From bbef1ac2ec33f6e822a02d8d3d417c831e267667 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 05:10:14 +0000
Subject: [PATCH 01/54] test: add coverlet.collector to enable code coverage
via dotnet test
---
tests/RmsDemo.Tests/RmsDemo.Tests.csproj | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/tests/RmsDemo.Tests/RmsDemo.Tests.csproj b/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
index 69c52b1..552f6a8 100644
--- a/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
+++ b/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
@@ -3,11 +3,21 @@
net8.0
false
enable
+ enable
+
+
+
+ all
+ runtime; build; native; contentfiles; analyzers; buildtransitive
+
+
+
+
From 7040f8f8934f4d1e5e25d7f41768403920218547 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 05:15:06 +0000
Subject: [PATCH 02/54] chore: sync local modifications
---
.github/copilot-instructions.md | 0
.github/workflows/ci-cd.yml | 15 +++----
.github/workflows/deploy-aks.yml | 0
frontend/src/__tests__/app.test.tsx | 8 ++++
frontend/vitest.config.ts | 8 ++++
k8s/overlays/aks/kustomization.yaml | 0
src/Controllers/RecordsController.cs | 40 ++++++++++++++++---
src/Data/RmsDbContext.cs | 21 +++++++---
tests/RmsDemo.Tests/BasicTests.cs | 31 +++++++++++++-
.../CustomWebApplicationFactory.cs | 35 ++++++++++++++++
10 files changed, 139 insertions(+), 19 deletions(-)
create mode 100644 .github/copilot-instructions.md
create mode 100644 .github/workflows/deploy-aks.yml
create mode 100644 frontend/src/__tests__/app.test.tsx
create mode 100644 frontend/vitest.config.ts
create mode 100644 k8s/overlays/aks/kustomization.yaml
create mode 100644 tests/RmsDemo.Tests/CustomWebApplicationFactory.cs
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
new file mode 100644
index 0000000..e69de29
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 7acc501..519202f 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -74,14 +74,15 @@ jobs:
node-version: ${{ env.NODE_VERSION }}
cache: 'npm'
- - name: Install dependencies (frontend + backend)
+ - name: Install dependencies (frontend + backend)
run: |
- set -e
- pushd frontend
- npm install --no-audit --no-fund
- npm run build
- popd
- dotnet restore
+ set -e
+ pushd frontend
+ npm install --no-audit --no-fund
+ npm run build
+ npm test --silent
+ popd
+ dotnet restore
- name: Build backend
run: |
diff --git a/.github/workflows/deploy-aks.yml b/.github/workflows/deploy-aks.yml
new file mode 100644
index 0000000..e69de29
diff --git a/frontend/src/__tests__/app.test.tsx b/frontend/src/__tests__/app.test.tsx
new file mode 100644
index 0000000..5c2f747
--- /dev/null
+++ b/frontend/src/__tests__/app.test.tsx
@@ -0,0 +1,8 @@
+import { describe, it, expect } from 'vitest';
+import App from '../App';
+
+describe('App', () => {
+ it('renders without crashing', () => {
+ expect(App).toBeDefined();
+ });
+});
diff --git a/frontend/vitest.config.ts b/frontend/vitest.config.ts
new file mode 100644
index 0000000..73556ef
--- /dev/null
+++ b/frontend/vitest.config.ts
@@ -0,0 +1,8 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+ test: {
+ environment: 'jsdom',
+ include: ['src/__tests__/**/*.test.ts?(x)'],
+ },
+});
diff --git a/k8s/overlays/aks/kustomization.yaml b/k8s/overlays/aks/kustomization.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/src/Controllers/RecordsController.cs b/src/Controllers/RecordsController.cs
index fc48074..79c8d1f 100644
--- a/src/Controllers/RecordsController.cs
+++ b/src/Controllers/RecordsController.cs
@@ -11,8 +11,10 @@ namespace RmsDemo.Controllers;
[Route("api/[controller]")]
public class RecordsController(RmsDbContext db, ArcGisService arcgis, ILogger logger) : ControllerBase
{
+ public record RecordDto(Guid Id, string Title, string? Description, double? Latitude, double? Longitude, DateTime CreatedAt);
+
[HttpGet]
- public async Task>> Get([FromQuery] double? minLon, [FromQuery] double? minLat,
+ public async Task>> Get([FromQuery] double? minLon, [FromQuery] double? minLat,
[FromQuery] double? maxLon, [FromQuery] double? maxLat, CancellationToken ct)
{
var query = db.Records.AsQueryable();
@@ -32,14 +34,24 @@ public async Task>> Get([FromQuery] double? min
query = query.Where(r => r.Location != null && poly.Contains(r.Location));
}
- var results = await query.OrderByDescending(r => r.CreatedAt).Take(500).ToListAsync(ct);
+ var results = await query
+ .OrderByDescending(r => r.CreatedAt)
+ .Take(500)
+ .Select(r => new RecordDto(
+ r.Id,
+ r.Title,
+ r.Description,
+ r.Location != null ? (double?)r.Location.Y : null,
+ r.Location != null ? (double?)r.Location.X : null,
+ r.CreatedAt))
+ .ToListAsync(ct);
return Ok(results);
}
public record CreateRecordRequest(string Title, string? Description, double? Latitude, double? Longitude);
[HttpPost]
- public async Task> Create([FromBody] CreateRecordRequest req, CancellationToken ct)
+ public async Task> Create([FromBody] CreateRecordRequest req, CancellationToken ct)
{
var rec = new Record
{
@@ -54,14 +66,30 @@ public async Task> Create([FromBody] CreateRecordRequest re
db.Records.Add(rec);
await db.SaveChangesAsync(ct);
- return CreatedAtAction(nameof(GetById), new { id = rec.Id }, rec);
+
+ var dto = new RecordDto(
+ rec.Id,
+ rec.Title,
+ rec.Description,
+ rec.Location != null ? (double?)rec.Location.Y : null,
+ rec.Location != null ? (double?)rec.Location.X : null,
+ rec.CreatedAt);
+ return CreatedAtAction(nameof(GetById), new { id = rec.Id }, dto);
}
[HttpGet("{id:guid}")]
- public async Task> GetById(Guid id, CancellationToken ct)
+ public async Task> GetById(Guid id, CancellationToken ct)
{
var rec = await db.Records.FindAsync([id], ct);
- return rec is null ? NotFound() : Ok(rec);
+ if (rec is null) return NotFound();
+ var dto = new RecordDto(
+ rec.Id,
+ rec.Title,
+ rec.Description,
+ rec.Location != null ? (double?)rec.Location.Y : null,
+ rec.Location != null ? (double?)rec.Location.X : null,
+ rec.CreatedAt);
+ return Ok(dto);
}
[HttpGet("geocode")]
diff --git a/src/Data/RmsDbContext.cs b/src/Data/RmsDbContext.cs
index c8cf6b6..f2da800 100644
--- a/src/Data/RmsDbContext.cs
+++ b/src/Data/RmsDbContext.cs
@@ -12,17 +12,28 @@ public RmsDbContext(DbContextOptions options) : base(options) { }
protected override void OnModelCreating(ModelBuilder modelBuilder)
{
- modelBuilder.HasPostgresExtension("postgis");
+ var isNpgsql = Database.ProviderName?.Contains("Npgsql", StringComparison.OrdinalIgnoreCase) == true;
+
+ if (isNpgsql)
+ {
+ modelBuilder.HasPostgresExtension("postgis");
+ }
modelBuilder.Entity(e =>
{
e.HasKey(x => x.Id);
e.Property(x => x.Title).HasMaxLength(200).IsRequired();
e.Property(x => x.Description).HasMaxLength(2000);
- e.Property(x => x.Location)
- .HasColumnType("geometry(Point,4326)")
- ;
- e.Property(x => x.CreatedAt).HasDefaultValueSql("NOW()");
+ if (isNpgsql)
+ {
+ e.Property(x => x.Location).HasColumnType("geometry(Point,4326)");
+ e.Property(x => x.CreatedAt).HasDefaultValueSql("NOW()");
+ }
+ else
+ {
+ // InMemory provider: no relational column types or SQL defaults
+ e.Property(x => x.Location);
+ }
e.HasIndex(x => x.CreatedAt);
});
}
diff --git a/tests/RmsDemo.Tests/BasicTests.cs b/tests/RmsDemo.Tests/BasicTests.cs
index d0f76f2..147fa3e 100644
--- a/tests/RmsDemo.Tests/BasicTests.cs
+++ b/tests/RmsDemo.Tests/BasicTests.cs
@@ -1,5 +1,8 @@
using System.Net;
+using System.Net.Http.Json;
+using System.Text.Json;
using Microsoft.AspNetCore.Mvc.Testing;
+using Xunit;
using FluentAssertions;
namespace RmsDemo.Tests;
@@ -9,9 +12,35 @@ public class BasicTests
[Fact]
public async Task Health_Returns_Ok()
{
- await using var app = new WebApplicationFactory();
+ await using var app = new CustomWebApplicationFactory();
var client = app.CreateClient();
var resp = await client.GetAsync("/health");
resp.StatusCode.Should().Be(HttpStatusCode.OK);
}
+
+ [Fact]
+ public async Task Create_And_Get_Record_Works()
+ {
+ await using var app = new CustomWebApplicationFactory();
+ var client = app.CreateClient();
+
+ var create = await client.PostAsJsonAsync("/api/records", new { title = "Test", description = "D", latitude = 47.6, longitude = -122.3 });
+ create.EnsureSuccessStatusCode();
+
+ var created = await create.Content.ReadFromJsonAsync();
+ created.ValueKind.Should().Be(JsonValueKind.Object);
+ var id = created.GetProperty("id").GetGuid();
+
+ var get = await client.GetAsync($"/api/records/{id}");
+ get.StatusCode.Should().Be(HttpStatusCode.OK);
+ }
+
+ [Fact]
+ public async Task Geocode_Returns_Predictable_When_No_Key()
+ {
+ await using var app = new CustomWebApplicationFactory();
+ var client = app.CreateClient();
+ var resp = await client.GetFromJsonAsync("/api/records/geocode?address=1600%20Pennsylvania%20Ave");
+ resp.GetProperty("status").GetString().Should().Contain("not configured");
+ }
}
diff --git a/tests/RmsDemo.Tests/CustomWebApplicationFactory.cs b/tests/RmsDemo.Tests/CustomWebApplicationFactory.cs
new file mode 100644
index 0000000..20b3b9f
--- /dev/null
+++ b/tests/RmsDemo.Tests/CustomWebApplicationFactory.cs
@@ -0,0 +1,35 @@
+using Microsoft.AspNetCore.Hosting;
+using Microsoft.AspNetCore.Mvc.Testing;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using RmsDemo.Data;
+
+namespace RmsDemo.Tests;
+
+public class CustomWebApplicationFactory : WebApplicationFactory
+{
+ protected override void ConfigureWebHost(IWebHostBuilder builder)
+ {
+ builder.ConfigureServices(services =>
+ {
+ // Remove existing DbContext registration (Npgsql)
+ var descriptor = services.SingleOrDefault(d => d.ServiceType == typeof(DbContextOptions));
+ if (descriptor != null)
+ {
+ services.Remove(descriptor);
+ }
+
+ // Replace with InMemory provider for tests
+ services.AddDbContext(options =>
+ {
+ options.UseInMemoryDatabase("rmsdemo-tests");
+ });
+
+ // Build the provider and ensure DB is created
+ var sp = services.BuildServiceProvider();
+ using var scope = sp.CreateScope();
+ var db = scope.ServiceProvider.GetRequiredService();
+ db.Database.EnsureCreated();
+ });
+ }
+}
From ca52dfe3d896359d9d06a6c67b4a80c9a0d33e71 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 05:16:08 +0000
Subject: [PATCH 03/54] ci: fix CodeQL by adding autobuild; add valid
deploy-aks placeholder workflow
---
.github/workflows/ci-cd.yml | 3 +++
.github/workflows/deploy-aks.yml | 14 ++++++++++++++
2 files changed, 17 insertions(+)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 519202f..5c70ac0 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -31,6 +31,9 @@ jobs:
languages: csharp, javascript
queries: security-extended,security-and-quality
+ - name: Autobuild (for CodeQL)
+ uses: github/codeql-action/autobuild@v3
+
- name: Setup .NET
uses: actions/setup-dotnet@v4
with:
diff --git a/.github/workflows/deploy-aks.yml b/.github/workflows/deploy-aks.yml
index e69de29..141dcbd 100644
--- a/.github/workflows/deploy-aks.yml
+++ b/.github/workflows/deploy-aks.yml
@@ -0,0 +1,14 @@
+name: Deploy to AKS (placeholder)
+
+on:
+ workflow_dispatch:
+
+jobs:
+ noop:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v4
+ - name: Placeholder
+ run: echo "AKS deploy workflow placeholder - no-op"
+
From 15f0725aa4aae1b385a56da263ed401437264208 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 05:17:41 +0000
Subject: [PATCH 04/54] ci: order setup-dotnet before CodeQL autobuild; use
default analyze config
---
.github/workflows/ci-cd.yml | 8 +++-----
1 file changed, 3 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 5c70ac0..f385c28 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -31,14 +31,14 @@ jobs:
languages: csharp, javascript
queries: security-extended,security-and-quality
- - name: Autobuild (for CodeQL)
- uses: github/codeql-action/autobuild@v3
-
- name: Setup .NET
uses: actions/setup-dotnet@v4
with:
dotnet-version: ${{ env.DOTNET_VERSION }}
+ - name: Autobuild (for CodeQL)
+ uses: github/codeql-action/autobuild@v3
+
- name: Restore dependencies
run: |
echo "Restoring .NET dependencies..."
@@ -51,8 +51,6 @@ jobs:
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
- with:
- category: "/language:csharp"
- name: Run Dependency Review
uses: actions/dependency-review-action@v4
From 89e05f382a3c7441429ef1f438e3bdb856ec4f38 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 05:19:20 +0000
Subject: [PATCH 05/54] ci: grant security-events write for container scan; pin
trivy action version
---
.github/workflows/ci-cd.yml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index f385c28..2a19cf1 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -113,6 +113,9 @@ jobs:
name: Container Security Scan
runs-on: ubuntu-latest
needs: build-and-test
+ permissions:
+ contents: read
+ security-events: write
steps:
- uses: actions/checkout@v4
@@ -122,7 +125,7 @@ jobs:
docker build -t rms-demo:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
- uses: aquasecurity/trivy-action@master
+ uses: aquasecurity/trivy-action@0.24.0
with:
image-ref: 'rms-demo:${{ github.sha }}'
format: 'sarif'
From df4a1e3de5eb5b403046cf585f362fed772465cb Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 06:12:48 +0000
Subject: [PATCH 06/54] ci: setup Node.js in Security Analysis for CodeQL JS
autobuild
---
.github/workflows/ci-cd.yml | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 2a19cf1..8afe61d 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -36,6 +36,11 @@ jobs:
with:
dotnet-version: ${{ env.DOTNET_VERSION }}
+ - name: Setup Node.js
+ uses: actions/setup-node@v4
+ with:
+ node-version: ${{ env.NODE_VERSION }}
+
- name: Autobuild (for CodeQL)
uses: github/codeql-action/autobuild@v3
From e1d63f129f47f8ce70d98edb65ffcee1549967ed Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Sun, 10 Aug 2025 06:22:07 +0000
Subject: [PATCH 07/54] ci: gate dependency review to public repos and
continue-on-error
---
.github/workflows/ci-cd.yml | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 8afe61d..f4fe6ff 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -57,9 +57,10 @@ jobs:
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
- - name: Run Dependency Review
+ - name: Run Dependency Review (public repos only)
+ if: github.event_name == 'pull_request' && github.event.repository.private == false
uses: actions/dependency-review-action@v4
- if: github.event_name == 'pull_request'
+ continue-on-error: true
build-and-test:
name: Build and Test
From dc68f4303b2fff3649e6a658e5f29403b2e6262d Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Mon, 11 Aug 2025 02:22:58 +0000
Subject: [PATCH 08/54] fix: kubernetes deployment issues - security context,
init containers, redis volumes, docker-compose yaml fixes
---
.github/workflows/ci-cd.yml | 20 +++++---------------
README.md | 13 +++++++++++++
k8s/deployment.yaml | 7 +++++++
k8s/ingress.yaml | 6 +++++-
k8s/kustomization.yaml | 5 +++++
k8s/redis.yaml | 8 +++++++-
k8s/secret-sample.yaml | 3 +++
tests/RmsDemo.Tests/RmsDemo.Tests.csproj | 4 ----
8 files changed, 45 insertions(+), 21 deletions(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index f4fe6ff..519202f 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -36,14 +36,6 @@ jobs:
with:
dotnet-version: ${{ env.DOTNET_VERSION }}
- - name: Setup Node.js
- uses: actions/setup-node@v4
- with:
- node-version: ${{ env.NODE_VERSION }}
-
- - name: Autobuild (for CodeQL)
- uses: github/codeql-action/autobuild@v3
-
- name: Restore dependencies
run: |
echo "Restoring .NET dependencies..."
@@ -56,11 +48,12 @@ jobs:
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
+ with:
+ category: "/language:csharp"
- - name: Run Dependency Review (public repos only)
- if: github.event_name == 'pull_request' && github.event.repository.private == false
+ - name: Run Dependency Review
uses: actions/dependency-review-action@v4
- continue-on-error: true
+ if: github.event_name == 'pull_request'
build-and-test:
name: Build and Test
@@ -119,9 +112,6 @@ jobs:
name: Container Security Scan
runs-on: ubuntu-latest
needs: build-and-test
- permissions:
- contents: read
- security-events: write
steps:
- uses: actions/checkout@v4
@@ -131,7 +121,7 @@ jobs:
docker build -t rms-demo:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
- uses: aquasecurity/trivy-action@0.24.0
+ uses: aquasecurity/trivy-action@master
with:
image-ref: 'rms-demo:${{ github.sha }}'
format: 'sarif'
diff --git a/README.md b/README.md
index fedef48..15e3875 100644
--- a/README.md
+++ b/README.md
@@ -246,6 +246,19 @@ Access:
- Health: http://localhost:8080/health
- Swagger: http://localhost:8080/swagger
+Alternative via Traefik host with Ingress:
+
+```bash
+# Build image with local tag
+docker build -t rms-demo:local .
+
+# Apply manifests (namespace, postgres+postgis, redis, api, ingress)
+kubectl apply -k k8s/
+
+# Access through Traefik using DNS that resolves to 127.0.0.1
+open http://rms.localtest.me/
+```
+
### GitHub Actions Deployment
diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index f07182d..b88cd59 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -13,6 +13,10 @@ spec:
labels:
app: rms-demo
spec:
+ initContainers:
+ - name: wait-for-postgres
+ image: postgis/postgis:15-3.3-alpine
+ command: ["sh", "-c", "until pg_isready -h postgres -U rmsuser -d rmsdemodb; do echo waiting for postgres; sleep 2; done"]
containers:
- name: api
image: rms-demo:local
@@ -45,6 +49,9 @@ spec:
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
+ runAsUser: 1001
+ runAsGroup: 1001
+ runAsNonRoot: true
env:
- name: ASPNETCORE_ENVIRONMENT
value: Development
diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
index 3a9fb33..7511a35 100644
--- a/k8s/ingress.yaml
+++ b/k8s/ingress.yaml
@@ -3,10 +3,14 @@ kind: Ingress
metadata:
name: rms-demo
namespace: rms
+ annotations:
+ # If using k3d with built-in Traefik, this class is typically correct. Adjust if needed.
+ kubernetes.io/ingress.class: "traefik"
spec:
ingressClassName: traefik
rules:
- - http:
+ - host: rms.localtest.me
+ http:
paths:
- path: /
pathType: Prefix
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index 622f2a4..89d6f3c 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -8,3 +8,8 @@ resources:
- secret-sample.yaml
- deployment.yaml
- ingress.yaml
+
+images:
+ - name: rms-demo
+ newName: rms-demo
+ newTag: local
diff --git a/k8s/redis.yaml b/k8s/redis.yaml
index 386a015..460b029 100644
--- a/k8s/redis.yaml
+++ b/k8s/redis.yaml
@@ -27,6 +27,9 @@ spec:
labels:
app: redis
spec:
+ volumes:
+ - name: redis-data
+ emptyDir: {}
containers:
- name: redis
image: redis:7-alpine
@@ -42,4 +45,7 @@ spec:
limits:
cpu: 250m
memory: 256Mi
- args: ["--appendonly", "no"]
+ args: ["--save", "", "--appendonly", "no"]
+ volumeMounts:
+ - name: redis-data
+ mountPath: /data
diff --git a/k8s/secret-sample.yaml b/k8s/secret-sample.yaml
index 18bdb9a..f6a280f 100644
--- a/k8s/secret-sample.yaml
+++ b/k8s/secret-sample.yaml
@@ -2,5 +2,8 @@ apiVersion: v1
kind: Secret
metadata:
name: rms-demo-secrets
+ namespace: rms
+ labels:
+ app: rms-demo
stringData:
connectionString: Server=postgres;Database=rmsdemodb;User Id=rmsuser;Password=defaultpassword
diff --git a/tests/RmsDemo.Tests/RmsDemo.Tests.csproj b/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
index 552f6a8..7eb536c 100644
--- a/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
+++ b/tests/RmsDemo.Tests/RmsDemo.Tests.csproj
@@ -12,10 +12,6 @@
-
- all
- runtime; build; native; contentfiles; analyzers; buildtransitive
-
From a90829386ceeb6850c20d2e9c46bd03805aa1c46 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Mon, 11 Aug 2025 02:38:49 +0000
Subject: [PATCH 09/54] trigger: re-run CI/CD pipeline to test deployment fixes
From 52ebcafd8c0d09c70ba6ebd4d62eb4e948c52a5f Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Mon, 11 Aug 2025 02:48:13 +0000
Subject: [PATCH 10/54] fix: enable actual dotnet restore/build for CodeQL
analysis
---
.github/workflows/ci-cd.yml | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 519202f..500f14b 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -38,13 +38,11 @@ jobs:
- name: Restore dependencies
run: |
- echo "Restoring .NET dependencies..."
- # dotnet restore
+ dotnet restore
- name: Build application
run: |
- echo "Building application..."
- # dotnet build --no-restore
+ dotnet build --configuration Release --no-restore
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
From 6fa9675fe0c416e22b615710d64194d2af52a478 Mon Sep 17 00:00:00 2001
From: Sean Gayle <41343221+msftsean@users.noreply.github.com>
Date: Mon, 11 Aug 2025 02:54:21 +0000
Subject: [PATCH 11/54] fix: streamline CI workflow steps and allow dependency
review to continue on error
---
.github/workflows/ci-cd.yml | 20 ++++++++------------
Screenshot 2025-08-10 224700.png | Bin 0 -> 268171 bytes
2 files changed, 8 insertions(+), 12 deletions(-)
create mode 100644 Screenshot 2025-08-10 224700.png
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 500f14b..37ba87c 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -52,6 +52,7 @@ jobs:
- name: Run Dependency Review
uses: actions/dependency-review-action@v4
if: github.event_name == 'pull_request'
+ continue-on-error: true
build-and-test:
name: Build and Test
@@ -72,24 +73,19 @@ jobs:
node-version: ${{ env.NODE_VERSION }}
cache: 'npm'
- - name: Install dependencies (frontend + backend)
+ - name: Install and test frontend
run: |
set -e
- pushd frontend
- npm install --no-audit --no-fund
+ cd frontend
+ npm ci --silent
npm run build
- npm test --silent
- popd
- dotnet restore
-
- - name: Build backend
+ npm test --run
+
+ - name: Install and test backend
run: |
set -e
+ dotnet restore
dotnet build --configuration Release --no-restore
-
- - name: Run unit tests
- run: |
- set -e
dotnet test --logger trx --results-directory TestResults
- name: Run integration tests
diff --git a/Screenshot 2025-08-10 224700.png b/Screenshot 2025-08-10 224700.png
new file mode 100644
index 0000000000000000000000000000000000000000..162cfe1cd4ca9faa1f841bcadb195565ebd51f52
GIT binary patch
literal 268171
zcmcG$WmH^Sw=G(P06~-BP6!$x1a}GU8rnaaL@+@6n&V#mq*RZ$Jvhl;h!)7w~-@oUx3UCi+|Lebh3M
z+R^WA#I)BI!ew27uTnzcK7FeCkfj*#>xl&QPO{PNVbt3_StLaA7t8LgI;XF>mktMq
zWoH81H{Dw#B_%_VNdsO8KKtuGro77BLVy1W9MLr+aclzdy;=#HW&7*!f6g}jm~7L4
zNDiy^f1Ec=gbu;}k53Q`b_{sx_xV3Rc$JV8M(_W)HiwuvihXc)>qsJ(Ii$&(J<_{zjn`OP5wGQ~NOosG+xFEp^;-<)Tgj-(NCyGS>x#b6Q;
z4EVvo21iASDPUSV7HiStAfOTIfhSwv+OkY080v%f!xCxVa2PGo<`#{>?@oWbGnJ-{
zsnLWa5A~?(dUuPFcz0dw&w1~HwWct!^9-`&`*=@IMHTbqONRBo10bar{yFg=fo)S}
zs<)u)qC3@+*J*^y1t%#tH-X>v>DK99<%mUcp&MBLiA=^wZRU*#o;|Q_L&@x0;F(q@
zHEna9cPH1^*N?!j$BUka3K|;ypK)}=6&2Cby-pAzsa(zmw-@`f6D)XB+O9++yqEKc
z{uxw?Iy%Eu=Hpj~zK@007MN5RkjWh<4nj2O-85e=N`b`!vEv}54ppSM+IOf2lS3W)
zsh|K88=J}Z!7J{aE`4Gfcr;i<$iIVV_?z)S+-R;84&U985E?O0zBRnuT`w&kUm8eL
zA-cZzu`8WH2xr`?gGsDm$7{W?M>o5r%%;PH);Q@q<9W>PCr0@~OMy;3PujqY7!D>d
zq7bm5q{{X-IPbch4zXW@!wa82SzBAf3PE@?&Y(>Z(CW(}`qgXlRuTYDo)>p6%p81pDGo@ZetUI)~+_&mTPeTNcwt!#VFx
z2Hu@M+#X6%mVtm1dIBEqe=nY3=I-Qujdaf-s>;Ec@ALx8%vg8b?;u`0_)|YMs?6H6
zM8edn%wB?dXFY7bB%ac8L^bRQUm1AUdItBxnTv=_G+b{qOT@^;gvn-}gYSAB!>0A#
zC5hd3`2KRKRQnuns@3-q9{J%(Ku{2~UK?b8k9n9NpNPwe`f|yaKQv2TNvW$uyHQ>l
zOIg_)uWivv_c2{r+4%Bcp(T3pa?$gh@55<2?2~T6XFmrA$(fmB!oyLlWB$(a!(S4a
zO{3G&(Aw7fViNhhJ>K6YqCDJiTf;1?SDM(*7{?#qosNt*y4n)^-r2kCO|Mu+MMZ73
zBap23lK7IpeH)=ttZ{tV`k1=d?0Guk`w%lxsCqgk^^OsQ!;#U#qRX7M6Ns`y?cwmr
zVogia)Cx2rE;G|qd;0jWNFweVCSPrO99oqkz1b>r>14JD5DZw!LxJ4}`iG0ndyCD<
z6%|ZYYy@*P)@#rY1yiwAIl|Yu;jjYI;jZqZWHOsIJ{>H_+qXkFJg2g@E!W>`=J41Z
zH>H`FnG-o3zt{W_Fg7w$njwj}Peaw;=#MSZs#oN`Z7OrvkaRhimw0@*$K&;=s<|#&
zgL{jh~>Fn6~W
z*$bJ6JEzfrINl!34har!v#5S@bbHw9xHrwnW;NaBeYw!PU%NE?^D7xNt}&=&&+ffI
zC{_5}dw{XqBp8@6sT?g*XSS(Z354&1=+rw-tzmf3QWZmH?$=*W*R&)|2y!ne3MmFvAqlOZIx
zk?$7MW%?lZNORw&OnsLj*rzjFc3g9Urr^xX%&jgV1W*jJMZ&NLQ@Lv=UmY1n@%A`R
zX^Wk14*dt97-p2?J^%I&qfWI{XSwgr`(nnFl~=BH92+v(a5g4|$LT;0a&4CD;Udp*
z7slQ~BYTEit<6FLw<|pXo0Zfw(AYMC2JrzuYvj8TWU?u&(DYNd&R5#
zuH`Dr_K8}pjdoj8gRG2lsZKLP@(@R=tP>Xzgp-rAPOF3~*6!kBps%le#ctW5KEJ4l
zoQWw~ioRZW?mmZ3vqqYGw@Fz;qac-{%X~afjs&FAkq}FV@$WJ@IXRHuxKA(OedFKh
z4u6p2&9(kFGGWn2L_~xJ$J}VPm^}v}go7}W5+j+@5JvA1^$ePpV2sm_jgoxsj(fep
zlb;ztgPw#R(d#+kLZFJw0E|3-5k_?!eSZKKfh-Toc>l2=SDttxzx
z<<-$j%hZSO(#Nru2lMsJVBT7M7WpP3^!Hl5oI}IHLc+od%eAGrRmvVcTR=?0SSKdk
zZxC%cgA-wPN8{)&e1@S(^E+PQOrvfy6BE2Pu3PgCYg^WXw
zg3GR!f>*3jjr6nXVIy7_thg4d5J<|egY?K?noXT@U4FYB#ln3i0?
z8oar2=l=l41NLSuUYiqC7i$biUtiz)<|Y#;OMdSyoSV`Ye2er-0hGYN#>V~?mz=Cg
zQHOlAogGzSF+ro-`s>#(i>2E?g{APVmjgpX8>3<*6E1}v1dwz3OYpg4^^RLK0tiN{6uBm4+3M*NJ``NgtyWJ?Fa;bjm-tuCAgzh
zSJwq+oO>{rCc`P}8-xq>j(La8M^9~z=Y~sLZbHG+!9R5ah2z9;f2PVD!>~8982#HJ
zh(Mu06vS=U^9fZ|MC`SCA4w^x!nf=?Fe?A3rw(+0e
zKX{JXU;!{b%HzN9s~rT;?q>iZ#?OI)wHP@*{q9h#^^J||Spp4bf#vV`ch=+IQPtJe
zm3zoWWx=4y_cF>BaHsvd%-QoL@p*H7$diSWo7u7~sqaxm^8lYBozACS*|p;gkQeLD
zR4EDQj~Wje2I93fa0+JE`T9AjXlRh`E}Y%n>%WVg--S7Hr^-Tn99u~&*|rXK
zd`7;$T8p~(NKIK^H%jxlF+UpU_?-mGWPN>oO9sL+0o4?NcnV0Mpwz5`(uDM^jFO5<
z6>)J=#MuyID%SN*$@+UPTVn+mbg01ruj%O{rCX&x_~PN=fw*AuINSESUi7Z8nyH|%
zE>tOg&B9V8=_lXV+H_dFU+cIv?05eNK(GL7dO6qPS{T)KtK*g|ItGUKX;ZI!^l`SsPGgFV<}(W-*+eVu2Qp+1i)?n#$nQVepxWJnl?xpIRL^2Vvw=
zItiYp@wlJhp*~@+&;L>DWNK()AM#-hbu~$v^2q3X@_WPTuYv-DU%LwD9+;^mI_h23
z$0p+*us(@N4mI}n_7m{3j*gCq&z~d6sp!khgi&QzRh{KL>2>3iv$3JqZge>xI)#_q
zt?&j_^2FHE1GfEPb#?XXxR(TWQ<-Y0)T*34xke_L4aU0)Z)~w*UIX-Bh;G_b-X9ix
zeyhNPhN=`@uNxzr_oc0io3n9pHNc3NN3*x;wbpak3?y>DrV2sDkyJVA<8s-<1#`q|
zV=Hs}nu;n2tZ6^@*|A}_CxZ`F>52F~iD~~;i(z22OaDY>#$VjMp`~2|2ny!3scB9{
zP3>74<3{0li?=7Zl(?4{4=C7R8mk0|u|Ynd(y#b
zUZTW1q$Nwm)=1<(B%9E=L-49G6B=O;X(t^Z(>;~*doG7)@TjK>KpGhDmiMXbFXol3
z78+vf>Nu8m0m@e)m@bq75p~a-o7xN`WNl*O+_Y9nNlAIre=*6PtU^Ft62i8uruxt>
zZLL@NBay>CtJKLsMt#Pa72p}&MDxeCVpTIUv-ioae`YH4Z28^&7eNX-k1e@KqjKIL
zS?($2ahLhH7+7UJ$F}IP`xXV>-xg&V3ejgT_hvf5E&S~3TLC~7thuzK+X8xG&pk%^
z#yutg>w^|-N|~S?(*HC^Df>S6=cBPI(9-DcpMkCwp3aq?OW|m$@XgbY
zg`%4Q`2sF3Y_fS6A_|~}fWQs<`BNN>zeh7)Mkza0U19+lD|uX_Os~IZ=)h-W2G~cG
z5Mu{BmXA{GDaD$#H~mM1FP)N}zGU|J+iw4DhLGG9lx?)ar-{p;rqAh
zfX;WldP)bjbwid45fa9A8porI370A>2D%_9P*%W%Yg{0fN1D~VsBc?Y#_^(F56
z!~FcmVMP&BP+lC>QetG;?!mM)NB`8f@C3dV}8yllZ>~QYO
zFOH~5DQ^YOGgfV>TGDc30bt&)(pVkkVny>rYLQHS4@Okbu@PywnPyKvt|
zU=66tEjND(EqXspjuHF+aqFEthbNVilq^`l(U@f#u1>wAiU!EpSZj6Me1Eojdf(-f
zzkjt1Y6t(-F45_fue2WGUn4V&1t<up^{b;kq>Qz&V9tj9mJ75sODEyOvhc4vmpGXzzpk_>4?2@v4
zBM$QW+qZA^76GoV2TuyyPvHxatrJMyl1reK)_q~~aCiOR_@hlrLnG<%9E{NRe7)oQ
zTWCMHG(y$M{oT^Jy)E76CIqZxP<0B4I@M^&$g(A0*#fc(T#QriTDef=B@T|NF`@e5
zE|?ZSzsYZJJ|sE$?Pf>ufojH*QB`rtV}?{kkq%0T?rvS3&O|B!=yXlmED!CEBXha!
zSG#C#pNzQgp$6mN;DE5lu`6){*%=RXgH}r|+T4w!D0oZ(fa4mw1X*ly``iOGMzA-m
z0e?W+LVx;i?4A;K0hYUEY4c`S`){`9i&@LPnM$$7P)AA7Da$2X7qWuh8gycLsSDe(
znh-az2&5AjRsudo#wcqaDX3Vz<9KZ9oqFUsSZeicYk|@$e0+71Ryj33el{mJ}|kTtV0+6
zgTS&FvHN;XZ`HqNXR$bUsqeB(r|DjgkVrbCnRhWkaKZzCI$oq`1!C7
zmCCxgaez)U+j_1BMqMv&4$2<@PHX#DrvJMasi~FlsZ>74rt$fBY1Mo36Hdf2`{(Rc1#?M%(4KYFM
zNYIV8AyDL0LV*5}hW`^9e)HXFy#XLt2)Uf{M|<;maZpM4<}csB*M{BB@>%pcmFei{
zNZM1I&9gXJ?`wLv*`1wHKHHm#0l1FsXN(OXC!A>>y=nfOa;yGN9f2~-n?zyPRmPC`
z_;_a9MIKO2U^wiSArMeF*8%%t3czj>g@wy;H_j>O3M=(H;X!z+9=@^^0?UQO?NfGM
z0jPA#h_BdLK|U}YA=Uxq0+bkVehvU7^WZ7x!B9!3aFk0PsUAP|6;inNG^4XG`1lU#
zq;8V1FCar4@nP~Sd*cbK?e?Z2Uc
zU`i3RslQnbdpBKa`W%e^YtT#c>$i>TF)&#CriSup<)7kpeeh!Xxb)
z%`B4x(%*deu7o$@1_D>h`+TCM++L(p6YwMVx0ms!r*ujxDu9<8g{l$%(?;53b6Znn
z6k?#G3xfV+rra>d)=Jiva{~Z}RVOakrM~X}`-P_kgGQ0odpBw=fY@YWq%Hc#H;5FXtVflai7`)QVLC
zQ3(PkEY8naGr!=Y3+aB~ki#Zf*VIfbwFbbTHmLW+V}*2#7Rl~SXsJwHu~vOFV0)n4
z#mra(YH>pl)uQ*MHll23cj^g2W~n(l6>j1Ndx8hWCKz
z2X_lnA$oQV;83&5S$oA6sju0YnGQML~sAPcO!Ag70>tao&W3GQ@hpwm$OZv
zdfGo1hxdn3j@2FicR-T<5j&tu?J{fsQ07+{V
zB&B~Y_CGNltRVqzF^3un$_3AWYbW9Qx4#z`4|b{f`$}ZsNpmN*q#vrZ;53
z{ZFOOLIU%M2LlgJ!p^P?dVyd{No8d~@<-~FPC+%te_c`;Iy9NoNI=DjSIh#MAGV@$
zETCV)MYC%p{^$O{Z_i%AET6uYmw!=SUj7sg&KxR9rcg9JKM@uc1w>8N&|f3+6!MP}
zrw4NLESr6tqB53<0uV%jYKVvlcp%Q7HnoP8Gk{I4)1ud+kFN>)*F6aapZ+Yw4@^=!0c7%gcj_IM9>8I=Ok;L#}XO+O9p0nT~FoeQ#oVx?c296>FILd9w9&x1H?GseaR)n!F^hS
z8V_Om`GaE%4gp~tG)O>6?*lh5Q(=tU=z7Sv);gHmRQ0dh&5NIp!O#H|AvCMM)vU3*
zI?{)#?|`F2L_?c&!4eFvjC|_X&H0vwCbX+d7zG{{)Z;C{>}O|-t%;8LOCFm%J}U}@w50E>x*1;_3&99
zF!AF96_EQ#1@uO#F-0;>FUg}Dw1jsj?Yo3U^lLf6vf|K|1#qJvD{K5mJ{Ok%qMv~6
z^3m7qJzl#n#jVz+YmYSswKG+P*byQM%isL>k?aa~IT&prYEz}UtxA5N`dZ#TvsVFf
zWfnko=yzEEUfc?{y^%znMognXEvKQS9l0v|w7R#c>(DaS9Wu{xf?u*d6*O7ADv$XY
zDH%1d^Wy*_eaf~I61bU+RXeV7b=rJtS^?9yR2})hn3%rBDd?*ap+#cFD!D%&ZM*Yt
z^&s1Jnvg4aZ1woHYtN;uMUN$7@1eTcx+yveaX_~~dR^j7=wS&r$E5nT@)Baq#*J-BA!59-$Enh1dwXi{)-M>=vl1TM&1gng
zk|V%zE;>Kz0Y^n|2V`kX*YN3$4xkb$Vj@iuuWly^anKS8<2smi<0P2h8EN%Fu(xso
z0-i!Z$4;s1_U{oTmDK>9BM3Aq7M5=SIGQJa&W~lMWv8L}B!OYOQSeb!&yho3i3qHF
z!!IvWWrK7|#Y}%?|8d?{#%dmhc*N>;i{{CuGKdME4s4N}YHm&u@;cx)F7%a0Gtn7i
zCk1^*#~4o$l%j}LDKvV*{=`$5P$WCOJIM_W8(B#Wi>8<+R%PP8QYJTR?A}o%_meiO
zeAx_?S8)9y2-f~R;i&yXzPLc^B(>Gru<^O=buD$0Nlt8;uUKLz+Z
zfV_I^?AOF)Wj6tPZvspKT8=}kXZv&UU@Sm;TgXHDEiFwJkn|vZp(QL~MiBER0XKo;
zS_FGmfkg~$sTBh*=#5~3I0_hNu{kYUz-|MR31DGEx(&Ws8T_j_cS#^3BX`==uAM}Z
zx?|(=da&SV*}(u64Zu-r$Cz=D13=lJrl$VImRbSg90*gOG!ycAVCIc;$C-|!zkJya
zgi@fea{&d17cf_pw6wcbgsq_Af`S8m{mhyl3aG?93E&TvphvO(5R);!oLJqZtjv-5a{_M?v_xvN5o&G@e^0Y^IhCHl*0GBi+uK*?Q(;d4%ZALTU
ze=5wE%Gy&#A!RdGn}FPc_TqFpO=@#qlV(84ea?IK;yK^dD+vh+LQaPO&@Y{|KHf)x
z_4NT1OJU)s&^8V=
zv5AJ`3OG5j0Kz`I<`!=pq&`7GL8yl1(x^SBWm-_+(22@^1Y`$ht7(RZvpjxAhjsBi
z7jABsJ&wW$ag2X0_Y^MBHUV*38pvc&9-67Urw2d;0TGeUE(#Dz=>)&dl~?TSs&l`M
zJ_iN@jmQ)bD4_eGc=t|jF1K%cv6&liR#`weiKr>Y4*LxHf-GtzP~>Mfndw2J4%{EH
zp!l`iUuYJo&=`cJz*f8JJt4F&P#feGhS0Q@%Fr~=a$hwT-v+;jbx`V5H*p_0?h_C$@R
z$kSJ+BSpIRMDF$O(|c&2!nv|ucLXCLlaY5x18B6NLWNM_LrOX??sWUKW`CAey)94B
z9>KSG6Ps|4@g)I#iVJ~k9&Fxt$iPn5PT87M!#qEC>M}4}aN2Vb*41DcP*=SqTt$QI
z`YUM(c%%p*MV4_4cJGePg%K2^oZ%ru#6(1nfiRs6B@&{e$EbCC@;bqDxj$TQnJ+eR
zl6W1#JYMzkL)nFE(7a!RGCtGf&I||`;LC^xu9YY-M#n(WO@vy5IywY>9`9YDRsldb
zj)ATR-v1+2x>q!?X&nRE@dOwXK;N(Xt3a8yr15|YaQZ+0Ocah>VaNe22lD&L$q9$o
zRas5F&cos3LlpFyP=gBSl`3o&xWJ6~UJvL(t^i+E9rkZ%JFEa;*u2;25HO^bOD<1w
zSDTLq(rY&WK=IWARxe)L1rO*~sEYMRPC!pv0ZlCxkfm~R$OlcBJueR?T)5ZHJb0&c
zJl|elUt{9nKodlb&BE;RWzoJ1H^?&p)}sM>WF7r8)QSYvYl%I!Nf&(|y`f?&Iy!m>
z)Hfh1Dw=HylYRiP1Cs~Rf(c-N0oY@-TYk@Xvz<+;&^NAm{3(L5_si<-J^rK?qbtcAZMR8anX
zdk8WWk_%=$hH`l}4VqIZ5f(wgaNw|U_jRjcc&OkPiJ;M(PV=#qXJcz9iuQqGnWY@>
z?RL=Ql`>XZrJ7*$l;?gWKrtqu8btwX1@%y9*4j+CaMI4(_Y(13ug5@_NjN@hC>X}#
z$-G)RY-Fi;dgG1&M60=)2n1p`KR};ZG_t-isZ5O5@d)_{i*N#UyRFB_8Pv`Jv=6;T
z6X45H2syrNrTY?B&J=0iRRJ9JgkvKJ5x{3WRtrq2IJ%WsRULi6wG?SL#;NMKf2NR%
zWAHdL15H|qw)DTE!ah<`T>KRW$F%E6S;G#9nY^5wfUtKhYK?9&Y+y?MVMQZG&B%Fp
zQh;rV?{<&bWq(!#bmFR7_MdBZ@uq+U4pasLb{nXB>de@Z9scm%^zeS0SwLBtQa0sh
zC>AXs6VGJi_^!zzK#RIK*KYOUEhvCL({AzN1Zgy534cTu7{^`#d|SKZlMH_5R70wN
z0DQN|>v_~m(m360$xa`S3{a+QUe?r(yfaNc4I0kV#=X1A68B?g!mdC@lDxJorby7IKZ*Dk!KpP6I{;>(W};s^
zPIu>}zQ%x3nx!}W$DGN1Q0EWmwIs;_0>B{`|;OE7SW}gABDH0Iv-u2$46ZTO<70t!L0u{pL+(QIYhV(mNb&C!iA?
z0fEXg`3m^U6qI9u;wnG)yX-)MjEu~`%CibJtE8v-j3SxsUc6_mxmsod|1$k>x@w18
z$2!N93E%TRi>n-^kv-z98_&qd=*#gPxi!M*Z&W!7UNZl)-!Ese6-eTxNv-YS@sPid
zD_t6mEtt~{|I}*_|K9NVziLtNX==M3WEs@3SxOS%bOxf6X!c7#pcw$C&ss7>quOG_
z)4Pu%9)JQCOU`D%T8K+Zt^%VS1sxq-#(qIzi2*=BAX~l68}9@BSzo(9!VV}-$H&Jo
z-XrA7%Fq`8>6m~L3o^*pm>8ibVqW=)z~|oIVq+B)6&*wmKkItzM7
zv+XotuidyR^Er56<{RH}h&R6Iy22C@$Q#$MZQTA{!kJyt;AgUrfHB|njx^Im`n#SW
zS;r_XQo*=Dz?Nxccw6HRIe`l2hB2kplllhjR)j!
zs09^`kRxN?K_xgM!nh|KuL;yDs7Go}iwaQVJXg#9cc7lley40t&LsktKiKCyZNR8g
ztqpa>4ue7^!z$m;lW+Qb5$JJ@37)7)h37p;?aTRiy#02@>cNMZvwN0!3%lN=
z>kR=*DjXgjT>_)<-0QoP^C^wuUe1sDZ%)-xzKZTgQByMPE!NYCU-Ib1d==&vsxlqVFyMJb
zf#(f$&`@juGAghQ7KkF2q=kpkHw1&TfJt&W`4aRz(0VC?qmB8iHWQF5FVN8)dY(iq
zG&sY)Vr8wCv~ykQ_zdIyoQO*)_a2mf_*Y=7LB`<>)H#<8Y_2frmqYAJIp8-fz^8)c
z^3-2I?$O8FY=S0mS&s~0bHGI?9VWDL@d9qCSvE+ZG`r(qd3E}gVqi^%d*kA_q<2~4
z-8e4*+?~55c~x5XO|sG7@N@26T65G`^lOx1Nhf-^yz1zaEI~U?1t*&Lvwfj2jNl36
z8+2#k`~^xEcQ$Ohm>8n87~dJYM|C7i=0M8GAW!adzZp0^ggynE5fIB0=a
zLl|6im9(AZE=+iXGj#bFwoO!t>t^?cSsRO|5ZAq6zK3iG-oY{|uYP09mx;|B-gk#3
z7VTxcMeXJ{mK*kSELE*`sdvp?z{7L}47B~gqF1dwj1NqZIayhs*caV|=9CK0&d&TC
zP=Fb?`Y_%?C`!bRrb&HPKtMn`k?C^;0lP(`Qn~$_=y&NvK|4DJXjBt%r!6+h0BeRF
zk|8p*;6nX;-C;P6!2SkH*t)XG?hPEUka>rJx1c#lfW8alNX5z;X3~&jxj`~-duMhl
zOH1w#qKsEr;y)Mq$84*ue`nrzVJ}=#d0aH5j6U)_1d)UrULfe6EX0>G4cnHO5lYma
zy%MOd@LqT#Tg-6Vhuc;rWzd#5#2%H$u(iQSp4U)_OD-dByx7sbr51SqLzj7#@Z!`f
z+LmZ&Tf$MT!1|QgLLB|;dZqIWjr9juJb{x_WO3au8Wb3uyAwt>M7&87m6mfI-ji`pOS@Yk
zku`Xdbg6f4S|Q(D5r-#mrM_vtyKU%>Od0;Nr(VF-Qm%-FmivrmoSH>Hx{lWYUV$0PbQwq7y?5?wjz(c+o~%!NgBMTCiK6S
z;%t#lGgpQ%OB+~cPb5WgaMJ6kCY6;pfKp`wHD50@#shG}@haaF_>rN=6oBdNrB;4W
z3$mMmz9JH=WcTG(^AX&Z#I_|m;Q8McFbrA!e!mbtXfItoY{GcmmR4n`*ShPlFN>!%$3@NalX>*F{M+I+JoS2{yWC
zp`{drmS`gnuGd%kM)Z2MFTH4HU)B^4&fBY;k$<0XjT>0upn*mAdib1?6f2n_{!!ZQ
zSQMTUiTHl7ft>G{NXlgZlT)DHnmHPKfm%6|7Chsb+7Lu7CLYvRXi{
zW-UuMKngMeD)YSOVKXq(STv@vf?Y~Iz-9n-%Ds8_Zi;P+hL^XwKZXt1Cym-a!Fhom
zXZFA}fL*E)AWn%G%5q>~vyR8#2htsQ1*&()-Sz3tY;|FcR5l|p`4UFP&^&q#u};|m
zyEv4400LYmXsYG&cEBbVQUD%r4;rI@%}=y(cDx9dh^tqxHC~ReA@~
z5EG06p5xNnGc$P3r94J!MW!E*l4Se3KXRmr_
zNuGAgM-qOFQfD8oYx>Ft<#OS-zqo_i=_(5)@0b30a7=Pi$8T=Mgu~qg;gbN;E`qm4
z&CC%JQG=xW8=Qj)NrJOCUg5_=b@yp)RMVb393lGqLuwUqUzmJom`(EP<0aC%l=g)X
zoEOpX?S1Kthjn|I&p+Y~y3bS=fA}CiQt{pmz0(Hq&I^_@{M8#mB=%ubF9#Y&-83nS
z3f;$Y(?g8=e^6bPz4P`jn93Px6%}mYzDyW00d?xh4WNtwOCSmi0f0FWR91%iEkF|9
znW;2=zck)%#WoJQ*#@Vb4rrzZU51>R8ZQ6+83w&vPudjdF#r>_1|>{FX-hIdLsVrk
zfmAs|`0LOJ0J#-A4tyi+)h@sV*8eXXIaD|Wwo@h`QPOGEF)Y_LYSBXtUZDSR2NsL^
zwMg!QRNyhiFMH_uRd48-BqFS+W7BR?si?00aY*Cigi6SeO}9mHMnwgB@+I|wMP&wW-);sOr;jy=AfwM#PuQg8!{)kUem6rfxqs-bhKh=xkK`6+nT(`4;0Sl
zV3bu6ALzB}zSJ&ygx%eF0rkBE=nPQ5<=$*{81TIA=G44lXO9QJg#lQ24A`oa8i!w$
zF^FN^S*hAo&{iMFK2Re8omyFjWJc|GbFgxu_43oFCr~f;zJ*9cbX~6J6D2Ft1%io<
z&uRJEDOjS7j?m@L&#
zDW;-v5!Ua1-i_SdZj_rG;Mb_WzY`HU`pmP|!~ES81=D78|98~S3(YJpXvDkvD#iAW
zMKqQ}GQSc%(TFy94TFqOap${sbN(E8@7;gNEvlfY1tb@AzX8xEJ}4?GS}V$lh`<3J
z2e?swfj$=kC2l~QB0F%uG@Qx}WnCS>PBTXPRpEc!>0k#4ef>H*P=%ne4Jg`4dQo5|
zh3?J+^a$955Kvgs5K3TE_Yrtqpl8~HE2Jq>NQHHO>N6S}wsBfnS?TJr2#Wqe0J@v$
zaxy>|PO-6a0{#dJ+P#3+h)%oVoA2Z85|9h+#%0)F5)uwV{m6hWt_nK_J8Pn2W4nRT
zPLtwjH?=2n+6MH3P2l?80PAUrZK4nCDZ^tidjZx|Va?9^LX2onhMPkR(a>D?c)hng
z`f*ygh?Ebu?mKCUg%63I!WLX>F$L~pbf#E4aPd>qY+UX>ZMRKz+=;ige|9}dEbYqCDuX=QDxwLttFp
zPVV_MQ@TWDAtLJJSen~_m5Cg&v|tXEcM(IfZQNkS)oi!c5?`{MXXGYHTFctQDbcvc
z=daCGRN1EO7$nxKHy00#fGpT!xE}UUU+pjA($Su
zKdcSZPvKmpRaak^K8{aQC2(c2AL}2~L^tghX(x1qhZ8c3S~
zTkdOfPA~j&J}F(J
z5xUQx#%+r)sVHU3k9^(gJru1vuD;eXJM&aVuEk?fP9^0*heA$1V&%xjtwx6d99w4gY>P(>DZT0D4|ogQ
zAH@%QsfYFNgWg5gbnr_n-*U>eoyT@G1nkUny&|ss!&}RH+a4`)bM@Pz|NV3Qn@?}f
z^q5bnhBzO7iE5ANK0jm(i8|pXK`Y)mUuTK7sH1RE2`^$clk<|
zHV#(v%Ia8)52=p+$;joFGGBT!K(Xm6N(gwpJ
zl6rCpQawjck)}rU$Fy4S4`!midd4x`WIByVkKAfl&ap+U{K%2ZfAEB{dqgu!92!gh
zAdX;gD6tkRaBNgs7xWDS{$RJ9D58PiLcY_K-AO+!aF-#}*C#m`o4!|40`uuX
z%YSzS3mj@N8Gv(#x=@+`tW^%2{ebyd)3!Ml*tEdzEU>xX@b2o^YOyI1$oGsHwnB}k
z!`y%#hBi1rwT>j_mDJZKh1w4zIjKVh0onrGKa1sLcyRDDu>T{fpa913=cE|Wbc2I~
zmjUBC&c>Pqz5b66c{e(MALGwxW&@rBsBszT*{o;GZ+ywyivxnPhmAV9Nx%X90DBVw
z838SpP*DqPO9cBHl(yD6Q$lsbeLCXswyd^h8B#k$P46A17{AVa!>(H8q)?+
z!5=i91}%EbZXzxgc)aV?>T9pYy$=SOwF1Re<)oGfxmYRMF~r$Y#$=6;C>_
zAK4mgfcSE{ZB)m@xLo$QD{5!pNEnBN+5I`IPToF?n%;?Hp*s;PZ_5P29Hwm{~>=LO@oKS&)1OnSY3u)JvTq2sxy0b!{u$QJE5pKXtXu21~V
zfA<1d3ls4b<__%igBl>gwmnXV^=E*8C_4Gp-6xwz#@k8>bq(xJl}-)w83Vq|=vRio
z>`Y#4tycFBcwZRZ#KUn`_)j{ey(X3Brc)uKW;yx!;@pkHfZAukC&)|7%@m=ze545Z
z(y3l_?ZZ6tS!Iw>B0Ryv>#l1-Q>AkAc4%D*f?08Y%L?8`wVXW6ua>#xtE5DGRbYew
z`sB_{>+5NuwH?M2(y@aJS^~E|%rRnIp`}UrIzwj57SKn-Am5mjEBAI43Y;50CszI7
z*_w#g6w4GIP$uc{P#YIJFm)1^%jutY7eqSrq(Q}Ux0Y7D{thSdiCTqvqZb8je5q0Q
z>^{tWN2#>oY?%tC?PFl9uI;Ni1M;FZhVS>gh#m-MJe(`4-x*Kiq!{*f2l_Xb%Jioc
zJ{e%(T}(GNajDE{uJwzl-2t?CF7+y3ukn`ItNG);*sFP4uhzv6i|Y$BYui(l!O{Dc
z>h)d}mXGm5#%fRe^LWI127MkZ&&`I<-^t~&&s~{ZYt)cb8(2+5{TLZEp7k|hE^*~R
zm?}2fnB6CI4)|)fz_Q6FFT;Yc9Id%MN?gP}dHt#NAq#%QKw5RW*#|Y*70ZCN``20=
zrXppI!{bkKLA1tR$3glk0~>C?wB&*-wile@;~Lw*#g`TBhh+U4%{O3UWEF1ug0Bwgf;s|PzMqb?WuJ4yD)
z6dRE*$-CWJvYj55loe1C83Rl9Oq#cv!x?#TPxX-2J{+0~$G=3!|+
z6#wn)n<_s4Oz|;sFgOQysV-sHmm9?zp25cm;cWKd{oYR{lLbz{fETngn)7Scn`&oW
z&r`aJe!qm-LWTq)C-ONnlz&!FYtcL42!C@a^ZL5{7{$!oxc7#&Xr#Z_AQarR(sxTA
z3aSOB^UU0|^LY1w>-l+H^lYh}mW8w|b^bXn$54njoB7
z`7xNv6W%3WxKwS`ONb%G>Un`#QhkGz*=xAAGgma|sI#dzs_KY3=?E<#&g_0UlO|<^
zuXcsoW&LX7%4m8ejShbdwm3dReBY5FG1yX!@O6?@K+AMtpwo|2UK=T_SZ2AuD1JyAqGzr`;yMtEkG3sX4wmZ_%dZ$$=Vh*QJl
z#zyGnUC}H|pA&`9GdRL>Z6%KWF^y;aP;2&Zj(PU5+V|khL3juBoEG=i#|LiNyvkWR
zJ+L_y7?XoTLfZ8hp{Q5Vqe3QEg7}BrGXnKA{#JY(y3grP;YEufH}a~+r}IvHWo=V2%-D=1^d
z4|o&*Q3Bg(L&hz7Z7TJvH9#5ZvMA0O(+HU`=`^WSP&d!bY9dVTlr2O{r7oYIu5cs~
zqe;=4{sC)fLnyk7h6tq29PO}Yk+E_1MO7)UrSLp2i44|AZm-7^%Fhm#NP;H3`Olny
zbO?uxT?TgLLsFPk?88rz}f-)X^%U|elRMhisn@2$V&vo|zdDlc&FCbGw9
zIfzqopDKhX{OHP2LeEipk@F2hm{UL!j&kBth{GjME{ZZ|eL}p7zX_zUpdaXcl1@%l
z;42(}$MCi)XIm9&_J^`zO<)(-?04wK2_qY@5eB+#$$H#;4Yh1)>qq7+_(~17D-2;)
zC;`26Qc~tZE
z`s%~X>}DhUM6_U_jyDZv@8T(5atT$Y5$roHXZEnj(w-@j!cE>;>5ZXo*Ri3LPWBIC
zUsl~8vK#1hOaIJz?Ygd)og98hC_iyKurfF?Sj0~cwttj7Xz_t3@Ot}j!+3cbk2~Kl
zc`+7*%Uc-8bXL7bTjCYaU1>`>n$p?-gDjyuZ4IwY|G;Xy+*fyIzC>3e;@q7>)x&^o@>?k?RrPsB9%
zXpi>caf35vwTI!hUV%KxLG8TOXmjgHxc)_!0y$T8VmKnoHc3a4wC!-cE@dj^+GryY
z=Tao)%wgt2L+Vl*3fG!T++b3>Sff`n?pLn(V+oUr_z234x0mxT-&9HrYP4y!S`ANY
znw)lQ3x_|<=s4GJE;YvDfem|>4JKZA>DY7^_eDOYFvuF#cjPU-Gg(%tpl>v{Ix=iTQ!{!G*rbIp0r>%Oir{sU3L
z9GV$mSoX=h#k}z
z2(5X=$qJ%LeK@zvSKNip3}9o-J-I$y&u4G(qw$hq-U1kIr&6Vt)=d{{zJDcl
zg62jfRL0BV%=Eb$@#UuxX*mf$!hhEFGpXIT`8v(_8M-F
zQ)ek}|7(MQ_;Vs~QHr`zlF0z!2t1eVMqo`}E*M^c=F#R)--ujcV6OmuCNNWgS!xjG
zV9NtoZF@k`?zd=(ZX6OAs11x??w}n4o9zN8hSqX-*7R;YX!98Z%L=V>2^sJ0r*DlD
z3?w8zKx<@kwDJLraWyyXrW65i#u%WXKwIgtN-9hjJkA1uI05%iBv}4Ulg!w4JDdrbi{x9}?CQXe7
zB9a1MpuNv6d)BDgl|CNnboH#K=x9bzetW!;7iii#wyaM!bsi@7k<)v-e&rXuTr(R)6%UmOf5P
z1$ive!YNo2?uvdnc$^l76tmn)tv6r$hKi<+@3*;zwsHGl{Hqytq#_8Z;|uWX9s|GQ
z8JD`NyO|Spy7ve6lMkzn=J`eWbQ?kJ;z(uV+b{?OnAlpM{gs7rD{jDUN_#v3<>3jC
zcyN62FH!>I#i{WttnNM_39;WE^E+5<9B+1WVraQq8^8HJo`69_Gz9aBf*+H{=xh_F
zBc?-Fj!9yV{KQO{lNqK<17h=)iE($nz(1d0r&{?NC5OX)Qh|>%@d>No=??B*zT;jy
zPt|3M8%EIQ-s`P|HgAeD$En;qbxf{91;WKLsw4i35xq$(av?6AAkS0ju~7$91n_9{
z{r#3!7~9kY
zu7>XW8yvD3uTX!mdLhiy2~|25Owr?Zt%STMaiWzl>kaIG;eqw{XHsuU_
z|Me2Rb4G|6fs=;U`6Qo^`1oS?aqjrpt5d`8gWf|$Gn@5WUzM7-U@PXJQcW}KZ^n0&XU#!NXj^e2V>m0U0j6
ze(@RjnmL7q9tVclu4ST!VtEQXc&`so>CcqEnjeUdH)$@_6}mvzI=1CM|z^#%EWYqT6P^)tD1(|Np8DOp4c6{U-Ty#who4x
z7x&>$zQ%mZMcF8Rbf!>Reba9gvc-B^(tbqsMAWW${$koOd6%J6!;q(m5`CH5I}hb?
z@EkYFUs|WZi^6?@N$zcHbPKZ*ic@{%*0j;4Hi>_WlO+1!5}FM%3aW&w~qv
zH@)S~G-+3tT3rNbMmp`1V-}@91Q^4rpyOYX;)c)6)~N?;uZp=)GGEE?GTH7tV_?E|
zuJ~I?-Kkz}D%4z)`RWqc`7LJeJD@gFmdj--u)=bA)My(7=G^9P)?1%f;6QKayRaO=
zwp!#&YYz&ap9+}&YpY812E0OR&?iYd<0{E50Pa(O#Q{pg0*m*wv?0J%$KzDObD<9k
zU6_ZhtE&s{4lIee$ywC@R_j6(Ovh0p!d9unFRP_Ghcsdk)a~XNPQWQn0(8D(rWD?)P0)i`KPrF1qwxohvu4*A
zaGzRG%AH%}?||6Ps)f!ncN|Z~4^HY4ba#Lb73YseQe%jmNEy$6gYH
zKGfE$38SVMjm2SZ({0QUAMB2AKAqGcOVn()`M$GY(9<4Eiw4W|K
z0ue{Dm<(ln9V69V{MXDjj3eZgsl_4D@)N4nm8l(DJ)B581>Qsbm@+rL$z#=p4r9%<
zh_Cdt+^x#B4=?ZB{}Ab0I%d}l6+6``eTScI<(DU4pVE5#?z}?f=9y=y)$U)6Obx#_
zZ_IKpfp$`v({PUz!YkzHoTg=p2iK*bMAQK9J;TdLI{I|>>r$cXH+(qMYcFFpPlhfe
znfMV-ANrrF)n4Dde%}bvX^U%jR+?lj@%v^WHI!?_ow^C-s)P#Nr7QOyEyQ0+U0%GC
zd(HLq3oe^KHLGFt#U0-m4!z+q^1%y{3|)`xg=Q3VlS?>##R>bNY4@S438ln|s1Zl0
znu5#b0!vXmj*-`9nhvvC5AZJ@sre^Q`;aLx&7RoSD)SmzYii=nEr;@}^}rcMQ7C9w
zbz5I@D9kFer+%$Yj__PKRPFVlpG=!noj)yyW2SFzPkrrf>ALcOD;8RsvmAH<_v_Pn
z#uC&W;`kE2AO8j3QVcFipPJ(0tGt10-uS5@?==MTl5KTf>QoN}XYZj&Lq(%<{*fo0
z7~>k_3PZ;iMAJu9%O77X7cKiBl0NrJkWkyf`b;)yzrKkD)~bT7xigJ#TU3`1rPCK_
zS6tH}s?zPXcDRBLNOqbKJxf!T^)wBU@X0TCZOoD<$!VkqEio-NKTh}UBwh8gFx#0f5wTBJz!iecHjYRK+$l*e3oS|SFnW!8`G&`e$GWmC1B&|)Xu}WaDWN-
zJRZ~x-^RDI!0dajtDtve1PUWe4O?PCa-)I0+82O?tYOlJQ4t)I#^gUh7uNab*GDj2
zN7r&cMug;U8H)1f7r6HC=0&_D;8?Nds)LQde@^m8f{8D99+wp#(47T9-LojQ{
z6eoB=ylK@ZUw2obiS;H910P>_0GnCgAf?5oAO%7RWO3`jVF3;2J;;kH28Nx^cxFAA
zLBH;N>TBVP5kRnlz_juYKs####M5b0W`kPxbzwED2A|f^jyO)!eqtu(le5W7nB>G_
z7XSRyA>&^@(J}h5N8+a&WTz%~S+q)O)CO1=b-N{vp!|LYqYj8h+=NF=p8-*i9e72iMrjp5Mtk&ALYXb+
z`D+SomIP;@Ht<+S-~+;SAccUjF2R(27z|ZmrdjD(;ID=NUm{Qduh%X^mgBPGhGv;?
zu7YN03eZh~+)Ti3i=Ld8_&x81!34jZYLhlY-}Hq0_$>639{SYS65Zf4LXsZklZIE5
z7&GR$F$xXDKZZ|IJ4!nWzTn**7b4Y+@U
z(RP&NzTV=G$NVIAEb-!tA_>xy9=1}$0+teU3#gJ5G?Vz!EmroZxu#1``CS;<#M7S}<;h2$(!um)9cUw`icKo2r|h%g;N#n08H;_BB8*)EwQ=w@Myq
z;8&8-Gg-vZe&NBJ@QW!V)bxhoz8a&0G5wIL|UQ8+8MDCcEmLEp%F@AdsY4tY+|TecIh=5>D!5!UzWYG_t=(FUH4p|g0;5wW>1)O2E9A(`t9
z&gV?{X3YRiDYyeEAR416ooTD2yerLsi8NCjN7@kG2$
zmtqJ+T-M$&q5|-{8YjWQY*2vkD^{F+M)0-FG~2Hw)X+46viGa_&z;l^Mbyy-mc;G;
zK&6FJy>I=!i#oq`oQ&=pXk8nP4VcDxW}b=H^X}q|w3>3a2OFIj!WV8n)ge((7At2>
zdv8Q7j_|@|kqTbh8)#a9__G5DJ7CTpJTB|>ngLaEz?g-k@QecalEt_f*kr$>pzsGX
zH(6kw0+!}TKp+8pD=@Fq0j*Tfql-#OStNVF0B@{Q|AhFgNC(zl?Tej_34Tn}ZF-=3Be0i(QR2)Iw`x4f(i3Rf
zWa>$9E@&pNu(uw5`D_22gvapD88cEu^R`w~&$T$JD?wcKuFh&7%ZVUh^DVKFxw_??
zG_>PLHdks%9=uADS2=RP=6++i))=w!3)*ca-Z-@!G;DQg!_*-=B6Yo!({+F$yO*Me
zJGB&QFpnu`*%EW?B}H)!lZRcy8NeU9vh3Inv9-M3FZG7=U#?oIY_phB4qBP)uzO+d
z1xgI5T|omhZ;TAno7aZgSR~%ng9P}+^U%-L<;{tn2PW_m9;)eKcEi)LyB)hIq@f_QvJYP_oa3xf*szW8*YP%x*0q7@x`=f@-Ah-
z6ASScVkf2MguGZnFQ#;VxQBucmbNd(tRtZah>8{W5rv8O>X~(9x}-jLi>cmst|-Cq
z<|>8M9{Yu57~5i`rPGdVYY%xJmW)nkf1-ZsUMnn~p!og=pE#?Jv~}XicTBl)jDKBp
zYfa-o>_do#4BK9m0xMJXIG|Sh{9etI$3EKLvaMICHhlvG@|`_tM_$hb05LM7q9O`-
z;I8{eQfYu;-@qW-(J@o4((omWLp=~T{qtV766Vo@dB6blGaeWbOp}t>fUN<5hyZ*q
z+s(;>x-2KZE(^=<%d>*)+bDztvlOAo!4xbg60s)+_o`_#wgPj}INO$_rc_wA7SJ|gX9*gZOTc&uU4RRS1
zEEzvBGbZHTQ;~Pe^gk@7u9VvH{hecHi<)5~3DTL8o(n7iT*>?k&XY!o=7%)mvX3+Uu9Mhv*Z
z8UaZNPNlJC%Z6WMA8a<5k_xG>otDak!_bo^r?#fvdxkn<|M(O!6)7ZuT;Re%!f5y0
zjyR#yZn?42h+$7qa(=V!br`?1@5R0gxe(v6veK!jMv`dV-xmuLbj44NAx#u+&%0k~
zt-oAgQgav&Z$`DIT%3c8HTTRX8Myu?i1y^ipG}B`y!T6PQ6Iyq){KTrpC#q0Ts&*8
z+#AeMK+pX__P)<(w*ud817C%MR!fTfdey#yPTPDrnxI;vU=?j`swC&sZPU}qQ8A=u
zQiIj!rX~oHZcp>_6@1Wqs`e^1cRRaX!(>$}#5jT1ZVETrnlEW+=Dp!aKjYKE
zPIdPil*EQ*)~Kn)La&jmgW{m4D5r(tDGJSWCn!EgxD8XZw1*qR*E^G`Q6!duE!2BFFl|Wf7c2s_{f*Uhlxl`|1qsBfvUv9RX!~lF@raU2=
z4=eR5VI;3zF(YF3cbl@CPG;QG|J=igvZEJ}CoD|rp`f{)0MH3hSe@X`?@Gz@c|r-v
zJm}Xm{i%Pq_QTvj2#3m0=S{@xIKdNc4&-$JL`TNV{3>%a&q81wkPd(%zok5IH>0fV
zM|yfX(mkJHW&PCs4De2%y0}nYdNlGqsEX9lpAlJXM*ei2F8N`%e+^WI-P@^A#4N;;0@iZT69hKxE|VC)}4+7T6-X
zNwFLI3w`LcN@E3z5}>CkqZs3HyLcHZvbevT`%z0yxNwE#eR&;1OM%}rx=+*wpJ)vZ
zB(Go*4B0ll?FbOB;iR$A_(paH!b@$?biLM*#ErS_cClG1?*v2$R2v3Cy9Z+Bh3-1ssm8%th`t-@zXj&CGm6ZzJiY8c%$X&?ckc0~t
zs7i~6hMe0ma?JXO@1oNB@|9aoy%BV=(AiarBzNXWkM~_
zv9jcPq_>UdI^Jd4{9i-=sAVPQk=DND)55E+C*2ZO>yu(Zb4qD3hs7lG@W6l;S**ZWFOV@bwmoy>IMs|PrzMa>M>?BcSQ}oHQl(z0Qc6q6Tcsy3
zV?sna-Ldy9T@bH%6N;lQvGZlfvGe7->mV$t^d8ACMP99MCF_}kzO-^vu78>y+?L6`
zcMvA7bU?>Q=nQmYLkx41()kou;AT2>vxxPCnV*tXRP
z@-1&$oLH0Y%XyT1$E4SvrC0ket}Funh3PD7*pG^Uv#-XI{}^Eq(1KBUQc7g~Kk_LK
zCDvCmg6VaRMS<)GpIgr#PP6iFFfn~0xxaPuv)O(a%PcudYWR;43VOQ3N>et^JLmoP
zFD-Aw7YT<1Lz#2%7<WXN8)d1!kk4u;&*YkdmO1JzTPj*Q{cD_7AvR`3P94MiNoB%VFp79TUAp{C
zbal+aJu)>7Lw40*#{)t@RT8D?FF5XiQ1{#BglEds#or{13FL$u|Hxr>fXyc(nVPat
zRg1UrN0Jg-R4ezX-=Skm+dQOaoel6F_R9rCwt
z6SlsS;=&Us!O5btW`(zx^FeH`aJa2(_rPfcv*-bM*wnl2f!uk}5f}iLMCZNo9^kLj
z1)I;U1S7!mSrL4^j;K+c_-K-U>u;p5KdIdw1j0LDbo2c^9$73uF!|>QTDcE*muAx0
zF_$|?fy@c!PUOE#XUYxD;)Svtrj3iWaQaPD+2^1K_ZSc9O!A(3kdyMhNEuu}ALGA|
z5)+fsYY+SsIz`CgvETA00Vq;KSXor=?yweCt6_KB3`gy4)+{SJpWY?O+Z74yR<@+s
zktXr(I6TQ+#~=H*)u8x9>#qGclbBNqLKCJ`QVadoL+Fk-3Q-OAVnm%uQCW*3?G4s&Nuj^5a
z^t@d^>M&(^&jo#)6N#?1c(rxzVDg%N;3htWd8cKlqHYE)RuM^XqYpW
ztz0X}9Y`782tp$tPClOtVhzV(N}gMGr!zJ0<|ww!+j*~YCE_8RQLp?5>BHt>ZPs?6Q!@2=|+4<0VT8%#5y
zi|0&v)sni){R2H7v;N|Gn@o@^sh+y$YjuUD%Y5Y$iKJGQcRg!UnqbQIG=(`W|`!!#2B`=>e#MeExu(Oz55Hj8~Ym`+k(BG8=m8T+JaxZ
zF{kz_bs_j8sHh9jtXm%36||pT5B^5U`uo)>-FtZB2`M$+I0pnmO{3z&ml97Z3IuPg
zUveuw9x9ELzr{uHQ>F75IAmSmk2`zJsxKvwZmq8+)2Y#~v|Uwy@_F{2J1pia3PMTs
z&j~hcKEYJ7%9!M8i67t3?XwYc-Db|
zrJZ#+FSbv=phhmM)=EL)_k`ZbQozMhoPfN-`Gzp>(k6ZZ;RPUIeME+HJX|Wa$N=rT
zmeVKFaCKgf59~lk2!S1ed08QjMt?8X3UM%D5COIS%{jSZgsMS
zQ1ogGm!bpk4Q{SP`>MTmeqNiLCd9yieDlqlpK;1EhUGGvn(gJ8h@I8DU#3%=gDgjV
zQ@0~I6@8g)DrpV!oGp^0l1~I?@Y5q2-XT+I&q3
z*{54i&rY2(V71Xf?C*@$hZv(+BY9y~%-ffGGwBk>niW1G5exl?4h&}TzgbHebbo)K
z)giiNHaF%JCQ^KqDT+RSe0Qxy+s9CaIn~1Xt(0JpJW^EUx>VnjVcJpPU?qT6?MF52A>4t*ZAyk{Il+&(ksB?{4`EtUit97&H5z_1
zzt_YX+~E+AF5Zz$h+kZy#wRpXS^A_~Ex%j8C8WFgg2_lM6oE@s*mK={9iwm9RPLXw
z8)%;NY1s$iugwQC!nwh*=`FYJl&7)TCu>Hk8_MxP(mMm*EjSp8O{s_xRy@~5Lp)ln
zVWlOvyWcs6jfR`D^*6sV^^lF}t-!ffu}9S!!n3v%T1s!0pAoZu`5G(Y>34a58--=m
z8P)8M$T&33@aJ7q4}W7@ICuMff=ADN7nYo0;rOhR`hlDrv9z9vk^r{Hi=ahhrj-*i
zwWnWuA3Wh1Th{hx;Gj)P8Y~yP4iA=w4+yL(M;;u0!(W^p!3!THK?x^Xx$+t~Q8`+Y
zt2il+pTE#<+YI{7wJ5EvJmS@Ch}qC6=%q`xVXi7Zccu_KMf$g-S}(w@xu=#BYqx}*
zE`DFr>Z7`uYUwb^JvdH|t@qCQFSn&F3JnFPMuKWuAwBg=6?{Ep$c?iekeiZkafVMd
zkqMyDcb!kB_GrFu9g{g8e$aI%yYMxiYGVGjq5Pzy>ZmgJQGj=AO6=@ha4Nzq{5rI69EbG&8}?o;c`981R=RgGR#D`hgjZ(L&|?m?GTV*MhQ%nKz|}KuaF7o
zPQY_1TUzcY9ROJIw+F~>2}6cRXoS6;L9bx|Z_qE(7J4_MTdrL>YrND{Z?%*k2aeV4S?>q
zFL5H2m>8wOU#odY{MZuQjTLs*Ts!Uv8pd~bqPUL_Swzw;cJR_o9`H^r)+CR^fBp5m
z1l1dFUL`JmOG>IXv|QGHh&0xP@RCY@-o<;R|E|J;szjT&;Mn=1RM+;gkabp8%FzjK
zMnB-)<;aaTub@Jmgd?ZIP0@c?n8LOa%}Q1QJcyE&_4H?@$;fxv%+Jggb8LX;)(s}p
zy9#b^M;HUZQuqf@&0!S!ScY>y)Zx6{($>^~x2}QnmW}l3p~8T-2=mwir!wD3FDd*0
zEXx4~7XY3!q`MA_1;!4I7^WC1rOayTg#9nJ$2c=*jT?qjbYDH~u0<_Q)FpA33keV)>bUlTvy@
z6X&<{_Q32}$ii@jK<$ZdjVfEqXr-#V#CyMld`XXE{oiC6miTLlub_=tx6sHr!KnSi
z#s1LGUdHR@4i{Qxw#olO6pd9h8thkL9FV>!@@k4x7_1r2{U+b4D3S);Oo8+91?Y3%
z-PwKPFIO!DqnRHtF%lR>!vR7Wj{%_U5&@GiD^NG-f)Na$S8V}IwU8_pj71EXHDIWg
z1@Jte8U6s$zTmBa1q^^juKSAwWq0)%b?ANT(yq3V+&p~o!Un6ml-A?QbG^IQc2|;;dfpF
zXEWeGu7Ppa3ZvIGDqu}Ef!mThm?Ig{z0)ERkp*pp2}-%Ttgo2a2H7iRI<>skT*-BW
zXoL)u5RnfK)OE=aLN1&7Wbbh8X5UxH*l}o$AKSNWSL|n=v)~&q{z5RcV~QOU4kzO8
z7+&^-s#v~FV{l2^)2gw)j=9IPKgIQ2E>GIjDlI%^XDpDzvc|D@v};(p}U-y8ZgyU11@Kn>jnr<<|u5Qz>vj2N)6&eeu9}Upico?wE03^Bxq9|
z{q#MUEW`oR7toU}bJ$f9{`fHnM9me~E{&B`X!6+q6*4!c1E-*cTtW;m=(vNq18~}U
z11$)FH+V2+fCkTjq^Ond9Y#;a!>?=(#KBPD;e^~BAlol+U{m*atqX>pI5|-hXGztG
z(@gAq9U4r&&FeYsc1#PtSCr2Us~f%m{_y8Aq~y4!{Jmz|(|DLzwK
zcm)+MHMMRLWsQ%{_Nc&0^Vw6A!BsILGb5^qUhs4y(+irzOuEgg|LoA?ObcyGk+>9-
zQuI7)v*x+Hi`f^h8x&-Q5TdR%p>nP~Ivd-nHjxC~tVQz)9gOSgO5O#Afknsrh1!FL<(ftfaKJZsyX%YptS&$6_MoVk!
z>n6)B&4&Y4fXbhhojr+5B@hi`vVwn#kctn)JNkf0y|=7YEl`|6r4Bj`0NcR&&aMVH
zI6+3yPSqnkNUM_uOWsU{LC9fTbDoGEvNyrkB%MJ|8;aj^1bv#WoS8;qSN{QMXA1|Z
zt1z1sFy(SgN`Qb(Kn4P>a=Cf39T@HY7r?53&@ru*+8ns_S@Rq)xl;${Y+gY>DEqHr
zF4D!FLBKBsqCNmbQ-=np=Z=F$fBi<3gi50$J-Fs!p&(IFm|)(Nu|G$J&kC0eu#N#}
zL}l~)fVOl5=JBBB&f1^K0tiv?F%J$++s)S{0rh?NrY!)gwjH!>+3VVIwQUN^DyY{z
zL*qEM+u|&`)kTbSq)d6e7RZ$JoD;uZU&t%gvpEq>IU@aXrM1ir`uPMM`U=xLr>qPk
zC8NT$E3V3tV1W1*t@0*-eohMWWoMRr{P^Oh!!0C2#F)G{kg^$ST177R&JQwBD&1SQ
z9)oivcZWJcl;DqDCd%#E8Q=wst=fCbPDWehuPjNaZYZirbKl}ThvO^)A1I7o2fY2F
z023?(9JKe{0Ar_Gu8Sxd@%E+h>z6&+OfXY5I70u$pj9)Hg1dUo;z=lc)lRyxVGadJ
zyHt6k68SbZI)bNTE~1yu_FH@*xK1pI4&Laq%casYU1oK*Pc?OO;)CW3Jhv(t5e
z!wrTgZhg2hi>Be+djq%;T8}r%u#gu3vx9-sPDccDtEv>{t7X{?;p)JC3l^;kEWj=A
zI4}38Kju-Ppjbb8I34HyLg02S0(X|6%nZ!Nagppr|AEaDDX{lwI`6P6y1(EBx0`!L
zaqWe?SAVf$dIK?RZ6ikA+tN(t*@K8$?>j(S8ZelZWnrbQe*10@G3GBVkwPptHH|!%(#m_!PjouPLtJzyTn=@6C=88g$tYZW
z39XPf>L_RdzO%TWZVr*1EqZ*Ao<9H#x(!2cSXefwumGO6S}}Ne-Mi?GFCr{ibluB_kvdolDEb=P-W>w;Nws;GD%&)
zj9Yz-9tJSPYJ6R|=s&dCY3UH>@7SRJbX$9U4E>r*j~h*qoUOC-{I@^Gn^)b#^hwku
zWws*&Ru?GY1F
zIWQ=LlHTyG#nI`xvD4A?edPdrgZ68$jh`noPPbeNhSM!W)W=BPiWc86j4Htl954{K
zC-S5JFJgLLC74X>u;BwchluT#G`;tJK>HZSLzy^YlT**}`BAE?BYW5rU5!
z|6py*B`Qu+t~8gISJWn_^f`M`JbM!SJlwVD_N%UK+gb+=<+BYp6<6{IW9#0^fYr3T
zY5q}jt}!1&TTsV>JC4=X+>F**#vim-%6{4hn4d&~qET|cp~R)2bcxriiTMqS`0j|5vvK9tl1u@5=$p0&)AY-_xeHnZnz4r#A>9(inm4^GSC#MmB
zI{h5=CCPi1&_89*I!H6FbS9PasOpj#08Rwb7=40*%3t#LW8wGkqQ_NHY{u(A>Dc0o
ztSa?JSDQpTeLc-vA1=M*UCIer_yaUy2vL9#ZUDft|3L`vjsMTY
z-e)AH8$_B+V5bIN*Z;7=y>dz*xj;$sai9+O=Ip?4TxY$~X{kd|E-bZqJon5d94y)-K=c8WtfMs+UqK1S?S91s
z(%wKgmdd;a2-D>OE@OB+1eN4ca0if;l?A$xYZf0OG-Pnzf+`SfIw868;_d%I-6ZK$
z{UVE{pxC9&1Vm&Y!W2wLj>u5o0EoVf450J=VE_<+Bl<(!e?Zv$|F19rlI02Kt
z#+D}qW3Hc_Yh*=i6=tJExjqleIkOs!Q`AC$HvU8c^*Ryoo)pKFt3|efD3k
zuv2vf@Pgo|;r~|}$3IUBMf-ogZ4l$}->(V0g*!oD9wc^%e6+c1&i_uwUL`{|mf<^=
z6+n^h?Azb>JUC-U7KJb
zb8nqxlbbQu90|~3XRTabOqsp+G-^#d9E1bkG=1TiV88zR&H4G0w*US;9NY@|GdP6*
z`J;E-JGdAB^CvjXjDAG#-yI!;V*m5CysW@`xX+4U_WeI!f?Mim0ioalWFjIW38zhR
zDk|}SgEZ7fj!j5d1iU4MAOiISB+G21@VUsLV$=Qjy~>o8X)be_ElPwPenTxdQEZf<
zQ9vFTR58sfs=;HqVHHJlNi9;Y9M!&G~ZpSjwP(|;567Nj0jxs2|-bWKaSn_df
zVwy+-Pe=3C!Si?&DK+dOA9up8D?L^A%}L*O~qi0T$t>08*CIOfYw#R
z1v^9pfMWjuV^0`gI@?!9z!QF7KK574}Y~
zs(7znI3v#;cgR?!207+CPh5A25;$|rh`@qV-TSYL{YfjZ0AmbN);%4hLSbtjE0j(K{cBLg69-KVD#1=i!3&>4@?sVbN2)E
zui>yQY|8@cGT7Pr>^U~V+6yKiAPP|GS&T?=9JE{~bXN1yPChQWQp{zWW-PWFrP~9~
z1B~7uhR52StoX~g2lZpK3;5eL7mbvN_zaN<$EiN8_x3$xb~#2T4ID=-Rnp+7(S9~4
zga+BYXD1{3ERP%k^4KZ(gaKdj3_ydy$1VjzNqqq?Vh}XrRXaUVBhLUAb%x1~c10vi#ZNvQ+3p>pn&gA0+Df*v>a)c{4UJ|T1Yrd@ugjEmv3
z(a7r^BU$~dqODFo^W9w2BRy_*mXqHi_|ts~H!H#-p|+_sl%|dw7=CyXUuuGjm0i9p
zij%S%jB+{Dh?gU3;1+zx2^asJIk%~>G*SZXzg|iynn;lwF?Px%`RH#9i10kFXL%rw
z*>d>8c-YSU!~GNKji5B2wX+W?2EpTAGzDpD3Z6QA1~Y5*
zGNx+`Y&0s1rz(#eL_puTxHF)q%8qoE&WG4YVUSOQhE_9Z-Okn7WQsoZ8F+sok2`Yp
zc60T>DJJPq{uhHS+)QTcZcLfg_CzHeLL1;HjRCu%gAVZ+-`)NF`K(b|KGKAfYb3Olkb=s+5X_2a;CXmy5$h7LN(PTdi14$1Gdr1Q|wEo*3m5%DTzeh!n9
zlne!It286@&7OZg?C$4n<2$)4Lh_cmsyR1!%pxI{l7F=2;p#L~(~qywoVqmrME6Ws
zED;kRHa&{F+qPo7on(0GO&e-d)i?@*2`93|UbCA{=%i&%7(RqJ_wtCTVOulripm1Nh
zDm1Hxw0yC9SZgX@vK=#M=oOTc$9^f>p{)luGlN6-MXW!TKf)A;(*x7!5BcFxJi~B^
z)mFL~JUoue7q5=YohFr@AMX`9Je!QFd`4l9t4`2oI4RPIyGPAe>Oo=Zs4qBKscPV0
zmmGzH0tZd?dfAh~a(56DMLAh{nw<2gA}Cvl<7cWv0^N;@=c1JRs31fT`+6kL$O)?I
zlr|D#CxwAS@&3Iq&^P-3#|KY6V)guM3xOv}i!2qik;3jqGDVO>_su+?q|R1|
zeFK++9kYv4W1R{5PgL0D3M~KBJUnUugPsk#Nwj<2pivVofROz%r(xGA|3^!lyzI3f
z^}ZPc?c34tu7haj;qoQYogs(SMWs(a$aB@}%q!GRFP@|RUEh>nu%*$Nt$@nz%l(0}
zasDx@OOKs*Qt&yCb<>%jIHW5})AHfV7!L7xLG3R-6LA^H!PI+=_MI-RK;EN=+TH0x
z+HOJn`W&==Hh9lXTs|(qc;Th3*In;r3eCGeNu>*2>&)lsJ`T3!Pul$Q<6Rk6_;zy+
zp2I0Kq+&j02$_-A;ahjxcyY4Tnm^TdAC~dddqCI#749~kmEn7Ybi&@}DD`pC+pDX;
zfC4-Yv|xiGd>yb`6)aV9-w|MI$_@}#+iMU1%bX^^uyr<
zkE|z*_Sjpx(@6vQ8gmAf1*c)Jhq$>@2{MMKRQBgA#ED-OxJE%JoKFk_qE6!-se7~h
zg3HBp_J?byI|=MQUky_oWlZWX9!nJUT<|hFrr=!St_?9b65wvUwX1<77XDr2P@O-M
z>3YyT<4YYEAZ5?CiZ^e}WOo`<>Y|a{Pi2kkvsz1Dm~9=b#BiQ*I$WDR{WR1R%fi8ae^y3h4lD^f$$6NmfY6yFPHb?(cHuEBT4idaT=!+m%wXArEtZ
zU6k7}ADYbgw1N&*I&5mEc2i0(FRw+{-Qot21&Fc;(hgIMq@mn|Xs~t9eq3scF5<_J
zAL+oZQ@1E5FF(}9FDxe)h0ku91w=lHmBHDds*1`2H}Ql@8U=%*+m4AMRe7*!VW*6v
zjmY~AZYC@&V`W1e_s$965|0eYQMf{fMC7HtAJnLp;PA^|4tS%%o4qdPu)FgjjQYUH
zJj0Mcpt5pv=W`e+ClEdSPh+Di_cBg#;7&boBsXcjDXS$`QA`kW-Oo)d8oE8~LfY##+{`BNga^lwtb?yMt|E=Ek`rv*@5JxY3@i;thARP7%e6tJXCFF}8$
zVb~8a^I|7W>C0MKz>WFiy;K5_nL$UU!R>uWgdODEf1GW)C1lYLd{0Vxeloxaixu^^
z1)1^8dp*=vcu>6
zX?Td66sp^bW~o@kO?zqBQr6P7-=lz*I?jLy>i!g~(je1mb#8b(yU`{J3&o-$l*3Jz
zVu$kGCg&cE&2W6y)PRuNugqS{19y3Mx5HXFcj|i_y=J3M)NAXW`Xm|Tn8Lb
ztK{Sd#|NIlVkn=-QY0}$zlo^wBk#x|8Rv+>L$l&5z8sIwXEJq@IU0pq;)zAY$RPsA
zq2K`fv(-{>W!`=8UGuu6=@u!4Lg%O@%hi-thWISwJvkF2#4H7uABV4-d9v!WwzykG
zQEnDh-ZHrIulEp`CBTl6yT_hMk&>vcQb@A1{Ywe}MeA+UzoEh2NVW3!4gUvG^
zR6deuCqR_JB&Nf;;W@Ra{*7jsy*OidsKm^yWY_NCGWv9Jz(r~bvW}Hddnog_y7}(@
zc^uRbx+}498{X)`Zy7O7Dmm?D_vocgS*X8XWaBcxUC(_GUqYqioK`9Mqzy7GR7N&g
zs-*?ME7mREr7mtq?Z_{0t$`R7dDf%L0BH_QH+Bw5&hSzvcVzuIe=1{b;n0r-hy2145F>5|Y#~uuK<~c;!ccbr
z&A2`uq&bv=ziFJ~1Ql?#W!Wq^iL(~+^FY2^mGiM~7(P3V7RCr3pM5MZI4l$pwzrBY
zA6h`TigG=e{o?k=OQi`cRx5~p`t+SbI<*Lt(geQIThm-F71v|QP6XhxDpD$hqzPCI
z)6@W`P~%N*G^Ml>ko@{d5x>R9FMvlt!WD>sJ&lcE;}|U@?YpPwuPuQZ$?^k+4yfi{
z#P#fA`Kr61VR8~GBbA`tYlwJ3?w?oWctJ#k@*I8mn1;hbHsK`wcnSC|x9);W?{$Ca
z7N@WeFLt%^ot!rd1V{3O4cL{_kJx9q^e40J=bHA`{~~cTJ7DhFw<0t-$vcJe8+puT
z$%Q7rm|iS-a9T16vCH*x5Ex-BM``@E^Y-vXD=E3u55YP(j)Kxp6b^>7fO7G
za8VbJ=H`CoR&pZ_jS{yRg6OCC62CXQiAv9hhe+Wr>Hwnr
z7C|t~wSRk3El5f3yp#Ev2}Vd}V5|qbI^KuiX0H&6yu!oF2jB{7P_coDRzbZ=Ol)oV
ziRExepP^FWqznT{%Ye468xrXpawxAO6QDnE>S*TI)-Ba%Fj
zn%EQN9dNbQ$yOyOT&VLrTiW01^h#~azo&>$i-+nKCk^)mzD23+rn%5w%CE5#71|8P
z#KTi#lS0=z4OFbU!8eDbN{Yj>RW7%yE{D0?`t+8?M;IGU!w)kH%<@fq|79kW%7m6TWJ
zRdX_Y<5D-k1lhlJDASY_6)#2u%Wj$W(C{HN=I1plg_zyeAoXM@Z_K3MrPvR>3ha{F
zzB!Y?UrV;b9^Ib4?M=t{gv{(vz8E)3ua*$T`edicv}I$`k(ImQMyEpuImPW)u%
zZlz~*-WMpWGHWm)YKHpfRZix_H*H5B{OQmQbv=i4FGtGBvZAU?*2~B1hl~o>wz}A2
z?KUEFCbQaaH0RhpbkqILb8$+u+Q7Rf%q@KEP
zE?X00>pBd%{?IGwj>u>h2jzhrWAj-Q$d6K4u`+Z{eP3!4v$0^#pKpNEbS6DIeUV(L
zf*U8?+Z<`(a0A3oj1&8VI%V3hFGJLNPw2}&*Ker4UFbF{S&2AKXm8!=9w
znEQtdOIr#6NwTZ6v+haz0hg#OXcdSm6`uR%j-MJ1^RQSUhW)IWH7{WSft;`pKBiH~
zSUVn@#Hc?YSTnk2Y@qq}?_C6klM_<{U0y|@-pQkN>8LH5)t@M>
zbyQ-uke=9{2lKOMNGLJ+%mmeSpY%R2<-1Jq9x|^Z-_S_HN`n<8$`~KGV$Lm^(%v{&Zd7ZiUv5$T1LQz4*
z`_=p&qv5u<^$E()k#J=2>VJK*v?F-Vc;E`QvD|V1R<&B3VG-|&6)b3=>omI
zJe
z)A7um$fwIX?F_9&MVF}pycE0h${a@W8m`%M4SZLged-}$IaBAY8&1k1{r8yC2#nZi1a8Vi~M)Pgiy9vwvCb+AAJS#JBOoe?y#M?QhrKirlvambTy1CZpG3nIuczWy0Le%NgwI!k&5py1;
z!E~r{zSBhGlFpaaM8ux(9l7Np=kUIWYGw5KGheF&-fOxPPn>Toulb^a+t?~D>94`hO%v^Jrw>-oA
z5<_CMx^hj_g@{lY8e+?f#!o!$Oq&adUv7%#U%18|Ca$1T&HHQrz|Hm1BFWfv|Khco
zj)No*?Ut?*J9DV_E5j8kb?VfqVqp5%EI)H-eyQcagOy;Uqtl2LCG0VIwSQfHe)1I*
zI7elFhAmw$r^mXUx!^;NECKuT2ER@t&UY3m1h<;5#N5_^YEz*yl<~vQ(PxQ$QFWNB
z{YM|8SZ9m6zTY;_C>cPBdaC!WwtVlOiY$=krM!IBP_A-7zlkp+e8!mA5^Ef&*uXX1
zEx-8zJJeXh6P!ku6sd3-_=<1{jrJv?7|o%=<0~KjM!q}t8;d_OaDAXg@W8xoMHH||
zIeYs;o}#v5zvfiCJ2)i4)%c@{E2M0Sm8*k-Z2R^Km72#
zWX(D3mf!f=Gy$n2!vdM#xSP5+JL!)>#E3)dS~6}V#z3>Cz;#?tC%)iolnu1L@vfInPj{YfBXKu1MYrFk@7
zv2-M`s99Z|#LkRmJ+G`(;>PIJ7aBe_XY9l+w38QDYUWAnd0Cn>`6Rxv2~9sOQ_a@0T_CIgP=Pd7@SHg_u_M8VFkjRO^{Q=_1&P
zWnP%7#`9w{zVijkYQ}%ajv+v0(DFTd$8+vIpNQCfp_G;HMHW|MD2m#JCan3ac*&p4
zCD3tv&Fyl3fnx67ndyw#F!l32L9X%6j&}UVHA}f;06mq2i>jDy@j#){Z1wcb!zN8~
zUma*@X-OSW8kRg*CWhJ~&|+>k(=mRc4Y;-LK){4)IdIA3SvhsJg*P6M^IAW$VxR8Y
zDey1Jw{nqIovE90ihQ=*%%dPTsFilQMX3W1L#UAmCPaQAPSuMqbZdCjzWgI>p3A(C
zc(Em7f
zH(wMtI+{0w4e4DXx%JhRS32G)b)e>m$IXnSkr{cPPA4-?6eofU*57PDru<|`fORbF
zZPkF(kLN2FtTCbKb*ingYXpKUAAFu1%kb6eaCizECEd4AxuoJA!{*26zbzS!zP6i~
z$q7>aJoK4hc)eG&$IaP0Nc?pem)L@t!-ev5t2rNV-v}0
zzkT4iRTB_bKv*EV$3)4x?&tD|rotx%?~U4zDK{60mikLx%b8FKX$I_{9Xzj)`^HNm
z-j9zYx07K+=4F3L)PQ6-r=?GF4yR$Nu9D0Tm;rovf8f<$k(4B1#-p!uyknhFuKlF?
zDKRPW_NK#2H9`HSx5FtLw~MYM(?7LJ=t?#E_BS9EVos=?c;J3zv_?0%yg{K262Y3j
zvKJJ`_Vn9#qdX(1tl+T<)%Heb*hyZO>~(?M!0CQ0*f`T6y*!zK#uPW;nf<;^c
zQ(e*1@(l&CSbM94n5%94%BLHtt`TgT;NwB>g^6t~Zcu$8kWG8~Xx`+ugZc4>qE8=j
z_st6D9LHu|^JjQyjq;-htXK(xjHbVcj~CsTHesF>Rce2PyP4=>n~@%D_ck1}=74(H
z^n^@Tut|Wsq%NE>VU>_iXs+~X^_5dW>}4621D|!BaVa0d&PS&XZjGkQ8EN_Q@*8OK9-AT3O(rLm7LUKVb8oRg
zm&CR-1dyr`UL+gk$L99<%bId8CdM(Eef4U#nK>TT*$lRu_QFHy8#V7Rmagv6+ao?p
zr52W3VS1Mk`F(R+po4`kYGMo(`bcv@AmW~imQ5hYSR|v@rl$t%hM05sw#qu;z{mqH
z8Xq&dU11M{g^$p%WB`@=N*%oT2z+6db-GuRlao%QC9=Fta+Tmzuq-~vE~qU!!nsho
zF_+ufsJTZMX6$`oV%Ygn&l$b{Xm4cKZ(P!sk;nWN9F4uv8-m+-X0Xt|AV*@9
z6Sk&zTIl#h!?SiZVZr88=fvf^2^}h^-g`En&iC?6uR49itUJ)o_`FH>d_Q#;i&G3N
z`ApNF@+EOGj5J*<|8SR~Ess#2;)Gc9kcHB!U1mxx&+~^nR(JM!eSB?$mUG=vbE+e_
z$6*ihFD+b~C5U?{%8<<<&11sbeD)OmH|xw}*V<7O#*jbfZ1O1~qu@$!&8|aLVWwrc
z^ms+7j%>tErDQR$HiL>S1a8?`hyYJ>?<%R6BHP6H1+Bh%ffL0GHN^WL1F`8_^0om-
zN-SZ9XgYnl+t4|~5b(mUIxXcolC9&u@h
z86Q^Ipoq?%?8!+~45D&dK?4oh2LIJSK-x^OXEAad3sm8N#51c?dqII9YM%sgyzxNQ+W*I8VvFeiiFdM`Sbe(SVf5uY^KfBm+AsH7EG&`#EsZ)3r*v!d^YF
zZ`Y4vi2ZMy=K0Yqk724SJ#^4%Mas0lP_CJOr9p&fPx)xMSdvK{5R;JjsybmjsO4k!
zUcEs~YB963CM)y&b-*(P<~=JOZzni&hC^S+53l0~q@Q+pr%~;@doioP^e2lBnayZ3
zfs1qU?{699JERl;LPVnHzjJFzZ6>G9m4j$B3Il~}lVBMdK@W^G5yxb^9Dn?fPy6z8
zBTyMge0eK2430F5ZY!RdF49$uM@QVP87NMQ*T7xe1iwM;DwjzMdozFR>Z&y=UnNC+
zh|2!8)yKoV{(;pT2q-7G1?*DARApwAaxyhF^(2^3c=!VvDKZdDVWWC?I&nv~08dnS
z#G@c!mrtf(I>Tr-t)E!eI}a$j3as@rhTvE$Sv7XHrKCk3y4>nR>VaO7%$2B)ZDJMd
zt;}f^1X@GJWu@c@F_*$eBfKA7?Q3qYp-5yeWkr5bj9)mA0K5SqZFR2xBh)xgHztxo`^iOaPPnA3fbmGTRoC(`ZGgRipQ0>
z{*9yZ?FxdWfYa^JZ`ulp*Z(Um=Kq;b^B-;;(k?@n-9!TK`pyK27tms8|7aeIU$rh9
zElDzPy)o4FK>fdlAtoWwV^N^fAI6#$l&hPjEsyD$%a>W{R7fa6K$xMpT|!i5N>rfKm4e0rRL2|ZJh&DxopqVi--?;
z$NsOg;U&|Vo$r^I*8Hn=--}?x&+#)8HHLO@(~{Jg71TF3%ec6>0IMg^*Vos{**RYK
z_{;D^!xz#I&05?Ak+;B*kc5kgO$NBVDqic+LX2s0-K~w&zx$pP3YCgMW%(;tu82!X
zDS?VOMDPjO?~saR9jR;@HqV|5Td)2$^EH`${O0ew-0t{&{Fn?TOyJ#_Rp1WR?o9k10o_aa&tNK^z}&@Pij6xbn`6Z8hW0Q^Sw7{I{we4
zh=AC%G$y@g&xnnwEus%SeqD9rbyalSvrwOFe0qOgr|1UOCtO#kTX>BA4kC<}p#A}H?NJ4u?vxDfw8hLq$xOhU;QhaOL~{6Hnc%Km+KrHEf(
zpwc8qi^y@eW@@%w_TO*Wzk~+Tb4Scb!<}P-bYs`3{+Py<7l}Cut)bz_Vh<_W9u@RuVbjA7#ra(P+BuHN+;RT*i=L-nD
zMlO*d{_L+Zs1mz2*(!YK&>>8mn;QcEe_$z%$Iv`LT>kx44BcQXEfDPS9y@w;67*5I
z;{u5fJ^uZE(!KNN&l`1risn(nbbNXuEb{Q-2Y)Z`Ki8z9ALL}DK%{N_nL9Y}DG-bt
zAJx6_=ej1r%lI^MujQygXcS)(4rP^f?vLiW5!?n?w=-FxCTvz23d(T6Zz!wxf0Ewr
z@fi2!CPOmJV`&yeSc~HPBpiP>lujS2qK(Jt(oc>2`)z%B#=&@UQ|+s|@84S>@(BOS
zmi%!0^9>}hFg?zc3}nE_&Glc^e+27I$qi-}_3MEfB?1yEcD^m&KIDzdA9Tm?d0y-J
zlnQ0Bx|$l9OO#$rm}glZyp)p0rKUsui7#A`pXGF;p=V>0gLHyBw18AR!mqw19-+Yk
z{pJWv!BMx}BZrC4ox3h1|!Bgr+jV
zX@ttOL2_nhq)|s2jj=Zw!O1h!utw?pd^3FyA3ma&E+@=s)P;cyica>|&QU_>SdGO>
z|I|U7`?FM;tnOYba{YixjS#=ewnlVPwy`&FbfWo~6XIU&#^!eN^EvfpqLa7vKQnvX
zX=^7rcg~>c;AS^3mh0DLuS`unbVVuEAwI#Eq;VR3fW<<09-8v*D9fX!9l8u5ll+_%
zxtxToUu;8rH!@D+y61exg$ZhbPd^9VL1+rx?G8JNs66%~O#bp~CJd9{rEoz9`MjAf
zcG7>oEW>sH&Fj28x|!!1$VYBXqBM25a_`U~$?Y=;I(C;m7s+FD$`O2Hqb(oV-&#G>
zPu1Q%o?vxwx5ZLN>d-x(S(9)c{|{F;8XZk@jF#UZEY{3eQ<~-R%Z%F6ilB$}SO^Y2kR(I2Q62y4PhDKyO-eN;K_%yP
z{o0F%D?3Zdl8k;(=`EcOs%BN~{33RV?CAQ+3O5`JvJ7Dw1b%%I+23z^`C7AZDmmJj
zsdy=yUOsiuHN!C}Ditr(bB$ul_zGq;jZ&<1D>A%7lzK&o5GV4l8A)4(j*pHww(8tL
zRMuOV(LXY?qqige$uO(kNRs#oqUz$@hvNTuN{z
zEdjlDHA!iMBtZES|mog*+^d+L*04m
z6dV3|jNT?nfAsgO|6x(MH-kSj^y}Y;r}x?jD;8)w0|`&!(2EyGUmR?n0asy9ez$5(
zLmSySu`@*htT5MUxBBb}U@h%BbTntTZRk=wPS
zZl_0N&CcBAK4}tM#lrI}xXLW}+FAMu%7gKsBW>y-(98P%bHqPqJX5A=_SJ-YMFxiA
z1>(~w*az;3+(c*wtlS?Cdu%R!T{Zjr6T4CB3x^MOL|HQ?p8Bp$Rcaoq!xa+~PV0rk
znI{nwDy@fx$-2m#eIjcVB@(qQB~>_<~nwIo0mT$^5EQx
zx?_b(XR}LN*sRRdY}N4h8RNDNax$B08bT9#M{JlEu(zUni*eG%cq3wyV
zKz>McYAPBzd+;!I*iGa26DM}i&lgpWx~-(XL3|RqB(gf64$=~jF!Cl`wYqX3J56oa
z7-EpFUeq?weGB0hd;{SWZPolfjNw;*bE~9bQSRjq=Mh}=3kZumqZef8_S;%8X{o0c
ze+a8Dju2tuqPd9_+7lY7k(RH|8hw@#qGM(rShPpD+5O(3=_E)Q5l({f1j(fGGIsr(
z-$-`6)e4k{nnF`ihRM9aK`G`FjYYaFj)q$`9bR-Ewn643z$y3Q2ixzjkqu}Qxx@HAntL!!Iy^Iox|-r{R1bUN
z%xJRzxb9{czm0s3zO;&oNg8$XN~adb>bKCwYVpx>#|4FvmT$1<_U1a|XrrfS@F#D<
zkZp80tKu0rkcz7EV&eATzC!WH@Fqaggph6;GP1BKeNXd@xN#$D!JEP=}2T4KHd=3GFPp<6oxn3Z8^S#EzGdqz3Te;0pO)
zVo{BX7WSaKdsh`dsxdLjhA^UAjJHJD6PjhWQ#0xc_90niCQn7XGY;vW_k7LBbg)#-
z7@L9rl?3?caQEc)LWP|`O}1V=2ZScEE&+Xbk;UvwyXD{W#+RUQcdkLJIhg=DH`-(n
z>pJ92H0ett0WsiP&RbLZ=&j_$T$f!mkdl$+Wt=^Wcah-o)#4i$6B}baBE|hN=l2L?
zD$^XU1kyO>Su=~nFt#BgkezeoRmPFh=W}G_f=;R!;$AvM*78*hP?HT=ly9Y+I5G7j
z>uG1Mngaf`WxAx*R$BDU*Hsgwn^_63@IHL;qI1;ZF7fa}rgS*p)LYsJjs;OnN36cg
z?wmQc9y_E1VKc~6ZC}F@b&W!nZ~MhtNkEa!?wf-hJVm1*W4?Tb#rqmt+u8;`&i}pT
zDhadz)(u$UcvBvTrZGSScnCh;9sWq_V@J1)p^QYzP}B>iOI~2-=b{_Q!UY_a;hCTZ
z@H5EC
zNLerHIBmXyOz~S_Iz!5<^G2)KR`YC+9>vLgbz{04H}2aF*#u`)?4hgEyxvoD8g$k_{f*ts}uOZpRx$@27?I2W<&Sg4?*QhXD!c^l2jGCO!MG_JbWW~ijgIKl|
zu5z3DQ6E!E%>XX{hjnVxzG9^X*TomqhENW>x5O@zy4I|~cxqWs{gXvBlo!sOED+&!
zT!&r8(EnCOjVq)X;HP~|j8&IhP~5)Dwhp<}T?S-|N@fJ(06jaq0wiyA^gEykr>=6F
z$)nL8FH=-h0GijDQn8zjoBsS+TvD>5j)d`y@9!0m@{)lPvA(kAPfhN_7dM%t0n`Ppv!F*WeD_P
zo-MJtlpfb)zqe4n;!_?fq{FDpgw2kxw>I>WAk=p$WSk~(tE*?y
z)pEN2IKraDuOnt}fIg+8R3w|Qp`qb24yV#*JCVqhF>AKbM>vhGh=g^V2ZF5wcV-u+
z0qfdZFSu&Gs@l|BMU$tyDGt%9)aQ*M({1rN##<8*XEU&|&Mmt8&oq{$Ifq!kzHU--
zEkUmEZQ{ki@IV@53Wer?AL*qo%|m;89vm{nwuT>4jvb?CXOx)XPQwoF^30sDo9UI}
zOyg{*_5y(m*Vet=?Xii8M8?cg@n9{>SJe1yk=|m{)c^2J8IK2wZQJ{cR#wMD{jGP0
zXYiXi^nwx82r3?Fk^|jK46L@#h3=TRLSakDzYU|Fnocb-=>Ak8fuXP;J_OnM^`FdT
zCKe_VgP7He2Um89`ZKo(r{NIn+xoCp*U+F?ugu)JgLy74A=T-zwuwFS+uKbcI9y43
zzs&C(;T0?QLG(7Wh?p3j9rbrgPOc$4?9y`sC1R)vCn_X*RYeiq?rU
zRUpSt0gYz-XLY{e%JaE_92E=zIeAY;j>pHv;agA_NTrYZ1d+}E_$P2>yp-bY1GQU{
zABO#)Y$%M9qVRLl;pxB5gI|l;Jv|?cVVAkmL9<h1|7?krJPXDUsh8qD&+Hwu$Eepqj&Vq9}THsgaa%4~ReDp((mI!aia9-*1$JaF}N7I@&TUts0{4A9QSz#oI&~d*jSRCfC)~)@=*OuG3=xQ^mptYl{Dt$3Is=`U-t8P%(Zg~Ve7;HuUIN<<
z%M%x$Qsc_%g1GBEbQp!{