From f1bca734319fe1d01ea6dd002118746956dc2c9b Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 12:38:36 -0800 Subject: [PATCH 01/29] temp commit for branch switching --- .../(dashboard)/hooks/sso/useSSOSettings.ts | 5 +++ .../Modals/BaseSSOSettingsForm.tsx | 37 +++++++++++++++++++ .../Modals/EditSSOSettingsModal.tsx | 11 ++++++ .../AdminSettings/SSOSettings/utils.ts | 9 +++++ 4 files changed, 62 insertions(+) diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts index f03f397711..fe901f5774 100644 --- a/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts @@ -28,6 +28,7 @@ export interface SSOSettingsValues { user_email: string | null; ui_access_mode: string | null; role_mappings: RoleMappings; + team_mappings: TeamMappings; } export interface RoleMappings { @@ -39,6 +40,10 @@ export interface RoleMappings { }; } +export interface TeamMappings { + team_id_jwt_field: string; +} + export interface SSOSettingsResponse { values: SSOSettingsValues; field_schema: SSOFieldSchema; diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.tsx index 6431b2dd3a..d16b04466e 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.tsx @@ -251,6 +251,43 @@ const BaseSSOSettingsForm: React.FC = ({ form, onFormS ) : null; }} + + prevValues.sso_provider !== currentValues.sso_provider} + > + {({ getFieldValue }) => { + const provider = getFieldValue("sso_provider"); + return provider === "okta" || provider === "generic" ? ( + + + + ) : null; + }} + + + + prevValues.use_team_mappings !== currentValues.use_team_mappings || + prevValues.sso_provider !== currentValues.sso_provider + } + > + {({ getFieldValue }) => { + const useTeamMappings = getFieldValue("use_team_mappings"); + const provider = getFieldValue("sso_provider"); + const supportsTeamMappings = provider === "okta" || provider === "generic"; + return useTeamMappings && supportsTeamMappings ? ( + + + + ) : null; + }} + ); diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.tsx index a731af68ff..bbae8f1451 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.tsx @@ -68,11 +68,22 @@ const EditSSOSettingsModal: React.FC = ({ isVisible, }; } + // Extract team mappings if they exist + let teamMappingFields = {}; + if (ssoData.values.team_mappings) { + const teamMappings = ssoData.values.team_mappings; + teamMappingFields = { + use_team_mappings: true, + team_ids_jwt_field: teamMappings.team_ids_jwt_field, + }; + } + // Set form values with existing data (excluding UI access control fields) const formValues = { sso_provider: selectedProvider, ...ssoData.values, ...roleMappingFields, + ...teamMappingFields, }; console.log("Setting form values:", formValues); // Debug log diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts index c199048df3..072aa4fc42 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts @@ -13,6 +13,8 @@ export const processSSOSettingsPayload = (formValues: Record): Reco default_role, group_claim, use_role_mappings, + use_team_mappings, + team_ids_jwt_field, ...rest } = formValues; @@ -52,6 +54,13 @@ export const processSSOSettingsPayload = (formValues: Record): Reco }; } + // Add team mappings only if use_team_mappings is checked + if (use_team_mappings) { + payload.team_mappings = { + team_ids_jwt_field: team_ids_jwt_field, + }; + } + return payload; }; From 899bafb29025e5ca81ae7196f7bbc806058d7c99 Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 13:12:20 -0800 Subject: [PATCH 02/29] adding team mappings UI --- .../(dashboard)/hooks/sso/useSSOSettings.ts | 2 +- .../Modals/DeleteSSOSettingsModal.tsx | 1 + .../AdminSettings/SSOSettings/SSOSettings.tsx | 22 +++++++++++++++++-- .../AdminSettings/SSOSettings/utils.ts | 9 +++++--- 4 files changed, 28 insertions(+), 6 deletions(-) diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts index fe901f5774..0431a8d39f 100644 --- a/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.ts @@ -41,7 +41,7 @@ export interface RoleMappings { } export interface TeamMappings { - team_id_jwt_field: string; + team_ids_jwt_field: string; } export interface SSOSettingsResponse { diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/DeleteSSOSettingsModal.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/DeleteSSOSettingsModal.tsx index 44cbf0020e..2656c861aa 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/DeleteSSOSettingsModal.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/DeleteSSOSettingsModal.tsx @@ -33,6 +33,7 @@ const DeleteSSOSettingsModal: React.FC = ({ isVisib user_email: null, sso_provider: null, role_mappings: null, + team_mappings: null, }; await editSSOSettings(clearSettings, { diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/SSOSettings.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/SSOSettings.tsx index adc1251cde..fdeda0ece3 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/SSOSettings.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/SSOSettings.tsx @@ -1,7 +1,7 @@ "use client"; import { useSSOSettings, type SSOSettingsValues } from "@/app/(dashboard)/hooks/sso/useSSOSettings"; -import { Button, Card, Descriptions, Space, Typography } from "antd"; +import { Button, Card, Descriptions, Space, Tag, Typography } from "antd"; import { Edit, Shield, Trash2 } from "lucide-react"; import { useState } from "react"; import { ssoProviderDisplayNames, ssoProviderLogoMap } from "./constants"; @@ -28,6 +28,7 @@ export default function SSOSettings() { const selectedProvider = ssoSettings?.values ? detectSSOProvider(ssoSettings.values) : null; const isRoleMappingsEnabled = Boolean(ssoSettings?.values.role_mappings); + const isTeamMappingsEnabled = Boolean(ssoSettings?.values.team_mappings); const renderEndpointValue = (value?: string | null) => ( @@ -38,6 +39,15 @@ export default function SSOSettings() { const renderSimpleValue = (value?: string | null) => value ? value : Not configured; + const renderTeamMappingsField = (values: SSOSettingsValues) => { + if (!values.team_mappings?.team_ids_jwt_field) { + return Not configured; + } + return ( + {values.team_mappings.team_ids_jwt_field} + ); + }; + const descriptionsConfig = { column: { xxl: 1, @@ -103,6 +113,10 @@ export default function SSOSettings() { render: (values: SSOSettingsValues) => renderEndpointValue(values.generic_userinfo_endpoint), }, { label: "Proxy Base URL", render: (values: SSOSettingsValues) => renderSimpleValue(values.proxy_base_url) }, + isTeamMappingsEnabled ? { + label: "Team IDs JWT Field", + render: (values: SSOSettingsValues) => renderTeamMappingsField(values), + } : null, ], }, generic: { @@ -129,6 +143,10 @@ export default function SSOSettings() { render: (values: SSOSettingsValues) => renderEndpointValue(values.generic_userinfo_endpoint), }, { label: "Proxy Base URL", render: (values: SSOSettingsValues) => renderSimpleValue(values.proxy_base_url) }, + isTeamMappingsEnabled ? { + label: "Team IDs JWT Field", + render: (values: SSOSettingsValues) => renderTeamMappingsField(values), + } : null, ], }, }; @@ -155,7 +173,7 @@ export default function SSOSettings() { {config.providerText} - {config.fields.map((field, index) => ( + {config.fields.map((field, index) => field && ( {field.render(values)} diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts index 072aa4fc42..948ed4d2bf 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.ts @@ -23,7 +23,9 @@ export const processSSOSettingsPayload = (formValues: Record): Reco }; // Add role mappings only if use_role_mappings is checked AND provider supports role mappings - if (use_role_mappings) { + const provider = rest.sso_provider; + const supportsRoleMappings = provider === "okta" || provider === "generic"; + if (use_role_mappings && supportsRoleMappings) { // Helper function to split comma-separated string into array const splitTeams = (teams: string | undefined): string[] => { if (!teams || teams.trim() === "") return []; @@ -54,8 +56,9 @@ export const processSSOSettingsPayload = (formValues: Record): Reco }; } - // Add team mappings only if use_team_mappings is checked - if (use_team_mappings) { + // Add team mappings only if use_team_mappings is checked AND provider supports team mappings + const supportsTeamMappings = provider === "okta" || provider === "generic"; + if (use_team_mappings && supportsTeamMappings) { payload.team_mappings = { team_ids_jwt_field: team_ids_jwt_field, }; From 65c62ffb1b0669bb1f78903c303ede7c49aeaa2c Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 14:16:50 -0800 Subject: [PATCH 03/29] Adding tests --- .../Modals/BaseSSOSettingsForm.test.tsx | 111 ++++++++++++++ .../Modals/EditSSOSettingsModal.test.tsx | 106 +++++++++++++ .../AdminSettings/SSOSettings/utils.test.ts | 144 ++++++++++++++++++ 3 files changed, 361 insertions(+) diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.test.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.test.tsx index a885bffa71..c68e2716f5 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.test.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/BaseSSOSettingsForm.test.tsx @@ -151,6 +151,117 @@ describe("BaseSSOSettingsForm", () => { expect(screen.getByText("Default Role")).toBeInTheDocument(); }); }); + + it("should show team mappings checkbox for okta provider", async () => { + const TestWrapper = () => { + const [form] = Form.useForm(); + const handleSubmit = vi.fn(); + + return ; + }; + + renderWithProviders(); + + const providerSelect = screen.getByLabelText("SSO Provider"); + await act(async () => { + fireEvent.mouseDown(providerSelect); + }); + + await waitFor(() => { + const oktaOption = screen.getByText(/okta/i); + fireEvent.click(oktaOption); + }); + + await waitFor(() => { + expect(screen.getByText("Use Team Mappings")).toBeInTheDocument(); + }); + }); + + it("should show team mappings checkbox for generic provider", async () => { + const TestWrapper = () => { + const [form] = Form.useForm(); + const handleSubmit = vi.fn(); + + return ; + }; + + renderWithProviders(); + + const providerSelect = screen.getByLabelText("SSO Provider"); + await act(async () => { + fireEvent.mouseDown(providerSelect); + }); + + await waitFor(() => { + const genericOption = screen.getByText(/generic sso/i); + fireEvent.click(genericOption); + }); + + await waitFor(() => { + expect(screen.getByText("Use Team Mappings")).toBeInTheDocument(); + }); + }); + + it("should show team IDs JWT field when use_team_mappings is checked for okta provider", async () => { + const TestWrapper = () => { + const [form] = Form.useForm(); + const handleSubmit = vi.fn(); + + return ; + }; + + renderWithProviders(); + + const providerSelect = screen.getByLabelText("SSO Provider"); + await act(async () => { + fireEvent.mouseDown(providerSelect); + }); + + await waitFor(() => { + const oktaOption = screen.getByText(/okta/i); + fireEvent.click(oktaOption); + }); + + await waitFor(() => { + expect(screen.getByText("Use Team Mappings")).toBeInTheDocument(); + }); + + const checkbox = screen.getByLabelText("Use Team Mappings"); + await act(async () => { + fireEvent.click(checkbox); + }); + + await waitFor(() => { + expect(screen.getByText("Team IDs JWT Field")).toBeInTheDocument(); + }); + }); + + it("should not show team mappings checkbox for google provider", async () => { + const TestWrapper = () => { + const [form] = Form.useForm(); + const handleSubmit = vi.fn(); + + return ; + }; + + renderWithProviders(); + + const providerSelect = screen.getByLabelText("SSO Provider"); + await act(async () => { + fireEvent.mouseDown(providerSelect); + }); + + await waitFor(() => { + const googleOption = screen.getByText(/google sso/i); + fireEvent.click(googleOption); + }); + + await waitFor(() => { + expect(screen.getByText("Google Client ID")).toBeInTheDocument(); + }); + + expect(screen.queryByText("Use Team Mappings")).not.toBeInTheDocument(); + }); }); describe("renderProviderFields", () => { diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.test.tsx b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.test.tsx index 559d837b40..d2d5403339 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.test.tsx +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/Modals/EditSSOSettingsModal.test.tsx @@ -105,6 +105,14 @@ const createRoleMappingsSSOData = (overrides: Record = {}) => ...overrides, }); +const createTeamMappingsSSOData = (overrides: Record = {}) => + createGenericSSOData({ + team_mappings: { + team_ids_jwt_field: overrides.team_ids_jwt_field || "teams", + }, + ...overrides, + }); + // Mock utilities const createMockHooks = (): { useSSOSettings: SSOSettingsHookReturn; @@ -577,6 +585,104 @@ describe("EditSSOSettingsModal", () => { }); }); }); + }); + + describe("Team Mappings", () => { + it("processes team mappings when team_mappings exists", async () => { + const ssoData = createTeamMappingsSSOData(); + + setupMocks({ + useSSOSettings: { data: ssoData, isLoading: false, error: null }, + }); + + renderComponent(); + + await waitFor(() => { + expect(mockForm.setFieldsValue).toHaveBeenCalledWith({ + sso_provider: SSO_PROVIDERS.GENERIC, + ...ssoData.values, + use_team_mappings: true, + team_ids_jwt_field: "teams", + }); + }); + }); + + it("handles team mappings with custom JWT field name", async () => { + const ssoData = createTeamMappingsSSOData({ + team_ids_jwt_field: "custom_teams_field", + }); + + setupMocks({ + useSSOSettings: { data: ssoData, isLoading: false, error: null }, + }); + + renderComponent(); + + await waitFor(() => { + expect(mockForm.setFieldsValue).toHaveBeenCalledWith({ + sso_provider: SSO_PROVIDERS.GENERIC, + ...ssoData.values, + use_team_mappings: true, + team_ids_jwt_field: "custom_teams_field", + }); + }); + }); + + it("handles team mappings and role mappings together", async () => { + const ssoData = createGenericSSOData({ + role_mappings: { + group_claim: "groups", + default_role: "internal_user", + roles: { + proxy_admin: ["admin-group"], + proxy_admin_viewer: [], + internal_user: [], + internal_user_viewer: [], + }, + }, + team_mappings: { + team_ids_jwt_field: "teams", + }, + }); + + setupMocks({ + useSSOSettings: { data: ssoData, isLoading: false, error: null }, + }); + + renderComponent(); + + await waitFor(() => { + expect(mockForm.setFieldsValue).toHaveBeenCalledWith({ + sso_provider: SSO_PROVIDERS.GENERIC, + ...ssoData.values, + use_role_mappings: true, + group_claim: "groups", + default_role: "internal_user", + proxy_admin_teams: "admin-group", + admin_viewer_teams: "", + internal_user_teams: "", + internal_viewer_teams: "", + use_team_mappings: true, + team_ids_jwt_field: "teams", + }); + }); + }); + + it("does not set team mapping fields when team_mappings is not present", async () => { + const ssoData = createGenericSSOData(); + + setupMocks({ + useSSOSettings: { data: ssoData, isLoading: false, error: null }, + }); + + renderComponent(); + + await waitFor(() => { + const callArgs = mockForm.setFieldsValue.mock.calls[0][0]; + expect(callArgs.use_team_mappings).toBeUndefined(); + expect(callArgs.team_ids_jwt_field).toBeUndefined(); + }); + }); it("handles provider detection with partial SSO data", async () => { const ssoData = createSSOData({ diff --git a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.test.ts b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.test.ts index 718302d35f..722d52d64f 100644 --- a/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.test.ts +++ b/ui/litellm-dashboard/src/components/Settings/AdminSettings/SSOSettings/utils.test.ts @@ -12,6 +12,8 @@ describe("processSSOSettingsPayload", () => { default_role: "proxy_admin", group_claim: "groups", use_role_mappings: false, + use_team_mappings: false, + team_ids_jwt_field: "teams", other_field: "value", another_field: 123, }; @@ -23,6 +25,7 @@ describe("processSSOSettingsPayload", () => { another_field: 123, }); expect(result.role_mappings).toBeUndefined(); + expect(result.team_mappings).toBeUndefined(); }); it("should return all fields except role mapping fields when use_role_mappings is not present", () => { @@ -33,6 +36,8 @@ describe("processSSOSettingsPayload", () => { internal_viewer_teams: "viewer1", default_role: "proxy_admin", group_claim: "groups", + use_team_mappings: false, + team_ids_jwt_field: "teams", other_field: "value", }; @@ -42,6 +47,7 @@ describe("processSSOSettingsPayload", () => { other_field: "value", }); expect(result.role_mappings).toBeUndefined(); + expect(result.team_mappings).toBeUndefined(); }); }); @@ -253,6 +259,143 @@ describe("processSSOSettingsPayload", () => { }); }); + describe("without team mappings", () => { + it("should return all fields except team mapping fields when use_team_mappings is false", () => { + const formValues = { + use_team_mappings: false, + team_ids_jwt_field: "teams", + sso_provider: "okta", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result).toEqual({ + sso_provider: "okta", + other_field: "value", + }); + expect(result.team_mappings).toBeUndefined(); + }); + + it("should return all fields except team mapping fields when use_team_mappings is not present", () => { + const formValues = { + team_ids_jwt_field: "teams", + sso_provider: "generic", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result).toEqual({ + sso_provider: "generic", + other_field: "value", + }); + expect(result.team_mappings).toBeUndefined(); + }); + + it("should not include team mappings for unsupported providers even when use_team_mappings is true", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "teams", + sso_provider: "google", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result).toEqual({ + sso_provider: "google", + other_field: "value", + }); + expect(result.team_mappings).toBeUndefined(); + }); + + it("should not include team mappings for microsoft provider even when use_team_mappings is true", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "teams", + sso_provider: "microsoft", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result).toEqual({ + sso_provider: "microsoft", + other_field: "value", + }); + expect(result.team_mappings).toBeUndefined(); + }); + }); + + describe("with team mappings enabled", () => { + it("should create team mappings for okta provider when use_team_mappings is true", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "teams", + sso_provider: "okta", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result.other_field).toBe("value"); + expect(result.team_mappings).toEqual({ + team_ids_jwt_field: "teams", + }); + }); + + it("should create team mappings for generic provider when use_team_mappings is true", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "custom_teams", + sso_provider: "generic", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result.other_field).toBe("value"); + expect(result.team_mappings).toEqual({ + team_ids_jwt_field: "custom_teams", + }); + }); + + it("should exclude team mapping fields from payload when team mappings are included", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "teams", + sso_provider: "okta", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result.use_team_mappings).toBeUndefined(); + expect(result.team_ids_jwt_field).toBeUndefined(); + }); + + it("should handle team mappings and role mappings together", () => { + const formValues = { + use_team_mappings: true, + team_ids_jwt_field: "teams", + use_role_mappings: true, + group_claim: "groups", + default_role: "internal_user", + sso_provider: "okta", + other_field: "value", + }; + + const result = processSSOSettingsPayload(formValues); + + expect(result.team_mappings).toEqual({ + team_ids_jwt_field: "teams", + }); + expect(result.role_mappings).toBeDefined(); + expect(result.role_mappings.group_claim).toBe("groups"); + }); + }); + describe("edge cases", () => { it("should handle empty form values", () => { const result = processSSOSettingsPayload({}); @@ -263,6 +406,7 @@ describe("processSSOSettingsPayload", () => { it("should preserve other fields in the payload", () => { const formValues = { use_role_mappings: false, + use_team_mappings: false, sso_provider: "google", client_id: "123", client_secret: "secret", From edfe2394b951e335f18e3185b6c33991585e6428 Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 15:52:30 -0800 Subject: [PATCH 04/29] reset_spend endpoint --- litellm/proxy/_types.py | 5 + .../key_management_endpoints.py | 157 ++++ .../test_key_management_endpoints.py | 701 ++++++++++++++++++ 3 files changed, 863 insertions(+) diff --git a/litellm/proxy/_types.py b/litellm/proxy/_types.py index 045d2fd5f1..9ae95085f5 100644 --- a/litellm/proxy/_types.py +++ b/litellm/proxy/_types.py @@ -228,6 +228,7 @@ class KeyManagementRoutes(str, enum.Enum): KEY_BLOCK = "/key/block" KEY_UNBLOCK = "/key/unblock" KEY_BULK_UPDATE = "/key/bulk_update" + KEY_RESET_SPEND = "/key/{key_id}/reset_spend" # info and health routes KEY_INFO = "/key/info" @@ -987,6 +988,10 @@ class RegenerateKeyRequest(GenerateKeyRequest): new_master_key: Optional[str] = None +class ResetSpendRequest(LiteLLMPydanticObjectBase): + reset_to: float + + class KeyRequest(LiteLLMPydanticObjectBase): keys: Optional[List[str]] = None key_aliases: Optional[List[str]] = None diff --git a/litellm/proxy/management_endpoints/key_management_endpoints.py b/litellm/proxy/management_endpoints/key_management_endpoints.py index 278971a91a..d184036300 100644 --- a/litellm/proxy/management_endpoints/key_management_endpoints.py +++ b/litellm/proxy/management_endpoints/key_management_endpoints.py @@ -3373,6 +3373,163 @@ async def regenerate_key_fn( raise handle_exception_on_proxy(e) +async def _check_proxy_or_team_admin_for_key( + key_in_db: LiteLLM_VerificationToken, + user_api_key_dict: UserAPIKeyAuth, + prisma_client: PrismaClient, + user_api_key_cache: DualCache, +) -> None: + if user_api_key_dict.user_role == LitellmUserRoles.PROXY_ADMIN.value: + return + + if key_in_db.team_id is not None: + team_table = await get_team_object( + team_id=key_in_db.team_id, + prisma_client=prisma_client, + user_api_key_cache=user_api_key_cache, + check_db_only=True, + ) + if team_table is not None: + if _is_user_team_admin( + user_api_key_dict=user_api_key_dict, + team_obj=team_table, + ): + return + + raise HTTPException( + status_code=status.HTTP_403_FORBIDDEN, + detail={"error": "You must be a proxy admin or team admin to reset key spend"}, + ) + + +def _validate_reset_spend_value( + reset_to: Any, key_in_db: LiteLLM_VerificationToken +) -> float: + if not isinstance(reset_to, (int, float)): + raise HTTPException( + status_code=status.HTTP_400_BAD_REQUEST, + detail={"error": "reset_to must be a float"}, + ) + + reset_to = float(reset_to) + + if reset_to < 0: + raise HTTPException( + status_code=status.HTTP_400_BAD_REQUEST, + detail={"error": "reset_to must be >= 0"}, + ) + + current_spend = key_in_db.spend or 0.0 + if reset_to > current_spend: + raise HTTPException( + status_code=status.HTTP_400_BAD_REQUEST, + detail={"error": f"reset_to ({reset_to}) must be <= current spend ({current_spend})"}, + ) + + max_budget = key_in_db.max_budget + if key_in_db.litellm_budget_table is not None: + budget_max_budget = getattr(key_in_db.litellm_budget_table, "max_budget", None) + if budget_max_budget is not None: + if max_budget is None or budget_max_budget < max_budget: + max_budget = budget_max_budget + + if max_budget is not None and reset_to > max_budget: + raise HTTPException( + status_code=status.HTTP_400_BAD_REQUEST, + detail={"error": f"reset_to ({reset_to}) must be <= budget ({max_budget})"}, + ) + + return reset_to + + +@router.post( + "/key/{key:path}/reset_spend", + tags=["key management"], + dependencies=[Depends(user_api_key_auth)], +) +@management_endpoint_wrapper +async def reset_key_spend_fn( + key: str, + data: ResetSpendRequest, + user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth), + litellm_changed_by: Optional[str] = Header( + None, + description="The litellm-changed-by header enables tracking of actions performed by authorized users on behalf of other users, providing an audit trail for accountability", + ), +) -> Dict[str, Any]: + try: + from litellm.proxy.proxy_server import ( + hash_token, + prisma_client, + proxy_logging_obj, + user_api_key_cache, + ) + + if prisma_client is None: + raise HTTPException( + status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, + detail={"error": "DB not connected. prisma_client is None"}, + ) + + if "sk" not in key: + hashed_api_key = key + else: + hashed_api_key = hash_token(key) + + _key_in_db = await prisma_client.db.litellm_verificationtoken.find_unique( + where={"token": hashed_api_key}, + include={"litellm_budget_table": True}, + ) + if _key_in_db is None: + raise HTTPException( + status_code=status.HTTP_404_NOT_FOUND, + detail={"error": f"Key {key} not found."}, + ) + + current_spend = _key_in_db.spend or 0.0 + reset_to = _validate_reset_spend_value(data.reset_to, _key_in_db) + + await _check_proxy_or_team_admin_for_key( + key_in_db=_key_in_db, + user_api_key_dict=user_api_key_dict, + prisma_client=prisma_client, + user_api_key_cache=user_api_key_cache, + ) + + updated_key = await prisma_client.db.litellm_verificationtoken.update( + where={"token": hashed_api_key}, + data={"spend": reset_to}, + ) + + if updated_key is None: + raise HTTPException( + status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, + detail={"error": "Failed to update key spend"}, + ) + + await _delete_cache_key_object( + hashed_token=hashed_api_key, + user_api_key_cache=user_api_key_cache, + proxy_logging_obj=proxy_logging_obj, + ) + + max_budget = updated_key.max_budget + budget_reset_at = updated_key.budget_reset_at + + return { + "key_hash": hashed_api_key, + "spend": reset_to, + "previous_spend": current_spend, + "max_budget": max_budget, + "budget_reset_at": budget_reset_at, + } + except HTTPException: + raise + except Exception as e: + verbose_proxy_logger.exception("Error resetting key spend: %s", e) + raise handle_exception_on_proxy(e) + + async def validate_key_list_check( user_api_key_dict: UserAPIKeyAuth, user_id: Optional[str], diff --git a/tests/test_litellm/proxy/management_endpoints/test_key_management_endpoints.py b/tests/test_litellm/proxy/management_endpoints/test_key_management_endpoints.py index 3638fd7e2c..e90fb277ee 100644 --- a/tests/test_litellm/proxy/management_endpoints/test_key_management_endpoints.py +++ b/tests/test_litellm/proxy/management_endpoints/test_key_management_endpoints.py @@ -19,10 +19,12 @@ from litellm.proxy._types import ( LiteLLM_BudgetTable, LiteLLM_OrganizationTable, LiteLLM_TeamTableCachedObj, + LiteLLM_UserTable, LiteLLM_VerificationToken, LitellmUserRoles, Member, ProxyException, + ResetSpendRequest, UpdateKeyRequest, ) from litellm.proxy.auth.user_api_key_auth import UserAPIKeyAuth @@ -37,6 +39,7 @@ from litellm.proxy.management_endpoints.key_management_endpoints import ( _save_deleted_verification_token_records, _transform_verification_tokens_to_deleted_records, _validate_max_budget, + _validate_reset_spend_value, can_modify_verification_token, check_org_key_model_specific_limits, check_team_key_model_specific_limits, @@ -44,6 +47,8 @@ from litellm.proxy.management_endpoints.key_management_endpoints import ( generate_key_helper_fn, list_keys, prepare_key_update_data, + reset_key_spend_fn, + validate_key_list_check, validate_key_team_change, ) from litellm.proxy.proxy_server import app @@ -4690,3 +4695,699 @@ async def test_bulk_update_keys_partial_failures(monkeypatch): assert response.successful_updates[0].key == "test-key-1" assert response.failed_updates[0].key == "non-existent-key" assert "Key not found" in response.failed_updates[0].failed_reason + + +@pytest.mark.parametrize( + "reset_to,key_spend,key_max_budget,budget_max_budget,expected_error", + [ + ("not_a_number", 100.0, None, None, "reset_to must be a float"), + (None, 100.0, None, None, "reset_to must be a float"), + ([], 100.0, None, None, "reset_to must be a float"), + ({}, 100.0, None, None, "reset_to must be a float"), + (-1.0, 100.0, None, None, "reset_to must be >= 0"), + (-0.1, 100.0, None, None, "reset_to must be >= 0"), + (101.0, 100.0, None, None, "reset_to (101.0) must be <= current spend (100.0)"), + (150.0, 100.0, None, None, "reset_to (150.0) must be <= current spend (100.0)"), + (50.0, 100.0, 30.0, None, "reset_to (50.0) must be <= budget (30.0)"), + ], +) +def test_validate_reset_spend_value_invalid( + reset_to, key_spend, key_max_budget, budget_max_budget, expected_error +): + key_in_db = LiteLLM_VerificationToken( + token="test-token", + user_id="test-user", + spend=key_spend, + max_budget=key_max_budget, + litellm_budget_table=LiteLLM_BudgetTable( + budget_id="test-budget", max_budget=budget_max_budget + ).dict() + if budget_max_budget is not None + else None, + ) + + with pytest.raises(HTTPException) as exc_info: + _validate_reset_spend_value(reset_to, key_in_db) + + assert exc_info.value.status_code == 400 + assert expected_error in str(exc_info.value.detail) + + +@pytest.mark.parametrize( + "reset_to,key_spend,key_max_budget,budget_max_budget", + [ + (0.0, 100.0, None, None), + (0, 100.0, None, None), + (50.0, 100.0, None, None), + (100.0, 100.0, None, None), + (25.0, 100.0, 50.0, None), + (0.0, 0.0, None, None), + (10.5, 50.0, 20.0, None), + ], +) +def test_validate_reset_spend_value_valid( + reset_to, key_spend, key_max_budget, budget_max_budget +): + key_in_db = LiteLLM_VerificationToken( + token="test-token", + user_id="test-user", + spend=key_spend, + max_budget=key_max_budget, + litellm_budget_table=LiteLLM_BudgetTable( + budget_id="test-budget", max_budget=budget_max_budget + ).dict() + if budget_max_budget is not None + else None, + ) + + result = _validate_reset_spend_value(reset_to, key_in_db) + assert result == float(reset_to) + + +def test_validate_reset_spend_value_no_budget_table(): + key_in_db = LiteLLM_VerificationToken( + token="test-token", + user_id="test-user", + spend=100.0, + max_budget=50.0, + litellm_budget_table=None, + ) + + result = _validate_reset_spend_value(25.0, key_in_db) + assert result == 25.0 + + +def test_validate_reset_spend_value_none_spend(): + key_in_db = LiteLLM_VerificationToken( + token="test-token", + user_id="test-user", + spend=0.0, + max_budget=None, + litellm_budget_table=None, + ) + + result = _validate_reset_spend_value(0.0, key_in_db) + assert result == 0.0 + + with pytest.raises(HTTPException) as exc_info: + _validate_reset_spend_value(1.0, key_in_db) + assert exc_info.value.status_code == 400 + assert "must be <= current spend" in str(exc_info.value.detail) + + +@pytest.mark.asyncio +async def test_reset_key_spend_success(monkeypatch): + mock_prisma_client = MagicMock() + mock_user_api_key_cache = MagicMock() + mock_proxy_logging_obj = MagicMock() + + hashed_key = "hashed-test-key" + key_in_db = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + spend=100.0, + max_budget=200.0, + litellm_budget_table=None, + ) + + updated_key = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + spend=50.0, + max_budget=200.0, + budget_reset_at=None, + ) + + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_in_db + ) + mock_prisma_client.db.litellm_verificationtoken.update = AsyncMock( + return_value=updated_key + ) + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.user_api_key_cache", mock_user_api_key_cache + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.proxy_logging_obj", mock_proxy_logging_obj + ) + + with patch( + "litellm.proxy.proxy_server.hash_token" + ) as mock_hash_token, patch( + "litellm.proxy.management_endpoints.key_management_endpoints._check_proxy_or_team_admin_for_key" + ) as mock_check_admin, patch( + "litellm.proxy.management_endpoints.key_management_endpoints._delete_cache_key_object" + ) as mock_delete_cache: + mock_hash_token.return_value = hashed_key + mock_check_admin.return_value = None + mock_delete_cache.return_value = None + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + api_key="sk-admin", + user_id="admin-user", + ) + + response = await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert response["spend"] == 50.0 + assert response["previous_spend"] == 100.0 + assert response["key_hash"] == hashed_key + assert response["max_budget"] == 200.0 + mock_prisma_client.db.litellm_verificationtoken.update.assert_called_once() + mock_delete_cache.assert_awaited_once() + + +@pytest.mark.asyncio +async def test_reset_key_spend_success_team_admin(monkeypatch): + """Test that team admin can reset key spend for keys in their team.""" + mock_prisma_client = MagicMock() + mock_user_api_key_cache = MagicMock() + mock_proxy_logging_obj = MagicMock() + + hashed_key = "hashed-test-key" + team_id = "test-team-123" + key_in_db = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + team_id=team_id, + spend=100.0, + max_budget=200.0, + litellm_budget_table=None, + ) + + updated_key = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + team_id=team_id, + spend=50.0, + max_budget=200.0, + budget_reset_at=None, + ) + + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_in_db + ) + mock_prisma_client.db.litellm_verificationtoken.update = AsyncMock( + return_value=updated_key + ) + + # Set up team table with user as admin + team_table = LiteLLM_TeamTableCachedObj( + team_id=team_id, + team_alias="test-team", + tpm_limit=None, + rpm_limit=None, + max_budget=None, + spend=0.0, + models=[], + blocked=False, + members_with_roles=[ + Member(user_id="team-admin-user", role="admin"), + Member(user_id="test-user", role="user"), + ], + ) + + async def mock_get_team_object(*args, **kwargs): + return team_table + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.user_api_key_cache", mock_user_api_key_cache + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.proxy_logging_obj", mock_proxy_logging_obj + ) + monkeypatch.setattr( + "litellm.proxy.management_endpoints.key_management_endpoints.get_team_object", + mock_get_team_object, + ) + + with patch( + "litellm.proxy.proxy_server.hash_token" + ) as mock_hash_token, patch( + "litellm.proxy.management_endpoints.key_management_endpoints._delete_cache_key_object" + ) as mock_delete_cache: + mock_hash_token.return_value = hashed_key + mock_delete_cache.return_value = None + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + api_key="sk-team-admin", + user_id="team-admin-user", + ) + + response = await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert response["spend"] == 50.0 + assert response["previous_spend"] == 100.0 + assert response["key_hash"] == hashed_key + assert response["max_budget"] == 200.0 + mock_prisma_client.db.litellm_verificationtoken.update.assert_called_once() + mock_delete_cache.assert_awaited_once() + + +@pytest.mark.asyncio +async def test_reset_key_spend_key_not_found(monkeypatch): + mock_prisma_client = MagicMock() + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=None + ) + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + + with patch("litellm.proxy.proxy_server.hash_token") as mock_hash_token: + mock_hash_token.return_value = "hashed-key" + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + api_key="sk-admin", + user_id="admin-user", + ) + + with pytest.raises(HTTPException) as exc_info: + await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert exc_info.value.status_code == 404 + assert "Key not found" in str(exc_info.value.detail) or "Key sk-test-key not found" in str(exc_info.value.detail) + + +@pytest.mark.asyncio +async def test_reset_key_spend_db_not_connected(monkeypatch): + monkeypatch.setattr("litellm.proxy.proxy_server.prisma_client", None) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + api_key="sk-admin", + user_id="admin-user", + ) + + with pytest.raises(HTTPException) as exc_info: + await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert exc_info.value.status_code == 500 + assert "DB not connected" in str(exc_info.value.detail) + + +@pytest.mark.asyncio +async def test_reset_key_spend_validation_error(monkeypatch): + mock_prisma_client = MagicMock() + key_in_db = LiteLLM_VerificationToken( + token="hashed-key", + user_id="test-user", + spend=100.0, + max_budget=None, + litellm_budget_table=None, + ) + + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_in_db + ) + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + + with patch("litellm.proxy.proxy_server.hash_token") as mock_hash_token: + mock_hash_token.return_value = "hashed-key" + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + api_key="sk-admin", + user_id="admin-user", + ) + + with pytest.raises(HTTPException) as exc_info: + await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=150.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert exc_info.value.status_code == 400 + assert "must be <= current spend" in str(exc_info.value.detail) + + +@pytest.mark.asyncio +async def test_reset_key_spend_authorization_failure(monkeypatch): + mock_prisma_client = MagicMock() + mock_user_api_key_cache = MagicMock() + + hashed_key = "hashed-test-key" + key_in_db = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + team_id="team-1", + spend=100.0, + max_budget=None, + litellm_budget_table=None, + ) + + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_in_db + ) + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.user_api_key_cache", mock_user_api_key_cache + ) + + with patch("litellm.proxy.proxy_server.hash_token") as mock_hash_token, patch( + "litellm.proxy.management_endpoints.key_management_endpoints._check_proxy_or_team_admin_for_key" + ) as mock_check_admin: + mock_hash_token.return_value = hashed_key + mock_check_admin.side_effect = HTTPException( + status_code=403, detail={"error": "Not authorized"} + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + api_key="sk-user", + user_id="user-1", + ) + + with pytest.raises(HTTPException) as exc_info: + await reset_key_spend_fn( + key="sk-test-key", + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert exc_info.value.status_code == 403 + + +@pytest.mark.asyncio +async def test_reset_key_spend_hashed_key(monkeypatch): + mock_prisma_client = MagicMock() + mock_user_api_key_cache = MagicMock() + mock_proxy_logging_obj = MagicMock() + + hashed_key = "already-hashed-key" + key_in_db = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + spend=100.0, + max_budget=None, + litellm_budget_table=None, + ) + + updated_key = LiteLLM_VerificationToken( + token=hashed_key, + user_id="test-user", + spend=50.0, + max_budget=None, + budget_reset_at=None, + ) + + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_in_db + ) + mock_prisma_client.db.litellm_verificationtoken.update = AsyncMock( + return_value=updated_key + ) + + monkeypatch.setattr( + "litellm.proxy.proxy_server.prisma_client", mock_prisma_client + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.user_api_key_cache", mock_user_api_key_cache + ) + monkeypatch.setattr( + "litellm.proxy.proxy_server.proxy_logging_obj", mock_proxy_logging_obj + ) + + with patch( + "litellm.proxy.management_endpoints.key_management_endpoints._check_proxy_or_team_admin_for_key" + ) as mock_check_admin, patch( + "litellm.proxy.management_endpoints.key_management_endpoints._delete_cache_key_object" + ) as mock_delete_cache: + mock_check_admin.return_value = None + mock_delete_cache.return_value = None + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + api_key="sk-admin", + user_id="admin-user", + ) + + response = await reset_key_spend_fn( + key=hashed_key, + data=ResetSpendRequest(reset_to=50.0), + user_api_key_dict=user_api_key_dict, + litellm_changed_by=None, + ) + + assert response["spend"] == 50.0 + mock_prisma_client.db.litellm_verificationtoken.find_unique.assert_called_once_with( + where={"token": hashed_key}, include={"litellm_budget_table": True} + ) + + +@pytest.mark.asyncio +async def test_validate_key_list_check_proxy_admin(): + mock_prisma_client = AsyncMock() + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.PROXY_ADMIN, + user_id="admin-user", + ) + + result = await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id=None, + organization_id=None, + key_alias=None, + key_hash=None, + prisma_client=mock_prisma_client, + ) + + assert result is None + + +@pytest.mark.asyncio +async def test_validate_key_list_check_team_admin_success(): + mock_prisma_client = AsyncMock() + user_info = LiteLLM_UserTable( + user_id="test-user", + user_email="test@example.com", + teams=["team-1"], + organization_memberships=[], + ) + + mock_prisma_client.db.litellm_usertable.find_unique = AsyncMock( + return_value=user_info + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + user_id="test-user", + ) + + result = await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id="team-1", + organization_id=None, + key_alias=None, + key_hash=None, + prisma_client=mock_prisma_client, + ) + + assert result is not None + assert result.user_id == "test-user" + + +@pytest.mark.asyncio +async def test_validate_key_list_check_team_admin_fail(): + mock_prisma_client = AsyncMock() + user_info = LiteLLM_UserTable( + user_id="test-user", + user_email="test@example.com", + teams=["team-1"], + organization_memberships=[], + ) + + mock_prisma_client.db.litellm_usertable.find_unique = AsyncMock( + return_value=user_info + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + user_id="test-user", + ) + + with pytest.raises(ProxyException) as exc_info: + await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id="team-2", + organization_id=None, + key_alias=None, + key_hash=None, + prisma_client=mock_prisma_client, + ) + + assert exc_info.value.code == "403" or exc_info.value.code == 403 + assert "not authorized to check this team's keys" in exc_info.value.message + + +@pytest.mark.asyncio +async def test_validate_key_list_check_key_hash_authorized(): + mock_prisma_client = AsyncMock() + user_info = LiteLLM_UserTable( + user_id="test-user", + user_email="test@example.com", + teams=[], + organization_memberships=[], + ) + + key_info = LiteLLM_VerificationToken( + token="hashed-key", + user_id="test-user", + ) + + mock_prisma_client.db.litellm_usertable.find_unique = AsyncMock( + return_value=user_info + ) + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_info + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + user_id="test-user", + ) + + with patch( + "litellm.proxy.management_endpoints.key_management_endpoints._can_user_query_key_info" + ) as mock_can_query: + mock_can_query.return_value = True + + result = await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id=None, + organization_id=None, + key_alias=None, + key_hash="hashed-key", + prisma_client=mock_prisma_client, + ) + + assert result is not None + assert result.user_id == "test-user" + + +@pytest.mark.asyncio +async def test_validate_key_list_check_key_hash_unauthorized(): + mock_prisma_client = AsyncMock() + user_info = LiteLLM_UserTable( + user_id="test-user", + user_email="test@example.com", + teams=[], + organization_memberships=[], + ) + + key_info = LiteLLM_VerificationToken( + token="hashed-key", + user_id="other-user", + ) + + mock_prisma_client.db.litellm_usertable.find_unique = AsyncMock( + return_value=user_info + ) + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + return_value=key_info + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + user_id="test-user", + ) + + with patch( + "litellm.proxy.management_endpoints.key_management_endpoints._can_user_query_key_info" + ) as mock_can_query: + mock_can_query.return_value = False + + with pytest.raises(HTTPException) as exc_info: + await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id=None, + organization_id=None, + key_alias=None, + key_hash="hashed-key", + prisma_client=mock_prisma_client, + ) + + assert exc_info.value.status_code == 403 + assert "not allowed to access this key's info" in str(exc_info.value.detail) + + +@pytest.mark.asyncio +async def test_validate_key_list_check_key_hash_not_found(): + mock_prisma_client = AsyncMock() + user_info = LiteLLM_UserTable( + user_id="test-user", + user_email="test@example.com", + teams=[], + organization_memberships=[], + ) + + mock_prisma_client.db.litellm_usertable.find_unique = AsyncMock( + return_value=user_info + ) + mock_prisma_client.db.litellm_verificationtoken.find_unique = AsyncMock( + side_effect=Exception("Key not found") + ) + + user_api_key_dict = UserAPIKeyAuth( + user_role=LitellmUserRoles.INTERNAL_USER, + user_id="test-user", + ) + + with pytest.raises(ProxyException) as exc_info: + await validate_key_list_check( + user_api_key_dict=user_api_key_dict, + user_id=None, + team_id=None, + organization_id=None, + key_alias=None, + key_hash="non-existent-key", + prisma_client=mock_prisma_client, + ) + + assert exc_info.value.code == "403" or exc_info.value.code == 403 + assert "Key Hash not found" in exc_info.value.message From 16f0b4942a9acca0073a7c0494b1760f857dfd4a Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 16:34:23 -0800 Subject: [PATCH 05/29] team setting disable global guardrail fix --- .../src/components/team/team_info.test.tsx | 878 +++++++++--------- .../src/components/team/team_info.tsx | 28 +- 2 files changed, 465 insertions(+), 441 deletions(-) diff --git a/ui/litellm-dashboard/src/components/team/team_info.test.tsx b/ui/litellm-dashboard/src/components/team/team_info.test.tsx index 6d5e55f734..bedc4d195c 100644 --- a/ui/litellm-dashboard/src/components/team/team_info.test.tsx +++ b/ui/litellm-dashboard/src/components/team/team_info.test.tsx @@ -1,10 +1,10 @@ import * as networking from "@/components/networking"; -import { act, fireEvent, screen, waitFor } from "@testing-library/react"; -import { renderWithProviders } from "../../../tests/test-utils"; +import { screen, waitFor } from "@testing-library/react"; +import userEvent from "@testing-library/user-event"; import { afterEach, beforeEach, describe, expect, it, vi } from "vitest"; +import { renderWithProviders } from "../../../tests/test-utils"; import TeamInfoView from "./team_info"; -// Mock the networking module vi.mock("@/components/networking", () => ({ teamInfoCall: vi.fn(), teamMemberDeleteCall: vi.fn(), @@ -12,12 +12,18 @@ vi.mock("@/components/networking", () => ({ teamMemberUpdateCall: vi.fn(), teamUpdateCall: vi.fn(), getGuardrailsList: vi.fn(), + getPoliciesList: vi.fn(), + getPolicyInfoWithGuardrails: vi.fn(), fetchMCPAccessGroups: vi.fn(), getTeamPermissionsCall: vi.fn(), organizationInfoCall: vi.fn(), })); -// Mock hooks used by ModelSelect +vi.mock("@/components/utils/dataUtils", () => ({ + copyToClipboard: vi.fn().mockResolvedValue(true), + formatNumberWithCommas: vi.fn((value: number) => value.toLocaleString()), +})); + vi.mock("@/app/(dashboard)/hooks/models/useModels", () => ({ useAllProxyModels: vi.fn(), })); @@ -34,6 +40,59 @@ vi.mock("@/app/(dashboard)/hooks/users/useCurrentUser", () => ({ useCurrentUser: vi.fn(), })); +vi.mock("@/components/team/team_member_view", () => ({ + default: vi.fn(({ setIsAddMemberModalVisible }) => ( +
+ +
+ )), +})); + +vi.mock("@/components/common_components/user_search_modal", () => ({ + default: vi.fn(({ isVisible, onCancel, onSubmit }) => + isVisible ? ( +
+ + +
+ ) : null + ), +})); + +vi.mock("@/components/team/EditMembership", () => ({ + default: vi.fn(({ visible, onCancel, onSubmit }) => + visible ? ( +
+ + +
+ ) : null + ), +})); + +vi.mock("@/components/common_components/DeleteResourceModal", () => ({ + default: vi.fn(({ isOpen, onCancel, onOk }) => + isOpen ? ( +
+ + +
+ ) : null + ), +})); + +vi.mock("@/components/team/member_permissions", () => ({ + default: vi.fn(() =>
Member Permissions
), +})); + +vi.mock("@/components/team/member_permissions", () => ({ + default: vi.fn(() =>
Member Permissions
), +})); + import { useAllProxyModels } from "@/app/(dashboard)/hooks/models/useModels"; import { useOrganization } from "@/app/(dashboard)/hooks/organizations/useOrganizations"; import { useTeam } from "@/app/(dashboard)/hooks/teams/useTeams"; @@ -44,9 +103,60 @@ const mockUseTeam = vi.mocked(useTeam); const mockUseOrganization = vi.mocked(useOrganization); const mockUseCurrentUser = vi.mocked(useCurrentUser); +const createMockTeamData = (overrides = {}) => ({ + team_id: "123", + team_info: { + team_alias: "Test Team", + team_id: "123", + organization_id: null, + admins: ["admin@test.com"], + members: ["user1@test.com"], + members_with_roles: [ + { + user_id: "user1@test.com", + user_email: "user1@test.com", + role: "member", + spend: 0, + budget_id: "budget1", + }, + ], + metadata: {}, + tpm_limit: null, + rpm_limit: null, + max_budget: null, + budget_duration: null, + models: [], + blocked: false, + spend: 0, + max_parallel_requests: null, + budget_reset_at: null, + model_id: null, + litellm_model_table: null, + created_at: "2024-01-01T00:00:00Z", + team_member_budget_table: null, + guardrails: [], + policies: [], + object_permission: null, + ...overrides, + }, + keys: [], + team_memberships: [], +}); + describe("TeamInfoView", () => { + const defaultProps = { + teamId: "123", + onUpdate: vi.fn(), + onClose: vi.fn(), + accessToken: "test-token", + is_team_admin: true, + is_proxy_admin: true, + userModels: ["gpt-4", "gpt-3.5-turbo"], + editTeam: false, + premiumUser: false, + }; + beforeEach(() => { - // Set up default mock implementations mockUseAllProxyModels.mockReturnValue({ data: { data: [] }, isLoading: false, @@ -63,6 +173,14 @@ describe("TeamInfoView", () => { data: { models: [] }, isLoading: false, } as any); + + vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); + vi.mocked(networking.getPoliciesList).mockResolvedValue({ policies: [] }); + vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); + vi.mocked(networking.getTeamPermissionsCall).mockResolvedValue({ + all_available_permissions: [], + team_member_permissions: [], + }); }); afterEach(() => { @@ -70,503 +188,409 @@ describe("TeamInfoView", () => { }); it("should render", async () => { - // Mock the team info response - vi.mocked(networking.teamInfoCall).mockResolvedValue({ - team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: null, - admins: ["admin@test.com"], - members: ["user1@test.com", "user2@test.com"], - members_with_roles: [ - { - user_id: "user1@test.com", - user_email: "user1@test.com", - role: "member", - spend: 0, - budget_id: "budget1", - }, - ], - metadata: {}, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: [], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - }, - keys: [], - team_memberships: [], + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); }); - - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={[]} - editTeam={false} - premiumUser={false} - />, - ); - await waitFor( - () => { - expect(screen.queryByText("User ID")).not.toBeNull(); - }, - // This is a workaround to fix the flaky test issue. TODO: Remove this once we have a better solution. - { timeout: 10000 }, - ); }); - it("should not show all-proxy-models option when user has no access to it", async () => { + it("should display loading state while fetching team data", () => { + vi.mocked(networking.teamInfoCall).mockImplementation(() => new Promise(() => { })); + + renderWithProviders(); + + expect(screen.getByText("Loading...")).toBeInTheDocument(); + }); + + it("should display error message when team is not found", async () => { vi.mocked(networking.teamInfoCall).mockResolvedValue({ team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: null, - admins: ["admin@test.com"], - members: ["user1@test.com", "user2@test.com"], - members_with_roles: [ - { - user_id: "user1@test.com", - user_email: "user1@test.com", - role: "member", - spend: 0, - budget_id: "budget1", - }, - ], - metadata: {}, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: ["gpt-4"], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - }, + team_info: null as any, keys: [], team_memberships: [], }); - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={["gpt-4", "gpt-3.5-turbo"]} - editTeam={false} - premiumUser={false} - />, - ); + renderWithProviders(); await waitFor(() => { - expect(screen.getAllByText("Test Team")).not.toBeNull(); + expect(screen.getByText("Team not found")).toBeInTheDocument(); + }); + }); + + it("should display budget information in overview", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ + max_budget: 1000, + spend: 250.5, + budget_duration: "30d", + }) + ); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Budget Status")).toBeInTheDocument(); + }); + }); + + it("should display guardrails in overview when present", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ + guardrails: ["guardrail1", "guardrail2"], + }) + ); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Guardrails")).toBeInTheDocument(); + }); + }); + + it("should display policies in overview when present", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ + policies: ["policy1"], + }) + ); + vi.mocked(networking.getPolicyInfoWithGuardrails).mockResolvedValue({ + resolved_guardrails: ["guardrail1"], + }); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Policies")).toBeInTheDocument(); + }); + }); + + it("should show members tab when user can edit team", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("tab", { name: "Members" })).toBeInTheDocument(); + }); + }); + + it("should not show members tab when user cannot edit team", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + expect(screen.queryByRole("tab", { name: "Members" })).not.toBeInTheDocument(); + }); + + it("should show settings tab when user can edit team", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("tab", { name: "Settings" })).toBeInTheDocument(); + }); + }); + + it("should navigate to settings tab when clicked", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); }); const settingsTab = screen.getByRole("tab", { name: "Settings" }); - act(() => { - fireEvent.click(settingsTab); - }); + await user.click(settingsTab); await waitFor(() => { expect(screen.getByText("Team Settings")).toBeInTheDocument(); }); + }); - const editButton = screen.getByRole("button", { name: "Edit Settings" }); - act(() => { - fireEvent.click(editButton); - }); + it("should open edit mode when edit button is clicked", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); await waitFor(() => { - expect(screen.getByTestId("models-select")).toBeInTheDocument(); - }); - - const allProxyModelsOption = screen.queryByText("All Proxy Models"); - expect(allProxyModelsOption).not.toBeInTheDocument(); - }, 10000); // This is a workaround to fix the flaky test issue. TODO: Remove this once we have a better solution. - - it("should only show organization models in dropdown when team is in organization with limited models", async () => { - const organizationId = "org-123"; - const organizationModels = ["gpt-4", "claude-3-opus"]; - const userModels = ["gpt-4", "gpt-3.5-turbo", "claude-3-opus", "claude-2"]; - - // Mock all proxy models - should include all user models - const allProxyModels = userModels.map((id) => ({ - id, - object: "model", - created: 1234567890, - owned_by: "openai", - })); - - mockUseAllProxyModels.mockReturnValue({ - data: { data: allProxyModels }, - isLoading: false, - } as any); - - mockUseCurrentUser.mockReturnValue({ - data: { models: userModels }, - isLoading: false, - } as any); - - const organizationData = { - organization_id: organizationId, - organization_name: "Test Organization", - spend: 0, - max_budget: null, - models: organizationModels, - tpm_limit: null, - rpm_limit: null, - members: null, - }; - - mockUseOrganization.mockReturnValue({ - data: organizationData, - isLoading: false, - } as any); - - vi.mocked(networking.teamInfoCall).mockResolvedValue({ - team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: organizationId, - admins: ["admin@test.com"], - members: ["user1@test.com"], - members_with_roles: [ - { - user_id: "user1@test.com", - user_email: "user1@test.com", - role: "member", - spend: 0, - budget_id: "budget1", - }, - ], - metadata: {}, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: ["gpt-4"], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - }, - keys: [], - team_memberships: [], - }); - - vi.mocked(networking.organizationInfoCall).mockResolvedValue(organizationData); - - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={userModels} - editTeam={false} - premiumUser={false} - />, - ); - - await waitFor(() => { - expect(screen.getAllByText("Test Team")).not.toBeNull(); + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); }); const settingsTab = screen.getByRole("tab", { name: "Settings" }); - act(() => { - fireEvent.click(settingsTab); - }); + await user.click(settingsTab); await waitFor(() => { - expect(screen.getByText("Team Settings")).toBeInTheDocument(); + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); }); const editButton = screen.getByRole("button", { name: "Edit Settings" }); - act(() => { - fireEvent.click(editButton); - }); + await user.click(editButton); await waitFor(() => { - expect(screen.getByTestId("models-select")).toBeInTheDocument(); + expect(screen.getByLabelText("Team Name")).toBeInTheDocument(); + }); + }); + + it("should close edit mode when cancel button is clicked", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); }); - // Find the Ant Design Select selector element to open the dropdown - // The data-testid is on the Select component, we need to find the selector inside it - const modelsSelectElement = screen.getByTestId("models-select"); - const selectSelector = modelsSelectElement.querySelector(".ant-select-selector"); - expect(selectSelector).toBeTruthy(); + const settingsTab = screen.getByRole("tab", { name: "Settings" }); + await user.click(settingsTab); - // Open the dropdown by clicking on the selector - act(() => { - fireEvent.mouseDown(selectSelector!); + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); }); - // Wait for dropdown to open - Ant Design renders options in a portal - await waitFor( - () => { - const dropdownOptions = document.querySelectorAll(".ant-select-item-option"); - expect(dropdownOptions.length).toBeGreaterThan(0); - }, - { timeout: 5000 }, - ); + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await user.click(editButton); - const dropdownOptions = document.querySelectorAll(".ant-select-item-option"); - const optionTexts = Array.from(dropdownOptions).map((option) => option.textContent?.trim() || ""); - - organizationModels.forEach((model) => { - expect(optionTexts).toContain(model); + await waitFor(() => { + expect(screen.getByLabelText("Team Name")).toBeInTheDocument(); }); - const modelsNotInOrganization = userModels.filter((m) => !organizationModels.includes(m)); - modelsNotInOrganization.forEach((model) => { - expect(optionTexts).not.toContain(model); + const cancelButton = screen.getByRole("button", { name: "Cancel" }); + await user.click(cancelButton); + + await waitFor(() => { + expect(screen.queryByLabelText("Team Name")).not.toBeInTheDocument(); }); - }, 10000); + }); + + it("should call onClose when back button is clicked", async () => { + const user = userEvent.setup(); + const onClose = vi.fn(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + const backButton = screen.getByRole("button", { name: /back to teams/i }); + await user.click(backButton); + + expect(onClose).toHaveBeenCalled(); + }); + + it("should copy team ID to clipboard when copy button is clicked", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + const copyButtons = screen.getAllByRole("button"); + const copyButton = copyButtons.find((btn) => btn.querySelector("svg")); + expect(copyButton).toBeTruthy(); + + if (copyButton) { + await user.click(copyButton); + } + }); it("should disable secret manager settings for non-premium users", async () => { - const teamResponse = { - team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: null, - admins: ["admin@test.com"], - members: [], - members_with_roles: [], + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ metadata: { secret_manager_settings: { provider: "aws", secret_id: "abc" }, }, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: ["gpt-4"], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - }, - keys: [], - team_memberships: [], - }; - - vi.mocked(networking.teamInfoCall).mockResolvedValue(teamResponse as any); - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={["gpt-4"]} - editTeam={false} - premiumUser={false} - />, + }) ); - const settingsTab = await screen.findByRole("tab", { name: "Settings" }); - act(() => fireEvent.click(settingsTab)); + renderWithProviders(); - const editButton = await screen.findByRole("button", { name: "Edit Settings" }); - act(() => fireEvent.click(editButton)); + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + const settingsTab = screen.getByRole("tab", { name: "Settings" }); + await user.click(settingsTab); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await user.click(editButton); const secretField = await screen.findByPlaceholderText( - '{"namespace": "admin", "mount": "secret", "path_prefix": "litellm"}', + '{"namespace": "admin", "mount": "secret", "path_prefix": "litellm"}' ); expect(secretField).toBeDisabled(); - expect(secretField).toHaveValue(JSON.stringify(teamResponse.team_info.metadata.secret_manager_settings, null, 2)); - }, 10000); + }); - it("should allow premium users to update secret manager settings", async () => { - const teamResponse = { - team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: null, - admins: ["admin@test.com"], - members: [], - members_with_roles: [], + it("should allow premium users to edit secret manager settings", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ metadata: { secret_manager_settings: { provider: "aws", secret_id: "abc" }, }, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: ["gpt-4"], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - }, - keys: [], - team_memberships: [], - }; - - vi.mocked(networking.teamInfoCall).mockResolvedValue(teamResponse as any); - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - vi.mocked(networking.teamUpdateCall).mockResolvedValue({ data: teamResponse.team_info, team_id: "123" } as any); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={["gpt-4"]} - editTeam={false} - premiumUser={true} - />, + }) ); + vi.mocked(networking.teamUpdateCall).mockResolvedValue({ data: {}, team_id: "123" } as any); - const settingsTab = await screen.findByRole("tab", { name: "Settings" }); - act(() => fireEvent.click(settingsTab)); + renderWithProviders(); - const editButton = await screen.findByRole("button", { name: "Edit Settings" }); - act(() => fireEvent.click(editButton)); + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + const settingsTab = screen.getByRole("tab", { name: "Settings" }); + await user.click(settingsTab); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await user.click(editButton); const secretField = await screen.findByPlaceholderText( - '{"namespace": "admin", "mount": "secret", "path_prefix": "litellm"}', + '{"namespace": "admin", "mount": "secret", "path_prefix": "litellm"}' ); expect(secretField).not.toBeDisabled(); + }); - act(() => { - fireEvent.change(secretField, { target: { value: '{"provider":"azure","secret_id":"xyz"}' } }); - }); + it("should add team member when form is submitted", async () => { + const user = userEvent.setup(); + const onUpdate = vi.fn(); + const teamData = createMockTeamData(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(teamData); + vi.mocked(networking.teamMemberAddCall).mockResolvedValue({} as any); - const saveButton = await screen.findByRole("button", { name: "Save Changes" }); - act(() => fireEvent.click(saveButton)); + renderWithProviders(); await waitFor(() => { - expect(networking.teamUpdateCall).toHaveBeenCalled(); + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); }); - const payload = vi.mocked(networking.teamUpdateCall).mock.calls[0][1]; - expect(payload.metadata.secret_manager_settings).toEqual({ provider: "azure", secret_id: "xyz" }); - }, 10000); + const membersTab = screen.getByRole("tab", { name: "Members" }); + await user.click(membersTab); - it("should include vector stores in object_permission when updating team", async () => { - const teamResponse = { - team_id: "123", - team_info: { - team_alias: "Test Team", - team_id: "123", - organization_id: null, - admins: ["admin@test.com"], - members: [], - members_with_roles: [], - metadata: {}, - tpm_limit: null, - rpm_limit: null, - max_budget: null, - budget_duration: null, - models: ["gpt-4"], - blocked: false, - spend: 0, - max_parallel_requests: null, - budget_reset_at: null, - model_id: null, - litellm_model_table: null, - created_at: "2024-01-01T00:00:00Z", - team_member_budget_table: null, - object_permission: { - vector_stores: ["store1", "store2"], + await waitFor(() => { + expect(screen.getByRole("button", { name: "Add Member" })).toBeInTheDocument(); + }); + + const addButton = screen.getByRole("button", { name: "Add Member" }); + await user.click(addButton); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Submit" })).toBeInTheDocument(); + }); + + const submitButton = screen.getByRole("button", { name: "Submit" }); + await user.click(submitButton); + + await waitFor(() => { + expect(networking.teamMemberAddCall).toHaveBeenCalled(); + }); + }); + + it("should open delete member modal when delete is triggered", async () => { + const user = userEvent.setup(); + vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); + vi.mocked(networking.teamMemberDeleteCall).mockResolvedValue({} as any); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + + const membersTab = screen.getByRole("tab", { name: "Members" }); + await user.click(membersTab); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Confirm Delete" })).toBeInTheDocument(); + }); + }); + + it("should display team member budget information when present", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ + team_member_budget_table: { + max_budget: 500, + budget_duration: "30d", + tpm_limit: 5000, + rpm_limit: 50, }, - }, - keys: [], - team_memberships: [], - }; - - vi.mocked(networking.teamInfoCall).mockResolvedValue(teamResponse as any); - vi.mocked(networking.getGuardrailsList).mockResolvedValue({ guardrails: [] }); - vi.mocked(networking.fetchMCPAccessGroups).mockResolvedValue([]); - vi.mocked(networking.teamUpdateCall).mockResolvedValue({ data: teamResponse.team_info, team_id: "123" } as any); - - renderWithProviders( - {}} - onClose={() => {}} - accessToken="123" - is_team_admin={true} - is_proxy_admin={true} - userModels={["gpt-4"]} - editTeam={false} - premiumUser={true} - />, + }) ); - const settingsTab = await screen.findByRole("tab", { name: "Settings" }); - act(() => fireEvent.click(settingsTab)); - - const editButton = await screen.findByRole("button", { name: "Edit Settings" }); - act(() => fireEvent.click(editButton)); - - // Verify that Vector Stores field is present - expect(screen.getByLabelText("Vector Stores")).toBeInTheDocument(); - - const saveButton = await screen.findByRole("button", { name: "Save Changes" }); - act(() => fireEvent.click(saveButton)); + renderWithProviders(); await waitFor(() => { - expect(networking.teamUpdateCall).toHaveBeenCalled(); + expect(screen.getByText("Budget Status")).toBeInTheDocument(); + }); + }); + + it("should display virtual keys information", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue({ + ...createMockTeamData(), + keys: [ + { user_id: "user1", token: "key1" }, + { token: "key2" }, + ], }); - const payload = vi.mocked(networking.teamUpdateCall).mock.calls[0][1]; - expect(payload.object_permission.vector_stores).toEqual(["store1", "store2"]); - }, 10000); + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Virtual Keys")).toBeInTheDocument(); + }); + }); + + it("should display object permissions when present", async () => { + vi.mocked(networking.teamInfoCall).mockResolvedValue( + createMockTeamData({ + object_permission: { + object_permission_id: "perm-1", + mcp_servers: ["server1"], + vector_stores: ["store1"], + }, + }) + ); + + renderWithProviders(); + + await waitFor(() => { + const teamNameElements = screen.queryAllByText("Test Team"); + expect(teamNameElements.length).toBeGreaterThan(0); + }); + }); }); diff --git a/ui/litellm-dashboard/src/components/team/team_info.tsx b/ui/litellm-dashboard/src/components/team/team_info.tsx index 193d056fdd..34ff903c86 100644 --- a/ui/litellm-dashboard/src/components/team/team_info.tsx +++ b/ui/litellm-dashboard/src/components/team/team_info.tsx @@ -462,6 +462,7 @@ const TeamInfoView: React.FC = ({ ...parsedMetadata, guardrails: values.guardrails || [], logging: values.logging_settings || [], + disable_global_guardrails: values.disable_global_guardrails || false, ...(secretManagerSettings !== undefined ? { secret_manager_settings: secretManagerSettings } : {}), }, policies: values.policies || [], @@ -572,11 +573,10 @@ const TeamInfoView: React.FC = ({ size="small" icon={copiedStates["team-id"] ? : } onClick={() => copyToClipboard(info.team_id, "team-id")} - className={`left-2 z-10 transition-all duration-200 ${ - copiedStates["team-id"] - ? "text-green-600 bg-green-50 border-green-200" - : "text-gray-500 hover:text-gray-700 hover:bg-gray-100" - }`} + className={`left-2 z-10 transition-all duration-200 ${copiedStates["team-id"] + ? "text-green-600 bg-green-50 border-green-200" + : "text-gray-500 hover:text-gray-700 hover:bg-gray-100" + }`} /> @@ -588,10 +588,10 @@ const TeamInfoView: React.FC = ({ Overview, ...(canEditTeam ? [ - Members, - Member Permissions, - Settings, - ] + Members, + Member Permissions, + Settings, + ] : []), ]} @@ -764,10 +764,10 @@ const TeamInfoView: React.FC = ({ disable_global_guardrails: info.metadata?.disable_global_guardrails || false, metadata: info.metadata ? JSON.stringify( - (({ logging, secret_manager_settings, ...rest }) => rest)(info.metadata), - null, - 2, - ) + (({ logging, secret_manager_settings, ...rest }) => rest)(info.metadata), + null, + 2, + ) : "", logging_settings: info.metadata?.logging || [], secret_manager_settings: info.metadata?.secret_manager_settings @@ -905,7 +905,7 @@ const TeamInfoView: React.FC = ({ - Disable Global Guardrails{" "} + Disable Global Guardrails From 2645d258cbcb6e0c2cc7cf5db4d5c6c9ee56838a Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 16:37:40 -0800 Subject: [PATCH 06/29] fixing tests --- .../src/components/team/team_info.test.tsx | 20 ------------------- 1 file changed, 20 deletions(-) diff --git a/ui/litellm-dashboard/src/components/team/team_info.test.tsx b/ui/litellm-dashboard/src/components/team/team_info.test.tsx index bedc4d195c..6c68188e37 100644 --- a/ui/litellm-dashboard/src/components/team/team_info.test.tsx +++ b/ui/litellm-dashboard/src/components/team/team_info.test.tsx @@ -520,26 +520,6 @@ describe("TeamInfoView", () => { }); }); - it("should open delete member modal when delete is triggered", async () => { - const user = userEvent.setup(); - vi.mocked(networking.teamInfoCall).mockResolvedValue(createMockTeamData()); - vi.mocked(networking.teamMemberDeleteCall).mockResolvedValue({} as any); - - renderWithProviders(); - - await waitFor(() => { - const teamNameElements = screen.queryAllByText("Test Team"); - expect(teamNameElements.length).toBeGreaterThan(0); - }); - - const membersTab = screen.getByRole("tab", { name: "Members" }); - await user.click(membersTab); - - await waitFor(() => { - expect(screen.getByRole("button", { name: "Confirm Delete" })).toBeInTheDocument(); - }); - }); - it("should display team member budget information when present", async () => { vi.mocked(networking.teamInfoCall).mockResolvedValue( createMockTeamData({ From 32b1ff7d1128a450f2ae35bc4315dccba36e67a9 Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 17:25:16 -0800 Subject: [PATCH 07/29] option to hide community engagement buttons --- .../CommunityEngagementButtons.test.tsx | 50 +++++++++++++++++++ .../CommunityEngagementButtons.tsx | 36 +++++++++++++ .../src/components/navbar.test.tsx | 39 ++++++--------- .../src/components/navbar.tsx | 24 ++------- 4 files changed, 103 insertions(+), 46 deletions(-) create mode 100644 ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.tsx diff --git a/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.test.tsx b/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.test.tsx new file mode 100644 index 0000000000..6994def858 --- /dev/null +++ b/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.test.tsx @@ -0,0 +1,50 @@ +import { beforeEach, describe, expect, it, vi } from "vitest"; +import { renderWithProviders, screen } from "../../../../tests/test-utils"; +import { CommunityEngagementButtons } from "./CommunityEngagementButtons"; + +let mockUseDisableShowPromptsImpl = () => false; + +vi.mock("@/app/(dashboard)/hooks/useDisableShowPrompts", () => ({ + useDisableShowPrompts: () => mockUseDisableShowPromptsImpl(), +})); + +describe("CommunityEngagementButtons", () => { + beforeEach(() => { + vi.clearAllMocks(); + mockUseDisableShowPromptsImpl = () => false; + }); + + it("should render", () => { + renderWithProviders(); + expect(screen.getByRole("link", { name: /join slack/i })).toBeInTheDocument(); + }); + + it("should render Join Slack button with correct link", () => { + renderWithProviders(); + + const joinSlackLink = screen.getByRole("link", { name: /join slack/i }); + expect(joinSlackLink).toBeInTheDocument(); + expect(joinSlackLink).toHaveAttribute("href", "https://www.litellm.ai/support"); + expect(joinSlackLink).toHaveAttribute("target", "_blank"); + expect(joinSlackLink).toHaveAttribute("rel", "noopener noreferrer"); + }); + + it("should render Star us on GitHub button with correct link", () => { + renderWithProviders(); + + const starOnGithubLink = screen.getByRole("link", { name: /star us on github/i }); + expect(starOnGithubLink).toBeInTheDocument(); + expect(starOnGithubLink).toHaveAttribute("href", "https://github.com/BerriAI/litellm"); + expect(starOnGithubLink).toHaveAttribute("target", "_blank"); + expect(starOnGithubLink).toHaveAttribute("rel", "noopener noreferrer"); + }); + + it("should not render buttons when prompts are disabled", () => { + mockUseDisableShowPromptsImpl = () => true; + + renderWithProviders(); + + expect(screen.queryByRole("link", { name: /join slack/i })).not.toBeInTheDocument(); + expect(screen.queryByRole("link", { name: /star us on github/i })).not.toBeInTheDocument(); + }); +}); diff --git a/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.tsx b/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.tsx new file mode 100644 index 0000000000..649bcc0b58 --- /dev/null +++ b/ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.tsx @@ -0,0 +1,36 @@ +import { useDisableShowPrompts } from "@/app/(dashboard)/hooks/useDisableShowPrompts"; +import { GithubOutlined, SlackOutlined } from "@ant-design/icons"; +import { Button } from "antd"; +import React from "react"; + +export const CommunityEngagementButtons: React.FC = () => { + const disableShowPrompts = useDisableShowPrompts(); + + // Hide buttons if prompts are disabled + if (disableShowPrompts) { + return null; + } + + return ( + <> + + + + ); +}; diff --git a/ui/litellm-dashboard/src/components/navbar.test.tsx b/ui/litellm-dashboard/src/components/navbar.test.tsx index a2996f7058..125187e234 100644 --- a/ui/litellm-dashboard/src/components/navbar.test.tsx +++ b/ui/litellm-dashboard/src/components/navbar.test.tsx @@ -12,11 +12,24 @@ vi.mock("@/utils/proxyUtils", () => ({ fetchProxySettings: vi.fn(), })); +// Mock CommunityEngagementButtons component +vi.mock("./Navbar/CommunityEngagementButtons/CommunityEngagementButtons", () => ({ + CommunityEngagementButtons: () => ( + + ), +})); + // Create mock functions that can be controlled in tests let mockUseThemeImpl = () => ({ logoUrl: null as string | null }); let mockUseHealthReadinessImpl = () => ({ data: null as any }); let mockGetLocalStorageItemImpl = (key: string) => null as string | null; -let mockUseDisableShowPromptsImpl = () => false; let mockUseAuthorizedImpl = () => ({ userId: "test-user", userEmail: "test@example.com", @@ -32,10 +45,6 @@ vi.mock("@/app/(dashboard)/hooks/healthReadiness/useHealthReadiness", () => ({ useHealthReadiness: () => mockUseHealthReadinessImpl(), })); -vi.mock("@/app/(dashboard)/hooks/useDisableShowPrompts", () => ({ - useDisableShowPrompts: () => mockUseDisableShowPromptsImpl(), -})); - vi.mock("@/app/(dashboard)/hooks/useAuthorized", () => ({ default: () => mockUseAuthorizedImpl(), })); @@ -79,26 +88,6 @@ describe("Navbar", () => { expect(screen.getByText("User")).toBeInTheDocument(); }); - it("should render Join Slack button with correct link", () => { - renderWithProviders(); - - const joinSlackLink = screen.getByRole("link", { name: /join slack/i }); - expect(joinSlackLink).toBeInTheDocument(); - expect(joinSlackLink).toHaveAttribute("href", "https://www.litellm.ai/support"); - expect(joinSlackLink).toHaveAttribute("target", "_blank"); - expect(joinSlackLink).toHaveAttribute("rel", "noopener noreferrer"); - }); - - it("should render Star us on GitHub button with correct link", () => { - renderWithProviders(); - - const starOnGithubLink = screen.getByRole("link", { name: /star us on github/i }); - expect(starOnGithubLink).toBeInTheDocument(); - expect(starOnGithubLink).toHaveAttribute("href", "https://github.com/BerriAI/litellm"); - expect(starOnGithubLink).toHaveAttribute("target", "_blank"); - expect(starOnGithubLink).toHaveAttribute("rel", "noopener noreferrer"); - }); - it("should display user information in dropdown", async () => { const user = userEvent.setup(); renderWithProviders(); diff --git a/ui/litellm-dashboard/src/components/navbar.tsx b/ui/litellm-dashboard/src/components/navbar.tsx index 3649ca7623..2ffa0632f2 100644 --- a/ui/litellm-dashboard/src/components/navbar.tsx +++ b/ui/litellm-dashboard/src/components/navbar.tsx @@ -4,16 +4,15 @@ import { useTheme } from "@/contexts/ThemeContext"; import { clearTokenCookies } from "@/utils/cookieUtils"; import { fetchProxySettings } from "@/utils/proxyUtils"; import { - GithubOutlined, MenuFoldOutlined, MenuUnfoldOutlined, MoonOutlined, - SlackOutlined, SunOutlined, } from "@ant-design/icons"; -import { Button, Switch, Tag } from "antd"; +import { Switch, Tag } from "antd"; import Link from "next/link"; import React, { useEffect, useState } from "react"; +import { CommunityEngagementButtons } from "./Navbar/CommunityEngagementButtons/CommunityEngagementButtons"; import UserDropdown from "./Navbar/UserDropdown/UserDropdown"; interface NavbarProps { @@ -129,24 +128,7 @@ const Navbar: React.FC = ({ {/* Right side nav items */}
- - + {/* Dark mode is currently a work in progress. To test, you can change 'false' to 'true' below. Do not set this to true by default until all components are confirmed to support dark mode styles. */} {false && Date: Mon, 2 Feb 2026 17:46:36 -0800 Subject: [PATCH 08/29] Add blog post: Achieving Sub-Millisecond Proxy Overhead (#20309) --- .../sub_millisecond_proxy_overhead/index.md | 92 +++++++++++++++++++ 1 file changed, 92 insertions(+) create mode 100644 docs/my-website/blog/sub_millisecond_proxy_overhead/index.md diff --git a/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md b/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md new file mode 100644 index 0000000000..1857383363 --- /dev/null +++ b/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md @@ -0,0 +1,92 @@ +--- +slug: sub-millisecond-proxy-overhead +title: "Achieving Sub-Millisecond Proxy Overhead" +date: 2026-02-02T10:00:00 +authors: + - name: Alexsander Hamir + title: "Performance Engineer, LiteLLM" + url: https://www.linkedin.com/in/alexsander-baptista/ + image_url: https://github.com/AlexsanderHamir.png + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Our Q1 performance target and architectural direction for achieving sub-millisecond proxy overhead on modest hardware." +tags: [performance, architecture] +hide_table_of_contents: false +--- + +![Sidecar architecture: Python control plane vs. sidecar hot path](https://raw.githubusercontent.com/AlexsanderHamir/assets/main/Screenshot%202026-02-02%20172554.png) + +# Achieving Sub-Millisecond Proxy Overhead + +## Introduction + +Our Q1 performance target is to aggressively move toward sub-millisecond proxy overhead on a single instance with 4 CPUs and 8 GB of RAM, and to continue pushing that boundary over time. Our broader goal is to make LiteLLM inexpensive to deploy, lightweight, and fast. This post outlines the architectural direction behind that effort. + +Proxy overhead refers to the latency introduced by LiteLLM itself, independent of the upstream provider. + +To measure it, we run the same workload directly against the provider and through LiteLLM at identical QPS (for example, 1,000 QPS) and compare the latency delta. To reduce noise, the load generator, LiteLLM, and a mock LLM endpoint all run on the same machine, ensuring the difference reflects proxy overhead rather than network latency. + +--- + +## Where We're Coming From + +Under the same benchmark originally conducted by [TensorZero](https://www.tensorzero.com/docs/gateway/benchmarks), LiteLLM previously failed at around 1,000 QPS. + +That is no longer the case. Today, LiteLLM can be stress-tested at 1,000 QPS with no failures and can scale up to 5,000 QPS without failures on a 4-CPU, 8-GB RAM single instance setup. + +This establishes a more up to date baseline and provides useful context as we continue working on proxy overhead and overall performance. + +--- + +## Design Choice + +Achieving sub-millisecond proxy overhead with a Python-based system requires being deliberate about where work happens. + +Python is a strong fit for flexibility and extensibility: provider abstraction, configuration-driven routing, and a rich callback ecosystem. These are areas where development velocity and correctness matter more than raw throughput. + +At higher request rates, however, certain classes of work become expensive when executed inside the Python process on every request. Rather than rewriting LiteLLM or introducing complex deployment requirements, we adopt an optional **sidecar architecture**. + +This architectural change is how we intend to make LiteLLM **permanently fast**. While it supports our near-term performance targets, it is a long-term investment. + +Python continues to own: + +- Request validation and normalization +- Model and provider selection +- Callbacks and integrations + +The sidecar owns **performance-critical execution**, such as: + +- Efficient request forwarding +- Connection reuse and pooling +- Enforcing timeouts and limits +- Aggregating high-frequency metrics + +This separation allows each component to focus on what it does best: Python acts as the control plane, while the sidecar handles the hot path. + +--- + +### Why the Sidecar Is Optional + +The sidecar is intentionally **optional**. + +This allows us to ship it incrementally, validate it under real-world workloads, and avoid making it a hard dependency before it is fully battle-tested across all LiteLLM features. + +Just as importantly, this ensures that self-hosting LiteLLM remains simple. The sidecar is bundled and started automatically, requires no additional infrastructure, and can be disabled entirely. From a user's perspective, LiteLLM continues to behave like a single service. + +As of today, the sidecar is an optimization, not a requirement. + +--- + +## Conclusion + +Sub-millisecond proxy overhead is not achieved through a single optimization, but through architectural changes. + +By keeping Python focused on orchestration and extensibility, and offloading performance-critical execution to a sidecar, we establish a foundation for making LiteLLM **permanently fast over time**—even on modest hardware such as a 1-CPU, 2-GB RAM instance, while keeping deployment and self-hosting simple. + +This work extends beyond Q1, and we will continue sharing benchmarks and updates as the architecture evolves. From cf734cb5864c269e5ccebe1889e2eb98af658135 Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Mon, 2 Feb 2026 17:57:35 -0800 Subject: [PATCH 09/29] Migrate Default Team settings to use reusable Model Select --- .../ModelSelect/ModelSelect.test.tsx | 682 +++++++++--------- .../components/ModelSelect/ModelSelect.tsx | 12 +- .../src/components/TeamSSOSettings.test.tsx | 636 +++++++++++++++- .../src/components/TeamSSOSettings.tsx | 22 +- 4 files changed, 974 insertions(+), 378 deletions(-) diff --git a/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.test.tsx b/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.test.tsx index 3052f79009..6da2f82a2f 100644 --- a/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.test.tsx +++ b/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.test.tsx @@ -37,12 +37,19 @@ vi.mock("antd", async (importOriginal) => { mode, ...props }: any) => { + // Simulate maxTagCount responsive behavior - if value length > 5, call maxTagPlaceholder + const shouldShowPlaceholder = maxTagCount === "responsive" && Array.isArray(value) && value.length > 5; + const visibleValues = shouldShowPlaceholder ? value.slice(0, 5) : value; + const omittedValues = shouldShowPlaceholder + ? value.slice(5).map((v: string) => ({ value: v, label: v })) + : []; + return (
+ {shouldShowPlaceholder && maxTagPlaceholder && ( +
{maxTagPlaceholder(omittedValues)}
+ )}
); }, @@ -82,6 +92,24 @@ const mockUseTeam = vi.mocked(useTeam); const mockUseOrganization = vi.mocked(useOrganization); const mockUseCurrentUser = vi.mocked(useCurrentUser); +const createMockOrganization = (models: string[]): Organization => ({ + organization_id: "org-1", + organization_alias: "Test Org", + budget_id: "budget-1", + metadata: {}, + models, + spend: 0, + model_spend: {}, + created_at: "2024-01-01", + created_by: "user-1", + updated_at: "2024-01-01", + updated_by: "user-1", + litellm_budget_table: null, + teams: null, + users: null, + members: null, +}); + describe("ModelSelect", () => { const mockProxyModels: ProxyModel[] = [ { id: "gpt-4", object: "model", created: 1234567890, owned_by: "openai" }, @@ -112,125 +140,44 @@ describe("ModelSelect", () => { } as any); }); - it("should render", async () => { + it("should render with all option groups", async () => { renderWithProviders( , ); await waitFor(() => { expect(screen.getByTestId("model-select")).toBeInTheDocument(); - }); - }); - - it("should show skeleton loader when loading", () => { - mockUseAllProxyModels.mockReturnValue({ - data: undefined, - isLoading: true, - } as any); - - renderWithProviders(); - - expect(screen.getByTestId("skeleton-input")).toBeInTheDocument(); - expect(screen.queryByTestId("model-select")).not.toBeInTheDocument(); - }); - - it("should show skeleton loader when team is loading", () => { - mockUseTeam.mockReturnValue({ - data: undefined, - isLoading: true, - } as any); - - renderWithProviders(); - - expect(screen.getByTestId("skeleton-input")).toBeInTheDocument(); - }); - - it("should show skeleton loader when organization is loading", () => { - mockUseOrganization.mockReturnValue({ - data: undefined, - isLoading: true, - } as any); - - renderWithProviders(); - - expect(screen.getByTestId("skeleton-input")).toBeInTheDocument(); - }); - - it("should show skeleton loader when current user is loading", () => { - mockUseCurrentUser.mockReturnValue({ - data: undefined, - isLoading: true, - } as any); - - renderWithProviders(); - - expect(screen.getByTestId("skeleton-input")).toBeInTheDocument(); - }); - - it("should render special options group", async () => { - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["all-proxy-models"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; - - mockUseOrganization.mockReturnValue({ - data: mockOrganization, - isLoading: false, - } as any); - - renderWithProviders( - , - ); - - await waitFor(() => { - const select = screen.getByTestId("model-select"); - expect(select).toBeInTheDocument(); - expect(screen.getByText("All Proxy Models")).toBeInTheDocument(); - expect(screen.getByText("No Default Models")).toBeInTheDocument(); - }); - }); - - it("should render wildcard options group", async () => { - renderWithProviders( - , - ); - - await waitFor(() => { + expect(screen.getByText("gpt-4")).toBeInTheDocument(); + expect(screen.getByText("claude-3")).toBeInTheDocument(); expect(screen.getByText("All Openai models")).toBeInTheDocument(); expect(screen.getByText("All Anthropic models")).toBeInTheDocument(); }); }); - it("should render regular models group", async () => { - renderWithProviders( - , - ); + it("should show skeleton loader when any data is loading", () => { + const loadingScenarios = [ + { hook: mockUseAllProxyModels, context: "user" as const }, + { hook: mockUseTeam, context: "team" as const, props: { teamID: "team-1" } }, + { hook: mockUseOrganization, context: "organization" as const, props: { organizationID: "org-1" } }, + { hook: mockUseCurrentUser, context: "user" as const }, + ]; - await waitFor(() => { - expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.getByText("claude-3")).toBeInTheDocument(); + loadingScenarios.forEach(({ hook, context, props = {} }) => { + hook.mockReturnValue({ + data: undefined, + isLoading: true, + } as any); + + const { unmount } = renderWithProviders( + , + ); + + expect(screen.getByTestId("skeleton-input")).toBeInTheDocument(); + unmount(); }); }); - it("should call onChange when selecting a regular model", async () => { + it("should handle model selection and onChange", async () => { const user = userEvent.setup(); renderWithProviders( , @@ -242,32 +189,16 @@ describe("ModelSelect", () => { const select = screen.getByRole("listbox"); await user.selectOptions(select, "gpt-4"); - expect(mockOnChange).toHaveBeenCalledWith(["gpt-4"]); + + await user.selectOptions(select, ["gpt-4", "claude-3"]); + expect(mockOnChange).toHaveBeenCalled(); }); - it("should call onChange with only last special option when multiple special options are selected", async () => { + it("should handle special options correctly", async () => { const user = userEvent.setup(); - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["all-proxy-models"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; - mockUseOrganization.mockReturnValue({ - data: mockOrganization, + data: createMockOrganization(["all-proxy-models"]), isLoading: false, } as any); @@ -281,16 +212,16 @@ describe("ModelSelect", () => { ); await waitFor(() => { - expect(screen.getByTestId("model-select")).toBeInTheDocument(); + expect(screen.getByText("All Proxy Models")).toBeInTheDocument(); + expect(screen.getByText("No Default Models")).toBeInTheDocument(); }); const select = screen.getByRole("listbox"); await user.selectOptions(select, ["all-proxy-models", "no-default-models"]); - expect(mockOnChange).toHaveBeenCalledWith(["no-default-models"]); }); - it("should disable regular models when special option is selected", async () => { + it("should disable models when special option is selected", async () => { renderWithProviders( { ); await waitFor(() => { - const gpt4Option = screen.getByRole("option", { name: "gpt-4" }); - expect(gpt4Option).toBeDisabled(); + expect(screen.getByRole("option", { name: "gpt-4" })).toBeDisabled(); + expect(screen.getByRole("option", { name: "All Openai models" })).toBeDisabled(); }); }); - it("should disable wildcard models when special option is selected", async () => { - renderWithProviders( - , - ); + it("should filter models based on context", async () => { + const testCases = [ + { + name: "user context with includeUserModels", + context: "user" as const, + options: { includeUserModels: true }, + setup: () => { + mockUseCurrentUser.mockReturnValue({ + data: { models: ["gpt-4"] }, + isLoading: false, + } as any); + }, + expectedVisible: ["gpt-4"], + expectedHidden: ["claude-3"], + }, + { + name: "user context without includeUserModels", + context: "user" as const, + options: {}, + setup: () => { + mockUseCurrentUser.mockReturnValue({ + data: { models: ["gpt-4"] }, + isLoading: false, + } as any); + }, + expectedVisible: [], + expectedHidden: ["gpt-4", "claude-3"], + }, + { + name: "team context without organization", + context: "team" as const, + options: {}, + props: { teamID: "team-1" }, + setup: () => { + mockUseTeam.mockReturnValue({ + data: { team_id: "team-1", team_alias: "Test Team", models: [] }, + isLoading: false, + } as any); + mockUseOrganization.mockReturnValue({ + data: undefined, + isLoading: false, + } as any); + }, + expectedVisible: ["gpt-4", "claude-3"], + expectedHidden: [], + }, + { + name: "team context with organization having all-proxy-models", + context: "team" as const, + options: {}, + props: { teamID: "team-1", organizationID: "org-1" }, + setup: () => { + mockUseTeam.mockReturnValue({ + data: { team_id: "team-1", team_alias: "Test Team", models: [] }, + isLoading: false, + } as any); + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["all-proxy-models"]), + isLoading: false, + } as any); + }, + expectedVisible: ["gpt-4", "claude-3"], + expectedHidden: [], + }, + { + name: "team context with organization filtering models", + context: "team" as const, + options: {}, + props: { teamID: "team-1", organizationID: "org-1" }, + setup: () => { + mockUseTeam.mockReturnValue({ + data: { team_id: "team-1", team_alias: "Test Team", models: [] }, + isLoading: false, + } as any); + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["gpt-4"]), + isLoading: false, + } as any); + }, + expectedVisible: ["gpt-4"], + expectedHidden: ["claude-3"], + }, + { + name: "organization context", + context: "organization" as const, + options: {}, + props: { organizationID: "org-1" }, + setup: () => { + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["gpt-4"]), + isLoading: false, + } as any); + }, + expectedVisible: ["gpt-4", "claude-3"], + expectedHidden: [], + }, + { + name: "global context", + context: "global" as const, + options: {}, + setup: () => { }, + expectedVisible: ["gpt-4", "claude-3"], + expectedHidden: [], + }, + ]; - await waitFor(() => { - const openaiWildcardOption = screen.getByRole("option", { name: "All Openai models" }); - expect(openaiWildcardOption).toBeDisabled(); - }); + for (const testCase of testCases) { + testCase.setup(); + const { unmount } = renderWithProviders( + , + ); + + await waitFor(() => { + testCase.expectedVisible.forEach((model) => { + expect(screen.getByText(model)).toBeInTheDocument(); + }); + testCase.expectedHidden.forEach((model) => { + expect(screen.queryByText(model)).not.toBeInTheDocument(); + }); + }); + + unmount(); + vi.clearAllMocks(); + mockUseAllProxyModels.mockReturnValue({ + data: { data: mockProxyModels }, + isLoading: false, + } as any); + } }); - it("should disable other special options when one special option is selected", async () => { - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["all-proxy-models"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; + it("should show All Proxy Models option based on conditions", async () => { + const testCases = [ + { + name: "when showAllProxyModelsOverride is true", + context: "user" as const, + options: { showAllProxyModelsOverride: true, includeSpecialOptions: true }, + setup: () => { }, + shouldShow: true, + }, + { + name: "when organization has all-proxy-models", + context: "organization" as const, + options: { includeSpecialOptions: true }, + props: { organizationID: "org-1" }, + setup: () => { + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["all-proxy-models"]), + isLoading: false, + } as any); + }, + shouldShow: true, + }, + { + name: "when organization has empty models array", + context: "organization" as const, + options: { includeSpecialOptions: true }, + props: { organizationID: "org-1" }, + setup: () => { + mockUseOrganization.mockReturnValue({ + data: createMockOrganization([]), + isLoading: false, + } as any); + }, + shouldShow: true, + }, + { + name: "when context is global", + context: "global" as const, + options: { includeSpecialOptions: true }, + setup: () => { }, + shouldShow: true, + }, + { + name: "when organization has specific models", + context: "organization" as const, + options: { includeSpecialOptions: true }, + props: { organizationID: "org-1" }, + setup: () => { + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["gpt-4"]), + isLoading: false, + } as any); + }, + shouldShow: false, + }, + ]; - mockUseOrganization.mockReturnValue({ - data: mockOrganization, - isLoading: false, - } as any); + for (const testCase of testCases) { + testCase.setup(); + const { unmount } = renderWithProviders( + , + ); - renderWithProviders( - , - ); + await waitFor(() => { + if (testCase.shouldShow) { + expect(screen.getByText("All Proxy Models")).toBeInTheDocument(); + } else { + expect(screen.queryByText("All Proxy Models")).not.toBeInTheDocument(); + expect(screen.getByText("No Default Models")).toBeInTheDocument(); + } + }); - await waitFor(() => { - const noDefaultOption = screen.getByRole("option", { name: "No Default Models" }); - expect(noDefaultOption).toBeDisabled(); - }); - }); - - it("should filter models when showAllProxyModelsOverride is true", async () => { - renderWithProviders( - , - ); - - await waitFor(() => { - expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.getByText("claude-3")).toBeInTheDocument(); - }); - }); - - it("should filter models when organization has all-proxy-models in models array", async () => { - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["all-proxy-models"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; - - mockUseOrganization.mockReturnValue({ - data: mockOrganization, - isLoading: false, - } as any); - - renderWithProviders(); - - await waitFor(() => { - expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.getByText("claude-3")).toBeInTheDocument(); - }); - }); - - it("should show all models when organization context is used", async () => { - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["gpt-4"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; - - mockUseOrganization.mockReturnValue({ - data: mockOrganization, - isLoading: false, - } as any); - - renderWithProviders(); - - await waitFor(() => { - expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.getByText("claude-3")).toBeInTheDocument(); - }); - }); - - it("should use custom dataTestId when provided", async () => { - renderWithProviders( - , - ); - - await waitFor(() => { - expect(screen.getByTestId("custom-test-id")).toBeInTheDocument(); - }); - }); - - it("should handle multiple model selections", async () => { - const user = userEvent.setup(); - renderWithProviders( - , - ); - - await waitFor(() => { - expect(screen.getByTestId("model-select")).toBeInTheDocument(); - }); - - const select = screen.getByRole("listbox"); - await user.selectOptions(select, "gpt-4"); - expect(mockOnChange).toHaveBeenCalledWith(["gpt-4"]); - - await user.selectOptions(select, "claude-3"); - expect(mockOnChange).toHaveBeenCalled(); - const allCalls = mockOnChange.mock.calls.map((call) => call[0]); - expect(allCalls.some((call) => Array.isArray(call) && call.includes("gpt-4"))).toBe(true); - expect(allCalls.some((call) => Array.isArray(call) && call.includes("claude-3"))).toBe(true); - }); - - it("should capitalize provider name in wildcard options", async () => { - renderWithProviders( - , - ); - - await waitFor(() => { - expect(screen.getByText("All Openai models")).toBeInTheDocument(); - expect(screen.getByText("All Anthropic models")).toBeInTheDocument(); - }); + unmount(); + vi.clearAllMocks(); + mockUseAllProxyModels.mockReturnValue({ + data: { data: mockProxyModels }, + isLoading: false, + } as any); + } }); it("should deduplicate models with same id", async () => { @@ -505,52 +479,29 @@ describe("ModelSelect", () => { }); }); - it("should filter models based on user context with includeUserModels option", async () => { - mockUseCurrentUser.mockReturnValue({ - data: { models: ["gpt-4"] }, - isLoading: false, - } as any); - - renderWithProviders(); + it("should use custom dataTestId when provided", async () => { + renderWithProviders( + , + ); await waitFor(() => { - expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.queryByText("claude-3")).not.toBeInTheDocument(); + expect(screen.getByTestId("custom-test-id")).toBeInTheDocument(); }); }); - it("should filter models based on team context", async () => { - const mockTeam = { - team_id: "team-1", - team_alias: "Test Team", - models: ["gpt-4"], - }; - - const mockOrganization: Organization = { - organization_id: "org-1", - organization_alias: "Test Org", - budget_id: "budget-1", - metadata: {}, - models: ["gpt-4"], - spend: 0, - model_spend: {}, - created_at: "2024-01-01", - created_by: "user-1", - updated_at: "2024-01-01", - updated_by: "user-1", - litellm_budget_table: null, - teams: null, - users: null, - members: null, - }; - + it("should return all proxy models for team context when organization has empty models array", async () => { mockUseTeam.mockReturnValue({ - data: mockTeam, + data: { team_id: "team-1", team_alias: "Test Team", models: [] }, isLoading: false, } as any); mockUseOrganization.mockReturnValue({ - data: mockOrganization, + data: createMockOrganization([]), isLoading: false, } as any); @@ -558,7 +509,62 @@ describe("ModelSelect", () => { await waitFor(() => { expect(screen.getByText("gpt-4")).toBeInTheDocument(); - expect(screen.queryByText("claude-3")).not.toBeInTheDocument(); + expect(screen.getByText("claude-3")).toBeInTheDocument(); + }); + }); + + it("should disable No Default Models when all-proxy-models is selected", async () => { + mockUseOrganization.mockReturnValue({ + data: createMockOrganization(["all-proxy-models"]), + isLoading: false, + } as any); + + renderWithProviders( + , + ); + + await waitFor(() => { + const noDefaultOption = screen.getByRole("option", { name: "No Default Models" }); + expect(noDefaultOption).toBeDisabled(); + }); + }); + + it("should render maxTagPlaceholder when many items are selected", async () => { + // Create many models to trigger maxTagCount responsive behavior + const manyModels: ProxyModel[] = Array.from({ length: 20 }, (_, i) => ({ + id: `model-${i}`, + object: "model", + created: 1234567890, + owned_by: "test", + })); + + mockUseAllProxyModels.mockReturnValue({ + data: { data: manyModels }, + isLoading: false, + } as any); + + const selectedValues = manyModels.slice(0, 10).map((m) => m.id); + + renderWithProviders( + , + ); + + await waitFor(() => { + expect(screen.getByTestId("model-select")).toBeInTheDocument(); + // Verify maxTagPlaceholder is rendered with omitted values + expect(screen.getByTestId("max-tag-placeholder")).toBeInTheDocument(); + expect(screen.getByText(/\+5 more/)).toBeInTheDocument(); }); }); }); diff --git a/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.tsx b/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.tsx index 78ccdddd81..2b7399c456 100644 --- a/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.tsx +++ b/ui/litellm-dashboard/src/components/ModelSelect/ModelSelect.tsx @@ -30,10 +30,11 @@ export interface ModelSelectProps { showAllProxyModelsOverride?: boolean; includeSpecialOptions?: boolean; }; - context: "team" | "organization" | "user"; + context: "team" | "organization" | "user" | "global"; dataTestId?: string; value?: string[]; onChange: (values: string[]) => void; + style?: React.CSSProperties; } type FilterContextArgs = { @@ -65,6 +66,10 @@ const contextFilters: Record { return allProxyModels; }, + + global: ({ allProxyModels }) => { + return allProxyModels; + }, }; const filterModels = ( @@ -84,7 +89,7 @@ const filterModels = ( }; export const ModelSelect = (props: ModelSelectProps) => { - const { teamID, organizationID, options, context, dataTestId, value = [], onChange } = props; + const { teamID, organizationID, options, context, dataTestId, value = [], onChange, style } = props; const { includeUserModels, showAllTeamModelsOption, showAllProxyModelsOverride, includeSpecialOptions } = options || {}; const { data: allProxyModels, isLoading: isLoadingAllProxyModels } = useAllProxyModels(); @@ -98,7 +103,7 @@ export const ModelSelect = (props: ModelSelectProps) => { const organizationHasAllProxyModels = organization?.models.includes(MODEL_SELECT_ALL_PROXY_MODELS_SPECIAL_VALUE.value) || organization?.models.length === 0; const shouldShowAllProxyModels = showAllProxyModelsOverride || - (organizationHasAllProxyModels && includeSpecialOptions); + (organizationHasAllProxyModels && includeSpecialOptions) || context === "global"; if (isLoading) { return ; @@ -134,6 +139,7 @@ export const ModelSelect = (props: ModelSelectProps) => { data-testid={dataTestId} value={value} onChange={handleChange} + style={style} options={[ includeSpecialOptions ? { diff --git a/ui/litellm-dashboard/src/components/TeamSSOSettings.test.tsx b/ui/litellm-dashboard/src/components/TeamSSOSettings.test.tsx index f5e43fc3d5..34085df8f1 100644 --- a/ui/litellm-dashboard/src/components/TeamSSOSettings.test.tsx +++ b/ui/litellm-dashboard/src/components/TeamSSOSettings.test.tsx @@ -1,63 +1,653 @@ -import { screen } from "@testing-library/react"; +import React from "react"; +import { screen, waitFor } from "@testing-library/react"; +import userEvent from "@testing-library/user-event"; import { beforeEach, describe, expect, it, vi } from "vitest"; import { renderWithProviders } from "../../tests/test-utils"; import TeamSSOSettings from "./TeamSSOSettings"; import * as networking from "./networking"; +import NotificationsManager from "./molecules/notifications_manager"; -// Mock the networking functions vi.mock("./networking"); -// Mock the budget duration dropdown +vi.mock("@tremor/react", async (importOriginal) => { + const actual = await importOriginal(); + const React = await import("react"); + return { + ...actual, + Card: ({ children }: { children: React.ReactNode }) => React.createElement("div", { "data-testid": "card" }, children), + Title: ({ children }: { children: React.ReactNode }) => React.createElement("h2", {}, children), + Text: ({ children }: { children: React.ReactNode }) => React.createElement("span", {}, children), + Divider: () => React.createElement("hr", {}), + TextInput: ({ value, onChange, placeholder, className }: any) => + React.createElement("input", { + type: "text", + value: value || "", + onChange, + placeholder, + className, + }), + }; +}); + vi.mock("./common_components/budget_duration_dropdown", () => ({ default: ({ value, onChange }: { value: string | null; onChange: (value: string) => void }) => ( - onChange(e.target.value)} + aria-label="Budget duration" + > ), - getBudgetDurationLabel: vi.fn((value: string) => value), + getBudgetDurationLabel: vi.fn((value: string) => `Budget: ${value}`), })); -// Mock the model display name helper vi.mock("./key_team_helpers/fetch_available_models_team_key", () => ({ getModelDisplayName: vi.fn((model: string) => model), })); +vi.mock("./ModelSelect/ModelSelect", () => ({ + ModelSelect: ({ value, onChange }: { value: string[]; onChange: (value: string[]) => void }) => ( + + ), +})); + +vi.mock("antd", async (importOriginal) => { + const actual = await importOriginal(); + const React = await import("react"); + const SelectComponent = ({ + value, + onChange, + mode, + children, + className, + }: { + value: any; + onChange: (value: any) => void; + mode?: string; + children: React.ReactNode; + className?: string; + }) => { + const isMultiple = mode === "multiple"; + const selectValue = isMultiple ? (Array.isArray(value) ? value : []) : value || ""; + return React.createElement( + "select", + { + multiple: isMultiple, + value: selectValue, + onChange: (e: React.ChangeEvent) => { + const selectedValues = Array.from(e.target.selectedOptions, (option) => option.value); + onChange(isMultiple ? selectedValues : selectedValues[0] || undefined); + }, + className, + "aria-label": "Select", + role: "listbox", + }, + children, + ); + }; + SelectComponent.Option = ({ value: optionValue, children: optionChildren }: { value: string; children: React.ReactNode }) => + React.createElement("option", { value: optionValue }, optionChildren); + return { + ...actual, + Spin: ({ size }: { size?: string }) => React.createElement("div", { "data-testid": "spinner", "data-size": size }), + Switch: ({ checked, onChange }: { checked: boolean; onChange: (checked: boolean) => void }) => + React.createElement("input", { + type: "checkbox", + role: "switch", + checked: checked, + onChange: (e) => onChange(e.target.checked), + "aria-label": "Toggle switch", + }), + Select: SelectComponent, + Typography: { + Paragraph: ({ children }: { children: React.ReactNode }) => React.createElement("p", {}, children), + }, + }; +}); + +const mockGetDefaultTeamSettings = vi.mocked(networking.getDefaultTeamSettings); +const mockUpdateDefaultTeamSettings = vi.mocked(networking.updateDefaultTeamSettings); +const mockModelAvailableCall = vi.mocked(networking.modelAvailableCall); +const mockNotificationsManager = vi.mocked(NotificationsManager); + describe("TeamSSOSettings", () => { + const defaultProps = { + accessToken: "test-token", + userID: "test-user", + userRole: "admin", + }; + + const mockSettings = { + values: { + budget_duration: "monthly", + max_budget: 1000, + enabled: true, + allowed_models: ["gpt-4", "claude-3"], + models: ["gpt-4"], + status: "active", + }, + field_schema: { + description: "Default team settings schema", + properties: { + budget_duration: { + type: "string", + description: "Budget duration setting", + }, + max_budget: { + type: "number", + description: "Maximum budget amount", + }, + enabled: { + type: "boolean", + description: "Enable feature", + }, + allowed_models: { + type: "array", + items: { + enum: ["gpt-4", "claude-3", "gpt-3.5-turbo"], + }, + description: "Allowed models", + }, + models: { + type: "array", + description: "Selected models", + }, + status: { + type: "string", + enum: ["active", "inactive", "pending"], + description: "Status", + }, + }, + }, + }; + beforeEach(() => { vi.clearAllMocks(); + mockModelAvailableCall.mockResolvedValue({ + data: [{ id: "gpt-4" }, { id: "claude-3" }], + }); }); - it("renders the component", async () => { - // Mock successful API responses - vi.mocked(networking.getDefaultTeamSettings).mockResolvedValue({ + it("should render", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Default Team Settings")).toBeInTheDocument(); + }); + }); + + it("should show loading spinner while fetching settings", () => { + mockGetDefaultTeamSettings.mockImplementation(() => new Promise(() => { })); + + renderWithProviders(); + + expect(screen.getByTestId("spinner")).toBeInTheDocument(); + }); + + it("should display message when no settings are available", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(null as any); + + renderWithProviders(); + + await waitFor(() => { + expect( + screen.getByText("No team settings available or you do not have permission to view them."), + ).toBeInTheDocument(); + }); + }); + + it("should not fetch settings when access token is null", async () => { + renderWithProviders(); + + await waitFor(() => { + expect(mockGetDefaultTeamSettings).not.toHaveBeenCalled(); + }); + }); + + it("should display settings fields with correct values", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Budget Duration")).toBeInTheDocument(); + expect(screen.getByText("Max Budget")).toBeInTheDocument(); + }); + + expect(screen.getByText("Budget: monthly")).toBeInTheDocument(); + expect(screen.getByText("1000")).toBeInTheDocument(); + const enabledTexts = screen.getAllByText("Enabled"); + expect(enabledTexts.length).toBeGreaterThan(0); + }); + + it("should display 'Not set' for null values", async () => { + const settingsWithNulls = { + ...mockSettings, values: { - budget_duration: "monthly", - max_budget: 1000, + ...mockSettings.values, + max_budget: null, }, + }; + mockGetDefaultTeamSettings.mockResolvedValue(settingsWithNulls); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Not set")).toBeInTheDocument(); + }); + }); + + it("should toggle edit mode when edit button is clicked", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + expect(screen.getByRole("button", { name: "Cancel" })).toBeInTheDocument(); + expect(screen.getByRole("button", { name: "Save Changes" })).toBeInTheDocument(); + expect(screen.queryByRole("button", { name: "Edit Settings" })).not.toBeInTheDocument(); + }); + + it("should cancel edit mode and reset values", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + const cancelButton = screen.getByRole("button", { name: "Cancel" }); + await userEvent.click(cancelButton); + + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + expect(screen.queryByRole("button", { name: "Cancel" })).not.toBeInTheDocument(); + }); + + it("should save settings when save button is clicked", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + mockUpdateDefaultTeamSettings.mockResolvedValue({ + settings: mockSettings.values, + }); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Save Changes" })).toBeInTheDocument(); + }); + + const saveButton = screen.getByRole("button", { name: "Save Changes" }); + await userEvent.click(saveButton); + + await waitFor(() => { + expect(mockUpdateDefaultTeamSettings).toHaveBeenCalledWith("test-token", mockSettings.values); + }); + + expect(mockNotificationsManager.success).toHaveBeenCalledWith("Default team settings updated successfully"); + }); + + it("should show error notification when save fails", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + mockUpdateDefaultTeamSettings.mockRejectedValue(new Error("Save failed")); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Save Changes" })).toBeInTheDocument(); + }); + + const saveButton = screen.getByRole("button", { name: "Save Changes" }); + await userEvent.click(saveButton); + + await waitFor(() => { + expect(mockNotificationsManager.fromBackend).toHaveBeenCalledWith("Failed to update team settings"); + }); + }); + + it("should render boolean field as switch in edit mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + const switchElement = screen.getByRole("switch"); + expect(switchElement).toBeInTheDocument(); + expect(switchElement).toBeChecked(); + }); + }); + + it("should update boolean value when switch is toggled", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByRole("switch")).toBeInTheDocument(); + }); + + const switchElement = screen.getByRole("switch"); + await userEvent.click(switchElement); + + expect(switchElement).not.toBeChecked(); + }); + + it("should render budget duration dropdown in edit mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByLabelText("Budget duration")).toBeInTheDocument(); + }); + }); + + it("should update budget duration when dropdown value changes", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByLabelText("Budget duration")).toBeInTheDocument(); + }); + + const dropdown = screen.getByLabelText("Budget duration"); + await userEvent.selectOptions(dropdown, "daily"); + + expect(dropdown).toHaveValue("daily"); + }); + + it("should render text input for string fields in edit mode", async () => { + const settingsWithString = { + ...mockSettings, field_schema: { - description: "Default team settings", + ...mockSettings.field_schema, properties: { - budget_duration: { + ...mockSettings.field_schema.properties, + team_name: { type: "string", - description: "Budget duration", - }, - max_budget: { - type: "number", - description: "Maximum budget", + description: "Team name", }, }, }, + values: { + ...mockSettings.values, + team_name: "Test Team", + }, + }; + mockGetDefaultTeamSettings.mockResolvedValue(settingsWithString); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); }); - vi.mocked(networking.modelAvailableCall).mockResolvedValue({ - data: [{ id: "gpt-4" }, { id: "claude-3" }], + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + const textInput = screen.getByDisplayValue("Test Team"); + expect(textInput).toBeInTheDocument(); + }); + }); + + it("should render enum select for string enum fields in edit mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); }); - renderWithProviders(); + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); - const container = await screen.findByText("Default Team Settings"); - expect(container).toBeInTheDocument(); + await waitFor(() => { + const statusSelect = screen.getAllByRole("listbox")[0]; + expect(statusSelect).toBeInTheDocument(); + }); + }); + + it("should render multi-select for array enum fields in edit mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + const multiSelects = screen.getAllByRole("listbox"); + expect(multiSelects.length).toBeGreaterThan(0); + }); + }); + + it("should render ModelSelect for models field in edit mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByTestId("model-select")).toBeInTheDocument(); + }); + }); + + it("should display models as badges in view mode", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + const gpt4Elements = screen.getAllByText("gpt-4"); + expect(gpt4Elements.length).toBeGreaterThan(0); + }); + }); + + it("should display 'None' for empty arrays in view mode", async () => { + const settingsWithEmptyArray = { + ...mockSettings, + values: { + ...mockSettings.values, + models: [], + }, + }; + mockGetDefaultTeamSettings.mockResolvedValue(settingsWithEmptyArray); + + renderWithProviders(); + + await waitFor(() => { + const noneTexts = screen.getAllByText("None"); + expect(noneTexts.length).toBeGreaterThan(0); + }); + }); + + it("should display schema description when available", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Default team settings schema")).toBeInTheDocument(); + }); + }); + + it("should show error notification when fetching settings fails", async () => { + mockGetDefaultTeamSettings.mockRejectedValue(new Error("Fetch failed")); + + renderWithProviders(); + + await waitFor(() => { + expect(mockNotificationsManager.fromBackend).toHaveBeenCalledWith("Failed to fetch team settings"); + }); + }); + + it("should handle model fetch error gracefully", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + mockModelAvailableCall.mockRejectedValue(new Error("Model fetch failed")); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Default Team Settings")).toBeInTheDocument(); + }); + }); + + it("should disable cancel button while saving", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + mockUpdateDefaultTeamSettings.mockImplementation( + () => new Promise((resolve) => setTimeout(() => resolve({ settings: mockSettings.values }), 100)), + ); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Edit Settings" })).toBeInTheDocument(); + }); + + const editButton = screen.getByRole("button", { name: "Edit Settings" }); + await userEvent.click(editButton); + + await waitFor(() => { + expect(screen.getByRole("button", { name: "Save Changes" })).toBeInTheDocument(); + }); + + const saveButton = screen.getByRole("button", { name: "Save Changes" }); + await userEvent.click(saveButton); + + const cancelButton = screen.getByRole("button", { name: "Cancel" }); + expect(cancelButton).toBeDisabled(); + }); + + it("should display field descriptions", async () => { + mockGetDefaultTeamSettings.mockResolvedValue(mockSettings); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Budget duration setting")).toBeInTheDocument(); + expect(screen.getByText("Maximum budget amount")).toBeInTheDocument(); + }); + }); + + it("should format field names by replacing underscores and capitalizing", async () => { + const settingsWithUnderscores = { + ...mockSettings, + field_schema: { + ...mockSettings.field_schema, + properties: { + ...mockSettings.field_schema.properties, + max_budget_per_user: { + type: "number", + description: "Max budget per user", + }, + }, + }, + values: { + ...mockSettings.values, + max_budget_per_user: 500, + }, + }; + mockGetDefaultTeamSettings.mockResolvedValue(settingsWithUnderscores); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("Max Budget Per User")).toBeInTheDocument(); + }); + }); + + it("should display 'No schema information available' when schema is missing", async () => { + const settingsWithoutSchema = { + values: {}, + field_schema: null, + }; + mockGetDefaultTeamSettings.mockResolvedValue(settingsWithoutSchema); + + renderWithProviders(); + + await waitFor(() => { + expect(screen.getByText("No schema information available")).toBeInTheDocument(); + }); }); }); diff --git a/ui/litellm-dashboard/src/components/TeamSSOSettings.tsx b/ui/litellm-dashboard/src/components/TeamSSOSettings.tsx index 8537b108cd..33bfc783af 100644 --- a/ui/litellm-dashboard/src/components/TeamSSOSettings.tsx +++ b/ui/litellm-dashboard/src/components/TeamSSOSettings.tsx @@ -5,6 +5,7 @@ import { getDefaultTeamSettings, updateDefaultTeamSettings, modelAvailableCall } import BudgetDurationDropdown, { getBudgetDurationLabel } from "./common_components/budget_duration_dropdown"; import { getModelDisplayName } from "./key_team_helpers/fetch_available_models_team_key"; import NotificationsManager from "./molecules/notifications_manager"; +import { ModelSelect } from "./ModelSelect/ModelSelect"; interface TeamSSOSettingsProps { accessToken: string | null; @@ -116,22 +117,15 @@ const TeamSSOSettings: React.FC = ({ accessToken, userID, ); } else if (key === "models") { return ( - + context="global" + style={{ width: "100%" }} + options={{ + includeSpecialOptions: true, + }} + /> ); } else if (type === "string" && property.enum) { return ( From 079f49ff6a1d28128812e0ce5929882604f7f4d9 Mon Sep 17 00:00:00 2001 From: Ishaan Jaff Date: Mon, 2 Feb 2026 18:28:53 -0800 Subject: [PATCH 10/29] [Feat] - MCP Semantic Filtering Support (#20296) * init: SemanticMCPToolFilter * init: SemanticToolFilterHook * test_e2e_semantic_filter * mock tests: test_semantic_filter_basic_filtering * Update litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * refactor folder/file organization * docs fix * fix filter * fix: filter_tools * fix linting tool filrer * initialize_from_config * fix: _expand_mcp_tools * _initialize_semantic_tool_filter * working: async_post_call_response_headers_hook * clean up semantic tool filter * add _initialize_semantic_tool_filter * build_router_from_mcp_registry * _get_tools_by_names * fiix config * async_post_call_response_headers_hook --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> --- litellm/constants.py | 14 + .../mcp_server/semantic_tool_filter.py | 248 +++++++++++ .../hooks/mcp_semantic_filter/ARCHITECTURE.md | 96 +++++ .../hooks/mcp_semantic_filter/__init__.py | 9 + .../proxy/hooks/mcp_semantic_filter/hook.py | 353 ++++++++++++++++ litellm/proxy/proxy_config.yaml | 39 +- litellm/proxy/proxy_server.py | 43 ++ .../test_semantic_tool_filter_e2e.py | 74 ++++ .../mcp_server/test_semantic_tool_filter.py | 384 ++++++++++++++++++ 9 files changed, 1259 insertions(+), 1 deletion(-) create mode 100644 litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/ARCHITECTURE.md create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/__init__.py create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/hook.py create mode 100644 tests/mcp_tests/test_semantic_tool_filter_e2e.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py diff --git a/litellm/constants.py b/litellm/constants.py index 3c84547d7c..6427c36792 100644 --- a/litellm/constants.py +++ b/litellm/constants.py @@ -67,6 +67,20 @@ DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGET = int( os.getenv("DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGET", 0) ) +# MCP Semantic Tool Filter Defaults +DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL = str( + os.getenv("DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL", "text-embedding-3-small") +) +DEFAULT_MCP_SEMANTIC_FILTER_TOP_K = int( + os.getenv("DEFAULT_MCP_SEMANTIC_FILTER_TOP_K", 10) +) +DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD = float( + os.getenv("DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD", 0.3) +) +MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH = int( + os.getenv("MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH", 150) +) + # Gemini model-specific minimal thinking budget constants DEFAULT_REASONING_EFFORT_MINIMAL_THINKING_BUDGET_GEMINI_2_5_FLASH = int( os.getenv("DEFAULT_REASONING_EFFORT_MINIMAL_THINKING_BUDGET_GEMINI_2_5_FLASH", 1) diff --git a/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py new file mode 100644 index 0000000000..c83ef13a64 --- /dev/null +++ b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py @@ -0,0 +1,248 @@ +""" +Semantic MCP Tool Filtering using semantic-router + +Filters MCP tools semantically for /chat/completions and /responses endpoints. +""" +from typing import TYPE_CHECKING, Any, Dict, List, Optional + +from litellm._logging import verbose_logger + +if TYPE_CHECKING: + from mcp.types import Tool as MCPTool + from semantic_router.routers import SemanticRouter + + from litellm.router import Router + + +class SemanticMCPToolFilter: + """Filters MCP tools using semantic similarity to reduce context window size.""" + + def __init__( + self, + embedding_model: str, + litellm_router_instance: "Router", + top_k: int = 10, + similarity_threshold: float = 0.3, + enabled: bool = True, + ): + """ + Initialize the semantic tool filter. + + Args: + embedding_model: Model to use for embeddings (e.g., "text-embedding-3-small") + litellm_router_instance: Router instance for embedding generation + top_k: Maximum number of tools to return + similarity_threshold: Minimum similarity score for filtering + enabled: Whether filtering is enabled + """ + self.enabled = enabled + self.top_k = top_k + self.similarity_threshold = similarity_threshold + self.embedding_model = embedding_model + self.router_instance = litellm_router_instance + self.tool_router: Optional["SemanticRouter"] = None + self._tool_map: Dict[str, Any] = {} # MCPTool objects or OpenAI function dicts + + async def build_router_from_mcp_registry(self) -> None: + """Build semantic router from all MCP tools in the registry (no auth checks).""" + from litellm.proxy._experimental.mcp_server.mcp_server_manager import ( + global_mcp_server_manager, + ) + + try: + # Get all servers from registry without auth checks + registry = global_mcp_server_manager.get_registry() + if not registry: + verbose_logger.warning("MCP registry is empty") + self.tool_router = None + return + + # Fetch tools from all servers in parallel + all_tools = [] + for server_id, server in registry.items(): + try: + tools = await global_mcp_server_manager.get_tools_for_server(server_id) + all_tools.extend(tools) + except Exception as e: + verbose_logger.warning(f"Failed to fetch tools from server {server_id}: {e}") + continue + + if not all_tools: + verbose_logger.warning("No MCP tools found in registry") + self.tool_router = None + return + + verbose_logger.info(f"Fetched {len(all_tools)} tools from {len(registry)} MCP servers") + self._build_router(all_tools) + + except Exception as e: + verbose_logger.error(f"Failed to build router from MCP registry: {e}") + self.tool_router = None + raise + + def _extract_tool_info(self, tool) -> tuple[str, str]: + """Extract name and description from MCP tool or OpenAI function dict.""" + if isinstance(tool, dict): + # OpenAI function format + name = tool.get("name", "") + description = tool.get("description", name) + else: + # MCPTool object + name = tool.name + description = tool.description or tool.name + + return name, description + + def _build_router(self, tools: List) -> None: + """Build semantic router with tools (MCPTool objects or OpenAI function dicts).""" + from semantic_router.routers import SemanticRouter + from semantic_router.routers.base import Route + + from litellm.router_strategy.auto_router.litellm_encoder import ( + LiteLLMRouterEncoder, + ) + + if not tools: + self.tool_router = None + return + + try: + # Convert tools to routes + routes = [] + self._tool_map = {} + + for tool in tools: + name, description = self._extract_tool_info(tool) + self._tool_map[name] = tool + + routes.append( + Route( + name=name, + description=description, + utterances=[description], + score_threshold=self.similarity_threshold, + ) + ) + + self.tool_router = SemanticRouter( + routes=routes, + encoder=LiteLLMRouterEncoder( + litellm_router_instance=self.router_instance, + model_name=self.embedding_model, + score_threshold=self.similarity_threshold, + ), + auto_sync="local", + ) + + verbose_logger.info( + f"Built semantic router with {len(routes)} tools" + ) + + except Exception as e: + verbose_logger.error(f"Failed to build semantic router: {e}") + self.tool_router = None + raise + + async def filter_tools( + self, + query: str, + available_tools: List[Any], + top_k: Optional[int] = None, + ) -> List[Any]: + """ + Filter tools semantically based on query. + + Args: + query: User query to match against tools + available_tools: Full list of available MCP tools + top_k: Override default top_k (optional) + + Returns: + Filtered and ordered list of tools (up to top_k) + """ + # Early returns for cases where we can't/shouldn't filter + if not self.enabled: + return available_tools + + if not available_tools: + return available_tools + + if not query or not query.strip(): + return available_tools + + # Router should be built on startup - if not, something went wrong + if self.tool_router is None: + verbose_logger.warning("Router not initialized - was build_router_from_mcp_registry() called on startup?") + return available_tools + + # Run semantic filtering + try: + limit = top_k or self.top_k + matches = self.tool_router(text=query, limit=limit) + matched_tool_names = self._extract_tool_names_from_matches(matches) + + if not matched_tool_names: + return available_tools + + return self._get_tools_by_names(matched_tool_names, available_tools) + + except Exception as e: + verbose_logger.error(f"Semantic tool filter failed: {e}", exc_info=True) + return available_tools + + def _extract_tool_names_from_matches(self, matches) -> List[str]: + """Extract tool names from semantic router match results.""" + if not matches: + return [] + + # Handle single match + if hasattr(matches, "name") and matches.name: + return [matches.name] + + # Handle list of matches + if isinstance(matches, list): + return [m.name for m in matches if hasattr(m, "name") and m.name] + + return [] + + def _get_tools_by_names( + self, tool_names: List[str], available_tools: List[Any] + ) -> List[Any]: + """Get tools from available_tools by their names, preserving order.""" + # Match tools from available_tools (preserves format - dict or MCPTool) + matched_tools = [] + for tool in available_tools: + tool_name, _ = self._extract_tool_info(tool) + if tool_name in tool_names: + matched_tools.append(tool) + + # Reorder to match semantic router's ordering + tool_map = {self._extract_tool_info(t)[0]: t for t in matched_tools} + return [tool_map[name] for name in tool_names if name in tool_map] + + def extract_user_query(self, messages: List[Dict[str, Any]]) -> str: + """ + Extract user query from messages for /chat/completions or /responses. + + Args: + messages: List of message dictionaries (from 'messages' or 'input' field) + + Returns: + Extracted query string + """ + for msg in reversed(messages): + if msg.get("role") == "user": + content = msg.get("content", "") + + if isinstance(content, str): + return content + + if isinstance(content, list): + texts = [ + block.get("text", "") if isinstance(block, dict) else str(block) + for block in content + if isinstance(block, (dict, str)) + ] + return " ".join(texts) + + return "" diff --git a/litellm/proxy/hooks/mcp_semantic_filter/ARCHITECTURE.md b/litellm/proxy/hooks/mcp_semantic_filter/ARCHITECTURE.md new file mode 100644 index 0000000000..f2f9a1d485 --- /dev/null +++ b/litellm/proxy/hooks/mcp_semantic_filter/ARCHITECTURE.md @@ -0,0 +1,96 @@ +# MCP Semantic Tool Filter Architecture + +## Why Filter MCP Tools + +When multiple MCP servers are connected, the proxy may expose hundreds of tools. Sending all tools in every request wastes context window tokens and increases cost. The semantic filter keeps only the top-K most relevant tools based on embedding similarity. + +```mermaid +sequenceDiagram + participant Client + participant Hook as SemanticToolFilterHook + participant Filter as SemanticMCPToolFilter + participant Router as semantic-router + participant LLM + + Client->>Hook: POST /chat/completions + Note over Client,Hook: tools: [100+ MCP tools] + Note over Client,Hook: messages: [{"role": "user", "content": "Get my Jira issues"}] + + rect rgb(240, 240, 240) + Note over Hook: 1. Extract User Query + Hook->>Filter: filter_tools("Get my Jira issues", tools) + end + + rect rgb(240, 240, 240) + Note over Filter: 2. Convert Tools → Routes + Note over Filter: Tool name + description → Route + end + + rect rgb(240, 240, 240) + Note over Filter: 3. Semantic Matching + Filter->>Router: router(query) + Router->>Router: Embeddings + similarity + Router-->>Filter: [top 10 matches] + end + + rect rgb(240, 240, 240) + Note over Filter: 4. Return Filtered Tools + Filter-->>Hook: [10 relevant tools] + end + + Hook->>LLM: POST /chat/completions + Note over Hook,LLM: tools: [10 Jira-related tools] ← FILTERED + Note over Hook,LLM: messages: [...] ← UNCHANGED + + LLM-->>Client: Response (unchanged) +``` + +## Filter Operations + +The hook intercepts requests before they reach the LLM: + +| Operation | Description | +|-----------|-------------| +| **Extract query** | Get user message from `messages[-1]` | +| **Convert to Routes** | Transform MCP tools into semantic-router Routes | +| **Semantic match** | Use `semantic-router` to find top-K similar tools | +| **Filter tools** | Replace request `tools` with filtered subset | + +## Trigger Conditions + +The filter only runs when: +- Call type is `completion` or `acompletion` +- Request contains `tools` field +- Request contains `messages` field +- Filter is enabled in config + +## What Does NOT Change + +- Request messages +- Response body +- Non-tool parameters + +## Integration with semantic-router + +Reuses existing LiteLLM infrastructure: +- `semantic-router` - Already an optional dependency +- `LiteLLMRouterEncoder` - Wraps `Router.aembedding()` for embeddings +- `SemanticRouter` - Handles similarity calculation and top-K selection + +## Configuration + +```yaml +litellm_settings: + mcp_semantic_tool_filter: + enabled: true + embedding_model: "openai/text-embedding-3-small" + top_k: 10 + similarity_threshold: 0.3 +``` + +## Error Handling + +The filter fails gracefully: +- If filtering fails → Return all tools (no impact on functionality) +- If query extraction fails → Skip filtering +- If no matches found → Return all tools diff --git a/litellm/proxy/hooks/mcp_semantic_filter/__init__.py b/litellm/proxy/hooks/mcp_semantic_filter/__init__.py new file mode 100644 index 0000000000..36d357d560 --- /dev/null +++ b/litellm/proxy/hooks/mcp_semantic_filter/__init__.py @@ -0,0 +1,9 @@ +""" +MCP Semantic Tool Filter Hook + +Semantic filtering for MCP tools to reduce context window size +and improve tool selection accuracy. +""" +from litellm.proxy.hooks.mcp_semantic_filter.hook import SemanticToolFilterHook + +__all__ = ["SemanticToolFilterHook"] diff --git a/litellm/proxy/hooks/mcp_semantic_filter/hook.py b/litellm/proxy/hooks/mcp_semantic_filter/hook.py new file mode 100644 index 0000000000..fc9349c2a4 --- /dev/null +++ b/litellm/proxy/hooks/mcp_semantic_filter/hook.py @@ -0,0 +1,353 @@ +""" +Semantic Tool Filter Hook + +Pre-call hook that filters MCP tools semantically before LLM inference. +Reduces context window size and improves tool selection accuracy. +""" +from typing import TYPE_CHECKING, Any, Dict, List, Optional, Union + +from litellm._logging import verbose_proxy_logger +from litellm.constants import ( + DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL, + DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD, + DEFAULT_MCP_SEMANTIC_FILTER_TOP_K, +) +from litellm.integrations.custom_logger import CustomLogger + +if TYPE_CHECKING: + from litellm.caching.caching import DualCache + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + from litellm.proxy._types import UserAPIKeyAuth + from litellm.router import Router + + +class SemanticToolFilterHook(CustomLogger): + """ + Pre-call hook that filters MCP tools semantically. + + This hook: + 1. Extracts the user query from messages + 2. Filters tools based on semantic similarity to the query + 3. Returns only the top-k most relevant tools to the LLM + """ + + def __init__(self, semantic_filter: "SemanticMCPToolFilter"): + """ + Initialize the hook. + + Args: + semantic_filter: SemanticMCPToolFilter instance + """ + super().__init__() + self.filter = semantic_filter + + verbose_proxy_logger.debug( + f"Initialized SemanticToolFilterHook with filter: " + f"enabled={semantic_filter.enabled}, top_k={semantic_filter.top_k}" + ) + + def _should_expand_mcp_tools(self, tools: List[Any]) -> bool: + """ + Check if tools contain MCP references with server_url="litellm_proxy". + + Only expands MCP tools pointing to litellm proxy, not external MCP servers. + """ + from litellm.responses.mcp.litellm_proxy_mcp_handler import ( + LiteLLM_Proxy_MCP_Handler, + ) + + return LiteLLM_Proxy_MCP_Handler._should_use_litellm_mcp_gateway(tools) + + async def _expand_mcp_tools( + self, + tools: List[Any], + user_api_key_dict: "UserAPIKeyAuth", + ) -> List[Dict[str, Any]]: + """ + Expand MCP references to actual tool definitions. + + Reuses LiteLLM_Proxy_MCP_Handler._process_mcp_tools_to_openai_format + which internally does: parse -> fetch -> filter -> deduplicate -> transform + """ + from litellm.responses.mcp.litellm_proxy_mcp_handler import ( + LiteLLM_Proxy_MCP_Handler, + ) + + # Parse to separate MCP tools from other tools + mcp_tools, _ = LiteLLM_Proxy_MCP_Handler._parse_mcp_tools(tools) + + if not mcp_tools: + return [] + + # Use single combined method instead of 3 separate calls + # This already handles: fetch -> filter by allowed_tools -> deduplicate -> transform + openai_tools, _ = await LiteLLM_Proxy_MCP_Handler._process_mcp_tools_to_openai_format( + user_api_key_auth=user_api_key_dict, + mcp_tools_with_litellm_proxy=mcp_tools + ) + + # Convert Pydantic models to dicts for compatibility + openai_tools_as_dicts = [] + for tool in openai_tools: + if hasattr(tool, "model_dump"): + tool_dict = tool.model_dump(exclude_none=True) + verbose_proxy_logger.debug(f"Converted Pydantic tool to dict: {type(tool).__name__} -> dict with keys: {list(tool_dict.keys())}") + openai_tools_as_dicts.append(tool_dict) + elif hasattr(tool, "dict"): + tool_dict = tool.dict(exclude_none=True) + verbose_proxy_logger.debug(f"Converted Pydantic tool (v1) to dict: {type(tool).__name__} -> dict") + openai_tools_as_dicts.append(tool_dict) + elif isinstance(tool, dict): + verbose_proxy_logger.debug(f"Tool is already a dict with keys: {list(tool.keys())}") + openai_tools_as_dicts.append(tool) + else: + verbose_proxy_logger.warning(f"Tool is unknown type: {type(tool)}, passing as-is") + openai_tools_as_dicts.append(tool) + + verbose_proxy_logger.debug( + f"Expanded {len(mcp_tools)} MCP reference(s) to {len(openai_tools_as_dicts)} tools (all as dicts)" + ) + + return openai_tools_as_dicts + + def _get_metadata_variable_name(self, data: dict) -> str: + if "litellm_metadata" in data: + return "litellm_metadata" + return "metadata" + + async def async_pre_call_hook( + self, + user_api_key_dict: "UserAPIKeyAuth", + cache: "DualCache", + data: dict, + call_type: str, + ) -> Optional[Union[Exception, str, dict]]: + """ + Filter tools before LLM call based on user query. + + This hook is called before the LLM request is made. It filters the + tools list to only include semantically relevant tools. + + Args: + user_api_key_dict: User authentication + cache: Cache instance + data: Request data containing messages and tools + call_type: Type of call (completion, acompletion, etc.) + + Returns: + Modified data dict with filtered tools, or None if no changes + """ + # Only filter endpoints that support tools + if call_type not in ("completion", "acompletion", "aresponses"): + verbose_proxy_logger.debug( + f"Skipping semantic filter for call_type={call_type}" + ) + return None + + # Check if tools are present + tools = data.get("tools") + if not tools: + verbose_proxy_logger.debug("No tools in request, skipping semantic filter") + return None + + original_tool_count = len(tools) + + # Check for MCP references (server_url="litellm_proxy") and expand them + if self._should_expand_mcp_tools(tools): + verbose_proxy_logger.debug( + "Detected litellm_proxy MCP references, expanding before semantic filtering" + ) + + try: + expanded_tools = await self._expand_mcp_tools( + tools, user_api_key_dict + ) + + if not expanded_tools: + verbose_proxy_logger.warning( + "No tools expanded from MCP references" + ) + return None + + verbose_proxy_logger.info( + f"Expanded {len(tools)} MCP reference(s) to {len(expanded_tools)} tools" + ) + + # Update tools for filtering + tools = expanded_tools + original_tool_count = len(tools) + + except Exception as e: + verbose_proxy_logger.error( + f"Failed to expand MCP references: {e}", exc_info=True + ) + return None + + # Check if messages are present (try both "messages" and "input" for responses API) + messages = data.get("messages", []) + if not messages: + messages = data.get("input", []) + if not messages: + verbose_proxy_logger.debug("No messages in request, skipping semantic filter") + return None + + # Check if filter is enabled + if not self.filter.enabled: + verbose_proxy_logger.debug("Semantic filter disabled, skipping") + return None + + try: + # Extract user query from messages + user_query = self.filter.extract_user_query(messages) + if not user_query: + verbose_proxy_logger.debug("No user query found, skipping semantic filter") + return None + + verbose_proxy_logger.debug( + f"Applying semantic filter to {len(tools)} tools " + f"with query: '{user_query[:50]}...'" + ) + + # Filter tools semantically + filtered_tools = await self.filter.filter_tools( + query=user_query, + available_tools=tools, # type: ignore + ) + + # Always update tools and emit header (even if count unchanged) + data["tools"] = filtered_tools + + # Store filter stats and tool names for response header + filter_stats = f"{original_tool_count}->{len(filtered_tools)}" + tool_names_csv = self._get_tool_names_csv(filtered_tools) + + _metadata_variable_name = self._get_metadata_variable_name(data) + data[_metadata_variable_name]["litellm_semantic_filter_stats"] = filter_stats + data[_metadata_variable_name]["litellm_semantic_filter_tools"] = tool_names_csv + + verbose_proxy_logger.info( + f"Semantic tool filter: {filter_stats} tools" + ) + + return data + + except Exception as e: + verbose_proxy_logger.warning( + f"Semantic tool filter hook failed: {e}. Proceeding with all tools." + ) + return None + + async def async_post_call_response_headers_hook( + self, + data: dict, + user_api_key_dict: "UserAPIKeyAuth", + response: Any, + request_headers: Optional[Dict[str, str]] = None, + ) -> Optional[Dict[str, str]]: + """Add semantic filter stats and tool names to response headers.""" + from litellm.constants import MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH + + _metadata_variable_name = self._get_metadata_variable_name(data) + metadata = data[_metadata_variable_name] + + filter_stats = metadata.get("litellm_semantic_filter_stats") + if not filter_stats: + return None + + headers = {"x-litellm-semantic-filter": filter_stats} + + # Add CSV of filtered tool names (nginx-safe length) + tool_names_csv = metadata.get("litellm_semantic_filter_tools", "") + if tool_names_csv: + if len(tool_names_csv) > MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH: + tool_names_csv = tool_names_csv[:MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH - 3] + "..." + + headers["x-litellm-semantic-filter-tools"] = tool_names_csv + + return headers + + def _get_tool_names_csv(self, tools: List[Any]) -> str: + """Extract tool names and return as CSV string.""" + if not tools: + return "" + + tool_names = [] + for tool in tools: + name = tool.get("name", "") if isinstance(tool, dict) else getattr(tool, "name", "") + if name: + tool_names.append(name) + + return ",".join(tool_names) + + @staticmethod + async def initialize_from_config( + config: Optional[Dict[str, Any]], + llm_router: Optional["Router"], + ) -> Optional["SemanticToolFilterHook"]: + """ + Initialize semantic tool filter from proxy config. + + Args: + config: Proxy configuration dict (litellm_settings.mcp_semantic_tool_filter) + llm_router: LiteLLM router instance for embeddings + + Returns: + SemanticToolFilterHook instance if enabled, None otherwise + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + if not config or not config.get("enabled", False): + verbose_proxy_logger.debug("Semantic tool filter not enabled in config") + return None + + if llm_router is None: + verbose_proxy_logger.warning( + "Cannot initialize semantic filter: llm_router is None" + ) + return None + + try: + + embedding_model = config.get( + "embedding_model", DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL + ) + top_k = config.get("top_k", DEFAULT_MCP_SEMANTIC_FILTER_TOP_K) + similarity_threshold = config.get( + "similarity_threshold", DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD + ) + + semantic_filter = SemanticMCPToolFilter( + embedding_model=embedding_model, + litellm_router_instance=llm_router, + top_k=top_k, + similarity_threshold=similarity_threshold, + enabled=True, + ) + + # Build router from MCP registry on startup + await semantic_filter.build_router_from_mcp_registry() + + hook = SemanticToolFilterHook(semantic_filter) + + verbose_proxy_logger.info( + f"✅ MCP Semantic Tool Filter enabled: " + f"embedding_model={embedding_model}, top_k={top_k}, " + f"similarity_threshold={similarity_threshold}" + ) + + return hook + + except ImportError as e: + verbose_proxy_logger.warning( + f"semantic-router not installed. Install with: " + f"pip install 'litellm[semantic-router]'. Error: {e}" + ) + return None + except Exception as e: + verbose_proxy_logger.exception( + f"Failed to initialize MCP semantic tool filter: {e}" + ) + return None diff --git a/litellm/proxy/proxy_config.yaml b/litellm/proxy/proxy_config.yaml index e12e75b54f..d87ae8b14c 100644 --- a/litellm/proxy/proxy_config.yaml +++ b/litellm/proxy/proxy_config.yaml @@ -1,4 +1,14 @@ model_list: + - model_name: gpt-4o + litellm_params: + model: openai/gpt-4o + api_key: os.environ/OPENAI_API_KEY + + - model_name: text-embedding-3-small + litellm_params: + model: openai/text-embedding-3-small + api_key: os.environ/OPENAI_API_KEY + - model_name: bedrock-claude-sonnet-3.5 litellm_params: model: "bedrock/us.anthropic.claude-3-5-sonnet-20240620-v1:0" @@ -22,4 +32,31 @@ model_list: - model_name: bedrock-nova-premier litellm_params: model: "bedrock/us.amazon.nova-premier-v1:0" - aws_region_name: "us-east-1" \ No newline at end of file + aws_region_name: "us-east-1" + +# MCP Server Configuration +mcp_servers: + # Wikipedia MCP - reliable and works without external deps + wikipedia: + transport: "stdio" + command: "uvx" + args: ["mcp-server-fetch"] + description: "Fetch web pages and Wikipedia content" + deepwiki: + transport: "http" + url: "https://mcp.deepwiki.com/mcp" + +# General Settings +general_settings: + master_key: sk-1234 + store_model_in_db: false + +# LiteLLM Settings +litellm_settings: + # Enable MCP Semantic Tool Filter + mcp_semantic_tool_filter: + enabled: true + embedding_model: "text-embedding-3-small" + top_k: 5 + similarity_threshold: 0.3 + diff --git a/litellm/proxy/proxy_server.py b/litellm/proxy/proxy_server.py index 59e5fdc56a..8f433bfa48 100644 --- a/litellm/proxy/proxy_server.py +++ b/litellm/proxy/proxy_server.py @@ -793,6 +793,21 @@ async def proxy_startup_event(app: FastAPI): # noqa: PLR0915 redis_usage_cache=redis_usage_cache, ) + ## SEMANTIC TOOL FILTER ## + # Read litellm_settings from config for semantic filter initialization + try: + verbose_proxy_logger.debug("About to initialize semantic tool filter") + _config = proxy_config.get_config_state() + _litellm_settings = _config.get("litellm_settings", {}) + verbose_proxy_logger.debug(f"litellm_settings keys = {list(_litellm_settings.keys())}") + await ProxyStartupEvent._initialize_semantic_tool_filter( + llm_router=llm_router, + litellm_settings=_litellm_settings, + ) + verbose_proxy_logger.debug("After semantic tool filter initialization") + except Exception as e: + verbose_proxy_logger.error(f"Semantic filter init failed: {e}", exc_info=True) + ## JWT AUTH ## ProxyStartupEvent._initialize_jwt_auth( general_settings=general_settings, @@ -4742,6 +4757,34 @@ class ProxyStartupEvent: llm_router=llm_router, redis_usage_cache=redis_usage_cache ) + @classmethod + async def _initialize_semantic_tool_filter( + cls, + llm_router: Optional[Router], + litellm_settings: Dict[str, Any], + ): + """Initialize MCP semantic tool filter if configured""" + from litellm.proxy.hooks.mcp_semantic_filter import SemanticToolFilterHook + + verbose_proxy_logger.info( + f"Initializing semantic tool filter: llm_router={llm_router is not None}, " + f"litellm_settings keys={list(litellm_settings.keys())}" + ) + + mcp_semantic_filter_config = litellm_settings.get("mcp_semantic_tool_filter", None) + verbose_proxy_logger.debug(f"Semantic filter config: {mcp_semantic_filter_config}") + + hook = await SemanticToolFilterHook.initialize_from_config( + config=mcp_semantic_filter_config, + llm_router=llm_router, + ) + + if hook: + verbose_proxy_logger.debug("✅ Semantic tool filter hook registered") + litellm.logging_callback_manager.add_litellm_callback(hook) + else: + verbose_proxy_logger.warning("❌ Semantic tool filter hook not initialized") + @classmethod def _initialize_jwt_auth( cls, diff --git a/tests/mcp_tests/test_semantic_tool_filter_e2e.py b/tests/mcp_tests/test_semantic_tool_filter_e2e.py new file mode 100644 index 0000000000..cf951c1884 --- /dev/null +++ b/tests/mcp_tests/test_semantic_tool_filter_e2e.py @@ -0,0 +1,74 @@ +""" +End-to-end test for MCP Semantic Tool Filtering +""" +import asyncio +import os +import sys +from unittest.mock import Mock + +import pytest + +sys.path.insert(0, os.path.abspath("../..")) + +from mcp.types import Tool as MCPTool + + +@pytest.mark.asyncio +async def test_e2e_semantic_filter(): + """E2E: Load router/filter and verify hook filters tools.""" + from litellm import Router + from litellm.proxy.hooks.mcp_semantic_filter import SemanticToolFilterHook + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + # Create router and filter + router = Router( + model_list=[{ + "model_name": "text-embedding-3-small", + "litellm_params": {"model": "openai/text-embedding-3-small"}, + }] + ) + + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=router, + top_k=3, + enabled=True, + ) + + hook = SemanticToolFilterHook(filter_instance) + + # Create 10 tools + tools = [ + MCPTool(name="gmail_send", description="Send an email via Gmail", inputSchema={"type": "object"}), + MCPTool(name="calendar_create", description="Create a calendar event", inputSchema={"type": "object"}), + MCPTool(name="file_upload", description="Upload a file", inputSchema={"type": "object"}), + MCPTool(name="web_search", description="Search the web", inputSchema={"type": "object"}), + MCPTool(name="slack_send", description="Send Slack message", inputSchema={"type": "object"}), + MCPTool(name="doc_read", description="Read document", inputSchema={"type": "object"}), + MCPTool(name="db_query", description="Query database", inputSchema={"type": "object"}), + MCPTool(name="api_call", description="Make API call", inputSchema={"type": "object"}), + MCPTool(name="task_create", description="Create task", inputSchema={"type": "object"}), + MCPTool(name="note_add", description="Add note", inputSchema={"type": "object"}), + ] + + data = { + "model": "gpt-4", + "messages": [{"role": "user", "content": "Send an email and create a calendar event"}], + "tools": tools, + } + + # Call hook + result = await hook.async_pre_call_hook( + user_api_key_dict=Mock(), + cache=Mock(), + data=data, + call_type="completion", + ) + + # Single assertion: hook filtered tools + assert result and len(result["tools"]) < len(tools), f"Expected filtered tools, got {len(result['tools'])} tools (original: {len(tools)})" + + print(f"✅ E2E test passed: Filtering reduced tools from {len(tools)} to {len(result['tools'])}") + print(f" Filtered tools: {[t.name for t in result['tools']]}") diff --git a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py new file mode 100644 index 0000000000..8d35f5bbdc --- /dev/null +++ b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py @@ -0,0 +1,384 @@ +""" +Unit tests for MCP Semantic Tool Filtering + +Tests the core filtering logic that takes a long list of tools and returns +an ordered set of top K tools based on semantic similarity. +""" +import asyncio +import os +import sys +from unittest.mock import AsyncMock, Mock, patch + +import pytest + +sys.path.insert(0, os.path.abspath("../..")) + +from mcp.types import Tool as MCPTool + + +@pytest.mark.asyncio +async def test_semantic_filter_basic_filtering(): + """ + Test that the semantic filter correctly filters tools based on query. + + Given: 10 email/calendar tools + When: Query is "send an email" + Then: Email tools should rank higher than calendar tools + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + # Create mock tools - mix of email and calendar tools + tools = [ + MCPTool(name="gmail_send", description="Send an email via Gmail", inputSchema={"type": "object"}), + MCPTool(name="outlook_send", description="Send an email via Outlook", inputSchema={"type": "object"}), + MCPTool(name="calendar_create", description="Create a calendar event", inputSchema={"type": "object"}), + MCPTool(name="calendar_update", description="Update a calendar event", inputSchema={"type": "object"}), + MCPTool(name="email_read", description="Read emails from inbox", inputSchema={"type": "object"}), + MCPTool(name="email_delete", description="Delete an email", inputSchema={"type": "object"}), + MCPTool(name="calendar_delete", description="Delete a calendar event", inputSchema={"type": "object"}), + MCPTool(name="email_search", description="Search for emails", inputSchema={"type": "object"}), + MCPTool(name="calendar_list", description="List calendar events", inputSchema={"type": "object"}), + MCPTool(name="email_forward", description="Forward an email to someone", inputSchema={"type": "object"}), + ] + + # Mock router that returns mock embeddings + from litellm.types.utils import Embedding, EmbeddingResponse + + mock_router = Mock() + + def mock_embedding_sync(*args, **kwargs): + return EmbeddingResponse( + data=[Embedding(embedding=[0.1] * 1536, index=0, object="embedding")], + model="text-embedding-3-small", + object="list", + usage={"prompt_tokens": 10, "total_tokens": 10} + ) + + async def mock_embedding_async(*args, **kwargs): + return mock_embedding_sync() + + mock_router.embedding = mock_embedding_sync + mock_router.aembedding = mock_embedding_async + + # Create filter + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=True, + ) + + # Filter tools with email-related query + filtered = await filter_instance.filter_tools( + query="send an email to john@example.com", + available_tools=tools, + ) + + # Assertions - validate filtering mechanics work + assert len(filtered) <= 3, f"Should return at most 3 tools (top_k), got {len(filtered)}" + assert len(filtered) > 0, "Should return at least some tools" + assert len(filtered) < len(tools), f"Should filter down from {len(tools)} tools, got {len(filtered)}" + + # Validate tools are actual MCPTool objects + for tool in filtered: + assert hasattr(tool, 'name'), "Filtered result should be MCPTool with name" + assert hasattr(tool, 'description'), "Filtered result should be MCPTool with description" + + filtered_names = [t.name for t in filtered] + print(f"✅ Successfully filtered {len(tools)} tools down to top {len(filtered)}: {filtered_names}") + print(f" Filter respects top_k parameter correctly") + + +@pytest.mark.asyncio +async def test_semantic_filter_top_k_limiting(): + """ + Test that the filter respects top_k parameter. + + Given: 20 tools + When: top_k=5 + Then: Should return at most 5 tools + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + # Create 20 tools + tools = [ + MCPTool(name=f"tool_{i}", description=f"Tool number {i} for testing", inputSchema={"type": "object"}) + for i in range(20) + ] + + # Mock router + from litellm.types.utils import Embedding, EmbeddingResponse + + mock_router = Mock() + + def mock_embedding_sync(*args, **kwargs): + return EmbeddingResponse( + data=[Embedding(embedding=[0.1] * 1536, index=0, object="embedding")], + model="text-embedding-3-small", + object="list", + usage={"prompt_tokens": 10, "total_tokens": 10} + ) + + async def mock_embedding_async(*args, **kwargs): + return mock_embedding_sync() + + mock_router.embedding = mock_embedding_sync + mock_router.aembedding = mock_embedding_async + + # Create filter with top_k=5 + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=5, + similarity_threshold=0.3, + enabled=True, + ) + + # Filter tools + filtered = await filter_instance.filter_tools( + query="test query", + available_tools=tools, + ) + + # Should return at most 5 tools + assert len(filtered) <= 5, f"Expected at most 5 tools, got {len(filtered)}" + print(f"Returned {len(filtered)} tools out of {len(tools)} (top_k=5)") + + +@pytest.mark.asyncio +async def test_semantic_filter_disabled(): + """ + Test that when filter is disabled, all tools are returned. + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + tools = [ + MCPTool(name=f"tool_{i}", description=f"Tool {i}", inputSchema={"type": "object"}) + for i in range(10) + ] + + mock_router = Mock() + + # Create disabled filter + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=False, # Disabled + ) + + # Filter tools + filtered = await filter_instance.filter_tools( + query="test query", + available_tools=tools, + ) + + # Should return all tools when disabled + assert len(filtered) == len(tools), f"Expected all {len(tools)} tools, got {len(filtered)}" + + +@pytest.mark.asyncio +async def test_semantic_filter_empty_tools(): + """ + Test that filter handles empty tool list gracefully. + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + mock_router = Mock() + + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=True, + ) + + # Filter empty list + filtered = await filter_instance.filter_tools( + query="test query", + available_tools=[], + ) + + assert len(filtered) == 0, "Should return empty list for empty input" + + +@pytest.mark.asyncio +async def test_semantic_filter_extract_user_query(): + """ + Test that user query extraction works correctly from messages. + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + + mock_router = Mock() + + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=True, + ) + + # Test string content + messages = [ + {"role": "system", "content": "You are a helpful assistant"}, + {"role": "user", "content": "Send an email to john@example.com"}, + ] + + query = filter_instance.extract_user_query(messages) + assert query == "Send an email to john@example.com" + + # Test list content blocks + messages_with_blocks = [ + {"role": "user", "content": [ + {"type": "text", "text": "Hello, "}, + {"type": "text", "text": "send email please"}, + ]}, + ] + + query2 = filter_instance.extract_user_query(messages_with_blocks) + assert "Hello" in query2 and "send email" in query2 + + # Test no user messages + messages_no_user = [ + {"role": "system", "content": "System message only"}, + ] + + query3 = filter_instance.extract_user_query(messages_no_user) + assert query3 == "" + + +@pytest.mark.asyncio +async def test_semantic_filter_hook_triggers_on_completion(): + """ + Test that the hook triggers for completion requests with tools. + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + from litellm.proxy.hooks.mcp_semantic_filter import SemanticToolFilterHook + from litellm.types.utils import Embedding, EmbeddingResponse + + # Create mock filter + mock_router = Mock() + + def mock_embedding_sync(*args, **kwargs): + return EmbeddingResponse( + data=[Embedding(embedding=[0.1] * 1536, index=0, object="embedding")], + model="text-embedding-3-small", + object="list", + usage={"prompt_tokens": 10, "total_tokens": 10} + ) + + async def mock_embedding_async(*args, **kwargs): + return mock_embedding_sync() + + mock_router.embedding = mock_embedding_sync + mock_router.aembedding = mock_embedding_async + + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=True, + ) + + # Create hook + hook = SemanticToolFilterHook(filter_instance) + + # Prepare data - completion request with tools + tools = [ + MCPTool(name=f"tool_{i}", description=f"Tool {i}", inputSchema={"type": "object"}) + for i in range(10) + ] + + data = { + "model": "gpt-4", + "messages": [ + {"role": "user", "content": "Send an email"} + ], + "tools": tools, + } + + # Mock user API key dict and cache + mock_user_api_key_dict = Mock() + mock_cache = Mock() + + # Call hook + result = await hook.async_pre_call_hook( + user_api_key_dict=mock_user_api_key_dict, + cache=mock_cache, + data=data, + call_type="completion", + ) + + # Assertions + assert result is not None, "Hook should return modified data" + assert "tools" in result, "Result should contain tools" + assert len(result["tools"]) < len(tools), f"Hook should filter tools, got {len(result['tools'])}/{len(tools)}" + + print(f"✅ Hook triggered correctly: {len(tools)} -> {len(result['tools'])} tools") + + + +@pytest.mark.asyncio +async def test_semantic_filter_hook_skips_no_tools(): + """ + Test that the hook does NOT trigger when there are no tools. + """ + from litellm.proxy._experimental.mcp_server.semantic_tool_filter import ( + SemanticMCPToolFilter, + ) + from litellm.proxy.hooks.mcp_semantic_filter import SemanticToolFilterHook + + # Create mock filter + mock_router = Mock() + filter_instance = SemanticMCPToolFilter( + embedding_model="text-embedding-3-small", + litellm_router_instance=mock_router, + top_k=3, + similarity_threshold=0.3, + enabled=True, + ) + + # Create hook + hook = SemanticToolFilterHook(filter_instance) + + # Prepare data - completion without tools + data = { + "model": "gpt-4", + "messages": [ + {"role": "user", "content": "Hello"} + ], + } + + # Mock user API key dict and cache + mock_user_api_key_dict = Mock() + mock_cache = Mock() + + # Call hook + result = await hook.async_pre_call_hook( + user_api_key_dict=mock_user_api_key_dict, + cache=mock_cache, + data=data, + call_type="completion", + ) + + # Should return None (no modification) + assert result is None, "Hook should skip requests without tools" + print("✅ Hook correctly skips requests without tools") + From 0ef506a54ae149edc135cf25011e76c647a2e261 Mon Sep 17 00:00:00 2001 From: Ishaan Jaff Date: Mon, 2 Feb 2026 18:29:07 -0800 Subject: [PATCH 11/29] Litellm docs mcp filtering semantic (#20316) * init: SemanticMCPToolFilter * init: SemanticToolFilterHook * test_e2e_semantic_filter * mock tests: test_semantic_filter_basic_filtering * Update litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * refactor folder/file organization * docs fix * fix filter * fix: filter_tools * fix linting tool filrer * initialize_from_config * fix: _expand_mcp_tools * _initialize_semantic_tool_filter * working: async_post_call_response_headers_hook * clean up semantic tool filter * add _initialize_semantic_tool_filter * build_router_from_mcp_registry * _get_tools_by_names * fiix config * async_post_call_response_headers_hook * docs mcp filter * docs fix --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> --- docs/my-website/docs/mcp_semantic_filter.md | 158 ++++++++++++++++++++ docs/my-website/sidebars.js | 1 + 2 files changed, 159 insertions(+) create mode 100644 docs/my-website/docs/mcp_semantic_filter.md diff --git a/docs/my-website/docs/mcp_semantic_filter.md b/docs/my-website/docs/mcp_semantic_filter.md new file mode 100644 index 0000000000..c58be80a68 --- /dev/null +++ b/docs/my-website/docs/mcp_semantic_filter.md @@ -0,0 +1,158 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# MCP Semantic Tool Filter + +Automatically filter MCP tools by semantic relevance. When you have many MCP tools registered, LiteLLM semantically matches the user's query against tool descriptions and sends only the most relevant tools to the LLM. + +## How It Works + +Tool search shifts tool selection from a prompt-engineering problem to a retrieval problem. Instead of injecting a large static list of tools into every prompt, the semantic filter: + +1. Builds a semantic index of all available MCP tools on startup +2. On each request, semantically matches the user's query against tool descriptions +3. Returns only the top-K most relevant tools to the LLM + +This approach improves context efficiency, increases reliability by reducing tool confusion, and enables scalability to ecosystems with hundreds or thousands of MCP tools. + +```mermaid +sequenceDiagram + participant Client + participant LiteLLM as LiteLLM Proxy + participant SemanticFilter as Semantic Filter + participant MCP as MCP Registry + participant LLM as LLM Provider + + Note over LiteLLM,MCP: Startup: Build Semantic Index + LiteLLM->>MCP: Fetch all registered MCP tools + MCP->>LiteLLM: Return all tools (e.g., 50 tools) + LiteLLM->>SemanticFilter: Build semantic router with embeddings + SemanticFilter->>LLM: Generate embeddings for tool descriptions + LLM->>SemanticFilter: Return embeddings + Note over SemanticFilter: Index ready for fast lookup + + Note over Client,LLM: Request: Semantic Tool Filtering + Client->>LiteLLM: POST /v1/responses with MCP tools + LiteLLM->>SemanticFilter: Expand MCP references (50 tools available) + SemanticFilter->>SemanticFilter: Extract user query from request + SemanticFilter->>LLM: Generate query embedding + LLM->>SemanticFilter: Return query embedding + SemanticFilter->>SemanticFilter: Match query against tool embeddings + SemanticFilter->>LiteLLM: Return top-K tools (e.g., 3 most relevant) + LiteLLM->>LLM: Forward request with filtered tools (3 tools) + LLM->>LiteLLM: Return response + LiteLLM->>Client: Response with headers
x-litellm-semantic-filter: 50->3
x-litellm-semantic-filter-tools: tool1,tool2,tool3 +``` + +## Configuration + +Enable semantic filtering in your LiteLLM config: + +```yaml title="config.yaml" showLineNumbers +litellm_settings: + mcp_semantic_tool_filter: + enabled: true + embedding_model: "text-embedding-3-small" # Model for semantic matching + top_k: 5 # Max tools to return + similarity_threshold: 0.3 # Min similarity score +``` + +**Configuration Options:** +- `enabled` - Enable/disable semantic filtering (default: `false`) +- `embedding_model` - Model for generating embeddings (default: `"text-embedding-3-small"`) +- `top_k` - Maximum number of tools to return (default: `10`) +- `similarity_threshold` - Minimum similarity score for matches (default: `0.3`) + +## Usage + +Use MCP tools normally with the Responses API or Chat Completions. The semantic filter runs automatically: + + + + +```bash title="Responses API with Semantic Filtering" showLineNumbers +curl --location 'http://localhost:4000/v1/responses' \ +--header 'Content-Type: application/json' \ +--header "Authorization: Bearer sk-1234" \ +--data '{ + "model": "gpt-4o", + "input": [ + { + "role": "user", + "content": "give me TLDR of what BerriAI/litellm repo is about", + "type": "message" + } + ], + "tools": [ + { + "type": "mcp", + "server_url": "litellm_proxy", + "require_approval": "never" + } + ], + "tool_choice": "required" +}' +``` + + + + +```bash title="Chat Completions with Semantic Filtering" showLineNumbers +curl --location 'http://localhost:4000/v1/chat/completions' \ +--header 'Content-Type: application/json' \ +--header "Authorization: Bearer sk-1234" \ +--data '{ + "model": "gpt-4o", + "messages": [ + {"role": "user", "content": "Search Wikipedia for LiteLLM"} + ], + "tools": [ + { + "type": "mcp", + "server_url": "litellm_proxy" + } + ] +}' +``` + + + + +## Response Headers + +The semantic filter adds diagnostic headers to every response: + +``` +x-litellm-semantic-filter: 10->3 +x-litellm-semantic-filter-tools: wikipedia-fetch,github-search,slack-post +``` + +- **`x-litellm-semantic-filter`** - Shows before→after tool count (e.g., `10->3` means 10 tools were filtered down to 3) +- **`x-litellm-semantic-filter-tools`** - CSV list of the filtered tool names (max 150 chars, clipped with `...` if longer) + +These headers help you understand which tools were selected for each request and verify the filter is working correctly. + +## Example + +If you have 50 MCP tools registered and make a request asking about Wikipedia, the semantic filter will: + +1. Semantically match your query `"Search Wikipedia for LiteLLM"` against all 50 tool descriptions +2. Select the top 5 most relevant tools (e.g., `wikipedia-fetch`, `wikipedia-search`, etc.) +3. Pass only those 5 tools to the LLM +4. Add headers showing `x-litellm-semantic-filter: 50->5` + +This dramatically reduces prompt size while ensuring the LLM has access to the right tools for the task. + +## Performance + +The semantic filter is optimized for production: +- Router builds once on startup (no per-request overhead) +- Semantic matching typically takes under 50ms +- Fails gracefully - returns all tools if filtering fails +- No impact on latency for requests without MCP tools + +## Related + +- [MCP Overview](./mcp.md) - Learn about MCP in LiteLLM +- [MCP Permission Management](./mcp_control.md) - Control tool access by key/team +- [Using MCP](./mcp_usage.md) - Complete MCP usage guide diff --git a/docs/my-website/sidebars.js b/docs/my-website/sidebars.js index e533665032..49265ddf63 100644 --- a/docs/my-website/sidebars.js +++ b/docs/my-website/sidebars.js @@ -538,6 +538,7 @@ const sidebars = { items: [ "mcp", "mcp_usage", + "mcp_semantic_filter", "mcp_control", "mcp_cost", "mcp_guardrail", From 4e8c6d1b100426086d93ecc7ec55a1155b7d9f0d Mon Sep 17 00:00:00 2001 From: Ishaan Jaffer Date: Mon, 2 Feb 2026 18:30:42 -0800 Subject: [PATCH 12/29] fix linting --- .../model_prices_and_context_window_backup.json | 14 ++++++++++++++ .../mcp_server/semantic_tool_filter.py | 5 ++--- 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/litellm/model_prices_and_context_window_backup.json b/litellm/model_prices_and_context_window_backup.json index 6aeb51d581..485bee4f19 100644 --- a/litellm/model_prices_and_context_window_backup.json +++ b/litellm/model_prices_and_context_window_backup.json @@ -21488,6 +21488,20 @@ "supports_tool_choice": true, "supports_web_search": true }, + "moonshot/kimi-k2.5": { + "cache_read_input_token_cost": 1e-07, + "input_cost_per_token": 6e-07, + "litellm_provider": "moonshot", + "max_input_tokens": 262144, + "max_output_tokens": 262144, + "max_tokens": 262144, + "mode": "chat", + "output_cost_per_token": 3e-06, + "source": "https://platform.moonshot.ai/docs/pricing/chat", + "supports_function_calling": true, + "supports_tool_choice": true, + "supports_vision": true + }, "moonshot/kimi-latest": { "cache_read_input_token_cost": 1.5e-07, "input_cost_per_token": 2e-06, diff --git a/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py index c83ef13a64..b01bf14238 100644 --- a/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py +++ b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py @@ -8,7 +8,6 @@ from typing import TYPE_CHECKING, Any, Dict, List, Optional from litellm._logging import verbose_logger if TYPE_CHECKING: - from mcp.types import Tool as MCPTool from semantic_router.routers import SemanticRouter from litellm.router import Router @@ -88,8 +87,8 @@ class SemanticMCPToolFilter: description = tool.get("description", name) else: # MCPTool object - name = tool.name - description = tool.description or tool.name + name = str(tool.name) + description = str(tool.description) if tool.description else str(tool.name) return name, description From c8f9af175866e72967f8bff25f19ef0c6d31bfe6 Mon Sep 17 00:00:00 2001 From: Ishaan Jaffer Date: Mon, 2 Feb 2026 19:00:10 -0800 Subject: [PATCH 13/29] fix mypy lint --- litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py index b01bf14238..e5cb6a0098 100644 --- a/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py +++ b/litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py @@ -81,6 +81,9 @@ class SemanticMCPToolFilter: def _extract_tool_info(self, tool) -> tuple[str, str]: """Extract name and description from MCP tool or OpenAI function dict.""" + name: str + description: str + if isinstance(tool, dict): # OpenAI function format name = tool.get("name", "") From 333419b4d2cd7f229f7cd0c1d2cd5e8c5998d9f4 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 09:03:27 +0530 Subject: [PATCH 14/29] Add documentation correctly for nova sonic --- docs/my-website/docs/providers/bedrock.md | 2 +- .../{tutorials => providers}/bedrock_realtime_with_audio.md | 6 +----- docs/my-website/sidebars.js | 1 + 3 files changed, 3 insertions(+), 6 deletions(-) rename docs/my-website/docs/{tutorials => providers}/bedrock_realtime_with_audio.md (98%) diff --git a/docs/my-website/docs/providers/bedrock.md b/docs/my-website/docs/providers/bedrock.md index 487212ad65..e546ed9765 100644 --- a/docs/my-website/docs/providers/bedrock.md +++ b/docs/my-website/docs/providers/bedrock.md @@ -9,7 +9,7 @@ ALL Bedrock models (Anthropic, Meta, Deepseek, Mistral, Amazon, etc.) are Suppor | Description | Amazon Bedrock is a fully managed service that offers a choice of high-performing foundation models (FMs). | | Provider Route on LiteLLM | `bedrock/`, [`bedrock/converse/`](#set-converse--invoke-route), [`bedrock/invoke/`](#set-invoke-route), [`bedrock/converse_like/`](#calling-via-internal-proxy), [`bedrock/llama/`](#deepseek-not-r1), [`bedrock/deepseek_r1/`](#deepseek-r1), [`bedrock/qwen3/`](#qwen3-imported-models), [`bedrock/qwen2/`](./bedrock_imported.md#qwen2-imported-models), [`bedrock/openai/`](./bedrock_imported.md#openai-compatible-imported-models-qwen-25-vl-etc), [`bedrock/moonshot`](./bedrock_imported.md#moonshot-kimi-k2-thinking) | | Provider Doc | [Amazon Bedrock ↗](https://docs.aws.amazon.com/bedrock/latest/userguide/what-is-bedrock.html) | -| Supported OpenAI Endpoints | `/chat/completions`, `/completions`, `/embeddings`, `/images/generations` | +| Supported OpenAI Endpoints | `/chat/completions`, `/completions`, `/embeddings`, `/images/generations`, `/v1/realtime`| | Rerank Endpoint | `/rerank` | | Pass-through Endpoint | [Supported](../pass_through/bedrock.md) | diff --git a/docs/my-website/docs/tutorials/bedrock_realtime_with_audio.md b/docs/my-website/docs/providers/bedrock_realtime_with_audio.md similarity index 98% rename from docs/my-website/docs/tutorials/bedrock_realtime_with_audio.md rename to docs/my-website/docs/providers/bedrock_realtime_with_audio.md index 07e29af532..a2d9813ffd 100644 --- a/docs/my-website/docs/tutorials/bedrock_realtime_with_audio.md +++ b/docs/my-website/docs/providers/bedrock_realtime_with_audio.md @@ -1,8 +1,4 @@ -# Call Bedrock Nova Sonic Realtime API with Audio Input/Output - -:::info -Requires LiteLLM Proxy v1.70.1+ -::: +# Bedrock Realtime API ## Overview diff --git a/docs/my-website/sidebars.js b/docs/my-website/sidebars.js index 49265ddf63..d932b6af25 100644 --- a/docs/my-website/sidebars.js +++ b/docs/my-website/sidebars.js @@ -717,6 +717,7 @@ const sidebars = { "providers/bedrock_agents", "providers/bedrock_writer", "providers/bedrock_batches", + "providers/bedrock_realtime_with_audio", "providers/aws_polly", "providers/bedrock_vector_store", ] From 5cfcf67d7c991074bb6b31546b8452f4a2cf672f Mon Sep 17 00:00:00 2001 From: Ishaan Jaff Date: Mon, 2 Feb 2026 19:36:36 -0800 Subject: [PATCH 15/29] [Feat] /chat/completions - allow using OpenAI style tools for `web_search` with VertexAI/gemini models (#20280) * test_gemini_openai_web_search_tool_to_google_search * feat: Handle OpenAI style web search tools --- .../vertex_and_google_ai_studio_gemini.py | 7 ++ tests/llm_translation/test_gemini.py | 17 +++ ...test_vertex_and_google_ai_studio_gemini.py | 105 ++++++++++++++++++ 3 files changed, 129 insertions(+) diff --git a/litellm/llms/vertex_ai/gemini/vertex_and_google_ai_studio_gemini.py b/litellm/llms/vertex_ai/gemini/vertex_and_google_ai_studio_gemini.py index a9ac21bb56..b5a6949f27 100644 --- a/litellm/llms/vertex_ai/gemini/vertex_and_google_ai_studio_gemini.py +++ b/litellm/llms/vertex_ai/gemini/vertex_and_google_ai_studio_gemini.py @@ -478,6 +478,13 @@ class VertexGeminiConfig(VertexAIBaseConfig, BaseConfig): if "type" in tool and tool["type"] == "computer_use": computer_use_config = {k: v for k, v in tool.items() if k != "type"} tool = {VertexToolName.COMPUTER_USE.value: computer_use_config} + # Handle OpenAI-style web_search and web_search_preview tools + # Transform them to Gemini's googleSearch tool + elif "type" in tool and tool["type"] in ("web_search", "web_search_preview"): + verbose_logger.info( + f"Gemini: Transforming OpenAI-style '{tool['type']}' tool to googleSearch" + ) + tool = {VertexToolName.GOOGLE_SEARCH.value: {}} # Handle tools with 'type' field (OpenAI spec compliance) Ignore this field -> https://github.com/BerriAI/litellm/issues/14644#issuecomment-3342061838 elif "type" in tool: tool = {k: tool[k] for k in tool if k != "type"} diff --git a/tests/llm_translation/test_gemini.py b/tests/llm_translation/test_gemini.py index e3e0578644..c1c52757cf 100644 --- a/tests/llm_translation/test_gemini.py +++ b/tests/llm_translation/test_gemini.py @@ -1435,3 +1435,20 @@ def test_gemini_image_size_limit_exceeded(): error_message = str(excinfo.value) assert "Image size" in error_message assert "exceeds maximum allowed size" in error_message + +@pytest.mark.asyncio +async def test_gemini_openai_web_search_tool_to_google_search(): + """ + Test that OpenAI-style web_search tools are transformed to Gemini's googleSearch. + + When passing {"type": "web_search"} or {"type": "web_search_preview"} to Gemini, + these should be transformed to googleSearch, not silently ignored. + """ + response = await litellm.acompletion( + model="gemini/gemini-2.5-flash", + messages=[{"role": "user", "content": "What is the capital of France?"}], + tools=[{"type": "web_search"}], + ) + print("response: ", response.model_dump_json(indent=4)) + assert hasattr(response, "vertex_ai_grounding_metadata") + assert getattr(response, "vertex_ai_grounding_metadata") is not None diff --git a/tests/test_litellm/llms/vertex_ai/gemini/test_vertex_and_google_ai_studio_gemini.py b/tests/test_litellm/llms/vertex_ai/gemini/test_vertex_and_google_ai_studio_gemini.py index ac099a0168..cb3b51acd6 100644 --- a/tests/test_litellm/llms/vertex_ai/gemini/test_vertex_and_google_ai_studio_gemini.py +++ b/tests/test_litellm/llms/vertex_ai/gemini/test_vertex_and_google_ai_studio_gemini.py @@ -2663,6 +2663,111 @@ def test_vertex_ai_single_tool_type_still_works(): assert tools[0]["code_execution"] == {} +def test_vertex_ai_openai_web_search_tool_transformation(): + """ + Test that OpenAI-style web_search and web_search_preview tools are transformed to googleSearch. + + This fixes the issue where passing OpenAI-style web search tools like: + {"type": "web_search"} or {"type": "web_search_preview"} + would be silently ignored (the request succeeds but grounding is not applied). + + The fix transforms these to Gemini's googleSearch tool. + + Input: + value=[{"type": "web_search"}] + + Expected Output: + tools=[{"googleSearch": {}}] + """ + v = VertexGeminiConfig() + optional_params = {} + + # Test web_search transformation + tools = v._map_function( + value=[{"type": "web_search"}], + optional_params=optional_params + ) + + assert len(tools) == 1, f"Expected 1 Tool object, got {len(tools)}" + assert "googleSearch" in tools[0], f"Expected googleSearch in tool, got {tools[0].keys()}" + assert tools[0]["googleSearch"] == {}, f"Expected empty googleSearch config, got {tools[0]['googleSearch']}" + + +def test_vertex_ai_openai_web_search_preview_tool_transformation(): + """ + Test that OpenAI-style web_search_preview tool is transformed to googleSearch. + + Input: + value=[{"type": "web_search_preview"}] + + Expected Output: + tools=[{"googleSearch": {}}] + """ + v = VertexGeminiConfig() + optional_params = {} + + # Test web_search_preview transformation + tools = v._map_function( + value=[{"type": "web_search_preview"}], + optional_params=optional_params + ) + + assert len(tools) == 1, f"Expected 1 Tool object, got {len(tools)}" + assert "googleSearch" in tools[0], f"Expected googleSearch in tool, got {tools[0].keys()}" + assert tools[0]["googleSearch"] == {}, f"Expected empty googleSearch config, got {tools[0]['googleSearch']}" + + +def test_vertex_ai_openai_web_search_with_function_tools(): + """ + Test that OpenAI-style web_search tool works alongside function tools. + + Input: + value=[ + {"type": "web_search"}, + {"type": "function", "function": {"name": "get_weather", "description": "Get weather"}}, + ] + + Expected Output: + tools=[ + {"googleSearch": {}}, + {"function_declarations": [{"name": "get_weather", "description": "Get weather"}]}, + ] + """ + v = VertexGeminiConfig() + optional_params = {} + + tools = v._map_function( + value=[ + {"type": "web_search"}, + {"type": "function", "function": {"name": "get_weather", "description": "Get weather"}}, + ], + optional_params=optional_params + ) + + # Should have 2 separate Tool objects + assert len(tools) == 2, f"Expected 2 Tool objects, got {len(tools)}" + + # Find each tool type + search_tool = None + func_tool = None + + for tool in tools: + if "googleSearch" in tool: + search_tool = tool + elif "function_declarations" in tool: + func_tool = tool + + # Verify both tools are present + assert search_tool is not None, "googleSearch Tool should be present" + assert func_tool is not None, "function_declarations Tool should be present" + + # Verify googleSearch is empty config + assert search_tool["googleSearch"] == {} + + # Verify function declaration content + assert func_tool["function_declarations"][0]["name"] == "get_weather" + + def test_vertex_ai_multiple_function_declarations_grouped(): """ Test that multiple function declarations are grouped in ONE Tool object. From 5aa8725c630d6b2e5bcb175be1aa6959d06d73dc Mon Sep 17 00:00:00 2001 From: Ishaan Jaffer Date: Mon, 2 Feb 2026 19:48:00 -0800 Subject: [PATCH 16/29] docs Tracing Tools --- docs/my-website/docs/proxy/ui_logs.md | 35 ++++++++++++++++++++++++++ docs/my-website/img/ui_tools.png | Bin 0 -> 430362 bytes 2 files changed, 35 insertions(+) create mode 100644 docs/my-website/img/ui_tools.png diff --git a/docs/my-website/docs/proxy/ui_logs.md b/docs/my-website/docs/proxy/ui_logs.md index b6d3d2ae7c..2e772197b9 100644 --- a/docs/my-website/docs/proxy/ui_logs.md +++ b/docs/my-website/docs/proxy/ui_logs.md @@ -23,6 +23,41 @@ View Spend, Token Usage, Key, Team Name for Each Request to LiteLLM **By default LiteLLM does not track the request and response content.** +## Tracing Tools + +View which tools were provided and called in your completion requests. + + + +**Example:** Make a completion request with tools: + +```bash +curl -X POST 'http://localhost:4000/chat/completions' \ + -H 'Authorization: Bearer sk-1234' \ + -H 'Content-Type: application/json' \ + -d '{ + "model": "gpt-4", + "messages": [{"role": "user", "content": "What is the weather?"}], + "tools": [ + { + "type": "function", + "function": { + "name": "get_weather", + "description": "Get the current weather", + "parameters": { + "type": "object", + "properties": { + "location": {"type": "string"} + } + } + } + } + ] + }' +``` + +Check the Logs page to see all tools provided and which ones were called. + ## Tracking - Request / Response Content in Logs Page If you want to view request and response content on LiteLLM Logs, you can enable it in either place: diff --git a/docs/my-website/img/ui_tools.png b/docs/my-website/img/ui_tools.png new file mode 100644 index 0000000000000000000000000000000000000000..6f4d0f874103804d933a0c405c0bf58361da4177 GIT binary patch literal 430362 zcmbq(2RNM3x-LT0FiLd6h!(w%I?5oT2SIcbEqd>SD1$*n??R#k(OaUoVYCR*d+(xm z?j+g!oOAEl_c{AMcb>n^|F8P3?_FPw&`?u+fJcpohKBY)=_%wn8X9f_8ruD*IQLO+ zaE!*mXlMi~Hga+rN^)`x8ZM5OHg*)o-4R_?yTvt%!^QfBo#Jdo*mzS~YcUkK* zS9526>yqg}S6}F)==qefvEhVf ze}3)h>;J$r z^%U>l3#nI#5YVaDi5Ss2U&>MUAiy*R5hqb-3Ru5CZx>HC&6{S&81(t*$-^ zTQ3h&l~g7tDek8l+tnO|^D@5(KQDbO$&Y7lkEUVBNqekoZkYspEVCLrg|lL)C(s(= z^OYuB1mxS3u4qNLPv!Rt#6&**$ zeeaw_<*v1w?Rf8hy0wy5!%+MbYhxARC3l$uHGAPl(y0x*hu0Yq2e6fR(bIyy_vVKpJu~Bt<-KyM5wcA|XdkCca{l%t}8-4sQY2 z@+y{d2NeHsaY=h~nfb@{hL=u;mxVA`@a03IW}=XL+&E~QId8b=`q3t(XNIRo@yoO& zW!@0IVjzXR=>P~w0By<@F=Cx_0M~?ZI6aEp7euF#(&#JTX!FDjuMjOdI_YkW?B~qb z5@8^skRU^^QcCUjaL7BHM=}c6v9R-UTvNh^a`vk`NpOFF8R#7@y*XKjK;=e9R;RQ% z8ea${q`K>Y6a5T6QMe*_BEwmDk1qp35!eouWnDyHeDWd6$@OdfQ{g8_obOmCZ^O3Y zZ{7W!I0`o-ua@UD=$ z0c7dJOhP+?hKkw=HMd`-KI@GrZVk|FQb~f(ins6=MeV9tPw70+#G~mDgXX1rq^4$y z6_zD*;w7C-9DBnHku+Ic9=ut!g#tbUehpQ~XUNR0OrH#?&zFbtRY!?LOrBwGF)A6U zi9<`RJYle|cpO?pMMh@EESg3@pmtfEF5lbvhar=X_{PQ4b0A8-N#MApD zrpNkDnSHICyhNP$nR5tAFt??dCopQ?QkP@zV5{alq{VJ|bF=`g$8+fTIr1Rut<*1S zKWRWn$alc~+}IR`B$(t9yquW+F#uQ5Jnq%w2fdKTFpSi2P8sC8pHG=99~8+4KnNKT zaaB)QT}T^Zj~N1i`~v|jm9ZMXYWc!G$n7C2|n zzbpVG&?y!K4zSMo8%fIAXb$4fEv}{J!UI{ptuYRlICM6_H1q0Dd{Oy zv1eZ)TP#h?#c`@VgDVU!c>1#3z~uPt9>t#I9`zo2wlp&3NLJ=Z;K%+CB{@4e)f(Iy zU)kvkUuxTa77@xyQ#Dd4%@Nj6*WA}IDJm*TE%GkxDvbC^UZhjFt0kW2VX~X~wf1YK zn69Lb(T8S3|Kv-)lk}}JYr(XK1F=c6eFa`LTbI!lD&^!Zv(?HcdaU~X z`C<8t`FJDt`E>d8{Urk={gM5rX|qBFX;lLP{o`qMsb~5rdJw(-s=~T@3#E!z2A29? z>Llzhx{*^)dbbRUS&9qBe8wcUWw(8{#f1fFOwv<@e+ui`Mbz3&(@v|_QtWDo>we?> z_T(G>X<<`((?meL|2n806zlxn`RDQ%@j`JYT0GhQ1+H_hIcpYUnf56Z4 zk!7%WgV?IruG3dZ8DH6rkX&3Y(p$G$S8|Z9s7dP6bV@bFL!Ry?Y^Vs^tYkhMqb-!W$h=>Qf zjJ8aytRTLGHG*X~<@oz_fBJsYz_-5e)%dllp9Ov6qsjXQyH~A4GwK_4Bm20Br1*i! z0q@2A6`mvT#$DKUZ|0CB`5P=u?1cMnn6I%}FkjrC!{^6G5_~4w!uNQPMdQaA0w5u; ze6k`o1Y=$Jd3Y&1E4Ln=MW96#go8!eNAkD<}bw%6VH!-G0fI}$Qn`-tPt(axz(5hZk` z;`pyDvDp%VhZnEjzH)YP#bamYv#@%0m(a?-o$prgH9zU2ar$dX_tVj;5rX_xHF1ed zsZ8*VG&Lg^dnxxW6FAajU|)UxlcUN$sT0;V)=+3bdrkYJxH{{a4W%&8?k#vh>RhTV zzi*{q6|%~w%h37LxrN8m)1(~{QBBcrF85vHUC!3xj(!{xDpfO!zK<7xTlHrRv)3di zJ^g0sGiWGMrB2Q=&91njwK{Mi_DiwF$Sm(%!MUZiAm{VKZb_#;wx#VrQolnsRK#jC zgEdqp6x`pnj<;4jAdp$-HFtB7aWPHKfd7M{noH0`ud&=$^H*+K*Jzh$R3Mkjlb1%v zSuCr(|QPBrQ?`+VP~vl$gb~gpSb@y?dQv4d|j|1X+^#>m#zKgRLhvEiD&K1 zC%-gj+dh7Gv!-8mRDr{w%xNgyC ze^q@|qk-Om%y3zvni{Vf+Uv=Kb)(Y!Qk`&jqB4-IJ>rX>S3AnJb%KT92}%CaKLgl5}{?Rzv=%+}m2lznM=wBxjG z-MA3&;UX8&l{Bc7smOg{EEXWTaLA+Ur8{U6-8kjVwKx^MT{Qm90mo6IDb@FAwKUj( z-ht<=M{onOaY4oPb(O49 zDffV>Dbi8bgUJM|*`ZHE;Nzt0FDF;s6v8|KmmT}Dr_H_ovpg0&*tdqK&+dMHX)(Ng zy&b#PawfKa5-#$|@nn9i5!xbtBei)GPgEuKUh0Kk<<01!=+04QP-74}yGb|w^~2UT zF1GRLt=Zqua+vS6zPVD^BKvvk^d0as%L5Q}7oy|aBl9+p`@yelseFptSwn2oc|x?3 z94X0%Z>*`&4j!Rpf}B4-*k8SWmidgSy{T<%GyBKUkG2-RpIOJn^@`a+&wpaUrS9-8 zR^Mu}FM+a9=0&81o|2`iD%z9ZrUn`&IyD*=>IofnN}<#I$Fl-D8``};?=jHO!fntn z|4~K_b^rZ)hdO`P`Fp?jJ`4>T^^XK~dgWmJvovl(&b@y=-+zkwh9;vWr=*0sYe8Ks zEF4^|9o_VXBPCHUaGjp&yP~0yGygu(m7YKTg=&AoMqAHKPgO+>>S)hx_R7)Rg4@g9 z>32J55?*4cM|%r5GX^hvI|o-WFG=8^5@M+5->-Rq41bEa*-8TSR5cjn99=9Jgt>XS zd4W=R3=9ksF0U-bo1Qnw~>Fg1F>+0y4X0m**H2d{BGCG+|k`l5(xa=(SQ8@j?==+=0AIK zaQ(-$P!r_&{e_2*o0sQ5+D28C`2AK)!^X?PP9I`pkD?i>4=FxjUXa9}3jgiXe|Gs_ zs_Ok`RenJs{{LF_zkK>XtLnH~xX3x$qdIky`p*UXN9F(e@gEf>cz)0QztG|@q5r%^ zQCbR5g6BV0O$u+KwB87{khC@sb#2rg#b&>M_a37zY=7^lXN*(V;0j}1G&E^6C5Vi+ z7y3>nexs1q1w!#h)Qs|%L;&&or$AZS}94-=kKP#pVLN(`?{+?99{%SI@HlOv#5%s#jA~t3+2}r(z)P*KBe&?cZ!tpu!yu z>sJZpXZrB(x8C}S_+5@&<#9yXxCof7trCQO z!$s=VforF~0u!jXxa6fVA^+a-m4QJEA7{XcX7{Emf=i~O4NS?uqG6`nERRfH8a{-M3=bqd8uLd7PB zKEj+T+j91{#7;$7BZ+q_``=z&>2S=)Y}d`P|_5fK3UR-;vr1$q#>w(G$)W_2`eXK?)Kl=<64Uf4Z4G zAp1Z-!vCA4{;ea38~3Tk7_-q&uHT#j|DEPHBHv(I7{%!{{atq^CR1Rs8HZhE;1|2hMnfvn2>owRs_fdz zB*c%~iEMXVB>ZF2zr!Mb%NYG;6pqTzx_=qv6{gB7A-ho3)1k!D_+$rV1n%(2q-u^n|924t$x+52NpM%vb&vY9SHMHwM3jV;mh|2>RJtF! zSg1U<+>NpDn?k;Pq`v~#^N_=qP_W4zqxp`kW_gf z_>(L*$4jNM|Nlo``j3(G@#Nd+a;pbdnw6!TlK$brjkH$gWW(pz=Lj&j@#T+Xa@(>d zkMVG=oBxseS}+v%XlmEg^ z=ZzNwjt(<3BWmKM6OJu6KLU7sC;K8v)j%Jd>88xCajviC@3_Z|JZG2ozU`|;U!B&q z7?o6XQ!kHy=W`ey5Sce@{1wWxQ{(iN?;14#eY>WUv8JPM8@W-Dt4Ri5k{=Z$7Wr@i zwq~6=9^kG@UF~S?RF9}Fhv?WBG4Q&s^*5h=MM$jib-}3wo}3o8Y<>uT^lT($eDW>S zWk++8t8V7`^_FhSv!O5@U85R3i$tBsi}mc57bn$MpNqddsi$8&N+^){r00L~Gm2GW z5x3^F;Jf76jFzG6fKb$HEbmB!)M*71 z*Bt_UTTy>|xgBNT*i@ruSJ4$&Ah~O^IVnDF=&JJwA$-_?K4=;1JF^_wu%0#jzRJE= zysLupqGy(D;#fp&RjSdrd{^Xo<~X{~;@Nb^DTQqEh#ttMAJsXou9ZKEy}R~h$< z?>9<)bG-SX%)@m$=ewVUGv^3#bDwcWJRI^{6Y%$Vd57XcV~K73p|p1B7M0O*DnEp!UP>8`XJ# z#r`Ye--x9B_IuCzjeO;Prp&&h-P+w|yZ$P{CBZQw(G`G6SAt%0PDy&-=nD;n!1iGq zLQ6~*o`8d>Z#E^bGqo{Ld}vuQZtVLB>JmL9x}KpVd0S5pXA`w8t$9(F3Q>LRlUrBx z#Qbnwqb3F|_$u=%8%G9wIUE~Cj-yRyMK+zkRfE!Y$aDi;wi!r9icM~|f^hyLrGEej9lK9ae zA&%WLkX+-}S5=K^q2N&6Cn_qd?>1`ey_#qfnLkYO!oKQlYnJbxzTZi)iE8+qGlDLP zDDb?aDvt{4tAdMs)F7xLuJG|O@ZN*8OM4IFe$WfmL~Cb~gn>b0ftiXM!S5Aenm9+O8k#phE) zh+#R6u&t(jf5*u3)iWy}Rr-r}Pg7xKNk$%%7>i?`%|~=5jpwub0pqOCq7Y?Ep)gGJ zEUKke^?<|pEJL=WlB#yw@|Mz}JgJ&7w^w898tpl?XJ1ck^jY8CTZvN7fT$ z6-gPhx9TOys-l_7?8Uap-PeVN%1O&~9fdKPu7iAEI@AWD>x|ks3ku6PO3G#T-BQ;Q z3&W#$n!R>y+K_u`=hJ32Vp=ukL^X0l?_Vj&sZlL;UViiK-ysy zVpo@JtQ{)en|WaiubO|g<8!3HEKqI03!5Dp7m5_~^S9VGqA%FK+-+=px2lzWsaIZKOnNNUOLlbMHgCz(|PEXNd&)Jm)!SmI{wY5OQnwfw$EC2EO-}e-68ye)a5UEg~!C zii!FJ`gD(Wa~$WzZgWqfO**TLzCrMm$-mI>kSHbk#h`-0-+i+?1Wm0|cTWbUNbUG(uYrUflc9MzyL{77O6#`L@zP5i^n*?bG= zWK>Jb1toAf2qlj-rW2ANk3^T@0(iM8l#aAb)#01y<9g8O=EEe)Fu52Z!ahg;Z3Cr^ z`$QQ55HatO^tsWf{7$mxYd!6np;f7_Ct+UJv68177Q}R2_$5y7e}KQ#FGZ5sV_At4 zo7G!_dh`h$sa7xUQQzH?CO<0joh3**6KI+w_Q+F1^fJhbV#nY}nNW z$b#n-YwUN>RaCaX5GoWLP9V)y1%?AdO zym6uj=9?MHB*@H5OSDdi!-eP!T*iZiy`Th(QfsLg%2SbV!cJXys*b~8dAm2Q?w0-Q z4Q+hhEKZIst6YvsLy0oM{81oy-3&@N<5i%Y>||AWDF+N z+${f;^zt)98p%yxl-G}L{X4*fq5DrAb|vtN=)or*|02-UPSuEj!-r7vt!QZZsmFfP zS-x|!C&i8&{pI(Nrv@-*0GZhgJ&to@1&Uzx+iQ6!&N;%D1`79T!#DoUG3ZJfR9RQ% zziW#%l9tZLB@Pr8;7N%ze}e23<`>EjG!~d6aVA}s+;6={q_XXPOBZmy*kr{wgr9{4 zr=cZ{+O>I^B?jZR+`sp6nd}p!!<%fxUARa}~|zD3M$=#EFLlf#>`iXWd3r zZ7yXF6^4`jX6?tQw03-c%~)N>KTvPQM|!EH987LsZkMT#XuL;QC4p}BCN(*k*=Vrj ze=`0H!_^yQL#{Tk{lfx=&@*HwP1b-Xb#;7>)cYruu%-mC3O0!2xE$!xK`N6!cdU2(~GKPAJTr7vhA&Tueax zg+jgy%6p%IpodSoM7rf{ndv4NN5v9O5g;bI=O4m|gNr0sBm>?P->-C$3QVbBHjV}y1Hau~hT*AI%2GO)@a8i8e$JcXlhqNhwQORsHaA^4CwaQ_V zx=T|FHYcaIiSVP>gjq2Lb3;r;p(UpMyiw!*inW#ekUW&6ZsJVc6IEuwT+6b8a|@uD zzajvyt+Mj%;Z41gemC>wX9|O8S&cC1SWhbWx>)<=mz}b}8(W{-$#0LxJ%g~wH^dET zv9FuDt^hYMZ^n#qH174Oj!4BL{GchJPKbqjZ2VblBZ;v&6RoC60%=KYj*44K)Wf!&n8 z#=IU3&xL8^O)9@maT2=$gR4YiEht-D`O1qan(?}}5w@weF2oXe?y=Rw^-w9m>r|#40 zf-V}nY?3CDrYVMrW2mYOL-;Ro)w}`+8`z1Ks|_HG0tMWf88G38(=k=Uv=w9bfyfkT zL@xh>4n{m=$!+B)I*PU&QA_ry1@_2*#;17U$?}3nG5+F&)1rZaSrA;HY=a7IdT}O6Xk_-r84F~7Q}vD z#t`CTO?x&2OPmLQ-HT?0`2u6orHN)peEUU=JYQlWy8*DggKDs*Yjc0v_9`Wh4t)ua zqvTyDmn!WAL|EWJDf4u(lQownuCg&D{&Zze=&-~-p~#g0naUTyD+MHM&3)I2k1R}Y zropOgaPFO$a{ipu5yPdKu_DjYay7djsVY4Aald@V_PEF^lgi4=!_PA!|j-zf3y-t0G<7+Jiw+D!$Aj^?Qx13NH3c_gAwL9)NfLy(=<|Y_QFGjj8nZ;epsuuZZsYArP!x}D3O!yvwCnznOm6d*erUW?=fi+RWtUI z!=8zn$v?b;e3-0V8rXPoR3}D7aUr+UE3}R+d|lp}rTikslPfD(N1gj$0)iNbPdE=5mQ)9OW2X%r2k{p3{d-LS?0cEBP7#ufzVJRaz9C z)F?5zaPG%H^l@6r-}<<|vc192ALD$pm=>V>suMxyn-kDjAwhr5#Gc1K#BqH6jSB>3 zgt=4#^bgTlF=EsNXfq*ZZQdaQ!7!6%W8?#p1m}`*lttOA6hWG1vjO-HXzGXagXWxE z7C2icck{lUTbotfz@%Uw<(fblPH2~#q^Ym%PJZgDha+*3jYo;HijTZsMSi!mulkg| zhG!O(9gJI$8;keWHIvN|^wWA@O?-FMRT{`rWrLh@>cK_AFv6^R^8+3~52uQY=X{Nu zOBi(+Oo~*r>{xue{5^yjGVO&jyY+dy*a*RWR^Z&V#nENs4tDt!LV?_HfEi&Q%J3jr z{N9}knFW#EXzPL23+b_0!g$|#q_j=v3)0rM7#KmKI~pQVd4o@cF{m#qC?ZmGVtt&G z+PXt{Y3G6U6-~(cJCKP04~r?D9KFtv$x%iMo>@HKs?-5-as8KLK7ot~(A$A}1c1<| zW3xx-L;>=on==3QRmrdQ%^~q|sZLoK4KZY)v6C?xI(#M<)8!v>G?m|WG7|GVJX*g2 z${WCdlQYD0YbqgKZmIB55JIF!M&l(zMQlijimy#`;m!e?dBaF*B5aIzrJ&b2E&B6& zy9xSK9(EDq?f6K)1l}(KTECp{+G4K=+Ty5&sG@RytOc}2*lV@x&(7Gwbqy&xwcu29 zjX9i=3KK+TeCFU&tDO)2mbX)S#OH@;@`<0IrjFDcqA}hHEH7ub zgryAEhg1*fm&BiCozo(Bllzv9!j`A}LwfEnR#BaS!H;#k&2Azj{hJ%`TSJ{RqnUDr`L-x!Gv|{v^e6 zbrS(O>t2CIq!-Wn?8D{E;EK>@@@Ol8?9fK(s57B}>!5}AXH|jiW$wb@v+ndwAO6Q{@x+!l?_NyI@hpj#0O-?(UXU~3$>Cj09 zK-Ck%yP|`_9$VY!yW!0hCR1lWS{abZK<>z>qIQJl>&9}}jq^(ew+fT;<>N~B_S_tT zf;fud6_7zX;6=(pTU7go70y_HThz#az^gkp3|W;*R9t|i0xm!G8i|tFsK^1dy$x6x zciJAhL3TzEp%BE@P7ud9ObzG)WVRA4;+oSsR-=a#uhCU#YJ^d?(RXa+IHsnAZ-{_c z{5$b3Luc<`M5+KjyTJ8&KJ#=6hRdsvO3{Lr{l0+9FFl|+WzaTY(iAkZrJ&zx)<+-K ziiKS&a#@9o>%3u%vRG|g$+Q@y+7@^BRcTKla{^576C<+1h!a-#u=2%gdLjaLB6jn3 z4WmG_h8e-}g(?AQMpH3t2|b#Ypc*QZCBB{x8Mwv(9L5g%%!Lu%GG2@#us;=ocWQ97 zl6(^0$i{mN)URDH8JHmHQZm*E(+duWC64P7ALu5g67nH=sR~E=%5(Hs-J=K%>kV z>r3qr;A1j9<`IF@*_k*h4}P^}1Xf^-0lHAHb(OGp+#KzbzM7_7ja1RIm?;RH{PqCr z`UvR(18N^G%KGl!mRI5^coCkvmfP1JpWR!gZQp-V{Dgj<2eoTpazMaB&=R&N2hcMa zDumpzo#r#MZt)07Rw`Yuf-bL9mr{EJq}$yT9`fss@|V=aVwkBYQTI#IcYOJbYW&V| zWv!SND+hb6;>2KThOfzz^pjyuFqj>r2MS-1YWK1#U+06SH>p1-x@Z((q!x&qbojQL z1aa8u6VAFf3@hn73b&2mrPQR|kDC#nQLaXhquKpxA4tVMEU`G@h%)eztACf5n zrg~d=hl&oU?;{&Lrzi6HWvGVyvW6g7Yjh!2)Mtg0C>K&H=JCf1i4Jkldi#0MFZ{KP zJbAM`sem_~M8VhIhnx$>f|`b@Iq+qM??$M-a)c5+9_7;zv{a<5HkKSzLY=0-eYc8(FL;s-T%iH;6cT%VF7`gie zN;HHhpe{!r9j!6#o)>YLb!ZE-q#ekL(R+6v$-i4-0;gK{(i0)_RAVFZ`toU_gDd&h zMTdXEf~^$NBVJ02J3UW_4%JrKjm%Gi@r)YLfT!+X+^hLz^fQ2oH-P>{h`e7=%IAJ! zx>(J`?udwqC>Yf>-<&=Kmv)Zaf-|xRfYsSU!DpTo+b9UnAqdZjU2FI5w6#-#UM)N$ z`(_Q3_Y3&K!)LtoMp%H)MB@J7(#%oNQz%T2H{<&;G3V(+daS-!t{K)_VCO zRq5?FbM=Worc`of1(M28o$%9rr0_j5G=Hs?E6Ja-DU?DxW)x&V-F$lOeaCY0#y^~oM2l(XDGb|&e_zO~h5hB}tjO*$vaA>I6Hx43ErasL`E zm_A9bQwR9c$Y=9Y1n!cpqp`+)j=Q}3-C=z^EfNpco96MqP;H+Zwx?L^SHN-rv&k=IxY73~hTfIn@owuj_1ED^RG zI+(Kr1D_Ap z$kHxh0;YS20m*1lC0Hj{liUAwtXX7kbS!xpj61vJk+EclXtNmZ{cZHJPKBx3tcFI} z*)rvr1=60ZkumK)2&Xou>m(wN>u@Z4$y!N8sFNFu$^>x#B;S<7EVdD`P=gAvobA#u z@zgv-2~GBVZ#mjmVX*sAyBtxxq36T-dq?ZZPrQ#!N}|{|ozM_|;HIK^u(9W|1`8V# z5*tIcs=_4CkhxbrI=<$cjt7soo1ap~sf>O(4HpL}=v$MZ32kuL+ z=wozbuE$d{up8@|)f~wvQE6kUX=`C(aodC&K70PH7Dm1+)X)LvE_%d z6Vpze2Qz)!&-Dc5b9KK|4T?z$&fqudCh8lY63qOIN=h62x}jOb5+Y5MxXuldZ~a4f zw|=2qnTy7q$Qs3vhJOA&6@YBo1pI0m-^XBhlI!YB(0|HEBAENq5mrHk;LD|l;y8*dxTDEc)}m1XY*X~PhLwJ+0oPW!;*`? zUR&;9{(VXja?ZS--V9^NXJETNsX%xwh2dg~!bfs0v3*pSMl_Bzmoek9C8(s|4C>9f zET{|0JO9}nyQMRxU=nL`w!VI(kHC#iL1R^`rhE{??#cNXO)Zd~4|f=s_~Cth144T& z3s73)Tioy=l=FHzN>=7d^=Ze~SOUebF_X9MSQeuZOsQ-ZAZQ-}HmSKtMxyyG>LeS^eTQGbF(QzNi_ASoCnh$} ztrgyxXm{Q$CjS&t-9oM+NuD>N$zo+}hqCQ{Ei01MT`v0^M4}u!(X#=824@IsAe*@l zFR(v_k1HkC7VHh1!^%3LnN>a&UqlC;;@zL|}@&Ww#r?E?3Dpuh*Ls7kr zt=z%`>Z1L%hM4k){*MLdvEuCK0I>k?*zMQdSNDf9g%w8mZ+Y)BdVX&1_tp|4bJ?Pr zTm2t#De$AB+PR5qoXzovjVDl(cqxaIY_}guO+CIWpp#|iNg_$Rz$AA}3s@CE|KO2y zrx_1~+TG;PzPM^I7R33CFPNWR^Jiz9=64H}85O%M5avk{VhRf*uJfrXv_h#M8c`m< zn(uM!VRtG@^i_EI6~}v`Nu>im!0GXRHMG$zGeLD6Xjbif`gx<(}dK9gzAbe z3)`}29m=qISz{wwI7s_V=IWTv^aaW!zpl;Cw!dk9N%7ya5rcYv=aRf49Y6RRG^Hly zZPUrilwJIX7+G`rBSz9Jr#~k($7}-Gmam;(`&h-S600H!uqV1{95ZsCoWqzX2GZ0x z6uwmY+u4kiErJ%K0y!0ID=Srs+uejLRk17#nev@0it?`A%wDi6)3?1nT+eV-o7%}7 zma0seud|bkByl3+&y1x40%#ZFYO=p@sbNuPCN>nYmIk!g^?fKsF^RxUZp1w&?M1;l zn@zt_x~b@Uacqo~gigR`1eK^v1Ca_lAX}AKL~A%h^rl{f-J7GKbkP&0JC++slx%OZT`JVO{Qc9mp<0x2LrpO0 zc(!LCz6jG-aac_n43R}H!KIptDEA|acsNQO$sfM?9xnCjr$xcNm=W@+>eq4Tntdhe zXHPO}mb%DSrq2yn*rIOOL^2D@TK0T)rrrMtm&buzevh94?*qwO7u8lC(*9HtvGf1> zOk->%;1|Y&DJu-Kv4IrwsG^@JLDL_5g^Fa_XIu9oub82rWg-PZ;eETaRlW7B+8*n; zhFFEov!ixPo=TL##`F5<3aD``%ZUkxc`OMz{L*-5Ec-WeY&@p z77`*U@5g{VBZ0G&YYL-a7 zw32MzG!B!y3dhBohSt_Cen%yMi8~p;{04{tNOp!iwmZ^7XH;qBvkLp(r|xcf(Xh%J zT&br{W(N2W%0_^aGO~<3$Q4?D!7$KGCT@I*y(T5fV5{=i1G41Zu*^LkQfy+%6zCQK zlBWR}PvuV!h)2GnoC86y8X-J$7xPFIRxUGR9fIG)_)Z#-VZ2NzVq=3gu236P%WN&A z{TSlPrNv;4g1um2gMtHjn7S?O4xrSzVNIt~9P)aLV*Cof(>!-xzOHZ-p)x>z!CFeA zXgTj{f*#VMK-=x=it^^}<34K2DH*r{6v#rpx8E!c;CuF-Em48@e1j_H1If1Iyt%2h zUv1~v`N&Z1E0sUi72hYT!O@UP*>Y z%rlL(-|3EEzTs$!{R{u)D-GH{|4FfJSY>^ZF-(_*`}kzmW7=K`?&z(Vq8hNX-taU6 zm3P4DF=bP5Y;5Ju__4-XDTyLkf~L{wu~bz_V{Ewy+tgSgmW3u+v{P?vXyYBD1m7vn zD}dX@!RX-IRR)<b8ACvTSxqz9O~uwX~1fqLy*4_?n&&-;`^feA3qM2$U$J z9Ovy+;Cse2Y}cU3J13`N4MzDn&T#$Fh&h&;S)~plnxtC4VU@T9^8@jYIw&x!Ag)4Y z&aZd!?qF{aRxFoBeuSDKd{o4vE`40O45r;I1{#+3lJh+ncTn9k(K#hBrTfu zL zyk?SOJu>z=ITpp5U-U2nwh$^u689kH^moRvw9~3RrA#UXr6z@z?b3qaG9~Re!En5& z`_kwOoNlM2=>{g)q5B0J56bzaMHyFva8+Iz8%tULWCL|RAYD|`G zEGl4PQ$mdihQm5g4r61D(AEI~n3nsZ>Eq|YRD>oO=PKe6&RK?v8E^C^y@5+@aTL)- z(S;*$o455+memgswW-;)_7k^z1?5Q9Y|1VXRFua%?Y?bA7deO19^>~MaEdp|nQo;f zb+J+%afnmo1WUWH9g>XP=%wvF2GfRvNK%)EbA{zA)ZuodSDkDq;YlB&U|BBhW_?C? zF)T9|n!|Z2HyFoGt2zV2NxT}l7NzGokhS)#k5-Me-rex33=`IWNLD^k6!fd7NswVI#EvScpbsVlcs_ z+2m#c8@wTJ0rjPWUW*>~Fpc;>f01Ps8PUc5mNJ7cm|fC4o3a~FOY7W8++;+&Rnl^M z+2q#9lMeCQ(OG%{IQ-RY7R(~NnosZk?YI{n1?ul#=q?;n~_447O9(xN68eNe|Oyu!eq@_*VO2a1#aw9p2?84 ze|k`LOYHw{NTw0Wr$GE^k|sM8kndb-Uy^Ev!Zq(u*Y8}Hvt>fk$pa|SVbcL&%=g%X zBu_QCl`xcI>1$o%DwqGd(%oD1eU$^Tqia(i&AGtq2}ou~d0zH+6TrUKIx4lj@Uzvm zX-KVr2NU^GFn@aU2r!S>JKB?DP>JPVMBA5DP%%8`X0g}le1fR~jhqIEMm{wIXm z!!W4>2MOzJ*M3eO1ov_BJLK@8Wt)qOBBe%T$P>5Q1nadbdIsa0f2472tSH-EIl}jM z)%LM!!bO5S$Tr$=!%4Jo<^ryE{fXbX#Id`W4i? zIlo}3)DsOf0uYB&3T$~<6GXjCB!HX8r(CpoENB+KZtayk-6wpATP9I?l2rW!l0$Rw zvYw$j9EaM_1nl8Fw8&uL_sc)jH^#TUA78rX$lrIO;?vGch$axROeOu8Jf`oU(OX78 z{VGT-f`9W$()(Dm-&L8a>K3&FAy~v%mShBSPlnH&{f=lWeZzJGka8R*o>XN5SI)Gw z+Y%ht&eu)K4Qy;oM0wf2W=^l($G#a-w2Oc;Skxox9h@^PX~wDKtZ|8ov#q2s_(Pf` zz7bnY)>c}{d@fvVq3nvWs+0^2Fa2Nay=7R`ZM*+#fPyG6bR&(_&>hlBBhn=xCEX25 zHzM5#O4rbh(vl(_(jnbB#J)z?{p{yn>t6q3?Y-aZ7wZiNhjI+V{H{3T`~93mx9<*f zcr4Ym;RFY>EeXv@DM^TATl=)w>$t`fre2NIp(tX)-IvI6(J%6Se0t@h!h$EVD78pc zyG*ylEDi8-WnSxdN_U#=*v&;vbXH97h!?g&uWI%2C`!!Tva~4Pb7p7QN30KC^GU%m z#nnQj>#<@ft}DpzX$WXiS}zNezXp-z)}X`P=qI~M!TyGoKdZgWm56(*5A`Ibdvds5 zi{$hh^V@eyb~0PO1XX!E_mk7$GG7_98C0nZdf*~@oGZ?dmnn6)pQ}*X-^~^GEOL2Kqg0XhXW;SU1kR)TfcI}DH za7%I~=tiC5EYYp?H$0yPoBQisB)DeBAR4NFlryYEcW7(hsA$LV+Z!9{ z$qiR0O7ka}t{ME5$+bm$fe7(9$Ci_5nP5Ecb2Diiku!E)8Z$Zt=L*on zm^Ls&fB1v;;)|Q)$m55%9~t_ku4Hw!+e;8r9^8w>sW9LRmjUTBIu2Vw0|I$reQFAJ^*+;To$%BGZDNRF%ihsTQ(U0*XeE(nwx`kt&I z8^=mBeYsLKKC&Z8!4sv$|ArcrA_=9!BJ=Eh*i~3%Is#H7rK7H{{BR{SwlA+y!10lq zK3>x`w)E1T_eoP`c(ar~l%o>^`Z`363QC`iK9I3rTW~{}`USSpk-@v&l-Td8)euOi zT~H#a@ZPj5OK}+APR>YANvgj8>aB(;LWWIRQ|Dtll~M~XPG0Uv%d8^I{!cyj!!WhD zK`W{ag26?n$t7KXtc!H-v&6)e_kCi%xdm>S_ow&(e)HCqx& zPBp?0Qn}gOCcPU6znfxazSP9`E%(@|ql;iZxnvd)R(|MaQ&?UCw8YrA)9_&*)LrU# z`N5+ker2)AkAZ=xX z(l2$P;Gs_V&+cC$#M|kvA6$xu6-AoV{kt_Jc(c7NW8}Hl!+NFyK*D}Dc-PtTfUT3# z`{8TI$XU3o52q+8Nuo8*J~{jaJ|!>tqwy?1p%+V3l-4C|D{j)u=OYqIQbO{RFpREG z&}lxYS;3g#dlAZ=!cm}3?wOTn*FQ1PfMfakp9K9S2zS#sW47}j$1pWw?fYdvC;elI z(MDKeDh|u6RAu$M93im_uj%e!-bo{ig{o^*9a$UYl!vft_#F1_T#g;up zsn1dFH;M;)@$ryg%dPvjwWi?5c9?TR1Tf9p6?H?z@uIPnU$f?P`I#o|GkWAS`(^O> zd+@sTAU$Za&1;)Nd)t%sWBzHydZ-!4%cvQ ziX3ziE&N<#?$^NTvqr3efr6L zoA&n-+51w|JULEnm`Th2kLA1KMaO;ZQl4})zK?*V3Aa~tPLU%USHi%)Qz2Al7K7NJ z@F2WE?K4yDP1c5bjBp?&{$wf@?%3%(HTW{IE>Eo5Cx+(q?rBK~j-`Hjzzkg_Phjh*+tyShV*)~q`~^#FSI4ynCiWm zmB|Q-%*FfA@Y{kGZhBLd-x@7+fwL!HXHvwQa~?SsWyE!GA<3xg)rDb}+fY=KGEWyh zHao@JEc5|^)4Esw4q1P(0D8tH;dMEDRExxmg0td_aO{;){!%JQDrepC#Uf z@Ml@%SQTnr@aL3g_6_i{oPS8uPg(LeA;P=qJ<%A;wOizHq6#ddShL+*u_9f=M8DO% zCq2Oh)c=#fv;#r6BZ-%w%#3g%wUNLv(4XpwRp1ut&m;Pk>)+0|mBwP+^@>53L`a7& zRmExW^P`~hYR9-Jl`wi_-T*$u)F|EpY4eeY;m~~Pd=a|lZqiZ(pVP%BQxSePN;j*? z_5-|gmi7HJ`wng>cy_C7X^_a)@;vftXcq+o@~K`DguszcQ4+i;q^gemSHsNo%rHrVIr*YixyX0~3iF78vQBcUcv|@p^FW+O z;`O`7g+<^Om_!%;x{nfuNyO?MyS+OtPTuMk8SJ~J^>aUpzZMEaXZVro&WdMC@^MZ% z^5Us}?@=JEtx@znqzMim2Omo;OdXcAYP`J_C@i2Ubt4(x#euAbqL_U2xn%lVQ@}hj zgy|H2c=v~trpPSJRcLT1cKFl{&9s`A*z#tVr*u`j+#< z3&T+!Qi2X5ab-sJAM^O1m;bL{ezMQb|74ovpaH=9C2CrM?@uYs7RNUhQQ0A2m?hAdHU?|bxDw*tvd;I?OTG|ud6VN z`#*RY|H!@gvWx&y9B6Dl`*VScV}i|s*>K|gSI-OmPtQyFcS83*v#;BnkLew@q9BZS z`Mvm$9Vl>igo4Z7YoefXjsWs%BM(U~_;0i^6dWi5=|5&O|yZ`_Wb5w)jt z{Y@V8KU~)TQi`&kgIhbrbCo~qk4W?`;?^$f_0N*u=tfxN`)?bOt?Q(74g9X5V#N~j zF$dA?h3Q{r)n05A4(}9})W6wpTobbS^NyZsIIbp{;-U1GZC6j1B-%8ecjg7Wk-i)+*gdXk4c0P)R?C)zf06{2qU6m~swyG4qp0)wGLUcN{XNt7W#K|Bwj(-+u#Z z0HTx?z!IO#fcQBFO3*f};yeATkoC8w`|tPr4`t)O`%C{-FRP~pM$-gG)tWz_g~jja zUHPw7`tQ*@Ixr-r{=dc$WO5d$WRI7HI}08%1SX@OSB5@SU{N(5Dzdn-p{q zBGjCF@01%;|B9EWe+THwHHgC6@7(2o5Ihnn-Z^vLTc7dRZR$XHjTZrHDR~}Bq}mIK z?oVXPcD-C8*JlFRYljipVWL=Tx$@A}jk}}#O-4ZR6`-6b7NS8L%Z$zW9wFoxkDvt# z&wsx$?BB6??*EtI<<%w1{J5xuGpGvUpfQy_g?$%8!#x}jurZ~CM)Ckm)M7Jyhmp*6 z{+(e6P5iS(_K+T_aUMtcLtqZ?bx5+V19@HzW5FS!&;8C^>Med%_1It0F!VQoqV6|< z;(rLY_{f%UF6B^OUS5m_t{gI4^7Z^535I5*6BJ8q+YVO>L zzdnn9hjEDemS>$Uk>4bWNfL{TNs63*Q>^|JUlIM~cwAq9&!Dc4Ok^`bqnEixXL9vP z!r+xFz!%^l$S`wm(273x4$3el_LTwCR3bT%3&4;`KD!1asdcVxz!r1guk8{lNf_&~ zMLG*u{OL0Hb2{l-riH5k7%qkr^x{qGe#kK59`mq5b0J1nP;$Y418qgh^B= z?S|!fKCd$s!Bnn@(1}vE1pf)S_s)*`RdXt+wdc+^;OC^Jrgb`|02+o1Y{D??b3Qi> zy@fZIqx^l2m`qF7>~$qE@N{f(ozQe=N?7$vuB+=ct9)!qhQiI?@`C= zB5{y|7ROCW&+`qsDP%mOsa~dmx;@`VAe2lL>yALlN`=H@3)XSkeA;9=9VLA6%MiHw z2dt@LFb+`o8qXpzju9Xj+0zhWGQe9{1WCJm7GsOmcGWlwo}Q~g#^^c!(vRYrS*^<* zmloNzV}QGAe)_9!xyW{>a!qs4U2Rw0){n^H`h1P9x&;v1$|ZfkW>xgK{p3yuNX8lV zC5}4C^)L4<#M&tl^+v71I|WJS1?o)&X8?OP%Xl?4-dxRlx!2}l&bwRIhTg=lx${}1rt>S&VqRb4ii=_0Fn^~)Oy7>r=UGnn&@+V4nOepb-8mP zXf#ZIy%)6X_{vhtAOM#LEx)eCrgkClh~y*lCp$yi8-$#}ya(H7tM(cYvN)>zsvjSC zObw^UUl0v`L@?=KuI9=5OAaFXz}wRSxC!b-b*sr8L>5KSoilb2dY?t?4Ei(Tu>rxu zzD2h|kJ+*Y3z5I4@Zc!ArH?)rckuJpusp(_Uvd2K+|zWfc+XA2w|q50eB60AMD9E6zE3f^&(T5We34N;Je^Z3$R8b1V#(WnY^~qmFnBRT7UU7US^)Y>$L4-TS0V)^5kSAbT;JB1%|4G@5}(c9mPP zuu&Pcr+UsCzF6MNV$mM>%&*Sk%bEM$*ZcSgb*i}+0-B>Tr*HcenJzY|2yWW?PP`M; zixMsjy2%nH9Q|r*OZGpr`cm2KpL6tVE=3t_BHYCL`HEgWAI!g9b$RiIKO#!$*&s0y zq%SPA64oEFsT`8>8gk4(1ZGl(h##TB7l6Fwg7sk~vSle!AP3f)L;o#~B5LqqZicrz z47{~C+~?;2r{M_$SS;h-z2C$3<4ge;&4#3(} zOw(~3I+c3p?gJ!~<1g`Mz;SwV7V}>!gXeZ6gpS6**6jH7z=45V3i(DvU#i*v?N4U3Qrz-)< zWJ{hU53&A!s5*{u^f${juqG@PC!}Hz`)#}{UNKDOa6hYL!$mSi04c-3mT_s#2e`Pi zgYe*ZzY9i)s{-FjEY3Gmv6W$ZqZy#f$*!KU@5NCy$6QTl+A{7yrAuY~IPvWDi8-T?u;dv6bS)< z(?yQ<4kPO-YM3Rh=wzZkJ=fojd9=}Q&+RZ{+5FmM7>hYWq@f}>6*8DGE#Go`DPwI% z`QGlMHCd&xL8JN{oR60EdYWkoh_p=(`%YtR)jum!LzTGGAwAUe9-pMChyb4I+W2P! zFF;L&BA|v%M~;aH><@_Sw!G)>lG9_JPLwtzriZ>?oy|$f42MeET93m(Bbns;<(olb zh}`Ucq|1@yf}z%TAjlraPf^>HM`BAoBc9z0MBonWf_2A|k0pdIF-h&sI* zjVMshEwN+fu=XvF^4cPf z;imxkyl7?Pq3wK{nz{AvKG`#sI&`dht$=VN^7C$KrpcNaqbQ+Jz)IQlax)GA9_IY` z`;ugb$6go183PX z{mPpp%MAOYWh#=f=Q!8tj6?2j>9)Yux*M*PhgyBkv8w{EDB&FP-W6zBr6&nbj|((h zzt|c)z2jh5X%F1uaNieys&__Gh+1ay=s(9o?5I6OyK(_E3aY7vCc~mi)c~?}BCq+} zAA_XA&$1r1=Va0}V^LQB;>Daf$JM-r-eK|`(VuhICpC+p^ZPtH{p^mhl7D&X<6EMX z$NkSudi}n5O3s%Cz!x3n%;nu^Vy+r_Va}kMp>FC09!eq+7mqRJS~_;@ z6}U~G0Nz}KFz1mv5`i2=*O86g8*UA%SE(i345EZHB|w?`LQd{Rx?R9VV5>~rZvNf< zi=ssUnljgSWN-fE2~J~m%<~Us!E(i}VC$Wpd<%)E-Mn7s%6g5wfT^5Yuw|hS*P1gK zI1LiHG*C>Osew@|oA&f7>t;+K<(LW2zrAbdEVEW3U;T>K;rm4FB#nIB%xl5!QMS-V z_-;#!>rj~9$he|c6QAfLAQY-#j*bxPgyeKP#OBjA?V&;hhA$C!oOi+^xKACv#x~7j zI#3B~8%1zE$O$%{+BzH*Y2n?j9R6{IPZhi0cr`ibJyz&z1c`Pkt{RgWJVfw7z1BMG zu=?4Oe+CKPycb7*KCDei(ga{;mpP8!2sMwsUIHroz;(iC?=$dk$|`X)iEjTLgE5={ zwkj}j@Bc*QP<*vn+TslZk-_QHeZE!D*LefILhwvAKpNq`F3KoD58^}2&zC3M<0IqU zYYyHo@tE~CYnzyatj8S-P|_D!D>}LGWb@RULfq?>B(MB7pF9dA?(w^A&qHG%YqW5z2*zqE+=n-vKq`4mTaV|- zCw)Q8M2R7QdnN+H$ap61S=S}uAO=VlLc}ratTr$8a~8yS37p$2K*6L^)O@k=EvXkr z*TgBy(G!7)WobTJJVGOoz`IP|0ZW(S&@4R&Q>mYDj9(>J&)~nUtd27VpSDAc61%^cGsIT zp@#u4w{|Bx!|4w}wkNAn9Iu*y9V=-qSLF;o@{v(Eyx`Mw z3Y7STyWn-0TunTTWMpq1(hy+{s&b@@D@$;0z`G*3HfU7fKjs?Q()J?-c79d3Z-(0h zznh3UjRH#;8sY#hX!p3-qLDgbyYW=lZwdKS^u$2w(`De5xc_*}U_EE4YTL9|bXal~ z;WP`_JN_ z08##oY=!Tu9%&{x;C!)ui~{1i&t58O2P`*Pd%|0D7z9vAl)E_R>3~b~u&Go14!Dzj zH>2pxd|EFZSj1uBYPL{j_!3 z6w4QTLg>}-ordwq2WifU$Aj(Co_NbPB$Tm}Ym8G9M-@qF__8H@J_O_5BjYXoT=Eg_ zNBT*-3(PidvR_Y8<*jB))?Y$m&v%ht%}U^`cDz2CS=@I-K7*5g`@U5YB+USHI%T$>1{*t%>$>2g_$5zeqUiF5128eh zi7-;fMTit2oSWa0|5bf;GEHZ9-#DaJoH`wm**EE8faCl~G}@f7X(2JUQB&cm{crXv z>ovYoY!KQ|{$drZ-jWXx>{8QFS}?~}!W}3!lpPP$CB=G1#mT(FP*hZ_5g2gb_kuO+ zyevhi8ZU^g<}ZWsUQ4xny3xp}ycF#%$M~TNAEImGeRTU4axwLPd&|}3os`st@n*YAhwC2gW9PNB28sUu(MxC=IB=rY3z-P-^Z66 z2q;Q!a2<*Ub2s%eY6nwhk8-H3t34^t&)16qro*a>R)7}xj_>N<-^?Z`t@HMtSwORd zi%myLe-c89ZSm zlPEkRR8$VpEG}{hw?oBrc68y(Z1)eUJ&np}SFSb9=S*z`~r!zUXvcHd7#*eK=3cUR+VMs+P{_PViC-cw?F%N;f= zF(U3}b8=;`ekX%_oO4_uqpKdtIQrSC`OSHH_UO6~R*aCnF6iPm`)r{6`4!A4dy8XZ ze|1Dp{vg}%eA+j68(iqYSq~eg-}!6*~ddRmgrl&n~aZhcEGnbgGlai zkoyw~wW0=w48Z?A6z_|!Km^bs-|VLi(_Jb(L^YXs=p*P`bL0UH7E?XVVSw-RXsTT& z;gc6Kn(sjDyl{)gUYgKl?j%*kfk0G~H0XK@FZR*&+HHG=i`=YXH+Aw{OGqjAgpUTG%V1*+S|QW3%hNZ}_EOGYP;=aS@4toGlN?y>Fx_|o~GsH*#s#?ECBI#U#%;z(<0q1#k$^Hk@s7ZPtTKF zoXd%?+BmT*7p(v~FChAh5E<5Zdf~#+E+0NPYl|niV;3bGO?}P&Z4kH3Uz zYg_y!D8TC?Z8NMp0}&Oxq>!?J*`5)ig$~;9ez>0>>JOUoZnoWEpUY*nWBx zY8Hon`KtvK5rVO5zTPALq~$Om;nO$cuJCrHH^MIyF<_uD+<$F4MId7xFtmr~=2t`{ zqG_>ufNmx_%fQV5PbP|7+pLK5Wl4On9c0D*aL_P=9Qnvwd(s_SR5NC?Z9nUAFf8p* zRB5@?Aqn8$jbhSVQue=W5RAH#=8i}{lc6r9KPaH0??pXcYIuo*#X-Z@D$bGPw=yaF zQWVOxnqD5MM!m18D@r)PMH%%t zb|FA;DuQQrf`>E%ESu0TI3MK5E4RvfY3cZU2_hp@`iND~NkMzzN!WToFr`6YjKF|X z)G&*Jc6+SI(AVx`FF=sj#eC9EtW1h2ws8b^exCc;%y$=|Z@1pZQjyt|-1`{&y2SEtrrDh|rWV59gUqO=`E(` z%&y%xi^uVQGNfzEkvo1D#m+JR^iV~gEyv)o>E1*<5R|F+|LD@@M4%O8sXWORB|z`puGQ zd{|gHiW>7pEP2C3;3#hFP$`6kHIPy#MCyn&Qsj+MpE1#E>=8C$$`QkdrC>V+n`a2*qR;zS;&RIZD`*|1PNSpKm@(m65+X9uGxL2{4(haCP&5>;;ALRE)=u!Srih~GE~C~9?>Wj!-tgVW3gi+-dJXlT6Nt;?4bUHgA~hhR8`svGY6E&U%9hcnc-G5e%Ao_ z)+7CPNr$l1lklWrJtxK8D{xIG&EvxrD`jdLh^xI?m1bkyqz~}|B7;RkPJTtKJ!lo= z*s+`a*#B$y=(&el%wR3yU=Y+ULC602bn)!7UD=O($f57#iAad8?8q@HIK#a+0{o zm^C;#^IjIaNc_llO2rxz?QR}8@yRSme|PI7UZMQ=H7ONcrN9`r2f6kGiUa3}Y=|<3 zfQr86J2z5vi?ha7Ofu6SlCu?{O&blnK|9$036=|hF zl(*~0@t|-pg40gTJ(^!t{6?^hy^RS%LF#k45B!nc>`p{#(n?aF(m@5Rx<-T%#UJv( z2vLgP2TdJ;Vz^Imo7~7D7zt4dkjt|RJao~_gVZ+rd~3O$751=)=kgf=YU5?Sz{EpY z4tj7Rs=Z!q6@$c!{RQT1#Z1Sn18#?Rgfe!=jVkF{BAhz4FG#QIdIIZw3O0y4xG9Ax z!jD#SAD*1o?YDR6mPK}7+YZuX_<6|j$83bP+uocQfw564}3t%B&ekDd8RaebA z{Pv)Dr-DbRarm=@6QOscX)u4`=fbOAW@;u1x-v@Kxq5DC zzxAAQkpIJK*Hr3sYtNGpei~dp)Q&K0cTV6qBYGqDd*}RvA~%=5tV2V=<$f_ZY-onX z0z0)-lCvLYz|5nWQ`yJZ#vT06YJjDsC~TH@&UOa_M9}mHf~bzb{jw!;DZ9g zb^OJnq2=0yr1a=f23YXvIFW~#R9ZUdb=1C($6@oYP98P4zdv0(bEXcsMyFj%!gU`Kpssr)dT=}tPq*U0@R_(@MfD_y-QC@JscYg#9d)%%vyjt4c1 z9WgX0V&dBSq&ya>=EDET#520aYBWsWdG{=0@#@wB{vDqRswhEr$yA#D1`QBvPI6|> zKm~gZsi6Y#QOLQW=p?Gb4s;0rgp6JED2!kzLOx& z(MLF$bVM5#U1ye?c*Y}X-A*L!RJuNFcfo3#SNFc-_sah&Ec)B|9v=C&DMrP}6MDM4 zYd8H%ixo!Oe7G*ABt>n}oJ&5|sSB2+CTE^##^|NfT7~BL*lKcol{_Hju~$Inq6nLD zWB9z!mLfMn*7xs}!2dozVgO-tct<`Yg#F$3Pa%>)>Z$b)?Fb`Z*bJGYN>lQ)8pq=& zpLs3v59p92@mYWiTy8a6QDRMJ$5nU`fMtoBR4{fV?7|@QjltA(^x|7VzXr7}ZNe26 zdeISx@>og1L#MT|5DovtHm1Qt7t)Ortu8mxLPFYWq$@MxIm=zBwgLrm~<-%4e6 z3F(^f4J|%~5I~kJwM+}~O?sIsufNH!tE>62kW*NJAn*2L zuhF?SiI%WC9EIZ|)8DAd33r)i?RN#hR+2Bp7<}C+!*Nq+a{#J$Qf%B2_JU?`Z%nG@ zg8&{wiH7U&2JmBoP&b!+ILn*yw-#oLXF9L-Bzzj->{lF8NUT{sZil{_2M~=zPfJ6& zwnZwvAGu9u;VzD0Z|-4uzkQ!_P_q?8E^?DyKr$(OAWcqXK7eLA^eg5&M$PgpO?4p_`*l=Sud3)dx zmG>(St@W0B1C`B@F5|&v?57!hx%D+JGAG(4l}B_X0* z`cHz<1k4{Yw)Lfz#*Qx9uREh|H&T4M0Mqv-dnp+hvKB$bpaDPR4UW-pUZWmGsA4`pYh#P0tc}`==(flg7H+r ze?H9o>!ubCf2YeseT*Sl=6c;!;o3KzdrskoKbs%NgS3-VHRx|ATOZk-YdHPQIem4G z^+;juT$#DB2O!UOy1ewHs{-DcR;xAc>KsIO* zg=B2}+Qg2p-Mt))Cum}!0heg$KKEyiyf$5B+)YRvX7 zM=}Q4Q#xc*P8-bznt4E(sT|DBtDx{|%25!+F+~wy=pK;rmIje~^Gf=QO*}o~;ibG| zFeCXLLiOPMnT{2}o$zvoni}Ao*;+dlTZj_M0fCL_2^Zai7C85S%-%{LXkCow>d#ok8t?%e>xxp#If& z+=Dro(ifQ+PeK$z$&C6j=>1bMSsK*!rf8Y@mbs8YgMmhm0gsbd9-DI^&+e_*w6v?8 zoz%mf%YnmX{^yf5H$Oqj}&T4bd6f zJeHj2fXC@_XH9$VLT$iENTl`xB-JEj<)5}Yo#pw|i?nO3X(C!+T;=dEJG&@0m&Ab6 zk8xEaFMZ47-B+Au5l7^A2^63T{IFoMPE~BBgSSSgts^B|+&9p+5&GGHTpmQDhJ>@m zVujGxsuN??Mxt_!O1c?A<(yCorWZFyxgy8P(jA2Q(HPc`v0JeSAg#J&R2CkoTw^Te0@~ z3chQNd8Hkh$;9kWK>;smJm_f@8L1m&Ud9W0)HOY^TZ0la80a(q;>+=uB}`|a4J`DDrOo?0@{W4O=U>R2T!2!cply;%*5`Z zjAM#gKYeaaeb&Ut0*}q_Oke1^ccrI`iN+qMIS-DleJo1dRCy$-$+epEX5fCDw@6-f zW?#vZCx=)j&{Q8VMRPf%8l^4l*(mU`OVy!D7e9LP(I1kW^x3Vcf?pQ0Fh%lw5+S0w zVRS286QIcGF!3y1gFBkJRxdZyq$x776hWz-C)ByBtwf(}Qu=Rq5m3_?cE%}@|3_=! zw;GJ{ecIErrpD%$!s63CQlEVIM6;&K?C48zr4!Jk`@SD}8*R?wz(|_1^mSDyt#El}a*bt#ksNxQOgP@qncU>* z{Z=|Jd~C5;`>h-n`obe`KV>Evaq2+OQa_7g*$8!e{6tzQewFRbKq{YG*c?;ep=ID= zzLFANWZjQ#tr;70qtF1%kG*h2AH%6}uYidGKt5ScR#2z8Mwywg1HN(-1^QJ~JqM0@OQ})K z3AE@d(RwE%g$USp57DL!Qw^*4ugtoF;k2LT8)lDL3R#{28bs`fC}9M_8mK`g*3jwQ zx{pDYs*Y!Z$+-CK+r!&b8T#8(RTY#_2FgkUvtxjc3jC}??h#E)mOEkvpM4oom!Etn z`uWg_8QGXZTe$5k-58pjAGWqw`8~JMvIWTMT1z}@=bxzLEcb|&8q~E?5~Ja>^abox zne?6Z!A;D4B_)!Lx+1G+cTyb&z6Dr*EK|$)R(Ds5_~fb`k2Y(=S93b*-pqJ)rU5hs zZ71)+f08j4K+0MaE4(u>kg2M00{2RarhLnRQjUN3r}SldDNb#Kyywfg#I}}}+OcJr z(Eh19%{Y!|k{kV6&0gvRgHrmBQD@M!-EcQ(kjbY;e1yb6{J zLdg@xPx}bD+*35VFZeYw%(CR>R!il)gJ+BE2j<4kENbdZkKkq-zU6yp$!xFKIFA@4 z`OwTo%k$3&V^%5R_Cs6S$~@^bl8kc7AKL7Z_hh!(O0joglgq)Cm!rn{Cb!CREs<#ENl z_g+c!V+Uoo#(O@?305Av#dh0-#%+5f90Br!~s3D~MnW_+T@7Wbaz8mn!K%`^UuS_?8no+%^h-1uEKYdb(6-8u~pq<||%}K3< zFP$9n4)TDDJN@Pq6sFudSkVGpfW|5c4v0f-cLVcP_E_rbR*X2 z$ke$GTwVFM%GwTghF+{@R-RKowCN4w-x*XgYj+I;J%A?RV1I7w84b+)hHPlV&$5TI zr5nJMiV2TT<-0DUi75qqMPhQ-}Z*PIo}TvWc{5~1{VOqV1!bvp(Bp5;TzN@ne9USR>( zfxbkv?w}0S89JlRa2T!dBOlR0m!30^E6_-oXKCDPZS;DR1jBFD#Lu)8=>!KObLsnw zKMvXdFeJTmymOL`{-zh=JkgL?eiS{%%@TGP4rQUrP%~LGbn5s~76p#UFdtUD^?wsL^$-DngsE`QWu3KRo>`3&KoP?>Vl z&^HrZt;T_^x%T3EKSb_4?Cc`g>xO7+Y0y|W0R3eHAimF(*Tu5RmQ^Fmwv#ixQky;# z4-_dEhoN>oE$cGmG5WG}4=pbk|BMR#_6s(&x*sL6?-R_?);l5%oPx;SCknjE$^g?U`@+Z? zoVPa;ZEOk2^lx6YlN`m3GBnMJ4YK$Hbp4mZ@dg*0Q_yr-35a^s)#-cP9Zls0@x3J` z8K{Sp|8%~`O)*_?vLz4Y)U*MpQMWNMzqtOacXFGp&ub%k!CDUw9thjTv`M634MUC^ zx!S$CE)^FHw|yujc;kBVwP6;N3N0JpI6EkbOcKNaWnfsh!cn6er%4pfKH2z{R8K6Y!$F_H*C;xPkG2NShV&@hJRn{wWa= zyDS9k84Kj-1Y=Q$mjwz zb1UdwaPQgeBxBqvPVW8aG-)q$`m=@IG9iOF9hGacwfm=yZ6P$;;7-{H>QM00cf6sX7k~PtRqc`{egE+y3O?l$8y>uk27Q-cSC$OY2IALgepRL) z0qKq#oWT!>K(s^34^6=%W42T>yUl0W#;qry@wO-csDXTX(1z8w2qNT_@I0P9xcUCX znan^pIkV^ky#GR~8#hR+qMlch;NWa2s=@kaeTQnDC!cS*Vaox-3DY>>1$_g_Sb%RL zNuoP9=1E6Z{T}j5p@y{rS-|Iaem41qQF-f}>9gi&m<;aw#LS}D+n%6k?7R!y3mcrw z(j>{W^w~=?B50crS&ZI=NVD&#v0Ac{NkWu^GK!ZvBMPa;7#$lCBiUK-vhd!>x?Ps% zY7HvFjN(=BuR{~Bk}%F6&H)kM=62-n(~r`5?k>-WaIj)k-MvCd5&H+OZe-2CjlLn1 zhGC}t&9ncyBYZc^bNpd(VkXnJ^uvYb>WD87KdM_!*VvpIR_>jLP5Zkc&BMAnm>ljb zvJTK~3o9HN5|IhaD8SRn$Hol>ydjokAy1&I`HyFSdRR+`@c8f4fB@7z1)L=Tf!(`3 zT>j>sHC?~DuF2?YT3kiO?0P^i+DnyVZlYcKb2{;O&$U|NNfm?B!_nHDqUd=iuj7r; z>s>SN<*7P{wHHC}r%GVD!#ULSXyY1-r(yYJF|B)Px2&`Z@<7u~%q93ggl|O1KoF|R zp7_^-G5WJ$-2N;WK9rt4OTW_?FueW?D~{YSUNXb6Qs>t_k~V^JEjCd?F;0Jm4!lEf z1{2($r6Ev(U0F3g0)rt0)F|Gegf05>6+t~|#*_3_aVxYQ^f+%%tu#G*JWw#G6`J`F zeP!0B6SD-QGB;~`l`0tvn)H{rx>|4$Y#ha?`nL*K;l!%iw;1EL+qPVT2G~GA%gRhy ze+rMspk+WSi~>p0^DU2b1&D|%Mc+o7d>*)O4p-AsD|q|qrRb#7xbB*e2p$ps;q0io zzHVN@@>B0%ZBTm>3*XC8Xo-y9CJSio#h{Wkxv`NoYXJQ`fqp${7tIRo8>c__&NX8?j8n9Mf&||f}JllW0Nx-DR)Ci^{ z+oRbU5J+@dQ$X7=Q)x3rC9vG9A0JU0yk~7~fIMKU1T~eupt?q&9c?otKiL5jUo~0! z^z@8nOlBM1W;wo9nhzgHFpc31WLz%OF>A-*?2^|$P(*`t-rlFaGp(X1RP}4$pw4V4 zODE-pm>%VpXkPRv3R^%Bc}1mCoSHiQN;+yrLYXe#sdlZ%^d-@K1I;Oi@Gge-NBbNk zr=sbwb^}G=1JED$5OUs{SimfPd?)nLt|ba8q6MIHCOS27h*?u=(wqv9sN3XeIgh|N zC!RIhujPd{YEv{nsl<%pp_Cv)xi2n$tH-Oui}=BSp{VBNeReOLWDEifvHM8Y9<7GA zpKnbLcD~Hup=@=VwQYN}161QM-3K{+yTOHq%?s$Z6cVeT5&a9y(3>w~uxXeXY;9EN z>9(A%E*=1?n?amGl}kDN#Wz8bP39DDDQ1j6dW@W)sqAPsYCvS5{b%8z^UmsR*D~tq z{UcIWK{J_7TFf20r~ai8%i~KY5^KzRz!_9*l>Vp~tXZOQIzfe6Qna4dT|5JUYR0sb z#p^}S{6o=NeZE7dTAwNBc5?B})5!bImp9m}89DK3!VrIzNYD+8y`?*on8xIX`UR zG#GaXuK|aa`>Nu9bzy_Qx-iCHT^L}a!al{TQ2J8c(*IEdYOM2@sVC2qFs?Mo=p^gD zuc9+Ajth{Y6eWSK-w6uxm8kyIQq5n`5=tfRudP>MyJEZpbL*(mNeZKe<%!c=_52-5f=3j(K0 zo;#Q^@y8+$vY9$|XDv*iw=lv;7zE#k=+w!U$c#X59n<2>LjT9E#025q$~_8H^UTNZ zSc=_RHf-kw0rSpv!}p{rE#vQZW(PY&UAX5zIJS~u9%4Kgb~G?TSh6>Vb6?^Q5$Wh& zzz#-x$5q%(NIF$|6rfYZ2c+7d0@oBHwxrHK9jUOX^V~?K-;mg)pE$H8HdcNQ_1-v> zFtXxAaOOJN5ys~pWj)gl_Az+I{ELnTyw4Y8xU9ziwio)qpzmt|3hUw3gS%FA@hyl}s`w~1&Qho18dJ-`pW=JVa-fLUw0X1iud1I1oVzb<{OJ!+p;wXDe0VPn8a+W(mAY6k zK|H?n?C2+a+=-JdzwYb&s;E0s#nmlPQ5EK)o0uBZe^seT66Zg3KUW2~3O%EE?ENqB z;V%&JpMK`{d67R;6jUSa4%cX2{>eZoE0qntMUBji;o0nk@fW%MS`SfjXPkuL=CJ0BeSW4 z-L-VB4`KfjE5CSs|MK%EJ$!41pxgAw7;Z!4;P%=8+Ii*MV!i@VRry@`z-YjQIpznaE z5GYFpo)L3{r}Yo1aaY10M#F#8;rw(e}FP#*&GI7+(@;P zMe6pOXW{h4+TcSO1Q9bJ;rSq)i$Z98`9a0JQs%6(Yyp6j?JJ9Tx@t?KARdpnXO}Iyr z{U1J(K8~30rZKFvoH5_06S#BGG6P>btQz0+l$UMl(m(Wkc?Sa0*j1Ldj=z}E3eqol z%wl!_3fqleX;1%ur@j9qY$NYf&BLsqnwq)2Nj;w*L^M_8iQ%st1Pt_be01`!sT(XW zi=nLf;4GT+ZU;EMffiF@AvrxRfduEDsc`2UnK{!FiTxN#ShQq9tzi-JvYDg52r z-yX96^wj^E1Tx}qadg9A`&ad#&WG!OziRvy#{YhM{|90G=jm2g0tcl3b-|xdYc|dm z;pQUyZwpeKs|v@j&g?gj_TL_VHqJBf**z`KU;LOy%D6k@dCZ^TZ(;rO)Qgk+--IEq z#=`yhhO?zAf0tYTOAB`sXLNX9tmE%*?SIkCfimIme>}sv2I_u&Jn`!RUBx*a-eCAg zSpUmB`9D0g{}a}~f8PHS)_``9{df89*U|iVA7s6c(~m5EWxf8N3H6}sw+S_= zCd0aG=bUZ#hxP*Z+A{?fhmZoSp@c!MCb{e2aS>Y|FeqrU@$wAUE49hgtMtsF>z}(a zP&(ElA^OfOGCbJ2<>l3ahgqs8-e7f8&=VF?a${n7>pfk^24sa<=<-NqAys^U&7Ym} zU%B(o>*~M!Ry`iv1I~%ra=+>;GTes88?wK@2a-y_ioKx~6_Q#qgGlEwfYlMi2+82l zxp28+g(T;8mK~qHy&9XCkmtHKULYGp9RBJ};5X`v)?+pO`MTxz-;}h%9Rz=ERQI;+*Ju*Nlpw2+QKBDxRj@!?yvmfF96DF5_~ z!u`PW37-*rdga%bp2NWocbxCF{Pk(hll}ZOXa4bN497O}MoO&8>4xXn#hu@)y!hm+ z^3b47sBUyJBIx$VUcestzIs=NdS|6SS0h}>&r%Hkd!EkB&bYhXz+1)04+2la|C7=^ z0emi^%lbjT(1p)9+mNB14!hL9YU8IrivzmEpM7`I#|-O(nueOjR1yb+;hlg36@MmSAl-!PEwXUw;p(n)qvbo4Loux7cc8x`#)DM zKIg&4P@S`92c~|ViV|ErRn%?jS^SC9i0b~VY8A|X4S;X5yFc$ok7?B1aseUo>vJLZ z=jm*hmKtiJ-Mq6k!d(De#uo6V+K<0|{PTGwXyNcYg>c&b=jZdI{tZL=_uBg`1*lnl ze3tEhy~H8#5^s(e?&tr74$%K9h_996`dr0_S7RhfmMC47*OXSuVuc`h4>iXysu)ki zTiT74q0+G;lP22!1i^$4ijzQd;($})_t8};aQ(O5;6G!ENDhSddA$6lU)NTQB6w?a zt99;$f7Q5(KRb(|U!$0xHEvlZZf}qJJLi-@+@qDH_-h&K?<<0zWmys}s2h`pulB)l zRa-{D&qJN{S7`jEZWOu#{sQgGvWUK(pZ%7DWJAYAmBWMO!dhGmsHTd=mV3tufQ~t9 z1`YtB&n3wdS)+XQJHu8d@O(WB!n0l40HMK%xnfc*^TO*kzUS*5JKF-F^ey$xlxo-A zarZR^zO+_ef_iUBFkgt9MgjLf-EZ(^dB9PB`fSRAQ z$UVj#3)~^Pin5aa?k#`AWs3uX9K)Xp%s3M4czArn@AGf-t~M9M8+iEXP^qvy{``g2 zA@RWl4r!g6aS8@i0A;F#wGmgMB@e5fT@=(TG+d42F~Z>H-)>;Y#=L;$BRkky?90l4 zXTJ6kl$RdzJx4hDE$3mK_6%Sv<;-qbRq&YRfG?;u1JH|nC?!Ip`^A~F`llzyV^NBX zi^Bi~Ss&Do#*I7jwToE>%)e!8VBSTmIs&ZsbL`_9ALFMTF&ws2r~t2&t$}^&w7rt~9_=d@6G z5tG$zf1XYn3RdOM;ZxrpsyWxW?{?3XTJx%bP2&`{0|f@QfbZZMMDKWa2{X#3CUsnv zEb8=uv_Dmfe@!p)FdVj)ojBRHhPq7G;O;> zQ_onvwiGZo5#Ad^d>9AL46!4zJ0pJhz}To^|8V^Xi*~(0Z~uvrK7{yJgZEDv{MV81 z3I+MHYuRnd8h36ohJGFiw!e^se?1aqPo#&oVxvb>oY6H}!d))nh7(H%&WuZeE)s(b zQj_`vUWKZGk1S&^3JOaPHIYcA=*{x@UuyhvBVPYOc1>@*5ugrZdKHbMewJRklcPFJzu~K6L^*iM+54fBcaNHrt1DwU>j|j1)><6x#)dml*#3W{) z&HNH1xs~}EU7ktH5-5Ea=9{xug-g)-TFnu~4*5(#2wWu+?|phWVN~&%W8hwik5(~I zM1SGdDY?$oZR5K5wMFW*pMD1LT2?TCZ9mF4O@yz+mSQiXzd~9)3VcH_U{0F<(Bd3m zS;f%_n1`7OWO)<?rGUV}0SqAhI;E*|fIKJyvtebi^PUppiY7jRIhI_kFksjC4htvb9 z=zfbd#0TTGHK0ix1q8X}Z!{BXJ5g2LsI%5jXa?dU8ej}B&MI5&L6?$KC$(eqDAqeJbt2e%Jy zO-!s$9oFo~d+i&oN%v>4;JGp0Z;PKp48G=i!lhkQwbdOR*Az(P!a#fPM~d=Ut(ix7 zoz8!Q!}XG%GZUW}#CY+|SlRY|&cvTf^xFn4hi;1{*{Guh3CGoXcyisMCBENDc=* zPpV&r(UHfP;cKcnA=}5E_o)~@_hnxW6X;$ynIRoueq9Z0R6R-H+%L~16ZCok2FJkx zs3Qg-ua}0)bE!NxkSx$QXcC}}ZJ&^L?-zJI-A_<9k4|5sn`*zfrr|#~>&4qkm9|GZ z=dX#O-f(dSs)zjog$Vk^x_pQ_fd5mIp$JD?E=w8OgsDctCMSyVdQv2dSmWCS#8(-S zDApHP@$Xm?nT&hUtaIfzud~ZqH&u}x`Fl@XYewZ#j@QX3f&I`D^B|4AA1N~NqjI;; zUyNK68)XAT(2R!h;GC*)lc(~Sv%~h0->BY{eZ!(24%>NQlT)Y(*YxH!E|a*VPzA>4 zpYBDT5~vkUy08PynFSt4w*z**>%>q%&5%CS%5I^3A8aQ(do`Wj@r0T-) z?F^fina97HW0TQaYJSV0=9@RAUR}7vs%TM-ZWe*a zMp!%6NHu%>Sr|zsC(E-Hiu64>jmU_85kseyrujV?nX!3zw;0>+g82+t_HCb+_-5V> z3({?&Q!=ezsyr`{*uxZ<7sM)oNlx|drfDw}`eO8Gu)?NRuiP!4 z${LI~vg&2E^rhBfH#PfbWM<%A66e5&R_4c^LcPpgk*H1%=An zbe0Xe>=+cz!Of+R+WkoV>d$yim_umSSO+BYZ&!a6SJO>%oaPH*^QmFv<#&G58Xouu z*5Lg=GP1`naEt0ExK$=6J*1X)?5l^gj8Lrbj=VPJBN5@iFzn(&D2$v<(-#`A+nB#K zaC3hxmu(arxkclrv6>-woUX<|6mHILzg#N_?>&5&6JMt5%a8o3T_q+bLBt^W@m0o3 zbo$Y|T2P*h;oP%cpJTLKxz4Wi_JJ1-i!v(Q1g8n9%f7y{3WoEaL!3+0q|udh*=pGJqnVjVDUAG09BauD1tIn&ASt{X zoJ&9i2g{%LVOWxB?xmut2>$N5?|OFIzNz3U{FaI^A8WX3snyw;Ok&e5dAO4DgGWU@ z@YQ7qHO@cHy^(n&bNA*ZZgm*RYDg6rN(bKQZVrGS)AE_(*UnuorpM#C+{k1iz*m1d zd4uo_xi7TYJb>#9g6x?Cpk&nNmSJ0!X3|f#*o?dz&r$7>CIm!S&1Gh+q^@~bsAiaN zzXLPqFNilX+2$q?m^2NODU$bG6kH)YB?YKb7 z*#%z*yCcBW*%=|YK*otn61)3lu)UX*n}DPiYxERL5RxT3?~wR!RrxQ>=FS}cN3bSI zuqd6WYiCt_G^uu(;Mttz@d_)_Bh@M@OFM-=V4`@=e3i_;@IfCtROBt+M17Q z>O!kSRHJXS;`iPX|CktH@SIJM*s&URQ>|-x6y(bfa#rUomG%=Rc849P7}?qrxRu!AyXev4Hpb;c;#0^h(?B_B*&~Y5%>DB{ zmvXX@yd)b}(%MaD4j>9mdRlQ-X2;A+(xZOyTu_rC=erb|0W0eX^6u7vZ6}GmWtd8O zeu|^(K!qZPhD3&${3}lvDf?7x%HdaNVSwqKoqM%j-{Tn?Vz8*QG^UCez4;WuLtw?d zRQK{dqCm;Y=w(Kj`^z2=eJQ9^5>>0Vy22??w^#4>#Jl9JSC<^D@0XM~_Nl7}1)+Nc z7@RsIy^mlM&chP2=U6^z^WFVe}s(nGUK1#-eQgIq=mP z?}N|r>4+WRbATa^okDSv|jn3N3ZQqeHz+vmcEjs_)T4zke3h z&&uA1RX?3Wv#={I+lMsOXy4&3*PO@4m+3nclriP-;((6$_@>l8zYPZ zR;GHgJYpFv?)3?grc$8MN_4R!Rg{cAo|(p$5)2#kTz?t zd-<>9Y2d*iM+~Mh>3~g)+3Hh6FP}k6ghd_`h$`G=$A|ix2{cl}_JJ$mjI6f~^=*oY zDe1*;4<|NDzBv2{J!da>1}+Gr-aHgUB=u$v6bJ?GQiK~skPT8* z2#Ya>Io59Xn8s}IziQLl{>;4P3fnrZvrclEK@tu$5!&IWo^I~u% zwq?!NId5>a`La?NwwR2Nnp4+`rJAu5NH`6Ndak)oU?tv#`0bteytqI{mq|qS%9y}} zH06Q0Q^Lg>K!Ic5B9L(H6+RuH>W<;VN?{*EBljAwpFWW&1ZJZx?h>5W&EHMbuGNo7 zU9xnYl0Oi;thQ#sh~HiPzIL0OLhAJhcsHy^{Eh^txl>6 z7~PqEppPoh=S%mV@8#CoDncjL*!_v~R+rNKh=xr^XNJgPv(bId6WelftE=tn`-d&4{j!^aV(d!rl zpv@8`j{)Y8mLG1sxx8CL$RPeYAoLs|)uE8zg>5vJzjB0bObmS(ZeR!R1|*_Rs~J~o z$mtbuL*Pk}%t?^6qQ7$a@*BRJiL!4B>>7{Os4PgOC}gM$9naEx9Y69VuJHc+yMZH_ zd-2_=qZvNO%g}4$F4xg*Z^qDVUe|&EDk)rZqg`No*h=s9E9e-qr$VK~K7_2sX?w}p z)}3E?dnM8S?tGPCBt_X+%1VQImsq7_qS7#HL#sJ)6UB(3`<%P!TN@?b`O?2haK;V+ zM}SalVIUZ?74^8X3g%|?8j-hLk#B#xyLHv8!4>2BUi{4(&5iAiw)lnx^E|h23_UYX zcTfBpURR>$Q|U&X)eM)u)FZw!gk-GbTPzLmcnFZ$Nkk8f^INRAhlo3UcIR5|%UiwJ zyT4mqIlFC==!)5GpFJ8UKV2Ct?>gS9=Bb`5Ys?a+}jne1h85frgGi*pWYdr-=smD9i z0-t2;$x%WO(CFTD1z=~JiU*@~5`y>5B*+5k?wjpwo}Zzu)U?Q~pPEKWc`BTs|e_DiC{%DnNi^(RX0>LsHK< zFV@TfH<4xbo6;aL;qWaMY)rR%G@I_&{RJh@=&|02(;wbjJqDWCs0G!zHpv}69#a*Y zy+V|_|CLJ%)1IAJ!#(RjU;Z=-Ig8*gaAH^^<<~2r^p9__91Dt zGuRNU%dMEKkSqC~@P_!MOpuYJ2-*maJCM7;>KGoW6(djydF0QR`C#L9z#U>b3AZx9 zj!K!BPX~v&Y)a<|F-&#V{S5j>YaO90g`?Tk7zfEt0XT{5^$4Jh-2kYo|wVwl76 z!A?g%csUS{q`h^D6On3$lX5;@vSJ3WAB~1##e8H@DhXwW@&==}osbJvQ?k3;E$?@z zb~bcbdQ30-GZN&(rX@_&Sz41MEWB7uEf-o-x8q!ciVUh!DK{NWSnemEjA8;Z0eD^0 zrzR@-*!aQHprz}Y6x%@)kT%?{Jk6e(B0Z`=yk>F23}wyZ^AhZmDsGUA2pYa)bQpXZ zw3qi@hXdC}bjM<$&AShBKp-1NQ>d9+?k@TqM%o|B??PA8JTWaP7A<>Ko!4Y{7!o*% z7vAx`C9xMsL#Kb)S^VCg`W)4Z3Ca3!Bl88;JF$!2wKb=WjZoe$V19P5^fh97PN&u= zW`Q`yx@@dAUz}q@VUT;V^u3P9afj&XUqb=dFA?)z{!bAzXh-Z14rbPzN5~6J2O)K; z&)F_RCx{knMsfpql=rjfrH96_Uh`?%ZiQ>B>yla3O^0doLbgWBq(0o^Wh3G!MdG?! zt}A(~3wiF}#}1Bc&-8ruBz9)IEHZIp^NuiLBh|LIHJ&0wo6~habE0GWbntcUm;}~) z@thr1gie)0nfy};%Brq) zM{@+FxXzC!WHe_;0||&AYMy~VTA+bbCg&h$rk^xh6EJnkNYgOJY4e(&p;F^Zxe(gR zrH_-jZ`CrtltrRa{77E}xJERgsu4F~Oi*7)+*^_rx{19&s+ON>1-FrYq7jk(K@{w3m}9PyAq~9qS&pcPNy-bkJM2H{vusRxsl)Wl zeQJeBcN9irq_Y0XnM;O8dz~`OCNgI+-pGpqC~Ew(1Q$rz?N$217Q)wGP#dmX3V5tE zQu&R)S%vlK%i$+>_erQ%z2RK{>8m*#o<^We7Ra4n}p zs;-u*uROY|PC0Hjbz6{(az^@jTk*brjlFccv?a!Y|VY+#A80;MG3t$&43?T7&}UJX;tJq*r_sKS2yIqrjj%( zZ$Z$x;uKbcOHd2-m)FSfbw*va+3U;Qiyx7g)%(pdNxG8Jnx^kHvpKFAct~%OOmI?O zpXO>sm4*&>cFM3slPuhmY}j9Ed%FN|X{)Yd3yJi((NGU2J`>9V>9S(WK32tG?aK}( zd-VS4G*h={t9Fj3@=CimefgK;mLrT`3uyzijk(R@N^9|+*VQCXP{%KvM=L!IUS8L2 zqi#ai6@^#)9bxG{o4S)UjjVKr4;2%o$oNS`spDI{ded@u#}2{t1*(Lz2iqIt?wWb} zt5lF|k>#*x`e_cXD|RV3U@Ww$&O?-tl0<4VW~9g=8a;FMGLHqPR^bL?AbWFdkA@=s zYk%#*srhcbNnp{xRGC9}+mtTbAXH4zZ*Y zlHk{H45M<|JxUjCuH|_6ji!--uU9$8x*5bh;}sdb?xyW+yw`CW%NxRaGN39?La6xW z^KXO%3Ak6NsmU34@@R{&MXja4`Da9OHS^oM6vt}UqW$-^*LI~J)w->^rDsVT_oVBv z)4q?WuQ>YRcMUCsy^iX(FCN^n>E;L}{u{u$QQ}VhdpNsaUk7*SSY(!WYu!mJ#v+a% z`Eq-S_mlgUSjDNxK!M7M%mYp7Av!yZqn6ZxYK=?V7Tv-v+VT-j+Wpx}HEXKXsQi)o zuR#$=>#YI(?>k%Ax*R4atBPArO*IU&lF)g*D~PwJOe%-o;}kS9r6lx@;XDod)jYKU zAwAX&n4nrEMQ>-`ZJ%8)XNOwN|Q&)KiCC3 zj`%9kz-*M;6|CMmXfcDjB^LkjQj4E5p@~#q3h0DA_ijQbm?g8(+J9J(C7e6KZHGdn zUzk;S1k%s?OCZ9R{d3mMP z6@xhkO>mwuRh?f(aGsP68Mbpeee-}U?}7;?A%z&@?0Xz{fvEiw!oHD^IL)G}-i0BQ zfi2G+cwaJ@=Jc#H`&%#}p9Pp_PGl=GCz=z;*;Y-RH)?Sb5!`t6P(_x#QNZ`YZG3{x zGnDmFGv7?Zf<;x-uZ9N5oJmb(laVgCiboFhR7nxxqjI@*89l~jC-s*XfaNOT`%HDe z1^z1m-*nZ@@!09;SV-ro@iUJYy6O%<`?mK??!g+EZDH{RDvWe>F^B-vE&Nhk0+VikN!WO#B4C{Hq(oy6-;W10Q zB^y)nLSxYSD<|?ZG%lMViie~z))aVlOJ#{(jg!9E)(0`AjtB1ZLkrPV%}Sn3St)Sk zO{Kv~s1H;adt>)Lxj6-=qPoj7N7ZOnsYD9alxVn!ReEs8SFYtjSq-M~*Qi(N{;N&3 z^e&wmL98ZsT~AruyGOM~33<9UkYtsEq3s4CgHtCL*x2yWgz3kVc2w})xZCevjafu| zJ^?k92B@bfWLezgCW94u!>Be16fUxb^sFEqvJOQCmubq@-kj zzG3NiLOry|D!$8h1;@p@5DWP<_k)Y+53TxA9u}zl{e*!gPiR$pfe|1{0IWBg?b=srv~}o>eb)ew(kv)_0y`|ox5Y+m7c?2B8njgy z;8IV3F%d-f$6RLwAGc_sxcTX4=Vv4R2F{~}o*N9McJ_Um%3IUbgo^r@h!x@Q<@fxb zTkcFJWsR;G9x)j?dra?JuhgGn+7iDDS?M@Y##}Y^5vD+iCM9NYU3scArqyupnCCpK z@d#|nN#bc0pklO`E{bRMmmzg)zY(uZmH1Fjl%N9a&h-99wlJx(0K|qHo`EwrQdmRh zg2&cp$#tvLemu?tdgf87aRut23qt+`!2-NM^K^f1uInt()E^snuh50A!0~5JKFN}v z&K#TVZ_d?QCS|PnQ>d<|nM~K?2Jbk+hMN!b6m==J3=MR3ecud^7Aqs*ID2=^roDbQ z!9Jr$)IlHL2!0=BN*2SDH_3z#3BE~21TmEf>&tnVg=EZ?P)HL^orxkrsK}a(D*enmHm+@ ztB|bsJqfN{_|JwBK{htEU$K{D@xHR{vUsAXn@TB6Me?p}7_zft!B&_H=YwC7b|ruo z7pcS_56jHrPIHobm4J9!vaH1oFsmJoIV24s8fusqrp2*Ke)tF=qjYpI=25$(AYLdt zc?SjILNh3PJZwoAp@VBwC$Lf3C@pS$vrH=9W~~iqOTzk2aDWpYeP=24Ez z#-VzmxY>Ih8Z?=(AC0ELTy2ijW|yg`W+rZ;VQg*wl9|zo6rS$i1nuDE^HJS{hlM-6H#Au&c+(=D~IrC&uvcaj?#Uv2RL zy`@8;?>`-`t{(W~;zr*Ozg^dBK_tbuJeG{CCD)5~6%_6&%7~i+ncUo#s}ajP)U~g{ zU=A%y+~p^#-IU%08uzmwY}$$Mh9QkMoC+w#S`I8ZEI|(?K{Avcw8sd> zH-UewFwHP+)MogQ7L?lh>tV3K__ge2bNowYhg;i z9T3+Qdd|F)Iuy#SyyYyceE7UufDTp7$Z$~ITNmNVMqI_r<1tqtY~(ticKnVcz|zyj zvNn=#=$O}aGo!NBD>YEpVZN;TQU|GaF+r-ie;14YyTpqfT*~ibqf1C%W^wtG4d^?m z6uj(Fg?}>jaqCRr8>b-R2oyQjC?nb`BZ7A&OkHojpLOL+1Osr=4e~4&L|emOHxYi^v16&O``D39z->gQDW)2Mi*ZoWb$kCEf;%=oL3}u>^c%T2-R!&>=4Y707a`qf&atH3!*#a zus9aHn=V`wQKTmW^PIy$EZKr+jqhwS9K(TcsB@K+avcoef-FZjSQ2|kb4g2jQJH~n z3P2NYke+dwjA0>Co0WKimayZ;Kyxb2fs;f>nZ}97#0)3dUCV#XU+dKmWT7Ypq+9?> zI3nIWn!NCV5QzaW^B)g2)2%HETPu$x==du4p`0}4Jwp(d7gJ6d6X4tV%4m4!6-0Iu znkIR?)rVKImt;|1bjv1rjV!p1H0ElF`eeWb&EZxP|0d7G(?po8 zbmFSk4{XTsDlNt9#GcN~07gQo?Hsi^u$Zf&x8m;xos0Oia_W?UR?Tm(@)W7$HLGvn zUm1zx)?=7j;HAh6V7W{YQylF3>Ozy1Iv0KBsJ~?<={rDMOgUNablz=fwg0-ISZx@R z^=2^5YhJYS$>PgS#*REDY=M8#WynBcR(b;Axo0*VG~$OzS^^P1RcL?M?znJ!1Dsyy zd6D?mtFx=Tx3-=I{x}cOJ-seyw2K*A3buC?FMkpK;GCHoW6GBUXmh2SCrFJRQ>%nZ z$wusz2p{)kcc>tx@cN|+zKgprwVj&+RcseauGZfxOp|!MUZ}XgYOgA0H)<(r=lN(e z)CS3GDipM@yh(C=y2?bdx01ugu$<1oFOa6zoK(1CIH>3$#zOX)MQ-^u!SqV?mUwxQ z_vGW8e@H`&epwB+{8T)3Zp`YHWONQj6^vDk9vd&k5=%c$kMJAIiX3Gi2PtV~e7~|r zG5%=G*>0fC^CTg;N%ozsh0SS4Ak`?^Tz~bD<&l}SeqXAc^{xq5gZ&n_=$a{AMWF)) z<#BtL_ICE}Yf6l3V=##*GAeP^0~X}|d}CrXW^T8ZXhch|SdC-}5#~N2ZPd-ldAm>l zoEe;=DOa1r+?OBf&5TDt6xE2sOcm94aAYFf)+`q-eTRU<(FMr`DoHXFX<&!UZoqL& zO_wjfr!m39uaZ;*mI0qR0kKOk(3N z*=PR2yj6n*oT=s@?e{iM%L$AEe_Y5UMycf`5M=4XF4x&jZ7<=FP0v7@NW`j1?JH1D zBz$8_B9K=NRwTXGq5v1WOrj8McroZ+f{Fk|!~-?Vd+|IPV3oN^NV(o!cfT ze5s%olT8A(cIt#&K#rVq&1pphw3&wm4~a<43!DhGK4jXx6qt2S4tS!_Qw&f$MA96; zzvz=MsiNL0&{XP2`U-vJpkbqx?)a8Tf;@%L)!O(~k@xSW5HT$Laz%0?PcEC3hGZ{` zQ%?BkCIRPSUY0`pTmBT&now5LV)%Cq(b6Pc;N1JmvOQf3e7kl>Vb?Ou>fbVbRlh>{ za>`}*(XNr)Ec~3nwb^Yzz&twctP3HaAv|X`Zy6@)X94N5tyyH{sUbOMhU2O+u}w7m z;OSBhj$?%qo$CykN0&)H{-v?}Hx41oE7c5Xd^4Up=s;JJz(nLHWVpn^Uf;c^mClQA zU*3-tpC=e7v@1leJF>E0vu2oLRw@QU0tAH828c&H7J05zCK%shM1Lt=sE)Vj;#5*^ zC2T4ViN9f3B`LDOm+rFktv6k%DnYw@kY-_Cju$)GAfuPWY`Z$VZMzA3cx3qw0Y^E} z48-y!^2M3Rp07Q-!<5FBS9~y^7Iza&awqk_FF@*DQ5KlIVzydU2JzY3Qzvp|x-SFL z_FXU@5@gPGF`Xn|u$a}NbQxd%G^zQaR$;_hgF@o7m-P(qXWx}knBFH` zGfV*6C|BKH)K2%>u+HYsE59|XLI>=%mcR%Gu2h_=}IDn1dV*cjvCH4Vr($;H4JAit8 z`0BBVQ70MKrfDV^HOdFeYgd^;YOZjyvJ3PMgB6;q=P2p>B$G+cNq~iOIgA|zU<*0e<&rESoq?pDnY7M@4%xw_K8&U5{$7J+V&rl2Hct9Z@U z{oBIQI!PC**GE;J#>%TJ!0%Cz$1U;Qf|^$mIZ4hW>Rr?bBS^H;?<6H;p_PNSVijqJ zdA#?PD#7#;3TzrlX1!W#jgAs2-N?aN-q8ulh$Wr2G?x*S+u5o6JWS>o>%?hhTlO1E zi9he-E37@tz9ntx9YiN!}Wd_C>c#22=HILHdJmE4_t)in?p%iIP=uf z(+WImYsRHK%r@29B38%F9EPtCfd%c32ZZNz;KZ_3l*x!QoNTiX9RTW(w|6&ZHi=L`Ub|wWuc!UfI5)??waj-};9iohO zwD}ti{oD5!J8aVdPuyj$DPld`ND`yj6c>Lo^?t1;F_%dR-{S0;MZ`gIA>C<5;n=m% zHAnYy+vR$%=~cvPy0%+nt@}9I6O^(QY<^RJQY+hM6A-Fi9kj;e*R8AEupYBnDAG?8_nWMt>8$>+*7kTD^h0vS? zw+6u1yw?4g_5z+FOQuq}g^&nl-#bMxlXc*9wLarlHf~Vd`yol zjSMR?p7{@10!rGnQBtL%gcN!89YBQ}=Xn<7X*Oh==gUvHOZC!n1<7@p`iKl`lG(%7 zB@h)-{8Uc~gf!E&m>Upo*vv`IT$~;f4xy~at$p2v=#VjZ02X$)yTbZ?vt8W2>B+U| zsHY>%uJ(Rwm3bF!gOp50)HOvn4YMRyNCb@X(wRP)RmeMELc9p|J+s3$ zj-#%#I{J!fYqawQq+}Pyt4U81*AbT4NEBXdmFdCd+i7&Y(dv^+J?s1$3%gCN~LFD`N#%n@hEC z1NSZ%iXPe8_+pvS{Y-8Epb^Uu94176?Sv9Ma0PqfW-q?z8*Vcjb?*WtfQ7^xJ5=(f z0kdGi1R#H}6vDXJ3DZkY4+>8^5Ywf{s{+hjoK!aJy1{qC4)LYM+e~jY!qX5KnbJck zn-t(!v{tixYYoDyGJ93BGBb!@=JT`-*~}iaZ>LkB@*1OA7#I!^*71A@SwQWRHG0sC z#jVM7x)#UFdNUti`x}kUtHe89=ge|73!Nh+ip94^z3$z;k6bZ!n!jbwgA}aIHs+8_ z=0)oNAPVkrK!!ngel*dWa4QvqYjme;n5j)cS?(n@p~HP^-WT#YcuCb*${HLmwzm3* z?^vk9_k|g?8+diGRvvLZ?gaXsB@tsg0-3Z8JN1CihyhLXUP}uY8m>dQ^9?euWH$NA zE0L3-mFnBQ-UinC5mW1ABTBh=70+hq&h9(JnQLn+KA2V7^IH)jBk}1n~-z zn6BJ?`WbeZK2sOT?QP>zyEw#y$fR^;WrrQQKa`rULrg8M%mjH4Y%dG?n^NtXnXr~t zG{AOn+NG{)@VdBSzwjFgk4_a0JA#wTQLHBXNbHy!* zYXfRIfT|wL!!Cf<<9fq#{|-AAAo0b-ZvHp9K0Y|bX;M@@^xD3E~MD-6j>jO?g!vOuttjv_1tOxL6W&$RtsuB7@k9S1ZU7KbnvgQ#xTq z`qZH)qx}x8qc;Nk>gwi@J33ot4vF&5t%15nln3_yQU{JmfhHtT1h(i_whqIt2~+8< zH`xUmiL!i!uVa|xJc0?x*o}kRmA?fAqcIn%SdJ!X9VOOTWwmePEcIkGE}C8_$O@qV zf`T7S_0yggL(k!17tpT$JWYdC8kct27Q&xK@!C_fu+&PCJ#uI;4Nf~x(oJH3;e2p{ z0D>Z?!^U3xhYo!rf+nJ{cWT|Kybi%oUaQ2WD`+%@DnL2wV5>`I%2$u6}iHAV{R2Wgh3e)MBF0G1PwaoLvg z*0%`fxmc}vM94>wL{OIkSv18Za{^|bB=0YPeTlHrhz(e&YU9*KJek5(Kb^g5G`3~oMyrK5Hv3``yMPH~grKtO7W7(YkVkj&(<_CB z1P#Vk9Hd1SthJD5aYmzAd34$fU2k_~R%L!|9Xnx#{99`1Oy9$@B=>-P}T%K8t#9W_eQ;r-%uk~ZPqrED_Uu|^*Yl>S?D zWaGZp?|rT=>~bUUAu8>RI?kcuA9in;5e-3K6$_YhLG8<}`g-#x>N{55u+9?}19k3I zYV;=(1Bf+G55`ENQ|z}3PMHw05a+uxvbN*ZjX|wt$AD#kDp-^Bl($XaY3DQacFJ-; z4o|IyG4DJ}g_AXvRCv#H36J9Dl_29~PB5)mG7PUUQuvB=ulm92F@dghtIKS42UM=7 zz7zX4trOxG535(VxlfQB^xs#RadMo^Z6zVJv#{zZa^gceqW{R+*e-oW&@AM3jbsj^=`Jt+apt|l@4|@TbjfkyuN-q&$$ru%nc_>2Yncl#t<05ydn;*r&P| zgY9x}%Q*Y3;1Aax*h>NY zTa5xuaG7qn7MC*=AclMe>nF0-&7)Mh0OW^nDiId8J2YW0w?$QS33%f6Uq9YoE5{Wz z$4wToAtu#XiKVNIl?YLQ$}~)0C5FV(q!$wKbWQI|o`e}=Q0@$C<3)Rj8G-m+rA{8| z!v?VXXJ`DIhqRA3X$B;sd_UL;^*LyPim>CUA87q|ndXqWU`9NS zA+n@Lgrt?>5+<)+TSVFF?cb@zGoIr;27RzSwWw*Oa3nAhM@Tn+eB$u5|6_S|%T^PK z#30d-tFi49B(J+M>a8S_KJ-2tgZHBncu#-B5zFWZOieQS2+uu~N+4AjBX~NU3*<8W zEnh|j`YaCWgNPVbh*gmp5N6nv=Lu&h(%!#AU7OtPrPy3E?De^-F~Z(5&Mc`2ftmd= z$PRTAAWW_E3{YdE)ufiu0rj~M_P6QwN1lh*Wolrqgo^;SJT_62!lsZcR*J`Sk+Y7E zuOCp3ylYoGAdS}-mhm7DB>A2@koN`g)+*!;6$Kb5+MiVC&I3||ADGlWMW=kizF+{X zE#areEG2ghGp>y$?W|ylO|H8rkUyxfB7YFKA1He9?Qy-ItGjQ;aZC>SU_JU5s<5 zPrs*Bec6Mg(f0o@_TDq9$*lVup3%XEf(=j+P*IAM2r3Anh>A!@lwOr4(xi6~6j7?w zfOL?elt}0Vhz*d?y8!}93lIpM03qQ$iQ_yo&yBbK*MGeq-u2FxtTj4b*LBX>XP4jp z?Y+t8h&7LDra$QEicMD9@L>g>;otyN#04EluD04#MH)42yoQj*<$dSh^I5$y#|smC z#iU)}wlAWf%-e*+<_EW_%Oszz=bXKS_Z)$%c&Dl=Q)U9rgR7amsxO+$R0(1G%KzE_Eu;(#UwtKZ!&KrTjhbqvS3lR09xrdsq z`b(gs^)tjP;l|#RN5AsVzieCMxRNOl{3Hn@1$@Rjxr(GOAR zkfY}Zs2*6={`*gl%ym5?9{hvj>B#WB4o7VVRi!lP-}=azmKxwdkbX=zzfC-a-i?#9 zNw<8pWf@ob!1oSl9=x{w^yZ0!*De{K65+ErzH3KQZfJ}iS~7t6My*Mn?e5O1g0C@W zi_e|z%a&T^-SpU@>+ ze8v7JqxrL!rmY4{RQ=pAci9LodZa-aX!3!_`CjlZVhV?% zb$oZB%d@{2zZa?c?L7~3bRi@EsuxaQIi%j_DQSMa4(DtARg%@CB&47BhZF~KYQ;(r zTNsNjU>ZGTar`(_YST|(Ph5@LWIE^kRC2CZ_Ni#mxeznJ)U`2Ex$?eR!YX+tc4Lpz z>__q@e(<7HKoZo|!Q{}_r`5(Iundsh;MHm^WV~_B`0?0B#7eys^TBYN5GnV`KxY7@ z(rbeHtBls8=Z#d}f0^-#II?Gjs%5D30D#)w7O7@BSn&9+$gzbhkuY@C{<=$c*Tj>e z9Bt*zL923H9xkm4chVd*tqvhYkN{q8F5%lBxmHW){`zdyvFW7UvrGG1yIP;4ws{o>n;PmulHn8YtJ;f(#|7iuza|8dB!8D+X|2P=MiQU=`)f_ z$aQR1Rj{IDwjJfA`L3SsyBJc+DkQ~*y7ge7_GP^?%x1B6hx@*$rUFsd3JpDG?rn&b zhR=#dzlDV5>^(s%QjK}B2idMzeMYYP0+Y{{H`^1W~AUI~VKEvDeRU{pyw&kl!sm8-BRZ}eQ z=BdM#U)7H-4nA&wD!W#&|JWjiibPavpNg$x)jOF1x%8l*wn>8Fl+%Yt@js}*x|Zs& z?c#yxc|;EA8)5rk_`tnSHIJ&wbKBH*`x395O4qKqAIg|yJR{CUuP?_YR<}Gs(VSrH zJ9YU3$kB)B$I10u*bdiPwC5^f>pt?u9fi!y9T5@VeSifOa`o~>v#F2)_!{Z-S60X$yC)?*rsTB(*5O35uYIiVyvsXx zlUoUn5?3rwJ^U(BpX3~5mGb!3TYx(-JZSYkME=}Q!1g4$u2|9;c@)T3MJUTlyr{jK zK)@31>)D;}EvP#ZFXauzK4(4%>}<{k@Z?j})atzL(ws(IsxIN;^$YK6B%cem@~?m2 zW_5}*96J3fJKK}-;T;EtwJ$kLwS?flS->fix3_yz}8Y3FC?HbJZKackrnB)<8Cx*2t!u z`%~F%nRxqKeGfpR601u+;_4p`-kbJEJjrZd3KQ|!aN|Jln>BlE7Xw=Bc0G9*pcH*M zTf{5D5uR4|M#!Yj&Cd5J=G8#O=HJjeWw5uYJC?Zk97X6qZzx7Lq;x;kpq|Y_4XE2Dw5$5xrw&f{Em&w~WmhRe>d`&j?<3|06+F-T#1YJb@ zm)8e(d~Zoq_a9wbEw3H`ndGz^_)Gh!&3B)08Dd8cEF6Y-!VFyE@$DIA0l&iq<(Ij( z)$X2?jNTvNmT`LN)X5`er_|2=PA`3bX19eRj}iSHd9gHjIFxY7O5H`=qUAV|h}y*N z1N8w1{QqoA`kyH?HMVV`pu=p^Ep^D)!MDi%Vv7_aG8}q-e!c6xEdQ88mk+2T=srX3 zKIpM^vn*QAVAddNyCYfMddqvD+v3Fw^Hc1g0*#c+h<68GxK^17`1Vt3fxq2F^xGnv zm!~nE1|X7gp3*q6EnwH2Yg19H6rM{dPAz+PTBWMwa#wnqAb$FG>O)k74`ngMGwsFW zI=U0Dw70IcL{pn-#(#OyX-iH01@k`-H;FvPw%aS+2(BfG(&7IzKLh$(czzb5RfLcNc(IrgB}89vWyX;q}ejA+JT{{EepuhJ0{n zQFmkJMeEOMx+SlxOx>_LY8oAawfb5QTWNgN9t5^ua}K(qq?FX7ZVfH z8BtZP$G>e`EO^MIKX%|#Bm@HOwG1ddK09&`K~6U+RB41Id^byW{luI3}0iY3#= zirE6&{owT|&gQes(X|QrI_gDWKu#XWJX{>aroZH>Geuwj(ko>0@}|@9N6@y$NW{@R z{XaJEZ+rPRkvTQhS|xbVi}ruT|B?6QZ0Dn@cRCJ_>(+%(a8+D=F-H)lYg$_uKhD$Z zk2vb98dc`Yc3QDaS5;S3_j9bO-urDMSri^4@_ek5wy~Y18vLew^X*OO5iy6C#Wwx1 zjmKiT_-?UB#Y?y&HWnHo9iUh9E2EUgx!C&LI{yE*f3~~8{)u+Et57%C?-;%IJB?6| z{YT=?$lU|P6w-RMj}j>@PPsKKv&1&cL4c=onIb-BwdS>yO}(Zkz{NUW zzh9?jEDLdYBvZj57W6H8p5n9qEFBT)<*eYUuBlYoc7f$}#Xx^ZMV9qU$o3=?tNM@tW8^boanrR_C?J--@ZtYr}LuKO$^J3QS92WvM9P2 z{Ja9k_)jcP6<&Q_%`t9HA`baBJf1|M;l4hcDCIT7SgQ*82Ii>vD5jW;c0Ecj9pLFrM`cuE$vJ5KYaUA2v4Uoehh+2*@y^q9)OeY0_@Uxb!VBpVis(FP78T44vuuA(F1x+BHzW_gP1iK1_DLnD4gj>vo6HP+ z-|2Atmv8KP@f)34$#wZtv`@UdtLu8ijqjJWl1#m<=Ml7PAb2<$(`Wf#Waax2DQGPvl}l08PE)w`o3z;kN&-F9*IkH-R+gW?IeMp_rx){`*hu;ndW;xXRJ%)YpF! zpqhw-W(^09;p;bQTAITxr4JW5e=aQUX_k?RZ)iXDe_5C<{`2rHpnva9MY2*CaiWas z*~mx#X|KgarL)LtO+9z&J9I^N(wT9|1ydKY#Z&(FXKG5oiUqw=w56Gd0os~xZn<6y+A&u-Z+$r=__9<9JKW{NT5b zJ;Q4ppy190`(G%PXgFBV7^zRlk+!0PRCO)U*|3#Umyx&!?Nrd2t!fb{>{OtL)Q~4Y$K%4o7og=QM!QM3`GAh?X2^Nx_uWC`U8Oo`A_o5h2QAf$ zs=|hP!{TWUTJ%$@nvGZ4QY(&Wt7RdhFIx5R7rZWW?)q!?#s}=iC=e+lSPh zZ-oT~1+9W%DN5I6FjbTmV>0bu|0D#?_7_enqi}w5;kD|19V3wNbN@Wfg03!{gM%e< za!jx!wJE3p(0we14)PzTnn+_8u)_N;>{j95#m}3aW+hXiLU&W6T0WklM#CvVv*vU* z^b*IlfuFfxzxlaqT=s=_v!R__g~{Y%AEy%TJ?Qan*X{UkM*fU(fTnw-=~hPmrXZb} zIZzFiit&RMFk#QJpUS(j;o&xHL-9kU;D!Nz;S%FOg!??(yB9RmYEF%n%%L(%Z@-KB zKVlIys7pKUG$?MwceYc3M3tE+E@kVrUy&KkIb4b_pgY~#f)da<0lW{jL8^;l!SvUg|L##l-vYGEiNxh_ z=4ebNM6b-&z@fjS&+5uAyf^D1WgKcdP+tD9sk$q3MkT9N<30=-g8Rr|RV2nTwj!ANvvAd~@~km5%5pvq-0K$8zWcw&ld=!@ zwlbJyuD(9UP1By&z$r(*wI28`ze$la{Hn8z7Pt@WK{s9NO?52u7w*r`18ulFiY;%A z{PexQ|1lNvcC;bNZ203d``_bdl*Wyw)LHa`kWsaZcLNdPi-x8r!EL>qL^DRgjXzS| z`iusTnz1ftJBJaLomsU^tIaPiMgdu4rT@97s8+fSwBw7}eTeHLDnbN|uBRw>VdL|< zAkLO^z`y=K<_I{=TbrXmCNpa5MfGSed_nU#yw-H3-i5F8wI{hgnxLJPPvHz={i(mI zHnnXXnq!-l292~7iXR+cYbcIW+MKXUA5&M#vPw-=Vk$pLbCNahv1Koo*0(la zY?`XzT0?jEOZ;9LCzZKpD-%D(HFwYB}szHh(x0-)g^ z%rx_gu1IZKF1%QgpRa7Kfey(3w*CYl$<2g~9@OG>+X4!!`zJtvv& z(#*vfPBm6p+3z<_n}({r>!XHDcVxB3%CGA5y}&N_dkC0^{{l9oaPzIeu_Aw=;7Kp6 zHg5~6QtT$kZS1wDU9`ykIibVfaUCrlnw3zSq2jVRpkkpWDjyq)6e@BEM+y;WZo$@` z`=1MTRCpWoVFOoGUgA+zNuro2mZ-|;ys8myqNfFJ%sB;bdFWNYAEiDmwoE9a#g@*Q zsZB<{&fdYl;7p92_`)19=|%Pt%X>F|LndCnjpl$vzodzZ{`cqqBX)Jp2ZrH_3*lFm zF?LF=Mb@-H2#D5>Z^ERYLPhA5__qSo!YcLE%(-l>1Z_h|w8Q&vKbK$a>WUdIe9ryP zvkututcBoA(ea0Vu2UYqO=JRidyB`SHSOI;sbJm6hdoa${{N(#roDmMv`x?YjJHSpGFE|L+=> zxLyzx*H-;J`Ru2DFh>h+$g7;KiMt}BlkX5oV<)7R(%sK^^H<8anHF=b(b6JzB8zke2tS21{ur zeaEs@lFmkPtA=eV0Y-&W^)CQx>P$ICsG1A51KKY{Y>sVOf&p9lH?nF?HPyz;GAo&V z4FNy=)DkVERRH1D^97}|TSg%c5FW=~OMJ%)pnt%qfOnC3^GnMpt`45{om#T8vI~s- zi|Ic@W`6%eLH@GuY@(3K6Qxj*rnn7UiZB3eEis5pfVpR-zR5ctj0Pxirt2|BT5>Vx zlySff4F=O)-=RO1T3UY3vY#5P-fW>WBOJ3)29+|=VE#_sX59Vu^nk)|;o5(VB+dBF z-Fg4m?N;a-F2(4DsGXsjc2+QA7@=--g3c_HvPVc7=vrfTmN$1_O6>g}C;ubQ7HuUH zkCf8;06}dWoV}8@`E>Z_VR_fZ-?92vT_ILrvbz4YELeTx9 zX3Y%Gm@amY7Si}%R)#b&7&oTo9|M_8{=#OIad6+7O^T;w_iK%+ZmR~!!`(l}$%}Z; z0Xpa!7{l_?0O^tr5(>9(10dPDW&w%8h*0=U?KvyKoZ4sf-=1fj!G zn1qKvg<__PA2P>~!9F9t_|wN~+&oHW=DcpxFbwRL-vY~<_b(;*{zBpY!6E}mjDd@j z-dMDA$4hx(GxXuF!mt&FpQ3Pn?lPAlzL;`*6U&~w_}jN{e}vT(HyY~d-Dd#%+{gF+ z8``?(kGxB-PQ(>PeNV}-(e^pZmb%Y!6-?2Xfs!OC@5&9(83Xb8ZZKxyr?@gev9EvW zw?l@-QUy7autW8EAZ`Nc!H^i!5nDge*^Hk zei2os$uVab7}8pcjP8aTN%L~?)us!(0Jwhe1^;0Xhw`ZY&ZmYxPx`LI{$VH3uTqt8 z`HMhRVw0@rYgx)Ne*qv_OneKbGnqxmGRyBl=jDX>Bisr3Z~bXXWML0AH!ZRCodHdv zkjzPN!zqWUu2~*1Q;4@^t?A+DW~8nb?G5XN=yh)Vi;BVUc@~b`CY3j*q-#v(b&_`~D z0ob{rk;7-zj}1L7oBgxJ__^y|rbjdDm`1Ed!UzmzL04oj667A^c^Yb_L(K{{nrsw) z-@4XsEY*Sk0kO|-fl7UmFcLMV5&P8c(hfuS`xF1UL$_owpm^-s=9{bW)qOv|Vh^9{ zscGK4d2+qp1#}@eoLD|;##^31rUm8uI;Q?Fev?_>DO4!@(>;Yk{3{EIxBF)At1 zy~eib810!KX=&2p{{=-{1b6Ih5nX!N49Ne@j@ z&u~#GRar4xnW|r8Kt*R?#vG0YB?pUkX9}qP=e@Se$3(1o08Ks?B(N8vExx_VS%LcT z{9C%5zx?rj2womA-`h@KElc{gYKoLW7Vwg9Whq6}g&vb%WEOY{DyhcS_MEe##?OA@ zC#kDr{>$$F-4Oo|R>u@w(X_sO<>RwMBf|*Lu&@ppTTx#TPRmrhO*}{?XSDvW=pNaZ zby%X0RuFDe3wSKCl^12ro_x!>o|B^j@U2niTcyK)`7Ww~412U;FxsgM0m=o!8;xRd zo)I)5HKS4Lm?Qpo=byyObBhAmnttp_T>lBdBWvMhx&Hf!aFtr`qDDZT{$%><%hD z+Z@g&Z2Hs*-=n;P;W!T{bV#f|EwN|oe88VjClv$zbW#ns2The+5Z}duQPDW#uW8>> zJ*J0%G+BqAJ)ZREiL6`G;@svYDi5BzCfgNVVBX}26YZRo^Pcf;hqq<&p0gd`SXdU# zh-wfhy$1!3)>@>G%}~6=n(Ep{@B#V0Oqij%Zt1;{MZPAdSbGJsi?~#-LJOI*Mb zr4@pio6RBuSR%(@db*{3chAS$)rb^@tB;2t7aF#Tzu+F}#k`i&7^%o_XeP_Vv}`tC z%N&!XoN!xA6ShrNa?$_zgHMGGk?RI7e$yrOE%K<+S+9)-9KyZVAgVY!@j-OrVe;4i z9+#N8sZe{1lUS%h&I76AjEAWC21J zru_Oig!pzqkOw+n&Ng5!TV8uznjdh!z{%+4)q-bcoe z*YS1^ZFeL`^Ie~GyA|@mi>n6Q@g)dQaN4yh8I}^@EN~qd= zC%4d?W0!ezsSi>zI*jOfk=wock_^-nTF;I#6wY%C+;bh5_)ODUCK#+IUsscq*v;0q zoD=S8)%M2kf_2;5ea}3m@HaaX3@bA2N9wv6QY6+|N3|!`A|GuI99>)HSsU$yq+i@T zu_&k2d~^0<#-UZKbymf~K}L#1<13J-7OU26Vxl=drZf%m#}75geYmqLA74y50@P-r zU7)k9zR%~i`qJGUbzCqj3u7=&v-cmLQSP*lY@eNgu=N@s(S_=JBvw{C9VQ~Uxo%a? z4Rnq@e^hyf%81j9E8|C{=uIrnjFevRz@yK9zPpgs>g%>5F}0+QAI`T?bsWZGSYPj*?47B_f1YKj;r@dZrTT_=ZsH$`N?+2 z_j8DoLZZxKG&G-sY4TRF0a`@q)tp2}O6I#<_;JV4lMV~Ju1(w4cQ%dMpz- zXR9~USi@%VG4d^9i$MAb*|KzjFe1{hpnU4d*>Ix=ersbPonbKVmA(?R5dDOm3(TP1 zXx-2~DPT_@c?Em5WybsU1*@Lo6UjXlxWT~D)u`69M>@=kLPv%?2EL?WRiD= z9PAwmuGugh&)P$HI}gY)+#8I?Hq;JEt>j!CDdGMd*AgyGK8}h7LrfkYN^*By*3gPw zY?ZW$MaeVa$!ca-%s|CiUX$UuELsSr_JZbkyZlh|mGsBz-o)IL^gusils0_xNkC-i znu^%`Jsp!}jp6bd$aP|HuP@%3kdmtT2RQ!e&lwEQ zGt=3M&2d>!$s~7z+5A;k?5kX-zSIxXFJCRhRcNTWkPL_lt%f*__;9*dOH}lLJ^ms> zshCe|!iB6{R!?^$&4jsgNW!*y9_{9OF1YzM+rgP#rJc5WC1EeIDEZ7wR21 zUlD-m%vSt`3}`N02aQlwv?XXo)zrCUO^Ej^*xN3>`Y^T;MdSO>Y&%HR>g(yE%>#6* zp7)9!d)IJ@nlq*E;58!G7$l12-t7!~#5ka}p4gjvLY3D!NJnkugXo9cl6A8tc!ztV z!Jd|&%F>})M89A^>|m>PYk)rjlQrVEwdPaX`Nz`Z;f5$Mr6dQH52iA`b#vy+FVAxt zG<|fI&%nAcz{~~W2_PdIq_f2&0`o*;p;g7$7Jv;WF?oBkoCGRK-Kj|1r!IVYMaGu1 z4Bpa}+Z4Zc-w2Z$HnwCk*t0WG?96{mdiuh;5rHz?`REmM3qdjcspgojsk z>{;+yLZWlwT7-`!6c7BT55ytEGu_U;LtMD!c%9Ykoh7T*C|gf7fc3_v@V0_SHs4B? zDP-^K<$Jm&QkjA2(X$b>=@&c!san!~S74du|Hj{R(}_W9ttRI7&AVULY9Z$Vf+ zh3FJhX!{njf$$d=$U+MD#mpf1NXQRSBygC{{hK%33AI|0_IPJ)KEp)|qmbwCh?0pP zm&tQ2tg4C$BKc8qgS?F>`HF8iTehXXe{#5(!*`)#V&$Vp zGpT*Zhns1cFWn}UC6+1HNYe%D4z)ye9i$t%n)K`tcf<3t!5Btq%Izn!S$8939VBML zd>a~z{e_z|IN}7WH~LPS%^GqyfB{L-OUsWY^SAGKMj>X2lD}lZ_LHXVpUN10(i~Mw>te1(sioOe|Oy* zgtKaeJL*}?T+CxFTOX*@8`R=N#isZi<5Vm&I^|&li^970pX@WNwvi}nMrzt_dJo&n zeFDwQZ$1Ao)6_yz8R{?1O|0R5jl3|G5iWhkC~Q^SrxLWne&+KV!_n%EDc1JD&y10l z&ixjmYg+wuBfZn)dn6Ym)q$8;!OeQlMO2B6Casoij)d<<$;tjjw(U#Fq7h_jL)g&%K6nO`b4% z%l8SEKimf|RVEo4`N}~za-w8WoTdHPG9s)QYG-Y*Mkd;K+3>0Bhv!Uf{Yya2 zosSEbq9|2bSL+G;G+)$=;buP?y&;kjpvxxOCoWcid@kv<`EV6!Mn82%%2`wpiFNLG zrh0>UdYRq}lem%QZPO1u`ewP({DoPy44?r0*0CT9L>-!1E=$H2tgA{?&5rdl>1W-7 zXspRBdGrh1R?9*KPFHG;*>P9qCK8k^Q1$~Zq!VJ~JbHnEiA<$d3G(BYaMz$^A0D?z zVFExo>LBd5k%BK)>nBp2RJw8(woJWwue8qmF`Ro{d1 zYUc>!eGNI5>&0`j(oNc5L)pEj3g0!H5w=-sMTJC|giA{b1|hU_uHTVd<{A+GF|=E;iFLY z;lw*J$2V|cF9uv3rFDEN%r>stZ?;Nj-x%U6h_YHAIw)Z)lQgRVGtyRjlU;vbT`kMV zcDl%j=+C(9q1ldg)laD!6c0b7I%6=_k-M_dH^tzFcbz_Qk(Z}&v8J2lq63FH<)0d z9>Av|Q#e`kjG+C!$cjI)ga2^)OSqqBrYfn1u&)mWwm<7iX#@#|VEQ2DIF#~|0Z9R| z{+ds=_QG=Hv(S`tHEvTMs@-^UWKxe^Bz|g^k!=y z8P~m8ykVP;URS0g+Z#TuTZB#^n;9yIhLGZ@ZQ{64`~7$ zB{Gt0C`qEp5nRg0xEV?JM@11|v-;0?qdw12c5=j+qz_%6UP+;EjoiM{-&kp%%RPfc z+Ey=3f0&nF^?2|lb?4~IWDD+*6tAV^iI1}yQ8k0@v#*vHVpfpPm~AAYzjQ31viGHBy2F-zmwHEje<@*Ti{N45S>@NeqG+rASYGH zm$RIdyz`=l*P<`HV<=N(s_N=O!qXZHsm+PdmtXSYW_Kpsswe{<7K!iE#y6zx3JqD{ z`VrDru%cHMmnRp_K7R&cwW-r_ek$ya?sHR7^0{;lh5H_?;?vvLh8y9LUz0?%Rhjkj z3_3VKl#8(>lA{=T8vO1P?zMMbB{J+M|293ik$#4#Jwd5<9XdR#sd<*pERe%l-61x- z#r3mZYvU>UO}_X_Beg7!=&O1vNKpL1iK*FnJbv^BGK1sw4#p}WF}}vS`v-b8`)7Dl z2RKI<3vB16&#T08A~`0WTtn^E zwVp&9e0JLT_T6^7p!!vSpkqGk?Hn+eb3T*eVq246Qbkh)e>#NHY?G$Qdnl5xYTO& zwz|l~87fDV>LgRN7r%t~M$gUA#1P*DuTOqT)6U-?99EBt5A3 zVYgu}tgP#`m%w>vW8vDAnrciDD*?HqJjCR)k!K$|%QOYJYMArwpyNSm58E#Iz*i0v$Gi}kEmMj(_0|CAaPJk|?YQIWRQzW~6U^cYnL8tOKQ1tD)R}BuZ!orpqrV*qJWm%}|}+e`g=Y zlQ=U%TGw)>GxIsw51Ljn8JK0veVjWj{{(8s;4bGfIP!M%fbO-IT63S>7TKcM(28m+Pqk-0e&u9F-Lo)}5}u^L14!W&Lih2gZQu;nk^y;y!0LoYL7 z71bSv_ZwFUf5=K+X(f*2mqNi}K`0 zPIq)vYBZjX)l^#D;$-CN|KM*TCwAvWCBH|?9=rmb7oBSa?3f4eJ?q3#6YB9n{XUV zvj`|;Z+oB5mM&yF|6=p&SYgh@bQ`Ct(t^GlVbbA~%z2~W)7l@Pgq=hHdekdbi-kOKZ};Ndt?= zE3Dec@;8D<*emTGUa%YFe>SPvZBRDEhgsKQO!PJ{e$?}IXPwCsY9moz@2+tCM3~_V;o{(dPpyNzJbjB0 z*D2d}wzE9QOJ@&5&z(I|lpt>CHQDXZU2@*_VyByO&D@*%ALNGLCbG26E~`vB-`x0U zAZ~YLW^(`Bi}O+$hD|?;I^$CtJ)e!k^Ojytrs}7Dp`D7_6%F zM?AZEGC``&cKwLA^;+D&@0CJNUOCt4?TnIKavZL@2OS`algz3!RU;w}T4#heR`?kVoYuQ{d5HWilU(U9nJxe0M zgYZ~uD(RVt^fE%#7eGICYqfZxSd{AUJ;u7xAW}}>qaA}VDnmz=%)AAY zf*@=n1L#URZhICy`MHD+8#QQWb3353jcR7z4zRTOs^O~t%B{E3QpP1T&R^PQTbECY zlsCVud3SrLdZlZq~g$K;vpi(=FoYEPY1Y9*HaNUvB_1=s2VV% z24^%1Xir52c?fjS0=$%-i+qwzN%n*r33iUM$eF=zqslX}h=r}MbJtV@%Tb_+rVpDMkH|z3Pn<>-*d)IqDlW!B+ z-uu?&QBh-l-yc|kR_B48vo&#_*JzvtDcmw5kjrL5kqPxc;Aj)u5Aa_6HW11n=OV2# z{8NWAXZ#l%Uvayr)`%82sK$$5tUNw?(f(^MqLH6hj$N~YuQP8CdU!~If(giz{{o%l zPI1=(6DVR>fTyL+L)Iwe=TKee|LKc;*-mYaWi2KJ(YUTY&Y(RY&g87Yh6 z_S*cQ+HKy^$U9}Xo%)xD67~&v&t4to)4yk=dfP|5a@1@h3l`R;c%yHoF+A|JRcTzm zq5E=Z`?H!DnBK-lhA6#CbZMbo)mqpz0_WEgBjc(MNfPbnp-`|`_vtuJ#)$K(@Qox+ z_sdT8WEDM>TyOe?>b0S(R?|~_fQz z$Pgum>AK!5>h*M?M|-988oDXP>X^S;73-iV@bR!N^dJ$Pgq^1uQTS5)a4z<=pD$s; z?qM*bNb_J%ZspRHyZ!*Ahjh{%A^srHA0a+>3h@UGp{#&V>;KIof0R;%!MhC_rVqkE zM>z^_Kmtid7B^yOCDpp&>2P7j!wT$uqWrB1O)9dXGpF{RkxQg;_S9~qs#okPIBYOG*T z3y7CHH#}9>R8t0REB#4?ojj6r6e#4=mCgHl=gc+Ph@sjM z+dQ3LfUA)aRmAt?N5*02>03RB;__kQ!zZBnna=dZOR0cEk}!+hlv;o3B<(S-qq{Dl zDk03nTkdECAwPs8KN)mxGP7|}bTo1cO61k8$8EI=OvwI-HU=MY6}!snO4}mavKKy= z%jSPTSUHFL!yKe$>5Q_I?d>Jf1e2h$&^R0B#DTZ(He*0GB1F}tdZOx9q)-u<;<&@Z zb?MqjLlk#of*pz_$(o|>RjlQ-hNh!bc$w+S#KT@|A}c$4$nCa999l%9{|ge?wU0Qp?p?yHim~~~ZO5cP|6#ai1v$=DF%jw06Vv(x#lGRAr~0~gNN3u7 zXnq}rkXV2EXe`e#2Ko-;X5$(blrtC-^lE7wZ~=WmC_BvOH$k4VCG2h$AMf*Fk>f72 z<6z_vB{0&EourSpQ@-)jZwz`*cY^?Sk~qgE^7(9oPA9fuN&Xf+dXW7rbf(l-xNHh! ziLVF5D)J*;gbC#nqOeZYW=*x&WS{+Nl{gSs*H zm9*p2IvaHLgD_E=GU|w_!WT4*EUAZwZ@LvpopZ(}eJ(d-A>)mhqU)4!;GsqrBkb(GCUj$-!i47W4;`d1ZK zf5+CB4)oDZN_`jwie~?d*$Ga@o(wC|o#+mz9;sBH?u$pkrK7C(k|CE$9Ud9(DL3(TO{OzQ^Z|96d%UX=y zBVgJ})@oSKo9E?Ku5dM+Pw{QBbol)4eCuycD5bWd;hvc{S<@A>cjmQSS<3CMd-G8N zx`s5p7x@VXr)MsdQUZ-wuRy{Kt)hJZx5PnUaZRm@k$!+4Z;Y&zCgkB({TS#!A#=vG9% zV5lIsyz5vDStJM6dK);R8X?hFD>+h*mlPrgRc;IXEN_BsVNqtN>dW3kQ{?`f_Mrxkq_e@p)U4cu-31T69@4v%t71f69zL8_ zc*QpcR0xd$rS>BR)WCEJ(1JjCra#{-j?3$^1>r*kKoF9Y@Z%I%<4V7Vp{JDC^ZAxW zcumCN&l6XP{jQ7^OT$ICipnhxPQDd2q!_6?WzuPRIzy`z(jpTcR5MsTBm71U25*2A z1NQ1X)$)_)n&6pxG~6-4g5 zra`hZV@z}Prz z!PAspNfV{u?OF!zvX-bTW+%r3uNuYDW!Ow{_>Arr8;(O4?O1kz5zMrK+AJpCOxawD z$}Ono)e)sL+f7GpAo?GH;(i`6KOMkVg8H!mWCXFGpb;G7bknYSv1V`0W}%xmAWFD7 z-F5C?r2qq8ry9r8JLFZiu{zQ^??!~LFXMw-T5U6FY*r&G8aSc|HSC|2o>#deI_QwC ztTm97+cM!DF(90}PzIZFVR!WPZHp?FKEC1*330;BZ%T3o9=E^ZkW+am4I35iJoj8H z<*?*YL%Spqtl{;L4e^@USqbKy8K{ksk|zy_?#G-ZoFGR@U_vD0AVa zAl34`q*vE~LE04MCMQZ%k5HBNf#=oqq37ji@pk&|{)+*)WWn5m%1BA)fx(M&QWcQ1 zL7n{zjRKtO{f`HiULObj=YwaFzGUHXEghQ~G~4h>pLce7YBO7ui*$bKG|s5*(-hu1 zR$>6_&cFM*>k~I<{G{1s;%A#cH)`6Eum~ejDGp>NQwj~cIzwZUas7}PdNpp;-V$nyNxh0pIT0>7AL2X~kj)VpqnT$D zUc&ml7r@4Ta(jJB0|<_fvrL|Tw9U2n;bg?l*$}CR5Tgf9wjfJ-dg*8LvK_43 zf*Dr+%Fd)|eb|)LT))JVYEk`Cj6DaQS$_dhI^;^g=&aXt7%VywOU5(}rQIp*M%CQ= zST8*H<#3CZAZ;{3PFnXrC^PQFRy46I{Z%ple*=7KWi;jJv+;)*?!C`^x@+GZMa;`i z51EIXQY#@<8&i7og^Hx5pn~X|kQ(V+>NFp3T|@Vo8Mo`tx);S3UcP zfxf3)_j;X^k`kpyFTLJtQcq!T&A`Vd)DFc1m0vda86xQ82*2Bbt1@($^CQ)TSIqj! zjeS0J)^!(Y$agl3K7aVp=Eg$eF$B2$fN^Jmn_jrKd(b!|RLejQ>P-ISVNR}63Ln1MM3z8q8q^rM{x zl|5Vy_%1+PF#Ezr&K+HJwRUt32l_J&eHwiU@MeEK7dmB5ns$UVq8P=`>LezMWmvRz zEoE7Rgs_qHgsTjYvM)7?$4ZS(WYQ_=eu{Q+Z0%{cpG7VD^Dn{UE%YkFNg$oI&~+a2 z(IRaEb7}ou3u-d3NXyXeHnYyEQA1jVj#^e!`E(F|v|}P1Tl_$kesyWwGjm4GrP;ac z6CF$I0Iwnka&{0IL`c@a&cIRWo2pMKS_hJxvqUAg%eyulqk24dO7_vSXF;=VuqDC# zfRH0>lpxYk>D;)wEb&@S)!r4-2p9pX!#ecf0wH(WGls=)s@I9>$l}Not@%*$7{%CwEtzJ$~@-I zvAs#kvNAeNwMJWF&s{V%Iq9!D>uu?E6kXDzFAD(pu}q47NNxe^esAtIgQX;WiTRoHe7nvgS=u{t}Uq5`ydY}J-iLE*dm^WZm0>Dpjarhr8l+>S zSN%S~aPqw^VT==XY%Ns3(>E)Sy?5wPte%S{>#;IWl)!`yP*Q!|lR!#xvtfxQ@1Jog z>+v|Rs@aR{;Hz6gPH(H$8|eqeKt*guzhaRC1bZ;)Ldi2I%|LtUOqn@$D_AT856+D^9Wlqo=+r*7-q#gxzw5BV$uRzKE5+(ib1B}(vcC-*_)Gm_0-TCh$wLmq<&4hfV%`uPHn zGwuN2%S&v_@a%w3viUaJ3Mh51P1x#Dnjz~iKx1-OPU+`-@XDIhhboShNCd|5xaY=X zLu}tMC1u(BZqYb@y)n@ryl-g>Z?@r+LNK$9&}&8ETZ5=noLbeRR_81>Gm79&r4p&8AjIG3Ch1V3tK0 zqaigL;)bK`SYoh?hiOEJM`{cOZ$T0! z2U{*>!zYNFHhsmBMJmu9$~@hePKS#pbkSjLR#%@ASM2RVaF>AcnQte|gxjfFEZ`^ZYqA{}?sY>|U<4XQQU<)y z&*U2A>suu-+O9XD6K~klwVL1bdq1*`4TWkLVu!=;u~e31B(>*#R!q@ToiGCA)#1Rs zY%6}&$j+vuo(pdb151W;;o4HmJ&lTeBYBPe>@OBy|B|STetw^h-(7C|RS_P-Vx4BMzAPgV+{KHAWM?E@R&8 z4CUtNa0)@rydfQ_o}G=(;s{~ioW1O;eSc`E2P5#gW9K?3fDA-+ee`=ovAu5@aCzkc zz?ag6kx3pMLi1zCN>V`E8)>|}v@v7l;toZQz^E)`gX}(d{dGaLF@@{5AK4YfGRm@+~19 zY!m+vd*2z>lMdb2|2o~Ne|GuHJO$Ab@8NVPWwy4d((G<*u8h;j`drWB0*en* zx(&}x$m1S0MXQ~SmZMdHd?oe_2zU+W<-@B+dwc7yNZ60&J|E>|%c$pIdp%dMmd*7c zlzTAFrX#uSLy<=NClW75{pV~9E%iTM@9=zN-3}@@s5Fx*%*IxxbZRs;v&KMo9^*|t z^JQSrb}7yPBNJY0NGTp#VNs3~L5K+F%G*)vGcoUyT0fD1tWp}46Vb|vCf=v|gaT%@ zkz5u<`hyQzTxvbzed3D^E&MgdxbY3zs^u&8D{qruG+@3Wsi@@-AjWL5v#qhe*M7fo zT!klaR@B%#MH2hUZGod=ZVG|6VFvVCwZc)e;P)cs$tmMZolhH*k+Q@{a~D6ga`veZ zXr?-h12R+s>LjleR;>ptpsG@CsV4H>Lq-o$=JN|rI6vsV+HhR<+Pb$ut$pxVHzGB> zsPxW7=e0WCQ3X$&5@^cA#af%u{i6F#TAo|M{$C+9Q;ahp2iB^7YcZQp=kkh?ht_A` zCfN`+n8g~7b3_j(Ui8!QuIjyWx;7w@Kmo53E)JAOw2-=BoyIvI4u^54hcQ8k%@2c4q6!Ld*}TObq!|#X z{cfR$e|P5LgF;G{oTM(`exPmz5VHmBpam>i8!?pkX(s}v-UC#k8FI6QWn-pjtX}6y z*KT(!B2|-?1pEUJ>PbPaHORSs`BMB?`K(UCdUg;#mBow)UoO!Zzr*`rp}16eN6o>E zbm8ntvF{SD^Dk)`JC7a{8LxJ1?0HJ)$w+x(`s_QD*R6vXuNm^{ghm?MJHoKL##}Mp zVHKC_l8MP%ddl3%w0o=1emuyHQ}&+6Xg+WXvo0{;pYrPNy}R1NE$A2WJIKgFEyyla z+M-n(PaOK}PYvJ(O$E6;=Z~G3vOtMnvJ1o3T%+cTUG=K%y-4xKiYbzc;l*2}txe

9sCpcY*}LXoQ@^92OhG4g3Jj{oRhFcN3id_^;~i^U>II@n&a0b#TM& z=S0hu*LJm^Ix^cWC<_+OnHlL8SG-$@<43#ru1GBH9P=mn0>U14?$zNl4RJatLWobO zohG?nAE?8%EHc$^YN%7^_syMp^hoc;p}qBC2YdbF$6o(-_*cCr8K?I~ZLCP&|Md{t zbyXFC2OhhAmD}-}6Z|X0Srvv;^-5ba{x8N|@r%Q??%p<167p#zzjNN5)!v;i*BZQS zZ3#hy(aeJaTUqVzLy&J1u{{1;d5tVj468YqV5)b+)#N8)`UXwCqe&CGos}Ir$}$ve zl5<0i) z&3iU^@fh1AulRBUxrR@|Vb0O6_qEulhE+?g{Bi@LRoKkonw3xCCu>CfM=t(8i(4rH z^NHGip2R3!P*YwN0kQtV#*93>(ObX1ny+Mv``niqPQq5VbS~*4sj*@$r=%5^VKA>G z^xaIHSriWj13H^$L~AGKKbMF~>Sc30X~~w;W-jEMbb9>o)*Hi-7+o80pS5s^bKkR-U(aY2> znTL4Ls7|e+UMGC+>)K3gx(WNB>R){T1!-RvuUu&vH8gWCqc&OiN7`_pYrAdI%oWK} z18JVb$A#k$(EJTs^T{EJWz*E2#VDBTONc}3W|^lwGF+^>*WRGwOXxwb^C_;c-w4(O ztW0Pug>YC1JX$n&M-p*a4bF@O24>b*5KAi+$sND4AvZwysaNIrj!}Eb)si$DdFp%+ zAz^a)a{*<#5qlcxzp5K>J-Do0G=)lXM;GEW#gNmm!PKNH+A!0=_x9&GUhWRnwO=(V zt2HC$2w|F$^>E`0+JlxsUei&d<`&~wt?rEv3Z-XJ=}7+3q&~_g+0nxBTMLBGUP2#T zA&ya+`(h$QOlOQ>ecVs9o1>XorDIl3?vKfW8ro~mMh$e;ev)1SWxnNaCjI&%q*n&T zQO5oecg*HhA)R42<+%$YRg5*{GoI254{pEOYxL>OOOCESb%*gPQPF%Cx0JR#Ij%70 zc9SsYL;Moek@cyv?go}#MbV>|qZCs8)0ys@xeuI!_GwEw;Y~aAvNQU+)jO# zgiVVo>LO%MG)z=>1nKoI6v_vPC^s1&JKN{J&Y{Yp>+ zeu@+LD)welB{9`vKI6jhfT4NsU8!Oj4>sLeZbU&*Pg4}Ju$KDA^{?6N?W;9}C1fpI zXb1I6(@dJ~y?mDO)7414HW?Is&+LntlQlH;Op%|0O;cCjjZ`g(#n)gfQ>dCTacYoC zmnsy?5b?_IB5vtgxLBEGcwj*j#MmTo2$oNp3~z-FR7jWIaU;(@^xm-V4rgQLd8b+f zhvY=cQ11|uH5-z|6)Bq4RnBeSRppa<77Y5#NM`ERnwaTKXNoDcnY1ad9V5;_ZZMiC z)k%>%w=9=|77CKHyz{C)75X(OoDDCOHL$J(dfvS-wceU8aJ>Q>+;IgbZde!#X6{T^ z#!4Jzh=?I5t-$(~Jcj>(Rty-ph2zZ1n{65r6q>b#OqGvavYTTk^n^-}`{lTzn+c(;H;rcHn%4y_3Qbd>{1qHiO;y@@h*$;Zr+yon({9J{1sR~Oq7aoJ&!DL zyFpo>fq2_s=|xUNe}kKusR4CTE>_=DiX9zSaS(kHbck`o3eaa#jrWpg*xhZoYg7se>h}<^$Bx4!rXTRw}cUbuSOBZsJ}N_ z>;2#!*QUqapiFC@4p0> zKDp4lmtMD($vnH$v05`#>IUh(r<*Z3eBq|fz_5`M1SRM6P$jWdveV>`)b^q(6vm(0 zBy!N?RN|R~${$kh^}3xS(KD5Htvz?4%~ zdWuz)t47e;?ZF(~Wj-`~Wilb2x$i!;tr;xzsaBR>3xlTBdwDA>P0cI;BCRB+>Vh7A zB^OrvkcH&shUN|OR<&$fHw(A+Pe(S4SQ8#5pOD8e;IbE}PPJ9iV*zOLw0FFuywnKb z+Ib)eFSZ~{4;y3V(bzhdud;b6iO%qMzB!eX5MyZlm%-5kgF%vzg!)tzl1%;*H1C$L ze{y;2Fx9G=Z$Tkg9P`3p1}X9pjLzL|Fa0jTu9D8WgTXqBzl3GGs5iQ<+YtKY=SFJ(r(-?XokG{e6Q-Z@(QC5#;^SzWo%o8=B= z4QYHI$+dh*+bzD+Y_vCIE`5(kSvlBE=lel0-wl(YudfMPo!gbujq0`z`@9rob2nMe z`c1ODOKRFu4FoZ-)0ZNddd(?W=BvB3*Org;MBihm%BlT)@nF$3CEe*1?=R*&G(AtZqC1bC&wrD{0HR9g%gvOCrb_FACaJw(`31cx`}2EJdWId^8kk%4mPR~g7C){T& zY@0LqcCP}r@0HA-_o{?G4B&g2l|O$suYX^~IFLu$Z`#zxxsUXkHllB8{#d5CGwy*HijEzzYY zORimD#~A%u{Br^Me}fTvX$;(=dQ$#)C+R?<$6%2K^8dxh14bHlmbgBrpQiEXZ}udM zZchUKclIRxGGm*Esy~<|U+6O4PzdJk<9vVpn=vqBq8WqEZ{Fqq(yGecOxG%lp3CrB z9;-J4A?d=}@7>!oGHO_h-`U~fUV^I};}1Vic$0OtK`!Ei?5ZaBx!MhRnmW5rYYo=>dk>b`>e{B< zO8Cely?EXF6a6@_qBO~x%jk0D1y0pe!5f-A1#{+|PE?9Ga#vn23NDROrVN4ov@uhO z&0ALTe)AW~q7!#->kyuuLJl|&l>5?J<$Iie{%p=>cU^uu@gg&~43eIW;I z!gLK6Yp6m7ne<7-q`)YfN_wbX)zez27yEJBA~;1CfzbCwun;URp_k^2(hoeD1m?Rf znD2cF_w4^L@c{F>L&2v{0@yqC07Uf`iUm z2E#8N!rySzC{ZozJ}pyV`!Qi+_x@wIFWb_ihQHQ^mv6zW8MCfbMY7o$&vs4B z)f?VVZz|=BGFYQ}OctD)Qm*blMi04+`SV52vX2OUsovHAuPGYnLhYdkNVz#GiNu1F zi8lOw#6DeR&vwyT_<@uk+tO}V2Ht>`U{EZU&hlc;E1oH4z(GB~PYkx%F4pwPXrpQ( z@&x_cAIg>8!E74aSEAtj8XvJRSxRId%zOE!%x$O=?m47h&)BwD8K0D;B@yE(G>R_; z<9eh5e!`kG?FH*%2RcMYmu^VJ*n5dHwlxm7I*1ev*nj@;+(PPOk7YXj>^;xZ&R#C{ z`&t*Tl4xv{{t;;2Vp-Sdvs0IyHhv;n3_ZL7h5(vTDdh07=#XIXQ-}B+6ZC_F>2v*V zs?kon{QKc(ZkS4mib$7>3NW^PE-XCpmBW`y7)_vhE!|*Aa&{7ix!S#Lg`^69Bf9DDp&!3nki;ihL$LW}6UIc7w zIR20b1&=S#LdSks9xO_uIgOIypFj}?x4~dUD5y|wmX{Jxv7t^v%p9Io$jB!yb4bJt zU}b-!Z7m57Jw$WQ4?Dig$o1=|3$J${gD*?zCpKCGZ1EVy*clD!5&G?M^(_%h{AnwQxViC(te3y+-*-8RqhYg#Ot38bUyNQ$k z4!Y9~7+DW4m?vCldSEr5Q}{eo;)Q@#HmruvM9fk=0?;6=M)ZH~VDMJ$>KBg--!;RQ z!EisOm=Mw9;Ss8TTvS9UGshd7RatBVxc^undxf=jBwskQ|FM9u&BVomTa`7g$~bf? z@oF(<)%`< zx8MDD;Y)ma><%m2A;9!58hC2?b|ilfp15U!g_;;KZIt7o-`BrBjnm!N8?6L%8LS1^ z=C|*adis$+GQN5DV!BjzJJMlU1bFH5KX&H7FkppL(&2&izLK=t9{dsrqHVLBul5_B z!QI(r%M!k^Wj}#8eqk7(kviIDBioZ3A+*bPDdyYh{a>&|J9fPh0I!);Q@+jVRMO0v zJ^y#Fvnm+;_7l3j_a==dlJvBvZ<zrhf_+&;g`Rwr9a7JsiY?{>}q?Hr-`QPvNbae zyoP>XIe!k>-&c_YoZv0}_)0n#*~U)uhX?*Q+}JO{4orvm^Rq>rw~N$8Xkp~>ZzYe|dy+qe4=zXq`7*a7u<+~j}% z)DBc0kxr(+`ysLb9L+zNpm)Lfm6sB}d55%Z-ws3DEZhtn0*3PFogc=lMe_*!ks`>(=1=e#ZCiy=j`>_u=`OeKEIQ#_p!uPr-AygWud6Y5(@>f0yAm zN_Tqq`(f0sA17)+=qV@)Jm%!iPZ@lKUSgi zxLtC9P}jud*;xPw9~1qa9&-wc=smuD{hJF zfY-#&w1aZ1)Y*nV|23a8eU&P>)kjqS49jqE!KE1FZtmY=ct|wsE$3YtbAoE#&v}QCGW_m_1MGp=<#;0zz*h9 zv3+^pjXc%s_p~*-jZ~GVUb26YEN=Z|VIV(#VK_5v!C>RO|#SK{Hg7Xzgv0rDTGc}3#8J{OPf4Khqo7ptn zw)4*0ROpO~v5Y!bAJ{xIYMT}~t*k}ctzz^OCfZZz0#H)rJas?`nt|j=@~-wv{LJwK z#9#Ks3=j`zz(Aa<@{rl+Sl)@ye<6_FZH-@tk13JY^_7_um3}SxOAtm6o4K`Bq8;t< zUl?(l!bf_6SpDNMQ7wFQar=2Uf=+vtcoq7!oDN%oV z%u>65OYTH6u?S|>66pyRP~-ILQCq*vp4={6pnuHwe{`$Uxk1oPT?;nF%QCjj3*1ys zhezy5$)PJ?dDQ)o7j3>3|KbY+!q&|=!Kv}lzCth|>rw0C*&p+f+$JioN)sh)YtF?P zWfZDe?`o4kl9LKe3`;(E!%_V$8*2+aTfugBGCRAbQTNU#orXxs+wx#|AsfjhZRIopm; z_ur+l=^%w?q>}e?>>Diq`!wUcfL?Y`K9ZfkZ}IN`FpB`ONwj_vEY2KznBTEVKX}JB zWEF-{ZF%g%$;dSd6n&|>GGOxLUfyRs}T)Ysrsiuah?!`%l~y?uIxfoV97zj=E*1^R_nb5uX_TfI4`y!v~kbx_n} zkGvdsPR~Xo>Br371&j17mBdOE`1}<0$P=6A_RuTUe+f2WD^9;5Oa6Yq+;5exg{V6r z4LusmQ4}Hyq}}dwDcIQ$ z=6Dw+9V=-(>^|Ko^zn{Fm$6<3pPc%6Falm*W&GVG?DXky4>vPr>UvdDIAE)MBfe{m zL+f=Tk6mm`%FXkXIf%O@5d$*wd6$2+rN>%-@#FR>=6>yTU?JF76MGMeDLbN^r0rMl z627(^9o@tG)brsUF)Ye7Fjj5E?YWl^Zd&YBcQEl%&LOE;lPX^Lk$8|zD$ILry=JZt zRu1r`7ftxCvF{3H58(D*9xHILXkx!vI_T0a_l;pwqNlFm)a}%@EkML9XRhoCP`XovE>ztCgG>DrYZVJ0BgxYuzN+VZmzpKhW$%uWc z?K+-4$Q#MMtgcMTKyNv6RYG#LEKBYCY}wV$W61Ek2Of5)9Jc#q2WCvqvS+N`&p_d( z4X}~NzV8ZtjyeNHF}vF4*Qz9M7O@HX&t(l_ywFYtIJAWz>qXCz{exv1(v5cyc*b2E zQa_@X>-7HPaG~yUDqBimH{er^rvDA)XO30oQNEj=Ifp*fEWoc1lytq6ZD%{eSExaN z-U{SCuJKE7h|mRhl+(F|G(JSn_?)fqn`;{OU|E~s>2%J0@@$QFF}0orzxmUO2ul%JQ)OIwIp7@QEWqdC6GW&ULP}}c5$u>V|~lVo;5h>sNP`azX73^XGkQ`kV+zu?oxr<{%1Ap66~B3DOZyJr583}LDCv&|NAD+RvOaK_f9fm< zpRWP3`-~n4-(Of?u)VaU# z8T4dkdf_fm!aFdLQMRj1W)EQFUH~Jsm*#dp8?tWW*S`QjDjJ7Q>Y)xt-q{%utYW;A z+bQ&kiacE!;0tg!bo=c4QPMb92&6PTJ*#GggT*@mG|YYdOE8GBceM#_vR#4vKzJv+ z4}-V&e3Ut)Vg=qqWl!>})7=OE_5~cn#LDG-9#^~1RL7eKRSfk7k=fnb4{+ZQUi-^5 zE;s}ABjD41)2Q9~G*-oUkIe7;cLW~?zfuQsHJ-D029UbPasxqiPS?(|>k4Vz>vHIR z2g`-VJj&MERVZ!(!fLSv7JJ;|u-FK{lep&xU*ggWpaJS~Biy&)Ah39=dUx;M{%3R{ zR2<^>pU=zLGHm8cc6vd|Z%WNSU-@Oz*W7iztg9Aumt5-7HyQQbB3YS?R$h=g#1A<( zUqMQu5@6IB8fvKJer@|#4_Aq$rD`}6riFyMukW;WsmH}Z+?v@WO3I@s*z!J|L{iCN zuosqt_RZn!4Ax;he!2P=7GFo}tWvKjKTHvtsrEJ3ARXav7eY};LVL4dCN&;&lYl1b zzjGd}Nt{sH{Ct$q%wbWLs_0*{W9RNF3Ymncf@M1SEY}l8L6kV>M_9t*$6+wgZjkmO zObN{V@NVJu-mog3ij=Q87jIhnc_yxG3Y0@(fl)kwSnt)W#UjQVUS_}O>Towd$7L6G z4fpjumy3t{OsA&>X=HGeNeHeNFrdNX`!0}%+RE_R$xst`(e%y~jVMKY0&HKsZW-V| zgAL7nn-xK^5hc(8yiDQUzVd-ch6t|{9Pju1==_2;k8kDe`y>3cD#MNK}ge50|`n1!=*?$u(jmz^;0EP1z?$N zuj1NAi6yW)GD>>0iv#V9Fe^NCt4w{qZnCg;>0S|%Qo|e4XuJR~(`h~Pf_%%+>P)anOIMxCFI_ z%iiTG+dM)G*TnzmwrS=^vGtn32m#@d>PgQZP& z(XzWy35z4V;Ysc1$+hq=E5UpnCe8z~O>aUdRjDq%dG5sOnN;_r%`>JZOfeD1CEFr+ z6l#3I;# zebO?1y$$H(z8KFKiFmhvlBLR-eW2j&btY!Vdy{2=+M|pU;77uKoe*bExRs$;@%4{A zyfPT2tL+En7rS4H&Cfo_iwqOJJ9og1#xI1%eTlaiD=2LftQO04-2D_V1s@S*!#2qk z_SuIR_ve7xU0bOh=VTMer85ywGbxW*Jw%T>S4E{fdS~#pU2S0W;{n1n#D(L9NoPR= zu?^bH7Rp%Ez1jrB5T20;N4qw-@k7oUh@Q{|NoKE#t;Oj-E?^xk1^mrTq4sG$%0kGm z)98?*DDMFG=DpV^9N#0RsA5}&{G{XgVsOvo`tuaUHhgX#D27=8(%;vrb|=}X^f60p z#V%Wty}!UjS=>n8UGirEeT<-Ekf#vnCFNRLsv(bDYxwmR`puw9;)B~sj915zljqp@ z`Fhc~&fT0BjTiPz_7JWe9psElU5-4D6S|z6= zfnoDE|DyJ$w-e;ZccFDULIGRrZz%7XX=DDL!J24%7aXPwsz{yrwB*j&lWf~3_3UW8 z*+v6Ob`|ruytK|T)#dBfX!&cW3OQtVB?m6 z*~4)J7@EscourelUM)K{d)m(dY&Xf;a=r^{_mW3O;W``=F!F*$E!ca-h5(hwr5jcK zdz8s@x)@O2J-RZ{gqaBA9h>i4thK$IpbkL{4_;%& zk*8m@kG^}n=Aw-N8$N2ASQLwmPYOGpWq-;2;m%ASn}Or*v!lmtjNoR7x0hvFa;W zRM|XQdU^_Ely=<9O-*3a-SHKx>=4Gs08|S4RA`Y#Z*ewlK6^_4XK!PPLN16?A zl5QB!L0QbCUi)(mp1Dg9PR%(6?o)cGxV1MPuja8=)8T%V*d9=hl-;(gEy>TLAILM( z?=C0DKSz4qZnWs+rPc7EGkG(hsyd}tS%l^+zWU_pNZbuUlnO)l^9+fINpdA(=6h`v z`k)Sd^AB?><}B-XwNbuC!8RZPp37qx@+1fHgQ7vlVkY{LeNTZWFwzH<&kTdEZ|tS; z@Hm=dJ*unFL*vNf%P9W9?O}j#9lp!KV683VP*{9nr*)SiHKP`bht)tawbeTb=)MB5 zd8p%onepv^I$tWe-2ZbAY{7CLb8zXAXC{~{%SfhJ`>TxaukCwTK|FnH=#@xtsjgDW zCmn?^>y5H;+$N*`U1pdMYn`HXECguD46PYdp7M^jmcXQ13jeaso3^NC zE!_zKn5D*WF_A6O<&A!uD40*%zNMJxNTEk5wU^KatxU|_v#6&aYg(q?t;f6QQj3+M zio2ydfg*jS``Hm97Efi1|19#EW*>HyP0e5a$ZM!0uz_{#Z%gQPk56BBiK1 z+2(7HC4d-3p&{CD0DlgxW+sa&==6D2x+KSA-^jQ zT;PqaeV{-VpT@#kX92t>dBF@USZoMntlM+o_{{(j{}oys6mJnUjEroYVk%(a6n__W z%2B->>|F!#sb8zIZeaJ!QJnDvf##{}SKEYu#fo$6` zqsh8w(NunsD!Jql%9ovF(&N5fQPdC?ZgUjnn`OLL8spJt)AD{S+C!mf?KkHbxxy9P zqT=Occe!{;9(k(dnR``3{&}6e^~!Tw(bepmMa7Lw6t@$<_EzT;v?H_;LMZmzAnB+Uk)~@%-Z+WpRzea?z>^pg_nG@ zW*{-^z;Vdg+gJq}e1Eg~c5__Vg*ua^o-SD!4QkQTS9hK2&(!(o(#9p3#V=i~b$ zy?SLyr16*IXZib0(w*KvO=r%Zb^0#;ks8e)hx$g5~Tf#C39&Zl_M z2FF$)gp6XFlYOfZE&)w*aq)Ryo(L7LoO*^Ev>0~=56?488XyDfw?454lWok=!xnH& z#O;GNY1aK2o>#%A7&!}7WpidGr89RXRkVynmn)jG+UfoBkv))`Od4O?SppD*sra$i z-H8q3jwKBOqZw~&*aItX$TYDhF2ucJg1!rn42}$8B;E)XXFLkpmbqW^Lfvo)77vuF20MMj z%Q!=)`g|Lj4$5zE2Hi@N>ne*xJcuV6zh`G$rQnKS#wEi<`SHz2mJLbtv+J*{G6-iy zYO$5cEasuL3y$55j!gC~mN!GxJk9x^R$?pB>}g51ruefJnQwC*NaS5XaE!UNaEHH= z^%n#A#s=O{)w8&ZxQ2|PqvZWZqja4SUubvdSz2Su#M6(&~Pp;K17p3g;wg!=uiVH%kzvjG6Xb5UL zx206oA%(8Op&(+Ti{mZpl!E(TfCDuiMa8-E?~f4>&U<#pVHidwNAIZXZ|JAzCI2Bx zx@icw49`IO`bGxsi+X&g$r&cdM_t4#b&YpTCIf}_*!Og7bvkbq(b`O=515_k7VDJk zQ#m%&HlHMFGao;eRH6oZb%JuPJT)ggl$gWZfae$l740k94wbhR^zpyLZaASlk@kFH+Mz+MB_g2JCY+mD$m3FN%?O!BB*;?QV8>XVUe{EoV|o zPMt`L3}%sM6NJb?M+(Uv0gb~~ZgdSeE;L5t`z+>i*i(cY^f?ARPoS-g6N1GPKU@o^ z2wGT4=?{4JR@a@h%f44N`?4=YNMse^KGt~S&EOPR@KbFc!kjNRrs)5XMc@%>C@4?P zx$h3T5ob}fS<59&u|kpoksxTg&S^TTYt`F;mz?u{^NQN&HhXL~P1rNYf$yn_@#IQE z?0_<(xr1}-QT}9k?^Lu^+GVoynI<=Q8R|GR42xJrY}LSNUmK>OnTQGj(Cm_-=j<=2Dx zE6M^ar%!}EXyO!y$Hi8{DJif#l5^X$pm~r$@UE!dz9n`PVIVCS* z99(+gZF=}b4W_bTxm~kt-fk2XFJqTUI2NHAj_-5Fjlpk+GWM_YyuPizp{O^d=h`|_ zQR0|=hPioY!Qf7)`1l{QNcfuINQLqB;9!6hJ`T2PoeBzBU#~Vu!aklx5Ei&AAtKYA_}(Cgfs3=fj-;YX-fd2I8BVrKUHl zh_%u8i_+|r@Gf^oHD2G(hmpn>%YKEOwkemr>Y7$^8ldYuuk@ZbTAQrPnk<>HLQA@2 z8ZzEd7vr82_ZOw-h!CG1858sYZ96Mv>BIO7Pb&cr!DhRwU0&2t*P_$I2 zfyxGs=H)d%?T*4+PV%}Ergz4F!OEdv4XXR(LAsr$TXmTF2x`~ISHV4ePGQ?zW%$!=?dlHD4!Z7%<2eU;K zV8-g~3^+O(Gp-6X zr%>!>-9s)&a+0Y+sdKEU*hiJ&K!WljkI?9i8z6EUZ!SQN$t|_!sLOX$zP8Rgx2I+* zO1@V)lIoAeNn^&D$^e+Sg4frT9fPf*LS)Tm!6Xse(J9@JNX8UJg!jbcBB0J@rN&(A zC$)}^WY5f6R6VlxKT)_ZCd6dG-wA=}-~THU(cvm)cbT6efBhFQk|U*doZ3UZWWPmp zq^<=9Bj&D8N2SYydhZihPnPc z^;3>EzOSJu!naWb`&gu2@vj_9&ii%>Fm23{GDVIz zNe-Io@3(qq$%rl*^_0PPBPzU_Ai09MS;H?HU7y)x_kA7AFpgV9z4jVi-_$f z&8sA%lRCW&Bxyh?lvubcNk9`Z+l2pP& z-mSM?)2}Sl9Yag{Gnfa6np@X|LD6qRn%l1uJME^Q_Gg51Cq2H3G#!L<)oc`AFe}*A z)?cK&HNn!1+|Y?o0!h1BaJHeNV73qvNHE;=8z_hyoa`65%?&aq|XA@n*%XS znecmjZgtDUbmx-yF{xu6cFP|{&wyY8I-dK;)=+Y6*(u7Alk6P(Y!hhS?>8~@9YZVo zwUneJUNRhE>T&FOnvtY^Rr7@DYHSF#vC^xcSgSoS7rzn56tIP(et> ze!6KZ;VM|1gY;tJU_9y3An+3L$8IiGW#s1rF(Il?WEQQ8I708O4-YUrV)|-tBf@x+ z4OQajpQ?5&iCZ_Yzc&@wL?qM6g{Xb3>b*0yL*2wglLhwT8phN{9=R_4H0q+GaTiOM zJ9EoywI6S{8w&@wVc=4<=82bZk96Vv+#$O1xp~i<0Ql zgD$?ucNf4#A}%i%O!%w%^G2Z>H1dkr9}HMH2##_f&(GFxfi%GS%)_9<{*S&UPQrdK zXJj0x3YtDj{OP%b-6CE}c2at>3xOj0MTLHOlQ>xZ(r5Cq(jlj=>tX6NLj_`vpm5Dt+vEAwaM3u2 z>Ahx7`nP}Mu=VKC3%7aKE7sxMBUTMtjZWLhu&EufjyK!d@VKZ|mNc|>Y3HM$)`COv zqUv*#`J(KOn{&Fb`9b2smMb5##c(LKzYuW5Ap7Hrb}G{@jlD3MebEjti9>*#R?V|4 z=0&eRv?O5spR$x3)GwIL4utF!NjlId3e7bI6RAdeKl0QZDnwoy)Y@J1Th5m*7^Ter zOYG(={tlVUaITt9*>4}3R?I5M0s1!CEa5Ac(250cSsoWP%B1VTii9AK8s~9T4_uoz zEN+IfI@yTdEPE0-GjxVoXD69LP?l*^q%3br7|*FKfl>PNq5I9VT}hcynDCHal0bL| z$AuMPy~dq2s3+>PDIuChl`RuVD#p3DFfB~GXHPqdgtea4b4YihO_+382#`#UN+tEk zi?K4W%%Mkvwpw$b8=+_iX{6omQfZ4sSmZeMEx-5B_47k~h`xj9Dx~>EWuKey{XC<- zgY`=ZQ!qVH`Vf_ZNeiM1SwKbfyc)0OR70T2RI;|N%EWrQf@?+3O(?`cBr);2r=w;_Tlwr- z%Q8$^`E@NV#|O5d=WpDs#bl|q6O~*vHG{>`%KHO`-JQ5Q-?4}8Y8ob|d( z9Lpy_nMVTw=5AgNGqys0exbQV@&~eZ+FdLxQRe7eu&l~-c8)XzRAbtk#l<#3S}z-2 zELfg-<<;Im%2N&uszWJi2yQ&Fzz@&TgE(CG`8BPgyxcHd>kowvKQ>Vj#=}j4jVWp(;2J3F+Nu9>O}M5a>th9faZVb}gEH%;skwbcLzefs>6K<(Gzx@7WhyFn zjX<6A(ikN#SFm@O7by4M(1R?O%AoLJrpAGI^+^-a_r#X381mbD#BcqK z(q^x_GmO$c9QC#s(Rgv5{E*dvKd0$jLto?Iq zbc&5-8D}G~M0Jw|xq={n^VBVA;&feeEHNF~uMEX4!^9k8u1l9AMPJXIHae&F z0OeIx*sL;~U(_&BXmR08A4t

zkGEeCFSfsS!9`L@)4x}E@R~H{*^B)ijVUW196j+4xdr~9v}FoN{XzQbm`U2go96kT z3R17MF~WG7C>|KKKd;SBDSDV`{2*E49r@(1k&*mWOx#LoLQ&d!F09TWT}iL3at>sSjUqmoPIP=k$~iZJtMBt>|LJG1)CPnahzX|DauVn2;kQy6n^Iz zHLW<{uRcu;Xsit=ClCGiI%AZu}=8kNfDk>pqW`W4x@i8h`^c?_V@{ z(k&I4T3C}(^+C4<{m#?>_m1_C$@YQD`xONe7?p{~adQ-%6q{fA^eHY3+3<6l9&ldn zA-Ga|NLg7>Tn|57w3S+D^bpnGytrg6u5C*xK8ubu zcdMh_s6Zn}9AsI5_U@GbTy|c33v5zFj{s!$PYyx?uF=;3xV=Gz4WQMNtW14Q7$JEu z?z~`^t;hhZkH^v6i@>Zqp9-9Jev{(#6S5qrU2bS;?$7b3bhS#uYCKS+}Wx zQ)KFusxY`Z%shlE7etnPmg5>YACj+%3|--|NVUmLaoeQdC6O`uMkI==rWNRLG^XKR z@@7Kcy~y)w%V4lKvrXthS=8KNgmamSg1}g37+K2kQyO=-1`wHWoQMkpEGLpQ&_`!W z*Cz-Sehsvn1%|H5XPi*d5}#QF%fuIuJ~%36h#jMl4#XwZ?l=Reyhk={V`F1yFX{o| z|3MOIKqIV(3}6ilvS)~}ADd1A^y4J2^Nnllni;!KO-m%ZQjLjihMNm|^ajFOqu=Ts zw-7*Mx!T}*KUNR}qO@yKhXn48VPdO$tTCKmwU0!ru?)yMk59g0|MX+#N2LI5ZJR>K zCz#(+2mF7JWxoe`DDl1f^q`TG?T-)AcE8-x)t!BwwHa@U9|+wX2r1N{d{ArlX5HpW zau}Ar_V7H($1kg(@iZv31kukdhj7iAb&JwO)pb1ZE*GTMWm7b*#$U zzJEjxB6{;f_sKnR>i4P7k%br@p!H&jX)pvVS-Flr@GgJF;;dho(6Zj`MoG))_iT^Q z9g|o3PS(%&XZ4|>1AH5&(3{;G2=MPp=>M?ymSI(`Yum6QDxrXYfFdQ`NH@~mEnOll zATdcnLK^Ar?wm9z-AFe`=LBh()H^1uwZFahyO*x#d-l)wp9eo2V~+c}uRPE5x=tZa zRTLI>7%k_1-NiH-^U9#UdabkrpNZ!kWfu!r$Yc=nX~GII0Bq}HgKU>8rgp5nJ+Iv= z3Wz)C={TBH4uZ+tF!7K_)itE1mwo12c}*Z zCqHcdMZQhM5DKI)a)rB!q+wxdRB?xwm(z2{tOS{YPsk4y?8NxxvM8P+W6>atsvn%x zukmEzL+50 z_q8knA%*0izyCM5CPI8gju*x~>8xlG_x)=Q^k*-;zZlht2R8-DQ|U7zTEMosLn%r8 zY?^15`@~T#jT5Xz<~%cDjhkcC>z}A|t@D?&^Ji6_o;)l1FQZ4xXk}IR9qj;&M`oJ_ zA9OHeyBV22FiF1&I$FFvoP1SL+ykUd_mMOs_C6mZGTBYND zd31Gmua{|H8!JueWkmp8Ed^fOtLPLODprN+R)&Y}L?@D{Xwh2svGnbN+N`y5wYICh zdlviEPle1EW=8W>r&pqNb^?4c^1J$~=bnd8NHy0sa!0^GE3rI3fmw!=jhWk&Nw#}Av zZYNw;RcM}!&o=vvEmFn@WMg#xQ+WpS17DvA>Jr{Jf)=rCTe$$G6N6tP$>%RI+sRiO z$x=l4M_Lz`C-YY6B0&;NDwux2^5qzATazZjWV9%v<*Y!V`=;oI8+C@>u@@5^yl=08 znfJP|Ikt{VY17<*`<3nR2~@%7c7aog$~E+e+z|M8PG6Owb0>{!-in2Vg;(Xo z9;|JdOY&BbfzMr09>_Qf579 zETJPqG5fyd@mxc#fVS!7;ZOQknquDQ5l5@#SxqPRYTWetm;cguzVO40=jAcb17yWh z7MPEvX3nhl^#0I+=a8WjhGGXrQPO83buFeTjcjxnh&;S3PgA4l${z;!aME8mBMe1Z zm5VcWJ#<|5gxzVrsVXZ+5=2jtzP&LPXS=vht63SldrzMV&J7&SR;&hgDeEqa#9}#7ja~wWz zs=y;g(Vqo zXCvbE$0zRBC%%xpO2nl;Qi|{|@6>v9l@@CV%M=rNv7KzGu{o16+n>EPkvU3r@{^uB0Ss~rQa zB^oj$ zY$$5I>ixYlqSKoW5_e~!htzR zGVK6am=dos?@i!f$~F1A)vT?S3;ASpPriUh7$|O4NC&|85~as1@j%B}8oB5>6-c<+ z+8TK+)DzWc5lu&eVGs6Vx)<0r@GCu1XykemvA0&~18HU$@@eEJ z0p!eZD!Swz*_%Z$d9uq;Q(OA?Xdv~|qnh1ETb09aU*^vv7uPQ$t4h8LK-eG;g>@>YiEoExc1W>61Qm#@j`djQ6;onR|f%?hu}{;-gS zrMs_+JMg}&QQmO8nA1n4_;xmnDdy|fdEn4P!V3Up$nePzUkC=u@S)4%g>AZqz=o4U zcAVcGkK~{L@?nB+#F+Uw^(U+h3Y%~Nj{LMIk#2A;pK?I)wU*)- z^aRFAI|h1G=veq;)0!h}KKHQq+(lvQC@-&`LofVF9Y;gf#=E2-KYy!> z@|o*V3i+#O{J7;Qj^vWq&EkXQus1|#=W&O-K{KB3SwX~M? z+6@SUmf6Y9toCd5&%U-nvZzUM`Sq2;#SYchtBYyY-C0*)iS^i!z7{R&d1#}{SXrS? z<9If~|JBC*qbO!zM!-~*V`WB&UZs%~ms5%JDhtU2vO1t6R4l1on5dNqF3x{d-1vb? z3y!#Fv!K49{=-AHlrKaS)M#S8kDTCuT1*n>=_haD$A5k)!8G_ttH!fc-J*>Bb#9WW z?;-HC=x~oK@@IhzuML}oii%62)o_nP0lyx8*1D2nCu##DM@mFm!;ChdQmb~_G}KX4e* zz3#wEguO=7JTiLEQ~G6uO&gou%zTeCGJLa{TR`L1(g>q(EN$n@;61oZ!PnO^n2qIZ z;tNdV(s3j4iX0FB>iPifdZ@?OI2N<*)1{EAGREW8^Sf5!aU;Bo0PWDCJ@6SRN8>k! zoSQ2^{UbYlma`zW98p~TZtQUt<)u|#WBnLaVOkTtw=2Ty9|+`V@T#t{Z)MF%ZrZoc zHR@%6lAIyrdlYTR)N47c&XxWEyMt(F!^8hDCiug?Ziffnu&@XcJE<)o zqVNU)1sT}+#4?`IsQU-5i(g>%jnyGt+zrhsC@p^`Yjl5giePm)wxFo~!7Fw5uWe-T zK7<~G)tfyd&icf;R`qn+V-t&ZROF-HATRJAwItn5EjdG+{_w91{*P$}1-AzPlvX!0 z%cpFHH+hFPQDflyIKK!CsFt7vA)d6*+@2-@mf`|^eBGOZ%=`v|0)sL%_`Dvf!mNTg zhG_4Pevc7ef5kxX%y0a$?iZBNxL50_ZV)h@o1lcf`edqXMIINS8?I&sRBCx;6B3C3 zS7G=M3rqP4UlCGa4|xMY>-i<3~W;C`e8Hc1=h|{pk4C&U>MH_irwY z4?E0!kbROS#5Qq@1EN{Lj)~pkc6#`!w6{?|bho|_Edq;vi5zs|q@`~?5_ zD>VA!aRh)uG(e9Q_rg3*gP!E6?aIQT-2*aL9U%Jandtjk4-Pi#` z1tR7mS=FB>Q7CtFw@Tvv@hX4&@vv@Z1f0k1Z}lEEesuf)uOq^LQ`R9H!oU@GU9#IN zYsV^9`KsMZ2a$U zFU%@lQ=(CfB`u~riE!OH(AlQ)_SU~Wj5{7AaQyEhN208>Ld@BT)VSLQLZV0cw8@!d z6r%K~rpRA(*cx{xr$c|H`}Y^g%pV37yVJJ3&BaVRSYKafxU8tGoQ$H?FkkJBy~o)L zMA66VBsDm{@o=z@`rQn!ZA$S4vu7CqjU~0MsvFPYcyb#&G@MI5ioBooU(w|;O37W{IY}yMNq~se|_ElpN;=58$W?e8xxBL z_s)L#T?~O);nz@-+p8+Lzto;V1dDem-*4>P{#S9c5x{ffzS0-k3I1&~hg~Kgl3S01 z8%DrJ_V~tAc$2|AeChPBJPxoGIlr*567bkFi5tIjtT4ayh!Sqf*TU4athToHZZex^ znVZnum6Mq#Rkt^taq0k#I^wVILt3MZ> zN5NdRaW^JT>Vo=|QW*CrPJZ6!Y}Uc@=Ee5@`bF@@L8bq~LGg{p-v={sXJVq4u7xd=qH^}^j64Nao2KBXqGS9d;S&WSIV}~FN+Xs`#soJ! zQCr*vwezP8?GGPI75&}bq738mWhFHXmHZy5IhKq?ej@42WM#JKh6zd9e$=XW7h zfbyF#T`I}HNMWihj3Fl zrNAnu#eZqn^Yn0Wat^WieC~E?51#wIg|MR|yenp5Ps_>4q1cQ7%;S!`q-s7(4Z+Y4 zGC2*_-n`j?FG*+-cpKEc7yG0@xh6~nwC}b(9i>*@C)}1B6vy1rIZ_MsfVww=`=qT) z!tecu2fyTNJ-Yb#c-NR7{eUibAOpM0EAfyszF?LUNf!~LjYQ7mDQkT_I7SdB)Qp${ z7p+&*5Do3MT-2Kkp!%oLKnuxz5nO(o$+yj|=;z`JTNe}p8yes4GT31K-WndDm)|)uJilK|~QSw7#;}*#BUwqDVWb&m>bIWv1KQ5agQsD0{vgs3hmV>pO-% zfxSZs>>c#}Su?$Eq!EDe#7)mV6~c zkcUwU0&*%JM}ZMd${iI3c_es|XjFP{y~8aWw1^{W?LgF*u;M=8DNx+6{7V}|Ek=`j zdTL5)f#C?lNGpa~_cp!$_0_;ZfI|=25GA5LQUoqk*^>ak27X`wKlctWm}-?nkAPUL zm$72!+6e_I)}c^;xz7&gv*6V__I+DmtTK~KQPGIC9=weZqrQ;+ePYNci1uxpz86r{ zXNkj+j*534ZXeLs)c4468AUb44n8vtSc6qx-1u(%|K_Rw;}yoK06NA`bvKY`Da-Hb@O0 zzCX#?p?|L3q2Gl3eJe&{*?zkkiEAMSDf=Vc;nRcilioO1XCp=5AUiXsvyIWSM5V9V zz|k|L>z8~~wcGc%yZ#iyaX)ra7@NjsuU63v`0jEq|8fTX&vx+M5dAe^WOlS(Ddz4i zZqAk~wqT1j*6Fq2NYi{Xi{|P**0t7fNX(unwr)mDr|=zqbvl8!=+X^8gcQY1h9+#d z+;eaxNBQhWC_bo1IgM(<-uEYF~~l1GovP`b)`Pc z?S2`aa#CwP8C%@7^`oqHSK=mfh{~+a-3!IxA7sF_SZo=-+V8BJSsWI;K4fCph-at< zdZiR_9TARg&J8t?-83YkB5x{6gzj3V><7QUl0dR12kRl-$)8c>pUf(Zhoq9@+ax8S z(ARRDSCl7~nA_hK3Gg!qjMFIHV2*gwRkjYtn{Ms23o8e`z64W9VTm^r zik74u(h6umG53`O8Otb$gv(T^#*Uq7`q+LVzJGXz}OxBGp#Jbh840X{OT@t6oP;2azDSh+==HvWBEN*G{O9F_#uT1 z*M<_;+h&rj?d=lU>G=xf;$jKpzM`f>PFyBasapDn-sC_K;u>!2zZcDICZ1#00%Cc# zK>4YPva(@|mgSjtH;QrP=tiE~iDS7HZy#ti4r8x(bd&jA)45`vMIJ^tZJezbyL~Z6 zVAqn$P^Bk=bW$gsmYjuwXwG;lNwE>SlCYwnZS?G(kc8K2G0U_T^#SuPgvL#Kr2TRL z(6yOhCfDWCSR)|2bh0kDV^1Alhcedf2Y&w8KROFp&1A^%MGgnyg!>i-JNa@QWKhNL zG;4^2bAP3rAtj>N14yhp6?Or>(_mMQ`7>DqH>A5ZA-gF;RVr!+y_4=R9y}AK%hxS;^MRn3N455rDrDsQ#E)WC z#o5^w#i0#I{}!O<5imMF>b$_Oko-;y$Q@Z&*`QZXS7z6qLh_fQ#<1w&JICEFE*wEQ zNZr9)dCj14(<+E_ow?URH;c7YO(Gfwf!`>ke_GkVELz%nuCAYlLy>uOTY!45mW1?< z#xlI}{-Y@BhWgZ&BzK;b!Yv)??A# zI@0tFi*0nC0P}m|3cR*;`~D&La0N4DD`!z|&tdbZ5-{^BY>C^CVJ?j7rJWIQzANE}I?<{s?zwj#VpR%6i z>^}nYdr`c#;xLLiu*p7{;bhmu5K*1*>%XTpN)+*IoI)tI9TZM&h$N8NIPw3bq8fFU z=?xV&mDsLlrM1`C>xwiU6C21fr3)=vt{O^m_G7UJ+mmamYG(Q8zDdwdXZcBWd#24Rc)6B?yn@t!De@iiOKf==jWA*X*Dif`$5Myrt=6w~c4c)<*$Xr|E2NBug*+ z`rHoB3C=k|+#2i-dLrkz8gmSYqa<&U^;kt86RfnE4rfaZtmilHG}J+i)+nXdSeRK( zkMp{zxQtdQSsmKDRMgdDt%KVy_RZ+)u5c}e!O|OGlkn`xXW0psEn7a>Tg~6{w{$93 zifO85&yT&RaJfti674o)H#mGBfSN$|ZRN*PxW(BW>EJF5^69iQV`rIEE7^lo3JP4V zv>AJdtoNJ1{ji*E&zhEmk3Z!g^!Vb4?W4T^9KBkrB5RLnGx(}QC3 zmkQ7-^Fs(Js3~Lu|4yPON(hX5@2ib8B6N=xIFI5xlT~i;LMBY?uQt{=Jyb0DC9Uoo zZLwLEJdEaboKWw$|Lz=RyL_6Uo|u+9Aer6df~4*+L6T9(NVf4bqoLxhaJ^ZrON-I? zG$4gFykeZdzT^FAvHFA2@{b|m=!pn%MVBD2J0~=amBMB&ct#7rBl( ztw(Jstw+zuQEl-H81KvSvy%-*wyH`Hd8G@zjqFcUn>iozKf*g+oMO$lO==+NbTVl` zHdt$wwwYj?>66wT1`=4t7RjjX2ShU<%NIx-HQzvHiei0K4tSuIALli*P;JfW z9buE_#m(A2Bm<`CYm^XcfokVOLYWN#@_kM+vi+%@n2SBaaNwn`TDjeY+f2qeQLU(1 zE2dZR66abHg!G=THODGH(~~rMQ{Z-~R-PNeofDKtf8uIiR~nEl;G@Ddpv{(mi#QH? zFQwO~6v0;3)vu_bY!rK<1nvgC4|jZ3kO_t7j}4BLNl;pdQF8QH@;{qa|2(V-(KEeEz;v((scWzs(6fSh*O?cL}^I0o}qV{GTu0++T zKa@(KfrVG+FoB0UyU{l?J~qA4Z#(&FDFl2;x4ja!7M0QPNz0+DlGXlDjX-8!X53w; z#m&86Jv+gqLz=T6gdXNwvSvP;W!LC7SYK{&d^mZfmedu+d+o)?I|$<9nglTnC$Ki2 z`CM*Hk~X>l0D1e-`>IYvpSYJUPREi@oj~Gs%i96w%boJz;h>`sN&J0H5zYZ~Hf^`` z-6q#@l)8h3kr!D64xT5DtOa>fAi-%}RKA*t=~%mF8ZP6jm+mveI)ch__NB6B5U+_BOk(OO;8$tecoHL)h>S;1MjB_pi^?`G3aDD{{M64;8JAzoc2saj zj1W+h^ftUG#E_#5!d18AO2jVBh#+waIIcU%#iAF8Uum^Jz-YDK#BF`U$!qr}5~IrK z>RfvR-kP4Be`aCIRWPZE)pEC@LnQ;=8Hw`Q(I%GEJFVgmG$i1FtiAS7!L+PGGABIcD$nv9$jb1(*df52yK9lNd52n|_M z5M_9Fl|XhX8IUFqWm}vS@u(~b=|yWg24BZhWudFw|Dvp0V8gt;QV^asU6I>y_O_CR zm35LhB=c%a=QOHZt9nY$1b5CkcFPt3tv<9Rjr6UdB40KVr+xg%<8P!{5?%mQ0ggsU z2i~amqMwHg^2I2?V%MW#Rs=&xeMuyw=iOFN3e6_R_9k+18KTU@(;+wV=jVN{O_hiS zTBl{|*;CdXFN|>$*vk3v58smQP3F?MycI)_oOQakXk<6o^xFVy5LAyM4=)1(fd})Z zD@MLTgh(c5Bm3Ex9OJb=la@3cW&5=7zelVNBv~D-^&WIUGr>OX53nB`Qsn0s9vo5Y zxK1WH5|Qdx?_W?eHtRJm2$@B$M9%G$%|rld z=1@K?MXLD~skeB9aUmL~Vp4w*FZFQNuH(;WFKu*d%C8H72GrY!&t@AE?_0ei$}mDp z!CT{w?FyermpKG?`OT%xm0>kan8p(?V6E6egw~AmXWJBA_Kxf|>R4EgbAFfxP3~b(nb#tF zQ+x}nkJWOp3_|^O`WYjHG9j~BL%WWGR2w;I)Q}pXEX{uR1O6CEzrTMH$xc|Oq@k!&u`W3x^^18ss4e17F`u%7A`=dnAb>i`=d4?AlOhy}*?G=2&gS zup%1Df3M~Kc@&KP5?0m)$RqHpf53r2ERI)$3&HkFZ#2rUMn4Rn zArCk#FvuRRBq4QIm|QJQyDbhxzS}a#&SF%p-5uncScSw(r&3teU-)RwUdHUIyU6yt zZIInGZIke_O19Z5Qov zDxnr%$Ao(G?t6jHb8n! zaX0D%g@+}#rYvgC<(&q+a|ismJug>vJA1_YHOB8F&egi@iAiW;8$YSUYn7c8(Du1P zckY_j(9B>N04Ztg2xv>FVR3)7u+wkw)$Y`h!zwBc%|xG|r2Vi+UuerL+@dPd&?nC9 zSamQ#Hb-Ql^(l$DzCmEp}hS))t;OTYAX8^l0 z>8j|#7v&$hHbCt)ct4;Zi;Q&Uk!v`-k+gIl_*AwhLrhQ(OE>KAbx90wx+LF#7H9y9 zNykp2eTQIfXlOV&zFBmlL#)+KZc0Hz!>pUlx$I>Pd9q_!qTN*NU=IoY{ADK(*ltY) zm&v9=>w0Vp<6MZk%6wY?gx6lD*7PD~Z)557+aV?SL;}WIMm{Pte#uIH^mIP1w(VRf ziuZ=1FOw`s%W8i@{7(KSNF8_*IbXZtvBq3yj_N{Qm8OYk2w$y+EALaFZom?dXg@Q= zKoIvL)tlV8r=_ymDiYov>AV*uAWG$x0WXY>MM|1zJ3mYrqAMYOj|;$lU^$nrrG1%r$k|WK4J? zd3xKy156RSI)e`t7}VMyrcx_IjyHPtfR?!5uq!GJ7(B+x)#Y8E@XFQnxfaoVBYGP5 zNpO8lpGYu{9xCs92k7(64`}e#-FtE>64Whff9DD-5Z!cU27%5@8Ftc#U`VD=o7Ryf5W^*tYn$|%E>|1pp*GA)t9Yn$dR)ib72-?elTWQ` zxM%rZh<#8|2ZG#J?QJ?boGQ2?*9%dkEVFy0>cHK!z2|blI@?uRmnd*cm22-1@ z{Eju?hcG0nvEbcm+Hn9D}smr7!3Er#gWr7{q>LSF%GLaT<0DJl)< zg~B}6(+Hlu3k>jnWwh&MCAN;iQhOkf&W(#bV4P6)JueRhMC9+JSJxhNLcyl(4L7^$HpMk% z@vRHF`MnFimjji{vJYx@8~U?E8%!TSJR>a3f!#_w@`;tUysWl(Dsec&gS#=U{A`@5 zYBO9h{Tu5a7Dy8x(%o0&9s{vB_fYzdaar2tBio&ZB7<@;QG1>})z$(zRR-ZFp|^Ji z#K6l-pc9IJ#*_}wF+U>WAk`0#q0JyP2O>IdKMx7BVjXvpI87#Ivm8`lTNTKY5`+6@ zWh*BsF_|p3O8+a?z z=k76rUEhpe|9+yJb+)4hWWo9@~Jc8Iihx~`ZjeKNKA zhRbzlLz{gC9AL4wqjh{JDXRgil2<^;{gtu9Z=p-G&JNRs?)7~HJ)g#N$rDY($zB*t z+gp|!(euV8DJ#j5y&B^Q*xj>8_X)9qD`J}A5S`{-8#M1Km$ZmSCeA%P4k!Ze$^0Ch z88WZpeXjw9uF-Q3z>04xL%zCw4rilT>PB~Fk`*Ahlo+dUZ*9pYFwV-@E>-}n)qT$6 zY~!d?v^dlHtD!CP-kev@(pZjk9QOr)A>fgA2fijW6lew-I#LAqFZOdDNyRU;ny>5- zOv45?-^lUz#}jROt?f5BqM=JkSFpa$D}NswB?=+Gbdvt(TV8LXxxT3|7tT#Ac=H*& zd|8B@(78U^2gp0K(re47PI=R1EWP3o;Cx`Ej$Wtb`c@(%V{dlFO9W3wh`AozJLjgd zdg}R3YE2WIG9@ya-TD^S;lq>xeI~r=a7gaY#S(_%hQ~6@tE&afEq>o+k{7sbYlbnW z6jRw8AP%PV(PfC4`%fdp*}*n~btaGaKaBopReT=b>_Mfq-OMHPK@a~tu0jP?u6#`7 zGLDgs4K1sgM=ZbkDHU*V=iOXDe0_~K<|>ifc!IJ)e{7_z)y`&xXaXTUi$Hlbz-AV( zHPnhlm49}GmR&i&D&%QAz`J}zLq#$CM!U3R%DDg|-FLQfL?<5`J|y1Wek#33(F{k( zhDb9PI{QH{$V!zjGiQxO=gB$C2)t3;)d77`#bYb;V-l*Fmm&BZL&%ZGJJVL^bhHV4 zuE!ru;+fx%)>99v-0khqE_C@!(a|KH*T9t{K3bWwm{~d0m>xpa8mSVPdjp zCa6oYK%;LXgArwS-`T%k0t?3n+-*LjqEy;wL4OH1y39 z){4wcpw{FQH8MatqOjR=^b-Shy0&ktE|HAh0LeM`{TF%uSkA^(c=G^Mq>0+Zb*fc% zdP8F_D?=jjYWs0w2WO2`x;TJ7{;i1pnvtz2LQH7M>0*-9q*T4aiam+TpePZv`K)nb zquF)ts$<&Xq>(4JMx*h4KOC3Eu}R|;3PM5SR#4i&V5#gyuxkE&gTfCX}k|B~* zF6=#JMnIx!zTcB#mAvuOT?c(i#Qq4+97;fK#B`j4-f&+8OIlJDJXvc&DWA};%2m*d z_&o8)a!O)&NO6T?cAJbp4uWm`ihyu`h_`>>hl6?nc6mSW44=m#%Lx5W5UrD?YzXOR zMKwv#u|l4$ZP@T@#0dd^rih0nnf=phV(E#5#eI{59QxRft@n*K2_94Cl?my$%)B_M z*)pTqf1Nd;1nh8$-8_s9lY4cjI!mcYZBcYCFCe%2D#Lwa*MhqZ05Ts%KP<(LD&B`< zbZ;ytmP{83F1ddo1BOCtwUN6Gt%g_GEZVwN%_oQ2=3H_wk)$G`fzYvJYH4}AMeJb* z0?oH&W`ZC5tx1H~lh7qp;in^wy3#=}^Gw$2PXQkP-LVvU&$9Ptqs7JGQ8U%)U>+{P z$bpW3lFvB*{*KsX5?OZ2iJU4NyBs>@1eCjZiHrxBb$xynN^I`OF7bTE+CF{b^NzE= zNi)@UinZEvgR6Z>#^o~Xxzl#w-6>1zu>wG4)P-13Eo-au-eiebjKs4DvF$eH9*d=T z++pnjrQ*HB9RUMV-a(Q9hJgY{GQ41>imreu0qilGym&=sahj^bnoKObrYZ8^_;&%T z$&eO%k@J&fM+(Gl&pW2a){!tMg2jCN{w9ewI*Jw{z51)ts40BAqzYCJE1kg%K4WtB z5Dg?IP<4|9I*B)$&t!d!Fl1BhWg029Mgt*bh4`ba_pwNiVC&}YfucC;L5SpIH}mro)V{lt;k)pzG|-95 zWx4HBfm{6!!dA0w4>=GwYR0GP5iAmrbvWFVV);-ky4N`Hkqn*Eq-MwVO06V5!feT@7+F|dOWDG%(vD+bbhWOXjAi*} z?E)wWAeW9Fv*G{LXAGj(2y^wWj`(UWbon_UenX$sI(F#u0G?A_%yMkiEJd%I`o_eqVz?1i* zH0poieYw-QEwqQCMW5NGlm8y{70e7bWfe*64~0S#f>WWkJHY7jH8$`#!l=)P@J6I% zXpio}-Fpqp4UlY<9$}R{{1@UOpK6SxcXdHt_i&K@Rn`XLKeb-|>YtAo;gH;O*WHlZ z)e8Vj%AIB47v9nLivgfFFOk175Hj2WYWqw=(Kg+?&i{fYyReyk1g@w!WqY*G_33Zn zJio}ieiEFQpWk5MuiyI=_)R&xTjnJ)TT~xOr7*)^*F;Ws?nCua^j;Uu&a@lby?$-` zB@Bk7s1$->2rK>tLwL4Q`(z~kzE^E;2=?DVcrsujyqj145{wBg!+~9z9D;T8GW#ux z+b3r#PyF0ptU-Q}Qv=}mD26n%M*!ss$wE2c3y;x!?odMM_yb$2zoS`zc@02p7izeM z0aWfUdR@0497h2jSRkbf*qgAm3=FYG0Dyc|%xw5FzDcKm&1017l8JeUD7c1HW6oA! z;~;+};Gq-u|K(T{sYi^2K{d)M$}2lke+N;oEB54_nHdwLiRy6WH90W0B!mH<&ugC} z-vAdG%6fA-d%6QSyzbVpdY0Y&)+_wrE{x173}`Dfm;Kwrd$?kowW1;;|NgVT^A<+5}?3WeVSb zck_M$-c8({t{MQgYsA(O|2z7@943I{6#D5E$KKX0d^#3o)246vAvkt36rJAIwGoMMP2qRVRN-yyKAOx6xR0KQU62Ry*m=^z)8`3KuB+W&@a z=kxS`%(jC~b#M7PFFnf?)Lh$d@zbA@ZjScluZ|YR0lr~o{@!x{uoZxRBP6GS1hipp zf|Ty}8^WMe#-DtIAle%~LX7A?@e%$W2k*vkGGE`?tc2dtvwJt83E{$IG(-`(L!UIL`d{L%68a{|9m5|NjWE#an^BG^m5 z6)V@$((|X#aYpkf2_nvr;9!(tSq+VNi^;OK zxBUqmDJ?W(ee)k>!UBGS&GA6+ASC;P_A2s*ojVMHnT2KY7&84N@~N&oz{F*L2X6$3 zXi2VGI^0b$fV+*^auhcVHs`;%tN#-Q8$gDe5`9x=Ur0no%{{G9fg@xzoFz?sVMKtH za}yGvCGQfDZnFUdzzb1DIEVk^xL)0oSC&x!L0}!7_m&HVh9xJfVDeT3(E{@VIlh#M}p}`IR#3Ss+8$WyZ4{YcEhL>HU*YW_D>1`m; z!i6be2@CLf8`Sqfb<0Nq~#|_H#ow@W$cE?ZezK{XNKEGgSTul;^Pm zb%PE9_xi}l$lKrl@%YJjv5pnf+g^&Uy~jTMPhqUWN!`;A3?er)L<-Q2d-M1Ocj$lc z`O$Nv;#muS`jn~-!H*SbnK2pn(`*18r60Fk)Cj((fsb#j?ZM+4w(G}VQRrYYW;4W+ zJA3W8R;NBexNKQmG;b;>Tzl{Sre^3A0g^^mPEku-&$7lsi<<*KvY0JPn*A55TlZ9Q z`xUXArIE_cRX$aI2~~c@e%bz29ZnRGln{yE%%M_WGSZ^jHBkAU)s@%^J%IN&X5?f!gA^Z|Q~gRz-WQ(7$xKZp`m@@qTw z%+UyCuGnX#u>nob1Mk3zKDhaK=D(*3bBzcJl#xnCWl(#*r}^BY6qRD063%N3Z1OI# z+ZqGCng(_#6sD!=r}%z5`gPF<(6#}N)5oV9wN~@IX6EJXfI;Yd zz`s6fG;*BX-N^j)34sxfpzb;vOaY*``nLhSObOMm-3^c;Ja6V$OE5sPdR7<^&^3Yu zZ+xbmo_z`2cRkpOImj1L{8AqupTJ?*9^CVx=*E#MS?S?Jxs6VBhH3`Mj zbcR$O1M+PXfIOe&Ik1I_yHjM~{VxG|zT^zR;0>k@S6Ep&%KOs;b;1h~1BEa4t~sJ- znXJnq#xbC{HGb8N(Ct)p2N2CGZ^2jFrFlG~ew(AEu&BiJTqXuNl2M}#crepCo1Ois z1wbroMBKfF;LZ{Hy#@+Q3oP7?HhIn559@cXY~w~yDRU#MzYdlv%x z22ihID~OxMV6s^+b{o$v&$o^Fwx-*IaE)bo&kUOy{Fdm4LYh2Nwm0*O!B(zY8kdfw zQop>T52C*6qDAz@vkmwS8wuP=!L6)sF}>(HyVuJ{NYXWCL7lR z^lGaZcL!LKHp~m`ML16d&~)LlyfxFzV9Qxkm?m8DHEh!~0U+H~ceEkhmc-*MrO)D> zIs+5`1O%P!=Rj+dz&3Uh*mBcZ_v_2KZF0Udacb%w%sg;a)wJu$tTAkd@LGCk0w9Q+ z22*Wg1$5B^7hF#2=8vqnF9F*>)Z#7?z;k8^>m{(ZNx>cldzaWcHOVfuPRW1 z-H~nufP@(skPnTWFwu-t1#hi0odZ{=zx+FgD4tzJUn1A|9I$gQt{qpJ@A_=O0!VMJ zAcbZ{HDpuE*F`RXSE>SoS-Gw+4glfIf&O>%m1fbGfbLjTvGeu$yj8~w+d#gt`Dj2Z zY{FKj(WM3$_e}zeueJl3`hQyHG6l;0=j8b2uYmT)cK~TXTQ#GPbdVDoLakbKINz}4 z3^fSh8SCdc(X6|IZWY$opSxWH$q&SjJn844w6-&ZCH!F-(*XCddzB`TRldz=xHEYP z=vHrT71eH1UC&k>lg#Y}J7k<2aj7-AH8hPah4Ae(9gNpZ)qOwN-5VJk)N|t3wpA;C z8w5*xcirDz>j8^EpUpZ0ioHG1=f1}j5r?kzFA!h2U+g^t3+gSk2OY1chr}JD0Dsn= z8Fx5@HtK9&FVbJVywrDRC!co#7Wc6NnvX7ZsPCF|fVE(5sG``9gRvfbxC7EGxJeZE z)eU(jeNHx{U&cWU1+2+)&AZl1#gngK1y zE6QBTUCzE0Ph`5EmrZ*?RufHETTN4d)I@D!@xvY1rqS6}>$v1<^3u>Jh-+{A;v&H( zne?t*0nH>2hNpyvH%Id!`#tn0$}smdEKv1*4cIeU*#ymR+86ewPh`;Zga9oVOt&MC zhxiDyj5dW0V=tjUlLtNEevuJjCcXxS$LMdxUu5lu9EI6)Yq=hc9w!4E-kyy@Ej7RJ z1I@Tl`C`w;=lk_4zhQsi(5y_DilxW5|Q<$HwkaBZdUf@4nmR$(IGnN=m2p zeS)r}WC7U=ExyyR^_79qTh3GzJ*-j57t7=u4Tj&mp{Q+}w`7bQ<1YIfe3q!?|8cDc^aB0vf zE`imOvObRDbA!uYq^y3fFNj!u@5BX!_{Y`&A=`uTh{RzTu0G^4CHi7R>sKmDa#>aW zm{A9)?x&v!ngNBroq66N4nUBSV7R$d=VB2X{BH2&yeR5>bhFDJ5BYvV_I1f*-%9L% zB?b0p%k!(3q*o;z`V8*O*3oL}SinT$q)ojk`^C4^dtAZ03E5~QZG{pVD+54 zS=GE-9bXihtd(t-L4xCEA7iHbMTh$#YDMGMzZAU%+A|a!aNcMUCJIv+-%rN;`}Y6= zz&Xo02rHke>u%BRNF>RWg4bi$s>0nxK49(61dtdue3pcxbu}*Dt@}Uhy>(cWeb+W> z0Fu%m-Q6vc4&5C?qYT~M2uMn&fPi#|bccX+gD|wDba#ChdcV*2y!+da_x1B4DP3J5}}1DqCE}Os2q!} zYp>=MHjTYATV~h3_($aXI0?(Jx^9}c2J%uzJmMINC!dQfgXIjvkEx2dsG+`-;ZuERe`gUjo zRE*5n7NQwxF@wsda#rqU_G5MzvVV>2*&a0S8iGzi4N|{j7v;R1hL6)u3TND(T|YMX z$no1D+L1oY%vFj2X6By%U%*vh7R(wxxRhXhgxES)1neyGazJP5r(C1xTXzqdI^*xB zr%Sjxto^yfO(*YYG$y^|FlYjTxOC4S1Wd=Nsa{<7x8C$4+kk-+`R!nh#RqzRf08GZ zdRCKzC=ex8obyaAWFZZhVSO^IU_O~P`Ztmc=ua@3aT%3#n zP7KIsD?>x7G(F2R-EBSTL|bO`_=J=I6#K2YPi(h0_p7IPhn_S)t=-b%&EVqn!|YzL zic0KYnt--$vw^GyW=v;b1r4ej#t)()fACL*=fCsq|69k>Me(3P!fzI^zr=;PtFp;w z>~&wdzv`dJ>NQ-Fn35-(w5+d542&~zUj`;1OSft=vCYiYJB(W)hR{VC16s$mxN$iI z6@;e4!Yso2&QQo*AM2>&hSYCBMiXQa<5;>hwg*779R zdi#5c^SB&OPII7`mERi@B|odowY@g}HTQ z(_`^kZ)O3I0Wb&B_?8dE>Qs+BAEE}}klpWWV<9>MV9=c=>a9DHG-_=+5CwXsHf1nr zmbZ~SJJeD|J`Z5=B-_0laItTtq_+Tw8)On49Zsecf9Npx9V2@<045G<09oFP`hv#GS-6bXo%;47c&X zM^#9|;%kFkNzzyvg);#Ua$2OfN?7qg_@~1R--)$%tkHTEU-q2vahGvg^jFi@~DA^-0ss)x}_K?GoKwj}H1H3V5Y{w5f* zq^;!)HZ_f(lo_$acc7SevU){&-j|U5@4OSZ0W2|mFL7Gb~+pLcOM#llD_t%oNlK+V@9;hd_@ISuV$jT6y%fVrQwy5 z$H;pbk?MI#!~05pXIlOUN+%d1G;7B=`-QSlu|hPOoDQe_d;v+aJj2D{(8tHc4%g+` z2Ur}YsZmOv$002`EP{T>^2=;GRSTVRTp+ zGM{Sa)z8r^zt$uQi(X*p_Zsl)#Q7`vPQ_?NuB2fe3AcBwTo5#Bw{_s8P*>8(qaAr) zbdWs9%NS_Z=SDkk-8l_b?cPo!52%pT$Vr@~jXTAdApOaW6~NxAzY20onJYf(PsNv8 zC`?nAH;xG-h$dGFRpum@nL^T-nr7~1sg;IUHBRtU%Q%b22rngbk*TqJ>AKW;j+d>} zIuYe(btNWHI#B00H_kU^$Zgz=Gll0~js|S9n`^cacGTZc$~L;(YZjkxXc~AaC234P zyLfHcr@>}@Rj1m)hI72V{bI0$d}{w+i*T}OjOTpiFD-0F} zmI&l6MeHnGkP#sXZ-$+k7H$GklCIaM3Cxh$lTh{vto3c~ZN08$)wQ(fU7x_g+K&O6 z3PiE;Yy~SqbUiw*esClcisiRJh{N6QbqTco$zvj*T!W1KZ?H;lfV@5t7`>~{mQoCe z+Zk9)m7+`uSP~5NqYMh5f$)^w$Ym>Qm!9&ZErY&*@B~eL9_IZ!?>gTCF|{%4RdWB6 zDch5uqrX&sk4WwhNsdf_DDvoX*hi2y9l9HA6qs*q5Zq%@vxEv`J)=}b(M31rEO5!p z+`fO1K}WQ%xjyAyqhfdAzg&$q_W6{avd8{1-{i56hs(Iq^8P$5EbRLJLY;)~7;Xk~ zckQ`Eu0r}AuQ};T_vP^h?5yqmQ`G(0kutaJwel1K|QfT3AHR_^$L5wasXg9t-+l@(2UtEil91PAgJ)j)%gGGWNLA%zH|MU|5=HS`o zCV>8-@L>rWcmujlth2?6aA}fs(AlGh#K;q^^7a{s)?+PRBRf00lbBsI2=ljk{DI+@ zT37`;uZLml^M@Xf*@;1J6jx9{O@xX&{wDwuyv?kFT3Cp2dj5p-$zDCN?;O{PA~+i`D17JLNrSG~BkB9)0>%+cJ6JK_C~!?K2cn zy&1bNYHZASZ@SJd%Z+uxgVCiKXcCarG41F$dVm?i2zZ7Z?Yg%SNhDSLY>C=!8c#o=BG^j@7qg=8&ClD@$VhO*fN@HSRq-44%7{M=WPG4D#np zKO;O2{;urECY9|(B>D(}jO8eXxJmA+{*)X!IEzBK!sJ5qfpP_CDmSmjcVi>+pC-d4 zJyBsN@>lA#B9!ce-P$8AqZ14L;{IS-4=3$+ZfW9sPd?~`-#F=B>Ne+${&>|kR|bM| zV)rjA$-BTqvVv%2481Fi%sT4}-CK1Ue(;R`WX&7JN8dvaN8U(C_nDv#whm-BQw^1! zC@Xx`YQQhbD+10po-X2W%;2!NUay=%D zd?IDH(Bvjg>V9{*LD44{6=kW)&?A91a-}?16|aBs6?foSgYC-AH=CQlOSAwhby|P^ zYNK9^@!N+G(Ep8A-EBuTRkC6rR>DP8aD~Y*F&;45yUxsI_G|+f!+rFC(Ng2%k;lBI z?TA%>frP$JT1%#dH$$>xW3`(h>Vv+i{RQ3#AH-doPr$O)d;4@=3*N9@cuYA7qe+DD?m>~|OzFmc}h zpcqIbbXuU$dv|+1SikbxrWUB(^#UU8a^Fx>xKAwfuaoO*m%}FlZ};Zv-x99}!MKzm zLKc<~dk$huQOkaLLiY2#yvY7r?7q^3#NKbI1UWg?*ZIO!NYbi|DU;oJ_O%NbFQh?G zUhHqueB|LwjVyybhRihCj-u3To>2Q8mj%rru2B6 z82nL0h-A{m(wriCZv>H?z{h|Jfjq4+OUSt6%(1ny<8}=XJ{>B?RAv9u(a$?)zJ={L ziTu1_=WF5`*ArXF6eMr-g5}Tl7T%e{Cs}sw$n%yJx-0)5gJ; z!UR-sQw)<8P6E@};ZD}@$^b?u5~uSk&%NA+wyVra#%tOViV9~eF@D_FctU5pmGj1@vS+Z^=6 z?rVzfcdxX`7QA>@XFP~MPL&J~xgf1}KQ*r;0R_&kNp{=UHec^G`sF2}2@)vyKWMwg zJPdG8NYwX+IySnW7G8dSez~u`c$Gl<2F&^9g&xTRP_PE1G4*&h$LoXaW@D5th&q3e zt_573BpM(z6!$~W*Gu!R>~5<}Rvo!VJF52%0Lws8%joBi03fJ2YJm2F@8#XM$X2VB zjN^su@+vwWUnuqjsZsOEn2aB1>;v3neJB1r1O-n+@j&>j0@6QV@8(v&`SdYLP8p!a zTitqp-OBS7pFMUUU1%{ZXn^EFEoo2yb&f?i5C!Z@&)^ z7ci=s{{RAKdqCE+F;}&l_UM#pKeQu#76RdcaJ=tNNnlLAEVW!JbD9@l+*;Z1t~>GC z?TIRKdfa{4Fmk;+Fwkf2Olwob==;8F%8s7*&6Kh*2=_$(Xr_dH0xw)Na2Zid)5g?1 zamqHj86kL9Iec0ipHK)Pr3X>ID0quwM&l|eLAq3Hhj0%j;y-LLT=ZR`t`$fRC{-WxO zBeYyx)$2|Psqs|6sFT;(^J26`Q#{jZYFxQC^3Dl+DV=eNugynUI=2T&jPW;7D$b>l zuMHWlIKt+MN$xMYVHMUs3o9n`Iv6Lmv)N?JbUq{ZeAKBTP-CFqqz4FpzD;p2)(24C z%MPI%k#W@SjvyIP;-a!L+#aLg!nIso#{hQEHoy09QiugSd2%T@_Dv}~Hhmf`N7(Jx z!k(;^B!r^~O4A3cXfWJ5d7AMph>!~}R+l{;hthnXqu6xEkei3taq)J~Wl;4ngRnr+ zs-USutWji<;N#s!B>NbT{}0POxT4groGCU>o_##YeV` zXpiV8$AB_Lq@2r1Dj-QZAJ2sl_2@r;grA_lkjy~N3vVS^*}tR>h7X*G+q?DWS#T9G z9!|5WnYFp_;4tFAnzMOldFs)6?&0iE%XL>8{;WaifalK7@5yU!Y^*SUw%v|xpxoz2 z_{y=z(*GbnA;EY(U^fb?ctsyac8oOicq7m+sIEJL$YQTj7~|=)o07%cP0{oRRk?O# zw&{qU5NGcXI85y4OnY1z$ml<9Z4e+`q1e=#@4!-RHir#)k{OI}EP;3M5RFp(=<}Lp z8{;qLhtf$({1iswCd{evOpUc4Yq~0N`@e#b1}a*0$5$?&nyt>E1v{I}eHN9HmXBG@ zR;=$hYe)Gy)1cLRaCw5O+F%u-IW;+zl;Vch5*B>B^G!Xx;d{OzW@Tl?V7Sigf^Il1 z=4tq8u8*|+aDt4ALu?4+`0QaLU#S%dJqVoDAXH|?$ru;3k=Or`)r^)2v(~vQgNBQU z`aOeo>EdC3uE^tppKS5rQOu(Wz-GT(kf5iB)!THg67K6dlCJKqa-@kPW6IhcuQ$MGIxJn?%8^RC2}&J2z0PNqsT(JAWg1 z=tx3~ZSD29OyWWi^b$#9wdYH$I1C5jshD3n8~hs?+~IMaXsB^Y%F&T81PQX}n>999 zEJQ;j6oocIT<4RKotFoj!ye|c`csOoQJp!5k2~cD<}ShAzR2tFdxpaR2O@LyJ{_|G zuh^X$icdD=Jw|nUfS7`DPY{=A?bjwUX5Cir`S;P^o^dg_zP|e!D@gkwbTxp5wkgUd^|_GR17bc z?j?LqB&ZpAJB8qb82=o;gh-L%fS`bUPD3`OXm%L@QnqpyP})VdF}WJxo#P#xyJEqs zpbB1m_5@<_ctE_NL3i*7U|hg#vXkj%EM>SDP5&%dN*jOphaX#GwegU;wW`hImkf8J zDJ0;6@(T*s&Y8cL>62J8(9yB^*huur1nUPQ8 zU`u;yre>Q!wC@lWmYI90Y@ml>NW$_Mp9>;Hk33^r>gvgET>w!78T$7tinv{&2K}@2 zmj?1HNfK$%(H#=+KVewArq{cw+jw46@$hM6CBlv|?ebP=JWoY_QPg_2ydiStYk79B zciUnn(pgF6koexR)pNH(Sk-^Pc-(S*W0e4GwbePIPdNQ0vk(+vk1|ohB!Py1H#4z5`f3 zW3v*qa%9&^uGXD6T;(g!qr_LCOsN{kbfo(8I8kw9RV<=8CvlX#b~%%x=#>JE zn0@5}D#H*xyTa`JS!bQ$FUsRAnf#ebgQUJtd$oWHCi=MW33#pGHwh`&ABRu*tn8(! z=&@|*B{XO|&K8J~yc!wGY;0oSn&EzsyE)Y=DC`Ce)%J~kc$~zjKWqVDBfUeCG3Mbj z&bh^EXk8u)x5lR)RK^4+MgrOR~Y(K*5A3_7Ar~FY0Aftg65);nCwC0 z8JV8TkJDF8jX1ThzRvFvd~l~lgj_!-jAqa%Bk1;?pen(uh1*WimMR81d5%<)Wqu(pHL&baw?6E1n13aMA!;>JIl!rkhNoLDWzj%TAhdicAb;*vF0SOIGj5i7MmgctJfCi_?%p5i$ z$y6`)=-lq#1eL);zJQ0iP4$X}`}!IVU37a(4qpbQqg~KdlV2w)UGmuX(fgnZiAZ9i zCVli$p$H{)bz@@s;o)J_shmZt9$?5mioUi2>SQG{ju$SjN@Vn>JBtc2d zLJ7g=Uv-T4*aO%T#i!Oh)M@#=euP=h6Vz?$@t10Il)W40Hqjd{HuD6r)wPgzvAwN;%c8+qz4ATF zH&_Rj{%&s6F?hkRM@@kV1^eB|hBMdd7h?)?!+8MFlVkF|ojhk}A2pTB+QeaqtGC*# z;1Q#)*%g|lBY*AQuZ(~Qt2{f~n4B#xMjN;Hp8dqz8xlA)?5JWVYBWDY&7l$eHj=LZ z7u^tPBWk-x-nW@lw7Spm7GyWB*Z=}^c2}&pZ?7cIthUt)pOnQ{jzgC76$2OUn!#l% zqx&cVCRp(AP={ou?oUz$uzz$Bc*~K^oN5{ztq;B9pT>CURk`y1s}cB>z7$H7OG1#&F|RfC~U^Ui=^;N89Mt2&&niv&e2+mRf-f?clA; zea0@5PvvC^ppfVZ_A}IdU!i&%P;TCJ8wV1QGhTcTWXO5^fIMTnRkLo}7iOJ0(u)x;>$#VhcqmGB-asj}Ke6S6 ziUU~?85}Yg@xgZDfnp?=EHNAC4$!ImB#nNgd49FPeDfVB!gd%W4{O3hg1?$Tg@5`@ zuQBaiE_u%Txjjf0a~PH#8jdlsG@rzf4w|?q9FT@n83|&+`<%H?vyqm|rwh&(FBg=P z+$=qFR*^(0K(kK{-wO<{JA28(?*=y-82}^s?mvG>?GQRuXk~Qh&+i5>faSGclRil6 zHTbLmG`FcWm;|tATY8>0PpN)0Wrbn)N@Djqa>NrdZokYT6-EkO8&>5yrtov2n;`yw{B~`pp`Z;J+nSr|)7^>)eB%QLuhZ&Xl4mM^av%oASA(?Wc z%*9%yuseuzCQciTcjsN7-bPh=ZQL)YKv%yq*boz$9f0JIX<@`n!y*0ARFD3K#&$pC^*xluR%&&PI15kbMaw5=2UaWUBRv(1e( zq!59uHw2j;8Fe7APo!E-^!WGv=Y((PB(Yo9ozqxgUWuY_TS-k>{M??NkDo}>Emckv zkKMMiqv(Wsm7jN{{j_!_Sa*}nY6G{_5S>`N>0ABwpd-;tCLt@Xea^h%{3s= zTTrJ$hesbEa5WP8`QnKbjJ|by13`x6x|d3h>k-U2?CjPy!D>f|@8T({fM#Y{{mIe` zYWJkG*U}B5jAuGZsHgCdv#UB~FnPa`b4v{~3k#3J?h*nXzuanky`|8EYYbdhO6Vx3 z^DzpEIay53_BNl+1k+BSY65(g0FZFGZI{$G;7NrA2Tpu?fn@ed={$ESgse#(9fLq9 zR&!70byb<9XC@w|(2A=cP=nN_#->R#4L$2EHjTh7Wl7rtb#n2S1jJ?jO$_Mo|0tlM z-7fWwK))zP-y1LMr) zj66tOsBX7BH%Hi+Htv_xu^Q2&>`dp8vXq-j? z$=YN0b}H;+U=Kv0*jpzi_7w_7cGaAhYb107EVs`K8uwV9Lw}3{87&s8Fg*iRhS^N3 zYv|{h2}?+;85rda&vRhsAw99vjQ5cEQi=ZA72^)h?^UB zRK%`+5fh9bpF{6pp_qYsTt6X?=Lug{;HoxGdByxAGqL`Ox(f*UG&#aSS}A`{UGGO? z__L?c&?Z0Zq21{m9Et|A(>#Ls{-Fgq=ubq*C~<#8&y^U@w0{RIE*-Y8DCxYcnj5_zg_!zi_+QpmF0eF%5T5k|j? z8Y#mBt!>m8X%g8L!O-pxSV6iTl=zvl*5oA~%* zON#Hh8J2FnZ({c_X03d}f+{MELi(7Y?QEne!Y{Aad0Gu?Xl8gkO7rRBob-q!A;DJx z{D+K>pGb}dn`+Vqv!C4@4?p8}^js`A^p`3LnH0M47h=^XBYM+x)Wzbh1V}rlpO~qN z8hflpOI%g4xRC#$HUoU+tBL+u5r-kh-+~Yka@(kf)kl8Zm>0nQ>6Nv)K4T-T33FOJ z!4MS#$9rF92n?d)AsC?`f~EqB3^ldc#GyaY>WAM3c{um~`70vS>; zWYb{cZGBR__r8KFdBJWcSUv;&ty(_mDS&jgt*1?un73L^PZ5SC1hzY}hBCy7IWSf_bl2jba8~M#yL{)VMuKV1OLUTB+mg23Ynf*nCQK*)z={8& zkL8RTC}+01LYnu^b_?diUDwl&spL}XcQuzztKO))OCk=c3v^GpaN-9>p`=1 z&hy}$0`S|x_0_HmH@>9|&TuRc5c|QGkm6X5z*g0RpduF1lq$y^S(;=Pw=CRAr)&K< z7Dm0F46dOLxNB9p!*jX~la>lqHqLjz5u%!zlq$X?eUh9)Tv=DA3DDb&l^Ka&IZB@G zAV?lb)?cir*!0EGsqAeboJi0Dl%;DPFwmEwn@aMG=5G#88vG|gFD+`hWUR_!d;y}! z*%gIH=c`dpMpq|_K9qMH1pFMp$-2~YYlh^0RoU3y0HJ1zG z9W0h$i2IRyd9Hu&3&kB%56LaqDQIe3!&P>!l#L2K>Z)crnV27NyInsOI1>p1P@3Ma zU|&-s2?e6~v5v-uouIgc;81RUA6HufZ>S~xE$c_?aqD+sfmJCEYOMVSu-VTVnUWte zGi#&r$z(mdrd+Ti5=@>G-;?FZBd{5}o1^ec4=l7&B^YchisK>%Hn@$YGSx+JQbsm9xQ}h89j|6Y@x)Qa^ z_YfhdWngAJyvKMWXDBprT%4SJ>ygrisYVuT0x!4} z$RO!-Ilu4iB0RRHc)m1p-x@P z>+aJnbamMOe2HOdX&Dz9irC(an9zbAJS89|ip5AzA5&GuiTRG6ii(QXpBnrn%O($N zyg4vVaXqF{%}#q^`h_F{ulLDIw>OiR#tv1W2T{TsgL%}!7Khxy=w~>L4yc&Um%FG_ zGMBsdcxgPcX+Hd%gDQ1IrSo;v`<7ljbp^JrhPKc~R;OjGBmpbu^7@(<_2=pQi~z7V zDJkx&8s@xG;db6Xhv%?cSYWeIPxefKFh*vIIjHLG+UB$L7`A}74OQp4hQJ9yp$}_b zAPWnSnffWMiaNZHRa`8qTI>f72{m4*0IP5$n1zZ5gVT3{xz~4BbQisg#hA@siAk!Z zyX7B;cNEPg%NC0AEGNvL8^?=d&5{HMPo^r?n3^XKd_tqo)NR>JjEsOgdnl}61`GiH zEMNOfQ^PU6gyItl%kkB@p@vWZVmb`mYE+rFxBDjdiJQy0SvLdY zEK=&m>b6rr9rhC1c>nhMylRq-=Rx3HVH49^r0%|0RA)I4m`z45HM!3b6&nY{ypCJt z;Oof^A>5efnBfa|)>nONNQoAm%XL+8A@k;Mo+B4h?>Z6l#q4Ht@@tb)~&Ki%A83JynRV<5DS=~r#8=jQGvtZZHAyEi+%f7-UX4v9W;9B~%5J4SA@YIT3^IoGd>O^H z-Ctk8?^j>i3O99_zYIay{X&b|H*3^=_^t<=IaI5v+g413r(|jb(N=&I17zTU zwEnLCvu1P|%iN)R^-9=)40rS@+9k4|Ug$baDi@m==_B>;u%gXoZ&j!$PI7kTWq>%P z#%n__+**}PP``oytf%m^0I^Jl!_S z;)OZPjk^dgstqmANh3?26W$W-`?PsNyj4^is6%4?rv4be40plRbJX6&$|B=J15p?P8Uj(C!)s#@Reae`@Fr2KV9_}8P;Pe z8~PWMpBd4|3WDM@DC5ZNvB@^@oHUlwJmTahyL@5#g# zh^4ORHt!}f(d%W@p|@G9)%L^5VdG5~d1N48$N$RoeA)ULZUAnJK@)GRGQ``i&D}5T zq;Fl=eQ>lR1`;j}p(A3MeG8x;OZ7v+Zh%K?7QnfJ23uj;*bwjB$o54vqMIDk<0A#e zv)`0`66-tE+P>CLS&dksz>9%Q?WW!iv;(erDZZa>WkWoXZjaWIm;RSIe;1lSbi@ zol(#}0OCS;_($qTFj>xkV% z6nvjO{X z|i6C$^bIp@@AgyiYHiC67<23f+THj znSzhbe8oK~C!!KCGBusLFTv>j#ND}7ov&)hOf%qEkoO|b028-*hnGR8u&9APn0p{Q zN_4D7Y%wu~WW=rgoq1F-w?1_PiwUSlBp7|Jc@sCgWp!Li^3qY3S(llkG5aTKM|l%J zMXZ|I6nq*yxWcp)D;#gqBm;S6hj#M*sjBiU5N4-pePz_9&QCgG2gXIvfc{8r0*INc z@8LBI82K1vD%7}-%%nRhoA-y=>kyXiv{hn_1&WF|^y7NpI0(?iiLJX1BSPwun!WCw zc}t=j$>R$!b9ZO?DbayHUGQ-Grsm8>B1NACR&DY8ysO>vM!s?@d zQ$idgBZ9SG-P!jbo0Knp;X_~Z{gjSYw`d&o9@oPh&(zp>C~`YAz~OGlr!(}gFWP*+ zP2O{u4|Gyi(#4zG)7516_`>+Hx{Y({`(&TO;%!o`OwUy;KAzQ1{ueR;E5wrq;e8aQ zpS8~hqc!(4MU|l4_J$inYAJS?h~;=gdQ=wJGg!e1vNEx&Eoa>bVm_+Bs+uVfzhn?NQsH0kdtTa%;QJLd;Z3D6I5RkdT9hA*S&;FL=hhskPgmoQ zirSq;CA42!WDI<=*H2uTYjRMDNE4(^EYp9E-fv4NN-ESl>^xN*A~tKiHU(Qz&L?+*4zM)gG3F2Q_0mLvjisu=ZE-;6mo z+-8A^%|S_!tb2`=iC9UKmy9&MqB9k<4MphHMOs+_)m1egSeT^jxsns)99~$b!-cD= z6}?f3y%OHsVj+`GNKs~+6Rbh$E-XHlF}IIFp1O2{P|vdHpgexAG>GUZq~VA(Rjah2 zp3^;gzrh)!Zr^!~Q0v3ljaYj>Z*4KYty6-&xOJjsRCE#qZ%Vfn7{E}c=d?9iy>%+5 zu8+!|rqPL1OA_(;dHA63?GdM6YMI4BeU$EXzkpFWt$LtVpUj7EEqFF#B;OjY+$jGX*D1ur{M+8y zW`S2eB1FLMhciYUE&{Ss#(bKxW-xxP{gYF-~!lXzHGeGv$=Cm!}Ivt$l&)M zP(JbfMGwXCFVf#E3vZ_-Bu9t;^|&_PsJ6C;$1Lsi86-5tcb8iyQcUi>!0Kb{O51jA zzT9>*-g*6ZuHpCVMZv=?J1Iniz{sWE)vfY3W5oW^FGcwgC}m<+sZ6>Z5TDxbe8Xu` ze+I*e8guZlrp(a{{?HG`Yi$27z1y};l)Bl6c1c3=G#F(nG5Z*f72bfyyxai~Q?~q( zpF9B=?zp}2?K_alqZi+I?Xzcy{6R@M(+)%c)*vt(Ch(^^&A*j!Fnopo;-*d7nA;@4 z-M+z_gJF*y>&nwVch69CF4H$m)3-rTq(zFdhp_e!^}W@s?T(>)YyYBeq6cF zHf?`QsYTiTF|*?~ZS~h8>kI=k->O&F)*LBbcKp{YfYZ6?f4aedNcQgw(~+oMR3(+# z>MIRKPFmQ__#6eHF_A9Jp4%0%^91l`k5BKgORpS~N5jxd%W4N3BkJ8|%ZW<|(}L!4 zelJ7ssm|2Igrv2#^)M0C|L@%CUrtpL;{k(0gs^$nzosub=V4a{ht)5H|3FJ(WZ?B@ zht9w2XOl93$9Px=d4XiMucxOqZc}VLHU!^0s-ef_v*f?;aDCeL)s=hiz(8C!rFhRy z63#!f7;Piu@2<;%ls6_mo@p`I z0K|h7`>8H%915o$apbT4T}q=g2q?Pyq{I34{q{Bxn7_4N;4TibsN68D6)T))qm2XG zHy3ShZOP8`yEY;0%p*fT{KJFs8DXh~VNBQ9#02#uWAKnRt_zkARr;5Gwk`X0EruBW za2ysUftjOz6N!iJ6w{613fzC@=G%lZgbfh08)W6=hQogZ+^Ha(N>z4;z0C zuL~)Yd>g=*_HYRffA4*y)&G9ovO}ZSTFKN#5#uTC3&U{&QvYU7|6q0ZxF5shn3|cf zB}MF=eQ6*_2Y~^GnEYQ3NeKQ)!b_v7Z-Gvw1BR*!(Io$wivlKe|HYqMd z4#zcy0y-%IsEtg@yAiK524X(61gZv}B;w)W$@<_42=4ter|qBcXiNtX7*FO*JWS|) zWH$m2@wxQ5Ydw4IG0AK9YpHxa(tg>vOr`J)@{hHy=jWwat+gl}`N}x#akJgb9u`DB zJO0ks0dPKziHUv}Z8Po@DnI)fQ7m-@@?h(y7;jctX*R**Q3po^b4G zyvO`U4$!wz;?X%Qy5kdY7@8}2ni=zaB_SsWI@Nl2I?_152ewW6>*_4awuMUHCW-%t zOZNg;qiy|g8noo(oc3XCTt!&D%EBW|EJR z0T0+S%Fu6uhr!5idrbO=3phQo6asI~ot)hNid$ld_8*3gPhUSedeIU!hM{j}W`>aR zB^U%1ZX$O@{_p$qFZ1?)`k*g=?g{wc8{yk7^$rAGYO?{V;_sgi{{=wH0{<(wh z-|BELJ^?`=%Fy;VaO|%vg7U?~sW#F2|9?1Cx5@fnJ}qSNUoH&@ohi3ltFp1AVpXN& zr6VR%XCI6usX1VCL)|4zg8pTJGJc!fJjlOHZt*`dI>7&CV2klt(HXZiWg$87+nF)o z;_Lt2#Vc@CW@{pMvpqcc^M|-eTuSwst-+Sxq1TJ4*}zjMjJMnOdZ>C0U;snP((5itTM`R^Fr_5>I2z$qX5=&ED+Tx(>Kn3<`qOhe*ECjh6}_w#OqoXxc6VJ zuUmDv*KvCg|37}m25U(N@JgA9QN@cx!X87k0!AL*51TB{FkVH90h1wq+4hM)*!H)7 z?mPUi>=Ljh{;@zX{zA7l@Jt-o$M8{8LgUW}7ct6I9CU9#qY@;paMiF9S?IJKe@2iX zr9fdre5+AxJDHB2^`9Nf|McNHJU)&3g|pjlSuuiwX?&Zq86QsW1{U1vG*%xR3CGRVEJpdul}fKeHrVOATDrJTm^?Uy!YzBuQ;9kC%BgE7CSjm9Y+&)js5x zlJ!7Ws>#2nm(hQ23i&s116dx(7T?&;o8O|0(Oa>-2odRw6)wz{l(#qL&toO+&Q;_l z{pc3;TKF9ZyhIK>sM%7TxZ?pF_!aG9{bl3+K0|KkLdxaxt;7&z47& zNc=(IiJpc%#m%zanVy8#QU;p#L!UpnaK-{C9tzW0bK*l{t21xw7Zcw-(!nh8E28aM z&&#c@Rs)Jw*S|kov*c`T&FK+vjixdU_;3l44@@`6cG>BYnZ? zOV&=#DXEsTrAUGp0IRo6uup-jl~d0}nl!*7zpcbc-?*E&+ntgl7Qj?{GbV!9J_#^- zvooM1I{Vg!qSm3Z_(aW*7pw;VZZ)oQ8uG=&<44IV}?b)$Mw|hBgTzX*@?znccKG4tLGoHmGpRnmNk|C}T|og8<${ z1QvEgNV_brr~+{5Pet>$&p04f71ydVwjD?e9G$rEMp%{(xXD%97PI(rs_a!8=0=4l zoZ-$n)?*a(bkL*YNPIQrN{jg^Oe7VfwNLQRcD$#oYnv(?>1bmw9j&?D)q4jxfmU3i zGN8FBp@aS%+ztM$k@Z% zEXAoBQ$F)@|D*7flJ+soetuC=Y;kdMoeTspUI*lxWs1(#O|sm3bNQpmuW|_YtE6$_ z@-?~pX9rGSU;?lo(TI5X(CO8gJTJ1xIc1zKtxYUZ_tUad1^y+ZKCJ}`68vgw(@10ycu&s6mq%YC^mP6*JNepLMYU(+!03NhS8EEVw zBku*6U9W9%koHno#InAHE-q3}S?eWYZpg!kRc?@Y$OmqqqMogRc7QwmA!2h~WKcO* zsex1;N~JZIHWb- z@i>``c(Tnq`4x%5pQBp>U8JovxN>O76EpZ*Uh0k;Ia_mtKRqas&S^X)QtB|4my8xu z;mfKclcUMz&DT4o&g;{;-ICjsr|oEAqW_-5Tk(;|<{pZ}YX{~r2Mh4%ev8~OGAyG| z(bLib^7J7l-NYu07w)bAc2-DxW(@{FUFSKW$3I%#HUY^;n=E#%IGZdhY5-*M&eP|8 z1yGUc@t9rUsnq;kbw+2;;z%6oOPJS|on3~0fcz+iHHHFsr?U^~kwV>E0otTuOiU~# zZ-L4ZYdFy&>7$A7lhT31c{~-3UySF79P3M4hTc#1A3$7d-s@XU=39iz$pL%}t4{xe z=2zN>B1((-bgflDN8<~=oXR4wxw$pFkZ3c}Vx>poWCnHIeBoJte2RC0^?{7Pcxm5& zWQ^Y@Bf2qKm4%b{dYbCVAoFg3+6z$#(!rLeZ7lB2FGLdUYjDhxBjqD|GdXaWO0H7T zqHdzFbD6x|ukKxwGn$?BNh^-Le{UNrr^%ryw?eyK{AXeQDZvjqjbT*alyKE!%%mne z(=`%ZB)wi_sD0uPV7Z1vI4pilFEC2JQCch2;Ou6nHkBTvQOhNzBGZT!DIXmJ&TuH6 z4AwL7qqT5Kj=LjR)p1C~mRN&qaNxEx%$TA38kYvGhpk@2 zQRk`oc)Hi<7ZsyqaWy2Gg8Gfo^fhET6a0R^#e!R=er(?f^snjeZErr|sXE!N|S;ejg0K|MGn^^^H(L0WJd!TkDfe1g(g4c2k)_6 zE(C(!WnDw=L!KJr4D%m_g%Jvp8;RHb@LFF6H-q;R=XP|$_0)}O_J4Kh0rV-K-LB!F zou|;9`{paJ@xWjcnRR9asQ2Xz#5W%b@iG)9v@bASKnjTyRVqrHZ31^+21$i#Kgv9T2>+f^yKJ{yyr4vPB~UFem76t z4DKqHcxO?9y({;B3i5hf>evcSb9KR=pxxDNKu`@hw~u2VSfidx4wK1e{p zU)#wQ=j-p6j)`R2p3}=6?dNt8WjWsSKLtjIfVpV?7j17HRps8U3oFtf9RkuwcS<*c zq@)Ol#H70$X^@t3(jX}%lWqYeCMDh7-Cf@^b*;Vk`<`#Fwa(e+jNu;+bPOM#=NI>V z-B$?H@EF(n2v<$Y+HDXt6rM6gVw!J>-c9Lb z73Wct(jvN>`PB1^3TEO%DXLndgWj(bR8qI;RKEyzygo5?|1XL=t4#|@i~(|5Yhvt* zY{<(ur%0aN*>$SiChCM)y*rs~w+5H)v=ZPjiM%qb6FqiY%}|xI|CHP94y@K$Uef}G z9(?|8koSeG`%}->zx^WshJ6EhA)T3%^am3=0_<)u2JVKmW;>bcy~i_7Yyjb|D5+Fk zoQXU6RV~Ar27SY87derMLvi4EPWfvIn)k>wPwibB?m*Ai8H3i-CdN+EotR}9;lZef zJR!`8E}0FoL2lL0w~OP!A5~01>0!j>Xt8+?TyY9`Wsc)- z0MQ+mhuCLd#lZsIIf%|`IZy`~{wS`fe<}wU1&mHSjR|6nuOVXS&L7MoP}+=mfS6?t zk@>b&*qBc>ZjE0@K_vV+wx%sXf5-fzV3pr8CGq4%Eb%5IPq!4KpnaVNszY2Pvgvur z&t`mL7W7O$>7jP?CQdx5C3&*sCeCUvEQ14kN9Jg2ZbtnT%9ta-7!8nJt=fV-_V zHFL+&**AXMbqd~``xR~E%UJvh$!Kd{sl&(Sw3N^+w;+y6Qh|BK7i?d!3sxsriCYzh z6SKKDS<7tDq$nlv>JZe1X!IPz(`$z;`a7M5Y+*O7pSxn&wVxx4YX0DUTP|HynYiE@ zAitp%Afu|8taGN@ne@I=!{o`@Iom~@Y<4WeMhK^iOyaLFg;&$0dO2RmwVrFYf=u*^ zy*OMYF*%v4NOPuaNi8^R!}(-_q0Z|xxwYl297)kyx@6dNVEak?>h%42#0!blCbzI(Ain8y9empblZvU8+#8%^6N>Xjht$W1H zIUR1P&wUFplAqbypr*Eupr|Q)uQ=h(kdbVlNpZ2}UG7cgRMTXBV*}%%0!BkpQT`(c zi`_a_Cna!^%~fN#-rFwD4UIKra+&1fQWB_L>4BWCH;+tpR%>7C&4#_U(ckC%p2O#Y zI7G*qoJ`9_=Y;=rMm;*bYQQ^P1S`$PES{yyZV{Er&RPg7^!*vkU89g=_D(a{pZ>Ia zGz+_V1UvSAa3schtI}`SG_}jJZ_ADnhY()G*8cMcX@P3j7Q1at-S+A#c`wGnAhP{O z!Y}L&Y+OHA)fIA%HpSMs@}RusqX+neZoBH^*9hz8JzsZd7{FkgA&)8EkwnTwQ$^W? zAT>e#2rL3h)@+KGMDUHTlYlzHyV59HeWoxTJ)w=v+brlZ4K)v|sMr`pWHbv1o6_UId7m6L3Pq{ zzsW{3Upbv%=4|S^jELiLY)|^@+gchr=a&?+=5^NxWEBGy$#af@dFS8jsNsmA+1la8 zgF8VcMDt%u09xws`>6QhUglw+onHG%cXkR6p{lFy7^hE38gJwkm3Wr(@}2Xz&@m>$ zg8=HObesK+YDyS$5VA&wZUXksm%AYB`mK~HfC-x13&z8$M|??N0YpikEJ4xbFqhwn zAqLgR49@_qGe*M?t@y8QBFb-qB&)7q0_=n2(NVF-mVeJ3UUMo0*pW9M^A?%VYVjMlxr zAzH`A@?;Ok$h-n4z-Em&Y|mKiXiJG+r>046OE7zI(mP2(IgV(#9_m}Fa(43pz1t20 ziD5rqhggxjWD-}6NA(SzzMzfoHn3uvj^{##zPMZbp|isLZ*^8O6HtsO?9lpA3YdAWB}i}F^E%&PO`oyCr4$GYw(l3$UnN$#NZwQdKd24Gn`jY#Co7cdU$w;3i<^1 zud=CLXvzl&o5W-a$^6F@d_GXGtQ4|meGdo4LmKM+cQ5SKUis|R4FKb+0<5Lo`Jo|Z zQLp6}Ci^gp0`$nrwZyG@3wPgX#Nm?z2#;zpb_W*1?hD(y8guz!^^6LhA??EpLwv&E zpe{3)r?N&a=u)hb@Z3_4J)^6yBYiMxzfjt@=A@q)mCHaf0pSk$U9**`n#jQb3;Zhwkop{!uOTUcU3>yq7&EuC2 z8~Pgg45qF~fi-}dTZ&y0zFKBi^X(+K1J{a7e+Mlr6wvhAzEKgZaXopR;GvKM(&MMQ zvNZ49EF}Yoi9Y%*xBW5!hTTiG1bU@!#d&%J z3g>|sE2+>6dhTVXj-7xTGtdMv*oj;qu9J@GOo&NPc<3)j1RRNzPT>D|F(l> zUL-ZFex^P*dxXZ&piL_)eYrG6=&@z9*64G5MRuLl4m5Pei^XExkk9#1FEH_c0mPW9={d#ztI<^LzJT zQh01nOh1r+aE6`xHmJgxbdwf)*P;?CSB)O1vX*D(r9y4toCG=QBuC74a8AM*?yqYQ zAkHclr>?T*AEI)#kU(HTRvqrlCDtAwS>4sF(&sgMBdf(9P@7a-JZQ2C$=^ShYtH+? zT=o+$6-n@Om@}X4w1^|%b(l;LQ--x_S@senOTNj{qh38d8ml@K8GQBu6+|zu@iJvE zjBzZ7ElH~eq1u%$-aXn;UM;7&46uyf8?Iy7`$RHUq7rDwo|XRHco&!tV2 zQ%J2!OUe@3=`ef1@}?REC<&>FeGU3+{hvs7!h=#=ZMs@rf5IpMPQfUr;M0C-l1Jp;%?W{k0ds^{NZT{h3jg@ovjW^xXjJ%AUPog0PV-9#=`B7{XNN3$P^(UsFt%82 z$$DNAB_LW?@-wZ7-}paRBghfZtD$xX5ol$}qxlvXow z%RV2XVHn{IqZUszUEi6Qo7==*bFZ$R6vhQSH)4n<74p(8)oY=2CwATrIG@KLqmCsg z#tIRb!-jtO@`XlJR5bR$j`bg&-6&Ep8X?RNRQf02Uv{#<`gmoDkAWn%nM1d{kP$m* z+gJ3uMS+lybk#K7M-IX%c$_;nGTJpTcS}AzpqOykfn?iN0-ffpwksC8T$o}F@pnp0 zo?=+o;ct9_ktSeub-Q((fhHFcCS&W%=e>Fq)Wc&q(aYMoQTUMWqR6s{8*WmXKgXYF zg){ZM%xfvB;VHRM)#dbx(kdxG;LMTw+_w!~A8_U%V|DLhesK-6%UCb1lH2TlUkgYc zV=8AL@-=CrB0zm*GryPE5dLlyutbgh_I4i&JQE+a7-c=I5=9PXE?SpiqXe|!XnfHC z1_B<5wyBrV>U#6})fnIb8Q;y`0U$P$9^6=w%!v}(wU^eS0Muby3C4?OllZw!?=okT z!`1Lu^$87I{9b9)v;|P#_*g041j;!;@JH&ZloAo z6Ku-ES&&oad%Mm1Ky@YEeqxF|%c}kCaVxzJoA9Z5cRv(^Kj13Z!yR<1tT3HZj=MUz z8lAk#m5l1xlU`yn$z)3^>M7y!bi$w-5YqNP5?q~_T+X|l1Wbpp+h2SFd0Cp7#gLcz zN~0d3887x;a=Lq!>()Am^CsGGdM8?bP{@g|MBrN)FU%bKIYGfitDFQl4}AhsMSc{i z=1RPdl|j~N@F>YU+{QE6+S-OcW_`->QU)K7*uCUS-b<)WyqvT~?u@8ySWd1ps+bL4 zwW(7xwR5v9f`??wo9Q>8!_*%x0(sR-q?#i4ZDoj{uoxxbVwiM(WRy3~2J3mF1ksS* z-Oc9?RtC0dZf`>)#|!dyv{fH|ClQK*61^qd3=`eneq?fqVxZ!PMJsW5-J&8=ie2i! zGo;}PT0bP<*C&%byhxR4f{tux4aUDl1|`{CfTqjeyPbYF%!ueh>&<#Y9n{psgtfSx zb-Ag!B1PB!)EbYMd0sKA7k_%q60e4zxUY|Z1fQ8n?{jboawM?{0{h8siOSfQq@`2R zNZN#azBf8Khg;k~wn#`BG?UD(6hi~6hz)inI;*7do=dq3dX(c&;y;si4DL_4wA#NfF06ew0st-exzdL5m5Xi zMYni#Gs4VBupgh1PP65+rgGlS#>WF9)p&qi4?Z);&4r5@4nu!tB0a1uZa(_U9d47B)aBX~W%_ z_L^IqOy}^EcGTIl3e0B>ivNM)-f9?G8{`Tnq2wC-xlwl@v8uaN?P1nVPy&$*{qb4( zwl_AEqL!yfc`St+T*@4T7cQF+8vmi1LSQ=bWlMao>Nbml{bX$+MY~f1Q_T&n#!79J ztdY+T#KmqI-(ysDtc+R= z$dtvxO3HXa2_gD${ieO1DSp+MwmXiI+K}}L+U9fnH1-iX!R(DX z#|rEXs}D*i*S(TNCVLwpM_-Se)jlN4tWT@pLhZJYFi7L%lX}pD@E$8ZXJ#AdGS(R7 zfzGo1VM}$z9B+_HntSE@zInnm2{FeM$z6gOP?&}Ge3Sc|@yMTJ@e_Z5UCioZt+q0^fK_0;L4y2fM`RWC#Vnm6yb%4Z^sB#C*dWEO6MABH+^!qzDAEEW%EFZ-} zzp|}x*VIZ(CQ>I4sjdp>SfOfst$wCe_OPE}l0TIxK8xH9eLxQNEnQ__N-Cq{DO!*O zxE1Thwr7q6l z=tizi!+n|;TyN)=r7+s12UrTBzkM?Okgru9bMIp~V*=#|Z5NYjyyy((W0T&vag8B~ z=|2zx7ecj+2Cx2{^hQ-59>5vX49%1!9;~*v?T`x8kv;55tWmbx?Y9z9F4_i9~dSx#orDk zN4%?KakXmL!5_Es1e~sm)8km1+53rUn50f1>&E9qS%#C3&U3px66#b8DdQ3CWibsZ87diRx;^#L!?)gOhmSkLGtpeemv^X8mdA&WmSaK4dlEafK5X>&5E6Fq? z7Hl?X0pr4{e!}nDagp_X7wX8?tIXNsLb4U4Hl#o-KdqS;+X;a6%Ey2ftV~18#wZX{ z>QD6gP1cvfLT%u#k9-Yy$1;fMn|@H6?%cJVZW}eL*bQ|GzRzgB8ZDcWPg1G+EvIod ze@^tzZl{Ns0J)2dB7M~JEq%p$ILYB?)oAT9n|s|QabG9Ox{+W|VQl(P(%v>zK+q6AAP;FCb)(;%udIYujL5jii~Z@SIN+}-%#O4MB^o4^*U5I1`JNr zPa_pmBxS9vtyloe-tsLQp-RkWS-lSLUk7ifg-Y=#e3pC`BWsaAQAQj)#<+b$yF^Tt zu)3L~*ga9^C+IRpPEEZkuG^#es;CB?glFSTLO)s~n)<>qRI~h33X!Cw^5PZMElm`5 zUpaHb$O;WEe=(g+=ugf3GP< zcSq;o{<#MbrU31of1y!%mM)*J zm92xzk^T`0B1Vh~>yM_l_GP+IS2>B!#T!zrpF*;2 zFbYJiR4KX%Tk`+0^vN~p!5)K#rshjP3;;N&Bkaq~&VF_{X^^8}V36|?$pCcNT|ihb zAbhyAA+za1|O!jy?>e_0gF2nM|=qEAiwYx zK>h{Mc1PcK;s4F_{+*-n4^?M&=g4AIOl)j0GRZLl3JNDq&jRgx&)}Fx+glc=MQ>%I z$*fl(t=^i48Q#AnP1pC6f|wW2qdD(I8@BWyEH$;~bGXy?sdFfsl;22Mo_5+-1_TH$ z+`-pUXX#?VQJy&Xp{1R?OZu+JebzVCW5#Dm8*Z((HgIaR>ecGUs8IAD8}9XUH`4n5M0qE+g|hI}e7@ORfXI;=;+?m9M>_oHh;DtUgGtE!UtTrg@!51yVLZ7&~qBZ5}njp$Rh zW$Ua1{5d5#Jkm?~dREn;PD?PZJ4EvJLG zu)(X}Pb6Iy^&UQFY@Wg=f$NkR?(Ly$SdGf9iNacXm7^{TiZQ`M>e`nk8ix~h+uOyC ziRHYeq);2@H4z1!oSABIaWEyJu=03H%Ldaw(R|4Y`vLaeFQuh}R@ToSo3a(sO&l}x z^6l>ciFrq|%o-4#pyV>zoLX=J!hA^iCZA-je55#*vGT!a&kG!uS5*3HuU zg5uVBDP<7D+7$lU0=W2RiZX|`*0)?moQ(kZhy_NlPIPCmj=pJHMMM?4?-iSX;XhLS92%mktE-cnT=?txr(Z7>u)R%o zU$~Y8`$JY_^S2d%{kC$(vSjA_jZMTHUq4gPow?oDFZ6bD!Wn)cvbX52=g?R#>PT+w z)UCmW^9`V4*ogb}R#X1|t!jG$&z#7nPxghqjf0w1lE@#jrv%t!K!D(MzZ&jZ+4Sf3 z*?_pm>74VqJ|Wh(7Rvhr%zFy?MCMpFpTqDYAmRanX0mB^1Oya%%mEpzKniO!wOYQ? z?nD^RU)RlYu;YWlOW1`S0n}}+_xs4PnScH#HJ%%`jSyc5@y=WcY^Q>X`?NzKI%##7 z!vwz%ye{cK4m^Kh3gYYIjQe6VLVd4tipE^Mb-cK&KIDGGH0n8@BCWDSATUCi*JftI zU<2lu4RBsg8M^!X_kMPKNSAyE*v>oLo{n!L5aQ!^1AdMTphM5|y#%JRM%95+KtZDc zBw&rR96R9r)oR<22hJdQs~SrSi=3=1acED^Gf`1}l2-6ccN`rMQ`j1S%k{LqpuS$9 zRoTEG3$S47V9z#6QoxA^SCppX`O)c_e!z=&_F}0B{!^&~TXy!Cm5ASs+DpnR`n5aM z`vu}>w|XJ}%Q=E}_Wl#P?H42LI3i_}`>V2h;-bsi>sGZXAXM`1tNrcuc@mKP9=K)F zpUMy|a#eswNEou^(S{%rs+hv7$aV_+wdNU@X=`DFNj*ph0Cm@$j_CklyDSa^!slI0 z=X2A~j-N-Ws;tqpasE|-k(2%a0Tjk@3xt`HUji$G>UqfJcRG=*$dU1Jw0`Lrm%SMV zZEfuZg1j_OVTHZ)o?=F%4x$FXz2DLjU{{(y^Ww``nD2`(MMb&#Ek1>uM57o8 zpjX)CkN)a4&?sioAw$VLHYfohQY@y|!Xr+*g>O0g{P>6wnds}}uu#@2IaDYPon?mg zDf}z#-%J07rz7@{9fL&${BN^9z_TuuFOH3CuQMCT{r>hxivNCx-~w3`eJN&MD&ik# zXdNxb15^*tsLJUwyi|2O0DH(4NDnJo#njjsEwcON$*}UaN3m~L45fiLXB}|NT)Bq$ zLr(S|YW){+#J_LapVufS@Zyuj+7(Wroj_)uCaqHHC+rjnaqX>|*3_U@$ng!+X~i>B zj$bSIS&i+}KXn+%uKXG z06I&tSPtqfZ6~pIf_8ukSAVByGb8oXW3!fGPMk1flZ zXj6EtKLT;!@<4Kr0+>^p6$q5yMXclUM8bF)1ItLA`r!nWo9Lth>IAI11x>}PtE)l5 zKrUi8oA0H(xsA;jKQXYk>5kV2#=UKtFV}KJicGqv_dd#)`yiOkyB2mv}Z zHltb3cGpFpC`oUSB1A}Y~IHL8XZe}T95&?$glQ@f<@UM!NNtarY_OS zghS(FC{+C~=)vl0YM-Ue*;;NOMd0(MeQ$^TrgIl8N%3!>8AU-PiTKkAqi8ufxiFil z7T*?KpUc&Ln=DSL7vpa|tqW4Seh@YvAh5*L1A&@=d*$X)k^U{C@!Dtd+XAoCBK=Vi za=M)|37-vm)ifcd(82o|_w_WF1cE+F8pa{uQSPB3qBjQK*7p)-L$EOPqr+%l-SEC0 zUR`~U&D=M-2(Oamv~=x*2+|CClUi;-YAlZH{i6~U172%faM8A~aY|!QRT)bwljxWJ1quALM0wJx!O8a|`f*Kjzkn%`rQ;aj@NK%+ zUMUT=Cc%p*au_^zYPt+>=5!S&>X@`Gc*Se`MX`zDGm8dF83S_G0p($o;2svP&#*bU zKfN2Kq`zH{qSeY%+(N66$?r(gUK4^qj85Ybl!@{c&UdAY2cV&=)9q6v&G^OH9c0(#E5Xv5UVFiRhkjTAMQtGa@imL2TgLG`0cs75g$*AN-7U{nxJTo6D zcy$%Pu=Xuv42VYaO$3USSFQoBtTSwlE{i^g1|*xXnCr93JhUys#;-);L|YWS{=zdP zLfwn)j5ueH$b%`*{0aF(8?e$xDwiJ>u(XBK(htjwvbnLfH@OLsv5d4MsnQ^KQY=7* z$D7Z1#B0@QydJ)9Vqjv5)6)0WaM_v2s$1X*Ucrn1(NOl)01c`l({{UzhI*3{HjZ)T z|Ca;vD;z&#co3G!;d*n?S>X^5*Waxe}_~O*{B9G;* zxOPs}%~?&$=zIyubl2fm{{DBVDD(Ntp5CdT6BBWwz3Eiv#d@axhIf2}@ugfp$f)TX z&MoJWX;71v{~$JJ7X4Zk$KOGcC^)Iz{BznezNVzT^m5vt7#gDMT-Km5WC0$>0jR#; z%2IqT0`@~Dd*l7R$*~3(I@gcQ7ZqGZiDF?r;~CWyiOI0doI(ocPO{yn!L`sDQc7k@ zu{I<^;Btuy4cj^8ECZ@cYYFcXckr*7TKiLBC$|1W$`m9IV?@# z(-AdQZEYe>Ol&YV|F68VUqP5vlo897=EF{xch~!bg6NJ|+`4SESFzB;-0KLOf%Nx{ELh{}+O)0b@syDw zC!n)xW=3}wqv4=A_$ehb_S#U+Yj{xq*E~f<#W%f(_D_a@IP|KokH?XZ%^RZ^3%R@w zf;ReSLN6mSF`cV3nFqa{QGXRLqz)s!-Kl@YqPU{+Q%8n=dpv)+^l*J^%i?zS1Xo!o z%YLcVOlTrJa6ek7#*M4M3Be~Co0n3Si`%%t9gNc`E zWZ-^3olgW5JO)l3w7Xd*?Ikt z#7nCg$cXdCtR;+7xF7J|bId}jv?t>L>`Z4t>-}kz<;0COvtGx2^<=3BdcyskSmFrt z(UM<-_s==#aQ3bNhuoUAAf!4D#J9a)qhMiElpJqu3FG~KWJ!j=Q?kcm{Xi-sS=m$q z8pRzBf6i42wwp@9S;3CWKeTS&sNMy>)YOWG&(B5_D^i-ynfyQmDHD_bRfk%#;pIO zHQmsbQhmDKxu`JF%%2na>>EjX_f8;Yd&d3Ey7MS-jNv<=L}4zA0yXl95LQyFb!{32 z^X)ezkxc9CIfD3S^<`(4U42H$!lGq=B?8PW!;%dG>feWJl;(Er{P=+?STT!P=F88} z(`)aJMeo&QBA#S@wg8&VK=x(bhnQ;A;t?ifS29GD9EVM}6$2tg2%v)S!~-mTDxU@M zE!Z_|fZ4cw?dYW+MNe>1`V?hea@lW9o~=o}Ba(!Wv&H>*O@#(eH-#(I4IUIKdo(1^ zwz=Pg-PBHFCozJZY9PjK(yw>GegTAD>-C{9zm%8n!y@Ixog0n0^3Uv@c`gNdek}o^ zuKIMg*FWr>Co8V)y3f5%{fiE^k?_024*wfez_}VCYslGXF5-3Zl}rF|dP^grBtpeX z0_R&e8GZ1jOnvtKHPE4sB_3vNCtH@r0xQpAaRP{`CO<+Cruz_cAl`FlSHNU+6Ew~( zB1G&*oPNO z1_Wi9=*li&y7~x~6)bGxq?zi1eW2tjJF{9p2{ehW8n-}$_7V^BrF&N)fJE;OqgOjf zY%BAZ|57-7A_rH96@R-#*zyyTcKX4g9yi&$j`nsLsUT!BELm?LsutP1%sTqA*HnZW zD2Gz-Z01FlWu;V1+U%DaHW}3NCWbf6_^}!&uReqwVUM-GVxON}e(3B-iyNKUTfF*% zP#@i$l1q(Qr&=N75yi}U#@z{>p7ryEhn_+dy9z*&RdaXORE7-QIfj&q+&e(_ihtu~ z0@K)Ie@L{%p29wB6eVeW$Ddty;P1|B>0i5U(VB!w+o-hk4hmYXJ@45Lf$N4-Icd`G zdTywQZO>}pTM2cQnaZl`-2udjvNciX-ptv}V;z>g++N>$%H0^=s&SGn9p2WMSrlL6wuh93P9T!$}BpzwFD4A?=G9q zo7jd_+o$GEOI^F$F-42FJ^VA#v*akbrLKmOnrZ9=_Y$jZ=S$lQv-^G>i+J&MuS`h) z`;uKupDqSfoJc}G3P^H7e+I9NB{J#HNsaD#)J+H48YwimeZ@}2E%oVQ5!3gH1>dsa zWA`v*(lrCqnT+x6$CFz-aO-Ftal}^(x}O1bLO{RHA(t#MG!y+eC6s8nGkTw0I6HB{ z&#Q8=!A|JFdT*TQY8d_Q?!2XJ0Kuaogflf{u@RmhrysHRGI}wlU+7l@pX)fz|J&(B ztc>y(=A!a9n9IOhZ6QO>>DdZv>bO#DMBH?UP5mZqYn*i9%Zv92`&vLEQ4)-cZP;cZ zp?(H5z+2`ACqn?k%W{*s(m1CoM@n z`(%f+gIFR-L2p|ggLPf3$Uj2i2Ta_)(2W7x9LSu# zlRsEw(bz=Ozwq~g7F5I}eL^CSqWE~dLMO@q3&S-^ug^z@Myv}6*&}FekVWUW3;SG8 z&yV>Fa8LL{q|OukAsC_Bf9Z`hl;#hC!3sw|B{9uo@xH6NNJ!yHt%xCay&!X!0{Trn z3toSK*A3<}RVok}LZI>k03?~aWzjoHk)zn?K<6KiwngtR2XY%5btw#Ws;$6Y8HGTQ=7g7N}LR}E}edu}o!j{)){{vpL z{(Z=MfBM(2@)|fzy87ujI9s_Uz0YUqS}uODagPwbbrXkWVjw;tzri{ha>Hmx%Kh-+ zg9^FVgMiSkzFg;mIA=dhb1a-i$*1WG#6oUgM~U&CiWdY0HrtgnIj$?!?bUBPk?LCb z9;eKYjGwX94g|m83he{1$<~;!g#b{4Rgb&5*RY?s@3k&?_BE%}2s<8jO?)&>cb6$c zD{bin>KoqmLbd#r``ea#IycU(+kM{_lSm9S*4|kxuQY=7(8E+(9p$;4}FlZ`MeX{rqyz#As+fds4EI7wg(E82-j_N zD;KeSZ(0h2lQ@FDa#Qjdd?zRnj|tkp#Wp$mg{)lm=#NqHrkYdS0;dk45LT4a(sz_u zBsgxGR8e#iUIl&Xs}5zKBi!3}f@Bykz5sH5V7+WvdL>y0nq!rD1MtJBKToQB?D*kQEqH4G1*d_ zA`&s{dw)BnR|Q~&%4n_2_~~!_zdnZJqq!j!YXk`;0i~XhbfC!VdstO-Yk=uJD`kY$ zu-H!i-Q?h_%VH4WR(=91Dk?k8B3?L9{f!>b5DdjoO0F>JUw*iIkdl#6mSG5|?=>Oq zPtjkyy~p4Wfi-OK#AoOz%xr1)3R7n#ISuzH?NnmQjQ>evkK0^ML# zeiWJKPPtOUyFJ*%!+`R+w@AhekTDN&+8k2qgw0{XXLj<_eiBj9h0gB;=7*LxoxN#b z+}j44clHl-5xuywX^KbR9$|K+xy}(;03VQ(dE$(lp#I@DoN_QYzuZcksGbH=h8M4G z=PvhGteJI`90`@PDa$fvtOu>bgl%$52DWbG6}VI%g>FxVul&qMB-x!ebCaM*q8H*| zKHKzJ4gCxuch!t%VopJU$b_K+I4qP_v$mr#9ePlY9$lvG@xJU9`6ld((ajr{RvJwNsP0={Oq zj&+zuL;wZro(SpL-t8oS`TAV+Xj}Z=0?<7G+h(8$rx}eswkH(nTG)Id^us8BwI`{k zQ{;?8FX(4T$1r#{zrqqZ{6IbGus_J>ljUMt&{aU;;Rq`?r$=KGp3= z+h+a{*mP>jn=fK_zD2Z`7PaMOmF+adh`mbmXPe+tk*|iLi+9sGK$43EZ^re^`iX}^ zQ@88>918&URk4cP-yCxS-QIA{@o16OHfD<(Y7dRjE&>O+L=-XMGV-|?Zb?L0Nm8mnB zmR`{7!fr$GrhhC|?({dyBB%^5w0r9|GX7(3jJZ}yo9L|c9NY(JJu&xgoESN*uIiq# z_`3~T$El;9*loz^Ig3nL=Y8$s*M*cmdZ3ObC71RLm;^$ElbpxKOUTHt7VJ^U*CGTh zYJ6Ns8{ZhDO_&Oa2hzD4%3YAOc`vqG0fU84NY$@9QbaD^zj^)I?1TO4g`NA&g?)El z->6sYc^-h5)QSo{4#xa>m?L%0lg>Yp^jFZC2a}%@z~^BaPPfws)6j3DG^ScA{3=uW z(`3I!uqRdBA$rit$LI@$w5n-`)x<2a4cDQhroekVgpI}5H2RI_-(PvhK9^mN&M6+rLPvBbnn*e2gRd*FCzP ztUzA#Z&a9Q1*({cOsn0gDh^MXo*d7$H-FWizK8b!eDR&-F^OsLRo><=@)TSlsV zd4&?-uD5`D%yA0J?|r7S#ei2v=TW@U+Y~UNDI>0Jl{!&$jtgThb;6iS_1KaBf6OIg zoQI9twl+3OW^!?K%1Y0BO(k$0u>RX-Z@0jmzUnu9{+>JE$SI!-;v1{GS5z(u$D5XP^v`3Uf< zrcM6G{3?RY`4->*;8#@w{3^MB<5wY+MG^ZpT|A3{ljn|Ag7K>gYv|MDHxla@=(h=a zQ*)58V4qJ8_ z3(uU=Pl99OjzxioHvIs9jbPP#gaFd}kksLc1uRDY6i|3;?-|kI6X==%4F1jRRf$N? z2i(0+68;G>)9JAvKo8-!UxJqg=>_l^6%%tzW{L;o)YhJFv)AKz{qYo~0O<`bl*rKE zAA&xKT!o(Tfy%Q~ghHDv_5;po5t^E$qZo0r^pT^~2Q-fX-9o9cHNrwm^bK#n*^ge) zE30`9!7e&1B~+&trPaq#9eFqMdxk53*j4!+C!)Egtm zs{HHZ>)uTvOS2Hy4lk3QdNaMT#DU<6TZRJcZrmabi45<~>6|ZPY_Bd zktUJ$>E{y$$h}lbs=#_ug+=4leHekA-cM2a4)ktSTb!wNQI8HbTPvGE{QU-@mL|$z zrqgw5L5!*`_pM~Ok14yc5Q%7oCy6Y#y5G$$T`yPCsIB1^hn$a(3_m^0CXU6`@Zm4q zTUChECr+SO+_b?%i$6xO?1iEVjlWi3{A=%ko3!i0fkfzL$wx~_ge zuDv3ceE@DQ?A2G@s&+agL~ORIlDNAzfN)m9?^tbkF-U z*m(W_;KSg21FHhg?_#=$*dO^lx2Ckso0w3<@R02(ggz!DC2{qFKD_(mY_NLA2oI_{ zt%CSWd+@uj<%|?q=J+?l5lytH=0&71N-`qlzsu#ujs&Ozu_)FP!;I4jDn%9W;$s>W z$GSo4eJ@F>jg1_U%45o%18^L~H;h%Y{UMCcvOV1O9J?A4%1w{L+9AgMwVC#ru6u^l&=H>Rl<5lyYXHX-9swnD3G_A`%+@4mqWe;$;fV>U&KFW zGlQR7g39}6w}ufK_jHN3T6&hvD6BHhPHI%NosXByA6ri8le_b$$JEp!#5q)|3|K30 zIs>bHa}rqXxWMm-i1m_S+jM*uo8=!_bv;1I`6%|sc4Vbxq8D^nDqz;GlkzHo{!pef zZ|y~R`I@&bPE#}g1MI!Xl}@b1-O^3Rce2GAJc6jxzbqT!zNqTtq}CNo>X9x(RADY zc!gf6hP4+Hcj6hR){5R{BfdXGHy5r!%sncAkiY9RD&0KJ$TY#V_PD)NW3DANn{Rr_ zsK@`BS9h}3*y5r&+2=r@#;`#dkUk5Io~o6F^R8xFMNa`f)zXYzr(KH2vp<5(Y*qc+ zf&a~-DyzCgjs2@Yn|h;b%HQKT@1OxoL!)e#L zUgOUVDIo`i*(G%cHwL;w2*(hcg2feF4&z;vjn~zm{8*1iV$K<~xJ9F_sd>hDbi~l9 z$G=#Uy*vH3iJ~;1t3O9-opX7)+xz8$$$kJ)xJsHlFJgOGn`bW_|3NSL!UsXY!P5OWDw% z6jYXGRv)LP1a4im)L+vF1tCx-rn%DtKa2-j0q1!`{9!U1%SejH{5X4LtOXPkCvNAFcwFM{%rrVlXTPFb4KC_}d(}&He%PBg^Ri@zAyMmp9 zJ>H5cF7+L3A+v&bAtuzc z?4|1t77J@UE3XHJr&A7~>y8bJP%(ID0 zl|(KX)1Hyo-TSu_=`#W((N~u0ulpb7mX}8xcTSEGB7nAetzz3>L|Nk1F}hewYuBMF zPtj_OuIFgn#`dNOD+Z&JO^B=HAr-LDvoVd5K`RM4bD1UQ!NYVRDA2dw-r$S)k9K`u za+OwyUgc#nQ&;INB!i%f)hILICfa-MJal5vFd44+oMrQFxS&G zk^~Qunc&Xmly_e|dMW4k0;|n_zg&~wgO`3TxvWhs%04jPiH;6pn4)}^VTIe}v)9b5 zA2KMZ@0R6p==B7uL$K04765HNk{bPq6C?3#q;1Agqf0v18buzU8Rzjh5<$%1S@)yYA|b*6S(AJe{C=mr{=Fz(Aa#a|6tmX_ zmCHNK{{6#K$K#yroHPXZ_Z^l`dci8WxbaEVsH;u=G;X|1Ocvy(TWNJH+>ItKrRXYi zs|sJfpvfi}MyTuUW1>7gtgjeGcm$zgYlPY;{eR?rWmJ{v-nSwR(jkq~APv&e-J5Rd z?vN0WE@?L1-Q6h-o9;#$NeKY~!S_aI=FEA{IdkS&>-qM6+k3MXcU<+4Uwmt>K!A*< z7R7AS%~`-1=7^)j7AaBs3#oQV&+)WeNp8QtpX|_cgA>$naf#PJs&NWZ@t6IlD5_wV$D4;1r zId2JL48QPgUOH0R&@qQnAxe#OQ#?FD-!DkgxZ^SHR(f7s)ia70)I2)Qn(3Nnwe=un z1@iN_-RkFHzdY4|HtlvVw*j8{GPRW#caU3z*~{8}Jte)8{^1O-Xk-#@Z8tmLpvsHt z9|K-G9d@%&NxUxA?SZD%*aWKk2lkMq1?BBdQn#WPN5OMy-6dCFUaulSuWYkBW9Pl)?aNOJhnw|BN^ zY|Y@d>i`ERp4dK_m@reu>ABPUeQ947*9pkbsS}!m&%)4wCiFVfEe-mNv!aOdXYYJU zQpPf*KvxlJ$aU=E3_pBPlT!(ZrU=@@6dXK|6sIa`qi{a|f>BE$zgJu8TQ0Vdg`Ksq zK)S{eF{oNGAVs@v3Kv60un>04m~w=$j5i@1`A18&sP1UxhnC3t!Q{8f%VOZQykYub zGS?ZlZ{0gIY6c}h@Y~&^Ss8t(U5ReH*jS+ALYD;u{0mpXT6K+ezFqtv~zCIgI+Lug=%IFIEpW4LmTq;t?IVu6z5eE^h$ro z!YIL)d>DW*i7lYGahY$ZqUw*cdwpvF zVqi6<&!OX$gRI=e5NiQ8J7i@1t^#|hv_3>R616TII3&0|atJsbe zD4Fb8eizd66mCO&!YzP^gy?)%zp`Y!-Ip1>9@sk<6wu9^D`L5@YGuvALB(N2l^zBh zHDNu*x1Fz!jOoNfs*YR9`9W$F188pUDm84hk%nl6ok$w-d2>SQvi@^y=B{~aCXpl2 zsaBDPJgcjLl~M4h<}vitT5J?*V#rqB^jVRoB0FCR^Vwch%et*C){cRq(>M^v3>{Tm z#cdmln4;&bad)M?ZdpV`)xrE73%LR6N@7MO3dtyH7Ld!>p_ID*y7Q^eR>$86ebg9D z0gy@6aKLSm(ng26Qu#)*X&K3;>e0!dZttSpi45F2Nzc1z5ODA}#6_J%VPL%wWP-P~ zPon^GRHF~`MXYizZ4V?a9k2VmxjdC3#OEjk94^WOSU2-`m`{2YIY zu$dw_{226{f=5~^^11Y@`T@yp9mKt4E;opuTBDg+?z>SoDHLg95On_G zZMh*W+x9_YP`@#3_ZD$Q5*C z`+o23CQnYh`4745WC1>EFgg#{bt8BM;A+X>{m|vV{f=R6a-6!yVs!E`O7bi7oeTw} zKJ)Nw2uDKD>*N#E)KwF%-qZ@NE}OVp{7aOD`I@WuhoE)Vxl&DwVPj>R*~nDi>JN+f z48QZC{&9-@53JI!uO9{9`?A2HiC4`bK@M-NtuF>or>KlRt$S7;T*Pa zCIoQaX2fk(e^#b&P_ zKdh)bArtzx98-lBD;MLaH<_~N+C=NTDO?zSyg(IJSW)QfWqH`52Ino+3+g3DnGkrD zdBxmQskK*Q&+QyXeOO?O1!=_&xB3P&b^&&hDP#~4@>@wtkE$;}C9|}uN^;fJ5?eb} zQDJA9DZxQjHXLIU++153`uF05_s}Af&iUU)dAA#ybJo}h&WVs###r``z~%4<}zY2 zP30s+&6}28My$&{4*@oX}E^sAEIeC^Zknt@b`_*M@On}*NC@8 zX|%VTCcYvWFZ!EjwKsA)U*=jZS4pA}^I)k)c7-RblKRoXy)BH)%LZVDYgPNF+p_qQ z9T*ia6|zu=;szk(WUs==sXaUr~r>g59LP7(v`CF&(c zf?E;Kl?O%xhnOn9ntV{IoWXX~Z+DGd53>KF=-XC$VvUd#rl#Pc z9?+;=ETr>7zoKfliu|Fn_(7cx$K-*Y<#HX6@Ci*XOrEkhDq*uf0#VlIwF^I6rj-YE zn2JKZ{kaR5%lF*4__%=*Mt*{1vRH=UwiogZLDh?knly@~iT`DF{;^~~hW{#@IWC2B z9u(g>+eesvX}8$4aJKt0_nZK|eS$to0esSR;iGl0`?jiEvHhyAC9g7*iLJK2UG@H~ zOV4=$1$;eSB0spd&&pEkP^j&_=bUxF1C?EKXtkZa|IXdxe5rabZKV0@`qFDG9289O z=)KD~NI(q^ZKQtes8%Rn_hWC_6|QZc!}nGoDAwR1yHDO%$5(F?NmQ4lpZd2 zXt^9NWl`aKcA7OAbZ*~puj+YPjwsbUHis`b)t#kf+2p5ZqgsYza%Delc%*;a|g=A^eQ&<2HS~iIZRNK8rz8r}h zmM=kBfCl$-=ID58c>^>`>@D}L*)Sf&ZnRJgUk36Io$BOdXZwd<&t3gatWz;YbP9VM zt8zIw8U~_Sy)JIBo2C#47qA_BtBFlBM%6iQd&#JI%DWufU0(Cz3+w`Le)!0QsEpn$d*_H}9<@o$beOTeR1Hoz+;ud-4Hb6UqTC-Wst zZY+9STlIHvR6<#ct!pF}HcmiUVOEvk{kP=|rn3ZzEWpQCS=1A@H<@r$Py zzRqfwB-BrCRV+>yn-(1%zHTWNajQL)7)rFa>pWPi+bUN|XL$t5aI*yDi!)~HRg+kq zBQzpL!%t8GBA4&i{ZT&OhGq`qU~&O@&fDvThGg!iZsx5CKIggXw5=QSpP@<$)YzqU z3_s2og4=Mkwv3S=`4PkMcsWbG5s3trBA@%Rq~5zEVProqbL*#SiG&rl6Y7CsPDoRw zMm4zw!?BXzwucWOU8s#fz&=vQ#vo56fq)=n#MNaXmt-#&Vrf^|ukyXxm#wGT9r;~m z#A@qo(V+FL!>?Q&myrAyd5Ep6Iyqel?n})3ZZGaaMHK?)q85P6>pOK%&`E9nJr{_0 zmY2m%B>tnYrnBcsd*9QM`0tnAAa0qA3`_>l;rR1WL^9=2M|Jh9Ul6H8xGuOyM2C*Zn@(^@X2w%>cPWO{e_!x(Ede2EbbirgP>Dp704bFobVG06;j zZmvF0=W#hqlu2aD(n?rZUM|&b(H&H^F-ZEGb4=nR<#_QZ^U`;(ZMNJTVWJj2HEkuJ zOI8fjFVQwmN7y@suYjgS5{GpIU1GqBxqoemCAS~e|G*eqegAd)0y9PDU-0bq|?4{kPw6ljcK*l6}Qb1 z2luLmF0BGjBF|L{Wg4KfBIqd>-5OHL4B7S6)qnDAHj6I|Uu3%$+-3bfi~J$h+*>b!BCL(52zAwqwtHJ78* zRBb6XyaLu$SX9!4kl#Glr#pAPy@u^k9sUFoJ*EKQ&eUb+_05q8`p z0~tbx{?scj*UyEN(RtdK@d@!3%nMD)niuYuL(2f>df+heUD zpJId1Gog9`H!@a)t~yg)Z`CChXP4KNp9Gq`PU|dm1ohEp>#SDJqUMK>Ez1kSGbnLK z8WnKwXqR_mD|l&C*k|&agkQgf5GHZC<(F5KRK)UkoFt%l9)=!(O>2RSHv`iMme0lEI? z+`$zx%^){e;Y5*GE5W29KeSSfy-9p6-_5nW{ba6ngTjQlx`DmqHTj+TE{)K)`kG`FbMqtA@X^Kk>rd7J_f9po&|1+w8Yx#aJ{f0NIP?pv zTdAHj)JPc222@le4b?w2Mv!?j^@&+S`Jv;tpi&PXz^G-Y_wynecpsr=xq z&eGQSsjz+*%kUFaqbAivsb~HYR#Oop4&T15N6oQL8+x8Ao5?IkrlDC_9nIEd*`?+` z)t%lcu8hx_=3788Xu>{F3vTnOMcwC@z!}xe>~>ka+iW_f^JQW3X|ycD5LKCL2y0g0 zw=s)9YupB_@OTnI8`rBNdGbg*DnAY5OTXzgQ|nD zM7G=5VkfaviU%px9$XfVC!;AY2(eG09K;5~!I+7enJi)?4Sfiw5{H+9hZM(MF*QJY zIreQ!D0*=snd*^IJ0jj6dQ~Ap)@F`Flh&aG41xH%P2P=~mH3kkkAs%c=dTJTJ(2a} zj4|*imp9o#EXxh(%Iq8s5^ZM@0UR$x17P%RK(Zt)9Yu~qil+Pes6V`K0IF*EI$pvs zceJT*W+~w7hjzoFV++k{tE!h#nG|X zx0kUzzt+sH&youptZbJ+xJ2K;fU1efjw$rUdIMvR2a>c8LG;8UD3P%I4AdvPA9qzd zK7D+|UaIZ34O&{tleA93;bOmq^1VjeXUWfXQZxl~7LSl9tai7i1nm-tBTcmH5ctro8B9k_zwzl+ z67!r%+5oGd0xXkjH7OMp)&7qw7T6cKf77{f+!%T-4r(#U*VmUJg)CYBCrm7h4iq$a@to`uDTtPvUGGb~UGhk3qaz~r|Q+^z8N z@IT?G2Jg69^O86MtK6x=ZDB9}rYG@$5frB-djxfLwQ_JR8zmqH^(e!)8cSdp4HGD+ z4T#y{k&i!pfN=@c_r8H``6txWH^*QI+C2+Df5tlFW`95WAEh_6SA^)lYXSW6LPHV-DQaBAQ%f4<`ZGmB< z8gzYl{)Pb@za&}K4d%EJ=U?hrS&8Z>@vb@W5y2sHw#Fg$ThxDREqz9Swqt-Vz~sdB z-wbgIY^rrrR4|#6IB6dJL|rx+zh;Iqgax$_L(#kHE2ANoQ0C`b%^)n@&G!N5VRb&O z>3w5@6#i#5HOhod1pl2KlM#M?M)~UM8rGc=Lx;D06aVJ%f3HRU<4@xa2y5?VQsIOI z;tNKf)XccOp#+Mgph|)f0En*4FT=uNwjm(iuxq}O$b$#z!*6&-Efan_}6eVYC{>v z^LgXfI|Oh?#ipX+KN2LV-6d=e#t?4D4j-I~?T`Ls<^-nznnJyNR(u*5n z`5n$r_`jP#2T8YmD!*>o=-E%pRxFtTo@`qaRUYsi}mg?rkf~&dZL#&dtGs^4qTE z69G(-VngXe_CMAQ#xE6&nO`axnZr@i47LEW3ph>NINaRaV$#yeK50{$f^+_gi1??Q znUsCBTe8E82F2<~oOtZKaIOR#?Q6el4UkI!OACXrJm`-}O8zfw&MLx}Dapyugh+^p zESDkvJ;xC_fAbYsL2=?*Sy@f*`d(jO<82!G`m%T=xc&}TM0k+Af(|;+|NYsSLw+(G z97+Co_Aq{Nb?H`(9s*HUa>EyYZ}0z10KHa)96`0_1ofPGDh)X1u2Af}ex40Jx`Gco zNmJ4v+{BcBxgujwVky8PMMOek-FRy7uEf;#Pshq%+<}h~!dhuvd;4p$QDi{=)rEsA z{kMJ%)=w=)vH!e#^``q}xEX%Fa5p3wNdKELN?YioQLXjh?7~9ovUNrP+poe%w~G8T zuNG+jxxCK%|1)drkgH4kMUSzZoZO+`{4bS&KTVl`Kf0M}7y{p|9tjLI93XMKi}Bc_?))zHHUN+HZR!pZL&{6HHPi;Zao(&CqR#^E$XMRuI2BWz`q6#xO_ox zS^QhRx<2#b;--0W9j9Vg!(3>i;R1`H((0JuLxfVt$P{{7Z3xf9xOQ zR0z301#q!imy@5+PZoM5y1(*)k}uyX%2-VYQi&s;;oC4Uki!Xr06I|RKP8gS`1s!* zr^bQ7qF)Ax|M5TnlqLP^kDh-3`-jSYWsbi{NWU^iCx$Goo&3yFEhfhp;)hIUjS?Uc z)K~-QQgu_rFI7vdoZnO}|L!wJAwUDoZa`fK(WRqLkI@U^m)!PyHD1s@z106T59{aC zCkc@L68m^_RdVM{Qz?X*B#^nRm5MO*d6Hd0VK&dzycO=Jy0^vy$tvTY$_4)mb?={h zpAnSLPsVP%?+O6+f?4P-Vdj~mIRVk zr<#2MOq*$EnQ07=1aN zO&pgY0FyN>Fgu4YO71Bc{Rnx*m0v>sSo4aCOfn0*B(#v#19W zlGH`7vrD{$d6t@(vdLhjl&!020!AO9!ufMBwwtkQ9P6!i(Gv(g<7FxAqT38KlGe2u z5Yc3)GBfa+z$?Dh5j21`mZD z-hCjpZ2h_q+Rm2Q3LV0c^72Zz$p?sNQm-E*$G6nvkp6Yf|Jz?y1b?3*ZJ($IKSs4$+#R)@~7h(o|6PjuDrRtSN-4yQAAe#o1~oBUs3A+@dl%q zew*wk@pY&&stPV!J&GFD4j~wZP7Eg+OpZPn@v=4IGZX2TSByRP19uBY|&Z%I8VUpW{NIhB@(v1hw$P#zc8j3NXSY#z$ zVDbhekm}WKwm!bZQ$7ZhnJ!Mt+l^qxHQJP8EGz(hR!A7H)U)}~!LL3~U9*OAf#|`G zgPI!X_Q&2cG~xWM=!4Y91*ovp)!4P1JrE7X8;p#k#1v)$?P370wKVQI@;k}LJB5(P zS=;4s1sx-K#pR+5q^OF%KNL2N`I*kQT4GBxuKd(?DA_3?$5 zZ*SP+=FqjG*+757AEdyd9&u~?qTcpjk^KJoBAQQ)O3$vK0D+maxz5N{=xzR0rl>#$4I zec=57>0T^mib8&SmM#;(`*DTmAF`S^E;(zSonC$^8X&6aiZ=Th^v}c};begLgGQ=) zJ9;__fX!Ykq1F$=Vl!auU51@gRKzC0@>->p+F<%83@d8Q=pmG^`4lsaWkrBo0K(5p zcp5y(={%|rr*oaLUK;iE)Q?&mRLd_jjRP6f(nkX6BK6=$g1;{Bn{dscx!L%?<<0Lh z6iS5kNtUcfLvaSUaY|WcJgXUdwr3OszUwbKH*nbdaOBc<8xFj@7S^o|=>^Z+ik*E88FX3)R-966$#jwPqMl zRc?;?()RYzHZ?HD=Zwh|0Nn!|k5i|(yS;*zInrSlzeT%Eb?;NAMQPV(qeqhlag1Qzo;zPQSHUz-6xvm@#^V`SB=d9_kyFD ztr?#g!7H=Gm#J+6jx3&=BQ(@X8;sb=)mapoqMB%yT$uj+(kcUeO1s>F9{v*h7})p@ zWJjCFc4~mHq#s83+Ce*KSS3YUQI)|OLS~|J!DX)E4ee+u zAN$-7Zr{7#S}=(?vp%!6RM~@iN_QZx8rjoSE~E68AZxayf)O+0=80yFg?VwqONvXN zi3uQPFml=cMsv*`^P`&*z#pETnUSn<02z+jZM^Dvj3@kPBK#~)I0w-10yHMn&?{bK zl$j29vA%l_a6VQub?E?qQ16D9It08Ae@UAg^kaVfVomseT0q{p6MENoK< zJli{iR1t$NEdCk)yZlxYM|uJP_f+TWV*KRTty7*|ccOco*UmuAQzl}-SfPf<1jdmc z0qgI!y<4dLAb{kI$?)yRVH(^!!kMN^y^9@MEeAmchiH#jp8BfCN`Uw()LwXPiWH>n zdeWwAgo6AzIR}EI&0+v~-1vv5&#bhW<2}B#4X)6}m#(&-r_N}k5se%dm)2SyxLv!M z?xX_V3*W~U4~KcrTbZRuamcWxNb3$79TJobXa~I3AjYY!XJH3MgE)~N_ldV%>voOm zQk#@ZL@gzxlUC_9DNTCKAIEy83LG57AuXIDvEQhpj-VW#8TSzk5FG`mT+qB`RS6w? zETx}kaFkBVAf2KAJ&exEJNGYB?irNw~>)DFA?QSlk($x?Bm}7?2EkY1`@W83mn-b6mT}2x+_+0oA zI*Y@zKyGh?*VF7&Qji0q33t?zb_m`vEW7FJj_zs6G=)83IQ4SNzAT0u)7oK>jbptM z0pX5IM&azS(@LD-JnuH4Nf$h1xV{a#pNrwxY5&Tfm;~Aa!CvvqhXx@W+EqeyF~_mC zur%~}WCSI(hxdvJ%>ZMZ2nAw`+vvqA$@VvWQxR2ImU`=;>h*3|>79>W&G^oFdB)Wi z;k%!1xHx2#itIPrJk73HW_C{dNjO$SrzcbC;(-lrdfJZZzaFzh?*ZGbyu3UbR=->n zyFQ|GEI>+cYoj*|3mov~21w$NPm{6Z)@#oZ&y8jRXB@5}+hSNBs7u5fh+jL?qsJ|b z>c1Ur5}pKC4vAD@gtvVkrHe@~o=kX3LU(ubH8vJ9Vx`fRg4bhesB$BNi3X-uziD12 zkK6!zr;K&W!#Qx9SxE$sDIjPQ&ISIwB2V zRYaok2y(J3b4AMHFRFLeI9cZ52zEMK9Q*fuXdo<(@hh-=H%UP}P!?Sl#J5M|)1KkL zCtTd$I8V*xQl3>FiNP!AghfrN>0#(cWlRn&VaFSWVD*f$6WTZd%rn0sOFS|2AsPaf zMJS4@uFfu&%SR52?esM0$?YL51R2Ox$cOB`8a;;$TJ=V_2XRpJ3F*0LtCqic7Ks4= z*`(OeMHQI)`T9~x7rx8fKqOPHc3Id%f8_T zq|j<$@8VExrNKpFkouBt2j7x2!F&?gkk&mbCwd*?!C&sr6OSQsbY!KcqC)dS{cGy+ zTbbEsgCIFe7c4N=V2fqKUN%9&aJsbUCGgp#Z z14;M`uH#d-rWBdYjuw7^xV3M(Kv54V!S+V6y{uw#fG<5f z?`{A5gjpD&^oDMiiPNcUagSySTkv&Mpp!w{GrPNXS}vD%F`kZ-LnTW-ofv?74)F^tJ^qNA8OWNfO5fVYj z_dH1XW>}VBc3wwpxEYWCVb>Y1wIlr-yN&?hOruO2E)Yq~$MbRF3`>v{5CPjzsn407 zR)#Wv4iw>_{91MZ7oI&eHMPMe>D_JhV`eU=jmid#*&YpAq8+rh6>UL0;$;5Yn@<<* zXx6ey=CppjJYVReS#ihUL5i#1OW)s&0O@UoE@3SZzENZGATwNc-eZ7`=L6%$?@nUH!DpSXt3m)N}XlBYToc~nmgvfm^76($hP zsjYCiMCPL?ox(Do3PM!eC9PVMMww!{Dm;7|scZFSjFkShjVGdXV|wS^FulX2s@qC= zax4Z*qA;HJm~OGWFoIfn4ut*b8Wk02*ujuwHl?kS+G8qyJZk8^XH_D$<5>_o!5wZK1oJ%ze#{Cpl56B~ScI}==rENr#pTTNgppU@)``F_0C855{egNOF7I6iwb0p3V#cZ}T^n`1wM z)&GVAst&aQo5u*xYIg0h`Kt3S zWbNM1Xe%mub%QQX&1lX?$Kl%+dJ)K%n3rKt5#c;G ziBxSrb3GTaX%4w6qa zia}%y$~2Vd^>%~D9yJbfJh_C^Xt8m^^9tLkGt=;t)WZBbtuh>cJ$ZkH)TxkbR)$ z7@(I2*A};N>M`fw^2sG|!F`kTfJ1|x=7icz73~bOU*4S4!IDNjh^skG$(+-=f!&l~ z_tIfo!bE#bVOPdBw5cogc^cJD4UPUzW{N{wO2P6M8A8rHP&)DHch4VaFvj>{=$3e5 zKJhlzX~vhAJYUM=Y4hF@=7V%mtW6+8`G^pg!$m67F`X!eG@hZex1SK%zE{rRQL0a7 zy|kM8_~gIBXq*I~f>4NJ9zTI~6{R6U6Aa=p=8fgC-|$B!+D}<8@Afh4MF2{g&sN!i z%&XEc$04w2hK3*-pjgQiOEubg9;Qd`Q@U_Ng1)#)#Kgw5wcsRR4Gn#1&2BhSP6~@> zjFAp-o8%~~SoZ3+UcEGd$*!57hm9WJ(Md7h?bK<$iM{gdq9US1OglRI3I?K8wFv!g z**RI=4U*Vwx&-i(1%!nnXcM%A^;Uj|xgY`}lC;_BSqU%wc0z71^-GeaipW?uo&04^ z>j+)jV{u@#t>^W&op;>dm}DCq%h^oaAPO#uak|N>>^)DxFqV4v)xGVF)qW)>-gLiO zluBWbmF-;Ef{k*7P8--UfrtkjHj|F|kOWzoq++;VAKNxKYjGIludd{5_t_sq6$Wrg zk*gpSrAkN{#JNzF;LhG~magPpe#yJBN1B53H$scM4x5`*HJfA1jcfHXG7J=3e$|@c zfKRa8xT@D-v#o`yHt4gA&zF%nm+yb4^Pc?p*c>6IG?CQGUdOS|baY`a&ZOYH$NpnG zUk({poR8(`4Lt-@FMy$(KGVc8^7US!zoX@wAzZ!I#si-YWss3NPIr%QdqlKi;bBAP zQhP~5ZMj+tc(6)+iAqU1Sg{9us#cxL|EXF0Z@b9?q)>Lekl|tEX@BQAQXfE7RZ>-T zmfh9l$WaP7?swjeAVT7|U!FHx@v(jJi-}3y5YDbGRo2!1&ZzS$)7HDm?PkRNu2L%C zdUc20eT8Oq@vTuu=~BDg9AJfau{1ZdN_OjX&Bw7q&)0l4e(;SNa1_GD>7XvsQ8NC1 zQpLhVrWCPDobaHp@M=mWR35JB z&st*;&5*X!(9olQ;3*St&Mn9{KV9737;@O@!lP-_rjG5GQC4+(>PxZ|aAd>2nr_i5 z0pl)sS5#gUf2g=%!s%}A|91Y{^mlppUX0h_zE(~^#aXsYs=E+`AtdLZ6KU3@FVjuP zXl?tIusZ!CaNWGKPb3YF9;xFJLb9LQjZMrWu=NYp#S$Urw zd%61QCRV@WwcqKe(oiz%_Fz%86C9#_TDW5~zWa8KuhB5p?Xpwox|c9(r+a_NucuB& z7blI^mDGHmC}yb zxgi|OPhNQ6Aqd%3#qltFLWe-^G_bx8Pb-L`X6}8Cp!4R)gG! z%;AOZ2ld~*xr&UM#3gbxbm$W(f9p;{biWPKe-Ewrg}uo1d%%ww%JBk3+!R1Z9O}Hq z1jbn6^xG=snDAAuKY0?HdknzA>UcItH;^#W!Xd38nv~DV>JeyU?5>;wlYnH@Sv}{> zMcCShLO|y^bvqEyid3z?E5;}bSd}o(Zp?%^>&(gNfZtnIFBUXl(TLZimK|*QN|A*$ z9`x~0$Re~u=pe?OEfpS-{FWOsgP+r~0${bSY-0WTQTH!hq##7MZwKP}w4AS_?){8Y zF$$a&`+X1QZ?znp5M`BDIj(f~R_j_K&7K}nMI=)Ls;`UAR@cqgAdu?Drh-Y>Mt(%v z3t?~~y(Y~&xeR`?p}C6j{-aL?8N+Q}Re8}v^Vs(=`Js4TvGaDwG!j-WMc!plbE=auq5oFXfW)Gr#0qyt>qrR0KR zJn}g>Jr*{*s=jk&3u0j%jY|p^8W|*Ei0dy)tZ;TaKud%ASs%}_H%r_P#OK0R$7 zV|A;mc25x3-ewe~xExf>uECUY3UqxF@8D|5>8xYot<9jAT_u}t_}qCnHw!TnU#f1A zXpizdjL)FZ0~^WXgA0kQuG%x4;&Y);so)=^@zP&rA05OG(7bNF zejoLcimJaQ7Ci#b9dEh5*j57nb+SbEO(&df&Qm$@%zn(!KB9_NEHP*u6)21^=qH z6l?@EvP91gYggu}sV#}L{#XbN;2L^y6q?;~0p`X}q)A!O#*`Ek#K9HX9iWH|t_d@a z#t+YrC?-W0eOcIev!Sg@4q&XpU6f(Sz(@;h+hQhAU3DC4ZF#pW#+NL7>^e3X&L#K> z;wt{YHkZ7Kow8s(a`QPW#~3m{=w73mcdHEuMPgxLC+~|5g^<-4F9+KcH2u! zAgHTCvQZl~1J>B0sI2anU?4pOHx?;`q(<#j)0m@Q(VmV+7^Vk(Lpya+r6Jxl$jNQ2 zRi)*l)C*57BaIi*l!k9X8$4BnI_HLOl3C6b(Uu4?GZ>7AwFlEUY6)3EQ_*9>^g5qK zU=+cG!GTYZd}%N#`N-?-bweyZ7+;t(VaAzRujaa{`QVNof!T?JILI7WJa4q{0dkU` zM+~=Wh{2O8oUXmCZ5r!^UD56IdhMnHyh%8!$rM)%ttSqf08!V&t~geU^Wb4u3!R!;+8r!O*s zNkQt}1?XbzaRU9uO17=x^>%1WRhAt%QG1>6!3F^03!AT&WO=lB=;w9*S(Bh6NSfsKsJI|;TY2&aRQ%T=@4n`cw9U#z@BU>*poR@(bDFPoL`6kGnwqpL&CansJt8Xz z>3-UcYs^pgfeAmvZPTTzR<4cyT~baio&i#tO@S`y%W__NU;+6EFx1v;SAdX_wZL=j z^J6Z%!}r>>!>pq2Nwa*iuyniS=zc*QQtQER>jW-VahOudu(&mGxmbh4&!`Qn`vwlA zas#S=t0H;c@Vf68%JC(6+}Ab`9-D27e@IyO3uNaW?fo8By*sYU<$N3$S&7{5^F*T+ zoR2{yL|*UsgJF;_;lPy&*mcVnTfvN=6mv19cUgC^&t z*$_Uj>8t$->3sRb{3(~kqm-J}34n&is^$oidO`m}L{ZGnm^Bb{{uy|7949D?xU1wU zPGaw!Pd^{z&~G}jM(mc`H0yY!4D3)e&``F}uWN#;TCRGBAEyta7MCd#GUpqhq!4(? z6InE!AdzKuw5)=#V}qZu#^IcOlF5NNP(irO5a`D0(}*T?1eUher=x({f5h?f3pO;E@~FU~XcP-(E>eLo;DK z?{!o+S8JKnFu~qF3A|;rSV86Zn3(JU<0o(^t$n761>%1Nk%*QB;8O7;V-ME5cNl!> z-R}Tv+Uc}4xBfpR)18o8v#7X_BQp+C%`XwI};evT3}_?jV?Pe_GmCSF!4h=4_}Qs^GbA- zf)puxC?p&}4uC_|36Wt~XlRVwU|KR;eQ~kWwzjiq*dSB8fX{vO16gjACaulJ>i+UE zUGNZE8jrJT5u>Ll!~G?a^25yXQD@6TIR+(2TYyP>H>CoUgX<3xv`Ea5CU6Ohnw>)@ zkJW6Bx>WPAbYUP>WyQ^MO$MTHGJ1HS%s54CS>L8a5$3q*y!I>9QbfZI^m0ebM4G(w zsOOjoS?9kX2BWOM465%0*}Vv$(e5Qh>%MwaB>x=R(t-N&^Jeu%bfyeyOTGw_h?O-q z5%V^MI=&!yJ=D5^rDb(>thO$}h2&cU-clt0edFGX?D)$@8tQX?_MIc-+K;^ejBS^JOGobsMKj4^Bgu;JW6}jiqnCPpd0l1aH6tQ>%j<|zU^8957 zJ7XD)fSE^}y!YIhm^fyfKEvrO7NOS&f!5sF_p{}{3I$0g5ww9i>8Jb420&uFD1$Y( zpg!>jL$Zp z|1$#&Et;AKfR>w|ZRO&kZLqJ#DN*$h&s- z;#s+A=(pR&0(p{a^yRJi}X%YRTE>HU54Cg^H^ro^~A z@TtT7cQ-s1qu|vqfH=qH!q}?W=xJpJfXF9YQV2rY(z0oSDG7(#XleN5rIp})?3fW- zuG0cJsOVq-sudQ~vl`3hCwj2BF71iXs*Y#$82)A>9sj;~fdDqJ>uJ8Y#B7{I_6`8R`4PxW0~ z>W5P}TQaRxp9A0Ii zdP+QW`E)L%RFVzeB>?VutA(hC=ldlU?vV)MuWMU?S>p-9=U9w}`Kwy%cmx2RvBa|i zj^DmA8jm)>?)ydqW)VLpApdYK-MZ^SCfc_eZP-Eo2#of%i{Zsj^-Lxt!Y2r|sKA-c zn+lBmbK4%n`Bw)%@h&8QE_G;U!uriA?z{iT+FOQYxovI3iXbf^(h?$F(%s!iH`3h= z0s>OfNH}pK)gCzb@)p4)91VLs93IEwKe_pu!H zDEKIqPZOh$Ujw!Ew@`bpWoi^?PgCq%J4qZq(^re z6PdUGD%+nmOX`@!4}xUo+iot~dfTq2+rC$K@Zxs!XCl?y^_zoA#HaJPxvDw*mY#Ad zUC;{Fq~16DGN+!n5h(gz4;}TV^PD2jvY7Uv&nQGiM%p^ddw6*K;J*OEqHv6s%W&I3 zjq(e?T)p)OfzWuOOWRt;*<-gEQa;a*b6~sE%tdo*rQaw@ZD*8 z-C=B7=IVTn`0xbz`+&er^DDl+M4(kW&;B*FrW1Mk8CuB5hfF`QcLj7h16ZJj_>rTw zpjOl}mjRZqBFr8$B!OxZGaa*^w7R#VxA;QW24|30vJ(hkfS?XE_sXVVL>Ww%z-vu; zD=L~&-PaG=?$$quX+Va2$h;1~pI(!wq2`z_u|^%!aTlJF#2=XOc&R6Iw4wOGPzk#B9M&YVAK9 z7n(qbcG-vsA;AiGfpQn85`#>9!{zw-^XJ)*8=fUVRnw0Gh_3|Ig-QaE1?$=a8AW9g z5E@&L)Au)AbO=RIYK(g@Tlg%7o_b@Tl0NQ7#5oNCs%#%e17+0Nm)`?zB|F*N;fMgI~2=BFKebf~Q|DXRn2o_+)=i7UK^JBd2jJmtUz4^7zsNmif2(ELE$mp6Bn#6G<-p3{Ni8a_4#j~TaU_)X`T@PRRp z*JStgz|EDyE_Ps8Hqfb^Q2nacohpSM_Hh-tkVIKoxy5^8?>X=_#4Zqd70_;4ZytEi z4J#@G6kpTc)qxXpU5^M^C}K11!&T`8>AB0bgx!cQNnpOifqxRDx@LM}8=Ze~34ez) z@)GfUnE(Yb*t+Bq5B z2}EB?uA8zp$mSbBuU)(}^z}WMt!7-Z5yFcMtxk9m=}np^Dn2lA0+`@=>Z2%QJvFp~;EJ(})CfLA|ov_tE!oR|!zpmKF{IOz^G93K1s z;sUV4W#k}xK*+h!LWz1_+qB=RofzPR0Oo<^ugr6Nha*0>U`}wTQ7Dnp% zVQkhkha^ZBL158)Wu*^qd-slqXajoX?1O?EO#GNPliX8TXXue*Ufdkcfp858NyJ(kyPSfxOPTVVBa{-)K|2pO{A za}LB{H4;T+O<`>svwq$)6bykO4G%Dn`K{eqe2NZ)X7xU?F)}Xe*xTU?Qz3jgV6JjN z40t#WK(9Rg``y>$!0CA@Jk}&Xh-HB>WWD5nreyf(8w%qc5yi2%cI1{Xoqjm6F)p3* zEumhY>i5H~aqHK^1<%l%S;KK4!6>3I$jF2Lw#|p)nTtyq40^D&Vk+(y1cnt*vBI+RRH%eF z1oSDL_O73?L?$3WWVz*=uXr3+Br_{UM@Gym2=pX5CYfL2bF%lfI5*Q-XY{a2D4KRv z0zX}joXph;BB9f3kDSX+@0YI^4}du6m&=m&>h7cLV4|U9J#O&iK6+zw18vrOXP&qF zZaN@LJJ!1e$$eMW_=wMb+#XXhruudda~|Wv5zh8_d15fJkA`}O+;)rv(V+!WlTD7lwdDfLs82^p;pOBmFaZJR zy_+;RAv`}gK5=ni;4*X_uHjhs#heY(1In!Ax0+R^9?FJ|yDZRjCA|{PME~beVvAi> z!|pO&huiSXOZ&0EiDLrDH*fbFzEI1=w#bchjzKm_m3% z>Pro%Fy|-f=WPlZycUh;c|9myi2lt`Z~gdFHr?PcGh_X;lGoeGPvA^QQ><6NKKWde zt5lp2UK}P^Eh@FXVSI|`;)0s?9*}Z`KuI}9Q-s*^(dugZnb+C7*62EFwUfEflyQFL z_oO(t`F(#3+z$uqu$}|#AStI%{tpivkP>zu`@x!g2n!m#U*WJUE~TL0_E?Wf`RxA(#4FoWPS0xkHH#-z#1%ZKbWEAAWPA&JqR09MVcMkBYE^7^rvUz5w$sfeHv zu#8HsVQWP969%VOk^m9oG2JK9Bu8$8MX#Wd47mujmkakidF5>O$IAEs0pO}1Y1;k_ z%n}P3b2Zo>Ao^Wx!(GzPq*q4;+^yP10cg=T<)1xspsku+pV`vEq-KoSTsoV!8*f^^+HnRM>N@5V z4xY#48RR*6c}NNFegx1>ii|oILV3)s!nlhz)7#ZMSRgVbH`BzvzAbxgadtUc?vuMe zuHXB>#GNQ;9arOt{S6=CKpTqFI`eH1=+rMtTU(qfE^XOMMQsJwaW?k|vodbuX=r@X z89!?j0Qc-8phOd6X=+YC?5(!xoNSG(`F%8J71Kmw8vLh~*iElPq>RoG*S6#i3Aneu?SzIr!+#jO86MwcdR+=iGjL4MSU;ylT z`x1yv2J=yI>R!KoEso&2H?z5FhYUIBngQ??$5(FnXs;wm4w$l z)!$TvCi4ZZEz;#+{0l%3RQ!!pE=6|6?RsXNf4!6grWiDTL=QOv*vQkDw{2s-t*wr+ zE}mAs%p3z}E86zx=jDFlc3G1=N6n>WXjVy45#+KDhH+LT2b(UM0&5^F!*h#zzs1}u zlkw#uGR)d|QC6Qt*{g8on5PsSI=}AV+5Btt5)lspz*Wb@ZiZJo3+eMnY7~@d0>xmIhJ{|>JXy$^v_2c-`jQA~ zK7SsA?VLRe)xoY;bnZ%Fvx3Eu4CyBJ)tT1hnPzpF-a|f{u-~Zcz z;wj@6aN)WZQ7L2Jz9sX%JUive2O7CO0ciXMy+G+!$#}`j?*gLU`UGmqPaD6tPaCe~ z!Gjh$JlMBU{67k8@y#P;^>t$ZYrn*=Zwl5UR_AB!`2Jk?brwf$eui2R_qg6IN*2%k z@M_X5Gaiq{)V(+&YbQ5RFLr0g+Rh{Ek?}^m_rk5VYoUTSB!Bbg_2nuMHh$}K7w-xC z3{KbeIZ#IJ0lDx~ioB0k_s=)>Th8@bd}UxwCNR$59b$6si4CN344Bb9di2N`LkuYXz087_NNgupU62~vhh&{IQmWF7W+oJZjisA zuu92OadIjtJYEPc6q6eCyfvvADZ|0q+Gfd41V&B?2GgZ|X~Biazi`B8WGId(5KcFU zX1tz?8?z#7T5umTF8gZ-n!rxY>mZ}Cjc@P2migCt*~f$+bHWbsOxYm|9XOwCJpY&~ zUr|vpcYRelLCu~CiUdHUJ5oV8CtP$(QWUrxdOo5^Vp+xeGWPW~e(;_8xIAaj;4X5O z0B+|)+i9uYrlSrDL2#8g>NfJilnG(q3nqT!FX)+hIE;EDFl>F_06b;j9kVr@l}xZp zO;r`>qFrZu>amS{!yqhp4q&(~mJc8swD3#C0}$en3wrqCWoX^Evt7XR4HU*DlTZ=O>1a9jId*+4$PHm2$i??!-v)U za^%PQ_Dj;y&CmIp;U~4JwvAH6``_0y69H1RaSA33w%OOdi^+iJ(2u(OfnKsm#8g>C z5-oMlpJOH;Xx7(W0mb&wRmqA_uResF#m;LWViJOKemd`a8BauaX z66y%MN47uHpj<9;@CXMdzdO(~WD=bowEt^9?!UVp)Go8~rN|E)l~BKXd&H@%>E_2L z!wOz3tyx5SCZ;dl*Y0*#SxJGOl%9i~r$b6QhVnbV(&!z{1@1rAUJWItsIhlz(f*gq zUMBeqmkko=ZW4{2FJI8FUWtoVCZQ}NgLIc5r}1@q4WdrT>gsB;9DSn)06TM?*8As} zb8I`|h+!h-*MtYA+Xs*s`s|-?VS^&Vqa6CqX^Cv~xJ6ugE~2yB579wq(5!?l{sH5* z+!ev^I^8JjO=7bOD%&RP*9??$DJvcK?U<7}(yw+;R^BQ=?xFE6lsERQ)_y_ur#lY9 zgVms@d7AdoKHC<4Zo+?;bLrx6+0(+eoejnI#hDw>N7b0W^Gx2z)vH8A(##!!L=EESL7`#<<*;)Gz)FYs2uVarkjfcaaGdO@l(kQ&J zYH9om0sBjyx<_ zuk9^p*x$G>LF}zEpD97Ar$oeIn^qfQNVV~d^g*kSlnTH0c2x#{Kz4}R>;flt=xi=KdR zBAE|a=MOSEKWr$G5%yl0o0U8=^$H&>^`jTl+c?%f81~21Z(oMKGmoR5uzAO zaOYxf!q%7yUZn3DoR^A1#-;uG(o(-^Hwrm zP^&>Z;ZxAfLXtDKGg_P|Dkk=Q7OuOU&tL|b{XF2B-PS!o=*^sXDfWeh?Dq%-i(;jzQ(;`neawq6= zX|sV*6{HFZ6P-}1tBw-9=GhkZ<_(z+zdk=&?Imc*UE%eys&&8!^MD5F4?Hxc7O`Na zT>Qoy9BhZI?^}+mxws>v;=I48!|3+~5rYp};C{XX8^N;|uWAL|*t@>M)+0QDHW@(U z2R%2R_EMBWhC@5#IjxRqBb472TtlA1EP{qA%-~4&1WC*|-H4rz+iF_z;q)h_UyahD zgiy!!wf%1+pt=|#m0H_b?%fxwY6F##LU&*oCSES@z6U*DNNM$-@a*jaUX+nn0I~SZ zu~KarSDSI~qvK<89v*FCr;CF{f9EvGTnoTiCE0ql%IH-(VIXHap6dGBNV9zu$`w;= zkRU7|4yuFQtiMqA*=C1-5pxYfIn>xV|8DW13~Uq@DGs=BCD`re=%6-eoF3VNpgV#9 zM-8hKBhF^Ba<#}|<45_;5615x@+s03p<{Pg62)UOd|j)jUuhi5VX|$;e~kD2BbpET z7}w&*-%+q-u|X@Es4c~A`e4}{ZnsuLb9*hq>yPI2R}_GMvh?G(H2#?>?%uR%+|(+R zXM@{qB@&GWLzu@Zx2qgs+h`JuD^8cNHOxgW^b;L`msEmw0(}`q) zg*_lV>XQ;{aIq+RmVeVfw^vW?5>%cpIM&~#%^mGC5vOBJ93k>aRo+xJZU?esij#oGp41g9K50}Jx`ugHFHa0@=r$SLWn6$G(0I8~WyrWz)UNbyw0?WxulI;!dK@+#BN(P4pdn=tdhyQ#B+ofi6E zBIATTjV{|=tcj%lk3okFR$QPt%p~gVM+$aRpuZt*`1cy{9B;GOzP$g;VxdBuUV3e~H+q9Ve7uo374x>ncK7{|ee&z?Ox0owl!vFoNt@*f9EOD%)r%wIIMb&1I zrwIkl?{$HORJgPvb5((&b2tC(8e*u5$tAWUgZy~2|<+skl6y<*fnE&jg|HtdV zUYaaVz^5*ySNAb?CPQYLigtq^uUy#>T~)_^c+@&c3YeL@$)LW9>-hiCRfj$j2`0iH zh(^2`6NSN+3EjFj<^M;<zCYKFHC0re z0=5Lix#)jjTyLMB`>EfrKpa-T?oFdKwX!d+I)`6QfxDEVZ`mmj`qIiY$k0~?iUMn- zCSe~@c>Y&29~}cj0w}b?+kN?`rsZ+$uRD+JUp^f_#ax(>@~aX`qGp(*?5xBYJjl=u zI0<#19h0cvg|=wCg;Fn81M0>9Xwk5+Cp^d$ua(McQTp%G!ob4maBm1FsB710zHmc|2g-c`U3bPBv`{%|IZ;AwypBbcS_ zoG*zho*L=rU&;Qtx4--eXdm^U=mok0n}81Twhj6g(Ehw2^TA(6GhcrE=Z%;D@QZ(V z*Y2i5eR?&IW;Ju6`95GHh3y1QR(CrQHvRo8Ym-BI$z7CkD?ho)hsVCYsO1XUJXMP6 zrvKoTPqlhwBu(b4sYwr}hbY-jO@j+9uM94Hg;xTQ77;*uZhJLg>|=zGxK1^C*J+LQ z)H8LEm(7Xw%4wM1Hn~nzn@CB8%6s8O68p&!kZQ;LXrI4nHYVL^2_y&9*DK1fy`F+0!lzR^phHN*ty)xrEeBM#WHD zqA#18kV85lzcxK+gjXzSl=pNEO*par7CXt)6@R8pK$|0ZDqtyC68<&Z#b#MeqXbs1 zd*lM?jTPK>MbRZg&$l4~dU56<{3wNMFPaSF?mZ<@ptK{7*2uf z_w&e>nPg^`BW^irG@~z_rQRqx;gD(KG1<@{Uur*kgc*K>Q1qpWpy9^frVof-As%*wdKFAs5bFFApv2g27MIU`e3xojSf4U=+&7_e;YE^xEn zcIjTTqvV?wlZH-SSG*sa$}`*8qUw0%|AV;^R@59i*7(NAnn6xmMN}vmK9&AH3(0eF z!0P$!46tI~fv>l}#4ZlXVXIr$5aKJ0*)UyQJ5qf;^b5fsd%)WP_YP;ahjQ&gvacq zzpn{+MA%CbBw~DWf-u3W{jPgnCzv^BX~yvb5`}D;1AChqO%ZR+xo&2`z<5nIP4#C3 z^M|sEYI@X_B;Cse>|C_+K_{n-V@GbXzN_CMVtazNMh=M0gL6egkAD@fsCsXX~C6$ifXxdF+Jn-IeEl8+6-^8k;3kk9qXz z(W^;GiZ0u+=C7T_5CE8eEC{HO#BXqUyv|AhjeFoi>gW~2GkEt75-u)HL`Q-qM)o#| zy?>BnLE~V1HcY{y-k~9-^hGKpi?vT!Aa=j=5`bT9Y-~q6+rH`8B@{rElICa-Bn@)KC@@GM!2Ks_DZGB`2&&nW^Om^%fHi7HcH@M}aN zpS-E^IlTfWa$tgJsrmwl;;%O*LdlSQ4rsb)7Ea$11{8{NRF8l&cp+!_XiK$>b%7hEwXFmmJ zi2=@uYe2XbOe$s)b5^?O{p5f?OzncjtjTDV8fpGnxhghhhjvsk!Ffjw$i zcQo0Yayw-*GaZO7k=1vL>!6JK;*~l#d^!nc1Fu3HJX>nz`974N@;19&VlIAUeL}-6 z{qFtDto*^VYcMq^rNX7YymW^tOCKUD~e!F&JmykfRCFDhhM_}OqiJ=J#pOjo3SK|)yKc21SF$waZ2b31En9-5cO zk#K3r>^271Y>ud2OWXu900=*N)14bekUTQ6T&LR1@3NViy8f*!zc`00bKQ+Uel5P`RmdX5|EAeGP#na9;uYTY-EuvXus z!;r7Q?lj##Q-vh;aehU?Ck;Wv_z5_PWK@b2;u{|_iFqg9ALl7G;Kwd>erIxOYj$tg z$oR*XpncRWX%)!xoa$!n+}Y}T^3L1mUR|7S!p-esj3eKk!-h zLvrvVb7n$9ng}6v;)=C41MHKvzD-1*XQ9LYP3H%A7)0*G{0^dg1?BNzRw~|0lUTRS z;~aa^<3+yS&B=A<(ImWKm6@KGTH?n;>!poQ{?q*a3`~Sk5>pln_9oY@qR*BAmuP1e zVG;hlaFq&Nxdv^qm6*E3I0Tf?`9UzfiqCh_m301iGJk3vvWcAEa&2O23|V1%o1^SV zX_u@C_=-O4aM#Nqy+M+T$#Ip7FEq+`ADC1TjA?KgP~&pkDsba1=-r4X1+ zzCQ-6y`S*4%L5uJmObl@Zdd$ij}oo3G;_(OP1*7WO|HhrO8vIBFHtG`N`?;^2HjJY z$1!e&R1;=~*ID!2;}vSX#%-0}6EYzqG0M~^rO2l})B15DZ}*gHn5Up;W2`33m1>y5 zc*~AwDw2TZlZ0aJ%TcXDB}gY=5@I#uo+`C@iVV4Pcew*i?3uW{b7OqXw0Z#iKN70& za|OVg|FiUVCm~#g*DPOiy^lZ@mQ|~M4qs?8dpX$TD>j(=@7rcJ8OyPV*gwN2kDPwa7trHwtR8> zHRoq6{>+5PFr+z}J84+tlnf(Zq*h6Sa3>W)NA7cA7j8;-cZ2W-vfB4n?>KuBRhUs* zF-SMM(n;2|M82(l-?#>ghLZmEu4Nvw4!>nw(^xOfDdm~HlLJfBir&eA(iCBXLT>46 z0(BB0z)^(shOdwiS;lfzux$M*|H1L9N4le<%mF=fu=VJWd=-~WLz&5igDwla1*nA~ zbU&*@8|RsNM5|uU!QuJZMH1)DNCJAKx8m2t(B^mCnvJ8wrX?x)26z>i#jUpX4%!tW z4QNH>>n?onSMQUvTZe7@iES~T<=CHPpNm41J+6((?WIQ; zw4eje%J~CZ77aFgsDN}sD>#x++1oiW-}ijFHmO$a+yWS$9Im)Y%3uz38sJm95GlVU zO-zJ*KQxbeyZsO0v#(^Y%wDZ|kiZ%vZh5>Y@g%~Pg4!U{_iUg=&ibXzCJc2k)i9Zq zv}7!hDwP)BN0E}*-Q?Ic0ajIy*2tGGImYud4S@5TAt z%cvYznMdKfsH3d~IU4&cE`3;=<8_(scWsIt)p&e<)H7uA`=o^9@(P!CBm>>gQ%~;@ zM;?M)!ajTXhIRR#OKm4-k8+}xmB`8ClK=*=Z(&rG#-{Ey^d<; z47zbF)7N#g<XcK*gG$Q6&9r;=+ARGK4;L7h^D%p2z`x z=;739ZPren1C3ZNW_hv(NR#rtI}g_fR4nH3PptAn2ZpdoQMVqGDF<^Dl!4aLE&09F zn2kp!q{utMtAuLLRVn%6kEiGpj#CEiZgE6rl*XXK^D^89>UHuP-#DVVorUBZUU12T zX0)SFgYh)T4$(rE>5vh>HRAFPd$yi_Q@(WA#f;9!naEKrp=1ZgFy$LxFTt;*hCORY zJ)l!`@!IeyKRbk0&pCrqN!wN_jZ{T63k{(MJw0yYz;rb$VMe@AfF}j?OuMA!lC&ve z##8OAagBR@mb$3$7jS(sE$_kga^gh~;e-N*kgkPAa*5XR_d1_`)ZwS3{BzU6u8hhy zM7~!JO}!zS9P4jPfB{2!cF?JlRAD%?Mkq_b@VlbcEsFCioO+UZr_<;nATHtJAr1~s z1zs5Fy!v=v2+kZKfB7>7H5(23#Bv>5R(vwZ*0<7N1zm93YMmz1o%W)g$#1~^TY zR@ugE6x?4#SJJYbs?pqcijv-+6v;jBZ0NX)%4E<9oBYhNS+5&@OIlh+1%EIjHZ88C z_nc^sa@);a6y?}-cJJ+j<2cOH&*I%%KFiB5Kg-X_2b4GiW;w+)r9CZz2P&R$y!REx zSEyE(;z>dugr`1G>se%x=F5fgXF}*kw?EdZEgeej$J{e=lb0KGxp?N!Yz7e-nS@~q z30^Q=Wh6loDUz>$1#-e3zTr5lC~`s2*eYLv_oG^Ok{>p|qzj*EKU;1}AtYt5vj6k6 zU@0zXJbe~&4G8QdR^DJ9vaylON!$0OPU3v3Qy+8J8DHRqhi`o0x7=2cwu%1mez%2R zl2fKC5ACY8PifM3HbdUNZ!N5s?2*o=5^CD6jU=l?I|PbLmhT$?BrPJ*}>)3K78O%TEpO!6(y%SbU9q7yHD+ zZI@Zsc{y$}wve!E!T)TAU|_qFGk(h{$C10Y?~BT(KwEx8)?qYJqdYXu#E*ATZEe#> zJ*nOS8)EIC%1FM1A5BCSeIkewSFXe?+{Gf6Yd|=XFI1tL%_@XE<_RmcfGSbOnR~^h zp5^$1CMGd-r2m`abmx85w-|9;$_DRR=rx3=Bre_a1cq%tM@px2V@%gkRXiVHXf-6$ zR$Ln!_h6Gh@vE0WOuypNe^lrkfy?qlJG3B(I+5ONqL7S~GvELP!xD_PX`x%Qu~o(? zTE8RCp7=P-R++0e;nKYVyP2}oJFts;c6ISE4lj`l;S2vWav^M*adyr~Jii4$Wwy%G z5DCSz_7c(4^h3fPSMv@X6m<)Q819oaZnGR#v3kUNd|q`wtH1*v?4N4el@AV5n1aTQ zmf@B=5rTc%S!#-=$dI+Z3<@b4eU4AR_!H~$6?)YAW7C^gB_cDTMQFU&@=&dy#~|s@ z2oNFUe0|XUTQZIR@m}bNpcIb$kq(SXn4-OJY?SWTuz>GUCP=WB=K5-#S{3n zEMB|5Ks5Qm%IN)d^bls5`D~Nx`Iyk14~`u)c8zk%cbV{qY$MfRsybn#Ha?E9nN5N$ z%H)yD(GTvZ7c^Ds;j#pa+bT6$h)Mla&(T)IB}EWp0OM()+I~?S#8P=l^GO7`PVNW& zwrcZauA+*pzRZcu&#FW*QyYF2%;MJ$VQB!Zd8cR0Ds!5i9l402t;p^r+kCRSIGrb$ zyZSPppFV&0!`cq~JKB(P^mCs6`D)!HWzt+}(crj9bgg8B8qlTlG1&-K>%oBHGTzWL zq9*#8*#*}%=jf_w&hb_%J1 zwYsy3s{MLR_U)F<2;>pKu}%Jm!kpq6r`sr|0Sftp&Ru$ z$4zTrd{vHmgUY}1;kp&MS!Va?)`L~5K&(Vp9hG-XIUhuCW7qs2NLA6?7@wGPXkQ~B zd@5xqiuw#0-L7;zcYIS4E|M%zSBMjrg|aws7kLvCZ4|kg!sK($VCyNix@UP18lcS* zB6w}%IA=>^?w<@hv}9Q|Vg?+EueyY} zrn9#V;{AuQ0h{mSluh3#Pb%LNVa_C>nen&}1Ecd-JABW{cp}-ZS|U_+=ZlrJ@hK}K z;ESB6dN~6Z?vf9Rs1%fsTS0nIVoG7{JL1s$A6(Y^i8`L~f7RUwk@*LY_1RG+RZa2^ z6-aM(0KBI|pps&((KtVs*Pg%g=8R@S+hxKzZcMcytOJw~G1fH5=x>Q{f0d3xu%K4@ z1%(#bE$boXhmozg2+8>kYzkF!oqB%P0ST9fJdam9+<2e%NcGI=hRM8HU3Js@Htkx} zC)SJ8llzHxGj&Yewr!E!&Z`RMo2IpOz=p|j+1JYB1qR*go=g74w+|i$_MZVl?9JtT z+U^gFdD|3>hp*Z;ASSDVuEMS~et4ZGocmETr;Fm<68UU3G<-&X#d-*+=6E#8rlUMz z1&`woC_iQ=S1R+%KZhy%=mV?6K0kECtyw=urs0^E%IaS^2l>3y<p=qxFXp>I%$=bw{jYgM{yiJOskrkU&es&6(}(ZU#x_`#j!Nm)l(qg zNMxz5`z+soJzGmkK~OAe(hvHcCxfn49Z%A_T~OaKgfyjKo;5Twi4jxA3p&`e2x3gj zGi5r6Z|5ml_X8R{jM{daM#nD%1!+fVheMW89|ktv*R98gb^)PwFW_-MIzoCXbRC%K zH7ra1;zW{2gqmu)-XnMg2TQvAB;#o9-MAJvn@uAaDzu{0*LOYYAq)<$paT4}Q-HAQ5<=w)rFqJHvk<6_W%O0Y5o1piJ z;_kr_3SVz>)ae$7slJFyV8pH7GFx4TdSh8Lu_IJ(!G_YE&!wc@C{`#l3yN|LNmPsuIX)fTbIKA!$$1Sa6#F7T z_?Dn=uQ|46jrkJohsjAy#rt5ZY=)nF!OG))A`;}KW<@7EF-1wWbgQcw-oYy>dwAF5 zrprIhPk2SA;NeVS*vSad{=O>(dYA-rpu%RbEJI)rUx~N1uIG4=kD649A|fLvP}yZG z##c|M)q1W)6G8(yp}NIN`{-Kq>>C8J>AZByJ3d{y-u*Zj7h7|Ezae19RDoFzz| z>UMTVguT>vssc^z*;Bb^s-ot;{dh%1)u>korc?)wQ>G}Z>LeyzTeH;Eb`C-|uDF7P zp4Jx3nS2dNDiL9`7~M1K3US|@FBVeS+{tQzHDT}Nq6su3mOxTouWzq-2O&!e(CFnH z@Jp5Ac+=)qTa}Knoz3``;?XtTtXB5y7sUtJ2FN=4y<*cI!XG;YkDf-o>=<$Sp6N0`=cBV zy0V1$`H#yKH?iWf>9~X%0;uKGD=;CX(Q8K;o2{QHbhG(ui3=0F^LZ(q$46i{<5n;x zlYivVkv&(u|4q+8Dt#@|Iq{=mxpXK}%!@3^=f`g6)%Pix5isWGbh1Ccm_QT$>`0Ey za=e{TcCxgpRh~+4CX|VuHaU+RGEd?!qNte1y9T+eXse4)TN_M~a z=WG|R%kGe7Wp`98a3|Q{2+wb_tQ!x^1ymZ$TFyc0~zrpbW!F! zLtTA`e~G65IqZbm8!y0IKnGi`O-98MEMR}~ijdP)km1o<@{<5c&G7@j~xWL z_MIXJs66ZtL~@#dFimNtH^!zYaZH*(yZ#OI=tpV7zXJEi@= zt@@CxtM@>t1OM^5;ZHH3epH^u?FNz12wHCUqnndf4t+q1Io;r!xRTL(+L)0|xSX1! zWVG~hr#;~6|A1022G(T3QL^EUjXE{?B7zA#tp3|LMXMK#!OXI3o(j1T-clvgsk@V- zS^P}QptR}jyMsT_h`}1MfkT_9!YzdmDoY}^w&QR(B-4;Fc~~aR7g`Gl@>{6ALz?Rw zb@pN0Ds7}mOw(!=5&UppTcIa6d@kNkv@)x;rGCzA=NO;?DJ^Ydt}hdE4o>2t(fg76 zJtMItb64?NU==7dGWqr9WN6^#)crD-c#dU0=-1vHefzc0Moq?cW2l~=yPV5E$Csq7cSKv)s z%jH$%GWRj>PiKx-fV(qER4GUDdAK2v5TntUG}3k?9LP(a6fj=vBgpW`uHt8Dy7bxQ zs#<>R6=y9|>-ba*jz-ZBsSgXl3=w;CmnzE^I#|f4tb=!&zReHawHq%j(yrqljdg$E zv)+I}^6C!EpT8*Hhk=DiA7DyjP*quMFfQ>l@dT`X($Ze5&%Nq;@P2}AYU?Pjr*TEq z;Mq;uf!Vc~XR!7gX3f;NuAnZ5@=^WP?HNM`rjeNm-t2~4rGTN)>Bp~ooP7e>AL}R9 zkG#^9QI=`NpVk;Jh!5&@wz9BwkkOa#vn)BRZkvKJ`Oz22hj7ONSF+=U7I~4>J@u3g zJR<`8&&AwcEDR;9eL5FK6ViGN-A{0IPnlZEMpeaA`{e?pAD3;Vs3}BF$9WDB)I`kd zKvzaD=n|a7s;|fLdxK4)nBe8@gWIQ95Lo6s&yQny&4dt_{Dl5L-unOAgxkL=Cg1MF z970_DoeJ3?@Ea%?{VhnI-2>lt`~p64f}S_;@~lB|J4z_456c4MH!HkdzaIn(y3BL& ztPjna~d{JOb@+8Cl^JM&&HLB#@@vFpa zuIrbLGJdM1`zr^eu=%-$F`Y_y4cA(8%J= z{B#pDyc2y~DN7u4h|sP+K{+YL>mgMthN-R6UFb_;>_H2dw5mEt+M8Y%E)}@%$E=(q z_Sf6?$EMOKzXIDfH!bL@_+ti5+XR`lbL;7*kLjg&mUV5LL5AHs=w~Z|#qZGl>xDm; z@?%cl9vqC$QKIJZ{!v|`+cbt?{`Wgj^yuIowCe#gs>$WXu%f+V%CS8Z%Cc$FB(G1A z8q;rW$HmDMOpQ?8g-=ctreN?IQXeO%Y0^w-%5@E0Mi*Gd$iMgfd7)ormDvCUQ0yK1 zA~GXu{q~qbpEoN7_T;<`jKju?g<(tC*p#AErGA>;?>*}kbTvmJv)`=2lI*g~AyxCG z&wplgPNB$dG%{1r2ZsQ1i)iBeRqCeyIwIlHC~+3?mA#3Ky+gS&e z=1jw`5N?hcoVoFaz)NR=qJfN#$VcEVLHHC+?{k}JA1U24X=!O0nwp|HJsrhhs6ChY z`}2DNbA5e1G&xBf5fPyd2Z2~L$fP@IGJ04Ph{Psj$P&je-z$8jMrJH`c)t*XW=N%d z+wcuST+Qu*dj4WTH1vvjn?F=&$j54HY9`+gKlv~B=0A2Dp)9e*} zGs9sKA8A-@J!qYypUJ;`?#<4^qgHU*U63P~+^-#Atd%W04Tgz(i&TptdyGP74FBM; zZek72XA^NbicU>W2aqH)xE1;_BfrIna2PfAOwy~)x7m$JCE0ehLW4j#fr;_pg z>OcF)|GJ~?);NRn=|n&Q7?7W4mdmffLr%UU#(h1ryE_mJwWNwlcae4EOa}kzwU8>B zKH#=XFAs!NODDtiR=>7txHkDRhxiX}mGs@~+0F0A>&HTsQ(Ed}7WLf8`q?FM=X9Sn zDkwAD{g3o=qm5CZ#=*}513bUVeMZyp0;dk|MelU&dWG}%KX$lwG_uEt-w(l4{WQ2a>uLoUzy5z32&)kzZophS000vu}91hYavR)#fmEK1ax2d1B z_W#v(=J8PX-`~FyWeI&NltLwveHSveQVfzp7*q_|W#1*CWGUO&mxLHg#yVq5$})o~ zYh<V}@+g7|Z>k-*w&h_kMh@pRRlHm;c_M_j#Xl-shap>p7p!)XT-i#rFiu#STs` z9fF6p&75s)@*xfW#uejXVQoOD0G0r`%a<%)&vGyf;PN@W_YfNl`wwCGHxH3Zi|+U| zTT&d_UPL4in7YZ1j*hA;quRd_F)QyRZ54@MD6wW2oyJ>k(KdXcM)#d}zG*prqX3MF} z9fKJk&sy8qI0AkkD<^j}0aMWk*`2gniedln3#CJ}g{B_^ISL!8izE_DVvU1?Lp%zF z8uxlvSy`$2qN7xMc2~3_E$FgVC}Ls9X>|=SmkN$)@3>Bi{AZ7CRx|!pt~IP@cFvYQ zl%$r~K{q(~m{ORJ9it6u5~LordUjCo>Q&NkvVi&HRKFc#j>6|P@>UjF4caJgDt^;q zh{L;m-XSgR1~Wnho5J=3Igy54D+N6r!P&gc3aSe&WnCgrCO}**H_#f)Gntl|&BbR0 zYBZ?Cn~IV+ZI}7XT|6wOMVQRBOWD#(4(#V)g4x=)7Wdhd6ENHI$vg*Dg7?CovUM!0 zKjLHuN}DQ_bHI*|pw$4ZoShAgrVz#D_TxI1HX?$7@5Zl;X3w~Pe)anMcfg0&27Cqr zuY3*t_yaPQW4OyfwT7lrE7YHn2Nrl86)IPcSvN^AMd2DM2c4A_2A0>Qly+Z^#;D+~ z=U!#qJMQrm`uL05_x_9~#*?I;?e`${ieK53C7uG>&;{_l7_V`L3WM`F{zV1&0OhTNQC!;6}~+Kf{zwaQ|uz zvukCn+&Nu-L66-NVMC^FgUVN8r~&>O2X4(;>*J?~6IA2IN?-pX?1VkWBU8l~*>Gky zbnhgN(?_z23x?(YxtxdSudLv+pA}jh7~(@SgNgzO`3G-GQ1v708@zurHDURf>`fXd zzv_N5qz8Cz&7S9;;awPZvGBH-W8Xh4KbCz*NpcL9bbEnVjrnorpg2DM{#39Q%Nt4y z+Zh3jl~io(1x;vAEW=LwCie5(nNu&o+LNTr!TV}ESfBRQUwck(-oNgbKJV9$g(7;^x(8>}KWLbsfHrn>jAyr zxr1-?ryt!J0qu)+vz1aZ=&e-`MMvPrcazMbE2Ap!i$0ee3s;e0+{=ns^Z#s1p!JFS z4c|YWq#KN2jmJyE%#zIo<8s)zSXyYAeo)W$LTU!D8^W8(-VlkonYEg7o8$RD$3 z>V_(jY=GgXy38=Q_Y9xDXL#`cf#FrM927jxD2nOn1S6s|irx)t6^pD(X!g%A{1oq` zsXuIt=Q>_c%4X~ILWeMtH^pT!-(g^xHgqa3<#UB@(BRR_dWpQi$Rq5Zjy%qbrvrU> z-d$MPDox)h0qRuk;ci@NLe#)OTPNIZAesva<>VyXzG;k1S17 zD$;6W-y|tQzYRYZc8itpyaX<7v43#9D!2x4qI;n3ue#gT+TsJoztZ`(dybASkKuxZ-5_2Nfh0Nj{5u$e-jobQR_NkJk_2o0r-A`EmC4l)C<)OHG4~RL8xI2G$ zz#58~_0TsZ=)ZP)#h6I3JT4%04Tw|{dJy}@2)OHaJRv18}jH|(J3A;DY9Q?u!_ zSQC~-8cT^sie8;{E|=FcEUFD7k8ay7dKEb-*I8E7I?MNAfmzElAh5J6#S*mInZz3L zC#)`#N6POm5Zn&k0;Xfv51uZZcM+kp4#+Bk=Yv68Tk7&&KhoS$Sd`4AvsM$&JaHea zbA)Xz{6)6mv!k?V#zs43Jb|ZchcBUq@h^BlfGt2*JUeF;XKs}o?#G5GASr()Q0FG(>>Xx=<0b(*W3k) z9L`H<-I=UYPRwD+|< z0%zfq!_hJ&YQ`nviMuJ_m1Gs;=r=0HnhmSXDOb?jAmZ+>pcPAR**#v= zQu1;@Hq&AHvEqK~Bhf0x6JDgFXzBReiK3Sd>~Fiv8|T!FIlH=bU`hUz97sZGr;xo> z9JNdbX4G5$HZjV7r~VMKJB}$~+reo2{l|Wu4dz=g(?I=@hn%yBTtQ_8=}Q)AZ3ZGe z5sw|sZ%C(ybls3+uEJMV)o-+CrFnv#7dEC83113RZNF5ma-Bii`b71HF(Lw7t!{x7 z6Ke-bqC5~CA_Uu1h3W_o-ggp!4e;r52ib|%A=VXV0v@B3A7D^<@;Nl)77 z-XXdt6FqthAIM!7HkD6SNj88JRpN0WciY)cIfjtdcD-wruR7KxI;NY9CcAm{31R9-j%7!1$AF>(&1~VJC>@k|rYmwVme$}rxdqCTGA^}!X;`9=^ zWp&pwM_M*oxV)$}C$VmkNQjG$E*T%5&C~F56jsg{5t`Zw?ZE==BDdelxr2uKd*$bY z2%2(PJfXz7`lgB}Rv1LjO~qu4W{d}}x4$$v$?0k^ zuzB{X$kx{(xr+1x+r82R8+uUlafKqj?~l442T$1Iw5% zpbf@Xl%(%@#xMm@EK1vH(OWa3&W#1KJokXH7%m`ai_7Sc!=*Xsh*2f#+$_~%PR%?p z6j2%mYwu;+(y|QvBCgaw|H(eaXF`Sx+^Svkpc6|fVWpAv&2Zx3)@pA$iO(__#Ez7` zkFZ5b-P}3na$_K4IF8ADq^^*k-W_*`Dc<&}?k*emt(hIAs;R-<@eS1ZVe5c6M-e^4 z4#j>yykw?xfPz4d4gXtkWCmBsG%ye2C+KD^F38zu7r|p7BPV~&8gkCb`|5+Xw=n0| z*diBpEV7nN4nL}P7!&U7)M=6caw65y6uNsevwb{^>dG1S*t^QIC;Cq7?KIE@&U-!L zsUqd_`98YG4NdDGt-p8km~(A~Qa%}I^$>hFeVI#O(^ z4x4OS@7hpjzP@axQ0B{^uM*q49KC3DJ)O!NWsabG+h*QdVVEm{jPRj1;$bUxj^^cA zh)1!Axrd0dULNKY3$kZzkiGi(%*w`d2iJrTpMr&yuWl?yzw2;*qAFPW==&oMh~iXY zOfS)|njfkg7k#>ZoyBU#l*6-IFVWgWdVI~y=n6)bDH>1TSR=>byLQ;oQJ+ zOzK2L-S^}Kj*U6NRNFrm^PnBC|@er1$yjztu8Kkf7GG2Pb}C~ zk}MqS^SXk$uE|Rade84U7La$-GXpX!933MuCPoF0eUm@bbA5?c)xcXmSHOGF?ao+Q zD-REul7$(FW^F_gtkk{jHI>7+wMqwJ_2bic<5XalaLvbnm$O~A%!2WB25rNQp}wTV zPD044h~CDEy)zh{fcJAAON|SVf$R@-|Kk|=e_nDQYxa`I#`-ts=}uPHMt2L35kZ^> z#tWiizjZ<Pk6f-1z6GTq1ZTSaFGmP0)`V=QYz) zs?3y`GPe6eT{#vh;M^Q%e*Q3=6u)`(l;~SwDe%J6Pj!$Ury%u@2t39Hkj0 zHd8faBek-@QBwG3DA2`EKgH}ZajIE;h4SMjzcgyAziJl4I9g*7>-aN%?O5efa%)*P>RlfC!P;M$OW8mI-2!emR*Ww9aO%9R! zm&R)6zMXH&N_Y~u-dh?HSRCuQ%SG0-C!9mh&u(^S7}3BCjgpC%S$8j8-QCJ%TA>=b zVL$j%m{q@&qXyr>!#pA80YC;$^N=fwQ>-Q)194Dq0@>&jM!7KAq71{zvW{eYSQ;QH z0EhL{CbZa@O==50<+_>@E2MIBK9p;2=+jhd;8VQ_Ctmx(A-W`9YiQ4|+s9Ajp z&J;<+5SJhpLP8u-C0a8^9gL!`L61KJdZp!VKT2vBaV=LnP!rRf--E!0evYk_@bS0N zXF&#-3a;Mt>W^W}G4sqWCz~Y^)ND#jQljA5sH0VLf^cJt?2TgVk(tkw;nOiFK}$EY zN{Jw#a+#2SJW~}E#LJN}^x>01cx^U6y{iXnc+J+6md&DUywN)(Lrhhq{02hf|bza=H8#=U=0TBowg4ri0bk}Ea`~NU1${hZ&-LytOeVZq8EhEH&8eLd zyvhU>NveI&Teeq1pdXGklKl{0>1rJauGwW{J9saIOM_{H!$>E>zui@yRG3^Z4e8Ww zwvnryk#g+O!`&6T#|iN3ZSUbwrD!ervJ`{+8o7;u+fai)= z2Xx@Ci`~EhsJ=gDBAN2JJjgx7Bh_1zM1ls1%{^@AE1ys?&0tkurK&;2*DDl0F^{dx zV@7vYu|A{5kFR1!Umcm2{vh*B2Np5>#L_8)U7);dOQOZMb(b_+YiK)EhtQBk@&v7p zB_uEWXh%^kshJ*E`trl!b@=MGM6q@3l`nHZDpT71WG^|5CfQzf=v+wf`Sg+&?KxVe zbf2UzhFJBuHqzkM%3|x}#K|Vm^ART&L{WY=wH5q7FR8!%@1r|?$AU`oGrX&1t1efZ zb2L|MoXu@>=xOr^SIJ<+SmVl3`5;Q2uu~7?!?D^0ZW9B3ZXSl!pWr(?>r=ZrCtiNb ze!EO5=*`-~l<#sz)&jMUF+s4HVrp|czwYM-Sal$vdW07a36&^*wo%%++o)<$Y`WkU z0(Y+h>L3nClA>Uw_0;3X9W7tcP?JMCaAai-Hurm>gx>7Y*Z$38b&2r!-0X|Y98uL~ zPcD?rjjY6?C>NxegX$;LtWYEKpL8vPQdtCFY<~^KxL;`ldN&_@^YD+O)krA!T%`Ze zkXILXeolHTynmD%PQpPhgE^*4$`&j*)w&;~7&4mT)oc{Q)onO8y1&Alf;^m^G_|+4 zIx-I7xjK$KMDU=X+}nJD+s943akuLGWgC5ApgED|Y*9t0;?A-!A~}?R>T}lKemJ_J zF67f8n(E;hbtfFA9A@^NIQ8-6Ly=@mo?%uUDdK(|5j44>nzYcr5 z)!wYky|nhA3tPW4Tr-Df7?N{{D<-)0wSlM$QaG>i5qJsEPgV*J*2%A~v`V)vFEk9S zU>pYzG3VeBsi}~UMIiYTrw~&o9f6)l)^Mgc$SqiMq@}QeO?JKc7QrkO_`Z+Z1?ghZ zjX73VRjJxpRgQQ&x8N%y(rdYx>kD}gOY(f9_@Ww($2(cU0fE9IJUs28uic+>!oq!r zMI3Dt+T4*E%z=HVf^GL2h3`*m*W*fJlbwdljuZGf+E(Otky{@UgSs@y$DCP|n-Ntt zi-Xdhq1Tu!Y*n;E^e1$hJvb4j*Th80j%WPRmObuJ4YP}qyd0L4&~FDsd^S5qhilgk zL*t&rq?C^3_f42{m2?;iw9Q%EU9_Qr%9jCwN~*QV?;V(HC=I271_W%cY?@M~-vH{Y z?_!tccn_#9fxtb*r)Ll>X)y~>@GFZ#NWKd&5tJ@BijY0-QWlKJ&b~ldm)bo6seRI^ zfegSn?l@jl-u+QIH@*0!T(Z=oWNW^O=SIeqR|d$-BqM0`Hl<|4he*Lru)>Xo&!6pg zX!G(Sdt!pcSli@USvApg3tPmh&T4dCW$Kowd=Ng(-+%d}eBkEi_kkmn(UBPRaMAa2|%uI8xMxl>wBX>2COg-|hR!qn(_0h_F zG14Vcw2_iOfwof|7(khG|&~x&3N(R_#GxsFWhsgejg6;zXJwL%0Ha zKPDcj?ibc+E4Ft_XjvS5WV(NiXZri89MLy^$%v)&O>e2-tcF|t5_xTak2y9C2QhKi z^IdUEz059s&Ka`nEklQ1L+-9k5@I>E+jX4UF=vfRJMP9y>TUc87Mos6cIzJOz9`oC zvvo`9=fMXE%zX;zfL_#LtaS;cCYt=9UBj$F!md15u##~gC}6RXHvcE)&d#J?&=uf< zq=0LEQPb5yn`R%D#1bfr7%Vzehy!X%)%Teug|E&H9c51M>x~q4{J9fMo{1}Ep$*@i zy&0rrC$CLBmboNmfpjD28c8^$Gb>FPhA^j(aFx*DBq*QhI;0_a*zL@q<;)UPBTGux zyP56;@XB7_GX5r{DZtRIT8mUWH9GEA76e?t+Lj8+BL={jL9(>DBw_$$)CsO`tP#0V z95og015#4BbaXhzDe(I(vdo9vCXtcA*)fcVEqyUoMD7fmFQe#-pUoELJ*8oJhswv0 zS;?cCb46~|jzu3$?S679VM{%&2i9x-2k$nsbyWB!8kTZ4 z6?cm1&=pdPy*-%;He>Aue+*3|ru9;^q2(&Z5=-9&-^uhN8ST8Hf8wvTq)_(`vxI}p ziVp44b{Q0dEbFTKavr(nE6V}uW%PPA*BZj7T^Rwn$Q`#XbmDE_WXaleiD`L-#sbqR zA9$4tF2f7-`W1&5Skm}1t3O%PCWT5y#Rnt2#&++Enl)T}#a`9UlM&!rH_-9qz;~9w z^nqVQ-2O0BjOcU40!k3$*+xps$VRCx5D5um*T}oi8h}aGYpT~MkN-}KNGPR+>U<=# zd7@a1g)6?EhsYdF0agb2-UKPH-T1ou-783dX;y?DsG|Y`0#=-{+ZwajWHHl$5n&-% zacs`z7_<=8oVg2!Pi*Vu<8$o!=Ryz6Su=%4^>z>YIA#m8l}{JO-_KNWrIqc8sbPCgp#pRBM_$xII_PjV&nOxFk*#5MxYo= zEh7{~F__pw;=12fUC&S1o*dnLKmulOJ5)vmwV->ZS&Q8>EIxi%za~XUgTu?=I$N{j zy?whG1Vo!fV8H#sp;_?IGm7YZS^}Un6sud@QJym2ybi0|T6|SH^SS+Qlh@A?uTlD! z<-hTo;;9OLZz84*^Y)*r9~K)q8_Vp9$uoU6ey@M~$nN9}cx5Ml2|T7^ao%TOW2tS> zz&->EQxwJA6;tB!?`JfZ8*?ugHmkYbWp?c{733o)wggP*BiDxsSi06(Y3!3jC8i@X zuX1|~q=(9bO4Hmhw-z=+s10I7(d9nnuVT0Bf4cAN)Orr{Vc5l(o*kho@9H%uY#O*U zG+vr%J*u3@3L4^BD>W`Nsj6`?f!D$ex%>zrN=+wHe3x&sUK3pfbnt8@J*!?0K>fqa ztlC!wBR5=B3Q)=sjHhJR3^_OGIJrNps(~X`_g*ZlD3;Qa&C0Bh*IecfH_biT1t#gq z3bq1;NDw=1ZVMx`($q7f`jV6+C(iM2_R^=PomrhqPZo2}INQROe7-Tc8!u}e29P%q zHe0aC!jpO!JJ#*S+Db4#F~)>lAAVnH>6y8#X9&EaZ)w&6>%LlOg7e;sfZ#*-%E z;KR@=d;m{v4ydMa<6i<&$q;yU=`uSYcMMu!`s4#!c}pY*yF z!Q}-%%AK)ov;imZ68^A;r(TGLiIV;LBb^JzOSjoc=l{-=9#gn;| z34$T@ghWd3gZM_g$Jvt7Cl@L>tBWSv-n;~+Bw(Mwc|j!CwKptvgL9vsVR>^<@}qiZ zg-7PeIvcB2qh+Ju5J%@gg-x@9=8{ei$^uYfH9Z<$=MLI=prW9zD&yCGcDS~0=El0& zkSE%JyC>oaDpV*Q@3k@KWZNM(T-R9tni_p4TieYnrx9zH&-NJvauKJ0jc*8RTq}|< z7C{6MGypAbntPUZICZ1<3}tb()M{*Wzyrqo-^y@)iF5!_X;NjdWY6ZxGHhk$jo8em zgjfA+6~xs+XeE5OGH@LQPju-OA8d#jORyBZmuJwC!kJ>#he+6)i2DqNR#Z3-Z8{w-Ub_G@;5$g?HMnkCjCg zJp`@yAn~;kj7z|1)-$}`&BGLxy&w-%Mzz%FQZU5sV^MAapGA~ok$taLGZa-RU0w6E`!n!+Ft@32 z;Qf1Bs3m=eMz9?)j8_Hk z?0hO&MFOI_8d-1m$%RaST;Q;h68<-eh}LTjoRT}&%B1%y2cQc9ETKU0b~3|1jeUTWIc+4d_t@6j?vLG9PZ zpVI=mp(H>z)I_;(WnYk#)EO)(C4Tu}c}3OSko1dd|vQ#iS2mkwZwE1OOKwFDsk^CJnICH%%t1aF)_$IrB6gm#<1hEdRy zea#gQA~zf2Xqd|sG*Owj1^^NuIw#Ggz6bcAw0NE)Qi{sgq5IY<=L3cuaQ-`)+aNcl zOagiJV5wmeLvR_*qkiY&E@%-}N&>4toCEAH*+E00ygt`kx1}bGrnpSwW$WaC%MmFz zdm5;vzk_qi);^(^59W8#^kN6lW;m5Tj5bNcl00CU*`3->Gt z-Q`S`_Dg8iPTbeOn}O3#?}LWPpc&PdMH(GJ;9V%4(?x)b}DA zUHDGC+_L!KuM9eP4lr{ut8qy?zejSO(Ryv240d)d1ti~X!$`NAbQnR2dxjgqh$5?8 zp&p?#0|^d@)EmBfaH0UsE*}@P*66^hqU`e`ju@!4pn=j%M zsMYPMnHp^=lg#?O45hG`J;nDA8g>oA9rPQazciamr}lNKsR_RX>2_HiK_I^{0BAXC z(6%Oa$KfD>_tTFKC%;Z|n$#E7*DKM#!LKB-^OskpWg_?Zn)iS5HIyOgYjVZf{ijPW zYa1R~inwx7kAa5$Rtg&OH%i10;{Cu^w;f*~oVRUyC8!+ToEY4{`p&%TFb{o-rFto>;VZ+%qL zyz4Xlrv&dDYt zzMXL_u>mMjIr(|@3}q}1ai7{-E-QXtL7nuMy7zxWCA0v~J!mfLroH9^Cr%%RvI_#6^{}AhKD}?- z!u`!&{kzSo0h?t{FBSEWzj{>wfbS3wnrQsof8&x`pcRdmg?s$*2jiILb=7<3bpil@ zr*CA$QM7CoEEy_Lt#^hET}UFdAKpuU349MOiG42X%73O@a$*54 z%ZNEX7lPX9NCtkf{7VD^+&kp=8+DPjno7{F-`3A3#&zChy(oi>6EB~CN5G&Q0@T{Z z-S9>2EEm>aHy}SRAYE^V*bkhN38Q9udox+^j1H_e2Pj0oijU$%E4PBeP381lqBe$N zJgpGP<6o6`d&F)=8S5&_T9}gbPj2MvrpFq<4HJ5#lbH^JTF$%Z(C&Tn3JeovHuUZm zghI~>_yKgh#%>ig#pTJ}Uyt;bPS}Ml!2MDEUoKcqzptk6{QisntXE6kJx7aP6!{I# zl9$F37~e*^7V5L}>dCHj|9rmp_De62hW%a&y5p~q`gbPc{b!YAQ6C>5c?ibizz3oi z!G-K!RdBI<;Aebd+lghM5o%Kf1q= z1aKBIvkWJ%>ixA;=r4NDow&yi{w52Ma0RH%CCAQ|@8dE8Qv2wc$zK-v_k0RyisgSJ zpGX4Ltii0GW&eICLHPkcF3^Vm=X?R6?ff?nybtO3(RN#ZXQ0f~m%LQqU?SP1jI*sf ztIl!a-{BVT>>l|&EbNpBuVC|v*ODWp}3e-7D<>dEhO-1fn*O~e5$hk3z_`CqfLH+_G77G?Y@!$*W0xoD~zby z1|agh4`(Cr`-P3lJ~-U_H-*jbp)v`fW`J(tyEMVoFNdm=(-cj-dskFfn;i;xRO zoOw9Q&vqVQ0m!jHYg#YM6oYRF5Css_-(w51_VPf&c)f?U?`L8Vyweo6dbHuO9(|1J4!J4J>JXioGBmveW zbZf8cgzj~n0sjzcQGqfZ2WWObpa7%!EP3Xc3a+E!MMH4W8cWT`h+4;s{F0?#wwnwS z0bb*lmxZBzGn`u0+j_~^$h**({K#*!ygL(}Ze$_UJuJSX$bHUr0O^+-&ZOMs9IbiH z{HJ-GyjGTQ{%m+t#~rHl>8jnF+h(Z=BB=wKj>Ue#{{-Op)5r-x-=D-8zousb@c3Hd zieUm8S%Zh6917*GTWR3c8pnyW=fd_p>61?^z?A7W7lp^izV87sJ6D@N+~tr$%)L_8 zoN-Fv!IzSXu|X_BSN-^S=SE_jz#Nxa>Tmws)L*i{zpywHnMP=9`_dKp_-faT)4NIu ze#b5+q6b5PX8dMJ+}Y9`Iibtg{F$`XSIBDvZ;=efq*3DaPiC84WG?OYCtmf9j^@U^ zsl(X&LvyX&O1Hdv3X=WqN2_|v?h Ld%Z;M!L$DXTAi`s literal 0 HcmV?d00001 From 7ae980410b093a27a5a87fd80cd53bf21c48d71c Mon Sep 17 00:00:00 2001 From: Ishaan Jaffer Date: Mon, 2 Feb 2026 19:50:22 -0800 Subject: [PATCH 17/29] docs fix --- docs/my-website/docs/proxy/ui_logs.md | 29 +++++++++++++-------------- 1 file changed, 14 insertions(+), 15 deletions(-) diff --git a/docs/my-website/docs/proxy/ui_logs.md b/docs/my-website/docs/proxy/ui_logs.md index 2e772197b9..8cfe818ebf 100644 --- a/docs/my-website/docs/proxy/ui_logs.md +++ b/docs/my-website/docs/proxy/ui_logs.md @@ -23,6 +23,20 @@ View Spend, Token Usage, Key, Team Name for Each Request to LiteLLM **By default LiteLLM does not track the request and response content.** +## Tracking - Request / Response Content in Logs Page + +If you want to view request and response content on LiteLLM Logs, you can enable it in either place: + +- **From the UI (no restart):** Use [UI Spend Log Settings](./ui_spend_log_settings.md) — open Logs → Settings → enable "Store Prompts in Spend Logs" → Save. Takes effect immediately and overrides config. +- **From config:** Add this to your `proxy_config.yaml` (requires restart): + +```yaml +general_settings: + store_prompts_in_spend_logs: true +``` + + + ## Tracing Tools View which tools were provided and called in your completion requests. @@ -58,21 +72,6 @@ curl -X POST 'http://localhost:4000/chat/completions' \ Check the Logs page to see all tools provided and which ones were called. -## Tracking - Request / Response Content in Logs Page - -If you want to view request and response content on LiteLLM Logs, you can enable it in either place: - -- **From the UI (no restart):** Use [UI Spend Log Settings](./ui_spend_log_settings.md) — open Logs → Settings → enable "Store Prompts in Spend Logs" → Save. Takes effect immediately and overrides config. -- **From config:** Add this to your `proxy_config.yaml` (requires restart): - -```yaml -general_settings: - store_prompts_in_spend_logs: true -``` - - - - ## Stop storing Error Logs in DB If you do not want to store error logs in DB, you can opt out with this setting From 7dd0248987692d8908d0aa2cb55cfa3624318a0b Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:04:15 +0530 Subject: [PATCH 18/29] Revert "fix: models loadbalancing billing issue by filter (#18891) (#19220)" This reverts commit 72e519345149f4b305645c51943b0f2cfd6c8acd. --- litellm/proxy/auth/model_checks.py | 25 +- litellm/proxy/litellm_pre_call_utils.py | 31 --- litellm/router.py | 12 +- litellm/router_utils/common_utils.py | 79 +----- ...est_filter_deployments_by_access_groups.py | 227 ------------------ 5 files changed, 6 insertions(+), 368 deletions(-) delete mode 100644 tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py diff --git a/litellm/proxy/auth/model_checks.py b/litellm/proxy/auth/model_checks.py index af2574d88e..71ae1348f3 100644 --- a/litellm/proxy/auth/model_checks.py +++ b/litellm/proxy/auth/model_checks.py @@ -64,27 +64,6 @@ def _get_models_from_access_groups( return all_models -def get_access_groups_from_models( - model_access_groups: Dict[str, List[str]], - models: List[str], -) -> List[str]: - """ - Extract access group names from a models list. - - Given a models list like ["gpt-4", "beta-models", "claude-v1"] - and access groups like {"beta-models": ["gpt-5", "gpt-6"]}, - returns ["beta-models"]. - - This is used to pass allowed access groups to the router for filtering - deployments during load balancing (GitHub issue #18333). - """ - access_groups = [] - for model in models: - if model in model_access_groups: - access_groups.append(model) - return access_groups - - async def get_mcp_server_ids( user_api_key_dict: UserAPIKeyAuth, ) -> List[str]: @@ -101,6 +80,7 @@ async def get_mcp_server_ids( # Make a direct SQL query to get just the mcp_servers try: + result = await prisma_client.db.litellm_objectpermissiontable.find_unique( where={"object_permission_id": user_api_key_dict.object_permission_id}, ) @@ -196,7 +176,6 @@ def get_complete_model_list( """ unique_models = [] - def append_unique(models): for model in models: if model not in unique_models: @@ -209,7 +188,7 @@ def get_complete_model_list( else: append_unique(proxy_model_list) if include_model_access_groups: - append_unique(list(model_access_groups.keys())) # TODO: keys order + append_unique(list(model_access_groups.keys())) # TODO: keys order if user_model: append_unique([user_model]) diff --git a/litellm/proxy/litellm_pre_call_utils.py b/litellm/proxy/litellm_pre_call_utils.py index 72f23e609a..9be78264e8 100644 --- a/litellm/proxy/litellm_pre_call_utils.py +++ b/litellm/proxy/litellm_pre_call_utils.py @@ -1021,37 +1021,6 @@ async def add_litellm_data_to_request( # noqa: PLR0915 "user_api_key_user_max_budget" ] = user_api_key_dict.user_max_budget - # Extract allowed access groups for router filtering (GitHub issue #18333) - # This allows the router to filter deployments based on key's and team's access groups - # NOTE: We keep key and team access groups SEPARATE because a key doesn't always - # inherit all team access groups (per maintainer feedback). - if llm_router is not None: - from litellm.proxy.auth.model_checks import get_access_groups_from_models - - model_access_groups = llm_router.get_model_access_groups() - - # Key-level access groups (from user_api_key_dict.models) - key_models = list(user_api_key_dict.models) if user_api_key_dict.models else [] - key_allowed_access_groups = get_access_groups_from_models( - model_access_groups=model_access_groups, models=key_models - ) - if key_allowed_access_groups: - data[_metadata_variable_name][ - "user_api_key_allowed_access_groups" - ] = key_allowed_access_groups - - # Team-level access groups (from user_api_key_dict.team_models) - team_models = ( - list(user_api_key_dict.team_models) if user_api_key_dict.team_models else [] - ) - team_allowed_access_groups = get_access_groups_from_models( - model_access_groups=model_access_groups, models=team_models - ) - if team_allowed_access_groups: - data[_metadata_variable_name][ - "user_api_key_team_allowed_access_groups" - ] = team_allowed_access_groups - data[_metadata_variable_name]["user_api_key_metadata"] = user_api_key_dict.metadata _headers = dict(request.headers) _headers.pop( diff --git a/litellm/router.py b/litellm/router.py index 65445e29c4..d01c8443da 100644 --- a/litellm/router.py +++ b/litellm/router.py @@ -88,7 +88,6 @@ from litellm.router_utils.clientside_credential_handler import ( is_clientside_credential, ) from litellm.router_utils.common_utils import ( - filter_deployments_by_access_groups, filter_team_based_models, filter_web_search_deployments, ) @@ -8088,17 +8087,10 @@ class Router: request_kwargs=request_kwargs, ) - verbose_router_logger.debug(f"healthy_deployments after web search filter: {healthy_deployments}") - - # Filter by allowed access groups (GitHub issue #18333) - # This prevents cross-team load balancing when teams have models with same name in different access groups - healthy_deployments = filter_deployments_by_access_groups( - healthy_deployments=healthy_deployments, - request_kwargs=request_kwargs, + verbose_router_logger.debug( + f"healthy_deployments after web search filter: {healthy_deployments}" ) - verbose_router_logger.debug(f"healthy_deployments after access group filter: {healthy_deployments}") - if isinstance(healthy_deployments, dict): return healthy_deployments diff --git a/litellm/router_utils/common_utils.py b/litellm/router_utils/common_utils.py index 2c0ea5976d..10acc343ab 100644 --- a/litellm/router_utils/common_utils.py +++ b/litellm/router_utils/common_utils.py @@ -75,7 +75,6 @@ def filter_team_based_models( if deployment.get("model_info", {}).get("id") not in ids_to_remove ] - def _deployment_supports_web_search(deployment: Dict) -> bool: """ Check if a deployment supports web search. @@ -113,7 +112,7 @@ def filter_web_search_deployments( is_web_search_request = False tools = request_kwargs.get("tools") or [] for tool in tools: - # These are the two websearch tools for OpenAI / Azure. + # These are the two websearch tools for OpenAI / Azure. if tool.get("type") == "web_search" or tool.get("type") == "web_search_preview": is_web_search_request = True break @@ -122,82 +121,8 @@ def filter_web_search_deployments( return healthy_deployments # Filter out deployments that don't support web search - final_deployments = [ - d for d in healthy_deployments if _deployment_supports_web_search(d) - ] + final_deployments = [d for d in healthy_deployments if _deployment_supports_web_search(d)] if len(healthy_deployments) > 0 and len(final_deployments) == 0: verbose_logger.warning("No deployments support web search for request") return final_deployments - -def filter_deployments_by_access_groups( - healthy_deployments: Union[List[Dict], Dict], - request_kwargs: Optional[Dict] = None, -) -> Union[List[Dict], Dict]: - """ - Filter deployments to only include those matching the user's allowed access groups. - - Reads from TWO separate metadata fields (per maintainer feedback): - - `user_api_key_allowed_access_groups`: Access groups from the API Key's models. - - `user_api_key_team_allowed_access_groups`: Access groups from the Team's models. - - A deployment is included if its access_groups overlap with EITHER the key's - or the team's allowed access groups. Deployments with no access_groups are - always included (not restricted). - - This prevents cross-team load balancing when multiple teams have models with - the same name but in different access groups (GitHub issue #18333). - """ - if request_kwargs is None: - return healthy_deployments - - if isinstance(healthy_deployments, dict): - return healthy_deployments - - metadata = request_kwargs.get("metadata") or {} - litellm_metadata = request_kwargs.get("litellm_metadata") or {} - - # Gather key-level allowed access groups - key_allowed_access_groups = ( - metadata.get("user_api_key_allowed_access_groups") - or litellm_metadata.get("user_api_key_allowed_access_groups") - or [] - ) - - # Gather team-level allowed access groups - team_allowed_access_groups = ( - metadata.get("user_api_key_team_allowed_access_groups") - or litellm_metadata.get("user_api_key_team_allowed_access_groups") - or [] - ) - - # Combine both for the final allowed set - combined_allowed_access_groups = list(key_allowed_access_groups) + list( - team_allowed_access_groups - ) - - # If no access groups specified from either source, return all deployments (backwards compatible) - if not combined_allowed_access_groups: - return healthy_deployments - - allowed_set = set(combined_allowed_access_groups) - filtered = [] - for deployment in healthy_deployments: - model_info = deployment.get("model_info") or {} - deployment_access_groups = model_info.get("access_groups") or [] - - # If deployment has no access groups, include it (not restricted) - if not deployment_access_groups: - filtered.append(deployment) - continue - - # Include if any of deployment's groups overlap with allowed groups - if set(deployment_access_groups) & allowed_set: - filtered.append(deployment) - - if len(healthy_deployments) > 0 and len(filtered) == 0: - verbose_logger.warning( - f"No deployments match allowed access groups {combined_allowed_access_groups}" - ) - - return filtered diff --git a/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py b/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py deleted file mode 100644 index 9ac5072c5d..0000000000 --- a/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py +++ /dev/null @@ -1,227 +0,0 @@ -""" -Unit tests for filter_deployments_by_access_groups function. - -Tests the fix for GitHub issue #18333: Models loadbalanced outside of Model Access Group. -""" - -import pytest - -from litellm.router_utils.common_utils import filter_deployments_by_access_groups - - -class TestFilterDeploymentsByAccessGroups: - """Tests for the filter_deployments_by_access_groups function.""" - - def test_no_filter_when_no_access_groups_in_metadata(self): - """When no allowed_access_groups in metadata, return all deployments.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_team_id": "team-1"}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 2 # All deployments returned - - def test_filter_to_single_access_group(self): - """Filter to only deployments matching allowed access group.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "2" - - def test_filter_with_multiple_allowed_groups(self): - """Filter with multiple allowed access groups.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - {"model_info": {"id": "3", "access_groups": ["AG3"]}}, - ] - request_kwargs = { - "metadata": {"user_api_key_allowed_access_groups": ["AG1", "AG2"]} - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 2 - ids = [d["model_info"]["id"] for d in result] - assert "1" in ids - assert "2" in ids - assert "3" not in ids - - def test_deployment_with_multiple_access_groups(self): - """Deployment with multiple access groups should match if any overlap.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1", "AG2"]}}, - {"model_info": {"id": "2", "access_groups": ["AG3"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "1" - - def test_deployment_without_access_groups_included(self): - """Deployments without access groups should be included (not restricted).""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2"}}, # No access_groups - {"model_info": {"id": "3", "access_groups": []}}, # Empty access_groups - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - # Should include deployments 2 and 3 (no restrictions) - assert len(result) == 2 - ids = [d["model_info"]["id"] for d in result] - assert "2" in ids - assert "3" in ids - - def test_dict_deployment_passes_through(self): - """When deployment is a dict (specific deployment), pass through.""" - deployment = {"model_info": {"id": "1", "access_groups": ["AG1"]}} - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployment, - request_kwargs=request_kwargs, - ) - - assert result == deployment # Unchanged - - def test_none_request_kwargs_passes_through(self): - """When request_kwargs is None, return deployments unchanged.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - ] - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=None, - ) - - assert result == deployments - - def test_litellm_metadata_fallback(self): - """Should also check litellm_metadata for allowed access groups.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = { - "litellm_metadata": {"user_api_key_allowed_access_groups": ["AG1"]} - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "1" - - -def test_filter_deployments_by_access_groups_issue_18333(): - """ - Regression test for GitHub issue #18333. - - Scenario: Two models named 'gpt-5' in different access groups (AG1, AG2). - Team2 has access to AG2 only. When Team2 requests 'gpt-5', only the AG2 - deployment should be available for load balancing. - """ - deployments = [ - { - "model_name": "gpt-5", - "litellm_params": {"model": "gpt-4.1", "api_key": "key-1"}, - "model_info": {"id": "ag1-deployment", "access_groups": ["AG1"]}, - }, - { - "model_name": "gpt-5", - "litellm_params": {"model": "gpt-4o", "api_key": "key-2"}, - "model_info": {"id": "ag2-deployment", "access_groups": ["AG2"]}, - }, - ] - - # Team2's request with allowed access groups - request_kwargs = { - "metadata": { - "user_api_key_team_id": "team-2", - "user_api_key_allowed_access_groups": ["AG2"], - } - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - # Only AG2 deployment should be returned - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "ag2-deployment" - assert result[0]["litellm_params"]["model"] == "gpt-4o" - - -def test_get_access_groups_from_models(): - """ - Test the helper function that extracts access group names from models list. - This is used by the proxy to populate user_api_key_allowed_access_groups. - """ - from litellm.proxy.auth.model_checks import get_access_groups_from_models - - # Setup: access groups definition - model_access_groups = { - "AG1": ["gpt-4", "gpt-5"], - "AG2": ["claude-v1", "claude-v2"], - "beta-models": ["gpt-5-turbo"], - } - - # Test 1: Extract access groups from models list - models = ["gpt-4", "AG1", "AG2", "some-other-model"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert set(result) == {"AG1", "AG2"} - - # Test 2: No access groups in models list - models = ["gpt-4", "claude-v1", "some-model"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert result == [] - - # Test 3: Empty models list - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=[] - ) - assert result == [] - - # Test 4: All access groups - models = ["AG1", "AG2", "beta-models"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert set(result) == {"AG1", "AG2", "beta-models"} From 86ae627007fb1d0b2088925547287d0cd99e32da Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:08:19 +0530 Subject: [PATCH 19/29] Fix litellm/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py tests --- .../test_semantic_tool_filter_e2e.py | 19 +++++++++++++++++-- .../mcp_server/test_semantic_tool_filter.py | 16 +++++++++++++--- 2 files changed, 30 insertions(+), 5 deletions(-) diff --git a/tests/mcp_tests/test_semantic_tool_filter_e2e.py b/tests/mcp_tests/test_semantic_tool_filter_e2e.py index cf951c1884..91c072ae8a 100644 --- a/tests/mcp_tests/test_semantic_tool_filter_e2e.py +++ b/tests/mcp_tests/test_semantic_tool_filter_e2e.py @@ -12,8 +12,19 @@ sys.path.insert(0, os.path.abspath("../..")) from mcp.types import Tool as MCPTool +# Check if semantic-router is available +try: + import semantic_router + SEMANTIC_ROUTER_AVAILABLE = True +except ImportError: + SEMANTIC_ROUTER_AVAILABLE = False + @pytest.mark.asyncio +@pytest.mark.skipif( + not SEMANTIC_ROUTER_AVAILABLE, + reason="semantic-router not installed. Install with: pip install 'litellm[semantic-router]'" +) async def test_e2e_semantic_filter(): """E2E: Load router/filter and verify hook filters tools.""" from litellm import Router @@ -37,8 +48,6 @@ async def test_e2e_semantic_filter(): enabled=True, ) - hook = SemanticToolFilterHook(filter_instance) - # Create 10 tools tools = [ MCPTool(name="gmail_send", description="Send an email via Gmail", inputSchema={"type": "object"}), @@ -53,10 +62,16 @@ async def test_e2e_semantic_filter(): MCPTool(name="note_add", description="Add note", inputSchema={"type": "object"}), ] + # Build router with test tools + filter_instance._build_router(tools) + + hook = SemanticToolFilterHook(filter_instance) + data = { "model": "gpt-4", "messages": [{"role": "user", "content": "Send an email and create a calendar event"}], "tools": tools, + "metadata": {}, # Initialize metadata dict for hook to store filter stats } # Call hook diff --git a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py index 8d35f5bbdc..87c597c659 100644 --- a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py +++ b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py @@ -71,6 +71,9 @@ async def test_semantic_filter_basic_filtering(): enabled=True, ) + # Build router with the tools before filtering + filter_instance._build_router(tools) + # Filter tools with email-related query filtered = await filter_instance.filter_tools( query="send an email to john@example.com", @@ -139,6 +142,9 @@ async def test_semantic_filter_top_k_limiting(): enabled=True, ) + # Build router with the tools before filtering + filter_instance._build_router(tools) + # Filter tools filtered = await filter_instance.filter_tools( query="test query", @@ -297,21 +303,25 @@ async def test_semantic_filter_hook_triggers_on_completion(): enabled=True, ) - # Create hook - hook = SemanticToolFilterHook(filter_instance) - # Prepare data - completion request with tools tools = [ MCPTool(name=f"tool_{i}", description=f"Tool {i}", inputSchema={"type": "object"}) for i in range(10) ] + # Build router with the tools before filtering + filter_instance._build_router(tools) + + # Create hook + hook = SemanticToolFilterHook(filter_instance) + data = { "model": "gpt-4", "messages": [ {"role": "user", "content": "Send an email"} ], "tools": tools, + "metadata": {}, # Hook needs metadata field to store filter stats } # Mock user API key dict and cache From b379fb6338690c674f1ff86c7fa1d58734148b04 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:10:29 +0530 Subject: [PATCH 20/29] Fix code quality tests --- docs/my-website/docs/proxy/config_settings.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/my-website/docs/proxy/config_settings.md b/docs/my-website/docs/proxy/config_settings.md index 264c7d765b..385b4b0de3 100644 --- a/docs/my-website/docs/proxy/config_settings.md +++ b/docs/my-website/docs/proxy/config_settings.md @@ -545,6 +545,9 @@ router_settings: | DEFAULT_MAX_TOKENS | Default maximum tokens for LLM calls. Default is 4096 | DEFAULT_MAX_TOKENS_FOR_TRITON | Default maximum tokens for Triton models. Default is 2000 | DEFAULT_MAX_REDIS_BATCH_CACHE_SIZE | Default maximum size for redis batch cache. Default is 1000 +| DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL | Default embedding model for MCP semantic tool filtering. Default is "text-embedding-3-small" +| DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD | Default similarity threshold for MCP semantic tool filtering. Default is 0.3 +| DEFAULT_MCP_SEMANTIC_FILTER_TOP_K | Default number of top results to return for MCP semantic tool filtering. Default is 10 | DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT | Default token count for mock response completions. Default is 20 | DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT | Default token count for mock response prompts. Default is 10 | DEFAULT_MODEL_CREATED_AT_TIME | Default creation timestamp for models. Default is 1677610602 @@ -802,6 +805,7 @@ router_settings: | MAXIMUM_TRACEBACK_LINES_TO_LOG | Maximum number of lines to log in traceback in LiteLLM Logs UI. Default is 100 | MAX_RETRY_DELAY | Maximum delay in seconds for retrying requests. Default is 8.0 | MAX_LANGFUSE_INITIALIZED_CLIENTS | Maximum number of Langfuse clients to initialize on proxy. Default is 50. This is set since langfuse initializes 1 thread everytime a client is initialized. We've had an incident in the past where we reached 100% cpu utilization because Langfuse was initialized several times. +| MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH | Maximum header length for MCP semantic filter tools. Default is 150 | MIN_NON_ZERO_TEMPERATURE | Minimum non-zero temperature value. Default is 0.0001 | MINIMUM_PROMPT_CACHE_TOKEN_COUNT | Minimum token count for caching a prompt. Default is 1024 | MISTRAL_API_BASE | Base URL for Mistral API. Default is https://api.mistral.ai From ecb6413028af12afd0924c7158c0a8aa964fe8ba Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:22:18 +0530 Subject: [PATCH 21/29] Revert "add missing indexes on VerificationToken table (#20040)" This reverts commit 1e8848ca97bd53e596e715162d35d0d7953c9a08. --- .../migration.sql | 8 -------- .../litellm_proxy_extras/schema.prisma | 10 ---------- litellm/proxy/schema.prisma | 10 ---------- schema.prisma | 10 ---------- 4 files changed, 38 deletions(-) delete mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql diff --git a/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql b/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql deleted file mode 100644 index 572eea9b52..0000000000 --- a/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql +++ /dev/null @@ -1,8 +0,0 @@ --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_user_id_team_id_idx" ON "LiteLLM_VerificationToken"("user_id", "team_id"); - --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_team_id_idx" ON "LiteLLM_VerificationToken"("team_id"); - --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_budget_reset_at_expires_idx" ON "LiteLLM_VerificationToken"("budget_reset_at", "expires"); diff --git a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma index 3b81da1092..b118400b62 100644 --- a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma +++ b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/litellm/proxy/schema.prisma b/litellm/proxy/schema.prisma index 3b81da1092..b118400b62 100644 --- a/litellm/proxy/schema.prisma +++ b/litellm/proxy/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/schema.prisma b/schema.prisma index 3b81da1092..b118400b62 100644 --- a/schema.prisma +++ b/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking From 1b1854b704ae8b3640984fa4df26f37091603dd9 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 14:29:16 +0530 Subject: [PATCH 22/29] Revert "Litellm tuesday cicd release" --- docs/my-website/docs/proxy/config_settings.md | 4 - .../migration.sql | 8 + .../litellm_proxy_extras/schema.prisma | 10 + litellm/proxy/auth/model_checks.py | 25 +- litellm/proxy/litellm_pre_call_utils.py | 31 +++ litellm/proxy/schema.prisma | 10 + litellm/router.py | 12 +- litellm/router_utils/common_utils.py | 79 +++++- schema.prisma | 10 + .../test_semantic_tool_filter_e2e.py | 19 +- .../mcp_server/test_semantic_tool_filter.py | 16 +- ...est_filter_deployments_by_access_groups.py | 227 ++++++++++++++++++ 12 files changed, 411 insertions(+), 40 deletions(-) create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql create mode 100644 tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py diff --git a/docs/my-website/docs/proxy/config_settings.md b/docs/my-website/docs/proxy/config_settings.md index 385b4b0de3..264c7d765b 100644 --- a/docs/my-website/docs/proxy/config_settings.md +++ b/docs/my-website/docs/proxy/config_settings.md @@ -545,9 +545,6 @@ router_settings: | DEFAULT_MAX_TOKENS | Default maximum tokens for LLM calls. Default is 4096 | DEFAULT_MAX_TOKENS_FOR_TRITON | Default maximum tokens for Triton models. Default is 2000 | DEFAULT_MAX_REDIS_BATCH_CACHE_SIZE | Default maximum size for redis batch cache. Default is 1000 -| DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL | Default embedding model for MCP semantic tool filtering. Default is "text-embedding-3-small" -| DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD | Default similarity threshold for MCP semantic tool filtering. Default is 0.3 -| DEFAULT_MCP_SEMANTIC_FILTER_TOP_K | Default number of top results to return for MCP semantic tool filtering. Default is 10 | DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT | Default token count for mock response completions. Default is 20 | DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT | Default token count for mock response prompts. Default is 10 | DEFAULT_MODEL_CREATED_AT_TIME | Default creation timestamp for models. Default is 1677610602 @@ -805,7 +802,6 @@ router_settings: | MAXIMUM_TRACEBACK_LINES_TO_LOG | Maximum number of lines to log in traceback in LiteLLM Logs UI. Default is 100 | MAX_RETRY_DELAY | Maximum delay in seconds for retrying requests. Default is 8.0 | MAX_LANGFUSE_INITIALIZED_CLIENTS | Maximum number of Langfuse clients to initialize on proxy. Default is 50. This is set since langfuse initializes 1 thread everytime a client is initialized. We've had an incident in the past where we reached 100% cpu utilization because Langfuse was initialized several times. -| MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH | Maximum header length for MCP semantic filter tools. Default is 150 | MIN_NON_ZERO_TEMPERATURE | Minimum non-zero temperature value. Default is 0.0001 | MINIMUM_PROMPT_CACHE_TOKEN_COUNT | Minimum token count for caching a prompt. Default is 1024 | MISTRAL_API_BASE | Base URL for Mistral API. Default is https://api.mistral.ai diff --git a/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql b/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql new file mode 100644 index 0000000000..572eea9b52 --- /dev/null +++ b/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql @@ -0,0 +1,8 @@ +-- CreateIndex +CREATE INDEX "LiteLLM_VerificationToken_user_id_team_id_idx" ON "LiteLLM_VerificationToken"("user_id", "team_id"); + +-- CreateIndex +CREATE INDEX "LiteLLM_VerificationToken_team_id_idx" ON "LiteLLM_VerificationToken"("team_id"); + +-- CreateIndex +CREATE INDEX "LiteLLM_VerificationToken_budget_reset_at_expires_idx" ON "LiteLLM_VerificationToken"("budget_reset_at", "expires"); diff --git a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma index b118400b62..3b81da1092 100644 --- a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma +++ b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma @@ -305,6 +305,16 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) + + // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 + @@index([user_id, team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 + @@index([team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 + @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/litellm/proxy/auth/model_checks.py b/litellm/proxy/auth/model_checks.py index 71ae1348f3..af2574d88e 100644 --- a/litellm/proxy/auth/model_checks.py +++ b/litellm/proxy/auth/model_checks.py @@ -64,6 +64,27 @@ def _get_models_from_access_groups( return all_models +def get_access_groups_from_models( + model_access_groups: Dict[str, List[str]], + models: List[str], +) -> List[str]: + """ + Extract access group names from a models list. + + Given a models list like ["gpt-4", "beta-models", "claude-v1"] + and access groups like {"beta-models": ["gpt-5", "gpt-6"]}, + returns ["beta-models"]. + + This is used to pass allowed access groups to the router for filtering + deployments during load balancing (GitHub issue #18333). + """ + access_groups = [] + for model in models: + if model in model_access_groups: + access_groups.append(model) + return access_groups + + async def get_mcp_server_ids( user_api_key_dict: UserAPIKeyAuth, ) -> List[str]: @@ -80,7 +101,6 @@ async def get_mcp_server_ids( # Make a direct SQL query to get just the mcp_servers try: - result = await prisma_client.db.litellm_objectpermissiontable.find_unique( where={"object_permission_id": user_api_key_dict.object_permission_id}, ) @@ -176,6 +196,7 @@ def get_complete_model_list( """ unique_models = [] + def append_unique(models): for model in models: if model not in unique_models: @@ -188,7 +209,7 @@ def get_complete_model_list( else: append_unique(proxy_model_list) if include_model_access_groups: - append_unique(list(model_access_groups.keys())) # TODO: keys order + append_unique(list(model_access_groups.keys())) # TODO: keys order if user_model: append_unique([user_model]) diff --git a/litellm/proxy/litellm_pre_call_utils.py b/litellm/proxy/litellm_pre_call_utils.py index 9be78264e8..72f23e609a 100644 --- a/litellm/proxy/litellm_pre_call_utils.py +++ b/litellm/proxy/litellm_pre_call_utils.py @@ -1021,6 +1021,37 @@ async def add_litellm_data_to_request( # noqa: PLR0915 "user_api_key_user_max_budget" ] = user_api_key_dict.user_max_budget + # Extract allowed access groups for router filtering (GitHub issue #18333) + # This allows the router to filter deployments based on key's and team's access groups + # NOTE: We keep key and team access groups SEPARATE because a key doesn't always + # inherit all team access groups (per maintainer feedback). + if llm_router is not None: + from litellm.proxy.auth.model_checks import get_access_groups_from_models + + model_access_groups = llm_router.get_model_access_groups() + + # Key-level access groups (from user_api_key_dict.models) + key_models = list(user_api_key_dict.models) if user_api_key_dict.models else [] + key_allowed_access_groups = get_access_groups_from_models( + model_access_groups=model_access_groups, models=key_models + ) + if key_allowed_access_groups: + data[_metadata_variable_name][ + "user_api_key_allowed_access_groups" + ] = key_allowed_access_groups + + # Team-level access groups (from user_api_key_dict.team_models) + team_models = ( + list(user_api_key_dict.team_models) if user_api_key_dict.team_models else [] + ) + team_allowed_access_groups = get_access_groups_from_models( + model_access_groups=model_access_groups, models=team_models + ) + if team_allowed_access_groups: + data[_metadata_variable_name][ + "user_api_key_team_allowed_access_groups" + ] = team_allowed_access_groups + data[_metadata_variable_name]["user_api_key_metadata"] = user_api_key_dict.metadata _headers = dict(request.headers) _headers.pop( diff --git a/litellm/proxy/schema.prisma b/litellm/proxy/schema.prisma index b118400b62..3b81da1092 100644 --- a/litellm/proxy/schema.prisma +++ b/litellm/proxy/schema.prisma @@ -305,6 +305,16 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) + + // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 + @@index([user_id, team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 + @@index([team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 + @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/litellm/router.py b/litellm/router.py index d01c8443da..65445e29c4 100644 --- a/litellm/router.py +++ b/litellm/router.py @@ -88,6 +88,7 @@ from litellm.router_utils.clientside_credential_handler import ( is_clientside_credential, ) from litellm.router_utils.common_utils import ( + filter_deployments_by_access_groups, filter_team_based_models, filter_web_search_deployments, ) @@ -8087,10 +8088,17 @@ class Router: request_kwargs=request_kwargs, ) - verbose_router_logger.debug( - f"healthy_deployments after web search filter: {healthy_deployments}" + verbose_router_logger.debug(f"healthy_deployments after web search filter: {healthy_deployments}") + + # Filter by allowed access groups (GitHub issue #18333) + # This prevents cross-team load balancing when teams have models with same name in different access groups + healthy_deployments = filter_deployments_by_access_groups( + healthy_deployments=healthy_deployments, + request_kwargs=request_kwargs, ) + verbose_router_logger.debug(f"healthy_deployments after access group filter: {healthy_deployments}") + if isinstance(healthy_deployments, dict): return healthy_deployments diff --git a/litellm/router_utils/common_utils.py b/litellm/router_utils/common_utils.py index 10acc343ab..2c0ea5976d 100644 --- a/litellm/router_utils/common_utils.py +++ b/litellm/router_utils/common_utils.py @@ -75,6 +75,7 @@ def filter_team_based_models( if deployment.get("model_info", {}).get("id") not in ids_to_remove ] + def _deployment_supports_web_search(deployment: Dict) -> bool: """ Check if a deployment supports web search. @@ -112,7 +113,7 @@ def filter_web_search_deployments( is_web_search_request = False tools = request_kwargs.get("tools") or [] for tool in tools: - # These are the two websearch tools for OpenAI / Azure. + # These are the two websearch tools for OpenAI / Azure. if tool.get("type") == "web_search" or tool.get("type") == "web_search_preview": is_web_search_request = True break @@ -121,8 +122,82 @@ def filter_web_search_deployments( return healthy_deployments # Filter out deployments that don't support web search - final_deployments = [d for d in healthy_deployments if _deployment_supports_web_search(d)] + final_deployments = [ + d for d in healthy_deployments if _deployment_supports_web_search(d) + ] if len(healthy_deployments) > 0 and len(final_deployments) == 0: verbose_logger.warning("No deployments support web search for request") return final_deployments + +def filter_deployments_by_access_groups( + healthy_deployments: Union[List[Dict], Dict], + request_kwargs: Optional[Dict] = None, +) -> Union[List[Dict], Dict]: + """ + Filter deployments to only include those matching the user's allowed access groups. + + Reads from TWO separate metadata fields (per maintainer feedback): + - `user_api_key_allowed_access_groups`: Access groups from the API Key's models. + - `user_api_key_team_allowed_access_groups`: Access groups from the Team's models. + + A deployment is included if its access_groups overlap with EITHER the key's + or the team's allowed access groups. Deployments with no access_groups are + always included (not restricted). + + This prevents cross-team load balancing when multiple teams have models with + the same name but in different access groups (GitHub issue #18333). + """ + if request_kwargs is None: + return healthy_deployments + + if isinstance(healthy_deployments, dict): + return healthy_deployments + + metadata = request_kwargs.get("metadata") or {} + litellm_metadata = request_kwargs.get("litellm_metadata") or {} + + # Gather key-level allowed access groups + key_allowed_access_groups = ( + metadata.get("user_api_key_allowed_access_groups") + or litellm_metadata.get("user_api_key_allowed_access_groups") + or [] + ) + + # Gather team-level allowed access groups + team_allowed_access_groups = ( + metadata.get("user_api_key_team_allowed_access_groups") + or litellm_metadata.get("user_api_key_team_allowed_access_groups") + or [] + ) + + # Combine both for the final allowed set + combined_allowed_access_groups = list(key_allowed_access_groups) + list( + team_allowed_access_groups + ) + + # If no access groups specified from either source, return all deployments (backwards compatible) + if not combined_allowed_access_groups: + return healthy_deployments + + allowed_set = set(combined_allowed_access_groups) + filtered = [] + for deployment in healthy_deployments: + model_info = deployment.get("model_info") or {} + deployment_access_groups = model_info.get("access_groups") or [] + + # If deployment has no access groups, include it (not restricted) + if not deployment_access_groups: + filtered.append(deployment) + continue + + # Include if any of deployment's groups overlap with allowed groups + if set(deployment_access_groups) & allowed_set: + filtered.append(deployment) + + if len(healthy_deployments) > 0 and len(filtered) == 0: + verbose_logger.warning( + f"No deployments match allowed access groups {combined_allowed_access_groups}" + ) + + return filtered diff --git a/schema.prisma b/schema.prisma index b118400b62..3b81da1092 100644 --- a/schema.prisma +++ b/schema.prisma @@ -305,6 +305,16 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) + + // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 + @@index([user_id, team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 + @@index([team_id]) + + // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 + @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/tests/mcp_tests/test_semantic_tool_filter_e2e.py b/tests/mcp_tests/test_semantic_tool_filter_e2e.py index 91c072ae8a..cf951c1884 100644 --- a/tests/mcp_tests/test_semantic_tool_filter_e2e.py +++ b/tests/mcp_tests/test_semantic_tool_filter_e2e.py @@ -12,19 +12,8 @@ sys.path.insert(0, os.path.abspath("../..")) from mcp.types import Tool as MCPTool -# Check if semantic-router is available -try: - import semantic_router - SEMANTIC_ROUTER_AVAILABLE = True -except ImportError: - SEMANTIC_ROUTER_AVAILABLE = False - @pytest.mark.asyncio -@pytest.mark.skipif( - not SEMANTIC_ROUTER_AVAILABLE, - reason="semantic-router not installed. Install with: pip install 'litellm[semantic-router]'" -) async def test_e2e_semantic_filter(): """E2E: Load router/filter and verify hook filters tools.""" from litellm import Router @@ -48,6 +37,8 @@ async def test_e2e_semantic_filter(): enabled=True, ) + hook = SemanticToolFilterHook(filter_instance) + # Create 10 tools tools = [ MCPTool(name="gmail_send", description="Send an email via Gmail", inputSchema={"type": "object"}), @@ -62,16 +53,10 @@ async def test_e2e_semantic_filter(): MCPTool(name="note_add", description="Add note", inputSchema={"type": "object"}), ] - # Build router with test tools - filter_instance._build_router(tools) - - hook = SemanticToolFilterHook(filter_instance) - data = { "model": "gpt-4", "messages": [{"role": "user", "content": "Send an email and create a calendar event"}], "tools": tools, - "metadata": {}, # Initialize metadata dict for hook to store filter stats } # Call hook diff --git a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py index 87c597c659..8d35f5bbdc 100644 --- a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py +++ b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py @@ -71,9 +71,6 @@ async def test_semantic_filter_basic_filtering(): enabled=True, ) - # Build router with the tools before filtering - filter_instance._build_router(tools) - # Filter tools with email-related query filtered = await filter_instance.filter_tools( query="send an email to john@example.com", @@ -142,9 +139,6 @@ async def test_semantic_filter_top_k_limiting(): enabled=True, ) - # Build router with the tools before filtering - filter_instance._build_router(tools) - # Filter tools filtered = await filter_instance.filter_tools( query="test query", @@ -303,25 +297,21 @@ async def test_semantic_filter_hook_triggers_on_completion(): enabled=True, ) + # Create hook + hook = SemanticToolFilterHook(filter_instance) + # Prepare data - completion request with tools tools = [ MCPTool(name=f"tool_{i}", description=f"Tool {i}", inputSchema={"type": "object"}) for i in range(10) ] - # Build router with the tools before filtering - filter_instance._build_router(tools) - - # Create hook - hook = SemanticToolFilterHook(filter_instance) - data = { "model": "gpt-4", "messages": [ {"role": "user", "content": "Send an email"} ], "tools": tools, - "metadata": {}, # Hook needs metadata field to store filter stats } # Mock user API key dict and cache diff --git a/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py b/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py new file mode 100644 index 0000000000..9ac5072c5d --- /dev/null +++ b/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py @@ -0,0 +1,227 @@ +""" +Unit tests for filter_deployments_by_access_groups function. + +Tests the fix for GitHub issue #18333: Models loadbalanced outside of Model Access Group. +""" + +import pytest + +from litellm.router_utils.common_utils import filter_deployments_by_access_groups + + +class TestFilterDeploymentsByAccessGroups: + """Tests for the filter_deployments_by_access_groups function.""" + + def test_no_filter_when_no_access_groups_in_metadata(self): + """When no allowed_access_groups in metadata, return all deployments.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + {"model_info": {"id": "2", "access_groups": ["AG2"]}}, + ] + request_kwargs = {"metadata": {"user_api_key_team_id": "team-1"}} + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + assert len(result) == 2 # All deployments returned + + def test_filter_to_single_access_group(self): + """Filter to only deployments matching allowed access group.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + {"model_info": {"id": "2", "access_groups": ["AG2"]}}, + ] + request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + assert len(result) == 1 + assert result[0]["model_info"]["id"] == "2" + + def test_filter_with_multiple_allowed_groups(self): + """Filter with multiple allowed access groups.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + {"model_info": {"id": "2", "access_groups": ["AG2"]}}, + {"model_info": {"id": "3", "access_groups": ["AG3"]}}, + ] + request_kwargs = { + "metadata": {"user_api_key_allowed_access_groups": ["AG1", "AG2"]} + } + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + assert len(result) == 2 + ids = [d["model_info"]["id"] for d in result] + assert "1" in ids + assert "2" in ids + assert "3" not in ids + + def test_deployment_with_multiple_access_groups(self): + """Deployment with multiple access groups should match if any overlap.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1", "AG2"]}}, + {"model_info": {"id": "2", "access_groups": ["AG3"]}}, + ] + request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + assert len(result) == 1 + assert result[0]["model_info"]["id"] == "1" + + def test_deployment_without_access_groups_included(self): + """Deployments without access groups should be included (not restricted).""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + {"model_info": {"id": "2"}}, # No access_groups + {"model_info": {"id": "3", "access_groups": []}}, # Empty access_groups + ] + request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + # Should include deployments 2 and 3 (no restrictions) + assert len(result) == 2 + ids = [d["model_info"]["id"] for d in result] + assert "2" in ids + assert "3" in ids + + def test_dict_deployment_passes_through(self): + """When deployment is a dict (specific deployment), pass through.""" + deployment = {"model_info": {"id": "1", "access_groups": ["AG1"]}} + request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} + + result = filter_deployments_by_access_groups( + healthy_deployments=deployment, + request_kwargs=request_kwargs, + ) + + assert result == deployment # Unchanged + + def test_none_request_kwargs_passes_through(self): + """When request_kwargs is None, return deployments unchanged.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + ] + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=None, + ) + + assert result == deployments + + def test_litellm_metadata_fallback(self): + """Should also check litellm_metadata for allowed access groups.""" + deployments = [ + {"model_info": {"id": "1", "access_groups": ["AG1"]}}, + {"model_info": {"id": "2", "access_groups": ["AG2"]}}, + ] + request_kwargs = { + "litellm_metadata": {"user_api_key_allowed_access_groups": ["AG1"]} + } + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + assert len(result) == 1 + assert result[0]["model_info"]["id"] == "1" + + +def test_filter_deployments_by_access_groups_issue_18333(): + """ + Regression test for GitHub issue #18333. + + Scenario: Two models named 'gpt-5' in different access groups (AG1, AG2). + Team2 has access to AG2 only. When Team2 requests 'gpt-5', only the AG2 + deployment should be available for load balancing. + """ + deployments = [ + { + "model_name": "gpt-5", + "litellm_params": {"model": "gpt-4.1", "api_key": "key-1"}, + "model_info": {"id": "ag1-deployment", "access_groups": ["AG1"]}, + }, + { + "model_name": "gpt-5", + "litellm_params": {"model": "gpt-4o", "api_key": "key-2"}, + "model_info": {"id": "ag2-deployment", "access_groups": ["AG2"]}, + }, + ] + + # Team2's request with allowed access groups + request_kwargs = { + "metadata": { + "user_api_key_team_id": "team-2", + "user_api_key_allowed_access_groups": ["AG2"], + } + } + + result = filter_deployments_by_access_groups( + healthy_deployments=deployments, + request_kwargs=request_kwargs, + ) + + # Only AG2 deployment should be returned + assert len(result) == 1 + assert result[0]["model_info"]["id"] == "ag2-deployment" + assert result[0]["litellm_params"]["model"] == "gpt-4o" + + +def test_get_access_groups_from_models(): + """ + Test the helper function that extracts access group names from models list. + This is used by the proxy to populate user_api_key_allowed_access_groups. + """ + from litellm.proxy.auth.model_checks import get_access_groups_from_models + + # Setup: access groups definition + model_access_groups = { + "AG1": ["gpt-4", "gpt-5"], + "AG2": ["claude-v1", "claude-v2"], + "beta-models": ["gpt-5-turbo"], + } + + # Test 1: Extract access groups from models list + models = ["gpt-4", "AG1", "AG2", "some-other-model"] + result = get_access_groups_from_models( + model_access_groups=model_access_groups, models=models + ) + assert set(result) == {"AG1", "AG2"} + + # Test 2: No access groups in models list + models = ["gpt-4", "claude-v1", "some-model"] + result = get_access_groups_from_models( + model_access_groups=model_access_groups, models=models + ) + assert result == [] + + # Test 3: Empty models list + result = get_access_groups_from_models( + model_access_groups=model_access_groups, models=[] + ) + assert result == [] + + # Test 4: All access groups + models = ["AG1", "AG2", "beta-models"] + result = get_access_groups_from_models( + model_access_groups=model_access_groups, models=models + ) + assert set(result) == {"AG1", "AG2", "beta-models"} From eb8f4d3e05f33fef6262c6201934145477d492f7 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:04:15 +0530 Subject: [PATCH 23/29] Revert "fix: models loadbalancing billing issue by filter (#18891) (#19220)" This reverts commit 72e519345149f4b305645c51943b0f2cfd6c8acd. --- litellm/proxy/auth/model_checks.py | 25 +- litellm/proxy/litellm_pre_call_utils.py | 31 --- litellm/router.py | 12 +- litellm/router_utils/common_utils.py | 79 +----- ...est_filter_deployments_by_access_groups.py | 227 ------------------ 5 files changed, 6 insertions(+), 368 deletions(-) delete mode 100644 tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py diff --git a/litellm/proxy/auth/model_checks.py b/litellm/proxy/auth/model_checks.py index af2574d88e..71ae1348f3 100644 --- a/litellm/proxy/auth/model_checks.py +++ b/litellm/proxy/auth/model_checks.py @@ -64,27 +64,6 @@ def _get_models_from_access_groups( return all_models -def get_access_groups_from_models( - model_access_groups: Dict[str, List[str]], - models: List[str], -) -> List[str]: - """ - Extract access group names from a models list. - - Given a models list like ["gpt-4", "beta-models", "claude-v1"] - and access groups like {"beta-models": ["gpt-5", "gpt-6"]}, - returns ["beta-models"]. - - This is used to pass allowed access groups to the router for filtering - deployments during load balancing (GitHub issue #18333). - """ - access_groups = [] - for model in models: - if model in model_access_groups: - access_groups.append(model) - return access_groups - - async def get_mcp_server_ids( user_api_key_dict: UserAPIKeyAuth, ) -> List[str]: @@ -101,6 +80,7 @@ async def get_mcp_server_ids( # Make a direct SQL query to get just the mcp_servers try: + result = await prisma_client.db.litellm_objectpermissiontable.find_unique( where={"object_permission_id": user_api_key_dict.object_permission_id}, ) @@ -196,7 +176,6 @@ def get_complete_model_list( """ unique_models = [] - def append_unique(models): for model in models: if model not in unique_models: @@ -209,7 +188,7 @@ def get_complete_model_list( else: append_unique(proxy_model_list) if include_model_access_groups: - append_unique(list(model_access_groups.keys())) # TODO: keys order + append_unique(list(model_access_groups.keys())) # TODO: keys order if user_model: append_unique([user_model]) diff --git a/litellm/proxy/litellm_pre_call_utils.py b/litellm/proxy/litellm_pre_call_utils.py index 72f23e609a..9be78264e8 100644 --- a/litellm/proxy/litellm_pre_call_utils.py +++ b/litellm/proxy/litellm_pre_call_utils.py @@ -1021,37 +1021,6 @@ async def add_litellm_data_to_request( # noqa: PLR0915 "user_api_key_user_max_budget" ] = user_api_key_dict.user_max_budget - # Extract allowed access groups for router filtering (GitHub issue #18333) - # This allows the router to filter deployments based on key's and team's access groups - # NOTE: We keep key and team access groups SEPARATE because a key doesn't always - # inherit all team access groups (per maintainer feedback). - if llm_router is not None: - from litellm.proxy.auth.model_checks import get_access_groups_from_models - - model_access_groups = llm_router.get_model_access_groups() - - # Key-level access groups (from user_api_key_dict.models) - key_models = list(user_api_key_dict.models) if user_api_key_dict.models else [] - key_allowed_access_groups = get_access_groups_from_models( - model_access_groups=model_access_groups, models=key_models - ) - if key_allowed_access_groups: - data[_metadata_variable_name][ - "user_api_key_allowed_access_groups" - ] = key_allowed_access_groups - - # Team-level access groups (from user_api_key_dict.team_models) - team_models = ( - list(user_api_key_dict.team_models) if user_api_key_dict.team_models else [] - ) - team_allowed_access_groups = get_access_groups_from_models( - model_access_groups=model_access_groups, models=team_models - ) - if team_allowed_access_groups: - data[_metadata_variable_name][ - "user_api_key_team_allowed_access_groups" - ] = team_allowed_access_groups - data[_metadata_variable_name]["user_api_key_metadata"] = user_api_key_dict.metadata _headers = dict(request.headers) _headers.pop( diff --git a/litellm/router.py b/litellm/router.py index 65445e29c4..d01c8443da 100644 --- a/litellm/router.py +++ b/litellm/router.py @@ -88,7 +88,6 @@ from litellm.router_utils.clientside_credential_handler import ( is_clientside_credential, ) from litellm.router_utils.common_utils import ( - filter_deployments_by_access_groups, filter_team_based_models, filter_web_search_deployments, ) @@ -8088,17 +8087,10 @@ class Router: request_kwargs=request_kwargs, ) - verbose_router_logger.debug(f"healthy_deployments after web search filter: {healthy_deployments}") - - # Filter by allowed access groups (GitHub issue #18333) - # This prevents cross-team load balancing when teams have models with same name in different access groups - healthy_deployments = filter_deployments_by_access_groups( - healthy_deployments=healthy_deployments, - request_kwargs=request_kwargs, + verbose_router_logger.debug( + f"healthy_deployments after web search filter: {healthy_deployments}" ) - verbose_router_logger.debug(f"healthy_deployments after access group filter: {healthy_deployments}") - if isinstance(healthy_deployments, dict): return healthy_deployments diff --git a/litellm/router_utils/common_utils.py b/litellm/router_utils/common_utils.py index 2c0ea5976d..10acc343ab 100644 --- a/litellm/router_utils/common_utils.py +++ b/litellm/router_utils/common_utils.py @@ -75,7 +75,6 @@ def filter_team_based_models( if deployment.get("model_info", {}).get("id") not in ids_to_remove ] - def _deployment_supports_web_search(deployment: Dict) -> bool: """ Check if a deployment supports web search. @@ -113,7 +112,7 @@ def filter_web_search_deployments( is_web_search_request = False tools = request_kwargs.get("tools") or [] for tool in tools: - # These are the two websearch tools for OpenAI / Azure. + # These are the two websearch tools for OpenAI / Azure. if tool.get("type") == "web_search" or tool.get("type") == "web_search_preview": is_web_search_request = True break @@ -122,82 +121,8 @@ def filter_web_search_deployments( return healthy_deployments # Filter out deployments that don't support web search - final_deployments = [ - d for d in healthy_deployments if _deployment_supports_web_search(d) - ] + final_deployments = [d for d in healthy_deployments if _deployment_supports_web_search(d)] if len(healthy_deployments) > 0 and len(final_deployments) == 0: verbose_logger.warning("No deployments support web search for request") return final_deployments - -def filter_deployments_by_access_groups( - healthy_deployments: Union[List[Dict], Dict], - request_kwargs: Optional[Dict] = None, -) -> Union[List[Dict], Dict]: - """ - Filter deployments to only include those matching the user's allowed access groups. - - Reads from TWO separate metadata fields (per maintainer feedback): - - `user_api_key_allowed_access_groups`: Access groups from the API Key's models. - - `user_api_key_team_allowed_access_groups`: Access groups from the Team's models. - - A deployment is included if its access_groups overlap with EITHER the key's - or the team's allowed access groups. Deployments with no access_groups are - always included (not restricted). - - This prevents cross-team load balancing when multiple teams have models with - the same name but in different access groups (GitHub issue #18333). - """ - if request_kwargs is None: - return healthy_deployments - - if isinstance(healthy_deployments, dict): - return healthy_deployments - - metadata = request_kwargs.get("metadata") or {} - litellm_metadata = request_kwargs.get("litellm_metadata") or {} - - # Gather key-level allowed access groups - key_allowed_access_groups = ( - metadata.get("user_api_key_allowed_access_groups") - or litellm_metadata.get("user_api_key_allowed_access_groups") - or [] - ) - - # Gather team-level allowed access groups - team_allowed_access_groups = ( - metadata.get("user_api_key_team_allowed_access_groups") - or litellm_metadata.get("user_api_key_team_allowed_access_groups") - or [] - ) - - # Combine both for the final allowed set - combined_allowed_access_groups = list(key_allowed_access_groups) + list( - team_allowed_access_groups - ) - - # If no access groups specified from either source, return all deployments (backwards compatible) - if not combined_allowed_access_groups: - return healthy_deployments - - allowed_set = set(combined_allowed_access_groups) - filtered = [] - for deployment in healthy_deployments: - model_info = deployment.get("model_info") or {} - deployment_access_groups = model_info.get("access_groups") or [] - - # If deployment has no access groups, include it (not restricted) - if not deployment_access_groups: - filtered.append(deployment) - continue - - # Include if any of deployment's groups overlap with allowed groups - if set(deployment_access_groups) & allowed_set: - filtered.append(deployment) - - if len(healthy_deployments) > 0 and len(filtered) == 0: - verbose_logger.warning( - f"No deployments match allowed access groups {combined_allowed_access_groups}" - ) - - return filtered diff --git a/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py b/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py deleted file mode 100644 index 9ac5072c5d..0000000000 --- a/tests/test_litellm/router_unit_tests/test_filter_deployments_by_access_groups.py +++ /dev/null @@ -1,227 +0,0 @@ -""" -Unit tests for filter_deployments_by_access_groups function. - -Tests the fix for GitHub issue #18333: Models loadbalanced outside of Model Access Group. -""" - -import pytest - -from litellm.router_utils.common_utils import filter_deployments_by_access_groups - - -class TestFilterDeploymentsByAccessGroups: - """Tests for the filter_deployments_by_access_groups function.""" - - def test_no_filter_when_no_access_groups_in_metadata(self): - """When no allowed_access_groups in metadata, return all deployments.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_team_id": "team-1"}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 2 # All deployments returned - - def test_filter_to_single_access_group(self): - """Filter to only deployments matching allowed access group.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "2" - - def test_filter_with_multiple_allowed_groups(self): - """Filter with multiple allowed access groups.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - {"model_info": {"id": "3", "access_groups": ["AG3"]}}, - ] - request_kwargs = { - "metadata": {"user_api_key_allowed_access_groups": ["AG1", "AG2"]} - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 2 - ids = [d["model_info"]["id"] for d in result] - assert "1" in ids - assert "2" in ids - assert "3" not in ids - - def test_deployment_with_multiple_access_groups(self): - """Deployment with multiple access groups should match if any overlap.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1", "AG2"]}}, - {"model_info": {"id": "2", "access_groups": ["AG3"]}}, - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "1" - - def test_deployment_without_access_groups_included(self): - """Deployments without access groups should be included (not restricted).""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2"}}, # No access_groups - {"model_info": {"id": "3", "access_groups": []}}, # Empty access_groups - ] - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - # Should include deployments 2 and 3 (no restrictions) - assert len(result) == 2 - ids = [d["model_info"]["id"] for d in result] - assert "2" in ids - assert "3" in ids - - def test_dict_deployment_passes_through(self): - """When deployment is a dict (specific deployment), pass through.""" - deployment = {"model_info": {"id": "1", "access_groups": ["AG1"]}} - request_kwargs = {"metadata": {"user_api_key_allowed_access_groups": ["AG2"]}} - - result = filter_deployments_by_access_groups( - healthy_deployments=deployment, - request_kwargs=request_kwargs, - ) - - assert result == deployment # Unchanged - - def test_none_request_kwargs_passes_through(self): - """When request_kwargs is None, return deployments unchanged.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - ] - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=None, - ) - - assert result == deployments - - def test_litellm_metadata_fallback(self): - """Should also check litellm_metadata for allowed access groups.""" - deployments = [ - {"model_info": {"id": "1", "access_groups": ["AG1"]}}, - {"model_info": {"id": "2", "access_groups": ["AG2"]}}, - ] - request_kwargs = { - "litellm_metadata": {"user_api_key_allowed_access_groups": ["AG1"]} - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "1" - - -def test_filter_deployments_by_access_groups_issue_18333(): - """ - Regression test for GitHub issue #18333. - - Scenario: Two models named 'gpt-5' in different access groups (AG1, AG2). - Team2 has access to AG2 only. When Team2 requests 'gpt-5', only the AG2 - deployment should be available for load balancing. - """ - deployments = [ - { - "model_name": "gpt-5", - "litellm_params": {"model": "gpt-4.1", "api_key": "key-1"}, - "model_info": {"id": "ag1-deployment", "access_groups": ["AG1"]}, - }, - { - "model_name": "gpt-5", - "litellm_params": {"model": "gpt-4o", "api_key": "key-2"}, - "model_info": {"id": "ag2-deployment", "access_groups": ["AG2"]}, - }, - ] - - # Team2's request with allowed access groups - request_kwargs = { - "metadata": { - "user_api_key_team_id": "team-2", - "user_api_key_allowed_access_groups": ["AG2"], - } - } - - result = filter_deployments_by_access_groups( - healthy_deployments=deployments, - request_kwargs=request_kwargs, - ) - - # Only AG2 deployment should be returned - assert len(result) == 1 - assert result[0]["model_info"]["id"] == "ag2-deployment" - assert result[0]["litellm_params"]["model"] == "gpt-4o" - - -def test_get_access_groups_from_models(): - """ - Test the helper function that extracts access group names from models list. - This is used by the proxy to populate user_api_key_allowed_access_groups. - """ - from litellm.proxy.auth.model_checks import get_access_groups_from_models - - # Setup: access groups definition - model_access_groups = { - "AG1": ["gpt-4", "gpt-5"], - "AG2": ["claude-v1", "claude-v2"], - "beta-models": ["gpt-5-turbo"], - } - - # Test 1: Extract access groups from models list - models = ["gpt-4", "AG1", "AG2", "some-other-model"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert set(result) == {"AG1", "AG2"} - - # Test 2: No access groups in models list - models = ["gpt-4", "claude-v1", "some-model"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert result == [] - - # Test 3: Empty models list - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=[] - ) - assert result == [] - - # Test 4: All access groups - models = ["AG1", "AG2", "beta-models"] - result = get_access_groups_from_models( - model_access_groups=model_access_groups, models=models - ) - assert set(result) == {"AG1", "AG2", "beta-models"} From 9a6bafe89e5b6fd76f0185cd39b127e4ea202e43 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:08:19 +0530 Subject: [PATCH 24/29] Fix litellm/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py tests --- .../test_semantic_tool_filter_e2e.py | 19 +++++++++++++++++-- .../mcp_server/test_semantic_tool_filter.py | 16 +++++++++++++--- 2 files changed, 30 insertions(+), 5 deletions(-) diff --git a/tests/mcp_tests/test_semantic_tool_filter_e2e.py b/tests/mcp_tests/test_semantic_tool_filter_e2e.py index cf951c1884..91c072ae8a 100644 --- a/tests/mcp_tests/test_semantic_tool_filter_e2e.py +++ b/tests/mcp_tests/test_semantic_tool_filter_e2e.py @@ -12,8 +12,19 @@ sys.path.insert(0, os.path.abspath("../..")) from mcp.types import Tool as MCPTool +# Check if semantic-router is available +try: + import semantic_router + SEMANTIC_ROUTER_AVAILABLE = True +except ImportError: + SEMANTIC_ROUTER_AVAILABLE = False + @pytest.mark.asyncio +@pytest.mark.skipif( + not SEMANTIC_ROUTER_AVAILABLE, + reason="semantic-router not installed. Install with: pip install 'litellm[semantic-router]'" +) async def test_e2e_semantic_filter(): """E2E: Load router/filter and verify hook filters tools.""" from litellm import Router @@ -37,8 +48,6 @@ async def test_e2e_semantic_filter(): enabled=True, ) - hook = SemanticToolFilterHook(filter_instance) - # Create 10 tools tools = [ MCPTool(name="gmail_send", description="Send an email via Gmail", inputSchema={"type": "object"}), @@ -53,10 +62,16 @@ async def test_e2e_semantic_filter(): MCPTool(name="note_add", description="Add note", inputSchema={"type": "object"}), ] + # Build router with test tools + filter_instance._build_router(tools) + + hook = SemanticToolFilterHook(filter_instance) + data = { "model": "gpt-4", "messages": [{"role": "user", "content": "Send an email and create a calendar event"}], "tools": tools, + "metadata": {}, # Initialize metadata dict for hook to store filter stats } # Call hook diff --git a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py index 8d35f5bbdc..87c597c659 100644 --- a/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py +++ b/tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py @@ -71,6 +71,9 @@ async def test_semantic_filter_basic_filtering(): enabled=True, ) + # Build router with the tools before filtering + filter_instance._build_router(tools) + # Filter tools with email-related query filtered = await filter_instance.filter_tools( query="send an email to john@example.com", @@ -139,6 +142,9 @@ async def test_semantic_filter_top_k_limiting(): enabled=True, ) + # Build router with the tools before filtering + filter_instance._build_router(tools) + # Filter tools filtered = await filter_instance.filter_tools( query="test query", @@ -297,21 +303,25 @@ async def test_semantic_filter_hook_triggers_on_completion(): enabled=True, ) - # Create hook - hook = SemanticToolFilterHook(filter_instance) - # Prepare data - completion request with tools tools = [ MCPTool(name=f"tool_{i}", description=f"Tool {i}", inputSchema={"type": "object"}) for i in range(10) ] + # Build router with the tools before filtering + filter_instance._build_router(tools) + + # Create hook + hook = SemanticToolFilterHook(filter_instance) + data = { "model": "gpt-4", "messages": [ {"role": "user", "content": "Send an email"} ], "tools": tools, + "metadata": {}, # Hook needs metadata field to store filter stats } # Mock user API key dict and cache From 017b78de40ba0fecb14d89745a19e56363857edf Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:10:29 +0530 Subject: [PATCH 25/29] Fix code quality tests --- docs/my-website/docs/proxy/config_settings.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/my-website/docs/proxy/config_settings.md b/docs/my-website/docs/proxy/config_settings.md index 264c7d765b..385b4b0de3 100644 --- a/docs/my-website/docs/proxy/config_settings.md +++ b/docs/my-website/docs/proxy/config_settings.md @@ -545,6 +545,9 @@ router_settings: | DEFAULT_MAX_TOKENS | Default maximum tokens for LLM calls. Default is 4096 | DEFAULT_MAX_TOKENS_FOR_TRITON | Default maximum tokens for Triton models. Default is 2000 | DEFAULT_MAX_REDIS_BATCH_CACHE_SIZE | Default maximum size for redis batch cache. Default is 1000 +| DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL | Default embedding model for MCP semantic tool filtering. Default is "text-embedding-3-small" +| DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD | Default similarity threshold for MCP semantic tool filtering. Default is 0.3 +| DEFAULT_MCP_SEMANTIC_FILTER_TOP_K | Default number of top results to return for MCP semantic tool filtering. Default is 10 | DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT | Default token count for mock response completions. Default is 20 | DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT | Default token count for mock response prompts. Default is 10 | DEFAULT_MODEL_CREATED_AT_TIME | Default creation timestamp for models. Default is 1677610602 @@ -802,6 +805,7 @@ router_settings: | MAXIMUM_TRACEBACK_LINES_TO_LOG | Maximum number of lines to log in traceback in LiteLLM Logs UI. Default is 100 | MAX_RETRY_DELAY | Maximum delay in seconds for retrying requests. Default is 8.0 | MAX_LANGFUSE_INITIALIZED_CLIENTS | Maximum number of Langfuse clients to initialize on proxy. Default is 50. This is set since langfuse initializes 1 thread everytime a client is initialized. We've had an incident in the past where we reached 100% cpu utilization because Langfuse was initialized several times. +| MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH | Maximum header length for MCP semantic filter tools. Default is 150 | MIN_NON_ZERO_TEMPERATURE | Minimum non-zero temperature value. Default is 0.0001 | MINIMUM_PROMPT_CACHE_TOKEN_COUNT | Minimum token count for caching a prompt. Default is 1024 | MISTRAL_API_BASE | Base URL for Mistral API. Default is https://api.mistral.ai From fae0554fdc55d81862faed85b52c84376f62d63d Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 12:22:18 +0530 Subject: [PATCH 26/29] Revert "add missing indexes on VerificationToken table (#20040)" This reverts commit 1e8848ca97bd53e596e715162d35d0d7953c9a08. --- .../migration.sql | 8 -------- .../litellm_proxy_extras/schema.prisma | 10 ---------- litellm/proxy/schema.prisma | 10 ---------- schema.prisma | 10 ---------- 4 files changed, 38 deletions(-) delete mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql diff --git a/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql b/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql deleted file mode 100644 index 572eea9b52..0000000000 --- a/litellm-proxy-extras/litellm_proxy_extras/migrations/20260129103648_add_verificationtoken_indexes/migration.sql +++ /dev/null @@ -1,8 +0,0 @@ --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_user_id_team_id_idx" ON "LiteLLM_VerificationToken"("user_id", "team_id"); - --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_team_id_idx" ON "LiteLLM_VerificationToken"("team_id"); - --- CreateIndex -CREATE INDEX "LiteLLM_VerificationToken_budget_reset_at_expires_idx" ON "LiteLLM_VerificationToken"("budget_reset_at", "expires"); diff --git a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma index 3b81da1092..b118400b62 100644 --- a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma +++ b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/litellm/proxy/schema.prisma b/litellm/proxy/schema.prisma index 3b81da1092..b118400b62 100644 --- a/litellm/proxy/schema.prisma +++ b/litellm/proxy/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking diff --git a/schema.prisma b/schema.prisma index 3b81da1092..b118400b62 100644 --- a/schema.prisma +++ b/schema.prisma @@ -305,16 +305,6 @@ model LiteLLM_VerificationToken { litellm_budget_table LiteLLM_BudgetTable? @relation(fields: [budget_id], references: [budget_id]) litellm_organization_table LiteLLM_OrganizationTable? @relation(fields: [organization_id], references: [organization_id]) object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) - - // SELECT COUNT(*) FROM (SELECT "public"."LiteLLM_VerificationToken"."token" FROM "public"."LiteLLM_VerificationToken" WHERE ("public"."LiteLLM_VerificationToken"."user_id" = $1 AND ("public"."LiteLLM_VerificationToken"."team_id" IS NULL OR "public"."LiteLLM_VerificationToken"."team_id" <> $2)) OFFSET $3 ) AS "sub" - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."user_id" = $1 OFFSET $2 - @@index([user_id, team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE "public"."LiteLLM_VerificationToken"."team_id" = $1 OFFSET $2 - @@index([team_id]) - - // SELECT ... FROM "public"."LiteLLM_VerificationToken" WHERE (("public"."LiteLLM_VerificationToken"."expires" IS NULL OR "public"."LiteLLM_VerificationToken"."expires" > $1) AND "public"."LiteLLM_VerificationToken"."budget_reset_at" < $2) OFFSET $3 - @@index([budget_reset_at, expires]) } // Audit table for deleted keys - preserves spend and key information for historical tracking From 31cdffd3a46899d9c51940b48a53288206214b1b Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 15:15:30 +0530 Subject: [PATCH 27/29] Revert "fix: prevent error when max_fallbacks exceeds available models (#20071)" This reverts commit ef73f330f1f216bb98ac21caaf7056a98779eb9c. --- .../router_utils/fallback_event_handlers.py | 12 +----- tests/test_fallbacks.py | 42 ------------------- 2 files changed, 2 insertions(+), 52 deletions(-) diff --git a/litellm/router_utils/fallback_event_handlers.py b/litellm/router_utils/fallback_event_handlers.py index 738b82d702..62e706a0cf 100644 --- a/litellm/router_utils/fallback_event_handlers.py +++ b/litellm/router_utils/fallback_event_handlers.py @@ -113,16 +113,8 @@ async def run_async_fallback( The most recent exception if all fallback model groups fail. """ - ### BASE CASE ### MAX FALLBACK DEPTH REACHED - if fallback_depth >= max_fallbacks: - raise original_exception - - ### CHECK IF MODEL GROUP LIST EXHAUSTED - if original_model_group in fallback_model_group: - fallback_group_length = len(fallback_model_group) - 1 - else: - fallback_group_length = len(fallback_model_group) - if fallback_depth >= fallback_group_length: + ### BASE CASE ### MAX FALLBACK DEPTH REACHED + if fallback_depth >= max_fallbacks: raise original_exception error_from_fallbacks = original_exception diff --git a/tests/test_fallbacks.py b/tests/test_fallbacks.py index c22cefa6be..bc9aa4c64c 100644 --- a/tests/test_fallbacks.py +++ b/tests/test_fallbacks.py @@ -336,45 +336,3 @@ async def test_chat_completion_bad_and_good_model(): f"Iteration {iteration + 1}: {'✓' if success else '✗'} ({time.time() - start_time:.2f}s)" ) assert success, "Not all good model requests succeeded" - - -@pytest.mark.asyncio -async def test_router_fallback_exhaustion(): - """ - Test for Bug 19985: - """ - from litellm import Router - import pytest - - # Setup: Only ONE fallback model available - model_list = [ - { - "model_name": "gpt-3.5-turbo", - "litellm_params": {"model": "openai/fake", "api_key": "bad-key"}, - }, - { - "model_name": "bad-model-1", - "litellm_params": {"model": "azure/fake", "api_key": "bad-key"}, - } - ] - - # max_fallbacks=10 is much larger than the 1 fallback provided in the list - router = Router( - model_list=model_list, - fallbacks=[{"gpt-3.5-turbo": ["bad-model-1"]}], - max_fallbacks=10 - ) - - try: - # This will fail and attempt to fallback - await router.acompletion( - model="gpt-3.5-turbo", - messages=[{"role": "user", "content": "test"}] - ) - except Exception as e: - # The success criteria is that we DON'T get an IndexError - assert not isinstance(e, IndexError), f"Expected API error, but got IndexError: {e}" - # Also ensure we actually hit a fallback attempt - print(f"Caught expected exception: {type(e).__name__}") - - From 21e95c73e44e722da16486fadb38a45eec6759c2 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 15:24:31 +0530 Subject: [PATCH 28/29] Fix litellm_security_tests --- ci_cd/security_scans.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/ci_cd/security_scans.sh b/ci_cd/security_scans.sh index 3a212a56f6..340f8e9606 100755 --- a/ci_cd/security_scans.sh +++ b/ci_cd/security_scans.sh @@ -154,6 +154,7 @@ run_grype_scans() { "CVE-2025-15367" # No fix available yet "CVE-2025-12781" # No fix available yet "CVE-2025-11468" # No fix available yet + "CVE-2026-1299" # Python 3.13 email module header injection - not applicable, LiteLLM doesn't use BytesGenerator for email serialization ) # Build JSON array of allowlisted CVE IDs for jq From 47c5366cf37f97b5ad93368bdf23d5738b2435c0 Mon Sep 17 00:00:00 2001 From: Sameer Kankute Date: Tue, 3 Feb 2026 16:51:42 +0530 Subject: [PATCH 29/29] bump litellm 1.81.7 --- pyproject.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 450dadac93..9832ca483d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "litellm" -version = "1.81.6" +version = "1.81.7" description = "Library to easily interface with LLM API providers" authors = ["BerriAI"] license = "MIT" @@ -174,7 +174,7 @@ requires = ["poetry-core", "wheel"] build-backend = "poetry.core.masonry.api" [tool.commitizen] -version = "1.81.6" +version = "1.81.7" version_files = [ "pyproject.toml:^version" ]

rloJO`@dX7HG|vPBlzCG%+jw-ni0qau8|AZ3<%z zYpAJOc568?5odbu@g3jMjVR0)L({U8q0^&?NQHL?Ol<67J6ap>RJw29yTq#{Qo%QN zT8kl9YtYb{K&(9oNJGJ9WMrk0j-ru0PJ6V!k-!ES^Vz(Lu$!pge1kM!4!So@Epq_7 zgd^Q^$Sd#e$Of$txm>CXD#!DU>cL#nQAKLiSUe442Vx_ZG;*kQ8>arnXi;>nh!pzW zc&QgyQ?A{qW<{!OkrUF(UheU88GOO!di|~HxFIW)-}AjL^YKSJ(tPTeE(pOh&b{2x zEQ)GDq?XNuohpD2Ujqyy5AO|>a}z72r1^n|<{Y9^M%YCtnBxK%$IfM$Bi&|tcE7_ zXE$DF5}m6IW=i>>WZt+Yvfp#DZmpBzHCKrYIfgQI@0gsi?P$yzuDWKn-g1z5Vx-si z1VVp)5VBQwuWbVEkBYR>y1}0rbM9sHZ!J^FT;l;at=73^yI#J_u zWPJWIx-mVL;kFkScgKya;Wy>8r_*f?3s~o=1AHpXw%&(TDCghL)@gT#+$+p^Mk8{a zLsl|84%%XmU}b8_3tSaVa_&$w_f6#jqkrD@S){fbPZZqb*ZiZvu_%RiTJP;`Q0`7S zC&b3@I2RXNlk1H#w%r^og@k0=IJHVpDiujapN?T-~KS<~f4}zbhPcnl1_B@f}qpZbYvUhVA7MmJ`)A z_g}*%j>KWzs%XvcUyT^DcDJc3;vdPcJhKY73*)_azxGpI8e4nb9un`C2w~_!BB7l8 z__}wkWjl)}hpEqF(m>J7_(45fJOv*QW=?{Y-FCHO<6(v64Ln5a$2-WFgc?O25ZZ1KF8fj7mN<=c3wPPGa_bPazRrDzY-Vj#zj`n9>d*3CLb0T#CrK2ffI*j*mwoEx7J=#4UCq7nq&+hh&?}p?HKOIw!F1?!(Ae+33 zVz`9o$?Zx>QpHB=Dt%2078%9k(Jt~Glds*imY@5vhygtJe%7E#PV{TW*RWHqc&3;N z;CRRg!Y1%#{gsQJb?Zv(VoY)Nak6B$wniDAg1{&y+ZW|UVLtmsVzGg_iVW6ZO@&}* zL%|v(Z9x*9*?FZSsIb`vCl4|gZA98f=;~VUHmW zcLf>LRfJPas58n`hiMMRX^#>$jxwBKuZT$O!I-?Rnp@8>>Jmbu*$@*!nd~cwq@F9L z5Sr^4!Z8z2>>W%w=MKi0dGuTflG@er!L9$g#<}Dk=PMw8=7hxF-+9oLR$TxC5#O-v z%**KgrE^!{Fh4k_wa0UF1W%vVE-c%-+-8+T1&ZhL!==YL>I;^Z_{<2*L9`2&S66J; zS5~QHWWZdI$2`HbC{;1=Yo$D8E){0^6t-2NEp_i9Goq&a(9nbPRiGBFqkeT{p&|F= zh-ipjBK|Rf8B`#e9_5#~j^YE6+~OFC*K1sX=#RfdsGmZ9=~N(-n(xj3aj_+E9JATA zxr`X0bk`$l1`Hv?x>YN(`RWM?rcQcR9pu6%eE&h$!6xNR3MG2n3`AL_}1&l!!?0 zT@qSoQIHmTCsdVA=!6zXa^K*deP;G{#(U1}b=SIUoxfZ}4d3^^zh0iFU}3uY&{Oi_ zT>QD3p4!-~rPI8dt6-$498^YH(N?{-DRZKhxO{ZgpgV4BQ92je^Nd>eOyQ-uM?M#e z27zuIbhCiK1aSa4=ai_vO_YEig9z>|KVc*)>hDVwEM(eAEBaD{hPSeW>)K* zuQiLkUZwQDnh!sGv|}^-6tyI-8&Xqc5;PpF3#^}r097yJKnI@!?U5+NbDtwrFlTz6 z($Vt6{e@rRhv`4O2PGHlYc+QW>8m%V%A=l~FI?JsM^qKwYiXGeW`jHlHaQ!6_-S8H zBMqf$!bkh7ydt1?v>wIo%74X$P>xYMT5qs6J27B47(-f<*5(zZ_{ z=RxE1_2NE)L2@)LRF&~<$CNiQCrS3)ujJCy+%a17%q~7lf>d5K&6@uy!h5!0ROMb% zTbSU{q{=oOPEE6^=cETpquI{%I9$EF>sMRW!R;r7>(V^$Z>yB(_u9f$3|(xePyCZ5+@5 zZe&|`Rhf}8b9u6$7bGuB+n*{flPAbT-9v3}aOGq;< zK$*bhdZJZg>EpiePif0z_1oCS?zR@O(V@{Y-Z`gK@HI~y!OVca+69h5@x#;@=ddsM zE{%i5J+ z59u#f=nvs{yiYl*@Qb$_I?gaIymu1h>y5vAz=7QZ|FG6^=S#T8g;J`&(XpM|tV!l+#J4AwynXdSHzj63A392j3*24T{!|(lk^~&#aypVT3B2~p-JaE^d z*-RU2gKT;I)xx$bX>ed>yL_)snS-5Af&#txXaC5_#Vcg;C5seYeRuryS26CJq?IPY z?O&XqsI)AhzUG1`Ajs@dkDmv>Zb{yu!Ok&<8`0A1{Wbo1W3cK=3c%mZt!EN;(&P+y z`0@sIXPHt!ZRMgA%@y9;CvzC~nNRG;RBe7cn0`7giZbTc$U*(N?lHF2wLJ1sg`w%e zu9?RkAm-B}=(Vf5z5CT=CKWCahaS+zB(*KkqAY&3SF>*GF&7PLF?$8F9vDgMfl5Bx zsM&DbXs5&>of+gJzy$2*%tOucAIQq*hz*%_Juy-SMlNE____}{&zA2EU3Tm1eXP55 z`zs4o@3&R*OnUsf@UPZ#5999@PZf)V-_`fM2~_A#{9Hx8S%PZ5aX_^R0jmkg{(8vh zd-#<~(#z0!DCCE^6F@3eUWCvp^4`x#&8@%O<8=|rAiMK{%wj03kF&m3VmxeHGCY)( zoi`hwhmbcV?BiIwJ1SOlDc*%=>LdcB?v^ti4^K4H+oQ6kKKx5iw)|u_?x; zU6pF9zAiam7~X|e<|71v2)&|13<~CNne0kRRByG+R=@PReNv$8WyV1jLV7^;yB;}} zliYWQDOu1!yX`Y)pUVcvg*pWzudKf0k31Bit8b;xZ10@S05s9aIZ>T?9QsuS_C~{# z_m-h^Z>=@|yF?Y0zC6S5`K_Q1Z>A+4FwOMk=|IPuD_!r3tzQTko<6kCa{dT+mo@HL zx_~zKQ;QN7txA4ElXHuKc5bTnK2z4kRPPE54CMG;(@N~ibR|RWXBGr?M!$@>ZNMO| z4Pxs~y!ls~WqZAu4R`#jZE4bvH@%BKXU!sI!QyI>NattF2Wp4@|EL`v2MAd}fuk!$ zv5!cqC)^hjs^<;jVY7Rz)36d%YN;-pOY>6)7t;-gg2c!*v75xLPr5xE>p?^?`P0^0 zGrsaUocwtET{zm1xm4 zQ@O~Dn-}$*4UvDqw1N=jyOg#9Iy3X;SBq@*aI3Xonr}Y4TMQOrZTTW13JmGVqy{YO z6%V`Ub9k=%QIWCpt2qLP2Bw9B%z8SGLf)4U*RV?Q{P+=Dq}$Bf9Z;uOFSm#~fvPp` zvsH!i%JPGeHl#j%mVIVI{Ij#PfzuW3b83W>)+JosPIr9H`*|Jb?f`L|YFo*w@-eS3Dc$y$dE0zrb#nlOMXKoc-!VaEVb@HC>2neUikl zic*phqo^eaP{FUuEvrT;eMKPrqsHLZQa9A8>hNx8F#ITb9bLT00QR#gL;TksE`9k# zf+gLeVLpERgm$~K%B*&&OPr<0RpdiZh#0VJdK7;IPt>?(RJrj&ScJzUZ7fF-!Ycv! zrdy2>_pg@I<>}9RT3B^qT3UWlmNwQepp}t7Q49H-mRhh$?;wfFhrc~2=U%A9=%4Di*GU?7P`Uwi_L9^=@)EvOSShBn%BGZm|51S zQx9G%Ye-RKe$ytk+WZZ&seeEr)v(3n z3_7(*4})p2NK}Yz&h-RUTSJFWRHWj|x}QX-%339GeB{n|i8b=SfKy2w)SfNANKkR{ z+ovu$FM{*Bg^Xczr9U-&wwi*)dfcMh52`QH^-jR*o^j@c9JZ@XYHFcs%1d^x1zlV) z_-IvaXp7Su*YvJvj^=`QdZS`kjD2NSkeel`Hir}K_JOTzF4XMWWohiQhgFGG6ZZ^D z4MS`>a(|78rvI*=gE#WZJBsb9Kex?gE_~g#gJ$QJIToChDJA>dUigr#&aG|xVZ_0; zZ@!PPg0rufC>|hX>$CBET$}bKa}TA>WG_nAUSK-)Uih25Ya_>G+szchV!ZQv$$9?^ z1VhZP5nI%>WVIO4VY*QVeX$~ku->RC+J`7pTB22ctpF2l?fAQwqmqoF1s_XC%CA_5 zn4Rg!xd?!3pIpYrUTIRc;$sr|U`u<_;(UP&jIjCPgPC-vq6PnQ?aUp4UTd>UenmwV zlNdVD{*V5{7c}DLe5K2{?FWy`Bd~3r6VJ%UEszIWvpRE+Ur|x1c+O0!VZq>~l}irw zOdaDV#O3LG&aOVIa&6RL&b0--w=5(}EB?N){)}j-1U0QQ@43{rn|j{{=PjxGz^X!n zJ+go|FnRD`T`>u~ZjDLp)k!jzv38_)Zc zF|+#5W~p}?u9ckWPHKM|98UUht=PU|`NriB`STM18sKA$jo6Tb0$GpX9vWMHm)2l< zb&4|QvJ;oR%zY?D(YOPZ&>p!S897Yfxv06B51MkbtL1(VlI>vF&Lr824~LDP#8IAf zYrUunOw2rC-kS03*?wwJ^f|F$Nz|40fhF~WmOD(OlO1=w5wmMWZmTU~%&yocV?nS% z?IW#28D&w`5L*^_wUekZvic6;UEj8!-Aslp(?}1l&PS+xEuq-9pq9z2j@$1Rzowr0 z;mq7c#dVocP|<_EDUpB3U&&xC^);z&n;@bTvFwM~3sO~L0 zZto2WDYxwo& z(ESh>$8ry`RUe()$64D~-U~JJnfQ->vSKNI^ zWefehwd{$OhL4b;Tvx56VY}>DpzsbAJp=R31)cJVaJy@12b1)iA8&&QVvaOmOggCit@w&SC~$S+*}*9YUe|NEb_kHJPuP{2Ry9WX zIbdA|?Xb_sK_|Z4dsvK|G(<@nMF*XeA023R>Gn$z_d7UI>AqgbgAVbl%@N`o9CJ`h zXim8wBbN!HdNPtsOx+%vST(o4<5v5y348}s;cI19$?ICvq0*4ysKI&cxr8g@KeceDr#^MRceVaNrZ6GSyd?jw?&3@t@v+J$ ztNCMsOd^^OlU00*n1 zb?*f;Q+3;%@4aM^Ogzq43dU#x&TMU>czETCM!mKf6*!AShQGC7zUm3LOgn`I!%lJ^ zG`Blwp7?7#1T%JrQhDq^rDCJ_Ucv_i=`;Gp!v=KD+=5ZxewsW4BEAwirP-o;=?*We zPJLr}TpemWivrA1L;(Gow#?m}{EPbL$mxUZye&+glmViL^;4*4-n6~X+X7(6_jlOt zsey=2zqMkLjVZv9k**h(wC+uj>*LQoKfJCbcU(tP^V(2R@q#u^+toT-JJ+zNyk{Yo z_^L-1tZWn&#T08jR+mqg3y6)RerLux(q#fqaG8qsa?= z4lW~_GyXM&L0+*aGlH=CJ}XucWM5qc$NDO_-3uXh_zRPH=5(9)UYUIb6H)q;+2KR= zo);9W9-~JTgq3E!*>HkPGugS;3)6j}AZsvxN%9!zMITJmESF?U_v-x+Ed_o5czftW zw3qD`GHzzM;z!$t156-YEvEBO)&%)0F6Iu8kC2!}DueY7O&#IsG=?`n(Ck}#w!=PC z3CXwAEh5+~+Pb zN6K>Z+Y1Q4T<5qsoef|=VIT503^~rf2ZPuAr}8Y~%WRtMy;j*^Y{c{4=KQeZ(CHm5 zjE@leWIWkjzx5IEjv1#IOBiJD>cMzPl@|%vT^$A4mCms ztOvI1ZCx=r%#f&uD1RrKIr5(955y;XO;Mr#tx3tkoYOW66%yw)RTFGl-;0g!qdAHF zcD-z89BUrOvprs|M{shfs|itTs*(}2hP}Pdw$bM29rt8>Vd#z@PN7yW{Y;Y+y5b>L zC0BCn*o8)=5Yo%JvZj=wwr@j6ZG}k}n8};z{Ld^G9O3S&fXYGP?Ohky54AZ~66IL) zHgV1kCs@L%Q!qM1w;m{{9iU$pujPwGRXCfEiGv2q>Yllsgc0v#q|pqzd_louI91jf z%5;J}`jGs@dytOR;-W@^6XTg82NhVf^jqR6P?F4LKAHL`T!B^Qf}*XcAY z657o8JB`;sJ2v^NC2SEbay*$~({@X7Q1Zqx;*KIyfN zj8|M7=9(z1mOoUSW7gfUrK0eZ0G)_aakXB$Ro~Y;RYJjfD-&FJEaCCKRXrs>z}B)g z-*bYu6^mHyedZxy{hp-S{w1k3XT0_NBxniFI-^JI>CDRn>8NMkl(JGkt}*Go0k7-H ze|+$pWhHtirHDVR0^|a#vLSf*g&medYox&($MpA(%J@N-M3SVVp?jbgyG4J4kyR#y zQ(~}xluX*lkT~wp16gQ~cUwoM^~*)Kh@>LDwwmf)$IZjGoxJiZ*AY#xl!<|sO{=qQ zh;~7yqN^XV?eX@6QAP>lgzd@{S)Da=-}MPWrEGuuobB7q=-Y%*Zvt|la+Dx!=q)gf zK0+AvUC5U9L6mM!ulI~>5Tw({H*mc8#fa8~^h8bAOka=}@wpNE7OSH-6Aq1Cw}%g+ z<1~EjNE?|0vuH~~XS6zWOWC7#zAGNWI@e7WOv;VEmCK?0qqx2o#PfO}uCJ#2Ir=`2 zK7t+EeH-P!VcV9M#DI0aaR^5ILL>XK`j!M|lnmHriYX3EY>k>AF(KHvoqRP2A3!0C zA<&Cck0W9F&1o!vt(Qj@fH%)2Rh*D;w)mt8)gPm$qQj3KB)UR; ze_=h;ZrUy}mMZIuAEkxe%o*!#J6Y^`-yAD*a4x>1q88SvuL7%{AdS!RX38 zGDKIyw#<6mRK9#)u5jqAbo-KjD^J9_N`3xAIilDtS^eTEYxzOkW5Sht)9&F0@!QbU z_zis3b9oJtIR0wo1&OgN(w%4gx28*)FvUgzRH9d2PWwyXC5Es_`9zg+Z6eD9NWN9_ zX#Tw0OrJl=vvWHa!s$+yTtSRUI@%0fW=9EBQWK53qdC^Bv){t?GG3h;jLUC)L|B+^ zJ4-(49-m*nP?n)*u3N|wLUi#fUNcV;Fg0l2=&Y;a@XNclfrC=iiP)umx=5P1X^Wo< zGO|}PB2;!W$|{6=(P1}U=*_fkwYQxtHzLZk>r9UZm%?V##^zq*N(yfOpm{i~1)Qd9 zC2|;F1}5363Jlq~tzmUhSHP-K6yW*b&+5h=aMo=qHY%&iYvoQ91QQQrC4>Mx6Mba3 zSA`?#J(zIkH$!yN(1RT#OBsAhJ>hFwF`>)<6iJoEwy4KF*036KHa&Me^(c4O^2|Q< z*aC%p2DX*-(s<1dSyB_jFlu}4;adTnB;?J_N!EKv7G?oZUlfI_A-Tkdy@(qG%`9Gy zXRa;@%^YZSWo>`UO4C}=1vY*5PJP-@H7kRC+M2orwTnJ?@QGz?Wudyleg<{#>wsAr%XCe| z7P)0+JYM5JCzyOAs8AuvYo}_+)?+bhKW4?V!VQuDeBdYPHM}Znp~O2vpS)$CZFM`& zW%kudCQ?RVFle+`u@apKiD%{BZdoLq3z6LlL`%LCUuqVXIUg@IA2HNc(2KOo!w?U# ziaoA5YE))3nR*x9mlf~tgrqg{nz(|xG#`*_cCL#{U}L~ZY->`i>I5vmNTQTY=P);K zWlVO{Cqr-ITE|EErk%)%B(8?SClWf=EhVI{+&By*=u zYvrTdPVkqi67<0#%5KvNg=5*~_@V{;L4A_G*p>Y&wNO_)4LO=jKxX1n=Al{wv25_HYwro1xf)hR?Ed zKZJX{7vN7yJZI>VRjG2ftbXJ9hJ=3f$T7Ob8Cb_e+P5gi$7&)eDOJ8S3@+J{^Oftl z5aF`pxAax`paYHXgC#(VYgqRSrdaY0QoPiR#-ZFo31qlZN$ zZVc1+U^i_c1~co4Dy`G&-I;fD1K#iq<1{&m$)m?um3wFsD>{#4WM)QE9b|4ys#Qrz zsyNH+K6G7_U7DxF(?F|ZpI()xAD=|{2n`lEGzC6m;3cwToZ zW>C_}{zJHn_Ux1g(f(O*g~*|FGXJM+995b|ynu%E+C6*#512A?>Wly2A9qdGSic{6 ze=pIVk1ldq{$G@M_s4`2pzKg<(IE=;;RAyfZLzm=gfB}vxgc6kGQ-Yj&h8xs`n}E+ z=eXz#NgqsRK(`hs&K3cdR+|Qd%hipXZE4m?k9(#TqKZ z&yV}b73^g#^qPuwO@iELUn(NK@h81`=@oCC5y%W+xn!;J=B=RLaA28*mg@(y^2^>~ zIp8nEN?%FO97UYsMtY<+)t0K%-G>!`PzcMSV$S4YG{D(z2=4)H7yZ6(z5hlQ1KY`t3=Ric%KVCr@=kccFM-8Iiel>|PVYv?kkrrvL_kh^&627q4s z>tmP!6MHJ;QKV5yzd8J zoqH;P3e?KBPW47xUF7A(y&=tj>s3}sK%sQC`*One5Vu`09}Ceb`Hu((iq>#Dw(Rk{ z3SQ1M$gEQa6S;Clk*EfEu*$eIJ1gnw0HYpn=3vc(-{1eg-UdbO683|ejQptf;K2N` z`xVa7&2iE?>%-<7>+G5)+3yC5?(~%3abL^gUb*>>^QjyY6)P)is-0ma9ygeN_l5nn z)N`?n6w?fuvd8uBNKgzhw7;sfbDqLc@uPV1U*ro5h&iHKwtG31h(kH>)U2!$8!r5;5OTf`0cT0PVQ=j}pH> z8ky5EK=2W6qwYf)&|8S|1vkz0?RF!S=|xF%Hwlj03Wu*0StpTn*E{L5+3m{47xE5?gQ+gGte_J1=4cFy~-Yy}h|zCR*vOH!Xa!&so*t zk67XQwgx3c(ds1%P#5-M!93?}3SV}_zZ~tq|0pL4woy!1tJX4Zx9NYl2^O)n#2v`6 z6a+#CZdCr_EJe;{Whzs3^7Ev@CkJA|jmPX|RX0Ss7}|+e&l-3Y=CrufE&xW2f_l_^ zzzk=1Z~kh@nt@lWo&T(j!T;n@-rlx;JC~Ur4`-OGj5)+1YLaYFB9O0pw_KZ`t#gED zko(*F{XRh#5*{K3u0T8Pz!@21k=?05BYSmjEB_`Wpyg}U>N!mN?VSc!nJSl^?2_KU_nrH-5J?NNcj z6a@GNlq4io({vtzOVRmF5ZGDMi;wT;6iNEQ z{>6jcz#zElvRhG|r^zYTWb;IcI3F&EJ9|UYevQRwcb6{EJ z-pI&EA&UpzESDd>4a7P};1~N!D*at7CFzv9#Y86MF9toj_DVqd3`KI%4_Is>D=MUz zsdF3r68G9CT&mhHU)Oe`_vipCSu-KqG z+`6lW?E-ra@)Tu1W(#`# zo5&V^7ulEp1ChOKMR^LJqsM?6ym|PauzqzJyHpFxssM%e){EbS>F-z-w&d?jN0$N1 z0vC(+W!Uop0+du7+>+lluNiCTKOew5EJLB#{&5iZd(#n0VY0wh*az-1X(W6G^ih!} z_x}@S=zkCLe-HAH5{Y2t)<>AU5)l<0FunVOV$|>D5&&3A>pj3vcihp{y~xPO*b$FF zAR1~gcRpT>5w+EGx_IdMskL;YM0&u@meU~AX#;y%D0rw-Bp{;%Zg zKZ+0k@EHP-p7F(O1l|6Q%KjFxp1nDg{ZA)6x$A`UYW^$Z{A0}Zhwu9S=nWK#GMf>x z8{c`<9swwDWuct^JxEG4^S=lAzY_W5xbgoJ)s{2cYdX43Vu(TBYW^PLxId$q3UPNKLXMqrK~1u`b~O5k=D&TjNEdP~UCmz}`WQTnj6^*Dl0446hzumxpZu3VgzA zQf7WW-0vVWW^;K=#q@39PwPg9Z>oVL%L@PgJN2dHulF@CHeO-uq47b`-;OB&1zm~j z4cGp~tNh!K?JZP7$GFQk$!fOZFl90HWrI_cDurC}e!h$dlWw2D`!T~*ZBx+0R%5#c zP~B!X3(;S39N;3ieb2}DnsPy{PaOJLbtB>>Fo#D`M-J`2+Udc)O!t%>8I4Zy6=#3h zs-Ty*{hnes?$$d0jvH86c~D^ZhljTN@25_Gj54F(Gy(HGPh|3aHQB!BrjGxEeEg68 zuR`j+jn1c4H}>ZP-}8j<-8|vHS6ujGcs()k=}|dtTpR9mcinC@96R)P{S}`e1Jj_^ zlBW?(qUd)&J^r`z3OBb8{dv!(RwWJ;E$&ofN*j@ z=JolpU%n@ldKB8xwYc@ZC*aig`Tp?KRkTG#L~a@y8amr&Wo4xR7N8FQCX-4>k)J(5 z3V%YI&b(U!b@QCtgMl%}HjRYlo-hCCw6Grsu_+Bh2>t4xD`a269eyyT&pUe`{B{I7 zti2$6jQeMqumcqy_2u0a>!hh?fcEEN^sVy;B2cccHojXoXHAf5vP(%xH2=9w7%Zm> zSZ8uDt@$Rk-mKf@J^n!e_fH4q{^Dut{j_5m(<#Tw&Y2Ae?lrX>-P0OEse`riQ{v{p8adAP4fXS6ml9)FE ze_^-#s_w`h>h0-KL_ch=;OU9qVCE3pvh zQSOsn97TJ7tt9`HCGT_@iJsnCqb&LELGC>P3 z>o!$%L*cV>_=esx{aX<5PriijIc0nD{#hJOF&;hJ31{0@Ot3KyaFW@r3)x+y$OQA$ zpSzhnhfHMnj3eCC)YOlyYwyo;B=?A?GX6cLg3u^L5Mb5oZT!Z7#>?s=?Q(4-Od?cI zN+yPTq)YDp?mLVWAzA(l-@$8;r&pv*edvT{=^6e%ImdrKP=XR|%9?7JobCm0)UX3N z-o%h7fpr{@a$FkUCxLP;+uf(-*4nKx#s7u0R8L?cc})R0tRGwF&tEr1POt4a032U| zv-u#@sZ%MhcA9fHF*NuKN9)(LG2)>?4X|$in{Rf68)u@q`z}IfcT?oGKUZg+QdL|H zRPhUg%+UZ>L*I0&#D*@fzJ<7HV8c?kweD*9axb?3d@2vGlyARK2^DT0%cp(XO z?z&p#$}jL7o$CcgAwgIKd4od$8Zr7s}R@;N_cIk-O|ZWpZq{ z@Zby>xFb!T|D{}8!ZvxOg!F#jN&HcBLhj-LaM_oUU>fxaaok#?F-HvYrfx&wkvnHo z6UKDAr8s=Je(`+dqJPC4wIIwsdT70WzGL#X$H_Ci+WDdIsY;$EZ2{zYA?SG1;IwUR)`T6DRN3lKY}I0A+0dc~rZ1TUAlziH**KG% zY_j~ib_KJeGZDM7527D3phy3{5JDoAfx(?QL#+P#iIVcbX1_KoTyF!Xpe)Z~PX$}i zs0&^cL00F$aAeyr#JHg=3O0i>>>8dX3SD+Jl6LvDqPVgXBY3lApr=EI*u)SqOqibE zif(rqbm`;1nkJmlVz`nfwT>C$Ez$+dxP*D$@IkY2yJ=KdeNJ1Wdb zw(do5w@v#F>8|L{>RVr4@kbSR`wxJR77+*+)9y*ma`y8v^z7`F8~aQzOa(*X#X0si zp|a8rP9imL1r*#mtLmrFqC>{pYctIA+1&XJix6N{hop#tTN7f#a=M0gzc$Mbk<&Bg zKNlP`iJ#xVaHQKCxoXN1ro> ze(;_Q0_UIXVwYeO|EovS=av$C=#G<9JiOjqmZitr6MZ+OEK9x%b(G! zDvt)}=`w6(9tmSD1K3TwL&LPycH3E@-@7`+f8}va^*BhhA%TAx$H=uYX4oHfv%DSN zY&dd`xA&&NzRn@1%dblv4fiHdFJr~mJ4J6_eNL|ddO5EUfk zC>I^ba__wFcGQG60vF9xYXrS3;JRUFi){AJ*JaALih`A7g%&7$9 zpYm@$O^rvF~VGx}2G!sMLz=1%&U#&_4XL& zI08k>5XZ-18lfvIQ3vx!fa5{fOdv8^{9VPbi*i)y;$?0n*esW;jIY;|dnVnk@VRv1 z(Kn6nDs$GY&C$hjp$hVaWZH^6UV0s%!RPoqQSpO>B(1-b}JI!{dgIwNt9`sj4@`AMD?lInAyTLWLw@nuSrXkpn|kI!G!OwtREnT~%6LzPhptp-hvSH9awf)T*z ztA2sIqQHJv>%x3jQ+upywTzJ2bQ&VfE4QN3CQeFxd&cwdd^k<)`AQ!5iS4huvsZGW zyA9sLza3Iat9&Wer9%v#pAZsZ_WIW2wztXYOr=hgNaJP6H@-6&R^J1daI-MU_$o<` zlLr$SST5a@DVqwrbK59vG*(2jx4r)`RgHG8ZscMYO!&j%M}tc_x2<}63lBtC#%!C7 z2-@>`)!2^A5*JXZ;uof(rpLeQo%F7lqW%M7x=B1n=h*+8_TmMN-b}Hoi||DhF7?LN z_yQ;#)5ZXsVMC2^#IO#zZ>B0u6j9~hy6a?jS%0dirye#}55!fbfJ;AxIB^%@&@B%>kOFJlVKEH^bd-aSQs z;!d|vWD(Rl=`wE4vc^$3GZK!Z&L7sG=-BD(-E7Y5=P`zEX)Pd`VV{31W^YvW3BWAG zdbjOHl>f|8|EtXKz4((2#=6QDT90t6m{BgMnFjNw!08_~x>!z1epmUI>GAgrLa(^} zG#0Er$ri}zHdUUz5bONLrpgVc3n9A1qK4bsPlFQ8ZMc?}*7H@#V|&!taXQhG05{66RSeMupd3k+2lx|SS>;6egxch(1CvJsU0y*l)gqJYn9 z{-QAVRVbIi+fS)D(T}?El-qciryo^4pF!FnEBD~rd}gC3*IK1F45B4n?VJYyMVwAu z5L?M*|Bt9UN81l44&#~x(FVb?q|JyM)s}x+k1C6iyGVl>(I4h6vSu@Fcxu#{ZbhVh zqSkUYU{sfR_(eyJhbwmezSbajwv#tuJu~zgkypYw?hb&D7tYhSLvcm^dQ9RuT#_5a z3_w}j>#x#(zcM8dA**Y3*aP!AxBPoo|6i5;-^?pczn{ixc)&a!b{$^gjN7>sy@33v z>(O>wRgySB01R=0%!bal18TsWvE<}iV-vv77>n{=EBZNl-Cw0_o^C_fuY`ePCJNijCXWsSvTO8R*eEjM#$q+YPM+elGS{0uy17h4m6jl9s1yh|E<>eikuux}V$mNuZ>~Z^y~}XAf#}2ej}ui=ibf zm^q$d&1f`FNYTYep|z5sWQ_=GxC;`&fEPuTv^`43=$gkeLI<$`n$T$q10k(2M@xGYclY!(mOdUE z2LyV-^0t5ms=Q)nrAf$TuHWL7GPw*NM*>KH0Z|_eDxMS^;*gQjt6l~$SrHFwUKCk) zwOr|YNu6O=wPof;8M7x+wlBNQ04G?OFTF&D;`X|Y6ySSV0pG2xr4{M9900L_z6_qH z>>BVF_n)ODZ_#;y53hf!1gq;Bl+BzSJGwQ%8D^M7v@X?LtOW!ryc7nS@o@X;%4lJ8 zb&>2L6~W4L2buU@4yeDsdV77?6~ZEHR#Vu|tDO@HArtz-N}>n@0L#dvO?o46B%ACq zXnTQl$dp1YD7E>;cLn^CMt}p)1pxSt7IiIe%=Yj~^pdmtt=#}mQL^=7S9*xW%Vhwy z6a~Jw;jV@>BaGbupb(HQ_WvoNZ3CF!M=Yt~@&IOpo_>K+$vo=qJn!GQ*)K6vBGBsWa_>|71#oVY_%#w?K(bWp@^-g!_RIM<&0sgFU4)UhI z=aMf+1O-5yf51``mysNdX-nySWNxRhPZ#(fSd}{fXAF8~vPC=9f;ErlA0;lh#=cvx ztelGT81ITFId^XY2#!V%OGVI`I$qitJtA^g)M>JrDUsJu+Zk~5g#`CJz$(eCgiXV2 zZF4>6j5z`Zlo&@KU1@6J$JDPTD&~?-mI5LmfG8|rdE1`Noy2BWdaYXyGE2d>Qd(5- zCeG@h-zYFh7b+&qB?Smz{5N)touz=(L`T5kCH*~N)*XlA_$RVd-o$||@-3MwHW?7% zAFjjiRw@vJ?SPj)QPzTgRAu>+M0*)9*7u8`2c-wX(2@LX)T1qs7a$ zCtD%BoGPtxl{1M6b566KO0Y(66tJ1{luI?BG5DI75jv{uM*yum_$pBC#vCkx8?g%I6^nLr4k^8q}r zydUnRHsiJi@SAlM_lV&X%m+F@##D-MoB9akc6}T)m)*u%YyiGEPC(iFO5P$K5O=Kh zB^Y;NYncQLPDD?au0gxh#2P`U!(Q2k?xrk+vr4-=AEzEP30E8c>dz5erJlr&LdSWo zG+Ho;v2TE_yAv&%>p%)c26A7B$`ti@4Y6QyLiRC8U0TsAcgfuWOjgbQc!7$g>YX(U zeY$SwxE?^Nh;;&s+i%!i`mcd*z-eIF;JNR>kn@jw0;g;C-r8rnA-$frv!r8BLq$Jg z{K0ekZp^Lx*9Z$T!WB1xWJU`F!1Jwps*);H^U5ArV=V`(wqUiO#JalavEmD;T=Q4htzQg5`D&p}Ic@l~#-sJWu9U!qBPk6{VTG-jL(4R4XA?rs~Ph!BI6N$!fX~X40GRGhNBXP%9Hx)J;RyWk8J*vJRV8;CO8|`C4>@ zjC*Sw{K|~nNrF=6qzJ}dqmbaj0T$HQH-Y*L6&oY>nbfTXXkC#YY({0vHg*|Tf+psw zMhkJh^HXyztv3K@PAjN3n84`Bl@6AAk(1hnhV1iwEY;5XaB2!Rm+5qS;?@|2cS})4 z$*Q)f&xnoxp_L@`*LHT-q00l^EHmn0Rcw$k(ko#OxX^-rp~QhNKq7;pXnP7Qr&Zv` zigc9nYw02^xtA#1Hv!R;Io^Ld%jjcs@Z7Hv(%}b9V9P|gUYT%eOaTpjWEG6ZQP`{U zf_Igx?*7%S@Ec9_GE!3R_IobV+05iX#zga@;G_3B#fA#5j~E#+w`jVIbuYVVT93xD zV9Z)FBiqzskFk498~ILTFwjK~JvUw{8M3ipJ=FDa06IFXT^BTetVp+_!bqLin~lh; zx>bBai_83ELJq(s!393&l9|ONEMzXT1K){XkKSm zAW~sd;LrHhUR50gKoG^F>)7Jrl8H-eFr6w1NzJrtmt!8{0Lz)W zmka*}tC82%gy&`>T|}-f^2T}9w}-FvnDRhT%H%Z=(+i<@#=u%%@1xAdR{98C2jvMh00)Q3)e*XZ=eE$}>-D zt<$O_0qfeP%MnpFnIAA-=PejX>S1(T4Jiq~M(iV#XWat@qPKG6(V6xh*Aw^v0~&;t zr^_L_3Xi%qkiQ#&s%*D9dF^%(?9S}ARmXnTJt+-CeZ6!r&~E_eZ$S(?#J_fee{8^? zaPv+d)`a+{uU7(m|BXecfrQ6f0c_?Op!tE1z#=D71cbXF z0%Pm3)LaM@ZhbjY?mZLukSVPT+wQDgSZqWF-XwRqT>cVBVu>}`+vVGLr^h7LhgMr}heLym9- znl(pPs!{Kyxv6CL*hHJvFs+VlAW@=Gqh8(yUQ9xg9f1aNb1|r={bn)u8r9%A@q5%j z6P!y>7CLuRe5|3D%&}QtwUyPZf2YqFNFq|mn~TF~sNZx~4Q=NnTefzcMOo_ZxWN0L z)msKwqqp~98T>6D*o;)TbtJ~v7VF;A3sn^pU8k7^I)y^&Z3(|rWZou0Ae+_9*WotK z`%KIBCrLI%4a(q+%-ayUmCoMgG#FMkw&bPzYHC3Su(ck?&qtJAz8H5Fy`=BB3Mk{l zDID=VUWR3kARX*DWR+jB^4fE=hJ)Tv{=>p}xQ1OpN?I#@+Sfu5sJ#1zFu?l)-I4g+J@HVWsup5lY;ZY$D?8mv<6T3bf;je3*SxQ?lQ{3zZfF=?iMXf9&?0VQ8mNW`UkJom?w(H8UnpQP$J(Xq{EELJ}qBr zI$HWIz{45_(AGe(*-V#A#jwI7ST=oDoQUsQEsAC5?g~Z|dh#&<8^(2O{DSO7+09Q3 zN!DG~g-)Pkf)1JG-|y1M1%D~flxf_7>i_}KZooTIG9^ftXZchOvcUI{Q~=m=!(B(* zE@X||_d%TNlTTY@=kQFd1d6e5@E9i=2Ye;VhC}8v=6DQ8Agl}kzy7)_kkTMk);=-W^B%(UFSZ;9eVfXm3C)IKO8MI<;p(r?-@W8p*z`ZMMzY=}^K{`e zd?v-ssq2Z0&|)Eev2_X(3xI}H1@Kj}WB{klb!Hgn2v>79=kDU-lU50#MsG&7fE`-2~3QaF5g`DCa-5%LUV(GdOc;ZZ@$42l# z{}uZjIbEfEMH;XeTxPoSXTw9z9zMa;7*^JpiKiNEuRTed-eaZ#9XNQV%|TW3v)c`B zf;Y-TBpu$q2W15oWFvu0Hh|X;2{JEr>L~3sU88Gp{9@kA;f>Qc-|)eOufUDqYTh(N zWj&D{-+wPy`oVo?yN&!d11TjV&&uLKYRu3pMtn3}=I*UAEZlkltwE`j36a%5>@EvD zm7@WbvK}9WRevzH=Lwru`~3vw`+rVg`Za-eC5n^xylNUc=r&J2Ff~2By%<2yoZK`B zT>5qM)vTNxo5!dHRTH}eRkDIY$y#bXcAJT&-sXNOCiW|Dnp?RGzhT)u7r?ZaF|Q^z ze7r>@?W;iL=sF@43*v9?^f-5`dqhf-+z`f@drRhJnhGq=o3yn>C>1MdBq zHrfLBZn-ZYY2T-jN2u%FDkeR zTXICTi3CX=5Lww~=j5om^gpC2A9^-H#cXg|LNdBaWE=`I`s>2BnYDm){33;1y@~-i zPzV_y-zIl=cVACk@5qOsJ@sM9*K&bU2xN6}aYN0-JlH+v3X+6VwtNH!M?3EL8q8jD zTN$@tX+yTjNTPGn*E2!fw_bv7Sp>L%^AmaH3s#TI08pzApb`$Ab_d~}C;(Qp)t~G8 zGT>UZ%5G_66DV&9DsvCIjY7KM0=cN&++3#6j`=1q?W9_yV4!%gFQ`1kuU z_k4ap+P*t!)=s2)vmfI{ZsS^s8SE8&==MEvqQ3EfwLxOc1DR}ko?+1ZrRVls%Xo_) zbmi4z1?xQ78!~Wb{hi2ZcQiNi-tD>WKBqHz1dDP`0KDYWw*w6u+FVS%tvQcbEqT*8 z)+dX+9~;9mKd6J|(m+?})rI6nje2?$$y4NpW-Z50Z6hyR-PSL2PT)C}Zo0WePpeu@ z84}8xqf0~w`iA$KmJB%tObefe&4c6W5KL2I9+tnTVSyfH~ z!RO!Tyz>}%BI1k&g(gEkrV*5Jd017g+N_7m!24-<%AfMyS$^PTcU8*q=P2NUxJBU(ha^+xH*CoSqMg?+|&U!}0 zSKFV%tMm|y&~-2^7Gd8NCZ=QX*l#+=YQ2m^z?q_n>qs@XrB5^yAbe}Er%++HL438U zmZ}dX38w=eX;0x`H34j1p#Wj_`k7J=(vrWB>%x!)86=U4`E9Z6YQ8R%5)o$r)j_60 z+R6XJ-dl!cxpixx1}GpXAc9DD2}p;ebR(s-#0%0Pof47)(jC%`ba%IOmk3IC*O@Qq z+TXXo<{>bw@bIviwJ;u1lJ;C0u3G=;u)H5JG4Q_--?Ji=r*?g6e zn=6S%zS36w-3Bfs;|A?7QtyNlXtI{kQ)*u5&lwW!D6T#vzd)a0^6s%>J{R_IWr2!u z*=rRiy-olq1kh>KF^X~6ic017DT8grmJ{cP2bl!+aF9Y46uLw5)VN;6+38shN?k1b zyk6?G6&n^{@RR@ApgH1Xk2U7hx%|5J+;XV<&O(@dxWGh(^WkjA=^-=D^wX%V?5D6D zlTRWgGo|&#R2EITPD}u`Ll^|@`#*yA=j))lZ8`h-lmOVZI-cGAe8)?kAC%He+MR8x=raUI>VrOLI3x5*=Lbwfku8(bp*S-N<(kbtuUn{}PLD6W*Mx+?W|0#=?$c|!;{5)$U6q&+ceN*Zf9a0 z3uyrquK9V3Kx@45?IQ#W^<}5;A3aGCLiC(*%FzKHj{V8u{@2FNmGL^l23U{O111mF4K952K)lx5#HS zZrW;e-0^~&PO!yKwRRF>VY*I>^ilOBT)@0HX=71WcmR2FL~24#Enc0BWu{urf7&EH z#`*Z+)8zDmkg%#EU5%7e?5@_!e$@Xi%8s?I-YhgWNEZ*+7_1Af5k2E8!a{^rFrfq7 zJ}o)UoZD?gedeLZYT*`>z?1G7JVeXnCW0O7Lq zV2oYpa?DXGrhJrTpG|{d*GAx3L?yl0Q?mbQC{X#3C-M6S&W< zJjllIHz&F(MM3n3_8*-l&r;CIqe0hGgw|{cT;XtuKX*1@Caw;f1(ZvO!^-IF6@I&O z#B&I#m$cBVC6xVUSj}V#$^7^V7ZU4|0Vq2aG@~o?Z%ozh z8rWZ)9R#@Q#Gg!lOI)CsI@?#9SSkqU45Ri9%f$x5$8vIVqwAyQd&@)pqod?!CkNrh z1|uycMh3cy>$T!1`)d=!>->A5h?@IYsfZjQPVZWN&b27}ATY5dDCWEz6j@;iu~%PC zpDWnjo-CTZd8_E)lT|5jfJK#W9{qCKS6ecH;U*-q@{k7ClmfP+;!vhC`D!^mxyh#0o{z;$^kHmFm~1VD>!NCyV@;&Xu-N+ z?suh&&uxry`{2SSDM|LFfL|pQoVxw2>)=8<2Lx0jLXqJmxt6`YQMk zLK~EGe?XJln?#3py;N-G-pRNbt@tK+0w1F+mr8kj49SVeD2UN2-e8u5MUCPuU5Ssn&HQVg9A3Iyopt%~J#% zx;8`zP7MUx>+*!w-2$i1D4pV5^{?l*T@L2?P5&Is%QgKIV)W-7m}#ZH#{=pnAr#Rl zlwx)VOyc`pRisCshab>e!CkK=j=O3lea$ty91FR2V*?C+QNj!V_2B=mkMXA;j_^9& zuw_yZlPy8K1(7ni-mx<|hC{Bh<{>!8(>X?AM;lC?U*x+BHWb|3$6;S2Jin}=Jt(7F zy=sppaDtPpFEvpzj`mYc$@c70P3hrZqn?*J(QldjoG*C7YaRaLbb2u^#HDRfK9*Kf zAmz&xD0!qrb6+sDunVG5U{x%9nVDHl;Xb;uCuCYsV?9*Zvj2Gs_g1fj5|aNtnf`O` zuW&*(+B%okC4I21>atGw|8}vVM~xiTS z)-V2V$^Vd!{;c=#Nv8JU?x!btFEMAXwGIGI`n7IFL zI`f)~9~e+pwJh%h1FlA^vO?d8q{9%N{yW#=*WPK33hU7$elXd&;`Zu9P=xBA00Pu? zk4D^Jr+Y_ZIhOSz&(C)Jv>YyEfx_lWc#@|TY}n8iu99ck%zY&#VEj`` zpnO04I2so0SBB$5!wX@(-wN%iQYQq<039(QDjdtb^6_P$%BD;|c!lDm-NAA9VNI4F z__=MIA1^24v10xzSe%IM4a_|G4sId-vt*h{4J-rxVR5N2#oq=sN%X5 z41Q;$yKK`~UyiUD{91#DD%a4^u*>-gv7AB-&hI9mzu&!aoIOOEn4X?4ycYx)lG4%J zewmn7_+Ca@sb3$FtrQQ?gX#om{nIIA%K`gW6KuaSVIWJVk) z=_ht-EaQz-yy@Ygy-ERp`AGavbTEt@sm>N6VrR07ii!nP=nzur{ce-<1Y501j-IQX z;Squ{FVAkuQz^=ta(r3W$yo<%BdKJXhwnOxHTJNl`ndF(&BV;$B-*>U+@ofxsgI#u z_E>3Q=>7e5!%zV|km8asNZxY&`<(D!-Z7cvLnO~wk>0@gMF=OgM2|1@Uwqbr1yUz4 z34gEj)b&3SpZtyL+o|(@&rL}m%9StH=J*U>u{~qlw2^sXZ+cZMR%uSET1%`{)LW{m zp1o|WNM-u=9-a>w4gSNQ{CI|ld3Y6vI81hV0`tSF$*fAu!*nAeHQ5Spl+4a>SM_t_>k zyT?3Bl;hd%GA!nlOe7?9ebAD)LCo_;cO$!Dt-hE|Q1sv#>Zv=B`5Y!UEzfAUMvM@>k`){kScyLuaB9hmpCl*py0`E$%8 zW8VxLS#_FGfA%_bYw2tCXHOZjfP+yT<#6C zPCP8*H?fXA%non%Kduey`ZxaH;r{>SaMQ3d*(`qhCZ?hB@myCICx-Jg!k?XX9tg6R zmlyJ>ua8gvg{Gz^F+F_&z17+Q7diP37AD3I_rxOtj*`52@+#+Fhspc$FwGbLWdpDZ z;BHJ|W8+*d7Be$5R2-ZfZk1a)p;>=u(a$8V9lYp1T zb5vj_<}@RnKMh=q?7#awl_UL6UG42CrsBfFa1&&x9o7~q0)OPEh+mPtJ#ify8#}If z<>25j3KI$ZoKslYPe->v4E)xDN^ba1hub3gA7*-CkX+p4Dc~T@&rgs3N1hkog~9C_ zVHm+CjH@I*iB9?*Sjb1No0Hs^8&{{t3$-w|hrjm2J9!=vkEy7{GUc;c(zVY&&Kv&G zV_B);X4MRIbW({)Nj+5L1bN5w%tW^Eue|Ov3FuR|8h>rq9cpgzN3R}YVk+*xixK&= zGG{RGDk%3e{$QSC7cYf)QiHKwsa@5i&c%Jmvs?++mxxN#FbXOo1 z==O49vL8OiDM59Ehu@M(613d2PWmX9r`8?S>$gdI`RPknpFY54^F*M;XeL8dcAKtK z;QN@tP-e!(h5JFx^Rj5mh}R|6Lk}6|(Lxk$I*VNHxs{ifvkyTc(M?hR%<${woDzcxC7Rk*O%bnv(iQ@q3A<%dXA8NISCR=S zgod}4?~izrxk%I+21=1R6WNyA=H9)FMb9G`$H}<*?t^ma+K1Aavr%>rdnfzo!5rBM zeNS_(QdHmSXTID+`=0REiP908 zaIQ{%H4KZ11ag#=bhM`RsolXk{d7&9~BPkag zDKWA8*~}O{HbUATVXJHKFy7bJD+vdl7wdn7f5ykF_(Ae(?v(vPG0XIhUXDL%x%lbc zo(we|Z?6Pf3}tWaX4JHmkA%Y`D#$Z|(Z`S%tGNv@=(LJ7vZ<0gwlK(ys*VdV@jK7h zt}oHd*luWz)o7LOuJ*~3zOTg(Sx1|&PH?5yT3x0h6>jxklL)qa2pn4`kIK#!0MH8; zkk&cHweCCWPkD2DpvYabB~00mYe0%O@?FojTQ3PNY(d}4v1bA1k8B;d7+)SiL605_ zbYQScwXeULiW^vUK39lqP}$qd6UFqP8im7Sf3;aG{PQ`EXQqT7^Tt6F{2O12*5wA(b;dl}WceFX!l~F82xb=#GH9tPrKQnfzPx)!_SO5szDE?xrc>et zm5bz#W?1dnI+yyRGck#FqjgNIj_Z|&}zRJljdOba;3s#2{}{dLh+2HR?Vu-+%kV~;g#f$D{p z><8ETeR04WT42#4gEE<^^xc$XQPB>K9QSN>ZV^yMl6f4OR{R!AL*&)W`OWR^i|G=F zlg{{ad^%>{o9Fn|yS1fXXY0{8zg6|=cFyviK z2N)>1(@|l$mMqZQBGn}#yWxFNb6Bwyv@&#&v}ujgJjz2{ck}k$_MR#GugS+)fyw-- z-BHYa8w6c+JLKerPmU*fEa;Ofi!PjpzY$9QVaCHs1UHNOxL=KwlvLq(O9mW*ugF8E zGXu0Q!;CBDDD|c?-wn0gf}zb2{osmb2M|(yNS;xchc(AuKw#?|IT^*uc@j z4QKP%iDWar^2N-~WDnGck0H&A3>UTn{jp5sjJw-T9}urEvRxh45)qKGyF2k4=H8?k>nbm z%k1?;N?CkF`;Eq4$j0wCi`Qfr{+QIohC6g+=0i%6rwgUS94CUk>#EwT5zj>< zP)#g1o|kZ+of@nt72g^Z1fgl6UyPO z$nt7dO9DzfdgzWjYxfGYmqe%dGex|(V*47DO7&?*)EsT;2;vk?@@}Gp)b|`CMSo3_ zswonmzVNKfKBydO_xpqo-CNfA9|3HiguJn;boy-6PAdM*J~CUDGoB;)L**LH;?pNa zI^KM~etv<0L>{6eG&mIGRJ^U$LUwi)cHASIoPi8~XwN;uH$GOR2?MuAQ`#B=M~#fda2uWQrwl3Lh^*vQf_?95oW0&g{%b)>xL>#3A{LYP@5e zl$s9`1tMMNySlpQB~)j2qP=Cn7^bG9p*!AndnGv=Pho4VUOW;Bxj|}m*e`7?Ge>Qx zab?}DOtxvLR8eqh(WQpL)-xAHqjKN&2GXqWJz!dL;3RwcR0!PURj#>XFq}<*>>nv3 zBtUf%E86Vsr9BM;VI6*`Ib58<^?w|u4n_cB+J5WuT#5_1AI1Oob5Vf z<&bpRJXX@v!%Igt^_)CQA#XtITMVZhxNKItdtUGmm1mchzqSy=tAw4nRDQ%zS#KgW z#bB43KSMd++)vFzSYw_RH)}weaBblPPojihJ*fwiw9x}`aHr;Y(O$8{A#~cq#-QQw zj>XrfaK)y6Nwdeb2iDf>=*B=;)D1^cmm>vUa}7JLWy$Ti;ZCRbGuhx8OKNy}kqrPnR708@YE#;SZF4f!c1#BToHA&H%$zo&(mJGdG)*d=cX1R5 zd}1c!xN#%hzrhnwFcgwJdiN) z!S3dsY?;r#@)5PfBr6UvMI;mr!DRT>kCV*n84$r#Q@H^Po9= z=JU?xw(s4ww!@q8OPhW)hrS)o~(N=+0pQK6NSDW9py*TSl-8}++}r7 z6h1(#-|-Yx5#^0+`LahMhj(7Z-pu=l0Pqt5a;CixS_teBYFk%Vh~^ech>R3s$w@TLB6G-1^zciTMtY9lntzc=h8tH;Md3KVg9 z6#-K8-_>4|Hp17J?L_aEi)w1=7ZwoG%7}uwOGSrI7@8xmw}xM59%f~v+*$lWJ+)a` z$Un8c@WQq^%KW^%`JKc&O2W~icpb%g=Zlq_N+H`*_ZYP68%Pwm6PGNPCZ9)TqD6Oy zzM|sdnts&S;^7y)&=^3b>}WHyyE-i|&}{G+0D$Kxjy`E#R1(r2ZMN~wbOIAg$%&Mz zmdzw#5{9fJk*~F^c*mqk-eMWuuhW=H)>SJa%%5^-lj~p_V)b1yZa*beF z1L{s+|Cc*8N=wLg4@fIA1t2@rAh$|R2&O5NXNWFL3Wg+#)3&a3DRQqE zRn3m`FDq4TI7M+qyVCoLFJXNIdOQ_E*aUy*KFNN#PgpfruWQ8;0>+BP`Z=hPMg{wW z0R5ML+1{#H6O#@L52qbS?F|y}4Od>7Vy0A*_Hd+8E2tWTGZc2T+25>Z_lfeRUsxnN zX@~}3KhrUbhR9sf*uK^csp#k^=3P%V;!8$NoFV}c}TJyjYn@N zW>Chiuv;(Vf6Gc&E|!9C#&>n`(qF6a>&d8?$}u3r%t2;`bjJZgoU-r5Vb@GhJlM`M=?o-_Lo2ND&k{PIp+xxh61sTSB_tljxFmOqwsD`2&hD82gx!o%Q!H6@3 z#S-$U48%*Ex1d_^ZdxwnwfHjZQ8Wckcfe{1DpRQ4K|s(RirOoX^ln-mDN+nDII*U5 zOy*R=gfaAr^Eir(RMg3omjX#BrKaLMYGBLz1Vay>I7Wkg4ohF~qUvTn`8wx+M`Y6Q2La@a8bJ19~#TCUngon&~E*K9*imzviZ!P zmTOPGTqB(xh$r7lJ#sVcmJiQd$tn*W-UemBlBVGN{QQ2w6c46gsWX$_0R?C254a_| z0lC{dRqvEwBzPk?s0e^das0~@QMF(9jV$eW(iGwH z)$A6ivrgu?&(*$!eCmo$=!(?YZdu9WuwFIc(Zv5%So^?)%th5eNx?lFHA@!3eCi|LDN;--Re^gkBBB^<+hp3rS*n<$GV~B6n#oRYLW8X!Ig%K8Y0~U(gA^1Dc zIN`WI50Al%$#1if>18@mx>4j%b#c$S+(*F|=OGpW!K)@^m(|IudRwXyMhHQ}Oqp-X zOXHf8bFu=hG%|rV^MZQ|saUxsEvdaR1_DP|_UGhF(>aAC%nT*Zqn%%R9ZZFoIBR!^ z`D*^J9T0Nv4Ssn0xe#*L#oWq8^Vs9Q2oLhFStd2%@>wHGH2h|fHl3ExAjsEBbp8xt~_nCa+5PpWZuL4qzP+}Sq)jlu)mO2u^|e?)Chx8Z)QTN9EHF{>C4N?KKLEmWht(G3?m-H(QiG5m2@qu7d#X}Qzi z(aX3DE}4ATf0*UMQT>I@-9&n;UVCf4D#)qGpML3GXKrq8iAHO0*Y^AyVz36^t!2)q zvf|J12R`vS^1@(F7L}&O^H`fFvfJO4#FIO4)z^SjhijqO1unroM&PpBK{sDxk#nRrW~^3V!tu0S%~Kplktx7 z;alM?Ly}k7>a}sJ6V^OV5zGTo_sqo7{MW?%q&>XxoR3qom1{-v>WlC4YJ<6+5NQM7 z2S<0@SX8XvIn8K3MRTP;94^zi=@QZP$(1&B)&!v`)0o1t8+-U83DjV1=6$X4-h9quj@I$_@~ScZuwT4r6&Aa#n47WWcWQ+2i5oa5|!n28*ik?s$og}m#v z{YdtQ!HfjjbPe*ZCe!Rs7IFE8TBw};)`*|zMDN&etin+UJ|De_cB;~{kLCMX19q89 zk;9C`i5A`5L&CQNImAs*W}FU!A1l{nMzntO$0dM0f~D6Q?yZ=iAm7m$Sbftms5kzC zKk?aanz86Avnh|d?f%h);xi^9^2Vr!hWqp;=Y)|ACK_}f?-5d2u76hR;l98Y5f}b^ zzL}zr%$hATAaSBsf{L)7-^0ey%4RfH6^V#Ds6JjqBg&%ZkMQh$vsl=Qm!K6L@$laF zVMRd-I?-niRgt*{$sV!vdqQL722%OwfXTn&Wlh=~huI~E((80+=8>&ZJZ!P_2;~DZ z#BlVpi$W2NeTUfL<~Q#1n$f7qNtMW?ej#Idlu+?q+Af2E%oOw>0POQe9V!!68}9Uk zo;%tiT*Mk zbf-Bl6J-_%A21|pM+GH=|06M8QJ^kD+U1k>U<%+qFN;K1U~=H&mEcu;8T*Kx?{{4- z(_1KYoGC>`jP24c2&UX4lZ|X{$T3!)2-M;#Dlr|R3aV2ZxkgjH+-rA>g6?^_(r?sd zxr2@(oN)X*xL5i4bnLJZviv&n1|88m=}rc+_*$DLaC5ieuP#fgMcBSAv$aPyo(h~&z9iTY1!@ia&j^|>e{?g%kA56#3(rM6l`1E2|S`!R{q#e<7kkU$+nzd zxxD>4jtb+tMKJQS?-yfr+0VcG`F-Rg6c_^jT*X2U64t^?{>P50=W=7bNiVD0@2MJ; z{@3`mZ{Nd}yUv!mgq>59HfAnLEBGCrDV#gI@|>jd9Daxi7~N z%Bsa>yuc2KzM{IMU-CMV{^~pb2Z`ZZ<=r7q?wL5VTfc97$st}RBF$2-twB)wqCOk# zv*o2g<;qinAQKW4^z6AJ@~j7VJ}iWn)s~U>#~}a|3OM+GXu|#v7Q>p!$&YgRyn+F8TY{e7#AXA^#PyjW~`FoS4oYpb3`(pN(SpNve%AD5GoTB!(5 z>>|@u_NtaEU&j8O=yDl&M(;!EG1xzB{qN{8GnVOGr$_tm|Da-we+a{DGX0oZxg-Q| z9%ix9nm-Z0J@I;Ky&eLF#ynG;6<^2Dsj0n3?7GfT0cxFnX%`*c@BQ$?vRAULAawSeD$MRHjQNK>ZJ(^LJdW zADgeZg^3(Q{qhsf`-JSn^tL>wJu1EFs`A2Uqu=N1|M=5R z3*ft5nqR`@;1a$=tG_CC-$?D*2`3mHs* zZVnU(BaDB;z2YSWw7jFYxZF-E;L^`ztF>`dJiI)=*|^D%e4e{jNrHYIx@Cx2^z`&F z7pV8|gZg?D7s^+Si*>CL`0 zp`NX7#@B&)S2Cdc@t&B3q`d&rdCDT)tiXc?&pQSQS0x3)ikX_z1FHYDb?NMYF-SF2 zetb}SK}}n|8#D>TjLd=3<7=YG$jJUAp?lTUdIO~1K0cK3W_VdZ&I)oiaRgKyNe^b6 zYXipC8|R4084fBkWp2e??s(Ukoeu2}w|6K22q>pYUn5q35cZOEgtG#$&hG{z50~S@Cb)Lj0V|Vm$eB+F?gxX*55{*kqza!nkTnkV+ruKRS{+p6m~4IZ)sMQ|@T> z%lc=luezU(;93yJX}^pX0F)$hEWUrPKe;a7PYw&Ihc&7#m4CnwxpKg!c~6zDT0pFP zmlo)`@pCu+ld}244Mch!;Tv)B&-)_yu+T+Ll&PV)htt*^KHD5bf=)3e3;3cpXA{CM ze$r^PnBhE_Bsy%BaRNNc(0H5|LH|gC4Uq&+qJPW=>tjL}R_wN4q`k(=wWQ^Ysw)8M;yhgvJhzk&P5o}v2RhcQBldR!jqE)PTCYga`{tOu zV^C=s+N#ZGb@tN*5Z_6lPN0;$sI%H9gcrJ!S6kDB{Or|yXSTB5OieX<%TW6Bq|qn+ zR)jaO+{KL{4es#J31S3(om8Gr9u~>u7r=EDr+2*9;70!NQ5yn*hfz!!!(}m!IbBh| zpxjRxqaklJtH6;e)*pgVFW7{XRYAb5*2iMoLod{+L6T%c$FNa*QNwY%*;uiW=X{nm z>9Et?+=6HO6$KhWlPy<<>EA4h8)S2w0v-=I<()w6S9`3`WLB)Oe0uHdCzbOTy%BOO z7akZ0vJNk{6$m9|=l;H)74eSyW19Xvv+ri=x2}~J&d%wb_89VCD!!o0vVAKbv+Uu; zs+FIwaaAs#^T7HFrqqM?Od0)ez9Are69#0r?>G^aUYxJzC3Hp8ZdC0^de2mt-J9zd zqqVF^gtY{+$8qSPvAM4F*hOc!FIjy$t{^a~3B1)0K>PLrq#qp@p#oGtF^HDbCGYh8 zi@#XZKNFA#j;2-!O{;k68m$iL%x9^pVU93w?h?Ap-9hRADyaBCVM3Q@aZ3(4PO<@m zJp`(*c-)T3LEzpdZxeJ2R_g8;kwMPO{AZgmXb3Pb7AXih{M?<%i3Hz&7*VsA0MNw} zYa`y5rb1YVm+y9>C4u>9z1wZeCi?ltwbB_HAOecF_o!+V7Lxj=?(OyCJESlM!YAJ3 zukMpcf)=RGcM9aFdafE)saW$EFGNR3?Xd5fX-XXt^^#uXyE({H`*+@RL(s54o#5ynw`au~R85UM8hUZ;Nj?(Tt&0T;F_Ta_$a5WtmQF-Gx?Lj@t2)jYHigklomzbt90a2ZGs|dBj7svmFQw`xt9Bdx0MGjm?tc_Ars@nVHCbG^P%PA0Rdi~~b z3a8d!-bLSDCydEp_~pG^tqFdq9U*BC&vhX9BvcNS#Wrz1iC*AhCD?&qSLb2$@X{l{ z0OIUlGt%PvW9kwCydQov*~nwT6f&SH?V&XZva+5YSEI=dSLFPH4SS85o~uK_)(bQ7 z1AI!~y>W<){*xq7h;(s9EZ3s@ceHD}(?xTa!IiG`=#a}omo<&~B zvL9!caFeAFi$JXvZV0+|3Xeqj3+PW;!t>XsDx;Sa9D&Su2axBp2%&fH z6Li5D<>Q5UtXn@IeAwVyV7?&AJ1&J*8E|N>Uvs!zFH4Ku%!}CYYIO?tKtteA2HbI}UdTTJsPp|9vSih3X!Q@Gzb9#6_>TqD!*y@M;yP?L zp9A+4HrMEB;Co2;zRiFfi`nqAdU|Ik9`mXzy=g~$K#7=hdRC~@y^H1y18E7zb2_Z| zd8V_k1*2*68tdNsq=$C{IJUhaPGEGnmZ@^fo`q2>TM5E-beTDWs~(Q0F~*VS-c>-W zS5OlF&i{bK53L`m>&4mL59WPRqT7pGJ?LOd_l(}+nTk#WW4KN&;W3KwILAA8T1J}& zGEh{XRh_#@A4m9%w<+^vqgLIsIv1#lWt42e+^exj#Aiy4#@obDKgP#a29nz=*oAJV zrw#y)j!03>`9492h$dG9+z624rtrGm(#gop$L(vD{(y=qbvLvagbu+^3o5>8smP?* z1PyCatZd(o^rHvE4udX$#x$Q)Yp^sx^of!a-u@u@Pbm1z zixM(d#q)SkVfFb+OorstVqw6K%=YgylLTUyS8yGhpUt9~jeIa!`r7clT%RC7zP1G( zTN`qO+zkvZoaNO$J%8`n-0e0MF`t)!n85%DMVa06r5A^XHs5kpCJs66_E*PTEg}Kk z;eocW%Vt-|HeAPt8r198q)oZ66EfS^ZycvaFhY6Fc)$>jbwFgK;qdpQ9&R{Gbd%N2&}W;pTG(oLrGYTqOl z)N5v|EwZg&7b2#BtCrq`+;&X_4CsW_TO*83dZdJ*bUsDF0D<@SRf*dPGgtvFe&vsu z67i+S-{PH1;vPRkqj8^zW6<^I!SOH1+IPsVewYk`(fL9L=7lS(41gB5 zv^f~43@nxZ?j1R4587=ndR?g{HoM)|)E#c7cbsLBYp@C0>u)!&VySNe#BMi*0p|>0 zFNTu?g%y>ap5Cz#%zIcW)VK+!QK5gTbEh#t_vV8VG`nbiGFPe!7Z1#p2(fWvqi1F} zf7I)9i$4w(5Ds;IY_FrLNEBi;Rv>U;jC7Ng%f3RaGhORut=|ORaLdLP2v$S)%4t=~ zqedo1S%@2m?!D_{WxeDJtM%&jZpXL`e&J6#OhAZLm}aiupo=tK;V zzS<&1@*d`ct8o+4@ynUHyIntvB>y>l<}d=7INx@=COow&BM_xDA{fIzxft4-h;qD&%>&4|1**3*UzfiNxQk`p1FJW~?NZ?e6#I zIFfcCb0JCn;;RBCXNESwcQi2GXX>FgN`VYQlIVdi{G$IXxKZ~M3G>OTx96z7X$8`z z{`J@2>kp=Dz*lZ2xxk;Pg0N>YOlU+NC;W!$Fvw_sukPl(HXs(c#O&wzBOd%>uu=_9 zE;V6wG1_GK9wi^LWuE{>=w?T9dy`2GfOkbLes!7IuJp-8tDir*sc~zyAfCM~f^}GW3iSSW;b#?hVLcnWvF;Jt-1>1+d}=b^euG;~0|&IIEW zH$a?xk@o^M*ui2}jR&NA0g4~7TF#z4;qh}lx%IK^LjIAZs$QaKH|E|+W5fF z<@N=*YFUffE}?%!9KmpZNe)GO&EnRFHW}i)m@1g8rV0KX`v6tmd3iB+&-sHGO*#K2 z3El!!rE7FT-v5Js($L7N6d!e=1>hj))N&;RrlznGhJ zxStLl<+Re`His+{IWy9aee!4;xmlqQqAg_f2&1MA0 zRnlPZFnuatLs3g$9J)DaW186XeOxN7zLW1-yhQ<*F%#WT~pY}LO3!y%pSf= z7U!+w$3G4oGXCYv@B80ntu_h|nzfNFBh$2yGmqv2xM>Ckm=+`4o)gKS*SrNUE#?`= zOhFJBw*@ML)zi%tmMa$SIR&dGlVxVE!YarN1cXrxXv_`5^PSi}+^+Opc+7?o`}ftg z2`JxCiG|aI#>8M(JMX~ALGE-Qdz=D=#KC9zgM)I^xNe_&Vhr5JYJf@_qqRGoGZ0dQ zkrF?f$GiA+H>2uQqYkd)lOOHMA?n8C8HXLe(?yorzNvkSlpb5df1a@pkxT%#+Zj$f zQhU)5Ere^!&uxRWh2Es?eAKB9Q_D#-L|l+Kil>6dZjtT;_b9M@^IFl4wS8$40|g76 z4n{if2g~LMFTOJdLsdwj_vIX0p9B&K=`-LtY`W}j%&42-ao9*dxqX8%WE-IaU(J3w zBW>4YN_b_g+TPme-T@1))1gKrkW~ZM^QZs;f6J)=v}l{RxUhPxc{RuS*U7xv)@x3T z>rK9przItHO;po6e%9E&LXq#M*FYyC+rSp(I9xCM?;0|QBhDdylappRfKa62lwp=tr6pr3hImQRC2M`o*x@5O_mqpve1^@zLt-P;FQ*4a=z%I z#n74qq*pH<<2mjI;x?SYB}X^i{7(MqX7nOgvpf8K3mvrgyqgd1-%mPgV0H2pqyV3J zuxyIR${d1Dtt1Qz>bs8jyqfB+-&>7ljE!*foRAnsem@_FfV(ZUG?W$YZ(~&f-+}DX zlU#<)_*&ZAp8R;W@hizyHz@edTjQ&QNX`g~OWK|v{-zH#8>z~ubMe7&Lx^?86eSqc zE~RLIW;*XKWe5}*4~NrCY1n)F`-cIQ6-8G(4op*2rV$k) zXwd*bTu~>d8g$1w--jJJrPG=5i}lRYx4(nRcyHg}Tqa6bg;uM-YnspI0%BmX^d@6} zuoPEDse}a$<7NsvN~ivCc1G>!oCy97F>1>hAjyH+^&2<1JW!WBZYSiY?(FOgZuZ4k zVQ$$JusT0ILdC%FoDv4MKg$OtzyFZ)MGuz9>)=t$`kH zawA+wz z2)fTdaNv>)6@3C3gp$r}aCZ$fLP^@f&tVX{G3gHq2h7*Nt<&MlcBooUrJQU|uscZ! z)$@()4@Q>V+XS%|;U(sCti@PxOOiPVa-tI@MtwyH>l<^t#-{WKB&Hj)pv*VaH?%2z z4DMd}IHKfxI$Gzp1BNx6veQR1tmrV;QQVb%#J=@;US=IV4D~;=rVwZ#4%NyiZu*Ik ztiE0<7O+D85?Z*d+B3wBHESVtpU)x?J|ipB5jeiF`s^S8->%z+R_f7K#n2kAD%3KBk{t! z!eAtK8`RL1=L)w3?y4)SmaO^Gl+E5a0{Fr*yw;Weu`518>zAA=aO(`cW)qx&DA@Q< zTJE1c(ve`*bz-ILp&b|{VJ|cH3+55Z@zfAc?%_wgW1z?hqwfEqXE3L(wH42K(#Y#K z$O(dv?3Iv>xL7UO-rXG<5`u=4ll55dao}}WgD>;*zTU-E>t6@)*RK;4ldj9#blSK$ z&VIB@o-9h6dfds?!A=IsQfYbav|jFuS+jFaheHXxH}h&v3bgR+Kcv&^xTnOV~N=4Gq*$ z9YQC|xybAyXMZ+WDzBIqlZ^jf02t$Bz>8XQoIAXJTz?y{C=RCJL}|Q4ReHaJDzELn z6vs!{SELdUy_MB7Xgv&`7%p5~oAEu-BxBsHOB)g)gKoX70Ju`5sOo4jy4m9ihSbKS z&Ai|764?oUzwMWYz~J;P=iB3<5fJnvzmIi9(l8Yki?Wg!Jle~TKkugxHw@}PPbG zTWt^h9=E-AGrs%06P0LQzN#QSVIma_h`2BWK-&@KUw_9TVCluze1=BFudhjP-5GxN z7!$yq+Rj~vgDKtB*3E%e=iUZORzG|8oiP0t@OD`xSa-2vfJHluOI3#+!Vf6kWVgX%yBJO$Dj z#@m_joP;1oLvo($OHb@m*n^udJA|O@b1-l?b3~bsphq(xrAyL5#e_%iW`U}7n2!O^9WN*)@*_p7GXo7=-JB!17|2ZmUqPwV8 zT8YH6TM~0|)#$THnsiG13nzxW)Q`bYGtCHe(!~tawoLF1a!t>8LVYs;lN-9 zn}`)%1e=i{heyfS{*{6b`SFjoSj;~+=P%RadZ5-J3@VS|pvffm?AfzTYaU+>0sN;= zm1SgPpnWJ*Oxt4vI!XkmtF?1yh_a`bDj4Dp%ap(;AXNA=SUXTHEp1g1uYs$s2ptt6 zfMB>`TK%tI=m8%-5fR^ATn^#qip{e~SXqMN!=E(xGC;d^^ici*4*aE)ay2d1j%f?K zL4oK>5(P)%^4dFSIWVmjAh%GtW8eeb3A@ z=dAPN`|I?jU;X^Es&?wxgh$CMkR^<8mih%sVxc2 zFW&}nj>$oyKMmV(tv|0HY5YS_Y2pv=&Bi|%$|=!BXf94nPNv675eu<6lF~Xfw&|co zdx?kYLP`B$rphS8hCLV&I63*rg6l?86pF`2WZ}ksjA$#9b(c#3ycy0CBO3A$AUX(J zePT!E+UdOuT(x01GMsR}Go(F~xUD zqzWT8@w|L!&07st1Xv3L9gB`smb!=1zN9(Y&BAE3v zz+fVm1^oI`m?-M!SfyU}Gs|>7s4*igo@A`BnJJI$STfNDrz}=Rd&82o_ zun?4~d4NH;HIF7YCd!0X3rv{NH#m^8HI%nSgeCgeEC!0hGRiJeJk+;75|qXhQL*hy zDMW|Gue{zSV$XdI&?v0oWUllR7NxMYDN7tQP@sZPJ zK@>d@bjkz4Ew0J=X z%~K-(Ez!+CUohU)Gj83MJEE%7Af4r@yw|q&K6CA4i~oB4z_7y-Oea0(k$3}BwAOB= zIy!Y)%po>|+~dIcOdfCf-6Bof!o+0EJPTDT6?gjU#QZ%5(87r!llu$Sy>V7~pC*=; zQOAdiZgblOB0s;qpVN>#=aV|oIx@t;R zaBTZh`|)T_bnMSXO|Mf+7KmGLX!M=MuwXmbA9RZA-9+!`$7p>jq7*F8&r1ifWcaG1 z*OL|J*xz0Gk-^bDYpWY$@->M?;@RX=J!zNgUPwMUm|AK2fzB(BpUCuyIM0*{(=wq| zOzv(DYIQY#HQ4Gm$J$BS(z6odYb^`zh$h8SMlo1ya46(e z@J_ptyLP6gj=em~>Fm}}6<#5NCQ^T>9b){}yWP=jHzbmGs>tXd7G=|vCavEse)vl# z59t4p+UBm<&@lvSgH z%O}DE^k4!Xva)h%9%=&_w5KPJdx+>YZXyU|HB@W9=i_*88)@qh0vbC!2vLtVy9O>_ z<#6SF*Z3~Gc7%I(T#R@A2QiK7}g%fl0qJvFH;;fB&MqPo_QP(`3cJAY^#{oH^9!sl26j(Ta(mq2E)>XuOgVJAsxKb++1c0`edF znyRXldIEYrZ!|3iH(aa6Muuj@-$E8%SG{f=!xKw8Z3e@uw|C@|qiRBBP0X+GBTGDs zGv8;=dG}a4P7Gywj)yTGXwX5$ZHf_XZx0c8W~}0jJ!c|5%*{Mc>T?Z`vPjOOF77QK zs&@f1+LTJ__iYO>8<{`E7aP(E)IBIiB9GT;(w>;qx@A$Ql{tW1H|=~w1DE0OW+L#M zDP^Uwv|KW1`HaX4G&Nmc+oj>0-{$3|iMea%tc-mj0lMsmRA$6bc6|TGtk}7g=5=}I zahd@%f=!G*)eh=;ZCmnw;jYJT`4yZ~-!NZgkgIY$G*ZtKf7d7_RihxMK~2`MD9tQy zxG1g0=^$10%0DG}V$vv*Xj#6hwE{~DZXI@_clorM+p9rqQ^=4@c_M%D>g24KCD8m? zG@!{~HuYzF#c#3GJg&m1OD?*zzIy*2=?B1iGxPU-od8gf_MQV{FBNwppi8L7hm>OF z#GL>UeN9j8t}Gl967xvtD<^oX62$3VOt1b`BQJ#`M;MwdI(#mxiiSkX7_*-5)8Y$}E`3{pxRtl+1&G^f zmgnZB@XT%~%&{lTWN072GdMa*=ZPamR?=@8k0g5PM2)WTNLD)nnqHP5KhKb>(<}F3 zW7D=<%yX!1u_hJq)Z{IZwb4yU1DE!j=b0B6xbp2SbVf_c5E4dw+`%;9E4lQw_?p|1 z+%Y?%uh8Y_U+81zQ9fpG4{MQ{y@5!_lB;kTsW)jG36%Q=9Hfps$XjJKX)I>82o7bkeh*PZZ$oK^GPj7QqChLlK3oF&1&lBc0jZ52p|~8Ed1omHe)2V>s7@3ea&LCHF^VrS&C2VZ+O!o>yL+GVYL z_TEzmu0Bz4tE|t}U6n@b9o^T(^TzZmW*eKL7HsoJ-K0!@SPe|Twmr^zA4+oSULbg_ zUnim+No>dDVqPi;U=~{UR^L?5BPK%*MxpG1NrZ~jUra$pPv+C8^K64BS4$qu05aUYj@At!yUC`3PX0N;{NyC`N8*gK_%xz>P6# z569vOl=OGWQGY8My;FW%L|#9_*m+t0Jf$saHfqe(NllghLnXDhzn(m8b+-1V9JCfU zNHbMQv!F)F7ekY~43`-_OIC^Q$KE8Tbov|z)3kn5-AipJohWLpQEjs-X%FfKS$mE= zKX8=SY?J@HdMAB6CKer}!SsqryFAJ=0!f2fdH)6%l|WLt?-7H~wiQ&v+>@`9DDAfz z{RW2xn6R9UswR2L6#b1A^uwaw74^80c>3NPm0qk45)5KQV?K!}3M=0zGZGOmUNUUU zXY8P#w4gS!tj*i3U1hz9I2?ANIWefANrY?kgY!cI8Tkn!zPA9$!0(l0e zQ9-R`n?mqBou=xui0y4B4a4S*sEc}WSTNNiWZhA2F+JOTwX`nhv^QTH9AS#B?#hko z+SKZE90rXFw?1-!`iv(U5JvZXIvt`RME)Pwj)+2L$x_=X9{)k4XkAKdMxCuKTfn;I)m;D@x5ex>nvJndJ zFDe%l>ZC^s-Yom5>o4>JC(Vy3L|9G6en@{U))(j5E2mE3salnt)LIz2WZ5>D_|%up zrMy2|#qteK!gKFs*=p>j-E=qEF6SnOSii*#S%~cra=-tW^{_x=QQ3zievqKTu%v0R z)Y{5O6OoH_D(hj}*3QEi#+Bykx%9$S(*y98Csz(sE@d=f#&? z+$rhIoQs7!MrAw2qyns~!)K%ti`x$FJ$3V`{P>s-DZ_@s28(<1Mfs2Rc~qUQuf@gE z2Hquk>w6(yj!HEqhQEqTjK{*A(dsUxk$2wG{*c625r-2Fi$-TI23RwhNNR+fjl>uu z`%=&^qqPVw2}~@S3%xPSx71MnEg7?R8Px)A%9BbQb1G^Ac^iPhHYAwkAuiK5i93Tq zU5>d+WKhPBhERb-qFKP&uqeKfsXvEz=Mkl~XBesTQ{U5 z56wO{$djU~<%-BJf68aD=wnu4*0f?Crt8`~;7+Z9<0Y;czUdfuQxebp?rCF7)2mhA2pJUGHgfb484`mY<~+z0|zujWgM|yw-+S)N&O0=Z4xu7OMbn>wK9X`elO zff_xIqBftyo@H$=YlTLotzRS)%2VW&8OsSWiQYAc*3|F!%lLx6fyEzl_>|!|R>N}A zf>*7S3Hx@)xUnok56d+-k)DyOoAFu@b(zwOrIPY|UD$*4B52n<-=|-`K_iIwI(0IC z;L1p9V(!o!u8G$q3J3Ds=CfEvn^i_^d|B|Kkn#sxpAc6-#j57XH#WP-m{`^ItPgcV z%#2(+^9A*pP3$I~g?Re|ZW7a%S^4VksUf6@uW*rldz^=OcZN88F|^J&D$!xP|vpnK%zq1xc~Mvq78>`jp^6W``z&4M1a` zMCek5G}HiXs*90#OdnjirHE%FLTYO1E`Gy)S->WlD1yI*xluhw815hM_U6r-toG~k zYajWhO~(%v)RnNISMXQyH3YE)RRc173cZV+Y z_E`5lmNf4}rcR+kAkJ%f;VV!SVyBVf zB`FU)Rjf~}eD?*LB{nEinu0Iryu?dO5$*Gn-eXMkWFo~6##&}!Nop#L36|3Mq{&+Q zCuqql)8W(+CY<2-%RbcavMg9Amaz!)H>a@r9+A-6=pJKY=r~I{(K{=cPC^W1bLOeF)I~TpWJ3rSeQUX#h9TAV;NuUS}(l!4@*UN zOvS$fcaT{zsBl9(x+)T+>yiJR?)Z617dC+4m+XmA@8(!ZK z&O_naR`D-FhfZor$PRAJB~2oNeWKiG1$2lSoN+zh+43*?{fV{gHxbnj|dRiYojcf88v z#e5V;LO)`OOISUhSkDZC@GN4uqbq%Dc9k4F7_?!ScL4f$lE<%SA}Su4|I~%83xAUM z!z=FX_^=01kX!8x9A*>l@jVCnd6s(~0AGxjmR5I9Mj?9;`=3=!fm|^Ujz%o4tQ5@h z7|KmRF@BYE(fHQ~SA3HvcL{{w$?% zLlG~L3QUbC7AoHpdKPPb)h6>5;RUWyxsP~=p?k87q1le@B+bGU)sdzR?M}8ljes^x zI!eJ;PQX)qQEC;&+yJ6UTF2S?tVjNdD8vNoEleR9r_|p=zCc@B?CC7YJ$B(C!j^)b zd>KyOt(SZRuVG|idS(=~QB`Vop^Dl*iN4C9vPV5)ILx)T#tVGqdYSA8tMA8Us^mv1 z?5Y(Au9ZDsr(dX3I<>0<#D4dfsh{S}q#>BXN{pqbpF5-6Tb@&ctaViG-0)%SD!I<+P+mBD;+BEP*YD+wj8g+KxmTgzkh2IV<;km7J^|`y>lrhTjk^$KSj1V3V{bv3Bwp1) zpHX@7{FIupzy-RTBBMG@kyX)9@oGTP4om~|M&#B`ATya+X`e6tG#spBrh^5Rk|Ess z&9K$7wBimFll6Lojt@^EJW_eb&-V%%D1uTJVM?ZO_*nhwiq@jvUeJ~&Ck<*bsy5bUA!u0wzc0Lh+)h{=+rRriQSJn|H~ z_lo40e4O-=FTlU^P*}5M$G9vnQefzvmUmEu{zZu)i6=f3>Oej*9wNrfobp*T@0EW! zq66ctmcCqpo@AOZhfZ;Ydvr61F!z#%F{6%N<)SD{buMuL#C~@`CS?5n$~7uFfZkOv z2xl#ZLh~e!Pu-q<@lfC>8l^|B;Rh<9{zls7;()ASp`|Sb%Zs^$z+cAiVsoW{a4rd?_Y#u{glX#RVH}4_ra_xXgNQJ74s&%gqm#W#OLH-l4- zf6B-rq#&ApReNLyD+tZx`bOH(AywF&S?68_2!c29+AlL=XtR(1)E?|k!T{aQVzve> z4MfwGDt}n%!w}!}=Rc<@H7Kt-JDfMt=doiGx;T9QG}>}s;GtHOVnHG|65o24Izq!? zroEiwjPaE_JU?9Y-V{Qr5meL1EI#ioF$TbsDE55-c?PbYClJd9x1Kk6!F8{m!(Llw zlZqtM-?pB|r>0Uj#EYOW_Ci;Epe6+fA_aH&cm%Rv**ju{T6w#LxE<4-^XZZqc?V@S z6mb%_%IsrSOSw~Ez+sKPO>^JHX+%~#RS*$I9%~|oRtSWcSv`$u|HHT$O@Xhy@eB1Z z_v6f=pXW_W4Ou)Fs3w-nkMXzc0;4WM%_#ULda!sLG9_w|atRO(7=h@YlpLl`a(n_& zlbX7T-e;;cvgAQ)j?)z(7-p=h~tMr_?>cbvXWC~y6G8({UiL8(Il6^%+W zJ_KC~L6QS`@$IM3d6yA|V}N4Te^CdFv-i`*H4AyJ^K*EvJ5FJyvPXpgy6+`asxsm@ z`vwhg@aj|W#By7H8e5%EUE6B@*ilRI(!IcrugqkJ+newAI_WO@wQN~$Cfz2r8MuA> z&_)xv``3aKP7RtmV8#pS6#*%@n9@>_6Jv^ossxzff)3)f;1{Qxx^Ldkb9hf-D9W_e zl$}^Ia5!Hb;tQoX)-ez+R^76BHq-B!!Yd-_9JX<|tR5< zX{l>hc)hzWsI@5#BmbQWR;X+p7^H4 zWqb^3rc^{gzU`Qlj~iU%uLVJAFC4J_ZmIB z_sclyv5(B7_BH?N=)0LFbK9K2km;yn@QINA0X$rEFW)4@T#b@T{+5?<0N=2f^+ zf+d$#vx%*+$3_@*VoDgqIRMEE;`E+#y)RmLCr8I?8(}aONoNDb@fxg4o4hHd6TQic zouMDI++iP(tlX`1Ll~AAdfl9q@;lh%g%95r= z3%jdTl}aH;Autg$_$~YGQ*b%FBu7zOB0|1$hir5sHN@e>^7U7)!SRyg_r;ixC*Ud! zA}Nu*bnM(E{Brd_-r};&3Qpvy8>$wymdMn5d1?52x-Zk(l5C4+PmD>TwmcQj--j&i zcUvNJxI@S=bIV+XF}cOkX7AS(4jlSNm&v7S+dh5{e|&D-8cQm&eRotpzaHx5(EX#< zh#+xr6smP}|KNLEuUmQ6I~tA%*IYE{CR`(zMlZxREps zX5-%YXCy?Bz=I_+v9xZ7N-xt;2hXfF&O)2wY#TxWF})u-))F_hR^)XKZB0!=O2&P7 z7wT)&`9Yi>e#>a{$=O&n4MG!I!!E`H$^1?hRC3LpUpKnW8^w*dDTG`rIvij;j>d9h z;^}i!cG?9!mJ^+8UPosw04w#>ueLYzy8U3S?QneJb8d@Kr`IU8kky4iXJ>2C!kf#F z)eGm5+U+CW(i!}oX7y#C`yWaH5#VVWnsTkiUi(~RNuJG6RwFe_WHd3cfks|Uyt1`t z<*6~gQnkGuBxPAe7CnYBGQQg=tbQP}4=BiDLR+uFyKrYENL+~a$%+T9YwQ)Uk5u?o zteyDdtf`O!QxM&$2FugiYmwsK<1{SSF+X+H@UOQNn2pZLzbcVc1{H?SlDG= zR9IM8dcPqdBJgkG)K8Ci_6>D_Ny^+j|Mfs(^$ZQ;&~KMVsL<|j8IAT3B?CT~LHLsp z=Ipqq&-;o5#*FHUM{EhZ)kxOLXGQH6!6k~u!)456_WK1~_ABqaJ&SQ|N*&h@LmQn( zgLrwH4wu#?RE`#|rOS+0CJ2U&U)7Cf!W=ViQNAy>jvP4bWC$&y4spi{zsHOUDNPiM z>@i;W0fGCt=|B(C_IbM8jI0$a8Pd;EUY)njlsaeTDj81`wACbAHSFv+JnWX}+?AAZ z$xTL-+!1`DdGeS*Wxw1x4ISy}hXTE!Oq2>NpHthNW5u;6Nye|u+tW_rv`0X7C%OuV_m)J zg#xxINqD&1QWbA?DxB)!*XbQz2YrPONZz(z9ns05g8R>v)+_N37L7N=j`Rnw=Tl7` zdM!*HIh-6$ZY1yj8s0mNS#H zQCo<=s}hKotEo|uLph^Ii8C=;(iikOSj)>QzU^Opd=XKl`M5vLwIS5gTX5=L#pDvI z6Vws}{VbeB7?q>wHbH_6T(>Fu$VTipbIyOC+}^&d#vXrTSGm})6_QUKiaewtuA2Pt zTMJfVsLgJ$OZ`>J6GC41fttrotSrJHSPn$lKeayoO;2bZD+^m4Gzwa=WBb{_Z3@NH zdF#vLk;>ZRX0r0i3p36U4viC%efFM0L`#XXFpKkPYHgepCd{Y8J)xb79Ik`hmhBEX zsL=I;BU?Qxv?qcbn&=>=H7yrkC0&xKBbrSKMdsmxyXA6b4hZwkEpteb{gi;ZwYzb} z`fpgLr7;i~O(CyZSZ`63gfK{q}>m4fVnOOB^T$EBiqV z&GtK&p06=uTWV=VS=^Swwdj7Jm6B0GJT~eR!UZL{h5)G*G@lnM5h==Os8^jYYF$@NZGy@v$A~1d?(f0WuOAfX zhdbVxlc~%Y6;GHTJmSA-ZyPW?8A6^)k}8KWfF zOL5CN6R`A4RRTs&jyV!kOiawI0B^lC{FFqz;Suxi+I_IUUgV#@ifA6OzKi(cAsr=) z+jStFT&0#GVxs6I0}zdKC#79YNI%{C9v7uz^qT+aB{PHCcsQ zfbBg)LY?{_f;Mw_zLw_Qd(-Y<3oJXClv71zjop_FJiM;m^5i607LtPNK zmOQRhhJQ3s#(|RY;337EBGiB2T`wsg{)Py8`o+DzH21uDriDU%m0neidjPtm5}<+# zy}HJ?^e3YO>@CL(*!wW(Kim6*#9yN0|Kwr28Nd(R`qJ7^-#9-pyFjYjEh&ojh^?$% zQtiK5hvp*!b^~A~q_JFEY9y#o1S!|QLE-=LJ^l%R_mdhmway~jSvw5J^9-Ny214?1 z${Crz!c9*($%7#6udK!qXo0nOtL2&1IH&!O7qi>ipkGdASK2_3l5j;37=jObFIjkP zG~Gl$YEShbFo+rpQD-?#)5^Z!fTTJ)g{R3248(+PL2-lMcO<3EC7lU=3IFT}Y(0(27K7sa?+^N595;`|<_D&o9%n{NMSqjRSf$JqHDmEU4>n z1H8fF*Uj!V^!05cCG+^gj?Rcsp@K2*aR10pa5ThE zTGz?3bN}*2uE@F4%qsR_!Ftf|Dc5y*C?h?+A~*MwNd^SM$-=~R%$KrU2mJ@h@9oP@ zH0uDKLlpT}1Q!oaMXGmy_)Du^z{dP@c?4ZzseW&Rgi2DPR<&{!E5n@mo*v`9cwwx4 z?*$&_m(wHBm=Im#&k~ZjBb^DS(5kO*{88lOe|q3xPasd#8vEs3f&3$&GGWeTIXrO9 z&C_*t<&*HN8qi65wJJLx#7O_QZI)lA3VieO<#iBn7x){Kn)degSDA`ufWQ|Zia6`p z)JEaQsEhDxZ=F#fh?Pu(@jd?Bvu@G9tW-hs%Szu=2?jhwQ$8y3MYpOY%5dWRlgjBC z>VSC~smj1!h`8Cd5EbLlcl=j=zY@|eA!5*%GNI_bcQNk%8y?4yZGvhI0V5+_8S9~6 zIT&M8FhxO8+rYpMfZj+h!SgM!DUyHU670Xh8)m1c@p`g=YVpWeX*B$I?7;ssD3K9? zYvZe&+S!d~m)1R)i_0+%P#w}vN-z;YfrkBV#~6HJfDdgjOyd5NuhK!RUuBlT)6&xN z#tewesW9=c(0%mFE}PLm!>`rN=)CM4pD`hao#U}!($q|-M@XZh_cU@4O_y^V;=Rjk;0ReUBlYq2pBx=SXLhruNpKA+zBlXj}>Pr6R+ss=Wkx7V& zZ%B~Igo2I#J*Ip6GJqimRR#nCtvr_!osG(2rI>#DyHT#leg)y~zYfAJv0JU!6(uFl z#Em@P5qA8E6aUl3{l8v5!$P%Q)rybByW*q(XhfnVT=c&Tawhcip@BpH!Y2W+>5_qgO_gc9ezQ8Uy_-){E2SA1v_dYev+=YT3SLH z{#G|B?@xo)5H#lZVRvc2E_0d9LFi*UK1AqgP2xQreP9ySlzLDzx$Vx>U_MXfvpH9eK! zK2b#E2ftiU{jb4P%i-ljzKp}}crHw6^5H+&%tY@IPa29Na#&?3_(EHRXVs&vAf(5K zN?a$JytHa^KZaI9Ms=}v!+(V>g@ZpI|Nk4dAUiU#q_w7>!$4nU|AEb4zIur>FqcIQ zz;FMhef@*V+y*9@*=JLWh|nnc%Dj?_rtpy=uk)A?^AQX$WHx?;t-=$v)HXZ-w${!+ zCE2^`J6H#euo)M-wzk&9{;HdSYHk2DcIt7O;%|BOf9^J=n z>x|w*?@q@%$k;pbe-c}$u>M%G;ceLLhW5@IS^tceQWHS^_~KRs*Z^O3QqMgSfs%x_ zw1kMY24nsCf7IitB4cwSCKqWF|KzDMBL3k`!R02)>Q+j#nGY3G2N(izSQhwvg&a$LFEqH?Zt$PT>mHqG4SekE?X~$M7jRaP7ZxZY2q6NjE^{< z$2CstMmKE#Dm*DorFgm3lE#?Mp!29uA0)2ev)>R?QD>!o)j&}?Cl^}q?M^ghNX}n}zY34*wt>#>0i7J_1OUD-vuMy9))@3{dI2oGN3@WQ{RZOvhB2 zIo|oT^a88eT`$4Tqa{uf(Ps0k5_C1yi|tPYzK4YgtTN3Fv^Y|{mb&q5naO8|cqVQt z$xVkgjanJX&2mGW<1q@*3P`*8VO=Uzk1Ggr$QWG1vcLu4pmL{n0Z+ z=puE*6+j~SyPy#mi>o@F@j3j7frm!}4>x!HV)cGAoeu$eAob3tqKb-P)(ob1k_Al7zlTbnNP6~10i6-Ws6qO7it|6P zdqp+3KJ61MZuh9nu^uf3L6Qzg92Pq*Sy?_*Hn8WxI-iZ4_fm%XE=W=cpm zw|z|~Pc>C;!24xNz%6Nmy;83PX#ksKm#MU8Ls6j+li;I^0U)-$-Wj?4JA?cLB0`9? z)QfGes{!nJNfG&;R+{?U0b#*Bk-w(TXcg#flK|?vgem86t*wBI-}7m(-71-wo|{|U z?d~W=v8BuC@FlP5p`@LSO{2*5YJH3WZ&8Tl*VcV{lIQl4WgI9i3_p!i&d0Yn6}K_%vmM-|74nXRHoc<{?Vi3Bllh8`J|O`M zwu@a1%xB~EFsx-uTfQbA%oDC7qj5V44B z-Q(DGH~(s()kny)V&T36Xwlb0p$VqRGg->2+6FpSKz2R#N72!`BJn-Pd;zI$lGD7K zOzA8z`$PvEBDLH-nT?xm1=I{Po|{WokMaRN*3l}9{If6dU*^6)-o-``Q{=TACMqxC zZ+U^g*KPWOQg!D7AGoA8u7nk3j`NSGe%wmKxOl$J?)z;o{Dzg?*gbwEb-|PCx`C{E z5qC^vZIN(9&jQ0Tdn3+3e>u!w!BwNZxw(T#l4Mg}iha{KkFlei)}csePSc=8<2pI{ z@yTu7ZCPpMbKu58?X1djCns0qxqUD~Lm32$@dN^%o}RX7IB)0-aLK!EUEkp&b^0d$ zHg+K{n}XvBFd}t^*Y&1s#g{sRThMf9JFESUC9}8^K01}G9(ro*p)u^M6^u*Majab@ z=cPS0zTZQ$Euj@lnpwk@naVuUKXIfFd(}|&^#?Xu+f8PIdGBR03x!M8^yVk~E?m2$ zHVp>;F-wgl{w^O*rifP8Pn0A=!nam_aTpS%HCf@Ag!R%*1yt-68wJmMi+Hl-+l$6C z7c;-JgY#>Lz`XX&28(*Q(Ur^u1g;ySmi^BzzdL^(r5|%E!0_;1*iFb@&c#Q|5UzsX zlpW|h?A#Fud9e=G^zg(Ht#_M0_HZMaYIG8$U#?uN$%h#)eK?EoIt|^@_KZ@<6F3rL zC8*TiPv*9@?jChF`v~PWKA=6p{VIZzp>!a0)INb(so3n%a^A)RLN6_K&J|j=lHYjb z*4;O?%!4z-V62Qz67Urgd+R%;$G$b1VaTq5#q81lpIU&Gi=Hr+13oZbc1r+Oj{!oh z8{vqX6Po5_V@b|o&?(`3I^i7bc;hIY_Qi>@rspSb4EymM_0<>e&Y`VJjlN^X1`V#> zuT{_HTTHW{K%be&^3lKP^#*z(Zl=BhWU<0hE6CE{=wVBO0G&L#8xUXBvmnUuwZ_!X}&57OP^p68h%`sC5DWNrFQ=gV$R> zqm!9b&~<>9U&ThSx~QtJDJ3~^q5bKp{n1%nWkEqD3d@N1=K~VMd!viKPCoUEBIR`3 zoe`lqWSz&#GoitAja`-;T~`n?K_7li*nlYwJm_+#c$Sp-EPFWJ!|w1LY@mLs23%d9 zV87Q*m!+}02=fDutn${_Ih@Hq)8eQ{`7mG{I(81A#VYeJMfo6Oz$XmXaI1Cs2f{Qn z@%E>MZU@O&KCD*{?L2`TvoC>UrmC9s4@-4oQEuh;>s^#zHqN0fBu=71Y0(W@j++Vj z3zeftGkKX!Q-8Gdb3=1z~d28qq5}20mf;V<$^7Z*&Q4`7`9_M)p z=5Wz*vmq7KLh5DpaC8)(V_2{s|F|Y7_Q{d!nv7jsQ#!x#8lv|x?HiRUA;;@D+NUy$ z(aR?so(MgWv8LR&v!N;?`-on9A0pV?+IvN^W;<6b4!}elS+qFQJ8D3Mo2d*T1x~SN zfktrqcCU{89EsDF26BsT6HORqljRQf>G&GW?55c=yD|S9{X2?9Wz}sJXF}H>HMuJi zY2U@S?<~u{0%)lTJ5l81$JFfZ(if4Y{lVR7^lkoUYOy&Luh=ng|NhM6)dMVkuWvbI zuOHh;1JY&>w1;q{fD2q6j*9hCk_foczHF5R4reT#Z?#n$y%+5+HupD+uBWGp79egM zt_YQfYbUMDjEkMV;UbWec#X+ejPY1)iiS4w79l#}=xlzMVac}rZkELeXqNw;o-gRM z)oV`ka@%eN^f~;IN|KI{%hCewdb1{I^GjKw&cbG7f`1I+gYRrzs~6<+BzqGV-#X?x z7%HtR9jea?0g6mCdViIXp(PFYHLEvq+jSapxtlnRH;(U=_l0^?RLSO#qm)su)DUx= zT+DL$)TsimG4*PDr!(?aXy#mT1_!gkZ=zlmGjEz&KczSss#_j-a>E=M@Dg(5JZVYw zh4ZHu<-nVdH__l1xTa4PmWj|u_yx|47#Bs%}=CDjuo~xqM!$PbAd5u1T#ZWiMy%3hYCw;(BWDmK| zC#F6_{p}FDJ>k6NogUMZ(IW1RdNT$D)<)#l9mXr$!l;7e)Xp1|oaGT-%xzXl*N4+h z3*0+{4k4$zMILj_kg6u(WTxdWRRPmO2AYNpV~%yo93EMl`VN(+S)Rgq&m~m1j~lM> z0dEZRGOG9c@{!8mc-WR>JW~+#0W4xA&1_K^qE+3wy@LEy1S%avx&ox(^*eP#zcues zxN{4kX{Et^8Qjl2j^b*eoc-9F$nNyO033sTvHaCfNU$MD;PI*EKlMnURS+IS^t>B7 z(~3rTj6>&}y&yVX-v#>s)-ekf6Td!+ z?5%b%7%rS@qtv#tWTR54w|3AULu@r?;sYk+9N-#_JNi*uosv?|l49s65&pRDp<~sP zYOiUxr~ATn%dT*?&ilJyCzwba-P|+y8COStome4glw{$t?;&h!Wwe6J3Koiya>{sfkSo=2xY{qC*)OIsY;|JMi;Mk&T>U-t`g!Ch*Q1qK8PuL|3MxnFZ6w+ z@-Mi&djBZgyY!Tq;9QbkY|Y8AMAO?jI(p@?z}gq* z*Zv#1lHe(pw%Z;7D;1{NOAQqt?nlFT;u_hXd(f7_l78q3>4~{(xrdr_0;u_U@Z(nN z%hIH=#oXZV%B9Hes`f+id#AEdt!(QqRYFW}0lRJP44=NeH;m_%m6dh<*@|}t0WdlR z!})13CXyB3w1d+^4*$XL9Q7uql|b^wUzjl!{d+KeW`&T!=hO%&xffiNUY+Xe8GLwq zu?bwZ<~UWXf+9zVM#(tzs0#4c`a@uTV}7GNc`<&U2F{46He0fmzfkW1u(r-gFJgzP znrfBj@h6`%5MR$c>}sr~G5P_~JB6R26)!&C897|TT^Xho&G_1F6-KKDBYU#47dny<_F zz`GFykuecI`fLilhQ$zOoh1?+77fvb`Fsf>Y{0O30%6)ve&aZGuA)QOqXt6+?Tuo3 zglFnBpk%)0Df}`rbbFtE@(uqA1Vs_30x>*q++%i`s|JS)80GJcp3b*SEn=*a8@eq$ zCUvNN{u#$J3B!a~1t@ZSRBTTaUk~+?`MOaW;u`seo@!1SzS-K&s~rIWydL)3G*^=^uAcYD9m(D4I zOlK(~h0)2Zjh}+c)p=`#=549 z1fQ6n1YIQfzS%#JH!2wu7@dMm%V~g}O}$8->(|gs=+;n;fll7iJ2^@$xv)>Z#7^w! zTttHyE1^RiU2`!~y8M>HD<6>;#PX{cd>4o_kUy@8K##dh$8~pD-VlG<`aVoK8z7J2 zR|SU1LRfSOqi^n^Mo@ar!R?PKfMx!tGfP3Lq1ndpE@+Vf@jmPk=G#+g*dBrAJ)%Tmo z`*=lvm($UXfcDyinC+LpPhYRZ!vyWKDBoN)oYE6)Z@7oT)xQxJg?$%zVih02skkQ0 z*YZBE->_LRR5|8C>we1c$ArQ*J<`uAV?146hl9Cp;(7IJwF#Oa&bZR$YRY#}ygdiv zdiTcn7k4uLbG^~qu#jVOjp9<3T|#E9Sac|Rn|q{Irn3m?)yns_e!uU9I~=ZAbSTC4 z?VX@D2hTOGY=d))XF96hsa>v!AaENuK#4wMI9%{J5d{JFae%qRo&NsB1DO?|r#w8J z1UNt|9zcnmX3|BND3!80y%|F91aGKpYh2idR~M!yvl(x9n`Uhdf$Oh%V(tdq8e*?!~-hY5kr^$&_zLFi_81ufLr>)GhxKa1Oa2ry;oUOmaUO zU}!O$69>o)>>2~zw=(*NYlI)*Izk*;`QRqzLgZp8^=3J5ZU95!2G6RlktXHk(!cK5 z5;yMrP*0befT%Kohnd6_r+e~li@ol42@RTjAb!H5uwb0<6vQ@7}%&yncu6!!GtvlhzV3Lw(ylb#D?(^O?;m;%;(z) zu`>>BQn7jYD=-}5CNREEQdr#op*cgp>@4QZjJWH{;IjztaiWR@MGBdCW0A#D#McZN zp=uSDsIo`w_k&- zl;4B{g~6G8!HZF#2XqC?Y}FQrB(dn|Vr9B{f((p8O1uUIoVss8n?ymCntEu#z5=CXmF<0!c* zKo)~EJtnJZqfiP9$>cubZrfhB^K-L80x2meU2L@74Q2aY=vgfy?POAr(Zi3OD7wY~ zsBT9S_PFV_(QQ?|e_oRB1-$k;+mBL<$Fe7N+U4fe!X}r)sGghp%uK_~#Ys^L9O#n> z9m`Dyt6K{Pta$Uj?psnlySxj&wukqn*!O1@G$mSZoTnICZS=p3)Asn`1(b%5Te0H0 zgs|72e{AuI$Bo5QLhr}3Ri#2n65o{~t6rG5HZV+;r}Mr~=k08c2`~Gi#mdYm%BTK>I5q|FDX=roT5*I zn)W4iHGnp+{Gu>wTVBIY&=MG)Y_M@Gov|lwteovBz0Z9fd7%*uReJ&=!%wXA_YQ`8 zyJcgNarTgV?>3b_N8h8Y&=MdAx`t2D2DK}6Mu!aeeC=m? zl`MOWB1M}WxrU}4&5{j~%guy~nd&z)DqpjFkC;kGZv37Dil%WLz#Uypz@2_DKtJ8z zpwT`pJBs|B=;ffw)dt1Q7nD0HCKERc!@rI;xADMfO_kA1zD%6HgF_`Ih3Jw%psb+m zgmGl&jyCa&PP?m!*x{o8!`@p)RoU%r-v%h55)vYk(kU%1-L>czVbR?zNPGUxp$!QaAI`W;I|ZXO`@Me@f41klxIZB}Jl?S#RyW*FJx$owh(_)o|mk zqOK6jb*$FMbQd62WaYq@5m3`s(qab2|B-v@<4M$x` zjO4C^-qS!i<0OxzW|D5ysa}aTid0qBF4V|oavETk-a+<_;~MghNkkSYcrUUAFH}TC zDSCjPx}^4cBZIQSp0GNNaCFg|*;hg7tqAf&R3cLGi$tT^rJU-5oR19J^NM2*!houz zS)0o$ROXcfNSdOqE+KTc>$zZ~7HW6ehwo0hS{{u+)5D=kkWe;67bkhwg(YdoWk5)?M)HwUXACy5>Q|5Asw1z^gNfE-vFF6 zSb>W0cw3u+DXMpQZ&V!&viDQqGQQ~?-*wTSvLGufD=0O;sJ8oNpXhc7kjhVFd8FWa z><8*j>Rz?!IzIunp@b_x+u)1qQ_tJ#Yxw+4q3+4d{Eg$~j#JZCNV3Z+ULC-2zTQ7r z>1mL+Nh#H9_;aKV3BTK*L)UAbH%6DR(?+A@i_z?D0OS9SBh5YBuAj4m$O>=;?EK>Qup;=3EQ&%JQE2 zPuFT(p1U{gIVe)dR?$Z5Y=r3ArM^jazLD^Jg==Nu?4DleW|L_Zh|-{8=}#x^o(=b-vS)(OHAQeqcU$>5#ZyaUq?< zlZ-sdc!XL?4|oE9TDZT4ETxkVg_Re~N_zMAC`;T^S*te|L43D~Tko0q9BMH+WX@p$OT*n1jJ`?{+KzJJsY1I#SoZMptM))l+Wx*aJCd|<&NDXbl?95=S_Hm zA1fuGUe0o!Pr2zX-Zzr)1&&E+$gPaB_{NvHVG4NwlpLs-_;XX}o0JP)M0Kfg0Hh_* zGs&By!hW%GFE*@@m@2=>tkQzAD2abU<=#EEItgI`rNa7+uDTg6+`Q3iyJg`J5q4MG zQrs1SA_-<5vk(4}$&g$Xow)0A3~i~ZC1R!SaYjYge+*Yfp%HR@kSliX_k1Rs%=%+> zAaTW)eDk&5SXQ5=dGC4{J7lzz0kwPFV$z)334W3)o9w>oFD=!lsreprys%P=hcZM2 z81Gsib6MG1Elv-F#z=FF5nx0h${9jJH*za%mP9Yt#rQXim0zUi<>dvHm;)}sC&1R7 z?C0Zd5a&VM{|bgd9bE{{E5GuTl3A4-0kR$fc!XHf`EKhc?+T11l=)A9q1;F&Z`RQI398l zS?2DPA^JMIE!He&xr(U!CUT!@F(%mFeAxb;>LaUkTtCJ(>T-$8SlekREo13O1QeEc zoX=!+8PRkOjryzo^(iMCA6}Y|NeyJJKF5Yie07*VxOAH-`O%W_af`>P-m271?$jsun zmaXxoplf9N6{RfxW_$QVX|_u79trE%Sy8@a8Agj}1x8`+?P58urih5|Dc4D7w^(6T zQC5&&Sq{|>P_mw}r!EP1{JP)<_pd;~`4QPxFg?igjL{D-W zQMBL}xfBku!zEG5mKSJWrZIoXB4e&y@IFvdYvDkvnp|QeI2FWZ3PJ5QkaLV=u+<}^ z43R;38p7!nDrnVRr=I!TV{RScJxPO2N?VdMC!VOyLIo(^0Rq}Ti9$_1FF{R>g*I0L zaeKqZF8%S9wI>HvKH7z@$bsHsh$;0BFGrsx;Nw!}f%? zj5N%nE&}p6*U|_!ACQ7*@T+xHcKBH~v!VTmu~u*Q%~Fto>Ibf_h84Ht&Iv-mobK{M zKYbyBvRE)7OHG@0y>*ey3;wD*(Uy8m_chT^zU_fR$N|Deb2p&Z*oFvOWszeBMlB_E zdB;dcxgJ;qJJl}{+yUs%5Z!83ee4J7hS^e1~JF;;!EPIlsTi@xixuvYir4yYTf^~%GJL6 zJG!S~TiGQIQ3NNxDBRrJe}@U}G8+?;jlr&mBFZVrNYKYh?2$1=jcjFx*9%FgVGmnV z7Ma>#lfMcV%U^v?Q~WJOntj)aaEMF=6h6VkSv=xGqFwqvl!yfy`8X^p*g-aTq@Fqf z%-Y5a&9wkJd#($|5r?m|6byV42;n*Sx^{S5<5`DkK*@X8K``%gdxm=u+o*pQ83n3$ zPBlG4IffAFJJLtZS}e%jquN*A(e&ysH+U=v@-6mLh1s%N9VCIB>08s)*sN_RwFLw# zGvj3ZeKud7uL33a%+=gOqXd<0L`SaRfI+44%5Wq=tr(ukr@2Uo3-yQdGPD|=&5GY! zC*9R3JPgK_0a7p4f23XpIo;CW$}XSD>1Ynf{n*{Dn>n0)Jt4ozG(;m!Wo2+QBDn0d zeTTzh?n2dKta}CKmU@jc3*EYX&jZbD5?m1Fnibv>5TTBUq0_G8r+(aY^wFh{ZNgb< z{;Zv2J1gGO)aV%SYN@{qFtUqvt1S~R=~OGXSkP(r~tI`rUa1l`IL^_d-E@WBTaWd*PzWuo4pVQ)EiqPUa;su5#_uN_WBX$^P{hX`Uj z0pkE29|TvuKY0-Eu-famw9Wr*e%wOGihF)`N>nY&X4%VJo=iIPi6q&{aC@}HM0_1c zXF#d=JaJ1<-;{SKLta0BqEOa%>50WbTGga)B~MEsbsSlg=6SPZV81SWNi?WD6E*s* zBys2_k&{r|o7pA|kV1Zk@j#E(vD9P;70q$`sV!bppjs%DD&)}Gr9LdSUMv^WG2d&> z0k+^Z85Lv^8+VwAeVmxmHk^{xzkX3-jc23ZzhCY_HkiRce^1Bpm~;)J$G>b*LZ?%u z!0ITKJKX|P*~G)Bb}(vx`9^ZebWH;8u+~PGME1GX`XmLaTIKADZqdir(265%=aWEc zB6IK=C`HdOiPo@b{S>r-ooWqps}&&tQ$llaVNJ<{0}3lE0tu9c8s?|`iL`P+rWjR$ zac{>_=ZA{<+a%1^++^X;Yc*_e8^Z0XT{BBSQ%U4ML}-)B=VL7AfSJ+9o8Fq_&PEM{ zzsy0USDz+ozxgo-9mAv&{g_W(T$bp0p#JF~bUAXVuKCoW)P-+jqvH@gb!D(`WMtwI z`il!;i%+%oHJgGBJc%2(*~M-vv_pERt8aT1Ilapib)&4G6Ci+73s}5y%Zw8(D^}VH zvMs-P9>&j40>j;gD=RCGfPwTS58owV^wM#&J#f>jy5$V3ciCr1WKdOAodH~QmwD4I zCQE+Q9VfDxMQH=ZUXFl~b>cAW1U@5U2dglNAmDcFrI1Z920XHkb;i;>Ck);Zj(hC+ z5IJiST@3nNxlaPYx5ZeVa+TAr4u3!3T5GNf7-~{?jQF$`dmPic?ziE>fBx`cci2>l z$Y%H7!>X;I2VF2Uu(y=s<`u6 z0g~H=Ex;$paMx{(8xA-CovwAc#;jfg3C5(RRRh>=t-tcHpL?L_+hTyDqmVCO$N=xD zRzOX2QhzK&au1ycx{Bvu8G0?@}Iw&(R;^Fy}Cl*;xH-&0a*lO26Y7Kbj3l1IW(N_TPfLq3^3? z8qFpc?y@OqSFGt>&2QGJ*EhSjjn_xn{Ku}Wo>v{7=E*ll*)s_vL(SubnilO}@d)6s z{Oby$R9=S662|fT=j-3!1L?QW=BamCiQ9D>kB0lGA1XeVf!eg^p5VN3(H<1+(>?9~ zBh7uW`3*2vDLa&m1QlJr$w)3Q)}4R37vF;@)}~K4||{nx+Dzb zZ}35EWGg{%rL`}Stzb!^M`$*wj5D`u)_Hbv%KU>szUlJ`3=B%0?WMkcgj-{VuQ9xa zDMCan>E>#!EC_Dj;TO#ap6@~SPkj8oX$6O&Y97pHxop-- zyrue_9hZMeyM0lmQTe>I%Qf-BkyS#TV%4W7u%P?;Nc2vT+Qx>I_dp*Q+!vWiU-NAo z;xQGvWzW9?Iz-elR5?6cRtVtiMpgkj9PBT?T#48S23+HPmEo-dLpP0OxSsCUTe{U& z9*6NBt-xYtVJA8mauqk6#9c2C-K1`iP-0k+t)fvg*_t-zn#O z1z~iPF%=m!{o^KJde_e&L8g&GK5XntR-y)@?R~WDSqGu zmJR*Sx_Pf8l0kr!@JaoG0k8$X{pP;wI&a1y;I3LkMLCqQ`|~)wT!%O$8*tyc?4%S> zI(h85_gF_7dpEk@vOc8y&d6$BRea(EFi4!dxhTG!4hRf%FCS0kMM7R&lwg#&U8dyU zUo0COR~Jyvs<}Gr;FpEN5iTzpZ=*CVk=v9Q1m-Fybhbpm*UIu)ZK9{&Q52Mb3-mZl z+V#zQ1h9#!9Jmi!6t3ezJ0}BrAWXhT_FL|= zd);(f?P(`!g*4}WI!7HA3wt$; z&qZQFi0MJyrLXE7C@x5TO{MKP1wH|c5_hQ=+?3>3xxeXh$vL7Ca2Y^KMrxsrhl#t+ z`!S5)bOFWANz!S3hpW6|Vyoi8B6-*t@K@K?id{Y(+L2H_kH1^f>}#MFaySzDM#@S> z;@-(#3tD!}^|lfJq0W>W)-#t!SpOua*Sfv6m#D{qVZK|G(za(Q7J=DPbd+qu{XsT=h6?Vra`2h9*{0cx-T z|4C`clnlq*a{9-0ksa>c`jKLRc^SXm(Btd!Mxp3z1`&*NAdNLOO0fBiYa@}8xm$S* zIsx1-wHc45tF4l$y+yx7kqk`(R%s2mnl2 ziP0n8ZvigjWz^w*lfWbH$}glnmCcx*#P1k&2?*H(zO!RuI4nqx!OcQJy0Gs#zyG_^@(5 zvvedA7%1Lk;nZtJprxljPG)omhMFa*mp4{tW`H49Nc`D70yKfCdkuSZuJ7*TruEyv z0Qng)!oP``f6Xw@^p?%N@jJ0*A?Pl{Z`L!!Pp^YR-i)rvdei!U!&(GMkiKzAN3nYD z;E(|L^75_d(Qf{bJUQ8&x3Y4bnYr?bgsFt9(q{to)r-d<-tQZ$8qMYF53_^~bgve1 z-RGOGdYUTu&m;KvJ8T4ETa_^teKQ_w`xYyK7`)WQA)%Kyr%k(om@e+CEXl|+S)owO zDMXU^mv;;I@JO}kLYY5U&}37lB=o2xm!t9soq;6&?PoI#Z0N=hCD^j}mJP4**3;6^ zyNYm}up3FCP6OAm;pqHT-+Tsa5A*Q+aP86(A|$Ct*YdEO#=*kd%(f4Fv_90xNZ8Hu z2q0wtX~K8i;Q_!!=!#G|OVU6c^ziy5e-W%Pui0}L9o{IXS`pS2K{*4s*o{#@zUYXL zpH4|m+YJVGkx-Lm2`dGNlM1Mdg*P5fNKM@N$$N70xZM`oRr06o9v*|7ozK-Vc#jCG z8&CPS3d%u3^;ZWyxwsP!uNw7tzotlEBBJq~rMLs3jI_v`p?ix*xpMB^ySn1W6d@*( zwwiw9ncDBc! zz4_xhQdMVPkQKRCQgXUIZd@q-lj*@d+-C6RJid#GA`LCAnN#q#FCzl0YM(l?Ky1f% z#y|H98e{NQbSth^rh z$6~^Nu?r|U=I!2NK6fDwEg{8^%js_EY~VJyqZh!)`;C1ifwev876#}A8vjl&xI6H> zN-RBO6eBW+McQ>&xeE*ANL@;JXhAM{Ot#9!j|F)@N>Ck7n-ymwC}L`Dq)IMU?U2n8 zZ_$&I*ThH3%Y4ZAxj>U>(eNYPPnO)bU3zU(71qGY@3I>{DdC>xU3Povd0Xt%L{Lq1 zj8bJW!#?kJb!J2KSo)|bRP zqe}e>>@1E3^cgDLwo5zGvd@;@3;^LnW_^GNHzHG#mR--ab5@4SW_hZ0>;f0flRTbu zYCygz9K!zRCFKR8y&UzhSu#8URUfSQ#mHKM>2;BmQKyH#}Pu>U5u z@u0Q%F4Q}zEOzgUuBD|KX~`6na%9~o%>3!dgVc=`#X7e}jnpl>axT474fw$-NKsOa z;45D|Sn#JzDk;>g&PoIr4HarRpZ?ep9?ZYHrxlI6oXMUeCy}`Y0093t(hCerVd53* z#DaA|@**>z>4(+7W!x#%a8~q%R8m8ibrxKLH$ZNCIlIOeoj2YC2W*{>7;E@}HEwLA z1@hYBV=9?szPYs_T?mQhe0o06>OX$qre?)+Wb{@}LFg#$^c^}BJk5y8a}f4>d7c$H z3T@fs+wo^K%A}+jhep;U-z1?!k56fPFSzc`RJaoGyqx^+M~acJT$-apfhiW&jHJf^ z7V0=q$*M;WulLq=KOXa-!6ZVwui~_N()l{Xc|T%Sup{D=945805?R~&E^yr8Q%1=_ zPTXL1otEV;S{f?F$!>C~s0wb%#1v^XXf+Iyzw1gv68AEF%~4f8YapQ6){#}DO&5@( zjrbJT*S7h3>UluWpDplVKoMz{|J-Og5KG}e1W(fr26kc!`y$~CMf$yoO+N26+77u{ z4*|&tydMJ|%A|R{37jLz#klE!Epb9w%UATvG2?9vlD0@-V!U4&o-N z8?_qLx-cANaC~I9oLv`D$23}@85rdU8&Z85tajjlje8LT~xm!!`x zKSPi#q@=aBmWv2OC``@+$YJjCb*wlLVI7u*KHxE(dm;T8f_Dj|G%W6vw?iQw6*8)D z&8wNF>-gIp4N`WIxwAb#esiD4XjNnRs+u-7HhE2ghBT4^AYe7Pc6oPQLK^m(Q9a-! z!~UC*F9A_?;LgP}-cL`TGFo=(KA#d7(j>=jYy_<*;j?@{yWxqv!@$%lN#=XbFr8QPL+4K(p>&P^FX)go+{j(^@Ynx4Ky`HSNqcy}Dk#tZh7vMS`={TPO# zTQxBwfaLQ!k-9a#am{n@$77%drAJK&@ltnvdeD2^CFfBlL_#OjDTC*aGD_At95{r+ za(LyOZ?#blldo%k_+-xM@bfJ!8wHW}; z&ak8t4l?JuQqj52p!aq$7c|a=gb-tE~|4GHF+^ z#}MKH?Qg-)(S74e74C7689f8#G5rH%+AbXOL)(c`)A=j!`*$t z-$ys{)b>i|tKgnA#ZYLgkfg0#V!yUME5b4mdXGWZXnaMWl(Y>dEI^`R^?HWUe~7Gk z*k@T6xLjPVREO-m-_iiX_CPsK+ZA5fs5xqpYABr|pw;`xd3nwvg-d00^1FF7^wxrA z(64__{#DGz4>c=?wvi708ym$J^1hgNZTC~>@-DU-Enl$~V^a%_^zg{h zh5+=%1E6?##5n4D5Ap0DD}APCTxOVWk}Cv?63XJWki;y@6ZVaql;8;G<)t_QxI{M+ zzaR^>|9P!xUIxO*#I~^U8_`=0^co?r#U%u@JkR_*_c%_L+Jg?!RC=NrPn#L%e_V%u zl(vu*xR|1Af@>^>iH5JsYg>@Ud5}Jh6LQUilXfRJs94-?+6-$Cl!Ruu;qpn1M-7dQ@zJNH#-LAO zcU5Rlqe2LB7DLT4=H;LtpTSy^t7Sz#KkP31*UD;~Pz8~pH;^UKZ-|(|AFf}X6Sohm z;p)1To`$kRj@F_6fa&}BwJ)%57?rCHx-f4W8c%SJc$;{9f{1`Wa(l>sTV7o#P8~p; zMi!#KAY#{WMEEq(1qh8Vqdm`YpXU>sj&R;(itd|=$p`b9`LDuHPLIkO-XfxzOgo+3 zRpV|GZ|{od5GJiPNAfPAnXh;(wYH`q3D2=3OcpAZCQ`Ip5V@%L)HY z$1PG@MNO+ArVllifw)n!dzEJn=$uyfJYWt25CS%!cW?tZQ1RN=V;7>F8gEe-2lQgc zmig(hVY0Uol!cVZZp`*((F2Lx6L+C^#;lQ(m^{T2W(gSbF@jiji5hqqP;f)OJl!c) zmW@8LJ_o8u++(B9fxTfZC7xxSvl0Hus_7bT<^J5e%>Gl(pXHN-bqIhaa%)E#po_Rc zpSo;Gl3}X%Q9lUiA3_~dC{-DMuKgH(pSmJT$3wLuT#-De)b-S|$q4;volD-0b}ql$ zSqW~A3B$psD0+go*56r+OZ7Vp6I|K3hfV-qsPA>D;4Eq&b0FdG*zt&Fd0lORaZ3}w z;Et1k!xUlm04zeTqN5}l)1&3nMu_m}%^e!znfHG?+j})1FeqArnA5%<5Qfjrkky%3p=uV5q@;XaPhq2;!`W)4SH-|9$&IzEr`z= zOY-^G(OE#wGY+yL_2 z*y}Of>&RkQm4#;g)F{J!Rr@4J{-#~>WkR8D6U=T%0`k7+=;w65^=Fit>8MLH7l}X$ zm+(tqcON=hIe?!-H(t45ZAo`Z1<}F|dU1|LvmgzbnH)nnbZRMSp3k=~wu(({~;A*1L01 z-^jA^uf<^ajlps8`zHqH*ZtUZ)|-}ACWsT!wsyT5Z*^fE4T+%oRQ>f78Qg%F!SSV* zCTqBIxTVb`JJApjdZQV#tOB9Gd^DFTLoPRsL60%3P`Z|hSv{b&aj~+?hD1=;D@6Vn zrH%(EF9jJH88UUP>a{pNkDeYZ(F}+UUpNFE?S|FE+ty-3IGKKvX8vbPO9jC0E1(bY z0@08OsOuUe{fe#K_eYu&esP^rej?o+bc*r+aL}VI4KX7NwQ7d3D3eB;kY{Z=2w<+N zsw&iIW(N<%{$hsrK9arf-PoG^*5w*NbAYk+{wh!GXmj*`{+;JJ|Dqbb`YQm-KX?)$ zH_|D9bTq_$TOXiPc~tQ)=~?_aY$G1@L14Fn-OY|}*b0XcCcMmY{qpeyqx!e3Wj7V$ zqG{?EZDH#+nO@~LEV1F;-4)657wEp|f5JP``JWH2S#|^yXltZ3JJPgLA^)jDcvpBH z#C~w$0crh$p`xP$iyYz1M#Ic0F0KaFduq8W;_~MWH%8*2&v&nCSeXDA%x=5f=~eoZP!0SGpK|=Y zt(ELon(~C_7q=+V>3?Qv{o)qg@g2a)c)WieMfv?bc94yUOaN){Z*_W3=k+}`I;sai zbD+xe)+3(FA&(r>-#boIH%|KZhscyew)>5R@+SX9Qhfh^;TJf1;L!T)e(yFpRJ&gr)64tyulH8_zwzF$yohP;FaR`^>@;>H z7=Zx+5X*OTrzrQ~cxEG-oYAR%bb%2APza)x8ilJ^vmT@h8$QqIO08C z;^SKkB=NHAw|~`1Gz1Vg5QnfQcPOYoR%qwS29QV;}z7oJTIdHmC2uaCrX?di&qmod5qj{GB8G|G8g@*ZEje zL$hEguAub)7BlVtWJ~i}AJ2`~k5v;^1JxA5lHe{abShe!(t|W+N*3B~U(P!WDmnnS z*+dB^p5E-N`OV6j3i@@PdP)8Z*!F+&=A4ZeGUMiz^vC@~c(6{}uk359%asMp3OiSk z*lV-wkARHPOYB$1c<`_2=f6P!e@8#tEa{K`Sl#-sM~ytvKL}-hs=6P_;-a`R3^)y@ zN3xca3uqL)atg8q^obrk{P>H=mit!$!PWXuI=lV);Qua>Ej=W@S&Pstw~a+T*!d(2 z&xHm*JcsNGY$a$!hjb+L>#36YSE#;2Ab*<*B@rrf%J@59_zf}gZ@N`5pQS_L@%Z30 z^tD;ch6NDuXR0VDjnA~Kg6l6tn@d*_d3c#I3L;3ESfCr>^aO<-FS1p?ZxV1>b03FuwcH-ZI;!!=22?`pY9sU3YH|!Dv zI4v3DtV+Ahm{pzY<-E~!P z{?~Ud)pz-qMNDvCsLo%+o&SXNyt4v$=K0OqD$2^oCxae50CeoTM@444MgiO7s5fD9 zceS`w|EnvJ?LG$}|CE{js@!=8IxCh1ng>Oy{{}h>UI8?0S%cB%wHVuzbQ^yj`ueX+ z{fOc|XO?_UPk4AZ>=ip34lp$wP(<_!7GImv_oMm!GFXLcdGL#p%N zO_99*Ht$wUOmZJwXX*B7dfVFLB1`kL}N?F-3lKYg6<$F&(|r} z1NRGybx0PSwCtNUNTwf_9!H;>gWGLR9#1a;<^$QF}R27dYENSC+UiI-A} zdM`SX;osoWEZEsD60faX{D+?$c&m90GAbMi4f4kdGzo_agc*v2M@37IjK&5~=-66v zYYx~28*$GhwA8$6K1FomoVn!Nz2tmMu)TEpR58gkJ`jpGE3pg#h5}z>8=3UJIdmxkb{gsu zg-o$jRNs?NF0qeKt~1IfC!Y;5lvDLac%Y0yX_tA@qK@L%G-y3p4_F?{H73&VIPS#P zN2#+Uy5=&~6)4D~Ml_q5<*5V%Nm>o@z{uqE=`>gtBst{nrjtID>=o1Zk#`L~>ePal zOS^V*D*8p`T+1TRc@-_9do7Q6LbMW_bD1;wLL=ZwRQp3D@FUjzCx#!O`XB0>+>TW^ z_;!yR!}Ds7qF2~V#$C5wpm*EzbTkgJ(jWXl2Thgkr#?jbc<(>I5?me}Xy@Yzr&3Wj zLT?B1edVL>e~(4)u5zk2F>w2&GNEb`NF-%fH>;$fCD`XcucQNt@{0ZNMG1iznn^0m z+5#H(%k}BZ6@tM=7Bd3LyE1d!ccyRqaWR4pI7_=XN)(f69)+&*SSS0LF*__)r-Q|-15jJVyj4{rJTXOk~{EmwI<$AwPOcL55VdN}XYF?D$x9$KeoKn^}@P>FR%}_R> zV{QU#W)uB_p`}QAD)N#>lV?w)J!-4HnFPwjp4T1)siK9;Gx)Zzv8}?$8mT6Oq_$bS z)}XOLdrU+|nD#;jTUc+qCnD!UFM3jKd}4w%4))6AWlFXWpX?R$_^is>pyD(c2E3;r zte2d5%BO!)gW2--XCp%da=vI$WDl~{h?Kzeg&C3|uc~_YQbk!r6}8U9nva8e2UoB> zg&;ug%VuKHhbjq94LW~ZRbh+j|9VU-5k)E(OV*`~L)+V5BxM?|Qq|dIYY0h1G7eIX zeZF1riWrK=N(|jUZZ|Op%+N*$2j4dcmmR3}`?<+OZ~3h2<|ZGo&>Gzr5x9r&?mxbM z+9P$IdSh~t)V+|{6K1cjsVF)tKmy<1yLa#Q_PcI+qboG{j z4GjVFwRbHN4;y6maV)K7vTvE^PGH#*)V?$9V9Al$_boP)Of$?Z<={t5Qu(*%iDT-C z1cgx*!$k%2U9bCqVKk%udKOzpBiMQ4H!&jj3V{z5ST)_vgzA8%gy&|MpJzty6{o<( z$tER(YC}Suz0R{&+{Bd*m5}R1sol^W?K;=hmmk z8XlEU6?SomWP;m!!vM0@y1F@=3fYt7q7l>yIf=0Cg0}-VN!rTf$0$4#(lV$w)MeS|c0n}DQycmX z)l?Y|uHtBZOxf)8nB#BS&%rb}9ddOr0k=!S1S)Lhr?%VmuIE0eiawi`V?{4HUB@zA zRFvw96YEy9Bqc#T@l6edqD9be2068l40Fv=GeP;moLwE@59OWGff1TxF6M#ZaijK6 zh0|_7KjKIpKf;zIYMkcUO6YlkzqzNVpiZ8d3C7HRV~~+81%bpFt*hy3YSLOYRf}2> zmpLz(OUTG5%qU6P*yLKq$A%SE1sxt4ovhf_*w4KV;aS{Zj56$f%hY!3v+twN>$H=w zyt2~PE5Eh5nNeG-Q7$c`a2rKVVG3hndH3uSg80Y3@gk;s;H+Yj^msAWEC50nlautg z9mHwB9(n|yQ3av|G7=Jj+xG=jhA&ZGSeINBS0!QcyM9w*vILQ1 z@v2+LitW;266utiE~-9|_q(<|sBdlhy&o@A+3ee35>1fRPQtCdq9UV_36&_x+5DLu z@z>m3L~0tvL5kiH3Y*X;s+ojej53T690V57veNPdtL45}d1&?TD@`bwVGvK=0QTC^ z-1&eb#CQr>4uqP{PNF8flo{F@5fMpTbB#$h#Pu{DZLB-2e8+4HcAl%VMH6X$H2m2# z$o?u+7%$sHn$x|DylsV{!FlsT0~W0StwbRqTS~4>eXUBz6Vqw+x0f^wR-r4B_k?1@ zqBA-|Tvn<(Y4P(j%i6CwSTa<-dkL3t67wRTpETFfutvnbjxbQ0&tgj1Y4wFnmCVxz z&oOa}3`281hkK@|^r&}jqVFV4Tdi%a{l$&J|5n)V>CL`{)s8Rgq408z~ozj*!6^9G%b8J z>qhq@%VPoaY3P1TSa|lKSu~}Qk zIh$|DFmlZ8fL(kUIY-VYHg=@1E<{$Hc}o|KHGyFi1T(h1D>|hQCTD8 zI*L~lJn=&taV59B##YnM3=2*k?V%Eef=TU5*F#lHElyZ-0jgM`^ z^oP`vZ}KPk;wFF`z}l1*)OGibP``(ZilY(+`STNoZCm{2k#4kFV0ND zV_`fflVK5J2B)cWAT`jk$$YvQS}dpD=e3wV6dtYlDyR5Yyzad$ga!D6t{;1oc%2MJ+PI;vL6iZzj*OO9 z)-rae;)WC3_et5)lRP1CJ;sj;geh%JQUrt$}J;m|z^dp7pePy)B0o{sz ztAWxWTSs7`D7Ybm;zmdhpK2tJY@E1$(7?6Kc;+KM{ zO^?!vwA$ZM;Of*Q44% zf?K3jqTxK?v6toQE@=iUbYpa2PwmAiB;NVDo=k<8Ys1yH6jts4%1Vozvl8+1{&@0L z5)GNHKsUrWHkA}Y@&Ok_U8Jf|Pb|+#&Kk;>- zn^%9mhN_8^1e?}KH(-r^`#J`1-*j=14EtCL&owW`Sj$~$TKdSJnVdsH^qGC}1UAMQ zc7VJgY3s4-gSiLf!vxA<8&}BSFC~U3{SVWAcyW+c#Cn_c$UZgQgj4rFF2aaNvL7xX z!?O@6DxaxxY%E6xs}^B(Uj%6$&+iWYcxbR4!(-8eU%ELMwiF&QrwBP&AD5<*Qu3TU zT$PTls8FKUgU>mM%O-PX%l#_-9D##}j<>dtdz-q2L2l7i&=wv!rd*U$+F0k|yBeNJT0YmXZ8>){Jl1ot zdAXzCN$^%$j7LgVQekLNw(BxpWy3@CDL%O!#lZMs>dmIKpn6UC_s~a}h_){>NU+sQ zbE(X>mqntVIA&1QgC4jPi1rv7KVf>3OQ1k(O0NWp;x{qw7~-NwMSSi;GwL483U%b_ zs)o`zDoaSFLlYtsUSy|7>J^+aN{@8}ZkG(?<>*m8hc2^KDI5%AZ%#Bu9G4w_<7SR- z@W_|E{qn{5?W(I176&&9Imn!^_(J%RI5C@Te4>tBtz;LcRwkCOR`mz5AWNsU1SJ;* z5t@fGU!BUryGhl(vAe%t!!5=j(qE1qnY;;=Hw+mO&cJ7TN6@nOz2n}3wNGu9HN(qt z!_A!wqmC_c3%;_8={i)`yX|GhVIJ0;FA|=YQ9>TLy6&lXAMHbASiuu%x*2Llv7p|_ zRG~+kV`{1j3e>a{-);+aE8a(CkWso`3=Z`u#fuTTwA$k;D%usqFbk?nC%%04`ETA^ zqDb;of#3a&gXBNY=~CB{(jKZx*r?l-551tyH>yt3*=ok<-tN>RQnN2V0)2?4&Xj!V zy3@CosfrfaXg-R7H|dm;02=CrS$s8obZ+h~nQVfRQHDG3A;B2@f_b)lr_D)c^utTi z=(#ty5dRRffRj(qsCXxF-4PKk=FCRZMyBrzB@)(9Ebubpt7E`I3yelW? zrPrR=L`$%0LS9JTPPyq35fRRN{fT)b_EXt45RP{+Ra1ep{hqX< zf<}YWD{Z&k6oqNZ`wA2!m@DLfe=1tZ31M^#&P_;0+8!oIHkg1kNKI94erV7)%%!&G zq?@_~V*ZdPw#sDJp+Mgvo)i$Sa}do7*PneYx?DM-Tq~R5DcrS{OspvO4Uw9geC>?H zpIP=grc8UE)4JAwz#VnAS-n*9vPSFJkJ(AO?1_Bys1$x)WvHLARgL@e){NFyX`m1N zD%4Dohl^pS(ziERp{u=TiEwX>?h^jJoE*zN%dng|Vgfs2iE25oR}g9#&+BvgwcBinlcmhLZAUdCL(Z?dYT(j~YTPAR@dZ$M{*N8wQ)lmV{eUsR>aeW8gOU2jZO#hkvB6crNa?!V!kqeWpDa~0`*nIG)bJV;?Q zUH~#pGcanCiju_FP+JA@?{GB;UPDrtEOH32pB-rXWA>gV#Kba?*S zfZlTp$ZB2Nv9Q&dM_xk-cpX8{h&UPI4<{zI+k5Nr__MIOKde?*6O+Ar@ONHJ!XJSM zR#uek6SM0J0N-zWbAZUHW3BZpnP*X*&2!T&@|oQ?ooC8aEkcJKy0+O-pDNg-GIO6O z!L+WU5*qAPLIVzVz)py!MIH5SV+SAMgYUazx|mHWxL*S91+L_tr&)$GB$?!CX%4&7 zbLGz-e7`)W<=tTKL+LaYuj7k3!Nd;+30T9{ec2r*zUjY(sc0XFx)o{XHaKKP%Tax4$XEM+`Z9Z(P&@>pip~>T z{gQjZXtRY!rhW!%Qfby( zS7l_?wkeK`N6V|ItCQ!CueOM%%NxG8mHb=F1uQAS*L%KYNC_q4sNj=O23(ymRh4gw zg3s3HbS-0?d~^u%1bc@?yHW5E`221)8S&V zdb)%`EkTxW4OQ&iEkkUQUR7ijDpVugOWE-rS#r-%qfb<8%z^Mi>{uE zHY|l92Hd&~agiQLIsXU`8W7%ciIGYjd2!oj%w>+gQ&bN*4UM{qkF54ooojut%IAud z$0(Z)tyS?^9Hq`0$oe~znman^`%l6K$V{&;ZxtxM^DA@D!HIv8C!wVi9*ohy;9&0!Ik>zcy=-v^U+B%8Zynl2G9*!OQ< z(<;BN=~&>Jj%u=tKv`ZKrp6Cz98zVFW3wA#z3ii6Cb5)Fdv@r{wgxR5F4CPmT4@O=XcFP@ zqsVf~J{5qn6IJR`o|Mnyx>crYQ9PH+w}^VGNWo>QTM`gvE}dk z4Y|;QPhcq(wz!a#Dc9up}Y!-nFG{lnw3{g0ZUI&BfKlpGsZWbwF+ z17kt{xc5{_0zxczmH$|eWOu$ih*0wLChAa^w1z~+mhiMJmeHp-+Ed-Ss|l1jLT5jl zSHrH%Q|V%~W0lhStHRK`LoW{4fM;_i{W90l%+#l{WBlswNLpW@5=19e9G_jpeOmbn zSh*3v)}pdR9CF$nHKF5jKSsX@2$gCSo9~DHyE z@CQ!U{Q@i;+^(a2MRMv~>di<3UpPA(%$!Xp<3U4?$L8jiLH8uJ;aiAlD>t3nc2Nk# z0J&K7J`PueyyK!^gZbnxPG-WQvQ&(Y!UlSevPLT%w%0Ze5k{x9Qfbt9`uuy}GV2rN zY|#J1-djdR*}rSUw~9zgh#(*x4oEqOG)OlLB@Ge-NOy;HNe?k}w{)jS5218-cX#++ z=)Ir)?zQ&+zwdXg{pDHf{S1p4uIu+Z<2aA=I3)R6I!PY%aUy5sx_$D|fFvX(QfDF~ zhuy8(1T_|Cm^Q>w76j)>4y@7jjwvP(-url`r_P7P$*m+x0{@8+-`jrqG* z*(~Wby}zh;6etjT3)pwGR-#hFMhlm}n!sk0Zj&M9bH$w-mc2PS;=wj6Cot6cwS z*~FbxZpgfdKDOi-MDK_0A;a zed`B1&gqM3Om}u^29O|aw{sfaa1`xlqOuVlO;?DH*90`4!)(UVR?au+coA9A@rfth_501u*}VxasHTVHrpUGjztE0{VXOaHv7ykPv5krc%1HS+0j6@qxgC8Y*Q9nWh$3L zK~{G5W}g1OxhlnK%&ImH!i>&h&6f}?*kg7`j~IZX8?82lzCQ7Ia!LY{T4xyj)AkV- zMa9LCe@GX8o#pR4Gg7D#{g;zk_RATUJkeMgQ_1mKc~s*rV!xCip=g7?1zI}O`+Pp* z^H2?aD7FN*2!g-YJhuBaMlo(?C{jWm^$o`6GxXk>$kx4-xB^ABghSoiW<~p`X?B4j zr2;9uK-)lk!|FE*(UZuE!gxY}v{vZmi$N^kT(=nYXB{fkZ%@$Go@VDpWyH!#eozSS zo&$}q)dJKC8Dr{vq_nCHX1tF@K&7~u^(f- zIYN8O^`;gD_y~0qvM&(ir>~W!Mk62LLIZ=H0!A|G^V0Rc_)~Pcqz3084;bNPj)s0g zHt6cTvFSVQI6)fLDwvS;8Y@-1SRT4q^Vn6D1KR=F#dsn88%gII-(>LW*#Ea|ZbxkR; zbs{>uKSnfIB*gCEOeanI*PAH>TundK!$)HDq!|(<9C)S>k>H(YhGJ}7%&2H7_5&#N z@@jKMzm%IM+Ydl1MUcvp8?cPMq%8~YW;<8s*a}0W;cq{H!9#8Mh@bQDigoCIvk-t> z$L#Tqc@WaZFa2u05O`Y+=;=skr)W%tRlTw0`6osG{qOutK?1=GlPm-pgxp1Bb|Gd`y=%Xx3`o`m|UuQ zNGU@|T(9BjPAo8SNy#(H>$=FvABpE6ZCDVv8*9?w-Q?)!5|&Ra7*c;K-(^71Z9`mb ziS2r$I^SSq3Fmc=m7V@ng9W|EPd+N9Q;K|5%*SVrtIgyh)W%NszYc^w#xd^IrP0wm zwFuuuUTg0iS(NaAf~a7Z!E?|v^PI&!^udz3Y5B~|FYsn7o@jM(d(@y!HX3%q{9dz1 zbY@4T)IGcF(_t0E-~@9P5tqJ8{b-sFxq1;{^yvV*&@q24W%|Kw+UyINVPiHdlXnV& zlW%AS;CZ^|c_@}2hZWx7AVjgGmHOP-eOYQ9EJHOJY@FY)xO;b0Hd2@5IXmF78~K7! zK9MO!_I)VKvoTUy;lL9G38k@IquCC#*^iEHS!QJjhCm57KSf0i;Z+S(w&EMk&EswN zxd?N${Yt&xkgRijq2JQa@g^IBum38bjpD&S0+s_&e*=j`loT+y?t*}ugj$d+LF{OD zp`_3{ze&X8(@i?XD8+=Hk3bzpN18=Ys05>vpo>b0CAHGvaqF5`QrfHQJLya71YCZp zvY$iMY1=Mto}Yx{#bNi=8`vER>zjTeF7?**AEK!Uk#r|~Sr~gIm4sj9+}88f{!YWg@%+4aVd@cZk^NpL)8 zq-g#3a`-uW)pZ)g5cL0{uZ#Zu*V%zT{`m!!77&^vpS9{nyypg>nl*p3-jB!)kzJ)` zYqv7Hd>|NMa3tLO6{TZ>vB|sb?j5hD{{(mbZQWY=LO5x+Qlaat4m^Om25!4#j6P(T$wxt+--m(K8TrB^dX;ngY5Mv#_p^!p5I zaYHxtw*fzyu5*BaPJCVT)A#o;n)?1ln~RdR{pXAJ=Mzzva#L-8($U`D{*!wF{~rcs zlBmBZV<`@hyk*Hr3@g#^TYIl9f1-RPeg=}n_v)JES$V0ZO%PDS*bkO)X4U&Ak!42M zSNdNcL?xX;d2ldVPj~l6rShLY%h>)A4ygGI>7b~pu~BnqcsP?OMjogJXjV5~(C_R;8}xo$t0Z*B=>7Xtz|&vc;NA2+ zX}h>E{q;+zHCk8dABCt5O{9ayQKXE(kdTn6Rz*+<_7%e4B;O)06k@rP(}bGUP9v$V zY2v#7j{Z6m5Z2zA`GkQBoK`-%Y79f!=>KvfTIC|wz;tv$pO}2aI%EIQ^SA29eSg&p zaOINk!0JyV(isF-h_eJFwVp32D8`0~kZUhxNx9Wuk?>Yj=;JIKOMFIh!(sUzQ)1sb z<~I~jQa!-64(?nmYAY|{Vl}K7_>7h6VQ)5~J6up6R(ZUkO+gfFwxWI2Gea0zPw~bFfSuFfo zF;MrVjB~qmr*Pn9fZDpH$+xB%;PcD=Y2Iddq+@s#VqWK!OF_|h}{tVA3g|Kk+h;B>H9N@o8&F1MyzQf?x{8k zVI0M@H~-1q@CC^WRx2zKDy5syEB?)Z40zEA_s_zI3dZMFWk1Fl_vW1uNv!)Qe3@nY z=1;V=@yZpqhhvj52T4eH5m!9^N7p0beJ&*g;Iug11&_q-YJp%?6xJ#}QYP85Cd6CH z?ckg7pZ>1;<98_JL~4y!%ydiwQA*O~7qw2F{dHmYkdGiO@O&cJE8n4HW9gXR*L*t& zwE(D&y`idM^4~Fx=>TuACt?rG^b|E-?H?v0@wA}7QrakYX)<6{j_HuGx%N8#-_O>| zH0t-Mu=;nWf`^fjF@{O29?7Enp9ZPqsP~mAbPAwtSR64{!f!N-dRnf9)fFiwbO_8cPtNl`+!Qb zDrX*Ybuc=nwyxPZkz}uWrfd|}R&@L)%XU9b!6zV)8ZXv*#BT79PniU{`VTxhm_4F5 z^oh)G^cDNlL(y6jnU;V1^g_o1TE0=~|I?3ACI9me=`HTqV*H6oBq_gN68ZnNA44Jv zx-QwjbrfPq0)=_~4Q~EtU>pg+ZB6Q^YqBNWO}5_qvkYts65Nc8jUno6*QuGAOSA$AzhZgrx4` zHg9k|o5M$1T3Vu}p%DSIvSw@4Sm2V8&Eq$0+PRBv!zumBWgYVmKLZ5>aK@&*?*qWF znr3ZjRoOAejNuXo|$SYLe zJmKHTWZ39`>udUdj_k3qv7u&U{A%v-T{}}2*lJJ!5|MB|!$Tv=-@#a9VTEm5kT=Ou zSy@6zMy5i!C=m0Zbx#j&Y688aZCL07Ydj!^{x1hmAVlzpae3U-LTE#Hrd4+a#i79B zGW4qVLsFVCuVNNtEI4}2blCsO#X2UAl?cwvQT8F%pxo)XAS)9E#h7U4A@H#5-v15& zKmTn$Bm&}^mssaNNW0k14^>LEV~ApK%ZwZxR=ADA-$*O~^NXmWhj)N%BNc7eI1cjj z->H()$=(<)z3L6!R7F~1Wu=R;FH-CrjCwDP%ko{>6q(@v&~_6mp7u6x^;yT;-{m-v z0bP3Cw_#)V3v?cEHTnP8HFQmrrhR_Sh+ZkOYpDuZuqWt_-=XpXwJm zDbxK~QK+YK6{h?ov!mq0GEs6ix^gn5P@u3`#`uq#?MwgfnhlWk=JHf*z(RxiYc71M zusRclv9M*EP z${dxP%m@gO&EHms`o-Lf4mTcl5`(Rmgq<%I1N3#pUq1SG4_f$sMjn{H10j(Ina*wo z{|OGuMP;D4EFFNI#b-w)S6g~23`udNHq-5Me8Qx40z9qnNG(Ppp=E+Ge*5uDc&e{ zIoqKF(tx>n&CDGUz1Psof|}uU{8wwMRh= zQ|#@tFn9)Ca>Uaaih5^VGhI%*3R7xbRc!K?aRNi4eOZ1z*b#psm0m=Z%otY12+RX) zhpV70ZPVTQs_%~fjuIXJ5hWbayA3WNBwwTrDdFyyy*f{;uLCQu&uUs2?^WV+OTs8I zosnl`S%Lo^77n16E|!HVC9wiN$W_BBnJvU<&_VtuB-ThZ^BxU5Gj)o44f}kThvA+x zI9Oi#e@gxTCJcGSQ@>AVXdFJONWGN?l-cJ|Q`+3lDpE(2VR3QWW(2DDCfU?^e{q@1 zdjRL9H#3}%{$7`LwNU5QM71GMBpu_4UW%8WJ!H35{_pE0QOwK~_MUl%5+8-yZkGtX z&3O0?1Z1k%xYPIun98m3solT-)c^MVFFg;!(2?z%CYl%{g!gqDsE(&t+7@Zl$nu?} zW9imJMMhFwED5JeFB_lr;v?oft^qnjuj$yD`qwmw!`GC_YF;KPnES#bvWWScHFom` z)-&0Ec`1_v--}@*?nS|+fbC4Ti#D=Y?IxFw_Q^MbgyouUd$y^=`WX=XyZo|Lb9yw1IATMYw9(Z!tf_}6-AOl zEX^%v_;8VeduPW*MT5oFB{d;hV`D*hDsNHL&->6U64SV#?L=&iKXkDt`fZ>z=f&eb$^e5}l>hXyu zVhvtocrVG(9#?5wjv%)HlC;pta;VML2p#;Lc>_=PMAv^;_(DX-@9lDlLljT})+ArUp> zbUB(QGoYjFoEoxiPX_Q{qVkZ+icXw1Q%RVGT-dQDgY;bt?PKPKqa=EU3N?&H;WmaV zSzNK`ey85IMvg&o9ws`RS{i##Fn}p`v{VNZo#M;rXUkcpE=enx;xJOJn-EAh%oP~M z!wPpHq9^EK4HhqVm`6{`j!$jYg1LTRSB^x~=N)1qWMKkLiDU#}M&pO-ElpUPBo`Aq zPqlkXVijm!hLI$Jp7|r6@Av-RF49QGRwh+l8F*xIP8f6v48sMerz`d&l6dSp(RI{K zf~8a6$=4egI&Dz|09)2Qk(sZu7W$k4mQUa{R|mCX6$!sXmfh}@NC;GvUg!xn;^4TA z?C$5V4nzNoLrg`MRyn|TFp1l-csBE$$ab3!%X*tz;5$LMT4yya8eA&?YbsE0Oq;Cs zUez8|kRh{3wMt-4CCuH;UZ+gAG z6YSnBF9+A{)o)X?v#ZRxpKGbLcr+#Px_)Q|#O-?J3q>3DI>&5hgbKI*{Z7t5;Z^c-a3bRo-~8Ww>s0?e&mIyGQOul-16 zmg6}Tu3+-!J)bDe%M%A;A^#@dz35;*MDO5wzoo=azOn8M5D}EWbxoNxBTH98a>ZPZ zPj%hnoMj8E$_6>#n;F04uzFwbxX+Y&v+}CR-{xpV;`ZG8=Wcd(_E3oqKb+UKnmkxl zQZiUYW4&zIb)Z1G@WlE1{1i}(ozC}0(MUB`vwF73@!wWz*4c>sBAN62bz9#Lqf>03 zoHNyD`Zv=Gr2BYJPML}cf?c-bMoP|-gne?1S@wy3ra~ME2a@>XK6OV0f;h^J7><{W^Y4d8%AE=x^%G0%7muj(IPEOQ{ z?oAc}70NgNMBgs>LOQggDd>~H#?_Ns31y%2sQl2QWC3RoFdvaYRRvL9zd|gCs%`#W za>{dfAzbJFAvo)GKIZCAxXYwV?dmRgcxeULjGP4nogS_nK z!cku~<~2XQW-yO%tX7tC&oo+|u~_+x1P9Mt3jiWq8PhoSZVhr{Xq47)o8d~l%^b=? zk%IS6UG=4^!bsN(e~_B!u!H;~`lP*P&Jdj@6&to(`UX)eXXXQKM*7MU=|wc){_W76 z5jUA*qI-<->}cv#16C@Z^=pqJa&gfWAPu}-z!K9!vNe*6wvfaYYIS%ei{CwW8!+PS zI*%HJ`Y^JML5L-h)wUqY6wIqYs6LkG`SG3QEZyrl_qHb8FSqZcS+XHxM?G)K;~4|t zTxL)taNlwp8(J1!LsPMtkB;m4UW|rCoyhqOpp7g8NX*^|-Frk<20@S?tb08n{rNqv zM9AyKqdEY0?5}Xy8p&4|z62Z)UK6uhz;>r=T*n0V>Huxy(<4AxZe>ivax|Zd7qf^^ zTuPP>)tlhTSYkqW>xU;`R^k07jpx_R@li~PTgTR@tHX4)`B0`9mfY%j^Et2c&0!aB z?^z%3`3x2R?WSBJs)j=%WR0R0UOF?dYxR;t*47+;`Vo22WPKnx2Vv?muI1Ph?s=on z*b9H|aIs8(VYycZcDN>Mz}s$f>CW>-by@f=ATk=m=MmU8V6&d=i1^`oXZyq6{LUkJxAX=u z`V(xvp54Dv@8J5^__-H3YNaU1^<+@&^j2s_qf@G@c0QP(@Gyf-JGk?<`Ql>j0o%b5 zXm1>_(3ChBVxo-bkAEWsC|d5>dy+ACWau21?*j%uMLJv^O)@i7SUC%G)Mr%|vs|}F zoYf++&l|D#7@TDNu3I_$0okN&g0F*jfTPwBv;XvN8xGY2^7Hm53c1ruZEBA{cVT&U~nLW*IZ;+gKjI8HLeL& z86=^2h?~?)4tuZaG_#BOQr@xZDu{!@sU&BMr_MJaLg!iB9>O=^kK9H+QUO?q*5~`1 zTal8Iz48j`O~J9Hie;nT z$dGzzfroH$bPQ+K%9dm(w(7|bVe-21^DfiLrHq8*7DI9xaXZ@F8LSFL^HI#Pr=O&pMTg$i8W5&s#7wU0m=@YmvyNcy#gO}q$XVA(nX51d=J}Ufxs{)6Pgasp!kbz$ zJ9B;U18eqJe08?ZN4IQ)Wvs#|yu1c+XfCxF?NirzXb>{W-;?O7A!9nB+!7+1wy`+C z!sxWz$U7rfG^i{kBQx=2{wltV>HR1KzKTx3+?&(SebPxKwuT6tp>Syi)@wg}?T@2B z4HtCyu?IHw=eEJE_JKHT1YTLOy9J)?kBen@O8YiK=iNYRTYt-B2-#x4a)Z`gM)8_~!5Oi7h+qz=%g6%XY z#())e1kgcjEq{yS#5+NcMDFqn)B^=p``=DP)?@GX37ZSHu+LceoNSFsc~bcPG(w}a zpqL`0jHieq%rF-474+(hj*iY;=f4^ZcWGw$bz0&X^XoG8*WhWOB=RAq8P0>JItKFO zxxXFZQY`zKg^%m^o3DAa7J3f>1)kG5vulon57^BknG2TqQ8+KsUl<0y^V|N59SOpB z4FA#1-h7D38?JNbTW%FL2{3l}SJ;KS1=|^g2foM4w8q)pV8Xqb`;5`+&^m6KK5`5D z2?=#uk)*c_@LyF7XZU1G~wYOLdhoZfUFYx4wOE(_RJG5ncQW)`A3} z1cL6{U??Dq?Lw+RYk`#hIlK<;od~`V5SYIAh`37VC@<0Pa;SaaZR~{2-0ytRZ|RZw z1HGE{bOU`H?{1HRKI1d7!cO_WNx8mqX>5Xo?F=(DZRoSz?-m$pe_a9gEklJw=V;cJ zq;Qd>$LGh^%tMWD!{Q_<6gfjmJd({zzhK}19y!1EOk>qT>1HO? zC#@TIbfX_e8;ApO(vWm)c}xjdR!%)1bdX1etv1BcC8w}0SNsHQ#<4t zaA)(0+Rx&jeknu_L1>>!MZNJ!AZ4HoCJl7@WpuXw|Tg=PT&hK$L~qbdmc{rB*8Z$~BB~ zP$*lgsv#isl(fiX@5%4?6E?NEGSe2cQ5VsusOS}cnq%Hb)zVatV|++(3otoxGV1Ev&oI@IPD=zob(dl&VC8>y-SV^I&l1pvr}9> zFvXyG0$985;yZhDIpEm5eCZw742kf-w!BQ67{ZGM@QJOku~zf5;^Y4@uBTR*y{4-E~CdUyNj!=R&k zw-uDg3H&7j%98Yn#^kQO6-@XuPaV)e3+u=t^0Us*w#bWL{tfw`9E=1|vvjGQoQasz z2%bOR#6Ye!3OgE6lylzWUGms&I-h%8OUB`PX4cAkO(EoO9E9$TUrw~Jy4pqRDm~xT z;&hmS_8me~D;M_glle+_q&f#Hv&r^zK95O3{IeheWr~7DwZF=#(|C@$sZ!!hLdpHF z`?^^o6BA#5^dU%Rx11{qf6%2D{3)D)l=k|`Ug8qe9&bj2o%xUwF$JhB=WMs4s_7hP zJ_01T%rU+b?b++6f;cQ@xRFcLDhxkW2kQA-lS_p}9v0iDV=zQq4K;Fv5p-J5PB4dM z%Dj~X(3Yiy_NGgqNpg2zBnnZ4mq7a767eKm1CTlh)_;5cqY?z;Oy7i_VhM#xj;|Dy zM6aA+1l6qkCFe>5WBWEIPa`Ywz~l*|C}=o;@Z)aU*YIW{rMFmGu*U}N>_6UZeGfMM zA`DTKXR;q_KAgF72lB^glh$QVZfpx?svV2rXNMm~LES^m7*tM7@Vi z`73pNrhX$B$gf;jgsD(jP_;GN<@schfQwyFv==8TR{^{sE@%F=<7jtXAyYEnaf)+( z%JVZ1h;!Eto`fP0W6+oy4EjlHoYr5vz=P(-6jAlrRVk+czA>k5wst3`?1;N=%LKn9 zwI8_K>IWU+Q)n&jqg?Lx_uMX%k3tf{>VOz6+(Biuy{aJJB)dJCE9SjI&$*wxJF1{Q zNv=QoMh=3TS&^iIA*)jy_q`l>v!IwN>D7jJp<_ec#Imi$bi%3<&6G&_i^T#qcmF?g z$_ld~t+f?{-oDK}tXRV&ao0K%8NiE+L$?xRXI{lK@9nk>+1ZI*E9Yd>`DY8T=N^WH zoYd%a61S&>!`=rRHj3mof^dO}rTfXI`pXD)-CkYM7ssQdWO;`Vh!o9y@>|ZDuTZL< ze#e~S6ZCp{3iu%D0Lu*;C{WP_FP_Jj9Vj0Rb2&Vn&^tH<__~V%*cLS%RVdt? zrSA12hG?}BWreUaf9 zICn{pe~~T_=~Nm=zJDoH7EU7FKOe0@?T7&KfPDEb+Gbj9SAYpQw`;b8q z669J$!cAPkyuy}251*$cw;zwYhs^SVBD;;aP}vQr*$S}lBjW&6MYuqW?y9;2Y4 zrKWG}#spSmyss0w-+J{?I!TPmHU$yrQy5bC`1XA8GJEQjj?diql#FktB4oC~(G~pe zcfLZ-W%j)6z3R{kGz^UQ_m1oH1T@T@v<-hCOwjav zP^zD3!M#8HYjKoaxYXYBs;QWm z!?^$>Wzl29v|2&|dGA8QB3kIRiumNJRDH5LkBZ#OI4QBGJ<3p&@xpEn5S+8gU?Qo` zMY=vC)Kea0`^ZBA6)HX%_%=u?rWA_s6O1dG*o<|PPA=K}v-*ofFRE#qQ;bnb0xa9) zX)}s|gi;BVD%p$<+1>@JV3+QQ>j$QsMMAfK4*5O%gjvs^@jVt39>e#lfzo4OXDALfeVrcYr8 zcF6|0CLO03X{V-j`vPMF1k?Lyhu?-{xeqKAvG%?mH-imDfj7rXYNX*KCtfe6h5Vh5 zlSk_dBc0pqxTGsc==&RaXFU%BWld3!-6n?~*JF;6{oWGgrBK^?bm_WZ`>Q2`J1kx2 z%$j92`#k9IRrI2eEr6-beG}FPQxeis#KD#9=bA(42 zQUI#zaGriz-57P;C_53GOC!6tY6+|urE z;C-I9M|xXfZkqG8&VRQ>nR_?8e;w#-N7z5Gh|Y9>({KfeH*IZ)zS2~zg+Cm`###8; z$#-@?Ft}nAo(($fZN`@a!rxb2Uoi6v&HrW|@n=x#g@POC3pvZ>zm>pe*4|;GpCJ=H zVbsX@E|ne8VO26`@U4{n>N`O*`Mr@u@Js*GMHJ|opPJ73?I90ZIk7h0{vOpr7%y!f zaVy68SwAZr;tOWQ=h0!2@9yLKLhf%w_=D&8OYysx2b3+&&U2Mrcz})CwwMvHroRr| zJ-q2PoE_rvE0682-6l+D@I`?}^i=a5dy>-i2I1?Cw{!2GWp$Y`r(-OOZ%@h4hlKD5 zfdwaHmb(moO+gwF}hwine& zS`l;^lQ@WrYfs2EJULITM0v83q0?16U`s-`KpMEWDHyG8t0OAk$=@ z9XYiU6#@K`n>Sso(V&52)dg?R)UY}%M!r#Zln6K!7^ z%^Q>|lR}27Ok?{}x0CgX7Wz0RtMyCv47(Q|fGwm`#3+TbH`}BOmGi!ztC&ONH@31J zOU&Rr)^qcg8sU@wHcOS-?Sk0ys=iRwbK2m1uTo{=H8p-y_??ad6jw+ zOgdKNmHDvC0lFuP1QuNp*XYJNRDVA(HHB|MeK!T!6rwx8W<^~Z1vu+DMM_82*o!iM<{bFaUqT_~b4vzy2g{E?oQF?*; zK0q0+J6kHQ(#dcNP&A-$r%9Pki&yf?;g@c0!;7Y6#eRk2d=HlAVk2&NnOSEtfc=WK zR4%`AY~ONsOQyKOS8~P~LPq_O+Rjuod=vsqqB!Ai(Drm(0U+SmDgc-@YPFeS$i*=E8LAH2HFa1i(-eeVW7X`n$D z9;BOj>Lam~erWxEQuguXqw;0wUc3RbKp#FLNxuV3-9(&2E9IiUB{wn|xosFO8%5ES zh*Z@dU}8@sU1^I3rIjSQ@^&&3X0vivlL-A72IR2**30QYd55No0R}QI8_iW&{(?j% zZ4NOJYl&mC*cRsi%~~fl=JVZXD#cgf=i&x=Z{6cJa~Qc-j#dR@#yDj0nd86C<%pl4 zKsBoOqIy-(%WxF6T~KOxo&lVi0i4TgE3;k$C-kLSkWc{-}H3Ycs){*b|`!?ff` z_oakUgl4s%7!M>|CWv1OyYW%zQ%u$Bw3Z?~WpkQ|14e&KqukzP?ru7M)SAxL-@ zzAW$tu6iQ4%-mQTy3VK?uufLnVi7hDzZy0RFk%5n7!z!autnz=DU2V3yjo-m-zU!B&wTuBRfN)zKiL4Ouur`bcQBB>_A>*tVjyhS8VCAgbMNSs=?N^u1$>}=GBq3ayL7PC0S$8ZuCQaG;loqY)xJF~zU;CgbOM8Q zsb538kyqvO7eU(7qAuwb=+OJcOIn)0(mAM9F7-%?fh9(jABAtDvHh`0(63GMC%(sh zdNgQSMum7W27nc%e5hbsm}84Wd+`%|dR9$)CCxeVUiJp6a)DxR13wh=(JD;v@5zb` zb~LW7cnK1mHz!|iwXd7+`DLH*1J>m>JiRGkwTx5(p>6cz2`-`(E9)ypHTA1biC~(^ zDQf3iC`wf}aPo zf?ra0k|=x<#~Iv7ah|hDW6T3qc#9uciNG^BLSO!*PEWV^8l2`|mI(n3zeu zS2Kz|Ts&Zm8N=NiTpA4`iivxjza_|7m=T-I?bu4S{}>k$F?6($uI~~TO&b=;*JR5B zCOoTh?v<@m$jg8zfGXsqLXH9G#|R6A2QT`ns6Mq^zK->hW8sq0-^H!Y8efAJyiHLy z12|a^&&0!g?`>*Ufk_UE3HMtxY8V9jeE1BLyODp^f{y zqg*_T06_8MkuU#}_beFVe^=ac=aMXYpig!kKTe=p6k>M?`1xfGn=JA8QRXc6-rUbR zcweH3)sj-Yb&#iXI9z>cX-$Yj7Xk5?{m#2)KtCINf^Uhc5d~=Ubx#EvV1xF!Dtr_1;e4_LTwL zsaV?Sf4SBFeg&m67jg#hQ8bMjKV#c(f311PjS@|JY^rme;C63ERmASCTq;PYoxsLy zQ3A}Skuix@HhagV)zsjzwWUv)6_(XRe|3K5anJ#ZJwU=d#R#?b7n%ekL?8h&qteBD zF>TTCRn2y0+P~fLYfhsbvda6;5Y?z2D?xy~3=rok_yc~v-WnC^s%8-TPy#y+6;zYD z?jht86lJPwzT85N8-b~aE34(hbn143AhGads^~oj{@PD+>1Jy}WY4l@D$z5dDTvhk z%PqthwG2y!j>YGLh8+7;dy-oqKWauxfNeD`CHcBJMfo~N1d;WjaId7v1E*R+!WAlU zaS*$l9BMr2u}Qw9Os=4*fGn4Nnf5@QQV_@|W`V5>x6v%!EGMefpN_DP$$|Rov{CK` zNTd4TtrV&;jby@9E~U%q1}<~25;YUdNJTja(Vjkt@&ah117h8p~IN7 z;n*-hoen!O;=@lSonKeut8k+f)Yq8VvvMrQB~51uwKNxX|$>`Vl+2gy7sm>_Jdef za|Iey1d4gIhVK~MYC$OeDV`Elz@QXE1?0-sqAoVO6@~wb43hs;i1Au(v^PxOV$yi= z!eDcJm{(N;RIx4d%TH3;)wWPWPo0ZX&8EH+T|t*``UM@je1BN7%JTy9$ND)$WWk&R zheEi}q$>eV`$3xRv%1HPoSD&3t9{y!fz78w{`4fzF?cK$hBT!*@H>HZbjn$9QwP0< zw`o3Bg9j}5giTH4MlkD*u(}XofdXVeAs@7>N6oUc%k*3s<47aTdwT`bJ~?gTJ83%$ zir($0vufHvKt*F?vpT&AQKN$PRF`?hyXlnrw2M8*<7{Au9q5lX?)#&p-qBI|qeR@c zU@1u)VQD}^0aO)WWbhN`mOK!lm(tUr&N6tOp9{9lk{HPd^SM)?>?QPD9P&mlJMgSK?g|~xP z7~tao#F`#p#BQ+G2fvbvvcO&#zc<^K({@^XJiC>jn}XXIsYk#qIegCqJfE=**Cr7M zwap`Ht(WbBMWrchIBDPji{=t=P0hN#zB_Lzp|YN&9Gm}j=NO)3(CO3Ls#PB?={6P0!!0*~=cB z;dKTu_XoE7mo0~U#ks-ee7e}P>uri;DU)sq`*;s&aB8MwSjMcbt!*7H){>vu?@lQ* zFB24_XR&rTip<6k_Jo0$aW}`R~sDCi!_*I0<2|KigEl9|gLKPzhfH-nUz@ zns~9it9ys`_)~i9whtxRUw?&p0K80-2XEr_&tJh7iP|v-%)} zQoJNEQs-{~k>EYhb=m&9WyM_=0##rw3*RBrO_a?l`UQRryo(vk%+=(y*351E@;tpy zS>^TiuO*L7LRaDVR zbsh?}s}p0~f}3R6cTs0db8HE8oT~41awT@TeU(%;Kq=W+)&pkga+Ow*BwE=ux1d18 z)=29ZzI^6SYjTO&EB^fQM%~dwRQQz;H5e9pZMu5l=ORx?vFan9x(O2Z2}02YoimD` zu6k|RSF1w9B}&XXN}?sZ)#pJ5vqb}R3Yt@^3T0B*x|lQ*$GIu?y~FhC#E1>AATS-f z{ExpyyR%a3k?{*mTh;EeFGfLl4!-5RCcpOI?#+*1V2d#RO4A?$7@*W!+MSQwjjVx< z$iX=^6+mumzsSlHJL!#i#tC9`b9C(}rZB4IQ-Ea1B)R+bNtDF1&W+gw4;D85E;;-> zSiBe=j8je;y%(q!0~RNS;%_M?i^Vu}jztRngaY9vjl4c6$`?xkHO@PFVjMoy57X)6 zA3ng;d*1v};Np86NL+@Ejm?{7P_>h5#}=S|M@22g1^{i>1bcH9x$ir)i)E<^fRuL{ zr|R40|JJ7&2cNhXy8ze+p&rha8=rnJ+!m*0W_z}yMzV;i^Hc_aY{bG|4i2W4k_wIi zgc)U$BO-k*PDe2$U#xMPK(Et2N(4lt8Y!p(K*k|559Ep@VB}MGXrf<1xn**S4LE5wY0yH zZdvRS?t1$laKDcaU3Z`>3i6>OgUjrqP~)ff+t?bXpezk%YsZ$Wa=cVtDgg6-#lG6R zxx4qIiuG=nDyoR|E?yy4Qg)`bX6h1bquM46`InY{~LEhH=6mv7TvT&mQlPJ|}!F zvCE!xloU+wFa9y2lRP|qLU3|r29PTGsqujuP*68Lucs*h2K&t{G`5$J@#Al-j)R1zITS4!wti^Y$Elr3S4dbg$JaajXDj~M=ynDK6ebA zyUQP*XwB{E@73Sv%-M;2*11qX9YpAOQCAudQp!aG8<21Pv;0zH(K>^V-vAhb+%vZa z?QuFfP{7X7TU^hnw}%dv4)F6z&V>)a)B6);LID$<;N~%@-L9 zDP&-hwDRPTZ4P6ZizM+>orH^&1PK-A?AD{Gg z0`%dWeDY)D3_nJl<{8BRg2=<~oZ1C`7k=Fz-Ieg!VX3z}M)mv5?we9qcU)Ump3l$K zNq6yQ9$b9Lc!oO`&* z?U0nxRbuOU-aS~g=jjUw>V|#QqB1()i$#LY$~OHHkdU>E8X+3t*L*x(^NH>$9dq>1 z5bw2V2prHx%n4cy{l(K097F^t2M*MK0P1YsFN|SYL|WbnvJep!j$U}s7X&eFn{B{Gq+Y|&5STH5t(GWDDoz^C z>7EfQE}d#fG=3qb8$160@b=bWQLby-_!3bGl@yRv8YBb-2`T9=>28UkLt2qe>2B#B zU}%u;&S5C&7(i-}{vL3xcklhaKey}M$M^mI;oz8K;EDUXue#6kyy(*l3kx;b*Q(AJ z_{4}oBYnX*if*Ny7>0NJskSc!*nwkqi_%rWa;?d5Uj9TIA|RK9#xZ*vlQjN_w;sXl zbUEeYf|k!tailbJ+V-YYV;80NT~0gjUrb#c0G!|H@y)SIk6a7(HVYzw!H> zWaW{|H)dg+W6s{Vo%puiw_Yh=oqlb6viB`0&rXMcEJGN&hNSZj>!=_x(D3Z~+!*6F z*0Rfyt!P6#?|0=#(@?AA_&r~jJ|NOk*N%gYdY3Uge|&;QrvTce=C`odT9`PDiHW>< zW@h-S?IIf=ZMSe9|8VO6V%Dx`8sD){ z-iz(;RsQBHnPeBaji`p3pEw_?*F4Id#)ONJU|6>4j-&U+u154^0{9x&O&X zf`(D0_sKkkYVo`!sa(D*E+!L`KZ4C!zwb_xeBY1Q(i@C+6xPZ9NdEpEq^YmnieJpH zZYj82))T`@WhR&KH}4Hv^HreXrr*aJbu8#Ir4{SvbZaK>hQ~8HNSJZgaOw=~&gV=% zNNtik4K@uNNq8yJh$EMyT+CIK3>;U_X+44%w$>d(xiw5TGr{s8glTOMj>IlO#+cFijl4w1oYQvU+%h}L6H=9q=jt7iEnRR)j$VO!x zppGwub?eJ_(bv-4>i0&dnY9)9)YO+>G%bEF`9@9a`u$s{mP=`o@|Mh7Ee87WtXHp^ z4LU>04hFR0Bb!FDTn%EL#!xhk@*QV<5Zt*OLUHENV>_)r>fwg1Hz7+pQRuL>YVJbEZ_P zFh-sExruhH_Aya9IyTmNG!alAR%xc$p?itLK)>qE7!`lA;XgH6i-}8Tnq%{=o<|-Q+><33(%OH#+Ky6e;4cyh z%(%r4Bu%&QpV8L!2_Gi7a9rp)VThX9;FkKxe65&5jo*iUV#-=RWn_A!^``F&h|+ch zVTbF^Fk&XIbMR^2B$J7b3#t&?!z#o&>X@0-C7wq}#VT1&Gf_PjE0Io66os+{9wky# zq@f>~S}G`)hh#{fXOKrGm#00&=V8?L^uvjwV^!mQ=9eaQsZw2$6vkN=+d-H}K)*P> zr%2M;wd0ySJHfeQn!OHM<1Ws`5S5oiIFIbP_Ur|1M=fogzus{qXJ<@>d*~}xyhMfT zV`-P;9OR`A+)~4gYR6iN06NY!E|ZENL<@ug_U29JH@tKyhDWIH!X%BL6B9clI-&OA zA4J|iRmD`x3u7quTXD;p@HxVcGClDnvh3n20MF|s(PKp^L6@H=Jrzvj)2Gb(@RnYz z5R4qx+Ou!6`>UN@42%(dFc>c?H__xQDi@PFUy2vCB073D%@muk^0hcwSy978nu$s- z8&YTe<(M%@hhk5)LE*5P_SFh&$l1bjf`A6s+AwZY{FT|aO+d5?VNVum!kxo z!MWX8K~l4wPhLs9qY(h~8gue-GbpI?w^jy~!{>0@8T{*Ui=>BJah(f4o5Dz3XPK)g zSeV&!(-2v-wwW&>t$Cd2+XYQqewk@feO_tw-xYa^7`4f)@J~C8;I{?To~Tq8j>Q9 zob`|m4ocK@o<-nv!D6o7SgCgaM(PLxJG>WKbJ^yOjh(El*Yr4lj!KhCg596cqT`~+M%Vs$_L|k@-ws;`W}NTisO|z;1sUI50&c}! zB0OYub#;qt8WzStStC~N7`HI8k$Yl^rN&d*EnfpM6<~cgHVnRF(gpzcz)-AuAMcO5 zdvTk3oH~!s_~r0u@tB@D?5VsrJOpOBKly9!>HpWSD>S7Boe#~;&C3IDXkz9$Ned#r zB7o4AUN%fE6(<+HM1=M!|K{>W9Nd^u(YN%YtNG=Wsc@Q~KY5M<*qPDOPW{pkJiyRc zjNX%;se4{v{xWN|yr8BQir>zJrsccUAgW$&93q|a8Y&V@Ab&}+P?nDZl)6K}xrSM} z$si;F5FaFj$q`Cr&C!w5K5JDQDKiP1tB!5PVWO9K5?MCQVnEO3-8|(i$-TCzYi&$6 zE(;7Tb_~^LQH`s7LaNBau=dP=45bIDy~QYt=@Kn0_;q;zv_{&MT@+(EE<@*b6L? zVg#>CKzTyjJ0QYv7ySUI%^)Ax+c&0~ruq+4{gpBPT&MfQAD_?@L1!!|X1PyAVzF74 zkiO~)CVrTE41qwVFE7q6F!aIueI|dtm~)33KL3H37}obK!c?eZFWJ;OF2Xk7y+Sq; zJ-ct`){f0D7en&YXT*BMKAXE2@j>V#_C0!XC~$Tl zW~W9y744GapH_GuXKLj#eQTz!>VAr~yf_kDrl^K7!Sc4SoN{-0u)7M*^>%^!1KY)8 z5gqZr-Yqu+#mD*66n1g3qM}U^+!&-4#SjRqb8EjYP8Tqly5Aq`Qv)mzjv=5XTv|R# ze?8ooo34z2K}r#rs!SSl5M73WZ1hq88(0C~(??VU;}=o%pLcBBMiF;YPa9YR8ZvWWC!yL~nan<&W5N}hL> z1H&pByCH^J29l7xlnK00io#x%4qnWtJGMT(5?bevNFVe3TVL?g9zU8rk^5=kug|pK zLOl7xdwTjD_-AVT4cRC}$*GAjt2unWey6}hR=MEZS8)4sBn_e3BGdp&A5}oCiS@J^ zSrH$B4CtAr^5$a6_pbF@{}=%OOHcIn_D8_I3dyl!mhWm0I6*2@RWxAy?>kK%qZkqr z7G~!Kyo@!{4M0cXe?W2MKOg zMz;$G#jD_wSd5N$=E&oUm;yl2Xii`5{rmXz^QIY4f9^d! z=USVgn~&rykp!&A$(pi$h;1cWNKUXp3==m^LEku9YJWOfASalqb1DfT<*Bt6{ayUM zF@@HMpD&9jCWq+WgPV_5sIRSjPvhS`%I$j(r~I)f7$UoIcclJ~C(%{K8giWi4k*>_ z><-e%UU`89Lf6|a>1L`;vl@ShtQ&bXAk;Wv__dCA@nl<&FOau1?GpZrR1en^SorqQUdgMVZOm> z@XV_pWyQ_Dt(SkgpLT4(%Jt83j-GY<;doIo*0_UOX zWNh}14yQ^wKhD=`PYPos+=xj?NU~EMbKvvUHkp7pkmrzJjpvm|Dgum+|M8PYDI62< znLoqlKl|=$Px_BfX#+oaDbmiabcIs{ZR+gE2#Uxd;s@Qb&tN;YkzdJv+G83SvX@*Q z8Iy~D!~Tf`Ob5)U7Ta`VVtVs8E>6H3%wJr+Ka?(*Jq9=&Oa{xSL$7~aG}2^qi?@sU;N`RDc6G`RU6MB>xpY7A4)) z+O2jaj59 zvI3rSk~9*OpHt~G?BnofLRb7l;r!4?z|O8502scvJoNtUbABBb;osG`M$Nq-He!tr zBq8+z2d0~J-mHW5ORO6&r}%3x7p?4QZ@Jr_r1M-MuKu^>qI4>{YFg9z+00=VwYB2xvlK0h+ zB{XXD>_<&eN4$GoKj4H$*gf^zI1%7<6pdQZ$* zYMl;)xu2GzVOe{Ac$~A^H#V7AL&j)uy=pz;*A~50{%h~jqZnvXR~IVBC3VqO*js+D z{;(&18=(^%r_A^!T_-X1a-hY{TDE7bjivPLvH@Ek7i1I^PVc)^T zN`{~P&b;hPFsmI2rjv}6@(bH9MoF7EpMV`Qq;qX~WPHC4QKG0fQRX-1t@{qh-IY6> z5A?zAXFcm!DxU<>jK^q&j6U5;aOYp3rMU?ieZLMFnZMt!!0kSNiTZ^0*<^hU{yvH8 zF?M{R=IeW-Vf&+@q|&Fo&4vSwPpomT{q`lX`mgt`{F~oe6YvFs1fXz?Hl5@8RpMTf z)lfiwW|V`O%Z?;{6c2t#cWp%#zqTUUKR3d^f0g&8fv#B3b1N+%66UQNPJO19Tgr$6 zl04r-7Tg!_k&W8rG6t=mTvrRdK()~4`p?w@Io03DRQ~vwE)LY6k5`KdD#y7r)PL57 za-(C0@f{r!5B1~_K=74&ULN_B|GG?#xGqy6|6Gs>OZepqZj!6d(49JT9GPUk;g zoCm-PJy8xoM>hJzhjmZA4$fboCYTJ3TkTuG_`vf}1F2OU&$YS`TZNv;Z3A^6gj$+<|vMS5lbBzv8IYqD;y*doBg$W~U zq7ah!GUw4Pi+UmrtBGl22>e74(z-Xb3n5yA#J`42$Z$X=f|h~Pig#uz9rM5e5-7-^ z+Fdq>#GaT-D-qc%k~rvO)cnFZ;`QnUqZY)}4`vz59Xn$ynYc8!P+hmZDpgP}Zs4+( zayTA)YKuI>l*LClqTG)&-7gk#;6hR!jFhM}e_JK0UbwmcKe3%v8=*R#gh(MQHd zGLndC^u*dC4~y}q%qg1_1WJ@>z*&?*{(IWZ2~Zg!vQd*q?zrPNA4ALrd##1hT!lKf z`DM7jOnOk8oD&b!n1n8oom+1#+Js%zZs}`aMvE%F+KvNxeIlv7-l_{rz(Z#4qG4)k zWPSbP7R20OvznsWwwEwZ%`rGJA`vUfC>+>Af5?OC9CyoHcRi<8>R&Q*6g%l5!=|T; zB+Ud&u;Y^LCN|jh&Zm-crM3YT&8ju!;xcZJ19PQ<0ecJ9XdqL*%$dF5vs&s1VfVZ| z&nIHO{rf!QIu1--JLiu-uHWa}5jU&?9`8k=Wer_ncb@a|x`-fw6subH?*1sU(q0fU zjZCI3$}H;Nxk9{hgYB)Qn7okTqo{$(tC59zu?mxOJH8q0(wBZ<9JFSSe=u_;RaZ1S z@{Pi(KklvhlIY}A%I#!ceQ0`X^MJ8bep!%=BN4vo_!HW*?uMd?>A4jOvw-$@_%@)? z(1)&i8YceTh9=wsP)!;J^i_LWMC6&eR3~Hi)MCvMZv+&B;s*-EAtXK z2z*FZQ&?UwN=QTmr@~K7)u0Khsug>u#U#Bdh%uuzutA>)WNSu(0Th43pciPVfYjnX z4tJavD{3Pv8&5kQSFn5}jmGFYOBPu;fZK8mS7VJQB(m#cK@ zuRxWM#EY4L4&09nbPp91WJ0tYp{5Vm9nQl+j~pcR>7dajFRRBwL?=!`FnESs*?mX4dwAx#g{j(&LUi zTUsGnMKpO~Idp^Z>QF?GSz3BH|Q6DUj8XrL(X{JgxSmMpc37T8^!26 zc;@mbDvLDGb#KOT;e&%CG1zxCTv;(TW8cOLTpVgKT_aV*EuUOkScPH~$YpS96C=Ji z?yzpH`qZiA-Zu?Pq6@uhJ~TDh#|y{Y%Kn7Tu;Zg2v8Po#v*sZbqS-qXI~qGH-w4tR zaRt|?;tCq+Qf_r6tFu?ttKZ!nzDMS!;1D=DwK#Y;@i|DVx5oF zHd>x$tgceCl)8r{SXG#j!3=0#$*2qmNPr3})coU}ky4faX zqU2guxM{0)KAONll|)tWkl2?i-uCIUMz<=qaPkBIB>iX_0w5&7?)c` z=|z#&rL0F%Vk)Yo1vU=p4l^m( zm$bsHtZ~$_O*n7_Mr%xXw?Wp8Sm29N2puy<%~dMBL{bNAYFz=f?rLpw5&JsL{$)?` zubhJYR>ST4ySI-XKCj0p%+3UgLtkjFh=3aG@&dB+?H=f$ytkI*+ZUYGslxKXGOVRg zlp4ok9TQmqP~SM8H`&-BOvepT5r9tLyVNBjbsaly_}<_--CyOcd+c#h(70XQZZchH zH*nOemw1Xr0gsAp>Pb19C4pGMl$)6Fy0%s8Iv~Yv1CE6{RwPV>K^9}nbdD`|B+ujA zTK~9uBRApn6`SsTJ^k5!T_4QC2G9sg9s^uUB2O=C)ywz4Tm#?+b)ug(f*A}5-Qnj{etoz}-( zy#gZxm4jTl8aTGH=-yP%GxUeLO4)U2d&tP9&z$xrBm7KYZinR+7maYZ2obk}>vn39 zjXp=f{D{Al-3Cu=(%2B=gDhlczS`cr0hh8>-(W3Bb+bramtMQ7m|tFFY|8ZK1Z}qd zF!Fl35twS{t`Xh&2!yT@RE^eS&$OOlIMTK!V-2;e)B3_%DV_9uV1Vyc;v9#6aobA< zKX6ge?2hMxJZ$Zf?}gqu2lraxs9S2OHdbXtaGKPi#H%uMQ&XEa12RP4E}PVfbSR@d z3@!dnPZ>DDYglOhbnn8oIh*=U4c(5G+lXw<7El53S4<-tVMp@px9+Y8sdWoRm2Oo` zYNkqtajF6U8iTee8%OKo;+fB0X%=S*;}AGR!*;vd2hhB=j9gXMAlTE=Z6&9sDyWnA_9zxg{B z^GM4%mgD%**~VI29;$P92#=eAw!k!#q^!b?BU2?jO~WEDeKVh*t=ukh91>nmSjuqQ zP{rMl#Hvlv_Usa6h%8Y_20(VmrKz)P=QZy1^wUaA?nb5DWLD+UOw;OCUOAtUUNU+? zW3-YHuukys%%)~rWu)*%eU@t|DLK)4}hIA)WBXa=OZvmRTG zb*_A)r&T=cl4N?_DH1}s(OslnH<#ja%Gu=h?T!hox-8RB_f#{ zbk%sf(JDFUjbluZ89TxnXkw8{HhIwLCothTr04n@68zp3JbC^ag;qZvNtSlqTR~rW z8pw0>?&eF&A^I3!!9pF(FT(qIcaaiVJwJ|DM}h$817tI$&b=-pio~fy&BOWm9i!=V z1h?g>eba7Pr_8}{59wKVn7bBMw{fa#3Y%=)yEBO8-f-XaZ10hJ>?=gyt43(f_94l= z^+{{os3Tu+)S)-**d7WBGae;Ov6d=IuKVuKpEtYVWm%uoF3K;F?K!icphk}r&p<~T zM3JJkm=V|>-bLvWG59ctEs-s2f=Sih&=W}ioo$pADxN(ZlYMAqH&V#O?ck_a)&V{u z(ZPV1XxOi!ITB$e_-_Q!Xjwyj6BF6##z8E8a3kkY!;%O?=i)rrz*G zriDS6+59!D+b;i`(tyn5&(DTErrhOy5Secyv0Fpz!Uu4L8IAW3YXvz4bQE-RPJ$`= zd`K+qwyVfe)_S$nN9npNvWqjxtF~?Qn;{hH0!>#3ck!7_XG^Vj;VeslxM@RY5u!;zx(kNx-4%vJt3^lxt!;+oXA}z zt1-#3$5gNU7M)*Ynv@r9K!Y)tKupH_N|H_6@B%LBH<@W0;@QPgpO~;dhoP-{OJa*@ zZDn}2>#JokzCC>tuYgaVp<;pUEAAGB8#TM?Ee_L?=-wlg&tTM$7wS!NWWOA>**H%VKnlkP(p z;021Ga6~R_$B2SGn635m)D$VG)Tf@%Q{9I-J?|5%$cSzC<%-pTK5$5sWOk{OtfQ-& z7UoX;?C(gus?W^rB+w8hvij_f$Hjt^n#}^IWg;h&m)eNO4tXt!_1YT?lYxR`tkp%x zd$kR|T?a4l6z#n>WHCi|Ts1&vIFkBTNq$$qcIJRP^=usHi#hUED^{{^88@J|Uk zhC8xrQQpSZh`nuyZ zs1w@G+L5wn1QUL>ofrS#88iZMNLU4z;N}uEAm4q4fwZe5e#1^MP6tgjJ`hR3=Y= zYC*lStd&$VWhJFU_M(-xmA%=Iys*d~Rsvlg@vgN`Pw*Rhb;#MfZIA*}89{LEX_&jl zR&w;utZIoWm-HE{VrCgmJ%PtP#7ku_4PIQkdB!_@eJ6}^TMOOBJ_$R0`as_#u9dU z@2tMmFoX~_{JxQA{SsU5v=@PJOuYmvbov3s((*k;Imeb0$td%}&Ro&jE+d1S!LCXx zjfN3+W({NRSFcmegYfC8XzPH)jS!<%SbnS2wP~-?64ap7L2MVC?6U39P{bt34M1r+ zxRb>!Mh9e=FKaGavbCXe$3V#niwJ3R2oL(f)+&4{kEB+F!_WDHD1%8myVkbd8~x$WR&VIVrC4` zf#c!#Cq0{Oe0;QR68i2~T9{OqJu-Njki?-?wcK@%2N;|?fZ`Ev_X3CaQ`GZIftp)v zH8+t~A@g(Fb+qoQho+s&Lhk?sP0gZ2nFR=Rl*beV^V0qs{k*TkGW?H2fvWf!UKA40 zavLc9vjk&^B&Q9+Fxb9*4D;=bSxvyjk{WIjk%@Z;n=Ia=V=fSun{dvZ-8oyGv@;-K zbC$5=tQmT3nbh9|4>Yt>12Q-;M=TfCRJjZ?wd)dy2YUd{w5 zm}WLiNW8?UF~V_obQ|Jf?j#U@>OB@nL#AUQL8lg6G{2}o!yEZXr{6)oNQS3zF30me z>~6ZI70|Tksofq{hOLZfZGJA15P$U8t$l?(HbF6ufvP28v&}3}84)+4&E>l!Vhm3x zC$gK3t$Q06R_g%fuvIG-jK_jlRfALA+Heq-f}4(^;tkUzA{zNLKq67|2`Y? zeRiwCNhv!soI+F?`4-SZ)-9nHQ1e4~cDkwpBQXYatTrv%nx|L`aeQB9_Oz_iace%M zr`0%KxQ#d;5q({0H@EL-?k_VF!{ZA7wtE$;<21AQ0yM$7cDhoDao&tNLweNPjbdb` zdAdYaYo7!IjiB0De2WIu?M@%u+rS4l+d8JRR7QRUtvWWncqt{2#WVnY&SNnpbIrpt zzG_-Su%VemNf5i!VabrE}EQ77J-4LrcIsr zk{?ad^=PW+cjvlV?uo>jy_N48$q1lpNmK~$k-&881wHNTHNWA6TtvAaPFwb4`9}ZJ{mdWIyclP4AfZBGZ%BpGBVfWKq zX8`)@bl+0;%IQavP2|0Gu1SP_q*k3>(w!twN|R%)WH^;(R}5Ee2-ibUDF1So2+<8}TLb0_*{DJEhZb7}RRi4otH+;&Fln$?}<2 z9vwNZ63tsY=ocM}*4i;T^UVr#kxx?4o(Ow4ux<4O5AY(RZ!Qn#EO7I`bV>H5I$%Mf zWaJ@3S+DQsVY>_Vl#nplP8Nk3`Uptku}$^Si3+J>Gl_qtl-zmd---)`bJ6%K^z^;K z8_^1N2rrGwXN9~c=0P@+kwUoAxS-{+o)KX^3ypFde;mSY(}y)2H)43%hYB;4U~?Yu zqR=mYUw@$$Lm->+TJ7nuPJIdHN1$YeSh)M~K)AS%+tGTGM7l|=f@EI-D~Y%Js)jh# zB(~=8OW-+V7wD?bCWQp%&{}s& z38FW_6T&1#c2`%ezin|`f1wTekW_J3C;HU3^!j+iUnMe)LFOr^$EuXZ`x7N)*pM!x z>+w|J{Om?%h>8~$-cO(0xItwH!0{46Z&Lc+4MJi>~& z40~s6x{EbubR%cVx+#kl4$E%K^icsEk~c!^McfzOE{SYM{_E19<^-ZJl-4mwbBNXk ze-4>U=lUhdu~*L5+*h}hl9cy@YmRF6dUKFXj+xD?UaXD7RAZUS`5doaY(pF+{bc8B zmcQKPw%iY28d06BaTu(r$O76mpSkaOT*$GnNb9XFjV6aUU6)j2_ws%-o=29GfevTOacr|;PuQ8HJ_tWVx3JDBNs9<|(L z`n;yRA&vp15@IoH9LD6{L+Y|%IbSmE;bWuxDNSm)J8DPa;Nvyy?H7mO|LDE>1K7~) z5p5uz=@J2P1QUoO@ekLaFsn*Xfyzp#R132(O{C9CBU;ZFLN&)T5X60ZGwG`I2@4QN z&2+MaXh#t?%jFBqOrp{$`Z*1!T)l1dS=EB^F@8a5454XM_7Z;UUWclFZ>ju1`I5)) z<0a1sU`1gS(9i}o8@ZVj%@_i+%R`Dc75K@RVpv}dBcy|gqRZT6 zx032a@;Ft_zQcDeY-BQU#jroE2;R)Rc;^XL_0D!F$0-%}hM0RIzEVagv=x3yWAKlt zkmhx*33AD{PiQ8!U#wMUJkoRFAoMjc z;&ga%PAJOlN-ckCnu%tSFl+gx0n0wr2a$GE^N(|!f~tlg_#$sO0LZE_1*=K^Bi<@V|Tfz#qx zU8HGqJtw=tDGMiy+7!MQt88WN^>mWT;Y?Bd@mQJPuk;51`1vO~)VlaVMViIrWmD376rs-3AytUmb&!J$6L0^(8iJTfqgSR#va!4b~!JpHgf(_1SfuHZQIk zR?J2u>?kM~6iqt^cGN@1v+b_~wdc~4KHB+L@im<*HgW!0RYQ@yV6<@LmPjgM-Ez63!NI7D4$=Jx3 zPt~f~RaAyB^~7Y@9x2ID3%n&}W02`3K$Ivf)pnt#6S|Vh6el9P zg%!Rg7wavuMkk!VL$f;1yOV0AhEyb~Tyd7G)9ryB*PozZZX*6UCxFkQ>@#x(TWzkL z1kVYqQ@z2ODP>8C*>Os7>)}e9wH{HlZQYP?3-`&7+N2?=Z8Telupqgr_I|6ucs6`z zCIgfHk}A4@ng=ayhTg3Gds|wR<*G9x-mJ&Fl{mgs(x6jlxl<~MZTp%;h7*cscl^;G8x9JSOX985oki0Ss@ zRo_{PaF9;RYLgPia^GVsewd^57P*$ivT^Y+yVF^dHcft|QoAp!a8!0Hj~dFC(f3n@As-^>Km2aCcwy^)bQ6 z#%my3qh-mq#9sKsD`-q%&bFX?#Kqz@Udc>L71$_0UZerskoK_8DSsm<@>BhZPiGx) zQ4#fX*nz2tgjEyX2Z%2sYS|FS=Z@{Xz*RHj_%Yuetzk<3c~NtVZuarf=@y&+LLV0Y zUFH;lDw0c1h4~~CZ0#jpQBe`koXP|E+#W9`GAon6tbsvhh%I3-kQJ&)OZW4`ji*iu ze{#5Z$Ln(~t~|)2qvN+eRNGy}jRzA4#98n!EaD=yhVf%+9<6o#-?%*vB5z z_W0;D97SB8(&8P?5Vv5!?c=(WStb|wMzXY8?Z`gTQSvY`iq!bRWV(>gEmxj z(hGgfi+{nCq@Ue5*LU&m@%8z$oD9-6%ro`ZFwcKtC;oe5ic0-3M^U6!-hmkzoeE-e zxt{@smYYOgg2`~+-cWK*Sxha^ejaw9AbTy)kDV#}7iv2$;s&+7=l2(s^=}&!E#F5# z^jkGiGJwNoGpJZ%q`H zJ0Gknt^Dw9NxN~;P&p260*af)+FPD$CeR@N@Ar!2?%w&q;MpT0c8e|t4nQ5tuJf%@fGs;27903SX&V_RCR2#l<061h~NFWesVrWRt(5m*=H6KCkHM4lO zW^1quE9%HEMeXKp0E&4T+s}UE*PFXpp#3%2{!jKBTnq!X8yIlhs40jUddDVy6FcgG zFA0}@*E9@dJ zFvt*Q6su)C|D)qoVRkn4@F)6Twmv^*`TCjboYs~HAowd>M%9oOn_>$g2MO*7nT)TJKbai|M*(z!BSSJzEZ=*@JkJz4X zny;F(?PY{me`^uK$p5vw2qgtVmm|lyF_U;tJ&_}VhgqpJ!dz=;4@o?Zypvjem@y>I8bAZ{=vb; z#U;guoo6vqZ8Kz71*m6~Ox1jjlfoZw_wRl~S&repF4$hnT$AcH|9&atPL=DnxsG}2 zNuLQCqM+kp6EMLMPO|&nk8E1YY1Rl3rY~H7UI2P6nwbV)BD<<~2Zq2Mz5yp%)&{J* zJmOh`a{g+SpAP{xdK6O13!V@?c2U^}1T5#dhdX<6k{uItv>V-O#wR8a{mvhY8UX?D z(_^Mx_g&ZRRLZ1@dy);l56~8=1u^6M)MhX7yq{)-MI9L7Va1B1k`7@A^}K zMG*1C@fR!tV4%`p9M8U5Ve-*_@gM4fFlvg(J1p@N50)p1uLr?x1GW!w0-hSNsnVog zC&}iX{Ni)?h=P-Pc8BU$2N4}N~XLV^(wa`{JTzc_ztV{T?M~?bYA|o zH51B?Bq;DxHE())T56XnTPj}Rks>Ctk>`<$r;#VZ#B;UNJFRe65vK`8h?W7qajFx? zcEOB)9=mY@PCeRuz4gss?&Ja84FQqB+n&DV0!QO`g<&8tKPw?Ge7L;GVViBNufk$QeW^>-30~0Wf z(D4`uI0&fTi^wS>6_VHaI_YhuxLqlI2@=>+zKMr-L4i=L8$%%O2jXEqU#IG?SvP-{ zHEOZ~YHso*8K2uhwL{9d%J9i81Kb_J-;=sYl&V$O7WK2ny~biW4B zo8vx%m%FR3Ei^GNIWLEc!dDZm*hvmP-oAHUmSQ)+iP(>Anh^;leyn*+dklvf@SQ;i z;bonq2f@*+2f$pk%JKoO-kguYuV^W06*s4^PD`%#6QxplXXk)n>Ya(lrfN^yj<;bZ zv09Gt$EDw!DY*T?c`W56(qYc?l5N>OG{uWyih_cahmyQST_0=2QV4?=$J+U_O*PP!3GL~i1hWxK@@AXC-Vw4^YP`7S+f`);}H z&j8q`W~}ow0FM16rRe@;vA?FwiUI;c{0!3k)H=1*G2*m1$HyT?r&&WI2Wx}Jb9bLT zGL)1IYFJ^kD)S@rsP2>}c7>NAN`N(YxQCu0+XNl z%7EV4nbP#-^%o;&ZI49B+{XargwF-XMglF2SHOBFf~!o%F! zE)V#wUi23QL?at0=E!W9c^qwyBYIRCN6_!M7TQ0!`i^m>>v`VknWPadD@V-&C7Szw zR|6Q@rA1h_~SSWz3$Y~I(C<;Nx|&K;g|1sGqBK9=zcsW?U^BqWe_rkm8eh@1hU zwbQ`hYbmU*LxBoj$i$01-K&fFtL+QlwOM9YXs^X$Tfk-OqJC=LW~TY})|~6^5!th? z%w@Ylo=K+q?=7W?n$Y24z3XYk7orP2Lm6x9o1Xn_lZQY28<@RVd6*|Tb{fwtn+AiJ zYP*_7hwlxTW``vl*&OV8Ub&8*@w(#{9aGMq0f+eT>z~tpfKY#hG&<00ET=wB$sFayoc#{VxEf^Zc{#efyL19Alpc;cpQ`{K837E_n5m1T-30U*5kN2ahYO(2 zT)QnoP9Z#oM*U4rtT(Sq?%S&DtMJosEticf1h6|>fwag1m`M@!0YtDbad0Aj-%=w!l^Xb_`bJTf2YH_zi&Ro22RWh`qqvWNO{yCuCC)Bx~% zf8s0Hmi93hGxaEe$M;WUQH*FRm_9zYOnDzUNDr^tGa;A7k{4V6KI)|~BYMn?@>=-7 zD3I5m8BCr`C#FeZbzCmXUbgL2FFo9qA#ZzDT;0O=L5`Ax=a2A>Tm0{<(`!lj&o@#p z^TOWe)DB4YS8_aiqdv6*7C%Z0=pTUcwX&Zt$5u*zH*sxzc`xoGbIpG*|SijaiXZ&4X4-O(DF|O9_yq>%o^`n-NsXqDL=wPtK#Z8 zAXW5e$oS@S58cIoKTp=Zr>ax`HQV|vpK1wB>SFBkBbD5Br#9wa6Dx$VX#shsx)D)m ziN{d^XtG#~m%=|~tM`zlh&-(OQ0k>yaN!!lMW!HZjA}80Uvg05=;4B-&S`|_y)=yU z=mw$Pr-m+bwZKS?D`GZ}fn619k9IGH?StB_;sY4n;-m@RncDmr09OA#*r9}q#DWTm z!ZI32;=KH{b)DxSh6FKA42H^((Jziz+`2+DOg63)(Ot0H$^MM%ePJut@dE7?Si3lx z_*M;=HD{f(5!u|OvCzH8ex`?-T>JEg28=c^z9XICu|Tj>1$s~0B9LAjlXaP^sX5!v zsG}@xc(z@fSuRjQ}w@NL?C44e}&4OdwZO7A7;1aph#RK*O4#c%|^vh-^JZ1 zbt9h3W!In~(V}ir7D^^$)L-;Aod;P>xY1TPD#&H8Yf9MBeT#2%MHA%(vb8S-9^(e` zaqrjl1V`)-nB-O5f;Vv>N{6gGFU88|kc|S#X_{k0H98-mA1#Ysd8|Kso%Ly45XXlk z)@S<=Q)sdMOZ)Hvu7uVl%dai&lW-a_03#YfBbzXragn8Z8ig!>I>au7sz_PvdAa7v z&XYOb*|JxDX#%J>dVVO_rV`;kS&pn+m!@N(${4ZJLG1}-;n`A-@h>Q@?YSJhI^mmD zu-a5B@>c6v#bUKzuc_gcYx=Pm1lpOYsnL23{B6yBTJ?v6a7nBvx*#83^-0(0>*S&D z1TW{h>bews572v9q!DCSdt`_WS>v)9KQDudJsZ>-GwS5FLsOK4@NT1_zOre- zO{efS%fSvt*(jY#-3&TuAs6aT6_)Nk)c)t!PrmZxMi@isH`(?PJJ?O1RqLhIRB5vn zAu_jsShh$&FK)60a8!fu?m%&tdUfD=ni#_|G76~LyVDxaGW0}&S!N7Re6c<0K$(`* zN5Y{BT-j>G?F@i>?U2-Y+zk{M-iZy&bjxTd*5@eYrXG(?~gUh#Ts1jo#)y4*`K{PiJ0H?8<0F@XEYM$ zhEfsB^&;z4J2#`xI$PJ{rNoc54O0mYO#Q>iko}iI9C?;Av@_Hg7+9ouLrk;FU6;#z z;w5pd_OD7;97uepumATUEx&7LUzz)#uh9 zy{*-$_AOIFBT)-4k0g`{hF@-q9ZG}|xRB^cNxda(9Bcf*z0?)8SIbg{n{l{FK?db3+)eJ0DIE^Z3zzD8W1_gaky&Jq}Z z79d)5Ha<46oJNThP@29cbkmN1=)mf3JsUPFZ_B0hGCnHdD*y~>{2Woi{tw;eKVdgk zThskdFTuk}9j52Fx!iImdu2v`(=@xo{h{K`Unl(+koL`n}OypMp{r1&=%D_ zTT{d~1&*H0A`Vkt4^xNCVC6NCJ~(NkAP$;Y(PtS{ejnU9P)itB|M~6YXG-NILt{z? z5?!ZG3kv0kpP8`<eeBoe{0RX4G%Uwp0$pgl%x0^h&*Tc+mKUILKfKm=drD@K?u1n-+h$Zm zHB0bVwZ0;H&O7fM9*MoiZ|&%pcE{gD=s}PdGpctXyngKy4*T^h>8oe?tt&U#xQC~+ z(eX`s+yX?lF7|o%{$BZRq24IpXlxgmpLd;#>^JJKYD^&X_NS1{X8;t?aI8fW{MqmX zo;U@}at@q5e`ioh&w8B3=l!aDsRTgT&NgjD2A7tcq35@}+XGNxs>x4HeQ=ZM;KM&uHe0#zCK5rz@R>2cT5-=VNt2;k;SkPCau%S-PgI%Zu8N*f6M~-S*iK_NA>FO z3Q6v!`N2JJKG4j!OeeUAfwI*FDYV&4FpD1Fr05qw;uzh~!`*tOaO1ppCqCtn`FzSd zinBObG9F$vVcEM^+- zVwRcD~-r!l1f%8+F zfYJT7=SLeYq!*iES@MHJHybbajyUj|Uxa{k5=AAr~CzywQYy`BQ z)idd5ivmc2kvr|Q0uBEvo?!kqhotS_BX@pQ0-wUOscA2^TCc3H^ZOP*h3x?QbS<9+ z*sTEG(y8d)^^(xl$MS~FV!JK5A`k*-jI*S_&uu$x8oEn;I|}famfpD7JpjAf=oHVo z^3_&?o?T@iIw3)$W#)y9KFm3ud)__wH2d2$F!%DHH?Z^YCi^*Q-t!ss>v6u=sVj&S z`O&VWiIzDxIcc#-SDC>SxsK0gVQG1TkW6xKbn05NnTR9@c;Q}sidl4y^97c%P60rW zvDT$7X3kR|e3;MJ*x2zmy8UrFp);9<^3;-hZU*$|GYJf!ky=6{?@Fvs<-sPn@%hQ$ zgX22FzP|9cbEd)mQ6+T2e(~+CP+BdK?ce8o43alD4oqQR^XUxNYTnc^WWpz_hG(qv zw5kek@|?ud$T^k(Og18+foDtM`d%$}1$upettQ)h*H?QxKrU!rSAPCMZ;u)1O*Y4^ zob%diJ~^ptofA6s1%S8G+FGs&BYJi*0t|s%E!d-ExG%7;#Atty?C6IUEUN5dR}Y0x z{&YOO>BeyW)nrBeDlzAZ{FKyqnciBa%iHQ~1j|89g-^c}R~S`|WiC))`#zeD+x8>^ zNF((6taL`(_TCrUq@-OJQDsl@N7Z<@K${Q&xXi! z8o&F%^I z`Kj-#1_c`}UQUGKGj1aoD~@()P%cIb1Xt{7Q&Uppx!p3qchGqUur9P+hIZwp)|OPX zOjoE{*d8mSv|DVIfX))K7?yJK5sT7V=f;~i_^#uK;F!w@eRisy>~a1W5FU;6M|H9e zWyt%86@C+4Is>rxOgU6yWW&m(8^4Br!Es-filI{L9eHi6vYbjYfKTIUo`J)eDRea^9y`wb=dknto7YZOgqOf(_Q!$lUEY; z77a26LG4ah*0$e|sOuLua8?uJ%LHYn+8fk$p{Yb+=qnzL;>j8iduLP)FbBR=lJuKt za4EUg8`847S1bvs3Vu=9cv6z9GJY~89REZy)40Ke@%daU<`TcD&B$cp5XwM}I! zi%yBaKIG-*U5nH>$r(Hg08ZvRHw3hwJb#+^z6q#8dGfzKy>CF%`a7jW@fAzK;wD^n3bUzz-GvPD76r<}^~lstA?cHbRxHNIQi zt9@(d2ps@V61IMqX#8=|TUK8`MZK;vEjgFf!_s`D%KCH|jw~G-kS}d~Mk!xpKkS@) z1DsM#rIoZU;#YK|<{675Uy)J|py9M0#mBVJ#!gCe``>KNywnnR%uAIH8GBQvUq4J8 z9J^6MDUqaVVHMFV1WQ%QFM#&!J>Z`G^3i^aRvU>YB+vOyDxNq#@u1_Fk0!Ph6R^C zT`9Is*JgAnqHOKK!&gG$2Bz+lT8B~=yv4y4+YGCY^4T`IY6~2f8`TCKHJrcrd;5iu zxUpZvRT%&vx^PuS)&hP3;>^zoyFYS&Cyam@O~YuDsI|ikEZ`qMDNFX45bX2)%Af4V z2e*+!o&3~McD>{u-38MSU|CVRz<$R=U!6A<=jWb6EM-~*XgWrKFVrdkfQO!=$L`bB zzzAz|+>j9ed5r*$^v%P3R-c}Ndt>l%Mo*nbneeXlvx6aOP}nC^PePcR@tDo;bUt&5 zf{WZON2461z z%KIaF|0o@SYS9(27j7IV^5=fa*-mWzkssxauc~K772-vW9s5mgkzR)hq-M}w;MTll zAh?*cX$cE9Sh(DEYxFtJJBkYpuQlsWu}kGYnKTi^bFJ&dWvu+dV5|0I0{B%cb~zQs zom4St$WCAHare7D7GX53sFw} z(Pees+W8UpofTy{cIHGvnU>765GUu|-OL`adiDUp=$55OK1XAwovn6s)}uXQT7?v-Q#MxZam)#@#yHJ-5QyNbRX| zfKj82NBY0qAZ}y=%yx+ma@+=?zA%!WJWC^7T^Sn!CdIEr)90$P-(eNu)ltuhqlW22 z4RouEjXQG%85&ER*4@Pq^>-K_L!#` ztGVR6J}~ksnkPhm0}g4&JCox+JZE4^`Yt04<9Sdd_p!lU@1=B=-&vyHKKDk?xhb8`x4t~K$B4NPRbq;c&B!GBk`zV-Sw`DZc_ z9lx%TP4J-YT*H{u76WZW{ydfi3FMVBTDPkF-m4>uYPbP)=94bp>L?(78uIfdEtm_x zICAp;EZ9@&`|YX7XBF@7W({(8ms zArcd*M#XM9cPZGD6kvsB$XgI)+yonI0tEhn>=geMZL}_T8>{GWhV?AIWR!)r6b>mw z1Uw6U9={g^48*!qUkItpoKK*!1I$gFQJJ){CAT&j{$(O?N-a_1e9d#~GRXNL!xVcT z8R|-PHdrd>6LT>!e!o3$Oszozfpv){Z%`GTfVf5+614SGvNvjfm+_-TenUAolH-1dj z+NKJT;VC>_I3tacz(R9o+2S8|W%vi|E}l|ZMnoq+GWjy)`g5}`GDPg9;P1Y4fB={x z^GchB1z^DJia)m5f!`@pe7ESTm&!&WG<`{YOYK%0FcfQiIKyRrIbb4J664b6!L8yK zE4aX*w+4U(`|S3c|I!UPlH?Ay(11Mt{iHMX_#41jAe6i5>w^;j>MkZpsIi_nR}a7y zp&yQ;^m~wJ>5HdR%t|XVtH3=snyB#h2bbR=w_hB(jNxXR_m?}5q2z@h2{O(x>Zv<=2~xeoDRn~PWU>{GQqXus|po0DT}b)^Y-S7 zSwLuefQeZj!2d0?z#RIw0~VcPS13KV$uu45lZL-sf5Suf3LBQ00USPGgNF47<+%!|1UPwS=rl$tkT11 zxlh&J^-AgNE>}ps7^2e|;OAu6gdY`@$0>(K8(j7FMWqxS@}*x?wB|LwD@l8&m;P7&AM<3g5WL>m_I`6PB%b(WbFxbYz z5?pm`w?BO5nf5^O*~4jqzEs=8)q#PK?&{Y8oP2J(wdR?65I(nhyutEAnXuKF@Qp6h zOUsLoLRP}ctCe`iB>@RA|J`y3RSNLzj4(6VF4DOfREZxafAacI3DPl0eaF)L3S-+ zxLhA4T;sa8hvIi&h0bs-J{BtdQTUa1l9~t4z>dkA)Dld>9GmzsPr?oxsx;6ZzFo^9 z>aC0RW}zig!#D7JMdjMLCA7uL$9y4em|BVg9@)Uu4PD?}ml;ei*E5EhD)Wjhr}v4B z1nJKPPe;r|K2k7^053B`PEhL;)>NQxI`^Rw~27OQ1tt~D04}E}Y_sIxJ z>Yq*3m+LAw(r>np&F6h@pTI<8tTb8G_u!#pHuYU0E4W>X<$383`HqKMjv8la)}Dnt zTw^(29F=>yIQi1JOMzuGb_{Yn&!;gZgT2gsef$1nrbG*5)aW0Bdr||t+rU><7V`5< zA0u4y+kbk!-c|VWeSc}V(apYRz^?Tc-CU}}X1YL&Nvro6{ELWP!gmzvtqjUQ`1f+H zZo?gB=o9^V{ej)7Cyw%U@oZuC(8VE>S*}1^MuB%qC(Zi}yX=xOmY-y04@*d3TfWCm zb6hqjkBK;3JSW*25S_c!(6XtOxTSpG*TP(O77YXum?cNCz;E5**Jb4!#X`<)Y!|LJ1~nFW_EF`EENeVVOtGX^OsP88d3Tg zXypc$=+o$m1cyq3!q&7^g5v7Dvlr2|T-%(kleIS<@vRS~q zk`_BITfxYh4?*tj(X{&_;UFxGrZG!u8-l8iVxP@!%Cx4HKR-+ z8a6S^%}Glhrs`r8JFmZfVk`J1?vmjyh`QR7X88GT87jn9fS`j#{Io$o`#Xqs3gNL8 zzZb7^XM~!ykw%LB+G2BQ4KG*VwxryusZ6;E|3j62g>5n2VKu@Zo9A58`M8^3C@2gd z*(oH*LQRG_%q~`?=IWtp(3i5$QhDKLDKjP=?Q`=L%)N6mpei1sY(#Z)i+7p2re@EF z+dh!<(U69zqu0vg1@G#@>4_)=&<^fyp{NtcfEc&u)C_(1d7Ofw#r^dvAi1L6_MYfl zf4^_{=Z~E4AU)XZTmq&DFIVC`;r(eX%&>-a~8nP7)#SE6;CgjZQGTcWDOfhMooacAoQTKUn$7_$LD8r~` zIV9@$--nNBFF>V~E=`_y)O`_@H9X)*2Dxa&t5(>g=;IFz>wIplZPJGy9CYkF8n_D4 z-&4dvq|N5wBgjR{rZozvRC&6DovY3m?yh_g%!ZH4kyx+DLWB<-cTFlY1a|+wE7&(|3p1*||6WkdP1)OXlY{pe?j;AHZdFTf5pXR|7q)FILql*RL_8t4ibZ zN=fMYFe0s0!=MW>lO%5-o6f;OSXo)oh!N#R@gGPxCBh6&+1DhqOAXkZ9R6h7{%q*} z^t}U(vWf}?uwW=xeO0z#i-S116xe7So0+-bqR515E}G56?~DdvLxZ@)$2;1L+~cWp zQ$m@_!J&ez*Hlp#XjOH)oPB4TIvz%ESXicUD*-|7=;9+H%l*_8?PhW=2ClzJiFO8| z)UJkPZq~Mqn00^FsXB&F(TNdt#_hgWJ7M(`V_<=9+SZc0ZLH(a3%oaCDQfERH4=92 zVclh$8j^h!0mc4m4@ zs3MbH#jiIf_|!f9RSuhY>q0jrlX-Z>Bukw1$~x*Da1e_E1eAWwEzH;g@(@BOsu&m; zx@PrhFE13s^<33|mWxWxlTe(_Hu(^4Ev_`JiFDuTtIpwVaJ4&s|B>bWWiebL5+LdX6}HyxY%e=26Q@O|v3syc>t<;(O_ zAh~?;qrzL9OzEk&c5%kX$BVb6J!yl$l!3I z|IR?*?>;fDAJwQpnZOWKwUQ+fCrT9~BJOGC5)t{Hv)VpIpIZ=ntlJ}|_DL~eUe0#% zR!m)gsG=;q>%I0kNUm;l6NYm+VtS%|x|HP~63*qSoFY#$<|%YE=QPVYgLy%1Br)&V zwf&)q5?Gf$2(^gHzru=Nn=i%hcEhgPRmOlnR^!VJfD7K0U3RQaHIY!uRK;CDJh^ST zqe)YM&%4ZlVv9YaoHo-o8F_9N=_XRsI^A(48E=J`WB7hitsCGL{L+|3ynBH6tF4zN86p32+ zf4pqTUy|j(WhPa{4Mf8))&4WD?xpf ze@uZ{uFqm_f{k!({gI>3>#C0R%zMCPxXv`(J)YkE>VqIpwP(DY6cpYzV!pWoxJL)! z$8{5&6YD0YkDn?_G0vPM798_Z#y-dtka9%7ke1l+c+%fjaIguZUwYYjXK%=o&!x-t zTq2vPNx9ZpE?u9=I@%Z?vPp|?i_qaB`_^-%=KEx5bN+01gK>ruDx&M<>r)oVdymMv zCyfcx#%n&*L|V42p)&#+Wb8p_8{NiB*`a_YA4MjuxGaGo7Ome@36MF&6~bywVI|jj zWBElYEK^kqMYI&Y%o(vn(0cMx<^|H|{-@6!QLdDRWr2bMiBCx8&Q*xspAJPW(ZFEnMIa+nOYFU=*uPFL%RSd3Q zN&E0P3`3)R9yS9uwn_PWg)0rEjnebx0QEf<^PPTgouKHTdl`>g0q*aU&_KT^hDbgT6aNUimqxH#He`2 zsBdH=Mm$W!0HH&S`wLEasp_~FljlSH;#VIQNyVs+uteXXKuyUZy%+7z;IbaWeyo~p z%BSyiF`bhsgKl;5a=bBe41L%tN1h~^!sLD(|B$$Y8!30f@h%IL*{H@4(aV^pHAo7! z-wnrhmZTKR)qyD!ya7=#_IMs9M)x>j|8F036NJBZrHd~03dKXwY%-MO!E*E&SPg-=vX_-1q3CqJ;KD6Wnd>5RfmOQR5-`7F9PlPVAJc7x zy6My-@UUAB#v>sSNfzzA#F;I^K=^nd7{$O(U*(~AW(=vmv%z~O*IH{tr+Xm0rqRc7 z+gmtN_bG+iJ$!C-0XJWdt-Yd3J-vvkzEA~ zJiwReXSMddYNfC(D?3_WFrsCxFR1B9wJcB`Z&1GXfp+d|$BPZH%w>n#A`XJ9NIm7g zI)efJRUxKB{Jp)#eIyokI|{0`~O zer0pK3km?&9fsDFH5IF{6sqU1Fu0h#c&#PH(3nLDXSSC0I(x-S7eAnzcrZEERXI*l(~z*E@Gh)!E89}#+oCe-Ws`2OYYfap}D!Nu}= zW!z?i*Yb%T!NxSqf*M?%3_*i%Wp^;qZS@-&n+>Y`kHqAUv}HO~81R*)JhwfFR}aWIBj56~{UKjlg}BYM?w5X754@DoBM4S z`rSKYa|Qb}bt0A9rq4~rQ+KR!S_Py_qtq&QuLEbczOQD+9|S$y}!@G$;xmgwXI zQVwC5JTW1(6GMn9=EaQ>Wp~Eax;duBfmc*9|0@^x&B#{M{mX`?$ciQ}ti`#sVxZ_o zcgotmS8+r~_cyO!I&1A28!4bR%-)_1I(9VPG833D_4BSUU0u1`RZh?N)38=xWpIfF z4WyJMMgf5(s-4~uoL!WNxK8krEZbD5AG z%(yFJDbHPOBuV+P0kE}Z>(u3n9?gQ{}kB&1=;xP`xZ(_Jq-oY*-W>!IO7B0 z2=sjTak9`>6+^vm<SI+yv*qP`Q4^%-a|)mm4LfBqF=3b}_0v4w0G1k4J56kR z%^*6^J&|<}UmxM1&4n4p!%lNq*oqiM&0K@&lv8$%Ze_#tZ`C8rEFhD~yoXxO5tB=8TF!HmV3B`4i9P zPzzWX_|(wXCD8Xt1PPz46gT^&N~#a`8HUPdQlBFgFDC?3sz**I|NfF1_ymAQ^MEh0 zwd7K6zbBrt{Ez-e-u`<)Bs_~8>!JjNIFzmE7}`mdVMgYKFA; z6Ie%vdY&G-Q$aO~q>c5|#o6#sp8FRlBxX!t#2!?cuY7CZYaWg5sC=n%W zM>%FhIXcB@w0(=FRVikav1n(q^VrdK(5~5b^o_)@-w)*GS;N+bROJ&Xnx#h~g`6;S zS~ElzrM<)9u8FV5mbCEEn+~<;EfvvNDMSgebFsKHQ$4K$x=LGmX`n?QT#IX>C;#Bp zBh#IEW1L0&$TiLI$DEp|dLxfFNaoJ@W^^B>rd_@x?XAR4-`bPyD>=TqF4n%8P0inJ z8cZ7GI1|paVQ{N`pRn8E*?qjnxrR?BTILTsA&6+-{t1Fh?AsWksr1dz(N#4;9MyDK z(Z=`Gd+(^AJIdh20a$gOnNXc)Rw$@eTE-Bt$g}j&z*u%;=-j4_Q@NIgMz3`*(zRw3 z3A?If#A5_rR=^WE;bM}owb=>%||TeU7F()#ZLUL^Q`p@{rOL7`pdjZyF@=1^xyY!l$J1d zA`mxiRO~UNSAtY;NHzf6ZMUbJ2P`ZHJTJ>r(c~94%k)((Zr2o3eqVwO zn^$0WH#rlg%(6@07b?S)@|DdVb*bKXHzp_3|3HQRYCHdJR$njUNRJChNCH6sr@ejl z_UGbwN3&B!fe{ZZK|GaWEARIr1ya5Jq-DUY3H@@ z;~<>rj!TZd+!mtLSw>xfDo;*cRUfU&%kSi5B=%z9Q0K%O^Y1aTanC8Xl z`VdwAcL(tQOn86$4@F|+I;VK_P?|5CpXWt&n$&F6DWZ$Z^$F~C8%zoDg6aANn4dQ- znFw{85KT={lAcOS?T1HrXc;wAZs<(K7Ma#WGT|Y3W4WRvka}o@vzb0DB((M6vkl{q z_dC9yCiNFh&VE$S!pfS6bbQT@{%cxv3-$faTSbG|X;F37s^cS!`5(AyA%md%5MiXb zx3>b}A8KkLPo0h<_=8-k9s_5QrECV0EH5c8rlzBl;+YDGgHw^k3;bdr$$RJa?AtQU z*BOpZPJG@CK>G74O;iVo9M+AEhfrM>bs(nxd>i=dcgbhKNo{t^Y^A9y4mASz0>NTz zjs|*q0Fy-vtgdTC@M~GtZQOULqZi(b_7>5lrA&?WVhOWDLLl##GG4_z6IVqogqm0icv8EdJ$d;8Bz3IJ4sDX#)0U8vq?!)UK=zc-h~ z{$^$#Mu+NQ&Ud~{4|U;qNy@5$3fzD`k={M_3B+Hn;D|GWsk^&ddOEdj-5inei@LU> za7%>VTQGCLd33(Z%GMhVQWg`E-K-LrYz<WCw6mM4>|yU*6JT01_Km#G1R-`D+jHc?{)?ueF9o{D8yq zzI&{zCm`zqEg}+xmZc?fpDiB4a#7vE?4MHOMuy%hAof8}n!9{hDQ|9MpCy#pKe^ZR zFT!675K_%kxr3kxW0S7=Upj`*_$XftOHjpQ5)u+d)pC>*KtC87g2_}6>ixq#D4<++ z1ztAE-+K<~Rh8HzE8 zo%hpjIZD%5CUcO=R8XbX%##gwzh!yVrhMVtF*BuIXT7lcLmk==G0z{ zpnSGk*qt1%NkAsGEAcsuI>AADM&_wbPn?`;U(A*Dr@j5x+0>MEK12bk zzvt7Y<`5ZOPftXXhs{j#OZ#8a+x2;52fwjdtN`JJ{N4L7-FsAMkez*E4Z`0=#yV<< z#|#POMr2C*6k+x9x8yNJkf^gzAAK!mer8Pcv80n`BVjjy^rjC(rpJ^`ueAWTIHoP4F?ZN3K0Wq~r)?_kyf9z7rGr`7fPBK0>-RF_? zhg3Ya{-qNKBzHXxP&b!>txlb|-!RZex2g1NAi9;|U&kk=R`t7P(`>cftl8II)CT@$ z3mi*j{`74B`@KYwEjgiA0#u6+){k;TL(*C1s`M0XQ9*_ZS_F9u& z8s|@=EF6mSv|U3FhX4Qb17GJ5oocnK%bS33`gGDR_$G!H zrh;BTRSCe*xh^I?YtHET`#Y=mA3TV7;5l;r<8+C_1cnIpA@yxF`nGg|C>6`wk zut4Dce^ulE$+-Ss)%bsJiy|k=Dzim8*5V|8JlC14HkZM@9VNwYSm6!^i;rR@=-fy* zdCX5M#b)x)4n?Us>f6QTd6!vw5*4r<`QMi59}L**Nb)bQ8*_Yzhlh`pf)2Er=r=2r zLDo@P0S!D0%4$>*E-pK4yj}9QZY!C=+^ec2F7s)hbKE#NVI*dWGWVoMmW(MrbLYG> zXPwoxM4ebLr>21Z7#e{#PKzD`rMD)rpI7`4Jtzg!j9lcBUR$<1NO zYn|RvD^do@eH*h-#}OxHU?hrQYSW*AJUf=!=B zuc1jjEI=IVa(DEBho1)zRUA#Ixm0BC_CWO;Bv|XV^eR6As1&Gp%TpUU%nlP^UdcUc{b0l zyO}EeqENF)+&b0638rLaWi8rZy~*w&V}&eccXHw?ovn}z@$>se9@s6bfwo3j)f5F^ z--P$ir-9Vg`Y+M_Ik6>6%p#bIit0RlGVT}8LJn8>TrP94V8n=a3mN#!ue?oc%Qy=8 zVF1YZOst8d*l zeTGoQL`PDi&IR=3)^SiMn&n?I%)`Sto}*aIZFkpD<>Be>u2 zFsy*p3?#e4nt#c|X7OQv@X<2mmDPNXh6X`(k3Z{0ICKfzrg|Bihx^T)x=bo6PcfSc zQ!%@g3Uv4gi1q;#Ljw+=7<1u&MKRjY&IS(~U-vyuzW1wj@=0U{^;ac;PiOZtct3 z8Ah5G^3TDdrWQ(p;ujv(M6hCzb0R4|MO@&o3FIqe8>IL5!>SX5RmX<{0aPd0%{99; zd!BCXWM_oC`XW9YCkpp&gY|};C=s}3mv1BSQ0vmM2Ci}d=U1KWW&C&!lM%s)#W7^P zx))QRIli7a5TVANUqMWlS7`D?a4S)b@KV)qtkBRtCyFf(WDs=ZbYweS+0>vCS?I%( z$c>UfQFPpWjEG+3AX1-o%#6!_aIP;Jxdo3+-i-L$~YSeJkFo*YbGs&{Q8z#mnIV+Lk+NAanAS{clS`|&XkA27oiLCoFVB|AmAlbp zmlnfR4CizUa@09xD97<7O4CT7c;kcgfjT~EVP8#iJy&#^tBW)lpw26rWB8hQvyQEbNhV1FBv4#bud0`>OYV-UR@jr$d*Uk%Zoai+xYvs-p^{U+lXL~F z^tt6lM|(T*BrwyIF=#10Gz0){nmBG`N_)ulXi{dX#=I5bL1dwzCTZ@|e4c8f`}Vo( z+&0m0u9UAbgP77!T&m?r;hYtwYD!nb@Ts6T_sAExNGJ5Dpv7^hsjUB=7f#X~L< zukRmhWQo*c(<_oW%ITr+*54od7{7)o1y>QI*EmDhHE>_NVll&zh=*K3hK}<7;P;i- zP{E)#JbjPSarj4hYX((nu$C)CBrJy;KQKZx9`G6yA#*}SBn)+)R_e@(a0wr0>g0Q^F3Mjl4>c@(iBb95Ii4sq3pZPgMY?|E*nmh{DP{!cikX z&HJTTS;p7NHcPOrX_dZ)9^JwAH1U%Fi&$B7B3r9&%|I}XrBfa68uT59gVi-os@VYI;M4De7y3#j0s8lRCfApqF^>E=Mev~b560)gv!;<3U zas9Ix7dTq^6qglUZqioCJVDP_5;~vcx}*W0O_wo*Ft?rjz13#>qipNX%&2f(&|zXxW=n@x0^>y z3vpYonu;ae>Q(Z4w`ZU%4~IJBFA85Lv=$P9=POKW34-0rWoK0}PA z+1r%FIcX77Yf0$q&2yzurHXC8E(xghHLyo#T#IE5wvy?^FFle)6Xu1^-TW3A>2p+)D}-)iHqN zKc1-;8Q7T{;a90q=P=I0Xm(9lKC&XHXCV`!Z8Y>0IZbU^w!_c25iSv(8alQ|^w{b- zF94Jx>F!DFwsHP_wK*>LX$&G>>smvu3)AK0?mWI-=w(cG-mzv#euB-3YFZa4^6(z3)SoA*B{EKa-hvCc#xm$w1rYB5uWJa_#vRe^hW zajWRVN~osTwaPZx7+ZrC74ZPEmpS=Gs)6COcF78JuwI=!)|}aCRbo`eVQ+)L>$5qq z0Ap!sz-6&D$x6i*63!GXvOD^vm}o9r_F(>jq)tn-qLl_RxB2UUAdfZ1HYWWLO^{qi zWqbce8-MlyCx&L?_bjj{=0kEJriqNiKtA>f^ zSlv|PQ+G8ZAr2P|Y_5@Z*%-#38!yqqN)~d1NkZ}%OOqgt^HqCUk9j;rC9u>*7ZuQ5 z$f_=nSFAg<*5ZI7as3M=&(vf(D>R5q>*KUv?Ru8_uw~vL0N%`yzC13r+x{raPDr(4gxi>CsEJ%Xd$ic#3Qmh1h+#=v0ODa} z@2B!o8V5FX=47gY#2BQ*LmWRY%RgyD_xoG`O{=xiA|IaY8zKUqrzGSg&iCy1iYtFC z-8F*FQPRM28z+(G1PP2ePIX)pwanCyLSQY(DYgzaC({9Mv9y$)n&PFdy^gKx)V?zujNY zaQt)=4b!`MJfrwE=X5*lRv;KXs2Auv5@_Tkpn6{a6pd@g_e`SRdArb%OmK~NLk}$3 z#4xsecIRUG^QLgeBXN2XegW(d7*!xx9<6J~rJvK&SKvOz=n$gza>cSaGT8K^`C!a! zyP&Fyr=b-4p@x>+@BAEI+k)Lm#ny%}W!Ft(|I%3;?0UQO7@9x^=4=B)tqqDnZV8gA zIx$iI@F3#?gt&7tp?X7?BYq&pCweG_976zHfDTEOD6j0^80TlbYEuq-Z!>9X4uR<2 ziZF)!#bM^x7A92Z1wGr9n0$SZOmoc%>2zLa>mpD@R**-tSpKbkOWgIRP@g8AP3@0k zY3v8I|wq|H10=OTHvX)m;Gsq30z^`irGvV*5T?YgUv+mX-)3s_Z+G8 zceQ&P&JYL3Cd7Y@@ml4S^8j@2>C1885@&$I|MrZZ^su@qT+dFQ+)`oVZ5#5Nu}zoM z<%5+HReg0(RYf{6w7bu>asHiUs{VTioqW!d?g!{=vO#b;wji7u;!!gG1Tv3hob3e1 zPkj$>2pWz2Y1qG(uDp_XC7OKqBLraB#3?7tH1cTV_ZK;=KPBSwDz_^Jd>*{YJa1?r zE5|c_a?W%lt~D+N4yJz$R_|Q!eLFu6c-P+B>0`Vn!i1#rg9s_68wU zBg`}o8q)>w3TMLXQptML!SV;<#9Jk*8Y}>vI{d(8Rn=cH&SH`!1xkPC0y#%Ec{KhG zdNW*Fg1D+To85Qn9V_;6A3ZdC0hNZWY(a|-JAE7AS5bu(n8~=VJGdr(fg9D^B#F5g z%Q?H=$pXC_t}?dT7VPK1Zb!n$P^8#a1)nRh2=w=^7qlvA&ZQ>2c&20=C_1 z+(%j*sNt?1joLbshe{oeZny|8yLlG#!3-_GHBx$}ZTyb66NIA!p`o%xDluJP_K|o8 z0_hi)yi-Wy*&n;0Nv_)VDZG%Tqdl$1&>ndq6o`h#7%=X5f&Hc#ZB-_lDW3(MPVAQ| zWI#0#xIJ{dl8~F*Gh;*5VIt+!?VNRYl1??Ww25v&FccMm5)om9Z*UL?VWE&4`W(v> zdT9UE+9|rK-Spj|9_$FF3MDckuaUA7+UD>hz-n|VMaQ5MY^t~kQ4f5(juJyW8AXYmJ@ghewh%2Jk zSN6GoQef_5P2B1HgL|)oIjrS_!XJHBT?Kc&`i{ibC$8A&;hBJUj1r$GZ`3GB&DE_D zEap0L5Tv#vWiXe+)mTWBi)g}S_rtY)f(nuzQq zYaG*}tM~FG0abiybr+$;EnE{dCK7B7%C@9MIHw z2j_3j=ljM|h>_U3#uc#;Bu60V0=~#U(Z2|H`>W`ym_4&9t$BTFb zMmXrGba^gjaQdFUJ<^Pfxd1-^Igkj}iN!jd2(x-hlJ*Uii zXE1fBR`)BQ18_K?l0w~vNdC-}ArK;op1nPLh7Pyvb!}ewB60_^_&xSHS=Ikx?XAPA z?$)(YMUZZ!k#3M~M7lerB}M6OkS;+QY3T;(1}SNfcG5_9x4<{hcdfnGclPpK=bY^y zTzH8(=lqTFjOV$>9WQ{-G`?oJTXXafK47;gI_XPICcij`e2)9iP!N)dd(rHV+nei& zo7IO`x3)>rL_x&RG(s$nbe}U7Cn;hF-493)T{^+7hQ_IM|Xj z!71hJVWo7-;QyS@QFH#vJ11U_I;>RRyV%3yf<=9*KO|-LalLCp_=3>3GP364ixfFrfJ?o&(5l zA1)0>d|lhY8FZt_V2J7tWhaga#E62-=agnt7XQ-sW(eb5b=rs9-q;XbpB(ftj%nlU z?eI8IAYRv<-4`_yzf>N3z0gnulcC}_oR1j;6Z3UV{hGa&eo$(*8YG7rPSQNOI*%)e z>E5==MSXjGJQ?xaPCRFFM@f;Sto6zl?^(`U_jxZ$j^*z4V_Jc~*q=%NIs3B?%}fzp zu~es??8y^gx}!~iWV$#SCztB~fFcXfgnEaE6ZHD_55#S>d3)bbdM5ov9!{9|K79)% z{>C%dk3OLvLKDE++CbZ~m+(*sar9*`GMBWKfq~5d(eRyIX_^4#A%aOaXK@0iHrMu{ z>CLh`B^whHx09S^qJ`U$vzzBZ6&|a@q(!rb!%ecZ%}i!ODth0yy3@@U1r8}VIcA-b zc<%Q7u?cS7C|46i0jykARQR}=0dqx}fr&>69M#I(=2)08{Z&~tUCi1vl{uyErTy^? zLDs6d{xvw9(EiUv#R)beyK0CFaIy#fJDa|>q$G|m?kk&4VV~P-!HugLNyT*2VIpg` zwM+&wkc$CXSqQ&+_9daxNcTJlgjU?sC=f`!(_orYrpAer+>mv}8|IkL&xDYU>RRPW z#OqACNh`V!5%snUls3Y1CTYrJ<^4i`T{!A_h#vMQ*%A0*Q&;FLHFc7EXvFuO_Xf^?@Ki(^1=P0VX zW~kN(9KV*UT)FBRb(Xb%%a&)sc{+dX&3IQN}>~@h>d!-44^?C?S=+?bYM! z^WIyNvhCHVW1PNs@R+BpUa6336_gUaf+-`=0GH`e<~i?1vd5WP0&Q8;z^tiMiIQgT z|IGr&>J#0OG>QqzqxX@~G?D8P&9uV|;w+*uyiU#xh6qD?5s@q2z9xZ!WJ)Enepbl; z?0Ax*Ke-DZtT43eu5e+po$;ln+)s_JI||Q~4&7W-)4iJZ2!a%siAl?(O%D*0DBjiL zC+8;!nXz5k;L+l8DS;i^EwdVa)VKC7e;sSprt~9hC{T>8;}Z)kC!AhGO>F`#FrBhy zzod=Tad@0qKxk&r6ryxgXkeh3QzY`lHHOr&oAGQUJC9~znsL7BrH&dN2eWQP2XF?U zh@F_4>ZdO&#p2)ep)q00l|zy?aWMkKU`C0E)X4Vv=4|g)L&nIsBCN!sNvqhef#S3@ zJqeI0`4I*5@50#J$z11V3)SoIQn+2U@;=WUm@eKuI+4mT98MS3q|?P4`dcI#Tn#X@ zYTDYCujE^pGw8+$IyzRz#>Xqu$$VMOQN(@^$U!F05F zs$#`jrOLWwZdkD-qSXCnXT2-G+43YoLVLa|0d_(;;U021;i@7VhKME;bWhgwla&qD z^5N7aLp~-Gp+%6u3Ay<$`r9q|T1Z(RwOB|Mcw3hZJl%d4BZOclzR>=Xst-SYq2TMF z*&H<{UlI;R=W~4GpKV@AlwNn>UNOA`W7WfxZir3nJ zvfDnzY`e9rY@$H6?WQJCQ>)b1qx!8zYKn3u@$ZFVB%94wqCT=nLhwwvK*oKQE8RZT zZV)A<6h|~GnXfcarkG);9+~c_&o?Bo4J(y<`q9+u?J4T3jH-BHHEY$@2GD5O3%G6- zTg=s{+@%UbZBJARj*g9~;VwxR6r#WdVsNViJmn? z^#!6551k}f)-3|8pd;(PI6Qv;4;DEE!hd6tTa*7sEOJ}6pq&UyojrMB2>g@YH`N$n ziX`C$55&cBMl6rN7My&z5zY!R=m1iDHR$|zl2ER2*TV9ZVT`dEp6erSkPI)`&BX1I zZr@kNeGZiQ;cqa;zn%51@z$$8Me~y-uAOGQ!u7AqQ^S{eZ`Da&>$zLQ6^r!P7Ku_0 zBK7>3KNE^gsy->J^-a1F#~D&t9|$|y%RT+y_kKRXhL465S$a*pyI6Zhp+9v!iisTf0}gWzw*D%@vbjq}h-Qh%x&)rwLL67s1Q)=Hl!g1?F6H@KoTC882 zd5KF~WxN)Wgx;sT(QZTcw+~7;?MseKLbiO4=#Gl&`08*RH7<#b5)5OXs!$|w#R&P! z6=Qo+7?PnzzdEp&n)D6ev7t0-9CU0Oi%DvBR{LorYQe_jYeO+buZMa7Tp&yqtIOl6 z?9_6Qvd0JX+&Q1DTh&$cGBLkOuvZ{TpoA$%!E4gx*^UG&(J`*E6E!1QikJ?>lCr(t zWFZ%$8A}~68})-dnFXMqRZ`UhE}Kzf#(Y;biqx}bVB)4%qa{tCec02Z9LOm8=@OGw zTl5F(45>M3z^dkxxdE&mX+%|C8O-J#Qve{)!tdHGR_WIioWy-!c!oA=S{NJKaTO4V z=I$ty8tO6Wf#go?4x!C7NG6)IIEFDIN5#`t)c;K3J%h6r)jDf16pxBCILXhBSpo z_C)zre1gUn)i;@*|0X$(I3ryE%x3~OWQP1ArdJZE-w z$^UP!bQ_p`miu5f<{E2_U%z%<>5O$y zEm0--*<*CL0xCqrrncCas51!c$MKh1Jkk9FaADX$ zrdBgnQCS;GHOKyo8TqHzCHNBR`g}iOsUs+8wkv{N!8;&oHAtpC1pj(#f3KKXN#r$vmC2K8@n&|qKi zN@z$N+W^&O+DR$qmq=}`jQ&Z+XxD=eJe1Gy#ygl*2S%En zNK&cBrv*LKZvrgIq6`g23m&#cI-r)!bygAn>M) z;n{uS*D5g9jRBDy9Y^)Up3h1#CB-t3s15ggx*U~>>Qw#`VvAW7m&84GWQ)nM$2_2m znTm;7RF@#s;Mt?cNZ-mvEN5zZ?+w`7U@>B+^u2XK3|~RQ@{Nhi3t+($ z+_e6DKg2mdcA*R~jZ_U@BbtB+wz%l%=xp7Dy_0EaeB*!eU;l@*fP@m>;c>%|h=JI4w}th6hsX!XUP5wx#=3Rxl%3Oho*^eECpzm^LBGl@$~;{%Jb_6+ z{@zkvxrpprCh!BY&mBm6uFbUIx}MsG8u<}%~Hv|9KN& zdg?~}lhY2xYd{c1i6Du=9-tKJgno5k!3IAVcsIBquK~=p>vXR=3_xOwZ#`OsHoEguQO` z*x+tYo0r8&#ZbX?hX$lVHoun}9SyJzZJi-S*5?gP--UqCeoqDAOSHADg)Pixe ziA>_dQ{-G3-3sFnBz%x})Dfd2ADGN(8Qls>9eDA{fhQkp=bVxUlDQQ4pMFSe@VL8P zzyZ{{^~N4KpaS0IT@NR+N#rSppH)BMhr{_Fmh(Sp;GYoDKPh4_bY&}I z6W5xZ-6!0gJb!k=;e(wCDI>rBZEqv0yZTl9kX$;kP?Hz$p`#HqkmRU1!|_2nd31qC zh$`7VcYT01o@MqI?e$}FB{JwC*7yf%{u0GK`>V)JGQ>iBKPC$XmLII)!;r2pzS z{EFyuz1qyH{$6Rf+6NuJC4khK1#)-iJ+t24K!&}jYG>`j=0Q9ZQoYMzCjZZa4z2m= z21j$7R_ZhtVXKx))3ycZ_}0ro>&LYaL|0c=E#CH*PAo>=_c3c25a1sA)_Sr(vhx;1 z7DyTZ^eY*#REWXv?n4$~XLewEY|%1ER1*P*#t%BEDvw*C)^|J$?m8R;k?*8?OqYtC zYjPKA35Cqy;e1wg#-gL&l!CcQe>@}U&s&g|s0%FW7wVk6K~x&;!sU>&uQJ}sXKRmT zf`)w%jG=b92>SxJVxe2$jD;~b<1n0S9<40YpJ3OV-k7BHj|~eB={M|*`|!}QMA?Jp zqrJICM@~$B)%QU)hk^$nm7}CJ$T741e8%O0dq*Jh)snR+Niv6dyq6h1YJT$3`incw z51s&h5(T3U~3svNxIXd#ZsT_k-=Xbv1WuMDhr!eA%m0-v}ed8FU%R1PByJw&xX z-=1Q+cvW{pBybiY0q(?q)}_H#w0vTC`B`vb43F0#U(fkgm0j z5u2!*!Ds=y7oUUkji0-pS&U`a>XN)66~^nNj|Dl!QtuBOfj9dmoUR$yC{Dc6y}eeJ z`RU%AHX4jM$dmQWH@Q1vy2F@7!7H&|Xt@$0q~KRUds392-&0(JOMqVb1qZ!?L~E%7 z2SH!}uK<2qLEtjm<1kFWGc%$%kj9ke;z1Z{E=^>T*Uh&6w#m=8ax@}UT%x2RJ{L}) znjnal={7pSh|yYHgPiPwtg5bdlp`X6*{oL`^yiZ^n4P(zPA zNn?0qT8?nMK(R8fAFv2hqe0}tF`oQ#^SF^@ySMp#-kfW5RlxIV!~Id6^=MoGYf5qb zRKV(4!$Ls$GVO0vJFV!6DKTT5nmVhpCaySbrPN&HX(7SK*k0weP#ZFeZw0@kT-50Q zURi|mtD}%)3p)vfSa4bA4)T8G*kmRrBA?s^n`f+Xv4Gs;LWEbi_TCYZs27RYW?JiD z$qoddx_y**>MDBgfnJ3>irqJVcYEHi(Q*{G7$h`?r@$zL?PqoZdS(s^{CJ{_ZP0)e z$QPNNRd(Nk)Sl8T|3pjBv_X|y?$0+jz*odZm7*~sDG-oSQYlL%IXSTZz>VMS(a9y6 zjpQ81@;KlmZehV*GwuU+5mo#_jwyU(?ui&7Kw+CWU#r~wI?x{ka}C45FugaBxV>t} zX(2&7iM%CgwIsjm_AjW zB+&7K2xCXM4nIHNxH%v>I&V3D-VD3Pu_%BLir#t9%+H$go{&fR%VSglYj7T?KN{-7 z8oL9T?W)Yjuq{U2%@1Ndug_ri6-eA>KtglDOxtDz-`=-#sKd{^oy>6N7emC|qHV6N z%S8L%DxN;I>J|t#40PoOSt~+#WkrZ4uWWyG!V4kDVi~WtZ9jIbkoncGntz}#vl`;c z_cjAm{b?hIh{OlKsQRX_*#=FZUfRKdBK6>2d>0_`?}dFjE4;vEu6=MIzT-Xf+9a`c z{^4VMjx!;m($*Q=k(zt#IbSKu!CADT9hPD|*ec*8{Nj@z%_}&ya9=nr@2jzN;ZDY8 z(y#g>k}t%sd>JOS=;V9EE(m&6_n)(}vI?8}(3p+oDNL>VQ%AM@TxEi-O)e+ZA&tf( zi-Eup{}ceN`F8F^kp`^F%cL7LUBm*;U0>H%0yMA8q|Jr#)?jZVGX^lVOo_)ovQf}y z&wE_1Cio?jm3Lg?3ZVktO+63d3X|lkVCBc8MI|ss0hoR7`GZjR>*6_y2?=HoD53Sd zgC7K;4&^TTagF+Bl1$K$)d_`m;JR4;z@MhXAZ}zz_!G1E6Fs`5zhYpJU+Za!HB9+p zqjj(%T93fpleap$&iqJ+e1Ze{|YmN zr_x`~+j^9bK#(%?3aOEYJ`xM!LQXR5TDsTOo3@TA7aGXyqc&Too$u%adp;(|a~=%B z5D9@J^qW^4PX%j(i`VdpAdC>;Ec7#Y9XlS$*{MbjT{?UZ0C^1vR5Z1?T)v^OG~4&i1Iicxg%s zNP0e^7+;b<*Tnxr7Hs78TNZ53GSfbBh6~V)`d?^9HD{#_E8aXiIR+-eC`Kl36jFa= z|9}d|O9kVC($aX_<*zV7{@IUwV2PV#+sqFZZg&?}KoV|=RXgn0`;;e(h@uGbE0!Z{ z0oj{w@1GLm-E9l-Lq$zZI^I295t6AF`gf=LZ7c)dT|#^Lo3Uo|v3G*CYGMN%-mg8P zJ?pA-5$+Y8spw|z2e!ASjg?<#+hB<~Nn?2e8YFiPmar5IGf3jHRpLeX(tftX8td$* z@;Nu03ALKZP-G0iS-9XMkNlWL7!4yMqHZz%f&=B$2D_=D=h|fz4GyF`cmWtw>)_7r zy?&E_KXd|tt28tQY3!207J*eADKz39I>}W$qmt)YW%@(~ZcA&o^Xkx1h=PakeT#kL zS?&3O{AtEO_HyU>DF|0Y<-w|WCFs;4vfk`|jsjV$F@$FGD6`z_?Iep$tY73a#|#)C z?1nR}gY^kIRzeCY19@n^`)#SKx7Yhq=M;cbWxBv*K76e&KeROY8^x$AYPb9gHbA2U z+g%JYSFQbz4R5RXTgeMO_^;iq60T5Ea{!=iHg&ne+D8WDPtf)kcpZE-Wz? zx@W)U!F1!{SAx}^DDtb2r~Izt@fhJJM%hgMA8)~|4cS^kA>z$`QAHMwJMTf>7gt$D z6bDTQhUQT%+i8abQ5yPCzWb>x(uAXYL8wh%KARvl<&=JiWZS+l$DMyo{7( z!<3f+tlDms>m$<@L_Q_e0#VZ)@Fo{rNDArox;VAA=(b4SY)%hx_@zw0J}~!}a;6_? zs+m1ABKQ+w%E1XL1g#JFhtq+SbT}b{%qXE?U)%uS{jR9Jqx06gX2A+OY<}+dJ5PG@ zeI!kDJLzIc9oKwe5Ks181bGP(M>A=9oXQQm5QG{AK%%TNIoDUA+OnSC_uQ_Qh zp3Nlk!0^kmykRA`^^FXIy=wGR#NP8tT#A1WtgY_-NS5CofBgMWbR&L=$PE7=BKw6T z*$*+yCL3u}b*SJ{4N`vn!kYG8Xl{NLB#Y%)Ojk(}n}T?D!yxUN58Td<0_UXHRV;%gmrlMBz=izk$iE3OX>a{6J_@^S<-%$rKCo z9R$1Q)dfiGQ}kX$akA19Twx|x=%R~Vl46R<9Oo&WxsqXO#=^)MDpAP3e_YD$;siB> z-EH;Del3-Yy|rpZ>YHnmqJkFh*Q!?ulehl_S^>iZ3Sk8^4w+jn}%i__1 z&!1ah2-XB3vJExf;AGl{JuXLn!*%Fc%cK8#OQCWBfN7<~pZ5BM@%Dn2yzt&)&311D zU+V|jX8(RHVhyab@_%u)l+b{@8%tMv7vmpo7~%Kd0!XQU3LwLD063Zcyz-?nE8lG8 zb8!g%{9|kjg_51Vg7q=`ls|Jlkr~Nh^uxi<(?5jSoPvN|5y2dm?&dZnr z`|8@-*0Tjr=2yYb+76)iF;6miU&`PKc+@dy*9;Jr>TZLlg7QA!*~PLMOxviJXvDkO z_kk2XqNWK6`d&N~97Pc9LG%6-lix!5e`6o38zKlSM(-nRj92^Oph&lf_FW_p-&4u0 z-CcX%DF~copu*G=w9#p0Aki`oiu7AI9R}VG@pFIdhiW1J%Ay!)bu{n39|z(v#LH%k zy2xWMJz5qYO}l(1h}O#X4a%`?-2nY{+AP337#m)kd=r5RDJudLl|=+VFOZ{6M8cu? zwOy(&>|Z_lYeRR+122N|eMr+kn-*J&-!-iG|C-QEO;g3FIy~+%1dSFjPj3~7%qDVL zCh>$vPGf(Hyc%6T^tbq6(iQL3a(h~aD4@s#jsc{R!T~S1)EjVyJ~xKb<~C=_7!V-I zu3++5LTuQ)M-p!%L!WSE6oWGfgd=5N{|G6)ACKK2w*kzH=2NA}^s)8jm839=n=qsehH?h+g`2^a!5e{0NC#I0d``tA!l`V^dcZ#L zWyEmHANPzVoI|!^;C_qufgiD%6hcL;?!nDZBInr*HV2X-*r)lNU2rD%kh3gswr3A2 zxzDib2f2f*{ra~RUN(@uCg**<%X=&WnCOq9rj=<{iqBuqpG$jrwRrXLF)}iKC!%HB zZ`gj;{PcrjAklu~zQE15=R-GVGuEgP;V{NK+)g_mv-9#`#{#_oP%v_CkPF0&54-F6)={wIkxl4a`0g zq$I3_x^&+j;{vVUcyeJ28TW6CB_DaQUlt<{f4eT&wDBt!C}wthkkb)Z6G=m`LL}pY zea#dlnYckd2rWH*%spBzaGW^&vGnMEynI0d$wbR$_OJ=75ftozWssBu4w$>uQ(M%* zc6N3rXkbx{jw&~!@+yG42X8?!hiWj7^oKFE7dgS0u3tb*LHK5?st)J=qTMnwg@I>h}|f6rX=B;Y{UG1 zrCL4hm>R(w0jL9LyIw~z=^K_My&i5xNUirsh(6bM7^NP8^ZMb7x^TclTcR-}R-u z$~2E^^U}R|Kh{6;eWI*lHQ&S&jCGDV(6O3}zMwC{DbnWL6Imi~d-x%Fuw+vIvQGm# zQCRWd0c(q&L_7-Cdq0+u2s<$4_MGj`oU-~e88>`s`b>n%nFUa&B|V~{hwFj9`v>5% zl*Z-aX*4ePqPt5>E~e)}q(IBHc-t8|xj6KC&^10d7>dItOM|5V?hEZq&E){wrS9s-;ZON zq2Cw`icSj8++S(9E(PG6tWnCuZ<7m;K`U=+?i_UJ?bW5OU*%Zo2t>f#@s zG6s7DP{-W2@wiS}GWN36)C0Yu@*?Sz{uM94aHrM8y3B1Zs?!0h1&r`8_|k`|?+-~| z-(-7>Vv+Vo-q*d%wO%7tKF0uMC&XGA5SXd49E&EIJR~K0BgLfGWX4&WPg*DR?8L3v zjX~0xCfLPPz`|%QqL2&VHH>KZ=;$-#heE`El!kA-y`M8ch+lEQ1Aj?<7e!n=$^nrt zfpZ{tm45ieUDHsg4=0>T&)VVe-OpiG`!(4y#+T_Yy!E`TQ8p1^76`~=#It{#U!Qi2 z_81!&vk)TUy+k7|$Gnj$nk8mIWg}+`PUXcsSM~b2OpN#vuK@Xa@%Hi4Z^S%y6zYC3=jV|`k5gp**(GgU zz7d}@N1j3_^6dm&`|(MXzhjY>md@OO-0BY8l&d!3Oin|1dLI}J@3P7{Tr8-6 zOT>JPG4I`W*3idrrJ?Py*Kda$Pn>HEaC2eQu%r&x#QXLBcd}QNi%Z1rAJRXDPqn1SqJcFv36NLGo=aK z<5r*2H`-#JUqpt*hUSXm&qUOnj><4?nrWNrzYjun&ENIS3%-5fzW-#_!4BX$!e#w&I^q-&%AZ+Dges5E0M3iD>;Ef^p5Q{_}$oUkyg>ux-o)-vmvl z8iV0J(GCnih`R1>2D=zcnXnsa5O;hp!cmx=0d0Wqyk5r4=X&Sb7v0O%QAS%B?<>hT z7c||^ir0v1Z9l&UnfoyZ=u6K<2NQiY9B^*E*1gvUi$@S{`0H$+V{b7V%5VqJhc2Yg2=on`&oRsB8yaS~kS5E`@|Uip3wiY?kBeq_Te zV0jk6_46a;LI37l2?t|6Wp*BNsE3Hy%#o)MVMw107MLt4Xh@?(8}~(Cw(~u z>f>_h^AY~NTL;WOu&hRTyK?$bW(wSLznlBBay)IOp7OG@`0Y6rDTt5uIa669el&{5 zF#PoVa^_`nE9&k`&okbg7ME&1Sn^m+yO3?w=F8)DE^$b)vKk2hDR=I6GzK4>_Hh!n!=jU$CWm!l`XIxZ)W z6%#9U^19!=MAa*klnBu$2@4CGY3@Ax+;P)6%MB}FX)>lb9Wy>TiGMj(!>7EyzFvD3 zfTMHJTLPk_IQK;WsWOGnc}VoD$ccbQXfdC(`-MZdD-ZRb=G<&wK{{|ftiv?Ci7pBB z>Rj_Ns?R~*z$Ae_qYm4zzbQD4{<&RE1AFq{d=e{gRmAQ)EPP^G6MK%#!kYahKB_ea z9gl_5T(B`DxuEoKwlul|vG+Ho(G2!L#~l$FpWlgMViVLjHv?P z{O@8yCM~KzOP~YiTIRBGU4^JXe&<&m2e(k+Z zi$}dmm~i26W@e^5QNQ1xZYbYDN6RdNrON8G^Aa8!syFpxWe(#*ehGftAO5mw{5+OZ zANLStCfLAnxOv;Rc=h|=a)Y^lRVL;C*(dU+(c#yi*Gp}4v?7Ja{OaAx+8UL&-O$H) z=(pzPIaO7v2M=xHhtMT|y@1q4eg4qDNIscxFPG>FEB(TCpzx&s;RO&efNoygI=t}J z?x&|&_g1A$?f>v0{jF+L@CaT9+&FJ-Z<~DkB-ERp!j?_`OKnq15ZP`h@vdC5p>$1-uE&kIyrRiiY)q=5WfK)`3e%FJ-C9 z=^E2vAGhz{GnJwh9t=l;n{XpxI&V1-%7fDk?-z5N8CrchLkH2uf$rq15 zp+M^yiYGZ@Ei(K1OX1W@@+zRHbYSA&?DqgxnP;}Cgb|q1K^Mo!|RgX+( zf}tZ=HIwdqkUr;3eDE|0Zy0HNYb(33u+Kw@N(SZPSJ{bAxyDJ%p~Z^+e7pQD?>I`p zDx3D<4YBg)Pl8Z*cyAg6p8=buPh7tW(&X&_(hF>cK9DT{))yoRLc$fpnGNT~Db0NF zf(ZVE!NJB|U0t&Fi4@;K9RODKQe0?bxQVjf-^)*)K?&U$h!+$)&#{%pLytxYvd*tK z8ArS{y79c_tovP$@Mb&@-#P;=e7w#NUNsQKQ}&+x&wKx$e>&wt_nGSck#}8RNb-KPw@(@5JBUKdvq3^d_DzzuIy9{{R1f z9-Tv-8kbb@^o%xLW`8b65}C@_*3^_HU@1MMG4sWtnD*gtOfHenY_Xv7lrdN_veW-N z59C(`+7u-DwT&p3_PE|yEieP;rjxf&LgC8TaF5+jIjUYC0veu3h|v`k;Iqx^I+-xL zFO={H*33oxJ^-*V|LXww`$c-c6H%al?+%PTFBRQXe{=H~W=z0+^Lb@e3TsHz1%uNBBcZvasfdS8Gyk5AWZnoE>_Jbs4wgA2m#<`9`8ld`$4WvS6Qldotmaoft_{E$2$25kn}*m46X-% z_uha0>f=BX`Kvfb+nkGNlu;RA%SWL=vxbI_8sN<}JVr2?3r&bQC;Ro8u7c0>?0@Ss z^#ra2?>msH+lH0KPEn_PI4CD;(R-XHtx$mv&~lxvDn>nqb&-RPjz%+Ty=JC#1r^!Bb z%08u@FuI@a=c>u_$4~F^l1MdKyow#x=DYcvCC-&-j)Uu2Kbn}`FD1^c=>}fc?Oo*D zGO47MJwB_W8b{(Y>$w)~XL=3q{Z^Xg%y%8$s5MSuA_PF|BO@c*o$Y8QvYJSLD6Q5} zF+JaZR1oiuMW-PC$3F5`Apx6z3eD&D>Ee&0Se>KafDv(`#zx zTFqEx%{Q3@=`=WWAps4`u5yO#xe84s&GIBrSB{qHx7Hce{il|8`xw95Jt>z#$69bJ zms-0z+tLiL!Fw97ZPK$+0N;HHtHbXgh|+W!xS3X{JdGANDtvlcv6QFqvBfqlp(nro z_$Ej<#u7C0)=cS$xk*tnVijAZh*Na9 zvBO2_)Zs_l)4lX`F|h-{N|QFdq*@58dX^0-#?(aNXTs57bBwAp+SNcd)pCI6o3ibj%`Dm*Mg@5H^xJWH0wZ;8;UQ* z_{1n)0Zp2ssR@lJS)&}e&E=Ri*;`Fhj3!1=YIl<&YIC6mEzV}K&vrRAhjdkp^(`jp z{oB#Gy*kZvVNcH%D`wTvn`X;XAvG4Z345Bcm?18K;|bPH`>D>8b+U;C`Za=)el$U> z@@3`)_PU%&_`t~RtB$QVR`cfqc{+Aa>dYulMSTLi!56vnFGgvu*(qs4UxerB>Pw8K zCWSi;YWbeD~S?`c>TZro>VF3;qkIDngLV z?pQHN%f#|j886}jD@Tey?k%aQS?(>KO~n5!`0xAt`*ZnIHyrz0 zr?yA|@4?;>l=)Fi#7~Ox(0$KoV;S#GUeAC8U%gNP=CUa`nkB_7<8>TK=1MWbkoOuH z#qfa<@edf#p7c+LDo*s8`kXqOY16;I_)F!m}{wJgb${*lHa>S7a(6TvC5}v`EY?Tx7 z;9z9G>f{$;e~X(LM8q>g1Iv-Ap{+ck7GB|~lclfAfGSg(D@({iBJy?1wpD*yO5xW5 zfiHyE6@I~CZ5S_0Fvnt#Q~_bpU5*R=EF}U_2&fmj@$=0$FXa!gkJCZupPoyLt+q3* zd5=#xxLx4rsGN87G@{kWOQuvJdzn9Lq(xDhzQgpXg~*N_;%ML%c~Jc|rsehvPgmtG zW*yAQK#u7OFKfS)y2TPwCO(pLCiBbmVILJzh*M`6yVHI&A#KlTwos2@3-}Me2gSc_V(O^iL0WOrhB2J-$QZCt#0bvIQdHMhqol5}hzFWu zG2Nv_cubQWe|ImE3d=_|5 z-K@vC2LmIBT0up+a!g$#=pXGO7f4H4d`&y}-oX8%saFwKZ*0;qms<`m!tf3`d z?N#5`Cz=k9-mN&b1;@J#$l)^hn z$6rLEPCh=Tj5Q!~73)&AuV$#A0LPnvlj>RXnRNC-E6ZOe z58*~tA`tl3OZ{a#nNP@Br-Z|~O~OEFp7iC0am?5E5+qLoK|AG%C1kEkFX>SX2$V|1 zQHLUnCJe|4Gf=yTGm7PJvhyZgm3k^vt$eHEN?aMv6WEjB4Cj?bgdu5|q^Xr{I>U6~ zF4fnfev7;!4e~v&xX+PvvmW<{(cv>Fr0MCKXX9u0rEmzygd#vGmyV1$J)J;{rsG?3 z$-Z>x-%cvUh$a**P^+vAC!G4UKJD2ghJT#*IDlWH5dE8CUtzo5r_Pvu63_ZoUK3+V zrrOr#nNn`2bttCOyxTh}3>J%vcb`(m%xr1SXCsYDac0yBMaH=#9cUytglBUfAw%^t zs614g;((86b&aT92sQe0wIP@0zlLD>5pnzBjD&i%5r1y_Oj5&n zUBs+_xw8L9!BM)(d%FU+>YI&1LDgr_j%;>=`v z#pDR;yJZMAar$N@_0HdHb^Tl$4|{nXmJB?Jag}D_Op;MKd!pD#$z3LjU>+}l*h$^} z$8rx{byNg}U9KY2`sFxW>zkzXX4Z1tbTZNFznU9A(|)U3JYAeQffqNaNTNe(m&jt7ipf8QH1jjT{XKPS$ zR+1(Q@*9atwntG@G483QicU8hvWa}o%1uQQAS-b=W^{^2PvRS*hs%#R;rnhh>#cp@1C(K34B3fRV*ck9Zhrp&Gy z?TLS`3IF`l25AswgU?<`%u19~cwZbY)3ExEV5_nV9TEg=cDV6sT?#e}%Sxk<>|X;s zYcgL??~0YrslV(leLOy){|k$e$<-V&^Bia?=^{=DE+eghzt$Zv3k1qo%*10C6a-@wU zn?pAAt#~rgD@p7!>VzTqy2){kpHYzPlasIXxiH?)LzG>{ z$XfQS48m_!Ni*!tRDB{zqZpeM`roz%FW=1veVTvFEDjn0;>_BNpH|`2A0V;u_sw~4 z7-_g5PVAE;s8b?2AvZ0Rs5N7lmA2J1#lR_OvNrHjoSArEXUk}rZCh*D^Ey3VX_l^V zF34-p*k6~Uh^k!A@udZGd&=g{_hUnlu49z0G8NTzb;@owC7mAU?IB}f4m^xtf!ChYh% z|6B}z`sR}Yx*&GJ*4EpYC7Q^Ae0HL2$&6yZFNVnb!1-(Pa)irx)Hu;?d$+{7h(WPT zSda=5vW>g)&Iu6lEBRRT zvDZDFaYX}8&i6GVk=|HrTbI$eq@8`0_emC2t)wa=d1fuz8$@5MKHVfk+jj`BX(Tu6 zc0W^d-YD7gidJS_CdWnn6i$4S92sh#>s7y6*k{hvyxyx=s#v3Ll7|tOs%Tg;BmGw0 zqn+D(y!s_SL)a}{htSuGuG}V3_e=z15%y4QWk+FFzb^s7CS1dZqjJ+mvklLM6O)t1 zpVyRFy3YlV2L@ZxL^e$3j|VvK<#yd#voCS|Gmf zP+!T@lH&@M_*vz?`{$B5sm*=xB$MSa-XJW;h2Srlr-`3PtM;j?ySau@yVffWlEetn z^^d1J600Zn=vy?1YS4(NmM)lOGsFhaRm!Os3^GR6q-m}1){bJFkt0lIjOk&q2Fsy+ znXR~X$r4vNwo}%s-}NZSO`Tm5Q|#Dq*$lc~h2h9d#?jkefsv!FpW?HEoI+TgUWPsJ zRZSkYIOt^H;>d2qwy2e$v7cIhA)xL)P1CH8k2e^O1nad36}6`q_l1Oo+>+9tJ9cLM zjdU-W^^JN1L8hgsi68E|IJ3K>d9zLdTt7+N`rbFySQ^ez+zTODzMKNt?t;jgDxM?) zvO3amy3o}KOLv{trgt7Twqf}}o;23^15QGeV&^*ZX)7N4G9bz`rulG^_mS2215#Go zSzJt826A#U(Q*y-R--e`jAEgZb`5=fqbmgVxAEtuU1LLU-?A5eS`!WkR3C3me_D1Y zk25gpy*%Hl($wn{d7lMCxh_uWik*Cf$wBeVgH&e+TiWfs?88yrQsL(Nu-5K^Sk+U`%mHgXe9bw6ayff4E0uBtGBx+Uub#+M0jAnhtJ12(^(b~)aLfw^EAcZLtFsLB$;hupw}Z*n{t@h zHt+GpPsJ&lr~A**qlvo5kIbJ%!tPIv$8%!fjmD7CJzePvN|iKLr?JmUh43iOzybCu zG{>lRKmII>E@V$e7&5ur2$Fq{f!d3LKA!P?ySj!(-qClhF&r71%B6lX+kvEx#QNQ2 zb;hV21_gd#9TZU8fgEh*k_8vh6Eb9GLL}bv=ug%7zaG;R+828v=+yf!X_6*MGC24F ztO?@OwPR8=h;L%!knfh^K|*xytVhubDj{xth3@bRdX3?f_#p%nYEJ8Dm6_V4OYEE8 zZpy|_B&^PsuJsm|Am4F!yI9!Z*`XYPn$3)9%?&URtH0@8c*{G~&+5`Hn&{-d z9h}R=hJOV{T*xG6zo;ZfaIBv$BL^Mc^Dzcj(o9IzNE)=$j*cYf-nntsOT!8C znXOej*OxzqAu2$K@4!G{+pn8WpxYm=xR!>viAzdXZ*o@;0HNzijjY6R?U^WzeYZ2nJJl`EV?WLQ zYe-{^TB|YR9S}*v##}{zGS99UN6TqQi2o_5dY!A^R5BnW_9IPQE2rHY=<-S|)2Z_e z77*kzcp7*DsHQo$5?^Q~Kk1u}J}PeFlv1&tXU;L%{m6!w!vt@#&1n%wuOV%+(qq8t zy*EJPA@LzKcFr9&N#MR`?+4QT+~H6o&I+8)DizAta{d)!i0esa#*ad;CDwpuS7;;$ z*#qif1##W_+KOagpn_}y*9YAO=BKj%5fJQ|@*wTu^tzAB)L{3=64QeZw2FGfyw(-XJn<)B|ep7qmtIrS(wEDfJFnM~x?`zNLY*3`*Kcx+caYSg-AuTK^x~-U2GhzFqq^Kon3)K)PW75$Oi$ zmhKW^=mF_wltyU=knZko5Re*5T3WgWkZyP{^nRZ2dA@IN_xx>HKo?wjku2fZtNEa&-ZXmxI8|4ZTI*)D0rjKW^|By{w z)q#7wqyL$z!!NlMg??8$djB15CV_aplFk(N7bpDdn)t0g+s) zbXL&13qk99T_IXga@iO)KNi2a8@ZkkobQFeIN)>Ij*6lKe1RLsIvO%g)y@XJa5#9j zlPUgq$jHQxl`-r?#%%RbkV?*NonOiL#bgWL2l@K54p&33}}> zyJO{BZV^IVEl>3^?bRJ30h{KhdR#IL14&UCMB{N@9-=qj#bxFAlzdsma`Xt8JSjT?3B=LF3_pG7TnZ811tNbX` z=nt6vTQ6`U$j^Roi%Ii&_TXp%i^E2*p{r>u{t-OH#YtL4wYiv{fr2@$cAs!cozUlt zW7j1yJ;P5tgY-46hUo;G^kV4H==b!|;IcSYOJd5qhMXm@%BP^^N+zMbk-}F^By{Wy z6X&bBx>Rab_e2>(lGMz%f#d077<{FF-P3u6iHN0tc76=P)vIpisIb%fgFq3*|`;mv@N-2NHp+9>pbFS|*<)418ch9~p;+dm&O^s%KZ+3O6j%fPH zE5fV9Sap`MPzN~n8iB3`*1@|O9r&)d9m;k3^HXL3Y(>vwNMTB}JkOHTq`WZuugS1*5s} zcV747Lb*6rnj^Gj)W5Y;+_q^u06h}T!h_5xMgQJOz~f%$a45A5C-d8z zz#E}+6|XDk#m?F?`ySoDGL~CIk`lJy!nGflG+2ZdfF8|rA_TfSp=^gjZQcM(0LSx4 z7sDw0IJDF7<8r8%q6JZWrpyX6qg9ys?(p|3{rSz zIHE5SC?f3EaS>bd`oLU8bBYCXsLf5vFBtwWlyWIn^yhhH{=S(L?)ZWaW4Sr*+z;rZz6tcGc&nNz z%5~{!-LQPfGg)R|;`;`{5lbARTJ18#uT^9C$zSzxPr9GI@p`zh(!qBgE6@DpV8oOs zxwUV(sAOpGuGayhdwga7wqt6xVvKr?|EF6Y;@|j@!U0;%k?*MLbwGUO$0R%r&NW&a z`wCFbG}W=u@1TH*qUhVAZt)Y!N#CsAm3)aeb???+srr_eM`BN2E!vwP5>ZGay+i}5 z;`Xt9UJ9j0=ahU zjO}3XQKi)3Ws*HNhqr4YD^E5MQuM*Kp7}U@l8OkFG7JAko>7OqC8}CxpT%?!-NYd8 zZET1>p6nY@_R1Qk(S*vN9gpyFbu+PI@0stGUwNzPF&Kp>jabfkLl&#vD90@Gb-nfE z3+4QLG+kCLVO%b*QbC2)Z`Gm$6jjNJ;34mvx*QydlnFHJ&{@_#QxKF}xv8sCbDrpi z*NpELg$3$;N7?u(0S+5YEkhkvZQk=@cP>rfW0B1cu}(U$Z;+^(hB9OZd-Ixpv1&LN zND2oJYfcGj$Q??8e7>CovU*4wFmrB_P{FG3`pBcyU>Y(>67QcgZ01Bfs0iUVp<(Qu zf=q9_a2!uw$+?=-m;WKx<=+Othq+rKC-#mG(DhByd#eJX9s_4#_jSW&ysoHI&orX+ z$iu)ZBECUP>kg|Pn$G=WtUY~0AZ3PvBjXKAkvQGWQejwG_Xg>z|xx+=CGl1pfMv!G_G4H7)BWbWgOt%>kH>HG)?)P0yfA;kPl`Vk?A zEh>@bZF>gkNaRatQ|mQ((8AQaFn}^8kfondx!^@{l_$?LmArJA(yTkou_#EDufxB( z9mhQMxf!-U3^wdwo?e5$u}*78{opvXF^ty zquv7m)zv0+U4p*mmxb*ABDndZocCWfey?_^fk3QBCn3OBL!RC9^eKFJS>hc5^|$-L zGV2F6tSsf9gJDqlj9;;jb_-fom29 zG(w+d;YMb_NCE`BfQ&8TH>dSqukAm1efav>I}|E(2&YBZpd`GO^!q z=t>|zEUW0a4~RDufP8l6FyQ9QaWICZL28zMOG3r}!sPzz#s0^yzwrUgZP_+YG!1nb z6%g$9tr#95v9eNYYJP^(9Cp{y!;T)BBxmB^exzAyjRzGq{r|Ji6u-Git*evp*E`wU z(}YJw{V%;!o8co3Rcb@p*AX)JT7fBuiJoouNWjh-6)fN#N4J4|`~7qEM7JU!75|d~ zFkACZK7@U2g3g@t^~ea)y~#=JzTT~kk?ds;Adl2LiB4Yhm)K|#5F2s+o7m|8a%Cys z(NT%=#mthkjM0}M#|%dgc}=Tbaoe+hW%@{SA-|$)srDZd*igqO!Fyr$)4;F}@pKXb zgw2ijT%P~Ev+JElnaQ^!d(J0YQK~IES~@X8K3yFCp|Tub-4*3iPicD6!2Eluh?IT(I2lk2VGo0HPwlkm*3c9G z%WUG`C4p4Bhe+%{v6@-gKan<X1!U zWCq^3R@xM5dw*>-3XL$~6K7m72dYEGO25RsD~|v91#W52e*X?~baY&uTV7t4GBL?^ zwV$lg`rCb|{6{~|@;yl(w)P2P$Q{+s9H@Zo&ENfl)5$CS1yv)7e}?#_dfuwo}-2qZKkeonwZtg7eZZGq%;fa~>9yj{!F2um*p92o}xBUb6x71tWm-Xb0 z-{qR0pI;D)J<{KsS+7zk6}7bJ&(6;1AH5b%D^zG2bt(J(p0nb>oYsqL`IEw%Fz*GM zw{TA%T!#Pi-xZjjKfPt$o4F z91CDV=t#T&hPmPQ`V{$Fs=pP*%%%TZQ1Gh!*JnETry<}!*s635n%vZY09tH}<-aSW z7L@)iia+X!C1U>VMqcCb}74520ObSwbixdW@m-% zrVElcc6jP_EN*xB^B&k6@@F>OClR+No`Bnr+>XMF^3VPG^~$gPSuf_lWw`nGOR2p$ zH`BLB*vu-TRTZl06=nmF+Pjjw`w&a>NC zZGkY~SlW1MR)s=POZa7&vX-;Y>Lv9z6u^1~WN-hk*e^DAfPF>0Ha?;!@@oZMj&NqV zSE~mA6_;M;$A6^j^K0>^E49w*9*cGB4&|n&;ZvIRN8Qqx=2Xa&`X< z8y!jIf7=aGpY4`6#2hmxPtF|9#B=Ug1T2{o=On8~Rj~kvFAT=$qvfPdDmrc5_4{c5 z@s}4>wvjdT-wGiA`b_`N*B^Fh-kZvR!C)X-nI71|BTSWN-PH%?l929wcz=5;H8f0n zijOb*(q$XvaN~8d)6OsTyvgn>{7v|~5O$edG`64L08uItvyGX3AS zvaFNd1Kf11#(~Q#dKY&M>I2@M4{EEZPyq zNXUzS#K39cLDnxX(Tf>&cYvlMn|?C!6khLy!5r-#asCnQUS!-*Rh^5&JdNT!NLg)! zI&Jk!*nPD7=MSjP_<`qcIiT*MEI~H+%?41fkIS=~jgHe948*47@P4jAN=$tyQEvx;oJ@>xv|B_mC6_w?yzS@BGJP94qQljoCp!th34 zGODE4EEdy$X?&+Rmetd?Fi)AasQ&9P%E40b*h*RG4 z)B?VfV}w6173YT$B-{Wzg#$`#nnnMsJ>T-pDO#%`C~XBM4a>}-L^N3bdOz@ z61KL>r0sT0z+lh)if8n}t=JW(!gy-^`=WXQ+NOVK6P-x;lBN|Y70LtfN*@9wjQ(~e zUeDrZl@j^lEH9VjM~-35#{GSFN36K#bd2P+T_D**$A>&jlYSy`k}wgi?rwVk-WW}< zl1+U9#&d24Jp7*;Ks*1n7W{)X<-7H76a+vJ6X45+9#6>2u2$+%zc-Dbdz~2G6Gi82 zo89d0^4qrAW?2j%hc^yPm-|C(ES{!*zlRc2YdnCB+gq&AX2B!Qe|tlxooZXfFe^MF z>0wP(8Ttd!`DNMQj}irh9Mq!ZaSMroV*YkF!^F`bojGn|3p_YxnWdDH;=bej*k-AO zBAVn^b}6%(+~8F_F(G&94(g|U{!%7BN2lTSI)S17jvg-HX%Q`*h(SEL;fLVuldZn9 z>GR{AWH%nip(Ulv^rtRQ^9$9}u2KmU@)A(7_-CThVr6}w{nS3iINaRJirY4~r9g?`G z1J2DOyp>9qMs8L%fN~;S`-Kp66+fbCAdXi@0-c0@;hofgK0n<>*iKlW3C4_53p$7p zlb|Nt^F!UX8}E#IvKBREHL^@o?RI-abw zg6jk#_bZsuz~SBbmKIs*>B>TPDU|_l_1T$ggigR!nXzkREJhDBOH@7>GNp znBm)Q*m`UfCV&^moWzOXRa&}fJ#DLE1+wlN95zSk*>W>8saah%hO;6d*5O~Oq*9xk z^~)N*-ZEAr#Ia%jpIqll#9`JZkPzSzo zyeTKXVG5cQ%wLLxv*nm+UmZrP@s!K#zIPp0_{hIOCqZSn4Jg*3Gh z`|$UD0;c_x6lQ%!h`4>brq1RO=apg7Nqw!pUqu~`PNr}sEixBuSVnJ+hS`E>S)@je zI06f|X<&9Ddb^ncNb%RFY&ao(d4uut^6&=vwB->}ncsn_w4vdL$u&S-ir*g%+1R-p8Z5+3!K04I|P~Ujm^*JG$Bhk|%kgh35Wss%N+dyL=RsfR`b{6Kb z93gp2xB(mvReN)HO1h3?Zefjm!Ph*)b4KoVGhEGkk0%>lD`uRgA^SiCOd6d6iDNMk zF{OQd(Q>2n0E6_o(8c6n`teb8=Tw#Diq8CbOx?^{3RG}E`RJBE;Q@rY1F<1>;>j+H zk8tyhT5@(66J3)2I4;$I`hLAksWYiUTA}4_qshZ-qENBgbI@tB`Nq@!=w!~W1fBFH z=pz!T3z?v;7}jsYoK z^^`o`IK}4iTyQXM-plCheO!SjW9Vg=IcQBRXshW&GDDNK0iGwdphPRCcB;b`y_ew>2Zb4>M^fdF|KumbNdH&odIz8|68 zo#L9;(nu`B3dzg|zT_I9Y0pL_C%^O2Ck z-iZccaLyARf@x9Xnz3Ix4HRx=094;OeY(dM*v&QOkaV5!$g8JtUVjqG$@8NvDikf- zJ~-G+6tp$452P6?Hy>A(R9!s1g<`BQ8l1^Abmdr(*9wE&0nUp!)n2v*!G6=OrvfST z(w2bTEF1tCae%j^R)V0wu!G+M4Jv#yB*P@WmJzU-NU24i%$-DQ=tr23WM|pM@pJvD zym#mZj6z;#wBFv{tonNGkDor#a805B0mka62}OVvRpi})lLk5=vNq8yR9&A*1Me^wxoQm<2<`?4&Uq~FV06L8(tByBTj#QQe-q$ZmQoTXFIH5~c`~8WKa^cQiWbjCAzRKdI({7~QK!7nV@$q< z3Rc$?g+4dzlMiy4R}Og-lQAwsguEqCBtoRjEMnpP)#;OjXhjFy{Ik(mq1B|P$jEo| za|t8_V;|b*KyA$UOQqIAMSs_Di{b1JL<$-E;^^tZ6hTI9+xXAB!g1Vf2^T-(BzSVn z$(7UxM%lxBbSUFBDJ=c6p<=4FQTT*eh56E7a3b1Q72uI?qc0+rtUk(!5s7}S^@67g zYY_`fn+vCcV4kqw%mD6-n^ts_$MpIt$O$k=Xb;i}ZR1Ludn7vf?eO zD$g8M)Ny0()6{b_X-4T36D3mc4C(FcytV<{h=~0aWvv$5g0mVnF9ax##q(oOn@>tX zpoQztpDYBdF5&2enlmz>-cjf?#+X@hAVSRqk=%r`GP+UWf0a}-Yi7Y{LBeY%xAu(u z=IrWb{jh0c;Qlu6wjh7yeUrr7w={F@K;12LI1jC*E>x2*@Mw{N*Z_{2^zc@hw?t^kOzNxthyvW1Yi} z|4$>Bni6Q#W2Jq+xY?e+miIbsCxgc}AJUx7tO=SvShzoAzv@D;^MsfildVDzG08iA z0Yu<;d%V16OF0YnIO{do`QF-}F`@)&A4VLMyw+32AQb~roDje;7KL}_=(}rMY+9gy zXiVgf~&JM)IGm9<1^syCRn>QpJWmW7TC~-(ET2-l7_6 z-Dx=zB+%qnq(U3(IpA$>%x@#Ea2cm05U{Hxzc%WKRt7{e%Yi-`_poH z@zK$d4dII`4%TT=XF=mmgGM{)WN2@Le^3V9=Rng*Egr(h+nJ43t|4)zQ@-ZqR&&Y~ zvqQJuO!tE;Hykyq{cb?X)4}GnC=RlxlBwHZ#LC<1=yz0By5G;J4dV0UdA^I-SJt1a zBbR(&!7EkMm}Xh~jd=3;__f<(>*GraW(GWE+bLEzDMh^31Dy0+koi@g_}BY#Qu`d9 zCZ4%Hfrd^gMW58-8)T`<>XhRcVUxDjkgrud48=UMCBugigOEbD_P0G6B{n6opETMT zL~iXf`V0!)x(b{*$RwjeX3EC(Yh}}nYMew_6BA?J7atBR$@A60N7Zh^ymCZw15W^% znlo9zQ{)v+dAd!!%v=x00_Xm+;|3!Dtm^6HgTGh&N(JI&X3OsE%%48Ja1^+|p1-4j z{PExrm=Uv&butfS;+FHDI&I1K_6@4Od#?$mVXRd8=A@$kI)PWIGmMC2QUmbh*pwW3 zjn6wQVfXY5g!UPx$8PL}2^@bWNU@$rRHggNNu(8S^Z6>6zQV4s$zJL)=8Popija0{ zWflu0#4RBf^w4ZR?O=|lxH-AGHaPoACx~U^qK()>6Cv<=;>kCXY6^hc^_X=x+od zrr!$gjg2|P7AubH)P6PU{Hyu&A0H{c5!`DM23>^RoMPmal*ER4B8*ra*1rwtnhb}P zi4Y|FT>{DPb#VX-ca3FwP5X1JAj;OI)hrZfsGSCvXr-aYde$Mz8=K5Sbc-6NK6*!& zKfuNKI5k0#))zv2+?ucxk;dROshl?aeb>NM+5gGtA$Y{3cO5HZB~yaUy@@BDV7X#4 zUT_3Y3arp_9BlrYl#9N6cVkR}h~;ra?~bNx1JZpaWprij<{HaSJgb88yF5}O?u%1c zcOQf2jt-3H4(m*a=1WWR>t#mXKZ&_)^cZP5`6)PA+aC37N8eRLmA6lYp$Pndt-oNY(4_IXQUE94@q|EKjOV=^96!I}z>_s5bCqebBJTT?TR5>VQJIRCpS_Ru z9}ZDeF9`iM(oc_pMYDy6TT$5Ow{B>&dq_>0NTk#u@x;QlKXowVqdzBVV{rlpD}fku zP2o`8z&PTYqLuHi%=gAGgS1#39b{EslyVm;HPAj8gk3WvQuyLf z7B@jFg~=<^`o`*t$wusg~j2@qx?r9DYcs?orF8$dVh zbyiiArBo!>Z5TxxS~2nrtB)jr#0(J64bvRR*UL6wT(FSA_i4~FOH0XRKtAt|PnYI7 zE=IN!n$$;u9HVBwV*UrxeUJ;Ps5+Z^3Ta14Sb4R^=Jr`Z%Q>Sfz^KYhP5qJ?A(pfQ zxX;gL(p*He%GCk?m=-k;#(%zkzp|nIM&w%##PY^J4P$OTO_xjJ2gr4rZc6?b627JG z+DZ47z%%P;)(r5l`5UOVpVVQPjahE2f#3-v+ioF!h4DuTZF^Z)wYoz6llqN%*C7Ui z60A;47m>m|LI>YUDmj~I@E50MkCfBtS(LJMV=2&RYY?I- zxQm#rh-UB}7!-^`_U;~Ypi$V|D5ZW~`P1VL2K~lrJf(pU3x6Z>kh=X?qJGF3V2m=+ z{FaGu$ZF7Bv%R>S(91TbIZ6Bm%ZxV6Q}QCLWy&Y-SPRgo*2PC^&fzG^Bk^}g(uyB{ zO3!b3m^{f^YM{8I`>ndp-<~pw9?p+@n$2@BC8@m#r~$GUB9_a|E%|N-6=Z4c=o52` zdA9aTXiV_4xqWlg;Ibt|-8Uz{@>>T?h6Z#gka&wmbAC9zKlQ zg=kym$QDc$lL36XYMT&G9Eec#2Ln~bOPkznZoVjJ%l7WTIgm1Fcd=cQpmGUdy_zm3 zQ?9gP6>1!})Ll2SVwb-L;S2*>l?u~APIF?7LQRUZv*hI+p&o!Ey1ZR89|Q1cdH`&X zF~E*u^*ncIWdZ0?NzhtqK$6|tyAo%b9C0!ao$uo^>3dcY>W7Aps{FDZxnyP6Ya)t! zx8=sm-r8BH8mnV_BPWG(_V#!l;t|k!%f-QcMHVaU^WahOv;iCrM@RGReXs@O0(S=! zur2!&S%+&?n27tw#>BvZ6jBPHf05n!q|kA1vBRVfNFJTu#JBl*1%Oh>KR2YOi%5hL zn=2Q10V(LP#Kf;RDWQptBt!tA{TAV{5R_{K05xKXY#NnzYL}h}vp1J`9Tk}1iM3bk z256M%LpsAq_{L|LZ_EL*3I!3DH4H#l#RMu0&HeS-jIZ67l@|#_rv9-MH5}DFYH)p_!)|hiu8_?yak`h1rmV`k| zXgz*893P7v+W!7*WUXgrtI5pR{mD**d;@0<|-eMUTlXOukPHL!o7;H^kO zLoQeFh}6(Mp@3m%=h@BiwF-rBzQR)?bM$HE0)CBbY!cLTj}AuJY;#mu+zRsCt7e`R za3RR%^U{QkdoTq;c!sZpaw36GJH57p593&#D4ODc)|E1;!O5L?9F^gmsLhM zX*vy*d93xTRKdu*rhZ9mF^cLcDvXwMv&JG@N+4Me{NL%4Vuc`+dG2Y>&?=?w8Noo~ zz_&4|X$a=)MdoEceEpZ+PpK2DeM^pYxjMipF!pS*2*G0*&eG5X>E*FV2YowzZPXceDe9H>~WY&(~ z6KtC4q31bJi}O}D=7U*9tE zya0RwApzQO43mq&)zvO^KG3Clu!vaIlmxF$LHqGj?nUXxFDFt}V@0lb4)!*=a- zbfZFfj*9|=E1B!lup932wEf#GYL*kn!zvTH-JT26!JdBvul@&JkJJ;Kbzr+_fiCT? zo=)%2HMxVgr>e^B*Ipl_?X2|1_TIJ0GV0sxz*@3<+$nY1grJ>Ky$ zGc&V3C6noFYyr4Z^78^GGe&~JAsAPk=MC=5uT1ZgeeI|lFVZm;3=B5fYqj(^oiX@X zW8#5HJnJEQ1{9 zfUfJ;77ZlAZlDc!Hy1!*u@fb&z4^{N?&e-!qVNd(Vn#MAcBPK12^OB=uSe%xSlf=+ z$yM}632AW|zi8z$ioE_7U(qcf-?xoF?20s3 zxZj8pz4NR=z_t%5PSCs_A_I2JLhzQ#K1tzEA4=tS?b^|0-+B z=5ak%RTUyUnQ^H>Cu40?gSzwHZrqihq*?+Ouk3BomX6#Y2sU#Djwb4l(MhWXrR-`Q zG&QOd96c38ZzVw$OALpJvG8`~G;=nr1=I*QIdjuk;_?2_vplNpvg>m$27SXKYq1wx z4C7RUj%H`1PsN+m8I~3j z91aC5f@&J=tA$x@D!Y)8bxYZ#b<6&Mng%9c@jV)GAg(Z@lWZiW~aQZWhR{DJbRQLSK7a zEMP!E^XKC=eG!4*{px^l=#{DoeYTc9LlnSQV5y`OL2z=uRU(<5z97#*ssEUScl0vS z-?rLnvRoXfvRWkoL1njvC#?9^&^_f9;Z zt@9Gw^Eums5B0kj0TrHk10~0`S4hi}b{+x%@WCSTDDTH}z3ty3^EuYBX`)HFKFl%N zjtqldF74MqFKQwR-_?pFPPfhqc;A}d2gtFh{b=+EQH&?GVf9#Xe;is|4{ z7j^Ho`==K-RnK7y-m`0OHfW=NckH``{03}bemXZl&3CO5oUF!CP7I^Uu{MZ|a1-*e zm1+f@=2JdXSo6Xqch3Ts*QzoN@^kaU=UetO3D&aV9y=jx%gU2r0v_Yc8ONohqSt-_ z5j&y{ObylD13nFXwF>+{_tZH{pp6O5b{jKUge+Ft1@_dNU+!P;!wU#MAbb(3t>|_H z#TQ{hhePUXUAk%Sq>5pB5u#lfz1K!_KGk~@A+ZUuGq814mXj0lwCA)BbL`(3zS`0K zY~+@#twHDbSYAn~6rtFy7G9`$i3LY|);v0IdTb{$qG_^quo$2&CJFz@F?UQcjGsxz zr993OQeUl(s6HVaSFbWLr{Q5wUvEo$0e>lZ%nXFbf>s=O!y zO~jOfyJ+(DT!HgQ#MCfTf?A;{bs2ERa4wuJ9*4yZS|4V%cBoVsw*{_C>z!HOTGZ6< zmS`zft5j;KfDXQCPUgug4*W{zwRXSiEIOxcP#x(8_d;q41HUglTMBKb|F#pXSnb;T zq)u6zw%z|p41TgZTnln;HDxI-57Ztm-p;c(h!99jd%0(Nib5_R(>uF6ge{GY=bHr* z=^skL(2cD=SBm=r0CRCwv6~;$cBb-^85F2Fvs_@+p|)J6{ZNtS=2BLs6kqxB;l8|3 zbDdJ67f_fGU*%?`CCjnLC}sLrx$&|q3=ErWbg~gT>)vKXrc`5sCxC%eWz}Xa%lMF1MJCL ze0SW!Z2~$|$`!(NJ1r?6pyb`CeIZ586WkUM12~5p42)%IB?2Oox8UA`9(f5B3xk%Y|8Z0 zv{P57)vEE4lfmbS^Z&u7{SWa%F~PkaO!%Gq1Ux^5SIf&;qxSAWQzTnaylrY19#lLw zMs?&v%BWM)OqqD^L=S z+U1Cs5*Upa5^n(wJWsG%nlEN|gNrzJehMZnS79Q3!q({BxCh?h3-@8-@>$%2&%O< zmcPsF(M{4t{*hq(Lra+s!LBww{L8&b7X(VxUNCwI(TUI0v#5_Ez#09>l2c@IYs(-^ zZ1TK&HcU#`OZaKfX1v8&zibPKr;%i6gih?7MKy*cL!WbXA;+|rtL1#eRr$izW0Mp{ z7{mjbfeHqT&)Iv8)j?$w(~p?js{sB&=b0K6_Vw zj5HP7l0;f>zs0-&TU6Cj0&esaOJzUBUt;~~W@R_E@gnHpOvX@#L^mRCBsljI3ueJ> zf|=+83|Onr11D|Jbj5CXA_I>RC7Jcy>Fb1vI5I?n~_3-pQ=R8L0&@Atqy! zk{}}2ZW&Fxf#V#|YY!@gg(wN=i8B;`5&|ZDX#Nm4#M|H+K^ID{yx?)|y{;H&?B{)k zX;;tZ%UVcsKq;dBTnS^M!tH2NeS;h)NF{K}godr#SUugY{IQ#gnfB9J$M~dFsSPt|3*goGpS|K144zhCLwxsc zA)0Qf6OpJOgLQgke*HS{u$N{F$YtnH69ki)$UpS}rGl&6H$0~aFTOrE{#F_%mF%%E z-HPG@pzI{#*v*xfpSm1>7)=6wuZE`V0*S8}8dL|Ug2Y$AvylKR7q{nztN|+-;D7fI zGzSR*+@uwNQSP+tb8vNW5=QJZnsj{s*i#r(f&U~A*o09(XVoi$K0#56fxAdTp z`+9P06djuB3-(1==ckC?EDht{9VTU!H34017HFLuflx;{1JHa{XxY)K4*bF4zG+3k zmkg!Jwu$f0noV0^tBHnCpAk=1T{5h${g%V@WsBD3LrCi@u3d)(>Im6e~(zyM@YbucA2NzoSc;f-QS zD6&n(%Q=OwOu_<6nN1gIYLr)*|8!n9-k&LPDp&tv>Be-IKXsX5z~e@Km>Nv+$QKh^LNW|1sIch?*^n*`1Ym`Ivn%gUu=kDk4;@eCZy9)Gc$h45Ah z$ZCqsn-#~a5R@X(8PWUGl8?6@24CMw#-GAp-5yfS%CH@R+^MCx>Vf*zUX zy9Fc;W2iM%T>$9OZ-?266k>A1#F?cZ-2&Cz062Uso_Ag%HOPH6&UE-i7A~*S+cFPj z=tKAuXT6~0L-HaN`A6{OIQbb7I8EZPPu^UcvUY`u{36;Nw=G$WE^K3IDYey|Bey7R z9i5RhE1G6B1In+E9)WY9uDDfjfCcMW(r{Uy&@s{0X+p-s{~%rx^+~qU=1|j;ac=^s z6I|hASzN4gwZ!46NFaml3|cdip2U+Vu{5*ZGeha|O?O6wbRTKk}yU+AeL_T(8<7lHGUq z=Cx1;4L3)KgtZ=a<>BY8^~FWm(r-&jBh=N@z<|)R$4r(1=|h};V=}*M`R*`|u-3Cr zl#NKt#tXc{HLBUKYH<*{bRaY$wW){D)1Uyz?CR0%>!?^3zb4h%?%Y&4 z5(E2t)g36vRbSTQLd@w;fe3agpk@pKoluklz&M0T1&zzRC=KSn`JoLpt=q?mQ! z4zNvSK8i|Lb0wn!vGvk|aJt=-o>_$9h|~9|#EHGZ4i;C@RXp}TAUvX@d#kJrt>KEt zOUc`rnQXU$f0bKMcxayI1fkNPO{Bvx-WS7@$L5;7k^9th5u-dStQ6CjMlb!!G3fxE z7Q;{m+v{p)52nEuP2)1$T!jRtFz=g4PNH{FN%#uE;K9=T+*C}nm%wi>ZI;bmUfeh5 zWWr#aTk@_Yrv7EhmhNW-n#p2E04dI6*tb7Qi=}B0$twyuMzb^kB%57Jw$)( zRLK`H9`EwLv7kBft`0-&V8~4EPzolgzIV7>^nFiJCT6{b$4O?VJ$(c#29b9VFqPMP zZAmVgUp)%DE#v0iM3%~9v}51tP!aTIZDPs_(5HEnx9r55GHT$>Dv-L)L@e-TQywJn zvr|O@8LY&jKBKOzCD(5HB2PePwwJlZ3P5IO?e5>I1wJ81okN$1=A{~l2PGA=1?{v* z*KGGX@ZBdCP_+mQ8a$A}Z;QCPsE1X|Mlv0^h2sR>_hI-7!Y}c0VZY}SehLcs-zL$& zOszLRaX`MQa`S1)@7f*_y!7TOzunDg4PlYZ6>7D;w+}7asaekvJ z!f}*hiO}n_YX{F70~HksYprdmr?DG#y^x7ENf(WpXfN%BklOkNRpSo1$Yev{&G{ zSQ}Jrc0DO*Wm*YU2*rYBiBQ0))J8vPz|#12dqyS_29`9Xut}4k@Y2eY@|qXVRz