ9U[;bi!Lrʖ -{6)t8I 64TuDmwV#'@W#2qێ#wl' V?c򓝥'@"?ЃW)&2I>TF <ܵJri ÞPZuK'ă;/8b%MNWkd1K@`)GM(w` |6@$bخA6@Z$f#ע:1Kc}f+IB"[]@hDO\lIb kqru"|ju0c`pJEæaF$7ЄI)LܦkqvfgA0? &:zϒ#u5OaƘ$)E,gFRK :Az,;;BR +޿$c]]zZgXZ2>A(hl&5ݺ qQ%b7!HX V옧xAJ'eiYVU{ªQKHNe*eLdѓǍ cKXzF ,A׾FNkקҋ}oT9f\68J (KV\n|z%'9,O܋p Ej3OĆtݍ:"Pf5v|,(B I[& ?JoꞘgs{ qėLp.DvwP8=n?M_0їkRwVkf>SJ7",MMjdg;u& c*l] hGg/_ p̔AGfmyTV报byQV̮쯧y&YwkH?=tAݧ?df]S;) ]xm"2dxWXA##1*?1SFőT'_`G0s6[0UUR+.KWRPMLOr+rst4SS'7jL.ũ\\ R]ZQbjw ,bIĴ&$0%%g뛙ZMB؇0a$+K^bnf7} ~yX xiwHs+cl9q1yorm`2ԎPxUREGl:[Y d|b{;$Vg{͡ȆeIFOAXH3 "6R7X31􁈱0!+&$ ,O[O1/'( X؟ D*ML\G$!liY/(Ng#΋~{2e BJsĢda1`YTX`vGv[\9 DT[y bq <^pAc G^˲,PhLX{OG8v!g{TuZ5W^8EG@Y=( Zhw :5' JL+rcUNnQd 4z.wóyY:I|(uU$Q h &g2'U%NUKbb6SWHTe-:I n  HJ$sjLm}|u(k$vO\~([ʬ2hhաyמjR6+rp~D=SœDYXHtlw5:uΫHka0 e#n ,s3ؿ.>T15k\Wߢύ?amAh:K(RK.Wiq$z{M¼,sh *۠h0u=K'A seDB&\YJx2"j14ƙs֍*{Ws?7we[[n< qKt΢p|6{WL+UvX +*K1㼩1kXbwr/ E538Y*,Q4w21bIR'd<`O)qx {>OQW% Y,X44KF\c"D(2_][LqWE|9`\r%:<._~t\,$S^ANz 6K.ln$r|UVw#P-"5pwalG| r `%l2BvYbf69nʈЌ}CKsJ*}`8+ɱ y NB JJQg.k-Z <)Bkyyui]D#GcoWrH4]\EjݐQpGnKoIs%ǽ. ݨ9w[Ճҋ&V)"]֛{OIIt^ZZZO!FYȨ=s< J2Rf璪z'P&x֫.哱.L7̌.|f+^}76Д fūwn9]g{xI.8@^ӂ6}7ح/0(Ͽ aX`4]_IXksX` bW)2W9mG;.ڻ;;ggq'q5AL䙷!I+$?vLӵ1]GPh ֫9{19K-DlgJse}Ppced`ee܌Z Qc8QGw(Iğz TkBAw`^A8$s= &Fk%E~cm?qYf;JU(o4OGj,|@@27)&g<8WYeZDaAD)Z .;9 [oJ;ʋʂ6X#EބxRueإg߿5Q{f[PV" '}qSb: `)/R{=i=U.'cL<2=zUK)]W86H]ڷo0gwM+EՆ;/rCFM'%U'`E>>`EFZ%?ݜox~^ 92370*3O.(U^%@EɾjB $¡9g6s.DLC7<ݹS9*~rd156LJ0X3HxD40000 fileblobHTh\i).x40000 s3blob\fRP>Y" Ήx340031QH,))*Kg7xkfc+5ZhQRfuKsޣwp}xVm6  d9]%ٚtEQbӉzJ%p}\|/C%D>">RJl Y(U~ԋQe:j3bihG(B t-1 6:+u9^rxA5-2Ag$^#HG[2dzLHsƂiJ)f냑~V9L(R*oQPYʶQ9˨BcV<}}6V$;Lç?RO\o!Gg" 8y8 Gv@VL8 L1N‰y%-ǀw{χJprhyACfPĵp۠vPR~2\߂1S<(6FeG?p\$zW;mӱuF=Yx^%zkըG-O:A/iߋ8EJw>ң./9]ɱewsduW]N/GnEomAѪ#Bw[TgWڗɶ#%s{z=5J\lȰhJ3Piul|K+qmxqAyZ uНQR(8a㛄C>Mr*.IU D Soվ~SY~`q/;E x\s۶+4v]j;SKLNo&ĔZ)R,i.ew7s-bwzOK4ӓeY\3mTwjz+5+k]tBU\Ez=P4OZMJ_`jlFCl*uF5~ln2].L͊u|Yh\ /Z:-V&ЌbY48ā;Hu>j~bMLմXhVX⠆HJILdfX&^hG"H|]3*3.ӊ[ZTEUˢ ?`N4 qjMMҜ/c9WYat~بNUVTZ)wk\өDi$-/"u4Y$ԢXϊ bU ;B#FpI.HL%qT\uea>,%gi~u5XS"5$""O˕%;Bh oU c_e_xiچ2" BRGqU*I>4dCňbZ&qM,2O <ָ zY-I 6`Z ʅzR/P *\$8þ}de~J%R#^HVG*E`jTL\|AI'+Ҡ :f,8ff;f^+m!h$a߿wxy HJīuQ^ .Fedi&sU/#G-VrLcl ƬrFxRdd1*-傀N6Ծ3V/Ώ 088nu áEtxloԏ!ȹ&sԽ#?ALe/Dg>5$$CGxN?sxqV TH/iNȆϞa71Xܛ#IO![KTq3-[Ka*5ɪVdXnz1,2Чd籙wZσH}m?B8Jߣ$ݫID`H*0D!` {=KBn-Ǒz|xxUemxNYPZJRod!bq.Fɰ]d1 T7.5i6"݈ ޞznI_$LXrqI掠!m؆&I{|LDD ^6THI,N'Pa+}Mmp-seUK8ppKl~ՒK: ,1zLlk#`=GPEPa,KOLdp9T浪bkաChUH>`hP e(F,arL{"ˑODa =1]H#HplgE"M`g"!VT i2 ]Yu4*4k\#"Ne@PZ0]X$!"ސ3pKTR432 m)''HL 06:XsJ˜\Vh!%lYmv@hSCx‰:>Bn {Y>v|a@'1fRHl&cTvS,8iYlz#RtJbb{i#X%Z2T'#pTCX<:gȞ۵Q/i> cpX GPp/z11;RW2ǟ.'>x#䞿AO#,22~_7o%ږ¾#^'? r݁q( k5ƈ S7>2?pkӚ NxXiDfA(j%cv]pD)""Te,a`P@Ͻs͚s LNiK,bFIFFJ@Z߬IxVu5bt(P ډ5 7V9V) ƏDҜCog8I1tcl9UHӛq qFYVsC[uu k J> sE'j7!0 VTq4͜%uˢޟM7W>"baMѠD9gh0Rxkmv*ѭ{`Z("F۹c%̬r=!S)YJ|^{:Tϭ'%BKd7=|=N#+=sPR d1ԤL8JqկM;֚3+#u VW‰ZTKkC8\TQ9-,^ZHS,tt (IK_;}X0k͕<75Gt.%ήŊ-Yi>*tpc89TV[2E\QX| EkNиhC=imZ߶IK}`j\iW`Z#" 8HyF :Jç4, @mˏQ·qъ6dn NPf`sMl_W02Ai`K0Y[ N!Pb~+dCQ8D"RNZbSL ҈qcRdeX l'}މ$j&Q貵!yQ9n3;9.IY,+9K;{(`iٻ(_4e"3S1# tՌZSI/%``o0uJ8@<] LQ 6j1mȿeoW_{ Rl .޸H(뗴+'Dж$Z;% _( \Η{ӷBM-{>~:ΫP-VM^/7[@܀Stv6jm 7jp8<j@j*KVB dΤU&' 3Wp,D7=ڡF^tұ]g1偭,)>IFBe+AOo gGY\K #zMkYrMU,#vJI.,og4:ѡF4qd$8qeoxt"rM5 jC"OxhJ%xjC.Ґ 0$:rs 5 Gn[Y@ܭމ!$'P%ޤ]-`a۴N߼tm#xB^)f"qgrsmiQ(3\HXXk@KtBR@1.X-@ Cʼn4ؘѱ%X{%J_s+jMyz:)K(Bޑַ\b5j̹Kj;$ =H/9'ּH%2y&GU?D ff Y;o4LiS}Q"q5p$!ϫlbfkIdo'!oG2t~p1L^=ڙɖc^4V%rJ~syql@iZm[&^v!,RBCGƛ7:?`9 ](dB )d"Uc)cN]qߐ@Ssɨ.1:f7hqOG ɓ'#[Мeր"a 1f W+$Ҷ A]#9ii/'xTECpsW#uX1z0NrSgzhpx4_ Hݷw^9rP)oN3R4}l/GꤷOV͸V?L'9;HFFF1y .l enİ;:rZZ<G/OoĚ {=bɮ~ookdٴk\,?3?vu8V܌olQ9 X*x?}D|9s簂q4<^̾Czlܭ? isߑV^Й{R fA89L:3i;\Arg64z t['#e?TSS\Ns@+GL׼0׵N/Iyz#EFpعV75vQS xػkr kQP_ []ʻJFۗA[xcE/ﲷ ^u!4{w,=`kA1M=~c2Ѥ6Xbۺ埋bEgbqkV 2WN,̝ ]GIdtĕ/K[x=Ze|~̽Н7X:Dq|7p Y;S~>xJexcpIXYMptp#Dk)Mw8නV,mVC.\-0uZ*.$;镻ￎ{ǞMl~bpKŀ0&NHEU4 ]kL ZG,GZ`OY_v V`6m]S[# BF}E1qFqoa-7ր (ֶ<\{o.H+K07ؗWf& ڔEܲAոCoS>@?ӿ@|֡a EZVrfornWBP"/ľ}W^_ (7WL~FuK}; j:~7#^/LL]o`7+"?e׃Mvq D}򽆜rZ%!ϫjih")t2k^6WU䯥H>Bb?Oj`#PWe =",<>|~`q GFD.tgԽ2 0P3oξ]100644 s3blob.go71c Xюna100644 s3blob_test.goKar= ~b&/x340031QH/OJM.Kgɼ(Gd6;o *3P_Z VwovKkpFԜԒT$tmݷ70T?M-pKg4]]^h[ιP EEE ꀖY ba'6}e˴ SKeu\Y1+, ޳fxAz/׈:u3f& ?jַGY_S'I*??}̲Ww+3\a6P90 P9L9hE7blnY5rO<bck◽< t)FRz%pɉp1]^'y戍c Oa 'ጥ"w}v@*`ے\5S?AM)-OLIG.y4mMab J 2\) a\Xj3xE>\*!j3+WUIrsYIV,cK0fq@[; AF9inUiρ\)RCȸ!BP@ەP*慚ZE(49,nGe 쓳G5T>\yzԃ+(100644 s3.gor9\ 9}7]*5/?uV 6O_R'>#xq"0g¶sxQo6ǟOqӀAJ >Cf$ l{LdHE{HC &w? {D8nAi%VW.!RWZ櫾B7 h:CN18s`O{.DO.MۻwX:Ѹuvsvb\n= |]ެ%4>9*E\nY]]6Nv>tM4tr9؛ΤucbX%qM?neގbJ`yok˦m*/O.{`Oso=/=?.))M#bw`r*CwEt ܳ?D @ 忡&9'/r vTv#hk~7*-ac}"fZa"z&2埳CZ\kڄ}[ctzv2C}+S'IyaklIUt5}E^2z3 Vq}郬-o5G0ܚn 1}n{]}2hqR$,j @5|>~,X Ih:G+iU*rٰos< $s.h6џhkWƆ,]bD>Nt~!VZzbr9*rsz#u< Nwb Əm*X.T2 x. Ny> GjSKajrT:*U-9Bqj`k8 bYʩ8Scc.J5}^aTJu1'Kyn/1 J%:;JrL># QcZSWtaЄ}|gc8r#qJ_LO&'b\ U~RJn18JIbIi j- ,I"N ?U`ݗu ,Sϩ49;D͡(9~,6YfJ6qM疝lbj69S\5$1lPjIb>Fn[̀<[b/`ÎjӉEr%fIVT[ˀdK=H^9B)խzr j4m됪Q?PRUj|Z_گING5ɷϲf>bxnەR'Q/ R'F0;7~y` ĝɺd%@jcP-tҕ`ZbywL@ dtªvjQGY^)Τ΍|(jOk+ ȇg>K|(#Ɨɇ!=prAZ1K@Kr\g um3cQ72㢙;yg,W4qx*k}Y ]8SAeE.g {ԟi7wL5(vlAy{VgC\[oe1 )_Xit@ ~x;~eR^j~FII&KjNjIRVjrB 3QuDF5d)Ҽdbc`cMO=YS&{2YAۙ&bZLIMK-R(J-.sOs/N:((O!/3 5޺xVs6 ~ NVx}]7mg={YjdRk~Nvy$ On hPqM!K<&Rh..A$2* A&)@k Z+]%yµz6 ܂RKpvJ&R34{S,3/yC!GN f93΂kaEXމnK6F'Z#|`7xOfWßK(4[*{)r09-\r#FIx%ܱ7sulX fNb/0OS(ن_c_mfm\ lo12{:öovRBx~~z6 V>f3UH b'UvoQU:+` 5K;gSbv6<{džh{4|>N|“5 &̟qcNȨqz>XUV|I;#e5Ed=bǰ+.V[gay<-v44) 3t/4su1@F Xu n!ak|?= ' kP.b %θTPzшLz}dz5QK 'jGԱVfh`3Xaɷ53)f;:KFw)Bfe0&$49$HVd{ ĩ%E]g|X} HJ U t?zY n0=ʃt@-M3Yyl^ K(E5~ #S`g{N/ N{r=`WPkx]fm}M7ypD"]Kϵt 1*~*VRӢ_;9 = k<9ޢ=8dE`K6ץ.fsuҐtGrѓݔ`ٽ%w|0< O5P wwڷY~ص|@EK|XXjKk(1c{TEHoEb}4}G[Qu(W5mx%BxBGFb^U~bZs$Ʒ% v%xM'net/httpQDeleterDeletei.err := s3Client.DeleteJ} qHx]o0_qU4wTBŐ`b&9m쓍9jya~- tuI4-~u'WYsRBi_.!{F[]83Ӵ <97Ah9lUA#(j[yokTeb9.yjBO LռQ zY"a !:+ #zPˋO-1~s~Stεuhv>clyΜa*,sZcڂO6&鋺@0~$`CN๺=.pJ^)}ǪyB0(wFD90)3p[ QpcB3#*41D݊wq?60|nLI4}hB]g7|`>.Sw#EDOo⃾KipAxWo~,XU .*ƪ\@x9jUv{-!}}$DQXVv`-ؑ<ہ`szC"-z8Vʜ.V`!l#j)kH)o=]h_B*2MՑbziu")*!(m1j+c7No {uד>8&I! Nx;{wBGFb^U~b46K/xVMo7=KbdH.z08q8 l=C,ƻZV ,= həy3G*Px8Um]p0ʭ Fi0W!##]h8s`? LWdgys91gM'm|TxgK5,6zց*--ٽú@Rڐ]3=Q[̈́7 u= oYrEz9`v?S؋2Ц9+&&JRF K F@\&a+D+UC5[`.eB%:񕢞ݲ85)e,Nt0t/ oi`we͋6%4Q{=?))W cs:\?eyl1A,}M!aKL6oTI04Pc}h(;Qv DVK ytA:<7 ָ3hǧ(6.EJ??Ptn7*bg}XI8NbCѫ|R6_.".EiUr̈yg)T8ǭv)ecr[8z3qrUea>QNN#[~y럏)@0ݬɄvtW_ds7J#笾i7/u7nLF2U/\cۿ_ԥxo7\iXyobM^ XwWAڝcsC4c`^8{wwOY-;VB}`ep hTS G7Ǔyx} S~ᄷd!2Fɐ\N&0>0VS@l!J,4G\'?陕r (̯lSzxfIc etIKA`h8/  > q.sҒYf4c ȁ`F"i`_rcdf%vDMYUȄ ؊!٣8`6xS8net/httpQHeadrHeadi http.NoBody$HeadLresponse '+dxXmo6l N6;s!@7yق%m݆ahiHJRݢ}w|h[aXǻޏ4{ FpȫZ*CFAIa$L\,gtiL7ʒQ ^d8Sr͵Vi"kå% SRd Q}ôIfS45pi830"|`pPdX d9)M Yq$ICEQCNȑ"9qʆdTF3d K#UL7/oi)Nlڰls `+gfq zMKo?!0]{vYt2=3T—j Uh k XŶba@\ g#U9Ŕ{\t#Pш@n6at. "eAA ]Q1X]󪩈h9ìYP4JW m ȕ$V{!hȺ, nQ/W|4mlXnYerTRYVd&[\ 6.HTg"J"KY5EKM=vUS]_0dL_E fZ2蒕1dT2{85'u ?u p4G V!/H_=#Ix|ipzM^nOb^q?'-[,a lXQw0lm`Ta`I,';PX H:j1Pǽv>Ǻ{W쮺P@P vZ:xW3P9}22)]OE?Jfگi;^ϛHTo}LfؐQfį6 w%h)к]'1D>Tc %<;ʾ`+/;Lmf2M8}uw=J~NsOئ!slSV5Lv 7"zo&h}U5 1tRu-X? q*O`)7Y)5 LaԨ4rH=l}?Mjhݽy8Fn@P$$w)^oһ8gcG^Pډކ:Z$N"Vg^d<6HwE¶$nmp 9{{^(tNKn/p Vօypu]ҍw$zDW{Uo>GρVwReN˅TpU] ye ߣG&@; ]()}lnD 肝TGdt6PDk @Bf?wcXIF̠=Mo)\k6P}.W'R= JV.@X'|mNTʶ!Gmm_)|'x[:QuBGFb^U~bZs$Ʒ xis6+v1EWuqlMRez2 Iye+i$lû/(1~bVRtrpFQ!/wqEE&8`#p.Y/@%K6ˏ+^VB*rB-:AK,\Jql5Se%GS YL% E # sp;<כyE3@)Oz'yprQ|0Ky4rwy9]{YħI8ǿP4}J 8,AKUzTq* 펴{ 2G:z1fG4/1RxhqHs#"} ڪF\RL;cH}WX7OjvÇpoDQBgg('<Co$w8{ 5s,@L^JB( fY0 Sk!O@b)<,WL`XAڐ$c(1U4]ohL0hL-}aȀgl,t|"%$jCNl *\`lNP\ʵE*PVeŽId2 5U0O)\ꤛ pA- ,!K"`j&ntgXJP]ϪdE_2 x߃󣗃cʧH7HP.}-@5}c`Ҥu 8eF% xֳ d}&O؁IHEXg`2rF uxR:yavXhj.cxR)vk|Eba54j_"&w&Z@EηJ܌5Rό ,jahj\:SE#ot3 2zÔ 6ߣ #`PHq)HI+n?CϣMSpNL 3"R<ΣEp?XE#`)%5M' x&5-j[Y8&H-#=:uiK`Uo=&SM~2n¢ٍ%8dqQ5A-Agt<.<'%!P,:bc}Csvp3[hB ha: & ^mfR_*QȥȰνU BOQ䙄4JQ`ⱒ`8cV/D6P}/1a Q 9Yb0MoB&g :Fǫ+QN- ; eetDi}'ť9C) k"/@`sS>6ܤVii1z AaNzW'ĩkλsvx4KT;r5xY>34^差\^'!~ff7e7xq3ʺo}du, x R;l'Lx 5~nѢ9%Wq+q{.2sD =%x Z",өI6ū\OS~#Ӭ@lc}S㻊[SsQ$@qx}S+j認2a FyQs^2 ZF iP@5cKu(AYH#?"Bj.Óeh]Yt~pS)KsWfIНy˖%lLn'm  +M= FsC ffĮk1jA+R-4mNrR}Ju/\𞹃Y!jQ0_ ifܜ^C献[|GPH< NE#^/>!=sK4N `h5RߕdR MX;B:`^, "8z ZGX*nfj9 ĸ$j.'Lɒ0% Pv2.x&5b'͵}j.ݖ{c ;7 /@TxQyz,5yϐz;7u :oSWsqxE՗Y;d.^vbcT$)t1X+[oԗ𤋤Q~YJD] @i \F/_;{GON8-e-iQ G]~<5Љ1oi6U܅t X ܊cr667}=> {|?X 6 ,ŋb|(gthoZƢ .a.].~r)`mw"Ao7*n~OcuwP!Bj! (Jn<}65cG}BǕk"D:+}74@?L)=xwLd↦($5L.[úo8y`c̾55-F8J6~{>zwYާx7?b N&q5ͣEcmU1}KQi 90<:DZx M gxkڰ] OGxc9h=i=^5P_f'xv)lFT+.}Ǧsd$U'focdE^133&n~)ÆHm`Ox͒]S0_[\6n ⷋAAӒ--mZ]@$伅D"IecR #K2Q%+ :Ɠ:XV*bQȑP"+cFRd4c$+;?[?yWov޾{AD$8'e/_OϾN]]A6n݆M͚ݽΧ;!eUY3"3qf9i!c` MtM6.px&Uk`;!>8>>pz&p8g5O|Q:!^f!e DuCTڹw.r52Zg?EX]fƎjYPTD1]'{*)CꏪE?^h{.@﷑.qYEXm$h牐2Ua%; FKR@3)^H%|k 8L_&5dB^5R})iIs.:8YJrAb ϝ*:1}Un#Y* :HTUzi f!vݐ8(1?h1 @6 {N%Or8y^YL\SQ:RE 6pH "S86XG7o??~񧟡BL,~X|3@~ol}^8[ Ɂ iӵePmo7jzM׷k&5.zƷ 8^vB2xr]F݀t)0Ϻ f. 7kBMs z%zy92"E|tncI*RD,r%ZurXU26MwPaBOyBӿ2$S9~NęCN 9{@]+zԱߥ@^GKb*4Y)]fn@hoҞ`QLD&;|2&),x,kVr! ‘Õ<*SͳK4ӰҎUn3p\ߎȳus&FyoSꟌAm/%?'z=g!Ȋ ziEtJ C䧬ՏQ |{|kgU?U-A ^UAgeY3_[9|pX)(*([wX^Z&aj>Ǒ\I2B* m}lܠFʟ䥡:O\<8>_cBiOVba 5~;EUEjO4& k}RGR/6=}-Y6$T&(+g ws2w #2YEYT'܂w 3n\n oE;jW} Gäw^Y4ȲSZwűaީ!սՙ|3\r{ U@ ( $skj3{hM6~%0_ v-ZL8q=!<]bsbw2I;ܱdgH`8&:[-_'rՠ \<[LS5g3@o^,iB|QwyK'Ufx)P/?mvYԳL7 +wتMa?S@sSCF8072GӍthXL|inܩI'y4kB`LC2 /s,NpKL>Rj Gl;RaNs nl 7$ 8}Ε~E|ߨi{9)L 7vdbvjrYlM4$i@6зaJ⥕Csj4/N|25vnȄՏ EXlsnWȕ(hBNE$-MϦM#~_M3(_NN4=&[,30 }wffj %gln!eDa=ѱ9ZBLȽ[&JImr(SS}^)xYs+ %E˅ؗcQREQwbiFszhW 6pIUѨ*/Fi^f(_kQ)YBT*sYRs *_z­RCWY:3(wv fw-g qU BSڝТT 0F;^P Y ".FOz͋cH!I w#N=]DjTJ_I@4NdVs9ѲJǍwt Byjͫ 3rU`^b8-o =R}OM~@*/EYig6bdR,wb¬kv?.S#4i)5A/wW~+άԞSo>Vg'JQ|Qcbҏ0͡t0 t؛֣ UMX%(ŧ +o 笆NN~Jek/THUQzŵ [TL3dc5w.+FtZY ^#ZI!ǮEIgm4,eD\LknT^d9I^(Df) zCTM IZ͠K3X0~Yذ{Gd2>2'=qL{t;"WiD(sڦxJQ7ܼF ?;%L^ ^FE0wL3v 59ӄ4a-> iwݻ쎽eO eF縿dD5Nֱ:OoNnʖD߭Z9ސYgJT"A~D<(ф y&tbG6nͺ1oIo4a\wEA ":#C }RM((QVML (ǟ$l wa+28p'sY~ph[o`rtC2`̈́SyKoa6jlPEգD~qThtf0ntOx)?rQ/cOjCJ7ڞw$BM\k:e)D LQ ڂ ʐ]5-.D 'j0TփhXa»ijt!gh,TFM!*B?V:>TEot;f*K<(ZXjLG|ѫX0 %p73Vi r^{H/N3ͪ>zyB~:B]/<˭_VR}n,j+4q5F\n~$]0 ?ї疛6̓s׿mā'] 1SL[lލ s͡t9![GX[}aQ?WK9ֹ̦V!%qP!-dOL#xg+LMfKB$lQ@A}2ⶨD?K1om AR_Sf_y?! #}{}4x'4[dىvY#|0qέ#o-Bۙ+9 ԦJ}{|b.tjgH!G*%8]Mc`ϸ#I/4C h]G;LmZyڌvWCnmOlWdjݟHZ,t!k~ zkg_}]^@dZе T!@/E)lI6YS na'|v mI-p+O*FL:0W w A\@#Y[( lg*"~^g=˛-Uô#Í ?o@ς3,9xh6.dZ<{m?iߘ n8іx#-g*ԢxAIF:zT Wic)6:9̋=^Gx@w&S1UoM7npޞdnB_w wn1{iO_Vfeaֆl0_yІvs)V#; ;҆G݌VSvޙdB>O$*cɮŐIR>L)qW`ǀn(/ӎ*X(9{FLzn%1\u"ށ@㸨hX[[Hci?4`1 C–YsR#kфFl^nXFT=hSѲ9dߵ̮jNL;L^ANN?5Λ:q]ңҿ$KnH9Y7䱚CmYV>8Pigˮi1TdisS6&v| `}zq Vs[j|$~MS_vVbc$1@shk@Pɮ̗,Kbu"_)+Bہ Mw9h{ YNZ,zxmdi0vSm {=M |:N#0@msƶpu8n`$Qr2H mCH n8kJ咊= ;j8P^S  tڧFgj..\7j8[0(6-bf s/T 1 wQ*)_e^q 6JWZl)4MA*؉"|:EhiL KDHIʚ\sHEU7f(jJ]?臙Er uc$]ZΆc]?ZjvkHyN FIT"g#B]B`""i?ʜ  <"WQ1 CfEHi)#zaJ|3 #a&B i>ZOBKjuvSVS1xl?X3$fKƽ$:m&pI&'=Pd: tv`<ǬGd d؇mЂv8z s*#Uk0ZbtuƤlAhqUcjZ&J(iСUZkb# $&YEV*Ē4PT+bJOLB# kwfΞ_\X:>:=aN(ZÇK}Ça(\z$)4EN!)_ eAmNj݅N_u%QYY-yco^*">W7}z6Nޗ"7ִֹD7:ߵ|nIyiogFQ^Xo*?f>5HJGi8;٤SH1+p̝o#ێ<) rzjm}7U}۾+]Kq9EF`Pf0FέFa\42 DUUT_I ?dYץn &uEOlှh6aR2 1X `Gp d(["yA NpN@>yؾydӌH/H4a#y,uV07 >ɓ7QyY 왒2'm13&TYo)i O "-RWÙ"wyx=y0HOĐ1/9Lb=|U̚x)i8vOC I}/SȒ5xKm(okZ#2>K$"40:cӴc[ײ 稢N 5ga*ಸyI;4og*Dю4WzުZXھ3|#oL QMHU׽ŭj˔l艌Z]6cձV)w&$kռ{?h?ss21;'yW"S<,Jy޽ݱ$󏘳Bz `<ߥ ~LvAq;[o1I~-K 23|EK3 t[ƨ?c}]]ٞ/A]Q)>(_kڿZ2|¼HSEvʰ{{MWlBqvWIZEjÉ%Zv4$bU>2JF2 9"]~D9Ł27n+֏{%3h=OkByqw$ rYka;}'E`A&VY%tDgܹ  n5985^Fif~BhQ(Su&~pUƠ߾n?xM7!(^jX*2nX{)@Si&^ӎoã}IlHY[ã؉ۣEAZ"g@3!`!b\W$#VaB)j6vdBgOl_KfBP|t =)xw{Ct=mU: kҏYpXg1o'3=pۍ8SՋoI W:C:pl(L%6akvʇa#KTZ,ou3"$|ҫ8v5m^(yVP…[2촼OξY;8~/\NZLbl5Sg?q6f,f%z4d%8۰]oXDߎs0=Xgt:MĊW( ǖ&)#gvaPފZ?WM ;p'W'<8|'nvtY:?𣁽Q|[f(~phjza58F攣6+ 37UǤs[ŀG_ 8M(8o R 9lZ!< * Zc4z_Sp`CW }mlO/ @M1#h/޳}xsg**K'ͭl*V=쳛?ml1?Ai,p=kv+s+GNfD.p,rc ׼ QnwvcY dn7wyWN!bUn< 3/D[P,"ױb=-~̰߹sͳyQ/ S瞪0FfLrmV{-M;&@?>J'@-&llOp*x 1|c@EFŽ=v֏6#"eХb֋r5AA}% E093bw[ $?)BY 9(h`$(+flLg=P<"!f^(Fבu4b!HuSLIv>|`p}#b[EU#:wp7EWEU4OZֺDujqL?2m'Ez*$h(9 k8`!Hټ8P]`R <Ϋͤ^ Сe w zF :oȵQ@Ӗ*0!{J)ܽٙ08FmhgU8=R:ןw %?b@^$N9dj^tM ]|^E@+79^/2$GtT=t_k<*jk^6AyHmw#-^VG{*Qmug4?uFS+c<ě*9Q)VKAA8H]]FfQJgyƏ 0hXiT8菦)ԷB0TasQ\]Eͳ̕3~j:%VeT~ qhwmOrI:|$m$<5$)bFkoY)N'<Փ/&ogr^qHge|ޫ,Lr}a1tO~:Pk!O~8ypaLdgty_=k<w:j -YxKÂDR4w>sǻa}b4uC4/52(cRLQ:4<#iߧ 7Ԭ;sW(">^k-;>|ƞHQOY-Z+7~ Zҷ/{z*aѕ =NNNIJ7 B~7SDŽ2K?C8}i(E y-NޏI=WGKiNw3--u0= x{2)ehFBJQfYjBfBRbqjB~i99 %@ʼn yey%yś1sd$U'fOgl*,б5kp%xks6+'e$l_:~:ݜ^ovl6Pl']M"L3fw% HC ixv|iooSG$Mˆ[.ش9iLQc<9 OmK(bQ `g1MÄy+L׈p? Y,)gChd73C\F2V;$ guN@ 2Sv&8cC`;b@ꙤHYt#Jdqt Kd+B#v+:U)(5Ff{:[TE%i4-0HE)]< a8=mܵ5D.Ѥ>52MZko u$wmu#" ;N@V1N.i$M8wMH(lm-2e{KcdQs3 G]}hCoa3U$4wL_k깲CC9W;IQ2S]mBPBQ*h7e|Ĝy"[`9'-T oS"`X RgYت\$Sa-#}rIr6†_=? ?t [PDf cʑHq+*cО2FBN+U W25Q >"k@eL(e4gN)%JWb" k=1<*IǠbYo|v⶟Qw[z"^1fKn޸k:E$;/,br`^W Lu 3!ZNsx81wUEzv{'s t:̾]»L..ؗP=»ա F1ь(va&.+"H(;5#-s2el;q^.hl{T$l W +r.>T]4FʑwTe1ebƚSe'Rxz)RʯKsӥw]˓y 먠tk1)_<#YT$0o7$8:I=^o 0 Xy$v{ M!F2gB a0=6tY&q6tj*#m/($'! _qC>9bc2I댪SuiUPR*Ģ{<2J`uu=L WB4Ų%ĊLgv2X;6- Se(^yls̾oM6[oAנ^ŗG{^6rS&hwoIZ$qAdqԇԧRO|2W3Y^wWs^gӔ_4+yޑYmUqE,1˭dxDnq%# uYqPw |%ms| vNy=I'@@{5OqF`*lܻm"88͑?}ev_V/sZ.ri/-Xd,`LKjN4S_5m>`It'/B.^+c&2kg QujyNL#rPz1x~fWʫjw?N$\F {zCИ4O`vO0S w}^W)5<.] MD0 =g$v۽Yhy-2nR6 o}q38nlcWٟ2  9] {`5U|JTKdڳ-[r j%Zt/%K,S5V{=R¢֢ ҕ,JL1(^wް[wğ+wmu<0uFX׺,]PҊyh k̓LuzTr5Y-`H~U(8pͤ +۪h@^( {;ɊB!CMӇtanDqOmZ>[+pwTƃiNZ5fb jz'gn8ʎ3}lt&nI`B>Y>? ! VQ>Ԕ:'S0T3,*[ZNXN{9W!U{g{ GOGKB8i-KL1Ȯ8(A+g9ۅOcBŒL& SڀHʭGkS~T5Xb^an^'W?1*nꖤ?( Ԋ4^uuҕgSAwO _U-\Y!ʪA 7ԑFǣXX%UIв`xJ'UӨf~1Uhs`)$w=ȇU2"F <,`Hu[lu]{e[/ߣx1SfyxRG+5-9CL{oV{[_j/or)WNs[$A%.>~)w 6H!)[Ļgg3T~Im$.ւ 5$wHT{wjŽrŢXU-.Q<`[(6l)P59e4T[cP@!dDC,`ʨ]>O )S0*RtH_y8Yh!j1? OJw08jWCyϝKƲLްW8-R9V~yi!b`]OUQ_d-Gb #/4Wj}]ƇL{PS( sj·kulZZY})_;֝ 1:;C XN/>PB vH(\_ L{do4(b4J M1R"`xidoZ<)/WKm=2NRyK_l`W)E*^WyII\4Xlj*ApWFwUqaV]"d1:$.2Ux,n,V'zx[_]1##1*?1S |Uq%.N̒$\}$9sdYtܧx340031QH-K+KgҀ9ӗ$3{n&x!b΍qrW_ȾAe=LaF~~6HIO1B_ٹQmB<+Qf{ķzboڇPu%) E^tpW 5yV2o+"qKΙt]31vm$]GKg=BL2 xJsԅ+Um2Ŵ )Z(LΈ]dgV,o8JRVQ i>P`ٳZf#gMVF qp/Yp\B,US(г.w(tDB|]Ext"7<.pfs FrlQ.ˊjsS -*}h!wBn%.)TS#)(Y hy FyJ-v>ᨌQ,'lw0# JϺFԈG~Q@s&¼Զcds#yϟ]>zz~v1!\~zrkFAHR!U+܊a8H+u-<$dоg ome ZH n$YRĮzU%X&'a#w$ȍoޤEsR?S&oڮ_GE8ہWdi)JpԐWN, 901F<7cw vg_Hns9#*U!)PHE0F? ~lp}mc*R3X7[`KDvHm740FAC)Eh3J&=ܓ1,5&^x&h%aځe0%pRG7\ CǿA\*^N,etsEQT {xw_{< 5_dqbRڲdF<̈iJWM-x?VDKc0_;hš!qv;خY.IK 7Ֆ-i+m(IIÛ'p&}<jpq.[rՎ>$S:A+lRl>9N~dF{u=)vC 7)̺ wsi !ؒ%p-~q$&N|ukKܪ$1tv:0ѨZ|3F{ÈJ@ɕ;=n9Ǥlr}ƯHUexkRyslF Irg(lӰH-|,Zc1 $=Lv3ƕ8N eFHozqy3hKă3 fgP`#  =KہF sM:/򱷳5 "9sao0bgA r݇j;E]Ө t-`\(݇Ow_cJoo`%zgs?pVeG*^ߑd2d^'"u% Pc[yT9, lʣJ.G:fsR4H/֋F#ḃc葚qNG̗,f. 1!˅c&IdXf5~9Y拾mKj=ǾzpaHFK6U<+ eX(c*[Ril*Y_HťZ^'^@l ') a];ꯞlosE) u)-H'2a@#G~j0ˍÜ99UY츽8B)v.ׯ&bKř{ 's깾QI[JJRqN )XIRXt1qٝʢoc+a?h3.8rAeXx']1%<ĵ2 i*\ݠ/y6(!X:eD++[*m,/L%VV`NbEӺ[xT;o0_qJA w. Z$KZM$4%Ŕь$2  Bk6Ԯ.@-~SJ[vVn1l3XR+"˖KXAʠa@p&@%\/Њ"l_6_JN_b%{z`h @<4Y8v8Q9[Ge yOkL"]GBWmhm LNG$|@"̈Hd='z}Ù=H$D 3:ẄAbldt &Y9/}Kxʲ(:fC m,tnh(08?JడNZRэ!b$}䒪V$G |w]8+ Q@p3D"mDY t-ʭ9FMӦ٤9e.3 zN,C.$Qđs=Nhʢ7oyGcy{t1#ѕc /" гm4[xSD&q'eKS-I o CN.A>4_L B?OCqGE15:tW=&>+^x)v_DzRuMzjb  .–r)ev;vEEP )P^䓦# ɱqaCgD?6i @(19QF97bQ[NT$HN^LJU+r ̅inwm4L+x+0E` GFb^U~bFBqxTMo0=ۿbRQfިzXPjjŞJC#B($JH!yoy"'XCQL8gX85VǂۗY!'d\^>)m#’37y^q-` pIFم0 c:0xFXf`]CʒtZBIhҢݲq?ף+!P*NSXٙ8@ߨgW_w)HB:)fjЂuGSeީU9/B?&/Ln_zs[m" t(OQ])U.rP.*|ryR*ົeW)ͳKs% qm LzYk#a `ؐ^]y,,/KrMz!YCȏVh]0GG$|}Te f.r̜"Ͻ#6|J .ֱ9xL~Q Ca)WMY -dߠ=8yB8v | |R=. N#Q&Ӯ xQ100644 inflector.godXxl/X;X&š 100644 inflector_test.go3+J.Z_ Ӯ100644 singularize.go^J^2f,Ԡda100644 singularize_test.goL0̽#OúBN@*DxV]o6}~ō(klK n,qf1msHIIn/@a[rrQ*Ǣn4D%$x2V 4P%O4BUm-b3zCg|T݈?fY6vv<~}sw>iS %~+>9'EkkȮ8-ъiVXI-QhXEmp*E+>6]Gb^쌒in[-GqdVr!9R.ܾKS:r]#:zOm *~d('QriBt= ~tҀ o*Vzjc4EZ.gřɒ5JMGX{wp4dX&Ң6('n.!AU ;rdc?%W`tNd }`:CG?ШPÔIa{07J(6XUV}ɽ Y,3ǰ!&k4#6M0"a0YKu~;;%Lsjt)91R= dZSx({!<=uRvke~ &(BOs_Ƞָ, i/mIK.fnF+0]ApĵU]C6J| ۹' E Z&Nr)^7vCݍ iHI$y)F''Nd<_*-tV+>&IJ0IyV*οF_ wҏ-A-=>X<®l}a/ɶ[;]`ta;Z'?t"WxejA!1ęc$(B$̠Nual! \DBoOnCOP3YK 0x,|<> bǣ?<\{ 0cEΧSǑΏ`0>i4X?z¦I}c7dzكHTWiMBMUSfނ⧤GaNYAj0M$HN$g!V"˙%/4nHRLigX ؗLX8l=nZ>r'F.y+H$bpG*yczΜ vwjvOt<5p>\vou(vSR?4 Y86ӎ/CxVo0!EK&BD6J?jc4iUG0 + ;CHw>w?oMg`$J˜<q'6r>tjCr%4Ҝ 96>G1?Ё=h5fA١݋aX0vH!Q!V't&"%wp0HdeF!p wdixf Zq^/c&̟]lHC\. [i _"jXKNw-wJnxJW #D9(E1Q3TZ!*JKt:%Gy*~ P3uؗ1LF C2 YYfI$i!(MeqJ~Y 6alif%%Q45eI#Y93ᡴEԛ{xSy>-U=oa vR3vE'xuVɎ6=[_ Nɱc0Ih-$f(RK7)J^(IZ^UQ|ݳ;kpY (I»^iKd դ}&lm&/UUV)a#A$2Mкf-hiȒ 7ح\6sy̒?E&@łHeHgfZuWm?_TZ Vq%씇Asq4Ё'il% 0+knZoZw &߫=+μ1)cz3l3)-2C-΀>6)Jlc? t A vj߂jj Eg3CfuoXɅ%^_N6^R׬X9A8KvUmwCN^RhCSU@V R1ՄКtr nw^9DoKU[aa7c|ݐܡ?-+ zr[QPcunNZ3āƽ5IF*0(VXjα=z[ hk:.{ (9 &PI[.*a[H h;sbQZ0YE6-p1!4f/?7K7: o7`]緝bDy%9JN*!( gvy<]4#Rdi?=A p3t=Ǥd!IY>Px=d%%f#e%3gV#D %L6p#SW@o%5 lI`q`9\#tS,?- }fa{LGps t[Q%QICl\Cz{_D@8Y!t5 5 %´mԇkgNO5JZ.-9sbl߆! ޜ* "UjR@Co{%Vx{(tKp\QjzjERzfIFi^r~~Fb^U~bFZ6ԢbT̴̼|L\qf^ziNbPiqf~l_q 'hxeMO1_FTiW@=PQ 9^ (3\ǞYgF>=0vZ͓F 6-ٜPyz/\VgnmtZK{V͛ejc/pK ,G3-(e_o7m:Fp=8BNcη + N`11Htn%XY&g4q%DRذ?|X`{ǝШs ^k2 nb(oSNjd7Fti(/eeR@AQľVH(u[ RxDſ}+!q;8 ?|<8ʉuod6`ZeD*)Qk^*uz(&8QRU.~eJr*3 U&j/J,%ɝxVdd'MdٮFqy+Z+J'3M{ z`V%YPr ٙ.O B0z0.Yu Jt93gDF, -p֯lЪDH95*g9[ VƸi/oUq|d TF1pqHL]Wm m娴XamϻP9ҙk0Pt̩Vlv8*٠*{ПЉ$wvX6+ %TP_:A,uCҝܡ!ykTrM{V~E$f&I0ȎEƜFI f7*,strE?:]jJAYY"Dpu<{qзKx)%'[sAnd :Y\ᖎ<~(\P+ YB#uU#zQ!fdn2-7@>p DNcH_V_JEf[o;Qu~@].2FlL,I/`|#6.'(^q: M_CGVrKd?ޟqD4P7O79Ya<0bN-*-bY#{[[ (nTgx6 )n6IӀD.~3F0  W-!iLҨQo:إʻ,d<PxO 6Q4-Oi|3Yo#Cq]lMuC/Fo~D§ȇږ 2 N5IĹ#>0_zc}Bq,3Y,[Eo6$]RLF^? Bp!a fX"f-*Z-m_^^dIxXmoH bkr!%T;R'ecpcl]*foklC HN13όw}YpOT^w ?PШ,'_Y(#E[u|:j^5m~k}Wn!U?'gC+p[\=` ?DZ4G^x^P  OKe24ev!l%ƐHȚ>D+9 GշZM_ZL 1"j N땕>7~@M:Y)ռ [5iXɬѩHZ-2t9 6sdk& 1Ɉ0A@fT"?y gmDhGLƋ79n }w1̷qk)νx KKj 20z@8:^"8X2* )#CU)Ԏua$X[S\FU6zUkncc&@[ʢ5=-;oQb$]hWׯpL`fVDdˏe‚VCDɆao튉N>Mio&%dC`mنSE=`J6u fRilD7Q8]jӠǨsvWK1фF&4_^V-oxppEIeck gc'9W ݱwfJ].C(@rdkGůYI^3F̅4_CMjY,\1zV7HA8tXft7Sg̋ϻd=# Mny[itsd{(-VfUvC$MӇt щ,ğfX!٧K6ǔ@TqIZLKffz/ F0e" 32M^1)]T~L{PE[2ÓR||^ߞ5rMZͪyi]72w8IiHwR=t0ζOIrlC!6B?Ψ ŸA UϋmR #RyJԗ/Y1<::$ҴNIèu%mh{}= >!Ըf6\ ȏB_R\BZЁ ؄sޱZ)yө`A?tkOSoGL+jUg%lpu}/Kԟg<$4{emd7m-j<䓅),ix`b/GFb^U~b898{c/ Æ x&100644 adapters_test.go98u4}ΫW100644 batch_handler.go4;$ˆʋS\ 100644 batch_handler_test.goÔBxrb6V]100644 iface.goܟu{97wIR.P9;1F혆*3KJBFK'!Sxc )Sz 2d"QR]J(!*Q4=>Έkn!\ 1rt"XMT4k0WjrgҸ&IGb\'d 5r1=O(k(s,VO|@G8}aFRm*7ێB:gMK#EM5Wt2 uauc҂ըډqjE]c>mnBD3tn!OGu-e mXлhBv\Ŷ&͗,~.:tq߮ӝ o0I1#}')$#y{]~ sh_1|mMZV,u1.{#$= ϩwf (_)OrԒz FJIMj(K-qIb ߳p;H퓠fМȐ. 72=m[aK 1n8rj/, C̠-")l2@6L vnaj% 9tФԶ3QemB\UG̋>)xrsH+yy7X~ڊshL~3fIIiTq25r>ZlWiWO B,S +#x% KI޽Z)Y77s4II(|#%Ӂ%j 0ɫR׊yQa{Űztu%CGieJ69F&` dJߪ"F=oq`dg%E~0a #E (h+:*%Kn`wx wdԖ8~W_\gH E-v{ffN;YA@ /ihPkqkEχ98AGoP۶.s1)}Ow)Nj61MP{N;ˀ13 9%iܠ[^k,lt{Z^{S ut_B8o" 2i8d$}0u=Jf&ES̒T7mY1&`A9abtћQo E1[PX vuu'JDN^>` b|xMM~*5 rgVն5nZBv'˖ߪL# x7#KrC,k1jA]'?{[ 2BU;[X?ID**T& w̡nqEh ॄavi P[TCgkgZtv{{aKhwўNHkܺK&PC-iA}}_hl7@8Ƈ>'?:[Eoa)vco2s[e~{ ޠ@߱m!_?'Ў 'Ogy:qL}n2e #Nyurͯ7Kq@HN堒c,`dB| 'rd';G;jYy̸l}z&n&)4Loܨ3O0d3UB*&P7KgPx=!OL)-_n;~}ĕv= vy^"-xlujTļLW%xxY[o6~~' ThJɅҵm74)-іPr%:ICJnv+hlS~xHmyZnyL(J*ȋ6%J*kLy\d:UnFt]wNFH{!nq%pg4{`4|vLbC&~O+| ע{`2DOБ>݊HmQ|@w&{,t,[~bw*'hA`"U)Ȟk"uL&Ÿg*ٛkQrPBLޠ3$̵]nggĨ§\L` Iu 3 QwU>"CuX1ׯrNfCJ R=qQDU!'[,PK\:AvinȵRuhDl##B"A+LH/ REjyD؊fR;F䇝؉LbGv De&-Ts^BLehiHH^y޼-UȨx_c*f<{k(nJjg t50P*`dq%@N˝mJ֍H -CrtT{IؕX = V = bD@̡;aDssL݁ UJKeR1]Z-aM:f=H"^m8bv{]C3MJWDq*KMqti0tAmjxS`uMMo$7ߤoi7ؽs^ ~W7zj:z<)1:{Z7׾WAazzhr7[tk8)MyRܦ5Ö5 mu)E-[ZTd{*Am,!*^՗C{/sK5Bx*package logger // Logger is the small structured-logging surface used by Base and its // plugins. It deliberately mirrors the geth/luxfi-style variadic API // (msg + alternating "key", value pairs) so that the same call sites // work with both backends. // // Two implementations live in this package: // // - slogAdapter (NewSlog) wraps the standard library's *slog.Logger so // that the BatchHandler-based on-disk log storage keeps working. // - luxfiAdapter (NewLuxfi) wraps github.com/luxfi/log.Logger so that // non-storage consumers run through the canonical Lux logger. // // Callers should never type-assert to a concrete implementation. For // the one historical escape hatch (attaching a custom slog.Handler in // dev mode and in tests) use SlogHandler on the slog-backed adapter. type Logger interface { Debug(msg string, kv ...any) Info(msg string, kv ...any) Warn(msg string, kv ...any) Error(msg string, kv ...any) // With returns a child logger that prepends the given key/value // pairs to every record. With(kv ...any) Logger } kҸxMj1 g)Mr~N%i219+wįׇ ;EUb rjnjV-e/s싄;BQX'x1)ji&x .0f6E $X_Rs7Tfp soѰ:i{\Y-;7mv0~abNXx[4i5GFb^U~bD;<Sx7package logger import luxlog "github.com/luxfi/log" // LuxfiAdapter wraps a github.com/luxfi/log.Logger so that it // satisfies Logger. The luxfi/log API already uses the geth-style // variadic key/value pairs, so the adapter is a thin pass-through. type LuxfiAdapter struct { l luxlog.Logger } // NewLuxfi wraps the given luxfi/log.Logger. Pass nil to fall back to // the package default logger. func NewLuxfi(l luxlog.Logger) *LuxfiAdapter { if l == nil { // luxlog.NewLogger needs a slog.Handler; for a no-arg adapter // we lean on the package's discard handler. l = luxlog.New() } return &LuxfiAdapter{l: l} } // Underlying returns the wrapped luxfi/log Logger. func (a *LuxfiAdapter) Underlying() luxlog.Logger { return a.l } // Debug logs at debug level. func (a *LuxfiAdapter) Debug(msg string, kv ...any) { a.l.Debug(msg, kv...) } // Info logs at info level. func (a *LuxfiAdapter) Info(msg string, kv ...any) { a.l.Info(msg, kv...) } // Warn logs at warn level. func (a *LuxfiAdapter) Warn(msg string, kv ...any) { a.l.Warn(msg, kv...) } // Error logs at error level. func (a *LuxfiAdapter) Error(msg string, kv ...any) { a.l.Error(msg, kv...) } // With returns a child logger seeded with the given key/value pairs. func (a *LuxfiAdapter) With(kv ...any) Logger { return &LuxfiAdapter{l: a.l.New(kv...)} } Li]x+package logger import "log/slog" // SlogAdapter wraps a *slog.Logger so that it satisfies Logger. It is // the only adapter that exposes the underlying slog.Handler — that // escape hatch is required by the in-app log batcher (BatchHandler) // and by tests that need to type-assert the handler. type SlogAdapter struct { l *slog.Logger } // NewSlog wraps the given *slog.Logger. Pass slog.New(handler) here. func NewSlog(l *slog.Logger) *SlogAdapter { if l == nil { l = slog.Default() } return &SlogAdapter{l: l} } // Slog returns the wrapped *slog.Logger. Reserved for the BatchHandler // plumbing — do not call from business logic. func (s *SlogAdapter) Slog() *slog.Logger { return s.l } // Handler returns the underlying slog.Handler, mainly so that // BatchHandler can be reached for SetLevel during settings-reload. func (s *SlogAdapter) Handler() slog.Handler { return s.l.Handler() } // Debug logs at debug level. func (s *SlogAdapter) Debug(msg string, kv ...any) { s.l.Debug(msg, kv...) } // Info logs at info level. func (s *SlogAdapter) Info(msg string, kv ...any) { s.l.Info(msg, kv...) } // Warn logs at warn level. func (s *SlogAdapter) Warn(msg string, kv ...any) { s.l.Warn(msg, kv...) } // Error logs at error level. func (s *SlogAdapter) Error(msg string, kv ...any) { s.l.Error(msg, kv...) } // With returns a child logger seeded with the given key/value pairs. func (s *SlogAdapter) With(kv ...any) Logger { return &SlogAdapter{l: s.l.With(kv...)} } "ax340031Q(1*I(Kg\vR:{rB|U_y ŗ; s9x\:_ˌqPŹ9E Eo+ON{SJW/+YEܸpykribGVeԼjIʳ'L?;arK @J2Uz5+Kz#)YYi#[59> nnxVnF}b):G7 \hPj.% I3V圙3g.T'ʅ#B*l;c=Qbq]B's<鋼43}!1Mts'~V%l<^ Fzt(bwi;"~s|^,dGؗ@q09ĕVvO w;Se8< |{o4ƶEtGo:/#c))[d)g 8 /p8 7} M` |BWEM| zosFIBa5F/z9AF,Qxw0k}c* :r$ 5:` Sytr!J*ۈInY*Kg+v(灚uTU=tk@u$/ qf+4$UbDphX 6򒺅;G]"h\qA#4JQ0A:h^+ _Uh`;]n_")Al x8 aH/M:(WFQ=pe㑬d jOF}o5$Ip8QW^*e)yUQ**R E(!߹ɤ[+\NOsW >\ OD v-Et~,ga:N!kÞ3zVxoi& a@Jx=uFC:SxgO*@~JE3)Gm_6TR҆ qq6gӔSΏi~JhȔ=15l u?-6A::9%~=FRlWnBĚ@7s͂Tdrgtrg-D]rhB-zŸ}o,q[%VƦaV5OSǥ❝mJ„OIߥ|C*.+>Mod!vLzLrla#X6!K"~po(Pݧ i=]l7s7<@6Y6䵁N{ɮL1o >-N)Eq=MH~f1CcJ|It㯃2H [|n1^D qM?|: :fukz]L? ^x%vQl GFb^U~bF_^nL۲xV[o8~_qT)Y6&ծbc@iBm4BȶElc^,P3~ ?BS#?U^8mKFaAH%HViiHH\sF|L~R dzuAE)a \w>p@#;{e(3GE(ɨ"k]_} kAE܄FeTǃÖ? WHaqtз1k5{)gg7op58.B]\#tf7{m)nwY+]!n xjƋUˈE]08^^^>q94Ok\-L-/q+@B{XHgP) %[s,>4V & &QEq'$I#mڂ/=N?F3oj2Xp+բ ij@~v'|O?ZTXKP% 6[g ړ"N&n]UZMkBߓR /fNQL:2'PA|a.9BQ;ձ 8#xڂ#(F'ЌE'|x;,K`BGFb^U~bSLyqxTKo0 >K 'XvbhskVuhG-trK6߃"ŹUP+]Rsb)HH[ړӦ$MDbarԡ' އlZ ~( 8Rrz89[OnljمJ zveGYBs)tڔR4LŸ O fg-F)h<ϪW嶎6eE> V >|O~KEG3{<H^'U9 }%FJQXw)m)Qv0qQSv5wPGp೾y$~H/F~QKC͏K]@&YB[g}U"3\ޘ/Z=E ȦxLas Xv~ /Hp' çJK0|V"2D#ïI4<:Gœ.QM}5N~Dӈ Fڌ⍉]őR8F#@f@hr%(g@JP!x]EFO-)\ @CoW $[fB#sI׺}a͔F?R9~]&g/zp^m^vQ]BAܩ&5m3vVU'@Ԋk GoFsk {soKA@?xUMo8=[bV lhöh]4h4(hils#I >6@PÙ7oVj(]Kݴ,]=)-9 !߆N yzö[6yk{ +p}>M$yPuK7h*f C?I0Xؠ n{沏m*µ6A5Aت< oyxЊpi#P AI bBw!Q$V` QmD#3@2 O-!ٺ2s2pɪ+2|x dE9#Kl=B&Δ J:tG :l.џ93A DϲFq3yL=#pzA'.&hvsa_A4rA{N\>S`*Gfj7KPGao &YXbjOU.:7_MyٴKDzӭ2s,`J[qO ϼ-⣳Mt)фEANiGMʭr#:,,Dfz<͸沩Ta;gٸp(.o,v6Y⩳k9qwvQ90ńFFNtbW5>i]~GwWE-\_: ˨vӡ'?j_D̓Έ%<}y8۠7Ҽ.+m镘OS? $hNz|l=l('iSQI4 wFט-Ij[@$Y1ʔ$W^x[-P`B GFb^U~bVvƴɿٵX4j ;xko6+J-iҴK6]d+-Q6ItI*/~3CakqEg8g#_ Vp bea6U>GY.< U(}JfR7"O\k]z~6QXEeeW9%ngӛE!f!G#rdd) $ġ5Ub+-]qǹ(aO'&K+tf-"N);Dx?D{gw^ pKw10&ʸo.dFrcNk@me\ aW*eV…2cLe"maF:W5xֻ4П׎GWL%pYc'PqV'LUeѨpw]Ѩ/U#(J38Pj|\D+2KĢVf 9.bXa'4CgH7p۴Yv/Ͽ<|~ 8I'ғ,;$@Ӌʸv;j" DWVڟ 5= g;dCBi:EaQ+HI`V 0hJirQ( k4 qN<@@^~J0q>޼X4-bP0I0H[ vV-$nWdB.WRr~R7h PpElTzE)6M| ~.7jx9{мT(YcEloyOo>npL J+p&bc7Lnߚn$ QOK=ԋ:&  ~^xWw\3\{ufPWyp5:r.ȾBU˳rG7:?UEd7*["ܲ,>6|'F :x:9AU8`^̼4 %b+%d=_T9=(Y&/֚d(gfbFbojqqbzgB5d<[-zx;AsB^Fb^U~b~Rbq~I~~N~F~~RzfIFi^r~>LM"rxVN0}NDbբhًH]!U Q I6Ďl8P@ZU3sf昤4K$4t(IԤ:gH%:fJG|}םg<$`E2j*uO-gסpDFA*L1iFĠz>IRB2|[BƩB[eju0/0CB0=|.91{LYR I]gPqX4^ C"Dd:"s+擋FLL~ Ro1cP7N=h!l\ {I I|WV2EE69ј.ZvX2SJ'2wAf>L>aR"?o "Ts7;%<Iq6d~RMy36+}•bKV'Lg[1=$RgI ̆8`BPorm>}=v~!cGGتf$Mۻ'z &So,[򛳪fL'X>͕[j>xsKa?5am*d:lE<;xp;h Td D?ڥfQ؏2l!5&;bm$Uqͷ͓wc+**wڰ džjǔ]d\v-Q'aj׎΅U]̈́UVә6DXfTיJ]ؤ35}? nю";amo];5GZ x340031QHMKg$ߑ{N{JW˸Hp%% e kuUy V^96Y |о<&%UrmӋod{%<y,p='_+}s`;LFxPBa8zCUm.@`07IJ1/Ha՗Q򈊸:}uz~Ue&VBY{,Zk/溌TY>+Ο?y~G,XC*g} SCCͲ!ӋzwO|MEv\T̠#dS"ie%@&=.+=>2!3^.2uJh ٞH}M42leT7f /Jѡ&2 aaz' 8"cuFO1L5>jea'rsdŽZV^r-K#c}Ɛ=dsk`+^R+C4;˞DX懯HΖNA5qq7y*'մOyh}Ay7J-}>__ PxmT[k0~ũ `wҽ屔06b˩"yqb'!Ėss;^zʭQ8sE(;dt3_Zr:o%6Eg7Qn8X^y)Njpɚ]mJ[=g[i=D Fj_DH˕P5!2z:QhG36rt"ݎ"^ #ppz8%G_Q&Y zp.q5#{db(+a)ّ2za6kZӸ|Zu4#l 6sٞ*A;qiVHZڸIv(l|ZM:*|, =4TQ`;Uٝ17G%'q]EҬ6,Th ߅20u0ZƂR2*3MiD+lQ*R${Aj`?s p8_=a 1TIƗ ޷0akҞ &Ko1'xk9!##1*?1ScHDrxUMO@=ۿbJ^@zCd&Dޙ]$^|yf҉j%^*DńNeHcBe?/*ӖVOorORxaahd6ss'e_="uwuD^L#aע(uh-aJ),'j 14~Ӈh#{6MIzTh+VT[o_ƭ&нPjsupFϔS6B9 ~¸g%)](K0mpBi㡨9S+}zgo77F9m(ZCyK??/aꦠq͏Vh-ݫqPNk`@t:S2P.}xM ɑaB_:Gqˆ4d`,ֱxp u@loűiִmcfYHK}av\g`V\yNcA`sV텾Ult܄w,W +aw#5(UyhԶ̌,F&=T-Izj;-QAn~>VlH{IDžK =K(zqM&vdQ*7vwsLOCx[ϷoqfԢS&lgdv Z-x[w [jQQ~QD錥oc*# TUHygizzz߲9Qe?x{{w'GFb^U~bƨUpfQ,ۀ ExVmkJch.~[ Lvl&wf-sffn.",%`]$1/ʢRQ9R\ZZ3jɯh{h-ugq ]SBy>sOUg{1k Tũ?HmG56dYۦA\DxUCᓱ(YHc7,?˒_KR @MYuTlsw]9lDHQG͏Y_L*,Gxcp]o(=j!P;B~zd9F(N:2-^+4\XY,HBYL5ex%]HL+EI#&h| Avj6raZ%j=Sc8L駵'ͱȮѶGUKxz'9sq.)^@CcIgs]g` 64Aw|L;N' Kþ-Yx' %H-Gҋs8򻾻?;S_-3-d]=!)=c2k"p{( eau T4 zSpg޶µYpZ{`18d{ӄK(>߯t1, -*.}h,&ԪCB uGWwZo)׭_`> ]ÃmSV3qY2*bViɭ9kCxL]kR5As֬a8Zr\X;|l:'GGg;5i 1rox)G_%\khΘzx)~I|/FFrMY'6?g.`\պVK1$UH |(86UVNA^nGѵbQNO)>]ieR(7\T\\&,;^*ٌwcj'=w)]gt?Uez-?P.Dj˨og}i|ZGd3CP=W5i kk},6 g3;{ӲKi?4#J2:]cf4cL:|b\4 TEʢW),=:_S"_( |)b-PY4/IxJY`mj)6g;=M6wjU2CޫO}pcC]1π{Nċ:èCV8iVų˒!j$f >x' WPH_f̓{ CB)b&Jy"^l_R)?(:䘨-$,q}5* X 41,AQ B7u(M=5WJ{]_/U3phŃIc*X=v~w0+}=͢Uہ+/js8C:: f&Sr]iN2Qh6w+Jh@ZA!ΐEH:2cruja٬צIU_WsF(|J^A VqVޱwg\̰|fO"IvD .=sq}bNTʼ:\;^03 c/%Ct^Ӆ]Z(z>>>n^/J1qn A@ݔZW\ ˴-^ k8Е߈"bMvK}À[3Nzkk[ml;Zd EI*T+"u`1,yFMqiզGp-^senzG5~O-=+ьnI`bkgˡMJI  jY5_X6siSguCXƒ*2e<Ɠ qE;8Qdj;B 9:A7g$!"[rNjUQy|{ BgEٝt<`pN5ѴmC0 AF* н; & -z`%p]KDe a]66HbY4m-uO|SW{T$DRݽInAvqCL'177 LC~N EƖ5$!^y12 K\݃V5iOC`!٫5]CH:K{? XY3cA+L)B#uHH{,\NE H9F]' а,j[0$ YGo U Ej+bo VD[EQl:p3!w#(9[c֒Q{dTEwQZYa< SKIu94PJOΥCT  IձBD=+ġ g¿ KDK >7Gs=xɀ vKPjh`vh\U@>iMhr|Pq0)n/0,2L5 @ȷl1e.u.Ѳ=T 톝S}Oq<° dq꺸ƁkE8SA!%+c=PЀĝ8gm"aUЊJ;<%/܆6}t8$=sKH#r'1E\"!c"@CmQeH= mϔc#e}: JL>&Y {ݗpo)K4mb;HP2R86HjQUkT %37.'(3 )G1N/):$ȃ"/nz8%|Q(w;k#|qZbThg]0gh g#u_dF=QpaC++Ŏ_C b~lЌR_g7cy͈pVf7~E~q,6}P::(-XkXkYK/x6H2F_!1NRuUHpIZᷣ kKlam@8k?g:xB"6F5UkmD _”Bg"AjlDv Zj]ˠ:~1tun}%SÎ)HA<~ cVMx[Ч0##1*?1Sbu6? ixX[o6~~' r,w-)A7Hiʒ@n}琔(rY֡Q~sxK|fל"JԤ5b"w87p@Mm!<5نc x>'Q?vͧwM>V^⣵|7զڕݞt=|L/"ˈuAffqɉPO۳2]d;V>oQ;d 9r%T::j1FӆؐV:_7}ԧ1)Ba!lx+iݰ#DZm2F}`5FO~Jw5 :m&Zڹ>{S=Fd[N' .kj. Ͳ?4+& %6p4'rϚ-p @~G25RZ|`| GЩ (P㭚m*R5dQh\҄>ST}&Ix|>F44 :1j3<2Y!J:y+/~pм/mR`G"mڸsGA+ZwAn,&oy4~7~mwJm`b0{ }f{ hg, Y /Y&,d^@#N!⁗U:ee||Qى9FMPww7F7DQR6 i!%T"P)J.%wւ*ぇvtT1uneQW$Ŕ8TԼ}`-˦`1q KJa<\pZקN5B枯ШNowL:63Ytl+u0/ŝYOc~ơI*ҹ_K 9aO]^JUܕGF&0ey`5}zZ潛CV7Hv2PNu~rɞPE 5F/c#Ee|zY 0ߝ[͖|qPEE)I@1sSV=Wձ9g9 ,\j[t½!Lya:KKFﯖ:SaVHx̟-j;Zt'{Y-S:J=Un/PWS?\Җ/5{PyE9@Oǧ$$4qΚkôm:K; =BRj[7-ݵ ő/u%Awf lxVn6=bWrJEF@&@9(/aH& ]IE=h8y摽ĭ$k/m7S-niIk\dٽtCʔ_Y8iiMfhi)ZYZX i). ]~K@[IjOSɟJ!ԭ^]ZZ6bh#oY<~ˬt<|W_)X-_hPtg^6m 6HNj&S˃tP`ҷ`V/(dɮĠ|s̏"ltu嚗sFa֊DM0ׄ Ix~ W!kOFf⋖QsZ/7!蠔[FVbpS'vmIBC;E':C ukp"&us_i :O#"1ٟ?Э=R1 OZ+҃7qLkO]oNBBX,6ߔaݫK~ > u %JB\ב\㱍^#o]4^"RiC FsIsdv߅F+[.s+/u&Dȧ!h;^)ŀSnnJW$,,qD<B=DR&ǁы<'FY" Vi<79dX ֲTOB6GoX[iHV bN{E=Z$3Ւo ?A8uR4AC~LSJlQ#Ǚ;̦?l&p-sf6D^asOB`%/OrhFx+~C|C'gFU|RiZZjJ&f*RxQkHǟO1EUpw+Fծ;jeV#%R ivfͬV"? kjBZKA0iKi?#Q8ò9|DGx{]h?IZH1eq 7a@ P0 \ZXi/lZTsd^Ad%HM^AW+ 54.ɯ~Aib)jE;^'Z (iSà4y[[4(PإXZA=\Sb@T3R5+JO U|+6 t+2@`VX(ٸm.aMRKBoX4T]v0 naT446$ڄ Y[쓕P(./Y3dPlZv>0Dym[Zb4uLƞ'IG ?դeu<~}(ԴQBtjժ)X2`R}oC=bREc?hIԺ8)sjg+tt}T|㣀xT8nzYL6;/*FjE>0Om^lQ(8<4*"֗L͍v.%-Ҧ%H->A,wdN`>5 v 8?Ag϶WҤ'׿Bz{Чi8|͡{o̠;zat z<7Ov3D|!/p ] =ASGO~IS B=xpUz**lq?$(ޚ/ߡLr\ .[{jh~% .-4stNf p{sbʌץy{iO)g$A3VםRZ-DUȭ9k>OxXKo6>~TW*lm .Cv\e%ڍw+?:y~Y]qЪ\GXWJ[HY\0XεVГP{WVl ?G +r %!vU/\W@}砣o^R5Nw*U˒V8Jh>3Gdڱk(RHn Zj[Th+zWrE)r0(fHlPo@xҒ Xs~K5%U ImjV7P$ffҔk~fьD')x8#`$ե#yU Ufma+Zsch[Y؊kk-yJN?fksʍ*7BUj* F5HGR3uc _mU] :`U A}gsa#{Ax)J;:rZ+FBY@pa0TZ\&{ɷ(q13HJpn o*ìqq(g\c'3g=ߏTRoхv[MT@iތ {l[6F-Iݻ8jvZ[gg!NAO:@dڭć=ßi&Rf8D5!C¨s1ٹ =eg\"ZM,$.}F3څD:)a݉EHnCA=r7ad=C\Wx0 Op%8 +ɑōF<2g{NqO˗1u{I뵆wxg}{<^0}Ah `DEڣy 78t+dWNO d^a73?jۤL OFv vca0f c{4\YΥu8c#  PlT0=icTO$}+"$pcr 탓/)%͉Qz>(u0Na\5w9M4IlNbaNܡmܒ ~bUe0$,d _b@Џ}Ï಺W 5t ƬYVƨuע/!i3f'!]HL:?Ѫr{fxm19({$9;&{w%G߮V[)҄#R$ɞfJ7a<RT;XGG|3:*MB*| ͷҲ/_f1Qz}wFbO!:oo!ә~Np"_6.^AxV9Lx\ 6m~D/K:C5y [T(b FNN]PoËR:3ϴH d*tS4Y |f`<)w^Jupc CT9%. f|G~#kgx8& zɧ#} x8y#X3xYqB!&#m s,-Ub:;0;!P&QcDr2?A| `.}JT[Sƺ_ビZF*aiBϵJ.87: FطWHCD8x)"T3hWpaHFWLN|lxxk%H;C8-K]%ȵ琻n#^+CM~Be4R,=Ou'iKjZA82jaq+SYŷڭWM[O磞qd'v2f!xl \KWlDTD|Z*Ql[cNY}YkbB3/np+=Zvn+FN=ޫQ9~WVH7MhQf&cB)YV>\%İKN=ٜB ^:cSMNr[ջ7rJ0R'YK %0=l ?FW2HNrW  [ׁbzƚ-#)ޮB`vR`?Q%"cx9a#GFb^U~bCRt|xZnFm=ń?v@sY[IEzc-`ZSS-/}}}Ι^$YvF"̙ss܆3_ % SW tfJ@It~[i{zuQ_ϝ/sUIUo|1d'ՙt \դGL|,UgeLVrQVjĘ>ӸQ|Ƅ2 Jb(>e=#DUʫL=N_Gj `Fo`$r =Jfs]:dU/MbbXWpQIY ]&`ߙyb)+GT"~ 6yYdдO||^ H82_84\g nfC[oqڛOX :9:FTƊķZ-tK1( _0q]gѠʬP2Yu̚^'q &)TUy)RNAP$FaY3N I[!>1ĬtfJJ_|)ױ)D[e:`q7kr:EcgqH*vąV`˂sQa?~ v?8I n P{l;a}DINS,xÏmCJ^c<`Qf5GYuH]#7~X9^dLk<9e#wBQtVyemXUާG= ~%VD>a jy~ΐ LI (#UJS-)4=_);9e>G#%9_Q"Ԥ0=lpaL}I;ռޫQSHL\l;L7YB)xxtlDLUR:r@ZIDɓݧGƇ}< dRy #JV"^ՉΩIIΛq~a c3i@༜BcVMYa6x4UHYz-zY@-ܾٓ,3̄GrEA>0ΓZ"-.$W$<-nu1m5qz< @,biPgbvׂ΀ e? xT*q㭼~ Pe5[7'>6‚\qS t6 O.S>Le ieTkq}2Ҩ3w” ,duD6:chlPCR J$#^gI'FPO?AQP%+ ޽Vvgu:Fv>A~{J0b9 O63Wݶ<l(Ȁgrp~G!&n{a0|C1-䅄.ЮZdBf]8bg6 7<^Gc"jkk~OgբkcQD9W9ۉ0ڷvDc䴂!qO֠cØņL},m՚zG^&Uѭ® BaHWWh5s! L[ G<^x\7 ]zz?HGѭ S;@rJlBOZ ¦/Oi܅U F6RH^&׊eXөӮvM1ٓ9*"vC#>@O8}8}.n#Z ^9nuKL_]qCG<9_5fa\ؙ=VxJlnj}x&;ك,Y"Fx΍&;)]QuBȴ sWo-L >ޗ*_{Z0-Z&BclMMBMä#|1QˮuK Pgt{0^+3FcTP#EJ93]`YW}1~w{V͚4>>oWk>3{M1b~㸓d4`9bC}׎ /23n=BIi4hXm0x\!#Wj.lj@Wz3mSOLdqK\fs67]9,3s*Ѻc\.b[,>7P֌RL}ΖmU=Ϸ!|<(]XbYB|䎕M%qnZ50mmq!S.~0\i7GA7'`zbnZIWDx*n:s~ E 4KDUv[1|H*}g16gu.d'WtIIC*յ#mKE]Jy~mE 1X06vhM.$vGKC`QY\9pݠ{s?T p ~񆾚ϻO_9)7:K~ kmJݭw{}m~\FeyTT_m?f!Q1-RTKx#;d'\*ۦ2QO ΂MȤvq'>ttM5u+ wyWؗ2x;Zۦ梆V#{08/Ņ{#WeB,KX!u~Nci-۶/J*}z3j$ZB #*o涶h|dXn\}\KFg&Nɟ}H|[][F9Î9Aź3%$ǐu,yZ-;=[_Fj_ܸax[7a.GFb^U~bu*a0vRbq~I~~N~F~~RzfIFi^r~>U٩E8mvf\=+܀*x xWFgWlkiHۤM_{ YC)J+Y% [*vS瘳$  NǟQ"Xb.?2@tC7x[$Jx"ˏğd?vr18"6?doF%v` JEF <oY9ws:tddpE ZfpF8rO9)7( ҁu:2l' O)t5'#}f t'pdKFrT 3h€_'Mc9X %"ux YR^ECTťn)#30yԸw{,H^\!w X xX$M @M+ͻUΩό.ftnN{| jwnǓP|yI>d 磌7,CܰWֺa?7>j[!|8ްy~k 1px feIpTz s~.xR1QFkH{淙X~*N 1liÁṉƏ3;~轋ہ }EYoeTfR:K~8<6>̮ևׇ>H 4GY q!1y =2 Za܁AkN"7Op7ڜe+/ OӻVpȣUt<'d58LXFMf L | *jܶ3Ÿ́8_Qʻ=յ5WOG|r7JSf=Ag յ`Xwu2#k4@8;h1}VDlġ9A K?# -hPyQLB+5e1DрU<s3,Oٯូ%|W/4cc%㴚\dXKp΍]:2msWҠF&j%`T#XfhճZTX-59@ /dt =_8B軲繜(MO~sLύ3|5ᒉys77rq{/k|윙+jH/S+Escx <e&{L,a>ɺ[QpR f$P~$ęf{C'F(Dx5kfe }yKڹ4s`3'eK`>dG[uI߾: 5!upQ ]ޤz({u?#_MѰ??`"2doR9:\*ߪ<** # b[ן@x%j4R K?*r5zrL>1z&X!d-S?(%Yy]=@4GZ5>beA@; RH 'waK75py/TScz#.pk+Y_\nEIep/e1bN*ŻIŻyb(*n{ϙcʓK]XR/NߵPS8Q˜2?ib/Lo:7(kY`.σht c;_e>L&C*mf0˂ɛHpTbrV|pb&Ԙ^gw`V`)Jnshz ɼ.ָW뫷 5 XtRS^#@"kXUnde㚒=ʶdMOL*:t&iZD^HW[Z{2hH2Y:yKb))O' +Qo&y~LKG瘛Rw3~Wݩ(lE +]C}(_}>TUgmx| oR9=,?`{dB3s]bC_ظ l6]1rs[3ą0ɩa (QKE0%&+uBKVa{% FI(*>:/wy2ir VZXֹܹ Fx^XUmԶ> rNjC?"! \XrY&~k Do=~m(I4e]W2RFPEsc`r+n8|*WIbqִ oIU`O_ơ p~`PƔ R=qҗ(G>pGF6ƫ+ج/jK:T㼲urxWmʴN7߯D8yi8cX#!ycvmVT:LU=35bÇqKr1 id˦ƪi0D H}w]YP~3<%$}YuZf\KUM OSݪݻ4vÐ<0{F\4ѕ8>+sN*R\B#]IOlzP\_Lx}$L!r!`+O-C>(7{VHDk"܃+x%#FK*nBg p[<샢+zEAjlMAMս=UqfI[mWA?(DRim,[?XZ\:B5l䁾%8fKFH7Qh=Gy㐔3E t#g0/\uGoZ޶뾶w;k_YgS`~:pRx:KW{4PPHX.\+nHEa6<72ջjδI^P/Z!S%þ:BeʭSy镋ՈdK(|zn<r' /g k/u{C1O2'?|7&ZV$6^rC^|BvTmտL:«؈rQE&jy8~oLc C/2W=m.v*MYb0 <թK8tզn=$=X':g.S4i-VpPFs65 R5%Ϟ`z%"R T)!MImY`(o*13F#||;?,jEH*1ଝ0CLUx軏&~ڂPoi(232K48zTl!]c EFN;tȏc%а.z%Ij_i7zK xAs=A]^]W֟Dsr[e"E9E GGʕS#D^H;ǫw=6q;4E 敟)5mJ A&ϛTq#HjȩeP!qFؔ,APXPAīE>c=6E|S^d# =zy.^(jE΂@+Ig^,[P9Fq[4#ׯ/Tk].t%8ܨrYuY[B9/L{pJ"|}KCE)COEr.ijK\aWv\1tS'sb> ^Xԥc.^ҁN0 k"%^;\& 0֝S+訣X[chRN$J'*ӐJ2wpfpkk_5㇘jK%sJ"t4*%vttȖhsQ.Fb\/_V&[6-_"k;[XJ@ifmI4BMSv4/v!nC߻Vo5<^Z4wp| CO- K^qHU\93TDk bMw)ffSqէ_L.S}n8d46LV{4;wcz//?|RPrr=CkS}z_J/܋4,N:mADݮgkЬXK^xъDyٚFbͦ3On㉹jGD40xY#2Į2d=m*z6itDWc,ܡ/|~ZHcW4;&K UeY{նs'<9|#{MUvfj}Dz͈.M)[y)$`K+lXܾ$~ _qXDءh=["e5aDR.8Hn{dV"e@2}4 6R`8锅v̹T)V<ǹ ^r=sRO `rTKN. 1 4[q2o !(={8z Y @iă\44ﾷݚFn\u Ξ64Kݞ6x wGǤeQD.Q|'ҧۋdOV` WYA)ڞ|Igd!I0D*òw6}ށpwD/<>/NshcJ}_?ϹQֵFţf吧H84KVsjp`Bt`:j2V+\b*aM$Dog npyhҭ b sP= 86fob(NuOP%Ԕс:5Τ N=K4ry{峃 ۓ~fY=umUVX@R Xz6b{š#ז:a[i jzW}GļQlIF'Zo]<sgZN77>]l٩єK+",Z16ސiQӡt PrthĞ*ΣQyFcO,զEctqYd۠g?\l5z7(}5Z֝m4gj+܏oNX{.n\~ 2WmΟ0Y]4Q,=F0 Xл?%$m3?En]B:[谍v7h[\isM5&5Ժ>}-h455I[Z̀zN7ݼLV J˰Wfi&9~ ǫ%i5zOQ.Kv[j:$kxu47/ vR/˰ٶzDҔ5LDUMYʫqUj* HQ砲nQPWBNU:jaGJ E^fF>YSjwd ;-Wfү;vC7\nRuovBUV\V,Wrqu#.7j詃V Fi8١xm}zB$GFb^U~bƬBYS׷xVM6=[bܦrE[8 `, Z ˤ@QnJM{][4{|tkʃyd ["b!-eʲ kC7iqX6+o}1-m?Sk#:XSJ["-O?EZWٟ3\tmb0Waa{ÐRLxTH*=: 7Ѷ(5#ZB{́K| 0d(yt 6=^{IC_F,[}5|1ÆE)oz>b=}xb: =l>MZpcfGMl}H-U;Pm.$NcD{'e0NKj~=X>.)T䋀FE- ]9b쩅N9&eReIqE2ibS6DƱxwLjTtޕ-hVX>݆LSEZ%(gIҸjtyo6+Ÿϯ5#[L#Ņ_*ȼL-Tys(Q$ m{WqT^?%1hEpe.(u A#vk?UO{4J7y(#rb҃>y[-W7zv[7I|šTtQ4lBi6X'V2eCxh܏#܌s+X}?ꞙ߆ pU~^jlX D'K'̂>a73 |':S 9 ȹ<W+PaSqn{%s.A' ls?HN_u{lEx{.XhC(f^6""gxuTMO0='bUQ@RHHEBMjvZݏ{hOͼy3/왃ѽ&MŢA&7FG3V*Գ:ngimjG75l&>JmG꾀?iWa4MI/Bd?Aj$2|E>hYD-{ mcNOu/Nn 8)PVH&$c2вD=[po\?<2%pCJE/^'&6 (>h99!W*LؙijGD `RZ +\LB5}A>muaI1xL52¡܄Ja5ß< (fW!a^d).SCHaE,|&ꚡlm=xKJ7آ0 5C8gK3U#\z׶3|)to6d+a9ƹ:WFD}BOi <9 &lD"_Hk͐ElNaET2D°;DMVDc.ԕX$T/Ս o []3MXOs⩌^3 !-,߲"RcRxVMo1=)RXk**9DVY`kloB0 DMXf޼fVT+@h\5z ݬL3nMB?ӷޘڍƬzy7-o>?+~3#]agT՝Dyq-,:hD;e >yv[ye4ShJ?:]M @|/p(Foӹ/XA\Peh2V͐JOXQJJnk*tXabEsJO8IxP*aƐyD9`01!p:M1_ C0pKh^EC?L v)Gt(39;n&`^rE ʢ7)a][M0i !&ncձSiaU%m]J}nNSP0Tyr לTPm~3((%$l4%\R)zެ1`O35dMo`D)0j`r .jE۔ m|a4T$ [0)08zc URRruB {2˝ܰ YQej#cX HCS;KNDQ^ԛ'p,r)p24pp>Cd+R[IaGY˥KH#G ¬buK4T4]TN5%q[[ `3/>ļH!)uJMJ`z5)^3m34@F[m?El6IiO`SV6ۨ0̧VͫX'pP۹D1L]oUXτ8wŚ^*t$>WtdcV`M4(ɕ©jDh1~zhuҪLɬRl6 BK/1}m+VH!AVK-D=q^K^Gs>q0{bH5qFmNe+!?ȼy^/6qB4H=Ѱ ,'gR*FLuZX\$ֺhZ ow{sxy^u^e`|>م6oqR J]L,kΈZH6wΕ:RxZ[oF~~D@+SI Z6 &&19XSJ6R=|i~ȹw3L+=73`/+[; v!<2Y^ǿ7uO^W9x\u[|ixnN.ǕMƄڢ/TFL^Fm-S5"yNoh.34r C\nKUeO Jk(:GUS42H 4H*6_Z8eVZ}2ʼ8Sv:c\uQ%IQ~V[B;΋BM˕B|ᔞ=3Fk)  PYrn[L=a m΁HPIXE^BހATZW kH"/V]u}{=Q$3t#մ9^fyȮu쀸`0\dh<ʧzY_ju|>5|yTD&+Ű=`DۓWyDyL̈Eqbawt@"f/w|qu:u̢$ ܔz6G1B!צ*4Kr jBk.rH=Kt܋@&6xpbˋ dAdpK-NYXdd bf'dO,V~dfuϱ `VB$ {#$߲N`j$0Ҷ)PDuPHQ >Xg86vi?HY-`QNjT_gİ &1/9QLuYZiYDn!,И_3%F.$)81:LKG+Ql,K)+t\j"CvM&ڈB6qP8Pv7 $A>SOj!!p<$ ouG\KZ% D3#矟=1S=We)玳5&%pcDGIA{Wb <{ku~O'꛵bI0cf?3_; Z0ߠ#&g'>f한!U8?hŃD:,?[ӭ]`< TtĔIۿ1) H$oDk (E:-=,%yJ'BmO9^ؗ ֤5" /FR"pWCb"(l)}߄7shr81̓e vm*s8]m ؓdf,]Up~x:кK3m$(w0Z/ ]i)Ӷ2|fhMwj & QHMdԶq"?PO} PGe?eAМ8h,M9a/bK􉗪oCGs`z.ԫ$&@̰3j]A|>Rt =V‰FF) dMk_z .q6rshxyLda!bŔCXtzuʇw?~zUmG$?_c_ ED_fr-+F7L/s 푦gm&D%[pnx!/Z uV`pwb6-ׂ?/;6D'}jHl?ig(oϾF$=Ztj4Kt"ͫ*}G*a+!%fʤxk8~|6R|ْS*&isAJjZjHP9'8UC $^ZRj ʸ9Vx TxqB6GFb^U~b3O}xWo6~ N 9qd8` ]5H- Jfl!2PT.;$w!O>w/))rTLnLTwI)d35Z(}Јc>\c Q*;BP dw^冤\6+rd7:MLΉ${{N?DpͲT%c4$Y}Yό!^$<}x:#%'8E yZ0!DjJjj˱{9L"+]g5|͎iP}BBrw<G|t["?'F;ҀaVcI9{#ʿxCҞv!r xyqᶂ:K@Htz>GHt s(A4}܍x:gjjǫzLEemO)tch+#j'Mr{4 k hDȓ B.ifD B9yF3<4.`Ӄ"Me8$>87+KftoW;&?b,,[&ʂȘ.()zi3N=2çLm\nBdB T[НCVUюY`؛zYll/* #n2E/%KFHp`2h~aMlLMsb$+x)|Vm,0[߻xLY |.|Ў~Vj|Cxx6v3كה&?4~BfPz0Gzc:fibszo6gn9SSXAqf>hN7,XL*X/R=tWH̫ҽ޹Ui^Np:&Hp[:u(czaH>JE!uP-/<4WLJ+NxS{#vױ& V:xR__xsN{B^Fb^U~b~Rbq~I~~N~F~~RzfIFi^r~>LE1,X3otҸxZ[sܶ~ ӉH{Eɭ*Q&t4Ǘt.#`yYy;iWV%sR/oQmSfi^ڪQl/0&iq ~mUe*̲+󶤧Xh6[J5muU_T7Q-U>dc(,,o3@ytzY|o6*Usm W4Tg5unZ6 &ʪ6bdUPis V9&Eנrژ,PV;}:'>\ P.7E"fR _DWMz,R2։RRX0 X0 3b$"7"Tjv &FVmVlA4'Qّe0Rw=0J5#:4mU(i Ԝ(=gl4Q{Z hJ/0ф)5&Ñps :&hνDx u?t0K"񻂧;%ԥ n;Q#Y=rƛZuq2W7dIs{+Cr: 8* bFr u4se8^_:C pǠ\__FQĕj=ߝE0^HlF m5&5v(8.Kʐ,-$w&KOI;2'ރj%xQ CA ]u.";BNmn&!ܘ"cCvć1AK<ʵ¬DjMF[:g[\QJ,Լf{f\ry>w)EqWMcB&bFn>xiXVG¹`:Mc;q1Žm%Ώj|6rA9Pg8_Lۜw#!>~Zf )gO rt1dbp(CR0a~MgYq(}zAE[Wl襫B;TEX5Y!_'Om@#-;%w4xHW=9ݾg}w@E{(^i:un 9$:4#4 Yx|R$GѮ~g#I_j2㶶EL WMޅ̻L47]#/]oq!]Cލ@} -MIa}#dGw>$["QUP>Nejk[ ݍU7sU^ Z>?N1 at$*v!ÝB#7( }e :-%aoZ}@)d-~Ev$Lj66rS S w습QDo5DKK!a׏ h ~~c=]j?v$tO ?nElwҖ`= Gw喲C0K's[0;\|^({qtcJ/CO75y=ϴr2C;C[>/ +cO>6Pε[Љk޿Ѥ~' X;O3%]ZcanCt芏9eqx[wTng 3igWфgm'z>_<|\7-GׅkEr1 ck0k%r@`h43~ljNVs:ۨE'J^[nAO9SOu,`tZ4!}ve*x"|Ҩ @w+w8Zȋ ֳop7&W9$N;,t=>Y^PX71hbEoC]1? 䮚1%bEIV&CF[cmDfftwRs1A Œ/>A0La6`g0"o6dg*z@[̲٩Αm,ݔ $sjASn;8<,7%F |?Dx-Ew~χ8}r<(4 ŨOsu:'.1dK׾t:P30x9;package router_test import ( "bytes" "encoding/json" "testing" "time" "github.com/hanzoai/base/tools/router" ) func pointer[T any](val T) *T { return &val } func TestUnmarshalRequestData(t *testing.T) { t.Parallel() mapData := map[string][]string{ "number1": {"1"}, "number2": {"2", "3"}, "number3": {"2.1", "-3.4"}, "number4": {"0", "-0", "0.0001"}, "string0": {""}, "string1": {"a"}, "string2": {"b", "c"}, "string3": { "0.0", "-0.0", "000.1", "000001", "-000001", "1.6E-35", "-1.6E-35", "10e100", "1_000_000", "1.000.000", " 123 ", "0b1", "0xFF", "1234A", "Infinity", "-Infinity", "undefined", "null", }, "bool1": {"true"}, "bool2": {"true", "false"}, "mixed": {"true", "123", "test"}, "@jsonPayload": {`{"json_a":null,"json_b":123}`, `{"json_c":[1,2,3]}`}, } structData := map[string][]string{ "anyTag": {"a", "b"}, "AnyPtr": {"b"}, "AnySlice": {"a", "b", "false", ""}, "anySlicePtrTag": {"d", "true"}, "AnySliceOfPtr": {"f", "123.456"}, "stringTag": {"a", "b"}, "StringPtr": {"b"}, "StringSlice": {"a", "b", "c", ""}, "stringSlicePtrTag": {"d", "e"}, "StringSliceOfPtr": {"f", "g"}, "boolTag": {"true"}, "BoolPtr": {"true"}, "BoolSlice": {"true", "false", ""}, "boolSlicePtrTag": {"false", "false", "true"}, "BoolSliceOfPtr": {"false", "true", "false"}, "int8Tag": {"-1", "2"}, "Int8Ptr": {"3"}, "Int8Slice": {"4", "5", ""}, "int8SlicePtrTag": {"5", "6"}, "Int8SliceOfPtr": {"7", "8"}, "int16Tag": {"-1", "2"}, "Int16Ptr": {"3"}, "Int16Slice": {"4", "5", ""}, "int16SlicePtrTag": {"5", "6"}, "Int16SliceOfPtr": {"7", "8"}, "int32Tag": {"-1", "2"}, "Int32Ptr": {"3"}, "Int32Slice": {"4", "5", ""}, "int32SlicePtrTag": {"5", "6"}, "Int32SliceOfPtr": {"7", "8"}, "int64Tag": {"-1", "2"}, "Int64Ptr": {"3"}, "Int64Slice": {"4", "5", ""}, "int64SlicePtrTag": {"5", "6"}, "Int64SliceOfPtr": {"7", "8"}, "intTag": {"-1", "2"}, "IntPtr": {"3"}, "IntSlice": {"4", "5", ""}, "intSlicePtrTag": {"5", "6"}, "IntSliceOfPtr": {"7", "8"}, "uint8Tag": {"1", "2"}, "Uint8Ptr": {"3"}, "Uint8Slice": {"4", "5", ""}, "uint8SlicePtrTag": {"5", "6"}, "Uint8SliceOfPtr": {"7", "8"}, "uint16Tag": {"1", "2"}, "Uint16Ptr": {"3"}, "Uint16Slice": {"4", "5", ""}, "uint16SlicePtrTag": {"5", "6"}, "Uint16SliceOfPtr": {"7", "8"}, "uint32Tag": {"1", "2"}, "Uint32Ptr": {"3"}, "Uint32Slice": {"4", "5", ""}, "uint32SlicePtrTag": {"5", "6"}, "Uint32SliceOfPtr": {"7", "8"}, "uint64Tag": {"1", "2"}, "Uint64Ptr": {"3"}, "Uint64Slice": {"4", "5", ""}, "uint64SlicePtrTag": {"5", "6"}, "Uint64SliceOfPtr": {"7", "8"}, "uintTag": {"1", "2"}, "UintPtr": {"3"}, "UintSlice": {"4", "5", ""}, "uintSlicePtrTag": {"5", "6"}, "UintSliceOfPtr": {"7", "8"}, "float32Tag": {"-1.2"}, "Float32Ptr": {"1.5", "2.0"}, "Float32Slice": {"1", "2.3", "-0.3", ""}, "float32SlicePtrTag": {"-1.3", "3"}, "Float32SliceOfPtr": {"0", "1.2"}, "float64Tag": {"-1.2"}, "Float64Ptr": {"1.5", "2.0"}, "Float64Slice": {"1", "2.3", "-0.3", ""}, "float64SlicePtrTag": {"-1.3", "3"}, "Float64SliceOfPtr": {"0", "1.2"}, "timeTag": {"2009-11-10T15:00:00Z"}, "TimePtr": {"2009-11-10T14:00:00Z", "2009-11-10T15:00:00Z"}, "TimeSlice": {"2009-11-10T14:00:00Z", "2009-11-10T15:00:00Z"}, "timeSlicePtrTag": {"2009-11-10T15:00:00Z", "2009-11-10T16:00:00Z"}, "TimeSliceOfPtr": {"2009-11-10T17:00:00Z", "2009-11-10T18:00:00Z"}, // @jsonPayload fields "@jsonPayload": { `{"payloadA":"test", "shouldBeIgnored": "abc"}`, `{"payloadB":[1,2,3], "payloadC":true}`, }, // unexported fields or `-` tags "unexperted": {"test"}, "SkipExported": {"test"}, "unexportedStructFieldWithoutTag.Name": {"test"}, "unexportedStruct.Name": {"test"}, // structs "StructWithoutTag.Name": {"test1"}, "exportedStruct.Name": {"test2"}, // embedded "embed_name": {"test3"}, "embed2.embed_name2": {"test4"}, } type embed1 struct { Name string `form:"embed_name" json:"embed_name"` } type embed2 struct { Name string `form:"embed_name2" json:"embed_name2"` } //nolint type TestStruct struct { Any any `form:"anyTag" query:"anyTag2"` AnyPtr *any AnySlice []any AnySlicePtr *[]any `form:"anySlicePtrTag"` AnySliceOfPtr []*any String string `form:"stringTag" query:"stringTag2"` StringPtr *string StringSlice []string StringSlicePtr *[]string `form:"stringSlicePtrTag"` StringSliceOfPtr []*string Bool bool `form:"boolTag" query:"boolTag2"` BoolPtr *bool BoolSlice []bool BoolSlicePtr *[]bool `form:"boolSlicePtrTag"` BoolSliceOfPtr []*bool Int8 int8 `form:"int8Tag" query:"int8Tag2"` Int8Ptr *int8 Int8Slice []int8 Int8SlicePtr *[]int8 `form:"int8SlicePtrTag"` Int8SliceOfPtr []*int8 Int16 int16 `form:"int16Tag" query:"int16Tag2"` Int16Ptr *int16 Int16Slice []int16 Int16SlicePtr *[]int16 `form:"int16SlicePtrTag"` Int16SliceOfPtr []*int16 Int32 int32 `form:"int32Tag" query:"int32Tag2"` Int32Ptr *int32 Int32Slice []int32 Int32SlicePtr *[]int32 `form:"int32SlicePtrTag"` Int32SliceOfPtr []*int32 Int64 int64 `form:"int64Tag" query:"int64Tag2"` Int64Ptr *int64 Int64Slice []int64 Int64SlicePtr *[]int64 `form:"int64SlicePtrTag"` Int64SliceOfPtr []*int64 Int int `form:"intTag" query:"intTag2"` IntPtr *int IntSlice []int IntSlicePtr *[]int `form:"intSlicePtrTag"` IntSliceOfPtr []*int Uint8 uint8 `form:"uint8Tag" query:"uint8Tag2"` Uint8Ptr *uint8 Uint8Slice []uint8 Uint8SlicePtr *[]uint8 `form:"uint8SlicePtrTag"` Uint8SliceOfPtr []*uint8 Uint16 uint16 `form:"uint16Tag" query:"uint16Tag2"` Uint16Ptr *uint16 Uint16Slice []uint16 Uint16SlicePtr *[]uint16 `form:"uint16SlicePtrTag"` Uint16SliceOfPtr []*uint16 Uint32 uint32 `form:"uint32Tag" query:"uint32Tag2"` Uint32Ptr *uint32 Uint32Slice []uint32 Uint32SlicePtr *[]uint32 `form:"uint32SlicePtrTag"` Uint32SliceOfPtr []*uint32 Uint64 uint64 `form:"uint64Tag" query:"uint64Tag2"` Uint64Ptr *uint64 Uint64Slice []uint64 Uint64SlicePtr *[]uint64 `form:"uint64SlicePtrTag"` Uint64SliceOfPtr []*uint64 Uint uint `form:"uintTag" query:"uintTag2"` UintPtr *uint UintSlice []uint UintSlicePtr *[]uint `form:"uintSlicePtrTag"` UintSliceOfPtr []*uint Float32 float32 `form:"float32Tag" query:"float32Tag2"` Float32Ptr *float32 Float32Slice []float32 Float32SlicePtr *[]float32 `form:"float32SlicePtrTag"` Float32SliceOfPtr []*float32 Float64 float64 `form:"float64Tag" query:"float64Tag2"` Float64Ptr *float64 Float64Slice []float64 Float64SlicePtr *[]float64 `form:"float64SlicePtrTag"` Float64SliceOfPtr []*float64 // encoding.TextUnmarshaler Time time.Time `form:"timeTag" query:"timeTag2"` TimePtr *time.Time TimeSlice []time.Time TimeSlicePtr *[]time.Time `form:"timeSlicePtrTag"` TimeSliceOfPtr []*time.Time // @jsonPayload fields JSONPayloadA string `form:"shouldBeIgnored" json:"payloadA"` JSONPayloadB []int `json:"payloadB"` JSONPayloadC bool `json:"-"` // unexported fields or `-` tags unexported string SkipExported string `form:"-"` unexportedStructFieldWithoutTag struct { Name string `json:"unexportedStructFieldWithoutTag_name"` } unexportedStructFieldWithTag struct { Name string `json:"unexportedStructFieldWithTag_name"` } `form:"unexportedStruct"` // structs StructWithoutTag struct { Name string `json:"StructWithoutTag_name"` } StructWithTag struct { Name string `json:"StructWithTag_name"` } `form:"exportedStruct"` // embedded embed1 embed2 `form:"embed2"` } scenarios := []struct { name string data map[string][]string dst any tag string prefix string error bool result string }{ { name: "nil data", data: nil, dst: pointer(map[string]any{}), error: false, result: `{}`, }, { name: "non-pointer map[string]any", data: mapData, dst: map[string]any{}, error: true, }, { name: "unsupported *map[string]string", data: mapData, dst: pointer(map[string]string{}), error: true, }, { name: "unsupported *map[string][]string", data: mapData, dst: pointer(map[string][]string{}), error: true, }, { name: "*map[string]any", data: mapData, dst: pointer(map[string]any{}), result: `{"bool1":true,"bool2":[true,false],"json_a":null,"json_b":123,"json_c":[1,2,3],"mixed":[true,123,"test"],"number1":1,"number2":[2,3],"number3":[2.1,-3.4],"number4":[0,-0,0.0001],"string0":"","string1":"a","string2":["b","c"],"string3":["0.0","-0.0","000.1","000001","-000001","1.6E-35","-1.6E-35","10e100","1_000_000","1.000.000"," 123 ","0b1","0xFF","1234A","Infinity","-Infinity","undefined","null"]}`, }, { name: "valid pointer struct (all fields)", data: structData, dst: &TestStruct{}, result: `{"Any":"a","AnyPtr":"b","AnySlice":["a","b",false,""],"AnySlicePtr":["d",true],"AnySliceOfPtr":["f",123.456],"String":"a","StringPtr":"b","StringSlice":["a","b","c",""],"StringSlicePtr":["d","e"],"StringSliceOfPtr":["f","g"],"Bool":true,"BoolPtr":true,"BoolSlice":[true,false,false],"BoolSlicePtr":[false,false,true],"BoolSliceOfPtr":[false,true,false],"Int8":-1,"Int8Ptr":3,"Int8Slice":[4,5,0],"Int8SlicePtr":[5,6],"Int8SliceOfPtr":[7,8],"Int16":-1,"Int16Ptr":3,"Int16Slice":[4,5,0],"Int16SlicePtr":[5,6],"Int16SliceOfPtr":[7,8],"Int32":-1,"Int32Ptr":3,"Int32Slice":[4,5,0],"Int32SlicePtr":[5,6],"Int32SliceOfPtr":[7,8],"Int64":-1,"Int64Ptr":3,"Int64Slice":[4,5,0],"Int64SlicePtr":[5,6],"Int64SliceOfPtr":[7,8],"Int":-1,"IntPtr":3,"IntSlice":[4,5,0],"IntSlicePtr":[5,6],"IntSliceOfPtr":[7,8],"Uint8":1,"Uint8Ptr":3,"Uint8Slice":"BAUA","Uint8SlicePtr":"BQY=","Uint8SliceOfPtr":[7,8],"Uint16":1,"Uint16Ptr":3,"Uint16Slice":[4,5,0],"Uint16SlicePtr":[5,6],"Uint16SliceOfPtr":[7,8],"Uint32":1,"Uint32Ptr":3,"Uint32Slice":[4,5,0],"Uint32SlicePtr":[5,6],"Uint32SliceOfPtr":[7,8],"Uint64":1,"Uint64Ptr":3,"Uint64Slice":[4,5,0],"Uint64SlicePtr":[5,6],"Uint64SliceOfPtr":[7,8],"Uint":1,"UintPtr":3,"UintSlice":[4,5,0],"UintSlicePtr":[5,6],"UintSliceOfPtr":[7,8],"Float32":-1.2,"Float32Ptr":1.5,"Float32Slice":[1,2.3,-0.3,0],"Float32SlicePtr":[-1.3,3],"Float32SliceOfPtr":[0,1.2],"Float64":-1.2,"Float64Ptr":1.5,"Float64Slice":[1,2.3,-0.3,0],"Float64SlicePtr":[-1.3,3],"Float64SliceOfPtr":[0,1.2],"Time":"2009-11-10T15:00:00Z","TimePtr":"2009-11-10T14:00:00Z","TimeSlice":["2009-11-10T14:00:00Z","2009-11-10T15:00:00Z"],"TimeSlicePtr":["2009-11-10T15:00:00Z","2009-11-10T16:00:00Z"],"TimeSliceOfPtr":["2009-11-10T17:00:00Z","2009-11-10T18:00:00Z"],"payloadA":"test","payloadB":[1,2,3],"SkipExported":"","StructWithoutTag":{"StructWithoutTag_name":"test1"},"StructWithTag":{"StructWithTag_name":"test2"},"embed_name":"test3","embed_name2":"test4"}`, }, { name: "non-pointer struct", data: structData, dst: TestStruct{}, error: true, }, { name: "invalid struct uint value", data: map[string][]string{"uintTag": {"-1"}}, dst: &TestStruct{}, error: true, }, { name: "invalid struct int value", data: map[string][]string{"intTag": {"abc"}}, dst: &TestStruct{}, error: true, }, { name: "invalid struct bool value", data: map[string][]string{"boolTag": {"abc"}}, dst: &TestStruct{}, error: true, }, { name: "invalid struct float value", data: map[string][]string{"float64Tag": {"abc"}}, dst: &TestStruct{}, error: true, }, { name: "invalid struct TextUnmarshaler value", data: map[string][]string{"timeTag": {"123"}}, dst: &TestStruct{}, error: true, }, { name: "custom tagKey", data: map[string][]string{ "tag1": {"a"}, "tag2": {"b"}, "tag3": {"c"}, "Item": {"d"}, }, dst: &struct { Item string `form:"tag1" query:"tag2" json:"tag2"` }{}, tag: "query", result: `{"tag2":"b"}`, }, { name: "custom prefix", data: map[string][]string{ "test.A": {"1"}, "A": {"2"}, "test.alias": {"3"}, }, dst: &struct { A string B string `form:"alias"` }{}, prefix: "test", result: `{"A":"1","B":"3"}`, }, } for _, s := range scenarios { t.Run(s.name, func(t *testing.T) { err := router.UnmarshalRequestData(s.data, s.dst, s.tag, s.prefix) hasErr := err != nil if hasErr != s.error { t.Fatalf("Expected hasErr %v, got %v (%v)", s.error, hasErr, err) } if hasErr { return } raw, err := json.Marshal(s.dst) if err != nil { t.Fatal(err) } if !bytes.Equal(raw, []byte(s.result)) { t.Fatalf("Expected dst \n%s\ngot\n%s", s.result, raw) } }) } } // note: extra unexported checks in addition to the above test as there // is no easy way to print nested structs with all their fields. func TestUnmarshalRequestDataUnexportedFields(t *testing.T) { t.Parallel() //nolint:all type TestStruct struct { Exported string unexported string // to ensure that the reflection doesn't take tags with higher priority than the exported state unexportedWithTag string `form:"unexportedWithTag" json:"unexportedWithTag"` } dst := &TestStruct{} err := router.UnmarshalRequestData(map[string][]string{ "Exported": {"test"}, // just for reference "Unexported": {"test"}, "unexported": {"test"}, "UnexportedWithTag": {"test"}, "unexportedWithTag": {"test"}, }, dst, "", "") if err != nil { t.Fatal(err) } if dst.Exported != "test" { t.Fatalf("Expected the Exported field to be %q, got %q", "test", dst.Exported) } if dst.unexported != "" { t.Fatalf("Expected the unexported field to remain empty, got %q", dst.unexported) } if dst.unexportedWithTag != "" { t.Fatalf("Expected the unexportedWithTag field to remain empty, got %q", dst.unexportedWithTag) } } xjQxQ100644 routine.go8n}hS=+100644 routine_test.go݂XrٌzNN#,xn0 S>tiY; kaTv8!˂!>Jn$$^W;"x7(Hks>`1h\(!..`iuڥ9`ǑbQ Z(˲ߵ\+%2C+w0s]O7pvt1#KB9kyDv"cߑؠYzy<f7/[mR^3~;+b3.\*/vÇ@,94By4H H,J8&a9$?aus!Z/"op|t<R2BaQ5K(O(8X|~z\ԳdI@x >/S =(u.r 7 qBp9t$*"Ghzka5 $JV-ϞɹC>@ֹ3y18 -#/^fb{/J&1ȜT`RCu.S"KD/?6|;h/->KdBfJ,Bȋ9(A".XcF0\JFBpa"t!n$@mZ0gP7^$pǖJzM"j[m"WyůÒVMi扻];(pk+:`VmCKBސ&c0([̓&V\zpDPfh d2Y XF_[e͡^rdY5qɁT\w{<b%(-8AN9j/q*oz6/t  #zBvL,=en_{8$ݶpzݢMG\ Ρ`jz9r;鿆:F^:;ŵhβNjV8v n<ux,!4h*-ʍx,=~_t@ g6=o*N\!ɚDV!6l65 9rY a߃CZZdJ0)oE,T34L7 [ƍ.찄 JkxGy@cq3GCl #D޴?=1Z݆V dfllI,D\f< #IU'_=̲!"5>As BʦA# 0="Q"+rxTFQvdӡ#"3aaLBIi*FXRSUgS 7kU>B@+0DGxΡ?yk*<4$ @`PA$rn7ppDD.~:~V,Ȣhj=C` N3@c7։Q4 Ԫ7W Eq^$JD!8+w[AZq,[zײ\pkG,AP: @j !g9?jp4#n )&iIi%z\4dam5$|.u;pkBm៏&^nȺ_&^nʺ떜իt_$WpN8|?r+3pL%`Qƾ hY2&kI c<|IX=Wp\MnR+ D>=!u8 Wg'K@$\Qp-8f328$QI<7ekj o6>zW-9ѕ@H S(^[q4ؗr6 4:\ 9Ćw0#OU'HT*90 ^u)낒 ºèBlM|aBg- uB݌u SbJB&r49 ( &3O2Q_M(n aKqT"@fa8.T։StӢ烽,Xbn^dѼ`1@`ҟcy@3`|.DV,h+Cu;`s T`k\yAV_LBlx4`GuJ-JD4Uy4"N/K /QlKf1`T#c! @?x33#@9|^hSuYTػi.4훢:Q +RsDh;.dhJ/ +A[`=iCj6 Nֵ fĥW= ܽŗ%a$j$ .=vt>+;W@qvq5j::5|Hrd7Mᕱ`C^OVeѮo-G?%IםToF?/9a'Yb2AJ{xcyN`t lt,]{a   &Uu/O+4;~gӥ /ٹ1<dXW5,NS\Q`&,wwi헹}My=(.tQ?j3}-_0ӊ[ҞHYP3QKRx X?xL#͞V5z *ėU[DBY59tVI,idyפyvyM9_.L#Qwsfu횖ۑfqe@=MU>SF16֋MԢưmIq$]VzD!ؔɤaRXr_hhR/Iu x /*9 :NZ/6-Mqٺهr+I"Ttj.T%.s]aXȢJ/gQͰzOZOχgc 3Sd8h'i0P2B  &.LԕASA) J I_1?rGqYgsZR>eXf_d鍮I8|f^܅-͟dpu_r`S V]T$֏G #UIFaI#g短l8)8ʈ[w)(CC(-殛ke}PNըAjvIKc"6aK+"M*#گP!v Ǒ$83ZR[5?7im2G[)Fv6_g68ʙ:Ц ԆxZSp?ZmmT5M#|? mMnջn4u9Mj>ci>v;i/- t"{dxbepJnTw"TP-uI)µ22چwv< Ėۦ1ޘ+v*Vx]ӯO l[u_3=CTS~y]+R'#)I[cPcogqzSNZDe1:55еJ MHGb^kՈ?hz @ 7 >|tZt[55iC*kӵ"Unzŗlf`]EGS{0]hJJśjO!9akԕ Ebzp4OpਈP0/B('B:[ P>-&C=n+al/}*sta_=uk?so^, E2͕oä0~S80B}Э׼:ׇf:^n_8]L5"LU3IqPI,\Y(8sʭBTI3s%ӂGGx3f$p"s>l] H`t.)gQ(bP+z7E,rʮh%p "5"7QS*7h!?x$,{,cRƔA m#t ʠLHimA!<@JS K*Ik\}U/v8]P 9Lb~+icƷ x˚.nrrzuk^6A>L+ڼ:zq[[SdUFz:O/r;3L~3R cn-NǓe7+ 9CvIpߋ߾"z|vtL]Z5l.jzl^5"m+4Jl\-JB8qַ a4Lͼ)4L:'q -{!&Vpn(sfPB/A@ %d L+Z_hU˧@EP Ջ5+4~!9c1kL1y ytÑx~xfE]$O_DK3K U=B?%KTY "yb9[-cor&6-7kJvQ?_X>Vĺ JTNr򌟈su]PY"Jj&7I I;{P7mJo58nh(2PSAMTJ\DVr˂\{- ^c =k[Q-nu%/<8QxOp[®Ydo (>W ;|Q/`F"jۅ8ݧ >TKrZU00]SPy b Xά,ȥ|/Pi^ z xE/mӤ˺ _YVݮwEH1s޽T le)FQC*3yAb#j4?EߵsDKP ^E/YlޱnvߺT |;QoGJ߈- =1~&B8L>88?.' pp^8CCT@!3/!NE)΄^ tx<|~nۓ݆mqw/xL՛Z+ʽTWl#*8Oj;p4,7/1?蜙 %ũ\\L7ϳoBaL Iv|յE7oq`ġN Vѳ/AY.М⤣P .PEГdE py~XZ섅mBd^o\ hR0҃0$9=SRJ22S&WxiLX}9uePwnN9hr"PZ0 V׭<4ס:.6Ȅ]yA5P:2yxYYs8~̊"2"uVE;J:XVYQ E$c=on$I񰓊mF/4Мz_# 7,I77q8ff$"!ʁ13flOE) Q'g; |4dG(hlZ#';?HY|z]w3͔'܈YW,&`c,Kk5n6h`Gz(ا=蜽m#XHc?Jp3KQ g|aaap{8c O40v φf֨0}-+rdrw?ӣ9iRME5CrѦwIP V|I2'hp@G&7pNDJ8=崳3uNzeܫ*!"jϨ'WWV19#z'>Z^,2r ۂċ,L4v1*w"``Ez7z:T׎i*!U(fTdա҉pFΗ D뗹I2u'RXX c+l=}AzJr5)&I0h8+l QhzopyaSh:; `3?1qxBפjH&m# KݟfBURPф> $p2D4Z:BxBou-e:˅CK1}į"S~J'шN=p|u3ݜ:)nb3#< V>F)YJiRڥRwPz9 Nr?8#Vvtp߬fXGkYxbVϊJEm8Īb,Պ`ip%]nLgŞGg˳ 4^73vtZc?)D$ѧ4DjPdE W'oiάZS.q( yT8(؊YtOCԄ)\lDAw͎r3k?tp3k{⡣\|~M{^'wKuB6~]Z.Xt') =FBJ!Nͭ5jM ]tWzQbOL'> 3[spYe&{ k_g^IEh&6ޔk+y~kFogx.x#ؘҤ'q+N$i %;q@npn84rVF.\r!&J[(~S_^t}nߢ/+}Nbzݿ E`0ܔ5"?јΒ{ოy@!00Q0ahmŸr\)HW+ nc Qo_mdR̜ [  ǣhb5)"I\f=Z:EHf&A&QXM g GC ʕVmKi~gXBDf5!F^(tޔ`xs# 0Y_9 MFp+l,o;?{ԛn218H{ϸ3LdE|`hv֔ g ax<8*W`Yq)6Rnw聮^zC3} BA]>\ļ;]2uB^03I"]B\`fݻaޏkŒE*A!3fnT珐nmO7O񒙿^bL+2KeuR9*hpCkf6-mh[AwstWArtOAst_ANWWqln0q!۸e0D+oE_ ;V`۰6P Fl 4vU̾tRIҌI4##%i#eUdLeC`P`tM>-&i8eiZ v_#j l~gTzӲ?OY̏ؒǬ"e&P=nxGN<8a^Y`f9~wp{dRuxa(NT,R28WoKI Cl L$JK).'鉨0 2:hz:#wSLRQ#jl£U5E @i,+xN`' Q%V=8g~#ߎ<;Wpa}%z-Ֆˁ%Sa]E$5F7&hLȘ~ _l*ֈvыxdz#g >=3ە|9kXtx6peɳg];Qrz??2q&YkMySA8gi]֘Cz_!)sHo9ZjK]Z`>c8c/%*@Ut%Ta*+aI6ڗ+(oqMCĆf|jiʟe6^KĂ a=OC j˕4a|%r]ma{~*dQ*ʄ9JC9ͺq/TxUj0}B3 l𜦥 6^:iAD$t`F}WeiMpۺ\#`ɒ95dA |s\| ,9<3OAAUp㓐шJ|BKSZh3-V͔C~1_՚NiV$ݍoi{XdCL\, >gœ-gM0YEktdG҈UZՉ!?KK!f?)$$ +%&[M47>Y^P)sHaDaL#߳/),x?u[{FK/L,7,>.!\ lTf~ebq=g҉bJÛWJ΃ml T~>JU}laYW煢1?E9ݟL&&nIV<ي[p^1&1 ptӔԅػIL3lHǿ;^>9UPX*czɤaJÚ(ijz2?8;LW'1 jm!o|²P2Njzu0_X fVeZ7NuI6͓bsNp㄁JcɗV]h@,B/Q~y.>P䍼ΘXMkxTmO0[I \uR' V4APUM.!NTNPZ&-^{9K9FEY@7脩4!hD>a@saՌŅ/x_(ٿP=AKlP*Z9 wVeFq/ED\dI!rH09j xII,Ѡ H 4p2:>8F= bex%.jLp2rhMc+i׸P & WH5-Hmjf #UV/׎<8QV! g2ݳ+../7BT"Kh>`jDn Ď&U|.:,x, AdSMDƘVy ] ێ/Mf1d[HAWDnsST*pEjEgڅ55<f4H`UpcZ=)d(О,)s8uݔ*-)Et?zUpEn۸>RGbJ;naK9]Mu Qto=z+3O`7VL2ޭFQŚ(ZϦ>@tqI)&s3=]*%Z)]ά/e@_7=BhZ=,JW6ndcm_+d2CDu|D_S.hxTn@}T G ɪb;Jk) β4q- &kg0K 2ms,ǶHBGJi92+2B++~F?%~)\3"MlUy巵gH`u$cy(8{m!*Zmaї.0)!Jx +F\ s Lr|Ih~QRҳ->7'}(xXDrhol+uhS7b/Y KI-YBL۾t &4ל*3c=q3Ո Z}A]P|ΙD,qցثby3l:;z ݅+ˎHvck#p?1g k̺_AG3sLM G[mf\8MtYc+xkss+}H Z:f 0Ly0 E7y]IpoõwϞ=f_x5F', ]|[G jZ~-"%V"zWY-RNōwZi]W*+Lƕ.΢|b9<#BoL&@uIML:.dqA2XJZIBBU]21‚%JpræJğO&U*dfSRkU2%(!LE%}<|+P*Qw{ƷnEnDez;.N*(z2)6eN`~%eR'Z%u5np[F(>Q#RYS\S<5~iGhp^uސϾNmyQ<_oݻZ;}f =sWR5[V^@\Ŏ"@T+\}s܃k]bcbc"ɘqaU+.ՒJ.pn!@v, 8$~?2XT.XB\_潮̂p5aBʍ}aG5+69uWg:X2askH,SDizgn}xrn⩓4hqpExщSU*o(O*r ?ӈMd`mt&yAx^%8Frp*Sw,։J<ѿuM"~3cqoh*d8[^*xo)*ߙJ-u2 &ibA/@6k-Y;bO-!Rnm9{nmPeeߎHi{z@;|ڑ7cޯ>Hbv%1Lѕc਋T#, GMb R a|Cvᗝƃz} ge83d5ߓ@G.:ǩEӅgr=I|L,葈JTV R4q#33~hP`3z@dې<7 ,ad:GlQ]Ǹ>ۆp|Pzd,Rjba+=Y΅ 6F %,9{{q d^8pxfZSJ;"q!n6 推9UI3`T seD k* (OH1 ՀژQ5d:^xNwpGM(2{57sO1BCAŶ=OH-2W&E.;FJOȌh./K$c oɑ$cMR33lLQvN4}K6yXI 4Z0ؙJ"]&rRȎ .sFBxKݲw<=sc{7iCARHs)'s-ă~5 !iP0fn[̃=$EK3m!|ޜ HUF5UT A0<;u&ru4JN;嶁-`Nm^C`i,֬)MGe(;mkv"%I|\BeY(5wd42RE1xdߥLybɼ @b1 t06SCwA~ע(e^օz/Τev%XL 8^j(+q~q8A"N{.> p W c!K׵4m Tb}hԀB7]&_T?0+<Bƽ![g=Hi$!݌m~70B&ϵmgmOLo䘸Ɠhzd**/XW1bx4tx~A߄[*;tv2 ! V*D1l #z,u ZQ"u4V2n^໻x:T 7qB-ymb'.e|s]SK{xc 1TLbMŲUltt2gԢLGPZWR^^bZ,1=$+q4ՄK;jnC#<*LG_[XT4mDt"[/BR94sP?R6^=A@KVm`H&\^de\vM={ygjf!H{l:Kd*[Cd/vR4|JcbÄ[MP@OulXTraJTt; 4Ol]_c?ѻvZ CZV+#50%T ]"i+1Ė#慮7Y86bV鮮-? ʹ($";kHx{BFFb^U~b~~Q~aijQRzfIFi^r~>L~b"qC6VoB5! x\mo8l V@Uy=4qHn jVb]eɕlf8DI4n[%r8 G}ȱtg lhXˉ#;rO;8a^]x(R^c(2~ Wn<]q0۞n. mύ8_Uζ?-?0HKټ\cv97ڝ8B"l]Ǜ8Q];٘c8 9*YYȢ5Rn8v&<*[3evfcqw^NT9FWjf^+"}rچ}u <[6-e6ib @Q8l<%S4@R~:߭()=ߠҋ^^D`-g2Bk`6}4`kd22O5wLJ~2f; כ-Clv]TOM*kkkBl,*yѝ $JUIO682bp|/)sS6\8g5:u(y/,wRn: >h`:KEbyToUU"3)/;gP_@\ tLjO{5mVz04.5/|=LYWt6p73cHFS0e[>58KM]$קȑt&H{Hs1${Bm(&GN p5+rlcdo>\8VYhucD؅m/gy: :|UlF+bjMl48Г.)0zR*X=w6%cuS;ڣj5bK/,2^ 2-ȷ7=|DHy"քr; ȰtJ.e*#B/QUS^[Ɨ["J-)>WPKB)=|c})f&WHzta*d~w0sXFw}.b5I.H Kr{gҐVG LCe_Fӂa~X_n[*uR&/Εy SaI:W\n:CA1J;(*ezB7sx[c~w€E D@4X-ΛI v &o*Wj]gVRC-XFu}9"H_n_;#0m2j}ּ*f4*z ;A'N:$O KD<Ȝ'Ge",\Re`Y(MJ $=Ilry(MFb)Ez9ނu:"s;\h(;.̷CJzWvTrdu8Uc}EnDػ^қظX*ji8 J4KDRbTa0eq&7KӚDSmx;v~us2( rNXkqlQ*8q>f<mF%s46+Sι\"a8LYqi$a-S$UGw ~ON+xUP6y:>%fCxܷjS KdSsA+G I⼖FaTCbM_-{O 'fHt#un+un) 6ؑyAxllޝ?6.bG'h{ʡWfJ!cL‚K~ɟ>"` i|ŀf!k|C_ sAE؉" 볙3 `N~\MxonnLFDC3P'c<ÌϜ qQ?}YSt(:2>T"Ko;KB@ݤH<=y?yf`SAXM]i?6Zw?u\V^ܑ= \a>~LuGJdwCޓu̕tK3ώijS)apOxn2 E.}" "0, n" \&73[#*TQ /s}X;? ddpHRH!I):  ?XDcb'œLD^JXx%%eS u'tJ0&'6. z㱊,=BYAah"ǣ|Ǐ]eb+1xWmo6l+v3t@e@4Mz5-l4TǤSS87Q%j'+@X)!5^_نE&pJ @އ~# +oeAXPX9 9_ eZC$Y&+,d p]r6p#T;Q%4!ħITiZ~A=! _]^/8_ 6?jWeqX/PF,Yqoˆe,ŊTr ,pQ͏xF]-EYF1 #;5`5Rjr#4*ir*u_AK@Ԑ/+fc<;JdY*#9~YJ痄hd̨ʻ rV6g)N:<rh~waW.WP ޶{"#VCB]}'-l ƨn]՛Π!sM%b.sFNfo SݪDKYߖʱ%C;ٱ҉}٧ZjB$@W䭮?xpM[~)iG2X4nPiYVJ$;B>˼!46~"9abn>_]c86j7p.!y(bf{܃bq"A:@ #(]$*5L,J]S_ Xvc Ҍ7S bqN-@y;:ada!<)GRwC[N@EtGduB F9 b_q;<*[::鮴-.p͉Ͼ],o(ŋ+%7?uu^IEL<W+%4PN+I$^ ,e[~DaV|Ci&9YT;ŵT !$=S0S3$)\-t6 =RԲowhF/iO+!m*\rq'=? #Pz6fS[;^8%Lp+}$tozM-{)q O`#?ӓ$#{:ԥہ=~tLѰY$_.#2Iz[KH#o( :7'E~EX~jf?{Q@#-ToqMӃzV-O=+&4̳<︞0L6u]#q!B`>My7i*O\GLGOÛ:>V%_>,oCrd+EM'6Kq0 PTې%Ja,<=p_"ĉpĔXDHE|$t{Wߠ$v ʖReU,M%^قvrƹ$4p62i+CsTOiEF7ؿ]lj&;ݮ̳gH1dy>5wIm*KI6 mGI exF1,IQ%6-UI-׌-uzV$i}mlp=eб9[ Z05;| lV㛛\쿵l=ܥ_a,?Doo8D?aA57v|lBeᖃ#7dmD`?T{l'Q+f2FfbL~c)+X%L JgxTMO@=ۿb]9RMPRJ 7`ǰz!wv׉[{>ޛ7oEMyiq :#ԭeiV6 Wn ا:DJ *atz_?~b`Ķ>|b-Z`)O{jqPB-49 B`[L{v&7(}^ Y[p|&\ b}CHh-u*zJ,_3Yhr{8>TLy[,PrPkvD` dĠ[lz2#iB!N(X:!J-z74,Y,Z yWg- tHtaxO`C'yd/TX'ش)֐TJD {w // Qe876G~d|;\4VjrRJߋ3 &m $cvlg[ަ,SH<ֿo'ՍNVAڂ>cțV8>&*h;':/ +ٕJ:ft'],Z)1ooQ8 }TCA <ܑmK$Qo{N) $uL)ېBg>bPNǧ s4mE!2L yV9%F iMV/?hQ8dɬ ntȁ ]F'Ac7LeT>D4.e{1+z+ @xCe%!"r+soWw%*Z%\WL`:EY2G+ ƽQ|JK1{juw?4 :嶿0DgטD[5cx at^&0p\yK=ݶՄ5ë9;*jP^_.ްrIӌo !(cTzVyB7Cka89DXo]mmP0whԋL)KL}kdLk l[A 5 Xڣ/S.x[ <]x?GFb^U~bNE8xYko, άG#?p.E6~1$BRKrxK΃#mMQqyyp.1|5r%x16\-J9s\.ܮyr/Kn i?Sw8o&WjO-WҐKR͵f꥓3J2Ľs[eeB] gH: dYȧW|SKeb䫔j%_ ɩ+d#pɜ^Mnl.ɚ U2aevc.vػ ezjr7La{l) p\4ƲUpjR-U% BiBFP!r JT$|qe.bAߔY89RYE{Y :`ؒi[**niqζ^ ;~}-sI& E Ōو;6_M M(rjGWB&@#㠝q0oqr*]n"+jHea@h ^bE[eב:8C:'-GL_0QsudD)=)9K)r!(A~芡 ;;Q" tF`gN8a7O 8,\Rɂ;јiFzaFYхm  ~qa~L&!\H3[i(+.R3W,:@=#  eTP;/(' QSO65g{_ w6rɼ!^fW_w`񛮒zSu`q hX=vG[⌞JjP '\P.|ww !_[@cÈ\ I3.,܌B0RNw` k: [9}%O .Hx™f4A|Ser~7JMu$ :u~"Q}ܭ|?5v=\:[Z2?N"8sd+/)f~]'ad1Tvg ,^6KG`}S+59Ɛc'` P[ X~-܀#s7]oy]D8\~D`(M=|d)`3v7$Գ9-E"ZPkJN$d63,3)JqjԪ9q;#pK/:]k(m[zǦ&$/r[y _Iу`; 1Kb č Vmp/*k-q ( cZ7Q3LtjTΰ&k1d5%x I. pviװrT{4tts pJ1j<̟\IU,hV{rjl dc0.1E:-nh2l8Rd.D_-?=i&$D۵k?yϸn +h/{A}p}6.X]ZA>!Cbᓭ8*9*ٖ2y xigզgo}xY5c S!'a#~"ߠj/&9Ζ9"*}ݐePz*`pyA~Ըrǖѡ CjwOu(ϊ>(zFbߧĿ‡j+tfAsFlY3zBw |/0 ,}j<2@*~4=>qtàG;ƿ ;:^ȘH1:>%32wM1W(i_r)ݔ .b+BDA@? ? 3#ba|Ch50;t1U[1oLI8|0WC~c= 84c5qŸt\"t EX0gF3x #ԗ酕cnTF̚BA d1_O k@P 77An!Ϸ[7Ocui&ȝ-h8H3@ [qkaFnQsb.+$F3أX Y!C!0E 6|n');|EVcrDz??a>Q߇R4 J –CFtV_zk}lQa`f^A{G'($ B pNVK2$}SaDm _@lg ;4o^}G64.^D;ژs^lmTbkxB>D>U/)]V:BO&Oύ(UjQZgc>" @@yiܪTn1xIP_.Q3Iǥkw~/,nF.P+sKiϚ.6ݭ~i$4kq2A1ȸ!?7%'Zf&7\jfWr5xqi̴!wxȜ{@P+0$Sm@X1 | &3 tqq `#9)\o:bt`0WwDc^c3}uTV"ėLS9)ll5d{6Nʏaϖ' e|~^(Yʛ'"DG;޶;𙯼m#=z<\RE^,y̒/$Zʸc':Qt}>"Rzvp<e&pqb%,XY\AV^;UwDfsdTS`?a6ZgSПSAyᨵ4煣tU0e4oZ{100644 random_test.golos* }xopackage security import ( "crypto/hmac" "crypto/md5" "crypto/sha256" "crypto/sha3" "crypto/sha512" "crypto/subtle" "encoding/base64" "fmt" "strings" ) // S256Challenge creates base64 encoded sha256 challenge string derived from code. // The padding of the result base64 string is stripped per [RFC 7636]. // // [RFC 7636]: https://datatracker.ietf.org/doc/html/rfc7636#section-4.2 func S256Challenge(code string) string { h := sha256.New() h.Write([]byte(code)) return strings.TrimRight(base64.URLEncoding.EncodeToString(h.Sum(nil)), "=") } // MD5 creates md5 hash from the provided plain text. func MD5(text string) string { h := md5.New() h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // SHA256 creates sha256 hash as defined in FIPS 180-4 from the provided text. func SHA256(text string) string { h := sha256.New() h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // SHA512 creates sha512 hash as defined in FIPS 180-4 from the provided text. func SHA512(text string) string { h := sha512.New() h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // HS256 creates a HMAC hash with sha256 digest algorithm. func HS256(text string, secret string) string { h := hmac.New(sha256.New, []byte(secret)) h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // HS512 creates a HMAC hash with sha512 digest algorithm. func HS512(text string, secret string) string { h := hmac.New(sha512.New, []byte(secret)) h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // SHA3_256 creates SHA3-256 hash as defined in FIPS 202 from the provided text. // Available in Go 1.26+ stdlib (crypto/sha3). func SHA3_256(text string) string { h := sha3.New256() h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // SHA3_512 creates SHA3-512 hash as defined in FIPS 202 from the provided text. func SHA3_512(text string) string { h := sha3.New512() h.Write([]byte(text)) return fmt.Sprintf("%x", h.Sum(nil)) } // Equal compares two hash strings for equality without leaking timing information. func Equal(hash1 string, hash2 string) bool { return subtle.ConstantTimeCompare([]byte(hash1), []byte(hash2)) == 1 } xWko[E cRwgWh)u!}$!Ugy!JZ,j;sΙYR9L{_PY?v;Ztl:{k>riAOeѝٴRӂ.vxqs[x9)2B&{ty<|[[t-tZV귏|W3*Ջ6`a{k6w{iݥSzvxd2{C?Z>qpZhwpo6~v.j剤Fy^ -'FXqlH6e!X! .[i'Wg0m݉N.Q䞽9Jʨ ŠT `bVnMV,V&{ul|/ψxy]"F߈n YcP(PęM 1:D8sԦ$m}op("r=D_h{QFΆX\ bK.E¥V#,x# WKaY8B hHNE *WZ}Ov@ M)B"-1AZ1)K! CSɆ{'jvjɬ6+cAK#sڣ1 3EC.a2l)\?JTfLxDA歅l-6jׯSlR"~1i2~1iBnח5 &eʢm!U\B +?^upm}OʙGEgHʅxփri uOj7x=NƧ9E柾|xP/?##1*?1Scv~KmxKo@e-[jKz!\HI(B$^/떀Tz%Ύw+rPj yU "9T%t!2Hć[u*^Oـ*][YM2tq K?OeaA(b &eA$hߚ2KRJ&-X:vU)Th`Ût24XfZ[ճ8NPD6*.NJ6bUkuY΂mS:}¯`-6{)JB! kzZ;}Y||N rpU.]E-\: /aM+{mSDA;x~FVD8_Ĺ 1 ۬T{gIk;޺9U/.g׮FTh^c˂柄d,rJwG7fRU9t7Z'i^U~[GP5~ogh2nLsG4}J+|S_̄˯9ӁZM-IKP.?$iPI/ZЃgFkgbCZ=ïXAI{VҨMσک1鞏GCүНH34ֳ>uomQI]\ϗ\a_AEj)~b{:l`xkB$qFLbJ)%J % % əi) J٩J % I e9) F E @yM=.}} R,VM-OQ(-N-)525uwUHOVH,H-ROIJ+KVpKdGifd+J-)-ʛ\ĦTHxV[OA~fq TXcȰ{-{svJgfvEԗI̹Ƙ9S6FHI'f,/#.llycۢcOLa͉8r(,OE~eЁ } X.\U*%{Qpu:B^E:JbtAv읽Eseާ8mczߦAy|q=UUߖqПVk4{w_ӳd\ \y>HF yvΨ?s8&/m>84[ij7kLᒨu8lW tTa X jBQ,^ PX,SQ,?3@eЩaHlsZa412n&\خ3a&Lv+:K_ >b~.i`]]g:9ʜ*5j#hxtTfBW,zo*x('S y$KZ2Nz+㫮uM)lۯb^oZʲ^F!ʈ$&VA"3vC7* Hq1 h )lbTj?K)"EYo3_ &*ƩXSTn/ 4wQZd~& F揤O傤$C_.%Ssg(Mm7vAxNZ.k$/I#)jB_]h[J$EE<ѷM{b@@ ^? ], { ==ߩΊ'1}dc0t]&p&Ba &1eOsQ\\‰iKfVc^`t("1)He ITMĬMPKLм"q*R3LxTQ1<ɤ:2/Z9Jz+0W&QLc/ZA7RRX5Fμo; Eg錺Aev`uԪlVg̻`x}).u !Z lx[?GFb^U~b@vCjx]O0_q , &.& !&n5#ǥDsѴӸE>_~nyീN+#m$rjc!KF0F./+"Mv^kpUc=O$1A9vs-}Z 2i;(.eOW.?O \' Bj|xlsܺj: dR e~j8`|8>gNgh6];]Q ~<̉Gr2NN@ɆZ2'oddD=°:%σ{RmZPVj]`7 \ \ع|JL}8J+# Y8.ߞ&BVd{a9aGlěAKۉ gb34]8#ED: ]bQ?Ϡvw`fF׶HYƐPpUWb `\ೳLI(leSGD$d1%+Lo#K H}^gTU"+|Xδ: |cR%vqaG`coxȎZ=QM,8o`ǢTg5(cZj mK 5y$ yډw@G s|\O]|#B4;Ex=J1 n)66r8n(؈bwv%u DI+XO#X>™i7ߟǓ0/}}qyJVZ!['\Ԑ(g)B]&S.VZ[htLȄϹ!kkuML{vڌB_l-zU5^+r}1KN#;5/nd'o=p#IHnM>?>|gO?7hTxWsFl:Rj΁N:!}2vR>0L{aНb{wNl6Hw~vUx. Je,^Ul@ղŰ2TΧ+iԳÍ$cLJO9Wv8gc+fz3aq E* ;LRAC[23TY)rk@«oV]ZB8?"OXtDb싥U&l<%R=; hLGV!: L _P ,#D'zZW*UpqZ '$Z:vv G d<'#]IӬބu˲bV;W{@H4syߋS}B.q/W KJI :YRM[O/K pCJw@(#3)*GeU\DU,<}۵!6Ј -YWG{HA9Fq; l. #x؉I]ƛ%ĵ:a*9}A#c7iIB Ԇ`6W1j~>$C.x2;s`_}~ŜhbA!?)6tc&6.m|TVX7r#'6=O+[^[8 }H~[\o1K.",X+cbxiӋ#-"$#ߛgVr fwWe"=M\fNU 60)/dSһ]4 δwU-뀰c/F b Jbc+mmNhp wg |鍊-_!!yײbt߽2j*z6#uV;`!p 7U8I.\/dtm02į{w5ضMtgAk.Mk ]oEH10f=з݉123s!L,et] |> *񛀋an\jsJ5CEu j^;ũ@&yw-TGvD:3|3`& +n*Q;PAA lLP34CMeRw ǵ蚋M8w`&,p0z;RNʩ(˫I!))$ɤmN6H]^6UKweÝn7Rx|~*oŎqrU8e۸65di /b#@9XQsl6:HNC% &B$'(&xTNgŠeÊX&e 7'_PEQ(pO3B9M'DaHkJS"q8wQe$'祐,d8K#uvYgk UE#V8s)iv[ɡaлb#ZVH˾ۇ)/ڮ{ҡ(y:+ch2Jq!,6)]R± R|].T1:v@0{t  \e// @zx*7azB1WXzPK҄a^KʧwEd,-kҲz\9JyR~S<ҬwI]WKmp^D>'e\eu+AJBWe~\J5*k ){ιcd=3'f"Ȇ~?z~):d{/C`^ʽ _HnaI gSqHŤH:IDf+ ~5"m |G\8PC%nB-y^>G-lAW kfe ӠW4lgy,4 V\wNq_Sqj~F}Ҧm7E3`ae_mJMblDI $1[vnt*:nƙ|i 4z9i kpʶЇmuu1\6lJ_I?71 XBs"rC+fU@a|[In[={dG 3!e[G}Cq|f? Qm-e<#f- /Wppl9g>7W:<]dzr6p9A0ww_"VX^|1 yzydk]OxD-ԼgB!*ND{VЮ 3PEDCHH&\:Ϸ {&%\ꍇD$zЄ*YX騬넲/H;y zFDgK*: pѷrḧ́yBj.G49xVkD{ļL-/YML LL&F8fgzyf8OέoZYhaon`XZY\ajYc\SVY8Yp^bn eOcOT+KLQH/M,)IMQ Qҙ<[|r.Sld&kp OcQ✼WdrQ-T[h jƩbSHf`^u'[s 2k js 4'O╃9Lbdnp,YO6sg\˧V6 `BN*.Y[PRPZRZX0y"SdE!)f!++$ y[d'[P 4x''kNQ\/8HDq,'O>'*ǒP6H-P+ĐX'ˉOvDQkj^qxU]S@}n~ŵ/n6EEgxŊDa&+n݆@ł3Iv={{\Fg2A(0*Qn,dzRЬ;_^9vB{jfu6=" v2D-hnxw?|:Tw%zɿق|O6>lzް(HNp "蚱c&]}:U:5ZIXJlbeHfv(Jٵ#5TC:4`X|{5`\w1(evTڛSt#\ZdืF;J<]QǺɯYE*^6{[d: na_ 8J5vx5B26y+quEXe(cjfh}( \ԩc_.o;@v&~ i)kK yo, xwBCI~JBQjANbrByfIBQb^~ĸ?' M`o.bf/kj p}:nemiqyEfUJX=s+j> )~,rə1SN9XCbqUu#zF?pDk b5#G|r[Ń$ eKp+߇whs"#V&w;Ϋ"z@Y* ~8QH .jbTɄYD'k2m&*ns)@wpXsvMw89O[^<ى~]!)+N0Wve1`a%j'3er'qf]|iR7Ɡ{b[:WT%u^@t" +I!Uͦ6~1O)C:Ŗ`wt)HYz>~U%u0>ȕZ%x U"h'T(B] Gv3de9 NC3F9`@m tc7' #t[֫z)bZVÚ w8 Qĕ]lknn{?)Fث0 3 { t.Fatalf("The generated string %q already exists in\n%v", str, generated) } // rerun run(attempt + 1) return } generated = append(generated, str) } run(1) }) } } ȧxv package security_test import ( "fmt" "regexp" "slices" "testing" "github.com/hanzoai/base/tools/security" ) func TestRandomString(t *testing.T) { testRandomString(t, security.RandomString) } func TestRandomStringWithAlphabet(t *testing.T) { testRandomStringWithAlphabet(t, security.RandomStringWithAlphabet) } func TestPseudorandomString(t *testing.T) { testRandomString(t, security.PseudorandomString) } func TestPseudorandomStringWithAlphabet(t *testing.T) { testRandomStringWithAlphabet(t, security.PseudorandomStringWithAlphabet) } // ------------------------------------------------------------------- func testRandomStringWithAlphabet(t *testing.T, randomFunc func(n int, alphabet string) string) { scenarios := []struct { alphabet string expectPattern string }{ {"0123456789_", `[0-9_]+`}, {"abcdef123", `[abcdef123]+`}, {"!@#$%^&*()", `[\!\@\#\$\%\^\&\*\(\)]+`}, } for i, s := range scenarios { t.Run(fmt.Sprintf("%d_%q", i, s.alphabet), func(t *testing.T) { generated := make([]string, 0, 500) length := 10 for j := 0; j < 500; j++ { var run func(int) run = func(attempt int) { result := randomFunc(length, s.alphabet) if len(result) != length { t.Fatalf("(%d) Expected the length of the string to be %d, got %d", j, length, len(result)) } reg := regexp.MustCompile(s.expectPattern) if match := reg.MatchString(result); !match { t.Fatalf("(%d) The generated string should have only %s characters, got %q", j, s.expectPattern, result) } if slices.Contains(generated, result) { if attempt > 3 { t.Fatalf("(%d) Repeating random string - found %q in %q", j, result, generated) } // rerun run(attempt + 1) return } generated = append(generated, result) } run(1) } }) } } func testRandomString(t *testing.T, randomFunc func(n int) string) { generated := make([]string, 0, 500) reg := regexp.MustCompile(`[a-zA-Z0-9]+`) length := 10 for i := 0; i < 500; i++ { var run func(int) run = func(attempt int) { result := randomFunc(length) if len(result) != length { t.Fatalf("(%d) Expected the length of the string to be %d, got %d", i, length, len(result)) } if match := reg.MatchString(result); !match { t.Fatalf("(%d) The generated string should have only [a-zA-Z0-9]+ characters, got %q", i, result) } if slices.Contains(generated, result) { if attempt > 3 { t.Fatalf("(%d) Repeating random string - found %q in \n%v", i, result, generated) } // rerun run(attempt + 1) return } generated = append(generated, result) } run(1) } } .xM100644 store.goj \e!&+o100644 store_test.goO@.Y9^} FxXn7}~wQ$'JuiUSvL\Wm)rQЦBrFHBߐ"*. + T) 7`b)N0{[}4rCW ,C\fQw_!S,/2AC\f,S+ 'Tzz̍^ m kI//ʔlb3.1vEMPGXt:~TOeCYNkqN;q+{xfݍh3F̺bI$1Tβ`v6DCKx:r @+< |{0+:B@pW#]ý:o1N5`;nANPTob5eNk"{zt:_BFVjmH$ FLjxa :5k`uaC &WۼD֦W 9W( r_d1m`jGR4 \T/Jw8crVAusFa7㲱4acْU_Sۤ 8Vo 7ΰCi f<@:Uo/s^فVwEgKb\EV⑬-&vTp/75a k^#p+ߺTo= .i.:KVgV ̦6Rv|B=Z xζ bA ٙ 5ngj.dF)dH:;#[NjT(1VS0,=cIϺVE yZ~eïc-̶.,1mW1}ގ7}Ybt<!Kjj1cठ}c]-+ԗ৲?n>~;rKz4!Mkf@?n5? i8Q'EU25GGh ` f6r_lN&G^!MG{qCKG>4\?y;jn+Uӌ+} h{|mD]IdxYKs6>K=R^i6mn/ǁ(HbE2q=œA=}|N"/؍`\btڭ`tC<,I6=4'.8aRІi"fQ/g<31EL2v{br޳ _ib.yhTPYLGmڭHIF z, + \тhAv+ȯO^,IYK^ç}p\,|z%]2ёAH]rvFxL$l."_TN(䐙nPFA9 ]"d]dLyh)wQ( Mɓ/5_F_{J&/g>eS1,-;Lt+k{IMh|PrOƾ_ }a <LjVpU݈]K׬H&jb{NrRUw֪NkK 'ڰ*2Vr\V:T @L2_7koo'3UY_͗i wrHy?'h+wa`nx&VE&>%Q[|Oz@ <1Pd1 4|cQQG]?o玵Do{ 9n#[CA坭 W.ظVsa<, dNόoxvAT['BXUC(x:dgi [ RTn:]ᡖ6-jF"yT*Iq!Ίp,o0 QmtmK1ѷrJw]GeoY9q^_/a6w[1e H-)qv2yxk֮iTR +M--ϗ: 0#so5rHl{/"Psmʉ :jR6ҭm8$UyD{xyD<*q#aKaE^ݪKZtcr9{ KrO+=G_xV(Mg]^mPhMsR3o{oDN; 4I\ 6|s)[R (%",ɧSV`F.5je5`Q_oب`b `G$y7ˤx¢NV ˗H0+رx:q2x96Hyb-.8I}Npԛxn3{f6,2l26_T*)bF EePm:PSx{yB*GFb^U~bƲ2EXB*x340031QH*N-Kg0?R@^5s~0DV_Z\RiTuo^k\'?029'35hu킕d_z#(Ƶ iek؅SA3\8UZ\ R[R斩{"+WjVAU7p[)Nu~ݘj>sJ`hxTMo0=o~ŰT!{UB q&+lv6]$.g޼yomX`&ID?(m!MV뺷[a,7-ڒ\~Z:鄡7Vi\'Yl6pU*D #P+ =l+%S@iM IV<\L=h`r0e>&S/ B +X'~;vұ9X&9I=J~N3!TݧB %x>u&dhe auj\ {P5nIuXE=`OX99A)IJN9UrQ=G,L'f%_yNᔚ⛚2M`݈U3F$MY8[rKt> %(6٦m4{pb:6uJ%jMdנ) s RBkr(s~D (M@JaZH`:{{sX@3!]hXU9˳gyHchnAe_t5og'Tp+]ϻ[)4|R95Gvh巜 <ߩGb ?Mr,>09x3##1*?1ST xVn0<_* 9q@/=JZYe )I/CY(n{,5tHŒ5\iTZ aD<.0^0Q$QP6‰"WV"$s)(GÛ~/69X Q1gȵ0g 41֘@\A gќ=b{"O& RZl#9 .\CBWJALi SZ5{hM&g/40TF\C,k49/vURnӄ*Qh[ֲĀLyu!%{el:+-mFviЭ ? Ƹet]Dbgvxyjb/de(!L*]"(Bl^CU ^ְuoiΪ(l%vVWv$갟xJɐ|SYjIkB&K,B'crQYԝ!WG7u Y@֜ι}AY7mU,[%Kd*4@^ӝOyLqL F]CPsXXqXӍcN䞩%SMX#+(Rr6\TUcy89v"Y,5Rl;BČCVoU%=G2 [[1D8KgJb7, -Ewz[y05Ih̆/7 B̿yтO(Ǜ /FT."0Kԯ:u`-arfL|@iu@^#ߨ Վ \% U{ŒF삠Y؏=EܺTRr@;~rҰ"nǴeq?B/0 DތMJQkJ|j /UwZpSv5XuEE)q./ Nlen++?yu.3vIX5[b%çU5jA o$S(hK`)=1%p7lD3昿`'1pHR٪;W%( nݔ#$cQD9,qI-_MU~'eٵ~U OAvrs h!H>w~g7p_oY} hd%Qe}M7nJ1Μ"IĕYN`q8][; "!,fA=&wɸD;u}=_+29AiF쾅p8_goFΣʮP ok0KuIJWax)|tNc$J(wE4p? q<v)% 7TRH$G(%$W!HxՔ ](o#LRrocsM3(w7es*xP0jJxu9(-(ݮ vנG[|:s@ɡDq>@vƄ֤G=<{ ܡZxץ_ Or <%ԏRfˁlp\޳2Z'3wڈkφt1p=}) FpfOCȸ0ƈ4+Sb}^Wt5$^ՎCl; CXG>&3u3n^vd| auB*K7^<ߔ9]?4=sc}43;2,7 qvG38B+| &x{nyr·ͅ_86qd OLIMK-RH-,(#>9<صn3b((̭(.y`+Hbx0k$rrd-HW}`W LHǥpRzQbrjZiNNBFb^JNBAb^frBqf^rB2P0/5G!9'8U!X!/D! ̼t X V '4/YCS(59,Z93x!&*rryN~x;orB,GFb^U~b{5M_Kkr4EF19vvq$$^-<2)RMQܧo<bxi+ >6ޖ󂈐(Ewc.W.z++KRI@vsE- r#[2mljlK\襵 }G ¢X[Pυr+j~fwm{lbln/[yUx3S=hᔢvs Va >w\U xY+q֋}emeB)d2ļrv* +(邅i#] -mcF~|(U! Bձ[ W!"LHq(aj|;}5q+ g 6l @-ⴶY /0QEQm.ln;+YFܿrϠǪ7QQ] NCEH,8ӎĊ7ibȕXyX u$c@wv f/L}<`9V^S)C[͈7fnlzx>9=+C,?_|__v71Ey.>HvEt ԪxбLdu9G)xJ]k*_C<!0U\9khV>-fpkzT?kZ^/ KΠi-Gy_Ë" M_騩 2,?kzTO翡a!2>?'7+kKoA 3vfz2tߜrixZ'N90ڪCrV {ܼe6.6y^1` Ϗum] !f<^j)a0JH=|d>ɴQ%~f[>'4@pSargxnPчBPװ-xmRn0 `N n [ C;4C$hSkK%z8ܿ| DG=R7ƞܜ\Q)7́Ԫ.h(wQnѡO_#;=0dJ/hUN9t ^;9_T I+Ny/r na/i/D<uH8@M3w7PpCy ..@a; 9{:' u b[]1S.4g5g^0ԇPp?Fh%FmC=:BiH-`)_w'l)EQUU^vCR| P&M&+Ɉ_|[M"c"!-Ⱦkqی|̭B^J5,.xUPN0<_X%(rA .āv` gBьvK}8zh"2feT2??s Ӱ##?&GŮ/uPW٣LS#K"$ _'h Q LG *HTbWQm8Go4&ᶩfvf4BRX֮vSE픜7\aqNP/J!%v/";o^#x|y'GFb^U~bƨrFIxG100644 client.goB2-ؤ%А(100644 doc.goNRQH=W1 xxb<}OɪJ 7ރGFuq- 7E%K39&:l6>>SQJÍ$E @Q@<"YTJj%[l$[*k'kpMD],[١DNO0=qo햀*_# NRɗЕ( >y*Y^%J#DϨ8~og߽wOV2SPD9%bWL])'6e')'J7{e9JyF\&Xe^WI&2Xlµs /ېhJT%HN~ ti)bdaAl2UeAD Y2%OBQ|TR?9im4^J >Z @@n0.<'kʃQUSl~<ÁŚ3YϠzRD-,Ÿ;o<4_ oTzDz>8OH7*/? 1 R` +" Bm8#^ !$'S"@EZ:qQ)D.!LAnHX9h8np)$B<# &&Asaw4 h&|DPO} +/t:9Eyn&z j i#f& 7kaX Z=S_FC$4;@)(59%<&pFPY YEdW̍X{fj:3e`ƖxioeU7``g]Ikp^uƕ*غPA#+(a$<3/Gּw7v}cyD"N Qjh  @'5ј69)uQbX;@yz 8}vO3*uf7~GdkԶQpV]dIJb*:>*Q=%@G4PD ųQ|wzz 3 yGBprCA#G~#xO5pxڃW-_#!r]T`$j5Q s& tlD=Y#9VfcE>gI+oh90 8*1sT’Lل7Vfߪ8Fƚ99hZ&¤~ls?^o)"ISu s.1#!EQwJ?a%khԕ ;n^aAp:dtV1Ɯ*~ZBt 7DGF'peAؓnÄ-val@6  (@q^qGx:)>2%% SLٝa4iwQ(Kƙ%FI&paktO71Q`O{)>&1%3ywY{ҦQ`l@<5tN{}( > G "íg5{°e5+,,54ݢ(]dtNIDʯ…%: n]cAlmne[ۑkwf?h5VejѼF+2PrLI`o&.q65e~S0seٖkn @jHpYubGJ~d!&[ڈJTo"OxIu-Bn4GYcAqn: Rc(ua9q٠j6\9SCLZ n+yuG{ok[TxӰVO7yt=ϥT6!)% AW%TDЂw h^ ]ʍ: Ós8)6< \d̒k1 Ϊc9K^$ d@ڠPFL}Ϳ wh\TG|EWJЋ FIXK_j7*#q*䓭x(/@`ܬdv[GZn(pXGsi)CA ȉ8U|gge-y w3ctUR]u t <[$˺4eKX I~dS*؀0E7*٪3*Q`(@j_&`+Ed@Z7b+0^cD%7V[BsiÛ+o*<6 Z& eG,V}(Nn=qKS&ׄ3u#G݂C^a$u*Ԫ q {)-ַrXwUE%9n~(kwyTL~jX7daw:iV:ms6?_hΙ%42xEL!I+#2)#匯p 3@Ժ>ڧ**x)do ^d e"l/p8Et!oIiDLSȼXW1r`:\Ş/%YOYsJiL,-H@ ';V:V3*tLг횼;ŢеE޳;6pC3O\2~j=R>JN Ō}WEJ=L=)k*`k2uM u ~ S e ˚!4ྨ4=߰V8ط1ӟ|PP? d-W~Mk,a˼!=Wo"ÝKRfnk]r;1{$4ϐ6k}aZ--Ñt9;zl `{ OSBIEt " |3beUx&y1>ҦV|ۚc4E@ףJ7ǡ$Qs~W[9sb%1}wPՐ_l#S}}fҊ wm1*FskMj&e0%͆"I|6Onx|Ka,聶^CF+#{P7!mu 'nLBI;BFÏFGaڼ6R_wǍ2m(hķyfGʌ"(YF~${xatTCЕm8m B#H/qU`>N}{0'"I-`J RUwv}m!Zvsvd pC{GhƲj^9(~}bf5M-]q…]@Aa0[#td{Hۥ#fci^s,ZP賦̛v4%NC0mDŽ|B^NfpIizl5Wj|D_i_>漄߫~YH| vJR{ޯf5q'URE+J;x*mogs0"JfnPa4AKy~Y/ϫ+l)>~!aapbߵ~ӡ]CJó~Ǽ*Q #:0!ciۆ^iQ ?{Qm؝h`斻hc(yJ⊷n-X붛-kwU$ Һ>.{MwJ7Ox0ם.qƜ S|m[ڇ(b8$w]e4XG?V2ۮ*774Ujlz{6IxYjo;>*uxMǎܟЍY(%S5~" ?vnBFfEm:=n[:E-ZaD}aw{ᇯۦ7ٗˡL:<^"3= Uӫ %Z-M|HTS1G32&d lg݃ӎf c bwCϔMV2$*򪉵}X2s\{Ä^W{iEiE{oT]i\8m@we-N0hMQrev n7䮴`䝮Z !AcBqy^8n B`Pz"Wh:p ~~zu{MiwvRy͔wMo9jXԕd?[7Rga2xoThhj$t.`gvf}+IJ-2w ߐȿx*// Package tasks provides the Hanzo Tasks client for Go applications. // // Two methods, two use cases: // // app.Tasks().Add("settlement", "30s", fn) // recurring (duration) // app.Tasks().Add("daily-cleanup", "0 3 * * *", fn) // recurring (cron) // app.Tasks().Now("webhook.deliver", payload) // fire once immediately // // Add() auto-detects duration strings vs cron expressions. // Transport: ZAP (binary) > HTTP > local goroutine. package tasks a x340031Q(JM,.)Kgx ѿ/bV\UY|Ijq HFUuBn6C8tpy)EE eUwg\W`s:MȚRA7]eu䅩ŦBߵxWo6~Ra d4يv(v/E00eIxE}G nyewމHrKRti%aMKIr^Rؒ~W/{rIw[?,R=; O r'g{=76 QlǨ#[9Oᨰ!RS$op.Uza[t#u&+KWoJVpu6zu ,L/U-]ʛf8 +$Q5Ađ@o8Ѵ>磒E\JMֲ};݉b@B$ZdnOJ5/}C1oВmqx>یgI >N ,+%; @[n ωFy|]3#0r,/x. y}ɟ%"0I\ħ\ܨ+MUc?OO< A<,g79ƚ*IWLLU].;6T߂;3$I7)ߒ 7 \Q//Npj1r֔5:cAfPH$W滃' ׬t..%'IY << !~5ޗ :و,#'Y#|v]L?vKSfN ʴr+zeǘh8$k\~jؠpOx=?>;Ώ;:[8Yg:5\i::ė8m;YGcSSIene'qOrǭ>Tۮ5nx(Q|&&:Oc{mIeX#&Ǥj<⥤ KDcq s )Ecn_TC>?4|wg'vq'xmQN0829U.H]pskH>S*ĻsH,{7SӠ iRTLj~ϯ E#z zGcE] :Ox#ՌՂ~CUYgR@"~opm'K&쬱פA\?()i׃GޕJX.%FJ:VsBmwn@p[65M 8;IU\Qq[mq dmݗllˡ"Y9 Pmb%ڼ)I1KUȦM0FxSQk0~~Eaѧn14璘ʒNuٺt4YV($:gu ^^CgRTBO'Zآ١Cb>Ú FQA V ]RʪR>ƱyT=NBV6ΚRQ`4{Z|(FBE\g=sjუNm`I˚!=(SAQu6AsZIH4Apˮ*R_fq01:Rre16bXbw\eZ*b>݌o5\=NF`s4ʳuz'd,K10N 2 jQCS.*#4ۓ)}evuof+5a!1مp _1SQ:6_ޗrs {d}ӬШ'}˛mKiS6$2~R1x340031Q(NˬJ-Kgk6yʇOx*]k\yM]|Ijq HU[=̴O;iQȖ$S"xX[o6~~c`ԺJ^ 2R`uM>$ACɴMX\;Rl9M"P%^w.< \(a*jJ[ )L3.=/FUs52j ]v %7*\Me+g-UkUM9F:(Nnٕ8=p{S/XNE6q>dPv*оUzMQĉٗc9q:E`}e_?њx!x4+40[(!(3Z\9 82(аz풄x jVKxɭ245{L'-ǁz%Wv2S%r0CT[ 9, +635Li͛2aM'e'!Ɣ>8Ao A1@PCNaQS+1Eaz!!=IgM-`.09Z}U)cGj18( M$0;0IH2eD!$E Fy_PС0h7vHGgŮDAqh/[xn)Ļ`#>Z.ӱ z !a#q{S}b[N]-ڱ˙7g/?$xtY+|C-3纄,g1Oٴ` D8[O5-{BaڂG@78[ˣac<~|62n@GN3@o|t>ڨPeX S^k@" ^|_WBB~'Q5ϋ~R=27""rOh0<^4US6JUtGZLs qqA=_၍7| wFT9tOJ:Kx݁lzhrznpdz)s[ *9 !LgdwDФiH5ti .FlmpOe&Dof#˅Pٺآ/5bUAغ  KQTbѯ.| 㵦cf(*O9 tnha}mA=R D)B1ٔ~(Br36urf7=!XHxf1W k~LZ,]2 ?,耾 xۧE}*^̒ T j.N HN,NUHΰWIOw1z ;DgܶxXo6lPG!@l] >ACT,ؖ\J%wGRݵ,{A6"\[ *]$[fqޤoNVH1Rv]Y V`E?Ѯ3vu=aMEf𖃆" :FĨMxy@p XFa- א,R)]9s*ؙL# cp7mNZJ "\6e;Ř|Sd(~!8-rVR')4DR ;YΡ-VņNN֊\v1v.] NO5*Yjx di޷,]]CWRF\ra0l2߯cSl tX8Ъf231 9|ͷwOQZ*:S$\@kPfWѫYd5-ndr&s)fI] k6F1xxe #8\@8Q ͘ oiy,l Y3HV"W.0VZqqnZG:غBö0덺/ͩI?V`ڱ[5>Uɞ)':+Jf,MWv⌌aUMtk0qx .+3QKL;i vJj[ۈa5շt>iLvL?q&Kړ5O`5w>d&V" 16A(nt@C q?,ܜQÄafKX 0=b( 7Q[nfw{ LAG|#B|.b5:MʥpT=~M Tݡ9td/ Eɽ\ n(pG Ysv:|4>v1Ҿׁdp}BՕʢo rN`sT*F'FkIdck[_w΃cHgo)~sG+\") mI;>)BgfkG`ީ:vv=;zn{dJR [J(2+GKFg{9Vn 'RuSzM{hj"Ol*;t,݁uZtթ9m^TM4f0-xEOqZ BO9cѓ۽Y}07n G8.3cg5 IU^7+G &96;ռ)o?'x340031QHI,I-MKgPkbxO{Xb,$7bcj\\oO;uDk?Tmzj~|A~fXF…$%n~I1'ȋn诚( {ݦ9wPYyEE L7|Pa {m`(J;slmt ZkV&G]4ep#^M]eFCg֊K#-J,)ڣų]BK})ix⵪|?zSw<8qAڒʂb !?)?Ouϵj%F9&23|+KX}@r kxj??S|<!rɅSAy[L5y5 A#uf Ci I[T4?2CF k wxܽbFR?2 ͂Փ(3z9WИ2(oJ[9gQGDxWMs6=bCK ESw|Hf&6LL ؐ{wDI"xX"$>JZ Zi a0gŠ0ri>L[8,TeyqQ ؼ|Yũ*^>Zyr /Z4}!SUc2׹4`727W`U lsIAr yOΒgɓ8Is^ڑ-m+A7c`QvIeeP(uSXaG\n=s~F7 CGh#;TKk@ᬵ*E6d[Q4T5E+ m| LSSԱK^g mG># ktDYepvtpm**ugsp^kiNt=sYX 4@fDTԹ(/]c09e%rieB:F:R&= (f^Y+,HO_u#2:bye*ݕFfOx%d6W\$lkRT==6Q+XQq+Ejz0uf*dq<Tyٔ* e^mXq1T-pk]^ɥ))Z|UI!f% WܳfaBUFY]"πސ܎l{<G7i}[3FUX)UL-]Q*i&1՚zZ`;ăNA^@n;=8͓?:zҲS,b65Ngz@*?=W ҍL?w n0/u` akl M];TH&nRXGm Ĉu;kкP dY}6q fL\&JhMxM$fqGmsK_xoDo 'Mܨ'@+t/4˫ގZIM肋OTyɼ \gr zD WG{K<r/'"=Cb pK|1j0I֐[77dw{vt lqC9|Ⱦ>C]{SmLa[8GkͻƙhVlϧmD^4Qf|to}læe ]Л΀?9',k`ã=' J[xM~cNjaGtzhxZmo6l VCPJ>tinXaI!Eh%GfAHIl/yq6l+$x#u̔ N͔'g'04i s4&|%"‹q<`M.qa4ٟF/\ XGEd_a-ᐜ& hj *Snȭk46 l'('L4M^:mۧ>-O(d)OFQLP5Fa$ u;F0"/2(,/clYF6}ۯS>'{W|rE4іѸ34 ~cqWUH\"gs:3j<؁㲶L%X:( dCQb>,PHglr?,<<_!~0[4,4  5QˍNPC;4u%B;ԦfPxns.HN$%3˶w~k=0ˢz6p YbN ~O&$ x oflILE8#pđ/XIkkc`p'1 4R%ik&vE |.q,ܯZ0|>ce ZRpY 2 e]86V@=L)oRQk3*qPxD@~ |, AqeQj;wjJQWz8C^H8tzkw1&DK\~EPh3d /L*ܒy%Wœ-.8<], Kz(j<7J§zA $32Q#F_=j-ZY|o\ Aצ w#[!m$UĿTLjɶLjdgGpCb'\CdM]ReyJޓ]ޒZt{xlwZيY=h}cCmpWOTDֈhY"iy\/X-?'19֮|M|?qZGeZq)8{NL]MD\LZLXckN]U<;Y$7#kI`Bv̷wT@wEaNPr7?ZjS2=zhYrz}`i(+ChC CR~M]Y̲zeݴ şMBSrhS_й;U+N;`BI lQq ު 欝$vDN{zkt Z'Sqq]Dk^)(ֽry22rӢX.k=L?Bd4זA;gU)BRTE·V6@&;`ٟI/RoXq' %ys:}a](X:w^lÅn\msew+m&gU|`EM.j⚫:m}CUܳc񐅻5u%pQktlU ]sJB<֘Ӹyo* `"x;mBGFb^U~bJQyxU6=[_15T yEr!R4iд4*I}Ck٢ zH߼f;pE Teˁ5[ض7ont,Xw7Zz#|pS"Rc  <%%{AԻ>l.V}U@ dlM 0v,lp 9֊7P_ 0|*6I'Wɇsrf M(7}^!WAyUG߇h09k5:bKL'wbUH]ti ^VGHw|?iF]ֺi z UsXEAISR&͉VfJci0#K@}!jlG2YBPɘC,UGgvϸQ f58ץNnt73xiC!Ŏ!oZcC?|}G@VE= eX}nyEԄ>?ɾ "eE < QoD憍;}RR=BFө_j-r9},3tO"2HgQ&.yϹlu8fГ9ӘfJ ؘqLtxV]o0}N~)mL}4[V{`hDac(}jd92f扐}I="Vs82x&CZ|FU!)ͺߣ|:%2-_,^( Kڤ5CTuY ~Z69mA5UmrތZ{X+`XDNBSjFEwe v}ǎ3Y 9d;N2")R?ʨj%Z:UC2asP&c#=Ӈ.񌓐jg\&#QaHDc4Aw! 7o)d{[nt%lNEf4-[^x$SxѸגogk34Jm C͆/{8[]Vpy!a\@` C&_@b M)N(K!JUsxxwZPN.qJ %8B1?3nk5ց6a::h1\"M%[iU)c30/wPB7+v (G=@AKjDT_x6꽍޽$&/*8h>^nKy[ˑ4$M~l/GVy\rXt( g0/?sߕ)Nh}g*;rEkP6T(|L "5ߘ5hhQڠpOk6]-f$eVOx[/Ll-GFb^U~bF\GZRxTM0 =7ªԢQy9Ha.Uf[w'Ф$jXN: clgOO#:!!IJ/=ekՌ6%3fhy,>e o|VNt !8!tiZhlg<yũ(TCU߅xF {%F3Od"vDHa'U _WPSe;"=j*ACK:RdCܻ4 ^rȪqh`sxIKydџD&x_E?Y-G$ 3dB HB$1MdעԙsqJ fL wK.8iˠ%"" wF?cd6_}WOɬCoQN!`C]q 6 ;PaìZ\6{ Ҭ[|{%6!g7>ɥ q-E➕o0s!r a{Z0d H\wK #rHfBzEMTLR 0W?M 7OE<:D&O]8me|5oo0s2ex[ŵkbƴKX&f9HxQo0ǟɧh} "G?\x/6!##1*?1Sc7KuxUn0 =_Adf %@Àv VX%y" #%gu-s/{C]J!KE- Օ#L-sFA"Ӵ,oWсE_'XJz E]>XH c[jYWºVtĶC;jfbJ@=FT L=o9TCl/56CBHGjK:it&t,STG vŨx˂XX34 (-;Ǭ&G`>mXf*c:h6w^x" ADa7e"*5an`y 8/˘'b_eCRoh0na:ؼb_\]H8Qפ`oVv{Z8'8;s'58.yv.>FЊX9Fd(Nǽw˲w5NvQem>U[wDbcpQ8${b{4y=@7?ǪgXbǩ=\_Y;q 7_8ssxVQo0~&LVSMM^(Bl $#u ;}wLY =0BϋD{ :ᆏ-#nMT Eaz4HΨףp,[s.%mNͷ)e/,0PBcÈP !=,s ,Zě+)vGObp8][ŽsÝl;9K #E`~R_PNx9|tr/6ָ^9ƲNg{;z2nY4!a윞B1ijFat18x-Q^f͎v-xzl/0l]߱E1=ʮRt]wGaጤYБݍ%+`}ˏ8hPo\/t5u$|w.CMkQVl?;0[ʹUltX3I8I4 cuv':ZayZ{>ۮگgkpUΝk%5(AZAU^@]=%;-W~+?%~3 J귎,ȊJUVm~n%}$˷*t9Z54chxTێ0}&_1'3@n$%iS B+KBtOgΜ"%^E$ձUKfi! KYQdF( Z+m҄'r 6_^XV p8EӅ `BeT=h+YAv?[_68s^iDWX!sHZ"p4,W]S~ 7Q>jJn/m,);(`!#!k-i4]ca*Au];8lL'F2jsjќ@-ʂyͷj}e5~F 1!Sk xЋliS"LUn7*0x ]G-`XuDp@3sl~-Ș;U 9IК')RY2"ź|8Kt zMpOz?̝'kA99M`M:דlCOu7[D.泒xWo0& )PRIP1Ь!IcC[;$E}ߗw?o!X0> KVE^ {<(g=~ea%b%K'{LzW-Jy{-YZredzIO(ױΆkf@aeY%t IZGtש6KR4匠([iTId(ضT ZdmeY!' wT[00d38 TִmDɨ`sD9HŔKB4eI}g!;(?ɀ 'Q`ΐj$>AUԊc7~Bp\hJw8:b|D \u@tJzOP! ph8XxRr#h}@BLCj63ܼTdyf4{wFmd__s/q%+Jt){) ;wx[4KiBGFb^U~b}Hk xMK@)ʨ!p쌋fhad>nLxw۪WPg:sIaS)pȻۘw##eu $4ٶurQyzb`?e)fe;yԔD (æcxݧ>C2oIѰx}ϱn09WW BA[܁2,؊="gmvH`;H ~ !iG4[ov6:#y$57yדr\ Y\sudFΪ {s^=T(DQIu.^5d?vir 6S,[O(!ӫ&V^rd=K-'[WR]`usxKMR ~,px{|yGFb^U~bFK7x340031QK,L/Je}u.]vGBT:0l*!߳y*֘BJfq 䥜  7:O\}P3RsRS̖>y!SΑv< UZQЦne%RZO< UUUw^\/9=4S. W7'?9[2hbw˵۳k_qВڿ0%zyizY %w.:lGބx4)'3mr޻Ì'M7|K(At(w񜬔;~sSee%9@"mW{KuQx|)/ ]FoWVTg-P6aPe%03KJ,c^kpoV~Ԗߥl ˞AcmapzuSU cvt |'fpgm b/gasphglyf%A /˱head56#ՐFhhea< $hmtx8\*loca `_maxp CDnameV*postT OUprep @gXxXX[ٶ^k?'@ܐ 0mt>(=ʝiBP Hm}~oe>>wwwGxIH/k$_;.ÞA/lIxT<2/A%EpNs}yQ4Aɍ' Yzpt/w?έ}F{=wL@ uL` . E15rL*)0aՁZEZ˚ -WWvgno話ӛ6ߓ鷞##֍doo2ӛ:ל͜<]2w =3JcGgқ4fIoD:`POO_a@:vy@ yIv,˪z<E;12|Jom>ow;4u"*8Y:> <J*{\c2|x/@D FT "(ȠRAC uj%hTMѦH8ߛfdڲuYr/+|D׉[TK,)ln<6?7 7%MÛ.L-9Bp fI1~z3K =Y_9sڜ8~G:`N?ЂifFo'AFd2ŵɴr[G[G"X*Ԕdyps<ّ?᧼z5[zo5?3vA/ܤJK3tg&DzxU#u2dd rwowo+ٞI+| Ӗ1*d, ĵ=n~%:W-\KR;ܙN3tF{|~$z%](~T偗dQAE J>>/ x<^ϭi1G@nRiav{pp \Ɲ׮=A39K|>fΖz\W/~nj]E̚ KME~x 7 Jry)>Axà dd R&x<'S+mX[6?_AⴧUu%"K߫W&4÷t*9dDPBٽay~qIqx=78AYN|Ҥd *fgCĨ)2!jBD&75J9I I(XA>P+54EBk1;]5:neppxɣ. (s)n$D鸤SFCWqHzf_{:k.Z5g*֚j 5Y8m5r_}'9-Psp}A&cb(558Y$AV؜̉BQke3-YPô5(VG!fF$/˫(v /́$ jᯞ~pI0Sy=ov\7<+- s Jߖ77WB_{\Q/cĭs}f̶#q&qCCS BG]rvേqמI<~w| _ GVRU kFB0FGA3@oϖ~muͥ18F"@"

{ title }

{ description && (

{ description }

) } { !description &&
} { children } ); } ӳݦxV100644 EditableCell.tsx+UWZyu{100644 RecordGrid.tsxf{՗d",i~%5#xXr)Z{.gş)8\X`A`)|)C o='=`KZ Hg>leNUUѧNJQ^Jo  e3ʘ*+l]FQ|Nk+Ju>–9l7P WNkGʤM/䳱k͕t]6+8|ef.yjD5L51]gi؆hYQM(š5JfbuRt$Ch7ߔ% ?1yڇ^OnpڣjoѹXe/nԺ{oˋ eػӽ`mIaGlZxS#\3}m$JD\a)3fꕱ'uPuڼ!̟KfS5e\^o 'E|ѕ)s65ǪS*?^ <@rݽX:ZGԍ$_bn51Ǿ#3qzL!ӠZ5 !6?zAC.c=sbNcOs [DQ"TRmd)5xp1uSKהY[fT4GҘ804p>_q5px>@X_ۂխr'#S>"%=* ēLL< ԖiRKUaSosD} 6,yyl(QlnYP"fà sqy+Z EnhÉZ$o|9rk2QuOd]؄KQD.G+DhV9ׇQcIN:*`~IxAY8ӀxQu fEyO2ߝUjcSp pHz4ћh<[!y3 Ҵ9\~Ux&ExJ>z^? CM {+[':[u&jvnIpZ1} ".rb5u rjֲ1@6>9!$:L$;3k3nQ^k:;?vP Ωqs8CdPeom@x@3O3:>&NWr9܄Ǿi?W] ?}PL;]ڛ&_[aJ (I%T8?G4~=g_ǐf봞LPLRpIHVdƳ@%FX$e ^UHj;bK? n"&\[9w#'XU@P,! "]Ɋ3.T33UǷ @RK)f|m `nu={,ҕ6m0gHdm#$ܽ1F89 cdnfҳ0mFnFF~w;x(~vMVFxA˿ȥWoRW.2G@lXn3H C<,G(k1FZVӈ8qI "̽}v>1w4'Y/1J)[9Jy+ukyMrUD[$ꃎIguQ~.X$LJ.k]sLȋ>#?:O%H+vGCQcS;WV9\RO>&J`nS lh8a6kAxS47 // Numeric columns right-align; numeric + date use tabular figures so digits // line up column-wise (Twenty/Airtable-grade [legibility). const numeric = kind === 'number'; const tnum = numeric || kind === 'date'numeric={ numerictnum && 'tabular-numsoSnumeric Vnumeric?-4 numeric && 'justify-end3  tgxYn8kk+Jv6 MͶ dD$I ׋>DO&I9sΙs Saf8?V>XiQl")h Ѝ_dDtJ#eL-hjkM*1C$'&@tE8GH dyL+̒rcE*tA*KǔkbB ^PM݉Q\䉺2:T0ቃdqpo"4lJx7z,1Z1o3Rz6tah~pҐ, }d›1R/UVkT1 3BŔEǂf 4ZH{D&#^~qp՛ڕΕQ63&^4:b ؀o-Qx1 v\K8^=eh>ϒ~eq1ᰍeq UhKVtL}9>O'4.YИQa B!ʭFC:=,LGG3v.g![}"kF0!:I:wQ1=XvL*)qޤY$a=a"V h\#-,*={w. ,eG9[K ՙWt8MpTI[ŐL<~xE|&H>>ՠSIӕ]7  &ƨwklW|>+G4j9Ղ:g|pnF#(78&NGW~Ȍ0 d 蘗n%O3|f {4"vimK]CH8{}M9y+1qUs-_#% \Vk&^HFOؓy-3MFQvr:.ml5'ؕ`cBb:k$7KU&v.-=r=19 ozi?Sp N:2^A_!7\z~}Q/!$.R*MQeIx}}QPȚLԕ4[x\,`А&ePT]'"CHHFG%Ρ!S:f~Г X$͛Jljv)+|'J)XA'Y^G2xp`s?IbbVLV+IkŷF/O\[Ġsݯwi|T U܃#2ɶ*m޽(HV(&'[sKldWv۸1r̸ yG=XWѰ :4$DH V٠{D9A-lܓGX!b LɋO;e]3,}^ Í`x6ph|ҕvx -]m$[JFOs}9♻d<ޤGƻ<` 2XWkH`4̳(``Yt߼QD8yA 8 $|gk0/8N~*#:/Gj38 Cˣ)aB2g]Ծqa;1D;$iakhk7@ddD2A#Զ\GXꅂ̜ဳx xh|bm 7ׄ|6U>r=kOT-/O-g")rq6C~ ,y$6wSG#}]´j@t U0,`>KYq&$1*3&ӽuמ:{Lqxw\~' l'!2۲0]yc*/.TKDmOw)0 RO݂9+.o99\٭&M;鋍%WJ&V/{qqAw}ئh ,]>q¿Iװ>7۲7۵D}2?5O}#]f JcYssS%#5~᛻ő*xwM [Gr=#2%""݅顁{̐cŷFMc*J0ɢO-]|ńEim&3:}Yl*#r nnjȠ9a۾]DAW+cffX˻kxyӳ^q>u,Qt|]Sc+gtY5ywChAhhFξݬс䱡5b"gev>&Mu!IU"dhԙo{= OO^ 8jS=^t@~OspLp&)BnjČx7\taІPc}_!Y[iW'*T,ȭB100644 popover.tsxaI t5.̮}1100644 select.tsx^naWUAe<GY100644 textarea.tsx}:̃^mkB A~Ʒ4xGimport { type VariantProps, cva } from 'class-variance-authority'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const badgeVariants = cva( 'inline-flex items-center rounded-md border px-2 py-0.5 text-xs font-medium transition-colors', { variants: { variant: { default: 'border-transparent bg-secondary text-secondary-foreground', outline: 'text-foreground', primary: 'border-transparent bg-primary text-primary-foreground', }, }, defaultVariants: { variant: 'default' }, }, ); export interface BadgeProps extends React.HTMLAttributes, VariantProps {} export function Badge({ className, variant, ...props }: BadgeProps) { return ; } B`x e// Vendored from @hanzo/ui (pkgs/ui/primitives/button.tsx) — the shadcn/@hanzo // button, distributed the shadcn way (the npm barrel hard-imports next/image // and is not Vite-consumable). Uses the shared semantic token classes. import { Slot } from '@radix-ui/react-slot'; import { type VariantProps, cva } from 'class-variance-authority'; import { Loader2 } from 'lucide-react'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const buttonVariants = cva( 'inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-all disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*="size-"])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:border-destructive', { variants: { variant: { default: 'bg-primary text-primary-foreground hover:bg-primary/90', destructive: 'bg-destructive text-destructive-foreground hover:bg-destructive/90', outline: 'border border-input bg-background hover:bg-accent hover:text-accent-foreground', secondary: 'bg-secondary text-secondary-foreground hover:bg-secondary/80', ghost: 'hover:bg-accent hover:text-accent-foreground', link: 'text-primary underline-offset-4 hover:underline', }, size: { default: 'h-9 px-4 py-2 has-[>svg]:px-3', sm: 'h-8 rounded-md gap-1.5 px-3 has-[>svg]:px-2.5', lg: 'h-10 rounded-md px-6 has-[>svg]:px-4', icon: 'size-9', 'icon-sm': 'size-8', 'icon-lg': 'size-10', }, }, defaultVariants: { variant: 'default', size: 'default' }, }, ); export interface ButtonProps extends React.ButtonHTMLAttributes, VariantProps { asChild?: boolean; isLoading?: boolean; } export const Button = React.forwardRef( ({ className, variant, size, asChild = false, isLoading = false, children, ...props }, ref) => { const Comp = asChild ? Slot : 'button'; return ( { isLoading ? : null } { children } ); }, ); Button.displayName = 'Button'; =-#ֵAximport * as CheckboxPrimitive from '@radix-ui/react-checkbox'; import { Check } from 'lucide-react'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const Checkbox = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, ...props }, ref) => ( )); Checkbox.displayName = CheckboxPrimitive.Root.displayName; Nix 9import * as DialogPrimitive from '@radix-ui/react-dialog'; import { X } from 'lucide-react'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const Dialog = DialogPrimitive.Root; export const DialogTrigger = DialogPrimitive.Trigger; export const DialogClose = DialogPrimitive.Close; export const DialogContent = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, children, ...props }, ref) => ( { children } Close )); DialogContent.displayName = DialogPrimitive.Content.displayName; export function DialogHeader({ className, ...props }: React.HTMLAttributes) { return
; } export function DialogFooter({ className, ...props }: React.HTMLAttributes) { return
; } export const DialogTitle = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, ...props }, ref) => ( )); DialogTitle.displayName = DialogPrimitive.Title.displayName; export const DialogDescription = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, ...props }, ref) => ( )); DialogDescription.displayName = DialogPrimitive.Description.displayName; wMx import * as DropdownMenuPrimitive from '@radix-ui/react-dropdown-menu'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const DropdownMenu = DropdownMenuPrimitive.Root; export const DropdownMenuTrigger = DropdownMenuPrimitive.Trigger; export const DropdownMenuContent = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, sideOffset = 4, align = 'end', ...props }, ref) => ( )); DropdownMenuContent.displayName = DropdownMenuPrimitive.Content.displayName; export const DropdownMenuItem = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef & { destructive?: boolean } >(({ className, destructive, ...props }, ref) => ( svg]:size-4', destructive && 'text-destructive focus:bg-destructive/10 focus:text-destructive', className, ) } { ...props } /> )); DropdownMenuItem.displayName = DropdownMenuPrimitive.Item.displayName; export const DropdownMenuSeparator = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, ...props }, ref) => ( )); DropdownMenuSeparator.displayName = DropdownMenuPrimitive.Separator.displayName; j#11x// Canonical shadcn input on the shared semantic tokens (@hanzo/ui's own Input // is coupled to its bespoke theme classes, so we use the token-compatible form). import * as React from 'react'; import { cn } from '~/lib/cn'; export const Input = React.forwardRef>( ({ className, type, ...props }, ref) => ( ), ); Input.displayName = 'Input'; 'xx// Vendored from @hanzo/ui (pkgs/ui/primitives/label.tsx). import * as LabelPrimitive from '@radix-ui/react-label'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const Label = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, ...props }, ref) => ( )); Label.displayName = LabelPrimitive.Root.displayName; zJxhimport * as Popover popoverEQPopover = PopoverPopoverTrigger = PopoverPrimitive.Trigger; export const PopoverAnchor = PopoverPrimitive.Anchor; export const PopoverContent =&/Popovera<Popover#align = 'start', sideOffset = 4PopoverPopover3~w-72.4# outline-none$PopoverPrimitive.Portal> )); PopoverPopover -&~ⷿx import * as SelectPrimitive from '@radix-ui/react-select'; import { Check, ChevronDown } from 'lucide-react'; import * as React from 'react'; import { cn } from '~/lib/cn'; export const Select = SelectPrimitive.Root; export const SelectValue = SelectPrimitive.Value; export const SelectTrigger = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, children, ...props }, ref) => ( span]:line-clamp-1', className, ) } { ...props } > { children } )); SelectTrigger.displayName = SelectPrimitive.Trigger.displayName; export const SelectContent = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, children, position = 'popper', ...props }, ref) => ( { children } )); SelectContent.displayName = SelectPrimitive.Content.displayName; export const SelectItem = React.forwardRef< React.ComponentRef, React.ComponentPropsWithoutRef >(({ className, children, ...props }, ref) => ( { children } )); SelectItem.displayName = SelectPrimitive.Item.displayName; eP&xdimport * as React from 'react'; import { cn } from '~/lib/cn'; export const Textarea = React.forwardRef>( ({ className, ...props }, ref) => (

gwljpqܺ˵— 6LS7sצӇso&77+؜ql^'cld[NxSopT@IIRN;j )T%o}Iy?j-輦-?D_@<ݭ]k36OL- >U0g 'I#/.B(\04GhO`H_/ Se4\У "oW#~ > ?fG* zPLsٺn>6V(},I;s)5or3ٱZ9ʁOw[lv3-Lse񛀱K}=Q6`yV'T;ؼU6ɲ}^\Tsoͳ˯Wޝ,N@f= Q*gG ZLG43ܭ.9 Q}.Vsr9 Hw+~cq!>𰼁 8V,ÕJ_Ƶ$}w&0 _`v0*1>H18|/i@Xܜ9:z/B'3p2r'.cOdǬ` 26&hS83mFQ⎋]aqQשî7 "Mlό?YlMCBqs у+捘d+n7EYcF2a@ɌG@Dĺ/ Ik-gA4M&oа7M2~uqK NqTavvfvwv6LܜvW+JZi,[]K+9`Y` ؀l#|3g >1o8.qdLpUWtO쬀/sg[~^WxqzBy :AQ&4B~C!_1@q;y;gLL9aÙA;}Z>湹wXf1z̯zQ+1W1#19¦Z_cx@OI <<]E7(eԂ,fY˒3ixq(헗>%ڠ9"qd|th%EVյ$_/SqO<71Ř'K6܎*Ed%^銪_&[!dTUl El 2VHf=DǣNt~G1i;H!=?18A20;}n_8ڕ? 9./v*aw=EƗꋔ I25Ui  >IPAڊIqU<j4]ѠC7C4P ?WW] a76r cp/DDs+l&30Gr4f$3OvufsԓnG1]@8blSt_WBTX ؁?җsvn9J垕Sם9iz}WЛB"ڊ.zXBUUU>L_.*8s/ל&#۶6垗?ro>pB8 Q:2"0 !XD~@+q>џiLj4kAcc}e{j3YSF_9ptǻG4-#C~(yN U8 R#5`0fDS(Rq!Rww}LoɕO$-#c?~ۛ1中UQq9磜uAe<b(+PߋX., Gbq$Ghfq$* AsC Z0nQ'{5DU3WP p{uBG' lalVPF_V];wW~M#۷enmc}} G:ss^ؿ0ʊd .ϧ$[{ 1$zL0Mf&8aaRPUW,ĆtOb`za(Xa׽!,8nvM6]1BJ`0,WM.xaKϡ)EH% {ߕd (Tfޞ.AEiNWV$*:rz![0QHB*4*DM8 A81{6#?:xc(I3 R)\ 3qصSS.gfT[o?s8;y:W{cKw]3xPY.Z,נ{f uG🾡\Q=Gu zDj;$ :6ȞfO} ѣ߼$->ٳnK7ϚF>MzTsAv3LD99W*i9dd8Bi09p<}]Hr-OBcsJK"Y Q==FE۽b;DSs-%C\T,GW{;o/N_N>ħs/edfŝ|^4Zcc>Q|ʊc1s *<.yP>ML\V #8)hДN}^j5>qSÌ *zQebgѺP))cGdA"^։kG+k ȲSZV8MNxYFQ? :e]'S*0KDk\-[Y3%˘5@rQxA3<(c1ዺV܉7kJDS^Cb 'Ql`#6gC-#8q~-Cnr|gnc~~ot?+b(/zWp7rGiH3=/\4]{Lňx~ùՇ+:_CTX (&#׾Ϯ˝~榷&*}[F?{6ᬓc&Obc$@0^윭Tg}/^߼3y1Y&]z,q%< g+^"aV:t1r 4YcDo\_ZcC-?hEQ81I)*U)hG qB&ǼrZ z?`s(\.J`>sD3Ra?BQ.㤝g0ת0v-ѽn\=`1<xя*ѱrS~qQH`QЛZt:vk]oyNgR&߼8\K<>%n}}`4էJ cΉ1SJ}r^\mw=`)b?q4 vl&E=k=_eo-kqS\I<ҕ,5*ũc)J.P~h4 r0upkz\kԉw^|W?;n'{ǧPd٥K:{^NW. _/qd?N⌏[{9#X0ʇ0`6 Zf=F;^42u2z-#MמD]LLɸГ0 ƬKFHK%9} ,a:Mbۧ:⮩XzfLop׮O,/]23!|lˆ-'lIF7UɿPº'IG j(e0Ow!b>T"i T-䣈 RAzOKkkSc[[r=jklhoohh'Šs^q̤Ŋ'ͼe ݁ ~h ZSM75B,F3xMSM]$o)PRWkt|Q٭nnWIc ?al!tn2Lt*US²NU4E}>" Rx)sχG,IMn`kbx4s[i:#NF'$]TIELDD7f1 ĺXz';o^#RCDckjAecOFkk/2^SHՔ)a#Cri(K7 / ý1omI'[2="m^+GRKGh6+9?^e˜j2R 40x)bb;9rRmՔ_?VhO%vK /d ֍‡$^61ܿ #bk 16KuA#@(uwB-Z_:Ϸ\3-Q?,sRWy4ilhL5&X_y̒ d7#QȞ$UBn+.k%yխrW=ZHdHzz{Н*=pؼ8<͐{@= |#Ta|\G0 =E~EuZy xmTBm򧾖M5>maQYT+⃰#[wwg:)uٵ_; /kv2.lCoF%?m&< bL1&Ap9#ttYZ ږe (Ga47$ fs\p6ٚNgfh6Y_.ɘXeCv92v5:k tS{cih.XZU&hv`y# tn?Y8V֮Nb {YxPQG|hСɡ)cW,';DS#]䶞-;xkvbлxG'[;oXdUqVغ0L6FRcM7tӫyW=Lג_5\Dݦ.m݈Ʃɉ #C}T/UE*_ 焻+y U]y (82 tb-8\ӎ睜Pfc1_?abx>.@sS뾓ɭ- >nh[7m,!?D~Hb-@ߵ5gཅ8 ~q?S\dJhjrH%y'`ڠ2c*b4zq0&~ld!oɻb԰#:k]~:+rlݹktdTJo#zA0 5S wC8}Fw21Mpt\:X,bvN@|K` fV/u:ZĬ":13`,9v_ Dm18Fdǭ}뎙Ʒo'e'jtƶfk#vYE$Kˑ[NMLҿ{ss;Ùy{_-7߸e©VJD\YfAS*a!N4fyyUM#Ӌ -p~ \ax񃇏O5c:kq_x>p1G{5TG?T+]WR{%*%F+O+nي.+"w\j<4L2TϪJrBг(+Y01ݲ H-Kӗ젪k8M;^DCUC~|$EnN`Nz?'+\I+Zř2gX4wdV-ˢr;S ?)^0a[& YMӢ_*]vT9bXy.BX (aZew/̔''?":*?6A>kރ=LCښjEᴻ*zwgÊNj/8iԹ50Hߖ=ڼ_{ٳg&ㅻv`{gdum +v,,̟:5¿1{:D :E!V -ŊKķţX#!J>y Yn]ͽ/[_ &670ܐs?̮3y<3w01V5?]#I4+Q| =D DG#_aKǩ#FGGfFYalx~'|UmǏβ #~ -~/j, k{0Mg{{ځ9 0LE݆vDA]`Jnp \aq%1vC^x*Iv|(> "b3fea2l+eҸ0vrƝ"LϑM_V]1#̩h<VXmh>9U$Y3\;vrmpX01Ǖdr@bAVpJGAI: kkjA5Oi &zdr[>HOZ?\Oￗ] {l}wg=`؄\oP (`; Z@G?f(PcНqץZR)G }ɨRt 4WD`!M]P3Lv3E}dM8S6E'SLj VGYʜD\q>,vKe:ʎnQJ6-{6$+ ג )FJ+nSV?f>~.M~=R-]+tJ=avːSXP܏jJ~hy۟y4qɟeއJ}Rҫr?E 5X@8KJgn{s˚}[ 칅wx޿Yj#3y 'j!B g?dZWq9M>FE塩3KS;JtuY$ 7#|>G! ,F-zS`+U0yfΫo䟡?1WӐ9B4Ux:B Qgu#wߎ$.p)0_բVXHl~aHn)a4Gݩɫ!;oX)>@8u`C"HAlu|EWLVǸA;ʰה9֨LQ' lSt[p(5:aer 9IrB`7窃/@[;Ⲋi*0<8m`x< a螕@qk %#`ŷbԑ7+x[(;>"mp:W"?Yq͢N͢`1?÷Ve<E@&%Yu,{)`Z4˜VUYP[^/G >K Ĝ=AmZ䱐_{NN۱k™v/\\8urq$1Fӱe}q:W^x\ ]ߦjd`n h&|f=2ivf \;A]J\nj̜ee ߯bW%+X+3^ XsGU*U1c0f a0_I z: W<bdY^wsy:W;>x.g9zv Aqg1EHI090:[ 0ma/fyzYXez9#P.ub}&}p+A[s-RDt'USi{Z. TZmsyhEDpz8ATq 5U\g//}Qr_ls&ц:!/XYπg?e.#<j:؞0n=Xrɷ-V&E Ϯq3 #kF?Q ㅞ_Bϯ. =0z ~Y'Q|^a†z\UV%'knyIJ,dp7AeiZ1A HW 2yuKR 14glh8g8lX׺t\[GBܑ<51:\tE]gMºy|Xr-;:_M6H&дsmɿ`.93{;/ZMוz Yg-o^AZ:"E>k}B ooRxf''&- /!@Ξc#Įe ]t=1>/s'|-~tRӐ`Q r >[TUQXhz\ 3(,?}Ivgcp+=qUGijZ)ujmy4Ywtdwz3t*sNquW~,*mp~<=U) }>,) 0\n-&VOm0r0})z`{:/Ly*5dϊSN?E'gm?k&\HI?K@U%pr*DHr*9D5CCڑT)7bx^&=3Q"8϶%f, Xo bAѹoAt [:(lSdYBDöuxںe3 l)gDb_xG;29WU䲔yY=,#p( eF%ZŠcu1ʉۛEOx܅^ƆjKvAgWVlһ_l.i;Ɔ:fs;/cGПpN9kKRTblKsKdfFG3˰,lӽ́-NC`pG7_^.nE*ù|=cH7K V^QDff'/cI*h|a=iySpO'o#}~/Zc^VؕqGS.Vt֦ Xv kxK;g`mZF9$d>sv)2#}p s48 Ѩd۬,u)+bfb(qS16jDy'83%әtI(b6+Mʦh@so/5#':iaUR.L;)"x {"#HiD,7uswaZ:Ï GQE,?a阔*Xܚ('<',wOl%۷" Yfo?E<<J_>unkkOBNo_򙆷jģS*x8Ud_ !7ICt.=OA6:倗"R\H:LT((3 W@:Xv|wu~wa]lJdnZ0Q=o!Q }RLCΆ9bʩk)E9we^-A#/ut71Ŀ<z v_Wo5ֻvr5\/#3x.p0S|[o}K}N#űl϶\ȧR{=0u=>>  ]N*GP-2JBm\q¸֞NAhwVS5di7 5r'κ,'K`i{|֪||ϟݻ.|fpO~7E ! 3t"8>:4B9:'uHePQW,6t bFRc D IՖA\-PRp0m{z{-{ZÃe`XDTFlƊ 3J5݇(U( r$1,r&>`U`2 P8;Iou&u:;4zL*VQU{9ޮ DϗRV9iFJ,Ē82 %Nj@-^k~|$#^_/ѽcI9IstБkxu,Z'k`OvM-9}ǍDͅdW xDȂ9*\n g5óʭ{.Wf dP6Zrhj-,Ue!Pb޾r:?[0Pf O>odfhc[b貍u]~omU_Sb)_UÇ6߰{끑WnۻqcƁȶ8٩zȗ6k|#tL64D'V r uvlqqQ峏=--%ݖR+{ozYtZ2 0A]u?ܨN[ ) }v#,[\q:$->ZEZ۵2c}ʜ޹aYb99)lebJ)fc*txl:E.тsg pҤ|ir\uQ5UdA{Tsh;+8t;/Qvsև ܣ.mE_7+x?Vh1)C []-H0nӫB~\ 3H;^/-C^!C~qJkM&AtzW.@xSPϹNMAW|rY1֠mGY,j:"`np%0D`x>vn`i} B+Cq*iX6\-e-_LZd~N~~=G9 ׬h*+zߵS\X;BK7wreMys:*4dA~Nx#xeAdsg 7H0ߺ֫59_r҂+` ~<fѰUk?/羚lGV=&亗3YJq:zn .|%(V`7X#UcLc(FMEMZ9fc6N3:c?Qt/?O,!EP@%Wa9P2i6{s~@~Q(x#H!tӉ/t&CZø䫗` ͉)b븆ndוkR)Ϳ{E8v> wP]q<3ٴ$&' tsl.!Opiy{i!:D"Oed%j")bG_'[Ӷ_.2f5ӇUr- Y\25$w%t,2}|uoSvqZ+02xkQu=EO]lNV'p̧ჹ)br_A/L Ka)yZOoDw7w 7VoGϖ{Eϖ'ǡuM`,\KiRTk-ߜIn0܋CU@Ha%g6tΝC݅CJT)uJy{~S@@ҁ`h(\]@.k)_9.҆2e?R3Žgۤ/jEx6^ dIv&;i* ǭ` e:;Ix,!ᬃK=njbgl}EEi.rY]ZUlŠ:EK/m\aJlU橏c(h;E t;ڢnMp W¿}RTt.^TUUӴ:5BQU߱X{E}'?/0:*|VoİZMj%^&nB}}QgV aj}}}k}Kw2]gRVW]pګP7&n]OK(:bV^DpcnPTdVeBIC.Yu. jYy5]ڄojS6R5T녢 QT/o$}U=0![W#V]QP=waN[x:??`b5 e9b/L#I) \̾B@3O._1Kճ"<^.rnNw4O9E墏i4Sf]y\[%9SI3k='K1翕$&'\<)'% 7ط>C ;zJp|)[T3+vGtuvj:[JN[t˙/GԃWԃy0Ӝ͹r0Rϻ~dGnQ3l޼FհQ5L.g~l[awr+( w UOz\0IG$}ռH+Q餵ͱ\ ıkmG3ti$:җn u>9>ZBLbo5Qcr±ظ<9zw0.C}"ZOjΪTŘMp|z{kq][M-0#MqW8>}0< veH)۴O㉒A­ho`(?=?79#Z8/<nqeCglhk7qs9 ^g,=-\¾tޏ9r ;nWrCeö`NsGL?S6;ZԪ5p}WIh #C-)YvKJqrn{nh6\'pLixMW̐^ X\tFuySŤqkw v!7Ҋ8{E铼"Ô<1ͭ2aLlX U*Soy);R̵[1'>ǑVXW4Y2@]fI􋭍MJy(tg, 8o754R_-dMq'|Lڏo|cq =plEdCu0La5*6DnȥXLcyz\r^y{\%teĠpE.V w"83ߢG$4?%2zDA30l[qxxHGF4(;;}]-#uћIuL ţz߶Ԇ[>= Cr+җ_DSy 3kQX5'Vyr:rY` EM5 _XXOu]ǽx:l4;r}Sَ P#L6$ر$B `*p]~C']X8>Z#{k[.nmjkiMAQ8DvMGsvc029e76'mwWu2fZ@̿<j3>┏c=|r Ñ&;w,k;ᤉlD`:@6-lU%olM+FݼߦL4w|=rnfr[ Rb@7 V5C$"Q[&BiHѤ/߰+YNrJJ(jOWB=F;z*E=A&H}a徰j}bbnϤosw1cZspMx/!:q_8NxXT ,gTQԇ%v~fˠzC,EXu(tѴڂ9 m> ,DQPtnjh(ߩOu']==l޽TQϠ ?D8ɩ';17i]$6:6t{Zw[5Q+B wp7] Wq:7n@8 HX0\aM'(][^ԍvNUՐ[C C>Ar8cx,} xիȭ?٭oA.@CCȭ`OymNFtQ֏fqSI7BO oW(߮N;OM֮H8SC Es'hyCbmOU(!em꒶J7-\8l:m .qu @X2..NoZ\B#J-[?tjo' $ּ˭΂ոqؚ֛XWA].Gb@(+W qKR" h _ gBl|NAJEO4R6=1 cG-Byq','`#CiV~=%G36~ǵ{b!ڠNo*"?7Ggޫuľ1`BFJߖD>Q>rΙ]Ut-)2KFSJS`ು?۱B&-Uc箘R]-6Qgfxhgo 7uw̎CfsJRmެ!XTd{0 B MݕP(vBnHһc``qb"##G&әmðt 8 ] A\rr]!wGvs,.5[I;fL~/[Zӱmb4a ՝TBQۻl{z~8;ȗqwԜTႨ9YjNDA٤ -|&>_VQkA*רyeF\td׿W1\3gB8}!@.U!Ao%'v :Q E ͛ ^lTjjCGwʵj8+N/rvAdDqG5 {&7'ҠJJF݃_/(KVW߉??XvPFzʧ#RG{h {;)neix'*<[7Js8ӥ/'?`J O(o-?}.e;}[(%>QχY6z5};(;kXlb{49^9w 41Íw@6[sKuW.0?{ccǀfQS`nM_kXzdz5ӻ?1c ss` M M4i̺`{٩2ゝ:t1(]{0lvw6{6 ][@o.y&UyoAQ'*gc=4@ ylCxll4Xc 3CMe]iח.=ᘶ3=xe;_!lYќ ӛlR43A_Z|K i>nxp3SZ"X 6q| 9`5}7(_ɘ>I1.ID ͋J%9H%@ʊ 7 LBH67 Z$sL{|>_b"d1Hc_;ψ1޺12,g*cv-< &:g1 ыW^\wS)7V(E̺Tu#;X_XWh2њTb!n /Kح(@#ڴγm T];mޜdG]F`>/*]̈́kXk*ޯ'XLy:&6A_ \V$w(v@b44T@[[$HJSښ4*~NQʧj+& {xooGC%;̲SuFV ,~&Y{-=K3&mn{e/lS}Um˾]*Glʈ1{:e2,f=~hv=эXH]M ֆiŅb]ہ'n-h[P v 4)VcYn/X'Rt [a;/hA!G͏üwݗ+w~Sc#x@-q+57`])ng7wl2S/:s7zͷ{[8?֣nK̈'p?Rj3V@}{+),o_33~xfj`%5P]< y;ړT8f5tﳻ&ZPx^jKA$9E~t/ݿR+wT" mvԗ|v?'}9O ~-_111gJc _t۽6G.geo@pu\p w^~ym(sY$1T:<+`xlm3Zj0,-YR2?sOw@Oɠc=B(' ~0 B|!f/ߑSSg\n/3|TSd,dq%籱|\]*{ǭ3j^m =$|mǬs<ǥ1hJoǘ/~ӽ{B-\bS#ow7F"=@}-_^}X^_k .Q_1P2匃T@ R"{Zgw݂'8>NYׯ KuXeQq)Z(dNr~ @ʣWNދ3E!JJc5eaG jPJif o/:IT/[Z9`/-1|'>)&1{ יN # &ɏ.-E^Nd~D}\5pY.`=h] tMo@VaQQGD@J 3h{48¢b~\DJP~&byDjoP2a9ͯJ_xgR'o֛~M)֛ȟ`VVItDz,ubFVN'piaX 3?m ,szMCW&:$p8kffl߾;Hɐ^r{s} YDʫxOfqTp8XǑ md<&UC+_5T+(+=EvlKdB>%3b!*}k=чn _},?*lcJ7ӑ/qg%c p8]co-N;͛O-}Rn_ǭZ-5C-\3n'+?Y6p_ꤌ)Qpf^vjof1u@Ih/;Vt]00ύOB|J65fxx{fgCTyP0#AQeG etsY?y} /|7{ZK/}/=k.ߌu11_?/#?1xCƨ7jl#aǰIQQ3 q}Y-Xmu&4;pK[ q4:ưXY1sx1+3'c%v}nU?90RhnV u90v Ra:w{;=m]Wt-rx  U9QT%!_ BRzBCVwd?r[$u@{C0x.b Fͪp-8j5$\xY!<.9u%gO²|9/zz/!Qv+튾`M5~ s>XѬg^#jd˜{;6)}7]ݵH M *bu&U420fȋۚp:R #mdc 1?X6w{=(Csj~/B3 `ϬLT{ crZŰ>+(P; YT~ rH^MwMC%D1lEYX q|ݜ!OuQe4rQ)β̂Tq7d$o̴Te35)ݜ1֯7T;[f/؋&ygm't{SZP'.Osw lli-#Cc /tz[;`:U &mc]VV`!ƹrT@_p3*r=Gż(Txeep^e:0bѻL#Lp}f5E2t5V29_I3#<>Xv4M{64y:qA߶+<~dMD\[t1X);&*7}< ӞDaý@ＲZ:F`97}}=QpBUDu6V|*NH@PPyE; cU $y%wd5TWtnq-;xm#[6W}ylj {ϻ;5?n}yKBv]A'lw{+!L~,oۗGuq_BԳFx} $tDLo noŒ|w,䒷K~aُR ,n\qbnVFsNPzj\.k.β܉s'oZ:;B:Zr &Ÿ]bcc0]##r+~DqA^'b&<>iְZ7PϖBwna7b}m=uu g=/9}gB,G#f*(#kc)U/U[Ku<T$Cg3_^ɽϡ=g~[}Q[NQ1ZADj2rյgOpUo?sù3i;ɗ?uTzXO 'UoC}ߠg0CNr>418^a ,ZAzŘ}Ҝ~b Y֘(ߍX=HToab zƉE*E@MhHz6<(=H=w Z<˸<*<%ݠ#_f*l XC(_f[,MQ;<䇿D=Ҙ8I:JcRQK}On4JJyy'ߡ[li<: Ii" N77/N_h2EWWͩTI3I%ٴjMaHV *wdyw :1RGBK#9&SiWV&WiorId=-on< \ɣ"*0ˁ9 mlumCbI_h[Z‘W^̿M@<{*fyzzkfZF};RX^*%տ[WY}VFx٫}-[KTƊV~h%HE>`+Z^6%%[u"]̱-¡E56zȍ:O=3 ddhҸ\̲mpFýf0{}V%𑂴vȮQWh4P[*t@)mc؆ߐ~[OВo%`5c,{ߑ~ns:D5l[9X/wa _s[^<=C~r|"V/'wrwg,'!gZM?&O\NHzn)K5vs6.r~t~՗]z՗wvK^}^+uvF y*nXDVW4ݑ!! ^u>Eq d]?7Dg w&'4qvj {wBc,,cR.UB&7ĀD@0o<-DEi ͷmPݔ7=qe2WTh?dhl] 5؛O繗 5 ]塺htadk!) ߞf N&~VnyHNl&M=5!h UZ߸v| ɖSI7܈lK 2Ƹ2_Y7B8| 1/_j?"Joԭ65ֵz;8\ uj̷O c(xFLO/ovlV54TUF2'oؔ"V-` 9vUdT5^%^ gX;%& W6& ްepEPeᓧ>0:XIw%٤ x㓂Sggm'Q)/L_.KU'+C:v廛clw^ʔe)q}Ɏo = @*?!QC'AE 57mβ&V1' Gs.޾k[v :xh΃M7tp#!4^n  y_XxN= Be5T^CUV%~þI (˞M kqxhZ P܈A;w!=XFea^3O\]BGq V DlS֦L؍OX;#}ttpr* aVVl)* V6%չ5J=t W+grE J uXPI'uﮯ?ΏHnmED"xM sLNA*4F\k[Sa!j.8U\Hgefb,(E9MI\x?nkFznTZw!v'7E5XlTk!'|P> u}sPHAfC%wzZVbFD:,IM\% RFeX;e٬ECbәW$:m}+ JYIQTی@[A~ZUp=M&)$39/N '~4؉ݬDS!q$H +rY\>)#s7߇HE4Ekc빵r(},۞bYx'JBP5R&HFyg* M(4Ӗhar8цBam3Q#(EebOr\FK đlo1W>PWo7ƚ ,҂$6i)ȳX ,M reUuuUr5h偆rrLI$ߋ%7F5r4}v:yB~ZA||e3ImGDЖXAzvǵSo٘zm?v)9D77gFp֨zAdQ(I`ڍ`[9-d#Y˼%rcu)T߉a`0Uya.L5yԐWY%aozt,OF>LFNy¸1&@oU-iVnbXL /?iE(ȪV 䃿3QŸ$0Y.Td_hVEKk{Z:j>m67}pfWc0[(W`|WiWyg:p<9@?;(犦[ڂtX6^k]? wVF?Z}X<;}: ㉋2Wڂ}|(]-5uyZ} ;>}SO۷wjp.;\\8H*ګHE,U%_|O]۪@<O(5I:&ھ +ٜ >䩨b7 Z.sU2s4:M0`GL+YMPet+ڂ*Mۀ8](hbCA.NN4''jjF¸AM~KR@p=wU%_A~;fة!%v^ÑOځ&($r]jU2v9MڵⲆ#Sl2[Y_WUV+/uMZ3Aq #l OVԔUƼVSjqWxVmTmYý$ lÃZu)HCQ˛뛞c76=s6={k?s?M_MolzҦg<C)}>Q/$ ɛD|q;~P / {{إ>pOzq/]Dୀ$i$1>T/]JsB(hhj39t`ClAhӺpasU]{þN֞栿A}I_?]kM \ f'7(\8(}Iq 3͛a!u`x,]͏][IkǙ~[5c^C^'kthLyc_3M飼?$k/xܛ]݉Jפ tCPg|k>´@K:>sүJM(^9̗.*n-\B竏|>)2d޻yW,ZyOsWwW;ƥPY}Hw_}]w-7hf[G\C`:ZgFZ--Vhhx꼞u=MlJe&!SRHBw*U#\ wo%(n(W/-;5A& ^ uSrz?4>%ocܕl,ld$9~K .vćccp.؁y9=b,jI|sKXz NNNWz$z rs>[u@S?3)tcua,@5}ynZ8S1u;+=+Kcbn֩{ϩG͠4*lZW$ڋD&͇.ki:$: i !o^N[6i*D=Z} ]LE]G_k8$U6"|G-];D #ȑ_n ]/r~MӉzDʎ #>eq{ё=@QaGԂeO#z力/u cYX􈦸zTz3KLw n;24F#:"vo#ZB=+ͨG ~ӈ"ʐo?~C~wStw}kYMP/h :Ѥ2q=LMvQG(u@Wr] UGS6ַSv-q=P_| '/rQ?u깗` c9QVv_ |'™ӔY?QoW~tMFs`LJYpU7:Q჋M :t>%v ӓ~= ?ǯ;i=gϽg?=aah3NOo!nq{Dܹ ?)"DIH&RSy9IScS\3@gE)K*TAq`_Ẻ}]Yxo5nqwkۏuuko?މpbqe˖5gv1IJnlv-dtƅ`Ag^(vmϙ[j3s/ܻ?2LX3]ɨZ5ee@#j%ϗxoc$$`9v__nx"\īd_VO0Rٌպs}{Q [[w8tpjPӍ7B̌ W4fCyHE!,{% .gĮ 6|p=)d5s MmRw?>\w4[jSg)N@psCq"bEȯ䗋igC|?Bu&'b}XXZo>:a%H2Ҩ,yf!BLfDh V[n$&;s+뼆]O?-&yQܠ`YѯXjc 8L2ZJ+,f)3-c̶pIq}|s|1M^B^-@Ws:)j5حf{Ui82 C>&"f6x꺱&E n-Ѧ8n%ArUuUb/+Fݮ|03<,d)/a+OZ*"B(O;*).I4{!߹adsaۗl(@ %**ϙeo/g^IHD*>*^wS7a<)No]O+! MY2R|!^VNn3W-eEu|XͅuT؃O1}FV* Zin g!:Nws"N0-ҩj=Jq}>(;6':N/F>,)}a$NwR_  sz %׈t~zL~>^Pz[GN/8O.EAx}&̋ $Gsug~)S)Ms'JLc|I8_r~:sIP ,XN\!jK!ľ jUn9^θC&ҪRiVo1$Os-|4ߖx4k4x-, 4!i-i0$X4Źle+) ?wO:%݄wkȿ7q@kS;-<_VNO\m[.&}S9\ q;9CgiUT8#`g`x_{8ƴr>_Kwu[?:9Q3NRdy!XCy[o{\!J$)r z:$znh k~'3 %fc-{[B [,cw8phl(87^ +ΚrW}mcCj#_TUѵ{uN%-}hmGgd3o`6%6NHH&`\6r}7ee& %Cdzۂprq !O9]w2AD~Ѱ)%Nhȁ|URrU\v0$3+3#]IS+& /hȑkANy7Y)ٻdmٻ2^緱D<oO\brxL.YgQfZr@d~`4A.۳5 MNn0Vk/_J+YA.60x ^W^S;X{ux  =<Iz |`ݱgWقJVu}pI#>o(|ngBdh]rɊYpΛ$Y=;aWZNN*/ _tdQ u,g -L???]+0<[0P5a+&tZˊK[#\: zᅍrCBjAYJ&Ա.KX:˞e6.f~gA3+6c#֢"B;03cao\oZ>/h8Y²titsK-: L,-/ ˥o<_'/܇PM2RfY7/ W$Ĉ bs7$澹RdreּkKǦ=`)(E&Yf2JYUrs5&0O(J6+c_rK_:їԿh9'OK$> B&w6Bޣ.ZM6SE9 lb^-gȧoZ?0wI+ԓ-[v1_ߢQˑe8xkY5܂ll6)(4$Vԓ ŠZT翬?Vw[ _ygOyăĎw,qS-vocYU;Ɂ$ԭRY58Ozv^"?L??b:ˏoJ.Bs)r9?Gv<%^.rc\N(6%gߢDH& Xź9YL.h*?k3Jҹ'OS~/!߅Y<4vN}ﶼPrNHqwO)Ǡߊ#IN  S@*hooXSssXG~mjᵋ/(k3GȟRfIļvקtz$qS404i "h8?bN]QڟeUi7fTWd꠯T_167k^\р:B\ g U<^A*u1Mbh "(_:f5l[ػ. ׍=s]8%;[uK ތ77}fA1 )>)oF~M#L`7yW@~AJ IBYCl+_^ ϩ6g^v}>m3i-4G< 5p S"sπ?ȘñlPɻh ? g,VEe̩6{eYJ;}2sZKZqg Q,ꩾӏLj(;XHe¹ve0zxοFkwKχt{!$yF:to[nw <B c;o'G,cK8kIqh|&Ogi_(H:?jd| T,=׹O R C_d7Zx0zq۴JU܃Kb?J%(`=x<뤴AJ׉4S^'sj5?4?|[Y)r㷊DLXܠoQ:ŏwVV9)*)|xVAa=_Ff<Cpѐ.יA>/~;:=?jڼJdEńoPO:;cUp/-CO9FJGh~Lxg"1;DG,?8,%Az(  -ߖgT:>G(L龛&"vEb٫e&vu:ߝy67I <4l.m"My?( w ZUH x/YZZW)>lO&f:qǘ:m: z\D'WQ!{{R!Dtc<:^0~0xkd*9#'N=5Ԣ"{ e,-Ԍ4~V>(HS#h/;}+'Y,ٛ証 ~Z) E)Nr8ld%M0k:7g4ddМ B 48X(XNc=s!LOXIk4lT( i@W W(!W̩@!W ZK-%zUniml=͵E b+3cZ:Eᒽ{w<ͧZ{:gc~$뮰^f@"˘T,0;ґEO?Q*ʁҩ]Xcǀ^R(r*UΫiʌ{N,( By h]M~wo4nՕZo{=MݭinC¡[n b63yH̤8HAC3Q%Q ZHC}MV`b-S!(A9ſ(DyEFo=Et"}JJSiLND\Va#[MfSQPU1֗tƗ9>?}yH!eWa,"1,/ÎÝ'j _b~ y~gh:=FrHw)'ѝV!մ TЛj|Rk\^DT*@xehR]ٌefYK yTb㥯@+0;qN 2 r F7YÌypRA We`􇑸O2Kw݆?~W <z\)oHW! AD2;MOI5&[g9 ̹3#4&ñW]= ޙL(mqdxPӸe  'M6 $˸YA?WI F6zDaW4*mhkԦejF}RrA)_@|FJJfVgv/MF:"@Iȇ9Y禦6Gܐ4 zp+:-h>Z;M֊w{fM6[[iHNαd{`Ƒ}8rG#bKvַvO,J:+==]LgVYz4^hfaPBB;. SC@k4*J9%J TZvs"\P'GTS8ܫx SѼ6HoӀ}^pk[^W# ܨIzQ5߲R W;^>K=\&*/!B]p(#cҭ45ѝ.vT_,oQ{{ܳ]'qU8މCM*v 20=&C1fwQh vt rM>j&Sv.zKj/4 [>?r~}0(Jh,,.k$݃AnOd ƃkdW)D(}K\t yBO^$qS|_>Lަ0[*H ks[)Sߍ6^cE2} b$h-;iJ&y(5'')18jDgP ()ݖCGac_\'}Ca\Wi \n=eΓpVU 22&VWep):.۪l˝--N^Wpp2S## $߼s/1zO'{'k.4UL2`>p.!HXl>Uo,B!zxb'ѧ=ż~ye1/@D)*Y.Z+Vh/oHnNv4|%(_}I緩QXbG"Yě>L'PX['UTXpDV0vD\ۼ,ge NUq|J1$7cO/_ 6F#bT...z9{z(=<ĮJYIhT^q_wca򈐁GtpǁhGcpOD&ϠLy5jW:z=ҊHnQ9ZSӒwg;5*[vi]Y5ַK:[$~2EvogʺMR:w+DA|T:Cqqб1|zawp'\^w9\4sN~~E]arzR~v++TU9L#sl*!!|F΋O$)+ae,H-Tc!j}"nE[YU0dU&.Օ5!g+4qg?C'- K" =;K8M>-?PX}{6][A<^6YQ)΋Q@P'k6Q3!Mqmgs i2"*e\-)s2uW8=e\~wsȮst(6Ehxiewaxx_PA&j!nLR H$ˎj9 5Iyb,sG˙Ntz=.lcR.CS,bqO% /}4;h=>_A:؇qMh>{Y놟2KKY_sAU+o(KӢb~J..x!sq I&=Pvm>Ow3vN)_4ݡ;{L;/SMAm:Z0ӎe#´5* 3CF+/@6:b͙&]rKum[J0<;gYjovd,hNSl?܆'T;r}@nr'TJʈ6,VFUrAEF rrN䋄6efٔM'qN"AMA\(;ΎUdGY`Ae:pAbE>jYii[=f?1's{^J)V ]bw UO/n>fj"Jv@mh>SQb4p1^FIO.-A&n6S8Nyl3hb ;^o(.ƛXY_԰뢢@CU$Rf֎P3  㻩列Ta/a a D$ɥ67,swn(R٫C*"a'{4C%S3G+}õaeXGyLwNn9꼝ST;ik ʠ#Po%swfRAnB*ɥ[ (JU)kRւFL1ߕN8D\J('[pvaO5|"k}O'IFmG7ͷO|Z[p*7k 8k"]}Kz{5=le,Q"hZfk:Vv R=ޱ v&mw*2ZCMC'WHj j沏ho"ֽCJkC~RȎ Fbݛ Bq%U .d8R Ľ4^n/7MirT]ay& &Fdr4?=yajY|/wX^•t| { eZ™_7P_n4?[c%PhҔ ʇ>C.P JT|B:k,̋m5rEb!P}lh=ҎKOߍ'aǮnoٖٟ u%~^S-‘X1g,P_hfFdF]+Ƿ%fOp?ڿD* fƔKUSo|xz'ձ"OuM9ΰ,d1:gA h9:\&2T32Ҧ D}(WإiJPG EZRZRir#9_I^WUpx{ՁwrqիklȾ} @Pgh,.z+p6z7a_#֯[GrxWt:Kt!C)VEy}XguFJ23E,u}i奥xdSqW9%E3e},;f~uc^/jX7&VO_nk2{\{_9?co zVpg 5Cz63b$T&jyɁ0-`}>J@&s8wjAHI.-X<|/~vvv:4# uǓQ܃5%8gHYUFFi|ӥVE~'mE7ƘkEO*Z $xq 32ƌ ¡K\}C\gq%9]"+HzVj+{򅞮e).]-+Chc"}f|tN}OcR[tZ͙e ^WiQ^&=-57.Bho*)`+GBR0 .UJ}*ǐETV8ZPPӘ7}j[VsIXwNcM3-ڞRdWC>n Ԅ릪b7;'($ ".wC؆`T(< 20u4v8n~ X;5l=> :Ǿ{cUnD=-v/~ӑ?#Plȁ(yV}Jcf=x3Npp_T>0gntI='Tz> Xef2C=ы? IzY - DR/ùC|B@52N ~:53g<]'ư)f5 Q; j&΢e2Yl;U"plc\uKc-㺥\uk@k7bM Xb6 RMjɁ^70?9jA,ƼlF #s_gɄ< gj"2)xgKeFeVSЊPt*M/zV/W.gkGWZ;]ޟh;4whvxs< ֱWˎ6bޖu_4΋UÞU6V1ƴA׋W)O=u_;3ǿv1~s+ء'#vo%Dǘtcr%`Fϊ15\pQjRuW-e\hS[nk1)?o2;)шҹQo****+rZqo[ǛT&m r{)]sj2kv++--l5S9=39}oP Vr5K9&XS9)Z5=]%aM~ )''gJۗњQg_ܡ-Khg^VWQ-]m4,4Tt6ט-]Y]cz`e0=Ǘ RL(lIuoT)%f`IƁ}u;C3Gm^hWUlp^UW|)(H%^yo+cFZM1u\n;'YǕZh<+s+p@ WR}[Xi\yUee5@`ԫϛ;o0ܕ ᑱ;v78\f3ZW@;>9c7We VQGj<$w2O;w'AmO_455rB2{"d/5ȶ<%!JJ(V(IZ&BlMh`\ح(*.zXpÝѯ7f28r=-Ͼ9.}_nX4֡:$d ORm“\x[ēI߮koܾ2Pa\مo\/:I.Orx5B]c=ɯ=ڭ\\Tv=rSW" p2r.~ R?'8~x{먋 INxﺾIymCPw :7 u3 Gk**0s8j[)X#Na^ޱ25'@eLNTV_p3;njKϼ%`҉DMtM#!񣒹8(GS5낉f$> %h?r(hDlF c˞jLƏ ~х/*9 E\ca~?]ug16)MS*3h:9JJ; WGh1a %ED&*n׬wV?Ǜ:Ŋ%H +R+Wl{TEOjOzT^ .W^ji::.;H.Ç4gŇ\lN`s|HLA#DK/K>pʼn_ \p^ެO5.,e#='#NVY6i!?4v[AGC$}N× #+y~_J'QI)a 9ؑB jL[ZHCǏnڗ-v5]epm/dLN(2 N%6EqhQGEI ÆҔHQ0ۖb -/6E5́vѴIK~OjT0=<2U|̖x!fUC*TrA 2r5+,,dGrM?2"ٹ%ˎ~\slV/4R=ڞp]cc]w7c[L}L5o%vsw83sE%rMT$8ԛŝǵb(ğCg/}G.FQVEhWo%򵍠wbߢbD|$7#ivUدnR*M ˭o$ɾf9ls\_/?1?{[-uZNm_E(6 -UgÎcw<ዧb};S-SM;ߔ͓Z܊fݪm@bowvԗL^T?x7>ҫUW]4ca3% ϜGuΎe%aaC-w%⥻^5BB3=o~[ rˑ;7q,`^6"@2 dL+[lQiQ$KM=KgPF~j}~ F-kjPPFm;/bnm$З'HZH[IDέMG}-wM[ǁ7!^\Z[ G낿L^,GuSJ=rBZNԫR^-*aPMjֺ5>Gx*t_c UʋNѴ0ԇgř7 s6pX̅Ι wh֤#Q8);K,zRDp+xZݧHTҜMy*˺/-6hy\DP[`h2A^IC4 % BSaSǿicPf]:mo|qP}Nx+֛B'A@#fkYm(Yp- ͩgǽSkpi}U  b~Xjzcf6gRg;;vKLN0!fCxBT-eq>f6=QmL<ǐ*au/cyO^~U9 ёn!:.swa߷P2{qvCp:7a[KW53Cy=yNʑݕ+WsrۚMxs$mԕ]g˟gpy,# lӓWr>BA+{>x[{B1wm7Ll{WƎΜ| ˨>C`V*8$rߤ*N,ҷ'j`W[||zR5!h)bȂx^|9 B[hd?5R7CEڸD4mL$J'loiUakYf,H{dK9{Gh2ͅ6p#RE@DͱXw&,0! MBe&[ n(t}|'_,,(gt'K:{ڲX +!r_Z?2DrZx}_z"B`hex}a'N̟D$!@!RB'J![nӖpl*W1ݰa* ;rm쬈栦Bchb_^V Hcr@h<}[cc2?/bw{6 .(D{4aZK35'$| ~,|ȇ =gpvN!swIʥv io!>Gx;C{%ly8!+A[ʹ|b.42{)ȿ}1؉}Wu=`S[¾)P{0gI#i>~ߺ([J2bO> _>Kcew,\gz;2O5·gq[ARS9#أ6ysz۰!^(ֽHjE@Wl.Ip.)N -5$~łW}f~xhfB~h _N59ubwcEyUlIê͗9cs!&~?̩+abo>۞UE?Xy͉gZ~y|Nb;|po6#1, 9vf`ЕX;| B3#-4% #rB4SmsSw{1|#q8>q߾¼̉yOcF|N`~nן7S&D+^H\I/- )*19E0vU1ƻ^2y<@LGws( *R>{c&AV9 R1Yk jP*k<.Tu2c6- $y+#Z@e =-Gv[ (F8љ2慭?kvrDSB,~U~*I0 w$N;?[|S|xKScT>ſ l*mފ2$&cl/ a) 3M]#n_XkY׬-.WZNgwM.WLoL}Ԇbžsfd?m+DI(^J |HKq=N'Ud ;4':I~Չ R#6RC 0XiE_}yZX>F(k=[f|, w!"A&=S@gէW5^A4W)2KIY*0@PoCkoYZ~~}LeBŜgg,.bXCq9tbP`|,;d${DNPgT2Q"ₜ-x,Npؠ ե/Wc/_bXIto)c6g,I3TcT2~Ɣc ܸ!}~SK-g3ž ;`G{K/CW!Az9eN sT3oj1[ ib18b^c1;e9MdOdy~x0XwNAq_҇-b!D|5fciM:4"I6·2G6^VKb?^56/kڶ\IEzX7b{O}i4R%ipxD*Kfr~&X<ŷ׷_fx;|5OJ HNgPU'fg3\p n9CxLdx&k芙ẻ+n*]qR<.%K`V;^7a2`:l"+CδJӭNwgu4VӠ@1 qbA*;'f/LL\Ar~/OJA A)a0I:J vK>qŕ݊v\\*oWt7PWsCR%w#@Kg4t99:Zs:}tY\ 3fr ÑbʉX=ϐM2#/+K7)"EFICNU4]!v5P }P3{pkO #aQo-wܬV SS`f==Y2[ED8SL~LБ3iB.$9g/ɬLt5jZ7h=/ّӕWͭ f-B ?ǧd  DN09ԁn1x9*MUXI /:KXfufc UZ߿RŰ7J|K#cfa\/UN btG 7ec%uIq>Hx\A2i7"詅h:xc_bDBgbctޥ$oIɗʛjE'7x|v^sɵ]xJJ -6"x]Rr+QVצKNp,JAy+A&k<^|$V7vW+6|M2v[ |UHKZ,חUijU _;50 Y3MФ^կKhOLt9DbSM._@mins*W{N2#Ƭ2>֫~]14Z SÉ&$s׿mI-v䉟Ny*Y³6e1\B2\> ˍhtW=^ d9J_EE&Say'|l1sf9A'/!uƶH|aʨ진X'hb6i xTucy @RXI!J )hp[w_$mqMOa5mWp]I[d}qY5os~_;wf_DmĈH bo"6-p_Dl։H"6&bGlXy[JFl]GpN6M3$@R,r>K#ƲX%O;k7"e{EoEp&7;iIN]hq M"d-2k}pNGQZ!Vo5+n9~1i"=2@.{PW!V>iJe2gXΧxw@*t`Ey%~p>trqh"CXRliФ>X{gЇY1)MrܠS>U.߹gibM j5=w_>ov w+{|"5ND>zg}RO<9})`ξp,s |[ƚCy%A$IDq d.T9ާPH:xIIyB7<6RfҠ;T]x -ZlL=R<d3CEls I$vA\-؛;;)E}6]Tk -gy!7hNX=I!JFxKNd*5Уs{"Ggq{g( gKTVx$Ҕpi 4wوGEtr^"[JYu۾ ]b{[P"˘҈qp>G]sp{OqGCwL2\i8IYa0t P1hK$qugDODϜpW?'UFoݙ~a ޿.Sj6-ˌzjyae%̳%8.ȢH k5cF %"b?i0:s+%"bgfݲ_۱.Fbm4ن2SY p-Ŷ6]lb]lN7)㳘, 1߁<da|l7$`{BNP;1=C_0`sqڽ.iv^ `>P)(@'T`/\< h>@/~`S73 5g ( 󤉦.Ff;NǶmWI]9̽3d^ k=BFtd@ԢY6E ш1l|W$ш[/b z_3E)0 !Xa3|wzc7=<8?c2<c9%3?g~/x2_IpM~7ΈD6vԸ{j<#z"g"+7ryzd ~IP7 S響1D9Z{+ 8>gk5b۶tmN[]t>ƿ]33_yESQ L49ES^M!E3VfF4khv+] E,Zua7ѢQ.ZAdh_E˩_QO2 jhߣl'K'yqQν#DupOn SGqE=ɰza ;3p X5#8ߢ|pt" FxDFd^CX 3ԱL#іΰ4RAȳ}z:ċ!zt|dtg=uuPI;vLQ9Q{ UQ.DkMA*\XOV ƀ|g40Mw'foD4b{x"K#Nkڙ| l;g^dhQlt.8ׇ`dH3Nk P&蹵52h/mV1)1^R!&h%̧ԭZg6hYg@%}Q }/>SSCKO^f3}5bU-ɇG#&,f4/`aRr.ǵ|aZ$ #^"EѢab6ۅj5ϥ%!ZK*B\ 1tl~ϨDZ,_ m yqN 4om d#Ž?IZv`1YeC2H7Et9{7G:? xEc+j'M*4q\h`d(D 1,;rOp`(|J-ʹ4δ-kIkfv'-CK5?,_ﵵO[uֵB ww34]HR95; nKY d#5Nl IcPg+3l؊aM9LB=~ h&$DfNr$;3+۴@}YHdYw{1ws|F(rRl G#&Ec<]|,O#soKGr MnO*IIFLA(dMLj>.N"Q#ȑd?mF?ady`!gKv%ؙ۪nnKw'dɅ(yo )#a$ԫ{wnC l.woMs(Y9h&aVn=dGkÖo:{qgFJA,Agn^dU1!xeGEk3nXiR`-ڧ&CSeu!O[rSO|% Y<3c}<Sr5Uadz݉}g~Ons<~r/g'Ey?Lz2xc`d``🁁e,@zxc`aa| "!4cW&n6f&`Y߁I52`ļ?bȨ0$iR`[xl ^1vlނٶm۶m۶3|6\. ?&El#$< Z|/?T\{7!z?OE|RR~*IQ4rZGi2T2$ڲ Ybx*UUV5TԱ-S>HiRN&Mw#7:d9.dX} yjq~ǁq!qDq(!%%rcWMis\Ih+2s(jl('cYD?ZdžWn15˗u$rwe>GAe Aۍ~v3*_M~~.606Z}Í׃nOF6m:it\l3y̳qO}f~8֧s1Ev|uq2}uhR^ʏRJ㻔<ƦQi\@]*4 iBkљf*$:&V}l}&Wu3SXC,o=Z6h7'81nt+nox93E֢ڴ mlN[[ʦl{13>dہbF81gØ; ]3dG2Ωvsl;gXe.!r\RcX v㈇9Qz紧8INz^99G>Wxc>/(R]>}=ޢ id]ڀጧEj[}+O>)/|+_RԳ&U@u+QԴ լHyߠJ-GkۋAazM/Ls"SF7Mvk]:ײuq5[vt s˛6}oZF囼O=JDh.;ӯ鷸bG6}ch =ot!ǀ_1$F45JӘ((x3 8JB썭q1Ƒ|txVvLWȿ*Nw/tsȭ%~*}Pwh {ڒ02,(1KA}sg<0- EBˍ0] ~t0%- ڟp55*My9 pXBGm,l}r9:;k;Uýnl&QlAfy|XӺ`BKg^Ò[;ٌ}-R7j. ɼiRuwl%O:b#4A^Ջ 0--;>7l|xuMc\GQA; а 6n`QUPGOo'].uBBK)pͬ|R走8cQC 1Jfubhh'e`k>LW} ҍ0w}3(jG VAka.FZ 3 Ӄ4bؒ=/d `aZmd)F. LJ%(ꢠQ<2,e1$m88k>!~M(ZqТ8CC IfO !O՛mn4-җS}E%bRF#rqR&c3N?h$-?aig,Ia)& $MIͺeI|i+0nUHDqRtqDȹ~y,\e*d3olU#U*1X$YRImX*)˻*cyO%,dd*@|8NkGeFqJ})N58OP]KIX>$|,넏c c9MX!|, ҁ}(斒G6>h%ݔќ&kq2ZxLR4?(f\LJt}9ѰEƊKU%ќ/Uƒs׹[>O-:4B*)#4ۙ3j^PT B>[2,\aܐK1x yXn0{ڶE0?וbFKѓ= :lK,M悎LZ|;I )I=apHpQY$YBXG=D'ru."O;q.@T D4-L9o&'.l)i{~eCZ:^|wɚxѴw%yWOT{ ,^ה7e>,d֨[WEh U 7.13F.u6p"2T|͠JX랿Bݥ33-IU+TX{v%ȹ" e|חqF/iV jvx5Fu X&2x%JBA{}R-] z@c_;:B+"Z%pV08 ll ;i9Xx]d`/h x4Lt$[3]5t:bgmm۶m۶m۶/3Eփ  se+Ckݠs[8P@V ,E UNvo)TSx e{+^Yl{ f@dԨ}iդc[_$$7ʋ !  7 i)~.T w t4D$}&:i.&\znnAm)T.$rZ><[[f[Z>[SkckObY[ڞhjjn)}ZؔP%RSi U6+'[*Yjeu:[Tկ l %NV>VZԝznqf^^o#ACF;;;:N;.:;~&6 .2x~!ZߡҡXQ5bqѨ Ǥ)76>vhظqg/,p2AMVф>}LX6SuIݓXgAg[`XdJyC{WJWcWWpMwFwqw}KgIx==-=:`FHvH`KȎhrn@9rQ!dh@UEcP$ԥ)4 i-@#ZDKњVjh+D':B'џu ;-BzOﱈ>w,+7*995ZFN$lb=[8#g9sq.<9?.̅q1\!q̕qsuN *_ DN 5\%bSXd|?hQhӋV. ra 7 e)1;VG+i\7:i|'(0o?u.r%IpTm/۶mcldzǫQ۶c,uPF<'WDdAOAG(?on7k\gq5k<\8'u^#RTk8Jɳ*yq,q|O p2}:]*q0CFҊTTy*#$O).NG]z?LzI?Tw2pT1N&$|.>gZ۩$Uri\sZ#Wrj3c=y,0t/t: NBG?LWNe?mRn=޷ūW~UEC7y.ԎӜ2IU[]TL$ fIoM t U٦BT!{g B!י4Ays8unESyԚȓrıoVGXRi1k #qQGQ`#k`|zW~CyO[KhqKnf)mxdxCIcmg焅 QɋÓǯjXMaEaNb v]%VVw]ny_wʤzd|k f[T9ÿű\d{g`8or95y2c-n ''{iQ_ueةЇΉ7C~TίCynj6^Gw4ۚQqJ~]ͯ˴m~]/+$+-+҄9ٚƿm_ڬNՋ^oy򳏇YXۆ,,4»#HV]̢,h/^}`Vd&VgEk}Jg>E[qyZϫ+jւXғg ݢۃJ*CUZdG&4c bcfbfcbcbc b0 GHy?8>O XXxމwxދ>>ƓO?K2/+*}Iw]|S}?ďc?sįk{2}p.ȟ_W ?O\p9ۯ W\p=n:l6lTގPD?0aq%U&\3؇{9䑢 ͘阁٘XXXXüa8Gh8x'Dq Ni8gLxGx Ŏl[۝;+ k»|‡| gؕ| _WU| ߈ےo[6{>~G1~g9~_W5~w=L98|\`ܹ] \p5܈p3n ܉p7:v߀؄W,$b bvX.VFD=E (1Q~Ar rû07vbĮҸ-,v0-98/S9'B$SbkT5[whE黼7~-G {P?x%Q.p .e"o Z:=w?q] ϡɹk{-Twm'0ϔ]͊٘1bc b0Fop Sb\cZf+c/a?xN5r˽v5ȡ?7 ;9/z\ hlֻ\-#nvyNNYVzb_~,ศ~E}&͛G&f)SO;zS kY-:4ǘYڝr| rg91cG$/ Gjy-x?ۯqow5=I=r,/܅aynb9eazzvL5&/ D"RYZEi\zDhXJ"M>Z#у")b"2m[E"*]"/"CY"#N._}GLjceO>Y&<4ۧh^L_kuxoTߛY[Lowٮ]mXȾ\[͓oaǶ ;k)ra-)oQ^YQc9]UZ[mZY p]u=c ϣy=ts7S:h|pNSh<ƏdZ|6h[ѱLSi;hە0i,"?3L|4i;Mk48M͝SбJ2Xam4ѰH 4_~cЯ~}+ov5:ٿ0}QŻS‘Y{'qwQJ PJ1Gov]HiSM/mi6ismvfֻiXWmi3iS9Jp|FeM4:F4Mhq-a)4*Ө?@=jSNgi6өN:- ΤR:I)tZLImQQ]#e4O7}3J鳝>>=)g>O`]ۢ9MЦHiEݙ6+&i^ a< э1t-}9`>v^dKƞQ3ʞ{g=K`xRܭ = Czȡ:Oe1uڱnn_dC_}tUWۮp)=|\lS>6e!x~XSqq푝, ; DD( l6 |C/vUQ OçHFV+R~uH~MW3})zW_Gc/̷Q~4>~򣔮u`~^};8p/{OoB~~ݣjOYA<ЯD}"2Fbp}lC_D^֚+f={BDA1-zcFM Kb8$#b'pX y{}=٘l{dq??g.*7ɿaM_|SO%>L򁭱2[: 5zXc ,EeO@}G߈FY5~ȯA~W'_7_S k'ůƗ~~ѯ4+WjL[˷"&VX[ݯ_#__ycBӃWŹh٨,F)F^k]FfYL)+sFД +dwTLtL5y2N8 'X {C` `\#XȤve33k3_aJ\q ù,>젏ͬ>M&r>Hc0֒NC=SHϱ|<}q=Fh d(oѝ ½SytFMc ݱKM尀Gbqe>[n=Fm1aTԿqJ,FZ&VԠGmyG ^c%X%:2oWkN5-V-w ѝEji u[1FZRFGj-F^GutfWiꎍUq0K>5>Qo5ܽ#4f[{\^dhZc4_r;X|gC%^V{_SwU={B^iYZ嫉:l^k$J`S!ӂ!uGzP()i~Z+“wA 7ptʰ3k£ׅW䯧 Ù£7f{qz]N? 4ٞ礹pVMi,wJR:5NSv2-OԷ`jT ^7|١-.Zq$vX6#k /7fCE:;˴=8^m1>bgpKVde2{wL8~+t!eUo}#cJdW-XA4gxOvQ=~sEkګ/<<=\::TVgj=쨂䗖8:v QOd+Ro.\湻;fV'{tMٞ˵ c<ڟ{vj0xK/ΎUFGCK'6۝qֶyTp,%_GV~x^[^U;g޸g_8̘af3Lqh̜)d))~[VwuuU]guڵQ ,Ke %Kt(ST/)Kk$II;ϑak,et5]vO?Wa}@RdT'&unؠ(ȯ7|>QԣyP.f&rrrz;O-zXoK4+XYXf*t3er 17[>K>c$𓵕lZK=κX?cίcxL/e|}._nX-,I]ycT e;Y $H0afi2ݼ敏'r5yNq,;(&cPNlk$l12 ޜ wg裗a3:*y`~\͢ { Y >Ô/xy,o&w,G].8Sڑ- !>y.Ham1ie$iݒ7~8/qfOvaٴwǏ";ceľ8T&׋X]>JMq >ѿgw<_#0'bEF7c{b=rsWJvྲs-ud)7(Q#>89gHaJls*%Fǡ\zF5jr,J*ÚDHwZUcМ}5}5kcn2A?C5^ol6=:I)eqS?δiwcl?CLҵb[މ 6w3BwӌqY=SldS(xXHi(ڲ:sV 33RF#|Nk'qG[mlz(a0U0$f!l1Q6=<%~=;^#D`P"B0"qA@: f[n&BجE V 7\ \3]l۶YIضm"m۶mϞZ|=BʑGsNd$NG&d srW$qJs/*?ɉh'NbN1$:%Hr8ʩTE[qC;@{BCGtv@tq9zaz9c89c8\.w():ʩi;9938 8Qs89_La S4%4uXŨ%\\ʥ:Ye깂+s%W:nD:n&fnCzn.d^E>T~GAD)!QEE1TqGQ IDi)iF%TYE19yG^U^CF^ud @nM[|ayw@]{|G|X (?S3>C>s|PF-r!~P#'?#?)䀧S{M=Wo]r7Wo|\u՛퍯6OW{ړ􂨶(EP P\(j|T P?7/Es(*! 1ʱ}O*0XyFbF0a0!UR9PU AXGT 8ȋ8|T1k:7q_+?Q%j Rk[Uީ=>OUo B ¦4~2eLN܌w$a|P0 EMs"&ۄ0Dh1է~7t2،13Ҍ(3x/Jm|t5 1 Jt7Z0Qu8fN!9m㰹`.\4\2粹|ͼ@i  t6 ۬6+ l6;؜6'\68f l (e"jbnaKXl[l9[m[]lE[m[G?ٟ0lQq6*`P̰a6 l 6F FH,5l;; p;G;?q6Y9ŦMiv[VS kZɌEd&$In)RDY*Zx'ڊ*I䗆PwIS4ߕ-rKi(()AaYY)Q$A9Ql$a%m K[iA:`t.=NzJO^KwzKo>3CH2 e b$T`,!2ce P&0Zp 2Ryx-1I+0Lx 2eL,uLQ*SaLS.1Kf -3e&Rd|-H,y2_OeeT^%kPNZu?z٠Q6blM&e3-dl).q@v̖+e-rQ.b\K8'2 rU\k8(:MrKnܖX-w]rOEOa˿6gsuh(Öl82?0Ah`Ó! ;C c0FDF1 hƠ c /1g<3 D&b+mІm𝽳"jd`28$Xиk.kgG2>o}};n!a_ Ir~9[jgj&OjLP3R3٨JQ':טmV&S'B:Li,2P'yR']NMT:ɗ TH&cE4 <j#ȟȉڨQ jVFQ}@m4h,ѻFQݠ66jNmԒFm<*RyQU6r6@mLm4sjF6MmKjFvR6CmImMm7gF~FvS *A=tzh8ꛊJDJ 4=5T \;1k8ZI6 J\ L^!\T Eb>D 9OL"6Z8!⇰;c-q/,nl,Naqpq8<3a~2VrD ҶHURBqWp󝁽pb76b|~JYa HB]kU$GQ^ Ht#]2 bwrEO+RGyv8J(LHE qdь73Wyɪ'" q P?.GxIE9`/vh;;ȽLZVJ?  MD]cxZ+q  z;fH~:|!s{+%cn4gpI(H30A`s=s;}P-7q!P1-^Ejky<}!t(b.R $Js;vqm+_ WvJ{GqrpbƳΧ5 iTSm/QύfqUkס8F-DeF<\Vgzp<؋0Kr8'TO>Vuli\?#}LEhZVg#Ew(/HHF|^_9=_m6G !ݽ,#vǹGjs~ xǠX N|J`_B+I Gh,cofć?6` Vb!#V%aL8m"% ?;0E^,8*v!WK}w@ȻP\/ c v 7d2Ehk_gb+;Ii0)Ϟ#*|%f}V8l\q 8{vx1*[yn=p1 q8{v/8/!gÎkٳפ̡|OHY)V"z~XMvN"шR鼿+{$yG]YQ'gﲿe Ee@<mpα<-[?:BQ;4ʛ&{w_U^0ZBsS 硚nT0F*]$6@&$!!; Φ"9 lAN%'`iJ؟IXkM6`}ː 8T@RkLA):j I}X@i aR= e Fr`e2ʉ&? e4F~`_t!?lI~`9],E~`S؃@ D~`+˓XH4"XA)HD`/Rk"X#E-R""؜&E)5HF`{R+"ؘA):)CД$'9ksHu"9׋\/2s"3M2sH"-׉\/rH"-1i^!--iImGZn+r;\'rEZrH-OZi^:EZi^6&- imImGZnr۟\'rEZ[zBZnErr]HmJBn%rI\orIl\gqu!יl\oq+L6nMqN6nmqA6n?q{J6nEq+;Tv'uHŭK*[⺐[TH&KRqIu!יTܚv'6"וT܊V&w"=HŭC*n]2mi[Loȴik!F4[ i6lkfk#B4[ i6lkfk#֝4 پMmOl[fے4ۯHf9i6l Fml-Hfk#B4Zٺf;4۞ٶ$+l?'BLLԻ=2^mdMƫdxjcXo͍̍'Y?2{=ԏJ~yyFWPJKt8caZ߻س$,VÐw4cjh̲4,s,,q`~VʧtCgo"[oKǦmv1O ζk7ʮ/j[Vf{jӪ&W\mUәVu<ꦤY6%;vzߥ{q?iVB{fKYgYΦMV;Fme2s^K na4ѯmaߺnִkӕMUh'kvuiqovM6?/ֽq#w^}IOv㗽Zz`P 1? Q?~QuƬ?&pL }YZŽ?>8nǗǍ?v߸Oyۤ~"yNjVN[N,3~/ۋ%sHm7M;|^^<'8cTvRހGZ TU ziUMߢ4Gҷ*]t_e~*!FAV:;I-U#)`h9Ijq|<1>#c<`̐0pSfGqR,ًV(Trx*!xF-L/TJMa(Y)TW$*OJ<6:+M@Kz+]r'9ԖIn0yoixiGF c3}9[*9Z%v%GɱXɴ ɆX'k.cGcf9c,v{3NvgeE)?5H49HTZY_nH}u$$wChݺpuUM!ZG_uTU'DSnHMN|T IPR6UERu~=je-2Vժ\$CKɡY^9vN ɩI> jzsZ q\YP?QgT뱔IwI cI)񠿤0Pm$IMIjm~5驺RSZOzoة.)SŗaZjJUbZ'^|FMŷGq<kcezēTMUīW.^CYE">R>7Fcؘe+8 qAXo'`F쓱\K _jUNj:S]SħGb&KÜTci8:%DKԉDZƲ z4"5DQ$HYf1 kD5'cgz+ LOr)YC%r7Ao3Tyg#UV^h'耎r=Q2Ry~i;+<ѧk㚲O%` p#  ' xɑ) QEQ Q5eV 5ڠ-ڡ=:#:3+;z'z7/?` a(bDP\dpW(㑀;{xxJ&,` +X=$@9,AʅJ@E|I ɑ)iVU:GdD&dFdE6ˎȉ\&!(_BUD!FQTsQň*!TIJQ*M{-b'r(P4;UR%+kTbUT_u85QK:z7Bc4E34G dm]=}X[_b? >g0C{58w7 Xx&&'c 阁٘XX%ĥXX|W2UX5Xuk=6`#6ILBJF܎J.Yv؇G` a!1 )fYsHIPQ(Xıx$*:n&n6.>!1)ߛgxxWx7xwx#DBtMuEaPZZiM-`y; .GwOڼ$HkC"9'0= 'Uz2MHTF:I|dD&ٯgF;ۣ:; zzcbcbcFbD>00S70300s00 K˰+bc6Ҿ [ ۩1ڼz.6Α^¼k` a!1 )pgp󸀋˸HD!1E⑀븁Kxr\xx{o ehPa,akvAp3\& wx^|drHHTH4HtH rȈL,7,UٸΎrF%>2mUPP5_Puh+Ǎhzjs-Z^mhov_ ؈Mڶ`+a;m{$$̱cR6aզ؇sf rҼ!G͛[ĻIy@"8CYK xKN2<墪)EUO̖j9o!]oK]$Cxp-YW#U<[$hF oɈ?Fuy}/G\W/9=RkzrF9\%Xy"s P$Te:LQN%*)U)->]UԒLU5Z_p\W Bur_8uQ ẂFw0W_=ϛ_<Vr_;GV_; vx2VwOF6ibww<2ιBqпԽ&Ƃ6K ĴìOHp lusj-4et -=fRs&џgqQѰp ^E!q_+}IcUxURҚAvnfFv]17`%Go'b,Y"{nd.^ِ߮9_2gCȘϽkp,![2YTd$CdŚkԧFӀTCb#Vل60ɆN6 # #KT_B5\.w,W)5gfro6/"浘>KrZ7OC\1ڶm/njԶm۶m~'/d$d9.F],r>̳GiOҞg5=sO粐o~ZGx1uFT2"ȨC]69 uT1RScn 9 u$d!!Dē=JO8}eh-ekιǭ5!&mb9(T4h ]ExRG d[2r+5d䇌 PQ[hK>bF?s5".[r~#nq^#?L8Ӥj5<#R)TDFY%>~̓>'tY0='3AT/EiTEr:/Kz)n Snxogى0;f'ѳ0w`uյL$fqn.*;as< 6'؜ 3p.st8;",b>8pNÕNDndK۟v01o 1X+טDf"3qldf6 u<^ Z՗Gè{uh1f.\Nya*[ 1ڹv!cp)%V miG{:БNt ]FwzГ^} g`0a g#hƐX3Lb2Stf0Yfs|,a)Fp Q f7+X*Vc=&6lc;;H"9FY'H%t2 !<)"vjO 8r$i g-<x\*7-nspRq=e~VPiUS_%^^? 3 c8#(F3D&1yΦ \K^5!hLҌ ^V¥[U&z kޏwQi{c:(X?uEϻ-as%m 4@[dC.yS@!E68~pCG9qNpӜԱc?ʕQAHFϵ.pb.iC๺sKk7cՏv^uc-7)&=Jy,V(4 -㌖7HCɌYzKPHҖ Ě؛(^}%i*OeQ Q &+-&\ȧB(\l=rS"̿.=pu&7-]2f_/%1%qmIb0ɑ#J !<)"J-+"Yu8SrΒ Q &9r(HSI# 2#*1-&\ȧB(G+"iJ|DI)mA _mtu)zure^(SjN*XK1k|ȳQ|/eBK֊ִ-hO:҉t+Nzҋ/x/  dP1dCc&2La*әLf19_|omwe~_u~m~3X~#~O)?c^wTICY`%Xֲl`# d56SI# 2RKPH;w=?? j)r(8 NrJ}6vq %Ϸ\*l 7mp~/oۻT=?P?yD(wT:*Xj}VS-}ʗ__ ļ,«g>@>&m8ь!Aks/N`"Tۧ1b6sY .dmK2 ֟[ Vլa-X6la+%B*iA&YdC.yS@!Es'Eě-x+\U5s6wK x .ŧLиg{|` Q &9_ÐQ}ޏY*YdC.yS@!EJW.VDՍ] piEkЖvDgЕnt=EoЗ~@0A fCpF0Qf e<$&3Lg3l0yg!Xz<$!^kwTH'HԹ r# )b.vc?8!s8'8)yڙsq ep]JO;?Rn?+TVO)"G*[7vF~, 97)Uf=#Qגx"rb5kX:ֳlb3[6$bNF*iAfLkdC.yS@!ET 8r$+Ծ/П dP1dCc&2La*әLf19eY"nϗ9D1DJ+X*Vc=&6lc;;H"Y-TH'L!<)"v:ow=u~pCG9qNpS/p9sr6wK )U?CQXgJyO)iiշe+J9>f! ]#đ%f AӘkgdT}D}ok.xX]"\ int5|1A=wʆΦ+ӄ֛i'[&q凢sL='OvO~?):Տ~dL\K)v<~O+Zӆ=H':Ӆt;=I/zӇ3 b0C03b4cH`,D&1)Le:3,f3c> Ybs]W;)bMcױmvƶ`<۬8U|}ι?;x[G' T1!~03b4c83Lb2S4[(dPPb, 8I $%,3,g+Yjְugf۹1V9g/rüQ: NږS4/q \tMQG}cF!hL":nAKmFfmTctf~lFLWѝ$M謍؝\DGռYIPJJH5Rm34)Yv[Rt!\cO]uzPs(O*RT*ըN nFnfnVn&M]4!h&4iAKZњ6@G:ѕnt=EoNn^{}~?'s~/_k~o?g_0h1 З~+@ub,03b4c83Lb2S4Lf19 $>, 8I $I%//,e.g+Yjְugf2`'Oggyyc/}9ax%^^k>|9 N'<~dBקqy.pEqjl6˱NrNRRXY7LRn&nn6jRԥ1MhJ3ӂ5mhK;Ӂt+NzҋýG  0(8OЇEoA f_2`$2L`"2_,dPX⋆, 8I $\(,b1KXf^ Vլa-X6ͶsK(`',<{~pCU^}t̶'m)zdb8.: G4# # Ԇ41M<44n߂&HRt T3]FwzГ2w;nGQv/cv59En|DrTRKo!/٤^#ťfqFӫFӛ!K r}2Kʢk?\BmJ3/dr5L)?(H! S$'|u) dW /b6sg.v> %xH$kO}ҖwlaB]ULs$ T1qOb#IמROٌpmPlg;Kd\Y@,qē@"I,w,ay`%Xֲl`#a+Mli{NY$[a g#h0qgd0iLd0YfsCuٽ9gO$"edYZֱ ldV [=j]9Irz&X9shnsfGJjCјDrFsԶ!FnҁHntAOb]fOJfKD3pXNr7;;9svw9g^!!zRNyg2wXhj;r]gɉ`@RIj{Lҍ}=B\\¥\\\\õ\­=BiU-4Q28Jj_ڷab.ÿ/KYfsW )J)ձ}Wyy7yywyXouTjjMJ b1KmqÍWPk|C6.|?[TK_2 (bJ(r"Qi*х|+%듖Q[ mĿ_b.yDO_މe;i_+Z%G\Z6~>|E (bJ(r6xWyy7yywyZ|w/Ӡ\ܶTIg5ַ-l%˹BWѝC_&~g`DNdNTQ_&ľ99,$6ͽn!3uk"*xH~GvF?(K(͋ۂE01<kYfsGoYQL Q|w\Eo1g¶J:{C[^=$lrGHC]robeRda=Pzh=T^wNRyiZTKcJRʱab.yкa3YfsGs )J)V X"^vxWyy7yywy`EDz*rZof [c*F(i:Mn4)r!$Bl]{91<\KU,f3GRD1%RF9_i*՞o3>,^n&w~9y\*g} &v 28h#ηhv9v>#S|-X?EOR1#|Zb6sKgEPHŔPJDyWjP/!$/y=a| ɳeS~͏l~GU -ZX4RSZg)wNM,c2ۥ. Z&g6d뱙wߐe=gFȽe޳3F -wk5xupbM-Jo>ck^ahk}fvo#S;#C)CRKf^'>I*VqslǫoPq|SM2gf^"3{O+{bW>MO3id mNIiSr9mQnuiwOvNL1i}CgP7_pPFR#s8[v^ 냜9nmNrNr&Ð]|m+6}*Nwt]vNt&km76u 6{(tn K/VOߐoCN8#{ qC]gwI 8(Q=s{~Vge_vٯ@fr>'w~u[#nrp@ږK:IM[ͮؐɰADs_9ĆHΆmuC PG NvxG™ʗy~5P[[>9ӏ/ =(QnhBQF&6hfh'?Z Pi]*k{7-jܪqSo麧چ{JmP( ִ-hO`PpHhX#AOzћ>%lrG0A DNdNTNt,1zO1< 3b4c83Lb2S43CЙ볘2|X (bJ(r;-`!xWxx7xxwxxlG|l>3;YO`%kYE/m면-UZM4ZfmAX Vscw*3[58hX#ѧAЏ58w58 +"0r i,f3yS@!ESB)elm~m欳i8YlXCY"{9 mi}V$ڛ9jDey=3Hvuݝhs#§|Ʒ|R#d-Zz*mKtVS#}ַ-le[t->s yKW(a뇭~MԺi89{sc~uK_Kz)(")2ʉJ&3O eJ}+\)һ>j݇v=q̓iLzi}3GB?$pRKD\u{v )oj&ծsy㖁:R!vw̶JP*GEJݺ- Ij˞xMߟc#j.P"c)=VJڟ7THz%~a.KнyL|vպSJWʮ2W~b~Y͕`9be=.&u?PU[|w[EDh\Is4>`}gtm}`$l0V^\p[OQL QNļUb8 v^TPHŔPJDW%V{&B__?|/ziڶUbDKzސ֗a/_{` kD ym|͉^Z01<-AQL QNļUb5C=82  )J)*= Mګ9I%teIkЖvq0p(q8Gp$Gq4p,ёNߙ.tMAOzћ>%lrG0A DNdNTNt,<뾐K˸+k븞nro<<£ cre(%}O0dX1 LdT1b6s*0rDh8Yfs%lrG0A DNdNTNt,<ǹfp!q1p)q9Wp%Wq5p-q=7p#7q3p+q;wp>!eɡruK`8#(F3c<$&3Lc:3|j3}2ϧS-")2ʙ|v Yē)9^%>m ߘM[R VRUf kM6c=J_ͻlbRA(ўat+݈{ҋ/YdC?3 b0s"'q2p*x ko5S5ŝĦ4-vfO{Ž]% {giKw\ر~i2x3C;cc[ )ɴ,g dx=9{6vuSw,%s)!^xͮ[O[YPHŔPJķܲ-5]g,~iuA8c8IGM( )J)ムC>c>ajjW6ѳᒜ)4yMApޙL҃J{aGźI&&O C%i~&:*?`*WGƯ5Xҟ⠀B(R('^S,g?IliP-?wm$i@b-c8 ̻ŸAKafcĒ[fffph8=깅CiMw]ɹ8 Zm5VtIҲSɐ%GE|{\*/lǔך':?0Vף@ d~3DFz;>bMoț4v/Gt] ~3(+6K$ZLc:3,f3c> X",c9-j׭jmA'+zWF(?wmYcloO e% PV"PR@9j=(Gg%G_^(fQ׊@#PD&نL835Dɗ_C%>NUww+PB92^dJ^;5t ł>J,;/b@lUH׭󌪋+2dh|`DC#c5PbL/1}>"֐#Dkƞl!F."M,9(ño?sS=?PwjQ?U}nyzj_ޕ6EĈj[m۶晠Y'AK75)dȒ#O"]L7=gaqpҿq^leܨ&jF2;ڶ@}jVz"M,9(JK׭i Ҥqi} /*H$H?)E Yr)P%ZZݑF_U8 9./)T+b3<^P~Gitwݘ[oa,3uSQUbyWQL2eY'TOc:3,f3c> X",c9-!J'.7wC/zY~ޕ}qtQҾ: ҦG.m!bi2dɑ@u F^V֜JOrmT a[6/ڎ؎dѿچS~أ)Y'43b6s<泀,b1KX2"MpmA'+čOM"M,9(%/vC/kYem.gWڶUf鷮֡=E Eg6oʲ]9K/Kޫ-gYo9Qmdvd'vfve7vgd/fe?(8N$NN4N,<.b.R.r6nNnaufi;R[ qشhM3cMjQC,oU;gJRKjbk: G=S9ɢZ8 m0>[yRGxM`zߗ~koIRk糃W?Kҫ~h)6hv:$,~IH!K<tMcJN[v* V-fDH%`lxQ CWFQK$̂o?;Ii2dɑ@.[MپZ>Wb hc+8t$PӷzKG`˰O"i۳;; {{sqGrGs rs'r's rsgsrsq1p)q9Wps'wq7p_!q?DM1Dn E Yr)PKzy6?3D/Bw /7 `cg~]nJx?X)5|͕۩lpX7V5T*Ґ dJE1;-YuX 9* ,A7KTzSJEґL&0"7NhK}hs\)+nSn7qTG$8m,U4JK6NXvRNK vz9"⾉d}i%?QEc 81hm}Iˤ<ɩivS 95S95S 9ՒS *X 5 1s1 K ˱+ k_ /KVf~ jQAm܆q]^܇CxQ<SxY7`+eT#NTz1Cb٘XXXXXXXX؀s$O >Ut jQzM`)2nw.܍{p/x!Rtd S`ו#smI톫llwE~*g=6\!!N/P9ERZP/BD'A.#nBYLGA`!ċXI]wϕBY:BD's6ǜZ{q>#^dqBD'1ywь7pGj,diJ!(XZLGPxqBeV2BȒ0"/NhK 5b(_իH^Ct_2% vg~tvNG;y0"ÖSSlّOE%s|\6&s!Ve /Zn-|w=|?#?O3/+o;p q8'DdrSqN8glq.E2\+p%ոq<4x_̕J!O?J_4#> [?" aDͱ\䡄\ T hB3ZЎt A/7. 1[f\ʕZGۤ=OGwx˾4vBHV* ,AqB[*Roƻojt2Zv^A(5>vM\Lmϝ3YCg3DϯWH yX$^rf#lF=ܮY0|# BF,Hhcs89Q=Vȓ|P69oQBys aT ~8Ӻ4V!cR,;ݚ|Ko˔If= l6J$AYMjTfT]2dvKi^5.skY\ͦ6[Q ζd*>L3ׯEY&˪F&H^PP~b|0")+N * 0 wqq%4Ԉkc` ĥL-ڃH> G8OٜuJ`m8mYJd4֢_50|Py.#%#ifbVM;Jx aO /چ0ZeN-|:y),*Yhnx%*fD }`p*K^4iiC$aJd(ry(M o? a p?mN2 X:$HPIJpE_Y8H4E?utAO&;X4ٖz Ց&iGP+wKHJzmO ( ڦƠO[ ճЧF|[!OKm?"HBꄪ-::ʵ|uصѥV`ڵ;D0hA.6.ǝbZtXoڵ= ,Y=mV)4C@rHgq% 7C^{,o,p>oswǕxWɰq/80s|ݔ$/*(xBY3gIFNq!|3yf:Q}q ڿ#W<ɇ"OHХͿ]E&xy+IN.ms( +7l'ċыĶs0P؋3N(5Z4"Pf )3#4GtYCz]6rӢ'dDD-fFR̈niTbt6.yȪhK X1܎w(0YNTP,P`ER֘b9HF)Y0XĬ̱TX&XݰR/)M[5RȪ^ӑQeI2ぁ*[f?>^8%οݎ/c9Ϗ(2I1J<2,{Eo]rA+Ll@uן=6P Ǔ1Lp<}x8[op?F"nxϣܣWGdS Ҝby0( *vYpl#& *¥KQL֚U+V~^ %٤-s#{"YQ-}H#eIz|6aOV8,`c+Vytu;Ja%rwTG-xjv5ztuq=b N>Otg0ʼxiP.'rv= y`8WEP=puW:R4sz6(o'p5[u~C6AǞvlkgZ;b .sXP.Q}N&;cK85/Sh(c*|y%%VpK[>q84y}+0T)& lIsu`_6mA)^ߓ[{az,Pj1rP\vXa.,D_A*URf-jGΒcQ|/ da:>ئǿ$2̏^B vpՊk ">FPMUψ^yiĝ7$}:4&|jpJi͠hf;%{0&;h. Ĵ# dͽ̓e{O=Ml2Au>[@x6 SL (FsXS4']>"@ȚҎsMS`fL'ms@)(;FG4N";{d :$G*;1|p2YvȲmplgDY8!vl*]]g´, JzoβJR tY ѠWǁ4D% nkA+# HRwc:VVWUhgv+'_>o僝4%> ]ZSXsUuKJCz.5&U wD0>c3Q^QfuQѝ A:~\)6¦C۴M^%tfd)%q&yˮs8p h# "s=L]kWW@m" RC3GĦEJPiC*Y,_.ˊF<@RơDhF`1nqXmU\8o8z$U/ȑNjTb0p]{f"TS֓mqmx̶?"ODX匴(c9+ΙkYJ91>kmm-cWq~{=(=|.Ҕ}kᘿHޥ0~ ?k|S`P e&ž% i6k~,г|)=Ķ4U>${L爏L0!58 ȚcG!-|LRDF"8`rG`ɖ (e?hRYb[Zz@sxV!t341A_yqD"[pՅ\yK #%^Ӡ0/x4uۆbpStGu R"\kHJk-'TqUӷz%:Gi"9J]=yU:!͒?+(XٲW~VUm]Vw@`]<'ބ1WGu]zT`0.;%+5*xOQ`#T6C6e r ŁyY.\W2W`]N7 &14ƪ=il7-/}Ph{V~JLt}^"x`D"4p&"v {.FFĽ|b/.>z`x ]lIii&S +7 {sРëpjK[~DiFS N>2O #@rd Ti!@Lhq/Ҍ\ь!9-ڤ5G⍠V}}i3Px | sJCZknaʦ$蔘'C4Rg,  x\b 2(^h| \ mI)lK?(o,ۛ5]F1v mlZ2*ܝv6zLYj7<tVf3 ɯ61,/\r`%e]]#7bEWA.HnF"PRˡ|R;=7aʫ4HS$&unWldcmx"{ӰAT{v)TP_2\vOP3zQӂmųO߶Pcc!d}/Q N|pG8僙cu)EJ0H% a/. ܝ -|FpZsѾMZ$XKZ:qQN2nPXIRx -5ͲYIK͈V~zR_tc1ef`Qb] }BXh^0IlȦhW0o}M galykHEG-J gLV/@oY 4[&;%c%o)54_`A<y5үI:ѓI9_#C{sƙ=] c4Jx62<5$cCcGJd.eyǍUq#֨ϩSXu1"C=QnyyLGǍJ^péuZF7k(υmnbGS§̼+6p05[xŷ &}Mэ`N>56IŎ`rUgމTn*j@QR Z>CGga{]U/je,m,k'(V.c r:p'u C":7 (io }Bk)6LT]x"e5X擠|HjKe }19fdZ^ָJlMI*OIkTȆ.Mը#I]FpwF 5w$~Ww51=TOO=WU>۞xC].ݷ.-KY9d_ mO?wͺ|_i^_ ?w R[B\G_K-y@HyTyJ8x|h A3h6phDx$4 Qf p4'6N1Sn~2B6BBY`cc "03͟e&mscY8a"q.Jf q.C .uq bq+4.&#5Ńxx "%2^G-aVo[O9BF9, VbW!^k13 E)ʬfQ Fl2fhl1VlbYvbų,{B~{(]<]C]#-] \k6Mq)z8B7w;8v.eEH)G7rcqn2:)n3LkmmX;s]1:Btv%GRtqkmufp;̿݉]>rq{={ݳ̧Ku_oE8-v-qKͥn+\)2=&n{f.hZ> |G{#hydc8t>|O@g_G7cFH|3je{[6h͐dY]}OBw˵d;n8̲l<GZNX<[ peg!-G$oYS,K[#|i*EV3/\>ΰK8_ﲚȲ~g8ǿ_Aտ ]':K}P+_7!o;w}(S68KH"Ζ$TIIo9r\9FNr$9gir:Δ3,#gȐs$&iV.3dr y+ȗE~?uDA8G`CtС:g03ta:BG8#EZd-Qh8WKz1Rz^nz^z^z^k7 HoқpJEonۭ;;nk^׎zDh}Q_H}I_Eob~~b~c~_"[֯q~V]p.vƕuBC]_k_kt"TK/2˵uGn ҍMͺ݂Kun5n3Swwn4=t53%z@2=Q D ##H@jA!!%8{E Eo[6趢 `2}b4lq"6`yp%gSx{6= G )֏ hoj=|Bj?Fp#++bmCZ?+Ip\aԛGs^CG ζ\_U>dŷsl1[[c鞿 /{=j},߷-qVJMbsjry5T*Gŧ}+9*A kmTI.vU'<Ї]5fL܇Ϋvw?3{®vݍ1/ҙ=p@1C6zhY%n~r|׬Vݹ3<.Vmcԅ*ׂxWT w@ dzϑLL{9qع1oTp+fH0_.Y޾翾?Y ck_s/kꎟgmïو'E=g9GMozdZfc[#*7"ǥT.r6M7*kM*QM fӚ1}jWMOVjJM~Po(ғզ+MOߪljjMO?6=}f]O_6=]SmzzOjG{+5QRj;.d|G'_{s*᝟g5΍C+<06W\%>56B~\O\Xn7㧂ǷteL(~"C?]z˹]!Ok.ͧdUc8$MVYpQ5]+Ek.@͑6dTB@¤B@"2dGLIH)r+:r'ay9Ft=<^G/($җ2.ȸ &2'2ZQܢ a4uH9mtnSm2h A X#+#eE_dq3p{bdEZS͟&Dt a)3ϳdZlV2GX\62O桝̗Hb)F,(ʹB)A,h E'ňKRDerr9r_%W\-W[;5kZ4:zQnD[InB{YnF"xj҉Qq$ԝDRWMgM/MM7Mx| 1$gٶ%aJ6$'C{6|l* $c:2aS}R1^ۑz$:k* ] ɻ#Z@5@]wJ޵ya]wF޵E$]Ht-":k>I"H#:I':2d\qIu4Q[GnGu־ZGkMuZkUrIeM5j]!dVCHFSmDNu,313 3)339j9YdSlj!$Q#H6":*Є*Ќ*M5$jIҧg;mL)YY$0h2IIMRLHLR$E;=$m1g2I$?H~$y,cH~v'ٕ$?#مgi$?{O!Ap2'L"F3g(9PryL$قQQJT5;pxBDC=5}lGΜ3W2D q⥋  9cgZАgehn> 24,CsK340Cs24$CsGFE]ҽ]32/ډd\,Ko+xvI#qNt=OOԴ85 qv2ݓv`O\k bm7nE<ʶ6&.>f;ėli66\QM6"V9msv퐛NgM 2e0^Xʔ՛Nʣ@[-iCkc  x[QR}T֡Jm\kZ֩F6%ty.W.?EW!@d sMR\9b\t5pj*Ufp魭\źڸJtsAFZ0o|Z5ꀚWkV[۬k{X϶j}Vnc;>uFz !ŸظvF=W{nR%YIu5P uE h 5P@}4ejZG U VPu:VN}bu9DӱtW=UOgt:.insOҳ2I3(BpY:k۶m۶m۶m۶m۶|xPR K)&ŧSVIy TcyM5xP} 5FPjJjM5ՂZkyյ\[k{i 4|ݪ;izfN t.uK9<8`rLkm:'Ssz9/\ses]nM%ܕ{r_y:ż7vˇ$_|k^.SEv1]wjw7=ݭtVힻKB$߻$SJA)*TR_KKi+e 2UfJY/[er~״羖_;kuźo_a=gקZ?[Tm-e [ihխ5޺Zoom-vNynEhDDTD\$DRDZdDVD^DQDYTDUD]4DSD[tDWD_ PxLl,jflnQE\MC?se݃aȈ؈Hȏ(Ҩhɘ٘X؊8븋? 0ȌLL,,͊ڬllϮ́α̙ϥ\͍ν<̓<ϫ͇|η̟P *b*2*rJ*jZ:zkFkjkkkk1\z%KK'۶mmdb۶mb۶m}TWrgFy1hD4ʠLQQ "+!hMYMkQuQ xZ2ANd%io@Fb wLtddHpIL4BR%K6~l^J,4Nrxɣd7el;IfVelv̡Se.&tOSdME4]ZSlgB6r';9Lb3Wv [TvӕtNpc{d +K>Y&ne4q'ٷSOAgpp9D/aΗD]01w9HQQr\(ӵ71z|3n ssS8388󸀋JF>PYiJ4ZV[9Mѳk*iJA+k&hTUi5͡5zo-hMZO:6.Fh&XSĞޘ}jO{Io]s@Kzm3{KySmwY/8wD'tFtn&L=2hsI=Nj~A/y/-$ /-u Et.Ă]j$6ҾQ-m}c/G^[[>vc11A&Z~: VL46ӭS SLKoemriH2;{+y[e˲Utl]NstJoՒL^*ޞyh{U jq5r]4%- }XXۥv-2, 6+:ʮkخ6`#6a3`+a;vHb;g{ӫ{'λ8_-᝙د.>1o7rs~wwe{9͘0I>;nۻ^ۻ't-=픶|Og{xwțnjVt;.qwmq CK>_zԃaIrރ >zSԯUngF}W#":>[z=Joc~;ޤ'N7Izizoewݸ>܏ x1<'P$J[x]>G{Az?$1W1<'$/O}?g,x/r ^_k|okxoӏ ?;_( rr<?_q~2$ڷ+T иx5⟸A?3s7:?g ;x6~q~6"d+ވ/n ~EWo[[}/f'ފ(&?"\~o/Q,n~/Fx'^?x[_qx$14Gňբw}Ţk n)r81SB{ƻ텑񘀉b4+hvӜȐ|,rc^TȋQ#*B^Ete,fUuQ3*NcmZQ%18AIz(Nq=؋}؏#838s8b$J= r܉{p?ޛEKo'?w_ɯ7~; ~I?JK'OIaY<)BH/b8:)AIJoR4>)CHrh]$I:&ItcTK &eפ'IP?Ŷ7/?` a0bc&b&c %3tVl\|,B,b,reHLLo̔2]KK:Y~5_%WYgKtVՕJ~5unZ_='d/k}ƾՆV̊kc+g崩U*jX-mnnM[[/ml6ҵeZ\ӡ6p[jKuU:zm{lvT'i;]I?W:otwik?h?h/iojW筽`0{Aoqm:ڶm۶mvN͍'d8*W~8'{K4. -h9-j imkcm>h>j/> xN.$fFd-}D>WSR0(oOKT*ZeQr-jVjR[{j[GHfkm0l Ͱ4:Eh'-iEkxv䅺Еnި=EoЗ~g`0a g#h0qgdxiLgWl0yg Y䍗e,g+Yװugfmlg;}q#嘫8INq3E.B5sÝ6w=x#<9/x+^=>|ES"Q1hXxIDId*i.).Nr$W$_ P\}y ȿ/Q}L'I}JW]tЃzH /o[N7XI+eZVX[kguNٺXWfݭ^X_glmͶil`ԛ7 1e>>Y:}]bXlz]⠱1Y˃.?q'AmD: ?jAP8d`J ` `٭,X @-Q1 9LJD ""&뵂VJZYhUu{RwZLiWc!@ j,|O9!4Kv98q;.WqB`r p@$/\*1(hS`uۥ QF  FU HrB@xv ,%@A< Fī@?*5q,C F>/d>,]`D:< ^#b9`DŽq=#b5e y9/hfFA?= $30Ņc[c5cjnR"K(ᅳ7sYZܗ&ddeOm"څ*-+HįH,-o@v]&eEyF`(WZv0QH21^ aLG"TRjH(RMi&nY4^i-d,BV*Y-kd3]y$Lh* A=v!ɨ  6{i!n9b(j-=ZC[s-mu끝[A(mCwЋ #tv )͵9Jhނr|u ~ax*69`v"XE ebPtV. Wn(|^V("L{1y (Wiu!:T_^7Q=f&jz&wȝr-Ƚ2KfW3|OAyHGQyL'IyJgt:RGhcuׅnz\OC&@5n#w܅r7܇r?x <0#x6ІHkmʹTWt3KDKո:\ks܈sn͸9TN܊[snVZSkimuw@zbfqB;.ݨtn6nȉ HC/(itL3FzMPP,e& CYQ8{`wTq9!'唜3?iZP ia-EZRKii-e\`_")6JVGd-YH){^󢵞hE;=/y~ϋx^tC;ϋ ;!}XBW*ݩtѽO? Ҳ[1+n%{޳s-H:tCU*cr}ܖ/ ޹Ȅ;R(xO"q18x]}Y4O_Bz7; ),u0)!%EYBV`%VrR4CS[۰;S*Ie"UTRSjIm#u1۠5rDLAva7gi ^X"+{q@Ki*|[p;zdЈ52!1 )9| >g_K| w?G_+~/IQ:]d01qs'rg윃sr.y8/'s>N\ r!.E(\Kr).e,\+r%U*/o?i#jl ,Cr"KRɸvW/!<'*[XregkH(rPNE%2UTPSJ6ԖQ'B]'48Dա =D+I2ZChsyu?u]W k_S7o.?\+J}/N;WhTWAi¹[{u9^ o5pO)=gx n'm-sz9i"ndjm A6؆PfmQ6XgmMI6ٮ+* uZow7D=_vԧ3hw l,%jW`O=kh/`쮿5_94B_b HX{s ͙c .d\I7?{,jhMD^&$!cEob .PA[jOTq d@Pf _ ZI̝u^aJo e#?<@(;bwWG]>cr _Wl7*W;=ˋC1 id[c !ѿYh?Hxc`d````B`R<=Q!$1Q( $A@)dB&AR۲¼-xwOF2oLD`nGl`?STAT>z>  w6$\ ` R a[ԗ8<(I!u,PUu9c^?!lC!:!Pxܟ5,=$?d6;{$ o=UQRU 'Fqi,7+<g=P^Ԉޠ;@𑦖zf'|-> M"b?qRe4]s\\xʦFw^̦~7w(:AM(%E{V ;G,ݵ') +8)пkn,U,RY7,W6K1*=Kai϶} ` _BJ!j a\R59L d+ϡЧN_lx{XRT)ExZ/tyx_ܵbI~&4:MK|W/ߥ26Q [gBnTq!ЂbݛGVį'\.A~*[<P<;ך3Vb> &_}aȭ @Z2\-q9a'?ƴ%q3,NĨ#~Mvw;yg!A,94ĉi-?!T5Ԩ ֓O5c_n[ַvmbW.:łU#HIː2AE  DcuAW䭼~kq->% 4] _AWL{1W kv'W'E$JJUJr䮄 0jfY'UL}l֥#30#Fޑw\Z'?M7:ͻw&E7[q$&Jbp^_^ޕtm+.y^XOU^M5EՉhIE0R-rEH1twl0J9@WMC zt 'W)I$ƀ8I/s\>n])T4ۺ)$@hfU)"+4Wmxplf.\?=`7k?'iCB9 HEJOug3/Vc1I!9Se)/(i`\E, v$C$K@iL%_:{JH#n#kW⩽. B:* E.̷ NG3J76eFQtA M  (r@Bݏ*nao~EAj]ohsh8=CuAZ@аS{M>Ў-5[U##*]u '뀻ޙ̓xa=٬hР: mmҕ ҕjGyO 5c#cոv -0> ]$ڷT:"LflD4`2&_i)![N&xޡ+EXj̰8lq-Z\E:Mˈ ]ҺOp!k..܀H]*\]I|9U]4v[qyC&8_QaS+ DZA+3riwcv%cc})%S%禌W*韧 = L[_ZpqFώJԯf9 `R';jKZ[ԒSaйy-4katY ԐN sk٭󽪽-r"*D Q.*J?*J6%?aGJϱvR҉vոwQ5.ZR${BW1MHǍ?P(@DI0d3I-**V@ r܏=߬qEYn[9.{=>{R_\=Toa6f@Iݡ?>umV\Db@m${Ծ}' Y_:]ƢI@2sX7٢I02`B[5m)hD| N9=9w,{?'EC)Nq/iT{3Rߺg{GnԨc++s` Rɂ]q_]mqFK1b!MK٥-E@{7Jѱ*|:8-HI? F ?ݭ)|+:mv޽P,/@&@6cJMAqFmt‹$]9"6dS67²۴9#V|\{Ox|_)W||y/i|:>Oh&׆kAcc?'$ϯ==h(B,]_4uKG9W2sS/dP:&1kCs,70N:n.{q_$cxJb=ռ]ʿ! @8Wi3P*4.hĮ0XM#JשJ`w4& `aFF(-x?rߒ8OL:"ސuGEffV~)[q3Lw Ԗ{pV.sz,)bHTP)*40Tu4%}R> C:1nG3Ş!XYD]{8.Ie2sr(T*ť;F&\βDKβ[}tC jBΣPJfAZsc`8,dB6ҎSJu(Jifylϝny Ƙ|ja62`ŲGH‡Kt"O۰?axm"EW1@zns8FEnogP@/?O'/$XKO3Y26fgY H S\/gHiT8hmcP,19DUe:%H/e/$]g=7C4=lEXDfʟ)xA;*i/D\p"2r+ye"̽Qepd 7,gY,86)F 5j!/LڬآH,dJ %=e.Aקf菉j5=rX R6Rkˠ1̯&. `CHRS]HAC^5ؗ!j&]N@ Sl&݌`e M1 BW/!or҃ 3I" SǑvt +gXBt\z!(YM }`zFQ+Sӱ&!oͶ1wL2~LM3i'G I ˢJxT#j"yQn j3u%Mo[y2ZleHvBF|CGg3й`b$`OIMR<2]b>L+z+7lʼnۇ0RɋP4Q\J`9ʐqIANb?0Xl"Rr=G.<"F?;vG/B$Sc\0誨JI La\,U]d(nhyD)NLΊaxģVDZ$(N(s"P4uMh6E"" Ey,L$ҔNg K\O=6(wd/Sd:鲟d')ZҰ['(CZ wbC$t`*i $.\N2P2 zC.ەU qvAZ ɨ(*ځCugE`w-\Y}md - j@⮰,0/B,`{f"vdz=%Z/@FwCP4 +F[xi!9l97y#`BՕdU% *5jܸf]1DkZtIi~3/u>:ƭyՎ.M+7L?K)6~O=&8t5~'Ȼ`Yiu1G{ w4qDUi3&8S ]GZnwN7lnɟ,bvpy쉧ͳوuh_Կ۟WWkGg\vڑ>Ĵ^GGuѱz:n d'-Sa-Z7aEr[כnI0`xGW q(])&g'FptaQ.9'{إ}2O,Õ}Q#}ſo'E_ 'AγߜeNwӓ>o!mPN݈: udw n']4%2&ë́Z2kC5KDv,zNbq8$tp, THId8Cn<1-)d+*Y F*-vLH.WBQpBۏ6̕'&0RW *MhҨjDN)Ńt=vg)Gc$`*&cĩeK.RŐʣYjzmx!Rh (c[=yWO}蝃b4 PV6 p ,@@!|$q@PL*chIJ49 433;1H8`HK9% V%X*YGUZ2.nq1*UU!H䄕A]@4>vi| DFXY3:hs -Ey)fR-k#h)$k#=Wn*S 0J!e×U *)BNԐYf^Fm96 obӒm[okM_MFF$d SfV*~1tv8].a+rku{ޑ|#0u]KpINC 42g (kfO@ 7@@W ʪ@Ko]U}jDQ-C@Ӱ\Df[qRv27d0 SS)%PWhGP˴}틾kHK1B8RE%kƩ]!'DJY"x(®9 +54̭  )hY\2iy(Bs9[wQ\ݩx: P $1v|nP' vejk T,Y30k> ^7x9@޾ l "@] 0jۃ3k{7EF~\ SVήf@~JX"2m&.e3-6SuSK-no p %4Sepxo~<Ϣ .TX4FPLpԈFu3n4" "Y~TeJ0*U,v%_Z*)@sNi )p h(Aj#$B wx~Zhkw>f|PPw(m3(Ru@XLi.  'ơQZ_Fk\wr4 `αtRi%pjճe,Rv[{Ö1gm{nw=ȁ>w>C|#`YsLuL<#ГzJfHO`0ŇFo=N?iHv/vJ[.G RLC?I3[ #/Ք*n ^0*,t{򩦱9 cM"Q8cJجjmS4[XeWaeZrP>?9W*M;ՍUDբr>s#wrT55.y72NUzHi<;y+G=G&'S<< ULqJ2NBS Ly`sfX$IG~%N2\EԳL뽎CEXep33<6ݸ{?eu>} [ ~WPsc@e;r*2 :|cj\;R5'K[!F-ʹyR+x!n)s|{u}(@ 0lοct˹qLZR8okО]ϾIJvM=AzZL>/*RI4:C%J+JvC_# OwjM`j@A[6(:ϓX%GV ޲o@o3u5Y(򣰜^}b-R{.ºٻ7I郗(\ۂs %6M٠dPUr GIЉTNc\fvEw3&v=F|vlo.VM3^S.%ֽ<<2$ˋL` t=u jZP g \8-h\t Pik^G;se'*N;J'*$Z! Nf3!"Y~jYT{++s#Y]$8vX,9e'rosK_v dSžpfp$|w(ϜP$*)àg~!AZW,Z(\HI$Vr+"i/C\8Gx.T#N3l9͙?BlBQ0vtn$~I[RARaef:s>Td)@L/d%YylrNCxA ,Q'0XF'ZG[4t ST,-\Q;r%slGo0&,yE>71MO8xE~ϳ?WqwY` fHhh#4وY Ʉ"(簶r\:/lgџHZnS"ߺs7`wwvxv۰.AoʠY #;iyC.5G#%b=݉"@`=^a^R 3T QR儬h/ |(d}$E:s1ff%g03YԎ+!Y=<#~<5]`}Gz tGؽRPw:!gaNi=ڠH J2ݪ J$Jvŀ}Y$Lj\[Qk{fxK笂P@Ɯ54tRMVQS֞I3^ w.c1:sA\@0 X1 즵_4P!8 ?uy,CIV|S0^Ӎzo L|F.Ǵ|ڈ!B0ŴAq(QA\\2\`0*&O,tLS9N°bfe2IxI+fت!v`( bS4Gw.v US Ĕc0yV^ޤ5(;Uԑ3RۤZ] @qrAT&Sk1 oMи"{fDTHDUW^?5{˽[ *^DW*7k^jJ6hNۉm81z&N3{[MS1,ťfB>ٟJܟFnqEd>-SI@$?7ȜL`-#ZhoE},."q: Cvq8C]A:c%c YsZy:Nh@6l5_&i9\2W@2FV` b⬨-8uI.ǤI4 ǘ\~%ٿ{˝#{G )K,Yj򃧪c+M" ҲqrM5O)J DTi1EAl)ڤ2-1RL&Xa)M%6F0X/De!mԖį]EkkGeMTy͕ﻖCW ~Zo\iuxbx( "\xP &adUJ.f?,5-Fg͐qV gΖc<%9s/ #GRGVCNpcM.-WFŅ݊2y!`q;5`I"ߑ,DmWM 8٠\+9 Y=&Nӈ)%SX~`YUm/gu#˝!Y]Jj-XfYjZsVp L9†]߬ڍiйѧ2s<ԿÙiP5͙ 4(h4czȴk-\"d ǦHaK-'co&9ϬKN<ԻQmB;K.ʜK6ޟ7v;LuY.HtNOr^)֭ 00!9$apF8P"G!'[#X8N H$D*l *e΂/rYx,5!ZnR0NB&LZu^6hWvt!ׇuo u\WSN5kwμɥvz@ w/4W AA2DlHk2"␉ݥG t!BM]`h 94̠_20 v$0C_[,"iސ-JABXAO@A]_Ic5˔v"|˗PJJΑ:m]ˎ;_K7\R`|VB^)2#"Dm:C\ek B.s8!vn0 3ˎveDۚ 9h`SsFOoN>/b dI~{PB}ݟb89V|=ԶRR wB֯i V5ϱ{ *!9wpsR&|gͤ\/o=ta+֫PKꥧ^;빷hNخW6EsSf Y间CעQaƂZIb:[.=I-aUoe6n*Y`> +݋}g&^۫ a7zcRkE/S;m]ˠ~+="cR#;~(\o-i-SK[\H%oR.ʭ] Z哖2`E2J\pJP 'ؒH6"/ 3S>asn~4&v;UT:ҵ;\㻒gU; TN"'1(Ou$P98sbj[״v;A;z%laBa ߹BpRxZktTZuԫw͑޳C :өbfӁS64 {NVgHl PZsfˆ9e 0!'co~Qm;Ďi9#٨2h/@aYh #gw5:o1 \yǙc4~ .gѽ-D,NQR $SeAU]ke_p®;iRJ 6ZG??`59#L)5!"A4{g $m[ "x'S2?˪+̂fd׍,<]EbDM]q&~R>r';Z*#0qzV'Scqg՞oQJ_`kɭ#lڂ3ڣ`hSZ(dH7ܭ=랏%ႣЌ &p.\ap ݕ 9S JF>d"P="p OE=z?ᡛKKy.v֢q]8:(R2liWj ħzi2]Z95= gWmt=ו~l&^a_3l [E7I[)W^yV 8By!khgr8k';W6]g [ "$C*II+T3q>0hwf67t3Bs-bA.e ɟT#b_0\J+ {l@ˁHr$Ä邾W%¦~vR:!DF",U] T~hVxquRK*'冉 tcJ,`bA@u*qE~E+<<8NDn< T - .}?]3ĺtG(q䕕nky|Z1?  ɼ4ۮgwU?0jo9 -hq3 ?vLD4r~ըUZQ)ek.MvehW\vf"+LCzdq! B X.)H9A\k5jBc00+TʹrNN/ H+U0,EdAAA)DW>yW88ppa_{{iϣR 4 qJJLI,./>H0IggLE H^"1Ѣ2EECȪ3 rL!suP72{  AV(JD#BPcIPT:VZKz"[" Xz~t_@(1 =P[y5<6U ZN,k?ٳOi6=qɳ ;s=q9[SHq*6yW^}ZLxP4]*[ N>Lf6( hfӢP%y e.!MHrJϑH0͹/ c9* rjhJưɾ(#Еq_J=`n'룃Jҗ*NR|5z+ zsX}j݉*^lMzKeʪ._UjK}_P2s6XvN\;+֦|bO[bVMzoV}yl Y9Yc\`5 ӫ@w:WC+ғqZݖP+2[4Q:OgsǠVApl]u|@_vCЧ"Dz ]bFb8'+NWtCA8c%H7h`" ‘,'GzTr-jO؜Vp)tByP>tyԚ`o}S Q pdX\j&ZpJt c"+Z(g;-"Rnm pp )#>^(PG\l jZP~|Êxؑp%+ش' .Q$ 6ePKjߑ$pr8;LK/C-6uĩ6>m6Hd9$> E7fOPOod3xՁ}wSMPoԷZFX~,ѥ.L L]"*p( qN51R.A\` v'HfX)mLh9c|Vss6Ʊd-fv&?)][@(;3w_(Mpti7 _P$J-^twi6U m/ R2*0Qr[xY-d:B@ߜ\3 SPѝTG%CZ,Z|LĔ eÓ] 8GYD7A4m30(pK`9^@F O&-Uջ Ed2ݴp建sjhF9Iꓙ3I ( Jiڑvg$cI^=pa)#6pC&FiB)Ԧ̕tJ;v/CdE%\j/sŠgB8h[[i1gaU-xUJNo0kJ3+ =p>f?ưK$%$j&Ūr̅ T#QN}'|g? X8xD$d!x GzBe\_\`phxAdRUvd};#]6#.@ e JjaO9,e+VY?HFƙn?F_2."T&W(U5][GWODM1X@$)&R4"`<$eTyQ)_ko?g_KO@EX"JU_`$H6-vS. 8OJ$oTj-Jz$cV7x 8RBJHgǧ:RtamdbN=ʁtE򔾚A.2*bwx#2p񪷥_m~2hB= 4zFȌNj\˛4t'7-P1w:2C_ kI IF6tkQt =YAWnGSiw*Z-#xqԯ8W5zG%^ Ύ68-JwH:WR: VKRh=' WsTWdoWH>s}_rka]/ Ic&AQ|wӓҾ?``QOJɵVq -[q;vR  m/ͳoSmyɷ )*TJboIh-RFF.pۚY>5B\q``N7coU5π9#ID Jr?? &.8v;0åEy!)A#;$Lx6*$7,/I^U(VqMP4و:"}# J,SܝܷbQi7ңz&.ׇ1. Y)XSݚ>\dmAp>9rկEӌm6OFD)CRKѻ-ްqMwƬQBMP;ߴ´8upzprǢד19Z4"˂>[;Ň 2t+^֍AoƱs A^Ž! 2nOcxy8ꛁ7JHy7z`ݾB.&Ҍbqys@" xR0&G<q@eQ,g"J(riq^9X,9'/=+XEj~d 3̱r b̎}s"qo9؞(vb9%)KxeoR$X^Բlwt˜0ʒFmE`_ޗ㠼GJcDrB@qDžMnhS{^֞~9iz{cZz7Wjբi|q3̶C~Y-U ^c$*ިbv2/ԙ=`` VTP]pN9-#AF;6H we+B@޽2gt:cu9n31cXN@hT9hpT^҂Rǁ/,Z`ʾi@; Y,I)R%( U:p:9 [5-`VԒe+DkP!?dGC@6 RL-yboMTv\wF3v +j%mzU UVzRWjhT_=Zmtf:j{KnJ /|DV:M,1J[G Wr=ȶ#PY}#k 1SsHs6"Ŵҳw78AR4rGژ MlCpI1dVT K N0DFf.q$E3,>˽YR}~+s~:X#h٬c8AR4rƄ_["2imyȷ\&D-H7tC7)+nE'Er\#DzDC'G\_ %R\T5Zn<؉Sgm\s =$ʔ*F&j7€  f`V`v:ppPa&aa he\BʬJ4* DP $+?Jd'BRJZ&r J*Q+F&J jZF4Spʵ5u Ze\A370,)̘bdN,$2J-lc3=7;Im.piVƪG 'o-Vܰ=1 yviW]ސ7孭y[QJkI'XRkC4# _\0DIVTM7b !A5NͰ?gMl&X~@$)Td9\_BX"m .-u]ttQ`uYyQtV@MrV@'V <<ʾTt9_߷!EŤC 'oh\K/斾ʚEEK4hK C^,NM $ٸYX-a>D=23333$I$I@$I$I LD4@<`Tiq~F5=D`NTYi$$^=*5mΞ?4ť0 OR '^ @DSunm&`{H$xh&ϿRòQi@uE60A۞pd+a ƾV_w$'^퐓/=ڗOa4 """"(- "gNOn~$y8zeuώWofOO u]oRJ)0M+K?r1\ٸm:4K '3333KzQ}ny nm(}@M[CDDDD>qvLmmfIF/윰%ҕxKGUN MBS`Wi `Ԅ$czw^>Eq4IF '^g  U@%dA`ba?r1h!+Qw˃Dy$G\$\vՋ]rD+xFPRRVSP-7 "~#RȽ(lml].9i?1OOYJlEbTf!W(UjVQitpy|P$Her JjaZ6cxz[w'\&&(ɊYi#hPI pVЌ <53 Zٶa-]d5bԘqS͘5gނ)μ ,eEIa,QW0K8$uG(.IjF8@ҫBa(E! |sjOyb xF0zqzXJvihMZ56ϱ:(ܹ?z0rzl`k=[Q-wS7L$I$I9xff$I$7uo 1M ͉bRy+S@q NTJ I`Nt2%TVc¬Ȇ^]La،xAdEtsvܵ}$II[,@ 4~hihgZ6 Fq%Ho-]O-Yy wp\UÛ 5jkfwn צ hm-@E /e@G"p8p$1a>|]0ӕ!>'?V=eu9  WX?YIjpV#[g- HfXni?(z&Z<, W\}|KJo%`-o )a[hɲ֬۰ik/k WN6g? :lh_Mper9kwwJJJJJZʰAŻۥmLôF8KїƏLF>@ˮ]_ev_v2eYeY#Yc1lz~>_Cy^xu>GHB~ͅWβ1<q&$#0S#4ybW<-"ͣ(Zkǟ`.Ħx>;T+qUl`_;vQz*#RBf)^-Eߍjm5b@11L{. 7M2AALF8#0uo*3JȪhdPSRSϩuQC9d0j$E3,-#c[hɲ֬۰i{ռw?࢈roDF8w쳫p]wG'_QW-kg>\ᄅ>bU F`}8AR4rkc@(Cƌm=RBMf++sL?8&v:k.C]:iN&y ]ܭ➻PQP(s ` 6$E3,ޛ6ATb1^>¥޺_4#֬Xo\GmJuq=G}Ev  vY]^ >̱e#-{rM@.?&֒ jx(9_N>d +33xNGEhsJ &MJyv"@G nsxh&q(sQ3a1 Twx{x篂:>z&='Up`ܭro\Na!!X@*l)t+hkl.-&oF/ ]OTQ;.)('# W^)^#mEV]+C.]q|s1{vɩ3-iJ4yk:( (q4kٿKּ%MHYf4@2ts\Tcn ]9 KF|h۟멖IgL-B䍠,ۻ(to"=dT[z:nh]ns7'_jXoMWl!x7]Qb4DZZ?7ꗵj&7GgގX_⦸Σp~b-9a\?uSYF|9?UЛGa' zw̽PDw@apBc8ofjlf3hTbg J)RJj4,%5bԘqS͘5gނa-E\D "tΞ$7&'I--7-#}^9d-Gn;(PNH%la:r Bl :!a ,bYcCN(OKD[]ociw 2)|L2EJ+Md~Mz_=΅}&$I͓IED b @,O *`./ [DIVTM7LfTO/_?vyTIW@ e JjantQDDDD4ffffffGDDDDDDDĭ&D̝?jf[.mq%3/fWK]ukk*C[J)P 00lU3` EO/OxELs* /THWn 1V&(6t;ZÜr@)U.}MWoIĎHM/meE5.)cj*Տ{zwk,{{-%McV3uwk ϓ50}-Űfl\6=‰K#0f[AʪʹOFUkg~sđ=AAAx{hRd @6E*]AxJ(<"L?7`\S:q<bĶ1~LvY+-l7hݺOw) շD idEyPD eTPE u4D mtE*Y>053wptrvqusWJubX` dUdXNyE%<'Hq!"'JVaB/n=PǗFв:'5cdlS_Rjd5jթo;0bo<&ŧb fRlU"Gz&$( HI9؞r<ЫhNYSW1&ߥPxB@0j۵ɀ$E3l9!3WcKV!Y*@E{ dz82QV, KKnod_t$Sx%Ӿf.+&^o+"DZG` 3p9~fw<{ Q8q\(7ʃBe(' *B8aQ1q 9rɗR PbՅy""&!%#gfRk:h2[qi JH6*XLf{Sfӱ o%;P :iv8t؉SgΣmo`XR mb!Id b0M8ko_P uaᑀHe{I/c(,SɅK6=gp}\W x[>,=AA4B<8Xr䮫Y@ q8N'*564 b c")k,X\nR;lE~`XUx!FhblU-˺-|cXRWȌRTEcb>>h+h7nF.D5}y,01 #7*ԾR]Eedv{d3!C 2d(&C)ed=Cq4ӗ] 2G:']pq2|LI"8~#D;MW]sݍxזmT;voh׉QjDxEpO6:%BwNOkm!GJE~=wq#+Td$I$I{A.- p:b>hcT(m^D{)>(v7@'v&a Zro$nL:hv 3ӱ"Vz` xAdEt,AÀ: l^ """""ӕEyz^o[$nsCM{79Z$u%3I/H v,`q: |C4A>؅r)X<w8PNWMX؉2o.u@ c T.w.J~_WYI*kx}4I5ICl'_amrV6a>xz) {GŌLw^++/j !{/.0}ws𪍆KUqjى )S%lREr>ijPdk&O.9RbsD$(9Yq84>7*#Uqp̌*1c Ot$741_tz'3q!8N^Rㅅr%bhG>f1$0z 8D{,";n$ ^;YfHe"WW@]PF_.+\$UYt`lP^Us+di}ݯNS$WfN1D8 "F[:xŋD)CRT*:W'?RV}&U=H6>il͟KWּ.Kxk^7헼.oKŗ:Qd\:9&6銮zc`0L`2D_frrLVlz+IEeՒH$D"*ȁK7ٜzEl<ЫXg뛉̜ Y헅@5Rg_+2q!uUJ}V홬|8Z6\dq I-e~d%[3p QO/?ׯDFV_oh7q%ͺMޮoooBPwiҷՆfĖ9v'r*-, e0p zL7 #}1oJ=&Q" @w_"!2ȡ*:aXa8^GAb1I\bA,] F]v\wq Ĺ븁۸qwxhӁ$ U1a5S2!,-CPqb_;)6ۮS]}y$U[.^PPϝrcX48dE\8(JkH !<(SH!< gbÊ})3WI]5}ݣ#(5"B!jԨ(<O_D opm*ՇCH4O$SL6/KJVo4[N Gt\7pRzOg^{ £BO_qK AR4rB߬ڞ CI ۴<;h3KŮq%QƸlVlfALl[lj&C<;Q*~fÛ"pG~RٝWoVMpj=3Tv?ǚwIfW=nLv8 1YŴ Ⱥ_P @ cah\47H0gl'HfXN\&x3K9.{6U~{H]RggS>I" /6& (kBiisOqe2V7+K ^cs6yUU-2i,clfl`M82JdTȨF:4jҬE xV/ѿO45B0b8AR4r JB:hUYXؤ$K!=Bܥ8ŭ.2A.N MFG+n[!ddLjJAA};P:>TvO$~}[zUQJ`9^@F&oew_&@@FP 'HfXDIV(Ud?ɏVm ()$2^I &Q_fZvRK9(hjeϴ}|A?d7a2M4#4\)Gag@Nqkk׮Q ¼0/ B!҈F׷m: ﻊwTƛK\ P"ϻ\~nhM#(4˼Νmc녠gv^͍S]W=Z* fs]s)>&?ƮG~N  $ "LiَJ`>pCIx\&_=Jd6$IRb,=t3.}c}K_7JOۼU)Ҥ̐NC3ڶ5gX,F/be o& 8hyر!b۳ Q)I 6'ȭchҤIƨ~I{: [n^+p_ͯ'k m/8-S=OnKYH"<R&bXcBE1]򂵬Zi:GNND:uVgb>] \c["L [ CYwi (|$иzHY־DEOI9Ő"דD{l74'"7mfR|ܗ?22ݡe*JKSmHkB $vyJ-ZX M֚.(~v}  :\^BPAy@Yxu(߳ Jo3_@!PĝL<wČ 2#4Ni,O#˞$@[ė触dXѳ "$ڍa^9*;ϟB|0 (Q2r*a!Uc2*: :zIR%!Dz; 0UΈY4\"e3lU0dVL8QJ,ȓh1eoą_:GdCE{`98si`$5u NW<.AF{䚰JDB/OдsUk)ILPhGK<xrJ<:1N$JLZ0a7lȿƇWv:+13ɹI}SMd"!i<,$dzRSd@qI U翉z%=+^=ZT Xڡf:iO_pO$܅TŅpWގkxc-"35^Qǐt?W+ L1ܯ0 } ŏ%HNMGF)Ս%B:h\f昽99bqk9he:نL c5d-ҏ M-ɥR+\Mpu.CfYǹ^E7;ȲLUn> F|: hB{)K,h6){+Yb:=.v].ݦ5Il˛dVYY*xLiaTA9!t/4 >)~`e.C%ĄrʛȃjUYh- Ni%Wj1P%ubga&>|KLvUWQy7b*4)r!^LD[ڍք8wX&]#,1q;VX2 V5LHY6U^<`O9v/ちլ}Smy{n׾% [}lF-+$#yo^ҕTgXN8OlyXE|`9]?.(s!h%z|?mS/헆ODܨQ=e,'21)3 \9y؇rIzЄ^ňz\]3j~?1&! T{Qο($5;$,P1۰CY\+6RD{DC/WgT\br1DD.;CÅN~Uʨ!;Ix,qR ӄpZo Srm}'sLrߦ^cQ,Fݩ\o&"~6uS>1ǁԦn&vM}*LVV=qqkR{1<9_pǘRduxCwsy$kx֬YcM!@a/S0ڛ`mN&eӱtm>Y?Y )r:;Ԥə*81Uǧ1T_dZ CKsU8N'02E2RFWWTjQKÑݸ>0GT+qd񳐳/yvqߑFƮG+c'H)l9|А?&Me;F3wܷH}p~"+waS25;0*xHU >ꐜ4JT_q KV}O燣X]nUE"]Eq$[?@דCWX;S=+DG2mS7z#='dZup3\PF \ Pq߿ÄԱ|'NOOH#ǿR)+7LFcɒ9ȄR3T_YI e P= |_,c] Y_QO/t˥+t -g!CjDD$#P&])^眀\~IA u~qPHLSÑ^o5._`ԑm(يXBG7{2 %sg;ǒBVj|M\30:''=J-|6hTX/[X#Ƃ87`ǽNGϕ)єң(b,22NAh~QH-#m|ЮHv>!ؙI:V!0.b&485ea sWO!IfA;1808%󨎂~ ZExF `?N<}2g4B6KJgD.+\>ّ˔a!T{ÁmB eici:\sb3=9>-tv6rHΦܴSF юQGyj̚1iNb4&q2j,d-Xę}n623׮-}͗NL"CMe*,斅Zv )˵R-V`t.vvZj0l*&HWerW?}Cy FhN\GjK%s3)FiIht8k}/S\,\*JY> wĎ(O0i* T R" =Sۦrc%#Sb0jHmy}) UX>~$\AWk=cņtccU0\ qaXy*ĉ!ӼxcQ 5 :i6NӋ>x=)]mXp YH$[! [0eD<Xnb#geU5M׆tV#Zf YmOZfHm|VR#/R.fvzgE׻m&3{kBCI;W*Νl?E9žJ*cZapWeae%KT4(hX,Kz؍dۃPȉG"2Sm ̋qORc`ː _d$'!&mNSBbap{bAqg/k`H6}+!Vqi?G 0\^TI8$ޤUKF)ޞc]Aq_ia⠥mC"yT~ЬX߱.|\ B)UIM]MRg߮kLʀJo >^u ACu~ #46I$c# {2%~$,D;80S\ ~n'jZIX,i@6OH`KؒgzSk[ix NL^=mH(ׇVHVTE+]6:^r5< 5Ж</-;Bm~jaV?Qsh7) ub!}VUi }WtCYN]؍XD ~e+际mUfWL/G tcʊ}gz"lg϶g7D¬| =`]#ç9aXĘpv=e 42:#h^PV|$笆@.Z(yh*{Xlկq݂&!D4"7XuR-N+; Lm 589!1:ڲ"xl%1yattI@ 3iw#y5`c=50A'E0iUTc)`t6¦+_p1G]օXSN}jHt1 Y#{͏rLzh3 ,+uS Ts-I<3~Lg|ʣtp,±y \TTIiHYǐ҇EHhߜ3g䔒j56k8?<q9_6WgtbM窮?`^Q8?CJ+cal,?ltDU#mb?kȜMФJK`p}ɎzEk>#Fxԙ4f~$JkKwM)k-0m_m2sL9}=ʆ]>6wݗp_< H9H2O`Me"3fD)*_) L#ck ?ΊD#z-(}Av* JSGT=ƿƳ*U5ͬes cLL#m5hX#iInx֝?j2x_Մ!‘%?hU fgN^RaƐT`ʕ*W,Wn] )UƐT`U k6 d'gܤ&'ISWT6kܨI&M'TB6 nIGLbRI&M'0/<1VYbmRࠦ`Ϫ 0f\W 9ih(1 EOļI\7e-J!i(NjV$qGgT>?y噇5iJT5RzMDB ˔.S Y2dYj[) *\h03-[:4~\]& [rN2 {^ם]^$=\"j8!}ӣa7;UOHqOYhr 1’*԰~Ak =u-a= \[&X[:mGQ۹SXֵ?'Lr`*MhQ;^:P1wځJ1=oWcpJ ӾX0w(ʵTz5n0•֌< Za #TQًqguO?,Z-'X':բ}n`Twϡ[ָ*S `Ib?T#!}ݎSJe~wDz~Y(֜=œ f\7tXvqcePGԇ‹Pάk6XKQ+'#$}RpUpM~\/Ӵ)E >b8zژ1\?,m1P6{6K6 '٦P(N!>q* j{R2b&FOzAL2Б]^qVP0iСc-JIPєWU)JP6l%I$9l+W0fG]~I!b,Ůpi`y~ۛ ca;GDLBJFG#K6/en,huA lS=Cm$ L(#H:H>Fb w}!ݥ$vY,+`FKVTB9EaRA qTY#cWE?!c|SWt]}du/D$CfPx4fSh1$~%ed@Pl*MtjƂF־8uszr6QD^{f}GP]#" e#151rFJBkL:`lsuƃk<>N(n&6<Ǧ9^wdUZVP\;(hJJ+]RiU.\/+GIE_i1 ݍLBM$_ỹ:aa9í*,jPVݨ;=ry>/w Y . Dxtv5q5~nc h`X jPA.l6 ZТǘ }0`Çǰg%p.x<~e'A$D YQRI!,s=k@2TBpKrԥ)4)X!hlC*vuSU]m{W΃tC/^2fwcsq&8L1C9H BU&vl^q$֫JuUzF:5 #ȫ Šb J*%BmXo}-1X(8qtEc8C05iYiKG6e[Fb8s"L(4yəqcطk[X{hy}tQoIV7xֱM13̼};avoM.1|_>(0O_j$D09B-v`dANn'p]E{I#7TjB -F& #* 0jd˒Է﷼aj[QBslY?YS'챶rĩ> +P7[p;&D{!! ߅IoRӱ?,j^4 |b\\8Mbݖqb^@, u]J}`Gܾ%CYM^EDM4dS4e(G*QjԠ1@\VmeO;II%\Tijuԅ.'|m7+7܆dEt|5XN8iuUT M._Ŏc&N[IH)(ihYX|,W(UZ F@ qݠjg;ѧ-e \)Ws52./Hbd(nGS&4W@{%}O|x3Z55q-tvvkM H7\D-u~ju$ 2Cz\XI(QZ6RupjXdͧ N{ DŽ8,й^iByė&9!JFƓo7}njڛׄxi"nRAMFT䣁xljqIf}𵃼_]W"$hj' }"lAMDY;/j@lWJ9"DN*[P 44 ʧs\õhf۬B}s3I!tu4:!]W``9j06ĎݰLL(\3qqy=@nz7r*A5R(H crY,;z֗!+*z fȜ3WFXs *0_ɩ:S}ȧԞSZL*35S&EL3^u &}G*lI]aAH$] =E1b*+Mt %M`diT4sʦ/g],D3!`50f`QH4O6'|X*Wz4[qϸKgH "݇ALAC2&/KP^FC08.Nu=-6r!/EO$DNDI\a1vI&K&ml+VKu5>Ģ)U_ltE4lDPڥf0AɄDc'Q6t.}԰p8j8\S f*G/k /ocD)G2,g=ٓ2.zэk}ržpprq  iԤYVmu,UQMJѼ;eWx(!˸(& ,"b7v.|)2'Sۆ+_c mIO·}8d>ҧ;aZ u([qe{ƊdCau~ys]1c8ܤ}σV-;@xq21og2w r;$̡ ư%=hd[ ^K غ/h9(J}ZG;m?#H^%#_fjc>v.t Ѷ||Bxq37wfd q`c= w-찯=jmeVZ1,t2Z+< -w=+*3|39;W3hԚjŜC><=?&miZ\ݽt4"a2)Q~ŗf78I{$jGfv~hfnGOz Iݟ亮c} ]g8=NTY1d\PWyJU"cqƗ{ V;Nsîl嶭 U*_ot;'i=dgo/.ϜaGe'r_ߝi=sk6|ՀU \'ZBd2}Rπ.ެ8FuضK#_? r2իslp4؂bقqwFVPO] .JwF)0a˯ " 1PO v%Xx #= SͿvI[py3) K"d^k5cؠBrpf/]g ' iZWT\ +l̬Њ ڊvcYmDZ(>QCτWA-64$58M1Q{^4kްj^͓&j٩OwyOUd/3|PoY͜zO,)]9ɣ^ɇiM:gY=Y.<+BW@f=zs0J /'}24}U?``XWfSRHdD3`4!hOT)SNIVAAJPG[I j 7 A-H@ F1`E) V}%: 8{VVcnn/EK.򛈧+5H|{>cr$:\=+VilcxvR )Ir&AUk֤ h3c1wV)%0n?yQ%`]~@A_4\r% 4JZ-IHl"*ޣF!8Yhm,K;vrYZM ;KS%HC&%m,]5{Y=g<"I <0 X@0C_jX)x9/A%&1(JtBH偮?0#F[<cDL*fUUuYUM,8Lk{Z0Ր-emO{9oh̅Fl~_w5 g!l$E>$G$D!i{jȖ9@'ؤ\Rܘ4]X[WIl5MʯɃnJ=#+ Es&+<zķ>JL{h+?E ?C]Tͪ'OՀj~#vUF͸2;yI!v; sv+cęOȭ1f8O^p ^Svmk@Nr+vɱ,儉D#ՁcI(j&IM,e1e$B  @HC^o`}{d|࣎5$ ;5u*PAgd\ɠZn/Z1F -B, e>7?kst"?TĘ{Qskp1˜ ;*4!T__e*FnDvqxPfnT9QNF0N[bO`E䭡qjzRHiSW,ꈹ*6O*ǑP'֛+d|6+_u&OmMeljQqcٟ۴80V+X (AJ!;* EA\T o`Pli) O$he8*}i#( {ED/Q+0\<5e]$RQt?)rGބ|*/Gy V47(cJR"ٜI(/Nuc6E-9tdjͮBzOqVOe{o#6x!λJ΀ ;DÁT(C7 =rg4DR P%w$^4v=Ȧq仵Ot=mGn3R dYu[:Z*!ݦP 04*3\_J83S.} !p8bn^3(/~ڮ|@HBnMeI#WQ=x7@Z8uR| L'NKZLJkЯm30J~h-eݟACjA% 3nc41"_N@;I6 ,o;WvלI B9c h bTQSIlo*~]DIk+g<I  l}nJfPYxGHl13M-r< +n[* XJil.{)+憊a-O񹌱:z5:[OHn<ڨs DgXw"tdnwHMG$}k$%@"D"l7Nϳfizc"^Y:+{Pv]3_藯9~|Ϛ=63(S;rv3[]9j& ؙ (45nJni`DCEx<NW)15-*a2jp $1u{&`Z3*yVЀ769wl,3{t%6ap)mf]Ĵv[ 28Gиtc@cyb/5^m9,ÚJia)p$a],?1ՀFm5LmLqY2 0fIKLJ}ex:*|R@TNՈ>*#Ի!mCJšSpm7 :j|Fȡ.2]ГUj޻9uz1?r{+v_a.Yz~apˮR7n{.SI]2ɤs 4o|*A#9z.B\XÑtcE Vȩmr9YZe$b! Ւ,O( $OG=C~80DP(4!_޽ g2}z$H͋X<: 9H1z@9/mъ>2cchNK:oH@%^)wcFg!8m4bhH.b[NֈIκ:eq06rrŲLfaV=PqnIfaLe-$9Wmߵu蠄:Є{l Fkb6MIt,>lHUЬ>R `.#kjNao4c Ԏۓ sM(tfNHL[W=׉yHv͛6x(\N ,]e%&ܵm&!ap$9XGC!oP ][.!)d X꜔[/icˬn  ;ȷH]N(uj*@23MZ|Bğe,cxCJ782$`G|*a^|M@I&.F+gՆ~$40dZE 7\~kAIriCֺ'+I!41o ie9VkD =PN*Zt_#k+n "UU#rk, Oȿ)S)"!F޷Q 0Y@}騔c}n Tk(\S&@ \؝Y^ b f.DygqG!-[{@ppvK\@*8OlLCƧ:.j'DY0恲3|_?\r2R刋 Zd)J v8dcyNEcZQs GA%ͼO, !ЅY06hU y.u ܓL8,`jDy-T[.4j7<پQ}2e*O ˱r5Dr ^dLPCL?{@ubxya!}N42LNvG_",P 9$YNȽn7c>=[{[ubG!u^9 PuA=K}[{(BS6 G-K"pd UPHԫk`Uڐﳱ5n)M2|3XL%Z\=V-ֶB//tHgFY,P0VpgՖO-]1eNtWi,c8fF*r1f~"^|=dKפeJ-TE\tfY=8ܬ;2s!Hzn%S{3UÛg;51C/vv0g*U=qe\f޲W4$X?d]-w|3WnRubEc_p(T~^/6 Sj*3l@ť t m~/W\uF:^CB* $jF1?Ծɧ_ `즩@UN!JR"Η ¬J㬺Z3 * ;A+CNcV5F_[ߐ`=A!s]{f2.>vT4P~kR#߂>҉ԑSދЂ\r^^VIwgÿq+jɵe8=ұܴE ۧ:M|||O/d,]P[2`oc5qKs8`P=.XY6z!,F2o{# FQzŒK;%8"_aFp!KO8K7}ʠ\_D(op-BI/ɿ(V/0bF7}QM?{8ꞽ%l8!} 슛0F(F>$C=n2B:TKOdt]vyt^ٮ=9db=F&ySZ]ZG-JeKE`QЗ?ZHȘV.Bݤwfڨ`vb9&TzO=7[G'v̲F%_sՠV慭!ei~AT#F3UcSә Eũ>^ w`Vu6¬wɷ1W[:QF>פf-ϳݢG na/(%`B&/_ ?-s踿0 юGqBX\Xz9q#9I(x@̥%Z9Bh%eqFް4#Ŭd$<@/ō$-'$y8(rdHYa$^)5Cq8'h1ommK^yPGڣRpehٲzUM^6KA#͍PðTVޛ2Dt9b$8;6ra:]s Ζ.@EZ:K"tIӽy;cḪwW<6UV?4g~fP&A@+ӸxjMVW`b?,-s{!HJON}BVMEtC!]>PF'Kʒ P=)JGXTWZdǽ=fZYjT Wj,/}w/T?Jh}Pu0T boIz:fu}'E&`RyNGp`Ԏ/17FAsV }$Vd1슼\%G%~#ݻ @wx;|>]lX2Z~] Ξ ;|T8T di ?G>ԺHVrSUŹ{I~Uޓw^+OO/H'χ6G#MG5y 7؆G2S*-Ae)¸K{!{౸K^z2ܰ%ҳSvAE v7(ܐ [H+îQ$6}7B.MqRg {Ia-tesr/j-'I ҩ3$V{}`0"SnT1M\}v|,dz|dysB 7ϥ򆾺=K!;Ue}bAgSX ێ=[?xw `l~jR+@ J_O(6rBJ5 ;B&X- ٵ@i(cd`p[T!9Rde"\RTӄ&ec^I3qT@U & ##7W o 8V=#4w-b*l8uNMZR4+/AlM +1 )j&Xodvyi,O##kF+ mͦm,3I>3pS^&z??j"n5nhYFYJg|uF93c|aAp-`p~d-Yl'v8V( ؐc(:$4 E5 lLe*b !Ag zs]\^ lI l>7D66E:|=طλ2d;]겟CK:8Ye6<ԩh8{B}XmBx\xp8).9Q(Ԛ`IKPj]9^ޜڒ2*Ok/DS i{01D>R]SLÄ́o3X_‹os2\ʚ:Dg'X>JI<cE1 ?^!x0L:*aRYV"й*V [o>EOEUKǦjfsnߣg.,kgٿ:\"9юaSaK0T׈'u.#4,A9y{_Tx'14, sO6{#>':fZn}ͻyJIUgWO-)U ;)%3&>:\/2k<($&=TfP|cnO߰F`wvD\ &T~ \F/f);;d:;6dj w 'ٵ)F#X5v30 @ 4| SpFߤ'RDiَ55:>QG} fl|~u\_TC@ =Pw<yN}GG!G`=ro=LJQ^p+eo }۷fxɸ}5ֿ)_E&{d y>\:w}fc|k\dc&(_F@7 ]ёELO:`# tЭMk~*_] e7]ћ'ě&D<$='fd*v: {sOa߰ꊃsK4fa $F܁,&뭊;|Qb?0M3t*D7hZq{o?A|[xZP1zylS߃ڗ/1ہ㢫tZEΣo*@5 ^ Ȣ첕#+>UIUuR1ש5tYf+́xf%5iZ<\Z_U d4h˸ A0_`?\nPgVihupEAJ"D/&'B"lLjU) u~ U$6e pĽapZ SUӴVZ)5LLX'.KmcN\X1++c# M󬭤s%TUw#h٭BQΛwIk^\M45d"B }9镤h53yP˜cΪ9NF5BW-XUѩ@'hf$L˕9L叾:6tNyP\lLV3LzG{jO 4FC"QFjI*U+*h˜\E0 dQ{d>x @t}>b7cI&.#9Ch c 2p8FU9XR*#x/+763LHLpk3zeRzwPJPNQ a[;3|ԩfzRyt9srFѨaئ E̽ mfq Z^o W8ZQڨ̛礌Ȅޞ~RF(^((ŷjf_FnnǗ֥=?xN<|٩#E"JRi*}\bqpMz'fs`A}pK|\-ENFayAVGxV)y~ L#-k"LaE/(T2|5fFQA+c%&nnF% pü.)`/  <%qt23i_bȣ=`G7;XsWԏF2ǥUET!I-{gF,^b|0uvD<"OȮfI X,xԯA0@;ڏeoAU?|죢wvުmwȴjW!ᨽg2#_k-;U_k+ 0V`J-\@ǥ"hҁaX>Hc 1$F!Pj+ dZy]:1<~+媊e2aLbRKի/C?iG9d|6x'z@W^Elgև+"?YUaUa DrΏ`Z_D@` ` AyjlA8e p~D_%3$7pހ}r,X<{P| Y-.My&"C"kae@g./C{W͵ZhvVQHz\" d,7|m*$*VBKO`/%']@ =˵vs{QR{ u1x4]/_CH=tz걗|1q _1vPpx/<f,IqIw.#.Œ umBÎO9w˜k%tb~o6hTjTǷɭfG5QQR B#0^҅'-:0ᚡ |y΍ZхJNeI5QsHueeZ!q'Oi̳%-y^P#٫a{T'+m( u|86Xu7'5Ѱi"U&I^QIm-(SJ$.^}nB]n9[XRz6S^DI{2}UXTFgq4۵X/_W˼RV\`2nkZ%d:"9$ ,PN*>Rln DQ Yt8]ݍ5궖 /VspV-Nom`IWeb(Cd}q_8ah1>Ə -X(Z [XۊyYkڭ|4Z *]؜ T}Wkj?y\ٵ`\6]xåkz)ʌ^ܭI(ghˑL^Tmc-SNM1'TXZzUz^fzZ4iZi[ad P]|?柒ϋ4$eUR %Χ}f\ߵ5=K~^[yftdP NeHrQvu\aJSu`Xn,"'7*CpyWȒn'KWy#}BgzC܎Ċɶm'!:Ȳ>e j|+v @ˊWf0+f먛!a0j :GŸdOc8yRisGt%-c}U͢l:;YEd:/Wm8z'L&Ĉ?SM֐p.ۮu Y]zY q ZUS%ʪw&ϣ鶀-g?UN2飜b!_%B'\K:UY5~Hglk|miGRy?ç ][ 9<aUXjbٚT˪,hn ;A[F&d%h./~yW/^r5ؒd|؜6n٠G|QTWW p!QȐL8a0'd:!%Fr8\]awukqLCK5ĭIZV$.ĿED'rb E(3,*R=n>ldoR(XΊ;nac򜓬GԡOfV$GqIrL\ȣ[Sy IғJ>&&˞1UYlSZV|Jry#:Se Mͭ.[Ћ:AR=` .%Iů!JC,k3Gx 8*0hXaػ"U'nֿ l taA=UYh#Z*qtG~#qqWGN:)g; C FΤk%W#mM/9@ v"9Ukh 5lٴ3`θ^E,j30< 6э U4 Ʃ%ZD?'ઁ y bZ4IgIM7A`NxjMk݇w uxd[w0XlwUVǎ IRi 72^le ~yy*k>9F ,En?ٹi#1{)ٕ`Vfa cKqABmw’T B:_Gf2TѨX.-ZJ_^%/eJ'O_[ {~[_i,MgHkՋ<.JIHbWY0R#eڿǚBKLl_U?O-!HVX+6Qְª kC ݼ1"&65F>Uvj kyWQ2X":dpj!}jKpG{ =ӔU0B܌mmoK\GTʱ91p7w9jR,#Ed3ηfo 5I^y|L{ı~>וe&u*@!d| Bo|Zǖ,&W&OWIY<tEbxW;I Nܰ?t]h$-2jD$1qE 3 \ӠŊzQCn9|9tMǗu3Tdj@\ψ5$ R-(tZTW#֔zBGi+h%' [|b 4*i CA2hJAs ߤ1!ù2"Y"&d%[Pa.5m(96̱G&q_PDW8::M۶3`*t՜HӍ lH'%PN߻c4߳sǯܬlە*P"%M-5xlecfmj?(8 Q\zZ8Uhd^Gěu/@"D( UfSj_x%b=^@u6*>C"%?d$!sKH_ +5H1R.T+gdBaZXV@T*["'Y=W!X^'Ծ2SP$BW^C ;J\#~"&E &K loF4^TX#K0GTI^PCCT⓪bT^q ЂtkZ|Z{T%}GJ1>[wZ@䴊4?]; mj2Y)'.@3ۑfLOka{ c(kP@(bs/2hoEV8 nVx>D\wh[']GW器,Fs`)i P&2*G !M[GǛ6G[[jhtJk 62pRyr|a4viۨ {%dVRQYd XƩW zs@OCZ:Oe/ֶ7dz^Y]3ԝluXLHSPҝ̲g7{\MC4/s؄ |mʚ['0=/eOUQpXuغ=ASwfZop KܫJd lg`$Rۄ'. u%0JھNHEMgs@98QL"!h ;,z[aoŬ!éE^_BM9'FǑ\'Z244+ GIԤhDC5HW4`#$ahMg5zڗR]LofcIFyR>"8IDcK\_~ŗ>mxl YV[WyǾ3mV% l0whI8D~>-YaSa2Ti+B?,,PJ(\ǽTb-t]T=_Ȼ~GAQm9Tזj]V[ô{|)mF2ےQk(c \S-/aȄ4VU\U#KkJx]jl@1I6f,&IO^` *OxT#wc"x^Q!z ެٯ0p8uݿ)2,#\pqXR|qTR׌is 3tSĘ)߻Fb`k̍aZ^"TKrd0X,j_Y0`I]G/w3~JHC7w f3u&ZT4o_MݎX£PРH4,agL=k<~@)C*9v ڨ.:һXeDO9m\>r<%<|~B lD5嘌qVGȁMMicoҏjB'a&(_/ΖtWiR70-88F"rq1#8%vhnQQnnۢѥq ae~ YnriyYѹ޻ RNV ːB$ 7ŻfUo AȢzˑ;0'AƌPqc̊Cg0""٩lbnaqYŋ4Q,/}[I!"ތqx9+)N4f9ʄ*`Usc,(ְR,zK zof q}&(Z. v -\DdM\7Ou,iAZ_ON',|,fIh"OEy|@ߤfI_=rcXUha@ԨrQ-g)SJOGJre^plqj/6[!^ _ґ{/Jݲi].Mu[Z7T_̬t .Ye6c u͙%m2"F2)&J cWw+222&#Q,\,xV`N~s83iwp A?9, UJ0:mMWyEURhibA Px+(%h?muEvHv55ٛaդ|'4%GtY^~B9rw8)x<! S1^(*; w6t|LMӧk!Aa51N 5n >1pO: .~y3tlgl^u?][=?ny?k1=o TbcsSs;/6"/\/@ 'lk%(zu%ܒ\~!P H;+~Q3')^pR ,<ܳ +#?En8828tLp@p_LIsXr<,!eҴ/Vv v]վ-`Ⱦv& _& oKU*OyU³m*hhMf2_XWȯbEd:I⏱y.+v8<;*R" I\ci\2EſY eIZ@$Zi38q[~y2&>)5^I M<Tnzzn w#%Dt˱#m";l`)% LaW@)rF@p8Do|Qc]/5! &0@Oi2njB[Z-EW] Y @K TtB7&2qI' +8쭠pQ'_ZWG&g 97P_/Vcků&XP-~[_$ƿoC aXMҊGi鷡UOZ߫(}q9P#}캐 D %it05bXKh(?$kkk ç6LIw䶮\//we,qxF]ğ /n5΋zHFGYpO1dTFW}Y1mIƛ1Z|U~M@ 2wJϰ |>X¦BVkIOr_ .57?JM}*Zc !HU 6x @ЛS[VW9 9ŐM2L! ӴtG=7Yz,w#_M{ŭ &6~å P_Kg}@3N>B$ebWqJ+d!?) nk@Ą% 37 j sdDR1>>_ʝS.bpjihk 8jOFu?xq|E:=߅&3x?ߛJ&F\iA %%D:Be@7ioM'= C(@![K^pld6IdKt`^ϩ~Rr@ܓ?WlǹV Cg ͬ1u4z,2oǒuxb=1G8g&RS]Mε)Tϴ+UFʓLel,UY&9w6 f15`x$7w8M`Ix|I5W. ]Kyznn$ޟ)eJIl-y&a*Cx:,G 2Ŵ,{^[y5?-9'&(>&wR'!!CI5y=VUu 3}X$e.W1y6*IJ 7=Eټ@ d.:EF_bHn;J;G3 jtVIİkR(mNieNR>~rijO )vg̐X ·z,l5'S3J(Ij I.q&x>ĻBvÛ,JVSƿטMy}`:[^6KLk*[A}&_"PEOPb0U_wiP7B|~\H;ڊԵ$0x-Z.υJjuɔ_.4KGggZkWO˯,jg<)] @B[\'_B600; 2~r.^ݾDftM|* H>O OȎvir|U_{NT[=:PuxһFe"X$RRzN FBOygJ^' sTS%z(?u1MA=}g6vtH9 MRM%#v:MexRSyosֽX)± a{XSsdui]Љ Y_Oc$ 㪮>¶ԁ \fDL۲ʘ{8;(Ի[@zU- F:#*yb[ΙW%RO;;WfO-D!▶施rQL֜ U5Hq~S/]O[ݞ PRiM!ㆉms^v >P~8gWy~BUzSY >Ld􊧳wҗn אgέ_Y iK;zEt+bKnj}p9؀;̛+N7B ҳ &lh r-ꔀYTޡ7GyyIb枰 r\c7=Z#yc,] ~rTA)@RSJs 7}RΟ |C UOFkLHH>exYgT*SX_?TrwW/YXȑlZL)^O:xG}˨t4R,\7b˻hNxMpMň+tdg#?6<_͕1\)&5[8:65h ΅?O] +gQx)_aRf J/wCyTC]:u׌;>}SBu(ɬ&=@>Sd3n50Y߾\tG^ST:T,dkU)"o40:Y0¡WKNЙ…\C\(sSpM'\oQ!M~7ZsU ɾ<)r.EJwZPK֚yv&i>mkՅf (5Ӄ.[)ؔBg:kW8(B ɻϖ-J_l^:LۚA)3@*yBɄzyz>nz5`*=ƉUnRT`K籃,GCCghOW.Z6_ \{TbшAA#1F'¹rCo#_Sw>HjR)_1Eלq ;/"*//ʇ5~~N 9w-n0b/}YP{7mL/01,x9`խLd}4\$Чi&bν "[;؜T5û|{bfsf,pgF+_D74{<>$:6k&@ gc#P/>/E@W󘵲 ZVX5%a:d8zJ~ASSދB/L_wd;!&KK}qV/A[;+?qި;꫎.hm mI݋vrX><BmٽC<[0曈56)[$n7񓾓<%{zKniҫ,78ӯΒO9?(*UBs*fBtav (\0DZY}$2a1;Q-VZo`*$:3iaӱY!rOϝxj޶2+h4%'M̔J_u_;~cDΤ,1dL$!W?<ܩH.$C!cJdL̲uF>z<^Di4, .J3nU <b4NM]Am1sJ˿(h)//CuFMEg_x:'^J< ^%P"G2S1) YdL!C/ hjf==xi;NA?=m݃KKAH &hp=:|4 #MXzYQ8q=ʑ=^v,T+B MZ5fThrϧ\OWIݢrV)Oc]xXAP{/>; ^w%"YĸPOtʈ&KLGJQ$(V}X+3bE~VcedM> {[LMFo/2H#~o+4b3 #q4%wE/3_'pRp,>6[olGEC&Vv'R^q*mezPnaNm2|_&.~Yq{L蘚}Y"D?(!8--on-n,%%oz2\[%a a;ޟg/c$PW5:Z!TxX2s1CHA7H>f'v!ΗI-_VRi Ƀ@\Ń7fP>2Om?2܆MxC5u ^چ=fwYy}cQ9|#fpcІzEe78]6񹤔8L}sHTpLD(A8;c:c;:;88$)NBk+@#%q=]+gEDRd65W5ߘ;iC[C egjNغEYOyD3ipzrQTOܐZ:;t,[B sm/ ā6nth6(cq~7.yQ4n/ R'qw6),co6*6R79qJ |Pp*aαD?5j ē[;8NT:PZJ[Ch;tڤ5"q[ i_[Châ:43fBW4n03iGks FX`nAhbKQRhF݈h6;!cio V"HVq-p^e+} vD܎nS6z%ah.>ؖ:h~-6,nɖٸ6|+v7;qhm}XW~' DBLP$H|/ JIJl_ !s!l͗wثyN&2(k@k2$tq[[nNY5N,(2RT Ea=tJ< cx$q?\N}qLIٕm|)6mC2 Ʃl/wYw.㊫9숣9oO03f64 0Q&<kk}}}}Rb}zbmeCqekq3VO1Tf+'J^/`.( roe|aly':+ tΛVMjujnG61?JVs5ϚXl:WT59l?3{;Rϩn JVSK`2^ss`.~Nf8h`3:Bj8@][^QΠ?>0$.@slhNLxYO]ct5Ysy^sLdEpϣX1 ruWwrƌjqdt@%]w{ⱋ=56}x hXLKY[|`]}N?]g{Ǻ jTS^ON5ZvGt(C6w4l[{GO[-hv<[\od_P]_tini^r2JV5њρl5DaI 0*n%O\2)E 4zׯY3w5 bM3?u}؀ΥJ! zo 7kqs2CVq%@N-i6[ZZFhַȱǀ\:>jN;,ލ|u+"Wƴ-ھ5M599je[/ްZ\XhnзrsEy8#^p@2Ay)2HЯ}t\G΀myaickX;pΠ2KCTԽI\KQ.#P`4uC}~l(ߥel[YTwh s ǍxơdF4R!QY\"6B9- f[̓X8쁚2 Eq٪eDcYcAlr?C|v'crkH/qck {ŋ!;Z*+V7&FB qПW${$g?Gk8De,b"-V0dÚvГBOwf3>"gϘZYݲJisYGDg?{#h%BCX,;1$O硂h.1r(oVw۱ue4|aD%Q dz؍#4p@MdЮJZ@ّeA/ ޖ A?&A_0Ƴ OIüp ^ pKl &ӲEY=QPxe (qeZAdA 2{^.fqוH@{$ YX-0Z+LTAPI^BE@q1N_ͫY.W#nr]rV$M#i(yKqZ\ :p{ho!՜ zgwʢ{\NB1;H.5L&U#ۧ|&S d$ƐJf f#*.%%%W}>^a3?B\J QW%/e-|>+l|>+y^ڪ✮yǚxuQ Z\z*,}]iƲ&S72_$)>(wý'-ki*BkT^~[c_|Ohr:^ܗ{;>+{Xx{Ɗaʻ0+RxĊ)%.=KW ?lw8sv,di*kʚB:|7< jhwAAJǟ˟s:;s!I|=\]pWsekW͆L&(<]BwZ_-Ujp}&6zFt ,e@$X^P%'92woe1SWD};zPJ}8TLvh‘snbvG?[ƤsMCt+1iG1o\Gm>rE:ther?oW_>^yp-]V/JScQ{бD)A%JsᶯiuoTd-Rym#ѳ v]VUG'VguWmQ}و4%C?U1QՉa0=]]I? ]K↝߻^ջwk^7)Mz:'ìǾ&}U: ):D xrXQIjơ: oUe~jb, !A~H˴r~V>Qqq.}mr!!F:]elx ޯ;o!m(z!KG~UM"cڇ>$W#| zlZj구#P@#hC`ni[zB  dBStkusd,7@,تi%ơ-sp-;喐U٘T!1'1"AyKtoMe7;( Ј;83 &Lz)k9@bd 0VH!}ͥHbIt 8焙H|ւw.kgo -jRM\(_K7[fJ٦S/Ҕ*$A7&/P*A"4Pz.J&a@:eޏlNqqҒej?eVSS)+Teʺ@J;C_%L`KےϘj':TԍaFJ޹Ro[=ss߭6"5YTUi·16}=>W6}UeqaňeMC:/dy]lPK4aYt/×M#:e \Xefn w+tl `V`썆d>N6a ~xgUY>Ϣ.A$$) @! :C֊G-u ONY"8ufFݮ&z]o~eO7!E}a:[$!b(\K"2!zsḿhwtb.h-aƅE B\?Wt- $^ip#NByDhYb%a啛 ;s>hGi{=tKRZA}Lt+)E3,X?;(6"(ieP_2YK{3jʝ*<~@6EKFYwCهhIϊ hhG镂j"WV0k`tW9B_,#[-28קHb+=%:?wGQbp@&a]$m>=?^oT?fm!3;1[ܐ[@*>`!q)]M΀.-|>+"Ucy#;@Kj-Ÿg,p~}4g*J9X_62+.aS>! qŠ{ {ce핞觸M:̾J&pC}Ąk!mye "|24c݋72+(񯲃B8NzY8Nb#= _@YR+nC`q)(k7s)ֻ5q=*N0i3Ccz-!hmw$҆,H 8HƮPr6iIڒne۲v"7rHb(8u `G7)2ʈ@l?`4=XкGn+X@m i5o1" ӖճmʲJa4aI5Nz`HG]r^%&]ycRzGh!x7>bf_>d-IIoza`%Kt`hHz&k/[S `Id3k*N_u]qPqDV6G9),n5d@f9nbG| q*NZjӢ\li^`0c َśqw-[~dpʆRf>Lfciݾ%t~>].^܄r:zߕ>(IH>>YIJH!V0[0EtYnmYwclmç>YH+EЎXbPKfKIbp9tH4X'>:BYEHDCݙF9#eʥ]D o'{=hP+10F|vEJpv-e_]eq BnJMک3|Df+Bzg7~wyKGeez/t34pdtM \C:5"(1rW2-^(a mX!Z[PLmEh]7CTBG8g]Id >|dYP~QO`sd Nz<{8K To/ʷU[I5cCmݾݒFX^1V $̋Fy~zTt}|+0tuIwy=^w Iʥϕ5,SטylmEKE#K@|vøz>yHdQ*/tX1oR~'aU'a-hҾ*X-˱l6L(U ^2l"q D]D~ &uuhҟ?fQ$q'-oh?8 XrbXE,GOFSc rt yHnn! e!W%无 x^{Wt>~)|#x[WMb&oje׭\n;vEx/qt^'ht?e&qCA}7鐻пPR˔{ztoc^YId8{$S zZ|Z@V2|\T2o"(xMMK}L&!8x%jYw&afg,ljfR~KQr$:EW ނHzBdTq'o{/,Dᅥ$>Yr /nh8nI ֯v~(w|6inIH79ᗸ6;#uNQxPqW_4 RGNa?n7&#+q>4JLde 9bɖurxK+:^_fý2<'5Ƃ4(̨e6: ;7ixo.&TCfJq*ȷh~W,frj6_l@ׅ}ҴFu'/^xRYs#bDR;GSJ4OsdmV8dc⺳UWSa6V5=J$[уq`&I`VEǜCrxAn;dR̕Q5+G?)jL:QL,=r 6@{Z殁*401ܵVHvQYP~ 3~ yI&;%H=[Ӗúzi4n]Su1LN@ Dm~Զg]o}]Km 0? ܗXCW'-l;7rCs4Nsink󽦩Z %--bQ[3"7 &9ΤnIGVF$|6YLZ{kxjr1LڃzCN7^@IqdP Qח?:rF/n%Cim)].pʦ<Ǎ<[`EL+\$J8䬒G.2V'.@)Ƭr^q2*}O=R'8PI*h][3?ng,<~ڦvqcI iAwUxP.gT1߳`FT4]u&hL'"灄,AXӜ?mtkÖ%0P}!I]<veO/H̲m}usKB46ɒ0 B,\(^]3GLbU Toѝ{jCp2%" Pz jϷW̠nu VJȇ::( "&e'Ԟo%tw*sPQ5Wd`ObjVyY>I79-in*|"%۸0p(e҄GFz HZpԶuF:79BC%*Âk!Y$o M4/X?99 20\g{ ~.yrNd{c&"swT Upcvef(w$6ZoИ^얺h7e :a0uXlJhdWY[0b\oN׵1_h!h`@UKnO~E"[,ܷAPprf) 5awz[7Hf1q,y9-?i*Ix BG/7mj8q}~9F_\i{-X+Ǻ :h{*iN kb;Y\#{ՁpU Y2 ;j,)ꑑL' G|:W iܖ|ʼnq2R [RҠ,T RH(&(­ěe; Vo9I}u( WGji"`m,zVZ{G5tK9È0^hJ!UbeMat"s@Xn\36 , AG̼A/::0*i X1@O*#6 ?fqe GfAJ1B3I/El]Zy&;h]L4Y'c} !%-A9gLQ'(SHP:iD5jRi]i=LxPbDBkQS5)yblhlf6XիcwW Ʌ}qKhE-fUݴ:`R+1 , ~w)ݹH]HH ~2"$& /;{b3Ŗ%<]7UɠEBat&˃'97U?UIi b ' /d;\I={!_KFp*#GFZAֹ3Y"SN_X{4\~^ ]D jW`oQx)!~jrreRfgtw\iK.ucUmCƌa?9Zф9`v8nx6#?frx*'.WVW).~qQUybm!א܄; ]`Z+{EW0RIrbZ53ctiL Sѕp] lL3vZp/5W׉<,-mIs2S٥UPu"77FG ї.N|ۂ8.~ϥ+H9"ޝB kZ-Q&o!1;Gn |XQ[N0#Bi) hkfFZ[zŚB2K #8D \?I(FK JSȌfGΣ|#+5+ZDm%Zm5%Rt $yguH" a=ᛶW4_v>~nŬ;- 3%?[UNsh@/哛I˲Xaکd7v1Y0^1eUx!v̦2)vo翴 9bϑqٔڶeZerg) >,ys4Cr7*Zn#k;_zq$bC#8[ċC%|Uz1?aefޖrA!#ZW7/ZXtlR3,~:sx~z߷raPB6϶01htZʖgǡ:OWLFv_upAaʞ&ҿv.ܯLԱ q& bN2W T3V5Ue5fω8>;2Iz9W*;WS+?mlUȪF!ѷEqoX_ńK{j凚:x8AEjս,1f`t~> ~ʾIo[+=FA돋"C;nԷ =ew+VP yA.(SptOrV ^߰ԡNXR4Y rgvjҩPT]N~j:;ɲr`Ug*%9s?fs/vbds{$cc||6d#+?D[ly2",@|rXc]/J fO3zA~\8ޑ;@~6Ssy#h`j]j=TlȞ+agi ws=VGYrKGl)"YBC^r 7,!2WTR:~^::%ۚ ;֟ #Nzu8:iK`M2@peLdij2OVJ; >uF< YK)qt.ؙ["nTmhc ksr*7UwmUiNi,or@&e 2|yɊ`*'Zv:;k0+:iaiX\p >a@aNCp53ĩ*{+M8绉(kZ,{ YOȳb̶5NBXc64LÝaL{z~„d5oG9TOp#[KecF~gU]rHƢъQ2m;ڡH . .#vP:䰪K.I\Ԋ]B^5ڠt1sIb';5ÝcD6UX%G~yϟ]|VUi}`mPGZyr F rV36$JIs\$bəOd*a!٣:=vA'0;:yV7K3<#%))t˫1yc >t*GuPxo|>9Ubg]i22S̊8tWv=vF ֆ.Xϵ4=pjN5gjȗMu|xĊl3(e3~cKȽ&ꂁa8kw_dm S7jʚ{z6ϒaZ{s2=3U?.1Ai%iЪ@*-$m0]P K{zC47 WSZEh Cj`%$pxVhR( b~8,c@j'MJ$ g2ŝ:A[ksYnR64J* h/Gζ{0Ђ"8vCQkW51B0c}Rϔ0Ϥ=t*S!S`=kDL+lY@~)6}2 xFxd@`D%(4K/,2c6axBv?oGHg@I}v'Y1Nm~PǵK+L""* x`NN/#Z?ۍ=$iGPL"p44$g$/ өW!7*x n+5zXy)&oVh;)$`=BKi7Fz*@ 4d2pztծN/yDK$PBYW%0R\Tr*6?W@veXƖsPm,aY9\Ҕ1 %\\mO$d0'Ic40i/9'qEh]!Fl2e2ѧ ZIDfl+ RqB`(l X8aꜬQ D.c7rn+{/m_hJ-Q\RXh J"ƨbI| JvɌ7d#{s0; 6QY<,̗N"W9Xm?~>&1נL|9)=׽:noP@LOEYrBu 'lC9څSW%+ F;ZxlO$‘N[I~f.ЫnϘ~d&Fm`lA?*?_sKO$/m cSYFn;/o3yU|/x>ZwYzQkK}(״>{YƩfA&EbMeW@M Eu.jV5V+#Q[5lϞq)w>Cj(4p_S I[Ѽmׯ[ ٶh+f:{oVy!+ u543jfgTp.Gwz %Mj[(oO(yzK|B;Ԝ\ƣU;aw?+MA]ovkubkլL1B9z.ѶְY-U-:Tc>cqS+5v?dbo?n4G;w$pPQN뿯|T?)m Giche(׳VMMni||.WvbsbP1;Œ4N~\Z"`81n#p,<|Z_Cm5#{Ss=p^\b hM"nWr9sxOgޡXX Huc) ^oD?ԂUv/çdڦꖻ%V64~" kֆy˼ޫ|c^n=vгr`~~:k2΋-|j~cnͰv_Q'?I#+ g{!Zg]T쀹τtdD>OzlQٱ$t#v%PQm. ^-ILgd/ 폢Ӽs y~N^'I~"WD$<)fb :ܕ6տ>MrN" . y.C_[&4Ue0 Puq?H<# #Ѻ)uxUd>we~SV kj /7ʞ}e6v^s3JOXrBM:ǘVsl Liq扶T.id_纈OE-0J+'s 6zDGSdgJrlK)r^kx߶l3 JuCs"M A!UB;!V<2۞~^Ӛwkٰi_gg1>5n:.#4nZ\e;Dwblъ&]Hco{ђCQC峩^:a )&dlX0lLxjl}scTgE=ַ;:'iSĹU]9'Z۵P~ I按/"KfL'̷j/<Y=Z32H4V K;fs_A$-_Y% =;*VH owgj߶mS3E^JLa*'AL xї3bV.p8A@fn:i<̱h^!2̺b쐰uԈ BiY!7ٮpF iK_&T%ŒoW* *" DbZ'R0 !g PtOSrBg*=S ߙ*yKzuL 3dST:*ݒ+8<@U1 ;+U=.}BGzd XӊcI/~Q(H.rrO!%G{1Q=i;Cލe+)66xڥ7QlL>)DGAFj2WO'" YHKȏux|{|)ar<GV4Ïp^Ә8 `iL.x /._ ~sO%_?& AMUUZ0.xwOF2qDqSG`?STAT>z>  P6$\ ` R a[ԉpzi dHt:\Euwwh2J՟jcLabmr6f. $6+ɲPg*DB%AYC(JB&I}&V[:mr)=)^ ysIb$OF !Lg^JjCFo䲩[[hLHGvkf7|"\^f ,8‡4C!6:>ْS-$SMiOZ u>l ; EU3=GGιA$y *LQ=gME/dc.2HB:4xѩzMp|Em WiP!D .W2uM+oj´re>{STuNHB!S */[$!cxF&wKI[a3YN$_X5d2F#}U) ”Tkqn^R.բt? Wde!#Dfjz<HE?_Ni ]bJ7ICh&ٲ-F476۸x 0@PfJϲĺQ`:PNRmh/kkqfT.\"Hw^*?M rJBt.L)$p}3fvj_9uItBK[ND(M?/{#2Hi Ї+q'@T}i;@Tia!Joٚ4ٟXAK^%!*D\Ff'mԥѕ>ce3%H-8L^ Thyu׹*}V*LV"0x"z:,㙡G(0B3ttAAy2w,;NX@Q: cap^ia"-5٢tH"ar70_ 2<|4ω,E*=yesN{%% . Ǘ+=BIF@{(\4Tu0Ē ,$'.~܂gM4>+-IA8Ib՚MuL13A z rMdhW. exPG]r*/<#! %RPLUGǸZkC_DJ!2m [縩N{1Svm "z鐲⢲hsE)3e!; 2(0$_aaJA؏T4_Ox<a,$m5@{Жiec{D*<A 4 Vv4ilps&Ԥߙw˩] 9YIDl#N[J?[f$1I^ !ТRY))Rl H,)M)V;Ӗ[[N}֮9\Nt[f9 .I8c6q \bӎSSjCӺ)l}~CN_cX(f!!.D%(1V:JcܔvћJZYyX MM;~7mnJ2uV)]v:4,oz @f A 5Fyx_oA6n6׻ɛ\ԨO~(/[B jO DpAJbB H H3IMQ$$T`UARvCd{Jrz)J$ORkb8m8\=vɽ!R8漷=z]ZtCnal%4;.|WI%ye}XBq04WlOަuv|.~Zw4[bB09j7.bxk*;kVY׭??/(Vyڞ2]R pc؀=ҟ131m5(A\3nS?R;tjct[PkBARra9P~տ%KeHndygK7%8EDDgoBWP, l#vo*7nњ!7 +5ac2:hkuՋ<SBb"]z]>VO V ja'>L9bё 11 ȳ,T=Bziu lBJ:2Dr/f;?|g!-KӗNh&}k$3MDɹy@ڰD'Xu[&SzZ2c3U"\ehx]}7oI9i[?T^>\ >3a5T1ӠZÚֺ6xlVܵQnޭd5v1rJU]]ܧ4yEKD7Ŋx{Pwo) φʣрoBPMJm.iut{`Q9#Q6NCNё 9D:K/y1Y=-:Z[ gh yæ:8 ZFaЁ/[͢@0KMn<$ ,uZn3Z:Yf2ZN sT^?[vx?ԅBVB؁\aTW^$P9BsL*X= /AYDl"e,¸+xZ+nt|nP&DA0(:KPOMX[m4Ƞ/.x^f7s|n`t6Z 4S.lq`H FD{; prڇ@&QfG_Њu[ooo6Ywo+i$j@>1E7 ]Vl]PR`ךTfҊ3Yp>81"P+hԡ8iPQٛsi& JpuzΡ+G5_lTa^]f6-";,w ~gݷ w ?%EMh=Yɦ*,Y!=uAKtMc5ȘuX]i%,5d9@XjZߗY͙s%L{gQjZ6lW2T$02:uȺBCqt_ӘvJx ԐQDԘVHF6&;KpA+ݩ-3`OB+Lߒ&-?B+y>K|Z7Yyb~ݴPacX4 >k 8ge,Zs| #! Pc/U[7GzGu#>-y! 0@ 2;!.ƀpf9D)ȀDǨqi~A`6imig?MtFlr!6:' %JJg-_tSn}w `WPDɕkIH׵sLD:tC Bs@ʼ 6KXfrK$R6Џo܍{7ю'?T[2P4^%YQ5b9AM=MFQbׇ(PÁ#'\r΃'/|/@ B8,#D'I o݆QI (ɊJckf̚[AN:eig ~AB[XDT,ed5f|K?] jj{OA1 )a9^%YQ5bi FKGė +;'+ t2עQzdtbN!A1 t]kY(B 5 L,p xD$dT4t~ထeIQ1q I)iY9yE%eU5u Lj' ӒمveVik[;{G'g.]v֝{}/@4@ fEm@퍢yaY݃0%I5jZt_A$4ԜZ ^}v)yr܂į, fx z񚩃$+LuDUvz[7YwpC#ȡc%@`ņ}9N/>֤,gk%i>&͸uP_JuvZ.=<ݑ?I N_0ZV{CVTsR媤m8=62[dj]L76-#**G !t~*H%4>NSօ1VIk4@j0sIS y@N1wT,2O6&UkFovhŶv NǠ7cIg:UI>@?8ԱZZ6 E:iaWmsAYL,쬼buNS2lYz9<@P!@fWUPj2jirrb "޸!͑[J] DXH !#)\>_s ^9JѤiW%W+; vXG͠SAs.P."t_BaXޤoL\aۛ#5bn YO$0Jh9\&P]s熺e0Qx2=ks'S[iuQZFXQQ>SϪ Dyv_jjh{1عB:g >.l!*GodV93kj BFRB5l6Iі[MUQL1w@:qg$$)/ *mSYP|TG!UN!Q#=U3 l[lirImh"H(bӄrOFB#XlJ]TRTLcޮx{!"+A .8h/cd1gawTuUWՊ4PSo54v4fTx-N (~KSUo}1_T|J 4ݑ&"A :h75Ű*Pi/(r,soʱ?z<'apas(LԅK.#EX M:ff#Q'N(T7.Z;I}5 =NǏVZwȾ)ruaـ 6#F1vl:f b T`K-LZeܦ"hWWwu) ]% şp#2qhұӠ!:j l'S,kzUYGo-WA) ǬInrCX鿙N]8 Z-fQQBF)s]w(e àuC&4nVd 0B*$hh@2ܛ}yQD/8N{H8 7 ф+ Kf9DZT++fJU<N^5(CAf/ j)aMi,fS9>]/<+9UY"R`a̋qId`4 |T^pG7W]/@Vq3nl3t6`pLQ%V0Z)/GI4[2V.j%pY+8N*PO4G0\9r9;FrJ>~l//b*GUh<0UxBE-B0\9ղ(*4W}̂U؛YPY*Qۢܡp=Li߲֔>FBN p~[1ʽk8f gPofsLǍV:o 0`R;;` LRtO Ⱙ/keZt+PU<Ŵen,e=^#JZ+ 9"ƒ2 7ڨ)9s$|Rf)<2(^ѧߗda ɴw{ ;Sû}tءә? BU^R("c\]:)=Lu "lɬɾ2_irGNٴvKQlzGflۧ ټu e \<CXqRRՌQС\GR|r{bHx8̑pI_afTc$0z1*x08ޝ^zᱨj7WRyZ,Ӂ(PL?d bGI*+$w}}D^P=:YIojřwFk~Cd >ұYhT}TB `]TZR&;;z:vz:Oe׬o_݌7LlߏbV;As DyΩ.V5/kHE߳oRx j[-[U:{4Hu`OJN^ܮK'OcD:92i@ѨOѐr9/Ahz. ;oZWxZ=O9oX ߃WLme ɊB2(,_Y #2g 67+LA=X1/$`vu"%tջ@w_@Zi,ŪpzHPbC': f@~(9q ͊ ^G|4Ucq[ed( E?'|,&jaجY d|6YSwxh9>R}@Js#XpA)/e$!mHRw*eZՆ1 YAWǐ"P2xˬY ZjR iw,7yAIq0"t.kM>Vhjzg1Ճ9ՏY%bx8f5A&@a(rdvA>׆o7R?FKL,`Ȑȹ#t@X1>Ji21D. t8@ɶ})׹]W)ā3qYU2.Zux%7>5_j9 11p#C`Mѷr}ĽOg. gEq>Y٤ uKh@R@̈́ }cE 9nڏ{n̥5m㘌>2/<sF=0*|N-rAKB*^-2~P*PXKD\thԦɔ˪X.}B`@!CiјHC'^VF#E{E®uKACk}K[}>p'̥@U{{:cܢfWs_͠JjKι;IMlwCCmx:|!;?OB7ABu%Cՠ fhS]/P<]2`Ax)u-vGJNF#-wnx ygQ_>ʵӍ{J 3*NUulv=hOJNAwx=vvRÌ?/}eG1<-s:9'իKQ3[@/'!>ʽ5 :{:r3H\qh[,\齰b)I鍖EVx_!Ft /h@&R ! !$I]veWuѭ%OKBe-Us)eIf,؈2Hrh'{ 7dau{e^^VV|,|J4J[a:QZɂAY+Wz`xjCG}_}]O/_76'ei{:5®#ȄYBaz~Z(eϯcTn@aQR#Y9`Xv~=1X+ݺLᫎ3]9L-?jfH@$F:ÃQ. K[wDe,a=nmFj{?}b'\t :Ogk"AF~8X!ڦ>͙8.RSR{6I|MMX BhW,^8ۦVB~ =o<9? ۹wOo/ydns[} =LdRMu3+%aj*D0snzhղ EP4 Zę U{.?ZtRܝ[^ o5mlͳ#P9!ݙ:ŏTEn ZCG¶H CO9[ꙭNe0(Y6w$ ֵivvZ/}I[c {St_g?ڻܚ//u}LŐܺ^)b]T+VPt9Njrk/t%k+ CN/ܷ k aBJ{eP}~W5g/ea#8p7.1UA>?{35z{뽿}kϞU8h~y0 CHUcŴ>(re!ZCX hB=ij+fНn˽5Yq?6-7a gKV|H~ u({ܹrp*Z$~ju:r,R[LKvQL<ةd赎>MGO&_htq;9=5.MKq ZQ`o})MW^߶VPȏ_V??&w+ā1=T =I p$1J$nΫ.#BİBQ@Qg x|J~ӭ/-VPד ¼>x2ԨẉERo{, VdZ6qsBĕ|H2Hष19 `AGE屪˛&I7<y &myf=,`a|wYŒ ضun =e6WzErbE*]Ɏ:HYA3ڷM/8G/ }Gq)}j"q0wJ #Fdadeȝ1bkai܈UN`47EVSNz)88N0phĪi(T_jĤp !ҩX9k6RpY(E% $ $ @F}Q(DDD!hԧRRdc(d(P QJ+]sZYJV'"WY+ M+B !Im Sf6JB"cqXLashՎ@&0g,rYfBM.ħ#$rY.'P@XF| x,pPaU Ǔާu-n||(9*"?SYC%S8#ɦ%dxP ڞ[A`tj&ʙgZHY!+Lh; >8&*'1Pa2Rk mz8d4)ׁBGψe&GTل:Pw%y4(m`}4{Ȇ( 7Β0؃yRRߡupS$kCQE$BK]&dS@#?8&&hS)UjMkNͰu}|C_{ϨxfQmbĊ/A<2;73?h4,!ѳ~gY~c# Ud' Wðqj+Xl ݔj2iR)5AP~25&/FR&:̖ # L|hhK|C4"bX~DjL.uz> Jw[|T>%GLR jyN@@n:y E i6(a9^%YQ5by !J8y )D9{:‰! cڲ9v4t!RQ5Zɷ+56tެ8yoܧ%h`T¥zY |K#!iШ }+^8+/L@HD|I-d]>|AQN4j >1b:97rPR}jNoXp#fؽ{_`S DhZ &'R;l?v8rwsߖz4WS<|}°2ʵ5U?ɲbR2r J*jֳьL*o5 ,z DBL\Kgh_!,O3Z_%)PLcji$jW{] 4CEKŷU%>$鳲2_VWu _o`phxA!1 )9%5 -=ṠYXSt裕Br ]ԐIK"#+'i70426153wp)׹K镸v۽{iS+f4JP 'HfXPkO2P  j5jթG 966sf3SY)Ùr "#&v9bU媡.AXkfXXb?䪛gЏ#f7hrbN$\}Zu5uMۂ0Nw򠕈/IR<uҝz?6ot֎c>.q]8؈8Z ͡XaK IUN,- XV뙤j"JL-"&HX̉íZq|堧kSB*Nl(57Gc2M4i;4z.ltjVs^#8ku$L s oH̒Jp#K<H֭~]#ŧ@T: YWh[KcGJ7BrkU#pb "C*t< zN.2=cpt(FX ,2Exdžx즏7y=]>7IzkZuDl[E4#B0|b$)!U$}Ww9,zsh ѦCSA0 I(3:heNG1`sIZU$鉠"!@ N}}N[d9+[0&6Զ-3PV g^͹B!kTGU-VT-:njج\b*{c[kq 0;)gvc-񵖬-$ > N3}E p0ql;_trAy=w-vܔ DS>²*im-X+g8p [N)sP;0;(j{e8Lge>hX3)>v\g;-VUTq\,m@z9\.ŗ]rU#>\/5Ѳ<9Py+߫2izfյjzke-h-Vu{KDH lЀM0bjaka&ZƷ4Brh&Mr];v&0Q̂ z 'ݐU)'E'ֹD0^xIGDPi &иv XK BJe l?ħH;Q⑺*@1J] cciG4&B-JlQqB6^J "$"Y`Maڌٮgjt@@ad8AR4r JjzF/% @Ff8|$2%j>-ׁ i8IHerRhuzdXmu8]nwEoEa^$ jTO``hu9G[ܵ3HzZ߂r iKh;7:غ1z^H1vNd3UOؒr:< ِ3=dqq1 Kw~F ]BRkb( @,O $2J3,6X"*F&fw (94,I (ɊƣSJ!1PH"S4z 0& IPNo0CO(4K *|@ AE+C x|b, )9 P-WBe8lQXI!eCqq֢ ]X@(P1cXgeC2Wh,/l찝49=O\ !_NCɼ#KLjF6 tH<^ nr27W+QFh O׏սBlҮU_a4WsnqZQdDg:i\)A~/-PBXb *FG+x<OOv`@ͷf(RJ)Rc1||l")jRciWڕӟ_)qDvx^8!]j~N3Zkn e:z'Z9ؠZ7ފwf8%.8S%<bDzA0}GF]Tڥ㺧0Ij+k.tu,&ȹ_4 U4An.~>̱ޑW4SxIĈ䰓fN]H915r0%++°}'J$_IuxӼcCb :B,PA75JנV+L` A-%۾$sMJ  6#\teW\uu7t ۻM#1$'+n8hxgR MSKZ FM/`qx )Td9\LP5Z`4Y6l ^$E3, $+;Nex0(l b`qxBDL & af%Id ^]ނ| o{w(f\EVD8p""HDyE Ӳ$hyI>_:3N4mxmr'(!Dx*g-Vlw#^&H'R\.w@ !=D<(dť@T:eX8g RꈫgoT͞궅A*9{&}߱qT%- rR!M H DDPitpy _ K2Bhuzd쎳q ) phxAdEtc.d !P؊$ ;QQUS7pb1 c})z!?; zw|_ֿ>/lyҲZM|naeK <LS6]9KO)L,YxCH DxM$) BL|H,1frRcnqbN!A1 )aԠQ݁;/{&$#"$C QU+hQTu܎3MPNo03܂f-6,w34[p.f̈$2J+Xv (,Bpj)(qpQ7D;"HDyF wĒ$`G"C$k"Dr@~r^S$= I4[ "ݗ\#>9yVmC#'3*cDтI (ɊF*UjM5ph=#7'I$IiDwU5ohmY9yC@^%HubMě$%Ms>>>>>>>>~ 2]q99?iA.abwAVO X a{f aC}^R>i%mU8pn|ZҲںpI M?l~Qa/ cI (Ɋ:+J2H"S4z *& "D;W(UjV7"Foj5Ei0pX|>DPiѱ &йqT X+=#*Jd ʁy|0<$FJ=ԴٱY)/N(uk=5PjЄ&R6e{Ә1;󞵥Yf$E3, $+YH)e"LhO 6{m4BIerRhuzdXm}8]nwLϤࢅi:IX6XhTnv=RzXgVc}Z^@ 6O~ ZH[JmEѾэ'D$p&;RSyЖ,d܄XDφþhAlX4+~[pW2b!ϋxFHg1c,7vh ` vU_@^uǰSWR66Xcyp-(ʕyuue#6o)ZJZSnct vp|k q=-A7,liw@'a+i4eyf w(r8PRkm.c8AR4.r3Wqu7t  ,8zmxd@Y.gly[G)R**:D0_KI9k3]Xh!D8O??ڝ:wڭ{!aQ1q Դ̬ܼ`~AQqIiYymT746g|g#:P 'HfXDIVTM7 %{<҇~PD3? Aݒ0 gZaY6>y@%/^~ C,-OPaJ<B3VyY^{nÇ*qRh]X{1(2ۥ 2~OTCe/LLP@59F08Bc8<ZP I[ iiZ&D}$I# ǒHS `jpeK KRc c!]4vѫjDGgw-7 4Q/-l$)ѬMm4)20M Xrn0VԚrkc8AR4CG-\teW\uu7t{Μ76t]nUSM:>|OoӵT(g҅J+JS5ph\of\ BP(0e[Ya%ó'3w[ w8vE7SGC'xP:]׳Nq  ϟ?iNͰn≙ՒIM8;wY6D;~ V~)]>%g*MmS﮼ =*JP; TP!yrsk?+>Z ߺB &cN5VgtQw*q?zƮ1s c`DP<}I%8<7^LZ$EJIo+5 >&Q0AA:ӆSV ׁ< .ʍ!QT5:K1^+;@Sh&٣ygv ZG4|O@?ԩ9F _PV]1/Af6LGǃj,ۤU!c4w%W@lH):juF*f.1y gF6϶_d&Aρ9o*sMϯ/+9_: KUen$P)E$I)8j gF3Yk{sG2[l|f"FYWҨdC@G.e:_,1WdN`,c)0 ^-Bz vܨ}Qia)$G93VM'&oE"(u<26Jq8rmO\Pr""zu*6r4ӏ+|Э,DDDDdUԔ< :zM7ӷ0333w^k`(m1Scc %8|- f|Z>1'導'"""bN| P`!B =JQ.UU`""03333fhzoG[_6ܾi9mxr+XֶsMK;Ɖ:NH>1J@A4N%(C4ExYyZ9e>fe{? Xtigu%2u NJ})]4PFdX8G*杧>΀kt#s>#ID@|7yUI<ZAbjXdX$ Gi{ e͋B@H΋pQS3@eEU ~*`. Db1+jV7t3pI ~d/ѿY1^DI'e0 ЂphxAdEtLABP*Aq.hzo`1wlaH"SBNJUk9nIq'NPACLUoI+g!!62Z:zF&f&Tppqu9DUH4WlFO P )G@$)ϫw]jE{!n<28DУ6ì`C{9{O.3s6O982!LAW1UC c\CC h =:8I(ܨ !B![{[D'I*;T{VK:.s>g_ ˢUuZj' >qӨ@2۲Zѫ_gf]vf,N9팳9x7d?7S>k0S)75i˵N.W]Q1q : PP-xjFk7-w3ϾWMړԴ?wsyrpضuxjP܇ÜٞN 1չ z![Iik#F;Vco?JMeڻ8nqMx^# G?Y_4r\NQEQEQ+WqAʌ ,&$ձ% U4Htx*-o羍/PgDm< NjmXg]Etg>O`Vz|<&+9n$IR4'<$"ZsW$>JgijW[^ޝ<}׶Ce)gvnC=b,Lh4D"H$tTzIp8;^cJ@{0SZ'CMô%Zr^ANͰBo.`0 `0fBh4F7X,b؛XH^R|Q\y_b\0sQ/%f 3l+$n|n`$E3 s3}1   vb#}Hc Ds8Ri*$E3lq`ߡ#ˮ[ n=$9襺* ׹&9g姨Ff8AR4nVi ]a>777) Þ.>8m_! Dۋ)l29b0Zs˾YD%>+!o;,MYÏ8@'OeJ\Wc5}2ztԁd屜~Jozs^‘[Ө_..D2Vn/l?^mph=^eo.E+jH0!'F?]\=W!>|ÖVV. NͰѵ1ov93 9O&d2sT*JRz.~} N&޵[wA7Ȥ8{(k /)(ZRT*JR )Ri%$d=O z-|9:AZUUUUUcg͕8v!ʰD.I+U Ry/ e1[ s8^1 V<r^R)UjMAI p;լExO|#܊$jt:S}h9iyo6?#w338bvȖ~ +~_oAvknM$1x42I FdN;=_EDox:.Q1HTjժKoa3 }_Mfw?of̚3oX~s !J8 ޕ>7AGCs8ܖlhר1U\ݽA7$mwZSl_s-2DC%@IΦĠ2Z&&uKYhR6 Iؐ feC9ζ;oo}ڡڪGHA_`8AR4/#3gΜ9 h gAZ[/4a߁ST=!^S>i d":PRoBc lsIĂp󡡡!`0aCFgld I)U4 0zh'Hf5Fo}ܕ{ᷟ۞"IqӸᶿ5]\Cl8 K UAзA V>δ`S .oZp3gv 5hwi#3}'8}{q'Y5Y"zOL}iN.592[VY!R{zQd;:!7&)1i4Y#YcD ?㿮^$Kz~G@6g$ay+9BpCߧbRe8=ܕ3[5cQN";A+}{HF6Lal"q^L<'z84& J_>gI_Yyad͙}2YqhJACPSc/ӈ7F6Xy|Mɭ#%\L0"r=ӥpw0Gd6 +K2oP8z:rDǹBdI6[#56u_f̓,zޛ_VEN\a+>QЄfv)UEL6M` /Mt[<8-,0m2:'*i9~<:c)3F`\ ‹~o\mCbmnޅ \,r%P2Xc R Cn! |\y5@2uY0&`y@\ Ѳ^TK_T:,! 7`B6DadktтyY8937>B!bsD!8 7D41U$$DQ|{I'J8m 坻3aRN 2E25Н3cHVPNM O KY1$kSsS* H5^@,S77F v{ {Eďn(Zfp A46-^xV'=hx8gk%˵8KJ AɿQ  6dZut~]b%3lNpU%ٕY-,#>}O=COhpF ̚_g#^?q2UZn]k_~g;"]8mͽhv6Si5OWu3? FYVBxO )`7%\tЃ&e==nJoUՋB$Yg/$i^ e(G1gg;~AI:MF00v'lz8Cz(6:A}.oxu]m,ۡgi5h^4h[Q):U&Wc*^ۇ޲8}0|p?SCHÊ̿+D]5][Վ%=d{iKYw>$OLq;%c_F2Z P&'\б|=SҬVdVyU.~ :A]9K| ~,iQl5.{$s/ tL\)Jh$%f78fܛ&n1msS۩Ydն#.e8|ZR!:D .(~-Yי~-Gůbt۽-kJyUK:Ƹ?!="B2oL7~|>ę2Ri铌؎k)JcII*gu[m<)ϋz@;P/k-pzp*#+bA$~>OKuNvۤky_C.|hAtvGVieASas悙Ej_ #/$V>[>H0Bëːm"F\ M}m[J8t$4"XG ۓrQvo1 P+,a_[Eh ٛh :nQ5wˁ@>T6 TD$+RQ~COc{]hYAJQF+ !Y\ D25/Ml,k;|@iՈ5''zBqcnW99AQt<‰Gڲ?a;x$>Ү89G Ul$́R s}i0Du:ѥcO_/G{/P|ޒ}xQ=[coF]|ڲ!Q]~iۯ^W?NM`O}W?N ~ܯFhy>j/ܗV8/tcdtVDמs_ Lי(AUTnX.=/#]CϦXPΝ hbfIk?@ OW,N1 c?<aRlK@zL_Jyז٪KAbvg|@RlSq1̓L񰜶w`\@ө=.,.')yN?k9fŭ]zM.oY+L>d?@h#cX9y{{gm10BX,KD %/驩*(09C9k< 0ZA|P]u l N$ s nb!Lņvkג9]m*h?pu7|kW(z ri{H&z.Lw$g9^m\2u%̉1dNBZUH\ qFxR_J1^,xv!Sk8%5'Ji [n-*ı287 _5S-ys;rh pҍP+O 3 b'bՃ'R{A6ȪF>xHRq*G `r qBB̚Ln{ nXTu ^S$k#2Q9ZmwavnA`%H1؞詞3ޕ7}oF}|JNCPEz~V*B!Gnx%&ZDY2`>`#c;̊;R󈡥X/Nd,'ɜNz,b$ք_A2ol7J61mnRF]#\&DբFQB\rײbkȲ<d\{ D6x#pAAACBF1r*{3h@;nJ 6PlٿZ'!p ⋓<2O!e`#Gz0k7eh^}s*Z Bݎ~;Ja|^I&WcNſR}[*^>9a[86N&" O 3Ot&6@TZG(Em+kW]F זc`A 0#`z2/eKcmb`oHF+R ;1>7?rW1qټza2-rZL0d׍ |4BFzѐQ>:@>RH/3[|| GFz! |HC>EFzÖHhFz*GrKS##d"ǤuiZ 3Z *--y׊T൦棣'i˸nI+3n-I ƙswvq WwQ~eP#K=17=9~;b-#TI񺟈(E;D|3=KAU*wԐq쭫ApO-౎ʈ-*Z`hNTL g"9tD_1΂4|g|\Ha~?LͣZ%1A]bԲ ܪ:XvG(V/T K]vbe7og>s߷8V: O'k9_HkI[zqnnA:}xq`Xco>>?E_le X[+o`¦ lvJqeW]UV 4Z4CsYr8sM V>#( $%ͩtj]^ZbjYu5GUWjQT-~oۇJ*ZQ {=H#-i+f>k#QzfF jBvtF_}G&#D'ׄ=hi8R'2}}pP_z~V G[^9YsϩX142̚0€j}J@#PP1 xSP򢢦͇/3?V(ӛ=]`@1蟄<1i+2X؊؊|lE6"[7V9'KϢ 0^-L%%>#,NV)3DXx8/07'_Wvw]Z ~|_O9̜2ߍ,,Y{ݰE 2G̙!s Ȃ*ܴ[ik!*xs@t?oȖ8 `8LGȫ?g.0% x.nͪ-v-&+Jɜ+\t M\p1i#g3Pe(5jsݫ1o \8cc7CC ?bv#Xc'&7˩p>/R䅢FeD%B}YhOԔoT`6*UFfm 2Xzfvn~a-/bstYNlo wUI.i%CTM2򦌖Lo$źpi]wB: ` p;PD#DHTu_t!OPYU&ѠX%*UE@%@:Ѕ>l0@HAq p7p o@A//iмIиGKiI[:ҕPF2d1E,c6vq\N A^->3b?G:cpL`˞i=ܯryG<9ytb.Z]X1+"+R+"ʪ5^Z+uՕzpTB ^^r &zOk rE^D+imXvdwjg7E]uN޼^jAFEkQ~h؈Q[v13pG;NwYs\:7]3g7LzZ>+{~g~w#9c:X8x6 IMєMMӴ wȹ0/oV^N/ז\ a[c{j/퍽ORi7AУ8a1O`BdHQ*R#=p2nxR6's.w(/)/ S8W |?M"dCP@ U4Fl8cvÜW|/F% A @d9CPFkfKX``8VsV+nHσ =;Uc\[|qON0!{W 2Z B,cR!-DžaZGʤA:uE37 ɆAAiFthxᮯL/݋,܇uV;} őqX1Hy9x(cV?=iw1.IVWu.;uܦoCl+i_ 5pUc'[۞ E$AZ Q4:bA?P$yM URU r=U#;UϷw;5|JiC>]"~n}eEQD~D}91'-bUEZ{M44 bBdI 9=?: a= (5sDmˑ\yp# BiJj% rA* !JirTO'ti ƍ>F]#~|eA](Ӌ: p-iE!(tHt{( gL;(rC{D 3p .7FB14uel`tuyC֋ 2nrqW7Sy+W/DHɸ|ȟe5)dJ_ʛHB9jC`p M4B+mP=!|1lr}]y{^ 3O_xW1 6ЛܞZ,B7܄nusl{ x5Z`v9?4 pBF Q"D׮(|b*T*QMGr5>VRK-VZu詫ihƦYp"7dCgugvSxqKI@TL DHh֢Uv./:~hxZtzdXmtPmA5`0[{ ]^  `@/ LW~6ܬ9Dw ;=K) $VBœHRidD96`PݳFmbPחG}J֎lPMjt]):y7#ź7&7k+G*_-7>8Ȁ?#yӜ=1w.֬/wWۏ;GrrEܰp)J0;8 $ylM~p?PE_TO> t}}3ÇI6`:@nDf@ҍ9dhI0~/Z_R%{kmɦ{NVTMBUTeU 3 l)R hRD!Lbfj|mc<}=v?w"X66%Wg&YMOD2MOͿ-8^  6IlܮY2<)QWIo">1/ ADb]fl6z۲.[#. :+ȶfavsM#K|-oW5h_U4gXڲr޵бS.]C<s,S:?=1J!og#p0xٚIYMK\KŊ(YV%$ `輫 c2q`=hys+%t?h]k¢Ҳx4X˶ $?Nf (I !32sr]뫿7gf#%o܃?R7s \F7!h blfFΛ6-O,͍vȚs/f\-}`ծp]unJU0\VlXzjիYY| AxՂģvsӣ$(RKZ1=:HB3(ڝ{};gq"l9rէ{n^>~ƌ 4jѪ U-3QǴVP_ܭwp+qO0p JRp/R3"@1 CYA"pҦl/AռD~oK#:渖Qz4\T^ '=OA ^vdڝrguԥ9=-y2ֱ}OmR L'P|?wh%'Syeꧻe:a>[o*_ n89nW fu7tB1{{p=Sc%eX4jF#ZM SVlCY֠Q;A qq4H-G\h0gʐ=iAYBxəksVX墆oi{k"FlG~g4v=" vJ6nnHwsKGOsˋ0@(K2BRk:=}C#cS $Ȟ W|o"z#R (.MaWpݷXReU DR%'-N,E'D GaKX55f<1 I"(wn=fʎY|N ddXDCË$HB ƐB`BLDm9_lDM=}.2cQJó J02iƵƧ+k,CGEHuPnjqw g)8 _z:Y,ІB m8xF`%Lع 6~U~t =? ksphԲCLL^VL*XuٕҘ1FU_g[v3uچϏ}ԜjV␸*\ k pJ Q F#Z[]SMрf7X FMYSUC:IMgI}߻zyPty4lR5]́6M_qh: 1H^Pх^VӐa:syOZ“65nYkX8)o?=WsѪV䧧ni ?v?yӻ?/xkG-RӞs3zx?yo?O]I |*~4wJɥ38e7cg0krzy}q|z9*,נ,[D2lÖn*D *iZqr֟uLEJl7A*+Xc;l >1I':KJJ\ u9gBvi\͂Om>6 [y"aᓐȗKDRM񑩦[nc>n{|x?g3LVHLX"Uj7YDe~gEuόA.UVEQga'dՓ I1JF)e76kh":m܎wnx<>AHHsT4RXk!Acf5[I%IF]"3W)_5|kD|jG@XiE(ıAia 2q ;@5Xg NBCG@D]7| .n"2 *;k;lƊAĄv[>F/8H vE=s)8 )))Pn&ZoO=/v&$`gEZi0` ԡp 3mS&kT0^ .X;~ym 8.wTGs4mΞ!Ўohm$nywqyyZP=GD^.)]گ9@!pt9xʐgaBJ '­};N iG-9WF:^baHRnwH>nfh@tN;h%аҗ 3M_#?oc9ߒ*9EtT,A8`bvѡ?e#9MRYq "H!6YS/KtÔV%AK) tB,kY%"< 1APeiUsP+ۤ8>[bg76Q}!vpRXy))ZrIO7"іg dH0CA{7{(hE2lX Y锦JĮ8$"n,͚]y p piR+SY#4,_ H=tm̥#e߅Z !QH8jJĦ4S ͬ+!I0[ZifMq,EUEɶ6a hKhTZegWdBAmp ©xu")7 m ""rETފ$4#@ PaPXjւKɣϑ@%̀-Gl | Doq!ۙZYOл}k{k8X-шP1zqSApK\T7P'e4S&vLisS_k:sdOiZylX)nPZuY -;A+8 rh@~@dsVNߒ<О"̙WƂe$X,C^+s1yyb.i,6^`JluKfPLbj*Y$úǞKo,N;bDr][u>k)ZY`Q$R>k:UQ0\gBGY3OȽʷMsJƵ Km:`>vYk6{nb<s>[~Ŗ<&>K7RQMZ{{GL OuX`TԇquSuR d$:r R)H92f3 o]x1b^:jgF9ahPˀXl! `3A Y|p∬1 $tZO:J#*Y:"Mƴ+TVa 0c`y4>͞8=k .:T$k u?*ddUV~ kaQLH4=&I}} ¾AC:&؟ BQdatT:,ye$į0'R #갶 ^uq: o p/+`iex#Gفiw F>dkCK13m8<SR)2zM+ڛ!ǃ#8o#hk*ä虞݊(Э!j|zH`jXڐA!{*%+"HUQ֕?D#.'-g.oqlϽ4`xn޸ĦfeRm 6W8|vą0q;XQ~ οH}ؿBu]XY^3j`%:9DaYGma&4` A8Fb\i%"X\uB1>?3/a/5,=qķXrUngkT]5S Dcwš \&N&zō||Zy;ifĸ Ѻs>_N=7ZY 1Y'\f! vh;@ 阅ĺ,ui΄b@dh@ W d((-5/!w 9%y-8zykMFiѹ{nqǪ -`,ޚAlw2Ng]W" e@ TP4E/,Yaev۬QЗ*Mq50YYYpU'xBU2kN^Shg׋'(wEb VVڬ $=E%@zU~QBqJɬFA7:*^<WӈOAB|Eމ>&t=aj&hm8v=A@6+J_I2%!f7X.1[yK8;a抐n=j4tIʼ*ab$ss"iu'2p5,K0TMCc O5 8"dg=UUX.YV4NPfH\kU"̯l=䕓E$ˏ ՃɂZ. .OԺ3.k0CQG`.u5Ĺ*DTX=+O$nK\R:=2S`-yмK2 7 )*)9T(9UՒ_e-K,Ḑqp‰ wņR\{{2BTԵ]]؊Ȱ"_4yUKZ'}}4cT?rU̾I%>ΐ7s&RRndIId :]Κ>օװKJx(@nI* !h2 <<#+G9A~`oq)=HW'Db7:B'o^NB:QI ɍ4Y-)(ʳςP3yhvӬ$/,MYKDƣb[wNaB8JL rFe%Iobƃ8CztQG9%N_Qq+MNChX%3Pfuʈj,o {5j t%08?*s:ʼn3?(82[@JǡH5K0uI.IHceEʓh#% ;-V)lcn4d@/^\jg%[>0G|{>1$c`YͿkI2 f5ѯC 9SDlQH^ 5+6s.fXyH8bn;N%hn. ň8dC;E'ypq pU>\-;k4XF)6vE<43mWaL@4R~o|Ғ^..6Bw7i*.QU,ye& )%s0l֔kΠfznu6ת=3k3gNYk%fx a/Xr=$4;#"Re@ ESok@$Xrl<ܽE46MU}<)*Uީv\IOB b̶3r6~E<.&N~+Mp8ë GIN‹&{@AZX`8A@ُj_<_?;9^%6dY*8R0*XiA@ei7\-+[WI *,f.cwwiU c gP`Y[5[zj9Q: E|wrGe%.8Ciؽ@Kej*ya+&1FA!;7)P>s,FznZ1MS9@BaI3%CzQ\xեpLYvȫ(95C,pNu2GƚV~|;&QBlG\p+ (z M;\q!(-lh,Qם?,,< Ip$SbhYQ]14$eZ\&O%x5j+]O%ObjXIYdߚ$qt;Gp(ln`q@2 wv \,RB &@inZ5Agvʙ9Ǝ~%ڃs|Uv륜}ihB;|h3_h;MqQBU8Ct2ܿk/W:g~f8;=LٜhRS"<z T)^#3ܙJe/y7׍;ᒕ 46 |ͽnh<; ^W5'cS}SAKYS5~Te%GTǖ|'Sm_Y;I!⮊YB׋qg(\ "LZ 9LduXFa rI}ctdH#l+@ (zHYG^q\kf{rT4I e׼@6i_5D2a00(bI6~эѠ\ ]~tFѤc(HqoFpZ,7ii񬙜9'*{~.CdvBSaUBVSeTĘe犗 |p`Pn=AT`1:lM Ii~m- '-82Qch |Һ1rV]vBk*p($,xVha':j+B,mѸ݄I{Ye{oZQw?chҵDY)C(3?cd'%dѨX} )U7ؕVDai)]ή@xI͑6ƌg;Ũ#KK#x=Ȧ$}Ag~;LFtC7b Ϸbi Ȍ)њ)L2z^!x$ )qGJ+vip'k]=xЈItSp& Ʃ/ޥ~C.ᐑ$8ePHHyl3BKlNS[6ur2?]jMAmi[SہޅY'a8eK\tn2֕$>̯^ѻ'ׅ 1h>S"ut 7Zd2u_sѹC0?"dp揊(l>B"PĀ;U~P 7\ J`KMhoW(Roぃ.J~5cXg=[dEfޘRN„ Vۼ߉uF$!-m8Ë~YDAz9k  Pyg90UhWn)4@ĺh~l9ƶWᤣ^1.fd0VR)GS*`ɤP6P،ݜql}l\ʜ.e֗5;Ԑ*;~ѵBz0eR3≓+ETa5@BL27u\\kJiFD&=kc6*2/SJF ).Viwxki)uK)_-& : "  Vs PZSD p+1f軟k7μTezA+t bM_BK##}'g) R2M9%߱ ?Y3;EҳA|՚{5nԩWhp 5ȏjB:\/~U@IlZh0auQJ *.~~aMp >uEIcVwv5fSdꊨ~b-#qih 9@&w1+͊: %ݙЄ?5ixuAݎQliilѨGqYkvif[kk6%w+yO(r vCq3nl7'9wm؇PqvMͧKo0 ^c-4#:Fyч1Jnc:mx*- Gb} CN4ahҪ|)&Ts~n0;NvZSJp{*yjIgbܑ`G{31Mfu~;~ XT7>OI.JX꿨:vam2oX6( YEh lSe LyF0e4wΩ8V : :Brݱ͕+IJ3F +RXE0&jEy ,s(Jx3}7sO4O`q& ?fJ 74{ EM/CwzmJn7>oA7sA1hψC"!h)QCS `0wG6rLhw"&D;*L7){۶fٝnhʹ%c{ڎǦ{XŕL3n'RM/:_' ]BjF;-a J`Qm/ݢ4!6Pt, ڰUU#i>W>[U|Svç0IKGY^;)~B kzHh'6]OwTWqvbZVgI? k {CokqIaGɤ`jIJCީg-ZWF96@'Cnnr[ hJ ?1TJsckjsS y <3rHb-\m10j"lffbcG$P^u?:&`/2ҧ.I˃H%ɶddk}cwGՃ|pg%6^}p{ú"yaQvvXy1xMKp&jFl9W/kwxse2 y%"j0plr'^QR}+_cGvACEi\"VsH-PYiWZ0@h1@Vr\2c ꠙ+bFWKD3GS"C{A@ʣfT5/4 S&{ŢjtlAׁЧ'>kԺztvUN,&o@E{֯LѠdDr_.\ (i_% 08i^A¯۔*^Z9Wdl KW̗쨚7{m[f席ؿO*~Әr!ߖ `06W]0 =vʴ=)8G}{\7V 4Y=Ʊ^ߝ/]wx\sZu=^ǡt~x?'Z>S?=F'*͹SN羝V8] LM8n:&_h|ڲ&D9;#Nq-5vFk>韕h4nz dv;oR[ $ioLj`Μ=M(I䀅[Xw\|BtW0?w3̴=f0/qkLpsܔ]yDRijXms [Ud) d!"ch Q WNrئȻ )C b)e$dը |s0x1t] 7ٵpD_v܍ʌ&5ЍU YPm(~C9Hu py8Om~j821 J,Bo&OBZ _nKtE'p~sp?kOcVgքUxnˮ[S^}dKk6yP.R<_W7O"UpE":ZEhYItˋdc8я#nP4V,8m,+dPX`+m4h&%tdnl _S+EXS4a=ANQtZ`h e^6!19Mص[ )Iķ|:'?㉕ON ;JˮeܶqA6Ma+)IDU4o!U=ʬh#z iڴ,b,bΜ9,>>tmDI(2J,>';J(q4i%0Qms ਍F}f"\3܍+o4#ED?PΦbԨU@"tM|(M\go>C΢7ư ڹǍA'c >R]AxIu%:O6\Y=:r(.E r>'@Ke-P\-i\TLR'_FZG! HZ !m麲} qۗ$rIGΔ↹6ZL0/h8aPոUU۫85PO_4tSi[PdD7@gb#хOibdYFdYf YCW $,.tA\,1Kf7\Z<9+Tr#T l|.-GJ" |&8'YfTgw8yO4e_1-D-#1|cW{pjod̑x DcZ ~ՙ/Y1ntL.y HvٗK|f剻Ftr2y-|O 9`eV.*7;nZ[-MO幸ڒk>9paRk&ՏW]8l?NF pgRŔw·VC8)X>}b'# s٧0Efc4`9ĉMYQ ߸|Eら9nгi5; dt v8_8#id;/R0PY ͚@t{J M'E9g# }R9 2 φ$x_OَGVDN8]2.5gO6K|h\eGkS2v 0Al'o$17VXfXRoU<ز wЬђŜ3վS14Gav.p$H#R9f3Xb Vw!<.TȥrŸ .0~ED2edW"dfXdI*^P\P03?D!w::0̫oQ*&.!K퀵C23=Ƨ"JH1+6@DF~ wo0!LցNYg{џVmA(eLu8O ETi)y UtzzlkHf2/txXdGd}}3T@NαY,rE%<@H$P>{#z̘6xKCJo^Ȃ-!N?@0Wү'ЍrRMwlr|rldHiHPE ei]9- *|*Օkr+ED2R9sOYO*4XtGHj֞+*/ʇ|D26CJсƟl#wS Z ˠN+`-ih0*Ńob. O j2ek'7R6 R_4n'T .3tw N[ëjͶkyܞ Y_C"4iS9=Y~&eUlm.M zBTaMTnRI&ئ }1ohi eV_ULV[k.VէeTB Y_|=詅z\XsW/h2m9Wf*U]VtŁ74=Ok$J׳R 8_m:Z-o?ULk_{J?)h5Fa%Ngכu\Ϳ=@+]BHJmSV!߻K}F,u3~ u{63qErA 5|KiJ"jeW'#a@t`. J-dy3S:O=0Ml/]+ݱ$fy_FyOJ#e%@/N] Ʈ'7y=|'SNN? 22:&}D<.L:vsA:/4𽃡@GeF>6c(5gʠ: r}z26D?Y۲&00H^`IzT1ays|XbstV|lg|ʺLbmg}6KW}3[sȻǡ8Wewa䀿,%Oď6>GFR5u*g&xDՇ$gu'hv;YՀUuB%K]rn\kON+Q|L&hKr)'F+ ݖI^8žnm`Eॲ9V;:IyZrcysa}ibفXp sCx'=4\ ޛ79b&yJDV;L Qdh3?Xއ8ftJ;jWp8n !0Al{60&%xJ]7TÕ'+/ހePXZ#%հig ;=d$1i0[?&dgW=+ӗoVxǹ6q.R~;ߩ5 ͑XT{;},f sx^ iф]zl~9+űp -pUa5hPPp0gV=[~h3Qt~dx_PRtuwNlĢS 1P=Q:+c7RB0TB:ڶfX,S:d2ia.hz Kg/tu-ir:*MoOe$ׂȉyDz14ELJ*iw : Kͽ桲5L>$]i~g,}y( !*lgE8L*EqizT! tGA7P%&9=7<$)t"1>[m 2qfTf81+ATmR,GU%Ζ{Mfr_A`ܚ΁֩@@q*;'=]Y5v) ]$J+e-*x u~%Vub^g 7Xy._N&>RַpwF'ɰO PCTk'K"EW D-*Uh["ў$zUtq?w**-{hi@0v5 o9Z._/P/T~kxA55sGnlV6JPcypx0 ʏ\%B?u= GN ]ŋ/(lXϮrݗZ;t򈀙)D]݀Vw&jg;:sich4s&nH4_JX.e*OeɷC:ONwko_/gl&=ygpV(R)r">41PQ mګF? C`c󤦂yumN &uP(ZDl>TM-7tv$Q93USte^w7_K oH֟~Vɬ- 1ĢmmS-<Vf>J0 QHhzZQ/ߕY!soeKtYxY'TUptXUT /g0;䀙7RFޞOOYmeQC퍁~(L8_kLSю4IPmَhQ p2Iƕ zBt$Kx}?MW'NX9( J@W>^+_vx;nt9U>w32@XuU}QgkQJp8Y*HaOVEtM"mJ!6~D>Jo:G&y-hnqɳ-nňLFv_4t x=mh:Lᮕ9nLYHUTcۓp-Mh[*Q%Pd>ԭN/sޱE? ]67"陖2,c^-!]ON!QEOS Ρ&:eQkFϖUYjy19LѲ 9֍.~\yH&@dKO҅@ {- ^_گhPOJ> \> ʲ{L4}seX,= {c;g$ ? [d,D65EZp: sdG׹x"i]Ki1f^cl0O.f%JQ2hzFD*%dA3L(tTHEt)R^$Y[J=,{a*J-U* 1 D&5sl딩G;tPlW # D=RPoWv+9Zp~B wRr\vY`w`_Y ,L-NÌ0dO݉W3X?O|⨦N|+C%uJx:=yEiePLC2)xODyQD=f54WO4xbYQ ۯ.QC5IJ D>/-y{;=lu>Vkqw4#ļ1tusӉwd#U v39 Qr.]:Ǹ~yje65|K(>lEi羟|PEdУҢ`!?hT} Uh+" Q'j'\0O<_>l[?ߵ_,BR@/.NNwfFzRG ux?ܯZ! D4̚->͠Xhi`P7[wB0<-nN;bX:?4UXku{] >xx{ᆔqv- UlUÿ4N vBwdpy/4q6~Ou0(tp #Lݙ̬*fyơ8<󪐚JQȮP>m צi#)M*j&jpctzF 񢑣FɴI?o*l2HZM&e׊ē pz2snx(SUkn~(ib%⦿6LJnWD*`]3I |gZ$wM-.F%1:&ߍS5ލ7NYgHj!@@U"fF5 NjWwSboQ3,MT;AuちTjʪӕԘ4{JÔ ë66ߗ4{̷ wV; cPPpN bFDq*&t9ݶ;٠=lA)0xXs aw#06esQ^iþDK8? Mm4W BD(R)$=+liFuO\Eie-b3w \amR$oWYG:up+xj{<A9*\'O{=?qBLxF5{0h=sqO5FυaVRVT:WN1h 2D &7)P6[unIӍ OyaețQ6;g.AJ}@ꊄ^w̋wWFJպn =t>*\>'WHwS.#ѤOM_ dGNJy,__?ZK#a-i>p,A'>x0` v52{ RWn\3./_]E>@]̰D  []e(p|;&"pi)T(/\6@7^AYIJ5}eeV-ϕoo JdY>(V?Pܵz_9~qoPt1?" 2=41]&9X#HN tkͩW +0s"hbCg}u*p[,0 nFiHZe3GJ6M認1TB;(jͥTp?P7XVvG~m3 _\ҵ4H^%@tpX5kpy9oǦ>9f}f[.vW9hk%jJR9O.JdƤB)$ZtZD HJ6"1מg/}n|5gKt>~0 }:6W]G@`a"€cCSW&yPR(PLEj1E9΂\ %FT!~0d >v][;Fs\b٢Dj*BV;K_s{Ur~{0him鞖F;ϓIa 5 ':zZ0W\uHQ>:_uq_z={ &,;Skg.؜ƓY U>em_(i$  sŰ~"Z9oLH~[iS\9#.{{>^Bq%gaM3 ZC]{*j: 'ul`Mb>&7:>B!)4vASLBQ6AI\ $r6w!ZF0}xOfB"/f*vz:GlsN599 gع[Qoo˞ EDiS5i-5eyjTnV`=Ə5A~no7{bbI`KBR4%AUIHӵ.W?\ҙ6Yxޢkd9-YMM9QtNuUmiYz!UlEzqצi}aG'ŝx0&>gI|vcqIn[@MM {+~fī-\XAVtdK 2)L6ը^$d?ͼ z胫v7{g!lE @@V>T^v,}urMSOU,}'vkݒkvwomtF?qp9SR*W(60kP}8.[cޒE"##┖.Na@[ qxw/~ z&?1psRKsIJ=}yg0y\G)Έݺ]GX G7bk/CWsEN3 >vK>qBz*_z{5?96uFmLj>3k6@ mXwGzKEcSI.U7UWD+ O*X(cm}xvCTcns[>J!3ĭ,Ep}Avt+leVT|ΑXCbԛ/쾼 5^/msOf= (:.P$6/XT=2%';ϗg-lzG_G?9ߞFNꮲgo:Қgϙj7[f.G[iAfL|sv/;=-X ~_?x#B+ Rv6QhXyLJ 9j: ұl,H-eI,L@_oOhUͽQdSRBXi^׭~[J+9mizDqG{ wUw?VqIv!fV{O<n6|%א32vGݿ˛MF}Ȕd l4(RG?6mjlaZ[K6CDA.UQǧU"i6l:tkQL: AЎ{";~yP݄&ze@עڨZ:"]dSSϳX\WN3WGq_t_ܶT&vؔҙU*_ׅ޸m5 D|<|{qY*  .0[E] OG\x;kQdme-fƞYc5xOe gu:iRY{3:)]|-=mʧ< P"NC,(I/p.`3YWEĈaByV%p_'|Kss.?Qg-VH[xy'9r\W9$|%7؏TwϾk5=च?dizoXS[.-F=郵k1c-{[Tu>muVTL[]o?[}Jw~''mܴ=pVge-zh-0%z{+p%j(1u,nK,pZ>.[5--~55!n_=@*Y4QZ *qlj7zx+ңcَqG.a ƽ}DǞGEyN9'dcl腥M|~(.@r/6Q8w+Yp1v8r݇XbBoh"Mk!PԇS!O t37^\g;^r}8rCo":@P۟2bx/Åh|qW c|Ac\=/z&O'nN'$c)3:z@_~{hv~iCYzw Kψ'/RXpf4WҐ>ehJ(OD!q{ia[wMXFmqbHbo|%]TJ'L/n ֗j}g00UCEWwq*U{#t!O~8ҥ5\۷#w hM{wYI,TJ =>_ڐm/s?}(i7oÁ\HYh4*mT _8{a@9x&;b>M_ D#h " *4P@<*D$2Rz l68rZuUa4N)clf ,Se Red_c6@^G Fb Zޫh >qeqJg!NPF\%Tm5a254"1=ةo׵7_oK{-t>JN#|%B^lk2eQ횞"T@'}a2riko!q$yDN9.` dW'9cPAо}Y;[}hXj[Q%W ` ~u^k(Zv00*,g3k*խֱoQ/owni~ilT 386ޒr=.t4NG6zU4HX&:)2< 1言t5:ccPyX f\U4NœY[Gm|^kBԠ\ MꩆKcZR?(UmE/ƭDơ'[~+[5}PWQ|>bVk'4}-VE~p?rmFa=C3=d|5w!,ohRmڮY 8 }>Pҙtntg׹Q.ɵU@r}K% I2 q,ev* .ej6[ EZw2~"\ʌhjk.S 01j8ty/V֧M%/ẲLL,6ZOF#la!s.`| ^t6n'h˝nGh].vW$#vȣSˆf)^Բ_6T?O\y6*b?bㅾV/*C+1mk;g\l "x*ŶB{n&kĉ-C.tJ:}Xr9"hczoDԆu{ oAh*,a~ղKwkVZ>?gЋ>}ڜaA{ KGAnŅK`& ^vةT]DZ vzZ>hYtM WSEp^,'ꏋP];a~N⥤T]ZڽP̉ۑ{*}~^z7vtݢ -ӭ?~{{ņ-Xmv㎍Ox}13Fh4F]mqWBOd]MU֦-<ςSqŪXT1̷KUbՐǂ7?A(`O`۠*u~8SV/:mpkN=]Nw T`Ng鐿῁]>\tI 3ЩKszUoG`CAAyjv|h!axʍŹ:;K6ws:4IXㅰN-x9.UoVXucT+!O|ӆ&S)9S:CG-a[Mb]9"ᏐK[?GC?si Tm@=$rQRqCL*^NWZn*,ppsCƃ !Z Eg~g@l30ܶ\Fou+[ 7]ئ# W(mR]@+b7eV/O(hNMym0Tg*3O<#Ư"QeH{څP>yUCo[V0TFG*MNec.p^2g%6URn9q 1WN4 tUlUWڮiʮE*pU%uF!LQM|:6ZK &k!~aksPF<$ ֒ ̡++ {>-*Ye˲Fq.sE@/.J:Z{OnݔE,55Nz`r9õۡAڟY@\mb~ т;~u1$@˦8eH_εHOPYz1;쿅iS|`pl jO#d0=IkC6~lħRI}CԼїpǩh-}Śk8ⳛn l[ZΊBpiIPOxن{얙?2hZ=1Ddf7Ŕ`Shh~XC33f3d?ڑ3A/.Ι`dxѝ"D k(1.غFYN-`췹'ZM= rƗZ'@nv bAxp=!/}}MO;T w2fi{bl3#xp:lʣ# .϶JVߩ o!8Tu*ft[ضT%mtK)LέKV+eJ ٣=۶y ْNw_ST-N= NrJi&AOg#xF^&d!)D+Y;54$Y $d= mTHYF=D.hX.@4 Ft!صm0zu? u-h!$N)Px,BܩPp2)7{;x٧j%!"hW&8pOqQkW2M-=/pX}\EMӸ/fV6 >LnvGZv˥L*B?V~K[u}~G}k_+ηYCYgTVMO̟4IJfLL(3-k/ l=1`}QZ]jjZe䤚Vy=!RRIvJs땠 ;aN 0q/m̦ܚwv YEYŹ)ܷwU 8Fgd R8r}V7?f^[N6G5; `BۜQ"᭤OOėϐ]k*ȧ2B ꬯&L=WCB15ЀkX)L7F$,eśS]G[]60s N6/<k[,Sny-*H1U]DA3vOql%ѕya4=ōl߳ԍ*oK EXo)fƦИ@6@g#~ 1*fLٵ/QٵaD~qz>5ۂAU&kj``%j Xn"3kM& Ӆmg91Ai; B Ϊіh(RukOC!)R"Њ]T0-l:2 ^VXȺZ?7RD%ΩryR8rCρ9YrwI֘,^ʪJ1d#ij]˩C(pXQPd uvEc 4Cb ^`2b$Y_9G$<6(~1dvi&I2m>B2c='7rj~eET&TFz$:xiʛzKvG/%3Łb]&G E@ h7n}"U$Z[1f*K_*/~<`,-{4hKʂ,]\*F=/[Wl]ftLKZMKY]Ut=;544n&\A?wYNfhuqGǂR&Ye)Uz=uǽAMf @PJoc0@lG %8n 3#NHŒjԫ ?jȎq144MLñy<% rHa'LO=|^`>RcEij)IIsܫ57]b ‡hgHn8׃Ji:`}Zmô!}dCɲHWmg& L cP!qr"T<|W43d( I: Vi \/`Ya{ ۱YzV5<{3|u;1̘$$q^֏zfza9I6YZf@]xGOP<I@yBɬ4`_[r bn{sq WJʅ .o9p56OB@.PpU%3$Bk@SUTfKXwaƅBVNwSo,Ґfq˞OhlT0_ p3U)~9.7^Ӷ<-60c(dw7o?m ۥ4oMoMiL6ez@au $ZH'eJA1,“V]:hQ+RHP %&Fi$h O&(k[<xtYE0E_tuql&ؑ[&]@| Rud\h pݨ5p.r}jI4 i9Gu[)P.jp@DA$;ZohG߹fl*lXa'[S.w"E[nVy(Wslo>عiVwhT`Lݦmt7uݯ6Ƣ,9v]+&kY DM]4#Rp+7D[aqgOAf5; 2TC65_҄@ {h_t8caKڰ3B"|M;O̹a;Mv3{j'(b3 ҅\_6jĩB@b?OK1rvzԯם0:+OU'zL:`yp{'iHagfn ^fuO|+ LfB^OPK-Y/>oPt"4OtEY2= K o> 2XҞs9$zNt3 GgD A84AsRb$rS/ŀ`}WsԞl)Ik(˸ٌ"s/qPgΨGzڋt8ʭf,=^C*H {v a Y<\3(" fFMz(NZ2Bn ɮ[P ŰÅ[`2v"*ӣ9+Ig*/eL`rs?]z>ʴMφ|vѓv,]~!6Mu<.v!gM\i1;S'yYE/TSWDחN?n` h!ؼ9"H&:"BsmvZp o~<* }\ (J\Xl&9'V.m\.㪚u>]C56-#EpM6oyyJy]1,7*—Ϟ'(,#-$k -^h:B[#:go'n.bCVnMDY6!/Ƚ|l{D'{-+wu։|h r qy>o_kƔSKXk-d4#V_Gb1ٳ?\Oq'W8o} xPBmtĖe!t0573(v,=kz5 :9lpAdL2Z ͱJ˃ dT6Rv NlD,YBtDP&pշݟZ0ΡitGyBCW|uw;ތx:Ujw"tA|Rga }ھv^wZE>a@ u?I QMQp+sdlΨ3|n[~՞ 3*㮧lKDDɦSpYىi*\_?@* .HqVNj7h8(p:{Mlc3 BP~B紃mZzq9-YҢT=O  &dQABL &a@?C;)8\I.-+|.Y쮆q$SaO~"1}އ?Ռ͸.\>jA/td'w`'M]E ntnfKqMP$gwږ=N1-+z.#P>Eׅ]}ݛuc^/"m]a g,3PҼBbQf+.g76Ɗ)FC5'+ʎ>("EseɨN<[ +2Ġ?_*ꟓb"1{2®nFSW 6rv򟟉&Z-Be`&ob-6LŭT#B Y֯lVXk$3A]Ḵ@Z<9w3dU,r ZXK wnWT4*K[xn-W<@A%O}!#)U`_!MThd;i;@\DA \22fq eE !|5`Ψ58t8>lVzSjVtC?-;8sB< eN2n|ms݀\j"4DX#1#3C/`6xݼttBbxv}N ezZNאQحJX 79HuwLOMVH>sfYne:/0̒Gգ-Rʶ*Ǝp ]n6ae{Ql9]l*Xd{.( pD@(!%cx tVYY.H!2Jk=SzB}/~S>۞Kg~s/ڲ*Ss #1bN2lsxjFK}^ޒ+'/h[h-]{³/˭ʕ z3 +)@v 4}ܨa :ln PgKv.`?؟-\\5]5*?xC!9PCEdB),0""$mj jfBLR!)V_Xf2l-= T9_3ə!٤%&{Uԓ?B 7j7?΋tϟ?}-> ]yh+6k]*wjj:h]ĔmB1ɟpaHF{խfޑz%H?Kfxb (ZX2WHEVi< ڻܽʚo^:{Ui{U݀\! s7͝MTyN`mO޸|([Q%(o Pv^-<3.Zv8^b~g `]ς \gf8Zޖ! +Qp_q|aG]@U _ەwnl\f}Oͯ&hdsr)5M{m)p>ԢUyLf%8p}OU[d=+Rl2F Mңe{ow.WCTIx UgTy@:v)W~]YӐk8AjMidH!gy՘R"6& FkA c {9=l~Pp"2_9n\K54zMa=etEcma4$ 9F*2:f9km6-voԂӼ!6kB7ܛ[֭%r {-%eo2D=V@]b'ʠqLPuw{b4YG Ôp[!L@bCR8х*? 2g΋ZR>&xvDH9| LH}͌AޠC4"^hǣ#QK6V ׆Шw6ҩWbݐP)\^5 !sgM/Hnɪ Fhևn hQyKiL !Vv D)25WPu*^_EBOmUW Xgh,SZґx`TU2JL8P&Wd\H =19P/*Ԗ \sF3{]} U/g @mR%dEmP&fd\rfǗ^\3X4#'If71V8UΤ )d=QمjvBΟG"}jOܝs;0pSU@x8}W/[L4:)k+&+XqgʜL+dHϋ3M]xztsw-h6IrՇ=!jJe[oЙ$4ɨ}t>o3)IF~ʋϞV;D!B4}לTw8Da 쿈̓WE|gL[ӭY554V:2k>{? n(7)Ȝ=r嬙Pb< Wƙ&J~Ō/F!9A/`W& moω']X">`QC30N;T` #e -"q_fs "ѥm|Ri.+"u!)[$_6DU QV-DYr%u 2ˆ㠸JIA+,Ocw8ن4U `Q s$ZdD'?7GNfv= "x6GQ+xWˍP:6JʏBn"c(c{@VՏMZ?x˕_jnחg')< ,p疞AekX}H!-X4rB5K9h8e WC⨁EJԘ`Xq )-XP|3 >э د\C!M Ҁl* wV*ČiplˌEC?5*'\9cNpE7MؑV_dŻ89..+ mMbUQ)lI`=1ؚjQs ]ՠiZ,<#t48* Pyc`0O& `VLRDJ~LCɀ b ;(t"n ĔUL/5; 1 a&f;ܦ@(>BܙB 넚q^+)Ps6G"<~ EZHU!"gI1tݣ5A* b spa"{E Ì*`uaZSԒ㒵Ô+X$ۥ-*OK)X}ip'pC41)w=y#@ -?O=={9hRuxoEi5]=y  ,h m hI2e<"/Hu qέ80 +j<+^!c1 ZsI d<Rklcq5o !"WVCI8+e5P W-[ BةY[?D||w~JR`;)YWtSbfp MH ;@]{2̾΋pvDxn-]`!ׅ\ߞt+#zjp,7hH좦S">qP%g3pX|gա@ctkRB A%,<tZQPZ_RFM62{wmQȢtag^lhN4#nY7)Q{45O` HbQC;4,I[@H>"oaFc%` @!..,FǪOY}ZYU`w ܱqW_q Ck@ ,`|UzJ<W$5=Q'ć(q>HI 0jϰKVuķ}/Bwet\,`񔟛pd25<;->U+ IJkiN{@Rq& 1!cCo<̀eU svJ@+9xX9W6? h04A>VDžcrt?F %UO ^p2T*ߕmYt D~xWX㚔8k!BU[5hOSP8|Fz[֑DɽYY6"oCqo*śjmpx>7:*XwRVpZZ4܈@3&~n0hxauWrkն6mq $\UBdlv77v {wdvspt_MشQ-ͦJcǎSO&a0"Sxmgx`±A YaUy]14?&,K X̙\[f={/^ x hl.1R }{f|P At "[BRo8жs((`> $!WD /o`NxN`B§f,nƖFH+_hyg*yxo vr S*,@SwW5SndT`%c {v4WDؖӕ fR?U 4ȝT 7[bQmŴFu mvۊ pA { Q,=#Ad}|\0a1Y#B!?/zplF(sk9VdUHᆔ] 8-KerO qn&ZÊ3,# C-GY!КoB%` \OƗڠ/tnG5 WhBxV%0Vp `Xqi=o {PErY*cQ̡cF? 7ĠEb]q.Fz_xg;r!A@d҈7 %X#H-NF#DhI=>hFh߰6gh9h"y"q(5FǢ| ^Gt5!0kE5 DhؿxRi*I;oUЄx2ti>γs"3ȝE@aALCPoF4VZò|)>EYy]FJELaS0܂uNF1(5io(:mcKdG֡?lQZKBqhnB.=0dP3<0yZ$LK3Վv*tHco+؎4'4z,p:#j>9 }+ _(@F^%-e.DbUg;nɚ]\4 h\DZm I>\ID5zc!9}, MlRUjH*|[3+tZ Ή/sia* bt%Aw1 A yr];/@3e]Q&JstŖXVM 5i!nP!R4,dv3[) 7JI[8\+$Nm C'vT[}\ Ͻ3cp%)ұWlXTs`oؐNHFʱzME[:5Rþ:C΁nHonXfg~g'ٰ.$@3šUV1q:>"WJ;⊋[j &+/cӋS3Jd'꩓CJ'U4K\6c{d/gu74wP1pe@=Uԛ,Ƥ4dJa:儉LEX%8(+"q9FJ"3ޗuP({zj`+|:XlrZO}rvP6u9NQZ)zUPØ(׹yuƜ~hND'1f@겪RlK17jTU-̕=(f+ҨuPڭUՍiEWO#=7o$5l>a' ^t5 n-{#-OpP'8H4?LU'h`l`;P gΪ)B@x3/sVKr'YVWgHn`r337ǹ`_qwMp;zAJ@l!tf>VA2sejV=T!t69k@.0w ?{ڔ $߃0 8&u`O#xPb RGv|I\<@Pd9 QE_ysC د* &TBR3+^OwfmR=yoKɌ^rGY qTpX_Q %S Y툯suiis׆n zX<Y"oCf0\P(|$H stO%Ф\nZL`WD+mGn_-o#f3`ky#g0(La5k= GwTEl0c<2$FohgP&Gl7v# ?W$N\4\&+䶤Bd;,[!b(;ʖJ0BZf#$԰J'9,tU,lc|~ ^97@[.(efC7u&AMl7v m\Y'ZڒGq,Pk[-1f?ՑAf.!]$ړ|wV O$T U4<}$Y&IqkYG{/KzPE s:tQ `EHaB7ZG38ߌjgxwFJGd+靹zż:cXcݐP&Pt lK1H 6'0bOE B;CUd嘙p$+GqoYյ N/{z-F0d '~)BBW>mYΓ,`kUCSPr8]:&c"sr$dOjУ:iTӲ*D{M3ƄL9M+Qԣ M(!D%ԸP+YGJǤu %qz/KDjnyخa6a{_rO 8ts~ДjyAU-ٺ#'8;o".8n򇙓3TV8Gi+T 9lJo睛`Rզ*t) ʹnο)]NvrjJjwu)\ưpBS*0}\]VKٺE;YdjTiU5KhAa$)J\ZWaSf^DvI#h!&`"YСc} &cjG&6MP*Όc2ape7[K0+RJVi7,D i=W&!)f`’ۭ]Pmvտ;]lym/b-wcNKg-ێdǹeEʉ%O. h.'%UxO ɯXgq||3wLEgkA}eXu 'y\W"/6/4*_ї_%HIe26FFiN3e@m@U:VBLgN,*/8h?MmIer fmΪ 3X?GWoNr'Ki b+OK08sƙ"ؖ4,qt׬ib@^A+JQV/!I yJN1A_ A m;.\{ NISؘ=g7qnC6F LqLZLOafR*C0^v<z)THуn G]߲a .v?l5V^ʒ[X2>LeWk|YEjo|1\MK"ݙJсLNm* r#஖x`ZwBc)|gr89{ ϋŰ$Gٲ)9i`^lզsH(2)pVr^+s٨?`X(i:$KcX1+b 'u=M~YpQs.>XO 7nGN bQITt\YWU?VMe27F>/SWpQ`] w{`~5o=qU|PgRXl g-8J',k̛%1Bd J 4x8o{3|@`hSj- _| fB;>C,ˣi|kzZD49CSR\y3(-<"㚩>IElgZ{]{toEv3VDǶ杋SѝN8.$a7>txg㘜}Pr]!#:il؎>;wz.C$|N<#Kt?ln9uϪ _'~Md 4c&?£DXZ EA&"cFF@ɇpv3f)jS)4C@lhe xo&X 2-ًpI"Ļ0DFCJ DX|+Yr_\n-[H}cC1t4EB  S]L=v4LmX3˘j]I, n(x.&# /\JMkjz9OB ^bE\4puD%,\n"Kj#tMW= #C@7oTyCУ!g\1IIՇf1".̳| a |Qy7뻼U c5j*f=9 !ǤBdJY:+ {OM羟79+?7iGbp8W"BIs4ku"bx 2eqzOe\fLAsh^ nW]k\IuG.C:f.}ǚy7ҡMfW=Zܰ04Iƶ2;ܢFU hڎQ]X pG|`QЕ!lө6j { XQ1MaCEḺж•4>˕(.x2=y|qW{7!)?U2/xY{x.YCK5ѴJNN1,:rSo=<2r7d<ោ6%{BOcp%f }PŇ ĶzvG])6҇\ }M!w_/[)[fS%eW峎^aK-ui, 9זZ [,I%#`Ad[B.ip/JT`}\DgaE~#ej[W&a>IU@ss.3s UF^_20&e5a $A 6-l\ >3ƷEP={7/KfG х+. i<;,,f(R8ގJ +h4/`FzЋؖSCeyqmfߵ_ %uAFaY4{@jF޷M. O&Xz*∃ hr0+]rH)|m `063gZA=է z?^Me'*zf !g@:!Pqm0MKmSK%VѪy&%qm0ZvCK v$v[,;K):!Tdl5{6m;Wkf1Y0]G[U-y CUT&s(S#&r\޳&` .Pzɭ,25Or` -&+'LbaVUa[ R&JsUfּAL)ϪYRFSչp!zqGg=E1C_*re<Ce'ƺ-e326:m:ȐHRw~@[ɫ IԹ~ Q|-a>G> ~lI=Gy%^iDT qpKOwlc 8ۏTWd ϫ 3m6/)/mo^=Dt5,gy(y_#bc"ϡbsO7CsM ?{Q R`sQwM _1T@S$`uU1ZYAv/ "j9!cec$a{:R%/Aj9-A\yPw-e|xZ<5j+Hf>7R\|=$H3;.+P.-;yGwGW#tƸNݷ.]vuuKqLxxqiҖ2R.:;lCiC 6z&:z&twmnNc^Kuq5ۊQI=~!3TYgsI!wW~½ŤQdA%Pȷi L6bC̳"`X^ޕ3@Ԭ\-;bikT؞M}/SkEĈ^T>^H0M {{=W# `*& aTrUYr)ؓ'٧XiPߑw-;KfCD嬵; B ݐo3E/(_FǴ#qH#GCt0[ B?e ?ۋ7RO?<'a9&!w[h_O`?ެu&%߼Ƹ_m<cn'HT;+ثR,DnbiKxf$ =3Õ,r[Tݯ_aZ*%iKhq%bOcn}޵օ^|K~SsfR}OyU04< +3Դ˗Nҵ,\C2VVeIͯ_8i-^%΀aKuγF$<{S:'xZշ.3[݋R0vBJC+Hd?D寷K}fEz>)<xu`TgsZaUVh켔FF qcn$434iB(ψ3==ٯ bqd2 ('$d ! qc vbX9 _h6Z^(q+c Ż?]pWyqj]Yy>xDݓy#_mde3‘=vQ"1+(-:@x_Y@ 5/CDdwFT-ZJD;/-LmmqovTsgiKV-]Siב -"ly-7P>I3 jhf=m1XVҫ׸&rњ`(kt?V >p_qgYNQ u)vV) K5v ESZZ?泵DYˍ&0d-i%̵5>uo e)C^U%^yŘ^^CkkgM5aͬu o}ū1,q*B^+w`rDVg|?&LAQu|9M7T&HB0Ax!Ze/R+3I0_O'RyXb մ%WUsג~2:rEUna ⯠~ b:뼭[7HW+͊z_Q0;` M :8bnROR@K$Q!KDwHV<=3qbXbە~b 7XzTAdbJP- mk<%Od0?&%kՖ|dz N޹q d K3xe o֞ y৲P4M!JqGi ortF$cRM#ϰl T8Bv&5=eES] fh KH aU[6fldKe޷k2+@hFӓzg0D;:#VG2߮Paٳ{EeU[L!IU#zY $(Ljݲ|4=}'9NԺx)t`ԑ܊J V)r=>{_N;Gųu#I% ā^>xo맬X3ad<9C(R"dc<@~E!sn OuBQБx/rS[N:YXd1+gXhWu?4,-5E{mӾmĿISc|tce)ܤg?ٟ+{~OTX0K5Ϯy')DKn ;9ꮂLfš5_Qk`-W݋Pd)nS:׷mwq Ϥ' @A5cmapxzuSU cvt  }m'fpgmD b/gasp0glyf C(@9head56#Dhhea $ hmtx!\ 6loca `/,maxp 71name HV*post Oiprep gXxX\?eev[`}!% l06CBO.ԯIo^}};#LB2CG s-Ac0O-̋ Ыy :jAT$MYGr,to榧 ?^u飇{;Gb)BX2a1g2CCmH8$a68$E"^x:4DO!=[zij?uj{߯3ǖFG.pűNTj$K$z 2'о̼vzڼ86i|DlPg:6<2]/ӡ4v#dw ׏qz}Irs~='߳)g?Y;!'c(+Y-7ȂlrQ@yas.]]ܕ%bmKƩPi)M))ET&7D-64oC5L:ީF_kvo,9[,S(galxU#^z*iwwG"EdR2dMYe5?EqM=;j4{[k\PćoKK?r동Jԩ੫ $n2F=(!TM (/̫?Ra=_:\ 8+%T+g9sx#n_{&~Vkx~_)Џ|~st`y [R0e7$7"/֗Lusz >_pst~>@43d+(< I,pRBA~o7QTI:sşG_op[qyמf_E:* Nj_'6 kx3ƼPS[Dŧ bpqL B bdxѶ>9Ņ>v"j^\~GJ%{]4EWژ 1S/9ӆd"<lb|59}hx\c"N ZYy75L3EDwp ,k!I%qr5{Iەc7mQi!Io ux>z]H^ORCHQ'-4MׂLLp$u%{߳P…'`3[YZz2{Yx26bFAF("Hfw|RFIN}>_%HgBZO50]s33ո?'02/ZأC.#c%qndw!3E.4k__ M&[켇щōyn^=1S޷n'ϫA"˸я*)<6:cNV(_|;9^sg\`{7.\K˻UQqppaژRR~&dTPDUYxe;Z6X߿վ;ѦX*O݅^kxţ')-̣q$y#jWHN=G".jfyz~X׹k}{ݚ vͰe3󗭖Pmu:J]6ӱPڢ:F*$.lm^!gprhVءLYKpQS h Q؄|$H҄4E.*^r {2^G5ޜ$oh ro N\ I$Iw[NZg4elG{$,},P{V~;}o:6ȇΥ=;.-~ȟٶxQ~UZ^*^B4_Y," tk n14bc f0c<^nӒȬ,k5u"&PgDS>!3E˜eJ$Iw8W~lpOΌ~ ߆K3O_39|ם;pfܬy:ӵzubݘK5U\w4 RJ2GJyIP$I!RnnGSoM˅Wg0@nKg6Jo$O^&ge :ōvyM'Xe h\]I_\YiίnNk%q̘Ʊyjt͋㓊E(j 5F®!0?#MH8]-xޣt/h":w+}+񃣣Wz,cN ʁnrY֔Ӊʊ>nGz5kvZsz?}vklҿ`;wBjb\51ɲKTM`6'nJf c#y⧓&0iroUSwː+L5\ l:|2.0Qp%WpNNBy]$Òp9p.Jk[ 9s-fUACqW4$ʆ`* Vt Yc#1{"vCf=)R31Ho^a7\͞潏^W)7f:ٺ}jL MLTjGLULJ?LP1*~Zc^Շ& "ϋA^Zz*>Uᬡ#Z[V{ Of#씙Ji扛o+8SýHz4SMy_bvVc)p< 楤͏dmV?jiٯ $hLUh5(@xjg %vx=(!,(lN΍|JP$LcS5BCi@XKyzѕIs?zq+b"l*j*c,Z AGYl&BKrR$L ?g_zQ 6>yamg&>mvUb6ZA-9"BwӲ?֧ >m ;gP̙:1Wd灃G Bp*T݇NI#*2F .1t¥gE]kmZ CF+3y&L$$?- (j=Ik>;hEvRmg,~ =个sÄzb9h֌G9yFHr2 g ,KZrΰq@vI?, KfߏA=[nWyƚ[U|;y¼PLG}3ˎ_$'zAyteAQfe4Bd0# {=3o" PUTsA58#K4c,Ii.`OgM%4zlI%p"s||L=݊HqqD!᷐hmE,ZWNuuH/wUZ)PjKb#i\GӒm!qP[~cn6gyC?ɬn#UM6[tҁYae}Muè|Pp A'|i YVh~Q/_BfXvV(DAMhml&n…5%Dn;;qJj]UKpTa.acEtLUU|x}1={͞B%ִĔ)Ns()!bD5V(4.+BoW&T @h88Dc2扴[z!]!}E{!Z4NK_#*&'m%22Ja9)Kxk?jhvؘYWYQ76hD%:[N`BFPUTH'kkPF=1UV;n%ԷX0-+NwQPoں?Y|D{VP`;G.s c^/ܪ \Enhx2ܔ7ԢL}-G!U!f4-C볺Pi-!'^`ޣ$>cկ~Mu5@u:^_GXtY4!z .| R5U^jϛ̒8QM\5~_UБiωu @U0٬L k䛉y5eϮzS W]o @3@(XD[ЅKN9UVV) ɖJx#t,u[v21bM{؉ %fPϗx /BLwUP̆l@vĵPm{-辐Bs6 Or9fσcrŢ=>J&gN! ^(չΗNHOJsWa1ه){8QN*!:{ 1~`ǡb,N[eHC!q"UOʝ "ty%CTS*(\S;R>3:ȾZݧOnMw9x򺵷ĺ{m+O9p͖nb։Hͥ]srrz=Tޱ!n.I:G.00)oi5Ed 0IfU|}%iKusT,^ZNOrSK7s݆zrν\:7K?LGOk BY_vz̋i\\Ù[FLsْs@\ E⟨ 0Q@!p2Gas? gPnd KfGѰB5omj+7;~Kl!a*u;.|Vy`]ލWMX %b+9#S؛x')N(=_V",(? 7F[n|{s$N=r?=i/_xO/p!*aCFգs x#4L ;G;^?hI 9GM B6dbP 6Vq#g/pCyl@S4:܀kXsbKoEXGqJOmpNA %Bt W 7^nMν\U[fLn>*Cn6?j͕rKy^kQmfWQE}Tzcp4ZmDIxf 1Ә$/ (GpES>;I`SU`%TLPa^Ambzn;': %X>OSU:g#=o>3߶DA>DYf{emDy2 q]  4:z-:]8. ά9}5&ɍ?XzX#?l'q 8Nʟn9"7V1 4`?jxW=mT[mf>RAT5Qu]w?W݋o%n2w3?u 9wmsKy4qyV*r)WWU[Ue'PBF'o~߽M?d?}/Ѳ񿑾D/]P(2 !ϓ"z|y ydG& [y-cy JM`BgzDj+),hQO:1I(*أ*i98A}\s%yJ}c6rDCnJ3^-q0\(c '?=u4[}#?esdGi6O+3(j#(L,X_CP*q~v~ω]^R~kܚ7]۹Kd[w+PZ4sP[OdwZ2ct=|u^Z<|˄8Nζ L]7'.BWNܼwy2aT2J#(ΉKY>6TM<a(7ybG )'(O* :ּsw-ssSG}9mPMS7S>.v':~vXxymmҭD7B{[voYP@jӊz+Nj?t6:xFu^;wΝ..,d7}2<\o-OoV+ gM \xşvyd?%?W[R+\Cэ́8>{ֆz2,f[AǣGZkc*ɧŗ9ώ/Qx|B7EN閗]ˮSoQt? o-ֳ ' iƈDID"or($pj\G r'O/~G9h|TBoK!!/PLWBՕ1ME밥-D.`uX?+ ^1W k&~sr 1l}0QgLj9:Y(ߜ?~d؝ݕkn! _gvG_O#]|-lc 7-I۶Qm>Rldm0& -;dqS9lX= >@\+eW\k=.I6SVGv}¤mL|qLt9F-:GIn@JQ&L d6^ҩ.f#X\tu2>0RyQ8 /gKAIǤP]aPXCE]Em,\$UKm9\$uVEޅ[Eޅ͋Xa1mpClʹAXpQCF/jh˜" GE #KVB$^01_ 1ϔz>WA#! ^_Nfz}# xM˳lG#^C "5 EJ-u՚3D|&ãҹ͋ym@^j[!]7`"M)(Le DS"ݐJ x0ܗ 4RE+팧3qw^;1ޖ -7.:{1\*֧yj{8iiN m #忒*>fՏ?#{?ŠHp/:4MS]bX{76_oۛA{⽹%{Іb_VT)ŧh-5/C}/`{Xm5G$P2Q@xqD2u=_~XNqzxM Fu#vMM-BYxkY5?vPk>_~:7Oh<}uXAUWʩ EJA%;4DѝO(_:9fN1k:[^r5?[\Žl3jl,{/vQziwvqJ|n>y/3ja<1Qt+N4t8YsS:܊scw:g wc6ꔽ&%e3wGCEMtf7d Lf"ahCEIkPi/"2 v /j^RScRrHVPxHk1 CiU<_p}45  9u^Cib 1,Cgۄl^'xl&3Iebsh,KRٱ  pچolRh6}J/-pk>l`-s6G"4 s?Qe^7 u:| d4I:=aE^Hvn kQkܖ5ylY fWNK0Lأ˲GIsϒ2.n*r4[8/pR5ݧmYdkƒ֨giu M':{([SIZݝ֞dŸ'%&عAIk7)[]4| G3 UZhvZ`]1orģ*<^b3!F6 :YtEׇ:KWut77=~:ٵzf6K̬ yCޭnHCjQ,jLc"ʏ ~]|a ]W0 sä zX2B%n ]_@5X >;:ɉю~O@Uz %0nɇo8vx9 zF`my|ρ3W㡿$R-t5tMf52HtO_^&y\>w^|I\?jK4_o/+O422 Og6*~ߪJ%0KYIfr&2!}ˤɤ̖Iؘ%cͬtMeSEi,~|1e1eP[>(~+!EHę}vfWX,7[/ZY&Œ+ˆwjlޛ wxmbr6yrxɋkm4KrauwI #}L+>ب7{\WϡA2v@=V1{=`ÞG]jȐˁeM}KTY \2Ҽp? 9KubXssqyc݀ןg2OfģON#qht}CH&aph}[rqbsGxitЮurfC8(AW] ;fe_{[OMXgztBCF zQmhX=ޜ7syy ;SswnQJYg8ъ(NJ,%\-yu&=~_` cYհd5dʉYFtb'0XUJ<+?b?J)5L~xEq m]]ffzdHfDpP_˞%tJ}A,36^cќ{r9ّ֑b;'[nc&`59|ݨ E}ډ 4moK>_QjW> /W]0 L!lOa([ um tcay.vf\=zTD8EwO:ݧۮ#-B9tkAJ?uhtp+o6LD;2q,|d̴՛W 3[fo([f958fud2#wH"+*?c=㌰ܦp%zjBc G>(ʮAK*2|bL̪k׮ $Q?Żi-gܸZ(/&1+HA]ubP EeêWeNo<|]huc=j?Ȝ<{fھ=[zȒ qx>݉BU&ukyvYVQH!+U:cZvrvl,{67kYϸc(|8^>AQE]M9 9PA'OLLlf<튫Wa'|&B<K]yb|[dn`d^'4{OUj%82L䌦lW;!̿ kn҄j{m.[52!+iZ:~ngnjmjht8Q,R"rNKIe/G\G|k1KubXc9\ӑPgD5`IEMFM\ם0wG<#䛊.,%[BRr&ē5Eű5Ky[fOF!]tORQ[Jh fVHx) \`ge-zNY~(\tW~c k$R8|Ԭ!=ml";:K Mk6OdZV= g|YHWE8F\(>Q6bMP,NxA'ϲX7JQ8rȕ_@_fn ;/E-R)=i1LqawP>!o&GOt\AvGSj{{=W w=NkYݶMn5"("`EY7qu3KvM8w ߙ S*h}cŗ׉hfH57FD^R\!qŽ.TiIa%t`_|T~$wBzl (<;).(&߃BUJ %tڳa`ƪ õg~ا4) UoU6Wge=-M;>Ky6g9 c;1bEv*v;ERXcn,J<|/?5vpזSDm99)g TTcAO#cP9g;Ͽ嫿~@~CU1,Yr*h1lxn9Dz:bLq6ViL̃ρMQ(MUU'[rk*G-8akfYϩVEҘE,KPqQ e-fӖ}cgXï?ϰsbэ^cuUv9| A9낫{'Oe<Rͱ g[׵Q1W3w/OXQ>C]*DSUt.{^R9Cj;*WY@؆Y(|eT`vS('r=ef(xAወK/H&{: qꚛ1Ǻ;.SG#^G[ZG#n_Wk[Dޚ#_h+#%w5txՋ9 u6Xߦ%ޠm3OVnT(.:v&qS7G[[g(w%\|g&>?k |'3cx*I&f iThS87X(UY9~Q_B5 ȝM$ԫJi_~\ ǷUtv%l΄\. -<:1 DUuM"Z( L( TF m\fݓze? K{-Nn VEa6=Gϫ6ByPREh]3..TCa)TINXQ杢^^ ʗ{]]u%}Jmwktّ+]^ioOtoܵu8lp8DOkוu4F}ЪMm('F+[ޫ@zvn۸~#w-~.V?r|Tԏ~넱F ;sKgDkfwKw|5 ׋ܵzY#Y"K&Q/ŅT)C7"S^A5M֗6> @;tϤ[@?Eɲ"iY,kG&H(WLoё11pW6<{t@#~r,C*}]l9+6&N1W^ VD+B{4j2cj#nuKAʩh24P`w#zL_X՝;w1~lȬ, E cbXYyJSRc꣘zև4Ac3r04# $vb呶onm :чC!y4yvВpqOO8dh,%蔇v=M_+ܛ'`*Lz@L4ӝs"kRY3ϙYhM_D/>wDV65UxM%bV l8>3L(v ^F4$[{-՘+`DE%*IM81IR}eso/! U27"QPz4 ZҎzxL}GmM/?c!}g S3lYFHuj:SF[3u\l@nk l xcl|S>Le4 NS"aCUR#a!ʲh{ ܇do^ES %˥-~\z8P ~4j'󞣆Tp^&ѼbA'|ܗF~:I3^,*uy}ӌr}kAߚA^k}_΄R0D5zP㒲9'4!yDHdNE x|t27P "Cl9귥-9|};yd. d{oן_ O\MQ=Q*]WuU~CTkm7 x[uZAtK7)b'n;'V_ȯGŮGHj"p ;>{'u{yE 욦j˰&i@w$b$OȮI:h WvQrm9~}G>Ⱦ iggSׂӮC$V%Kn)3:ڊuF f_W\o8A 7W`U*UmcK;žt&^V]g뙦[Џi _~sž8^u\#:ҍyݹyN~$YM+3Q5rk^X: ux^#T(Ģ 6f&OJopNJV *~'A}/3 (FT1R"fHCDz/owo=|HQ@Ivk(Vwr=Y69âcbZ:u_ ^*j\XLjCui,-e~C?\e:p>xdYXϿF9=6n1ec<>:41.}t9ChJ:+ ˃vі6_C/44yFCJX 24$ez"[YDLBݞ-% &r[*]ݖ\WcN"ҩX鸻EP% /ښ&a S@ңvdqXܺ0AsiatuU/D5$5w>KiDɴRC)HYqyE`_t,ryiGL]?KWn(*|x}u4M 4K2Q/ŁΗ?R4 ɶ^(-S*KR0 ?1稯K xi-\N "3Ss%/gdt%LӤ.r\.f^ds#k>Kub\T(13ꍕz*qYZNk:Me* p,v'hK%$T%$^8k$&aYFXRv;.f]eNH@ƛ 6k)8uQ$cyHzYR/~u*O<|o/T5l*5NirCmeΛZXf~t0yOc/ovNhHp\ԣ?GGG+‘pW\YtiF]'3\8R 0 iFj(P_J§ƈxTWuSO:\tL (:QN4VX~źLd'HuQw鈝`H[)Obrs?|:3682ZUu5^s/cϞNm{xL[Vu'}f;[vuʸYܾ'ڶ$c&/*]_R \[O -"}zkpJeK(%ϛ3yOopT%-g/ٴQ{y:!!4w$os3⟉</',{[hx壭i˰cYO5{݁p$uBx`A~L&tCX%0<'eҘx^h+Ŏ9T;&';:&&:*#ъHRkωd[TFʽf3)E(XhI{rHU{e!Vl\٨S5* vޝm 6{7Fjڣjhm,@`1ґXM߲1cHPLlJ>r)LQ*#r5y`_Sl>nO*DS}7m=$zI߮9ˍꖅ/khXP]@?d+ͳ~gc7|{|׫)p%r;%^3/gy@3vm <5g:7#"+ҥET0oƮ֔@ٻe"\YT)p<*pzj;Ouz)3?q3f9Ӈwbu55ե&>"=YfәA xE~|HuFfF3&KU兙G (]Yyɶ:d Vr\sKDD{< @ܞ?O\F͖VPٌH){Ve%c\.Jssˆu"kɎen,^ܛ'g2Vg Eecr(8 $1(C(I`V^PF .rF|C;`/ 9,vYNL-Oq&Q˗HD=۳D&f 7VKFL^g^ϳ< ]X%]a rhbvF5X2desO&dG-@ %S'f=K'cS]V /-at$sdd{DştJZm o_\*cgHT"gj{y92!׍u}"IosA7S$A' x#7qmfFm淋gDq'o*'FՍMuuW9=j9q|)T(D(ˇJ*vs܍~87᥹4!>?iOO/p+yu҂)%L(S,`wP,A)9" |qLm"mVս=}v3 .Lj qDzmm Ydk2r5 W>o7Mp8sT7M{ѐs[Yl2^:sh-a#Ml6#yHjS0S(P'@<b{L%ȴ5<^</.#edu>"1c|'}ێ f2Y QhxCxi1b,G7qeMجbwDdCa.[EL?]΋2a4e5NaCFR@/ѹ`ޠcb/D?A>/ 0H<~c*_whoFѸP/L:=܏( BB(zXr yiqz'fCGE9g0WX4k_cn~uѺ:T][[ҷN{9l DŽ S<Ig6I2N xRO"2mwG,/]\m$xy;^ל9 pK @KWKAWA'\5F[N/-ԓcտ[[0I="ξ>˼W^Ju c&vHkUy8mPjooko+tgj~_Y6w_p}eh$mx@EhBcsM4a,`+ h7 @>nzPj9>oYfPxj!w"=>ݑJuvh;#L6T65X*BlC ݙ%㜯$➁'n_ߣևjk;̽F['5ThUb܁[$Ł!Pxc' 259ͻʷ<CIS0 EyZ33k 쿴ah؞Y-R-mtNDj)$50zRaq()@9"?X4.H5.|zh_͙G-S–S+f&bF1Eڱce%4ڇihP9Mw 5k3ӑB EgUPr|jմڦڦVUCcꄲc'v6ܱ1+R-r0r$+E+NjxL qV# Rr$tun4˚8]w!uY_{#sП !%;|EcA!ՈJR1xBDĦ@TKӂcL#l3uek YejѵMuWݱXoU:GZNJMƆ66tah5 _t\*H Z$$gMhn?ʣ#C|g}S7> h̼0r5f|!C"ٟ;vXFJYVÕз* mPԓ>ӲUa70fv],Wz%E_J\!SUɼ$#kv ?7$"y w)Sk,:2fE~˱Aϡ9#',C]F_pr/2tsVųw(x>Oy(:*&x y<B/G`j{͎@ վDH^`b1{O+åo``QbbӋ L/>,NDHUݾ$3&F}u-5_HA.\)ȅ[=8:& s$Og<^+2;<nUo/B%i\ӹo|_<| .dHDO/ʹc}\62zk߹c33} ?-{ sP̎5&":XeJ%R^VAB?Xh [^HfZv?XdK}uFd >oݟrD+]Sbqv0o)]1g\#Az@\ z Jv|5u7Y4ئ̗hM>yO,"zG5yZmq6u*oԝt87 h,-ܵ˦Nx9eEͫnqWZND%NV_${Er޾)P4o/Ih ܌.4Mc%Lܣ #j5/_;=i -\b> 魯H;y+p{~Ь6j'Q:c&z<ڵhLxq*@[)ėcܲ@gZӬ0> Qf6 X،:*}6x2Se#lGy0kR,Lg&Vˇ/ l"'U#1 1 1v"Q O}vF10  H;2:bzfƉGKQ*5& 5O0OpILi`̪`™WJhY8M~ho 2WU 75qH@?$>oc7Hd2J۸K_9k>?'eVG(h=-QFM?nKSϻ:*T:2:sE c>xԚHVݨj+W̰gؓj0+ _2l$S} m~/7>mY AuǞQ0XVjUcQ4/o6 E]E f"K-H˱m~'WC^$^s`ѵ&:K7Y6=sL& ȪpW UWg7S}&jzۉ쭔 }<:*AW# 53[M 3J41zJjkqri d8#lYhE@j[ʗB?lz+{uQg`/tEE-VH4%Sr'ipGj˕7Ьҡ OGd#^:&s \oGE+6_/{66Ң 9]}.P u*hh Z-A7%BD@0H7;'bɪT|%{]pm a2! 㮡T:b̐hMյ<،юz.uKuuum5J1f3&q}%:8*WdntR|lvfvضGZx1V2< ;Asu5nsHق /IZ: s )5o'z*i^bW'.|۹g~Z/T^P3+a1SQ]3h\GB5Ub2S-(aԐk_u}HCI_o8&DɧQyP*<'qdϠGk텐T48V#XSo-iG2*kLQ˷]MޤZ56pMKnXMw_2bo;m9>sǥ\[VuӸoA+Ļ- 5CZjtd^$ݵێ4RXUO?R#M'jX:p TESw^WXe.--lAG\+JxHu cL p{n\N 2vgCVzOBGIͥ+}C;c{/=nPĻoke,+\㠳V2asOA..7_[omA!=2o0}/+o~w~+&0}WqQB?iKI&Wm=L[ĝml~rd ܹk+{ۯ~E9Fi`<5[ (i?rw}('*\VW'1yvYKH3/毃p.yr)HI]d•8XoUyPůJrY\R9Wa!ꑼQ-qcy(\@gLN?g}iAsO{:1H<`4V,'yB (1BIͬl"馓t|w[ogud8 :72tqZ&ȽjI3g~JB?Q̾}1{+3mV]Ө=ڂ3,E{nb!JRb NJxI AЛtjtP Jj3Q*AQ:D*U] 1w)} ǻ8J"7} s;Z΁}MI #_U#FL,m"+Ub6NʧpaaX ?;guo 0;A?03s=o>8 v^/A\Cr}vHU #`G2&QVO|?{Jsߦz^AH21|~31CQrQ ~= $*}wە^ٻX#OH}/T65@t}աt~H\ŵz,UCJؗooKCyE6ޑ8mNkrR:isp˹(=r_f~MړӎE{)Th܇i<I-R[l!=!5!nTm=dwar'or= a_Z7N|[׮e[mw\a wuSw:{b߶dڜmo-l#Y[ݳ64j&ȶhȏ&[]j;jjlw/ T2 ;VU\c:#xr\, ?w]*ZuC#afvu  oUi/M2u]b^X`^8\91Jfg3 ;g/6~oH `ow{Ayi ЍG8(m?1'ɷ8-.6e2D<q$\@1d#Z WKw+=wZ(\q~FVozx(³Fx@i툠ЉvY#(Y:qR)폱x#[S*DiʥU+2N<72y~gdm~!ǽ_`2L-C}D7zRc,+]%x(: e6" KjԜVE9 t·lY]qI}R7O33 4WmP?K w!;~PLTtA2.ϐ}ƁMގgW{.TfҥO6TBfy@]PYN77RU5fkayp<66_1^&hue zMQ5`(l9M !AUvSQvڧ5M5`VuԞ4GtuALh?}TT;_HnKfZӧLz]$f7Ӛ}n+< Uo>-xnͿ+}njJ hv*{TmU0uPtKcvS0M%#z3y9t~=c-iZZtl-_"*`ٷS=]v;ȍ^ww(D. azY0]7:aS7r0@=BjMC7`.P{v,6.o ݙB ?,RF%[ϊ ʹ]bnKO}+Kw5wӷm-]C5+qVbw?kW}eTE[MGg'k/s8N#jUU42xՄy\Ey$Tfìq(A=d{. ׮JzM2`l|{}*Q@áD``'74D) s+aXLݐń:w6CڪJ6K h VLM-1ՍWM2jz B]2nqkI,vΎ5غQUك=dS}|ޛ]]C;d\?Zb#Y _ӳlywf+*7Mn}~nIPBWw$B;R{Ws&͋b;N/ Gʨh+4 QXJΟaֶZѡ.sK/^^w鵾n7g߻$c2Lef/>g2e\= 8nev/_F7xˋv*% kE)D XUuQ7 /Q  N*6ɓc&. $ë,\4BWL5Fejm]RlLtOt<|=۹ yC=Q:A]C;;cQI1<^͏Zт#?C9|8;+R@oB-I'{ϝ;/n;|Sn)={^E&ML3'{5XԳ%׻FYmWIW=93;cpKv%y_UF֧*UZ\p!,biƚ2q3ӲKX .2\'EMj×&gMj-#\?LgΜ]}~l,j\q#_W>?6Em< Wl j8 ͣBҼi.b㙑Z*Ė @2α>Ec/t\4>_^~vMow7^Mވumwc/EA'ml cU?3V^&F*7J]Bȳ{^RK}4O~a`Z(F.`1xn9{~ˋH{7o0p8/q:&T86‡yzi޲|LL掮[tbHR4hOhHR6:ù*cί|LmRo#/2w,0;!-&[Ǥ)e9=/&V/qrS‘A\я¦@u^=rpGQ[ M|H#J4bLߧh$J5F<Ҁޤj[E#T7L1;{(]޾ku{{+ <[{]w?sCGkOZx.ngj3ߟD'Dg5n:2AtsOZ4% MC2YfS7]F[4'0Č:CWΚ}4 C=处왗0  wDoό߻{-7oàÝwllM}ĉ{O_q}m3y"jn_Dyw=- wf$)PXJb%^2XpP2.(I2 =ZQ ,hg~Ԭ`:Q#Adž D۰!Oߥ)*}5~$YϜmeR8uŗ6혉P$c[_gfC\ZN1}3dgq1t< kuOOh(2+nt't.[r+ f|ޯkR?Z\|[ZCe}x&T0aorҚ(teN:iu85o>[qS.#L6 _:bBG B?P*kVǫ}t{Hh!yJ3:$|YUwV~1?6)zDqga:I5:g}uu y_::ٙܘ _ҽik،x{Z?~_W[d-ٜ|=||vdކRO5_X)``:,@c&K6[|0Iͭ6xm~YɆ$-!>ǒHf|Hr2 Ʉxe?BZM┫)]+NfrZUل$utxmse&hs-ӷ?x}^}. )raESQ!ֈ1G<O[DWͥRDUs&x mnlSkBmfd-5--55qvt0żS;1w G42bw9oHTge? _œRsaf!PG!wD'<< #?\'_ K6_OK]a8љvwG᜴qCbsH8$/NXu|CT&BEDr~74oW|Q>ujk08ܐD@ |8a:/=_ΎxW\[{) 䵊aF[Qb4p]?B,c]Lx̡AŠk(ml7o-V)ڣsKnS U-VY(cU 7\m_Rqo MiN/T>g7w vJ%:P`_YX,,kkV3[q 88 {G+?f47Mͭ8D|4y̺9}1 q5ҸOd2Sr-|Q.âJ| wp)XyKQ9cT3&*[*Vadks$bAm;|~B^'oFjV)K\^| KF ocSsz_A^!YXeS.L1pұTK0Ke\fi1 ? lRh6!f$re c6aKYG;ⱊzް7_',v푰e{$T' ;Vopս:{S6tnmyffQn:wC6mhoMą[" s\G.\@j>2k->׻\;ڒ ae2Ȍ7N;jUW8k*#Xf\f;#7;S$wWe*f?_{LAGٲJ^[ݝ$z//r;NmG>t$@I`A%HA{"ED"eU7[[l99-Ή#^cT_KKN;>< AJwlLiR1q F/\\A R i4+iH+e#HN"MXe-@iHL^8IpyFp7%'FJ&N^#Κd47gmRZVXTqZ}^ `V91Y9-"LLӚV2No? y>1Z i_ⴶ4-"֞$X+hyNi+\l̟=b=K> "ݗt? Yq:y<e<|t> хxPU/ZpAH2:+e1zժo__*=u8~0 I9HG鑤gbEޔ7%қ^g֤֒G8-ix 9=iHJiޙ^}͐mo{~&NYN#B13ąVLQt s]-sgNI3r|O̓FǕ9ie.7Њ&2eV Ap5G ;ཨcҗI!;oaJ2~X&OȎ1ZL!өW(GEfu>0 kwnѹEݶo׮}zmr57vۺu4Z'OnPɨWY_CVS@#g+wY,`'\ qi7m-cܺ#ܯiΊګ.\jC`7ۋOK>Hwblgr~^1,a+KSKY=]fte.\ؿ`aKx Wn-V6Cj[Qݬ\>tUwywᣋ?-twI_eL{yx~n_ߒtO-8>7\/=~n~yQzr|a1}/ߺ,_Cx@KjNe}SΩ5T>ڣO]kDZu{hLtǸ~1۶[9"":]cI03S#qxc~HyaX!yLwU,;sp϶}͆\?Ў<1k–L@?a鴢 }UHt(%qgʤnBM x +U۞nn":m*i1F5t|%Zcʭc]D6D-o>R=3}+ 2Jߵkm t@Q }4Ow|sa!"ATH B%,*qOj"*OCQ ~E Ye-3ȡDחo{? MbYbG'+5#ոzWo䇼믹.5t%ݦf|롇>30n =s9)y}9N*ZzpDY %C ssT+ʼni6벍8qHe2~dO=fn-[i˖G7>w߆=N65&4.o9`$.]x^՘eE8E @sBmiJUAwRS3 -yP!u%6 7GfB#*\zQ b;H]s\V: | xjtRΦ+~TȉƮŲ!KrXV~(˒o4Zm^Ũml{&ffl9pZ⋎,\2$ .s 往3ʕI<,d6q'#~FNyu nmi|Y˜XI"ϖPduq©vxޫ$VY,]6G`$X[[p;UuչJ]RByW=ydez64ecoN(egpkխ8T cN1#; d;m*ܔA)Pn4K ВdHl *W{q8G#PVmF;ȅa3/ޗԛ]AQo\]|QeWuVAŒ_)(P2͕A,kpPX4Auѷ/|z׮kGyPUZӹ8п' xcӮTWZrw`n-m?ᆚw>Yy;"-[8- 2*&b_X>˧t.I |nIw!5#do3>5:F kfM*SLl L0y 8'8IWlDJ:qR˺Z!}8hiU>gfNA?qGH{Pl[÷(f\æ;茺t}*p;xҔ޽v5ﾓ'|7Y@@us#*nx)oyA!70l.KiULg?Me9NZĝe.Tvڰqv~SWl,hyҍ:~h󆡱50%CXnr+am"h*~&C*_< jm2J`{>~Y_{n8 ]( L3Wzv0F݅RCƁv_R[}rߩsMRr߫ ^%TBno_ztllGC{اc1kSJO>xJާؔﵝۅw+||fUzx}.*toml2mVTM޹Vy-\IA) x pk<; 6** חoUK u&`iI<`>O"I$6sBiW=ْ+nf ;X^A L%5w:seY^q QdY/K& z|h+?gݺ|Wщ`,vϦY?PՔҶ69jpti++9}(/pO T~Ivb%d`E^x!kKA܉ _^Ye-{]o˞˞Z.{˞Yeϟ_e_\Ž2ёLMŚ4$nY"&BlJ !))&CFu,+}ګ暫OlnhhMܳW^瞗Sbm;oѐ:#S)Z&q?d﹇|X_30/>>LHgD414{I'yI[>߭g^*Σ7q=Z-uܔ,}{>ڙG'֏만Eұ.hv7Qu^z1M㛆Uw`cUEIvHh>sWҰ[wKz}KmEyDeŕMuS#56Pe19l<&@A Ǣo$N?x0a_C_)6oL4 X:.)ç nI6ߥki_;.{lwEqcXˇ构mCK<:/OgRG;^{­[{ $:Б}E4vSeJ#w=EiܦJ˕#nqrC{"D r f;V+FEVnV1-廏n>܍>gClcdYyΪ`W_/kvL  '*) z02c[WWCESY).gdkqQۏ7-I$dl;OKj(ĉ[.mm T|j> 0b& j0U-CBPRII p,xDThڳ9U:OCx]H .ֿ 1Bfޝ-`ȟ'cyh=ϲT܌b,&|܆8].NW͟\򿨓s hǘNmH۝h,\. =ORia< $% FǢY;al/_xǴcgttΚx.C;|=!N D;`Mßƽ:k(kׁFvY|n{|A6!GBҸ7%M6e$&$&qmެtrޥdIa^A_;P_Yoex𢡊>i):\g}Dzh+޻nst㌍L20tN2i"ox猃YtA d2)"䬾T4)#7y+| Ԇ77lEWRQ_'cTZgS).sO[ _Z r$Ȼ̍Js LL>)h|.#]ydxnTbL]Ngrþ:NS{qsH@ z')p'Do5p=##EGMx+[[23s$564Y4'ǚIU+ӪkjE8Xv=Xv%|N_IG{@ڬBKUcͶZ,t=]islsڃ;)xTQJ]iaPmS~U$t5z&dEY9`z~q9hPHDJwe~TM5ͽDn*`K* 0-xe38w`K9*ltu|r~\_fj wssl,=©_/;5@~ﱆ[Z/4a ʨۍak/c_IRQɑ5<6b75ً y.TՀmeZ)n5䵆k;%O,jPbżt-wf5dnz/ZIN_D`e"\׵nXyn7p/vv˷xvˀ}G|A }IߟnS< I7cN$O\s>mfLgɦ9ݔYo3'c}\7,,l)U/WV(0,܀s/5|ycҐVL}ӿ68W(0cN Li<X<\pE< 7ÅV="+0*>5yX9!=P#>us=<~RO+$I? ÷rz@㯔oIa>$;9=|jdeKeerYmq")$X"Lف8m%%=ggg.[wr0'/P&/URl˚hUٽ+ `\Ƹ(d TXl@۩ >a'TcF8ސX-/Y@[> #6FbIiqy]6~3WAjI{+)­=Z0.J虸ƟI7DMC[m%>&L>g@~x%=osUÿG]5MN'ߌяs&'\$;m  ὰXL,7]gd E y5b^4J9!3idULJgdd-^9X47$EOy+"?ļ݆t! }a;}<>?>qYB8|ˏֳ`X$^.1} T´YX̋Kβx0FcutYɉi ^框\Ϋ-C_x|u ~\׿??g1 m^9C F-wٔ68]jzh 0-- laWcpͮB~=OQsel+umzmeFC=%rkF4r&0_&:NJJovrq4K`y(\35yUr.]mWP"<Ѳvqkࡸ~-*oïb?Q 0Eω^RStZZ+@ )◍(YfdP50f!l{r5;KKכ#%%{cK{FFy|rxҭO AЧj(o1I:o( BH7Yx O[o4O\xLo[].\H>Y֢IMBZa4~nJrߐ5ivļDR=֞pò~pb̻=U&YN5_} 5ʳi ~69Ʋh\WY"%{L+%1kkO)Iz1_V߷V͚K̚K!XLN"^ZC7O5[J 'LE+ נdS #gyUMQAٮ00 RYeu Sb{jPV3ͣ^LPV OB< #Kz|2Z^XA&_mdiPH\FԐ/Z,TbYZArSv\xaXB+"IN;H)|>*M ?Dze{c$Ҹ=#_&Z#OJxM4δ޺򷶍xA3q{Бȁ{TNS se;]d&Iy1]g57.NXӚ`mmRsSZ4C'm1T%kӅ%L=7)/{Hof4J9G\"(mJ2 }sa`+ٹUnCW r̬v'@oplϖ($y84Pym D/T6k\$Xn2H%{|>۲v K+i:Nr9Ͳ"Hus;+[xyxfz|^wRXB`aî٤ty7gfy)(c> >c&/Dݔe~}]#({DO teWXˤ (@c=nd8QJK20)eqO(`^{ | З1o @CvZڗg8X@D,;n"WH/gЪiWxKig>RȓԋlpV }"$!I “y?a9٤jA&( 핌)͸P=ar 6^CJ&W  [rsMP%ZpEiHR׎t:sSjZ]}L7bhlmmgf+=1H,Il$g[b'5q0$@W^ظ<Z-{z6H6<u: YZ;ٲN7bR0gû͍Iꫮ[b2I cؘK 9=N j_*ѩ27M6Xܵ+X"ڨ(765Qkq8eP$sK(9^ZN~x{UN8B9w~Py*\ ~_]CL)N!d?)!m%Vi@PA렮#2$U&)j|V'(A9ο(Dy(|ԿX-ּ\s9Zp~c R\6t 0{:q/6lPjCoNGR!ec|;E<|U^>B`TxY8O1lGC#=TRּlQ l*.wlҊvX33vV233qS%˞;ve{,/pn{.;AmЀg;uUTw.@gAZOXd2tKX9)9C+N{'~:mٷ[###_ R۲ mOD.-[cH=C Ѳ_BANx٢bCcAĎP\???7_TǴ kavaĜ;H6/Q óȋ_nw 2R._EO Nӑ 4 6ڇtBt7~ez\'q]g _57fIVlJɗr}zzNwfrј3Cg ^Fz)!',(V&.l=J}GD.r ˽3Da PN' HR捠MR7RrA)O@Oe 4q`$R^^P i㎍[''֏D" U_+BEkSW7KC?t߲yKˁ-cXxw4 G(1E_aјbLЍ7P@Kexo9 l/a/B44SXX7dжCHϑZE\ @z<^"ԂLvQ4TNrIZ|S5Cjȯ@rAPRR04ɮ# Yq:FLZWK?.kAR:/Ǟ/jު`oJyԎ׍߽uzfEVSXǎg?;qնT8~c1ƯxyZ0z\O'\͑Bl_}93&vBCf2+jiYp(Gbee Av qG(dRFE,טabe1HĝmV%b2,@HuƜ:Y%6² qVC~dƜ٧ 1vEm "de nnڶ2,x_sg[Кo23[nn.jtvD=<|K0U+a9Ʋ0SNn(+S^&:Oc]eniWi],[Y7h94] q?ښñMcE^~l|%ںpGCo W0 (%;z5U;ڂ H7ߝid>49,oo?>$C5bmmEqj<}sn#۷?Iv>-6o1UU8 eqeGHd^1w8&2Qd:@Ttq-|yG`eV4t!\RV)]#J.}&dcns\tbN_BY@#pKsZx|@8/˜7Xă=! W'Wq+;ΊWteg]5r{aii!-[6]I({΍/v)%1I}r(-,l$w̸&wni1'?yÃ?Q-(0`ZFsr@D1*,\M7$@w,yhU"#}i0深?f፵xG,T )^:-U *T b*-1 R+XcTcL啕*Z.MEe\"O:E!9 l$nb/7Bo{S>;Grr,K6t.|. cy`iCh+Ia\! =AҞC䟄Te }•F9-6_{8UBW)WE]`59Q$K5KZY|Kc|,7_&-Jk^i "SVqJ5>]fkkNL|WL.H-dZѐ) htVyh߱XٙV=Q J=V'b>U/Z%ge V =rw{sAc#a]Uu]m Voߙ#Υ/;A٧KK KKg9(t}ZN d/b2UJ3.ЕWk<8lܵh]mM&ŏRĸt)cΚ8 OUt2[ZkIKQgk! lweI/DVݐK6o1#㨦Aw4{~Cl޶M51ܖ]^=?8lPMT"o7ոā(!̨O4>g(pp  yYFvLPt)m||:E(D6j6bf#h Ҳ kh7ެ2typƱݦPf>CJCef{Y3QP,[ntj l:9Զ <uG: iZtL&l2PҝE)tA%4D])\JCر@Nˬ䝥ҕoͭk՗Չ뽵ep. WSC%W;["MM,"RLٹrQ$= ;,I2PGX# 1]˄dZ EB!@֎cd34Enry%o#[ҫ{4_Yzw'3C1k͝)ey~tsQ+ J;!ߏ~Ǿ)o~5GS\#Uʩ)Wo%V :1 F(ˎ57|3[xk{;jD<wD (92y&8&L@dڭ]=;4A;ډif3ύfdXs)҂Fӫ݊2\t [ +Ǿ *D/+-6V5\ _a \ReQF6G&z ((g%=U)+H@K1%ii"NG8gEEּb.gA~^F9Y-df+˺QdUj|n'?؜^zГur6۞/>g f>S5u骪#`La_&2Q3K)MA0bfYYQ o87yTZ8 MJrG{A6ֲ}_;RyQ*,5mQSE,"_oh:JػZ6fE߃Ot֧T"gNj%24Ԟ:SM{ n/E1;ci4Pq#r*G@Ra v UJx* EBTC9F֞ QH5LÍI- :mRmcgd_:{^<]GTM7{!7V6x6 }qԇy[MI"c)*;9B9WPgը ^ `1 U> 65/x3Fsyvs{7UD'<=]E>-u5q 5lHȁ(bTZތysY_pgﶉY!ZR+}iȊz^65l9vxks|W(AI /9\3 X u 3`&l=u81fB$ǰy 2ʺz㺴!w*;ź}i&􍦁YGPB ;_T!z'ǎ65<1~QeMЋ }_"J?3|r;|a)<\n:.Wᖌ)B&Sy.h-wNg9v5=`/{./8tCuT%9=]rss̷Z̓i%a=B`}dS5ԜZ~2{R _\(̌dhnd2lZA%;{^o 抵iɱI؋j%I+`Wss}v[0\Zty<*l==M+ vW7]rf V w/-a.^ ᰁ 2es L p FJki{6 oKWyC_߯rްuHw&=c, efj+|و2y5vR,,B..0#bY gg1X &L8K&Yzv7:b8r uGBM?k]Vt^=EC5bqU)~%X fM=5za=T,b,vE1Eūecp ƢJXx\ vfFv(C[A/fU=Uy`dlt,q˰)6S̲9K*RFFz -L:+%_)MWT ooJvފtxםW3; Bѿi`ZC(e>VWʖREpE+fի34uc oLfFwm>9}7>aδi?J3ͧN [I(a+%Jk`+7Wߞ+otu ooh7t|Box/E6 ?F\JT*ʆuMuMåEuE[prVE#t4?Y~)kNoi6pdKVJ8R[Qgpމ_q[x N[Q 2Zc+ VĎ9݅yRwiI1.]N{5 Y&Ded |>**񠊁¼Zw`X>/km~*3>hHW`sROQL;lN2[&ɻ4\Etpj; ;f6S8`I׍Mv|}^ޏ]x_p!O)$rp3T ?ꗅr1Jgh ΓhS0Qr /-)^CpCj0Q,d+q$(Df޻o,=~쳣m-lwG"7]ku- l8٦tZ[)yt}RkwBns#@$4:eHQQQA6M_Ώ(X(c>7jl<WR+d߹oծ;dG'%6RŰ84vZ؄D줴'rp߿e_j>ռl,p]-(ˉ:1S $k\(9`'ev¤u,v'dtb+?][;gz;~=U+qdSKzƉЇǚXۄT\/9U"^-:ѻ3$%#|(8^R? KTK>ϸO]URZ ke蘩kkiΰ45M i&KTKx+(W6 ={{w74t6:E߿ǣS_Ç~"d}OKk%X=|a\!GҀ#8=ܿ#.𗿌~+.IgE:+e he+%o'%V[[/;Qnzt>a{eؙ-;tb lƃx ^ǃˤ[_Ŷm;2W՚ԧ3c7JO7\z6&+]ȓ֓hB)2 ֋&|Kn-$HpKux񐦺W;53ЪўѲE96hV9c\ )$.RU&Njp;w UW**?bvcEAd`sh:s5=kA/=.\{[O(U*1K9,\c0TtPwoAU}yUn?k ugW/?gn{GLxWmIn3ZòY ,y#d'x#hW"[88RИRw'6rsϧ_?a 9ш^Nc$Ľ5+7a[6ɫU[Wi;eT2z9R]}ǵiçsŕu4l]Ж[f6|՝f6fS>˷s!;oTq_C_AS=dGʮk<=sweoLF$9_ p31(h2*_z53zuW-Y);km 1T~=[pl2NmWxlE_ ?/UgcvXRՉRBG#u+uD=wٵpxmhocǾ*?{ݡOmVI0ڻrGn .^yjg>1h-j~6J.OL#:>Fgv2pg44/D</ȋ124_ 7fhRGhR%IƧ7_^ PۙuŦO~M t&?UQLw &ꃏVTKU&4縞D ٱ:kTca+ؽ@C05}|_Qѹ::DZN;o$:eB?'9t9kIoo? smhѬr̖/F"[{7DhO*@CqDmD}7u)rƳSLMs;sM9P\(&@& X9ŁxHIf#֫WѮcM~Q@]Bjp'T4Tzu޺Ш8(.j!ueؒ (QwjؖkDFmg7ҿFuv͓p o^(;vD:V7%-ǠD+ (jznҋrO *'GNtWwʚC9gv^z|񶙾uY[W1l o%Yztvx_7;ݠݶwrS@_}8w}9fB(=WɁq =*i@?^s7,vU-vO:3T'+`zs,n_^Xʨ}|VV*K: rJDl)%$vh#0Vlah1"Ov:ilnaDNuH 4A`<{pR_ ^Fi" 멟N"~VU QjH{Hqڃ+қDJ_Nk'X.H{xE&QZBH{$12H6x:nIoΤ**9ySPa ;lnM8]^j+atQq+?ԥ,!PÞ ՠuŁF=R멈0mZ?C~_ܦ- 9UgB)`Tߝ=f蝠% WL:'F}d2_\slۑ%ILvM^4)rX ̬d3Ք^٩SM8YjPK׷+\6f2vr|kGբA~ 1ؔR|,)rKp@_>1A;[ȋb>ErwS Yt.?wv]혘<5I;q~?2r+JL,6jDs^:p]1 d+u ^_7ݵl9_YY}2gg-=8FBDMgX#$¯9p;VkFr/q$cף-w޹{}T^z#z|u,fm~agԆqڮh7'Sh)F0{/ Y<#9bעvvn;{٬VL@ZA&0.L8(˫nc~K[L)/dҎN")7 3mE9[#IHƸDVbYSf=^5Kb>t[i | ƺ4SSa4[Q g+LgF)3>yX-2f#6adƼ+V E.H0 cvQPۣ(\7Ҧ$F"d)+NqA)=os #ASWfCFRq!UOtn"{=n !Fi۵^HBBK]F 2핾eWYte9cttU}V+n.]C=Ay|WneP$ hJ;4RC>UzL4!K:\f^n5-kh8/fˍ}b#b[rCƪž25P?QS$]!Z+ru 3?fi6!v WŽ'nn;Ű !*ŪX"']+.p2 #YE18UE?9 H>! R1/XW@ArJkt>ŝ|?S47Z|ʹa4 rbF}l0~2fV 1^N`9U`|HR,(%"VQEf vŸVDGQ / $%*@29D1Yą;[p`b/~;OEG|m,,(PA 3rPW``^nnL=Bcǰ6Dr%6>\8M$:)zEeM+ɚ.iYvFmͬ.ꘅ3ц1}yI7qAFp^՝;z򣟈~B3>Ni6gk?3Q orW]KLJ/Bc,4z4}:o^y,mMg "CXoҾhfF ߞ^o@U'`wgW*d6WFo;/"ANoj ]7 e^c4* [\#1tM\ڦ4n;l?ce{ LqJ+ G*# MMAYawg=ZH 0T<\8.5Vq1CR*mc<,g1o|+mnh\Z Wr?HnS )P[!:{vHvza1O%!W1J>aO2IopyhfFR?m>PaJS,J=e.^OOFR#b 2@t 3|T}s8rbޟibqJq<ˎdJn#YR$eIN@oDL`\(,*,~ ;/x=feYEx|mde$:!>F)Χ.ha*W xT]wqnضo'fݠmɄ]dgsu~dz,x!E#r3"O%>wyEϲ#܈(03`?x"pABw" Y!o4 )2 v(V5/EØQ*d_E+ӏil?qS.:>B"*bxQqoJx +7bVG=.kJň9Qnڪ]F@rw(G+Vq+c12 $\n<2U-a&=Ϡ^)|{0l Oͅgsϧ!0fp!$95sB.4֡؊W*_*ĺn7^ _!{n5'޶;Xw=s=|y懕@ݏj;1oro*}O?D0Bb$=L}?χ=Rm z}ssg?e?ҘRlB?veD%D4=a^]$<^I?GDY?lH*bݦPsPڏ&f&9w%a.xy]W9h~K"[K3[} v Gtbmmޢ>by0wD"Uºb%&.݈3_ #֢*-6;SL>mYW) Ls<+TVs&NqOuo&qE,5ݙj"$Fvg"!3DHrݙj"q'<ԡ 5 e>9HxO0,g;12!6}iwd.gR=R:9]tɨ{Vmsq  萆KC#hOt\:pw~F^o͛8ۼ!iayB~.Ux,^+j-mklTmٶjl*i6zeI9/bd0'P7-Ř=h;E,ˏǙescNvgs^1O8=+qM]N.F ֻ*y7Hq?ဿh9Y496"/hvɵ9uN;eZ5Js67l$wXfNr(o0Gz.c9eڔF<$|/b$п:!IAm3'K Qq=`7y3o,žgv}sMzh"L" c?6oG/ E`89ƹ1mzc1fwm۾zz3E s:֟1, A~SX.Np';3XGD`fp7`L`-(f!ן`8B3כyjߛ , xCKX!&vg cu氍\:E_SiH qdֱewuZWWKV!˲M8!WXZj|_k:oB \u2[դM1q_k[0 (m۶m6[m[6-b=]˺ Wk}\}\c"{Zc5*<l{#քX/ LVuLnmVr;nD@n|wޘ,)|wL <ģTC{pѠ&?_LCp٠``< 1yH!$C ZmP,nGv|A."[6 Dxc`d```dt~o󕁝LR`zQOsx 8iRte3.}m/3CgU#230jP纉Fo›7j2LQb!>9d臐NDo*7"|ٛ}Id9NV89D!CnϚUoS[ii(Ϟi}:wvޫ,D7Mi}CU j:dDC /#M⫔v|x7W'd0׉w[5S|GYүZ.TyfM(6xoqXسF6E(Z82ӱFG<h:njy UnjjQ~K'E-Rfޠ9Nj1W9[LDz8|kH|)z'b?3R >dB!>G,FXb-S1^ס/ߺZ\kIϵK[k2Z1^GQ]4[!Y5d|46ti[y45)d9YG h~7-r 8>sWCZ&Հ*C2ڂ!oCjFPuXQaE]{4ȓyJyJ5 cxM U=fL CHŹJT [6(Z@3պɌ3'x^e6t&14Zִ뎐-P#KQzV(d 1xy]!"m^,s-`+c=t9|:B#+Ҷwc{OPkގ^h>B}5Λbi@;)JOJZɇs@-9ZiEɨ6nAX0>p|# =%ER%('!0[Gz5 (WЭy7kȕ|+8\xk(D [t7k?!2Md#4y]+wo1RB".qSgFpCMYk; OCMG9߳ǨI%K*&Qaj|T(kr:BT*-(r!3Hio4.hƫhijh0Tf`f&s54A4sF1ܽ3lYz|3(Ey| &x-wRji!S6 |lވaG:a ~:}D~hI X;Jz+s^Aܐќ쩝Q͡V<=",R7C(1K0ݾ}6H5z=DCw^6vr'ZiOQ/cMK&s1-NMkꝰ5s{uMi9ӓ RMvr]wQT]gC(H#yoLFuzU1s c~e7c==8fQMwNK9Wf1.:PWBPq/G>]2o:Mv=5UQcϵۤ!hNSP߰滥8N[qDDPQ t$}x}s/f=HgQzBu#%\_vֶy}s}?.-xxc`d``🁁e,@zxc`afg`]L 1+7;3,d` B|0fbg1dTW`` c|ǴH)0uxl ^1vlނٶm۶m۶3|6\. ?&El#$< Z|/?T\{7!z?OE|RR~*IQ4rZGi2T2$ڲ Ybx*UUV5TԱ-S>HiRN&Mw#7:d9.dX} yjq~ǁq!qDq(!%%rcWMis\Ih+2s(jl('cYD?ZdžWn15˗u$rwe>GAe Aۍ~v3*_M~~.606Z}Í׃nOF6m:it\l3y̳qO}f~8֧s1Ev|uq2}uhR^ʏRJ㻔<ƦQi\@]*4 iBkљf*$:&V}l}&Wu3SXC,o=Z6h7'81nt+nox93E֢ڴ mlN[[ʦl{13>dہbF81gØ; ]3dG2Ωvsl;gXe.!r\RcX v㈇9Qz紧8INz^99G>Wxc>/(R]>}=ޢ id]ڀጧEj[}+O>)/|+_RԳ&U@u+QԴ լHyߠJ-GkۋAazM/Ls"SF7Mvk]:ײuq5[vt s˛6}oZF囼O=JDh.;ӯ鷸bG6}ch =ot!ǀ_1$F45JӘ((x3 8JB썭q1Ƒ|txVvLWȿ*Nw/tsȭ%~*}Pwh {ڒ02,(1KA}sg<0- EBˍ0] ~t0%- ڟp55*My9 pXBGm,l}r9:;k;Uýnl&QlAfy|XӺ`BKg^Ò[;ٌ}-R7j. ɼiRuwl%O:b#4A^Ջ 0--;>7l|xuMc\GQA; а 6n`QUPGOo'].uBBK)pͬ|R走8cQC 1Jfubhh'e`k>LW} ҍ0w}3(jG VAka.FZ 3 Ӄ4bؒ=/d `aZmd)F. LJ%(ꢠQ<2,e1$m88k>!~M(ZqТ8CC IfO !O՛mn4-җS}E%bRF#rqR&c3N?h$-?aig,Ia)& $MIͺeI|i+0nUHDqRtqDȹ~y,\e*d3olU#U*1X$YRImX*)˻*cyO%,dd*@|8NkGeFqJ})N58OP]KIX>$|,넏c c9MX!|, ҁ}(斒G6>h%ݔќ&kq2ZxLR4?(f\LJt}9ѰEƊKU%ќ/Uƒs׹[>O-:4B*)#4ۙ3j^PT B>[2,\aܐK1x yXn0{ڶE0?וbFKѓ= :lK,M悎LZ|;I )I=apHpQY$YBXG=D'ru."O;q.@T D4-L9o&'.l)i{~eCZ:^|wɚxѴw%yWOT{ ,^ה7e>,d֨[WEh U 7.13F.u6p"2T|͠JX랿Bݥ33-IU+TX{v%ȹ" e|חqF/iV jvx5Fu X'x%JBA{}R-] z@c_;:B+"Z%pV08 ll ;i9Xx]d`/h x,KjM]{Hӽ]{{m۶m۶m۶mח=!б 804 m6e;8,[k}+s=_ZONO |pJ~JEHQM;TYPWSP_ӟTJ[mݡG? XaL'W_b.271cbd#fS"Yd"k:z)ѧز]ca}Z&[9sssssF2k]/M[?W=U7qD5.i<榖lP/^9mb&m[=~M܋?)J\/ ^rAeɓV+*I\M{{KO,}gyq:9#LUˬy "C Na0 \|ZI9,hӡt$VXM'XNSIbc.6t ];mvG)@8ޥop}G"~3K/ W?f+p p znʭS͜4n íN^qwr'n=Y>y0AQ<3<9y<«*x5;q~_^ +Nt p`6Ͳnpxgfffff6̴ 1,Yh1Z쑺TSY-DUwT2=O7d ȖDPς"SWƲ`-MYAVгQ͟6gcawݻLƽM5Y}I:@5j,ETQZEqEr{Z'2CZ jxCZP&C|&PGB50K$çrd>4sB=3ETnF 4YӤQqf{YړY{=׋ }Cf.\ ‚f潕ho7Lh;Ҕ&*^ݎ ͟$~kuسa_]]]w9|7&\Z5Q)b yЈcAt AA =t`t`,ɉ)5)LS>5 Q07 b(0Ewͤ܄)ITSxI k'YAe POx2>DDU"Q2EA R'JHQBD"^%B>jԊ PKUq4a$NVhAV9 mi i_n6tVQ:saBXw%U.A*yrV`}FyzF3l2=!SY X#wc"2)'غQJjVDj*$݂5 nDD]a.ws;dsUg'9?ǕSE:Հ]">@T PQ;;[ͧ:L 5*8eW]b{](Ɂ%7g dLn#&oHK0X[o9S {LiR3exԊm;De<jr7ρݻjTҁ.nu;)GAM3mPϐ.*ƜDnxu4ªjUcp1U-țdN_ΘDd/u=Lj ~ b!W@qH" IIzPЇAO ~u)H>:^}>ؿA >c uԌ wY{d~r@`4\mW%OG*pyG  8K=2+nH؉ڠvMwA ՘SbNC}>-khe@W@t|_?Bn,-8ua`a( :,ҍȌ1gz/ڐi.È[ #0 ZCmfYq_3tkWeZy|\&+Jz տӵ*ʿDX!onE@m]U_xEK; cQ@~;Yi8SC{tѿ\_))F-j{b{;ĜͯuW/j:Jn$xFqÌh0qfr9eÜR)N֮y3nѦ5=I Jbrq,8!fNZ+7]| ikizbA-DF kEsɯ?EZur'>DI*y۝ak%R,cqU(]o?^r_ň_G8r9YC5?}8@FV= JP2cP񘀉ɘ阁٘[XXwow;~ӱ+pY8sZe8ߧ4XX3p&8|_—|_ |](~~_W5~w=?\q.ER\qUפ/Eת7&za7q2`*ji]nfcNzn~) Cen Rc}ܾ҆~+ݷ gLduQrj+B,l҄~(xO.nI7͇p?@9UwaϺ]Mc%lwo}ryC=5o7s;+}-JcӺxc&bRxj bcfbfq;?܉p~}韒^n^Y=8xr]BZvƿMb+{U?mh7ygآYwlyJjvlA&PlS4 *&[6;ϫtmVyVlQQlRlUٽX4U,"5Ƅݢ.?c{{E Z-2yufW+V9IjT/ _dܽx RC&&ޫ^D)B=QjQjMіx6ݳ#ZkV&"IN˳%iԉH䓃Exa"wߎHtwq]jw x_VcK\;ѵLj+j{I[hu7Ph{w:mQPo~v,PPSKNө֤try?$+]lǿfWHݳNGiF⮧s9{i<iƇb.Ų0ƴNt4;`ږg]G@ۃi; mv^|P(T54i;i\NO>:ڿ]̳%bO~а~_/LunNtQo.oVZ Aż5yGZpgE6POoh@nڼ@.4fmfm^Vl2zCLl6]EmZmuШF4*hFh NR, iG^uxЩN:A1tTBC4NS4N TB4&4EaUӧ>>- }6g7}3}SOg>iO?}zDs(9G&O4e4dki1j_&OZ;?3VׅX~5=WkVT{G͞Nt=bO{q~Iwin)2ls]T|q^/`w}v1F8֨r+W9kU𱑏3X >V-=[7eOkQtżşw9۵:>mcg7;{fv>'"yu|0u=Q|h6/ ?.d^~W3 ~kgWKvW7ȿ:5f_|+?zÏ&~sd$,Mr{.%wC,Y9 f{\ZxO;*Wv˕ln<:{r3n=/"Fv0El)[|b#~3FŰ[ b!bvaK6Wُ_IilT~񳔟ſN _y>⼻Đ|`+/lyv5&O b׻xnQS+?F 7vˍ^y1 /F\X˯j~mSڑͅwz~5_y~j,~W9*h7 eo|+dS ڙՙ՞i&e[3;ZJ~8?f4&fܙf fy5ztl621V4Y*QJA&VmVѾvmށJLfbd!,XT|'/sŪ/zx1<73vV4yyUH/ٷ5yJէůcGBΜC}M ؙߩ)7#Ȋ 'WCךsre(D|=qkٷU_TaЩ]O6n3KoV ؿ-]b퇵^/~z*#[Ԣ0Gb*[}ou܆;kԠnrޜg_ qFOPZiYY +vk{ldV S1|BӑlniuVjQ#o47 m$y}VÍeƨ1.=鱏zC^ zjAzY>JقtVdBQ9yl7lt:ܱ7Wc Ϛkٱ[fU_m~oO;9rRFKZBjQ}ꧩX\U3;raNՆl:ʏbrڋoHʶLn/dfc嵚?LG§GQcIYT]t80~ƵgPׄCڰdOއIq3{Z'yu7;-,#֓@=:ȝaMSMl([Yt],FVqVVav4,7A귄Ws! rGlfCkǔrXn>|ʩ´U9NxVؤy5ow+ETcF+۱܇Y!Gߧ>///rI8Z=vSya߸| 3jlN,'2\Tț oZg L 2c(3' rf昙1f[ؖomId+Ky>I;.͙M3|V ΌR !vn{F0~ljf;]8D̖C9zSa&f\ ί2F&, :-jX1`* 8z`5p;ApZbff,a)Xs,W9L3W f<,@ee9x*HZ;sgžs_ؼ8~f4Xy5]Zp-ә@WfBhlٿopۗoș0Wa?0*5"NX~8z`yKmL/;_2 lHLu_#Ϫrs]ܕ{!N_~ۻto_ ٤gMp}e3Kgshhygrm#`\?pMl29̋_84S\N{{?akjy9<Ys|ZŕvqB7 Zo5r2q]Δ-9lB3KLg)k.uO}gtE0lkvٻ2uSŰYL,duXz܁ sfz{\p`p?|k}-Ula}@;pY!boXy|KǟhZEAm4VAvcz[8 =уIq2}3ʂtηq0!NWϱkYoZq{öҼ!}bŁ,f ]Yd[b;=m /1f@!u2D³8Fo`7:Y?f%63[ ,bBѷg;q*3v5d6=H%+ykXfxLB1B @X|Ov}luV.ǀß]*T:cy`9=`,b5` C] dmy`9KY1`Q٣&͜PG`+`=vB $X`]۝8?vg%wkY=wkoYBEk߷ ۟0mxf5 VcF1&s'c=kXō>< 6DS_glu#JP#FbyE(es"V?+9BlA-1HX,% Y4BpJ6m,ew>g5Y\n6 0e5̣&Ày;bg"eF/R8ze/d3 qY19pLb@qSwi;:4˼F4؉KX6gu kArܬ,V!J1vD6a#~ϸ`'cA4!Яͼc'㸬hY" ڜ|c|Ԝ䮯zKu 8 ߧ`TittuOz3{]`jYs\worCH/Ceo(ٲ'-OAaq@|c_lmklekh/L5lcpDnX !0ъ!C{uc2,i, `be௛:Y,blqLAm~c"5wQu!0 Q6c;-"9#}76FXm7v F-!psdf %, ePl̙65@ސ12˻2dGteďeL,/ҁ]ǝ\nap1ux<<:uq].r]\.+\W /\_\׹_]n\ 6F|Yk~Cހ%oʛSޒ~sW{}+8]>w>vK8#e<Β 2A'D'dX2EL(d7 Γo[!w{^sL!3>" e!ΖE2YtVY'p8V6Hb$?xI 8U%Q{$8Id])$URqINtI1!m2%?,$_ UJ!")R,Z(^"%TJ!R&eZ/rWH%*jKjFnqkVju:$Rizla$-҂#"ҪͲY[d 6i.Z~ص=s=s=s=s=Ws=Ws=Ws=¶e)GGc܇S܅p/ղij]~ OFܮaZNpܥ>,^x FL!Ņ)+-k̄Y[1V !A}HDF2Ҵl}9ZB. tI!^ WFn^e:XG>&- ͰѢVxV_S>:q8::X[?ײַX?OuѺкXY0rJ?H:z`݀uu.n뒑֝.z?OZOj))Q%/X"zzMnZ5ɚZ/wKK aa}}$~deG}S`` }} ~ljڿkyGx۾žEٷa0|lS{=HLG٣}_~~[=YS)ɞjO4k]H%x^ji=.v+JWnڛh7MZo7x{^j/T?TGg(u,S'duR .Ru\WkpV]s+]kVYש~I7nQxu]w8\FcRQPw_ݣ~xS=a0^PGz//]ooGGZR=i4&g3U+zߨN^E"R/zY7+^Uiu:F7xWyKh5ZcQUzO}?P=|>G#Sb 5^joէS&Iz_oSuP3>S֭3G\5W<5_ ,W B|E\-V1S-QKeXVVx_RTUZrrU.U T6BU Xcڨ6"ORsU*UʑTf X!XHl1Q4*.]eW|"@N,'IȓdtAΐ3p)gWr[l99rs\,yWΗg@. r\"HbZ.KsT.r\rrWʕU\%WrAnǽQn{Inf-r ~#ʭ&b]nDž2LZ.Ñ&#df#e$Q2 {rv;NVK[%r܃^W>me5z@<<<- WU?>t7ua;VLm6s|oE,2w?Z]י 6jiХ,ү*mԲP( ~y^673l zC#'.N_)?ԯ5\qY%Z1C߳ f\+Yjmp3SX * 0 ZՊ:&q.m3Ob=ّb~yun"Z_t{eqwEq ntWM-72'o30/ܹIܴ}R,#{ ާֲe3ۨ-oS\}牱]@үxV:[0I,Āp>ٝ[F_;v \5F[%ѐ[V.t "ve2)i7-*ëpӡaxj~Ə97p'h}5\tf d&g0)zKz/B6P}h UϷ dw9Zs7g2Fg<"?ʱ\Y \l uDUxo{m5v151N'.p\/)$N ]V8ji >;XYLc>svfW+;١=0g[HOQ&ћe&r.-̈́b[x}vng q+˸-Ctog f,RM+٨9ʻ7?83WR-6V=lgPh.+ e|Y683m72m18qx{S%8^Vs?D"q%0~㧍|"`/D3GB/qsS3W [)[XN6p@x;d-8 2\u\af/r%Lٷp ?71\m2QװY b6k# mv0M&jױulla, :Xo[{lsm$j+TtF}ipc YPzD X7E;s{\xoD=nǻ%䕶rcWA8k㱜X5x-7r +̊;CNfp:ctd c74_(=;CtN8l vf&q)wŔ``2h7 ;Y:8q.օo{!;=\ pwr]{Za zKsXυ,[K&p"|G[M?3 COf=S{bz:z&o֔wyn;B?\Z`c/(-P *XYk{Wj#P dw%'8ANq r_]Ͱq3r0]̽oi־kfm[oFPvZцeܠnPFPc,jf絀&j&L|L$1:11˜o%o@{F{F{srf-8o8oA7W~ ?yCA{kˏ-F~URI1V2D> \/ \ aUbXp!,8W77gaະ"XpXp\׍׌ł+ÂSXp  n n    .WÂkǂǂ+Ƃ+ĂǂK`Uc|Xp /~@>"nG>Ocȧ橇y<0OH55<# \"0"Cލ ŅtP <X<}0|<q qqq/r%*p+pGx< Ax@xBx@xBxExGxExGxCxCx,@xCx,@xGxFxGxFxGxt;{;{{{Oꧬ7`CwF8H|}QcTl}4WWQ OB %k־:s퟉9RϩYuW:^kL׺Z7f~?0PpѺ1xl+_Cr8؇DNZ(zdz0\x\mAo/T(\vzg6Фz^M2c;rfkּiDNe4¬vxW:k׬C^th&}M~{M|]uixY˹O,׫T=*^z5DL yY3]gK=hgGJcꈷ+y4%i(&VoY)*sֈN| ֗+Y>4 uc>"-4t3_S ۶$&zvv^ݠ1d{@#zq SW3%XϿEGE@QHeI+KO2I=I&M2$C 2d%SK^%#FǮD/56?"hs4frX]J8wpϧdGH$hDީCD=.Yi1vŸ>]>`9y:Aa1`)a9V`%n6syW'Szٹs]2!]縡: C8"(D#rflW:ֽv{4^8{ |3m.iSDx~8g3|/%n S2L=V }HzM X:H^Om:}-vzZ,LĶБ%c+c[ۆ}չutl :s\N<ݕQz3ar+wjN}zY}?Jk"x>@@N!!EHD!yE>*.?2NrLS X4A,C'@INWtCw@OBoA_C @ ` P pHw:MuCInu@MJW!NW4g0.1޶dlŵju(4@9~&3wqnщۦ9>7Μe4g"Z̵L!b*op-5Ó[x^| 9AFBpD QF.F_ABaAQTC jE//-޿vhN.n^>~A!X؀؄؂؆O88S̟$ qiH=܇:#0p/x?[LƜ&1P0#BH(D#7˃ȇ(Bas1G D)FE9G<ǩ 'ƳzT$^%TFTE5ꈑHS:ҫ6u$+L=/S_j|n(M#hºXoJn0/3W ђVhx IomC{t@GtBgtAWtCw@OBoA_?  a}8G`60{xkkD/Os|/9(8L$LLi131k51s1uYXXXƸ+RUf5[۰;{ppG; =:xgq\%\\5#[;&dE Rt}@&=y[m/Mw ?#zɁ NBpD0(D3BnѽN^N~] OABauNQ NI/(蠧聞胾xC=|G >g_pK|1 1c111 1S1 131 `cbK ˱B"<1^%E8fn:kN9`+a;v`'va7`/a? 05Q÷p'ppgppppWp'2^ -=_d)^t#xP  /=2@N!pD QF.F=D!FE1G D)=Fn9uk[ϏqMp'Ok zޭʌUPꨁñtCW,]I+t%_x7L_~ṏh$Ed߹DD%b>"%b1"ɎKGZA.%W Be%+H9(ޏH\92g el+g1;dejDςtzVH0Gs!iX{,_b>]D- =(D@Pxno߶D a$<| ;O@;a&fkMf?so6j!52k4enPTꛦKL/b]]g&B78]:ifN2sTgc:^4||WtI ҥ&5w%|Ӆ>ɠ]ʝQ )NvuW8tSR;etis;nZMz;[VS~T &.6]ܞ2Ifh8effCaC fRtvg/3}>̎>Ih[?z[>hp+S A_o_Lk"G"մ~ -_]N;%~?ۗ%kdFM^fW]^w(ʊVמi٣DZ}oR"u>SiGջVqz_gzBwDN!*TNFz5Ig\ 36ONgZ1Rl^j}ZgzVGryS$g1rv_fFjh\-N,F0Jrռ |9OnYrs$7'Zf,Mnr*9+'i"8A+6Yp<ɉZ' މR㣨~W'c,Q=Q?!qZtjomo\.gzG;Snqs>RuO؞;_|>eO8+~ +7}2)/:3 b0C03b4cK:dx&0Id%| (bJ,0iLg3l0yg YbK[Xnz+Yefml=i}~~po9T($?:syyF4 MiFsZВV miG{:БLҍ|J/V:ob5kjg:5I-jS#ٺ [׳~39Rܹ%$iF͔Z O+#G J玽qsKw[.M0A fCpF0Qf cI'La8 LdT9x G>RD1%L7S4d\1,dY*wQS~pC(¶+{ܩphLҌ洠%hMҎt#ә.t^?XUݪQԤC]lܩ-wɛɛ脼16QlTUG#pVf,)b*idk軐KPHŔPfCbJWɤ͔FGxT '濐$ퟳ׽:L OQL e;$yީ7׶3B[mT7mzI%4{Q#6'1:[I!EL%,횣~OQL e=$G=~Cؖϋ#Xx>gDvV"/UI™J!EL%SkY/ZITT^B!V3rg*azb(^q)q9WPdА+k빁~AiBSќiC[ўt3]J7ӃjWSTgg`0a g#h0t2$K+:D&r,%| (bJlMa*k~o?g[w3l0yg YbhaM`%6ײl0o#Lof [vJaNv=eyjC~o9Ra(8n N})׸[pux7)!8Hhb~!iz&[Zl&ў(>L'w.ti#<<<'|j/e^oc}K G0A fCpF0Qf cI'LYc<$}bOQLLq;U\icY7|Wĵc7Mlf [vJNv=쥌}rrr*0G8jOJ-X#ܒXZXzv618 \E\l{44tWq5Xv-/"/r8%ͼ|GR?s:.>4/toyܿb.mI,n?N"4ЏitX<T93ԪrgsEHRdք֎Ëri@CcWWq5p-q=7p#7q3p+q;wp'wq7҈4)hN ZҊִ-hO:ҙ.tAO1 )S> +7}E14ߟ dP1dX Přf&2lg\ȧB(RS4 f2a.,Qr VX:ֳla+N){(>Qg9W$?9vbOsΊ̼98֎=hs#؎t~Ga:Ӆt;ҋUf 8:5.֠&MRd655fByB6hzY,5oS;#V$&$0+Z*=a$O:EWd~k7OY>ewOyw,4SRTȊ D&rmܿ7D(IiCs|{muo8#g?r# )bqby44>mxH k븞[۸;{iDcДf4-iEkЖvLҍ'OO)__ӛ>;!EL%~E3 b0C03b4cK:dϏvr,%| (bJS4Lf19eYB%4 Xnz+Yefml=i}~~1Qr*,TqNpGEmo#iDhc=ɬwNv$)-6mK3CJk[?3&mlij|S"\@n 8a' 0;qCwQa'~';%{?A2)|矼L%g̿ }L AdM- f|ZD0T^-]9h:-3j؈o(K=a;6] qd Wx&B;I;h^SMtYrL}I;#iV3WU+wwrqć" *F^QJۡ ]mij޽!HIac`3[J*~dE69G>| wc?8!sr;z |N!Ŗ=d;8T+gJNS[t[ўtBWѝC_P1dCK$0 LdT3b6sK"xx7x~2IL&'X`%Xֲl`=hlf [I%QI,L&\gޭ`' 8r>ⓜ2}33> .r+\׹Mnsѳ>K,Ⱥy#ĵ\U|(3@{ !PhKFɨ/ˍ]B~ƈQr8L`"g9ͿY>oE,[bm-T3sv_U),I|ue%*S|Uթk]Q*8c6sl`.'|UexnQw:|Ŗs^r8'V miG{:БNt ]FwzГ^}O$CpF0Qf QDC,qēx&0ILf S f2a.U^u}>P>TdR|",c9+X*Vc=4la+6dE69G>ۜb7{>s0G81Orip/epk\7}ؗYHuG<|׆8i+;+=kSkbF|kSIv(ɬ2iٱ2%,z\SǡBđiJ3ӂ[A+Zӆ=H':Ӆt;=I/zӇg 3HeHF11DM OD&1)Le:3,f3u2¯k:o[6{>G1Ÿg9_W$Z<^1oF|ywy- h Ib2)6YB>bYRdYZֱ iVRI ^ - ,!<3vif{~pCG9qxSOs|3?? .^eW5sܲw^cqkqI-|mo-zy|[O` 3H Â_SIƖa~$GJR-TIX'gdy3g9y.KBZ•LIX{oDP]%+*ʗ;*>r4 ,^:7V_`jUKjRAۊ- |qn숆[ߴ@G:љ.tAOzћ>? eHF11DM OD&1)Le:3,f3$2Wyy7ۼû}`?Ib2)̗ XG,b1KX2b5kX:ֳAK"JeIKVL 8rӜ,9_p\*׸ nr9nwy` lk!y!x̓@\O--z"[$f Z:#ezXbIQX3Lb2b3*Yq RZa DePjT'jB/ކ&{Vm+{a+5$7)o*-{k kRA݊- 缱{MӾy2_} ݝbӞ߇}PԤC]Q !WObw+~{Kl\>$dRnM6 2"r#;~.|zT'՗/?HIak^ 2"r#;[ >wԣsjj;T$ɤmx-l%4t/L&\gng;٥f{~pCG9Fڶ N򃩶CTRd:Ǩ%Uo3viz^TaU++ZZUK+j"TQUQ]Emv.BU,ϴMTf*j2yŖs>ղe/ưDЊִ-hO:҉t+Nzҋ/d(F2ь!hb%x&2La*әLf19%ykII{m4P 6 ,!<7d^9Qq~;)ӧ9Y>s"Uq6wQei"*!xSϷmݟ4H"DWޚI(okZFbt%2 LdI=θO,8υmYe*Q*櫊ըNF l9[_V lc9/ FkjrcexS_-{U%᜗AI~V}&?D\ݮ癿m^q ys}\r57r="ϼ+o'_|/$DQbI$E YSl͊J: mMZm:tgP1fxW0]4֥Bۅ$8uw!u[wp]غ+U-^~{n>=;39s;3̙3 yNIm~ݖç|}M1qw?Usg2*[:*^s&c ",h`bd8IL,v\c*Әa\EXKR-ޟū,wx-q=7E6g:ZNNf6s<泀,b1KX2";X/]RD1%RF9TRE55R'wY#yY%ߖwwY{|6la+O lg;G#M4.vO5:NK,*5&u}!Г;: +`~7?58>)tO {`0Բ?j+oqVfQ5cU>O9q>糋s>@ nr`Rt-AYFt'p>m`@%|'(bJ(w᠜ *j:-dDjKIctmy.1|xYKKuscp 2F:2`$sGrGs rs'r2g2d0L2,&2L<2."..2j:fr{x#a.,a)X V<`5z )g+JZS5aGGxx'xxgxx7_e*ﲞ ldV>>mg;i/ML/{uMZS993h2C&cGٌgdpp.1i\mn5^gopnקlgؕntBOR-|1w47mz}*;}uMn@9<]:!H Nyo#2gr*jj5ͭ+igkʏIKCktmGr\,[XɨxoOFڏ^ck6o쯿THgP1pHhXxNDNL֊bcd,"L`"\c*Ә .B.b.R.*Zzn`&ߊs<泀,b1KX2";XMRD1%S+r*jj;W=kXK2/_U^e=&6|BX/evFdZ3w앆{kp*q:gp&Mcd,"L`"<2۩ w ;g::]Įt=z➕c':SǑݿ8ril5$;Ni& rL%%_V )J_NTQM q+zְ]=£<<<<ó<虧hFni]|0W]M<7}3a.$Ʌk\=Zo?ğvc)=RD1%:/JZhm2ܺ&~oO1F.\ZSA%UTSC-u4XIln-FTG{;y(-nem/\>Ŗz]IY˼W,ucٳľ[3Wm.cO䷾We *jWƛt9|ѤΝJ>~^g0?m~jEv,Oc9{RzԧtMrnJ]JQ/Kh|/OSztj~~s!{=i'p'`&砢X}q? >LLmߜ~}>8_j8~+= =dhZC0Q:`4 ~S W9pW] }R3oSOPFL]z2Ri^Ԙ3Sڴ cJAe2xJ|D|"md 97;'sa|0='w}fm,vcuzl7wv^v:ȋktLc;>끬_}ICO0O%i:;>ONn|p?Sfg}Jéݳ,9ϩOݐue]n2^3a5eԔ߷4wjofͪʪ-dzJ ϴ/O>aa?*#hqy~>_Ø,Z[gdͼ--j'\־kT͖?'X ~D 5/*Ƨ K ?er549NAM睬^:'_Z}Mc>/2ۑSS,ӂN ";TYwEwIHmܙ|`r~"w%|h7Fi{mHe 'OO5ҳ6}s|E,f KYrVUqɷ9]HŔP*+JZpPGxx'xxgxxO?YxRNOiʹH./SgѰbzc D/$dނqdx:?kqęq;9"j)")r*jj^Z_uoޮ:YBw"]`6M[יnT![A^O{=C=wwOH*Zt`/)^g]A9TRE55RGX[wR651r)ӧI9TRE55RGf^ ?K%t1! eH(8Ndd` eYd3 Ld9yLeә\E\%\e\\u\ vW9g1rjms|E,f KYrVUqɷݢ5ai~Gyy'yygyy^e*ﲞ ldV>AۯѾn2_k1[TǀD7mxw>{:G11\KI|-b\Zkr*jj5ͤ{͗=}/W~ұ۩Ԏ^NmԚOiJMӽv[V=<灗9^_Dz)Y}_$)u=ԵQK(u}I2)}}|r &ޯ-I݇R^y_ҏS:ՖقtxiZG>)\Pkn{5L][?+RT5INFoz)z$%ȥT2%r*jj6ͭO;E­%QR~CIY _/%ȥR=Kunxכͭڊ}zְW:;{4=O#:,boscfGPHŔ`^CXH0KKG(JZhl֕#2}חSA%UTSC-u4XIlփX{}H"]/쓮_GASA%UTSC-uHo`me[zyoMsZCn{AtR`Ow&܋޷O}+A*JZsf{XruTTPIPKM4{ňt{vreY:O4N w.+}~?'s~/7{&, _QKnfnVn#,f#0yg Ybe,g+YEw|Z )J|yTPIPKwg k{yy巎66}߲_M{Wf|DŽe: ~5Is3-Һ۲{Ps-OyKݟ)O4N d` qbٌgdpp.1i\%ޤmC#,bN.)"i;wJoTPIPK2ܫZҾ Am'uxPWb =mپ·ԏФ4o~f0R0W,y>I?xOd*~ n7{Zm] Õz%$u._sU=ḝMͅ3a--[b[Q8a| $ռ4ҝ}12`$sGrGs rs'r2Xb4!#l3Lb2S8s9Lc:3 Km {|C~ď ?g_K~ů w?Gğv׊q=7poM-m4v9#f1rVfs|E,f KYrVUqɷ~锠̼r*jj;Գý<< e^U^me=W&6l3C>c>1oA$|ɴfZue)w%a#aW5[_XAxSMcd,"L`"<2l*=ȍtx ry{v|;zPHŔ؟R(JZLoZ!#zz8j'EJ7CL'qTԣ#gaqi3T=nת35sގ=V(GГA;~ n(D5FY`@Q[~ ߧ{r*jjBT=D?m"&osG|#Zm+ֱyj[ DQ9[jʽZTPIPKa+`}m-hsm;?k&z ϛu?wS#<07(bJد>hD-_ioCfl:?v-7q3p+:2Gg1rq 0yg Ybe,g+YEw|W 7 )JQPNTQM qR=kXîQqIiYyw/}Q5ȣm;i?ML4/ ywFr0x+L+1333c$83bt8 CN!rb)P{ϥG7R;;vggpYG]˝١y[YzJ欼Cž1 I4ȋ0 YYyv*"KM{*(1jQR3"i H߂8 H!K΋ߊlT3M*um"YX*Ο)t0JR2 I4۶ ,֩-lM%F wE%F's?Z+bvQZ%".v5Dz9\zC\d^+?(?Wy)lU3Q5c]^T}E+]:pLPT Ę?iYy^E^e^U^uޠ\+:i{)_!8&hlCz֝v #aC˭G"~m# Ss& }aA4H]$H"M,9Y{R*HYHeP^|@dVʁR9gsrsrsH>G|OxNDNdNTNtLl\.B.b.R. *:aQ&3E+}*aS}gӘ 9^%^^5^ яֽ`4HS{gb6sxSa.ha1KX2ZYJV5'>cgf|Tr@uCC#-ZQ-Yd"(UDZ+mnJnJ.oW}ؗ؟88C88#0G>8|ps'r's rsgrgsrrs rWp%Wq5p-q?2)>UO^%C`ә<ó<˼«A55j3u@#M_q$I&C3YfoJ;e-,f KYF++X*V6DgllCz Udc0Pɲ2J硩{F SFZWR_+KSNleJֹR0J )Ă N$)dȒ#oۂ.PGh-Ehļ!FQ{AIRɐ%G޶a>~A0JycZꨧF\ $H"M,9fb6sgc'̬[# Y 0!qE Қ V# (KU(1= j:iҕ$H"M,9fʉYfy۪g +#}ݿUΉ]#Vam٪ )&Qz">u0Jriә<ó<˼«A5azhI78 H!Kٳ<=/r'sKz6!M+q<%QE&+IVv1^ZL(HEe2V akK1O'Ai2dQޣue3E+R%UDQ]VY4Hs8- I4ۿö^[6l ^pI2 Y1ьa,&r/^_IR\)dͯF65qVV\]PO"6_Klb_Z[=? JyF6-aӥ|]^ Aǒ}V0QlwF9-is8 H!K8:l[|67I$E Yr( ^ҴJڃ:i&_q$I&C+/18LJ%F3ݼ[(%r"Y&ܤe6X2KJm,2WBe띱oF)7O-zO0B].s])ZH+#-R k=\W<*]XVS b'b~&bZ"bZ&bZ$?OˈC_џ dP1dX1 Ld'{.A)^ X"!1O |#8*sñGdf1SLXíADN"/rymknuIѣ9$G||7~i=_@JNЪQ~UjlUZ} >z䏮=GzӇ? 3 c8#(F3c<y~V` X"~ ; |/eWwq7p/q? 0(OzMb2Szhf~woosG YB;e1KX2`%XZq7vgd/fe?7Gs rS8s9k븞9۵ ?ndL^ 8+}oM#f+&Q:s2*f5 }mA0Ju@#MG+vG&Vc|RHdm "j.zR1/}pR,f3_[ Qb4'Ai2dɑ]AXD,ŕ\%8 H!K ",X6q$I&CyEkh .}W:cF; I4ۮ ,t"#8CWc<=UFу hq$I&CyEF%0JQخF!W_gJ&4vMm $H"M,9/Fp~drJ'Ai2dQNL|Zܵge'Ai2dQVvYسo'Y_FѬ'Ai2dɑ]AXD,o;cF'Ai2dɑ]AXCb{͒ξ¡9Q>S|888S( Y9\E\%\e\\\õ\k}ɲ"ﻬߏkcJgۑogl}}d+w$x x"VKqI,S#O4\}ۧN 8:%yK,GH!k)JYʳype*b7dZ*$9(eZ*:ڑ]֜z"-R,%P0WQU$%_U?C Qy>rpua gBrp,`eJ\paΩ-KO}SָQ^H` vn]B!tϦ0+z2h,=rYFlEkpߨ5(!M$T(cVLmYhѢF𸖰bGz*nTtiԤ"Yu*9íb :/7sWsolRͤk/wfFr˞iRgɋN`u8gq`+)Hyl$E& VZ ! vYHpMi%fâ}_e}gINǹMOpS,C%6"/"x-dx/Yz2k+T)S7yq8#A}/)Q!Mш?[>+9Y~GXۻd)ıG1ǥ4pQշWW.k@*<fvm0E9.W'k׫kƚ67a[w`OouG=SLkeAyHYTYU8->inkѦE2:[`Ygk ,En6ZZQyQϨ= Sݓṧ-6 m=wQkoW}2z(Xub;=L<5%'IEsMڂGpˎތ}QNY+$ilv ;*]+)=95 } ]tImi:JR,jE@K#ݧٰ{|P;GCL3|a7҇i?'Ǥz8cI#^I \Q[i_\?fosfY'2qIV}Ԛ%*8h&^`Y̢|P3=,\QԎMQW'eaq4\%~GOwU0+98̸hY>,~`LqOSn0CI{*+4,kmö'WspkZB㷼8!C]YڔkLQnyE+:|^6<33\c w*ݸOWdk.2.ߡH[r "w1qIp9bGs*y2mɔd#\4%I23x\aySQ( mR$(W>f:^1y6H*m0Iox=1*vN>ƒG2B8ɜ<,SlE9dIJȓ뵶QT< j[j'Pj;'K~z/n5?:ZСرQ-ٺ3ý:s` 깨bBj}#1j_su2nLiTurTH!I(&&kc ݱ \4M|B1,/S!)~4ƪ(HS3߂ߝK7A+^0MabVns|O sOV}Ϗޫ#+|XT;E#|WG?~Cj{Z2ǃIӟdpݱ)69I$:$3Q3q.@C\`&<5d"e\vMv<2i9ؽdmsTr3>Ԇ#ihaH`^%Bji1˴A6-gfI#&wYQ6$iϒ&52 &GG9oRvg?@>DDEʔm:KzVP9L^HXuߧ2|gdk7Un}o.(eQ p;n/%B56 0RhZϰLL-緁J*<S}ɈC0Ejd$V?:e'HZ|ھ%#Yh ,)vcO+FA.~=Q%w!Pk9uf̘ \p]<ٱ+הV$5B:>4E_ a"(@~gMwvGBzR^FכAN 95qX0I'amL[+zt'(#-ᣓ]pH-ؙ '.M g,Ċw&k?A%Bn qRbT?.(\uRrTȚYNx' w-ӪF 68-v7w}J 4; d>AO>|7ͮƷa{ەpnCAȒADQۍ@[u6: C2 -Q< OQFVwoz[-akE=IoywWǣ7y-SpY I6Q-J!MRrY#*$NZOf-!Ma#s7 J.sɈ֤[&=UVC;l\'\vW, WaǍ^cd-F5Q &萐,"EV8JzE)|u`֜`ɵs~y\*Uw`>l1_d24EA<%<a圿ոqj.rp6}4 Avfӳ[!+N`6$ըE^Qf, ىP>߭x32 v_")V zc31|;mN>I'Tֺ~'’FXWuwsKD9Jp^JdUJW^z:迊GaeS1 U*LH[[_o)Yѫ+={,Q"嬫[U8oГ룷JB. ,W-ہ_lA˔z{=ozaVQ~q)zn@QS-oB5to.mU#l-:"o%`X=Ǹn%VoAQH3\+Ւ5<D5{Ø3hr$幝҄?5j ?s砮vhI~}tGdb,HT:%5;G! )\쀒bn8qc:߀zט3l>ij0MXh$pAwI )x`/ z^O-uO[sEnTO"~+L{+:3tU4*仳;h2$X=ނ{6Xڎ OGi33g*[(|mX.>ă.<<x&8[#Niݬ1jtz25ox` 1@h[!kalna:pͮ$GX+8zuߛcC/{xp*R<2.n>rpA$,6v:K\E}kt^eቑoi|4zm/ފR=7sr:ר9&Ybowp;.95B­<075uZHkWnX(tDvcSHu,ieQwRJ<ИdÜBN{#ԩ{y!Y+3]3g=X.]4=렫/HhפBI0pǿ0?g;klG/:~oj[ڴ`G [p[^N7~xE:wpAQxќsWxLT?HDb|q5r=^{߫[B6aϫs^]ɳfN6IRd˫[ yuΫ+5Qȫ[强}߲Geɽ9OBcxPtsU$u>.jrH_(; H9)5϶&V/:޺ tTP_hvjob{ 1F(o# (cx<~$z(xλ@L^^yGܯ!>GnNz+dnIGI 1I{VȦyqI |5tg L7-zm>E~$T"'RM/ yA^XyU^yKޗdx|JAUrp4x δYq6·\P\bK`yGtB$:#Q>V#ڑd˧XZT4JnX\G XE081G~gKAUʣ*誡jjtW۵\+w]kNsg;۝ wkz)4>GѨc| L' > }OFSЧT4|94}澒V֦v:馲zh|:2/Gu8x5j".8tig|3uf|g\h퉋NJZA~+X? k4| .;p?e%OT"/q硭_?FʗU~:~>j(Eo{%ZMj*-iZҥ%H+iZNG;9CF9G.r\"Wer9+*\#Wh/HtJIt t t dJ邮)]e~%GZ1h5̭-y^ߑw.ʻ֒=\n>wu!0EE < e_eyE#W4S1 y)OʣO }*>O"@ojBo 7 7қF7-",0,GyЗJyt% (>yt(vaN(}g}g(<g'A0z(zM&/&^s &^EEm^8q21s9N7+zks$s)O5E׌T׌T3y5///S/IHC"lK K5K ݨMOOO sA/HDMFMFb77on$xHeH5󑊨IGILDAFE"9Hj;sIs RɦK_ jO6ϱ|}+˗|+/ȥ\!ڮnڎD-sLxI$`$JEdH%ɦ4$[a5r4SX=jG'ST{LTu.U]nβfKݱt{LO5E2=Ε)\$OӸt"[ߐ7,>jϥړM[||eu2W梗̓yȖ2@,dZbYsd,k7F!dͲK)<(RHpl-GV/dR(P:\^=WQAo35t U\4 5\qitM:i'Lӵv LѮ4KٚMav=iO:K{BVh\}/~gh폫u:P4pvͱTzF\yglfzފ]oGSSDOKBsWܤCxX-p>Z VOV>kW]~xP?` t1f' gZZ2]A~~N\!]+ԕxLԵvutGݠ,ߨ-ߤu3b5_-/ tnAnխm7N݉[u||O׃z-zT6=,Im@:H } 56 VJJ!P%Pq_V++Pi'(tmIh|r+yro78OOZ `E.eY(~lYK|zŞ pG>(~W\h|v#~Vrl s{. UW!*5xܮ%̶YWٷ_k|jz*|ϙfYsR,_m?Vv;3`|ך?= 0/D~nHYy'}7Sl(>Z IAh<^xkoH{vS pOx/^~_6i[ gy2U8;у,iV]xY[}_<1zZdO۹,"nmu~>Yo|{CK[[Bb7$c|f5swI-N>k|eI/Y%,>mWp_d\q َ#Qp_h`kH9mtnSm2h A X[!I`k};펶v@DZ- PY&D{$d,Sd T2MYt2Cf̔H\E̒Yh ʵH:Dr=RFC̖(/7MHf-r+b6 vPE{{r/}rjr?j?(<$<,#]Gl<QiQ8pTZHjF" ǦǦ%Ǧ9Ǧ)Ǧ16fې&O>.cېE26L#ۆ4lrmȾ RuIv :kRȻfw@5kWɻfwC޵?yn]wHuyHt!E5]ItAuI!$]tKҵ'I~$]{qJƵ;[nBu([Gn&ݚEց[nD5tkҭ=H!:tkOҭȵv%ڝ\`rCɵ :\krJIF_ 'Af5j 9ՊTSɕTr**܉j9$T;MUR#ȣFD!Z$p@e@U@'IFDL rHV!k!+e%F )z9IѫI^IR)IыIARIF$E/#J4Fi=&As t-H~KH~6!y&H~6&ٜg[-|^ER2lOt2L'ٖg,iHr<yFL#YYQJT5;pxBDC=5}lGΜ3W2D q⥋  9cgZАgehn> 24,CsK340Cs24$CsGFE]ҽ]32/ډd\,Ko+xvI#qNt=OOԴ85 qv2ݓv`O\k bm7nE<ʶ6&.>f;ėli66\QM6"V9msv퐛NgM 2e0^Xʔ՛Nʣ@[-iCkc  x[QR}T֡Jm\kZ֩F6%ty.W.?EW!@d sMR\9b\t5pj*Ufp魭\źڸJtsAFZ0o|Z5ꀚWkV[۬k{X϶j}Vnc;>uFz !ŸظvF=W{nR%YIu5P uE h 5P@}4ejZG U VPu:VN}bu9DӱtW=UOgt:.insOҳ2I3(BpY:k۶m۶m۶m۶m۶|xPR K)&ŧSVIy TcyM5xP} 5FPjJjM5ՂZkyյ\[k{i 4|ݪ;izfN t.uK9<8`rLkm:'Ssz9/\ses]nM%ܕ{r_y:ż7vˇ$_|k^.SEv1]wjw7=ݭtVힻKB$߻$SJA)*TR_KKi+e 2UfJY/[er~״羖_;kuźo_a=gקZ?[Tm-e [ihխ5޺Zoom-vNynEhDDTD\$DRDZdDVD^DQDYTDUD]4DSD[tDWD_ PxLl,jflnQE\MC?se݃aȈ؈Hȏ(Ҩhɘ٘X؊8븋? 0ȌLL,,͊ڬllϮ́α̙ϥ\͍ν<̓<ϫ͇|η̟P *b*2*rJ*jZ:zkFkjkkkk1\z%KK'۶mmdb۶mb۶m}TWrgFy1hD4ʠLQQ "+!hMYMkQuQ xZ2ANd%io@Fb wLtddHpIL4BR%K6~l^J,4Nrxɣd7el;IfVelv̡Se.&tOSdME4]ZSlgB6r';9Lb3Wv [TvӕtNpc{d +K>Y&ne4q'ٷSOAgpp9D/aΗD]01w9HQQr\(ӵ71z|3n ssS8388󸀋JF>PYiJ4ZV[9Mѳk*iJA+k&hTUi5͡5zo-hMZO:6.Fh&XSĞޘ}jO{Io]s@Kzm3{KySmwY/8wD'tFtn&L=2hsI=Nj~A/y/-$ /-u Et.Ă]j$6ҾQ-m}c/G^[[>vc11A&Z~: VL46ӭS SLKoemriH2;{+y[e˲Utl]NstJoՒL^*ޞyh{U jq5r]4%- }XXۥv-2, 6+:ʮkخ6`#6a3`+a;vHb;g{ӫ{'λ8_-᝙د.>1o7rs~wwe{9͘0I>;nۻ^ۻ't-=픶|Og{xwțnjVt;.qwmq CK>_zԃaIrރ >zSԯUngF}W#":>[z=Joc~;ޤ'N7Izizoewݸ>܏ x1<'P$J[x]>G{Az?$1W1<'$/O}?g,x/r ^_k|okxoӏ ?;_( rr<?_q~2$ڷ+T иx5⟸A?3s7:?g ;x6~q~6"d+ވ/n ~EWo[[}/f'ފ(&?"\~o/Q,n~/Fx'^?x[_qx$14Gňբw}Ţk n)r81SB{ƻ텑񘀉b4+hvӜȐ|,rc^TȋQ#*B^Ete,fUuQ3*NcmZQ%18AIz(Nq=؋}؏#838s8b$J= r܉{p?ޛEKo'?w_ɯ7~; ~I?JK'OIaY<)BH/b8:)AIJoR4>)CHrh]$I:&ItcTK &eפ'IP?Ŷ7/?` a0bc&b&c %3tVl\|,B,b,reHLLo̔2]KK:Y~5_%WYgKtVՕJ~5unZ_='d/k}ƾՆV̊kc+g崩U*jX-mnnM[[/ml6ҵeZ\ӡ6p[jKuU:zm{lvT'i;]I?W:otwik?h?h/iojW筽`0{Aoqm:ڶm۶mvN͍'d8*W~8'{K4. -h9-j imkcm>h>j/> xN.$fFd-}D>WSR0(oOKT*ZeQr-jVjR[{j[GHfkm0l Ͱ4:Eh'-iEkxv䅺Еnި=EoЗ~g`0a g#h0qgdxiLgWl0yg Y䍗e,g+Yװugfmlg;}q#嘫8INq3E.B5sÝ6w=x#<9/x+^=>|ES"Q1hXxIDId*i.).Nr$W$_ P\}y ȿ/Q}L'I}JW]tЃzH /o[N7XI+eZVX[kguNٺXWfݭ^X_glmͶil`ԛ7 1e>>Y:}]bXlz]⠱1Y˃.?q'AmD: ?jAP8d`J ` `٭,X @-Q1 9LJD ""&뵂VJZYhUu{RwZLiWc!@ j,|O9!4Kv98q;.WqB`r p@$/\*1(hS`uۥ QF  FU HrB@xv ,%@A< Fī@?*5q,C F>/d>,]`D:< ^#b9`DŽq=#b5e y9/hfFA?= $30Ņc[c5cjnR"K(ᅳ7sYZܗ&ddeOm"څ*-+HįH,-o@v]&eEyF`(WZv0QH21^ aLG"TRjH(RMi&nY4^i-d,BV*Y-kd3]y$Lh* A=v!ɨ  6{i!n9b(j-=ZC[s-mu끝[A(mCwЋ #tv )͵9Jhނr|u ~ax*69`v"XE ebPtV. Wn(|^V("L{1y (Wiu!:T_^7Q=f&jz&wȝr-Ƚ2KfW3|OAyHGQyL'IyJgt:RGhcuׅnz\OC&@5n#w܅r7܇r?x <0#x6ІHkmʹTWt3KDKո:\ks܈sn͸9TN܊[snVZSkimuw@zbfqB;.ݨtn6nȉ HC/(itL3FzMPP,e& CYQ8{`wTq9!'唜3?iZP ia-EZRKii-e\`_")6JVGd-YH){^󢵞hE;=/y~ϋx^tC;ϋ ;!}XBW*ݩtѽO? Ҳ[1+n%{޳s-H:tCU*cr}ܖ/ ޹Ȅ;R(xO"q18x]}Y4O_Bz7; ),u0)!%EYBV`%VrR4CS[۰;S*Ie"UTRSjIm#u1۠5rDLAva7gi ^X"+{q@Ki*|[p;zdЈ52!1 )9| >g_K| w?G_+~/IQ:]d01qs'rg윃sr.y8/'s>N\ r!.E(\Kr).e,\+r%U*/o?i#jl ,Cr"KRɸvW/!<'*[XregkH(rPNE%2UTPSJ6ԖQ'B]'48Dա =D+I2ZChsyu?u]W k_S7o.?\+J}/N;WhTWAi¹[{u9^ o5pO)=gx n'm-sz9i"ndjm A6؆PfmQ6XgmMI6ٮ+* uZow7D=_vԧ3hw l,%jW`O=kh/`쮿5_94B_b HX{s ͙c .d\I7?{,jhMD^&$!cEob .PA[jOTq d@Pf _ ZI̝u^aJo e#?<@(;bwWG]>cr _Wl7*W;=ˋC1 id[c !ѿYh?Hxc`d````B`R<=Q!$1Q( $A@IH2! HP$xkݧx̽k{F( W Dmrfvs)KȒ"vE@@[^Đ<$yyfb@_U(-=̈́ߦ#~'<.sM7]6^.~e>gMVKG5Yt͊fCE7[,nL?/t~ϣevrdZ~MNm-|9l q4F^t5FxZk>&Cxn6y4۔Nތ fOyY$ѐ&|xópqjQ,-F̣=>dMhCtc8ǾE4ɱCm!_ Q<<gN+hv} 70J|2>eG߾i: E-`vCQzww L zr#\iz7ˢe3IQ5Et|ðS'XHI~)?y)o;;撲+w⠀2Zez l$XdCqo[=tܣ_D}a ea2ai3ܞ'1HG_~34"\@d2Φk G{1ϖ=>.ݿcoP=,4uG|Q0F8ӛgsy)G}qq Ah Ƹoxr2NxϚӨ{ ?ù;ț9ԬJwnfw¥զ-9m)\Sh}Y CYƳ EYUX,lYOG8Y_j'04NܴF:7Rh4-YxNA%Rc`FCWtۭ' WwXopR[>̉H< =E>o^_\ށl<#: "xzޔAb+@(6aKWp(sS|Ꮧlr;X9RoǓ%@nZbO vsV;Z4Jjm:HaCMY.kxżQ!F p $.#Ó!kPf3VG8W7]\ڇAMG k`,)VM. mg{DH<? GR {>NZ 6,l4vc|Y@o}րkq=k!@~,L7|Tؐv[x!M bP91z 43IĚ4Ɇ C9"T-a^{)q5ĵ]= | B W5ot-^%CvCyڑnRLMG=]g #8SnU82}!| {ۺӿm);S~mʒA5Y(40}9'@ Ϲ} TYe/~hoAMNqoVߓP2>Q '^ Sz~ ؈YKxeiiיԄgAƂ.Jg< j>Dx:gNuu!J3Qߘ70L ~F@@P6t)Ո)ʏ9ƻ`@nTTmz(`nAXMnz֍dY()Lwe-|]ݺSdSD}H%g= ah]lؙX': qGcd;McQLUr~Cit8ltbkoB*8 ޫv!5уwln/`{4GƟF^gui k0r.$p6A OČtIɧ&(HLv99` {B fV#!)23a2vwNJ @uߤ#o?M,lp^үdNwvP|-Zz }=Zk8r`+#ɔ %c_]i3SA>ˆ[u]Z("f. GzNBD<H,t 0`~Ꝟ4&Eˆ'LOޑ:Hع [meql/-(agVg?Soj{54̼sM>y#C./+)H-ujYœ㠕E蓿{dmma -Ghӊ'B+šux`υYu(K™އH݅-Amn_-ҳ~/HKcC5 ,+1?d{&1|`0qpU܇ wwqt4YGHw=K.C]/~3dG=Ӝakz,ChzW\ oxbb*?wk| 8$`lX0L"6Z!B9.(w \cc3 K UôuֵB䇁 /Eg c6ϛ|,"+v ~Ώ(ql6RH"sA˒ikU;Öh^RStz4v wTu.xɻ(PY51QF vCrm`*R?aaPyY X .(9&F@u,'J*%UH2c(9nˡv:^fh6-|L 0Pt@ S}G OȔLHp,r+0[PIS_<<6n2 NC; C4K)%lL(#z=i| &ń ^`XXx] [I!upk˄xMw6!܌Li.[+~ul5_\KzmB-Ζ#y{^gYωu|NGa[w6iq#BN ېxڊis$T!Az6 r^|<)73k  5B, 3L6m8,\*II=opMx ]zx=9i:W5.d":L=mؐ~ؖd$b}0N<,e }ht>]-3Ŵ"5Cab@+GQ$`ۣ64kvlKc  -!L g!-A´j UG+]CJRExށ\}xYKaFܗϵAIUG4i^}>ʼ2mwd{'0zK'49HA]_!Kwww@e{u%W6` +ٛŴ˂S!Kb esQ6 G&%<$  u&>L?J"%mE`"PZaG`Q䴛7IMI5vqzb{)[(bTMÐSʰ^xrY?#6Io#"b_l#v0b s6YO N`wTVF֑$5ʼ|:n˔S˩43-r*"{Uz@_Z)zh x )ohTC@7 0nyAJ+|GX0g 7b8Ө!H:P8)5"t)llH]"\QZE2W- K"k;;wEƢ"@)ƒP+O^D&|%ݩQ`r#Ek֑ $<\ʃO`dv$Mf,c,7lP߈lH84y63 wW-|bh4=h!Jc>9YAaEti?D mJ)ri4k 'tG5{aҴaPثKZ4>EQXVoxsf>_z ƽ~g@vnĔI7еn';;]i6LƖr9I}yOqʋ&aJ N Fg<.#a48PdWds,'k*G3agxG,%LV-FksUVmhS)O v..b_-+Ա![ AbIZ[Ray{-6-"c} 5Vﵞʭ-BpK]>ºMهrƺ"%WNNT'R)UnZlpߐE:Ϋ!Bq-;7^=aQ붺$m6PK=tm Ȧy*Pg AT2%a LڬvvVeNQVlit]I屖6+؊rGӶ%i̊KLz;˫yǐLPQ!ÈYh~XԐA)[K~د9{Hٯ݄ OX `{ `d(sf.O,$եгY3O#j6&dɊעRg⯘ rSᷭyغ4*rp޼`N=I9}T+P-b=}T"n,k|^l;;,2 @Р> LCj 3#K1 @4Hj; {hx-ȈAG&O)@Pi11)q}t6`'('p<G6uoX,LoT"\v,cGdz ۨ 17s:>*gs}jQeqhb30KlHSԑj Jx܄yɰDcP&zBۼȈvDT ؗigF+>D #>Dmzl.BKec K}GG;l GćEkM8o9MeԶnR' ۭ~po) /py PCYKt'x0린% x_kۘT8Sp8j&7Eqc?xɱ%1 |2_:r, qMƹ-̱:$`r)͜lF_FPo*GtPl Q Y d.VRxuBuDSI;޸⇶ZC^!o>&oRtk0HQP:^uHGճBІOGo)oL7E!Ja)~SP(uoch;+fn)ۍk|(fMA&SqΊUQWԟ&,Q&a.iE}bze MdmOAD@CU[!9*kۀTɝ=?}xZȯ>ܖne!W9>8[ C$y斤/uQmx1h07갫7nb`o'jOgMp_8I= e@t8(|й:w0*s" N^aQs$͡dPpo&m(Q0*(+Ex?Ôч{b,^_əeŵ'Gh?3̨^!7&=߆w[ޮk%;8g}Xq^Rh[~[nie)Hvxr*X9+)gg',+'L?,g0DzliFsid.zwA)>MH4jq!bwfSRm&NGc"G:jүFPj5x,TOa )LUFSfW/DG F";Jgel{t"hE@똀9`zoT@ UO;SY)jx+|p&uvk%cߤrAސ<0iߢϮ(g)CK1tGR½$sLJrysJR( ?IFh|'L֠aHQ :" {zLd. Fgw؉lIO` Y8\\ v/楫u*[&A N; <\D K8l[i-mgsϾ:;蟿Fg >X'ɓfl߷WL}}\)D%C:nS`s7ة‡n|aa׋`ډwؽHF李ꭝrRN.[WN}5lg-h;:r}YܥtE,CCU[^a 6dš D`bcjlfxC]lX.Df/Dnp~U{;S d/ܗ~V.#}RoE7^r,׽Be PѲ1;oSkN2" N2;έY ~ı[ (x`{|S^.*l׉9aJBPW>D$DTɁ郜xJn/DZUL3%xt%xLus~{ tp36''*k[,C`@2 $S 04!/5]dԌ@3>iQEXU7=M/5mīMImJFݺsfCnTvd[;dccy:~ rl96'́ucϞXGվ*}zҝSZ0U긵.OCNE] 90E$bLfLP8mx) 4R`2f6 tCuvN2_X|޷iå#L=՘>)ҜU*RCqbd6!~l`ao>bZ194bRd<^; ј\(YZZ\B7E!M*m3S_ģmsZ2R*)ID+=BU !cd6D(gb\// ;"Gբ>,|˘AA:G]ļ8l%vb0GkKc`wxGռ-tC}y+{>޾ 7Z:ףX~yq1|p#c%^,urv]!qnTк)ZÔW f!P~&Gm02/|BW4lO}]Bqtz /ұH9kEiP:5T wv؋*.Vxzx;m Ҧ~eXyDF޸ޜ5՛'+oxF(w$uNM~[vXC^!YRd@"΁E!_`6-*Z=+/YLHctI4ķt2'  +e|# ZalAU+H@tX7 [7 r!GLI?}y}#ӔGb} r&ڒ%0a7x7|bKPY߃Td3$>n|vH1ζ)FٮV턎hmʛtiӋ9%?vHn-ˊjp6d?@|㍤Ĩπ J:@ZjR֑vEd.9^4h%(vdn*]JBV:FTV8oq&%ҤBSJpCU*c^sٓEt>bfRt?YSב-l҄Dml⮜tf~g`)륌Gl{~bҫpcydDmJӳ~s+zֺF($j)5"8g,㒅zeOI&^;P $JhZ a]%q¤؎%mWqX!\,(lʆܲ T과T-ō;%D3pRajc,W2slLKfX7UoVZ3oDھxi}TSI*sd7M^z63l繓68|JZn G?gqLҢPb;/oϊN˜+DU^-w'?vbs6prYiquUoVwK|J]7QqA4e-'5RjuxPX@e"Z2:Q,6Tpb5l6P1|.93z#w2׷ ͇hi`,h jU \; `dF-^㗷2KwӚ5L];DSءÜՎFqZt K 3oʊZ>e1ŀ QЅ&/^pt^(Z|cGoOz5h׵l#ۮ3b50aDh5(ѯ$ LX<u? ֽDtgIԬY;Ӵ,T6&QuVC\AwbYsvp^]6U+8gHSpҜr^/F%|lߍi]N?t=yq9nW k}f{93pZs;0 S^nthb3Xԫzcwu9xJשg|˔2,k}y FSeܿ$u,&5wi|grK?D!$ b 5k.n:[0p2>f-P-7дY\QhujJ+[}!8iwAx^מϺ_&\mV/N K\‘+\?=q ;Vn}始ϴ rXݿx!P/J grmqr1HvƭPO% [ )XȢ(zK嬩Fdc 86Fj0?^7x=Y!^]ի>HeI,~oh!Ď8xq\h;gB=`~;\Vw 3i*A393ojCό9a k3;3p$7l"I3gmY4rZљqPI^U7-7V.LOܤ$@d@T5J 4樝"q_J5kK+rּF#;$ZQ۰`6D" ΂FK`Za7h_$\HYΫۀ`D.[{LLs_ #S p)LGi4ܔ2C~{*t3m.\S BXp]*]+#ZaGp7B[() -z< A#'L[0c.`D8#umQ-PRBg'q$e۵ YARH j]3R.,|⮆Ucv|8t5X W{>Y;-dz6eL@ uV 3F0bt;#t_ٯ DjKp4jгXqVkךSf~]bu`C-Von kK -!ݷK;[Vϔ. ) W[/aeTZy,ez ',CQ7\-KUVPZ%JCQ 'z(vf 4I\J=e_ e<&P_YSXQ|''NRcU*;,6x Klq!.`e,+egٔX$ц*n@򡅷h YP?KK=$~ڎ1OPۥװ `RGJdoZ|~$~Ϩjkz Re__1p(An+edbS\rT%BҞE6"3~ˡ 5oO y@A11Xh]. U$JV IKRY6Y*JVʋ+ Sovz֘ͬOtԆz $O *tFux{'ɏUE*j `|R֜{U=N<(lSO}pb=dօwAv|.opo\S./!HBYדqMXQLW-Sa"^* u3^CLsƆ}:&3%J?Pƻhy1 zt_dv׼`Zc+2Y[)ϥ3i:% udV:qSH$^$cTՋֆR̾s_೬bP{^qX G_X.6X~%ژ~JT5]f5)Ia 0q=cqWi|P}4F1z"'['4';;ѵȹ`0$ dDmLFi` 4MK;==WԶ[Y f^$~HG@ Fhq/*lN5߀X+;Ti?gw-VyrD%]ULn&Vgx\8|4d?V{qS_;A>:I硜):>{50afGΪn:έAiy3$ތ, Re??'^ 6 ,  iYu v]סyM5߽qsMˮyghE)/x,{b%]Z@l~%XŰƈm|V"5+.,aӾzi"e%DBw[bnl˨rso'%ˈeCE?kc7݀%:چU%b2 >[?d |Q%|RRH+ J.F]FsCcua ˡG~t -*υ0I Q0}9tcj"S_$J$gBaD1@% A (YyO.wS]à Vb@&b~8͆a~.b0`Q y~a~UڃzArpC~ٻb0?!bᯖ2 0tyV6EC-ꖇ u0) 2TчԿ~x~M;R oyO!ȶ 2!2և-5Tc㞎lPfrա]X(̊;Զt+G֖OdNs. ZV 0ݳ HM5[@|Ey娛OD\5ZQY1^&>A iC_eu_Z޼BS|Q\x/sq|~UAucpPr4Ѵ&o6[8RH1ZȷˎKoC?>+ #Y!&?*۪݄T[xKV"JIJ lH™ b6ëoBL y;S@|cOÐla+qf,ue?\axP̄?:i[#,L}QcV58Fkc ͼqtjS7V }%KKBRag* *ђp&AңR[${!$d-W؍Ț=tT@.P؅˘RA,6IUwKBo6B'OHiDʕ˦ڞ޶+veWr,A] Ͽ] Aү̗a=}lcrлR ;۝g}:,u@ B0?PxuTQ6v1X~+Ef`qTq9b{3z2iFm 0o3`1O%ɡ] 5891gPRn4D~.O sJXͷVRh!}$?ܷ_OXzKاؖXI V jRk_@:{n"PؐT Ϫ4RTLT9#,@1O sS1w3Q/Y&Crxt(z==zQX'&bgT֬ NNpjMpjOpj&h5Ls}%a>Eܫ^}X+/,߮'G$e~C/An:cGaN(PP9|SY ZzWf?k(l`GL *hOªoqKρY3dzWUa򯟚;2?&HIe M^=ɫG1#z Q9E;r`rxJ<-}г<_7d h~ ?.؅kox<ԃz@B! "n[sB;9ibu7z=6h O*Ex鈋` 8y5{ x3U@ B0A .ƞxBfxEJG(ҸFV{ICHd/`\ןݯ]7S?"KSR6E4ڒ;RO5dz 3$/m׭_R_Ye υދx ju5˽^Kg/0>d$CөFV-* ,ɟ o bO!˟<#J`,WbKi[jQ!JI#AۖV[3gSaX:`3͍FkN&LmmoU7͢honQ2jY]_4kVqJBQBL^QT\"o ҕY@GcīJ!~Fh0pb7\^tao74NQ0L+#_S_~\˗l_,z.cp hBJ`P`8D3PW E+g _ت1]{5]%J%4vZkP=}Y٩ teŷMNrکuKDf5Lx ^Y^jm>!OX^?KTתV/Q/Ch><FX9k>~P&U1{`1v97a5i/rsnt]q0tw:V}68Ooj_F.O*5'E|S@PWti,k},Wy\e ڀ~ ZJ)jff߬'mgJz!qO׹SEaM WVt3{VV-KaWZ̛ѥq w2'> eG7zI>wRMw?B[R6?mFCx,xFH-}L⹓#G6Dy4;#MccVE>/ *7ئp^}P B- -wC&CLv׾Ŭ*t P)PncIl Kk;@2E"(>c1,rBE.`lCc2V"j&U SV}2 LGn;~7`#}t;,u9I&%:G2T\*h{c[~: }(21=cU&W؄* ˥< lxLT;MfFBù5fW}L#̲lnffK@+d~oڧY]NKEA]U/Vڗ`^a ]n ýނW19It `BF$lrDw7ʁӉ ❹ZPnR1GȅJvF\F/~ټWW߽Q"# q\{-݀-{7-Ob^fMuhٟZkI)ňf: !RP4&Hߘ*r{֔&7<֦v?$/%l܋~DGgEU 5dSl;14@,{[={LB{mOx m=b]z*&p^uC pwa EW*GP4=3rW0.hF\z""`(x׻mл91cX7r<>);qf})]uQ9ʱ^;cC\^!WەK峕}0$Zj.DTۖ1ƶgxqc|*OwۇDVK ;'" F8xwbE$B5vjEtCc}s>HmO-u`݂8lO` \zʯ] ~VbV嫈!R?둵e8XBCn|904M_=c˘J ru;=z~oKft^F8c 23vƓ d˚eH\N:Dpg9YjOG۱f&r{ԡi]%X7vJ utq BmTza,"Fbo@KSkk.L_*¿70%aLo'{?O1]ILZ[wݙKxƍ/lo</ @pPCFP;&;m@rJ&AdRd^x&r5LF6|Tt\zH.RisӨG0e4S916숒)υϏxoWM|) =d_!Z+dvB%Qt0o cWx?Griy:yU_ΊEvN/vZ3œaڎ>e|%4dOxj (jŃ%Mk3^tQEKG汒qC->j(̖,P&:"dAC?#7a TiH' x(!@PN8hEQMgaܞ%sf,+],G<s~ݤ.5+#)6hv.jb߉AaJ(Nq<4ǨR0%^(ni~P /F3URvdLq2هy`XYNjy#&X[P0:'2 } ^1I3 XޠG4 50cN#ig>3ϔ_G3'5 rLELТHxvzx*L[h6P<UFYQq. ڱ|\hZQ@OzJ2PU KlYY bYScfAaX"*MI>6svE[rJ[=yZ O)W:|""gh&UqB2ZD0˙#6q++hȖsOUR[ۯB2.r_m"՝aNKSY ݌) !rрրzNxbj?% U"ّ;[IL02P7[{+m++|ȑqdu*"8`gNDF7zcjqۑuhT^4Ktk'UŅQDb $6s1!8 g NWeKM @F:t/z2zT 6XӱyA(X%ۅvR{jF \@O1{j>B@KnOa*:oRN] Lr2Jdrlg lD?o Eښ_& 4 /jAp",2dH](5 h( MWQ M.-u;eZ{D6ee)nL"%bN~n`ZRe0SCG vJJȮCStSW\ LK%:yDŽ]VK eU&@g84I%k"y(IRq:vvWB>g {=l8S=/܉ʙٰOn #/ ]FS_ CEF炤]W }Ә3?F  aFInOD W FIb^4w){WAYy^V0]nHF3nA@' ė 6b"i`d&aCrrzJBU 9z܋@T_I.)r19Lh^ ·lo|=1r9zm 1=K^\ޓbYj /erI WARAJn*p,K%GxępP^D4Hq>qԊ\ [ҏ4a~xf-rDc5^(׎c%[EqL1LGRP:'@psGb0i .a'ZD z-*69:+vx-;I9n<2;;3>}jj`@l5_ƶIRZt _h\z2=C3y ;0Z;"S6$78h,fNQ)mU rm T֡֡DtRx$*8',K#V"^,sI!t5k(C!<|CfiyP!c@'ո* Z ~؊U&^9֥"jJ='qJrΖF{G( #fRh3S5촗'MEx95=u#VRRtV;w 9ؾF7:V&s>P9|ل]>VW+VڕGiUYmNpvn-K`} `?խUXg o7ZWKۺZ~%#&߮W  yITڨ 37A?G8?"h+1e 0ք5x0Jb'u<4) 9OƱ kRLWInVSͩuJtFYQâ^~mLKב@z}*o:Sv )Bk~ZSJO<@N7 p\Bp(T>' H6fnxZYNƹUc{q͢?4$Iߧ 9숢 23 !M"R*–M {ys13JSDB>rw쾋82/$Un}ZvH%'AtvZTˋ7⻖aۖ U"yZbmAԊ<S$bI[ '&_6*CjyJ2^v=yLmo zNq6XF^ʡnJ =ffσ.+6=} ,r4FGg͐.Ww\nu5v"[)VneG~bN5!f#˜=2"ZV{AחZrZ"AI:fTsp)cF :9 S>k #f E1լLM˴kIgԞ`C5,/5>}npee語1f(Pv m0K&pD.Dy.lcJA-_a)Snytqb7ȇt.Yy ޔAtińd]#Dvdփz kuɅےAi9{hOL.zjpOQҵռjP+RGc<Q—Pm I{ X:Yk1 K ݄4aQ)ۋ1uz &S}|Fxwa@zʇkͯPIϝY~A״u5HARŔIW0!+J0wx9U٦Ȓq])4q}|SB*edjwҤ|[&›%u=@6Nc?qcЙ$vfZR!lɃ7'Z1׮~ƘIYY*u0A,'P2q޽ğQ05_ՑzvӚ8 g52`[›ZWnHVk7 racp\1+W8@~Qґw `0zxl*P0ވDq;pQc˒?O29|ɷ71MX. *َ_]^}8:ܷ]_pة(oo\a:4p*-S Ht)c`#vFf.nӵ'y NPntJbbiF *ō}/ Raeʼniلa攉S"wJtƎscRlf} w1Rv Xh@V~PwEߣn?zSȂ]iFRKVNRqӀ[}bf j$|Jm,zDѶ^Sh+x"~ doWOhhrW vvV-E\DPu<[ؠz~CȮkKh U_޳썹KQb6@|(-=`Wԡѽabw 2.bf+yVX0 Ģ$&{ĕh(T+X#o0foG/?Ro }-*M#Eu`uqcN0w DZA|ߨ)F4C;^t߈@*G:UdokvvG%Xxb)X7üߗE{K-̃;3Oye8% ?}ڭ2Y"" {I>=XXQ9â5xE#ޗ{3VxC`4gP&5Xaa#o(خKf)SPEaAGָCzS7&|JXz(`C2Q\զ5YW:S2Wo\yRy??ݒϒXU/!'|w:Zz]WC#C`h]VB]k)/<zRKBOswAbZ~4׍e.=0NyÅ().ҦK:]ұp/ x8;x[#ܫ:eqR]#gZwKVIbΛ+CHNHaȕ~cL2q ?yb29g,մN>uWRwIV`>1׆0^xE0xG3#KVtS7WSڜdDZF$;h"X5gQYn(AGc_`?$$:miKJ -q~95"*&,3 cJf!JҕZPa, N9JP8eΨf}@}Zr봴VL.·/T"̢x5@c']Xx6ۦ=/NU LA*F,jDbu/*8%)2$q/uD`O&dnsܵ݃S$sJwY6~9(Jrl> '%CvFU.7/G & :1e$\j(|I!+ș9- n^qۯsuTeVABdmt;iVuYr dsgD;;?^o9N*sr {Zvq OyFpjʲDz `?JPSD%q (a9p0Y-hl!/[KsRTDsT.}"rKʚسqr\({tf8*ukٶ"qWsd0 %́DTeeeoWcpCm`&ЅpzFmy%)=|cZ@j 7Y#׹:e]J%khݝE5,Nuudk l|]a.`ZN SH=l^RaužzPR+!z 62E\ e`Ҩ4i7}37ĹbBLb5jMCpy}{9#G qo ?(nxI'e*/}X ubӢk^ڤYB?KjB4 XȲMzRH*67# &[ioB9яqJPv/\ HD뤍 iBH;ݿn&"9QNDM$*t&ˏT,U#Z|A|\Hi-=3CAAS79*NwJ4ف:ڕƸY$̬`Jkere-&ykV@e*/et菀NglZjHPzӶ!PdҼ DRN1b"]4cO!EEtLM Rfl1S&c5J۫'[(QWUAe `Lg.ojgx೨{G<q<?ouSf>Ez^g|qPL3,‘` f4 /cAb '?g!C$Ntﲉ^z]kBsk&rw1mZƧWHebfJlK8k#NAj@ UjkaelqqdIkc$AiihYsurk"@ij Cp{KA/z]*uBH ܭ$)Zy)SŹ/}5wobMj7,1h[@!kOmcnshP=#,)(f\0ݩ+׆*#" nj@BDU~ݣv8<'%IvB )& 6>88ab.R w09mȧCQ'zDc]/#[:EU̹FS9ʘ?Y$q46 H LJWF _A>":-v2"/v^(x,-#HtOZ>/*~W IcPA_l’_t1 crfc={kBN! <ЕcP*_򔲷stl2E"#,4 ɧpk#%5e+ck'/Ma9:lJfb%Vf3)yɁN7ƛ=A|&-Zh퐮vb`=c M0y$Ye:4 fuJƒ"6,%pU0Dbk{,^6hxE#6Vʛ\9Ѧ&f w8`5኉ğ+MδCy]C}~r#B7O {*u֦G&2_tbmob)CYqvzǐj5T?eҰ2XSJ1-(F('aMl\ ?hdҴ77يг_c>. Hևft{}=c=Px]aW O/@ 4'u*̎†ח7ښ^P$ ɯܯýO=NhcK ZMfϗi]@sQ 8dHw?5T\]I<=,x0 sY6S-JwP=L7JCǖ Ҫ/< 51׏[QJ:#=_8/R+(#aQo$AV6r{iwr;7X?Bߢ5_ˌagR:ig7WD+iَqMĈexZ7vW7ݚڌ맿ۿZgioW =ll~bRǏYX e%E.K¼޲&ڟmIq\ &l} ݑ3O#C/n%֡*Iberyc0$!(mŭ'dHjG fhmmzB:>bFKhc1 6Hޫ`2lŒmp=Dr4ex@3Auc3):5HS*ש*PETuQZÊYd)zQ|BEr XP<-(&¾;G# VAŌ[Jᐼ:&X;ׅȜ<.%W8j)r(l}IeCzYj: EƎ6e@֧ͼPo4, qnc`ـf_9"x(V$K7 n'CHZ13@Nlhw[F!l%kt(dI׿3K l-z잭RX&VOWӕxiԿWWma]ys.H%,pӅR+tdHƏ Utvk,,H[ B ܡ%3UsR2O =\Ȑ?@Q\c'b*Xh-^p J ?Pҡr oƷ @KWV:9MJXI{E7. FgFG(K-rRzgUFg)ø5/^,Tbͯ"7 3z*nqp^ I.QXiz^?㛏[s5 P l$b*Wj\~j5xzW3~,F>_- EAPK6 O^1 ,Z3.϶DS~̉'Ni]<"tOD?1-lb_0*c ߸@9eM)3 E`@ sxq!oe2qW7IR_`0{{Z9þctu/\7ɧZ,[ &x~I@IZɎZ&D K o=w{4m76Ϛ-uV'E)1jiop- aEOՂzgTϔAO3ge{V?:%ZٖQp9~4)FSE kuM(^5O Y&iG-! C8゘Ufu%v,t)ʅFvz,%mK ?`M8mj ϻi,h82¤08VGWY?~Ibt]O5ݤA؈yH\BYp?Czoqf2s)_{( nLޔݍSik۲bp7+^y=q teؕFxZlB0$$۞U֖ADNki-I X" (xhȼבW\r=;s4s2 ħ` XHHnk76@T`A=u0ު=_[^=_VȒvq[PLӤ%I4FzdoLPs>-hj}Nk@j! Ҋڙ|U wzY7KPskzMB3"zI󝝆9tOU9_Jgq= 4I V?ejQMTzC&KȱѡJ.&h[B]u%,Gq?_srS_G{5+כVM6[FTW@L1ց LhbºvǤe. QM0Τ ƀuJoa~i(U54ݵ*Q1l9BIX "/X+HPbёhfK 6n݆ 0q%1t .f斶eBv ILmkp>D Y@XjL6-~m&jU.,Gk4F=ݿݳl_׃t/2VS6=S:o8Xxapڦ>dUo?9) N~i\P,2f^΢ WaPe(;;=/4,tp7<}wn*qz)RmgsX(S@ȝ\n$GQt6JtTk@Nzܐh $epl!rH[aݺ)i[r# 3Y~S׶Twvf@4~FdJ[` Lix6{D V`BY~Xa\튽MqZ~ ټ0(?c G>Eپ(nUiq":B[0uwe?+[a'ޕp$=Am_[l]Ԟz@YݢD@HvE>$[R {#(Ż w (F1)8l$ir=Bl¼8r5adKFoWA|۳(F06|ErO*YPM^XX7 |͍RkXP0p(yy?CfmoRacjw"ͺuwYRRTZ!>6vnņ]F9]Ʒt2r=͢!im|#B,^ swON/%#@⫸ `XaH3(!hE./ĶtK\y'JD@&qZkA/L44t>OhF8wTTʀuanQtGoaP ʀҠ;Ukyy}&PF0\Rs42T0ٚA[3]\#<2GRM13D%f/?~%U[-*+G ƭV*a+0(}+/' ЏepCdlOR/RLn$LY;ٯ5NAݾLʯhu?/V〾;HAjQr͂R8Fi05Lpǩ |uX##< JBY&\QpᢧVT~=Đvwc+ZxNC:7uo"?׸eQm̸BJD-=a:ͪ3Ϻkm(7 Ƭqƽ:*_^I c*"C(CYWcE/ ;)n!/$[3Ƞ"U6}o!-aCZG*v&Ùz_Gop:0Z QhW pQFMVk‘vZctJ6Ir0Ym4u22|CSf:Mv$KRjX5t P~.ͬ)YY92 rjMqsfҤ&6( I堚=7T2hQL. 13z,|1@>^'p˾6WvU7!C$fWwt yX4/~S _ß)3Sl(L V <4x!ZXsxGTiMȏ˷'mLl32'>m3׊bMtvT~U~ybk 5 P&PI=?Lc}#iur<>:s h Jc5&654P} jbP5P)4)cI n*'VB P,,:, 07vJv4CJSdavȗgSzs :)B- Ld|j}-!=J tAmJi:T]p'PҤ\:IeXԅ%냠[X(ŲZCm @4xi\z_%xF|+aȏ8S1߬mH)o.Na h:UPj ePˀPP & vvqA{~/j'Ut.]u F@@1^a8JiJl }wL&%0ъL`.z 3AjI&k#mXpU1;p ŢfeճJKGbEŎwCZ+R:dwoiQ?םl dM!?5L!S !Ʈױk[OK2E%/ `WC7> 5 cjp9p]l iʉuZ,sϕA? B?&A,F_9-Yux(d92txy/mDG%%$6o]q[%d#r-cK]קS䡏ߘR @ f5j,_׳(.8KEE`A̕/޵Y Is I[^OBTdn[l&)b<'F"su}";QJʫqk,.6Xdza~?bR@x}č[*WkPdɝTL 'ĐV!]j^[ۢfblLr[(0 q~$NzTk*A+9vB'M`,Y,?jz=,GSҢ:qɨ/#L-] mW'K@rv~]fRf%=ⷢXW=>-"?X+=&c;oY7졤G4={V;3ॻ,?2H/鏥0j./!9hDy (~m\mc;F`a|zfo[mM4ζJ>ꢊق48> 1Xh8{TQ,n?Y\ɂheB T%}$㎡K ~9 J^_Ij.G}thV /cā~;;fn ixM*1PȓLdx; ,,lU,f&˳E}rj\]5ǗVf}ypxu֛ }a GbQUǔKR WIXzlJޅAa?ETZm! .)xK[e'<1n~&MBRwC͆Utg}*bF<D!>bm!Ak^IhJ2_/DT2H&[b,3 [i 8QJnbl"ruzW$4B5n%㋦3`c#*e; Ńe3(>0M9Fuf볹n8[7Jp45hfoxVQo Ne#tMn 7׶9 d5`%& ;tM0е%}:җBܻs $bmh1V2 S>wPnk8ִY$2e4"ǣ"n~?FAp0Sի 2IH'oG@tZ͸N;*x$R34Z#讒UةؙnuL+MEnzT֎&?w4>_<_5  )$[ a\NE4_.KQA=ޥ_|S&"]$w9Wev#u#!!f)r`MQ91p;R>?n|P/^35D0*$1J|"Ʒ4#>5,k)V@2~_}ډo2?/-^0x.|v}IM+X[%/M7%BU4Kd.Y`Ap+%Tݫ 8c]AG;j; RT&}_4FdِITK0#v޻5~;qHj_qk>: 9ZCupR47p%/. \^.__tĊVֈɺ+rX2aWJb`W+#|l_ȑQs+pLe,~Q P 9zÍQ,`<&@Yym꿅^y+8KJ=ё!({ zws8x蕶J>K2/;Y.//Ft#BS[Z~i7weмGRe#뛢lΦ^1 @U17 Õ_kґtAQ(i|w[B' ;v׺^ܮ _c$~4ф]#.9k}oo_ːG)"4lĬzi\./LwEy=f  6F; Zom+ .m#kB[ 6 =9;P`| ,l!?&#4aO32PD<{lN~+ݐEZ!N֭r9Z,}n2+8e\aR-H V.($mH߇،)4H)ǔ"hFJhQ)RlL%)=%4J*$l݅e`;&jZ z>P~XmZKbx(p@QJ3q!Z`ZWb~|˥5x q)Nzԉ_Я0zRÃ~3:*T![f=P*"J@G%`,,r1I b1MIc.ӏd c{C*Zp/$d(~E tL e߶ă9 U$XҊ]B:THB+Ia?2ҿ%%]_nZ}kdp(~C>/_Ѕ gRC0CGA\7 76:E&b-CEa' T>P$_%L9۬kK7%0A燙gi'ٟTwrh䧀pDE+nzh) RyFz#SxWp~uy ?o<~顈qҹvh^Y JD|[QIp}”뱉OYs-o-g_,<V~&u/w-& ͂oIK{ YFzkJgP-PX/2^,QVېX%7WƶcZC+_DΓoϙVö́"7R VފC*JU,ud8' $ymmā5j 8iel߀ā-M4n\ ~ KکyM7oy}E/\ҸOV8 "#v ]I+c>hXBM׷ *Y4e{Cg%k6DY劉; Oof#gM'*+NM };i[؎BV?7j<6KYZ6)7G9XeC%^,5rvTe["D{[%U*_U.|lN6OH CkTbCc.~hPL9o.^[ T}S%5Y)4*4siiF?P*>7S"v2aN(B`k#ajtLݷ ƈb7}-ɜ;2/CS/fsrʴݫёTՉ;]HPlU0 YPxBCj~魶nDoPdg׿<*QѪ`D2a3˧XGCSmC rFv&vy!.zF-ךl8XϪ+dAKrŕQAukX^͝Pͷhl)/`FĦV\.M[$ tZ'zf67#ز_\VMi[O{?[+`aS 4njcynjgd41MXη=h?||Z]]X랹kX[jExܼ^)@ӿ]z QX@Dl? ?)\n[E4|ob#4BLJ^to;({lJ9.Bm{񯙇8 8ȨG0v}y&">܉ j aq ፭Blk"y i @_i) ֵosI+g-Z6+v_LBvގ J|q0q)CW\ǐח|ȷBUQo ;>nz̀GIDGlWR5ԻAĆD_\/\8[qpJ 0iZer0ń8e4L0_{VoT({8v,$oPW7ES 11*{:הs,LT YYfӆ Ak:] ӳ_#, q'> V2eᚚq֑y.+{A`t))S9G>vBT)`yfcCuU "g)#Dt K{Fka,-qmW}ԿZ~޶0Z'Zg_NB nP"k- leAN,:ͣp"4)I~,xT 2zPH ёџ,YH{J!yWHE‰aOwXNE,)oBih"[@D5a7z3-A]s = zCGf[ݒqH C~ ^<6,'1⍗$o~ o%MʕHlB.y9*ݬS~!M"3*>)G=ǏO(5α8J LbFqfpEE7"3Kb; kkkIHqwz,aANa 9q 6wor9P@;0eC_Q{Q:Ckz.ʳt2YЩXB(A<P68 㷑?붃-6[[f{p8Blީp*u}'C qd)*Q@qxFBaksX׶b*RnVjXA}W2"LӸ7{l$T=K(Y5a*x-dJMȾ* fYuEEA6rpeb}q6>@a=Ph|neBYAV?,Ҡ:ohXmy)z5FU?BCoBshgq8#\ouW nɕ x(*9#D,RWƥOQ𔕏bT$/K='r inPm@aJ$8JS_&9µȹ9 Dq> AIC +wr|5jr =LqFE^:UU rCnWX#ĺ_< G0IE9N/ɿ_rJ́qxzDƩ6P JW" 0q?cc?,3k8BB.?eN@(~(u9*E-X^ݔFIF=0J:-46E^@FEUW&Z2t̮o\ DW>Ve3(Fx^`dm7@3nOK=oJ]jqTӏ z|hj:vi 7%U74I**ެTݯdMˏ}/#K5KHEl 8Naa퍕"Źs{t& ʈwvA{S[KI£-z>{Ǩ7l2FDW;;¾eX8g ?w}^!$\o{t~`0mq}Oq mX/e&REu^<.yP8 4'gJ{{ Q*+2(Sᛰ,*/nK|bdZ`?`VckeB_ւT.ЇdDEčC^!DA5}e@7<8|]lbaI*=د;EN,.͈?wl)Ӌ/xeN T|*1]VeEă Of?Ĵ;'$YݶOfg/O2zLO^7q xy&[vDOR Zٗ '?K/_Tg?˂?=%=}z Vg՟V҂ʞORxOէV WU:gȳ~ <}Ɂ̳_OvT@eZ[]OКY9&󓃧КA 5&S嗪^'2[bېIƯXJLa*G^E6J"܍T: U7 ga2_n{5ߟ?'`|cz^o9eKF%\PIY#ԗ* 4tn*AQ&-J0Y wƨǐAÝ! >\B=apk(ԇ6˽/0D{M!zDpəB=$A wQGau/:wFݫld8h=p{;Td6;ϟDq5sE[o5s[5([tP}1¦¦tW][!ɋlQ—Flpo}- XXݲӖ k_s(6I*4zRI#yA:DW>4Kofh)>WQ \La⳱H`ɇJP,Lth6%Xl  k3km674r9B ]SREb>[S7w$pA;C\œnc:ⵡ9tYԁŶ!i}a}4֙A3N8" _03 i YZ3[ʇYgoMˈMO?yP _|}!+@?|VȁSTqeR!Ɣ`znS$!l$w/(v޳_şmʺCJDHTqENxs85Y{Qܼj企#ޟt4*GEJ>9aEl𰿕]e7LtGxk\Xeϰ9b sf)`I^IC4\F׷rU) ^ЈHkaHK iT*;_N`IT?#AX!@k!& FF{*9MFѿ^yF6IW tc[!)08j%Ʉ>,Ujܵksgف!n«l@ҊI·gh=l3n7ȡWQR!!|_@8դ@p1)`n>:~~7g?xw8XZ:>?u_wusgpg_; u3›퇔ks|j}sw<;Ww#lK>7nNG ~ٮ8|)Y<  uˆ:yo1A\~Bfc]T ġMɿ,Re%dJ6b5$8~T#V~jLjp6.I2pjRIVv X[ @si;ElA7w3iD\zJa_D߸Ҟg=O=ϖ|C; Od_UZ_GGt(7IoIueAyF2,ܦ 89tKv$8dHE$ !QNV£e >h5䁴r~%xi%=% @'Fa.LKN(ଗ.㘮V 6x q衶9Lm!G7G&>B'1$GFrM rB\Q8$)9E"2=@)k#+j7. q 5:V@װ f GòS;P Vi@gs0xsoNT n`1~-TJ"6ɅXx(bDpDeۤ~Q~{K!UZ /ʇ\L!Jc oJo"XI*F} 0]q7u!ٛVw8ƒ_>TJ:# ;{uSzv42 {5躁9 ҽ'Au/ƞ]Ba5, (oi<W8^`MZmE??:#7N-Tɻ竺Jj¸ReWWs((x@Mw\0]Zk?׬e]K8}nIYH1*MCymC4!^Y#UlI,u.Z}yW5퐅zIý*Nj +dUFڸ jZu%E&.裮v̉j%[pNXӶlXS i(ndi4AV&!͌&Ig43 ,Ŧ֢1\DǙ(o܁(x=.h Nfϊ%щ9ia n:]Ƙ, 5L!@a}/di1r}j= ɩapI%P܆NTeL?IjPQj)p t,P0wYC dG'3NRiB(0 .Ѧ$KDӕnAQ+ Eff34rqo)Yth&ItTWIyʾgFXH?")q@!dR vjUOv53>"S%x `мǔl2&L7ie<*N r'.Iv>̒3 ?OWb*O.K/N9x`b+Ǔ${^>OGC>H3zq.f>R] %"g w&^rbbBSo ra3ZO3?y>Eg)#V+"?eWgv -'_e}\=PxݼXMz9'`XL՛S=MR3 Յi|^Sk '+-»!tbp R)=I8FPрۖ P2iVZ<Ӭ=@d]Y$kV .dXI;+iy$M)ܑ׏y~te_|*ys1/z_qR%;2c'w)g`pMo'~Lz ssC59w*S1XJD*:б3 D/4WK~)/t0sq̛I3&LP& ,B0vR Q9f=V[eUlk38,rvuIB 3:ɝ(E`xz< JZ?iXP(&.bSmja; eޠ7ćΚx2~>-dLQ6{Eg}FJj*WEC^XУ=KDdB5~@bf6wf}xۙΤݎ=;ngnyëc%椻sd tqgt7Ґ>2In12T-(T"߳qꖡ[^Il3f ʙR[^1O Mg>*.0)*Bz&e]SL&Y.-.y:FGhOǣ1#|q$' wq8mP=IzRKgf~)(ʎ'D}8TU"1*B8(߹2'ݹɱh2k 7⛃l/&cĭoM_aN!^KzLCU]/w>w^wV&JU XXU dNbâ`E_N9y@v^#O\2:q'Ikr FǺ[&hg-ivĒ\dIZW(#!'e7R3SHj *:QoQ(\ EC eN_ɑ*g$ .'=tV@F+v3e΅dl$I쳤w]w}jR5xMZuѓ0O&J:#(>1(-<ߖu`?VWy1yy4sߵYn7+I9hġ_ie㬿a#eKAl  d_zbR9&$u:XXz(NJbKn^fFPqQp{r2(d֌x,dV+)(VsSj^I'R@٥ڒYK@V,unnAV.Χѳ"%]M-)/{s#XMh#wSʞrX8:/ yURR/ ՛iu8VVc~M>>2c1uV֨YePðC)ύL"~N;sqgbzm;cL(/ae-DR F#hfR,O1t]؁ y8-,<&{E{eJa {2eN-%sT3OqP)w+[gI$.C'¦{P;ku~qm'ZǢ'Qi4GUECk0&M":]?ONk;i3ujo] )[xNѰ7L&#`۪K7Q 掂Nkt3ba9L7 c^γvS C ?v8&,,v=ka],wc{k(l E)|77x<ZSkϡ]Q Jid ]Y )~'Z܅g&uf d OA r  &AcΈ"h<\%Gz|$U Q(A7c5!퇆ߏ@`ŗ$ϧI&g?M)Ykk|J#t#-`<J#e4>~{hi%o߇Y~CcXe$to $cm꺫H;:G#xˡٷ$DݹP1%j?.К 7@L $pQ7`t=E(C)uj"|߀2 L>sguԆF?vT tP̖5t!tY` fpkU JȈƩ/Yn.kE5viQ@< `"*N| V,W,1H{t$=}eeOrh[01cIY5ښZs<'83PKSِ(OY Fo*rXSI뷛iD:yuFݱ,*]3 HUf*K*MHe7ѿ+:>7: op >^)>!3Lm|=EeA %_D)JO[>&lp !{h 3apu{J( 2 ? Q%7K{t 6z x׻%#(-|)v[%-}Jnj6nQ bnAN S'^I C5Ʀ_7V#2ׄsl3H&zI`oZMӜ u#Ol?3@w;ԏaVqLmEUj=vs *pmꠈhKe+w3)Ҳ1.}P[_᷀yY.H׋,".ڀ>p2t$hսWxؙ0 @%@/3/]\h Cv55BvvݨVñ4mќ|F۱I]l&х+PB4͚!j\uҕ1:N6^~yEұ3S__'(a"6SCcٰrϬC.|&넌v5bXE&$w wM5OG Th&nҵ|*rqŪl291>1Ϝj>o ~m c"Ɓ}#}":7tn*\UBOsqJtn*Z}N!@W E_rsPv'g k-ƅzN13|$^ZQ(00*{7evqƼQ~@:rrM|4)P޾?O%T[`M󑞫%_l- 'h+2D^!ξ5j\&ϾzΈ;"ބ@ч_cyHنLH.OJ3VdAb#t?24<30,E Y=iȉU:7UR<)'rPԷY);LO98&V"cv|D+\Ks2V~)7ExΡy2 /L?]9M4Ev|2:Wvt!YGp2 z_uEyB;[!Ѝ@ţˏ H"G+ZnL+/&[hpTgB31,[QjVX~3?Ɏid|[yh?"Ta&I̬('+Cb+$Pݢg\Jz9-njJJ&R/^zw|5SBn" ߄?|}dt>j*taaRtn""N:I*GҷTVu`A6Ϫ΃>1muXrc,/)O@ Ji$8ܡc`h5̇وVܩ9?/Ѥ0=eI^OC.gaN^e 7 Ug~B ,M줨eJyIF,#W02ϷnNbѝu8S,nL70G?~O ? _:Z)ty)|>&0רIkr!}2Jf'z.G%u?ܯ_{xTL';±Lb (m48uV䕋zt`;:=?G&yT]sa"It|4 6_kф ͤC unuTGK…Ql=cNpt!ŷ.:яMQ]x0#2^'t{u`nC<#0ӜiF`QC hJW#ZWŲgeZ3~64Z`zR KcdM_bD 'Fͥ<ƢکuYiB q4otNyteTU4 p(IǪ[a [(_ .,=X!]-[YU ^kb /4v@ :+Y7mUh/ beb20l}˼݅.W!sרEfKrU5k{BaT ]"3o>} 65N~rFߺnmg?||)܅<.; rEWv!푛ݴ@nQp ien6E_y{#HLA!04| ?ENL-g~a^ \oY %m\ uWiF :{B,If^27NB|afX ԊoJE|AĐCQ-ɂfyh/&G]7 ·xw4Tb?Rx }["vC=~,B\/tݑo/.t V7M$zl?~ ;#M ]Rj=6x>^{֦鶃vK6n_8.ha wTs2;)sk?"ۀuڏcfLp̤r, (n&V [:E{9`KԓւL1?䭣ƃ$;nOfCqW+MӍq<t zΎTD&tzQEZ"//Hp aYۙBλ3y|q?uUq\ÕFX (N=՘V=$0=>Щr#QjK)C|xdj¸_QqB.Tԋk_G,2x Q L6,k`XcwW YYfG;,zxeP⤋|ɺ t.Y׈pDƹƨ;e;M@TöVXByfvt;'Dy #b e]BLAFEQ /&A۔b<'g&RxљR\)_wmsU/,,6NĢTE/V`X@O(hVq4X #mǩ*3pf X;Er w4Xqw1hzW8E46*`Д%}C o K[1DlBQd43Pzt8p#8U(3NDh\qdƆ) ax g<4Pbx!#<$oGҷP0`P㞛pi,̆6=OUbm݆mݳÞ]n{qKܾLlZsOO1~dg'z^mcXZY]>|,Rr9|礘i5Tpr_ xTY7%8N0ckҲ0leK!|ž}uvShLSHзE0OS AwFōOnW벃 0A2є:(qtu18g[w \9EPC/ʌ~G,;W\t |)y:tdШzO)"Eϝx9zP}gA槔&¦Kg̍VV FۈtgZ *S)$P RZM-PO0ZR/{Ȳ3JTEE~i(H7TmH[ m56_[@=06S{8"G_v9 R9iz=HӠkg 3?$cA?w"6s0w.m}s\%3A%`|B}wv#7:M=8lJCQa PcL1|ݹ\ĸ5NXФfT7E`P ]22N kSuڧ^\ᫍow53.M1i˧468p7rF?۸ SӲ}V/>"^,H)QaEp-y?m]^))}/Όܴ0mE g(V3k8QweOn?؆C˯ބʅ/j!PQ2/HlhKI Hq.;@dER 2uQt3 /6mm e:Eè?"VAtN7!dNG8^2BV 0$JgJ6Md~yiKWfwvw6-4߼ 86HsH=mEk:0̑;eϵeeD}fmB72#oA;W᠞*۾ЇR123ɻ l)gjH]Œ{9=+ne`m>ca?>՚hEsRcyj%; )F| m^v ټ瑻$epjt`KYz1zRZTq\5W`α%ǜw^ajkDjsT4;~e#Լ:%Ȏ!qpG;ݼcwC玩N>vHJI/Яt0KI⾫; w.4_+Q.EkW6qv-U}x'[MÇCW nm?SV8k:+:`wF^OChh +r ͯ07gdqj N_&΍.XEC$`^DyLË4j܈;q42p72vXňh7[ $ h5܃<.TV Tnh&duS® vpnfA.^D\ݛF[0-HLKBty<P)gwwtJ=踭h171-*+?}W"<h }E<ն%bg8MKLY{܂x/ᯝX[reP!8t5 8bRM)t EQvn*! _k k" { cOE)_u98="@<wEɽڒo,R4Rdtr}R pRs3ФiU;\i ؾ "]Y-/-%TYG;+["4_~MRӪ]woW^yD)UP1,c] S}4#`4P:jĔu;J.#4ITW)SgN\X 4zH"s1 Өۄ/."Ы!8Q Fz BgYMYwj(Dr:|CR|澠~pqOג;LU})M4(@Bf&vNG/M Bke*!,/YtS+V밪r;F'tggi(h-|7Se CEe⊄gD/FHӓ 7҈fV{TŊjzb֭˛\(;m6yv-m;$vn./iDK6Ƈ'ƀכ6FZ& |{4?M)oY~-;^M[4} ʰ8-z&H7Sa8A E~'DFÈ#WGAݒ1+Im{4ZB}t_, {} فMe݆k|Xϻ{X/_tYHp˜r)Mn6%MX,joP\{- 1 _#vq-8 w5E#@-_Lns ^o,SU ^9s-bF15]"Y/fvg)F:|Qp@FrpQepGHbkjMx*AϛdNOmϟOkw14¸\*Kj)};T0q4 Jdv'7JufX+vNɯg3]>\5)!eC|(]0.VK=A S! * FqV+.HfhmtN.D_+Ţy|k^ o>{1Wr¡<ŕo Y [r(ֶRA3L|]S–1S}^ĮOىT eK<#yC; h&H(SJ %l[M?JOKa/ae/vk2jORrCLn 7PwLR1Ɇy^ l͝3zI Ѹ{?S^'Eb'cTDbƉբڴrܖm vyQ4*Ta2ըƯ }/խo bHKF?./clY,GCĩ`SQ}S`WF~n1m*?g{U@gMWG h傮nNbkH^M Y E:SyC߇ؒsM~C]_'aq,mb{j2_'wC.˰$TPX> |=|%ESia,HyQtMxBVaŴvO+ w4Mt(7ҷ9_[nSߖvIZcW\7(A c_0cU?e#eKv0Y32f]_OkE#49V5uIȖhڐ[[7-u$: ";h`^ISwP]ߝ:ȜNUak[$Zdi* mE7Ń@ )I ?Q߆h$}?PH媬 >/]r)q4TI^{@ٓȼ 1iZ[_ L&34~ݹ"~8NmI %6ci`HH4EV)rs۱NL"=M.ԓQIorխomil-oao(EoCk3F%juПo 5;a ƦP(YK\Ga^i> 'dBV'w81齂91S|'d@|^L-gtyhB=8\wU5?yԑUFlu.HZd:CK%Xe)3NQj(lpG:L,l1$*OYIsxkߴIϓtu*{Ibj^u>0Թ`-V+"#Eao~grbgø5J,L{3EUnǖL~bݾ(=(g cC6#|̸JrU/$ 8}wh$%¿(7L,hM9'F3r{Ԯ?̛,AP:r6f̞%TRJ Cbue Ӿ$W=3y Cb; =3J^+oWw6ej)tsJ(55SГMOܺg[҄-@Bxjn8 Ɍ_&w Nlo,5sj4.zE% (kll>d>ʞ8nM9;9H4#DM1 mcaJӸ?sL.FlEY葯5{G^m|L W47dyi|D,z!Cdhҫ23%4e2EqKÒ%5oƣvK zZa0p8]ѨžI}ژK6{~0=X[Yȶ>zY;>(!TJ';ږ5A.BVuD+M<ףuB5lw{~ḐH 6WR ט`[8$H,0  nq:)~nu7Mؤ52_ 3TuUQ;8Bhq$vK/CT}.{k/#W3" RB c~NJztk)HU0nrP |T Ym\_S:#jʼn\}j5G*Aba>TGWI1 iړ(<1:Cp-hkk 3'Bc| )Nٛrն=Un;2-?9@Z8lJC{EԞaHyaQV('U!$G"s}&';&W L{!P D8W.Qlp9uCrC3f"Ҙ[]Y PS9o(@äS$`)Og%m/dZQչic aΛ;$L;B-"2li)k_U(`vɃgt&&u/8!qpWOnMSD>(Ou`=zԺ(9"0dRm|[ʨ{.[9K-P>lXj:Ǜ'5"j’'%'[yW4%d^L붿Yӧ5eKev*w.EG!2btdi RVF[,XT)U-+6[M.I>[9VuMLh%~<y.R$u(ZBfB0%I܇hu}u80w: dq=z/jKN 8٠ׂ>7!t/`v&FaۏZoEhzR2%ou`.\8 zEfAEgSu.;l#Y&cQJɥڒy*B)G-+͌q/]=;t~|蠁щ"^c{eྦྷxH(>` L"K)F 6^8å{(hLR$W2&*Bi,{t^fdA3o N]*g}EkQ$$5yre 訝X\Gx=~K-KՐWƯXAlxq"63}9zO*nR%^z‹ TZ9XJ1P.)ikwV"Q&!!Cd$!*z"6LIYpipg)l;, ׹M(#fJ%^sʦOXH b~Ka,քj-cW[5N܃$Q)׋ܫ-Y灑/cꑱya!mS7SCp-u")& Q۳8q+n`%{c^O,f7ts*[e`n ~9 ?Fz0T]ߔ!%0 h %J~3g[28>g5'~~sG@d6%nEK#2Lq֎E'C]D͋xZbLoaqOǷ)t\oTѷ쿈*nxزA O ͅ{ON*|R7g.dt %SPp5fDW/ 6R#91>W tnNsyst^se`9_RH|/FK[u+,A޲/׎0 mtV4 V\!?޼*[?<.tw|/:g'e*Ӝ܊ 'ɿ ƌ] ߀;{S7驄@CI/+ L0\p!53O 1k?ɱiJ~pqҨ>ET}2'4,^ZӎewZG2Y2*$'m-J_ʌA`fUGy2V?7tS}p^- 3~coBS))vWTf:y r^J_~YU/)L ax|k a>ЛA =L.(BVL4M7/$y #@ÍwCAjViÓ燷W*,׏O6jR|CGo 4ưEZUdQd@EP} ; 篈HxJ8F5{AkHc>+/aN؈dYG=FOpp~|RɚJֿ2+~p. -AEQq|,MEoBKD  MgܴO|d_2:㬪I@h'Go\ vgY"uHx5t#NP EؤDcxM`/ɴ3xL\0cGh⮺*Ђ$N,Yl<_G~}w Úx^;FM|S~0pHJӞX8˲iF[?У͐h3fY&dHѼ>*d %yxB*fh{K6>gM/j\MxB7;=Xi}?STQLJ/1 h@V2W2An5":j[ ̍ɟm Ck )II7+M )ۆRԦcXKx7H3)B'2bFIBۨ<]b4ƽknnzwx DS(i~Ṅ"_l|ArwТ:-U!ǯ >C "'K~77ؓ-72ĺIR;~~\&kZE$7FYf]E3U03g uV!':7з@,]4`[vHlu}\Ko7POS<%.[̮s gc+9tLcq#%r*XV3U͉,EVeMJEp]kzN#ֲ& 3]㮵ڭZ=uY( _ u Ih%:&i0t`ghyըD(t?, 8@c+3Rz0E̐f\=Mvv8k5EuBUHNεR@ULo&l碝(EYqe:|R{畖1D{;\g7@' $X2:6闯{l2i0T)nxjGSO+oP\b&'${'wXԚ9qy8']+}p5>,61Gu?ͫf23y`W^|b nY׹kΛWg9cA 5u1 ƤsЯą/KZ`"i^QZB%z7)5G?*i`n׷#V :NGZ;=AWD x׶k(ϥ3Xdәֽ^GA>Y4"8,ĕm6>!qdiWAR! QWwJgmQj>(߻ `'lxK+|XGŵγ%I6ʽ7p=l+DUl{N.oXSuZHzp0S 7*j")䛤o^4?eỲv}o<皇j$\yC^+&ҥbkhk֣ L*2JJH8 3k#@箟 uݰ>΃6k"Ta؁M!*IGF(`,bpdxK+5zBezXc_dkīzթ\RAKFFw3vnyI],UW[)EXXYđ QI~kӨ٦?E_gE¸߰d_!ktY(\?.27Wrͦs;: VX6g**^[x/$oj/ s!4Rs1]ݼw_àG\|t'8%^b(̖]xޔ Jr;Q鰸3` S*]W7np׆YmMO |rWL3Ռirˊ[[Fv3t[օӼDc i,w4a$&dF42& }4o73޾oS2 9mG'Fހ${H=榟qE|~x*,5 t@]U}\T_cɽK@EEIĢ/bV;cJE+7}MZտoP,Dyz*|ȣ%J}!X#{FJaAnRܿ Y'HGlaQ@jWzT[.詡L 3f'a iU%")LX‘FZ :J̮mV!҈UHoHEhOZ-G|DcpjZ4Oehˑw($v^~(Tc}{Jмag-C[BP}=2(4==ڷj ~liXcl#pu 8D =Y/(ix;3Xf8L /d%?`MReQ=A۵ywLf$%eV`t dP$>ёH5LQ.QJꒊb _%Xiy, fy+=-X"^>ͺ֫<;v 'd?5ZP dO0&jq'K䋠6LSRhCgg& T0ƙK*JS(+\_`e>׷ʪk3;a ( v_*Z {Y0KYR=8pt9!=$ƀ{fpGf0ƸLtAnU WRjp~i(@!^sڴvx'UH-@Et0T 6il4/QrHt]@]ϲ!9sCOIHf<="Z3&<%:YS]ߺF6WAlkq#$L;l3Zvi.vL_i1>̂(+,$pCj =g$.wUё=:ZI/]:^#(@O fd"~6 F0@a>NGgpa0J$y$r7PT^Ҷ":gg14 Jh{>Ɔ¿PrΒZyJ:Ug/"Ԥgfjgەad4[ /!C ʨ KgmNle}ndvq{W?lI雼)'JHWw A$-óƮ,G`V`>eӕ(1bF!ϲ'Xܦs7PP&QL޻w\D7*=ZcE="bm61,L[o;p(PnIz2'{/I 46?Im={E#-ӧԻ&Pn|p>X[Lls0ŎBZW «*rR=x`}ok[[moKiW\I$J|hp—CGj7@.-F9ALHɴlEF69mj670{ݶG#*̺d[kA[.rq^TlƳMSZ#1l<|Sp^GβYD{v3Y=7ԏ\ {5+JV}WV_թ`#J}WV_91vaԦQ4syQd y5lp4$\]M6E ϧ8>;- g-\yxb9%L{e50_VrI`Y1Ƶ)[jnS2HD`xuV{Qˁ̚ ڪnO2 @\(WDk.0bڢ&pdȞpe$"dRL$!MYԵu6)e#+{A+O Id*:n ѣAYATHޛ] dr._0W++t)L̫9l][-П]Pz#l^Bu}IeP Պ'<qdy@ ?e$ -B& (jcoLy[3N|4ro%aOʓ"і7)_MrQ) vwiJjY8Y+=Q㶦d>M53gyIG }=mh"RYfc`0; W9$%#IHD\:79IuC)$Icd])ݓI1I@f"QOfFp{Cg@Hբh `ԦhI ̓dWR s,KGæ0G 1̤l,vX2#˗ Ogn[Hpd%ͥy4of*{#}#u?,Ǝ(k[tԾr`kyr@3Eu{>TS\+cʞ>˪9V,|]2[Ōh <0U( H9ǗAc;c*`TPCBpJ$ $R.1N+'[zMxc<G\=NHsl" Է"sJ޹EXDz['hN0_Q:CYWeAYg~ 왬olkX}U3oi10Y8jq?"QoR*{JB*ԭ 4F{0D#nVxP3StOYF]GtHtfڈZKіѠ`Qdқ\s;$#įlƆirFamQ/߫-'[Cw;V Sm]grEjyeo) kIjY_޽\l(.B3چx: r?p:F%%& B`{ŗv+T|| 靚3Xrqh-C MШ. .J$YXF!NΪ0OeXHRaFRH~yhv&AaKW=MAN km7*-ۛWE R.ou <%^SU?M3S6lc5Ν_hٺ=" $NlL;ߔ:۴-w) @tUA 4*;4D+}hf(ն|DKF ,Qf r|;~ϣ(tBR08 :80C8wt/o+9dJ{, 0fzj^nkwl VH :2*O|`*cm Okgz/#3kM1" ֍n~MozruǪ#eHbG1AeKRBB2-1- 1\F<,n8q*>>~DZSb|j>2ɣ#x2 ܂~>Zd%y8%c'sӝ;M>muy@,SNe ;[ǻZ˿l˛02a ԍrԭzinY$V\;v%"_$J,jӖj[- .HTh4#po]>u S9"<鞽\+GX_ͮ9J.Jshre#̜ڨ?wMj~ BvTFA 4:j, il~Јliرގ',DraxL\=]WhYC5%w ] O|cH`]41!O jHMr՞D˟%%ثNFF׹q-泜urck:Pl1 giL9WpoyZb Ŏ"} fP6z)cw@Ķ{9CHamL֪rG'?H O_ڶ0,H,쪍H xW J.NEOw3lE"(|H8{Z?>=<>?/2S<_?&XRg8qL:dx 鄍PmnYf*2qP| X,M5IłɅ^u4 BtE8PXrqZ{ޕ((ӻ=@؁1emfDr'*GqfA$;P6`vY2'8=}/\x8=!-tJ65}dj<5qѫXh(uy 1juClo KJa}~+g,-fm>bAK,Pet#^An!,祉# @[=o9h@(+O"7TmX޽J_ytVb`nK[d%!e:+=|xgma_`V歛nyyEM@"Z{&z%w94 Gj)GϜn4w}¬É8zxyHx@y^/y.㟣Ԡ ϊH618(f--/akXY"aQv8cۥtx]dԥnXo0\[n$x&I[}~>=2 $cG%̳#e^ÔՖDґ[b(Nq'BLPVºj1Mt_٧MwNd ~faCEۭLd'c& ƶeiq$6lN\jkC4DݗWyT%"4X yK=qr4gS]) X&fDdYz-UCaێ@S)xoX(7r"Xf멐TmsL!\>V4@u(d)eIgusJ QOÜDc}F }Ftͭe t "XPINYщ]yJ^KDi3 pl;T=g^%dCh4le|JR_|Yf]"I` jJ\֪7ͭVsYQU"}j'SKvm=TDZ^bz_eE`R;w`nn6Kȱib11铐73d6HH}n[*{ބc1 KK 7+:re} `zbtE>Իc4?3ͅ=H-rGLapM^b, dlkFn4*3.Jr˼iXX=K(.IIɤšȀy=Ѥ\UVY. ׅRX4/ GBRn̒W>OJ=J#- %(?ʒ1[t ݹwdd{ƽYq9"'SIP/ޙ:c-M{ɒ_/~?s'貚%Q`XuMg^?-8CY ~A'`^ !?9_$RG !B៷#tҎC̢s#]N&pWnoTBz'F=\<|#.v/"(|=ي׀r~ e\Cay^>q[ɕcߺqkHʁv:R#Pygߞ?3o=jrAon"2NPُUlbTX3\ŒҢsxOigdЏAAfAPBz10x07a *V휲?On-7v[ĀՌHֻހ"H&؜Gb5t>q!%Dt!^B2IEAX6ퟣT.{5E^2 pzArnE$"c;[>u~(vlڅ7k4_詉b!/oTS@c(`PJ3ǯD?8dAYº#MKItWںkb>B^bfew9{ o5pMO]WݒED*7p+qUI1wQCw-[( R2-Xظ,e''͟gm>kl0ɠkت71nVWއ)#/@O@;D\gSY% I A*%Ħ[הY7?Oiz>޻˄[8+G /Z$_R|mE#&2q:HG:^n_>n;,qfv0Ȣ ѱ .8aB{\ Dːm7M9vi$h~I; YI-Wc8 8@ƔpHgJ-ÍGhidM#b_RmFtRıpfwVnu \pш$BRvSoFgmcَ]E8Q\>çnNVQ@ zKߎ=%ښxMztݖ-2[Slif~,'}4NPK Vq|;9ZV-2jʷsGQ8x #:!S[QX˜#+QS8Gz:Gy_fn;N-tRTu翙;!k]Φ&$lR$<wډ<1 wZ1V  Op4<~h%&ҺIznɍ {8( +>U1jw+{UAL~hz-h9@c%CrggK&!F6cLF%dRR\i|S'3XJ>eZb:ؠW>iXC9ΝfXV߾̄I\gvǘKp7+̂s,2y>rKttqS/'TKr΀EB8GlfL6eN鎓ݕLOUV,q\űH`qV)P?vT@1Nv/ďy5%&iq4D.ʐLPG(D&a:ɖ*8:ֆM}:ս4jBY"PdzT$, "^aG'>qϡzCqF#.. .^B`83pLm? }Xsӵ:GA$g]9 bMCP06MErAtDA6bbIkvb魯B\Ym(~~Dz:/F+.r!?(n:%{n/赞<8^ՕZSIQP, "c j+,+r½W  %0P ,!D #pQ0z},g̸ ,#ɼqE:9=!OJӛ~;^p `mAӺ:aO~#&G՟iH8^PUc[}e;1ɸ{qnl?oжAsahŁ!h,Iuɧ$]$ٔV m̨q$0#HwG>% jkG#﷑4קƏ!Lj0S\f: Z)4 83c{Q9&F/G217}Ox>[ no7hÝC .=h] .nK=wN"<P1wCb%KQPc35ZLKhj9M7B=q<~uGrwi:{w7 p`dwX~.˥s2[RrX9zsl.%!}=\D-GF?IWbl F`H&TB+Kz44傒PTcZmS 2]1Q&rcF#:!֒aWjM%#i$hs9j]O:$VÕ^¿Bg;qREc{ސdhG@SsJ*Hnj? nlnjXq-&R?l Jj-D0i.U=AfF@tcbx1:FcLL6:f+!;%SZN*\Ddyuv]N eLtXcIj #Đk/hꑑMW$Iari({ B)Y(dq#mBN$yAnM:q2A=` )P(?!$G̳61$ĝSYK#}(Qu#zX-a]w_z_{tJvta"j;hb)錸 Wg5jstpnuC3 o-Gב-=F,>V=24?ŷXٴߙn (ߊ c,H.8BED+_|_4(py IP9 b CւpT:|N+:9;bkwoۅ{4Hè"j!2BIRQ̐j#ЍN}9ڷp7^:?{MכVsvcoNzl՗Y>9>-"R'm6ϙ 9)PRvc'۹pRvE, A_<I ݶB?+& S_bq KFo%vSHZ;h<0TP8.x M%WG1yȉ8ߍi/.k]sX (9Yr-&Kф-&~H8=F8z;3&ҶBq­cI9CaelI`=dM%KX$clac6MM`BZﱂL33T8YL f.Q]nS >7jusk$5r8$k 2Z>eꓢYLHyxvS6dT |QPljMMngzp̵GJwFvtpkMia+GJKeL}'Hz4 ,gKwr A8NL!E{49^]{9|*{R9lT/peV2qsɊ&Zd+='KKm%('$7 glm܉d@>_:[ e$be73DjpULÅz5sHeJ;Rk g kR 3 堠STRٳxO.P(,Jmп.Q|EԟBͻ0PJ,#]̅,[NH Q¬%ý[IAcNI &݀t[+cGtLO/#bUzC{KeRjh,Vz pm*. 9jl1CWL]֣kK5PޠބwW}"BOF#%N<{hk;]Ӕ~,/Ez6ͪ.XWRuJA[-A֧Zf`2xh38,tM VDsT_ޙو$ЂC͇nB%rJ|Kd? }6=gIL7QÏ2P8eD30gԦ2ķSqf'B bJT= Όg1[ _߈?_aVߩ5 F*2.C|jV$,@>/T&QfQbLDwW2,9h*|EBX]tF+K>!I'ޗUWVBq|j]u?QhmzO\j}aC؍M?'B,C L8p(A!O$|K$(zcLJ 's-@j.',,yGbO@v#0-)Ba)*j NLS4ȥ΃墨=̃Z49x-5mq0Ίe4k; *! oo[qo7 !~oM d-'ڊM b ŭu &_66I9 ;O_6HȁesS_!8D4 `ZxjQguqpSQ~B^0įvwՅ#Y3thNіQ,󉫏R9oLyϙϩ8>[e:U1$13[Wmi9r1+-*;w"܅PZ7xj]7KJ &KhQECbˆkV\9~i܈DUN18tuL, (~&ZfsVʂW6ы V0b~f\h T.geVAIR3=|U1NG3c^ЯFѼ3? 8a > ~y4D5Q$QSJw tL?a':oȳmJs:gcjy僠=0ksq_qc$)_jI1SZi=j&b7n5mEHrVж7SHpLfj;D8:R"at0JpE%4Őc [3Ä\&e'pjD0^h!wSeUBya ?E\c!*݁]~IsT2k (!1E;=kO,BO,‰^ a9A'ID¸kEBiଇ좬\Yd4FB@llqsWuZti'igB2h4!G9eU\Xֱr\>@3|3ӇY}yu4hQUE2rt%RC;ԯr>*ߢy5&0 Bc7;˟: 骭hU;0yLϹzñ$s/EWݽ*l$~(RxT)\ausE6VvZqăD$E)G/UgKl6t-! G}Wtz.͋Ɩ!ST-QbM~%,,<=MKs0}=gsVlJKrؚP6\Eܤ`V)ѰVyVnEezU. 2 tP?YK6 -yv,kME_dI*0bj(i/u*#ߛ_G󄆉qGyK?ܪX'aV@IJ'pry/dPD/xL 1K HҊ|ˊB)*"U`geS/ SYyd`? "pJ+#[VJfQt{dc^}eTQHh)vTG4B2`jz`nLG5&Ӈqx@05&jc9 t5y?8 qV}iT,G #W{/RRumt-+ گܑX2@jzVûļ,a3q<򪐻옔Po,q8UݱSeYV-]xO p&Fwv&jN QD3K•_G@,H@Fy G!AdX7\`aQ8vD⭇pjF5m +#>yŭm.OZA&bۏd^#; khYnhxDz(ݥR,%R<'dP TBHNC>nգ|3^l8@_!O#R2`zaUjڪ4u|zyhJ w=b vD-:w$~|`s?K!N@ˡt>Ş&)+-ʵThc$< bǡɾhSlϏ'ڔG;[(ؠOQҾ\4^ߕ|ž~B `U{{Gz{Yc݉vc ^hOpJ -g28kNSEw>Cd=2Ƨ MBf)]G i w2zP,0$\r?ͰɿGkF[Q:-dRy~/ 6FtcďDڭzaGͧ-a{ d49c[r遼) - z{#L">!$U,E 32}GL 2a,^ɽ̰/Wۻez9(h=OHc'%~K\ԕ.iz&bI%6CAcSB!j2[N?=! X, N`d)@@Gz{i~BTWB寯O4MKVToT gyPI S^>,K^3 g`JG2/l6/n9ȁi'#{ǘS * [8PHa0;amq?KfdXփ2P. L##ˆz,w&1z ho~wUK0&eiWO; W%󀆑6<3y4ZNoəlnn]xgS#rlc 7Q'iPSve켸5QSO^1A[F e $vtZdLKx 36wbbax6Q٬?C)hIOB V-PZGHXn-՝a ig0߳ S7sS4<춅Cgd{-j`˼Zz)wdwe%VP2R}Ms &IK!v0c))^.|1y@[A_e{V4̘Ld[Чӯ+|h)PCu,20I.#~֧п՟UZ,umȝK)mn$Zu~~_ 2VS p_FNp,7 An%:5pi9﫨ӴÖ+\?Iඬbkhs=㷏on"kTrH"3<a?/@zFjyS3qMIX"?n;n+uXpgK0xr@|j A0t?8 \BˮAC|H2L%CpN>yP r/zTsƶ4 .w~œ)?va+bl(Hi&sڶ #ԍ6Cf3@ix_m΂AF^ABi"RM=[r^ \y2CZHvDEH]/JzbD=ح~„vk/@ L'{XPP6ȹОs)-6w?sy9Dc*s#rveÀ+1RǠH,d)a>簑I3Z.9DK{rC|Lx91 .cͱͦJ44h&kvm Bw[J@9rnF.t+P>$!cHn&)de [܄R3ɜTn)jxA xB;y-|{麹C%Ͷ ͈ٶ٬PňRbv(J0 :Hyd}IC`#$YNM}&ί2@dewvڟ#XimkI$1jwxQyV-^TjG0//wE잰;ˆ.XUx` ڙI鈘I+9B宰scO̽sa˩lNba1J-e%t;Q?{z3JAd⍅U*Wj}c;ؒc7%ߒMv+,ɼ:M@GǙ]Aʵy>ςUd`B/S~ɖxx]B<&E"}JL"\a3>6W!*RLV%@1x E'"1$8art%Wn+Bst_bS(Wi0RO@?=h\>$x킥(&`>8t3Shq޻R6`#J3q&&5SLxP-*@+]Y"mJEdN-8Ga4uoSdgP~%셻"!?y&f}܁Z88chj?PW2̫Md5-YŶHk\"3g z;2'NYuPs0F5k0/||s.嗌ޞv >gy JB? 3->D.)`qÙ׉c,ty=ZDcI`eV<ÙkBѤ @햇G"Hѭd]H4Vڎ|8 y9B} -U{%7&]W23=&"Qa>!XqiyP p(ę0DGVA;3P.YьI4Иt))e\+rge ^VB0Jxͦa0ebDgE 21Kcˆr*"PsmBM9F+w5@EtY"uw 7 TcC~h|BpBPx Da(U P5UO~o)O_vfCݜ'񱎰LO_dgZuXaذd\ _Z})TF-"nq\mԻiz*\C-P):G +?/ҥVUvYfolDXд{kJ.)l(gj)E-,#'ō`g|Hb_tӈ)Z5IAA(&#z%s"C'˻cf,M *8yMP@(}ۗ:xDH4Z0r?.>iePBD'˾aN.SmHlon[m@0{ASONOtt/ E:d?ϏNf+vvꭽz݈.1M'-3ʇ78pJ_Aq9ʈCY5 SY(s7])01Ɛ^Ԛ`?1cd' I %8Eqr$0e]]-ipm<米Q*NQK)!C2JEJW6엩J2sO[7# kd 2`xa* \ashAǽ }hFv V?g!`ӛ9ť[Ո%*[(S@KNgs$M_ٌtJݬ6T[3snqϵ~©q'iņo n}X^_/tW202nl 3lH>}ڨn3^y4hFd~ܗޣI040oSb~U^̘/=V_L >׵Om26Mo1UM84b&YhLG;΍{!1Lb|_Ȏe5(1bz3WDFq Q۬Z^*v-#4?jlf}6w?'b1`}WrÅq7#\3*eAJcݛzM p ÒD 쥊-/:vÕ:-YZFJ\? I<_ )xІ2 q@0YSil 4 Mps+"b j2||V1PXM²%|wMfRDR cɾ>,ҍhXV&߉VL=HR'JE/n(i'G4f@CglzSdT%O g|3Ό(_3zһ ]gQWh JtYpeZSZFQ6 }͜ uD%'SQp#"܀hem+Ӏo bKT}molb 6)7{B^=ayWF*qȃVG"_E⽊'*(PXa1a>LdWhBB祢lttZǢb <ƙST]}G\G*Y%FlArd?VgEudjzp^|-͠~>E6iĩbG\XxcZW.C[[7LőR [Xa8c`09cmWR ix4d9=^aptn_Z_/4G%OImU(}48[CV᮶l_o&T8G~Oߗ6}@Jk[HFP+up8~#a%R&Nu%J~}fhL'2Hr"$BɔA̱O^yVSӏBn:oh ԱR'km}5Q4x0 .l{/4BUyFtgvvkˆ3\0Qcmkg1f ҤŸ4+Vvm @Z|jlb̆& Y`rnj!ꪔE+V&6'\6K qV9a]n|O/˗zy _ᕪ/\<ƣHOi}67;8@/SW;WIwt/t/*p#+΃4lG]t4;,jV^1A*LIx#w&^ IDlkjJlVQ8\20IpD:UzfswXA?%:ݗs }&Uuf2>,4i=ǣfdi[@pc^{h0;sǥA|t~޿s~Ua@aϢ)Y6?_3ud>Vž@")U[N^yi7F妽}4K$f~QhF(*_ul,uYytS'銑HrMάliܢ[^,͗\;o c6e5'0I"lXѕkȢ-[p/=X VH\qb0B bq )/(oA~:{dC'p93FI ($?YaG?_埕xh1ͽIB^m.êʨpNEaewL%@װqPݗ_VBR(;WY V5>'UžBX'紿G}ٙo?]z''ͪkE ߩjw7P6[_3RDu WF&`ToARi[9ya6j5Q04UW6?܌cD)W4Q!j7w߸;A?(a(E ;=1u6qZ5&~_^dQQ>'mxc2{{.a3_|qQ0%V ֈwșln$fnkn ip6UoaŸEmOtݞ ]?o裿 Z3ux ıq%8ĕ `< {x371Ps|&]ǣP/l wS [^YٹjNU>{<Ҵhn><݄WzwnX~Ms@tqUd tS~{6d P6i+O͝M94lӽ^͒lLqƻ]1o3o ,?eX=咽4]|cykZO+ OQȮ )l U%ʼvo.`GLE lm4ny0 xڒc>(ŭƳgJlxqӒVfMS~$B; v֐dVZq5)kmE"vFV.uܽ7yy VGWu;ɥvqr=ΣShD$i]+̺bD g[k6mve x-#I:Rtz;ʨ2bo cRcfB Qd6ASӕ8bJH~7+M{6W׌ nT*jч)zil6^5J!Zݮg>_5u}3Rz>.gqПa7Tn=y_=]0@M^m 6d;ۃ pNYk.mֶ]Zi^{t+z[BicgV3{ܠ٬mo*PZ45tO|w6}Vf|@wt~P 'ܬ]H,@lom=gpQmnֶrS!xؤlçw_|fVD_ɯȦ^<[m:ӠYJC4:GWOmos>Gf@6h;jH2_O_ˮ]Bx^=l6 gIklY]r/~x$fs=hf-׼,U.dmUw7 Ckc[|V"mv+d7R@{$Qڸv½…Au]Lvү"{_d,qՋB4@kZL6m8 p"_S7p Ca 1L5,:Kөo+_$/; g3Ψjؠ Yߙy땾.=9 @ ՚M䴽U`~Q\/5"&3?Ye0<7hEi#XU 2&wO? a SmJo|q|v+WPW<g꾯ba-at2X4C0А ؅؁R"e~/:CVb_߸YDfq<: iZcL2B9#<=-((m̧xS2E{rOq:*᳈)+!l/,o5 4\*&IDCd ;Ⱥ[䟩 o%E`ߛPUmj~ Qￛ1L : ,&PZpe?!IyI;>p :i~F)v"_t< hd5{A$KKlqYtA2zOxUzyjG1&NId. `p]JA{uG0 t)-kt} $SN*: ]۞V(n1's#V(Y#"'5<)B6zHi_c#R}44 Z4btƟ(%Li'6y7 #;gb rQL Q{@%.;XN $0r(wzrgOvwat0i/ᠹcҎ.(~I/ZwoDr()(.܎]] "%(@YY ٍ꞊thVӾ*NLODpA}ޢW5zף6ZwPG4< {`rSG?Si6`/aUqNfJ?\ï:Lj Kz>6`Wn+G\Ǔ k{37KU^:F3\|Om].{FV+V#'?p>'M'ztdOWA O⪩]?hē6"FRvx%6iKDh4pbg*V:}9zSr`f: :L`Z.w'aiWb $:lDL(g;b>妩zF*T<Mwu^)+)%n`j:ypls۴p4QC/PBEGmְNNt  q,u m4X:i;JL^%-iUlTיs9:'HVN՞$VB62<2>ߖ9>ql4VYN Hf++R|ؤ O̜lItdV{:M|`obPqx)Lu[۪LuNJwPs}& %_/Q$ @ 9o`^;Y{+XtÇ#π+[&JHS2i~ |G2y&YzF~U2Wd~2 !Ke7q5r=5]of uLk K#N\q/z-p~Ca͢x(c(N,ɛ\=qXSBj-0i Ci~X&Erb`a=߼Sp)#΅Y|WZ>~P+ %pj[Yo->.f1XYX2V9re3^CqMy{~ 9d"sAu,vp}Q̓/!f?ܞJ9k\ tpDWfxI~3F/mGoQd]I.; JS$u1ZoF`ZGaX)G {G &b92+IGPKFK|{g7zu;}O>Cy\K@zlR>dU 'If]sw7ZQg׏~%&S0?Vp>ԯ(Zb~ys^-Q"@"߽TJ ȑQȡBŰ>KZ\^ P[ClzZ}m䱏4(ea u-^@ dm~8e݇B5BN?9U,#Рd0ɣv(G}FPr}k(Dl4%RM@zt!' o䜧Zy`eFG/p^_[=?q PN̨3wTDW5fa}o[;wYy1l\w{(]sSyy(LL\iJsPoiצv X$yc'ȣ9Yޒ J{wؿ;hHlv_D ,iЍmd{Df7@W>BAݵ&^]yeF?U'0DѢ5k@)F,l>= c.n"ǿJnm'RRgY325|y ٪(n-1.vqߖ?4.Fgvap^F,ado DIl1LdaU},)(9;l; Z¤^d۵G"SЍuIwf˸#zQ?G18hVVoAM".2i&i]oI|xe*z>O,Dʡ7֔`MmGX )mwcUxw<IE09r1`t+(-?"DS7ZoP}C>T6ˠ[56n6/@Xbp^"iwuEṮ˿ /zi+6䇥Z#M-ڭW:6"бe'̰$m*ؓPR]z(Qu46"SS`ji I Ċ)yMmǠ>bѲ䫍6j~P(ύϢ͸eL[N<÷|N@@FWfIW`ɓ~7Ֆ#3̸Kr7!7K^Ey4NJ΀Дge%Y)|dP"D ~sI^,E(w2骋$:h"@&ڱzʡ[~bPdŪeVq?@ ˘kϣKZiAm"fdb\'$1t+p_;2% FB[霆?$G`鮤Sh!Z `8`Zҗ;zz@5>wT9!p_.:5@hrɏ:$6hG󦸗mYXUE|]+8cHF'M@@J`:c0X8FDEվ1aMl~/(2@ g8h?{'Af04BA%I.dLDaz!նp/κRhZ1 yٯ 1FO如`co8-"s!N]ۀ a\A)G / -ӱ!~ތO\{?OfqFPn;4<~ M@b垎o 8qq={HG yN ј2|L}^y T18hrwhd5>M†/xo/qQ"~ط02ѽ}XqtѺr5u_R' cM֎R?x?ܬınnYl䋖fc$xXvh3wY;~QS O K~f5TJJ6 u :u'[~"}f0+Ⱀl 7mP2E*~Jæ `d} h'0+tj -@u;@`;y .4Y?z.ՏQ<$`8 +i};?ߔR-gn7NjIo%d;b\2qeq(@]M[!9w0h)?ژs pV׈Kov z~ W,Cv ZP}q=GTXzvvlNֿޥzN>XYo 0^ٺ7\'Xj4\npDQOŬg0?@٠|k:;Qo>NeQ(wJ @UЪ|gE8Ap=i_po}8RΑ.SH(g)stCB̈/udY |H0ySw:Ռ jt ~fv0U[wc[xmR@u`XkSI[ĪC(B؛T65>m 6$,D(()A=_{탙MINM)♉G;,z{|CK hx9Ep(2g &`}sb"/t}+P=*qL;+.)fHΧh1Nn sx!K,N^̧xX$ŵ`;Y1s 5b0(4 ³}ٌaO9B͡dzugJ#%O=ɧ舏n03MOh OwNhx(^qDbyP#F*;0 <@sSשYόsA΂;T6OGiCGE0(#?<@9!e = h5TMxh:TaF׫SGt?PUY0q֯d)G Nd2=p9^ˠQ=~-!.ߙM e%he5hĝ,Yf;@!b]\'ȴK7R 4/Ly0\bʥF={"*\W(}EJr%h) {eTi/)@b/xl&@#x# B?(!bJG/- ȃko1>.PAc# 8OsRoo[Բ¤r9Wg|TeSz/U,xPPH!_.vx>maC=Z^@? 툪X䦒{W_s+D!*p='C]΀Ih]ݑ_CR%(2AL ebK񂕒+%t"*qv66hiړDvRk],{D`{ O9I6ey <`A1dzXQfiJ)q[6[` UwH[)rŊi<*2gl.t\ YOoNz3Dߑ-/~ r܎TH}nYZ'8J,u?eeQ[I<eZɿGV/flP XŜ  #`n_&|J#^)HcI2&JM`ur=IT\uII5˟ fŀ%XH㏕#ُvU \J %Xw҇c-'5x+"e%뙴.&j`tw/|HS^*J}bNK}rm@TҤ)MJ9Q:Qsb4OXnA jڃ b!Ɉ\sV~i}4s'Y!0  0dGF*"#Pp_ ӡdO)տ& lT)1' *ʊ(ii 9 byrO<-&):a,եtDgPPEm̈CQgzd >!t JiT"QL Un}t2t YCBD8U1 P1+ ^:.:CVH& On4VYJ[ΧDT|QXWzQTUH Z;i7WO2a.u&'NzRJ;Rzg-Q)=/ <B^CRdEӹ;pst+rtM+aH];)RNA җvy9=ӓrN3;=+wn9}dJ,F]95?Q"\S;-ET%95nWNߥS''XZzHq$ߗҗN;y)=qғRI3'=+wn)}䤏3;yVJufgV3;̜ٙfgά4;3gvfٙ93+̙Yivf̬ٙ3P-) HesDǣ;`άDIg$W̮f5K{E/ݣnVϧސx6Q>@ISĊѹ& Ve9;GiL[txȧY}=o-wz.5560hWx4dA ~ٞ~0KqRG8hΑ^Y}HTY/K@ǃ6GupѮvْƚҶulF]P`411,ҸW:8`cvl+=$J\)zҎL)c1KD]oFG:l$O{l#(57ƚXiX &IհCc:IGz[uy9$TgF0:?NJEN fЦJoy WReElS*CZJpMZ3ʬtPy|zrn` O}ԩf쯵>/=Aa 6"e8 ~+=N1 B/r4~R? 6~ H<υ?w]99ਿ@E5<@E?bŤUC%s=Hs|O S jlsq}Eƭ~;To=O:+sYB}jRnoTru͉M<SgMްrѣ.&v=:jF?i*~.>Nr˖=ߜǓtQ/M?ktx:xrX=1=(~wi=5F"/6.vt{S&}χqk͛Di̞h#FW}"_Ht4%Ug4?"p}'1V"0?tgg 0^brа1] W,ݸ eҥ1hSi<ޟbܾN?R]H#VzZLVr57v0pthXc/:br#$'}\?1[4 mg%Yٟ3~'ˬLN#oOW'3|njkYtU;ru+H fx)dI>T_2>R{?[Oi×ٍG.ķ]A0˦D:::~τe pQOIyF֜CPS~볣H \i D}Z9LF"Tjo0"I?afu;<2=,Z,F9"G4Un>jk{z[qK)7YcɶA,խd)ԑ+جDdiuQn EZkk [j!s! "=:^v+~~Lc &x6ݭ؊/N2 ]wEuNAU%:E^:f$lEtww̗O4LΞ  @>>W/n`K:9@:%NU߁ miVpBkZ,Ej+\7 e> 5^b{.]L͏HOеV=dfC;|mA]U}3bg@a* :Z)$[޶vwjsx[*MJLe;퇟8컛 CUxvE1kI ,P<,uI |~ȑ!}BK  7] |#VK-&azO#TlQ C(\:TYW}x"?jGő~n#wXaFy;7yӨ 4oH@)Zl(JhB-i>%45բUX7ioU|' WH76w32{UF0]M`+!cݤP$]=J(VjW揔H+z.!Ze5aFa%CĦ'l8B7H :1vB:(Ƅpk.ƨӻ7XA`da߾ג{FC-0tH<.fBuJ$&fOIMYCJ%e;U֬Bir:&[PFzHHCBV؂E jV  oBJnt5êj87Z$:_*gd_!$ieO^exKp@&7{񆜑WA ,#3V}c/ @BaوbH.k]t_P٨gPP2@OMᾚI?`g:8N'άVƥj}9/4l^hi?M:$B 2h[Ŵ~:وÃ`'>!tmɭ%=@i/oR22b-1O @-/YqLAZO2% c  v1e9`yӜ#zNVzӅ>=F}@ZZ ɹc77ȳz(3e&d2/hH?.`L :lr_-:Rʃv:1 dz{vk&?U0rV2| X($9{JulR1-av2Sk wꞞ*N=cCŞǺ&#VcHkx5XmX[G`=< tAqr[0&e3VVNZ=3|eMBEa܄8Per:Zwb˰+O5#xðjf՚/lÈG/yywAuZqn+ҘZ%_[|k*^W/w5P',Z'XI5W5k@%r}_Q4{.ҝ1 ]_܈<Ɣ=䗘Ml,-BK:$ҾWFH2r \͆(5Dѯz]/;|>}bxTJ :y}~+WZϲ7M\'Jo0;J Ca1!6&{]}&$J ]+e?fcF[z Oϧ]?3su4ܳ!0fp5#+cq*4r. T zَiS긫([بMQTvqQ{.kazм 6υsĕ7Z-%ϱӥ 䘹27uXKKrwu6]#?xA_\x{qxknZݸ(Ux^w#MҟQ!|W!Knd? u my Z$TJm}V12u-]9LR3V']sAIj^ԍʍ\S=a.2T9Ǟ5t lk/t{i]:q^Lj:y>J{_2rυbK[PzfbiX4"ۍAnXerp˄Hj棗H@r|O^!] o] >q?(5yܰ.}7C[*%;K6wabc#b<@hE!9`; ,+Em >~"P8@S2/A FxEIWZz#Iky,loٕhpꑫZt몹햖SjꖟfE8I7F)~|0p GosuHd)}^%u;%vl%",L3TL^IӰY$  J(N Ȃ8;jI.ͣyJG)Y|T7;gCEN^DtNǨ3Z PβQQDet~Iz=Iޫj=nROuqCĺYX[*&H!xE HC!13%ެKZ^$X6}!b@Hw)&in@Vl﬷K͕*xlSv-^Ecp+"30~g|޲JdTKY5y?uݮ|o/PǾEՃe*6Hxy3 p]hF%my-Գ#Z`f<n`Q`~tOaJ_!E 4 K/cJ0f:YP<&I;RH9&᭕N]m79ewg|Nq[=_}-ՠOaD3ZF>'O@N +֗y@ 8]z+?q""}K}`,lT{>)QtA6Ѿ ;dWywɹd<^u޿9&N:sHC[sy^Z0^RU vTIoq6v:UE #-_.-K(7x2oM#<,(LU/Ma)xpCeډpלt?pۓBNrgDV+M$eG\0o]Y ^??/r+;4jr=oCuuk2B@K4⧢awA+ ^G[sӹu cJZSx#WS,z"[FwqTojBGQU# XD=Ȉz; Lzwȵ zQr "1 ]q &p5 P#R"«9%>WQ<9Gf4 5c}8=r/^jx`oWޜBLӓsE`ǧg/BQF|D )?Yr@'^M F|G{7}ьךB5D5["kJWחPseӑ̬Ȗd$u-r]ѻ&C "vc}̈́YʉX`F ley3wVTI#{~Uzל#1IY&0-3r|}>k94%IaW"kh}ˏq&Z!M" (yb,b/SF4x =îhx C;:_/@ٞQ~1dJUJe4g ?!w5YHn!8(ibLsp,p*4l% VNS=ڜ{fL=AZ(Q/%ځX>XcRU'654K_nw;msڻlfY\&:Cſ -6K\lHO);["9J"Ǎ^vZ"7Vy N. @H4A/Z xͩ` "aj11It#Y T=:ъkӽ/8!7Ye H29!eP8Gh#$2$#` 1^NosKJq7bW!&ₘ2,DF?/$#hcG3P ] yh}=4^{J3m|${P .RTJs TJ+i٦T3uLV/QDxo=`:)1F1dc`#((Ls60 L"Fcڄ}Hƫ:`́׬.bdzҵ"抡1붍 0Q2g-[&WH,هckoqͬN#疵}rwhsQq|(^~bJU13mI~C- |dFK:dp|?F`ϋwKB°-43E*Cq m%Z$0!iJLҹNEK!]'p@Q Q&7vE=EӗJBVsgUPI$C| 8L~hw.![vj%POP*% Il 2R?ųPhɌ뵒.T{:& -*T~+ r:v@$]\MHHr|wu.Ȫz "G R_H>Cй`BRW@3'$$"B٠,ޮD6b 1-m=sJ>2sXD(4xS]PM/!oI |ƻYo̦3_c64!7.̵sMO/.kA Ki[.`[(|KeJ7P~zaXJ{ 3{Z;7(GJkjb =Sv(qhji~v>[v&F2 ?|lZ*i0Z FxdX$}"Ĥ ;bT+i$r4㌹{ Zd y2㓄GVCoS[LimLIkA` 9FE;tcKû$m-Z{aǼ 6|6"]! bBa/Q}|B|w L3Η_E>'wľ ZZѲX'؏P [m߳z^Fw.J~J$'bxf8ZW$ Q1jTk /^b?~x·s } `y00G<'19^_๮hW[I Ikg)a_A覙fh_xv[Oiq#xԳ Gú1=`-R*H't>[X H0+=$1ֈ.x046"t@H+FU䟊'~q-S{D!A9&/oQs  ݖ<'ovwքdqwz,3q+@d/}C>B9 vt.;JHS XöjTXcWZaa m 7:IJ,RhULZ/s2p'dęhTgjXX?'zi6_nHDssI>o"rY{9O M īT8Ih)񕠮 tU ڿE8&C^ NC!8Z@]憺%F?$Sĉ?R?&щfq6x*GÄ4( s yU[i[7yRW6Dl陓,f:g!v "{K]1q47\LOڄzn8'<[ӝbo oHEU1%sal̐j -)< b :,$peNml.R< < $Q{bwG62Մ%p.V$ v.XdF\n8+$zrN`厰w;6x@ړu\D'0% ;K-.'jc/C%yƣ̿Au{Dd/FIDw{ɂjEb@fnI  J LQP&R  ! ޲ȩpe;Sp#fǿԫKsMxz^Ru -ء[p*~|>\!~0N`A.r#=Z$\X8}"qF7J{HeHm9O#z:# 4a`3TV|)Гrj w04 >eiOc%nm`ENZP퇱ujc'^lCM!XC^g}_UlOsTKE)3L҃rF7zXܘ+*Rip9NȎXug3 QA O}Y~9+8(]ݽ/enGIY>)fg3@5e=qضrz#>Od >%:P=@;7(.$D>[fYI5e݂SU)tȀQTi![>%>IRK.hMS{ߐv6O o72+) 4 =6K(-( cVͿnf,*QYɚ)܍b0#.;x%@ 5$cnKd]w;gXCc|Op/vMp,kTdWߍ2Q(l_6]xT2ʩit˜/)F=@[A!8L_PZv @ zeR,pd*̠D H+J5]8 ։l L@ǎNbHTGM> ګ"!ahз4x$Ƈ=J( ;mJ?׺h`؜o7Rf ̜`VwvhH=Ra/dG&_2NI0WFp u,]uqBL`!c)%Ļ6J\l@Ê)D{zn%*s3qPnJ$aHL%*=|S'"DTu{d4 $Qp d>,|-cs)2nhtPs6~zm[jbE;eqSɌP[:T !rI@ It:`O<}J$ğ߄}o6 w6sAclg  @d0 5 6/r))]~TMI3eq3j rт@ka;~~, ؗ- æ8i*}cvA9΋M/a*\3IGn3}1dxAh1mT8挀06 pװ(]&" } {XG˰2O`k $~(jHmN9Pi&NV&q@a"xjEX{ˢAwRL$967ⓔP$!̎)8h *9Np I((͐M%EvZ|bsphH|ldql6l`uA+:hd]n5-X 4.:o7zYu;Ď N3DJ)U-:R:&BMx'Z$T8hj)"rʼnT{EoA2y{/'R"=A-<@/ugt:P[Z,tVN(jm7STŒݵOZ$rt7iU%(Y&\ , Mc?J|]|:c!GiyՆm˘Iǽ9l7 "*:D`ŋ9dy2'jy+v_t y{)iXC17L{,oubc"`)7鐾p*FQ+]arW sCYz8]*ݍLS:u19ޕyJlujZ$XBU.k۬d< lFZYWO(i ,J<0chJRjUnLo,4KEGvX>3z(\`tI+6m2N2' 38z{-/(O;'C.ot HrC3Ϡ3G.xݖ{d:Dx(({肌ڃ>TG*F/9PmB0А|Si] -22f%!>u7R^-42/Z6"5颢9-׎+xcJRET1wThM[ܦ7牢d\K]+vj4jf eB6Pc1-瀥h P^K/%*\p8tU ^Z LkbI\[V͋eE:,'f-ǼnHJĐ @҅X*2zC\]`3ԘX`nٲDvNQ4 :%׊5BKWJKsft+9{bUv%\SP(x@𜾩OD/B(Jp MuYENoa6_SM0v!= &.18E/v~DGol ^iN( oqyjWbtFkE֓i/B`0bU"DeE uEZhr2I현LV"I'B:V ? dhgEbh<* 90, 4+{`!"K;G(1YSpyKl9Os372t uWJ.$Q~BA2щί,<ZIC s޽N~?KTy%z;4:C7$k:ϢȻZ [`nLҷS3|K͟ƓeI?Gtvx/)BP;F'eqyo5}XTR\sP ظ(듓JdX9jrq`h _WC_OaeWc ]*!w}89޹² VͥޞR~'v+F8׺AQԣ>Aq1pE'֔.wKو E}ɾjμ&y, mFZ`5ÞkqNv 1Y! Lrȸ24#LU4y !\^My9,6θΚTjWDF6P<S:NhGQ^5/y v qxnE),v+gC?o_jvLP"#Qh/аĮ*z9Z šuBѳ1T޸lcZt@[=+yT=`m1th쓿O>>)8z׎^Wipd~m7lcg҆ʘ䨓NuPmZu)v&Gwvna^mx_=O1dXz;x{)B#k;:/-_T -7{n6|ᷥiuwŖyaҢ҇xg3JO[ ug \j __]}9V@Ma+j]'ޛe¯btR!HU״KSe;JqDHˆxjж>}k=@s!X^ۂ5^HPڌK*@BFϫ<ˊDQtNcI2#brƻ9V@5V'Es2_ Gj#ё=Gh#VݹݭqWwi;lYQWtOcU-kA<3-}Ž}]7R*Ը^M3k{ۍ̺vag8Jc5"\ Z~V6bRbr0b[+F =g115g'=Eca `7_ P|?>_<&jV{vLuvw[R cJXVO!nf`t*9^,QG|@zaESE &UF0`0opd|Ղ[Js\}Ȉ:U|izfdNKi,$'Upv'6 He3=-`_m^H3PDG`j$^t;k G>bg#7{^0 z\+72u=(E9G@Ccp ]4*s9Z/D #saS)hb8Wq$ec:讓 K!?5<)#%3@Aj4լ ,zwy׋x,PfSo.ZixQ`r[#\>sj œe'cF¯a<|: 3e L$) #ox ȸ@U807sBcՉEOۦ)=vwy\ӌo*@ kjΙoŢݿac9j 1m :f13/m/c ua Ѯ wUi1id(!,a ]nY<º0n6ٵȽ2LCwcT_jȞ) SKy|,u TjӞP[/ƪ6/C ߾rAMNB%uix f9^Gp2_ցjŖsASyP{^S CՅ;89 BW2UqjK86@0'3z^ZPG=Swx[A-vpd[Yx(IgpRAhcw Gm~6AgMP\)4k’߹oY? ^m@\7(m6xuU}ʹhƉ?`oxm6)A^; OMReRKc3%k:IH  s6$ j:"81՝Ҿ#zL)aLj['> kX2Ӂ+8+{M@k,l𦖫E) M`ԸW=o bA+e@n D[Z5&ZYoh;MWasJM]k2oi@_(XL|܁`c蕘t[Z̯A99ͥZ֌VĴ(9!Y1bZ@Xؐ{AҴA F\_Iq+|h[/A I_2xZ{XT+͋sIb8%1́ EBUwv`fA$]'֍1# 3ҋ3㞝!I15O7gʴL]⧼w°߁1xuԇmcrKs!ӥ?G9#eF>arBT+tZhisb}IzzD^C#KϚĢSsG4>CnxoFܾ/sajm?3e;D"Ȕ r5ԇ8hk6+,AcjղSř{:-cJ°`}o#8Ň >h5cu-Eor[ED7'c)Mke :wbvI`"f}\cUJ^~/gX Bv BEV!6<.y WL4rRo~S) .cnŗ]& Qє0,%T-r& "ܢM\Oԟ,&6g \J΋)3\>wd4 *ɡjg px*Ⱦz;$pO~x"p^_Ȕ"]qzmr2)#/! DOΩYO9"'GJexe9h9_JRJMI$KHA^6H63)elT,y$c@ D!WKU6oW 9>8?!\+\lu*:OEJ 3xU`:`P #w7͕ >z=vg?xʮZWkl{hݙX}v[8Ҝ5[tsT\.epOߎ{%%-̟0J=j|+~=ͽ=>fE+2mc$\@.'|R! ~Y)>1u8.iw8pCϮ7?&QjD}#GGc:+'NsaA2 64ɧVJG!G~QS3;iASf~x}{ah'7%N-u݆e͉]tjvE{`(us(c lXGLqss}TȡNL_@fdg<2 epۙR.\k/y ;x,oIV;s~k\jg =!-jU櫏/AkEjшY*5i -n9}m [m<8]+UTWc-!3%%%X3xrٰG0J.)GK;#Sďy*Ts,fH%}/M3Ć󽭒@7Y^aďg@$e1(m:gEEn},?5FOr>d']ܭji1/Mv֩;J=(Y蹷#/e*OX^tOV Zk~ Κ_d3n2u{9_G0"f~&]ܖkdfgOq?p|% t);Ehϻ ZJ]btjtV̟ʙ܂ -;x~vQ @z+7X c0c wB 8UB]z=_Hל?S竌buoz)&J~i$@$nNK~0&!କʋ~ 'IILֻ80 #S㲴^mAT%wFo0ʟjOe(+YWWOh {Lfr&ITnFY1?lĝd?8 rY{6vDʓe:HQm|(/KƏp`=~BǯhLgt0ov!= PZt#=VGkZ& sl`5ʷ 2<S.8L`C:'<00gxjuLn3z p6١.ˁ? ,b=27yĠUPr< !49|~,ws. my2#R_{7Ľw#Ľ%mVaĺ3w\A#)R Q%SV^^3&+u!BseU:PXSW]w~Z/_Uwx] $y9 ԡ!/ՏWa9F{?NJutFA9KUX?-b[u,\Q)YD$&@*,) 3 $7uzwQ+함tt غ^//K=˖_$]<5VɆm;hNagkݷ[MqnGݫ488sP kdF1Z,J5&wc0j-sK/PB,E UA/I$&7~PU]Cv:_愧⮟M_'li晈AA1iI>$VtY{M(m8nm̾8VՄsv|yys~m: Joqƚ%`Lꚭ[?Y[4Sn,guzq7E?|wQ?h*o 5}& =l M׃5.X3ErP E$-#BZj?䤡mh^d=`K˛K34N PW>6[(AP띢\a%5,? n.knnd,\5w NӼOЊ&ATyd(Āwxc* (VOivY_w~}z/ I\Uv{XX$©'܍mbhb>,t{cJ?Sƞ3c K1o qd;\?5R!` UCE`wR ',[RfmoS)+hl˫>3n]gB"E3!*Ch;m{ vk63 :1P:׺~u@ȬhLd߳3SlU#<##33~smolJ Ն{oy b3\2g3٭s&LoEY_*d M6pe{5f{3 Li-Y>^N$)㎼Ln9KG\;^mjI"S{RT_{$ZԜMx/"]|z&rUyo9>}h'uD|ޑ#'wgSx'ycCctߛ8nj\qs-?tCʂxgk A֥zމʶ|9XO;ǽ0 ).gQ_GX_QpgbɅ{C w_7{# p=@mh6IXcaD{Rj#A0A{蒍5'xy#1D Mϖ/\EGJ(>x$GqៅqJa'Ra2OS'G1xN5K9V}20 (+ (1H˨(Ewh8<)¨T|y.Xu  ;3Qmu-B^Řj;^,XLPInH { /F3G, pJ?W -4 {,s˕$n[e%_֘V1vGFc9O$4{֞U*<5M1cX.Ձ[2p^mhn)Ek)M+9zjihùӤuKwk[z`$V^|a@#䤃! %{i2BExT."FW 9岬}Qaލő=?Uq$-%-V"֪+ I_:pAKֆI)64VC<g-9n,լdšU)Q"$y V%YI]|9sy֏B;U@_S5e5dҜӳ/kɗP|ڂK6PPߊ56g5J"vUkQ݋iQhaUxܲV[a bl>j5:Xӵp IE1ꩈ[I`ZЎQ\:D>e4=M+kOUV[t6Q?c5=a[D}7` bRW&1hN Iֳo9k(pݓp_ʘ'&0FWzꁊ-ipK1uX.k0]ja։Jd5^LC dq%)=egʷ߿ۿ_xg.K9_;Hm/99,z>R"HA,ԈY;.Ƙ~UQbxl)U/B-ۭ93A9 Ќ%6TfI- "m*]Y$xdU6J hzBb8NS9)I!# @ o~!w&t m #<[s Ez=+K:stm4}.OoF~8KSOkV\nX IÃWqe\G=A|?/uĦK;q$@󷝾?툵vSƓ(LZjWDG_~) O9[uo&2ϋJ{[jev=s%+.f3OS [Z-47|<*l > o(*ޟESLߪd2S= tda\Y%»L7OQO*4݃yѥseh *|[Vyy&mo-`ݥ?J%O^<+L B=ⲵ#R$ẀS^1Vlӑ}l)1n6^#? w$ xݿΊ"0enaVg 3Zs[n94?sێb6Onz×wizU ؤՖN|wbV;e`l`ߟ5&~ { Vb4.Bď8PX.ߋQsCm? ,A̋ڱ:쯑a2*`/m._UfGH?75b1*\s 5궑2&\(ƥ֯n )TN+u]YSYaV)4 >,|qUCסؾ)J734Ϥ?ﳣVǑmLUŒ성hoJ7@Ӥb6؇58s_B\alJ.:LuAd'D [%&.Z)JV ɒu"pfdQ&_OtP gG`2@{'&М+ɵ/"N-?-dCU˵  NJf$d > ~*t. ]1yfecg8+h˟fcxGi_V{ʚVt)rs)4OmT] E/#4fBQ\f9EVc~c~zRǭ{xG]vjʅ3֬<]}9G]c3ڰۻvݸ=;Njp2)ޮ &q’~M;򈤕Im'ƒ;\x&K@acwG!~A'~@<9sޢpj¢ݔR UN gOxZ'-qj~z*>tJΣX jvjfL̛*MZt2 uX yխ #_=?pvX[;C"ۿ٥dNP#:tjQ&MvFuENjTgN_OT76O&)# ֓TjOM.:bT ~pL1/I .dZrulYt7X҃|Ш;Q?V*}D[f"MRAUJCD# u+koT֟B2oJ,vnf\vl@rö \*˫5% ŵƊe^0oVsSa\☯ؒ#xؙVME1fs|FuM6w:ⱁC$gX}(&uwMdZ,2k| {݃XKIzOK]vK?.c 5m?I)D~G,XXkKyRڙ@ `f>f,Jg~2ԉ5N}M"Pd*͸ذ˒mͣNn!9r}a]C.˝z܆Eq&ecH vNګO(Ȩ 褗_&9_rfY,hEU[|JXړ+;TR w2uXrzgq6~ F-ǟUr!^Xpv `a};F[:uV DBrm ״8naܛ(pBH>}v Ol6SЬ,iV~Ǭvk8 ˕nEoU(+K:X,K#ha1VAS~kGK"WJu@9"| ~Fdv_# F=YS1&QZA~YFOb,~_0ژ?QK;.ŕbt3ukZýqfqXދC/A즤F#mZ}([zMg̀@fY^vrD+v<YuJX濸"1uߝLS\HsL. no}(ȼ,2Ii;,i ', *sR>4C#{GDxoϑ룢*뚍1+sv#m!}\TS_i>VieN](2]o͞7T}tMyYnI.(QFΞ@q+f jqG#&.k۔K'd%f(p( j=~RAT$)jQIy:&%.SF(dwb. E3:* ~ \ CͩzH7>SڑSM`#7\|TF3"0]g#qnWCiyJI BL*U!x%Yҗa,pїQ,DS(Cflb=bs31tum4R;xhk]ΉqL5~l5wL]xnڋw-D5ԀZq{#f8W2+>8y]J#5"tӾLjVՏG h0!#D0sCxnyӟ6Axv=Kmچ* 0N?WLd93gz$%K~Ϧ _n ܘ /g=يTlMM\cM m(CUz}_W)xV.c/xƕ} {SCmqO >囔ˏy|){);pR۸scs? A0b!JʃR8 VHcVa42U rS񛱅lI-誈ߪx/}kz傷պ)A[~̔j BUH#$zV{8SDiD&~ qm[4l˩4|$yG6Wzm{dY]4*-H֦#E"y{$xj"zT@;r1 :YIYDv/_ ZM)\sc0=ca;rX˘nXu6th615Gb!7g=UU6Pp'6lfb)7aqzu)?AA0/fc "T>bt]ghַ4)ӂQe@@ވ@w&gJaes1V5ʮU+dQFia%)8L1MB6|1|-alQO_)ڸ=d7AHx.>PJ1Ln@`g6070 SҼ-jbc(zدY}\ *Ѹ(Ώx2?HlXH7@=[x:3I}6 Y'|L7!i'FvU2@@y}X3Dvx ]}2ʩ @X(0Mt].N9;!4P{t.5uEǚ);Øΐ(Xx).TbGiq~D E SPS~=*?Ea-0gIyex$uY1uw/9V'Lߠ́ɼptofy?ԤaTR-|PQT~1K0C9 )dY^ 8?$'1oV.žb˹&Cm*rM ܐ *\C#N7vΒ&ah%> ˇNGէڵۧpȮ~>R}g\i-: Q~2OB}y=bP2Xb2$F\Wv3%$M= !R4Mؿ7$%JWyIojc mJ W >xN6`f~HYkX Uinu/bpNa3@J`@yW~HV\_V>-X ؓ8} =-dyݸY 7 &xZZGNud;Y'P\+m4r;K*)d:xI{d2FZPY2Om^InޠmtFX<@a'NIp&(t AbɄ1J;;)(31XP􇅔~2Cy'jINjb, 1-0*ho*SpTS PDz`H{C_67QEWZJs5AeT?2 V`v܉j?ZC Ctx-a_w?lyK͔Y/<_Úk_ƱQ> m15ޞpP<{~9d`BX`"snx^.0nþR (_ c-@롛DU6(MAMny+8SAT],HTeE$*qϨD8&Ql1؂̓+;?k ˍN6 M`<>BӇ}J,rQXxp-T{5oPYA~vw/j11aNX FXxY~̆#Թ SkeNC]|6A՘Xmd0ʁv܃Tj,/6Fb?E(:1Nχu{.,jJZK%V͵DU Ys+0ȟk忨h.HK]j "WJe_V5J|85~81E?'&AMGE zX; K\z|M\x?gXF-5=H,_/-;(Kmɷ-8IKDʷ8GC3IܳޟIg~Q[,_Nr4^9i>&^~^׋FӋ{AZZgh>OTWkK6InMn+yOmSԲ4BZ|Z%.{6qAE|Pu-ץҨYXY;Ҡi ll[ٻK7N!Bu藁\<&Ā:lw5$nU67i{%uiZo.$ROjoAL %XZ>C=ZU甋>\!JmQr4NDBu p0:V~0>  ldu1S͘aoy)TprU[\ rwwMPy\:}۞&K7C;,T0zgUՍme^kܭ׹?IR=Ha+aus}#ԁDFF Fsع9 @H }UWD-Z)>rf&+AӍ>O33-܅=?V4nM"!cI%vi`M2"Ukt7%68$?zC6OR1O'مXWv?}ZQg3',Az 0*A}@;;Kƒfd; )ȑV&ʑ,czoWhՏ<᯻Ga2xpO6|x#FM{M# -/<5Q8qdI/ߗlSrԌ| 9f&BqJy-TԔB/H eԵ{Yt$v^Ѯ^\~ o3Ĵ.rVoYnr QJiz?ߔV{~<(juh#Gѿ4ÿT,y|%mXf[Q4uT㍊+*nWs\jg9zs\HG#jLۼj{Ӝ)#h[e8 u"gm[n'ԍjlb J1@8ɩ9w;bv;CYE$͔lji4Yje粈;0r[W1_ jV@ŎSPsbb;iS`$"kO/@ʹ8P~1Yp/\ktp q|`᣺IȢgt ]{2-nplUe+|ћjOPЂ|sQH㉽@UA1h\9"3e!(Vf_8%c,)E␲3Č fњ-30p=>TI؜de/8P2dPYF`5jiX%nHyybq>߇&)E//'$pjtIJy3v̈́@H1A ,@4u판D !"u$ ,q$I*\.HY•F1)ScF&㝎oe,!=`~_ky(X%Bn{LTv\aez G.[X63p3b,vGgg s,NjP>uSD=E<`wIE# YKED&ea H| "gceka\cs=G];ɓ{' yTGuW>H*̲:}BEa}x9+Ri(?9p <(~D6D\>Z EFZьj57tN=#(]2"?~%R4RZH8WCef0&B+x芽] ѵ@śC*km2NfBL“.+G)Pݾv01VpX,9rNd`pj ʾq#]$.( w8exJ{`bJT,z82pQ+ERN4:)nM^)BĨ$%D*ˣUO+O ữKQ =aM $2/؎lLT7M\R ~ ˆRcY}Rh0@k _~hR`  Rxcp>Wߞꍛ揧_2_F''Vm̾{r{фFbYzoOJ[jyZI֝{,R%$ /EGN;jxo;lH]\Y$9YtZ³ZBB T/h+ӡt ajg^ՙ`M,e3J[AJ{hhBֱdѥr Wdcwz5kZz! @kZ]/d`4'L# a\Q:}TQw*:vעu}./='eG$dCĥ;l}FvL)7+;>oVHB-?L!w]4ᵓ R\ [2^Pkl'Vb]~j X-hJITΞ5s S'`tԗn !b^Cu?vX3/~;ZXLTIYU2xKТIk8\S>7+WCtu2~ik?6{=T.W8ą,W*Sc<\ zT ~px%v[xO4~Nq0ƂC EP`V27baZ 1FɻL+]2#2鰟MMw*#tK!VXj ̋7ыwn+z]naS+[]}kt-`Sv!c>?pKiS䠗$ClN18UD_zS=\T/H !AT[UoKJ)jdsPy0r. W@Eڿ?N/N_hBB,nc\PV١{;=-, rw'+*H$^ t$+ci0W Tfޮ_.00Q ~-.8!p-qWQHQD)vPʮ룅 xI*g,3h,1]4q/duF7]r汋6ʅK)=*ɹ-ƽxKړ6mki#ڈP+ʞPNW#O[m{{.j~Nµ%kŀ'e+ =J.K&ݲ~M3aL8d!f|CdD86IՕr%R@ 7df it,>A1-u@[Z KqN259ʘ2.ݜ )qo}'ZvIq@{ezJ_7nMj1̊W֮+GNk>Q覐ri-O? 3xhRw 0o3}z㸟9]>Q䵨'wio9}h渧NL g술!:Xg,:te~|rx;pNt{?Q ּ#CXt,Ĝ0ӉDq;;q Xp4wH׋Ke;5"unՑ#&4k(+w Xձ)qxp07KOSGɮR&fS`&O`pPCQ-NXJ]x0l VG!O>z`grrn(ŸIB  Шjɿ.iwuN|n?W@@5#TG;] f9Fحǎ8)-}/39DF\L== j<Q(ί6{D{qـ~G7p)ж#1^;J/杚X\ǫB Ə T W'5?yEjpƝC*J >0wLO{ u8bQ =*^T? z? <ˬʩ0Tl"6HtM]T\$$\..d$\/!LdXSS՚\2{]%ׯ|R{$ٸHuB>|]ȑוy.s@̷e vWhe/+%JvdseIƃ t&3~pAz!& 9.5~CT9.ǃmR'sӄ]A' Uhc/t.C:dJQ X#u8'{?3wsoPn!TD#t]_%#Oջ#ܻ݃ͺ-@Rtޥ,QٸnԡLY]WC9@]f LKʩ7(iMʇmNj뽆D - %jzqW/^u&qϏFSÃaqOQ~1bvo0>C,sfϹi7l|U}h\9pֽJ5vݫIEBuӅWQ 8k=ZiVOG)8OٓGrBVF\xF9 n x-poHDD4O|v W[(uMU+CB9:s*5#8xI9"V.)I S# LT@mhxո\x ]> $e0OX;vϼ )nC8,O4<}ɗ/MI#ܙ4ѻlF ù%@Kȫo9Ώ{*[ޝTZkE^UWD玳zNRS xn0l%Yu0m>֪.JN|yo Lɂ_t]0vTCJ6[:՝Qr;a7w@D,J- eKK"HƩ:L:24\ ʈHёYP(( ߢ(%k;킾3tmw躮Kns)R6k+lt~O=tU6`!UOX40&%FSc{h3G${^ Re,VWadFSw|· !-y )y 1U8'"![~wǍZIgľ^Ls&}`$D[̈IkWfl@ۙc\}m%C=;gL).\EN(YA_ ti?4~ NIBEOӸ݃wm _}?A,8ՄU BpQk "%.XUmq5"-h)e| أy=g=UYy_0[4K#70a)aHw#.V S4BAє" ?:$lvwUKq1{+#yca4z5)'rF*Wj@2g Ih᧏?3M Gl%@En/|4f"N/@P-Qe&4'p@Zrl Tsܑ8U%x׳"GIB[DNN m Bjb)xh̀BvD$w/LHn):`6&KI@ 1  k1`Up`[Ƞ*~Dz0FS [m ҁGdA3<  l4PwwiXU;1'VS1MX(+-pƜ47zOC eCL#OD;p^.`W#vus6Fr*NȝT݅W߅fQpLK,_Mش @F؅ՐS2x;ѾOI1&JcT䇫{S MMOQ_c)ƆȼK!@JIY;%WX".Ԭq9c9X|tP@5`[ T!CB*l@CkysG2z@/]viy5^'ܜͩG >Ken[U#8#o{SMye=)n[^"*zB~Һ#3&P2xK8 X~ Oʬ>р ; N6WMT{gXv/}[{^7wdO-%a4Ha mܑ_V } |=ps[F,21P/M\H8*orR m0z&dO~X/CO<=0viB\NMyxHbFIA'ξrdӐ"qK8d17-YU&k9tKn jR1#)/sUЋqwR}RyJJ"T8 4J+ 5_ɜ#%] c@N{w7,2dK ?`@#x(*'2Ka8 ` 2S%6{!"./H 4#`]_mƯyvaIKƪ1Zu^%u-l|Ž/#:vcd_fe/nPO<2>cMh'u)Rznc\c߇+xtͿ2Eyf$ \uGL`jW% ɣQGjU/?KiLhTl^jw.w5f?v*&"I&Gs# U01P󃉎ۜL4~a]Q~v?nmdY?OA!z+"rp -hI&5CACL"E6@%F:'& &fQLf?v=;bbP̬/w-~K T i>\҅85<[kgrrAu}yaE>mʲΆyHqbL)7>r$Dܴ /J*aR5HKCoriN8Lyz'p 'Q5$ z%Q|)pN/zzI:= R&|4hfY%S&䭸ރ`N<)1|OFA'0EGkֈ;eȹiU71L')LX6 gpu)_ApRأ%+z)EzPAv2f+NhwAsˏ.RF~ ޼c¤eautYH?p%": )M^)_fH%چn@rCx԰aµcVF-=Fy,9Vqk6P3 Ų& AVJgm|[== |FRk 57T*eO]s^hGkR=$H_8UyQ[]c?8:Gﰇ/EB_ C 4㋠8+ذ0WͅϮh9ygXgZ6΄aN7^$˗uz+O&T:<F`4>=MA'x3Aْ2%UW7ZAES2@ OeX^rgm4TM(}JVrQ#hCkavd#W&H5ܑS|iTו"@luz8!QX6Q&xXNT -߸l>5 X{KZ\ nxzU=|^Eln)dN({C07z6ʆ˰d2 .߹dAǿdӎqɒ;%{^d IQ(w({"I]>a W!]PV#4D?13'lXp$ᗎH4exh֗rڡRuj&%1L@Ka ֡P C#A8>()Se ZeJx-@KӴc}ܠ﯑ ^1Lv^Vo OF>shԽ8)jq$u3%J=7o7HCƗ iG@0B]шunYoqb%ID,ݤѻ]Ugd[3 >#)Em@DH#c(11l8`Mo" *ØԈ^\H@JV$^jC U`dLS?QN["Iqc3%eXtzXe]^F!7u=dЈc̯Lg( Ux*a/ql T5eyγ:Pr!c0G|wZ &Qѫyp @R@3]9i6̨ZvB5nY0S/:A ^VË7PǪXGuܪ:\ b9#ߚ췖:Ucuu|:H3t|a\Q45=&b*a(B>-r2<=p 6\hX [ua/P݊Y;fA9@'"}Z@%Bf! `:..b]k:'# ʼ}Q@YK»5΂|h5A:ABTRLH1)'"36G^G**8*y GqR>b{!M2ST#?x!$L\V\k( .06'(n[_Z`?Jvi2N9ٰGq^Ndz$7C@B1CWqTnAt>k1w``Sf 9ޘ*RBr-j+yM)5t7 tӹ6G- aF|~3{|Gs?kcJ8,RrZ/_3,}U4zf&5ww-&*5)9鸏`_q6'ƹV-˰XfQcSĦj;[/H !SqN JN;id^Aɏ]?".Gy.%,"I컭OccV (Zj>C2nBb_@ -ZǮ /8o ;5P)ؙUlKQ%L`MYsK-&{Ruoh$Lat9OFx}-zrArcƽ0C7(TSc4b8WzlNGJʓbThwFI!|yY+Z#ByD]L4$D >yI]{_b}./,͖иPB$1K :L˪PD/lZvm4s< a9 O7jwǜD'}~q[ ~/`[l!-@Oe3fk7k_ܠ&L.8{={!}XPpmG^Z>_rop#ߋa~rkkQAٚ-ՊQmV'爷)W<눃i D]pHٸذLXx%{1s3v .SL ]HĹ 'EdEs 7P ["F?ak 3Or&  &j}ڠOW(W_D4DK׼P$pi@KGJԆq ==MU#&j]'IZ/J_dw ɆhhܔfsId"*ѵ::-m;Eu;ews$>"H'a%eY0B+ihgOOwFp< W_,oêLlȅ;6VA[p +;C2X؂H-^_4yoa'#,?py~fQϔ3PMջD={׸Bq&L}e5cNU_aؘ6blkh^;z1bT^tu%:08L" B^yaJQߟx~e<x ذ-QRRGج]\fc8n*Se#RYQs" nbD0\c]`t)|xRm͡P*;OO2\[9UU_ /|5kaT)Zyd SCQ}]ǚvhjUħ\ЕNc{ll}+3 zs}UZQ,>s&3k-/-q*UVUl1s谇ąB^-'u,,m%=_TiOJ>*5(MQ6?'͂== d `2FB. ǝ ?D9E웸iˠ غPPU?xwUNЅT +IXk'rMpYH|J| 4?1mJyrQu%`Ŗ.(< C(i!WxK(e.Pkn?=s)WY)eTX b)%aM}<{Beqʜ"ƕ/FJg|(~ zș}5+^Y) g5pԨr˦^u*дeu!xBnjhPCjG"N=v!еӧU ` 7V)3X7! n y#>=飑*߇I:xDg#_ U^Q@~@ P. #T~22Vˌ4M؆ڀ%$1ÿ @| "5E\b+,{tl窲ET.hT6tlWK3Qi־JO@u }_w ؈\ vXЙDEPф>=4)Avy6Ae0.@!7%,fUs#apmɛBxLm ݈R{L} k5·J-(LYr9ņ1c!m#^LϠ| !ՠNolзR=U2x@_ ȂU:@w[U|@ZjX8OCf{&փ%2A ¾9 c-=2Zj//bqgh[:*2E9?s#)YV8 / LP:4Vq zY^oP_鲂=mse B\ +%$Ť.KWnc4 >y?^WpU>S \w4w>(|~ Q`Abآj5X# s(W$&~`Xx^CmYU Oau6+bDooONmTKJZA-)Iek`lLd4Q_4H_m7E},ؼ&I6@bWD a{Hk&i.֨x!AcHI#e) %NkvV?;F#AbJxϟz& v V$tqNJx *l_hb,^\{7Zg 鄶1S%t;\R7Z__1N1<D!:O jʙ}fCEvaF@uفD[p[>Q = i3|8\M׷GN 4\M09$FXjhe{7}#5|Wz>fFZ),2}_\-sLïL6 ~vQ7#3<b;8̑=Z~^{?9c^zPmwЈAco`y"03;ag \W8V)o U_Iio_\GVr}&{`^ڌ-QGLew2t .3T xS~7b^G5eސ,`/Q0Lk47p4Ak_ #-N#Ƃf`` ǃ _ᡡ]wx=;#o4}(7. AdY]^S4Y0[~'XO\{C0IC>aS}DZeОEʇ Cӓ`e*̸r8m}VoԱ< WȐ2ػ9>OP_1Vc;s(*J0FHc:ose{a1d7mIn?;nGDf鏦<#h}LPi0,;YH- y:+N)3a{h4YDPAIy;MǀwwZb1;(o+}Exa} ]@svOgxoRٰA!'*+H#Vz|m@䲙r{tO>iGu+wޯ H`S۠;iz BII*8&iTcU*>WVEp[EsU 3X=5 D@/lHh}d>4_dJ"{%\rbî8VrKgYXw~tq xbqlFHG)U 'F6$T~JB]OvAN<"}6ɪfk 뻧xF"I"Cڝ=+ЙفYs?}_yñkc_41֪#e[9e\s"8} 0 I/hd<0( D0C6E I.69$t4-9mCr<*$GA: -% ajClnEW+rnЁu\Y6PN@F~z6fuF'x8=,wO%UlXRڧV;>,8I/3mP"kDBQ 1(O:J09pN\"@QA__yBW̉5iQ~CnF_baBUN/F @8\oW7<$Q t3!F'px#*}COO;¦OȿtJۢd:Gd/3t̉}4癓'c{@J>Fx`JRVTH ymtMAp>|eRƶH8!kJxQtGV W߭>2>s 3tY2G؊;Q>wB<;xʭ-HN #m)H^bd_>Rp%S6Jǀu\ ada4-cV*ҫP^xUdͷlm,p[G!}e?8YGҔ^A&ts2UX.M3`kiMx`p]!LԊq Y1gR0 h6@>%PbK7`RnW:֨J>6a`k{%cc hC@JD d&G}}GPӑ2k^c~um:_7/+υ,zK,-@#0{ ==N5. el։zzPuْAkC뚇|T&b}%F޹fOOI_]Q n,("3 je]4K 1D]驫o^ಉww; t$ 5~r^}KA9x"ۭRbB~7j{6]PJ]\y~ :G ]6B3gO@q~"MNܲ<|h.M}aQzeIʌ2S3ԎC[PQPS~PkJ/a5<r9_-#K$Πc~N2y> ,4CeYD-hqX7yb䤿:`Ϫ{+B9| c.*%?DxN&({ ߂CL"7dX!.l<`_EVYlLIEe#DyՁƾF7`Di2)c+qy5q.ÅVnE k-t‘( 6ܸqE%u%Ct_nr>vfEܿDr^ .'QƥHE!,>(Pm1Bd,_HAcuZĜ"P}ۃwVgc1k ¨Fqϧï5dlQC ^ tDQ@tfRd,b(ʼn(.)Nj./YCES1N;s9to!_͹kF}.4#85#([Gz;dȲØ,2t+Tt, |!ͱʫ%LaZc4hj|-:O)?[h?p5q/ D]Q2{{։ 5y T"nayB:"77!`psKFeKSh%V(<:к)ğ&%,B uPpnQ y^ yq+Ԏ.s.-; 4)Mt.[(ءEAbV]2~+V~Ef2MEk{>f`q#c &U$ = dǿ>= ԗɆ=_4=SfPj& ?N'XB)A) *=K%E* e3.JÝo D! @Ma6u^ 0ӯ@OURNM:+:s)i* 0A5W+ru' R {%7D?Mi5!%%,5L&4!X +vRBkp[[%a>הކj_Bn=CgmvsLymî{/$$YfR75b)bU܊>dʕ)aDJˣ8 X{|x&,RB-:@V5K+*w*p%5 6l x)&tUCZ;%@7ҰC@Zy+Htry+>rbpZX{Wb1 _: *\ಁ q#1:Zn?Zb׸8G:`\_0Xd8H) =Z%wޙ1mntJd]V̈ηo{e_P8M ϔRQ SPjeV{YE; *LsLRó q>GPq-1Տ_Jꦇ}m 43LR׸o[S<.,D#F5܏9w3\S lo^8u]054t4A=*G@.,Ǔ e1X_*nW_s*բyTU @*1@]X6.`Bo<y.6W 8׫9jël@xU[CJpOF Tj)77k88F!&?$v0Uw+$8o];9HCeH !_=n޽W^&mPA;̗ұR[ 2afT4`ypOxAǒa+߂KoxH8BGqݭBvPpVCp؛K2{c̓Tc2Zs=(RoSNc> lӤ2,+NI^q K԰LR3Dqb/]-f\@)^&u>#C Gwqk2bdnWۇmG+#V˫=_ظ^Wju+Xp$+Z4m9|z:zzriI` @+*1DEYeVw~(oLǚB0;/6B2o994t}CoXN݈2Fٲvk?3BAd7BpV/aB vЇ3|#5[MJ#91vRvZD+ؗ*}cJ@v3z1 ?'Sw-! itI-GP$qwpEo?Ff#R,X1 f ^cbkjj|&5mEn* 4Sa>RB .,BԷgA>FJL?#2lx@^DB8]tا7dתu՛dduɵ;`A(SPAѝ LУ/]2+.,WCwº,@B!R@:$ ?2]&R#2*v";7+}/zawz[h9kM>E8qtſx]OO[?E ْy8gTX8g*lcw@7g\^|SsXWzF7S-0(ƸL}7VX%.nyyovn/)q+#qELmbƓ&#'{',Ɯ/UJAaC8m0*/< o lPUVZ Zi>ے/iOd}-6NFgm߀Td\5z\x̒ONrӓ{w"_Y£~O@\߰JwwwPUg K8a;9pϫaj;&_.Vvds/.Ը9g}xJ 38u]͋Ҷ&mc'6'U)%ڝ6B  Ֆ9=|@ʟL@}ua0!4>\(앿WRj_^yoSzNFVF5c*R2[5n^zZ35;g.( gUYNgDB\Nkc z=b85[Vn-P׫mbŌz:z9owwN}`Zg.*Qo"7>ܜ/<#`$b%BZ+b1؋9A6$& G'r!?*9i@'NGp#b1 ]VueR4ʱ(G1fD;# Z3J.")Κ?KHZXspӁNm% iS$~Oy WA)$&z̵_gO"Gqgjq6/PH G0AܻL^eI<(sw`5ỳ( k@H`lfgʙM!zqxu2A"!=~~fwCgaqnXqcar. HK XR챂U wR#;;rUJ/ɾ<;v3t"A)!mFQV9e2Y*QYo .Ԯ Im;ԶJ4#a^_xx{06 7E*?cwD߀n\b֎(focv7ʇNt)(/9N ;}ss^^_ -궬` d$[{Ę ]45?8G -ܵRdp|q'74@ݔk#A-HP߆HP;/1b8Ysw>n[ rө9/B Vd5n->^{6-_rropN^[^ lVj˷X/a=GM$@?1A TA٘9ik;3U|q ďPs9@Rt?ZMUzoxG`75뺃-W(>W_D5/9ۯ%u sšM x@LXgmH7>>--Iqq^@ h$EYMg-)ٶ,:JոA`?MHl>DtGiUfmf;df) 8 BG%GJCDQaSirIIre] s9[U[pT)!T%4n)cpX/}%u1'*q2CSe AOǽ,q QF{ )L!xt ]@^58 HÜ67"pG8 [nw{ƿS Yݡ>ErcQpOxѯwlr.%0j,>%h/QlHք^3t@].y+?I ?{6􁡗!lTv;o@cxN?u?E%}0\XoFurwwDfq6ǣtTQt|v.'~~",C@i)s;QNW69vΎe ifkb2@HeJ9P%|@C $"#Jfi=Sĩk(E;ӕթ#X3Q Nb?IX y7E s s$&=D"ۘ͡#>C\W8Ѧ CI-m~Qڒ*_t]L[7i> Y G <ȍBgwZs?A1϶+]er/ahRG`$$1/mqƹq2V{.^x*4,r $b/ۖ:X)&a ]{]5~9%m]csvr r #:0Arxk!kAzZu u!4mExxPH:cDwv V6TANk_F}O@ crJViܢU 0|ca1Ub҇.:bgJ܈kn%ͱ{ hKOX#(.́r;4"s&%\ؖxܡu+Uz3)見HGw>/8[,tZ,tӠ~А-PDQdCd]bn?.*J21a WwjF#Z1Zn{i(ד5>_fr {|gwrOCCo (>ukkHA'?3 UsV{H*ab45JeQn2NYN _NzB3$(NB_WfWmb]~9p?P(jkz߶M}mdve$E_>4 RPr3p [wa?ɃH)*U ~;9{`?s8Xk}U<`vP}Y8" *3s+-c,C7(ÎKnD#D}A+"zd`qp0y l$bG>͹F6oID{r=AvlDɿQzaD·3A_ B:O?$}$328H1iz^P2 F%.`zs$ <ˍ #?e871%?IcߣѦve?2 {2È$wTZC BN.ۂJ6h%ЗWtM]lF/-ZG6  ocF̻ gCHs@UR Ol(.K ӱ?ֱ/~V3mڡ،ݚv۽ 6 v+KaA~ݱ y΍1(HȚMTI\/{9oUq[?(瀚'%ޞqoyVP9';Y#nL6Vꝓŋm|J 7N97/s%vHeCc{}x 44̊aC; ~KFTA b+ʤeo,=dt`hxu7)ӋW?P|UcmksY3pT xKEbmДjT57FX!WO%rOHM|./JA, /fٚ0VBYk:զ}ȵ%|/بdGG!hMvwf啯#폰(m"Xǟl}vZ?~}'IC P}s_\w.ٷQj#\\$ [O ]zY.ԛl^6`+Z:y\4v9|E/{o>!,uz?wq=aZ LJg%o{ j२;8}/ c_ wS4y_7g*eI\hWtJdWIOj_зٷ_qW+/z(ސ⿫ @K–wݿ֩DH :=  0ז1균Af{{U[1к$IV^y[bl +jjGlS/'זX#KLՊazJ6ji%f}fƪㇱ] `'V?V =S'D4BĎYpFB%w3GGrՏ~bOsqnCȫݶ #6\.tJD:b]A#=Q$6_$LyDJW+??%j:4$ >;ur~/zዊL#*ڽV\ܺ5Npa3_P?Ie+H^aۊ,+-;Cuup)?1WG4UjQ?#Wh|YDwKDׇz:_ COf[;)IɌCSbXmqlʏ2AWf'.OIz_瓱gq#Bn1Í$Iw~%s\y}Q°ùQj!!S] & /FGCR2sU_\!V)F.@(E w1OC=_^/BC B=DfbDyfC<7?āz"9H(-q&snxB¤C:Nti4uq+{U| JP ye5Wr?WJ<וM0q1P8jE!rW@ģ!{~(%?má_?7VQhO%Q/OXÄ,nk 460)S*фɻUMf&nK9 08+:LQzEZԫm̟4OŽ-n@O虀emyB3َuW>>=U +?cgu`b}?//ˣEz55_x[*aIxq$'z=8/-92ʏ =zcw^]3 =c3rž+GZt^7i!թvo0OnaaZ¦u2sߵω??]mj QU&B3B|DC|.wsKΈ !40.ˆj|/*RẏZqM 2{|9pƟݥ(]A#W[?)O7'mX! J]TaWt5T^xÈiωcm/0$ ZuS4,E9j@(-j۲eS.@{ώD9鶒 sVt3P/{P k'Y eu"3!| K)0;Q)PHEEg*^"Nr(]g3$鞌N `!O(#rНg -?Jjş\%G{H8>]. Cw'Ob_$b; $ '? `8g)(QRa9z?/ΦfJ]h?ʵm84x*3itV^"1~ϱI>{Z~}n.y.E( G3ly ^Wod1j^Z&'9a_ NT.p*4'CI^`2R6x\+Ƣr ѳ=,+{Aiҙ_4_]9)_‚ȥ /#役m$<݅3S.Q v؇B k0<9ur<$č IЫ}Mw˶R q}}(I xsFpk1by/qcX 2TFC `cZnfA읐I^jic-u{@[3!< g)+td  W-p^i+9מb!yҤ09V=K1S ŢbgWـLV|J÷f+*ޖWCj~|]>qXE#г ^1 4y6IgJJVĸ RDn'gM험a OIZwP:Fbst-&MU|'ueϧcѩNgܔHLS505 ͈a}7}T) s/evu6m?l7mf6nfGwQ[t]ۿc~屏Ap7P!0L C@ݻe 0 "`?x dS? 8$| }ۣzxmӛ2z>ȃXzboK|Z|D ,sX*q*%+H3T1ɈO\70Ⱥ eZl0LcKd 92twJ i_RI[`0l.#g n`_Wvai`ف 6RHb L| z:ADsy=H:ꑹy7&"i4Nawi16P:͖ nL m@vag< H.x/%#O詀iO%v;VqɟEtP)?ʦxJ *Fx1)xn !~(~v&i`"wvw*֯F˵-e*{{Ca$iՒ:m8$`oӯ4l=:BGtoZcNi%n:t0H_qfϔ3.N3~]%0)WyEAz,T8&UԳzOp+!X%AM{l߫9jҵ4_/^Ĵ(S $oH9l&?axrlSȝQS-4^M&q{˔ c81z6$H+sxx[ʤTqp_b-q~cco)YJy2fX'W&އ;2`o a1K$YwAB]xCqmx@|Ѿ8t2CM@x(3r\sa8I|_bZ6U[yEVvv&=HWç^q<HC:ǯ׊_Lqw}܋8-C>"?΋ooVq)Cp?4&QPQ<"z}4h쉘A2u2rgBiY* :҇%G߈ɯ xڿZDm܄4ũIЁ8v^IxnN@K׊vIGs (1cGjY/]9ԜLΧ%eͱcDOhƎI1YLXtR[+n@oY$n)`JyE&$怜ܹ|tc1LnG4)![Xǭh-Ɲ.E$ ` `c톻fp,ܶ %VOՋmn {t_!jk~ \WpqawRrNa6:Џ=PMN]vCc[kvp)y|C<|K޲(n6/32ZJ(ڤ -V%=y{u4T11CC]`ғ:뇡bYJ`i,!qdIx^ "C2 fg_8 <k-Hd c&\K`~!s ѵ5\TWcnX8"lIeeo4y؇h nҬkV7ݯ8zK/G%CYXEV lWVrAsQh% *+9"+ҘI\26z/MzDwInҟy2k  q,vpVRyo%JMi8F;̜ڿՓCp3B&uao;ׇS;{5Uf0;w)9CcP쎊̻d=x3++7d~wwyK4jͻ6GH~ A4D1"? t (ҫ7N#?!%'wS3 r0I~0xOh[!ܔdzDPO0P#e1Gzg{eztn)%36^eR2z.*eL|q)?t`j ߧ ~ o{sE2$h?;/K_)o[["C?xz:Ffmߓ89VUO:Eb$Au06[0(8w.,c pe>H |EyWء oȇ*PWkVUJCDY3iRfP:\"y;KC뛼Jg0;}c7fKl.AwѥQI{S Ȱ, loZbw_߹]F\d,vrl$鹜 b5@uOYIVbƈ(Yܑ]-Ç&:uݸd <}~u/As]780j[=WIʽH.l֭S*xTee= W5(]{me;1Y#Z(VUv5.[W_)]H.CաiҽtJΘ=Hdκr` _!❺g,~7Ū`j * }*f~@ Ь"^ +"/oՃ7%WtC;h*hgw#c>ʫH {;+\i E/ |Tt' DztD}*!FVM>fhXB ,viq65%qUXs8gNn"mg<_nҬI!3rD峗3Xu^CyWٛ`dԉR*a1w.FuXS4gLr2W>[DN!lNҾF~ſ%ٖ.(:u=Hvѵ$_ol$yk4vs>N"^7'_#p|CcMإik#yLqhv> j>uozB $/5 {V[<|i?ղ[4fH=buvlmBnaAXFި4C%(W⺗W:.*ЏG/w:eK~yMy:a'+68ww%A,ʟQ^ l9OR|> 9 0'-yףp^l])8 u$<bwnrQ!GQlGU|V7C8v&$&bH1U,9OO%V}(ЈkmBiƍ~Yd.cGfbb=ЖNhFLRg9ײ4!ҰS٥Nz.-qmЅM읶[SvwҮٻ\%wO{ߺ8BfThmXeWgOReWڲq$-ӥ[,V<>>>ōԪ(j y$V Sւl0{nj8L-maӐ4Q~bJ[6Di3QPvFҌܴ}t1H7+W$M.BԹp;\$(g؇`A7"N%^s]=DNAU =q|#tCE N!$mMMKSZ^7 bR9{YSq|rvjvN-<*,q"Ֆ/>  XhYv/ nH;PwNN1DTM 4.<t"3Mg[3 .}TSvX@6Hp,ej~PZ T/F d5"GG{Wkemy6܆)|0xΎDM)$>Cςħƶtض?-.:M 7k'R[_叭Ŀ_/yη)" ),N}5{9^՞ja{K{ ҃#!JIk RkSxԖcB+l $mɔcu'J3(4[۸*8v y%ĕWJn8G!B)lr Yo-_<-x8b\ɮ ?o:0,J߱R&,]|ZJ;݆0^-;PD°nK9pXswHQXCDsb!bNTU8ɃܭSuˏ7 )髧 ǯ{[ZD.![#wKSNtF4j{sț@*↞Q\$/3Bx.]xrlwbQÌMb UIgS/&UU2TIɜDY(2q¹gqIl%MFsNZ\D Z){_BYbRevWIfje3"Ma.x% 9fbjҹlD2]7O< wmmR?]uz_Ò _ T6fi XY]*٨WVWv|ѫh(hd=Q.smZ]–oj3bglϺCǭIQP˨N2,>joL=x˼hgS}w.lĶx3ʲU%I(wA"b(2Յf ~TҬ\Lh=;~-h~R03u,s=;)AáLwY!`3l [ >3=TEBZh%#k˿lT0p]SEj})v>uCϤf!dkf =I894Y/dqcCUy1N0;`'`&syb37ǰX37:Sq,c6a ,zCK'<\(r \E]C2~W,\ F? OTe2 *_zn Q((Ii HP<}ǟ똀3=$N.Sm& *{{Ӥ6QYG4}8rNJJI'PY7bs(\Hպwд'^u r S܌ òE*gnCm)m I~(#8.pJsYN^P\2;Ozc% v8aA,tcFP U✥|-tk@?`*>!”8nu3訿9uwE.e^p؆g@\Й9tF`]<X_b]›,>(u"„K)0bKGѨ0~ q"= gO!af]}.w;ַo-eW~J77f a/(,%*)q&pĎ{#dPFݩ 'ޘo ґCV -Wܛ?FVU&UY̒`&~[v9j h~µ?k!xr|#X|<{I·~73ܹ5OSafWV`t Z~/>N[ӝӱCcڅZAea[Ot 2ċ Cv$A>,B̰}?3͸31W9Xf툳ղ-&((DƟ9LW Bc'Yb'(Qޯb8~1(*p(jl챁 8<'Eh ΘETͱM8֦N\a{j.XB"t$]g)ޖq tVo/ yL%0׃#^ɋȨte˶{ˆD3;2Z!>EiһJly|%RFr hS AƖ6 К\ Ejӎ/ kt7֌A6:I4 ݅bq:=qPݘQzR-vJb-}7.,C93w#iEѵwSG!uCA91Y Ą"3-(5Z q_ +>MePɹ xqduز[k$;-u"'ix>Us~._gH8: "/_qw*EnB.7j3^Ɠ.: "%0D;^j̩Aw< +*.|)YCGtH[$LŠ'ܐ(03n[͹I>wgѝ䁴]",c!NylV1RBZa~@s &gb 9:H^t=0ZͮaM}k)EX8YBXRh4`v<|q8/,[~ĻzC('dG.k)?Wm!{>¶A.>";8/PIXdb0Fa6=F]/A,F|5GyĞFY/n"8)j|J&-3vNQ FE3Y3}K3pLARvSŭ;\0U͈3<\pv}CJ#XBy2S?Tc&nv.!;T`Jp4js8~xqx霩M"#I~2<U:\ret*(y-0Hf p!%&5TYIcE>Z6?Zٴod,YN FTpvcxy;SzTk:511e"/~LE >/.H ,6" Zܦ$&$mK.04" ^Y|q&,nsþcLף0jkӀA&BfuxU¸~,֏`uߋd4LB񑿾ezs\ȩPua\P5k'+%sN,9B_O,rP^j:fAiT=ʮOQ&t] }byOp@/뮓EG𪰮`=ZF ]1{9|Â-:( ާ8(a|0-Y6vmTEl0^&?tNɻxԄF2to/^̘J]o-װ*Uz^88+ͿA`i#ylB xMВaQ40"ŹD~G`piaRunHoI罇g_1iCo0dI|((V9u{7d 1eHdeɡW%-˜FNSVt Y mMFtjl O;d}B,};Y $ ̐1,82+QHśXB5o*醺-7TF|c*Is_WHYa#`;5IɩqܼF@;`WjGB(dB  @TN,aZ`6: u5ђ)%Lf:ZlBv/4WW,8Z|̂(Y]K}r1DL(5ҴLbkZ6[(vNB8ΆLì&wFz]6J*plFC ;K260"YcJ :UiVN~6gȐ6jnNRq`4~\ȅs K!h`/y"' ok'Mklz'tB=#?]9lCŻBJ*yV~T5M.8?æp{<װ_ƃJ_jޗS? O`΂/L珀3]X8U,`.S׹UB- :5Z rûaߊ0x_wJIJQ;֋T[v؟Лua HY]i3:q%ñ/?&]0V%[G7`{յ<"UF `jpgϜIAkҺ~x8'ݝ֤mP_o軠ݼƋh0V/5'_e$cҀ1\?T%L 9gaXe{3O7.x?YNkۘVs:)92OC3-g4f<t?Y༝>hD "M: =YZ>9k1va d5tI']%d(`WcKRxi}#L3}H+{Z \z~N1g;#OrGԫ@cqQ4.𿭗wп^r>L^U~+RVDMdE3X'5=tp(Eh./W`g0SVD}۪X59tNx1,CcaE}ao<4BM!^IH>]BSH g[ 'o,5FƖc{#v3QjLِY /˦XSዹc(]IJ ̅Z#9,+ D$T`d*|82ba~'%8O5|D¹$aHPbIXݼ}!"6;ɾr<{%9^an6E 8s@xd^Hz`~_Wsc8C7tKE]hG.lO7:IҦcZx=OC\b!;M/-~k7mPN,$e扅em͗^y'u>S|>u^JeBc#Oi!p=)(kHq'n X~NY<;~)OI=>>QЗCw /h 9`ONW`9#Ub]Jʱw)]|Q)fS1x4kߩ#Nt1h͠5E?b+QƒSk }vr݇c/x7Тzw8?fx\;MI){܄#sfGT]8L}\T [1^07?UrNBtG*Qe=-0mrn }_+_pTo:qҽ9͠7~$ 4 4cMr:KQfڇ#?*bS FJəa LG3}TY*&_ N(Z( N8Q-R3)+ VKc;Fkkq.QN|M؃{>buiV.~6.$NBLSsg 'v:\@S:Bi"@}[= Rv$AnMf~xɿFY# u4'5^=vL+w|:w"},i d?P(UBG hr'hKw^|Rk"~pUY4{࿅(^7: B%AaI2`|5(q-rEp;=Z,Lm?SMrH%>!UA筋,<]W!pC^ 2^(-s1+N` MSAz2ꩽny'+4mQVf#|ڒ͂1I~ VwϒQOr< WyH|R@~-r}R%ͅ"H'tjjNoqo{u-SLqC[8 "Q~?#>"e_&5*_D1xzOZ-6!ruajM_cZV#>՚Gb A?փQ ПjXq,Z^Èa\i`۟}wiC2 GxFѭQš w0 w4eVǴQVz 2 ch(+k+l;TFmZ>귝L->y)gY qyi!'a͟VTRvȶ 6^QY+/%(+kkve3N䵻mg'?U~$Sۏ xL}2-emmʹA^#рp!Ծi;WCB0 [Uy%od&-^9,c|VZް.#J7Q>/Ǖz2V,PIy8{;6z3/* 6*oOKQnZ FigXT8H ]O\6#/}t ‡ PI5zNؤ~ZS騽`ׯ @Ӌ0ٓvMaԴ6{N'ܖK<2O? W^;žJo4pXPpԁOn;qӦ*Ĝ?n;g!ƺ'q6Y [*1C\. q㯖t_޷e~P89Mmh3̸yܦ`8P`wxmV}P^n] Bj&Cw=D#+jctۻ[۽q@SL283}cR;ccav5ڙvL&#6nI:?y^qMx jBbG!f~ } `U/hG A~n_V5|0/ {x VD\*7FAIQ o4*ێ׍)*JwH@X55dnfE@ShJDO1cju|D_>tmqAOd1[8bhdJy~;䘾#Њao 7TW]RKdfhc;e~/+ ?A.m! V{\e K~2i_'oSlȧ,8yM&Kn}͞!D ,r Nt 888dCRBHZ^**T 6WPL%z4;/n`V< #!Au5E5AVXK-w픩\2)CC`wIu{*`5}T7Hd ]X(&U~}2TWaHkDw%Qُa| sXJ͆28Nj>p{RG3!͌Pm"`ougE\ {s w_d;ԓp2h)$?UB=B._}[o"˜Mr N:/ˏJhp}Ơe 爡Erk&6E ?d[鐭mhC{8Xzy+?&=+68s;οyECo]9wXySNxi8 vNZTVefv̞m؝m[*vRǐTFDE"𤋮_;Ky8=7oͮʏXoۢlڿxݡ_OǶ!`p:6cU̶Mզ؟bmQ?~{oNo#:?6U "l>6P~X?t:0HOU77m]nc4+\C>:ߕűOMٖ#±܎lO2[y+*o{Qx9([ԅVNR)M*~@}ku]TjKH o7oҥƁ%֛.ߝ|߫H,^0IuЛR36uy{G˒@iryĞw!ǏE)e>v̳Mo?`/drD';GJp <}u-BVG)/tX?.=:@qVjŒ#h4h:dk؂ 7W$BSU"-g~zktuwjڧ<]E g_l>-Vw !O+}~(?MQM/%AVyl_ʩ(TPBmlӬW1j}͵@AV~H8ys=><"ʶ(w(]D! fy )o6o޵e['OIwTL.GizS!pzM]2Kw9ܫJOjfZI9U(Ӯ~Ps]ABF y\X?m/ 4O#K{HTP[hG;i,17mݢ7O6o[Xn[.Uq,X\Pۻ&v74#D2D1LˆU8ϾDQrNnp9yӮlΨi]U01PySrj鮚vN@Sq t{2xdUݓP{UMS'-.hhr]W[UTPX!?$ށtw8E=nKH+֫6=e":;4i{Ds> +Tv +jx;Xt#7oeW%iqiw(qPvUEbqX Hq;D\ }Ca\mY*ɄI>Zuw_{[CwI/k |BhcKttq'd Ԓ!]$d"O"~Wne 'k/ 5M!2lY`FaaT`*NF qM؊WcbElJXBV*m.g`H_{YRjZig+[ij&iNOJOꮩޠ&m2!CO_Ά4^~pdr#& 5}ĝh!{DNj(|@'2(g&_jPo@$8?Ly"bYF==1vH4&2(MC Iz3 AJT&iIAyX=>AJA~To+NPP u+ njK 9B3{S2AŦYڡK܊n4@2KqR+M!JLQs"C/L#ɇ),f@zxdvxvI&aLE r!P!7R X!8.iQ\t;r|Y|rXB%Ĩ:)D fK¤Ԥ4C%C5֪F)NAnDAŶ>FG8Oc< r >’˶50M6|mPh+$ϑD$$bhʁ 74 R'| S0 u{/Ct^8 >Ȍ̗p0<ψԕYޜ-l:|WVavi'*h% BNA_JAm2#D7lv0MLIhOIX '$E(B%[t ݔ(BZL(gfI*̂)%$Ks*I2hE?? *{ꮱ THe6a1쯙B p`,i"9'lZ!zGF{;TDoPMC,H!%P:2gc@OIUL*0E k_ðd=TkjB>ο+rVz,tiT-ٛK( P7bL)='~zB=!Rqg 04TKEq\&Fx; `"QQ J$ xE(I")p5PZ:>U~~Pș~7 ƅ" ,@.(!E1$kE$I"f2ARNI; Cҽf,ti#zIArМ" 1c$ !)F,E`2 P2[: P atx2LrfNhRޏZP.iuH0e0d9;$@0%qwC# D bHD*b Bs e@%;"7)M:\lܑJX'v„}R2lـ.JLvB,"*BA6OxF2^ Q! peBD&|Qw- )Ӹ'ۗ&VhԄOKT`q֥@%H;JI"R;Ijx{B@6\py#`i#]/;9mZQ~- I{ITILAe.@8A$9 $ *a!X(q'y^@4D!{Ԁ=9@Tu+FV‡@uB@)a#HRIWJ*TdDUb\1&NP 1/X )АAԷ73: )b ߴ/4`E`0ѧlniCv.p}M<q%LXBl&P$3|OOHaW)b{-Hv>UAt(4x}#pD>GN pRIL 9<p&M EGk{2GSӨ#4QrăndK?IMIS ,3?BD7ݒC6rcZBvvwMSQ,\h!\%^~F~{c{d2?ajz կmj8 ?QdnF{? zIx7Fiɏ~74q[yܗDz-~˫6fa.8 ]y~$cOI)2T2b(x0/0@"V8 v⧚0#]гDGQ'xA2:.9)03&3 &b{dzCX7 |[ t="𡙏Β(9HX{PLdrydcL)}OM^:&Nx٧"NJZL'/GH! },56s|bC__tc[#7;3DM "-B^YB 厨bTӨ4ℙp)6J2­Ldnq2BSu >{F]A,8,Sm)t& RwBǂv9^<`qC[]HSK>b3RJdRDM!-IW&:9Sh`2v  8G an$)YFK5-jIT9mtr;5UfnL89=spBlBMvBK[>20Q]ԙ41fL` GG#8/'ɪ'xL#-b/q%*w=AE}ҡН1{d)_:w3N8C.2ơ^ٶ4DLml5m(F-UcT*{Tc:o5@?A-/#T%ŊYʩ޴'Gwr pec[}A# +udӁ<*ؾNG^W?.GܨpAf9pL B268+K“QSK;"Z'W+zPl Co>Z _6eޤq=_TYc],*v)쮹j 9^XJlZeA#ˌ ӯRTM)QZ%_R)o-,jHp +z|uRῬVh ۫B}yg ܗWZZI+ja;VրAJ^3JUa &_( 6A"\lP-ɗvBI~_I䒾tmr^0t (_y>sV'hsu^/]UmxIYNXGn{}p\&:eՂD.`>-b啲YZ)iK$Ec4P,~QM?t~v$rǥ`BQ}5_V"Lz[ YWUj5}; AѣhDqJ`I=ުr>Ls1y,ź4ob|=%/Q Y%/g)e\tJ#hnQ2_#7 /QGg,bdY"E? 9_e{'^쓬H]#]3,i;R~zЩQ9yLs9)zYEb,;NR:M68 h^S JVB,u~ S).1-ewh7jA>Nԩm[ϳ)gAPm~loఐGam^r ֠Ê]E >HYZLD% hfh#-xAPf!JQȲ<=]ꐑjCcRd:/4lHmwJx#F S%:n`#֣ØL/w\p~}84 ܇Ȉcui361&Vk̅DQ43&ƉTEM6V(lw0,O0ꐑjĨ%?43='_`*F#8Ң1Ф0HuDuwH.9F* 46eUCn$F*')E)+skB0FL lcQc Íc:F3O _񋣷ޕ u[=lN7ϵ %ku-Vm7kzZ{WKSZZ2nԒ-Xc.~rGdmsm5k-n4j, FZE32k 7N< 671E1kF7a0{=:IPy9A|/D,?{?+~Z<]_q Yw M )6B. {ǀ3<(wxBCDZSE(NmqoEٴ_xz)1I> 0*-iTZ}ΛA.i)~~I2 )\+Zo01*I6AF+/rTJA&#8|.-(E#Q+xU{3 G<϶lQC$03˖?L ϳ ,Q 1@CCfo(jm}0 $7Xj,CHW|VTv)yצMID. ;liUđ|WP`GpjJ4˭G1K[ܰ5 Yh$8UElPpˆh*? L'/wE'=Qݥ5g?!RVޜ1p{#}@e ;o?+v>O;7YI=D%Ϗr‹I0LZGx)Bbr^#M\TgbSifbMK]K54c*byl.Mb$&աτJu(xk ;қ/(tϩC#GջOmBᥐJ]#Z!P66!l4KZrMCiQ]x1D&U~Le@d\J:z"_ 2Ng[UjO= 80Vy/<]'uI7;5T*~pSP2pI_Mإi1W$>ZLכJDpk.ߡ2;NM udiGr(ŭI M/Ytj Mtq~K}2ƒ[oavPL[1,K?[:X"i"M,(N2NC11-]&[VC}b|&^ԞJt#Y ɕv^d>pC@ǁix?]DT\^hig2^;x7^ UqKEV-R>M"Fo+/`qQN (!ש2\? ֥2ݺ? ֥B#›X񷉥 8 ?SbK'/P_  2Q#V԰GowsXh? e¢WxʷݩB8>}Zﾄ"Jȴc |T+s_8adAs9V|<[Z X?dUPI l+.B:Ӫ3Z~~< P@g p Iԑ'8TILx.S ,IYH ^J׃864t&cQ僿?\YB0FGЁG@/DIOOpY7n[-F}vQ>i9_y-!{LF: )m*/ۗ1nѩɑp%\w*n>>/ߣ.hy48^Zן٦umoP?dr//Fr >},FnOG6zc[>aww)UۼUR4Mq.s{W΢9S>I+ʒX!8=MOjawWfV+b>:}*S#}='}#om:1udlOM"RUqj:`3"ߣxROj+ !$I(U cnY{˺|)wjP7C }P)&pg2 Gmñ#q bB )pآ7̠_1yÍp#7 %x^E|g7Í݈vp?&xv$~ψ“S1SC?jAÔ<0e ͔߬7%0 FM[`9V˦̒i0Ep".$3Y6p+Y+efOwN;,ϖv^UT |>l~l9})/ࢼ36}O4*3Jd)IF$#*Q2UjRRۨ Uj$DUMQBҎcDžH0gto&A=CCx"5?[9ϲ݈\op;޽8zf1íyWCa#]$Bg%`e[@Mj: ^Q~d9:|투¦@rt]fґՍ^F Ɇ%n/}1e-bZ&N/p*6pL 2PbMU ?y)H.V·P:@ ޖbMDm"n 4jD1zvbv}9aor-t. nB'߻k|ե޼m4EۼŲCh>|:~Li&y'd:,`o[,@iҫ+D]_Ob3vwy?#YfY@*.C.rBOiafC[TV;ԩ7-j ׌R7|*%b8b]o^xb~oGTԀ3OD;'Yx0H χ=?\!EvJd&?pa :l.IMp7+"luG,._ ӐAKRQ~8 jiC!j=K] <{H yOQ'}GQDgjW$rteZ t W8g@7cBieZ{7U򤰐wWvqXF.y_ʈH 1"MPH/ ]x͇^ I!ip oM6h WXY$?5x2d 6aS 2k Brz'L8. +ثY'Ov%h)^ʥ–] Ե' M @P7XA.7#MpBDFFMNT\3>|[]>H_$c*Z kOfQIMVreI}25 Mޘ 45Km/u $ =C5,D^{6ˬ%} {9O-lBSx$X?peYq\׆݈?~!>g(Ҿmh%.gU& p& #.~uk|,/RQ gITeu<[_\ dm 2 _1&}+ (S<~^6|>]}|utLbUEiK+LcR"}}L#F.p̯xNZ^v`3~~&%OOhN-DZ?; &S+__X˜œeucϳushoaqKT[90pH{tp QS4(9+]S,)2ik3߅ґzS^yMglF-|ZCZ2 JoR ^,@S& <臛#0"d0vf+[ğ-|m[hq;iqPrҰW 6_g5,Kiܧz˺i׫tvl2p*֨UЬԴ CxW`[vwJN<\tHb(qe]2KkK`}U c ~UB. JRpwli1hk( lhA ]ҮnLMr=%F,9Y8Jrlכ89asw/[Hii{i+I.%9VO <+ҋ tOrw关 {}wUQӬz<1>t,.(o-@҃ʖ"NmR>YWe'6t(O0'hjcN#;o,U|Jwnc_`YI?qRiN{ΘpUxzd7(bMDgQ+; kr1(DmD$Ha.C_ zy sW:d&e~scxw-p6ƸְU9Y/ { >boJg9`0IhA><2˥((%cIwvyV'܄hUvyso]}e`&`M|tdGKh1:xᑿu(Tdkj{[&R`I;xY{7 %0bԠH[bEkׄ`G@*Wߥ_Xep$~xjn,o}K"<>V$BM\ˍ? UAR*13oGap{$2&4p+)M \%LVxyaeNM!0*̏EUq4+(깆.E""Թ?(fѭ nxo&!N}hQGߓyzO2#o[-J[Km*KNϱt, TyOJͣM6DKCvA= vUahp/tGfn^*vE(NU\,FIEF.bQbP ưxL]53>gmU<㞌c&赺+p|A t恒WR$ۃޔ[ס4d(˼N~3$H1udf2~)4ӥ7d¸&AA+7ɛoQGV R%x7# l0bm1.}F@=?~`1%i/QTʎTL24kr]5tPSYs*䲲z*^Y64[R攉,r#t.P=MnS]$ rå~[mx4ߕQՆH3j][m4&ߕQHQb|f{2m}VP kXi8?7~>>ޏ,#0iV]Q=IN/Sco+R6tu\Ix?8ilǷI8 x@Wp> 2mf@{WX{LLeQmayӇ2]voO0V54sly ,~@,Xv A /SPt)y-4s/+ݚ=5! "~$Kxj}0$ɯK5Q= YQ&D{|hz^KmiF$<5%6/KiD(Sef̞g\r^=t_G tEEʛ,!.HOq5 ?= v+H௫q]qfE%H]cX@ RevJ9auga`ߏ*8 /[ЮF-hXԬ=M+$߭h^{:uTIdG Ƿ8np(-?tJHGvʧv(d84\?&\U"S[sa1n/:=Z.3^bGYb,3>:JKT硑_6<,4`@?8LX7 #~!Km0"摒g7*j(:*HG.o@ԯd2C6&7o(~n (vB.tH)eg"6C,yn9*eS2;?'"Kd'OԾ@/u"$Ca30 q5U_QL+^y.Ci0RiS..N6?*t( D)^ O;Z?FbCxAȇY/́Z 3D"q($}*bб` t*{\W|O8(DҦ#|C66yu 5]A)ޛz|?BOfa1c x&dzǫk5P›*ȏxA]@zcЖ1o?=.GE"d~_>:?z̧zS2\J+|ABw.^=1wթ!F&; _NJ>L)8Xɔ(:5^7)@ʗzOh9$%(9J5+~{੫u?e.)ޤVT1եh0 LxsSs.rSOsҊE]95ߚnrem0e׌"\\#a a/ yXҡ!!߄SeP, 3%w yUf Dt+ 2gaD)&xI0F&Fn%*!r9肘4Mh&E5 M }P5<V !WJreҪ&|qPdyT&tPL_eE#=4z WJpuW6XU2wض#dL;Le*6hid=rmv6 _`p.;tm$K;,2ЋqV8+2qf^+Kv2bk`F [g3X>M [ <޸Olaqmt}`sKl75>)Zi9SH Ocg\dsQ/k ؗ4S wޚ($%' #\,$bԲe96s`e3=)SS+Oj+zo/X^;M'"!6q`4bϼʼn(l `c -";FG3 XsEtob0 5,qImiҴc_h8Nt~o݁DWeC>c ܼ'Nqkdżܘ?4-jwVZ}W5a?i{…/S{A:K"·?E5Va穼~Q״F.FD\.i'pҲ(ztl% n覴LZtbOC٣j0f{2|Ȕ  P̟yWeԲ;5>s.r:Tr١4ʮLs>ӷXTM ̳?1WV[l`8D|ߓ۽N(tBOdi⥑Ȱu{A$ T؛Ͻp%[*}o_WDWa<;ܩ)/^<I<)zl k|2Ym]G}<}.uٯT?̋"7ɥ0+hrhMr+6څRP'.ܙMcc+M-ugSi+9;ÎV fbP_1VG^`*5<eWp Ft+U T.:D5 Q0MxL BړUDfeIx25 J"+WAh o\.~ؠȜ׷>e6{tBx <4H&>c>DZ.!ۺĖl 3^'Kͪ.E޾HA$M0 =gؓ~޻lgB2B[CL4p|;f( gw2LLs`hahŗ: yG@M~]^uYHtTeLndY;s~4Wq@=G)}JA$n;w$^U,p-tsAiQ< KJ׶;^N3toBe T%B8BOd *:~٢RH443ݨ;8W\^x kwKY#Q\]ژƄlg0rCb lڷ4"?${~î:[rP/SܟO5udn b_ٔ죛}tS ڔ$)"j3f՛[`Xaws*ȲNs)hV%"95jSA?WqS 4%aVN"cm %'5io`$.$a;kab^gR`GxS [K]Y@s YnCxjւWIW DA8k6FZ,I.KyG˕-n aD n [KC`c33H3X: N"g왑7c9,"6; Q,5LRze.5 /撝l;&MonOosz`pӄ }|#3&ck M[)I"F&7NSk--Ѯ8p^2V 3#ɬ)QxSl}J#D;mjK(f(fT>[HĻ%WpyS6p-Dd\!(}s36;#3+Ⱦ G {i>CvXD^ER^%AƯT#!q nɵs9S*{Oz{TY urX NeA{kL΀> />jdH\7@m${9[M5'pXj0Y]=;,zZZ(WXu*mW~$S =~ɟL`F4IJjM[OlMm2li׳7C)K{%Kv=k?*X;C=V꺊q*+xHj? nR)T%ve*S%j%CrA 18H(ga_U#|@u{oi;#qB2QS%S IPLPͺ a3;,4h١9x3Pw>> 7=&7 "0 + -u{#J TB-'5e~GS7ͩvT#Y'@OP@P陕پ.V:%iƐ=&"k3{Jd=1cݖ|xth;[TqT^^8`ME~8/ v-]vQMD|h7}1m]QQ9/Dat@܎@X:!i}3"ᑇ$lnwE#2t5iI~6D߶pKMXc?P km.HgzG;dt~E <ʠFw K*l|G/m[n+8ݖ?n^;#P$1I⎼z",HI_/USs~(EgkI١uQO*>"ڛ YRTW]0Hu]n86]ah0\`$\a~9TmIUz0zlA><?edKsDWEgЕ&MQU7AzѶEMlHR g-DmUא"[gN"j<1iI?N+9l 7;7 ;HN%JMM:8w­ ť|)E,5̿ d@Ȧr}р8ziPH9_d}v'] ~ ~ oe-&xWI1,fr/EOYK-EH@HΛVm(^ݡ);C[xHisKߒ%j| `=aj3T:e?x3sgmv £cs.ߢDa,(-~PGeUut^^xaYȜ8EW]֧?_m[?l}|ߓ8NÖ-N Oa]a"d_NܬԼYRrrS1zB4bw1)dC)作 9"kt ctbnd]]?V YxvoA Ƴlq9E{ K>/tStn B'tTRsӛ u]e xj 4@a!#xmMO0 !M M%>ĉ!ӚcJnד )c?kbP݉V%< =^qj! yђ* b`hE|,@M?A{R}tːza?ʩ~WTzP;ݧ)&% Tx!C4VLRqI_LCP7K0H8xF ѽCx}Sn@}~Ő#AHh tmQ]k/ U#BuBo9sl,dɠ,`_`ekidՓ«CHnb[x_޷R}י'eE1"ThQ`~r6ڛGifMSW\ zX,*2Li1r*B~'8IZ'GN3fEq-Ye\ KӡNa򁉸JGI4O) Ȇʞc*) F±7^q6h[ăkɦ!*:,g-'>jt{{ X4AS6K4k .A61bEhHؒ`7jy[]|^g|ADLQ)?Hg-nD.`e cd8ly,H0ZV"4)G2MXS@ܐ^hsh@h*Oف1}aәP+^.4M"@lHly84HXˍ>ƫ>;tw)wRQL#6L 60^^8/cIf೘GC iNxT˒ +\>i!'=ߑ* J 𫶒RK\EYϢ<\k5@ZYuc!‡MƈVAy iqn1x^xy)"\dtnCl1|cT]-@s rtT[1! kmk)$S<6OyXan4D0Sb5T5t/Ac§u2}`ڏO #%]EWciän@yO:$k8r|!ltr4&Hsn'-RI~&|E7s~)./0MNs%'2cO):0nR ٝ+C|ݯ9 /X՞e}OE|9L7rG/sِ6uZJ4m}0gHnk|>^Xy|Cd>#D6ָ~vh:iǪ嘡iKytܠ9)oQQtl: '?b;Y|-OVx iam": "^0.13.2",*=6.9.0'} '@babel/compat-data@7.29.0': resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==} engines: {node: '>=6.9.0'} '@babel/core@7.29.0': resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==} engines: {node: '>=6.9.0'} '@babel/generator@7.29.1': resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==} engines: {node: '>=6.9.0'} '@babel/helper-compilation-targets@7.28.6': resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==} engines: {node: '>=6.9.0'} '@babel/helper-globals@7.28.0': resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==} engines: {node: '>=6.9.0'} '@babel/helper-module-imports@7.28.6': resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==} engines: {node: '>=6.9.0'} '@babel/helper-module-transforms@7.28.6': resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==} engines: {node: '>=6.9.0'} peerDependencies: '@babel/core': ^7.0.0 '@babel/helper-plugin-utils@7.28.6': resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==} engines: {node: '>=6.9.0'} '@babel/helper-string-parser@7.27.1': resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==} engines: {node: '>=6.9.0'} '@babel/helper-validator-identifier@7.28.5': resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==} engines: {node: '>=6.9.0'} '@babel/helper-validator-option@7.27.1': resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==} engines: {node: '>=6.9.0'} '@babel/helpers@7.29.2': resolution: {integrity: sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw==} engines: {node: '>=6.9.0'} '@babel/parser@7.29.2': resolution: {integrity: sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==} engines: {node: '>=6.0.0'} hasBin: true '@babel/plugin-syntax-jsx@7.28.6': resolution: {integrity: sha512-wgEmr06G6sIpqr8YDwA2dSRTE3bJ+V0IfpzfSY3Lfgd7YWOaAdlykvJi13ZKBt8cZHfgH1IXN+CL656W3uUa4w==} engines: {node: '>=6.9.0'} peerDependencies: '@babel/core': ^7.0.0-0 '@babel/plugin-syntax-typescript@7.28.6': resolution: {integrity: sha512-+nDNmQye7nlnuuHDboPbGm00Vqg3oO8niRRL27/4LYHUsHYh0zJ1xWOz0uRwNFmM1Avzk8wZbc6rdiYhomzv/A==} engines: {node: '>=6.9.0'} peerDependencies: '@babel/core': ^7.0.0-0 '@babel/plugin-transform-react-jsx-self@7.27.1': resolution: {integrity: sha512-6UzkCs+ejGdZ5mFFC/OCUrv028ab2fp1znZmCZjAOBKiBK2jXD1O+BPSfX8X2qjJ75fZBMSnQn3Rq2mrBJK2mw==} engines: {node: '>=6.9.0'} peerDependencies: '@babel/core': ^7.0.0-0 '@babel/plugin-transform-react-jsx-source@7.27.1': resolution: {integrity: sha512-zbwoTsBruTeKB9hSq73ha66iFeJHuaFkUbwvqElnygoNbj/jHRsSeokowZFN3CZ64IvEqcmmkVe89OPXc7ldAw==} engines: {node: '>=6.9.0'} peerDependencies: '@babel/core': ^7.0.0-0 '@babel/runtime@7.29.2': resolution: {integrity: sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==} engines: {node: '>=6.9.0'} '@babel/template@7.28.6': resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==} engines: {node: '>=6.9.0'} '@babel/traverse@7.29.0': resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==} engines: {node: '>=6.9.0'} '@babel/types@7.29.0': resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==} engines: {node: '>=6.9.0'} '@emnapi/core@1.9.2': resolution: {integrity: sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==} '@emnapi/runtime@1.9.2': resolution: {integrity: sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==} '@emnapi/wasi-threads@1.2.1': resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==} '@esbuild/aix-ppc64@0.27.7': resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==} engines: {node: '>=18'} cpu: [ppc64] os: [aix] '@esbuild/android-arm64@0.27.7': resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==} engines: {node: '>=18'} cpu: [arm64] os: [android] '@esbuild/android-arm@0.27.7': resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==} engines: {node: '>=18'} cpu: [arm] os: [android] '@esbuild/android-x64@0.27.7': resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==} engines: {node: '>=18'} cpu: [x64] os: [android] '@esbuild/darwin-arm64@0.27.7': resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==} engines: {node: '>=18'} cpu: [arm64] os: [darwin] '@esbuild/darwin-x64@0.27.7': resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==} engines: {node: '>=18'} cpu: [x64] os: [darwin] '@esbuild/freebsd-arm64@0.27.7': resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==} engines: {node: '>=18'} cpu: [arm64] os: [freebsd] '@esbuild/freebsd-x64@0.27.7': resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==} engines: {node: '>=18'} cpu: [x64] os: [freebsd] '@esbuild/linux-arm64@0.27.7': resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==} engines: {node: '>=18'} cpu: [arm64] os: [linux] '@esbuild/linux-arm@0.27.7': resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==} engines: {node: '>=18'} cpu: [arm] os: [linux] '@esbuild/linux-ia32@0.27.7': resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==} engines: {node: '>=18'} cpu: [ia32] os: [linux] '@esbuild/linux-loong64@0.27.7': resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==} engines: {node: '>=18'} cpu: [loong64] os: [linux] '@esbuild/linux-mips64el@0.27.7': resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==} engines: {node: '>=18'} cpu: [mips64el] os: [linux] '@esbuild/linux-ppc64@0.27.7': resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==} engines: {node: '>=18'} cpu: [ppc64] os: [linux] '@esbuild/linux-riscv64@0.27.7': resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==} engines: {node: '>=18'} cpu: [riscv64] os: [linux] '@esbuild/linux-s390x@0.27.7': resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==} engines: {node: '>=18'} cpu: [s390x] os: [linux] '@esbuild/linux-x64@0.27.7': resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==} engines: {node: '>=18'} cpu: [x64] os: [linux] '@esbuild/netbsd-arm64@0.27.7': resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==} engines: {node: '>=18'} cpu: [arm64] os: [netbsd] '@esbuild/netbsd-x64@0.27.7': resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==} engines: {node: '>=18'} cpu: [x64] os: [netbsd] '@esbuild/openbsd-arm64@0.27.7': resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==} engines: {node: '>=18'} cpu: [arm64] os: [openbsd] '@esbuild/openbsd-x64@0.27.7': resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==} engines: {node: '>=18'} cpu: [x64] os: [openbsd] '@esbuild/openharmony-arm64@0.27.7': resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==} engines: {node: '>=18'} cpu: [arm64] os: [openharmony] '@esbuild/sunos-x64@0.27.7': resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==} engines: {node: '>=18'} cpu: [x64] os: [sunos] '@esbuild/win32-arm64@0.27.7': resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==} engines: {node: '>=18'} cpu: [arm64] os: [win32] '@esbuild/win32-ia32@0.27.7': resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==} engines: {node: '>=18'} cpu: [ia32] os: [win32] '@esbuild/win32-x64@0.27.7': resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==} engines: {node: '>=18'} cpu: [x64] os: [win32] '@floating-ui/core@1.7.5': resolution: {integrity: sha512-1Ih4WTWyw0+lKyFMcBHGbb5U5FtuHJuujoyyr5zTaWS5EYMeT6Jb2AuDeftsCsEuchO+mM2ij5+q9crhydzLhQ==} '@floating-ui/dom@1.7.6': resolution: {integrity: sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==} '@floating-ui/react-dom@2.1.8': resolution: {integrity: sha512-cC52bHwM/n/CxS87FH0yWdngEZrjdtLW/qVruo68qg+prK7ZQ4YGdut2GyDVpoGeAYe/h899rVeOVm6Oi40k2A==} peerDependencies: react: '>=16.8.0' react-dom: '>=16.8.0' '@floating-ui/react-native@0.10.9': resolution: {integrity: sha512-8lLF/hrfCLPSeMljMbFi/cxVjtFTZyg1XHFiuZtXirbBiEfTvCgD0a1YUo2fpG4wa9Fa8Nz4HSq4TmdV+JuxwQ==} peerDependencies: react: '>=16.8.0' react-native: '>=0.64.0' '@floating-ui/utils@0.2.11': resolution: {integrity: sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==} '@hanzogui/adapt@3.0.0': resolution: {integrity: sha512-vUkLM3wDHjHoLwU1oJSSjduIrm7aA7BDkBwa3Aemlo2g5NRUnPIg41SIbQMpBL2BXT7WkBrBO6+0LgLzu7ECpw==} peerDependencies: react: '>=19' '@hanzogui/adapt@3.0.1': resolution: {integrity: sha512-9LkU3jR/t4yWr4Psr9JrwXjj972n6VkWORkKUQ/uL8qOHk+PG93JKAhwA+fdv3JKZXNz46vt9r10gbmWfPuvUw==} peerDependencies: react: '>=19' '@hanzogui/animate-presence@3.0.0': resolution: {integrity: sha512-7y30myyquxqNjsYa7hBWkegK9RB9US+W+tM7v1aFVnRsfNYOhXdG8O5xwPcANlb1CadfbnBN978hW5kMcK22cg==} peerDependencies: react: '>=19' '@hanzogui/animate-presence@3.0.1': resolution: {integrity: sha512-V2GFvfGNAl20uCW2QlXyhbJBwlgLEHn9hfA6dmlzLNpV/CrZd6Uo3o674YvEGZuHeODrF7I5EMeHAi6YhqLu+Q==} peerDependencies: react: '>=19' '@hanzogui/animate@3.0.0': resolution: {integrity: sha512-v6Hg3Z8EhvmFSAGdI6xOdGUlWNkHcT3eX3oSlL8Ftdk9h1hwBsaDMCQj/zFh9napTKJk1OGsiGwOs/uzP1CQKQ==} peerDependencies: react: '>=19' '@hanzogui/animate@3.0.1': resolution: {integrity: sha512-p8lr+dhZRpLUBqK7vfXvwhUOKmL9HhnUpNieXZfW/NapBDOQXfoNMbo7sPLGr9/tysQZOuznt9RVsX3Fm9072w==} peerDependencies: react: '>=19' '@hanzogui/animation-helpers@3.0.0': resolution: {integrity: sha512-Yauco+gnstjdKJ3F0gOVk8LAVxY59BCYSPcK4S/wpmi0fG8Si05paTY++2hj/I5sqap6BfHDeFFS5BA7TfAasQ==} '@hanzogui/animations-react-native@3.0.0': resolution: {integrity: sha512-a+L/JpOwNNfndePzNtWPbyR1aRVe7XdamDncaHStRAS4f2qhY2iBexl390Vy69kA3HUuYAvK4kvHGrXlVJ2TCg==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/compose-refs@3.0.0': resolution: {integrity: sha512-VNhuodKZOA9FWLVe4mOTrB8dnO9VPc5wDQcuYqiaxCUvAWRiINIDt5HUqqLfXF74O8HYfWozB8YW+5GwtvmKww==} peerDependencies: react: '>=19' '@hanzogui/compose-refs@3.0.1': resolution: {integrity: sha512-91/e4LZSr3y4klE0wBi+eo7vpAPPXk3iMuyhP8V7RUF9uvORJP+GWg7Ft4mNR5Cjlxj7jB+adjM9L4i0pNaAOA==} peerDependencies: react: '>=19' '@hanzogui/constants@3.0.0': resolution: {integrity: sha512-slwCD3UCbGcaU/liHx8Ym4JjcsgzvsBRkkPuzpJEvGfImj1OgQ1fQbptEhrGxHrYu8OtoAKCwWxt/FABI+ph2A==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/constants@3.0.1': resolution: {integrity: sha512-+4bSwhyHW1XI4cNAciH+6GODOvREpIt2APFzYalpjJzybULhmmss6kUAJJuLDTnNZIrrBpqRzLs6ly+5I+QEOQ==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/core@3.0.0': resolution: {integrity: sha512-KC1w/NiWsam+clMG68hhEv1Yxqii/N+gBy6602XLah7ELCm34QZWSZsoEpW1gtOP7OteRbslFn5uMwYTexZPng==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/core@3.0.1': resolution: {integrity: sha512-gnBPobWQIC1vk3lJ86sC85+Hy72msx4FTMYoden9hVempDjiV9CVX7hHsFI8lgLpkzY+dheRttCaH/4FZDzh1A==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/create-context@3.0.0': resolution: {integrity: sha512-XHK8efLfnIAYZVxvV61E1HM9YlPu1N9LW7RI9qo3ipg0LANbWf74PkFIMkl1ZYw3KPnZvLpIH4uH/Dr5O/jb8w==} peerDependencies: react: '>=19' '@hanzogui/create-context@3.0.1': resolution: {integrity: sha512-5GGc3nrLt3eNcjQYDl2f6osC4jQoaOaubaFvUfAJ9vmyNYnVIDzQJT+3MNCYTTirZwWWVIOty9ZYXH+qjolOYg==} peerDependencies: react: '>=19' '@hanzogui/dialog@3.0.2': resolution: {integrity: sha512-UXxQkb0huyo03RyFm7S17HLlj6zlE7/WVlysbN7lQd/mgcCbqolywArybDZr/YO3Rx9wXwO3B8ErN+BUBeQABw==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/dismissable@3.0.0': resolution: {integrity: sha512-x7BDuG6ISC+x0+YdeJAGEAD1i3Ev7gOUNtsvyQIX6bPhBDQPh5d3WwPXF2JzzXQOiuyW3Btj7GVFle93XbeRRA==} peerDependencies: react: '>=19' react-dom: '*' '@hanzogui/dismissable@3.0.1': resolution: {integrity: sha512-RJujfW/MYdfj4iQe6+ZkpU6qu7KitUETMJMIcEFROw9xww0xnPey4z1D6SQfZYkikT4HwPOpT83JBr1v+9e1GQ==} peerDependencies: react: '>=19' react-dom: '*' '@hanzogui/floating@3.0.0': resolution: {integrity: sha512-k9Qaf95BHphp+XkNLUeByVNbd+UXn5WDZIWjHQ8MpkteSYNVAAC4qTB2z9t1/1sjELRfEGm70lJFXVoo3ky9dg==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/floating@3.0.1': resolution: {integrity: sha512-Do0HvrSSsBpngpBKCOHxqWAn5zlmngCK2KT9FMTT03lyNUHygLkak5TjEO2LRsCn+jr9lPfz6NJxTl5xW9dvew==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/focus-scope@3.0.0': resolution: {integrity: sha512-ZLEWY722XuDbRPiBxWkbeDUafF/vfJpOPLQOLNzR4T8Vcc72thP6PV0o/X77quShaj/h4rb/QhQ5CkeJ0U9LMQ==} peerDependencies: react: '>=19' '@hanzogui/focus-scope@3.0.1': resolution: {integrity: sha512-N/c+Gd8UwaMQWJIFJYHGvmiygSHa6685vlVOxx2WduoQoKPQe/h1q6qiFrGPZJwKz5Me5IBNpw9aT4HFpUwiCg==} peerDependencies: react: '>=19' '@hanzogui/get-button-sized@3.0.0': resolution: {integrity: sha512-iNWUpiM1UG0/hW5noxojSO7wXLUQ4ocmWS4J8uxqk9xoINwTJsnSwo0EQY3U7j83tT5xZ6tvUbu29KgNAH6yoA==} peerDependencies: react: '>=19' '@hanzogui/get-font-sized@3.0.0': resolution: {integrity: sha512-OgHKfW7Fdfj4HGc5TqIfb8AFTv66wDnnGNxNGW69FY30ICgPknjkVCIS/J9oPyVdOa4ZxHtpCgvryqLteB8EPA==} peerDependencies: react: '>=19' '@hanzogui/get-font-sized@3.0.1': resolution: {integrity: sha512-MWISibmdTUCGtPHl4KiQrwoVg051S0v87J6JkwkonYNYF/iIxGEfgSaa4brcoZu/8+F3gqGhUylA9iMx2fBeDA==} peerDependencies: react: '>=19' '@hanzogui/get-token@3.0.0': resolution: {integrity: sha512-w4BwQFTK8w/eOqGO/VnyGwCMPRdIGpeIfwWD6MOYV3uTQgc2Wl1TGjw2UiHEluwYBBHlKskejYBox3eC9WSqjA==} peerDependencies: react: '>=19' '@hanzogui/get-token@3.0.1': resolution: {integrity: sha512-0VG4I1xV0k9WR0IZxoBToC/xNl/DL8YczI0+c2KpIWvOVMQ1uy2LqohVFcmhuqqkgmocT5+kwf80ltUK7H4oOQ==} peerDependencies: react: '>=19' '@hanzogui/helpers@3.0.0': resolution: {integrity: sha512-PAMB5c4jxT/SlMbQ9hZdBTpcgK7UQhyy0i12t2Zw5y/kYT9rSxinbKcQ0bYvaUi7J0YoJdOMd65i7gLaw48v1A==} peerDependencies: react: '>=19' '@hanzogui/helpers@3.0.1': resolution: {integrity: sha512-w6u+31/YjS0JG+5p1dFUv4rKzTsbYlZu1aab6PVYoDlLm+gjlIQxnEoNTkuYHotETf/LUQ9QyFD6fL2qVwq5QA==} peerDependencies: react: '>=19' '@hanzogui/is-equal-shallow@3.0.0': resolution: {integrity: sha512-M0tkcFUiBjcFkX76FhZknIyGuGgP87wRxTMSIgaUYhjb63qr0Ffj69UqaudrYtQXZc1hC8/Og5psKWXXKVNFRA==} peerDependencies: react: '>=19' '@hanzogui/native@3.0.0': resolution: {integrity: sha512-e0CebWkvwCR2DfSXLRJGvHZO5YDQLZM/qtj5XHzVqmSSuG1SCQbH7CwLHSpX/Xae8U8TMuh839lp6tFE1Kyt0Q==} peerDependencies: '@react-native-menu/menu': '>=2.0.0' burnt: '>=0.12.0' react: '*' react-native: '*' react-native-gesture-handler: '>=2.0.0' react-native-ios-context-menu: '>=3.0.0' react-native-ios-utilities: '>=5.0.0' react-native-keyboard-controller: '>=1.0.0' react-native-safe-area-context: '>=4.0.0' react-native-teleport: '>=0.5.0' react-native-worklets-core: '>=1.0.0' sf-symbols-typescript: '*' zeego: '>=3.0.0' peerDependenciesMeta: '@react-native-menu/menu': optional: true burnt: optional: true react-native-gesture-handler: optional: true react-native-ios-context-menu: optional: true react-native-ios-utilities: optional: true react-native-keyboard-controller: optional: true react-native-safe-area-context: optional: true react-native-teleport: optional: true react-native-worklets-core: optional: true sf-symbols-typescript: optional: true zeego: optional: true '@hanzogui/normalize-css-color@3.0.0': resolution: {integrity: sha512-PLU5+kEdU7109B8ItbSKFknicrj6475O3gX64CV4EQouGXJ9LrnWlet2A4i9fQcMw4OFJH+LCgG6ZOTr/611Mg==} '@hanzogui/polyfill-dev@3.0.0': resolution: {integrity: sha512-opa8TrUTwzTPWCpKlxs5zN1vG8cQSVMhd/TW6/3lfo3n30HnNyCnN6PcrqiB5oovRrv/GVqbe+6cArDAzSZCFg==} '@hanzogui/polyfill-dev@3.0.1': resolution: {integrity: sha512-OdTDP3EpqDRaAw9vOHS/Lsr/KXdNKR1125CQyK6TcKr1g6ZzWu5SxZ0FWFxgAXtqhRSetpMlXCaSHbQgobuXGw==} '@hanzogui/popover@3.0.1': resolution: {integrity: sha512-8vQtXOdvMGkohWl4p7TwlDV4WJSeCPS/aOYjqI4EXfvGvGuajPixGfXbIbnJO1d2zhIWiYi57wKuelxibOgOWQ==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/popover@3.0.2': resolution: {integrity: sha512-9hHLe0WvII/fiX36iIBiBlsdyLwnH7eWjnlN9NzaMmn6PVdfaja9nr7mzN4VrR4KeDumiuWpia11M8CyX9S/hw==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/popper@3.0.0': resolution: {integrity: sha512-UP8KsWpFbk5iccCcOZlKPZR9Z9NlUH/XC9gABse0kQ+mbjeipbdjcfzjEPMa30YuLvjUJDP7BTaAmU8GimwR0g==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/popper@3.0.1': resolution: {integrity: sha512-JVI9WzhONVtz/2GfN4oWofbWAh43wYmS9UOilbLHxq0pGkvTe5+TAayK1eHA4EiLU0BVeaTa5woZa8Odcye+jQ==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/portal@3.0.0': resolution: {integrity: sha512-ecoJgOMhFq23Y77dXIbzUhJaKdu9IFRqZORUrmDrd2IUjgbZNswdM+USwKyFfyk2oZwWaeRy0jpDcogFzfN+rg==} peerDependencies: react: '>=19' react-dom: '*' react-native: '*' '@hanzogui/portal@3.0.1': resolution: {integrity: sha512-EGolG8L1uK7OQuL+oPweXGqZQ7XEdt59IIAcc3dzBRM22OBB4cg9FJx6I7DZQCS+AIU/SkLgjFSRQRby84OdUw==} peerDependencies: react: '>=19' react-dom: '*' react-native: '*' '@hanzogui/react-native-media-driver@3.0.0': resolution: {integrity: sha512-/2C5G7RwOGmXHY8ksoZRdF3CvgMYTC3e2eRUaiompg0OrRiHh8ahq9d6S+RoR5QaiR5kZ3l8+zYxww1NoJHkCA==} peerDependencies: react-native: '*' '@hanzogui/react-native-use-pressable@3.0.0': resolution: {integrity: sha512-xL/ZeJ5yZ3IzH1bGrQbru5GNOrm1btRsv+xvm2d5crLPrHiKQO1y3rBDCkOBN79dsRGA8q/ttFmjtpqgFjZFcA==} peerDependencies: react: '>=19' '@hanzogui/remove-scroll@3.0.0': resolution: {integrity: sha512-tfJ2j410lPGmC4dxl+X53c3e4DasdkoRGW0NBi+L77e6TiCq/PjfnGiqj6p9NIlql+0yQP4jjimgA02090QwCA==} peerDependencies: react: '>=19' '@hanzogui/remove-scroll@3.0.1': resolution: {integrity: sha512-LWrMxXVKhKmSOaOolDlSyMML6xPdY4Gkmg63+XD4QKKgWC1YXvp7wuL5KmHi6uSzA+HH9gW1DmnWLG5na7ny5w==} peerDependencies: react: '>=19' '@hanzogui/scroll-view@3.0.0': resolution: {integrity: sha512-kLg2ISt8CrwhzqzI13Pzlzegr0g6r/o9bEaPPpeayohZdlc2uffxxLhHccoishqNcjjgnQx91EjhsDTrNH6KVg==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/scroll-view@3.0.1': resolution: {integrity: sha512-I3VOLrOEMxUCVRpbaFISSRRXqJw5fCraV71hPLWKs6SVxkBXwDvFaieOKoRLYGI+fIEZYPchBjcByqGNJYBWrA==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/sheet@3.0.0': resolution: {integrity: sha512-5AhyaNZQujv8fc9QvlVwKpfbyZWfiA+g2W44HpUMKqRXUYwoPSwHF3bCBTxRTiu/OULb6pd3Rpm7pLU7P/ZwxQ==} peerDependencies: react: '>=19' react-native: '*' react-native-gesture-handler: '>=2.0.0' peerDependenciesMeta: react-native-gesture-handler: optional: true '@hanzogui/sheet@3.0.1': resolution: {integrity: sha512-VTDmLVVoI1bZdzH0xvgEATJ3BJTQGx5mwCMyYuItOi1KxURyLyPl3tvZ3QewiVAwGPbS9kfO676MWtk6azL7AQ==} peerDependencies: react: '>=19' react-native: '*' react-native-gesture-handler: '>=2.0.0' peerDependenciesMeta: react-native-gesture-handler: optional: true '@hanzogui/simple-hash@3.0.0': resolution: {integrity: sha512-+6sbmtiL+C6MAkzHMRYJJMuXDrNp/3LpM1aatB4qL+vN9U1JBaL0aes8m1E7nju5g6WWDk3DKU3IP00MS3ANtA==} '@hanzogui/stacks@3.0.0': resolution: {integrity: sha512-2UvhtURf2ymXblcE83n2eVgqW0Ak/1XbsCaoeuvyeny7ZOls0acg70qamUj2YSctoNdPeT8Nbz2v3Mex6BNDTQ==} peerDependencies: react: '>=19' '@hanzogui/stacks@3.0.1': resolution: {integrity: sha512-ll8E6IyRycexrdx05GP0tzcShQp3JL2JgsqzR0Gypbar++r/IkVAXK5cYNws+Uy9/ysTef31yjaEX91AfA3PDg==} peerDependencies: react: '>=19' '@hanzogui/start-transition@3.0.0': resolution: {integrity: sha512-IvfmuVxQHz0jPsESFzYd4wncwo+eR0g/luET0xUn9BMqO1OFKVFWldgjer7l9e/BlGhxE/WCPK8ehwYy6DR6wg==} peerDependencies: react: '>=19' '@hanzogui/text@3.0.1': resolution: {integrity: sha512-jOaLw2KE8pa1FqlMUXTIJB0TvU93ktV3W95l2aXEsHPfJG17iJNDyzhrv6pnYFabXick0f58brhvx9KN0kbDeQ==} peerDependencies: react: '>=19' '@hanzogui/text@3.0.2': resolution: {integrity: sha512-/0dqMi97rpiZFiezw1pkpmGUF9bluD/ee4uAAI2Qwi6QeBzFjWIupqRhZFQUU7W8PbSffh8O80FFL4Jqp5y7lw==} peerDependencies: react: '>=19' '@hanzogui/timer@3.0.0': resolution: {integrity: sha512-4J15nfU1ufwMbqNDzDyIu+CEc49BIs/BHz5iLycswtOVK/O/Adi/JBFQqHsD1gdWyasTF1dnBWnNF5qTKX8A3Q==} '@hanzogui/tooltip@3.0.2': resolution: {integrity: sha512-DMetn8O6RTaKNzsvwUnsrYoNYKK8GlFP6gsgF8hd9f+wYbHNsamug+mMU8aeIwibBYe8XUnPHhvgOyZRaFzNMw==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/types@3.0.0': resolution: {integrity: sha512-Ekhug4WbtytdFLulJfjF0dFCt8Z/t/HUt4Y9goIN/kzBWXUI3D3Pc5lrWZ3L3EQDaiDlPhv/H3Yc42BmBHj0TQ==} '@hanzogui/use-async@3.0.0': resolution: {integrity: sha512-xPjW4C2dxBuko5MDflzgO/L+Ao/q7GH7JSFJyTwBcPHJNTHMcniTJBINA8FGPR6y/4nJs6M2WNCXrgzNVsg3/w==} peerDependencies: react: '>=19' '@hanzogui/use-callback-ref@3.0.0': resolution: {integrity: sha512-dsOCsnGdACsiQhmLZJ8sb1pVGLfd9Di1yD8txWOd3Xp/l2F13JggoXT8ZYtQntVVjzP9FUXMZ78svipVo/l8wg==} peerDependencies: react: '>=19' '@hanzogui/use-constant@3.0.0': resolution: {integrity: sha512-wxii+E1A91yG26muXlhhmTfNDDhWHadW3JnQjjapQmYIL8V1HbuBFJOiTJfwDaCoEcEC4t9QiLvZV6NAKtOshw==} peerDependencies: react: '>=19' '@hanzogui/use-controllable-state@3.0.0': resolution: {integrity: sha512-5YRlczZMQ5S0BGm1NtE3kdIcpz5U1bP1cCO9caNg9NXwaE7Ind2g1o32del6lPA4VdVHr1qrCTyCQMINfEHg6g==} peerDependencies: react: '>=19' '@hanzogui/use-controllable-state@3.0.1': resolution: {integrity: sha512-V8sGRLCVrrgePNEjtgVZoaxLItVH/oha7rtsClhLIuW+VVZNvD9eo5WvlonNBFYPCmzMtLnFcgo5dLFrlBZk+w==} peerDependencies: react: '>=19' '@hanzogui/use-did-finish-ssr@3.0.0': resolution: {integrity: sha512-XM7S8dNifD/PJL7GRzThu9t9cP6upypnSjcVD7F57spNxJGOFR9uR5WuqQDUoQ6Gr4JnGpKvML4nGsT86iEcHQ==} peerDependencies: react: '>=19' '@hanzogui/use-element-layout@3.0.0': resolution: {integrity: sha512-uFaQI6VhVZ7WUJ4UukAR6VdKq3SHHxU2wtzjkhInBBrlU02lpdsbw+SH+GK+pgYq6gD+d4Y13hq0rXtXLnbjtA==} peerDependencies: react: '>=19' '@hanzogui/use-escape-keydown@3.0.0': resolution: {integrity: sha512-hTcxjA/7xl4/8rI+5O8DbtiufxczNPPIzGCEkUG9WS7qWREzf0QndbD3xJ5y85xmSerCN6Dxo18W0uqcydXjow==} peerDependencies: react: '>=19' '@hanzogui/use-event@3.0.0': resolution: {integrity: sha512-8qHKaq+jaUnWnIgjm6EtVKRNUOZgUspXmhL+3bvW2ikdFFT/leA5xD7Nq0RaUIgTf42h70zdOoO/u6mioZSTLw==} peerDependencies: react: '>=19' '@hanzogui/use-force-update@3.0.0': resolution: {integrity: sha512-yIwp2byfvhW6wnHNuVYW0amc9KvbOydUzD4TBHbH2lZ+jRAAAloEgBitGNEyUcEtWbLTLfTPDy1SHRO2Shp45Q==} peerDependencies: react: '>=19' '@hanzogui/use-keyboard-visible@3.0.0': resolution: {integrity: sha512-KIPtU+bM4KopJlS9P7pLNIPoLjIm4707AARrBfew6HDVEYjRZ7Fpg1Wtc9SBnU/fqFoalPIRFupfdlIutsGdpQ==} peerDependencies: react: '>=19' react-native: '*' '@hanzogui/use-presence@3.0.0': resolution: {integrity: sha512-KtoX36/y0XC5QQom/doayuQadcm8G4Vdb6Qsfm3tWArOwZdGCkR6sHbs/Zkb7qNyV6r9waIS9rT5BWr+pkxQEA==} peerDependencies: react: '>=19' '@hanzogui/web@3.0.0': resolution: {integrity: sha512-WQaZin0ixjf0lRM/0bFGrvfgXOWLz+ssiD3QP+jECwfZKLeWblXOaiLW5Bh8w3dJSsc6i7E+XX9KatGIZWMwDA==} peerDependencies: react: '>=19' react-dom: '*' react-native: '*' '@hanzogui/web@3.0.1': resolution: {integrity: sha512-j90WDtcVsoZRYtsISjhHUJ/BSS98udO3Zuo7/foDXLC/3ct1Ed7Qwrs/af+a38E5JhjYOZOz5gO5PkpaNtZdFg==} peerDependencies: react: '>=19' react-dom: '*' react-native: '*' '@hanzogui/z-index-stack@3.0.0': resolution: {integrity: sha512-Xj4iCFRQU60rY35YH039EEYFo+Fkynxb2fyGZanxTHGKtY+gK044fas6cWj5W2iJn/MC3NHHOMXczOmgGTE+Qg==} peerDependencies: react: '>=19' '@hanzogui/z-index-stack@3.0.1': resolution: {integrity: sha512-ZZKLAs1e5I3wNpOfTQS89H0WAUrv3cU2+A5QsaDWx1wK9LsMe7jEaGLHTeJFW7SYfUSVW3ymbD2kYg16gmsDXg==} peerDependencies: react: '>=19' '@isaacs/ttlcache@1.4.1': resolution: {integrity: sha512-RQgQ4uQ+pLbqXfOmieB91ejmLwvSgv9nLx6sT6sD83s7umBypgg+OIBOBbEUiJXrfpnp9j0mRhYYdzp9uqq3lA==} engines: {node: '>=12'} '@jest/schemas@29.6.3': resolution: {integrity: sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} '@jest/types@29.6.3': resolution: {integrity: sha512-u3UPsIilWKOM3F9CXtrG8LEJmNxwoCQC/XVj4IKYXvvpx7QIi/Kg1LI5uDmDpKlac62NUtX7eLjRh+jVZcLOzw==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} '@jridgewell/gen-mapping@0.3.13': resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==} '@jridgewell/remapping@2.3.5': resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==} '@jridgewell/resolve-uri@3.1.2': resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==} engines: {node: '>=6.0.0'} '@jridgewell/source-map@0.3.11': resolution: {integrity: sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==} '@jridgewell/sourcemap-codec@1.5.5': resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==} '@jridgewell/trace-mapping@0.3.31': resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==} '@luxfi/ui@7.3.0': resolution: {integrity: sha512-7aOdHq1UuwfK4CFBUnlN37lFYpYKorrRPR1RqzPjamL4mEJUF5UJ5UTiq3No3SYdK5B3omDs5EqVDAC3CUvDkg==} peerDependencies: '@hanzogui/core': ^3.0.6 react: '>=18' react-dom: ^18.0.0 || ^19.0.0 '@napi-rs/wasm-runtime@1.1.3': resolution: {integrity: sha512-xK9sGVbJWYb08+mTJt3/YV24WxvxpXcXtP6B172paPZ+Ts69Re9dAr7lKwJoeIx8OoeuimEiRZ7umkiUVClmmQ==} peerDependencies: '@emnapi/core': ^1.7.1 '@emnapi/runtime': ^1.7.1 '@oxc-project/types@0.124.0': resolution: {integrity: sha512-VBFWMTBvHxS11Z5Lvlr3IWgrwhMTXV+Md+EQF0Xf60+wAdsGFTBx7X7K/hP4pi8N7dcm1RvcHwDxZ16Qx8keUg==} '@radix-ui/number@1.1.1': resolution: {integrity: sha512-MkKCwxlXTgz6CFoJx3pCwn07GKp36+aZyu/u2Ln2VrA5DcdyCZkASEDBTd8x5whTQQL5CiYf4prXKLcgQdv29g==} '@radix-ui/primitive@1.1.3': resolution: {integrity: sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg==} '@radix-ui/react-accordion@1.2.12': resolution: {integrity: sha512-T4nygeh9YE9dLRPhAHSeOZi7HBXo+0kYIPJXayZfvWOWA0+n3dESrZbjfDPUABkUNym6Hd+f2IR113To8D2GPA==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-arrow@1.1.7': resolution: {integrity: sha512-F+M1tLhO+mlQaOWspE8Wstg+z6PwxwRd8oQ8IXceWz92kfAmalTRf0EjrouQeo7QssEPfCn05B4Ihs1K9WQ/7w==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-avatar@1.1.11': resolution: {integrity: sha512-0Qk603AHGV28BOBO34p7IgD5m+V5Sg/YovfayABkoDDBM5d3NCx0Mp4gGrjzLGes1jV5eNOE1r3itqOR33VC6Q==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-checkbox@1.3.3': resolution: {integrity: sha512-wBbpv+NQftHDdG86Qc0pIyXk5IR3tM8Vd0nWLKDcX8nNn4nXFOFwsKuqw2okA/1D/mpaAkmuyndrPJTYDNZtFw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-collapsible@1.1.12': resolution: {integrity: sha512-Uu+mSh4agx2ib1uIGPP4/CKNULyajb3p92LsVXmH2EHVMTfZWpll88XJ0j4W0z3f8NK1eYl1+Mf/szHPmcHzyA==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-collection@1.1.7': resolution: {integrity: sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-compose-refs@1.1.2': resolution: {integrity: sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-context@1.1.2': resolution: {integrity: sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-context@1.1.3': resolution: {integrity: sha512-ieIFACdMpYfMEjF0rEf5KLvfVyIkOz6PDGyNnP+u+4xQ6jny3VCgA4OgXOwNx2aUkxn8zx9fiVcM8CfFYv9Lxw==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-dialog@1.1.15': resolution: {integrity: sha512-TCglVRtzlffRNxRMEyR36DGBLJpeusFcgMVD9PZEzAKnUs1lKCgX5u9BmC2Yg+LL9MgZDugFFs1Vl+Jp4t/PGw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-direction@1.1.1': resolution: {integrity: sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-dismissable-layer@1.1.11': resolution: {integrity: sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-dropdown-menu@2.1.16': resolution: {integrity: sha512-1PLGQEynI/3OX/ftV54COn+3Sud/Mn8vALg2rWnBLnRaGtJDduNW/22XjlGgPdpcIbiQxjKtb7BkcjP00nqfJw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-focus-guards@1.1.3': resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-focus-scope@1.1.7': resolution: {integrity: sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-id@1.1.1': resolution: {integrity: sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-label@2.1.8': resolution: {integrity: sha512-FmXs37I6hSBVDlO4y764TNz1rLgKwjJMQ0EGte6F3Cb3f4bIuHB/iLa/8I9VKkmOy+gNHq8rql3j686ACVV21A==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-menu@2.1.16': resolution: {integrity: sha512-72F2T+PLlphrqLcAotYPp0uJMr5SjP5SL01wfEspJbru5Zs5vQaSHb4VB3ZMJPimgHHCHG7gMOeOB9H3Hdmtxg==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-popper@1.2.8': resolution: {integrity: sha512-0NJQ4LFFUuWkE7Oxf0htBKS6zLkkjBH+hM1uk7Ng705ReR8m/uelduy1DBo0PyBXPKVnBA6YBlU94MBGXrSBCw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-portal@1.1.9': resolution: {integrity: sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-presence@1.1.5': resolution: {integrity: sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-primitive@2.1.3': resolution: {integrity: sha512-m9gTwRkhy2lvCPe6QJp4d3G1TYEUHn/FzJUtq9MjH46an1wJU+GdoGC5VLof8RX8Ft/DlpshApkhswDLZzHIcQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-primitive@2.1.4': resolution: {integrity: sha512-9hQc4+GNVtJAIEPEqlYqW5RiYdrr8ea5XQ0ZOnD6fgru+83kqT15mq2OCcbe8KnjRZl5vF3ks69AKz3kh1jrhg==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-progress@1.1.8': resolution: {integrity: sha512-+gISHcSPUJ7ktBy9RnTqbdKW78bcGke3t6taawyZ71pio1JewwGSJizycs7rLhGTvMJYCQB1DBK4KQsxs7U8dA==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-radio-group@1.3.8': resolution: {integrity: sha512-VBKYIYImA5zsxACdisNQ3BjCBfmbGH3kQlnFVqlWU4tXwjy7cGX8ta80BcrO+WJXIn5iBylEH3K6ZTlee//lgQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-roving-focus@1.1.11': resolution: {integrity: sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-select@2.2.6': resolution: {integrity: sha512-I30RydO+bnn2PQztvo25tswPH+wFBjehVGtmagkU78yMdwTwVf12wnAOF+AeP8S2N8xD+5UPbGhkUfPyvT+mwQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-slider@1.3.6': resolution: {integrity: sha512-JPYb1GuM1bxfjMRlNLE+BcmBC8onfCi60Blk7OBqi2MLTFdS+8401U4uFjnwkOr49BLmXxLC6JHkvAsx5OJvHw==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-slot@1.2.3': resolution: {integrity: sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-slot@1.2.4': resolution: {integrity: sha512-Jl+bCv8HxKnlTLVrcDE8zTMJ09R9/ukw4qBs/oZClOfoQk/cOTbDn+NceXfV7j09YPVQUryJPHurafcSg6EVKA==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-switch@1.2.6': resolution: {integrity: sha512-bByzr1+ep1zk4VubeEVViV592vu2lHE2BZY5OnzehZqOOgogN80+mNtCqPkhn2gklJqOpxWgPoYTSnhBCqpOXQ==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-tabs@1.1.13': resolution: {integrity: sha512-7xdcatg7/U+7+Udyoj2zodtI9H/IIopqo+YOIcZOq1nJwXWBZ9p8xiu5llXlekDbZkca79a/fozEYQXIA4sW6A==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/react-use-callback-ref@1.1.1': resolution: {integrity: sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-controllable-state@1.2.2': resolution: {integrity: sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-effect-event@0.0.2': resolution: {integrity: sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-escape-keydown@1.1.1': resolution: {integrity: sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-is-hydrated@0.1.0': resolution: {integrity: sha512-U+UORVEq+cTnRIaostJv9AGdV3G6Y+zbVd+12e18jQ5A3c0xL03IhnHuiU4UV69wolOQp5GfR58NW/EgdQhwOA==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-layout-effect@1.1.1': resolution: {integrity: sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-previous@1.1.1': resolution: {integrity: sha512-2dHfToCj/pzca2Ck724OZ5L0EVrr3eHRNsG/b3xQJLA2hZpVCS99bLAX+hm1IHXDEnzU6by5z/5MIY794/a8NQ==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-rect@1.1.1': resolution: {integrity: sha512-QTYuDesS0VtuHNNvMh+CjlKJ4LJickCMUAqjlE3+j8w+RlRpwyX3apEQKGFzbZGdo7XNG1tXa+bQqIE7HIXT2w==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-use-size@1.1.1': resolution: {integrity: sha512-ewrXRDTAqAXlkl6t/fkXWNAhFX9I+CkKlw6zjEwk86RSPKwZr3xpBRso655aqYafwtnbpHLj6toFzmd6xdVptQ==} peerDependencies: '@types/react': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@radix-ui/react-visually-hidden@1.2.3': resolution: {integrity: sha512-pzJq12tEaaIhqjbzpCuv/OypJY/BPavOofm+dbab+MHLajy277+1lLm6JFcGgF5eskJ6mquGirhXY2GD/8u8Ug==} peerDependencies: '@types/react': '*' '@types/react-dom': '*' react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true '@types/react-dom': optional: true '@radix-ui/rect@1.1.1': resolution: {integrity: sha512-HPwpGIzkl28mWyZqG52jiqDJ12waP11Pa1lGoiyUkIEuMLBP0oeK/C89esbXrxsky5we7dfd8U58nm0SgAWpVw==} '@react-native/assets-registry@0.85.0': resolution: {integrity: sha512-zfVwcEunuywcDR6EYSOcyPKzWMR/HXuByjfS4m7//Hs+Qh5r1j5yfDFNeqansNs3LKv+7EFnEEYFCfpLhYTIew==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/codegen@0.85.0': resolution: {integrity: sha512-5CHJkC9UpBxQokGju7gD6W615RO1zR17INuB1PB4kcXNy3rre7tyy6ufct+sllDD6ildRC9A//cyh6TI03+jxA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} peerDependencies: '@babel/core': '*' '@react-native/community-cli-plugin@0.85.0': resolution: {integrity: sha512-OtNdU8xpZxnYmT17gik10eDO47MKYoy8wNlPigxL3lxv/+Hn2cxlvuBHIwoML6PJMgGXpuootOwEyj6MPl7WQQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} peerDependencies: '@react-native-community/cli': '*' '@react-native/metro-config': 0.85.0 peerDependenciesMeta: '@react-native-community/cli': optional: true '@react-native/metro-config': optional: true '@react-native/debugger-frontend@0.85.0': resolution: {integrity: sha512-57m1QfNlusZBV8C8dGx2JXdp0lXz8IWB44E5/NagM3AchMYPXBzWy+unlE/tPfvr7otOSdhRyyPC8Rw2NJuGiw==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/debugger-shell@0.85.0': resolution: {integrity: sha512-bL4JJwlTt4wwUgjOIjkdxyu0pMD9p6OLUJ/VWeG+/T6QhIu4x75mECgzodjOPvhgQ/TwsY4uRe7o2wMEjwShjA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/dev-middleware@0.85.0': resolution: {integrity: sha512-jmiktFPyAZjzMTcyyr1+gnmaCrZH0lrjbbUsRk20p60XPTQ1eQtDLUGG4NQUlt8FzdKDmX7VlwAj8FuVl3Su4g==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/gradle-plugin@0.85.0': resolution: {integrity: sha512-C9+krvr9XtylwPrDUzVjlWh+DrILVYkSHDcWiAnHBaCvyRl8nbaSvzdaapuhOPT76395j0Aj83ENlLaExuhGXQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/js-polyfills@0.85.0': resolution: {integrity: sha512-h2nfIqNEA72Ebdcq5scJg1kyZ01B9xI+NJ2AA8ZpGN8SbxOBNAiZtWEqxzAUe6v5Iu7LE3+1WFBWcMQGtT4zLQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} '@react-native/normalize-color@2.1.0': resolution: {integrity: sha512-Z1jQI2NpdFJCVgpY+8Dq/Bt3d+YUi1928Q+/CZm/oh66fzM0RUl54vvuXlPJKybH4pdCZey1eDTPaLHkMPNgWA==} '@react-native/normalize-colors@0.85.0': resolution: {integrity: sha512-pULHg7h5ogY78oKvbyZM93UucljB3Tvo85o1h4mrfn/G2oQAruLbCWAiVdaI00G2EVdUke3wlOtrlaTez3vZ1A==} '@react-native/virtualized-lists@0.85.0': resolution: {integrity: sha512-QpomR0B/LX/jUNKO3ptjQo0NM+JfBHXbKGRe45LaFpl2Wr6r031CKp5UJ4XAAWq148Do01SI4bFDGAScb0IdpA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} peerDependencies: '@types/react': ^19.2.0 react: '*' react-native: 0.85.0 peerDependenciesMeta: '@types/react': optional: true '@rolldown/binding-android-arm64@1.0.0-rc.15': resolution: {integrity: sha512-YYe6aWruPZDtHNpwu7+qAHEMbQ/yRl6atqb/AhznLTnD3UY99Q1jE7ihLSahNWkF4EqRPVC4SiR4O0UkLK02tA==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [android] '@rolldown/binding-darwin-arm64@1.0.0-rc.15': resolution: {integrity: sha512-oArR/ig8wNTPYsXL+Mzhs0oxhxfuHRfG7Ikw7jXsw8mYOtk71W0OkF2VEVh699pdmzjPQsTjlD1JIOoHkLP1Fg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [darwin] '@rolldown/binding-darwin-x64@1.0.0-rc.15': resolution: {integrity: sha512-YzeVqOqjPYvUbJSWJ4EDL8ahbmsIXQpgL3JVipmN+MX0XnXMeWomLN3Fb+nwCmP/jfyqte5I3XRSm7OfQrbyxw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [darwin] '@rolldown/binding-freebsd-x64@1.0.0-rc.15': resolution: {integrity: sha512-9Erhx956jeQ0nNTyif1+QWAXDRD38ZNjr//bSHrt6wDwB+QkAfl2q6Mn1k6OBPerznjRmbM10lgRb1Pli4xZPw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [freebsd] '@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.15': resolution: {integrity: sha512-cVwk0w8QbZJGTnP/AHQBs5yNwmpgGYStL88t4UIaqcvYJWBfS0s3oqVLZPwsPU6M0zlW4GqjP0Zq5MnAGwFeGA==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm] os: [linux] '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.15': resolution: {integrity: sha512-eBZ/u8iAK9SoHGanqe/jrPnY0JvBN6iXbVOsbO38mbz+ZJsaobExAm1Iu+rxa4S1l2FjG0qEZn4Rc6X8n+9M+w==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [linux] libc: [glibc] '@rolldown/binding-linux-arm64-musl@1.0.0-rc.15': resolution: {integrity: sha512-ZvRYMGrAklV9PEkgt4LQM6MjQX2P58HPAuecwYObY2DhS2t35R0I810bKi0wmaYORt6m/2Sm+Z+nFgb0WhXNcQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [linux] libc: [musl] '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.15': resolution: {integrity: sha512-VDpgGBzgfg5hLg+uBpCLoFG5kVvEyafmfxGUV0UHLcL5irxAK7PKNeC2MwClgk6ZAiNhmo9FLhRYgvMmedLtnQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [ppc64] os: [linux] libc: [glibc] '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.15': resolution: {integrity: sha512-y1uXY3qQWCzcPgRJATPSOUP4tCemh4uBdY7e3EZbVwCJTY3gLJWnQABgeUetvED+bt1FQ01OeZwvhLS2bpNrAQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [s390x] os: [linux] libc: [glibc] '@rolldown/binding-linux-x64-gnu@1.0.0-rc.15': resolution: {integrity: sha512-023bTPBod7J3Y/4fzAN6QtpkSABR0rigtrwaP+qSEabUh5zf6ELr9Nc7GujaROuPY3uwdSIXWrvhn1KxOvurWA==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [linux] libc: [glibc] '@rolldown/binding-linux-x64-musl@1.0.0-rc.15': resolution: {integrity: sha512-witB2O0/hU4CgfOOKUoeFgQ4GktPi1eEbAhaLAIpgD6+ZnhcPkUtPsoKKHRzmOoWPZue46IThdSgdo4XneOLYw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [linux] libc: [musl] '@rolldown/binding-openharmony-arm64@1.0.0-rc.15': resolution: {integrity: sha512-UCL68NJ0Ud5zRipXZE9dF5PmirzJE4E4BCIOOssEnM7wLDsxjc6Qb0sGDxTNRTP53I6MZpygyCpY8Aa8sPfKPg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [openharmony] '@rolldown/binding-wasm32-wasi@1.0.0-rc.15': resolution: {integrity: sha512-ApLruZq/ig+nhaE7OJm4lDjayUnOHVUa77zGeqnqZ9pn0ovdVbbNPerVibLXDmWeUZXjIYIT8V3xkT58Rm9u5Q==} engines: {node: '>=14.0.0'} cpu: [wasm32] '@rolldown/binding-win32-arm64-msvc@1.0.0-rc.15': resolution: {integrity: sha512-KmoUoU7HnN+Si5YWJigfTws1jz1bKBYDQKdbLspz0UaqjjFkddHsqorgiW1mxcAj88lYUE6NC/zJNwT+SloqtA==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [win32] '@rolldown/binding-win32-x64-msvc@1.0.0-rc.15': resolution: {integrity: sha512-3P2A8L+x75qavWLe/Dll3EYBJLQmtkJN8rfh+U/eR3MqMgL/h98PhYI+JFfXuDPgPeCB7iZAKiqii5vqOvnA0g==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [win32] '@rolldown/pluginutils@1.0.0-beta.27': resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==} '@rolldown/pluginutils@1.0.0-rc.15': resolution: {integrity: sha512-UromN0peaE53IaBRe9W7CjrZgXl90fqGpK+mIZbA3qSTeYqg3pqpROBdIPvOG3F5ereDHNwoHBI2e50n1BDr1g==} '@sinclair/typebox@0.27.10': resolution: {integrity: sha512-MTBk/3jGLNB2tVxv6uLlFh1iu64iYOQ2PbdOSK3NW8JZsmlaOh2q6sdtKowBhfw8QFLmYNzTW4/oK4uATIi6ZA==} '@tanstack/history@1.161.6': resolution: {integrity: sha512-NaOGLRrddszbQj9upGat6HG/4TKvXLvu+osAIgfxPYA+eIvYKv8GKDJOrY2D3/U9MRnKfMWD7bU4jeD4xmqyIg==} engines: {node: '>=20.19'} '@tanstack/query-core@5.99.0': resolution: {integrity: sha512-3Jv3WQG0BCcH7G+7lf/bP8QyBfJOXeY+T08Rin3GZ1bshvwlbPt7NrDHMEzGdKIOmOzvIQmxjk28YEQX60k7pQ==} '@tanstack/react-query@5.99.0': resolution: {integrity: sha512-OY2bCqPemT1LlqJ8Y2CUau4KELnIhhG9Ol3ZndPbdnB095pRbPo1cHuXTndg8iIwtoHTgwZjyaDnQ0xD0mYwAw==} peerDependencies: react: ^18 || ^19 '@tanstack/react-router@1.168.19': resolution: {integrity: sha512-0NCuwMPRlEpffDIF7OTSe3g4d8U93WsHxMi15YLJxjmNbng2of50wx+8UnT8IxKLbSdpFHSEDNTi4qnNyWn/Kw==} engines: {node: '>=20.19'} peerDependencies: react: '>=18.0.0 || >=19.0.0' react-dom: '>=18.0.0 || >=19.0.0' '@tanstack/react-store@0.9.3': resolution: {integrity: sha512-y2iHd/N9OkoQbFJLUX1T9vbc2O9tjH0pQRgTcx1/Nz4IlwLvkgpuglXUx+mXt0g5ZDFrEeDnONPqkbfxXJKwRg==} peerDependencies: react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 '@tanstack/router-core@1.168.14': resolution: {integrity: sha512-UhCJtjNrd5wcTmhgB2HyUP0+Rj1M7BD4dS11YsF9x6VC2KH/eqxzs/vK+nN5f+cOhPOLZdmLkWMW+WGmacZ8HA==} engines: {node: '>=20.19'} hasBin: true '@tanstack/router-generator@1.166.30': resolution: {integrity: sha512-9njrzX6loaKgr3NnAZvdUmIv6IO19DzwZ+O15kQXkdZ8HaONDdZPeJ5lK7cYoxKaiuhLHtXG559KgzdsHxODEA==} engines: {node: '>=20.19'} '@tanstack/router-plugin@1.167.20': resolution: {integrity: sha512-FK9jCrQx3mJfoyHtox+GZF7bws4cLa/NrIY6gjhsIP6H7q8IIBW1aFht4NkTzAXTzBGNBHRjpUVeyYVUX0MgtQ==} engines: {node: '>=20.19'} hasBin: true peerDependencies: '@rsbuild/core': '>=1.0.2' '@tanstack/react-router': ^1.168.19 vite: '>=5.0.0 || >=6.0.0 || >=7.0.0 || >=8.0.0' vite-plugin-solid: ^2.11.10 || ^3.0.0-0 webpack: '>=5.92.0' peerDependenciesMeta: '@rsbuild/core': optional: true '@tanstack/react-router': optional: true vite: optional: true vite-plugin-solid: optional: true webpack: optional: true '@tanstack/router-utils@1.161.6': resolution: {integrity: sha512-nRcYw+w2OEgK6VfjirYvGyPLOK+tZQz1jkYcmH5AjMamQ9PycnlxZF2aEZtPpNoUsaceX2bHptn6Ub5hGXqNvw==} engines: {node: '>=20.19'} '@tanstack/store@0.9.3': resolution: {integrity: sha512-8reSzl/qGWGGVKhBoxXPMWzATSbZLZFWhwBAFO9NAyp0TxzfBP0mIrGb8CP8KrQTmvzXlR/vFPPUrHTLBGyFyw==} '@tanstack/virtual-file-routes@1.161.7': resolution: {integrity: sha512-olW33+Cn+bsCsZKPwEGhlkqS6w3M2slFv11JIobdnCFKMLG97oAI2kWKdx5/zsywTL8flpnoIgaZZPlQTFYhdQ==} engines: {node: '>=20.19'} hasBin: true '@tybys/wasm-util@0.10.1': resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==} '@types/babel__core@7.20.5': resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==} '@types/babel__generator@7.27.0': resolution: {integrity: sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==} '@types/babel__template@7.4.4': resolution: {integrity: sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==} '@types/babel__traverse@7.28.0': resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==} '@types/istanbul-lib-coverage@2.0.6': resolution: {integrity: sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==} '@types/istanbul-lib-report@3.0.3': resolution: {integrity: sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==} '@types/istanbul-reports@3.0.4': resolution: {integrity: sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==} '@types/node@25.6.0': resolution: {integrity: sha512-+qIYRKdNYJwY3vRCZMdJbPLJAtGjQBudzZzdzwQYkEPQd+PJGixUL5QfvCLDaULoLv+RhT3LDkwEfKaAkgSmNQ==} '@types/react-dom@19.2.3': resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==} peerDependencies: '@types/react': ^19.2.0 '@types/react@19.2.14': resolution: {integrity: sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==} '@types/yargs-parser@21.0.3': resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==} '@types/yargs@17.0.35': resolution: {integrity: sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==} '@uidotdev/usehooks@2.4.1': resolution: {integrity: sha512-1I+RwWyS+kdv3Mv0Vmc+p0dPYH0DTRAo04HLyXReYBL9AeseDWUJyi4THuksBJcu9F0Pih69Ak150VDnqbVnXg==} engines: {node: '>=16'} peerDependencies: react: '>=18.0.0' react-dom: '>=18.0.0' '@vitejs/plugin-react@4.7.0': resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==} engines: {node: ^14.18.0 || >=16.0.0} peerDependencies: vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 abort-controller@3.0.0: resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==} engines: {node: '>=6.5'} accepts@2.0.0: resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==} engines: {node: '>= 0.6'} acorn@8.16.0: resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==} engines: {node: '>=0.4.0'} hasBin: true agent-base@7.1.4: resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==} engines: {node: '>= 14'} anser@1.4.10: resolution: {integrity: sha512-hCv9AqTQ8ycjpSd3upOJd7vFwW1JaoYQ7tpham03GJ1ca8/65rqn0RpaWpItOAd6ylW9wAw6luXYPJIyPFVOww==} ansi-regex@5.0.1: resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==} engines: {node: '>=8'} ansi-styles@4.3.0: resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==} engines: {node: '>=8'} ansi-styles@5.2.0: resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==} engines: {node: '>=10'} ansis@4.2.0: resolution: {integrity: sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig==} engines: {node: '>=14'} anymatch@3.1.3: resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==} engines: {node: '>= 8'} aria-hidden@1.2.6: resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==} engines: {node: '>=10'} asap@2.0.6: resolution: {integrity: sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==} babel-dead-code-elimination@1.0.12: resolution: {integrity: sha512-GERT7L2TiYcYDtYk1IpD+ASAYXjKbLTDPhBtYj7X1NuRMDTMtAx9kyBenub1Ev41lo91OHCKdmP+egTDmfQ7Ig==} babel-plugin-syntax-hermes-parser@0.33.3: resolution: {integrity: sha512-/Z9xYdaJ1lC0pT9do6TqCqhOSLfZ5Ot8D5za1p+feEfWYupCOfGbhhEXN9r2ZgJtDNUNRw/Z+T2CvAGKBqtqWA==} base64-js@1.5.1: resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==} baseline-browser-mapping@2.10.18: resolution: {integrity: sha512-VSnGQAOLtP5mib/DPyg2/t+Tlv65NTBz83BJBJvmLVHHuKJVaDOBvJJykiT5TR++em5nfAySPccDZDa4oSrn8A==} engines: {node: '>=6.0.0'} hasBin: true binary-extensions@2.3.0: resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==} engines: {node: '>=8'} braces@3.0.3: resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==} engines: {node: '>=8'} browserslist@4.28.2: resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==} engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7} hasBin: true bser@2.1.1: resolution: {integrity: sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==} buffer-from@1.1.2: resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==} camelcase@6.3.0: resolution: {integrity: sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==} engines: {node: '>=10'} caniuse-lite@1.0.30001787: resolution: {integrity: sha512-mNcrMN9KeI68u7muanUpEejSLghOKlVhRqS/Za2IeyGllJ9I9otGpR9g3nsw7n4W378TE/LyIteA0+/FOZm4Kg==} chalk@4.1.2: resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==} engines: {node: '>=10'} chokidar@3.6.0: resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==} engines: {node: '>= 8.10.0'} chrome-launcher@0.15.2: resolution: {integrity: sha512-zdLEwNo3aUVzIhKhTtXfxhdvZhUghrnmkvcAq2NoDd+LeOHKf03H5jwZ8T/STsAlzyALkBVK552iaG1fGf1xVQ==} engines: {node: '>=12.13.0'} hasBin: true chromium-edge-launcher@0.3.0: resolution: {integrity: sha512-p03azHlGjtyRvFEee3cyvtsRYdniSkwjkzmM/KmVnqT5d7QkkwpJBhis/zCLMYdQMVJ5tt140TBNqqrZPaWeFA==} ci-info@2.0.0: resolution: {integrity: sha512-5tK7EtrZ0N+OLFMthtqOj4fI2Jeb88C4CAZPu25LDVUgXJ0A3Js4PMGqrn0JU1W0Mh1/Z8wZzYPxqUrXeBboCQ==} ci-info@3.9.0: resolution: {integrity: sha512-NIxF55hv4nSqQswkAeiOi1r83xy8JldOFDTWiug55KBu9Jnblncd2U6ViHmYgHf01TPZS77NJBhBMKdWj9HQMQ==} engines: {node: '>=8'} cliui@8.0.1: resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==} engines: {node: '>=12'} clsx@2.1.1: resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==} engines: {node: '>=6'} color-convert@2.0.1: resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==} engines: {node: '>=7.0.0'} color-name@1.1.4: resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==} commander@12.1.0: resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==} engines: {node: '>=18'} commander@2.20.3: resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==} connect@3.7.0: resolution: {integrity: sha512-ZqRXc+tZukToSNmh5C2iWMSoV3X1YUcPbqEM4DkEG5tNQXrQUZCNVGGv3IuicnkMtPfGf3Xtp8WCXs295iQ1pQ==} engines: {node: '>= 0.10.0'} convert-source-map@2.0.0: resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==} cookie-es@3.1.1: resolution: {integrity: sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==} cross-spawn@7.0.6: resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} engines: {node: '>= 8'} csstype@3.2.3: resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==} debug@2.6.9: resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==} peerDependencies: supports-color: '*' peerDependenciesMeta: supports-color: optional: true debug@4.4.3: resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==} engines: {node: '>=6.0'} peerDependencies: supports-color: '*' peerDependenciesMeta: supports-color: optional: true depd@2.0.0: resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==} engines: {node: '>= 0.8'} destroy@1.2.0: resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==} engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16} detect-libc@2.1.2: resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==} engines: {node: '>=8'} detect-node-es@1.1.0: resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==} diff@8.0.4: resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==} engines: {node: '>=0.3.1'} ee-first@1.1.1: resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==} electron-to-chromium@1.5.335: resolution: {integrity: sha512-q9n5T4BR4Xwa2cwbrwcsDJtHD/enpQ5S1xF1IAtdqf5AAgqDFmR/aakqH3ChFdqd/QXJhS3rnnXFtexU7rax6Q==} emoji-regex@8.0.0: resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==} encodeurl@1.0.2: resolution: {integrity: sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==} engines: {node: '>= 0.8'} encodeurl@2.0.0: resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==} engines: {node: '>= 0.8'} error-stack-parser@2.1.4: resolution: {integrity: sha512-Sk5V6wVazPhq5MhpO+AUxJn5x7XSXGl1R93Vn7i+zS15KDVxQijejNCrz8340/2bgLBjR9GtEG8ZVKONDjcqGQ==} es-toolkit@1.45.1: resolution: {integrity: sha512-/jhoOj/Fx+A+IIyDNOvO3TItGmlMKhtX8ISAHKE90c4b/k1tqaqEZ+uUqfpU8DMnW5cgNJv606zS55jGvza0Xw==} esbuild@0.27.7: resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==} engines: {node: '>=18'} hasBin: true escalade@3.2.0: resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==} engines: {node: '>=6'} escape-html@1.0.3: resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==} escape-string-regexp@4.0.0: resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==} engines: {node: '>=10'} etag@1.8.1: resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==} engines: {node: '>= 0.6'} event-target-shim@5.0.1: resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==} engines: {node: '>=6'} exponential-backoff@3.1.3: resolution: {integrity: sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==} fb-dotslash@0.5.8: resolution: {integrity: sha512-XHYLKk9J4BupDxi9bSEhkfss0m+Vr9ChTrjhf9l2iw3jB5C7BnY4GVPoMcqbrTutsKJso6yj2nAB6BI/F2oZaA==} engines: {node: '>=20'} hasBin: true fb-watchman@2.0.2: resolution: {integrity: sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==} fdir@6.5.0: resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==} engines: {node: '>=12.0.0'} peerDependencies: picomatch: ^3 || ^4 peerDependenciesMeta: picomatch: optional: true fill-range@7.1.1: resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==} engines: {node: '>=8'} finalhandler@1.1.2: resolution: {integrity: sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==} engines: {node: '>= 0.8'} flow-enums-runtime@0.0.6: resolution: {integrity: sha512-3PYnM29RFXwvAN6Pc/scUfkI7RwhQ/xqyLUyPNlXUp9S40zI8nup9tUSrTLSVnWGBN38FNiGWbwZOB6uR4OGdw==} fresh@0.5.2: resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==} engines: {node: '>= 0.6'} fsevents@2.3.3: resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==} engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0} os: [darwin] gensync@1.0.0-beta.2: resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==} engines: {node: '>=6.9.0'} get-caller-file@2.0.5: resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==} engines: {node: 6.* || 8.* || >= 10.*} get-nonce@1.0.1: resolution: {integrity: sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==} engines: {node: '>=6'} get-tsconfig@4.13.7: resolution: {integrity: sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q==} glob-parent@5.1.2: resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==} engines: {node: '>= 6'} graceful-fs@4.2.11: resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==} has-flag@4.0.0: resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==} engines: {node: '>=8'} hermes-compiler@250829098.0.10: resolution: {integrity: sha512-TcRlZ0/TlyfJqquRFAWoyElVNnkdYRi/sEp4/Qy8/GYxjg8j2cS9D4MjuaQ+qimkmLN7AmO+44IznRf06mAr0w==} hermes-estree@0.33.3: resolution: {integrity: sha512-6kzYZHCk8Fy1Uc+t3HGYyJn3OL4aeqKLTyina4UFtWl8I0kSL7OmKThaiX+Uh2f8nGw3mo4Ifxg0M5Zk3/Oeqg==} hermes-parser@0.33.3: resolution: {integrity: sha512-Yg3HgaG4CqgyowtYjX/FsnPAuZdHOqSMtnbpylbptsQ9nwwSKsy6uRWcGO5RK0EqiX12q8HvDWKgeAVajRO5DA==} http-errors@2.0.1: resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==} engines: {node: '>= 0.8'} https-proxy-agent@7.0.6: resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==} engines: {node: '>= 14'} image-size@1.2.1: resolution: {integrity: sha512-rH+46sQJ2dlwfjfhCyNx5thzrv+dtmBIhPHk0zgRUukHzZ/kRueTJXoYYsclBaKcSMBWuGbOFXtioLpzTb5euw==} engines: {node: '>=16.x'} hasBin: true inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} invariant@2.2.4: resolution: {integrity: sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==} is-binary-path@2.1.0: resolution: {integrity: sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==} engines: {node: '>=8'} is-docker@2.2.1: resolution: {integrity: sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==} engines: {node: '>=8'} hasBin: true is-extglob@2.1.1: resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==} engines: {node: '>=0.10.0'} is-fullwidth-code-point@3.0.0: resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==} engines: {node: '>=8'} is-glob@4.0.3: resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==} engines: {node: '>=0.10.0'} is-number@7.0.0: resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==} engines: {node: '>=0.12.0'} is-wsl@2.2.0: resolution: {integrity: sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==} engines: {node: '>=8'} isbot@5.1.37: resolution: {integrity: sha512-5bcicX81xf6NlTEV8rWdg7Pk01LFizDetuYGHx6d/f6y3lR2/oo8IfxjzJqn1UdDEyCcwT9e7NRloj8DwCYujQ==} engines: {node: '>=18'} isexe@2.0.0: resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==} jest-get-type@29.6.3: resolution: {integrity: sha512-zrteXnqYxfQh7l5FHyL38jL39di8H8rHoecLH3JNxH3BwOrBsNeabdap5e0I23lD4HHI8W5VFBZqG4Eaq5LNcw==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} jest-util@29.7.0: resolution: {integrity: sha512-z6EbKajIpqGKU56y5KBUgy1dt1ihhQJgWzUlZHArA/+X2ad7Cb5iF+AK1EWVL/Bo7Rz9uurpqw6SiBCefUbCGA==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} jest-validate@29.7.0: resolution: {integrity: sha512-ZB7wHqaRGVw/9hST/OuFUReG7M8vKeq0/J2egIGLdvjHCmYqGARhzXmtgi+gVeZ5uXFF219aOc3Ls2yLg27tkw==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} jest-worker@29.7.0: resolution: {integrity: sha512-eIz2msL/EzL9UFTFFx7jBTkeZfku0yUAyZZZmJ93H2TYEiroIx2PQjEXcwYtYl8zXCxb+PAmA2hLIt/6ZEkPHw==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} jsc-safe-url@0.2.4: resolution: {integrity: sha512-0wM3YBWtYePOjfyXQH5MWQ8H7sdk5EXSwZvmSLKk2RboVQ2Bu239jycHDz5J/8Blf3K0Qnoy2b6xD+z10MFB+Q==} jsesc@3.1.0: resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==} engines: {node: '>=6'} hasBin: true json5@2.2.3: resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==} engines: {node: '>=6'} hasBin: true leven@3.1.0: resolution: {integrity: sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==} engines: {node: '>=6'} lighthouse-logger@1.4.2: resolution: {integrity: sha512-gPWxznF6TKmUHrOQjlVo2UbaL2EJ71mb2CCeRs/2qBpi4L/g4LUVc9+3lKQ6DTUZwJswfM7ainGrLO1+fOqa2g==} lightningcss-android-arm64@1.32.0: resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==} engines: {node: '>= 12.0.0'} cpu: [arm64] os: [android] lightningcss-darwin-arm64@1.32.0: resolution: {integrity: sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==} engines: {node: '>= 12.0.0'} cpu: [arm64] os: [darwin] lightningcss-darwin-x64@1.32.0: resolution: {integrity: sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==} engines: {node: '>= 12.0.0'} cpu: [x64] os: [darwin] lightningcss-freebsd-x64@1.32.0: resolution: {integrity: sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==} engines: {node: '>= 12.0.0'} cpu: [x64] os: [freebsd] lightningcss-linux-arm-gnueabihf@1.32.0: resolution: {integrity: sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==} engines: {node: '>= 12.0.0'} cpu: [arm] os: [linux] lightningcss-linux-arm64-gnu@1.32.0: resolution: {integrity: sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==} engines: {node: '>= 12.0.0'} cpu: [arm64] os: [linux] libc: [glibc] lightningcss-linux-arm64-musl@1.32.0: resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==} engines: {node: '>= 12.0.0'} cpu: [arm64] os: [linux] libc: [musl] lightningcss-linux-x64-gnu@1.32.0: resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==} engines: {node: '>= 12.0.0'} cpu: [x64] os: [linux] libc: [glibc] lightningcss-linux-x64-musl@1.32.0: resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==} engines: {node: '>= 12.0.0'} cpu: [x64] os: [linux] libc: [musl] lightningcss-win32-arm64-msvc@1.32.0: resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==} engines: {node: '>= 12.0.0'} cpu: [arm64] os: [win32] lightningcss-win32-x64-msvc@1.32.0: resolution: {integrity: sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==} engines: {node: '>= 12.0.0'} cpu: [x64] os: [win32] lightningcss@1.32.0: resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==} engines: {node: '>= 12.0.0'} lodash.throttle@4.1.1: resolution: {integrity: sha512-wIkUCfVKpVsWo3JSZlc+8MB5it+2AN5W8J7YVMST30UrvcQNZ1Okbj+rbVniijTWE6FGYy4XJq/rHkas8qJMLQ==} loose-envify@1.4.0: resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==} hasBin: true lru-cache@5.1.1: resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==} magic-string@0.30.21: resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==} makeerror@1.0.12: resolution: {integrity: sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==} marky@1.3.0: resolution: {integrity: sha512-ocnPZQLNpvbedwTy9kNrQEsknEfgvcLMvOtz3sFeWApDq1MXH1TqkCIx58xlpESsfwQOnuBO9beyQuNGzVvuhQ==} memoize-one@5.2.1: resolution: {integrity: sha512-zYiwtZUcYyXKo/np96AGZAckk+FWWsUdJ3cHGGmld7+AhvcWmQyGCYUh1hc4Q/pkOhb65dQR/pqCyK0cOaHz4Q==} merge-stream@2.0.0: resolution: {integrity: sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==} metro-babel-transformer@0.84.2: resolution: {integrity: sha512-UZqjh1VMRDm0WasifM0aN+JreCn3CW0BaPoZgDXb0xOMFSF9dKZJsKhcrpzkjL1+qwmHFYjlhGiQ+tvXdSx+OQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-cache-key@0.84.2: resolution: {integrity: sha512-+yJxLYu5nhKp7jZD6wtx4dMoSqLzK6MeYVkjMaUgjuh2Lu8DwGrxRnbmIVnn5Z9AQOs/K4eOWmuD7N2p64UCMw==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-cache@0.84.2: resolution: {integrity: sha512-jPX2fwOc/MmP2KRScSg2jFtVN9BTd+QN6j/3qZ+HIbEAsePLONozbKR2kCIBGvVeBTe7js48WXziI4+AdfwfFQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-config@0.84.2: resolution: {integrity: sha512-ze7IgJwLJoXoTxeXW86xqqKoxXjE0gZg5w8kW2mawaWLSfuvI0KgVaaERXgoVuWl+DQU2q22tIeAEdsCyUZvBQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-core@0.84.2: resolution: {integrity: sha512-s9Ko372nzfbu5Y2uhWDlB/g3E6mba3Es95QzF/8IwNM4ynZgqM9rfnU0PR54onGvDGDfj44jbooSxaA1D09rDA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-file-map@0.84.2: resolution: {integrity: sha512-ZgX1lXO9YJCgTY6OSuwvRcHdhXjAFd1DdYC4g2B+d7yAtLUW1/OqwTLpW6ixl1zqZDDQSDSYZXDsN7DL2IumBw==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-minify-terser@0.84.2: resolution: {integrity: sha512-1TNGPN4oUose+XSHsdDUvcvPHQxKP5lZNbiS6UteTXX+6zFNu+IzxqSokyrDoj9BSjVbdClrB3okuI+Fpls3LA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-resolver@0.84.2: resolution: {integrity: sha512-2i6OQJIv18+olvLnmcM20uhi1T729+25izZozqOugSaV0YGzMV/EXkYFqxkXC9iNsantGcI/w9PgaI89wLK6JQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-runtime@0.84.2: resolution: {integrity: sha512-NzzORY2+mmN3tLhsZ7N4GDOBERusalyM1o1k36euulUIEe8UkDhwzcsRexvxKaSkrGLiRQ9PYDLp9uxPkQ+A0Q==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-source-map@0.84.2: resolution: {integrity: sha512-m6rRVBefzaAyn6dBk5GOabVchCQ3VIS1/MhCj61dJB5cqLOOx34BV3DRFwnDBkuPw2RR/LUoul0U1sixlS9VQg==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-symbolicate@0.84.2: resolution: {integrity: sha512-o0RY49012YcGE1E4GsZtgzFCBPeoxlASzIsD5CNOTmAoKDIroHfTFFiYCGPLCGwRwQjMaCChhoH0TZCjAyyCKA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} hasBin: true metro-transform-plugins@0.84.2: resolution: {integrity: sha512-/821YLQv4PgD1NOruzPkr0r3HDALXqwCEECewyEQZ5hmSb8jzf1VdEpf3F8fx8zI4/5dHY/rARDVVuHCEb/Xrg==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro-transform-worker@0.84.2: resolution: {integrity: sha512-aR09svo3WC7OTYk5YB0VY0iSXOGrPdfmQWIxG8ADD2cKf/B95VR+y4GgVUbqB31buNvgtU+iCx9186i/YaNGlw==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} metro@0.84.2: resolution: {integrity: sha512-Qw7sl+e34cf/0LYEvDfVPiWvXmkvpuVgFqjzhPCc9Mw30NsvRFYZEH6I9zEHlpjugIveV+Jzdqt3YSPMU+Hx/w==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} hasBin: true micromatch@4.0.8: resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==} engines: {node: '>=8.6'} mime-db@1.54.0: resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==} engines: {node: '>= 0.6'} mime-types@3.0.2: resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==} engines: {node: '>=18'} mime@1.6.0: resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==} engines: {node: '>=4'} hasBin: true mkdirp@1.0.4: resolution: {integrity: sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==} engines: {node: '>=10'} hasBin: true ms@2.0.0: resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==} ms@2.1.3: resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==} nanoid@3.3.11: resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true negotiator@1.0.0: resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==} engines: {node: '>= 0.6'} node-int64@0.4.0: resolution: {integrity: sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==} node-releases@2.0.37: resolution: {integrity: sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg==} normalize-path@3.0.0: resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==} engines: {node: '>=0.10.0'} nullthrows@1.1.1: resolution: {integrity: sha512-2vPPEi+Z7WqML2jZYddDIfy5Dqb0r2fze2zTxNNknZaFpVHU3mFB3R+DWeJWGVx0ecvttSGlJTI+WG+8Z4cDWw==} ob1@0.84.2: resolution: {integrity: sha512-JID0ti8tDRQZJdQ3l+UeVAsKP+dW5Ucmktes/J9FwqP5KarafoTMqWvw4LRKrMtA7yWT3r/+E2w5wapd89GToA==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} on-finished@2.3.0: resolution: {integrity: sha512-ikqdkGAAyf/X/gPhXGvfgAytDZtDbr+bkNUJ0N9h5MI/dmdgCs3l6hoHrcUv41sRKew3jIwrp4qQDXiK99Utww==} engines: {node: '>= 0.8'} on-finished@2.4.1: resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==} engines: {node: '>= 0.8'} open@7.4.2: resolution: {integrity: sha512-MVHddDVweXZF3awtlAS+6pgKLlm/JgxZ90+/NBurBoQctVOOB/zDdVjcyPzQ+0laDGbsWgrRkflI65sQeOgT9Q==} engines: {node: '>=8'} parseurl@1.3.3: resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==} engines: {node: '>= 0.8'} path-key@3.1.1: resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==} engines: {node: '>=8'} pathe@2.0.3: resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==} picocolors@1.1.1: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} picomatch@2.3.2: resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==} engines: {node: '>=8.6'} picomatch@4.0.4: resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} pocketbase@0.26.8: resolution: {integrity: sha512-aQ/ewvS7ncvAE8wxoW10iAZu6ElgbeFpBhKPnCfvRovNzm2gW8u/sQNPGN6vNgVEagz44kK//C61oKjfa+7Low==} postcss@8.5.9: resolution: {integrity: sha512-7a70Nsot+EMX9fFU3064K/kdHWZqGVY+BADLyXc8Dfv+mTLLVl6JzJpPaCZ2kQL9gIJvKXSLMHhqdRRjwQeFtw==} engines: {node: ^10 || ^12 || >=14} prettier@3.8.2: resolution: {integrity: sha512-8c3mgTe0ASwWAJK+78dpviD+A8EqhndQPUBpNUIPt6+xWlIigCwfN01lWr9MAede4uqXGTEKeQWTvzb3vjia0Q==} engines: {node: '>=14'} hasBin: true pretty-format@29.7.0: resolution: {integrity: sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==} engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0} promise@8.3.0: resolution: {integrity: sha512-rZPNPKTOYVNEEKFaq1HqTgOwZD+4/YHS5ukLzQCypkj+OkYx7iv0mA91lJlpPPZ8vMau3IIGj5Qlwrx+8iiSmg==} queue@6.0.2: resolution: {integrity: sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==} range-parser@1.2.1: resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==} engines: {node: '>= 0.6'} react-devtools-core@6.1.5: resolution: {integrity: sha512-ePrwPfxAnB+7hgnEr8vpKxL9cmnp7F322t8oqcPshbIQQhDKgFDW4tjhF2wjVbdXF9O/nyuy3sQWd9JGpiLPvA==} react-dom@19.2.5: resolution: {integrity: sha512-J5bAZz+DXMMwW/wV3xzKke59Af6CHY7G4uYLN1OvBcKEsWOs4pQExj86BBKamxl/Ik5bx9whOrvBlSDfWzgSag==} peerDependencies: react: ^19.2.5 react-freeze@1.0.4: resolution: {integrity: sha512-r4F0Sec0BLxWicc7HEyo2x3/2icUTrRmDjaaRyzzn+7aDyFZliszMDOgLVwSnQnYENOlL1o569Ze2HZefk8clA==} engines: {node: '>=10'} peerDependencies: react: '>=17.0.0' react-hook-form@7.72.1: resolution: {integrity: sha512-RhwBoy2ygeVZje+C+bwJ8g0NjTdBmDlJvAUHTxRjTmSUKPYsKfMphkS2sgEMotsY03bP358yEYlnUeZy//D9Ig==} engines: {node: '>=18.0.0'} peerDependencies: react: ^16.8.0 || ^17 || ^18 || ^19 react-icons@5.6.0: resolution: {integrity: sha512-RH93p5ki6LfOiIt0UtDyNg/cee+HLVR6cHHtW3wALfo+eOHTp8RnU2kRkI6E+H19zMIs03DyxUG/GfZMOGvmiA==} peerDependencies: react: '*' react-is@18.3.1: resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==} react-native@0.85.0: resolution: {integrity: sha512-z2ltUAS9xzdL4HQeG7wpsYMv2o35R4D8qZwbXu0SbeamZ4+ZIBxc84Ay4Vb6fRExBpsT06aZFV+W030W9JxDFQ==} engines: {node: ^20.19.4 || ^22.13.0 || ^24.3.0 || >= 25.0.0} hasBin: true peerDependencies: '@react-native/jest-preset': 0.85.0 '@types/react': ^19.1.1 react: ^19.2.3 peerDependenciesMeta: '@react-native/jest-preset': optional: true '@types/react': optional: true react-refresh@0.14.2: resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==} engines: {node: '>=0.10.0'} react-refresh@0.17.0: resolution: {integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==} engines: {node: '>=0.10.0'} react-remove-scroll-bar@2.3.8: resolution: {integrity: sha512-9r+yi9+mgU33AKcj6IbT9oRCO78WriSj6t/cF8DWBZJ9aOGPOTEDvdUDz1FwKim7QXWwmHqtdHnRJfhAxEG46Q==} engines: {node: '>=10'} peerDependencies: '@types/react': '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 peerDependenciesMeta: '@types/react': optional: true react-remove-scroll@2.7.2: resolution: {integrity: sha512-Iqb9NjCCTt6Hf+vOdNIZGdTiH1QSqr27H/Ek9sv/a97gfueI/5h1s3yRi1nngzMUaOOToin5dI1dXKdXiF+u0Q==} engines: {node: '>=10'} peerDependencies: '@types/react': '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true react-style-singleton@2.2.3: resolution: {integrity: sha512-b6jSvxvVnyptAiLjbkWLE/lOnR4lfTtDAl+eUC7RZy+QQWc6wRzIV2CE6xBuMmDxc2qIihtDCZD5NPOFl7fRBQ==} engines: {node: '>=10'} peerDependencies: '@types/react': '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true react@19.2.5: resolution: {integrity: sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA==} engines: {node: '>=0.10.0'} readdirp@3.6.0: resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==} engines: {node: '>=8.10.0'} regenerator-runtime@0.13.11: resolution: {integrity: sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg==} require-directory@2.1.1: resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==} engines: {node: '>=0.10.0'} resolve-pkg-maps@1.0.0: resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==} rolldown@1.0.0-rc.15: resolution: {integrity: sha512-Ff31guA5zT6WjnGp0SXw76X6hzGRk/OQq2hE+1lcDe+lJdHSgnSX6nK3erbONHyCbpSj9a9E+uX/OvytZoWp2g==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true scheduler@0.27.0: resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==} semver@6.3.1: resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==} hasBin: true semver@7.7.4: resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==} engines: {node: '>=10'} hasBin: true send@0.19.2: resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==} engines: {node: '>= 0.8.0'} serialize-error@2.1.0: resolution: {integrity: sha512-ghgmKt5o4Tly5yEG/UJp8qTd0AN7Xalw4XBtDEKP655B699qMEtra1WlXeE6WIvdEG481JvRxULKsInq/iNysw==} engines: {node: '>=0.10.0'} seroval-plugins@1.5.2: resolution: {integrity: sha512-qpY0Cl+fKYFn4GOf3cMiq6l72CpuVaawb6ILjubOQ+diJ54LfOWaSSPsaswN8DRPIPW4Yq+tE1k5aKd7ILyaFg==} engines: {node: '>=10'} peerDependencies: seroval: ^1.0 seroval@1.5.2: resolution: {integrity: sha512-xcRN39BdsnO9Tf+VzsE7b3JyTJASItIV1FVFewJKCFcW4s4haIKS3e6vj8PGB9qBwC7tnuOywQMdv5N4qkzi7Q==} engines: {node: '>=10'} serve-static@1.16.3: resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==} engines: {node: '>= 0.8.0'} setprototypeof@1.2.0: resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==} shebang-command@2.0.0: resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==} engines: {node: '>=8'} shebang-regex@3.0.0: resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==} engines: {node: '>=8'} shell-quote@1.8.3: resolution: {integrity: sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==} engines: {node: '>= 0.4'} sonner@2.0.7: resolution: {integrity: sha512-W6ZN4p58k8aDKA4XPcx2hpIQXBRAgyiWVkYhT7CvK6D3iAu7xjvVyhQHg2/iaKJZ1XVJ4r7XuwGL+WGEK37i9w==} peerDependencies: react: ^18.0.0 || ^19.0.0 || ^19.0.0-rc react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-rc source-map-js@1.2.1: resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} engines: {node: '>=0.10.0'} source-map-support@0.5.21: resolution: {integrity: sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==} source-map@0.5.7: resolution: {integrity: sha512-LbrmJOMUSdEVxIKvdcJzQC+nQhe8FUZQTXQy6+I75skNgn3OoQ0DZA8YnFa7gp8tqtL3KPf1kmo0R5DoApeSGQ==} engines: {node: '>=0.10.0'} source-map@0.6.1: resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==} engines: {node: '>=0.10.0'} stackframe@1.3.4: resolution: {integrity: sha512-oeVtt7eWQS+Na6F//S4kJ2K2VbRlS9D43mAlMyVpVWovy9o+jfgH8O9agzANzaiLjclA0oYzUXEM4PurhSUChw==} stacktrace-parser@0.1.11: resolution: {integrity: sha512-WjlahMgHmCJpqzU8bIBy4qtsZdU9lRlcZE3Lvyej6t4tuOuv1vk57OW3MBrj6hXBFx/nNoC9MPMTcr5YA7NQbg==} engines: {node: '>=6'} statuses@1.5.0: resolution: {integrity: sha512-OpZ3zP+jT1PI7I8nemJX4AKmAX070ZkYPVWV/AaKTJl+tXCTGyVdC1a4SL8RUQYEwk/f34ZX8UTykN68FwrqAA==} engines: {node: '>= 0.6'} statuses@2.0.2: resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==} engines: {node: '>= 0.8'} string-width@4.2.3: resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==} engines: {node: '>=8'} strip-ansi@6.0.1: resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==} engines: {node: '>=8'} supports-color@7.2.0: resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==} engines: {node: '>=8'} supports-color@8.1.1: resolution: {integrity: sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==} engines: {node: '>=10'} tailwind-merge@3.5.0: resolution: {integrity: sha512-I8K9wewnVDkL1NTGoqWmVEIlUcB9gFriAEkXkfCjX5ib8ezGxtR3xD7iZIxrfArjEsH7F1CHD4RFUtxefdqV/A==} terser@5.46.1: resolution: {integrity: sha512-vzCjQO/rgUuK9sf8VJZvjqiqiHFaZLnOiimmUuOKODxWL8mm/xua7viT7aqX7dgPY60otQjUotzFMmCB4VdmqQ==} engines: {node: '>=10'} hasBin: true throat@5.0.0: resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==} tinyglobby@0.2.16: resolution: {integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==} engines: {node: '>=12.0.0'} tmpl@1.0.5: resolution: {integrity: sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==} to-regex-range@5.0.1: resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==} engines: {node: '>=8.0'} toidentifier@1.0.1: resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==} engines: {node: '>=0.6'} tslib@2.8.1: resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==} tsx@4.21.0: resolution: {integrity: sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==} engines: {node: '>=18.0.0'} hasBin: true type-fest@0.7.1: resolution: {integrity: sha512-Ne2YiiGN8bmrmJJEuTWTLJR32nh/JdL1+PSicowtNb0WFpn59GK8/lfD61bVtzguz7b3PBt74nxpv/Pw5po5Rg==} engines: {node: '>=8'} typescript@5.9.3: resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==} engines: {node: '>=14.17'} hasBin: true undici-types@7.19.2: resolution: {integrity: sha512-qYVnV5OEm2AW8cJMCpdV20CDyaN3g0AjDlOGf1OW4iaDEx8MwdtChUp4zu4H0VP3nDRF/8RKWH+IPp9uW0YGZg==} unpipe@1.0.0: resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==} engines: {node: '>= 0.8'} unplugin@2.3.11: resolution: {integrity: sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==} engines: {node: '>=18.12.0'} update-browserslist-db@1.2.3: resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==} hasBin: true peerDependencies: browserslist: '>= 4.21.0' use-callback-ref@1.3.3: resolution: {integrity: sha512-jQL3lRnocaFtu3V00JToYz/4QkNWswxijDaCVNZRiRTO3HQDLsdu1ZtmIUvV4yPp+rvWm5j0y0TG/S61cuijTg==} engines: {node: '>=10'} peerDependencies: '@types/react': '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true use-sidecar@1.1.3: resolution: {integrity: sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ==} engines: {node: '>=10'} peerDependencies: '@types/react': '*' react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc peerDependenciesMeta: '@types/react': optional: true use-sync-external-store@1.6.0: resolution: {integrity: sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==} peerDependencies: react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 utils-merge@1.0.1: resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==} engines: {node: '>= 0.4.0'} vite@8.0.8: resolution: {integrity: sha512-dbU7/iLVa8KZALJyLOBOQ88nOXtNG8vxKuOT4I2mD+Ya70KPceF4IAmDsmU0h1Qsn5bPrvsY9HJstCRh3hG6Uw==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true peerDependencies: '@types/node': ^20.19.0 || >=22.12.0 '@vitejs/devtools': ^0.1.0 esbuild: ^0.27.0 || ^0.28.0 jiti: '>=1.21.0' less: ^4.0.0 sass: ^1.70.0 sass-embedded: ^1.70.0 stylus: '>=0.54.8' sugarss: ^5.0.0 terser: ^5.16.0 tsx: ^4.8.1 yaml: ^2.4.2 peerDependenciesMeta: '@types/node': optional: true '@vitejs/devtools': optional: true esbuild: optional: true jiti: optional: true less: optional: true sass: optional: true sass-embedded: optional: true stylus: optional: true sugarss: optional: true terser: optional: true tsx: optional: true yaml: optional: true vlq@1.0.1: resolution: {integrity: sha512-gQpnTgkubC6hQgdIcRdYGDSDc+SaujOdyesZQMv6JlfQee/9Mp0Qhnys6WxDWvQnL5WZdT7o2Ul187aSt0Rq+w==} walker@1.0.8: resolution: {integrity: sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==} webpack-virtual-modules@0.6.2: resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==} whatwg-fetch@3.6.20: resolution: {integrity: sha512-EqhiFU6daOA8kpjOWTL0olhVOF3i7OrFzSYiGsEMB8GcXS+RrzauAERX65xMeNWVqxA6HXH2m69Z9LaKKdisfg==} which@2.0.2: resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==} engines: {node: '>= 8'} hasBin: true wrap-ansi@7.0.0: resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==} engines: {node: '>=10'} ws@7.5.10: resolution: {integrity: sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==} engines: {node: '>=8.3.0'} peerDependencies: bufferutil: ^4.0.1 utf-8-validate: ^5.0.2 peerDependenciesMeta: bufferutil: optional: true utf-8-validate: optional: true y18n@5.0.8: resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==} engines: {node: '>=10'} yallist@3.1.1: resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==} yaml@2.8.3: resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==} engines: {node: '>= 14.6'} hasBin: true yargs-parser@21.1.1: resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==} engines: {node: '>=12'} yargs@17.7.2: resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==} engines: {node: '>=12'} zod@3.25.76: resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==} snapshots: '@babel/code-frame@7.29.0': dependencies: '@babel/helper-validator-identifier': 7.28.5 js-tokens: 4.0.0 picocolors: 1.1.1 '@babel/compat-data@7.29.0': {} '@babel/core@7.29.0': dependencies: '@babel/code-frame': 7.29.0 '@babel/generator': 7.29.1 '@babel/helper-compilation-targets': 7.28.6 '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0) '@babel/helpers': 7.29.2 '@babel/parser': 7.29.2 '@babel/template': 7.28.6 '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 '@jridgewell/remapping': 2.3.5 convert-source-map: 2.0.0 debug: 4.4.3 gensync: 1.0.0-beta.2 json5: 2.2.3 semver: 6.3.1 transitivePeerDependencies: - supports-color '@babel/generator@7.29.1': dependencies: '@babel/parser': 7.29.2 '@babel/types': 7.29.0 '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 jsesc: 3.1.0 '@babel/helper-compilation-targets@7.28.6': dependencies: '@babel/compat-data': 7.29.0 '@babel/helper-validator-option': 7.27.1 browserslist: 4.28.2 lru-cache: 5.1.1 semver: 6.3.1 '@babel/helper-globals@7.28.0': {} '@babel/helper-module-imports@7.28.6': dependencies: '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 transitivePeerDependencies: - supports-color '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/helper-module-imports': 7.28.6 '@babel/helper-validator-identifier': 7.28.5 '@babel/traverse': 7.29.0 transitivePeerDependencies: - supports-color '@babel/helper-plugin-utils@7.28.6': {} '@babel/helper-string-parser@7.27.1': {} '@babel/helper-validator-identifier@7.28.5': {} '@babel/helper-validator-option@7.27.1': {} '@babel/helpers@7.29.2': dependencies: '@babel/template': 7.28.6 '@babel/types': 7.29.0 '@babel/parser@7.29.2': dependencies: '@babel/types': 7.29.0 '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/helper-plugin-utils': 7.28.6 '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/helper-plugin-utils': 7.28.6 '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/helper-plugin-utils': 7.28.6 '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/helper-plugin-utils': 7.28.6 '@babel/runtime@7.29.2': {} '@babel/template@7.28.6': dependencies: '@babel/code-frame': 7.29.0 '@babel/parser': 7.29.2 '@babel/types': 7.29.0 '@babel/traverse@7.29.0': dependencies: '@babel/code-frame': 7.29.0 '@babel/generator': 7.29.1 '@babel/helper-globals': 7.28.0 '@babel/parser': 7.29.2 '@babel/template': 7.28.6 '@babel/types': 7.29.0 debug: 4.4.3 transitivePeerDependencies: - supports-color '@babel/types@7.29.0': dependencies: '@babel/helper-string-parser': 7.27.1 '@babel/helper-validator-identifier': 7.28.5 '@emnapi/core@1.9.2': dependencies: '@emnapi/wasi-threads': 1.2.1 tslib: 2.8.1 optional: true '@emnapi/runtime@1.9.2': dependencies: tslib: 2.8.1 optional: true '@emnapi/wasi-threads@1.2.1': dependencies: tslib: 2.8.1 optional: true '@esbuild/aix-ppc64@0.27.7': optional: true '@esbuild/android-arm64@0.27.7': optional: true '@esbuild/android-arm@0.27.7': optional: true '@esbuild/android-x64@0.27.7': optional: true '@esbuild/darwin-arm64@0.27.7': optional: true '@esbuild/darwin-x64@0.27.7': optional: true '@esbuild/freebsd-arm64@0.27.7': optional: true '@esbuild/freebsd-x64@0.27.7': optional: true '@esbuild/linux-arm64@0.27.7': optional: true '@esbuild/linux-arm@0.27.7': optional: true '@esbuild/linux-ia32@0.27.7': optional: true '@esbuild/linux-loong64@0.27.7': optional: true '@esbuild/linux-mips64el@0.27.7': optional: true '@esbuild/linux-ppc64@0.27.7': optional: true '@esbuild/linux-riscv64@0.27.7': optional: true '@esbuild/linux-s390x@0.27.7': optional: true '@esbuild/linux-x64@0.27.7': optional: true '@esbuild/netbsd-arm64@0.27.7': optional: true '@esbuild/netbsd-x64@0.27.7': optional: true '@esbuild/openbsd-arm64@0.27.7': optional: true '@esbuild/openbsd-x64@0.27.7': optional: true '@esbuild/openharmony-arm64@0.27.7': optional: true '@esbuild/sunos-x64@0.27.7': optional: true '@esbuild/win32-arm64@0.27.7': optional: true '@esbuild/win32-ia32@0.27.7': optional: true '@esbuild/win32-x64@0.27.7': optional: true '@floating-ui/core@1.7.5': dependencies: '@floating-ui/utils': 0.2.11 '@floating-ui/dom@1.7.6': dependencies: '@floating-ui/core': 1.7.5 '@floating-ui/utils': 0.2.11 '@floating-ui/react-dom@2.1.8(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@floating-ui/dom': 1.7.6 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) '@floating-ui/react-native@0.10.9(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@floating-ui/core': 1.7.5 react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) '@floating-ui/utils@0.2.11': {} '@hanzogui/adapt@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/adapt@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/animate-presence@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-constant': 3.0.0(react@19.2.5) '@hanzogui/use-force-update': 3.0.0(react@19.2.5) '@hanzogui/use-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/animate-presence@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-constant': 3.0.0(react@19.2.5) '@hanzogui/use-force-update': 3.0.0(react@19.2.5) '@hanzogui/use-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/animate@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/animate-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/animate@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/animate-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/animation-helpers@3.0.0': {} '@hanzogui/animations-react-native@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/animation-helpers': 3.0.0 '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/compose-refs@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/compose-refs@3.0.1(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/constants@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) '@hanzogui/constants@3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) '@hanzogui/core@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/react-native-media-driver': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/react-native-use-pressable': 3.0.0(react@19.2.5) '@hanzogui/use-element-layout': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/core@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/react-native-media-driver': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/react-native-use-pressable': 3.0.0(react@19.2.5) '@hanzogui/use-element-layout': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/create-context@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/create-context@3.0.1(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/dialog@3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/adapt': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate-presence': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/compose-refs': 3.0.1(react@19.2.5) '@hanzogui/constants': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.1(react@19.2.5) '@hanzogui/dismissable': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/focus-scope': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/polyfill-dev': 3.0.1 '@hanzogui/portal': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/remove-scroll': 3.0.1(react@19.2.5) '@hanzogui/sheet': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/text': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.1(react@19.2.5) '@hanzogui/z-index-stack': 3.0.1(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/dismissable@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-escape-keydown': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/dismissable@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-escape-keydown': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/floating@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@floating-ui/react-dom': 2.1.8(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@floating-ui/react-native': 0.10.9(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - react-dom '@hanzogui/floating@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@floating-ui/react-dom': 2.1.8(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@floating-ui/react-native': 0.10.9(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - react-dom '@hanzogui/focus-scope@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.0(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-async': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - react-native '@hanzogui/focus-scope@3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.0(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-async': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - react-native '@hanzogui/get-button-sized@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/get-token': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/get-font-sized@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/get-font-sized@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/get-token@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/get-token@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/helpers@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/simple-hash': 3.0.0 react: 19.2.5 transitivePeerDependencies: - react-native '@hanzogui/helpers@3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/simple-hash': 3.0.0 react: 19.2.5 transitivePeerDependencies: - react-native '@hanzogui/is-equal-shallow@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/native@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) '@hanzogui/normalize-css-color@3.0.0': dependencies: '@react-native/normalize-color': 2.1.0 '@hanzogui/polyfill-dev@3.0.0': {} '@hanzogui/polyfill-dev@3.0.1': {} '@hanzogui/popover@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/adapt': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/dismissable': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/floating': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/focus-scope': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/polyfill-dev': 3.0.0 '@hanzogui/popper': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/remove-scroll': 3.0.0(react@19.2.5) '@hanzogui/scroll-view': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/sheet': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.0(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 react-freeze: 1.0.4(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/popover@3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/adapt': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate-presence': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/compose-refs': 3.0.1(react@19.2.5) '@hanzogui/constants': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/dismissable': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/floating': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/focus-scope': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/polyfill-dev': 3.0.1 '@hanzogui/popper': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/remove-scroll': 3.0.1(react@19.2.5) '@hanzogui/scroll-view': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/sheet': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.1(react@19.2.5) '@hanzogui/z-index-stack': 3.0.1(react@19.2.5) react: 19.2.5 react-freeze: 1.0.4(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/popper@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/floating': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/get-token': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/popper@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/floating': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/get-token': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/portal@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/portal@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/react-native-media-driver@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/react-native-use-pressable@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/remove-scroll@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/remove-scroll@3.0.1(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/scroll-view@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/scroll-view@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/sheet@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/adapt': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animations-react-native': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.0(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/remove-scroll': 3.0.0(react@19.2.5) '@hanzogui/scroll-view': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-constant': 3.0.0(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.0(react@19.2.5) '@hanzogui/use-did-finish-ssr': 3.0.0(react@19.2.5) '@hanzogui/use-keyboard-visible': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/sheet@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/adapt': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animate-presence': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/animations-react-native': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.0(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/portal': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/remove-scroll': 3.0.0(react@19.2.5) '@hanzogui/scroll-view': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-constant': 3.0.0(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.0(react@19.2.5) '@hanzogui/use-did-finish-ssr': 3.0.0(react@19.2.5) '@hanzogui/use-keyboard-visible': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/z-index-stack': 3.0.0(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/simple-hash@3.0.0': {} '@hanzogui/stacks@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/get-button-sized': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/stacks@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/core': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/get-button-sized': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/start-transition@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/text@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/get-font-sized': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/text@3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/get-font-sized': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/web': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/timer@3.0.0': {} '@hanzogui/tooltip@3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.1(react@19.2.5) '@hanzogui/core': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/create-context': 3.0.1(react@19.2.5) '@hanzogui/floating': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/get-token': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.1(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/polyfill-dev': 3.0.1 '@hanzogui/popover': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/popper': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/stacks': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/text': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/use-controllable-state': 3.0.1(react@19.2.5) react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/types@3.0.0': {} '@hanzogui/use-async@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-callback-ref@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-constant@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-controllable-state@3.0.0(react@19.2.5)': dependencies: '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 '@hanzogui/use-controllable-state@3.0.1(react@19.2.5)': dependencies: '@hanzogui/start-transition': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) react: 19.2.5 '@hanzogui/use-did-finish-ssr@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-element-layout@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/is-equal-shallow': 3.0.0(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - react-native '@hanzogui/use-escape-keydown@3.0.0(react@19.2.5)': dependencies: '@hanzogui/use-callback-ref': 3.0.0(react@19.2.5) react: 19.2.5 '@hanzogui/use-event@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-force-update@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/use-keyboard-visible@3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) '@hanzogui/use-presence@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/web': 3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) react: 19.2.5 transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-dom - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/web@3.0.0(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/is-equal-shallow': 3.0.0(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/normalize-css-color': 3.0.0 '@hanzogui/timer': 3.0.0 '@hanzogui/types': 3.0.0 '@hanzogui/use-did-finish-ssr': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/use-force-update': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/web@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/compose-refs': 3.0.0(react@19.2.5) '@hanzogui/constants': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/helpers': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/is-equal-shallow': 3.0.0(react@19.2.5) '@hanzogui/native': 3.0.0(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/normalize-css-color': 3.0.0 '@hanzogui/timer': 3.0.0 '@hanzogui/types': 3.0.0 '@hanzogui/use-did-finish-ssr': 3.0.0(react@19.2.5) '@hanzogui/use-event': 3.0.0(react@19.2.5) '@hanzogui/use-force-update': 3.0.0(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) transitivePeerDependencies: - '@react-native-menu/menu' - burnt - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@hanzogui/z-index-stack@3.0.0(react@19.2.5)': dependencies: react: 19.2.5 '@hanzogui/z-index-stack@3.0.1(react@19.2.5)': dependencies: react: 19.2.5 '@isaacs/ttlcache@1.4.1': {} '@jest/schemas@29.6.3': dependencies: '@sinclair/typebox': 0.27.10 '@jest/types@29.6.3': dependencies: '@jest/schemas': 29.6.3 '@types/istanbul-lib-coverage': 2.0.6 '@types/istanbul-reports': 3.0.4 '@types/node': 25.6.0 '@types/yargs': 17.0.35 chalk: 4.1.2 '@jridgewell/gen-mapping@0.3.13': dependencies: '@jridgewell/sourcemap-codec': 1.5.5 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/remapping@2.3.5': dependencies: '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/resolve-uri@3.1.2': {} '@jridgewell/source-map@0.3.11': dependencies: '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/sourcemap-codec@1.5.5': {} '@jridgewell/trace-mapping@0.3.31': dependencies: '@jridgewell/resolve-uri': 3.1.2 '@jridgewell/sourcemap-codec': 1.5.5 '@luxfi/ui@7.3.0(@hanzogui/core@3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5))(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: '@hanzogui/core': 3.0.1(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/dialog': 3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/popover': 3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/text': 3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@hanzogui/tooltip': 3.0.2(react-dom@19.2.5(react@19.2.5))(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) '@radix-ui/react-accordion': 1.2.12(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-avatar': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-checkbox': 1.3.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-collapsible': 1.1.12(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-dropdown-menu': 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-label': 2.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-progress': 1.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-radio-group': 1.3.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-select': 2.2.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-slider': 1.3.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-switch': 1.2.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@tanstack/react-query': 5.99.0(react@19.2.5) '@uidotdev/usehooks': 2.4.1(react-dom@19.2.5(react@19.2.5))(react@19.2.5) clsx: 2.1.1 es-toolkit: 1.45.1 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-icons: 5.6.0(react@19.2.5) sonner: 2.0.7(react-dom@19.2.5(react@19.2.5))(react@19.2.5) tailwind-merge: 3.5.0 transitivePeerDependencies: - '@react-native-menu/menu' - '@types/react' - '@types/react-dom' - burnt - react-native - react-native-gesture-handler - react-native-ios-context-menu - react-native-ios-utilities - react-native-keyboard-controller - react-native-safe-area-context - react-native-teleport - react-native-worklets-core - sf-symbols-typescript - zeego '@napi-rs/wasm-runtime@1.1.3(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)': dependencies: '@emnapi/core': 1.9.2 '@emnapi/runtime': 1.9.2 '@tybys/wasm-util': 0.10.1 optional: true '@oxc-project/types@0.124.0': {} '@radix-ui/number@1.1.1': {} '@radix-ui/primitive@1.1.3': {} '@radix-ui/react-accordion@1.2.12(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-collapsible': 1.1.12(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-arrow@1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-avatar@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-context': 1.1.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.4(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-is-hydrated': 0.1.0(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-checkbox@1.3.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-previous': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-size': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-collapsible@1.1.12(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-collection@1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-slot': 1.2.3(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-compose-refs@1.1.2(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-context@1.1.2(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-context@1.1.3(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-slot': 1.2.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) aria-hidden: 1.2.6 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-remove-scroll: 2.7.2(@types/react@19.2.14)(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-direction@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-dropdown-menu@2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-menu': 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-focus-guards@1.1.3(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-id@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-label@2.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-primitive': 2.1.4(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-menu@2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-slot': 1.2.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) aria-hidden: 1.2.6 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-remove-scroll: 2.7.2(@types/react@19.2.14)(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-popper@1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@floating-ui/react-dom': 2.1.8(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-arrow': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-rect': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-size': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/rect': 1.1.1 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-slot': 1.2.3(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-primitive@2.1.4(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-slot': 1.2.4(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-progress@1.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-context': 1.1.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.4(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-radio-group@1.3.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-previous': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-size': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-roving-focus@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-select@2.2.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/number': 1.1.1 '@9hradix-ui/primitive': 1.1.3 '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-slot': 1.2.3(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-previous': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-visually-hidden': 1.2.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) aria-hidden: 1.2.6 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) react-remove-scroll: 2.7.2(@types/react@19.2.14)(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-slider@1.3.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/number': 1.1.1 '@radix-ui/primitive': 1.1.3 '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-previous': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-size': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-slot@1.2.3(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-slot@1.2.4(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-switch@1.2.6(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-previous': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-size': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-tabs@1.1.13(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/primitive': 1.1.3 '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/react-use-callback-ref@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-controllable-state@1.2.2(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-use-effect-event': 0.0.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-effect-event@0.0.2(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-escape-keydown@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-is-hydrated@0.1.0(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 use-sync-external-store: 1.6.0(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-layout-effect@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-previous@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-rect@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/rect': 1.1.1 react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-use-size@1.1.1(@types/react@19.2.14)(react@19.2.5)': dependencies: '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.2.14)(react@19.2.5) react: 19.2.5 optionalDependencies: '@types/react': 19.2.14 '@radix-ui/react-visually-hidden@1.2.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) react: 19.2.5 react-dom: 19.2.5(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) '@radix-ui/rect@1.1.1': {} '@react-native/assets-registry@0.85.0': {} '@react-native/codegen@0.85.0(@babel/core@7.29.0)': dependencies: '@babel/core': 7.29.0 '@babel/parser': 7.29.2 hermes-parser: 0.33.3 invariant: 2.2.4 nullthrows: 1.1.1 tinyglobby: 0.2.16 yargs: 17.7.2 '@react-native/community-cli-plugin@0.85.0': dependencies: '@react-native/dev-middleware': 0.85.0 debug: 4.4.3 invariant: 2.2.4 metro: 0.84.2 metro-config: 0.84.2 metro-core: 0.84.2 semver: 7.7.4 transitivePeerDependencies: - bufferutil - supports-color - utf-8-validate '@react-native/debugger-frontend@0.85.0': {} '@react-native/debugger-shell@0.85.0': dependencies: cross-spawn: 7.0.6 debug: 4.4.3 fb-dotslash: 0.5.8 transitivePeerDependencies: - supports-color '@react-native/dev-middleware@0.85.0': dependencies: '@isaacs/ttlcache': 1.4.1 '@react-native/debugger-frontend': 0.85.0 '@react-native/debugger-shell': 0.85.0 chrome-launcher: 0.15.2 chromium-edge-launcher: 0.3.0 connect: 3.7.0 debug: 4.4.3 invariant: 2.2.4 nullthrows: 1.1.1 open: 7.4.2 serve-static: 1.16.3 ws: 7.5.10 transitivePeerDependencies: - bufferutil - supports-color - utf-8-validate '@react-native/gradle-plugin@0.85.0': {} '@react-native/js-polyfills@0.85.0': {} '@react-native/normalize-color@2.1.0': {} '@react-native/normalize-colors@0.85.0': {} '@react-native/virtualized-lists@0.85.0(@types/react@19.2.14)(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5)': dependencies: invariant: 2.2.4 nullthrows: 1.1.1 react: 19.2.5 react-native: 0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 '@rolldown/binding-android-arm64@1.0.0-rc.15': optional: true '@rolldown/binding-darwin-arm64@1.0.0-rc.15': optional: true '@rolldown/binding-darwin-x64@1.0.0-rc.15': optional: true '@rolldown/binding-freebsd-x64@1.0.0-rc.15': optional: true '@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.15': optional: true '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.15': optional: true '@rolldown/binding-linux-arm64-musl@1.0.0-rc.15': optional: true '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.15': optional: true '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.15': optional: true '@rolldown/binding-linux-x64-gnu@1.0.0-rc.15': optional: true '@rolldown/binding-linux-x64-musl@1.0.0-rc.15': optional: true '@rolldown/binding-openharmony-arm64@1.0.0-rc.15': optional: true '@rolldown/binding-wasm32-wasi@1.0.0-rc.15': dependencies: '@emnapi/core': 1.9.2 '@emnapi/runtime': 1.9.2 '@napi-rs/wasm-runtime': 1.1.3(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) optional: true '@rolldown/binding-win32-arm64-msvc@1.0.0-rc.15': optional: true '@rolldown/binding-win32-x64-msvc@1.0.0-rc.15': optional: true '@rolldown/pluginutils@1.0.0-beta.27': {} '@rolldown/pluginutils@1.0.0-rc.15': {} '@sinclair/typebox@0.27.10': {} '@tanstack/history@1.161.6': {} '@tanstack/query-core@5.99.0': {} '@tanstack/react-query@5.99.0(react@19.2.5)': dependencies: '@tanstack/query-core': 5.99.0 react: 19.2.5 '@tanstack/react-router@1.168.19(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@tanstack/history': 1.161.6 '@tanstack/react-store': 0.9.3(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@tanstack/router-core': 1.168.14 isbot: 5.1.37 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) '@tanstack/react-store@0.9.3(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@tanstack/store': 0.9.3 react: 19.2.5 react-dom: 19.2.5(react@19.2.5) use-sync-external-store: 1.6.0(react@19.2.5) '@tanstack/router-core@1.168.14': dependencies: '@tanstack/history': 1.161.6 cookie-es: 3.1.1 seroval: 1.5.2 seroval-plugins: 1.5.2(seroval@1.5.2) '@tanstack/router-generator@1.166.30': dependencies: '@babel/types': 7.29.0 '@tanstack/router-core': 1.168.14 '@tanstack/router-utils': 1.161.6 '@tanstack/virtual-file-routes': 1.161.7 magic-string: 0.30.21 prettier: 3.8.2 tsx: 4.21.0 zod: 3.25.76 transitivePeerDependencies: - supports-color '@tanstack/router-plugin@1.167.20(@tanstack/react-router@1.168.19(react-dom@19.2.5(react@19.2.5))(react@19.2.5))(vite@8.0.8(@types/node@25.6.0)(esbuild@0.27.7)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3))': dependencies: '@babel/core': 7.29.0 '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0) '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0) '@babel/template': 7.28.6 '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 '@tanstack/router-core': 1.168.14 '@tanstack/router-generator': 1.166.30 '@tanstack/router-utils': 1.161.6 '@tanstack/virtual-file-routes': 1.161.7 chokidar: 3.6.0 unplugin: 2.3.11 zod: 3.25.76 optionalDependencies: '@tanstack/react-router': 1.168.19(react-dom@19.2.5(react@19.2.5))(react@19.2.5) vite: 8.0.8(@types/node@25.6.0)(esbuild@0.27.7)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) transitivePeerDependencies: - supports-color '@tanstack/router-utils@1.161.6': dependencies: '@babel/core': 7.29.0 '@babel/generator': 7.29.1 '@babel/parser': 7.29.2 '@babel/types': 7.29.0 ansis: 4.2.0 babel-dead-code-elimination: 1.0.12 diff: 8.0.4 pathe: 2.0.3 tinyglobby: 0.2.16 transitivePeerDependencies: - supports-color '@tanstack/store@0.9.3': {} '@tanstack/virtual-file-routes@1.161.7': {} '@tybys/wasm-util@0.10.1': dependencies: tslib: 2.8.1 optional: true '@types/babel__core@7.20.5': dependencies: '@babel/parser': 7.29.2 '@babel/types': 7.29.0 '@types/babel__generator': 7.27.0 '@types/babel__template': 7.4.4 '@types/babel__traverse': 7.28.0 '@types/babel__generator@7.27.0': dependencies: '@babel/types': 7.29.0 '@types/babel__template@7.4.4': dependencies: '@babel/parser': 7.29.2 '@babel/types': 7.29.0 '@types/babel__traverse@7.28.0': dependencies: '@babel/types': 7.29.0 '@types/istanbul-lib-coverage@2.0.6': {} '@types/istanbul-lib-report@3.0.3': dependencies: '@types/istanbul-lib-coverage': 2.0.6 '@types/istanbul-reports@3.0.4': dependencies: '@types/istanbul-lib-report': 3.0.3 '@types/node@25.6.0': dependencies: undici-types: 7.19.2 '@types/react-dom@19.2.3(@types/react@19.2.14)': dependencies: '@types/react': 19.2.14 '@types/react@19.2.14': dependencies: csstype: 3.2.3 '@types/yargs-parser@21.0.3': {} '@types/yargs@17.0.35': dependencies: '@types/yargs-parser': 21.0.3 '@uidotdev/usehooks@2.4.1(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: react: 19.2.5 react-dom: 19.2.5(react@19.2.5) '@vitejs/plugin-react@4.7.0(vite@8.0.8(@types/node@25.6.0)(esbuild@0.27.7)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3))': dependencies: '@babel/core': 7.29.0 '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0) '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0) '@rolldown/pluginutils': 1.0.0-beta.27 '@types/babel__core': 7.20.5 react-refresh: 0.17.0 vite: 8.0.8(@types/node@25.6.0)(esbuild@0.27.7)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3) transitivePeerDependencies: - supports-color abort-controller@3.0.0: dependencies: event-target-shim: 5.0.1 accepts@2.0.0: dependencies: mime-types: 3.0.2 negotiator: 1.0.0 acorn@8.16.0: {} agent-base@7.1.4: {} anser@1.4.10: {} ansi-regex@5.0.1: {} ansi-styles@4.3.0: dependencies: color-convert: 2.0.1 ansi-styles@5.2.0: {} ansis@4.2.0: {} anymatch@3.1.3: dependencies: normalize-path: 3.0.0 picomatch: 2.3.2 aria-hidden@1.2.6: dependencies: tslib: 2.8.1 asap@2.0.6: {} babel-dead-code-elimination@1.0.12: dependencies: '@babel/core': 7.29.0 '@babel/parser': 7.29.2 '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 transitivePeerDependencies: - supports-color babel-plugin-syntax-hermes-parser@0.33.3: dependencies: hermes-parser: 0.33.3 base64-js@1.5.1: {} baseline-browser-mapping@2.10.18: {} binary-extensions@2.3.0: {} braces@3.0.3: dependencies: fill-range: 7.1.1 browserslist@4.28.2: dependencies: baseline-browser-mapping: 2.10.18 caniuse-lite: 1.0.30001787 electron-to-chromium: 1.5.335 node-releases: 2.0.37 update-browserslist-db: 1.2.3(browserslist@4.28.2) bser@2.1.1: dependencies: node-int64: 0.4.0 buffer-from@1.1.2: {} camelcase@6.3.0: {} caniuse-lite@1.0.30001787: {} chalk@4.1.2: dependencies: ansi-styles: 4.3.0 supports-color: 7.2.0 chokidar@3.6.0: dependencies: anymatch: 3.1.3 braces: 3.0.3 glob-parent: 5.1.2 is-binary-path: 2.1.0 is-glob: 4.0.3 normalize-path: 3.0.0 readdirp: 3.6.0 optionalDependencies: fsevents: 2.3.3 chrome-launcher@0.15.2: dependencies: '@types/node': 25.6.0 escape-string-regexp: 4.0.0 is-wsl: 2.2.0 lighthouse-logger: 1.4.2 transitivePeerDependencies: - supports-color chromium-edge-launcher@0.3.0: dependencies: '@types/node': 25.6.0 escape-string-regexp: 4.0.0 is-wsl: 2.2.0 lighthouse-logger: 1.4.2 mkdirp: 1.0.4 transitivePeerDependencies: - supports-color ci-info@2.0.0: {} ci-info@3.9.0: {} cliui@8.0.1: dependencies: string-width: 4.2.3 strip-ansi: 6.0.1 wrap-ansi: 7.0.0 clsx@2.1.1: {} color-convert@2.0.1: dependencies: color-name: 1.1.4 color-name@1.1.4: {} commander@12.1.0: {} commander@2.20.3: {} connect@3.7.0: dependencies: debug: 2.6.9 finalhandler: 1.1.2 parseurl: 1.3.3 utils-merge: 1.0.1 transitivePeerDependencies: - supports-color convert-source-map@2.0.0: {} cookie-es@3.1.1: {} cross-spawn@7.0.6: dependencies: path-key: 3.1.1 shebang-command: 2.0.0 which: 2.0.2 csstype@3.2.3: {} debug@2.6.9: dependencies: ms: 2.0.0 debug@4.4.3: dependencies: ms: 2.1.3 depd@2.0.0: {} destroy@1.2.0: {} detect-libc@2.1.2: {} detect-node-es@1.1.0: {} diff@8.0.4: {} ee-first@1.1.1: {} electron-to-chromium@1.5.335: {} emoji-regex@8.0.0: {} encodeurl@1.0.2: {} encodeurl@2.0.0: {} error-stack-parser@2.1.4: dependencies: stackframe: 1.3.4 es-toolkit@1.45.1: {} esbuild@0.27.7: optionalDependencies: '@esbuild/aix-ppc64': 0.27.7 '@esbuild/android-arm': 0.27.7 '@esbuild/android-arm64': 0.27.7 '@esbuild/android-x64': 0.27.7 '@esbuild/darwin-arm64': 0.27.7 '@esbuild/darwin-x64': 0.27.7 '@esbuild/freebsd-arm64': 0.27.7 '@esbuild/freebsd-x64': 0.27.7 '@esbuild/linux-arm': 0.27.7 '@esbuild/linux-arm64': 0.27.7 '@esbuild/linux-ia32': 0.27.7 '@esbuild/linux-loong64': 0.27.7 '@esbuild/linux-mips64el': 0.27.7 '@esbuild/linux-ppc64': 0.27.7 '@esbuild/linux-riscv64': 0.27.7 '@esbuild/linux-s390x': 0.27.7 '@esbuild/linux-x64': 0.27.7 '@esbuild/netbsd-arm64': 0.27.7 '@esbuild/netbsd-x64': 0.27.7 '@esbuild/openbsd-arm64': 0.27.7 '@esbuild/openbsd-x64': 0.27.7 '@esbuild/openharmony-arm64': 0.27.7 '@esbuild/sunos-x64': 0.27.7 '@esbuild/win32-arm64': 0.27.7 '@esbuild/win32-ia32': 0.27.7 '@esbuild/win32-x64': 0.27.7 escalade@3.2.0: {} escape-html@1.0.3: {} escape-string-regexp@4.0.0: {} etag@1.8.1: {} event-target-shim@5.0.1: {} exponential-backoff@3.1.3: {} fb-dotslash@0.5.8: {} fb-watchman@2.0.2: dependencies: bser: 2.1.1 fdir@6.5.0(picomatch@4.0.4): optionalDependencies: picomatch: 4.0.4 fill-range@7.1.1: dependencies: to-regex-range: 5.0.1 finalhandler@1.1.2: dependencies: debug: 2.6.9 encodeurl: 1.0.2 escape-html: 1.0.3 on-finished: 2.3.0 parseurl: 1.3.3 statuses: 1.5.0 unpipe: 1.0.0 transitivePeerDependencies: - supports-color flow-enums-runtime@0.0.6: {} fresh@0.5.2: {} fsevents@2.3.3: optional: true gensync@1.0.0-beta.2: {} get-caller-file@2.0.5: {} get-nonce@1.0.1: {} get-tsconfig@4.13.7: dependencies: resolve-pkg-maps: 1.0.0 glob-parent@5.1.2: dependencies: is-glob: 4.0.3 graceful-fs@4.2.11: {} has-flag@4.0.0: {} hermes-compiler@250829098.0.10: {} hermes-estree@0.33.3: {} hermes-parser@0.33.3: dependencies: hermes-estree: 0.33.3 http-errors@2.0.1: dependencies: depd: 2.0.0 inherits: 2.0.4 setprototypeof: 1.2.0 statuses: 2.0.2 toidentifier: 1.0.1 https-proxy-agent@7.0.6: dependencies: agent-base: 7.1.4 debug: 4.4.3 transitivePeerDependencies: - supports-color image-size@1.2.1: dependencies: queue: 6.0.2 inherits@2.0.4: {} invariant@2.2.4: dependencies: loose-envify: 1.4.0 is-binary-path@2.1.0: dependencies: binary-extensions: 2.3.0 is-docker@2.2.1: {} is-extglob@2.1.1: {} is-fullwidth-code-point@3.0.0: {} is-glob@4.0.3: dependencies: is-extglob: 2.1.1 is-number@7.0.0: {} is-wsl@2.2.0: dependencies: is-docker: 2.2.1 isbot@5.1.37: {} isexe@2.0.0: {} jest-get-type@29.6.3: {} jest-util@29.7.0: dependencies: '@jest/types': 29.6.3 '@types/node': 25.6.0 chalk: 4.1.2 ci-info: 3.9.0 graceful-fs: 4.2.11 picomatch: 2.3.2 jest-validate@29.7.0: dependencies: '@jest/types': 29.6.3 camelcase: 6.3.0 chalk: 4.1.2 jest-get-type: 29.6.3 leven: 3.1.0 pretty-format: 29.7.0 jest-worker@29.7.0: dependencies: '@types/node': 25.6.0 jest-util: 29.7.0 merge-stream: 2.0.0 supports-color: 8.1.1 js-tokens@4.0.0: {} jsc-safe-url@0.2.4: {} jsesc@3.1.0: {} json5@2.2.3: {} leven@3.1.0: {} lighthouse-logger@1.4.2: dependencies: debug: 2.6.9 marky: 1.3.0 transitivePeerDependencies: - supports-color lightningcss-android-arm64@1.32.0: optional: true lightningcss-darwin-arm64@1.32.0: optional: true lightningcss-darwin-x64@1.32.0: optional: true lightningcss-freebsd-x64@1.32.0: optional: true lightningcss-linux-arm-gnueabihf@1.32.0: optional: true lightningcss-linux-arm64-gnu@1.32.0: optional: true lightningcss-linux-arm64-musl@1.32.0: optional: true lightningcss-linux-x64-gnu@1.32.0: optional: true lightningcss-linux-x64-musl@1.32.0: optional: true lightningcss-win32-arm64-msvc@1.32.0: optional: true lightningcss-win32-x64-msvc@1.32.0: optional: true lightningcss@1.32.0: dependencies: detect-libc: 2.1.2 optionalDependencies: lightningcss-android-arm64: 1.32.0 lightningcss-darwin-arm64: 1.32.0 lightningcss-darwin-x64: 1.32.0 lightningcss-freebsd-x64: 1.32.0 lightningcss-linux-arm-gnueabihf: 1.32.0 lightningcss-linux-arm64-gnu: 1.32.0 lightningcss-linux-arm64-musl: 1.32.0 lightningcss-linux-x64-gnu: 1.32.0 lightningcss-linux-x64-musl: 1.32.0 lightningcss-win32-arm64-msvc: 1.32.0 lightningcss-win32-x64-msvc: 1.32.0 lodash.throttle@4.1.1: {} loose-envify@1.4.0: dependencies: js-tokens: 4.0.0 lru-cache@5.1.1: dependencies: yallist: 3.1.1 magic-string@0.30.21: dependencies: '@jridgewell/sourcemap-codec': 1.5.5 makeerror@1.0.12: dependencies: tmpl: 1.0.5 marky@1.3.0: {} memoize-one@5.2.1: {} merge-stream@2.0.0: {} metro-babel-transformer@0.84.2: dependencies: '@babel/core': 7.29.0 flow-enums-runtime: 0.0.6 hermes-parser: 0.33.3 nullthrows: 1.1.1 transitivePeerDependencies: - supports-color metro-cache-key@0.84.2: dependencies: flow-enums-runtime: 0.0.6 metro-cache@0.84.2: dependencies: exponential-backoff: 3.1.3 flow-enums-runtime: 0.0.6 https-proxy-agent: 7.0.6 metro-core: 0.84.2 transitivePeerDependencies: - supports-color metro-config@0.84.2: dependencies: connect: 3.7.0 flow-enums-runtime: 0.0.6 jest-validate: 29.7.0 metro: 0.84.2 metro-cache: 0.84.2 metro-core: 0.84.2 metro-runtime: 0.84.2 yaml: 2.8.3 transitivePeerDependencies: - bufferutil - supports-color - utf-8-validate metro-core@0.84.2: dependencies: flow-enums-runtime: 0.0.6 lodash.throttle: 4.1.1 metro-resolver: 0.84.2 metro-file-map@0.84.2: dependencies: debug: 4.4.3 fb-watchman: 2.0.2 flow-enums-runtime: 0.0.6 graceful-fs: 4.2.11 invariant: 2.2.4 jest-worker: 29.7.0 micromatch: 4.0.8 nullthrows: 1.1.1 walker: 1.0.8 transitivePeerDependencies: - supports-color metro-minify-terser@0.84.2: dependencies: flow-enums-runtime: 0.0.6 terser: 5.46.1 metro-resolver@0.84.2: dependencies: flow-enums-runtime: 0.0.6 metro-runtime@0.84.2: dependencies: '@babel/runtime': 7.29.2 flow-enums-runtime: 0.0.6 metro-source-map@0.84.2: dependencies: '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 flow-enums-runtime: 0.0.6 invariant: 2.2.4 metro-symbolicate: 0.84.2 nullthrows: 1.1.1 ob1: 0.84.2 source-map: 0.5.7 vlq: 1.0.1 transitivePeerDependencies: - supports-color metro-symbolicate@0.84.2: dependencies: flow-enums-runtime: 0.0.6 invariant: 2.2.4 metro-source-map: 0.84.2 nullthrows: 1.1.1 source-map: 0.5.7 vlq: 1.0.1 transitivePeerDependencies: - supports-color metro-transform-plugins@0.84.2: dependencies: '@babel/core': 7.29.0 '@babel/generator': 7.29.1 '@babel/template': 7.28.6 '@babel/traverse': 7.29.0 flow-enums-runtime: 0.0.6 nullthrows: 1.1.1 transitivePeerDependencies: - supports-color metro-transform-worker@0.84.2: dependencies: '@babel/core': 7.29.0 '@babel/generator': 7.29.1 '@babel/parser': 7.29.2 '@babel/types': 7.29.0 flow-enums-runtime: 0.0.6 metro: 0.84.2 metro-babel-transformer: 0.84.2 metro-cache: 0.84.2 metro-cache-key: 0.84.2 metro-minify-terser: 0.84.2 metro-source-map: 0.84.2 metro-transform-plugins: 0.84.2 nullthrows: 1.1.1 transitivePeerDependencies: - bufferutil - supports-color - utf-8-validate metro@0.84.2: dependencies: '@babel/code-frame': 7.29.0 '@babel/core': 7.29.0 '@babel/generator': 7.29.1 '@babel/parser': 7.29.2 '@babel/template': 7.28.6 '@babel/traverse': 7.29.0 '@babel/types': 7.29.0 accepts: 2.0.0 chalk: 4.1.2 ci-info: 2.0.0 connect: 3.7.0 debug: 4.4.3 error-stack-parser: 2.1.4 flow-enums-runtime: 0.0.6 graceful-fs: 4.2.11 hermes-parser: 0.33.3 image-size: 1.2.1 invariant: 2.2.4 jest-worker: 29.7.0 jsc-safe-url: 0.2.4 lodash.throttle: 4.1.1 metro-babel-transformer: 0.84.2 metro-cache: 0.84.2 metro-cache-key: 0.84.2 metro-config: 0.84.2 metro-core: 0.84.2 metro-file-map: 0.84.2 metro-resolver: 0.84.2 metro-runtime: 0.84.2 metro-source-map: 0.84.2 metro-symbolicate: 0.84.2 metro-transform-plugins: 0.84.2 metro-transform-worker: 0.84.2 mime-types: 3.0.2 nullthrows: 1.1.1 serialize-error: 2.1.0 source-map: 0.5.7 throat: 5.0.0 ws: 7.5.10 yargs: 17.7.2 transitivePeerDependencies: - bufferutil - supports-color - utf-8-validate micromatch@4.0.8: dependencies: braces: 3.0.3 picomatch: 2.3.2 mime-db@1.54.0: {} mime-types@3.0.2: dependencies: mime-db: 1.54.0 mime@1.6.0: {} mkdirp@1.0.4: {} ms@2.0.0: {} ms@2.1.3: {} nanoid@3.3.11: {} negotiator@1.0.0: {} node-int64@0.4.0: {} node-releases@2.0.37: {} normalize-path@3.0.0: {} nullthrows@1.1.1: {} ob1@0.84.2: dependencies: flow-enums-runtime: 0.0.6 on-finished@2.3.0: dependencies: ee-first: 1.1.1 on-finished@2.4.1: dependencies: ee-first: 1.1.1 open@7.4.2: dependencies: is-docker: 2.2.1 is-wsl: 2.2.0 parseurl@1.3.3: {} path-key@3.1.1: {} pathe@2.0.3: {} picocolors@1.1.1: {} picomatch@2.3.2: {} picomatch@4.0.4: {} pocketbase@0.26.8: {} postcss@8.5.9: dependencies: nanoid: 3.3.11 picocolors: 1.1.1 source-map-js: 1.2.1 prettier@3.8.2: {} pretty-format@29.7.0: dependencies: '@jest/schemas': 29.6.3 ansi-styles: 5.2.0 react-is: 18.3.1 promise@8.3.0: dependencies: asap: 2.0.6 queue@6.0.2: dependencies: inherits: 2.0.4 range-parser@1.2.1: {} react-devtools-core@6.1.5: dependencies: shell-quote: 1.8.3 ws: 7.5.10 transitivePeerDependencies: - bufferutil - utf-8-validate react-dom@19.2.5(react@19.2.5): dependencies: react: 19.2.5 scheduler: 0.27.0 react-freeze@1.0.4(react@19.2.5): dependencies: react: 19.2.5 react-hook-form@7.72.1(react@19.2.5): dependencies: react: 19.2.5 react-icons@5.6.0(react@19.2.5): dependencies: react: 19.2.5 react-is@18.3.1: {} react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5): dependencies: '@react-native/assets-registry': 0.85.0 '@react-native/codegen': 0.85.0(@babel/core@7.29.0) '@react-native/community-cli-plugin': 0.85.0 '@react-native/gradle-plugin': 0.85.0 '@react-native/js-polyfills': 0.85.0 '@react-native/normalize-colors': 0.85.0 '@react-native/virtualized-lists': 0.85.0(@types/react@19.2.14)(react-native@0.85.0(@babel/core@7.29.0)(@types/react@19.2.14)(react@19.2.5))(react@19.2.5) abort-controller: 3.0.0 anser: 1.4.10 ansi-regex: 5.0.1 babel-plugin-syntax-hermes-parser: 0.33.3 base64-js: 1.5.1 commander: 12.1.0 flow-enums-runtime: 0.0.6 hermes-compiler: 250829098.0.10 invariant: 2.2.4 memoize-one: 5.2.1 metro-runtime: 0.84.2 metro-source-map: 0.84.2 nullthrows: 1.1.1 pretty-format: 29.7.0 promise: 8.3.0 react: 19.2.5 react-devtools-core: 6.1.5 react-refresh: 0.14.2 regenerator-runtime: 0.13.11 scheduler: 0.27.0 semver: 7.7.4 stacktrace-parser: 0.1.11 tinyglobby: 0.2.16 whatwg-fetch: 3.6.20 ws: 7.5.10 yargs: 17.7.2 optionalDependencies: '@types/react': 19.2.14 transitivePeerDependencies: - '@babel/core' - '@react-native-community/cli' - '@react-native/metro-config' - bufferutil - supports-color - utf-8-validate react-refresh@0.14.2: {} react-refresh@0.17.0: {} react-remove-scroll-bar@2.3.8(@types/react@19.2.14)(react@19.2.5): dependencies: react: 19.2.5 react-style-singleton: 2.2.3(@types/react@19.2.14)(react@19.2.5) tslib: 2.8.1 optionalDependencies: '@types/react': 19.2.14 react-remove-scroll@2.7.2(@types/react@19.2.14)(react@19.2.5): dependencies: react: 19.2.5 react-remove-scroll-bar: 2.3.8(@types/react@19.2.14)(react@19.2.5) react-style-singleton: 2.2.3(@types/react@19.2.14)(react@19.2.5) tslib: 2.8.1 use-callback-ref: 1.3.3(@types/react@19.2.14)(react@19.2.5) use-sidecar: 1.1.3(@types/react@19.2.14)(react@19.2.5) optionalDependencies: '@types/react': 19.2.14 react-style-singleton@2.2.3(@types/react@19.2.14)(react@19.2.5): dependencies: get-nonce: 1.0.1 react: 19.2.5 tslib: 2.8.1 optionalDependencies: '@types/react': 19.2.14 react@19.2.5: {} readdirp@3.6.0: dependencies: picomatch: 2.3.2 regenerator-runtime@0.13.11: {} require-directory@2.1.1: {} resolve-pkg-maps@1.0.0: {} rolldown@1.0.0-rc.15: dependencies: '@oxc-project/types': 0.124.0 '@rolldown/pluginutils': 1.0.0-rc.15 optionalDependencies: '@rolldown/binding-android-arm64': 1.0.0-rc.15 '@rolldown/binding-darwin-arm64': 1.0.0-rc.15 '@rolldown/binding-darwin-x64': 1.0.0-rc.15 '@rolldown/binding-freebsd-x64': 1.0.0-rc.15 '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-rc.15 '@rolldown/binding-linux-arm64-gnu': 1.0.0-rc.15 '@rolldown/binding-linux-arm64-musl': 1.0.0-rc.15 '@rolldown/binding-linux-ppc64-gnu': 1.0.0-rc.15 '@rolldown/binding-linux-s390x-gnu': 1.0.0-rc.15 '@rolldown/binding-linux-x64-gnu': 1.0.0-rc.15 '@rolldown/binding-linux-x64-musl': 1.0.0-rc.15 '@rolldown/binding-openharmony-arm64': 1.0.0-rc.15 '@rolldown/binding-wasm32-wasi': 1.0.0-rc.15 '@rolldown/binding-win32-arm64-msvc': 1.0.0-rc.15 '@rolldown/binding-win32-x64-msvc': 1.0.0-rc.15 scheduler@0.27.0: {} semver@6.3.1: {} semver@7.7.4: {} send@0.19.2: dependencies: debug: 2.6.9 depd: 2.0.0 destroy: 1.2.0 encodeurl: 2.0.0 escape-html: 1.0.3 etag: 1.8.1 fresh: 0.5.2 http-errors: 2.0.1 mime: 1.6.0 ms: 2.1.3 on-finished: 2.4.1 range-parser: 1.2.1 statuses: 2.0.2 transitivePeerDependencies: - supports-color serialize-error@2.1.0: {} seroval-plugins@1.5.2(seroval@1.5.2): dependencies: seroval: 1.5.2 seroval@1.5.2: {} serve-static@1.16.3: dependencies: encodeurl: 2.0.0 escape-html: 1.0.3 parseurl: 1.3.3 send: 0.19.2 transitivePeerDependencies: - supports-color setprototypeof@1.2.0: {} shebang-command@2.0.0: dependencies: shebang-regex: 3.0.0 shebang-regex@3.0.0: {} shell-quote@1.8.3: {} sonner@2.0.7(react-dom@19.2.5(react@19.2.5))(react@19.2.5): dependencies: react: 19.2.5 react-dom: 19.2.5(react@19.2.5) source-map-js@1.2.1: {} source-map-support@0.5.21: dependencies: buffer-from: 1.1.2 source-map: 0.6.1 source-map@0.5.7: {} source-map@0.6.1: {} stackframe@1.3.4: {} stacktrace-parser@0.1.11: dependencies: type-fest: 0.7.1 statuses@1.5.0: {} statuses@2.0.2: {} string-width@4.2.3: dependencies: emoji-regex: 8.0.0 is-fullwidth-code-point: 3.0.0 strip-ansi: 6.0.1 strip-ansi@6.0.1: dependencies: ansi-regex: 5.0.1 supports-color@7.2.0: dependencies: has-flag: 4.0.0 supports-color@8.1.1: dependencies: has-flag: 4.0.0 tailwind-merge@3.5.0: {} terser@5.46.1: dependencies: '@jridgewell/source-map': 0.3.11 acorn: 8.16.0 commander: 2.20.3 source-map-support: 0.5.21 throat@5.0.0: {} tinyglobby@0.2.16: dependencies: fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 tmpl@1.0.5: {} to-regex-range@5.0.1: dependencies: is-number: 7.0.0 toidentifier@1.0.1: {} tslib@2.8.1: {} tsx@4.21.0: dependencies: esbuild: 0.27.7 get-tsconfig: 4.13.7 optionalDependencies: fsevents: 2.3.3 type-fest@0.7.1: {} typescript@5.9.3: {} undici-types@7.19.2: {} unpipe@1.0.0: {} unplugin@2.3.11: dependencies: '@jridgewell/remapping': 2.3.5 acorn: 8.16.0 picomatch: 4.0.4 webpack-virtual-modules: 0.6.2 update-browserslist-db@1.2.3(browserslist@4.28.2): dependencies: browserslist: 4.28.2 escalade: 3.2.0 picocolors: 1.1.1 use-callback-ref@1.3.3(@types/react@19.2.14)(react@19.2.5): dependencies: react: 19.2.5 tslib: 2.8.1 optionalDependencies: '@types/react': 19.2.14 use-sidecar@1.1.3(@types/react@19.2.14)(react@19.2.5): dependencies: detect-node-es: 1.1.0 react: 19.2.5 tslib: 2.8.1 optionalDependencies: '@types/react': 19.2.14 use-sync-external-store@1.6.0(react@19.2.5): dependencies: react: 19.2.5 utils-merge@1.0.1: {} vite@8.0.8(@types/node@25.6.0)(esbuild@0.27.7)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3): dependencies: lightningcss: 1.32.0 picomatch: 4.0.4 postcss: 8.5.9 rolldown: 1.0.0-rc.15 tinyglobby: 0.2.16 optionalDependencies: '@types/node': 25.6.0 esbuild: 0.27.7 fsevents: 2.3.3 terser: 5.46.1 tsx: 4.21.0 yaml: 2.8.3 vlq@1.0.1: {} walker@1.0.8: dependencies: makeerror: 1.0.12 webpack-virtual-modules@0.6.2: {} whatwg-fetch@3.6.20: {} which@2.0.2: dependencies: isexe: 2.0.0 wrap-ansi@7.0.0: dependencies: ansi-styles: 4.3.0 string-width: 4.2.3 strip-ansi: 6.0.1 ws@7.5.10: {} y18n@5.0.8: {} yallist@3.1.1: {} yaml@2.8.3: {} yargs-parser@21.1.1: {} yargs@17.7.2: dependencies: cliui: 8.0.1 escalade: 3.2.0 get-caller-file: 2.0.5 require-directory: 2.1.1 string-width: 4.2.3 y18n: 5.0.8 yargs-parser: 21.1.1 zod@3.25.76: {} cmmSx yVr.wy{rI 38eJn 4n\}p5Fw^lYVQjK9Jٱq,Z(bNJ8rJ>D[v+lj;Tܳ5W ?o_'g>Hס.Wy''._I`E@Cun/~իW_~cFVh^< 7A\ǮWs3rkQRv߀q|/]r^ +wkk :~Auz#%V{uWn[^+7ncG\7kw~Ǜµ<{K¥㦽񵯜]WJ?v:D)y6C1$u_G?~_y9|»̧/>{o;?vgs/|gŸ};ta&㿾Y_8}N÷y~QеˎI?}:- 9~u㧞  CiNG~Eq6sߌmY$')R׾Vh}m.@?|}/B'!oJf5Q/ً_;Cwڑ ϑo Qoq룉]t'/8|cDW}.+naU~tjW$ Fu/,N%\CKC۔{'[B/^I<~?MﺽNIku_;(+iRye-%8 Np͏K<qjp>h,㤷ƕh;It|o\|=y͌,Ǯw6pvވZn: hEy~.+Oz̋oy]f&6U\ F'+`C-#gAc|Va3\_ב k+hA5k m*ߵJsl[iHo׋x|ɳgOt:~/_yS8w_w]6Fq!I+NgadzG\ZpJ C z2DEG{dKD[Q7LOu~~kw,$ j m ǰxGaoiLJbŭ1CS rKoF vGgyn{ֱ@&PC-f~+TW@4ig1ZoEXtHӨl[Sw}?sSs w$JX,bDěq,KF)ۤ^m[:80ؚ\]Ѓ(Sŭ*\nvG#.92r% T1 uXζj5| N' ٻ9Cg f=E2Zp>b[HQ=?{**F: Z#I *Y1܂-_* p^ؐ'hbݲdX5w*xo_3_>{ϹDTc{b{\;k6]u:&!5g& 3L &0`/hOK~?(?}ct79WA<7hl:0}6K M8W[ܛ[ }tYY5"R/w_/ޥ.[PnJ@RWČGr,"{ uSBO灳Ez1']i4Twn{}~˝87~Y6kjl֓3"hOݮT,Jױ&xYir^+O~l@Νm?'ُ35Kb:6.  OAR L9YWv5B[!I܊2?m_=aRrĹ!2Y@?xx/ƽ{>_ZFm֨c< Z@45gyZp &\e҄A ͞Nw.5m)z˱$rr/m#p9/2CSmlk W5NVܠ }.W*R"S[8E*@vOfuSu@.J{Pӵ~(pڐUH1%p+p#""^@\80D i fE<'.d0(*_wƵ_T)*P 0::9TXEq͘tqg=-)^ۯ9̉:sǮ g=M{Ġx`ǟeϞ:ೇyKU,A2Mkt憩͊B2TGŜ%Qel&I_%\0DZ;؇q "GvjTgsMCzk{;XLaP}KLX/J-׃l%b6m8$Kex5\z`tf^xWϞ9$|8(Z]Wx受۱P-|4i Xuk[JmT dBT EŶ=/B_S]wݕm'.?#nlxtӱoؽ%Tn;C^_S\ }HgkN\ ܽmXW ީ.߸s6J®8]B>򒢫uM+<K=~x5 :]\znMMtۥNqe'eb'!P8t̖~l%{E.pxr/w_|-N3oB{'qr-ߚֵu\c7f'.]G"p~b[E.'hcԝ[#wi\|=vڐ<BOo`z;zuAT. (ři8KJ]k6 |fn#t"kꔝ!騻D`$ޏoM ]{啻:3oGz_'] 2%-ukb.t˭=1[l`pC.[Ƙy@g~ :6zcӾ^~o>o)3,X{yϜ͊_@ֶ~I{Dߑ`E2mamd"f 9?x؅O ]+}&jM(}hUW0p U %>YP};n8z ҂j5}pե7އ'N]6!,zE $;i"FHɻ 12x؛kAdEU%[l"_YC^}CB?ڇvA낷l>GU{B3ĊVi,gZ{F?ŗ~ .~H4Y &]W0ț[8&C*0wX,eDǗ]C(ʛh[;"=(f §ҩc:I[``A,)DYW?ʛHS>nRUsV{`;?4UU=$H#irC~4s}2R&~*eE84 ϿpF|Sf~aIfeK[YZk1FrlKb#!Z]˪*?ekŲL5w _7eH`{B,{SOJnZ( @m)Pr}cz`!t1Q =1.Ybi4xc uJ~oK)/&HbNCzmjw6J|$@/ Cвh)ZYl)'JڙI,fH2vxT(kic{bU#sIpMB%G!] \ IVe+[o4TOϞ._4{`\{a)ufcFKk.&6 nzYS˼$]lFI,N{s h{Q+{SPL'ݸ3*ųL̐dqY4^PNV[si|vf3;+FՑ2~ }HG̊)=n5.Z7"d'm 6)Ycfp,0+ M0^҆T~-sǍlfslYh )TT^.diT=:E9Hm"OO'$[ v箊|KzUG[Ctg򄪫&˩9+.0pWg fͫ#j."#&Dhq|Z4|K\|xWC+0xIwؗrKI|O=zcHi^>p(Wp6'-1x[@tέ74g꾊n_|0OCvܸ̞Nf+6+/A \wDҩD 7^+.E9Jtu *ƕj!xκ@\ 7$4@Bn PKiȘ 5 .>0q"jQ8[Gj]wC̀mg~39] œ[+JT.Vae9CKw6yf>,"ę? td5uζºԴ|bZFhl,ͩeD 0vP2MEo$iKy w?0X?F7H} 7ΗQ<' ^nkg^FF8 ,L궐aOg-k+y_iߒ_:g|}32p9r61= gmWFo[(3()cKUay9O< AR*% .sqy\uՕ IpFy3c\Bv+G t)MȺqfV:wZ [>8mn\F;@H QmR[W$q[Kq#\{gPmd.>U 2'oOrxdaJ3;߷<׭sEc?Tu/C_xըI&8#+1IͶ l_u^@;د!MM'au6!sq^l% 9m޾pmra,]$'NkVPg:"8GVTHVl8!MD; 5z[f*8gvVr+v .Ago]~>vܗ+]~ZV/ Ru])ɪdJ%+W441J ᥶]_dkt=P[8$?tsr2))K 7Aؘ׌ KS.xxm_)=زIjEwa8^d p&ig $Ktڌ{Hч}#{L:.aMas {Iқz:XlˡHhRxaBhډSk9uZZ#}wXù-7C0w茖5M&D$8XF@F M8Fa=׸rf[ '^}8= 9]?Zw^`F!DoBۅ<=j[^fS3y3d.%0Gv xQ8HazLPjUy=>Z MjHlYI5|Nj?rKqڌ?4yFS [yK{J]p6|8~R Zĥ^9 U!{tj 5z/_z S{8W=N߁"y@F ^P8sI\>^:_ts|v@>sٰ]1™jaRH;kI4 ]9A;IenVŐӴrR?< ۗg8 Tv hK&&]-p YMB-' ;4Rjdg rJBT[;C7/jqހ} ۋT)oDo^5х=̝{afIo%t^H0  j%抿*$^MSc!9@9`[1%^7p "ˬ-]Xq6ϓve[Լ)ܨ$6D7'/ԇZ^;MkoP~zڗe~ 4aRLtYM4ndjs]mc!9Em,o 7t~Ǿ_:+/ +N8-#hc^,9k) SxIX/56|T:4-G})pOW|~³7.^|.r2%&R\USIaj3l0HqƱ "-;ZLqfF TQfḰ(#k%b[nchNo|^|[En|\ѳ}AvR;|0HvpT4,L؟:a{*_f6(zvnpPWΎ.9nW IskcMS^7wjx"M1Bڱ̵'%[cSMMY1,i*;1ksn齙0V&j` Ц%iP3ץgIQ& GbH{ޏ9Ʋv2;| nߖஶ.;^.?!Cf7G92,Ǩ&^(Pj*bYxdFЈ AjΞ-uґHwoG{~@CKL֢ͩ\@`NK+ blDUb~<4\}Ehȴ"U]RbMR37f;Px?_<~\xp?9/NJ$lb3P"\} n?B˕.֋mLuKXNH%;r'1fc dԣlNoFr1Ib|ISs'G;I8Ԓ_?{nn~zL%Ƕ(LÊ0$3X1aboeɸ K,l6\S J g_`寽r5K}疷)7Mc8aӐ-pk)ftDfII@\CҔr21,CV9 ϶g<|wpɛ-!ArfhRԮJ^=jKF`*FB {XMyTZ]? ?yP$3BfgJ9Bu'V' ^0~heLl* Ηfr1\kG豷Zf~Ke@lP~>$R{n6OT1{#h rYڒPKc2o9ә-*gN)XO z.rO)tKKAc^ O c?fF}CavOzF&3mF!wϜw8ugAEdpဢ(px2QXTe}RxzۑUh.ԝEɻMf)%3n%x?;{2MI밁( ٕظ$('FeM0`pZfnMopWnEBBQ<ZTWb~O+4^n{$Y#s$ : 5Aim=cr3VgZ;/ a>QigN; M%RhZs.sB7vZzCRyc: @(^!Қ@eyݴ:uX4wI2'`NU^6x׻_xBO%"inmd/78;홥)4e}mЧ[oq'R-ff3 {"Nu݅gn>WwGBDQls8LpuZ̴h8*NS^/3UW #>Щ IAm,v; 6YWܺ42J`3%Ù,}\)TxsAu měh㌲݆RtJ˓?WI+O AVݸ#,>[AlRmAEm(X\GU1k㑴ZhJ9]iE~3%)َ 5ȟTr(ŅhIbbTJHP-<2꼯avͶ䈙53,'zS7^&fQ5uYXP|3uӞ*L &Y<{*o3m5P)bzюGQE6Cn \皶ԄqS[w- k^Tq|ׯB[nXauK yEE?kXJbVu]x|xU^t9,gJC)>` 3YƠ aVH`tntTPYL32]w|$ K?=WG];dS7z66 7Q,l o%㷒dD@zt+Fd7뒨vx?7B@E7Tye RH~6 xHEwM%`Ν&ʢjƢ/< 4-l,WN{Ow>~7WTIPz$eIܩP0h$b1_>z$nAAsĩ#73%??ggIa6>Eff0:X Tcx7LAڞ8VZ0bZF㢱7pn|?tEI:6i0[ץv]Zc[' Mq-ziia cKVa?t~8}37_txnLK4&)c,d8[DXh;_Ҋ!"RmtŻ +;Q^o ʨ@ If>v/^|˿ћǟ[5^6Y%~ OCOs0Z-z̚X׮ⱚ0rKHwa+ pȉeYZitW__ίJCv;xJѮ<_[t;.Ѷ2TVЬ^XK0QFWVtc DӿC׾ p2{v뻳X.BE3u3"AҖXnކ)wf&Ո_n޸0 i#҈\zlr}r^fNikZ֧j%+z׍ՐEZۆh,I\k@(BlFXd )-W >[xuhEd5q'yw?3n!x b`A(AWM>f%6jN~"83ߔQs`54.># ~Qv xa]5BaEG.dFAOf+p*Jd.ęl-YdJDiD*FmBSxRwc1{=|/>D{?]:C4$b8ExNA 1 8MMb,#Xe6 t7j"W,]138=oͺ7D]* RGӺDݫWpLٽiK}2x XCn>^쒜0+!:;HPgof@}n^V=R7k_ 3FS i9把>H,ٛa5"ݮ2ڈ!nkbxoKsu=%C0N_o|D:;, Y;nSTEEkydmS:1%SJj[f.gC'ܬq@ȼu 3PkpOD2a-vՠv=xə#;TdiI|3ow/~M~hvCBxmlQw@Fu>l#{Hb`xQcCrk%6MvenPiCpF Rp13gtDDdoM${dj@7*]M(i*Ձ=URsMI{'Rh^NzLKx@h'_T2kbPe;&7c-0 u-G·c1i }a3ƀ+&|DbLG kI㈨DMӘUM]-ԔfY!]u\ F))-&PENFB 2*pvFZd)x~jF]oht}s0rdL\D_,ɔ aW;]B=8Մ}nDSѠ"UR]ŗ[{ps͛i7N`҆Z PjB. P'Ljf<τyv,4#qR12ixpxCK=(|p87WF@!@1ȅ-f|Z)Z0 dAfTi_)?}ۿK85»:_yAv3ڢ$p vS0蠣8j m3t%$:Zw 2FthV'~vQxXc=28sKN:R)G̘*Z'amz5mώ谄٥K Z9=apG1~kϾ( c31-LJR'$-xf BMw5'#|O3;5[vv?ʛ)sR8Wåp5AI(ahJ2*N&QtچH ]; Њ6sE-FXṽ,=0a$n~-?GU#hǺf CkK,̖ȟ`TEA3.ɚH*DpPb$X*ף;(z/RO?Q$L׀lJwծAY22W"M泤-בWWdW 4D_?>vzb5t+#V]'| ^xPh7hgVf]΁-" 5O]t?֞ h l[M5> -q w{ڌSPp]Vm2u._m_&5aֆl*)BF}D/kK^؈vϲ ELInj)UYJSdgogƍ_3UFR ^_?j =]>~_x[>wu<;;7bcw޺xuj'Erc5gL HTje|' 0; 4a9o>u[ewh(4y[p?wl%ОqzJK> -,D-7jHj` ʺo}[ݢç3nL(GSKyF H$28=gJpgA[ ՟#Y kXtg{׻3n'$otb>BٕɸY"dz.BT*o*nȇwq)Z#p =]n /Űg gS<[ή.pwpPmEH͹6ф9*+wG۔sj,thզ>[*TȂOo|ܻqzwsvy9]nwD+䮏 )bB8'gE!$H8Ul JF,x(Pcp8}O7DD Cd6WZJo4ʶ**UdF;2<Ty+v*!t4a( QO'sc73;<}*fSK\|?:zL^4{0Zle QJ\U rtTf!-ؓg_z* |O6u~+Rd#MOT$|o\GYt=}ʸTdfls.-TU~}/%ZR@z+yUdnMe9ڎUY!as\_q3&9{h٭^pt'ys;PGT*céyJK*I5rlGcr؁daӯ!96c {cY ii ~ICx{OIaoa6P~$cp-1)՗#GKfPZjEC*6\K-F'HTKyDyiIfqXEXdPl012 YG_|1@>6Kuc zf6uꐍQS2ְ={5g`eJEg:Xړ%db23fF.+w{=ҹ9w^~ڽ8w.Tz-4l2%פƁ/`I w9Pɰqf˔րT|eLUfmW%x˚r׃ѵ3d ɒwrVqr8'\y!K.YIdLJ\/H@ł"y~CȔڢ[롅4vldָ!D-3۽hFz*X+dVs\ )Ƣ-ROCʧK%>d"_;t|ۜ$ ׭T7{@_!dF|&96fؚ1Th/@gSH뼹saلN4T!wä6친 u]MIwۦCSw=b#RzAټPKXPsB +x(i߿^rC<++ Bn?D%ȤLv]H+TYklgcY 84xl)ET5Iنt'_cDU vJT]նUatoI }?$!cN;-dAHYbHC''=YN8.<+l`nzJ?ﭝ rTRZ uqRi:ؐU] |-HMJҘIxl\Kjkg2]ΖbUs|qShebeQu92͑bғJ0jbÙ49 Ai1q;A7VS,KAJ QR >UcUYuhԈO 9:*J-V!F]z{;- V <1,Yo@17}~iBx);~F)h2o-n{-:D(#&r!Z!4q |vm&0=)hEc,Ǹ"t3h$ &yD۲02N6-[-$p\R? |,Zaen Q#I"U v'f}rX%gABL9t"@;3ZdWD?VD:BȆU1K;MWpͤ^k8bvndt!n%KPƜ&Cj0h 5PFR: R%c6;xՖ؁GP4Z w%Kbw9xGb<^'? ,ۃDrxH6CrwsEIJ%|.%4 D"%L952}1P7!kGUH1dJs݈lۉ K[-+ՍM\λK~-7L҃pϵ\^yz|ohb 3AϘm5y~-@"oB@Œ|**X{(W!5!pzҮy^(oE59)'5eϰq[oP|hX{:6f HR˄YWE@8̚zjPI,T9gS C~؆l9d*Xs+Dȗ%[%5(P;^KZj7F]ek/,`I-rvTyzqE~Cs^^?ԎPP.*Ӷ]?Cȧl^T] eu702q#d=}aP,U^B5L?Q {gs'Mi6A,e@o5<5{S$<(%"1 v\.$DkNX_rE1,[Ot˘0̸]Eʛ- L&|hd/Kqų %J%A _vj\17˒.V[FIuXk}i7R5PzR`@,njy%\Lq~'h˖"­Nwlly{f>qp ;w54M=N :;k@2$Se|(`.1Gvf~ra萷U2wIoґC+Z44|4M>W7&cTӱ W+/9d C& db{¬Kn:S/XxF/?|qݟQbٖȺՠ0'f`g9{ƗNJ>ApeLj$%fQ):;"w",Yrh|7aZ.UhU|Fd_G4XshP zS8Y ̳Ha)W[tЀ> N;uϝ܀__YyWబCÒr =RV/vBVR|Ϲ-ۮx &׏i2'kY(?ݰJ{`nEthÂTݶcYtTL^t:|'f#2d5gh<$'^)=z!;۰rK߰dUO1$Nȡ3-+>1QmqwSQ"Nżi*̕^Li;hYqЦC}xeuLzJCv΁gB c682ŰGQزm"a >† n16#m Z7EVv\۠tѴƍZIU2 FA9+b_j[o_HH jZ [F|1'#CUy؀VxY)e['[ݮle[cѺlz"RA:NNdNw&d-'Z JG.*AH^^% !ɘdY;;VLGRh'vIV=Y/RRXnZ aD=lβẁl<xzr҄4Uj >JU 7;Kٲ^.>Y h;]vL%k9˞roo*A/dirm 94xrsbc4mm!vm|MI+~xmX#$ȸhnxBf^T mP[lNE4L?rqԁ! m}M"BF9sD.RJ; rCvR)7H@ڶ:/̂lp gNĎ0DGjZ:y|^jj> | Q'loj^0CĥFESi9niAՍa B7M^ageK䍎@ 1&r-իaµlbi3;EܻTr 1zL >4b?:t;1 +(4f1JZVv]gAwP7ie.&]y>`6  )!K^\oPyR씵섂Kir+Y `YsD5[ab+n]YhHìL;Ҩ0FJ:[ʁ1+=CO sq_ߺ1\$zJ=n̲Ke! <ƠSڂ~=&EtpM$tv_&kUHʦ`&=PºʻlMjnXaLw:_OJ0~wҪ&e9ZUf%MͦXF/YR&DzŮ(]3O}Uda/7XgI\d$vx<-;md7m&[2JqS$-; v'3L( &vl|9l3{O)~j*Iūl5ĈdW;! *j 2BժQWUWzc{gIRO pP&=PA6 f1m+$.S"K>6ld# ё# ?$|A8Br2=yGn'?iG=.k7w]d5F;nFz.V,ZĪ~7A)n yGQrL(YH0t!K G(@5f:gF["$E#w4Ÿzp[s> YϖJUI[;X6])!1Y@͎pw SvS Z7(B8M4Qc9g66Lt~Љ.YNތRnYDra7(E9hZdd6&1A>q5+uЧ{VKX[5 gu8fp~^Ȫj)ӱϛ(!/ze1 )/6:e,[[>CEJ-PlNted8 鸭_ıPzAo OAN,HuaLH6mkޡX)Ӷ*PJ!*;ΪEƃ.S²+J,'襓̸؜!m9{PT6\,B9sJq汆OZ;."a򹃡(A 599RŎM5HkwTpDNbƴoAqDIh%x[% geS3mM*@IcEMR8P:3Uv6LJMR!",ק'wz#Z#Ǯ'鎻[t?_L R9穁ʵXv ͚[fƮe?UQVӼ?ZynzxtmOlZdX)JйTދI6LOyT In #bZSHMd5-4(~D!e/ZIc.E܃D sRpZk:UrGTMsT4mylT[u6`qSMXr^(Gǽ:1f'Di&@XWEq횆x~`+22voixwnY$r{(M}SSZxOzXvstM<7MRfG%Ąq Kw% Pb1ٰUwRe}{/h[G< 38.x\|HpՉ>H7ns)cϊtM A==:YH\)cIh,;81QMtSILӕ XBa(6*%룙f/$ùXQ${SH;{EYIE!hʘ`F9;5FV!j[aw[l%ȧ\` !I/4-1V*}OM:ɵEtkŁ{- KL%^T+F@*grE7Í0uc%c<@Q*lC1,ȥ` |fIt"wj+ e!_X[4$@0MkD;14|D$} Me&jmEE2%dg*Cbw" c衵{!{5}B14mƢT.MZRD80Xhy ?*%ؓLdQ%)FJp3U4z+'Gt*JMdi+,7hr)jq`#PI?눖G&=SsqYI+sWv5Z 8Ycr}ߤ]n=Z*zҫ{ۻUzzwv=MΧT]3Nsdn(R(-oM#,ۅWI6Y?;Cl1ճa9x `X01-dL**bf橔̽JBi3ݜbHٵ&BBZڂ^jyө72Xnd"N[z5I\\g%f^:lRUwZJ zG |D&~z:iږUdHN8-k7Φ8Gb2~*X䶉n8_jU8hc-` 5b @l u,`bz2LI{XTjbC\󃀏1nK1Q3cm)jxc9/z$^:6 _wHiS&N&^O!ūSvBߑ~H93JPcP5Y(Љň--1 '%סgG{ת!5V^~9 :}[}z⑹O]<V? ¾zb}jj=F<0sn>y>FFxvH;E_4΂}p\'@O5J~ ; ɵ~W > ? 4=4FoG'=cx uCL-Aug !- |ϮCԾQq=r7K_}p?r|u8<_ÆL >bxxNڂC2x(Տ!k(bZxOMfء1^ p@&@tK6m<Ï5SyZ}TInڭnEZaņWvhPT갟2~Cޙ,B_ Owi}j09<_ oT 2Hm1oiNyIW=Z#)}uwR/$J-N_f_2x.U7;Uuv?kvfT1V5\f=8[͌?5kLkxڪN>lh/ !ժ}rSH?-4X: Co.6_W.y`?>F\Gw׿ 3Lƹ^H;%s>:Ve.\.q'FK r։^'ݳ]~Ӆ¶&Sj?3uLw)MDŽ[&ݩiR1ws2y5wjboQV91rLzyt޲g-/N nв\;L](niۤbz!ܱ۰5wmygն<\LǷ' E\}-v^Ϡ lb7N'8XhwT6<3_ oBCΎ>0 3<ɬKf{Aӛuv2`ia:՝Rzdͳ5V#gZ_I֗i(ɜ;z$1Hic%}5֥9\ Ķ?g֧&N#'f7nN*iAR!0~`r!ZصIn pF௟7<:Jps#j(/CpwAk/~l8|d>MiG¡59'~pnA1}_ G//aYy Sj ]h.8z=qo*үzV=^M;?ԴыS')=n- bõ~ D1!kOOo,e2zn䓑-ۃy'CwdؖY'֥_n8]w5Iᢉ'3[}ޔ*6am5etx'Vpo wA^rWVm({Nx߭}o Y@ o/մ+k_1zޕ=wvvSÏS6;΍NYK2l Omi Zpd>уkwhy652F>{p?ߣgGY{Ed6NS͋ͷA޷EVT;I;[ 0[l-7}fqz%LZpsU7D!ȫej+F4Ml-Z,ӛ9Cfezk^Vjzk{UlDz1>%=KtSDΡ* 4ͮ&^A7Lc c!>5Ia>`iYȥe:8C H>#zv9!40&e>lLu0u1ź<{^{HcҥTWw] ~Lw[n}֭^ߪuѷjZ*q7B~ilŽqJ!72lS zc64o&0ڑ뀎qmx=;%::~F/yToyb.{ր/\k8z (|Cs Ƙ7 -> 9=21^z_jPmQ"Ǥ77OkwƙܺuDjhU2{EO?KsI(glvzbcNyC?~9 "rx+5o8Zw ku3Ơ*𩱢9ZdԗosA,U!ux|U50*۸{r2 Ԅ6KLCakxP? hz_3 ˬ gCHE'׭Y|R;Iy DMܿPgbPњtwbZ(ejow Pm!R̢q (e2olXxYZ￑޵?7gc,;5tIc s4NVRji,̵(α m&_[è:+fM}}-d̑)Ԙ>H̵Yx ]jno:7G܂3=c~{cT'e Hf1\1unFe‘"gGǁ \; 띊9UI>1 9ڛh;^/j|BO/dW7 ؤ TlGnSgKM+v.C-mn](uH cyf52zT5?*8Jf $2c9Ѡt-;ļm1EFRiףZbbU{ :jXb@="25UGv3"mKEƨFyb]px!n2\?kWs.u.ՄӖ3[Q |_FKoFvk^Ai.Y;zium,궪|{Φ\YĻWE0L&- ї~ya}UzVLg[wS9.DNi;w.vN'nC;;X P?W٩bfu1Sw@?wN3_yӣ;'_}5ϝ漺bu;jؔMv*y)N,`euL;5DϜؿXuBwIp?~~,0rȺ}u w/kub"A灄TٵGF2J~:͔2Gem pNhJ^ݞ|:Î#=\; lG[y>@&NwqvȦwu&n_$ԯYh,ݶ%MTR/sY{]ƷTsx2?<>wx4^=ZFGOwn)ݑ ;T9#OM;կsZ@BkiI7f|DpZ3S^z5۫ڈMțU :,n_-ߴG yy+pVkꍕu 7 _Jek989w2;чrB]jtu3<O[ݪKŻ7[u[xt |Ս^8<_ʇK&e[hk>uw sUήt\x -mhÆx@5ՅAnUҀm6s$á-KGemY)w < ;AY=\d&1+a!RQ%!`r=ǡg} crcB+.>8s =u6K@VV2O/#,#dFٛNc!&iҿ7uFB~ԏ~k{Gosgӄ<$Iy~s^$J;c9~zD?06gs^=t~'gb 1txW:avx iam0.13.2 version: 0.13.2q}Qiam@0.13(UBYywnIznlcA3sQK4VQzKM+InvyCsdP67F5e4eO3muGjBotF1Zo3hqBRD7VIc9159plrlWzPJqPT4rN/1GuZmuC%(0Q 7'! [R64url@3A)Uir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4$S$+7w-ose@6.23'XYYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==&E$dbphonenumber-js@1.13.8%Y80xal1m93rADejw2pMp2MSzFhHCPLEspjHxnH2UtqI+DgAmElsbmLMiqk9niwH9NWAfjsRtaJI+qBrOEmRx9nQ==}f' auth@0.101'XJtFnB+8nxDEXgNyniwz573xxbKSOu3R8D40xQKqcjwJ2CDkYqUDI53o6IuzDJBx60Z8VKCm271+t8iFjakrl8Q==kssport-oauth2@1.8q2'TcjsQbOrXIDE4P8nNb3FQRCCmJJ/utnFKEz2NX209f7KOHPoX18gF7gBzBbLLsj2/je4KrgiwLLGjf0lm9rtT1x`.0'} passport-strategy+TCB97UUvDKJde2V0KDWWB3lyf6PC3FaZP7YxZ2G8OAtn9p4HI9j9JLP9qjOGZFvyl8uwNT8qM+hGnz/n16NI70=0.4.0$2 id2@0.0.4%XIevTus0SbGwQzYh3+fRsAMTVVPOoIVufzacXcHPmdlle1jUpq7BRL+mw3dgeLanvGZdwwbWhRV6XrcFNdBmjWA==G9 utils-merge@1A)UpMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81h`.0'3"iam@0.1O,Hjose: 6.2.3 libphonenumber-js: 1.13.8 passport-oauth2: 1.8.0q! 0 64url@3.0LJ ose@6.2.3Gbphonenumber-js@1.13.8: {}f+P auth@0.10.2&>ssport-oauth2@1.81base64url: 3.0.1 oauth: 0.10.2 passport-strategy: 1.0.0 uid2: 0.0.4 utils-merge: 1.0.1 passport-strategy@1& id2@0.0.4Gutils-merge@1.0.1Lnjxomodule.exports = { plugins: [require('postcss-import'), require('tailwindcss'), require('autoprefixer')], }; 'x$100644 icon.svg{ù## J~q2x31܂ԼbɽkܴlKhı XQZ>HgFX@wW ~?nq6D>#??c٥;-y)%wǮ'f&& y)z t9d>h]o 1$'3!d!-} 2 Z܃WR\PֻY^N4ْC{ ĄҒb<*Sx3:V>14!e%yez)@v^d ]}zKg͙ꕸ|j x-%40000 components/fT7CX%oxg100644 SectionCard.tsxބb*Zʴ=X?Tԍ!F40000 grid"qHYP_6ܷU40000 ui<`Vɼäp*e3*x,x